@wix/himalaya-cli 0.1002.0 → 0.1004.0

package/dist/cli.mjs

@@ -74,36 +74,36 @@ __export(config_exports, {
 import { homedir } from "node:os";
 import { join, dirname } from "node:path";
 import { readFileSync, writeFileSync, mkdirSync, chmodSync } from "node:fs";
-function loadTargetsFile(path = defaultTargetsPath()) {
+function loadTargetsFile(path2 = defaultTargetsPath()) {
   try {
-    return JSON.parse(readFileSync(path, "utf8"));
+    return JSON.parse(readFileSync(path2, "utf8"));
   } catch {
     return {};
   }
 }
-function saveControlToken(target, token, path = defaultTargetsPath()) {
-  const file = loadTargetsFile(path);
+function saveControlToken(target, token, path2 = defaultTargetsPath()) {
+  const file = loadTargetsFile(path2);
   file.targets = file.targets ?? {};
   file.targets[target] = { ...file.targets[target], controlToken: token };
-  writeTargetsFilePrivate(path, file);
-  return path;
+  writeTargetsFilePrivate(path2, file);
+  return path2;
 }
-function writeTargetsFilePrivate(path, file) {
-  mkdirSync(dirname(path), { recursive: true, mode: 448 });
-  writeFileSync(path, JSON.stringify(file, null, 2) + "\n", { mode: 384 });
+function writeTargetsFilePrivate(path2, file) {
+  mkdirSync(dirname(path2), { recursive: true, mode: 448 });
+  writeFileSync(path2, JSON.stringify(file, null, 2) + "\n", { mode: 384 });
   try {
-    chmodSync(dirname(path), 448);
-    chmodSync(path, 384);
+    chmodSync(dirname(path2), 448);
+    chmodSync(path2, 384);
   } catch {
   }
 }
-function clearControlToken(target, path = defaultTargetsPath()) {
-  const file = loadTargetsFile(path);
+function clearControlToken(target, path2 = defaultTargetsPath()) {
+  const file = loadTargetsFile(path2);
   if (file.targets?.[target]?.controlToken) {
     delete file.targets[target].controlToken;
-    writeFileSync(path, JSON.stringify(file, null, 2) + "\n");
+    writeFileSync(path2, JSON.stringify(file, null, 2) + "\n");
   }
-  return path;
+  return path2;
 }
 function resolveTargetName(opts = {}) {
   const env = opts.env ?? process.env;
@@ -2306,6 +2306,17 @@ var init_cms_schema = __esm({
 });
 
 // src/wix-owner.ts
+var wix_owner_exports = {};
+__export(wix_owner_exports, {
+  WixApiError: () => WixApiError,
+  accountToken: () => accountToken,
+  mapLimit: () => mapLimit,
+  ownerTransport: () => ownerTransport,
+  redactForError: () => redactForError,
+  resolveSiteId: () => resolveSiteId,
+  siteToken: () => siteToken,
+  withRetry: () => withRetry
+});
 import { spawn } from "node:child_process";
 function resolveSiteId(flag) {
   const id = flag?.trim() || process.env.WIX_SITE_ID?.trim();
@@ -2384,7 +2395,7 @@ function mintHelp(label2, detail) {
   return `could not run \`${label2}\` (${detail}). Install the Wix CLI and log in (\`npm i -g @wix/cli && wix login\`), or set WIX_TEST_TOKEN.`;
 }
 function ownerTransport(msid, fetchImpl = fetch, timeoutMs = DEFAULT_TIMEOUT_MS2) {
-  return async (method, path, body) => {
+  return async (method, path2, body) => {
     const headers2 = {
       Authorization: await siteToken(msid),
       "wix-site-id": msid,
@@ -2394,7 +2405,7 @@ function ownerTransport(msid, fetchImpl = fetch, timeoutMs = DEFAULT_TIMEOUT_MS2
     const started = Date.now();
     let res;
     try {
-      res = await fetchImpl(`${API_BASE}${path}`, {
+      res = await fetchImpl(`${API_BASE}${path2}`, {
         method,
         headers: headers2,
         body: body === void 0 ? void 0 : JSON.stringify(body),
@@ -2404,10 +2415,10 @@ function ownerTransport(msid, fetchImpl = fetch, timeoutMs = DEFAULT_TIMEOUT_MS2
       const err = e;
       if (err?.name === "TimeoutError" || /aborted due to timeout/i.test(err?.message ?? "")) {
         throw new Error(
-          `${method} ${path} timed out after ${Date.now() - started}ms (limit ${timeoutMs}ms). Wix REST over a VPN'd link is slow and a large site's collection list can be ~1MB. Raise the ceiling with HIMI_WIX_TIMEOUT_MS=<ms>, or check the VPN.`
+          `${method} ${path2} timed out after ${Date.now() - started}ms (limit ${timeoutMs}ms). Wix REST over a VPN'd link is slow and a large site's collection list can be ~1MB. Raise the ceiling with HIMI_WIX_TIMEOUT_MS=<ms>, or check the VPN.`
         );
       }
-      throw new Error(`${method} ${path} failed: ${err?.message ?? String(e)}`);
+      throw new Error(`${method} ${path2} failed: ${err?.message ?? String(e)}`);
     }
     const text4 = await res.text();
     let parsed = text4;
@@ -2415,7 +2426,7 @@ function ownerTransport(msid, fetchImpl = fetch, timeoutMs = DEFAULT_TIMEOUT_MS2
       parsed = text4 ? JSON.parse(text4) : null;
     } catch {
     }
-    if (!res.ok) throw new WixApiError(res.status, method, path, parsed);
+    if (!res.ok) throw new WixApiError(res.status, method, path2, parsed);
     return parsed;
   };
 }
@@ -2457,12 +2468,12 @@ var init_wix_owner = __esm({
     TOKEN_MINT_TIMEOUT_MS = 3e4;
     ACCOUNT_TOKEN_KEY = "account:*";
     WixApiError = class extends Error {
-      constructor(status, method, path, body) {
+      constructor(status, method, path2, body) {
         const detail = typeof body === "string" ? body.slice(0, 300) : JSON.stringify(body)?.slice(0, 300);
-        super(`${method} ${path} -> ${status}: ${detail}`);
+        super(`${method} ${path2} -> ${status}: ${detail}`);
         this.status = status;
         this.method = method;
-        this.path = path;
+        this.path = path2;
         this.body = body;
         this.name = "WixApiError";
       }
@@ -2542,8 +2553,8 @@ function homeRefreshActionId(name) {
 function committedProvisioningPath(name) {
   return `${shellAppDir(name)}/provisioning.json`;
 }
-function committedShellFor(path) {
-  const normalized = path.replace(/\\/g, "/");
+function committedShellFor(path2) {
+  const normalized = path2.replace(/\\/g, "/");
   return SHELL_NAMES2.find((name) => {
     const relative9 = committedProvisioningPath(name);
     return normalized === relative9 || normalized.endsWith(`/${relative9}`);
@@ -3197,9 +3208,9 @@ function umbrellaRewritePlugin({ external = false } = {}) {
     name: "himalaya-umbrella-rewrite",
     setup(b) {
       b.onResolve({ filter: /^@himalaya\// }, async (args) => {
-        const path = args.path.replace(/^@himalaya\//, "@wix/himalaya/");
-        if (external) return { path, external: true };
-        return b.resolve(path, { resolveDir: args.resolveDir, kind: args.kind });
+        const path2 = args.path.replace(/^@himalaya\//, "@wix/himalaya/");
+        if (external) return { path: path2, external: true };
+        return b.resolve(path2, { resolveDir: args.resolveDir, kind: args.kind });
       });
     }
   };
@@ -3232,8 +3243,8 @@ function tsExtResolvePlugin() {
     setup(b) {
       b.onResolve({ filter: /\.js$/ }, (args) => {
         if (args.kind === "entry-point" || !args.path.startsWith(".")) return void 0;
-        const ts = resolve8(args.resolveDir, args.path.replace(/\.js$/, ".ts"));
-        return existsSync8(ts) ? { path: ts } : void 0;
+        const ts2 = resolve8(args.resolveDir, args.path.replace(/\.js$/, ".ts"));
+        return existsSync8(ts2) ? { path: ts2 } : void 0;
       });
     }
   };
@@ -3949,7 +3960,7 @@ function bundleFor(file) {
   const match = /^tier5-src\/([^/]+)\//.exec(file);
   return match?.[1] ?? "_shared";
 }
-function toIssue(ts, contentDir2, diagnostic) {
+function toIssue(ts2, contentDir2, diagnostic) {
   const file = diagnostic.file ? relativeFile(contentDir2, diagnostic.file.fileName) : void 0;
   const position = diagnostic.file && diagnostic.start !== void 0 ? diagnostic.file.getLineAndCharacterOfPosition(diagnostic.start) : void 0;
   return {
@@ -3957,13 +3968,13 @@ function toIssue(ts, contentDir2, diagnostic) {
     ...file ? { file } : {},
     ...position ? { line: position.line + 1, column: position.character + 1 } : {},
     code: `TS${diagnostic.code}`,
-    message: ts.flattenDiagnosticMessageText(diagnostic.messageText, "\n")
+    message: ts2.flattenDiagnosticMessageText(diagnostic.messageText, "\n")
   };
 }
-function confinedHost(ts, contentDir2, options) {
+function confinedHost(ts2, contentDir2, options) {
   if (!buildConfinementRequired()) return void 0;
-  const host = ts.createCompilerHost(options);
-  const libDir = resolve10(ts.getDefaultLibFilePath(options), "..");
+  const host = ts2.createCompilerHost(options);
+  const libDir = resolve10(ts2.getDefaultLibFilePath(options), "..");
   const allows = confinementMatcher(contentDir2, [libDir]);
   const getSourceFile = host.getSourceFile.bind(host);
   const readFile3 = host.readFile.bind(host);
@@ -3991,7 +4002,7 @@ function confinedHost(ts, contentDir2, options) {
 }
 async function typecheckContentWorkers(contentDir2, options) {
   if (!existsSync9(resolve10(contentDir2, "tier5-src"))) return [];
-  const ts = await compiler2();
+  const ts2 = await compiler2();
   const config = {
     compilerOptions: {
       ...CONTENT_WORKER_COMPILER_OPTIONS,
@@ -4000,18 +4011,18 @@ async function typecheckContentWorkers(contentDir2, options) {
       // The deployed authoring runtime stages TypeScript 6, which requires an explicit
       // acknowledgement for this compatibility `baseUrl`; the repository's TypeScript 5 lane
       // rejects that 6.0 value, so keep it specific to the compiler that needs it.
-      ...Number.parseInt(ts.versionMajorMinor, 10) >= 6 ? { ignoreDeprecations: "6.0" } : {}
+      ...Number.parseInt(ts2.versionMajorMinor, 10) >= 6 ? { ignoreDeprecations: "6.0" } : {}
     },
     include: ["tier5-src/*/index.ts", "tier5-src/_shared/**/*.ts"]
   };
-  const parsed = ts.parseJsonConfigFileContent(config, ts.sys, contentDir2);
+  const parsed = ts2.parseJsonConfigFileContent(config, ts2.sys, contentDir2);
   if (parsed.fileNames.length === 0) return [];
-  const program = ts.createProgram({
+  const program = ts2.createProgram({
     rootNames: parsed.fileNames,
     options: parsed.options,
-    host: confinedHost(ts, contentDir2, parsed.options)
+    host: confinedHost(ts2, contentDir2, parsed.options)
   });
-  return [...parsed.errors, ...ts.getPreEmitDiagnostics(program)].filter((diagnostic) => diagnostic.category === ts.DiagnosticCategory.Error && belongsToContentWorkers(contentDir2, diagnostic)).map((diagnostic) => toIssue(ts, contentDir2, diagnostic));
+  return [...parsed.errors, ...ts2.getPreEmitDiagnostics(program)].filter((diagnostic) => diagnostic.category === ts2.DiagnosticCategory.Error && belongsToContentWorkers(contentDir2, diagnostic)).map((diagnostic) => toIssue(ts2, contentDir2, diagnostic));
 }
 var compilerPromise;
 var init_tier5_typecheck = __esm({
@@ -5267,41 +5278,41 @@ function buildTokenRegistry(tokens) {
     materials: new Set(Object.keys(tokens.materials ?? {}))
   };
 }
-function findTokenViolations(payload, registry, path = "$") {
+function findTokenViolations(payload, registry, path2 = "$") {
   const out = [];
-  walk(payload, registry, path, out);
+  walk(payload, registry, path2, out);
   return out;
 }
-function walk(node, registry, path, out) {
+function walk(node, registry, path2, out) {
   if (node === null || typeof node !== "object") return;
   if (Array.isArray(node)) {
-    node.forEach((item, i) => walk(item, registry, `${path}[${i}]`, out));
+    node.forEach((item, i) => walk(item, registry, `${path2}[${i}]`, out));
     return;
   }
   const obj2 = node;
   const bg = obj2.background;
   if (bg && typeof bg.token === "string" && !registry.colors.has(bg.token)) {
-    out.push({ path: `${path}.background.token`, kind: "color", name: bg.token });
+    out.push({ path: `${path2}.background.token`, kind: "color", name: bg.token });
   }
   if (obj2.type === "Text") {
     const props = obj2.props;
     if (props && typeof props.style === "string" && !registry.typography.has(props.style)) {
       out.push({
-        path: `${path}.props.style`,
+        path: `${path2}.props.style`,
         kind: "typography",
         name: props.style
       });
     }
     if (props && typeof props.color === "string" && !registry.colors.has(props.color)) {
       out.push({
-        path: `${path}.props.color`,
+        path: `${path2}.props.color`,
         kind: "color",
         name: props.color
       });
     }
   }
   for (const [key2, value] of Object.entries(obj2)) {
-    walk(value, registry, `${path}.${key2}`, out);
+    walk(value, registry, `${path2}.${key2}`, out);
   }
 }
 var SYSTEM_FONT_FAMILY;
@@ -5346,11 +5357,11 @@ var init_bindings = __esm({
 // ../../core/ts/src/validator.ts
 import Ajv from "ajv";
 import addFormats from "ajv-formats";
-function findUnknownComponents(node, allowed2, path = "$", out = []) {
+function findUnknownComponents(node, allowed2, path2 = "$", out = []) {
   if (node === null || typeof node !== "object") return out;
   if (Array.isArray(node)) {
     node.forEach(
-      (item, i) => findUnknownComponents(item, allowed2, `${path}[${i}]`, out)
+      (item, i) => findUnknownComponents(item, allowed2, `${path2}[${i}]`, out)
     );
     return out;
   }
@@ -5359,11 +5370,11 @@ function findUnknownComponents(node, allowed2, path = "$", out = []) {
   if (body && typeof body.package === "string" && typeof body.type === "string") {
     const key2 = `${body.package}.${body.type}`;
     if (!allowed2.has(key2)) {
-      out.push({ path, package: body.package, type: body.type });
+      out.push({ path: path2, package: body.package, type: body.type });
     }
   }
   for (const [key2, value] of Object.entries(obj2)) {
-    findUnknownComponents(value, allowed2, `${path}.${key2}`, out);
+    findUnknownComponents(value, allowed2, `${path2}.${key2}`, out);
   }
   return out;
 }
@@ -5375,9 +5386,9 @@ function compileWidgetSchema() {
   }
   return widgetValidateFn;
 }
-function validateWidgetActionRef(action, path, intents) {
+function validateWidgetActionRef(action, path2, intents) {
   if (typeof action !== "object" || action === null || Array.isArray(action)) {
-    intents.push({ path, reason: "must be an object { actionId, params? }" });
+    intents.push({ path: path2, reason: "must be an object { actionId, params? }" });
     return;
   }
   const actionId = action.actionId;
@@ -5386,48 +5397,48 @@ function validateWidgetActionRef(action, path, intents) {
   const unsupportedFields = Object.keys(action).filter((key2) => !WIDGET_ACTION_FIELDS.has(key2));
   if (unsupportedFields.length > 0) {
     intents.push({
-      path,
+      path: path2,
       reason: `unsupported field(s) on a widget action: ${unsupportedFields.sort().join(", ")} \u2014 a frozen widget action carries only \`actionId\` and literal \`params\``
     });
   }
   const knownAction = typeof actionId === "string" && Object.prototype.hasOwnProperty.call(WIDGET_INTENT_RULES, actionId);
   if (typeof actionId !== "string" || actionId.length === 0) {
-    intents.push({ path, reason: "`actionId` must be a non-empty string" });
+    intents.push({ path: path2, reason: "`actionId` must be a non-empty string" });
   } else if (!knownAction) {
-    intents.push({ path, reason: `unsupported widget actionId "${actionId}"` });
+    intents.push({ path: path2, reason: `unsupported widget actionId "${actionId}"` });
   }
   if (params !== void 0 && (typeof params !== "object" || params === null || Array.isArray(params) || !Object.values(params).every((value) => typeof value === "string"))) {
-    intents.push({ path, reason: "`params` must be a { string: string } map of literals" });
+    intents.push({ path: path2, reason: "`params` must be a { string: string } map of literals" });
   } else if (knownAction) {
     const rule = WIDGET_INTENT_RULES[actionId];
     const literalParams = params ?? {};
     if (Object.keys(literalParams).length > 8 || utf8ByteLength(JSON.stringify(literalParams)) > 1024 || Object.entries(literalParams).some(([key2, value]) => utf8ByteLength(key2) > 64 || utf8ByteLength(value) > 512)) {
-      intents.push({ path, reason: "parameters exceed the widget action size limit" });
+      intents.push({ path: path2, reason: "parameters exceed the widget action size limit" });
     }
     const allowed2 = /* @__PURE__ */ new Set([...rule.required, ...rule.optional ?? []]);
     const unknown = Object.keys(literalParams).filter((key2) => !allowed2.has(key2));
     const missing = rule.required.filter((key2) => !literalParams[key2]);
     if (unknown.length > 0) {
-      intents.push({ path, reason: `unsupported parameter(s): ${unknown.join(", ")}` });
+      intents.push({ path: path2, reason: `unsupported parameter(s): ${unknown.join(", ")}` });
     }
     if (missing.length > 0) {
-      intents.push({ path, reason: `missing required parameter(s): ${missing.join(", ")}` });
+      intents.push({ path: path2, reason: `missing required parameter(s): ${missing.join(", ")}` });
     }
     for (const [key2, values] of Object.entries(rule.values ?? {})) {
       const value = literalParams[key2];
       if (value !== void 0 && !values.includes(value)) {
-        intents.push({ path, reason: `invalid ${key2} "${value}"` });
+        intents.push({ path: path2, reason: `invalid ${key2} "${value}"` });
       }
     }
   }
 }
-function scanWidgetPayload(node, family, path, bindings, disallowed, timeRefs, intents, actionSites2) {
+function scanWidgetPayload(node, family, path2, bindings, disallowed, timeRefs, intents, actionSites2) {
   if (typeof node === "string") {
-    if (WIDGET_BINDING.test(node)) bindings.push({ path, value: node });
+    if (WIDGET_BINDING.test(node)) bindings.push({ path: path2, value: node });
     return;
   }
   if (Array.isArray(node)) {
-    node.forEach((item, i) => scanWidgetPayload(item, family, `${path}[${i}]`, bindings, disallowed, timeRefs, intents, actionSites2));
+    node.forEach((item, i) => scanWidgetPayload(item, family, `${path2}[${i}]`, bindings, disallowed, timeRefs, intents, actionSites2));
     return;
   }
   if (node === null || typeof node !== "object") return;
@@ -5436,46 +5447,46 @@ function scanWidgetPayload(node, family, path, bindings, disallowed, timeRefs, i
   if (body && typeof body.package === "string" && typeof body.type === "string") {
     const key2 = `${body.package}.${body.type}`;
     if (family && !isComponentAllowedForFamily(key2, family)) {
-      disallowed.push({ path, package: body.package, type: body.type, family });
+      disallowed.push({ path: path2, package: body.package, type: body.type, family });
     }
     if (key2 === "himalaya.Button") {
       const props = body.props;
       if (!props || typeof props !== "object" || Array.isArray(props)) {
-        intents.push({ path: `${path}.body.props`, reason: "widget Button props must be an object" });
+        intents.push({ path: `${path2}.body.props`, reason: "widget Button props must be an object" });
       } else if (family === "ios_home" || family === "android_home") {
         const button = props;
         if (button.intent !== void 0) {
-          intents.push({ path: `${path}.body.props.intent`, reason: "widget Button commands use the required `action` field" });
+          intents.push({ path: `${path2}.body.props.intent`, reason: "widget Button commands use the required `action` field" });
         }
-        validateWidgetActionRef(button.action, `${path}.body.props.action`, intents);
+        validateWidgetActionRef(button.action, `${path2}.body.props.action`, intents);
         const componentId = obj2.id;
         if (typeof componentId !== "string" || !WIDGET_ACTION_IDENTIFIER.test(componentId)) {
           intents.push({
-            path: `${path}.id`,
+            path: `${path2}.id`,
             reason: "a widget Button carrying an action needs an id matching ^[A-Za-z0-9_.:-]{1,128}$, or the runtimes attach no handler to it"
           });
         }
-        actionSites2.push(`${path}.body.props.action`);
+        actionSites2.push(`${path2}.body.props.action`);
       }
     }
   }
   if (obj2.timeRef !== void 0 && obj2.timeRef !== null) {
     const tr = obj2.timeRef;
     if (typeof tr !== "object" || Array.isArray(tr)) {
-      timeRefs.push({ path: `${path}.timeRef`, reason: "must be an object { at, style? }" });
+      timeRefs.push({ path: `${path2}.timeRef`, reason: "must be an object { at, style? }" });
     } else {
       const at = tr.at;
       const style = tr.style;
       if (typeof at !== "number" || !Number.isFinite(at)) {
-        timeRefs.push({ path: `${path}.timeRef`, reason: "`at` must be a finite epoch-seconds number" });
+        timeRefs.push({ path: `${path2}.timeRef`, reason: "`at` must be a finite epoch-seconds number" });
       }
       if (style !== void 0 && (typeof style !== "string" || !VALID_TIMEREF_STYLES.has(style))) {
-        timeRefs.push({ path: `${path}.timeRef`, reason: `invalid style "${String(style)}" (expected ${[...VALID_TIMEREF_STYLES].join("|")})` });
+        timeRefs.push({ path: `${path2}.timeRef`, reason: `invalid style "${String(style)}" (expected ${[...VALID_TIMEREF_STYLES].join("|")})` });
       }
     }
   }
   for (const [k, v] of Object.entries(obj2)) {
-    scanWidgetPayload(v, family, `${path}.${k}`, bindings, disallowed, timeRefs, intents, actionSites2);
+    scanWidgetPayload(v, family, `${path2}.${k}`, bindings, disallowed, timeRefs, intents, actionSites2);
   }
 }
 function validateWidget(snapshot2) {
@@ -6392,9 +6403,9 @@ function collectDescriptorStrings(descriptor) {
     seen.add(key2);
     out.push(f);
   };
-  const visit = (node, path) => {
+  const visit = (node, path2) => {
     if (Array.isArray(node)) {
-      node.forEach((n, i) => visit(n, `${path}[${i}]`));
+      node.forEach((n, i) => visit(n, `${path2}[${i}]`));
       return;
     }
     if (!node || typeof node !== "object") return;
@@ -6407,7 +6418,7 @@ function collectDescriptorStrings(descriptor) {
       for (const [prop, v] of Object.entries(props)) {
         if (typeof v !== "string" || BINDING_SIGIL.test(v)) continue;
         if (!isUserVisibleCopy(v)) continue;
-        const at = `${path}.body.props.${prop}`;
+        const at = `${path2}.body.props.${prop}`;
         if (mapped.includes(prop) || SECONDARY_FIELDS.has(prop)) {
           push({ value: v, bucket: "reachable", type, prop, path: at });
         } else if (UNREACHED_VISIBLE_FIELDS.has(prop)) {
@@ -6421,19 +6432,19 @@ function collectDescriptorStrings(descriptor) {
           bucket: "reachable",
           type,
           prop: "template.template",
-          path: `${path}.body.props.template.template`
+          path: `${path2}.body.props.template.template`
         });
       }
     }
     for (const [k, v] of Object.entries(obj2)) {
       if (k === "body") continue;
       if (typeof v === "string" && SECONDARY_FIELDS.has(k) && !BINDING_SIGIL.test(v) && isUserVisibleCopy(v)) {
-        push({ value: v, bucket: "reachable", type, prop: k, path: `${path}.${k}` });
+        push({ value: v, bucket: "reachable", type, prop: k, path: `${path2}.${k}` });
       }
     }
     for (const [k, v] of Object.entries(obj2)) {
-      if (path === "" && k === "input" && v !== null && typeof v === "object") continue;
-      if (v && typeof v === "object") visit(v, path ? `${path}.${k}` : k);
+      if (path2 === "" && k === "input" && v !== null && typeof v === "object") continue;
+      if (v && typeof v === "object") visit(v, path2 ? `${path2}.${k}` : k);
     }
   };
   visit(descriptor, "");
@@ -6907,10 +6918,10 @@ async function bootBundleWorker(bundleJs, opts) {
     // `headers` is forwarded, not swallowed: it is how one call addresses a business other
     // than the ambient one (`site.forSite(msid)` → `wix-site-id`), and a wrapper that drops
     // it answers for the wrong business while every caller renders the result as correct.
-    call: (method, path, body, headers2) => {
-      const label2 = `${String(method)} ${String(path)}`;
+    call: (method, path2, body, headers2) => {
+      const label2 = `${String(method)} ${String(path2)}`;
       calls.push(label2);
-      return Promise.resolve(opts.wixCall(method, path, body, headers2)).then((value) => {
+      return Promise.resolve(opts.wixCall(method, path2, body, headers2)).then((value) => {
         const bytes2 = responseBytes(value);
         if (bytes2 > MAX_FRAME_MESSAGE_BYTES) {
           oversizeWixResponses.push({ call: label2, bytes: bytes2 });
@@ -7148,11 +7159,11 @@ async function bootBundleWorker(bundleJs, opts) {
       }
       message = typeof asJson === "string" ? asJson : String(raw);
     } else message = String(raw);
-    const failed = { ...prev, _error: message };
-    if (prev.status === "loading") failed.status = "error";
-    if (prev.loading === true) failed.loading = false;
-    if (typeof prev.error === "string") failed.error = message;
-    def.state = failed;
+    const failed2 = { ...prev, _error: message };
+    if (prev.status === "loading") failed2.status = "error";
+    if (prev.loading === true) failed2.loading = false;
+    if (typeof prev.error === "string") failed2.error = message;
+    def.state = failed2;
   };
   const runAction = async (def, label2, fn, args) => {
     let timer;
@@ -7349,9 +7360,9 @@ function validateDescriptorAction(action, context) {
 function validateDescriptorActions(actions, context) {
   return actions.map((action) => validateDescriptorAction(action, context)).filter((issue2) => issue2 !== null);
 }
-function pathValue(state, path) {
+function pathValue(state, path2) {
   let cur = state;
-  for (const part of path.replace(/\[(\d+)\]/g, ".$1").split(".")) {
+  for (const part of path2.replace(/\[(\d+)\]/g, ".$1").split(".")) {
     if (cur == null || typeof cur !== "object") return void 0;
     if (Array.isArray(cur)) {
       const idx = Number(part);
@@ -7364,9 +7375,9 @@ function pathValue(state, path) {
   }
   return cur;
 }
-function pathResolves(state, path) {
+function pathResolves(state, path2) {
   let cur = state;
-  for (const part of path.replace(/\[(\d+)\]/g, ".$1").split(".")) {
+  for (const part of path2.replace(/\[(\d+)\]/g, ".$1").split(".")) {
     if (cur == null || typeof cur !== "object") return false;
     if (Array.isArray(cur)) {
       const idx = Number(part);
@@ -7383,9 +7394,9 @@ function pathResolves(state, path) {
   }
   return true;
 }
-function serviceFieldDeclared(state, path) {
+function serviceFieldDeclared(state, path2) {
   if (state == null || typeof state !== "object" || Array.isArray(state)) return false;
-  const first = path.replace(/\[(\d+)\]/g, ".$1").split(".")[0];
+  const first = path2.replace(/\[(\d+)\]/g, ".$1").split(".")[0];
   return first in state;
 }
 function ellipsis(value, max) {
@@ -7398,70 +7409,70 @@ function isOpaqueAuthorJson(key2, value, atRoot) {
   if (value === null || typeof value !== "object") return false;
   return key2 === "args" || atRoot && key2 === "input";
 }
-function pathCrossesOpaqueAuthorJson(path) {
-  if (typeof path !== "string") return false;
-  return /^\$\.input(?:[.[]|$)/.test(path) || /\.args(?:[.[]|$)/.test(path);
+function pathCrossesOpaqueAuthorJson(path2) {
+  if (typeof path2 !== "string") return false;
+  return /^\$\.input(?:[.[]|$)/.test(path2) || /\.args(?:[.[]|$)/.test(path2);
 }
 function nativeRequiredFindings(descriptor) {
   const out = [];
   const shapeOf = (ref) => ref.startsWith("list:") ? "an array" : ref.startsWith("map:") ? "an object keyed by name" : "an object";
   const kindOf = (value) => Array.isArray(value) ? "an array" : value === null ? "null" : typeof value === "object" ? "an object" : `a ${typeof value} (${JSON.stringify(value)})`;
-  const reportKind = (ref, value, path, from) => {
+  const reportKind = (ref, value, path2, from) => {
     const cls = bareNestedClass(ref);
     const got = kindOf(value);
     const expected = ref.startsWith("list:") ? "Expected JsonArray" : `Expected JsonObject for type with serial name 'io.himalaya.core.${cls}'`;
     out.push({
-      path,
+      path: path2,
       message: `${cls} is what the native decoder expects here \u2014 ${shapeOf(ref)} \u2014 but the descriptor has ${got}. Native decode rejects it ("${expected}") and drops the WHOLE screen from the seed, while web renders it fine (reached from ${from})`
     });
   };
-  const checkNested = (value, cls, path, from) => {
+  const checkNested = (value, cls, path2, from) => {
     if (cls.startsWith("map:")) {
       if (!value || typeof value !== "object" || Array.isArray(value)) {
-        reportKind(cls, value, path, from);
+        reportKind(cls, value, path2, from);
         return;
       }
       const of = cls.slice("map:".length);
       for (const [key2, v] of Object.entries(value)) {
-        checkNested(v, of, `${path}.${key2}`, from);
+        checkNested(v, of, `${path2}.${key2}`, from);
       }
       return;
     }
     if (cls.startsWith("list:")) {
       if (!Array.isArray(value)) {
-        reportKind(cls, value, path, from);
+        reportKind(cls, value, path2, from);
         return;
       }
       const of = cls.slice("list:".length);
-      value.forEach((v, i) => checkNested(v, of, `${path}[${i}]`, from));
+      value.forEach((v, i) => checkNested(v, of, `${path2}[${i}]`, from));
       return;
     }
     const rule = own(NATIVE_NESTED_CLASSES, cls);
     if (!rule) return;
     if (Array.isArray(value) || !value || typeof value !== "object") {
-      reportKind(cls, value, path, from);
+      reportKind(cls, value, path2, from);
       return;
     }
     const bag = value;
     for (const name of rule.required) {
       if (own(bag, name) !== void 0 && bag[name] !== null) continue;
       out.push({
-        path: `${path}.${name}`,
+        path: `${path2}.${name}`,
         message: `${cls}.${name} is REQUIRED by the native decoder but is missing \u2014 native decode rejects it ("Field '${name}' is required for type with serial name 'io.himalaya.core.${cls}', but it was missing") and drops the WHOLE screen from the seed, while web renders it fine (reached from ${from})`
       });
     }
     for (const [name, sub] of Object.entries(rule.nested)) {
       const inner = own(bag, name);
-      if (inner !== void 0 && inner !== null) checkNested(inner, sub, `${path}.${name}`, from);
+      if (inner !== void 0 && inner !== null) checkNested(inner, sub, `${path2}.${name}`, from);
     }
-    if (cls === "Action") checkActionParams(own(bag, "params"), `${path}.params`, from);
+    if (cls === "Action") checkActionParams(own(bag, "params"), `${path2}.params`, from);
   };
-  const checkActionParams = (params, path, from) => {
+  const checkActionParams = (params, path2, from) => {
     if (params === void 0 || params === null) return;
     const cost = "Native decode rejects it and drops the WHOLE screen from the seed, while web renders it fine";
     if (typeof params !== "object" || Array.isArray(params)) {
       out.push({
-        path,
+        path: path2,
         message: `Action.params must be an object of strings, but the descriptor has ${kindOf(params)} ("Expected JsonObject"). ${cost} (reached from ${from})`
       });
       return;
@@ -7469,7 +7480,7 @@ function nativeRequiredFindings(descriptor) {
     for (const [key2, value] of Object.entries(params)) {
       if (typeof value === "string" || value === void 0) continue;
       out.push({
-        path: `${path}.${key2}`,
+        path: `${path2}.${key2}`,
         message: `Action.params values must be strings, but params.${key2} is ${kindOf(value)} ("Expected JsonPrimitive at ${key2}" on Android, typeMismatch on iOS). ${cost}. Flatten it into string keys of params, or move structured data to Action.args (reached from ${from})`
       });
     }
@@ -7552,13 +7563,13 @@ function componentPropFindings(descriptor) {
         const bag = props;
         const base = at ? `${at}.body.props` : "body.props";
         for (const name of Object.keys(bag)) {
-          const path = `${base}.${name}`;
+          const path2 = `${base}.${name}`;
           const kind = own(declared, name);
           if (kind === void 0) {
             if (LEGACY_UNSCORED_KEYS.has(`${type}.${name}`)) continue;
             const hint = MODIFIER_KEYS.has(name) ? ` \u2014 \`${name}\` is a MODIFIER, not a prop: move it out of \`props\` and into the node's \`modifiers\` bag (\`{ id, body, modifiers: { ${name}: \u2026 } }\`)` : "";
             out.push({
-              path,
+              path: path2,
               kind: "hygiene",
               message: `${type} has no prop \`${name}\` \u2014 the native decoders are built with \`ignoreUnknownKeys = true\`, so this key is SILENTLY DROPPED on iOS and Android and the value never reaches the screen (web, whose props are \`any\`, may still show it). Declared props: ${Object.keys(declared).sort().join(", ") || "(none)"}${hint}`
             });
@@ -7572,7 +7583,7 @@ function componentPropFindings(descriptor) {
             const twin = own(declared, `${name}Path`) !== void 0 ? `${name}Path` : void 0;
             const inArray = IN_ARRAY_BINDING_PROPS.has(`${type}.${name}`) && value.startsWith(SERVICE_SIGIL);
             out.push({
-              path,
+              path: path2,
               kind: "decode",
               ...inArray ? { authoringOnly: true } : {},
               // TWO different defects share this branch, and they need DIFFERENT prose.
