fix(sms-permission): re-request on denial and guide permanent denial to app settings

Summary: Improve SMS permission UX so users can request again after denial and are guided to app settings when permanently denied.\nChanges: handle Permission.sms status in controllers, show settings dialog for permanently denied, use kIsWeb guard, context-safety across async.\nValidation: scripts/check.sh passed (analyze/tests OK).\nRisk & Rollback: low; scoped to permission request flow. Revert two controllers if issues.

doc/ads.md

@@ -0,0 +1,123 @@
+# AdMob 미디에이션 네이티브 광고 네트워크 (Android)
+
+아래 네트워크들은 AdMob 미디에이션을 통해 Android에서 네이티브(Native) 광고를 지원합니다. 실제 지원 범위(포맷/통합 방식)는 지역/계정/버전 등에 따라 달라질 수 있으므로 AdMob 콘솔에서 해당 미디에이션 그룹의 포맷 선택 가능 여부로 최종 확인하세요.
+
+## 권장 후보
+- Meta Audience Network (FAN)
+  - 통합: Bidding 전용
+  - 포맷: Native, Native Banner
+  - 문서: https://developers.google.com/admob/android/mediation/meta
+- InMobi
+  - 통합: Waterfall(네이티브는 Waterfall만), Bidding(다른 포맷)
+  - 포맷: Native
+  - 문서: https://developers.google.com/admob/android/mediation/inmobi
+- Pangle (ByteDance/TikTok)
+  - 통합: Bidding + Waterfall
+  - 포맷: Native
+  - 문서: https://developers.google.com/admob/android/mediation/pangle
+- Mintegral
+  - 통합: Bidding + Waterfall
+  - 포맷: Native
+  - 메모: 네이티브는 “Native (Custom Rendering)” 선택 지침이 있음
+  - 문서: https://developers.google.com/admob/android/mediation/mintegral
+- DT Exchange (Fyber)
+  - 통합: Waterfall, Bidding(클로즈드 베타)
+  - 포맷: Native
+  - 문서: https://developers.google.com/admob/android/mediation/dt-exchange
+- Moloco
+  - 통합: Bidding
+  - 포맷: Native
+  - 문서: https://developers.google.com/admob/android/mediation/moloco
+- ironSource Ads
+  - 통합: Waterfall(네이티브는 Waterfall만)
+  - 포맷: Native
+  - 문서: https://developers.google.com/admob/android/mediation/ironsource
+- Unity Ads
+  - 통합: Waterfall, Bidding(오픈 베타)
+  - 포맷: Native
+  - 문서: https://developers.google.com/admob/android/mediation/unity
+- LINE Ads Platform (일본 중심)
+  - 통합: Bidding(네이티브는 클로즈드 베타)
+  - 포맷: Native
+  - 문서: https://developers.google.com/admob/android/mediation/line
+- myTarget (RU/CIS 중심)
+  - 통합: Waterfall
+  - 포맷: Native
+  - 문서: https://developers.google.com/admob/android/mediation/mytarget
+
+## 참고 및 주의사항
+- 지역성/수요: Pangle(아시아), LINE(일본), myTarget(RU/CIS) 등은 지역별 수요 차이가 큼. 타겟 지역 기준으로 우선순위 구성 권장.
+- 통합 방식: 일부는 네이티브가 Waterfall만 지원(InMobi, ironSource), 일부는 Bidding만(Meta), 혼합 지원(Pangle, Mintegral, Unity). 비딩/워터폴 여부에 따라 콘솔 설정이 상이함.
+- SDK/어댑터: Android Gradle에 각 네트워크 SDK/어댑터 추가가 필요하며, AdMob UI에서 해당 네트워크를 미디에이션 그룹의 “Native” 포맷으로 매핑해야 함. 개인정보/동의 메시징(US State Privacy, GDPR 등)도 파트너 추가 필요.
+- 템플릿/표시: 대부분 Unified Native 기반 에셋을 제공하나 네트워크별 에셋 세트가 달라 `NativeTemplateStyle` 기반 템플릿 레이아웃 조정이 필요할 수 있음.
+- AppLovin 유의: 문서상 포맷 표에 Native가 보이더라도 어댑터 변경 이력에 “Native 지원 제거”가 기록되어 있습니다. 실제 지원은 AdMob 콘솔(미디에이션 그룹)에서 포맷 선택 가능 여부로 재확인하세요. 문서: https://developers.google.com/admob/android/mediation/applovin
+- Flutter 연동: `google_mobile_ads`의 `NativeAd` 로드/리스너/`AdWidget` 사용 패턴은 동일. 네트워크 추가는 네이티브(Android) 쪽 SDK/어댑터 및 콘솔 설정이 핵심.
+
+## 빠른 적용 체크리스트
+- [ ] 타겟 지역에 맞는 네트워크 선정(2~5개)
+- [ ] Android 의존성 추가(네트워크 SDK/어댑터)
+- [ ] AdMob 콘솔: 미디에이션 그룹 생성(포맷=Native), 각 네트워크 매핑
+- [ ] 테스트 모드/테스트 광고 확인(네트워크별 테스트 설정 있음)
+- [ ] 앱 내 네이티브 광고 UI 검수(템플릿/에셋 배치, 정책 준수)
+
+---
+
+## 지역별 우선순위 제안(예시)
+아래는 일반적인 트래픽·수요 기준의 스타트 세트 예시입니다. 실제 퍼포먼스는 앱 카테고리/유저 페르소나/국가별 규제에 따라 달라질 수 있으므로 A/B로 조합을 검증하세요.
+
+- 한국/일본(KR/JP)
+  - 1군: Meta(FAN, Bidding) + Pangle(Bidding/Waterfall) + LINE(JP, Bidding/Closed Beta for Native)
+  - 보강: Mintegral, InMobi, Unity
+- 북미/유럽(NA/EU)
+  - 1군: Meta(FAN) + InMobi + Unity + Chartboost
+  - 보강: DT Exchange(Fyber), Moloco
+- 동남아/인도(SEA/IN)
+  - 1군: InMobi + Pangle + Mintegral + Meta(FAN)
+  - 보강: Unity, DT Exchange
+- CIS/러시아권
+  - 1군: myTarget
+  - 보강: Mintegral, Unity
+
+참고: Chartboost는 네이티브 포맷 지원. 지역/장르에 따라 성과 편차가 있어 NA/EU 게임 카테고리에서 보강용으로 고려.
+
+문서: 
+- Chartboost: https://developers.google.com/admob/android/mediation/chartboost
+
+---
+
+## Android Gradle 의존성(예시)
+Flutter에서 `google_mobile_ads`를 사용해도, 미디에이션 파트너의 Android SDK/어댑터는 Gradle에 직접 추가해야 합니다. 아래 스니펫은 예시이며, “정확한 최신 버전”은 각 네트워크 문서의 Adapter 섹션(Changelog/Artifacts)에서 확인 후 고정하세요.
+
+프로젝트 수준 `settings.gradle`/리포지토리 설정은 기본 `google()`/`mavenCentral()`이면 충분합니다.
+
+`android/app/build.gradle` (dependencies 블록)
+
+```gradle
+dependencies {
+    // Google Mobile Ads SDK (보통 어댑터가 transitive로 끌어오지만 명시해도 무방)
+    implementation 'com.google.android.gms:play-services-ads:24.6.0' // 최신 권장 버전으로 교체
+
+    // Mediation adapters (예시 버전; 실제 최신 버전으로 교체)
+    implementation 'com.google.ads.mediation:facebook:6.16.0.0'      // Meta Audience Network
+    implementation 'com.google.ads.mediation:pangle:5.5.0.4.0'       // Pangle
+    implementation 'com.google.ads.mediation:mintegral:16.5.91.1'    // Mintegral
+    implementation 'com.google.ads.mediation:inmobi:10.6.3.0'        // InMobi
+    implementation 'com.google.ads.mediation:fyber:8.3.8.0'          // DT Exchange(Fyber)
+    implementation 'com.google.ads.mediation:moloco:3.8.0.0'         // Moloco
+    implementation 'com.google.ads.mediation:ironsource:8.5.0.1'     // ironSource
+    implementation 'com.google.ads.mediation:unity:4.16.0.1'         // Unity Ads
+    implementation 'com.google.ads.mediation:mytarget:5.20.0.0'      // myTarget
+    // implementation 'com.google.ads.mediation:chartboost:<version>' // Chartboost (필요 시)
+}
+```
+
+버전 확인 팁:
+- 각 네트워크 가이드의 “Supported integrations and ad formats”/“Changelog”에서 최소/최신 어댑터 버전 확인
+- Maven Central에서 `com.google.ads.mediation:<artifact>` 검색하여 최신 릴리스 확인
+- AdMob 콘솔에서 해당 네트워크 추가 시 표시되는 가이드/버전 주석 참조
+
+설정 체크:
+- ProGuard/R8 규칙이 필요한 네트워크의 경우 가이드에 명시된 keep 규칙 추가
+- COPPA/유럽·미국 주 개인정보법 관련 consent 전달(UMP SDK 또는 자체 메시징) 및 파트너 동기화
+- 테스트: 네트워크 콘솔에서 테스트 모드 또는 테스트 디바이스 ID 설정 후 실제 단말에서 `NativeAd` 로드 확인
+

