@onexapis/cli 1.1.37 → 1.1.39

package/dist/cli.js

@@ -4,18 +4,18 @@
 var chalk4 = require('chalk');
 var ora = require('ora');
 var esbuild = require('esbuild');
-var path8 = require('path');
-var fs7 = require('fs/promises');
-var crypto2 = require('crypto');
+var path9 = require('path');
+var fs8 = require('fs/promises');
+var crypto = require('crypto');
 var glob = require('glob');
 var module$1 = require('module');
-var os3 = require('os');
+var os = require('os');
 var dotenv = require('dotenv');
 var fs = require('fs-extra');
 var ejs = require('ejs');
 var child_process = require('child_process');
 var commander = require('commander');
-var fs2 = require('fs');
+var fs3 = require('fs');
 var inquirer = require('inquirer');
 var archiver = require('archiver');
 var FormData = require('form-data');
@@ -25,6 +25,7 @@ var AdmZip = require('adm-zip');
 var chokidar = require('chokidar');
 var http = require('http');
 var ws = require('ws');
+var semver = require('semver');
 
 var _documentCurrentScript = typeof document !== 'undefined' ? document.currentScript : null;
 function _interopDefault (e) { return e && e.__esModule ? e : { default: e }; }
@@ -50,14 +51,14 @@ function _interopNamespace(e) {
 var chalk4__default = /*#__PURE__*/_interopDefault(chalk4);
 var ora__default = /*#__PURE__*/_interopDefault(ora);
 var esbuild__namespace = /*#__PURE__*/_interopNamespace(esbuild);
-var path8__default = /*#__PURE__*/_interopDefault(path8);
-var fs7__default = /*#__PURE__*/_interopDefault(fs7);
-var crypto2__default = /*#__PURE__*/_interopDefault(crypto2);
-var os3__default = /*#__PURE__*/_interopDefault(os3);
+var path9__default = /*#__PURE__*/_interopDefault(path9);
+var fs8__default = /*#__PURE__*/_interopDefault(fs8);
+var crypto__default = /*#__PURE__*/_interopDefault(crypto);
+var os__default = /*#__PURE__*/_interopDefault(os);
 var dotenv__default = /*#__PURE__*/_interopDefault(dotenv);
 var fs__default = /*#__PURE__*/_interopDefault(fs);
 var ejs__default = /*#__PURE__*/_interopDefault(ejs);
-var fs2__default = /*#__PURE__*/_interopDefault(fs2);
+var fs3__default = /*#__PURE__*/_interopDefault(fs3);
 var inquirer__default = /*#__PURE__*/_interopDefault(inquirer);
 var archiver__default = /*#__PURE__*/_interopDefault(archiver);
 var FormData__default = /*#__PURE__*/_interopDefault(FormData);
@@ -65,6 +66,7 @@ var fetch2__default = /*#__PURE__*/_interopDefault(fetch2);
 var AdmZip__default = /*#__PURE__*/_interopDefault(AdmZip);
 var chokidar__default = /*#__PURE__*/_interopDefault(chokidar);
 var http__default = /*#__PURE__*/_interopDefault(http);
+var semver__default = /*#__PURE__*/_interopDefault(semver);
 
 var __defProp = Object.defineProperty;
 var __getOwnPropNames = Object.getOwnPropertyNames;
@@ -146,8 +148,8 @@ async function generateThemeCSS(themePath, outDir) {
     const tailwindcss = (await import('tailwindcss')).default;
     const tailwindConfig = {
       content: [
-        path8__default.default.join(themePath, "sections/**/*.{ts,tsx}"),
-        path8__default.default.join(themePath, "components/**/*.{ts,tsx}")
+        path9__default.default.join(themePath, "sections/**/*.{ts,tsx}"),
+        path9__default.default.join(themePath, "components/**/*.{ts,tsx}")
       ],
       theme: { extend: {} },
       plugins: []
@@ -157,7 +159,7 @@ async function generateThemeCSS(themePath, outDir) {
       inputCSS,
       { from: void 0 }
     );
-    await fs7__default.default.writeFile(path8__default.default.join(outDir, "bundle.css"), result.css);
+    await fs8__default.default.writeFile(path9__default.default.join(outDir, "bundle.css"), result.css);
     logger.info("Generated bundle.css");
   } catch (err) {
     logger.warning(
@@ -168,12 +170,12 @@ async function generateThemeCSS(themePath, outDir) {
 async function resolveNodeModulesFile(startDir, relativePath) {
   let dir = startDir;
   while (true) {
-    const candidate = path8__default.default.join(dir, "node_modules", relativePath);
+    const candidate = path9__default.default.join(dir, "node_modules", relativePath);
     try {
-      await fs7__default.default.access(candidate);
+      await fs8__default.default.access(candidate);
       return candidate;
     } catch {
-      const parent = path8__default.default.dirname(dir);
+      const parent = path9__default.default.dirname(dir);
       if (parent === dir) break;
       dir = parent;
     }
@@ -197,7 +199,7 @@ async function scanImportsFromPackage(sourceDir, packageName) {
   });
   for (const file of sourceFiles) {
     try {
-      const content = await fs7__default.default.readFile(path8__default.default.join(sourceDir, file), "utf-8");
+      const content = await fs8__default.default.readFile(path9__default.default.join(sourceDir, file), "utf-8");
       for (const match of content.matchAll(namespaceImportRegex)) {
         const subpath = match[1] ? match[1].slice(1) : "";
         if (!result[subpath]) result[subpath] = /* @__PURE__ */ new Set();
@@ -251,17 +253,17 @@ function createCoreGlobalPlugin(themePath) {
           const distFileName = subpath ? `${subpath}.mjs` : "index.mjs";
           let distPath = await resolveNodeModulesFile(
             themePath,
-            path8__default.default.join("@onexapis", "core", "dist", distFileName)
+            path9__default.default.join("@onexapis", "core", "dist", distFileName)
           );
           if (!distPath) {
             distPath = await resolveNodeModulesFile(
               __dirname,
-              path8__default.default.join("@onexapis", "core", "dist", distFileName)
+              path9__default.default.join("@onexapis", "core", "dist", distFileName)
             );
           }
           try {
             if (!distPath) throw new Error("not found");
-            const distContent = await fs7__default.default.readFile(distPath, "utf-8");
+            const distContent = await fs8__default.default.readFile(distPath, "utf-8");
             const exportMatches = distContent.matchAll(/export\s*\{([^}]+)\}/g);
             for (const m of exportMatches) {
               const names = m[1].split(",").map((n) => {
@@ -490,7 +492,7 @@ async function generateThemeData(themePath, outputDir, themeId) {
   const pages = {};
   for (const ext of [".ts", ".js"]) {
     try {
-      const mod = await jiti.import(path8__default.default.join(themePath, `theme.config${ext}`));
+      const mod = await jiti.import(path9__default.default.join(themePath, `theme.config${ext}`));
       themeConfig = mod.default || mod;
       break;
     } catch {
@@ -498,20 +500,20 @@ async function generateThemeData(themePath, outputDir, themeId) {
   }
   for (const ext of [".ts", ".js"]) {
     try {
-      const mod = await jiti.import(path8__default.default.join(themePath, `theme.layout${ext}`));
+      const mod = await jiti.import(path9__default.default.join(themePath, `theme.layout${ext}`));
       layoutConfig = mod.default || mod;
       break;
     } catch {
     }
   }
   const schemas = {};
-  const sectionsDir = path8__default.default.join(themePath, "sections");
+  const sectionsDir = path9__default.default.join(themePath, "sections");
   try {
-    const sectionDirs = await fs7__default.default.readdir(sectionsDir);
+    const sectionDirs = await fs8__default.default.readdir(sectionsDir);
     for (const dir of sectionDirs) {
-      const schemaFile = path8__default.default.join(sectionsDir, dir, `${dir}.schema.ts`);
+      const schemaFile = path9__default.default.join(sectionsDir, dir, `${dir}.schema.ts`);
       try {
-        await fs7__default.default.access(schemaFile);
+        await fs8__default.default.access(schemaFile);
         const mod = await jiti.import(schemaFile);
         for (const [key, value] of Object.entries(mod)) {
           if (key.endsWith("Schema") && value && typeof value === "object" && value.type) {
@@ -523,14 +525,14 @@ async function generateThemeData(themePath, outputDir, themeId) {
     }
   } catch {
   }
-  const pagesDir = path8__default.default.join(themePath, "pages");
+  const pagesDir = path9__default.default.join(themePath, "pages");
   try {
-    const files = await fs7__default.default.readdir(pagesDir);
+    const files = await fs8__default.default.readdir(pagesDir);
     for (const file of files) {
       if (!file.match(/\.(ts|js)$/)) continue;
       const name = file.replace(/\.(ts|js)$/, "");
       try {
-        const mod = await jiti.import(path8__default.default.join(pagesDir, file));
+        const mod = await jiti.import(path9__default.default.join(pagesDir, file));
         const config = mod.default || mod;
         const sections = (config.sections || []).map((section) => {
           const schema = schemas[section.type];
@@ -558,8 +560,8 @@ async function generateThemeData(themePath, outputDir, themeId) {
     }
   } catch {
   }
-  await fs7__default.default.writeFile(
-    path8__default.default.join(outputDir, "theme-data.json"),
+  await fs8__default.default.writeFile(
+    path9__default.default.join(outputDir, "theme-data.json"),
     JSON.stringify(
       {
         themeId,
@@ -582,53 +584,53 @@ async function generateThemeData(themePath, outputDir, themeId) {
   logger.info(`Generated theme-data.json (${Object.keys(pages).length} pages)`);
 }
 async function contentHashEntry(outputDir) {
-  const entryPath = path8__default.default.join(outputDir, "bundle-entry.js");
-  const mapPath = path8__default.default.join(outputDir, "bundle-entry.js.map");
+  const entryPath = path9__default.default.join(outputDir, "bundle-entry.js");
+  const mapPath = path9__default.default.join(outputDir, "bundle-entry.js.map");
   const oldFiles = await glob.glob("bundle-entry-*.js*", { cwd: outputDir });
   for (const f of oldFiles) {
-    await fs7__default.default.unlink(path8__default.default.join(outputDir, f));
+    await fs8__default.default.unlink(path9__default.default.join(outputDir, f));
   }
   let entryContent;
   try {
-    entryContent = await fs7__default.default.readFile(entryPath, "utf-8");
+    entryContent = await fs8__default.default.readFile(entryPath, "utf-8");
   } catch {
-    const indexPath = path8__default.default.join(outputDir, "index.js");
+    const indexPath = path9__default.default.join(outputDir, "index.js");
     try {
-      entryContent = await fs7__default.default.readFile(indexPath, "utf-8");
+      entryContent = await fs8__default.default.readFile(indexPath, "utf-8");
     } catch {
       logger.warning("No entry file found in output, skipping content hash");
       return;
     }
-    const hash2 = crypto2__default.default.createHash("sha256").update(entryContent).digest("hex").slice(0, 8);
+    const hash2 = crypto__default.default.createHash("sha256").update(entryContent).digest("hex").slice(0, 8);
     const hashedName2 = `bundle-entry-${hash2}.js`;
-    const indexMapPath = path8__default.default.join(outputDir, "index.js.map");
+    const indexMapPath = path9__default.default.join(outputDir, "index.js.map");
     const hashedMapName2 = `bundle-entry-${hash2}.js.map`;
     entryContent = entryContent.replace(
       /\/\/# sourceMappingURL=index\.js\.map/,
       `//# sourceMappingURL=${hashedMapName2}`
     );
-    await fs7__default.default.writeFile(path8__default.default.join(outputDir, hashedName2), entryContent);
-    await fs7__default.default.unlink(indexPath);
+    await fs8__default.default.writeFile(path9__default.default.join(outputDir, hashedName2), entryContent);
+    await fs8__default.default.unlink(indexPath);
     try {
-      await fs7__default.default.access(indexMapPath);
-      await fs7__default.default.rename(indexMapPath, path8__default.default.join(outputDir, hashedMapName2));
+      await fs8__default.default.access(indexMapPath);
+      await fs8__default.default.rename(indexMapPath, path9__default.default.join(outputDir, hashedMapName2));
     } catch {
     }
     logger.info(`Entry hashed: ${hashedName2}`);
     return;
   }
-  const hash = crypto2__default.default.createHash("sha256").update(entryContent).digest("hex").slice(0, 8);
+  const hash = crypto__default.default.createHash("sha256").update(entryContent).digest("hex").slice(0, 8);
   const hashedName = `bundle-entry-${hash}.js`;
   const hashedMapName = `bundle-entry-${hash}.js.map`;
   entryContent = entryContent.replace(
     /\/\/# sourceMappingURL=bundle-entry\.js\.map/,
     `//# sourceMappingURL=${hashedMapName}`
   );
-  await fs7__default.default.writeFile(path8__default.default.join(outputDir, hashedName), entryContent);
-  await fs7__default.default.unlink(entryPath);
+  await fs8__default.default.writeFile(path9__default.default.join(outputDir, hashedName), entryContent);
+  await fs8__default.default.unlink(entryPath);
   try {
-    await fs7__default.default.access(mapPath);
-    await fs7__default.default.rename(mapPath, path8__default.default.join(outputDir, hashedMapName));