@@ -7588,7 +7599,7 @@ function componentPropFindings(descriptor) {
               // copy-pasteable line that silently truncated a long path, so following the advice
               // bound to missing state; it stays truncated only in the diagnostic prose, where it
               // is describing rather than prescribing.
-              message: inArray ? `${type}.${name} is declared ${kind}, and a bare \`${ellipsis(value, 32)}\` does not satisfy it: the authoring contract types this prop as an array (see core/ts/src/schema.ts and the generated component.schema.json), so a typed author cannot write the scalar even though the native decoders would accept it. Put the sentinel INSIDE the array \u2014 \`${name}: ["${value}"]\` \u2014 which is the form the renderers read and the authoring schema accepts. At ${jsonPointer(path)}` : `${type}.${name} is declared ${kind}, and a binding does NOT satisfy it \u2014 a \`${ellipsis(value, 32)}\` sentinel is a plain STRING on the wire and is resolved AFTER native decode, so kotlinx sees a string where it wants a ${kind}, REJECTS the document and drops the WHOLE screen from the seed (web renders it fine). ` + (twin ? `Bind \`${twin}\` instead \u2014 it is declared string exactly so a sentinel survives decode.` : `Bind this prop's \`\u2026Path\` twin if it has one; a typed slot cannot carry a sentinel.`) + ` At ${jsonPointer(path)}`
+              message: inArray ? `${type}.${name} is declared ${kind}, and a bare \`${ellipsis(value, 32)}\` does not satisfy it: the authoring contract types this prop as an array (see core/ts/src/schema.ts and the generated component.schema.json), so a typed author cannot write the scalar even though the native decoders would accept it. Put the sentinel INSIDE the array \u2014 \`${name}: ["${value}"]\` \u2014 which is the form the renderers read and the authoring schema accepts. At ${jsonPointer(path2)}` : `${type}.${name} is declared ${kind}, and a binding does NOT satisfy it \u2014 a \`${ellipsis(value, 32)}\` sentinel is a plain STRING on the wire and is resolved AFTER native decode, so kotlinx sees a string where it wants a ${kind}, REJECTS the document and drops the WHOLE screen from the seed (web renders it fine). ` + (twin ? `Bind \`${twin}\` instead \u2014 it is declared string exactly so a sentinel survives decode.` : `Bind this prop's \`\u2026Path\` twin if it has one; a typed slot cannot carry a sentinel.`) + ` At ${jsonPointer(path2)}`
             });
             continue;
           }
@@ -7597,17 +7608,17 @@ function componentPropFindings(descriptor) {
           if (actual === kind) {
             if (kind === "number" && typeof value === "number" && !Number.isInteger(value) && own(INTEGER_PROPS, type)?.includes(name)) {
               out.push({
-                path,
+                path: path2,
                 kind: "decode",
-                message: `${type}.${name} is declared an INTEGER by the native decoders but this descriptor carries ${value} \u2014 a fraction is not representable in an \`Int\` field, so decode REJECTS the document and drops the WHOLE screen from the seed, while web renders it fine. Round it. At ${jsonPointer(path)}`
+                message: `${type}.${name} is declared an INTEGER by the native decoders but this descriptor carries ${value} \u2014 a fraction is not representable in an \`Int\` field, so decode REJECTS the document and drops the WHOLE screen from the seed, while web renders it fine. Round it. At ${jsonPointer(path2)}`
               });
             }
             continue;
           }
           out.push({
-            path,
+            path: path2,
             kind: "decode",
-            message: `${type}.${name} is declared ${kind} but this descriptor carries a ${actual} (${JSON.stringify(value)?.slice(0, 40)}) \u2014 native decode REJECTS the document ("Unexpected JSON token ... expected ${kind}") and drops the WHOLE screen from the seed, while web renders it fine. At ${jsonPointer(path)}`
+            message: `${type}.${name} is declared ${kind} but this descriptor carries a ${actual} (${JSON.stringify(value)?.slice(0, 40)}) \u2014 native decode REJECTS the document ("Unexpected JSON token ... expected ${kind}") and drops the WHOLE screen from the seed, while web renders it fine. At ${jsonPointer(path2)}`
           });
         }
       }
@@ -7870,15 +7881,15 @@ function workerSubtreeAllowed(screenId, allowlist) {
   }
   return false;
 }
-function collectWixMediaReferences(value, path, found, mediaContext = false, bareIdContext = false, componentType = "", atRoot = false) {
+function collectWixMediaReferences(value, path2, found, mediaContext = false, bareIdContext = false, componentType = "", atRoot = false) {
   const unresolvedMedia = mediaContext && unresolvedWixMediaReference(value, bareIdContext);
   if (unresolvedMedia) {
-    found.push({ path, value: unresolvedMedia });
+    found.push({ path: path2, value: unresolvedMedia });
     return;
   }
   if (Array.isArray(value)) {
     value.forEach((item, index) => {
-      collectWixMediaReferences(item, `${path}[${index}]`, found, mediaContext, bareIdContext);
+      collectWixMediaReferences(item, `${path2}[${index}]`, found, mediaContext, bareIdContext);
     });
     return;
   }
@@ -7890,7 +7901,7 @@ function collectWixMediaReferences(value, path, found, mediaContext = false, bar
     const childComponentType = key2 === "props" && typeof record2.type === "string" ? record2.type : "";
     collectWixMediaReferences(
       child,
-      path ? `${path}.${key2}` : key2,
+      path2 ? `${path2}.${key2}` : key2,
       found,
       mediaContext || isComponentMediaValueProperty(componentType, key2),
       bareIdContext || isMediaLocationProperty(key2),
@@ -7936,16 +7947,16 @@ function validateScreenDescriptor(screenId, descriptor, opts = {}) {
   };
   for (const e of v.schemaErrors) {
     const err = e;
-    const path = err.instancePath;
-    if (path === "/logicBundle/integrity" && lbIntegrity === "") continue;
+    const path2 = err.instancePath;
+    if (path2 === "/logicBundle/integrity" && lbIntegrity === "") continue;
     const issue2 = {
       severity: hygiene,
       pass: "schema",
-      path,
+      path: path2,
       message: err.message ?? "schema violation"
     };
     issues.push(issue2);
-    for (const at of dottedCandidates(path ?? "")) {
+    for (const at of dottedCandidates(path2 ?? "")) {
       if (err.keyword === "required" && err.params?.missingProperty) {
         indexIssue(at ? `${at}.${err.params.missingProperty}` : err.params.missingProperty, issue2);
       }
@@ -8355,11 +8366,11 @@ function validateScreenDescriptor(screenId, descriptor, opts = {}) {
   {
     const NAMED_ICON_PROPS = /* @__PURE__ */ new Set(["icon", "selectedIcon", "leadingIcon", "trailingIcon", "badgeIcon"]);
     const shape = (v2) => Array.isArray(v2) ? "an array" : typeof v2;
-    const flagNonString = (k, v2, path) => {
+    const flagNonString = (k, v2, path2) => {
       issues.push({
         severity: "error",
         pass: "icons",
-        path,
+        path: path2,
         message: `icon prop "${k}" is ${shape(v2)} (${JSON.stringify(v2)}) \u2014 IconRef is an icon-name STRING (or a "$service:"/"$item." binding), never an object. The native decoders reject the descriptor and drop the whole screen; web degrades to the unknown-icon marker. Pass the name directly, e.g. ${k}: "cart".`
       });
     };
@@ -8390,12 +8401,12 @@ function validateScreenDescriptor(screenId, descriptor, opts = {}) {
     const normIcon = (n) => n.toLowerCase().replace(/[_.\s-]/g, "");
     const ICON_NAME_PROPS = /* @__PURE__ */ new Set(["icon", "selectedIcon", "leadingIcon", "trailingIcon", "badgeIcon"]);
     const judgeable = (v2) => typeof v2 === "string" && v2.length > 0 && !v2.startsWith("$") && !v2.includes("/") && !v2.includes(":") && !/\.(png|jpe?g|svg|webp|gif)$/i.test(v2);
-    const flagIcon = (name, path) => {
+    const flagIcon = (name, path2) => {
       if (allowedIcons.has(name) || allowedIcons.has(normIcon(name))) return;
       issues.push({
         severity: hygiene,
         pass: "icons",
-        path,
+        path: path2,
         message: `unknown icon "${name}" \u2014 renders the _unknown marker on device. Run \`himi icons\` for the valid names, or add a row to core/schema/icon-sources.json + \`yarn icons:gen\`. Already an ERROR under --strict; becomes an error by default one release after the catalog ships (docs/icons.md \xA72.6).`
       });
     };
@@ -10675,14 +10686,14 @@ function tokenColorProblems(colors) {
   const problems = [];
   for (const [name, value] of Object.entries(colors ?? {})) {
     const leaves = typeof value === "object" && value !== null && !Array.isArray(value) ? Object.entries(value).map(([variant, raw]) => [`${name}.${variant}`, raw]) : [[name, value]];
-    for (const [path, raw] of leaves) {
+    for (const [path2, raw] of leaves) {
       if (typeof raw !== "string") {
-        problems.push({ path, value: JSON.stringify(raw) ?? String(raw) });
+        problems.push({ path: path2, value: JSON.stringify(raw) ?? String(raw) });
         continue;
       }
       if (isCanonicalHex(raw)) continue;
       const suggestion = canonicalHex(raw);
-      problems.push(suggestion ? { path, value: raw, suggestion } : { path, value: raw });
+      problems.push(suggestion ? { path: path2, value: raw, suggestion } : { path: path2, value: raw });
     }
   }
   return problems;
@@ -11345,10 +11356,10 @@ function resolveAppDirIcon(appDir2) {
   return findContentIconPath(appDir2) ?? findAppIconPath(appDir2);
 }
 function readIconFromDir(appDir2) {
-  const path = resolveAppDirIcon(appDir2);
-  if (!path) return null;
+  const path2 = resolveAppDirIcon(appDir2);
+  if (!path2) return null;
   try {
-    return readFileSync15(path);
+    return readFileSync15(path2);
   } catch {
     return null;
   }
@@ -11698,11 +11709,11 @@ function playState(dir) {
 }
 async function iconStatus(dir) {
   const declared = declaredIconName(dir);
-  const path = resolveAppDirIcon(dir);
+  const path2 = resolveAppDirIcon(dir);
   const play = playState(dir);
   const base = {
     declared,
-    path,
+    path: path2,
     play,
     bytes: null,
     sha256: null,
@@ -11714,21 +11725,21 @@ async function iconStatus(dir) {
     verdict: "missing",
     policyChecklist: POLICY_CHECKLIST
   };
-  if (!path || !existsSync15(path)) return base;
+  if (!path2 || !existsSync15(path2)) return base;
   let png;
   try {
-    if (!statSync4(path).isFile()) {
+    if (!statSync4(path2).isFile()) {
       return {
         ...base,
-        byteIssues: [`at ${path} is a directory, not a PNG file`],
+        byteIssues: [`at ${path2} is a directory, not a PNG file`],
         verdict: "blocked"
       };
     }
-    png = readFileSync16(path);
+    png = readFileSync16(path2);
   } catch (err) {
     return {
       ...base,
-      byteIssues: [`at ${path} could not be read (${err.message.split("\n")[0]})`],
+      byteIssues: [`at ${path2} could not be read (${err.message.split("\n")[0]})`],
       verdict: "blocked"
     };
   }
@@ -11766,7 +11777,7 @@ async function iconStatus(dir) {
       ...status,
       pixelFindings: [{
         level: "error",
-        message: `App icon at ${path} could not be decoded as an image (${err.message.split("\n")[0]}) \u2014 it is not a usable PNG. Replace it with \`himi icon set <file.png>\`.`
+        message: `App icon at ${path2} could not be decoded as an image (${err.message.split("\n")[0]}) \u2014 it is not a usable PNG. Replace it with \`himi icon set <file.png>\`.`
       }],
       pixelsChecked: false,
       verdict: "blocked"
@@ -11951,15 +11962,15 @@ function loadCatalog() {
     cached = JSON.parse(readFileSync17(override, "utf8"));
     return cached;
   }
-  const path = CATALOG_CANDIDATES.find((p) => existsSync17(p));
-  if (!path) {
+  const path2 = CATALOG_CANDIDATES.find((p) => existsSync17(p));
+  if (!path2) {
     throw new Error(
       `font catalog not found. Looked in:
   ${CATALOG_CANDIDATES.join("\n  ")}
 In the repo, run \`npm run fonts:catalog\`. In a published @wix/himalaya-cli this is a packaging bug \u2014 the catalog should ship under the package's stdlib/fonts/.`
     );
   }
-  cached = JSON.parse(readFileSync17(path, "utf8"));
+  cached = JSON.parse(readFileSync17(path2, "utf8"));
   return cached;
 }
 function renderableFamilies(catalog = loadCatalog()) {
@@ -12242,9 +12253,9 @@ async function offRepoFontBytes(plan, opts = {}) {
       out.hostProvided.push(r.family);
       continue;
     }
-    const failed = r.faces.find((f) => !f.got.ok);
-    if (failed && !failed.got.ok) {
-      out.unavailable.push({ family: r.family, reason: failed.got.reason });
+    const failed2 = r.faces.find((f) => !f.got.ok);
+    if (failed2 && !failed2.got.ok) {
+      out.unavailable.push({ family: r.family, reason: failed2.got.reason });
       continue;
     }
     out.ready.push({
@@ -12719,9 +12730,9 @@ __export(fonts_exports, {
 });
 import { existsSync as existsSync19, readFileSync as readFileSync19 } from "node:fs";
 import { join as join22 } from "node:path";
-function readJson(path, fallback) {
+function readJson(path2, fallback) {
   try {
-    return JSON.parse(readFileSync19(path, "utf8"));
+    return JSON.parse(readFileSync19(path2, "utf8"));
   } catch {
     return fallback;
   }
@@ -12999,22 +13010,22 @@ function lc(h) {
   for (const [k, v] of Object.entries(h ?? {})) o[k.toLowerCase()] = v;
   return o;
 }
-function matchRuleEx(rules, method, path, ctx = {}) {
+function matchRuleEx(rules, method, path2, ctx = {}) {
   for (const r of rules) {
     if (!r.enabled) continue;
     const m = r.matcher;
     if (m.method && m.method.toUpperCase() !== method.toUpperCase()) continue;
     if (m.host && ctx.host && !globToRegExp(m.host).test(ctx.host)) continue;
     if (m.host && !ctx.host) continue;
-    const captures = { path, host: ctx.host ?? "" };
+    const captures = { path: path2, host: ctx.host ?? "" };
     if (m.pathRegex) {
-      const mm = new RegExp(m.pathRegex).exec(path);
+      const mm = new RegExp(m.pathRegex).exec(path2);
       if (!mm) continue;
       mm.forEach((g, i) => {
         captures[String(i)] = g ?? "";
       });
     } else if (m.pathGlob) {
-      if (!globToRegExp(m.pathGlob).test(path)) continue;
+      if (!globToRegExp(m.pathGlob).test(path2)) continue;
     }
     if (m.query) {
       const q = ctx.query ?? {};
@@ -13090,15 +13101,15 @@ function isNativePlatform(value) {
 function isNativeAuditStatus(value) {
   return typeof value === "string" && NATIVE_AUDIT_STATUSES.includes(value);
 }
-function readText(path) {
+function readText(path2) {
   try {
-    return existsSync21(path) ? readFileSync21(path, "utf8") : null;
+    return existsSync21(path2) ? readFileSync21(path2, "utf8") : null;
   } catch {
     return null;
   }
 }
-function parseEvidence(path) {
-  const raw = readText(path);
+function parseEvidence(path2) {
+  const raw = readText(path2);
   if (raw === null) return { evidence: null };
   try {
     const value = JSON.parse(raw);
@@ -13126,9 +13137,9 @@ function recordedRenderWidths(content) {
   const { evidence } = parseEvidence(uxEvidencePath(content));
   return renderEvidenceEntries(evidence).map((entry) => entry.width);
 }
-function writeEvidence(path, evidence) {
-  mkdirSync10(dirname13(path), { recursive: true });
-  writeFileSync9(path, JSON.stringify(evidence, null, 2) + "\n");
+function writeEvidence(path2, evidence) {
+  mkdirSync10(dirname13(path2), { recursive: true });
+  writeFileSync9(path2, JSON.stringify(evidence, null, 2) + "\n");
 }
 function recordedFilePath(dir, file) {
   const rel = relative3(dir, resolve15(file));
@@ -13138,8 +13149,8 @@ function recordRenderWidth(content, entry) {
   try {
     if (!entry.screenId || !Number.isFinite(entry.width) || entry.width <= 0) return null;
     const dir = resolve15(content);
-    const path = join24(dir, UX_EVIDENCE_PATH);
-    const parsed = parseEvidence(path);
+    const path2 = join24(dir, UX_EVIDENCE_PATH);
+    const parsed = parseEvidence(path2);
     if (parsed.error) return null;
     const evidence = parsed.evidence ?? { version: 1, platforms: {} };
     const width = entry.width;
@@ -13155,7 +13166,7 @@ function recordRenderWidth(content, entry) {
     if (at >= 0) renders[at] = written;
     else renders.push(written);
     evidence.renders = renders;
-    writeEvidence(path, evidence);
+    writeEvidence(path2, evidence);
     return written;
   } catch {
     return null;
@@ -13168,8 +13179,8 @@ function recordNativeAudit(content, platform, status, checks, reason, release) {
   }
   if (status === "unavailable" && !reason?.trim()) throw new Error("--reason is required when --status unavailable");
   const dir = resolve15(content);
-  const path = join24(dir, UX_EVIDENCE_PATH);
-  const parsed = parseEvidence(path);
+  const path2 = join24(dir, UX_EVIDENCE_PATH);
+  const parsed = parseEvidence(path2);
   if (parsed.error) throw new Error(`${UX_EVIDENCE_PATH} ${parsed.error}`);
   const evidence = parsed.evidence ?? { version: 1, platforms: {} };
   evidence.platforms[platform] = {
@@ -13179,12 +13190,12 @@ function recordNativeAudit(content, platform, status, checks, reason, release) {
     ...release?.releaseId && release.releaseHash ? { releaseId: release.releaseId, releaseHash: release.releaseHash } : {},
     recordedAt: (/* @__PURE__ */ new Date()).toISOString()
   };
-  writeEvidence(path, evidence);
+  writeEvidence(path2, evidence);
   return evidence;
 }
 function uxEvidenceForRelease(content, release) {
   const { releaseId, releaseHash } = release;
-  const path = uxEvidencePath(content);
+  const path2 = uxEvidencePath(content);
   const base = {
     path: UX_EVIDENCE_PATH,
     platforms: [],
@@ -13194,8 +13205,8 @@ function uxEvidenceForRelease(content, release) {
     inheritedScreens: [],
     malformed: []
   };
-  if (!existsSync21(path)) return { ...base, state: "absent" };
-  const parsed = parseEvidence(path);
+  if (!existsSync21(path2)) return { ...base, state: "absent" };
+  const parsed = parseEvidence(path2);
   if (parsed.error) return { ...base, state: "unreadable", error: parsed.error };
   if (!parsed.evidence) return { ...base, state: "absent" };
   const recorded = [];
@@ -14248,9 +14259,9 @@ function placeholderHashes() {
   const current = templateIconSha256();
   return current ? [LEGACY_PLACEHOLDER_SHA256, current] : [LEGACY_PLACEHOLDER_SHA256];
 }
-function fileSha256(path) {
+function fileSha256(path2) {
   try {
-    return createHash7("sha256").update(readFileSync24(path)).digest("hex");
+    return createHash7("sha256").update(readFileSync24(path2)).digest("hex");
   } catch {
     return null;
   }
@@ -14699,12 +14710,12 @@ function hostAppliesDeferredWidgetActions(app) {
     const dir = stack.pop();
     for (const entry of readdirSync13(dir, { withFileTypes: true })) {
       if (entry.name.startsWith(".") || entry.name === "GeneratedLiveActivity") continue;
-      const path = join29(dir, entry.name);
+      const path2 = join29(dir, entry.name);
       if (entry.isDirectory()) {
         if (entry.name.endsWith(".xcodeproj") || entry.name === "build") continue;
-        stack.push(path);
+        stack.push(path2);
       } else if (entry.name.endsWith(".swift")) {
-        if (readFileSync26(path, "utf8").includes("WidgetActionRelay.drain(")) return true;
+        if (readFileSync26(path2, "utf8").includes("WidgetActionRelay.drain(")) return true;
       }
     }
   }
@@ -14735,29 +14746,29 @@ function androidManifestPath2(app) {
 function automotiveAppDescPath(app) {
   return join29(dirname16(androidManifestPath2(app)), "res", "xml", "automotive_app_desc.xml");
 }
-function applyToFile(path, kind, label2, render, check) {
-  if (!existsSync26(path)) return { path, outcome: "skipped" };
-  const before = readFileSync26(path, "utf8");
-  if (!hasMarkers(before, kind, label2)) return { path, outcome: "skipped" };
+function applyToFile(path2, kind, label2, render, check) {
+  if (!existsSync26(path2)) return { path: path2, outcome: "skipped" };
+  const before = readFileSync26(path2, "utf8");
+  if (!hasMarkers(before, kind, label2)) return { path: path2, outcome: "skipped" };
   const after = injectBlock(before, kind, label2, render);
-  if (after === before) return { path, outcome: "unchanged" };
-  if (check) return { path, outcome: "drift" };
-  writeFileSync11(path, after);
-  return { path, outcome: "written" };
-}
-function applyWholeFile(path, content, check) {
-  const current = existsSync26(path) ? readFileSync26(path, "utf8") : null;
-  if (current === content) return { path, outcome: "unchanged" };
-  if (check) return { path, outcome: "drift" };
-  mkdirSync12(dirname16(path), { recursive: true });
-  writeFileSync11(path, content);
-  return { path, outcome: "written" };
-}
-function removeWholeFile(path, check) {
-  if (!existsSync26(path)) return { path, outcome: "skipped" };
-  if (check) return { path, outcome: "drift" };
-  rmSync4(path);
-  return { path, outcome: "removed" };
+  if (after === before) return { path: path2, outcome: "unchanged" };
+  if (check) return { path: path2, outcome: "drift" };
+  writeFileSync11(path2, after);
+  return { path: path2, outcome: "written" };
+}
+function applyWholeFile(path2, content, check) {
+  const current = existsSync26(path2) ? readFileSync26(path2, "utf8") : null;
+  if (current === content) return { path: path2, outcome: "unchanged" };
+  if (check) return { path: path2, outcome: "drift" };
+  mkdirSync12(dirname16(path2), { recursive: true });
+  writeFileSync11(path2, content);
+  return { path: path2, outcome: "written" };
+}
+function removeWholeFile(path2, check) {
+  if (!existsSync26(path2)) return { path: path2, outcome: "skipped" };
+  if (check) return { path: path2, outcome: "drift" };
+  rmSync4(path2);
+  return { path: path2, outcome: "removed" };
 }
 function genNativeConfig(app, opts = {}) {
   const check = opts.check ?? false;
@@ -15003,15 +15014,15 @@ function collectBrandFonts(appDir2) {
     const rel = typeof raw?.file === "string" ? raw.file : "";
     if (!family || !postscriptName || !rel) continue;
     if (rel.startsWith("/") || rel.split("/").includes("..")) continue;
-    const path = join30(appDir2, rel);
+    const path2 = join30(appDir2, rel);
     try {
-      if (!lstatSync4(path).isFile()) continue;
+      if (!lstatSync4(path2).isFile()) continue;
       const root = realpathSync3(appDir2);
-      if (!realpathSync3(path).startsWith(root + sep6)) continue;
+      if (!realpathSync3(path2).startsWith(root + sep6)) continue;
     } catch {
       continue;
     }
-    out.push({ family, postscriptName, weight, path });
+    out.push({ family, postscriptName, weight, path: path2 });
   }
   return out;
 }
@@ -15200,7 +15211,7 @@ async function loadContainedDevModule(name, entry, dir) {
     // Both throw synchronously; `handleWant` awaits them inside its own try, so the guest sees an
     // ordinary rejection exactly as it would from any failing transport — while the host keeps the
     // record the guest's `catch` cannot erase.
