@drip-apex/apex-cli 0.4.0 → 0.6.0

package/dist/cli.js

@@ -1159,8 +1159,8 @@ var require_command = __commonJS({
   "node_modules/commander/lib/command.js"(exports2) {
     var EventEmitter = require("node:events").EventEmitter;
     var childProcess2 = require("node:child_process");
-    var path20 = require("node:path");
-    var fs24 = require("node:fs");
+    var path21 = require("node:path");
+    var fs25 = require("node:fs");
     var process16 = require("node:process");
     var { Argument: Argument2, humanReadableArgName } = require_argument();
     var { CommanderError: CommanderError2 } = require_error();
@@ -2141,7 +2141,7 @@ Expecting one of '${allowedValues.join("', '")}'`);
        * @param {string} subcommandName
        */
       _checkForMissingExecutable(executableFile, executableDir, subcommandName) {
-        if (fs24.existsSync(executableFile)) return;
+        if (fs25.existsSync(executableFile)) return;
         const executableDirMessage = executableDir ? `searched for local subcommand relative to directory '${executableDir}'` : "no directory for search for local subcommand, use .executableDir() to supply a custom directory";
         const executableMissing = `'${executableFile}' does not exist
  - if '${subcommandName}' is not meant to be an executable command, remove description parameter from '.command()' and use '.description()' instead
@@ -2159,11 +2159,11 @@ Expecting one of '${allowedValues.join("', '")}'`);
         let launchWithNode = false;
         const sourceExt = [".js", ".ts", ".tsx", ".mjs", ".cjs"];
         function findFile(baseDir, baseName) {
-          const localBin = path20.resolve(baseDir, baseName);
-          if (fs24.existsSync(localBin)) return localBin;
-          if (sourceExt.includes(path20.extname(baseName))) return void 0;
+          const localBin = path21.resolve(baseDir, baseName);
+          if (fs25.existsSync(localBin)) return localBin;
+          if (sourceExt.includes(path21.extname(baseName))) return void 0;
           const foundExt = sourceExt.find(
-            (ext) => fs24.existsSync(`${localBin}${ext}`)
+            (ext) => fs25.existsSync(`${localBin}${ext}`)
           );
           if (foundExt) return `${localBin}${foundExt}`;
           return void 0;
@@ -2175,21 +2175,21 @@ Expecting one of '${allowedValues.join("', '")}'`);
         if (this._scriptPath) {
           let resolvedScriptPath;
           try {
-            resolvedScriptPath = fs24.realpathSync(this._scriptPath);
+            resolvedScriptPath = fs25.realpathSync(this._scriptPath);
           } catch {
             resolvedScriptPath = this._scriptPath;
           }
-          executableDir = path20.resolve(
-            path20.dirname(resolvedScriptPath),
+          executableDir = path21.resolve(
+            path21.dirname(resolvedScriptPath),
             executableDir
           );
         }
         if (executableDir) {
           let localFile = findFile(executableDir, executableFile);
           if (!localFile && !subcommand._executableFile && this._scriptPath) {
-            const legacyName = path20.basename(
+            const legacyName = path21.basename(
               this._scriptPath,
-              path20.extname(this._scriptPath)
+              path21.extname(this._scriptPath)
             );
             if (legacyName !== this._name) {
               localFile = findFile(
@@ -2200,7 +2200,7 @@ Expecting one of '${allowedValues.join("', '")}'`);
           }
           executableFile = localFile || executableFile;
         }
-        launchWithNode = sourceExt.includes(path20.extname(executableFile));
+        launchWithNode = sourceExt.includes(path21.extname(executableFile));
         let proc;
         if (process16.platform !== "win32") {
           if (launchWithNode) {
@@ -3047,7 +3047,7 @@ Expecting one of '${allowedValues.join("', '")}'`);
        * @return {Command}
        */
       nameFromFilename(filename) {
-        this._name = path20.basename(filename, path20.extname(filename));
+        this._name = path21.basename(filename, path21.extname(filename));
         return this;
       }
       /**
@@ -3061,9 +3061,9 @@ Expecting one of '${allowedValues.join("', '")}'`);
        * @param {string} [path]
        * @return {(string|null|Command)}
        */
-      executableDir(path21) {
-        if (path21 === void 0) return this._executableDir;
-        this._executableDir = path21;
+      executableDir(path22) {
+        if (path22 === void 0) return this._executableDir;
+        this._executableDir = path22;
         return this;
       }
       /**
@@ -3854,7 +3854,7 @@ var init_source = __esm({
 // node_modules/is-docker/index.js
 function hasDockerEnv() {
   try {
-    import_node_fs2.default.statSync("/.dockerenv");
+    import_node_fs3.default.statSync("/.dockerenv");
     return true;
   } catch {
     return false;
@@ -3862,7 +3862,7 @@ function hasDockerEnv() {
 }
 function hasDockerCGroup() {
   try {
-    return import_node_fs2.default.readFileSync("/proc/self/cgroup", "utf8").includes("docker");
+    return import_node_fs3.default.readFileSync("/proc/self/cgroup", "utf8").includes("docker");
   } catch {
     return false;
   }
@@ -3873,10 +3873,10 @@ function isDocker() {
   }
   return isDockerCached;
 }
-var import_node_fs2, isDockerCached;
+var import_node_fs3, isDockerCached;
 var init_is_docker = __esm({
   "node_modules/is-docker/index.js"() {
-    import_node_fs2 = __toESM(require("node:fs"), 1);
+    import_node_fs3 = __toESM(require("node:fs"), 1);
   }
 });
 
@@ -3887,14 +3887,14 @@ function isInsideContainer() {
   }
   return cachedResult;
 }
-var import_node_fs3, cachedResult, hasContainerEnv;
+var import_node_fs4, cachedResult, hasContainerEnv;
 var init_is_inside_container = __esm({
   "node_modules/is-inside-container/index.js"() {
-    import_node_fs3 = __toESM(require("node:fs"), 1);
+    import_node_fs4 = __toESM(require("node:fs"), 1);
     init_is_docker();
     hasContainerEnv = () => {
       try {
-        import_node_fs3.default.statSync("/run/.containerenv");
+        import_node_fs4.default.statSync("/run/.containerenv");
         return true;
       } catch {
         return false;
@@ -3904,25 +3904,25 @@ var init_is_inside_container = __esm({
 });
 
 // node_modules/is-wsl/index.js
-var import_node_process2, import_node_os3, import_node_fs4, isWsl, is_wsl_default;
+var import_node_process2, import_node_os4, import_node_fs5, isWsl, is_wsl_default;
 var init_is_wsl = __esm({
   "node_modules/is-wsl/index.js"() {
     import_node_process2 = __toESM(require("node:process"), 1);
-    import_node_os3 = __toESM(require("node:os"), 1);
-    import_node_fs4 = __toESM(require("node:fs"), 1);
+    import_node_os4 = __toESM(require("node:os"), 1);
+    import_node_fs5 = __toESM(require("node:fs"), 1);
     init_is_inside_container();
     isWsl = () => {
       if (import_node_process2.default.platform !== "linux") {
         return false;
       }
-      if (import_node_os3.default.release().toLowerCase().includes("microsoft")) {
+      if (import_node_os4.default.release().toLowerCase().includes("microsoft")) {
         if (isInsideContainer()) {
           return false;
         }
         return true;
       }
       try {
-        return import_node_fs4.default.readFileSync("/proc/version", "utf8").toLowerCase().includes("microsoft") ? !isInsideContainer() : false;
+        return import_node_fs5.default.readFileSync("/proc/version", "utf8").toLowerCase().includes("microsoft") ? !isInsideContainer() : false;
       } catch {
         return false;
       }
@@ -4191,12 +4191,12 @@ function detectPlatformBinary({ [platform]: platformBinary }, { wsl }) {
   }
   return detectArchBinary(platformBinary);
 }
-var import_node_process7, import_node_buffer, import_node_path2, import_node_url, import_node_util5, import_node_child_process5, import_promises2, import_meta, execFile5, __dirname2, localXdgOpenPath, platform, arch, pTryEach, baseOpen, open, openApp, apps, open_default;
+var import_node_process7, import_node_buffer, import_node_path3, import_node_url, import_node_util5, import_node_child_process5, import_promises2, import_meta, execFile5, __dirname2, localXdgOpenPath, platform, arch, pTryEach, baseOpen, open, openApp, apps, open_default;
 var init_open = __esm({
   "node_modules/open/index.js"() {
     import_node_process7 = __toESM(require("node:process"), 1);
     import_node_buffer = require("node:buffer");
-    import_node_path2 = __toESM(require("node:path"), 1);
+    import_node_path3 = __toESM(require("node:path"), 1);
     import_node_url = require("node:url");
     import_node_util5 = require("node:util");
     import_node_child_process5 = __toESM(require("node:child_process"), 1);
@@ -4207,8 +4207,8 @@ var init_open = __esm({
     init_is_inside_container();
     import_meta = {};
     execFile5 = (0, import_node_util5.promisify)(import_node_child_process5.default.execFile);
-    __dirname2 = import_node_path2.default.dirname((0, import_node_url.fileURLToPath)(import_meta.url));
-    localXdgOpenPath = import_node_path2.default.join(__dirname2, "xdg-open");
+    __dirname2 = import_node_path3.default.dirname((0, import_node_url.fileURLToPath)(import_meta.url));
+    localXdgOpenPath = import_node_path3.default.join(__dirname2, "xdg-open");
     ({ platform, arch } = import_node_process7.default);
     pTryEach = async (array, mapper) => {
       let latestError;
@@ -6743,16 +6743,16 @@ __export(ora_exports, {
 function ora(options) {
   return new Ora(options);
 }
-async function oraPromise(action70, options) {
-  const actionIsFunction = typeof action70 === "function";
-  const actionIsPromise = typeof action70.then === "function";
+async function oraPromise(action69, options) {
+  const actionIsFunction = typeof action69 === "function";
+  const actionIsPromise = typeof action69.then === "function";
   if (!actionIsFunction && !actionIsPromise) {
     throw new TypeError("Parameter `action` must be a Function or a Promise");
   }
   const { successText, failText } = typeof options === "object" ? options : { successText: void 0, failText: void 0 };
   const spinner = ora(options).start();
   try {
-    const promise = actionIsFunction ? action70(spinner) : action70;
+    const promise = actionIsFunction ? action69(spinner) : action69;
     const result = await promise;
     spinner.succeed(
       successText === void 0 ? void 0 : typeof successText === "string" ? successText : successText(result)
@@ -7085,25 +7085,34 @@ var {
   Help
 } = import_index.default;
 
+// src/test-harness.ts
+var readSetting;
+function cliTestSetting(name) {
+  return readSetting?.(name);
+}
+function cliTestHarnessActive() {
+  return readSetting !== void 0;
+}
+
 // src/cli.ts
 init_source();
 
 // src/commands/login.ts
 init_source();
-var import_node_crypto2 = __toESM(require("node:crypto"));
+var import_node_crypto = __toESM(require("node:crypto"));
 var import_node_http = __toESM(require("node:http"));
-var import_node_os4 = __toESM(require("node:os"));
+var import_node_os5 = __toESM(require("node:os"));
 var import_node_readline2 = __toESM(require("node:readline"));
 
 // src/config.ts
-var import_node_fs = __toESM(require("node:fs"));
-var import_node_path = __toESM(require("node:path"));
-var import_node_os2 = __toESM(require("node:os"));
+var import_node_fs2 = __toESM(require("node:fs"));
+var import_node_path2 = __toESM(require("node:path"));
+var import_node_os3 = __toESM(require("node:os"));
 
 // package.json
 var package_default = {
   name: "@drip-apex/apex-cli",
-  version: "0.4.0",
+  version: "0.6.0",
   license: "MIT",
   description: "Apex CLI for managing experiments, approved roadmap ideas, and draft workspaces.",
   private: false,
@@ -7124,14 +7133,14 @@ var package_default = {
     "package.json"
   ],
   scripts: {
-    build: "esbuild src/cli.ts --bundle --platform=node --target=node18 --format=cjs --outfile=dist/cli.js --banner:js='#!/usr/bin/env node' --external:esbuild --external:fsevents",
+    build: "rm -rf dist dist-test && esbuild src/cli.ts --bundle --platform=node --target=node18 --format=cjs --outfile=dist/cli.js --banner:js='#!/usr/bin/env node' --external:esbuild --external:fsevents && esbuild src/cli-test.ts --bundle --platform=node --target=node18 --format=cjs --outfile=dist-test/cli.js --banner:js='#!/usr/bin/env node' --external:esbuild --external:fsevents",
     "check:docs-command-index": "node scripts/check-docs-command-index.mjs",
     dev: "tsx src/cli.ts",
     test: 'npm run build && node --test "test/**/*.test.mjs"',
     typecheck: "tsc --noEmit"
   },
   engines: {
-    node: ">=18"
+    node: ">=22.22.0"
   },
   publishConfig: {
     access: "public"
@@ -7146,7 +7155,7 @@ var package_default = {
   devDependencies: {
     "@types/node": "^22.15.0",
     tsx: "^4.22.4",
-    typescript: "^5.6.3"
+    typescript: "^5.9.3"
   }
 };
 
@@ -7337,6 +7346,18 @@ async function handleCliError(err, command) {
   process.exit(cliError.exitCode);
 }
 
