vibeview 0.19.0 → 0.20.0

package/README.md

@@ -74,12 +74,33 @@ vibeview webhooks add --url https://ci.example.com/hooks/vibeview
 Webhooks POST a signed payload to your endpoint whenever a build finishes.
 Manage running builds with `vibeview builds list | logs | download | cancel`.
 
+Set `"autoIncrement": true` in a platform's `build` block and every
+production build gets a server-assigned build number, injected into the
+build as `VIBEVIEW_BUILD_NUMBER` (inspect or seed the counters with
+`vibeview versions list/set`).
+
 Expo managed projects work out of the box — the default build command runs
 `npx expo prebuild` in the cloud, so no `ios/` or `android/` directory is
 needed.
 
+When a production build succeeds, ship it straight to the stores — no
+Xcode, no Play Console upload page:
+
+```bash
+vibeview submit --platform tvos --latest                  # → TestFlight
+vibeview submit --platform android --track internal       # → a Play track
+```
+
+TestFlight uploads use your stored App Store Connect key; Play uploads need
+a Google Play service account key stored once with
+`vibeview credentials play-key add --file service-account.json`. Choose a
+Play track, upload as a draft, or start a staged rollout — and store your
+defaults in `vibeview.json` so `vibeview submit` alone does the right
+thing.
+
 [Cloud Builds docs →](https://vibeview.io/docs/cloud-builds) ·
 [App Signing →](https://vibeview.io/docs/app-signing) ·
+[Store Submission →](https://vibeview.io/docs/store-submission) ·
 [Build Webhooks →](https://vibeview.io/docs/build-webhooks)
 
 ## Let your AI agent drive the device
@@ -140,8 +161,11 @@ Output formats: `human`, `json`, and `junit` for any CI system. The exit code re
 | `vibeview dev`                                              | Live development on a cloud device                                                                       |
 | `vibeview build`                                            | Build your app — locally, or on the build fleet with `--cloud` (add `--production` for a signed release) |
 | `vibeview builds list/logs/download/cancel/delete-artifact` | Manage cloud builds and their artifacts                                                                  |
+| `vibeview versions list/set`                                | Server-side build-number counters for `autoIncrement` production builds                                  |
 | `vibeview credentials add/generate/list/rm/download`        | App-signing credentials for production builds (`generate` covers iOS, tvOS, and Android)                 |
 | `vibeview credentials asc-key add/list/rm`                  | Connect an Apple team via App Store Connect API key                                                      |
+| `vibeview credentials play-key add/list/rm`                 | Store a Google Play service-account key for Play submissions                                             |
+| `vibeview submit`                                           | Upload a production build to TestFlight or a Google Play track                                           |
 | `vibeview env list/set/rm/pull`                             | Build variables and secrets injected into cloud builds                                                   |
 | `vibeview webhooks add/list/rm/test`                        | Notify your systems when builds finish (signed payloads)                                                 |
 | `vibeview dev-status` / `dev-stop`                          | Check on, or stop, a backgrounded dev session                                                            |

package/dist/{chunk-T6FS4ELD.js → chunk-GUCKFB4K.js}

@@ -1,11 +1,12 @@
 #!/usr/bin/env node
 import {
   ApiClient,
+  UsageError,
   createSpinner,
   loadConfig,
   resolveAuth,
   uploadAppBuild
-} from "./chunk-FG2J2BGS.js";
+} from "./chunk-MCCXPIGE.js";
 
 // src/lib/dev-state.ts
 import { existsSync, mkdirSync, readFileSync, rmSync, writeFileSync } from "fs";
@@ -1188,6 +1189,11 @@ async function runCloudBuildCommand(cwd, cfgRef, opts, deps) {
   for (const p of platforms) {
     try {
       validateBuildEnv(cfg?.platforms?.[p]?.build?.env, p);
+      if (cfg?.platforms?.[p]?.build?.autoIncrement === true && opts.production && createFromArtifact.has(p)) {
+        throw new UsageError(
+          `platforms.${p}.build.autoIncrement needs the build linked to an app \u2014 set appId in vibeview.json (a brand-new app's first build can't auto-increment)`
+        );
+      }
     } catch (err) {
       fail(opts, err instanceof Error ? err.message : String(err));
     }
@@ -1232,6 +1238,14 @@ ${offenders}`);
       const production = productionBuilds.get(p);
       const command = production ? production.command : build.command;
       const artifactPath = production ? production.artifact : build.artifact;
+      const autoIncrement = build.autoIncrement === true;
+      if (autoIncrement && !production && !opts.json) {
+        console.error(
+          chalk2.yellow(
+            `note: platforms.${p}.build.autoIncrement only applies to production builds (--production) \u2014 ignoring it for this simulator build`
+          )
+        );
+      }
       return {
         platform: p,
         // OMITTED, never invented, for a platform whose app the artifact will
@@ -1243,7 +1257,8 @@ ${offenders}`);
         command,
         artifact_path: artifactPath,
         distribution: production ? "production" : "simulator",
-        ...build.env ? { env: build.env } : {}
+        ...build.env ? { env: build.env } : {},
+        ...autoIncrement && production ? { auto_increment: true } : {}
       };
     });
     const uploadSpinner = !opts.json ? createSpinner("uploading source...") : null;

package/dist/{chunk-FG2J2BGS.js → chunk-MCCXPIGE.js}

@@ -484,7 +484,10 @@ var ApiClient = class {
       platform: body.platform,
       ...body.track !== void 0 ? { track: body.track } : {},
       ...body.package !== void 0 ? { package: body.package } : {},
-      ...body.ascKey !== void 0 ? { asc_key: body.ascKey } : {}
+      ...body.ascKey !== void 0 ? { asc_key: body.ascKey } : {},
+      ...body.releaseStatus !== void 0 ? { release_status: body.releaseStatus } : {},
+      ...body.rollout !== void 0 ? { rollout: body.rollout } : {},
+      ...body.changesNotSentForReview !== void 0 ? { changes_not_sent_for_review: body.changesNotSentForReview } : {}
     });
   }
   /** GET /api/v1/submissions?build=<id> — that build's submissions, newest
@@ -503,6 +506,22 @@ var ApiClient = class {
     const qs = offset !== void 0 ? `?offset=${offset}` : "";
     return this.requestRaw("GET", `/submissions/${id}/log${qs}`);
   }
+  /** GET /api/v1/apps/{appPublicId}/versions — the app's server-side
+   *  build-number counters, one per platform that has ever allocated (or
+   *  been `versions set`) a number. */
+  async listAppVersions(appId) {
+    return this.requestRaw("GET", `/apps/${encodeURIComponent(appId)}/versions`);
+  }
+  /** PUT /api/v1/apps/{appPublicId}/versions/{platform} {build_number} —
+   *  seed or overwrite one counter (org-scoped, DEVELOPER role, audited
+   *  server-side). Returns the updated counter. */
+  async setAppVersion(appId, platform, buildNumber) {
+    return this.requestRaw(
+      "PUT",
+      `/apps/${encodeURIComponent(appId)}/versions/${encodeURIComponent(platform)}`,
+      { build_number: buildNumber }
+    );
+  }
   /** GET /api/v1/signing-credentials/{id}/material. Requires ADMIN role;
    *  audited server-side. 404s (NotFoundError) for non-generated rows —
    *  uploaded material is never readable back. */

package/dist/cli.js

@@ -8,13 +8,14 @@ import {
   fetchFinalSummary,
   formatDuration,
   killOwnedMetro,
+  loadDevConfig,
   newTransitionState,
   printOutcomeLine,
   printTransition,
   readDevState,
   readMetroState,
   runAgentVerb
-} from "./chunk-T6FS4ELD.js";
+} from "./chunk-GUCKFB4K.js";
 import {
   ApiClient,
   EXIT_INFRA_ERROR,
@@ -27,7 +28,7 @@ import {
   resolveAuth,
   saveConfig,
   uploadApp
-} from "./chunk-FG2J2BGS.js";
+} from "./chunk-MCCXPIGE.js";
 
