@wix/himalaya-cli 0.1008.0 → 0.1010.0

package/dist/cli.mjs

@@ -1341,7 +1341,7 @@ function sentinelizeIdentity(body, identity) {
   }
   if (identity.name) {
     const re = new RegExp(`\\b(${NAME_FIELDS.join("|")})(["']?\\s*[:=]\\s*)(["'])${escapeRe(identity.name)}\\3`, "g");
-    out = out.replace(re, (_m, key2, sep12, q) => `${key2}${sep12}${q}__HIMI_APP_NAME__${q}`);
+    out = out.replace(re, (_m, key2, sep13, q) => `${key2}${sep13}${q}__HIMI_APP_NAME__${q}`);
   }
   return out;
 }
@@ -2341,7 +2341,7 @@ async function mintToken(args, label2, cacheKey, spawnImpl) {
     tokenCache.set(cacheKey, fromEnv);
     return fromEnv;
   }
-  const token = await new Promise((resolve45, reject) => {
+  const token = await new Promise((resolve46, reject) => {
     let child;
     try {
       child = spawnImpl("wix", [...args]);
@@ -2370,12 +2370,12 @@ async function mintToken(args, label2, cacheKey, spawnImpl) {
     child.stdout?.on("data", (d) => {
       out += String(d);
       const m = out.match(TOKEN_RE);
-      if (m) done(() => resolve45(m[0]));
+      if (m) done(() => resolve46(m[0]));
     });
     child.stderr?.on("data", (d) => {
       out += String(d);
       const m = out.match(TOKEN_RE);
-      if (m) done(() => resolve45(m[0]));
+      if (m) done(() => resolve46(m[0]));
     });
     child.on("error", (e) => done(() => reject(new Error(mintHelp(label2, e.message)))));
     child.on("exit", (code) => done(() => reject(new Error(
@@ -2556,8 +2556,8 @@ function committedProvisioningPath(name) {
 function committedShellFor(path2) {
   const normalized = path2.replace(/\\/g, "/");
   return SHELL_NAMES2.find((name) => {
-    const relative9 = committedProvisioningPath(name);
-    return normalized === relative9 || normalized.endsWith(`/${relative9}`);
+    const relative10 = committedProvisioningPath(name);
+    return normalized === relative10 || normalized.endsWith(`/${relative10}`);
   });
 }
 function isBrandable(repoRoot2, name) {
@@ -5318,7 +5318,6 @@ function walk(node, registry, path2, out) {
 var SYSTEM_FONT_FAMILY;
 var init_tokens = __esm({
   "../../core/ts/src/tokens.ts"() {
-    "use strict";
     SYSTEM_FONT_FAMILY = "$system";
   }
 });
@@ -5344,7 +5343,6 @@ function resolveTranslation(value, catalog, sourceCatalog) {
 var BINDING_SIGILS, BINDING_SIGIL_RE, TRANSLATION_PREFIX, TRANSLATION_KEY_RE;
 var init_bindings = __esm({
   "../../core/ts/src/bindings.ts"() {
-    "use strict";
     BINDING_SIGILS = ["service", "flag", "item", "t"];
     BINDING_SIGIL_RE = new RegExp(
       `^\\$(?:${BINDING_SIGILS.filter((s) => s !== "t").join("|")})\\b|^\\$t:`
@@ -15566,7 +15564,7 @@ async function injectRequest(listener, request) {
   req.headers.host ??= url.host;
   if (body && body.length > 0) req.push(body);
   req.push(null);
-  return await new Promise((resolve45, reject) => {
+  return await new Promise((resolve46, reject) => {
     const streamed = () => {
       queueMicrotask(() => {
         req.emit("close");
@@ -15582,7 +15580,7 @@ async function injectRequest(listener, request) {
         else headers2.set(name, value);
       }
       const bodyless = out.status === 204 || out.status === 304 || request.method === "HEAD";
-      resolve45(new Response(bodyless ? null : out.body, { status: out.status, headers: headers2 }));
+      resolve46(new Response(bodyless ? null : out.body, { status: out.status, headers: headers2 }));
     }, streamed);
     res.on("inject-error", reject);
     try {
@@ -16277,7 +16275,7 @@ function redactBodyString(body) {
     } catch {
     }
   }
-  return body.replace(FORM_ASSIGNMENT_RE, (m, name) => isSensitiveBodyName(name) ? `${name}=${REDACTED}` : m).replace(JSON_FIELD_RE, (m, name, sep12) => isSensitiveBodyName(name) ? `"${name}"${sep12}"${REDACTED}"` : m).replace(JSON_FIELD_UNTERMINATED_RE, (m, name, sep12) => isSensitiveBodyName(name) ? `"${name}"${sep12}"${REDACTED}` : m).replace(BEARER_RE, (_m, s) => `${s} ${REDACTED}`);
+  return body.replace(FORM_ASSIGNMENT_RE, (m, name) => isSensitiveBodyName(name) ? `${name}=${REDACTED}` : m).replace(JSON_FIELD_RE, (m, name, sep13) => isSensitiveBodyName(name) ? `"${name}"${sep13}"${REDACTED}"` : m).replace(JSON_FIELD_UNTERMINATED_RE, (m, name, sep13) => isSensitiveBodyName(name) ? `"${name}"${sep13}"${REDACTED}` : m).replace(BEARER_RE, (_m, s) => `${s} ${REDACTED}`);
 }
 function createWixGatewayState() {
   return { mode: "record", rules: [], traffic: [], clients: /* @__PURE__ */ new Set(), seq: 0, ruleSeq: 0 };
@@ -16874,7 +16872,7 @@ function wixClientIdOf(appConfigJson) {
   if (typeof clientId !== "string" || !clientId) return { error: "no_client_id" };
   return { clientId };
 }
-var WIX_API, ONE_APP_SESSION, OWNER_SCOPED_WIX_HOST, VisitorTokenCache, OWNER_REFRESH_MARGIN_MS, OwnerInstanceCache, OWNER_SITES_QUERY_PATH, OWNER_SITES_COUNT_PATH, OwnerSitesCache;
+var WIX_API, ONE_APP_SESSION, OWNER_SCOPED_WIX_HOST, VisitorTokenCache, OWNER_REFRESH_MARGIN_MS, OWNER_RENEW_MIN_AGE_MS, OWNER_MINT_TIMEOUT_MS, OwnerInstanceCache, OWNER_SITES_QUERY_PATH, OWNER_SITES_COUNT_PATH, OwnerSitesCache;
 var init_wix_bridge = __esm({
   "../../core/serve-runtime/src/wix-bridge.ts"() {
     init_sha256();
@@ -16912,12 +16910,19 @@ var init_wix_bridge = __esm({
       }
     };
     OWNER_REFRESH_MARGIN_MS = 6e4;
+    OWNER_RENEW_MIN_AGE_MS = 5e3;
+    OWNER_MINT_TIMEOUT_MS = 8e3;
     OwnerInstanceCache = class {
-      constructor(fetchImpl = fetch, ttlMs = 5 * 6e4) {
+      constructor(fetchImpl = fetch, ttlMs = 5 * 6e4, mintTimeoutMs = OWNER_MINT_TIMEOUT_MS, elapsedClock = () => performance.now()) {
         this.fetchImpl = fetchImpl;
         this.ttlMs = ttlMs;
+        this.mintTimeoutMs = mintTimeoutMs;
+        this.elapsedClock = elapsedClock;
       }
       cache = /* @__PURE__ */ new Map();
+      /** The one mint on its way per (business, session). Every caller, plain or renewing, joins it:
+       *  it started after whatever is cached was minted, so it is the fresh instance. */
+      inflight = /* @__PURE__ */ new Map();
       /** Keyed on the SESSION (`wixSession2`), not the whole cookie header: manage.wix.com's jar churns
        *  (analytics, experiments), and keying on all of it re-minted on nearly every call (#3044). A
        *  header with no session cookie falls back to itself — callers refuse that case before here. */
@@ -16929,28 +16934,62 @@ ${session}`);
       async instance(msid, cookieHeader, now = Date.now()) {
         return (await this.entry(msid, cookieHeader, now)).instance;
       }
-      /** The instance and the time this cache stops trusting it (#3044: the web host caches until then). */
-      async entry(msid, cookieHeader, now = Date.now()) {
+      /** The instance and the time this cache stops trusting it (#3044: the web host caches until then).
+       *  `renew`: Wix refused the instance this cache handed out (the route's `renew=1`, #3140) — mint a
+       *  new one, unless the cached one is younger than OWNER_RENEW_MIN_AGE_MS or a mint is already on
+       *  its way, in which case that IS the new one. */
+      async entry(msid, cookieHeader, now = Date.now(), opts = {}) {
         const key2 = this.key(msid, cookieHeader);
-        const hit = this.cache.get(key2);
+        const pending = this.inflight.get(key2);
+        if (pending) return { ...await pending };
+        let hit = this.cache.get(key2);
+        if (opts.renew && hit && now - hit.mintedAt >= OWNER_RENEW_MIN_AGE_MS) hit = void 0;
         if (hit && hit.expiresAt - OWNER_REFRESH_MARGIN_MS > now) return { instance: hit.instance, expiresAt: hit.expiresAt };
-        const res = await this.fetchImpl(`${ONE_APP_SESSION}/${msid}/signed-instance?signed_instance_type=User`, {
-          method: "GET",
-          headers: { Cookie: cookieHeader }
+        const mint = this.mint(key2, msid, cookieHeader, now).finally(() => this.inflight.delete(key2));
+        this.inflight.set(key2, mint);
+        return { ...await mint };
+      }
+      async mint(key2, msid, cookieHeader, now) {
+        const startedAt = this.elapsedClock();
+        const abort = new AbortController();
+        let timer;
+        const timedOut = new Promise((_, reject) => {
+          timer = setTimeout(() => {
+            abort.abort();
+            reject(new Error(`owner mint timed out after ${this.mintTimeoutMs}ms`));
+          }, this.mintTimeoutMs);
         });
-        const text4 = await res.text();
-        let j = {};
         try {
-          j = text4 ? JSON.parse(text4) : {};
-        } catch {
+          const res = await Promise.race([
+            this.fetchImpl(`${ONE_APP_SESSION}/${msid}/signed-instance?signed_instance_type=User`, {
+              method: "GET",
+              headers: { Cookie: cookieHeader },
+              signal: abort.signal
+            }),
+            timedOut
+          ]);
+          const text4 = await Promise.race([res.text(), timedOut]);
+          let j = {};
+          try {
+            j = text4 ? JSON.parse(text4) : {};
+          } catch {
+          }
+          if (res.status < 200 || res.status >= 300 || !j.signedInstance)
+            throw new Error(`owner mint failed (${res.status})`);
+          const elapsed = Math.max(0, this.elapsedClock() - startedAt);
+          const mintedAt = now + elapsed;
+          const entry = { instance: j.signedInstance, expiresAt: now + Math.floor(elapsed / 1e3) * 1e3 + this.ttlMs };
+          this.cache.set(key2, { ...entry, mintedAt });
+          return entry;
+        } catch (e) {
+          this.cache.delete(key2);
+          throw e;
+        } finally {
+          clearTimeout(timer);
         }
-        if (res.status < 200 || res.status >= 300 || !j.signedInstance)
-          throw new Error(`owner mint failed (${res.status})`);
-        const entry = { instance: j.signedInstance, expiresAt: now + this.ttlMs };
-        this.cache.set(key2, entry);
-        return { ...entry };
       }
-      /** Drop a cached instance (e.g. after a 401 from wixapis) so the next call re-mints. */
+      /** Drop a cached instance so the next call re-mints. The envelope owner branch's own 401 retry;
+       *  the route's `renew=1` goes through `entry(…, { renew: true })` instead. */
       invalidate(msid, cookieHeader) {
         this.cache.delete(this.key(msid, cookieHeader));
       }
@@ -17928,12 +17967,12 @@ function finalizeRecording(key2, rec) {
   if (rec.finalize) return rec.finalize;
   rec.finalize = (async () => {
     clearTimeout(rec.autoStop);
-    await new Promise((resolve45) => {
+    await new Promise((resolve46) => {
       let done = false;
       const finish2 = () => {
         if (!done) {
           done = true;
-          resolve45();
+          resolve46();
         }
       };
       rec.child.once("close", finish2);
@@ -18044,7 +18083,7 @@ var init_preview = __esm({
     DEVICE_LIST_TIMEOUT_MS = 5e3;
     defaultRunner2 = {
       capture(cmd, args, timeoutMs = DEFAULT_CAPTURE_TIMEOUT_MS) {
-        return new Promise((resolve45, reject) => {
+        return new Promise((resolve46, reject) => {
           const child = spawn2(cmd, args, { stdio: ["ignore", "pipe", "pipe"] });
           const out = [];
           const err = [];
@@ -18066,7 +18105,7 @@ var init_preview = __esm({
           child.stderr.on("data", (b) => err.push(b));
           child.on("error", (e) => settle(reject, e));
           child.on("close", (code) => {
-            if (code === 0) settle(resolve45, Buffer.concat(out));
+            if (code === 0) settle(resolve46, Buffer.concat(out));
             else settle(reject, new Error(`${cmd} exited ${code}: ${Buffer.concat(err).toString("utf8")}`));
           });
         });
@@ -23121,8 +23160,8 @@ function ensureCountUpRuntime() {
     const neg = fixed.startsWith("-");
     const body = neg ? fixed.slice(1) : fixed;
     const [int, frac] = body.split(".");
-    const sep12 = int.replace(/\B(?=(\d{3})+(?!\d))/g, ",");
-    return (neg ? "-" : "") + sep12 + (frac ? "." + frac : "");
+    const sep13 = int.replace(/\B(?=(\d{3})+(?!\d))/g, ",");
+    return (neg ? "-" : "") + sep13 + (frac ? "." + frac : "");
   };
   const animateEl = (el) => {
     const node = el;
@@ -28846,7 +28885,7 @@ async function stabilizePngPage(page, scheme) {
     const browser = globalThis;
     browser.document.documentElement.style.colorScheme = selected;
     await browser.document.fonts?.ready;
-    await new Promise((resolve45) => browser.requestAnimationFrame(() => browser.requestAnimationFrame(() => resolve45())));
+    await new Promise((resolve46) => browser.requestAnimationFrame(() => browser.requestAnimationFrame(() => resolve46())));
   }, scheme);
 }
 async function renderPngBatch(items) {
@@ -32418,7 +32457,7 @@ async function handleWebWix(req, res, state) {
     }
     if (match && (match.rule.kind ?? "mock") === "mock") {
       const mocked = match.rule.response;
-      if (mocked.delayMs) await new Promise((resolve45) => setTimeout(resolve45, mocked.delayMs));
+      if (mocked.delayMs) await new Promise((resolve46) => setTimeout(resolve46, mocked.delayMs));
       const responseBody = mocked.template ? renderTemplate(mocked.body, match.captures) : mocked.body;
       recordWixTraffic(state.wix, state.appName, state.adminUrl, {
         ts: started,
@@ -33384,8 +33423,8 @@ async function handleActionHandlerBundleGet(res, app) {
 }
 async function serveStatic(req, res, root, prefix) {
   const requested = decodeURIComponent((req.url ?? "").split("?")[0]);
-  const relative9 = requested.replace(prefix, "").replace(/^\//, "");
-  const safe = normalize3(relative9).replace(/^(\.\.[\/\\])+/, "");
+  const relative10 = requested.replace(prefix, "").replace(/^\//, "");
+  const safe = normalize3(relative10).replace(/^(\.\.[\/\\])+/, "");
   const fullPath = resolve30(root, safe);
   if (!fullPath.startsWith(root)) {
     return send(res, 403, "forbidden");
@@ -34420,12 +34459,12 @@ var init_query = __esm({
 });
 
 // ../../core/dev-server/src/crawl-input.ts
-function resolved(v, resolve45) {
-  if (typeof v === "string") return v.startsWith("$service:") ? resolve45(v) : v;
+function resolved(v, resolve46) {
+  if (typeof v === "string") return v.startsWith("$service:") ? resolve46(v) : v;
   if (Array.isArray(v)) {
     const out = v.flatMap((el) => {
       if (typeof el !== "string" || !el.startsWith("$service:")) return [el];
-      const r = resolve45(el);
+      const r = resolve46(el);
       return Array.isArray(r) ? r : [r];
     });
     return out;
@@ -34439,9 +34478,9 @@ function hasRowBinding(props) {
     return itemToken(v) || Array.isArray(v) && v.some(itemToken);
   });
 }
-function declaredOptionIds(props, resolve45) {
+function declaredOptionIds(props, resolve46) {
   const literal = props.options ?? props.tabs ?? props.chips;
-  const bound = props.optionsPath !== void 0 ? resolved(props.optionsPath, resolve45) : void 0;
+  const bound = props.optionsPath !== void 0 ? resolved(props.optionsPath, resolve46) : void 0;
   const raw = Array.isArray(bound) ? bound : literal;
   if (!Array.isArray(raw)) return [];
   const out = [];
@@ -34484,24 +34523,24 @@ function seedTokens(state, limit = 48) {
   walk2(state, 0);
   return out;
 }
-function synthesizeInput(control, resolve45, tokens) {
+function synthesizeInput(control, resolve46, tokens) {
   const id = `${control.type}.${control.callback}`;
   const row = SYNTHESIZED_CONTROLS[id];
   if (!row) return null;
   const props = control.props;
   if (hasRowBinding(props)) return null;
   if (row.from === "declared-options") {
-    const ids = declaredOptionIds(props, resolve45);
+    const ids = declaredOptionIds(props, resolve46);
     if (!ids.length) return null;
     if (row.encoding === "string-array") {
-      const currentRaw2 = resolved(props.selectedIds, resolve45);
+      const currentRaw2 = resolved(props.selectedIds, resolve46);
       const current3 = (Array.isArray(currentRaw2) ? currentRaw2 : []).filter((x) => typeof x === "string");
       const pick4 = ids.find((o) => !current3.includes(o));
       if (pick4 === void 0) return null;
       const value = props.multiSelect === true ? [...current3, pick4] : [pick4];
       return { key: row.key, value, from: row.from, current: current3, control: id };
     }
-    const currentRaw = resolved(props.selectedId, resolve45);
+    const currentRaw = resolved(props.selectedId, resolve46);
     const current2 = typeof currentRaw === "string" ? currentRaw : void 0;
     const pick3 = ids.find((o) => o !== current2);
     if (pick3 === void 0) return null;
@@ -34509,7 +34548,7 @@ function synthesizeInput(control, resolve45, tokens) {
   }
   if (!acceptsWords(props) || !acceptsWords(control.wrapper ?? {})) return null;
   const binding2 = typeof props.valuePath === "string" ? props.valuePath : typeof props.value === "string" && props.value.startsWith("$service:") ? props.value : void 0;
-  const bound = binding2 === void 0 ? void 0 : resolve45(binding2);
+  const bound = binding2 === void 0 ? void 0 : resolve46(binding2);
   const literal = typeof props.value === "string" && !props.value.startsWith("$") ? props.value : void 0;
   const current = typeof bound === "string" ? bound : typeof bound === "number" ? String(bound) : literal ?? "";
   const max = typeof props.maxLength === "number" && props.maxLength > 0 ? props.maxLength : void 0;
@@ -35767,8 +35806,8 @@ async function crawlScreenInner(opts) {
       if (linkable.has(target)) return true;
       for (const base of linkable) {
         if (target.length > base.length + 1 && target.startsWith(base)) {
-          const sep12 = target[base.length];
-          if (sep12 === "_" || sep12 === "/") return true;
+          const sep13 = target[base.length];
+          if (sep13 === "_" || sep13 === "/") return true;
         }
       }
       return false;
@@ -42660,7 +42699,7 @@ async function pinnedFetch(url, init, addresses, maxResponseBytes) {
   const headers2 = Object.fromEntries(new Headers(init.headers).entries());
   const request = url.protocol === "https:" ? httpsRequest : httpRequest;
   const hostname2 = url.hostname.replace(/^\[|\]$/g, "");
-  return await new Promise((resolve45, reject) => {
+  return await new Promise((resolve46, reject) => {
     let settled = false;
     const finish2 = (fn) => {
       if (settled) return;
@@ -42697,7 +42736,7 @@ async function pinnedFetch(url, init, addresses, maxResponseBytes) {
         }
         const responseHeaders = new Headers();
         for (const [key2, value] of Object.entries(response.headers)) if (value !== void 0) responseHeaders.set(key2, Array.isArray(value) ? value.join(", ") : value);
-        resolve45(new Response(bytes2, { status: response.statusCode, statusText: response.statusMessage, headers: responseHeaders }));
+        resolve46(new Response(bytes2, { status: response.statusCode, statusText: response.statusMessage, headers: responseHeaders }));
       }));
     });
     req.once("error", (error) => finish2(() => reject(error)));
@@ -42997,7 +43036,7 @@ function createLocalTestSandbox() {
           }
         })();
       `;
-      return await new Promise((resolve45, reject) => {
+      return await new Promise((resolve46, reject) => {
         const { port1, port2 } = new MessageChannel();
         const serializableContext = {
           auth: context.auth,
@@ -43073,7 +43112,7 @@ function createLocalTestSandbox() {
             timer = setTimeout(() => finish2(() => reject(new SandboxError("timeout", `execution exceeded ${limits.timeoutMs}ms`))), Math.max(1, limits.timeoutMs));
             return;
           }
-          if (message.ok) finish2(() => resolve45({ value: message.value, durationMs: Date.now() - started }));
+          if (message.ok) finish2(() => resolve46({ value: message.value, durationMs: Date.now() - started }));
           else finish2(() => reject(new SandboxError("execution_failed", message.message ?? "handler failed")));
         });
         worker.once("error", (error) => finish2(() => reject(new SandboxError("execution_failed", error.message))));
@@ -44203,6 +44242,213 @@ var init_functions = __esm({
   }
 });
 
+// src/progress.ts
+var progress_exports = {};
+__export(progress_exports, {