+    await fs8__default.default.access(mapPath);
+    await fs8__default.default.rename(mapPath, path9__default.default.join(outputDir, hashedMapName));
   } catch {
   }
   logger.info(`Entry hashed: ${hashedName}`);
@@ -640,7 +642,7 @@ async function extractDataRequirements(themePath) {
   const requirements = {};
   for (const file of schemaFiles) {
     try {
-      const mod = await jiti.import(path8__default.default.join(themePath, file));
+      const mod = await jiti.import(path9__default.default.join(themePath, file));
       const exports$1 = mod;
       for (const value of Object.values(exports$1)) {
         if (value && typeof value === "object" && typeof value.type === "string" && value.dataRequirements && typeof value.dataRequirements === "object") {
@@ -659,8 +661,8 @@ async function generateManifest(themeName, themePath, outputDir) {
   let version2 = "1.0.0";
   let themeId = themeName;
   try {
-    const pkgContent = await fs7__default.default.readFile(
-      path8__default.default.join(themePath, "package.json"),
+    const pkgContent = await fs8__default.default.readFile(
+      path9__default.default.join(themePath, "package.json"),
       "utf-8"
     );
     const pkg = JSON.parse(pkgContent);
@@ -678,7 +680,7 @@ async function generateManifest(themeName, themePath, outputDir) {
   const dataRequirements = await extractDataRequirements(themePath);
   let hasThemeConfig = false;
   try {
-    await fs7__default.default.access(path8__default.default.join(themePath, "theme.config.ts"));
+    await fs8__default.default.access(path9__default.default.join(themePath, "theme.config.ts"));
     hasThemeConfig = true;
   } catch {
   }
@@ -719,24 +721,24 @@ async function generateManifest(themeName, themePath, outputDir) {
     // Section data requirements for server-side prefetching (keyed by section type)
     dataRequirements
   };
-  await fs7__default.default.writeFile(
-    path8__default.default.join(outputDir, "manifest.json"),
+  await fs8__default.default.writeFile(
+    path9__default.default.join(outputDir, "manifest.json"),
     JSON.stringify(manifest, null, 2)
   );
 }
 async function compileStandaloneTheme(themePath, themeName) {
-  const outputDir = path8__default.default.join(themePath, "dist");
-  const bundleEntry = path8__default.default.join(themePath, "bundle-entry.ts");
-  const indexEntry = path8__default.default.join(themePath, "index.ts");
+  const outputDir = path9__default.default.join(themePath, "dist");
+  const bundleEntry = path9__default.default.join(themePath, "bundle-entry.ts");
+  const indexEntry = path9__default.default.join(themePath, "index.ts");
   let entryPoint = indexEntry;
   try {
-    await fs7__default.default.access(bundleEntry);
+    await fs8__default.default.access(bundleEntry);
     entryPoint = bundleEntry;
   } catch {
   }
-  const shimPath = path8__default.default.join(outputDir, ".process-shim.js");
-  await fs7__default.default.mkdir(outputDir, { recursive: true });
-  await fs7__default.default.writeFile(shimPath, PROCESS_SHIM);
+  const shimPath = path9__default.default.join(outputDir, ".process-shim.js");
+  await fs8__default.default.mkdir(outputDir, { recursive: true });
+  await fs8__default.default.writeFile(shimPath, PROCESS_SHIM);
   const buildOptions = {
     entryPoints: [entryPoint],
     bundle: true,
@@ -786,7 +788,7 @@ async function compileStandaloneTheme(themePath, themeName) {
   try {
     const result = await esbuild__namespace.build(buildOptions);
     try {
-      await fs7__default.default.unlink(shimPath);
+      await fs8__default.default.unlink(shimPath);
     } catch {
     }
     await contentHashEntry(outputDir);
@@ -805,7 +807,7 @@ async function compileStandaloneTheme(themePath, themeName) {
     return true;
   } catch (error) {
     try {
-      await fs7__default.default.unlink(shimPath);
+      await fs8__default.default.unlink(shimPath);
     } catch {
     }
     logger.error(`esbuild compilation failed: ${error}`);
@@ -813,18 +815,18 @@ async function compileStandaloneTheme(themePath, themeName) {
   }
 }
 async function compileStandaloneThemeDev(themePath, themeName) {
-  const outputDir = path8__default.default.join(themePath, "dist");
-  const bundleEntry = path8__default.default.join(themePath, "bundle-entry.ts");
-  const indexEntry = path8__default.default.join(themePath, "index.ts");
+  const outputDir = path9__default.default.join(themePath, "dist");
+  const bundleEntry = path9__default.default.join(themePath, "bundle-entry.ts");
+  const indexEntry = path9__default.default.join(themePath, "index.ts");
   let entryPoint = indexEntry;
   try {
-    await fs7__default.default.access(bundleEntry);
+    await fs8__default.default.access(bundleEntry);
     entryPoint = bundleEntry;
   } catch {
   }
-  const shimPath = path8__default.default.join(outputDir, ".process-shim.js");
-  await fs7__default.default.mkdir(outputDir, { recursive: true });
-  await fs7__default.default.writeFile(shimPath, PROCESS_SHIM);
+  const shimPath = path9__default.default.join(outputDir, ".process-shim.js");
+  await fs8__default.default.mkdir(outputDir, { recursive: true });
+  await fs8__default.default.writeFile(shimPath, PROCESS_SHIM);
   const buildOptions = {
     entryPoints: [entryPoint],
     bundle: true,
@@ -877,18 +879,18 @@ async function compileStandaloneThemeDev(themePath, themeName) {
   return { context: context2, outputDir };
 }
 async function compilePreviewRuntime(themePath) {
-  const outputDir = path8__default.default.join(themePath, "dist");
-  await fs7__default.default.mkdir(outputDir, { recursive: true });
-  const outputPath = path8__default.default.join(outputDir, "preview-runtime.js");
+  const outputDir = path9__default.default.join(themePath, "dist");
+  await fs8__default.default.mkdir(outputDir, { recursive: true });
+  const outputPath = path9__default.default.join(outputDir, "preview-runtime.js");
   const locations = [
-    path8__default.default.join(__dirname, "..", "preview", "preview-app.tsx"),
-    path8__default.default.join(__dirname, "preview", "preview-app.tsx"),
-    path8__default.default.join(__dirname, "..", "..", "src", "preview", "preview-app.tsx")
+    path9__default.default.join(__dirname, "..", "preview", "preview-app.tsx"),
+    path9__default.default.join(__dirname, "preview", "preview-app.tsx"),
+    path9__default.default.join(__dirname, "..", "..", "src", "preview", "preview-app.tsx")
   ];
   let previewEntryPath = null;
   for (const loc of locations) {
     try {
-      await fs7__default.default.access(loc);
+      await fs8__default.default.access(loc);
       previewEntryPath = loc;
       break;
     } catch {
@@ -971,10 +973,10 @@ ${locations.join("\n")}`
         if (!lucideScanned) {
           lucideScanned = true;
           const coreSrcCandidates = [
-            path8__default.default.join(themePath, "node_modules", "@onexapis", "core", "src"),
-            path8__default.default.join(themePath, "..", "..", "packages", "core", "src"),
+            path9__default.default.join(themePath, "node_modules", "@onexapis", "core", "src"),
+            path9__default.default.join(themePath, "..", "..", "packages", "core", "src"),
             // monorepo sibling
-            path8__default.default.join(
+            path9__default.default.join(
               __dirname,
               "..",
               "..",
@@ -989,7 +991,7 @@ ${locations.join("\n")}`
           let coreSourceDir = null;
           for (const candidate of coreSrcCandidates) {
             try {
-              await fs7__default.default.access(candidate);
+              await fs8__default.default.access(candidate);
               coreSourceDir = candidate;
               break;
             } catch {
@@ -1008,21 +1010,21 @@ ${locations.join("\n")}`
             }
           } else {
             const coreDistCandidates = [
-              path8__default.default.join(themePath, "node_modules", "@onexapis", "core", "dist")
+              path9__default.default.join(themePath, "node_modules", "@onexapis", "core", "dist")
             ];
             const resolvedDist = await resolveNodeModulesFile(
               __dirname,
-              path8__default.default.join("@onexapis", "core", "dist")
+              path9__default.default.join("@onexapis", "core", "dist")
             );
             if (resolvedDist) coreDistCandidates.push(resolvedDist);
             for (const candidate of coreDistCandidates) {
               try {
-                await fs7__default.default.access(candidate);
+                await fs8__default.default.access(candidate);
                 const mjsFiles = await glob.glob("*.mjs", { cwd: candidate });
                 const importRegex = /import\s*\{([^}]+)\}\s*from\s*["']lucide-react["']/g;
                 for (const file of mjsFiles) {
-                  const content = await fs7__default.default.readFile(
-                    path8__default.default.join(candidate, file),
+                  const content = await fs8__default.default.readFile(
+                    path9__default.default.join(candidate, file),
                     "utf-8"
                   );
                   for (const match of content.matchAll(importRegex)) {
@@ -1077,7 +1079,7 @@ export default new Proxy({}, { get: (_, name) => name === '__esModule' ? true :
           const req = module$1.createRequire((typeof document === 'undefined' ? require('u' + 'rl').pathToFileURL(__filename).href : (_documentCurrentScript && _documentCurrentScript.tagName.toUpperCase() === 'SCRIPT' && _documentCurrentScript.src || new URL('cli.js', document.baseURI).href)) || __filename);
           const cjsPath = req.resolve("framer-motion");
           const pkgDir = cjsPath.replace(/[/\\]dist[/\\].*$/, "");
-          const esmEntry = path8__default.default.join(pkgDir, "dist", "es", "index.mjs");
+          const esmEntry = path9__default.default.join(pkgDir, "dist", "es", "index.mjs");
           const { existsSync } = await import('fs');
           if (existsSync(esmEntry)) {
             return { path: esmEntry, namespace: "file" };
@@ -1176,8 +1178,8 @@ export function headers() { return new Headers(); }
       });
     }
   };
-  const shimPath = path8__default.default.join(outputDir, ".process-shim-preview.js");
-  await fs7__default.default.writeFile(shimPath, PROCESS_SHIM);
+  const shimPath = path9__default.default.join(outputDir, ".process-shim-preview.js");
+  await fs8__default.default.writeFile(shimPath, PROCESS_SHIM);
   await esbuild__namespace.build({
     entryPoints: [previewEntryPath],
     bundle: true,
@@ -1212,7 +1214,7 @@ export function headers() { return new Headers(); }
     }
   });
   try {
-    await fs7__default.default.unlink(shimPath);
+    await fs8__default.default.unlink(shimPath);
   } catch {
   }
   return outputPath;
@@ -1345,18 +1347,18 @@ async function renderTemplate(templatePath, data) {
   return ejs__default.default.render(template, data);
 }
 async function writeFile(filePath, content) {
-  await fs__default.default.ensureDir(path8__default.default.dirname(filePath));
+  await fs__default.default.ensureDir(path9__default.default.dirname(filePath));
   await fs__default.default.writeFile(filePath, content, "utf-8");
 }
 function getTemplatesDir() {
   const locations = [
-    path8__default.default.join(__dirname, "../../templates"),
+    path9__default.default.join(__dirname, "../../templates"),
     // Development
-    path8__default.default.join(__dirname, "../templates"),
+    path9__default.default.join(__dirname, "../templates"),
     // Production (dist/)
-    path8__default.default.join(process.cwd(), "templates"),
+    path9__default.default.join(process.cwd(), "templates"),
     // Fallback
-    path8__default.default.join(process.cwd(), "packages/cli/templates")
+    path9__default.default.join(process.cwd(), "packages/cli/templates")
     // Monorepo
   ];
   for (const location of locations) {
@@ -1368,7 +1370,7 @@ function getTemplatesDir() {
 }
 async function copyTemplate(templateName, targetDir, data) {
   const templatesDir = getTemplatesDir();
-  const templateDir = path8__default.default.join(templatesDir, templateName);
+  const templateDir = path9__default.default.join(templatesDir, templateName);
   if (!fs__default.default.existsSync(templateDir)) {
     throw new Error(
       `Template "${templateName}" not found at ${templateDir}. Available templates: ${fs__default.default.readdirSync(templatesDir).join(", ")}`
@@ -1377,8 +1379,8 @@ async function copyTemplate(templateName, targetDir, data) {
   await fs__default.default.ensureDir(targetDir);
   const files = await fs__default.default.readdir(templateDir);
   for (const file of files) {
-    const templatePath = path8__default.default.join(templateDir, file);
