@wix/himalaya-cli 0.1015.0 → 0.1016.0

package/dist/cli.mjs

@@ -5345,6 +5345,7 @@ function walk(node, registry, path2, out) {
 var SYSTEM_FONT_FAMILY;
 var init_tokens = __esm({
   "../../core/ts/src/tokens.ts"() {
+    "use strict";
     SYSTEM_FONT_FAMILY = "$system";
   }
 });
@@ -6516,6 +6517,260 @@ var init_l10n_strings = __esm({
   }
 });
 
+// ../../core/dev-server/src/a11y-contract.ts
+function isDynamicValue(v) {
+  return typeof v === "string" && (v.startsWith("$service:") || v.startsWith("$item") || v.startsWith("$flag") || v.startsWith("$state") || v.startsWith("$t:"));
+}
+function isActionEnvelope(v) {
+  return !!v && typeof v === "object" && !Array.isArray(v) && typeof v.actionId === "string";
+}
+function own(bag, key2) {
+  return Object.prototype.hasOwnProperty.call(bag, key2) ? bag[key2] : void 0;
+}
+function atExposureOf(node) {
+  const mods = node.modifiers;
+  if (!mods || typeof mods !== "object" || Array.isArray(mods)) return "exposed";
+  const m = mods;
+  if (m.accessibilityHidden === true) return "hidden";
+  if (m.accessibilityRole === "decorative" && !isInteractive(node)) return "decorative";
+  return "exposed";
+}
+function isInteractive(node) {
+  const raw = node.modifiers;
+  const mods = raw && typeof raw === "object" && !Array.isArray(raw) ? raw : {};
+  return TAP_MODIFIER_KEYS.some(
+    (k) => !!mods[k] && typeof mods[k] === "object" || !!node[k] && typeof node[k] === "object"
+  );
+}
+function ownName(n) {
+  for (const k of ACCESSIBLE_NAME_KEYS) {
+    const v = own(n, k);
+    if (typeof v === "string" && v.trim() !== "" || isDynamicValue(v)) return true;
+  }
+  for (const k of CONTENT_ARM_KEYS) {
+    const v = own(n, k);
+    if (v !== void 0 && v !== null) return true;
+  }
+  return false;
+}
+function isWireWrapper(n) {
+  return componentTypeOf(n) !== null && typeof n.body?.type === "string";
+}
+function nameIn(node, at) {
+  if (!node || typeof node !== "object") return false;
+  if (Array.isArray(node)) return node.some((v) => nameIn(v, at));
+  if (isActionEnvelope(node)) return false;
+  const n = node;
+  let readOwnKeys = true;
+  if (at === "descendant") {
+    const exposure = atExposureOf(n);
+    if (exposure === "hidden") return false;
+    if (exposure === "decorative") readOwnKeys = false;
+  } else if (at === "decorativeOwn") {
+    if (componentTypeOf(n) !== null) return nameIn(n, "descendant");
+    readOwnKeys = false;
+  }
+  if (readOwnKeys) {
+    if (ownName(n)) return true;
+    return Object.values(n).some((v) => nameIn(v, "descendant"));
+  }
+  const wrapper = isWireWrapper(n);
+  return Object.entries(n).some(([k, v]) => {
+    if (k === "body" && wrapper && v && typeof v === "object" && !Array.isArray(v)) {
+      return Object.values(v).some((w) => nameIn(w, "decorativeOwn"));
+    }
+    return nameIn(v, "decorativeOwn");
+  });
+}
+function hasAccessibleName(node) {
+  return nameIn(node, "self");
+}
+function componentTypeOf(node) {
+  const body = node.body;
+  if (body && typeof body === "object" && !Array.isArray(body) && typeof body.type === "string" && typeof body.package === "string") {
+    return body.type;
+  }
+  if (typeof node.type === "string" && typeof node.package === "string") return node.type;
+  return null;
+}
+function accessibleNameGaps(descriptor, options = {}) {
+  const out = [];
+  const interactiveOnly = options.interactiveOnly === true;
+  const walk2 = (node, path2, key2, suppressed = false) => {
+    if (!node || typeof node !== "object") return;
+    if (Array.isArray(node)) {
+      node.forEach((v, i) => walk2(v, `${path2}[${i}]`, key2, suppressed));
+      return;
+    }
+    const n = node;
+    if (key2 === "args" || key2 === "input" && path2 === "input") return;
+    const rawMods = n.modifiers;
+    const hasMods = !!rawMods && typeof rawMods === "object" && !Array.isArray(rawMods);
+    const exposure = atExposureOf(n);
+    if (exposure === "hidden") return;
+    const viaBody = componentTypeOf(n) !== null && typeof n.body?.type === "string";
+    const bodyMods = viaBody ? n.body.modifiers : void 0;
+    const deferToBody = viaBody && !hasMods && !!bodyMods && typeof bodyMods === "object" && !Array.isArray(bodyMods);
+    if (key2 !== "modifiers" && !suppressed && !deferToBody) {
+      if (exposure !== "decorative") {
+        const tappable = isInteractive(n);
+        const type = componentTypeOf(n);
+        const row = type ? own(A11Y_CONTRACT, type) : void 0;
+        const contractual = !interactiveOnly && row?.name === "required";
+        if ((tappable || contractual) && !hasAccessibleName(n)) {
+          out.push({
+            at: path2 || "root",
+            type: type ?? (n.icon ? "icon" : "node"),
+            reason: tappable ? "interactive" : "contract",
+            // §3.4: interactivity promotes the container to a BUTTON whatever its row says.
+            role: tappable ? "button" : row?.role ?? "unspecified"
+          });
+        }
+      }
+    }
+    for (const [k, v] of Object.entries(n)) {
+      walk2(v, path2 ? `${path2}.${k}` : k, k, k === "body" && viaBody && !deferToBody);
+    }
+  };
+  walk2(descriptor, "", "");
+  return out;
+}
+var A11Y_CONTRACT, ACCESSIBLE_NAME_KEYS, CONTENT_ARM_KEYS, TAP_MODIFIER_KEYS;
+var init_a11y_contract = __esm({
+  "../../core/dev-server/src/a11y-contract.ts"() {
+    A11Y_CONTRACT = {
+      // ---- Layout / structural containers -------------------------------------------------
+      // Transparent by default: not AT stops, they expose their children directly. They become a
+      // named GROUP only when they carry `accessibilityLabel` — or when an `onTap` promotes them
+      // (§3.4), which is what the `conditional` arm catches.
+      VStack: { role: "unspecified", name: "conditional", state: [], decorative: false },
+      HStack: { role: "unspecified", name: "conditional", state: [], decorative: false },
+      ZStack: { role: "unspecified", name: "conditional", state: [], decorative: false },
+      Grid: { role: "unspecified", name: "conditional", state: [], decorative: false },
+      LazyList: { role: "list", name: "conditional", state: ["item position", "item count"], decorative: false },
+      Card: { role: "group", name: "conditional", state: [], decorative: false },
+      Divider: { role: "decorative", name: "none", state: [], decorative: true },
+      Spacer: { role: "decorative", name: "none", state: [], decorative: true },
+      SplitView: { role: "unspecified", name: "conditional", state: [], decorative: false },
+      Section: { role: "group", name: "conditional", state: [], decorative: false },
+      LabeledContent: { role: "group", name: "required", state: ["value = the content"], decorative: false },
+      // ---- Text and inline content --------------------------------------------------------
+      // Named by themselves: the copy IS the name, so `required` here reads "this node must carry
+      // some copy", which is also what makes an empty Text a finding rather than a silent stop.
+      Text: { role: "text", name: "required", state: [], decorative: false },
+      RichText: { role: "text", name: "required", state: [], decorative: false },
+      Label: { role: "text", name: "required", state: [], decorative: false },
+      Marquee: { role: "text", name: "required", state: [], decorative: false },
+      Badge: { role: "status", name: "required", state: ["count/value"], decorative: false },
+      Tag: { role: "text", name: "required", state: ["selected (if in a group)"], decorative: false },
+      // ---- Images and media ---------------------------------------------------------------
+      Image: { role: "image", name: "conditional", state: [], decorative: false },
+      // `contentDescription` present ⇒ IMAGE; absent ⇒ DECORATIVE. That is exactly why this pass
+      // can exist: before #2893 there was no way for an author to SAY "decorative", so a validator
+      // could not tell a chevron from an unlabelled icon button and any rule would have been noise.
+      Icon: { role: "decorative", name: "conditional", state: [], decorative: true },
+      Avatar: { role: "image", name: "required", state: [], decorative: false },
+      AvatarStrip: { role: "group", name: "required", state: ["count"], decorative: false },
+      Video: { role: "group", name: "required", state: ["playing/paused", "position"], decorative: false },
+      MediaPlayer: { role: "group", name: "required", state: ["playing/paused", "position"], decorative: false },
+      Lottie: { role: "decorative", name: "conditional", state: [], decorative: true },
+      Rive: { role: "decorative", name: "conditional", state: [], decorative: true },
+      PdfView: { role: "group", name: "required", state: ["page N of M"], decorative: false },
+      VoiceNote: { role: "group", name: "required", state: ["playing", "duration/position"], decorative: false },
+      Map: { role: "image", name: "required", state: [], decorative: false },
+      WebView: { role: "group", name: "required", state: [], decorative: false },
+      // ---- Interactive controls -----------------------------------------------------------
+      Button: { role: "button", name: "required", state: ["disabled"], decorative: false },
+      Fab: { role: "button", name: "required", state: ["disabled"], decorative: false },
+      TextField: { role: "textfield", name: "required", state: ["value", "error", "required"], decorative: false },
+      SearchField: { role: "search", name: "required", state: ["value"], decorative: false },
+      Toggle: { role: "toggle", name: "required", state: ["on/off"], decorative: false },
+      Stepper: { role: "adjustable", name: "required", state: ["value", "increment/decrement"], decorative: false },
+      Slider: { role: "adjustable", name: "required", state: ["value (+ min/max/pct)"], decorative: false },
+      SelectionControl: { role: "checkbox", name: "required", state: ["checked", "group membership"], decorative: false },
+      Picker: { role: "combobox", name: "required", state: ["current selection", "expanded"], decorative: false },
+      DatePicker: { role: "combobox", name: "required", state: ["current selection", "expanded"], decorative: false },
+      WheelPicker: { role: "combobox", name: "required", state: ["current selection", "expanded"], decorative: false },
+      ColorPicker: { role: "combobox", name: "required", state: ["current selection", "expanded"], decorative: false },
+      OtpInput: { role: "textfield", name: "required", state: ["value", "per-cell position"], decorative: false },
+      ChipsInput: { role: "textfield", name: "required", state: ["value", "each chip removable"], decorative: false },
+      Chip: { role: "button", name: "required", state: ["selected", "disabled"], decorative: false },
+      FilterChips: { role: "group", name: "required", state: ["each chip selected"], decorative: false },
+      SegmentedControl: { role: "tablist", name: "required", state: ["each segment selected"], decorative: false },
+      Tabs: { role: "tablist", name: "required", state: ["selected tab", "index/count"], decorative: false },
+      Menu: { role: "menu", name: "required", state: ["each item enabled/checked"], decorative: false },
+      Rating: { role: "adjustable", name: "required", state: ['value "N of M"'], decorative: false },
+      ListItem: { role: "listitem", name: "required", state: ["selected", "disabled", "position"], decorative: false },
+      // ---- Navigation and progress structures ---------------------------------------------
+      DisclosureGroup: { role: "button", name: "required", state: ["expanded/collapsed"], decorative: false },
+      CollapsingHeader: { role: "heading", name: "required", state: ["expanded/collapsed"], decorative: false },
+      Carousel: { role: "list", name: "required", state: ["item N of M"], decorative: false },
+      Pager: { role: "list", name: "required", state: ["item N of M"], decorative: false },
+      PageControl: { role: "adjustable", name: "required", state: ["page N of M"], decorative: false },
+      StepIndicator: { role: "group", name: "required", state: ["step N of M", "current"], decorative: false },
+      // ---- Status, feedback, and overlays -------------------------------------------------
+      ProgressBar: { role: "progressbar", name: "conditional", state: ["value/pct or indeterminate"], decorative: false },
+      ActivityIndicator: { role: "status", name: "conditional", state: ["busy"], decorative: false },
+      Gauge: { role: "progressbar", name: "required", state: ["value + unit"], decorative: false },
+      Skeleton: { role: "decorative", name: "none", state: [], decorative: true },
+      Banner: { role: "status", name: "required", state: ["dismissible"], decorative: false },
+      Snackbar: { role: "status", name: "required", state: [], decorative: false },
+      AlertDialog: { role: "alert", name: "required", state: ["modal"], decorative: false },
+      Tooltip: { role: "unspecified", name: "required", state: [], decorative: false },
+      EmptyState: { role: "group", name: "required", state: [], decorative: false },
+      StatefulSection: { role: "group", name: "conditional", state: ["loading/empty/error/loaded"], decorative: false },
+      FieldError: { role: "alert", name: "required", state: ["associated field"], decorative: false },
+      BottomSheet: { role: "dialog", name: "required", state: ["modal", "expanded"], decorative: false },
+      Popover: { role: "dialog", name: "required", state: ["modal", "expanded"], decorative: false },
+      Form: { role: "group", name: "conditional", state: ["field grouping", "errors"], decorative: false },
+      FormField: { role: "group", name: "conditional", state: ["field grouping", "errors"], decorative: false },
+      // ---- Data, visualization, and temporal ----------------------------------------------
+      Chart: { role: "image", name: "required", state: ["a spoken data summary"], decorative: false },
+      DonutChart: { role: "image", name: "required", state: ["a spoken data summary"], decorative: false },
+      Legend: { role: "list", name: "required", state: ["each series name + value"], decorative: false },
+      DataTable: { role: "group", name: "required", state: ["row/col headers", "cell position"], decorative: false },
+      Table: { role: "group", name: "required", state: ["row/col headers", "cell position"], decorative: false },
+      MonthCalendar: { role: "grid", name: "required", state: ["selected date", "today", "range"], decorative: false },
+      TimeGrid: { role: "grid", name: "required", state: ["slot time", "availability", "selected"], decorative: false },
+      Agenda: { role: "list", name: "required", state: ["each entry time + title"], decorative: false },
+      Timeline: { role: "list", name: "required", state: ["each event position + label"], decorative: false },
+      // ---- Fragment / worker composition --------------------------------------------------
+      // Pass-through: the subtree they render is subject to the same contract, so scoring the
+      // carrier as well would double-report its children.
+      FragmentSlot: { role: "unspecified", name: "none", state: ["announcement on case change"], decorative: false },
+      WorkerSubtree: { role: "unspecified", name: "none", state: [], decorative: false }
+    };
+    ACCESSIBLE_NAME_KEYS = [
+      "accessibilityLabel",
+      "contentDescription",
+      "text",
+      "title",
+      "label",
+      "placeholder",
+      "message",
+      "subtitle",
+      "overline",
+      "caption",
+      "initials",
+      "emptyText",
+      "actionLabel",
+      "confirmLabel",
+      "cancelLabel",
+      "helpText",
+      "errorMessage",
+      "centerTitle",
+      "centerSubtitle",
+      // The one `…Path` TWIN of a name prop in the whole vocabulary. Binding copy to worker state
+      // is authoring it, not omitting it — `textPath: "$service:cart.title"` speaks on device.
+      // (Checked: `textPath` is the only `<nameKey>Path` prop `KNOWN_PROPS` declares. The other
+      // ~40 `…Path` props bind items, colours, dates and values, none of which is a name.)