-    wixCall: (method, path) => refuseHost("himalaya.wixApi.call", `${method} ${path}`),
+    wixCall: (method, path2) => refuseHost("himalaya.wixApi.call", `${method} ${path2}`),
     dispatch: (action) => refuseHost("himalaya.dispatch", action)
   });
   const session = ran.session;
@@ -15303,7 +15314,7 @@ async function loadContainedDevModule(name, entry, dir) {
     createStore: () => storeStub,
     ...meta.dataRoutes?.length ? {
       dataRoutes: Object.fromEntries(
-        meta.dataRoutes.map((path) => [path, () => refuse(name, `the app data route ${JSON.stringify(path)}`)])
+        meta.dataRoutes.map((path2) => [path2, () => refuse(name, `the app data route ${JSON.stringify(path2)}`)])
       )
     } : {},
     // NOT defaulted. An absent seed crosses as absent and the proxy carries `undefined`, which is
@@ -16095,8 +16106,8 @@ import { createHash as createHash9, randomBytes as randomBytes3 } from "node:cry
 function b64url(buf) {
   return buf.toString("base64").replace(/\+/g, "-").replace(/\//g, "_").replace(/=+$/, "");
 }
-async function postJson(path, body, auth) {
-  const res = await fetch(`${API}${path}`, {
+async function postJson(path2, body, auth) {
+  const res = await fetch(`${API}${path2}`, {
     method: "POST",
     headers: { "Content-Type": "application/json", ...auth ? { Authorization: auth } : {} },
     body: JSON.stringify(body)
@@ -16111,11 +16122,11 @@ async function mintVisitor(clientId) {
 }
 function isRedirectCallback(url, redirectUri) {
   if (url.startsWith(redirectUri)) return true;
-  const path = (u) => u.pathname.replace(/\/+$/, "") || "/";
+  const path2 = (u) => u.pathname.replace(/\/+$/, "") || "/";
   try {
     const got = new URL(url);
     const want = new URL(redirectUri);
-    return got.protocol === want.protocol && got.host === want.host && path(got) === path(want);
+    return got.protocol === want.protocol && got.host === want.host && path2(got) === path2(want);
   } catch {
     return false;
   }
@@ -16205,8 +16216,8 @@ async function memberDirectRegister(clientId, redirectUri, email, password, firs
   const memberToken = await exchangeSessionToken(clientId, redirectUri, visitorToken, sessionToken);
   return { memberToken, visitorToken };
 }
-async function webWixCall(method, path, body, token, cookie, forwardedHeaders = {}) {
-  const url = /^https?:\/\//i.test(path) ? path : `${API}${path.startsWith("/") ? path : "/" + path}`;
+async function webWixCall(method, path2, body, token, cookie, forwardedHeaders = {}) {
+  const url = /^https?:\/\//i.test(path2) ? path2 : `${API}${path2.startsWith("/") ? path2 : "/" + path2}`;
   if (!isWixTarget(url)) {
     throw new Error(`refusing to send Wix credentials to a non-Wix host (${targetHost(url) || "no host"})`);
   }
@@ -16276,10 +16287,10 @@ function resolveNetMocks(fileMocks, appDeclared) {
   if (declared.length > 0) return { mocks: { mode: appDeclared?.mode, rules: declared }, source: "app" };
   return null;
 }
-function readNetMocksFile(path) {
+function readNetMocksFile(path2) {
   try {
-    if (!existsSync30(path)) return null;
-    const raw = JSON.parse(readFileSync30(path, "utf-8"));
+    if (!existsSync30(path2)) return null;
+    const raw = JSON.parse(readFileSync30(path2, "utf-8"));
     if (Array.isArray(raw)) return wixMockRuleErrors(raw).length ? null : { rules: raw };
     if (raw && typeof raw === "object") {
       const o = raw;
@@ -16357,20 +16368,20 @@ function parseTarget(target) {
     });
     return { host: u.host, path: u.pathname, query };
   } catch {
-    const path = target.split("?")[0];
+    const path2 = target.split("?")[0];
     const query = {};
     new URLSearchParams(target.split("?")[1] ?? "").forEach((v, k) => {
       query[k] = v;
     });
-    return { host: "", path, query };
+    return { host: "", path: path2, query };
   }
 }
 async function handleWixGateway(gw, app, adminUrl, req, res, wixClientId) {
   const url = req.url ?? "";
-  const path = url.split("?")[0];
-  const scope = path.startsWith("/__dev/wix/") ? "wix" : path.startsWith("/__dev/net/") ? "net" : null;
+  const path2 = url.split("?")[0];
+  const scope = path2.startsWith("/__dev/wix/") ? "wix" : path2.startsWith("/__dev/net/") ? "net" : null;
   if (!scope) return false;
-  const suffix = path.slice(scope === "wix" ? "/__dev/wix/".length : "/__dev/net/".length);
+  const suffix = path2.slice(scope === "wix" ? "/__dev/wix/".length : "/__dev/net/".length);
   const method = (req.method ?? "GET").toUpperCase();
   if (suffix === "events" && method === "GET") {
     res.writeHead(200, {
@@ -16784,17 +16795,17 @@ var init_sha256 = __esm({
 });
 
 // ../../core/serve-runtime/src/wix-bridge.ts
-function absoluteUrlRejection(path) {
+function absoluteUrlRejection(path2) {
   let host = "";
   try {
-    host = new URL(path).host;
+    host = new URL(path2).host;
   } catch {
   }
   return OWNER_SCOPED_WIX_HOST.test(host) ? "owner-only" : "open-proxy";
 }
-async function wixVisitorCall(method, path, body, token, fetchImpl = fetch, forwardedHeaders = {}) {
-  if (/^[a-z][a-z0-9+.-]*:\/\//i.test(path)) throw new Error("absolute URLs are not allowed");
-  const url = `${WIX_API}${path.startsWith("/") ? path : `/${path}`}`;
+async function wixVisitorCall(method, path2, body, token, fetchImpl = fetch, forwardedHeaders = {}) {
+  if (/^[a-z][a-z0-9+.-]*:\/\//i.test(path2)) throw new Error("absolute URLs are not allowed");
+  const url = `${WIX_API}${path2.startsWith("/") ? path2 : `/${path2}`}`;
   const res = await fetchImpl(url, {
     method,
     // Same header shape the dev-server bridge has always sent (wixapis accepts the
@@ -16825,13 +16836,13 @@ function normalizeWixForwardedHeaders(input) {
 function isSafeMsid(msid) {
   return /^[0-9a-fA-F-]{10,64}$/.test(msid);
 }
-function isOwnerSitesPath(path) {
-  return path === OWNER_SITES_QUERY_PATH || path === OWNER_SITES_COUNT_PATH;
+function isOwnerSitesPath(path2) {
+  return path2 === OWNER_SITES_QUERY_PATH || path2 === OWNER_SITES_COUNT_PATH;
 }
-async function wixOwnerSitesCall(path, cookieHeader, body, fetchImpl = fetch) {
-  if (!isOwnerSitesPath(path)) throw new Error("not an owner-sites path");
+async function wixOwnerSitesCall(path2, cookieHeader, body, fetchImpl = fetch) {
+  if (!isOwnerSitesPath(path2)) throw new Error("not an owner-sites path");
   const xsrf = /(?:^|;\s*)XSRF-TOKEN=([^;]+)/.exec(cookieHeader)?.[1];
-  const res = await fetchImpl(`${WIX_API}${path}`, {
+  const res = await fetchImpl(`${WIX_API}${path2}`, {
     method: "POST",
     headers: {
       Cookie: cookieHeader,
@@ -17106,8 +17117,8 @@ import { resolve as resolve24 } from "node:path";
 import { fileURLToPath as fileURLToPath14 } from "node:url";
 function loadCatalog2(tag) {
   if (catalogCache.has(tag)) return catalogCache.get(tag);
-  const path = resolve24(ROOT4, `tools/l10n/catalog.${tag}.json`);
-  const map = existsSync31(path) ? sourceMap(parseCatalog(readFileSync31(path, "utf8"))) : /* @__PURE__ */ new Map();
+  const path2 = resolve24(ROOT4, `tools/l10n/catalog.${tag}.json`);
+  const map = existsSync31(path2) ? sourceMap(parseCatalog(readFileSync31(path2, "utf8"))) : /* @__PURE__ */ new Map();
   catalogCache.set(tag, map);
   return map;
 }
@@ -17116,8 +17127,8 @@ function pickLocale(acceptLanguage) {
   const tags = acceptLanguage.split(",").map((s) => s.split(";")[0].trim().toLowerCase()).map((s) => s.split("-")[0]).filter((s) => s.length > 0);
   for (const tag of tags) {
     if (tag === "en") continue;
-    const path = resolve24(ROOT4, `tools/l10n/catalog.${tag}.json`);
-    if (existsSync31(path)) return tag;
+    const path2 = resolve24(ROOT4, `tools/l10n/catalog.${tag}.json`);
+    if (existsSync31(path2)) return tag;
   }
   return null;
 }
@@ -17213,8 +17224,8 @@ function assignStableIds(descriptor) {
     used.add(out);
     return out;
   };
-  const assign2 = (node, path) => {
-    const base = node.id && node.id.length > 0 ? node.id : path;
+  const assign2 = (node, path2) => {
+    const base = node.id && node.id.length > 0 ? node.id : path2;
     node.id = uniquify(base);
     const typeCounts = {};
     forEachChildComponent(node, (child) => {
@@ -17222,7 +17233,7 @@ function assignStableIds(descriptor) {
       const n = typeCounts[t] ?? 0;
       typeCounts[t] = n + 1;
       const seg = n === 0 ? t : `${t}.${n}`;
-      assign2(child, `${path}/${seg}`);
+      assign2(child, `${path2}/${seg}`);
     });
   };
   if (isNode(descriptor.payload)) assign2(descriptor.payload, descriptor.screenId);
@@ -18142,8 +18153,8 @@ var init_tier4_verifier = __esm({
       async verifyServedFile(bundleId, relPath, providedBytes) {
         const expected = this.expectedSri(bundleId, relPath);
         if (!expected) return { ok: true };
-        const path = resolve25(this.tier4Root, bundleId, relPath);
-        const bytes2 = providedBytes ?? (existsSync33(path) ? readFileSync33(path) : null);
+        const path2 = resolve25(this.tier4Root, bundleId, relPath);
+        const bytes2 = providedBytes ?? (existsSync33(path2) ? readFileSync33(path2) : null);
         if (!bytes2) return { ok: false, reason: "file not found" };
         if (computeSri(bytes2) !== expected) return { ok: false, reason: "sri mismatch" };
         return { ok: true };
@@ -18235,9 +18246,9 @@ function targetTenant(url, headers2, hostApp) {
   const hdr = headers2["x-himalaya-app"];
   const headerApp = Array.isArray(hdr) ? hdr[0] : hdr;
   let app = headerApp && headerApp.trim() ? headerApp.trim() : void 0;
-  const [path, query] = url.split("?");
+  const [path2, query] = url.split("?");
   if (!app) {
-    const m = /^\/v1\/(?:app-config|action-handlers)\/([^/?]+)/.exec(path);
+    const m = /^\/v1\/(?:app-config|action-handlers)\/([^/?]+)/.exec(path2);
     if (m) app = decodeURIComponent(m[1]);
   }
   if (!app && query) {
@@ -18249,9 +18260,9 @@ function targetTenant(url, headers2, hostApp) {
   return app;
 }
 function shouldServeFromPlane(url, headers2, hostApp) {
-  const path = url.split("?")[0];
-  if (path === "/v1/apps" || path === "/v1/templates") return true;
-  if (!path.startsWith("/v1/")) return false;
+  const path2 = url.split("?")[0];
+  if (path2 === "/v1/apps" || path2 === "/v1/templates") return true;
+  if (!path2.startsWith("/v1/")) return false;
   return targetTenant(url, headers2, hostApp) !== null;
 }
 async function proxyToServe(base, req, res) {
@@ -18511,8 +18522,8 @@ var init_FakeServiceProvider = __esm({
       constructor(services) {
         this.services = services;
       }
-      value(path) {
-        const raw = path.startsWith("$service:") ? path.slice("$service:".length) : path;
+      value(path2) {
+        const raw = path2.startsWith("$service:") ? path2.slice("$service:".length) : path2;
         const dot = raw.indexOf(".");
         const name = dot < 0 ? raw : raw.slice(0, dot);
         const tail = dot < 0 ? "" : raw.slice(dot + 1);
@@ -18524,8 +18535,8 @@ var init_FakeServiceProvider = __esm({
         }
         return cur;
       }
-      subscribe(path, cb) {
-        cb(this.value(path));
+      subscribe(path2, cb) {
+        cb(this.value(path2));
         return () => {
         };
       }
@@ -19025,21 +19036,21 @@ function useResolvedScalar(v, ctx) {
   return bound ?? void 0;
 }
 function useBoundValue(ctx, binding2) {
-  const path = servicePath(binding2);
+  const path2 = servicePath(binding2);
   const active = !!ctx.provider && !!binding2;
   const [state, setState] = useState(() => ({
-    path,
-    v: active ? ctx.provider.value(path) : void 0
+    path: path2,
+    v: active ? ctx.provider.value(path2) : void 0
   }));
-  const current = state.path === path ? state.v : active ? ctx.provider.value(path) : void 0;
-  if (state.path !== path) setState({ path, v: current });
+  const current = state.path === path2 ? state.v : active ? ctx.provider.value(path2) : void 0;
+  if (state.path !== path2) setState({ path: path2, v: current });
   useEffect(() => {
     if (!ctx.provider || !binding2) return;
     return ctx.provider.subscribe(
-      path,
-      (nv) => setState((prev) => prev.path === path && Object.is(prev.v, nv) ? prev : { path, v: nv })
+      path2,
+      (nv) => setState((prev) => prev.path === path2 && Object.is(prev.v, nv) ? prev : { path: path2, v: nv })
     );
-  }, [ctx.provider, path, binding2]);
+  }, [ctx.provider, path2, binding2]);
   return active ? current : void 0;
 }
 function useBoundValues(ctx, bindings) {
@@ -19050,16 +19061,16 @@ function useBoundValues(ctx, bindings) {
     [key2]
   );
   const [values, setValues] = useState(
-    () => paths.map((path) => ctx.provider && path ? ctx.provider.value(path) : void 0)
+    () => paths.map((path2) => ctx.provider && path2 ? ctx.provider.value(path2) : void 0)
   );
   useEffect(() => {
     if (!ctx.provider) {
       setValues(paths.map(() => void 0));
       return;
     }
-    setValues(paths.map((path) => path ? ctx.provider.value(path) : void 0));
+    setValues(paths.map((path2) => path2 ? ctx.provider.value(path2) : void 0));
     const disposers = paths.map(
-      (path, i) => path ? ctx.provider.subscribe(path, (v) => setValues((prev) => {
+      (path2, i) => path2 ? ctx.provider.subscribe(path2, (v) => setValues((prev) => {
         const next = prev.slice();
         next[i] = v;
         return next;
@@ -19450,7 +19461,6 @@ function shouldRevealError(args) {
 var EMAIL_RE, URL_HOST_RE, INTEGER_RE, NUMBER_RE;
 var init_validation = __esm({
   "../../core/ts/src/validation.ts"() {
-    "use strict";
     EMAIL_RE = /^[A-Za-z0-9._%+-]+@[A-Za-z0-9-]+(\.[A-Za-z0-9-]+)*\.[A-Za-z]{2,}$/;
     URL_HOST_RE = /^[A-Za-z0-9-]+(\.[A-Za-z0-9-]+)*(:[0-9]+)?$/;
     INTEGER_RE = /^[+-]?[0-9]+$/;
@@ -22623,9 +22633,9 @@ var init_worker_subtree_safe_types_generated = __esm({
 function isRecord(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
-function valueAtPath(value, path) {
+function valueAtPath(value, path2) {
   let current = value;
-  for (const segment of path.split(".")) {
+  for (const segment of path2.split(".")) {
     if (!isRecord(current)) return void 0;
     current = current[segment];
   }
@@ -22839,8 +22849,8 @@ function validateWorkerSubtree(raw, slotId, policy, actionCatalog) {
       return;
     }
     const props = node.body.props;
-    for (const path of rule.actions) checkAction(valueAtPath(props, path));
-    for (const path of WORKER_SUBTREE_COMMON_ACTION_PATHS) checkAction(valueAtPath(node, path));
+    for (const path2 of rule.actions) checkAction(valueAtPath(props, path2));
+    for (const path2 of WORKER_SUBTREE_COMMON_ACTION_PATHS) checkAction(valueAtPath(node, path2));
     for (const childRule of rule.children) {
       const value = valueAtPath(props, childRule.path);
       if (value === void 0 || value === null) {
@@ -22875,7 +22885,6 @@ function validateWorkerSubtree(raw, slotId, policy, actionCatalog) {
 var WORKER_SUBTREE_CEILINGS, ID_PART, ACTION_ID;
 var init_worker_subtree = __esm({
   "../../core/ts/src/worker-subtree.ts"() {
-    "use strict";
     init_worker_subtree_safe_types_generated();
     WORKER_SUBTREE_CEILINGS = Object.freeze({
       maxEncodedBytes: 65536,
@@ -22893,9 +22902,9 @@ var init_worker_subtree = __esm({
 // ../../core/web-renderer/src/renderNode.tsx
 import React5 from "react";
 import { Fragment as Fragment3, jsx as jsx6, jsxs as jsxs3 } from "react/jsx-runtime";
-function boundTokenName(path, fallback, ctx) {
-  if (typeof path === "string" && path) {
-    const r = resolveScalarStatic(path, ctx);
+function boundTokenName(path2, fallback, ctx) {
+  if (typeof path2 === "string" && path2) {
+    const r = resolveScalarStatic(path2, ctx);
     if (typeof r === "string" && r) return r;
   }
   return fallback;
@@ -24201,8 +24210,8 @@ function renderNodeInner(node, ctx) {
       }
     }
     const bind = {};
-    const addBind = (cssProp, path) => {
-      const k = measureKey(path);
+    const addBind = (cssProp, path2) => {
+      const k = measureKey(path2);
       if (k) bind[cssProp] = k;
     };
     addBind("height", m?.heightPath ?? m?.height_path);
@@ -24293,9 +24302,9 @@ function renderNodeInner(node, ctx) {
   }
   return out;
 }
-function boundModNumber(path, ctx) {
-  if (typeof path !== "string" || !path || measureKey(path) != null || !isBinding(path)) return void 0;
-  const r = resolveScalarStatic(path, ctx);
+function boundModNumber(path2, ctx) {
+  if (typeof path2 !== "string" || !path2 || measureKey(path2) != null || !isBinding(path2)) return void 0;
+  const r = resolveScalarStatic(path2, ctx);
   const n = typeof r === "number" ? r : typeof r === "string" && r.trim() !== "" ? Number(r) : NaN;
   return Number.isFinite(n) ? n : void 0;
 }
@@ -25242,8 +25251,8 @@ var init_renderNode = __esm({
     WorkerSubtreeNode = withExtras("WorkerSubtreeNode", ({ props, ctx, wrap, nodeId }) => {
       const slotId = nodeId;
       const extra = wrap;
-      const path = props.treeJsonPath ?? props.tree_json_path;
-      const value = useBoundValue(ctx, typeof path === "string" ? path : "");
+      const path2 = props.treeJsonPath ?? props.tree_json_path;
+      const value = useBoundValue(ctx, typeof path2 === "string" ? path2 : "");
       const policy = props.policy;
       const catalog = ctx.provider && typeof ctx.provider.listActions === "function" ? ctx.provider : null;
       const validation = React5.useMemo(() => {
@@ -25672,8 +25681,8 @@ var init_renderNode = __esm({
         this.state = state;
         for (const cb of this.listeners) cb(this.value("media"));
       }
-      value(path) {
-        const bare = path.replace(/^\$service:/, "");
+      value(path2) {
+        const bare = path2.replace(/^\$service:/, "");
         const parts = bare.split(".").filter(Boolean);
         if (parts[0] === "media") parts.shift();
         let value = this.state;
@@ -25683,8 +25692,8 @@ var init_renderNode = __esm({
         }
         return value;
       }
-      subscribe(path, cb) {
-        const wrapped = () => cb(this.value(path));
+      subscribe(path2, cb) {
+        const wrapped = () => cb(this.value(path2));
         this.listeners.add(wrapped);
         wrapped();
         return () => this.listeners.delete(wrapped);
@@ -26935,9 +26944,9 @@ var init_renderNode = __esm({
     });
     AvatarStripNode = withExtras("AvatarStripNode", ({ props, ctx, wrap }) => {
       const C = ctx.color;
-      const path = props.avatarsPath ?? props.avatars_path;
-      const bound = useResolvedScalar(path, ctx);
-      const raw = path != null ? bound : props.avatars;
+      const path2 = props.avatarsPath ?? props.avatars_path;
+      const bound = useResolvedScalar(path2, ctx);
+      const raw = path2 != null ? bound : props.avatars;
       const avatars = Array.isArray(raw) ? raw : [];
       const size = props.size ?? 36;
       const maxVisible = props.maxVisible ?? 4;
@@ -28568,27 +28577,27 @@ function resolveTreeScalar(v, provider, itemScope) {
   if (v.startsWith("$service:")) return provider.value(v) ?? void 0;
   return v;
 }
-function collectResolvedMediaRecord(record2, path, context) {
-  if (typeof record2.actionId === "string" || path && typeof record2.body === "object") return;
+function collectResolvedMediaRecord(record2, path2, context) {
+  if (typeof record2.actionId === "string" || path2 && typeof record2.body === "object") return;
   for (const [key2, child] of Object.entries(record2)) {
-    collectResolvedMediaValues(child, path ? `${path}.${key2}` : key2, {
+    collectResolvedMediaValues(child, path2 ? `${path2}.${key2}` : key2, {
       ...context,
       insideMediaProperty: context.insideMediaProperty || isMediaValueProperty(key2)
     });
   }
 }
-function collectResolvedMediaValues(value, path, context) {
+function collectResolvedMediaValues(value, path2, context) {
   const resolved2 = typeof value === "string" ? resolveTreeScalar(value, context.provider, context.itemScope) : value;
   if (typeof resolved2 === "string") {
-    if (context.insideMediaProperty) context.values[path] = resolved2;
+    if (context.insideMediaProperty) context.values[path2] = resolved2;
     return;
   }
   if (Array.isArray(resolved2)) {
-    resolved2.forEach((item, index) => collectResolvedMediaValues(item, `${path}[${index}]`, context));
+    resolved2.forEach((item, index) => collectResolvedMediaValues(item, `${path2}[${index}]`, context));
     return;
   }
   if (resolved2 && typeof resolved2 === "object") {
-    collectResolvedMediaRecord(resolved2, path, context);
+    collectResolvedMediaRecord(resolved2, path2, context);
   }
 }
 function collectComponentMediaValues(type, props, context) {
@@ -28609,12 +28618,12 @@ function collectNativeOnly(node) {
   walk2(node);
   return [...found].sort();
 }
-function buildRenderTree(node, path = "$", provider = null, itemScope = void 0, includeRawProps = false, env = null) {
+function buildRenderTree(node, path2 = "$", provider = null, itemScope = void 0, includeRawProps = false, env = null) {
   if (!node || typeof node !== "object") return null;
   const obj2 = node;
   const body = obj2.body ?? {};
   const type = typeof body.type === "string" ? body.type : "Unknown";
-  const id = typeof obj2.id === "string" && obj2.id ? obj2.id : path;
+  const id = typeof obj2.id === "string" && obj2.id ? obj2.id : path2;
   const out = { id, type };
   if (typeof body.package === "string") out.package = body.package;
   const props = body.props ?? {};
@@ -28723,7 +28732,7 @@ async function renderDescriptorWeb(descriptor, tokens, scheme, wantPng, services
   const stickyHeader = isSduiNode(desc.stickyHeader) ? desc.stickyHeader : void 0;
   const stickyFooter = isSduiNode(desc.stickyFooter) ? desc.stickyFooter : void 0;
   const clientEnv = clientEnvFor(scheme, width, isRTL);
-  const treeOf = (node, path, prov) => buildRenderTree(node, path, prov, void 0, true, clientEnv);
+  const treeOf = (node, path2, prov) => buildRenderTree(node, path2, prov, void 0, true, clientEnv);
   const renderTree = composeStickyTree(
     treeOf(payload, "$", null) ?? void 0,
     stickyHeader ? treeOf(stickyHeader, "$.stickyHeader", null) : null,
@@ -28923,8 +28932,8 @@ function declaredFamilies(tokens) {
 async function faceBytes(face, catalog, opts) {
   try {
     if (opts.source) {
-      const path = opts.source(face.file, face.sha256);
-      return path ? readFileSync34(path) : null;
+      const path2 = opts.source(face.file, face.sha256);
+      return path2 ? readFileSync34(path2) : null;
     }
     const bytes2 = await catalogFaceBytes(face.sha256, { catalog, ...opts.fetchFace ? { fetchFace: opts.fetchFace } : {} });
     return bytes2 ?? null;
@@ -29431,13 +29440,13 @@ function validateName(name) {
   if (typeof name !== "string") fail("name must be a string");
   if (!/^[a-z][a-z0-9]*(?:[-_.][a-z0-9]+)*$/.test(name)) fail(`name must be lowercase kebab-case: "${name}"`);
 }
-function validateFunctionRoute(method, path) {
+function validateFunctionRoute(method, path2) {
   if (!HTTP_METHODS.includes(method)) fail(`method must be one of ${HTTP_METHODS.join(", ")}`);
-  if (path !== "/" && (!/^\/[A-Za-z0-9._~!$&'()*+,;=:@%/-]+$/.test(path) || path.includes("//") || path.endsWith("/"))) {
-    fail(`path must be an absolute, normalized route without query syntax: "${path}"`);
+  if (path2 !== "/" && (!/^\/[A-Za-z0-9._~!$&'()*+,;=:@%/-]+$/.test(path2) || path2.includes("//") || path2.endsWith("/"))) {
+    fail(`path must be an absolute, normalized route without query syntax: "${path2}"`);
   }
-  const params = [...path.matchAll(/:([A-Za-z][A-Za-z0-9_]*)/g)].map((match) => match[1]);
-  if (new Set(params).size !== params.length) fail(`path contains duplicate parameter names: "${path}"`);
+  const params = [...path2.matchAll(/:([A-Za-z][A-Za-z0-9_]*)/g)].map((match) => match[1]);
+  if (new Set(params).size !== params.length) fail(`path contains duplicate parameter names: "${path2}"`);
 }
 function validateFunctionDefinition(definition) {
   validateName(definition.name);
@@ -30846,9 +30855,9 @@ function nativeSourceFiles(directory, extension, buildDirMaxDepth, depth = 1) {
   return entries.flatMap((entry) => {
     if (NATIVE_SCRATCH_DIRS.has(entry.name)) return [];
     if (entry.name === BUILD_OUTPUT_DIR && depth <= buildDirMaxDepth) return [];
-    const path = resolve28(directory, entry.name);
-    if (entry.isDirectory()) return nativeSourceFiles(path, extension, buildDirMaxDepth, depth + 1);
-    return entry.name.endsWith(extension) ? [path] : [];
+    const path2 = resolve28(directory, entry.name);
+    if (entry.isDirectory()) return nativeSourceFiles(path2, extension, buildDirMaxDepth, depth + 1);
+    return entry.name.endsWith(extension) ? [path2] : [];
   });
 }
 function registeredActions(source) {
@@ -31111,10 +31120,10 @@ function readJsonAt(app, file, root) {
   }
 }
 function writeJsonAt(app, file, root, value) {
-  const path = appConfigPath(app, file, root);
-  mkdirSync15(dirname20(path), { recursive: true });
-  writeFileSync12(path, JSON.stringify(value, null, 2) + "\n");
-  return path;
+  const path2 = appConfigPath(app, file, root);
+  mkdirSync15(dirname20(path2), { recursive: true });
+  writeFileSync12(path2, JSON.stringify(value, null, 2) + "\n");
+  return path2;
 }
 function sanitizeOverlay(raw) {
   if (!("appIconBadgeSources" in raw)) return raw;
@@ -31350,8 +31359,8 @@ function handleL10nRequest(req, res, state) {
   if (!state.app || app !== state.app.name) {
     return sendJson(res, 404, { error: "unknown_app", app }, cors);
   }
-  const path = resolve30(state.app.dir, "l10n", `${tag}.json`);
-  if (!existsSync36(path)) {
+  const path2 = resolve30(state.app.dir, "l10n", `${tag}.json`);
+  if (!existsSync36(path2)) {
     res.writeHead(204, cors);
     res.end();
     return;
@@ -31360,7 +31369,7 @@ function handleL10nRequest(req, res, state) {
   let messages;
   try {
     messages = Object.fromEntries(
-      keyMap(parseCatalog(readFileSync39(path, "utf8")), { sourceFallback: tag === sourceLocale })
+      keyMap(parseCatalog(readFileSync39(path2, "utf8")), { sourceFallback: tag === sourceLocale })
     );
   } catch {
     return sendJson(res, 500, { error: "catalog_unreadable", app, tag }, cors);
@@ -31590,16 +31599,16 @@ async function handleOwnerSitesRequest(req, res) {
 async function handleOwnerChatRequest(req, res) {
   const cors = { "access-control-allow-origin": "*" };
   const u = new URL(req.url ?? "", "http://localhost");
-  const path = u.pathname;
+  const path2 = u.pathname;
   const { resolveMetaSiteId, listChatroomsLive, sendChatMessageLive } = await import("./apps/wix-owner-clone-live.js");
-  if (path === "/v1/owner-chat/chatrooms" && req.method === "GET") {
+  if (path2 === "/v1/owner-chat/chatrooms" && req.method === "GET") {
     const metaSiteId = u.searchParams.get("metaSiteId") || await resolveMetaSiteId();
     if (!metaSiteId) return sendJson(res, 400, { error: "no_meta_site" }, cors);
     const rooms = await listChatroomsLive(metaSiteId);
     if (rooms == null) return sendJson(res, 502, { error: "chatrooms_unavailable" }, cors);
     return sendJson(res, 200, { chatrooms: rooms }, cors);
   }
-  if (path === "/v1/owner-chat/send" && req.method === "POST") {
+  if (path2 === "/v1/owner-chat/send" && req.method === "POST") {
     let parsed;
     try {
       parsed = JSON.parse(await readBody2(req) || "{}");
@@ -32318,7 +32327,7 @@ function webWixSession(req, res, state) {
 async function handleWebWix(req, res, state) {
   const session = webWixSession(req, res, state);
   const auth = resolveWebWixAuth(state.app);
-  const path = new URL(req.url ?? "", "http://localhost").pathname;
+  const path2 = new URL(req.url ?? "", "http://localhost").pathname;
   const readJson3 = async () => {
     const chunks = [];
     for await (const c of req) chunks.push(c);
@@ -32335,7 +32344,7 @@ async function handleWebWix(req, res, state) {
     res.setHeader("access-control-allow-origin", "*");
     res.end(JSON.stringify(obj2));
   };
-  if (path === "/v1/__webwix/login" && req.method === "POST") {
+  if (path2 === "/v1/__webwix/login" && req.method === "POST") {
     const b = await readJson3();
     try {
       const { memberToken, visitorToken } = await memberDirectLogin(
@@ -32352,7 +32361,7 @@ async function handleWebWix(req, res, state) {
       return reply(200, { ok: false, error: String(e?.message ?? e) });
     }
   }
-  if (path === "/v1/__webwix/call" && req.method === "POST") {
+  if (path2 === "/v1/__webwix/call" && req.method === "POST") {
     const b = await readJson3();
     if (b.ownerMsid !== void 0 || b.checkOwnerSession === true) {
       const msid = String(b.ownerMsid ?? "");
@@ -32439,12 +32448,12 @@ async function handleWebWix(req, res, state) {
       return reply(200, { status: 0, body: JSON.stringify({ error: String(e?.message ?? e) }) });
     }
   }
-  if (path === "/v1/__webwix/logout" && req.method === "POST") {
+  if (path2 === "/v1/__webwix/logout" && req.method === "POST") {
     session.memberToken = void 0;
     session.email = void 0;
     return reply(200, { ok: true });
   }
-  if (path === "/v1/__webwix/identity" && (req.method === "GET" || req.method === "POST")) {
+  if (path2 === "/v1/__webwix/identity" && (req.method === "GET" || req.method === "POST")) {
     if (!session.memberToken) return reply(200, { authenticated: false, userId: null, email: "" });
     let userId = null;
     try {
@@ -32468,7 +32477,7 @@ async function handleWebWix(req, res, state) {
       } : null
     });
   }
-  if (path === "/v1/__webwix/register" && req.method === "POST") {
+  if (path2 === "/v1/__webwix/register" && req.method === "POST") {
     const b = await readJson3();
     try {
       const { memberToken, visitorToken } = await memberDirectRegister(
@@ -32885,8 +32894,8 @@ async function handleDev(req, res, state) {
 }
 async function handleAdminPlayground(req, res, state) {
   const url = req.url ?? "";
-  const path = url.split("?")[0];
-  const sampleMatch = /^\/v1\/admin\/sdui-samples\/([^/]+)$/.exec(path);
+  const path2 = url.split("?")[0];
+  const sampleMatch = /^\/v1\/admin\/sdui-samples\/([^/]+)$/.exec(path2);
   if (sampleMatch && req.method === "GET") {
     const name = decodeURIComponent(sampleMatch[1]);
     if (!/^[a-zA-Z0-9._-]+$/.test(name)) return sendJson(res, 400, { error: "bad_name" });
@@ -32897,7 +32906,7 @@ async function handleAdminPlayground(req, res, state) {
       return sendJson(res, 404, { error: "sample_not_found", name });
     }
   }
-  if (path === "/v1/admin/sdui-samples" && req.method === "GET") {
+  if (path2 === "/v1/admin/sdui-samples" && req.method === "GET") {
     try {
       const { readdir } = await import("node:fs/promises");
       const files = (await readdir(SAMPLES_ROOT)).filter((f) => f.endsWith(".json"));
@@ -32906,7 +32915,7 @@ async function handleAdminPlayground(req, res, state) {
       return sendJson(res, 500, { error: err.message });
     }
   }
-  if (path === "/v1/admin/screens" && req.method === "GET") {
+  if (path2 === "/v1/admin/screens" && req.method === "GET") {
     const meta = state.app.meta;
     const fixedIds = meta.screenIds;
     const fixedSet = new Set(fixedIds);
@@ -32955,12 +32964,12 @@ async function handleAdminPlayground(req, res, state) {
       templatedPatterns: meta.templatedPatterns
     });
   }
-  const historyMatch = /^\/v1\/admin\/screens\/(.+?)\/history(?:\?|$)/.exec(path);
+  const historyMatch = /^\/v1\/admin\/screens\/(.+?)\/history(?:\?|$)/.exec(path2);
   if (historyMatch && req.method === "GET") {
     const screenId = decodeURIComponent(historyMatch[1]);
     return sendJson(res, 200, { screenId, history: state.localOverrideHistory.get(screenId) ?? [] });
   }
-  const revertMatch = /^\/v1\/admin\/screens\/(.+?)\/revert(?:\?|$)/.exec(path);
+  const revertMatch = /^\/v1\/admin\/screens\/(.+?)\/revert(?:\?|$)/.exec(path2);
   if (revertMatch && req.method === "POST") {
     const screenId = decodeURIComponent(revertMatch[1]);
     const historyId = Number(new URLSearchParams(url.split("?")[1] ?? "").get("historyId"));
@@ -32976,7 +32985,7 @@ async function handleAdminPlayground(req, res, state) {
     invalidate(state, screenId);
     return sendJson(res, 200, { status: "ok", screenId, revertedTo: historyId });
   }
-  if (path === "/v1/admin/tab-badge" && req.method === "POST") {
+  if (path2 === "/v1/admin/tab-badge" && req.method === "POST") {
     let body;
     try {
       body = JSON.parse(await readBody2(req));
@@ -32995,7 +33004,7 @@ async function handleAdminPlayground(req, res, state) {
     );
     return sendJson(res, 200, { status: "ok", tabId: body.tabId, count: clearing ? null : body.count });
   }
-  const validateMatch = /^\/v1\/admin\/screens\/(.+?)\/validate(?:\?|$)/.exec(path);
+  const validateMatch = /^\/v1\/admin\/screens\/(.+?)\/validate(?:\?|$)/.exec(path2);
   if (validateMatch && req.method === "GET") {
     const screenId = decodeURIComponent(validateMatch[1]);
     const strict = /[?&]strict=1(?:&|$)/.test(url);
@@ -33023,7 +33032,7 @@ async function handleAdminPlayground(req, res, state) {
     });
     return sendJson(res, report2.ok ? 200 : 422, report2);
   }
-  const detailMatch = /^\/v1\/admin\/screens\/([^/]+)$/.exec(path);
+  const detailMatch = /^\/v1\/admin\/screens\/([^/]+)$/.exec(path2);
   if (detailMatch && req.method === "GET") {
     const screenId = decodeURIComponent(detailMatch[1]);
     const wantBuilt = /[?&]source=built(?:&|$)/.test(url);
@@ -33060,7 +33069,7 @@ async function handleAdminPlayground(req, res, state) {
     invalidate(state, screenId);
     return sendJson(res, existed ? 200 : 404, { status: existed ? "ok" : "not_found" });
   }
-  if (path === "/v1/admin/app-config" && state.app) {
+  if (path2 === "/v1/admin/app-config" && state.app) {
     const built = deriveNavigationConfig(state.app.meta);
     if (req.method === "GET") {
       const effective = state.appConfigOverride ? deepMerge3(built, state.appConfigOverride) : built;
@@ -33085,7 +33094,7 @@ async function handleAdminPlayground(req, res, state) {
       return sendJson(res, existed ? 200 : 404, { status: existed ? "ok" : "not_found" });
     }
   }
-  if (path === "/v1/admin/tokens" && state.app) {
+  if (path2 === "/v1/admin/tokens" && state.app) {
     const built = readAppTokens(state) ?? {};
     if (req.method === "GET") {
       const effective = state.tokensOverride ? deepMerge3(built, state.tokensOverride) : built;
@@ -33110,7 +33119,7 @@ async function handleAdminPlayground(req, res, state) {
       return sendJson(res, existed ? 200 : 404, { status: existed ? "ok" : "not_found" });
     }
   }
-  return sendJson(res, 404, { error: "unknown_admin_route", path });
+  return sendJson(res, 404, { error: "unknown_admin_route", path: path2 });
 }
 function isNavControlPatch(patch) {
   if (!patch || typeof patch !== "object") return false;
@@ -33165,10 +33174,10 @@ async function readBundleFile(name, dir) {
     resolve30(root, `${name}.js`),
     resolve30(root, name)
   ]);
-  for (const path of candidates) {
-    if (!roots.some((root) => path.startsWith(root))) continue;
+  for (const path2 of candidates) {
+    if (!roots.some((root) => path2.startsWith(root))) continue;
     try {
-      const bytes2 = await readFile(path);
+      const bytes2 = await readFile(path2);
       const integrity2 = "sha256-" + createHash15("sha256").update(bytes2).digest("base64");
       return { bytes: bytes2, integrity: integrity2 };
     } catch {
@@ -33348,10 +33357,10 @@ function handleActionHandlersManifest(res, app) {
 }
 async function handleActionHandlerBundleGet(res, app) {
   if (!/^[A-Za-z0-9_.\-]+$/.test(app)) return sendJson(res, 404, { error: "not_found" });
-  const path = resolve30(ACTION_HANDLERS_ROOT, `${app}.handlers.js`);
-  if (!path.startsWith(ACTION_HANDLERS_ROOT)) return sendJson(res, 404, { error: "not_found" });
+  const path2 = resolve30(ACTION_HANDLERS_ROOT, `${app}.handlers.js`);
+  if (!path2.startsWith(ACTION_HANDLERS_ROOT)) return sendJson(res, 404, { error: "not_found" });
   try {
-    const bytes2 = await readFile(path);
+    const bytes2 = await readFile(path2);
     const integrity2 = "sha256-" + createHash15("sha256").update(bytes2).digest("base64");
     res.setHeader("content-type", "application/javascript; charset=utf-8");
     res.setHeader("cache-control", "max-age=300");
@@ -34125,13 +34134,13 @@ var init_capability_fixtures = __esm({
     };
     MEDIA_EXT = (url) => {
       if (typeof url !== "string") return null;
-      let path;
+      let path2;
       try {
-        path = new URL(url).pathname;
+        path2 = new URL(url).pathname;
       } catch {
-        path = url.split("#")[0].split("?")[0];
+        path2 = url.split("#")[0].split("?")[0];
       }
-      const segment = path.split("/").pop() ?? "";
+      const segment = path2.split("/").pop() ?? "";
       const m = /\.([a-z0-9]{2,5})$/i.exec(segment);
       return m ? m[1].toLowerCase() : null;
     };
@@ -34292,9 +34301,9 @@ var init_capability_fixtures = __esm({
       // made every write resolve to the same file, and a consumer passing that handle onward (an export
       // writing `exports/<id>.gpx`) referenced something that does not exist.