-    const targetPath = path8__default.default.join(targetDir, file);
+    const templatePath = path9__default.default.join(templateDir, file);
+    const targetPath = path9__default.default.join(targetDir, file);
     const stat = await fs__default.default.stat(templatePath);
     if (stat.isDirectory()) {
       await copyTemplateDir(templatePath, targetPath, data);
@@ -1395,8 +1397,8 @@ async function copyTemplateDir(templateDir, targetDir, data) {
   await fs__default.default.ensureDir(targetDir);
   const files = await fs__default.default.readdir(templateDir);
   for (const file of files) {
-    const templatePath = path8__default.default.join(templateDir, file);
-    const targetPath = path8__default.default.join(targetDir, file);
+    const templatePath = path9__default.default.join(templateDir, file);
+    const targetPath = path9__default.default.join(targetDir, file);
     const stat = await fs__default.default.stat(templatePath);
     if (stat.isDirectory()) {
       await copyTemplateDir(templatePath, targetPath, data);
@@ -1411,32 +1413,32 @@ async function copyTemplateDir(templateDir, targetDir, data) {
 }
 function getProjectRoot() {
   let currentDir = process.cwd();
-  while (currentDir !== path8__default.default.parse(currentDir).root) {
-    const packageJsonPath = path8__default.default.join(currentDir, "package.json");
+  while (currentDir !== path9__default.default.parse(currentDir).root) {
+    const packageJsonPath = path9__default.default.join(currentDir, "package.json");
     if (fs__default.default.existsSync(packageJsonPath)) {
       const packageJson = fs__default.default.readJsonSync(packageJsonPath);
-      if (packageJson.workspaces || fs__default.default.existsSync(path8__default.default.join(currentDir, "src/themes")) || fs__default.default.existsSync(path8__default.default.join(currentDir, "themes"))) {
+      if (packageJson.workspaces || fs__default.default.existsSync(path9__default.default.join(currentDir, "src/themes")) || fs__default.default.existsSync(path9__default.default.join(currentDir, "themes"))) {
         return currentDir;
       }
     }
-    currentDir = path8__default.default.dirname(currentDir);
+    currentDir = path9__default.default.dirname(currentDir);
   }
   return process.cwd();
 }
 function getThemesDir() {
   const root = getProjectRoot();
-  if (fs__default.default.existsSync(path8__default.default.join(root, "themes")))
-    return path8__default.default.join(root, "themes");
-  if (fs__default.default.existsSync(path8__default.default.join(root, "src/themes")))
-    return path8__default.default.join(root, "src/themes");
-  return path8__default.default.dirname(root);
+  if (fs__default.default.existsSync(path9__default.default.join(root, "themes")))
+    return path9__default.default.join(root, "themes");
+  if (fs__default.default.existsSync(path9__default.default.join(root, "src/themes")))
+    return path9__default.default.join(root, "src/themes");
+  return path9__default.default.dirname(root);
 }
 function getFeaturesDir() {
-  return path8__default.default.join(getProjectRoot(), "src/features");
+  return path9__default.default.join(getProjectRoot(), "src/features");
 }
 function isOneXProject() {
   const root = getProjectRoot();
-  return fs__default.default.existsSync(path8__default.default.join(root, "themes")) || fs__default.default.existsSync(path8__default.default.join(root, "src/themes")) || fs__default.default.existsSync(path8__default.default.join(root, "theme.config.ts")) || fs__default.default.existsSync(path8__default.default.join(root, "bundle-entry.ts"));
+  return fs__default.default.existsSync(path9__default.default.join(root, "themes")) || fs__default.default.existsSync(path9__default.default.join(root, "src/themes")) || fs__default.default.existsSync(path9__default.default.join(root, "theme.config.ts")) || fs__default.default.existsSync(path9__default.default.join(root, "bundle-entry.ts"));
 }
 function ensureOneXProject() {
   if (!isOneXProject()) {
@@ -1452,13 +1454,13 @@ function listThemes() {
     return [];
   }
   return fs__default.default.readdirSync(themesDir).filter((name) => {
-    const themePath = path8__default.default.join(themesDir, name);
-    return fs__default.default.statSync(themePath).isDirectory() && (fs__default.default.existsSync(path8__default.default.join(themePath, "theme.config.ts")) || fs__default.default.existsSync(path8__default.default.join(themePath, "bundle-entry.ts")) || fs__default.default.existsSync(path8__default.default.join(themePath, "manifest.ts")));
+    const themePath = path9__default.default.join(themesDir, name);
+    return fs__default.default.statSync(themePath).isDirectory() && (fs__default.default.existsSync(path9__default.default.join(themePath, "theme.config.ts")) || fs__default.default.existsSync(path9__default.default.join(themePath, "bundle-entry.ts")) || fs__default.default.existsSync(path9__default.default.join(themePath, "manifest.ts")));
   });
 }
 function themeExists(themeName) {
-  const themePath = path8__default.default.join(getThemesDir(), themeName);
-  return fs__default.default.existsSync(themePath) && (fs__default.default.existsSync(path8__default.default.join(themePath, "theme.config.ts")) || fs__default.default.existsSync(path8__default.default.join(themePath, "bundle-entry.ts")) || fs__default.default.existsSync(path8__default.default.join(themePath, "manifest.ts")));
+  const themePath = path9__default.default.join(getThemesDir(), themeName);
+  return fs__default.default.existsSync(themePath) && (fs__default.default.existsSync(path9__default.default.join(themePath, "theme.config.ts")) || fs__default.default.existsSync(path9__default.default.join(themePath, "bundle-entry.ts")) || fs__default.default.existsSync(path9__default.default.join(themePath, "manifest.ts")));
 }
 function detectPackageManager() {
   const userAgent = process.env.npm_config_user_agent || "";
@@ -1466,9 +1468,9 @@ function detectPackageManager() {
   if (userAgent.includes("yarn")) return "yarn";
   if (userAgent.includes("bun")) return "bun";
   const cwd = process.cwd();
-  if (fs__default.default.existsSync(path8__default.default.join(cwd, "pnpm-lock.yaml"))) return "pnpm";
-  if (fs__default.default.existsSync(path8__default.default.join(cwd, "yarn.lock"))) return "yarn";
-  if (fs__default.default.existsSync(path8__default.default.join(cwd, "bun.lockb"))) return "bun";
+  if (fs__default.default.existsSync(path9__default.default.join(cwd, "pnpm-lock.yaml"))) return "pnpm";
+  if (fs__default.default.existsSync(path9__default.default.join(cwd, "yarn.lock"))) return "yarn";
+  if (fs__default.default.existsSync(path9__default.default.join(cwd, "bun.lockb"))) return "bun";
   return "npm";
 }
 async function installDependencies(projectPath, packageManager = "npm") {
@@ -1517,6 +1519,120 @@ function getValidCategories() {
     "contact"
   ];
 }
+var AUTH_DIR = path9__default.default.join(os__default.default.homedir(), ".onexthm");
+var AUTH_FILE = path9__default.default.join(AUTH_DIR, "auth.json");
+function getApiUrl() {
+  return process.env.ONEXTHM_API_URL || process.env.NEXT_PUBLIC_API_URL || "https://platform-dev.onexeos.com";
+}
+async function saveAuthTokens(tokens) {
+  await fs__default.default.ensureDir(AUTH_DIR);
+  const key = getMachineKey();
+  const data = JSON.stringify(tokens);
+  const encrypted = encrypt(data, key);
+  await fs__default.default.writeFile(AUTH_FILE, encrypted, "utf-8");
+}
+function loadAuthTokens() {
+  try {
+    if (!fs__default.default.existsSync(AUTH_FILE)) return null;
+    const encrypted = fs__default.default.readFileSync(AUTH_FILE, "utf-8");
+    const key = getMachineKey();
+    const data = decrypt(encrypted, key);
+    return JSON.parse(data);
+  } catch {
+    return null;
+  }
+}
+async function clearAuthTokens() {
+  try {
+    await fs__default.default.remove(AUTH_FILE);
+  } catch {
+  }
+}
+function isTokenExpired(tokens) {
+  return Date.now() / 1e3 > tokens.expiresAt - 60;
+}
+async function getValidTokens() {
+  const tokens = loadAuthTokens();
+  if (!tokens) return null;
+  if (!isTokenExpired(tokens)) return tokens;
+  try {
+    const apiUrl = getApiUrl();
+    const response = await fetch(`${apiUrl}/auth/refresh`, {
+      method: "POST",
+      headers: { "Content-Type": "application/json" },
+      body: JSON.stringify({ refresh_token: tokens.refreshToken })
+    });
+    if (!response.ok) {
+      await clearAuthTokens();
+      return null;
+    }
+    const data = await response.json();
+    const body = data.statusCode ? data.body : data;
+    const refreshed = {
+      ...tokens,
+      accessToken: body.AccessToken || tokens.accessToken,
+      idToken: body.IdToken || tokens.idToken,
+      expiresAt: Math.floor(Date.now() / 1e3) + (body.ExpiresIn || 3600)
+    };
+    await saveAuthTokens(refreshed);
+    return refreshed;
+  } catch {
+    await clearAuthTokens();
+    return null;
+  }
+}
+async function authenticatedFetch(url, init) {
+  const tokens = await getValidTokens();
+  if (!tokens) {
+    throw new Error("Not logged in. Run: onexthm login");
+  }
+  const headers = new Headers(init?.headers);
+  headers.set("Authorization", `Bearer ${tokens.idToken}`);
+  headers.set("Content-Type", "application/json");
+  return fetch(url, { ...init, headers });
+}
+function getMachineKey() {
+  let seed;
+  if (process.platform === "darwin") {
+    seed = `onexthm:${os__default.default.hostname()}:${os__default.default.userInfo().username}`;
+  } else if (process.platform === "linux") {
+    try {
+      seed = `onexthm:${fs__default.default.readFileSync("/etc/machine-id", "utf-8").trim()}`;
+    } catch {
+      seed = `onexthm:${os__default.default.hostname()}:${os__default.default.userInfo().username}`;
+    }
+  } else {
+    seed = `onexthm:${os__default.default.hostname()}:${os__default.default.userInfo().username}`;
+  }
+  return crypto__default.default.createHash("sha256").update(seed).digest();
+}
+function encrypt(text, key) {
+  const iv = crypto__default.default.randomBytes(16);
+  const cipher = crypto__default.default.createCipheriv("aes-256-gcm", key, iv);
+  let encrypted = cipher.update(text, "utf-8", "hex");
+  encrypted += cipher.final("hex");
+  const tag = cipher.getAuthTag();
+  return `${iv.toString("hex")}:${tag.toString("hex")}:${encrypted}`;
+}
+function decrypt(text, key) {
+  const [ivHex, tagHex, encrypted] = text.split(":");
+  const iv = Buffer.from(ivHex, "hex");
+  const tag = Buffer.from(tagHex, "hex");
+  const decipher = crypto__default.default.createDecipheriv("aes-256-gcm", key, iv);
+  decipher.setAuthTag(tag);
+  let decrypted = decipher.update(encrypted, "hex", "utf-8");
+  decrypted += decipher.final("utf-8");
+  return decrypted;
+}
+function parseJwtClaims(idToken) {
+  try {
+    const payload = idToken.split(".")[1];
+    const decoded = Buffer.from(payload, "base64url").toString("utf-8");
+    return JSON.parse(decoded);
+  } catch {
+    return {};
+  }
+}
 
 // src/commands/init.ts
 async function initCommand(projectName, options = {}) {
@@ -1534,7 +1650,7 @@ async function initCommand(projectName, options = {}) {
           if (!validateThemeName(kebabName)) {
             return "Invalid project name. Use lowercase letters, numbers, and hyphens only.";
           }
-          if (fs2__default.default.existsSync(path8__default.default.join(process.cwd(), kebabName))) {
+          if (fs3__default.default.existsSync(path9__default.default.join(process.cwd(), kebabName))) {
             return `Directory "${kebabName}" already exists`;
           }
           return true;
@@ -1545,11 +1661,46 @@ async function initCommand(projectName, options = {}) {
   } else {
     name = toKebabCase(projectName);
   }
-  const projectPath = path8__default.default.join(process.cwd(), name);
-  if (fs2__default.default.existsSync(projectPath)) {
+  const projectPath = path9__default.default.join(process.cwd(), name);
+  if (fs3__default.default.existsSync(projectPath)) {
     logger.error(`Directory "${name}" already exists.`);
     process.exit(1);
   }
+  if (!options.yes) {
+    try {
+      const apiUrl = getApiUrl();
+      const controller = new AbortController();
+      const timeout = setTimeout(() => controller.abort(), 3e3);
+      const response = await fetch(
+        `${apiUrl}/website-api/themes/${encodeURIComponent(name)}/exists`,
+        { signal: controller.signal }
+      );
+      clearTimeout(timeout);
+      if (response.ok) {
+        const data2 = await response.json();
+        const body = data2.statusCode ? data2.body : data2;
+        if (body.exists && body.owner === "other") {
+          logger.warning(
+            `Theme ID "${name}" is already registered by another developer.
+  You can still create this locally, but publishing will fail.