 // src/cli.ts
 import { createRequire } from "module";
@@ -1395,6 +1396,47 @@ function isSubmitPlatform(p) {
   return SUBMIT_PLATFORMS.includes(p);
 }
 var PLAY_TRACKS = ["internal", "alpha", "beta", "production"];
+var RELEASE_STATUSES = ["completed", "draft", "inProgress"];
+function submitConfigFor(cwd, platform) {
+  let cfg;
+  try {
+    cfg = loadDevConfig(cwd);
+  } catch (err) {
+    console.error(
+      chalk12.yellow(
+        `warning: vibeview.json could not be read \u2014 ignoring submit defaults (${err instanceof Error ? err.message : String(err)})`
+      )
+    );
+    return {};
+  }
+  const raw = cfg?.platforms?.[platform]?.submit;
+  if (raw === void 0) return {};
+  const path = `vibeview.json: platforms.${platform}.submit`;
+  if (typeof raw !== "object" || raw === null || Array.isArray(raw)) {
+    throw new UsageError(`${path} must be an object`);
+  }
+  const s = raw;
+  for (const key of ["track", "releaseStatus", "ascKey"]) {
+    if (s[key] !== void 0 && (typeof s[key] !== "string" || !s[key])) {
+      throw new UsageError(`${path}.${key} must be a non-empty string`);
+    }
+  }
+  if (s.rollout !== void 0 && typeof s.rollout !== "number") {
+    throw new UsageError(`${path}.rollout must be a number strictly between 0 and 1`);
+  }
+  if (s.changesNotSentForReview !== void 0 && typeof s.changesNotSentForReview !== "boolean") {
+    throw new UsageError(`${path}.changesNotSentForReview must be a boolean`);
+  }
+  return s;
+}
+function validateRolloutFraction(f, source, raw = f) {
+  if (!Number.isFinite(f) || !(f > 0 && f < 1)) {
+    throw new UsageError(
+      `${source} must be a fraction strictly between 0 and 1 (e.g. 0.25) \u2014 got "${String(raw)}"`
+    );
+  }
+  return f;
+}
 var SUBMISSION_TERMINAL_STATUSES = /* @__PURE__ */ new Set(["succeeded", "failed"]);
 var MAX_CONSECUTIVE_POLL_FAILURES2 = 5;
 function emit(json, evt) {
@@ -1425,8 +1467,43 @@ async function submitCommand(opts, deps) {
   if (androidFamily && opts.ascKey !== void 0) {
     throw new UsageError(`--asc-key only applies to ios/tvos (TestFlight) \u2014 not ${platform}`);
   }
-  if (opts.track !== void 0 && !PLAY_TRACKS.includes(opts.track)) {
-    throw new UsageError(`--track must be one of ${PLAY_TRACKS.join(", ")} \u2014 got "${opts.track}"`);
+  if (!androidFamily && opts.releaseStatus !== void 0) {
+    throw new UsageError(
+      `--release-status only applies to android/androidtv (Play) \u2014 not ${platform}`
+    );
+  }
+  if (!androidFamily && opts.rollout !== void 0) {
+    throw new UsageError(`--rollout only applies to android/androidtv (Play) \u2014 not ${platform}`);
+  }
+  const cfgDefaults = submitConfigFor(process.cwd(), platform);
+  const track = opts.track ?? (androidFamily ? cfgDefaults.track : void 0);
+  const releaseStatus = opts.releaseStatus ?? (androidFamily ? cfgDefaults.releaseStatus : void 0);
+  const statusUnchanged = opts.releaseStatus === void 0 || opts.releaseStatus === cfgDefaults.releaseStatus;
+  const rollout = opts.rollout !== void 0 ? validateRolloutFraction(Number(opts.rollout), "--rollout", opts.rollout) : androidFamily && statusUnchanged && cfgDefaults.rollout !== void 0 ? validateRolloutFraction(
+    cfgDefaults.rollout,
+    `vibeview.json platforms.${platform}.submit.rollout`
+  ) : void 0;
+  const changesNotSentForReview = androidFamily ? cfgDefaults.changesNotSentForReview : void 0;
+  const ascKey2 = opts.ascKey ?? (!androidFamily ? cfgDefaults.ascKey : void 0);
+  if (track !== void 0 && !PLAY_TRACKS.includes(track)) {
+    const source = opts.track !== void 0 ? "--track" : `vibeview.json platforms.${platform}.submit.track`;
+    throw new UsageError(`${source} must be one of ${PLAY_TRACKS.join(", ")} \u2014 got "${track}"`);
+  }
+  if (releaseStatus !== void 0 && !RELEASE_STATUSES.includes(releaseStatus)) {
+    const source = opts.releaseStatus !== void 0 ? "--release-status" : `vibeview.json platforms.${platform}.submit.releaseStatus`;
+    throw new UsageError(
+      `${source} must be one of ${RELEASE_STATUSES.join(", ")} \u2014 got "${releaseStatus}"`
+    );
+  }
+  if (rollout !== void 0 && releaseStatus !== "inProgress") {
+    throw new UsageError(
+      `a rollout fraction requires release status "inProgress" (a staged rollout) \u2014 got "${releaseStatus ?? "completed"}"`
+    );
+  }
+  if (releaseStatus === "inProgress" && rollout === void 0) {
+    throw new UsageError(
+      `release status "inProgress" requires a rollout fraction \u2014 pass --rollout (e.g. --rollout 0.1)`
+    );
   }
   const { token, baseUrl } = resolveAuth(opts);
   const client = new ApiClient(baseUrl, token);
@@ -1436,9 +1513,12 @@ async function submitCommand(opts, deps) {
     const sub = await d.createSubmission({
       build: buildId,
       platform,
-      ...opts.track !== void 0 ? { track: opts.track } : {},
+      ...track !== void 0 ? { track } : {},
       ...opts.package !== void 0 ? { package: opts.package } : {},
-      ...opts.ascKey !== void 0 ? { asc_key: opts.ascKey } : {}
+      ...ascKey2 !== void 0 ? { ascKey: ascKey2 } : {},
+      ...releaseStatus !== void 0 ? { releaseStatus } : {},
+      ...rollout !== void 0 ? { rollout } : {},
+      ...changesNotSentForReview !== void 0 ? { changesNotSentForReview } : {}
     });
     emit(opts.json, {
       event: "submission_created",
@@ -1455,6 +1535,11 @@ async function submitCommand(opts, deps) {
       console.error(`  ${chalk12.cyan(sub.id)}  ${chalk12.dim(`[${sub.platform}]`)}`);
     }
     const final = await followSubmission(sub, opts, d);
+    if (!opts.json && final.status === "succeeded" && (final.release_status ?? releaseStatus) === "draft") {
+      console.error(
+        chalk12.dim("release status: draft \u2014 activate it from the Play Console when ready")
+      );
+    }
     process.exitCode = final.status === "succeeded" ? 0 : 1;
   } catch (err) {
     printError2(opts, err);
@@ -1562,9 +1647,90 @@ function printError2(opts, err) {
   console.error(chalk12.red(`error: ${message}`));
 }
 