+      "textPath"
+    ];
+    CONTENT_ARM_KEYS = ["template", "timeRef"];
+    TAP_MODIFIER_KEYS = ["onTap", "onLongPress", "onDoubleTap"];
+  }
+});
+
 // ../../stdlib/wix-sdk/media/src/index.ts
 function wixMediaId(reference) {
   return WIX_IMAGE.exec(reference)?.[1] ?? (reference.includes("/") || reference.includes(":") ? "" : reference);
@@ -7428,7 +7683,7 @@ function serviceFieldDeclared(state, path2) {
 function ellipsis(value, max) {
   return value.length <= max ? value : `${value.slice(0, max)}\u2026`;
 }
-function own(table, key2) {
+function own2(table, key2) {
   return Object.prototype.hasOwnProperty.call(table, key2) ? table[key2] : void 0;
 }
 function isOpaqueAuthorJson(key2, value, atRoot) {
@@ -7473,7 +7728,7 @@ function nativeRequiredFindings(descriptor) {
       value.forEach((v, i) => checkNested(v, of, `${path2}[${i}]`, from));
       return;
     }
-    const rule = own(NATIVE_NESTED_CLASSES, cls);
+    const rule = own2(NATIVE_NESTED_CLASSES, cls);
     if (!rule) return;
     if (Array.isArray(value) || !value || typeof value !== "object") {
       reportKind(cls, value, path2, from);
@@ -7481,17 +7736,17 @@ function nativeRequiredFindings(descriptor) {
     }
     const bag = value;
     for (const name of rule.required) {
-      if (own(bag, name) !== void 0 && bag[name] !== null) continue;
+      if (own2(bag, name) !== void 0 && bag[name] !== null) continue;
       out.push({
         path: `${path2}.${name}`,
         message: `${cls}.${name} is REQUIRED by the native decoder but is missing \u2014 native decode rejects it ("Field '${name}' is required for type with serial name 'io.himalaya.core.${cls}', but it was missing") and drops the WHOLE screen from the seed, while web renders it fine (reached from ${from})`
       });
     }
     for (const [name, sub] of Object.entries(rule.nested)) {
-      const inner = own(bag, name);
+      const inner = own2(bag, name);
       if (inner !== void 0 && inner !== null) checkNested(inner, sub, `${path2}.${name}`, from);
     }
-    if (cls === "Action") checkActionParams(own(bag, "params"), `${path2}.params`, from);
+    if (cls === "Action") checkActionParams(own2(bag, "params"), `${path2}.params`, from);
   };
   const checkActionParams = (params, path2, from) => {
     if (params === void 0 || params === null) return;
@@ -7524,22 +7779,22 @@ function nativeRequiredFindings(descriptor) {
       const props = body.props;
       const bag = props && typeof props === "object" && !Array.isArray(props) ? props : {};
       const base = at ? `${at}.body.props` : "body.props";
-      for (const name of own(NATIVE_REQUIRED_PROPS, type) ?? []) {
-        if (own(bag, name) !== void 0 && bag[name] !== null) continue;
+      for (const name of own2(NATIVE_REQUIRED_PROPS, type) ?? []) {
+        if (own2(bag, name) !== void 0 && bag[name] !== null) continue;
         const hint = type === "Button" && name === "title" && bag.iconOnly === true ? " \u2014 `iconOnly` HIDES the label, it does not make it optional; keep a title (it is also the accessibility label)" : "";
         out.push({
           path: `${base}.${name}`,
           message: `${type}.${name} is REQUIRED by the native decoder but is missing \u2014 native decode rejects it ("Field '${name}' is required for type with serial name 'io.himalaya.core.${type}Props', but it was missing") and drops the WHOLE screen from the seed, while web renders it fine${hint}`
         });
       }
-      for (const [prop, cls] of Object.entries(own(NATIVE_NESTED_PROPS, type) ?? {})) {
-        const value = own(bag, prop);
+      for (const [prop, cls] of Object.entries(own2(NATIVE_NESTED_PROPS, type) ?? {})) {
+        const value = own2(bag, prop);
         if (value === void 0 || value === null) continue;
         checkNested(value, cls, `${base}.${prop}`, `${type}.${prop}`);
       }
     }
     if (body && typeof body === "object" && typeof body.type === "string" && typeof body.package === "string") {
-      const modifiers = own(record2, "modifiers");
+      const modifiers = own2(record2, "modifiers");
       if (modifiers !== void 0 && modifiers !== null) {
         checkNested(modifiers, NATIVE_MODIFIERS_CLASS, at ? `${at}.modifiers` : "modifiers", "modifiers");
       }
@@ -7553,7 +7808,7 @@ function nativeRequiredFindings(descriptor) {
   if (descriptor && typeof descriptor === "object" && !Array.isArray(descriptor)) {
     const root = descriptor;
     for (const [field, cls] of Object.entries(NATIVE_DESCRIPTOR_NESTED)) {
-      const value = own(root, field);
+      const value = own2(root, field);
       if (value === void 0 || value === null) continue;
       checkNested(value, cls, field, `${NATIVE_DESCRIPTOR_CLASS}.${field}`);
     }
@@ -7583,14 +7838,14 @@ function componentPropFindings(descriptor) {
     const body = record2.body;
     if (typeof body?.package === "string" && CORE_PACKAGES.has(body.package) && typeof body.type === "string") {
       const type = body.type;
-      const declared = own(KNOWN_PROPS, type);
+      const declared = own2(KNOWN_PROPS, type);
       const props = body.props;
       if (declared && props && typeof props === "object" && !Array.isArray(props)) {
         const bag = props;
         const base = at ? `${at}.body.props` : "body.props";
         for (const name of Object.keys(bag)) {
           const path2 = `${base}.${name}`;
-          const kind = own(declared, name);
+          const kind = own2(declared, name);
           if (kind === void 0) {
             if (LEGACY_UNSCORED_KEYS.has(`${type}.${name}`)) continue;
             const hint = MODIFIER_KEYS.has(name) ? ` \u2014 \`${name}\` is a MODIFIER, not a prop: move it out of \`props\` and into the node's \`modifiers\` bag (\`{ id, body, modifiers: { ${name}: \u2026 } }\`)` : "";
@@ -7606,7 +7861,7 @@ function componentPropFindings(descriptor) {
           if (kind === "any") continue;
           if (typeof value === "string" && BINDING_SIGIL_RE.test(value)) {
             if (kind === "string") continue;
-            const twin = own(declared, `${name}Path`) !== void 0 ? `${name}Path` : void 0;
+            const twin = own2(declared, `${name}Path`) !== void 0 ? `${name}Path` : void 0;
             const inArray = IN_ARRAY_BINDING_PROPS.has(`${type}.${name}`) && value.startsWith(SERVICE_SIGIL);
             out.push({
               path: path2,
@@ -7629,10 +7884,10 @@ function componentPropFindings(descriptor) {
             });
             continue;
           }
-          if (own(NATIVE_PROP_ENUMS, name) !== void 0) continue;
+          if (own2(NATIVE_PROP_ENUMS, name) !== void 0) continue;
           const actual = wireKind(value);
           if (actual === kind) {
-            if (kind === "number" && typeof value === "number" && !Number.isInteger(value) && own(INTEGER_PROPS, type)?.includes(name)) {
+            if (kind === "number" && typeof value === "number" && !Number.isInteger(value) && own2(INTEGER_PROPS, type)?.includes(name)) {
               out.push({
                 path: path2,
                 kind: "decode",
@@ -7650,13 +7905,13 @@ function componentPropFindings(descriptor) {
       }
     }
     if (body && typeof body === "object" && typeof body.type === "string" && typeof body.package === "string") {
-      const modifiers = own(record2, "modifiers");
+      const modifiers = own2(record2, "modifiers");
       if (modifiers && typeof modifiers === "object" && !Array.isArray(modifiers)) {
         const schemaOwnsUnknownKeys = SCHEMA_SCORED_NODES.has(at);
         const bag = modifiers;
         for (const key2 of Object.keys(bag)) {
           if (MODIFIER_KEYS.has(key2)) {
-            const spec = own(MODIFIER_KINDS, key2);
+            const spec = own2(MODIFIER_KINDS, key2);
             const value = bag[key2];
             if (!spec || value === void 0 || value === null) continue;
             const where = at ? `${at}.modifiers.${key2}` : `modifiers.${key2}`;
@@ -8252,7 +8507,7 @@ function validateScreenDescriptor(screenId, descriptor, opts = {}) {
       if (isOpaqueAuthorJson(k, val, at === "")) continue;
       if (k === "params" && typeof node.actionId === "string") continue;
       const here = at ? `${at}.${k}` : k;
-      const allowed2 = own(NATIVE_PROP_ENUMS, k);
+      const allowed2 = own2(NATIVE_PROP_ENUMS, k);
       if (typeof val === "string" && enums.has(k) && DYNAMIC_PLACEHOLDER.test(val)) {
         issues.push({
           severity: "error",
@@ -8493,6 +8748,30 @@ function validateScreenDescriptor(screenId, descriptor, opts = {}) {
       });
     }
   }
+  const a11yMode = opts.a11y?.enforce ?? "error";
+  if (a11yMode !== "off") {
+    const severity = a11yMode === "warn" && !strict ? "warning" : "error";
+    const gaps = accessibleNameGaps(descriptor);
+    const CAP4 = 20;
+    for (const gap of gaps.slice(0, CAP4)) {
+      const row = Object.prototype.hasOwnProperty.call(A11Y_CONTRACT, gap.type) ? A11Y_CONTRACT[gap.type] : void 0;
+      const why = gap.reason === "interactive" ? `it carries an \`onTap\`/\`onLongPress\`/\`onDoubleTap\`, which promotes ANY node to a control that owes a name (RFC 0058 \xA73.4)` : `RFC 0058 \xA73.3 requires a name for \`${gap.type}\` (announced as \`${gap.role}\`)`;
+      const fix = gap.reason === "contract" ? `Give it \`modifiers.accessibilityLabel\`, or copy on a descendant \u2014 or, if it really is presentational, say so with \`modifiers.accessibilityRole: "decorative"\` (node-local) or \`modifiers.accessibilityHidden: true\` (whole subtree).` : `Give it \`modifiers.accessibilityLabel\`, or put readable copy on a descendant. An icon-only control names itself with \`Icon.contentDescription\`. \`decorative\` does not silence a control${row?.decorative ? ` \u2014 a tappable \`${gap.type}\` is one` : ""}.`;
+      issues.push({
+        severity,
+        pass: "a11y",
+        path: gap.at,
+        message: `${gap.type} renders no accessible name anywhere in its subtree, and ${why}. A screen reader announces this node as an unnamed \`${gap.role}\`. ${fix}`
+      });
+    }
+    if (gaps.length > CAP4) {
+      issues.push({
+        severity,
+        pass: "a11y",
+        message: `+${gaps.length - CAP4} more node(s) on this screen render no accessible name (${gaps.length} in total). Fix the ${CAP4} above and re-run to see the rest.`
+      });
+    }
+  }
   return {
     screenId,
     ok: !issues.some((i) => i.severity === "error"),
@@ -8507,6 +8786,7 @@ var init_validate_descriptor_core = __esm({
     init_validator();
     init_validator();
     init_l10n_strings();
+    init_a11y_contract();
     init_bindings();
     init_media_value();
     init_frame_limits();
@@ -8957,6 +9237,7 @@ var init_validate_descriptor_core = __esm({
         interactive: "boolean",
         max: "number",
         onChange: "any",
+        size: "string",
         value: "number",
         valuePath: "string"
       },
@@ -12729,8 +13010,8 @@ var init_tokens2 = __esm({
 // ../font-bake/web-fallback.ts
 function webRenderedFallback(family) {
   const stack = fontStack(family);
-  const own2 = `"${family}", `;
-  const tail = stack.startsWith(own2) ? stack.slice(own2.length) : stack;
+  const own3 = `"${family}", `;
+  const tail = stack.startsWith(own3) ? stack.slice(own3.length) : stack;
   return tail.split(",")[0].trim().replace(/^"(.*)"$/, "$1");
 }
 var init_web_fallback = __esm({
@@ -14076,7 +14357,7 @@ function parseIconConfig(configTs) {
   const block = /^ {2}icon\s*[:=]\s*\{([^}]*)\}/m.exec(src);
   if (!block) return {};
   const body = block[1];
-  const str6 = (k) => new RegExp(`\\b${k}\\s*:\\s*["']([^"']+)["']`).exec(body)?.[1];
+  const str7 = (k) => new RegExp(`\\b${k}\\s*:\\s*["']([^"']+)["']`).exec(body)?.[1];
   const num3 = (k) => {
     const m = new RegExp(`\\b${k}\\s*:\\s*(-?(?:\\d+\\.?\\d*|\\.\\d+)(?:[eE][+-]?\\d+)?)\\s*(?=[,}\\n]|$)`).exec(body);
     if (!m) return void 0;
@@ -14087,10 +14368,10 @@ function parseIconConfig(configTs) {
     return n;
   };
   const out = {};
-  const source = str6("source");
-  const glyph = str6("glyph");
-  const accentColor = str6("accentColor");
-  const backgroundColor = str6("backgroundColor");
+  const source = str7("source");
+  const glyph = str7("glyph");
+  const accentColor = str7("accentColor");
+  const backgroundColor = str7("backgroundColor");
   const glyphScale = num3("glyphScale");
   for (const [key2, parsed] of [
     ["source", source],
@@ -18732,13 +19013,13 @@ function parsePaddingShorthand(v) {
 }
 function addIntrinsicPadding(style, modPad) {
   if (!style) return void 0;
-  const own2 = parsePaddingShorthand(style.padding);
-  if (!own2) return void 0;
+  const own3 = parsePaddingShorthand(style.padding);
+  if (!own3) return void 0;
   const sides = [
-    ["paddingTop", own2.top],
-    ["paddingBottom", own2.bottom],
-    ["paddingLeft", own2.left],
-    ["paddingRight", own2.right]
+    ["paddingTop", own3.top],
+    ["paddingBottom", own3.bottom],
+    ["paddingLeft", own3.left],
+    ["paddingRight", own3.right]
   ];
   let out;
   for (const [key2, ownPx] of sides) {
@@ -24025,10 +24306,10 @@ function calSnap(minuteOfDay, step) {
   return Math.min(Math.max(Math.round(minuteOfDay / s) * s, 0), 24 * 60);
 }
 function calMoveEvent(startMinute, endMinute, deltaMinutes, step) {
-  const duration = Math.max(1, endMinute - startMinute);
-  const maxStart = Math.max(0, 24 * 60 - duration);
+  const duration2 = Math.max(1, endMinute - startMinute);
+  const maxStart = Math.max(0, 24 * 60 - duration2);
   const start = Math.min(Math.max(calSnap(startMinute + deltaMinutes, step), 0), maxStart);
-  return { startMinute: start, endMinute: start + duration };
+  return { startMinute: start, endMinute: start + duration2 };
 }
 function calResizeEvent(startMinute, endMinute, deltaMinutes, step) {
   const s = Math.max(1, step);
@@ -24178,7 +24459,7 @@ function calKeyActivate(enabled, activate) {
 function applyA11ySemantics(node, ctx, extra) {
   const m = node?.modifiers;
   if (!m) return void 0;
-  const str6 = (v) => {
+  const str7 = (v) => {
     if (v == null) return void 0;
     const r = resolveScalarStatic(v, ctx);
     const s = r == null ? "" : String(r).trim();
@@ -24189,7 +24470,7 @@ function applyA11ySemantics(node, ctx, extra) {
     extra.inert = "";
     return void 0;
   }
-  const role = str6(m.accessibilityRole ?? m.accessibility_role);
