vibeview 0.18.0 → 0.20.0

package/dist/cli.js

@@ -6,14 +6,16 @@ import {
   clearDevState,
   dev,
   fetchFinalSummary,
+  formatDuration,
   killOwnedMetro,
+  loadDevConfig,
   newTransitionState,
   printOutcomeLine,
   printTransition,
   readDevState,
   readMetroState,
   runAgentVerb
-} from "./chunk-MGP3UR7P.js";
+} from "./chunk-GUCKFB4K.js";
 import {
   ApiClient,
   EXIT_INFRA_ERROR,
@@ -26,7 +28,7 @@ import {
   resolveAuth,
   saveConfig,
   uploadApp
-} from "./chunk-BJEDH672.js";
+} from "./chunk-MCCXPIGE.js";
 
 // src/cli.ts
 import { createRequire } from "module";
@@ -1210,7 +1212,7 @@ async function buildsList(opts, deps) {
     }
   }
   try {
-    const { builds: builds2 } = await d.listCloudBuilds(limit);
+    const { builds: builds2 } = await d.listCloudBuilds(limit !== void 0 ? { limit } : void 0);
     if (opts.json) {
       console.log(JSON.stringify(builds2, null, 2));
     } else {
@@ -1378,9 +1380,357 @@ function printError(opts, err) {
   console.error(chalk11.red(`error: ${message}`));
 }
 
-// src/commands/whoami.ts
+// src/commands/submit.ts
 import chalk12 from "chalk";
-function defaultDeps2(opts) {
+function defaultDeps2(client) {
+  return {
+    createSubmission: client.createSubmission.bind(client),
+    getSubmission: client.getSubmission.bind(client),
+    getSubmissionLog: client.getSubmissionLog.bind(client),
+    listCloudBuilds: client.listCloudBuilds.bind(client)
+  };
+}
+var POLL_INTERVAL_MS2 = 2e3;
+var SUBMIT_PLATFORMS = ["ios", "tvos", "android", "androidtv"];
+function isSubmitPlatform(p) {
+  return SUBMIT_PLATFORMS.includes(p);
+}
+var PLAY_TRACKS = ["internal", "alpha", "beta", "production"];
+var RELEASE_STATUSES = ["completed", "draft", "inProgress"];
+function submitConfigFor(cwd, platform) {
+  let cfg;
+  try {
+    cfg = loadDevConfig(cwd);
+  } catch (err) {
+    console.error(
+      chalk12.yellow(
+        `warning: vibeview.json could not be read \u2014 ignoring submit defaults (${err instanceof Error ? err.message : String(err)})`
+      )
+    );
+    return {};
+  }
+  const raw = cfg?.platforms?.[platform]?.submit;
+  if (raw === void 0) return {};
+  const path = `vibeview.json: platforms.${platform}.submit`;
+  if (typeof raw !== "object" || raw === null || Array.isArray(raw)) {
+    throw new UsageError(`${path} must be an object`);
+  }
+  const s = raw;
+  for (const key of ["track", "releaseStatus", "ascKey"]) {
+    if (s[key] !== void 0 && (typeof s[key] !== "string" || !s[key])) {
+      throw new UsageError(`${path}.${key} must be a non-empty string`);
+    }
+  }
+  if (s.rollout !== void 0 && typeof s.rollout !== "number") {
+    throw new UsageError(`${path}.rollout must be a number strictly between 0 and 1`);
+  }
+  if (s.changesNotSentForReview !== void 0 && typeof s.changesNotSentForReview !== "boolean") {
+    throw new UsageError(`${path}.changesNotSentForReview must be a boolean`);
+  }
+  return s;
+}
+function validateRolloutFraction(f, source, raw = f) {
+  if (!Number.isFinite(f) || !(f > 0 && f < 1)) {
+    throw new UsageError(
+      `${source} must be a fraction strictly between 0 and 1 (e.g. 0.25) \u2014 got "${String(raw)}"`
+    );
+  }
+  return f;
+}
+var SUBMISSION_TERMINAL_STATUSES = /* @__PURE__ */ new Set(["succeeded", "failed"]);
+var MAX_CONSECUTIVE_POLL_FAILURES2 = 5;
+function emit(json, evt) {
+  if (json) console.log(JSON.stringify(evt));
+}
+async function submitCommand(opts, deps) {
+  if (!opts.platform || !isSubmitPlatform(opts.platform)) {
+    throw new UsageError(
+      `--platform is required and must be one of ${SUBMIT_PLATFORMS.join(", ")}`
+    );
+  }
+  const platform = opts.platform;
+  const androidFamily = platform === "android" || platform === "androidtv";
+  if (opts.build && opts.latest) {
+    throw new UsageError("pass either --build <id> or --latest, not both");
+  }
+  if (!opts.build && !opts.latest) {
+    throw new UsageError(
+      "pass --build <id> (see `vibeview builds list`) or --latest (the newest succeeded production build for this platform)"
+    );
+  }
+  if (!androidFamily && opts.track !== void 0) {
+    throw new UsageError(`--track only applies to android/androidtv (Play) \u2014 not ${platform}`);
+  }
+  if (!androidFamily && opts.package !== void 0) {
+    throw new UsageError(`--package only applies to android/androidtv (Play) \u2014 not ${platform}`);
+  }
+  if (androidFamily && opts.ascKey !== void 0) {
+    throw new UsageError(`--asc-key only applies to ios/tvos (TestFlight) \u2014 not ${platform}`);
+  }
+  if (!androidFamily && opts.releaseStatus !== void 0) {
+    throw new UsageError(
+      `--release-status only applies to android/androidtv (Play) \u2014 not ${platform}`
+    );
+  }
+  if (!androidFamily && opts.rollout !== void 0) {
+    throw new UsageError(`--rollout only applies to android/androidtv (Play) \u2014 not ${platform}`);
+  }
+  const cfgDefaults = submitConfigFor(process.cwd(), platform);
+  const track = opts.track ?? (androidFamily ? cfgDefaults.track : void 0);
+  const releaseStatus = opts.releaseStatus ?? (androidFamily ? cfgDefaults.releaseStatus : void 0);
+  const statusUnchanged = opts.releaseStatus === void 0 || opts.releaseStatus === cfgDefaults.releaseStatus;
+  const rollout = opts.rollout !== void 0 ? validateRolloutFraction(Number(opts.rollout), "--rollout", opts.rollout) : androidFamily && statusUnchanged && cfgDefaults.rollout !== void 0 ? validateRolloutFraction(
+    cfgDefaults.rollout,
+    `vibeview.json platforms.${platform}.submit.rollout`
+  ) : void 0;
+  const changesNotSentForReview = androidFamily ? cfgDefaults.changesNotSentForReview : void 0;
+  const ascKey2 = opts.ascKey ?? (!androidFamily ? cfgDefaults.ascKey : void 0);
+  if (track !== void 0 && !PLAY_TRACKS.includes(track)) {
+    const source = opts.track !== void 0 ? "--track" : `vibeview.json platforms.${platform}.submit.track`;
+    throw new UsageError(`${source} must be one of ${PLAY_TRACKS.join(", ")} \u2014 got "${track}"`);
+  }
+  if (releaseStatus !== void 0 && !RELEASE_STATUSES.includes(releaseStatus)) {
+    const source = opts.releaseStatus !== void 0 ? "--release-status" : `vibeview.json platforms.${platform}.submit.releaseStatus`;
+    throw new UsageError(
+      `${source} must be one of ${RELEASE_STATUSES.join(", ")} \u2014 got "${releaseStatus}"`
+    );
+  }
+  if (rollout !== void 0 && releaseStatus !== "inProgress") {
+    throw new UsageError(
+      `a rollout fraction requires release status "inProgress" (a staged rollout) \u2014 got "${releaseStatus ?? "completed"}"`
+    );
+  }
+  if (releaseStatus === "inProgress" && rollout === void 0) {
+    throw new UsageError(
+      `release status "inProgress" requires a rollout fraction \u2014 pass --rollout (e.g. --rollout 0.1)`
+    );
+  }
+  const { token, baseUrl } = resolveAuth(opts);
+  const client = new ApiClient(baseUrl, token);
+  const d = deps ?? defaultDeps2(client);
+  try {
+    const buildId = opts.build ?? await resolveLatestBuild(platform, d);