+  HISTORY_DIR: () => HISTORY_DIR,
+  JOURNEY_STEPS: () => JOURNEY_STEPS,
+  MAX_IMAGE_BYTES: () => MAX_IMAGE_BYTES,
+  MAX_MESSAGE_CHARS: () => MAX_MESSAGE_CHARS,
+  PROGRESS_FILE: () => PROGRESS_FILE,
+  ProgressError: () => ProgressError,
+  appLabel: () => appLabel,
+  appendProgress: () => appendProgress,
+  appleScriptString: () => appleScriptString,
+  archiveBytes: () => archiveBytes,
+  archiveImage: () => archiveImage,
+  journalPath: () => journalPath,
+  notifyDesktop: () => notifyDesktop,
+  parseStep: () => parseStep,
+  readProgress: () => readProgress,
+  summarizeProgress: () => summarizeProgress
+});
+import { spawn as spawn3 } from "node:child_process";
+import { createHash as createHash22 } from "node:crypto";
+import { appendFileSync, closeSync, existsSync as existsSync46, mkdirSync as mkdirSync23, openSync, readFileSync as readFileSync50, readSync, renameSync as renameSync4, statSync as statSync10, writeFileSync as writeFileSync19 } from "node:fs";
+import { join as join43, relative as relative6, resolve as resolve40, sep as sep10 } from "node:path";
+function parseStep(raw) {
+  const v = raw.trim().toLowerCase();
+  if (/^[1-8]$/.test(v)) return JOURNEY_STEPS[Number(v) - 1];
+  return JOURNEY_STEPS.includes(v) ? v : null;
+}
+function imageExtension(buf) {
+  const starts = (...bytes2) => bytes2.every((b, i) => buf[i] === b);
+  if (starts(137, 80, 78, 71, 13, 10, 26, 10)) return "png";
+  if (starts(255, 216, 255)) return "jpg";
+  if (starts(71, 73, 70, 56)) return "gif";
+  if (starts(82, 73, 70, 70) && buf.subarray(8, 12).toString("ascii") === "WEBP") return "webp";
+  return null;
+}
+function locateImage(dir, src) {
+  for (const candidate of [resolve40(src), resolve40(dir, src)]) {
+    if (existsSync46(candidate) && statSync10(candidate).isFile()) return candidate;
+  }
+  return null;
+}
+function archiveImage(dir, src) {
+  const abs = locateImage(dir, src);
+  if (!abs) throw new ProgressError("image_not_found", `no image at ${src} (looked relative to the current directory and to ${dir})`);
+  const size = statSync10(abs).size;
+  if (size > MAX_IMAGE_BYTES) {
+    throw new ProgressError("image_too_large", `${src} is ${size} bytes; a progress image is capped at ${MAX_IMAGE_BYTES} \u2014 render at phone width (--device iphone)`);
+  }
+  const archived = archiveBytes(dir, readFileSync50(abs));
+  if (!archived) throw new ProgressError("not_an_image", `${src} is not a PNG, JPEG, GIF or WebP image`);
+  return { file: archived.file, sha256: archived.sha256, source: src };
+}
+function archiveBytes(dir, bytes2) {
+  const ext = imageExtension(bytes2);
+  if (!ext) return null;
+  const sha2565 = createHash22("sha256").update(bytes2).digest("hex");
+  const rel = join43(HISTORY_DIR, `${sha2565}.${ext}`);
+  const dest = join43(dir, rel);
+  if (!existsSync46(dest)) {
+    mkdirSync23(join43(dir, HISTORY_DIR), { recursive: true });
+    const tmp = `${dest}.${process.pid}.tmp`;
+    writeFileSync19(tmp, bytes2);
+    renameSync4(tmp, dest);
+  }
+  return { sha256: sha2565, ext, file: toPosix(rel) };
+}
+function appendProgress(dir, input) {
+  const message = input.message.trim();
+  if (!message) throw new ProgressError("message_required", "a progress entry needs a message");
+  if (message.length > MAX_MESSAGE_CHARS) {
+    throw new ProgressError(
+      "message_too_long",
+      `a postcard is a line or two (${message.length} chars; the cap is ${MAX_MESSAGE_CHARS}) \u2014 put the detail in your reply and journal the headline`
+    );
+  }
+  const images = (input.images ?? []).map((src) => archiveImage(dir, src));
+  const entry = {
+    ts: (input.now ?? /* @__PURE__ */ new Date()).toISOString(),
+    message,
+    ...input.step ? { step: input.step, stepNumber: JOURNEY_STEPS.indexOf(input.step) + 1 } : {},
+    ...images.length ? { images } : {}
+  };
+  mkdirSync23(join43(dir, ".himi"), { recursive: true });
+  const file = join43(dir, PROGRESS_FILE);
+  appendFileSync(file, `${endsWithNewline(file) ? "" : "\n"}${JSON.stringify(entry)}
+`);
+  return entry;
+}
+function endsWithNewline(file) {
+  if (!existsSync46(file)) return true;
+  const size = statSync10(file).size;
+  if (size === 0) return true;
+  const fd = openSync(file, "r");
+  try {
+    const last = Buffer.alloc(1);
+    readSync(fd, last, 0, 1, size - 1);
+    return last[0] === 10;
+  } finally {
+    closeSync(fd);
+  }
+}
+function isEntry(v) {
+  if (!v || typeof v !== "object") return false;
+  const e = v;
+  return typeof e.ts === "string" && typeof e.message === "string";
+}
+function readProgress(dir) {
+  const file = join43(dir, PROGRESS_FILE);
+  if (!existsSync46(file)) return { entries: [], skipped: 0 };
+  const entries = [];
+  let skipped = 0;
+  for (const line of readFileSync50(file, "utf8").split("\n")) {
+    if (!line.trim()) continue;
+    try {
+      const parsed = JSON.parse(line);
+      if (isEntry(parsed)) entries.push(parsed);
+      else skipped++;
+    } catch {
+      skipped++;
+    }
+  }
+  return { entries, skipped };
+}
+function summarizeProgress(entries) {
+  if (!entries.length) return { count: 0 };
+  const stepped = [...entries].reverse().find((e) => e.step && JOURNEY_STEPS.includes(e.step));
+  const first = entries[0];
+  const last = entries[entries.length - 1];
+  const elapsed = Date.parse(last.ts) - Date.parse(first.ts);
+  return {
+    count: entries.length,
+    ...stepped?.step ? { current: { step: stepped.step, stepNumber: JOURNEY_STEPS.indexOf(stepped.step) + 1, of: JOURNEY_STEPS.length } } : {},
+    startedAt: first.ts,
+    lastAt: last.ts,
+    ...Number.isFinite(elapsed) ? { elapsedMs: elapsed } : {},
+    last
+  };
+}
+function appleScriptString(s) {
+  return `"${s.replace(/[\r\n]+/g, " ").replace(/\\/g, "\\\\").replace(/"/g, '\\"')}"`;
+}
+function runNotifier(cmd, args) {
+  return new Promise((done) => {
+    let settled = false;
+    const finish2 = (ok) => {
+      if (!settled) {
+        settled = true;
+        clearTimeout(timer);
+        done(ok);
+      }
+    };
+    const child = spawn3(cmd, args, { stdio: "ignore" });
+    const timer = setTimeout(() => {
+      child.kill();
+      finish2(false);
+    }, NOTIFY_TIMEOUT_MS);
+    child.on("error", () => finish2(false));
+    child.on("exit", (code) => finish2(code === 0));
+  });
+}
+async function notifyDesktop(title, body, deps = {}) {
+  const platform = deps.platform ?? process.platform;
+  const run2 = deps.run ?? runNotifier;
+  try {
+    if (platform === "darwin") {
+      return await run2("osascript", ["-e", `display notification ${appleScriptString(body)} with title ${appleScriptString(title)}`]);
+    }
+    if (platform === "linux") return await run2("notify-send", [title, body]);
+  } catch {
+    return false;
+  }
+  return false;
+}
+function appLabel(dir) {
+  try {
+    const manifest = JSON.parse(readFileSync50(join43(dir, "himalaya.content.json"), "utf8"));
+    return typeof manifest.name === "string" && manifest.name ? manifest.name : null;
+  } catch {
+    return null;
+  }
+}
+function journalPath(dir) {
+  const abs = join43(dir, PROGRESS_FILE);
+  const rel = relative6(process.cwd(), abs);
+  return rel && !rel.startsWith("..") ? rel : abs;
+}
+var JOURNEY_STEPS, PROGRESS_FILE, HISTORY_DIR, MAX_MESSAGE_CHARS, MAX_IMAGE_BYTES, ProgressError, toPosix, NOTIFY_TIMEOUT_MS;
+var init_progress = __esm({
+  "src/progress.ts"() {
+    JOURNEY_STEPS = ["discover", "classify", "plan", "implement", "brand", "validate", "review", "download"];
+    PROGRESS_FILE = join43(".himi", "progress.jsonl");
+    HISTORY_DIR = join43(".himi", "history");
+    MAX_MESSAGE_CHARS = 500;
+    MAX_IMAGE_BYTES = 10 * 1024 * 1024;
+    ProgressError = class extends Error {
+      constructor(code, message) {
+        super(message);
+        this.code = code;
+      }
+    };
+    toPosix = (p) => p.split(sep10).join("/");
+    NOTIFY_TIMEOUT_MS = 3e3;
+  }
+});
+
 // src/native-decode.ts
 var native_decode_exports = {};
 __export(native_decode_exports, {
@@ -44218,9 +44464,9 @@ __export(native_decode_exports, {
   runNativeDecode: () => runNativeDecode
 });
 import { execFileSync as execFileSync5, spawnSync as spawnSync2 } from "node:child_process";
-import { existsSync as existsSync46, mkdtempSync as mkdtempSync2, readFileSync as readFileSync50, rmSync as rmSync9, writeFileSync as writeFileSync19 } from "node:fs";
+import { existsSync as existsSync47, mkdtempSync as mkdtempSync2, readFileSync as readFileSync51, rmSync as rmSync9, writeFileSync as writeFileSync20 } from "node:fs";
 import { tmpdir as tmpdir3 } from "node:os";
-import { join as join43 } from "node:path";
+import { join as join44 } from "node:path";
 import { fileURLToPath as fileURLToPath20 } from "node:url";
 function nativeDecodePackageDir() {
   return fileURLToPath20(new URL("../../../core/runtime/ios/HimalayaCore/", import.meta.url));
@@ -44230,8 +44476,8 @@ function nativeDecodeAndroidHarnessDir() {
 }
 function nativeOracleShipped() {
   return {
-    ios: existsSync46(join43(nativeDecodePackageDir(), "Package.swift")),
-    android: existsSync46(join43(nativeDecodeAndroidHarnessDir(), "gradlew"))
+    ios: existsSync47(join44(nativeDecodePackageDir(), "Package.swift")),
+    android: existsSync47(join44(nativeDecodeAndroidHarnessDir(), "gradlew"))
   };
 }
 function detectNativeDecode(options = {}) {
@@ -44242,7 +44488,7 @@ function detectNativeDecode(options = {}) {
     return { platform: "ios", available: false, reason: `the iOS decoder oracle requires macOS (darwin); this host is ${hostPlatform}` };
   }
   if (!swiftAvailable) return { platform: "ios", available: false, reason: "swift is not on PATH" };
-  const packageAvailable = options.packageAvailable ?? existsSync46(join43(packageDir, "Package.swift"));
+  const packageAvailable = options.packageAvailable ?? existsSync47(join44(packageDir, "Package.swift"));
   if (!packageAvailable) {
     return {
       platform: "ios",
@@ -44254,7 +44500,7 @@ function detectNativeDecode(options = {}) {
 }
 function localPropertiesSdk(harnessDir) {
   try {
-    const match = readFileSync50(join43(harnessDir, "local.properties"), "utf8").match(/^sdk\.dir\s*=\s*(.+)$/m);
+    const match = readFileSync51(join44(harnessDir, "local.properties"), "utf8").match(/^sdk\.dir\s*=\s*(.+)$/m);
     return match?.[1]?.trim().replace(/\\([ :\\])/g, "$1") ?? null;
   } catch {
     return null;
@@ -44262,8 +44508,8 @@ function localPropertiesSdk(harnessDir) {
 }
 function detectAndroidNativeDecode(options = {}) {
   const harnessDir = options.harnessDir ?? nativeDecodeAndroidHarnessDir();
-  const gradlew = join43(harnessDir, "gradlew");
-  const gradlewAvailable = options.gradlewAvailable ?? existsSync46(gradlew);
+  const gradlew = join44(harnessDir, "gradlew");
+  const gradlewAvailable = options.gradlewAvailable ?? existsSync47(gradlew);
   if (!gradlewAvailable) {
     return {
       platform: "android",
@@ -44273,7 +44519,7 @@ function detectAndroidNativeDecode(options = {}) {
   }
   const androidHome = options.androidHome ?? process.env.ANDROID_HOME ?? "";
   const sdk = androidHome.trim() || (options.localPropertiesSdk !== void 0 ? options.localPropertiesSdk : localPropertiesSdk(harnessDir));
-  const sdkAvailable = options.sdkAvailable ?? (typeof sdk === "string" && sdk.length > 0 && existsSync46(sdk));
+  const sdkAvailable = options.sdkAvailable ?? (typeof sdk === "string" && sdk.length > 0 && existsSync47(sdk));
   if (!sdkAvailable) {
     return {
       platform: "android",
@@ -44345,14 +44591,14 @@ function parseNativeDecodeOutput(stdout, expectedScreenIds, platform = "ios") {
   return verdicts;
 }
 function runNativeDecode(options) {
-  const descriptorDir = mkdtempSync2(join43(tmpdir3(), "himi-native-decode-"));
+  const descriptorDir = mkdtempSync2(join44(tmpdir3(), "himi-native-decode-"));
   const startedAt = Date.now();
   try {
     for (const descriptor of options.descriptors) {
       if (typeof descriptor.descriptorJson !== "string") {
         throw new Error(`native decode cannot judge ${descriptor.screenId}: the release builder did not return its exact baked JSON bytes`);
       }
-      writeFileSync19(join43(descriptorDir, `${encodeURIComponent(descriptor.screenId)}.json`), descriptor.descriptorJson);
+      writeFileSync20(join44(descriptorDir, `${encodeURIComponent(descriptor.screenId)}.json`), descriptor.descriptorJson);
     }
     options.progress?.("building cached Swift oracle");
     execFileSync5("swift", ["build", "--package-path", options.packageDir, "--product", "himi-decode-oracle"], {
@@ -44364,7 +44610,7 @@ function runNativeDecode(options) {
       encoding: "utf8"
     }).trim();
     options.progress?.(`running real Swift decoder over ${options.descriptors.length} screen${options.descriptors.length === 1 ? "" : "s"}`);
-    const stdout = execFileSync5(join43(binPath, "himi-decode-oracle"), ["--dir", descriptorDir], {
+    const stdout = execFileSync5(join44(binPath, "himi-decode-oracle"), ["--dir", descriptorDir], {
       stdio: ["ignore", "pipe", "pipe"],
       encoding: "utf8"
     });
@@ -44382,15 +44628,15 @@ function runNativeDecode(options) {
   }
 }
 function runAndroidNativeDecode(options) {
-  const descriptorDir = mkdtempSync2(join43(tmpdir3(), "himi-native-decode-android-"));
-  const outputPath = join43(descriptorDir, "verdicts.ndjson");
+  const descriptorDir = mkdtempSync2(join44(tmpdir3(), "himi-native-decode-android-"));
+  const outputPath = join44(descriptorDir, "verdicts.ndjson");
   const startedAt = Date.now();
   try {
     for (const descriptor of options.descriptors) {
       if (typeof descriptor.descriptorJson !== "string") {
         throw new Error(`native decode cannot judge ${descriptor.screenId}: the release builder did not return its exact baked JSON bytes`);
       }
-      writeFileSync19(join43(descriptorDir, `${encodeURIComponent(descriptor.screenId)}.json`), descriptor.descriptorJson);
+      writeFileSync20(join44(descriptorDir, `${encodeURIComponent(descriptor.screenId)}.json`), descriptor.descriptorJson);
     }
     options.progress?.(`running real Kotlin decoder over ${options.descriptors.length} screen${options.descriptors.length === 1 ? "" : "s"}`);
     execFileSync5(options.gradlew, [
@@ -44405,7 +44651,7 @@ function runAndroidNativeDecode(options) {
       stdio: ["ignore", "ignore", "pipe"],
       encoding: "utf8"
     });
-    const stdout = readFileSync50(outputPath, "utf8");
+    const stdout = readFileSync51(outputPath, "utf8");
     return {
       platform: "android",
       verdicts: parseNativeDecodeOutput(stdout, options.descriptors.map((descriptor) => descriptor.screenId), "android"),
@@ -44474,15 +44720,15 @@ __export(browser_authoring_exports, {
   sdkSubpathReader: () => sdkSubpathReader
 });
 import { createServer as createServer3 } from "node:http";
-import { createHash as createHash22, randomBytes as randomBytes4 } from "node:crypto";
+import { createHash as createHash23, randomBytes as randomBytes4 } from "node:crypto";
 import { execFile as execFile2 } from "node:child_process";
-import { existsSync as existsSync47, readdirSync as readdirSync23, readFileSync as readFileSync51, realpathSync as realpathSync4, statSync as statSync10 } from "node:fs";
-import { join as join44, posix, relative as relative6, sep as sep10 } from "node:path";
+import { existsSync as existsSync48, readdirSync as readdirSync23, readFileSync as readFileSync52, realpathSync as realpathSync4, statSync as statSync11 } from "node:fs";
+import { join as join45, posix, relative as relative7, sep as sep11 } from "node:path";
 function humanMs(ms) {
   return ms < 1e3 ? `${ms}ms` : `${Math.round(ms / 1e3)}s`;
 }
 function collectWorkerSources(tier5SrcDir, bundleName) {
-  const root = join44(tier5SrcDir, bundleName);
+  const root = join45(tier5SrcDir, bundleName);
   const files = {};
   const visitedDirs = /* @__PURE__ */ new Set();
   const walk2 = (abs, rel) => {
@@ -44490,16 +44736,16 @@ function collectWorkerSources(tier5SrcDir, bundleName) {
     if (visitedDirs.has(real)) return;
     visitedDirs.add(real);
     for (const name of readdirSync23(abs).sort()) {
-      const childAbs = join44(abs, name);
+      const childAbs = join45(abs, name);
       const childRel = posix.join(rel, name);
-      if (statSync10(childAbs).isDirectory()) {
+      if (statSync11(childAbs).isDirectory()) {
         walk2(childAbs, childRel);
       } else if (/\.(ts|tsx|js|mjs|json)$/.test(name)) {
-        files[childRel] = readFileSync51(childAbs, "utf8");
+        files[childRel] = readFileSync52(childAbs, "utf8");
       }
     }
   };
-  if (!existsSync47(root)) return null;
+  if (!existsSync48(root)) return null;
   walk2(root, `/tier5-src/${bundleName}`);
   const entry = [`/tier5-src/${bundleName}/index.ts`, `/tier5-src/${bundleName}/index.js`].find((p) => p in files);
   if (!entry) return null;
@@ -44516,20 +44762,20 @@ function collectRelativeSiblings(files, tier5SrcDir) {
       const spec = m[1];
       const virtual = posix.normalize(posix.join(dir, spec));
       if (!virtual.startsWith("/tier5-src/")) continue;
-      const onDisk = join44(tier5SrcDir, virtual.slice("/tier5-src/".length));
+      const onDisk = join45(tier5SrcDir, virtual.slice("/tier5-src/".length));
       const candidates = [
         onDisk,
         `${onDisk}.ts`,
         `${onDisk}.js`,
         onDisk.replace(/\.js$/, ".ts"),
-        join44(onDisk, "index.ts"),
-        join44(onDisk, "index.js")
+        join45(onDisk, "index.ts"),
+        join45(onDisk, "index.js")
       ];
       for (const abs of candidates) {
-        if (!existsSync47(abs) || statSync10(abs).isDirectory()) continue;
-        const key2 = `/tier5-src/${relative6(tier5SrcDir, abs).split(sep10).join(posix.sep)}`;
+        if (!existsSync48(abs) || statSync11(abs).isDirectory()) continue;
+        const key2 = `/tier5-src/${relative7(tier5SrcDir, abs).split(sep11).join(posix.sep)}`;
         if (key2 in files) break;
-        files[key2] = readFileSync51(abs, "utf8");
+        files[key2] = readFileSync52(abs, "utf8");
         queue.push(key2);
         break;
       }
@@ -44561,10 +44807,10 @@ function collectSdkModules(files, resolveSubpath) {
   for (const source of Object.values(files)) visit(source);
   return { modules, unsupported };
 }
-function sdkSubpathReader(resolve45) {
+function sdkSubpathReader(resolve46) {
   return (sub) => {
     try {
-      return readFileSync51(resolve45(`@wix/himalaya/${sub}`), "utf8");
+      return readFileSync52(resolve46(`@wix/himalaya/${sub}`), "utf8");
     } catch {
       return null;
     }
@@ -44574,7 +44820,7 @@ function encodeJob(job) {
   return Buffer.from(JSON.stringify(job), "utf8").toString("base64");
 }
 function mintToken2(payload, nonce = randomBytes4(16).toString("hex")) {
-  const digest2 = createHash22("sha256").update(payload, "utf8").digest("base64url");
+  const digest2 = createHash23("sha256").update(payload, "utf8").digest("base64url");
   return `${nonce}.${digest2}`;
 }
 function defaultOpenBrowser2(url) {
@@ -44645,7 +44891,7 @@ async function runBrowserAuthoring(opts) {
   const token = mintToken2(payload);
   const unusable = await probeAuthoringPage(opts.authoringBase, opts.fetchImpl, opts.probeTimeoutMs);
   if (unusable) throw new Error(unusable);
-  return await new Promise((resolve45, reject) => {
+  return await new Promise((resolve46, reject) => {
     let settled = false;
     let url = "";
     const server = createServer3();
@@ -44697,7 +44943,7 @@ async function runBrowserAuthoring(opts) {
         }
         res.writeHead(200, { "content-type": "text/plain" }).end("ok");
         const report2 = body.result;
-        finish2(() => resolve45({ report: report2, url }));
+        finish2(() => resolve46({ report: report2, url }));
       })();
     });
     server.on("error", (e) => finish2(() => reject(e)));
@@ -44738,8 +44984,8 @@ __export(coverage_exports, {
   suppressedNativeKeys: () => suppressedNativeKeys,
   trendAndStore: () => trendAndStore
 });
-import { existsSync as existsSync48, mkdirSync as mkdirSync23, readFileSync as readFileSync52, writeFileSync as writeFileSync20 } from "node:fs";