+// ../api-client/src/credentials.ts
+var import_node_fs = __toESM(require("node:fs"));
+var import_node_os2 = __toESM(require("node:os"));
+var import_node_path = __toESM(require("node:path"));
+function readStoredCredentials(file = import_node_path.default.join(import_node_os2.default.homedir(), ".drip", "credentials.json")) {
+  try {
+    return JSON.parse(import_node_fs.default.readFileSync(file, "utf8"));
+  } catch {
+    return null;
+  }
+}
+
 // src/config.ts
 function argvOption(name) {
   const flag = `--${name}`;
@@ -7347,6 +7368,21 @@ function argvOption(name) {
   }
   return void 0;
 }
+var didWarnStoredContext = false;
+function warnStoredContextFallback(creds, flags, context) {
+  if (didWarnStoredContext) return;
+  const storedOrg = !flags.orgId && !process.env.DRIP_ORG && Boolean(creds?.context?.orgId);
+  const storedShop = !flags.shopId && !process.env.DRIP_SHOP && Boolean(creds?.context?.shopId);
+  if (!storedOrg && !storedShop) return;
+  const selections = [
+    storedOrg ? `org ${context.orgId}` : null,
+    storedShop ? `shop ${context.shopId}` : null
+  ].filter(Boolean).join(" / ");
+  console.error(
+    `Using ${selections} from 'apex use' context (pass --org/--shop to override).`
+  );
+  didWarnStoredContext = true;
+}
 function defaultCredentialKind(creds) {
   return Boolean(process.env.DRIP_API_KEY) || !creds?.userApiKey ? "shop" : "user";
 }
@@ -7361,9 +7397,12 @@ function resolveContext(creds = getCredentials(), flags = { orgId: argvOption("o
     }
     return { orgId: flags.orgId || process.env.DRIP_ORG || void 0, shopId: flags.shopId || process.env.DRIP_SHOP || void 0 };
   }
-  const orgId = flags.orgId || process.env.DRIP_ORG || creds?.context?.orgId;
-  const shopId = flags.shopId || process.env.DRIP_SHOP || creds?.context?.shopId;
-  return { orgId, shopId };
+  const context = {
+    orgId: flags.orgId || process.env.DRIP_ORG || creds?.context?.orgId,
+    shopId: flags.shopId || process.env.DRIP_SHOP || creds?.context?.shopId
+  };
+  warnStoredContextFallback(creds, flags, context);
+  return context;
 }
 function configureInvocationContext() {
   const creds = getCredentials();
@@ -7371,14 +7410,10 @@ function configureInvocationContext() {
   const context = resolveContext(creds, void 0, credential);
   setEnvelopeContext({ credential, org_id: context.orgId ?? null, shop_id: context.shopId ?? null });
 }
-var DRIP_DIR = import_node_path.default.join(import_node_os2.default.homedir(), ".drip");
-var CREDS_FILE = import_node_path.default.join(DRIP_DIR, "credentials.json");
+var DRIP_DIR = import_node_path2.default.join(import_node_os3.default.homedir(), ".drip");
+var CREDS_FILE = import_node_path2.default.join(DRIP_DIR, "credentials.json");
 function getStoredCredentials() {
-  try {
-    return JSON.parse(import_node_fs.default.readFileSync(CREDS_FILE, "utf-8"));
-  } catch {
-    return null;
-  }
+  return readStoredCredentials(CREDS_FILE);
 }
 function getCredentials() {
   const envKey = process.env.DRIP_API_KEY;
@@ -7390,1446 +7425,147 @@ function getCredentials() {
       // An env-provided key pairs only with an env-provided URL or the
       // production default — never a stored custom URL, so a credential is
       // never silently sent to a host it was not issued for.
-      baseUrl: envUrl ?? "https://app.drip-apex.com",
-      userApiKey: fileCreds?.userApiKey,
-      userBaseUrl: fileCreds?.userBaseUrl ?? fileCreds?.baseUrl,
-      context: fileCreds?.context
-    };
-  }
-  return fileCreds;
-}
-function saveCredentials(creds) {
-  const { credentialKind: _kind, resolvedContext: _resolved, ...persisted } = creds;
-  import_node_fs.default.mkdirSync(DRIP_DIR, { recursive: true });
-  import_node_fs.default.writeFileSync(CREDS_FILE, JSON.stringify(persisted, null, 2) + "\n", {
-    mode: 384
-  });
-}
-function clearCredentials() {
-  try {
-    import_node_fs.default.unlinkSync(CREDS_FILE);
-  } catch {
-  }
-}
-function requireCredentials() {
-  const creds = getCredentials();
-  if (!creds) {
-    throw new CliError(
-      'Not logged in. Run "apex login" first, or set DRIP_API_KEY env var.',
-      EXIT_CODES.auth
-    );
-  }
-  const context = resolveContext(creds, void 0, defaultCredentialKind(creds));
-  if (!process.env.DRIP_API_KEY && creds.userApiKey) {
-    setEnvelopeContext({ credential: "user", org_id: context.orgId ?? null, shop_id: context.shopId ?? null });
-    if (!context.shopId) {
-      throw new CliError(
-        'Shop context is required. Run "apex use", or pass --shop <id>.',
-        EXIT_CODES.validation,
-        { code: "shop_context_required", retry: "apex use <org>/<shop>", flag: "--shop" }
-      );
-    }
-    return { ...creds, apiKey: creds.userApiKey, baseUrl: creds.userBaseUrl ?? creds.baseUrl, credentialKind: "user", resolvedContext: context };
-  }
-  setEnvelopeContext({ credential: "shop", org_id: context.orgId ?? null, shop_id: context.shopId ?? null });
-  return { ...creds, credentialKind: "shop", resolvedContext: context };
-}
-function requireUserCredentials() {
-  const creds = getCredentials();
-  if (!creds?.userApiKey) {
-    throw new CliError(
-      'This command needs a user credential (apx_uk_...). Run "apex login" first.',
-      EXIT_CODES.auth
-    );
-  }
-  const context = resolveContext(creds, void 0, "user");
-  setEnvelopeContext({ credential: "user", org_id: context.orgId ?? null, shop_id: context.shopId ?? null });
-  return { ...creds, apiKey: creds.userApiKey, baseUrl: creds.userBaseUrl ?? creds.baseUrl, credentialKind: "user", resolvedContext: context };
-}
-var CONFIG_NAMES = [
-  ".drip.config.ts",
-  ".drip.config.js",
-  "drip.config.ts",
-  "drip.config.js"
-];
-function findConfigPath() {
-  const cwd = process.cwd();
-  for (const name of CONFIG_NAMES) {
-    const p = import_node_path.default.join(cwd, name);
-    if (import_node_fs.default.existsSync(p)) return p;
-  }
-  return null;
-}
-
-// src/api.ts
-var import_node_crypto = require("node:crypto");
-var APEX_API_VERSION_HEADER = "x-apex-api-version";
-var SUPPORTED_APEX_API_VERSION = "1";
-var warnedAboutApiVersionSkew = false;
-function warnAboutApiVersionSkew(headers) {
-  const serverVersion = headers.get(APEX_API_VERSION_HEADER);
-  if (!serverVersion || warnedAboutApiVersionSkew) return;
-  const numericServerVersion = Number(serverVersion);
-  const numericSupportedVersion = Number(SUPPORTED_APEX_API_VERSION);
-  if (!Number.isFinite(numericServerVersion) || numericServerVersion === numericSupportedVersion) return;
-  warnedAboutApiVersionSkew = true;
-  process.stderr.write(
-    numericServerVersion > numericSupportedVersion ? "CLI is behind the server \u2014 update.\n" : "Server API is older than this CLI supports.\n"
-  );
-}
-var mockEnvironmentPatchAttempts = 0;
-var mockEnvironmentReads = 0;
-var mockDomainsPatchAttempts = 0;
-var mockScreenshotPolls = 0;
-function extractErrorMessage(json, status2) {
-  if (!json) return `HTTP ${status2}`;
-  const err = json.error;
-  if (typeof err === "string" && err.trim()) return err;
-  if (err && typeof err === "object") {
-    const msg2 = err.message;
-    if (typeof msg2 === "string" && msg2.trim()) return msg2;
-  }
-  const msg = json.message;
-  if (typeof msg === "string" && msg.trim()) return msg;
-  return `HTTP ${status2}`;
-}
-function extractErrorDetails(json) {
-  if (!json) return void 0;
-  const candidates = [
-    json.details,
-    json.meta,
-    json.error && typeof json.error === "object" ? json.error.details : void 0
-  ];
-  const nestedError = json.error && typeof json.error === "object" && !Array.isArray(json.error) ? json.error : null;
-  const code = typeof json.code === "string" ? json.code : typeof nestedError?.code === "string" ? nestedError.code : void 0;
-  for (const candidate of candidates) {
-    if (candidate && typeof candidate === "object" && !Array.isArray(candidate)) {
-      return { ...candidate, ...code ? { code } : {} };
-    }
-  }
-  const limitKeys = ["limit", "current", "max", "actual", "field", "code"];
-  const details = Object.fromEntries(
-    limitKeys.filter((key) => key in json).map((key) => [key, json[key]])
-  );
-  if (code) details.code = code;
-  return Object.keys(details).length > 0 ? details : void 0;
-}
-function mockExperiment() {
-  const collisionFixture = ["collision", "collision-partial"].includes(process.env.APEX_CLI_MOCK_SCREENSHOTS ?? "");
-  const collidingVariation = collisionFixture ? [{
-    id: "deadbeef-0000-4000-8000-000000000002",
-    name: "Trust Badge",
-    weight: 0,
-    is_control: false,
-    mutations: []
-  }] : [];
-  return {
-    id: "00000000-0000-4000-8000-000000000001",
-    slug: "fixture-test",
-    name: "Fixture Test",
-    status: "draft",
-    traffic_allocation: 1,
-    store_url: "https://example.com/products/demo",
-    created_at: "2026-07-04T00:00:00.000Z",
-    archived_at: null,
-    variations: [
-      {
-        id: "00000000-0000-4000-8000-0000000000c0",
-        slug: "control",
-        name: "Control",
-        weight: 0.5,
-        is_control: true,
-        mutations: []
-      },
-      ...collidingVariation,
-      {
-        id: "00000000-0000-4000-8000-0000000000b1",
-        slug: collisionFixture ? void 0 : "badge",
-        name: "Trust Badge",
-        weight: 0.5,
-        is_control: false,
-        mutations: []
-      }
-    ]
-  };
-}
-var SECOND_PAGE_GOAL_ID = "00000000-0000-4000-8000-0000000000f2";
-function mockFunnel() {
-  return {
-    id: "00000000-0000-4000-8000-0000000000aa",
-    name: "Fixture funnel",
-    steps: [
-      { order: 1, label: "Collection", url_pattern: "/collections/*" },
-      { order: 2, label: "Product", url_pattern: "/products/*" }
-    ],
-    created_at: "2026-07-04T00:00:00.000Z"
-  };
-}
-function mockGoal() {
-  return {
-    id: "00000000-0000-4000-8000-0000000000f1",
-    name: "Fixture purchase",
-    type: "custom",
-    measurement: "conversion",
-    count_once: false,
-    selector: null,
-    text_match: null,
-    url_pattern: null,
-    page_id: null,
-    event_name: "purchase",
-    capture: null,
-    created_at: "2026-07-04T00:00:00.000Z"
-  };
-}
-var PAGE_SCOPED_GOAL_ID = "00000000-0000-4000-8000-0000000000f3";
-function mockPageScopedGoal() {
-  return {
-    ...mockGoal(),
-    id: PAGE_SCOPED_GOAL_ID,
-    name: "Fixture page-scoped pageview",
-    type: "pageview",
-    event_name: null,
-    url_pattern: "bestellung-abgeschlossen",
-    page_id: "00000000-0000-4000-8000-0000000000e1"
-  };
-}
-function mockBrandContext() {
-  if (process.env.APEX_CLI_MOCK_BRAND_PROFILE === "none") {
-    return {
-      hasProfile: false,
-      mode: "off",
-      status: "",
-      summary: "",
-      voice: {
-        adjectives: [],
-        weAlways: [],
-        weNever: [],
-        bannedPhrases: [],
-        ctaStyle: ""
-      },
-      guardrails: [],
-      proofRequirements: [],
-      clientNotes: "",
-      clientAssetExcerpts: [],
-      guidelinesText: "",
-      promptBlock: ""
-    };
-  }
-  return {
-    hasProfile: true,
-    mode: "balanced",
-    status: "ready",
-    summary: "Fixture brand profile",
-    voice: {
-      adjectives: ["clear", "practical"],
-      weAlways: ["Use proof-backed claims"],
-      weNever: ["Overpromise"],
-      bannedPhrases: ["revolutionary"],
-      ctaStyle: "Direct and specific"
-    },
-    guardrails: ["Avoid unsupported urgency"],
-    proofRequirements: ["Mention only verified store facts"],
-    clientNotes: "Prefer concise launch copy.",
-    clientAssetExcerpts: [
-      { name: "brand.pdf", excerpt: "Use plain language." }
-    ],
-    guidelinesText: "Keep customer-facing copy concrete.",
-    promptBlock: [
-      "## Brand context (mode: balanced)",
-      "Summary: Fixture brand profile",
-      "Voice: clear, practical",
-      "Always: Use proof-backed claims"
-    ].join("\n")
-  };
-}
-function mockResponse(method, path20, body5) {
-  if (process.env.APEX_CLI_MOCK_API !== "1") return null;
-  const url = new URL(path20, "https://mock.apex.local");
-  const exp = mockExperiment();
-  if (method === "POST" && url.pathname === `/api/v1/experiments/${exp.id}/screenshots`) {
-    mockScreenshotPolls = 0;
-    return { ok: true, status: 202, data: { job_id: "screenshot_job_1", status: "queued", poll_url: "/api/v1/screenshots/screenshot_job_1" } };
-  }
-  if (method === "GET" && url.pathname === "/api/v1/screenshots/screenshot_job_1") {
-    mockScreenshotPolls += 1;
-    if (process.env.APEX_CLI_MOCK_SCREENSHOTS === "transient" && mockScreenshotPolls === 1) {
-      return { ok: false, status: 503, error: "Service temporarily unavailable" };
-    }
-    if (process.env.APEX_CLI_MOCK_SCREENSHOTS === "timeout" || process.env.APEX_CLI_MOCK_SCREENSHOTS === "deadline-processing" || mockScreenshotPolls === 1 && process.env.APEX_CLI_MOCK_SCREENSHOTS !== "deadline-completed") {
-      return { ok: true, status: 200, data: { job_id: "screenshot_job_1", experiment_id: exp.id, status: "processing", devices: ["desktop_chrome"], variation_ids: exp.variations.map((variation) => variation.id) } };
-    }
-    const collisionPartial = process.env.APEX_CLI_MOCK_SCREENSHOTS === "collision-partial";
-    const results2 = {
-      [exp.variations[0].id]: { desktop_chrome: "data:image/png;base64,iVBORw0KGgo=" }
-    };
-    if (process.env.APEX_CLI_MOCK_SCREENSHOTS !== "partial") {
-      for (const variation of exp.variations.slice(collisionPartial ? 2 : 1)) {
-        results2[variation.id] = { desktop_chrome: "data:image/png;base64,iVBORw0KGgo=" };
-      }
-    }
-    return { ok: true, status: 200, data: { job_id: "screenshot_job_1", experiment_id: exp.id, status: "completed", devices: ["desktop_chrome"], variation_ids: exp.variations.map((variation) => variation.id), results: results2 } };
-  }
-  if (url.pathname.startsWith("/api/v1/webhooks")) {
-    const input = body5 ?? {};
-    const webhook = {
-      id: url.pathname.split("/")[4] || "webhook_1",
-      url: String(input.url ?? "https://hooks.example.test/apex"),
-      events: Array.isArray(input.events) ? input.events.map(String) : ["project.published"],
-      active: input.active === void 0 ? true : input.active === true,
-      hasSecret: true,
-      consecutiveFailures: process.env.APEX_CLI_MOCK_WEBHOOK_DISABLED === "1" ? 3 : 1,
-      disabledAt: process.env.APEX_CLI_MOCK_WEBHOOK_DISABLED === "1" ? "2026-08-05T12:00:00.000Z" : null,
-      created_at: "2026-08-05T00:00:00.000Z"
-    };
-    const availableEvents = ["experiment.started", "experiment.completed", "experiment.significant", "experiment.guardian_triggered", "experiment.guardian_paused", "variation.winning", "screenshots.completed", "project.published"];
-    if (method === "GET" && url.pathname === "/api/v1/webhooks") return { ok: true, status: 200, data: { data: [webhook], availableEvents, pagination: { has_more: false, next_cursor: null } } };
-    if (method === "POST" && url.pathname === "/api/v1/webhooks") return { ok: true, status: 201, data: { ...webhook, secret: "whsec_mock_secret" } };
-    if (method === "PATCH") return { ok: true, status: 200, data: webhook };
-    if (method === "DELETE") return { ok: true, status: 200, data: { deleted: true, id: webhook.id } };
-    if (method === "GET" && url.pathname.endsWith("/deliveries")) return { ok: true, status: 200, data: { webhook: { id: webhook.id, active: webhook.active, consecutiveFailures: webhook.consecutiveFailures, disabledAt: webhook.disabledAt }, data: [{ id: "delivery_1", webhook_id: webhook.id, event: "project.published", status: process.env.APEX_CLI_MOCK_WEBHOOK_DISABLED === "1" ? "dead" : "delivered", attempts: 1, response_status: process.env.APEX_CLI_MOCK_WEBHOOK_DISABLED === "1" ? 500 : 200, last_error: process.env.APEX_CLI_MOCK_WEBHOOK_DISABLED === "1" ? "Webhook responded with 500" : null, next_attempt_at: null, processing_started_at: null, delivered_at: "2026-08-05T00:01:00.000Z", created_at: "2026-08-05T00:00:00.000Z", updated_at: "2026-08-05T00:01:00.000Z" }], pagination: { has_more: false, next_cursor: null } } };
-    if (method === "POST" && url.pathname.endsWith("/test")) return { ok: true, status: 200, data: { webhook: { id: webhook.id, active: webhook.active, consecutiveFailures: webhook.consecutiveFailures, disabledAt: webhook.disabledAt }, delivery: { id: "delivery_test", webhook_id: webhook.id, event: "test", status: "delivered", attempts: 1, response_status: 200, last_error: null, next_attempt_at: null, processing_started_at: null, delivered_at: "2026-08-05T00:01:00.000Z", created_at: "2026-08-05T00:00:00.000Z", updated_at: "2026-08-05T00:01:00.000Z" } } };
-  }
-  const forcedStatus = Number(process.env.APEX_CLI_MOCK_ERROR_STATUS ?? 0);
-  if (forcedStatus > 0) {
-    return {
-      ok: false,
-      status: forcedStatus,
-      error: forcedStatus === 401 ? "Invalid API key" : "Resource not found",
-      errorDetails: { mocked: true }
-    };
-  }
-  if (method === "POST" && url.pathname.endsWith("/build") && process.env.APEX_CLI_MOCK_WORKSPACE_BUILD === "blocked-evidence") {
-    return {
-      ok: false,
-      status: 400,
-      error: "Generated custom JavaScript includes an external network or asset call.",
-      data: {
-        ok: false,
-        error: "Generated custom JavaScript includes an external network or asset call.",
-        blockingIssues: [
-          {
-            code: "external_network_call",
-            severity: "blocking",
-            field: "custom_js",
-            message: "Generated custom JavaScript includes an external network or asset call.",
-            evidence: {
-              construct: "String-capable timer execution (fail-closed)",
-              snippet: "setTimeout(unknownHandler, 10)",
-              line: 7,
-              column: 2
-            }
-          },
-          {
-            code: "external_network_call",
-            severity: "blocking",
-            field: "mutations[1].html",
-            message: "Generated HTML includes an external network or asset URL.",
-            evidence: {
-              construct: "External HTML asset URL",
-              url: "https://assets.example.test/pixel.png",
-              matchIndex: 14
-            }
-          },
-          {
-            code: "invalid_custom_code_type",
-            severity: "blocking",
-            field: "custom_css",
-            message: "custom_css must be a string."
-          },
-          {
-            code: "price_node_mutation",
-            severity: "blocking",
-            field: ".product-price",
-            message: "This mutation replaces a price-display node.",
-            evidence: {
-              selector: ".product-price"
-            }
-          },
-          {
-            code: "unknown_validation_family",
-            severity: "blocking",
-            field: "future_guardrail_field",
-            message: "A future guardrail blocked this workspace."
-          }
-        ]
-      }
-    };
-  }
-  if (method === "GET" && url.pathname === "/api/v1/roadmap/approved") {
-    return {
-      ok: true,
-      status: 200,
-      data: {
-        data: [{ id: "roadmap_1", title: "Fixture roadmap idea", linked_experiments: [] }],
-        pagination: { has_more: false, next_cursor: null }
-      }
-    };
-  }
-  if (method === "GET" && url.pathname === "/api/v1/roadmap/items/roadmap_1/handoff") {
-    return {
-      ok: true,
-      status: 200,
-      data: {
-        id: "roadmap_1",
-        title: "Fixture roadmap idea",
-        hypothesis: "The fixture improves conversion",
-        instructions: "Build the fixture"
-      }
-    };
-  }
-  if (method === "GET" && url.pathname === `/api/v1/experiments/${exp.id}/filesystem`) {
-    if (process.env.APEX_CLI_MOCK_FILESYSTEM_REFRESH === "failed") {
-      throw new Error("Mock filesystem refresh failed");
-    }
-    const fixtures = [
-      ["experiment.json", '{"schemaVersion":1,"name":"Fixture Test"}\n'],
-      ["targeting.json", '{"url":[],"segments":[]}\n'],
-      ["experiment/index.js", "window.__apexExperiment = true;\n"],
-      ["experiment/reset.js", "delete window.__apexExperiment;\n"],
-      ["experiment/index.css", ".apex-experiment { display: block; }\n"],
-      ["metrics.json", '{"primary":null,"secondary":[]}\n'],
-      ["qa.json", '{"status":"pending"}\n'],
-      ["launch.json", '{"status":"draft"}\n'],
-      ["variations/control/variation.json", '{"slug":"control","isControl":true}\n'],
-      ["variations/control/mutations.json", "[]\n"],
-      ["variations/control/url-blocks.json", "[]\n"],
-      ["variations/control/index.css", ".control { color: inherit; }\n"],
-      ["variations/control/index.js", "window.__apexControl = true;\n"],
-      ["variations/control/reset.js", "delete window.__apexControl;\n"],
-      ["variations/control/anti-flicker.json", "[]\n"]
-    ];
-    const invalidPaths = {
-      invalid: "../secret",
-      traversal: "variations/../../x",
-      absolute: "/abs/path"
-    };
-    const invalidPath = invalidPaths[process.env.APEX_CLI_MOCK_FILESYSTEM_PATHS ?? ""];
-    if (invalidPath) {
-      fixtures.push([invalidPath, "must not be written\n"]);
-    }
-    return {
-      ok: true,
-      status: 200,
-      data: {
-        rootName: "fixture-test",
-        files: fixtures.map(([filePath, content]) => ({
-          path: filePath,
-          content,
-          sha256: (0, import_node_crypto.createHash)("sha256").update(content).digest("hex")
-        }))
-      }
-    };
-  }
-  const workspaceMatch = url.pathname.match(
-    /^\/api\/v1\/experiments\/([^/]+)\/variations\/([^/]+)\/workspace$/
-  );
-  if (method === "GET" && workspaceMatch) {
-    const content = "window.__apexOperator = true;\n";
-    return {
-      ok: true,
-      status: 200,
-      data: {
-        workspace: {
-          id: "workspace_1",
-          schemaVersion: 1,
-          status: "draft",
-          currentRevisionId: "revision_1",
-          updatedAt: "2026-08-05T00:00:00.000Z"
-        },
-        files: [
-          {
-            path: "src/index.js",
-            kind: "custom_js",
-            contentType: "application/javascript",
-            content,
-            sha256: (0, import_node_crypto.createHash)("sha256").update(content).digest("hex"),
-            sizeBytes: Buffer.byteLength(content),
-            updatedAt: "2026-08-05T00:00:00.000Z"
-          }
-        ]
-      }
-    };
-  }
-  const configMatch = url.pathname.match(
-    /^\/api\/v1\/(assets|landing-pages)(?:\/([^/]+))?$/
-  );
-  if (configMatch) {
-    const [, family, id = family === "assets" ? "asset_1" : "landing_page_1"] = configMatch;
-    const item = {
-      id,
-      name: family === "assets" ? "fixture.png" : "Fixture landing page",
-      status: "draft",
-      created_at: "2026-07-20T00:00:00.000Z"
-    };
-    if (method === "GET" && !configMatch[2])
-      return {
-        ok: true,
-        status: 200,
-        data: {
-          data: [item],
-          pagination: {
-            has_more: false,
-            next_cursor: url.searchParams.get("cursor")
-          }
-        }
-      };
-    if (method === "POST" && family === "assets" && body5 instanceof FormData) {
-      if (process.env.APEX_CLI_MOCK_ASSET_STATUS === "413") {
-        return {
-          ok: false,
-          status: 413,
-          error: "Asset exceeds the upload size limit"
-        };
-      }
-      const file = body5.get("files");
-      return {
-        ok: true,
-        status: 201,
-        data: {
-          assets: [{ ...item, mime_type: file instanceof Blob ? file.type : "" }]
-        }
-      };
-    }
-    if (method === "DELETE" && family === "assets")
-      return { ok: true, status: 200, data: { ok: true } };
-    return { ok: true, status: 200, data: item };
-  }
-  const targetingMatch = url.pathname.match(
-    /^\/api\/v1\/(pages|segments|exclusion-groups)(?:\/([^/]+))?(?:\/members)?$/
-  );
-  if (targetingMatch) {
-    const [, kind5, id = `${kind5.replace(/s$/, "")}_1`] = targetingMatch;
-    const input = body5 ?? {};
-    const item = {
-      id,
-      name: String(input.name ?? `Fixture ${kind5}`),
-      ...kind5 === "exclusion-groups" ? { updatedAt: "2026-07-20T00:00:00.000Z" } : { updated_at: "2026-07-20T00:00:00.000Z" },
-      ...input
-    };
-    if (method === "GET" && !targetingMatch[2]) {
-      return {
-        ok: true,
-        status: 200,
-        data: {
-          data: [item],
-          pagination: {
-            has_more: false,
-            next_cursor: url.searchParams.get("cursor")
-          }
-        }
-      };
-    }
-    return { ok: true, status: method === "POST" ? 201 : 200, data: item };
-  }
-  if (method === "POST" && url.pathname === "/api/v1/external-pixels/snippet")
-    return {
-      ok: true,
-      status: 200,
-      data: {
-        snippet: "window.apexExternalPurchase=function(){};",
-        provider: "external"
-      }
-    };
-  const membershipMatch = url.pathname.match(/^\/api\/v1\/(org|team)(?:\/(members|invitations))?(?:\/([^/]+))?$/);
-  if (membershipMatch) {
-    const [, plane, collection, id] = membershipMatch;
-    const input = body5 ?? {};
-    const org = { id: "org_1", name: String(input.name ?? "Fixture organization"), slug: String(input.slug ?? "fixture-organization") };
-    const member = { id: id ?? "member_1", user_id: "user_1", role: String(input.role ?? "member") };
-    const invitation = { id: id ?? "invite_1", email: String(input.email ?? "member@example.com"), role: String(input.role ?? input.org_role ?? "viewer"), status: "pending" };
-    if (plane === "org" && !collection) return { ok: true, status: 200, data: { data: org } };
-    if (method === "DELETE") return { ok: true, status: 200, data: { success: true, id } };
-    const value = collection === "invitations" ? invitation : member;
-    return { ok: true, status: method === "POST" ? 201 : 200, data: method === "GET" ? { data: [value] } : { data: value } };
-  }
-  if (method === "POST" && url.pathname === "/api/v1/preview-sessions") return { ok: true, status: 200, data: { session_id: "preview_fixture", preview_url: "https://preview.drip-apex.com/api/preview?pst=fixture", expires_at: "2026-07-20T11:00:00.000Z" } };
-  if (url.pathname === "/api/v1/admin/settings") return { ok: true, status: 200, data: { data: { guardian_enabled: method === "PATCH" ? Boolean(body5?.guardian_enabled ?? true) : true, srm_check_enabled: method === "PATCH" ? Boolean(body5?.srm_check_enabled ?? true) : true } } };
-  if (method === "GET" && url.pathname === "/api/v1/admin/tracking/quarantine") return { ok: true, status: 200, data: { rows: [{ id: "q_1", shop_name: "Fixture shop", reason_code: "invalid_payload", verdict: "quarantined", created_at: "2026-07-20T10:00:00.000Z" }] } };
-  if (method === "GET" && url.pathname === "/api/v1/audit-logs") return { ok: true, status: 200, data: { data: [{ id: "audit_1", created_at: "2026-07-20T10:00:00.000Z", action: "experiment.updated", entity_type: "experiment", shop_id: "11111111-1111-4111-8111-111111111112", org_id: null, user_id: "11111111-1111-4111-8111-111111111111", entity_id: exp.id, entity_name: exp.name, diff: null }], pagination: { total: 1, limit: 50, offset: 0, has_more: false } } };
-  const shopMatch = url.pathname.match(
-    /^\/api\/v1\/shops(?:\/([^/]+))?(?:\/(.*))?$/
-  );
-  if (shopMatch) {
-    const input = body5 ?? {};
-    const shop = {
-      id: shopMatch[1] ?? "11111111-1111-4111-8111-111111111112",
-      name: String(input.name ?? "Fixture Shop"),
-      domain: String(input.domain ?? "fixture.example.com"),
-      ...input.platform ? { platform: String(input.platform) } : {},
-      ...input.plan ? { plan: String(input.plan) } : {},
-      tier: String(input.tier ?? (input.plan === "self_serve" ? "self_managed" : "apex_managed")),
-      created_at: "2026-07-20T00:00:00.000Z"
-    };
-    if (!shopMatch[1] && method === "GET")
-      return { ok: true, status: 200, data: { data: [shop] } };
-    if (shopMatch[2] === "store-profile")
-      return {
-        ok: true,
-        status: 200,
-        data: { schemaReady: true, shopId: shop.id, facts: [] }
-      };
-    if (shopMatch[2])
-      return {
-        ok: true,
-        status: method === "POST" ? 201 : 200,
-        data: { ok: true, area: shopMatch[2], ...input }
-      };
-    return {
-      ok: true,
-      status: method === "POST" ? 201 : 200,
-      data: method === "PATCH" ? { ok: true, shop } : shop
-    };
-  }
-  if (method === "GET" && url.pathname === "/api/v1/audit-logs")
-    return {
-      ok: true,
-      status: 200,
-      data: {
-        data: [
-          {
-            id: "audit_1",
-            created_at: "2026-07-20T10:00:00.000Z",
-            action: "experiment.updated",
-            entity_type: "experiment",
-            shop_id: "11111111-1111-4111-8111-111111111112",
-            org_id: null,
-            user_id: "11111111-1111-4111-8111-111111111111",
-            entity_id: exp.id,
-            entity_name: exp.name,
-            diff: null
-          }
-        ],
-        pagination: { total: 1, limit: 50, offset: 0, has_more: false }
-      }
-    };
-  if (url.pathname === "/api/v1/inbox/messages") {
-    const input = body5 ?? {};
-    const message = {
-      id: "message_1",
-      role: "user",
-      body: String(input.body ?? "Fixture inbox message"),
-      sender_id: "11111111-1111-4111-8111-111111111111",
-      created_at: "2026-07-20T10:00:00.000Z"
-    };
-    return {
-      ok: true,
-      status: method === "POST" ? 201 : 200,
-      data: method === "POST" ? { message } : { messages: [message] }
-    };
-  }
-  if (method === "POST" && url.pathname === "/api/v1/inbox/read-state")
-    return {
-      ok: true,
-      status: 200,
-      data: {
-        ok: true,
-        channelKeys: body5.channelKey ? [body5.channelKey] : ["account:account"],
-        lastReadAt: "2026-07-20T10:00:00.000Z"
-      }
-    };
-  const managedMatch = url.pathname.match(
-    /^\/api\/v1\/(flags|personalizations)(?:\/([^/]+))?(?:\/(activate|pause|archive|status))?$/
-  );
-  if (managedMatch) {
-    const [, kind5, id = `${kind5.slice(0, -1)}_1`, action70] = managedMatch;
-    const input = body5 ?? {};
-    const item = {
-      id,
-      key: String(input.key ?? `fixture-${kind5.slice(0, -1)}`),
-      name: String(input.name ?? `Fixture ${kind5.slice(0, -1)}`),
-      status: action70 === "activate" ? "active" : action70 === "pause" ? "paused" : action70 === "archive" ? "archived" : "draft",
-      updated_at: "2026-07-19T00:00:00.000Z"
-    };
-    if (kind5 === "flags" && action70 === "status")
-      return {
-        ok: true,
-        status: 200,
-        data: {
-          flag: item,
-          publication_revision: 2,
-          generated_at: "2026-07-19T00:00:00.000Z",
-          config_urls: [
-            "data:application/json,%7B%22publication_revision%22%3A2%2C%22generated_at%22%3A%222026-07-19T00%3A00%3A00.000Z%22%7D"
-          ]
-        }
-      };
-    if (method === "GET" && !managedMatch[2]) {
-      return {
-        ok: true,
-        status: 200,
-        data: {
-          data: [item],
-          pagination: { has_more: false, next_cursor: null }
-        }
-      };
-    }
-    return {
-      ok: true,
-      status: method === "POST" && !managedMatch[2] ? 201 : 200,
-      data: item
-    };
-  }
-  const insightMatch = url.pathname.match(
-    /^\/api\/v1\/(backlog|signals)(?:\/([^/]+))?(?:\/(archive|restore))?$/
-  );
-  if (insightMatch) {
-    const [, kind5, id = `${kind5}_1`, action70] = insightMatch;
-    const input = body5 ?? {};
-    if (action70 && (kind5 !== "backlog" || method !== "POST"))
-      return { ok: false, status: 405, error: `${action70} requires POST` };
-    const archived = action70 === "archive" || method === "DELETE" || url.searchParams.get("include_archived") === "true";
-    const item = {
-      id,
-      ...kind5 === "backlog" ? {
-        title: String(input.title ?? "Fixture backlog item"),
-        archived_at: archived ? "2026-07-20T00:00:00.000Z" : null
-      } : {
-        key: String(input.key ?? "fixture-signal"),
-        label: String(input.label ?? "Fixture signal")
-      },
-      status: archived ? "archived" : "active",
-      updated_at: "2026-07-20T00:00:00.000Z"
-    };
-    if (method === "GET" && !insightMatch[2])
-      return {
-        ok: true,
-        status: 200,
-        data: {
-          data: [item],
-          pagination: { has_more: false, next_cursor: null }
-        }
-      };
-    if (method === "DELETE")
-      return { ok: true, status: 200, data: { ok: true } };
-    return {
-      ok: true,
-      status: method === "POST" && !action70 ? 201 : 200,
-      data: item
-    };
-  }
-  if (method === "GET" && url.pathname === "/api/v1/experiments") {
-    const experiment = url.searchParams.get("archived") === "1" ? { ...exp, archived_at: "2026-07-20T00:00:00.000Z" } : { ...exp, archived_at: null };
-    return {
-      ok: true,
-      status: 200,
-      data: {
-        data: [experiment],
-        pagination: { has_more: false, next_cursor: null }
-      }
-    };
-  }
-  if (method === "POST" && url.pathname === `/api/v1/experiments/${exp.id}/start`) {
-    return { ok: true, status: 200, data: { ...exp, status: "running" } };
-  }
-  if (method === "POST" && url.pathname === "/api/v1/experiments") {
-    const input = body5 ?? {};
-    if (input.experiment_type === "redirect" && process.env.APEX_CLI_MOCK_REDIRECT_DISABLED === "1") {
-      return {
-        ok: false,
-        status: 403,
-        error: "Redirect tests are not enabled for this shop"
-      };
-    }
-    const requestedVariations = Array.isArray(input.variations) ? input.variations : exp.variations ?? [];
-    return {
-      ok: true,
-      status: 201,
-      data: {
-        ...exp,
-        name: String(input.name ?? exp.name),
-        slug: typeof input.slug === "string" || input.slug === null ? input.slug : exp.slug,
-        experiment_type: input.experiment_type === "redirect" ? "redirect" : "mutation",
-        traffic_allocation: typeof input.traffic_allocation === "number" ? input.traffic_allocation : exp.traffic_allocation,
-        store_url: typeof input.store_url === "string" ? input.store_url : null,
-        targeting: input.targeting ?? null,
-        variations: requestedVariations.map((variation, index) => ({
-          id: `00000000-0000-4000-8000-${String(index + 1).padStart(12, "0")}`,
-          name: String(variation.name ?? `Variation ${index + 1}`),
-          weight: typeof variation.weight === "number" ? variation.weight : 0,
-          is_control: variation.is_control === true,
-          redirect_url: typeof variation.redirect_url === "string" ? variation.redirect_url : null,
-          mutations: []
-        }))
-      }
-    };
-  }
-  if (method === "GET" && (url.pathname === `/api/v1/experiments/${exp.id}` || url.pathname === `/api/v1/experiments/by-slug/${exp.slug}`)) {
-    return { ok: true, status: 200, data: exp };
-  }
-  if (method === "GET" && url.pathname === `/api/v1/experiments/${exp.id}/results`) {
-    const withheld = process.env.APEX_CLI_MOCK_RESULTS_STATE === "untrustworthy";
-    return {
-      ok: true,
-      status: 200,
-      data: {
-        experiment: { id: exp.id, name: exp.name, status: exp.status },
-        totals: { visitors: 128, primaryConversions: 18, revenue: 4200 },
-        arms: [
-          {
-            variationId: exp.variations?.[0]?.id,
-            name: "Control",
-            isControl: true,
-            visitors: 64,
-            primaryConversions: 8,
-            primaryRate: 0.125,
-            revenue: 2e3
-          },
-          {
-            variationId: exp.variations?.[1]?.id,
-            name: "Trust Badge",
-            isControl: false,
-            visitors: 64,
-            primaryConversions: 10,
-            primaryRate: 0.15625,
-            revenue: 2200
-          }
-        ],
-        decision: {
-          state: withheld ? "untrustworthy" : "collecting",
-          treatmentName: "Trust Badge",
-          lift: 25,
-          sequentialConfidence: withheld ? 0 : 62.5,
-          fixedConfidence: withheld ? 0 : 84,
-          judgedConfidence: withheld ? 0 : 84,
-          basis: withheld ? "sequential" : "fixed_horizon",
-          blockingGates: withheld ? ["mixed-currency"] : []
-        },
-        effective_outcome: {
-          outcome: withheld ? "needs_readout" : "winner",
-          statisticsOutcome: withheld ? "needs_readout" : "collecting",
-          provenance: withheld ? "statistics" : "manager_decided"
-        },
-        manager_decision: withheld ? null : {
-          outcome: "winner",
-          reason: "The business case is strong enough to ship.",
-          decided_by: { id: "user_1", name: "Maya Manager" },
-          decided_at: "2026-07-31T09:00:00.000Z",
-          version: 1
-        },
-        metrics: [],
-        series: [],
-        warnings: withheld ? [{ code: "mixed-currency", message: "Mixed currencies block the verdict." }] : []
-      }
-    };
-  }
-  if (method === "GET" && url.pathname === `/api/v1/experiments/${exp.id}/qa/run`) {
-    return {
-      ok: true,
-      status: 200,
-      data: {
-        run: {
-          id: "qa_run_1",
-          status: "in_review",
-          checklist: [],
-          urls: [],
-          automatedEvidence: null,
-          acceptanceCriteriaSummary: null,
-          goalVerification: null,
-          summary: {
-            status: "in_review",
-            required: 0,
-            completedRequired: 0,
-            failedRequired: 0,
-            optional: 0,
-            completedOptional: 0,
-            blockers: []
-          },
-          notes: null,
-          createdAt: "2026-07-04T00:00:00.000Z",
-          updatedAt: "2026-07-04T00:00:00.000Z",
-          approvedAt: null,
-          approvedBy: null,
-          completedAt: null
-        }
-      }
-    };
-  }
-  if (method === "PUT" && url.pathname === `/api/v1/experiments/by-slug/${exp.slug}`) {
-    const failureStatus = Number(
-      process.env.APEX_CLI_MOCK_UPSERT_FAILURE_STATUS ?? 0
-    );
-    if (failureStatus > 0) {
-      return {
-        ok: false,
-        status: failureStatus,
-        error: `Mock upsert failed with HTTP ${failureStatus}`
-      };
-    }
-    return { ok: true, status: 200, data: exp };
-  }
-  if (method === "POST" && url.pathname.endsWith("/filesystem/plan")) {
-    const files = body5?.files ?? [];
-    if (process.env.APEX_CLI_MOCK_FILESYSTEM_PLAN === "invalid") {
-      return {
-        ok: true,
-        status: 200,
-        data: {
-          ok: false,
-          experimentId: exp.id,
-          status: "invalid",
-          changes: [],
-          errors: ["Mock filesystem plan error"],
-          warnings: [],
-          invalidatesQa: false,
-          precompileRequired: false
-        }
-      };
-    }
-    if (["blocking-only", "blocking-many"].includes(process.env.APEX_CLI_MOCK_FILESYSTEM_PLAN ?? "")) {
-      const blockingIssues = [{
-        code: "custom_js_parse_error",
-        severity: "blocking",
-        message: "Custom JavaScript does not parse.",
-        path: "variations/control/index.js",
-        variation: "control"
-      }];
-      if (process.env.APEX_CLI_MOCK_FILESYSTEM_PLAN === "blocking-many") {
-        blockingIssues.push(
-          { ...blockingIssues[0], code: "second_error", message: "Second blocking issue." },
-          { ...blockingIssues[0], code: "third_error", message: "Third blocking issue." }
-        );
-      }
-      return {
-        ok: true,
-        status: 200,
-        data: {
-          ok: false,
-          experimentId: exp.id,
-          status: "invalid",
-          changes: [],
-          errors: [],
-          warnings: [],
-          blockingIssues,
-          invalidatesQa: false,
-          precompileRequired: false
-        }
-      };
-    }
-    const observedPaths = files.map((file) => file.path).filter((filePath) => typeof filePath === "string");
-    return {
-      ok: true,
-      status: 200,
-      data: {
-        ok: true,
-        experimentId: exp.id,
-        status: "ok",
-        changes: files.length ? [
-          {
-            path: "experiment.json",
-            entity: "experiment",
-            action: "update",
-            summary: "Fixture plan change",
-            invalidatesQa: false
-          }
-        ] : [],
-        errors: [],
-        warnings: [],
-        invalidatesQa: false,
-        precompileRequired: false,
-        ...process.env.APEX_CLI_MOCK_FILESYSTEM_PLAN === "echo-paths" ? { observedPaths } : {}
-      }
-    };
-  }
-  if (method === "POST" && url.pathname.endsWith("/filesystem/apply")) {
-    if (process.env.APEX_CLI_MOCK_FILESYSTEM_APPLY === "failed-with-plan") {
-      return {
-        ok: false,
-        status: 409,
-        error: "Mock apply failed",
-        data: {
-          applied: false,
-          plan: {
-            ok: false,
-            experimentId: exp.id,
-            status: "invalid",
-            changes: [],
-            errors: ["Mock apply plan error"],
-            warnings: [],
-            invalidatesQa: false,
-            precompileRequired: false
-          }
-        }
-      };
-    }
-    return {
-      ok: true,
-      status: 200,
-      data: {
-        applied: true,
-        plan: {
-          ok: true,
-          experimentId: exp.id,
-          status: "ok",
-          changes: [],
-          errors: [],
-          warnings: [],
-          invalidatesQa: false,
-          precompileRequired: false
-        }
-      }
-    };
-  }
-  if (url.pathname === "/api/v1/environments" && (method === "GET" || method === "PATCH")) {
-    if (method === "GET") mockEnvironmentReads += 1;
-    if (method === "PATCH") {
-      mockEnvironmentPatchAttempts += 1;
-      const conflictMode = process.env.APEX_CLI_MOCK_ENVIRONMENT_CONFLICT;
-      if (conflictMode === "always" || conflictMode === "once" && mockEnvironmentPatchAttempts === 1) {
-        return {
-          ok: false,
-          status: 409,
-          error: "Runtime settings changed since read \u2014 re-read and retry"
-        };
-      }
-    }
-    const defaultItems = [
-      {
-        key: "production",
-        name: "Production",
-        isDefault: true,
-        subSnippetEnabled: false,
-        domains: ["www.example.com"]
-      },
-      {
-        key: "staging",
-        name: "Staging",
-        isDefault: false,
-        subSnippetEnabled: true,
-        // The dev-bound doctor fixture binds a development host to a
-        // non-production environment so the doctor can prove it reports the
-        // binding instead of staying silent.
-        domains: process.env.APEX_CLI_MOCK_DOCTOR_STATE === "dev-bound" ? ["staging.example.dev"] : []
-      }
-    ];
-    const items = body5?.environments?.items ?? defaultItems;
-    const precompile = process.env.APEX_CLI_MOCK_PRECOMPILE_ERROR === "1" ? { status: "error", summary: "Mock edge precompile failed" } : { status: "ok", summary: "Mock edge precompile succeeded" };
-    return {
-      ok: true,
-      status: 200,
-      data: {
-        environments: { activeKey: "production", items },
-        version: `2026-07-19T10:0${mockEnvironmentReads}:00.000Z`,
-        ...method === "PATCH" ? { precompile } : {}
-      }
-    };
-  }
-  if (method === "GET" && url.pathname === "/api/v1/analytics/url-inventory") {
-    if (process.env.APEX_CLI_MOCK_URL_INVENTORY === "paged") {
-      const offset2 = Number(url.searchParams.get("offset") ?? "0");
-      const pages = {
-        "0": { items: [{ host: "example.com", path: "/products/page-one", pageviews: 42, visitors: 30 }], total: 2, truncated: true },
-        "200": { items: [{ host: "example.com", path: "/products/page-two", pageviews: 8, visitors: 6 }], total: 2, truncated: false }
-      };
-      const page = pages[String(offset2)] ?? { items: [{ host: "example.com", path: "/products/overrun", pageviews: 1, visitors: 1 }], total: 2, truncated: true };
-      return { ok: true, status: 200, data: page };
-    }
-    const state = process.env.APEX_CLI_MOCK_DOCTOR_STATE ?? "green";
-    const inventories = {
-      prefix: [
-        { host: "getkong.shop", path: "/", pageviews: 6e4, visitors: 2e4 },
-        { host: "getkong.delivery", path: "/checkout", pageviews: 48e3, visitors: 17e3 },
-        { host: "preview-abc-drip.vercel.app", path: "/", pageviews: 42, visitors: 12 }
-      ],
-      // Production-labeled traffic from one development host bound to the
-      // staging environment and one bound nowhere at all.
-      "dev-bound": [
-        { host: "www.example.com", path: "/", pageviews: 100, visitors: 80 },
-        // A production storefront on the public .dev TLD: real traffic, not
-        // development pollution.
-        { host: "store.example.dev", path: "/", pageviews: 90, visitors: 70 },
-        { host: "staging.example.dev", path: "/", pageviews: 22, visitors: 9 },
-        { host: "preview-xyz-drip.vercel.app", path: "/", pageviews: 15, visitors: 6 }
-      ]
-    };
-    const offset = Number(url.searchParams.get("offset") ?? 0);
-    if (state === "paginated") {
-      const pages = [
-        { items: [{ host: "www.example.com", path: "/", pageviews: 100, visitors: 80 }], truncated: true },
-        { items: [{ host: "preview-page-two.vercel.app", path: "/", pageviews: 12, visitors: 5 }], truncated: false }
-      ];
-      const page = pages[Math.min(Math.floor(offset / 500), pages.length - 1)];
-      return { ok: true, status: 200, data: { items: page.items, total: 2, truncated: page.truncated } };
-    }
-    if (state === "truncated") {
-      const items2 = Array.from({ length: 500 }, (_, index) => ({ host: "www.example.com", path: `/p/${offset + index}`, pageviews: 3, visitors: 2 }));
-      return { ok: true, status: 200, data: { items: items2, total: 1e5, truncated: true } };
-    }
-    const baseItems = [
-      { host: "www.example.com", path: "/", pageviews: 100, visitors: 80 },
-      { host: "example.com", path: "/products/demo", pageviews: 40, visitors: 30 }
-    ];
-    const bestellung = url.searchParams.get("days") === "30" ? { host: "example.com", path: "/bestellung-abgeschlossen", pageviews: 12, visitors: 10 } : { host: "getkong.test", path: "/bestellung-abgeschlossen", pageviews: 12, visitors: 10 };
-    const items = inventories[state] ?? [...baseItems, bestellung];
-    const hostFilter = url.searchParams.get("host")?.trim().toLowerCase();
-    const pathContains = url.searchParams.get("pathContains") ?? "";
-    const filtered = items.filter(
-      (item) => (!hostFilter || item.host.toLowerCase() === hostFilter) && (!pathContains || item.path.includes(pathContains))
-    );
-    return { ok: true, status: 200, data: { items: filtered, total: filtered.length, truncated: false } };
-  }
-  if (method === "GET" && url.pathname === "/api/v1/analytics/visitor-series") {
-    if (process.env.APEX_CLI_MOCK_DOCTOR_STATE === "series-down") {
-      return { ok: false, status: 503, error: "Analytics is temporarily unavailable" };
-    }
-    return { ok: true, status: 200, data: { items: [
-      { date: "2026-07-28", visitors: 100, pageviews: 200 },
-      { date: "2026-07-29", visitors: 110, pageviews: 220 },
-      { date: "2026-08-03", visitors: 70, pageviews: 140 },
-      { date: "2026-08-04", visitors: 77, pageviews: 154 }
-    ] } };
-  }
-  if (url.pathname === "/api/v1/consent" && (method === "GET" || method === "PATCH")) {
-    const patch = body5;
-    const enabled = typeof patch?.consentMode?.enabled === "boolean" ? patch.consentMode.enabled : true;
-    const provider = typeof patch?.consentMode?.provider === "string" ? patch.consentMode.provider : "cookiescript";
-    const requiredGroup = typeof patch?.consentMode?.requiredGroup === "string" ? patch.consentMode.requiredGroup : "analytics";
-    const getter = typeof patch?.consentMode?.getter === "string" ? patch.consentMode.getter : "";
-    if (method === "PATCH" && patch?.applyCanonicalSplit === false) {
-      return { ok: false, status: 403, error: "applyCanonicalSplit: false is not permitted with the consent:write scope \u2014 clear those prerequisites in the dashboard (shop:settings)." };
-    }
-    return { ok: true, status: 200, data: {
-      consentMode: { enabled, provider, requiredGroup, getter },
-      prerequisites: {
-        showVariationsRule: "return true;",
-        startTrackingRule: "return drip.get('trackingConsentEnabled');"
-      },
-      ...method === "PATCH" ? { precompile: { status: "ok", summary: "Mock edge precompile succeeded" } } : {}
-    } };
-  }
-  if (url.pathname === "/api/v1/install-domains" && (method === "GET" || method === "PATCH")) {
-    const conflictMode = process.env.APEX_CLI_MOCK_DOMAINS_CONFLICT;
-    const serverDomains = conflictMode === "once" && mockDomainsPatchAttempts >= 1 ? ["shop.example.com", "peer.example.com"] : ["shop.example.com"];
-    if (method === "PATCH") {
-      mockDomainsPatchAttempts += 1;
-      if (conflictMode === "always" || conflictMode === "once" && mockDomainsPatchAttempts === 1) {
-        return { ok: false, status: 409, error: "Install domains changed since read \u2014 re-read and retry" };
-      }
-    }
-    const domains = body5?.domains ?? serverDomains;
-    const additionalDomains = method === "PATCH" ? domains : serverDomains;
-    return { ok: true, status: 200, data: {
-      domain: "example.com",
-      additionalDomains,
-      storeOrigins: ["https://example.com", "https://www.example.com", ...additionalDomains.map((domain) => `https://${domain}`)],
-      revision: method === "PATCH" ? "rev_patched" : `rev_${serverDomains.length}`,
-      ...method === "PATCH" ? { precompile: { status: "ok", summary: "Mock edge precompile succeeded" } } : {}
-    } };
-  }
-  if (url.pathname === "/api/v1/external-tracking" && (method === "GET" || method === "PATCH")) {
-    const current = { domains: ["www.example.com", "shop.example.com"], handoverQueryParam: "drip_bucket", handoverTtlSeconds: 120, handoverMintTimeoutMs: 250, signed: true };
-    const patch = body5?.externalTracking;
-    const next = { ...current, ...patch ?? {} };
-    return { ok: true, status: 200, data: { externalTracking: next, revision: "2026-08-05T10:00:00.000Z", ...method === "PATCH" ? { precompile: { status: "ok", summary: "Mock edge precompile succeeded" } } : {} } };
-  }
-  const analyticsMatch = url.pathname.match(/^\/api\/v1\/analytics\/(stats|timeseries|traffic|pages|geo|sessions|web-vitals|realtime|entry-exit)$/);
-  if (method === "GET" && analyticsMatch) {
-    const fixtures = {
-      stats: [{ date: "2026-07-19", visitors: 120, conversions: 12, revenue: 540, foreign_revenue_buckets: [], converted_revenue: null, excluded_foreign_revenue: null, unconverted_revenue: null, unknown_currency_orders: null, unknown_currency_revenue: null }],
-      timeseries: [{ date: "2026-07-19", visitors: 120, sessions: 132, pageviews: 280, conversions: 12, revenue: 540 }],
-      traffic: [{ referrer: "google.com", utm_source: "google", utm_medium: "organic", utm_campaign: "", visitors: 80, sessions: 88, pageviews: 160 }],
-      pages: [{ page_url: "/products/demo", unique_visitors: 90, pageviews: 140, planning_days: Number(url.searchParams.get("planningDays") ?? 180) }],
-      geo: [{ country: "DE", device: "desktop", visitors: 70, sessions: 76, pageviews: 150 }],
-      sessions: [{ total_sessions: 132, avg_pages_per_session: 2.1, avg_session_duration_seconds: 94, bounce_rate: 0.32, median_pages_per_session: 2 }],
-      "web-vitals": [{ metric: "LCP", route: "/products/demo", p75: 1800, sample_count: 40, good_count: 35, poor_count: 2 }],
-      realtime: { summary: { active_visitors: 4, active_sessions: 5, events_last_5min: 18 }, activeVisitors: [], recentEvents: [] },
-      "entry-exit": [{ type: "entry", page_url: "/", sessions: 45 }]
-    };
-    return { ok: true, status: 200, data: { data: fixtures[analyticsMatch[1]] } };
-  }
-  if (method === "POST" && url.pathname === "/api/v1/analytics/suggest-goals") {
-    return { ok: true, status: 200, data: { goals: [{ name: "Purchase", type: "pageview", urlPattern: "/bestellung-abgeschlossen", explanation: "Fixture" }], funnels: [], triggers: [] } };
-  }
-  if (method === "GET" && url.pathname === "/api/v1/funnels") {
-    return { ok: true, status: 200, data: { data: [mockFunnel()] } };
-  }
-  if (method === "POST" && url.pathname === "/api/v1/funnels") {
-    return { ok: true, status: 201, data: { ...mockFunnel(), ...body5 } };
-  }
-  if (method === "GET" && url.pathname === `/api/v1/funnels/${mockFunnel().id}`) {
-    return { ok: true, status: 200, data: mockFunnel() };
-  }
-  if (method === "PATCH" && url.pathname === `/api/v1/funnels/${mockFunnel().id}`) {
-    return { ok: true, status: 200, data: { ...mockFunnel(), ...body5 } };
-  }
-  if (method === "DELETE" && url.pathname === `/api/v1/funnels/${mockFunnel().id}`) {
-    return { ok: true, status: 200, data: { ok: true } };
-  }
-  if (method === "GET" && url.pathname === `/api/v1/funnels/${mockFunnel().id}/run`) {
-    return { ok: true, status: 200, data: { total_sessions_analyzed: 2, steps: [{ step: 1, label: "Collection", url_pattern: "/collections/*", visitors: 2, drop_off_rate: 0, matched_pageviews: 2 }] } };
-  }
-  if (method === "GET" && url.pathname.endsWith("/workspace")) {
-    const files = [
-      ["experiment.config.json", JSON.stringify({ name: exp.name, storeUrl: exp.store_url, experimentSlug: exp.slug, variationSlug: "badge" }, null, 2) + "\n", "application/json", "config"],
-      ["metrics.json", '{"primary":null,"secondary":[]}\n', "application/json", "metrics"],
-      ["targeting.json", '{"url":[],"segments":[]}\n', "application/json", "targeting"],
-      ["src/index.js", "window.__apexOperatorFixture = true;\n", "application/javascript", "custom_js"],
-      ["src/index.scss", ".apex-operator-fixture { display: block; }\n", "text/x-scss", "custom_css"],
-      ["src/mutations.json", "[]\n", "application/json", "mutations"],
-      ["dev-doc.md", "# Fixture workspace\n", "text/markdown", "doc"],
-      ["brand.md", "# Fixture brand\n", "text/markdown", "brand"]
-    ];
-    return {
-      ok: true,
-      status: 200,
-      data: {
-        workspace: {
-          id: "workspace_1",
-          schemaVersion: 1,
-          status: "draft",
-          currentRevisionId: "revision_1",
-          updatedAt: "2026-07-30T00:00:00.000Z"
-        },
-        files: files.map(([filePath, content, contentType, kind5]) => ({
-          path: filePath,
-          kind: kind5,
-          contentType,
-          content,
-          sha256: (0, import_node_crypto.createHash)("sha256").update(content).digest("hex"),
-          sizeBytes: Buffer.byteLength(content, "utf8"),
-          updatedAt: "2026-07-30T00:00:00.000Z"
-        }))
-      }
-    };
-  }
-  if (method === "PUT" && url.pathname.includes("/variations/") && url.pathname.includes("/files/")) {
-    return { ok: true, status: 200, data: { ok: true } };
-  }
-  if (method === "POST" && url.pathname.endsWith("/build")) {
-    return {
-      ok: true,
-      status: 200,
-      data: { ok: true, mutationCount: 0, customCssBytes: 42, customJsBytes: 58 }
-    };
-  }
-  if (method === "POST" && url.pathname === "/api/v1/harness/sessions") {
-    return { ok: true, status: 201, data: { sessionId: "harness_1", sessionToken: "token", experimentId: exp.id, variationId: exp.variations?.[1]?.id ?? "variation_1", expiresAt: "2026-07-30T01:00:00.000Z", previewUrl: "https://preview.drip-apex.com/api/preview?pst=harness_1" } };
-  }
-  if (method === "POST" && url.pathname === "/api/v1/harness/sessions/harness_1/versions") {
-    return { ok: true, status: 201, data: { sessionId: "harness_1", version: 1, expiresAt: "2026-07-30T01:00:00.000Z", jsArtifactId: "asset_js", cssArtifactId: "asset_css" } };
-  }
-  if (method === "POST" && url.pathname === "/api/v1/harness/sessions/harness_1/publish") {
-    return { ok: true, status: 200, data: { ok: true } };
-  }
-  if (method === "GET" && url.pathname === "/api/v1/goals") {
-    if (process.env.APEX_CLI_MOCK_DOCTOR_STATE === "goals-paginated") {
-      const cursor = url.searchParams.get("cursor");
-      return cursor === "goal-page-2" ? {
-        ok: true,
-        status: 200,
-        data: {
-          data: [{ ...mockGoal(), id: "00000000-0000-4000-8000-0000000000f2", name: "Unreachable landing", type: "pageview", url_pattern: "^/never-visited-page$" }],
-          pagination: { has_more: false, next_cursor: null }
-        }
-      } : {
-        ok: true,
-        status: 200,
-        data: {
-          data: [mockGoal()],
-          pagination: { has_more: true, next_cursor: "goal-page-2" }
-        }
-      };
-    }
-    if (process.env.APEX_CLI_MOCK_GOAL_PAGES === "2") {
-      if (!url.searchParams.get("cursor")) {
-        return {
-          ok: true,
-          status: 200,
-          data: {
-            data: [mockGoal()],
-            pagination: { has_more: true, next_cursor: "goals_page_2" }
-          }
-        };
-      }
-      return {
-        ok: true,
-        status: 200,
-        data: {
-          data: [{
-            ...mockGoal(),
-            id: SECOND_PAGE_GOAL_ID,
-            name: "Fixture pageview",
-            type: "pageview",
-            event_name: null,
-            url_pattern: "bestellung-abgeschlossen"
-          }],
-          pagination: { has_more: false, next_cursor: null }
-        }
-      };
-    }
-    return {
-      ok: true,
-      status: 200,
-      data: {
-        data: [mockGoal(), mockPageScopedGoal()],
-        pagination: { has_more: false, next_cursor: null }
-      }
-    };
-  }
-  if (method === "GET" && url.pathname === "/api/v1/brand-context") {
-    return {
-      ok: true,
-      status: 200,
-      data: { data: mockBrandContext() }
-    };
-  }
-  if (method === "POST" && url.pathname === "/api/v1/goals") {
-    return {
-      ok: true,
-      status: 201,
-      data: { ...mockGoal(), ...body5 }
-    };
-  }
-  if (method === "PATCH" && url.pathname === `/api/v1/goals/${mockGoal().id}`) {
-    return {
-      ok: true,
-      status: 200,
-      data: { ...mockGoal(), ...body5 }
-    };
-  }
-  if (method === "GET" && url.pathname === "/api/v1/tracking/verify") {
-    if (process.env.APEX_CLI_MOCK_TRACKING_VERIFY === "unreachable") {
-      throw new Error("Mock tracking verify transport failure");
-    }
-    return {
-      ok: true,
-      status: 200,
-      data: {
-        ok: true,
-        window: { minutes: Number(url.searchParams.get("minutes") ?? 120) },
-        filters: {
-          experiment_id: url.searchParams.get("experiment_id"),
-          event_types: []
-        },
-        totals: {
-          events: 2,
-          unique_visitors: 2,
-          last_event_at: "2026-07-04T12:00:00.000Z",
-          event_types: { pageview: 2 }
-        },
-        recent_events: [
-          {
-            event_type: "pageview",
-            visitor_id: "visitor_1",
-            url: "https://example.com/products/demo",
-            timestamp: "2026-07-04T12:00:00.000Z"
-          }
-        ]
-      }
-    };
-  }
-  if (method === "GET" && url.pathname === "/api/v1/targeting/test") {
-    return {
-      ok: true,
-      status: 200,
-      data: {
-        url: url.searchParams.get("url"),
-        statuses: ["draft", "running", "paused"],
-        matching_count: 1,
-        experiments: [
-          {
-            experiment: exp,
-            matches: true,
-            has_url_rules: true,
-            rules: [
-              {
-                source: "url",
-                pattern: "/products/*",
-                type: "simple",
-                include: true,
-                matched: true,
-                matchType: "wildcard"
-              }
-            ],
-            caveats: [],
-            variations: exp.variations
-          }
-        ]
-      }
-    };
-  }
-  if (method === "POST" && url.pathname === "/api/v1/sos") {
-    return {
-      ok: true,
-      status: 201,
-      data: {
-        ticket: {
-          id: "00000000-0000-4000-8000-0000000000aa",
-          jira_key: "AWF-123",
-          jira_status: "Queued",
-          mapped_status: "queued",
-          type: body5?.type ?? "qa",
-          sub_class: null,
-          loom_url: body5?.loom_url ?? null,
-          description: body5?.description ?? "Fixture SOS",
-          created_at: "2026-07-04T12:00:00.000Z",
-          updated_at: "2026-07-04T12:00:00.000Z"
-        },
-        reused: false,
-        jira: {
-          key: "AWF-123",
-          url: "https://jira.example.test/browse/AWF-123"
-        }
-      }
-    };
-  }
-  if (method === "GET" && url.pathname === "/api/v1/sos/mine") {
-    return {
-      ok: true,
-      status: 200,
-      data: {
-        tickets: [
-          {
-            id: "00000000-0000-4000-8000-0000000000aa",
-            jira_key: "AWF-123",
-            mapped_status: "queued",
-            my_status: "queued",
-            type: "qa",
-            description: "Fixture SOS",
-            created_at: "2026-07-04T12:00:00.000Z",
-            updated_at: "2026-07-04T12:00:00.000Z"
-          }
-        ]
-      }
+      baseUrl: envUrl ?? "https://app.drip-apex.com",
+      userApiKey: fileCreds?.userApiKey,
+      userBaseUrl: fileCreds?.userBaseUrl ?? fileCreds?.baseUrl,
+      context: fileCreds?.context
     };
   }
-  if (method === "GET" && url.pathname === "/api/v1/me") {
-    return {
-      ok: true,
-      status: 200,
-      data: {
-        data: {
-          user_id: "00000000-0000-4000-8000-000000000001",
-          org_id: "00000000-0000-4000-8000-000000000002",
-          org_role: "owner",
-          scopes: ["account:read"],
-          expires_at: "2026-10-18T00:00:00.000Z"
-        }
-      }
-    };
+  return fileCreds;
+}
+function saveCredentials(creds) {
+  const { credentialKind: _kind, resolvedContext: _resolved, ...persisted } = creds;
+  import_node_fs2.default.mkdirSync(DRIP_DIR, { recursive: true });
+  import_node_fs2.default.writeFileSync(CREDS_FILE, JSON.stringify(persisted, null, 2) + "\n", {
+    mode: 384
+  });
+}
+function clearCredentials() {
+  try {
+    import_node_fs2.default.unlinkSync(CREDS_FILE);
+  } catch {
   }
-  if (method === "GET" && url.pathname === "/api/v1/account/profile") {
-    return { ok: true, status: 200, data: { data: { displayName: "Fixture User", avatarDataUrl: null } } };
+}
+function requireCredentials() {
+  const creds = getCredentials();
+  if (!creds) {
+    throw new CliError(
+      'Not logged in. Run "apex login" first, or set DRIP_API_KEY env var.',
+      EXIT_CODES.auth
+    );
   }
-  if (method === "GET" && url.pathname === "/api/v1/me/context") {
-    return { ok: true, status: 200, data: { data: { user_id: "00000000-0000-4000-8000-0000000000a1", key: { id: "00000000-0000-4000-8000-0000000000a2", account_scoped: true, org_id: null, expires_at: "2027-01-01T00:00:00.000Z" }, orgs: Array.from({ length: 6 }, (_, index) => ({ id: `00000000-0000-4000-8000-0000000001${index}`, name: `Fixture Org ${index + 1}`, role: index ? "member" : "owner", shops: [{ id: `00000000-0000-4000-8000-0000000002${index}`, name: `Fixture Shop ${index + 1}`, domain: `shop-${index + 1}.example.test`, role: index ? "viewer" : "admin" }, ...index === 0 ? [{ id: "00000000-0000-4000-8000-0000000003a0", name: "Twin Shop", domain: "twin-a.example.test", role: "admin" }, { id: "00000000-0000-4000-8000-0000000003a1", name: "Twin Shop", domain: "twin-b.example.test", role: "admin" }] : []] })) } } };
+  const context = resolveContext(creds, void 0, defaultCredentialKind(creds));
+  if (!process.env.DRIP_API_KEY && creds.userApiKey) {
+    setEnvelopeContext({ credential: "user", org_id: context.orgId ?? null, shop_id: context.shopId ?? null });
+    if (!context.shopId) {
+      throw new CliError(
+        'Shop context is required. Run "apex use", or pass --shop <id>.',
+        EXIT_CODES.validation,
+        { code: "shop_context_required", retry: "apex use <org>/<shop>", flag: "--shop" }
+      );
+    }
+    return { ...creds, apiKey: creds.userApiKey, baseUrl: creds.userBaseUrl ?? creds.baseUrl, credentialKind: "user", resolvedContext: context };
   }
-  if (method === "PATCH" && url.pathname === "/api/v1/account/profile") {
-    return { ok: true, status: 200, data: { data: { displayName: body5?.displayName ?? "Fixture User", avatarDataUrl: body5?.avatarDataUrl ?? null } } };
+  setEnvelopeContext({ credential: "shop", org_id: context.orgId ?? null, shop_id: context.shopId ?? null });
+  return { ...creds, credentialKind: "shop", resolvedContext: context };
+}
+function requireUserCredentials() {
+  const creds = getCredentials();
+  if (!creds?.userApiKey) {
+    throw new CliError(
+      'This command needs a user credential (apx_uk_...). Run "apex login" first.',
+      EXIT_CODES.auth
+    );
   }
-  if (method === "GET" && url.pathname === "/api/v1/keys") {
-    return { ok: true, status: 200, data: { data: [{ id: "00000000-0000-4000-8000-000000000011", name: "Fixture key", key_prefix: "apx_sk_live_fixture", type: "live_secret", permissions: ["*"], expires_at: null, created_at: "2026-07-20T00:00:00.000Z" }] } };
+  const context = resolveContext(creds, void 0, "user");
+  setEnvelopeContext({ credential: "user", org_id: context.orgId ?? null, shop_id: context.shopId ?? null });
+  return { ...creds, apiKey: creds.userApiKey, baseUrl: creds.userBaseUrl ?? creds.baseUrl, credentialKind: "user", resolvedContext: context };
+}
+var CONFIG_NAMES = [
+  ".drip.config.ts",
+  ".drip.config.js",
+  "drip.config.ts",
+  "drip.config.js"
+];
+function findConfigPath() {
+  const cwd = process.cwd();
+  for (const name of CONFIG_NAMES) {
+    const p = import_node_path2.default.join(cwd, name);
+    if (import_node_fs2.default.existsSync(p)) return p;
   }
-  if (method === "POST" && url.pathname === "/api/v1/keys") {
-    return { ok: true, status: 201, data: { data: { id: "00000000-0000-4000-8000-000000000011", name: body5?.name ?? "Fixture key", key: "apx_sk_live_fixture-value-once", key_prefix: "apx_sk_live_fixture", type: body5?.type ?? "live_secret", created_at: "2026-07-20T00:00:00.000Z" } } };
+  return null;
+}
+
+// ../api-client/src/http.ts
+var APEX_API_VERSION_HEADER = "x-apex-api-version";
+var SUPPORTED_APEX_API_VERSION = "1";
+function extractErrorMessage(json, status2) {
+  if (!json) return `HTTP ${status2}`;
+  const error = json.error;
+  if (typeof error === "string" && error.trim()) return error;
+  if (error && typeof error === "object") {
+    const message = error.message;
+    if (typeof message === "string" && message.trim()) return message;
   }
-  if (method === "DELETE" && url.pathname.startsWith("/api/v1/keys/")) {
-    return { ok: true, status: 200, data: { data: { deleted: true, id: url.pathname.split("/").pop() } } };
+  return typeof json.message === "string" && json.message.trim() ? json.message : `HTTP ${status2}`;
+}
+function extractErrorDetails(json) {
+  if (!json) return void 0;
+  const nested = json.error && typeof json.error === "object" && !Array.isArray(json.error) ? json.error : null;
+  const code = typeof json.code === "string" ? json.code : typeof nested?.code === "string" ? nested.code : void 0;
+  for (const value of [json.details, json.meta, nested?.details]) if (value && typeof value === "object" && !Array.isArray(value)) return { ...value, ...code ? { code } : {} };
+  const details = Object.fromEntries(["limit", "current", "max", "actual", "field", "code"].filter((key) => key in json).map((key) => [key, json[key]]));
+  if (code) details.code = code;
+  return Object.keys(details).length ? details : void 0;
+}
+var warnedAboutVersionSkew = false;
+function createHttpClient(creds, options) {
+  const warn3 = options.warn ?? ((message) => process.stderr.write(message));
+  function inspectVersion(headers) {
+    const value = headers.get(APEX_API_VERSION_HEADER);
+    if (!value || warnedAboutVersionSkew) return;
+    const version = Number(value);
+    if (!Number.isFinite(version) || version === Number(SUPPORTED_APEX_API_VERSION)) return;
+    warnedAboutVersionSkew = true;
+    warn3(version > 1 ? "CLI is behind the server \u2014 update.\n" : "Server API is older than this CLI supports.\n");
+  }
+  async function request2(method, path21, body5, requestTimeoutMs, form = false) {
+    const mock = options.transport?.(method, path21, body5);
+    if (mock !== void 0) {
+      const version = options.testTransportVersion?.();
+      if (version) inspectVersion(new Headers({ [APEX_API_VERSION_HEADER]: version }));
+      return mock;
+    }
+    const fallback2 = form ? 12e4 : 3e4;
+    const configured = Number(process.env.APEX_TIMEOUT_MS ?? fallback2);
+    const defaultMs = Number.isFinite(configured) && configured > 0 ? configured : fallback2;
+    const timeoutMs = requestTimeoutMs === void 0 ? defaultMs : Math.max(1, Math.min(defaultMs, requestTimeoutMs));
+    const headers = { Authorization: `Bearer ${creds.apiKey}` };
+    if (!form) headers["Content-Type"] = "application/json";
+    if (creds.credentialKind === "user" || creds.apiKey.startsWith("apx_uk_")) {
+      if (creds.resolvedContext?.orgId) headers["X-Apex-Org"] = creds.resolvedContext.orgId;
+      if (creds.resolvedContext?.shopId) headers["X-Apex-Shop"] = creds.resolvedContext.shopId;
+    }
+    let response;
+    try {
+      response = await fetch(`${creds.baseUrl}${path21}`, { method, headers, body: form ? body5 : body5 ? JSON.stringify(body5) : void 0, signal: AbortSignal.timeout(timeoutMs) });
+    } catch (error) {
+      return options.onNetworkError({ baseUrl: creds.baseUrl, timeoutMs, cause: error instanceof Error ? error.message : String(error) });
+    }
+    inspectVersion(response.headers);
+    const json = await response.json().catch(() => null);
+    if (!response.ok) return { ok: false, status: response.status, data: form ? void 0 : json, error: extractErrorMessage(json, response.status), errorDetails: extractErrorDetails(json), requestId: response.headers.get("x-request-id"), rateLimit: { limit: response.headers.get("x-ratelimit-limit"), remaining: response.headers.get("x-ratelimit-remaining"), reset: response.headers.get("x-ratelimit-reset") } };
+    return { ok: true, status: response.status, data: json };
   }
-  return {
-    ok: false,
-    status: 404,
-    error: `Mock API route not found: ${method} ${url.pathname}`
-  };
+  return { request: (method, path21, body5, timeoutMs) => request2(method, path21, body5, timeoutMs), requestForm: (method, path21, body5) => request2(method, path21, body5, void 0, true) };
+}
+
+// src/api.ts
+var testTransport;
+var testScreenshotDelay;
+var testScreenshotNow;
+function screenshotNow() {
+  return testScreenshotNow?.() ?? Date.now();
 }
 function getUserKeyIdentity(creds) {
   return request(
@@ -8845,8 +7581,8 @@ function getUserKeyIdentity(creds) {
 function getAccountContext(creds) {
   return userRequest(creds, "GET", "/api/v1/me/context");
 }
-function userRequest(creds, method, path20, body5) {
-  return request({ ...creds, apiKey: creds.userApiKey ?? "", baseUrl: creds.userBaseUrl ?? creds.baseUrl }, method, path20, body5);
+function userRequest(creds, method, path21, body5) {
+  return request({ ...creds, apiKey: creds.userApiKey ?? "", baseUrl: creds.userBaseUrl ?? creds.baseUrl }, method, path21, body5);
 }
 function getAccountProfile(creds) {
   return userRequest(creds, "GET", "/api/v1/account/profile");
@@ -8863,114 +7599,30 @@ function createUserManagedKey(creds, body5) {
 function revokeUserManagedKey(creds, id, shopId) {
   return userRequest(creds, "DELETE", `/api/v1/keys/${encodeURIComponent(id)}?shop_id=${encodeURIComponent(shopId)}`);
 }
-async function request(creds, method, path20, body5, requestTimeoutMs) {
-  const mock = mockResponse(method, path20, body5);
-  if (mock) {
-    const mockVersion = process.env.APEX_CLI_MOCK_API_VERSION;
-    if (mockVersion) warnAboutApiVersionSkew(new Headers({ [APEX_API_VERSION_HEADER]: mockVersion }));
-    return mock;
-  }
-  const url = `${creds.baseUrl}${path20}`;
-  const configuredTimeout = Number(process.env.APEX_TIMEOUT_MS ?? "30000");
-  const defaultTimeoutMs = Number.isFinite(configuredTimeout) && configuredTimeout > 0 ? configuredTimeout : 3e4;
-  const timeoutMs = requestTimeoutMs !== void 0 ? Math.max(1, Math.min(defaultTimeoutMs, requestTimeoutMs)) : defaultTimeoutMs;
-  const headers = {
-    Authorization: `Bearer ${creds.apiKey}`,
-    "Content-Type": "application/json"
-  };
-  if (creds.credentialKind === "user" || creds.apiKey.startsWith("apx_uk_")) {
-    if (creds.resolvedContext?.orgId) headers["X-Apex-Org"] = creds.resolvedContext.orgId;
-    if (creds.resolvedContext?.shopId) headers["X-Apex-Shop"] = creds.resolvedContext.shopId;
-  }
-  let res;
-  try {
-    res = await fetch(url, {
-      method,
-      headers,
-      body: body5 ? JSON.stringify(body5) : void 0,
-      signal: AbortSignal.timeout(timeoutMs)
-    });
-  } catch (error) {
-    const seconds = timeoutMs / 1e3;
-    throw new CliError(
-      `Could not reach ${creds.baseUrl}: check DRIP_BASE_URL / network; server did not respond within ${seconds}s.`,
-      EXIT_CODES.general,
-      { baseUrl: creds.baseUrl, timeoutMs, cause: error instanceof Error ? error.message : String(error) }
-    );
-  }
-  warnAboutApiVersionSkew(res.headers);
-  const json = await res.json().catch(() => null);
-  if (!res.ok) {
-    return {
-      ok: false,
-      status: res.status,
-      data: json,
-      error: extractErrorMessage(json, res.status),
-      errorDetails: extractErrorDetails(json),
-      requestId: res.headers.get("x-request-id"),
-      rateLimit: {
-        limit: res.headers.get("x-ratelimit-limit"),
-        remaining: res.headers.get("x-ratelimit-remaining"),
-        reset: res.headers.get("x-ratelimit-reset")
+var sharedClients = /* @__PURE__ */ new WeakMap();
+function sharedClient(creds) {
+  let client = sharedClients.get(creds);
+  if (!client) {
+    client = createHttpClient(creds, {
+      transport: testTransport,
+      testTransportVersion: () => testTransport ? process.env[["APEX", "CLI", "MOCK", "API", "VERSION"].join("_")] : void 0,
+      onNetworkError: (info) => {
+        throw new CliError(
+          `Could not reach ${info.baseUrl}: check DRIP_BASE_URL / network; server did not respond within ${info.timeoutMs / 1e3}s.`,
+          EXIT_CODES.general,
+          { ...info }
+        );
       }
-    };
-  }
-  return {
-    ok: true,
-    status: res.status,
-    // Do not unwrap `json.data` automatically: some endpoints return
-    // `{ data, pagination }`, and callers need the full shape.
-    data: json
-  };
-}
-async function requestForm(creds, method, path20, body5) {
-  const mock = mockResponse(method, path20, body5);
-  if (mock) {
-    const mockVersion = process.env.APEX_CLI_MOCK_API_VERSION;
-    if (mockVersion) warnAboutApiVersionSkew(new Headers({ [APEX_API_VERSION_HEADER]: mockVersion }));
-    return mock;
-  }
-  const url = `${creds.baseUrl}${path20}`;
-  const configuredTimeout = Number(process.env.APEX_TIMEOUT_MS ?? "120000");
-  const timeoutMs = Number.isFinite(configuredTimeout) && configuredTimeout > 0 ? configuredTimeout : 12e4;
-  let res;
-  try {
-    const headers = { Authorization: `Bearer ${creds.apiKey}` };
-    if (creds.credentialKind === "user" || creds.apiKey.startsWith("apx_uk_")) {
-      if (creds.resolvedContext?.orgId) headers["X-Apex-Org"] = creds.resolvedContext.orgId;
-      if (creds.resolvedContext?.shopId) headers["X-Apex-Shop"] = creds.resolvedContext.shopId;
-    }
-    res = await fetch(url, {
-      method,
-      headers,
-      body: body5,
-      signal: AbortSignal.timeout(timeoutMs)
     });
-  } catch (error) {
-    const seconds = timeoutMs / 1e3;
-    throw new CliError(
-      `Could not reach ${creds.baseUrl}: check DRIP_BASE_URL / network; server did not respond within ${seconds}s.`,
-      EXIT_CODES.general,
-      { baseUrl: creds.baseUrl, timeoutMs, cause: error instanceof Error ? error.message : String(error) }
-    );
-  }
-  warnAboutApiVersionSkew(res.headers);
-  const json = await res.json().catch(() => null);
-  if (!res.ok) {
-    return {
-      ok: false,
-      status: res.status,
-      error: extractErrorMessage(json, res.status),
-      errorDetails: extractErrorDetails(json),
-      requestId: res.headers.get("x-request-id"),
-      rateLimit: {
-        limit: res.headers.get("x-ratelimit-limit"),
-        remaining: res.headers.get("x-ratelimit-remaining"),
-        reset: res.headers.get("x-ratelimit-reset")
-      }
-    };
+    sharedClients.set(creds, client);
   }
-  return { ok: true, status: res.status, data: json };
+  return client;
+}
+async function request(creds, method, path21, body5, requestTimeoutMs) {
+  return sharedClient(creds).request(method, path21, body5, requestTimeoutMs);
+}
+async function requestForm(creds, method, path21, body5) {
+  return sharedClient(creds).requestForm(method, path21, body5);
 }
 function listExperiments(creds, opts) {
   const params = new URLSearchParams();
@@ -9006,9 +7658,6 @@ function upsertExperimentBySlug(creds, slug, body5) {
 function createExperiment(creds, body5) {
   return request(creds, "POST", "/api/v1/experiments", body5);
 }
-function startExperiment(creds, id) {
-  return request(creds, "POST", `/api/v1/experiments/${id}/start`);
-}
 function pauseExperiment(creds, id) {
   return request(creds, "POST", `/api/v1/experiments/${id}/pause`);
 }
@@ -9043,9 +7692,7 @@ function createExperimentScreenshots(creds, id, body5) {
   return request(creds, "POST", `/api/v1/experiments/${id}/screenshots`, body5);
 }
 async function getScreenshotJob(creds, jobId, timeoutMs) {
-  if (process.env.APEX_CLI_MOCK_API === "1" && ["deadline-processing", "deadline-completed"].includes(process.env.APEX_CLI_MOCK_SCREENSHOTS ?? "")) {
-    await new Promise((resolve) => setTimeout(resolve, 5));
-  }
+  await testScreenshotDelay?.(timeoutMs);
   return request(creds, "GET", `/api/v1/screenshots/${jobId}`, void 0, timeoutMs);
 }
 function planExperimentFilesystem(creds, id, body5) {
@@ -9259,8 +7906,8 @@ function getRoadmapItemHandoff(creds, id) {
     `/api/v1/roadmap/items/${encodeURIComponent(id)}/handoff`
   );
 }
-function createProxyPreviewSession(creds, experimentId, variationId, targetUrl) {
-  return request(creds, "POST", "/api/v1/preview-sessions", { experiment_id: experimentId, ...variationId ? { variation_id: variationId } : {}, ...targetUrl ? { target_url: targetUrl } : {} });
+function createProxyPreviewSession(creds, experimentId, variationId, targetUrl, ttlHours) {
+  return request(creds, "POST", "/api/v1/preview-sessions", { experiment_id: experimentId, ...variationId ? { variation_id: variationId } : {}, ...targetUrl ? { target_url: targetUrl } : {}, ...ttlHours !== void 0 ? { ttl_hours: ttlHours } : {} });
 }
 function listAuditLogs(creds, opts) {
   const p = new URLSearchParams();
@@ -9336,11 +7983,11 @@ function requestTargetingResource(creds, method, kind5, id, body5, limit, cursor
   if (limit) params.set("limit", String(limit));
   if (cursor) params.set("cursor", cursor);
   const query = params.toString();
-  const path20 = `/api/v1/${kind5}${id ? `/${id.split("/").map(encodeURIComponent).join("/")}` : ""}${query ? `?${query}` : ""}`;
-  return request(creds, method, path20, body5);
+  const path21 = `/api/v1/${kind5}${id ? `/${id.split("/").map(encodeURIComponent).join("/")}` : ""}${query ? `?${query}` : ""}`;
+  return request(creds, method, path21, body5);
 }
-function managedPath(kind5, id, action70) {
-  return `/api/v1/${kind5}${id ? `/${encodeURIComponent(id)}` : ""}${action70 ? `/${action70}` : ""}`;
+function managedPath(kind5, id, action69) {
+  return `/api/v1/${kind5}${id ? `/${encodeURIComponent(id)}` : ""}${action69 ? `/${action69}` : ""}`;
 }
 function listManagedDeliveries(creds, kind5, limit) {
   const q = limit ? `?limit=${limit}` : "";
@@ -9362,8 +8009,8 @@ function createManagedDelivery(creds, kind5, body5) {
 function updateManagedDelivery(creds, kind5, id, body5) {
   return request(creds, "PATCH", managedPath(kind5, id), body5);
 }
-function transitionManagedDelivery(creds, kind5, id, action70) {
-  return request(creds, "POST", managedPath(kind5, id, action70));
+function transitionManagedDelivery(creds, kind5, id, action69) {
+  return request(creds, "POST", managedPath(kind5, id, action69));
 }
 function listConfigResources(creds, family, opts) {
   const params = new URLSearchParams();
@@ -9620,6 +8267,11 @@ async function pickContext(tree) {
 init_source();
 var STATUS_COLORS = {
   draft: source_default.gray,
+  awaiting_client_approval: source_default.magenta,
+  changes_requested: source_default.red,
+  client_approved: source_default.magentaBright,
+  qa: source_default.cyan,
+  ready_to_launch: source_default.greenBright,
   running: source_default.green,
   paused: source_default.yellow,
   completed: source_default.blue
@@ -9710,8 +8362,8 @@ function parseFormBody(body5) {
   return new URLSearchParams(body5);
 }
 async function waitForBrowserLogin(baseUrl, userMode = false) {
-  const state = import_node_crypto2.default.randomBytes(24).toString("base64url");
-  const clientName = import_node_os4.default.hostname() || "Local machine";
+  const state = import_node_crypto.default.randomBytes(24).toString("base64url");
+  const clientName = import_node_os5.default.hostname() || "Local machine";
   return new Promise((resolve, reject) => {
     let settled = false;
     let timeout = null;
@@ -9962,9 +8614,42 @@ var useCommand = new Command("use").description("Set the current Apex organizati
 