       "capability.files.write": (p, ctx) => {
-        const path = typeof p.path === "string" && p.path ? p.path : "crawl/written.txt";
-        const name = path.split("/").pop() || path;
-        return { uri: `file:///${path.replace(/^\/+/, "")}`, name, mimeType: typeof p.mimeType === "string" ? p.mimeType : "application/octet-stream", sizeBytes: 1024, modifiedAt: ctx.clock };
+        const path2 = typeof p.path === "string" && p.path ? p.path : "crawl/written.txt";
+        const name = path2.split("/").pop() || path2;
+        return { uri: `file:///${path2.replace(/^\/+/, "")}`, name, mimeType: typeof p.mimeType === "string" ? p.mimeType : "application/octet-stream", sizeBytes: 1024, modifiedAt: ctx.clock };
       },
       "capability.files.remove": () => ({ removed: true })
     };
@@ -34581,14 +34590,14 @@ function relationalSignature(state) {
 }
 function listLengths(state, depth = 4) {
   const out = {};
-  const walk2 = (node, path, left) => {
+  const walk2 = (node, path2, left) => {
     if (left < 0 || node === null || typeof node !== "object") return;
     if (Array.isArray(node)) {
-      out[path] = node.length;
+      out[path2] = node.length;
       return;
     }
     for (const [k, v] of Object.entries(node)) {
-      walk2(v, path ? `${path}.${k}` : k, left - 1);
+      walk2(v, path2 ? `${path2}.${k}` : k, left - 1);
     }
   };
   walk2(state, "", depth);
@@ -34609,26 +34618,26 @@ function summarizeDiff(aSig, bSig, limit = 3) {
     if (t === void 0) return "undefined";
     return t.length > 80 ? `${t.slice(0, 77)}\u2026` : t;
   };
-  const walk2 = (x, y, path) => {
+  const walk2 = (x, y, path2) => {
     if (diffs.length >= limit) return;
     const bothObjects = x !== null && y !== null && typeof x === "object" && typeof y === "object" && !Array.isArray(x) && !Array.isArray(y);
     if (bothObjects) {
       for (const k of /* @__PURE__ */ new Set([...Object.keys(x), ...Object.keys(y)])) {
-        walk2(x[k], y[k], path ? `${path}.${k}` : k);
+        walk2(x[k], y[k], path2 ? `${path2}.${k}` : k);
       }
       return;
     }
     if (Array.isArray(x) && Array.isArray(y)) {
       if (x.length !== y.length) {
-        diffs.push(`${path || "state"}: ${x.length} \u2192 ${y.length} items`);
+        diffs.push(`${path2 || "state"}: ${x.length} \u2192 ${y.length} items`);
         return;
       }
-      for (let i = 0; i < x.length && diffs.length < limit; i++) walk2(x[i], y[i], `${path}[${i}]`);
+      for (let i = 0; i < x.length && diffs.length < limit; i++) walk2(x[i], y[i], `${path2}[${i}]`);
       return;
     }
     const xs = brief(x);
     const ys = brief(y);
-    if (xs !== ys) diffs.push(`${path || "state"}: ${xs} \u2192 ${ys}`);
+    if (xs !== ys) diffs.push(`${path2 || "state"}: ${xs} \u2192 ${ys}`);
   };
   walk2(a, b, "");
   return diffs.slice(0, limit).join("; ");
@@ -34717,6 +34726,7 @@ function actionSites(payload) {
             actionId: a.actionId,
             params: a.params ?? {},
             ...a.args ? { args: a.args } : {},
+            ...a.presentation ? { presentation: a.presentation } : {},
             ...ambient ? { itemsPath: ambient } : {},
             // `rec` IS the prop bag that carries this callback — for a plain node that is
             // `body.props`, and for a FormField variant the nested `text`/`picker`/… object, which
@@ -34835,8 +34845,8 @@ function sourceOfStack(stack, bundleMap) {
   return mapBundleFrame(bundleMap, Number(m[1]), Number(m[2]) - 1) ?? void 0;
 }
 function netTransport(rules) {
-  return async (method, path, body) => {
-    const [bare, search] = String(path).split("?", 2);
+  return async (method, path2, body) => {
+    const [bare, search] = String(path2).split("?", 2);
     const query = {};
     if (search) for (const [k, v] of new URLSearchParams(search)) query[k] = v;
     const res = resolveScenario(rules, {
@@ -34883,9 +34893,9 @@ function layeredTransport(layers) {
   const cms = layers.cmsSeed && Object.keys(layers.cmsSeed).length ? layers.cmsSeed : null;
   const canned = layers.canned && Object.keys(layers.canned).length ? layers.canned : null;
   const label2 = [rules && "mocked", cms && "cms", canned && "canned"].filter(Boolean).join("+") || "offline";
-  const call = async (method, path, body) => {
+  const call = async (method, path2, body) => {
     const m = String(method).toUpperCase();
-    const p = String(path);
+    const p = String(path2);
     const [bare, search] = p.split("?", 2);
     if (rules) {
       const query = {};
@@ -35364,9 +35374,9 @@ async function crawlScreenInner(opts) {
       const resolveItem = (v) => {
         if (typeof v !== "string" || !v.startsWith("$item")) return v;
         if (!row0) return v;
-        const path = v === "$item" ? "" : v.startsWith("$item.") ? v.slice("$item.".length) : "";
-        if (!path) return v;
-        return pathValue(row0, path);
+        const path2 = v === "$item" ? "" : v.startsWith("$item.") ? v.slice("$item.".length) : "";
+        if (!path2) return v;
+        return pathValue(row0, path2);
       };
       const target = resolveItem(merged.screenId);
       if (typeof target !== "string" || !target || target.includes("$")) continue;
@@ -35466,6 +35476,23 @@ async function crawlScreenInner(opts) {
     actionsSkipped.push({ action: s.actionId, why: "embedded-preview" });
     return false;
   });
+  if (!opts.capabilitySuccess) {
+    for (const site of sites) {
+      if (site.actionId !== "himi.open") continue;
+      if (["back", "dismiss", "alert", "snackbar"].includes(site.presentation ?? "")) continue;
+      const target = site.args?.screenId ?? site.params.screenId;
+      if (target != null && target !== "") continue;
+      findings.push({
+        screen: screenId,
+        trigger: "boot",
+        invariant: "nav-target-absent",
+        severity: "error",
+        at: site.componentId ?? void 0,
+        message: '"himi.open" has no screenId \u2014 the tap opens nothing',
+        hint: 'Pass { screenId: "detail", id: "selected-id" } in params. "screen" is not a routing key; put destination input alongside screenId.'
+      });
+    }
+  }
   const boot = (skipAppear = false) => bundleJs ? bootScreenWorker({ bundleJs, descriptor, wixCall, screenId, inputOverride: opts.inputOverride, budgetMs: opts.budgetMs, clock: opts.clock, seed: opts.seed, skipAppear, localDbSchema: opts.localDbSchema, capabilitySuccess: opts.capabilitySuccess === true, ...opts.evaluator ? { evaluator: opts.evaluator } : {} }) : null;
   const check = (trigger, state, errors, defects = {}) => {
     for (const [svc, paths] of Object.entries(defects)) {
@@ -35787,8 +35814,8 @@ async function crawlScreenHostileInner(opts, variant) {
   const base = layeredTransport({ rules: opts.rules, cmsSeed: opts.cmsSeed, canned: opts.canned });
   if (base.label === "offline") return [];
   const axis = `hostile:${variant}`;
-  const wixCall = variant === "empty" ? async (method, path, body) => emptiedArrays(await base.call(method, path, body)) : async (method, path) => {
-    throw new Error(`Wix 500 for ${String(method).toUpperCase()} ${String(path).split("?")[0]}`);
+  const wixCall = variant === "empty" ? async (method, path2, body) => emptiedArrays(await base.call(method, path2, body)) : async (method, path2) => {
+    throw new Error(`Wix 500 for ${String(method).toUpperCase()} ${String(path2).split("?")[0]}`);
   };
   let w;
   try {
@@ -35991,17 +36018,17 @@ async function crawlScreenDeep(opts, deep) {
       localDbSchema: opts.localDbSchema,
       capabilitySuccess: opts.capabilitySuccess === true
     });
-    const pathLabel = (path) => path.map((i) => sites[i].actionId.replace(/^tier5\./, "")).join(" \u2192 ");
+    const pathLabel = (path2) => path2.map((i) => sites[i].actionId.replace(/^tier5\./, "")).join(" \u2192 ");
     while (queue.length) {
       if (visited.size >= maxNodes || dispatches >= maxDispatches) {
         capped = true;
         break;
       }
-      const path = queue.shift();
+      const path2 = queue.shift();
       const w = await boot();
       try {
         let threwAt = null;
-        for (const [step, siteIdx] of path.entries()) {
+        for (const [step, siteIdx] of path2.entries()) {
           const site = sites[siteIdx];
           const parsed = parseWorkerAction(site.actionId);
           const handle = w.handles[parsed.service];
@@ -36023,7 +36050,7 @@ async function crawlScreenDeep(opts, deep) {
           try {
             await handle.dispatch(parsed.action, ...workerArgs(effective));
           } catch (e) {
-            if (step === path.length - 1 && path.length >= 2) {
+            if (step === path2.length - 1 && path2.length >= 2) {
               const source = sourceOfStack(e.stack, opts.bundleMap);
               findings.push({
                 screen: screenId,
@@ -36032,7 +36059,7 @@ async function crawlScreenDeep(opts, deep) {
                 severity: "error",
                 axis: "deep",
                 ...source ? { source } : {},
-                message: `after ${pathLabel(path)}: ${parsed.action}: ${errText(e)}`,
+                message: `after ${pathLabel(path2)}: ${parsed.action}: ${errText(e)}`,
                 hint: "this chain of taps crashes the worker \u2014 each step passed alone, the SEQUENCE is the bug"
               });
             }
@@ -36046,8 +36073,8 @@ async function crawlScreenDeep(opts, deep) {
         const hash = deepStateSignature(state, defects);
         if (visited.has(hash)) continue;
         visited.add(hash);
-        if (path.length >= 2) {
-          const last = sites[path[path.length - 1]];
+        if (path2.length >= 2) {
+          const last = sites[path2[path2.length - 1]];
           const lastTrigger = { tap: last.componentId, key: last.key, action: last.actionId };
           for (const [svc, paths] of Object.entries(defects)) {
             for (const p of paths) {
@@ -36057,7 +36084,7 @@ async function crawlScreenDeep(opts, deep) {
                 invariant: "non-finite-number",
                 severity: "error",
                 axis: "deep",
-                message: `after ${pathLabel(path)}: ${svc} state holds a non-finite number: ${p}`,
+                message: `after ${pathLabel(path2)}: ${svc} state holds a non-finite number: ${p}`,
                 at: `${svc}.${p.split(" = ")[0]}`,
                 hint: "a chain of taps produced the bad arithmetic \u2014 each step alone was fine; check what the SEQUENCE accumulates"
               });
@@ -36071,7 +36098,7 @@ async function crawlScreenDeep(opts, deep) {
                 invariant: d.kind,
                 severity: "error",
                 axis: "deep",
-                message: `after ${pathLabel(path)}: ${resolvedDefectMessage(d)}`,
+                message: `after ${pathLabel(path2)}: ${resolvedDefectMessage(d)}`,
                 at,
                 field,
                 hint: resolvedDefectHint(d)
@@ -36079,8 +36106,8 @@ async function crawlScreenDeep(opts, deep) {
             });
           }
         }
-        if (path.length < deep.depth) {
-          for (let i = 0; i < sites.length; i++) queue.push([...path, i]);
+        if (path2.length < deep.depth) {
+          for (let i = 0; i < sites.length; i++) queue.push([...path2, i]);
         }
       } finally {
         w.dispose();
@@ -36171,13 +36198,13 @@ async function crawlScreenRelations(opts) {
       capabilitySuccess: opts.capabilitySuccess === true,
       ...opts.evaluator ? { evaluator: opts.evaluator } : {}
     });
-    const replay = async (path, rowFor = () => null) => {
+    const replay = async (path2, rowFor = () => null) => {
       const w = await boot();
       try {
         if (w.errors.length) return null;
         let prev = snapshot(w).state;
         const bootState = prev;
-        for (const [i, site] of path.entries()) {
+        for (const [i, site] of path2.entries()) {
           const parsed = parseWorkerAction(site.actionId);
           const h = w.handles[parsed.service];
           if (!h || !h.actionNames().includes(parsed.action)) return null;
@@ -36533,9 +36560,9 @@ function routesOverlap(left, right) {
     return segment.startsWith(":") || other.startsWith(":") || segment === other;
   });
 }
-function validateRouteConflicts(definitions) {
+function validateRouteConflicts(definitions2) {
   const seen = [];
-  for (const definition of definitions) {
+  for (const definition of definitions2) {
     validateFunctionDefinition(definition);
     const previous = seen.find((route) => route.method === definition.method && routesOverlap(route.path, definition.path));
     if (previous) throw new Error(`duplicate or ambiguous function route: ${definition.name} conflicts with ${previous.name} at ${definition.method} ${definition.path}`);
@@ -36589,13 +36616,13 @@ function rejectUnsafeSource(name, source) {
     throw new Error(`function ${name} must export handler`);
   }
 }
-async function buildFunctions(definitions, sources, options = {}) {
-  validateRouteConflicts(definitions);
+async function buildFunctions(definitions2, sources, options = {}) {
+  validateRouteConflicts(definitions2);
   validateDependencyPolicy(options.dependencies ?? [], options.dependencyPolicy);
   const sbom = createFunctionSbom(options.dependencies ?? []);
   const runBuild = await (_buildP ??= loadBuild());
   const built = [];
-  for (const definition of definitions) {
+  for (const definition of definitions2) {
     const source = sources[definition.name];
     if (typeof source !== "string") throw new Error(`missing source for function ${definition.name}`);
     assertStaticDependencySource(source);
@@ -36747,10 +36774,10 @@ function l10nLintOptions(locale, appDir2) {
   const tags = (locale.translations ?? []).filter((t) => t !== locale.default);
   const catalog = /* @__PURE__ */ new Set();
   for (const tag of tags) {
-    const path = join34(appDir2, "l10n", `${tag}.json`);
-    if (!existsSync37(path)) continue;
+    const path2 = join34(appDir2, "l10n", `${tag}.json`);
+    if (!existsSync37(path2)) continue;
     try {
-      const parsed = JSON.parse(readFileSync40(path, "utf8"));
+      const parsed = JSON.parse(readFileSync40(path2, "utf8"));
       for (const m of Object.values(parsed.messages ?? {})) {
         if (typeof m?.source === "string" && typeof m.translation === "string" && m.translation.length > 0) {
           catalog.add(m.source);
@@ -37020,8 +37047,8 @@ async function buildRelease(app, dest, opts = {}) {
 function countingWixCall(base) {
   let returned = 0;
   return {
-    call: async (method, path, body) => {
-      const out = await base(method, path, body);
+    call: async (method, path2, body) => {
+      const out = await base(method, path2, body);
       returned += 1;
       return out;
     },
@@ -37112,9 +37139,9 @@ async function buildFromLoaded(preloaded, dest, opts = {}) {
       );
     }
     const token = await mintVisitor(clientId);
-    liveWixCall = async (method, path, body) => {
+    liveWixCall = async (method, path2, body) => {
       const bodyStr = body === void 0 ? void 0 : typeof body === "string" ? body : JSON.stringify(body);
-      const r = await webWixCall(method, path, bodyStr, token);
+      const r = await webWixCall(method, path2, bodyStr, token);
       if (r.status < 200 || r.status >= 300) throw new Error(`HTTP ${r.status}: ${String(r.body).slice(0, 300)}`);
       try {
         return r.body ? JSON.parse(r.body) : {};
@@ -37211,9 +37238,9 @@ async function buildFromLoaded(preloaded, dest, opts = {}) {
   const MAX_AUTHORING_DOC_BYTES = 128 * 1024;
   if (store.putDoc) {
     for (const [name, file] of [["spec", "SPEC.md"], ["mobile-ux", "MOBILE-UX.md"]]) {
-      const path = join34(preloaded.dir, file);
-      if (!existsSync37(path)) continue;
-      const bytes2 = readFileSync40(path);
+      const path2 = join34(preloaded.dir, file);
+      if (!existsSync37(path2)) continue;
+      const bytes2 = readFileSync40(path2);
       if (bytes2.length === 0 || bytes2.length > MAX_AUTHORING_DOC_BYTES) {
         throw new Error(`${file} must be non-empty and at most ${MAX_AUTHORING_DOC_BYTES} bytes to ship with a release.`);
       }
@@ -37641,7 +37668,7 @@ async function buildFromLoaded(preloaded, dest, opts = {}) {
     }
     if (store.putWidget) {
       const bakedWidgets = await bakeWidgets(
-        (path) => devFetch(`${base}${path}`, { headers: { "X-Himalaya-App": app } }),
+        (path2) => devFetch(`${base}${path2}`, { headers: { "X-Himalaya-App": app } }),
         (widgetId, json5) => store.putWidget(app, widgetId, json5),
         // `opts.tier5Dir`, NOT the `tier5Dir` local — that one falls back to the
         // repo-global dir, where this package's widgets cannot be told from anyone
@@ -38400,8 +38427,8 @@ async function captchaRequest(options) {
   }
   const setup = options.operation === "setup";
   const base = options.target.control.replace(/\/+$/, "");
-  const path = setup ? "/v1/admin/captcha/setup" : `/v1/admin/captcha?app=${encodeURIComponent(options.input.app)}`;
-  const response = await (options.fetchImpl ?? fetch)(base + path, {
+  const path2 = setup ? "/v1/admin/captcha/setup" : `/v1/admin/captcha?app=${encodeURIComponent(options.input.app)}`;
+  const response = await (options.fetchImpl ?? fetch)(base + path2, {
     method: setup ? "POST" : "GET",
     redirect: "error",
     signal: AbortSignal.timeout(6e4),
@@ -38453,9 +38480,9 @@ __export(captcha_exports, {
 });
 import { readFileSync as readFileSync41 } from "node:fs";
 import { resolve as resolve32 } from "node:path";
-function readObject(path) {
+function readObject(path2) {
   try {
-    return JSON.parse(readFileSync41(path, "utf8"));
+    return JSON.parse(readFileSync41(path2, "utf8"));
   } catch {
     return {};
   }
@@ -38533,11 +38560,11 @@ async function pushSetupRequest(options) {
     return refuse3("push_setup_body_too_large");
   }
   const base = options.target.control.replace(/\/+$/, "");
-  let path = "/v1/admin/push/setup";
+  let path2 = "/v1/admin/push/setup";
   if (!setup) {
     const q = new URLSearchParams({ app: options.query.app, site: options.query.site });
     if (options.query.verify) q.set("verify", options.query.verify);
-    path += `?${q.toString()}`;
+    path2 += `?${q.toString()}`;
   }
   const headers2 = {
     "x-control-token": options.target.controlToken,
@@ -38548,7 +38575,7 @@ async function pushSetupRequest(options) {
     ...options.previewTag ? { "x-wix-route-serve": options.previewTag } : {}
   };
   try {
-    const response = await (options.fetchImpl ?? fetch)(base + path, {
+    const response = await (options.fetchImpl ?? fetch)(base + path2, {
       method: setup ? "POST" : "GET",
       headers: headers2,
       redirect: "error",
@@ -38601,9 +38628,9 @@ var init_push_setup_apple_credentials = __esm({
 // src/push-onboarding.ts
 import { existsSync as existsSync38, mkdirSync as mkdirSync17, readFileSync as readFileSync42, statSync as statSync7, writeFileSync as writeFileSync13, chmodSync as chmodSync2 } from "node:fs";
 import { basename as basename9, dirname as dirname22, join as join35, resolve as resolve33 } from "node:path";
-function readJson2(path) {
+function readJson2(path2) {
   try {
-    const parsed = JSON.parse(readFileSync42(path, "utf8"));
+    const parsed = JSON.parse(readFileSync42(path2, "utf8"));
     return parsed && typeof parsed === "object" && !Array.isArray(parsed) ? parsed : {};
   } catch {
     return {};
@@ -38676,10 +38703,10 @@ function localIdentityRefusal(i) {
   }
   return null;
 }
-function readKeyFile(path) {
+function readKeyFile(path2) {
   let size;
   try {
-    size = statSync7(path).size;
+    size = statSync7(path2).size;
   } catch {
     return { ok: false, code: "key_file_unreadable", reason: "cannot read the selected key file; check its path and file permissions" };
   }
@@ -38688,7 +38715,7 @@ function readKeyFile(path) {
   }
   let body;
   try {
-    body = readFileSync42(path, "utf8");
+    body = readFileSync42(path2, "utf8");
   } catch {
     return { ok: false, code: "key_file_unreadable", reason: "cannot read the selected key file; check its path and file permissions" };
   }
@@ -38742,20 +38769,20 @@ function buildPushSetupBody(i, keys) {
   };
 }
 function readPushOnboarding(dir) {
-  const path = join35(resolve33(dir), PUSH_ONBOARDING_PATH);
-  if (!existsSync38(path)) return { version: 1 };
-  const parsed = readJson2(path);
+  const path2 = join35(resolve33(dir), PUSH_ONBOARDING_PATH);
+  if (!existsSync38(path2)) return { version: 1 };
+  const parsed = readJson2(path2);
   return { version: 1, ...parsed };
 }
 function writeFile(dir, file) {
-  const path = join35(resolve33(dir), PUSH_ONBOARDING_PATH);
-  mkdirSync17(dirname22(path), { recursive: true, mode: 448 });
-  writeFileSync13(path, JSON.stringify(file, null, 2) + "\n", { mode: 384 });
+  const path2 = join35(resolve33(dir), PUSH_ONBOARDING_PATH);
+  mkdirSync17(dirname22(path2), { recursive: true, mode: 448 });
+  writeFileSync13(path2, JSON.stringify(file, null, 2) + "\n", { mode: 384 });
   try {
-    chmodSync2(path, 384);
+    chmodSync2(path2, 384);
   } catch {
   }
-  return path;
+  return path2;
 }
 function recordPushDeferral(dir, d) {
   const identity = {};
@@ -38777,8 +38804,8 @@ function recordPushDeferral(dir, d) {
   return push;
 }
 function clearPushDeferral(dir) {
-  const path = join35(resolve33(dir), PUSH_ONBOARDING_PATH);
-  if (!existsSync38(path)) return;
+  const path2 = join35(resolve33(dir), PUSH_ONBOARDING_PATH);
+  if (!existsSync38(path2)) return;
   const { push: _dropped, ...rest } = readPushOnboarding(dir);
   writeFile(dir, { ...rest, version: 1 });
 }
@@ -39405,13 +39432,13 @@ function packagePathFor(pathname) {
   }
   return UNSUPPORTED;
 }
-function parseJson(read, path, errors) {
-  const bytes2 = read(path);
+function parseJson(read, path2, errors) {
+  const bytes2 = read(path2);
   if (!bytes2) return null;
   try {
     return JSON.parse(utf82(bytes2));
   } catch (e) {
-    errors.push(`${path} is not valid JSON: ${e.message}`);
+    errors.push(`${path2} is not valid JSON: ${e.message}`);
     return null;
   }
 }
@@ -39832,8 +39859,8 @@ function inflateEntry(buf, entry) {
   verifyZipEntry(entry, bytes2);
   return bytes2;
 }
-function readIf(path) {
-  return existsSync39(path) && statSync8(path).isFile() ? readFileSync43(path) : null;
+function readIf(path2) {
+  return existsSync39(path2) && statSync8(path2).isFile() ? readFileSync43(path2) : null;
 }
 function listDir(dir) {
   return existsSync39(dir) ? readdirSync20(dir).filter((f) => statSync8(join36(dir, f)).isFile()) : [];
@@ -39969,7 +39996,7 @@ function packReleaseToDir(releaseRoot, app, outDir, opts = {}) {
 }
 function openFromEntries(entries, opts) {
   const read = (p) => entries.get(p) ?? null;
-  const contentHash = computeContentHash(Array.from(entries, ([path, bytes2]) => ({ path, bytes: bytes2 })));
+  const contentHash = computeContentHash(Array.from(entries, ([path2, bytes2]) => ({ path: path2, bytes: bytes2 })));
   const validation = validatePackage(read, { requireHeader: opts.requireHeader, contentHash });
   return {
     header: validation.header,
@@ -40140,7 +40167,7 @@ function zipAppSource(entries) {
   return writeZip(entries.map((e) => ({ path: e.path, bytes: e.bytes })));
 }
 function readAppSource(zip) {
-  return [...readZip(zip)].map(([path, bytes2]) => ({ path, bytes: bytes2 }));
+  return [...readZip(zip)].map(([path2, bytes2]) => ({ path: path2, bytes: bytes2 }));
 }
 function pathKind(p) {
   try {
@@ -40453,24 +40480,24 @@ function readTestConfig(dir) {
   }
   return { ...skip ? { skip } : {}, ...journeys ? { journeys } : {} };
 }
-function readNetRules(path) {
+function readNetRules(path2) {
   let parsed;
   try {
-    parsed = JSON.parse(readFileSync46(path, "utf8"));
+    parsed = JSON.parse(readFileSync46(path2, "utf8"));
   } catch (e) {
-    throw new Error(`--net ${path} could not be read as JSON \u2014 ${e.message}`);
+    throw new Error(`--net ${path2} could not be read as JSON \u2014 ${e.message}`);
   }
   const rules = parsed?.rules;
   if (!Array.isArray(rules)) {
-    throw new Error(`--net ${path} has no "rules" array \u2014 expected the net-mocks shape { "rules": [ { "matcher": {...}, "response": {...} } ] }`);
+    throw new Error(`--net ${path2} has no "rules" array \u2014 expected the net-mocks shape { "rules": [ { "matcher": {...}, "response": {...} } ] }`);
   }
   const active = rules.filter((r) => r.enabled !== false);
   const shapeErrors = wixMockRuleErrors(active);
   if (shapeErrors.length) {
-    throw new Error(`${path}: invalid net-mocks fixture \u2014 ${shapeErrors.join("; ")}`);
+    throw new Error(`${path2}: invalid net-mocks fixture \u2014 ${shapeErrors.join("; ")}`);
   }
   if (active.length && !active.some((r) => r.matcher && typeof r.matcher === "object")) {
-    throw new Error(`${path}: none of the ${active.length} rule(s) has a "matcher" \u2014 the net-mocks shape is { "rules": [ { "matcher": {...}, "response": {...} } ] }; a file that matches nothing must not report as "mocked"`);
+    throw new Error(`${path2}: none of the ${active.length} rule(s) has a "matcher" \u2014 the net-mocks shape is { "rules": [ { "matcher": {...}, "response": {...} } ] }; a file that matches nothing must not report as "mocked"`);
   }
   return active;
 }
@@ -40509,21 +40536,21 @@ function makeRecordingWixCall(send2, token, app) {
   const events = [];
   const refused = [];
   let id = 0;
-  const call = async (method, path, body) => {
+  const call = async (method, path2, body) => {
     const verb = method.toUpperCase();
-    if (/[#\x00-\x1F\x7F]/.test(path)) {
-      refused.push(`${verb} ${path}`);
-      throw new Error(`--record refused ${verb} ${path}: the path carries a fragment or control character \u2014 not a provable read`);
+    if (/[#\x00-\x1F\x7F]/.test(path2)) {
+      refused.push(`${verb} ${path2}`);
+      throw new Error(`--record refused ${verb} ${path2}: the path carries a fragment or control character \u2014 not a provable read`);
     }
-    const bare = path.split("?")[0].replace(/\/+$/, "");
+    const bare = path2.split("?")[0].replace(/\/+$/, "");
     const readShaped = verb === "GET" || verb === "POST" && /\/(query|search|list[^/]*|get[^/]*|count|aggregate|facets|connections)$/i.test(bare);
     if (!readShaped) {
-      refused.push(`${verb} ${path}`);
-      throw new Error(`--record refused ${verb} ${path}: recording sends only proven reads (GET, or POST ending in /query, /search, /list*, /get*, /count, /aggregate, /facets, /connections) \u2014 if this IS a read, add its rule to dev/net-mocks.json by hand`);
+      refused.push(`${verb} ${path2}`);
+      throw new Error(`--record refused ${verb} ${path2}: recording sends only proven reads (GET, or POST ending in /query, /search, /list*, /get*, /count, /aggregate, /facets, /connections) \u2014 if this IS a read, add its rule to dev/net-mocks.json by hand`);
     }
     const bodyStr = body === void 0 ? void 0 : typeof body === "string" ? body : JSON.stringify(body);
     const started = Date.now();
-    const r = await send2(method, path, bodyStr, token);
+    const r = await send2(method, path2, bodyStr, token);
     events.push({
       id: ++id,
       ts: started,
@@ -40531,8 +40558,8 @@ function makeRecordingWixCall(send2, token, app) {
       source: "observe",
       host: "www.wixapis.com",
       method,
-      url: `https://www.wixapis.com${path}`,
-      path,
+      url: `https://www.wixapis.com${path2}`,
+      path: path2,
       status: r.status,
       durationMs: Date.now() - started,
       ...bodyStr !== void 0 ? { reqBody: bodyStr } : {},
@@ -41079,6 +41106,15 @@ var init_mobile_ux_lint = __esm({
   }
 });
 
+// ../../core/serve-runtime/src/site-lease.ts
+var SITE_CONTROL_TTL_SECONDS, SITE_AUTHORIZATION_TTL_SECONDS;
+var init_site_lease = __esm({
+  "../../core/serve-runtime/src/site-lease.ts"() {
+    SITE_CONTROL_TTL_SECONDS = 15 * 60;
+    SITE_AUTHORIZATION_TTL_SECONDS = SITE_CONTROL_TTL_SECONDS + 45 * 60;
+  }
+});
+
 // ../../core/serve-runtime/src/preview-token.ts
 async function hmacKey(secret) {
   return crypto.subtle.importKey("raw", new TextEncoder().encode(secret), SUBTLE_ALGO, false, ["sign"]);
@@ -41119,6 +41155,7 @@ async function verifyPreviewToken(input) {
 var SUBTLE_ALGO, PREVIEW_TOKEN_VERSION, DEFAULT_PREVIEW_TOKEN_TTL_SECONDS, WEB_PREVIEW_TOKEN_TTL_SECONDS;
 var init_preview_token = __esm({
   "../../core/serve-runtime/src/preview-token.ts"() {
+    init_site_lease();
     init_base64();
     SUBTLE_ALGO = { name: "HMAC", hash: "SHA-256" };
     PREVIEW_TOKEN_VERSION = 1;
@@ -41163,9 +41200,9 @@ var init_auth = __esm({
 });
 
 // ../../core/functions-runtime/src/wix-transport.ts
-function rejectSiteOverride(path) {
+function rejectSiteOverride(path2) {
   try {
-    if (new URL(path, "https://wix.invalid").searchParams.has("msid")) {
+    if (new URL(path2, "https://wix.invalid").searchParams.has("msid")) {
       throw new Error("request cannot override the bound Wix site identity");
     }
   } catch (error) {
@@ -41176,8 +41213,8 @@ function createWixApiCapability(options) {
   const permissions = [...options.permissions ?? []].sort();
   let installation;
   return {
-    async call(method, path, body) {
-      rejectSiteOverride(path);
+    async call(method, path2, body) {
+      rejectSiteOverride(path2);
       let identity;
       if (options.identity.kind === "caller") {
         identity = { ...options.identity };
@@ -41188,9 +41225,9 @@ function createWixApiCapability(options) {
           throw new Error("installation identity is not authorized for the configured Wix site");
         }