-import { dirname as dirname26, join as join45 } from "node:path";
+import { existsSync as existsSync49, mkdirSync as mkdirSync24, readFileSync as readFileSync53, writeFileSync as writeFileSync21 } from "node:fs";
+import { dirname as dirname26, join as join46 } from "node:path";
 function suppressedNativeKeys(oracle) {
   return [...oracle.ios ? [] : ["native-decode|ios"], ...oracle.android ? [] : ["native-decode|android"]];
 }
@@ -44909,11 +45155,11 @@ function assembleLedger(r, options = {}) {
   return out;
 }
 function trendAndStore(dir, entries, suppressed) {
-  const p = join45(dir, LEDGER_FILE);
+  const p = join46(dir, LEDGER_FILE);
   let previous = null;
   try {
-    if (existsSync48(p)) {
-      const parsed = JSON.parse(readFileSync52(p, "utf8"));
+    if (existsSync49(p)) {
+      const parsed = JSON.parse(readFileSync53(p, "utf8"));
       if (Array.isArray(parsed.keys)) previous = parsed.keys.filter((k) => typeof k === "string");
     }
   } catch {
@@ -44921,8 +45167,8 @@ function trendAndStore(dir, entries, suppressed) {
   const current = entries.map((e) => e.key);
   const stored = [.../* @__PURE__ */ new Set([...current, ...(previous ?? []).filter((key2) => (suppressed ?? []).includes(key2))])];
   try {
-    mkdirSync23(dirname26(p), { recursive: true });
-    writeFileSync20(p, JSON.stringify({ keys: stored, ts: (/* @__PURE__ */ new Date()).toISOString() }, null, 2));
+    mkdirSync24(dirname26(p), { recursive: true });
+    writeFileSync21(p, JSON.stringify({ keys: stored, ts: (/* @__PURE__ */ new Date()).toISOString() }, null, 2));
   } catch {
     return null;
   }
@@ -44952,11 +45198,11 @@ function formatLedger(entries, trend) {
   return out.join("\n");
 }
 function diffAndStoreObservations(dir, current) {
-  const p = join45(dir, OBS_FILE);
+  const p = join46(dir, OBS_FILE);
   let previous = null;
   try {
-    if (existsSync48(p)) {
-      const parsed = JSON.parse(readFileSync52(p, "utf8"));
+    if (existsSync49(p)) {
+      const parsed = JSON.parse(readFileSync53(p, "utf8"));
       if (parsed.screens && typeof parsed.screens === "object" && !Array.isArray(parsed.screens) && Object.values(parsed.screens).every(
         (v) => Array.isArray(v) && v.every((l) => typeof l === "string")
       )) {
@@ -44966,8 +45212,8 @@ function diffAndStoreObservations(dir, current) {
   } catch {
   }
   try {
-    mkdirSync23(dirname26(p), { recursive: true });
-    writeFileSync20(p, JSON.stringify({ screens: current, ts: (/* @__PURE__ */ new Date()).toISOString() }, null, 2));
+    mkdirSync24(dirname26(p), { recursive: true });
+    writeFileSync21(p, JSON.stringify({ screens: current, ts: (/* @__PURE__ */ new Date()).toISOString() }, null, 2));
   } catch {
     return null;
   }
@@ -45005,8 +45251,8 @@ var LEDGER_FILE, OBS_FILE;
 var init_coverage = __esm({
   "src/coverage.ts"() {
     init_native_decode();
-    LEDGER_FILE = join45(".himi", "test-ledger.json");
-    OBS_FILE = join45(".himi", "test-observations.json");
+    LEDGER_FILE = join46(".himi", "test-ledger.json");
+    OBS_FILE = join46(".himi", "test-observations.json");
   }
 });
 
@@ -45017,11 +45263,11 @@ __export(design_kits_exports, {
   kitsDir: () => kitsDir,
   listKits: () => listKits2
 });
-import { existsSync as existsSync49, readFileSync as readFileSync53, readdirSync as readdirSync24 } from "node:fs";
-import { join as join46, basename as basename10 } from "node:path";
+import { existsSync as existsSync50, readFileSync as readFileSync54, readdirSync as readdirSync24 } from "node:fs";
+import { join as join47, basename as basename10 } from "node:path";
 import { fileURLToPath as fileURLToPath21 } from "node:url";
 function kitsDir() {
-  return KIT_DIR_CANDIDATES.find((p) => existsSync49(p));
+  return KIT_DIR_CANDIDATES.find((p) => existsSync50(p));
 }
 function listKits2() {
   const dir = kitsDir();
@@ -45045,7 +45291,7 @@ In a published @wix/himalaya-cli this is a packaging bug \u2014 the kits should
   if (!kits.includes(name)) {
     return { ok: false, kit: name, kits, problems: [`no design kit named "${name}". Available: ${kits.join(", ")}`] };
   }
-  const raw = readFileSync53(join46(dir, `${name}.json`), "utf8");
+  const raw = readFileSync54(join47(dir, `${name}.json`), "utf8");
   let parsed;
   try {
     parsed = JSON.parse(raw);
@@ -45069,9 +45315,9 @@ var init_design_kits = __esm({
   "src/design-kits.ts"() {
     KIT_DIR_CANDIDATES = [
       // in-repo: tools/himi-cli/src/design-kits.ts → <repo>/stdlib/design-kits/
-      join46(fileURLToPath21(new URL("../../..", import.meta.url)), "stdlib", "design-kits"),
+      join47(fileURLToPath21(new URL("../../..", import.meta.url)), "stdlib", "design-kits"),
       // published CLI: <pkg>/dist/cli.mjs → <pkg>/stdlib/design-kits/
-      join46(fileURLToPath21(new URL("..", import.meta.url)), "stdlib", "design-kits")
+      join47(fileURLToPath21(new URL("..", import.meta.url)), "stdlib", "design-kits")
     ];
   }
 });
@@ -45085,11 +45331,11 @@ __export(assets_exports, {
   removeAssetPayload: () => removeAssetPayload,
   verifyReport: () => verifyReport
 });
-import { readFileSync as readFileSync54 } from "node:fs";
+import { readFileSync as readFileSync55 } from "node:fs";
 import { basename as basename11 } from "node:path";
 function declaredAssets(dir) {
   return collectAssets(dir).map((a) => {
-    const bytes2 = readFileSync54(a.path);
+    const bytes2 = readFileSync55(a.path);
     return {
       name: a.name,
       sha256: assetSha256(bytes2),
@@ -45166,7 +45412,7 @@ function verifyReport(dir, app, manifest) {
   };
 }
 function addAssetPayload(manifest, filePath, opts) {
-  const bytes2 = readFileSync54(filePath);
+  const bytes2 = readFileSync55(filePath);
   const name = opts.name ?? basename11(filePath);
   const sha2565 = assetSha256(bytes2);
   const record2 = {
@@ -45863,9 +46109,9 @@ ${releaseId}`;
         if (!isSafeMsid(msid)) return json3(400, { error: "webwix_owner_bad_msid" });
         const cookie = request.headers.get("cookie") ?? "";
         if (!/wixSession2=/.test(cookie)) return json3(401, { error: "webwix_owner_no_session" });
-        if (url.searchParams.get("renew") === "1") webwixOwnerInstances.invalidate(msid, cookie);
+        const renew = url.searchParams.get("renew") === "1";
         try {
-          const entry = await webwixOwnerInstances.entry(msid, cookie);
+          const entry = await webwixOwnerInstances.entry(msid, cookie, Date.now(), { renew });
           return json3(200, { ...entry, expiresInMs: Math.max(0, entry.expiresAt - Date.now()) }, { "cache-control": "no-store" });
         } catch (e) {
           const msg = String(e?.message ?? e);
@@ -46642,19 +46888,19 @@ var init_preview_assets_generated = __esm({
   "../../packages/serve/src/preview-assets.generated.ts"() {
     init_preview_assets_format();
     PREVIEW_ASSET_MANIFEST = [
-      { key: "assets/index-BKft9wm1.js", contentType: "application/javascript; charset=utf-8", offset: 8, length: 1012166, sha256: "3a87519baabf67cecf163d20ea1eaaeba288fdeab2fc00cc3d22f09b6a29a194" },
-      { key: "fonts/WixMadeforDisplay-Bold.ttf", contentType: "font/ttf", offset: 1012174, length: 90924, sha256: "ec4c7d63772d980d6e147b2df6215fd2737e4b04cebe0cf7e11dc695fb63cdcf" },
-      { key: "fonts/WixMadeforDisplay-ExtraBold.ttf", contentType: "font/ttf", offset: 1103098, length: 90984, sha256: "bf4c16a2774edd38a921edf3099469866cd74c094fd596f3fa4e81f54a04dfaa" },
-      { key: "fonts/WixMadeforDisplay-Medium.ttf", contentType: "font/ttf", offset: 1194082, length: 90980, sha256: "368faca44fb9f7207e4af784e94750b1ee59c1098b8689e0f4a918926f244fb5" },
-      { key: "fonts/WixMadeforDisplay-Regular.ttf", contentType: "font/ttf", offset: 1285062, length: 90872, sha256: "97ed8f1a6772abe26e3d8af5cecfc4b02faa94497d585b0398b5053b739a70c1" },
-      { key: "fonts/WixMadeforDisplay-SemiBold.ttf", contentType: "font/ttf", offset: 1375934, length: 90980, sha256: "642feab8a48ddf6c7a89d7c2a7c0edfa0e6e773f671287e460e222703563191e" },
-      { key: "fonts/WixMadeforText-Bold.ttf", contentType: "font/ttf", offset: 1466914, length: 108636, sha256: "37c179b4fefb63ea9637322b84583a2df53aa226c150294eea1675c14b1b8e29" },
-      { key: "fonts/WixMadeforText-ExtraBold.ttf", contentType: "font/ttf", offset: 1575550, length: 109084, sha256: "62e2fe4718129f36ecdb0ae4de385bd6b81ecc876146447167c6c140fad699a9" },
-      { key: "fonts/WixMadeforText-Medium.ttf", contentType: "font/ttf", offset: 1684634, length: 109048, sha256: "4ecf270136af928612c76fe4ebade91d8156975e5ea4c0cf9225501dd1788e02" },
-      { key: "fonts/WixMadeforText-Regular.ttf", contentType: "font/ttf", offset: 1793682, length: 107700, sha256: "dee56f09fd3efc127c1ea95557edc74110c1460a46287da36e0af25efd341ef5" },
-      { key: "fonts/WixMadeforText-SemiBold.ttf", contentType: "font/ttf", offset: 1901382, length: 88108, sha256: "dced97a77624bc5f8b1ae65850360908297f4588e09feb6f22792d29dc7e765b" },
-      { key: "index.html", contentType: "text/html; charset=utf-8", offset: 1989490, length: 4448, sha256: "71627ade6c0e47a8956b4841c1f6d644fee50a9a4ca9e6d9106b589e84891bd7" },
-      { key: "t5-frame.html", contentType: "text/html; charset=utf-8", offset: 1993938, length: 17209, sha256: "dffc9718e2faa63ae2cc919e0a842f585ed565aaaa7c53778e90379442c731b6" }
+      { key: "assets/index-tPdez24X.js", contentType: "application/javascript; charset=utf-8", offset: 8, length: 1012335, sha256: "9af3d246668e3b69acbdbaebf33129e45f99fdaa32230f782b675fcdeeb38773" },
+      { key: "fonts/WixMadeforDisplay-Bold.ttf", contentType: "font/ttf", offset: 1012343, length: 90924, sha256: "ec4c7d63772d980d6e147b2df6215fd2737e4b04cebe0cf7e11dc695fb63cdcf" },
+      { key: "fonts/WixMadeforDisplay-ExtraBold.ttf", contentType: "font/ttf", offset: 1103267, length: 90984, sha256: "bf4c16a2774edd38a921edf3099469866cd74c094fd596f3fa4e81f54a04dfaa" },
+      { key: "fonts/WixMadeforDisplay-Medium.ttf", contentType: "font/ttf", offset: 1194251, length: 90980, sha256: "368faca44fb9f7207e4af784e94750b1ee59c1098b8689e0f4a918926f244fb5" },
+      { key: "fonts/WixMadeforDisplay-Regular.ttf", contentType: "font/ttf", offset: 1285231, length: 90872, sha256: "97ed8f1a6772abe26e3d8af5cecfc4b02faa94497d585b0398b5053b739a70c1" },
+      { key: "fonts/WixMadeforDisplay-SemiBold.ttf", contentType: "font/ttf", offset: 1376103, length: 90980, sha256: "642feab8a48ddf6c7a89d7c2a7c0edfa0e6e773f671287e460e222703563191e" },
+      { key: "fonts/WixMadeforText-Bold.ttf", contentType: "font/ttf", offset: 1467083, length: 108636, sha256: "37c179b4fefb63ea9637322b84583a2df53aa226c150294eea1675c14b1b8e29" },
+      { key: "fonts/WixMadeforText-ExtraBold.ttf", contentType: "font/ttf", offset: 1575719, length: 109084, sha256: "62e2fe4718129f36ecdb0ae4de385bd6b81ecc876146447167c6c140fad699a9" },
+      { key: "fonts/WixMadeforText-Medium.ttf", contentType: "font/ttf", offset: 1684803, length: 109048, sha256: "4ecf270136af928612c76fe4ebade91d8156975e5ea4c0cf9225501dd1788e02" },
+      { key: "fonts/WixMadeforText-Regular.ttf", contentType: "font/ttf", offset: 1793851, length: 107700, sha256: "dee56f09fd3efc127c1ea95557edc74110c1460a46287da36e0af25efd341ef5" },
+      { key: "fonts/WixMadeforText-SemiBold.ttf", contentType: "font/ttf", offset: 1901551, length: 88108, sha256: "dced97a77624bc5f8b1ae65850360908297f4588e09feb6f22792d29dc7e765b" },
+      { key: "index.html", contentType: "text/html; charset=utf-8", offset: 1989659, length: 4448, sha256: "c4235c7ba4a7bdea831017711424c9e4f8a8b33466bef53f4def1bfcea6a3b15" },
+      { key: "t5-frame.html", contentType: "text/html; charset=utf-8", offset: 1994107, length: 17209, sha256: "dffc9718e2faa63ae2cc919e0a842f585ed565aaaa7c53778e90379442c731b6" }
     ];
   }
 });
@@ -46670,11 +46916,11 @@ __export(run_exports, {
   runPackage: () => runPackage,
   withoutProdServe: () => withoutProdServe
 });
-import { cpSync as cpSync2, existsSync as existsSync50, mkdirSync as mkdirSync24, mkdtempSync as mkdtempSync3, readFileSync as readFileSync55, rmSync as rmSync10, statSync as statSync11 } from "node:fs";
+import { cpSync as cpSync2, existsSync as existsSync51, mkdirSync as mkdirSync25, mkdtempSync as mkdtempSync3, readFileSync as readFileSync56, rmSync as rmSync10, statSync as statSync12 } from "node:fs";
 import { tmpdir as tmpdir4 } from "node:os";
-import { dirname as dirname27, join as join47 } from "node:path";
+import { dirname as dirname27, join as join48 } from "node:path";
 import { fileURLToPath as fileURLToPath22 } from "node:url";
-import { spawn as spawn3 } from "node:child_process";
+import { spawn as spawn4 } from "node:child_process";
 function makePackageRunHandler(opts) {
   return makeRunHandler({
     store: new FileReleaseStore(opts.releaseRoot),
@@ -46691,9 +46937,9 @@ async function fetchBytes(url) {
 }
 async function resolvePackage(source, workDir) {
   const isUrl2 = /^https?:\/\//i.test(source);
-  if (!isUrl2 && existsSync50(source) && statSync11(source).isDirectory()) {
-    const appDirManifest = join47(source, "release-manifest.json");
-    if (existsSync50(appDirManifest)) {
+  if (!isUrl2 && existsSync51(source) && statSync12(source).isDirectory()) {
+    const appDirManifest = join48(source, "release-manifest.json");
+    if (existsSync51(appDirManifest)) {
       const opened2 = openPackageDir(source);
       if (!opened2.validation.ok) {
         throw new Error(`package is not valid:
@@ -46702,10 +46948,10 @@ async function resolvePackage(source, workDir) {
       const app2 = opened2.header?.app ?? opened2.manifest?.app;
       if (!app2) throw new Error(`${source} has no app id (no himi-package.json and no manifest.app)`);
       if (!isSafeAppId(app2)) throw new Error(`${source} declares an unsafe app id ${JSON.stringify(app2)} \u2014 refusing to open it`);
-      const root2 = workDir ?? mkdtempSync3(join47(tmpdir4(), "himi-run-"));
-      const target = join47(root2, app2);
-      if (join47(source) !== target) {
-        mkdirSync24(root2, { recursive: true });
+      const root2 = workDir ?? mkdtempSync3(join48(tmpdir4(), "himi-run-"));
+      const target = join48(root2, app2);
+      if (join48(source) !== target) {
+        mkdirSync25(root2, { recursive: true });
         rmSync10(target, { recursive: true, force: true });
         cpSync2(source, target, { recursive: true });
       }
@@ -46721,8 +46967,8 @@ async function resolvePackage(source, workDir) {
     }
     throw new Error(`${source} is a directory but has no release-manifest.json \u2014 is it a package?`);
   }
-  const bytes2 = isUrl2 ? await fetchBytes(source) : readFileSync55(source);
-  const root = workDir ?? mkdtempSync3(join47(tmpdir4(), "himi-run-"));
+  const bytes2 = isUrl2 ? await fetchBytes(source) : readFileSync56(source);
+  const root = workDir ?? mkdtempSync3(join48(tmpdir4(), "himi-run-"));
   const { app, appDir: appDir2 } = unpackTo(bytes2, root);
   const opened = openPackageDir(appDir2);
   if (!opened.validation.ok) {
@@ -46745,14 +46991,14 @@ async function loadPreviewAssets() {
     const mod = await Promise.resolve().then(() => (init_preview_assets_generated(), preview_assets_generated_exports));
     const here = dirname27(fileURLToPath22(import.meta.url));
     const candidates = [
-      join47(here, "preview-assets.generated.bin"),
+      join48(here, "preview-assets.generated.bin"),
       // published: copied next to the bundled CLI
-      join47(here, "../../../packages/serve/src/preview-assets.generated.bin")
+      join48(here, "../../../packages/serve/src/preview-assets.generated.bin")
       // in-repo checkout
     ];
     for (const path2 of candidates) {
-      if (!existsSync50(path2)) continue;
-      const blob = readFileSync55(path2);
+      if (!existsSync51(path2)) continue;
+      const blob = readFileSync56(path2);
       return mod.assemblePreviewAssetsFromBlob(new Uint8Array(blob.buffer, blob.byteOffset, blob.byteLength));
     }
     return /* @__PURE__ */ new Map();
@@ -46769,7 +47015,7 @@ function packageUrl(origin, app, opts = {}) {
 function openBrowser(url) {
   const cmd = process.platform === "darwin" ? "open" : process.platform === "win32" ? "start" : "xdg-open";
   try {
-    spawn3(cmd, [url], { stdio: "ignore", detached: true, shell: process.platform === "win32" }).unref();
+    spawn4(cmd, [url], { stdio: "ignore", detached: true, shell: process.platform === "win32" }).unref();
   } catch {
   }
 }
@@ -46834,19 +47080,19 @@ __export(run_browser_exports, {
   runInBrowser: () => runInBrowser
 });
 import { createServer as createServer5 } from "node:http";
-import { existsSync as existsSync51, readFileSync as readFileSync56 } from "node:fs";
+import { existsSync as existsSync52, readFileSync as readFileSync57 } from "node:fs";
 import { spawnSync as spawnSync3, execFile as execFile3 } from "node:child_process";
-import { dirname as dirname28, resolve as resolve40 } from "node:path";
+import { dirname as dirname28, resolve as resolve41 } from "node:path";
 import { fileURLToPath as fileURLToPath23 } from "node:url";
 function stagedDir() {
-  return process.env.HIMI_BROWSER_PLANE_OUT ? resolve40(process.env.HIMI_BROWSER_PLANE_OUT) : resolve40(REPO, "packages", "serve", "dist", "browser-plane");
+  return process.env.HIMI_BROWSER_PLANE_OUT ? resolve41(process.env.HIMI_BROWSER_PLANE_OUT) : resolve41(REPO, "packages", "serve", "dist", "browser-plane");
 }
 function missingStaged() {
-  return [...SERVED].filter((f) => !existsSync51(resolve40(stagedDir(), f))).sort();
+  return [...SERVED].filter((f) => !existsSync52(resolve41(stagedDir(), f))).sort();
 }
 function ensureBrowserPlaneStaged() {
   if (missingStaged().length === 0) return { ok: true, detail: "already staged" };
-  const r = spawnSync3(process.execPath, [resolve40(REPO, "core/serve/scripts/stage-browser-plane.mjs")], {
+  const r = spawnSync3(process.execPath, [resolve41(REPO, "core/serve/scripts/stage-browser-plane.mjs")], {
     cwd: REPO,
     encoding: "utf8"
   });
@@ -46932,7 +47178,7 @@ async function runInBrowser(releaseRoot, app, header, opts = {}) {
     }
     const name = path2 === "/" || path2 === "/index.html" ? "host.html" : path2.slice(1);
     if (SERVED.has(name)) {
-      if (!existsSync51(resolve40(stagedDir(), name))) {
+      if (!existsSync52(resolve41(stagedDir(), name))) {
         const restaged = ensureBrowserPlaneStaged();
         if (!restaged.ok) {
           res.writeHead(503, { "content-type": "application/json" });
@@ -46942,7 +47188,7 @@ async function runInBrowser(releaseRoot, app, header, opts = {}) {
       }
       let bytes2;
       try {
-        bytes2 = readFileSync56(resolve40(stagedDir(), name));
+        bytes2 = readFileSync57(resolve41(stagedDir(), name));
       } catch (e) {
         res.writeHead(503, { "content-type": "application/json" });
         res.end(JSON.stringify({ error: "browser_plane_unstaged", file: name, detail: String(e) }));
@@ -46986,7 +47232,7 @@ var init_run_browser = __esm({
   "src/run-browser.ts"() {
     init_file_store();
     HERE = dirname28(fileURLToPath23(import.meta.url));
-    REPO = resolve40(HERE, "..", "..", "..");
+    REPO = resolve41(HERE, "..", "..", "..");
     SERVED = /* @__PURE__ */ new Set(["host.html", "sw.js", "package-reader.js"]);
   }
 });
@@ -47405,10 +47651,10 @@ __export(preflight_exports, {
   parseStoreConfig: () => parseStoreConfig,
   requireEnv: () => requireEnv
 });
-import { existsSync as existsSync52, readFileSync as readFileSync57 } from "node:fs";
-import { isAbsolute as isAbsolute3, relative as relative7, resolve as resolve41 } from "node:path";
+import { existsSync as existsSync53, readFileSync as readFileSync58 } from "node:fs";
+import { isAbsolute as isAbsolute3, relative as relative8, resolve as resolve42 } from "node:path";
 function isInsideRepo(p) {
-  const rel = relative7(REPO_ROOT3, resolve41(p));
+  const rel = relative8(REPO_ROOT3, resolve42(p));
   return rel !== "" && !rel.startsWith("..") && !isAbsolute3(rel);
 }
 function assertCredentialOutsideRepo(label2, p) {
@@ -47462,10 +47708,10 @@ function parseStoreConfig(text4) {
 }
 function loadStoreConfig(app) {
   const p = storeConfigPath(app);
-  if (!existsSync52(p)) {
+  if (!existsSync53(p)) {
