vibeview 0.46.0 → 0.48.0

package/dist/{chunk-GDTLLJFL.js → chunk-3LXR2YCS.js}

@@ -331,6 +331,11 @@ var ApiClient = class {
   async listApps() {
     return this.requestRaw("GET", "/apps/");
   }
+  /** POST /api/v1/agent-reports — a bug, friction or idea about VibeView
+   *  itself. The server attaches the session's context. */
+  async sendFeedback(body) {
+    return this.requestRaw("POST", "/agent-reports", body);
+  }
   /** GET /api/v1/apps/{appPublicId} — the app with its uploaded builds,
    *  newest first. */
   async getApp(appId) {

package/dist/{chunk-NHM2FHA2.js → chunk-OMIZWILH.js}

@@ -13,7 +13,7 @@ import {
   resolveArtifact,
   resolveAuth,
   uploadAppBuild
-} from "./chunk-GDTLLJFL.js";
+} from "./chunk-3LXR2YCS.js";
 
 // src/lib/formatters/not-checked.ts
 function notCheckedSteps(steps) {
@@ -190,6 +190,24 @@ function validateBuildEnv(env, platformKey) {
     }
   }
 }
+var XCODE_PLATFORMS = ["ios", "tvos"];
+var XCODE_VERSION_RE = /^\d+\.\d+$/;
+function validateBuildXcode(xcode, platformKey) {
+  if (xcode === void 0) return;
+  if (!XCODE_PLATFORMS.includes(platformKey)) {
+    throw new Error(
+      `vibeview.json: platforms.${platformKey}.build.xcode only applies to ios and tvos builds \u2014 remove it from the ${platformKey} block`
+    );
+  }
+  if (typeof xcode !== "string" || !XCODE_VERSION_RE.test(xcode)) {
+    throw new Error(
+      `vibeview.json: platforms.${platformKey}.build.xcode must be a version string like "27.1"`
+    );
+  }
+}
+function platformUsesXcode(platformKey) {
+  return XCODE_PLATFORMS.includes(platformKey);
+}
 function saveDevConfig(cwd, cfg) {
   const target = join(cwd, FILE);
   const tmp = join(cwd, `.${FILE}.${process.pid}.${Date.now()}.tmp`);
@@ -617,6 +635,19 @@ function clearDevStateIfOwned(cwd, pid) {
   if (found && found.state.pid === pid) clearDevState(cwd);
 }
 
+// src/lib/feedback.ts
+var FEEDBACK_KINDS = ["bug", "friction", "idea"];
+function isFeedbackKind(value) {
+  return typeof value === "string" && FEEDBACK_KINDS.includes(value);
+}
+var FEEDBACK_RULES = "Only for problems with VibeView itself (the CLI, MCP tools, devices, sessions, runs, dashboard, docs) \u2014 never for bugs in the user's own app. Show the user what you will send and get their OK first. Never include passwords, tokens, API keys, test data values or personal data. One report per problem; do not resend it. kind: bug (something broke), friction (it worked but was confusing, slow or awkward), idea (a missing capability). user_quote: the user's own words, verbatim \u2014 never a paraphrase.";
+function feedbackSentLine(result) {
+  if (result.duplicate) {
+    return `This was already sent (report ${result.id}); no need to send it again.`;
+  }
+  return `Sent (report ${result.id}). The VibeView team reads every report; you'll get a notification if we reply.`;
+}
+
 // src/lib/dev-use.ts
 import {
   existsSync as existsSync2,
@@ -2129,6 +2160,13 @@ async function buildCommand(opts, cloudDeps) {
         "usage"
       );
     }
+    if (opts.xcode !== void 0) {
+      fail(
+        opts,
+        "--xcode requires --cloud: a local build uses the Xcode selected on this machine",
+        "usage"
+      );
+    }
     const platform = await resolveBarePlatform(cwd, cfgRef.current, opts);
     const build = await resolveBuildConfig(cwd, cfgRef, platform, opts);
     const result = await runBuildForPlatform(
@@ -2395,7 +2433,17 @@ function formatCost(costMicro) {
   return `$${(costMicro / 1e6).toFixed(2)}`;
 }
 async function runCloudBuildCommand(cwd, cfgRef, opts, deps) {
+  if (opts.xcode !== void 0 && !XCODE_VERSION_RE.test(opts.xcode)) {
+    fail(opts, `--xcode must be a version like 27.1, got "${opts.xcode}"`, "usage");
+  }
   const platforms = await resolveCloudPlatforms(cwd, cfgRef, opts);
+  if (opts.xcode !== void 0 && !platforms.some(platformUsesXcode)) {
+    fail(
+      opts,
+      `--xcode only applies to ios and tvos builds \u2014 this run builds ${platforms.join(", ")}`,
+      "usage"
+    );
+  }
   const { token, baseUrl } = resolveAuth(opts);
   const client = new ApiClient(baseUrl, token);
   const d = deps ?? defaultCloudBuildDeps(client);
@@ -2410,6 +2458,7 @@ async function runCloudBuildCommand(cwd, cfgRef, opts, deps) {
   for (const p of platforms) {
     try {
       validateBuildEnv(cfg?.platforms?.[p]?.build?.env, p);
+      validateBuildXcode(cfg?.platforms?.[p]?.build?.xcode, p);
       if (cfg?.platforms?.[p]?.build?.autoIncrement === true && opts.production && createFromArtifact.has(p)) {
         throw new UsageError(
           `platforms.${p}.build.autoIncrement needs the build linked to an app \u2014 set appId in vibeview.json (a brand-new app's first build can't auto-increment)`
@@ -2486,6 +2535,7 @@ ${offenders}`);
           )
         );
       }
+      const xcode = platformUsesXcode(p) ? opts.xcode ?? build.xcode : void 0;
       return {
         platform: p,
         // OMITTED, never invented, for a platform whose app the artifact will
@@ -2498,7 +2548,8 @@ ${offenders}`);
         artifact_path: artifactPath,
         distribution: production ? "production" : "simulator",
         ...build.env ? { env: build.env } : {},
-        ...autoIncrement && production ? { auto_increment: true } : {}
+        ...autoIncrement && production ? { auto_increment: true } : {},
+        ...xcode ? { xcode } : {}
       };
     });
     const uploadSpinner = !opts.json ? createSpinner("uploading source...") : null;
@@ -4933,7 +4984,7 @@ var AGENT_COMMANDS = [
         cli: "positional",
         type: "string",
         required: true,
-        description: "'get' returns the alert message and button labels; 'accept' taps a button (first by default); 'dismiss' taps a button (last by default)."
+        description: "'get' returns the alert message and button labels; 'accept' taps a button (first by default); 'dismiss' taps a button (by default a Cancel, Don't Allow or Not Now style button, else the last)."
       },
       {
         name: "button",
@@ -5603,6 +5654,10 @@ export {
   clearDevState,
   readMetroState,
   killOwnedMetro,
+  FEEDBACK_KINDS,
+  isFeedbackKind,
+  FEEDBACK_RULES,
+  feedbackSentLine,
   recordDevUse,
   checkMetro,
   loadLocalDevConfig,

package/dist/cli.js

@@ -2,15 +2,19 @@
 import {
   AGENT_COMMANDS,
   BUILD_TERMINAL_STATUSES,
+  FEEDBACK_KINDS,
+  FEEDBACK_RULES,
   buildCommand,
   clearDevState,
   createRokuPush,
   dev,
+  feedbackSentLine,
   fetchFinalSummary,
   filterDeviceModels,
   formatDeviceModelsHuman,
   formatDevicesHuman,
   formatDuration,
+  isFeedbackKind,
   killOwnedMetro,
   listBuilds,
   loadDevConfig,
@@ -30,7 +34,7 @@ import {
   runAgentVerb,
   runStepsNotChecked,
   stepsNotCheckedLabel
-} from "./chunk-NHM2FHA2.js";
+} from "./chunk-OMIZWILH.js";
 import {
   ApiClient,
   ApiStatusError,
@@ -53,7 +57,7 @@ import {
   runCommandParseExitCode,
   saveConfig,
   uploadApp
-} from "./chunk-GDTLLJFL.js";
+} from "./chunk-3LXR2YCS.js";
 