+  const role = str7(m.accessibilityRole ?? m.accessibility_role);
   const headingLevel = m.headingLevel ?? m.heading_level;
   const tappable = Boolean((m.onTap ?? m.on_tap ?? m.onDoubleTap ?? m.on_double_tap) && ctx.onAction);
   if (role === "decorative" && !tappable) {
@@ -24204,8 +24485,8 @@ function applyA11ySemantics(node, ctx, extra) {
   if (typeof headingLevel === "number" && headingLevel >= 1 && headingLevel <= 6) {
     extra["aria-level"] = String(headingLevel);
   }
-  const hint = str6(m.accessibilityHint ?? m.accessibility_hint);
-  const value = str6(m.accessibilityValue ?? m.accessibility_value);
+  const hint = str7(m.accessibilityHint ?? m.accessibility_hint);
+  const value = str7(m.accessibilityValue ?? m.accessibility_value);
   if (value) extra["aria-valuetext"] = value;
   const traits = m.accessibilityTraits ?? m.accessibility_traits;
   if (Array.isArray(traits)) {
@@ -25079,7 +25360,7 @@ function renderInner(node, ctx) {
     }
   }
 }
-var useIsomorphicLayoutEffect, ResponsiveGrid, SPLIT_EXPANDED_MIN_WIDTH, SPLIT_COLUMN_GAP, ResponsiveSplitView, ABSOLUTE_URL_RE, appearKeyframesInjected, pressStylesInjected, FOCUS_RING_CSS, focusStylesInjected, HLIST_CHILD_CSS, hListStylesInjected, listAnimateRuntimeInstalled, transitionKeyframesInjected, countUpRuntimeInjected, MEASURE_PREFIX, measureRuntimeInjected, revealRuntimeInjected, vectorAnimStylesInjected, scrollProgressRuntimeInjected, confettiRuntimeInjected, lottieRuntimeInjected, riveRuntimeInjected, gradientKeyframesInjected, parallaxRuntimeInjected, spinKeyframesInjected, marqueeKeyframesInjected, alignItems, zJustifyItems, hAlignItems, bodyFont, kids, rowKids, staggeredKids, asTextL10n, asBoundText, useBoundString, InterpolatedTextView, txt, selectFragmentCase, fragmentValueHash, fragmentSlotContent, FragmentSlotNode, WorkerSubtreeNode, resolveItemDeep2, resolveSwipeActions, resolveModBindings, resolvedComponentId, directServiceBindings, ReactiveDirectScalars, HiddenGate, KEYBOARD_INPUT_MODES, AUTOCAPITALIZE_VALUES, ENTER_KEY_HINTS, AUTOGROW_CEILING, EditableField, MenuNode, LoadMoreSentinel, FieldErrorNode, FormView, MediaSlotProvider, MEDIA_ITEM_BINDABLE, MediaPlayerView, VideoNode, PdfViewNode, WebViewNode, InteractivePicker, InteractiveDatePicker, InteractiveSearchField, InteractiveStepper, SYNTHETIC_TAP_ROLE, INFERRED_DECORATIVE, ICON_GLYPH, INTERACTIVE_ROLES, ALWAYS_INTERACTIVE_COMPONENT_TYPES, controlNode, ToggleNode, SliderNode, SelectionControlNode, TabsNode, SegmentedControlNode, DisclosureGroupNode, GridNode, SplitViewNode, TextNode, ImageNode, AvatarNode, IconNode, ButtonNode, OtpInputNode, ProgressBarNode, ActivityIndicatorNode, BottomSheetNode, ChipsInputNode, ChipNode, TableNode, GaugeRing, GaugeNode, RatingNode, AvatarStripNode, CHART_STROKE_CYCLE, chartStrokeAt, chartBarCenter, ChartNode, donutSliceOpacity, DonutChartNode, LegendMarker, LegendNode, cellAlign, DataTableNode, voiceNoteState, voiceNoteDelivery, VOICE_NOTE_DEFAULT_BARS, clampBarCount, VoiceNoteNode, TimelineNode, WheelPickerNode, ColorPickerNode, FilterChipsNode, TILE_PX, MAX_MERCATOR_LAT, DEFAULT_TILE_MAX_ZOOM, CIRCLE_SEGMENTS, METRES_PER_DEG_LAT, MARKER_HIT_RADIUS, SHAPE_HIT_RADIUS, MapNode, CollapsingHeaderNode, UnsupportedOnSurface, CALENDAR_DATE_ONLY_RE, CAL_DEFAULT_MAX_DOTS, CAL_AGENDA_INITIAL_DAYS, CAL_AGENDA_PAGE_DAYS, CAL_DEFAULT_SNAP_MINUTES, CAL_UNASSIGNED_LANE_ID, MonthCalendarNode, TimeGridNode, AgendaNode, ARIA_ROLE, A11yHintDescription, WebRenderer;
+var useIsomorphicLayoutEffect, ResponsiveGrid, SPLIT_EXPANDED_MIN_WIDTH, SPLIT_COLUMN_GAP, ResponsiveSplitView, ABSOLUTE_URL_RE, appearKeyframesInjected, pressStylesInjected, FOCUS_RING_CSS, focusStylesInjected, HLIST_CHILD_CSS, hListStylesInjected, listAnimateRuntimeInstalled, transitionKeyframesInjected, countUpRuntimeInjected, MEASURE_PREFIX, measureRuntimeInjected, revealRuntimeInjected, vectorAnimStylesInjected, scrollProgressRuntimeInjected, confettiRuntimeInjected, lottieRuntimeInjected, riveRuntimeInjected, gradientKeyframesInjected, parallaxRuntimeInjected, spinKeyframesInjected, marqueeKeyframesInjected, alignItems, zJustifyItems, hAlignItems, bodyFont, kids, rowKids, staggeredKids, asTextL10n, asBoundText, useBoundString, InterpolatedTextView, txt, selectFragmentCase, fragmentValueHash, fragmentSlotContent, FragmentSlotNode, WorkerSubtreeNode, resolveItemDeep2, resolveSwipeActions, resolveModBindings, resolvedComponentId, directServiceBindings, ReactiveDirectScalars, HiddenGate, KEYBOARD_INPUT_MODES, AUTOCAPITALIZE_VALUES, ENTER_KEY_HINTS, AUTOGROW_CEILING, EditableField, MenuNode, LoadMoreSentinel, FieldErrorNode, FormView, MediaSlotProvider, MEDIA_ITEM_BINDABLE, MediaPlayerView, VideoNode, PdfViewNode, WebViewNode, InteractivePicker, InteractiveDatePicker, InteractiveSearchField, InteractiveStepper, SYNTHETIC_TAP_ROLE, INFERRED_DECORATIVE, ICON_GLYPH, INTERACTIVE_ROLES, ALWAYS_INTERACTIVE_COMPONENT_TYPES, controlNode, ToggleNode, SliderNode, SelectionControlNode, TabsNode, SegmentedControlNode, DisclosureGroupNode, GridNode, SplitViewNode, TextNode, ImageNode, AvatarNode, IconNode, ButtonNode, OtpInputNode, ProgressBarNode, ActivityIndicatorNode, BottomSheetNode, ChipsInputNode, ChipNode, TableNode, GaugeRing, GaugeNode, RATING_METRICS, ratingMetrics, RatingNode, AvatarStripNode, CHART_STROKE_CYCLE, chartStrokeAt, chartBarCenter, ChartNode, donutSliceOpacity, DonutChartNode, LegendMarker, LegendNode, cellAlign, DataTableNode, voiceNoteState, voiceNoteDelivery, VOICE_NOTE_DEFAULT_BARS, clampBarCount, VoiceNoteNode, TimelineNode, WheelPickerNode, ColorPickerNode, FilterChipsNode, TILE_PX, MAX_MERCATOR_LAT, DEFAULT_TILE_MAX_ZOOM, CIRCLE_SEGMENTS, METRES_PER_DEG_LAT, MARKER_HIT_RADIUS, SHAPE_HIT_RADIUS, MapNode, CollapsingHeaderNode, UnsupportedOnSurface, CALENDAR_DATE_ONLY_RE, CAL_DEFAULT_MAX_DOTS, CAL_AGENDA_INITIAL_DAYS, CAL_AGENDA_PAGE_DAYS, CAL_DEFAULT_SNAP_MINUTES, CAL_UNASSIGNED_LANE_ID, MonthCalendarNode, TimeGridNode, AgendaNode, ARIA_ROLE, A11yHintDescription, WebRenderer;
 var init_renderNode = __esm({
   "../../core/web-renderer/src/renderNode.tsx"() {
     "use strict";
@@ -25808,7 +26089,7 @@ var init_renderNode = __esm({
       }, [resolvedItems.length, startIndex, queueReady, seatKey]);
       const [status, setStatus] = React5.useState("idle");
       const [position, setPosition] = React5.useState(initialStartPosition);
-      const [duration, setDuration] = React5.useState(0);
+      const [duration2, setDuration] = React5.useState(0);
       const [buffered, setBuffered] = React5.useState(0);
       const [rate, setRateState] = React5.useState(1);
       const [fullscreen, setFullscreen] = React5.useState(false);
@@ -25851,9 +26132,9 @@ var init_renderNode = __esm({
         artist: String(item?.artist ?? ""),
         artworkUrl: String(item?.artworkUrl ?? props.posterUrl ?? ""),
         positionSeconds: position,
-        durationSeconds: duration || Number(item?.durationSeconds ?? 0),
+        durationSeconds: duration2 || Number(item?.durationSeconds ?? 0),
         bufferedSeconds: buffered,
-        progress: duration > 0 ? Math.max(0, Math.min(1, position / duration)) : 0,
+        progress: duration2 > 0 ? Math.max(0, Math.min(1, position / duration2)) : 0,
         muted: mediaRef.current?.muted ?? props.muted === true,
         rate,
         fullscreen,
@@ -25881,7 +26162,7 @@ var init_renderNode = __esm({
           status,
           index,
           positionSeconds: position,
-          durationSeconds: duration || Number(item?.durationSeconds ?? 0),
+          durationSeconds: duration2 || Number(item?.durationSeconds ?? 0),
           bufferedSeconds: buffered,
           rate,
           muted: mediaRef.current?.muted ?? props.muted === true,
@@ -25891,7 +26172,7 @@ var init_renderNode = __esm({
           error
         };
         ctx.onAction({ ...action, args: { ...action.args ?? {}, ...snapshot2, ...extra }, params: { ...action.params ?? {}, sessionId, index: String(index), ...Object.fromEntries(Object.entries(extra).map(([k, v]) => [k, String(v)])) } });
-      }, [ctx.onAction, sessionId, status, index, position, duration, item, buffered, rate, props.muted, fullscreen, error]);
+      }, [ctx.onAction, sessionId, status, index, position, duration2, item, buffered, rate, props.muted, fullscreen, error]);
       React5.useEffect(() => {
         if (!isUnsupportedProvider || status === "error") return;
         setStatus("error");
@@ -26115,8 +26396,8 @@ var init_renderNode = __esm({
         /* @__PURE__ */ jsx6("button", { "aria-label": status === "playing" ? "Pause" : "Play", onClick: () => status === "playing" ? pause() : void play(), style: { width: 38, height: 38, borderRadius: "50%", color: background, background: foreground, border: 0, fontSize: 18 }, children: status === "playing" ? "\u275A\u275A" : "\u25B6" }),
         /* @__PURE__ */ jsxs3("div", { style: { display: "flex", alignItems: "center", gap: 8, minWidth: 0 }, children: [
           /* @__PURE__ */ jsx6("span", { style: { fontSize: 11, whiteSpace: "nowrap" }, children: time(position) }),
-          /* @__PURE__ */ jsx6("input", { "aria-label": "Media position", type: "range", min: 0, max: Math.max(duration, 1), step: 0.1, value: Math.min(position, Math.max(duration, 1)), onChange: (event) => seek(Number(event.currentTarget.value)), style: { width: "100%", accentColor: accent } }),
-          /* @__PURE__ */ jsx6("span", { style: { fontSize: 11, whiteSpace: "nowrap" }, children: time(duration) })
+          /* @__PURE__ */ jsx6("input", { "aria-label": "Media position", type: "range", min: 0, max: Math.max(duration2, 1), step: 0.1, value: Math.min(position, Math.max(duration2, 1)), onChange: (event) => seek(Number(event.currentTarget.value)), style: { width: "100%", accentColor: accent } }),
+          /* @__PURE__ */ jsx6("span", { style: { fontSize: 11, whiteSpace: "nowrap" }, children: time(duration2) })
         ] }),
         items.length > 1 && /* @__PURE__ */ jsx6("button", { "aria-label": "Next", onClick: () => select(index + 1), style: { color: "inherit", background: "transparent", border: 0, fontSize: 18 }, children: "\u25B6\u25B6" }),
         props.fullscreen !== "disabled" && /* @__PURE__ */ jsx6("button", { "aria-label": "Fullscreen", onClick: () => void toggleFullscreen(), style: { color: "inherit", background: "transparent", border: 0, fontSize: 18 }, children: "\u26F6" })
@@ -27003,20 +27284,26 @@ var init_renderNode = __esm({
         /* @__PURE__ */ jsx6("div", { style: { position: "absolute", inset: 0, display: "grid", placeItems: "center", fontFamily: fontStack(capF.family), fontSize: capF.remSize, fontWeight: capF.weight, color: C("textPrimary", "#13171e") }, children: txt(props.label, ctx) || `${Math.round(pct * 100)}%` })
       ] }) });
     });
+    RATING_METRICS = {
+      sm: { cell: 16, glyph: 14, gap: 2 },
+      md: { cell: 22, glyph: 20, gap: 3 }
+    };
+    ratingMetrics = (size) => size === "sm" ? RATING_METRICS.sm : RATING_METRICS.md;
     RatingNode = withExtras("RatingNode", ({ props, ctx, wrap }) => {
       const C = ctx.color;
       const bound = useResolvedScalar(props.valuePath, ctx);
       const raw = props.valuePath != null ? bound : props.value;
       const val = typeof raw === "number" ? raw : 0;
       const max = props.max ?? 5;
+      const m = ratingMetrics(props.size);
       const col = C(props.color ?? "warning", "#E89F00");
       const invalidIcon = props.icon != null && typeof props.icon !== "string";
       const base = invalidIcon ? ICON_FALLBACK : (typeof props.icon === "string" && props.icon ? props.icon : "star").replace(/_fill$/, "");
       const filledCount = Math.round(val);
       const onClickStar = (i) => ctx.onAction && props.interactive && props.onChange ? () => ctx.onAction({ ...props.onChange, params: { ...props.onChange?.params ?? {}, value: String(i + 1) } }) : void 0;
-      return /* @__PURE__ */ jsx6("span", { style: { display: "inline-flex", alignItems: "center", gap: 3, ...wrap }, children: Array.from({ length: max }).map((_, i) => {
+      return /* @__PURE__ */ jsx6("span", { style: { display: "inline-flex", alignItems: "center", gap: m.gap, ...wrap }, children: Array.from({ length: max }).map((_, i) => {
         const filled = i < filledCount;
-        return /* @__PURE__ */ jsx6("span", { onClick: onClickStar(i), style: { display: "inline-grid", placeItems: "center", width: 22, height: 22, cursor: props.interactive ? "pointer" : "default", opacity: filled ? 1 : 0.28 }, children: iconSvg(filled ? `${base}_fill` : base, { size: 20, color: col }) }, i);
+        return /* @__PURE__ */ jsx6("span", { onClick: onClickStar(i), style: { display: "inline-grid", placeItems: "center", width: m.cell, height: m.cell, cursor: props.interactive ? "pointer" : "default", opacity: filled ? 1 : 0.28 }, children: iconSvg(filled ? `${base}_fill` : base, { size: m.glyph, color: col }) }, i);
       }) });
     });
     AvatarStripNode = withExtras("AvatarStripNode", ({ props, ctx, wrap }) => {
@@ -28449,10 +28736,10 @@ var init_renderNode = __esm({
     };
     A11yHintDescription = ({ hint, idBase, children, ...forwarded }) => {
       const descId = `${idBase ?? "hm"}__hint${React5.useId()}`;
-      const own2 = children.props;
+      const own3 = children.props;
       const next = { ...forwarded };
-      if (forwarded.style) next.style = { ...own2.style ?? {}, ...forwarded.style };
-      next["aria-describedby"] = [own2["aria-describedby"], descId].filter(Boolean).join(" ");
+      if (forwarded.style) next.style = { ...own3.style ?? {}, ...forwarded.style };
+      next["aria-describedby"] = [own3["aria-describedby"], descId].filter(Boolean).join(" ");
       return /* @__PURE__ */ jsxs3(Fragment3, { children: [
         React5.cloneElement(children, next),
         /* @__PURE__ */ jsx6("span", { id: descId, hidden: true, "data-hm-a11y-hint": "", children: hint })
@@ -31480,7 +31767,9 @@ async function runScreenDiagnostics(state, screenId, descriptor) {
     nativeActions,
     appWorkerActions,
     strict: false,
-    workerSubtreeScreens: new Set(state.app?.module.config.workerSubtreeScreens ?? [])
+    workerSubtreeScreens: new Set(state.app?.module.config.workerSubtreeScreens ?? []),
+    // Same a11y rung the build lint applies (RFC 0058 §5) — diagnostics must not disagree.
