vibeview 0.24.0 → 0.26.0

package/dist/cli.js

@@ -12,14 +12,16 @@ import {
   formatDevicesHuman,
   formatDuration,
   killOwnedMetro,
+  listBuilds,
   loadDevConfig,
   newTransitionState,
+  platformWithArticle,
   printOutcomeLine,
   printTransition,
   readDevState,
   readMetroState,
   runAgentVerb
-} from "./chunk-MVNMGB6I.js";
+} from "./chunk-JK3T3AMW.js";
 import {
   ApiClient,
   EXIT_INFRA_ERROR,
@@ -32,7 +34,7 @@ import {
   resolveAuth,
   saveConfig,
   uploadApp
-} from "./chunk-2WNJYNDW.js";
+} from "./chunk-RFFCCPGZ.js";
 
 // src/cli.ts
 import { createRequire } from "module";
@@ -881,8 +883,52 @@ async function listApps(options) {
   console.log();
 }
 
-// src/commands/create-test.ts
+// src/commands/stop.ts
 import chalk8 from "chalk";
+async function stopCommand(sessionId, opts, deps) {
+  const id = sessionId?.trim();
+  if (!id) throw new UsageError("a session id is required: vibeview stop <session-id>");
+  const { token, baseUrl } = resolveAuth(opts);
+  const d = deps ?? { stopSession: (s) => new ApiClient(baseUrl, token).stopSession(s) };
+  try {
+    await d.stopSession(id);
+  } catch (err) {
+    const message = err instanceof Error ? err.message : String(err);
+    if (opts.json) console.log(JSON.stringify({ stopped: false, session_id: id, message }));
+    console.error(chalk8.red(`error: ${message}`));
+    process.exitCode = 1;
+    return;
+  }
+  const state = readDevState(process.cwd());
+  let devPid = null;
+  if (state && state.session_id === id) {
+    devPid = state.pid;
+    try {
+      process.kill(state.pid, "SIGTERM");
+    } catch (err) {
+      if (err.code !== "ESRCH") throw err;
+    }
+    clearDevState(process.cwd());
+    killOwnedMetro(process.cwd());
+  }
+  if (opts.json) {
+    console.log(
+      JSON.stringify({
+        stopped: true,
+        session_id: id,
+        ...devPid !== null ? { pid: devPid } : {}
+      })
+    );
+  } else {
+    console.error(
+      `Stopped session ${id}${devPid !== null ? ` (and this project's dev process, pid ${devPid})` : ""}.`
+    );
+  }
+  process.exitCode = 0;
+}
+
+// src/commands/create-test.ts
+import chalk9 from "chalk";
 import { existsSync, readFileSync } from "fs";
 async function readStdin() {
   return new Promise((resolve, reject) => {
@@ -973,19 +1019,19 @@ async function createTest(options) {
       );
     } else {
       console.log(`
-  ${chalk8.cyan(result.public_id)}  ${result.name}`);
+  ${chalk9.cyan(result.public_id)}  ${result.name}`);
       if (result.app_name) {
-        console.log(`  ${chalk8.dim(`App: ${result.app_name}`)}`);
+        console.log(`  ${chalk9.dim(`App: ${result.app_name}`)}`);
       }
       if (result.platform) {
-        console.log(`  ${chalk8.dim(`Platform: ${result.platform}`)}`);
+        console.log(`  ${chalk9.dim(`Platform: ${result.platform}`)}`);
       }
-      console.log(`  ${chalk8.dim(`Steps: ${steps.length}`)}`);
-      console.log(chalk8.dim(`  ${baseUrl}/tests?tab=standalone
+      console.log(`  ${chalk9.dim(`Steps: ${steps.length}`)}`);
+      console.log(chalk9.dim(`  ${baseUrl}/tests?tab=standalone
 `));
     }
   } catch (err) {
-    console.error(chalk8.red(err instanceof Error ? err.message : "Failed to create test"));
+    console.error(chalk9.red(err instanceof Error ? err.message : "Failed to create test"));
     process.exit(EXIT_INFRA_ERROR);
   }
 }
@@ -1067,7 +1113,7 @@ async function logout() {
 }
 
 // src/commands/dev-status.ts
-import chalk9 from "chalk";
+import chalk10 from "chalk";
 async function devStatus(opts) {
   const state = readDevState(process.cwd());
   if (!state) {
@@ -1112,7 +1158,7 @@ async function devStatus(opts) {
     console.error(`  url:      ${state.page_url}`);
     console.error(`  started:  ${state.started_at}`);
   }
-  if (metro) console.error(chalk9.dim(`Metro: pid ${metro.pid} on :${metro.port} (CLI-owned)`));
+  if (metro) console.error(chalk10.dim(`Metro: pid ${metro.pid} on :${metro.port} (CLI-owned)`));
   process.exit(0);
 }
 
@@ -1148,12 +1194,12 @@ async function devStop(opts) {
 }
 
 // src/commands/dev-reload.ts
-import chalk10 from "chalk";
+import chalk11 from "chalk";
 function fail(opts, code, message, exit) {
   if (opts.json) {
     console.log(JSON.stringify({ reloaded: false, code, message }));
   } else {
-    console.error(chalk10.red(`error: ${message}`));
+    console.error(chalk11.red(`error: ${message}`));
   }
   process.exit(exit);
 }
@@ -1172,7 +1218,7 @@ async function devReload(opts) {
     fail(
       opts,
       "not_roku",
-      `dev-reload is for Roku channels; a ${state.platform} session hot-reloads through Metro on its own.`,
+      `dev-reload is for Roku channels; ${platformWithArticle(state.platform)} session hot-reloads through Metro on its own.`,
       2
     );
   }
@@ -1206,7 +1252,7 @@ async function devReload(opts) {
     api,
     // Build output and the "reloaded in" line are human output: stderr, so
     // stdout stays reserved for the --json result.
-    log: (line) => console.error(chalk10.dim(line))
+    log: (line) => console.error(chalk11.dim(line))
   });
   const started = Date.now();
   try {
@@ -1227,22 +1273,22 @@ async function devReload(opts) {
 }
 
