@lukoweb/apitogo 0.2.60 → 0.2.64

package/dist/cli/cli.js

@@ -457,8 +457,12 @@ function syncAuthentication(normalized) {
   if (!userPanelEnabled && !authentication) {
     return;
   }
+  if (!userPanelEnabled && authentication?.enabled === false) {
+    delete normalized.authentication;
+    return;
+  }
   const auth = authentication ?? {};
-  auth.enabled = userPanelEnabled;
+  if (userPanelEnabled) auth.enabled = true;
   const keepsOpenId = auth.type === "openid";
   if (!keepsOpenId) auth.type = "dev-portal";
   if (userPanelEnabled && !keepsOpenId) {
@@ -837,7 +841,7 @@ import { stat as stat4 } from "node:fs/promises";
 var fileExists;
 var init_file_exists = __esm({
   "src/config/file-exists.ts"() {
-    fileExists = (path99) => stat4(path99).then(() => true).catch(() => false);
+    fileExists = (path100) => stat4(path100).then(() => true).catch(() => false);
   }
 });
 
@@ -5270,7 +5274,7 @@ __export(llms_exports, {
   generateLlmsTxtFiles: () => generateLlmsTxtFiles
 });
 import { writeFile as writeFile12 } from "node:fs/promises";
-import path46 from "node:path";
+import path47 from "node:path";
 import colors10 from "picocolors";
 async function generateLlmsTxtFiles({
   markdownFileInfos,
@@ -5305,7 +5309,7 @@ async function generateLlmsTxtFiles({
       }
     }
     const llmsTxt2 = llmsTxtParts.join("\n");
-    await writeFile12(path46.join(baseOutputDir, "llms.txt"), llmsTxt2, "utf-8");
+    await writeFile12(path47.join(baseOutputDir, "llms.txt"), llmsTxt2, "utf-8");
     if (process.env.APITOGO_JSON_ONLY !== "1") {
       console.log(colors10.blue("\u2713 generated llms.txt"));
     }
@@ -5333,7 +5337,7 @@ ${info.content}
     }
     const llmsFull = llmsFullParts.join("\n");
     await writeFile12(
-      path46.join(baseOutputDir, "llms-full.txt"),
+      path47.join(baseOutputDir, "llms-full.txt"),
       llmsFull,
       "utf-8"
     );
@@ -5836,7 +5840,7 @@ Run the command with --help to see its options.`;
 import yargs from "yargs/yargs";
 
 // src/cli/services/handler.ts
-import path54 from "node:path";
+import path55 from "node:path";
 
 // src/config/v2/billing.ts
 import { readFile as readFile2 } from "node:fs/promises";
@@ -5915,6 +5919,21 @@ var nonEmpty = z.string().min(1, { error: "must not be empty" });
 var path3 = nonEmpty;
 var pathList = z.array(nonEmpty);
 var enabled = z.boolean().optional();
+var headerLabel = z.string().trim().min(1, { error: "must not be empty" }).max(40, { error: "must be 40 characters or fewer" });
+var HeaderLinkSchema = z.union(
+  [
+    z.strictObject({ label: headerLabel, page: path3 }),
+    z.strictObject({
+      label: headerLabel,
+      to: z.string().regex(/^(\/(?!\/)|https:\/\/)/, {
+        error: 'must start with "/" or "https://"'
+      })
+    })
+  ],
+  {
+    error: 'must be { "label": "...", "page": "path/to/page.tsx" } or { "label": "...", "to": "/path or https://..." }'
+  }
+);
 var PortalSchema = z.strictObject({
   enabled,
   dir: path3.optional(),
@@ -5931,6 +5950,8 @@ var PortalSchema = z.strictObject({
   landing: path3.optional(),
   /** The footer: a React component file shown under every page except the console's (API-129). */
   footer: path3.optional(),
+  /** Links of the header's top menu, after the built-in ones (Documentation, API Reference; the plans add Pricing). */
+  header: z.strictObject({ links: z.array(HeaderLinkSchema) }).optional(),
   /**
    * The logo in the portal header: one image, or one per color scheme (API-129). `dark` is optional; without it the
    * light image is used in both.
@@ -6094,8 +6115,8 @@ var ConfigV2Schema = z.strictObject({
 var REMOVED_KEYS = {
   "plans.provider": "plans.provider was removed. Only plans.billing.provider (stripe or none) is selectable."
 };
-function pathToString(path99) {
-  return path99.reduce(
+function pathToString(path100) {
+  return path100.reduce(
     (acc, segment) => typeof segment === "number" ? `${acc}[${segment}]` : acc === "" ? String(segment) : `${acc}.${String(segment)}`,
     ""
   );
@@ -6115,9 +6136,9 @@ function step(schema2, segment) {
   }
   return void 0;
 }
-function knownKeysAt(path99) {
+function knownKeysAt(path100) {
   let current = ConfigV2Schema;
-  for (const segment of path99) {
+  for (const segment of path100) {
     if (!current) return [];
     current = step(current, segment);
   }
@@ -6153,7 +6174,7 @@ function unknownKeyHint(fullPath, key, known) {
   return known.length > 0 ? `Allowed keys: ${known.join(", ")}.` : void 0;
 }
 function mapIssue(issue4) {
-  const path99 = pathToString(issue4.path);
+  const path100 = pathToString(issue4.path);
   switch (issue4.code) {
     case "unrecognized_keys":
       return issue4.keys.map((key) => {
@@ -6169,20 +6190,20 @@ function mapIssue(issue4) {
       return [
         {
           code: "CONFIG_INVALID_VALUE",
-          path: path99,
+          path: path100,
           message: `must be one of: ${issue4.values.map((v) => JSON.stringify(v)).join(", ")}.`
         }
       ];
     case "custom": {
       const code = typeof issue4.params?.code === "string" ? issue4.params.code : "CONFIG_INVALID_VALUE";
-      return [{ code, path: path99, message: issue4.message ?? "is invalid." }];
+      return [{ code, path: path100, message: issue4.message ?? "is invalid." }];
     }
     case "invalid_type":
       return [
-        /received undefined/.test(issue4.message) ? { code: "CONFIG_MISSING_FIELD", path: path99, message: "is required." } : { code: "CONFIG_INVALID_VALUE", path: path99, message: issue4.message }
+        /received undefined/.test(issue4.message) ? { code: "CONFIG_MISSING_FIELD", path: path100, message: "is required." } : { code: "CONFIG_INVALID_VALUE", path: path100, message: issue4.message }
       ];
     default:
-      return [{ code: "CONFIG_INVALID_VALUE", path: path99, message: issue4.message }];
+      return [{ code: "CONFIG_INVALID_VALUE", path: path100, message: issue4.message }];
   }
 }
 function isRecord(value) {
@@ -6478,6 +6499,7 @@ function toGlobPath(value) {
 function fromConfig(configDir, value) {
   return value.startsWith("!") ? `!${toGlobPath(path7.resolve(configDir, value.slice(1)))}` : toGlobPath(path7.resolve(configDir, value));
 }
+var headerPageRoute = (file) => `/${path7.basename(file).replace(/\.(mdx?|tsx)$/i, "")}`;
 var isLogoUrl = (value) => value.toLowerCase().startsWith("https://");
 var logoSource = (configDir, value) => isLogoUrl(value) ? value : path7.resolve(configDir, value);
 function resolveConfigV2(config2, configPath) {
@@ -6513,6 +6535,13 @@ function resolveConfigV2(config2, configPath) {
       theme: portal.theme ? path7.resolve(configDir, portal.theme) : path7.join(dir, "theme.json"),
       ...portal.landing ? { landing: path7.resolve(configDir, portal.landing) } : {},
       ...portal.footer ? { footer: path7.resolve(configDir, portal.footer) } : {},
+      headerLinks: (portal.header?.links ?? []).map(
+        (link) => {
+          if ("to" in link) return { label: link.label, to: link.to };
+          const page = path7.resolve(configDir, link.page);
+          return { label: link.label, to: headerPageRoute(page), page };
+        }
+      ),
       ...portal.logo ? {
         logo: typeof portal.logo === "string" ? {
           light: logoSource(configDir, portal.logo),
@@ -6644,17 +6673,30 @@ function loadConfigV2(pathOrDir) {
 }
 
 // src/config/v2/rules.ts
-import { readdir as readdir2, readFile as readFile4, stat as stat2 } from "node:fs/promises";
-import path10 from "node:path";
-import { glob as glob2 } from "glob";
+import { readdir as readdir2, readFile as readFile5, stat as stat2 } from "node:fs/promises";
+import path11 from "node:path";
+import { glob as glob3 } from "glob";
 import { parse as parseYaml } from "yaml";
 
-// src/config/v2/tsx-pages.ts
-import { readFile as readFile3 } from "node:fs/promises";
+// src/config/v2/home-redirect.ts
 import path9 from "node:path";
 import { glob } from "glob";
 import globParent from "glob-parent";
 
+// src/lib/util/readFrontmatter.ts
+import { readFile as readFile3 } from "node:fs/promises";
+import matter from "gray-matter";
+import { parse, stringify } from "yaml";
+var yaml = {
+  parse: (input5) => parse(input5) ?? {},
+  stringify: (obj) => stringify(obj)
+};
+var readFrontmatter = async (filePath) => {
+  const content = await readFile3(filePath, "utf-8");
+  const normalizedContent = content.replace(/\r\n/g, "\n");
+  return matter(normalizedContent, { engines: { yaml } });
+};
+
 // src/config/v2/page-order.ts
 var FIRST_PAGE_NAMES = [
   "introduction",
@@ -6696,6 +6738,128 @@ function tsxPageOrder(source) {
   return match?.[1] ? Number(match[1]) : void 0;
 }
 
+// src/config/v2/home-redirect.ts
+var IGNORED = ["**/node_modules/**", "**/dist/**", "**/.git/**"];
+async function docRoutes(patterns, options = {}) {
+  const globs = patterns.map(toGlobPath);
+  const excluded = globs.filter((pattern) => pattern.startsWith("!")).map((pattern) => pattern.slice(1));
+  const included = globs.filter((pattern) => !pattern.startsWith("!"));
+  const routes = await Promise.all(
+    included.map(async (pattern) => {
+      const files = await glob(pattern, {
+        absolute: true,
+        posix: true,
+        ignore: [...IGNORED, ...excluded]
+      });
+      const parent = globParent(pattern);
+      const published = options.includeDrafts ? files : (await Promise.all(
+        files.map(async (file) => ({
+          file,
+          draft: (await readFrontmatter(file)).data.draft === true
+        }))
+      )).filter(({ draft }) => !draft).map(({ file }) => file);
+      return published.map(
+        (file) => `/${path9.posix.relative(parent, file.replace(/^\/\/\?\//, "")).replace(/\.mdx?$/, "")}`
+      );
+    })
+  );
+  return [...new Set(routes.flat())].sort();
+}
+function pickLandingRoute(routes, orders) {
+  return firstPage(routes, orders);
+}
+async function docPageOrders(patterns) {
+  const globs = patterns.map(toGlobPath);
+  const excluded = globs.filter((pattern) => pattern.startsWith("!")).map((pattern) => pattern.slice(1));
+  const orders = /* @__PURE__ */ new Map();
+  for (const pattern of globs.filter((p) => !p.startsWith("!"))) {
+    const parent = globParent(pattern);
+    const files = await glob(pattern, {
+      absolute: true,
+      posix: true,
+      ignore: [...IGNORED, ...excluded]
+    });
+    for (const raw of files) {
+      const order = orderValue((await readFrontmatter(raw)).data.order);
+      if (order === void 0) continue;
+      const route = `/${path9.posix.relative(parent, raw.replace(/^\/\/\?\//, "")).replace(/\.mdx?$/, "")}`;
+      if (!orders.has(route)) orders.set(route, order);
+    }
+  }
+  return orders;
+}
+function homeRedirect(input5) {
+  if (input5.hostsDocs) {
+    if (input5.docRoutes.some((route) => route === "/" || route === "/index"))
+      return void 0;
+    const landing = pickLandingRoute(input5.docRoutes, input5.pageOrders);
+    if (landing) return { from: "/", to: landing };
+    if (input5.apiReferencePath)
+      return { from: "/", to: input5.apiReferencePath };
+  }
+  if (!input5.hostsDocs && input5.externalDocsUrl && !input5.userPanel) {
+    return { from: "/", to: input5.externalDocsUrl };
+  }
+  if (input5.userPanel) {
+    return { from: "/", to: input5.pricingPath ?? "/account" };
+  }
+  return void 0;
+}
+
+// src/config/v2/portal-profile.ts
+var NOT_BUILT = {
+  enabled: false,
+  docs: { enabled: false, provider: "apitogo", content: [] },
+  console: { enabled: false },
+  pipelines: { markdown: false, openapi: false, search: "none" },
+  modules: { docs: false, userPanel: false }
+};
+function portalOnlyLinksExternalDocs(resolved) {
+  const portal = resolved.portal;
+  if (!portal?.enabled) return false;
+  if (!portal.docs.enabled || portal.docs.provider !== "external") return false;
+  const consoleFed = portal.console.enabled && (resolved.identity?.enabled === true || resolved.plans?.enabled === true);
+  return !consoleFed;
+}
+function portalProfile(resolved) {
+  const portal = resolved.portal;
+  if (!portal?.enabled) return NOT_BUILT;
+  const hostsDocs = portal.docs.enabled && portal.docs.provider === "apitogo";
+  const externalDocs = portal.docs.enabled && portal.docs.provider === "external";
+  const gatewayOn2 = resolved.gateway?.enabled === true;
+  return {
+    enabled: true,
+    docs: {
+      enabled: portal.docs.enabled,
+      provider: portal.docs.provider,
+      content: hostsDocs ? portal.docs.content : [],
+      url: externalDocs ? portal.docs.url : void 0
+    },
+    console: { enabled: portal.console.enabled },
+    pipelines: {
+      markdown: hostsDocs,
+      openapi: hostsDocs && gatewayOn2,
+      search: hostsDocs ? portal.search : "none"
+    },
+    modules: { docs: hostsDocs, userPanel: portal.console.enabled },
+    ...externalDocs ? {
+      externalDocs: {
+        url: portal.docs.url,
+        openapiExport: gatewayOn2,
+        cors: portal.console.enabled,
+        consoleLinksInManifest: portal.console.enabled,
+        whiteLabelConsole: portal.console.enabled
+      }
+    } : {}
+  };
+}
+
+// src/config/v2/tsx-pages.ts
+import { readFile as readFile4 } from "node:fs/promises";
+import path10 from "node:path";
+import { glob as glob2 } from "glob";
+import globParent2 from "glob-parent";
+
 // src/config/v2/docs-navigation.ts
 var DOCS_NAVIGATION_LABEL = "Documentation";
 var emptyBranch = () => ({ pages: /* @__PURE__ */ new Map(), folders: /* @__PURE__ */ new Map() });
@@ -6766,7 +6930,7 @@ function docsNavigation(routes, customPages = [], orders = /* @__PURE__ */ new M
 }
 
 // src/config/v2/tsx-pages.ts
-var IGNORED = ["**/node_modules/**", "**/dist/**", "**/.git/**"];
+var IGNORED2 = ["**/node_modules/**", "**/dist/**", "**/.git/**"];
 function isTsxHelper(relative) {
   return relative.split("/").some((part) => part.startsWith("_")) || /\.(test|spec|stories)\.tsx$/.test(relative) || relative.split("/").includes("node_modules");
 }
@@ -6777,7 +6941,7 @@ function tsxPagePatterns(contentGlobs) {
   return [
     ...new Set(
       included.map(
-        (pattern) => path9.posix.join(globParent(pattern), "**", "*.tsx")
+        (pattern) => path10.posix.join(globParent2(pattern), "**", "*.tsx")
       )
     ),
     ...excluded
@@ -6787,21 +6951,21 @@ var TITLE = /export\s+const\s+title\s*(?::\s*string\s*)?=\s*(["'`])((?:\\.|(?!\1
 function tsxPageLabel(source, file) {
   const match = TITLE.exec(source);
   if (match?.[2]) return match[2].replace(/\\(.)/g, "$1");
-  const name = path9.basename(file, ".tsx");
+  const name = path10.basename(file, ".tsx");
   return folderLabel(
-    name === "index" ? path9.basename(path9.dirname(file)) : name
+    name === "index" ? path10.basename(path10.dirname(file)) : name
   );
 }
 async function findTsxPages(contentGlobs) {
   const patterns = tsxPagePatterns(contentGlobs);
   const ignore2 = [
-    ...IGNORED,
+    ...IGNORED2,
     ...patterns.filter((pattern) => pattern.startsWith("!")).map((pattern) => pattern.slice(1))
   ];
   const found = /* @__PURE__ */ new Map();
   for (const pattern of patterns.filter((p) => !p.startsWith("!"))) {
-    const parent = globParent(pattern);
-    const files = await glob(pattern, {
+    const parent = globParent2(pattern);
+    const files = await glob2(pattern, {
       absolute: true,
       posix: true,
       nodir: true,
@@ -6809,11 +6973,11 @@ async function findTsxPages(contentGlobs) {
     });
     for (const raw of files.sort()) {
       const file = raw.replace(/^\/\/\?\//, "");
-      const relative = path9.posix.relative(parent, file);
+      const relative = path10.posix.relative(parent, file);
       if (isTsxHelper(relative)) continue;
       const route = `/${relative.replace(/\.tsx$/, "")}`;
       if (found.has(route)) continue;
-      const source = await readFile3(file, "utf8").catch(() => "");
+      const source = await readFile4(file, "utf8").catch(() => "");
       const order = tsxPageOrder(source);
       found.set(route, {
         route,
@@ -6857,11 +7021,11 @@ function collectSecretRefs(config2) {
   return found;
 }
 function dependencyRules(config2, resolved, out) {
-  const gatewayOn = resolved.gateway?.enabled === true;
+  const gatewayOn2 = resolved.gateway?.enabled === true;
   const identityOn = resolved.identity?.enabled === true;
-  const oidcGateway = gatewayOn && resolved.gateway?.auth?.mode === "oidc";
+  const oidcGateway = gatewayOn2 && resolved.gateway?.auth?.mode === "oidc";
   const hasIdentitySource = identityOn || oidcGateway;
-  if (identityOn && resolved.portal?.enabled !== true && !gatewayOn && !resolved.project.id) {
+  if (identityOn && resolved.portal?.enabled !== true && !gatewayOn2 && !resolved.project.id) {
     out.error({
       code: "NOTHING_TO_HOST",
       path: "identity",
@@ -6878,7 +7042,7 @@ function dependencyRules(config2, resolved, out) {
     });
   }
   if (resolved.plans?.enabled) {
-    if (!gatewayOn) {
+    if (!gatewayOn2) {
       out.error({
         code: "PLANS_GATEWAY_REQUIRED",
         path: "plans",
@@ -6974,44 +7138,53 @@ async function portalRules(config2, resolved, out) {
       hint: "Enable identity or plans, or enable portal.docs."
     });
   }
+  if (portalOnlyLinksExternalDocs(resolved)) {
+    out.warn({
+      code: "PORTAL_NOTHING_TO_HOST",
+      path: "portal",
+      message: "docs are on an external site and no service feeds the console, so there is no portal to host: `project create` takes no website hosting for it and `deploy` skips it.",
+      hint: "Enable identity or plans for a console next to your docs, or remove the portal section."
+    });
+  }
   if (portal.footer && !await isFile(portal.footer))
     out.error({
       code: "PORTAL_FILE_MISSING",
       path: "portal.footer",
-      message: `the file ${path10.relative(resolved.configDir, portal.footer)} does not exist.`,
+      message: `the file ${path11.relative(resolved.configDir, portal.footer)} does not exist.`,
       hint: "Create it, or remove portal.footer."
     });
-  const publicDir = path10.join(portal.dir, "public");
+  await headerLinksRule(portal, resolved, out);
+  const publicDir = path11.join(portal.dir, "public");
   for (const file of new Set(
     [portal.logo?.light, portal.logo?.dark].filter(
       (value) => !!value && !isLogoUrl(value)
     )
   )) {
-    const inside = path10.relative(publicDir, file);
-    if (inside.startsWith("..") || path10.isAbsolute(inside))
+    const inside = path11.relative(publicDir, file);
+    if (inside.startsWith("..") || path11.isAbsolute(inside))
       out.error({
         code: "PORTAL_LOGO_OUTSIDE_PUBLIC",
         path: "portal.logo",
-        message: `the logo ${path10.relative(resolved.configDir, file)} is not in the portal's public folder, which is what the site serves.`,
-        hint: `Move it into ${path10.relative(resolved.configDir, publicDir)}/, or use an https:// address.`
+        message: `the logo ${path11.relative(resolved.configDir, file)} is not in the portal's public folder, which is what the site serves.`,
+        hint: `Move it into ${path11.relative(resolved.configDir, publicDir)}/, or use an https:// address.`
       });
     else if (!await isFile(file))
       out.error({
         code: "PORTAL_FILE_MISSING",
         path: "portal.logo",
-        message: `the file ${path10.relative(resolved.configDir, file)} does not exist.`,
+        message: `the file ${path11.relative(resolved.configDir, file)} does not exist.`,
         hint: "Create it, or remove portal.logo."
       });
   }
   if (await isFile(portal.theme)) {
     try {
-      JSON.parse(await readFile4(portal.theme, "utf8"));
+      JSON.parse(await readFile5(portal.theme, "utf8"));
     } catch (error) {
       out.error({
         code: "PORTAL_THEME_INVALID",
         path: "portal.theme",
         message: `the theme file is not valid JSON (${error instanceof Error ? error.message : String(error)}).`,
-        hint: path10.relative(resolved.configDir, portal.theme)
+        hint: path11.relative(resolved.configDir, portal.theme)
       });
     }
   }
@@ -7020,12 +7193,21 @@ async function docsContentRule(config2, patterns, resolved, out) {
   const globs = patterns.map(toGlobPath);
   const include = globs.filter((pattern) => !pattern.startsWith("!"));
   const ignore2 = globs.filter((pattern) => pattern.startsWith("!")).map((pattern) => pattern.slice(1));
-  const matches = include.length > 0 ? await glob2(include, { nodir: true, ignore: ignore2, absolute: true }) : [];
+  const matches = include.length > 0 ? await glob3(include, { nodir: true, ignore: ignore2, absolute: true }) : [];
   if (matches.length > 0) return;
   if ((await findTsxPages(patterns)).length > 0) return;
   const shown = config2.portal?.docs?.content ?? [
-    path10.relative(resolved.configDir, patterns[0] ?? "")
+    path11.relative(resolved.configDir, patterns[0] ?? "")
   ];
+  if (portalHasNothingToShow(resolved)) {
+    out.error({
+      code: "PORTAL_HOME_EMPTY",
+      path: "portal.docs",
+      message: `portal.docs matched 0 files (${shown.join(", ")}), and the portal has no API reference, console pages or home page of its own, so its home page would say "Page not found".`,
+      hint: "Add a .md or .mdx page there (for example introduction.mdx), point docs.content at your existing docs, or enable the gateway with an OpenAPI file for an API reference."
+    });
+    return;
+  }
   out.warn({
     code: "PORTAL_DOCS_EMPTY",
     path: "portal.docs",
@@ -7033,6 +7215,84 @@ async function docsContentRule(config2, patterns, resolved, out) {
     hint: "Add .md, .mdx or .tsx pages, or point docs.content at your existing docs."
   });
 }
+function portalHasNothingToShow(resolved) {
+  const portal = resolved.portal;
+  if (!portal?.enabled || portal.landing) return false;
+  if (resolved.gateway?.enabled === true) return false;
+  const consoleFed = portal.console.enabled && (resolved.identity?.enabled === true || resolved.plans?.enabled === true);
+  return !consoleFed;
+}
+var RESERVED_HEADER_ROUTES = [
+  "/",
+  "/index",
+  "/api",
+  "/pricing",
+  "/account",
+  "/login",
+  "/signup"
+];
+async function headerLinksRule(portal, resolved, out) {
+  const pages = portal.headerLinks.map((link, index) => ({ link, index })).filter(({ link }) => link.page !== void 0);
+  if (pages.length === 0) return;
+  const hostsDocs = portal.docs.enabled && portal.docs.provider === "apitogo";
+  const docs = hostsDocs ? [
+    ...await docRoutes(portal.docs.content, { includeDrafts: true }),
+    ...(await findTsxPages(portal.docs.content)).map((page) => page.route)
+  ] : [];
+  const seen = /* @__PURE__ */ new Set();
+  for (const { link, index } of pages) {
+    const file = link.page;
+    const at = `portal.header.links[${index}].page`;
+    const shown = path11.relative(resolved.configDir, file);
+    if (!hostsDocs) {
+      out.error({
+        code: "PORTAL_HEADER_PAGE_NO_DOCS",
+        path: at,
+        message: `the header page ${shown} needs hosted docs, which this portal does not have.`,
+        hint: 'Header pages are served with the docs pages: set portal.docs.provider to "apitogo", or link an address with "to" instead.'
+      });
+      continue;
+    }
+    if (!/\.(mdx?|tsx)$/i.test(file)) {
+      out.error({
+        code: "PORTAL_HEADER_PAGE_INVALID",
+        path: at,
+        message: `the header page ${shown} is neither a React page nor a Markdown page.`,
+        hint: "Use a .tsx file (its default export is the page) or a .md / .mdx file."
+      });
+      continue;
+    }
+    if (!await isFile(file)) {
+      out.error({
+        code: "PORTAL_FILE_MISSING",
+        path: at,
+        message: `the file ${shown} does not exist.`,
+        hint: "Create it (`apitogo config --page-slug <name> --page-title <title> --page-header`), or remove the link."
+      });
+      continue;
+    }
+    const route = link.to;
+    if (RESERVED_HEADER_ROUTES.includes(route.toLowerCase())) {
+      out.error({
+        code: "PORTAL_HEADER_PAGE_ROUTE_TAKEN",
+        path: at,
+        message: `the header page ${shown} would be served at ${route}, which the portal uses itself.`,
+        hint: "Rename the file: its name is the page's address."
+      });
+      continue;
+    }
+    if (docs.includes(route) || seen.has(route)) {
+      out.error({
+        code: "PORTAL_HEADER_PAGE_ROUTE_TAKEN",
+        path: at,
+        message: `the header page ${shown} would be served at ${route}, which another page already has.`,
+        hint: `Rename the file: its name is the page's address. A docs page that should be in the header too can be linked with "to" instead.`
+      });
+      continue;
+    }
+    seen.add(route);
+  }
+}
 function isIpLiteral(hostname) {
   return /^\d{1,3}(\.\d{1,3}){3}$/.test(hostname) || hostname.startsWith("[");
 }
@@ -7097,8 +7357,8 @@ async function gatewayRules(resolved, out) {
       }
     }
     if (origin.source) {
-      const inside = path10.relative(resolved.configDir, origin.source);
-      if (inside.startsWith("..") || path10.isAbsolute(inside)) {
+      const inside = path11.relative(resolved.configDir, origin.source);
+      if (inside.startsWith("..") || path11.isAbsolute(inside)) {
         out.error({
           code: "GATEWAY_ORIGIN_INVALID",
           path: "gateway.origin.source",
@@ -7183,7 +7443,7 @@ async function gatewayRules(resolved, out) {
 }
 async function specRule(spec, index, resolved, out) {
   const at = `gateway.specs[${index}]`;
-  const shown = path10.relative(resolved.configDir, spec);
+  const shown = path11.relative(resolved.configDir, spec);
   const info = await stat2(spec).catch(() => void 0);
   if (!info?.isFile()) {
     out.error({
@@ -7203,7 +7463,7 @@ async function specRule(spec, index, resolved, out) {
   }
   let document;
   try {
-    const text2 = await readFile4(spec, "utf8");
+    const text2 = await readFile5(spec, "utf8");
     document = spec.toLowerCase().endsWith(".json") ? JSON.parse(text2) : parseYaml(text2);
   } catch (error) {
     out.error({
@@ -7352,12 +7612,12 @@ async function plansRules(resolved, out, paid) {
     out.error({
       code: "PLANS_FILE_INVALID",
       path: "plans.file",
-      message: `the plan catalog was not found: ${path10.relative(resolved.configDir, plans.file)}.`,
+      message: `the plan catalog was not found: ${path11.relative(resolved.configDir, plans.file)}.`,
       hint: "Create it with `apitogo add plans`."
     });
   } else {
     try {
-      JSON.parse(await readFile4(plans.file, "utf8"));
+      JSON.parse(await readFile5(plans.file, "utf8"));
     } catch (error) {
       out.error({
         code: "PLANS_FILE_INVALID",
@@ -7431,50 +7691,9 @@ async function checkConfigV2(config2, resolved, context = {}) {
   return { errors, warnings, skipped };
 }
 