-// src/commands/whoami.ts
+// src/commands/versions.ts
 import chalk13 from "chalk";
-function defaultDeps3(opts) {
+function defaultDeps3(client) {
+  return {
+    listAppVersions: client.listAppVersions.bind(client),
+    setAppVersion: client.setAppVersion.bind(client)
+  };
+}
+var VERSION_PLATFORMS = ["ios", "android", "tvos", "androidtv"];
+async function versionsList(opts, deps) {
+  if (!opts.app) {
+    throw new UsageError("--app <id> is required (see `vibeview list-apps` for ids)");
+  }
+  const { token, baseUrl } = resolveAuth(opts);
+  const client = new ApiClient(baseUrl, token);
+  const d = deps ?? defaultDeps3(client);
+  try {
+    const response = await d.listAppVersions(opts.app);
+    if (opts.json) {
+      console.log(JSON.stringify(response, null, 2));
+    } else {
+      process.stdout.write(formatVersionsHuman(response.versions));
+    }
+    process.exitCode = 0;
+  } catch (err) {
+    printError3(opts, err);
+    process.exitCode = 1;
+  }
+}
+async function versionsSet(buildNumber, opts, deps) {
+  if (!opts.app) {
+    throw new UsageError("--app <id> is required (see `vibeview list-apps` for ids)");
+  }
+  if (!opts.platform || !VERSION_PLATFORMS.includes(opts.platform)) {
+    throw new UsageError(
+      `--platform is required and must be one of ${VERSION_PLATFORMS.join(", ")}`
+    );
+  }
+  const parsed = /^\d+$/.test(buildNumber) ? Number(buildNumber) : NaN;
+  if (!Number.isSafeInteger(parsed) || parsed < 0) {
+    throw new UsageError(`build number must be a non-negative integer \u2014 got "${buildNumber}"`);
+  }
+  const { token, baseUrl } = resolveAuth(opts);
+  const client = new ApiClient(baseUrl, token);
+  const d = deps ?? defaultDeps3(client);
+  try {
+    const version = await d.setAppVersion(opts.app, opts.platform, parsed);
+    if (opts.json) {
+      console.log(JSON.stringify(version));
+    } else {
+      console.log(
+        chalk13.green(`\u2713 ${version.platform} build number set to ${version.build_number}`) + chalk13.dim(
+          " \u2014 the next autoIncrement production build gets " + (version.build_number + 1)
+        )
+      );
+    }
+    process.exitCode = 0;
+  } catch (err) {
+    printError3(opts, err);
+    process.exitCode = 1;
+  }
+}
+var HEADERS2 = ["PLATFORM", "BUILD NUMBER", "UPDATED"];
+function formatVersionsHuman(versions2) {
+  if (versions2.length === 0) {
+    return "No version counters yet \u2014 they appear after the first autoIncrement production build, or seed one with `vibeview versions set`.\n";
+  }
+  const rows = versions2.map((v) => [v.platform, String(v.build_number), v.updated_at ?? ""]);
+  const widths = HEADERS2.map((h, i) => Math.max(h.length, ...rows.map((r) => r[i].length)));
+  const padCells = (cells) => cells.map((c, i) => c.padEnd(widths[i]));
+  const join3 = (cells) => cells.join("  ").trimEnd();
+  const lines = [chalk13.bold(join3(padCells(HEADERS2)))];
+  for (const row of rows) lines.push(join3(padCells(row)));
+  return lines.join("\n") + "\n";
+}
+function printError3(opts, err) {
+  const message = err instanceof Error ? err.message : String(err);
+  if (opts.json) console.log(JSON.stringify({ event: "error", message }));
+  console.error(chalk13.red(`error: ${message}`));
+}
+
+// src/commands/whoami.ts
+import chalk14 from "chalk";
+function defaultDeps4(opts) {
   const { token, baseUrl } = resolveAuth(opts);
   const client = new ApiClient(baseUrl, token);
   return { fetchMe: () => client.whoAmI() };
@@ -1576,7 +1742,7 @@ function effectiveRole(role, tokenRole) {
   return (RANK[tokenRole] ?? 3) < (RANK[role] ?? 3) ? tokenRole : role;
 }
 async function whoAmI(opts, deps) {
-  const d = deps ?? defaultDeps3(opts);
+  const d = deps ?? defaultDeps4(opts);
   try {
     const me = await d.fetchMe();
     const effective = effectiveRole(me.role, me.token_role);
@@ -1585,27 +1751,27 @@ async function whoAmI(opts, deps) {
       process.exitCode = 0;
       return;
     }
-    console.log(`${chalk13.bold("Logged in as")}  ${me.email}`);
+    console.log(`${chalk14.bold("Logged in as")}  ${me.email}`);
     if (me.memberships.length === 1) {
-      console.log(`${chalk13.bold("Organization")}   ${me.memberships[0].organization_name}`);
+      console.log(`${chalk14.bold("Organization")}   ${me.memberships[0].organization_name}`);
     } else if (me.memberships.length > 1) {
-      console.log(chalk13.bold("Organizations"));
+      console.log(chalk14.bold("Organizations"));
       for (const m of me.memberships) {
         console.log(`  ${m.organization_name} (${m.role})`);
       }
     }
-    console.log(`${chalk13.bold("Member role")}    ${me.role ?? "\u2014"}`);
-    console.log(`${chalk13.bold("Token role")}     ${me.token_role ?? "\u2014 (session auth)"}`);
-    console.log(`${chalk13.bold("Effective role")} ${effective ?? "\u2014"}`);
+    console.log(`${chalk14.bold("Member role")}    ${me.role ?? "\u2014"}`);
+    console.log(`${chalk14.bold("Token role")}     ${me.token_role ?? "\u2014 (session auth)"}`);
+    console.log(`${chalk14.bold("Effective role")} ${effective ?? "\u2014"}`);
     if (me.is_superadmin) {
-      console.log(chalk13.dim("Superadmin (platform-wide; does not raise the org role above)"));
+      console.log(chalk14.dim("Superadmin (platform-wide; does not raise the org role above)"));
     }
     if (me.role === "admin" && me.token_role && me.token_role !== "admin") {
       console.log(
-        chalk13.yellow(
+        chalk14.yellow(
           `
-Your account is admin, but this CLI token is ${me.token_role}. The effective role is the lower of the two, so admin-only commands (such as ${chalk13.bold("vibeview env set")}) will fail with a permissions error.
-Create an admin API token in the dashboard and use ${chalk13.bold("--token")} or ${chalk13.bold("VIBEVIEW_API_TOKEN")}.`
+Your account is admin, but this CLI token is ${me.token_role}. The effective role is the lower of the two, so admin-only commands (such as ${chalk14.bold("vibeview env set")}) will fail with a permissions error.
+Create an admin API token in the dashboard and use ${chalk14.bold("--token")} or ${chalk14.bold("VIBEVIEW_API_TOKEN")}.`
         )
       );
     }
@@ -1615,7 +1781,7 @@ Create an admin API token in the dashboard and use ${chalk13.bold("--token")} or
     if (opts.json) {
       console.log(JSON.stringify({ event: "error", message }));
     }
-    console.error(chalk13.red(`error: ${message}`));
+    console.error(chalk14.red(`error: ${message}`));
     process.exitCode = 1;
   }
 }
@@ -1623,7 +1789,7 @@ Create an admin API token in the dashboard and use ${chalk13.bold("--token")} or
 // src/commands/env.ts
 import { chmod, open as open2, readFile as readFileAsync } from "fs/promises";
 import { basename } from "path";
-import chalk14 from "chalk";
+import chalk15 from "chalk";
 import { password } from "@inquirer/prompts";
 