+    a11y: state.app?.module.config.a11y
   });
   const telemetry = state.telemetryEvents.filter((e) => e.screenId === screenId && (/^worker_/.test(e.type) || e.type === "bundle_load_revoked")).slice(-20);
   const lastError = [...telemetry].reverse().find((e) => /crash|revoked|error|fail/i.test(e.type)) ?? null;
@@ -32136,8 +32425,8 @@ function startBundleSourceWatcher(state) {
 }
 function applyTopBarDefault(descriptor, config) {
   const fallback = config?.navigation?.topBarDefault;
-  const own2 = descriptor?.topBar;
-  if (!fallback || own2) return descriptor;
+  const own3 = descriptor?.topBar;
+  if (!fallback || own3) return descriptor;
   return { ...descriptor, topBar: fallback };
 }
 function syncNetMocksWithApp(state) {
@@ -32405,7 +32694,7 @@ async function handleWebWix(req, res, state) {
   const session = webWixSession(req, res, state);
   const auth = resolveWebWixAuth(state.app);
   const path2 = new URL(req.url ?? "", "http://localhost").pathname;
-  const readJson4 = async () => {
+  const readJson5 = async () => {
     const chunks = [];
     for await (const c of req) chunks.push(c);
     const t = Buffer.concat(chunks).toString("utf8");
@@ -32422,7 +32711,7 @@ async function handleWebWix(req, res, state) {
     res.end(JSON.stringify(obj3));
   };
   if (path2 === "/v1/__webwix/login" && req.method === "POST") {
-    const b = await readJson4();
+    const b = await readJson5();
     try {
       const { memberToken, visitorToken } = await memberDirectLogin(
         auth.clientId,
@@ -32439,7 +32728,7 @@ async function handleWebWix(req, res, state) {
     }
   }
   if (path2 === "/v1/__webwix/call" && req.method === "POST") {
-    const b = await readJson4();
+    const b = await readJson5();
     if (b.ownerMsid !== void 0 || b.checkOwnerSession === true) {
       const msid = String(b.ownerMsid ?? "");
       if (!isSafeMsid(msid)) return reply(400, { error: "webwix_owner_bad_msid" });
@@ -32555,7 +32844,7 @@ async function handleWebWix(req, res, state) {
     });
   }
   if (path2 === "/v1/__webwix/register" && req.method === "POST") {
-    const b = await readJson4();
+    const b = await readJson5();
     try {
       const { memberToken, visitorToken } = await memberDirectRegister(
         auth.clientId,
@@ -33105,7 +33394,8 @@ async function handleAdminPlayground(req, res, state) {
       nativeActions,
       appWorkerActions,
       strict,
-      workerSubtreeScreens: new Set(state.app?.module.config.workerSubtreeScreens ?? [])
+      workerSubtreeScreens: new Set(state.app?.module.config.workerSubtreeScreens ?? []),
+      a11y: state.app?.module.config.a11y
     });
     return sendJson(res, report2.ok ? 200 : 422, report2);
   }
@@ -37532,7 +37822,10 @@ async function buildFromLoaded(preloaded, dest, opts = {}) {
           appWorkerActions,
           strict: collect2.strict,
           workerSubtreeScreens: new Set(preloaded.module.config.workerSubtreeScreens ?? []),
-          l10n: l10nLintOptions(preloaded.module.config.locale, preloaded.dir)
+          l10n: l10nLintOptions(preloaded.module.config.locale, preloaded.dir),
+          // RFC 0058 §5 — the app's own rung of the a11y ladder. Omitted ⇒ the validator's
+          // default, "error"; an in-repo app with ratcheted debt declares "warn".
+          a11y: preloaded.module.config.a11y
         });
         lint.push({ screenId, ok: report2.ok, issues: report2.issues });
       }
@@ -37560,7 +37853,8 @@ async function buildFromLoaded(preloaded, dest, opts = {}) {
             nativeActions,
             appWorkerActions,
             strict: collect2.strict,
-            workerSubtreeScreens: new Set(preloaded.module.config.workerSubtreeScreens ?? [])
+            workerSubtreeScreens: new Set(preloaded.module.config.workerSubtreeScreens ?? []),
+            a11y: preloaded.module.config.a11y
           });
           lint.push({ screenId: wantedRender, ok: report2.ok, issues: report2.issues });
         }
@@ -38095,6 +38389,7 @@ __export(progress_exports, {
   appleScriptString: () => appleScriptString,
   archiveBytes: () => archiveBytes,
   archiveImage: () => archiveImage,
+  imageExtension: () => imageExtension,
   journalPath: () => journalPath,
   notifyDesktop: () => notifyDesktop,
   parseStep: () => parseStep,
@@ -38335,6 +38630,7 @@ __export(studio_exports, {
   STUDIO_PAGE: () => STUDIO_PAGE,
   VALIDATE_RECORD: () => VALIDATE_RECORD,
   buildView: () => buildView,
+  escapeHtml: () => escapeHtml,
   observeShots: () => observeShots,
   openStudio: () => openStudio,
   refreshStudio: () => refreshStudio,
@@ -40659,8 +40955,8 @@ function rewriteNav(nav, removed, homeId) {
       return p;
     };
     const tabFor = (screenId) => {
-      const own2 = remainingRoots.find((t) => t.screenId === screenId);
-      return typeof own2?.id === "string" ? own2.id : void 0;
+      const own3 = remainingRoots.find((t) => t.screenId === screenId);
+      return typeof own3?.id === "string" ? own3.id : void 0;
     };
     const homeTab = tabFor(homeId) ?? (typeof remainingRoots[0]?.id === "string" ? remainingRoots[0].id : "");
     const finalTab = /* @__PURE__ */ new Map();
@@ -40795,8 +41091,8 @@ function planTrim(src, keepIds, links) {
     if (!linksOf(r).some((l) => removedTarget(l.to))) continue;
     const block = structuredClone(r.block);
     const isDead = (entry) => {
-      const own2 = tapTarget(entry);
-      const to = own2 && removedTarget(own2) ? own2 : rowTemplateTarget(entry, removedTarget);
+      const own3 = tapTarget(entry);
+      const to = own3 && removedTarget(own3) ? own3 : rowTemplateTarget(entry, removedTarget);
       if (!to) return false;
       dropped.push({ screen: r.label, node: entryLabel(entry), to });
       return true;
@@ -44922,6 +45218,254 @@ var init_functions = __esm({
   }
 });
 
+// src/studio-reel.ts
+var studio_reel_exports = {};
+__export(studio_reel_exports, {
+  REEL_BUDGET_BYTES: () => REEL_BUDGET_BYTES,
+  buildReel: () => buildReel,
+  inlineImages: () => inlineImages,
+  planReel: () => planReel,
+  renderReel: () => renderReel,
+  thin: () => thin,
+  utcDay: () => utcDay
+});
+import { createHash as createHash24 } from "node:crypto";
+import { lstatSync as lstatSync7, readFileSync as readFileSync52 } from "node:fs";
+import { basename as basename11, join as join45 } from "node:path";
+function loadMemory2(dir) {
+  const m = readJson4(join45(dir, ".himi", "studio", "memory.json"));
+  if (!isObj(m) || m.version !== 1 || !isObj(m.shots) || !Array.isArray(m.timeline)) return null;
+  const shots = [];
+  for (const [id, s] of Object.entries(m.shots)) {
+    if (!isObj(s)) continue;
+    const file = historyName(s.sha, s.ext);
+    const firstSeen = str(s.firstSeen);
+    if (!file || !firstSeen) continue;
+    const versions = typeof s.versions === "number" && Number.isSafeInteger(s.versions) && s.versions > 0 ? s.versions : 1;
+    shots.push({ id, file, firstSeen, versions, present: s.present === true });
+  }
+  const timeline = [];
+  for (const t of m.timeline) {
+    if (!isObj(t)) continue;
+    const file = historyName(t.sha, t.ext);
+    const ts2 = str(t.ts);
+    const id = str(t.id);
+    if (file && ts2 && id) timeline.push({ ts: ts2, id, file });
+  }
+  return { createdAt: str(m.createdAt), shots, timeline };
+}
+function captionAt(entries, ts2) {
+  let best = null;
+  for (const e of entries) if (e.ts <= ts2) best = e;
+  return best ? best.message : null;
+}
+function thin(items, max) {
+  if (items.length <= max) return items;
+  if (max < 2) return items.slice(-1);
+  const out = [];
+  for (let i = 0; i < max; i++) out.push(items[Math.round(i * (items.length - 1) / (max - 1))]);
+  return out;
+}
+function planReel(dir) {
+  const memory = loadMemory2(dir);
+  const { entries } = readProgress(dir);
+  const summary = summarizeProgress(entries);
+  const manifest = readJson4(join45(dir, "himalaya.content.json"));
+  const tokens = readJson4(join45(dir, "tokens.json"));
+  const accentToken = tokens?.colors?.accentPrimary;
+  const accentRaw = typeof accentToken === "string" ? accentToken : accentToken?.light;
+  const accent = typeof accentRaw === "string" && ACCENT.test(accentRaw) ? accentRaw : DEFAULT_ACCENT;
+  const shots = memory?.shots ?? [];
+  const present = shots.filter((s) => s.present).sort((a, b) => a.firstSeen.localeCompare(b.firstSeen) || a.id.localeCompare(b.id));
+  const home = present.find((s) => /(^|_)home($|_)/i.test(s.id)) ?? present.find((s) => /home/i.test(s.id));
+  const focusId = home?.id ?? present[0]?.id ?? null;
+  const timeline = memory && focusId ? memory.timeline.filter((t) => t.id === focusId) : [];
+  const frames = thin(timeline, MAX_FLIP_FRAMES).map((t) => ({ ts: t.ts, file: t.file, caption: captionAt(entries, t.ts) }));
+  const finals = present.map((s) => ({ id: s.id, file: s.file }));
+  const postcards = entries.map((e) => ({
+    ts: e.ts,
+    message: e.message,
+    step: str(e.step),
+    files: (Array.isArray(e.images) ? e.images : []).map((i) => isObj(i) && typeof i.file === "string" ? basename11(i.file) : "").filter((f) => HISTORY_NAME.test(f))
+  }));
+  const times = [summary.startedAt, ...timeline.map((t) => t.ts), memory?.createdAt].filter((x) => !!x).sort();
+  const startedAt = times[0] ?? null;
+  const endedAt = [summary.lastAt, ...timeline.map((t) => t.ts)].filter((x) => !!x).sort().pop() ?? null;
+  return {
+    app: typeof manifest?.name === "string" && manifest.name ? manifest.name : basename11(dir),
+    accent,
+    startedAt,
+    endedAt,
+    focusId,
+    frames,
+    finals,
+    postcards,
+    stats: {
+      screens: finals.length,
+      versions: shots.reduce((n, s) => n + s.versions, 0),
+      postcards: entries.length,
+      elapsedMs: startedAt && endedAt ? Date.parse(endedAt) - Date.parse(startedAt) : null
+    },
+    dropped: 0
+  };
+}
+function inlineImages(dir, plan, budget = REEL_BUDGET_BYTES) {
+  const verified = (f) => {
+    if (!HISTORY_NAME.test(f)) return null;
+    try {
+      const path2 = join45(dir, HISTORY_DIR, f);
+      const st = lstatSync7(path2);
+      if (!st.isFile() || st.nlink !== 1) return null;
+      const bytes2 = readFileSync52(path2);
+      return createHash24("sha256").update(bytes2).digest("hex") === f.slice(0, 64) && imageExtension(bytes2) === f.slice(65) ? bytes2 : null;
+    } catch {
+      return null;
+    }
+  };
+  const sizes = /* @__PURE__ */ new Map();
+  const sizeOf = (f) => {
+    if (!sizes.has(f)) sizes.set(f, verified(f)?.length ?? null);
+    return sizes.get(f);
+  };
+  const total = (p) => {
+    const blank = /* @__PURE__ */ new Map();
+    let bytes2 = 0;
+    for (const f of cited(p)) {
+      const n = sizeOf(f);
+      if (n === null) continue;
+      blank.set(f, "");
+      bytes2 += `data:${mimeOf(f)};base64,`.length + 4 * Math.ceil(n / 3);
+    }
+    return bytes2 + Buffer.byteLength(renderReel(p, blank));
+  };
+  let current = { ...plan };
+  let dropped = 0;
+  const over = () => total(current) > budget;
+  while (over() && current.frames.length > 2) {
+    const next = thin(current.frames, Math.max(2, Math.floor(current.frames.length * 0.7)));
+    dropped += current.frames.length - next.length;
+    current = { ...current, frames: next };
+  }
+  for (let i = 0; i < current.postcards.length && over(); i++) {
+    if (!current.postcards[i].files.length) continue;
+    dropped += current.postcards[i].files.length;
+    current = { ...current, postcards: current.postcards.map((c, j) => j === i ? { ...c, files: [] } : c) };
+  }
+  const order = current.finals.map((f, j) => ({ f, j })).filter(({ f }) => f.file).sort((a, b) => Number(a.f.id === current.focusId) - Number(b.f.id === current.focusId) || b.j - a.j);
+  for (const { j } of order) {
+    if (!over()) break;
+    dropped++;
+    current = { ...current, finals: current.finals.map((f, k) => k === j ? { ...f, file: null } : f) };
+  }
+  if (over() && current.frames.length > 1) {
+    dropped += current.frames.length - 1;
+    current = { ...current, frames: current.frames.slice(-1) };
+  }
+  const images = /* @__PURE__ */ new Map();
+  for (const f of new Set(cited(current))) {
+    if (sizeOf(f) === null) continue;
+    const bytes2 = verified(f);
+    if (!bytes2 || bytes2.length !== sizeOf(f)) continue;
+    images.set(f, `data:${mimeOf(f)};base64,${bytes2.toString("base64")}`);
+  }
+  return { plan: { ...current, dropped }, images };
+}
+function duration(ms) {
+  if (ms === null || !Number.isFinite(ms) || ms < 0) return "\u2014";
+  const m = Math.round(ms / 6e4);
+  return m < 60 ? `${m} min` : `${Math.floor(m / 60)} h ${m % 60} min`;
+}
+function utcDay(ts2) {
+  const d = new Date(ts2);
+  return Number.isNaN(d.getTime()) ? "" : `${d.toUTCString().slice(0, 16)} (UTC)`;
+}
+function sinceStart(start, ts2) {
+  if (!start) return "";
+  const s = Math.max(0, Math.round((Date.parse(ts2) - Date.parse(start)) / 1e3));
+  const h = Math.floor(s / 3600);
+  const m = Math.floor(s % 3600 / 60);
+  const sec = String(s % 60).padStart(2, "0");
+  return h ? `${h}:${String(m).padStart(2, "0")}:${sec}` : `${m}:${sec}`;
+}
+function renderReel(plan, images) {
+  const img = (f, alt, cls = "") => f && images.has(f) ? `<img class="${cls}" src="${images.get(f)}" alt="${escapeHtml(alt)}">` : "";
+  const count = (n) => escapeHtml(String(Number.isSafeInteger(n) && n >= 0 ? n : 0));
+  const accent = ACCENT.test(plan.accent) ? plan.accent : DEFAULT_ACCENT;
+  const clock = (ts2) => sinceStart(plan.startedAt, ts2);
+  const frames = plan.frames.filter((f) => images.has(f.file));