-// src/config/v2/portal-profile.ts
-var NOT_BUILT = {
-  enabled: false,
-  docs: { enabled: false, provider: "apitogo", content: [] },
-  console: { enabled: false },
-  pipelines: { markdown: false, openapi: false, search: "none" },
-  modules: { docs: false, userPanel: false }
-};
-function portalProfile(resolved) {
-  const portal = resolved.portal;
-  if (!portal?.enabled) return NOT_BUILT;
-  const hostsDocs = portal.docs.enabled && portal.docs.provider === "apitogo";
-  const externalDocs = portal.docs.enabled && portal.docs.provider === "external";
-  const gatewayOn = resolved.gateway?.enabled === true;
-  return {
-    enabled: true,
-    docs: {
-      enabled: portal.docs.enabled,
-      provider: portal.docs.provider,
-      content: hostsDocs ? portal.docs.content : [],
-      url: externalDocs ? portal.docs.url : void 0
-    },
-    console: { enabled: portal.console.enabled },
-    pipelines: {
-      markdown: hostsDocs,
-      openapi: hostsDocs && gatewayOn,
-      search: hostsDocs ? portal.search : "none"
-    },
-    modules: { docs: hostsDocs, userPanel: portal.console.enabled },
-    ...externalDocs ? {
-      externalDocs: {
-        url: portal.docs.url,
-        openapiExport: gatewayOn,
-        cors: portal.console.enabled,
-        consoleLinksInManifest: portal.console.enabled,
-        whiteLabelConsole: portal.console.enabled
-      }
-    } : {}
-  };
-}
-
 // src/config/v2/manifest.ts
-import { mkdir as mkdir3, readFile as readFile5, rename, rm, writeFile as writeFile4 } from "node:fs/promises";
-import path11 from "node:path";
+import { mkdir as mkdir3, readFile as readFile6, rename, rm, writeFile as writeFile4 } from "node:fs/promises";
+import path12 from "node:path";
 import { z as z3 } from "zod";
 var SUPPORTED_MANIFEST_SCHEMA = 1;
 var Capabilities = z3.record(z3.string(), z3.boolean()).default({});
@@ -7525,7 +7744,7 @@ var ServiceManifestSchema = z3.looseObject({
     }).optional()
   }).default({})
 });
-var issue = (code, path99, message, hint) => ({ code, path: path99, message, hint });
+var issue = (code, path100, message, hint) => ({ code, path: path100, message, hint });
 function parseManifest(raw, file = "services.json") {
   const version = typeof raw === "object" && raw !== null && "schemaVersion" in raw ? raw.schemaVersion : void 0;
   if (typeof version === "number" && version > SUPPORTED_MANIFEST_SCHEMA) {
@@ -7558,7 +7777,7 @@ async function readManifest(state) {
   const file = manifestPathFor(state);
   let text2;
   try {
-    text2 = await readFile5(file, "utf8");
+    text2 = await readFile6(file, "utf8");
   } catch (error) {
     if (error.code === "ENOENT") return void 0;
     throw error;
@@ -7590,10 +7809,10 @@ function requiredServices(resolved) {
   if (!portal?.enabled) return [];
   const needs = [];
   const consoleOn = portal.console.enabled;
-  const gatewayOn = resolved.gateway?.enabled === true;
+  const gatewayOn2 = resolved.gateway?.enabled === true;
   const identityOn = resolved.identity?.enabled === true;
   if (identityOn && (consoleOn || portal.requireAuth)) needs.push("identity");
-  if (gatewayOn && (consoleOn || portal.docs.enabled)) needs.push("gateway");
+  if (gatewayOn2 && (consoleOn || portal.docs.enabled)) needs.push("gateway");
   if (resolved.plans?.enabled === true && consoleOn) needs.push("plans");
   return needs;
 }
@@ -7756,7 +7975,7 @@ function withPlansEntry(existing, info) {
 }
 async function writeManifest(state, manifest) {
   const file = manifestPathFor(state);
-  await mkdir3(path11.dirname(file), { recursive: true });
+  await mkdir3(path12.dirname(file), { recursive: true });
   const temporary = `${file}.${process.pid}.tmp`;
   try {
     await writeFile4(
@@ -7787,8 +8006,8 @@ async function removeServicesFromManifest(state, names) {
 }
 
 // src/config/v2/gateway-reference.ts
-import { readFile as readFile6 } from "node:fs/promises";
-import { parse } from "yaml";
+import { readFile as readFile7 } from "node:fs/promises";
+import { parse as parse2 } from "yaml";
 var DEFAULT_KEY_HEADER = "X-API-Key";
 var KEY_HEADER_EXTENSION = "x-apitogo-key-header";
 var METHODS = [
@@ -7802,8 +8021,8 @@ var METHODS = [
   "trace"
 ];
 var isObject = (value) => typeof value === "object" && value !== null && !Array.isArray(value);
-function actionKey(method, path99) {
-  const trimmed = path99.trim();
+function actionKey(method, path100) {
+  const trimmed = path100.trim();
   const withSlash = trimmed.startsWith("/") ? trimmed : `/${trimmed}`;
   const normalized = withSlash.length > 1 ? withSlash.replace(/\/+$/, "") || "/" : withSlash;
   return `${method.trim().toLowerCase()}:${normalized}`;
@@ -7840,15 +8059,15 @@ var ReferenceSpecError = class extends Error {
 };
 function operationsOf(paths) {
   return Object.entries(paths).flatMap(
-    ([path99, item]) => isObject(item) ? METHODS.filter((method) => isObject(item[method])).map(
-      (method) => [path99, item, method]
+    ([path100, item]) => isObject(item) ? METHODS.filter((method) => isObject(item[method])).map(
+      (method) => [path100, item, method]
     ) : []
   );
 }
 function buildReferenceSpec(specText, options) {
   let root;
   try {
-    root = parse(specText);
+    root = parse2(specText);
   } catch {
     throw new ReferenceSpecError("The OpenAPI file could not be read.");
   }
@@ -7856,14 +8075,14 @@ function buildReferenceSpec(specText, options) {
     throw new ReferenceSpecError("The OpenAPI file could not be read.");
   const doc = structuredClone(root);
   const paths = isObject(doc.paths) ? doc.paths : {};
-  for (const [path99, item, method] of operationsOf(paths))
-    if (options.deniedOperations.has(actionKey(method, path99)))
+  for (const [path100, item, method] of operationsOf(paths))
+    if (options.deniedOperations.has(actionKey(method, path100)))
       delete item[method];
-  for (const [path99, item] of Object.entries(paths))
+  for (const [path100, item] of Object.entries(paths))
     if (!isObject(item) || !METHODS.some((method) => method in item))
-      delete paths[path99];
-  for (const [path99, item, method] of operationsOf(paths))
-    if (options.publicOperations.has(actionKey(method, path99)))
+      delete paths[path100];
+  for (const [path100, item, method] of operationsOf(paths))
+    if (options.publicOperations.has(actionKey(method, path100)))
       item[method].security = [];
   doc.servers = [{ url: options.gatewayBaseUrl.replace(/\/+$/, "") }];
   for (const item of Object.values(paths)) {
@@ -7903,11 +8122,11 @@ function buildReferenceSpec(specText, options) {
   if (Object.keys(components).length > 0) doc.components = components;
   else delete doc.components;
   doc.security = Object.keys(requirement).length > 0 ? [requirement] : [];
-  for (const [path99, item, method] of operationsOf(paths)) {
+  for (const [path100, item, method] of operationsOf(paths)) {
     const operation = item[method];
     if (Array.isArray(operation.security) && operation.security.length > 0)
       delete operation.security;
-    if (options.apiKeyRequired && !options.publicOperations.has(actionKey(method, path99)))
+    if (options.apiKeyRequired && !options.publicOperations.has(actionKey(method, path100)))
       operation[KEY_HEADER_EXTENSION] = options.apiKeyHeader;
     else delete operation[KEY_HEADER_EXTENSION];
   }
@@ -7929,7 +8148,7 @@ async function renderReferenceSpec(gateway, gatewayBaseUrl, keyHeaderName) {
     throw new ReferenceSpecError("gateway.specs lists no OpenAPI file.");
   let text2;
   try {
-    text2 = await readFile6(file, "utf8");
+    text2 = await readFile7(file, "utf8");
   } catch {
     throw new ReferenceSpecError(`Cannot read the OpenAPI file ${file}.`);
   }
@@ -8006,7 +8225,7 @@ import path14 from "node:path";
 
 // src/cli/platform/helpers/openapi-action-keys.ts
 import { existsSync as existsSync3, readFileSync as readFileSync3 } from "node:fs";
-import path12 from "node:path";
+import path13 from "node:path";
 import YAML from "yaml";
 var HTTP_METHODS = [
   "get",
@@ -8075,7 +8294,7 @@ function extractGatewayActionKeysFromOpenApiDocument(document) {
 function extractGatewayActionKeysFromOpenApiFile(filePath) {
   try {
     const raw = readFileSync3(filePath, "utf8");
-    const ext = path12.extname(filePath).toLowerCase();
+    const ext = path13.extname(filePath).toLowerCase();
     const parsed = ext === ".json" ? JSON.parse(raw) : YAML.parse(raw);
     return extractGatewayActionKeysFromOpenApiDocument(parsed);
   } catch {
@@ -8083,92 +8302,6 @@ function extractGatewayActionKeysFromOpenApiFile(filePath) {
   }
 }
 
-// src/config/v2/home-redirect.ts
-import path13 from "node:path";
-import { glob as glob3 } from "glob";
-import globParent2 from "glob-parent";
-
-// src/lib/util/readFrontmatter.ts
-import { readFile as readFile7 } from "node:fs/promises";
-import matter from "gray-matter";
-import { parse as parse2, stringify } from "yaml";
-var yaml = {
-  parse: (input5) => parse2(input5) ?? {},
-  stringify: (obj) => stringify(obj)
-};
-var readFrontmatter = async (filePath) => {
-  const content = await readFile7(filePath, "utf-8");
-  const normalizedContent = content.replace(/\r\n/g, "\n");
-  return matter(normalizedContent, { engines: { yaml } });
-};
-
-// src/config/v2/home-redirect.ts
-var IGNORED2 = ["**/node_modules/**", "**/dist/**", "**/.git/**"];
-async function docRoutes(patterns, options = {}) {
-  const globs = patterns.map(toGlobPath);
-  const excluded = globs.filter((pattern) => pattern.startsWith("!")).map((pattern) => pattern.slice(1));
-  const included = globs.filter((pattern) => !pattern.startsWith("!"));
-  const routes = await Promise.all(
-    included.map(async (pattern) => {
-      const files = await glob3(pattern, {
-        absolute: true,
-        posix: true,
-        ignore: [...IGNORED2, ...excluded]
-      });
-      const parent = globParent2(pattern);
-      const published = options.includeDrafts ? files : (await Promise.all(
-        files.map(async (file) => ({
-          file,
-          draft: (await readFrontmatter(file)).data.draft === true
-        }))
-      )).filter(({ draft }) => !draft).map(({ file }) => file);
-      return published.map(
-        (file) => `/${path13.posix.relative(parent, file.replace(/^\/\/\?\//, "")).replace(/\.mdx?$/, "")}`
-      );
-    })
-  );
-  return [...new Set(routes.flat())].sort();
-}
-function pickLandingRoute(routes, orders) {
-  return firstPage(routes, orders);
-}
-async function docPageOrders(patterns) {
-  const globs = patterns.map(toGlobPath);
-  const excluded = globs.filter((pattern) => pattern.startsWith("!")).map((pattern) => pattern.slice(1));
-  const orders = /* @__PURE__ */ new Map();
-  for (const pattern of globs.filter((p) => !p.startsWith("!"))) {
-    const parent = globParent2(pattern);
-    const files = await glob3(pattern, {
-      absolute: true,
-      posix: true,
-      ignore: [...IGNORED2, ...excluded]
-    });
-    for (const raw of files) {
-      const order = orderValue((await readFrontmatter(raw)).data.order);
-      if (order === void 0) continue;
-      const route = `/${path13.posix.relative(parent, raw.replace(/^\/\/\?\//, "")).replace(/\.mdx?$/, "")}`;
-      if (!orders.has(route)) orders.set(route, order);
-    }
-  }
-  return orders;
-}
-function homeRedirect(input5) {
-  if (input5.hostsDocs) {
-    if (input5.docRoutes.some((route) => route === "/" || route === "/index"))
-      return void 0;
-    const landing = pickLandingRoute(input5.docRoutes, input5.pageOrders);
-    if (landing) return { from: "/", to: landing };
-    return input5.apiReferencePath ? { from: "/", to: input5.apiReferencePath } : void 0;
-  }
-  if (input5.externalDocsUrl && !input5.userPanel) {
-    return { from: "/", to: input5.externalDocsUrl };
-  }
-  if (input5.userPanel) {
-    return { from: "/", to: input5.pricingPath ?? "/account" };
-  }
-  return void 0;
-}
-
 // src/config/v2/protected-routes.ts
 function protectedRoutesFor(input5) {
   const { requireAuth } = input5;
@@ -8346,11 +8479,38 @@ function planPortal(profile, manifest) {
 var SITE_CONFIG_FILE = "apitogo.config.json";
 var REFERENCE_SPEC_FILE = "openapi/gateway.json";
 var API_REFERENCE_PATH = "api";
+var MARKDOWN_PAGE = /\.mdx?$/i;
+var HEADER_PAGE_ELEMENT_PREFIX = "apitogo:header-page:";
+function headerTsxPages(resolved, plan2) {
+  if (!plan2.docs) return [];
+  return (resolved.portal?.headerLinks ?? []).flatMap(
+    (link) => link.page && /\.tsx$/i.test(link.page) ? [{ route: link.to, label: link.label, file: link.page }] : []
+  ).map((page, index) => ({
+    ...page,
+    id: `${HEADER_PAGE_ELEMENT_PREFIX}${index}`
+  }));
+}
 function buildSiteConfig(resolved, plan2, theme, extras = {}) {
   const portal = resolved.portal;
   const redirects = extras.redirects ?? [];
+  const headerLinks = portal?.headerLinks ?? [];
+  const headerPages = plan2.docs ? headerLinks.flatMap(
+    (link) => link.page && MARKDOWN_PAGE.test(link.page) ? [link.page] : []
+  ) : [];
+  const shownHeaderLinks = headerLinks.filter((link) => !link.page || plan2.docs).map((link) => ({
+    label: link.label,
+    to: link.to,
+    ...link.to.startsWith("https://") ? { target: "_blank" } : {}
+  }));
   const navigation = [
     ...extras.docsNavigation ?? [],
+    ...headerTsxPages(resolved, plan2).map((page) => ({
+      type: "custom-page",
+      path: page.route,
+      label: page.label,
+      element: page.id,
+      display: "hide"
+    })),
     ...plan2.apiReference ? [
       {
         type: "link",
@@ -8389,9 +8549,10 @@ function buildSiteConfig(resolved, plan2, theme, extras = {}) {
     },
     ...plan2.docs ? {
       docs: {
-        files: portal?.docs.content.map(
-          (glob9) => contentGlob(resolved.configDir, glob9)
-        )
+        files: [
+          ...portal?.docs.content ?? [],
+          ...headerPages.map(toGlobPath)
+        ].map((glob9) => contentGlob(resolved.configDir, glob9))
       }
     } : {},
     ...plan2.search ? { search: { type: plan2.search } } : {},
@@ -8406,12 +8567,13 @@ function buildSiteConfig(resolved, plan2, theme, extras = {}) {
     } : {},
     ...navigation.length > 0 ? { navigation } : {},
     // The sidebar link above is only seen inside the docs; the header is what every page shows. A header navigation
-    // replaces the docs tab, so the docs get a header link of their own.
-    ...plan2.apiReference ? {
+    // replaces the docs tab, so the docs get a header link of their own. The tenant's own links (portal.header) follow.
+    ...plan2.apiReference || shownHeaderLinks.length > 0 ? {
       header: {
         navigation: [
           ...plan2.docs && extras.docsPath ? [{ label: "Documentation", to: extras.docsPath }] : [],
-          { label: "API Reference", to: `/${API_REFERENCE_PATH}` }
+          ...plan2.apiReference ? [{ label: "API Reference", to: `/${API_REFERENCE_PATH}` }] : [],
+          ...shownHeaderLinks
         ]
       }
     } : {},
@@ -8617,10 +8779,14 @@ async function preparePortal(resolved, manifest, mode, options = {}) {
   const tsxPages = plan2.docs ? (await findTsxPages(profile.docs.content)).filter(
     (page) => !markdownRoutes.includes(page.route)
   ) : [];
+  const importPathOf = (file) => `./${CONTENT_LINK}/${path14.relative(resolved.configDir, file).split(path14.sep).join("/")}`;
   const wrapperPages = tsxPages.map((page, index) => ({
     id: `${TSX_PAGE_ELEMENT_PREFIX}${index}`,
-    importPath: `./${CONTENT_LINK}/${path14.relative(resolved.configDir, page.file).split(path14.sep).join("/")}`
+    importPath: importPathOf(page.file)
   }));
+  const headerWrapperPages = headerTsxPages(resolved, plan2).map(
+    (page) => ({ id: page.id, importPath: importPathOf(page.file) })
+  );
   const hostedDocRoutes = [
     .../* @__PURE__ */ new Set([...markdownRoutes, ...tsxPages.map((page) => page.route)])
   ].sort();
@@ -8691,14 +8857,20 @@ async function preparePortal(resolved, manifest, mode, options = {}) {
       protectedRoutes: protectedRoutesFor({
         requireAuth: resolved.portal?.requireAuth,
         hasAuth: !!plan2.auth,
-        docRoutes: hostedDocRoutes,
+        // A header page is a docs page too, so a portal behind login keeps it behind login.
+        docRoutes: plan2.docs ? [
+          ...hostedDocRoutes,
+          ...(resolved.portal?.headerLinks ?? []).flatMap(
+            (link) => link.page ? [link.to] : []
+          )
+        ] : hostedDocRoutes,
         apiReferencePath: plan2.apiReference ? `/${API_REFERENCE_PATH}` : void 0
       })
     }
   );
   const wrapper = renderWrapper(
     plan2,
-    wrapperPages,
+    [...wrapperPages, ...headerWrapperPages],
     resolved.portal?.footer ? wrapperImport(contentFile(resolved.configDir, resolved.portal.footer)) : void 0
   );
   const wrapperPath = path14.join(resolved.state.generatedDir, WRAPPER_FILE);
@@ -10105,7 +10277,7 @@ init_invariant();
 // src/cli/check/v2.ts
 init_apitogo_config_core();
 import { readFile as readFile18 } from "node:fs/promises";
-import path51 from "node:path";
+import path52 from "node:path";
 