 // src/lib/gitignore.ts
@@ -1650,7 +1816,7 @@ async function writeSecureFile(path, content) {
   }
   await chmod(path, 384);
 }
-function defaultDeps4(client) {
+function defaultDeps5(client) {
   return {
     listVars: (app) => client.listBuildEnvVars(app),
     setVar: (body) => client.setBuildEnvVar(body),
@@ -1679,11 +1845,11 @@ function defaultDeps4(client) {
     isIgnored: (path) => isGitIgnored(path),
     writeFile: writeSecureFile,
     readFile: (path) => readFileAsync(path),
-    warn: (message) => console.error(chalk14.yellow(`warning: ${message}`))
+    warn: (message) => console.error(chalk15.yellow(`warning: ${message}`))
   };
 }
 async function envList(opts, deps) {
-  const d = deps ?? defaultDeps4(clientFor(opts));
+  const d = deps ?? defaultDeps5(clientFor(opts));
   try {
     const { variables } = await d.listVars(opts.app);
     if (opts.json) {
@@ -1693,7 +1859,7 @@ async function envList(opts, deps) {
     }
     process.exitCode = 0;
   } catch (err) {
-    printError3(opts, err);
+    printError4(opts, err);
     process.exitCode = 1;
   }
 }
@@ -1701,22 +1867,22 @@ function formatEnvVarsHuman(variables) {
   if (variables.length === 0) {
     return "No build variables found.\n";
   }
-  const HEADERS3 = ["NAME", "VISIBILITY", "SCOPE", "HINT"];
+  const HEADERS4 = ["NAME", "VISIBILITY", "SCOPE", "HINT"];
   const rows = variables.map((v) => [
     v.name,
     v.is_file ? `${v.visibility} (file)` : v.visibility,
     v.app_public_id ?? "org-wide",
     v.value_hint ?? ""
   ]);
-  const widths = HEADERS3.map((h, i) => Math.max(h.length, ...rows.map((r) => r[i].length)));
+  const widths = HEADERS4.map((h, i) => Math.max(h.length, ...rows.map((r) => r[i].length)));
   const padCells = (cells) => cells.map((c, i) => c.padEnd(widths[i]));
   const join3 = (cells) => cells.join("  ").trimEnd();
-  const lines = [chalk14.bold(join3(padCells(HEADERS3)))];
+  const lines = [chalk15.bold(join3(padCells(HEADERS4)))];
   for (const row of rows) lines.push(join3(padCells(row)));
   return lines.join("\n") + "\n";
 }
 async function envSet(name, value, opts, deps) {
-  const d = deps ?? defaultDeps4(clientFor(opts));
+  const d = deps ?? defaultDeps5(clientFor(opts));
   let resolvedValue = value;
   if (resolvedValue === void 0 && !opts.file) {
     if (opts.json || !d.isTTY) {
@@ -1742,7 +1908,7 @@ async function envSet(name, value, opts, deps) {
     printSetResult(opts, result);
     process.exitCode = 0;
   } catch (err) {
-    printError3(opts, err);
+    printError4(opts, err);
     process.exitCode = 1;
   }
 }
@@ -1761,26 +1927,26 @@ function printSetResult(opts, result) {
   if (opts.json) {
     console.log(JSON.stringify(result));
   } else {
-    console.log(chalk14.green(`\u2713 set ${result.name} (${result.visibility})`));
+    console.log(chalk15.green(`\u2713 set ${result.name} (${result.visibility})`));
   }
 }
 async function envRm(name, opts, deps) {
-  const d = deps ?? defaultDeps4(clientFor(opts));
+  const d = deps ?? defaultDeps5(clientFor(opts));
   try {
     await d.rmVar({ name, app: opts.app });
     if (opts.json) {
       console.log(JSON.stringify({ event: "deleted", name }));
     } else {
-      console.log(chalk14.green(`\u2713 removed ${name}`));
+      console.log(chalk15.green(`\u2713 removed ${name}`));
     }
     process.exitCode = 0;
   } catch (err) {
-    printError3(opts, err);
+    printError4(opts, err);
     process.exitCode = 1;
   }
 }
 async function envPull(opts, deps) {
-  const d = deps ?? defaultDeps4(clientFor(opts));
+  const d = deps ?? defaultDeps5(clientFor(opts));
   const outPath = opts.out ?? ".env";
   try {
     const { variables } = await d.pullVars(opts.app);
@@ -1803,11 +1969,11 @@ async function envPull(opts, deps) {
     if (opts.json) {
       console.log(JSON.stringify({ event: "pulled", path: outPath, count: variables.length }));
     } else {
-      console.log(chalk14.green(`\u2713 wrote ${variables.length} variable(s) to ${outPath}`));
+      console.log(chalk15.green(`\u2713 wrote ${variables.length} variable(s) to ${outPath}`));
     }
     process.exitCode = 0;
   } catch (err) {
-    printError3(opts, err);
+    printError4(opts, err);
     process.exitCode = 1;
   }
 }
@@ -1839,10 +2005,10 @@ function escapeEnvValue(value) {
   }
   return `"${value.replace(/\\/g, "\\\\").replace(/"/g, '\\"')}"`;
 }
-function printError3(opts, err) {
+function printError4(opts, err) {
   const message = err instanceof Error ? err.message : String(err);
   if (opts.json) console.log(JSON.stringify({ event: "error", message }));
-  console.error(chalk14.red(`error: ${message}`));
+  console.error(chalk15.red(`error: ${message}`));
 }
 