+    const sub = await d.createSubmission({
+      build: buildId,
+      platform,
+      ...track !== void 0 ? { track } : {},
+      ...opts.package !== void 0 ? { package: opts.package } : {},
+      ...ascKey2 !== void 0 ? { ascKey: ascKey2 } : {},
+      ...releaseStatus !== void 0 ? { releaseStatus } : {},
+      ...rollout !== void 0 ? { rollout } : {},
+      ...changesNotSentForReview !== void 0 ? { changesNotSentForReview } : {}
+    });
+    emit(opts.json, {
+      event: "submission_created",
+      id: sub.id,
+      build_id: sub.build_id,
+      platform: sub.platform
+    });
+    if (opts.wait === false) {
+      if (!opts.json) console.log(sub.id);
+      process.exitCode = 0;
+      return;
+    }
+    if (!opts.json) {
+      console.error(`  ${chalk12.cyan(sub.id)}  ${chalk12.dim(`[${sub.platform}]`)}`);
+    }
+    const final = await followSubmission(sub, opts, d);
+    if (!opts.json && final.status === "succeeded" && (final.release_status ?? releaseStatus) === "draft") {
+      console.error(
+        chalk12.dim("release status: draft \u2014 activate it from the Play Console when ready")
+      );
+    }
+    process.exitCode = final.status === "succeeded" ? 0 : 1;
+  } catch (err) {
+    printError2(opts, err);
+    process.exitCode = 1;
+  }
+}
+async function resolveLatestBuild(platform, deps) {
+  const { builds: builds2 } = await deps.listCloudBuilds({
+    platform,
+    status: "succeeded",
+    distribution: "production",
+    limit: 200
+  });
+  const match = builds2.find(
+    (b) => b.platform === platform && b.distribution === "production" && b.status === "succeeded" && b.has_artifact
+  );
+  if (!match) {
+    throw new Error(
+      `no submittable ${platform} build found \u2014 --latest needs a succeeded production build whose artifact is still stored. Run \`vibeview build --cloud --production --platform ${platform}\` first, or pass --build <id> (see \`vibeview builds list\`).`
+    );
+  }
+  if (match.platform !== platform) {
+    throw new Error(
+      `--latest resolved build ${match.id}, which is ${match.platform}, not ${platform} \u2014 refusing to submit it.`
+    );
+  }
+  return match.id;
+}
+async function followSubmission(created, opts, deps) {
+  const pollIntervalMs = deps.pollIntervalMs ?? POLL_INTERVAL_MS2;
+  let offset = 0;
+  let status = created.status;
+  let consecutiveFailures = 0;
+  let printedQueued = false;
+  let printedRunning = false;
+  while (!SUBMISSION_TERMINAL_STATUSES.has(status)) {
+    try {
+      const log = await deps.getSubmissionLog(created.id, offset);
+      if (log.status === "queued" && !printedQueued) {
+        printedQueued = true;
+        if (opts.json) {
+          emit(opts.json, { event: "status", id: created.id, status: "queued" });
+        } else {
+          console.error(chalk12.dim("\u23F3 queued \u2014 waiting for a submission slot"));
+        }
+      } else if (log.status === "running" && !printedRunning) {
+        printedRunning = true;
+        if (opts.json) {
+          emit(opts.json, { event: "status", id: created.id, status: "running" });
+        } else {
+          console.error(`${chalk12.cyan("\u25B6")} submitting`);
+        }
+      }
+      if (log.content) {
+        if (opts.json) {
+          emit(opts.json, { event: "submission_log", id: created.id, content: log.content });
+        } else {
+          process.stdout.write(log.content);
+        }
+      }
+      offset = log.offset;
+      status = log.status;
+      consecutiveFailures = 0;
+    } catch (err) {
+      if (err instanceof NotFoundError) throw err;
+      consecutiveFailures++;
+      if (consecutiveFailures >= MAX_CONSECUTIVE_POLL_FAILURES2) {
+        const message = err instanceof Error ? err.message : String(err);
+        throw new Error(
+          `submission poll failed ${consecutiveFailures} times in a row, giving up: ${message}
+The submission continues server-side \u2014 see its outcome on the Builds page in the dashboard (expand build ${created.build_id}'s row \u2192 Submissions).`
+        );
+      }
+    }
+    if (!SUBMISSION_TERMINAL_STATUSES.has(status)) {
+      await new Promise((r) => setTimeout(r, pollIntervalMs));
+    }
+  }
+  let final;
+  try {
+    final = await deps.getSubmission(created.id);
+  } catch {
+    final = { ...created, status };
+  }
+  emit(opts.json, {
+    event: "submission_finished",
+    id: final.id,
+    status: final.status,
+    error_summary: final.error_summary
+  });
+  if (!opts.json) {
+    const ok = final.status === "succeeded";
+    const mark = ok ? chalk12.green("\u2713") : chalk12.red("\u2717");
+    const duration = formatDuration(final.started_at, final.finished_at);
+    let line = `${mark} ${final.status}`;
+    if (duration) line += ` (${duration})`;
+    if (final.error_summary) line += ` \u2014 ${final.error_summary}`;
+    console.error(line);
+  }
+  return final;
+}
+function printError2(opts, err) {
+  const message = err instanceof Error ? err.message : String(err);
+  if (opts.json) console.log(JSON.stringify({ event: "error", message }));
+  console.error(chalk12.red(`error: ${message}`));
+}
+
+// src/commands/versions.ts
+import chalk13 from "chalk";
+function defaultDeps3(client) {
+  return {
+    listAppVersions: client.listAppVersions.bind(client),
+    setAppVersion: client.setAppVersion.bind(client)
+  };
+}
+var VERSION_PLATFORMS = ["ios", "android", "tvos", "androidtv"];
+async function versionsList(opts, deps) {
+  if (!opts.app) {
+    throw new UsageError("--app <id> is required (see `vibeview list-apps` for ids)");
+  }
+  const { token, baseUrl } = resolveAuth(opts);
+  const client = new ApiClient(baseUrl, token);
+  const d = deps ?? defaultDeps3(client);
+  try {
+    const response = await d.listAppVersions(opts.app);
+    if (opts.json) {
+      console.log(JSON.stringify(response, null, 2));
+    } else {
+      process.stdout.write(formatVersionsHuman(response.versions));
+    }
+    process.exitCode = 0;
+  } catch (err) {
+    printError3(opts, err);
+    process.exitCode = 1;
+  }
+}
+async function versionsSet(buildNumber, opts, deps) {
+  if (!opts.app) {
+    throw new UsageError("--app <id> is required (see `vibeview list-apps` for ids)");
+  }
+  if (!opts.platform || !VERSION_PLATFORMS.includes(opts.platform)) {
+    throw new UsageError(
+      `--platform is required and must be one of ${VERSION_PLATFORMS.join(", ")}`
+    );
+  }
+  const parsed = /^\d+$/.test(buildNumber) ? Number(buildNumber) : NaN;
+  if (!Number.isSafeInteger(parsed) || parsed < 0) {
+    throw new UsageError(`build number must be a non-negative integer \u2014 got "${buildNumber}"`);
+  }
+  const { token, baseUrl } = resolveAuth(opts);
+  const client = new ApiClient(baseUrl, token);
+  const d = deps ?? defaultDeps3(client);
+  try {
+    const version = await d.setAppVersion(opts.app, opts.platform, parsed);
+    if (opts.json) {
+      console.log(JSON.stringify(version));