 // src/cli/platform/client/platform-api.ts
 import { basename } from "node:path";
@@ -10121,6 +10293,17 @@ var PlatformApiError = class extends Error {
     this.problem = problem;
   }
 };
+var ProjectGoneError = class extends PlatformApiError {
+  constructor(projectId) {
+    super(
+      `The project ${projectId} no longer exists on the platform: it was deleted, or it is not in the account you are signed in to. Run \`apitogo project create\` to make a new project for this folder, or link another one with \`--project-id <id>\`.`,
+      410
+    );
+    this.projectId = projectId;
+    this.name = "ProjectGoneError";
+  }
+  code = "PROJECT_GONE";
+};
 function formatProblemDetails(problem) {
   const parts = [];
   if (problem.title) parts.push(problem.title);
@@ -10212,14 +10395,19 @@ async function fetchWithRetry(input5, init3, options) {
 }
 
 // src/cli/platform/client/platform-api.ts
+function projectIdOfPath(path100) {
+  return /^\/api\/v1\/projects\/([0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12})(?:[/?#]|$)/i.exec(
+    path100
+  )?.[1];
+}
 var MAX_RETRIES = 3;
 var UPLOAD_TIMEOUT_MS = 10 * 60 * 1e3;
 var PlatformApiClient = class {
   constructor(config2) {
     this.config = config2;
   }
-  url(path99) {
-    return `${this.config.apiUrl}${path99.startsWith("/") ? path99 : `/${path99}`}`;
+  url(path100) {
+    return `${this.config.apiUrl}${path100.startsWith("/") ? path100 : `/${path100}`}`;
   }
   headers(extra) {
     return {
@@ -10229,9 +10417,9 @@ var PlatformApiClient = class {
       ...extra
     };
   }
-  async request(method, path99, init3) {
+  async request(method, path100, init3) {
     const response = await fetchWithRetry(
-      this.url(path99),
+      this.url(path100),
       {
         method,
         ...init3,
@@ -10247,13 +10435,39 @@ var PlatformApiClient = class {
       }
     );
     if (!response.ok) {
-      throw await parseErrorResponse(response);
+      throw await this.failure(response, path100);
     }
     if (response.status === 204) {
       return void 0;
     }
     return await response.json();
   }
+  /**
+   * The error for a failed answer. A 404 under a project may mean the project itself is gone; a bare "Not Found" hid
+   * that (API-133), so the project is asked once and a missing one becomes {@link ProjectGoneError}.
+   */
+  async failure(response, path100) {
+    const error = await parseErrorResponse(response);
+    const projectId = response.status === 404 ? projectIdOfPath(path100) : void 0;
+    if (projectId && await this.projectMissing(projectId, path100))
+      return new ProjectGoneError(projectId);
+    return error;
+  }
+  /** Whether the project answers 404 itself. A path that is the project needs no second call. */
+  async projectMissing(projectId, path100) {
+    const projectPath = `/api/v1/projects/${projectId}`;
+    if (path100.replace(/[?#].*$/, "").replace(/\/+$/, "") === projectPath)
+      return true;
+    try {
+      const response = await fetch(this.url(projectPath), {
+        method: "GET",
+        headers: this.headers()
+      });
+      return response.status === 404;
+    } catch {
+      return false;
+    }
+  }
   whoami() {
     return this.request("GET", "/api/v1/auth/me");
   }
@@ -10361,7 +10575,10 @@ var PlatformApiClient = class {
         { method: "POST", maxRetries: 0, retryMutatingOnServerError: false }
       );
       if (!response.ok) {
-        throw await parseErrorResponse(response);
+        throw await this.failure(
+          response,
+          `/api/v1/projects/${projectId}/infrastructure/static-web/deployments`
+        );
       }
       return await response.json();
     } catch (error) {
@@ -10437,7 +10654,10 @@ var PlatformApiClient = class {
       }
     );
     if (!response.ok) {
-      throw await parseErrorResponse(response);
+      throw await this.failure(
+        response,
+        `/api/v1/projects/${projectId}/backend/openapi`
+      );
     }
     return await response.json();
   }
@@ -10486,7 +10706,11 @@ var PlatformApiClient = class {
         maxRetries: MAX_RETRIES
       }
     );
-    if (!response.ok) throw await parseErrorResponse(response);
+    if (!response.ok)
+      throw await this.failure(
+        response,
+        `/api/v1/projects/${projectId}/gateway/openapi.json`
+      );
     return response.text();
   }
   getGatewayCapabilities(projectId) {
@@ -10699,15 +10923,15 @@ var PlatformApiClient = class {
       }
     );
   }
-  deleteDevPortalPage(projectId, path99) {
-    const query = new URLSearchParams({ path: path99 });
+  deleteDevPortalPage(projectId, path100) {
+    const query = new URLSearchParams({ path: path100 });
     return this.request(
       "DELETE",
       `/api/v1/projects/${projectId}/dev-portal/pages/files?${query.toString()}`
     );
   }
-  renameDevPortalPage(projectId, path99, newName) {
-    const query = new URLSearchParams({ path: path99 });
+  renameDevPortalPage(projectId, path100, newName) {
+    const query = new URLSearchParams({ path: path100 });
     return this.request(
       "POST",
       `/api/v1/projects/${projectId}/dev-portal/pages/files/rename?${query.toString()}`,
@@ -10798,7 +11022,10 @@ var PlatformApiClient = class {
       }
     );
     if (!response.ok) {
-      throw await parseErrorResponse(response);
+      throw await this.failure(
+        response,
+        `/api/v1/projects/${projectId}/backend/deployments`
+      );
     }
     return await response.json();
   }
@@ -10823,8 +11050,8 @@ var PlatformApiClient = class {
    * the project-less endpoint is used; `planTier` overrides the tier used for paid-plan checks.
    */
   validateGatewayPlans(plans, options = {}) {
-    const path99 = options.projectId ? `/api/v1/projects/${options.projectId}/gateway/plans/validate` : "/api/v1/gateway/plans/validate";
-    return this.request("POST", path99, {
+    const path100 = options.projectId ? `/api/v1/projects/${options.projectId}/gateway/plans/validate` : "/api/v1/gateway/plans/validate";
+    return this.request("POST", path100, {
       headers: { "Content-Type": "application/json" },
       body: JSON.stringify({ plans, planTier: options.planTier })
     });
@@ -11052,11 +11279,11 @@ import {
   rm as rm8,
   writeFile as writeFile15
 } from "node:fs/promises";
-import path50 from "node:path";
+import path51 from "node:path";
 
 // src/vite/build.ts
 import { mkdir as mkdir11, readFile as readFile13, rename as rename5, rm as rm7, writeFile as writeFile13 } from "node:fs/promises";
-import path48 from "node:path";
+import path49 from "node:path";
 import { build as esbuild } from "esbuild";
 import { build as viteBuild, mergeConfig as mergeConfig3 } from "vite";
 
@@ -11192,7 +11419,7 @@ init_invariant();
 init_joinUrl();
 
 // src/vite/config.ts
-import path43 from "node:path";
+import path44 from "node:path";
 import dotenv from "dotenv";
 import colors8 from "picocolors";
 import {
@@ -11203,7 +11430,7 @@ import {
 // package.json
 var package_default = {
   name: "@lukoweb/apitogo",
-  version: "0.2.60",
+  version: "0.2.64",
   type: "module",
   sideEffects: [
     "**/*.css",
@@ -11988,14 +12215,14 @@ var flattenAllOf = (schema2) => {
 };
 
 // src/lib/util/traverse.ts
-var traverse = (specification, transform, path99 = []) => {
-  const transformed = transform(specification, path99);
+var traverse = (specification, transform, path100 = []) => {
+  const transformed = transform(specification, path100);
   if (typeof transformed !== "object" || transformed === null) {
     return transformed;
   }
   const result = Array.isArray(transformed) ? [] : {};
   for (const [key, value] of Object.entries(transformed)) {
-    const currentPath = [...path99, key];
+    const currentPath = [...path100, key];
     if (Array.isArray(value)) {
       result[key] = value.map(
         (item, index) => typeof item === "object" && item != null ? traverse(item, transform, [...currentPath, index.toString()]) : item
@@ -12023,9 +12250,9 @@ var resolveLocalRef = (schema2, ref) => {
   if (schemaCache?.has(ref)) {
     return schemaCache.get(ref);
   }
-  const path99 = ref.split("/").slice(1);
+  const path100 = ref.split("/").slice(1);
   let current = schema2;
-  for (const segment of path99) {
+  for (const segment of path100) {
     if (!current || typeof current !== "object") {
       current = null;
     }
@@ -12044,7 +12271,7 @@ var dereference = async (schema2, resolvers = []) => {
   }
   const cloned = structuredClone(schema2);
   const visited = /* @__PURE__ */ new Set();
-  const resolve = async (current, path99) => {
+  const resolve = async (current, path100) => {
     if (isIndexableObject(current)) {
       if (visited.has(current)) {
         return CIRCULAR_REF;
@@ -12052,7 +12279,7 @@ var dereference = async (schema2, resolvers = []) => {
       visited.add(current);
       if (Array.isArray(current)) {
         for (let index = 0; index < current.length; index++) {
-          current[index] = await resolve(current[index], `${path99}/${index}`);
+          current[index] = await resolve(current[index], `${path100}/${index}`);
         }
       } else {
         if ("$ref" in current && typeof current.$ref === "string") {
@@ -12063,13 +12290,13 @@ var dereference = async (schema2, resolvers = []) => {
           for (const resolver of resolvers) {
             const resolved = await resolver($ref);
             if (resolved) {
-              result2 = await resolve(resolved, path99);
+              result2 = await resolve(resolved, path100);
               break;
             }
           }
           if (result2 === void 0) {
             const resolved = await resolveLocalRef(cloned, $ref);
-            result2 = await resolve(resolved, path99);
+            result2 = await resolve(resolved, path100);
           }
           if (hasSiblings) {
             if (result2 === CIRCULAR_REF) {
@@ -12082,7 +12309,7 @@ var dereference = async (schema2, resolvers = []) => {
           return result2;
         }
         for (const key in current) {
-          current[key] = await resolve(current[key], `${path99}/${key}`);
+          current[key] = await resolve(current[key], `${path100}/${key}`);
         }
       }
       visited.delete(current);
@@ -12121,9 +12348,9 @@ var upgradeSchema = (schema2) => {
     }
     return sub;
   });
-  schema2 = traverse(schema2, (sub, path99) => {
+  schema2 = traverse(schema2, (sub, path100) => {
     if (sub.example !== void 0) {
-      if (isSchemaPath(path99 ?? [])) {
+      if (isSchemaPath(path100 ?? [])) {
         sub.examples = [sub.example];
       } else {
         sub.examples = {
@@ -12136,11 +12363,11 @@ var upgradeSchema = (schema2) => {
     }
     return sub;
   });
-  schema2 = traverse(schema2, (schema3, path99) => {
+  schema2 = traverse(schema2, (schema3, path100) => {
     if (schema3.type === "object" && schema3.properties !== void 0) {
-      const parentPath = path99?.slice(0, -1);
+      const parentPath = path100?.slice(0, -1);
       const isMultipart = parentPath?.some((segment, index) => {
-        return segment === "content" && path99?.[index + 1] === "multipart/form-data";
+        return segment === "content" && path100?.[index + 1] === "multipart/form-data";
       });
       if (isMultipart) {
         const entries = Object.entries(schema3.properties);
@@ -12154,8 +12381,8 @@ var upgradeSchema = (schema2) => {
     }
     return schema3;
   });
-  schema2 = traverse(schema2, (schema3, path99) => {
-    if (path99?.includes("content") && path99.includes("application/octet-stream")) {
+  schema2 = traverse(schema2, (schema3, path100) => {
+    if (path100?.includes("content") && path100.includes("application/octet-stream")) {
       return {};
     }
     if (schema3.type === "string" && schema3.format === "binary") {
@@ -12181,11 +12408,11 @@ var upgradeSchema = (schema2) => {
     }
     return sub;
   });
-  schema2 = traverse(schema2, (schema3, path99) => {
+  schema2 = traverse(schema2, (schema3, path100) => {
     if (schema3.type === "string" && schema3.format === "byte") {
-      const parentPath = path99?.slice(0, -1);
+      const parentPath = path100?.slice(0, -1);
       const contentMediaType = parentPath?.find(
-        (_, index) => path99?.[index - 1] === "content"
+        (_, index) => path100?.[index - 1] === "content"
       );
       return {
         type: "string",
@@ -12197,7 +12424,7 @@ var upgradeSchema = (schema2) => {
   });
   return schema2;
 };
-function isSchemaPath(path99) {
+function isSchemaPath(path100) {
   const schemaLocations = [
     ["components", "schemas"],
     "properties",
@@ -12210,10 +12437,10 @@ function isSchemaPath(path99) {
   ];
   return schemaLocations.some((location) => {
     if (Array.isArray(location)) {
-      return location.every((segment, index) => path99[index] === segment);
+      return location.every((segment, index) => path100[index] === segment);
     }
-    return path99.includes(location);
-  }) || path99.includes("schema") || path99.some((segment) => segment.endsWith("Schema"));
+    return path100.includes(location);
+  }) || path100.includes("schema") || path100.some((segment) => segment.endsWith("Schema"));
 }
 
 // src/lib/oas/parser/index.ts
@@ -12295,13 +12522,13 @@ var OPENAPI_PROPS = /* @__PURE__ */ new Set([
   "anyOf",
   "oneOf"
 ]);
-var handleCircularRefs = (obj, currentPath = /* @__PURE__ */ new WeakSet(), refs = /* @__PURE__ */ new WeakMap(), path99 = [], currentRefPaths = /* @__PURE__ */ new Set()) => {
+var handleCircularRefs = (obj, currentPath = /* @__PURE__ */ new WeakSet(), refs = /* @__PURE__ */ new WeakMap(), path100 = [], currentRefPaths = /* @__PURE__ */ new Set()) => {
   if (obj === null || typeof obj !== "object") return obj;
   const refPath = obj.__$ref;
   const isCircular = currentPath.has(obj) || typeof refPath === "string" && currentRefPaths.has(refPath);
   if (isCircular) {
     if (typeof refPath === "string") return SCHEMA_REF_PREFIX + refPath;
-    const circularProp = path99.find((p) => !OPENAPI_PROPS.has(p)) || path99[0];
+    const circularProp = path100.find((p) => !OPENAPI_PROPS.has(p)) || path100[0];
     return [CIRCULAR_REF, circularProp].filter(Boolean).join(":");
   }
   if (refs.has(obj)) return refs.get(obj);
@@ -12311,7 +12538,7 @@ var handleCircularRefs = (obj, currentPath = /* @__PURE__ */ new WeakSet(), refs
     value,
     currentPath,
     refs,
-    [...path99, key],
+    [...path100, key],
     currentRefPaths
   );
   const result = Array.isArray(obj) ? obj.map((item, i) => recurse(item, i.toString())) : Object.fromEntries(
@@ -12346,7 +12573,7 @@ var resolveExtensions = (obj) => Object.fromEntries(
 var getAllTags = (schema2) => {
   const rootTags = schema2.tags ?? [];
   const operations = Object.values(schema2.paths ?? {}).flatMap(
-    (path99) => HttpMethods.map((k) => path99?.[k]).filter((op) => op != null)
+    (path100) => HttpMethods.map((k) => path100?.[k]).filter((op) => op != null)
   );
   const operationTags = new Set(operations.flatMap((op) => op.tags ?? []));
   const hasUntaggedOperations = operations.some(
@@ -12401,7 +12628,7 @@ var getAllSlugs = (ops, schemaTags = []) => {
 var getOperationSlugKey = (op) => [op.path, op.method, op.operationId, op.summary].filter(Boolean).join("-");
 var getAllOperations = (paths) => {
   const operations = Object.entries(paths ?? {}).flatMap(
-    ([path99, value]) => HttpMethods.flatMap((method) => {
+    ([path100, value]) => HttpMethods.flatMap((method) => {
       if (!value?.[method]) return [];
       const operation = value[method];
       const pathParameters = value.parameters ?? [];
@@ -12421,7 +12648,7 @@ var getAllOperations = (paths) => {
       return {
         ...operation,
         method,
-        path: path99,
+        path: path100,
         parameters,
         servers,
         tags: operation.tags ?? []
@@ -12779,8 +13006,8 @@ var Schema = builder.objectRef("Schema").implement({
     }),
     paths: t.field({
       type: [PathItem],
-      resolve: (root) => Object.entries(root.paths ?? {}).map(([path99, value]) => ({
-        path: path99,
+      resolve: (root) => Object.entries(root.paths ?? {}).map(([path100, value]) => ({
+        path: path100,
         // biome-ignore lint/style/noNonNullAssertion: value is guaranteed to be defined
         methods: Object.keys(value)
       }))
@@ -12945,7 +13172,7 @@ init_joinUrl();
 
 // src/vite/api/schema-codegen.ts
 var unescapeJsonPointer = (uri) => decodeURIComponent(uri.replace(/~1/g, "/").replace(/~0/g, "~"));
-var getSegmentsFromPath = (path99) => path99.split("/").slice(1).map(unescapeJsonPointer);
+var getSegmentsFromPath = (path100) => path100.split("/").slice(1).map(unescapeJsonPointer);
 var createLocalRefMap = (obj) => {
   const refMap = /* @__PURE__ */ new Map();
   const siblingsMap = /* @__PURE__ */ new Map();
@@ -12976,16 +13203,16 @@ var replaceMarkers = (code, mergedRefs) => code.replace(/"__refMap:(.*?)"/g, '__
   /"__refMap\+Siblings:(.*?)"/g,
   (_, key) => mergedRefs.get(key) ?? `__refMap["${key}"]`
 );
-var lookup = (schema2, path99, filePath) => {
-  const parts = getSegmentsFromPath(path99);
+var lookup = (schema2, path100, filePath) => {
+  const parts = getSegmentsFromPath(path100);
   let val = schema2;
   for (const part of parts) {
     while (val.$ref?.startsWith("#/")) {
-      val = val.$ref === path99 ? val : lookup(schema2, val.$ref, filePath);
+      val = val.$ref === path100 ? val : lookup(schema2, val.$ref, filePath);
     }
     if (val[part] === void 0) {
       throw new Error(
-        `Error in ${filePath ?? "code generation"}: Could not find path segment ${part} in path: ${path99}`
+        `Error in ${filePath ?? "code generation"}: Could not find path segment ${part} in path: ${path100}`
       );
     }
     val = val[part];
@@ -13232,8 +13459,8 @@ var SchemaManager = class {
       }
     }
   };
-  getLatestSchema = (path99) => this.processedSchemas[path99]?.at(0);
-  getSchemasForPath = (path99) => this.processedSchemas[path99];
+  getLatestSchema = (path100) => this.processedSchemas[path100]?.at(0);
+  getSchemasForPath = (path100) => this.processedSchemas[path100];
   getSchemaImports = () => Object.values(this.processedSchemas).flat().filter((s) => s.importKey);
   getUrlToFilePathMap = () => {
     const map = /* @__PURE__ */ new Map();
@@ -14357,8 +14584,32 @@ init_loader();
 init_ProtectedRoutesSchema();
 init_joinUrl();
 import { mkdir as mkdir8, writeFile as writeFile10 } from "node:fs/promises";
-import path36 from "node:path";
+import path37 from "node:path";
 import { matchPath } from "react-router";
+
+// src/vite/markdown-output-path.ts
+import { rm as rm6 } from "node:fs/promises";
+import path36 from "node:path";
+var markdownOutputPath = (distDir, routePath) => {
+  const segments = routePath === "/" ? ["index"] : routePath.split("/").filter(Boolean);
+  return `${path36.join(distDir, ...segments)}.md`;
+};
+var removableMarkdownOutput = (distDir, routePath) => {
+  const output4 = path36.resolve(markdownOutputPath(distDir, routePath));
+  const relative = path36.relative(path36.resolve(distDir), output4);
+  if (!relative || relative.startsWith("..") || path36.isAbsolute(relative)) {
+    return void 0;
+  }
+  return output4;
+};
+var removeExportedMarkdown = async (distDir, pages) => {
+  await Promise.all(
+    pages.map((page) => removableMarkdownOutput(distDir, page.routePath)).filter((output4) => output4 !== void 0).map((output4) => rm6(output4, { force: true }).catch(() => {
+    }))
+  );
+};
+
+// src/vite/plugin-markdown-export.ts
 var processMarkdownFile = async (filePath) => {
   const { content: markdownContent, data: frontmatter } = await readFrontmatter(filePath);
   let finalMarkdown = markdownContent;
@@ -14445,7 +14696,7 @@ var viteMarkdownExportPlugin = () => {
       if (process.env.NODE_ENV !== "production" || Object.keys(markdownFiles).length === 0 || !needsMdFiles) {
         return;
       }
-      const distDir = path36.join(
+      const distDir = path37.join(
         config2.__meta.rootDir,
         "dist",
         config2.basePath ?? ""
@@ -14465,16 +14716,15 @@ var viteMarkdownExportPlugin = () => {
             description,
             content: finalMarkdown
           });
-          const segments = routePath === "/" ? ["index"] : routePath.split("/").filter(Boolean);
-          const outputPath = `${path36.join(distDir, ...segments)}.md`;
-          await mkdir8(path36.dirname(outputPath), { recursive: true });
+          const outputPath = markdownOutputPath(distDir, routePath);
+          await mkdir8(path37.dirname(outputPath), { recursive: true });
           await writeFile10(outputPath, finalMarkdown, "utf-8");
         } catch (error) {
           console.warn(`Failed to export markdown for ${routePath}:`, error);
         }
       }
       if (config2.docs?.llms?.llmsTxt || config2.docs?.llms?.llmsTxtFull) {
-        const markdownInfoPath = path36.join(
+        const markdownInfoPath = path37.join(
           config2.__meta.rootDir,
           "node_modules/.apitogo/markdown-info.json"
         );
@@ -14626,9 +14876,9 @@ var remarkCodeTabs = () => (tree) => {
 };
 