 // src/commands/builds.ts
-import chalk12 from "chalk";
+import chalk13 from "chalk";
 
 // src/lib/formatters/builds.ts
-import chalk11 from "chalk";
+import chalk12 from "chalk";
 var HEADERS = ["ID", "PLATFORM", "STATUS", "CREATED", "COST", "APP"];
 function formatCostCell(costMicro) {
   return costMicro > 0 ? `$${(costMicro / 1e6).toFixed(2)}` : "";
 }
 var STATUS_COLOR = {
-  succeeded: chalk11.green,
-  failed: chalk11.red,
-  timed_out: chalk11.red,
-  infra_failed: chalk11.red,
-  canceled: chalk11.dim,
-  running: chalk11.yellow,
-  queued: chalk11.dim
+  succeeded: chalk12.green,
+  failed: chalk12.red,
+  timed_out: chalk12.red,
+  infra_failed: chalk12.red,
+  canceled: chalk12.dim,
+  running: chalk12.yellow,
+  queued: chalk12.dim
 };
 function formatBuildsHuman(builds2) {
   if (builds2.length === 0) {
@@ -1259,7 +1305,7 @@ function formatBuildsHuman(builds2) {
   const widths = HEADERS.map((h, i) => Math.max(h.length, ...rows.map((r) => r[i].length)));
   const padCells = (cells) => cells.map((c, i) => c.padEnd(widths[i]));
   const join3 = (cells) => cells.join("  ").trimEnd();
-  const lines = [chalk11.bold(join3(padCells(HEADERS)))];
+  const lines = [chalk12.bold(join3(padCells(HEADERS)))];
   for (const row of rows) {
     const padded = padCells(row);
     const colorFn = STATUS_COLOR[row[2]] ?? ((s) => s);
@@ -1318,7 +1364,7 @@ async function buildsLogs(id, opts, deps) {
         console.log(JSON.stringify(logs));
       } else {
         if (logs.content) process.stdout.write(logs.content);
-        console.error(chalk12.dim(`status: ${logs.status}`));
+        console.error(chalk13.dim(`status: ${logs.status}`));
       }
       process.exitCode = 0;
       return;
@@ -1415,7 +1461,7 @@ async function buildsDownload(id, opts, deps) {
     if (opts.json) {
       console.log(JSON.stringify(result));
     } else {
-      console.log(chalk12.green(`\u2713 saved ${result.path}`));
+      console.log(chalk13.green(`\u2713 saved ${result.path}`));
     }
     process.exitCode = 0;
   } catch (err) {
@@ -1432,7 +1478,7 @@ async function buildsCancel(id, opts, deps) {
     if (opts.json) {
       console.log(JSON.stringify(build));
     } else {
-      console.log(`${chalk12.cyan(build.id)}  ${build.status}`);
+      console.log(`${chalk13.cyan(build.id)}  ${build.status}`);
     }
     process.exitCode = 0;
   } catch (err) {
@@ -1449,7 +1495,7 @@ async function buildsDeleteArtifact(id, opts, deps) {
     if (opts.json) {
       console.log(JSON.stringify(result));
     } else {
-      console.log(chalk12.green(`\u2713 deleted artifact for ${id}`));
+      console.log(chalk13.green(`\u2713 deleted artifact for ${id}`));
     }
     process.exitCode = 0;
   } catch (err) {
@@ -1460,11 +1506,11 @@ async function buildsDeleteArtifact(id, opts, deps) {
 function printError(opts, err) {
   const message = err instanceof Error ? err.message : String(err);
   if (opts.json) console.log(JSON.stringify({ event: "error", message }));
-  console.error(chalk12.red(`error: ${message}`));
+  console.error(chalk13.red(`error: ${message}`));
 }
 