 // src/cli.ts
 import { createRequire } from "module";
@@ -1502,8 +1506,40 @@ async function stopCommand(sessionId, opts, deps) {
   process.exitCode = 0;
 }
 
-// src/commands/create-test.ts
+// src/commands/feedback.ts
 import chalk10 from "chalk";
+async function feedbackCommand(kind, summary, opts, version, deps) {
+  if (!isFeedbackKind(kind)) {
+    throw new UsageError(`kind must be one of ${FEEDBACK_KINDS.join(", ")}`);
+  }
+  const line = summary?.trim();
+  if (!line) throw new UsageError('a summary is required: vibeview feedback <kind> "<summary>"');
+  const { token, baseUrl } = resolveAuth(opts);
+  const d = deps ?? {
+    sendFeedback: (b) => new ApiClient(baseUrl, token).sendFeedback(b)
+  };
+  const body = {
+    kind,
+    summary: line,
+    client: "cli",
+    client_version: version
+  };
+  if (opts.details?.trim()) body.details = opts.details;
+  if (opts.quote?.trim()) body.user_quote = opts.quote;
+  const sessionId = opts.session?.trim() || readDevState(process.cwd())?.session_id;
+  if (sessionId) body.session_id = sessionId;
+  try {
+    const result = await d.sendFeedback(body);
+    console.log(opts.json ? JSON.stringify(result) : feedbackSentLine(result));
+  } catch (err) {
+    const message = err instanceof Error ? err.message : String(err);
+    console.error(chalk10.red(`error: ${message}`));
+    process.exitCode = errorExitCode(err);
+  }
+}
+
+// src/commands/create-test.ts
+import chalk11 from "chalk";
 import { existsSync, readFileSync } from "fs";
 async function readStdin() {
   return new Promise((resolve2, reject) => {
@@ -1618,23 +1654,23 @@ async function createTest(options) {
       );
     } else {
       console.log(`
-  ${chalk10.cyan(result.public_id)}  ${result.name}`);
+  ${chalk11.cyan(result.public_id)}  ${result.name}`);
       if (result.app_name) {
-        console.log(`  ${chalk10.dim(`App: ${result.app_name}`)}`);
+        console.log(`  ${chalk11.dim(`App: ${result.app_name}`)}`);
       }
       if (result.platform) {
-        console.log(`  ${chalk10.dim(`Platform: ${result.platform}`)}`);
+        console.log(`  ${chalk11.dim(`Platform: ${result.platform}`)}`);
       }
       if (result.groups?.length) {
-        console.log(`  ${chalk10.dim(`Groups: ${result.groups.map((g) => g.name).join(", ")}`)}`);
+        console.log(`  ${chalk11.dim(`Groups: ${result.groups.map((g) => g.name).join(", ")}`)}`);
       }
-      console.log(`  ${chalk10.dim(`Steps: ${steps.length}`)}`);
-      console.log(chalk10.dim(`  ${testCaseUrl(baseUrl, result.public_id)}
+      console.log(`  ${chalk11.dim(`Steps: ${steps.length}`)}`);
+      console.log(chalk11.dim(`  ${testCaseUrl(baseUrl, result.public_id)}
 `));
     }
   } catch (err) {
     if (options.output === "json") printJsonError(err);
-    console.error(chalk10.red(err instanceof Error ? err.message : "Failed to create test"));
+    console.error(chalk11.red(err instanceof Error ? err.message : "Failed to create test"));
     process.exit(
       err instanceof ApiStatusError && err.status === 409 ? EXIT_TEST_FAIL : EXIT_INFRA_ERROR
     );
@@ -1642,7 +1678,7 @@ async function createTest(options) {
 }
 
 // src/commands/import-maestro.ts
-import chalk11 from "chalk";
+import chalk12 from "chalk";
 import { existsSync as existsSync2, readFileSync as readFileSync2, readdirSync, statSync } from "fs";
 import { basename, extname, join, relative, resolve, sep } from "path";
 import { zipSync } from "fflate";
@@ -1716,8 +1752,8 @@ var START_STATE_LABEL = {
 };
 function flagLine(f) {
   const where = [f.file, f.where, f.command].filter(Boolean).join(" \xB7 ");
-  const label = f.severity === "rewrite" ? chalk11.red(FLAG_LABEL.rewrite) : FLAG_LABEL[f.severity];
-  return `    ${label}  ${chalk11.dim(where)}  ${f.message}`;
+  const label = f.severity === "rewrite" ? chalk12.red(FLAG_LABEL.rewrite) : FLAG_LABEL[f.severity];
+  return `    ${label}  ${chalk12.dim(where)}  ${f.message}`;
 }
 function formatImport(result, baseUrl) {
   const lines = [];
@@ -1734,16 +1770,16 @@ function formatImport(result, baseUrl) {
     const meta = [`${t.steps.length} ${t.steps.length === 1 ? "step" : "steps"}`];
     if (t.setup_keys.length) meta.push(`before this test: ${t.setup_keys.join(", ")}`);
     if (t.start_state) meta.push(`start: ${START_STATE_LABEL[t.start_state] ?? t.start_state}`);
-    const head = t.importable ? t.name : chalk11.red(`${t.name} (not imported)`);
-    lines.push("", `  ${head}  ${chalk11.dim(`${t.key} \xB7 ${meta.join(" \xB7 ")}`)}`);
-    if (t.created_id) lines.push(`    ${chalk11.dim(testCaseUrl(baseUrl, t.created_id))}`);
+    const head = t.importable ? t.name : chalk12.red(`${t.name} (not imported)`);
+    lines.push("", `  ${head}  ${chalk12.dim(`${t.key} \xB7 ${meta.join(" \xB7 ")}`)}`);
+    if (t.created_id) lines.push(`    ${chalk12.dim(testCaseUrl(baseUrl, t.created_id))}`);
     for (const f of t.flags) lines.push(flagLine(f));
   }
   if (result.test_data.length) {
     lines.push("", "These tests use test data:");
     for (const d of result.test_data) {
       const note = d.status === "needs_value" || d.status === "skipped" || d.suggested_value === null ? "add the value under App notes & data" : d.status === "kept" ? "already set, kept" : d.status === "created" ? "added from the flow" : d.secret ? "stored as a secret" : `flow value: ${d.suggested_value}`;
-      lines.push(`  ${d.key}  ${chalk11.dim(note)}`);
+      lines.push(`  ${d.key}  ${chalk12.dim(note)}`);
     }
   }
   return lines;
@@ -1782,7 +1818,7 @@ async function importMaestro(path, options) {
     for (const line of formatImport(result, baseUrl)) console.log(line);
   } catch (err) {
     if (options.output === "json") printJsonError(err);
-    console.error(chalk11.red(err instanceof Error ? err.message : "Import failed"));
+    console.error(chalk12.red(err instanceof Error ? err.message : "Import failed"));
     const rejected = err instanceof UsageError || err instanceof NotFoundError || err instanceof ApiStatusError && err.status >= 400 && err.status < 500 ? EXIT_TEST_FAIL : EXIT_INFRA_ERROR;
     process.exit(errorExitCode(err, rejected));
   }
@@ -1865,7 +1901,7 @@ async function logout() {
 }
 
 // src/commands/dev-status.ts
-import chalk12 from "chalk";
+import chalk13 from "chalk";
 function buildLine(info) {
   if (!info || typeof info.app_build_id !== "number") return null;
   const version = info.app_version ? `  version ${info.app_version}${info.app_build_number ? ` (${info.app_build_number})` : ""}` : "";
@@ -1926,7 +1962,7 @@ async function devStatus(opts) {
     console.error(`  url:      ${state.page_url}`);
     console.error(`  started:  ${state.started_at}`);
   }
-  if (metro) console.error(chalk12.dim(`Metro: pid ${metro.pid} on :${metro.port} (CLI-owned)`));
+  if (metro) console.error(chalk13.dim(`Metro: pid ${metro.pid} on :${metro.port} (CLI-owned)`));
   process.exit(0);
 }
 var LIVE_STATUSES = /* @__PURE__ */ new Set(["pending", "queued", "starting", "active"]);
@@ -1951,7 +1987,7 @@ async function reportOrphan(api, state, opts) {
     );
   } else if (live) {
     console.error(
-      chalk12.yellow(
+      chalk13.yellow(
         `\u26A0 The dev process (pid ${state.pid}) has exited, but session ${state.session_id} is still ${status}.`
       )
     );
@@ -1999,12 +2035,12 @@ async function devStop(opts) {
 }
 