         identity = { kind: "installation", installationId: installation.installationId };
-        options.audit?.({ app: options.app, siteId: options.siteId, identity: "installation", method, path });
+        options.audit?.({ app: options.app, siteId: options.siteId, identity: "installation", method, path: path2 });
       }
-      return options.transport.call({ app: options.app, siteId: options.siteId, identity, ...permissions.length ? { permissions } : {}, method, path, ...body === void 0 ? {} : { body } });
+      return options.transport.call({ app: options.app, siteId: options.siteId, identity, ...permissions.length ? { permissions } : {}, method, path: path2, ...body === void 0 ? {} : { body } });
     }
   };
 }
@@ -41782,11 +41819,11 @@ var init_sandbox = __esm({
 });
 
 // ../../core/functions-runtime/src/openapi.ts
-function makeFunctionsOpenApi(manifest, definitions = []) {
+function makeFunctionsOpenApi(manifest, definitions2 = []) {
   const paths = {};
   for (const record2 of manifest.functions ?? []) {
     if (record2.internal) continue;
-    const definition = definitions.find((item) => item.name === record2.name);
+    const definition = definitions2.find((item) => item.name === record2.name);
     const method = record2.method.toLowerCase();
     paths[record2.path] = {
       ...paths[record2.path] ?? {},
@@ -42413,9 +42450,9 @@ function resolveTarget2(pathname) {
     return null;
   }
 }
-function chooseFunction(records, method, path) {
+function chooseFunction(records, method, path2) {
   for (const record2 of records) {
-    const params = routeMatch(record2.path, path);
+    const params = routeMatch(record2.path, path2);
     if (params && record2.method === method) return { record: record2, params };
   }
   return null;
@@ -42424,8 +42461,8 @@ async function contentFromBundle(bytes2, record2) {
   const actual = await integrity(bytes2);
   return actual.hash === record2.bundleHash && actual.sri === record2.sri ? utf8Decode(bytes2) : null;
 }
-function definitionFor(definitions, name) {
-  return definitions?.find((definition) => definition.name === name);
+function definitionFor(definitions2, name) {
+  return definitions2?.find((definition) => definition.name === name);
 }
 async function bodyValue(request, record2) {
   const length = Number(request.headers.get("content-length") ?? "0");
@@ -42468,6 +42505,7 @@ function makeFunctionsHandler(options) {
       const token = request.headers.get("x-himalaya-preview-token") || new URL(request.url).searchParams.get("pvt");
       const verified = token ? await verifyPreviewToken({ token, secret: options.previewTokenSecret, app: target.app, releaseId: pin, nowSeconds: options.nowSeconds }) : { ok: false, error: "malformed" };
       if (!verified.ok || verified.claims.source !== "functions") return errorResponse(401, `preview_token_${verified.ok ? "scope_mismatch" : verified.error}`, "a valid function preview token is required", id);
+      if (options.authorizePreview ? !await options.authorizePreview(verified.claims) : !!verified.claims.siteLease) return errorResponse(403, "site_preview_forbidden", "site authorization expired or changed", id);
       previewClaims = verified.claims;
     }
     if (pin) selected = options.store.getManifestById ? await options.store.getManifestById(target.app, pin) : null;
@@ -42676,8 +42714,8 @@ function makeFunctionsHandler(options) {
     }
   };
 }
-function functionsOpenApi(manifest, definitions = []) {
-  return makeFunctionsOpenApi(manifest, definitions);
+function functionsOpenApi(manifest, definitions2 = []) {
+  return makeFunctionsOpenApi(manifest, definitions2);
 }
 var MAX_LOG_MESSAGE;
 var init_gateway = __esm({
@@ -42743,19 +42781,19 @@ async function loadFunctionsApp(dir) {
   if (dataErrors.length) throw new Error(`invalid data declaration: ${dataErrors.map((issue2) => issue2.message).join("; ")}`);
   return { app: loaded.name, dir: loaded.dir, definitions: config.functions.functions, sources, siteBinding: config.functions.siteBinding, schedules: config.functions.schedules, ...data ? { data } : {} };
 }
-function listFunctions(definitions) {
-  return definitions.map((definition) => ({ name: definition.name, method: definition.method, path: definition.path, auth: definition.auth, internal: definition.internal, limits: definition.limits }));
+function listFunctions(definitions2) {
+  return definitions2.map((definition) => ({ name: definition.name, method: definition.method, path: definition.path, auth: definition.auth, internal: definition.internal, limits: definition.limits }));
 }
-function describeFunction(definitions, name) {
-  const definition = definitions.find((item) => item.name === name);
+function describeFunction(definitions2, name) {
+  const definition = definitions2.find((item) => item.name === name);
   return definition ? { ...listFunctions([definition])[0], wixIdentity: definition.wixIdentity, wixPermissions: [...definition.wixPermissions], capabilities: [...definition.capabilities], secrets: [...definition.secrets], outboundHosts: [...definition.outboundHosts], inputSchema: definition.input?.kind ?? null, outputSchema: definition.output?.kind ?? null } : null;
 }
-function materializeFunctionPath(path, params = {}) {
-  const names = [...path.matchAll(/:([A-Za-z][A-Za-z0-9_]*)/g)].map((match) => match[1]);
+function materializeFunctionPath(path2, params = {}) {
+  const names = [...path2.matchAll(/:([A-Za-z][A-Za-z0-9_]*)/g)].map((match) => match[1]);
   for (const name of names) {
     if (typeof params[name] !== "string" || params[name] === "") throw new Error(`missing route parameter "${name}"; pass --params {"${name}":"value"}`);
   }
-  return path.replace(/:([A-Za-z][A-Za-z0-9_]*)/g, (_match, name) => encodeURIComponent(params[name]));
+  return path2.replace(/:([A-Za-z][A-Za-z0-9_]*)/g, (_match, name) => encodeURIComponent(params[name]));
 }
 function memoryStore(manifest, built) {
   const bytes2 = new Map(built.map((item) => [item.bundleHash, item.bytes]));
@@ -42839,8 +42877,8 @@ async function invokeRemoteFunction(input) {
   });
   return { response, url: url.toString() };
 }
-function openApiForFunctions(manifest, definitions) {
-  return functionsOpenApi(manifest, definitions);
+function openApiForFunctions(manifest, definitions2) {
+  return functionsOpenApi(manifest, definitions2);
 }
 async function runRemoteFunctionOperation(input) {
   const environment2 = input.environment ?? "production";
@@ -43092,9 +43130,9 @@ function runAndroidNativeDecode(options) {
     rmSync8(descriptorDir, { recursive: true, force: true });
   }
 }
-function fieldAt(path) {
-  if (path === null) return void 0;
-  return path.match(/\.([^.[\]]+)$/)?.[1];
+function fieldAt(path2) {
+  if (path2 === null) return void 0;
+  return path2.match(/\.([^.[\]]+)$/)?.[1];
 }
 function mergeNativeDecode(report2, run2) {
   const platformLabel = run2.platform === "ios" ? "iOS" : "Android";
@@ -44084,8 +44122,8 @@ var init_wix_member_auth = __esm({
 function json3(status, body, headers2 = {}) {
   return new Response(JSON.stringify(body), { status, headers: { "content-type": JSON_CT, ...headers2 } });
 }
-function isCookieAuthorizedPath(path) {
-  return path === "/v1/__webwix/call" || path === "/v1/owner" || path.startsWith("/v1/owner/") || path === "/v1/__webwix/identity" || path === "/v1/__webwix/login" || path === "/v1/__webwix/register" || path === "/v1/__webwix/logout" || path === MEMBER_CALLBACK_PATH;
+function isCookieAuthorizedPath(path2) {
+  return path2 === "/v1/__webwix/call" || path2 === "/v1/owner" || path2.startsWith("/v1/owner/") || path2 === "/v1/__webwix/identity" || path2 === "/v1/__webwix/login" || path2 === "/v1/__webwix/register" || path2 === "/v1/__webwix/logout" || path2 === MEMBER_CALLBACK_PATH;
 }
 function makeServeHandler(opts) {
   let storePromise = null;
@@ -44214,13 +44252,16 @@ ${releaseId}`;
   }
   async function authorizePinnedRead(request, url, app, releaseId, screenId) {
     const secret = opts.previewTokenSecret;
-    if (!secret) return null;
+    if (!secret) return opts.authorizePreview ? json3(503, { error: "preview_token_unavailable" }) : null;
     const token = resolvePreviewToken(request, url);
     const live2 = await manifest(app);
     const isLive = live2?.releaseId === releaseId;
     if (!token) return isLive ? null : json3(401, { error: "preview_token_required", app, releaseId });
     const verified = await verifyPreviewToken({ token, secret, app, releaseId, screenId });
-    if (verified.ok) return null;
+    if (verified.ok) {
+      if (opts.authorizePreview ? !await opts.authorizePreview(verified.claims) : !!verified.claims.siteLease) return json3(403, { error: "site_preview_forbidden" });
+      return null;
+    }
     return json3(verified.error === "scope_mismatch" ? 403 : 401, {
       error: `preview_token_${verified.error}`,
       app,
@@ -44265,9 +44306,9 @@ ${releaseId}`;
   const handle = async (request) => {
     try {
       const url = new URL(request.url);
-      const path = url.pathname;
+      const path2 = url.pathname;
       if (opts.devControl && request.method === "PUT") {
-        const dcMatch = /^\/v1\/dev-control\/([^/]+)$/.exec(path);
+        const dcMatch = /^\/v1\/dev-control\/([^/]+)$/.exec(path2);
         if (dcMatch) {
           const dcApp = dcMatch[1];
           let body = {};
@@ -44283,16 +44324,16 @@ ${releaseId}`;
         }
       }
       const memberRungApp = memberAuthOn() ? memberApp(request) : null;
-      if (memberRungApp && (path === "/v1/__webwix/login" || path === "/v1/__webwix/register" || path === MEMBER_CALLBACK_PATH || path === "/v1/__webwix/logout")) {
+      if (memberRungApp && (path2 === "/v1/__webwix/login" || path2 === "/v1/__webwix/register" || path2 === MEMBER_CALLBACK_PATH || path2 === "/v1/__webwix/logout")) {
         const store2 = memberSessions();
         if (!store2) return json3(503, { error: "member_auth_unconfigured" });
         const sessionId = readSessionCookie(request.headers.get("cookie"));
-        if (path === "/v1/__webwix/logout") {
+        if (path2 === "/v1/__webwix/logout") {
           if (request.method !== "POST") return json3(405, { error: "method_not_allowed" });
           if (sessionId) await store2.delete(sessionId);
           return json3(200, { ok: true }, { "set-cookie": clearSessionCookie(), "cache-control": "no-store" });
         }
-        if (path === MEMBER_CALLBACK_PATH) {
+        if (path2 === MEMBER_CALLBACK_PATH) {
           if (request.method !== "GET") return json3(405, { error: "method_not_allowed" });
           const code = url.searchParams.get("code");
           const state2 = url.searchParams.get("state");
@@ -44352,7 +44393,7 @@ ${releaseId}`;
         try {
           const visitor = await webwixTokens.token(resolved2.config.clientId);
           authUrl = await hostedAuthUrl(
-            { ...resolved2.config, mode: path.endsWith("/register") ? "signup" : "login", state, challenge: pkce.challenge },
+            { ...resolved2.config, mode: path2.endsWith("/register") ? "signup" : "login", state, challenge: pkce.challenge },
             visitor,
             webwixFetch
           );
@@ -44379,7 +44420,7 @@ ${releaseId}`;
           }
         });
       }
-      if ((request.method === "GET" || request.method === "HEAD") && path === "/v1/__webwix/identity") {
+      if ((request.method === "GET" || request.method === "HEAD") && path2 === "/v1/__webwix/identity") {
         const headers2 = { "content-type": JSON_CT, "cache-control": "no-store" };
         if (request.method === "HEAD") return new Response(null, { status: 200, headers: headers2 });
         const webwixDirect = opts.webwixBridge !== false;
@@ -44393,7 +44434,7 @@ ${releaseId}`;
         }
         return json3(200, { authenticated: false, userId: null, email: null, webwixDirect }, { "cache-control": "no-store" });
       }
-      if (request.method === "POST" && path === "/v1/__webwix/call") {
+      if (request.method === "POST" && path2 === "/v1/__webwix/call") {
         if (opts.webwixBridge === false) {
           return json3(503, { error: "webwix_bridge_disabled" });
         }
@@ -44496,8 +44537,8 @@ ${releaseId}`;
         }
       }
       if (request.method !== "GET") return json3(405, { error: "method_not_allowed" });
-      if (path === "/__health") return json3(200, { ok: true });
-      const packageShare = /^\/p\/([a-f0-9]{64})$/.exec(path);
+      if (path2 === "/__health") return json3(200, { ok: true });
+      const packageShare = /^\/p\/([a-f0-9]{64})$/.exec(path2);
       if (packageShare) {
         const shareId = packageShare[1];
         const wantsMetadata = url.searchParams.get("metadata") === "1";
@@ -44526,7 +44567,7 @@ ${releaseId}`;
           }
         });
       }
-      if (path === "/v1/owner/instance") {
+      if (path2 === "/v1/owner/instance") {
         if (opts.webwixBridge === false) return json3(503, { error: "webwix_bridge_disabled" });
         if (!webwixOwnerRungOn()) return json3(503, { error: "webwix_owner_disabled" });
         const msid = url.searchParams.get("msid") ?? "";
@@ -44542,7 +44583,7 @@ ${releaseId}`;
           return json3(403, { error: "webwix_owner_mint_failed" });
         }
       }
-      if (path === "/v1/owner/sites") {
+      if (path2 === "/v1/owner/sites") {
         if (!webwixOwnerRungOn()) return json3(503, { error: "webwix_owner_disabled" });
         const cookie = request.headers.get("cookie") ?? "";
         if (!/wixSession2=/.test(cookie)) return json3(200, { sites: [] });
@@ -44556,7 +44597,7 @@ ${releaseId}`;
         }
       }
       const store = await getStore();
-      if (path === "/v1/apps") {
+      if (path2 === "/v1/apps") {
         if (opts.authorizeList && !await opts.authorizeList(request)) {
           return json3(401, { error: "unauthorized" });
         }
@@ -44620,7 +44661,7 @@ ${releaseId}`;
           headers: { "content-type": JSON_CT, ...listHeaders }
         });
       }
-      if (path === "/v1/templates") {
+      if (path2 === "/v1/templates") {
         if (opts.authorizeList && !await opts.authorizeList(request)) {
           return json3(401, { error: "unauthorized" });
         }
@@ -44653,9 +44694,10 @@ ${releaseId}`;
         templates.sort((a, b) => String(a.name).localeCompare(String(b.name)));
         return json3(200, { templates });
       }
-      const app = resolveApp(request, url);
+      const cfgMatch = /^\/v1\/app-config\/([^/]+)$/.exec(path2);
+      const app = cfgMatch?.[1] ?? resolveApp(request, url);
       const pin = resolvePin(request, url);
-      if (path === "/v1/template-source") {
+      if (path2 === "/v1/template-source") {
         if (!app) return json3(400, { error: "missing_app" });
         if (!store.getSource) return json3(501, { error: "templates_unsupported" });
         const m = pin ? await pinnedManifest(app, pin) : await manifest(app);
@@ -44675,12 +44717,12 @@ ${releaseId}`;
         const denied = await authorizePinnedRead(request, url, app, pin);
         if (denied) return denied;
       }
-      if (path === "/v1/authoring-docs" || /^\/v1\/authoring-docs\/(spec|mobile-ux)$/.test(path)) {
+      if (path2 === "/v1/authoring-docs" || /^\/v1\/authoring-docs\/(spec|mobile-ux)$/.test(path2)) {
         if (!app) return json3(400, { error: "missing_app" });
         const m = pin ? await pinnedManifest(app, pin) : await manifest(app);
         if (!m) return json3(404, { error: pin ? "release_not_found" : "no_release", app });
         const docs = m.authoringDocs ?? {};
-        const match = /^\/v1\/authoring-docs\/(spec|mobile-ux)$/.exec(path);
+        const match = /^\/v1\/authoring-docs\/(spec|mobile-ux)$/.exec(path2);
         if (!match) {
           return json3(200, {
             app,
@@ -44708,7 +44750,7 @@ ${releaseId}`;
           }
         });
       }
-      if (path === "/v1/release/current") {
+      if (path2 === "/v1/release/current") {
         if (pin) {
           const m2 = app ? await pinnedManifest(app, pin) : null;
           if (!m2) return json3(404, { error: "release_not_found", app, releaseId: pin });
@@ -44718,7 +44760,7 @@ ${releaseId}`;
         if (!m) return json3(404, { error: "no_release", app });
         return json3(200, { releaseId: m.releaseId, app: m.app, ...m.minBinaryVersion ? { minBinaryVersion: m.minBinaryVersion } : {}, ...m.playerRequirements ? { playerRequirements: m.playerRequirements } : {}, ...m.platforms ? { platforms: m.platforms } : {} });
       }
-      const bundleMatch = /^\/v1\/bundles\/([a-f0-9]{64})\.bundle\.js$/.exec(path);
+      const bundleMatch = /^\/v1\/bundles\/([a-f0-9]{64})\.bundle\.js$/.exec(path2);
       if (bundleMatch) {
         const hash = bundleMatch[1];
         const m = app ? pin ? await pinnedManifest(app, pin) : await manifest(app) : null;
@@ -44735,7 +44777,7 @@ ${releaseId}`;
           }
         });
       }
-      if (path === "/v1/boot") {
+      if (path2 === "/v1/boot") {
         if (!app) return json3(400, { error: "missing_app" });
         let m;
         if (pin) {
@@ -44804,7 +44846,7 @@ ${releaseId}`;
         }
         return json3(200, { releaseId: mm.releaseId, app, appConfig, tokens, homeScreenId, screen, homeBundle }, { etag, "cache-control": cache, ...vary });
       }
-      if (path === "/v1/tokens") {
+      if (path2 === "/v1/tokens") {
         if (!app) return json3(400, { error: "missing_app" });
         if (pin) {
           const m = await pinnedManifest(app, pin);
@@ -44817,7 +44859,7 @@ ${releaseId}`;
         if (!bytes2) return json3(404, { error: "tokens_not_found", app });
         return sendDoc(request, bytes2);
       }
-      if (path === "/v1/l10n") {
+      if (path2 === "/v1/l10n") {
         if (!app) return json3(400, { error: "missing_app" });
         const tag = (url.searchParams.get("tag") ?? "").trim();
         if (!/^[a-z]{2}(-[A-Za-z0-9]+)?$/.test(tag)) {
@@ -44832,7 +44874,7 @@ ${releaseId}`;
         if (!bytes2) return new Response(null, { status: 204 });
         return sendDoc(request, bytes2, Boolean(pin));
       }
-      if (path === "/v1/app-icon") {
+      if (path2 === "/v1/app-icon") {
         if (!app) return json3(400, { error: "missing_app" });
         if (!store.getIcon) return json3(501, { error: "icons_unsupported" });
         const m = pin ? await pinnedManifest(app, pin) : await manifest(app);
@@ -44849,7 +44891,7 @@ ${releaseId}`;
           headers: { "content-type": "image/png", etag, "cache-control": BUNDLE_CACHE_CONTROL, "x-himalaya-app": app }
         });
       }
-      const assetMatch = /^\/v1\/asset\/([^/?]+)$/.exec(path);
+      const assetMatch = /^\/v1\/asset\/([^/?]+)$/.exec(path2);
       if (assetMatch) {
         if (!app) return json3(400, { error: "missing_app" });
         if (!store.getAsset) return json3(501, { error: "assets_unsupported" });
@@ -44878,7 +44920,7 @@ ${releaseId}`;
           }
         });
       }
-      const ahMatch = /^\/v1\/action-handlers\/([^/]+)$/.exec(path);
+      const ahMatch = /^\/v1\/action-handlers\/([^/]+)$/.exec(path2);
       if (ahMatch) {
         const ahApp = ahMatch[1];
         const m = await manifest(ahApp);
@@ -44891,7 +44933,6 @@ ${releaseId}`;
         }));
         return json3(200, { handlers });
       }
-      const cfgMatch = /^\/v1\/app-config\/([^/]+)$/.exec(path);
       if (cfgMatch) {
         const cfgApp = cfgMatch[1];
         if (pin) {
@@ -44911,7 +44952,7 @@ ${releaseId}`;
         }
         return sendDoc(request, bytes2);
       }
-      const screenMatch = /^\/v1\/screen\/([^/]+)$/.exec(path);
+      const screenMatch = /^\/v1\/screen\/([^/]+)$/.exec(path2);
       if (screenMatch) {
         const screenId = screenMatch[1];
         if (!app || !isSafeSegment(screenId)) return json3(404, { error: "screen_not_found", screenId });
@@ -44943,14 +44984,14 @@ ${releaseId}`;
           headers: { "content-type": JSON_CT, etag, "cache-control": DOC_CACHE_CONTROL, "x-himalaya-app": app }
         });
       }
-      if (path === "/v1/widgets") {
+      if (path2 === "/v1/widgets") {
         if (!app) return json3(400, { error: "missing_app" });
         const m = pin ? await pinnedManifest(app, pin) : await manifest(app);
         if (!m) return json3(404, { error: pin ? "release_not_found" : "no_release", app });
         const widgets = Object.entries(m.widgets ?? {}).map(([widgetId, meta]) => ({ widgetId, contentEtag: meta.contentEtag }));
         return json3(200, { widgets });
       }
-      const widgetMatch = /^\/v1\/widget\/([^/]+)$/.exec(path);
+      const widgetMatch = /^\/v1\/widget\/([^/]+)$/.exec(path2);
       if (widgetMatch) {
         const widgetId = widgetMatch[1];
         if (!app || !isSafeSegment(widgetId)) return json3(404, { error: "widget_not_found", widgetId });
@@ -44980,7 +45021,12 @@ ${releaseId}`;
     if (request.method === "OPTIONS") {
       return new Response(null, { status: 204, headers: { ...corsHeaders(request), "content-length": "0" } });
     }
-    return withCors(request, await handle(request));
+    const response = await handle(request);
+    if (resolvePreviewToken(request, new URL(request.url))) {
+      response.headers.set("cache-control", "private, no-store");
+      response.headers.set("vary", "x-himalaya-preview-token, x-himalaya-release");
+    }
+    return withCors(request, response);
   };
 }
 var JSON_CT;
@@ -45151,25 +45197,25 @@ function makeRunHandler(opts) {
   });
   return async (request) => {
     const url = new URL(request.url);
-    const path = url.pathname;
-    if (path === "/v1/release/resolve") {
+    const path2 = url.pathname;
+    if (path2 === "/v1/release/resolve") {
       return json4(
         200,
         { app: opts.app, releaseId: opts.header?.releaseId ?? null, source: "local" },
         { "cache-control": "no-store" }
       );
     }
-    if (path === "/v1/revocations") {
+    if (path2 === "/v1/revocations") {
       return json4(
         200,
         { app: opts.app, revokedIntegrities: [], version: 0, ttlSeconds: 30 },
         { "cache-control": "max-age=30" }
       );
     }
-    if (path.startsWith("/v1/flags/")) {
+    if (path2.startsWith("/v1/flags/")) {
       return json4(200, { app: opts.app, definitions: {} }, { "cache-control": "no-store" });
     }
-    if (path === "/v1/telemetry/ingest") {
+    if (path2 === "/v1/telemetry/ingest") {
       if (request.method !== "POST") return json4(405, { error: "method_not_allowed" });
       try {
         const body = await request.json();
@@ -45179,33 +45225,33 @@ function makeRunHandler(opts) {
       }
       return new Response(null, { status: 204 });
     }
-    if (path === "/v1/screen-events") {
+    if (path2 === "/v1/screen-events") {
       return new Response(new ReadableStream({ start() {
       } }), {
         status: 200,
         headers: { "content-type": "text/event-stream", "cache-control": "no-store", connection: "keep-alive" }
       });
     }
-    if (path.startsWith("/v1/__webwix/") && path !== "/v1/__webwix/call" && path !== "/v1/__webwix/identity" && !(opts.serve?.webwixMemberAuth === true && opts.serve?.webwixMemberSessions)) {
+    if (path2.startsWith("/v1/__webwix/") && path2 !== "/v1/__webwix/call" && path2 !== "/v1/__webwix/identity" && !(opts.serve?.webwixMemberAuth === true && opts.serve?.webwixMemberSessions)) {
       return json4(501, { error: "webwix_member_auth_unavailable" });
     }
-    if (path === "/v1/app-config" || path.startsWith("/v1/app-config/")) {
+    if (path2 === "/v1/app-config" || path2.startsWith("/v1/app-config/")) {
       return localizeConfigResponse(await serve(request), "app-config", opts.header ?? null);
     }
-    if (path === "/v1/boot") {
+    if (path2 === "/v1/boot") {
       return localizeConfigResponse(await serve(request), "boot", opts.header ?? null);
     }
-    if (path === "/v1" || path.startsWith("/v1/") || path === "/__health") {
+    if (path2 === "/v1" || path2.startsWith("/v1/") || path2 === "/__health") {
       return serve(request);
     }
-    if (path === "/" || path === "") {
+    if (path2 === "/" || path2 === "") {
       const target = `${mount}/a/${encodeURIComponent(opts.app)}${url.search}`;
       return new Response(null, { status: 302, headers: { location: target } });
     }
-    if (path === mount || path.startsWith(`${mount}/`)) {
-      return previewResponse(path, opts.assets, mount);
+    if (path2 === mount || path2.startsWith(`${mount}/`)) {
+      return previewResponse(path2, opts.assets, mount);
     }
-    return json4(404, { error: "not_found", path });
+    return json4(404, { error: "not_found", path: path2 });
   };
 }
 var json4;
@@ -45414,9 +45460,9 @@ async function loadPreviewAssets() {
       join46(here, "../../../packages/serve/src/preview-assets.generated.bin")
       // in-repo checkout
     ];
-    for (const path of candidates) {
-      if (!existsSync49(path)) continue;
-      const blob = readFileSync54(path);
+    for (const path2 of candidates) {
+      if (!existsSync49(path2)) continue;
+      const blob = readFileSync54(path2);
       return mod.assemblePreviewAssetsFromBlob(new Uint8Array(blob.buffer, blob.byteOffset, blob.byteLength));
     }
     return /* @__PURE__ */ new Map();
@@ -45426,9 +45472,9 @@ async function loadPreviewAssets() {
 }
 function packageUrl(origin, app, opts = {}) {
   const mount = opts.chrome === "app" ? "/app" : "/preview";
-  const path = `${mount}/a/${encodeURIComponent(app)}${opts.screen ? `/screen/${encodeURIComponent(opts.screen)}` : ""}`;
+  const path2 = `${mount}/a/${encodeURIComponent(app)}${opts.screen ? `/screen/${encodeURIComponent(opts.screen)}` : ""}`;
   const query = opts.surface ? `?surface=${encodeURIComponent(opts.surface)}` : "";
-  return `${origin.replace(/\/$/, "")}${path}${query}`;
+  return `${origin.replace(/\/$/, "")}${path2}${query}`;
 }
 function openBrowser(url) {
   const cmd = process.platform === "darwin" ? "open" : process.platform === "win32" ? "start" : "xdg-open";
@@ -45588,13 +45634,13 @@ async function runInBrowser(releaseRoot, app, header, opts = {}) {
   const body = JSON.stringify(payload);
   const missed = [];
   const server = createServer5((req, res) => {
-    const path = (req.url ?? "/").split("?")[0];
-    if (path === "/release.json") {
+    const path2 = (req.url ?? "/").split("?")[0];
+    if (path2 === "/release.json") {
       res.writeHead(200, { "content-type": "application/json", "cache-control": "no-store" });
       res.end(body);
       return;
     }
-    const name = path === "/" || path === "/index.html" ? "host.html" : path.slice(1);
+    const name = path2 === "/" || path2 === "/index.html" ? "host.html" : path2.slice(1);
     if (SERVED.has(name)) {
       if (!existsSync50(resolve40(stagedDir(), name))) {
         const restaged = ensureBrowserPlaneStaged();
@@ -45621,9 +45667,9 @@ async function runInBrowser(releaseRoot, app, header, opts = {}) {
       res.end(bytes2);
       return;
     }
-    missed.push(path);
+    missed.push(path2);
     res.writeHead(404, { "content-type": "application/json" });
-    res.end(JSON.stringify({ error: "reached_the_cli_not_the_worker", path }));
+    res.end(JSON.stringify({ error: "reached_the_cli_not_the_worker", path: path2 }));
   });
   await new Promise((r) => server.listen(opts.port ?? 0, "127.0.0.1", () => r()));
   const port = server.address().port;
@@ -46833,8 +46879,8 @@ function client(creds) {
   const env = creds ?? requireEnv(["ASC_KEY_ID", "ASC_ISSUER_ID", "ASC_KEY_PATH"]);
   assertCredentialOutsideRepo("ASC_KEY_PATH", env.ASC_KEY_PATH);
   const jwt = ascJwt(env.ASC_KEY_ID, env.ASC_ISSUER_ID, readFileSync61(env.ASC_KEY_PATH, "utf8"), Math.floor(Date.now() / 1e3));
-  return async (path) => {
-    const r = await fetch(`${ASC}${path}`, { headers: { Authorization: `Bearer ${jwt}` } });
+  return async (path2) => {
+    const r = await fetch(`${ASC}${path2}`, { headers: { Authorization: `Bearer ${jwt}` } });
     return { status: r.status, json: await r.json().catch(() => ({})) };
   };
 }
@@ -47094,24 +47140,24 @@ import { dirname as dirname29, join as join49 } from "node:path";
 function defaultSessionsPath() {
   return process.env.HIMI_ADMIN_SESSIONS_FILE ?? join49(homedir6(), ".himalaya", "admin-sessions.json");
 }
-function loadSessionsFile(path = defaultSessionsPath()) {
+function loadSessionsFile(path2 = defaultSessionsPath()) {
   try {
-    return JSON.parse(readFileSync63(path, "utf8"));
+    return JSON.parse(readFileSync63(path2, "utf8"));
   } catch {
     return {};
   }
 }
-function saveAdminSession(adminUrl, session, path = defaultSessionsPath()) {
-  const file = loadSessionsFile(path);
+function saveAdminSession(adminUrl, session, path2 = defaultSessionsPath()) {
+  const file = loadSessionsFile(path2);
   file.sessions = { ...file.sessions, [adminUrl]: session };
-  mkdirSync24(dirname29(path), { recursive: true, mode: 448 });
-  writeFileSync21(path, JSON.stringify(file, null, 2) + "\n", { mode: 384 });
+  mkdirSync24(dirname29(path2), { recursive: true, mode: 448 });
+  writeFileSync21(path2, JSON.stringify(file, null, 2) + "\n", { mode: 384 });
   try {
-    chmodSync3(dirname29(path), 448);
-    chmodSync3(path, 384);
+    chmodSync3(dirname29(path2), 448);
+    chmodSync3(path2, 384);
   } catch {
   }
-  return path;
+  return path2;
 }
 function resolveAuth(opts = {}) {
   const env = opts.env ?? process.env;
@@ -47417,9 +47463,9 @@ var init_types2 = __esm({
 });
 
 // src/site-analyze/rest.ts
-function resolveWixUrl(path) {
-  if (/^https?:\/\//i.test(path)) return path;
-  return `${WIX_API3}${path}`;
+function resolveWixUrl(path2) {
+  if (/^https?:\/\//i.test(path2)) return path2;
+  return `${WIX_API3}${path2}`;
 }
 function classifyHttp(status, count) {
   if (status === 428) return "not-installed";