+    } else {
+      console.log(
+        chalk13.green(`\u2713 ${version.platform} build number set to ${version.build_number}`) + chalk13.dim(
+          " \u2014 the next autoIncrement production build gets " + (version.build_number + 1)
+        )
+      );
+    }
+    process.exitCode = 0;
+  } catch (err) {
+    printError3(opts, err);
+    process.exitCode = 1;
+  }
+}
+var HEADERS2 = ["PLATFORM", "BUILD NUMBER", "UPDATED"];
+function formatVersionsHuman(versions2) {
+  if (versions2.length === 0) {
+    return "No version counters yet \u2014 they appear after the first autoIncrement production build, or seed one with `vibeview versions set`.\n";
+  }
+  const rows = versions2.map((v) => [v.platform, String(v.build_number), v.updated_at ?? ""]);
+  const widths = HEADERS2.map((h, i) => Math.max(h.length, ...rows.map((r) => r[i].length)));
+  const padCells = (cells) => cells.map((c, i) => c.padEnd(widths[i]));
+  const join3 = (cells) => cells.join("  ").trimEnd();
+  const lines = [chalk13.bold(join3(padCells(HEADERS2)))];
+  for (const row of rows) lines.push(join3(padCells(row)));
+  return lines.join("\n") + "\n";
+}
+function printError3(opts, err) {
+  const message = err instanceof Error ? err.message : String(err);
+  if (opts.json) console.log(JSON.stringify({ event: "error", message }));
+  console.error(chalk13.red(`error: ${message}`));
+}
+
+// src/commands/whoami.ts
+import chalk14 from "chalk";
+function defaultDeps4(opts) {
   const { token, baseUrl } = resolveAuth(opts);
   const client = new ApiClient(baseUrl, token);
   return { fetchMe: () => client.whoAmI() };
@@ -1392,7 +1742,7 @@ function effectiveRole(role, tokenRole) {
   return (RANK[tokenRole] ?? 3) < (RANK[role] ?? 3) ? tokenRole : role;
 }
 async function whoAmI(opts, deps) {
-  const d = deps ?? defaultDeps2(opts);
+  const d = deps ?? defaultDeps4(opts);
   try {
     const me = await d.fetchMe();
     const effective = effectiveRole(me.role, me.token_role);
@@ -1401,27 +1751,27 @@ async function whoAmI(opts, deps) {
       process.exitCode = 0;
       return;
     }
-    console.log(`${chalk12.bold("Logged in as")}  ${me.email}`);
+    console.log(`${chalk14.bold("Logged in as")}  ${me.email}`);
     if (me.memberships.length === 1) {
-      console.log(`${chalk12.bold("Organization")}   ${me.memberships[0].organization_name}`);
+      console.log(`${chalk14.bold("Organization")}   ${me.memberships[0].organization_name}`);
     } else if (me.memberships.length > 1) {
-      console.log(chalk12.bold("Organizations"));
+      console.log(chalk14.bold("Organizations"));
       for (const m of me.memberships) {
         console.log(`  ${m.organization_name} (${m.role})`);
       }
     }
-    console.log(`${chalk12.bold("Member role")}    ${me.role ?? "\u2014"}`);
-    console.log(`${chalk12.bold("Token role")}     ${me.token_role ?? "\u2014 (session auth)"}`);
-    console.log(`${chalk12.bold("Effective role")} ${effective ?? "\u2014"}`);
+    console.log(`${chalk14.bold("Member role")}    ${me.role ?? "\u2014"}`);
+    console.log(`${chalk14.bold("Token role")}     ${me.token_role ?? "\u2014 (session auth)"}`);
+    console.log(`${chalk14.bold("Effective role")} ${effective ?? "\u2014"}`);
     if (me.is_superadmin) {
-      console.log(chalk12.dim("Superadmin (platform-wide; does not raise the org role above)"));
+      console.log(chalk14.dim("Superadmin (platform-wide; does not raise the org role above)"));
     }
     if (me.role === "admin" && me.token_role && me.token_role !== "admin") {
       console.log(
-        chalk12.yellow(
+        chalk14.yellow(
           `
-Your account is admin, but this CLI token is ${me.token_role}. The effective role is the lower of the two, so admin-only commands (such as ${chalk12.bold("vibeview env set")}) will fail with a permissions error.
-Create an admin API token in the dashboard and use ${chalk12.bold("--token")} or ${chalk12.bold("VIBEVIEW_API_TOKEN")}.`
+Your account is admin, but this CLI token is ${me.token_role}. The effective role is the lower of the two, so admin-only commands (such as ${chalk14.bold("vibeview env set")}) will fail with a permissions error.
+Create an admin API token in the dashboard and use ${chalk14.bold("--token")} or ${chalk14.bold("VIBEVIEW_API_TOKEN")}.`
         )
       );
     }
@@ -1431,7 +1781,7 @@ Create an admin API token in the dashboard and use ${chalk12.bold("--token")} or
     if (opts.json) {
       console.log(JSON.stringify({ event: "error", message }));
     }
-    console.error(chalk12.red(`error: ${message}`));
+    console.error(chalk14.red(`error: ${message}`));
     process.exitCode = 1;
   }
 }
@@ -1439,7 +1789,7 @@ Create an admin API token in the dashboard and use ${chalk12.bold("--token")} or
 // src/commands/env.ts
 import { chmod, open as open2, readFile as readFileAsync } from "fs/promises";
 import { basename } from "path";
-import chalk13 from "chalk";
+import chalk15 from "chalk";
 import { password } from "@inquirer/prompts";
 
 // src/lib/gitignore.ts
@@ -1466,7 +1816,7 @@ async function writeSecureFile(path, content) {
   }
   await chmod(path, 384);
 }
-function defaultDeps3(client) {
+function defaultDeps5(client) {
   return {
     listVars: (app) => client.listBuildEnvVars(app),
     setVar: (body) => client.setBuildEnvVar(body),
@@ -1495,11 +1845,11 @@ function defaultDeps3(client) {
     isIgnored: (path) => isGitIgnored(path),
     writeFile: writeSecureFile,
     readFile: (path) => readFileAsync(path),
-    warn: (message) => console.error(chalk13.yellow(`warning: ${message}`))
+    warn: (message) => console.error(chalk15.yellow(`warning: ${message}`))
   };
 }
 async function envList(opts, deps) {
-  const d = deps ?? defaultDeps3(clientFor(opts));
+  const d = deps ?? defaultDeps5(clientFor(opts));
   try {
     const { variables } = await d.listVars(opts.app);
     if (opts.json) {
@@ -1509,7 +1859,7 @@ async function envList(opts, deps) {
     }
     process.exitCode = 0;
   } catch (err) {
-    printError2(opts, err);
+    printError4(opts, err);
     process.exitCode = 1;
   }
 }
@@ -1517,22 +1867,22 @@ function formatEnvVarsHuman(variables) {
   if (variables.length === 0) {
     return "No build variables found.\n";
   }
-  const HEADERS3 = ["NAME", "VISIBILITY", "SCOPE", "HINT"];
+  const HEADERS4 = ["NAME", "VISIBILITY", "SCOPE", "HINT"];
   const rows = variables.map((v) => [
     v.name,
     v.is_file ? `${v.visibility} (file)` : v.visibility,
     v.app_public_id ?? "org-wide",
     v.value_hint ?? ""
   ]);
-  const widths = HEADERS3.map((h, i) => Math.max(h.length, ...rows.map((r) => r[i].length)));
+  const widths = HEADERS4.map((h, i) => Math.max(h.length, ...rows.map((r) => r[i].length)));
   const padCells = (cells) => cells.map((c, i) => c.padEnd(widths[i]));
   const join3 = (cells) => cells.join("  ").trimEnd();
-  const lines = [chalk13.bold(join3(padCells(HEADERS3)))];
+  const lines = [chalk15.bold(join3(padCells(HEADERS4)))];