 // src/commands/dev-reload.ts
-import chalk13 from "chalk";
+import chalk14 from "chalk";
 function fail(opts, code, message, exit) {
   if (opts.json) {
     console.log(JSON.stringify({ reloaded: false, code, message }));
   } else {
-    console.error(chalk13.red(`error: ${message}`));
+    console.error(chalk14.red(`error: ${message}`));
   }
   process.exit(exit);
 }
@@ -2057,7 +2093,7 @@ async function devReload(opts) {
     api,
     // Build output and the "reloaded in" line are human output: stderr, so
     // stdout stays reserved for the --json result.
-    log: (line) => console.error(chalk13.dim(line))
+    log: (line) => console.error(chalk14.dim(line))
   });
   const started = Date.now();
   try {
@@ -2079,10 +2115,10 @@ async function devReload(opts) {
 }
 
 // src/commands/builds.ts
-import chalk15 from "chalk";
+import chalk16 from "chalk";
 
 // src/lib/formatters/builds.ts
-import chalk14 from "chalk";
+import chalk15 from "chalk";
 var HEADERS = ["ID", "PLATFORM", "STATUS", "CREATED", "COST", "APP"];
 var UNBILLED_STATUSES = /* @__PURE__ */ new Set(["queued", "running"]);
 function formatCostCell(costMicro, status) {
@@ -2090,13 +2126,13 @@ function formatCostCell(costMicro, status) {
   return `$${(Math.max(costMicro, 0) / 1e6).toFixed(2)}`;
 }
 var STATUS_COLOR = {
-  succeeded: chalk14.green,
-  failed: chalk14.red,
-  timed_out: chalk14.red,
-  infra_failed: chalk14.red,
-  canceled: chalk14.dim,
-  running: chalk14.yellow,
-  queued: chalk14.dim
+  succeeded: chalk15.green,
+  failed: chalk15.red,
+  timed_out: chalk15.red,
+  infra_failed: chalk15.red,
+  canceled: chalk15.dim,
+  running: chalk15.yellow,
+  queued: chalk15.dim
 };
 function formatBuildsHuman(builds2) {
   if (builds2.length === 0) {
@@ -2113,7 +2149,7 @@ function formatBuildsHuman(builds2) {
   const widths = HEADERS.map((h, i) => Math.max(h.length, ...rows.map((r) => r[i].length)));
   const padCells = (cells) => cells.map((c, i) => c.padEnd(widths[i]));
   const join5 = (cells) => cells.join("  ").trimEnd();
-  const lines = [chalk14.bold(join5(padCells(HEADERS)))];
+  const lines = [chalk15.bold(join5(padCells(HEADERS)))];
   for (const row of rows) {
     const padded = padCells(row);
     const colorFn = STATUS_COLOR[row[2]] ?? ((s) => s);
@@ -2172,7 +2208,7 @@ async function buildsLogs(id, opts, deps) {
         console.log(JSON.stringify(logs));
       } else {
         if (logs.content) process.stdout.write(logs.content);
-        console.error(chalk15.dim(`status: ${logs.status}`));
+        console.error(chalk16.dim(`status: ${logs.status}`));
       }
       process.exitCode = 0;
       return;
@@ -2269,7 +2305,7 @@ async function buildsDownload(id, opts, deps) {
     if (opts.json) {
       console.log(JSON.stringify(result));
     } else {
-      console.log(chalk15.green(`\u2713 saved ${result.path}`));
+      console.log(chalk16.green(`\u2713 saved ${result.path}`));
     }
     process.exitCode = 0;
   } catch (err) {
@@ -2286,7 +2322,7 @@ async function buildsCancel(id, opts, deps) {
     if (opts.json) {
       console.log(JSON.stringify(build));
     } else {
-      console.log(`${chalk15.cyan(build.id)}  ${build.status}`);
+      console.log(`${chalk16.cyan(build.id)}  ${build.status}`);
     }
     process.exitCode = 0;
   } catch (err) {
@@ -2303,7 +2339,7 @@ async function buildsDeleteArtifact(id, opts, deps) {
     if (opts.json) {
       console.log(JSON.stringify(result));
     } else {
-      console.log(chalk15.green(`\u2713 deleted artifact for ${id}`));
+      console.log(chalk16.green(`\u2713 deleted artifact for ${id}`));
     }
     process.exitCode = 0;
   } catch (err) {
@@ -2314,11 +2350,11 @@ async function buildsDeleteArtifact(id, opts, deps) {
 function printError(opts, err) {
   const message = err instanceof Error ? err.message : String(err);
   if (opts.json) console.log(JSON.stringify({ event: "error", message }));
-  console.error(chalk15.red(`error: ${message}`));
+  console.error(chalk16.red(`error: ${message}`));
 }
 
 // src/commands/submit.ts
-import chalk16 from "chalk";
+import chalk17 from "chalk";
 function defaultDeps2(client) {
   return {
     createSubmission: client.createSubmission.bind(client),
@@ -2342,7 +2378,7 @@ function submitConfigFor(cwd, platform) {
     cfg = loadDevConfig(cwd);
   } catch (err) {
     console.error(
-      chalk16.yellow(
+      chalk17.yellow(
         `warning: vibeview.json could not be read \u2014 ignoring submit defaults (${err instanceof Error ? err.message : String(err)})`
       )
     );
@@ -2490,12 +2526,12 @@ async function submitCommand(opts, deps) {
       return;
     }
     if (!opts.json) {
-      console.error(`  ${chalk16.cyan(sub.id)}  ${chalk16.dim(`[${sub.platform}]`)}`);
+      console.error(`  ${chalk17.cyan(sub.id)}  ${chalk17.dim(`[${sub.platform}]`)}`);
     }
     const final = await followSubmission(sub, opts, d);
     if (!opts.json && final.status === "succeeded" && (final.release_status ?? releaseStatus) === "draft") {
       console.error(
-        chalk16.dim("release status: draft \u2014 activate it from the Play Console when ready")
+        chalk17.dim("release status: draft \u2014 activate it from the Play Console when ready")
       );
     }
     process.exitCode = final.status === "succeeded" ? 0 : 1;
@@ -2526,11 +2562,11 @@ async function checkStore(platform, androidFamily, ascKey2, opts, deps) {
     });
     emit(opts.json, { event: "preflight", ...result });
     if (!opts.json) {
-      const mark = result.ready ? chalk16.green("\u2713") : chalk16.red("\u2717");
+      const mark = result.ready ? chalk17.green("\u2713") : chalk17.red("\u2717");
       console.error(`${mark} ${result.message}`);
       if (result.ready) {
         console.error(
-          chalk16.dim(
+          chalk17.dim(
             `  next: vibeview build --cloud --production --platform ${platform}, then vibeview submit --platform ${platform} --latest`
           )
         );
@@ -2564,7 +2600,7 @@ async function linkedIdentifier(platform, opts, deps) {
   }
   if (!app.package_name) return void 0;
   if (!opts.json) {
-    console.error(chalk16.dim(`Checking ${app.package_name} (${app.name}, linked in vibeview.json)`));
+    console.error(chalk17.dim(`Checking ${app.package_name} (${app.name}, linked in vibeview.json)`));
   }
   return app.package_name;
 }
@@ -2605,14 +2641,14 @@ async function followSubmission(created, opts, deps) {
         if (opts.json) {
           emit(opts.json, { event: "status", id: created.id, status: "queued" });
         } else {
-          console.error(chalk16.dim("\u23F3 queued \u2014 waiting for a submission slot"));
+          console.error(chalk17.dim("\u23F3 queued \u2014 waiting for a submission slot"));
         }
       } else if (log.status === "running" && !printedRunning) {
         printedRunning = true;
         if (opts.json) {
           emit(opts.json, { event: "status", id: created.id, status: "running" });
         } else {
-          console.error(`${chalk16.cyan("\u25B6")} submitting`);
+          console.error(`${chalk17.cyan("\u25B6")} submitting`);
         }
       }
       if (log.content) {
@@ -2654,7 +2690,7 @@ The submission continues server-side \u2014 see its outcome on the Builds page i
   });
   if (!opts.json) {
     const ok = final.status === "succeeded";
-    const mark = ok ? chalk16.green("\u2713") : chalk16.red("\u2717");
+    const mark = ok ? chalk17.green("\u2713") : chalk17.red("\u2717");
     const duration = formatDuration(final.started_at, final.finished_at);
     let line = `${mark} ${final.status}`;
     if (duration) line += ` (${duration})`;
@@ -2666,11 +2702,11 @@ The submission continues server-side \u2014 see its outcome on the Builds page i
 function printError2(opts, err) {
   const message = err instanceof Error ? err.message : String(err);
   if (opts.json) console.log(JSON.stringify({ event: "error", message }));
-  console.error(chalk16.red(`error: ${message}`));
+  console.error(chalk17.red(`error: ${message}`));
 }
 