 // src/commands/credentials.ts
@@ -1854,13 +2020,13 @@ import {
 } from "fs/promises";
 import { mkdirSync } from "fs";
 import { basename as basename2, extname, join } from "path";
-import chalk15 from "chalk";
+import chalk16 from "chalk";
 import { input, password as password2 } from "@inquirer/prompts";
 function clientFor2(opts) {
   const { token, baseUrl } = resolveAuth(opts);
   return new ApiClient(baseUrl, token);
 }
-function defaultDeps5(client) {
+function defaultDeps6(client) {
   return {
     addCredential: (body) => client.addSigningCredential({
       platform: body.platform,
@@ -1927,7 +2093,7 @@ function defaultDeps5(client) {
     mkdir: (dir) => mkdirSync(dir, { recursive: true }),
     writeFile: (path, data, mode) => writeFileAsync(path, data, mode !== void 0 ? { mode } : void 0),
     chmod: (path, mode) => chmodAsync(path, mode),
-    warn: (message) => console.error(chalk15.yellow(`warning: ${message}`))
+    warn: (message) => console.error(chalk16.yellow(`warning: ${message}`))
   };
 }
 var ANDROID_KIND = "android_keystore";
@@ -1937,7 +2103,7 @@ function isCredentialPlatform(p) {
   return CREDENTIAL_PLATFORMS.includes(p);
 }
 async function credentialsAdd(opts, deps) {
-  const d = deps ?? defaultDeps5(clientFor2(opts));
+  const d = deps ?? defaultDeps6(clientFor2(opts));
   if (!opts.platform || !isCredentialPlatform(opts.platform)) {
     throw new UsageError('--platform is required and must be "ios", "android", or "tvos"');
   }
@@ -1996,16 +2162,16 @@ async function credentialsAdd(opts, deps) {
     if (opts.json) {
       console.log(JSON.stringify(result));
     } else {
-      console.log(chalk15.green(`\u2713 added ${result.name} (${result.platform})`));
+      console.log(chalk16.green(`\u2713 added ${result.name} (${result.platform})`));
     }
     process.exitCode = 0;
   } catch (err) {
-    printError4(opts, err);
+    printError5(opts, err);
     process.exitCode = 1;
   }
 }
 async function credentialsGenerate(opts, deps) {
-  const d = deps ?? defaultDeps5(clientFor2(opts));
+  const d = deps ?? defaultDeps6(clientFor2(opts));
   if (!opts.platform) {
     throw new UsageError('--platform is required and must be "android", "ios", or "tvos"');
   }
@@ -2054,27 +2220,27 @@ async function credentialsGenerate(opts, deps) {
     }
     if (opts.json) {
     } else {
-      console.log(chalk15.green(`\u2713 generated ${result.name} (android)`));
+      console.log(chalk16.green(`\u2713 generated ${result.name} (android)`));
       console.log("");
-      console.log(`  Keystore saved to: ${chalk15.bold(savedTo)}`);
-      console.log(`  Key alias:         ${chalk15.bold(result.key_alias)}`);
-      console.log(`  Store password:    ${chalk15.bold(result.store_password)}`);
-      console.log(`  Key password:      ${chalk15.bold(result.key_password)}`);
+      console.log(`  Keystore saved to: ${chalk16.bold(savedTo)}`);
+      console.log(`  Key alias:         ${chalk16.bold(result.key_alias)}`);
+      console.log(`  Store password:    ${chalk16.bold(result.store_password)}`);
+      console.log(`  Key password:      ${chalk16.bold(result.key_password)}`);
       console.log("");
       console.log(
-        chalk15.yellow(
+        chalk16.yellow(
           "  These are shown ONCE \u2014 VibeView cannot recover the keystore file or its passwords. Back them up somewhere safe."
         )
       );
       console.log(
-        chalk15.yellow(
+        chalk16.yellow(
           "  The credential is already uploaded and active for android and androidtv production builds."
         )
       );
     }
     process.exitCode = 0;
   } catch (err) {
-    printError4(opts, err);
+    printError5(opts, err);
     process.exitCode = 1;
   }
 }
@@ -2093,29 +2259,29 @@ async function generateAppleCredential(platform, opts, d) {
     if (opts.json) {
       console.log(JSON.stringify(result));
     } else {
-      console.log(chalk15.green(`\u2713 generated ${result.name} (${result.platform})`));
+      console.log(chalk16.green(`\u2713 generated ${result.name} (${result.platform})`));
       console.log("");
-      console.log(`  Scope:   ${chalk15.bold(result.app_public_id ?? "org-wide")}`);
+      console.log(`  Scope:   ${chalk16.bold(result.app_public_id ?? "org-wide")}`);
       const expires = formatExpires(result);
       if (expires) {
-        console.log(`  Expires: ${chalk15.bold(expires)}`);
+        console.log(`  Expires: ${chalk16.bold(expires)}`);
       }
       console.log("");
       console.log(
         `  The certificate and provisioning profile are stored with VibeView and already active for ${result.platform} production builds.`
       );
       console.log(
-        `  Run ${chalk15.bold(`vibeview credentials download ${result.name}`)} if you need the files locally.`
+        `  Run ${chalk16.bold(`vibeview credentials download ${result.name}`)} if you need the files locally.`
       );
     }
     process.exitCode = 0;
   } catch (err) {
-    printError4(opts, err);
+    printError5(opts, err);
     process.exitCode = 1;
   }
 }
 async function credentialsDownload(name, opts, deps) {
-  const d = deps ?? defaultDeps5(clientFor2(opts));
+  const d = deps ?? defaultDeps6(clientFor2(opts));
   const outDir = opts.out ?? process.cwd();
   try {
     const { credentials: credentials2 } = await d.listCredentials(opts.app);
@@ -2171,26 +2337,26 @@ async function credentialsDownload(name, opts, deps) {
       await d.chmod(path, 384);
     }
     if (!opts.json) {
-      console.log(chalk15.green(`\u2713 downloaded ${material.name} (${material.platform})`));
+      console.log(chalk16.green(`\u2713 downloaded ${material.name} (${material.platform})`));
       console.log("");
-      console.log(`  Saved to: ${chalk15.bold(savedTo)}`);
+      console.log(`  Saved to: ${chalk16.bold(savedTo)}`);
       if (profileSavedTo !== null) {
-        console.log(`  Profile:  ${chalk15.bold(profileSavedTo)}`);
+        console.log(`  Profile:  ${chalk16.bold(profileSavedTo)}`);
       }
       for (const [key, value] of Object.entries(material.passwords)) {
-        console.log(`  ${key}: ${chalk15.bold(value)}`);
+        console.log(`  ${key}: ${chalk16.bold(value)}`);
       }
       console.log("");
-      console.log(chalk15.yellow("  This download is recorded in your organization's audit log."));
+      console.log(chalk16.yellow("  This download is recorded in your organization's audit log."));
     }
     process.exitCode = 0;
   } catch (err) {
-    printError4(opts, err);
+    printError5(opts, err);
     process.exitCode = 1;
   }
 }
 async function ascKeyAdd(opts, deps) {
-  const d = deps ?? defaultDeps5(clientFor2(opts));
+  const d = deps ?? defaultDeps6(clientFor2(opts));
   if (!opts.keyId) {
     throw new UsageError("--key-id is required (the 10-character App Store Connect key id)");
   }
@@ -2212,25 +2378,25 @@ async function ascKeyAdd(opts, deps) {
     if (opts.json) {
       console.log(JSON.stringify(result));
     } else {
-      console.log(chalk15.green(`\u2713 added App Store Connect key ${result.name}`));
+      console.log(chalk16.green(`\u2713 added App Store Connect key ${result.name}`));
       console.log("");
-      console.log(`  Key ID:    ${chalk15.bold(result.key_id)}`);
-      console.log(`  Issuer ID: ${chalk15.bold(result.issuer_id)}`);
+      console.log(`  Key ID:    ${chalk16.bold(result.key_id)}`);
+      console.log(`  Issuer ID: ${chalk16.bold(result.issuer_id)}`);
       console.log("");
       console.log(
-        chalk15.yellow(
+        chalk16.yellow(
           "  The .p8 is stored encrypted and will never be shown again \u2014 keep your own copy somewhere safe."
         )
       );
     }
     process.exitCode = 0;
   } catch (err) {
-    printError4(opts, err);
+    printError5(opts, err);
     process.exitCode = 1;
   }
 }
 async function ascKeyList(opts, deps) {
-  const d = deps ?? defaultDeps5(clientFor2(opts));
+  const d = deps ?? defaultDeps6(clientFor2(opts));
   try {
     const { keys } = await d.listAscKeys();
     if (opts.json) {
@@ -2240,7 +2406,7 @@ async function ascKeyList(opts, deps) {
     }
     process.exitCode = 0;
   } catch (err) {
-    printError4(opts, err);
+    printError5(opts, err);
     process.exitCode = 1;
   }
 }
@@ -2248,32 +2414,32 @@ function formatAscKeysHuman(keys) {
   if (keys.length === 0) {
     return "No App Store Connect keys found.\n";
   }
-  const HEADERS3 = ["NAME", "KEY ID", "ISSUER ID", "CREATED"];
+  const HEADERS4 = ["NAME", "KEY ID", "ISSUER ID", "CREATED"];
   const rows = keys.map((k) => [k.name, k.key_id, k.issuer_id, k.created_at ?? ""]);
-  const widths = HEADERS3.map((h, i) => Math.max(h.length, ...rows.map((r) => r[i].length)));
+  const widths = HEADERS4.map((h, i) => Math.max(h.length, ...rows.map((r) => r[i].length)));
   const padCells = (cells) => cells.map((c, i) => c.padEnd(widths[i]));
   const join3 = (cells) => cells.join("  ").trimEnd();
-  const lines = [chalk15.bold(join3(padCells(HEADERS3)))];
+  const lines = [chalk16.bold(join3(padCells(HEADERS4)))];
   for (const row of rows) lines.push(join3(padCells(row)));
   return lines.join("\n") + "\n";
 }
 async function ascKeyRm(name, opts, deps) {
-  const d = deps ?? defaultDeps5(clientFor2(opts));
+  const d = deps ?? defaultDeps6(clientFor2(opts));
   try {
     await d.deleteAscKey(name);
     if (opts.json) {
       console.log(JSON.stringify({ event: "deleted", name }));
     } else {
-      console.log(chalk15.green(`\u2713 removed App Store Connect key ${name}`));
+      console.log(chalk16.green(`\u2713 removed App Store Connect key ${name}`));
     }
     process.exitCode = 0;
   } catch (err) {
-    printError4(opts, err);
+    printError5(opts, err);
     process.exitCode = 1;
   }
 }
 async function playKeyAdd(opts, deps) {
-  const d = deps ?? defaultDeps5(clientFor2(opts));
+  const d = deps ?? defaultDeps6(clientFor2(opts));
   if (!opts.file) {
     throw new UsageError(
       "--file is required (the service-account JSON from Google Play Console \u2192 API access)"
@@ -2289,24 +2455,24 @@ async function playKeyAdd(opts, deps) {
     if (opts.json) {
       console.log(JSON.stringify(result));
     } else {
-      console.log(chalk15.green(`\u2713 added Google Play key ${result.name}`));
+      console.log(chalk16.green(`\u2713 added Google Play key ${result.name}`));
       console.log("");
-      console.log(`  Service account: ${chalk15.bold(result.client_email)}`);
+      console.log(`  Service account: ${chalk16.bold(result.client_email)}`);
       console.log("");
       console.log(
-        chalk15.yellow(
+        chalk16.yellow(
           "  The JSON key is stored encrypted and will never be shown again \u2014 keep your own copy somewhere safe."
         )
       );
     }
     process.exitCode = 0;
   } catch (err) {
-    printError4(opts, err);
+    printError5(opts, err);
     process.exitCode = 1;
   }
 }
 async function playKeyList(opts, deps) {
-  const d = deps ?? defaultDeps5(clientFor2(opts));
+  const d = deps ?? defaultDeps6(clientFor2(opts));
   try {
     const { keys } = await d.listPlayKeys();
     if (opts.json) {
@@ -2316,7 +2482,7 @@ async function playKeyList(opts, deps) {
     }
     process.exitCode = 0;
   } catch (err) {
-    printError4(opts, err);
+    printError5(opts, err);
     process.exitCode = 1;
   }
 }
@@ -2324,32 +2490,32 @@ function formatPlayKeysHuman(keys) {
   if (keys.length === 0) {
     return "No Google Play keys found.\n";
   }
-  const HEADERS3 = ["NAME", "CLIENT EMAIL", "CREATED"];
+  const HEADERS4 = ["NAME", "CLIENT EMAIL", "CREATED"];
   const rows = keys.map((k) => [k.name, k.client_email, k.created_at ?? ""]);
-  const widths = HEADERS3.map((h, i) => Math.max(h.length, ...rows.map((r) => r[i].length)));
+  const widths = HEADERS4.map((h, i) => Math.max(h.length, ...rows.map((r) => r[i].length)));
   const padCells = (cells) => cells.map((c, i) => c.padEnd(widths[i]));
   const join3 = (cells) => cells.join("  ").trimEnd();
-  const lines = [chalk15.bold(join3(padCells(HEADERS3)))];
+  const lines = [chalk16.bold(join3(padCells(HEADERS4)))];
   for (const row of rows) lines.push(join3(padCells(row)));
   return lines.join("\n") + "\n";
 }
 async function playKeyRm(name, opts, deps) {
-  const d = deps ?? defaultDeps5(clientFor2(opts));
+  const d = deps ?? defaultDeps6(clientFor2(opts));
   try {
     await d.deletePlayKey(name);
     if (opts.json) {
       console.log(JSON.stringify({ event: "deleted", name }));
     } else {
-      console.log(chalk15.green(`\u2713 removed Google Play key ${name}`));
+      console.log(chalk16.green(`\u2713 removed Google Play key ${name}`));
     }
     process.exitCode = 0;
   } catch (err) {
-    printError4(opts, err);
+    printError5(opts, err);
     process.exitCode = 1;
   }
 }
 async function credentialsList(opts, deps) {
-  const d = deps ?? defaultDeps5(clientFor2(opts));
+  const d = deps ?? defaultDeps6(clientFor2(opts));
   try {
     const { credentials: credentials2 } = await d.listCredentials(opts.app);
     for (const c of credentials2) {
@@ -2365,7 +2531,7 @@ async function credentialsList(opts, deps) {
     }
     process.exitCode = 0;
   } catch (err) {
-    printError4(opts, err);
+    printError5(opts, err);
     process.exitCode = 1;
   }
 }
@@ -2398,7 +2564,7 @@ function formatCredentialsHuman(credentials2) {
   if (credentials2.length === 0) {
     return "No signing credentials found.\n";
   }
-  const HEADERS3 = ["NAME", "PLATFORM", "SCOPE", "IDENTITY", "EXPIRES"];
+  const HEADERS4 = ["NAME", "PLATFORM", "SCOPE", "IDENTITY", "EXPIRES"];
   const rows = credentials2.map((c) => [
     c.name,
     c.platform,
@@ -2406,25 +2572,25 @@ function formatCredentialsHuman(credentials2) {
     formatIdentity(c),
     formatExpires(c)
   ]);
-  const widths = HEADERS3.map((h, i) => Math.max(h.length, ...rows.map((r) => r[i].length)));
+  const widths = HEADERS4.map((h, i) => Math.max(h.length, ...rows.map((r) => r[i].length)));
   const padCells = (cells) => cells.map((c, i) => c.padEnd(widths[i]));
   const join3 = (cells) => cells.join("  ").trimEnd();
-  const lines = [chalk15.bold(join3(padCells(HEADERS3)))];
+  const lines = [chalk16.bold(join3(padCells(HEADERS4)))];
   for (const row of rows) lines.push(join3(padCells(row)));
   return lines.join("\n") + "\n";
 }
 async function credentialsRm(name, opts, deps) {
-  const d = deps ?? defaultDeps5(clientFor2(opts));
+  const d = deps ?? defaultDeps6(clientFor2(opts));
   try {
     await d.deleteCredential({ name, app: opts.app });
     if (opts.json) {
       console.log(JSON.stringify({ event: "deleted", name }));
     } else {
-      console.log(chalk15.green(`\u2713 removed ${name}`));
+      console.log(chalk16.green(`\u2713 removed ${name}`));
     }
     process.exitCode = 0;
   } catch (err) {
-    printError4(opts, err);
+    printError5(opts, err);
     process.exitCode = 1;
   }
 }
@@ -2432,16 +2598,16 @@ function printKeystoreWriteFailure(opts, err, result) {
   const message = err instanceof Error ? err.message : String(err);
   if (opts.json) {
     console.log(JSON.stringify({ event: "error", message }));
-    console.error(chalk15.red(`error: ${message}`));
+    console.error(chalk16.red(`error: ${message}`));
     return;
   }
-  console.error(chalk15.red(`error: ${message}`));
+  console.error(chalk16.red(`error: ${message}`));
   console.error(
-    chalk15.red(
+    chalk16.red(
       `The keystore could NOT be saved locally, but the credential "${result.name}" WAS created server-side and its key material can never be re-fetched.`
     )
   );
-  console.error(chalk15.red("Recover it NOW from the values below \u2014 they will not be shown again:"));
+  console.error(chalk16.red("Recover it NOW from the values below \u2014 they will not be shown again:"));
   console.error("");
   console.error(`  Key alias:         ${result.key_alias}`);
   console.error(`  Store password:    ${result.store_password}`);
@@ -2452,19 +2618,19 @@ function printKeystoreWriteFailure(opts, err, result) {
     `  Restore the file with: echo '${result.keystore_base64}' | base64 -d > ${result.name}.keystore`
   );
 }
-function printError4(opts, err) {
+function printError5(opts, err) {
   const message = err instanceof Error ? err.message : String(err);
   if (opts.json) console.log(JSON.stringify({ event: "error", message }));
-  console.error(chalk15.red(`error: ${message}`));
+  console.error(chalk16.red(`error: ${message}`));
 }
 