 // src/commands/submit.ts
-import chalk13 from "chalk";
+import chalk14 from "chalk";
 function defaultDeps2(client) {
   return {
     createSubmission: client.createSubmission.bind(client),
@@ -1487,7 +1533,7 @@ function submitConfigFor(cwd, platform) {
     cfg = loadDevConfig(cwd);
   } catch (err) {
     console.error(
-      chalk13.yellow(
+      chalk14.yellow(
         `warning: vibeview.json could not be read \u2014 ignoring submit defaults (${err instanceof Error ? err.message : String(err)})`
       )
     );
@@ -1635,12 +1681,12 @@ async function submitCommand(opts, deps) {
       return;
     }
     if (!opts.json) {
-      console.error(`  ${chalk13.cyan(sub.id)}  ${chalk13.dim(`[${sub.platform}]`)}`);
+      console.error(`  ${chalk14.cyan(sub.id)}  ${chalk14.dim(`[${sub.platform}]`)}`);
     }
     const final = await followSubmission(sub, opts, d);
     if (!opts.json && final.status === "succeeded" && (final.release_status ?? releaseStatus) === "draft") {
       console.error(
-        chalk13.dim("release status: draft \u2014 activate it from the Play Console when ready")
+        chalk14.dim("release status: draft \u2014 activate it from the Play Console when ready")
       );
     }
     process.exitCode = final.status === "succeeded" ? 0 : 1;
@@ -1664,11 +1710,11 @@ async function checkStore(platform, androidFamily, ascKey2, opts, deps) {
     });
     emit(opts.json, { event: "preflight", ...result });
     if (!opts.json) {
-      const mark = result.ready ? chalk13.green("\u2713") : chalk13.red("\u2717");
+      const mark = result.ready ? chalk14.green("\u2713") : chalk14.red("\u2717");
       console.error(`${mark} ${result.message}`);
       if (result.ready) {
         console.error(
-          chalk13.dim(
+          chalk14.dim(
             `  next: vibeview build --cloud --production --platform ${platform}, then vibeview submit --platform ${platform} --latest`
           )
         );
@@ -1717,14 +1763,14 @@ async function followSubmission(created, opts, deps) {
         if (opts.json) {
           emit(opts.json, { event: "status", id: created.id, status: "queued" });
         } else {
-          console.error(chalk13.dim("\u23F3 queued \u2014 waiting for a submission slot"));
+          console.error(chalk14.dim("\u23F3 queued \u2014 waiting for a submission slot"));
         }
       } else if (log.status === "running" && !printedRunning) {
         printedRunning = true;
         if (opts.json) {
           emit(opts.json, { event: "status", id: created.id, status: "running" });
         } else {
-          console.error(`${chalk13.cyan("\u25B6")} submitting`);
+          console.error(`${chalk14.cyan("\u25B6")} submitting`);
         }
       }
       if (log.content) {
@@ -1766,7 +1812,7 @@ The submission continues server-side \u2014 see its outcome on the Builds page i
   });
   if (!opts.json) {
     const ok = final.status === "succeeded";
-    const mark = ok ? chalk13.green("\u2713") : chalk13.red("\u2717");
+    const mark = ok ? chalk14.green("\u2713") : chalk14.red("\u2717");
     const duration = formatDuration(final.started_at, final.finished_at);
     let line = `${mark} ${final.status}`;
     if (duration) line += ` (${duration})`;
@@ -1778,11 +1824,11 @@ The submission continues server-side \u2014 see its outcome on the Builds page i
 function printError2(opts, err) {
   const message = err instanceof Error ? err.message : String(err);
   if (opts.json) console.log(JSON.stringify({ event: "error", message }));
-  console.error(chalk13.red(`error: ${message}`));
+  console.error(chalk14.red(`error: ${message}`));
 }
 
 // src/commands/versions.ts
-import chalk14 from "chalk";
+import chalk15 from "chalk";
 function defaultDeps3(client) {
   return {
     listAppVersions: client.listAppVersions.bind(client),
@@ -1832,7 +1878,7 @@ async function versionsSet(buildNumber, opts, deps) {
       console.log(JSON.stringify(version));
     } else {
       console.log(
-        chalk14.green(`\u2713 ${version.platform} build number set to ${version.build_number}`) + chalk14.dim(
+        chalk15.green(`\u2713 ${version.platform} build number set to ${version.build_number}`) + chalk15.dim(
           " \u2014 the next autoIncrement production build gets " + (version.build_number + 1)
         )
       );
@@ -1852,18 +1898,18 @@ function formatVersionsHuman(versions2) {
   const widths = HEADERS2.map((h, i) => Math.max(h.length, ...rows.map((r) => r[i].length)));
   const padCells = (cells) => cells.map((c, i) => c.padEnd(widths[i]));
   const join3 = (cells) => cells.join("  ").trimEnd();
-  const lines = [chalk14.bold(join3(padCells(HEADERS2)))];
+  const lines = [chalk15.bold(join3(padCells(HEADERS2)))];
   for (const row of rows) lines.push(join3(padCells(row)));
   return lines.join("\n") + "\n";
 }
 function printError3(opts, err) {
   const message = err instanceof Error ? err.message : String(err);
   if (opts.json) console.log(JSON.stringify({ event: "error", message }));
-  console.error(chalk14.red(`error: ${message}`));
+  console.error(chalk15.red(`error: ${message}`));
 }
 
 // src/commands/whoami.ts
-import chalk15 from "chalk";
+import chalk16 from "chalk";
 function defaultDeps4(opts) {
   const { token, baseUrl } = resolveAuth(opts);
   const client = new ApiClient(baseUrl, token);
@@ -1885,27 +1931,27 @@ async function whoAmI(opts, deps) {
       process.exitCode = 0;
       return;
     }
-    console.log(`${chalk15.bold("Logged in as")}  ${me.email}`);
+    console.log(`${chalk16.bold("Logged in as")}  ${me.email}`);
     if (me.memberships.length === 1) {
-      console.log(`${chalk15.bold("Organization")}   ${me.memberships[0].organization_name}`);
+      console.log(`${chalk16.bold("Organization")}   ${me.memberships[0].organization_name}`);
     } else if (me.memberships.length > 1) {
-      console.log(chalk15.bold("Organizations"));
+      console.log(chalk16.bold("Organizations"));
       for (const m of me.memberships) {
         console.log(`  ${m.organization_name} (${m.role})`);
       }
     }
-    console.log(`${chalk15.bold("Member role")}    ${me.role ?? "\u2014"}`);
-    console.log(`${chalk15.bold("Token role")}     ${me.token_role ?? "\u2014 (session auth)"}`);
-    console.log(`${chalk15.bold("Effective role")} ${effective ?? "\u2014"}`);
+    console.log(`${chalk16.bold("Member role")}    ${me.role ?? "\u2014"}`);
+    console.log(`${chalk16.bold("Token role")}     ${me.token_role ?? "\u2014 (session auth)"}`);
+    console.log(`${chalk16.bold("Effective role")} ${effective ?? "\u2014"}`);
     if (me.is_superadmin) {
-      console.log(chalk15.dim("Superadmin (platform-wide; does not raise the org role above)"));
+      console.log(chalk16.dim("Superadmin (platform-wide; does not raise the org role above)"));
     }
     if (me.role === "admin" && me.token_role && me.token_role !== "admin") {
       console.log(
-        chalk15.yellow(
+        chalk16.yellow(
           `
-Your account is admin, but this CLI token is ${me.token_role}. The effective role is the lower of the two, so admin-only commands (such as ${chalk15.bold("vibeview env set")}) will fail with a permissions error.
-Create an admin API token in the dashboard and use ${chalk15.bold("--token")} or ${chalk15.bold("VIBEVIEW_API_TOKEN")}.`
+Your account is admin, but this CLI token is ${me.token_role}. The effective role is the lower of the two, so admin-only commands (such as ${chalk16.bold("vibeview env set")}) will fail with a permissions error.
+Create an admin API token in the dashboard and use ${chalk16.bold("--token")} or ${chalk16.bold("VIBEVIEW_API_TOKEN")}.`
         )
       );
     }
@@ -1915,7 +1961,7 @@ Create an admin API token in the dashboard and use ${chalk15.bold("--token")} or
     if (opts.json) {
       console.log(JSON.stringify({ event: "error", message }));
     }
-    console.error(chalk15.red(`error: ${message}`));
+    console.error(chalk16.red(`error: ${message}`));
     process.exitCode = 1;
   }
 }
@@ -1923,7 +1969,7 @@ Create an admin API token in the dashboard and use ${chalk15.bold("--token")} or
 // src/commands/env.ts
 import { chmod, open as open2, readFile as readFileAsync } from "fs/promises";
 import { basename } from "path";
-import chalk16 from "chalk";
+import chalk17 from "chalk";
 import { password } from "@inquirer/prompts";
 