 // src/commands/versions.ts
-import chalk17 from "chalk";
+import chalk18 from "chalk";
 function defaultDeps3(client) {
   return {
     listAppVersions: client.listAppVersions.bind(client),
@@ -2720,7 +2756,7 @@ async function versionsSet(buildNumber, opts, deps) {
       console.log(JSON.stringify(version));
     } else {
       console.log(
-        chalk17.green(`\u2713 ${version.platform} build number set to ${version.build_number}`) + chalk17.dim(
+        chalk18.green(`\u2713 ${version.platform} build number set to ${version.build_number}`) + chalk18.dim(
           " \u2014 the next autoIncrement production build gets " + (version.build_number + 1)
         )
       );
@@ -2740,18 +2776,18 @@ function formatVersionsHuman(versions2) {
   const widths = HEADERS2.map((h, i) => Math.max(h.length, ...rows.map((r) => r[i].length)));
   const padCells = (cells) => cells.map((c, i) => c.padEnd(widths[i]));
   const join5 = (cells) => cells.join("  ").trimEnd();
-  const lines = [chalk17.bold(join5(padCells(HEADERS2)))];
+  const lines = [chalk18.bold(join5(padCells(HEADERS2)))];
   for (const row of rows) lines.push(join5(padCells(row)));
   return lines.join("\n") + "\n";
 }
 function printError3(opts, err) {
   const message = err instanceof Error ? err.message : String(err);
   if (opts.json) console.log(JSON.stringify({ event: "error", message }));
-  console.error(chalk17.red(`error: ${message}`));
+  console.error(chalk18.red(`error: ${message}`));
 }
 
 // src/commands/whoami.ts
-import chalk18 from "chalk";
+import chalk19 from "chalk";
 function defaultDeps4(opts) {
   const { token, baseUrl } = resolveAuth(opts);
   const client = new ApiClient(baseUrl, token);
@@ -2782,33 +2818,33 @@ async function whoAmI(opts, deps) {
       process.exitCode = 0;
       return;
     }
-    console.log(`${chalk18.bold("Logged in as")}  ${me.email}`);
+    console.log(`${chalk19.bold("Logged in as")}  ${me.email}`);
     if (me.memberships.length === 1) {
-      console.log(`${chalk18.bold("Organization")}   ${me.memberships[0].organization_name}`);
+      console.log(`${chalk19.bold("Organization")}   ${me.memberships[0].organization_name}`);
     } else if (me.memberships.length > 1) {
-      console.log(chalk18.bold("Organizations"));
+      console.log(chalk19.bold("Organizations"));
       for (const m of me.memberships) {
         console.log(`  ${m.organization_name} (${m.role})`);
       }
     }
-    console.log(`${chalk18.bold("Member role")}    ${me.role ?? "\u2014"}`);
-    console.log(`${chalk18.bold("Token role")}     ${me.token_role ?? "\u2014 (session auth)"}`);
-    console.log(`${chalk18.bold("Effective role")} ${effective ?? "\u2014"}`);
+    console.log(`${chalk19.bold("Member role")}    ${me.role ?? "\u2014"}`);
+    console.log(`${chalk19.bold("Token role")}     ${me.token_role ?? "\u2014 (session auth)"}`);
+    console.log(`${chalk19.bold("Effective role")} ${effective ?? "\u2014"}`);
     if (me.token_access) {
       console.log(
-        `${chalk18.bold("Access")}         ${me.token_access === "ci" ? "CI only (upload builds, run tests, read results)" : "Full access"}`
+        `${chalk19.bold("Access")}         ${me.token_access === "ci" ? "CI only (upload builds, run tests, read results)" : "Full access"}`
       );
-      console.log(`${chalk18.bold("Expires")}        ${describeExpiry(me.token_expires_at)}`);
+      console.log(`${chalk19.bold("Expires")}        ${describeExpiry(me.token_expires_at)}`);
     }
     if (me.is_superadmin) {
-      console.log(chalk18.dim("Superadmin (platform-wide; does not raise the org role above)"));
+      console.log(chalk19.dim("Superadmin (platform-wide; does not raise the org role above)"));
     }
     if (me.role === "admin" && me.token_role && me.token_role !== "admin" && me.token_access !== "ci") {
       console.log(
-        chalk18.yellow(
+        chalk19.yellow(
           `
-Your account is admin, but this CLI token is ${me.token_role}. The effective role is the lower of the two, so admin-only commands (such as ${chalk18.bold("vibeview env set")}) will fail with a permissions error.
-Create an admin API token in the dashboard and use ${chalk18.bold("--token")} or ${chalk18.bold("VIBEVIEW_API_TOKEN")}.`
+Your account is admin, but this CLI token is ${me.token_role}. The effective role is the lower of the two, so admin-only commands (such as ${chalk19.bold("vibeview env set")}) will fail with a permissions error.
+Create an admin API token in the dashboard and use ${chalk19.bold("--token")} or ${chalk19.bold("VIBEVIEW_API_TOKEN")}.`
         )
       );
     }
@@ -2818,7 +2854,7 @@ Create an admin API token in the dashboard and use ${chalk18.bold("--token")} or
     if (opts.json) {
       console.log(JSON.stringify({ event: "error", message }));
     }
-    console.error(chalk18.red(`error: ${message}`));
+    console.error(chalk19.red(`error: ${message}`));
     process.exitCode = errorExitCode(err);
   }
 }
@@ -2826,7 +2862,7 @@ Create an admin API token in the dashboard and use ${chalk18.bold("--token")} or
 // src/commands/env.ts
 import { chmod, open as open2, readFile as readFileAsync } from "fs/promises";
 import { basename as basename2 } from "path";
-import chalk19 from "chalk";
+import chalk20 from "chalk";
 import { password } from "@inquirer/prompts";
 
 // src/lib/gitignore.ts
@@ -2882,7 +2918,7 @@ function defaultDeps5(client) {
     isIgnored: (path) => isGitIgnored(path),
     writeFile: writeSecureFile,
     readFile: (path) => readFileAsync(path),
-    warn: (message) => console.error(chalk19.yellow(`warning: ${message}`))
+    warn: (message) => console.error(chalk20.yellow(`warning: ${message}`))
   };
 }
 async function envList(opts, deps) {
@@ -2914,7 +2950,7 @@ function formatEnvVarsHuman(variables) {
   const widths = HEADERS3.map((h, i) => Math.max(h.length, ...rows.map((r) => r[i].length)));
   const padCells = (cells) => cells.map((c, i) => c.padEnd(widths[i]));
   const join5 = (cells) => cells.join("  ").trimEnd();
-  const lines = [chalk19.bold(join5(padCells(HEADERS3)))];
+  const lines = [chalk20.bold(join5(padCells(HEADERS3)))];
   for (const row of rows) lines.push(join5(padCells(row)));
   return lines.join("\n") + "\n";
 }
@@ -2964,7 +3000,7 @@ function printSetResult(opts, result) {
   if (opts.json) {
     console.log(JSON.stringify(result));
   } else {
-    console.log(chalk19.green(`\u2713 set ${result.name} (${result.visibility})`));
+    console.log(chalk20.green(`\u2713 set ${result.name} (${result.visibility})`));
   }
 }
 async function envRm(name, opts, deps) {
@@ -2974,7 +3010,7 @@ async function envRm(name, opts, deps) {
     if (opts.json) {
       console.log(JSON.stringify({ event: "deleted", name }));
     } else {
-      console.log(chalk19.green(`\u2713 removed ${name}`));
+      console.log(chalk20.green(`\u2713 removed ${name}`));
     }
     process.exitCode = 0;
   } catch (err) {
@@ -3006,7 +3042,7 @@ async function envPull(opts, deps) {
     if (opts.json) {
       console.log(JSON.stringify({ event: "pulled", path: outPath, count: variables.length }));
     } else {
-      console.log(chalk19.green(`\u2713 wrote ${variables.length} variable(s) to ${outPath}`));
+      console.log(chalk20.green(`\u2713 wrote ${variables.length} variable(s) to ${outPath}`));
     }
     process.exitCode = 0;
   } catch (err) {
@@ -3045,7 +3081,7 @@ function escapeEnvValue(value) {
 function printError4(opts, err) {
   const message = err instanceof Error ? err.message : String(err);
   if (opts.json) console.log(JSON.stringify({ event: "error", message }));
-  console.error(chalk19.red(`error: ${message}`));
+  console.error(chalk20.red(`error: ${message}`));
 }
 