   for (const row of rows) lines.push(join3(padCells(row)));
   return lines.join("\n") + "\n";
 }
 async function envSet(name, value, opts, deps) {
-  const d = deps ?? defaultDeps3(clientFor(opts));
+  const d = deps ?? defaultDeps5(clientFor(opts));
   let resolvedValue = value;
   if (resolvedValue === void 0 && !opts.file) {
     if (opts.json || !d.isTTY) {
@@ -1558,7 +1908,7 @@ async function envSet(name, value, opts, deps) {
     printSetResult(opts, result);
     process.exitCode = 0;
   } catch (err) {
-    printError2(opts, err);
+    printError4(opts, err);
     process.exitCode = 1;
   }
 }
@@ -1577,26 +1927,26 @@ function printSetResult(opts, result) {
   if (opts.json) {
     console.log(JSON.stringify(result));
   } else {
-    console.log(chalk13.green(`\u2713 set ${result.name} (${result.visibility})`));
+    console.log(chalk15.green(`\u2713 set ${result.name} (${result.visibility})`));
   }
 }
 async function envRm(name, opts, deps) {
-  const d = deps ?? defaultDeps3(clientFor(opts));
+  const d = deps ?? defaultDeps5(clientFor(opts));
   try {
     await d.rmVar({ name, app: opts.app });
     if (opts.json) {
       console.log(JSON.stringify({ event: "deleted", name }));
     } else {
-      console.log(chalk13.green(`\u2713 removed ${name}`));
+      console.log(chalk15.green(`\u2713 removed ${name}`));
     }
     process.exitCode = 0;
   } catch (err) {
-    printError2(opts, err);
+    printError4(opts, err);
     process.exitCode = 1;
   }
 }
 async function envPull(opts, deps) {
-  const d = deps ?? defaultDeps3(clientFor(opts));
+  const d = deps ?? defaultDeps5(clientFor(opts));
   const outPath = opts.out ?? ".env";
   try {
     const { variables } = await d.pullVars(opts.app);
@@ -1619,11 +1969,11 @@ async function envPull(opts, deps) {
     if (opts.json) {
       console.log(JSON.stringify({ event: "pulled", path: outPath, count: variables.length }));
     } else {
-      console.log(chalk13.green(`\u2713 wrote ${variables.length} variable(s) to ${outPath}`));
+      console.log(chalk15.green(`\u2713 wrote ${variables.length} variable(s) to ${outPath}`));
     }
     process.exitCode = 0;
   } catch (err) {
-    printError2(opts, err);
+    printError4(opts, err);
     process.exitCode = 1;
   }
 }
@@ -1655,10 +2005,10 @@ function escapeEnvValue(value) {
   }
   return `"${value.replace(/\\/g, "\\\\").replace(/"/g, '\\"')}"`;
 }
-function printError2(opts, err) {
+function printError4(opts, err) {
   const message = err instanceof Error ? err.message : String(err);
   if (opts.json) console.log(JSON.stringify({ event: "error", message }));
-  console.error(chalk13.red(`error: ${message}`));
+  console.error(chalk15.red(`error: ${message}`));
 }
 
 // src/commands/credentials.ts
@@ -1670,13 +2020,13 @@ import {
 } from "fs/promises";
 import { mkdirSync } from "fs";
 import { basename as basename2, extname, join } from "path";
-import chalk14 from "chalk";
+import chalk16 from "chalk";
 import { input, password as password2 } from "@inquirer/prompts";
 function clientFor2(opts) {
   const { token, baseUrl } = resolveAuth(opts);
   return new ApiClient(baseUrl, token);
 }
-function defaultDeps4(client) {
+function defaultDeps6(client) {
   return {
     addCredential: (body) => client.addSigningCredential({
       platform: body.platform,
@@ -1721,6 +2071,16 @@ function defaultDeps4(client) {
       }
       await client.deleteAscKey(match.id);
     },
+    addPlayKey: (body) => client.addPlayKey(body),
+    listPlayKeys: () => client.listPlayKeys(),
+    deletePlayKey: async (name) => {
+      const { keys } = await client.listPlayKeys();
+      const match = keys.find((k) => k.name === name);
+      if (!match) {
+        throw new Error(`No Google Play key named "${name}" found.`);
+      }
+      await client.deletePlayKey(match.id);
+    },
     prompt: ({ message, hidden }) => hidden ? password2({ message }) : input({ message }),
     isTTY: Boolean(process.stdin.isTTY),
     readFile: (path) => readFileAsync2(path),
@@ -1733,7 +2093,7 @@ function defaultDeps4(client) {
     mkdir: (dir) => mkdirSync(dir, { recursive: true }),
     writeFile: (path, data, mode) => writeFileAsync(path, data, mode !== void 0 ? { mode } : void 0),
     chmod: (path, mode) => chmodAsync(path, mode),
-    warn: (message) => console.error(chalk14.yellow(`warning: ${message}`))
+    warn: (message) => console.error(chalk16.yellow(`warning: ${message}`))
   };
 }
 var ANDROID_KIND = "android_keystore";
@@ -1743,7 +2103,7 @@ function isCredentialPlatform(p) {
   return CREDENTIAL_PLATFORMS.includes(p);
 }
 async function credentialsAdd(opts, deps) {
-  const d = deps ?? defaultDeps4(clientFor2(opts));
+  const d = deps ?? defaultDeps6(clientFor2(opts));
   if (!opts.platform || !isCredentialPlatform(opts.platform)) {
     throw new UsageError('--platform is required and must be "ios", "android", or "tvos"');
   }
@@ -1802,16 +2162,16 @@ async function credentialsAdd(opts, deps) {
     if (opts.json) {
       console.log(JSON.stringify(result));
     } else {
-      console.log(chalk14.green(`\u2713 added ${result.name} (${result.platform})`));
+      console.log(chalk16.green(`\u2713 added ${result.name} (${result.platform})`));
     }
     process.exitCode = 0;
   } catch (err) {
-    printError3(opts, err);
+    printError5(opts, err);
     process.exitCode = 1;
   }
 }
 async function credentialsGenerate(opts, deps) {
-  const d = deps ?? defaultDeps4(clientFor2(opts));
+  const d = deps ?? defaultDeps6(clientFor2(opts));
   if (!opts.platform) {
     throw new UsageError('--platform is required and must be "android", "ios", or "tvos"');
   }
@@ -1860,27 +2220,27 @@ async function credentialsGenerate(opts, deps) {
     }
     if (opts.json) {
     } else {
-      console.log(chalk14.green(`\u2713 generated ${result.name} (android)`));
+      console.log(chalk16.green(`\u2713 generated ${result.name} (android)`));
       console.log("");
-      console.log(`  Keystore saved to: ${chalk14.bold(savedTo)}`);
-      console.log(`  Key alias:         ${chalk14.bold(result.key_alias)}`);
-      console.log(`  Store password:    ${chalk14.bold(result.store_password)}`);
-      console.log(`  Key password:      ${chalk14.bold(result.key_password)}`);
+      console.log(`  Keystore saved to: ${chalk16.bold(savedTo)}`);
+      console.log(`  Key alias:         ${chalk16.bold(result.key_alias)}`);
+      console.log(`  Store password:    ${chalk16.bold(result.store_password)}`);
+      console.log(`  Key password:      ${chalk16.bold(result.key_password)}`);
       console.log("");
       console.log(
-        chalk14.yellow(
+        chalk16.yellow(
           "  These are shown ONCE \u2014 VibeView cannot recover the keystore file or its passwords. Back them up somewhere safe."
         )
       );
       console.log(
-        chalk14.yellow(
+        chalk16.yellow(
           "  The credential is already uploaded and active for android and androidtv production builds."