 // src/commands/webhooks.ts
-import chalk16 from "chalk";
+import chalk17 from "chalk";
 function clientFor3(opts) {
   const { token, baseUrl } = resolveAuth(opts);
   return new ApiClient(baseUrl, token);
 }
-function defaultDeps6(client) {
+function defaultDeps7(client) {
   return {
     addWebhook: (body) => client.addWebhook(body),
     listWebhooks: () => client.listWebhooks(),
@@ -2481,7 +2647,7 @@ async function webhooksAdd(opts, deps) {
   if (!opts.url.startsWith("https://")) {
     throw new UsageError(`--url must start with https:// (got "${opts.url}")`);
   }
-  const d = deps ?? defaultDeps6(clientFor3(opts));
+  const d = deps ?? defaultDeps7(clientFor3(opts));
   try {
     const result = await d.addWebhook({
       url: opts.url,
@@ -2490,19 +2656,19 @@ async function webhooksAdd(opts, deps) {
     if (opts.json) {
       console.log(JSON.stringify(result));
     } else {
-      console.log(chalk16.green(`\u2713 added ${result.id} ${result.url}`));
+      console.log(chalk17.green(`\u2713 added ${result.id} ${result.url}`));
       console.log("");
-      console.log(`  Signing secret: ${chalk16.bold(result.secret)}`);
+      console.log(`  Signing secret: ${chalk17.bold(result.secret)}`);
       if (opts.secret !== void 0) {
-        console.log(chalk16.yellow("  (This is the secret you provided.)"));
+        console.log(chalk17.yellow("  (This is the secret you provided.)"));
       }
       console.log(
-        chalk16.yellow("  This secret is shown ONCE and cannot be retrieved again \u2014 store it now.")
+        chalk17.yellow("  This secret is shown ONCE and cannot be retrieved again \u2014 store it now.")
       );
     }
     process.exitCode = 0;
   } catch (err) {
-    printError5(opts, err);
+    printError6(opts, err);
     process.exitCode = 1;
   }
 }
@@ -2517,7 +2683,7 @@ function formatWebhooksHuman(webhooks2) {
   if (webhooks2.length === 0) {
     return "No webhooks found.\n";
   }
-  const HEADERS3 = ["ID", "URL", "ACTIVE", "LAST DELIVERY", "CREATED"];
+  const HEADERS4 = ["ID", "URL", "ACTIVE", "LAST DELIVERY", "CREATED"];
   const rows = webhooks2.map((w) => [
     w.id,
     w.url,
@@ -2525,15 +2691,15 @@ function formatWebhooksHuman(webhooks2) {
     formatLastDelivery(w.last_delivery),
     w.created_at
   ]);
-  const widths = HEADERS3.map((h, i) => Math.max(h.length, ...rows.map((r) => r[i].length)));
+  const widths = HEADERS4.map((h, i) => Math.max(h.length, ...rows.map((r) => r[i].length)));
   const padCells = (cells) => cells.map((c, i) => c.padEnd(widths[i]));
   const join3 = (cells) => cells.join("  ").trimEnd();
-  const lines = [chalk16.bold(join3(padCells(HEADERS3)))];
+  const lines = [chalk17.bold(join3(padCells(HEADERS4)))];
   for (const row of rows) lines.push(join3(padCells(row)));
   return lines.join("\n") + "\n";
 }
 async function webhooksList(opts, deps) {
-  const d = deps ?? defaultDeps6(clientFor3(opts));
+  const d = deps ?? defaultDeps7(clientFor3(opts));
   try {
     const { webhooks: webhooks2 } = await d.listWebhooks();
     if (opts.json) {
@@ -2543,22 +2709,22 @@ async function webhooksList(opts, deps) {
     }
     process.exitCode = 0;
   } catch (err) {
-    printError5(opts, err);
+    printError6(opts, err);
     process.exitCode = 1;
   }
 }
 async function webhooksRm(id, opts, deps) {
-  const d = deps ?? defaultDeps6(clientFor3(opts));
+  const d = deps ?? defaultDeps7(clientFor3(opts));
   try {
     await d.deleteWebhook(id);
     if (opts.json) {
       console.log(JSON.stringify({ event: "deleted", id }));
     } else {
-      console.log(chalk16.green(`\u2713 removed ${id}`));
+      console.log(chalk17.green(`\u2713 removed ${id}`));
     }
     process.exitCode = 0;
   } catch (err) {
-    printError5(opts, err);
+    printError6(opts, err);
     process.exitCode = 1;
   }
 }
@@ -2575,7 +2741,7 @@ function parseUtcTimestamp(iso) {
 var TEST_POLL_INTERVAL_MS = 3e3;
 var TEST_POLL_BUDGET_MS = 6e4;
 async function webhooksTest(id, opts, deps) {
-  const d = deps ?? defaultDeps6(clientFor3(opts));
+  const d = deps ?? defaultDeps7(clientFor3(opts));
   try {
     const startedAt = d.now();
     await d.testWebhook(id);
@@ -2587,13 +2753,13 @@ async function webhooksTest(id, opts, deps) {
         if (opts.json) console.log(JSON.stringify(ld));
         if (ld.status === "succeeded") {
           if (!opts.json) {
-            console.log(chalk16.green(`\u2713 Delivered (HTTP ${ld.response_code})`));
+            console.log(chalk17.green(`\u2713 Delivered (HTTP ${ld.response_code})`));
           }
           process.exitCode = 0;
         } else {
           if (!opts.json) {
             const code = ld.response_code != null ? `HTTP ${ld.response_code}` : "no response";
-            console.error(chalk16.red(`\u2717 Failed (${code}) at ${ld.at}`));
+            console.error(chalk17.red(`\u2717 Failed (${code}) at ${ld.at}`));
           }
           process.exitCode = 1;
         }
@@ -2602,25 +2768,25 @@ async function webhooksTest(id, opts, deps) {
     }
     if (opts.json) console.log(JSON.stringify({ status: "pending" }));
     console.error(
-      chalk16.yellow(
+      chalk17.yellow(
         `Delivery still pending after ${TEST_POLL_BUDGET_MS / 1e3}s \u2014 check \`vibeview webhooks list\` later for the result.`
       )
     );
     process.exitCode = 1;
   } catch (err) {
-    printError5(opts, err);
+    printError6(opts, err);
     process.exitCode = 1;
   }
 }
-function printError5(opts, err) {
+function printError6(opts, err) {
   const message = err instanceof Error ? err.message : String(err);
   if (opts.json) console.log(JSON.stringify({ event: "error", message }));
-  console.error(chalk16.red(`error: ${message}`));
+  console.error(chalk17.red(`error: ${message}`));
 }
 