doc/plan.md

@@ -0,0 +1,113 @@
+# SubManager UI 리디자인/리팩터링 계획 (flutter-shadcn-ui 기반)
+
+## 개요
+- 목적: 앱 전반 UI를 `flutter-shadcn-ui`로 표준화하고, 라이트/다크 테마와 의미 있는 컬러 체계를 구축. 사용하지 않는 코드/파일 정리, 복잡한 알고리즘을 동등 효과의 단순한 구현으로 교체.
+- 원칙: 색채심리학/게슈탈트 심리학/피츠의 법칙/마이크로인터랙션을 반영. 화면 간 일관성 유지. 사이드 이펙트 최소화(동작/데이터 모델 변경 없이 UI 중심).
+- 범위: `lib/screens`, `lib/widgets`, `lib/theme` 전반. 일부 `services/*` 단순화 대상 포함(동일 기능 유지).
+
+## 사전 승인 필요(착수 전)
+1) 의존성 추가: `flutter_shadcn_ui` (pubspec.yaml).  
+2) 테마 구조 재구성: 기존 `app_theme.dart`, `app_colors.dart` → shadcn 토큰/스케일 중심으로 정리.  
+3) 불용 파일 삭제: 기존 커스텀 위젯·스타일(예: 글라스모피즘 계열 등) 제거.  
+4) 점진적 마이그레이션 방식 선택(권장) 또는 일괄 치환(위험도 높음).
+
+## 접근 전략(옵션)
+- 옵션 A: 점진적 이행(권장)  
+  1단계 토대(테마/토큰/기본 컴포넌트) → 2단계 주요 화면 치환 → 3단계 잔여 위젯/정리. 리스크 낮고 롤백 용이.
+- 옵션 B: 일괄 치환  
+  모든 화면/컴포넌트를 한 번에 교체. 속도는 빠르나 충돌/리스크 큼. 권장하지 않음.
+
+이 계획서는 옵션 A를 기준으로 작성합니다.
+
+## 테마·컬러 설계
+- 토큰: primary, secondary, success, warning, danger, info, background, foreground, muted, accent, border, card, popover, ring, overlay.
+- 라이트/다크 지원: 동일 의미 색상(semantics)을 양 테마에 매핑. 최소 WCAG 4.5:1 대비.
+- 색채심리학 반영(과장 금지, 절제된 사용):  
+  - info: 블루(신뢰/안정),  
+  - success: 그린(완료/안도),  
+  - warning: 앰버(주의 환기),  
+  - danger: 레드(중단/삭제),  
+  - neutral: 슬레이트/징크 계열(콘텐츠 중심).  
+- 게슈탈트: 시각적 그룹화(카드/섹션/간격 체계), 시선 흐름(타이포·계층), 근접성·유사성 활용.
+- 피츠의 법칙: 주요 액션 버튼 터치 타깃 ≥ 44dp, 간격 여유.
+- 마이크로인터랙션: 진입/전환 120–200ms, 물리 기반 커브, Reduced Motion 설정 반영(`utils/reduce_motion.dart` 유지/연동).
+
+구현 포인트(코드 단계에서 적용):
+- `ShadcnTheme` 확장 혹은 테마 브리지 레이어 생성(예: `lib/theme/shadcn_theme.dart`) 후 기존 `ThemeData`와 연결.
+- `TextTheme`/`ColorScheme`를 shadcn 토큰으로 역매핑해 타 3rd-party 위젯과도 일관성 유지.
+
+## 컴포넌트 매핑(현행 → shadcn)
+- 버튼: `common/buttons/(primary|secondary)_button.dart` → `Button(variant: primary/secondary)`
+- 카드: 다수의 카드형 위젯 → `Card` + `CardHeader/Content/Footer`
+- 다이얼로그: `dialogs/*` → `Dialog`/`AlertDialog` + 의미 색상(위험=red)
+- 스낵바: `app_snackbar.dart` → `Toast` 또는 `Inline Alert`(상황별)
+- 입력: `base_text_field.dart`, `currency_input_field.dart`, `date_picker_field.dart`, `selector`류 → `Input`, `Select`, `Popover+Calendar`(날짜)
+- 네비게이션: `floating_navigation_bar.dart` → shadcn 스타일 버튼/탭/세그먼트 조합(기능은 Navigator 유지)
+- 리스트/아이템: `subscription_*_card(_widget).dart` → `Card`+`List` 조합, 의미 색상 배지 사용
+- 배지/상태: `analysis_badge.dart` → `Badge`(success/warning/info)
+
+차트는 기존 라이브러리 유지, `Card`/토큰 색상만 적용.
+
+## 화면별 리디자인 가이드
+- 메인(`main_screen.dart`): 상단 요약(카드), 탭형 네비게이션, FAB 대신 우선작업 배치(피츠 법칙 반영).
+- 구독 추가(`add_subscription_screen.dart`): 단계적 폼(섹션 카드), 필수/보조 액션 분리, 에러/힌트 색상 표준화.
+- 상세(`detail_screen.dart`): 정보/행동 분리, 위험 액션은 `danger` 톤, url 영역은 `info` 톤.
+- 분석(`analysis_screen.dart`): KPI 카드 3열(태블릿), 1열(폰), 차트 색상은 의미 기반 팔레트.
+- 카테고리 관리(`category_management_screen.dart`): 리스트+인라인 편집, 확인/취소 분리, 경고 색상 남용 금지.
+- 설정(`settings_screen.dart`): 토글/셀리스트 일관, 테마 전환 즉시 반영, 접근성 강조.
+- SMS 권한(`sms_permission_screen.dart`): 단일 초점 화면, primary 호출-행동 버튼 + 보조 링크.
+- 스플래시/잠금: 단순한 브랜드/배경, 과도한 애니메이션 제거.
+
+## 정리/삭제 대상(마이그레이션 완료 후)
+- 강한 시각효과 위젯: `animated_wave_background.dart`, `glassmorphism_card.dart`, `glassmorphic_scaffold.dart` 등
+- 중복/대체 가능: 커스텀 버튼/카드/스낵바/다이얼로그 구현체(치환 완료 후)
+- 사용되지 않는 유틸: 실사용 참조 0인 파일 전부
+- 임시/백업: 오래된 백업/실험 파일
+
+삭제는 단계별 PR에서 “치환 완료 확인 → 삭제” 순으로 안전하게 진행.
+
+## 알고리즘 단순화(동일 효과 유지)
+- SMS 스캔(`services/sms_scanner.dart`): 필터→파서→정규화 단일 파이프라인(순수 함수)로 재구성, 캐시/메모리 최적화 과잉 제거.
+- URL 매처(`services/url_matcher/*`): 정규식 테이블 기반 단일 매칭기로 단순화(사전컴파일 RegExp), 서비스 데이터는 레포지토리 1곳에서 주입.
+- 환율(`exchange_rate_service.dart`): `CacheManager` TTL 캐시 단일 책임, 만료 시 새로고침. 중복 포맷터/파서 제거.
+- 알림(`notification_service.dart`): 스케줄/권한 체크를 단일 파사드로 노출, 내부 분기 축소.
+- 성능 유틸(`performance_optimizer.dart`, `memory_manager.dart`): 체감·유지보수 이점 낮은 미세 최적화 제거, 프레임 드랍 유발 가능 애니메이션 단순화.
+
+모든 변경은 퍼블릭 API/데이터 모델을 유지해 사이드 이펙트 방지.
+
+## 테스트/검증
+- 스크립트: `scripts/check.sh` 전 단계 실행(포맷/분석/테스트). 기존 deprecation 경고는 별 PR로 정리.
+- 위젯/골든 테스트: 핵심 화면(메인/추가/상세/분석/설정) 라이트/다크 2종 캡처 비교.
+- 유닛 테스트: URL 매처/환율 캐시/SMS 파이프라인.
+- 접근성: 대비·포커스·터치 타깃 수동 점검 체크리스트.
+
+## 작업 단위/PR 계획
+1) 토대 구축: 의존성 추가 + 테마 브리지 + 핵심 컴포넌트(Button/Input/Card/Dialog) 도입.  
+2) 공용 UI 치환: 스낵바/다이얼로그/폼 필드/카드 템플릿 적용.  
+3) 화면별 리디자인: 메인→추가→상세→분석→설정 순.  
+4) 불용 코드 삭제: 치환 완료 파일 제거.  
+5) 알고리즘 단순화: sms/url/환율/알림 순으로 단일화 + 테스트.  
+6) 마감: 디테일 조정/접근성/성능 점검.
+
+- 브랜치: `codex/feat-shadcn-migration-*` (단계별).  
+- 커밋: Conventional Commits + 한국어 본문.  
+- 롤백: 각 단계는 기능 플래그/치환 전후 비교가 쉬운 최소 단위로 유지.
+
+## 위험 및 완화
+- 리소스 색상/테마 충돌 → 토큰 브리지로 양방향 매핑, 미호환 위젯은 유지.  
+- 3rd-party 차트/네이티브 UI → 표면 색/텍스트만 토큰 적용.  
+- 분석 실패(deprecation) → 별 PR로 API 교체(`activeColor` 등), 마이그레이션과 분리 처리.
+
+## 승인 체크리스트(Yes/No)
+- [ ] `flutter_shadcn_ui` 의존성 추가 승인이 필요합니다.  
+- [ ] 테마 구조(shadcn 토큰 중심) 재구성 승인.  
+- [ ] 단계별 불용 파일 삭제 승인.  
+- [ ] 점진적 이행(옵션 A)로 진행 승인.
+
+## 완료 기준(각 단계)
+- `scripts/check.sh` 무사 통과(분석 경고 해결 내역은 별 PR 또는 병행).  
+- 라이트/다크 스냅샷 비교 이상 없음.  
+- 대상 화면/컴포넌트 치환 100% 및 구식 코드 제거.
+
+---
+작성자 메모: 본 계획은 코드 변경 없이 문서만 추가되었습니다. 승인 후 단계별 구현을 진행합니다.