+  const flip = frames.length ? `<section class="flip"><div class="phone">${frames.map((f, i) => `<img class="fr${i === 0 ? " on" : ""}" src="${images.get(f.file)}" alt="${escapeHtml(plan.focusId ?? "")} at ${clock(f.ts)}">`).join("")}</div>
+<div class="flipcap"><div class="t" id="ft">${frames[0] ? clock(frames[0].ts) : ""}</div><div id="fc">${escapeHtml(frames[0]?.caption ?? "")}</div><div class="bar"><div id="fb"></div></div></div></section>` : `<p class="muted">No screen versions were recorded \u2014 open the build board with <code>himi studio</code> before building to capture them.</p>`;
+  const data = JSON.stringify(frames.map((f) => ({ t: clock(f.ts), c: f.caption ?? "" }))).replace(/</g, "\\u003c");
+  return `<!doctype html>
+<html lang="en"><head><meta charset="utf-8"><meta name="viewport" content="width=device-width,initial-scale=1">
+<title>${escapeHtml(plan.app)} \xB7 the making of</title>
+<style>
+:root{--bg:#f6f5f2;--card:#fff;--ink:#1c1c1a;--muted:#6b6a64;--line:#e6e3dc;--accent:${accent}}
+@media (prefers-color-scheme:dark){:root{--bg:#121211;--card:#1c1c1a;--ink:#ecebe6;--muted:#a3a19a;--line:#2c2b28}}
+*{box-sizing:border-box}body{margin:0;background:var(--bg);color:var(--ink);font:15px/1.55 -apple-system,BlinkMacSystemFont,"Segoe UI",Roboto,Helvetica,Arial,sans-serif}
+.wrap{max-width:980px;margin:0 auto;padding:32px 20px 64px}h1{font-size:30px;margin:0 0 4px}h2{font-size:14px;text-transform:uppercase;letter-spacing:.05em;color:var(--muted);margin:40px 0 14px}
+.muted{color:var(--muted)}.stats{display:flex;gap:28px;flex-wrap:wrap;margin:18px 0 8px}.stats b{display:block;font-size:24px}
+.flip{display:flex;gap:28px;align-items:center;flex-wrap:wrap}.phone{position:relative;width:280px;aspect-ratio:390/844;border:10px solid #111;border-radius:38px;overflow:hidden;background:#fff;flex:none}
+.phone img{position:absolute;inset:0;width:100%;height:100%;object-fit:cover;object-position:top;opacity:0;transition:opacity .35s}.phone img.on{opacity:1}
+.flipcap{flex:1;min-width:220px}.flipcap .t{font-size:40px;font-weight:700;font-variant-numeric:tabular-nums;color:var(--accent)}.bar{height:4px;background:var(--line);border-radius:2px;margin-top:16px}.bar div{height:4px;background:var(--accent);border-radius:2px;width:0}
+.grid{display:grid;grid-template-columns:repeat(auto-fill,minmax(150px,1fr));gap:18px}.grid figure{margin:0;text-align:center}.grid img{width:100%;aspect-ratio:390/844;object-fit:cover;object-position:top;border:6px solid #111;border-radius:22px;background:#fff}
+figcaption{font-size:12px;color:var(--muted);margin-top:6px;word-break:break-all}
+.log{list-style:none;padding:0;margin:0}.log li{display:flex;gap:14px;padding:12px 0;border-top:1px solid var(--line)}.log .t{min-width:52px;color:var(--muted);font-variant-numeric:tabular-nums}.log .s{font-size:12px;color:var(--muted);text-transform:capitalize}
+.log .imgs{display:flex;gap:8px;margin-top:8px;flex-wrap:wrap}.log .imgs img{height:120px;border-radius:10px;border:1px solid var(--line)}
+footer{margin-top:48px;font-size:12px;color:var(--muted)}
+</style></head><body><div class="wrap">
+<h1>${escapeHtml(plan.app)}</h1><div class="muted">The making of \u2014 every version of the app as it was built${plan.startedAt ? `, ${escapeHtml(utcDay(plan.startedAt))}` : ""}</div>
+<div class="stats"><div><b>${duration(plan.stats.elapsedMs)}</b><span class="muted">from first picture to last</span></div><div><b>${count(plan.stats.screens)}</b><span class="muted">screens</span></div><div><b>${count(plan.stats.versions)}</b><span class="muted">versions rendered</span></div><div><b>${count(plan.stats.postcards)}</b><span class="muted">postcards</span></div></div>
+<h2>${escapeHtml(plan.focusId ?? "The app")}, version by version</h2>
+${flip}
+<h2>Where it ended up</h2>
+<div class="grid">${plan.finals.map((f) => `<figure>${img(f.file, f.id)}<figcaption>${escapeHtml(f.id)}</figcaption></figure>`).join("")}</div>
+<h2>Postcards</h2>
+<ul class="log">${plan.postcards.map((c) => `<li><div class="t">${clock(c.ts)}</div><div><div>${escapeHtml(c.message)}</div>${c.step ? `<div class="s">step ${JOURNEY_STEPS.indexOf(c.step) + 1} \xB7 ${escapeHtml(c.step)}</div>` : ""}${c.files.length ? `<div class="imgs">${c.files.map((f) => img(f, c.message)).join("")}</div>` : ""}</div></li>`).join("") || `<li class="muted">No postcards were journaled.</li>`}</ul>
+<footer>Built with himi.${plan.dropped ? ` ${count(plan.dropped)} pictures were left out to keep this file small.` : ""}</footer>
+</div>
+<script>
+(function(){var F=${data};var imgs=document.querySelectorAll(".phone img");if(imgs.length<2)return;var i=0;
+function show(n){imgs[i].classList.remove("on");i=n;imgs[i].classList.add("on");document.getElementById("ft").textContent=F[i].t;document.getElementById("fc").textContent=F[i].c;document.getElementById("fb").style.width=(100*i/(imgs.length-1))+"%"}
+function tick(){show(i+1<imgs.length?i+1:0);setTimeout(tick,i+1<imgs.length?900:2500)}setTimeout(tick,1200);})();
+</script>
+</body></html>
+`;
+}
+function buildReel(dir, budget = REEL_BUDGET_BYTES) {
+  const { plan, images } = inlineImages(dir, planReel(dir), budget);
+  return { html: renderReel(plan, images), plan };
+}
+var REEL_BUDGET_BYTES, MAX_FLIP_FRAMES, DEFAULT_ACCENT, ACCENT, HISTORY_NAME, MIME2, mimeOf, readJson4, isObj, str, historyName, cited;
+var init_studio_reel = __esm({
+  "src/studio-reel.ts"() {
+    init_progress();
+    init_studio();
+    REEL_BUDGET_BYTES = 12 * 1024 * 1024;
+    MAX_FLIP_FRAMES = 40;
+    DEFAULT_ACCENT = "#3b6fd8";
+    ACCENT = /^#[0-9a-f]{3,8}$/i;
+    HISTORY_NAME = /^[0-9a-f]{64}\.(png|jpg|gif|webp)$/;
+    MIME2 = { png: "image/png", jpg: "image/jpeg", gif: "image/gif", webp: "image/webp" };
+    mimeOf = (file) => MIME2[file.slice(65)] ?? "image/png";
+    readJson4 = (file) => {
+      try {
+        return JSON.parse(readFileSync52(file, "utf8"));
+      } catch {
+        return null;
+      }
+    };
+    isObj = (v) => !!v && typeof v === "object" && !Array.isArray(v);
+    str = (v) => typeof v === "string" && v ? v : null;
+    historyName = (sha, ext) => typeof sha === "string" && typeof ext === "string" && HISTORY_NAME.test(`${sha}.${ext}`) ? `${sha}.${ext}` : null;
+    cited = (p) => [
+      ...p.frames.map((f) => f.file),
+      ...p.finals.flatMap((f) => f.file ? [f.file] : []),
+      ...p.postcards.flatMap((c) => c.files)
+    ];
+  }
+});
+
 // src/native-decode.ts
 var native_decode_exports = {};
 __export(native_decode_exports, {
@@ -44937,9 +45481,9 @@ __export(native_decode_exports, {
   runNativeDecode: () => runNativeDecode
 });
 import { execFileSync as execFileSync5, spawnSync as spawnSync2 } from "node:child_process";
-import { existsSync as existsSync48, mkdtempSync as mkdtempSync2, readFileSync as readFileSync52, rmSync as rmSync10, writeFileSync as writeFileSync20 } from "node:fs";
+import { existsSync as existsSync48, mkdtempSync as mkdtempSync2, readFileSync as readFileSync53, rmSync as rmSync10, writeFileSync as writeFileSync20 } from "node:fs";
 import { tmpdir as tmpdir3 } from "node:os";
-import { join as join45 } from "node:path";
+import { join as join46 } from "node:path";
 import { fileURLToPath as fileURLToPath20 } from "node:url";
 function nativeDecodePackageDir() {
   return fileURLToPath20(new URL("../../../core/runtime/ios/HimalayaCore/", import.meta.url));
@@ -44949,8 +45493,8 @@ function nativeDecodeAndroidHarnessDir() {
 }
 function nativeOracleShipped() {
   return {
-    ios: existsSync48(join45(nativeDecodePackageDir(), "Package.swift")),
-    android: existsSync48(join45(nativeDecodeAndroidHarnessDir(), "gradlew"))
+    ios: existsSync48(join46(nativeDecodePackageDir(), "Package.swift")),
+    android: existsSync48(join46(nativeDecodeAndroidHarnessDir(), "gradlew"))
   };
 }
 function detectNativeDecode(options = {}) {
@@ -44961,7 +45505,7 @@ function detectNativeDecode(options = {}) {
     return { platform: "ios", available: false, reason: `the iOS decoder oracle requires macOS (darwin); this host is ${hostPlatform}` };
   }
   if (!swiftAvailable) return { platform: "ios", available: false, reason: "swift is not on PATH" };
-  const packageAvailable = options.packageAvailable ?? existsSync48(join45(packageDir, "Package.swift"));
+  const packageAvailable = options.packageAvailable ?? existsSync48(join46(packageDir, "Package.swift"));
   if (!packageAvailable) {
     return {
       platform: "ios",
@@ -44973,7 +45517,7 @@ function detectNativeDecode(options = {}) {
 }
 function localPropertiesSdk(harnessDir) {
   try {
-    const match = readFileSync52(join45(harnessDir, "local.properties"), "utf8").match(/^sdk\.dir\s*=\s*(.+)$/m);
+    const match = readFileSync53(join46(harnessDir, "local.properties"), "utf8").match(/^sdk\.dir\s*=\s*(.+)$/m);
     return match?.[1]?.trim().replace(/\\([ :\\])/g, "$1") ?? null;
   } catch {
     return null;
@@ -44981,7 +45525,7 @@ function localPropertiesSdk(harnessDir) {
 }
 function detectAndroidNativeDecode(options = {}) {
   const harnessDir = options.harnessDir ?? nativeDecodeAndroidHarnessDir();
-  const gradlew = join45(harnessDir, "gradlew");
+  const gradlew = join46(harnessDir, "gradlew");
   const gradlewAvailable = options.gradlewAvailable ?? existsSync48(gradlew);
   if (!gradlewAvailable) {
     return {
@@ -45064,14 +45608,14 @@ function parseNativeDecodeOutput(stdout, expectedScreenIds, platform = "ios") {
   return verdicts;
 }
 function runNativeDecode(options) {
-  const descriptorDir = mkdtempSync2(join45(tmpdir3(), "himi-native-decode-"));
+  const descriptorDir = mkdtempSync2(join46(tmpdir3(), "himi-native-decode-"));
   const startedAt = Date.now();
   try {
     for (const descriptor of options.descriptors) {
       if (typeof descriptor.descriptorJson !== "string") {
         throw new Error(`native decode cannot judge ${descriptor.screenId}: the release builder did not return its exact baked JSON bytes`);
       }
-      writeFileSync20(join45(descriptorDir, `${encodeURIComponent(descriptor.screenId)}.json`), descriptor.descriptorJson);
+      writeFileSync20(join46(descriptorDir, `${encodeURIComponent(descriptor.screenId)}.json`), descriptor.descriptorJson);
     }
     options.progress?.("building cached Swift oracle");
     execFileSync5("swift", ["build", "--package-path", options.packageDir, "--product", "himi-decode-oracle"], {
@@ -45083,7 +45627,7 @@ function runNativeDecode(options) {
       encoding: "utf8"
     }).trim();
     options.progress?.(`running real Swift decoder over ${options.descriptors.length} screen${options.descriptors.length === 1 ? "" : "s"}`);
-    const stdout = execFileSync5(join45(binPath, "himi-decode-oracle"), ["--dir", descriptorDir], {
+    const stdout = execFileSync5(join46(binPath, "himi-decode-oracle"), ["--dir", descriptorDir], {
       stdio: ["ignore", "pipe", "pipe"],
       encoding: "utf8"
     });
@@ -45101,15 +45645,15 @@ function runNativeDecode(options) {
   }
 }
 function runAndroidNativeDecode(options) {
-  const descriptorDir = mkdtempSync2(join45(tmpdir3(), "himi-native-decode-android-"));
-  const outputPath = join45(descriptorDir, "verdicts.ndjson");
+  const descriptorDir = mkdtempSync2(join46(tmpdir3(), "himi-native-decode-android-"));
+  const outputPath = join46(descriptorDir, "verdicts.ndjson");
   const startedAt = Date.now();
   try {
     for (const descriptor of options.descriptors) {
       if (typeof descriptor.descriptorJson !== "string") {
         throw new Error(`native decode cannot judge ${descriptor.screenId}: the release builder did not return its exact baked JSON bytes`);
       }
-      writeFileSync20(join45(descriptorDir, `${encodeURIComponent(descriptor.screenId)}.json`), descriptor.descriptorJson);
+      writeFileSync20(join46(descriptorDir, `${encodeURIComponent(descriptor.screenId)}.json`), descriptor.descriptorJson);
     }
     options.progress?.(`running real Kotlin decoder over ${options.descriptors.length} screen${options.descriptors.length === 1 ? "" : "s"}`);
     execFileSync5(options.gradlew, [
@@ -45124,7 +45668,7 @@ function runAndroidNativeDecode(options) {
       stdio: ["ignore", "ignore", "pipe"],
       encoding: "utf8"
     });
-    const stdout = readFileSync52(outputPath, "utf8");
+    const stdout = readFileSync53(outputPath, "utf8");
     return {
       platform: "android",
       verdicts: parseNativeDecodeOutput(stdout, options.descriptors.map((descriptor) => descriptor.screenId), "android"),
@@ -45193,14 +45737,14 @@ __export(browser_authoring_exports, {
   sdkSubpathReader: () => sdkSubpathReader
 });
 import { createServer as createServer3 } from "node:http";
-import { createHash as createHash24, randomBytes as randomBytes4 } from "node:crypto";
-import { existsSync as existsSync49, readdirSync as readdirSync24, readFileSync as readFileSync53, realpathSync as realpathSync5, statSync as statSync12 } from "node:fs";
-import { join as join46, posix, relative as relative8, sep as sep12 } from "node:path";
+import { createHash as createHash25, randomBytes as randomBytes4 } from "node:crypto";
+import { existsSync as existsSync49, readdirSync as readdirSync24, readFileSync as readFileSync54, realpathSync as realpathSync5, statSync as statSync12 } from "node:fs";
+import { join as join47, posix, relative as relative8, sep as sep12 } from "node:path";
 function humanMs(ms) {
   return ms < 1e3 ? `${ms}ms` : `${Math.round(ms / 1e3)}s`;
 }
 function collectWorkerSources(tier5SrcDir, bundleName) {
-  const root = join46(tier5SrcDir, bundleName);
+  const root = join47(tier5SrcDir, bundleName);
   const files = {};