 // src/lib/formatters/devices.ts
-import chalk17 from "chalk";
-var HEADERS2 = ["DEVICE_ID", "NAME", "TYPE", "CATEGORY", "OS", "STATUS"];
+import chalk18 from "chalk";
+var HEADERS3 = ["DEVICE_ID", "NAME", "TYPE", "CATEGORY", "OS", "STATUS"];
 function formatDevicesHuman(devices) {
   if (devices.length === 0) {
     return "No devices registered.\n";
@@ -2633,11 +2799,11 @@ function formatDevicesHuman(devices) {
     d.os_version,
     d.status
   ]);
-  const widths = HEADERS2.map((h, i) => Math.max(h.length, ...rows.map((r) => r[i].length)));
+  const widths = HEADERS3.map((h, i) => Math.max(h.length, ...rows.map((r) => r[i].length)));
   const fmt = (cells) => cells.map((c, i) => c.padEnd(widths[i])).join("  ").trimEnd();
-  const lines = [chalk17.bold(fmt(HEADERS2))];
+  const lines = [chalk18.bold(fmt(HEADERS3))];
   for (const row of rows.sort(rowSort)) {
-    const statusColored = row[5] === "available" ? chalk17.green(row[5]) : row[5] === "busy" ? chalk17.yellow(row[5]) : chalk17.dim(row[5]);
+    const statusColored = row[5] === "available" ? chalk18.green(row[5]) : row[5] === "busy" ? chalk18.yellow(row[5]) : chalk18.dim(row[5]);
     lines.push(fmt([row[0], row[1], row[2], row[3], row[4], statusColored]));
   }
   return lines.join("\n") + "\n";
@@ -2727,7 +2893,7 @@ import { dirname, join as join2 } from "path";
 import { fileURLToPath } from "url";
 import { spawnSync } from "child_process";
 import { confirm } from "@inquirer/prompts";
-import chalk18 from "chalk";
+import chalk19 from "chalk";
 function resolveShippedSkillPath(fromDir) {
   for (const rel of ["..", join2("..", "..")]) {
     const candidate = join2(fromDir, rel, "skills", "vibeview-agent", "SKILL.md");
@@ -2755,23 +2921,23 @@ function registerMcp() {
     encoding: "utf8"
   });
   if (res.status === 0) {
-    console.log(chalk18.green("\u2713 MCP server registered with Claude Code (claude mcp add vibeview)"));
+    console.log(chalk19.green("\u2713 MCP server registered with Claude Code (claude mcp add vibeview)"));
     return;
   }
   const out = `${res.stderr ?? ""}${res.stdout ?? ""}`;
   if (out.includes("already exists")) {
-    console.log(chalk18.dim("MCP server already registered with Claude Code \u2014 nothing to do"));
+    console.log(chalk19.dim("MCP server already registered with Claude Code \u2014 nothing to do"));
     return;
   }
-  console.error(chalk18.yellow(`\u26A0 could not register the MCP server: ${out.trim() || res.error}`));
-  console.error(chalk18.yellow("  register it manually: claude mcp add vibeview -- vibeview mcp"));
+  console.error(chalk19.yellow(`\u26A0 could not register the MCP server: ${out.trim() || res.error}`));
+  console.error(chalk19.yellow("  register it manually: claude mcp add vibeview -- vibeview mcp"));
 }
 async function agentSetup(opts) {
   const moduleDir = dirname(fileURLToPath(import.meta.url));
   const shipped = resolveShippedSkillPath(moduleDir);
   if (!shipped) {
     console.error(
-      chalk18.red(
+      chalk19.red(
         "error: could not find the packaged skill (skills/vibeview-agent/SKILL.md) \u2014 is this a complete install of the vibeview package?"
       )
     );
@@ -2780,9 +2946,9 @@ async function agentSetup(opts) {
   }
   const targetDir = skillInstallDir(opts.project ?? false, process.cwd(), homedir());
   const result = installSkill(shipped, targetDir);
-  console.log(chalk18.green(`\u2713 vibeview-agent skill ${result}: ${join2(targetDir, "SKILL.md")}`));
+  console.log(chalk19.green(`\u2713 vibeview-agent skill ${result}: ${join2(targetDir, "SKILL.md")}`));
   console.log(
-    chalk18.dim(
+    chalk19.dim(
       opts.project ? "  Claude Code discovers it automatically for anyone working in this project." : "  Claude Code discovers it automatically in every project on this machine."
     )
   );
@@ -2790,7 +2956,7 @@ async function agentSetup(opts) {
     if (!claudeCliAvailable()) {
       if (opts.mcp === true) {
         console.error(
-          chalk18.yellow(
+          chalk19.yellow(
             "\u26A0 claude CLI not found \u2014 install Claude Code, then run: claude mcp add vibeview -- vibeview mcp"
           )
         );
@@ -2804,7 +2970,7 @@ async function agentSetup(opts) {
   }
   console.log(
     `
-Suggested line for your project's ${chalk18.bold("CLAUDE.md")} (or ${chalk18.bold(
+Suggested line for your project's ${chalk19.bold("CLAUDE.md")} (or ${chalk19.bold(
       "AGENTS.md"
     )} for other agents):
 `
@@ -2812,7 +2978,7 @@ Suggested line for your project's ${chalk18.bold("CLAUDE.md")} (or ${chalk18.bol
   console.log(`  ${CLAUDE_MD_SUGGESTION}
 `);
   console.log(
-    chalk18.dim(
+    chalk19.dim(
       "Other agents (Cursor, Copilot, Codex, ...): point them at the skill file above, or\nadd the MCP server per client \u2014 see https://vibeview.io/docs/agent-control"
     )
   );
@@ -2991,6 +3157,12 @@ program.command("submit").description(
 ).option(
   "--asc-key <name>",
   "ios/tvos only: which stored App Store Connect key to use (default when exactly one \u2014 see `vibeview credentials asc-key add`)"
+).option(
+  "--release-status <status>",
+  "android/androidtv only: Play release status \u2014 completed (default), draft, or inProgress"
+).option(
+  "--rollout <fraction>",
+  "android/androidtv only: staged-rollout fraction, 0 < f < 1 (requires --release-status inProgress)"
 ).option("--no-wait", "Print the submission id and exit without waiting for completion").option("--json", "Emit line-delimited JSON events on stdout instead of human output", false).action((opts) => submitCommand(opts));
 var builds = program.command("builds").description("Manage cloud builds (see `vibeview build --cloud`)");
 builds.command("list").description("List cloud builds in your organization").option("--token <token>", "API token (or set VIBEVIEW_API_TOKEN)").option("--json", "Print the raw build summaries as a JSON array", false).option("--limit <n>", "Max builds to return (default 50, max 200)").action((opts) => buildsList(opts));
@@ -3000,6 +3172,13 @@ builds.command("cancel <id>").description("Cancel a queued or running cloud buil
 builds.command("delete-artifact <id>").description(
   "Delete a production build's stored artifact file (irreversible; the build record, logs, and cost stay intact \u2014 only the downloadable file is removed)"
 ).option("--token <token>", "API token (or set VIBEVIEW_API_TOKEN)").option("--json", "Print the result as one JSON line", false).action((id, opts) => buildsDeleteArtifact(id, opts));
+var versions = program.command("versions").description(
+  "Manage an app's server-side build-number counters (used by vibeview.json `build.autoIncrement` production builds)"
+);
+versions.command("list").description("List an app's build-number counters, one per platform").option("--token <token>", "API token (or set VIBEVIEW_API_TOKEN)").option("--app <id>", "App public id (see `vibeview list-apps`)").option("--json", "Print the raw response as JSON", false).action((opts) => versionsList(opts));
+versions.command("set <number>").description(
+  "Seed or overwrite one platform's counter \u2014 the next autoIncrement production build gets <number> + 1 (use it to start above a build number already in the store)"
+).option("--token <token>", "API token (or set VIBEVIEW_API_TOKEN)").option("--app <id>", "App public id (see `vibeview list-apps`)").option("--platform <platform>", "ios, android, tvos, or androidtv").option("--json", "Print the updated version object as one JSON line", false).action((number, opts) => versionsSet(number, opts));
 program.command("whoami").description("Show which account and role this CLI is authenticated as").option("--token <token>", "API token (or set VIBEVIEW_API_TOKEN)").option("--json", "Print the identity as one JSON line", false).action((opts) => whoAmI(opts));
 var env = program.command("env").description("Manage cloud build environment variables and secrets");
 env.command("list").description("List build variables and secrets (never prints a value)").option("--token <token>", "API token (or set VIBEVIEW_API_TOKEN)").option("--app <id>", "Scope to a single app (default: org-wide variables only)").option("--json", "Print the raw variable list as a JSON array", false).action((opts) => envList(opts));
@@ -3076,7 +3255,7 @@ program.command("dev-stop").description("Stop a `vibeview dev --detach` session
 program.command("mcp").description(
   "Run an MCP stdio server exposing the agent verbs (tap, swipe, type, ...) plus dev_start/dev_stop as tools"
 ).option("--token <token>", "API token (or set VIBEVIEW_API_TOKEN)").action(async (opts) => {
-  const { runMcpServer } = await import("./server-GMC6F545.js");
+  const { runMcpServer } = await import("./server-NR3ZPQF5.js");
   await runMcpServer(opts);
 });
 program.command("agent-setup").description(