+  Consider using a different name.`
+          );
+          const { proceed } = await inquirer__default.default.prompt([
+            {
+              type: "confirm",
+              name: "proceed",
+              message: "Continue anyway?",
+              default: false
+            }
+          ]);
+          if (!proceed) {
+            process.exit(0);
+          }
+        }
+      }
+    } catch {
+    }
+  }
   let displayName;
   let description;
   let author;
@@ -1617,7 +1768,7 @@ async function initCommand(projectName, options = {}) {
   }
   logger.startSpinner("Creating project structure...");
   try {
-    fs2__default.default.mkdirSync(projectPath, { recursive: true });
+    fs3__default.default.mkdirSync(projectPath, { recursive: true });
     await copyTemplate(template, projectPath, data);
     await renameThemeInFiles(
       projectPath,
@@ -1626,9 +1777,9 @@ async function initCommand(projectName, options = {}) {
       description,
       author
     );
-    const mcpJsonPath = path8__default.default.join(projectPath, ".mcp.json");
-    if (fs2__default.default.existsSync(mcpJsonPath)) {
-      let mcpContent = fs2__default.default.readFileSync(mcpJsonPath, "utf-8");
+    const mcpJsonPath = path9__default.default.join(projectPath, ".mcp.json");
+    if (fs3__default.default.existsSync(mcpJsonPath)) {
+      let mcpContent = fs3__default.default.readFileSync(mcpJsonPath, "utf-8");
       if (figmaApiKey) {
         mcpContent = mcpContent.replace("__FIGMA_API_KEY__", figmaApiKey);
       } else {
@@ -1639,7 +1790,7 @@ async function initCommand(projectName, options = {}) {
         } catch {
         }
       }
-      fs2__default.default.writeFileSync(mcpJsonPath, mcpContent, "utf-8");
+      fs3__default.default.writeFileSync(mcpJsonPath, mcpContent, "utf-8");
     }
     logger.stopSpinner(true, "Project structure created!");
     if (options.git) {
@@ -1699,16 +1850,16 @@ async function initCommand(projectName, options = {}) {
     logger.error(
       error instanceof Error ? error.message : "Unknown error occurred"
     );
-    if (fs2__default.default.existsSync(projectPath)) {
-      fs2__default.default.rmSync(projectPath, { recursive: true, force: true });
+    if (fs3__default.default.existsSync(projectPath)) {
+      fs3__default.default.rmSync(projectPath, { recursive: true, force: true });
     }
     process.exit(1);
   }
 }
 async function renameThemeInFiles(projectPath, themeName, displayName, description, author) {
-  const configPath = path8__default.default.join(projectPath, "theme.config.ts");
-  if (fs2__default.default.existsSync(configPath)) {
-    let content = fs2__default.default.readFileSync(configPath, "utf-8");
+  const configPath = path9__default.default.join(projectPath, "theme.config.ts");
+  if (fs3__default.default.existsSync(configPath)) {
+    let content = fs3__default.default.readFileSync(configPath, "utf-8");
     content = content.replace(
       /name: "My Simple Theme"/,
       `name: "${displayName}"`
@@ -1717,11 +1868,11 @@ async function renameThemeInFiles(projectPath, themeName, displayName, descripti
       /description: ".*?"/,
       `description: "${description}"`
     );
-    fs2__default.default.writeFileSync(configPath, content, "utf-8");
+    fs3__default.default.writeFileSync(configPath, content, "utf-8");
   }
-  const pkgPath = path8__default.default.join(projectPath, "package.json");
-  if (fs2__default.default.existsSync(pkgPath)) {
-    let content = fs2__default.default.readFileSync(pkgPath, "utf-8");
+  const pkgPath = path9__default.default.join(projectPath, "package.json");
+  if (fs3__default.default.existsSync(pkgPath)) {
+    let content = fs3__default.default.readFileSync(pkgPath, "utf-8");
     content = content.replace(
       /@onex-themes\/my-simple/g,
       `@onex-themes/${themeName}`
@@ -1730,7 +1881,7 @@ async function renameThemeInFiles(projectPath, themeName, displayName, descripti
       /"description": ".*?"/,
       `"description": "${description}"`
     );
-    fs2__default.default.writeFileSync(pkgPath, content, "utf-8");
+    fs3__default.default.writeFileSync(pkgPath, content, "utf-8");
   }
 }
 
@@ -1741,10 +1892,10 @@ async function createSectionCommand(name, options) {
   ensureOneXProject();
   if (!options.theme) {
     const isStandaloneTheme = ["theme.config.ts", "bundle-entry.ts"].some(
-      (f) => fs__default.default.existsSync(path8__default.default.join(process.cwd(), f))
+      (f) => fs__default.default.existsSync(path9__default.default.join(process.cwd(), f))
     );
     if (isStandaloneTheme) {
-      options.theme = path8__default.default.basename(process.cwd());
+      options.theme = path9__default.default.basename(process.cwd());
     }
   }
   const sectionName = toKebabCase(name);
@@ -1807,35 +1958,35 @@ async function createSectionCommand(name, options) {
   };
   logger.startSpinner("Creating section files...");
   try {
-    const themePath = path8__default.default.join(getThemesDir(), themeName);
-    const sectionPath = path8__default.default.join(themePath, "sections", sectionName);
+    const themePath = path9__default.default.join(getThemesDir(), themeName);
+    const sectionPath = path9__default.default.join(themePath, "sections", sectionName);
     const schemaContent = generateSectionSchema(data);
     await writeFile(
-      path8__default.default.join(sectionPath, `${sectionName}.schema.ts`),
+      path9__default.default.join(sectionPath, `${sectionName}.schema.ts`),
       schemaContent
     );
     if (createTemplate) {
       const templateContent = generateSectionTemplate(data);
       await writeFile(
-        path8__default.default.join(sectionPath, `${sectionName}-default.tsx`),
+        path9__default.default.join(sectionPath, `${sectionName}-default.tsx`),
         templateContent
       );
     }
     const indexContent = generateSectionIndex(data, createTemplate);
-    await writeFile(path8__default.default.join(sectionPath, "index.ts"), indexContent);
+    await writeFile(path9__default.default.join(sectionPath, "index.ts"), indexContent);
     logger.stopSpinner(true, "Section files created successfully!");
     logger.newLine();
     logger.section("Next steps:");
     logger.log(
-      `  1. Edit schema: ${path8__default.default.relative(process.cwd(), path8__default.default.join(sectionPath, `${sectionName}.schema.ts`))}`
+      `  1. Edit schema: ${path9__default.default.relative(process.cwd(), path9__default.default.join(sectionPath, `${sectionName}.schema.ts`))}`
     );
     if (createTemplate) {
       logger.log(
-        `  2. Edit template: ${path8__default.default.relative(process.cwd(), path8__default.default.join(sectionPath, `${sectionName}-default.tsx`))}`
+        `  2. Edit template: ${path9__default.default.relative(process.cwd(), path9__default.default.join(sectionPath, `${sectionName}-default.tsx`))}`
       );
     }
     logger.log(
-      `  3. Add to theme manifest: ${path8__default.default.relative(process.cwd(), path8__default.default.join(themePath, "manifest.ts"))}`
+      `  3. Add to theme manifest: ${path9__default.default.relative(process.cwd(), path9__default.default.join(themePath, "manifest.ts"))}`
     );
     logger.newLine();
     logger.success("Section created successfully!");
@@ -1983,10 +2134,10 @@ async function createBlockCommand(name, options) {
   ensureOneXProject();
   if (!options.theme) {
     const isStandaloneTheme = ["theme.config.ts", "bundle-entry.ts"].some(
-      (f) => fs__default.default.existsSync(path8__default.default.join(process.cwd(), f))
+      (f) => fs__default.default.existsSync(path9__default.default.join(process.cwd(), f))
     );
     if (isStandaloneTheme) {
-      options.theme = path8__default.default.basename(process.cwd());
+      options.theme = path9__default.default.basename(process.cwd());
     }
   }
   const blockName = toKebabCase(name);
@@ -2061,24 +2212,24 @@ async function createBlockCommand(name, options) {
   };
   logger.startSpinner("Creating block files...");
   try {
-    const blockPath = scope === "shared" ? path8__default.default.join(getFeaturesDir(), "blocks", blockName) : path8__default.default.join(getThemesDir(), themeName, "blocks", blockName);
+    const blockPath = scope === "shared" ? path9__default.default.join(getFeaturesDir(), "blocks", blockName) : path9__default.default.join(getThemesDir(), themeName, "blocks", blockName);
     const schemaContent = generateBlockSchema(data);
     await writeFile(
-      path8__default.default.join(blockPath, `${blockName}.schema.ts`),
+      path9__default.default.join(blockPath, `${blockName}.schema.ts`),
       schemaContent
     );
     const componentContent = generateBlockComponent(data);
-    await writeFile(path8__default.default.join(blockPath, `${blockName}.tsx`), componentContent);
+    await writeFile(path9__default.default.join(blockPath, `${blockName}.tsx`), componentContent);
     const indexContent = generateBlockIndex(data);
-    await writeFile(path8__default.default.join(blockPath, "index.ts"), indexContent);
+    await writeFile(path9__default.default.join(blockPath, "index.ts"), indexContent);
     logger.stopSpinner(true, "Block files created successfully!");
     logger.newLine();
     logger.section("Next steps:");
     logger.log(
-      `  1. Edit schema: ${path8__default.default.relative(process.cwd(), path8__default.default.join(blockPath, `${blockName}.schema.ts`))}`
+      `  1. Edit schema: ${path9__default.default.relative(process.cwd(), path9__default.default.join(blockPath, `${blockName}.schema.ts`))}`
     );
     logger.log(
-      `  2. Edit component: ${path8__default.default.relative(process.cwd(), path8__default.default.join(blockPath, `${blockName}.tsx`))}`
+      `  2. Edit component: ${path9__default.default.relative(process.cwd(), path9__default.default.join(blockPath, `${blockName}.tsx`))}`
     );
     logger.log(
       `  3. Register in block registry: src/lib/registry/block-registry.ts`
@@ -2256,31 +2407,31 @@ async function createComponentCommand(name, options) {
   };
   logger.startSpinner("Creating component files...");
   try {
-    const componentPath = path8__default.default.join(
+    const componentPath = path9__default.default.join(
       getFeaturesDir(),
       "components",
       componentName
     );
     const schemaContent = generateComponentSchema(data);
     await writeFile(
-      path8__default.default.join(componentPath, `${componentName}.schema.ts`),
+      path9__default.default.join(componentPath, `${componentName}.schema.ts`),
       schemaContent
     );
     const componentContent = generateComponent(data);
     await writeFile(
-      path8__default.default.join(componentPath, `${componentName}.tsx`),
+      path9__default.default.join(componentPath, `${componentName}.tsx`),
       componentContent
     );
     const indexContent = generateComponentIndex(data);
-    await writeFile(path8__default.default.join(componentPath, "index.ts"), indexContent);
+    await writeFile(path9__default.default.join(componentPath, "index.ts"), indexContent);
     logger.stopSpinner(true, "Component files created successfully!");
     logger.newLine();
     logger.section("Next steps:");
     logger.log(
-      `  1. Edit schema: ${path8__default.default.relative(process.cwd(), path8__default.default.join(componentPath, `${componentName}.schema.ts`))}`
+      `  1. Edit schema: ${path9__default.default.relative(process.cwd(), path9__default.default.join(componentPath, `${componentName}.schema.ts`))}`
     );
     logger.log(
-      `  2. Edit component: ${path8__default.default.relative(process.cwd(), path8__default.default.join(componentPath, `${componentName}.tsx`))}`
+      `  2. Edit component: ${path9__default.default.relative(process.cwd(), path9__default.default.join(componentPath, `${componentName}.tsx`))}`
     );
     logger.log(
       `  3. Register in component registry: src/lib/registry/component-registry.ts`
@@ -2437,13 +2588,13 @@ async function listSections(themeFilter) {
     return;
   }
   for (const theme of themes) {
-    const sectionsDir = path8__default.default.join(getThemesDir(), theme, "sections");
+    const sectionsDir = path9__default.default.join(getThemesDir(), theme, "sections");
     if (!fs__default.default.existsSync(sectionsDir)) {
       continue;
     }
     const sections = fs__default.default.readdirSync(sectionsDir).filter((name) => {
-      const sectionPath = path8__default.default.join(sectionsDir, name);
-      return fs__default.default.statSync(sectionPath).isDirectory() && fs__default.default.existsSync(path8__default.default.join(sectionPath, "index.ts"));
+      const sectionPath = path9__default.default.join(sectionsDir, name);
+      return fs__default.default.statSync(sectionPath).isDirectory() && fs__default.default.existsSync(path9__default.default.join(sectionPath, "index.ts"));
     });
     if (sections.length > 0) {
       logger.log(chalk4__default.default.cyan(`
@@ -2457,11 +2608,11 @@ async function listSections(themeFilter) {
 }
 async function listBlocks(themeFilter) {
   logger.section("\u{1F9F1} Blocks");
-  const sharedBlocksDir = path8__default.default.join(getFeaturesDir(), "blocks");
+  const sharedBlocksDir = path9__default.default.join(getFeaturesDir(), "blocks");
   if (fs__default.default.existsSync(sharedBlocksDir)) {
     const sharedBlocks = fs__default.default.readdirSync(sharedBlocksDir).filter((name) => {
-      const blockPath = path8__default.default.join(sharedBlocksDir, name);
-      return fs__default.default.statSync(blockPath).isDirectory() && fs__default.default.existsSync(path8__default.default.join(blockPath, "index.ts"));
+      const blockPath = path9__default.default.join(sharedBlocksDir, name);
+      return fs__default.default.statSync(blockPath).isDirectory() && fs__default.default.existsSync(path9__default.default.join(blockPath, "index.ts"));
     });
     if (sharedBlocks.length > 0) {
       logger.log(chalk4__default.default.cyan("\n  Shared:"));
@@ -2472,13 +2623,13 @@ async function listBlocks(themeFilter) {
   }
   const themes = themeFilter ? [themeFilter] : listThemes();
   for (const theme of themes) {
-    const blocksDir = path8__default.default.join(getThemesDir(), theme, "blocks");
+    const blocksDir = path9__default.default.join(getThemesDir(), theme, "blocks");
     if (!fs__default.default.existsSync(blocksDir)) {