   const visitedDirs = /* @__PURE__ */ new Set();
   const walk2 = (abs, rel) => {
@@ -45208,12 +45752,12 @@ function collectWorkerSources(tier5SrcDir, bundleName) {
     if (visitedDirs.has(real)) return;
     visitedDirs.add(real);
     for (const name of readdirSync24(abs).sort()) {
-      const childAbs = join46(abs, name);
+      const childAbs = join47(abs, name);
       const childRel = posix.join(rel, name);
       if (statSync12(childAbs).isDirectory()) {
         walk2(childAbs, childRel);
       } else if (/\.(ts|tsx|js|mjs|json)$/.test(name)) {
-        files[childRel] = readFileSync53(childAbs, "utf8");
+        files[childRel] = readFileSync54(childAbs, "utf8");
       }
     }
   };
@@ -45234,20 +45778,20 @@ function collectRelativeSiblings(files, tier5SrcDir) {
       const spec = m[1];
       const virtual = posix.normalize(posix.join(dir, spec));
       if (!virtual.startsWith("/tier5-src/")) continue;
-      const onDisk = join46(tier5SrcDir, virtual.slice("/tier5-src/".length));
+      const onDisk = join47(tier5SrcDir, virtual.slice("/tier5-src/".length));
       const candidates = [
         onDisk,
         `${onDisk}.ts`,
         `${onDisk}.js`,
         onDisk.replace(/\.js$/, ".ts"),
-        join46(onDisk, "index.ts"),
-        join46(onDisk, "index.js")
+        join47(onDisk, "index.ts"),
+        join47(onDisk, "index.js")
       ];
       for (const abs of candidates) {
         if (!existsSync49(abs) || statSync12(abs).isDirectory()) continue;
         const key2 = `/tier5-src/${relative8(tier5SrcDir, abs).split(sep12).join(posix.sep)}`;
         if (key2 in files) break;
-        files[key2] = readFileSync53(abs, "utf8");
+        files[key2] = readFileSync54(abs, "utf8");
         queue.push(key2);
         break;
       }
@@ -45282,7 +45826,7 @@ function collectSdkModules(files, resolveSubpath) {
 function sdkSubpathReader(resolve48) {
   return (sub) => {
     try {
-      return readFileSync53(resolve48(`@wix/himalaya/${sub}`), "utf8");
+      return readFileSync54(resolve48(`@wix/himalaya/${sub}`), "utf8");
     } catch {
       return null;
     }
@@ -45292,7 +45836,7 @@ function encodeJob(job) {
   return Buffer.from(JSON.stringify(job), "utf8").toString("base64");
 }
 function mintToken2(payload, nonce = randomBytes4(16).toString("hex")) {
-  const digest2 = createHash24("sha256").update(payload, "utf8").digest("base64url");
+  const digest2 = createHash25("sha256").update(payload, "utf8").digest("base64url");
   return `${nonce}.${digest2}`;
 }
 function defaultOpenBrowser2(url) {
@@ -45454,8 +45998,8 @@ __export(coverage_exports, {
   suppressedNativeKeys: () => suppressedNativeKeys,
   trendAndStore: () => trendAndStore
 });
-import { existsSync as existsSync50, mkdirSync as mkdirSync24, readFileSync as readFileSync54, writeFileSync as writeFileSync21 } from "node:fs";
-import { dirname as dirname26, join as join47 } from "node:path";
+import { existsSync as existsSync50, mkdirSync as mkdirSync24, readFileSync as readFileSync55, writeFileSync as writeFileSync21 } from "node:fs";
+import { dirname as dirname26, join as join48 } from "node:path";
 function suppressedNativeKeys(oracle) {
   return [...oracle.ios ? [] : ["native-decode|ios"], ...oracle.android ? [] : ["native-decode|android"]];
 }
@@ -45516,15 +46060,15 @@ function assembleLedger(r, options = {}) {
         remedy: SOURCEMAP_REMEDY[c.sourcemap]
       });
     }
-    const own2 = (c.uncoveredFunctions ?? []).filter((f) => f.source?.startsWith("tier5-src/") || f.source?.startsWith("core/dev-server/tier5-bundles-src/"));
-    if (!own2.length) continue;
-    const named = own2.slice(0, 6).map((f) => `${f.name} (${f.source})`).join(", ");
-    const more = own2.length > 6 ? ` +${own2.length - 6} more` : "";
+    const own3 = (c.uncoveredFunctions ?? []).filter((f) => f.source?.startsWith("tier5-src/") || f.source?.startsWith("core/dev-server/tier5-bundles-src/"));
+    if (!own3.length) continue;
+    const named = own3.slice(0, 6).map((f) => `${f.name} (${f.source})`).join(", ");
+    const more = own3.length > 6 ? ` +${own3.length - 6} more` : "";
     out.push({
       key: `code-uncovered|${c.screen}`,
       kind: "code-uncovered",
       screen: c.screen,
-      gap: `${own2.length} worker function${own2.length === 1 ? "" : "s"} never executed on any axis: ${named}${more}`,
+      gap: `${own3.length} worker function${own3.length === 1 ? "" : "s"} never executed on any axis: ${named}${more}`,
       remedy: "usually an error/edge branch \u2014 give the crawl data that reaches it (a net-mocks rule, cms seed rows, or a nav edge with the right input), or verify the path on a preview"
     });
   }
@@ -45625,11 +46169,11 @@ function assembleLedger(r, options = {}) {
   return out;
 }
 function trendAndStore(dir, entries, suppressed) {
-  const p = join47(dir, LEDGER_FILE);
+  const p = join48(dir, LEDGER_FILE);
   let previous = null;
   try {
     if (existsSync50(p)) {
-      const parsed = JSON.parse(readFileSync54(p, "utf8"));
+      const parsed = JSON.parse(readFileSync55(p, "utf8"));
       if (Array.isArray(parsed.keys)) previous = parsed.keys.filter((k) => typeof k === "string");
     }
   } catch {
@@ -45668,11 +46212,11 @@ function formatLedger(entries, trend) {
   return out.join("\n");
 }
 function diffAndStoreObservations(dir, current) {
-  const p = join47(dir, OBS_FILE);
+  const p = join48(dir, OBS_FILE);
   let previous = null;
   try {
     if (existsSync50(p)) {
-      const parsed = JSON.parse(readFileSync54(p, "utf8"));
+      const parsed = JSON.parse(readFileSync55(p, "utf8"));
       if (parsed.screens && typeof parsed.screens === "object" && !Array.isArray(parsed.screens) && Object.values(parsed.screens).every(
         (v) => Array.isArray(v) && v.every((l) => typeof l === "string")
       )) {
@@ -45721,8 +46265,8 @@ var LEDGER_FILE, OBS_FILE;
 var init_coverage = __esm({
   "src/coverage.ts"() {
     init_native_decode();
-    LEDGER_FILE = join47(".himi", "test-ledger.json");
-    OBS_FILE = join47(".himi", "test-observations.json");
+    LEDGER_FILE = join48(".himi", "test-ledger.json");
+    OBS_FILE = join48(".himi", "test-observations.json");
   }
 });
 
@@ -45733,8 +46277,8 @@ __export(design_kits_exports, {
   kitsDir: () => kitsDir,
   listKits: () => listKits2
 });
-import { existsSync as existsSync51, readFileSync as readFileSync55, readdirSync as readdirSync25 } from "node:fs";
-import { join as join48, basename as basename11 } from "node:path";
+import { existsSync as existsSync51, readFileSync as readFileSync56, readdirSync as readdirSync25 } from "node:fs";
+import { join as join49, basename as basename12 } from "node:path";
 import { fileURLToPath as fileURLToPath21 } from "node:url";
 function kitsDir() {
   return KIT_DIR_CANDIDATES.find((p) => existsSync51(p));
@@ -45742,7 +46286,7 @@ function kitsDir() {
 function listKits2() {
   const dir = kitsDir();
   if (!dir) return [];
-  return readdirSync25(dir).filter((f) => f.endsWith(".json")).map((f) => basename11(f, ".json")).sort();
+  return readdirSync25(dir).filter((f) => f.endsWith(".json")).map((f) => basename12(f, ".json")).sort();
 }
 function kitReport(name) {
   const dir = kitsDir();
@@ -45761,7 +46305,7 @@ In a published @wix/himalaya-cli this is a packaging bug \u2014 the kits should
   if (!kits.includes(name)) {
     return { ok: false, kit: name, kits, problems: [`no design kit named "${name}". Available: ${kits.join(", ")}`] };
   }
-  const raw = readFileSync55(join48(dir, `${name}.json`), "utf8");
+  const raw = readFileSync56(join49(dir, `${name}.json`), "utf8");
   let parsed;
   try {
     parsed = JSON.parse(raw);
@@ -45785,9 +46329,9 @@ var init_design_kits = __esm({
   "src/design-kits.ts"() {
     KIT_DIR_CANDIDATES = [
       // in-repo: tools/himi-cli/src/design-kits.ts → <repo>/stdlib/design-kits/
-      join48(fileURLToPath21(new URL("../../..", import.meta.url)), "stdlib", "design-kits"),
+      join49(fileURLToPath21(new URL("../../..", import.meta.url)), "stdlib", "design-kits"),
       // published CLI: <pkg>/dist/cli.mjs → <pkg>/stdlib/design-kits/
-      join48(fileURLToPath21(new URL("..", import.meta.url)), "stdlib", "design-kits")
+      join49(fileURLToPath21(new URL("..", import.meta.url)), "stdlib", "design-kits")
     ];
   }
 });
@@ -45801,11 +46345,11 @@ __export(assets_exports, {
   removeAssetPayload: () => removeAssetPayload,
   verifyReport: () => verifyReport
 });
-import { readFileSync as readFileSync56 } from "node:fs";
-import { basename as basename12 } from "node:path";
+import { readFileSync as readFileSync57 } from "node:fs";
+import { basename as basename13 } from "node:path";
 function declaredAssets(dir) {
   return collectAssets(dir).map((a) => {
-    const bytes2 = readFileSync56(a.path);
+    const bytes2 = readFileSync57(a.path);
     return {
       name: a.name,
       sha256: assetSha256(bytes2),
@@ -45882,8 +46426,8 @@ function verifyReport(dir, app, manifest) {
   };
 }
 function addAssetPayload(manifest, filePath, opts) {
-  const bytes2 = readFileSync56(filePath);
-  const name = opts.name ?? basename12(filePath);
+  const bytes2 = readFileSync57(filePath);
+  const name = opts.name ?? basename13(filePath);
   const sha2565 = assetSha256(bytes2);
   const record2 = {
     sha256: sha2565,
@@ -46767,12 +47311,13 @@ ${releaseId}`;
         const bytes2 = await store.getSource(app, m.sourceHash);
         if (!bytes2) return json3(404, { error: "template_source_not_found", app });
         const etag = `"${m.sourceHash}"`;
+        const cache = { "cache-control": pin ? PINNED_CACHE_CONTROL : DOC_CACHE_CONTROL, ...pin ? { vary: "x-himalaya-release" } : {} };
         if (request.headers.get("if-none-match") === etag) {
-          return new Response(null, { status: 304, headers: { etag, "cache-control": DOC_CACHE_CONTROL } });
+          return new Response(null, { status: 304, headers: { etag, ...cache } });
         }
         return new Response(bytes2, {
           status: 200,
-          headers: { "content-type": JSON_CT, etag, "cache-control": DOC_CACHE_CONTROL, "x-himalaya-app": app }
+          headers: { "content-type": JSON_CT, etag, ...cache, "x-himalaya-app": app }
         });
       }
       if (path2 === "/v1/authoring-docs" || /^\/v1\/authoring-docs\/(spec|mobile-ux)$/.test(path2)) {
@@ -47449,19 +47994,19 @@ var init_preview_assets_generated = __esm({
   "../../packages/serve/src/preview-assets.generated.ts"() {
     init_preview_assets_format();
     PREVIEW_ASSET_MANIFEST = [
-      { key: "assets/index-TpXF5JLO.js", contentType: "application/javascript; charset=utf-8", offset: 8, length: 1013412, sha256: "e6d1da59c13ca586b7834f4d08ca9e136b7fea8be9355d952d757fc66fc779a5" },
-      { key: "fonts/WixMadeforDisplay-Bold.ttf", contentType: "font/ttf", offset: 1013420, length: 90924, sha256: "ec4c7d63772d980d6e147b2df6215fd2737e4b04cebe0cf7e11dc695fb63cdcf" },
-      { key: "fonts/WixMadeforDisplay-ExtraBold.ttf", contentType: "font/ttf", offset: 1104344, length: 90984, sha256: "bf4c16a2774edd38a921edf3099469866cd74c094fd596f3fa4e81f54a04dfaa" },
-      { key: "fonts/WixMadeforDisplay-Medium.ttf", contentType: "font/ttf", offset: 1195328, length: 90980, sha256: "368faca44fb9f7207e4af784e94750b1ee59c1098b8689e0f4a918926f244fb5" },
-      { key: "fonts/WixMadeforDisplay-Regular.ttf", contentType: "font/ttf", offset: 1286308, length: 90872, sha256: "97ed8f1a6772abe26e3d8af5cecfc4b02faa94497d585b0398b5053b739a70c1" },
-      { key: "fonts/WixMadeforDisplay-SemiBold.ttf", contentType: "font/ttf", offset: 1377180, length: 90980, sha256: "642feab8a48ddf6c7a89d7c2a7c0edfa0e6e773f671287e460e222703563191e" },
-      { key: "fonts/WixMadeforText-Bold.ttf", contentType: "font/ttf", offset: 1468160, length: 108636, sha256: "37c179b4fefb63ea9637322b84583a2df53aa226c150294eea1675c14b1b8e29" },
-      { key: "fonts/WixMadeforText-ExtraBold.ttf", contentType: "font/ttf", offset: 1576796, length: 109084, sha256: "62e2fe4718129f36ecdb0ae4de385bd6b81ecc876146447167c6c140fad699a9" },
-      { key: "fonts/WixMadeforText-Medium.ttf", contentType: "font/ttf", offset: 1685880, length: 109048, sha256: "4ecf270136af928612c76fe4ebade91d8156975e5ea4c0cf9225501dd1788e02" },
-      { key: "fonts/WixMadeforText-Regular.ttf", contentType: "font/ttf", offset: 1794928, length: 107700, sha256: "dee56f09fd3efc127c1ea95557edc74110c1460a46287da36e0af25efd341ef5" },
-      { key: "fonts/WixMadeforText-SemiBold.ttf", contentType: "font/ttf", offset: 1902628, length: 88108, sha256: "dced97a77624bc5f8b1ae65850360908297f4588e09feb6f22792d29dc7e765b" },
-      { key: "index.html", contentType: "text/html; charset=utf-8", offset: 1990736, length: 4448, sha256: "5f0ee56640a5dfc73d3b2b78526aa1f7966de1bec39fe746e0d9ba39d57d829e" },
-      { key: "t5-frame.html", contentType: "text/html; charset=utf-8", offset: 1995184, length: 17209, sha256: "dffc9718e2faa63ae2cc919e0a842f585ed565aaaa7c53778e90379442c731b6" }
+      { key: "assets/index-DH7r6zgZ.js", contentType: "application/javascript; charset=utf-8", offset: 8, length: 1016081, sha256: "da605bbde6f416c275340836d0b6d327478e5d067c24905a46274d18c1b00b98" },
+      { key: "fonts/WixMadeforDisplay-Bold.ttf", contentType: "font/ttf", offset: 1016089, length: 90924, sha256: "ec4c7d63772d980d6e147b2df6215fd2737e4b04cebe0cf7e11dc695fb63cdcf" },
+      { key: "fonts/WixMadeforDisplay-ExtraBold.ttf", contentType: "font/ttf", offset: 1107013, length: 90984, sha256: "bf4c16a2774edd38a921edf3099469866cd74c094fd596f3fa4e81f54a04dfaa" },