@@ -47428,12 +47474,12 @@ function classifyHttp(status, count) {
   return count > 0 ? "ok" : "empty";
 }
 function makeTransport(fetchImpl, auth, timeoutMs = DEFAULT_TIMEOUT_MS4) {
-  return async (method, path, body) => {
+  return async (method, path2, body) => {
     const headers2 = { Accept: "application/json" };
     if (auth?.token) headers2.Authorization = auth.token;
     if (auth?.msid) headers2["wix-site-id"] = auth.msid;
     if (body !== void 0) headers2["Content-Type"] = "application/json";
-    const res = await fetchImpl(resolveWixUrl(path), {
+    const res = await fetchImpl(resolveWixUrl(path2), {
       method,
       headers: headers2,
       body: body === void 0 ? void 0 : JSON.stringify(body),
@@ -47445,7 +47491,7 @@ function makeTransport(fetchImpl, auth, timeoutMs = DEFAULT_TIMEOUT_MS4) {
       parsed = text4 ? JSON.parse(text4) : null;
     } catch {
     }
-    if (!res.ok) throw new WixApiError2(res.status, method, path, parsed);
+    if (!res.ok) throw new WixApiError2(res.status, method, path2, parsed);
     return parsed;
   };
 }
@@ -47455,9 +47501,9 @@ function ownerTransportFrom(fetchImpl, owner) {
 function visitorTransportFrom(fetchImpl, token, msid) {
   return makeTransport(fetchImpl, { token, msid });
 }
-async function probeCall(call, method, path, body) {
+async function probeCall(call, method, path2, body) {
   try {
-    return { data: await call(method, path, body), err: null };
+    return { data: await call(method, path2, body), err: null };
   } catch (e) {
     if (e instanceof WixApiError2) return { data: null, err: e };
     throw e;
@@ -47519,11 +47565,11 @@ var init_rest = __esm({
     WIX_API3 = "https://www.wixapis.com";
     DEFAULT_TIMEOUT_MS4 = 8e3;
     WixApiError2 = class extends Error {
-      constructor(status, method, path, body) {
-        super(`${method} ${path} \u2192 ${status}`);
+      constructor(status, method, path2, body) {
+        super(`${method} ${path2} \u2192 ${status}`);
         this.status = status;
         this.method = method;
-        this.path = path;
+        this.path = path2;
         this.body = body;
         this.name = "WixApiError";
       }
@@ -47731,8 +47777,8 @@ function toItems(def, raw) {
     description: copyOrDrop(def.descriptionOf ? def.descriptionOf(it) : genericDescription(it), 240) || void 0
   }));
 }
-async function runDualProbes(owner, visitor) {
-  const rows = await Promise.all(ALL.map(async (def) => {
+async function runDualProbes(owner, visitor, definitions2 = ALL) {
+  const rows = await Promise.all(definitions2.map(async (def) => {
     const [o, vis] = await Promise.all([side(owner, def), side(visitor, def)]);
     const imageless = def.imageOf ? o.items.filter((it) => !def.imageOf(it)).length : void 0;
     return {
@@ -47794,7 +47840,7 @@ function sampleTitle(data) {
   }
   return void 0;
 }
-async function readCms(call) {
+async function readCms(call, opts = {}) {
   if (!call) return { collections: [], status: "skipped" };
   const { data, err } = await probeCall(call, "GET", "/data/v2/collections");
   if (err) {
@@ -47819,7 +47865,7 @@ async function readCms(call) {
       ...f.encrypted === true ? { encrypted: true } : {}
     })).filter((f) => f.key);
     const perms = c.permissions && typeof c.permissions === "object" ? c.permissions : void 0;
-    const q = await probeCall(call, "POST", "/wix-data/v2/items/query", {
+    const q = opts.samples === false ? { data: null, err: null } : await probeCall(call, "POST", "/wix-data/v2/items/query", {
       dataCollectionId: id,
       query: { paging: { limit: 5 } }
     });
@@ -47856,8 +47902,8 @@ async function readInstalledApps(call) {
     "/site-apps/v1/apps",
     "/devcenter/v1/apps"
   ];
-  for (const path of paths) {
-    const { data } = await probeCall(call, "GET", path);
+  for (const path2 of paths) {
+    const { data } = await probeCall(call, "GET", path2);
     if (!data) continue;
     const raw = asArr(data.apps ?? data.siteApps ?? data.items);
     const apps = raw.map((a) => ({
@@ -47873,8 +47919,8 @@ async function readMemberRoles(call) {
   const paths = ["/members/v1/roles", "/members/v2/roles", "/authorization/v1/roles"];
   let sawAuthError = false;
   let sawEmptyPayload = false;
-  for (const path of paths) {
-    const { data, err } = await probeCall(call, "GET", path);
+  for (const path2 of paths) {
+    const { data, err } = await probeCall(call, "GET", path2);
     if (err) {
       if (err.status === 401 || err.status === 403 || err.status >= 500) sawAuthError = true;
       continue;
@@ -48345,15 +48391,15 @@ function pagePathForRole(url) {
   }
 }
 function classifyPageRole(url, title, _nav = "") {
-  const { path, isHome } = pagePathForRole(url);
+  const { path: path2, isHome } = pagePathForRole(url);
   if (isHome) return "home";
-  const hay = `${path} ${title}`.toLowerCase();
+  const hay = `${path2} ${title}`.toLowerCase();
   if (/\b(faq|help|support)\b/.test(hay)) return "faq";
   if (/\b(pricing|membership|member-plan|plans?)\b/.test(hay)) return "plans";
   if (/\b(drill|library|resource|session-builder|session-generator)\b/.test(hay)) return "library";
   if (/\b(members?|account|login|profile)\b/.test(hay) && !/\bmembership\b/.test(hay)) return "members";
   if (/\b(shop|store|product|cart)\b/.test(hay)) return "shop";
-  if (/(^|\/)(book|book-online|bookings?)(\/|$)/.test(path) || /\b(book-online|bookings?|appoint)\b/.test(hay)) return "book";
+  if (/(^|\/)(book|book-online|bookings?)(\/|$)/.test(path2) || /\b(book-online|bookings?|appoint)\b/.test(hay)) return "book";
   if (/\b(menu|dining|restaurant)\b/.test(hay)) return "menu";
   if (/\b(blog|journal|news|posts?|ebooks?|insight)\b/.test(hay)) return "blog";
   if (/\b(about|story|our-story)\b/.test(hay)) return "about";
@@ -49007,12 +49053,12 @@ function veloListFilesPath(gridAppId, layout) {
 async function gridAppIdFromSiteHtml(fetchImpl, siteUrl) {
   return (await readPublishedHtml(fetchImpl, siteUrl)).gridAppId;
 }
-function assertSafeVeloPath(path, method = "GET") {
-  if (VELO_INVOKE_RE.test(path)) {
-    throw new Error(`refusing to call Velo invoke path: ${path}`);
+function assertSafeVeloPath(path2, method = "GET") {
+  if (VELO_INVOKE_RE.test(path2)) {
+    throw new Error(`refusing to call Velo invoke path: ${path2}`);
   }
-  if (method !== "GET" && VELO_WRITE_RE.test(path.split("?")[0] ?? path)) {
-    throw new Error(`refusing to call Velo write path: ${method} ${path}`);
+  if (method !== "GET" && VELO_WRITE_RE.test(path2.split("?")[0] ?? path2)) {
+    throw new Error(`refusing to call Velo write path: ${method} ${path2}`);
   }
 }
 function parseHttpFunctions(source) {
@@ -49031,8 +49077,8 @@ function parseHttpFunctions(source) {
   }
   return out;
 }
-function classifyVeloFile(path) {
-  const p = path.replace(/\\/g, "/").toLowerCase();
+function classifyVeloFile(path2) {
+  const p = path2.replace(/\\/g, "/").toLowerCase();
   const base = p.split("/").pop() ?? p;
   if (base === "http-functions.js" || base === "http-functions.ts") return "http-functions";
   if (base === "data.js" || base === "data.ts") return "data-hooks";
@@ -49044,8 +49090,8 @@ function classifyVeloFile(path) {
   if (/(^|\/)public\//.test(p)) return "public";
   return "other";
 }
-function isSecretVeloPath(path) {
-  const p = path.replace(/\\/g, "/").toLowerCase();
+function isSecretVeloPath(path2) {
+  const p = path2.replace(/\\/g, "/").toLowerCase();
   return /secrets-backend|\/secrets\/|\.env(?:\.|$)/.test(p);
 }
 function redactSecrets(source) {
@@ -49075,7 +49121,7 @@ function str4(x) {
 function asArr2(x) {
   return Array.isArray(x) ? x : [];
 }
-function filesFromOwnerPayload(data) {
+function filesFromOwnerPayload(data, redact = redactSecrets) {
   if (!data || typeof data !== "object") return [];
   const root = data;
   const raw = [
@@ -49087,17 +49133,17 @@ function filesFromOwnerPayload(data) {
   for (const item of raw) {
     if (!item || typeof item !== "object") continue;
     const f = item;
-    const path = str4(f.path || f.relativePath || f.fileName || f.name);
-    if (!path || isSecretVeloPath(path)) continue;
+    const path2 = str4(f.path || f.relativePath || f.fileName || f.name);
+    if (!path2 || isSecretVeloPath(path2)) continue;
     const content = str4(f.content ?? f.source ?? f.code ?? f.body);
     const bytes2 = typeof f.bytes === "number" ? f.bytes : typeof f.size === "number" ? f.size : content.length;
-    const redacted = content ? redactSecrets(content) : "";
+    const redacted = content ? redact(content) : "";
     const forDisk = redacted.length > VELO_FILE_CAP ? redacted.slice(0, VELO_FILE_CAP) + "\n/* \u2026truncated */" : redacted;
     out.push({
-      path,
-      kind: classifyVeloFile(path),
+      path: path2,
+      kind: classifyVeloFile(path2),
       bytes: bytes2,
-      excerpt: content ? redactExcerpt(content) : void 0,
+      excerpt: content ? redactExcerpt(redacted) : void 0,
       ...forDisk ? { content: forDisk } : {}
     });
   }
@@ -49140,8 +49186,8 @@ function veloHintFromEval(evaled, page) {
     pages: [{ url: page.url, title: page.title, hasCode: wixRendered && hasCode, ...pageId ? { pageId } : {} }]
   };
 }
-function pageIdFromVeloPath(path) {
-  const m = path.replace(/\\/g, "/").match(/\/pages\/([A-Za-z0-9_-]+)\.(js|ts|jsx|tsx)$/i);
+function pageIdFromVeloPath(path2) {
+  const m = path2.replace(/\\/g, "/").match(/\/pages\/([A-Za-z0-9_-]+)\.(js|ts|jsx|tsx)$/i);
   return m?.[1];
 }
 function bindVeloFiles(files, pages) {
@@ -49186,13 +49232,13 @@ function gridAppIdsFromPayload(data) {
   }
   return ids;
 }
-async function listFilesForApp(call, gridAppId) {
+async function listFilesForApp(call, gridAppId, redact) {
   for (const layout of VELO_LAYOUTS) {
-    const path = veloListFilesPath(gridAppId, layout);
-    assertSafeVeloPath(path, "GET");
-    const { data } = await probeCall(call, "GET", path);
+    const path2 = veloListFilesPath(gridAppId, layout);
+    assertSafeVeloPath(path2, "GET");
+    const { data } = await probeCall(call, "GET", path2);
     if (!data) continue;
-    const files = filesFromOwnerPayload(data);
+    const files = filesFromOwnerPayload(data, redact);
     if (files.length) return files;
   }
   return [];
@@ -49214,7 +49260,7 @@ async function readOwnerVelo(call, opts) {
     if (probe.path.includes("git-repo") && (data.repo || data.repository || data.gitRepo || data.url)) git2 = true;
   }
   for (const id of ids) {
-    const listed = await listFilesForApp(call, id);
+    const listed = await listFilesForApp(call, id, opts?.redact);
     for (const f of listed) {
       if (!files.some((x) => x.path === f.path)) files.push(f);
     }
@@ -49551,14 +49597,14 @@ function parseAuthorizationConfig(source) {
   const defaultAnonymousInvoke = invokeFlag(starDefault, "anonymous") ?? true;
   const defaultSiteMemberInvoke = invokeFlag(starDefault, "siteMember") ?? true;
   const modules = [];
-  for (const [path, entry] of Object.entries(web)) {
-    if (path === "*") continue;
+  for (const [path2, entry] of Object.entries(web)) {
+    if (path2 === "*") continue;
     const star = methodStar(entry);
     const anonymousInvoke = invokeFlag(star, "anonymous") ?? defaultAnonymousInvoke;
     const siteMemberInvoke = invokeFlag(star, "siteMember") ?? defaultSiteMemberInvoke;
-    const jsw = /\.(jsw|web\.js)$/i.test(path);
+    const jsw = /\.(jsw|web\.js)$/i.test(path2);
     modules.push({
-      path,
+      path: path2,
       anonymousInvoke,
       siteMemberInvoke,
       ...jsw ? { note: "worker-unreachable" } : {}
@@ -50697,12 +50743,12 @@ function attachVeloSources(book, sources, put) {
   }
 }
 function extOf2(url) {
-  const path = url.split("?")[0] ?? url;
-  if (/\.png$/i.test(path)) return "png";
-  if (/\.webp$/i.test(path)) return "webp";
-  if (/\.gif$/i.test(path)) return "gif";
-  if (/\.svg$/i.test(path)) return "svg";
-  if (/\.ico$/i.test(path)) return "ico";
+  const path2 = url.split("?")[0] ?? url;
+  if (/\.png$/i.test(path2)) return "png";
+  if (/\.webp$/i.test(path2)) return "webp";
+  if (/\.gif$/i.test(path2)) return "gif";
+  if (/\.svg$/i.test(path2)) return "svg";
+  if (/\.ico$/i.test(path2)) return "ico";
   return "jpg";
 }
 async function readCapped(res, cap) {
@@ -51273,8 +51319,8 @@ function unpairedRedirectNote(overlay) {
 function posix2(p) {
   return resolve42(p).replace(/\\/g, "/");
 }
-function committedShellProvisioning(path) {
-  return committedShellFor(posix2(path));
+function committedShellProvisioning(path2) {
+  return committedShellFor(posix2(path2));
 }
 function findRepoRoot(cwd) {
   let dir = cwd;
@@ -51298,14 +51344,14 @@ function deepMerge4(a, b) {
   }
   return out;
 }
-function assertNotCommitted(path, forbidden) {
-  const committed = committedShellProvisioning(path);
+function assertNotCommitted(path2, forbidden) {
+  const committed = committedShellProvisioning(path2);
   if (committed) {
     throw new Error(
       `refusing to overwrite committed ${committedProvisioningPath(committed)} \u2014 use prepare:customer --contract`
     );
   }
-  if (forbidden && resolve42(path) === resolve42(forbidden)) {
+  if (forbidden && resolve42(path2) === resolve42(forbidden)) {
     const named = committedShellProvisioning(forbidden);
     throw new Error(
       `refusing to overwrite committed ${named ? committedProvisioningPath(named) : forbidden} \u2014 pass a content-package provisioning.json or use prepare:customer --contract`
@@ -51411,13 +51457,13 @@ function buildMergedContract(options) {
   merged.branding = branding;
   const body = `${JSON.stringify(merged, null, 2)}
 `;
-  const path = join51(packageDir, "provisioning.contract.json");
-  writeFileSync23(path, body);
+  const path2 = join51(packageDir, "provisioning.contract.json");
+  writeFileSync23(path2, body);
   const localPath = join51(appDir2, LOCAL_CONTRACT_REL);
   mkdirSync26(dirname30(localPath), { recursive: true });
   writeFileSync23(localPath, body);
   staged.push(localPath);
-  return { path, staged };
+  return { path: path2, staged };
 }
 async function applyOverlays(input) {
   const cwd = resolve42(input.cwd);
@@ -52849,18 +52895,18 @@ function cookieCompare(a, b) {
   cmp = (a.creationIndex || 0) - (b.creationIndex || 0);
   return cmp;
 }
-function defaultPath(path) {
-  if (!path || path.slice(0, 1) !== "/") {
+function defaultPath(path2) {
+  if (!path2 || path2.slice(0, 1) !== "/") {
     return "/";
   }
-  if (path === "/") {
-    return path;
+  if (path2 === "/") {
+    return path2;
   }
-  const rightSlash = path.lastIndexOf("/");
+  const rightSlash = path2.lastIndexOf("/");
   if (rightSlash === 0) {
     return "/";
   }
-  return path.slice(0, rightSlash);
+  return path2.slice(0, rightSlash);
 }
 function domainMatch(domain, cookieDomain, canonicalize) {
   if (domain == null || cookieDomain == null) {
@@ -53088,18 +53134,18 @@ var init_dist = __esm({
       /**
        * @internal No doc because this is an overload that supports the implementation
        */
-      findCookie(domain, path, key2, callback) {
+      findCookie(domain, path2, key2, callback) {
         const promiseCallback = createPromiseCallback(callback);
-        if (domain == null || path == null || key2 == null) {
+        if (domain == null || path2 == null || key2 == null) {
           return promiseCallback.resolve(void 0);
         }
-        const result = this.idx[domain]?.[path]?.[key2];
+        const result = this.idx[domain]?.[path2]?.[key2];
         return promiseCallback.resolve(result);
       }
       /**
        * @internal No doc because this is an overload that supports the implementation
        */
-      findCookies(domain, path, allowSpecialUseDomain = false, callback) {
+      findCookies(domain, path2, allowSpecialUseDomain = false, callback) {
         if (typeof allowSpecialUseDomain === "function") {
           callback = allowSpecialUseDomain;
           allowSpecialUseDomain = true;
@@ -53110,7 +53156,7 @@ var init_dist = __esm({
           return promiseCallback.resolve([]);
         }
         let pathMatcher;
-        if (!path) {
+        if (!path2) {
           pathMatcher = function matchAll(domainIndex) {
             for (const curPath in domainIndex) {
               const pathIndex = domainIndex[curPath];
@@ -53125,7 +53171,7 @@ var init_dist = __esm({
         } else {
           pathMatcher = function matchRFC(domainIndex) {
             for (const cookiePath in domainIndex) {
-              if (pathMatch(path, cookiePath)) {
+              if (pathMatch(path2, cookiePath)) {
                 const pathIndex = domainIndex[cookiePath];
                 for (const key2 in pathIndex) {
                   const value = pathIndex[key2];
@@ -53153,14 +53199,14 @@ var init_dist = __esm({
        */
       putCookie(cookie, callback) {
         const promiseCallback = createPromiseCallback(callback);
-        const { domain, path, key: key2 } = cookie;
-        if (domain == null || path == null || key2 == null) {
+        const { domain, path: path2, key: key2 } = cookie;
+        if (domain == null || path2 == null || key2 == null) {
           return promiseCallback.resolve(void 0);
         }
         const domainEntry = this.idx[domain] ?? /* @__PURE__ */ Object.create(null);
         this.idx[domain] = domainEntry;
-        const pathEntry = domainEntry[path] ?? /* @__PURE__ */ Object.create(null);
-        domainEntry[path] = pathEntry;
+        const pathEntry = domainEntry[path2] ?? /* @__PURE__ */ Object.create(null);
+        domainEntry[path2] = pathEntry;
         pathEntry[key2] = cookie;
         return promiseCallback.resolve(void 0);
       }
@@ -53174,20 +53220,20 @@ var init_dist = __esm({
       /**
        * @internal No doc because this is an overload that supports the implementation
        */
-      removeCookie(domain, path, key2, callback) {
+      removeCookie(domain, path2, key2, callback) {
         const promiseCallback = createPromiseCallback(callback);
-        delete this.idx[domain]?.[path]?.[key2];
+        delete this.idx[domain]?.[path2]?.[key2];
         return promiseCallback.resolve(void 0);
       }
       /**
        * @internal No doc because this is an overload that supports the implementation
        */
-      removeCookies(domain, path, callback) {
+      removeCookies(domain, path2, callback) {
         const promiseCallback = createPromiseCallback(callback);
         const domainEntry = this.idx[domain];
         if (domainEntry) {
-          if (path) {
-            delete domainEntry[path];
+          if (path2) {
+            delete domainEntry[path2];
           } else {
             delete this.idx[domain];
           }
@@ -53213,8 +53259,8 @@ var init_dist = __esm({
         domains.forEach((domain) => {
           const domainEntry = idx[domain] ?? {};
           const paths = Object.keys(domainEntry);
-          paths.forEach((path) => {
-            const pathEntry = domainEntry[path] ?? {};
+          paths.forEach((path2) => {
+            const pathEntry = domainEntry[path2] ?? {};
             const keys = Object.keys(pathEntry);
             keys.forEach((key2) => {
               const keyEntry = pathEntry[key2];
@@ -53982,7 +54028,7 @@ var init_dist = __esm({
           return promiseCallback.reject(parameterError);
         }
         const host = canonicalDomain(context.hostname);
-        const path = context.pathname || "/";
+        const path2 = context.pathname || "/";
         const potentiallyTrustworthy = isPotentiallyTrustworthy(
           url,
           this.allowSecureOnLocal
@@ -54013,7 +54059,7 @@ var init_dist = __esm({
               return false;
             }
           }
-          if (!allPaths && typeof c.path === "string" && !pathMatch(path, c.path)) {
+          if (!allPaths && typeof c.path === "string" && !pathMatch(path2, c.path)) {
             return false;
           }
           if (c.secure && !potentiallyTrustworthy) {
@@ -54045,7 +54091,7 @@ var init_dist = __esm({
         }
         store.findCookies(
           host,
-          allPaths ? null : path,
+          allPaths ? null : path2,
           this.allowSpecialUseDomain,
           (err, cookies) => {
             if (err) {
@@ -55423,9 +55469,9 @@ function filesFromList(data) {
   if (!Array.isArray(files)) return [];
   return files.flatMap((f) => {
     if (!f || typeof f !== "object") return [];
-    const path = String(f.path ?? "");
+    const path2 = String(f.path ?? "");
     const content = String(f.content ?? "");
-    return path ? [{ path, content }] : [];
+    return path2 ? [{ path: path2, content }] : [];
   });
 }
 async function resolveGridAppId(fetchImpl, token, msid, siteUrl) {
@@ -55852,14 +55898,14 @@ function apiKeyAuth(env = process.env) {
   return key2 && accountId ? { key: key2, accountId } : void 0;
 }
 function accountTransport(fetchImpl = fetch, timeoutMs = DEFAULT_TIMEOUT_MS5, spawnImpl = spawn4) {
-  return async (method, path, body) => {
+  return async (method, path2, body) => {
     const viaKey = apiKeyAuth();
     const headers2 = viaKey ? { Authorization: viaKey.key, "wix-account-id": viaKey.accountId, Accept: "application/json" } : { Authorization: await accountToken2(spawnImpl), Accept: "application/json" };
     if (body !== void 0) headers2["Content-Type"] = "application/json";
     const started = Date.now();
     let res;
     try {
-      res = await fetchImpl(`${API_BASE2}${path}`, {
+      res = await fetchImpl(`${API_BASE2}${path2}`, {
         method,
         headers: headers2,
         body: body === void 0 ? void 0 : JSON.stringify(body),
@@ -55869,10 +55915,10 @@ function accountTransport(fetchImpl = fetch, timeoutMs = DEFAULT_TIMEOUT_MS5, sp
       const err = e;
       if (err?.name === "TimeoutError" || /aborted due to timeout/i.test(err?.message ?? "")) {
         throw new Error(
-          `${method} ${path} timed out after ${Date.now() - started}ms (limit ${timeoutMs}ms). Raise the ceiling with HIMI_WIX_TIMEOUT_MS=<ms>, or check the VPN.`
+          `${method} ${path2} timed out after ${Date.now() - started}ms (limit ${timeoutMs}ms). Raise the ceiling with HIMI_WIX_TIMEOUT_MS=<ms>, or check the VPN.`
         );
       }
-      throw new Error(`${method} ${path} failed: ${err?.message ?? String(e)}`);
+      throw new Error(`${method} ${path2} failed: ${err?.message ?? String(e)}`);
     }
     const text4 = await res.text();
     let parsed = text4;
@@ -55880,7 +55926,7 @@ function accountTransport(fetchImpl = fetch, timeoutMs = DEFAULT_TIMEOUT_MS5, sp
       parsed = text4 ? JSON.parse(text4) : null;
     } catch {
     }
-    if (!res.ok) throw new WixApiError(res.status, method, path, parsed);
+    if (!res.ok) throw new WixApiError(res.status, method, path2, parsed);
     return parsed;
   };
 }
@@ -56159,27 +56205,27 @@ async function runSiteCreate(opts) {
 }
 function writeProvisioningBinding(target, binding2, fs = { existsSync: existsSync55, readFileSync: readFileSync66, writeFileSync: writeFileSync24 }) {
   const msid = binding2.siteId;
-  const path = resolvePath2(target);
-  const committed = committedShellProvisioning(path);
+  const path2 = resolvePath2(target);
+  const committed = committedShellProvisioning(path2);
   if (committed) {
     throw new Error(
       `refusing to overwrite committed ${committedProvisioningPath(committed)} \u2014 pass a content-package provisioning.json, or use \`prepare:customer --contract\``
     );
   }
-  if (!fs.existsSync(path)) {
+  if (!fs.existsSync(path2)) {
     throw new Error(
-      `no provisioning.json at ${path}. --write-provisioning updates an EXISTING manifest (it needs identity/branding/installedVerticals, which this command cannot invent). Run it from a content package, or pass --write-provisioning <path>.`
+      `no provisioning.json at ${path2}. --write-provisioning updates an EXISTING manifest (it needs identity/branding/installedVerticals, which this command cannot invent). Run it from a content package, or pass --write-provisioning <path>.`
     );
   }
-  const raw = fs.readFileSync(path, "utf8");
+  const raw = fs.readFileSync(path2, "utf8");
   let manifest;
   try {
     manifest = JSON.parse(raw);
   } catch (e) {
-    throw new Error(`${path} is not valid JSON (${e?.message ?? e}) \u2014 not touching it`);
+    throw new Error(`${path2} is not valid JSON (${e?.message ?? e}) \u2014 not touching it`);
   }
   if (manifest === null || typeof manifest !== "object" || Array.isArray(manifest)) {
-    throw new Error(`${path} must contain a JSON object \u2014 not touching it`);
+    throw new Error(`${path2} must contain a JSON object \u2014 not touching it`);
   }
   if (binding2.siteUrl !== void 0) assertAbsoluteHttpUrl(binding2.siteUrl);
   if (binding2.redirectUri !== void 0) assertRedirectUri(binding2.redirectUri);
@@ -56197,9 +56243,9 @@ function writeProvisioningBinding(target, binding2, fs = { existsSync: existsSyn
   const indentMatch = /^[ \t]*[{[][\r\n]+([ \t]+)/.exec(raw);
   const indent = indentMatch ? indentMatch[1] : "  ";
   const trailingNewline = /\n$/.test(raw) ? "\n" : "";
-  fs.writeFileSync(path, `${JSON.stringify(manifest, null, indent)}${trailingNewline}`, "utf8");
+  fs.writeFileSync(path2, `${JSON.stringify(manifest, null, indent)}${trailingNewline}`, "utf8");
   return {
-    path,
+    path: path2,
     siteId: msid,
     ...binding2.clientId ? { clientId: binding2.clientId } : {},
     ...binding2.siteUrl ? { siteUrl: binding2.siteUrl } : {},
@@ -56488,9 +56534,350 @@ var init_site_oauth_client = __esm({
   }
 });
 
+// src/site-analyze/velo-source.ts
+import path from "node:path";
+import ts from "typescript";
+function applySourceEdits(source, edits) {
+  const chunks = [];
+  let cursor = 0;
+  for (const edit of edits.sort((a, b) => a.start - b.start || b.end - a.end)) {
+    if (edit.start < cursor) continue;
+    chunks.push(source.slice(cursor, edit.start), edit.text);
+    cursor = edit.end;
+  }
+  chunks.push(source.slice(cursor));
+  return chunks.join("");
+}
+function redactVeloSource(source, knownSecrets = []) {
+  for (const secret of knownSecrets.filter(Boolean)) source = source.split(secret).join(REDACTED2);
+  source = source.replace(/-----BEGIN [^-]*PRIVATE KEY-----[\s\S]*?-----END [^-]*PRIVATE KEY-----/g, REDACTED2).replace(
+    /\b(?:IST\.[\w.-]+|eyJ[\w-]+\.[\w-]+\.[\w-]+|(?:sk|rk)_(?:live|test)_[\w-]+|gh[pousr]_[\w]+|github_pat_[\w]+|AKIA[A-Z0-9]{16})\b/g,
+    REDACTED2
+  ).replace(/\b(?:Bearer|Basic)\s+[A-Za-z0-9._~+/=-]+/gi, REDACTED2).replace(/\b([a-z][a-z0-9+.-]*:\/\/)[^\s/'"`]+:[^\s/'"`]+@/gi, "$1[REDACTED]@").replace(/([?&](?:api[-_]?key|token|secret|password|signature)=)[^&#\s'"`]+/gi, "$1[REDACTED]");
+  const parsed = ts.createSourceFile("backend.ts", source, ts.ScriptTarget.Latest, true);
+  const comments = /* @__PURE__ */ new Map();
+  const visitComments = (node) => {
+    for (const range of [
+      ...ts.getLeadingCommentRanges(source, node.pos) ?? [],
+      ...ts.getTrailingCommentRanges(source, node.pos) ?? [],
+      ...ts.getTrailingCommentRanges(source, node.end) ?? []
+    ]) comments.set(range.pos, range.end);
+    for (const child of node.getChildren(parsed)) visitComments(child);
+  };
+  visitComments(parsed);
+  source = applySourceEdits(source, [...comments].map(([start, end]) => ({ start, end, text: " " })));
+  const redactLiteral = (token, offset) => {
+    const before = assignmentContext.slice(Math.max(0, offset - 200), offset);
+    if (/^\s*:/.test(source.slice(offset + token.length)) && /[{,]\s*$/.test(before)) return token;
+    const statement = before.slice(before.lastIndexOf(";") + 1);
+    const sensitiveAssignment = [
+      ...statement.matchAll(/([\w$-]+|"[^"\n]+"|'[^'\n]+')\s*(?:\]\s*)?[:=]/g)
+    ].some((match) => sensitiveName.test(match[1]));
+    const headerArgument = /(?:set|append)\s*\(\s*["']([^"']+)["']\s*,\s*$/.exec(before);
+    if (sensitiveAssignment || sensitiveName.test(headerArgument?.[1] ?? ""))
+      return JSON.stringify(REDACTED2);
+    if (/^["'`][A-Za-z0-9_+/=-]{24,}["'`]$/.test(token)) return JSON.stringify(REDACTED2);
+    return token;
+  };
+  const clean2 = ts.createSourceFile("backend.ts", source, ts.ScriptTarget.Latest, true);
+  const masks = [];
+  const collectMasks = (node) => {
+    const start = node.getStart(clean2);
+    if (ts.isRegularExpressionLiteral(node)) {
+      masks.push({ start, end: node.end, text: " ".repeat(node.end - start) });
+    } else if (ts.isStringLiteral(node) || ts.isTemplateLiteralToken(node)) {
+      masks.push({ start, end: node.end, text: source.slice(start, node.end).replace(/;/g, " ") });
+    }
+    ts.forEachChild(node, collectMasks);
+  };
+  collectMasks(clean2);
+  const assignmentContext = applySourceEdits(source, masks);
+  const edits = [];
+  const visitLiterals = (node) => {
+    if (ts.isStringLiteral(node) || ts.isNoSubstitutionTemplateLiteral(node) || ts.isTemplateExpression(node)) {
+      const start = node.getStart(clean2);
+      const text4 = source.slice(start, node.end);
+      const redacted = redactLiteral(text4, start);
+      if (redacted !== text4) {
+        edits.push({ start, end: node.end, text: redacted });
+        return;
+      }
+    }
+    ts.forEachChild(node, visitLiterals);
+  };
+  visitLiterals(clean2);
+  return applySourceEdits(source, edits);
+}
+function backendSourcePath(filename) {
+  const normalized = filename.replace(/\\/g, "/").replace(/^\.\//, "");
+  if (!/^(?:src\/)?backend\//.test(normalized) || normalized.split("/").includes("..")) return;
+  if (/(?:secret|credential|\.env|\.pem|\.key|node_modules|__tests__|\.test\.|\.spec\.)/i.test(
+    normalized
+  ))
+    return;
+  return /\.(?:js|ts|jsw)$/.test(normalized) ? normalized : void 0;
+}