       continue;
     }
     const blocks = fs__default.default.readdirSync(blocksDir).filter((name) => {
-      const blockPath = path8__default.default.join(blocksDir, name);
-      return fs__default.default.statSync(blockPath).isDirectory() && fs__default.default.existsSync(path8__default.default.join(blockPath, "index.ts"));
+      const blockPath = path9__default.default.join(blocksDir, name);
+      return fs__default.default.statSync(blockPath).isDirectory() && fs__default.default.existsSync(path9__default.default.join(blockPath, "index.ts"));
     });
     if (blocks.length > 0) {
       logger.log(chalk4__default.default.cyan(`
@@ -2492,14 +2643,14 @@ async function listBlocks(themeFilter) {
 }
 async function listComponents() {
   logger.section("\u2699\uFE0F  Components");
-  const componentsDir = path8__default.default.join(getFeaturesDir(), "components");
+  const componentsDir = path9__default.default.join(getFeaturesDir(), "components");
   if (!fs__default.default.existsSync(componentsDir)) {
     logger.warning("No components directory found");
     return;
   }
   const components = fs__default.default.readdirSync(componentsDir).filter((name) => {
-    const componentPath = path8__default.default.join(componentsDir, name);
-    return fs__default.default.statSync(componentPath).isDirectory() && fs__default.default.existsSync(path8__default.default.join(componentPath, "index.ts"));
+    const componentPath = path9__default.default.join(componentsDir, name);
+    return fs__default.default.statSync(componentPath).isDirectory() && fs__default.default.existsSync(path9__default.default.join(componentPath, "index.ts"));
   });
   if (components.length === 0) {
     logger.warning("No components found");
@@ -2520,11 +2671,11 @@ async function listThemesInfo() {
   }
   logger.log("");
   for (const theme of themes) {
-    const themeDir = path8__default.default.join(getThemesDir(), theme);
+    const themeDir = path9__default.default.join(getThemesDir(), theme);
     const candidates = ["theme.config.ts", "bundle-entry.ts", "manifest.ts"];
     let manifestContent = "";
     for (const candidate of candidates) {
-      const candidatePath = path8__default.default.join(themeDir, candidate);
+      const candidatePath = path9__default.default.join(themeDir, candidate);
       if (fs__default.default.existsSync(candidatePath)) {
         manifestContent = fs__default.default.readFileSync(candidatePath, "utf-8");
         break;
@@ -2562,9 +2713,9 @@ async function validateCommand(options) {
       "theme.config.ts",
       "bundle-entry.ts",
       "manifest.ts"
-    ].some((f) => fs__default.default.existsSync(path8__default.default.join(process.cwd(), f)));
+    ].some((f) => fs__default.default.existsSync(path9__default.default.join(process.cwd(), f)));
     if (isThemeDir) {
-      themeToValidate = path8__default.default.basename(process.cwd());
+      themeToValidate = path9__default.default.basename(process.cwd());
       logger.info(`Validating current theme: ${themeToValidate}`);
     } else {
       logger.error(
@@ -2573,11 +2724,11 @@ async function validateCommand(options) {
       process.exit(1);
     }
   }
-  const themePath = path8__default.default.join(getThemesDir(), themeToValidate);
+  const themePath = path9__default.default.join(getThemesDir(), themeToValidate);
   logger.startSpinner("Running validation checks...");
   const entryFiles = ["manifest.ts", "theme.config.ts", "bundle-entry.ts"];
   const foundEntry = entryFiles.find(
-    (f) => fs__default.default.existsSync(path8__default.default.join(themePath, f))
+    (f) => fs__default.default.existsSync(path9__default.default.join(themePath, f))
   );
   if (!foundEntry) {
     issues.push({
@@ -2587,7 +2738,7 @@ async function validateCommand(options) {
     });
   } else if (foundEntry === "manifest.ts") {
     const manifestContent = fs__default.default.readFileSync(
-      path8__default.default.join(themePath, foundEntry),
+      path9__default.default.join(themePath, foundEntry),
       "utf-8"
     );
     if (!manifestContent.includes("export const") && !manifestContent.includes("export default") && !manifestContent.includes("export interface")) {
@@ -2598,7 +2749,7 @@ async function validateCommand(options) {
       });
     }
   }
-  const configPath = path8__default.default.join(themePath, "theme.config.ts");
+  const configPath = path9__default.default.join(themePath, "theme.config.ts");
   if (!fs__default.default.existsSync(configPath)) {
     issues.push({
       type: "warning",
@@ -2606,7 +2757,7 @@ async function validateCommand(options) {
       message: "Theme config file not found (recommended)"
     });
   }
-  const indexPath = path8__default.default.join(themePath, "index.ts");
+  const indexPath = path9__default.default.join(themePath, "index.ts");
   if (!fs__default.default.existsSync(indexPath)) {
     issues.push({
       type: "warning",
@@ -2614,7 +2765,7 @@ async function validateCommand(options) {
       message: "Index file not found (recommended)"
     });
   }
-  const sectionsDir = path8__default.default.join(themePath, "sections");
+  const sectionsDir = path9__default.default.join(themePath, "sections");
   if (!fs__default.default.existsSync(sectionsDir)) {
     issues.push({
       type: "warning",
@@ -2623,16 +2774,16 @@ async function validateCommand(options) {
     });
   } else {
     const sections = fs__default.default.readdirSync(sectionsDir).filter(
-      (name) => fs__default.default.statSync(path8__default.default.join(sectionsDir, name)).isDirectory()
+      (name) => fs__default.default.statSync(path9__default.default.join(sectionsDir, name)).isDirectory()
     );
     for (const sectionName of sections) {
-      const sectionPath = path8__default.default.join(sectionsDir, sectionName);
-      const schemaFile = path8__default.default.join(sectionPath, `${sectionName}.schema.ts`);
-      const defaultTemplate = path8__default.default.join(
+      const sectionPath = path9__default.default.join(sectionsDir, sectionName);
+      const schemaFile = path9__default.default.join(sectionPath, `${sectionName}.schema.ts`);
+      const defaultTemplate = path9__default.default.join(
         sectionPath,
         `${sectionName}-default.tsx`
       );
-      const indexFile = path8__default.default.join(sectionPath, "index.ts");
+      const indexFile = path9__default.default.join(sectionPath, "index.ts");
       if (!fs__default.default.existsSync(schemaFile)) {
         issues.push({
           type: "error",
@@ -2656,14 +2807,14 @@ async function validateCommand(options) {
       }
     }
   }
-  const blocksDir = path8__default.default.join(themePath, "blocks");
+  const blocksDir = path9__default.default.join(themePath, "blocks");
   if (fs__default.default.existsSync(blocksDir)) {
-    const blocks = fs__default.default.readdirSync(blocksDir).filter((name) => fs__default.default.statSync(path8__default.default.join(blocksDir, name)).isDirectory());
+    const blocks = fs__default.default.readdirSync(blocksDir).filter((name) => fs__default.default.statSync(path9__default.default.join(blocksDir, name)).isDirectory());
     for (const blockName of blocks) {
-      const blockPath = path8__default.default.join(blocksDir, blockName);
-      const schemaFile = path8__default.default.join(blockPath, `${blockName}.schema.ts`);
-      const componentFile = path8__default.default.join(blockPath, `${blockName}.tsx`);
-      const indexFile = path8__default.default.join(blockPath, "index.ts");
+      const blockPath = path9__default.default.join(blocksDir, blockName);
+      const schemaFile = path9__default.default.join(blockPath, `${blockName}.schema.ts`);
+      const componentFile = path9__default.default.join(blockPath, `${blockName}.tsx`);
+      const indexFile = path9__default.default.join(blockPath, "index.ts");
       if (!fs__default.default.existsSync(schemaFile)) {
         issues.push({
           type: "error",
@@ -2689,13 +2840,13 @@ async function validateCommand(options) {
   }
   if (fs__default.default.existsSync(sectionsDir)) {
     const sections = fs__default.default.readdirSync(sectionsDir).filter(
-      (name) => fs__default.default.statSync(path8__default.default.join(sectionsDir, name)).isDirectory()
+      (name) => fs__default.default.statSync(path9__default.default.join(sectionsDir, name)).isDirectory()
     );
     for (const sectionName of sections) {
-      const sectionPath = path8__default.default.join(sectionsDir, sectionName);
+      const sectionPath = path9__default.default.join(sectionsDir, sectionName);
       const tsxFiles = fs__default.default.readdirSync(sectionPath).filter((f) => f.endsWith(".tsx") && !f.endsWith(".schema.ts"));
       for (const tsxFile of tsxFiles) {
-        const filePath = path8__default.default.join(sectionPath, tsxFile);
+        const filePath = path9__default.default.join(sectionPath, tsxFile);
         const content = fs__default.default.readFileSync(filePath, "utf-8");
         const relPath = `sections/${sectionName}/${tsxFile}`;
         if (!content.includes('"use client"') && !content.includes("'use client'")) {
@@ -2743,23 +2894,46 @@ async function validateCommand(options) {
       }
     }
   }
-  const registryPath = path8__default.default.join(themePath, "sections-registry.ts");
-  const bundleEntryPath = path8__default.default.join(themePath, "bundle-entry.ts");
+  const registryPath = path9__default.default.join(themePath, "sections-registry.ts");
+  const bundleEntryPath = path9__default.default.join(themePath, "bundle-entry.ts");
   const registryContent = fs__default.default.existsSync(registryPath) ? fs__default.default.readFileSync(registryPath, "utf-8") : fs__default.default.existsSync(bundleEntryPath) ? fs__default.default.readFileSync(bundleEntryPath, "utf-8") : "";
   if (fs__default.default.existsSync(sectionsDir) && registryContent) {
     const sections = fs__default.default.readdirSync(sectionsDir).filter(
-      (name) => fs__default.default.statSync(path8__default.default.join(sectionsDir, name)).isDirectory()
+      (name) => fs__default.default.statSync(path9__default.default.join(sectionsDir, name)).isDirectory()
     );
     for (const sectionName of sections) {
       if (!registryContent.includes(`sections/${sectionName}`) && !registryContent.includes(`"${sectionName}"`)) {
         issues.push({
-          type: "warning",
+          type: "error",
           file: `sections/${sectionName}/`,
-          message: "Section not found in sections-registry.ts or bundle-entry.ts \u2014 may not be included in build"
+          message: "Section not exported in sections-registry.ts or bundle-entry.ts \u2014 will not be included in build"
         });
       }
     }
   }
+  if (fs__default.default.existsSync(sectionsDir)) {
+    const schemaTypes = await loadSchemaTypes(themePath, sectionsDir);
+    for (const { folderName, schemaType } of schemaTypes) {
+      if (schemaType && schemaType !== folderName) {
+        issues.push({
+          type: "error",
+          file: `sections/${folderName}/${folderName}.schema.ts`,
+          message: `Schema type "${schemaType}" doesn't match folder name "${folderName}". Rename folder to "${schemaType}/" or change schema type to "${folderName}".`
+        });
+      }
+    }
+    const pagesDir = path9__default.default.join(themePath, "pages");
+    if (fs__default.default.existsSync(pagesDir)) {
+      const allSchemaTypeSet = new Set(
+        schemaTypes.map((s) => s.schemaType || s.folderName)
+      );
+      const pageIssues = await validatePageSectionTypes(
+        pagesDir,
+        allSchemaTypeSet
+      );
+      issues.push(...pageIssues);
+    }
+  }
   logger.stopSpinner(true, "Validation complete");
   const errors = issues.filter((i) => i.type === "error");
   const warnings = issues.filter((i) => i.type === "warning");
@@ -2798,6 +2972,116 @@ async function validateCommand(options) {
     }
   }
 }
+async function loadSchemaTypes(themePath, sectionsDir) {
+  const results = [];
+  const sections = fs__default.default.readdirSync(sectionsDir).filter((name) => fs__default.default.statSync(path9__default.default.join(sectionsDir, name)).isDirectory());
+  for (const sectionName of sections) {
+    const schemaFile = path9__default.default.join(
+      sectionsDir,
+      sectionName,
+      `${sectionName}.schema.ts`
+    );
+    if (!fs__default.default.existsSync(schemaFile)) {
+      results.push({ folderName: sectionName, schemaType: null });
+      continue;
+    }
+    const content = fs__default.default.readFileSync(schemaFile, "utf-8");
+    let schemaType = null;
+    const schemaExportMatch = content.match(
+      /:\s*SectionSchema\s*=\s*\{[\s\S]*?\btype:\s*["']([^"']+)["']/
+    );
+    if (schemaExportMatch) {
+      schemaType = schemaExportMatch[1];
+    } else {
+      const allTypeMatches = [
+        ...content.matchAll(/\btype:\s*["']([^"']+)["']/g)
+      ];
+      for (const m of allTypeMatches) {
+        if (!FIELD_TYPES.has(m[1])) {
+          schemaType = m[1];
+          break;
+        }
+      }
+    }
+    results.push({
+      folderName: sectionName,
+      schemaType
+    });
+  }
+  return results;
+}
+async function validatePageSectionTypes(pagesDir, validTypes) {
+  const issues = [];
+  const files = fs__default.default.readdirSync(pagesDir).filter((f) => f.match(/\.(ts|js)$/));
+  for (const file of files) {
+    const content = fs__default.default.readFileSync(path9__default.default.join(pagesDir, file), "utf-8");
+    const pageName = file.replace(/\.(ts|js)$/, "");
+    const sectionsMatch = content.match(/\bsections:\s*\[/);
+    if (!sectionsMatch || sectionsMatch.index === void 0) continue;
+    const startIdx = sectionsMatch.index + sectionsMatch[0].length;
+    let depth = 1;
+    let endIdx = startIdx;
+    for (let i = startIdx; i < content.length && depth > 0; i++) {
+      if (content[i] === "[") depth++;
+      else if (content[i] === "]") depth--;
+      endIdx = i;
+    }
+    const sectionsBlock = content.slice(startIdx, endIdx);
+    const typeMatches = sectionsBlock.matchAll(/\btype:\s*["']([^"']+)["']/g);
+    for (const match of typeMatches) {
+      const sectionType = match[1];
+      if (!validTypes.has(sectionType)) {
+        issues.push({
+          type: "error",
+          file: `pages/${file}`,