 // src/commands/credentials.ts
@@ -3057,7 +3093,7 @@ import {
 } from "fs/promises";
 import { mkdirSync } from "fs";
 import { basename as basename3, extname as extname2, join as join2 } from "path";
-import chalk20 from "chalk";
+import chalk21 from "chalk";
 import { input, password as password2 } from "@inquirer/prompts";
 function clientFor2(opts) {
   const { token, baseUrl } = resolveAuth(opts);
@@ -3130,7 +3166,7 @@ function defaultDeps6(client) {
     mkdir: (dir) => mkdirSync(dir, { recursive: true }),
     writeFile: (path, data, mode) => writeFileAsync(path, data, mode !== void 0 ? { mode } : void 0),
     chmod: (path, mode) => chmodAsync(path, mode),
-    warn: (message) => console.error(chalk20.yellow(`warning: ${message}`))
+    warn: (message) => console.error(chalk21.yellow(`warning: ${message}`))
   };
 }
 var ANDROID_KIND = "android_keystore";
@@ -3199,7 +3235,7 @@ async function credentialsAdd(opts, deps) {
     if (opts.json) {
       console.log(JSON.stringify(result));
     } else {
-      console.log(chalk20.green(`\u2713 added ${result.name} (${result.platform})`));
+      console.log(chalk21.green(`\u2713 added ${result.name} (${result.platform})`));
     }
     process.exitCode = 0;
   } catch (err) {
@@ -3257,20 +3293,20 @@ async function credentialsGenerate(opts, deps) {
     }
     if (opts.json) {
     } else {
-      console.log(chalk20.green(`\u2713 generated ${result.name} (android)`));
+      console.log(chalk21.green(`\u2713 generated ${result.name} (android)`));
       console.log("");
-      console.log(`  Keystore saved to: ${chalk20.bold(savedTo)}`);
-      console.log(`  Key alias:         ${chalk20.bold(result.key_alias)}`);
-      console.log(`  Store password:    ${chalk20.bold(result.store_password)}`);
-      console.log(`  Key password:      ${chalk20.bold(result.key_password)}`);
+      console.log(`  Keystore saved to: ${chalk21.bold(savedTo)}`);
+      console.log(`  Key alias:         ${chalk21.bold(result.key_alias)}`);
+      console.log(`  Store password:    ${chalk21.bold(result.store_password)}`);
+      console.log(`  Key password:      ${chalk21.bold(result.key_password)}`);
       console.log("");
       console.log(
-        chalk20.yellow(
+        chalk21.yellow(
           "  These are shown ONCE \u2014 VibeView cannot recover the keystore file or its passwords. Back them up somewhere safe."
         )
       );
       console.log(
-        chalk20.yellow(
+        chalk21.yellow(
           "  The credential is already uploaded and active for android and androidtv production builds."
         )
       );
@@ -3296,19 +3332,19 @@ async function generateAppleCredential(platform, opts, d) {
     if (opts.json) {
       console.log(JSON.stringify(result));
     } else {
-      console.log(chalk20.green(`\u2713 generated ${result.name} (${result.platform})`));
+      console.log(chalk21.green(`\u2713 generated ${result.name} (${result.platform})`));
       console.log("");
-      console.log(`  Scope:   ${chalk20.bold(result.app_public_id ?? "org-wide")}`);
+      console.log(`  Scope:   ${chalk21.bold(result.app_public_id ?? "org-wide")}`);
       const expires = formatExpires(result);
       if (expires) {
-        console.log(`  Expires: ${chalk20.bold(expires)}`);
+        console.log(`  Expires: ${chalk21.bold(expires)}`);
       }
       console.log("");
       console.log(
         `  The certificate and provisioning profile are stored with VibeView and already active for ${result.platform} production builds.`
       );
       console.log(
-        `  Run ${chalk20.bold(`vibeview credentials download ${result.name}`)} if you need the files locally.`
+        `  Run ${chalk21.bold(`vibeview credentials download ${result.name}`)} if you need the files locally.`
       );
     }
     process.exitCode = 0;
@@ -3374,17 +3410,17 @@ async function credentialsDownload(name, opts, deps) {
       await d.chmod(path, 384);
     }
     if (!opts.json) {
-      console.log(chalk20.green(`\u2713 downloaded ${material.name} (${material.platform})`));
+      console.log(chalk21.green(`\u2713 downloaded ${material.name} (${material.platform})`));
       console.log("");
-      console.log(`  Saved to: ${chalk20.bold(savedTo)}`);
+      console.log(`  Saved to: ${chalk21.bold(savedTo)}`);
       if (profileSavedTo !== null) {
-        console.log(`  Profile:  ${chalk20.bold(profileSavedTo)}`);
+        console.log(`  Profile:  ${chalk21.bold(profileSavedTo)}`);
       }
       for (const [key, value] of Object.entries(material.passwords)) {
-        console.log(`  ${key}: ${chalk20.bold(value)}`);
+        console.log(`  ${key}: ${chalk21.bold(value)}`);
       }
       console.log("");
-      console.log(chalk20.yellow("  This download is recorded in your organization's audit log."));
+      console.log(chalk21.yellow("  This download is recorded in your organization's audit log."));
     }
     process.exitCode = 0;
   } catch (err) {
@@ -3415,13 +3451,13 @@ async function ascKeyAdd(opts, deps) {
     if (opts.json) {
       console.log(JSON.stringify(result));
     } else {
-      console.log(chalk20.green(`\u2713 added App Store Connect key ${result.name}`));
+      console.log(chalk21.green(`\u2713 added App Store Connect key ${result.name}`));
       console.log("");
-      console.log(`  Key ID:    ${chalk20.bold(result.key_id)}`);
-      console.log(`  Issuer ID: ${chalk20.bold(result.issuer_id)}`);
+      console.log(`  Key ID:    ${chalk21.bold(result.key_id)}`);
+      console.log(`  Issuer ID: ${chalk21.bold(result.issuer_id)}`);
       console.log("");
       console.log(
-        chalk20.yellow(
+        chalk21.yellow(
           "  The .p8 is stored encrypted and will never be shown again \u2014 keep your own copy somewhere safe."
         )
       );
@@ -3456,7 +3492,7 @@ function formatAscKeysHuman(keys) {
   const widths = HEADERS3.map((h, i) => Math.max(h.length, ...rows.map((r) => r[i].length)));
   const padCells = (cells) => cells.map((c, i) => c.padEnd(widths[i]));
   const join5 = (cells) => cells.join("  ").trimEnd();
-  const lines = [chalk20.bold(join5(padCells(HEADERS3)))];
+  const lines = [chalk21.bold(join5(padCells(HEADERS3)))];
   for (const row of rows) lines.push(join5(padCells(row)));
   return lines.join("\n") + "\n";
 }
@@ -3467,7 +3503,7 @@ async function ascKeyRm(name, opts, deps) {
     if (opts.json) {
       console.log(JSON.stringify({ event: "deleted", name }));
     } else {
-      console.log(chalk20.green(`\u2713 removed App Store Connect key ${name}`));
+      console.log(chalk21.green(`\u2713 removed App Store Connect key ${name}`));
     }
     process.exitCode = 0;
   } catch (err) {
@@ -3492,12 +3528,12 @@ async function playKeyAdd(opts, deps) {
     if (opts.json) {
       console.log(JSON.stringify(result));
     } else {
-      console.log(chalk20.green(`\u2713 added Google Play key ${result.name}`));
+      console.log(chalk21.green(`\u2713 added Google Play key ${result.name}`));
       console.log("");
-      console.log(`  Service account: ${chalk20.bold(result.client_email)}`);
+      console.log(`  Service account: ${chalk21.bold(result.client_email)}`);
       console.log("");
       console.log(
-        chalk20.yellow(
+        chalk21.yellow(
           "  The JSON key is stored encrypted and will never be shown again \u2014 keep your own copy somewhere safe."
         )
       );
@@ -3532,7 +3568,7 @@ function formatPlayKeysHuman(keys) {
   const widths = HEADERS3.map((h, i) => Math.max(h.length, ...rows.map((r) => r[i].length)));
   const padCells = (cells) => cells.map((c, i) => c.padEnd(widths[i]));
   const join5 = (cells) => cells.join("  ").trimEnd();
-  const lines = [chalk20.bold(join5(padCells(HEADERS3)))];
+  const lines = [chalk21.bold(join5(padCells(HEADERS3)))];
   for (const row of rows) lines.push(join5(padCells(row)));
   return lines.join("\n") + "\n";
 }
@@ -3543,7 +3579,7 @@ async function playKeyRm(name, opts, deps) {
     if (opts.json) {
       console.log(JSON.stringify({ event: "deleted", name }));
     } else {
-      console.log(chalk20.green(`\u2713 removed Google Play key ${name}`));
+      console.log(chalk21.green(`\u2713 removed Google Play key ${name}`));
     }
     process.exitCode = 0;
   } catch (err) {
@@ -3612,7 +3648,7 @@ function formatCredentialsHuman(credentials2) {
   const widths = HEADERS3.map((h, i) => Math.max(h.length, ...rows.map((r) => r[i].length)));
   const padCells = (cells) => cells.map((c, i) => c.padEnd(widths[i]));
   const join5 = (cells) => cells.join("  ").trimEnd();
-  const lines = [chalk20.bold(join5(padCells(HEADERS3)))];
+  const lines = [chalk21.bold(join5(padCells(HEADERS3)))];
   for (const row of rows) lines.push(join5(padCells(row)));
   return lines.join("\n") + "\n";
 }
@@ -3623,7 +3659,7 @@ async function credentialsRm(name, opts, deps) {
     if (opts.json) {
       console.log(JSON.stringify({ event: "deleted", name }));
     } else {
-      console.log(chalk20.green(`\u2713 removed ${name}`));
+      console.log(chalk21.green(`\u2713 removed ${name}`));
     }
     process.exitCode = 0;
   } catch (err) {
@@ -3635,16 +3671,16 @@ function printKeystoreWriteFailure(opts, err, result) {
   const message = err instanceof Error ? err.message : String(err);
   if (opts.json) {
     console.log(JSON.stringify({ event: "error", message }));
-    console.error(chalk20.red(`error: ${message}`));
+    console.error(chalk21.red(`error: ${message}`));
     return;
   }
-  console.error(chalk20.red(`error: ${message}`));
+  console.error(chalk21.red(`error: ${message}`));
   console.error(
-    chalk20.red(
+    chalk21.red(
       `The keystore could NOT be saved locally, but the credential "${result.name}" WAS created server-side and its key material can never be re-fetched.`
     )
   );
-  console.error(chalk20.red("Recover it NOW from the values below \u2014 they will not be shown again:"));
+  console.error(chalk21.red("Recover it NOW from the values below \u2014 they will not be shown again:"));
   console.error("");
   console.error(`  Key alias:         ${result.key_alias}`);
   console.error(`  Store password:    ${result.store_password}`);
@@ -3658,11 +3694,11 @@ function printKeystoreWriteFailure(opts, err, result) {
 function printError5(opts, err) {
   const message = err instanceof Error ? err.message : String(err);
   if (opts.json) console.log(JSON.stringify({ event: "error", message }));
-  console.error(chalk20.red(`error: ${message}`));
+  console.error(chalk21.red(`error: ${message}`));
 }
 