     throw new Error(`No store config at ${p}. Create apps/${app}/store/store.config.yaml first (see /setup-store-signing).`);
   }
-  return parseStoreConfig(readFileSync57(p, "utf8"));
+  return parseStoreConfig(readFileSync58(p, "utf8"));
 }
 var init_preflight = __esm({
   "../store-release/preflight.ts"() {
@@ -47484,19 +47730,19 @@ __export(credential_profile_exports, {
   profilePath: () => profilePath,
   resolveStoreCredentials: () => resolveStoreCredentials
 });
-import { existsSync as existsSync53, readFileSync as readFileSync58 } from "node:fs";
+import { existsSync as existsSync54, readFileSync as readFileSync59 } from "node:fs";
 import { homedir as homedir5 } from "node:os";
-import { join as join48 } from "node:path";
+import { join as join49 } from "node:path";
 function credentialsDir(home = homedir5()) {
-  return join48(home, ".himalaya", "store-credentials");
+  return join49(home, ".himalaya", "store-credentials");
 }
 function profilePath(name, home = homedir5()) {
   if (!PROFILE_NAME.test(name)) {
     throw new Error(
-      `credential profile ${JSON.stringify(name)} is not a profile name \u2014 use letters, digits, ".", "_" or "-" starting with a letter or digit. It names ${join48(credentialsDir(home), "<name>.json")}; it is never a path.`
+      `credential profile ${JSON.stringify(name)} is not a profile name \u2014 use letters, digits, ".", "_" or "-" starting with a letter or digit. It names ${join49(credentialsDir(home), "<name>.json")}; it is never a path.`
     );
   }
-  return join48(credentialsDir(home), `${name}.json`);
+  return join49(credentialsDir(home), `${name}.json`);
 }
 function parseProfile(text4, label2) {
   let doc;
@@ -47527,8 +47773,8 @@ function resolveStoreCredentials(opts) {
   const { app, cfg } = opts;
   const env = opts.env ?? process.env;
   const home = opts.home ?? homedir5();
-  const read = opts.readProfile ?? ((p) => readFileSync58(p, "utf8"));
-  const exists = opts.profileExists ?? existsSync53;
+  const read = opts.readProfile ?? ((p) => readFileSync59(p, "utf8"));
+  const exists = opts.profileExists ?? existsSync54;
   const ios = cfg.ios ?? {};
   const flagName = opts.profileFlag?.trim();
   const named = namedProfile(cfg, opts.profileFlag);
@@ -47608,9 +47854,9 @@ __export(preflight_app_exports, {
   preflightApp: () => preflightApp,
   profileAccount: () => profileAccount
 });
-import { readFileSync as readFileSync59, existsSync as existsSync54, readdirSync as readdirSync25, statSync as statSync12 } from "node:fs";
-import { createHash as createHash23 } from "node:crypto";
-import { join as join49 } from "node:path";
+import { readFileSync as readFileSync60, existsSync as existsSync55, readdirSync as readdirSync25, statSync as statSync13 } from "node:fs";
+import { createHash as createHash24 } from "node:crypto";
+import { join as join50 } from "node:path";
 function analyze(projectYml, storeConfig, icon, account) {
   const f = [];
   const has = (re, s) => re.test(s);
@@ -47674,13 +47920,13 @@ function profileAccount(app, storeConfig, opts = {}) {
   }
 }
 async function preflightApp(app, opts = {}) {
-  const projectYml = existsSync54(iosProjectYml(app)) ? readFileSync59(iosProjectYml(app), "utf8") : "";
-  const storeConfig = existsSync54(storeConfigPath(app)) ? readFileSync59(storeConfigPath(app), "utf8") : "";
+  const projectYml = existsSync55(iosProjectYml(app)) ? readFileSync60(iosProjectYml(app), "utf8") : "";
+  const storeConfig = existsSync55(storeConfigPath(app)) ? readFileSync60(storeConfigPath(app), "utf8") : "";
   if (!storeConfig) return [{ level: "error", message: `no apps/${app}/store/store.config.yaml \u2014 run /setup-store-signing first.` }];
   const findings = analyze(
     projectYml,
     storeConfig,
-    await appIconState(join49(appDir(app), "ios")),
+    await appIconState(join50(appDir(app), "ios")),
     profileAccount(app, storeConfig, opts)
   );
   findings.push(...analyzeListing(metadataFilesPresent(app), listScreenshots(app)));
@@ -47709,17 +47955,17 @@ function analyzeSubmissionRecord(appLevel, review, opts) {
   return f;
 }
 function appLevelMetadataFiles(app, locale = "en-US") {
-  const root = join49(storeDir(app), "metadata");
+  const root = join50(storeDir(app), "metadata");
   const out = /* @__PURE__ */ new Set();
-  if (existsSync54(root)) {
+  if (existsSync55(root)) {
     for (const n of readdirSync25(root)) if (n.endsWith(".txt")) out.add(n);
   }
-  if (existsSync54(join49(root, locale, "privacy_url.txt"))) out.add("privacy_url.txt");
+  if (existsSync55(join50(root, locale, "privacy_url.txt"))) out.add("privacy_url.txt");
   return out;
 }
 function reviewInfoFiles(app) {
-  const dir = join49(storeDir(app), "review_information");
-  if (!existsSync54(dir)) return /* @__PURE__ */ new Set();
+  const dir = join50(storeDir(app), "review_information");
+  if (!existsSync55(dir)) return /* @__PURE__ */ new Set();
   return new Set(readdirSync25(dir).filter((n) => n.endsWith(".txt")));
 }
 function isValidAppStoreSize(w, h) {
@@ -47829,12 +48075,12 @@ function analyzePlayListing(assets) {
   return f;
 }
 function playListingAssets(app, locale = "en-US") {
-  const dir = join49(storeDir(app), "play", locale, "images");
+  const dir = join50(storeDir(app), "play", locale, "images");
   const read = (names) => {
     for (const name of names) {
-      const p = join49(dir, name);
+      const p = join50(dir, name);
       try {
-        if (statSync12(p).isFile()) return { name, bytes: readFileSync59(p) };
+        if (statSync13(p).isFile()) return { name, bytes: readFileSync60(p) };
       } catch {
       }
     }
@@ -47865,26 +48111,26 @@ function analyzeListing(metaFiles, shots) {
   return f;
 }
 function metadataFilesPresent(app, locale = "en-US") {
-  const dir = join49(storeDir(app), "metadata", locale);
-  if (!existsSync54(dir)) return /* @__PURE__ */ new Set();
+  const dir = join50(storeDir(app), "metadata", locale);
+  if (!existsSync55(dir)) return /* @__PURE__ */ new Set();
   return new Set(readdirSync25(dir).filter((n) => n.endsWith(".txt")));
 }
 function listScreenshots(app, locale = "en-US") {
   const out = [];
-  const flat = join49(storeDir(app), "screenshots", locale);
-  if (existsSync54(flat)) {
+  const flat = join50(storeDir(app), "screenshots", locale);
+  if (existsSync55(flat)) {
     for (const png of readdirSync25(flat).filter((n) => n.endsWith(".png"))) {
-      const sz = pngSize(readFileSync59(join49(flat, png)));
+      const sz = pngSize(readFileSync60(join50(flat, png)));
       if (sz) out.push({ name: png, w: sz.w, h: sz.h });
     }
   }
-  const legacy = join49(storeDir(app), "metadata", locale, "screenshots");
-  if (existsSync54(legacy)) {
+  const legacy = join50(storeDir(app), "metadata", locale, "screenshots");
+  if (existsSync55(legacy)) {
     for (const deviceDir of readdirSync25(legacy)) {
-      const d = join49(legacy, deviceDir);
-      if (!statSync12(d).isDirectory()) continue;
+      const d = join50(legacy, deviceDir);
+      if (!statSync13(d).isDirectory()) continue;
       for (const png of readdirSync25(d).filter((n) => n.endsWith(".png"))) {
-        const sz = pngSize(readFileSync59(join49(d, png)));
+        const sz = pngSize(readFileSync60(join50(d, png)));
         if (sz) out.push({ name: `${deviceDir}/${png}`, w: sz.w, h: sz.h });
       }
     }
@@ -47892,13 +48138,13 @@ function listScreenshots(app, locale = "en-US") {
   return out;
 }
 function placeholderHashes2() {
-  const templateIos = join49(appDir("_template"), "ios");
-  if (!existsSync54(templateIos)) return [LEGACY_PLACEHOLDER_SHA2562];
+  const templateIos = join50(appDir("_template"), "ios");
+  if (!existsSync55(templateIos)) return [LEGACY_PLACEHOLDER_SHA2562];
   for (const target of readdirSync25(templateIos)) {
-    const p = join49(templateIos, target, "Assets.xcassets", "AppIcon.appiconset", "icon_1024.png");
+    const p = join50(templateIos, target, "Assets.xcassets", "AppIcon.appiconset", "icon_1024.png");
     try {
-      if (!statSync12(p).isFile()) continue;
-      return [LEGACY_PLACEHOLDER_SHA2562, createHash23("sha256").update(readFileSync59(p)).digest("hex")];
+      if (!statSync13(p).isFile()) continue;
+      return [LEGACY_PLACEHOLDER_SHA2562, createHash24("sha256").update(readFileSync60(p)).digest("hex")];
     } catch {
     }
   }
@@ -47929,13 +48175,13 @@ async function pixelIssues(bytes2) {
   }
 }
 async function appIconState(iosDir) {
-  if (!existsSync54(iosDir)) return { exists: false, isPlaceholder: false, storeIssues: [] };
+  if (!existsSync55(iosDir)) return { exists: false, isPlaceholder: false, storeIssues: [] };
   for (const target of readdirSync25(iosDir)) {
-    const p = join49(iosDir, target, "Assets.xcassets", "AppIcon.appiconset", "icon_1024.png");
+    const p = join50(iosDir, target, "Assets.xcassets", "AppIcon.appiconset", "icon_1024.png");
     try {
-      if (!statSync12(p).isFile()) continue;
-      const bytes2 = readFileSync59(p);
-      const hash = createHash23("sha256").update(bytes2).digest("hex");
+      if (!statSync13(p).isFile()) continue;
+      const bytes2 = readFileSync60(p);
+      const hash = createHash24("sha256").update(bytes2).digest("hex");
       const pixels = await pixelIssues(bytes2);
       return {
         exists: true,
@@ -48006,7 +48252,7 @@ __export(version_exports, {
   setAndroidVersion: () => setAndroidVersion,
   setIosVersion: () => setIosVersion
 });
-import { readFileSync as readFileSync60, writeFileSync as writeFileSync21 } from "node:fs";
+import { readFileSync as readFileSync61, writeFileSync as writeFileSync22 } from "node:fs";
 function readIosVersion(projectYml) {
   const marketing = matchScalar(projectYml, "CFBundleShortVersionString");
   const build2 = matchScalar(projectYml, "CFBundleVersion");
@@ -48064,15 +48310,15 @@ function setAndroidVersion(gradle, v) {
 function bumpVersion(app, opts) {
   const iosPath = iosProjectYml(app);
   const gradlePath = androidGradle(app);
-  const iosYml = readFileSync60(iosPath, "utf8");
-  const gradle = readFileSync60(gradlePath, "utf8");
+  const iosYml = readFileSync61(iosPath, "utf8");
+  const gradle = readFileSync61(gradlePath, "utf8");
   const current = readIosVersion(iosYml);
   const next = {
     marketing: opts.marketing ?? current.marketing,
     build: opts.build === "increment" || opts.build === void 0 ? current.build + (opts.build === "increment" ? 1 : 0) : opts.build
   };
-  writeFileSync21(iosPath, setIosVersion(iosYml, next));
-  writeFileSync21(gradlePath, setAndroidVersion(gradle, next));
+  writeFileSync22(iosPath, setIosVersion(iosYml, next));
+  writeFileSync22(gradlePath, setAndroidVersion(gradle, next));
   return next;
 }
 var init_version = __esm({
@@ -48082,7 +48328,7 @@ var init_version = __esm({
 });
 
 // ../store-release/register-bundle.ts
-import { readFileSync as readFileSync61 } from "node:fs";
+import { readFileSync as readFileSync62 } from "node:fs";
 import { createPrivateKey as createPrivateKey2, sign } from "node:crypto";
 function b64url2(b) {
   return Buffer.from(b).toString("base64").replace(/\+/g, "-").replace(/\//g, "_").replace(/=+$/, "");
@@ -48100,7 +48346,7 @@ function bundleIdBody(identifier, name, platform = "IOS") {
 async function registerBundleId(opts) {
   const env = requireEnv(["ASC_KEY_ID", "ASC_ISSUER_ID", "ASC_KEY_PATH"]);
   assertCredentialOutsideRepo("ASC_KEY_PATH", env.ASC_KEY_PATH);
-  const jwt = ascJwt(env.ASC_KEY_ID, env.ASC_ISSUER_ID, readFileSync61(env.ASC_KEY_PATH, "utf8"), Math.floor(Date.now() / 1e3));
+  const jwt = ascJwt(env.ASC_KEY_ID, env.ASC_ISSUER_ID, readFileSync62(env.ASC_KEY_PATH, "utf8"), Math.floor(Date.now() / 1e3));
   const res = await fetch(`${ASC_API}/v1/bundleIds`, {
     method: "POST",
     headers: { Authorization: `Bearer ${jwt}`, "Content-Type": "application/json" },
@@ -48154,7 +48400,7 @@ __export(asc_status_exports, {
   ascStatus: () => ascStatus,
   buildVerdict: () => buildVerdict
 });
-import { readFileSync as readFileSync62 } from "node:fs";
+import { readFileSync as readFileSync63 } from "node:fs";
 function buildVerdict(builds) {
   if (!builds.length) {
     return "NO builds registered \u2014 if you uploaded recently and it's been >15 min, the binary was REJECTED IN PROCESSING (reason is email-only; run validate-binary.ts / scan-purpose-strings.ts to reproduce it).";
@@ -48168,7 +48414,7 @@ function buildVerdict(builds) {
 function client(creds) {
   const env = creds ?? requireEnv(["ASC_KEY_ID", "ASC_ISSUER_ID", "ASC_KEY_PATH"]);
   assertCredentialOutsideRepo("ASC_KEY_PATH", env.ASC_KEY_PATH);
-  const jwt = ascJwt(env.ASC_KEY_ID, env.ASC_ISSUER_ID, readFileSync62(env.ASC_KEY_PATH, "utf8"), Math.floor(Date.now() / 1e3));
+  const jwt = ascJwt(env.ASC_KEY_ID, env.ASC_ISSUER_ID, readFileSync63(env.ASC_KEY_PATH, "utf8"), Math.floor(Date.now() / 1e3));
   return async (path2) => {
     const r = await fetch(`${ASC}${path2}`, { headers: { Authorization: `Bearer ${jwt}` } });
     return { status: r.status, json: await r.json().catch(() => ({})) };
@@ -48328,7 +48574,7 @@ __export(secrets_exports, {
   runRemoteSecretsCommand: () => runRemoteSecretsCommand,
   runSecretsCommand: () => runSecretsCommand
 });
-import { readFileSync as readFileSync63 } from "node:fs";
+import { readFileSync as readFileSync64 } from "node:fs";
 function environment(value) {
   if (value === "preview" || value === "production") return value;
   throw new Error("--environment must be preview or production");
@@ -48359,7 +48605,7 @@ async function runSecretsCommand(operation, flags, io, options = {}) {
       io.log(JSON.stringify(await vault.list({ app, environment: env })));
       return 0;
     }
-    const value = options.readValue ? options.readValue() : readFileSync63(0, "utf8").replace(/\r?\n$/, "");
+    const value = options.readValue ? options.readValue() : readFileSync64(0, "utf8").replace(/\r?\n$/, "");
     if (operation === "set") await vault.set({ app, environment: env, name, value });
     else if (operation === "rotate") await vault.rotate({ app, environment: env, name, value });
     else throw new Error(`unknown secrets operation ${operation}`);
@@ -48388,7 +48634,7 @@ async function runRemoteSecretsCommand(operation, flags, io, options) {
     }
     let body;
     if (operation !== "list") {
-      const value = options.readValue ? options.readValue() : readFileSync63(0, "utf8").replace(/\r?\n$/, "");
+      const value = options.readValue ? options.readValue() : readFileSync64(0, "utf8").replace(/\r?\n$/, "");
       body = JSON.stringify({ value });
     }
     const response = await (options.fetchImpl ?? fetch)(url, { method: operation === "list" ? "GET" : operation === "set" ? "PUT" : "POST", headers: headers2, body });
@@ -48424,15 +48670,15 @@ __export(notify_exports, {
   runNotify: () => runNotify,
   saveAdminSession: () => saveAdminSession
 });
-import { chmodSync as chmodSync3, mkdirSync as mkdirSync25, readFileSync as readFileSync64, writeFileSync as writeFileSync22 } from "node:fs";
+import { chmodSync as chmodSync3, mkdirSync as mkdirSync26, readFileSync as readFileSync65, writeFileSync as writeFileSync23 } from "node:fs";
 import { homedir as homedir6 } from "node:os";
-import { dirname as dirname30, join as join50 } from "node:path";
+import { dirname as dirname30, join as join51 } from "node:path";
 function defaultSessionsPath() {
-  return process.env.HIMI_ADMIN_SESSIONS_FILE ?? join50(homedir6(), ".himalaya", "admin-sessions.json");
+  return process.env.HIMI_ADMIN_SESSIONS_FILE ?? join51(homedir6(), ".himalaya", "admin-sessions.json");
 }
 function loadSessionsFile(path2 = defaultSessionsPath()) {
   try {
-    return JSON.parse(readFileSync64(path2, "utf8"));
+    return JSON.parse(readFileSync65(path2, "utf8"));
   } catch {
     return {};
   }
@@ -48440,8 +48686,8 @@ function loadSessionsFile(path2 = defaultSessionsPath()) {
 function saveAdminSession(adminUrl, session, path2 = defaultSessionsPath()) {
   const file = loadSessionsFile(path2);
   file.sessions = { ...file.sessions, [adminUrl]: session };
-  mkdirSync25(dirname30(path2), { recursive: true, mode: 448 });
-  writeFileSync22(path2, JSON.stringify(file, null, 2) + "\n", { mode: 384 });
+  mkdirSync26(dirname30(path2), { recursive: true, mode: 448 });
+  writeFileSync23(path2, JSON.stringify(file, null, 2) + "\n", { mode: 384 });
   try {
     chmodSync3(dirname30(path2), 448);
     chmodSync3(path2, 384);
@@ -49979,6 +50225,26 @@ function tuneHighContrastAccent(brand, surface) {
   }
   return candidate;
 }
+function stripBrandFromIdiom(tokens) {
+  const idiom = tokens.idiom;
+  if (!idiom || typeof idiom !== "object" || Array.isArray(idiom)) return;
+  for (const overlay of Object.values(idiom)) {
+    if (!overlay || typeof overlay !== "object" || Array.isArray(overlay)) continue;
+    const o = overlay;
+    const colors = o.colors;
+    if (colors && typeof colors === "object" && !Array.isArray(colors)) {
+      for (const key2 of BRAND_COLOR_TOKENS) delete colors[key2];
+      if (Object.keys(colors).length === 0) delete o.colors;
+    }
+    const shadows = o.shadows;
+    const glow = shadows && typeof shadows === "object" && !Array.isArray(shadows) ? shadows[BRAND_GLOW_SHADOW] : void 0;
+    if (glow && typeof glow === "object" && !Array.isArray(glow) && "color" in glow) {
+      delete glow.color;
+      if (Object.keys(glow).length === 0) delete shadows[BRAND_GLOW_SHADOW];
+      if (Object.keys(shadows).length === 0) delete o.shadows;
+    }
+  }
+}
 function deriveAccentFamily(primary, secondary, surfaces) {
   const primaryDark = tuneDarkAccent(primary, surfaces.dark, surfaces.light);
   const secondaryDark = tuneDarkAccent(secondary, surfaces.dark, surfaces.light);
@@ -49999,7 +50265,7 @@ function deriveAccentFamily(primary, secondary, surfaces) {
     }
   };
 }
-var ACCENT_SURFACE_MIN_DELTA, ACCENT_SURFACE_LIGHT_WEIGHT, SECONDARY_SHADE_WEIGHT, SECONDARY_MIN_LSTAR, DARK_ARM_MIN_LIFT, DARK_ARM_TARGET_CONTRAST, DARK_ARM_FLOOR_CONTRAST, DARK_ARM_LSTAR_CAP, HIGH_CONTRAST_TARGET;
+var ACCENT_SURFACE_MIN_DELTA, ACCENT_SURFACE_LIGHT_WEIGHT, SECONDARY_SHADE_WEIGHT, SECONDARY_MIN_LSTAR, DARK_ARM_MIN_LIFT, DARK_ARM_TARGET_CONTRAST, DARK_ARM_FLOOR_CONTRAST, DARK_ARM_LSTAR_CAP, HIGH_CONTRAST_TARGET, BRAND_COLOR_TOKENS, BRAND_GLOW_SHADOW;
 var init_brand_color_math = __esm({
   "../../core/ts/src/brand-color-math.ts"() {
     ACCENT_SURFACE_MIN_DELTA = 1.08;
@@ -50011,6 +50277,8 @@ var init_brand_color_math = __esm({
     DARK_ARM_FLOOR_CONTRAST = 3;
     DARK_ARM_LSTAR_CAP = 80;
     HIGH_CONTRAST_TARGET = 8.5;
+    BRAND_COLOR_TOKENS = ["accentPrimary", "accentSecondary", "accentSurface", "textOnAccent"];
+    BRAND_GLOW_SHADOW = "glow";
   }
 });
 
@@ -51067,10 +51335,10 @@ function assertPublicSiteUrl(raw) {
   if (refusal) throw new Error(refusal);
 }
 function resolveAll(hostname2) {
-  return new Promise((resolve45, reject) => {
+  return new Promise((resolve46, reject) => {
     dnsLookup(hostname2, { all: true, verbatim: true }, (err, addresses) => {
       if (err) reject(err);
-      else resolve45(addresses);
+      else resolve46(addresses);
     });
   });
 }
@@ -51078,13 +51346,13 @@ function withAbort(start, signal, what) {
   if (signal?.aborted) return Promise.reject(new Error(`${what} aborted`));
   const work = start();
   if (!signal) return work;
-  return new Promise((resolve45, reject) => {
+  return new Promise((resolve46, reject) => {
     const onAbort = () => reject(new Error(`${what} aborted`));
     signal.addEventListener("abort", onAbort, { once: true });
-    work.then(resolve45, reject).finally(() => signal.removeEventListener("abort", onAbort));
+    work.then(resolve46, reject).finally(() => signal.removeEventListener("abort", onAbort));
   });
 }
-async function pinAddress(url, resolve45 = resolveAll, signal) {
+async function pinAddress(url, resolve46 = resolveAll, signal) {
   const host = url.hostname.replace(/^\[|\]$/g, "");
   if (ipv4Octets(host)) {
     if (isBlockedAddress(host)) throw new Error(`${host} is a blocked address`);
@@ -51094,7 +51362,7 @@ async function pinAddress(url, resolve45 = resolveAll, signal) {
     if (isBlockedAddress(host)) throw new Error(`${host} is a blocked address`);