 // src/commands/experiments.ts
 init_source();
-var import_node_crypto3 = __toESM(require("node:crypto"));
-var import_node_fs5 = __toESM(require("node:fs"));
-var import_node_path3 = __toESM(require("node:path"));
+var import_node_crypto2 = __toESM(require("node:crypto"));
+var import_node_fs6 = __toESM(require("node:fs"));
+var import_node_path4 = __toESM(require("node:path"));
+
+// ../api-client/src/qa-preview-url.ts
+function applyQaPreviewParams(url, params) {
+  url.searchParams.set("drip_force", `${params.experimentId}:${params.variationId}`);
+  url.searchParams.set("drip_experiment_id", params.experimentId);
+  url.searchParams.set("drip_variation_id", params.variationId);
+  url.searchParams.set("drip_qa", "1");
+  if (params.debug !== false) url.searchParams.set("drip_debug", "1");
+  if (params.devtools) url.searchParams.set("drip_devtools", "1");
+  if (params.screenshot) url.searchParams.set("drip_screenshot", "1");
+  if (params.qaSessionId) url.searchParams.set("drip_qa_session", params.qaSessionId);
+  if (params.harnessToken) url.searchParams.set("drip_harness", params.harnessToken);
+  return url;
+}
+function buildQaPreviewUrl(experiment, options = {}) {
+  const variation = options.variationName ? experiment.variations?.find((v) => v.name === options.variationName) : experiment.variations?.find((v) => !v.is_control) ?? experiment.variations?.[0];
+  const target = options.storeUrl ?? experiment.store_url;
+  if (!target || !variation) return null;
+  try {
+    return applyQaPreviewParams(new URL(target), { experimentId: experiment.id, variationId: variation.id, ...options });
+  } catch {
+    return null;
+  }
+}
+
+// src/lib/qa-preview-url.ts
+function buildQaPreviewUrl2(storeUrl, experimentId, variationId) {
+  const url = buildQaPreviewUrl({ id: experimentId, store_url: storeUrl, variations: [{ id: variationId, is_control: false }] });
+  if (!url) throw new TypeError("Invalid QA preview URL");
+  return url;
+}
+
+// src/commands/experiments.ts
 function formatDate(iso) {
   return new Date(iso).toLocaleDateString("en-US", {
     month: "short",
@@ -10070,25 +8755,25 @@ var FILESYSTEM_FILE_RE = new RegExp(
   `^(?:${pathAlternation(EXPERIMENT_FILESYSTEM_PATH_SCHEMA.topLevel)}|experiment/(?:${pathAlternation(EXPERIMENT_FILESYSTEM_PATH_SCHEMA.experiment)})|variations/[^/]+/(?:${pathAlternation(EXPERIMENT_FILESYSTEM_PATH_SCHEMA.variation)}))$`
 );
 function sha256Text(value) {
-  return import_node_crypto3.default.createHash("sha256").update(value).digest("hex");
+  return import_node_crypto2.default.createHash("sha256").update(value).digest("hex");
 }
 function folderPath(folder) {
-  return import_node_path3.default.resolve(process.cwd(), folder);
+  return import_node_path4.default.resolve(process.cwd(), folder);
 }
 function filesystemApexDir(folder) {
-  return import_node_path3.default.join(folder, ".apex");
+  return import_node_path4.default.join(folder, ".apex");
 }
 function filesystemSessionPath(folder) {
-  return import_node_path3.default.join(filesystemApexDir(folder), "experiment-filesystem.json");
+  return import_node_path4.default.join(filesystemApexDir(folder), "experiment-filesystem.json");
 }
 function writeFilesystemSession(folder, session) {
-  import_node_fs5.default.mkdirSync(filesystemApexDir(folder), { recursive: true });
-  import_node_fs5.default.writeFileSync(
-    import_node_path3.default.join(filesystemApexDir(folder), ".gitignore"),
+  import_node_fs6.default.mkdirSync(filesystemApexDir(folder), { recursive: true });
+  import_node_fs6.default.writeFileSync(
+    import_node_path4.default.join(filesystemApexDir(folder), ".gitignore"),
     "experiment-filesystem.json\n",
     "utf8"
   );
-  import_node_fs5.default.writeFileSync(
+  import_node_fs6.default.writeFileSync(
     filesystemSessionPath(folder),
     `${JSON.stringify(session, null, 2)}
 `,
@@ -10097,14 +8782,14 @@ function writeFilesystemSession(folder, session) {
 }
 function readFilesystemSession(folder) {
   const filePath = filesystemSessionPath(folder);
-  if (!import_node_fs5.default.existsSync(filePath)) {
-    const workspaceMarker = import_node_path3.default.join(filesystemApexDir(folder), "session.json");
-    if (import_node_fs5.default.existsSync(workspaceMarker)) {
+  if (!import_node_fs6.default.existsSync(filePath)) {
+    const workspaceMarker = import_node_path4.default.join(filesystemApexDir(folder), "session.json");
+    if (import_node_fs6.default.existsSync(workspaceMarker)) {
       throw new Error("This folder is an operator workspace (apex workspace \u2026), not an experiment filesystem \u2014 run `apex workspace status` here, or `apex experiments pull` into a different folder.");
     }
     throw new Error(`Missing ${filePath}. Run apex experiments pull first.`);
   }
-  return JSON.parse(import_node_fs5.default.readFileSync(filePath, "utf8"));
+  return JSON.parse(import_node_fs6.default.readFileSync(filePath, "utf8"));
 }
 function validateFilesystemPath(relativePath) {
   const normalized = relativePath.replace(/\\/g, "/").replace(/^\/+/, "");
@@ -10120,38 +8805,38 @@ function writeExperimentFilesystemFiles(folder, files) {
   }));
   for (const file of validatedFiles) {
     const relativePath = file.relativePath;
-    const absPath = import_node_path3.default.join(folder, relativePath);
-    import_node_fs5.default.mkdirSync(import_node_path3.default.dirname(absPath), { recursive: true });
-    import_node_fs5.default.writeFileSync(absPath, file.content, "utf8");
+    const absPath = import_node_path4.default.join(folder, relativePath);
+    import_node_fs6.default.mkdirSync(import_node_path4.default.dirname(absPath), { recursive: true });
+    import_node_fs6.default.writeFileSync(absPath, file.content, "utf8");
   }
 }
 function listExperimentFilesystemFiles(folder) {
   const files = [];
   for (const fileName of EXPERIMENT_FILESYSTEM_PATH_SCHEMA.topLevel) {
-    const absPath = import_node_path3.default.join(folder, fileName);
-    if (!import_node_fs5.default.existsSync(absPath)) continue;
-    const content = import_node_fs5.default.readFileSync(absPath, "utf8");
+    const absPath = import_node_path4.default.join(folder, fileName);
+    if (!import_node_fs6.default.existsSync(absPath)) continue;
+    const content = import_node_fs6.default.readFileSync(absPath, "utf8");
     files.push({ path: fileName, content, sha256: sha256Text(content) });
   }
   for (const fileName of EXPERIMENT_FILESYSTEM_PATH_SCHEMA.experiment) {
     const relativePath = `experiment/${fileName}`;
-    const absPath = import_node_path3.default.join(folder, relativePath);
-    if (!import_node_fs5.default.existsSync(absPath)) continue;
-    const content = import_node_fs5.default.readFileSync(absPath, "utf8");
+    const absPath = import_node_path4.default.join(folder, relativePath);
+    if (!import_node_fs6.default.existsSync(absPath)) continue;
+    const content = import_node_fs6.default.readFileSync(absPath, "utf8");
     files.push({ path: relativePath, content, sha256: sha256Text(content) });
   }
-  const variationsRoot = import_node_path3.default.join(folder, "variations");
-  if (import_node_fs5.default.existsSync(variationsRoot)) {
-    for (const variationDir of import_node_fs5.default.readdirSync(variationsRoot, { withFileTypes: true })) {
+  const variationsRoot = import_node_path4.default.join(folder, "variations");
+  if (import_node_fs6.default.existsSync(variationsRoot)) {
+    for (const variationDir of import_node_fs6.default.readdirSync(variationsRoot, { withFileTypes: true })) {
       if (!variationDir.isDirectory()) continue;
-      const base = import_node_path3.default.join(variationsRoot, variationDir.name);
+      const base = import_node_path4.default.join(variationsRoot, variationDir.name);
       for (const fileName of EXPERIMENT_FILESYSTEM_PATH_SCHEMA.variation) {
-        const absPath = import_node_path3.default.join(base, fileName);
-        if (!import_node_fs5.default.existsSync(absPath)) continue;
+        const absPath = import_node_path4.default.join(base, fileName);
+        if (!import_node_fs6.default.existsSync(absPath)) continue;
         const relativePath = validateFilesystemPath(
-          import_node_path3.default.relative(folder, absPath)
+          import_node_path4.default.relative(folder, absPath)
         );
-        const content = import_node_fs5.default.readFileSync(absPath, "utf8");
+        const content = import_node_fs6.default.readFileSync(absPath, "utf8");
         files.push({ path: relativePath, content, sha256: sha256Text(content) });
       }
     }
@@ -10193,6 +8878,39 @@ function blockingIssueSummary(issues) {
   const remaining = issues.length - 1;
   return `Experiment filesystem plan has errors. ${issues[0].message}${remaining ? ` and ${remaining} more` : ""}`;
 }
+async function getQaPreviewUrls(creds, experimentId) {
+  try {
+    const res = await getExperiment(creds, experimentId);
+    const storeUrl = res.data?.store_url;
+    if (!res.ok || !res.data || !storeUrl) {
+      return { previewUrls: [], unavailable: true };
+    }
+    const experiment = res.data;
+    const previewUrls = (experiment.variations ?? []).filter((variation) => !variation.is_control).map((variation) => ({
+      variationId: variation.id,
+      variationName: variation.name,
+      url: buildQaPreviewUrl2(
+        storeUrl,
+        experiment.id,
+        variation.id
+      ).toString()
+    }));
+    return { previewUrls, unavailable: false };
+  } catch {
+    return { previewUrls: [], unavailable: true };
+  }
+}
+function printQaPreviewUrls(experimentId, result) {
+  if (result.unavailable) {
+    console.log(source_default.dim(`Preview: apex experiments get ${experimentId} / drip preview ${experimentId}`));
+    return;
+  }
+  for (const preview of result.previewUrls) {
+    console.log(
+      `Preview (interactive, works while draft \u2014 no on-site editing needed): ${preview.url}`
+    );
+  }
+}
 function printQaRun(run3) {
   console.log();
   console.log(source_default.bold(`QA run ${run3.id}`));
@@ -10236,7 +8954,7 @@ async function confirmApply(message) {
 function parseEvidenceInput(value) {
   if (!value) return void 0;
   const source = value.startsWith("@") ? value.slice(1) : value;
-  const text = value.startsWith("@") || import_node_fs5.default.existsSync(source) ? import_node_fs5.default.readFileSync(import_node_path3.default.resolve(process.cwd(), source), "utf8") : value;
+  const text = value.startsWith("@") || import_node_fs6.default.existsSync(source) ? import_node_fs6.default.readFileSync(import_node_path4.default.resolve(process.cwd(), source), "utf8") : value;
   const parsed = JSON.parse(text);
   if (!parsed || typeof parsed !== "object" || Array.isArray(parsed)) {
     throw new Error("QA evidence must be a JSON object");
@@ -10260,7 +8978,7 @@ async function resolveExperimentForFilesystemOrId(value) {
     return {
       experimentId: session.experimentId,
       folder: candidate,
-      label: import_node_path3.default.basename(candidate)
+      label: import_node_path4.default.basename(candidate)
     };
   }
   const exp = await resolveExperiment(value);
@@ -10306,7 +9024,7 @@ async function resolveExperiment(idOrSlug) {
     res.errorDetails
   );
 }
-var list = new Command("list").alias("ls").description("List experiments (archived experiments are hidden by default)").option("-s, --status <status>", "Filter by status (draft|running|paused|completed)").option("-n, --limit <n>", "Max results", "20").option("--include-archived", "Include archived experiments").action(async function action3(opts) {
+var list = new Command("list").alias("ls").description("List experiments (archived experiments are hidden by default)").option("-s, --status <status>", "Filter by status (draft|awaiting_client_approval|changes_requested|client_approved|qa|ready_to_launch|running|paused|completed)").option("-n, --limit <n>", "Max results", "20").option("--include-archived", "Include archived experiments").action(async function action3(opts) {
   const creds = requireCredentials();
   const ora2 = (await Promise.resolve().then(() => (init_ora(), ora_exports))).default;
   const spinner = process.stderr.isTTY ? ora2("Fetching experiments...").start() : null;
@@ -10506,25 +9224,7 @@ var create = new Command("create").description("Create a new experiment").requir
   spinner?.succeed("Experiment created");
   output(this, { experiment: res.data }, () => printExperiment(res.data));
 });
-var start = new Command("start").description("Start an experiment").argument("<id-or-slug>", "Experiment ID or slug").action(async function action7(idOrSlug) {
-  const creds = requireCredentials();
-  const ora2 = (await Promise.resolve().then(() => (init_ora(), ora_exports))).default;
-  const spinner = ora2("Starting experiment...").start();
-  const exp = await resolveExperiment(idOrSlug);
-  if (!exp) {
-    spinner.fail(`Experiment "${idOrSlug}" not found`);
-    fail(this, `Experiment "${idOrSlug}" not found`);
-  }
-  const res = await startExperiment(creds, exp.id);
-  if (!res.ok) {
-    spinner.fail("Failed to start experiment");
-    fail(this, res.error ?? "Failed to start experiment", classifyStatus(res.status), res.errorDetails);
-  }
-  output(this, { experiment: { id: exp.id, name: exp.name, status: "running" } }, () => {
-    spinner.succeed(`Experiment "${exp.name}" is now ${statusBadge("running")}`);
-  });
-});
-var pause = new Command("pause").description("Pause a running experiment").argument("<id-or-slug>", "Experiment ID or slug").action(async function action8(idOrSlug) {
+var pause = new Command("pause").description("Pause a running experiment").argument("<id-or-slug>", "Experiment ID or slug").action(async function action7(idOrSlug) {
   const creds = requireCredentials();
   const ora2 = (await Promise.resolve().then(() => (init_ora(), ora_exports))).default;
   const spinner = ora2("Pausing experiment...").start();
@@ -10542,7 +9242,7 @@ var pause = new Command("pause").description("Pause a running experiment").argum
     spinner.succeed(`Experiment "${exp.name}" is now ${statusBadge("paused")}`);
   });
 });
-var complete = new Command("complete").description("Complete/stop an experiment").argument("<id-or-slug>", "Experiment ID or slug").action(async function action9(idOrSlug) {
+var complete = new Command("complete").description("Complete/stop an experiment").argument("<id-or-slug>", "Experiment ID or slug").action(async function action8(idOrSlug) {
   const creds = requireCredentials();
   const ora2 = (await Promise.resolve().then(() => (init_ora(), ora_exports))).default;
   const spinner = ora2("Completing experiment...").start();
@@ -10560,7 +9260,7 @@ var complete = new Command("complete").description("Complete/stop an experiment"
     spinner.succeed(`Experiment "${exp.name}" is now ${statusBadge("completed")}`);
   });
 });
-var del = new Command("delete").alias("rm").description("Delete an experiment").argument("<id-or-slug>", "Experiment ID or slug").option("-f, --force", "Skip confirmation").action(async function action10(idOrSlug, opts) {
+var del = new Command("delete").alias("rm").description("Delete an experiment").argument("<id-or-slug>", "Experiment ID or slug").option("-f, --force", "Skip confirmation").action(async function action9(idOrSlug, opts) {
   const creds = requireCredentials();
   const ora2 = (await Promise.resolve().then(() => (init_ora(), ora_exports))).default;
   const exp = await resolveExperiment(idOrSlug);
@@ -10602,7 +9302,7 @@ var del = new Command("delete").alias("rm").description("Delete an experiment").
   }
   output(this, { experiment: { id: exp.id, name: exp.name }, deleted: true }, () => spinner.succeed(`Experiment "${exp.name}" deleted.`));
 });
-var pullFilesystem = new Command("pull").description("Pull an experiment as an editable filesystem").argument("<id-or-slug>", "Experiment ID or slug").option("--out <path>", "Target folder").addOption(new Option("--dir <folder>", "Legacy alias for --out").hideHelp()).action(async function action11(idOrSlug, opts) {
+var pullFilesystem = new Command("pull").description("Pull an experiment as an editable filesystem").argument("<id-or-slug>", "Experiment ID or slug").option("--out <path>", "Target folder").addOption(new Option("--dir <folder>", "Legacy alias for --out").hideHelp()).action(async function action10(idOrSlug, opts) {
   const creds = requireCredentials();
   const ora2 = (await Promise.resolve().then(() => (init_ora(), ora_exports))).default;
   const spinner = ora2("Pulling experiment filesystem...").start();
@@ -10622,7 +9322,7 @@ var pullFilesystem = new Command("pull").description("Pull an experiment as an e
         res.data.files.map((file) => [file.path, { sha256: file.sha256 }])
       )
     });
-    output(this, { folder, experimentId: exp.id, files: res.data.files.map((file) => import_node_path3.default.join(folder, file.path)) }, () => {
+    output(this, { folder, experimentId: exp.id, files: res.data.files.map((file) => import_node_path4.default.join(folder, file.path)) }, () => {
       spinner.succeed(`Pulled ${exp.name}`);
       console.log(source_default.cyan(folder));
     });
@@ -10631,7 +9331,7 @@ var pullFilesystem = new Command("pull").description("Pull an experiment as an e
     throw error;
   }
 });
-var planFilesystem = new Command("plan").description("Plan experiment filesystem changes").argument("[folder]", "Experiment filesystem folder", ".").action(async function action12(folderArg) {
+var planFilesystem = new Command("plan").description("Plan experiment filesystem changes").argument("[folder]", "Experiment filesystem folder", ".").action(async function action11(folderArg) {
   const creds = requireCredentials();
   try {
     const folder = folderPath(folderArg);
@@ -10654,7 +9354,7 @@ var planFilesystem = new Command("plan").description("Plan experiment filesystem
     fail(this, error instanceof Error ? error.message : String(error));
   }
 });
-var applyFilesystem = new Command("apply").description("Apply experiment filesystem changes to Apex").argument("[folder]", "Experiment filesystem folder", ".").option("-f, --force", "Skip confirmation when QA will be invalidated").action(async function action13(folderArg, opts) {
+var applyFilesystem = new Command("apply").description("Apply experiment filesystem changes to Apex").argument("[folder]", "Experiment filesystem folder", ".").option("-f, --force", "Skip confirmation when QA will be invalidated").action(async function action12(folderArg, opts) {
   const creds = requireCredentials();
   const ora2 = (await Promise.resolve().then(() => (init_ora(), ora_exports))).default;
   try {
@@ -10711,15 +9411,18 @@ var applyFilesystem = new Command("apply").description("Apply experiment filesys
       folder,
       session.experimentId
     );
-    output(this, { folder, experimentId: session.experimentId, applied: true, plan: planRes.data, result: res.data }, () => {
+    const previewResult = await getQaPreviewUrls(creds, session.experimentId);
+    const { previewUrls } = previewResult;
+    output(this, { folder, experimentId: session.experimentId, applied: true, plan: planRes.data, result: res.data, previewUrls }, () => {
       printFilesystemPlan(planRes.data);
+      printQaPreviewUrls(session.experimentId, previewResult);
     });
   } catch (error) {
     if (error instanceof CliError) throw error;
     fail(this, error instanceof Error ? error.message : String(error));
   }
 });
-var qaStatus = new Command("status").description("Show or create the latest experiment QA run").argument("[folder-or-id]", "Experiment filesystem folder, ID, or slug", ".").option("--json", "Print the QA run in the standard JSON envelope").action(async function action14(target) {
+var qaStatus = new Command("status").description("Show or create the latest experiment QA run").argument("[folder-or-id]", "Experiment filesystem folder, ID, or slug", ".").option("--json", "Print the QA run in the standard JSON envelope").action(async function action13(target) {
   const creds = requireCredentials();
   const ora2 = (await Promise.resolve().then(() => (init_ora(), ora_exports))).default;
   const spinner = ora2("Fetching QA run...").start();
@@ -10740,7 +9443,7 @@ var qaStatus = new Command("status").description("Show or create the latest expe
   }
 });
 var qaCheck = new Command("check").description("Update one QA checklist item with status, notes, and evidence").argument("[folder-or-id]", "Experiment filesystem folder, ID, or slug", ".").requiredOption("--item <id>", "Checklist item id").requiredOption("--status <status>", "pending|pass|warning|fail|accepted|skipped").option("--notes <text>", "Checklist notes").option("--evidence <json-or-path>", "Evidence JSON object or @path/to/evidence.json").option("--json", "Print raw QA run JSON").action(
-  async function action15(target, opts) {
+  async function action14(target, opts) {
     const creds = requireCredentials();
     const ora2 = (await Promise.resolve().then(() => (init_ora(), ora_exports))).default;
     const spinner = ora2("Updating QA checklist...").start();
@@ -10779,7 +9482,7 @@ var qaCheck = new Command("check").description("Update one QA checklist item wit
   }
 );
 var qaNotes = new Command("notes").description("Update QA run notes or acceptance criteria summary").argument("[folder-or-id]", "Experiment filesystem folder, ID, or slug", ".").option("--notes <text>", "QA run notes").option("--acceptance <text>", "Acceptance criteria summary").option("--json", "Print raw QA run JSON").action(
-  async function action16(target, opts) {
+  async function action15(target, opts) {
     const creds = requireCredentials();
     const ora2 = (await Promise.resolve().then(() => (init_ora(), ora_exports))).default;
     const spinner = ora2("Updating QA notes...").start();
@@ -10814,7 +9517,7 @@ var qaNotes = new Command("notes").description("Update QA run notes or acceptanc
     }
   }
 );
-var qaApprove = new Command("approve").description("Mark QA done after the checklist gates are ready").argument("[folder-or-id]", "Experiment filesystem folder, ID, or slug", ".").action(async function action17(target) {
+var qaApprove = new Command("approve").description("Mark QA done after the checklist gates are ready").argument("[folder-or-id]", "Experiment filesystem folder, ID, or slug", ".").action(async function action16(target) {
   const creds = requireCredentials();
   const ora2 = (await Promise.resolve().then(() => (init_ora(), ora_exports))).default;
   const spinner = ora2("Approving QA...").start();
@@ -10833,7 +9536,7 @@ var qaApprove = new Command("approve").description("Mark QA done after the check
     throw error;
   }
 });
-var qaReopen = new Command("reopen").description("Reopen QA and clear scheduled launch state").argument("[folder-or-id]", "Experiment filesystem folder, ID, or slug", ".").action(async function action18(target) {
+var qaReopen = new Command("reopen").description("Reopen QA and clear scheduled launch state").argument("[folder-or-id]", "Experiment filesystem folder, ID, or slug", ".").action(async function action17(target) {
   const creds = requireCredentials();
   const ora2 = (await Promise.resolve().then(() => (init_ora(), ora_exports))).default;
   const spinner = ora2("Reopening QA...").start();
@@ -10856,7 +9559,7 @@ var qa = new Command("qa").description("Manage experiment QA runs from the CLI")
 var SCREENSHOT_DEVICES = ["desktop_chrome", "iphone_15_pro", "galaxy_s24", "ipad_pro", "desktop_safari"];
 var safeFilenamePart = (value) => value.toLowerCase().replace(/[^a-z0-9]+/g, "-").replace(/^-|-$/g, "") || "screenshot";
 var commaList = (value) => value.split(",").map((item) => item.trim()).filter(Boolean);
-var screenshots = new Command("screenshots").description("Force-assign every capture, including control, to its variation server-side for deterministic screenshots").argument("<experimentRef>", "Experiment ID or slug").option("--url <target>", "Target URL override (not supported by the current v1 API)").option("--devices <list>", `Comma-separated devices (default: ${SCREENSHOT_DEVICES.join(",")})`).option("--variations <list>", "Comma-separated treatment IDs, slugs, or names; control is always included and force-assigned").option("--out <dir>", "Download directory", ".").option("--json", "Print the completed raw job payload with signed URLs").option("--timeout <seconds>", "Maximum wait for completion; finished results are always downloaded", "300").action(async function action19(experimentRef, opts) {
+var screenshots = new Command("screenshots").description("Force-assign every capture, including control, to its variation server-side for deterministic screenshots").argument("<experimentRef>", "Experiment ID or slug").option("--url <target>", "Target URL override (not supported by the current v1 API)").option("--devices <list>", `Comma-separated devices (default: ${SCREENSHOT_DEVICES.join(",")})`).option("--variations <list>", "Comma-separated treatment IDs, slugs, or names; control is always included and force-assigned").option("--out <dir>", "Download directory", ".").option("--json", "Print the completed raw job payload with signed URLs").option("--timeout <seconds>", "Maximum wait for completion; finished results are always downloaded", "300").action(async function action18(experimentRef, opts) {
   if (opts.url) fail(this, "--url is not supported by the current screenshot v1 API.", EXIT_CODES.validation);
   const timeoutSeconds = Number(opts.timeout);
   if (!Number.isFinite(timeoutSeconds) || timeoutSeconds <= 0) fail(this, "--timeout must be a positive number of seconds.", EXIT_CODES.validation);
@@ -10889,25 +9592,25 @@ var screenshots = new Command("screenshots").description("Force-assign every cap
   const created = await createExperimentScreenshots(creds, experiment.id, { devices, variation_ids: variationIds });
   if (!created.ok || !created.data) fail(this, created.error ?? "Failed to create screenshot job", classifyStatus(created.status), created.errorDetails);
   let job = created.data;
-  const deadline = Date.now() + timeoutSeconds * 1e3;
-  let delayMs = process.env.APEX_CLI_MOCK_API === "1" ? 1 : 1e3;
+  const deadline = screenshotNow() + timeoutSeconds * 1e3;
+  let delayMs = cliTestSetting("API") === "1" ? 1 : 1e3;
   let consecutiveTransientFailures = 0;
   while (job.status === "queued" || job.status === "processing") {
-    if (Date.now() >= deadline) fail(this, `Screenshot job ${job.job_id} timed out after ${timeoutSeconds}s.`);
-    await new Promise((resolve) => setTimeout(resolve, Math.min(delayMs, Math.max(0, deadline - Date.now()))));
-    if (Date.now() >= deadline) fail(this, `Screenshot job ${job.job_id} timed out after ${timeoutSeconds}s.`);
+    if (screenshotNow() >= deadline) fail(this, `Screenshot job ${job.job_id} timed out after ${timeoutSeconds}s.`);
+    await new Promise((resolve) => setTimeout(resolve, Math.min(delayMs, Math.max(0, deadline - screenshotNow()))));
+    if (screenshotNow() >= deadline) fail(this, `Screenshot job ${job.job_id} timed out after ${timeoutSeconds}s.`);
     let polled;
     try {
-      polled = await getScreenshotJob(creds, job.job_id, Math.max(1, deadline - Date.now()));
+      polled = await getScreenshotJob(creds, job.job_id, Math.max(1, deadline - screenshotNow()));
     } catch (error) {
-      if (Date.now() >= deadline) fail(this, `Screenshot job ${job.job_id} timed out after ${timeoutSeconds}s.`);
+      if (screenshotNow() >= deadline) fail(this, `Screenshot job ${job.job_id} timed out after ${timeoutSeconds}s.`);
       consecutiveTransientFailures += 1;
       if (consecutiveTransientFailures > 3) throw error;
       delayMs = Math.min(Math.round(delayMs * 1.6), 1e4);
       continue;
     }
     const polledToTerminalState = polled.ok && polled.data && polled.data.status !== "queued" && polled.data.status !== "processing";
-    if (!polledToTerminalState && Date.now() >= deadline) {
+    if (!polledToTerminalState && screenshotNow() >= deadline) {
       fail(this, `Screenshot job ${job.job_id} timed out after ${timeoutSeconds}s.`);
     }
     if (!polled.ok || !polled.data) {
@@ -10923,8 +9626,8 @@ var screenshots = new Command("screenshots").description("Force-assign every cap
     delayMs = Math.min(Math.round(delayMs * 1.6), 1e4);
   }
   if (job.status === "failed") fail(this, `Screenshot job failed: ${job.error ?? "unknown error"}`);
-  const outputDir = import_node_path3.default.resolve(process.cwd(), opts.out);
-  import_node_fs5.default.mkdirSync(outputDir, { recursive: true });
+  const outputDir = import_node_path4.default.resolve(process.cwd(), opts.out);
+  import_node_fs6.default.mkdirSync(outputDir, { recursive: true });
   const rows = [];
   const errors = [];
   const usedFilenames = /* @__PURE__ */ new Set();
@@ -10961,7 +9664,7 @@ var screenshots = new Command("screenshots").description("Force-assign every cap
       try {
         const response = await fetch(url);
         if (!response.ok) throw new Error(`HTTP ${response.status}`);
-        await import_node_fs5.default.promises.writeFile(import_node_path3.default.join(outputDir, filename), Buffer.from(await response.arrayBuffer()));
+        await import_node_fs6.default.promises.writeFile(import_node_path4.default.join(outputDir, filename), Buffer.from(await response.arrayBuffer()));
         workerResults.push({ index, row: [variation.name, device, filename] });
       } catch (error) {
         workerResults.push({ index, error: `${variation.name}/${device}: ${error instanceof Error ? error.message : String(error)}` });
@@ -10982,7 +9685,7 @@ var screenshots = new Command("screenshots").description("Force-assign every cap
     printTable(["VARIATION", "DEVICE", "FILE"], rows, [24, 20, 48]);
   });
 });
-var experimentsCommand = new Command("experiments").alias("exp").description("Manage experiments").addCommand(list).addCommand(get).addCommand(results).addCommand(create).addCommand(start).addCommand(pause).addCommand(complete).addCommand(del).addCommand(pullFilesystem).addCommand(planFilesystem).addCommand(applyFilesystem).addCommand(screenshots).addCommand(qa).addHelpText("after", `
+var experimentsCommand = new Command("experiments").alias("exp").description("Manage experiments").addCommand(list).addCommand(get).addCommand(results).addCommand(create).addCommand(pause).addCommand(complete).addCommand(del).addCommand(pullFilesystem).addCommand(planFilesystem).addCommand(applyFilesystem).addCommand(screenshots).addCommand(qa).addHelpText("after", `
 Examples:
   apex experiments list --status running
   apex experiments get checkout-banner
@@ -10992,9 +9695,9 @@ Examples:
 