         )
       );
     }
     process.exitCode = 0;
   } catch (err) {
-    printError3(opts, err);
+    printError5(opts, err);
     process.exitCode = 1;
   }
 }
@@ -1899,29 +2259,29 @@ async function generateAppleCredential(platform, opts, d) {
     if (opts.json) {
       console.log(JSON.stringify(result));
     } else {
-      console.log(chalk14.green(`\u2713 generated ${result.name} (${result.platform})`));
+      console.log(chalk16.green(`\u2713 generated ${result.name} (${result.platform})`));
       console.log("");
-      console.log(`  Scope:   ${chalk14.bold(result.app_public_id ?? "org-wide")}`);
+      console.log(`  Scope:   ${chalk16.bold(result.app_public_id ?? "org-wide")}`);
       const expires = formatExpires(result);
       if (expires) {
-        console.log(`  Expires: ${chalk14.bold(expires)}`);
+        console.log(`  Expires: ${chalk16.bold(expires)}`);
       }
       console.log("");
       console.log(
         `  The certificate and provisioning profile are stored with VibeView and already active for ${result.platform} production builds.`
       );
       console.log(
-        `  Run ${chalk14.bold(`vibeview credentials download ${result.name}`)} if you need the files locally.`
+        `  Run ${chalk16.bold(`vibeview credentials download ${result.name}`)} if you need the files locally.`
       );
     }
     process.exitCode = 0;
   } catch (err) {
-    printError3(opts, err);
+    printError5(opts, err);
     process.exitCode = 1;
   }
 }
 async function credentialsDownload(name, opts, deps) {
-  const d = deps ?? defaultDeps4(clientFor2(opts));
+  const d = deps ?? defaultDeps6(clientFor2(opts));
   const outDir = opts.out ?? process.cwd();
   try {
     const { credentials: credentials2 } = await d.listCredentials(opts.app);
@@ -1977,26 +2337,26 @@ async function credentialsDownload(name, opts, deps) {
       await d.chmod(path, 384);
     }
     if (!opts.json) {
-      console.log(chalk14.green(`\u2713 downloaded ${material.name} (${material.platform})`));
+      console.log(chalk16.green(`\u2713 downloaded ${material.name} (${material.platform})`));
       console.log("");
-      console.log(`  Saved to: ${chalk14.bold(savedTo)}`);
+      console.log(`  Saved to: ${chalk16.bold(savedTo)}`);
       if (profileSavedTo !== null) {
-        console.log(`  Profile:  ${chalk14.bold(profileSavedTo)}`);
+        console.log(`  Profile:  ${chalk16.bold(profileSavedTo)}`);
       }
       for (const [key, value] of Object.entries(material.passwords)) {
-        console.log(`  ${key}: ${chalk14.bold(value)}`);
+        console.log(`  ${key}: ${chalk16.bold(value)}`);
       }
       console.log("");
-      console.log(chalk14.yellow("  This download is recorded in your organization's audit log."));
+      console.log(chalk16.yellow("  This download is recorded in your organization's audit log."));
     }
     process.exitCode = 0;
   } catch (err) {
-    printError3(opts, err);
+    printError5(opts, err);
     process.exitCode = 1;
   }
 }
 async function ascKeyAdd(opts, deps) {
-  const d = deps ?? defaultDeps4(clientFor2(opts));
+  const d = deps ?? defaultDeps6(clientFor2(opts));
   if (!opts.keyId) {
     throw new UsageError("--key-id is required (the 10-character App Store Connect key id)");
   }
@@ -2018,25 +2378,25 @@ async function ascKeyAdd(opts, deps) {
     if (opts.json) {
       console.log(JSON.stringify(result));
     } else {
-      console.log(chalk14.green(`\u2713 added App Store Connect key ${result.name}`));
+      console.log(chalk16.green(`\u2713 added App Store Connect key ${result.name}`));
       console.log("");
-      console.log(`  Key ID:    ${chalk14.bold(result.key_id)}`);
-      console.log(`  Issuer ID: ${chalk14.bold(result.issuer_id)}`);
+      console.log(`  Key ID:    ${chalk16.bold(result.key_id)}`);
+      console.log(`  Issuer ID: ${chalk16.bold(result.issuer_id)}`);
       console.log("");
       console.log(
-        chalk14.yellow(
+        chalk16.yellow(
           "  The .p8 is stored encrypted and will never be shown again \u2014 keep your own copy somewhere safe."
         )
       );
     }
     process.exitCode = 0;
   } catch (err) {
-    printError3(opts, err);
+    printError5(opts, err);
     process.exitCode = 1;
   }
 }
 async function ascKeyList(opts, deps) {
-  const d = deps ?? defaultDeps4(clientFor2(opts));
+  const d = deps ?? defaultDeps6(clientFor2(opts));
   try {
     const { keys } = await d.listAscKeys();
     if (opts.json) {
@@ -2046,7 +2406,7 @@ async function ascKeyList(opts, deps) {
     }
     process.exitCode = 0;
   } catch (err) {
-    printError3(opts, err);
+    printError5(opts, err);
     process.exitCode = 1;
   }
 }
@@ -2054,32 +2414,108 @@ function formatAscKeysHuman(keys) {
   if (keys.length === 0) {
     return "No App Store Connect keys found.\n";
   }
-  const HEADERS3 = ["NAME", "KEY ID", "ISSUER ID", "CREATED"];
+  const HEADERS4 = ["NAME", "KEY ID", "ISSUER ID", "CREATED"];
   const rows = keys.map((k) => [k.name, k.key_id, k.issuer_id, k.created_at ?? ""]);
-  const widths = HEADERS3.map((h, i) => Math.max(h.length, ...rows.map((r) => r[i].length)));
+  const widths = HEADERS4.map((h, i) => Math.max(h.length, ...rows.map((r) => r[i].length)));
   const padCells = (cells) => cells.map((c, i) => c.padEnd(widths[i]));
   const join3 = (cells) => cells.join("  ").trimEnd();
-  const lines = [chalk14.bold(join3(padCells(HEADERS3)))];
+  const lines = [chalk16.bold(join3(padCells(HEADERS4)))];
   for (const row of rows) lines.push(join3(padCells(row)));
   return lines.join("\n") + "\n";
 }
 async function ascKeyRm(name, opts, deps) {
-  const d = deps ?? defaultDeps4(clientFor2(opts));
+  const d = deps ?? defaultDeps6(clientFor2(opts));
   try {
     await d.deleteAscKey(name);
     if (opts.json) {
       console.log(JSON.stringify({ event: "deleted", name }));
     } else {
-      console.log(chalk14.green(`\u2713 removed App Store Connect key ${name}`));
+      console.log(chalk16.green(`\u2713 removed App Store Connect key ${name}`));
     }
     process.exitCode = 0;
   } catch (err) {
-    printError3(opts, err);
+    printError5(opts, err);
+    process.exitCode = 1;
+  }
+}
+async function playKeyAdd(opts, deps) {
+  const d = deps ?? defaultDeps6(clientFor2(opts));
+  if (!opts.file) {
+    throw new UsageError(
+      "--file is required (the service-account JSON from Google Play Console \u2192 API access)"
+    );
+  }
+  try {
+    const file = await d.readFile(opts.file);
+    const result = await d.addPlayKey({
+      ...opts.name !== void 0 ? { name: opts.name } : {},
+      file,
+      filename: basename2(opts.file)
+    });
+    if (opts.json) {
+      console.log(JSON.stringify(result));
+    } else {
+      console.log(chalk16.green(`\u2713 added Google Play key ${result.name}`));
+      console.log("");
+      console.log(`  Service account: ${chalk16.bold(result.client_email)}`);
+      console.log("");
+      console.log(
+        chalk16.yellow(
+          "  The JSON key is stored encrypted and will never be shown again \u2014 keep your own copy somewhere safe."