+      { key: "fonts/WixMadeforDisplay-Medium.ttf", contentType: "font/ttf", offset: 1197997, length: 90980, sha256: "368faca44fb9f7207e4af784e94750b1ee59c1098b8689e0f4a918926f244fb5" },
+      { key: "fonts/WixMadeforDisplay-Regular.ttf", contentType: "font/ttf", offset: 1288977, length: 90872, sha256: "97ed8f1a6772abe26e3d8af5cecfc4b02faa94497d585b0398b5053b739a70c1" },
+      { key: "fonts/WixMadeforDisplay-SemiBold.ttf", contentType: "font/ttf", offset: 1379849, length: 90980, sha256: "642feab8a48ddf6c7a89d7c2a7c0edfa0e6e773f671287e460e222703563191e" },
+      { key: "fonts/WixMadeforText-Bold.ttf", contentType: "font/ttf", offset: 1470829, length: 108636, sha256: "37c179b4fefb63ea9637322b84583a2df53aa226c150294eea1675c14b1b8e29" },
+      { key: "fonts/WixMadeforText-ExtraBold.ttf", contentType: "font/ttf", offset: 1579465, length: 109084, sha256: "62e2fe4718129f36ecdb0ae4de385bd6b81ecc876146447167c6c140fad699a9" },
+      { key: "fonts/WixMadeforText-Medium.ttf", contentType: "font/ttf", offset: 1688549, length: 109048, sha256: "4ecf270136af928612c76fe4ebade91d8156975e5ea4c0cf9225501dd1788e02" },
+      { key: "fonts/WixMadeforText-Regular.ttf", contentType: "font/ttf", offset: 1797597, length: 107700, sha256: "dee56f09fd3efc127c1ea95557edc74110c1460a46287da36e0af25efd341ef5" },
+      { key: "fonts/WixMadeforText-SemiBold.ttf", contentType: "font/ttf", offset: 1905297, length: 88108, sha256: "dced97a77624bc5f8b1ae65850360908297f4588e09feb6f22792d29dc7e765b" },
+      { key: "index.html", contentType: "text/html; charset=utf-8", offset: 1993405, length: 4448, sha256: "ce170a0a2ee86aac30f70b5468e744898c697fb5f46c685ebc5d83b4402b22db" },
+      { key: "t5-frame.html", contentType: "text/html; charset=utf-8", offset: 1997853, length: 17209, sha256: "dffc9718e2faa63ae2cc919e0a842f585ed565aaaa7c53778e90379442c731b6" }
     ];
   }
 });
@@ -47477,9 +48022,9 @@ __export(run_exports, {
   runPackage: () => runPackage,
   withoutProdServe: () => withoutProdServe
 });
-import { cpSync as cpSync2, existsSync as existsSync52, mkdirSync as mkdirSync25, mkdtempSync as mkdtempSync3, readFileSync as readFileSync57, rmSync as rmSync11, statSync as statSync13 } from "node:fs";
+import { cpSync as cpSync2, existsSync as existsSync52, mkdirSync as mkdirSync25, mkdtempSync as mkdtempSync3, readFileSync as readFileSync58, rmSync as rmSync11, statSync as statSync13 } from "node:fs";
 import { tmpdir as tmpdir4 } from "node:os";
-import { dirname as dirname27, join as join49 } from "node:path";
+import { dirname as dirname27, join as join50 } from "node:path";
 import { fileURLToPath as fileURLToPath22 } from "node:url";
 function makePackageRunHandler(opts) {
   return makeRunHandler({
@@ -47499,7 +48044,7 @@ async function fetchBytes(url) {
 async function resolvePackage(source, workDir) {
   const isUrl2 = /^https?:\/\//i.test(source);
   if (!isUrl2 && existsSync52(source) && statSync13(source).isDirectory()) {
-    const appDirManifest = join49(source, "release-manifest.json");
+    const appDirManifest = join50(source, "release-manifest.json");
     if (existsSync52(appDirManifest)) {
       const opened2 = openPackageDir(source);
       if (!opened2.validation.ok) {
@@ -47509,9 +48054,9 @@ async function resolvePackage(source, workDir) {
       const app2 = opened2.header?.app ?? opened2.manifest?.app;
       if (!app2) throw new Error(`${source} has no app id (no himi-package.json and no manifest.app)`);
       if (!isSafeAppId(app2)) throw new Error(`${source} declares an unsafe app id ${JSON.stringify(app2)} \u2014 refusing to open it`);
-      const root2 = workDir ?? mkdtempSync3(join49(tmpdir4(), "himi-run-"));
-      const target = join49(root2, app2);
-      if (join49(source) !== target) {
+      const root2 = workDir ?? mkdtempSync3(join50(tmpdir4(), "himi-run-"));
+      const target = join50(root2, app2);
+      if (join50(source) !== target) {
         mkdirSync25(root2, { recursive: true });
         rmSync11(target, { recursive: true, force: true });
         cpSync2(source, target, { recursive: true });
@@ -47528,8 +48073,8 @@ async function resolvePackage(source, workDir) {
     }
     throw new Error(`${source} is a directory but has no release-manifest.json \u2014 is it a package?`);
   }
-  const bytes2 = isUrl2 ? await fetchBytes(source) : readFileSync57(source);
-  const root = workDir ?? mkdtempSync3(join49(tmpdir4(), "himi-run-"));
+  const bytes2 = isUrl2 ? await fetchBytes(source) : readFileSync58(source);
+  const root = workDir ?? mkdtempSync3(join50(tmpdir4(), "himi-run-"));
   const { app, appDir: appDir2 } = unpackTo(bytes2, root);
   const opened = openPackageDir(appDir2);
   if (!opened.validation.ok) {
@@ -47552,14 +48097,14 @@ async function loadPreviewAssets() {
     const mod = await Promise.resolve().then(() => (init_preview_assets_generated(), preview_assets_generated_exports));
     const here = dirname27(fileURLToPath22(import.meta.url));
     const candidates = [
-      join49(here, "preview-assets.generated.bin"),
+      join50(here, "preview-assets.generated.bin"),
       // published: copied next to the bundled CLI
-      join49(here, "../../../packages/serve/src/preview-assets.generated.bin")
+      join50(here, "../../../packages/serve/src/preview-assets.generated.bin")
       // in-repo checkout
     ];
     for (const path2 of candidates) {
       if (!existsSync52(path2)) continue;
-      const blob = readFileSync57(path2);
+      const blob = readFileSync58(path2);
       return mod.assemblePreviewAssetsFromBlob(new Uint8Array(blob.buffer, blob.byteOffset, blob.byteLength));
     }
     return /* @__PURE__ */ new Map();
@@ -47654,9 +48199,9 @@ __export(run_watch_exports, {
   watchedContentDir: () => watchedContentDir,
   writeRunRecord: () => writeRunRecord
 });
-import { closeSync as closeSync2, constants, existsSync as existsSync53, fstatSync, lstatSync as lstatSync7, statSync as statSync14, mkdirSync as mkdirSync26, openSync as openSync2, readFileSync as readFileSync58, realpathSync as realpathSync6, renameSync as renameSync5, rmSync as rmSync12, writeFileSync as writeFileSync22, watch as fsWatch } from "node:fs";
+import { closeSync as closeSync2, constants, existsSync as existsSync53, fstatSync, lstatSync as lstatSync8, statSync as statSync14, mkdirSync as mkdirSync26, openSync as openSync2, readFileSync as readFileSync59, realpathSync as realpathSync6, renameSync as renameSync5, rmSync as rmSync12, writeFileSync as writeFileSync22, watch as fsWatch } from "node:fs";
 import { randomUUID as randomUUID3 } from "node:crypto";
-import { extname as extname4, join as join50, resolve as resolve42, sep as sep13 } from "node:path";
+import { extname as extname4, join as join51, resolve as resolve42, sep as sep13 } from "node:path";
 function diffReleases(prev, next) {
   const bundles = Object.keys(next.bundles).filter((b) => prev.bundles[b]?.sha256 !== next.bundles[b].sha256).sort();
   const changedBundles = new Set(bundles);
@@ -47696,7 +48241,7 @@ function watchContent(dir, onChange, opts = {}) {
   let timer = null;
   const pending = /* @__PURE__ */ new Set();
   const watcher = watch2(dir, { recursive: true }, (_event, file) => {
-    if (!file || ignoredChange(file, (rel) => isDir(join50(dir, rel)))) return;
+    if (!file || ignoredChange(file, (rel) => isDir(join51(dir, rel)))) return;
     pending.add(file);
     if (timer) clearTimeout(timer);
     timer = setTimeout(() => {
@@ -47717,7 +48262,7 @@ function watchedContentDir(source) {
   if (!source || /^https?:\/\//i.test(source)) return null;
   const dir = resolve42(source);
   try {
-    return statSync14(dir).isDirectory() && existsSync53(join50(dir, "himalaya.content.json")) ? dir : null;
+    return statSync14(dir).isDirectory() && existsSync53(join51(dir, "himalaya.content.json")) ? dir : null;
   } catch {
     return null;
   }
@@ -47774,23 +48319,23 @@ function serialize(task) {
   });
 }
 function himiDir(dir) {
-  const root = join50(dir, ".himi");
+  const root = join51(dir, ".himi");
   try {
-    return lstatSync7(root).isDirectory() ? root : null;
+    return lstatSync8(root).isDirectory() ? root : null;
   } catch (e) {
     if (e.code !== "ENOENT") return null;
     mkdirSync26(root, { recursive: true });
-    return lstatSync7(root).isDirectory() ? root : null;
+    return lstatSync8(root).isDirectory() ? root : null;
   }
 }
 function writeRunRecord(dir, record2) {
   const root = himiDir(dir);
   if (!root) return false;
-  const tmp = join50(root, `.run.json.${process.pid}.${randomUUID3()}.tmp`);
+  const tmp = join51(root, `.run.json.${process.pid}.${randomUUID3()}.tmp`);
   try {
     writeFileSync22(tmp, `${JSON.stringify(record2, null, 2)}
 `, { flag: "wx" });
-    renameSync5(tmp, join50(root, "run.json"));
+    renameSync5(tmp, join51(root, "run.json"));
   } catch (e) {
     rmSync12(tmp, { force: true });
     throw e;
@@ -47798,21 +48343,21 @@ function writeRunRecord(dir, record2) {
   return true;
 }
 function removeRunRecord(dir) {
-  const root = join50(dir, ".himi");
+  const root = join51(dir, ".himi");
   try {
-    if (!lstatSync7(root).isDirectory()) return;
+    if (!lstatSync8(root).isDirectory()) return;
   } catch {
     return;
   }
-  rmSync12(join50(root, "run.json"), { force: true });
+  rmSync12(join51(root, "run.json"), { force: true });
 }
 function boardFile(dir, pathname) {
   let rel = null;
-  if (pathname === "/__himi/studio/" || pathname === "/__himi/studio/index.html") rel = join50("studio", "index.html");
-  else if (pathname === "/__himi/studio/state.js") rel = join50("studio", "state.js");
+  if (pathname === "/__himi/studio/" || pathname === "/__himi/studio/index.html") rel = join51("studio", "index.html");
+  else if (pathname === "/__himi/studio/state.js") rel = join51("studio", "state.js");
   else {
     const m = /^\/__himi\/history\/([0-9a-f]{64}\.(png|jpg|gif|webp))$/.exec(pathname);
-    if (m) rel = join50("history", m[1]);
+    if (m) rel = join51("history", m[1]);
   }
   if (!rel) return null;
   const bytes2 = readConfined(resolve42(dir, ".himi"), rel);
@@ -47824,12 +48369,12 @@ function boardFile(dir, pathname) {
 }
 function readConfined(root, rel) {
   try {
-    if (!lstatSync7(root).isDirectory()) return null;
+    if (!lstatSync8(root).isDirectory()) return null;
     const parts = rel.split(sep13);
     let at = root;
     for (let i = 0; i < parts.length; i++) {
-      at = join50(at, parts[i]);
-      const st = lstatSync7(at);
+      at = join51(at, parts[i]);
+      const st = lstatSync8(at);
       if (st.isSymbolicLink() || !(i === parts.length - 1 ? st.isFile() : st.isDirectory())) return null;
     }
     const canonicalRoot = realpathSync6(root);
@@ -47837,7 +48382,7 @@ function readConfined(root, rel) {
     const fd = openSync2(at, constants.O_RDONLY | (constants.O_NOFOLLOW ?? 0));
     try {
       if (!fstatSync(fd).isFile()) return null;
-      return readFileSync58(fd);
+      return readFileSync59(fd);
     } finally {
       closeSync2(fd);
     }
@@ -47888,7 +48433,7 @@ __export(run_browser_exports, {
   runInBrowser: () => runInBrowser
 });
 import { createServer as createServer5 } from "node:http";
-import { existsSync as existsSync54, readFileSync as readFileSync59 } from "node:fs";
+import { existsSync as existsSync54, readFileSync as readFileSync60 } from "node:fs";
 import { spawnSync as spawnSync3 } from "node:child_process";
 import { dirname as dirname28, resolve as resolve43 } from "node:path";
 import { fileURLToPath as fileURLToPath23 } from "node:url";
@@ -47996,7 +48541,7 @@ async function runInBrowser(releaseRoot, app, header, opts = {}) {
       }
       let bytes2;
       try {
-        bytes2 = readFileSync59(resolve43(stagedDir(), name));
+        bytes2 = readFileSync60(resolve43(stagedDir(), name));
       } catch (e) {
         res.writeHead(503, { "content-type": "application/json" });
         res.end(JSON.stringify({ error: "browser_plane_unstaged", file: name, detail: String(e) }));
@@ -48109,13 +48654,13 @@ async function runWixMobileRelease(pos, flags, io, deps) {
   };
   if (invokedAs !== "testflight" && !(invokedAs === "store" && pos[1] === "upload")) return fail2("Wix Mobile Release only supports `himi testflight <app>` or `himi store upload <app>`");
   if (app !== "himi-player") return fail2("Wix Mobile Release is reserved for the Wix-owned Himi Player binary", { app });
-  if (str(flags.artifact)) return fail2("--artifact is not accepted for Himi Player; pass --release so deployed serve can validate the Job Service IPA and call MRE with its service identity");
+  if (str2(flags.artifact)) return fail2("--artifact is not accepted for Himi Player; pass --release so deployed serve can validate the Job Service IPA and call MRE with its service identity");
   if (on(flags["no-wait"])) return fail2("--no-wait is not supported for Himi Player TestFlight releases; wait for MRE processing to complete");
-  const release = str(flags.release);
-  const version2 = str(flags.version);
+  const release = str2(flags.release);
+  const version2 = str2(flags.version);
   if (!release) return fail2("--release is required for a Himi Player TestFlight release");
   if (!version2 || !/^\d+(?:\.\d+){0,2}$/.test(version2)) return fail2("--version needs the Player marketing version (for example 1.0.0)");
-  if (str(flags.track) && str(flags.track) !== "testflight" && str(flags.track) !== "internal") return fail2("Wix Mobile Release only supports TestFlight upload; public App Store release remains a separate human step");
+  if (str2(flags.track) && str2(flags.track) !== "testflight" && str2(flags.track) !== "internal") return fail2("Wix Mobile Release only supports TestFlight upload; public App Store release remains a separate human step");