+          message: `Page "${pageName}" uses section type "${sectionType}" which doesn't exist in sections/`
+        });
+      }
+    }
+  }
+  return issues;
+}
+var FIELD_TYPES = /* @__PURE__ */ new Set([
+  "text",
+  "textarea",
+  "richtext",
+  "number",
+  "range",
+  "toggle",
+  "switch",
+  "select",
+  "radio",
+  "checkbox",
+  "color",
+  "image",
+  "video",
+  "url",
+  "link",
+  "icon",
+  "date",
+  "datetime",
+  "collection",
+  "product",
+  "blog",
+  "page",
+  "html",
+  "code",
+  "json",
+  "array",
+  "object",
+  "group",
+  "section",
+  "boolean",
+  "color_token",
+  "color_background",
+  "image_picker",
+  "video_url",
+  "font",
+  "font_picker",
+  "text_alignment",
+  "inline_richtext",
+  "repeater"
+]);
 
 // src/commands/build.ts
 init_logger();
@@ -2808,14 +3092,14 @@ async function buildCommand(options) {
   if (options.theme) {
     themeName = options.theme;
     try {
-      const workspaceThemePath = path8__default.default.join(getThemesDir(), themeName);
+      const workspaceThemePath = path9__default.default.join(getThemesDir(), themeName);
       if (fs__default.default.existsSync(workspaceThemePath)) {
         themePath = workspaceThemePath;
       } else {
-        themePath = path8__default.default.join(process.cwd(), themeName);
+        themePath = path9__default.default.join(process.cwd(), themeName);
       }
     } catch {
-      themePath = path8__default.default.join(process.cwd(), themeName);
+      themePath = path9__default.default.join(process.cwd(), themeName);
     }
     if (!fs__default.default.existsSync(themePath)) {
       logger.error(`Theme "${themeName}" not found.`);
@@ -2826,10 +3110,10 @@ async function buildCommand(options) {
       "theme.config.ts",
       "bundle-entry.ts",
       "manifest.ts"
-    ].some((f) => fs__default.default.existsSync(path8__default.default.join(process.cwd(), f)));
+    ].some((f) => fs__default.default.existsSync(path9__default.default.join(process.cwd(), f)));
     if (isThemeDir) {
       themePath = process.cwd();
-      themeName = path8__default.default.basename(themePath);
+      themeName = path9__default.default.basename(themePath);
       logger.info(`Building current theme: ${themeName}`);
     } else {
       logger.error(
@@ -2838,7 +3122,7 @@ async function buildCommand(options) {
       process.exit(1);
     }
   }
-  const packageJsonPath = path8__default.default.join(themePath, "package.json");
+  const packageJsonPath = path9__default.default.join(themePath, "package.json");
   const hasPkgJson = fs__default.default.existsSync(packageJsonPath);
   if (!hasPkgJson) {
     logger.warning(
@@ -2894,9 +3178,9 @@ async function buildCommand(options) {
     logger.success("\u2713 Theme built successfully!");
     logger.newLine();
     logger.info(`Theme: ${themeName}`);
-    const distPath = path8__default.default.join(themePath, "dist");
+    const distPath = path9__default.default.join(themePath, "dist");
     if (fs__default.default.existsSync(distPath)) {
-      logger.log(`Output: ${path8__default.default.relative(process.cwd(), distPath)}`);
+      logger.log(`Output: ${path9__default.default.relative(process.cwd(), distPath)}`);
       const files = fs__default.default.readdirSync(distPath);
       logger.log(`Files: ${files.length}`);
     }
@@ -2952,7 +3236,7 @@ async function packageCommand(options) {
   let themeName;
   if (options.theme) {
     themeName = options.theme;
-    themePath = path8__default.default.join(getThemesDir(), themeName);
+    themePath = path9__default.default.join(getThemesDir(), themeName);
     if (!fs__default.default.existsSync(themePath)) {
       logger.error(`Theme "${themeName}" not found.`);
       process.exit(1);
@@ -2962,10 +3246,10 @@ async function packageCommand(options) {
       "theme.config.ts",
       "bundle-entry.ts",
       "manifest.ts"
-    ].some((f) => fs__default.default.existsSync(path8__default.default.join(process.cwd(), f)));
+    ].some((f) => fs__default.default.existsSync(path9__default.default.join(process.cwd(), f)));
     if (isThemeDir) {
       themePath = process.cwd();
-      themeName = path8__default.default.basename(themePath);
+      themeName = path9__default.default.basename(themePath);
       logger.info(`Packaging current theme: ${themeName}`);
     } else {
       logger.error(
@@ -2974,7 +3258,7 @@ async function packageCommand(options) {
       process.exit(1);
     }
   }
-  const packageJsonPath = path8__default.default.join(themePath, "package.json");
+  const packageJsonPath = path9__default.default.join(themePath, "package.json");
   let version2 = "1.0.0";
   if (fs__default.default.existsSync(packageJsonPath)) {
     const packageJson = await fs__default.default.readJson(packageJsonPath);
@@ -2984,7 +3268,7 @@ async function packageCommand(options) {
   logger.info(`Theme: ${themeName}`);
   logger.info(`Version: ${version2}`);
   logger.newLine();
-  const compiledThemePath = path8__default.default.join(
+  const compiledThemePath = path9__default.default.join(
     process.cwd(),
     "themes",
     themeName,
@@ -3018,8 +3302,8 @@ async function packageCommand(options) {
   logger.newLine();
   logger.section("Step 2: Create Package");
   const packageName = options.name || `${themeName}-${version2}`;
-  const outputDir = options.output || path8__default.default.join(process.cwd(), "dist");
-  const outputPath = path8__default.default.join(outputDir, `${packageName}.zip`);
+  const outputDir = options.output || path9__default.default.join(process.cwd(), "dist");
+  const outputPath = path9__default.default.join(outputDir, `${packageName}.zip`);
   await fs__default.default.ensureDir(outputDir);
   logger.startSpinner("Creating zip archive...");
   try {
@@ -3032,11 +3316,11 @@ async function packageCommand(options) {
     logger.newLine();
     logger.info(`Package: ${packageName}.zip`);
     logger.log(`Size: ${sizeMB} MB`);
-    logger.log(`Location: ${path8__default.default.relative(process.cwd(), outputPath)}`);
+    logger.log(`Location: ${path9__default.default.relative(process.cwd(), outputPath)}`);
     logger.newLine();
     logger.section("Next steps:");
     logger.log(
-      `  onexthm deploy --package ${path8__default.default.relative(process.cwd(), outputPath)}`
+      `  onexthm deploy --package ${path9__default.default.relative(process.cwd(), outputPath)}`
     );
   } catch (error) {
     logger.stopSpinner(false, "Failed to create package");
@@ -3094,9 +3378,9 @@ async function deployCommand(options) {
   ensureOneXProject();
   let packagePath;
   if (options.package) {
-    packagePath = path8__default.default.resolve(options.package);
+    packagePath = path9__default.default.resolve(options.package);
   } else if (options.theme) {
-    const distDir = path8__default.default.join(process.cwd(), "dist");
+    const distDir = path9__default.default.join(process.cwd(), "dist");
     if (!fs__default.default.existsSync(distDir)) {
       logger.error("No dist/ directory found. Run 'onexthm package' first.");
       process.exit(1);
@@ -3111,7 +3395,7 @@ async function deployCommand(options) {
       process.exit(1);
     }
     packageFiles.sort().reverse();
-    packagePath = path8__default.default.join(distDir, packageFiles[0]);
+    packagePath = path9__default.default.join(distDir, packageFiles[0]);
   } else {
     logger.error("Either --package or --theme must be specified.");
     logger.info("Examples:");
@@ -3125,11 +3409,11 @@ async function deployCommand(options) {
   }
   const stats = await fs__default.default.stat(packagePath);
   const sizeMB = (stats.size / 1024 / 1024).toFixed(2);
-  const fileName = path8__default.default.basename(packagePath);
+  const fileName = path9__default.default.basename(packagePath);
   logger.newLine();
   logger.info(`Package: ${fileName}`);
   logger.log(`Size: ${sizeMB} MB`);
-  logger.log(`Path: ${path8__default.default.relative(process.cwd(), packagePath)}`);
+  logger.log(`Path: ${path9__default.default.relative(process.cwd(), packagePath)}`);
   logger.newLine();
   const apiUrl = options.apiUrl || process.env.ONEX_API_URL || "http://localhost:3001";
   const uploadEndpoint = `${apiUrl}/website-api/themes/upload`;
@@ -3233,11 +3517,11 @@ function getBucketName(env) {
   return environment === "production" ? "theme-s3-bucket" : "theme-s3-bucket";
 }
 async function findCompiledThemeDir(themeId, version2) {
-  const searchPaths = [path8__default.default.resolve(process.cwd(), "dist")];
+  const searchPaths = [path9__default.default.resolve(process.cwd(), "dist")];
   for (const dir of searchPaths) {
     if (await fs__default.default.pathExists(dir)) {
-      const hasManifest = await fs__default.default.pathExists(path8__default.default.join(dir, "manifest.json"));
-      const hasThemeEntry = await fs__default.default.pathExists(path8__default.default.join(dir, "bundle-entry.js")) || await fs__default.default.pathExists(path8__default.default.join(dir, "theme.config.js")) || await fs__default.default.pathExists(path8__default.default.join(dir, "index.js"));
+      const hasManifest = await fs__default.default.pathExists(path9__default.default.join(dir, "manifest.json"));
+      const hasThemeEntry = await fs__default.default.pathExists(path9__default.default.join(dir, "bundle-entry.js")) || await fs__default.default.pathExists(path9__default.default.join(dir, "theme.config.js")) || await fs__default.default.pathExists(path9__default.default.join(dir, "index.js"));
       if (hasManifest || hasThemeEntry) {
         return dir;
       }
@@ -3246,7 +3530,7 @@ async function findCompiledThemeDir(themeId, version2) {
   return null;
 }
 async function readManifest() {
-  const manifestTsPath = path8__default.default.resolve(process.cwd(), "manifest.ts");
+  const manifestTsPath = path9__default.default.resolve(process.cwd(), "manifest.ts");
   if (await fs__default.default.pathExists(manifestTsPath)) {
     try {
       const module = await import(manifestTsPath);
@@ -3255,7 +3539,7 @@ async function readManifest() {
       logger.warning("Failed to import manifest.ts, trying package.json");
     }
   }
-  const packageJsonPath = path8__default.default.resolve(process.cwd(), "package.json");
+  const packageJsonPath = path9__default.default.resolve(process.cwd(), "package.json");
   if (await fs__default.default.pathExists(packageJsonPath)) {
     const pkg = await fs__default.default.readJson(packageJsonPath);
     return {
@@ -3289,13 +3573,13 @@ async function findSourceDir(themeId, explicitDir) {
   }
   const searchPaths = [
     process.cwd(),
-    path8__default.default.resolve(process.cwd(), `../../themes/${themeId}`),
-    path8__default.default.resolve(process.cwd(), `../themes/${themeId}`)
+    path9__default.default.resolve(process.cwd(), `../../themes/${themeId}`),
+    path9__default.default.resolve(process.cwd(), `../themes/${themeId}`)
   ];
   const markers = ["theme.config.ts", "bundle-entry.ts"];
   for (const dir of searchPaths) {
     for (const marker of markers) {
-      if (await fs__default.default.pathExists(path8__default.default.join(dir, marker))) {
+      if (await fs__default.default.pathExists(path9__default.default.join(dir, marker))) {
         return dir;
       }
     }
@@ -3346,8 +3630,8 @@ async function uploadCommand(options) {
     }
     spinner.succeed(`Found compiled theme at: ${compiledDir}`);
     spinner.start("Creating bundle.zip...");
-    const tmpDir = os3__default.default.tmpdir();
-    const bundleZipPath = path8__default.default.join(tmpDir, `${themeId}-${version2}-bundle.zip`);
+    const tmpDir = os__default.default.tmpdir();
+    const bundleZipPath = path9__default.default.join(tmpDir, `${themeId}-${version2}-bundle.zip`);
     await createZipFromDir(compiledDir, bundleZipPath);
     const bundleZipBuffer = await fs__default.default.readFile(bundleZipPath);
     const bundleSizeMB = (bundleZipBuffer.length / 1024 / 1024).toFixed(2);
@@ -3401,7 +3685,7 @@ async function uploadCommand(options) {
       if (sourceDir) {
         spinner.succeed(`Found source at: ${sourceDir}`);
         spinner.start("Creating source.zip...");
-        const sourceZipPath = path8__default.default.join(
+        const sourceZipPath = path9__default.default.join(
           tmpDir,
           `${themeId}-${version2}-source.zip`
         );
@@ -3535,8 +3819,8 @@ async function resolveLatestVersion(s3Client, bucket, themeId) {
 async function createCompatibilityFiles(outputDir, manifest) {
   const entryFile = manifest.output?.entry || "bundle-entry.js";
   if (entryFile !== "bundle-entry.js" && entryFile.startsWith("bundle-entry-")) {
-    const hashedPath = path8__default.default.join(outputDir, entryFile);
-    const stablePath = path8__default.default.join(outputDir, "bundle-entry.js");
+    const hashedPath = path9__default.default.join(outputDir, entryFile);
+    const stablePath = path9__default.default.join(outputDir, "bundle-entry.js");
     if (await fs__default.default.pathExists(hashedPath)) {
       await fs__default.default.copy(hashedPath, stablePath);
       const mapPath = hashedPath + ".map";
@@ -3545,13 +3829,13 @@ async function createCompatibilityFiles(outputDir, manifest) {
       }
     }
   }
-  const sectionsRegistryPath = path8__default.default.join(outputDir, "sections-registry.js");
+  const sectionsRegistryPath = path9__default.default.join(outputDir, "sections-registry.js");
   const content = `// Re-export all sections from bundle-entry
 // This file exists to maintain compatibility with the import path
 export * from './bundle-entry.js';
 `;
   await fs__default.default.writeFile(sectionsRegistryPath, content, "utf-8");
-  const pkgJsonPath = path8__default.default.join(outputDir, "package.json");
+  const pkgJsonPath = path9__default.default.join(outputDir, "package.json");
   await fs__default.default.writeFile(pkgJsonPath, '{\n  "type": "module"\n}\n', "utf-8");
 }
 function showDownloadFailureHelp(themeId, bucket) {
@@ -3613,6 +3897,18 @@ async function downloadCommand(options) {
       spinner.succeed(
         `Resolved latest version: ${chalk4__default.default.cyan(resolvedVersion)}`
       );
+      const isCI = !!(process.env.CI || process.env.GITHUB_ACTIONS || process.env.VERCEL);
+      if (isCI) {
+        console.log(
+          chalk4__default.default.yellow(
+            `
+  Warning: Resolved "latest" to ${resolvedVersion} in CI environment.