+        )
+      );
+    }
+    process.exitCode = 0;
+  } catch (err) {
+    printError5(opts, err);
+    process.exitCode = 1;
+  }
+}
+async function playKeyList(opts, deps) {
+  const d = deps ?? defaultDeps6(clientFor2(opts));
+  try {
+    const { keys } = await d.listPlayKeys();
+    if (opts.json) {
+      console.log(JSON.stringify(keys, null, 2));
+    } else {
+      process.stdout.write(formatPlayKeysHuman(keys));
+    }
+    process.exitCode = 0;
+  } catch (err) {
+    printError5(opts, err);
+    process.exitCode = 1;
+  }
+}
+function formatPlayKeysHuman(keys) {
+  if (keys.length === 0) {
+    return "No Google Play keys found.\n";
+  }
+  const HEADERS4 = ["NAME", "CLIENT EMAIL", "CREATED"];
+  const rows = keys.map((k) => [k.name, k.client_email, k.created_at ?? ""]);
+  const widths = HEADERS4.map((h, i) => Math.max(h.length, ...rows.map((r) => r[i].length)));
+  const padCells = (cells) => cells.map((c, i) => c.padEnd(widths[i]));
+  const join3 = (cells) => cells.join("  ").trimEnd();
+  const lines = [chalk16.bold(join3(padCells(HEADERS4)))];
+  for (const row of rows) lines.push(join3(padCells(row)));
+  return lines.join("\n") + "\n";
+}
+async function playKeyRm(name, opts, deps) {
+  const d = deps ?? defaultDeps6(clientFor2(opts));
+  try {
+    await d.deletePlayKey(name);
+    if (opts.json) {
+      console.log(JSON.stringify({ event: "deleted", name }));
+    } else {
+      console.log(chalk16.green(`\u2713 removed Google Play key ${name}`));
+    }
+    process.exitCode = 0;
+  } catch (err) {
+    printError5(opts, err);
     process.exitCode = 1;
   }
 }
 async function credentialsList(opts, deps) {
-  const d = deps ?? defaultDeps4(clientFor2(opts));
+  const d = deps ?? defaultDeps6(clientFor2(opts));
   try {
     const { credentials: credentials2 } = await d.listCredentials(opts.app);
     for (const c of credentials2) {
@@ -2095,7 +2531,7 @@ async function credentialsList(opts, deps) {
     }
     process.exitCode = 0;
   } catch (err) {
-    printError3(opts, err);
+    printError5(opts, err);
     process.exitCode = 1;
   }
 }
@@ -2128,7 +2564,7 @@ function formatCredentialsHuman(credentials2) {
   if (credentials2.length === 0) {
     return "No signing credentials found.\n";
   }
-  const HEADERS3 = ["NAME", "PLATFORM", "SCOPE", "IDENTITY", "EXPIRES"];
+  const HEADERS4 = ["NAME", "PLATFORM", "SCOPE", "IDENTITY", "EXPIRES"];
   const rows = credentials2.map((c) => [
     c.name,
     c.platform,
@@ -2136,25 +2572,25 @@ function formatCredentialsHuman(credentials2) {
     formatIdentity(c),
     formatExpires(c)
   ]);
-  const widths = HEADERS3.map((h, i) => Math.max(h.length, ...rows.map((r) => r[i].length)));
+  const widths = HEADERS4.map((h, i) => Math.max(h.length, ...rows.map((r) => r[i].length)));
   const padCells = (cells) => cells.map((c, i) => c.padEnd(widths[i]));
   const join3 = (cells) => cells.join("  ").trimEnd();
-  const lines = [chalk14.bold(join3(padCells(HEADERS3)))];
+  const lines = [chalk16.bold(join3(padCells(HEADERS4)))];
   for (const row of rows) lines.push(join3(padCells(row)));
   return lines.join("\n") + "\n";
 }
 async function credentialsRm(name, opts, deps) {
-  const d = deps ?? defaultDeps4(clientFor2(opts));
+  const d = deps ?? defaultDeps6(clientFor2(opts));
   try {
     await d.deleteCredential({ name, app: opts.app });
     if (opts.json) {
       console.log(JSON.stringify({ event: "deleted", name }));
     } else {
-      console.log(chalk14.green(`\u2713 removed ${name}`));
+      console.log(chalk16.green(`\u2713 removed ${name}`));
     }
     process.exitCode = 0;
   } catch (err) {
-    printError3(opts, err);
+    printError5(opts, err);
     process.exitCode = 1;
   }
 }
@@ -2162,16 +2598,16 @@ function printKeystoreWriteFailure(opts, err, result) {
   const message = err instanceof Error ? err.message : String(err);
   if (opts.json) {
     console.log(JSON.stringify({ event: "error", message }));
-    console.error(chalk14.red(`error: ${message}`));
+    console.error(chalk16.red(`error: ${message}`));
     return;
   }
-  console.error(chalk14.red(`error: ${message}`));
+  console.error(chalk16.red(`error: ${message}`));
   console.error(
-    chalk14.red(
+    chalk16.red(
       `The keystore could NOT be saved locally, but the credential "${result.name}" WAS created server-side and its key material can never be re-fetched.`
     )
   );
-  console.error(chalk14.red("Recover it NOW from the values below \u2014 they will not be shown again:"));
+  console.error(chalk16.red("Recover it NOW from the values below \u2014 they will not be shown again:"));
   console.error("");
   console.error(`  Key alias:         ${result.key_alias}`);
   console.error(`  Store password:    ${result.store_password}`);
@@ -2182,19 +2618,19 @@ function printKeystoreWriteFailure(opts, err, result) {
     `  Restore the file with: echo '${result.keystore_base64}' | base64 -d > ${result.name}.keystore`
   );
 }
-function printError3(opts, err) {
+function printError5(opts, err) {
   const message = err instanceof Error ? err.message : String(err);
   if (opts.json) console.log(JSON.stringify({ event: "error", message }));
-  console.error(chalk14.red(`error: ${message}`));
+  console.error(chalk16.red(`error: ${message}`));
 }
 
 // src/commands/webhooks.ts
-import chalk15 from "chalk";
+import chalk17 from "chalk";
 function clientFor3(opts) {
   const { token, baseUrl } = resolveAuth(opts);
   return new ApiClient(baseUrl, token);
 }
-function defaultDeps5(client) {
+function defaultDeps7(client) {
   return {
     addWebhook: (body) => client.addWebhook(body),
     listWebhooks: () => client.listWebhooks(),
@@ -2211,7 +2647,7 @@ async function webhooksAdd(opts, deps) {
   if (!opts.url.startsWith("https://")) {
     throw new UsageError(`--url must start with https:// (got "${opts.url}")`);
   }
-  const d = deps ?? defaultDeps5(clientFor3(opts));
+  const d = deps ?? defaultDeps7(clientFor3(opts));
   try {
     const result = await d.addWebhook({
       url: opts.url,
@@ -2220,19 +2656,19 @@ async function webhooksAdd(opts, deps) {
     if (opts.json) {
       console.log(JSON.stringify(result));
     } else {
-      console.log(chalk15.green(`\u2713 added ${result.id} ${result.url}`));
+      console.log(chalk17.green(`\u2713 added ${result.id} ${result.url}`));
       console.log("");
-      console.log(`  Signing secret: ${chalk15.bold(result.secret)}`);
+      console.log(`  Signing secret: ${chalk17.bold(result.secret)}`);
       if (opts.secret !== void 0) {
-        console.log(chalk15.yellow("  (This is the secret you provided.)"));
+        console.log(chalk17.yellow("  (This is the secret you provided.)"));
       }
       console.log(
-        chalk15.yellow("  This secret is shown ONCE and cannot be retrieved again \u2014 store it now.")
+        chalk17.yellow("  This secret is shown ONCE and cannot be retrieved again \u2014 store it now.")