 // src/commands/push.ts
 init_source();
-var import_node_fs6 = __toESM(require("node:fs"));
-var import_node_os5 = __toESM(require("node:os"));
-var import_node_path4 = __toESM(require("node:path"));
+var import_node_fs7 = __toESM(require("node:fs"));
+var import_node_os6 = __toESM(require("node:os"));
+var import_node_path5 = __toESM(require("node:path"));
 var import_node_url2 = require("node:url");
 function toApiBody(exp) {
   return {
@@ -11018,7 +9721,7 @@ function toApiBody(exp) {
   };
 }
 async function importConfigModule(absPath) {
-  const ext = import_node_path4.default.extname(absPath).toLowerCase();
+  const ext = import_node_path5.default.extname(absPath).toLowerCase();
   if (ext === ".js" || ext === ".mjs" || ext === ".cjs") {
     return await import((0, import_node_url2.pathToFileURL)(absPath).href);
   }
@@ -11032,8 +9735,8 @@ async function importConfigModule(absPath) {
 ` + (err instanceof Error ? err.message : String(err))
       );
     }
-    const tmpDir = import_node_fs6.default.mkdtempSync(import_node_path4.default.join(import_node_os5.default.tmpdir(), "drip-config-"));
-    const outFile = import_node_path4.default.join(tmpDir, "config.mjs");
+    const tmpDir = import_node_fs7.default.mkdtempSync(import_node_path5.default.join(import_node_os6.default.tmpdir(), "drip-config-"));
+    const outFile = import_node_path5.default.join(tmpDir, "config.mjs");
     try {
       await esbuild.build({
         entryPoints: [absPath],
@@ -11049,7 +9752,7 @@ async function importConfigModule(absPath) {
       return await import(href);
     } finally {
       try {
-        import_node_fs6.default.rmSync(tmpDir, { recursive: true, force: true });
+        import_node_fs7.default.rmSync(tmpDir, { recursive: true, force: true });
       } catch {
       }
     }
@@ -11063,7 +9766,7 @@ function isRecord(value) {
 }
 var pushCommand = new Command("push").description(
   "Push experiment definitions from config file to the API (idempotent by slug)"
-).option("-c, --config <path>", "Config file path").option("--dry-run", "Show what would be pushed without making changes").action(async function action20(opts) {
+).option("-c, --config <path>", "Config file path").option("--dry-run", "Show what would be pushed without making changes").action(async function action19(opts) {
   const creds = requireCredentials();
   const ora2 = (await Promise.resolve().then(() => (init_ora(), ora_exports))).default;
   const configPath = opts.config ?? findConfigPath();
@@ -11077,7 +9780,7 @@ var pushCommand = new Command("push").description(
   const spinner = process.stderr.isTTY ? ora2(`Loading config from ${source_default.cyan(configPath)}...`).start() : null;
   let experiments;
   try {
-    const absPath = import_node_path4.default.resolve(configPath);
+    const absPath = import_node_path5.default.resolve(configPath);
     const mod = await importConfigModule(absPath);
     const exported = isRecord(mod) && "default" in mod ? mod.default : mod;
     if (Array.isArray(exported)) {
@@ -11181,17 +9884,22 @@ var pushCommand = new Command("push").description(
 