lib/controllers/add_subscription_controller.dart

@@ -8,6 +8,9 @@ import '../services/sms_service.dart';
 import '../services/subscription_url_matcher.dart';
 import '../widgets/common/snackbar/app_snackbar.dart';
 import '../l10n/app_localizations.dart';
+import '../utils/billing_date_util.dart';
+import '../utils/business_day_util.dart';
+import 'package:permission_handler/permission_handler.dart' as permission;
 
 /// AddSubscriptionScreen의 비즈니스 로직을 관리하는 Controller
 class AddSubscriptionController {
@@ -104,6 +107,26 @@ class AddSubscriptionController {
       scrollOffset = scrollController.offset;
     });
 
+    // 언어별 기본 통화 설정
+    try {
+      final lang = Localizations.localeOf(context).languageCode;
+      switch (lang) {
+        case 'ko':
+          currency = 'KRW';
+          break;
+        case 'ja':
+          currency = 'JPY';
+          break;
+        case 'zh':
+          currency = 'CNY';
+          break;
+        default:
+          currency = 'USD';
+      }
+    } catch (_) {
+      // Localizations가 아직 준비되지 않은 경우 기본값 유지
+    }
+
     // 애니메이션 시작
     animationController!.forward();
   }
@@ -284,25 +307,55 @@ class AddSubscriptionController {
     setState(() => isLoading = true);
 
     try {
+      final ctx = context;
       if (!await SMSService.hasSMSPermission()) {
         final granted = await SMSService.requestSMSPermission();
+        if (!ctx.mounted) return;
         if (!granted) {
-          if (context.mounted) {
+          if (ctx.mounted) {
-            AppSnackBar.showError(
+            // 영구 거부 여부 확인 후 설정 화면 안내
-              context: context,
+            final status = await permission.Permission.sms.status;
-              message: AppLocalizations.of(context).smsPermissionRequired,
+            if (!ctx.mounted) return;
-            );
+            if (status.isPermanentlyDenied) {
+              await showDialog(
+                context: ctx,
+                builder: (_) => AlertDialog(
+                  title: Text(AppLocalizations.of(ctx).smsPermissionRequired),
+                  content:
+                      Text(AppLocalizations.of(ctx).permanentlyDeniedMessage),
+                  actions: [
+                    TextButton(
+                      onPressed: () => Navigator.of(ctx).pop(),
+                      child: Text(AppLocalizations.of(ctx).cancel),
+                    ),
+                    TextButton(
+                      onPressed: () async {
+                        await permission.openAppSettings();
+                        if (ctx.mounted) Navigator.of(ctx).pop();
+                      },
+                      child: Text(AppLocalizations.of(ctx).openSettings),
+                    ),
+                  ],
+                ),
+              );
+            } else {
+              AppSnackBar.showError(
+                context: ctx,
+                message: AppLocalizations.of(ctx).smsPermissionRequired,
+              );
+            }
           }
           return;
         }
       }
 
       final subscriptions = await SMSService.scanSubscriptions();
+      if (!ctx.mounted) return;
       if (subscriptions.isEmpty) {
-        if (context.mounted) {
+        if (ctx.mounted) {
           AppSnackBar.showWarning(
-            context: context,
+            context: ctx,
-            message: AppLocalizations.of(context).noSubscriptionSmsFound,
+            message: AppLocalizations.of(ctx).noSubscriptionSmsFound,
           );
         }
         return;
@@ -434,12 +487,22 @@ class AddSubscriptionController {
               double.tryParse(eventPriceController.text.replaceAll(',', ''));
         }
 