+function selectVeloSource(files, request, knownSecrets = []) {
+  const candidates = files.flatMap((file) => {
+    const normalized = backendSourcePath(file.path);
+    return normalized && file.content.trim() ? [{ ...file, path: normalized }] : [];
+  });
+  const byPath = new Map(candidates.map((file) => [file.path, file]));
+  const words = [...new Set(request.toLowerCase().match(/[a-z][a-z0-9_]{3,}/g) ?? [])].filter(
+    (word) => !["with", "that", "this", "from", "have", "want", "app", "site", "backend"].includes(word)
+  ).slice(0, 80);
+  const score = (file) => {
+    const names = file.path + " " + [...file.content.matchAll(/export\s+(?:async\s+)?(?:function|const)\s+(\w+)/g)].map((m) => m[1]).join(" ");
+    return words.reduce((sum, word) => sum + (names.toLowerCase().includes(word) ? 10 : 0), 0) + (/http-functions\.[jt]s$|\.web\.[jt]s$|\.jsw$/.test(file.path) ? 1 : 0);
+  };
+  const queue = candidates.filter((file) => score(file) > 0).sort((a, b) => score(b) - score(a) || a.path.localeCompare(b.path));
+  const selected = /* @__PURE__ */ new Map();
+  let remaining = MAX_TOTAL_CHARS;
+  while (queue.length && selected.size < MAX_FILES && remaining > 0) {
+    const file = queue.shift();
+    if (!file) break;
+    if (selected.has(file.path)) continue;
+    const redacted = redactVeloSource(file.content, knownSecrets);
+    const excerpt = redacted.slice(0, Math.min(MAX_FILE_CHARS, remaining));
+    selected.set(file.path, { source: excerpt, sourceTruncated: excerpt.length < redacted.length });
+    remaining -= excerpt.length;
+    const dependencies = [];
+    const parsed = ts.createSourceFile(file.path, file.content, ts.ScriptTarget.Latest, true);
+    const specifiers = [];
+    const collectImports = (node) => {
+      let specifier;
+      if (ts.isImportDeclaration(node) || ts.isExportDeclaration(node)) {
+        specifier = node.moduleSpecifier;
+      } else if (ts.isImportEqualsDeclaration(node) && ts.isExternalModuleReference(node.moduleReference)) {
+        specifier = node.moduleReference.expression;
+      } else if (ts.isCallExpression(node) && (node.expression.kind === ts.SyntaxKind.ImportKeyword || ts.isIdentifier(node.expression) && node.expression.text === "require")) {
+        specifier = node.arguments[0];
+      }
+      if (specifier && ts.isStringLiteralLike(specifier)) specifiers.push(specifier.text);
+      ts.forEachChild(node, collectImports);
+    };
+    collectImports(parsed);
+    for (const specifier of specifiers) {
+      const target = specifier.startsWith(".") ? path.posix.join(path.posix.dirname(file.path), specifier) : specifier.startsWith("backend/") ? (file.path.startsWith("src/") ? "src/" : "") + specifier : "";
+      const dependency = [
+        target,
+        target + ".js",
+        target + ".ts",
+        target + ".jsw",
+        target + "/index.js",
+        target + "/index.ts"
+      ].map((name) => byPath.get(name)).find(Boolean);
+      if (dependency) dependencies.push(dependency);
+    }
+    queue.unshift(...dependencies);
+  }
+  return selected;
+}
+var MAX_FILES, MAX_FILE_CHARS, MAX_TOTAL_CHARS, REDACTED2, sensitiveName;
+var init_velo_source = __esm({
+  "src/site-analyze/velo-source.ts"() {
+    MAX_FILES = 6;
+    MAX_FILE_CHARS = 8e3;
+    MAX_TOTAL_CHARS = 24e3;
+    REDACTED2 = "[REDACTED]";
+    sensitiveName = /(?:secret|password|passwd|token|authorization|cookie|api[-_]?key|private[-_]?key|access[-_]?key|credential)/i;
+  }
+});
+
+// src/site-analyze/context.ts
+var context_exports = {};
+__export(context_exports, {
+  collectSiteContext: () => collectSiteContext,
+  contextFetch: () => contextFetch
+});
+function contextFetch(fetchImpl, signal) {
+  return async (input, init) => {
+    const url = new URL(String(input));
+    const method = init?.method ?? "GET";
+    const apiRead = url.origin === "https://www.wixapis.com" && reads.has(`${method} ${url.pathname}`);
+    const veloRead = url.origin === new URL(VELO_IDE_ORIGIN).origin && method === "GET" && /^\/_api\/wix-code-ide-server-ng\/v1\/apps\/[\w-]+\/files$/.test(url.pathname) && ["ONLINE", "GITHUB"].includes(url.searchParams.get("layout") ?? "");
+    if (!apiRead && !veloRead || url.username || url.password) throw new Error("Not a site-analysis read");
+    if (url.pathname === "/oauth2/token" && JSON.parse(String(init?.body)).grantType !== "anonymous") {
+      throw new Error("Only anonymous visitor authentication is allowed");
+    }
+    const response = await fetchImpl(input, { ...init, redirect: "error", signal });
+    const reader = response.body?.getReader();
+    if (!reader) return response;
+    const chunks = [];
+    let size = 0;
+    for (; ; ) {
+      const chunk = await reader.read();
+      if (chunk.done) break;
+      size += chunk.value.byteLength;
+      if (size > 2e6) {
+        await reader.cancel();
+        throw new Error("Site-analysis response exceeds 2 MB");
+      }
+      chunks.push(chunk.value);
+    }
+    return new Response(Buffer.concat(chunks), { status: response.status, headers: response.headers });
+  };
+}
+async function collectSiteContext(opts) {
+  const fetcher = contextFetch(opts.fetchImpl ?? fetch, AbortSignal.timeout(opts.timeoutMs ?? 15e3));
+  const owner = opts.ownerToken ? makeTransport(fetcher, { token: opts.ownerToken, msid: opts.siteId }) : void 0;
+  let visitorToken;
+  let visitorAuth = { status: "skipped" };
+  if (opts.clientId) {
+    try {
+      visitorToken = await mintVisitorToken(fetcher, opts.clientId);
+      visitorAuth = { status: "ok" };
+    } catch (e) {
+      visitorAuth = failed(e);
+    }
+  }
+  const visitor = visitorToken ? makeTransport(fetcher, { token: visitorToken, msid: opts.siteId }) : void 0;
+  const identityRead = async () => {
+    if (!owner) return { status: "skipped" };
+    try {
+      const identity2 = parseSiteProperties(await owner("GET", "/site-properties/v4/properties"), "");
+      return { status: "ok", values: {
+        businessName: identity2.businessName,
+        siteDisplayName: identity2.siteDisplayName,
+        description: identity2.description,
+        logo: identity2.logoUrl,
+        language: identity2.locale.languageCode,
+        currency: identity2.locale.currency
+      } };
+    } catch (e) {
+      return failed(e);
+    }
+  };
+  const cmsRead = async () => {
+    try {
+      let failure;
+      const observed = owner ? async (method, path2, body) => {
+        try {
+          const data = await owner(method, path2, body);
+          if (!Array.isArray(data?.collections)) throw new Error("Malformed CMS inventory");
+          return data;
+        } catch (e) {
+          const code = e instanceof WixApiError2 ? e.body?.details?.applicationError?.code : void 0;
+          failure = code === "WDE0110" ? { status: "unavailable", httpStatus: 400 } : failed(e);
+          throw e;
+        }
+      } : void 0;
+      const cms2 = await readCms(observed, { samples: false });
+      return { ...cms2, ...failure, collections: cms2.collections.map((c) => ({
+        id: c.id,
+        readRole: c.readRole,
+        visitorReadable: c.readRole === "ANYONE",
+        ownership: "existing"
+      })) };
+    } catch {
+      return { status: "error", collections: [] };
+    }
+  };
+  const veloRead = async () => {
+    if (!owner) return { status: "skipped", files: [], sourceIncluded: false };
+    let readFailure;
+    const observed = async (method, path2, body) => {
+      try {
+        return await owner(method, path2, body);
+      } catch (e) {
+        readFailure = failed(e);
+        throw e;
+      }
+    };
+    try {
+      const velo2 = await readOwnerVelo(observed, { redact: (source) => redactVeloSource(source, [opts.ownerToken ?? "", visitorToken ?? ""]) });
+      const files = velo2.files.flatMap((f) => {
+        const normalized = backendSourcePath(f.path);
+        return normalized ? [{ ...f, path: normalized }] : [];
+      });
+      const selected = selectVeloSource(
+        files.map((f) => ({ path: f.path, content: f.content ?? "" })),
+        opts.request ?? "",
+        [opts.ownerToken ?? "", visitorToken ?? ""]
+      );
+      return {
+        ...files.length ? { status: "ok" } : readFailure ?? { status: "unavailable" },
+        files: files.map((f) => ({
+          path: f.path,
+          kind: f.kind,
+          exports: [...(f.content ?? "").matchAll(/export\s+(?:async\s+)?(?:function|const)\s+([A-Za-z_$][\w$]*)/g)].slice(0, 20).map((m) => m[1]),
+          ...selected.get(f.path)
+        })),
+        sourceIncluded: selected.size > 0,
+        truncated: files.length > selected.size || [...selected.values()].some((f) => f.sourceTruncated)
+      };
+    } catch (e) {
+      return { ...failed(e), files: [], sourceIncluded: false };
+    }
+  };
+  const [identity, cms, velo, probes] = await Promise.all([
+    identityRead(),
+    cmsRead(),
+    veloRead(),
+    runDualProbes(owner, visitor, definitions)
+  ]);
+  const probeRead = (p, available, auth) => {
+    if (!available) return auth;
+    if (p.httpStatus) return { ...failed(new WixApiError2(p.httpStatus, "", "", null)), count: p.count };
+    return { status: p.status === "ok" || p.status === "empty" ? p.status : "error", count: p.count };
+  };
+  return {
+    schemaVersion: 1,
+    mode: "read-only",
+    identity,
+    cms,
+    velo,
+    verticals: probes.map((p) => ({
+      name: p.vertical,
+      owner: probeRead(p.owner, !!owner, { status: "skipped" }),
+      visitor: probeRead(p.visitor, !!visitor, visitorAuth)
+    }))
+  };
+}
+var responseKeys, definitions, reads, failed;
+var init_context = __esm({
+  "src/site-analyze/context.ts"() {
+    init_probes();
+    init_rest();
+    init_site_properties();
+    init_visitor_auth();
+    init_velo();
+    init_velo_source();
+    responseKeys = {
+      store: "products",
+      bookings: "services",
+      events: "events",
+      blog: "posts"
+    };
+    definitions = [...CORE_PROBES, ...OPTIONAL_PROBES].filter((p) => p.vertical in responseKeys).map((p) => {
+      const checked = (read, path2) => (data) => {
+        const rows = path2 === "/catalog/v1/products/query" ? data.products ?? data.items : data[responseKeys[p.vertical]];
+        if (!Array.isArray(rows)) throw new Error("Malformed catalog response");
+        return read(data);
+      };
+      return {
+        ...p,
+        itemsOf: checked(p.itemsOf, p.path),
+        fallbacks: p.fallbacks?.map((f) => ({ ...f, itemsOf: checked(f.itemsOf ?? p.itemsOf, f.path) }))
+      };
+    });
+    reads = /* @__PURE__ */ new Set([
+      "POST /oauth2/token",
+      "GET /site-properties/v4/properties",
+      "GET /data/v2/collections",
+      ...OWNER_VELO_PROBES.map((p) => `${p.method} ${p.path}`),
+      ...definitions.flatMap((p) => [p, ...p.fallbacks ?? []].map((a) => `${a.method} ${a.path}`))
+    ]);
+    failed = (e) => {
+      const httpStatus = e instanceof WixApiError2 ? e.status : void 0;
+      return { status: httpStatus === 401 ? "unauthorized" : httpStatus === 403 ? "forbidden" : httpStatus === 404 || httpStatus === 428 ? "unavailable" : "error", ...httpStatus ? { httpStatus } : {} };
+    };
+  }
+});
+
 // src/cli.ts
 import { mkdtempSync as mkdtempSync4, readFileSync as readFileSync67, mkdirSync as mkdirSync27, writeFileSync as writeFileSync25, existsSync as existsSync56, rmSync as rmSync10, readdirSync as readdirSync25, statSync as statSync13, lstatSync as lstatSync6, accessSync, constants } from "node:fs";
-import { execFileSync as execFileSync7, spawnSync as spawnSync5, spawn as spawn5 } from "node:child_process";
+import { execFile as execFile4, execFileSync as execFileSync7, spawnSync as spawnSync5, spawn as spawn5 } from "node:child_process";
 import { createHash as createHash24, randomUUID as randomUUID3 } from "node:crypto";
 import { tmpdir as tmpdir5, homedir as homedir7, hostname } from "node:os";
 import { join as join52, resolve as resolve44, relative as relative8, basename as basename12, dirname as dirname31 } from "node:path";
@@ -56520,11 +56907,11 @@ var ServeCliClient = class {
     if (!url) throw new Error(`no ${plane} URL configured for this target`);
     return url.replace(/\/+$/, "");
   }
-  async request(plane, method, path, opts = {}) {
+  async request(plane, method, path2, opts = {}) {
     const headers2 = { ...opts.headers };
     if (opts.body !== void 0) headers2["content-type"] = "application/json";
     const carriesCredential = Object.keys(headers2).some((h2) => CREDENTIAL_HEADERS.has(h2.toLowerCase()));
-    const res = await this.fetchImpl(this.baseFor(plane) + path, {
+    const res = await this.fetchImpl(this.baseFor(plane) + path2, {
       method,
       headers: headers2,
       ...carriesCredential ? { redirect: "error" } : {},
@@ -56737,12 +57124,12 @@ var ServeCliClient = class {
     if (o.since !== void 0) q.set("since", String(o.since));
     if (o.limit) q.set("limit", String(o.limit));
     if (o.crashesOnly) q.set("crashesOnly", "1");
-    const path = `/v1/telemetry/events?${q}`;
-    return this.request("telemetry", "GET", path, { headers: this.telHeaders() }).then(async (res) => {
+    const path2 = `/v1/telemetry/events?${q}`;
+    return this.request("telemetry", "GET", path2, { headers: this.telHeaders() }).then(async (res) => {
       if (res.status !== 404 || this.target.telemetry.replace(/\/+$/, "") === this.target.serve.replace(/\/+$/, "")) {
         return res;
       }
-      return this.request("serve", "GET", path, { headers: this.telHeaders() });
+      return this.request("serve", "GET", path2, { headers: this.telHeaders() });
     });
   }
   /** Retained worker console lines (oldest first; `since` = seq cursor for tailing). */
@@ -56752,12 +57139,12 @@ var ServeCliClient = class {
     if (o.screenId) q.set("screen", o.screenId);
     if (o.since !== void 0) q.set("since", String(o.since));
     if (o.limit) q.set("limit", String(o.limit));
-    const path = `/v1/telemetry/logs?${q}`;
-    return this.request("telemetry", "GET", path, { headers: this.telHeaders() }).then(async (res) => {
+    const path2 = `/v1/telemetry/logs?${q}`;
+    return this.request("telemetry", "GET", path2, { headers: this.telHeaders() }).then(async (res) => {
       if (res.status !== 404 || this.target.telemetry.replace(/\/+$/, "") === this.target.serve.replace(/\/+$/, "")) {
         return res;
       }
-      return this.request("serve", "GET", path, { headers: this.telHeaders() });
+      return this.request("serve", "GET", path2, { headers: this.telHeaders() });
     });
   }
   // ---- serve-control (publish / rollout / kill-switch — the mutable plane) ----
@@ -56815,8 +57202,8 @@ var ServeCliClient = class {
   }
   /** RFC 0012 release history: list the ledger (GET /v1/releases) or one manifest (…/{releaseId}). */
   releases(app, releaseId) {
-    const path = releaseId ? `/v1/releases/${encodeURIComponent(releaseId)}?app=${encodeURIComponent(app)}` : `/v1/releases?app=${encodeURIComponent(app)}`;
-    return this.request("control", "GET", path, { headers: this.ctrlHeaders() });
+    const path2 = releaseId ? `/v1/releases/${encodeURIComponent(releaseId)}?app=${encodeURIComponent(app)}` : `/v1/releases?app=${encodeURIComponent(app)}`;
+    return this.request("control", "GET", path2, { headers: this.ctrlHeaders() });
   }
   /** Select a published releaseId for a ring (POST /v1/admin/promote); optional rollout %. */
   promote(app, ring, releaseId, percent, force = false) {
@@ -57173,8 +57560,8 @@ var VALIDATION_METADATA = /* @__PURE__ */ new Set([
   ".claude/.validation-baseline.json",
   ".claude/.validation-evidence.json"
 ]);
-function isValidationMetadata(path) {
-  return VALIDATION_METADATA.has(path) || /(^|[\\/])\.himi([\\/]|$)/.test(path);
+function isValidationMetadata(path2) {
+  return VALIDATION_METADATA.has(path2) || /(^|[\\/])\.himi([\\/]|$)/.test(path2);
 }
 function tryGit(args, root) {
   try {
@@ -57190,10 +57577,10 @@ function committedRecords(raw) {
   const records = [];
   for (let i = 0; i < fields.length; i += 2) {
     const metadata2 = fields[i];
-    const path = fields[i + 1];
-    if (!metadata2.startsWith(":") || path === "") return null;
-    if (isValidationMetadata(path)) continue;
-    records.push(`${Buffer.byteLength(path)}:${path}\0${metadata2}\0`);
+    const path2 = fields[i + 1];
+    if (!metadata2.startsWith(":") || path2 === "") return null;
+    if (isValidationMetadata(path2)) continue;
+    records.push(`${Buffer.byteLength(path2)}:${path2}\0${metadata2}\0`);
   }
   return records.sort().join("");
 }
@@ -57253,12 +57640,12 @@ function validationDiffHash(cwd = process.cwd()) {
     trustFilesystemMode = git(["config", "--bool", "--get", "core.fileMode"], { cwd: root }).trim() !== "false";
   } catch {
   }
-  const paths = [.../* @__PURE__ */ new Set([...staged, ...unstaged, ...untracked])].filter((path) => !isValidationMetadata(path)).sort();
-  const identity = paths.map((path) => {
-    const absolute = resolve5(root, path);
-    const headEntry = headEntries.get(path);
-    const indexEntry = indexEntries.get(path);
-    const deletedRecord = () => [`${Buffer.byteLength(path)}:${path}`, "deleted", stagedIdentity(headEntry, indexEntry, void 0), ""].join("\0");
+  const paths = [.../* @__PURE__ */ new Set([...staged, ...unstaged, ...untracked])].filter((path2) => !isValidationMetadata(path2)).sort();
+  const identity = paths.map((path2) => {
+    const absolute = resolve5(root, path2);
+    const headEntry = headEntries.get(path2);
+    const indexEntry = indexEntries.get(path2);
+    const deletedRecord = () => [`${Buffer.byteLength(path2)}:${path2}`, "deleted", stagedIdentity(headEntry, indexEntry, void 0), ""].join("\0");
     let stat2;
     try {
       stat2 = lstatSync2(absolute);
@@ -57272,7 +57659,7 @@ function validationDiffHash(cwd = process.cwd()) {
         const worktreeEntry = { mode: "120000", oid: blobOid(target, objectAlgorithm) };
         const stagedState2 = stagedIdentity(headEntry, indexEntry, worktreeEntry);
         return [
-          `${Buffer.byteLength(path)}:${path}`,
+          `${Buffer.byteLength(path2)}:${path2}`,
           "symlink",
           "120000",
           diffHash(target),
@@ -57283,11 +57670,11 @@ function validationDiffHash(cwd = process.cwd()) {
       if (stat2.isFile()) {
         const filesystemMode = stat2.mode & 73 ? "100755" : "100644";
         const worktreeMode = trustFilesystemMode ? filesystemMode : indexEntry?.mode ?? headEntry?.mode ?? "100644";
-        const worktreeOid = git(["hash-object", `--path=${path}`, "--", path], { cwd: root }).trim();
+        const worktreeOid = git(["hash-object", `--path=${path2}`, "--", path2], { cwd: root }).trim();
         const worktreeEntry = { mode: worktreeMode, oid: worktreeOid };
         const stagedState2 = stagedIdentity(headEntry, indexEntry, worktreeEntry);
         return [
-          `${Buffer.byteLength(path)}:${path}`,
+          `${Buffer.byteLength(path2)}:${path2}`,
           "file",
           worktreeMode,
           diffHash(readFileSync4(absolute)),
@@ -57306,7 +57693,7 @@ function validationDiffHash(cwd = process.cwd()) {
     const type = stat2.isDirectory() ? "directory" : "other";
     const stagedState = stagedIdentity(headEntry, indexEntry, void 0);
     return [
-      `${Buffer.byteLength(path)}:${path}`,
+      `${Buffer.byteLength(path2)}:${path2}`,
       type,
       stat2.mode.toString(8),
       stagedState,
@@ -57413,7 +57800,7 @@ var SELF_TEST_CASES = [
   }
 ];
 function runSelfTest() {
-  let failed = 0;
+  let failed2 = 0;
   for (const testCase of SELF_TEST_CASES) {
     let ok = false;
     let thrown = null;
@@ -57427,20 +57814,20 @@ function runSelfTest() {
 `);
       continue;
     }
-    failed++;
+    failed2++;
     process.stderr.write(`  \u2717 ${testCase.name}
       ${thrown ?? testCase.reason}
 `);
   }
-  return failed;
+  return failed2;
 }
 if (process.argv[1] && basename(process.argv[1]) === "diff-hash.mjs" && import.meta.url === pathToFileURL(process.argv[1]).href) {
   if (process.argv.slice(2).includes("--self-test")) {
     process.stdout.write("\u25B8 diff-hash --self-test: proving the identity can change, and can hold\n");
-    const failed = runSelfTest();
-    if (failed) {
+    const failed2 = runSelfTest();
+    if (failed2) {
       process.stderr.write(
-        `\u2717 diff-hash self-test FAILED (${failed} case(s)) \u2014 the evidence record's diff identity cannot be trusted
+        `\u2717 diff-hash self-test FAILED (${failed2} case(s)) \u2014 the evidence record's diff identity cannot be trusted
 `
       );
       process.exit(1);
@@ -57533,16 +57920,16 @@ function currentGitUntrackedHash(contentDir2) {
     maxBuffer: GIT_HASH_MAX_BUFFER
   });
   const hash = createHash3("sha256");
-  for (const path of listed.split("\0").filter(Boolean).sort()) {
-    const local = relative(absolute, join6(root, path));
+  for (const path2 of listed.split("\0").filter(Boolean).sort()) {
+    const local = relative(absolute, join6(root, path2));
     if (local.split(/[\\/]/)[0] === ".himi") continue;
-    const full = join6(root, path);
+    const full = join6(root, path2);
     const stats = lstatSync3(full, { throwIfNoEntry: false });
     if (!stats) continue;
     const kind = stats.isSymbolicLink() ? "link" : stats.isDirectory() ? "dir" : stats.isFile() ? "file" : null;
     if (!kind) continue;
     const payload = kind === "link" ? Buffer.from(readlinkSync2(full)) : kind === "file" ? readFileSync5(full) : Buffer.alloc(0);
-    const pathBytes = Buffer.from(path);
+    const pathBytes = Buffer.from(path2);
     hash.update(`${kind} ${pathBytes.length} ${payload.length}
 `).update(pathBytes).update(payload);
   }
@@ -57553,11 +57940,11 @@ function sourceTreeHash(root) {
   const visit = (dir) => {
     for (const entry of readdirSync3(dir, { withFileTypes: true }).sort((a, b) => a.name < b.name ? -1 : a.name > b.name ? 1 : 0)) {
       if (entry.isDirectory() && [".git", ".himi", "node_modules"].includes(entry.name)) continue;
-      const path = join6(dir, entry.name);
-      const local = relative(root, path);
-      if (entry.isDirectory()) visit(path);
-      else if (entry.isFile()) hash.update(local).update("\0").update(readFileSync5(path)).update("\0");
-      else if (entry.isSymbolicLink()) hash.update(local).update("\0link\0").update(readlinkSync2(path)).update("\0");
+      const path2 = join6(dir, entry.name);
+      const local = relative(root, path2);
+      if (entry.isDirectory()) visit(path2);
+      else if (entry.isFile()) hash.update(local).update("\0").update(readFileSync5(path2)).update("\0");
+      else if (entry.isSymbolicLink()) hash.update(local).update("\0link\0").update(readlinkSync2(path2)).update("\0");
     }
   };
   visit(root);
@@ -57605,9 +57992,9 @@ function readRetainedAttestations(contentDir2) {
     for (const run2 of parsedRuns) {
       if (selfHashFor(run2) !== run2.selfHash) errors.push(`selfHash does not match retained run ${run2.runId}`);
       for (const expected of Object.values(run2.screenshots)) {
-        const path = screenshotArtifactPath(contentDir2, expected);
-        if (!existsSync3(path)) errors.push(`missing screenshot for retained run ${run2.runId}: ${basename2(path)}`);
-        else if (sha256(readFileSync5(path)) !== expected) errors.push(`screenshot hash does not match retained run ${run2.runId}: ${basename2(path)}`);
+        const path2 = screenshotArtifactPath(contentDir2, expected);
+        if (!existsSync3(path2)) errors.push(`missing screenshot for retained run ${run2.runId}: ${basename2(path2)}`);
+        else if (sha256(readFileSync5(path2)) !== expected) errors.push(`screenshot hash does not match retained run ${run2.runId}: ${basename2(path2)}`);
       }
     }
     const runs = [];
@@ -57668,8 +58055,8 @@ function writeAttestation(input, opts = {}) {
   const descriptorHashes = Object.fromEntries(
     Object.entries(input.descriptors).sort(([a], [b]) => a.localeCompare(b)).map(([screen, bytes2]) => [screen, sha256(bytes2)])
   );
-  const screenshotEntries = Object.entries(input.screenshots ?? {}).sort(([a], [b]) => a.localeCompare(b)).filter(([, path]) => existsSync3(path)).map(([screen, path]) => {
-    const bytes2 = readFileSync5(path);
+  const screenshotEntries = Object.entries(input.screenshots ?? {}).sort(([a], [b]) => a.localeCompare(b)).filter(([, path2]) => existsSync3(path2)).map(([screen, path2]) => {
+    const bytes2 = readFileSync5(path2);
     return { screen, bytes: bytes2, hash: sha256(bytes2) };
   });
   const screenshots = Object.fromEntries(screenshotEntries.map(({ screen, hash }) => [screen, hash]));
@@ -57796,12 +58183,12 @@ function verifyAttestation(attestation, contentDir2, descriptors, expectedApp, r
     if (sha256(bytes2) !== expected) errors.push(`descriptor hash does not match for ${screen}`);
   }
   for (const [screen, expected] of Object.entries(attestation.screenshots)) {
-    const path = screenshotArtifactPath(contentDir2, expected);
-    if (!existsSync3(path)) {
-      errors.push(`missing screenshot for ${screen}: ${basename2(path)}`);
+    const path2 = screenshotArtifactPath(contentDir2, expected);
+    if (!existsSync3(path2)) {
+      errors.push(`missing screenshot for ${screen}: ${basename2(path2)}`);
       continue;
     }
-    if (sha256(readFileSync5(path)) !== expected) errors.push(`screenshot hash does not match for ${screen}: ${basename2(path)}`);
+    if (sha256(readFileSync5(path2)) !== expected) errors.push(`screenshot hash does not match for ${screen}: ${basename2(path2)}`);
   }
   return { ok: errors.length === 0, errors };
 }
@@ -58128,9 +58515,9 @@ function dpxSessionTokenPath() {
   return process.env.HIMI_DPX_TOKEN ?? join7(homedir2(), ".dpx", "session", "token");
 }
 var DPX_SESSION_PORT = 5151;
-function dpxSessionPresent(path = dpxSessionTokenPath()) {
+function dpxSessionPresent(path2 = dpxSessionTokenPath()) {
   try {
-    return existsSync4(path) && readFileSync6(path, "utf8").trim().length > 0;
+    return existsSync4(path2) && readFileSync6(path2, "utf8").trim().length > 0;
   } catch {
     return false;
   }
@@ -58309,10 +58696,10 @@ async function listCollections(call) {
     let total;
     let reachedEnd = false;
     for (let page = 0; page < MAX_COLLECTION_PAGES; page++) {
-      const path = offset ? `/data/v2/collections?paging.offset=${offset}` : "/data/v2/collections";
+      const path2 = offset ? `/data/v2/collections?paging.offset=${offset}` : "/data/v2/collections";
       const r = await withRetry(
         "list collections",
-        () => call("GET", path)
+        () => call("GET", path2)
       );
       const batch = r.collections ?? [];
       const t = r.pagingMetadata?.total;
@@ -59302,9 +59689,9 @@ function storesV1Issues(contentDir2, strict) {
   const files = [];
   const visit = (dir) => {
     for (const entry of readdirSync10(dir, { withFileTypes: true })) {
-      const path = join23(dir, entry.name);
-      if (entry.isDirectory()) visit(path);
-      else if (/\.(?:[cm]?[jt]sx?)$/i.test(entry.name)) files.push(path);
+      const path2 = join23(dir, entry.name);
+      if (entry.isDirectory()) visit(path2);
+      else if (/\.(?:[cm]?[jt]sx?)$/i.test(entry.name)) files.push(path2);
     }
   };
   roots.forEach(visit);
@@ -59328,12 +59715,12 @@ import { existsSync as existsSync22, readFileSync as readFileSync22, readdirSync
 import { join as join25, relative as relative4, resolve as resolve16 } from "node:path";
 var SOURCE_EXTENSIONS = /* @__PURE__ */ new Set([".ts", ".tsx", ".js", ".jsx", ".json"]);
 var IGNORED_DIRECTORIES = /* @__PURE__ */ new Set([".git", "node_modules", "dist", ".himi", "coverage"]);
-function issue(issues, strict, code, message, path) {
-  issues.push({ code, message, ...path ? { path } : {}, severity: strict ? "error" : "warning" });
+function issue(issues, strict, code, message, path2) {
+  issues.push({ code, message, ...path2 ? { path: path2 } : {}, severity: strict ? "error" : "warning" });
 }
-function readText2(path) {
+function readText2(path2) {
   try {
-    return existsSync22(path) ? readFileSync22(path, "utf8") : null;
+    return existsSync22(path2) ? readFileSync22(path2, "utf8") : null;
   } catch {
     return null;
   }
@@ -59643,6 +60030,7 @@ var BOOLEAN_FLAGS = /* @__PURE__ */ new Set([
   "json",
   "deep",
   "quiet",
+  "read-only",
   "force",
   "replace",
   "watch",
@@ -59770,10 +60158,10 @@ var str5 = (v) => typeof v === "string" ? v : void 0;
 var num = (v) => typeof v === "string" && v !== "" && Number.isFinite(Number(v)) ? Number(v) : void 0;
 function embeddedTemplateCatalog() {
   return availableTemplates().map((name) => {
-    const path = join52(templateSourceDir(name), TEMPLATE_META_FILE);
-    const meta = JSON.parse(readFileSync67(path, "utf8"));
+    const path2 = join52(templateSourceDir(name), TEMPLATE_META_FILE);
+    const meta = JSON.parse(readFileSync67(path2, "utf8"));
     if (!meta || typeof meta.title !== "string" || typeof meta.description !== "string" || !Array.isArray(meta.tags)) {
-      throw new Error(`${path} must be { title: string, description: string, tags: string[], category?: string }`);
+      throw new Error(`${path2} must be { title: string, description: string, tags: string[], category?: string }`);
     }
     return { name, ...meta, source: "embedded" };
   });
@@ -60260,6 +60648,7 @@ var USAGE = `himi \u2014 the Himalaya authoring CLI (remote dev loop)
                                            also requires a MOBILE applicationType, because ensure
                                            refuses a WEB client \u2014 so a WEB one carrying your
                                            redirect looks right and is not a candidate.