+  For production builds, pin to a specific version:
+    THEME_VERSION=${resolvedVersion}
+`
+          )
+        );
+      }
     }
     spinner.start(
       `Downloading bundle.zip for ${themeId}@${resolvedVersion}...`
@@ -3634,7 +3930,7 @@ async function downloadCommand(options) {
     zip.extractAllTo(outputDir, true);
     const entries = zip.getEntries().filter((e) => !e.isDirectory);
     spinner.succeed(`Extracted ${entries.length} files to ${outputDir}`);
-    const manifestPath = path8__default.default.join(outputDir, "manifest.json");
+    const manifestPath = path9__default.default.join(outputDir, "manifest.json");
     const manifest = await fs__default.default.readJson(manifestPath);
     await createCompatibilityFiles(outputDir, manifest);
     console.log();
@@ -3768,7 +4064,7 @@ async function renameTheme(themeDir, oldName, newName) {
   const oldPrefix = `${oldName}-`;
   const newPrefix = `${newName}-`;
   const newDisplayName = newName.split("-").map((w) => w.charAt(0).toUpperCase() + w.slice(1)).join(" ");
-  const pkgPath = path8__default.default.join(themeDir, "package.json");
+  const pkgPath = path9__default.default.join(themeDir, "package.json");
   if (await fs__default.default.pathExists(pkgPath)) {
     const pkg = await fs__default.default.readJson(pkgPath);
     pkg.name = `@onex-themes/${newName}`;
@@ -3784,7 +4080,7 @@ async function renameTheme(themeDir, oldName, newName) {
     }
     await fs__default.default.writeJson(pkgPath, pkg, { spaces: 2 });
   }
-  const configPath = path8__default.default.join(themeDir, "theme.config.ts");
+  const configPath = path9__default.default.join(themeDir, "theme.config.ts");
   if (await fs__default.default.pathExists(configPath)) {
     let content = await fs__default.default.readFile(configPath, "utf-8");
     content = content.replace(/id:\s*"[^"]*"/, `id: "${newName}"`);
@@ -3794,7 +4090,7 @@ async function renameTheme(themeDir, oldName, newName) {
     );
     await fs__default.default.writeFile(configPath, content);
   }
-  const layoutPath = path8__default.default.join(themeDir, "theme.layout.ts");
+  const layoutPath = path9__default.default.join(themeDir, "theme.layout.ts");
   if (await fs__default.default.pathExists(layoutPath)) {
     let content = await fs__default.default.readFile(layoutPath, "utf-8");
     content = content.replace(/id:\s*"[^"]*"/, `id: "${newName}"`);
@@ -3807,7 +4103,7 @@ async function renameTheme(themeDir, oldName, newName) {
   const oldDisplayName = oldName.split("-").map((w) => w.charAt(0).toUpperCase() + w.slice(1)).join(" ");
   const tsFiles = await glob.glob("**/*.ts", { cwd: themeDir, nodir: true });
   for (const file of tsFiles) {
-    const filePath = path8__default.default.join(themeDir, file);
+    const filePath = path9__default.default.join(themeDir, file);
     let content = await fs__default.default.readFile(filePath, "utf-8");
     const original = content;
     content = content.replace(
@@ -3836,7 +4132,7 @@ async function cloneCommand(themeName, options) {
   const spinner = ora__default.default("Initializing clone...").start();
   try {
     const bucket = options.bucket || getBucketName3(options.environment);
-    const outputDir = options.output || path8__default.default.resolve(process.cwd(), newName);
+    const outputDir = options.output || path9__default.default.resolve(process.cwd(), newName);
     const s3Client = getS3Client3();
     if (await fs__default.default.pathExists(outputDir)) {
       spinner.fail(chalk4__default.default.red(`Directory already exists: ${outputDir}`));
@@ -3891,7 +4187,7 @@ async function cloneCommand(themeName, options) {
     spinner.succeed(
       `Renamed theme: ${chalk4__default.default.gray(themeName)} \u2192 ${chalk4__default.default.cyan(newName)}`
     );
-    const envExamplePath = path8__default.default.join(outputDir, ".env.example");
+    const envExamplePath = path9__default.default.join(outputDir, ".env.example");
     if (!await fs__default.default.pathExists(envExamplePath)) {
       await fs__default.default.writeFile(
         envExamplePath,
@@ -3904,7 +4200,7 @@ async function cloneCommand(themeName, options) {
         ].join("\n")
       );
     }
-    const mcpJsonPath = path8__default.default.join(outputDir, ".mcp.json");
+    const mcpJsonPath = path9__default.default.join(outputDir, ".mcp.json");
     if (await fs__default.default.pathExists(mcpJsonPath)) {
       const { default: inquirerMod } = await import('inquirer');
       const { figmaApiKey } = await inquirerMod.prompt([
@@ -3929,7 +4225,7 @@ async function cloneCommand(themeName, options) {
     }
     if (options.install !== false) {
       const hasPkgJson = await fs__default.default.pathExists(
-        path8__default.default.join(outputDir, "package.json")
+        path9__default.default.join(outputDir, "package.json")
       );
       if (hasPkgJson) {
         spinner.start("Installing dependencies...");
@@ -3956,7 +4252,7 @@ async function cloneCommand(themeName, options) {
     console.log(chalk4__default.default.cyan("   Files:    ") + chalk4__default.default.white(entries.length));
     console.log();
     console.log(chalk4__default.default.cyan("Next steps:"));
-    console.log(chalk4__default.default.gray(`   cd ${path8__default.default.relative(process.cwd(), outputDir)}`));
+    console.log(chalk4__default.default.gray(`   cd ${path9__default.default.relative(process.cwd(), outputDir)}`));
     console.log(
       chalk4__default.default.gray("   cp .env.example .env  # then add your Company ID")
     );
@@ -3991,7 +4287,7 @@ var MIME_TYPES = {
 };
 function createDevServer(options) {
   const clients = /* @__PURE__ */ new Set();
-  const themeDataPath = path8__default.default.join(options.distDir, "theme-data.json");
+  const themeDataPath = path9__default.default.join(options.distDir, "theme-data.json");
   const server = http__default.default.createServer((req, res) => {
     res.setHeader("Access-Control-Allow-Origin", "*");
     res.setHeader("Access-Control-Allow-Methods", "GET, OPTIONS");
@@ -4017,8 +4313,8 @@ function createDevServer(options) {
     if (pathname.startsWith("/_assets/")) {
       const parts = pathname.replace(/^\/_assets\//, "").split("/");
       const assetSubpath = parts.slice(1).join("/");
-      const assetPath = path8__default.default.join(options.themePath, "assets", assetSubpath);
-      if (!assetPath.startsWith(path8__default.default.join(options.themePath, "assets"))) {
+      const assetPath = path9__default.default.join(options.themePath, "assets", assetSubpath);
+      if (!assetPath.startsWith(path9__default.default.join(options.themePath, "assets"))) {
         res.writeHead(403);
         res.end("Forbidden");
         return;
@@ -4029,8 +4325,8 @@ function createDevServer(options) {
     if (pathname.startsWith("/themes/")) {
       const match = pathname.match(/^\/themes\/[^/]+\/assets\/(.+)/);
       if (match) {
-        const assetPath = path8__default.default.join(options.themePath, "assets", match[1]);
-        if (!assetPath.startsWith(path8__default.default.join(options.themePath, "assets"))) {
+        const assetPath = path9__default.default.join(options.themePath, "assets", match[1]);
+        if (!assetPath.startsWith(path9__default.default.join(options.themePath, "assets"))) {
           res.writeHead(403);
           res.end("Forbidden");
           return;
@@ -4044,26 +4340,26 @@ function createDevServer(options) {
       const segments = subpath.split("/");
       let assetPath;
       if (segments[0] === options.themeName || segments[0] === options.themeName.replace(/^my-/, "")) {
-        assetPath = path8__default.default.join(
+        assetPath = path9__default.default.join(
           options.themePath,
           "assets",
           segments.slice(1).join("/")
         );
       } else {
-        assetPath = path8__default.default.join(options.themePath, "assets", subpath);
+        assetPath = path9__default.default.join(options.themePath, "assets", subpath);
       }
-      if (assetPath.startsWith(path8__default.default.join(options.themePath, "assets")) && fs2__default.default.existsSync(assetPath)) {
+      if (assetPath.startsWith(path9__default.default.join(options.themePath, "assets")) && fs3__default.default.existsSync(assetPath)) {
         serveFile(res, assetPath);
         return;
       }
     }
-    const filePath = path8__default.default.join(options.distDir, pathname);
+    const filePath = path9__default.default.join(options.distDir, pathname);
     if (!filePath.startsWith(options.distDir)) {
       res.writeHead(403);
       res.end("Forbidden");
       return;
     }
-    if (fs2__default.default.existsSync(filePath) && fs2__default.default.statSync(filePath).isFile()) {
+    if (fs3__default.default.existsSync(filePath) && fs3__default.default.statSync(filePath).isFile()) {
       serveFile(res, filePath);
     } else {
       res.writeHead(200, { "Content-Type": "text/html" });
@@ -4095,14 +4391,14 @@ function createDevServer(options) {
 }
 function serveFile(res, filePath) {
   try {
-    if (!fs2__default.default.existsSync(filePath)) {
+    if (!fs3__default.default.existsSync(filePath)) {
       res.writeHead(404);
       res.end("Not Found");
       return;
     }
-    const ext = path8__default.default.extname(filePath);
+    const ext = path9__default.default.extname(filePath);
     const contentType = MIME_TYPES[ext] || "application/octet-stream";
-    const content = fs2__default.default.readFileSync(filePath);
+    const content = fs3__default.default.readFileSync(filePath);
     res.writeHead(200, { "Content-Type": contentType });
     res.end(content);
   } catch {
@@ -4115,7 +4411,7 @@ function generatePreviewHTML(themeName, port, themeDataPath) {
   let fontVarsCSS = "";
   if (themeDataPath) {
     try {
-      const themeData = JSON.parse(fs2__default.default.readFileSync(themeDataPath, "utf-8"));
+      const themeData = JSON.parse(fs3__default.default.readFileSync(themeDataPath, "utf-8"));
       const typography = (themeData?.themeConfig || themeData?.theme?.config)?.typography?.fontFamily;
       if (typography) {
         const fontFamilies = /* @__PURE__ */ new Set();
@@ -4203,14 +4499,14 @@ async function devCommand(options) {
   if (options.theme) {
     themeName = options.theme;
     try {
-      const workspaceThemePath = path8__default.default.join(getThemesDir(), themeName);
+      const workspaceThemePath = path9__default.default.join(getThemesDir(), themeName);
       if (fs__default.default.existsSync(workspaceThemePath)) {
         themePath = workspaceThemePath;
       } else {
-        themePath = path8__default.default.join(process.cwd(), themeName);
+        themePath = path9__default.default.join(process.cwd(), themeName);
       }
     } catch {
-      themePath = path8__default.default.join(process.cwd(), themeName);
+      themePath = path9__default.default.join(process.cwd(), themeName);
     }
     if (!fs__default.default.existsSync(themePath)) {
       logger.error(`Theme "${themeName}" not found.`);
@@ -4221,10 +4517,10 @@ async function devCommand(options) {
       "theme.config.ts",
       "bundle-entry.ts",
       "manifest.ts"
-    ].some((f) => fs__default.default.existsSync(path8__default.default.join(process.cwd(), f)));
+    ].some((f) => fs__default.default.existsSync(path9__default.default.join(process.cwd(), f)));
     if (isThemeDir) {
       themePath = process.cwd();
-      themeName = path8__default.default.basename(themePath);
+      themeName = path9__default.default.basename(themePath);
     } else {
       logger.error(
         "Not in a theme directory and no --theme specified. Run from theme root or use --theme flag."