+        // 선택일이 오늘(또는 과거)이면 결제 주기에 맞춰 다음 회차로 보정하여 저장 + 영업일 이월
+        final originalDateOnly = DateTime(
+          nextBillingDate!.year,
+          nextBillingDate!.month,
+          nextBillingDate!.day,
+        );
+        var adjustedNext =
+            BillingDateUtil.ensureFutureDate(originalDateOnly, billingCycle);
+        adjustedNext = BusinessDayUtil.nextBusinessDay(adjustedNext);
+
         await Provider.of<SubscriptionProvider>(context, listen: false)
             .addSubscription(
           serviceName: serviceNameController.text.trim(),
           monthlyCost: monthlyCost,
           billingCycle: billingCycle,
-          nextBillingDate: nextBillingDate!,
+          nextBillingDate: adjustedNext,
           websiteUrl: websiteUrlController.text.trim(),
           categoryId: selectedCategoryId,
           currency: currency,
@@ -449,6 +512,16 @@ class AddSubscriptionController {
           eventPrice: eventPrice,
         );
 
+        // 자동 보정이 발생했으면 안내
+        if (adjustedNext.isAfter(originalDateOnly)) {
+          if (context.mounted) {
+            AppSnackBar.showInfo(
+              context: context,
+              message: '다음 결제 예정일로 저장됨',
+            );
+          }
+        }
+
         if (context.mounted) {
           Navigator.pop(context, true); // 성공 여부 반환
         }

lib/controllers/sms_scan_controller.dart

@@ -5,6 +5,8 @@ import '../services/sms_scan/subscription_converter.dart';
 import '../services/sms_scan/subscription_filter.dart';
 import '../providers/subscription_provider.dart';
 import 'package:provider/provider.dart';
+import 'package:flutter/foundation.dart' show kIsWeb;
+import 'package:permission_handler/permission_handler.dart' as permission;
 import '../utils/logger.dart';
 import '../providers/navigation_provider.dart';
 import '../providers/category_provider.dart';
@@ -57,6 +59,33 @@ class SmsScanController extends ChangeNotifier {
     notifyListeners();
 
     try {
+      // Android에서 SMS 권한 확인 및 요청
+      final ctx = context;
+      if (!kIsWeb) {
+        final smsStatus = await permission.Permission.sms.status;
+        if (!smsStatus.isGranted) {
+          if (smsStatus.isPermanentlyDenied) {
+            // 설정 유도 다이얼로그 표시
+            if (!ctx.mounted) return;
+            await _showPermissionSettingsDialog(ctx);
+            _isLoading = false;
+            notifyListeners();
+            return;
+          }
+
+          final req = await permission.Permission.sms.request();
+          if (!ctx.mounted) return;
+          if (!req.isGranted) {
+            // 거부됨: 안내 후 종료
+            if (!ctx.mounted) return;
+            _errorMessage = AppLocalizations.of(ctx).smsPermissionRequired;
+            _isLoading = false;
+            notifyListeners();
+            return;
+          }
+        }
+      }
+
       // SMS 스캔 실행
       Log.i('SMS 스캔 시작');
       final scannedSubscriptionModels =
@@ -139,6 +168,30 @@ class SmsScanController extends ChangeNotifier {
     }
   }
 
+  Future<void> _showPermissionSettingsDialog(BuildContext context) async {
+    final loc = AppLocalizations.of(context);
+    await showDialog(
+      context: context,
+      builder: (_) => AlertDialog(
+        title: Text(loc.smsPermissionRequired),
+        content: Text(loc.permanentlyDeniedMessage),
+        actions: [
+          TextButton(
+            onPressed: () => Navigator.of(context).pop(),
+            child: Text(loc.cancel),
+          ),
+          TextButton(
+            onPressed: () async {
+              await permission.openAppSettings();
+              if (context.mounted) Navigator.of(context).pop();
+            },
+            child: Text(loc.openSettings),
+          ),
+        ],
+      ),
+    );
+  }
+
   Future<void> addCurrentSubscription(BuildContext context) async {
     if (_currentIndex >= _scannedSubscriptions.length) return;
 

macos/Flutter/GeneratedPluginRegistrant.swift

@@ -18,7 +18,7 @@ import webview_flutter_wkwebview
 func RegisterGeneratedPlugins(registry: FlutterPluginRegistry) {
   FlutterLocalNotificationsPlugin.register(with: registry.registrar(forPlugin: "FlutterLocalNotificationsPlugin"))
   FlutterSecureStoragePlugin.register(with: registry.registrar(forPlugin: "FlutterSecureStoragePlugin"))
-  FLALocalAuthPlugin.register(with: registry.registrar(forPlugin: "FLALocalAuthPlugin"))
+  LocalAuthPlugin.register(with: registry.registrar(forPlugin: "LocalAuthPlugin"))
   PathProviderPlugin.register(with: registry.registrar(forPlugin: "PathProviderPlugin"))
   SharePlusMacosPlugin.register(with: registry.registrar(forPlugin: "SharePlusMacosPlugin"))
   SharedPreferencesPlugin.register(with: registry.registrar(forPlugin: "SharedPreferencesPlugin"))