 // src/commands/webhooks.ts
-import chalk21 from "chalk";
+import chalk22 from "chalk";
 function clientFor3(opts) {
   const { token, baseUrl } = resolveAuth(opts);
   return new ApiClient(baseUrl, token);
@@ -3693,14 +3729,14 @@ async function webhooksAdd(opts, deps) {
     if (opts.json) {
       console.log(JSON.stringify(result));
     } else {
-      console.log(chalk21.green(`\u2713 added ${result.id} ${result.url}`));
+      console.log(chalk22.green(`\u2713 added ${result.id} ${result.url}`));
       console.log("");
-      console.log(`  Signing secret: ${chalk21.bold(result.secret)}`);
+      console.log(`  Signing secret: ${chalk22.bold(result.secret)}`);
       if (opts.secret !== void 0) {
-        console.log(chalk21.yellow("  (This is the secret you provided.)"));
+        console.log(chalk22.yellow("  (This is the secret you provided.)"));
       }
       console.log(
-        chalk21.yellow("  This secret is shown ONCE and cannot be retrieved again \u2014 store it now.")
+        chalk22.yellow("  This secret is shown ONCE and cannot be retrieved again \u2014 store it now.")
       );
     }
     process.exitCode = 0;
@@ -3731,7 +3767,7 @@ function formatWebhooksHuman(webhooks2) {
   const widths = HEADERS3.map((h, i) => Math.max(h.length, ...rows.map((r) => r[i].length)));
   const padCells = (cells) => cells.map((c, i) => c.padEnd(widths[i]));
   const join5 = (cells) => cells.join("  ").trimEnd();
-  const lines = [chalk21.bold(join5(padCells(HEADERS3)))];
+  const lines = [chalk22.bold(join5(padCells(HEADERS3)))];
   for (const row of rows) lines.push(join5(padCells(row)));
   return lines.join("\n") + "\n";
 }
@@ -3757,7 +3793,7 @@ async function webhooksRm(id, opts, deps) {
     if (opts.json) {
       console.log(JSON.stringify({ event: "deleted", id }));
     } else {
-      console.log(chalk21.green(`\u2713 removed ${id}`));
+      console.log(chalk22.green(`\u2713 removed ${id}`));
     }
     process.exitCode = 0;
   } catch (err) {
@@ -3790,13 +3826,13 @@ async function webhooksTest(id, opts, deps) {
         if (opts.json) console.log(JSON.stringify(ld));
         if (ld.status === "succeeded") {
           if (!opts.json) {
-            console.log(chalk21.green(`\u2713 Delivered (HTTP ${ld.response_code})`));
+            console.log(chalk22.green(`\u2713 Delivered (HTTP ${ld.response_code})`));
           }
           process.exitCode = 0;
         } else {
           if (!opts.json) {
             const code = ld.response_code != null ? `HTTP ${ld.response_code}` : "no response";
-            console.error(chalk21.red(`\u2717 Failed (${code}) at ${formatUtcTimestamp(ld.at)}`));
+            console.error(chalk22.red(`\u2717 Failed (${code}) at ${formatUtcTimestamp(ld.at)}`));
           }
           process.exitCode = 1;
         }
@@ -3805,7 +3841,7 @@ async function webhooksTest(id, opts, deps) {
     }
     if (opts.json) console.log(JSON.stringify({ status: "pending" }));
     console.error(
-      chalk21.yellow(
+      chalk22.yellow(
         `Delivery still pending after ${TEST_POLL_BUDGET_MS / 1e3}s \u2014 check \`vibeview webhooks list\` later for the result.`
       )
     );
@@ -3818,7 +3854,7 @@ async function webhooksTest(id, opts, deps) {
 function printError6(opts, err) {
   const message = err instanceof Error ? err.message : String(err);
   if (opts.json) console.log(JSON.stringify({ event: "error", message }));
-  console.error(chalk21.red(`error: ${message}`));
+  console.error(chalk22.red(`error: ${message}`));
 }
 