 // src/commands/preview.ts
 init_source();
-var previewCommand = new Command("preview").description("Open QA preview URL for an experiment variation").argument("<id-or-slug>", "Experiment ID or slug").argument("[variation-id]", "Variation ID (defaults to first non-control)").option("--store-url <url>", "Override experiment store_url (target website URL)").option("--proxy", "Create an artifact-injecting proxy preview").option("--no-open", "Print URL instead of opening browser").action(async (idOrSlug, variationId, opts) => {
+var previewCommand = new Command("preview").description("Open QA preview URL for an experiment variation").argument("<id-or-slug>", "Experiment ID or slug").argument("[variation-id]", "Variation ID (defaults to first non-control)").option("--store-url <url>", "Override experiment store_url (target website URL)").option("--proxy", "Create an artifact-injecting proxy preview").option("--ttl <hours>", "Proxy preview lifetime in hours (1-168)").option("--no-open", "Print URL instead of opening browser").action(async (idOrSlug, variationId, opts) => {
   const creds = requireCredentials();
   const ora2 = (await Promise.resolve().then(() => (init_ora(), ora_exports))).default;
   if (opts?.proxy) {
+    const ttlHours = opts.ttl === void 0 ? void 0 : Number(opts.ttl);
+    if (ttlHours !== void 0 && (!Number.isInteger(ttlHours) || ttlHours < 1 || ttlHours > 168)) {
+      fail(previewCommand, "--ttl must be an integer between 1 and 168 hours");
+    }
     const identifier = idOrSlug.startsWith("slug:") ? idOrSlug.slice(5) : idOrSlug;
     const proxySpinner = ora2("Creating proxy preview session...").start();
     const created = await createProxyPreviewSession(
       creds,
       identifier,
       variationId,
-      opts.storeUrl
+      opts.storeUrl,
+      ttlHours
     );
     proxySpinner.stop();
     if (!created.ok || !created.data) {
@@ -11202,7 +9910,15 @@ var previewCommand = new Command("preview").description("Open QA preview URL for
       );
     }
     const data = created.data;
-    output(previewCommand, data, () => console.log(source_default.cyan(data.preview_url)));
+    output(previewCommand, data, () => {
+      console.log(source_default.cyan(data.preview_url));
+      const expiresAt = new Date(data.expires_at);
+      const remainingMs = expiresAt.getTime() - Date.now();
+      const value = remainingMs < 864e5 ? Math.max(1, Math.round(remainingMs / 36e5)) : Math.round(remainingMs / 864e5);
+      const unit = remainingMs < 864e5 ? "hour" : "day";
+      const duration = `${value} ${unit}${value === 1 ? "" : "s"}`;
+      console.log(`Valid until ${expiresAt.toISOString()} (${duration}). Re-run this command for a fresh link.`);
+    });
     if (opts.open !== false && !shouldUseJson(previewCommand)) {
       try {
         const open2 = (await Promise.resolve().then(() => (init_open(), open_exports))).default;
@@ -11250,21 +9966,16 @@ var previewCommand = new Command("preview").description("Open QA preview URL for
     variation = exp.variations.find((v) => !v.is_control) ?? exp.variations[0];
   }
   spinner.stop();
-  const storeUrl = exp.store_url ?? opts?.storeUrl;
+  const storeUrl = opts?.storeUrl ?? exp.store_url;
   if (!storeUrl) {
     fail(previewCommand, 'Experiment is missing "store_url". Set it on the experiment or pass --store-url <url>.');
   }
   let previewUrl;
   try {
-    previewUrl = new URL(storeUrl);
+    previewUrl = buildQaPreviewUrl2(storeUrl, exp.id, variation.id);
   } catch {
     fail(previewCommand, 'Invalid store URL. Pass an absolute URL like "https://example.com/products/item".');
   }
-  previewUrl.searchParams.set("drip_force", `${exp.id}:${variation.id}`);
-  previewUrl.searchParams.set("drip_experiment_id", exp.id);
-  previewUrl.searchParams.set("drip_variation_id", variation.id);
-  previewUrl.searchParams.set("drip_qa", "1");
-  previewUrl.searchParams.set("drip_debug", "1");
   output(previewCommand, { experimentId: exp.id, variationId: variation.id, previewUrl: previewUrl.toString() }, () => {
     console.log();
     console.log(source_default.bold(`Preview: ${exp.name}`));
@@ -11286,25 +9997,25 @@ var previewCommand = new Command("preview").description("Open QA preview URL for
 
 // src/commands/harness.ts
 init_source();
-var import_node_fs7 = __toESM(require("node:fs"));
-var import_node_path5 = __toESM(require("node:path"));
+var import_node_fs8 = __toESM(require("node:fs"));
+var import_node_path6 = __toESM(require("node:path"));
 var import_node_child_process6 = require("node:child_process");
 function slugify(value, fallback2 = "variation") {
   const slug = value.normalize("NFKD").toLowerCase().replace(/[^a-z0-9]+/g, "-").replace(/^-+|-+$/g, "").slice(0, 80);
   return slug || fallback2;
 }
 function readJson(filePath) {
-  if (!import_node_fs7.default.existsSync(filePath)) return null;
-  return JSON.parse(import_node_fs7.default.readFileSync(filePath, "utf8"));
+  if (!import_node_fs8.default.existsSync(filePath)) return null;
+  return JSON.parse(import_node_fs8.default.readFileSync(filePath, "utf8"));
 }
 function resolveFolder(folder) {
-  return import_node_path5.default.resolve(process.cwd(), folder);
+  return import_node_path6.default.resolve(process.cwd(), folder);
 }
 function experimentConfigPath(folder) {
-  return import_node_path5.default.join(folder, "experiment.config.json");
+  return import_node_path6.default.join(folder, "experiment.config.json");
 }
 function apexConfigPath(folder) {
-  return import_node_path5.default.join(folder, "apex.harness.json");
+  return import_node_path6.default.join(folder, "apex.harness.json");
 }
 function loadHarnessConfig(folder) {
   const experiment = readJson(experimentConfigPath(folder)) ?? {};
@@ -11313,8 +10024,8 @@ function loadHarnessConfig(folder) {
   const targetOrigin = experiment.targetOrigin?.replace(/\/+$/, "") ?? "";
   const defaultPath = experiment.defaultPath ?? "/";
   const targetUrl = targetOrigin ? new URL(defaultPath, targetOrigin).toString() : "";
-  const id = experiment.id ?? import_node_path5.default.basename(import_node_path5.default.dirname(folder));
-  const variation = import_node_path5.default.basename(folder);
+  const id = experiment.id ?? import_node_path6.default.basename(import_node_path6.default.dirname(folder));
+  const variation = import_node_path6.default.basename(folder);
   return {
     experiment,
     apex: {
@@ -11346,35 +10057,35 @@ function runAbHarness(args, cwd) {
 function artifactPaths(folder, experiment) {
   const variant = experiment.variant;
   if (variant?.endsWith(".bundle.js")) {
-    const jsPath = import_node_path5.default.join(folder, variant.replace(/\.bundle\.js$/, ".js"));
-    const cssPath = import_node_path5.default.join(folder, variant.replace(/\.bundle\.js$/, ".css"));
-    return { jsPath, cssPath: import_node_fs7.default.existsSync(cssPath) ? cssPath : null };
+    const jsPath = import_node_path6.default.join(folder, variant.replace(/\.bundle\.js$/, ".js"));
+    const cssPath = import_node_path6.default.join(folder, variant.replace(/\.bundle\.js$/, ".css"));
+    return { jsPath, cssPath: import_node_fs8.default.existsSync(cssPath) ? cssPath : null };
   }
-  const buildDir = import_node_path5.default.join(folder, "build");
-  const files = import_node_fs7.default.existsSync(buildDir) ? import_node_fs7.default.readdirSync(buildDir) : [];
+  const buildDir = import_node_path6.default.join(folder, "build");
+  const files = import_node_fs8.default.existsSync(buildDir) ? import_node_fs8.default.readdirSync(buildDir) : [];
   const js = files.find((file) => file.endsWith(".js") && !file.endsWith(".bundle.js") && !file.endsWith(".min.js"));
   const css = files.find((file) => file.endsWith(".css") && !file.endsWith(".min.css"));
   if (!js) throw new Error("Could not find harness JS artifact in build/");
   return {
-    jsPath: import_node_path5.default.join(buildDir, js),
-    cssPath: css ? import_node_path5.default.join(buildDir, css) : null
+    jsPath: import_node_path6.default.join(buildDir, js),
+    cssPath: css ? import_node_path6.default.join(buildDir, css) : null
   };
 }
 async function uploadVersion(params) {
   const creds = requireCredentials();
   const { jsPath, cssPath } = artifactPaths(params.folder, params.experiment);
-  if (!import_node_fs7.default.existsSync(jsPath)) throw new Error(`Missing JS artifact: ${jsPath}`);
+  if (!import_node_fs8.default.existsSync(jsPath)) throw new Error(`Missing JS artifact: ${jsPath}`);
   const form = new FormData();
   form.append(
     "js",
-    new Blob([import_node_fs7.default.readFileSync(jsPath)], { type: "application/javascript" }),
-    import_node_path5.default.basename(jsPath)
+    new Blob([import_node_fs8.default.readFileSync(jsPath)], { type: "application/javascript" }),
+    import_node_path6.default.basename(jsPath)
   );
-  if (cssPath && import_node_fs7.default.existsSync(cssPath) && import_node_fs7.default.statSync(cssPath).size > 0) {
+  if (cssPath && import_node_fs8.default.existsSync(cssPath) && import_node_fs8.default.statSync(cssPath).size > 0) {
     form.append(
       "css",
-      new Blob([import_node_fs7.default.readFileSync(cssPath)], { type: "text/css" }),
-      import_node_path5.default.basename(cssPath)
+      new Blob([import_node_fs8.default.readFileSync(cssPath)], { type: "text/css" }),
+      import_node_path6.default.basename(cssPath)
     );
   }
   form.append(
@@ -11383,8 +10094,8 @@ async function uploadVersion(params) {
       ...params.apex,
       resetJs: cleanupResetJs(params.experiment),
       builtAt: (/* @__PURE__ */ new Date()).toISOString(),
-      jsPath: import_node_path5.default.relative(params.folder, jsPath),
-      cssPath: cssPath ? import_node_path5.default.relative(params.folder, cssPath) : null
+      jsPath: import_node_path6.default.relative(params.folder, jsPath),
+      cssPath: cssPath ? import_node_path6.default.relative(params.folder, cssPath) : null
     })
   );
   const res = await uploadHarnessVersion(creds, params.session.sessionId, form);
@@ -11410,18 +10121,18 @@ async function createSession(folder) {
   return { session: res.data, apex, experiment };
 }
 var harnessCommand = new Command("harness").description("Develop AB Test Harness projects through Apex live QA sessions");
-harnessCommand.command("init").argument("<folder>", "AB Test Harness experiment folder").option("--force", "Overwrite existing apex.harness.json").action(function action21(folderArg, opts) {
+harnessCommand.command("init").argument("<folder>", "AB Test Harness experiment folder").option("--force", "Overwrite existing apex.harness.json").action(function action20(folderArg, opts) {
   const folder = resolveFolder(folderArg);
   const targetPath = apexConfigPath(folder);
-  if (import_node_fs7.default.existsSync(targetPath) && !opts.force) {
+  if (import_node_fs8.default.existsSync(targetPath) && !opts.force) {
     fail(this, `${targetPath} already exists. Use --force to overwrite.`, EXIT_CODES.conflict);
   }
   const { apex } = loadHarnessConfig(folder);
-  import_node_fs7.default.writeFileSync(targetPath, `${JSON.stringify(apex, null, 2)}
+  import_node_fs8.default.writeFileSync(targetPath, `${JSON.stringify(apex, null, 2)}
 `, "utf8");
   output(this, { folder, configPath: targetPath, experiment: apex.experimentSlug, variation: apex.variationSlug }, () => printSuccess(`Created ${targetPath}`));
 });
-harnessCommand.command("dev").argument("<folder>", "AB Test Harness experiment folder").option("--no-open", "Print preview URL instead of opening it").action(async function action22(folderArg, opts) {
+harnessCommand.command("dev").argument("<folder>", "AB Test Harness experiment folder").option("--no-open", "Print preview URL instead of opening it").action(async function action21(folderArg, opts) {
   const folder = resolveFolder(folderArg);
   const created = await createSession(folder);
   await runAbHarness(["build", folder], folder);
@@ -11463,7 +10174,7 @@ harnessCommand.command("dev").argument("<folder>", "AB Test Harness experiment f
     }
   };
   let debounce = null;
-  const watcher = import_node_fs7.default.watch(folder, { recursive: true }, (_event, filename) => {
+  const watcher = import_node_fs8.default.watch(folder, { recursive: true }, (_event, filename) => {
     const name = String(filename ?? "");
     if (!name || name.startsWith("build/") || name.includes("/build/")) return;
     if (debounce) clearTimeout(debounce);
@@ -11477,7 +10188,7 @@ harnessCommand.command("dev").argument("<folder>", "AB Test Harness experiment f
     process.exitCode = 0;
   });
 });
-harnessCommand.command("publish").argument("<folder>", "AB Test Harness experiment folder").action(async function action23(folderArg) {
+harnessCommand.command("publish").argument("<folder>", "AB Test Harness experiment folder").action(async function action22(folderArg) {
   const folder = resolveFolder(folderArg);
   const created = await createSession(folder);
   await runAbHarness(["verify", folder], folder);
@@ -11490,9 +10201,9 @@ harnessCommand.command("publish").argument("<folder>", "AB Test Harness experime
 
 // src/commands/operator.ts
 init_source();
-var import_node_crypto4 = __toESM(require("node:crypto"));
-var import_node_fs8 = __toESM(require("node:fs"));
-var import_node_path6 = __toESM(require("node:path"));
+var import_node_crypto3 = __toESM(require("node:crypto"));
+var import_node_fs9 = __toESM(require("node:fs"));
+var import_node_path7 = __toESM(require("node:path"));
 var CANONICAL_FILE_RE = /^(src\/(?:index\.js|index\.scss|info\.js|mutations\.json)|experiment\.config\.json|metrics\.json|targeting\.json|dev-doc\.md|brand\.md|goals\/[a-zA-Z0-9_.-]+\.json|segments\/[a-zA-Z0-9_.-]+\.json|network\/[a-zA-Z0-9_.-]+\.recipe\.json)$/;
 function workspaceIssueFile(field, evidence) {
   if (field === "custom_js" || field === "reset_js") return "src/index.js";
@@ -11536,7 +10247,7 @@ function formatWorkspaceBlockingIssues(value) {
   }).join("\n");
 }
 function sha256Text2(value) {
-  return import_node_crypto4.default.createHash("sha256").update(value).digest("hex");
+  return import_node_crypto3.default.createHash("sha256").update(value).digest("hex");
 }
 function byteLength(value) {
   return Buffer.byteLength(value, "utf8");
@@ -11546,28 +10257,28 @@ function slugify2(value, fallback2 = "operator") {
   return slug || fallback2;
 }
 function folderPath2(folder) {
-  return import_node_path6.default.resolve(process.cwd(), folder);
+  return import_node_path7.default.resolve(process.cwd(), folder);
 }
 function apexDir(folder) {
-  return import_node_path6.default.join(folder, ".apex");
+  return import_node_path7.default.join(folder, ".apex");
 }
 function sessionPath(folder) {
-  return import_node_path6.default.join(apexDir(folder), "session.json");
+  return import_node_path7.default.join(apexDir(folder), "session.json");
 }
 function readJsonFile(filePath) {
-  if (!import_node_fs8.default.existsSync(filePath)) return null;
-  return JSON.parse(import_node_fs8.default.readFileSync(filePath, "utf8"));
+  if (!import_node_fs9.default.existsSync(filePath)) return null;
+  return JSON.parse(import_node_fs9.default.readFileSync(filePath, "utf8"));
 }
 function writeJsonFile(filePath, value) {
-  import_node_fs8.default.mkdirSync(import_node_path6.default.dirname(filePath), { recursive: true });
-  import_node_fs8.default.writeFileSync(filePath, `${JSON.stringify(value, null, 2)}
+  import_node_fs9.default.mkdirSync(import_node_path7.default.dirname(filePath), { recursive: true });
+  import_node_fs9.default.writeFileSync(filePath, `${JSON.stringify(value, null, 2)}
 `, "utf8");
 }
 function readSession(folder) {
   const session = readJsonFile(sessionPath(folder));
   if (!session) {
-    const filesystemMarker = import_node_path6.default.join(apexDir(folder), "experiment-filesystem.json");
-    if (import_node_fs8.default.existsSync(filesystemMarker)) {
+    const filesystemMarker = import_node_path7.default.join(apexDir(folder), "experiment-filesystem.json");
+    if (import_node_fs9.default.existsSync(filesystemMarker)) {
       throw new Error("This folder is an experiment filesystem (apex experiments \u2026), not an operator workspace \u2014 run `apex experiments plan` here, or `apex workspace checkout` into a different folder.");
     }
     throw new Error(`Missing ${sessionPath(folder)}. Run apex workspace checkout first.`);
@@ -11575,9 +10286,9 @@ function readSession(folder) {
   return session;
 }
 function writeSession(folder, session) {
-  import_node_fs8.default.mkdirSync(apexDir(folder), { recursive: true });
-  import_node_fs8.default.writeFileSync(
-    import_node_path6.default.join(apexDir(folder), ".gitignore"),
+  import_node_fs9.default.mkdirSync(apexDir(folder), { recursive: true });
+  import_node_fs9.default.writeFileSync(
+    import_node_path7.default.join(apexDir(folder), ".gitignore"),
     "session.json\nharness-session.json\n",
     "utf8"
   );
@@ -11595,15 +10306,15 @@ function listLocalWorkspaceFiles(folder) {
   const roots = ["src", "goals", "segments", "network"];
   const topLevel = ["experiment.config.json", "metrics.json", "targeting.json", "dev-doc.md", "brand.md"];
   function visit(dir) {
-    if (!import_node_fs8.default.existsSync(dir)) return;
-    for (const entry of import_node_fs8.default.readdirSync(dir, { withFileTypes: true })) {
-      const absPath = import_node_path6.default.join(dir, entry.name);
+    if (!import_node_fs9.default.existsSync(dir)) return;
+    for (const entry of import_node_fs9.default.readdirSync(dir, { withFileTypes: true })) {
+      const absPath = import_node_path7.default.join(dir, entry.name);
       if (entry.isDirectory()) {
         visit(absPath);
         continue;
       }
-      const relativePath = validateCanonicalPath(import_node_path6.default.relative(folder, absPath));
-      const content = import_node_fs8.default.readFileSync(absPath, "utf8");
+      const relativePath = validateCanonicalPath(import_node_path7.default.relative(folder, absPath));
+      const content = import_node_fs9.default.readFileSync(absPath, "utf8");
       files.push({
         path: relativePath,
         absPath,
@@ -11613,11 +10324,11 @@ function listLocalWorkspaceFiles(folder) {
       });
     }
   }
-  for (const root of roots) visit(import_node_path6.default.join(folder, root));
+  for (const root of roots) visit(import_node_path7.default.join(folder, root));
   for (const file of topLevel) {
-    const absPath = import_node_path6.default.join(folder, file);
-    if (!import_node_fs8.default.existsSync(absPath)) continue;
-    const content = import_node_fs8.default.readFileSync(absPath, "utf8");
+    const absPath = import_node_path7.default.join(folder, file);
+    if (!import_node_fs9.default.existsSync(absPath)) continue;
+    const content = import_node_fs9.default.readFileSync(absPath, "utf8");
     files.push({
       path: file,
       absPath,
@@ -11641,7 +10352,7 @@ function validateJsonFiles(files) {
   }
 }
 function readExperimentConfig(folder) {
-  return readJsonFile(import_node_path6.default.join(folder, "experiment.config.json")) ?? {};
+  return readJsonFile(import_node_path7.default.join(folder, "experiment.config.json")) ?? {};
 }
 function resolveVariation(exp, variationArg) {
   const variations = exp.variations ?? [];
@@ -11658,9 +10369,9 @@ function resolveVariation(exp, variationArg) {
 function writeWorkspaceFiles(folder, workspace) {
   for (const file of workspace.files) {
     const relativePath = validateCanonicalPath(file.path);
-    const absPath = import_node_path6.default.join(folder, relativePath);
-    import_node_fs8.default.mkdirSync(import_node_path6.default.dirname(absPath), { recursive: true });
-    import_node_fs8.default.writeFileSync(absPath, file.content, "utf8");
+    const absPath = import_node_path7.default.join(folder, relativePath);
+    import_node_fs9.default.mkdirSync(import_node_path7.default.dirname(absPath), { recursive: true });
+    import_node_fs9.default.writeFileSync(absPath, file.content, "utf8");
   }
 }
 function sessionFromWorkspace(input) {
@@ -11724,10 +10435,10 @@ async function uploadCurrentArtifactVersion(folder, sessionId) {
   form.append(
     "js",
     new Blob([js.content], { type: "application/javascript" }),
-    import_node_path6.default.basename(js.path)
+    import_node_path7.default.basename(js.path)
   );
   if (css && css.content.trim()) {
-    form.append("css", new Blob([css.content], { type: "text/css" }), import_node_path6.default.basename(css.path));
+    form.append("css", new Blob([css.content], { type: "text/css" }), import_node_path7.default.basename(css.path));
   }
   form.append("manifest", JSON.stringify(manifest));
   const res = await uploadHarnessVersion(creds, sessionId, form);
@@ -11809,7 +10520,7 @@ Examples:
   apex workspace dev ./workspace --no-open
   apex workspace publish ./workspace
 `);
-operatorCommand.command("checkout").argument("<experiment-id>", "Apex experiment ID").requiredOption("--variation <id-or-slug>", "Variation ID, slug, or name").option("--out <path>", "Target folder").addOption(new Option("--dir <folder>", "Legacy alias for --out").hideHelp()).action(async function action24(experimentId, opts) {
+operatorCommand.command("checkout").argument("<experiment-id>", "Apex experiment ID").requiredOption("--variation <id-or-slug>", "Variation ID, slug, or name").option("--out <path>", "Target folder").addOption(new Option("--dir <folder>", "Legacy alias for --out").hideHelp()).action(async function action23(experimentId, opts) {
   try {
     const creds = requireCredentials();
     const expRes = await getExperiment(creds, experimentId);
@@ -11828,7 +10539,7 @@ operatorCommand.command("checkout").argument("<experiment-id>", "Apex experiment
     const folder = folderPath2(opts.out ?? opts.dir ?? slugify2(`${experiment.name}-${variation.name}`, "apex-operator"));
     const workspace = await getOperatorWorkspace(creds, experiment.id, variation.id);
     if (!workspace.ok || !workspace.data) throw new CliError(workspace.error ?? "Could not load workspace", classifyStatus(workspace.status), workspace.errorDetails);
-    import_node_fs8.default.mkdirSync(folder, { recursive: true });
+    import_node_fs9.default.mkdirSync(folder, { recursive: true });
     writeWorkspaceFiles(folder, workspace.data);
     writeSession(folder, sessionFromWorkspace({
       credsBaseUrl: creds.baseUrl,
@@ -11844,7 +10555,7 @@ operatorCommand.command("checkout").argument("<experiment-id>", "Apex experiment
     throw error;
   }
 });
-operatorCommand.command("status").argument("[folder]", "Operator workspace folder", ".").action(function action25(folderArg) {
+operatorCommand.command("status").argument("[folder]", "Operator workspace folder", ".").action(function action24(folderArg) {
   try {
     const folder = folderPath2(folderArg);
     const session = readSession(folder);
@@ -11872,14 +10583,14 @@ operatorCommand.command("status").argument("[folder]", "Operator workspace folde
     fail(this, error instanceof Error ? error.message : String(error));
   }
 });
-operatorCommand.command("dev").argument("[folder]", "Operator workspace folder", ".").option("--no-open", "Print preview URL instead of opening it").option("--once", "Upload one preview version and exit").action(async function action26(folderArg, opts) {
+operatorCommand.command("dev").argument("[folder]", "Operator workspace folder", ".").option("--no-open", "Print preview URL instead of opening it").option("--once", "Upload one preview version and exit").action(async function action25(folderArg, opts) {
   try {
     const folder = folderPath2(folderArg);
     const session = readSession(folder);
     const harnessSession = await createExactHarnessSession(folder, session);
     const version = await uploadCurrentArtifactVersion(folder, harnessSession.sessionId);
-    import_node_fs8.default.mkdirSync(apexDir(folder), { recursive: true });
-    writeJsonFile(import_node_path6.default.join(apexDir(folder), "harness-session.json"), {
+    import_node_fs9.default.mkdirSync(apexDir(folder), { recursive: true });
+    writeJsonFile(import_node_path7.default.join(apexDir(folder), "harness-session.json"), {
       sessionId: harnessSession.sessionId,
       experimentId: harnessSession.experimentId,
       variationId: harnessSession.variationId,
@@ -11924,7 +10635,7 @@ operatorCommand.command("dev").argument("[folder]", "Operator workspace folder",
       }
     };
     let timer = null;
-    const watcher = import_node_fs8.default.watch(folder, { recursive: true }, (_event, filename) => {
+    const watcher = import_node_fs9.default.watch(folder, { recursive: true }, (_event, filename) => {
       const name = String(filename ?? "");
       if (!name || name.startsWith(".apex/") || name.includes("/.apex/")) return;
       if (timer) clearTimeout(timer);
@@ -11941,7 +10652,7 @@ operatorCommand.command("dev").argument("[folder]", "Operator workspace folder",
     throw error;
   }
 });
-operatorCommand.command("publish").argument("[folder]", "Operator workspace folder", ".").option("--allow-goal-writes", "Allow metrics.json to create or update shared shop-level goals").action(async function action27(folderArg, opts) {
+operatorCommand.command("publish").argument("[folder]", "Operator workspace folder", ".").option("--allow-goal-writes", "Allow metrics.json to create or update shared shop-level goals").action(async function action26(folderArg, opts) {
   try {
     const result = await runPublish(folderArg, opts);
     const build = result.build;
@@ -11959,8 +10670,8 @@ operatorCommand.command("publish").argument("[folder]", "Operator workspace fold
 