pubspec.lock

@@ -5,23 +5,18 @@ packages:
     dependency: transitive
     description:
       name: _fe_analyzer_shared
-      sha256: "16e298750b6d0af7ce8a3ba7c18c69c3785d11b15ec83f6dcd0ad2a0009b3cab"
+      sha256: "0b2f2bd91ba804e53a61d757b986f89f1f9eaed5b11e4b2f5a2468d86d6c9fc7"
       url: "https://pub.dev"
     source: hosted
-    version: "76.0.0"
+    version: "67.0.0"
-  _macros:
-    dependency: transitive
-    description: dart
-    source: sdk
-    version: "0.3.3"
   analyzer:
     dependency: transitive
     description:
       name: analyzer
-      sha256: "1f14db053a8c23e260789e9b0980fa27f2680dd640932cae5e1137cce0e46e1e"
+      sha256: "37577842a27e4338429a1cbc32679d508836510b056f1eedf0c8d20e39c1383d"
       url: "https://pub.dev"
     source: hosted
-    version: "6.11.0"
+    version: "6.4.1"
   ansicolor:
     dependency: transitive
     description:
@@ -66,10 +61,10 @@ packages:
     dependency: transitive
     description:
       name: build
-      sha256: cef23f1eda9b57566c81e2133d196f8e3df48f244b317368d65c5943d91148f0
+      sha256: "80184af8b6cb3e5c1c4ec6d8544d27711700bc3e6d2efad04238c7b5290889f0"
       url: "https://pub.dev"
     source: hosted
-    version: "2.4.2"
+    version: "2.4.1"
   build_config:
     dependency: transitive
     description:
@@ -90,26 +85,26 @@ packages:
     dependency: transitive
     description:
       name: build_resolvers
-      sha256: b9e4fda21d846e192628e7a4f6deda6888c36b5b69ba02ff291a01fd529140f0
+      sha256: "339086358431fa15d7eca8b6a36e5d783728cf025e559b834f4609a1fcfb7b0a"
       url: "https://pub.dev"
     source: hosted
-    version: "2.4.4"
+    version: "2.4.2"
   build_runner:
     dependency: "direct dev"
     description:
       name: build_runner
-      sha256: "058fe9dce1de7d69c4b84fada934df3e0153dd000758c4d65964d0166779aa99"
+      sha256: "028819cfb90051c6b5440c7e574d1896f8037e3c96cf17aaeb054c9311cfbf4d"
       url: "https://pub.dev"
     source: hosted
-    version: "2.4.15"
+    version: "2.4.13"
   build_runner_core:
     dependency: transitive
     description:
       name: build_runner_core
-      sha256: "22e3aa1c80e0ada3722fe5b63fd43d9c8990759d0a2cf489c8c5d7b2bdebc021"
+      sha256: f8126682b87a7282a339b871298cc12009cb67109cfa1614d6436fb0289193e0
       url: "https://pub.dev"
     source: hosted
-    version: "8.0.0"
+    version: "7.3.2"
   built_collection:
     dependency: transitive
     description:
@@ -122,10 +117,10 @@ packages:
     dependency: transitive
     description:
       name: built_value
-      sha256: ea90e81dc4a25a043d9bee692d20ed6d1c4a1662a28c03a96417446c093ed6b4
+      sha256: a30f0a0e38671e89a492c44d005b5545b830a961575bbd8336d42869ff71066d
       url: "https://pub.dev"
     source: hosted
-    version: "8.9.5"
+    version: "8.12.0"
   cached_network_image:
     dependency: "direct main"
     description:
@@ -162,10 +157,10 @@ packages:
     dependency: transitive
     description:
       name: checked_yaml
-      sha256: feb6bed21949061731a7a75fc5d2aa727cf160b91af9a3e464c5e3a32e28b5ff
+      sha256: "959525d3162f249993882720d52b7e0c833978df229be20702b33d48d91de70f"
       url: "https://pub.dev"
     source: hosted
-    version: "2.0.3"
+    version: "2.0.4"
   cli_util:
     dependency: transitive
     description:
@@ -242,10 +237,10 @@ packages:
     dependency: transitive
     description:
       name: dart_style
-      sha256: "7306ab8a2359a48d22310ad823521d723acfed60ee1f7e37388e8986853b6820"
+      sha256: "99e066ce75c89d6b29903d788a7bb9369cf754f7b24bf70bf4b6d6d6b26853b9"
       url: "https://pub.dev"
     source: hosted
-    version: "2.3.8"
+    version: "2.3.6"
   dbus:
     dependency: transitive
     description:
@@ -380,10 +375,10 @@ packages:
     dependency: transitive
     description:
       name: flutter_plugin_android_lifecycle
-      sha256: f948e346c12f8d5480d2825e03de228d0eb8c3a737e4cdaa122267b89c022b5e
+      sha256: b0694b7fb1689b0e6cc193b3f1fcac6423c4f93c74fb20b806c6b6f196db0c31
       url: "https://pub.dev"
     source: hosted
-    version: "2.0.28"
+    version: "2.0.30"
   flutter_secure_storage:
     dependency: "direct main"
     description:
@@ -444,10 +439,10 @@ packages:
     dependency: "direct main"
     description:
       name: flutter_svg
-      sha256: d44bf546b13025ec7353091516f6881f1d4c633993cb109c3916c3a0159dadf1
+      sha256: b9c2ad5872518a27507ab432d1fb97e8813b05f0fc693f9d40fad06d073e0678
       url: "https://pub.dev"
     source: hosted
-    version: "2.1.0"
+    version: "2.2.1"
   flutter_test:
     dependency: "direct dev"
     description: flutter
@@ -462,10 +457,10 @@ packages:
     dependency: "direct main"
     description:
       name: font_awesome_flutter
-      sha256: d3a89184101baec7f4600d58840a764d2ef760fe1c5a20ef9e6b0e9b24a07a3a
+      sha256: "27af5982e6c510dec1ba038eff634fa284676ee84e3fd807225c80c4ad869177"
       url: "https://pub.dev"
     source: hosted
-    version: "10.8.0"
+    version: "10.10.0"
   frontend_server_client:
     dependency: transitive
     description:
@@ -534,10 +529,10 @@ packages:
     dependency: "direct main"
     description:
       name: http
-      sha256: "2c11f3f94c687ee9bad77c171151672986360b2b001d109814ee7140b2cf261b"
+      sha256: bb2ce4590bc2667c96f318d68cac1b5a7987ec819351d32b1c987239a815e007
       url: "https://pub.dev"
     source: hosted
-    version: "1.4.0"
+    version: "1.5.0"
   http_multi_server:
     dependency: transitive
     description:
@@ -598,26 +593,26 @@ packages:
     dependency: transitive
     description:
       name: leak_tracker
-      sha256: "6bb818ecbdffe216e81182c2f0714a2e62b593f4a4f13098713ff1685dfb6ab0"
+      sha256: "8dcda04c3fc16c14f48a7bb586d4be1f0d1572731b6d81d51772ef47c02081e0"
       url: "https://pub.dev"
     source: hosted
-    version: "10.0.9"
+    version: "11.0.1"
   leak_tracker_flutter_testing:
     dependency: transitive
     description:
       name: leak_tracker_flutter_testing
-      sha256: f8b613e7e6a13ec79cfdc0e97638fddb3ab848452eff057653abd3edba760573