 // src/commands/list-devices.ts
@@ -3916,7 +3952,7 @@ import { dirname, join as join3 } from "path";
 import { fileURLToPath } from "url";
 import { spawnSync } from "child_process";
 import { confirm } from "@inquirer/prompts";
-import chalk22 from "chalk";
+import chalk23 from "chalk";
 function resolveShippedSkillPath(fromDir) {
   for (const rel of ["..", join3("..", "..")]) {
     const candidate = join3(fromDir, rel, "skills", "vibeview-agent", "SKILL.md");
@@ -3946,23 +3982,23 @@ function registerMcp() {
     encoding: "utf8"
   });
   if (res.status === 0) {
-    console.log(chalk22.green("\u2713 MCP server registered with Claude Code (claude mcp add vibeview)"));
+    console.log(chalk23.green("\u2713 MCP server registered with Claude Code (claude mcp add vibeview)"));
     return;
   }
   const out = `${res.stderr ?? ""}${res.stdout ?? ""}`;
   if (out.includes("already exists")) {
-    console.log(chalk22.dim("MCP server already registered with Claude Code \u2014 nothing to do"));
+    console.log(chalk23.dim("MCP server already registered with Claude Code \u2014 nothing to do"));
     return;
   }
-  console.error(chalk22.yellow(`\u26A0 could not register the MCP server: ${out.trim() || res.error}`));
-  console.error(chalk22.yellow(`  register it manually: ${MCP_ADD_HINT}`));
+  console.error(chalk23.yellow(`\u26A0 could not register the MCP server: ${out.trim() || res.error}`));
+  console.error(chalk23.yellow(`  register it manually: ${MCP_ADD_HINT}`));
 }
 async function agentSetup(opts) {
   const moduleDir = dirname(fileURLToPath(import.meta.url));
   const shipped = resolveShippedSkillPath(moduleDir);
   if (!shipped) {
     console.error(
-      chalk22.red(
+      chalk23.red(
         "error: could not find the packaged skill (skills/vibeview-agent/SKILL.md) \u2014 is this a complete install of the vibeview package?"
       )
     );
@@ -3971,9 +4007,9 @@ async function agentSetup(opts) {
   }
   const targetDir = skillInstallDir(opts.project ?? false, process.cwd(), homedir());
   const result = installSkill(shipped, targetDir);
-  console.log(chalk22.green(`\u2713 vibeview-agent skill ${result}: ${join3(targetDir, "SKILL.md")}`));
+  console.log(chalk23.green(`\u2713 vibeview-agent skill ${result}: ${join3(targetDir, "SKILL.md")}`));
   console.log(
-    chalk22.dim(
+    chalk23.dim(
       opts.project ? "  Claude Code discovers it automatically for anyone working in this project." : "  Claude Code discovers it automatically in every project on this machine."
     )
   );
@@ -3981,7 +4017,7 @@ async function agentSetup(opts) {
     if (!claudeCliAvailable()) {
       if (opts.mcp === true) {
         console.error(
-          chalk22.yellow(`\u26A0 claude CLI not found \u2014 install Claude Code, then run: ${MCP_ADD_HINT}`)
+          chalk23.yellow(`\u26A0 claude CLI not found \u2014 install Claude Code, then run: ${MCP_ADD_HINT}`)
         );
       }
     } else if (opts.mcp === true || process.stdin.isTTY && await confirm({
@@ -3993,7 +4029,7 @@ async function agentSetup(opts) {
   }
   console.log(
     `
-Suggested line for your project's ${chalk22.bold("CLAUDE.md")} (or ${chalk22.bold(
+Suggested line for your project's ${chalk23.bold("CLAUDE.md")} (or ${chalk23.bold(
       "AGENTS.md"
     )} for other agents):
 `
@@ -4001,7 +4037,7 @@ Suggested line for your project's ${chalk22.bold("CLAUDE.md")} (or ${chalk22.bol
   console.log(`  ${CLAUDE_MD_SUGGESTION}
 `);
   console.log(
-    chalk22.dim(
+    chalk23.dim(
       "Other agents (Cursor, Copilot, Codex, ...): install the same skill from GitHub with\n  npx skills add vibeview/skills\nor point them at the skill file above, or add the MCP server per client \u2014\nsee https://vibeview.io/docs/agent-control"
     )
   );
@@ -4337,6 +4373,9 @@ program.command("build").description("Run your configured build command and uplo
   "--production",
   "--cloud only: build a signed, installable production artifact (.aab/.ipa) using uploaded signing credentials (see `vibeview credentials add`), instead of the default unsigned simulator build",
   false
+).option(
+  "--xcode <version>",
+  "--cloud only, ios/tvos: the Xcode version to build with (e.g. 27.1), overriding vibeview.json build.xcode for this run"
 ).option("--json", "Print the result as one JSON line (NDJSON events with --cloud)", false).action((opts) => buildCommand(opts));
 program.command("submit").description(
   "Submit a succeeded production cloud build's artifact to TestFlight (ios/tvos) or a Google Play track (android/androidtv) \u2014 binary upload only; store listing and review stay in the store consoles"
@@ -4455,13 +4494,21 @@ program.command("dev-stop").description("Stop a `vibeview dev --detach` session
 program.command("stop <session-id>").description(
   "Stop any session by id \u2014 e.g. one started from the API, the sandbox, or a collaboration link (`dev-stop` stops this project's detached dev session without an id)"
 ).option("--token <token>", "API token (or set VIBEVIEW_API_TOKEN)").option("--json", "Print the result as one JSON line", false).action((sessionId, opts) => stopCommand(sessionId, opts));
+program.command("feedback <kind> <summary>").description(
+  "Send the VibeView team a bug report, friction note or feature idea about VibeView itself (kind: bug, friction or idea)"
+).addHelpText("after", `
+${FEEDBACK_RULES}
+`).option("--details <text>", "What you tried, what happened, what you expected").option(
+  "--session <id>",
+  "Session the report is about (default: this project's dev --detach session, if any)"
+).option("--quote <text>", "The user's own words, verbatim").option("--token <token>", "API token (or set VIBEVIEW_API_TOKEN)").option("--json", "Print the result as one JSON line", false).action((kind, summary, opts) => feedbackCommand(kind, summary, opts, pkg.version));
 program.command("dev-reload").description(
   "Roku only: re-package, upload and reload the channel into this project's `vibeview dev --detach` session (the `r` key of the foreground loop)"
 ).option("--token <token>", "API token (or set VIBEVIEW_API_TOKEN)").option("--json", "Print as one JSON line", false).action((opts) => devReload(opts));
 program.command("mcp").description(
   "Run an MCP stdio server exposing the agent verbs (tap, swipe, type, ...) plus dev_start/dev_stop/dev_reload as tools"
 ).option("--token <token>", "API token (or set VIBEVIEW_API_TOKEN)").action(async (opts) => {
-  const { runMcpServer } = await import("./server-W66J6PY5.js");
+  const { runMcpServer } = await import("./server-3JZ2MN5N.js");
   await runMcpServer({ ...opts, version: pkg.version });
 });
 program.command("agent-setup").description(

package/dist/{server-W66J6PY5.js → server-3JZ2MN5N.js}

@@ -2,6 +2,8 @@
 import {
   AGENT_COMMANDS,
   DEV_PLATFORMS,
+  FEEDBACK_KINDS,
+  FEEDBACK_RULES,
   PLATFORM_DEVICE,
   PLATFORM_NEEDS_METRO,
   buildLines,
@@ -14,10 +16,12 @@ import {
   decodeScreenshotResult,
   describeDevBuild,
   effectiveDevConfig,
+  feedbackSentLine,
   filterDeviceModels,
   formatBuildRowsHuman,
   formatDeviceModelsHuman,
   isDevPlatform,
+  isFeedbackKind,
   loadDevConfig,
   loadLocalDevConfig,
   outcomeOf,
@@ -30,12 +34,12 @@ import {
   renderEnvelope,
   resolveMetro,
   startDevSession
-} from "./chunk-NHM2FHA2.js";
+} from "./chunk-OMIZWILH.js";
 import {
   ApiClient,
   NotFoundError,
   resolveAuth
-} from "./chunk-GDTLLJFL.js";
+} from "./chunk-3LXR2YCS.js";
 