 // src/lib/gitignore.ts
@@ -1979,7 +2025,7 @@ function defaultDeps5(client) {
     isIgnored: (path) => isGitIgnored(path),
     writeFile: writeSecureFile,
     readFile: (path) => readFileAsync(path),
-    warn: (message) => console.error(chalk16.yellow(`warning: ${message}`))
+    warn: (message) => console.error(chalk17.yellow(`warning: ${message}`))
   };
 }
 async function envList(opts, deps) {
@@ -2011,7 +2057,7 @@ function formatEnvVarsHuman(variables) {
   const widths = HEADERS3.map((h, i) => Math.max(h.length, ...rows.map((r) => r[i].length)));
   const padCells = (cells) => cells.map((c, i) => c.padEnd(widths[i]));
   const join3 = (cells) => cells.join("  ").trimEnd();
-  const lines = [chalk16.bold(join3(padCells(HEADERS3)))];
+  const lines = [chalk17.bold(join3(padCells(HEADERS3)))];
   for (const row of rows) lines.push(join3(padCells(row)));
   return lines.join("\n") + "\n";
 }
@@ -2061,7 +2107,7 @@ function printSetResult(opts, result) {
   if (opts.json) {
     console.log(JSON.stringify(result));
   } else {
-    console.log(chalk16.green(`\u2713 set ${result.name} (${result.visibility})`));
+    console.log(chalk17.green(`\u2713 set ${result.name} (${result.visibility})`));
   }
 }
 async function envRm(name, opts, deps) {
@@ -2071,7 +2117,7 @@ async function envRm(name, opts, deps) {
     if (opts.json) {
       console.log(JSON.stringify({ event: "deleted", name }));
     } else {
-      console.log(chalk16.green(`\u2713 removed ${name}`));
+      console.log(chalk17.green(`\u2713 removed ${name}`));
     }
     process.exitCode = 0;
   } catch (err) {
@@ -2103,7 +2149,7 @@ async function envPull(opts, deps) {
     if (opts.json) {
       console.log(JSON.stringify({ event: "pulled", path: outPath, count: variables.length }));
     } else {
-      console.log(chalk16.green(`\u2713 wrote ${variables.length} variable(s) to ${outPath}`));
+      console.log(chalk17.green(`\u2713 wrote ${variables.length} variable(s) to ${outPath}`));
     }
     process.exitCode = 0;
   } catch (err) {
@@ -2142,7 +2188,7 @@ function escapeEnvValue(value) {
 function printError4(opts, err) {
   const message = err instanceof Error ? err.message : String(err);
   if (opts.json) console.log(JSON.stringify({ event: "error", message }));
-  console.error(chalk16.red(`error: ${message}`));
+  console.error(chalk17.red(`error: ${message}`));
 }
 