     return { address: host, family: 6 };
   }
-  const addresses = await withAbort(() => resolve45(host), signal, `${host} lookup`);
+  const addresses = await withAbort(() => resolve46(host), signal, `${host} lookup`);
   if (!addresses.length) throw new Error(`${host} resolved to no address`);
   const blocked = addresses.filter((a) => isBlockedAddress(a.address)).map((a) => a.address);
   if (blocked.length) throw new Error(`${host} resolves to a blocked address (${blocked.join(", ")})`);
@@ -51134,7 +51402,7 @@ function copyIncomingHeaders(headers2) {
   return out;
 }
 function requestOnce(url, pinned, init) {
-  return new Promise((resolve45, reject) => {
+  return new Promise((resolve46, reject) => {
     const headers2 = { host: url.host, "accept-encoding": "identity" };
     new Headers(init.headers ?? {}).forEach((value, key2) => {
       if (key2.toLowerCase() !== "host") headers2[key2] = value;
@@ -51164,7 +51432,7 @@ function requestOnce(url, pinned, init) {
           reject(err);
           return;
         }
-        resolve45(new Response(body, { status, statusText: res.statusMessage ?? "", headers: out }));
+        resolve46(new Response(body, { status, statusText: res.statusMessage ?? "", headers: out }));
       }
     );
     req.on("error", reject);
@@ -51967,8 +52235,8 @@ var init_brand_font = __esm({
 });
 
 // src/site-analyze/write-artifacts.ts
-import { mkdirSync as mkdirSync26, writeFileSync as writeFileSync23 } from "node:fs";
-import { join as join51 } from "node:path";
+import { mkdirSync as mkdirSync27, writeFileSync as writeFileSync24 } from "node:fs";
+import { join as join52 } from "node:path";
 function attachVeloSources(book, sources, put) {
   const byPath = new Map((sources ?? []).map((s) => [s.path, s.text]));
   for (const f of book.velo.files) {
@@ -52123,13 +52391,13 @@ async function downloadMedia(book, fetchImpl, put) {
 }
 async function writeBusinessBook(result, opts) {
   const out = opts.outDir;
-  mkdirSync26(join51(out, "evidence/pages"), { recursive: true });
-  mkdirSync26(join51(out, "media/catalog"), { recursive: true });
+  mkdirSync27(join52(out, "evidence/pages"), { recursive: true });
+  mkdirSync27(join52(out, "media/catalog"), { recursive: true });
   const files = [];
   const put = (rel, body) => {
-    const p = join51(out, rel);
-    mkdirSync26(join51(p, ".."), { recursive: true });
-    writeFileSync23(p, body);
+    const p = join52(out, rel);
+    mkdirSync27(join52(p, ".."), { recursive: true });
+    writeFileSync24(p, body);
     files.push(rel);
   };
   const book = result.book;
@@ -52222,15 +52490,15 @@ var init_customer_build = __esm({
 });
 
 // src/site-analyze/apply.ts
-import { existsSync as existsSync55, readFileSync as readFileSync65, writeFileSync as writeFileSync24, copyFileSync as copyFileSync3, mkdirSync as mkdirSync27, realpathSync as realpathSync5, statSync as statSync13 } from "node:fs";
-import { dirname as dirname31, isAbsolute as isAbsolute4, join as join52, resolve as resolve42, sep as sep11 } from "node:path";
+import { existsSync as existsSync56, readFileSync as readFileSync66, writeFileSync as writeFileSync25, copyFileSync as copyFileSync3, mkdirSync as mkdirSync28, realpathSync as realpathSync5, statSync as statSync14 } from "node:fs";
+import { dirname as dirname31, isAbsolute as isAbsolute4, join as join53, resolve as resolve43, sep as sep12 } from "node:path";
 import { spawnSync as spawnSync4 } from "node:child_process";
 function unpairedRedirectNote(overlay) {
   if (!overlay.wix?.clientId || overlay.wix.redirectUri) return void 0;
   return `no OAuth redirect paired with client ${overlay.wix.clientId} \u2014 the app (and prepare:customer) will refuse to start until one is set. Register it with \`himi site client ensure --site ${overlay.siteId?.trim() || "<msid>"} --redirect-uri <uri> --yes\`, then re-run analyze with \`--redirect-uri <uri>\` (or export HIMI_BRANDED_LITE_WIX_REDIRECT_URI)`;
 }
 function posix2(p) {
-  return resolve42(p).replace(/\\/g, "/");
+  return resolve43(p).replace(/\\/g, "/");
 }
 function committedShellProvisioning(path2) {
   return committedShellFor(posix2(path2));
@@ -52238,7 +52506,7 @@ function committedShellProvisioning(path2) {
 function findRepoRoot(cwd) {
   let dir = cwd;
   for (let i = 0; i < 8; i++) {
-    if (SHELL_NAMES2.some((name) => existsSync55(join52(dir, shellAppDir(name), "package.json")))) return dir;
+    if (SHELL_NAMES2.some((name) => existsSync56(join53(dir, shellAppDir(name), "package.json")))) return dir;
     const next = dirname31(dir);
     if (next === dir) break;
     dir = next;
@@ -52264,7 +52532,7 @@ function assertNotCommitted(path2, forbidden) {
       `refusing to overwrite committed ${committedProvisioningPath(committed)} \u2014 use prepare:customer --contract`
     );
   }
-  if (forbidden && resolve42(path2) === resolve42(forbidden)) {
+  if (forbidden && resolve43(path2) === resolve43(forbidden)) {
     const named = committedShellProvisioning(forbidden);
     throw new Error(
       `refusing to overwrite committed ${named ? committedProvisioningPath(named) : forbidden} \u2014 pass a content-package provisioning.json or use prepare:customer --contract`
@@ -52306,24 +52574,24 @@ function mergeCustomerOwned(committed, overlay) {
 }
 function buildMergedContract(options) {
   const { appDir: appDir2, packageDir, overlay } = options;
-  const committedPath = join52(appDir2, "provisioning.json");
-  if (!existsSync55(committedPath)) {
+  const committedPath = join53(appDir2, "provisioning.json");
+  if (!existsSync56(committedPath)) {
     throw new Error(`shell has no committed provisioning.json at ${committedPath} to build a contract from`);
   }
-  const committed = JSON.parse(readFileSync65(committedPath, "utf8"));
+  const committed = JSON.parse(readFileSync66(committedPath, "utf8"));
   const merged = mergeCustomerOwned(committed, overlay);
   const overlayFontFamily = (overlay.branding ?? {}).fontFamily;
   const branding = merged.branding ?? {};
   const staged = [];
   const contained = (root, rel) => {
     if (isAbsolute4(rel)) return void 0;
-    const full = resolve42(root, rel);
-    return full.startsWith(resolve42(root) + sep11) ? full : void 0;
+    const full = resolve43(root, rel);
+    return full.startsWith(resolve43(root) + sep12) ? full : void 0;
   };
   const stage = (fromRel, toRel) => {
     const from = contained(packageDir, fromRel);
-    const to = contained(join52(appDir2, STAGED), toRel.slice(STAGED.length + 1));
-    if (!from || !to || !existsSync55(from)) return void 0;
+    const to = contained(join53(appDir2, STAGED), toRel.slice(STAGED.length + 1));
+    if (!from || !to || !existsSync56(from)) return void 0;
     let real;
     let realRoot;
     try {
@@ -52332,10 +52600,10 @@ function buildMergedContract(options) {
     } catch {
       return void 0;
     }
-    if (!real.startsWith(realRoot + sep11)) return void 0;
+    if (!real.startsWith(realRoot + sep12)) return void 0;
     try {
-      if (!statSync13(real).isFile()) return void 0;
-      mkdirSync27(dirname31(to), { recursive: true });
+      if (!statSync14(real).isFile()) return void 0;
+      mkdirSync28(dirname31(to), { recursive: true });
       copyFileSync3(real, to);
     } catch {
       return void 0;
@@ -52345,11 +52613,11 @@ function buildMergedContract(options) {
   };
   const icon = stage("media/icon.png", `${STAGED}/icon.png`);
   if (icon) branding.appIconPath = icon;
-  const facesPath = join52(packageDir, "media/fonts/faces.json");
-  if (existsSync55(facesPath)) {
+  const facesPath = join53(packageDir, "media/fonts/faces.json");
+  if (existsSync56(facesPath)) {
     let faces = [];
     try {
-      const parsed = JSON.parse(readFileSync65(facesPath, "utf8"));
+      const parsed = JSON.parse(readFileSync66(facesPath, "utf8"));
       faces = Array.isArray(parsed) ? parsed : [];
     } catch {
       faces = [];
@@ -52370,20 +52638,20 @@ function buildMergedContract(options) {
   merged.branding = branding;
   const body = `${JSON.stringify(merged, null, 2)}
 `;
-  const path2 = join52(packageDir, "provisioning.contract.json");
-  writeFileSync24(path2, body);
-  const localPath = join52(appDir2, LOCAL_CONTRACT_REL);
-  mkdirSync27(dirname31(localPath), { recursive: true });
-  writeFileSync24(localPath, body);
+  const path2 = join53(packageDir, "provisioning.contract.json");
+  writeFileSync25(path2, body);
+  const localPath = join53(appDir2, LOCAL_CONTRACT_REL);
+  mkdirSync28(dirname31(localPath), { recursive: true });
+  writeFileSync25(localPath, body);
   staged.push(localPath);
   return { path: path2, staged };
 }
 async function applyOverlays(input) {
-  const cwd = resolve42(input.cwd);
+  const cwd = resolve43(input.cwd);
   const shell = input.shell ?? DEFAULT_BRANDABLE_SHELL;
   assertKnownShell(shell);
-  const overlay = JSON.parse(readFileSync65(input.overlayPath, "utf8"));
-  const tokens = JSON.parse(readFileSync65(input.tokensPath, "utf8"));
+  const overlay = JSON.parse(readFileSync66(input.overlayPath, "utf8"));
+  const tokens = JSON.parse(readFileSync66(input.tokensPath, "utf8"));
   const wrote = [];
   const notes = [];
   const repoRoot2 = findRepoRoot(cwd);
@@ -52393,8 +52661,8 @@ async function applyOverlays(input) {
         `shell "${shell}" cannot bake a customer brand \u2014 it ships no prepare:customer script`
       );
     }
-    const appDir2 = join52(repoRoot2, shellAppDir(shell));
-    const packageDir = dirname31(resolve42(input.overlayPath));
+    const appDir2 = join53(repoRoot2, shellAppDir(shell));
+    const packageDir = dirname31(resolve43(input.overlayPath));
     const { path: contract, staged } = buildMergedContract({ appDir: appDir2, packageDir, overlay });
     wrote.push(...staged);
     const r = spawnSync4("npm", ["run", "prepare:customer", "--", "--contract", contract], {
@@ -52415,32 +52683,41 @@ async function applyOverlays(input) {
       note: `prepare:customer --contract with a merged contract (committed provisioning.json untouched)${unpairedInRepo ? ` \xB7 ${unpairedInRepo}` : ""}`
     };
   }
-  const pkgProv = join52(cwd, "provisioning.json");
+  const pkgProv = join53(cwd, "provisioning.json");
   assertNotCommitted(pkgProv, input.forbiddenProvisioning);
-  if (existsSync55(pkgProv)) {
-    const cur = JSON.parse(readFileSync65(pkgProv, "utf8"));
+  if (existsSync56(pkgProv)) {
+    const cur = JSON.parse(readFileSync66(pkgProv, "utf8"));
     const merged = deepMerge4(cur, overlay);
-    writeFileSync24(pkgProv, JSON.stringify(merged, null, 2) + "\n");
+    writeFileSync25(pkgProv, JSON.stringify(merged, null, 2) + "\n");
     wrote.push(pkgProv);
   } else {
-    writeFileSync24(pkgProv, JSON.stringify(overlay, null, 2) + "\n");
+    writeFileSync25(pkgProv, JSON.stringify(overlay, null, 2) + "\n");
     wrote.push(pkgProv);
   }
-  const pkgTokens = join52(cwd, "tokens.json");
-  if (existsSync55(pkgTokens) && (tokens.colors || tokens.typography)) {
-    const cur = JSON.parse(readFileSync65(pkgTokens, "utf8"));
+  const pkgTokens = join53(cwd, "tokens.json");
+  if (existsSync56(pkgTokens) && (tokens.colors || tokens.typography)) {
+    const cur = JSON.parse(readFileSync66(pkgTokens, "utf8"));
     const merged = deepMerge4(cur, tokens);
     const mergedColors = merged.colors;
     if (mergedColors && typeof mergedColors === "object" && !Array.isArray(mergedColors)) {
       merged.colors = alignAccentsToSurfaces(mergedColors, tokens.colors);
     }
-    writeFileSync24(pkgTokens, JSON.stringify(merged, null, 2) + "\n");
+    const bringsBrand = Object.keys(tokens.colors ?? {}).some((k) => BRAND_COLOR_TOKENS.includes(k));
+    if (bringsBrand) {
+      const accent = tokens.colors?.accentPrimary;
+      const primary = typeof accent === "string" ? accent : accent?.light;
+      const shadows = merged.shadows;
+      const glow = shadows && typeof shadows === "object" && !Array.isArray(shadows) ? shadows[BRAND_GLOW_SHADOW] : void 0;
+      if (primary && glow && typeof glow.color === "string") glow.color = primary;
+      stripBrandFromIdiom(merged);
+    }
+    writeFileSync25(pkgTokens, JSON.stringify(merged, null, 2) + "\n");
     wrote.push(pkgTokens);
   }
   const homeAction = homeRefreshActionId(shell);
-  const homeSrc = join52(cwd, "dev/index.ts");
-  if (homeAction && existsSync55(homeSrc)) {
-    const prev = readFileSync65(homeSrc, "utf8");
+  const homeSrc = join53(cwd, "dev/index.ts");
+  if (homeAction && existsSync56(homeSrc)) {
+    const prev = readFileSync66(homeSrc, "utf8");
     const patched = patchBrandParams(prev, overlay, homeAction);
     let next = patched.src;
     if (!patched.foreign && overlay.installedVerticals?.length) {
@@ -52456,20 +52733,20 @@ async function applyOverlays(input) {
       }
     }
     if (next !== prev) {
-      writeFileSync24(homeSrc, next);
+      writeFileSync25(homeSrc, next);
       wrote.push(homeSrc);
     }
     if (patched.unparsed) {
       notes.push(`${patched.unparsed} onAppear params block(s) in ${homeSrc} could not be read \u2014 any brand values inside them were not applied`);
     }
   }
-  if (!input.iconPath || !existsSync55(input.iconPath)) {
-    const book = input.iconPath ? dirname31(dirname31(resolve42(input.iconPath))) : void 0;
+  if (!input.iconPath || !existsSync56(input.iconPath)) {
+    const book = input.iconPath ? dirname31(dirname31(resolve43(input.iconPath))) : void 0;
     notes.push(
       book ? `no icon installed \u2014 ${siteLogoAbsence(book).hint}` : "no icon installed and no business book to say why \u2014 `himi icon generate` draws one from the accent, or `himi icon set <file.png>` installs the customer's own mark"
     );
   }
-  if (input.iconPath && existsSync55(input.iconPath)) {
+  if (input.iconPath && existsSync56(input.iconPath)) {
     try {
       const installed = await installIcon(cwd, input.iconPath, { derivePlay: true });
       wrote.push(...installed.wrote);
@@ -52554,6 +52831,7 @@ var init_apply2 = __esm({
     init_brandable_shells();
     init_customer_build();
     init_branding_derive();
+    init_brand_color_math();
     init_home_descriptor();
     STAGED = ".himi/brand";
   }
@@ -53406,10 +53684,10 @@ function permuteDomain(domain, allowSpecialUseDomain) {
 }
 function createPromiseCallback(cb) {
   let callback;
-  let resolve45;
+  let resolve46;
   let reject;
   const promise = new Promise((_resolve, _reject) => {
-    resolve45 = _resolve;
+    resolve46 = _resolve;
     reject = _reject;
   });
   if (typeof cb === "function") {
@@ -53425,7 +53703,7 @@ function createPromiseCallback(cb) {
     callback = (err, result) => {
       try {
         if (err) reject(err);
-        else resolve45(result);
+        else resolve46(result);
       } catch (e) {
         reject(e instanceof Error ? e : new Error());
       }
@@ -56623,8 +56901,8 @@ __export(cli_exports, {
   runSiteAnalyze: () => runSiteAnalyze,
   runSiteFunctionCli: () => runSiteFunctionCli
 });
-import { readFileSync as readFileSync66 } from "node:fs";
-import { resolve as resolve43 } from "node:path";
+import { readFileSync as readFileSync67 } from "node:fs";
+import { resolve as resolve44 } from "node:path";
 function assetFetchFor(_opts) {
   return pinnedFetch2;
 }
@@ -56633,7 +56911,7 @@ async function runSiteAnalyze(opts) {
   const assetFetch = assetFetchFor(opts);
   const siteFetch = guardedSiteFetch;
   const cwd = opts.cwd ?? process.cwd();
-  const outDir = resolve43(cwd, opts.outDir ?? ".himi/business-book");
+  const outDir = resolve44(cwd, opts.outDir ?? ".himi/business-book");
   let ownerAuth;
   let msid;
   try {
@@ -56671,9 +56949,9 @@ async function runSiteAnalyze(opts) {
   if (opts.apply) {
     applied = await applyOverlays({
       cwd,
-      overlayPath: resolve43(outDir, "provisioning.overlay.json"),
-      tokensPath: resolve43(outDir, "tokens.overlay.json"),
-      iconPath: resolve43(outDir, "media/icon.png"),
+      overlayPath: resolve44(outDir, "provisioning.overlay.json"),
+      tokensPath: resolve44(outDir, "tokens.overlay.json"),
+      iconPath: resolve44(outDir, "media/icon.png"),
       shell: opts.shell
     });
     const note = noteWithWarnings(applied.note, warnings);
@@ -56709,8 +56987,8 @@ async function runSiteFunctionCli(opts) {
   const token = opts.token ?? await siteToken(msid);
   let source;
   if (opts.sourcePath) {
-    const p = resolve43(opts.cwd ?? process.cwd(), opts.sourcePath);
-    source = readFileSync66(p, "utf8");
+    const p = resolve44(opts.cwd ?? process.cwd(), opts.sourcePath);
+    source = readFileSync67(p, "utf8");
   }
   let body;
   if (opts.bodyRaw != null) {
@@ -56753,15 +57031,15 @@ var init_cli = __esm({
 });
 
 // src/wix-account.ts
-import { spawn as spawn4 } from "node:child_process";
-async function accountToken2(spawnImpl = spawn4) {
+import { spawn as spawn5 } from "node:child_process";
+async function accountToken2(spawnImpl = spawn5) {
   if (cached2) return cached2;
   const fromEnv = process.env.WIX_TEST_TOKEN?.trim();
   if (fromEnv) {
     cached2 = fromEnv;
     return fromEnv;
   }
-  const token = await new Promise((resolve45, reject) => {
+  const token = await new Promise((resolve46, reject) => {
     let child;
     try {
       child = spawnImpl("wix", ["token"]);
@@ -56790,7 +57068,7 @@ async function accountToken2(spawnImpl = spawn4) {
     const scan = (d) => {
       out += String(d);
       const m = out.match(TOKEN_RE2);
-      if (m) done(() => resolve45(m[0]));
+      if (m) done(() => resolve46(m[0]));
     };
     child.stdout?.on("data", scan);
     child.stderr?.on("data", scan);
@@ -56810,7 +57088,7 @@ function apiKeyAuth(env = process.env) {
   const accountId = env.WIX_ACCOUNT_ID?.trim();
   return key2 && accountId ? { key: key2, accountId } : void 0;
 }
-function accountTransport(fetchImpl = fetch, timeoutMs = DEFAULT_TIMEOUT_MS5, spawnImpl = spawn4) {
+function accountTransport(fetchImpl = fetch, timeoutMs = DEFAULT_TIMEOUT_MS5, spawnImpl = spawn5) {
   return async (method, path2, body) => {
     const viaKey = apiKeyAuth();
     const headers2 = viaKey ? { Authorization: viaKey.key, "wix-account-id": viaKey.accountId, Accept: "application/json" } : { Authorization: await accountToken2(spawnImpl), Accept: "application/json" };
@@ -56967,7 +57245,7 @@ __export(site_create_exports, {
   runSiteList: () => runSiteList,
   writeProvisioningBinding: () => writeProvisioningBinding
 });
-import { existsSync as existsSync56, readFileSync as readFileSync67, writeFileSync as writeFileSync25 } from "node:fs";
+import { existsSync as existsSync57, readFileSync as readFileSync68, writeFileSync as writeFileSync26 } from "node:fs";
 import { resolve as resolvePath2 } from "node:path";
 function oauthClientName(projectName) {
   return `${projectName} client`;
@@ -57116,7 +57394,7 @@ async function runSiteCreate(opts) {
   if (!wantOauthApp) return { ...base, nextSteps: nextSteps(metaSiteId) };
   return { ...base, clientId, redirectUri, nextSteps: nextSteps(metaSiteId, clientId) };
 }
-function writeProvisioningBinding(target, binding2, fs = { existsSync: existsSync56, readFileSync: readFileSync67, writeFileSync: writeFileSync25 }) {
+function writeProvisioningBinding(target, binding2, fs = { existsSync: existsSync57, readFileSync: readFileSync68, writeFileSync: writeFileSync26 }) {
   const msid = binding2.siteId;
   const path2 = resolvePath2(target);
   const committed = committedShellProvisioning(path2);
@@ -57789,11 +58067,11 @@ var init_context = __esm({
 });
 
 // src/cli.ts
-import { mkdtempSync as mkdtempSync4, readFileSync as readFileSync68, mkdirSync as mkdirSync28, writeFileSync as writeFileSync26, existsSync as existsSync57, rmSync as rmSync11, readdirSync as readdirSync26, statSync as statSync14, lstatSync as lstatSync6, accessSync, constants } from "node:fs";
-import { execFile as execFile4, execFileSync as execFileSync7, spawnSync as spawnSync5, spawn as spawn5 } from "node:child_process";
-import { createHash as createHash24, randomUUID as randomUUID3 } from "node:crypto";