 // src/vite/mdx/remark-inject-filepath.ts
-import path37 from "node:path";
+import path38 from "node:path";
 var remarkInjectFilepath = (rootDir) => (tree, vfile) => {
-  const relativePath = path37.relative(rootDir, vfile.path).split(path37.sep).join(path37.posix.sep);
+  const relativePath = path38.relative(rootDir, vfile.path).split(path38.sep).join(path38.posix.sep);
   tree.children.unshift(exportMdxjsConst("__filepath", relativePath));
 };
 
@@ -14715,18 +14965,18 @@ var remarkLastModified = () => {
 };
 
 // src/vite/mdx/remark-link-rewrite.ts
-import path38 from "node:path";
+import path39 from "node:path";
 import { visit as visit5 } from "unist-util-visit";
 var remarkLinkRewrite = (basePath = "") => (tree) => {
   visit5(tree, "link", (node) => {
     if (!node.url) return;
     if (node.url.startsWith("http") || node.url.startsWith("mailto:")) return;
     node.url = node.url.replace(/\\/g, "/");
-    const base = path38.posix.join(basePath);
+    const base = path39.posix.join(basePath);
     if (basePath && node.url.startsWith(base)) {
       node.url = node.url.slice(base.length);
     } else if (!node.url.startsWith("/") && !node.url.startsWith("#")) {
-      node.url = path38.posix.join("..", node.url);
+      node.url = path39.posix.join("..", node.url);
     }
     node.url = node.url.replace(/\.mdx?(#.*)?$/, "$1");
   });
@@ -14946,14 +15196,14 @@ var plugin_mdx_default = viteMdxPlugin;
 
 // src/vite/plugin-modules.ts
 init_loader();
-import path39 from "node:path";
+import path40 from "node:path";
 import { normalizePath as normalizePath2 } from "vite";
-var getLandingModuleImport = (moduleDir, mode) => mode === "internal" ? normalizePath2(path39.join(moduleDir, "../module-landing/src/index.tsx")) : "@lukoweb/apitogo-module-landing";
-var getUserPanelModuleImport = (moduleDir, mode) => mode === "internal" ? normalizePath2(path39.join(moduleDir, "../module-user-panel/src/index.tsx")) : "@lukoweb/apitogo-module-user-panel";
+var getLandingModuleImport = (moduleDir, mode) => mode === "internal" ? normalizePath2(path40.join(moduleDir, "../module-landing/src/index.tsx")) : "@lukoweb/apitogo-module-landing";
+var getUserPanelModuleImport = (moduleDir, mode) => mode === "internal" ? normalizePath2(path40.join(moduleDir, "../module-user-panel/src/index.tsx")) : "@lukoweb/apitogo-module-user-panel";
 var getBillingPluginImport = (moduleDir, mode) => mode === "internal" ? normalizePath2(
-  path39.join(moduleDir, "../plugin-dev-portal-billing/src/index.ts")
+  path40.join(moduleDir, "../plugin-dev-portal-billing/src/index.ts")
 ) : "@lukoweb/apitogo-plugin-dev-portal-billing";
-var resolveProjectPageImport = (rootDir, pagePath) => normalizePath2(path39.resolve(rootDir, pagePath));
+var resolveProjectPageImport = (rootDir, pagePath) => normalizePath2(path40.resolve(rootDir, pagePath));
 var viteModulesPlugin = () => {
   const virtualModuleId4 = "virtual:zudoku-modules-plugin";
   const resolvedVirtualModuleId5 = `\0${virtualModuleId4}`;
@@ -15095,17 +15345,17 @@ var plugin_modules_default = viteModulesPlugin;
 
 // src/vite/plugin-offroot-resolve.ts
 init_loader();
-import path40 from "node:path";
+import path41 from "node:path";
 function stripQuery(id) {
   const query = id.indexOf("?");
   return query === -1 ? id : id.slice(0, query);
 }
 function isInside(parent, child) {
-  const relative = path40.relative(path40.resolve(parent), path40.resolve(child));
-  return relative === "" || !relative.startsWith("..") && !path40.isAbsolute(relative);
+  const relative = path41.relative(path41.resolve(parent), path41.resolve(child));
+  return relative === "" || !relative.startsWith("..") && !path41.isAbsolute(relative);
 }
 function isBareSpecifier(source) {
-  return !source.startsWith("\0") && !source.startsWith(".") && !source.startsWith("/") && !path40.isAbsolute(source);
+  return !source.startsWith("\0") && !source.startsWith(".") && !source.startsWith("/") && !path41.isAbsolute(source);
 }
 function isInsideNodeModules(filePath) {
   return filePath.split(/[\\/]/).includes("node_modules");
@@ -15129,7 +15379,7 @@ function viteOffrootResolvePlugin() {
       if (!shouldResolveFromSiteRoot(source, importer, rootDir)) {
         return;
       }
-      return this.resolve(source, path40.join(rootDir, "package.json"), {
+      return this.resolve(source, path41.join(rootDir, "package.json"), {
         ...options,
         skipSelf: true
       });
@@ -15139,7 +15389,7 @@ function viteOffrootResolvePlugin() {
 
 // src/vite/plugin-search.ts
 init_loader();
-import path41 from "node:path";
+import path42 from "node:path";
 var viteSearchPlugin = () => {
   const virtualModuleId4 = "virtual:zudoku-search-plugin";
   const resolvedVirtualModuleId5 = `\0${virtualModuleId4}`;
@@ -15157,7 +15407,7 @@ var viteSearchPlugin = () => {
         return resolvedVirtualModuleId5;
       }
       if (id === "/pagefind/pagefind.js" && resolvedViteConfig?.publicDir) {
-        return path41.join(resolvedViteConfig.publicDir, "pagefind/pagefind.js");
+        return path42.join(resolvedViteConfig.publicDir, "pagefind/pagefind.js");
       }
     },
     async load(id) {
@@ -15298,27 +15548,27 @@ function vitePlugin() {
 
 // src/vite/watch-ignore.ts
 import { lstatSync, realpathSync } from "node:fs";
-import path42 from "node:path";
+import path43 from "node:path";
 var STATE_INSIDE_CONTENT = /[\\/]content[\\/](?:\.apitogo|apitogo[\\/]\.state)(?:[\\/]|$)/;
 var within = (base, file) => {
-  const resolvedBase = path42.resolve(base);
-  const resolvedFile = path42.resolve(file);
-  return resolvedFile === resolvedBase || resolvedFile.startsWith(resolvedBase + path42.sep);
+  const resolvedBase = path43.resolve(base);
+  const resolvedFile = path43.resolve(file);
+  return resolvedFile === resolvedBase || resolvedFile.startsWith(resolvedBase + path43.sep);
 };
 var unique = (paths) => [...new Set(paths)];
 function isWorkspace(root) {
   try {
-    return path42.basename(root) === "generated" && lstatSync(path42.join(root, "content")).isSymbolicLink();
+    return path43.basename(root) === "generated" && lstatSync(path43.join(root, "content")).isSymbolicLink();
   } catch {
     return false;
   }
 }
 function tenantDir(root) {
-  return isWorkspace(root) ? realpathSync(path42.join(root, "content")) : void 0;
+  return isWorkspace(root) ? realpathSync(path43.join(root, "content")) : void 0;
 }
 function stateIgnore(root) {
   if (!isWorkspace(root)) return void 0;
-  const state = path42.dirname(root);
+  const state = path43.dirname(root);
   const states = unique([state, realpathSync(state)]);
   const roots = unique([root, realpathSync(root)]);
   return (file) => {
@@ -15327,19 +15577,28 @@ function stateIgnore(root) {
     return STATE_INSIDE_CONTENT.test(file);
   };
 }
+var STATE_FOLDER = /(?:^|[\\/])(?:\.apitogo|apitogo[\\/]\.state)(?:[\\/]|$)/;
+function nestedStateIgnore(root) {
+  const resolvedRoot = path43.resolve(root);
+  return (file) => {
+    const relative = path43.relative(resolvedRoot, path43.resolve(file));
+    if (relative.startsWith("..") || path43.isAbsolute(relative)) return false;
+    return STATE_FOLDER.test(relative);
+  };
+}
 function devServerAllow(root, moduleDir) {
   const tenant = tenantDir(root);
-  return [root, path42.dirname(root), moduleDir, ...tenant ? [tenant] : []];
+  return [root, path43.dirname(root), moduleDir, ...tenant ? [tenant] : []];
 }
 
 // src/vite/config.ts
 var resolveMergedPublicDir = (rootDir, merged) => {
   if (merged.publicDir === false) return void 0;
   const rel2 = typeof merged.publicDir === "string" ? merged.publicDir : "public";
-  return path43.resolve(rootDir, rel2);
+  return path44.resolve(rootDir, rel2);
 };
-var getAppClientEntryPath = () => path43.posix.join(getZudokuRootDir(), "src/app/entry.client.tsx");
-var getAppServerEntryPath = () => path43.posix.join(getZudokuRootDir(), "src/app/entry.server.tsx");
+var getAppClientEntryPath = () => path44.posix.join(getZudokuRootDir(), "src/app/entry.client.tsx");
+var getAppServerEntryPath = () => path44.posix.join(getZudokuRootDir(), "src/app/entry.server.tsx");
 var hasLoggedCdnInfo = false;
 var MEDIA_REGEX = /\.(a?png|jpe?g|gif|bmp|svg|webp|tiff|ico|webm|ogg|mp3|wav|m4a|avif|mp4)/i;
 var defineEnvVars = (vars) => Object.fromEntries(
@@ -15370,7 +15629,7 @@ async function getViteConfig(dir, configEnv) {
   const ignoreState = stateIgnore(dir);
   if (ZuploEnv.isZuplo) {
     dotenv.config({
-      path: path43.resolve(config2.__meta.rootDir, "../.env.zuplo"),
+      path: path44.resolve(config2.__meta.rootDir, "../.env.zuplo"),
       quiet: true
     });
   }
@@ -15425,6 +15684,7 @@ async function getViteConfig(dir, configEnv) {
           `${dir}/.git`,
           `${config2.__meta.moduleDir}/src/vite`,
           `${config2.__meta.moduleDir}/src/cli`,
+          nestedStateIgnore(dir),
           ...ignoreState ? [ignoreState] : []
         ]
       }
@@ -15433,8 +15693,8 @@ async function getViteConfig(dir, configEnv) {
       ssr: configEnv.isSsrBuild,
       sourcemap: true,
       target: "es2022",
-      outDir: path43.resolve(
-        path43.join(
+      outDir: path44.resolve(
+        path44.join(
           dir,
           "dist",
           config2.basePath ?? "",
@@ -15453,7 +15713,7 @@ async function getViteConfig(dir, configEnv) {
     },
     experimental: {
       renderBuiltUrl(filename) {
-        if (cdnUrl?.base && [".js", ".css"].includes(path43.extname(filename))) {
+        if (cdnUrl?.base && [".js", ".css"].includes(path44.extname(filename))) {
           return joinUrl(cdnUrl.base, filename);
         }
         if (cdnUrl?.media && MEDIA_REGEX.test(filename)) {
@@ -15466,7 +15726,7 @@ async function getViteConfig(dir, configEnv) {
       esbuildOptions: {
         target: "es2022"
       },
-      entries: [path43.posix.join(getZudokuRootDir(), "src/{app,lib}/**")],
+      entries: [path44.posix.join(getZudokuRootDir(), "src/{app,lib}/**")],
       exclude: [
         "@lukoweb/apitogo",
         "@lukoweb/apitogo-plugin-dev-portal-billing"
@@ -15570,7 +15830,7 @@ init_package_json();
 init_joinUrl();
 import assert from "node:assert";
 import { cp, mkdir as mkdir9, writeFile as writeFile11 } from "node:fs/promises";
-import path44 from "node:path";
+import path45 from "node:path";
 var pkgJson = getZudokuPackageJson();
 function generateOutput({
   config: config2,
@@ -15627,9 +15887,9 @@ async function writeOutput(dir, {
   rewrites
 }) {
   const output4 = generateOutput({ config: config2, redirects, rewrites });
-  const outputDir = process.env.VERCEL ? path44.join(dir, ".vercel/output") : path44.join(dir, "dist/.output");
+  const outputDir = process.env.VERCEL ? path45.join(dir, ".vercel/output") : path45.join(dir, "dist/.output");
   await mkdir9(outputDir, { recursive: true });
-  const outputFile = path44.join(outputDir, "config.json");
+  const outputFile = path45.join(outputDir, "config.json");
   await writeFile11(outputFile, JSON.stringify(output4, null, 2), "utf-8");
   if (process.env.VERCEL) {
     console.log("Wrote Vercel output to", outputDir);
@@ -15639,9 +15899,9 @@ async function writeOutput(dir, {
 // src/vite/prerender/prerender.ts
 init_logger();
 init_file_exists();
-import { readFile as readFile12, rm as rm6 } from "node:fs/promises";
+import { readFile as readFile12 } from "node:fs/promises";
 import os from "node:os";
-import path47 from "node:path";
+import path48 from "node:path";
 import { pathToFileURL } from "node:url";
 import { createIndex } from "pagefind";
 import colors11 from "picocolors";
@@ -15683,7 +15943,7 @@ function throttle(fn) {
 init_joinUrl();
 import { createWriteStream, existsSync as existsSync5 } from "node:fs";
 import { mkdir as mkdir10 } from "node:fs/promises";
-import path45 from "node:path";
+import path46 from "node:path";
 import colors9 from "picocolors";
 import { SitemapStream } from "sitemap";
 async function generateSitemap({
@@ -15697,11 +15957,11 @@ async function generateSitemap({
     return;
   }
   const sitemap = new SitemapStream({ hostname: config2.siteUrl });
-  const outputDir = path45.resolve(baseOutputDir, config2.outDir ?? "");
+  const outputDir = path46.resolve(baseOutputDir, config2.outDir ?? "");
   if (!existsSync5(outputDir)) {
     await mkdir10(outputDir, { recursive: true });
   }
-  const sitemapOutputPath = path45.join(outputDir, "sitemap.xml");
+  const sitemapOutputPath = path46.join(outputDir, "sitemap.xml");
   const writeStream = createWriteStream(sitemapOutputPath);
   sitemap.pipe(writeStream);
   let lastmod;
@@ -15731,14 +15991,14 @@ async function generateSitemap({
 
 // src/vite/prerender/utils.ts
 init_joinUrl();
-var resolveRoutePath = (path99) => {
-  const segments = path99.split("/");
+var resolveRoutePath = (path100) => {
+  const segments = path100.split("/");
   if (segments.some((s) => s.startsWith(":") && !s.endsWith("?"))) {
     return void 0;
   }
   return segments.filter((s) => !s.startsWith(":")).join("/") || void 0;
 };
-var isSkipped = (path99) => path99.includes("*") || /^\d+$/.test(path99);
+var isSkipped = (path100) => path100.includes("*") || /^\d+$/.test(path100);
 var resolveRoutes = (routes, parentPath = "") => routes.flatMap((route) => {
   if (route.path && isSkipped(route.path)) return [];
   const routePath = route.path ? resolveRoutePath(route.path) : void 0;
@@ -15788,12 +16048,12 @@ var prerender = async ({
   serverConfigFilename,
   writeRedirects = true
 }) => {
-  const distDir = path47.join(dir, "dist", basePath);
+  const distDir = path48.join(dir, "dist", basePath);
   const serverConfigPath = pathToFileURL(
-    path47.join(distDir, "server", serverConfigFilename)
+    path48.join(distDir, "server", serverConfigFilename)
   ).href;
   const entryServerPath = pathToFileURL(
-    path47.join(distDir, "server/entry.server.js")
+    path48.join(distDir, "server/entry.server.js")
   ).href;
   const rawConfig = await import(serverConfigPath).then(
     (m) => m.default
@@ -15878,7 +16138,7 @@ var prerender = async ({
     })
   );
   const pagefindWriteResult = await pagefindIndex?.writeFiles({
-    outputPath: path47.join(distDir, "pagefind")
+    outputPath: path48.join(distDir, "pagefind")
   });
   const seconds = ((performance.now() - start) / 1e3).toFixed(1);
   const message = `\u2713 finished prerendering ${paths.length} routes in ${seconds} seconds using ${maxThreads} workers`;
@@ -15910,7 +16170,7 @@ var prerender = async ({
     const { generateLlmsTxtFiles: generateLlmsTxtFiles2 } = await Promise.resolve().then(() => (init_llms(), llms_exports));
     const docsConfig = DocsConfigSchema2.parse(config2.docs);
     const llmsConfig = docsConfig.llms ?? {};
-    const markdownInfoPath = path47.join(
+    const markdownInfoPath = path48.join(
       dir,
       "node_modules/.apitogo/markdown-info.json"
     );
@@ -15932,10 +16192,7 @@ var prerender = async ({
       });
     }
     if (!docsConfig.publishMarkdown) {
-      await Promise.all(
-        markdownFileInfos.map((info) => rm6(info.filePath).catch(() => {
-        }))
-      );
+      await removeExportedMarkdown(distDir, markdownFileInfos);
     }
   }
   return { workerResults, rewrites };
@@ -16001,7 +16258,7 @@ async function runBuild(options) {
       html,
       basePath: config2.basePath
     });
-    await rm7(path48.join(clientOutDir, "index.html"), { force: true });
+    await rm7(path49.join(clientOutDir, "index.html"), { force: true });
   } else {
     await runPrerender({
       dir,
@@ -16025,7 +16282,7 @@ var runPrerender = async (options) => {
       serverConfigFilename,
       writeRedirects: process.env.VERCEL === void 0
     });
-    const indexHtml = path48.join(clientOutDir, "index.html");
+    const indexHtml = path49.join(clientOutDir, "index.html");
     if (!workerResults.find((r) => r.outputPath === indexHtml)) {
       await writeFile13(indexHtml, html, "utf-8");
     }
@@ -16035,15 +16292,15 @@ var runPrerender = async (options) => {
     for (const statusPage of statusPages) {
       await rename5(
         statusPage,
-        path48.join(dir, DIST_DIR, path48.basename(statusPage))
+        path49.join(dir, DIST_DIR, path49.basename(statusPage))
       );
     }
     await rm7(serverOutDir, { recursive: true, force: true });
     if (process.env.VERCEL) {
-      await mkdir11(path48.join(dir, ".vercel/output/static"), { recursive: true });
+      await mkdir11(path49.join(dir, ".vercel/output/static"), { recursive: true });
       await rename5(
-        path48.join(dir, DIST_DIR),
-        path48.join(dir, ".vercel/output/static")
+        path49.join(dir, DIST_DIR),
+        path49.join(dir, ".vercel/output/static")
       );
     }
     await writeOutput(dir, {
@@ -16053,7 +16310,7 @@ var runPrerender = async (options) => {
     });
     if (ZuploEnv.isZuplo && issuer) {
       await writeFile13(
-        path48.join(dir, DIST_DIR, ".output/zuplo.json"),
+        path49.join(dir, DIST_DIR, ".output/zuplo.json"),
         JSON.stringify({ issuer }, null, 2),
         "utf-8"
       );
@@ -16065,10 +16322,10 @@ var runPrerender = async (options) => {
 };
 var bundleSSREntry = async (options) => {
   const { dir, adapter, serverOutDir, serverConfigFilename, html, basePath } = options;
-  const tempEntryPath = path48.join(dir, "__ssr-entry.ts");
+  const tempEntryPath = path49.join(dir, "__ssr-entry.ts");
   const packageRoot = getZudokuRootDir();
   const templateContent = await readFile13(
-    path48.join(packageRoot, "src/vite/ssr-templates", `${adapter}.ts`),
+    path49.join(packageRoot, "src/vite/ssr-templates", `${adapter}.ts`),
     "utf-8"
   );
   const entryContent = templateContent.replace('"__TEMPLATE__"', JSON.stringify(html)).replace('"__CONFIG_FILE__"', JSON.stringify(`./${serverConfigFilename}`)).replace(
@@ -16083,9 +16340,9 @@ var bundleSSREntry = async (options) => {
       platform: adapter === "node" ? "node" : "neutral",
       target: "es2022",
       format: "esm",
-      outfile: path48.join(serverOutDir, "entry.js"),
+      outfile: path49.join(serverOutDir, "entry.js"),
       external: ["./entry.server.js", `./${serverConfigFilename}`],
-      nodePaths: [path48.join(packageRoot, "node_modules")],
+      nodePaths: [path49.join(packageRoot, "node_modules")],
       banner: { js: "// Bundled SSR entry" }
     });
   } finally {
@@ -16099,7 +16356,7 @@ init_package_json();
 // src/cli/init/v2-packages.ts
 import { existsSync as existsSync6 } from "node:fs";
 import { readFile as readFile14, writeFile as writeFile14 } from "node:fs/promises";
-import path49 from "node:path";
+import path50 from "node:path";
 var CORE_PACKAGES = [
   "@lukoweb/apitogo",
   "react",
@@ -16116,7 +16373,7 @@ function packageNameFrom(name) {
   return slug || "portal";
 }
 async function ensurePackageJson(dir, name) {
-  const file = path49.join(dir, "package.json");
+  const file = path50.join(dir, "package.json");
   if (existsSync6(file)) return false;
   await writeFile14(
     file,
@@ -16135,11 +16392,11 @@ async function ensurePackageJson(dir, name) {
   return true;
 }
 function isPackageInstalled(startDir, name) {
-  let dir = path49.resolve(startDir);
+  let dir = path50.resolve(startDir);
   for (; ; ) {
-    if (existsSync6(path49.join(dir, "node_modules", name, "package.json")))
+    if (existsSync6(path50.join(dir, "node_modules", name, "package.json")))
       return true;
-    const parent = path49.dirname(dir);
+    const parent = path50.dirname(dir);
     if (parent === dir) return false;
     dir = parent;
   }
@@ -16196,7 +16453,7 @@ function portalBuildStep(context, options = {}, build2 = runBuild) {
   return {
     name: "build",
     hash: () => hash2,
-    stillValid: () => access4(path50.join(buildDir, "index.html")).then(
+    stillValid: () => access4(path51.join(buildDir, "index.html")).then(
       () => true,
       () => false
     ),
@@ -16213,11 +16470,11 @@ function portalBuildStep(context, options = {}, build2 = runBuild) {
         else process.env.NODE_ENV = originalNodeEnv;
       }
       await rm8(buildDir, { recursive: true, force: true });
-      await mkdir12(path50.dirname(buildDir), { recursive: true });
-      await rename6(path50.join(root, "dist"), buildDir);
+      await mkdir12(path51.dirname(buildDir), { recursive: true });
+      await rename6(path51.join(root, "dist"), buildDir);
       if (prepared.publishedManifest) {
         await writeFile15(
-          path50.join(buildDir, MANIFEST_FILE),
+          path51.join(buildDir, MANIFEST_FILE),
           `${JSON.stringify(prepared.publishedManifest, null, 2)}
 `
         );
@@ -16248,15 +16505,15 @@ async function buildV2(options) {
 // src/cli/check/gateway-online.ts
 import { readFile as readFile16 } from "node:fs/promises";
 var SPEC_SEND_LIMIT = 5 * 1024 * 1024 + 64 * 1024;
-var issue2 = (code, path99, message, hint) => ({ code, path: path99, message, hint });
+var issue2 = (code, path100, message, hint) => ({ code, path: path100, message, hint });
 function capabilityIssues(gateway, answer) {
   const can = answer.capabilities;
   const plan2 = `your ${answer.tier} plan`;
   const found = [];
-  const unsupported = (path99, what, hint) => found.push(
+  const unsupported = (path100, what, hint) => found.push(
     issue2(
       "GATEWAY_CAPABILITY_UNSUPPORTED",
-      path99,
+      path100,
       `${what} is not available on ${plan2}.`,
       hint
     )
@@ -16467,9 +16724,9 @@ function toPlatformPlans(plans, options = {}) {
 }
 