 // src/commands/credentials.ts
@@ -2154,7 +2200,7 @@ import {
 } from "fs/promises";
 import { mkdirSync } from "fs";
 import { basename as basename2, extname, join } from "path";
-import chalk17 from "chalk";
+import chalk18 from "chalk";
 import { input, password as password2 } from "@inquirer/prompts";
 function clientFor2(opts) {
   const { token, baseUrl } = resolveAuth(opts);
@@ -2227,7 +2273,7 @@ function defaultDeps6(client) {
     mkdir: (dir) => mkdirSync(dir, { recursive: true }),
     writeFile: (path, data, mode) => writeFileAsync(path, data, mode !== void 0 ? { mode } : void 0),
     chmod: (path, mode) => chmodAsync(path, mode),
-    warn: (message) => console.error(chalk17.yellow(`warning: ${message}`))
+    warn: (message) => console.error(chalk18.yellow(`warning: ${message}`))
   };
 }
 var ANDROID_KIND = "android_keystore";
@@ -2296,7 +2342,7 @@ async function credentialsAdd(opts, deps) {
     if (opts.json) {
       console.log(JSON.stringify(result));
     } else {
-      console.log(chalk17.green(`\u2713 added ${result.name} (${result.platform})`));
+      console.log(chalk18.green(`\u2713 added ${result.name} (${result.platform})`));
     }
     process.exitCode = 0;
   } catch (err) {
@@ -2354,20 +2400,20 @@ async function credentialsGenerate(opts, deps) {
     }
     if (opts.json) {
     } else {
-      console.log(chalk17.green(`\u2713 generated ${result.name} (android)`));
+      console.log(chalk18.green(`\u2713 generated ${result.name} (android)`));
       console.log("");
-      console.log(`  Keystore saved to: ${chalk17.bold(savedTo)}`);
-      console.log(`  Key alias:         ${chalk17.bold(result.key_alias)}`);
-      console.log(`  Store password:    ${chalk17.bold(result.store_password)}`);
-      console.log(`  Key password:      ${chalk17.bold(result.key_password)}`);
+      console.log(`  Keystore saved to: ${chalk18.bold(savedTo)}`);
+      console.log(`  Key alias:         ${chalk18.bold(result.key_alias)}`);
+      console.log(`  Store password:    ${chalk18.bold(result.store_password)}`);
+      console.log(`  Key password:      ${chalk18.bold(result.key_password)}`);
       console.log("");
       console.log(
-        chalk17.yellow(
+        chalk18.yellow(
           "  These are shown ONCE \u2014 VibeView cannot recover the keystore file or its passwords. Back them up somewhere safe."
         )
       );
       console.log(
-        chalk17.yellow(
+        chalk18.yellow(
           "  The credential is already uploaded and active for android and androidtv production builds."
         )
       );
@@ -2393,19 +2439,19 @@ async function generateAppleCredential(platform, opts, d) {
     if (opts.json) {
       console.log(JSON.stringify(result));
     } else {
-      console.log(chalk17.green(`\u2713 generated ${result.name} (${result.platform})`));
+      console.log(chalk18.green(`\u2713 generated ${result.name} (${result.platform})`));
       console.log("");
-      console.log(`  Scope:   ${chalk17.bold(result.app_public_id ?? "org-wide")}`);
+      console.log(`  Scope:   ${chalk18.bold(result.app_public_id ?? "org-wide")}`);
       const expires = formatExpires(result);
       if (expires) {
-        console.log(`  Expires: ${chalk17.bold(expires)}`);
+        console.log(`  Expires: ${chalk18.bold(expires)}`);
       }
       console.log("");
       console.log(
         `  The certificate and provisioning profile are stored with VibeView and already active for ${result.platform} production builds.`
       );
       console.log(
-        `  Run ${chalk17.bold(`vibeview credentials download ${result.name}`)} if you need the files locally.`
+        `  Run ${chalk18.bold(`vibeview credentials download ${result.name}`)} if you need the files locally.`
       );
     }
     process.exitCode = 0;
@@ -2471,17 +2517,17 @@ async function credentialsDownload(name, opts, deps) {
       await d.chmod(path, 384);
     }
     if (!opts.json) {
-      console.log(chalk17.green(`\u2713 downloaded ${material.name} (${material.platform})`));
+      console.log(chalk18.green(`\u2713 downloaded ${material.name} (${material.platform})`));
       console.log("");
-      console.log(`  Saved to: ${chalk17.bold(savedTo)}`);
+      console.log(`  Saved to: ${chalk18.bold(savedTo)}`);
       if (profileSavedTo !== null) {
-        console.log(`  Profile:  ${chalk17.bold(profileSavedTo)}`);
+        console.log(`  Profile:  ${chalk18.bold(profileSavedTo)}`);
       }
       for (const [key, value] of Object.entries(material.passwords)) {
-        console.log(`  ${key}: ${chalk17.bold(value)}`);
+        console.log(`  ${key}: ${chalk18.bold(value)}`);
       }
       console.log("");
-      console.log(chalk17.yellow("  This download is recorded in your organization's audit log."));
+      console.log(chalk18.yellow("  This download is recorded in your organization's audit log."));
     }
     process.exitCode = 0;
   } catch (err) {
@@ -2512,13 +2558,13 @@ async function ascKeyAdd(opts, deps) {
     if (opts.json) {
       console.log(JSON.stringify(result));
     } else {
-      console.log(chalk17.green(`\u2713 added App Store Connect key ${result.name}`));
+      console.log(chalk18.green(`\u2713 added App Store Connect key ${result.name}`));