       );
     }
     process.exitCode = 0;
   } catch (err) {
-    printError4(opts, err);
+    printError6(opts, err);
     process.exitCode = 1;
   }
 }
@@ -2247,7 +2683,7 @@ function formatWebhooksHuman(webhooks2) {
   if (webhooks2.length === 0) {
     return "No webhooks found.\n";
   }
-  const HEADERS3 = ["ID", "URL", "ACTIVE", "LAST DELIVERY", "CREATED"];
+  const HEADERS4 = ["ID", "URL", "ACTIVE", "LAST DELIVERY", "CREATED"];
   const rows = webhooks2.map((w) => [
     w.id,
     w.url,
@@ -2255,15 +2691,15 @@ function formatWebhooksHuman(webhooks2) {
     formatLastDelivery(w.last_delivery),
     w.created_at
   ]);
-  const widths = HEADERS3.map((h, i) => Math.max(h.length, ...rows.map((r) => r[i].length)));
+  const widths = HEADERS4.map((h, i) => Math.max(h.length, ...rows.map((r) => r[i].length)));
   const padCells = (cells) => cells.map((c, i) => c.padEnd(widths[i]));
   const join3 = (cells) => cells.join("  ").trimEnd();
-  const lines = [chalk15.bold(join3(padCells(HEADERS3)))];
+  const lines = [chalk17.bold(join3(padCells(HEADERS4)))];
   for (const row of rows) lines.push(join3(padCells(row)));
   return lines.join("\n") + "\n";
 }
 async function webhooksList(opts, deps) {
-  const d = deps ?? defaultDeps5(clientFor3(opts));
+  const d = deps ?? defaultDeps7(clientFor3(opts));
   try {
     const { webhooks: webhooks2 } = await d.listWebhooks();
     if (opts.json) {
@@ -2273,22 +2709,22 @@ async function webhooksList(opts, deps) {
     }
     process.exitCode = 0;
   } catch (err) {
-    printError4(opts, err);
+    printError6(opts, err);
     process.exitCode = 1;
   }
 }
 async function webhooksRm(id, opts, deps) {
-  const d = deps ?? defaultDeps5(clientFor3(opts));
+  const d = deps ?? defaultDeps7(clientFor3(opts));
   try {
     await d.deleteWebhook(id);
     if (opts.json) {
       console.log(JSON.stringify({ event: "deleted", id }));
     } else {
-      console.log(chalk15.green(`\u2713 removed ${id}`));
+      console.log(chalk17.green(`\u2713 removed ${id}`));
     }
     process.exitCode = 0;
   } catch (err) {
-    printError4(opts, err);
+    printError6(opts, err);
     process.exitCode = 1;
   }
 }
@@ -2305,7 +2741,7 @@ function parseUtcTimestamp(iso) {
 var TEST_POLL_INTERVAL_MS = 3e3;
 var TEST_POLL_BUDGET_MS = 6e4;
 async function webhooksTest(id, opts, deps) {
-  const d = deps ?? defaultDeps5(clientFor3(opts));
+  const d = deps ?? defaultDeps7(clientFor3(opts));
   try {
     const startedAt = d.now();
     await d.testWebhook(id);
@@ -2317,13 +2753,13 @@ async function webhooksTest(id, opts, deps) {
         if (opts.json) console.log(JSON.stringify(ld));
         if (ld.status === "succeeded") {
           if (!opts.json) {
-            console.log(chalk15.green(`\u2713 Delivered (HTTP ${ld.response_code})`));
+            console.log(chalk17.green(`\u2713 Delivered (HTTP ${ld.response_code})`));
           }
           process.exitCode = 0;
         } else {
           if (!opts.json) {
             const code = ld.response_code != null ? `HTTP ${ld.response_code}` : "no response";
-            console.error(chalk15.red(`\u2717 Failed (${code}) at ${ld.at}`));
+            console.error(chalk17.red(`\u2717 Failed (${code}) at ${ld.at}`));
           }
           process.exitCode = 1;
         }
@@ -2332,25 +2768,25 @@ async function webhooksTest(id, opts, deps) {
     }
     if (opts.json) console.log(JSON.stringify({ status: "pending" }));
     console.error(
-      chalk15.yellow(
+      chalk17.yellow(
         `Delivery still pending after ${TEST_POLL_BUDGET_MS / 1e3}s \u2014 check \`vibeview webhooks list\` later for the result.`
       )
     );
     process.exitCode = 1;
   } catch (err) {
-    printError4(opts, err);
+    printError6(opts, err);
     process.exitCode = 1;
   }
 }
-function printError4(opts, err) {
+function printError6(opts, err) {
   const message = err instanceof Error ? err.message : String(err);
   if (opts.json) console.log(JSON.stringify({ event: "error", message }));
-  console.error(chalk15.red(`error: ${message}`));
+  console.error(chalk17.red(`error: ${message}`));
 }
 
 // src/lib/formatters/devices.ts
-import chalk16 from "chalk";
-var HEADERS2 = ["DEVICE_ID", "NAME", "TYPE", "CATEGORY", "OS", "STATUS"];
+import chalk18 from "chalk";
+var HEADERS3 = ["DEVICE_ID", "NAME", "TYPE", "CATEGORY", "OS", "STATUS"];
 function formatDevicesHuman(devices) {
   if (devices.length === 0) {
     return "No devices registered.\n";
@@ -2363,11 +2799,11 @@ function formatDevicesHuman(devices) {
     d.os_version,
     d.status
   ]);
-  const widths = HEADERS2.map((h, i) => Math.max(h.length, ...rows.map((r) => r[i].length)));
+  const widths = HEADERS3.map((h, i) => Math.max(h.length, ...rows.map((r) => r[i].length)));
   const fmt = (cells) => cells.map((c, i) => c.padEnd(widths[i])).join("  ").trimEnd();
-  const lines = [chalk16.bold(fmt(HEADERS2))];
+  const lines = [chalk18.bold(fmt(HEADERS3))];
   for (const row of rows.sort(rowSort)) {
-    const statusColored = row[5] === "available" ? chalk16.green(row[5]) : row[5] === "busy" ? chalk16.yellow(row[5]) : chalk16.dim(row[5]);
+    const statusColored = row[5] === "available" ? chalk18.green(row[5]) : row[5] === "busy" ? chalk18.yellow(row[5]) : chalk18.dim(row[5]);
     lines.push(fmt([row[0], row[1], row[2], row[3], row[4], statusColored]));
   }
   return lines.join("\n") + "\n";
@@ -2457,7 +2893,7 @@ import { dirname, join as join2 } from "path";
 import { fileURLToPath } from "url";
 import { spawnSync } from "child_process";
 import { confirm } from "@inquirer/prompts";
-import chalk17 from "chalk";
+import chalk19 from "chalk";
 function resolveShippedSkillPath(fromDir) {
   for (const rel of ["..", join2("..", "..")]) {
     const candidate = join2(fromDir, rel, "skills", "vibeview-agent", "SKILL.md");
@@ -2485,23 +2921,23 @@ function registerMcp() {
     encoding: "utf8"
   });
   if (res.status === 0) {
-    console.log(chalk17.green("\u2713 MCP server registered with Claude Code (claude mcp add vibeview)"));
+    console.log(chalk19.green("\u2713 MCP server registered with Claude Code (claude mcp add vibeview)"));
     return;
   }
   const out = `${res.stderr ?? ""}${res.stdout ?? ""}`;
   if (out.includes("already exists")) {
-    console.log(chalk17.dim("MCP server already registered with Claude Code \u2014 nothing to do"));
+    console.log(chalk19.dim("MCP server already registered with Claude Code \u2014 nothing to do"));
     return;
   }
-  console.error(chalk17.yellow(`\u26A0 could not register the MCP server: ${out.trim() || res.error}`));
-  console.error(chalk17.yellow("  register it manually: claude mcp add vibeview -- vibeview mcp"));
+  console.error(chalk19.yellow(`\u26A0 could not register the MCP server: ${out.trim() || res.error}`));
+  console.error(chalk19.yellow("  register it manually: claude mcp add vibeview -- vibeview mcp"));
 }
 async function agentSetup(opts) {
   const moduleDir = dirname(fileURLToPath(import.meta.url));
   const shipped = resolveShippedSkillPath(moduleDir);
   if (!shipped) {
     console.error(
-      chalk17.red(
+      chalk19.red(
         "error: could not find the packaged skill (skills/vibeview-agent/SKILL.md) \u2014 is this a complete install of the vibeview package?"
       )
     );
@@ -2510,9 +2946,9 @@ async function agentSetup(opts) {
   }
   const targetDir = skillInstallDir(opts.project ?? false, process.cwd(), homedir());
   const result = installSkill(shipped, targetDir);
-  console.log(chalk17.green(`\u2713 vibeview-agent skill ${result}: ${join2(targetDir, "SKILL.md")}`));
+  console.log(chalk19.green(`\u2713 vibeview-agent skill ${result}: ${join2(targetDir, "SKILL.md")}`));
   console.log(
-    chalk17.dim(
+    chalk19.dim(
       opts.project ? "  Claude Code discovers it automatically for anyone working in this project." : "  Claude Code discovers it automatically in every project on this machine."