+      sha256: "1dbc140bb5a23c75ea9c4811222756104fbcd1a27173f0c34ca01e16bea473c1"
       url: "https://pub.dev"
     source: hosted
-    version: "3.0.9"
+    version: "3.0.10"
   leak_tracker_testing:
     dependency: transitive
     description:
       name: leak_tracker_testing
-      sha256: "6ba465d5d76e67ddf503e1161d1f4a6bc42306f9d66ca1e8f079a47290fb06d3"
+      sha256: "8d5a2d49f4a66b49744b23b018848400d23e54caf9463f4eb20df3eb8acb2eb1"
       url: "https://pub.dev"
     source: hosted
-    version: "3.0.1"
+    version: "3.0.2"
   lints:
     dependency: transitive
     description:
@@ -638,18 +633,18 @@ packages:
     dependency: transitive
     description:
       name: local_auth_android
-      sha256: "63ad7ca6396290626dc0cb34725a939e4cfe965d80d36112f08d49cf13a8136e"
+      sha256: "1ee0e63fb8b5c6fa286796b5fb1570d256857c2f4a262127e728b36b80a570cf"
       url: "https://pub.dev"
     source: hosted
-    version: "1.0.49"
+    version: "1.0.53"
   local_auth_darwin:
     dependency: transitive
     description:
       name: local_auth_darwin
-      sha256: "630996cd7b7f28f5ab92432c4b35d055dd03a747bc319e5ffbb3c4806a3e50d2"
+      sha256: "0e9706a8543a4a2eee60346294d6a633dd7c3ee60fae6b752570457c4ff32055"
       url: "https://pub.dev"
     source: hosted
-    version: "1.4.3"
+    version: "1.6.0"
   local_auth_platform_interface:
     dependency: transitive
     description:
@@ -674,14 +669,6 @@ packages:
       url: "https://pub.dev"
     source: hosted
     version: "1.3.0"
-  macros:
-    dependency: transitive
-    description:
-      name: macros
-      sha256: "1d9e801cd66f7ea3663c45fc708450db1fa57f988142c64289142c9b7ee80656"
-      url: "https://pub.dev"
-    source: hosted
-    version: "0.1.3-main.0"
   matcher:
     dependency: transitive
     description:
@@ -766,18 +753,18 @@ packages:
     dependency: transitive
     description:
       name: path_provider_android
-      sha256: d0d310befe2c8ab9e7f393288ccbb11b60c019c6b5afc21973eeee4dda2b35e9
+      sha256: "993381400e94d18469750e5b9dcb8206f15bc09f9da86b9e44a9b0092a0066db"
       url: "https://pub.dev"
     source: hosted
-    version: "2.2.17"
+    version: "2.2.18"
   path_provider_foundation:
     dependency: transitive
     description:
       name: path_provider_foundation
-      sha256: "4843174df4d288f5e29185bd6e72a6fbdf5a4a4602717eed565497429f179942"
+      sha256: "16eef174aacb07e09c351502740fa6254c165757638eba1e9116b0a781201bbd"
       url: "https://pub.dev"
     source: hosted
-    version: "2.4.1"
+    version: "2.4.2"
   path_provider_linux:
     dependency: transitive
     description:
@@ -854,10 +841,10 @@ packages:
     dependency: transitive
     description:
       name: petitparser
-      sha256: "07c8f0b1913bcde1ff0d26e57ace2f3012ccbf2b204e070290dad3bb22797646"
+      sha256: "1a97266a94f7350d30ae522c0af07890c70b8e62c71e8e3920d1db4d23c057d1"
       url: "https://pub.dev"
     source: hosted
-    version: "6.1.0"
+    version: "7.0.1"
   platform:
     dependency: transitive
     description:
@@ -886,18 +873,18 @@ packages:
     dependency: transitive
     description:
       name: posix
-      sha256: f0d7856b6ca1887cfa6d1d394056a296ae33489db914e365e2044fdada449e62
+      sha256: "6323a5b0fa688b6a010df4905a56b00181479e6d10534cecfecede2aa55add61"
       url: "https://pub.dev"
     source: hosted
-    version: "6.0.2"
+    version: "6.0.3"
   provider:
     dependency: "direct main"
     description:
       name: provider
-      sha256: "489024f942069c2920c844ee18bb3d467c69e48955a4f32d1677f71be103e310"
+      sha256: "4e82183fa20e5ca25703ead7e05de9e4cceed1fbd1eadc1ac3cb6f565a09f272"
       url: "https://pub.dev"
     source: hosted
-    version: "6.1.4"
+    version: "6.1.5+1"
   pub_semver:
     dependency: transitive
     description:
@@ -966,10 +953,10 @@ packages:
     dependency: transitive
     description:
       name: shared_preferences_android
-      sha256: "20cbd561f743a342c76c151d6ddb93a9ce6005751e7aa458baad3858bfbfb6ac"
+      sha256: a2608114b1ffdcbc9c120eb71a0e207c71da56202852d4aab8a5e30a82269e74
       url: "https://pub.dev"
     source: hosted
-    version: "2.4.10"
+    version: "2.4.12"
   shared_preferences_foundation:
     dependency: transitive
     description:
@@ -1022,10 +1009,10 @@ packages:
     dependency: transitive
     description:
       name: shelf_web_socket
-      sha256: "3632775c8e90d6c9712f883e633716432a27758216dfb61bd86a8321c0580925"
+      sha256: cc36c297b52866d203dbf9332263c94becc2fe0ceaa9681d07b6ef9807023b67
       url: "https://pub.dev"
     source: hosted
-    version: "3.0.0"
+    version: "2.0.1"
   sky_engine:
     dependency: transitive
     description: flutter
@@ -1075,18 +1062,18 @@ packages:
     dependency: transitive
     description:
       name: sqflite_android
-      sha256: "2b3070c5fa881839f8b402ee4a39c1b4d561704d4ebbbcfb808a119bc2a1701b"
+      sha256: ecd684501ebc2ae9a83536e8b15731642b9570dc8623e0073d227d0ee2bfea88
       url: "https://pub.dev"
     source: hosted
-    version: "2.4.1"
+    version: "2.4.2+2"
   sqflite_common:
     dependency: transitive
     description:
       name: sqflite_common
-      sha256: "84731e8bfd8303a3389903e01fb2141b6e59b5973cacbb0929021df08dddbe8b"
+      sha256: "6ef422a4525ecc601db6c0a2233ff448c731307906e92cabc9ba292afaae16a6"
       url: "https://pub.dev"
     source: hosted
-    version: "2.5.5"
+    version: "2.5.6"
   sqflite_darwin:
     dependency: transitive
     description:
@@ -1139,10 +1126,10 @@ packages:
     dependency: transitive
     description:
       name: synchronized
-      sha256: "0669c70faae6270521ee4f05bffd2919892d42d1276e6c495be80174b6bc0ef6"
+      sha256: c254ade258ec8282947a0acbbc90b9575b4f19673533ee46f2f6e9b3aeefd7c0
       url: "https://pub.dev"
     source: hosted
-    version: "3.3.1"
+    version: "3.4.0"
   term_glyph:
     dependency: transitive
     description:
@@ -1155,10 +1142,10 @@ packages:
     dependency: transitive
     description:
       name: test_api
-      sha256: fb31f383e2ee25fbbfe06b40fe21e1e458d14080e3c67e7ba0acfde4df4e0bbd
+      sha256: "522f00f556e73044315fa4585ec3270f1808a4b186c936e612cab0b565ff1e00"
       url: "https://pub.dev"
     source: hosted
-    version: "0.7.4"
+    version: "0.7.6"
   timezone:
     dependency: "direct main"
     description:
@@ -1195,26 +1182,26 @@ packages:
     dependency: "direct main"
     description:
       name: url_launcher
-      sha256: "9d06212b1362abc2f0f0d78e6f09f726608c74e3b9462e8368bb03314aa8d603"
+      sha256: f6a7e5c4835bb4e3026a04793a4199ca2d14c739ec378fdfe23fc8075d0439f8
       url: "https://pub.dev"
     source: hosted
-    version: "6.3.1"
+    version: "6.3.2"
   url_launcher_android:
     dependency: transitive
     description:
       name: url_launcher_android
-      sha256: "8582d7f6fe14d2652b4c45c9b6c14c0b678c2af2d083a11b604caeba51930d79"
+      sha256: dbdd48a5b6a6fe9c7d75099bd2d03f9da9393f8d51a0d250301debbcecd552d2
       url: "https://pub.dev"
     source: hosted
-    version: "6.3.16"
+    version: "6.3.19"
   url_launcher_ios:
     dependency: transitive
     description:
       name: url_launcher_ios
-      sha256: "7f2022359d4c099eea7df3fdf739f7d3d3b9faf3166fb1dd390775176e0b76cb"
+      sha256: d80b3f567a617cb923546034cc94bfe44eb15f989fe670b37f26abdb9d939cb7
       url: "https://pub.dev"
     source: hosted
-    version: "6.3.3"
+    version: "6.3.4"
   url_launcher_linux:
     dependency: transitive
     description:
@@ -1227,10 +1214,10 @@ packages:
     dependency: transitive
     description:
       name: url_launcher_macos
-      sha256: "17ba2000b847f334f16626a574c702b196723af2a289e7a93ffcb79acff855c2"
+      sha256: c043a77d6600ac9c38300567f33ef12b0ef4f4783a2c1f00231d2b1941fea13f
       url: "https://pub.dev"
     source: hosted
-    version: "3.2.2"
+    version: "3.2.3"
   url_launcher_platform_interface:
     dependency: transitive
     description:
@@ -1267,10 +1254,10 @@ packages:
     dependency: transitive
     description:
       name: vector_graphics
-      sha256: "44cc7104ff32563122a929e4620cf3efd584194eec6d1d913eb5ba593dbcf6de"
+      sha256: a4f059dc26fc8295b5921376600a194c4ec7d55e72f2fe4c7d2831e103d461e6
       url: "https://pub.dev"
     source: hosted
-    version: "1.1.18"
+    version: "1.1.19"
   vector_graphics_codec:
     dependency: transitive
     description:
@@ -1283,34 +1270,34 @@ packages:
     dependency: transitive
     description:
       name: vector_graphics_compiler
-      sha256: "1b4b9e706a10294258727674a340ae0d6e64a7231980f9f9a3d12e4b42407aad"
+      sha256: d354a7ec6931e6047785f4db12a1f61ec3d43b207fc0790f863818543f8ff0dc
       url: "https://pub.dev"
     source: hosted
-    version: "1.1.16"
+    version: "1.1.19"
   vector_math:
     dependency: transitive
     description:
       name: vector_math
-      sha256: "80b3257d1492ce4d091729e3a67a60407d227c27241d6927be0130c98e741803"
+      sha256: d530bd74fea330e6e364cda7a85019c434070188383e1cd8d9777ee586914c5b
       url: "https://pub.dev"
     source: hosted
-    version: "2.1.4"
+    version: "2.2.0"
   vm_service:
     dependency: transitive
     description:
       name: vm_service
-      sha256: ddfa8d30d89985b96407efce8acbdd124701f96741f2d981ca860662f1c0dc02
+      sha256: "45caa6c5917fa127b5dbcfbd1fa60b14e583afdc08bfc96dda38886ca252eb60"
       url: "https://pub.dev"
     source: hosted
-    version: "15.0.0"
+    version: "15.0.2"
   watcher:
     dependency: transitive
     description:
       name: watcher
-      sha256: "69da27e49efa56a15f8afe8f4438c4ec02eff0a117df1b22ea4aad194fe1c104"
+      sha256: "5bf046f41320ac97a469d506261797f35254fa61c641741ef32dacda98b7d39c"
       url: "https://pub.dev"
     source: hosted
-    version: "1.1.1"
+    version: "1.1.3"
   web:
     dependency: transitive
     description:
@@ -1323,10 +1310,10 @@ packages:
     dependency: transitive
     description:
       name: web_socket
-      sha256: bfe6f435f6ec49cb6c01da1e275ae4228719e59a6b067048c51e72d9d63bcc4b
+      sha256: "34d64019aa8e36bf9842ac014bb5d2f5586ca73df5e4d9bf5c936975cae6982c"
       url: "https://pub.dev"
     source: hosted
-    version: "1.0.0"
+    version: "1.0.1"
   web_socket_channel:
     dependency: transitive
     description:
@@ -1355,26 +1342,26 @@ packages:
     dependency: transitive
     description:
       name: webview_flutter_platform_interface
-      sha256: "7cb32b21825bd65569665c32bb00a34ded5779786d6201f5350979d2d529940d"
+      sha256: "63d26ee3aca7256a83ccb576a50272edd7cfc80573a4305caa98985feb493ee0"
       url: "https://pub.dev"
     source: hosted
-    version: "2.13.0"
+    version: "2.14.0"
   webview_flutter_wkwebview:
     dependency: transitive
     description:
       name: webview_flutter_wkwebview
-      sha256: a3d461fe3467014e05f3ac4962e5fdde2a4bf44c561cb53e9ae5c586600fdbc3
+      sha256: fb46db8216131a3e55bcf44040ca808423539bc6732e7ed34fb6d8044e3d512f
       url: "https://pub.dev"
     source: hosted
-    version: "3.22.0"
+    version: "3.23.0"
   win32:
     dependency: transitive
     description:
       name: win32
-      sha256: dc6ecaa00a7c708e5b4d10ee7bec8c270e9276dfcab1783f57e9962d7884305f
+      sha256: "66814138c3562338d05613a6e368ed8cfb237ad6d64a9e9334be3f309acfca03"
       url: "https://pub.dev"
     source: hosted
-    version: "5.12.0"
+    version: "5.14.0"
   xdg_directories:
     dependency: transitive
     description:
@@ -1387,10 +1374,10 @@ packages:
     dependency: transitive
     description:
       name: xml
-      sha256: b015a8ad1c488f66851d762d3090a21c600e479dc75e68328c52774040cf9226
+      sha256: "971043b3a0d3da28727e40ed3e0b5d18b742fa5a68665cca88e74b7876d5e025"
       url: "https://pub.dev"
     source: hosted
-    version: "6.5.0"
+    version: "6.6.1"
   yaml:
     dependency: transitive
     description:
@@ -1400,5 +1387,5 @@ packages:
     source: hosted
     version: "3.1.3"
 sdks:
-  dart: ">=3.7.0 <4.0.0"
+  dart: ">=3.9.0 <4.0.0"
-  flutter: ">=3.27.0"
+  flutter: ">=3.35.0"