 // src/cli/check/services-online.ts
-var issue3 = (code, path99, message, hint) => ({
+var issue3 = (code, path100, message, hint) => ({
   code,
-  path: path99,
+  path: path100,
   message,
   hint
 });
@@ -16581,7 +16838,7 @@ var withPlanName = (message, sku) => !sku || message.toLowerCase().startsWith(`p
 async function isConfigV2(dir) {
   try {
     return /"version"\s*:\s*2\b/.test(
-      await readFile18(path51.join(dir, APITOGO_CONFIG_FILENAME), "utf8")
+      await readFile18(path52.join(dir, APITOGO_CONFIG_FILENAME), "utf8")
     );
   } catch {
     return false;
@@ -16590,7 +16847,7 @@ async function isConfigV2(dir) {
 async function isLegacyConfig(dir) {
   let text2;
   try {
-    text2 = await readFile18(path51.join(dir, APITOGO_CONFIG_FILENAME), "utf8");
+    text2 = await readFile18(path52.join(dir, APITOGO_CONFIG_FILENAME), "utf8");
   } catch {
     return false;
   }
@@ -16738,7 +16995,7 @@ async function validatePortalBuild(dir) {
   }
 }
 async function runCheckV2(dir, args = {}, deps = {}) {
-  const configPath = path51.join(dir, APITOGO_CONFIG_FILENAME);
+  const configPath = path52.join(dir, APITOGO_CONFIG_FILENAME);
   let report;
   try {
     const { config: config2, resolved } = loadConfigV2(dir);
@@ -16848,7 +17105,7 @@ async function checkV2(dir, args, deps = platformDependencies(args)) {
 init_package_json();
 
 // src/cli/init/v2-handler.ts
-import path52 from "node:path";
+import path53 from "node:path";
 import { createInterface } from "node:readline/promises";
 function parseDocsFlag(value) {
   if (value === void 0) return void 0;
@@ -16870,15 +17127,15 @@ async function ask(question) {
 }
 function describePlan(plan2) {
   return {
-    willCreate: plan2.entries.filter((entry) => !plan2.keep.includes(entry.path)).map((entry) => path52.relative(plan2.dir, entry.path)),
-    willKeep: plan2.keep.map((target) => path52.relative(plan2.dir, target)),
+    willCreate: plan2.entries.filter((entry) => !plan2.keep.includes(entry.path)).map((entry) => path53.relative(plan2.dir, entry.path)),
+    willKeep: plan2.keep.map((target) => path53.relative(plan2.dir, target)),
     replacesConfig: plan2.replacesConfig
   };
 }
 async function initV2(argv) {
   const json = argv.json === true;
   try {
-    const dir = path52.resolve(process.cwd(), argv.dir ?? ".");
+    const dir = path53.resolve(process.cwd(), argv.dir ?? ".");
     const plan2 = await planInit({
       dir,
       name: argv.name,
@@ -16919,8 +17176,8 @@ async function initV2(argv) {
             status: "created",
             dir,
             ...describePlan(plan2),
-            created: result.created.map((p) => path52.relative(dir, p)),
-            kept: result.kept.map((p) => path52.relative(dir, p))
+            created: result.created.map((p) => path53.relative(dir, p)),
+            kept: result.kept.map((p) => path53.relative(dir, p))
           },
           null,
           2
@@ -16929,7 +17186,7 @@ async function initV2(argv) {
       return;
     }
     printResultToConsole(
-      `Created ${path52.basename(plan2.configPath)} (config version 2) in ${dir}.`
+      `Created ${path53.basename(plan2.configPath)} (config version 2) in ${dir}.`
     );
     printHintToConsole(
       "Next: add a service with `apitogo add <portal|gateway|identity|plans>`, or run `apitogo create` for a guided setup."
@@ -16956,7 +17213,7 @@ async function initV2(argv) {
 
 // src/cli/services/packages.ts
 import { existsSync as existsSync7 } from "node:fs";
-import path53 from "node:path";
+import path54 from "node:path";
 
 // src/cli/common/spawn-command.ts
 import {
@@ -16989,18 +17246,18 @@ function packagesForConfig(config2) {
   ];
 }
 function isInstalled(dir, name) {
-  for (let current = path53.resolve(dir); ; current = path53.dirname(current)) {
-    if (existsSync7(path53.join(current, "node_modules", name, "package.json")))
+  for (let current = path54.resolve(dir); ; current = path54.dirname(current)) {
+    if (existsSync7(path54.join(current, "node_modules", name, "package.json")))
       return true;
-    if (path53.dirname(current) === current) return false;
+    if (path54.dirname(current) === current) return false;
   }
 }
 function missingPackages(dir, names) {
   return names.filter((name) => !isInstalled(dir, name));
 }
 function detectPackageManager(dir) {
-  if (existsSync7(path53.join(dir, "pnpm-lock.yaml"))) return "pnpm";
-  if (existsSync7(path53.join(dir, "yarn.lock"))) return "yarn";
+  if (existsSync7(path54.join(dir, "pnpm-lock.yaml"))) return "pnpm";
+  if (existsSync7(path54.join(dir, "yarn.lock"))) return "yarn";
   return "npm";
 }
 function installSpecsCommand(manager, specs) {
@@ -17058,7 +17315,7 @@ async function installMissingPackages(dir, config2, version, options) {
       reason: "--no-install was given",
       command: shown
     };
-  await ensurePackageJson(dir, config2.project?.name ?? path53.basename(dir));
+  await ensurePackageJson(dir, config2.project?.name ?? path54.basename(dir));
   await (options.installer ?? runInstaller)(dir, command2);
   return { status: "installed", packages: missing, command: shown };
 }
@@ -17121,7 +17378,7 @@ var list = (value) => {
   return items.length > 0 ? items : void 0;
 };
 function addOptionsFromArguments(service, argv) {
-  const dir = path54.resolve(process.cwd(), argv.dir ?? ".");
+  const dir = path55.resolve(process.cwd(), argv.dir ?? ".");
   const issuers = list(argv.issuer);
   return {
     dir,
@@ -17175,8 +17432,8 @@ function describe(edit, dir) {
   return {
     service: edit.service,
     action: edit.action,
-    willCreate: edit.files.map((file) => path54.relative(dir, file.path)),
-    keep: edit.keep.map((file) => path54.relative(dir, file)),
+    willCreate: edit.files.map((file) => path55.relative(dir, file.path)),
+    keep: edit.keep.map((file) => path55.relative(dir, file)),
     notes: edit.notes
   };
 }
@@ -17190,7 +17447,7 @@ async function run(action, argv, plan2, deps = {}) {
         `Choose one of ${SERVICES.join(", ")}.`
       );
     }
-    const dir = path54.resolve(process.cwd(), argv.dir ?? ".");
+    const dir = path55.resolve(process.cwd(), argv.dir ?? ".");
     if (!await isConfigV2(dir)) {
       throw new ServiceEditError(
         `${action} works with a config version 2 project, and there is none in ${dir}.`,
@@ -17258,7 +17515,7 @@ async function run(action, argv, plan2, deps = {}) {
           {
             status: action === "add" ? "added" : "removed",
             ...describe(edit, dir),
-            created: created.map((file) => path54.relative(dir, file)),
+            created: created.map((file) => path55.relative(dir, file)),
             ...install ? { packages: install } : {}
           },
           null,
@@ -17268,7 +17525,7 @@ async function run(action, argv, plan2, deps = {}) {
       return;
     }
     printResultToConsole(
-      `${action === "add" ? "Added" : "Removed"} ${edit.service} in ${path54.basename(edit.configPath)}.`
+      `${action === "add" ? "Added" : "Removed"} ${edit.service} in ${path55.basename(edit.configPath)}.`
     );
   } catch (error) {
     const message = error instanceof Error ? error.message : String(error);
@@ -17329,7 +17586,7 @@ var removeService = (argv) => run(
   "remove",
   argv,
   (service) => planRemoveService(service, {
-    dir: path54.resolve(process.cwd(), argv.dir ?? "."),
+    dir: path55.resolve(process.cwd(), argv.dir ?? "."),
     deleteFiles: argv.deleteFiles === true
   })
 );
@@ -17481,16 +17738,16 @@ var add_default = {
 };
 
 // src/cli/build/handler.ts
-import path56 from "node:path";
+import path57 from "node:path";
 init_logger();
 init_package_json();
 
 // src/cli/preview/handler.ts
-import path55 from "node:path";
+import path56 from "node:path";
 import { preview as vitePreview } from "vite";
 var DEFAULT_PREVIEW_PORT = 4e3;
 async function preview(argv) {
-  const dir = path55.resolve(process.cwd(), argv.dir);
+  const dir = path56.resolve(process.cwd(), argv.dir);
   const viteConfig = await getViteConfig(dir, {
     command: "serve",
     mode: "production",
@@ -17533,7 +17790,7 @@ async function build(argv) {
     printDiagnosticsToConsole("");
     printDiagnosticsToConsole("");
   }
-  const dir = path56.resolve(process.cwd(), argv.dir);
+  const dir = path57.resolve(process.cwd(), argv.dir);
   try {
     if (await isConfigV2(dir)) {
       const result = await buildV2({ dir, jsonOnly });
@@ -17598,10 +17855,10 @@ var build_default = {
 };
 
 // src/cli/check/handler.ts
-import path62 from "node:path";
+import path63 from "node:path";
 
 // src/cli/platform/tools/check-publish-readiness.ts
-import path61 from "node:path";
+import path62 from "node:path";
 
 // src/cli/platform/helpers/dev-portal-backend.ts
 function deriveProvisioningState(backend) {
@@ -17686,7 +17943,7 @@ function formatDevPortalBackendResponse(projectId, backend) {
 init_gateway_limits();
 import { existsSync as existsSync8 } from "node:fs";
 import { access as access5, mkdir as mkdir13, readFile as readFile19, writeFile as writeFile16 } from "node:fs/promises";
-import path57 from "node:path";
+import path58 from "node:path";
 
 // src/cli/make-config/header-pricing-nav.ts
 var HEADER_PRICING_PATH = "/pricing";
@@ -17808,7 +18065,7 @@ function isPlanFree(plan2) {
   return (plan2.priceAmount ?? 0) <= 0;
 }
 function manifestFilePath(siteDirectory) {
-  return path57.join(path57.resolve(siteDirectory), APITOGO_CONFIG_FILENAME2);
+  return path58.join(path58.resolve(siteDirectory), APITOGO_CONFIG_FILENAME2);
 }
 var STORED_MANIFEST_KEYS = [
   "authentication",
@@ -18232,23 +18489,23 @@ function resolveBackendSourceDirectory(siteDirectory, sourceDirectory) {
   if (!trimmed) {
     return void 0;
   }
-  return path57.resolve(siteDirectory, trimmed);
+  return path58.resolve(siteDirectory, trimmed);
 }
 function resolveBackendOpenApiPath(openApiPath, options) {
   const trimmed = openApiPath?.trim();
   if (!trimmed) {
     return void 0;
   }
-  if (path57.isAbsolute(trimmed)) {
+  if (path58.isAbsolute(trimmed)) {
     return trimmed;
   }
-  const siteResolved = path57.resolve(options.siteDirectory, trimmed);
+  const siteResolved = path58.resolve(options.siteDirectory, trimmed);
   if (existsSync8(siteResolved)) {
     return siteResolved;
   }
   const backendDir = options.backendSourceDirectory?.trim();
   if (backendDir) {
-    const backendResolved = path57.resolve(backendDir, trimmed);
+    const backendResolved = path58.resolve(backendDir, trimmed);
     if (existsSync8(backendResolved)) {
       return backendResolved;
     }
@@ -18273,7 +18530,7 @@ async function readManifest2(siteDirectory) {
 }
 async function writeManifest2(siteDirectory, manifest) {
   const filePath = manifestFilePath(siteDirectory);
-  await mkdir13(path57.dirname(filePath), { recursive: true });
+  await mkdir13(path58.dirname(filePath), { recursive: true });
   let config2 = {};
   if (await pathExists(filePath)) {
     const raw = await readFile19(filePath, "utf8");
@@ -18299,7 +18556,7 @@ import {
   unlink,
   writeFile as writeFile17
 } from "node:fs/promises";
-import path58 from "node:path";
+import path59 from "node:path";
 var ENV_FILENAME = ".env";
 var COLLAPSED_UPPERCASE_ALIASES2 = {
   SECRETKEY: "secretKey",
@@ -18418,12 +18675,12 @@ async function readEnvFile(filePath) {
   }
 }
 async function loadSiteEnv(siteDirectory) {
-  const resolvedDirectory = path58.resolve(siteDirectory);
+  const resolvedDirectory = path59.resolve(siteDirectory);
   const merged = { ...process.env };
   for (const fileName of [ENV_FILENAME, ".env.local"]) {
     Object.assign(
       merged,
-      await readEnvFile(path58.join(resolvedDirectory, fileName))
+      await readEnvFile(path59.join(resolvedDirectory, fileName))
     );
   }
   return merged;
@@ -18460,7 +18717,7 @@ function buildAuthSecretsJson(secrets2, options) {
   return payload;
 }
 function envFilePath(siteDirectory) {
-  return path58.join(path58.resolve(siteDirectory), ENV_FILENAME);
+  return path59.join(path59.resolve(siteDirectory), ENV_FILENAME);
 }
 function getSecretsStatus(siteDirectory, manifest, secrets2, envExists) {
   const providerSecretStatus = {};
@@ -18496,7 +18753,7 @@ function validateSecretsForPublish(manifest, secrets2, emailOptions) {
 }
 async function siteEnvFileHasEntries(siteDirectory) {
   for (const fileName of [ENV_FILENAME, ".env.local"]) {
-    const loaded = await readEnvFile(path58.join(siteDirectory, fileName));
+    const loaded = await readEnvFile(path59.join(siteDirectory, fileName));
     if (Object.keys(loaded).length > 0) {
       return true;
     }
@@ -18504,7 +18761,7 @@ async function siteEnvFileHasEntries(siteDirectory) {
   return false;
 }
 async function resolvePublishConfig(siteDirectory, emailOptions) {
-  const resolvedDirectory = path58.resolve(siteDirectory);
+  const resolvedDirectory = path59.resolve(siteDirectory);
   const manifestRaw = await readManifest2(resolvedDirectory);
   if (!manifestRaw) {
     throw new Error("apitogo.config.json not found in sourceDirectory.");
@@ -18536,11 +18793,11 @@ var SECRETS_COLLECTION_INSTRUCTION = "For go-live, plans must already be in apit
 init_gateway_limits();
 import { readFile as readFile21 } from "node:fs/promises";
 import { createRequire as createRequire2 } from "node:module";
-import path59 from "node:path";
+import path60 from "node:path";
 var cachedFallbackTs;
 async function loadTypeScriptForSite(sourceDirectory) {
   const require2 = createRequire2(
-    path59.join(path59.resolve(sourceDirectory), "package.json")
+    path60.join(path60.resolve(sourceDirectory), "package.json")
   );
   try {
     return require2("typescript");
@@ -18587,7 +18844,7 @@ async function referencedFileExists(sourceDirectory, reference) {
     return true;
   }
   return pathExists(
-    path59.resolve(sourceDirectory, reference.replace(/^\.\//, ""))
+    path60.resolve(sourceDirectory, reference.replace(/^\.\//, ""))
   );
 }
 async function validateSiteConfigStructure(config2, sourceDirectory) {
@@ -18702,11 +18959,11 @@ var DEFAULT_TSX_CANDIDATES = [
   "landing/LandingPage.tsx"
 ];
 async function validateDevPortalSiteConfig(sourceDirectory, options) {
-  const resolvedDir = path59.resolve(sourceDirectory);
+  const resolvedDir = path60.resolve(sourceDirectory);
   const issues = [];
   const checkedFiles = [];
   const skippedChecks = [];
-  const jsonPath = path59.join(resolvedDir, APITOGO_CONFIG_FILENAME2);
+  const jsonPath = path60.join(resolvedDir, APITOGO_CONFIG_FILENAME2);
   if (await pathExists(jsonPath)) {
     checkedFiles.push(APITOGO_CONFIG_FILENAME2);
     let parsed;
@@ -18738,7 +18995,7 @@ async function validateDevPortalSiteConfig(sourceDirectory, options) {
   );
   const existingTsxFiles = [];
   for (const relativeFile of tsxFiles) {
-    if (await pathExists(path59.join(resolvedDir, relativeFile))) {
+    if (await pathExists(path60.join(resolvedDir, relativeFile))) {
       existingTsxFiles.push(relativeFile);
     }
   }
@@ -18752,7 +19009,7 @@ async function validateDevPortalSiteConfig(sourceDirectory, options) {
       for (const relativeFile of existingTsxFiles) {
         checkedFiles.push(relativeFile);
         const content = await readFile21(
-          path59.join(resolvedDir, relativeFile),
+          path60.join(resolvedDir, relativeFile),
           "utf8"
         );
         issues.push(
@@ -18774,7 +19031,7 @@ async function validateDevPortalSiteConfig(sourceDirectory, options) {
 
 // src/cli/platform/helpers/npm-build.ts
 import { access as access7, readFile as readFile22 } from "node:fs/promises";
-import path60 from "node:path";
+import path61 from "node:path";
 var BUILD_LOG_TAIL_BYTES = 8192;
 var MIN_NODE_MAJOR = 20;
 var NpmBuildError = class extends Error {
@@ -18840,13 +19097,13 @@ function runCommand(command2, args, cwd, env) {
 }
 async function runNpmInstall(sourceDirectory, options) {
   assertNodeVersion(options?.nodeVersion);
-  const cwd = path60.resolve(sourceDirectory);
-  const packageJsonPath = path60.join(cwd, "package.json");
+  const cwd = path61.resolve(sourceDirectory);
+  const packageJsonPath = path61.join(cwd, "package.json");
   if (!await pathExists2(packageJsonPath)) {
     throw new Error(`package.json not found in sourceDirectory: ${cwd}`);
   }
   const startedAt = Date.now();
-  const lockPath = path60.join(cwd, "package-lock.json");
+  const lockPath = path61.join(cwd, "package-lock.json");
   const installArgs = await pathExists2(lockPath) ? ["ci"] : ["install"];
   const install = await runCommand("npm", installArgs, cwd);
   const installLog = install.output;
@@ -18864,8 +19121,8 @@ async function runNpmInstall(sourceDirectory, options) {
 }
 async function runNpmBuild(sourceDirectory, options) {
   assertNodeVersion(options?.nodeVersion);
-  const cwd = path60.resolve(sourceDirectory);
-  const packageJsonPath = path60.join(cwd, "package.json");
+  const cwd = path61.resolve(sourceDirectory);
+  const packageJsonPath = path61.join(cwd, "package.json");
   if (!await pathExists2(packageJsonPath)) {
     throw new Error(`package.json not found in sourceDirectory: ${cwd}`);
   }
@@ -18882,8 +19139,8 @@ async function runNpmBuild(sourceDirectory, options) {
       build2.exitCode
     );
   }
-  const distPath = path60.join(cwd, "dist");
-  const indexPath = path60.join(distPath, "index.html");
+  const distPath = path61.join(cwd, "dist");
+  const indexPath = path61.join(distPath, "index.html");
   if (!await pathExists2(indexPath)) {
     throw new NpmBuildError(
       `Build completed but dist/index.html was not found at ${indexPath}`,
@@ -19267,7 +19524,7 @@ function validateManifestForPlatformPublish(manifest) {
 
 // src/cli/platform/tools/check-publish-readiness.ts
 async function checkPublishReadiness(client, _config, args) {
-  const sourceDirectory = path61.resolve(args.sourceDirectory);
+  const sourceDirectory = path62.resolve(args.sourceDirectory);
   const manifest = await readManifest2(sourceDirectory) ?? createScaffoldManifest();
   const emailOptions = await resolveEmailOptionsForPublish(
     client,
@@ -19345,7 +19602,7 @@ async function checkPublishReadiness(client, _config, args) {
 
 // src/cli/check/handler.ts
 async function check(argv) {
-  const sourceDirectory = path62.resolve(process.cwd(), argv.dir);
+  const sourceDirectory = path63.resolve(process.cwd(), argv.dir);
   if (await isConfigV2(sourceDirectory)) {
     await checkV2(sourceDirectory, argv);
     return;
@@ -19409,7 +19666,7 @@ var check_default = {
 
 // src/cli/make-config/handler.ts
 init_invariant();
-import path64 from "node:path";
+import path65 from "node:path";
 import { stdin as input2 } from "node:process";
 