 // src/commands/roadmap.ts
 init_source();
-var import_node_fs9 = __toESM(require("node:fs"));
-var import_node_path7 = __toESM(require("node:path"));
+var import_node_fs10 = __toESM(require("node:fs"));
+var import_node_path8 = __toESM(require("node:path"));
 function truncate(value, max) {
   const text = typeof value === "string" ? value : value == null ? "" : String(value);
   if (text.length <= max) return text;
@@ -11984,7 +10695,7 @@ function briefLine(item) {
   ].filter(Boolean);
   return parts.join("\n");
 }
-var approved = new Command("approved").description("List approved roadmap ideas ready to build in Apex").option("-n, --limit <n>", "Max results", "20").option("--cursor <id>", "Pagination cursor").option("-q, --query <text>", "Search title, hypothesis, brief, and notes").option("--unbuilt", "Only show approved ideas without a linked experiment").option("--built", "Only show approved ideas with a linked experiment").option("--json", "Print raw JSON").option("--brief", "Print each item with hypothesis and target URL").action(async function action28(opts) {
+var approved = new Command("approved").description("List approved roadmap ideas ready to build in Apex").option("-n, --limit <n>", "Max results", "20").option("--cursor <id>", "Pagination cursor").option("-q, --query <text>", "Search title, hypothesis, brief, and notes").option("--unbuilt", "Only show approved ideas without a linked experiment").option("--built", "Only show approved ideas with a linked experiment").option("--json", "Print raw JSON").option("--brief", "Print each item with hypothesis and target URL").action(async function action27(opts) {
   const creds = requireCredentials();
   const limit = parseInt(opts.limit, 10);
   const hasExperiment = opts.unbuilt ? false : opts.built ? true : void 0;
@@ -12028,7 +10739,7 @@ More results: --cursor ${res.data.pagination.next_cursor}`));
     }
   });
 });
-var handoff = new Command("handoff").description("Get the full build brief for an approved roadmap item").argument("<id>", "Roadmap/backlog item ID").option("--out <path>", "Write handoff JSON to a file").addOption(new Option("-o, --output <path>", "Legacy alias for --out").hideHelp()).option("--instructions", "Print only the build instructions").action(async function action29(id, opts) {
+var handoff = new Command("handoff").description("Get the full build brief for an approved roadmap item").argument("<id>", "Roadmap/backlog item ID").option("--out <path>", "Write handoff JSON to a file").addOption(new Option("-o, --output <path>", "Legacy alias for --out").hideHelp()).option("--instructions", "Print only the build instructions").action(async function action28(id, opts) {
   const creds = requireCredentials();
   const res = await getRoadmapItemHandoff(creds, id);
   if (!res.ok) fail(this, res.error ?? "Failed to fetch roadmap handoff", classifyStatus(res.status), res.errorDetails);
@@ -12037,9 +10748,9 @@ var handoff = new Command("handoff").description("Get the full build brief for a
 `;
   const outputData = opts.instructions ? { roadmapItemId: id, instructions: String(payload.instructions ?? "") } : payload;
   if (opts.out || opts.output) {
-    const target = import_node_path7.default.resolve(process.cwd(), opts.out ?? opts.output);
-    import_node_fs9.default.mkdirSync(import_node_path7.default.dirname(target), { recursive: true });
-    import_node_fs9.default.writeFileSync(target, rendered, "utf8");
+    const target = import_node_path8.default.resolve(process.cwd(), opts.out ?? opts.output);
+    import_node_fs10.default.mkdirSync(import_node_path8.default.dirname(target), { recursive: true });
+    import_node_fs10.default.writeFileSync(target, rendered, "utf8");
     output(this, { path: target, roadmapItemId: id }, () => printSuccess(`Wrote ${target}`));
     return;
   }
@@ -12051,8 +10762,8 @@ roadmapCommand.addCommand(handoff);
 
 // src/commands/tracking.ts
 init_source();
-var import_node_fs10 = __toESM(require("node:fs"));
-var import_node_path8 = __toESM(require("node:path"));
+var import_node_fs11 = __toESM(require("node:fs"));
+var import_node_path9 = __toESM(require("node:path"));
 function normalizeUrl(input) {
   const value = input.trim();
   if (!value) throw new Error("URL cannot be empty");
@@ -12098,17 +10809,17 @@ function commonCookieDomain(hostnames) {
   return suffix && suffixes.every((candidate) => candidate === suffix) ? `.${suffix}` : null;
 }
 function defaultManifestPath() {
-  return import_node_path8.default.resolve(process.cwd(), ".apex", "tracking-manifest.json");
+  return import_node_path9.default.resolve(process.cwd(), ".apex", "tracking-manifest.json");
 }
 function readManifest(filePath) {
-  if (!import_node_fs10.default.existsSync(filePath)) throw new Error(`Manifest not found: ${filePath}`);
-  const parsed = JSON.parse(import_node_fs10.default.readFileSync(filePath, "utf8"));
+  if (!import_node_fs11.default.existsSync(filePath)) throw new Error(`Manifest not found: ${filePath}`);
+  const parsed = JSON.parse(import_node_fs11.default.readFileSync(filePath, "utf8"));
   if (parsed.schemaVersion !== 1) throw new Error("Unsupported tracking manifest schema");
   return parsed;
 }
 function writeManifest(filePath, manifest) {
-  import_node_fs10.default.mkdirSync(import_node_path8.default.dirname(filePath), { recursive: true });
-  import_node_fs10.default.writeFileSync(filePath, `${JSON.stringify(manifest, null, 2)}
+  import_node_fs11.default.mkdirSync(import_node_path9.default.dirname(filePath), { recursive: true });
+  import_node_fs11.default.writeFileSync(filePath, `${JSON.stringify(manifest, null, 2)}
 `, "utf8");
 }
 function buildSnippet(shopId, endpoint) {
@@ -12175,7 +10886,7 @@ function buildManifest(urlArgs, opts) {
   };
 }
 function manifestPath(input) {
-  return import_node_path8.default.resolve(process.cwd(), input ?? defaultManifestPath());
+  return import_node_path9.default.resolve(process.cwd(), input ?? defaultManifestPath());
 }
 function printManifestPlan(manifest) {
   console.log(source_default.bold("Apex tracking ingestion plan"));
@@ -12223,7 +10934,7 @@ trackingCommand.command("qa").description("Print the QA checklist for a tracking
     console.log(`${index + 1}. ${check}`);
   });
 });
-trackingCommand.command("verify").description("Verify live tracking events for the current shop").option("--minutes <n>", "Lookback window in minutes", "120").option("--limit <n>", "Recent events to include", "20").option("--experiment <id>", "Filter to one experiment ID").option("--event-type <type>", "Filter to one event type; repeat with comma-separated values").action(async function action30(opts) {
+trackingCommand.command("verify").description("Verify live tracking events for the current shop").option("--minutes <n>", "Lookback window in minutes", "120").option("--limit <n>", "Recent events to include", "20").option("--experiment <id>", "Filter to one experiment ID").option("--event-type <type>", "Filter to one event type; repeat with comma-separated values").action(async function action29(opts) {
   const creds = requireCredentials();
   const res = await verifyTracking(creds, {
     minutes: Number.parseInt(opts.minutes, 10),
@@ -12261,10 +10972,10 @@ trackingCommand.command("verify").description("Verify live tracking events for t
 
 // src/commands/goals.ts
 init_source();
-var import_node_fs11 = __toESM(require("node:fs"));
-var import_node_path9 = __toESM(require("node:path"));
+var import_node_fs12 = __toESM(require("node:fs"));
+var import_node_path10 = __toESM(require("node:path"));
 
-// src/lib/sdk-url-match.ts
+// ../sdk/src/safe-regex.ts
 var MAX_PATTERN_LENGTH = 1024;
 var MAX_CACHE_ENTRIES = 256;
 var regexCache = /* @__PURE__ */ new Map();
@@ -12291,10 +11002,16 @@ function safeRegexTest(pattern, input) {
   }
 }
 
+// ../sdk/src/goal-eligibility.ts
+function goalIsEligible(goal, pageActiveIds, href) {
+  if (goal.pageId) return pageActiveIds.has(goal.pageId);
+  return !goal.urlPattern || safeRegexTest(goal.urlPattern, href);
+}
+
 // src/lib/sdk-goal-url-match.ts
+var NO_ACTIVE_PAGES = /* @__PURE__ */ new Set();
 function sdkPageviewGoalMatch(urlPattern, href) {
-  if (!urlPattern) return true;
-  return safeRegexTest(urlPattern, href);
+  return goalIsEligible({ urlPattern: urlPattern ?? null }, NO_ACTIVE_PAGES, href);
 }
 
 // src/commands/goals.ts
@@ -12411,7 +11128,7 @@ function printSuggestions(data) {
 function parseCapture(command, value) {
   if (!value) return void 0;
   const source = value.startsWith("@") ? value.slice(1) : value;
-  const text = value.startsWith("@") || import_node_fs11.default.existsSync(source) ? import_node_fs11.default.readFileSync(import_node_path9.default.resolve(process.cwd(), source), "utf8") : value;
+  const text = value.startsWith("@") || import_node_fs12.default.existsSync(source) ? import_node_fs12.default.readFileSync(import_node_path10.default.resolve(process.cwd(), source), "utf8") : value;
   try {
     return JSON.parse(text);
   } catch (error) {
@@ -12430,6 +11147,8 @@ function printGoal(goal) {
   console.log(`  ID:         ${source_default.dim(goal.id)}`);
   console.log(`  Type:       ${goal.type}`);
   console.log(`  Measurement: ${goal.measurement === "value" ? "value" : "conversion"}`);
+  if (goal.value_property) console.log(`  Value source: ${goal.value_property}`);
+  if (goal.value_unit) console.log(`  Value unit: ${goal.value_unit}`);
   if (goal.selector) console.log(`  Selector:   ${goal.selector}`);
   if (goal.text_match) console.log(`  Text match: ${goal.text_match}`);
   if (goal.url_pattern) console.log(`  URL:        ${goal.url_pattern}`);
@@ -12437,7 +11156,7 @@ function printGoal(goal) {
   console.log(`  Count once: ${goal.count_once ? "yes" : "no"}`);
   console.log();
 }
-var list2 = new Command("list").alias("ls").description("List goals").option("-n, --limit <n>", "Max results", "50").action(async function action31(opts) {
+var list2 = new Command("list").alias("ls").description("List goals").option("-n, --limit <n>", "Max results", "50").action(async function action30(opts) {
   const creds = requireCredentials();
   const res = await listGoals(creds, { limit: Number.parseInt(opts.limit, 10) });
   if (!res.ok || !res.data) {
@@ -12459,12 +11178,14 @@ var list2 = new Command("list").alias("ls").description("List goals").option("-n
     );
   });
 });
-var create2 = new Command("create").description("Create a goal").requiredOption("--name <name>", "Goal name").requiredOption("--type <type>", "click|pageview|custom|revenue").option("--measurement <measurement>", "conversion|value", "conversion").option("--selector <selector>", "CSS selector for click goals").option("--text-match <text>", "Text match for click goals").option("--url-pattern <pattern>", "URL pattern for pageview goals").option("--event-name <name>", "Event name for custom goals").option("--count-once", "Count only once per visitor").option("--capture <json-or-path>", "Capture JSON array or @path").action(async function action32(opts) {
+var create2 = new Command("create").description("Create a goal").requiredOption("--name <name>", "Goal name").requiredOption("--type <type>", "click|pageview|custom|revenue").option("--measurement <measurement>", "conversion|value", "conversion").option("--value-property <property>", "Numeric event property for value goals").option("--value-unit <unit>", "currency|number|duration_seconds|percent").option("--selector <selector>", "CSS selector for click goals").option("--text-match <text>", "Text match for click goals").option("--url-pattern <pattern>", "URL pattern for pageview goals").option("--event-name <name>", "Event name for custom goals").option("--count-once", "Count only once per visitor").option("--capture <json-or-path>", "Capture JSON array or @path").action(async function action31(opts) {
   const creds = requireCredentials();
   const body5 = cleanBody({
     name: opts.name,
     type: opts.type,
     measurement: opts.measurement,
+    value_property: opts.valueProperty,
+    value_unit: opts.valueUnit,
     selector: opts.selector,
     text_match: opts.textMatch,
     url_pattern: opts.urlPattern,
@@ -12478,12 +11199,14 @@ var create2 = new Command("create").description("Create a goal").requiredOption(
   }
   output(this, { goal: res.data }, () => printGoal(res.data));
 });
-var update = new Command("update").description("Update a goal").argument("<id>", "Goal ID").option("--name <name>", "Goal name").option("--type <type>", "click|pageview|custom|revenue").option("--measurement <measurement>", "conversion|value").option("--selector <selector>", "CSS selector for click goals").option("--text-match <text>", "Text match for click goals").option("--url-pattern <pattern>", "URL pattern for pageview goals").option("--event-name <name>", "Event name for custom goals").option("--count-once", "Count only once per visitor").option("--no-count-once", "Do not count only once per visitor").option("--capture <json-or-path>", "Capture JSON array or @path").action(async function action33(id, opts) {
+var update = new Command("update").description("Update a goal").argument("<id>", "Goal ID").option("--name <name>", "Goal name").option("--type <type>", "click|pageview|custom|revenue").option("--measurement <measurement>", "conversion|value").option("--value-property <property>", "Numeric event property for value goals; pass null to clear").option("--value-unit <unit>", "currency|number|duration_seconds|percent; pass null to clear").option("--selector <selector>", "CSS selector for click goals").option("--text-match <text>", "Text match for click goals").option("--url-pattern <pattern>", "URL pattern for pageview goals").option("--event-name <name>", "Event name for custom goals").option("--count-once", "Count only once per visitor").option("--no-count-once", "Do not count only once per visitor").option("--capture <json-or-path>", "Capture JSON array or @path").action(async function action32(id, opts) {
   const creds = requireCredentials();
   const body5 = cleanBody({
     name: opts.name,
     type: opts.type,
     measurement: opts.measurement,
+    value_property: opts.valueProperty === "null" ? null : opts.valueProperty,
+    value_unit: opts.valueUnit === "null" ? null : opts.valueUnit,
     selector: opts.selector,
     text_match: opts.textMatch,
     url_pattern: opts.urlPattern,
@@ -12500,7 +11223,7 @@ var update = new Command("update").description("Update a goal").argument("<id>",
   }
   output(this, { goal: res.data }, () => printGoal(res.data));
 });
-var test = new Command("test").description("Dry run a goal URL pattern against traffic").option("--pattern <regex>", "URL regex pattern to test (matched against the full URL, as the SDK matches pageview goals)").option("--goal <id>", "Existing goal ID whose URL pattern should be tested").option("--days <n>", "Traffic lookback days", "14").action(async function action34(opts) {
+var test = new Command("test").description("Dry run a goal URL pattern against traffic").option("--pattern <regex>", "URL regex pattern to test (matched against the full URL, as the SDK matches pageview goals)").option("--goal <id>", "Existing goal ID whose URL pattern should be tested").option("--days <n>", "Traffic lookback days", "14").action(async function action33(opts) {
   if (!opts.pattern && !opts.goal) fail(this, "Provide --pattern or --goal.", EXIT_CODES.validation);
   if (opts.pattern && opts.goal) fail(this, "Use only one of --pattern or --goal.", EXIT_CODES.validation);
   const creds = requireCredentials();
@@ -12545,7 +11268,7 @@ var test = new Command("test").description("Dry run a goal URL pattern against t
     printTable(["URL", "PAGEVIEWS", "VISITORS"], matches.map((item) => [`${item.host}${item.path}`.slice(0, 64), String(item.pageviews), String(item.visitors)]), [64, 10, 10]);
   });
 });
-var suggest = new Command("suggest").description("Suggest goals and funnels from analytics").option("--create", "Create selected goals after confirmation").option("--yes", "Skip prompts when used with create").action(async function action35(opts) {
+var suggest = new Command("suggest").description("Suggest goals and funnels from analytics").option("--create", "Create selected goals after confirmation").option("--yes", "Skip prompts when used with create").action(async function action34(opts) {
   const creds = requireCredentials();
   const res = await suggestGoals(creds);
   if (!res.ok || !res.data) fail(this, res.error ?? "Failed to suggest goals", classifyStatus(res.status), res.errorDetails);
@@ -12574,12 +11297,12 @@ Examples:
 