scripts/generate_icons.sh

@@ -0,0 +1,10 @@
+#!/usr/bin/env bash
+set -euo pipefail
+
+OUT_DIR="assets/app_icon/house_check"
+SIZES=(1024 512 256 192 128 96 64 48 32)
+
+mkdir -p "$OUT_DIR"
+python3 scripts/render_icon.py "$OUT_DIR" "${SIZES[@]}"
+
+echo "\n아이콘 생성 완료: $OUT_DIR"

scripts/render_icon.py

@@ -0,0 +1,236 @@
+#!/usr/bin/env python3
+"""
+Generate squircle app icons with a house + check mark glyph.
+
+No external dependencies. Writes PNGs using zlib and CRC via stdlib.
+
+Usage:
+  python3 scripts/render_icon.py assets/app_icon/house_check 1024 512 256 192 128 96 64 48 32
+"""
+import os
+import sys
+import math
+import struct
+import zlib
+from typing import List, Tuple
+
+
+NAVY = (0x0F, 0x17, 0x2A, 255)  # #0F172A
+WHITE = (255, 255, 255, 255)
+GREEN = (0x10, 0xB9, 0x81, 255)  # #10B981
+
+
+def srgb_to_lin(c: float) -> float:
+    c = c / 255.0
+    if c <= 0.04045:
+        return c / 12.92
+    return ((c + 0.055) / 1.055) ** 2.4
+
+
+def lin_to_srgb(c: float) -> int:
+    if c <= 0.0031308:
+        v = 12.92 * c
+    else:
+        v = 1.055 * (c ** (1.0 / 2.4)) - 0.055
+    return max(0, min(255, int(round(v * 255.0))))
+
+
+def over(dst: Tuple[float, float, float, float], src: Tuple[float, float, float, float]):
+    # dst, src in linear space RGBA (0..1)
+    dr, dg, db, da = dst
+    sr, sg, sb, sa = src
+    out_a = sa + da * (1.0 - sa)
+    if out_a == 0.0:
+        return (0.0, 0.0, 0.0, 0.0)
+    out_r = (sr * sa + dr * da * (1.0 - sa)) / out_a
+    out_g = (sg * sa + dg * da * (1.0 - sa)) / out_a
+    out_b = (sb * sa + db * da * (1.0 - sa)) / out_a
+    return (out_r, out_g, out_b, out_a)
+
+
+def to_lin_rgba(color: Tuple[int, int, int, int], alpha_scale: float = 1.0):
+    r, g, b, a = color
+    return (
+        srgb_to_lin(r),
+        srgb_to_lin(g),
+        srgb_to_lin(b),
+        (a / 255.0) * alpha_scale,
+    )
+
+
+def point_in_triangle(px, py, ax, ay, bx, by, cx, cy) -> bool:
+    # Barycentric technique
+    v0x, v0y = cx - ax, cy - ay
+    v1x, v1y = bx - ax, by - ay
+    v2x, v2y = px - ax, py - ay
+    dot00 = v0x * v0x + v0y * v0y
+    dot01 = v0x * v1x + v0y * v1y
+    dot02 = v0x * v2x + v0y * v2y
+    dot11 = v1x * v1x + v1y * v1y
+    dot12 = v1x * v2x + v1y * v2y
+    denom = dot00 * dot11 - dot01 * dot01
+    if denom == 0:
+        return False
+    inv = 1.0 / denom
+    u = (dot11 * dot02 - dot01 * dot12) * inv
+    v = (dot00 * dot12 - dot01 * dot02) * inv
+    return (u >= 0) and (v >= 0) and (u + v <= 1)
+
+
+def point_in_rect(px, py, x0, y0, x1, y1) -> bool:
+    return (x0 <= px <= x1) and (y0 <= py <= y1)
+
+
+def dist_point_to_segment(px, py, ax, ay, bx, by) -> float:
+    abx, aby = bx - ax, by - ay
+    apx, apy = px - ax, py - ay
+    ab2 = abx * abx + aby * aby
+    if ab2 == 0:
+        dx, dy = px - ax, py - ay
+        return math.hypot(dx, dy)
+    t = (apx * abx + apy * aby) / ab2
+    if t < 0:
+        t = 0
+    elif t > 1:
+        t = 1
+    hx, hy = ax + t * abx, ay + t * aby
+    dx, dy = px - hx, py - hy
+    return math.hypot(dx, dy)
+
+
+def inside_superellipse(u: float, v: float, n: float = 4.5) -> bool:
+    # map [0,1] -> [-1,1]
+    x = 2.0 * u - 1.0
+    y = 2.0 * v - 1.0
+    return (abs(x) ** n + abs(y) ** n) <= 1.0
+
+
+def render_icon(size: int) -> bytes:
+    # 2x2 supersampling
+    samples = [(0.25, 0.25), (0.75, 0.25), (0.25, 0.75), (0.75, 0.75)]
+
+    # House geometry (normalized 0..1)
+    roof = (0.28, 0.46, 0.50, 0.30, 0.72, 0.46)  # (ax,ay,bx,by,cx,cy)
+    body = (0.32, 0.46, 0.68, 0.76)  # (x0,y0,x1,y1)
+
+    # Check path
+    chk_a = (0.33, 0.60)
+    chk_b = (0.46, 0.74)
+    chk_c = (0.72, 0.48)
+    thickness = 0.08  # relative to width
+
+    lin_bg = to_lin_rgba(NAVY)
+    lin_white = to_lin_rgba(WHITE)
+    lin_green = to_lin_rgba(GREEN)
+
+    out = bytearray(size * size * 4)
+    idx = 0
+    for j in range(size):
+        for i in range(size):
+            # Accumulate in linear
+            dst = (0.0, 0.0, 0.0, 0.0)
+
+            cov_bg = 0.0
+            cov_house = 0.0
+            cov_check = 0.0
+            for (ox, oy) in samples:
+                u = (i + ox) / size
+                v = (j + oy) / size
+
+                if inside_superellipse(u, v):
+                    cov_bg += 1.0
+
+                    hx = 0
+                    # house coverage (triangle or rect)
+                    if point_in_triangle(u, v, *roof):
+                        hx = 1
+                    elif point_in_rect(u, v, *body):
+                        hx = 1
+                    cov_house += hx
+
+                    # check coverage by distance to segments
+                    d1 = dist_point_to_segment(u, v, *chk_a, *chk_b)
+                    d2 = dist_point_to_segment(u, v, *chk_b, *chk_c)
+                    if min(d1, d2) <= (thickness * 0.5):
+                        cov_check += 1.0
+
+            ss = float(len(samples))
+            if cov_bg > 0.0:
+                dst = over(dst, (lin_bg[0], lin_bg[1], lin_bg[2], lin_bg[3] * (cov_bg / ss)))
+            if cov_house > 0.0:
+                dst = over(dst, (lin_white[0], lin_white[1], lin_white[2], lin_white[3] * (cov_house / ss)))
+            if cov_check > 0.0:
+                dst = over(dst, (lin_green[0], lin_green[1], lin_green[2], lin_green[3] * (cov_check / ss)))
+
+            r = lin_to_srgb(dst[0])
+            g = lin_to_srgb(dst[1])
+            b = lin_to_srgb(dst[2])
+            a = max(0, min(255, int(round(dst[3] * 255.0))))
+
+            out[idx + 0] = r
+            out[idx + 1] = g
+            out[idx + 2] = b
+            out[idx + 3] = a
+            idx += 4
+
+    return png_encode(size, size, bytes(out))
+
+
+def png_chunk(typ: bytes, data: bytes) -> bytes:
+    return struct.pack(
+        ">I", len(data)
+    ) + typ + data + struct.pack(
+        ">I", (zlib.crc32(typ + data) & 0xFFFFFFFF)
+    )
+
+
+def png_encode(width: int, height: int, rgba: bytes) -> bytes:
+    # Build raw scanlines with filter 0
+    stride = width * 4
+    raw = bytearray()
+    for y in range(height):
+        raw.append(0)  # filter type 0
+        start = y * stride
+        raw.extend(rgba[start : start + stride])
+    comp = zlib.compress(bytes(raw), level=9)
+
+    sig = b"\x89PNG\r\n\x1a\n"
+    ihdr = struct.pack(
+        ">IIBBBBB",
+        width,
+        height,
+        8,  # bit depth
+        6,  # color type RGBA
+        0,  # compression
+        0,  # filter
+        0,  # interlace
+    )
+    out = bytearray()
+    out.extend(sig)
+    out.extend(png_chunk(b"IHDR", ihdr))
+    out.extend(png_chunk(b"IDAT", comp))
+    out.extend(png_chunk(b"IEND", b""))
+    return bytes(out)
+
+
+def main():
+    if len(sys.argv) < 3:
+        print(
+            "Usage: python3 scripts/render_icon.py <out_dir> <sizes...>",
+            file=sys.stderr,
+        )
+        sys.exit(2)
+    out_dir = sys.argv[1]
+    sizes = [int(s) for s in sys.argv[2:]]
+    os.makedirs(out_dir, exist_ok=True)
+    for s in sizes:
+        data = render_icon(s)
+        path = os.path.join(out_dir, f"{s}.png")
+        with open(path, "wb") as f:
+            f.write(data)
+        print(f"wrote {path}")
+
+
+if __name__ == "__main__":
+    main()
+