 // src/cli/make-config/interactive.ts
@@ -19419,7 +19676,7 @@ import { createInterface as createInterface3 } from "node:readline/promises";
 // src/cli/make-config/v2-edits.ts
 init_apitogo_config_core();
 import { access as access8, mkdir as mkdir15, readFile as readFile23, writeFile as writeFile18 } from "node:fs/promises";
-import path63 from "node:path";
+import path64 from "node:path";
 import { glob as glob8 } from "glob";
 init_invariant();
 var ConfigEditError = class extends ApitogoError {
@@ -19432,10 +19689,10 @@ var exists4 = (target) => access8(target).then(
   () => true,
   () => false
 );
-var toPosix2 = (value) => value.split(path63.sep).join("/");
-var relativeToConfig = (project, target) => toPosix2(path63.relative(project.resolved.configDir, target)) || ".";
+var toPosix2 = (value) => value.split(path64.sep).join("/");
+var relativeToConfig = (project, target) => toPosix2(path64.relative(project.resolved.configDir, target)) || ".";
 async function openConfigProject(dir) {
-  const configPath = path63.join(dir, APITOGO_CONFIG_FILENAME);
+  const configPath = path64.join(dir, APITOGO_CONFIG_FILENAME);
   if (!await exists4(configPath)) {
     throw new ConfigEditError(
       `There is no ${APITOGO_CONFIG_FILENAME} in ${dir}.`,
@@ -19500,7 +19757,7 @@ function setPortalName(project, name) {
 }
 async function addGatewaySpec(project, specPath) {
   const gateway = requireGateway(project);
-  const absolute = path63.resolve(project.dir, specPath);
+  const absolute = path64.resolve(project.dir, specPath);
   if (!await exists4(absolute)) {
     throw new ConfigEditError(`The OpenAPI file ${specPath} does not exist.`);
   }
@@ -19544,7 +19801,7 @@ function parseBackendInput(input5) {
 }
 async function setGatewayOrigin(project, backend) {
   const gateway = requireGateway(project);
-  const source = path63.resolve(project.dir, backend.source);
+  const source = path64.resolve(project.dir, backend.source);
   if (!await exists4(source)) {
     throw new ConfigEditError(
       `The API source folder ${backend.source} does not exist.`
@@ -19622,6 +19879,164 @@ export default function ${pageComponentName(slug)}() {
 }
 `;
 }
+var HEADER_PAGES_FOLDER = "header-pages";
+var RESERVED_HEADER_SLUGS = [
+  "index",
+  "api",
+  "pricing",
+  "account",
+  "login",
+  "signup"
+];
+function buildTsxHeaderPage(slug, title, file, content) {
+  const given = content?.trim() ? withoutLeadingH1(content) : "";
+  const text2 = given ? `{${JSON.stringify(given)}}` : "Coming soon.";
+  return `import { Callout, Heading, Typography } from "@lukoweb/apitogo/components";
+
+/** The page's label in the header's top menu (portal.header.links in ${APITOGO_CONFIG_FILENAME}). */
+export const title = ${JSON.stringify(title)};
+
+// This page is a React component: change it like any other one (add state, fetch data, use the portal's components).
+export default function ${pageComponentName(slug)}() {
+  return (
+    <section className="mx-auto max-w-screen-lg px-4 py-12 pt-(--padding-content-top)">
+      <Typography>
+        <Heading level={1}>{title}</Heading>
+        <p>${text2}</p>
+        {/* A note for you while you run the portal locally (\`apitogo run\`); the deployed portal does not show it. */}
+        {import.meta.env.DEV && (
+          <Callout type="info" title="Where this page lives">
+            Edit <code>${file}</code>. The header's top menu links to it; the docs sidebar does not.
+          </Callout>
+        )}
+      </Typography>
+    </section>
+  );
+}
+`;
+}
+var TSX_TITLE = /^export\s+const\s+title\s*(?::\s*string\s*)?=\s*.*$/m;
+async function writeHeaderPage(project, input5) {
+  const portalConfig = requirePortal(project);
+  const portal = project.resolved.portal;
+  if (!portal?.docs.enabled || portal.docs.provider !== "apitogo") {
+    throw new ConfigEditError(
+      "This portal does not host pages.",
+      'Header pages are served with the docs pages: they need portal.docs.provider "apitogo" and portal.docs.enabled not false.'
+    );
+  }
+  const slug = normalizeDocsSlug(input5.slug);
+  if (!slug) throw new ConfigEditError("The page path must not be empty.");
+  if (slug.includes("/")) {
+    throw new ConfigEditError(
+      `A header page has a plain name, not a path: "${input5.slug}".`,
+      "Pass one word, for example --page-slug partners (the page is then at /partners)."
+    );
+  }
+  if (RESERVED_HEADER_SLUGS.includes(slug)) {
+    throw new ConfigEditError(
+      `The portal uses /${slug} itself, so a header page cannot have it.`,
+      "Pick another name."
+    );
+  }
+  const relative = (file2) => toPosix2(path64.relative(project.dir, file2));
+  const docsBase = path64.join(portal.dir, "pages", slug);
+  for (const file2 of [`${docsBase}.md`, `${docsBase}.mdx`, `${docsBase}.tsx`]) {
+    if (await exists4(file2)) {
+      throw new ConfigEditError(
+        `The docs page ${relative(file2)} already has the address /${slug}.`,
+        "Pick another name for the header page."
+      );
+    }
+  }
+  const base = path64.join(portal.dir, HEADER_PAGES_FOLDER, slug);
+  const existing = (await Promise.all(
+    [`${base}.tsx`, `${base}.mdx`, `${base}.md`].map(
+      async (file2) => await exists4(file2) ? file2 : null
+    )
+  )).find((file2) => file2 !== null);
+  let file;
+  let title;
+  let action;
+  if (input5.update) {
+    if (!existing) {
+      throw new ConfigEditError(
+        `There is no header page at ${relative(`${base}.${input5.format ?? "tsx"}`)}.`,
+        "Leave out --page-update to add it."
+      );
+    }
+    const source = await readFile23(existing, "utf8");
+    const react2 = existing.endsWith(".tsx");
+    title = input5.title?.trim() || (react2 ? tsxPageLabel(source, existing) : titleOf(source)) || slug;
+    file = existing;
+    action = "updated";
+    if (react2) {
+      await writeFile18(
+        file,
+        input5.content !== void 0 ? buildTsxHeaderPage(slug, title, relative(file), input5.content) : TSX_TITLE.test(source) ? source.replace(
+          TSX_TITLE,
+          `export const title = ${JSON.stringify(title)};`
+        ) : source,
+        "utf8"
+      );
+    } else {
+      const body = input5.content ?? source.replace(/^---\r?\n[\s\S]*?\r?\n---\r?\n?/, "").trim();
+      await writeFile18(file, buildDocsPage(title, body), "utf8");
+    }
+  } else {
+    if (existing) {
+      throw new ConfigEditError(
+        `A header page already exists at ${relative(existing)}.`,
+        "Pass --page-update to change it."
+      );
+    }
+    const given = input5.title?.trim();
+    if (!given) {
+      throw new ConfigEditError("A new page needs a title (--page-title).");
+    }
+    title = given;
+    file = `${base}.${input5.format ?? "tsx"}`;
+    action = "added";
+    await mkdir15(path64.dirname(file), { recursive: true });
+    await writeFile18(
+      file,
+      file.endsWith(".tsx") ? buildTsxHeaderPage(slug, title, relative(file), input5.content) : buildDocsPage(
+        title,
+        input5.content?.trim() ? input5.content : `{/* Write this page in Markdown. It is linked from the header's top menu (portal.header.links in ${APITOGO_CONFIG_FILENAME}), not from the docs sidebar. */}
+
+Coming soon.`
+      ),
+      "utf8"
+    );
+  }
+  const page = relativeToConfig(project, file);
+  const target = path64.resolve(file);
+  const links = portalConfig.header?.links ?? [];
+  const known = links.some(
+    (link) => "page" in link && path64.resolve(project.resolved.configDir, link.page) === target
+  );
+  const nextLinks = known ? links.map(
+    (link) => "page" in link && path64.resolve(project.resolved.configDir, link.page) === target ? { label: title, page: link.page } : link
+  ) : [...links, { label: title, page }];
+  return {
+    project: withConfig(project, {
+      ...project.config,
+      portal: {
+        ...portalConfig,
+        header: { ...portalConfig.header, links: nextLinks }
+      }
+    }),
+    page: {
+      action,
+      slug,
+      route: `/${slug}`,
+      file: relative(file),
+      format: path64.extname(file).slice(1),
+      inPortal: true,
+      header: true
+    }
+  };
+}
 async function writeDocsPage(project, input5) {
   requirePortal(project);
   if (/^[A-Za-z]:[\\/]/.test(input5.slug.trim())) {
@@ -19645,13 +20060,13 @@ async function writeDocsPage(project, input5) {
       "For example --page-order 1 puts the page first in the sidebar."
     );
   }
-  const base = path63.join(portal.dir, "pages", ...slug.split("/"));
+  const base = path64.join(portal.dir, "pages", ...slug.split("/"));
   const existing = (await Promise.all(
     [`${base}.tsx`, `${base}.mdx`, `${base}.md`].map(
       async (file2) => await exists4(file2) ? file2 : null
     )
   )).find((file2) => file2 !== null);
-  const relative = (file2) => toPosix2(path63.relative(project.dir, file2));
+  const relative = (file2) => toPosix2(path64.relative(project.dir, file2));
   const write = (file2, title, order = input5.order) => writeFile18(
     file2,
     file2.endsWith(".tsx") ? buildTsxDocsPage(slug, title, relative(file2), input5.content, order) : buildDocsPage(title, input5.content, order),
@@ -19685,17 +20100,17 @@ async function writeDocsPage(project, input5) {
     }
     file = `${base}.${input5.format ?? "tsx"}`;
     action = "added";
-    await mkdir15(path63.dirname(file), { recursive: true });
+    await mkdir15(path64.dirname(file), { recursive: true });
     await write(file, title);
   }
-  const same = (match) => path63.resolve(match) === path63.resolve(file);
+  const same = (match) => path64.resolve(match) === path64.resolve(file);
   const inPortal = file.endsWith(".tsx") ? (await findTsxPages(portal.docs.content)).some((page) => same(page.file)) : (await glob8(portal.docs.content, { absolute: true })).some(same);
   return {
     action,
     slug,
     route: `/${slug}`,
     file: relative(file),
-    format: path63.extname(file).slice(1),
+    format: path64.extname(file).slice(1),
     inPortal
   };
 }
@@ -19774,7 +20189,7 @@ async function readPlanCatalog(project) {
 }
 var skuOf = (item) => isPlainObject3(item) && typeof item.sku === "string" ? item.sku.trim().toLowerCase() : void 0;
 async function writePlanCatalog(file, catalog, plans) {
-  await mkdir15(path63.dirname(file), { recursive: true });
+  await mkdir15(path64.dirname(file), { recursive: true });
   await writeFile18(
     file,
     `${JSON.stringify({ ...catalog, plans }, null, 2)}
@@ -19797,7 +20212,7 @@ async function upsertPlan(project, plan2) {
   return {
     action: index === -1 ? "added" : "updated",
     sku: plan2.sku,
-    file: toPosix2(path63.relative(project.dir, file)),
+    file: toPosix2(path64.relative(project.dir, file)),
     paid,
     needsBilling: paid && billing.provider !== "stripe"
   };
@@ -19887,12 +20302,12 @@ async function removePlan(project, rawSku) {
   if (next.length === catalog.plans.length) {
     const known = catalog.plans.map(skuOf).filter(Boolean).join(", ");
     throw new ConfigEditError(
-      `There is no plan "${sku}" in ${toPosix2(path63.relative(project.dir, file))}.`,
+      `There is no plan "${sku}" in ${toPosix2(path64.relative(project.dir, file))}.`,
       known ? `The plans are: ${known}.` : "The plans file has no plans."
     );
   }
   await writePlanCatalog(file, catalog, next);
-  return { sku, file: toPosix2(path63.relative(project.dir, file)) };
+  return { sku, file: toPosix2(path64.relative(project.dir, file)) };
 }
 
 // src/cli/make-config/wrap-up.ts
@@ -19915,6 +20330,12 @@ function printPageResult(page) {
   printSuccessToConsole(
     `Page ${page.action}: ${page.file} (route ${page.route})`
   );
+  if (page.header) {
+    printHintToConsole(
+      `The header's top menu links to it (portal.header.links); the docs sidebar does not. Edit the file to change the content. Run \`apitogo deploy --only portal\` to publish it.`
+    );
+    return;
+  }
   if (page.inPortal) {
     printHintToConsole(
       page.format === "tsx" ? "The page is a React component: edit it like any component. The sidebar is built from the pages folder, so the config does not change." : "The sidebar is built from the pages folder, so the config does not change. Edit the file to change the content."
@@ -20173,7 +20594,7 @@ async function applyConfigFlags(project, argv, changes) {
   return { project: next, openApi };
 }
 async function makeConfig(argv) {
-  const dir = path64.resolve(process.cwd(), argv.dir);
+  const dir = path65.resolve(process.cwd(), argv.dir);
   const interactive = shouldRunInteractive(argv);
   const json = argv.json === true;
   const changes = [];
@@ -20216,7 +20637,32 @@ async function makeConfig(argv) {
       const applied = await applyConfigFlags(project, argv, changes);
       project = applied.project;
       openApi = applied.openApi;
-      if (argv.pageSlug !== void 0) {
+      if (argv.pageHeader === true && argv.pageSlug === void 0) {
+        throw new ApitogoError("--page-header needs --page-slug.", {
+          developerHint: "Name the page, for example --page-slug partners --page-title Partners --page-header."
+        });
+      }
+      if (argv.pageSlug !== void 0 && argv.pageHeader === true) {
+        if (argv.pageOrder !== void 0) {
+          throw new ApitogoError(
+            "--page-order sets a place in the docs sidebar, which a header page is not in.",
+            {
+              developerHint: "Header links show in the order of portal.header.links in apitogo.config.json."
+            }
+          );
+        }
+        const written = await writeHeaderPage(project, {
+          slug: argv.pageSlug,
+          title: argv.pageTitle,
+          content: argv.pageContent,
+          update: argv.pageUpdate === true,
+          format: argv.pageFormat
+        });
+        project = written.project;
+        await saveConfigProject(project);
+        page = written.page;
+        changes.push(page.action === "added" ? "page_add" : "page_update");
+      } else if (argv.pageSlug !== void 0) {
         page = await writeDocsPage(project, {
           slug: argv.pageSlug,
           title: argv.pageTitle,
@@ -20365,6 +20811,10 @@ function addConfigOptions(yargs2) {
     type: "boolean",
     default: false,
     describe: "Update an existing page instead of adding one"
+  }).option("page-header", {
+    type: "boolean",
+    default: false,
+    describe: "Make --page-slug a page of its own, linked from the header's top menu instead of the docs sidebar (<portal>/header-pages/<slug>.tsx; --page-format mdx for Markdown)"
   }).option("plan-sku", {
     type: "string",
     describe: "Add or change the plan with this SKU in the plans file; the --plan-* options set its fields"
@@ -20402,7 +20852,10 @@ function addConfigOptions(yargs2) {
   ).example(
     "$0 config --plan-sku enterprise --plan-price custom",
     "A contact-us plan"
-  ).example("$0 config --remove-plan enterprise", "Take a plan out").option("plan", {
+  ).example("$0 config --remove-plan enterprise", "Take a plan out").example(
+    "$0 config --page-slug partners --page-title Partners --page-header",
+    "A page at /partners, linked from the header's top menu"
+  ).option("plan", {
     type: "string",
     describe: "JSON plan added to the plans file (plans.file, default apitogo/plans.json), or replacing the one with the same sku"
   }).option("patch", {
@@ -20424,27 +20877,27 @@ var config_default = {
 init_apitogo_config_core();
 import { execFile } from "node:child_process";
 import { readFile as readFile24 } from "node:fs/promises";
-import path66 from "node:path";
+import path67 from "node:path";
 import { promisify } from "node:util";
 
 // src/cli/create/dry-run.ts
 import { mkdir as mkdir16, mkdtemp, readdir as readdir4, rm as rm9 } from "node:fs/promises";
 import { tmpdir } from "node:os";
-import path65 from "node:path";
+import path66 from "node:path";
 async function listFiles(root, dir = root) {
   const entries = await readdir4(dir, { withFileTypes: true });
   const nested = await Promise.all(
     entries.map(async (entry) => {
-      const full = path65.join(dir, entry.name);
+      const full = path66.join(dir, entry.name);
       if (entry.isDirectory()) return listFiles(root, full);
-      return [path65.relative(root, full).split(path65.sep).join("/")];
+      return [path66.relative(root, full).split(path66.sep).join("/")];
     })
   );
   return nested.flat();
 }
 async function previewCreate(input5) {
-  const scratch = await mkdtemp(path65.join(tmpdir(), "apitogo-create-"));
-  const dir = path65.join(scratch, "project");
+  const scratch = await mkdtemp(path66.join(tmpdir(), "apitogo-create-"));
+  const dir = path66.join(scratch, "project");
   try {
     await mkdir16(dir);
     await applyInitPlan(await planInit({ dir, name: input5.name }));
@@ -20477,9 +20930,9 @@ async function previewCreate(input5) {
 var execFileAsync = promisify(execFile);
 function nextStepHint(dir) {
   const linked = loadConfigV2(dir).resolved.project.id;
-  const cd = path66.resolve(dir) === path66.resolve(process.cwd());
+  const cd = path67.resolve(dir) === path67.resolve(process.cwd());
   const steps = linked ? "apitogo deploy" : "apitogo project create, then apitogo deploy";
-  return cd ? `Next: ${steps}` : `Next: cd ${JSON.stringify(path66.relative(process.cwd(), dir))}, then ${steps}`;
+  return cd ? `Next: ${steps}` : `Next: cd ${JSON.stringify(path67.relative(process.cwd(), dir))}, then ${steps}`;
 }
 function projectFolderName(name) {
   return name.trim().replace(/[<>:"/\\|?*\s]+/g, "-").replace(/^[-.]+|[-.]+$/g, "") || "apitogo-project";
@@ -20505,13 +20958,13 @@ async function gitHasUncommittedChanges(dir) {
 async function defaultName(dir) {
   try {
     const parsed = JSON.parse(
-      await readFile24(path66.join(dir, "package.json"), "utf8")
+      await readFile24(path67.join(dir, "package.json"), "utf8")
     );
     if (typeof parsed.name === "string" && parsed.name.trim())
       return parsed.name.replace(/^@[^/]+\//, "");
   } catch {
   }
-  return path66.basename(dir);
+  return path67.basename(dir);
 }
 function parseServicesFlag(value) {
   const names = (value ?? "").split(",").map((name) => name.trim()).filter(Boolean);
@@ -20537,7 +20990,7 @@ async function createProject(argv, deps = {}) {
     if (!json) printDiagnosticsToConsole(line2);
   };
   try {
-    const base = path66.resolve(process.cwd(), argv.dir ?? ".");
+    const base = path67.resolve(process.cwd(), argv.dir ?? ".");
     let dir = base;
     let requested = parseServicesFlag(argv.services);
     let template = argv.template;
@@ -20560,8 +21013,8 @@ async function createProject(argv, deps = {}) {
         default: await defaultName(base)
       }) : await defaultName(base));
       const folder = projectFolderName(name);
-      if (argv.dir === void 0 && folder !== path66.basename(base))
-        dir = path66.join(base, folder);
+      if (argv.dir === void 0 && folder !== path67.basename(base))
+        dir = path67.join(base, folder);
     }
     if (await (deps.hasUncommittedChanges ?? gitHasUncommittedChanges)(dir))
       say(
@@ -20574,7 +21027,7 @@ async function createProject(argv, deps = {}) {
       if (argv.dryRun) {
         const services = requested.length > 0 ? requested : templateServices ? STARTER_SERVICES : [];
         const preview2 = services.length > 0 ? await previewCreate({ name, template, services }) : void 0;
-        const folder = path66.relative(process.cwd(), dir) || ".";
+        const folder = path67.relative(process.cwd(), dir) || ".";
         if (json)
           console.log(
             JSON.stringify({
@@ -20607,7 +21060,7 @@ async function createProject(argv, deps = {}) {
       }
       await applyInitPlan(plan2);
       say(
-        dir === base ? `Created ${APITOGO_CONFIG_FILENAME}.` : `Created ${path66.relative(base, dir)}${path66.sep}${APITOGO_CONFIG_FILENAME}.`
+        dir === base ? `Created ${APITOGO_CONFIG_FILENAME}.` : `Created ${path67.relative(base, dir)}${path67.sep}${APITOGO_CONFIG_FILENAME}.`
       );
     } else {
       say(`${APITOGO_CONFIG_FILENAME} exists: continuing from it.`);
@@ -20749,10 +21202,10 @@ var create_default = {
 };
 
 // src/cli/cmds/deploy.ts
-import path85 from "node:path";
+import path86 from "node:path";
 
 // src/cli/apply/handler.ts
-import path78 from "node:path";
+import path79 from "node:path";
 
 // src/cli/platform/helpers/gateway-plan-validation.ts
 init_gateway_limits();
@@ -20971,11 +21424,11 @@ init_gateway_limits();
 // src/cli/platform/helpers/deploy-artifact-hash.ts
 import { createHash as createHash3 } from "node:crypto";
 import { createReadStream, promises as fs6 } from "node:fs";
-import path68 from "node:path";
+import path69 from "node:path";
 
 // src/cli/platform/helpers/package-files.ts
 import { promises as fs5 } from "node:fs";
-import path67 from "node:path";
+import path68 from "node:path";
 import ignore from "ignore";
 var DEFAULT_EXCLUDES = /* @__PURE__ */ new Set([
   "node_modules",
@@ -20989,7 +21442,7 @@ async function loadGitignore(rootDir, extraExcludes = []) {
   const ig = ignore();
   ig.add(["node_modules/", ".git/", "dist/", "bin/", "obj/"]);
   if (extraExcludes.length > 0) ig.add([...extraExcludes]);
-  const gitignorePath = path67.join(rootDir, ".gitignore");
+  const gitignorePath = path68.join(rootDir, ".gitignore");
   try {
     const content = await fs5.readFile(gitignorePath, "utf8");
     ig.add(content);
@@ -20998,11 +21451,11 @@ async function loadGitignore(rootDir, extraExcludes = []) {
   return ig;
 }
 async function collectFiles(rootDir, relativeDir, ig, files) {
-  const absDir = path67.join(rootDir, relativeDir);
+  const absDir = path68.join(rootDir, relativeDir);
   const entries = await fs5.readdir(absDir, { withFileTypes: true });
   for (const entry of entries) {
-    const rel2 = relativeDir ? path67.join(relativeDir, entry.name) : entry.name;
-    const relPosix = rel2.split(path67.sep).join("/");
+    const rel2 = relativeDir ? path68.join(relativeDir, entry.name) : entry.name;
+    const relPosix = rel2.split(path68.sep).join("/");
     if (DEFAULT_EXCLUDES.has(entry.name) && !relativeDir) {
       continue;
     }
@@ -21017,7 +21470,7 @@ async function collectFiles(rootDir, relativeDir, ig, files) {
   }
 }
 async function collectPackageableFiles(sourceDirectory, extraExcludes = []) {
-  const resolved = path67.resolve(sourceDirectory);
+  const resolved = path68.resolve(sourceDirectory);
   const stat7 = await fs5.stat(resolved).catch(() => null);
   if (!stat7?.isDirectory()) {
     throw new Error(`sourceDirectory is not a directory: ${resolved}`);
@@ -21043,7 +21496,7 @@ async function sha256File(filePath) {
   return hash2.digest("hex");
 }
 async function hashDirectoryContents(rootDirectory, extraExcludes = []) {
-  const resolved = path68.resolve(rootDirectory);
+  const resolved = path69.resolve(rootDirectory);
   const files = (await collectPackageableFiles(resolved, extraExcludes)).sort(
     (a, b) => a.localeCompare(b)
   );
@@ -21051,13 +21504,13 @@ async function hashDirectoryContents(rootDirectory, extraExcludes = []) {
   for (const rel2 of files) {
     hash2.update(rel2);
     hash2.update("\0");
-    hash2.update(await fs6.readFile(path68.join(resolved, rel2)));
+    hash2.update(await fs6.readFile(path69.join(resolved, rel2)));
     hash2.update("\0");
   }
   return hash2.digest("hex");
 }
 async function hashDevPortalSiteSources(siteDirectory, options) {
-  const resolved = path68.resolve(siteDirectory);
+  const resolved = path69.resolve(siteDirectory);
   const hash2 = createHash3("sha256");
   const candidates = [
     "apitogo.config.json",
@@ -21067,7 +21520,7 @@ async function hashDevPortalSiteSources(siteDirectory, options) {
     "zudoku.config.tsx"
   ];
   for (const name of candidates) {
-    const full = path68.join(resolved, name);
+    const full = path69.join(resolved, name);
     try {
       hash2.update(name);
       hash2.update("\0");
@@ -21077,7 +21530,7 @@ async function hashDevPortalSiteSources(siteDirectory, options) {
     }
   }
   for (const dir of ["pages", "landing", "src"]) {
-    const full = path68.join(resolved, dir);
+    const full = path69.join(resolved, dir);
     try {
       const st = await fs6.stat(full);
       if (!st.isDirectory()) continue;
@@ -21306,8 +21759,8 @@ function normalizeActionKey(actionKey2) {
   const trimmed = actionKey2.trim();
   if (trimmed.includes(":")) {
     const [method2, ...pathParts] = trimmed.split(":");
-    const path100 = pathParts.join(":").trim();
-    return `${method2?.toLowerCase()}:${path100.startsWith("/") ? path100 : `/${path100}`}`;
+    const path101 = pathParts.join(":").trim();
+    return `${method2?.toLowerCase()}:${path101.startsWith("/") ? path101 : `/${path101}`}`;
   }
   const spaceIndex = trimmed.indexOf(" ");
   if (spaceIndex <= 0) {
@@ -21316,8 +21769,8 @@ function normalizeActionKey(actionKey2) {
     );
   }
   const method = trimmed.slice(0, spaceIndex).trim().toLowerCase();
-  const path99 = trimmed.slice(spaceIndex + 1).trim();
-  return `${method}:${path99.startsWith("/") ? path99 : `/${path99}`}`;
+  const path100 = trimmed.slice(spaceIndex + 1).trim();
+  return `${method}:${path100.startsWith("/") ? path100 : `/${path100}`}`;
 }
 async function applyGatewayPublicRoutes(client, projectId, routes, options) {
   const applied = [];
@@ -21796,7 +22249,7 @@ async function upsertGatewayPlansFromManifest(client, config2, projectId, plans,
 