 // src/commands/funnels.ts
 init_source();
-var import_node_fs12 = __toESM(require("node:fs"));
-var import_node_path10 = __toESM(require("node:path"));
+var import_node_fs13 = __toESM(require("node:fs"));
+var import_node_path11 = __toESM(require("node:path"));
 function readSteps(command, file) {
   let parsed;
   try {
-    parsed = JSON.parse(import_node_fs12.default.readFileSync(import_node_path10.default.resolve(process.cwd(), file), "utf8"));
+    parsed = JSON.parse(import_node_fs13.default.readFileSync(import_node_path11.default.resolve(process.cwd(), file), "utf8"));
   } catch (error) {
     fail(command, `Invalid --steps-file JSON: ${error instanceof Error ? error.message : String(error)}`, EXIT_CODES.validation);
   }
@@ -12598,27 +11321,27 @@ function printFunnel(funnel) {
   for (const step of [...funnel.steps].sort((a, b) => a.order - b.order)) console.log(`  ${step.order}. ${step.label} \u2014 ${step.url_pattern}`);
   console.log();
 }
-var list3 = new Command("list").alias("ls").description("List funnels").action(async function action36() {
+var list3 = new Command("list").alias("ls").description("List funnels").action(async function action35() {
   const res = await listFunnels(requireCredentials());
   if (!res.ok || !res.data) fail(this, res.error ?? "Failed to list funnels", classifyStatus(res.status), res.errorDetails);
   output(this, { funnels: res.data.data }, () => printTable(["NAME", "ID", "STEPS"], res.data.data.map((f) => [f.name.slice(0, 36), f.id, String(f.steps.length)]), [36, 36, 5]));
 });
-var create3 = new Command("create").description("Create a funnel").requiredOption("--name <name>", "Funnel name").requiredOption("--steps-file <file>", "JSON array of { label, pattern }").action(async function action37(opts) {
+var create3 = new Command("create").description("Create a funnel").requiredOption("--name <name>", "Funnel name").requiredOption("--steps-file <file>", "JSON array of { label, pattern }").action(async function action36(opts) {
   const res = await createFunnel(requireCredentials(), { name: opts.name, steps: readSteps(this, opts.stepsFile) });
   if (!res.ok || !res.data) fail(this, res.error ?? "Failed to create funnel", classifyStatus(res.status), res.errorDetails);
   output(this, { funnel: res.data }, () => printFunnel(res.data));
 });
-var update2 = new Command("update").description("Replace a funnel's steps").argument("<id>", "Funnel ID").requiredOption("--steps-file <file>", "JSON array of { label, pattern }").action(async function action38(id, opts) {
+var update2 = new Command("update").description("Replace a funnel's steps").argument("<id>", "Funnel ID").requiredOption("--steps-file <file>", "JSON array of { label, pattern }").action(async function action37(id, opts) {
   const res = await updateFunnel(requireCredentials(), id, { steps: readSteps(this, opts.stepsFile) });
   if (!res.ok || !res.data) fail(this, res.error ?? "Failed to update funnel", classifyStatus(res.status), res.errorDetails);
   output(this, { funnel: res.data }, () => printFunnel(res.data));
 });
-var del2 = new Command("delete").description("Delete a funnel").argument("<id>", "Funnel ID").action(async function action39(id) {
+var del2 = new Command("delete").description("Delete a funnel").argument("<id>", "Funnel ID").action(async function action38(id) {
   const res = await deleteFunnel(requireCredentials(), id);
   if (!res.ok) fail(this, res.error ?? "Failed to delete funnel", classifyStatus(res.status), res.errorDetails);
   output(this, { deleted: true, id }, () => console.log(`Deleted funnel ${id}`));
 });
-var run = new Command("run").description("Run funnel analysis").argument("<id>", "Funnel ID").option("--days <n>", "Analysis window", "30").action(async function action40(id, opts) {
+var run = new Command("run").description("Run funnel analysis").argument("<id>", "Funnel ID").option("--days <n>", "Analysis window", "30").action(async function action39(id, opts) {
   if (!/^[1-9]\d*$/.test(opts.days)) fail(this, "--days must be a positive integer", EXIT_CODES.validation);
   const days = Number.parseInt(opts.days, 10);
   if (!Number.isSafeInteger(days)) fail(this, "--days must be a positive integer", EXIT_CODES.validation);
@@ -12626,7 +11349,7 @@ var run = new Command("run").description("Run funnel analysis").argument("<id>",
   if (!res.ok || !res.data) fail(this, res.error ?? "Failed to run funnel", classifyStatus(res.status), res.errorDetails);
   output(this, { run: res.data }, () => printTable(["STEP", "LABEL", "VISITORS", "DROP-OFF"], res.data.steps.map((s) => [String(s.step), s.label, String(s.visitors), `${s.drop_off_rate}%`]), [5, 36, 8, 8]));
 });
-var validate2 = new Command("validate").description("Validate funnel steps without writing").requiredOption("--steps-file <file>", "JSON array of { label, pattern }").action(function action41(opts) {
+var validate2 = new Command("validate").description("Validate funnel steps without writing").requiredOption("--steps-file <file>", "JSON array of { label, pattern }").action(function action40(opts) {
   const steps = readSteps(this, opts.stepsFile);
   output(this, { valid: true, steps }, () => console.log(`Valid funnel steps: ${steps.length}`));
 });
@@ -12683,11 +11406,11 @@ async function load2(command) {
   }
   return result.data;
 }
-var list4 = new Command("list").alias("ls").description("List runtime environments and mapped domains").action(async function action42() {
+var list4 = new Command("list").alias("ls").description("List runtime environments and mapped domains").action(async function action41() {
   const { environments } = await load2(this);
   output(this, { environments }, () => printEnvironments(environments.items));
 });
-var setDomain = new Command("set-domain").description("Map a domain to a runtime environment").argument("<domain>", "Domain to map").requiredOption("--environment <env>", "Environment key").action(async function action43(domain, opts) {
+var setDomain = new Command("set-domain").description("Map a domain to a runtime environment").argument("<domain>", "Domain to map").requiredOption("--environment <env>", "Environment key").action(async function action42(domain, opts) {
   const normalizedDomain = normalizeEnvironmentDomain(domain);
   if (!normalizedDomain) {
     fail(this, "Domain must be a valid hostname containing a dot", EXIT_CODES.validation);
@@ -12730,7 +11453,7 @@ var setDomain = new Command("set-domain").description("Map a domain to a runtime
     () => printEnvironments(result.data.environments.items)
   );
 });
-var removeDomain = new Command("remove-domain").description("Remove a domain mapping").argument("<domain>", "Domain to remove").action(async function action44(domain) {
+var removeDomain = new Command("remove-domain").description("Remove a domain mapping").argument("<domain>", "Domain to remove").action(async function action43(domain) {
   const normalizedDomain = normalizeEnvironmentDomain(domain);
   if (!normalizedDomain) {
     fail(this, "Domain must be a valid hostname containing a dot", EXIT_CODES.validation);
@@ -12784,11 +11507,11 @@ function printConsent(data) {
   console.log(`Getter: ${data.consentMode.getter || "-"}`);
   console.log(`Split: ${data.prerequisites.showVariationsRule && data.prerequisites.startTrackingRule ? "canonical" : "off"}`);
 }
-var get2 = new Command("get").description("Show consent settings").action(async function action45() {
+var get2 = new Command("get").description("Show consent settings").action(async function action44() {
   const data = await load3(this);
   output(this, data, () => printConsent(data));
 });
-var set = new Command("set").description("Enable and configure consent gating").requiredOption("--provider <provider>", "Consent provider").requiredOption("--group <group>", "Required consent group").option("--getter <path>", "Custom consent getter path").action(async function action46(opts) {
+var set = new Command("set").description("Enable and configure consent gating").requiredOption("--provider <provider>", "Consent provider").requiredOption("--group <group>", "Required consent group").option("--getter <path>", "Custom consent getter path").action(async function action45(opts) {
   const consentMode = { enabled: true, provider: opts.provider, requiredGroup: opts.group };
   if (opts.getter !== void 0) consentMode.getter = opts.getter;
   const result = await updateConsent(requireCredentials(), { consentMode, applyCanonicalSplit: true });
@@ -12796,7 +11519,7 @@ var set = new Command("set").description("Enable and configure consent gating").
   warn(this, result.data.precompile);
   output(this, result.data, () => printConsent(result.data));
 });
-var off = new Command("off").description("Disable consent gating").action(async function action47() {
+var off = new Command("off").description("Disable consent gating").action(async function action46() {
   const result = await updateConsent(requireCredentials(), { consentMode: { enabled: false } });
   if (!result.ok || !result.data) fail(this, result.error ?? "Failed to disable consent settings", classifyStatus(result.status), result.errorDetails);
   warn(this, result.data.precompile);
@@ -12831,21 +11554,21 @@ async function patchWithRetry(command, build) {
   warn2(command, result.data.precompile);
   return result.data;
 }
-var list5 = new Command("list").alias("ls").description("List install domains").action(async function action48() {
+var list5 = new Command("list").alias("ls").description("List install domains").action(async function action47() {
   const data = await load4(this);
   output(this, data, () => printDomains(data));
 });
-var add = new Command("add").description("Add install domains").argument("<domain...>").action(async function action49(domain) {
+var add = new Command("add").description("Add install domains").argument("<domain...>").action(async function action48(domain) {
   const added = domain.map(normalizeDomain);
   const data = await patchWithRetry(this, (current) => Array.from(/* @__PURE__ */ new Set([...current.additionalDomains, ...added])));
   output(this, data, () => printDomains(data));
 });
-var remove = new Command("remove").description("Remove install domains").argument("<domain...>").action(async function action50(domain) {
+var remove = new Command("remove").description("Remove install domains").argument("<domain...>").action(async function action49(domain) {
   const removeSet = new Set(domain.map(normalizeDomain));
   const data = await patchWithRetry(this, (current) => current.additionalDomains.filter((d) => !removeSet.has(normalizeDomain(d))));
   output(this, data, () => printDomains(data));
 });
-var set2 = new Command("set").description("Replace install domains").argument("<domain...>").action(async function action51(domain) {
+var set2 = new Command("set").description("Replace install domains").argument("<domain...>").action(async function action50(domain) {
   const replacement = domain.map(normalizeDomain);
   const data = await patchWithRetry(this, () => replacement);
   output(this, data, () => printDomains(data));
@@ -12864,7 +11587,11 @@ function normalizeDomain2(value) {
     return "";
   }
 }
-var QA_FETCH_TIMEOUT_MS = 12e3;
+var QA_FETCH_TIMEOUT_MS = 15e3;
+function qaFetchTimeoutMs() {
+  const testOverride = Number(cliTestSetting("QA_FETCH_TIMEOUT_MS"));
+  return Number.isFinite(testOverride) && testOverride > 0 ? testOverride : QA_FETCH_TIMEOUT_MS;
+}
 var NAMED_HTML_ENTITIES = {
   amp: "&",
   lt: "<",
@@ -12902,29 +11629,29 @@ async function patchWithRetry2(command, build) {
   if (!shouldUseJson(command) && result.data.precompile?.status && result.data.precompile.status !== "ok") console.error(source_default.yellow(`Warning (${result.data.precompile.status}): ${result.data.precompile.summary}. Edge config may be stale until republish succeeds.`));
   return result.data;
 }
-var get3 = new Command("get").description("Show cross-domain handover settings").action(async function action52() {
+var get3 = new Command("get").description("Show cross-domain handover settings").action(async function action51() {
   const data = await load5(this);
   output(this, data, () => printSettings(data.externalTracking));
 });
-var set3 = new Command("set").description("Enable cross-domain identity handover").requiredOption("--domain <domain...>", "Bound handover domain(s)").option("--param <param>", "Handover query parameter").option("--signed", "Require signed handover tokens (the default; unsigning is a platform-support action)").action(async function action53(opts) {
+var set3 = new Command("set").description("Enable cross-domain identity handover").requiredOption("--domain <domain...>", "Bound handover domain(s)").option("--param <param>", "Handover query parameter").option("--signed", "Require signed handover tokens (the default; unsigning is a platform-support action)").action(async function action52(opts) {
   const domains = opts.domain.map(normalizeDomain2);
   if (domains.some((domain) => !domain)) fail(this, "Every --domain value must be a valid hostname containing a dot", EXIT_CODES.validation);
   if (opts.param && !/^[a-z_][a-z0-9_]{0,31}$/.test(opts.param)) fail(this, "--param must match ^[a-z_][a-z0-9_]{0,31}$", EXIT_CODES.validation);
   const data = await patchWithRetry2(this, (current) => ({ externalTracking: { domains: Array.from(new Set(domains)), handoverQueryParam: opts.param ?? current.externalTracking.handoverQueryParam, signed: true }, ifRevision: current.revision }));
   output(this, data, () => printSettings(data.externalTracking));
 });
-var off2 = new Command("off").description("Disable cross-domain handover").action(async function action54() {
+var off2 = new Command("off").description("Disable cross-domain handover").action(async function action53() {
   const data = await patchWithRetry2(this, (current) => ({ externalTracking: { domains: [], signed: true }, ifRevision: current.revision }));
   output(this, data, () => printSettings(data.externalTracking));
 });
-var qa2 = new Command("qa").description("Check static link/form handover parameter carriage").requiredOption("--from <url>", "Page URL to inspect").requiredOption("--to-domain <domain>", "Target domain that should carry the handover parameter").action(async function action55(opts) {
+var qa2 = new Command("qa").description("Check static link/form handover parameter carriage").requiredOption("--from <url>", "Page URL to inspect").requiredOption("--to-domain <domain>", "Target domain that should carry the handover parameter").action(async function action54(opts) {
   const config = await load5(this);
   const target = normalizeDomain2(opts.toDomain);
   if (!target) fail(this, "--to-domain must be a valid hostname", EXIT_CODES.validation);
   let response;
   let html;
   try {
-    response = await fetch(opts.from, { signal: AbortSignal.timeout(QA_FETCH_TIMEOUT_MS), redirect: "follow" });
+    response = await fetch(opts.from, { signal: AbortSignal.timeout(qaFetchTimeoutMs()), redirect: "follow" });
     if (!response.ok) fail(this, `Fetching ${opts.from} returned HTTP ${response.status}`, classifyStatus(response.status));
     html = await response.text();
   } catch (error) {
@@ -12934,7 +11661,10 @@ var qa2 = new Command("qa").description("Check static link/form handover paramet
   }
   const param = config.externalTracking.handoverQueryParam;
   const baseUrl = response.url || opts.from;
-  const hrefs = [...html.matchAll(/<(a|form)\b[^>]*(?:href|action)\s*=\s*["']([^"']+)["'][^>]*>/gi)].map((m) => decodeHtmlEntities(m[2]));
+  const hrefs = [
+    ...html.matchAll(/<(?:a|form)\b[^>]*\s(?:href|action)\s*=\s*["']([^"']+)["'][^>]*>/gi),
+    ...html.matchAll(/<[a-z][^>]*\s(?:data-href|data-url)\s*=\s*["']([^"']+)["'][^>]*>/gi)
+  ].map((m) => decodeHtmlEntities(m[1]));
   const targetUrls = hrefs.map((raw) => {
     try {
       return new URL(raw, baseUrl);
@@ -12966,6 +11696,7 @@ var DETECTION_MARKERS = [
   { id: "shopware", kind: "platform", verdict: "Shopware", confidence: "high", recipe: { placement: "Shopware storefront base template before </head>." }, match: /shopware|sw-?storefront|data-shopware/i },
   { id: "next_headless", kind: "platform", verdict: "Next.js headless", confidence: "high", recipe: { placement: "Headless app document/root layout before </head> so Apex loads on every route." }, match: /__NEXT_DATA__|\/_next\//i },
   { id: "webflow", kind: "platform", verdict: "Webflow", confidence: "high", recipe: { placement: "Webflow Project Settings \u2192 Custom Code \u2192 Head Code." }, match: /data-wf-page|data-wf-site|webflow\.js|assets\.website-files\.com/i },
+  { id: "borlabs", kind: "cmp", verdict: "Borlabs Cookie", recipe: { consentProvider: "borlabs", consentGroup: "statistics" }, match: /borlabs(?:-cookie)?|BorlabsCookie/i },
   { id: "cookiescript", kind: "cmp", verdict: "CookieScript", recipe: { consentProvider: "cookiescript", consentGroup: "targeting" }, match: /cookie-script\.com|CookieScript|cookiescript/i },
   { id: "usercentrics", kind: "cmp", verdict: "Usercentrics", recipe: { consentProvider: "usercentrics", consentGroup: "marketing" }, match: /app\.usercentrics\.eu|usercentrics\.eu|UC_UI|usercentrics/i },
   { id: "cookiebot", kind: "cmp", verdict: "Cookiebot", recipe: { consentProvider: "cookiebot", consentGroup: "marketing" }, match: /consent\.cookiebot\.com|Cookiebot/i },
@@ -13033,8 +11764,8 @@ function goalMatches(goal, rows) {
 var CHALLENGE_STATUSES = [401, 403, 429, 503];
 var PAGE_FETCH_TIMEOUT_MS = 12e3;
 async function fetchPrimaryHtml(host) {
-  if (process.env.APEX_CLI_MOCK_API === "1") {
-    const state = process.env.APEX_CLI_MOCK_DOCTOR_STATE;
+  if (cliTestSetting("API") === "1") {
+    const state = cliTestSetting("DOCTOR_STATE");
     if (state === "protected") return { protected: true };
     if (state === "page-error") return { error: "http 404" };
     if (state === "page-timeout") return { error: "The operation was aborted due to timeout" };
@@ -13092,8 +11823,8 @@ function servedConfigUrl(workerBase, shopId) {
   return `${workerBase}/config?shopId=${encodeURIComponent(shopId)}&env=${PRODUCTION_ENVIRONMENT_KEY}`;
 }
 async function fetchServedConfig(workerBase, shopId) {
-  if (process.env.APEX_CLI_MOCK_API === "1") {
-    const state = process.env.APEX_CLI_MOCK_DOCTOR_SERVED_CONFIG ?? "agree";
+  if (cliTestSetting("API") === "1") {
+    const state = cliTestSetting("DOCTOR_SERVED_CONFIG") ?? "agree";
     if (state === "unreachable") return { error: "mock worker is unreachable" };
     if (state === "diverge") return { config: { storeOrigins: ["https://example.com"], runtime: { consentMode: { enabled: false, provider: "custom" } } } };
     return { config: { storeOrigins: ["https://example.com", "https://www.example.com", "https://shop.example.com"], runtime: { consentMode: { enabled: true, provider: "cookiescript" } } } };
@@ -13190,7 +11921,7 @@ async function runDoctor(options = {}) {
   checks.push(unbound.length ? { checkId: "unbound_hosts", status: "FAIL", evidence: [...unbound.map((h) => `${h} sent pageviews but is not bound`), ...inventoryCaveat], fix: `apex domains add ${unbound[0]}` } : { checkId: "unbound_hosts", status: "PASS", evidence: ["All event hosts are bound to shop or environment domains.", ...inventoryCaveat] });
   checks.push(withCaveat(devPollutionCheck(eventHosts, envsRes.data), inventoryCaveat));
   const primary = hostOnly(domainsRes.data.domain) ?? eventHosts[0];
-  const shopId = resolveShopId(options);
+  const shopId = resolveShopId(options) ?? domainsRes.data.shop_id;
   const workerBase = resolveWorkerBase(options);
   const [page, servedResult] = await Promise.all([
     primary ? fetchPrimaryHtml(primary) : Promise.resolve({}),
@@ -13200,10 +11931,11 @@ async function runDoctor(options = {}) {
   if (!primary) checks.push({ checkId: "cmp_mismatch", status: "SKIP", evidence: ["No storefront host is configured for this shop yet; add a domain to run the CMP check."] });
   else if (page.protected) checks.push({ checkId: "cmp_mismatch", status: "SKIP", evidence: [`Primary storefront ${primary} appears protected or bot-challenged; verify in browser.`] });
   else if (page.error !== void 0 || page.html === void 0) checks.push({ checkId: "cmp_mismatch", status: "SKIP", evidence: [`Could not read https://${primary}: ${page.error ?? "no response body"}`, "No CMP verdict was formed; an error page carries no consent markers."] });
+  else if (consent.enabled && !consent.provider) checks.push({ checkId: "cmp_mismatch", status: "WARN", evidence: ["Consent mode is on, but no consent provider is configured", "Configure a consent provider before relying on consent gating"], fix: "apex consent set" });
   else {
     const cmpMarker = matchDetectionMarkers(page.html, "cmp")[0];
     if (!cmpMarker) {
-      checks.push(consent.enabled && consent.provider ? { checkId: "cmp_mismatch", status: "WARN", evidence: [`Consent mode is on with provider ${consent.provider}, but the served page carries no CMP marker`, `Expected CMP ${consent.provider} not found in served page`], fix: "apex consent set" } : { checkId: "cmp_mismatch", status: "PASS", evidence: ["No CMP marker detected."] });
+      checks.push(consent.enabled ? { checkId: "cmp_mismatch", status: "WARN", evidence: [`Consent mode is on with provider ${consent.provider}, but the served page carries no CMP marker`, `Expected CMP ${consent.provider} not found in served page`], fix: "apex consent set" } : { checkId: "cmp_mismatch", status: "PASS", evidence: ["No CMP marker detected."] });
     } else {
       const vendor = cmpMarker.verdict;
       const mismatch = !consent.enabled || consent.provider && consent.provider.toLowerCase() !== vendor.toLowerCase();
@@ -13257,7 +11989,7 @@ function consentRateCheck(items) {
   const estimate = estimateConsentRate(items);
   return { checkId: "consent_rate", status: "PASS", evidence: [`estimatedAcceptRate=${estimate.estimatedAcceptRate ?? "unknown"}`, `Baseline ${describeWindow(estimate.baselineWindow)}; gated ${describeWindow(estimate.gatedWindow)}`, CAVEAT] };
 }
-var doctorCommand = new Command("doctor").description("Check shop configuration against observed analytics").option("--shop-id <uuid>", "Shop ID used to read the Worker-served config; defaults to DRIP_SHOP_ID").option("--worker <url>", `Apex Worker base URL; defaults to DRIP_WORKER_URL or ${PRODUCTION_WORKER_BASE_URL}`).action(async function action56(options) {
+var doctorCommand = new Command("doctor").description("Check shop configuration against observed analytics").option("--shop-id <uuid>", "Override the shop ID discovered from the API (DRIP_SHOP_ID also overrides it)").option("--worker <url>", `Apex Worker base URL; defaults to DRIP_WORKER_URL or ${PRODUCTION_WORKER_BASE_URL}`).action(async function action55(options) {
   const data = await runDoctor(options);
   output(this, data, () => printDoctorReport(data.checks));
   if (data.checks.some((c) => c.status === "FAIL")) process.exitCode = EXIT_CODES.general;
@@ -13271,7 +12003,7 @@ function printDoctorReport(checks) {
     if (check.fix) console.log(`  fix: ${check.fix}`);
   }
 }
-var consentRateCommand = new Command("consent-rate").description("Estimate analytics consent acceptance from visitor series").option("--since <date>", "Consent gating start date (YYYY-MM-DD); splits the baseline and gated windows").action(async function action57(opts) {
+var consentRateCommand = new Command("consent-rate").description("Estimate analytics consent acceptance from visitor series").option("--since <date>", "Consent gating start date (YYYY-MM-DD); splits the baseline and gated windows").action(async function action56(opts) {
   if (opts.since !== void 0 && parseDay(opts.since) === null) fail(this, "--since must be a calendar date in YYYY-MM-DD form", EXIT_CODES.validation);
   const result = await getVisitorSeries(requireCredentials(), { days: VISITOR_SERIES_DAYS });
   if (!result.ok || !result.data) fail(this, result.error ?? "Failed to load visitor series", classifyStatus(result.status), result.errorDetails);
@@ -13310,14 +12042,14 @@ function analyticsSubcommand(name, description, defaultDays) {
     command.option("--planning-days <n>", "Planning window in days", "180");
     command.option("--limit <n>", "Maximum page rows", "50");
   }
-  return command.action(async function action70(opts) {
+  return command.action(async function action69(opts) {
     const result = await getAnalytics(requireCredentials(), name, { days: positiveInteger(this, opts.days, "--days"), planningDays: positiveInteger(this, opts.planningDays, "--planning-days"), limit: positiveInteger(this, opts.limit, "--limit") });
     if (!result.ok || !result.data) fail(this, result.error ?? `Failed to load ${name} analytics`, classifyStatus(result.status), result.errorDetails);
     output(this, { data: result.data.data }, () => printAnalytics(result.data.data));
   });
 }
 function urlsCommand() {
-  return new Command("urls").description("Show storefront URL inventory from pageview analytics").option("-d, --days <n>", "Analytics window in days", "14").option("--host <host>", "Filter inventory to one host").option("--contains <substring>", "Server-side path substring filter").option("--match <regex>", "Client-side regex filter; exhausts inventory pages before filtering").option("--limit <n>", "Maximum rows to print", "50").action(async function action70(opts) {
+  return new Command("urls").description("Show storefront URL inventory from pageview analytics").option("-d, --days <n>", "Analytics window in days", "14").option("--host <host>", "Filter inventory to one host").option("--contains <substring>", "Server-side path substring filter").option("--match <regex>", "Client-side regex filter; exhausts inventory pages before filtering").option("--limit <n>", "Maximum rows to print", "50").action(async function action69(opts) {
     const creds = requireCredentials();
     const days = positiveInteger(this, opts.days, "--days") ?? 14;
     const displayLimit = Math.min(200, positiveInteger(this, opts.limit, "--limit") ?? 50);
@@ -13348,7 +12080,7 @@ function urlsCommand() {
     });
   });
 }
-var analyticsCommand = new Command("analytics").description("Read shop analytics").addCommand(analyticsSubcommand("stats", "Show dashboard analytics stats", 7)).addCommand(analyticsSubcommand("timeseries", "Show analytics timeseries", 30)).addCommand(analyticsSubcommand("traffic", "Show traffic sources", 30)).addCommand(analyticsSubcommand("pages", "Show page analytics", 30)).addCommand(analyticsSubcommand("geo", "Show geography and device analytics", 30)).addCommand(analyticsSubcommand("sessions", "Show session analytics", 30)).addCommand(analyticsSubcommand("web-vitals", "Show web vitals analytics", 7)).addCommand(analyticsSubcommand("realtime", "Show realtime analytics")).addCommand(analyticsSubcommand("entry-exit", "Show entry and exit page analytics", 30)).addCommand(consentRateCommand).addCommand(urlsCommand()).addHelpText("after", `
+var analyticsCommand = new Command("analytics").description("Read shop analytics").addCommand(analyticsSubcommand("stats", "Show dashboard analytics stats", 7)).addCommand(analyticsSubcommand("timeseries", "Show analytics timeseries", 30)).addCommand(analyticsSubcommand("traffic", "Show traffic sources", 30)).addCommand(analyticsSubcommand("pages", "Show page analytics", 30)).addCommand(analyticsSubcommand("geo", "Show geography and device analytics", 30)).addCommand(analyticsSubcommand("sessions", "Show session analytics", 30)).addCommand(analyticsSubcommand("realtime", "Show realtime analytics")).addCommand(analyticsSubcommand("entry-exit", "Show entry and exit page analytics", 30)).addCommand(consentRateCommand).addCommand(urlsCommand()).addHelpText("after", `
 Examples:
   apex analytics stats --days 7
   apex analytics pages --planning-days 180 --limit 25
@@ -13394,18 +12126,10 @@ function privateIp(rawHost) {
   const [a, b] = host.split(".").map(Number);
   return a === 0 || a === 10 || a === 127 || a === 172 && b >= 16 && b <= 31 || a === 192 && b === 168 || a === 169 && b === 254;
 }
-function mockResolve(hostname) {
-  if (process.env.APEX_CLI_MOCK_API !== "1") return null;
-  const mode = process.env.APEX_CLI_MOCK_DNS ?? "public";
-  if (mode === "fail") throw new Error(`getaddrinfo EAI_AGAIN ${hostname}`);
-  if (mode === "empty") return [];
-  if (mode === "mapped-loopback") return [{ address: "::ffff:127.0.0.1", family: 6 }];
-  if (mode === "mapped-private-hex") return [{ address: "::ffff:0a00:0001", family: 6 }];
-  if (mode === "unspecified-v6") return [{ address: "::", family: 6 }];
-  return [{ address: "93.184.216.34", family: 4 }];
-}
+var testResolver;
+var testFetch;
 async function resolveHost(hostname) {
-  const mocked = mockResolve(hostname);
+  const mocked = testResolver?.(hostname) ?? null;
   const addresses = mocked ?? await (0, import_promises3.lookup)(hostname, { all: true });
   return addresses.map((entry) => entry.address);
 }
@@ -13430,44 +12154,6 @@ async function validateUrl(raw, allowedHosts) {
   if (privateAddress) throw new UrlPolicyError(`Refusing ${url.hostname}; DNS resolves to a private address (${privateAddress})`);
   return { url, addresses };
 }
-function mockFetch(url) {
-  if (process.env.APEX_CLI_MOCK_API !== "1") return null;
-  const oversizedFiller = "x".repeat(BODY_LIMIT_BYTES + 1024);
-  if (url.pathname === "/config") {
-    const mode = process.env.APEX_CLI_MOCK_CONFIG ?? "ok";
-    if (mode === "unreachable") throw new TypeError("fetch failed");
-    if (mode === "oversized") return new Response(JSON.stringify({ publicationRevision: 7, experiments: [], filler: oversizedFiller }), { status: 200, headers: { "content-type": "application/json" } });
-    if (mode === "gzipped") return new Response((0, import_node_zlib.gzipSync)(Buffer.from(JSON.stringify({ publicationRevision: 7, publication_revision: 7, experiments: [{ id: "experiment_1" }], runtime: { consentMode: { provider: "usercentrics", requiredGroup: "marketing" } }, delivery: { revision: 7, scriptUrl: `${url.origin}/s/shop_1.js?v=7`, deliveryState: "no_visual_tests" } }))), { status: 200, headers: { "content-type": "application/json", "content-encoding": "gzip" } });
-    if (mode === "unknown-encoding") return new Response("compressed-with-something-else", { status: 200, headers: { "content-type": "application/json", "content-encoding": "zstd" } });
-    if (mode === "http-error") return new Response(JSON.stringify({ error: "Failed to fetch config" }), { status: 502, headers: { "content-type": "application/json" } });
-    if (mode === "unrecognized") return new Response(JSON.stringify({ unexpected: true }), { status: 200, headers: { "content-type": "application/json" } });
-    const shopId = url.searchParams.get("shopId") ?? "shop_1";
-    return new Response(JSON.stringify({
-      publication_revision: 7,
-      publicationRevision: 7,
-      generated_at: "2026-08-05T00:00:00.000Z",
-      experiments: [{ id: "experiment_1" }],
-      runtime: { consentMode: { enabled: true, provider: "usercentrics", getter: "", requiredGroup: "marketing" } },
-      delivery: { version: 1, revision: 7, scriptUrl: `${url.origin}/s/${shopId}.js?v=7`, deliveryState: "no_visual_tests" },
-      geo: { country: "DE" }
-    }), { status: 200, headers: { "content-type": "application/json" } });
-  }
-  const page = process.env.APEX_CLI_MOCK_PAGE ?? "installed";
-  const installedHtml = `<html><head><script src="${PRODUCTION_WORKER_BASE_URL2}/s/shop_1.js?v=7"></script></head><body>ok</body></html>`;
-  if (page === "not-found") return new Response(`<html><body>Not found</body>${installedHtml}</html>`, { status: 404, headers: { "content-type": "text/html" } });
-  if (page === "forbidden") return new Response("<html><body>Forbidden</body></html>", { status: 403, headers: { "content-type": "text/html" } });
-  if (page === "challenge") return new Response('<html><title>Just a moment...</title><script src="/cdn-cgi/challenge-platform/h/b/orchestrate/chl_page/v1"></script></html>', { status: 403, headers: { "content-type": "text/html" } });
-  if (page === "oversized") return new Response(`${installedHtml}<!--${oversizedFiller}-->`, { status: 200, headers: { "content-type": "text/html" } });
-  if (page === "gzipped") return new Response((0, import_node_zlib.gzipSync)(Buffer.from(installedHtml)), { status: 200, headers: { "content-type": "text/html", "content-encoding": "gzip" } });
-  if (page === "corrupt-gzip-trailer") {
-    const archive2 = (0, import_node_zlib.gzipSync)(Buffer.from(`${installedHtml}<!--${"x".repeat(64 * 1024)}-->`));
-    archive2[archive2.length - 8] ^= 255;
-    return new Response(archive2, { status: 200, headers: { "content-type": "text/html", "content-encoding": "gzip" } });
-  }
-  if (page === "unknown-encoding") return new Response("compressed-with-something-else", { status: 200, headers: { "content-type": "text/html", "content-encoding": "zstd" } });
-  if (page === "prose-shopid") return new Response("<html><body><p>Set your shopId to shop_1 in the docs.</p></body></html>", { status: 200, headers: { "content-type": "text/html" } });
-  return new Response(installedHtml, { status: 200, headers: { "content-type": "text/html" } });
-}
 var REQUEST_TIMEOUT_MS = 1e4;
 var RESPONSE_DEADLINE_MS = 15e3;
 var BODY_LIMIT_BYTES = 2 * 1024 * 1024;
@@ -13496,10 +12182,10 @@ function decodeBody(raw, header, limits, hostname, inputTruncated = false) {
     const chunks = [];
     let bytes = 0;
     let settled = false;
-    const settle = (action70) => {
+    const settle = (action69) => {
       if (settled) return;
       settled = true;
-      action70();
+      action69();
     };
     stream.on("data", (chunk) => {
       if (settled) return;
@@ -13550,11 +12236,11 @@ function pinnedFetch(url, addresses, limits) {
       else callback(null, addresses[0], (0, import_node_net.isIP)(addresses[0]));
     };
     let settled = false;
-    const settle = (action70) => {
+    const settle = (action69) => {
       if (settled) return;
       settled = true;
       clearTimeout(deadline);
-      action70();
+      action69();
     };
     const req = send2(url, {
       method: "GET",
@@ -13631,7 +12317,7 @@ async function enforceBodyLimit(url, response, limits) {
 async function fetchSafe(raw, allowedHosts, limits) {
   let target = await validateUrl(raw, allowedHosts);
   for (let hop = 0; hop <= 5; hop++) {
-    const mocked = mockFetch(target.url);
+    const mocked = testFetch?.(target.url) ?? null;
     const result = mocked ? await enforceBodyLimit(target.url, mocked, limits) : await pinnedFetch(target.url, target.addresses, limits);
     if (![301, 302, 303, 307, 308].includes(result.response.status)) return result;
     const location = result.response.headers.get("location");
@@ -13743,13 +12429,14 @@ async function checkServedConfig(configUrl, workerBaseUrl, workerBaseSource) {
     message: "Worker served a recognized config document for this shop."
   };
 }
-var installCommand = new Command("install").description("Check Apex storefront installation").command("check").description("Verify snippet, served config, and recent tracking for the current shop").option("--url <url>", "Check one explicit bound storefront URL").option("--shop-id <id>", "Apex shop ID to verify (falls back to DRIP_SHOP_ID)").option("--worker-url <url>", "Apex Worker base URL that serves /config (defaults to the URL in the served snippet, then DRIP_WORKER_URL, then the production worker)").option("--environment <key>", "Environment key to request from the worker", "production").action(async function action58(opts) {
+var installCommand = new Command("install").description("Check Apex storefront installation").command("check").description("Verify snippet, served config, and recent tracking for the current shop").option("--url <url>", "Check one explicit bound storefront URL").option("--shop-id <id>", "Apex shop ID to verify (falls back to DRIP_SHOP_ID)").option("--worker-url <url>", "Apex Worker base URL that serves /config (defaults to the URL in the served snippet, then DRIP_WORKER_URL, then the production worker)").option("--environment <key>", "Environment key to request from the worker", "production").action(async function action57(opts) {
   const creds = requireCredentials();
   const shopId = opts.shopId?.trim() || process.env.DRIP_SHOP_ID?.trim() || null;
   if (!shopId) fail(this, "Shop ID is required: pass --shop-id <id> or set DRIP_SHOP_ID", EXIT_CODES.validation, { field: "shop-id" });
   const domains = await getInstallDomains(creds);
   if (!domains.ok || !domains.data) fail(this, domains.error ?? "Failed to load install domains", classifyStatus(domains.status), domains.errorDetails);
-  const storeOrigins = process.env.APEX_CLI_MOCK_API === "1" && process.env.APEX_CLI_MOCK_STORE_ORIGINS ? process.env.APEX_CLI_MOCK_STORE_ORIGINS.split(",") : domains.data.storeOrigins;
+  const mockStoreOrigins = cliTestSetting("STORE_ORIGINS");
+  const storeOrigins = cliTestSetting("API") === "1" && mockStoreOrigins ? mockStoreOrigins.split(",") : domains.data.storeOrigins;
   const origins = opts.url ? [opts.url] : storeOrigins;
   const allowedHosts = new Set(storeOrigins.map((origin) => normalizeHostname(new URL(origin).hostname)));
   const pages = [];
@@ -13808,11 +12495,11 @@ var installCommand = new Command("install").description("Check Apex storefront i
 
 // src/commands/flags.ts
 init_source();
-var import_node_fs13 = __toESM(require("node:fs"));
-var import_node_path11 = __toESM(require("node:path"));
+var import_node_fs14 = __toESM(require("node:fs"));
+var import_node_path12 = __toESM(require("node:path"));
 
 // src/edge-status.ts
-function getEdgeDeliveryStatus(deliveryType, expectedWorstCaseSeconds = 420) {
+function getEdgeDeliveryStatus(deliveryType, expectedWorstCaseSeconds = 360) {
   return deliveryType === "api" ? { edge_delivery: "not_applicable", message: `API-delivered flag \u2014 edge delivery is not applicable. A previously cached visual payload may remain at some PoPs for up to ~${expectedWorstCaseSeconds}s; a single-vantage status cannot prove global propagation.` } : { edge_delivery: "applicable", message: null };
 }
 function parsePublicationMetadata(value) {
@@ -13837,7 +12524,7 @@ function compareEdgePublication(currentValue, edgeValue, expectedWorstCaseSecond
   return { ...base, verdict: "live", relationship: edge.publication_revision > current.publication_revision ? "edge_ahead" : "equal" };
 }
 function formatEdgePropagationStatus(status2) {
-  const caveat = "This checks one CDN vantage point; other PoPs may lag by up to max-age + SWR.";
+  const caveat = "This checks one CDN vantage point; other PoPs may lag by up to max-age.";
   if (status2.verdict === "pending_publication") return `Pending publication \u2014 flag updated ${status2.flag_updated_at}, after the latest publication generated ${status2.current.generated_at ?? "never"}; the latest change is not live. After publication, allow ~${status2.expected_worst_case_seconds}s for propagation. ${caveat}`;
   if (status2.verdict === "unknown") return `Unknown \u2014 edge payload predates publication metadata. ${caveat}`;
   if (status2.verdict === "propagating") return `Propagating \u2014 edge revision ${status2.edge.publication_revision} (generated ${status2.edge.generated_at}) vs current revision ${status2.current.publication_revision} (generated ${status2.current.generated_at}); expected within ~${status2.expected_worst_case_seconds}s after generation. ${caveat}`;
@@ -13851,7 +12538,7 @@ function body(command, value, opts) {
   let parsed = {};
   if (value) {
     const source = value.startsWith("@") ? value.slice(1) : value;
-    const text = value.startsWith("@") || import_node_fs13.default.existsSync(source) ? import_node_fs13.default.readFileSync(import_node_path11.default.resolve(process.cwd(), source), "utf8") : value;
+    const text = value.startsWith("@") || import_node_fs14.default.existsSync(source) ? import_node_fs14.default.readFileSync(import_node_path12.default.resolve(process.cwd(), source), "utf8") : value;
     try {
       parsed = JSON.parse(text);
     } catch (e) {
@@ -13979,18 +12666,18 @@ function write(name) {
   });
   return c;
 }
-function lifecycle(action70) {
-  return new Command(action70).description(`${action70[0].toUpperCase()}${action70.slice(1)} a flag`).argument("<id>").action(async function(id) {
+function lifecycle(action69) {
+  return new Command(action69).description(`${action69[0].toUpperCase()}${action69.slice(1)} a flag`).argument("<id>").action(async function(id) {
     const r = await transitionManagedDelivery(
       requireCredentials(),
       kind,
       id,
-      action70
+      action69
     );
     if (!r.ok || !r.data)
       fail(
         this,
-        r.error ?? `Failed to ${action70}`,
+        r.error ?? `Failed to ${action69}`,
         classifyStatus(r.status),
         r.errorDetails
       );
@@ -14006,8 +12693,8 @@ Examples:
 `);
 