+import { mkdtempSync as mkdtempSync4, readFileSync as readFileSync69, mkdirSync as mkdirSync29, writeFileSync as writeFileSync27, existsSync as existsSync58, rmSync as rmSync11, readdirSync as readdirSync26, statSync as statSync15, lstatSync as lstatSync6, accessSync, constants } from "node:fs";
+import { execFile as execFile4, execFileSync as execFileSync7, spawnSync as spawnSync5, spawn as spawn6 } from "node:child_process";
+import { createHash as createHash25, randomUUID as randomUUID3 } from "node:crypto";
 import { tmpdir as tmpdir5, homedir as homedir7, hostname } from "node:os";
-import { join as join53, resolve as resolve44, relative as relative8, basename as basename12, dirname as dirname32 } from "node:path";
+import { join as join54, resolve as resolve45, relative as relative9, basename as basename12, dirname as dirname32 } from "node:path";
 import { fileURLToPath as fileURLToPath24 } from "node:url";
 
 // ../serve-cli/src/client.ts
@@ -59505,7 +59783,7 @@ async function browserLogin(opts) {
   const log = opts.log ?? (() => {
   });
   const timeoutMs = opts.timeoutMs ?? DEFAULT_TIMEOUT_MS;
-  return await new Promise((resolve45, reject) => {
+  return await new Promise((resolve46, reject) => {
     let settled = false;
     let loginUrl = "";
     const server = createServer();
@@ -59569,7 +59847,7 @@ async function browserLogin(opts) {
           return;
         }
         res.writeHead(200, { "content-type": "text/html; charset=utf-8", "cache-control": "no-store", connection: "close" }).end(CLOSE_PAGE);
-        finish2(() => resolve45({ token, loginUrl }));
+        finish2(() => resolve46({ token, loginUrl }));
       });
     });
     server.on("error", (err) => finish2(() => reject(err)));
@@ -60935,7 +61213,7 @@ function writeAgentContext(targetDir) {
 // src/cli.ts
 init_wix_placeholders();
 var defaultIO = { log: (l) => console.log(l), error: (l) => console.error(l), isTTY: process.stdout.isTTY === true };
-var REPEATABLE_FLAGS = /* @__PURE__ */ new Set(["data"]);
+var REPEATABLE_FLAGS = /* @__PURE__ */ new Set(["data", "image"]);
 var BOOLEAN_FLAGS = /* @__PURE__ */ new Set([
   "browser",
   "no-open",
@@ -61002,7 +61280,8 @@ var BOOLEAN_FLAGS = /* @__PURE__ */ new Set([
   "refresh",
   "push-setup",
   "no-push-setup",
-  "apple-signing"
+  "apple-signing",
+  "notify"
 ]);
 var SHELL_ENUM = SHELL_NAMES2.join("|");
 var SWITCH_FLAGS = new Set([...BOOLEAN_FLAGS].filter((name) => name !== "deep"));
@@ -61071,8 +61350,8 @@ var str5 = (v) => typeof v === "string" ? v : void 0;
 var num = (v) => typeof v === "string" && v !== "" && Number.isFinite(Number(v)) ? Number(v) : void 0;
 function embeddedTemplateCatalog() {
   return availableTemplates().map((name) => {
-    const path2 = join53(templateSourceDir(name), TEMPLATE_META_FILE);
-    const meta = JSON.parse(readFileSync68(path2, "utf8"));
+    const path2 = join54(templateSourceDir(name), TEMPLATE_META_FILE);
+    const meta = JSON.parse(readFileSync69(path2, "utf8"));
     if (!meta || typeof meta.title !== "string" || typeof meta.description !== "string" || !Array.isArray(meta.tags)) {
       throw new Error(`${path2} must be { title: string, description: string, tags: string[], category?: string }`);
     }
@@ -61129,6 +61408,11 @@ var USAGE = `himi \u2014 the Himalaya authoring CLI (remote dev loop)
                                            verticals; zero network). Catches the wrong reducers
                                            validate/render pass (NaN totals, stuck skeletons, dead
                                            taps). Exit 1 on any error. Run it after every edit.
+  himi progress ["<message>" [--step <1-8|name>] [--image <png>]\u2026 [--notify]] [--content <dir>]
+                                           journal a postcard for the owner (.himi/progress.jsonl): what
+                                           changed, which journey step, and the image that shows it (copied
+                                           into .himi/history/ so later renders cannot replace it). Bare
+                                           prints the journal, the current step and the elapsed time.
   himi ux audit [--content <dir>] [--strict] [--json]
                                            inspect the mobile UX contract, template placeholders, app fixtures,
                                            and recorded iOS/Android audit evidence. Advisory by default; --strict
@@ -61673,6 +61957,7 @@ var COMMANDS = [
   { name: "validate", summary: "lint the content package (no push): fixed-contract TypeScript checking for tier5-src workers + schema/proto + token refs + component allowlist + $service bindings + strict-enum foot-guns + capability decls + worker boot dry-run + build/compile failures. Type issues are advisory warnings normally; --strict promotes them and hygiene warnings to errors. Exit 1 on any error. Off-repo, the CLI supplies its compiler and SDK declarations.", required: "[--content <dir>] [--strict]" },
   { name: "test", summary: "DERIVED behavioral crawl \u2014 no test files to write. Boots each screen's real worker, replays its onAppear, then dispatches every action site the descriptor already declares (each from a fresh boot) and checks a narrow set of unambiguous invariants: no uncaught throw, never stuck on `loading`, no `$service:` token or NaN/undefined/[object Object] reaching visible text, no binding aimed at state the worker never defines, no nav param silently dropped, no dead nav target. Catches what validate/render cannot \u2014 a WRONG REDUCER passes both with ok:true. Runs the worker in a DEVICE-PARITY sandbox (no setTimeout/setInterval, as on JSC/WebView) so a bundle that would die on device fails here. Crawls on HERMETIC DATA by default \u2014 zero network: the app's own dev/net-mocks.json first (--net <file> overrides), then the config's CMS `seed:` rows, then a canned fixture of frozen real vertical responses shipped with the CLI (exercises code paths, not API-contract truth) \u2014 so the success/mapping path runs, not just the failure UI. Two boot-only HOSTILE passes (every list empty; every request 500) then check the failure/empty day \u2014 corpus-proven, so their findings are errors. NAV EDGES are followed too: every himi.open site ($item params resolved against row 0 of its list, $service against worker state) and worker _nav directive is harvested, and each baked target is booted WITH the params the source sends \u2014 detail screens finally run their content arm; edge findings are errors tagged edge:<source>. --native runs both real native decoders over the exact baked JSON bytes; --native ios or --native android selects one. It is explicit, runs only from a Himalaya SOURCE CHECKOUT (the decoder oracles are that tree's own HimalayaCore Swift package and Gradle harness, which a published install does not ship), and needs the selected local toolchain. From a source checkout, default runs name missing native verdicts in the coverage ledger; elsewhere the ledger stays silent about them rather than offering a remedy you cannot run. --offline strips all data layers (the old reject-all axis); --no-hostile skips the hostile passes. --record (EXPLICIT, never automatic) refreshes dev/net-mocks.json from live reads first: it boots each screen (load + root onAppear ONLY \u2014 nothing the app's own launch would not fire; the tap/action crawl never sees the live transport, and only proven reads \u2014 GET, or read-shaped POST (/query, /search, /list*, \u2026) \u2014 ever reach the wire), freezes the round-trips, then crawls hermetically on the fresh fixture; record against a QA site, not production. Nodes it cannot judge headless are named, never silently passed. Exit 1 on any error. The CLI carries the authoring runtime off-repo; no per-app SDK install is required. --browser runs the whole loop (build \u2192 extract \u2192 validate \u2192 render \u2192 test) in YOUR browser instead of here, so the source never reaches a pod: it opens one screen's worker + descriptor in a tab, blocks on a loopback callback, and prints the report it posts back. One screen per tab \u2014 name it. --no-open prints the URL rather than launching a browser (SSH); --timeout <ms> bounds the wait, which matters because the page has no execution deadline of its own and an infinite loop in the worker hangs the tab.", required: "[<screenId>\u2026] [--content <dir>] [--net <file>] [--budget <ms>] [--deep [n]] [--record] [--native [ios|android]] [--no-shots] [--offline] [--no-hostile] [--all-screens] [--browser] [--no-open] [--timeout <ms>] [--json]" },
   { name: "ux", summary: "audit or record mobile UX evidence. `audit` checks the public-safe contract, seeded blank acceptance rows, placeholder source copy, app-specific mocks, and iOS/Android audit records. It warns while existing templates migrate; `--strict` promotes missing evidence. `record` stores checks performed on an installed iOS/Android build: `--checks` is required for passed|failed and empty for unavailable, which drove nothing and needs a `--reason` instead. `record` also STAMPS the release it audited (it resolves the id from a build, the same one a push would publish), because an unforced `himi push` of a release with screens refuses when no drive is recorded for THAT release, or when the one that is recorded says `failed` \u2014 the artifact stopped being advice nobody reads (#2955). `unavailable` still satisfies it; only `failed` refuses.", required: "audit [--content <dir>] [--strict] [--json] | record --content <dir> --platform ios|android --status passed|failed|unavailable [--checks back,keyboard,...] [--reason <text>]" },
+  { name: "progress", summary: 'the build JOURNAL an agent keeps for the owner while it works. `himi progress "<what changed>" --step <1-8|name> --image <png>` appends one postcard to .himi/progress.jsonl \u2014 the step is one of the customer journey\'s eight (discover, classify, plan, implement, brand, validate, review, download) \u2014 and COPIES each image, content-addressed, into .himi/history/, because .himi/shots/ is overwritten by every render and cleared by every full `himi test`, so a path into it would later show a different picture than the one the owner was sent. --image repeats. --notify also raises a best-effort desktop notification for an owner who stepped away. A bare `himi progress` prints the journal with the current step and elapsed time \u2014 also how an agent recovers its place after its context was compacted. Local only: nothing is sent anywhere.', required: '["<message>" [--step <1-8|name>] [--image <png>]\u2026 [--notify]] [--content <dir>]' },
   { name: "render", summary: "headless-render a screen with the web renderer: render-tree + diagnostics, optional --png <file>, --scheme dark, --tree. Local by default (content dir). Pass --remote --app --release to hit GET /v1/preview/\u2026/render on the serve plane after a push. Boots the worker so $service bindings resolve; --static raw bindings; --live real Wix fetches; --state injects worker state; --input supplies pre-boot navigation params; --width/--device for PNG viewport; --rtl for dir=rtl + $env:isRTL.", required: "<screenId> [--content <dir>] [--scheme dark] [--png <file>] [--tree] [--static] [--live] [--state <json|file>] [--input <json|file>] [--width <px> | --device <name>] [--rtl] [--remote --app --release]" },
   { name: "cms", summary: "inspect, provision, and seed the app's CMS (Wix Data) collections, declared as a `cms` block in config.ts. `query` is READ-ONLY \u2014 by default it fetches ONLY the physical ids `config.ts` declares (item counts + schema drift) and reports `siteScanned: false`; it never lists the site, so an UNDECLARED `himi_<app>_` collection this app owns is not reached without `--all`. `--all` SCANS the site \u2014 every collection it lists is labeled `owned`/`adopted`/`foreign`, and it describes every foreign one \u2014 id, non-system field keys + types, and the site's read role \u2014 so an app with no `cms` block at all can DISCOVER a collection to adopt (`--all` is the one case where a missing `cms` block is not 'nothing to do'). Foreign collections are described up to a cap and are never item-counted (`itemCount: null`), because a row count is one query each; `foreign.count` is how many the scan LISTED \u2014 it follows the list endpoint's pages, and `listingIncomplete: true` says when the walk stopped short of the end, with `unlistedCollections` counting what it left out when Wix gave a paging total \u2014 and `foreign.truncated` says how many of those went undescribed, each still NAMED in `foreign.others` (id + displayName), so a collection the site already has is never hidden behind the cap. The scan is OWNER-scoped \u2014 it needs --site <msid> (or WIX_SITE_ID) plus owner auth via `wix token`; a visitor token can read a public collection's ITEMS but can never enumerate collections, so there is no tokenless discovery path. `create` reconciles declared collections additively and idempotently, and REFUSES any id outside the app's `himi_<app>_` namespace, so it is safe against a production site. It reports declared-vs-site `permissionDrift` but never writes permissions unless asked with --apply-permissions, so a field reconcile can't silently revert access control changed in the dashboard. `seed` inserts the git-tracked `seed:` rows into EMPTY owned collections (--force to add to a non-empty one; --ai writes placeholder rows plus a refinement prompt for you to review). Adopted collections (declared by `wixId`) are read-only and never created, updated, or seeded. Site from --site <msid> or WIX_SITE_ID; owner auth via `wix token`.", required: "query|create|seed [--site <msid>] [--content <dir>] [--all] [--dry-run] [--force] [--allow-destructive] [--apply-permissions] [--only <id>] [--ai] [--count <n>]" },
   { name: "data", summary: "read-only plan or explicitly provision/seed declared KV and Wix Data resources. Preview and production are separate scopes. KV administration uses the operator data plane from --data-url/HIMI_DATA_ADMIN_URL and HIMI_DATA_ADMIN_TOKEN; draft push never calls it.", required: "plan|create|seed [--site <msid>] [--environment preview|production] [--content <dir>] [--data-url <url>] [--dry-run] [--force]" },
@@ -61721,7 +62006,7 @@ var COMMANDS = [
 ];
 function cliVersion() {
   try {
-    return JSON.parse(readFileSync68(new URL("../package.json", import.meta.url), "utf8")).version ?? "unknown";
+    return JSON.parse(readFileSync69(new URL("../package.json", import.meta.url), "utf8")).version ?? "unknown";
   } catch {
     return "unknown";
   }
@@ -61772,16 +62057,16 @@ function createScopedRegistryResolver(exec = execNpmConfig) {
 }
 var SCOPED_REGISTRY_TIMEOUT_MS = 5e3;
 function execNpmConfig(file, args, options) {
-  return new Promise((resolve45, reject) => {
-    execFile4(file, args, { ...options, windowsHide: true }, (error, stdout) => error ? reject(error) : resolve45(String(stdout)));
+  return new Promise((resolve46, reject) => {
+    execFile4(file, args, { ...options, windowsHide: true }, (error, stdout) => error ? reject(error) : resolve46(String(stdout)));
   });
 }
 var npmScopedWixRegistry = createScopedRegistryResolver();
 async function scopedRegistryBefore(lookup2, deadline) {
   let cancel = () => {
   };
-  const expired = new Promise((resolve45) => {
-    const timer = setTimeout(() => resolve45(void 0), Math.max(0, deadline - Date.now()));
+  const expired = new Promise((resolve46) => {
+    const timer = setTimeout(() => resolve46(void 0), Math.max(0, deadline - Date.now()));
     cancel = () => clearTimeout(timer);
   });
   try {
@@ -61839,16 +62124,16 @@ function ageInDays(publishedAt, now = Date.now()) {
 }
 function packageVersion(path2) {
   try {
-    const version2 = JSON.parse(readFileSync68(path2, "utf8")).version;
+    const version2 = JSON.parse(readFileSync69(path2, "utf8")).version;
     return typeof version2 === "string" && version2 ? version2 : void 0;
   } catch {
     return void 0;
   }
 }
 function resolvedSdkVersion(fromDir = process.cwd(), bundledManifest = new URL("./authoring-runtime/node_modules/@wix/himalaya/package.json", import.meta.url)) {
-  let dir = resolve44(fromDir);
+  let dir = resolve45(fromDir);
   for (; ; ) {
-    const version2 = packageVersion(join53(dir, "node_modules", "@wix", "himalaya", "package.json"));
+    const version2 = packageVersion(join54(dir, "node_modules", "@wix", "himalaya", "package.json"));
     if (version2) return { version: version2, source: "local" };
     const parent = dirname32(dir);
     if (parent === dir) break;
@@ -61858,7 +62143,7 @@ function resolvedSdkVersion(fromDir = process.cwd(), bundledManifest = new URL("
   if (bundled) return { version: bundled, source: "bundled" };
   try {
     const root = execFileSync7("npm", ["root", "-g"], { stdio: ["ignore", "pipe", "ignore"] }).toString().trim();
-    const version2 = root ? packageVersion(join53(root, "@wix", "himalaya", "package.json")) : void 0;
+    const version2 = root ? packageVersion(join54(root, "@wix", "himalaya", "package.json")) : void 0;
     return version2 ? { version: version2, source: "global" } : {};
   } catch {
     return {};
@@ -61905,11 +62190,11 @@ var UPDATE_RETRY_AFTER_FAILURE_MS = 60 * 60 * 1e3;
 var UPDATE_SNOOZE_MS = 24 * 60 * 60 * 1e3;
 var UPDATE_REEXEC_ENV = "HIMI_UPDATED_ONCE";
 function updateCachePath(env = process.env) {
-  return env.HIMI_UPDATE_CACHE_FILE ?? join53(homedir7(), ".himalaya", "update-check.json");
+  return env.HIMI_UPDATE_CACHE_FILE ?? join54(homedir7(), ".himalaya", "update-check.json");
 }
 function readUpdateCache(path2) {
   try {
-    const parsed = JSON.parse(readFileSync68(path2, "utf8"));
+    const parsed = JSON.parse(readFileSync69(path2, "utf8"));
     return parsed && typeof parsed === "object" ? parsed : {};
   } catch {
     return {};
@@ -61917,8 +62202,8 @@ function readUpdateCache(path2) {
 }
 function writeUpdateCache(path2, cache) {
   try {
-    mkdirSync28(dirname32(path2), { recursive: true, mode: 448 });
-    writeFileSync26(path2, JSON.stringify(cache, null, 2) + "\n", { mode: 384 });
+    mkdirSync29(dirname32(path2), { recursive: true, mode: 448 });
+    writeFileSync27(path2, JSON.stringify(cache, null, 2) + "\n", { mode: 384 });
   } catch {
   }
 }
@@ -61959,12 +62244,12 @@ function npmInstallArgs(registry, version2) {
   return ["i", "-g", `${CLI_PACKAGE}@${version2}`, `--registry=${pinned}`, `--@wix:registry=${pinned}`];
 }
 var INSTALLABLE_SPEC = /^(?:latest|\d+\.\d+\.\d+(?:[-+][0-9A-Za-z.-]+)?)$/;
-function createUpdateRunner(spawn6 = spawnSync5) {
+function createUpdateRunner(spawn7 = spawnSync5) {
   return {
     install: async (registry, version2) => {
       if (!isTrustedRegistry(registry)) return { ok: false, detail: `refusing untrusted registry ${registry}` };
       if (!INSTALLABLE_SPEC.test(version2)) return { ok: false, detail: `refusing install spec ${JSON.stringify(version2)}` };
-      const result = spawn6("npm", npmInstallArgs(registry, version2), {
+      const result = spawn7("npm", npmInstallArgs(registry, version2), {
         // npm's stdout goes to OUR stderr: in `himi <cmd> --json | jq` (and `himi upgrade --json`) its
         // "added 212 packages" would otherwise land in stdout ahead of the envelope and break the
         // parse — the agent case this whole feature exists for (#2985 review). And no stdin: an
@@ -61977,12 +62262,12 @@ function createUpdateRunner(spawn6 = spawnSync5) {
     },
     installedVersion: () => {
       const root = globalNodeModulesRoot();
-      return root ? packageVersion(join53(root, "@wix", "himalaya-cli", "package.json")) : void 0;
+      return root ? packageVersion(join54(root, "@wix", "himalaya-cli", "package.json")) : void 0;
     },
     reexec: (argv) => {
       const root = globalNodeModulesRoot();
-      const entry = root ? join53(root, "@wix", "himalaya-cli", "dist", "cli.mjs") : void 0;
-      if (!entry || !existsSync57(entry)) return void 0;
+      const entry = root ? join54(root, "@wix", "himalaya-cli", "dist", "cli.mjs") : void 0;
+      if (!entry || !existsSync58(entry)) return void 0;
       const result = spawnSync5(process.execPath, [entry, ...argv], {
         // inherit keeps PIPED STDIN working — commands that read stdin must survive a re-exec.