 // src/cli/platform/helpers/openapi-gateway-servers.ts
 import { mkdir as mkdir17, readFile as readFile25, writeFile as writeFile19 } from "node:fs/promises";
-import path69 from "node:path";
+import path70 from "node:path";
 import YAML2 from "yaml";
 var GATEWAY_URL_ENV_KEY = "APITOGO_GATEWAY_URL";
 var PUBLISH_OPENAPI_RELATIVE = ".apitogo/openapi-publish.json";
@@ -21828,7 +22281,7 @@ async function resolveProjectGatewayUrl(client, projectId) {
 }
 async function readOpenApiDocument(filePath) {
   const content = await readFile25(filePath, "utf8");
-  const ext = path69.extname(filePath).toLowerCase();
+  const ext = path70.extname(filePath).toLowerCase();
   const parsed = ext === ".json" ? JSON.parse(content) : YAML2.parse(content);
   if (!parsed || typeof parsed !== "object" || Array.isArray(parsed)) {
     throw new Error(`OpenAPI document must be an object: ${filePath}`);
@@ -21836,13 +22289,13 @@ async function readOpenApiDocument(filePath) {
   return parsed;
 }
 async function materializePublishOpenApiWithGateway(siteDirectory, sourceOpenApiPath, gatewayUrl) {
-  const site = path69.resolve(siteDirectory);
-  const source = path69.resolve(sourceOpenApiPath);
+  const site = path70.resolve(siteDirectory);
+  const source = path70.resolve(sourceOpenApiPath);
   const relativeInput = PUBLISH_OPENAPI_RELATIVE;
-  const outputPath = path69.join(site, ...relativeInput.split("/"));
+  const outputPath = path70.join(site, ...relativeInput.split("/"));
   const doc = await readOpenApiDocument(source);
   const rewritten = withGatewayServers(doc, gatewayUrl);
-  await mkdir17(path69.dirname(outputPath), { recursive: true });
+  await mkdir17(path70.dirname(outputPath), { recursive: true });
   await writeFile19(
     outputPath,
     `${JSON.stringify(rewritten, null, 2)}
@@ -21852,8 +22305,8 @@ async function materializePublishOpenApiWithGateway(siteDirectory, sourceOpenApi
   return { outputPath, relativeInput };
 }
 async function pointSiteApisAtPublishOpenApi(siteDirectory, relativeInput) {
-  const configPath = path69.join(
-    path69.resolve(siteDirectory),
+  const configPath = path70.join(
+    path70.resolve(siteDirectory),
     APITOGO_CONFIG_FILENAME2
   );
   const raw = await readFile25(configPath, "utf8");
@@ -21895,7 +22348,7 @@ async function pointSiteApisAtPublishOpenApi(siteDirectory, relativeInput) {
   };
 }
 async function prepareOpenApiServersForGatewayBuild(options) {
-  const siteDirectory = path69.resolve(options.siteDirectory);
+  const siteDirectory = path70.resolve(options.siteDirectory);
   let openApiPath = resolveBackendOpenApiPath(
     options.manifest?.backend?.openApiPath,
     {
@@ -21909,7 +22362,7 @@ async function prepareOpenApiServersForGatewayBuild(options) {
   if (!openApiPath) {
     try {
       const raw = await readFile25(
-        path69.join(siteDirectory, APITOGO_CONFIG_FILENAME2),
+        path70.join(siteDirectory, APITOGO_CONFIG_FILENAME2),
         "utf8"
       );
       const config2 = JSON.parse(raw);
@@ -21938,8 +22391,8 @@ function normalizeActionKeyFormat(actionKey2) {
   const trimmed = actionKey2.trim();
   if (trimmed.includes(":")) {
     const [method2, ...pathParts] = trimmed.split(":");
-    const path100 = pathParts.join(":").trim();
-    return `${method2.toLowerCase()}:${path100.startsWith("/") ? path100 : `/${path100}`}`;
+    const path101 = pathParts.join(":").trim();
+    return `${method2.toLowerCase()}:${path101.startsWith("/") ? path101 : `/${path101}`}`;
   }
   const spaceIndex = trimmed.indexOf(" ");
   if (spaceIndex <= 0) {
@@ -21948,8 +22401,8 @@ function normalizeActionKeyFormat(actionKey2) {
     );
   }
   const method = trimmed.slice(0, spaceIndex).trim().toLowerCase();
-  const path99 = trimmed.slice(spaceIndex + 1).trim();
-  return `${method}:${path99.startsWith("/") ? path99 : `/${path99}`}`;
+  const path100 = trimmed.slice(spaceIndex + 1).trim();
+  return `${method}:${path100.startsWith("/") ? path100 : `/${path100}`}`;
 }
 function normalizePublicRoute(route) {
   const trimmed = route.trim();
@@ -21983,10 +22436,10 @@ function collectManifestPublicActionKeys(gateway) {
 
 // src/cli/platform/helpers/publish-ledger.ts
 import { mkdir as mkdir18, readFile as readFile26, writeFile as writeFile20 } from "node:fs/promises";
-import path70 from "node:path";
+import path71 from "node:path";
 var PUBLISH_LEDGER_RELATIVE_PATH = ".apitogo/publish-state.json";
 function publishLedgerPath(siteDirectory) {
-  return path70.join(path70.resolve(siteDirectory), PUBLISH_LEDGER_RELATIVE_PATH);
+  return path71.join(path71.resolve(siteDirectory), PUBLISH_LEDGER_RELATIVE_PATH);
 }
 async function readPublishLedger(siteDirectory) {
   const filePath = publishLedgerPath(siteDirectory);
@@ -22003,7 +22456,7 @@ async function readPublishLedger(siteDirectory) {
 }
 async function writePublishLedger(siteDirectory, ledger) {
   const filePath = publishLedgerPath(siteDirectory);
-  await mkdir18(path70.dirname(filePath), { recursive: true });
+  await mkdir18(path71.dirname(filePath), { recursive: true });
   const next = {
     ...ledger,
     version: 1,
@@ -22524,7 +22977,7 @@ async function createProjectWithWarmPoolRetry(client, body, options) {
 // src/cli/platform/helpers/backend-packaging.ts
 import { mkdtemp as mkdtemp2, readdir as readdir5, rm as rm10 } from "node:fs/promises";
 import { tmpdir as tmpdir2 } from "node:os";
-import path71 from "node:path";
+import path72 from "node:path";
 async function directoryHasRuntimeConfig(dir) {
   if (!await pathExists(dir)) {
     return false;
@@ -22566,20 +23019,20 @@ function runDotnetPublish(projectDir, outputDir) {
 async function findCsproj(projectDir) {
   const entries = await readdir5(projectDir);
   const csproj = entries.find((name) => name.endsWith(".csproj"));
-  return csproj ? path71.join(projectDir, csproj) : null;
+  return csproj ? path72.join(projectDir, csproj) : null;
 }
 async function prepareBackendPackagingDirectory(args) {
-  const sourceDirectory = path71.resolve(args.sourceDirectory);
+  const sourceDirectory = path72.resolve(args.sourceDirectory);
   if (args.publishDirectory?.trim()) {
     return {
-      directory: path71.resolve(args.publishDirectory),
+      directory: path72.resolve(args.publishDirectory),
       packagingMode: "published"
     };
   }
   if (await directoryHasRuntimeConfig(sourceDirectory)) {
     return { directory: sourceDirectory, packagingMode: "published" };
   }
-  const publishSubdir = path71.join(sourceDirectory, "publish");
+  const publishSubdir = path72.join(sourceDirectory, "publish");
   if (await directoryHasRuntimeConfig(publishSubdir)) {
     return { directory: publishSubdir, packagingMode: "published" };
   }
@@ -22591,9 +23044,9 @@ async function prepareBackendPackagingDirectory(args) {
     return { directory: sourceDirectory, packagingMode: "source" };
   }
   const tempRoot = await mkdtemp2(
-    path71.join(tmpdir2(), "apitogo-dotnet-publish-")
+    path72.join(tmpdir2(), "apitogo-dotnet-publish-")
   );
-  const outputDir = path71.join(tempRoot, "publish");
+  const outputDir = path72.join(tempRoot, "publish");
   const result = await runDotnetPublish(sourceDirectory, outputDir);
   if (result.exitCode !== 0) {
     await rm10(tempRoot, { recursive: true, force: true });
@@ -22638,13 +23091,13 @@ function formatJobStatusResponse(options) {
 
 // src/cli/platform/helpers/openapi.ts
 import { promises as fs7 } from "node:fs";
-import path72 from "node:path";
+import path73 from "node:path";
 import SwaggerParser from "@apidevtools/swagger-parser";
 import YAML3 from "yaml";
 async function validateOpenApiFile(filePath) {
-  const resolved = path72.resolve(filePath);
+  const resolved = path73.resolve(filePath);
   const content = await fs7.readFile(resolved, "utf8");
-  const ext = path72.extname(resolved).toLowerCase();
+  const ext = path73.extname(resolved).toLowerCase();
   let parsed;
   try {
     parsed = ext === ".json" ? JSON.parse(content) : YAML3.parse(content);
@@ -22688,12 +23141,12 @@ async function validateOpenApiFile(filePath) {
 // src/cli/platform/helpers/zip.ts
 import { createReadStream as createReadStream2, createWriteStream as createWriteStream2, promises as fs8 } from "node:fs";
 import { tmpdir as tmpdir3 } from "node:os";
-import path73 from "node:path";
+import path74 from "node:path";
 import { ZipArchive } from "archiver";
 async function packageBackendDirectory(sourceDirectory, extraExcludes = []) {
-  const resolved = path73.resolve(sourceDirectory);
+  const resolved = path74.resolve(sourceDirectory);
   const files = await collectPackageableFiles(resolved, extraExcludes);
-  const zipPath = path73.join(
+  const zipPath = path74.join(
     tmpdir3(),
     `apitogo-backend-${Date.now()}-${Math.random().toString(36).slice(2)}.zip`
   );
@@ -22705,8 +23158,8 @@ async function packageBackendDirectory(sourceDirectory, extraExcludes = []) {
     output4.on("error", reject);
     archive.pipe(output4);
     for (const rel2 of files) {
-      archive.append(createReadStream2(path73.join(resolved, rel2)), {
-        name: rel2.split(path73.sep).join("/")
+      archive.append(createReadStream2(path74.join(resolved, rel2)), {
+        name: rel2.split(path74.sep).join("/")
       });
     }
     void archive.finalize();
@@ -24276,11 +24729,11 @@ async function resolveProjectIdForPublish(client, config2, args, wait, progress,
 }
 
 // src/cli/platform/tools/dev-portal-site-build.ts
-import path77 from "node:path";
+import path78 from "node:path";
 
 // src/cli/platform/helpers/dev-portal-site-api-url.ts
 import { readdir as readdir6, readFile as readFile27, writeFile as writeFile21 } from "node:fs/promises";
-import path74 from "node:path";
+import path75 from "node:path";
 var SITE_API_BASE_URL_ENV_KEY = "VITE_APITOGO_AUTHENTICATION_API_BASE_URL";
 var PLACEHOLDER_HOST_MARKERS = [
   "dp-example.azurecontainerapps.io",
@@ -24301,10 +24754,10 @@ function isPlaceholderDevPortalApiUrl(apiBaseUrl) {
   return PLACEHOLDER_HOST_MARKERS.some((marker) => normalized.includes(marker));
 }
 async function readSiteApiBaseUrl(sourceDirectory) {
-  const resolved = path74.resolve(sourceDirectory);
+  const resolved = path75.resolve(sourceDirectory);
   for (const envFile of [".env", ".env.production"]) {
     try {
-      const content = await readFile27(path74.join(resolved, envFile), "utf8");
+      const content = await readFile27(path75.join(resolved, envFile), "utf8");
       const lines = [...content.matchAll(ENV_LINE_GLOBAL_RE)];
       if (lines.length === 0) {
         continue;
@@ -24329,11 +24782,11 @@ async function readSiteApiBaseUrl(sourceDirectory) {
   return null;
 }
 async function patchSiteApiBaseUrl(sourceDirectory, apiBaseUrl) {
-  const resolved = path74.resolve(sourceDirectory);
+  const resolved = path75.resolve(sourceDirectory);
   const line2 = `${SITE_API_BASE_URL_ENV_KEY}=${apiBaseUrl}`;
   let patchedExisting = false;
   for (const envFile of [".env.production", ".env"]) {
-    const envPath = path74.join(resolved, envFile);
+    const envPath = path75.join(resolved, envFile);
     try {
       const content = await readFile27(envPath, "utf8");
       const withoutAssignments = content.replace(ENV_LINE_GLOBAL_RE, "").replace(/\n{3,}/g, "\n\n").trimEnd();
@@ -24347,7 +24800,7 @@ ${line2}
     }
   }
   if (!patchedExisting) {
-    await writeFile21(path74.join(resolved, ".env"), `${line2}
+    await writeFile21(path75.join(resolved, ".env"), `${line2}
 `);
   }
 }
@@ -24355,7 +24808,7 @@ function tryProjectId(explicit, manifestProjectId, config2) {
   return explicit?.trim() || manifestProjectId?.trim() || config2.defaultProjectId?.trim() || void 0;
 }
 async function ensureLiveSiteApiBaseUrlForBuild(_client, config2, args, resolveFromProject) {
-  const sourceDirectory = path74.resolve(args.sourceDirectory);
+  const sourceDirectory = path75.resolve(args.sourceDirectory);
   const explicit = args.apiBaseUrl?.trim();
   if (explicit && !isPlaceholderDevPortalApiUrl(explicit)) {
     await patchSiteApiBaseUrl(sourceDirectory, explicit);
@@ -24391,7 +24844,7 @@ async function* walkFiles(root) {
     return;
   }
   for (const entry of entries) {
-    const full = path74.join(root, entry.name);
+    const full = path75.join(root, entry.name);
     if (entry.isDirectory()) {
       if (entry.name === "node_modules" || entry.name === ".git") {
         continue;
@@ -24403,8 +24856,8 @@ async function* walkFiles(root) {
   }
 }
 async function assertDeployableDistHasLiveApiBaseUrl(distDirectory, expectedApiBaseUrl) {
-  const dist = path74.resolve(distDirectory);
-  const siteRoot = path74.dirname(dist);
+  const dist = path75.resolve(distDirectory);
+  const siteRoot = path75.dirname(dist);
   const fromEnv = expectedApiBaseUrl?.trim() || await readSiteApiBaseUrl(siteRoot) || await readSiteApiBaseUrl(dist);
   if (!fromEnv || isPlaceholderDevPortalApiUrl(fromEnv)) {
     throw new Error(
@@ -24440,7 +24893,7 @@ async function assertDeployableDistHasLiveApiBaseUrl(distDirectory, expectedApiB
 
 // src/cli/platform/tools/dev-portal.ts
 import { promises as fs10 } from "node:fs";
-import path76 from "node:path";
+import path77 from "node:path";
 
 // src/cli/platform/helpers/dev-portal-backend-job.ts
 var DEV_PORTAL_BACKEND_UPDATE_RESOURCE_TYPE = "DevPortalBackendUpdate";
@@ -24550,7 +25003,7 @@ async function snapshotBackendUpdateJobIds(client, projectId) {
 // src/cli/platform/helpers/tarball.ts
 import { createReadStream as createReadStream3, createWriteStream as createWriteStream3, promises as fs9 } from "node:fs";
 import { tmpdir as tmpdir4 } from "node:os";
-import path75 from "node:path";
+import path76 from "node:path";
 import { TarArchive } from "archiver";
 var DEV_PORTAL_DEPLOY_ARCHIVE_ROOT = "dist";
 function normalizeArchiveRoot(archiveRoot) {
@@ -24561,10 +25014,10 @@ function normalizeArchiveRoot(archiveRoot) {
   return `${trimmed}/`;
 }
 async function packageDirectoryAsTarGz(sourceDirectory, options) {
-  const resolved = path75.resolve(sourceDirectory);
+  const resolved = path76.resolve(sourceDirectory);
   const files = await collectPackageableFiles(resolved);
   const entryPrefix = options?.archiveRoot ? normalizeArchiveRoot(options.archiveRoot) : "";
-  const archivePath = path75.join(
+  const archivePath = path76.join(
     tmpdir4(),
     `apitogo-docs-${Date.now()}-${Math.random().toString(36).slice(2)}.tgz`
   );
@@ -24576,8 +25029,8 @@ async function packageDirectoryAsTarGz(sourceDirectory, options) {
     output4.on("error", reject);
     archive.pipe(output4);
     for (const rel2 of files) {
-      const entryName = entryPrefix + rel2.split(path75.sep).join("/");
-      archive.append(createReadStream3(path75.join(resolved, rel2)), {
+      const entryName = entryPrefix + rel2.split(path76.sep).join("/");
+      archive.append(createReadStream3(path76.join(resolved, rel2)), {
         name: entryName
       });
     }
@@ -24819,7 +25272,7 @@ function validateDeployArchiveInput(args) {
 async function resolveDevPortalArchive(args) {
   validateDeployArchiveInput(args);
   if (args.archivePath?.trim()) {
-    const archivePath = path76.resolve(args.archivePath.trim());
+    const archivePath = path77.resolve(args.archivePath.trim());
     const stat7 = await fs10.stat(archivePath).catch(() => null);
     if (!stat7?.isFile()) {
       throw new Error(`archivePath is not a file: ${archivePath}`);
@@ -24884,7 +25337,7 @@ async function handleDeployDevPortal(client, config2, args, progress) {
 // src/cli/platform/tools/dev-portal-site-build.ts
 async function handleBuildDevPortalSite(client, config2, args, progress) {
   const buildProgress = progress?.child("Build dev portal site");
-  const sourceDirectory = path77.resolve(args.sourceDirectory);
+  const sourceDirectory = path78.resolve(args.sourceDirectory);
   await buildProgress?.onStep("Ensuring live portal API URL");
   const apiBaseUrl = await ensureLiveSiteApiBaseUrlForBuild(
     client,
@@ -26390,7 +26843,7 @@ function resultLooksFailed(payload) {
   return parsed.status === "failed" || parsed.status === "blocked";
 }
 async function apply(argv) {
-  const sourceDirectory = path78.resolve(process.cwd(), argv.dir);
+  const sourceDirectory = path79.resolve(process.cwd(), argv.dir);
   let config2;
   try {
     config2 = loadConfig();
@@ -26460,7 +26913,7 @@ async function apply(argv) {
   if (canPromptInteractively && parsed?.status === "blocked" && parsed.reason === "project_not_found") {
     const resolution = await resolveProjectNotFoundInteractively(
       parsed,
-      path78.basename(sourceDirectory)
+      path79.basename(sourceDirectory)
     );
     if (resolution) {
       effectiveProjectId = void 0;
@@ -26480,7 +26933,7 @@ async function apply(argv) {
   while (canPromptInteractively && parsed?.status === "blocked" && parsed.reason === "project_name_exists") {
     const resolution = await resolveProjectNameExistsInteractively(
       parsed,
-      effectiveProjectName ?? path78.basename(sourceDirectory)
+      effectiveProjectName ?? path79.basename(sourceDirectory)
     );
     if (!resolution) {
       break;
@@ -26551,11 +27004,11 @@ async function apply(argv) {
 }
 
 // src/cli/deploy/command.ts
-import path84 from "node:path";
+import path85 from "node:path";
 init_invariant();
 
 // src/cli/project/create-handler.ts
-import path79 from "node:path";
+import path80 from "node:path";
 import open2 from "open";
 init_invariant();
 
@@ -26589,11 +27042,22 @@ function assertConfigChecksOut(output4) {
     ].join("\n")
   );
 }
-var hostsAnything = (config2) => config2.portal && config2.portal.enabled !== false || config2.gateway && config2.gateway.enabled !== false;
+var gatewayOn = (config2) => config2.gateway !== void 0 && config2.gateway.enabled !== false;
+var hostsAnything = (config2) => config2.portal && config2.portal.enabled !== false || gatewayOn(config2);
 async function createProjectV2(options, deps) {
   const { config: config2, resolved } = loadConfigV2(options.dir);
   const linkedProjectId = resolved.project.id;
-  const modules = modulesForConfig(config2);
+  const externalDocsOnly = portalOnlyLinksExternalDocs(resolved);
+  const modules = modulesForConfig(config2).filter(
+    (module) => module !== "dev-portal" || !externalDocsOnly
+  );
+  if (externalDocsOnly && !gatewayOn(config2)) {
+    throw new ProjectCreateError(
+      "NOTHING_TO_HOST",
+      "No enabled service needs a project: the docs are on an external site and nothing feeds the portal console.",
+      "Enable identity or plans for a console next to your docs (`apitogo add identity`), or a gateway (`apitogo add gateway`)."
+    );
+  }
   if (!hostsAnything(config2)) {
     throw new ProjectCreateError(
       "NOTHING_TO_HOST",
@@ -26869,7 +27333,7 @@ async function createLinkedProject(argv, dir, options = {}) {
   }
 }
 async function createProject2(argv) {
-  const dir = path79.resolve(process.cwd(), argv.dir ?? ".");
+  const dir = path80.resolve(process.cwd(), argv.dir ?? ".");
   if (await isConfigV2(dir)) {
     await createLinkedProject(argv, dir);
     return;
@@ -26929,7 +27393,7 @@ async function createProject2(argv) {
 }
 
 // src/cli/secrets/handler.ts
-import path80 from "node:path";
+import path81 from "node:path";
 init_invariant();
 