       console.log("");
-      console.log(`  Key ID:    ${chalk17.bold(result.key_id)}`);
-      console.log(`  Issuer ID: ${chalk17.bold(result.issuer_id)}`);
+      console.log(`  Key ID:    ${chalk18.bold(result.key_id)}`);
+      console.log(`  Issuer ID: ${chalk18.bold(result.issuer_id)}`);
       console.log("");
       console.log(
-        chalk17.yellow(
+        chalk18.yellow(
           "  The .p8 is stored encrypted and will never be shown again \u2014 keep your own copy somewhere safe."
         )
       );
@@ -2553,7 +2599,7 @@ function formatAscKeysHuman(keys) {
   const widths = HEADERS3.map((h, i) => Math.max(h.length, ...rows.map((r) => r[i].length)));
   const padCells = (cells) => cells.map((c, i) => c.padEnd(widths[i]));
   const join3 = (cells) => cells.join("  ").trimEnd();
-  const lines = [chalk17.bold(join3(padCells(HEADERS3)))];
+  const lines = [chalk18.bold(join3(padCells(HEADERS3)))];
   for (const row of rows) lines.push(join3(padCells(row)));
   return lines.join("\n") + "\n";
 }
@@ -2564,7 +2610,7 @@ async function ascKeyRm(name, opts, deps) {
     if (opts.json) {
       console.log(JSON.stringify({ event: "deleted", name }));
     } else {
-      console.log(chalk17.green(`\u2713 removed App Store Connect key ${name}`));
+      console.log(chalk18.green(`\u2713 removed App Store Connect key ${name}`));
     }
     process.exitCode = 0;
   } catch (err) {
@@ -2589,12 +2635,12 @@ async function playKeyAdd(opts, deps) {
     if (opts.json) {
       console.log(JSON.stringify(result));
     } else {
-      console.log(chalk17.green(`\u2713 added Google Play key ${result.name}`));
+      console.log(chalk18.green(`\u2713 added Google Play key ${result.name}`));
       console.log("");
-      console.log(`  Service account: ${chalk17.bold(result.client_email)}`);
+      console.log(`  Service account: ${chalk18.bold(result.client_email)}`);
       console.log("");
       console.log(
-        chalk17.yellow(
+        chalk18.yellow(
           "  The JSON key is stored encrypted and will never be shown again \u2014 keep your own copy somewhere safe."
         )
       );
@@ -2629,7 +2675,7 @@ function formatPlayKeysHuman(keys) {
   const widths = HEADERS3.map((h, i) => Math.max(h.length, ...rows.map((r) => r[i].length)));
   const padCells = (cells) => cells.map((c, i) => c.padEnd(widths[i]));
   const join3 = (cells) => cells.join("  ").trimEnd();
-  const lines = [chalk17.bold(join3(padCells(HEADERS3)))];
+  const lines = [chalk18.bold(join3(padCells(HEADERS3)))];
   for (const row of rows) lines.push(join3(padCells(row)));
   return lines.join("\n") + "\n";
 }
@@ -2640,7 +2686,7 @@ async function playKeyRm(name, opts, deps) {
     if (opts.json) {
       console.log(JSON.stringify({ event: "deleted", name }));
     } else {
-      console.log(chalk17.green(`\u2713 removed Google Play key ${name}`));
+      console.log(chalk18.green(`\u2713 removed Google Play key ${name}`));
     }
     process.exitCode = 0;
   } catch (err) {
@@ -2709,7 +2755,7 @@ function formatCredentialsHuman(credentials2) {
   const widths = HEADERS3.map((h, i) => Math.max(h.length, ...rows.map((r) => r[i].length)));
   const padCells = (cells) => cells.map((c, i) => c.padEnd(widths[i]));
   const join3 = (cells) => cells.join("  ").trimEnd();
-  const lines = [chalk17.bold(join3(padCells(HEADERS3)))];
+  const lines = [chalk18.bold(join3(padCells(HEADERS3)))];
   for (const row of rows) lines.push(join3(padCells(row)));
   return lines.join("\n") + "\n";
 }
@@ -2720,7 +2766,7 @@ async function credentialsRm(name, opts, deps) {
     if (opts.json) {
       console.log(JSON.stringify({ event: "deleted", name }));
     } else {
-      console.log(chalk17.green(`\u2713 removed ${name}`));
+      console.log(chalk18.green(`\u2713 removed ${name}`));
     }
     process.exitCode = 0;
   } catch (err) {
@@ -2732,16 +2778,16 @@ function printKeystoreWriteFailure(opts, err, result) {
   const message = err instanceof Error ? err.message : String(err);
   if (opts.json) {
     console.log(JSON.stringify({ event: "error", message }));
-    console.error(chalk17.red(`error: ${message}`));
+    console.error(chalk18.red(`error: ${message}`));
     return;
   }
-  console.error(chalk17.red(`error: ${message}`));
+  console.error(chalk18.red(`error: ${message}`));
   console.error(
-    chalk17.red(
+    chalk18.red(
       `The keystore could NOT be saved locally, but the credential "${result.name}" WAS created server-side and its key material can never be re-fetched.`
     )
   );
-  console.error(chalk17.red("Recover it NOW from the values below \u2014 they will not be shown again:"));
+  console.error(chalk18.red("Recover it NOW from the values below \u2014 they will not be shown again:"));
   console.error("");
   console.error(`  Key alias:         ${result.key_alias}`);
   console.error(`  Store password:    ${result.store_password}`);
@@ -2755,11 +2801,11 @@ function printKeystoreWriteFailure(opts, err, result) {
 function printError5(opts, err) {
   const message = err instanceof Error ? err.message : String(err);
   if (opts.json) console.log(JSON.stringify({ event: "error", message }));
-  console.error(chalk17.red(`error: ${message}`));
+  console.error(chalk18.red(`error: ${message}`));
 }
 