 // src/commands/backlog.ts
-var import_node_fs14 = __toESM(require("node:fs"));
-var import_node_path12 = __toESM(require("node:path"));
+var import_node_fs15 = __toESM(require("node:fs"));
+var import_node_path13 = __toESM(require("node:path"));
 init_source();
 var kind2 = "backlog";
 var singular = "backlog item";
@@ -14015,7 +12702,7 @@ function parse(command, value) {
   if (!value) return {};
   try {
     const source = value.startsWith("@") ? value.slice(1) : value;
-    const text = value.startsWith("@") || import_node_fs14.default.existsSync(source) ? import_node_fs14.default.readFileSync(import_node_path12.default.resolve(process.cwd(), source), "utf8") : value;
+    const text = value.startsWith("@") || import_node_fs15.default.existsSync(source) ? import_node_fs15.default.readFileSync(import_node_path13.default.resolve(process.cwd(), source), "utf8") : value;
     const body5 = JSON.parse(text);
     if (!body5 || typeof body5 !== "object" || Array.isArray(body5)) throw new Error("body must be an object");
     return body5;
@@ -14040,18 +12727,18 @@ var get5 = new Command("get").description("Get a backlog item").argument("<id>",
   if (!r.ok || !r.data) fail(this, r.error ?? "Failed to get", classifyStatus(r.status), r.errorDetails);
   output(this, { backlog_item: r.data }, () => detail2(r.data));
 });
-function write2(action70) {
-  const c = new Command(action70).description(`${action70 === "create" ? "Create" : "Update"} a ${singular}`);
-  if (action70 === "update") c.argument("<id>", `${singular} ID`);
+function write2(action69) {
+  const c = new Command(action69).description(`${action69 === "create" ? "Create" : "Update"} a ${singular}`);
+  if (action69 === "update") c.argument("<id>", `${singular} ID`);
   c.argument("[json]", "Inline JSON, @file, or file path").option("--file <path>", "JSON body file");
   c.action(async function(...args) {
     const o = this.opts();
-    const id = action70 === "update" ? String(args[0]) : void 0;
-    const raw = o.file ? `@${o.file}` : String(args[action70 === "update" ? 1 : 0] ?? "") || void 0;
+    const id = action69 === "update" ? String(args[0]) : void 0;
+    const raw = o.file ? `@${o.file}` : String(args[action69 === "update" ? 1 : 0] ?? "") || void 0;
     const body5 = parse(this, raw);
     if (!Object.keys(body5).length) fail(this, "Provide a JSON body.", EXIT_CODES.validation);
-    const r = action70 === "create" ? await createInsight(requireCredentials(), kind2, body5) : await updateInsight(requireCredentials(), kind2, id, body5);
-    if (!r.ok || !r.data) fail(this, r.error ?? `Failed to ${action70}`, classifyStatus(r.status), r.errorDetails);
+    const r = action69 === "create" ? await createInsight(requireCredentials(), kind2, body5) : await updateInsight(requireCredentials(), kind2, id, body5);
+    if (!r.ok || !r.data) fail(this, r.error ?? `Failed to ${action69}`, classifyStatus(r.status), r.errorDetails);
     output(this, { backlog_item: r.data }, () => detail2(r.data));
   });
   return c;
@@ -14086,8 +12773,8 @@ var remove2 = new Command("delete").description("Delete a backlog item").argumen
 var backlogCommand = new Command("backlog").description("Manage backlog").addCommand(list7).addCommand(get5).addCommand(write2("create")).addCommand(write2("update")).addCommand(archive).addCommand(restore).addCommand(remove2);
 
 // src/commands/signals.ts
-var import_node_fs15 = __toESM(require("node:fs"));
-var import_node_path13 = __toESM(require("node:path"));
+var import_node_fs16 = __toESM(require("node:fs"));
+var import_node_path14 = __toESM(require("node:path"));
 init_source();
 var kind3 = "signals";
 var singular2 = "signal";
@@ -14095,7 +12782,7 @@ function parse2(command, value) {
   if (!value) return {};
   try {
     const source = value.startsWith("@") ? value.slice(1) : value;
-    const text = value.startsWith("@") || import_node_fs15.default.existsSync(source) ? import_node_fs15.default.readFileSync(import_node_path13.default.resolve(process.cwd(), source), "utf8") : value;
+    const text = value.startsWith("@") || import_node_fs16.default.existsSync(source) ? import_node_fs16.default.readFileSync(import_node_path14.default.resolve(process.cwd(), source), "utf8") : value;
     const body5 = JSON.parse(text);
     if (!body5 || typeof body5 !== "object" || Array.isArray(body5)) throw new Error("body must be an object");
     return body5;
@@ -14120,18 +12807,18 @@ var get6 = new Command("get").description("Get a signal").argument("<id>", "sign
   if (!r.ok || !r.data) fail(this, r.error ?? "Failed to get", classifyStatus(r.status), r.errorDetails);
   output(this, { signal: r.data }, () => detail3(r.data));
 });
-function write3(action70) {
-  const c = new Command(action70).description(`${action70 === "create" ? "Create" : "Update"} a ${singular2}`);
-  if (action70 === "update") c.argument("<id>", `${singular2} ID`);
+function write3(action69) {
+  const c = new Command(action69).description(`${action69 === "create" ? "Create" : "Update"} a ${singular2}`);
+  if (action69 === "update") c.argument("<id>", `${singular2} ID`);
   c.argument("[json]", "Inline JSON, @file, or file path").option("--file <path>", "JSON body file");
   c.action(async function(...args) {
     const o = this.opts();
-    const id = action70 === "update" ? String(args[0]) : void 0;
-    const raw = o.file ? `@${o.file}` : String(args[action70 === "update" ? 1 : 0] ?? "") || void 0;
+    const id = action69 === "update" ? String(args[0]) : void 0;
+    const raw = o.file ? `@${o.file}` : String(args[action69 === "update" ? 1 : 0] ?? "") || void 0;
     const body5 = parse2(this, raw);
     if (!Object.keys(body5).length) fail(this, "Provide a JSON body.", EXIT_CODES.validation);
-    const r = action70 === "create" ? await createInsight(requireCredentials(), kind3, body5) : await updateInsight(requireCredentials(), kind3, id, body5);
-    if (!r.ok || !r.data) fail(this, r.error ?? `Failed to ${action70}`, classifyStatus(r.status), r.errorDetails);
+    const r = action69 === "create" ? await createInsight(requireCredentials(), kind3, body5) : await updateInsight(requireCredentials(), kind3, id, body5);
+    if (!r.ok || !r.data) fail(this, r.error ?? `Failed to ${action69}`, classifyStatus(r.status), r.errorDetails);
     output(this, { signal: r.data }, () => detail3(r.data));
   });
   return c;
@@ -14145,14 +12832,14 @@ var signalsCommand = new Command("signals").description("Manage signals").addCom
 
 // src/commands/personalizations.ts
 init_source();
-var import_node_fs16 = __toESM(require("node:fs"));
-var import_node_path14 = __toESM(require("node:path"));
+var import_node_fs17 = __toESM(require("node:fs"));
+var import_node_path15 = __toESM(require("node:path"));
 var kind4 = "personalizations";
 function body2(command, value, opts) {
   let parsed = {};
   if (value) {
     const source = value.startsWith("@") ? value.slice(1) : value;
-    const text = value.startsWith("@") || import_node_fs16.default.existsSync(source) ? import_node_fs16.default.readFileSync(import_node_path14.default.resolve(process.cwd(), source), "utf8") : value;
+    const text = value.startsWith("@") || import_node_fs17.default.existsSync(source) ? import_node_fs17.default.readFileSync(import_node_path15.default.resolve(process.cwd(), source), "utf8") : value;
     try {
       parsed = JSON.parse(text);
     } catch (e) {
@@ -14249,20 +12936,20 @@ function write4(name) {
   });
   return c;
 }
-function lifecycle2(action70) {
-  return new Command(action70).description(
-    `${action70[0].toUpperCase()}${action70.slice(1)} a personalization`
+function lifecycle2(action69) {
+  return new Command(action69).description(
+    `${action69[0].toUpperCase()}${action69.slice(1)} a personalization`
   ).argument("<id>").action(async function(id) {
     const r = await transitionManagedDelivery(
       requireCredentials(),
       kind4,
       id,
-      action70
+      action69
     );
     if (!r.ok || !r.data)
       fail(
         this,
-        r.error ?? `Failed to ${action70}`,
+        r.error ?? `Failed to ${action69}`,
         classifyStatus(r.status),
         r.errorDetails
       );
@@ -14273,13 +12960,13 @@ var personalizationsCommand = new Command("personalizations").description("Manag
 
 // src/commands/targeting-resources.ts
 init_source();
-var import_node_fs17 = __toESM(require("node:fs"));
-var import_node_path15 = __toESM(require("node:path"));
+var import_node_fs18 = __toESM(require("node:fs"));
+var import_node_path16 = __toESM(require("node:path"));
 function body3(command, value) {
   if (!value) return {};
   const source = value.startsWith("@") ? value.slice(1) : value;
   try {
-    const text = value.startsWith("@") || import_node_fs17.default.existsSync(source) ? import_node_fs17.default.readFileSync(import_node_path15.default.resolve(process.cwd(), source), "utf8") : value;
+    const text = value.startsWith("@") || import_node_fs18.default.existsSync(source) ? import_node_fs18.default.readFileSync(import_node_path16.default.resolve(process.cwd(), source), "utf8") : value;
     return JSON.parse(text);
   } catch (error) {
     fail(
@@ -14358,17 +13045,17 @@ function targetingResourceCommand(kind5) {
         );
       })
     );
-  for (const action70 of ["create", "update"]) {
-    const command = new Command(action70).description(
-      `${action70 === "create" ? "Create" : "Update"} a ${singular3}`
+  for (const action69 of ["create", "update"]) {
+    const command = new Command(action69).description(
+      `${action69 === "create" ? "Create" : "Update"} a ${singular3}`
     );
-    if (action70 === "update") command.argument("<id>");
+    if (action69 === "update") command.argument("<id>");
     command.argument("[json]", "Inline JSON, @file, or file path").option("--file <path>", "JSON body file").action(async function(...args) {
       const opts = this.opts();
-      const id = action70 === "update" ? String(args[0]) : void 0;
-      const value = opts.file ? `@${opts.file}` : String(args[action70 === "update" ? 1 : 0] ?? "") || void 0;
+      const id = action69 === "update" ? String(args[0]) : void 0;
+      const value = opts.file ? `@${opts.file}` : String(args[action69 === "update" ? 1 : 0] ?? "") || void 0;
       const requestBody = body3(this, value);
-      if (action70 === "update" && typeof requestBody === "object" && requestBody !== null && !Array.isArray(requestBody) && Object.keys(requestBody).length === 0)
+      if (action69 === "update" && typeof requestBody === "object" && requestBody !== null && !Array.isArray(requestBody) && Object.keys(requestBody).length === 0)
         fail(
           this,
           `Updating a ${singular3} requires at least one field.`,
@@ -14376,7 +13063,7 @@ function targetingResourceCommand(kind5) {
         );
       const response = await requestTargetingResource(
         requireCredentials(),
-        action70 === "create" ? "POST" : "PATCH",
+        action69 === "create" ? "POST" : "PATCH",
         kind5,
         id,
         requestBody
@@ -14384,7 +13071,7 @@ function targetingResourceCommand(kind5) {
       if (!response.ok || !response.data)
         fail(
           this,
-          response.error ?? `Failed to ${action70}`,
+          response.error ?? `Failed to ${action69}`,
           classifyStatus(response.status),
           response.errorDetails
         );
@@ -14393,7 +13080,7 @@ function targetingResourceCommand(kind5) {
         {
           [kind5 === "exclusion-groups" ? "exclusion_group" : singular3]: response.data
         },
-        () => console.log(source_default.green(`${action70}d ${singular3}`))
+        () => console.log(source_default.green(`${action69}d ${singular3}`))
       );
     });
     root.addCommand(command);
@@ -14480,7 +13167,7 @@ var exclusionGroupsCommand = targetingResourceCommand("exclusion-groups");
 // src/commands/brand.ts
 init_source();
 var NO_PROFILE_MESSAGE = "No brand profile yet \u2014 run onboarding or a site check";
-var brandCommand = new Command("brand").description("Print the shop brand context for external agents").action(async function action59() {
+var brandCommand = new Command("brand").description("Print the shop brand context for external agents").action(async function action58() {
   const creds = requireCredentials();
   const res = await getBrandContext(creds);
   if (res.status === 404) {
@@ -14513,7 +13200,7 @@ var brandCommand = new Command("brand").description("Print the shop brand contex
 
 // src/commands/targeting.ts
 init_source();
-var test2 = new Command("test").description("Evaluate experiment URL targeting for a page").argument("<url>", "URL to evaluate").option("--status <status>", "Comma-separated statuses to include, or all", "all").action(async function action60(url, opts) {
+var test2 = new Command("test").description("Evaluate experiment URL targeting for a page").argument("<url>", "URL to evaluate").option("--status <status>", "Comma-separated statuses to include, or all", "all").action(async function action59(url, opts) {
   const creds = requireCredentials();
   const res = await testTargeting(creds, url, { status: opts.status });
   if (!res.ok || !res.data) {
@@ -14553,13 +13240,13 @@ var targetingCommand = new Command("targeting").description("Test experiment tar
 
 // src/commands/sos.ts
 init_source();
-var import_node_fs18 = __toESM(require("node:fs"));
-var import_node_path16 = __toESM(require("node:path"));
+var import_node_fs19 = __toESM(require("node:fs"));
+var import_node_path17 = __toESM(require("node:path"));
 var SOS_TYPES = /* @__PURE__ */ new Set(["full_handover", "design", "development", "qa", "config", "bug"]);
 function readText(value) {
   if (!value) return void 0;
   if (!value.startsWith("@")) return value;
-  return import_node_fs18.default.readFileSync(import_node_path16.default.resolve(process.cwd(), value.slice(1)), "utf8");
+  return import_node_fs19.default.readFileSync(import_node_path17.default.resolve(process.cwd(), value.slice(1)), "utf8");
 }
 function printTicket(ticket, reused) {
   console.log();
@@ -14570,7 +13257,7 @@ function printTicket(ticket, reused) {
   console.log(`  Status: ${ticket.my_status ?? ticket.mapped_status}`);
   console.log();
 }
-var create4 = new Command("create").description("Create an Apex SOS ticket").option("--type <type>", "full_handover|design|development|qa|config|bug", "qa").option("--loom <url>", "Loom URL with reproduction or QA context").option("--experiment <id>", "Experiment ID").option("--sub-class <text>", "SOS sub-classification").option("--description <text-or-@file>", "Description text or @path").argument("[description]", "Description text").action(async function action61(descriptionArg, opts) {
+var create4 = new Command("create").description("Create an Apex SOS ticket").option("--type <type>", "full_handover|design|development|qa|config|bug", "qa").option("--loom <url>", "Loom URL with reproduction or QA context").option("--experiment <id>", "Experiment ID").option("--sub-class <text>", "SOS sub-classification").option("--description <text-or-@file>", "Description text or @path").argument("[description]", "Description text").action(async function action60(descriptionArg, opts) {
   if (!SOS_TYPES.has(opts.type)) {
     fail(this, "Invalid SOS type. Use full_handover, design, development, qa, config, or bug.", 3);
   }
@@ -14588,7 +13275,7 @@ var create4 = new Command("create").description("Create an Apex SOS ticket").opt
   }
   output(this, res.data, () => printTicket(res.data.ticket, res.data.reused));
 });
-var mine = new Command("mine").description("List SOS tickets created by this API key").action(async function action62() {
+var mine = new Command("mine").description("List SOS tickets created by this API key").action(async function action61() {
   const creds = requireCredentials();
   const res = await listMySos(creds);
   if (!res.ok || !res.data) {
@@ -14641,13 +13328,13 @@ var markRead = new Command("mark-read").option("--channel <key>", "Mark one chan
 var inboxCommand = new Command("inbox").description("Read and send inbox messages").addCommand(list11).addCommand(send).addCommand(markRead);
 
 // src/commands/shops.ts
-var import_node_fs19 = __toESM(require("node:fs"));
-var import_node_path17 = __toESM(require("node:path"));
+var import_node_fs20 = __toESM(require("node:fs"));
+var import_node_path18 = __toESM(require("node:path"));
 function body4(command, raw) {
   if (!raw) return {};
   try {
     const source = raw.startsWith("@") ? raw.slice(1) : raw;
-    const text = raw.startsWith("@") || import_node_fs19.default.existsSync(source) ? import_node_fs19.default.readFileSync(import_node_path17.default.resolve(source), "utf8") : raw;
+    const text = raw.startsWith("@") || import_node_fs20.default.existsSync(source) ? import_node_fs20.default.readFileSync(import_node_path18.default.resolve(source), "utf8") : raw;
     const value = JSON.parse(text);
     if (!value || typeof value !== "object" || Array.isArray(value))
       throw new Error("body must be an object");
@@ -14909,7 +13596,7 @@ function commandSchema(command) {
   };
 }
 function createSchemaCommand(program3) {
-  return new Command("schema").description("Print the current Apex CLI command and flag schema").option("--json", "Print JSON schema").action(function action70() {
+  return new Command("schema").description("Print the current Apex CLI command and flag schema").option("--json", "Print JSON schema").action(function action69() {
     const schema = commandSchema(program3);
     output(this, schema, () => {
       process.stdout.write(`${JSON.stringify(schema, null, 2)}
@@ -14919,16 +13606,16 @@ function createSchemaCommand(program3) {
 }
 
 // src/commands/skills.ts
-var import_node_fs20 = __toESM(require("node:fs"));
-var import_node_path18 = __toESM(require("node:path"));
+var import_node_fs21 = __toESM(require("node:fs"));
+var import_node_path19 = __toESM(require("node:path"));
 function packageRoot() {
   const candidates = [
-    import_node_path18.default.resolve(__dirname, ".."),
-    import_node_path18.default.resolve(import_node_path18.default.dirname(process.argv[1] ?? process.cwd()), ".."),
-    import_node_path18.default.resolve(process.cwd(), "packages/cli")
+    import_node_path19.default.resolve(__dirname, ".."),
+    import_node_path19.default.resolve(import_node_path19.default.dirname(process.argv[1] ?? process.cwd()), ".."),
+    import_node_path19.default.resolve(process.cwd(), "packages/cli")
   ];
   for (const candidate of candidates) {
-    if (import_node_fs20.default.existsSync(import_node_path18.default.join(candidate, "AGENTS.md"))) return candidate;
+    if (import_node_fs21.default.existsSync(import_node_path19.default.join(candidate, "AGENTS.md"))) return candidate;
   }
   throw new Error(
     `Apex CLI package files not found. Looked for AGENTS.md in: ${candidates.join(", ")}`
@@ -14937,24 +13624,24 @@ function packageRoot() {
 function skillPaths() {
   const root = packageRoot();
   return {
-    agents: import_node_path18.default.join(root, "AGENTS.md"),
-    skill: import_node_path18.default.join(root, "skills", "apex-cli", "SKILL.md")
+    agents: import_node_path19.default.join(root, "AGENTS.md"),
+    skill: import_node_path19.default.join(root, "skills", "apex-cli", "SKILL.md")
   };
 }
 function installSkill(paths, targetRoot) {
-  const missing = [paths.skill, paths.agents].filter((filePath) => !import_node_fs20.default.existsSync(filePath));
+  const missing = [paths.skill, paths.agents].filter((filePath) => !import_node_fs21.default.existsSync(filePath));
   if (missing.length > 0) {
     throw new Error(
       `Apex CLI package files not found. Missing: ${missing.join(", ")}`
     );
   }
-  const target = import_node_path18.default.resolve(targetRoot, "apex-cli");
-  import_node_fs20.default.mkdirSync(target, { recursive: true });
-  import_node_fs20.default.copyFileSync(paths.skill, import_node_path18.default.join(target, "SKILL.md"));
-  import_node_fs20.default.copyFileSync(paths.agents, import_node_path18.default.join(target, "AGENTS.md"));
+  const target = import_node_path19.default.resolve(targetRoot, "apex-cli");
+  import_node_fs21.default.mkdirSync(target, { recursive: true });
+  import_node_fs21.default.copyFileSync(paths.skill, import_node_path19.default.join(target, "SKILL.md"));
+  import_node_fs21.default.copyFileSync(paths.agents, import_node_path19.default.join(target, "AGENTS.md"));
   return target;
 }
-var skillsCommand = new Command("skills").description("Print or install the Apex CLI agent skill files").option("--install", "Copy the Apex CLI skill into ./.claude/skills/apex-cli").option("--target <dir>", "Install target skills directory", ".claude/skills").option("--json", "Print JSON").action(function action63(opts) {
+var skillsCommand = new Command("skills").description("Print or install the Apex CLI agent skill files").option("--install", "Copy the Apex CLI skill into ./.claude/skills/apex-cli").option("--target <dir>", "Install target skills directory", ".claude/skills").option("--json", "Print JSON").action(function action62(opts) {
   let paths;
   try {
     paths = skillPaths();
@@ -15169,8 +13856,8 @@ async function fetchText(url) {
   const res = await fetch(url, { headers: { "user-agent": DESKTOP_UA2, accept: "text/html,application/xhtml+xml,application/json;q=0.9,*/*;q=0.8" }, redirect: "follow", signal: AbortSignal.timeout(12e3) });
   return { status: res.status, text: await readResponseText(res), finalUrl: res.url };
 }
-function abs(base, path20) {
-  return new URL(path20, base).toString();
+function abs(base, path21) {
+  return new URL(path21, base).toString();
 }
 function looksLikeShopifyCart(text) {
   try {
@@ -15190,9 +13877,9 @@ async function collectSignals(url) {
   const chunks = [`__apex_primary_status_${primary.status}__`, primary.text];
   const protectedHit = primary.status === 403 || primary.status === 429 || matchDetectionMarkers(primary.text, "protected").length > 0;
   if (!protectedHit) {
-    for (const path20 of ["/cart.js"]) {
+    for (const path21 of ["/cart.js"]) {
       try {
-        const secondary = await fetchText(abs(primary.finalUrl || url, path20));
+        const secondary = await fetchText(abs(primary.finalUrl || url, path21));
         if (secondary.status >= 200 && secondary.status < 300 && looksLikeShopifyCart(secondary.text)) {
           chunks.push("__apex_secondary_shopify_cart_js__", secondary.text.slice(0, 2e3));
         }
@@ -15267,7 +13954,7 @@ var prospectCommand = new Command("prospect").description("Pre-sales storefront
 
 // src/commands/webhooks.ts
 init_source();
-var SIGNATURE_DOC = "https://app.drip-apex.com/docs/api/webhooks#signatures";
+var SIGNATURE_DOC = "https://app.drip-apex.com/docs/developers/webhooks#signatures";
 function requireShopSecretKey(_command) {
   requireCredentials();
 }
@@ -15325,11 +14012,11 @@ function printDeliveries(deliveries2, webhook) {
 function selectedEvents(opts) {
   return [...new Set((opts.event ?? []).map((event) => event.trim()).filter(Boolean))];
 }
-var list14 = new Command("list").alias("ls").description("List webhooks. JSON includes availableEvents; secrets are never returned after create.").action(async function action64() {
+var list14 = new Command("list").alias("ls").description("List webhooks. JSON includes availableEvents; secrets are never returned after create.").action(async function action63() {
   const data = await loadWebhookIndex(this);
   output(this, data, () => printWebhooks(data.data));
 });
-var create7 = new Command("create").description(`Create a webhook. Prints the signing secret once. Signature docs: ${SIGNATURE_DOC}`).requiredOption("--url <url>", "HTTPS callback URL").option("--event <event>", "Webhook event to subscribe to; repeat for multiple events", (value, previous = []) => [...previous, value], []).action(async function action65(opts) {
+var create7 = new Command("create").description(`Create a webhook. Prints the signing secret once. Signature docs: ${SIGNATURE_DOC}`).requiredOption("--url <url>", "HTTPS callback URL").option("--event <event>", "Webhook event to subscribe to; repeat for multiple events", (value, previous = []) => [...previous, value], []).action(async function action64(opts) {
   const events = selectedEvents(opts);
   if (events.length === 0) fail(this, "At least one --event is required", EXIT_CODES.validation);
   const index = await loadWebhookIndex(this);
@@ -15346,19 +14033,19 @@ var create7 = new Command("create").description(`Create a webhook. Prints the si
     console.log(`Signature verification: ${SIGNATURE_DOC}`);
   });
 });
-var remove4 = new Command("delete").alias("rm").description("Delete a webhook").argument("<id>", "Webhook id").action(async function action66(id) {
+var remove4 = new Command("delete").alias("rm").description("Delete a webhook").argument("<id>", "Webhook id").action(async function action65(id) {
   requireShopSecretKey(this);
   const result = handleResult(this, await deleteWebhook(requireCredentials(), id), "Failed to delete webhook");
   output(this, result, () => console.log(source_default.green(`Deleted webhook ${id}`)));
 });
-var deliveries = new Command("deliveries").description("List webhook deliveries including failure and disabled state").argument("<id>", "Webhook id").option("--limit <n>", "Maximum deliveries to show", "20").action(async function action67(id, opts) {
+var deliveries = new Command("deliveries").description("List webhook deliveries including failure and disabled state").argument("<id>", "Webhook id").option("--limit <n>", "Maximum deliveries to show", "20").action(async function action66(id, opts) {
   const limit = Number.parseInt(opts.limit, 10);
   if (!Number.isInteger(limit) || limit < 1) fail(this, "--limit must be a positive integer", EXIT_CODES.validation);
   requireShopSecretKey(this);
   const result = handleResult(this, await getWebhookDeliveries(requireCredentials(), id, limit), "Failed to load deliveries");
   output(this, result, () => printDeliveries(result.data, result.webhook));
 });
-var update4 = new Command("update").description("Update a webhook URL, events, or active state").argument("<id>", "Webhook id").option("--url <url>", "HTTPS callback URL").option("--event <event>", "Replacement event; repeat for multiple events", (value, previous = []) => [...previous, value], []).option("--active", "Enable the webhook").option("--inactive", "Disable the webhook").action(async function action68(id, opts) {
+var update4 = new Command("update").description("Update a webhook URL, events, or active state").argument("<id>", "Webhook id").option("--url <url>", "HTTPS callback URL").option("--event <event>", "Replacement event; repeat for multiple events", (value, previous = []) => [...previous, value], []).option("--active", "Enable the webhook").option("--inactive", "Disable the webhook").action(async function action67(id, opts) {
   if (opts.active && opts.inactive) fail(this, "Use only one of --active or --inactive", EXIT_CODES.validation);
   const events = selectedEvents(opts);
   const body5 = {};
@@ -15378,7 +14065,7 @@ var update4 = new Command("update").description("Update a webhook URL, events, o
   const result = handleResult(this, await updateWebhook(requireCredentials(), id, body5), "Failed to update webhook");
   output(this, { webhook: result }, () => printWebhooks([result]));
 });
-var test3 = new Command("test").description("Send a signed test event to a webhook").argument("<id>", "Webhook id").action(async function action69(id) {
+var test3 = new Command("test").description("Send a signed test event to a webhook").argument("<id>", "Webhook id").action(async function action68(id) {
   requireShopSecretKey(this);
   const result = handleResult(this, await testWebhook(requireCredentials(), id), "Failed to send test webhook");
   output(this, result, () => console.log(source_default.green(`Sent test delivery ${result.delivery.id}: ${result.delivery.status}`)));
@@ -15386,8 +14073,8 @@ var test3 = new Command("test").description("Send a signed test event to a webho
 var webhooksCommand = new Command("webhooks").description("Manage shop webhooks").addCommand(list14).addCommand(create7).addCommand(update4).addCommand(remove4).addCommand(deliveries).addCommand(test3);
 
 // src/commands/config-resources.ts
-var import_node_fs21 = __toESM(require("node:fs"));
-var import_node_path19 = __toESM(require("node:path"));
+var import_node_fs22 = __toESM(require("node:fs"));
+var import_node_path20 = __toESM(require("node:path"));
 function show(resource) {
   process.stdout.write(`${JSON.stringify(resource, null, 2)}
 `);
@@ -15472,14 +14159,14 @@ function readFamily(family, label) {
 }
 var assetReads = readFamily("assets", "assets");
 var upload = new Command("upload").description("Upload an asset").argument("<file>").action(async function(file) {
-  const absolute = import_node_path19.default.resolve(process.cwd(), file);
-  if (!import_node_fs21.default.existsSync(absolute))
+  const absolute = import_node_path20.default.resolve(process.cwd(), file);
+  if (!import_node_fs22.default.existsSync(absolute))
     fail(this, `File not found: ${file}`, 3);
-  const fileStat = import_node_fs21.default.statSync(absolute);
+  const fileStat = import_node_fs22.default.statSync(absolute);
   if (!fileStat.isFile()) fail(this, `File not found: ${file}`, 3);
   if (fileStat.size > MAX_ASSET_SIZE_BYTES)
     fail(this, `${file} is larger than 10 MB`, 3);
-  const mimeType = ASSET_MIME_TYPES[import_node_path19.default.extname(absolute).toLowerCase()];
+  const mimeType = ASSET_MIME_TYPES[import_node_path20.default.extname(absolute).toLowerCase()];
   if (!mimeType)
     fail(
       this,
@@ -15488,8 +14175,8 @@ var upload = new Command("upload").description("Upload an asset").argument("<fil
     );
   const r = await uploadAssets(requireCredentials(), [
     {
-      name: import_node_path19.default.basename(absolute),
-      bytes: import_node_fs21.default.readFileSync(absolute),
+      name: import_node_path20.default.basename(absolute),
+      bytes: import_node_fs22.default.readFileSync(absolute),
       type: mimeType
     }
   ]);
@@ -15543,6 +14230,19 @@ var snippet = new Command("snippet").description("Generate an external purchase
 var externalPixelsCommand = new Command("external-pixels").description("Manage external pixels").addCommand(snippet);
 
 // src/cli.ts
+var mockApiEnvironmentKey = ["APEX", "CLI", "MOCK", "API"].join("_");
+if (process.env[mockApiEnvironmentKey] === "1" && !cliTestHarnessActive()) {
+  const message = "mock harness is not part of the published CLI; use the test artifact";
+  const guardTerminatorIndex = process.argv.indexOf("--");
+  const guardArgv = guardTerminatorIndex === -1 ? process.argv : process.argv.slice(0, guardTerminatorIndex);
+  if (guardArgv.includes("--json") || !process.stdout.isTTY) {
+    writeErrorEnvelope(new CliError(message, EXIT_CODES.general));
+  } else {
+    process.stderr.write(`${message}
+`);
+  }
+  process.exit(EXIT_CODES.general);
+}
 function addJsonOption(command) {
   if (!command.options.some((option) => option.long === "--json")) {
     command.option("--json", "Print JSON output");