 // src/cli/secrets/input.ts
@@ -26994,7 +27458,7 @@ var SecretsError = class extends ApitogoError {
 async function resolveProjectId2(argv, deps) {
   const explicit = argv.projectId?.trim();
   if (explicit) return explicit;
-  const dir = path80.resolve(process.cwd(), argv.dir ?? ".");
+  const dir = path81.resolve(process.cwd(), argv.dir ?? ".");
   if (await isConfigV2(dir)) {
     const id = loadConfigV2(dir).resolved.project.id;
     if (id) return id;
@@ -27079,7 +27543,7 @@ var KNOWN_SECRET_PLACES = {
 async function wireKnownSecret(argv, name) {
   const place = KNOWN_SECRET_PLACES[name.toUpperCase()];
   if (!place) return void 0;
-  const dir = path80.resolve(process.cwd(), argv.dir ?? ".");
+  const dir = path81.resolve(process.cwd(), argv.dir ?? ".");
   if (!await isConfigV2(dir)) return void 0;
   const project = await openConfigProject(dir);
   const plans = project.resolved.plans;
@@ -27140,7 +27604,7 @@ async function secrets(argv) {
 }
 
 // src/cli/deploy/stripe-key.ts
-import path81 from "node:path";
+import path82 from "node:path";
 init_invariant();
 var StripeKeyError = class extends ApitogoError {
   constructor(message, developerHint) {
@@ -27158,7 +27622,7 @@ async function ensureStripeKey(argv, deps) {
   if (!wantsPlans(argv.only)) return { status: "not-needed" };
   let resolved;
   try {
-    resolved = loadConfigV2(path81.resolve(process.cwd(), argv.dir)).resolved;
+    resolved = loadConfigV2(path82.resolve(process.cwd(), argv.dir)).resolved;
   } catch {
     return { status: "not-needed" };
   }
@@ -28095,7 +28559,7 @@ init_invariant();
 
 // src/cli/portal/report.ts
 import { access as access9 } from "node:fs/promises";
-import path82 from "node:path";
+import path83 from "node:path";
 
 // src/cli/deploy/identity.ts
 init_invariant();
@@ -28106,6 +28570,16 @@ var IdentityDeployError = class extends ApitogoError {
     this.name = "IdentityDeployError";
   }
 };
+var IDENTITY_NOT_ACTIVE = "IDENTITY_NOT_ACTIVE";
+async function identityLost(client, projectId) {
+  if (!client.listProjectIdentityConnections) return false;
+  try {
+    await client.listProjectIdentityConnections(projectId);
+    return false;
+  } catch (error) {
+    return error instanceof PlatformApiError && error.status === 409 && error.problem?.code === IDENTITY_NOT_ACTIVE;
+  }
+}
 var IDENTITY_STEPS = ["request", "activate"];
 var IDENTITY_CONNECTIONS_STEP = "connections";
 var SECRET_PREFIX = "secret:";
@@ -28305,10 +28779,13 @@ async function deployIdentity(resolved, projectId, deps, options = {}) {
         return rejected2(error);
       }
     },
-    // An identity that was removed, or that failed, is not a result worth keeping.
+    // An identity that was removed, or that failed, is not a result worth keeping. Neither is one the platform still
+    // lists as Active while the identity service lost it (API-132): asking again makes it again.
     stillValid: async () => {
       const found = await client.getProjectIdentity(projectId);
-      return found !== null && found.status !== "Failed" && found.status !== "Released" && found.status !== "Releasing";
+      if (found === null || found.status === "Failed" || found.status === "Released" || found.status === "Releasing")
+        return false;
+      return found.status !== "Active" || !await identityLost(client, projectId);
     }
   };
   const activateStep = {
@@ -28866,7 +29343,7 @@ async function planPortalService(resolved, ledger) {
     const hash2 = await portalBuildHash(resolved, prepared);
     const previous = stepOf(ledger, "portal", "build");
     const built = await exists5(
-      path82.join(resolved.state.buildDir, "index.html")
+      path83.join(resolved.state.buildDir, "index.html")
     );
     if (previous?.status === "succeeded" && previous.hash === hash2 && built) {
       return {
@@ -29238,6 +29715,25 @@ async function statusV2(dir, only, options = {}) {
   const ledger = await readLedger(resolved.state);
   const manifest = await readManifest(resolved.state);
   const services = [];
+  const manifestSummary = {
+    present: manifest !== void 0,
+    schemaVersion: manifest?.schemaVersion,
+    generatedAt: manifest?.generatedAt
+  };
+  const projectId = resolved.project.id ?? manifest?.project.id;
+  if (options.projectRemote && projectId) {
+    try {
+      await options.projectRemote(projectId);
+    } catch (error) {
+      if (error instanceof ProjectGoneError)
+        return {
+          configPath: resolved.configPath,
+          manifest: manifestSummary,
+          project: { state: "gone", id: projectId, message: error.message },
+          services: []
+        };
+    }
+  }
   for (const service of chooseServices(only)) {
     const section = sectionOf(resolved, service);
     if (!section) {
@@ -29252,7 +29748,7 @@ async function statusV2(dir, only, options = {}) {
     if (service === "portal") {
       const build2 = stepOf(ledger, "portal", "build");
       const built = await exists5(
-        path82.join(resolved.state.buildDir, "index.html")
+        path83.join(resolved.state.buildDir, "index.html")
       );
       const state = build2?.status === "failed" ? "build-failed" : build2?.status === "succeeded" && built ? "built" : "not-built";
       services.push({
@@ -29263,7 +29759,7 @@ async function statusV2(dir, only, options = {}) {
           ...build2?.finishedAt ? [`last build: ${build2.finishedAt}`] : [],
           ...build2?.status === "failed" ? [`error: ${build2.error ?? "unknown"}`] : [],
           ...state === "built" ? [
-            `output: ${path82.relative(resolved.configDir, resolved.state.buildDir)}`
+            `output: ${path83.relative(resolved.configDir, resolved.state.buildDir)}`
           ] : [],
           ...url2 ? [`url: ${url2}`] : ["url: not known (portal is not deployed yet)"],
           ...await hostingLine(resolved, manifest, options.hostingRemote)
@@ -29301,11 +29797,7 @@ async function statusV2(dir, only, options = {}) {
   }
   return {
     configPath: resolved.configPath,
-    manifest: {
-      present: manifest !== void 0,
-      schemaVersion: manifest?.schemaVersion,
-      generatedAt: manifest?.generatedAt
-    },
+    manifest: manifestSummary,
     services
   };
 }
@@ -29319,6 +29811,8 @@ function formatPlan(output4, options = {}) {
   ]);
 }
 function formatStatus(output4) {
+  if (output4.project?.state === "gone")
+    return [`project: gone`, `  ${output4.project.message}`];
   return [
     output4.manifest.present ? `services.json: version ${output4.manifest.schemaVersion}${output4.manifest.generatedAt ? `, written ${output4.manifest.generatedAt}` : ""}` : "services.json: none yet",
     ...output4.services.flatMap((svc) => [
@@ -29330,7 +29824,7 @@ function formatStatus(output4) {
 
 // src/cli/deploy/static-web-config.ts
 import { access as access10, writeFile as writeFile22 } from "node:fs/promises";
-import path83 from "node:path";
+import path84 from "node:path";
 var STATIC_WEB_CONFIG_FILE = "staticwebapp.config.json";
 var STATIC_WEB_CONFIG_VERSION = 3;
 var CLIENT_ONLY_ROUTES = [
@@ -29348,7 +29842,7 @@ var DEFAULT_STATIC_WEB_CONFIG = {
   }
 };
 async function ensureStaticWebConfig(buildDir) {
-  const file = path83.join(buildDir, STATIC_WEB_CONFIG_FILE);
+  const file = path84.join(buildDir, STATIC_WEB_CONFIG_FILE);
   try {
     await access10(file);
     return false;
@@ -29471,6 +29965,15 @@ async function deployV2(options, deps) {
       results.push(await deployPlansService(options, deps, projectId, named));
       continue;
     }
+    if (portalOnlyLinksExternalDocs(resolved)) {
+      results.push({
+        service: "portal",
+        status: "skipped",
+        reason: "docs are on an external site and no service feeds the console, so there is nothing to host",
+        steps: []
+      });
+      continue;
+    }
     results.push(await deployPortal(options, deps, projectId));
   }
   const gatewayAt = results.findIndex(
@@ -29703,7 +30206,7 @@ function formatDeploy(output4) {
 // src/cli/deploy/command.ts
 async function ensureLinkedProject(argv, deps) {
   if (argv.projectId?.trim() || deps.envProjectId?.trim()) return true;
-  const dir = path84.resolve(process.cwd(), argv.dir);
+  const dir = path85.resolve(process.cwd(), argv.dir);
   let linked;
   try {
     linked = Boolean(loadConfigV2(dir).resolved.project.id);
@@ -29754,7 +30257,7 @@ async function deployProject(argv) {
   try {
     const config2 = loadConfig();
     const client = new PlatformApiClient(config2);
-    const dir = path84.resolve(process.cwd(), argv.dir);
+    const dir = path85.resolve(process.cwd(), argv.dir);
     const deploy = (only) => deployV2(
       {
         dir,
@@ -29862,7 +30365,7 @@ var deploy_default = {
   }),
   handler: async (argv) => {
     await captureEvent({ argv, event: "apitogo deploy" });
-    if (!await isLegacyConfig(path85.resolve(process.cwd(), argv.dir))) {
+    if (!await isLegacyConfig(path86.resolve(process.cwd(), argv.dir))) {
       await deployProject(argv);
       return;
     }
@@ -29872,7 +30375,7 @@ var deploy_default = {
 
 // src/cli/export/handler.ts
 import { mkdir as mkdir19, writeFile as writeFile23 } from "node:fs/promises";
-import path86 from "node:path";
+import path87 from "node:path";
 init_invariant();
 var ExportError = class extends ApitogoError {
   constructor(message, developerHint) {
@@ -29886,7 +30389,7 @@ async function exportOpenApi(args, deps) {
       `Cannot export "${args.target}".`,
       "Only `apitogo export openapi` exists."
     );
-  const dir = path86.resolve(process.cwd(), args.dir ?? ".");
+  const dir = path87.resolve(process.cwd(), args.dir ?? ".");
   if (!await isConfigV2(dir))
     throw new ExportError(
       "This command needs a config version 2 project.",
@@ -29911,8 +30414,8 @@ async function exportOpenApi(args, deps) {
     throw error;
   }
   if (!args.out) return { text: text2 };
-  const file = path86.resolve(process.cwd(), args.out);
-  await mkdir19(path86.dirname(file), { recursive: true });
+  const file = path87.resolve(process.cwd(), args.out);
+  await mkdir19(path87.dirname(file), { recursive: true });
   await writeFile23(file, text2);
   return { text: text2, file };
 }
@@ -30005,8 +30508,8 @@ import open3 from "open";
 import colors14 from "picocolors";
 
 // src/cli/platform/device-auth.ts
-function url(apiUrl, path99) {
-  return `${apiUrl}${path99.startsWith("/") ? path99 : `/${path99}`}`;
+function url(apiUrl, path100) {
+  return `${apiUrl}${path100.startsWith("/") ? path100 : `/${path100}`}`;
 }
 async function requestDeviceCode(apiUrl) {
   const response = await fetchWithRetry(
@@ -30188,7 +30691,7 @@ var logout_default = {
 };
 
 // src/cli/portal/commands.ts
-import path87 from "node:path";
+import path88 from "node:path";
 init_invariant();
 function parseOnly(value) {
   if (value === void 0) return void 0;
@@ -30205,7 +30708,7 @@ function parseOnly(value) {
 async function run2(command2, argv, compute, format) {
   const json = argv.json === true;
   try {
-    const dir = path87.resolve(process.cwd(), argv.dir ?? ".");
+    const dir = path88.resolve(process.cwd(), argv.dir ?? ".");
     if (!await isConfigV2(dir)) {
       throw new ServiceEditError(
         `${command2} works with a config version 2 project, and there is none in ${dir}.`,
@@ -30243,6 +30746,14 @@ var plan = (argv) => run2(
   }),
   (output4) => formatPlan(output4, { verbose: argv.verbose === true })
 );
+function projectRemote() {
+  try {
+    const client = new PlatformApiClient(loadConfig());
+    return (projectId) => client.getProject(projectId);
+  } catch {
+    return void 0;
+  }
+}
 function gatewayRemote() {
   try {
     const client = new PlatformApiClient(loadConfig());
@@ -30300,6 +30811,7 @@ var statusOfProject = (argv) => run2(
   "status",
   argv,
   (dir, only) => statusV2(dir, only, {
+    projectRemote: projectRemote(),
     hostingRemote: hostingRemote(),
     gatewayRemote: gatewayRemote(),
     identityRemote: identityRemote(),
@@ -30421,7 +30933,7 @@ async function switchProject(options, deps) {
   try {
     project = await deps.getProject(projectId);
   } catch (error) {
-    if (error instanceof PlatformApiError && (error.status === 404 || error.status === 403))
+    if (error instanceof ProjectGoneError || error instanceof PlatformApiError && (error.status === 404 || error.status === 403))
       throw new ProjectUseError(
         "PROJECT_NOT_FOUND",
         `No project ${projectId} is yours.`,
@@ -30567,14 +31079,14 @@ var remove_default = {
 
 // src/cli/dev/handler.ts
 init_joinUrl();
-import path90 from "node:path";
+import path91 from "node:path";
 
 // src/vite/dev-server.ts
 init_logger();
 import fs11 from "node:fs/promises";
 import http from "node:http";
 import https from "node:https";
-import path89 from "node:path";
+import path90 from "node:path";
 import { createHttpTerminator } from "http-terminator";
 import {
   createServer as createViteServer,
@@ -30619,7 +31131,7 @@ function withSsrGraphParts(config2, ssrConfig) {
 // src/vite/pagefind-dev-index.ts
 init_invariant();
 init_joinUrl();
-import path88 from "node:path";
+import path89 from "node:path";
 import { createIndex as createIndex2 } from "pagefind";
 import { isRunnableDevEnvironment } from "vite";
 async function* buildPagefindDevIndex(vite, config2) {
@@ -30672,7 +31184,7 @@ async function* buildPagefindDevIndex(vite, config2) {
       path: urlPath
     };
   }
-  const outputPath = path88.join(vite.config.publicDir, "pagefind");
+  const outputPath = path89.join(vite.config.publicDir, "pagefind");
   await pagefindIndex.writeFiles({ outputPath });
   yield { type: "complete", success: true, indexed };
 }
@@ -30691,9 +31203,9 @@ var DevServer = class {
     this.protocol = "https";
     const { dir } = this.options;
     const [key, cert, ca] = await Promise.all([
-      fs11.readFile(path89.resolve(dir, config2.https.key)),
-      fs11.readFile(path89.resolve(dir, config2.https.cert)),
-      config2.https.ca ? fs11.readFile(path89.resolve(dir, config2.https.ca)) : void 0
+      fs11.readFile(path90.resolve(dir, config2.https.key)),
+      fs11.readFile(path90.resolve(dir, config2.https.cert)),
+      config2.https.ca ? fs11.readFile(path90.resolve(dir, config2.https.ca)) : void 0
     ]);
     return https.createServer({ key, cert, ca });
   }
@@ -30710,7 +31222,7 @@ var DevServer = class {
     );
     const server = await this.createNodeServer(config2);
     if (config2.search?.type === "pagefind" && viteConfig.publicDir !== false) {
-      const publicRoot = path89.resolve(
+      const publicRoot = path90.resolve(
         this.options.dir,
         typeof viteConfig.publicDir === "string" ? viteConfig.publicDir : "public"
       );
@@ -30727,7 +31239,7 @@ var DevServer = class {
           // built-in transform middleware which would treat the path as a static asset.
           name: "apitogo:entry-client",
           configureServer(server2) {
-            const entryPath = path89.posix.join(
+            const entryPath = path90.posix.join(
               server2.config.base,
               "/__z/entry.client.tsx"
             );
@@ -30895,7 +31407,7 @@ init_package_json();
 async function dev(argv) {
   const packageJson3 = getZudokuPackageJson();
   process.env.NODE_ENV = "development";
-  let dir = path90.resolve(process.cwd(), argv.dir);
+  let dir = path91.resolve(process.cwd(), argv.dir);
   if (await isConfigV2(dir)) {
     const { root, prepared } = await preparePortalWorkspace(dir, "development");
     dir = root;
@@ -31030,12 +31542,12 @@ var secrets_default = {
 };
 
 // src/cli/cmds/status.ts
-import path92 from "node:path";
+import path93 from "node:path";
 
 // src/cli/status/handler.ts
-import path91 from "node:path";
+import path92 from "node:path";
 async function status(argv) {
-  const sourceDirectory = path91.resolve(process.cwd(), argv.dir);
+  const sourceDirectory = path92.resolve(process.cwd(), argv.dir);
   let config2;
   try {
     config2 = loadConfig();
@@ -31161,7 +31673,7 @@ var status_default = {
   }),
   handler: async (argv) => {
     await captureEvent({ argv, event: "apitogo status" });
-    if (await isConfigV2(path92.resolve(process.cwd(), argv.dir))) {
+    if (await isConfigV2(path93.resolve(process.cwd(), argv.dir))) {
       await statusOfProject(argv);
       return;
     }
@@ -31170,11 +31682,11 @@ var status_default = {
 };
 
 // src/cli/cmds/teardown.ts
-import path95 from "node:path";
+import path96 from "node:path";
 
 // src/cli/teardown/command.ts
 init_invariant();
-import path93 from "node:path";
+import path94 from "node:path";
 import { createInterface as createInterface7 } from "node:readline/promises";
 
 // src/cli/teardown/v2.ts
@@ -31535,7 +32047,7 @@ async function teardownProject(argv) {
     const progress = createConsoleProgressReporter();
     const result = await teardownV2(
       {
-        dir: path93.resolve(process.cwd(), argv.dir),
+        dir: path94.resolve(process.cwd(), argv.dir),
         projectId: argv.projectId,
         only: Array.isArray(argv.only) ? argv.only.join(",") : argv.only,
         yes: argv.yes === true,
@@ -31594,7 +32106,7 @@ async function teardownProject(argv) {
 }
 
 // src/cli/teardown/handler.ts
-import path94 from "node:path";
+import path95 from "node:path";
 function resultLooksFailed3(payload) {
   try {
     const parsed = JSON.parse(payload);
@@ -31610,7 +32122,7 @@ async function teardown(argv) {
     );
     return;
   }
-  const sourceDirectory = path94.resolve(process.cwd(), argv.dir);
+  const sourceDirectory = path95.resolve(process.cwd(), argv.dir);
   let config2;
   try {
     config2 = loadConfig();
@@ -31688,7 +32200,7 @@ var teardown_default = {
   }),
   handler: async (argv) => {
     await captureEvent({ argv, event: "apitogo teardown" });
-    if (!await isLegacyConfig(path95.resolve(process.cwd(), argv.dir))) {
+    if (!await isLegacyConfig(path96.resolve(process.cwd(), argv.dir))) {
       await teardownProject(argv);
       return;
     }
@@ -31698,7 +32210,7 @@ var teardown_default = {
 
 // src/cli/teardown/reset-command.ts
 init_invariant();
-import path96 from "node:path";
+import path97 from "node:path";
 
 // src/cli/teardown/reset.ts
 init_invariant();
@@ -31821,7 +32333,7 @@ async function resetProject(argv) {
     const config2 = loadConfig();
     const result = await resetProjectV2(
       {
-        dir: path96.resolve(process.cwd(), argv.dir),
+        dir: path97.resolve(process.cwd(), argv.dir),
         projectId: argv.projectId,
         yes: argv.yes === true
       },
@@ -31885,7 +32397,7 @@ var test_reset_default = {
 };
 
 // src/cli/test-sign-in/handler.ts
-import path97 from "node:path";
+import path98 from "node:path";
 init_invariant();
 var TestSignInError = class extends ApitogoError {
   constructor(message, developerHint) {
@@ -31896,7 +32408,7 @@ var TestSignInError = class extends ApitogoError {
 async function resolveProjectId3(argv) {
   const explicit = argv.projectId?.trim();
   if (explicit) return explicit;
-  const dir = path97.resolve(process.cwd(), argv.dir ?? ".");
+  const dir = path98.resolve(process.cwd(), argv.dir ?? ".");
   if (await isConfigV2(dir)) {
     const id = loadConfigV2(dir).resolved.project.id;
     if (id) return id;
@@ -32036,36 +32548,36 @@ function createApitogoCli(argv) {
 // src/cli/local-handoff.ts
 import { spawn as spawn2 } from "node:child_process";
 import { existsSync as existsSync9, realpathSync as realpathSync2 } from "node:fs";
-import path98 from "node:path";
+import path99 from "node:path";
 var LOCAL_HANDOFF_ENV = "APITOGO_LOCAL_CLI";
 var PACKAGE_NAME = "@lukoweb/apitogo";
 var resolveProjectDir = (argv, cwd) => {
   for (let i = 0; i < argv.length; i++) {
     const arg = argv[i];
     const next = argv[i + 1];
-    if (arg === "--dir" && next) return path98.resolve(cwd, next);
+    if (arg === "--dir" && next) return path99.resolve(cwd, next);
     if (arg?.startsWith("--dir=")) {
-      return path98.resolve(cwd, arg.slice("--dir=".length));
+      return path99.resolve(cwd, arg.slice("--dir=".length));
     }
   }
   return cwd;
 };
 var findLocalCli = (projectDir, runningRoot) => {
-  let dir = path98.resolve(projectDir);
+  let dir = path99.resolve(projectDir);
   let localPackageRoot;
   while (!localPackageRoot) {
-    const candidate = path98.join(dir, "node_modules", PACKAGE_NAME);
-    if (existsSync9(path98.join(candidate, "package.json"))) {
+    const candidate = path99.join(dir, "node_modules", PACKAGE_NAME);
+    if (existsSync9(path99.join(candidate, "package.json"))) {
       localPackageRoot = candidate;
-    } else if (dir === path98.dirname(dir)) {
+    } else if (dir === path99.dirname(dir)) {
       return void 0;
     } else {
-      dir = path98.dirname(dir);
+      dir = path99.dirname(dir);
     }
   }
   const localRoot = realpathSync2(localPackageRoot);
   if (localRoot === realpathSync2(runningRoot)) return void 0;
-  return path98.join(localRoot, "cli.js");
+  return path99.join(localRoot, "cli.js");
 };
 var handoffToLocalCli = async (argv, runningRoot) => {
   if (process.env[LOCAL_HANDOFF_ENV] || process.env.ZUDOKU_ENV === "internal") {
@@ -32077,7 +32589,7 @@ var handoffToLocalCli = async (argv, runningRoot) => {
   );
   if (!localCli) return void 0;
   printDiagnosticsToConsole(
-    `Using the project's local ${PACKAGE_NAME} (${path98.dirname(localCli)})`
+    `Using the project's local ${PACKAGE_NAME} (${path99.dirname(localCli)})`
   );
   const child = spawn2(process.execPath, [localCli, ...argv], {
     stdio: "inherit",