 // src/mcp/server.ts
 import { writeFileSync } from "fs";
@@ -243,6 +247,29 @@ var LIST_APPS_DEF = {
   },
   required: []
 };
+var SEND_FEEDBACK_DEF = {
+  name: "send_feedback",
+  description: `Send the VibeView team a bug report, a friction note or a feature idea about VibeView itself. ${FEEDBACK_RULES} The report includes the session's device and status when it names one.`,
+  mutating: true,
+  properties: {
+    kind: {
+      type: "string",
+      description: "bug, friction or idea.",
+      enum: [...FEEDBACK_KINDS]
+    },
+    summary: { type: "string", description: "One line; kept to 200 characters." },
+    details: {
+      type: "string",
+      description: "What you tried, what happened, what you expected; kept to 4000 characters."
+    },
+    session_id: SESSION_ID_PROPERTY,
+    user_quote: {
+      type: "string",
+      description: "The user's own words about the problem, verbatim (optional)."
+    }
+  },
+  required: ["kind", "summary"]
+};
 var DEV_STOP_DEF = {
   name: "dev_stop",
   description: "Stop the dev-loop session started by dev_start.",
@@ -287,7 +314,8 @@ function buildToolDefinitions() {
     CREATE_TEST_DEF,
     RUN_TEST_DEF,
     RUN_GROUP_DEF,
-    GET_RUN_DEF
+    GET_RUN_DEF,
+    SEND_FEEDBACK_DEF
   ];
 }
 var runClientOf = (deps) => deps.runClient ?? new ApiClient(deps.auth.baseUrl, deps.auth.token, { client: "mcp" });
@@ -551,6 +579,9 @@ async function dispatchToolCall(toolName, args, deps, extra = {}) {
   if (toolName === "list_apps") {
     return handleListApps(args, deps);
   }
+  if (toolName === "send_feedback") {
+    return handleSendFeedback(args, deps);
+  }
   if (toolName === "stop_session") {
     return handleStopSession(args, deps);
   }
@@ -839,6 +870,28 @@ async function handleListDeviceModels(args, deps) {
     }))
   });
 }
+async function handleSendFeedback(args, deps) {
+  if (!isFeedbackKind(args.kind)) {
+    return errorResult(`send_feedback: \`kind\` must be one of ${FEEDBACK_KINDS.join(", ")}`);
+  }
+  const summary = typeof args.summary === "string" ? args.summary.trim() : "";
+  if (!summary) return errorResult("send_feedback: `summary` is required");
+  const sessionId = typeof args.session_id === "string" && args.session_id.trim() ? args.session_id.trim() : deps.resolveSessionId();
+  const body = { kind: args.kind, summary, client: "mcp" };
+  if (typeof args.details === "string" && args.details.trim()) body.details = args.details;
+  if (typeof args.user_quote === "string" && args.user_quote.trim()) {
+    body.user_quote = args.user_quote;
+  }
+  if (sessionId) body.session_id = sessionId;
+  if (deps.clientVersion) body.client_version = deps.clientVersion;
+  const send = deps.sendFeedback ?? ((b) => new ApiClient(deps.auth.baseUrl, deps.auth.token, { client: "mcp" }).sendFeedback(b));
+  try {
+    const result = await send(body);
+    return textResult(feedbackSentLine(result), result);
+  } catch (err) {
+    return errorResult(`error: ${err instanceof Error ? err.message : String(err)}`);
+  }
+}
 async function handleListApps(args, deps) {
   const list = deps.listApps ?? (() => new ApiClient(deps.auth.baseUrl, deps.auth.token).listApps());
   const platform = typeof args.platform === "string" && args.platform ? args.platform : void 0;
@@ -945,7 +998,7 @@ async function handleUploadApp(args, deps) {
   }
   const name = typeof args.name === "string" && args.name ? args.name : void 0;
   const upload = deps.uploadApp ?? (async (f, n) => {
-    const { uploadAppBuild } = await import("./upload-app-ZEQMGZIT.js");
+    const { uploadAppBuild } = await import("./upload-app-TDR6PIWD.js");
     const { result: result2 } = await uploadAppBuild(f, { ...deps.auth, name: n });
     return result2;
   });
@@ -1339,7 +1392,8 @@ var MCP_INSTRUCTIONS = [
   "screenshot writes a PNG and returns its path; pass inline: true to see the image. logs reads the app output after a crash or blank screen.",
   "Tests: create_test, then run_test (or run_group) and get_run. With session_id a run uses the session you hold; without it, a run starts its own new device (never your dev_start session).",
   "A session stopped elsewhere is reported as ended; call dev_start again for a new one.",
-  'A session nobody uses ends after the idle timeout. A result that ends with "Session \u2026 ends in N s for inactivity" means act (tap, type, swipe, press) to keep it, or dev_stop if you are done; ui_tree, screenshot, logs, find and wait do not count as use.'
+  'A session nobody uses ends after the idle timeout. A result that ends with "Session \u2026 ends in N s for inactivity" means act (tap, type, swipe, press) to keep it, or dev_stop if you are done; ui_tree, screenshot, logs, find and wait do not count as use.',
+  "If VibeView itself gets in your way (an error you cannot explain, a missing capability, confusing output), offer the user to send it with send_feedback."
 ].join("\n");
 function toolInputSchema(def, z) {
   const shape = {};
@@ -1370,7 +1424,8 @@ async function createMcpServer(opts) {
     auth,
     resolveSessionId: makeSessionResolver(devSession),
     agentTool: client.agentTool.bind(client),
-    devSession
+    devSession,
+    clientVersion: opts.version
   };
   const server = new McpServer(
     { name: "vibeview", version: opts.version ?? "0.0.0" },

package/dist/{upload-app-ZEQMGZIT.js → upload-app-TDR6PIWD.js}

@@ -3,7 +3,7 @@ import {
   describeBuild,
   uploadApp,
   uploadAppBuild
-} from "./chunk-GDTLLJFL.js";
+} from "./chunk-3LXR2YCS.js";
 export {
   describeBuild,
   uploadApp,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "vibeview",
-  "version": "0.46.0",
+  "version": "0.48.0",
   "description": "VibeView CLI -- run your app on cloud iOS simulators, Android emulators, Apple TV, Android TV and Roku devices: a React Native dev loop, device control for you or your coding agent (CLI or MCP), and tests from CI",
   "mcpName": "io.github.vibeview/vibeview",
   "type": "module",

package/skills/vibeview-agent/SKILL.md

@@ -252,6 +252,19 @@ hit one:
    the confirmation alone. If it's still there, say what you still see and
    ask again.
 
+### When VibeView itself gets in your way
+
+If VibeView — not the user's app — gets in your way (an error you can't
+explain, a missing capability, confusing output), offer to tell the VibeView
+team. Show the user what you will send and send it only with their OK:
+
+    vibeview feedback bug "dev_start says build not found for a build I just uploaded" \
+      --details "upload-app returned build 123; dev --build 123 failed" --session <id>
+
+`kind` is `bug`, `friction` (worked, but confusing, slow or awkward) or `idea`.
+Never include passwords, tokens, test data values or personal data. Over MCP
+the same tool is `send_feedback`.
+
 ## 5. Cleanup
 
 **Always** stop the session when done verifying — a running session bills
@@ -318,6 +331,7 @@ Dev-loop lifecycle commands (not registry verbs, but needed for every run):
 | `dev-stop` | End the current project's detached dev session. |
 | `vibeview stop <session-id>` | End any session by id — one created through the API, the sandbox, or a collaboration link. |
 | `dev-reload` | Roku only: re-package, upload and restart the channel in the detached session (the `r` key of the foreground loop). |
+| `vibeview feedback <bug\|friction\|idea> "<summary>"` | Send the VibeView team a report about VibeView itself (not your app), only after the user OKs it: `--details`, `--session` (defaults to the detached session, if any), `--quote` (the user's own words). Works with no session. |
 
 ## 7. If you're calling VibeView over MCP