 // src/commands/webhooks.ts
-import chalk18 from "chalk";
+import chalk19 from "chalk";
 function clientFor3(opts) {
   const { token, baseUrl } = resolveAuth(opts);
   return new ApiClient(baseUrl, token);
@@ -2790,14 +2836,14 @@ async function webhooksAdd(opts, deps) {
     if (opts.json) {
       console.log(JSON.stringify(result));
     } else {
-      console.log(chalk18.green(`\u2713 added ${result.id} ${result.url}`));
+      console.log(chalk19.green(`\u2713 added ${result.id} ${result.url}`));
       console.log("");
-      console.log(`  Signing secret: ${chalk18.bold(result.secret)}`);
+      console.log(`  Signing secret: ${chalk19.bold(result.secret)}`);
       if (opts.secret !== void 0) {
-        console.log(chalk18.yellow("  (This is the secret you provided.)"));
+        console.log(chalk19.yellow("  (This is the secret you provided.)"));
       }
       console.log(
-        chalk18.yellow("  This secret is shown ONCE and cannot be retrieved again \u2014 store it now.")
+        chalk19.yellow("  This secret is shown ONCE and cannot be retrieved again \u2014 store it now.")
       );
     }
     process.exitCode = 0;
@@ -2828,7 +2874,7 @@ function formatWebhooksHuman(webhooks2) {
   const widths = HEADERS3.map((h, i) => Math.max(h.length, ...rows.map((r) => r[i].length)));
   const padCells = (cells) => cells.map((c, i) => c.padEnd(widths[i]));
   const join3 = (cells) => cells.join("  ").trimEnd();
-  const lines = [chalk18.bold(join3(padCells(HEADERS3)))];
+  const lines = [chalk19.bold(join3(padCells(HEADERS3)))];
   for (const row of rows) lines.push(join3(padCells(row)));
   return lines.join("\n") + "\n";
 }
@@ -2854,7 +2900,7 @@ async function webhooksRm(id, opts, deps) {
     if (opts.json) {
       console.log(JSON.stringify({ event: "deleted", id }));
     } else {
-      console.log(chalk18.green(`\u2713 removed ${id}`));
+      console.log(chalk19.green(`\u2713 removed ${id}`));
     }
     process.exitCode = 0;
   } catch (err) {
@@ -2887,13 +2933,13 @@ async function webhooksTest(id, opts, deps) {
         if (opts.json) console.log(JSON.stringify(ld));
         if (ld.status === "succeeded") {
           if (!opts.json) {
-            console.log(chalk18.green(`\u2713 Delivered (HTTP ${ld.response_code})`));
+            console.log(chalk19.green(`\u2713 Delivered (HTTP ${ld.response_code})`));
           }
           process.exitCode = 0;
         } else {
           if (!opts.json) {
             const code = ld.response_code != null ? `HTTP ${ld.response_code}` : "no response";
-            console.error(chalk18.red(`\u2717 Failed (${code}) at ${ld.at}`));
+            console.error(chalk19.red(`\u2717 Failed (${code}) at ${ld.at}`));
           }
           process.exitCode = 1;
         }
@@ -2902,7 +2948,7 @@ async function webhooksTest(id, opts, deps) {
     }
     if (opts.json) console.log(JSON.stringify({ status: "pending" }));
     console.error(
-      chalk18.yellow(
+      chalk19.yellow(
         `Delivery still pending after ${TEST_POLL_BUDGET_MS / 1e3}s \u2014 check \`vibeview webhooks list\` later for the result.`
       )
     );
@@ -2915,7 +2961,7 @@ async function webhooksTest(id, opts, deps) {
 function printError6(opts, err) {
   const message = err instanceof Error ? err.message : String(err);
   if (opts.json) console.log(JSON.stringify({ event: "error", message }));
-  console.error(chalk18.red(`error: ${message}`));
+  console.error(chalk19.red(`error: ${message}`));
 }
 