@@ -4293,9 +4589,9 @@ async function devCommand(options) {
     watcher.close();
     await context2.dispose();
     server.close();
-    const shimPath = path8__default.default.join(outputDir, ".process-shim.js");
+    const shimPath = path9__default.default.join(outputDir, ".process-shim.js");
     try {
-      await fs7__default.default.unlink(shimPath);
+      await fs8__default.default.unlink(shimPath);
     } catch {
     }
     process.exit(0);
@@ -4304,8 +4600,8 @@ async function devCommand(options) {
 
 // src/commands/config.ts
 init_logger();
-var CONFIG_DIR = path8__default.default.join(os3__default.default.homedir(), ".onexthm");
-var CONFIG_FILE = path8__default.default.join(CONFIG_DIR, ".env");
+var CONFIG_DIR = path9__default.default.join(os__default.default.homedir(), ".onexthm");
+var CONFIG_FILE = path9__default.default.join(CONFIG_DIR, ".env");
 var CONFIG_ENTRIES = [
   {
     key: "AWS_ACCESS_KEY_ID",
@@ -4447,122 +4743,6 @@ async function configCommand() {
 
 // src/commands/login.ts
 init_logger();
-var AUTH_DIR = path8__default.default.join(os3__default.default.homedir(), ".onexthm");
-var AUTH_FILE = path8__default.default.join(AUTH_DIR, "auth.json");
-function getApiUrl() {
-  return process.env.ONEXTHM_API_URL || process.env.NEXT_PUBLIC_API_URL || "https://platform-dev.onexeos.com";
-}
-async function saveAuthTokens(tokens) {
-  await fs__default.default.ensureDir(AUTH_DIR);
-  const key = getMachineKey();
-  const data = JSON.stringify(tokens);
-  const encrypted = encrypt(data, key);
-  await fs__default.default.writeFile(AUTH_FILE, encrypted, "utf-8");
-}
-function loadAuthTokens() {
-  try {
-    if (!fs__default.default.existsSync(AUTH_FILE)) return null;
-    const encrypted = fs__default.default.readFileSync(AUTH_FILE, "utf-8");
-    const key = getMachineKey();
-    const data = decrypt(encrypted, key);
-    return JSON.parse(data);
-  } catch {
-    return null;
-  }
-}
-async function clearAuthTokens() {
-  try {
-    await fs__default.default.remove(AUTH_FILE);
-  } catch {
-  }
-}
-function isTokenExpired(tokens) {
-  return Date.now() / 1e3 > tokens.expiresAt - 60;
-}
-async function getValidTokens() {
-  const tokens = loadAuthTokens();
-  if (!tokens) return null;
-  if (!isTokenExpired(tokens)) return tokens;
-  try {
-    const apiUrl = getApiUrl();
-    const response = await fetch(`${apiUrl}/auth/refresh`, {
-      method: "POST",
-      headers: { "Content-Type": "application/json" },
-      body: JSON.stringify({ refresh_token: tokens.refreshToken })
-    });
-    if (!response.ok) {
-      await clearAuthTokens();
-      return null;
-    }
-    const data = await response.json();
-    const body = data.statusCode ? data.body : data;
-    const refreshed = {
-      ...tokens,
-      accessToken: body.AccessToken || tokens.accessToken,
-      idToken: body.IdToken || tokens.idToken,
-      expiresAt: Math.floor(Date.now() / 1e3) + (body.ExpiresIn || 3600)
-    };
-    await saveAuthTokens(refreshed);
-    return refreshed;
-  } catch {
-    await clearAuthTokens();
-    return null;
-  }
-}
-async function authenticatedFetch(url, init) {
-  const tokens = await getValidTokens();
-  if (!tokens) {
-    throw new Error("Not logged in. Run: onexthm login");
-  }
-  const headers = new Headers(init?.headers);
-  headers.set("Authorization", `Bearer ${tokens.idToken}`);
-  headers.set("Content-Type", "application/json");
-  return fetch(url, { ...init, headers });
-}
-function getMachineKey() {
-  let seed;
-  if (process.platform === "darwin") {
-    seed = `onexthm:${os3__default.default.hostname()}:${os3__default.default.userInfo().username}`;
-  } else if (process.platform === "linux") {
-    try {
-      seed = `onexthm:${fs__default.default.readFileSync("/etc/machine-id", "utf-8").trim()}`;
-    } catch {
-      seed = `onexthm:${os3__default.default.hostname()}:${os3__default.default.userInfo().username}`;
-    }
-  } else {
-    seed = `onexthm:${os3__default.default.hostname()}:${os3__default.default.userInfo().username}`;
-  }
-  return crypto2__default.default.createHash("sha256").update(seed).digest();
-}
-function encrypt(text, key) {
-  const iv = crypto2__default.default.randomBytes(16);
-  const cipher = crypto2__default.default.createCipheriv("aes-256-gcm", key, iv);
-  let encrypted = cipher.update(text, "utf-8", "hex");
-  encrypted += cipher.final("hex");
-  const tag = cipher.getAuthTag();
-  return `${iv.toString("hex")}:${tag.toString("hex")}:${encrypted}`;
-}
-function decrypt(text, key) {
-  const [ivHex, tagHex, encrypted] = text.split(":");
-  const iv = Buffer.from(ivHex, "hex");
-  const tag = Buffer.from(tagHex, "hex");
-  const decipher = crypto2__default.default.createDecipheriv("aes-256-gcm", key, iv);
-  decipher.setAuthTag(tag);
-  let decrypted = decipher.update(encrypted, "hex", "utf-8");
-  decrypted += decipher.final("utf-8");
-  return decrypted;
-}
-function parseJwtClaims(idToken) {
-  try {
-    const payload = idToken.split(".")[1];
-    const decoded = Buffer.from(payload, "base64url").toString("utf-8");
-    return JSON.parse(decoded);
-  } catch {
-    return {};
-  }
-}
-
-// src/commands/login.ts
 async function loginCommand() {
   logger.header("OneX Theme Developer Login");
   const existing = loadAuthTokens();
@@ -4688,13 +4868,13 @@ async function publishCommand(options) {
   logger.info(`Logged in as: ${tokens.user.email}`);
   let themePath;
   if (options.theme) {
-    themePath = path8__default.default.resolve(options.theme);
+    themePath = path9__default.default.resolve(options.theme);
   } else {
     const isThemeDir = [
       "theme.config.ts",
       "bundle-entry.ts",
       "manifest.ts"
-    ].some((f) => fs__default.default.existsSync(path8__default.default.join(process.cwd(), f)));
+    ].some((f) => fs__default.default.existsSync(path9__default.default.join(process.cwd(), f)));
     if (isThemeDir) {
       themePath = process.cwd();
     } else {
@@ -4704,14 +4884,31 @@ async function publishCommand(options) {
       process.exit(1);
     }
   }
-  const pkgPath = path8__default.default.join(themePath, "package.json");
+  const pkgPath = path9__default.default.join(themePath, "package.json");
   if (!fs__default.default.existsSync(pkgPath)) {
     logger.error("No package.json found in theme directory");
     process.exit(1);
   }
   const pkg = fs__default.default.readJsonSync(pkgPath);
-  const themeId = pkg.name?.replace("@onex-themes/", "") || path8__default.default.basename(themePath);
+  const themeId = pkg.name?.replace("@onex-themes/", "") || path9__default.default.basename(themePath);
+  if (options.bump) {
+    const currentVersion = pkg.version || "1.0.0";
+    const newVersion = semver__default.default.inc(currentVersion, options.bump);
+    if (!newVersion) {
+      logger.error(`Failed to bump version from ${currentVersion}`);
+      process.exit(1);
+    }
+    pkg.version = newVersion;
+    fs__default.default.writeJsonSync(pkgPath, pkg, { spaces: 2 });
+    logger.info(`Bumped version: ${currentVersion} -> ${newVersion}`);
+  }
   const version2 = pkg.version || "1.0.0";
+  if (!semver__default.default.valid(version2)) {
+    logger.error(
+      `Invalid version "${version2}" in package.json. Must be valid semver (e.g., 1.0.0)`
+    );
+    process.exit(1);
+  }
   logger.newLine();
   logger.info(`Theme: ${themeId}`);
   logger.info(`Version: ${version2}`);
@@ -4748,6 +4945,38 @@ async function publishCommand(options) {
     logger.error(error instanceof Error ? error.message : "Connection failed");
     process.exit(1);
   }
+  logger.startSpinner("Checking version availability...");
+  try {
+    const checkResponse = await authenticatedFetch(
+      `${apiUrl}/website-api/themes/${encodeURIComponent(themeId)}/versions/${encodeURIComponent(version2)}/exists`,
+      { method: "GET" }
+    );
+    const checkData = await checkResponse.json();
+    const checkBody = checkData.statusCode ? checkData.body : checkData;
+    if (checkBody.exists) {
+      logger.stopSpinner(false, "Version already published");
+      const patchVer = semver__default.default.inc(version2, "patch") || "?";
+      const minorVer = semver__default.default.inc(version2, "minor") || "?";
+      const majorVer = semver__default.default.inc(version2, "major") || "?";
+      logger.error(
+        `
+Version ${version2} of "${themeId}" is already published and cannot be overwritten.
+
+To publish a new version:
+  1. Bump version in package.json (e.g., ${version2} -> ${patchVer})
+  2. Run: onexthm publish
+
+Or use the --bump flag:
+  onexthm publish --bump patch    (${version2} -> ${patchVer})
+  onexthm publish --bump minor    (${version2} -> ${minorVer})
+  onexthm publish --bump major    (${version2} -> ${majorVer})`
+      );
+      process.exit(1);
+    }
+    logger.stopSpinner(true, `Version ${version2} is available`);
+  } catch (error) {
+    logger.stopSpinner(true, "Version check skipped (endpoint not available)");
+  }
   logger.startSpinner("Building theme...");
   try {
     const { compileStandaloneTheme: compileStandaloneTheme2 } = await Promise.resolve().then(() => (init_compile_theme(), compile_theme_exports));
@@ -4793,13 +5022,13 @@ async function publishCommand(options) {
   try {
     const archiver3 = await import('archiver');
     const { createWriteStream } = await import('fs');
-    const distDir = path8__default.default.join(themePath, "dist");
+    const distDir = path9__default.default.join(themePath, "dist");
     if (!fs__default.default.existsSync(distDir)) {
       logger.stopSpinner(false, "No dist/ directory");
       logger.error("Build the theme first: onexthm build");
       process.exit(1);
     }
-    const bundleZipPath = path8__default.default.join(themePath, "dist", "bundle.zip");
+    const bundleZipPath = path9__default.default.join(themePath, "dist", "bundle.zip");
     await createZip(distDir, bundleZipPath, [
       "bundle.zip",
       "source.zip",
@@ -4824,7 +5053,7 @@ async function publishCommand(options) {
   }
   logger.startSpinner("Uploading source...");
   try {
-    const sourceZipPath = path8__default.default.join(themePath, "dist", "source.zip");
+    const sourceZipPath = path9__default.default.join(themePath, "dist", "source.zip");
     await createZip(themePath, sourceZipPath, [
       "node_modules",
       "dist",
@@ -4909,17 +5138,23 @@ async function createZip(sourceDir, outputPath, exclude) {
 }
 
 // src/cli.ts
+dotenv__default.default.config({
+  path: path9__default.default.join(process.cwd(), ".env.local"),
+  override: true
+});
+dotenv__default.default.config({ path: path9__default.default.join(process.cwd(), ".env") });
 try {
   const projectRoot = getProjectRoot();
-  dotenv__default.default.config({
-    path: path8__default.default.join(projectRoot, ".env.local"),
-    quiet: true
-  });
-  dotenv__default.default.config({ path: path8__default.default.join(projectRoot, ".env"), quiet: true });
+  if (path9__default.default.resolve(projectRoot) !== path9__default.default.resolve(process.cwd())) {
+    dotenv__default.default.config({
+      path: path9__default.default.join(projectRoot, ".env.local")
+    });
+    dotenv__default.default.config({ path: path9__default.default.join(projectRoot, ".env") });
+  }
 } catch {
 }
 dotenv__default.default.config({
-  path: path8__default.default.join(os3__default.default.homedir(), ".onexthm", ".env"),
+  path: path9__default.default.join(os__default.default.homedir(), ".onexthm", ".env"),
   quiet: true
 });
 var require2 = module$1.createRequire((typeof document === 'undefined' ? require('u' + 'rl').pathToFileURL(__filename).href : (_documentCurrentScript && _documentCurrentScript.tagName.toUpperCase() === 'SCRIPT' && _documentCurrentScript.src || new URL('cli.js', document.baseURI).href)));
@@ -4979,7 +5214,10 @@ program.command("config").description("Configure OneX CLI credentials (AWS, API
 program.command("login").description("Login to OneX platform").action(loginCommand);
 program.command("logout").description("Logout from OneX platform").action(logoutCommand);
 program.command("whoami").description("Show current logged-in developer").action(whoamiCommand);
-program.command("publish").description("Build, scan, and publish theme to marketplace (requires login)").option("-t, --theme <path>", "Theme directory path").action(publishCommand);
+program.command("publish").description("Build, scan, and publish theme to marketplace (requires login)").option("-t, --theme <path>", "Theme directory path").option(
+  "--bump <type>",
+  "Auto-bump version before publish (patch|minor|major)"
+).action(publishCommand);
 program.configureOutput({
   writeErr: (str) => process.stderr.write(chalk4__default.default.red(str))
 });