+  himi site analyze --read-only --site <msid> [--client-id <id>] [--json]
   himi site analyze --client-id <id> --url <https://\u2026> [--site <msid>] [--out <dir>] [--apply]
                     [--shell ${SHELL_ENUM}]
                                            collect a Wix business book (APIs + Playwright look) and
@@ -60373,7 +60762,7 @@ var COMMANDS = [
   { name: "login", summary: "obtain a scoped serve-control token from Wix identity and store it in ~/.himalaya/serve-targets.json (so push/promote need no hand-pasted token). Three modes: --browser (your own Wix account, no VPN/BO), --wix (HEADLESS \u2014 the machine's own Wix CLI credential; the mode a CI pod or agent container can satisfy), --dpx (Wix employee, reads ~/.dpx/session/token). RFC 0026 WS3.", required: "[--browser|--wix|--dpx] [--target <t>] [--issue-url <url>]" },
   { name: "logout", summary: "remove the stored control token for a target", required: "[--target <t>]" },
   { name: "notify", summary: "`setup` optionally configures Branded/Ping from local customer key files; `status --refresh` reads live backend readiness. Setup may be deferred while building. These use serve-control and require owner plus Wix account authentication. `send`, `tokens`, `doctor`: send a REAL push notification to registered devices (RFC 0036 WS5) \u2014 APNs .p8 over HTTP/2 for iOS, FCM v1 for Android. `send` targets one device (--token / --device <registry id>) or fans out to the whole app (--all), reporting a per-device result; a token the provider says is uninstalled (APNs 410 Unregistered / FCM UNREGISTERED) is auto-disabled, while a merely wrong one (BadDeviceToken \u2014 usually a sandbox/production mismatch) is recorded and left enabled. `tokens` lists the registry. `doctor` reports which credentials resolve and which sender each platform picks. Talks to the admin-server via --admin-url/HIMALAYA_ADMIN_URL, authenticated with --admin-session/HIMALAYA_ADMIN_SESSION. NOT `himi push`, which publishes a release.", required: "setup|status [--content <dir>] [--target <t>] [--refresh] [--yes] [--no-push-setup] | send|tokens|doctor [--app <a>] [--token <t> | --device <id> | --all] [--title <s>] [--body <s>] [--link <url>] [--platform ios|android] [--badge <n>] [--channel <id>] [--silent] [--dry-run] [--json]" },
-  { name: "site", summary: "PROVISION a Wix project, then analyze or extend it. `create` is the one door that makes a site instead of adopting one: POST /funnel/projects/v1/create (a WIX site, a HEADLESS backend, a BRANDED_APP, or a VIBE site), and for headless it also mints the OAuth app whose id IS the `WIX_CLIENT_ID` \u2014 with --redirect-uri already registered, because an unregistered redirect makes native signInDirect fail at redirect-session. `--verticals` REQUIRES `--template` and reports only what Wix confirmed: measured, installing onto a project created from the BLANK template returns 200 while the vertical's API answers 428 forever, because there is no site for it to attach to (the install asks for CREATE_SITE). A real template ships its verticals installed and populated, and installing further ones onto it then works. It MUTATES your Wix account and needs --yes; without it you get the payload and nothing is sent. `list` is the read-only site inventory (with each site's premium flag, which is what explains an installed-but-428 vertical). Auth is the account-scoped `wix token` (no --site), falling back to WIX_API_KEY + WIX_ACCOUNT_ID. `client` is the same OAuth step for a site that ALREADY exists \u2014 the one himi adopts rather than makes \u2014 so a clientId no longer means a manual trip to the dashboard: `client ensure` reconciles rather than mints, because a site can already carry a client with NO registered redirect and shipping that one fails signInDirect at runtime; it reuses a client that carries --redirect-uri, PATCHes one that matches --name but lacks it (unioning, so another app's redirect survives), and creates only when there is nothing to reuse (--new forces a fresh one). --name IS the idempotency key. `client` auth is SITE-scoped (`wix token --site <msid>`) because minting is owner-of-that-site, and --yes gates every mutation: a site that already has a usable client resolves WITHOUT it, but --write-provisioning needs --yes even then because it rewrites a manifest on disk (the dry run's planned.provisioning names the file). That query endpoint IGNORES paging (measured: query.paging, cursorPaging and a top-level paging all return the full set at offset 0), so when pagingMetadata reports more clients than came back, `ensure` REFUSES EVERY outcome \u2014 create, patch AND reuse. Reuse is refused too because pickClient breaks ties on the OLDEST createdDate, so an omitted older same-named MOBILE client with the same redirect would win a later complete read and the resolved clientId would MOVE between runs \u2014 and it gets written into provisioning.json; convergence is what makes a stray duplicate untidy rather than harmful. --name cannot narrow the query (no filter is sent; the name is applied to the rows after they arrive), so the recovery is the dashboard; --new skips the query entirely. A `patched` result is verified against what Wix STORED \u2014 the redirect list is read off the PATCH response, and re-read via GET when the response omits it, because falling back to the list himi just sent would make the guard pass vacuously on exactly the silent no-op it exists to catch. `client list` is the read-only inventory of a site's clients: act on its `shippable` column rather than `hasRedirect`, because shippable ALSO requires a MOBILE applicationType and `ensure` refuses a WEB client \u2014 a WEB one carrying your redirect looks right and is not a candidate \u2014 and it sets truncated:true rather than presenting a partial inventory as the whole one. `analyze` reads a site into a business-book folder (REST + Playwright, GET-only); `site function` list/get/put/publish/invokes that site's Velo HTTP functions and is not `himi functions` (serve-plane jobs). `--apply` bakes into a brandable shell; `--shell` takes the same names `himi dist --shell` does and defaults to branded-lite, and a shell that ships no prepare:customer is refused by name rather than half-built. It never overwrites any shell's committed apps/<shell>/provisioning.json.", required: "create <name> [--type wix|headless|branded-app|vibe] [--template <guid>] [--verticals stores,bookings,\u2026] [--folder <guid>] [--redirect-uri <uri>] [--no-oauth-app] [--write-provisioning [path]] [--site-url <url>] [--json] --yes | list | client ensure|list --site <msid> [--name <name>] [--redirect-uri <uri>] [--new] [--write-provisioning [path]] [--site-url <url>] [--json] --yes | analyze --client-id <id> --url <https> [--site <msid>] [--out <dir>] [--redirect-uri <uri>] [--apply] [--shell " + SHELL_ENUM + "] | function list|get|put|publish|invoke [--site <msid>] [--url <https>] [--method GET|POST|PUT|DELETE] [--source <file>] [--body <json>] [--publish] [--invoke]" },
+  { name: "site", summary: "PROVISION a Wix project, then analyze or extend it. `create` is the one door that makes a site instead of adopting one: POST /funnel/projects/v1/create (a WIX site, a HEADLESS backend, a BRANDED_APP, or a VIBE site), and for headless it also mints the OAuth app whose id IS the `WIX_CLIENT_ID` \u2014 with --redirect-uri already registered, because an unregistered redirect makes native signInDirect fail at redirect-session. `--verticals` REQUIRES `--template` and reports only what Wix confirmed: measured, installing onto a project created from the BLANK template returns 200 while the vertical's API answers 428 forever, because there is no site for it to attach to (the install asks for CREATE_SITE). A real template ships its verticals installed and populated, and installing further ones onto it then works. It MUTATES your Wix account and needs --yes; without it you get the payload and nothing is sent. `list` is the read-only site inventory (with each site's premium flag, which is what explains an installed-but-428 vertical). Auth is the account-scoped `wix token` (no --site), falling back to WIX_API_KEY + WIX_ACCOUNT_ID. `client` is the same OAuth step for a site that ALREADY exists \u2014 the one himi adopts rather than makes \u2014 so a clientId no longer means a manual trip to the dashboard: `client ensure` reconciles rather than mints, because a site can already carry a client with NO registered redirect and shipping that one fails signInDirect at runtime; it reuses a client that carries --redirect-uri, PATCHes one that matches --name but lacks it (unioning, so another app's redirect survives), and creates only when there is nothing to reuse (--new forces a fresh one). --name IS the idempotency key. `client` auth is SITE-scoped (`wix token --site <msid>`) because minting is owner-of-that-site, and --yes gates every mutation: a site that already has a usable client resolves WITHOUT it, but --write-provisioning needs --yes even then because it rewrites a manifest on disk (the dry run's planned.provisioning names the file). That query endpoint IGNORES paging (measured: query.paging, cursorPaging and a top-level paging all return the full set at offset 0), so when pagingMetadata reports more clients than came back, `ensure` REFUSES EVERY outcome \u2014 create, patch AND reuse. Reuse is refused too because pickClient breaks ties on the OLDEST createdDate, so an omitted older same-named MOBILE client with the same redirect would win a later complete read and the resolved clientId would MOVE between runs \u2014 and it gets written into provisioning.json; convergence is what makes a stray duplicate untidy rather than harmful. --name cannot narrow the query (no filter is sent; the name is applied to the rows after they arrive), so the recovery is the dashboard; --new skips the query entirely. A `patched` result is verified against what Wix STORED \u2014 the redirect list is read off the PATCH response, and re-read via GET when the response omits it, because falling back to the list himi just sent would make the guard pass vacuously on exactly the silent no-op it exists to catch. `client list` is the read-only inventory of a site's clients: act on its `shippable` column rather than `hasRedirect`, because shippable ALSO requires a MOBILE applicationType and `ensure` refuses a WEB client \u2014 a WEB one carrying your redirect looks right and is not a candidate \u2014 and it sets truncated:true rather than presenting a partial inventory as the whole one. `analyze --read-only` returns API-only generation context as JSON (identity, access probes, CMS permissions and selected redacted Velo source); it needs no URL/browser and never uploads or applies anything. `analyze` reads a site into a business-book folder (REST + Playwright, GET-only); `site function` list/get/put/publish/invokes that site's Velo HTTP functions and is not `himi functions` (serve-plane jobs). `--apply` bakes into a brandable shell; `--shell` takes the same names `himi dist --shell` does and defaults to branded-lite, and a shell that ships no prepare:customer is refused by name rather than half-built. It never overwrites any shell's committed apps/<shell>/provisioning.json.", required: "create <name> [--type wix|headless|branded-app|vibe] [--template <guid>] [--verticals stores,bookings,\u2026] [--folder <guid>] [--redirect-uri <uri>] [--no-oauth-app] [--write-provisioning [path]] [--site-url <url>] [--json] --yes | list | client ensure|list --site <msid> [--name <name>] [--redirect-uri <uri>] [--new] [--write-provisioning [path]] [--site-url <url>] [--json] --yes | analyze --read-only [--site <msid>] [--client-id <id>] [--json] | analyze --client-id <id> --url <https> [--site <msid>] [--out <dir>] [--redirect-uri <uri>] [--apply] [--shell " + SHELL_ENUM + "] | function list|get|put|publish|invoke [--site <msid>] [--url <https>] [--method GET|POST|PUT|DELETE] [--source <file>] [--body <json>] [--publish] [--invoke]" },
   { name: "doctor", summary: 'off-VPN preflight in one shot: probe the PUBLIC data plane (www.wixapis.com \u2014 reachable off-VPN), the INTERNAL serve/control plane for the selected target (VPN-gated), and report auth state (dpx session on disk + stored control token). --dpx additionally runs a live, EADDRINUSE-safe `dpx whoami`. Machine-readable with --json (an unreachable internal plane carries a stable code:"needs_vpn" so an agent branches on the code, not the prose); human-readable otherwise. Never loads the authoring runtime \u2014 works off-repo.', required: "[--target <t>] [--dpx] [--json] [--data-url <url>] [--timeout <ms>]" },
   { name: "upgrade", summary: "install the newest published CLI (`npm i -g @wix/himalaya-cli@latest`) and report what moved. This is the explicit door: himi also updates itself when the running build is more than a week old \u2014 unattended it just does it and re-runs your command, at a terminal it asks first \u2014 and `HIMI_NO_UPDATE_CHECK=1` turns that off, leaving this command as the way to catch up. Reports `unchanged` rather than claiming success when npm exits 0 without moving the version, which is what a registry mirror serving its own pinned copy looks like.", required: "[--json]" },
   { name: "push", summary: "lint + build + publish a release (default --draft: servable via ?release= but NOT live). REFUSES to publish on any error unless --force; --strict promotes warnings. Prints preview + agent-context links. The published slug is NAMESPACED per owner \u2014 `<ownerPrefix>.<name>`, composed offline from the control token's ownerPrefix claim, so the CLI and the server derive the identical string and himalaya.content.json is NOT rewritten (a legacy token with no ownerPrefix publishes the declared name unchanged). An app claimed BEFORE namespacing is stored under its FLAT slug, so the claim route answers `alreadyYours` naming that slug and the push adopts it \u2014 reported as `adoptedSlug`, since it is the one case where the published `app` differs from what the declared name composes to. `--no-claim` skips the route that knows this, so a pre-namespacing app pushed with it still fails 403. --visibility public|unlisted decides whether /v1/apps + the Himi Player picker LIST the app (also declarable as `visibility` in himalaya.content.json; omitted, a brand-new app defaults to unlisted \u2014 share by link \u2014 and an existing setting is kept). --account-id names which account owns the app when your Wix session resolves to several (the auto-claim of a brand-new slug cannot guess \u2014 without it a multi-account caller is told to name one). An unforced push of a release that carries SCREENS also refuses when `.himi/ux-audit.json` holds no mobile-UX drive recorded against that release id, or holds one that FAILED (#2955) \u2014 a published draft IS the owner-private preview a customer is handed; `himi ux record` clears it and `--force` overrides it, which the success envelope then says out loud. `--only <selector>` publishes ONLY the named items as a release derived from the app's live release (or `--from-release <id>`), running the identical build + lint gate and simply publishing less; it requires an explicit `--draft` or `--live` because a partial publish has no safe default, never claims a slug, and carries neither attestation nor a source archive (both named in the output). Selectors are comma-separated in ONE `--only`: `changed` (every item whose bytes differ from the base), `screen:<id|glob>`, `bundle:<name>`, `tokens`, `app-config` \u2014 a selected screen drags its logic bundle and a selected bundle drags the screens that reference it, or the bytes land under a key nothing reads.", required: "[--content <dir>] [--draft] [--live] [--force] [--strict] [--label] [--notes] [--visibility public|unlisted] [--no-claim] [--account-id <id>] [--only <selector>] [--from-release <id>] [--accept-regressions] [--accept-partial] [--app <slug>] (--control-token)" },
@@ -60442,30 +60831,48 @@ function trustedConfiguredRegistry(env) {
   const configured = normalizeRegistry(env.npm_config_registry ?? env.NPM_CONFIG_REGISTRY);
   return isTrustedRegistry(configured) ? configured : void 0;
 }
-function createScopedRegistryResolver(exec = execFileSync7) {
+function createScopedRegistryResolver(exec = execNpmConfig) {
   let resolved2;
-  return () => {
+  return async (budgetMs = SCOPED_REGISTRY_TIMEOUT_MS) => {
     if (resolved2) return resolved2.value;
-    let value;
+    const deadline = Date.now() + Math.min(budgetMs, SCOPED_REGISTRY_TIMEOUT_MS);
     try {
-      const configured = (key2) => {
-        const raw = exec("npm", ["config", "get", key2], {
-          cwd: homedir7(),
-          timeout: 5e3,
-          stdio: ["ignore", "pipe", "ignore"]
-        }).toString().trim();
+      const configured = async (key2) => {
+        const timeout = deadline - Date.now();
+        if (timeout <= 0) throw new Error("npm config: out of budget");
+        const raw = String(await exec("npm", ["config", "get", key2], { cwd: homedir7(), timeout })).trim();
         return raw && raw !== "undefined" ? raw : void 0;
       };
-      const effective = normalizeRegistry(configured("@wix:registry") ?? configured("registry"));
-      value = isTrustedRegistry(effective) ? effective : void 0;
+      const effective = normalizeRegistry(await configured("@wix:registry") ?? await configured("registry"));
+      resolved2 = { value: isTrustedRegistry(effective) ? effective : void 0 };
+      return resolved2.value;
     } catch {
-      value = void 0;
+      return void 0;
     }
-    resolved2 = { value };
-    return value;
   };
 }
+var SCOPED_REGISTRY_TIMEOUT_MS = 5e3;
+function execNpmConfig(file, args, options) {
+  return new Promise((resolve45, reject) => {
+    execFile4(file, args, { ...options, windowsHide: true }, (error, stdout) => error ? reject(error) : resolve45(String(stdout)));
+  });
+}
 var npmScopedWixRegistry = createScopedRegistryResolver();
+async function scopedRegistryBefore(lookup2, deadline) {
+  let cancel = () => {
+  };
+  const expired = new Promise((resolve45) => {
+    const timer = setTimeout(() => resolve45(void 0), Math.max(0, deadline - Date.now()));
+    cancel = () => clearTimeout(timer);
+  });
+  try {
+    return await Promise.race([Promise.resolve().then(() => lookup2(Math.max(0, deadline - Date.now()))), expired]);
+  } catch {
+    return void 0;
+  } finally {
+    cancel();
+  }
+}
 function registryCandidates(env, scoped) {
   const ordered = [isTrustedRegistry(scoped) ? normalizeRegistry(scoped) : void 0, trustedConfiguredRegistry(env), PUBLIC_NPM_REGISTRY];
   return [...new Set(ordered.filter((r) => r !== void 0))];
@@ -60492,7 +60899,8 @@ async function fetchPackumentFrom(registry, fetchImpl, timeoutMs) {
 }
 async function fetchCliPackument(fetchImpl = fetch, timeoutMs = DOCTOR_TIMEOUT_MS, env = process.env, scopedRegistry = npmScopedWixRegistry) {
   const deadline = Date.now() + timeoutMs;
-  for (const registry of registryCandidates(env, scopedRegistry())) {
+  const scoped = await scopedRegistryBefore(scopedRegistry, deadline);
+  for (const registry of registryCandidates(env, scoped)) {
     const remaining = deadline - Date.now();
     if (remaining <= 0) break;
     const packument = await fetchPackumentFrom(registry, fetchImpl, remaining);
@@ -60506,9 +60914,9 @@ function ageInDays(publishedAt, now = Date.now()) {
   if (!Number.isFinite(at)) return void 0;
   return Math.max(0, (now - at) / 864e5);
 }
-function packageVersion(path) {
+function packageVersion(path2) {
   try {
-    const version2 = JSON.parse(readFileSync67(path, "utf8")).version;
+    const version2 = JSON.parse(readFileSync67(path2, "utf8")).version;
     return typeof version2 === "string" && version2 ? version2 : void 0;
   } catch {
     return void 0;
@@ -60576,18 +60984,18 @@ var UPDATE_REEXEC_ENV = "HIMI_UPDATED_ONCE";
 function updateCachePath(env = process.env) {
   return env.HIMI_UPDATE_CACHE_FILE ?? join52(homedir7(), ".himalaya", "update-check.json");
 }
-function readUpdateCache(path) {
+function readUpdateCache(path2) {
   try {
-    const parsed = JSON.parse(readFileSync67(path, "utf8"));
+    const parsed = JSON.parse(readFileSync67(path2, "utf8"));
     return parsed && typeof parsed === "object" ? parsed : {};
   } catch {
     return {};
   }
 }
-function writeUpdateCache(path, cache) {
+function writeUpdateCache(path2, cache) {
   try {
-    mkdirSync27(dirname31(path), { recursive: true, mode: 448 });
-    writeFileSync25(path, JSON.stringify(cache, null, 2) + "\n", { mode: 384 });
+    mkdirSync27(dirname31(path2), { recursive: true, mode: 448 });
+    writeFileSync25(path2, JSON.stringify(cache, null, 2) + "\n", { mode: 384 });
   } catch {
   }
 }
@@ -60695,10 +61103,10 @@ function isAbandoned(content) {
   return Number.isFinite(owner) && owner > 0 && host === thisHost() && !processAlive(owner);
 }
 function staleUpdateLockFile(cachePath, now) {
-  for (const path of [`${cachePath}.lock.break`, `${cachePath}.lock`]) {
+  for (const path2 of [`${cachePath}.lock.break`, `${cachePath}.lock`]) {
     let content;
     try {
-      content = readFileSync67(path, "utf8");
+      content = readFileSync67(path2, "utf8");
     } catch {
       continue;
     }
@@ -60706,12 +61114,12 @@ function staleUpdateLockFile(cachePath, now) {
     let since = stamped;
     if (!Number.isFinite(since)) {
       try {
-        since = statSync13(path).mtimeMs;
+        since = statSync13(path2).mtimeMs;
       } catch {
         continue;
       }
     }
-    if (now - since >= UPDATE_LOCK_REPORT_AFTER_MS) return path;
+    if (now - since >= UPDATE_LOCK_REPORT_AFTER_MS) return path2;
   }
   return void 0;
 }
@@ -60719,24 +61127,24 @@ function acquireUpdateLock(cachePath, now, hooks = {}) {
   const lockPath = `${cachePath}.lock`;
   const breakPath = `${cachePath}.lock.break`;
   const mine = lockStamp(now);
-  const readLock = (path) => {
+  const readLock = (path2) => {
     try {
-      return readFileSync67(path, "utf8");
+      return readFileSync67(path2, "utf8");
     } catch {
       return void 0;
     }
   };
-  const tryCreate = (path) => {
+  const tryCreate = (path2) => {
     try {
-      writeFileSync25(path, mine, { flag: "wx", mode: 384 });
+      writeFileSync25(path2, mine, { flag: "wx", mode: 384 });
       return true;
     } catch {
       return false;
     }
   };
-  const removeIfMine = (path) => {
+  const removeIfMine = (path2) => {
     try {
-      if (readLock(path) === mine) rmSync10(path, { force: true });
+      if (readLock(path2) === mine) rmSync10(path2, { force: true });
     } catch {
     }
   };
@@ -60790,8 +61198,10 @@ async function refreshUpdateCache(opts = {}) {
   const packument = await fetchCliPackument(opts.fetchImpl ?? fetch, UPDATE_BACKGROUND_BUDGET_MS, env, opts.scopedRegistry);
   if (!packument) return false;
   const now = opts.now ?? Date.now();
+  const current = readUpdateCache(cachePath);
+  if (supersededInCache(current, packument.latest, now)) return true;
   writeUpdateCache(cachePath, {
-    ...readUpdateCache(cachePath),
+    ...current,
     running,
     latest: packument.latest,
     runningPublishedAt: packument.time[running],
@@ -60799,6 +61209,11 @@ async function refreshUpdateCache(opts = {}) {
   });
   return true;
 }
+function supersededInCache(current, latest, now) {
+  if (!current.latest || !latest || compareVersions2(latest, current.latest) >= 0) return false;
+  const checkedAt = current.checkedAt ? Date.parse(current.checkedAt) : Number.NaN;
+  return Number.isFinite(checkedAt) && now - checkedAt < UPDATE_CHECK_INTERVAL_MS;
+}
 function createUpdateRefreshSpawner(spawnFn = spawn5, execArgv = process.execArgv) {
   return () => {
     try {
@@ -60957,9 +61372,9 @@ function helpJson() {
 }
 function previewWebUrl(serveBase, app, release, screenId, surface, previewToken, handover) {
   const base = serveBase.replace(/\/$/, "");
-  const path = screenId ? `/preview/a/${app}/screen/${screenId}` : `/preview/a/${app}`;
+  const path2 = screenId ? `/preview/a/${app}/screen/${screenId}` : `/preview/a/${app}`;
   const query = handover ? `?h=${encodeURIComponent(handover)}` : `?release=${encodeURIComponent(release)}`;
-  return `${base}${path}${query}${surface ? `&surface=${encodeURIComponent(surface)}` : ""}${!handover && previewToken ? `&pvt=${encodeURIComponent(previewToken)}` : ""}`;
+  return `${base}${path2}${query}${surface ? `&surface=${encodeURIComponent(surface)}` : ""}${!handover && previewToken ? `&pvt=${encodeURIComponent(previewToken)}` : ""}`;
 }
 function renderDeviceWidths() {
   return {
@@ -61380,10 +61795,10 @@ function readConfigSource(dir) {
     return null;
   }
 }
-function writePngFile(path, base64) {
-  mkdirSync27(dirname31(path), { recursive: true });
-  writeFileSync25(path, Buffer.from(base64, "base64"));
-  return path;
+function writePngFile(path2, base64) {
+  mkdirSync27(dirname31(path2), { recursive: true });
+  writeFileSync25(path2, Buffer.from(base64, "base64"));
+  return path2;
 }
 async function initFromRemoteTemplate(name, parentDir, template, c) {
   const dir = resolve44(parentDir, name);
@@ -61577,9 +61992,9 @@ async function loadCms(dir) {
   return data ? { collections: data.collections ?? [], ...data.memberGated ? { memberGated: true } : {} } : void 0;
 }
 var ConfigLoadError = class extends Error {
-  constructor(path, cause) {
-    super(`could not load ${path}: ${cause.message}`);
-    this.path = path;
+  constructor(path2, cause) {
+    super(`could not load ${path2}: ${cause.message}`);
+    this.path = path2;
     this.cause = cause;
     this.name = "ConfigLoadError";
   }
@@ -62553,17 +62968,17 @@ himi v${cliVersion()} \u2014 run \`himi --version\`. If authoring commands fail
         const dir = contentDir(flags);
         const { buildContentBundles: buildContentBundles2 } = await loadAuthoring();
         const res = await buildContentBundles2(dir, { resolution: resolutionFlag(flags) });
-        const failed = res.compileErrors;
+        const failed2 = res.compileErrors;
         print({
-          ok: failed.length === 0,
+          ok: failed2.length === 0,
           outDir: res.outDir,
           built: res.built,
-          ...failed.length ? { compileErrors: failed } : {},
+          ...failed2.length ? { compileErrors: failed2 } : {},
           // #642.1b — a stale @wix/himalaya is advisory on `build` (the bundles may
           // still compile); `validate --strict` is where it hard-fails.
           ...res.sdkVersionIssue ? { warnings: [res.sdkVersionIssue] } : {}
         });
-        return failed.length ? 1 : 0;
+        return failed2.length ? 1 : 0;
       }
       case "eject": {
         const mod = String(pos[1] ?? "");
@@ -62644,12 +63059,12 @@ himi v${cliVersion()} \u2014 run \`himi --version\`. If authoring commands fail
         const { buildLocalFunctions: buildLocalFunctions2, describeFunction: describeFunction2, invokeLocalFunction: invokeLocalFunction2, invokeRemoteFunction: invokeRemoteFunction2, listFunctions: listFunctions2, loadFunctionsApp: loadFunctionsApp2, openApiForFunctions: openApiForFunctions2, resolveFunctionsTarget: resolveFunctionsTarget2, runRemoteFunctionOperation: runRemoteFunctionOperation2 } = await Promise.resolve().then(() => (init_functions(), functions_exports));
         const remoteTarget = str5(flags.target);
         const boCookie = () => {
-          const path = dpxSessionTokenPath();
+          const path2 = dpxSessionTokenPath();
           let raw;
           try {
-            raw = readFileSync67(path, "utf8");
+            raw = readFileSync67(path2, "utf8");
           } catch {
-            throw new Error(`no DPX BO session at ${path}; run dpx auth login, write dpx auth token to that path, then himi login --dpx --target bo`);
+            throw new Error(`no DPX BO session at ${path2}; run dpx auth login, write dpx auth token to that path, then himi login --dpx --target bo`);
           }
           return dpxCookieHeader(raw);
         };
@@ -63119,7 +63534,7 @@ himi v${cliVersion()} \u2014 run \`himi --version\`. If authoring commands fail
                 bootAndSnapshotState: bootAndSnapshotState2,
                 renderDescriptorWeb: renderDescriptorWeb2,
                 renderPngBatch: renderPngBatch2,
-                writePng: (path, base64) => writePngFile(path, base64),
+                writePng: (path2, base64) => writePngFile(path2, base64),
                 clearDir: (d) => rmSync10(d, { recursive: true, force: true })
               }
             });
@@ -65619,7 +66034,7 @@ default (no --glyph): ${DEFAULT_GLYPH2} \u2014 a mark that claims nothing, so th
         const { iosProjectYml: iosYmlPath, hasRepoCheckout: hasRepoCheckout2 } = await Promise.resolve().then(() => (init_paths(), paths_exports));
         const { ascStatus: ascStatus2 } = await Promise.resolve().then(() => (init_asc_status(), asc_status_exports));
         const { readFileSync: rf, readdirSync: rd, existsSync: ex, statSync: st } = await import("node:fs");
-        const { execFile: execFile4 } = await import("node:child_process");
+        const { execFile: execFile5 } = await import("node:child_process");
         const { homedir: hd } = await import("node:os");
         const { join: pj, dirname: pd } = await import("node:path");
         const { fileURLToPath: f2p } = await import("node:url");
@@ -65634,7 +66049,7 @@ default (no --glyph): ${DEFAULT_GLYPH2} \u2014 a mark that claims nothing, so th
           return ipas[0];
         };
         const sh = (cmd, args, opts) => new Promise((res) => {
-          const child = execFile4(
+          const child = execFile5(
             cmd,
             args,
             { cwd: opts.cwd, env: { ...process.env, ...opts.env }, maxBuffer: 64 * 1024 * 1024 },
@@ -66405,7 +66820,7 @@ ${label2}`);
         try {
           const scoped = up.scopedRegistry ?? npmScopedWixRegistry;
           const answered = await fetchCliPackument(up.fetchImpl ?? fetch, UPDATE_EXPLICIT_BUDGET_MS, env, scoped);
-          const registry = answered?.registry ?? registryCandidates(env, scoped())[0];
+          const registry = answered?.registry ?? registryCandidates(env, await scoped(UPDATE_EXPLICIT_BUDGET_MS))[0];
           if (answered?.latest && compareVersions2(answered.latest, before) <= 0) {
             if (flags.json) print({ ok: true, running: before, installed: before, changed: false, registry, latest: answered.latest });
             else io.log(`himi ${before} (unchanged \u2014 ${registry} has nothing newer; its latest is ${answered.latest})`);
@@ -66554,12 +66969,12 @@ ${report2.ok ? "OK \u2014 data + serve plane reachable." : typeof report2.hint =
           return 1;
         }
         if (secretTarget.mode === "remote") {
-          const path = dpxSessionTokenPath();
+          const path2 = dpxSessionTokenPath();
           let raw;
           try {
-            raw = readFileSync67(path, "utf8");
+            raw = readFileSync67(path2, "utf8");
           } catch {
-            io.error(JSON.stringify({ error: `no DPX BO session at ${path}` }));
+            io.error(JSON.stringify({ error: `no DPX BO session at ${path2}` }));
             return 1;
           }
           const { runRemoteSecretsCommand: runRemoteSecretsCommand2 } = await Promise.resolve().then(() => (init_secrets2(), secrets_exports));
@@ -66829,6 +67244,34 @@ ${report2.ok ? "OK \u2014 data + serve plane reachable." : typeof report2.hint =
         }
         const clientId = str5(flags["client-id"]) ?? process.env.WIX_CLIENT_ID;
         const siteUrl = str5(flags.url) ?? str5(flags["site-url"]);
+        if (flags["read-only"] === true) {
+          if (flags.apply || flags.out || flags.shell || flags["redirect-uri"]) {
+            io.error(JSON.stringify({ error: "--read-only returns API context only; it cannot be combined with --apply, --out, --shell, or --redirect-uri" }));
+            return 2;
+          }
+          const siteId = str5(flags.site) ?? process.env.WIX_SITE_ID;
+          if (!clientId && !siteId && !process.env.WIX_TEST_TOKEN?.trim()) {
+            io.error(JSON.stringify({ error: "--read-only needs --site, --client-id, or a site-scoped WIX_TEST_TOKEN" }));
+            return 2;
+          }
+          const { collectSiteContext: collectSiteContext2 } = await Promise.resolve().then(() => (init_context(), context_exports));
+          const { siteToken: siteToken2 } = await Promise.resolve().then(() => (init_wix_owner(), wix_owner_exports));
+          let ownerToken = process.env.WIX_TEST_TOKEN?.trim() || void 0;
+          if (!ownerToken && siteId) {
+            try {
+              ownerToken = await siteToken2(siteId);
+            } catch {
+            }
+          }
+          const context = await collectSiteContext2({
+            siteId,
+            clientId,
+            ownerToken,
+            request: process.env.HIMI_ANALYZE_REQUEST
+          });
+          print({ ok: true, context });
+          return 0;
+        }
         if (!clientId || !siteUrl) {
           io.error(JSON.stringify({
             error: "himi site analyze needs --client-id and --url",