 // src/commands/list-devices.ts
@@ -3015,7 +3061,7 @@ import { dirname, join as join2 } from "path";
 import { fileURLToPath } from "url";
 import { spawnSync } from "child_process";
 import { confirm } from "@inquirer/prompts";
-import chalk19 from "chalk";
+import chalk20 from "chalk";
 function resolveShippedSkillPath(fromDir) {
   for (const rel of ["..", join2("..", "..")]) {
     const candidate = join2(fromDir, rel, "skills", "vibeview-agent", "SKILL.md");
@@ -3043,23 +3089,23 @@ function registerMcp() {
     encoding: "utf8"
   });
   if (res.status === 0) {
-    console.log(chalk19.green("\u2713 MCP server registered with Claude Code (claude mcp add vibeview)"));
+    console.log(chalk20.green("\u2713 MCP server registered with Claude Code (claude mcp add vibeview)"));
     return;
   }
   const out = `${res.stderr ?? ""}${res.stdout ?? ""}`;
   if (out.includes("already exists")) {
-    console.log(chalk19.dim("MCP server already registered with Claude Code \u2014 nothing to do"));
+    console.log(chalk20.dim("MCP server already registered with Claude Code \u2014 nothing to do"));
     return;
   }
-  console.error(chalk19.yellow(`\u26A0 could not register the MCP server: ${out.trim() || res.error}`));
-  console.error(chalk19.yellow("  register it manually: claude mcp add vibeview -- vibeview mcp"));
+  console.error(chalk20.yellow(`\u26A0 could not register the MCP server: ${out.trim() || res.error}`));
+  console.error(chalk20.yellow("  register it manually: claude mcp add vibeview -- vibeview mcp"));
 }
 async function agentSetup(opts) {
   const moduleDir = dirname(fileURLToPath(import.meta.url));
   const shipped = resolveShippedSkillPath(moduleDir);
   if (!shipped) {
     console.error(
-      chalk19.red(
+      chalk20.red(
         "error: could not find the packaged skill (skills/vibeview-agent/SKILL.md) \u2014 is this a complete install of the vibeview package?"
       )
     );
@@ -3068,9 +3114,9 @@ async function agentSetup(opts) {
   }
   const targetDir = skillInstallDir(opts.project ?? false, process.cwd(), homedir());
   const result = installSkill(shipped, targetDir);
-  console.log(chalk19.green(`\u2713 vibeview-agent skill ${result}: ${join2(targetDir, "SKILL.md")}`));
+  console.log(chalk20.green(`\u2713 vibeview-agent skill ${result}: ${join2(targetDir, "SKILL.md")}`));
   console.log(
-    chalk19.dim(
+    chalk20.dim(
       opts.project ? "  Claude Code discovers it automatically for anyone working in this project." : "  Claude Code discovers it automatically in every project on this machine."
     )
   );
@@ -3078,7 +3124,7 @@ async function agentSetup(opts) {
     if (!claudeCliAvailable()) {
       if (opts.mcp === true) {
         console.error(
-          chalk19.yellow(
+          chalk20.yellow(
             "\u26A0 claude CLI not found \u2014 install Claude Code, then run: claude mcp add vibeview -- vibeview mcp"
           )
         );
@@ -3092,7 +3138,7 @@ async function agentSetup(opts) {
   }
   console.log(
     `
-Suggested line for your project's ${chalk19.bold("CLAUDE.md")} (or ${chalk19.bold(
+Suggested line for your project's ${chalk20.bold("CLAUDE.md")} (or ${chalk20.bold(
       "AGENTS.md"
     )} for other agents):
 `
@@ -3100,7 +3146,7 @@ Suggested line for your project's ${chalk19.bold("CLAUDE.md")} (or ${chalk19.bol
   console.log(`  ${CLAUDE_MD_SUGGESTION}
 `);
   console.log(
-    chalk19.dim(
+    chalk20.dim(
       "Other agents (Cursor, Copilot, Codex, ...): install the same skill from GitHub with\n  npx skills add vibeview/skills\nor point them at the skill file above, or add the MCP server per client \u2014\nsee https://vibeview.io/docs/agent-control"
     )
   );
@@ -3222,6 +3268,9 @@ program.command("list-suites").description("List available test suites").option(
   []
 ).option("--match <mode>", "When multiple --tag flags: any (default) or all", "any").action((opts) => listSuites(opts));
 program.command("list-apps").description("List apps in your organization").option("--token <token>", "API token").option("--output <format>", "Output format: human, json", "human").action((opts) => listApps(opts));
+program.command("list-builds <app>").description(
+  "List an app's uploaded builds, newest first: id, version, platform, debug/release, upload time and note (the ids `dev --build <id>` and `run-test --build` take)"
+).option("--token <token>", "API token (or set VIBEVIEW_API_TOKEN)").option("--json", "Print the builds as a JSON array", false).action((app, opts) => listBuilds(app, opts));
 program.command("list-devices").description("List devices registered with the platform (filterable by type and category)").option("--token <token>", "API token").option("--output <format>", "Output format: human, json", "human").option("--type <type>", "Filter by device type: ios, android, roku").option("--category <category>", "Filter by category: phone, tablet, tv").option("--status <status>", "Filter by status: available, busy, offline").option(
   "--models",
   "List the device models you can start instead (the names `dev --model` takes)",
@@ -3244,14 +3293,14 @@ program.command("dev").description(
   parseDeviceCategory
 ).option(
   "--model <name>",
-  'Run on this exact device model, e.g. "iPhone Duo" (see `vibeview list-devices --models`)'
+  'Run on this exact device model, e.g. "iPhone Duo" or "Pixel 9 Pro Fold" (see `vibeview list-devices --models`)'
 ).option("--no-open", "Do not open the browser automatically").option("--debug", "Log raw tunnel lifecycle events (close codes, reconnects) for diagnostics").option("--json", "Emit line-delimited JSON events on stdout instead of human output", false).option(
   "--detach",
   "Run the dev session in the background; prints session info and exits (see `dev-status`, `dev-stop`, and `dev-reload` for Roku)",
   false
 ).option(
-  "--build",
-  "Build and upload first (uses platforms.<platform>.build from vibeview.json)",
+  "--build [id]",
+  "Bare: build and upload first (uses platforms.<platform>.build from vibeview.json). With an id: run that uploaded debug build instead of the newest one (see `vibeview list-builds <app>`)",
   false
 ).option(
   "--watch [seconds]",
@@ -3387,13 +3436,16 @@ webhooks.command("rm <id>").description("Remove a webhook endpoint (rotate the s
 webhooks.command("test <id>").description("Send a ping delivery and wait up to 60s for the result").option("--token <token>", "API token (or set VIBEVIEW_API_TOKEN)").option("--json", "Print the final delivery result as one JSON line", false).action((id, opts) => webhooksTest(id, opts));
 program.command("dev-status").description("Show the status of a `vibeview dev --detach` session in this project").option("--token <token>", "API token (or set VIBEVIEW_API_TOKEN)").option("--json", "Print as one JSON line", false).action((opts) => devStatus(opts));
 program.command("dev-stop").description("Stop a `vibeview dev --detach` session in this project").option("--token <token>", "API token (or set VIBEVIEW_API_TOKEN)").option("--json", "Print as one JSON line", false).action((opts) => devStop(opts));
+program.command("stop <session-id>").description(
+  "Stop any session by id \u2014 e.g. one started from the API, the sandbox, or a collaboration link (`dev-stop` stops this project's detached dev session without an id)"
+).option("--token <token>", "API token (or set VIBEVIEW_API_TOKEN)").option("--json", "Print the result as one JSON line", false).action((sessionId, opts) => stopCommand(sessionId, opts));
 program.command("dev-reload").description(
   "Roku only: re-package, upload and reload the channel into this project's `vibeview dev --detach` session (the `r` key of the foreground loop)"
 ).option("--token <token>", "API token (or set VIBEVIEW_API_TOKEN)").option("--json", "Print as one JSON line", false).action((opts) => devReload(opts));
 program.command("mcp").description(
   "Run an MCP stdio server exposing the agent verbs (tap, swipe, type, ...) plus dev_start/dev_stop/dev_reload as tools"
 ).option("--token <token>", "API token (or set VIBEVIEW_API_TOKEN)").action(async (opts) => {
-  const { runMcpServer } = await import("./server-KIJCEN6T.js");
+  const { runMcpServer } = await import("./server-KYDTXPRZ.js");
   await runMcpServer(opts);
 });
 program.command("agent-setup").description(