     )
   );
@@ -2520,7 +2956,7 @@ async function agentSetup(opts) {
     if (!claudeCliAvailable()) {
       if (opts.mcp === true) {
         console.error(
-          chalk17.yellow(
+          chalk19.yellow(
             "\u26A0 claude CLI not found \u2014 install Claude Code, then run: claude mcp add vibeview -- vibeview mcp"
           )
         );
@@ -2534,7 +2970,7 @@ async function agentSetup(opts) {
   }
   console.log(
     `
-Suggested line for your project's ${chalk17.bold("CLAUDE.md")} (or ${chalk17.bold(
+Suggested line for your project's ${chalk19.bold("CLAUDE.md")} (or ${chalk19.bold(
       "AGENTS.md"
     )} for other agents):
 `
@@ -2542,7 +2978,7 @@ Suggested line for your project's ${chalk17.bold("CLAUDE.md")} (or ${chalk17.bol
   console.log(`  ${CLAUDE_MD_SUGGESTION}
 `);
   console.log(
-    chalk17.dim(
+    chalk19.dim(
       "Other agents (Cursor, Copilot, Codex, ...): point them at the skill file above, or\nadd the MCP server per client \u2014 see https://vibeview.io/docs/agent-control"
     )
   );
@@ -2706,6 +3142,28 @@ program.command("build").description("Run your configured build command and uplo
   "--cloud only: build a signed, installable production artifact (.aab/.ipa) using uploaded signing credentials (see `vibeview credentials add`), instead of the default unsigned simulator build",
   false
 ).option("--json", "Print the result as one JSON line (NDJSON events with --cloud)", false).action((opts) => buildCommand(opts));
+program.command("submit").description(
+  "Submit a succeeded production cloud build's artifact to TestFlight (ios/tvos) or a Google Play track (android/androidtv) \u2014 binary upload only; store listing and review stay in the store consoles"
+).option("--token <token>", "API token (or set VIBEVIEW_API_TOKEN)").option("--platform <platform>", "ios, tvos, android, or androidtv").option("--build <id>", "Cloud build id to submit (see `vibeview builds list`)").option(
+  "--latest",
+  "Submit the newest succeeded production build for --platform (pass exactly one of --build/--latest)",
+  false
+).option(
+  "--track <track>",
+  "android/androidtv only: Play track \u2014 internal (default), alpha, beta, or production"
+).option(
+  "--package <name>",
+  "android/androidtv only: package name, for a build not linked to an app"
+).option(
+  "--asc-key <name>",
+  "ios/tvos only: which stored App Store Connect key to use (default when exactly one \u2014 see `vibeview credentials asc-key add`)"
+).option(
+  "--release-status <status>",
+  "android/androidtv only: Play release status \u2014 completed (default), draft, or inProgress"
+).option(
+  "--rollout <fraction>",
+  "android/androidtv only: staged-rollout fraction, 0 < f < 1 (requires --release-status inProgress)"
+).option("--no-wait", "Print the submission id and exit without waiting for completion").option("--json", "Emit line-delimited JSON events on stdout instead of human output", false).action((opts) => submitCommand(opts));
 var builds = program.command("builds").description("Manage cloud builds (see `vibeview build --cloud`)");
 builds.command("list").description("List cloud builds in your organization").option("--token <token>", "API token (or set VIBEVIEW_API_TOKEN)").option("--json", "Print the raw build summaries as a JSON array", false).option("--limit <n>", "Max builds to return (default 50, max 200)").action((opts) => buildsList(opts));
 builds.command("logs <id>").description("Print a cloud build's log output").option("--token <token>", "API token (or set VIBEVIEW_API_TOKEN)").option("--json", "Print NDJSON log/outcome events instead of raw text", false).option("--follow", "Keep polling until the build reaches a terminal status", false).action((id, opts) => buildsLogs(id, opts));
@@ -2714,6 +3172,13 @@ builds.command("cancel <id>").description("Cancel a queued or running cloud buil
 builds.command("delete-artifact <id>").description(
   "Delete a production build's stored artifact file (irreversible; the build record, logs, and cost stay intact \u2014 only the downloadable file is removed)"
 ).option("--token <token>", "API token (or set VIBEVIEW_API_TOKEN)").option("--json", "Print the result as one JSON line", false).action((id, opts) => buildsDeleteArtifact(id, opts));
+var versions = program.command("versions").description(
+  "Manage an app's server-side build-number counters (used by vibeview.json `build.autoIncrement` production builds)"
+);
+versions.command("list").description("List an app's build-number counters, one per platform").option("--token <token>", "API token (or set VIBEVIEW_API_TOKEN)").option("--app <id>", "App public id (see `vibeview list-apps`)").option("--json", "Print the raw response as JSON", false).action((opts) => versionsList(opts));
+versions.command("set <number>").description(
+  "Seed or overwrite one platform's counter \u2014 the next autoIncrement production build gets <number> + 1 (use it to start above a build number already in the store)"
+).option("--token <token>", "API token (or set VIBEVIEW_API_TOKEN)").option("--app <id>", "App public id (see `vibeview list-apps`)").option("--platform <platform>", "ios, android, tvos, or androidtv").option("--json", "Print the updated version object as one JSON line", false).action((number, opts) => versionsSet(number, opts));
 program.command("whoami").description("Show which account and role this CLI is authenticated as").option("--token <token>", "API token (or set VIBEVIEW_API_TOKEN)").option("--json", "Print the identity as one JSON line", false).action((opts) => whoAmI(opts));
 var env = program.command("env").description("Manage cloud build environment variables and secrets");
 env.command("list").description("List build variables and secrets (never prints a value)").option("--token <token>", "API token (or set VIBEVIEW_API_TOKEN)").option("--app <id>", "Scope to a single app (default: org-wide variables only)").option("--json", "Print the raw variable list as a JSON array", false).action((opts) => envList(opts));
@@ -2765,6 +3230,17 @@ ascKey.command("add").description(
 ).option("--token <token>", "API token (or set VIBEVIEW_API_TOKEN)").option("--key-id <id>", "The 10-character key id (shown next to the key in App Store Connect)").option("--issuer-id <id>", "The issuer id (UUID shown above the keys table)").option("--file <path>", "The AuthKey_<KEYID>.p8 file Apple let you download once").option("--name <name>", "Key name (default: server-chosen)").option("--json", "Print the raw response as one JSON line", false).action((opts) => ascKeyAdd(opts));
 ascKey.command("list").description("List stored App Store Connect keys (metadata only \u2014 never the .p8)").option("--token <token>", "API token (or set VIBEVIEW_API_TOKEN)").option("--json", "Print the raw key list as a JSON array", false).action((opts) => ascKeyList(opts));
 ascKey.command("rm <name>").description("Remove a stored App Store Connect key").option("--token <token>", "API token (or set VIBEVIEW_API_TOKEN)").option("--json", "Print the result as one JSON line", false).action((name, opts) => ascKeyRm(name, opts));
+var playKey = credentials.command("play-key").description(
+  "Manage Google Play service-account keys (create one in Google Play Console \u2192 API access, or Google Cloud \u2192 IAM \u2192 service accounts) \u2014 they power `vibeview submit --platform android|androidtv`"
+);
+playKey.command("add").description(
+  "Store a Google Play service-account JSON key. The key is stored encrypted and never shown again; uploading the same name again rotates the key."
+).option("--token <token>", "API token (or set VIBEVIEW_API_TOKEN)").option(
+  "--file <path>",
+  "The service-account JSON key file (Google Play Console \u2192 API access / Google Cloud service accounts)"
+).option("--name <name>", "Key name (default: server-chosen)").option("--json", "Print the raw response as one JSON line", false).action((opts) => playKeyAdd(opts));
+playKey.command("list").description("List stored Google Play keys (metadata only \u2014 never the JSON key)").option("--token <token>", "API token (or set VIBEVIEW_API_TOKEN)").option("--json", "Print the raw key list as a JSON array", false).action((opts) => playKeyList(opts));
+playKey.command("rm <name>").description("Remove a stored Google Play key").option("--token <token>", "API token (or set VIBEVIEW_API_TOKEN)").option("--json", "Print the result as one JSON line", false).action((name, opts) => playKeyRm(name, opts));
 credentials.command("list").description("List signing credentials (never prints key material)").option("--token <token>", "API token (or set VIBEVIEW_API_TOKEN)").option("--app <id>", "Scope to a single app (default: org-wide credentials only)").option("--json", "Print the raw credential list as a JSON array", false).action((opts) => credentialsList(opts));
 credentials.command("rm <name>").description("Remove a signing credential (replace by rm then add)").option("--token <token>", "API token (or set VIBEVIEW_API_TOKEN)").option("--app <id>", "Scope to a single app (default: org-wide)").option("--json", "Print the result as one JSON line", false).action((name, opts) => credentialsRm(name, opts));
 var webhooks = program.command("webhooks").description("Manage build-completion webhook endpoints");
@@ -2779,7 +3255,7 @@ program.command("dev-stop").description("Stop a `vibeview dev --detach` session
 program.command("mcp").description(
   "Run an MCP stdio server exposing the agent verbs (tap, swipe, type, ...) plus dev_start/dev_stop as tools"
 ).option("--token <token>", "API token (or set VIBEVIEW_API_TOKEN)").action(async (opts) => {
-  const { runMcpServer } = await import("./server-TJQKNXDR.js");
+  const { runMcpServer } = await import("./server-NR3ZPQF5.js");
   await runMcpServer(opts);
 });
 program.command("agent-setup").description(