         stdio: "inherit",
@@ -62029,7 +62314,7 @@ function staleUpdateLockFile(cachePath, now) {
   for (const path2 of [`${cachePath}.lock.break`, `${cachePath}.lock`]) {
     let content;
     try {
-      content = readFileSync68(path2, "utf8");
+      content = readFileSync69(path2, "utf8");
     } catch {
       continue;
     }
@@ -62037,7 +62322,7 @@ function staleUpdateLockFile(cachePath, now) {
     let since = stamped;
     if (!Number.isFinite(since)) {
       try {
-        since = statSync14(path2).mtimeMs;
+        since = statSync15(path2).mtimeMs;
       } catch {
         continue;
       }
@@ -62052,14 +62337,14 @@ function acquireUpdateLock(cachePath, now, hooks = {}) {
   const mine = lockStamp(now);
   const readLock = (path2) => {
     try {
-      return readFileSync68(path2, "utf8");
+      return readFileSync69(path2, "utf8");
     } catch {
       return void 0;
     }
   };
   const tryCreate = (path2) => {
     try {
-      writeFileSync26(path2, mine, { flag: "wx", mode: 384 });
+      writeFileSync27(path2, mine, { flag: "wx", mode: 384 });
       return true;
     } catch {
       return false;
@@ -62073,7 +62358,7 @@ function acquireUpdateLock(cachePath, now, hooks = {}) {
   };
   const release = () => removeIfMine(lockPath);
   try {
-    mkdirSync28(dirname32(lockPath), { recursive: true, mode: 448 });
+    mkdirSync29(dirname32(lockPath), { recursive: true, mode: 448 });
   } catch {
     return () => {
     };
@@ -62137,7 +62422,7 @@ function supersededInCache(current, latest, now) {
   const checkedAt = current.checkedAt ? Date.parse(current.checkedAt) : Number.NaN;
   return Number.isFinite(checkedAt) && now - checkedAt < UPDATE_CHECK_INTERVAL_MS;
 }
-function createUpdateRefreshSpawner(spawnFn = spawn5, execArgv = process.execArgv) {
+function createUpdateRefreshSpawner(spawnFn = spawn6, execArgv = process.execArgv) {
   return () => {
     try {
       const child = spawnFn(process.execPath, [...loaderArgs(execArgv), fileURLToPath24(import.meta.url), UPDATE_REFRESH_COMMAND], {
@@ -62590,9 +62875,9 @@ function executableOnPath(name, env = process.env) {
   const suffixes = process.platform === "win32" ? (env.PATHEXT ?? ".COM;.EXE;.BAT;.CMD").split(";").filter(Boolean) : [""];
   for (const dir of entries) {
     for (const suffix of suffixes) {
-      const candidate = join53(dir, `${name}${suffix}`);
+      const candidate = join54(dir, `${name}${suffix}`);
       try {
-        if (!statSync14(candidate).isFile()) continue;
+        if (!statSync15(candidate).isFile()) continue;
         if (process.platform !== "win32") accessSync(candidate, constants.X_OK);
         return true;
       } catch {
@@ -62699,7 +62984,7 @@ async function nativeConfigAdvisories(app, configSource) {
     const { iosProjectYml: iosProjectYml2 } = await Promise.resolve().then(() => (init_paths(), paths_exports));
     const { androidOptedIn: androidOptedIn3, LABEL_IOS_SPLASH: LABEL_IOS_SPLASH2 } = await Promise.resolve().then(() => (init_splash(), splash_exports));
     const iosYmlPath = iosProjectYml2(app);
-    const iosYml = existsSync57(iosYmlPath) ? readFileSync68(iosYmlPath, "utf8") : "";
+    const iosYml = existsSync58(iosYmlPath) ? readFileSync69(iosYmlPath, "utf8") : "";
     let optedIn = iosYml.includes(LABEL_IOS_SPLASH2);
     if (!optedIn) {
       const { androidManifestPath: androidManifestPath3 } = await Promise.resolve().then(() => (init_gen_native_config(), gen_native_config_exports));
@@ -62713,19 +62998,19 @@ async function nativeConfigAdvisories(app, configSource) {
 }
 function readConfigSource(dir) {
   try {
-    return readFileSync68(join53(dir, "config.ts"), "utf8");
+    return readFileSync69(join54(dir, "config.ts"), "utf8");
   } catch {
     return null;
   }
 }
 function writePngFile(path2, base64) {
-  mkdirSync28(dirname32(path2), { recursive: true });
-  writeFileSync26(path2, Buffer.from(base64, "base64"));
+  mkdirSync29(dirname32(path2), { recursive: true });
+  writeFileSync27(path2, Buffer.from(base64, "base64"));
   return path2;
 }
 async function initFromRemoteTemplate(name, parentDir, template, c) {
-  const dir = resolve44(parentDir, name);
-  if (existsSync57(join53(dir, "himalaya.content.json"))) {
+  const dir = resolve45(parentDir, name);
+  if (existsSync58(join54(dir, "himalaya.content.json"))) {
     throw new Error(`content package already exists at ${dir}`);
   }
   const r = await c.fetchTemplateSource(TEMPLATE_APP_PREFIX + template);
@@ -62737,7 +63022,7 @@ async function initFromRemoteTemplate(name, parentDir, template, c) {
   return finishScaffold(materializeSource(archive.files, name, dir), template);
 }
 function contentDir(flags) {
-  return resolve44(str5(flags.content) ?? process.cwd());
+  return resolve45(str5(flags.content) ?? process.cwd());
 }
 function renameRestoredSource(restored, declaredApp, renamed) {
   const text4 = {};
@@ -62768,8 +63053,8 @@ function symlinkDestinationIssue(dest) {
 function restoreDestinationIssue(dest, force) {
   const link = symlinkDestinationIssue(dest);
   if (link) return link;
-  if (!existsSync57(dest)) return null;
-  if (!statSync14(dest).isDirectory()) {
+  if (!existsSync58(dest)) return null;
+  if (!statSync15(dest).isDirectory()) {
     return { error: `${dest} exists and is not a directory`, hint: "pass --out/--name to land somewhere else, or remove the file" };
   }
   if (readdirSync26(dest).length > 0 && !force) {
@@ -62781,9 +63066,9 @@ function restoreDestinationIssue(dest, force) {
   return null;
 }
 function isHimalayaMonorepoCheckout(start) {
-  let dir = resolve44(start);
+  let dir = resolve45(start);
   for (; ; ) {
-    if (existsSync57(join53(dir, "tools", "himi-cli", "src", "cli.ts")) && existsSync57(join53(dir, "core", "serve", "src", "server.ts"))) return true;
+    if (existsSync58(join54(dir, "tools", "himi-cli", "src", "cli.ts")) && existsSync58(join54(dir, "core", "serve", "src", "server.ts"))) return true;
     const parent = dirname32(dir);
     if (parent === dir) return false;
     dir = parent;
@@ -62825,8 +63110,8 @@ function materializeForPreview(appDir2, slug, displayName) {
   const forBuild = Object.fromEntries(
     Object.entries(files).map(([rel, body]) => [rel, rel === "himalaya.content.json" ? substituteIdentity(body, slug) : body])
   );
-  const repoRoot2 = resolve44(fileURLToPath24(new URL("../../..", import.meta.url)));
-  const root = join53(repoRoot2, "node_modules", ".cache", "himi-template-preview");
+  const repoRoot2 = resolve45(fileURLToPath24(new URL("../../..", import.meta.url)));
+  const root = join54(repoRoot2, "node_modules", ".cache", "himi-template-preview");
   const stillRunning = (pid) => {
     try {
       process.kill(pid, 0);
@@ -62840,21 +63125,21 @@ function materializeForPreview(appDir2, slug, displayName) {
       if (!entry.isDirectory()) continue;
       const pid = Number(entry.name.startsWith(`${slug}-`) ? entry.name.slice(slug.length + 1) : NaN);
       if (Number.isInteger(pid) && pid > 0 && pid !== process.pid && !stillRunning(pid)) {
-        rmSync11(join53(root, entry.name), { recursive: true, force: true });
+        rmSync11(join54(root, entry.name), { recursive: true, force: true });
       }
     }
   } catch {
   }
-  const dest = join53(root, `${slug}-${process.pid}`);
+  const dest = join54(root, `${slug}-${process.pid}`);
   rmSync11(dest, { recursive: true, force: true });
-  mkdirSync28(dest, { recursive: true });
+  mkdirSync29(dest, { recursive: true });
   materializeSource(forBuild, displayName, dest, slug);
   return dest;
 }
 async function appId(dir) {
   try {
-    const { readFileSync: readFileSync69 } = await import("node:fs");
-    const m = JSON.parse(readFileSync69(join53(dir, "himalaya.content.json"), "utf8"));
+    const { readFileSync: readFileSync70 } = await import("node:fs");
+    const m = JSON.parse(readFileSync70(join54(dir, "himalaya.content.json"), "utf8"));
     if (m.name) return m.name;
   } catch {
   }
@@ -62862,8 +63147,8 @@ async function appId(dir) {
 }
 async function contentVisibility(dir) {
   try {
-    const { readFileSync: readFileSync69 } = await import("node:fs");
-    const m = JSON.parse(readFileSync69(join53(dir, "himalaya.content.json"), "utf8"));
+    const { readFileSync: readFileSync70 } = await import("node:fs");
+    const m = JSON.parse(readFileSync70(join54(dir, "himalaya.content.json"), "utf8"));
     if (m.visibility === "public" || m.visibility === "unlisted") return m.visibility;
   } catch {
   }
@@ -63065,7 +63350,7 @@ Seed your coding agent with \`himi agent-init\`. Guides: ${idx.portalUrl}`);
       return 0;
     }
     case "agent-init": {
-      const dir = resolve44(str5(flags.dir) ?? process.cwd());
+      const dir = resolve45(str5(flags.dir) ?? process.cwd());
       const res = writeAgentContext(dir);
       print({ ok: true, dir: res.dir, files: res.files, portalUrl: idx.portalUrl });
       return 0;
@@ -63087,7 +63372,7 @@ async function recordedReleaseForContentQuietly(dir, resolution, onDrift) {
   try {
     const { buildContentForValidation: buildContentForValidation2, buildReleaseFromContent: buildReleaseFromContent2, bundleOutDir: bundleOutDir2 } = await loadAuthoring();
     const bres = await buildContentForValidation2(dir, { resolution });
-    out = mkdtempSync4(join53(tmpdir5(), "himi-ux-record-"));
+    out = mkdtempSync4(join54(tmpdir5(), "himi-ux-record-"));
     const hasWorkers = bres.built.length > 0 || bres.compileErrors.length > 0;
     const outcome = await buildReleaseFromContent2(dir, out, { ...hasWorkers ? { tier5Dir: bundleOutDir2(dir) } : {}, collect: { lint: true } });
     const releaseId = outcome.manifest.releaseId;
@@ -63265,7 +63550,7 @@ async function producedWidgetFamilies(dir) {
     let js;
     for (const candidate of [`${name}.bundle.js`, `${name}.js`, name]) {
       try {
-        js = readFileSync68(join53(outDir, candidate), "utf8");
+        js = readFileSync69(join54(outDir, candidate), "utf8");
         break;
       } catch {
       }
@@ -63541,7 +63826,7 @@ himi v${cliVersion()} \u2014 run \`himi --version\`. If authoring commands fail
           return 2;
         }
         const template = str5(flags.template);
-        const parentDir = resolve44(str5(flags.dir) ?? process.cwd());
+        const parentDir = resolve45(str5(flags.dir) ?? process.cwd());
         if (template && flags.remote === true) {
           try {
             const res2 = await initFromRemoteTemplate(name, parentDir, template, client2());
@@ -63658,11 +63943,11 @@ himi v${cliVersion()} \u2014 run \`himi --version\`. If authoring commands fail
           return outcome.code;
         }
         if (sub === "publish") {
-          const appDir2 = resolve44(str5(flags.dir) ?? process.cwd());
-          const sourceDir = resolve44(str5(flags["source-dir"]) ?? appDir2);
+          const appDir2 = resolve45(str5(flags.dir) ?? process.cwd());
+          const sourceDir = resolve45(str5(flags["source-dir"]) ?? appDir2);
           let meta;
           try {
-            meta = JSON.parse(readFileSync68(join53(sourceDir, TEMPLATE_META_FILE), "utf8"));
+            meta = JSON.parse(readFileSync69(join54(sourceDir, TEMPLATE_META_FILE), "utf8"));
           } catch {
             io.error(JSON.stringify({ error: `no ${TEMPLATE_META_FILE} in ${sourceDir} \u2014 a template must declare { title, description, tags } to be published`, hint: `add ${TEMPLATE_META_FILE} next to himalaya.content.json (or pass --source-dir <dir>)` }));
             return 2;
@@ -63672,7 +63957,7 @@ himi v${cliVersion()} \u2014 run \`himi --version\`. If authoring commands fail
             return 2;
           }
           try {
-            const appearance = extractTemplateAppearance(JSON.parse(readFileSync68(join53(sourceDir, "tokens.json"), "utf8")));
+            const appearance = extractTemplateAppearance(JSON.parse(readFileSync69(join54(sourceDir, "tokens.json"), "utf8")));
             meta = { ...appearance, ...meta };
           } catch {
           }
@@ -63684,13 +63969,13 @@ himi v${cliVersion()} \u2014 run \`himi --version\`. If authoring commands fail
           const force = flags.force === true;
           const { buildContentForValidation: buildContentForValidation2, buildReleaseFromContent: buildReleaseFromContent2, bundleOutDir: bundleOutDir2 } = await loadAuthoring();
           const bres = await buildContentForValidation2(buildDir, { resolution: resolutionFlag(flags) });
-          const out = mkdtempSync4(join53(tmpdir5(), "himi-template-"));
+          const out = mkdtempSync4(join54(tmpdir5(), "himi-template-"));
           const hasWorkers = bres.built.length > 0 || bres.compileErrors.length > 0;
           const outcome = await buildReleaseFromContent2(buildDir, out, {
             ...hasWorkers ? { tier5Dir: bundleOutDir2(buildDir) } : {},
             collect: { lint: true, strict }
           });
-          const scaffoldSourceFindings = resolve44(sourceDir) === resolve44(appDir2) ? [] : [
+          const scaffoldSourceFindings = resolve45(sourceDir) === resolve45(appDir2) ? [] : [
             ...tokenColorIssues(sourceDir),
             ...surfaceIssues(sourceDir, void 0, strict),
             ...await fontIssues(sourceDir, strict),
@@ -63733,13 +64018,13 @@ himi v${cliVersion()} \u2014 run \`himi --version\`. If authoring commands fail
             }));
             return 1;
           }
-          const iconPath = str5(flags.icon) ? resolve44(str5(flags.icon)) : templateIconPath(name);
+          const iconPath = str5(flags.icon) ? resolve45(str5(flags.icon)) : templateIconPath(name);
           let iconHash;
           if (iconPath) {
             try {
-              const bytes2 = readFileSync68(iconPath);
+              const bytes2 = readFileSync69(iconPath);
               payload.icon = bytes2.toString("base64");
-              iconHash = createHash24("sha256").update(bytes2).digest("hex");
+              iconHash = createHash25("sha256").update(bytes2).digest("hex");
             } catch {
             }
           }
@@ -63970,7 +64255,7 @@ himi v${cliVersion()} \u2014 run \`himi --version\`. If authoring commands fail
         const { navIssues: navIssues2 } = await Promise.resolve().then(() => (init_nav_lint(), nav_lint_exports));
         const { buildContentForValidation: buildContentForValidation2, buildReleaseFromContent: buildReleaseFromContent2, bundleOutDir: bundleOutDir2 } = await loadAuthoring();
         const bres = await buildContentForValidation2(dir, { resolution: resolutionFlag(flags) });
-        const out = mkdtempSync4(join53(tmpdir5(), "himi-validate-"));
+        const out = mkdtempSync4(join54(tmpdir5(), "himi-validate-"));
         const hasWorkers = bres.built.length > 0 || bres.compileErrors.length > 0;
         const outcome = await buildReleaseFromContent2(dir, out, {
           ...hasWorkers ? { tier5Dir: bundleOutDir2(dir) } : {},
@@ -64007,7 +64292,7 @@ himi v${cliVersion()} \u2014 run \`himi --version\`. If authoring commands fail
           const path2 = dpxSessionTokenPath();
           let raw;
           try {
-            raw = readFileSync68(path2, "utf8");
+            raw = readFileSync69(path2, "utf8");
           } catch {
             throw new Error(`no DPX BO session at ${path2}; run dpx auth login, write dpx auth token to that path, then himi login --dpx --target bo`);
           }
@@ -64124,6 +64409,49 @@ himi v${cliVersion()} \u2014 run \`himi --version\`. If authoring commands fail
         print({ ok: invoked.response.ok, app: loaded.app, releaseId: invoked.releaseId, status: invoked.response.status, body });
         return invoked.response.ok ? 0 : 1;
       }
+      case "progress": {
+        const { appendProgress: appendProgress2, readProgress: readProgress2, summarizeProgress: summarizeProgress2, parseStep: parseStep2, notifyDesktop: notifyDesktop2, appLabel: appLabel2, journalPath: journalPath2, ProgressError: ProgressError2, JOURNEY_STEPS: JOURNEY_STEPS2 } = await Promise.resolve().then(() => (init_progress(), progress_exports));
+        const dir = contentDir(flags);
+        const journal = journalPath2(dir);
+        const hint = existsSync58(join54(dir, "himalaya.content.json")) ? {} : { hint: "no himalaya.content.json here \u2014 run from the app directory (or pass --content <dir>) so the build board finds this journal" };
+        const message = pos.slice(1).join(" ").trim();
+        if (!message) {
+          if (flags.step !== void 0 || flags.image !== void 0 || flags.notify === true) {
+            io.error(JSON.stringify({ ok: false, error: "message_required", hint: 'progress "<what changed>" --step <n> --image <png>' }));
+            return 2;
+          }
+          const { entries, skipped } = readProgress2(dir);
+          print({ ok: true, journal, ...summarizeProgress2(entries), entries, ...skipped ? { skipped } : {}, ...hint });
+          return 0;
+        }
+        let step;
+        if (flags.step !== void 0) {
+          step = typeof flags.step === "string" ? parseStep2(flags.step) : null;
+          if (!step) {
+            io.error(JSON.stringify({ ok: false, error: "invalid_step", got: flags.step, expected: `1-8 or ${JOURNEY_STEPS2.join("|")}` }));
+            return 2;
+          }
+        }
+        const rawImages = flags.image;
+        const images = rawImages === void 0 ? [] : Array.isArray(rawImages) ? rawImages : typeof rawImages === "string" ? [rawImages] : null;
+        if (!images) {
+          io.error(JSON.stringify({ ok: false, error: "image_path_required", hint: "--image <png>, repeatable" }));
+          return 2;
+        }
+        try {
+          const entry = appendProgress2(dir, { message, ...step ? { step } : {}, images });
+          const notified = flags.notify === true ? await notifyDesktop2(`himi \xB7 ${appLabel2(dir) ?? "your app"}`, message) : void 0;
+          const { count } = summarizeProgress2(readProgress2(dir).entries);
+          print({ ok: true, entry, journal, count, ...notified === void 0 ? {} : { notified }, ...hint });
+          return 0;
+        } catch (e) {
+          if (e instanceof ProgressError2) {
+            io.error(JSON.stringify({ ok: false, error: e.code, message: e.message }));
+            return 2;
+          }
+          throw e;
+        }
+      }
       case "ux": {
         const sub = pos[1] ?? "audit";
         const dir = contentDir(flags);
@@ -64177,7 +64505,7 @@ himi v${cliVersion()} \u2014 run \`himi --version\`. If authoring commands fail
       case "test": {
         const dir = contentDir(flags);
         const structuredOutput = flags.json === true || io.isTTY !== true;
-        if (existsSync57(join53(dir, "functions"))) {
+        if (existsSync58(join54(dir, "functions"))) {
           const { invokeLocalFunction: invokeLocalFunction2, loadFunctionsApp: loadFunctionsApp2 } = await Promise.resolve().then(() => (init_functions(), functions_exports));
           const loaded = await loadFunctionsApp2(dir);
           const results = [];
@@ -64264,7 +64592,7 @@ himi v${cliVersion()} \u2014 run \`himi --version\`. If authoring commands fail
           }
         }
         const bres = await buildContentBundles2(dir, { resolution: resolutionFlag(flags) });
-        const out = mkdtempSync4(join53(tmpdir5(), "himi-test-"));
+        const out = mkdtempSync4(join54(tmpdir5(), "himi-test-"));
         const hasWorkers = bres.built.length > 0 || bres.compileErrors.length > 0;
         const outcome = await buildReleaseFromContent2(dir, out, {
           ...hasWorkers ? { tier5Dir: bundleOutDir2(dir) } : {},