package/dist/{server-GMC6F545.js → server-NR3ZPQF5.js}

@@ -11,11 +11,11 @@ import {
   readDevState,
   renderEnvelope,
   startDevSession
-} from "./chunk-T6FS4ELD.js";
+} from "./chunk-GUCKFB4K.js";
 import {
   ApiClient,
   resolveAuth
-} from "./chunk-FG2J2BGS.js";
+} from "./chunk-MCCXPIGE.js";
 
 // src/mcp/server.ts
 import { writeFileSync } from "fs";
@@ -239,7 +239,7 @@ async function handleUploadApp(args, deps) {
   }
   const name = typeof args.name === "string" && args.name ? args.name : void 0;
   const upload = deps.uploadApp ?? (async (f, n) => {
-    const { uploadAppBuild } = await import("./upload-app-4PE5BEP7.js");
+    const { uploadAppBuild } = await import("./upload-app-HUMMA6UY.js");
     const { result: result2 } = await uploadAppBuild(f, { ...deps.auth, name: n });
     return result2;
   });

package/dist/{upload-app-4PE5BEP7.js → upload-app-HUMMA6UY.js}

@@ -2,7 +2,7 @@
 import {
   uploadApp,
   uploadAppBuild
-} from "./chunk-FG2J2BGS.js";
+} from "./chunk-MCCXPIGE.js";
 export {
   uploadApp,
   uploadAppBuild

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "vibeview",
-  "version": "0.19.0",
+  "version": "0.20.0",
   "description": "VibeView CLI -- run mobile tests from CI/CD pipelines",
   "type": "module",
   "bin": {