@@ -64309,7 +64637,7 @@ himi v${cliVersion()} \u2014 run \`himi --version\`. If authoring commands fail
             io.error(JSON.stringify({ error: `screen "${screen.screenId}" has no Tier-5 worker, so there is nothing for the browser loop to build` }));
             return 2;
           }
-          const sources = collectWorkerSources2(join53(dir, "tier5-src"), screen.bundleName);
+          const sources = collectWorkerSources2(join54(dir, "tier5-src"), screen.bundleName);
           if (!sources) {
             io.error(JSON.stringify({ error: `no worker source found at tier5-src/${screen.bundleName} \u2014 the browser loop compiles SOURCE, not the built bundle` }));
             return 2;
@@ -64470,7 +64798,7 @@ himi v${cliVersion()} \u2014 run \`himi --version\`. If authoring commands fail
             const sp = await runShotsPass2({
               descriptors: scopeDescriptors2(outcome.descriptors ?? [], pos.slice(1), invalidScreens),
               tokens: outcome.tokens,
-              outDir: join53(dir, ".himi", "shots"),
+              outDir: join54(dir, ".himi", "shots"),
               width: 390,
               layers: { rules: shotRules, ...cmsSeed ? { cmsSeed } : {}, ...canned ? { canned: canned.byKey } : {} },
               ...budgetMs ? { budgetMs } : {},
@@ -64508,7 +64836,7 @@ himi v${cliVersion()} \u2014 run \`himi --version\`. If authoring commands fail
           releaseId: result.releaseId,
           releasePayload: release,
           descriptors: attestedDescriptors,
-          screenshots: Object.fromEntries(writtenShots.filter((name) => crawledScreens.has(name.replace(/\.png$/, ""))).map((name) => [name.replace(/\.png$/, ""), join53(dir, ".himi", "shots", name)])),
+          screenshots: Object.fromEntries(writtenShots.filter((name) => crawledScreens.has(name.replace(/\.png$/, ""))).map((name) => [name.replace(/\.png$/, ""), join54(dir, ".himi", "shots", name)])),
           coverage: {
             screens: crawledScreens.size,
             actionsDispatched: result.actions.exercised,
@@ -64597,7 +64925,7 @@ himi v${cliVersion()} \u2014 run \`himi --version\`. If authoring commands fail
             return 2;
           }
           try {
-            const raw = stateArg.trim().startsWith("{") ? stateArg : readFileSync68(stateArg.replace(/^@/, ""), "utf8");
+            const raw = stateArg.trim().startsWith("{") ? stateArg : readFileSync69(stateArg.replace(/^@/, ""), "utf8");
             injectedState = JSON.parse(raw);
           } catch (e) {
             io.error(JSON.stringify({ error: `--state must be inline JSON or a path to a .json file \u2014 ${e.message}` }));
@@ -64612,7 +64940,7 @@ himi v${cliVersion()} \u2014 run \`himi --version\`. If authoring commands fail
             return 2;
           }
           try {
-            const raw = inputArg.trim().startsWith("{") ? inputArg : readFileSync68(inputArg.replace(/^@/, ""), "utf8");
+            const raw = inputArg.trim().startsWith("{") ? inputArg : readFileSync69(inputArg.replace(/^@/, ""), "utf8");
             const parsed = JSON.parse(raw);
             if (!parsed || typeof parsed !== "object" || Array.isArray(parsed)) throw new Error("must be a JSON object");
             injectedInput = parsed;
@@ -64661,7 +64989,7 @@ himi v${cliVersion()} \u2014 run \`himi --version\`. If authoring commands fail
         }
         const { buildContentBundles: buildContentBundles2, buildReleaseFromContent: buildReleaseFromContent2, bundleOutDir: bundleOutDir2 } = await loadAuthoring();
         const bres = await buildContentBundles2(dir, { resolution: resolutionFlag(flags) });
-        const out = mkdtempSync4(join53(tmpdir5(), "himi-render-"));
+        const out = mkdtempSync4(join54(tmpdir5(), "himi-render-"));
         const hasWorkers = bres.built.length > 0 || bres.compileErrors.length > 0;
         const outcome = await buildReleaseFromContent2(dir, out, {
           ...hasWorkers ? { tier5Dir: bundleOutDir2(dir) } : {},
@@ -64677,7 +65005,7 @@ himi v${cliVersion()} \u2014 run \`himi --version\`. If authoring commands fail
         let attestationPngFile;
         if (typeof flags.png === "string" && r.pngBase64) {
           pngFile = writePngFile(str5(flags.png), r.pngBase64);
-          attestationPngFile = writePngFile(join53(dir, ".himi", "shots", `${screenId}.png`), r.pngBase64);
+          attestationPngFile = writePngFile(join54(dir, ".himi", "shots", `${screenId}.png`), r.pngBase64);
         }
         if (renderWidth !== void 0 && r.renderable) {
           recordRenderWidth(dir, {
@@ -65001,7 +65329,7 @@ default (no --glyph): ${DEFAULT_GLYPH2} \u2014 a mark that claims nothing, so th
           return 2;
         }
         const renamed = str5(flags.name);
-        const dest = resolve44(str5(flags.out) ?? process.cwd(), renamed ?? wanted);
+        const dest = resolve45(str5(flags.out) ?? process.cwd(), renamed ?? wanted);
         const replace = flags.replace === true;
         const force = replace || flags.force === true;
         const linked = symlinkDestinationIssue(dest);
@@ -65009,8 +65337,8 @@ default (no --glyph): ${DEFAULT_GLYPH2} \u2014 a mark that claims nothing, so th
           io.error(JSON.stringify(linked));
           return 1;
         }
-        if (existsSync57(dest)) {
-          if (!statSync14(dest).isDirectory()) {
+        if (existsSync58(dest)) {
+          if (!statSync15(dest).isDirectory()) {
             io.error(JSON.stringify({
               error: `${dest} exists and is not a directory`,
               hint: "pass --out/--name to land somewhere else, or remove the file"
@@ -65022,7 +65350,7 @@ default (no --glyph): ${DEFAULT_GLYPH2} \u2014 a mark that claims nothing, so th
             io.error(JSON.stringify({ error: `${dest} already exists and is not empty`, hint: "pass --force to write into it anyway (merging, and naming what it keeps), --replace to restore exactly what was archived, or --out/--name to land somewhere else" }));
             return 1;
           }
-          if (replace && occupied && !existsSync57(join53(dest, "himalaya.content.json"))) {
+          if (replace && occupied && !existsSync58(join54(dest, "himalaya.content.json"))) {
             io.error(JSON.stringify({
               error: `${dest} is not a content package \u2014 refusing to --replace it`,
               hint: "--replace only clears a directory that holds himalaya.content.json. Check --out/--name, or pass --force to merge into it instead."
@@ -65161,7 +65489,7 @@ default (no --glyph): ${DEFAULT_GLYPH2} \u2014 a mark that claims nothing, so th
         const force = flags.force === true;
         const { buildContentForValidation: buildContentForValidation2, buildReleaseFromContent: buildReleaseFromContent2, bundleOutDir: bundleOutDir2 } = await loadAuthoring();
         const bres = await buildContentForValidation2(dir, { resolution: resolutionFlag(flags) });
-        const out = mkdtempSync4(join53(tmpdir5(), "himi-push-"));
+        const out = mkdtempSync4(join54(tmpdir5(), "himi-push-"));
         const hasWorkers = bres.built.length > 0 || bres.compileErrors.length > 0;
         const outcome = await buildReleaseFromContent2(dir, out, {
           ...hasWorkers ? { tier5Dir: bundleOutDir2(dir) } : {},
@@ -65187,7 +65515,7 @@ default (no --glyph): ${DEFAULT_GLYPH2} \u2014 a mark that claims nothing, so th
         const manifest = outcome.manifest;
         const payload = await loadReleaseFromDir(declared, out);
         const { shellQuote: shellQuote2 } = await Promise.resolve().then(() => (init_shell_quote(), shell_quote_exports));
-        const contentRel = relative8(process.cwd(), dir) || ".";
+        const contentRel = relative9(process.cwd(), dir) || ".";
         const contentArg = shellQuote2(contentRel);
         if (onlyRaw !== void 0) {
           const onlyDraft = flags.draft === true;
@@ -65249,7 +65577,7 @@ default (no --glyph): ${DEFAULT_GLYPH2} \u2014 a mark that claims nothing, so th
           let localSourceHash;
           try {
             const { collectAppSource: collectAppSource2, zipAppSource: zipAppSource2 } = await Promise.resolve().then(() => (init_app_source(), app_source_exports));
-            localSourceHash = createHash24("sha256").update(zipAppSource2(collectAppSource2(dir).entries).toString("base64")).digest("hex");
+            localSourceHash = createHash25("sha256").update(zipAppSource2(collectAppSource2(dir).entries).toString("base64")).digest("hex");
           } catch {
           }
           return runReleasePatch({
@@ -65632,7 +65960,7 @@ default (no --glyph): ${DEFAULT_GLYPH2} \u2014 a mark that claims nothing, so th
             return 2;
           }
           try {
-            const res = writePack(resolve44(releaseDir), only, resolve44(str5(flags.out) ?? process.cwd()));
+            const res = writePack(resolve45(releaseDir), only, resolve45(str5(flags.out) ?? process.cwd()));
             print({
               ok: true,
               app: res.app,
@@ -65681,7 +66009,7 @@ default (no --glyph): ${DEFAULT_GLYPH2} \u2014 a mark that claims nothing, so th
         }
         const { buildContentForValidation: buildContentForValidation2, buildReleaseFromContent: buildReleaseFromContent2, bundleOutDir: bundleOutDir2 } = await loadAuthoring();
         const bres = await buildContentForValidation2(dir, { resolution: resolutionFlag(flags) });
-        const built = mkdtempSync4(join53(tmpdir5(), "himi-pack-"));
+        const built = mkdtempSync4(join54(tmpdir5(), "himi-pack-"));
         const hasWorkers = bres.built.length > 0 || bres.compileErrors.length > 0;
         const outcome = await buildReleaseFromContent2(dir, built, {
           ...hasWorkers ? { tier5Dir: bundleOutDir2(dir) } : {},
@@ -65703,7 +66031,7 @@ default (no --glyph): ${DEFAULT_GLYPH2} \u2014 a mark that claims nothing, so th
           return 1;
         }
         try {
-          const res = writePack(built, app, resolve44(str5(flags.out) ?? dir), sourceArchive);
+          const res = writePack(built, app, resolve45(str5(flags.out) ?? dir), sourceArchive);
           print({
             ok: true,
             app: res.app,
@@ -65748,7 +66076,7 @@ default (no --glyph): ${DEFAULT_GLYPH2} \u2014 a mark that claims nothing, so th
         const { HIMI_PACKAGE_SOURCE_PATH: HIMI_PACKAGE_SOURCE_PATH2, isSafeAppId: isSafeAppId2, packageContents: packageContents2 } = await Promise.resolve().then(() => (init_himi_package(), himi_package_exports));
         let opened;
         try {
-          opened = openPackageFile2(resolve44(file));
+          opened = openPackageFile2(resolve45(file));
         } catch (e) {
           io.error(JSON.stringify({ error: e.message }));
           return 1;
@@ -65761,7 +66089,7 @@ default (no --glyph): ${DEFAULT_GLYPH2} \u2014 a mark that claims nothing, so th
           io.error(JSON.stringify({
             ok: false,
             error: "app_source_not_in_package",
-            detail: `${resolve44(file)} is a release package: it carries built output (screens, bundles, tokens) and no source`,
+            detail: `${resolve45(file)} is a release package: it carries built output (screens, bundles, tokens) and no source`,
             hint: "re-pack it from the content package with `himi pack --dev`, or restore from the serve plane with `himi pull <app>`"
           }));
           return 1;
@@ -65784,7 +66112,7 @@ default (no --glyph): ${DEFAULT_GLYPH2} \u2014 a mark that claims nothing, so th
             return 1;
           }
         }
-        const dest = resolve44(str5(flags.out) ?? process.cwd(), renamed ?? opened.header.app);
+        const dest = resolve45(str5(flags.out) ?? process.cwd(), renamed ?? opened.header.app);
         const issue2 = restoreDestinationIssue(dest, flags.force === true);
         if (issue2) {
           io.error(JSON.stringify(issue2));
@@ -65869,7 +66197,7 @@ default (no --glyph): ${DEFAULT_GLYPH2} \u2014 a mark that claims nothing, so th
         }
         try {
           const { openPackageFile: openPackageFile2 } = await Promise.resolve().then(() => (init_pack(), pack_exports));
-          const opened = openPackageFile2(resolve44(file));
+          const opened = openPackageFile2(resolve45(file));
           if (!opened.validation.ok || !opened.header) {
             io.error(JSON.stringify({ error: "refusing to share an invalid package", issues: opened.validation.errors }));
             return 1;
@@ -65879,12 +66207,12 @@ default (no --glyph): ${DEFAULT_GLYPH2} \u2014 a mark that claims nothing, so th
             io.error(JSON.stringify({
               ok: false,
               error: "refusing to share a package that carries the app's source",
-              detail: `${resolve44(file)} was packed with --dev, and a share link is public and unauthenticated \u2014 anyone with the URL could \`himi import\` your codebase`,
+              detail: `${resolve45(file)} was packed with --dev, and a share link is public and unauthenticated \u2014 anyone with the URL could \`himi import\` your codebase`,
               hint: "share a release package instead (`himi pack` with no --dev), or hand the dev package over directly"
             }));
             return 1;
           }
-          const archive = readFileSync68(resolve44(file));
+          const archive = readFileSync69(resolve45(file));
           const result = await client2().createPackageShare({
             app: opened.header.app,
             releaseId: opened.header.releaseId,
@@ -65921,10 +66249,10 @@ default (no --glyph): ${DEFAULT_GLYPH2} \u2014 a mark that claims nothing, so th
             const app = await appId(dir);
             const { buildContentBundles: buildContentBundles2, buildReleaseFromContent: buildReleaseFromContent2, bundleOutDir: bundleOutDir2 } = await loadAuthoring();
             const bres = await buildContentBundles2(dir, { resolution: resolutionFlag(flags) });
-            temp = mkdtempSync4(join53(tmpdir5(), "himi-run-build-"));
+            temp = mkdtempSync4(join54(tmpdir5(), "himi-run-build-"));
             const hasWorkers = bres.built.length > 0 || bres.compileErrors.length > 0;
             await buildReleaseFromContent2(dir, temp, { ...hasWorkers ? { tier5Dir: bundleOutDir2(dir) } : {} });
-            source = join53(temp, app);
+            source = join54(temp, app);
           }
           const chromeArg = str5(flags.chrome) ?? "preview";
           if (chromeArg !== "preview" && chromeArg !== "app") {
@@ -65949,9 +66277,9 @@ default (no --glyph): ${DEFAULT_GLYPH2} \u2014 a mark that claims nothing, so th
               open: flags["no-open"] !== true
             });
             print({ ok: true, app: run2.app, url: run2.url, port: run2.port, plane: "browser" });
-            await new Promise((resolve45) => {
+            await new Promise((resolve46) => {
               const stop = () => {
-                void run2.close().finally(() => resolve45());
+                void run2.close().finally(() => resolve46());
               };
               process.once("SIGINT", stop);
               process.once("SIGTERM", stop);
@@ -66528,7 +66856,7 @@ default (no --glyph): ${DEFAULT_GLYPH2} \u2014 a mark that claims nothing, so th
           io.error(JSON.stringify({ error: `patch ${kind} needs --file`, usage: PATCH_USAGE }));
           return 2;
         }
-        if (!existsSync57(file)) {
+        if (!existsSync58(file)) {
           io.error(JSON.stringify({ error: `no such file: ${file}` }));
           return 2;
         }
@@ -66584,7 +66912,7 @@ default (no --glyph): ${DEFAULT_GLYPH2} \u2014 a mark that claims nothing, so th
           lintNote: "`himi patch` sends a raw file. Nothing here built or linted your app \u2014 `himi push --only <selector>` is the same edit with the full lint gate in front of it."
         };
         if (kind === "tokens" || kind === "app-config") {
-          const body = readFileSync68(file, "utf8");
+          const body = readFileSync69(file, "utf8");
           const patch2 = kind === "tokens" ? { tokens: body } : { appConfig: body };
           return runReleasePatch({
             ...common,
@@ -66599,7 +66927,7 @@ default (no --glyph): ${DEFAULT_GLYPH2} \u2014 a mark that claims nothing, so th
             io.error(JSON.stringify({ error: "patch screen needs a <screenId>", usage: PATCH_USAGE }));
             return 2;
           }
-          const descriptor = readFileSync68(file, "utf8");
+          const descriptor = readFileSync69(file, "utf8");
           try {
             JSON.parse(descriptor);
           } catch (e) {
@@ -66639,8 +66967,8 @@ default (no --glyph): ${DEFAULT_GLYPH2} \u2014 a mark that claims nothing, so th
             extra: { kind, screen: id, file: { path: file, bytes: Buffer.byteLength(descriptor, "utf8") } }
           });
         }
-        const bytes2 = readFileSync68(file);
-        const sha = createHash24("sha256").update(bytes2).digest("hex");
+        const bytes2 = readFileSync69(file);
+        const sha = createHash25("sha256").update(bytes2).digest("hex");
         const forScreens = (str5(flags["for-screen"]) ?? "").split(",").map((s) => s.trim()).filter(Boolean);
         if (flags["no-rebind"] !== void 0 && flags["no-rebind"] !== true) {
           io.error(JSON.stringify({ ok: false, error: "no_rebind_takes_no_value", message: "--no-rebind is a switch and takes no value; pass it bare.", usage: PATCH_USAGE }));
@@ -66783,7 +67111,7 @@ default (no --glyph): ${DEFAULT_GLYPH2} \u2014 a mark that claims nothing, so th
           }
           let def;
           try {
-            const parsed = JSON.parse(arg.startsWith("@") ? readFileSync68(arg.slice(1), "utf8") : arg);
+            const parsed = JSON.parse(arg.startsWith("@") ? readFileSync69(arg.slice(1), "utf8") : arg);
             if (parsed === null || typeof parsed !== "object" || Array.isArray(parsed)) {
               io.error(JSON.stringify({ error: "invalid_definition", problems: [`--definition must be a JSON object, got ${Array.isArray(parsed) ? "an array" : parsed === null ? "null" : typeof parsed}`] }));
               return 2;
@@ -67247,7 +67575,7 @@ ${label2}`);
         const platform = str5(flags.platform)?.split(",").map((p) => p.trim()).filter(Boolean);
         {
           const distDir = contentDir(flags);
-          if (existsSync57(join53(distDir, "himalaya.content.json"))) {
+          if (existsSync58(join54(distDir, "himalaya.content.json"))) {
             const issues = await iconIssues(distDir, flags.strict === true, { requireDeclared: true, requireVerified: true });
             const errors = issues.filter((i) => i.severity === "error");
             for (const i of issues.filter((i2) => i2.severity === "warning")) {
@@ -67516,7 +67844,7 @@ ${label2}`);
           const dpxPath = dpxSessionTokenPath();
           let dpx;
           try {
-            dpx = readFileSync68(dpxPath, "utf8").trim();
+            dpx = readFileSync69(dpxPath, "utf8").trim();
           } catch {
             io.error(JSON.stringify({ error: `no dpx session at ${dpxPath} \u2014 run \`dpx auth login\` then \`dpx auth token > ${dpxPath}\` (dpx 2.x keeps its own state in ~/.dpx/auth.json and does NOT write the legacy session file), or omit --dpx` }));
             return 1;
@@ -67918,7 +68246,7 @@ ${report2.ok ? "OK \u2014 data + serve plane reachable." : typeof report2.hint =
           const path2 = dpxSessionTokenPath();
           let raw;
           try {
-            raw = readFileSync68(path2, "utf8");
+            raw = readFileSync69(path2, "utf8");
           } catch {
             io.error(JSON.stringify({ error: `no DPX BO session at ${path2}` }));
             return 1;