   const plan = {
     ok: true,
     dryRun: on(flags["dry-run"]),
@@ -48148,10 +48693,10 @@ async function runWixMobileRelease(pos, flags, io, deps) {
     return fail2(`could not complete the Himi Player TestFlight Job Service release: ${error.message}`);
   }
 }
-var str, on;
+var str2, on;
 var init_wix_mobile_release = __esm({
   "src/wix-mobile-release.ts"() {
-    str = (value) => typeof value === "string" ? value : void 0;
+    str2 = (value) => typeof value === "string" ? value : void 0;
     on = (value) => value === true || value === "true";
   }
 });
@@ -48231,7 +48776,7 @@ async function runStore(pos, flags, io, deps) {
   if (sub === "status") {
     let creds2;
     try {
-      creds2 = deps.resolveCredentials({ app, cfg, profileFlag: str2(flags.profile) });
+      creds2 = deps.resolveCredentials({ app, cfg, profileFlag: str3(flags.profile) });
     } catch (e) {
       return fail2(e.message);
     }
@@ -48251,7 +48796,7 @@ async function runStore(pos, flags, io, deps) {
   }
   let findings;
   try {
-    findings = await deps.preflightApp(app, { profileFlag: str2(flags.profile) });
+    findings = await deps.preflightApp(app, { profileFlag: str3(flags.profile) });
   } catch (e) {
     return fail2(e.message);
   }
@@ -48266,7 +48811,7 @@ async function runStore(pos, flags, io, deps) {
     }
     return errors.length === 0 ? 0 : 1;
   }
-  const explicitTrack = str2(flags.track);
+  const explicitTrack = str3(flags.track);
   const configTrack = cfg.review?.defaultTrackIos;
   const track = explicitTrack ?? (invokedAs === "testflight" ? "testflight" : configTrack ?? "testflight");
   if (track === "appstore") {
@@ -48281,7 +48826,7 @@ async function runStore(pos, flags, io, deps) {
   let creds;
   let version2;
   try {
-    creds = deps.resolveCredentials({ app, cfg, profileFlag: str2(flags.profile) });
+    creds = deps.resolveCredentials({ app, cfg, profileFlag: str3(flags.profile) });
     version2 = deps.readVersion(app);
   } catch (e) {
     return fail2(e.message);
@@ -48434,10 +48979,10 @@ function credsToEnv(c) {
     HIMALAYA_APPLE_TEAM_ID: c.team
   };
 }
-var str2, on2, UPLOAD_STEPS, BUILD_STEPS, TRACKS, PROCESSING_POLL_MS, PROCESSING_TIMEOUT_MS;
+var str3, on2, UPLOAD_STEPS, BUILD_STEPS, TRACKS, PROCESSING_POLL_MS, PROCESSING_TIMEOUT_MS;
 var init_store3 = __esm({
   "src/store.ts"() {
-    str2 = (v) => typeof v === "string" ? v : void 0;
+    str3 = (v) => typeof v === "string" ? v : void 0;
     on2 = (v) => v === true || v === "true";
     UPLOAD_STEPS = ["signing", "build", "validate", "upload"];
     BUILD_STEPS = /* @__PURE__ */ new Set(["signing", "build"]);
@@ -48456,7 +49001,7 @@ __export(preflight_exports, {
   parseStoreConfig: () => parseStoreConfig,
   requireEnv: () => requireEnv
 });
-import { existsSync as existsSync55, readFileSync as readFileSync60 } from "node:fs";
+import { existsSync as existsSync55, readFileSync as readFileSync61 } from "node:fs";
 import { isAbsolute as isAbsolute3, relative as relative9, resolve as resolve44 } from "node:path";
 function isInsideRepo(p) {
   const rel = relative9(REPO_ROOT3, resolve44(p));
@@ -48516,7 +49061,7 @@ function loadStoreConfig(app) {
   if (!existsSync55(p)) {
     throw new Error(`No store config at ${p}. Create apps/${app}/store/store.config.yaml first (see /setup-store-signing).`);
   }
-  return parseStoreConfig(readFileSync60(p, "utf8"));
+  return parseStoreConfig(readFileSync61(p, "utf8"));
 }
 var init_preflight = __esm({
   "../store-release/preflight.ts"() {
@@ -48535,19 +49080,19 @@ __export(credential_profile_exports, {
   profilePath: () => profilePath,
   resolveStoreCredentials: () => resolveStoreCredentials
 });
-import { existsSync as existsSync56, readFileSync as readFileSync61 } from "node:fs";
+import { existsSync as existsSync56, readFileSync as readFileSync62 } from "node:fs";
 import { homedir as homedir5 } from "node:os";
-import { join as join51 } from "node:path";
+import { join as join52 } from "node:path";
 function credentialsDir(home = homedir5()) {
-  return join51(home, ".himalaya", "store-credentials");
+  return join52(home, ".himalaya", "store-credentials");
 }
 function profilePath(name, home = homedir5()) {
   if (!PROFILE_NAME.test(name)) {
     throw new Error(
-      `credential profile ${JSON.stringify(name)} is not a profile name \u2014 use letters, digits, ".", "_" or "-" starting with a letter or digit. It names ${join51(credentialsDir(home), "<name>.json")}; it is never a path.`
+      `credential profile ${JSON.stringify(name)} is not a profile name \u2014 use letters, digits, ".", "_" or "-" starting with a letter or digit. It names ${join52(credentialsDir(home), "<name>.json")}; it is never a path.`
     );
   }
-  return join51(credentialsDir(home), `${name}.json`);
+  return join52(credentialsDir(home), `${name}.json`);
 }
 function parseProfile(text5, label2) {
   let doc;
@@ -48578,7 +49123,7 @@ function resolveStoreCredentials(opts) {
   const { app, cfg } = opts;
   const env = opts.env ?? process.env;
   const home = opts.home ?? homedir5();
-  const read = opts.readProfile ?? ((p) => readFileSync61(p, "utf8"));
+  const read = opts.readProfile ?? ((p) => readFileSync62(p, "utf8"));
   const exists = opts.profileExists ?? existsSync56;
   const ios = cfg.ios ?? {};
   const flagName = opts.profileFlag?.trim();
@@ -48659,9 +49204,9 @@ __export(preflight_app_exports, {
   preflightApp: () => preflightApp,
   profileAccount: () => profileAccount
 });
-import { readFileSync as readFileSync62, existsSync as existsSync57, readdirSync as readdirSync26, statSync as statSync15 } from "node:fs";
-import { createHash as createHash25 } from "node:crypto";
-import { join as join52 } from "node:path";
+import { readFileSync as readFileSync63, existsSync as existsSync57, readdirSync as readdirSync26, statSync as statSync15 } from "node:fs";
+import { createHash as createHash26 } from "node:crypto";
+import { join as join53 } from "node:path";
 function analyze(projectYml, storeConfig, icon, account) {
   const f = [];
   const has = (re, s) => re.test(s);
@@ -48725,13 +49270,13 @@ function profileAccount(app, storeConfig, opts = {}) {
   }
 }
 async function preflightApp(app, opts = {}) {
-  const projectYml = existsSync57(iosProjectYml(app)) ? readFileSync62(iosProjectYml(app), "utf8") : "";
-  const storeConfig = existsSync57(storeConfigPath(app)) ? readFileSync62(storeConfigPath(app), "utf8") : "";
+  const projectYml = existsSync57(iosProjectYml(app)) ? readFileSync63(iosProjectYml(app), "utf8") : "";
+  const storeConfig = existsSync57(storeConfigPath(app)) ? readFileSync63(storeConfigPath(app), "utf8") : "";
   if (!storeConfig) return [{ level: "error", message: `no apps/${app}/store/store.config.yaml \u2014 run /setup-store-signing first.` }];
   const findings = analyze(
     projectYml,
     storeConfig,
-    await appIconState(join52(appDir(app), "ios")),
+    await appIconState(join53(appDir(app), "ios")),
     profileAccount(app, storeConfig, opts)
   );
   findings.push(...analyzeListing(metadataFilesPresent(app), listScreenshots(app)));
@@ -48760,16 +49305,16 @@ function analyzeSubmissionRecord(appLevel, review, opts) {
   return f;
 }
 function appLevelMetadataFiles(app, locale = "en-US") {
-  const root = join52(storeDir(app), "metadata");
+  const root = join53(storeDir(app), "metadata");
   const out = /* @__PURE__ */ new Set();
   if (existsSync57(root)) {
     for (const n of readdirSync26(root)) if (n.endsWith(".txt")) out.add(n);
   }
-  if (existsSync57(join52(root, locale, "privacy_url.txt"))) out.add("privacy_url.txt");
+  if (existsSync57(join53(root, locale, "privacy_url.txt"))) out.add("privacy_url.txt");
   return out;
 }
 function reviewInfoFiles(app) {
-  const dir = join52(storeDir(app), "review_information");
+  const dir = join53(storeDir(app), "review_information");
   if (!existsSync57(dir)) return /* @__PURE__ */ new Set();
   return new Set(readdirSync26(dir).filter((n) => n.endsWith(".txt")));
 }
@@ -48880,12 +49425,12 @@ function analyzePlayListing(assets) {
   return f;
 }
 function playListingAssets(app, locale = "en-US") {
-  const dir = join52(storeDir(app), "play", locale, "images");
+  const dir = join53(storeDir(app), "play", locale, "images");
   const read = (names) => {
     for (const name of names) {
-      const p = join52(dir, name);
+      const p = join53(dir, name);
       try {
-        if (statSync15(p).isFile()) return { name, bytes: readFileSync62(p) };
+        if (statSync15(p).isFile()) return { name, bytes: readFileSync63(p) };
       } catch {
       }
     }
@@ -48916,26 +49461,26 @@ function analyzeListing(metaFiles, shots) {
   return f;
 }
 function metadataFilesPresent(app, locale = "en-US") {
-  const dir = join52(storeDir(app), "metadata", locale);
+  const dir = join53(storeDir(app), "metadata", locale);
   if (!existsSync57(dir)) return /* @__PURE__ */ new Set();
   return new Set(readdirSync26(dir).filter((n) => n.endsWith(".txt")));
 }
 function listScreenshots(app, locale = "en-US") {
   const out = [];
-  const flat = join52(storeDir(app), "screenshots", locale);
+  const flat = join53(storeDir(app), "screenshots", locale);
   if (existsSync57(flat)) {
     for (const png of readdirSync26(flat).filter((n) => n.endsWith(".png"))) {
-      const sz = pngSize(readFileSync62(join52(flat, png)));
+      const sz = pngSize(readFileSync63(join53(flat, png)));
       if (sz) out.push({ name: png, w: sz.w, h: sz.h });
     }
   }
-  const legacy = join52(storeDir(app), "metadata", locale, "screenshots");
+  const legacy = join53(storeDir(app), "metadata", locale, "screenshots");
   if (existsSync57(legacy)) {
     for (const deviceDir of readdirSync26(legacy)) {
-      const d = join52(legacy, deviceDir);
+      const d = join53(legacy, deviceDir);
       if (!statSync15(d).isDirectory()) continue;
       for (const png of readdirSync26(d).filter((n) => n.endsWith(".png"))) {
-        const sz = pngSize(readFileSync62(join52(d, png)));
+        const sz = pngSize(readFileSync63(join53(d, png)));
         if (sz) out.push({ name: `${deviceDir}/${png}`, w: sz.w, h: sz.h });
       }
     }
@@ -48943,13 +49488,13 @@ function listScreenshots(app, locale = "en-US") {
   return out;
 }
 function placeholderHashes2() {
-  const templateIos = join52(appDir("_template"), "ios");
+  const templateIos = join53(appDir("_template"), "ios");
   if (!existsSync57(templateIos)) return [LEGACY_PLACEHOLDER_SHA2562];
   for (const target of readdirSync26(templateIos)) {
-    const p = join52(templateIos, target, "Assets.xcassets", "AppIcon.appiconset", "icon_1024.png");
+    const p = join53(templateIos, target, "Assets.xcassets", "AppIcon.appiconset", "icon_1024.png");
     try {
       if (!statSync15(p).isFile()) continue;
-      return [LEGACY_PLACEHOLDER_SHA2562, createHash25("sha256").update(readFileSync62(p)).digest("hex")];
+      return [LEGACY_PLACEHOLDER_SHA2562, createHash26("sha256").update(readFileSync63(p)).digest("hex")];
     } catch {
     }
   }
@@ -48982,11 +49527,11 @@ async function pixelIssues(bytes2) {
 async function appIconState(iosDir) {
   if (!existsSync57(iosDir)) return { exists: false, isPlaceholder: false, storeIssues: [] };
   for (const target of readdirSync26(iosDir)) {
-    const p = join52(iosDir, target, "Assets.xcassets", "AppIcon.appiconset", "icon_1024.png");
+    const p = join53(iosDir, target, "Assets.xcassets", "AppIcon.appiconset", "icon_1024.png");
     try {
       if (!statSync15(p).isFile()) continue;
-      const bytes2 = readFileSync62(p);
-      const hash = createHash25("sha256").update(bytes2).digest("hex");
+      const bytes2 = readFileSync63(p);
+      const hash = createHash26("sha256").update(bytes2).digest("hex");
       const pixels = await pixelIssues(bytes2);
       return {
         exists: true,
@@ -49057,7 +49602,7 @@ __export(version_exports, {
   setAndroidVersion: () => setAndroidVersion,
   setIosVersion: () => setIosVersion
 });
-import { readFileSync as readFileSync63, writeFileSync as writeFileSync23 } from "node:fs";
+import { readFileSync as readFileSync64, writeFileSync as writeFileSync23 } from "node:fs";
 function readIosVersion(projectYml) {
   const marketing = matchScalar(projectYml, "CFBundleShortVersionString");
   const build2 = matchScalar(projectYml, "CFBundleVersion");
@@ -49115,8 +49660,8 @@ function setAndroidVersion(gradle, v) {
 function bumpVersion(app, opts) {
   const iosPath = iosProjectYml(app);
   const gradlePath = androidGradle(app);
-  const iosYml = readFileSync63(iosPath, "utf8");
-  const gradle = readFileSync63(gradlePath, "utf8");
+  const iosYml = readFileSync64(iosPath, "utf8");
+  const gradle = readFileSync64(gradlePath, "utf8");
   const current = readIosVersion(iosYml);
   const next = {
     marketing: opts.marketing ?? current.marketing,
@@ -49133,7 +49678,7 @@ var init_version = __esm({
 });
 
 // ../store-release/register-bundle.ts
-import { readFileSync as readFileSync64 } from "node:fs";
+import { readFileSync as readFileSync65 } from "node:fs";
 import { createPrivateKey as createPrivateKey2, sign } from "node:crypto";
 function b64url2(b) {
   return Buffer.from(b).toString("base64").replace(/\+/g, "-").replace(/\//g, "_").replace(/=+$/, "");
@@ -49151,7 +49696,7 @@ function bundleIdBody(identifier, name, platform = "IOS") {
 async function registerBundleId(opts) {
   const env = requireEnv(["ASC_KEY_ID", "ASC_ISSUER_ID", "ASC_KEY_PATH"]);
   assertCredentialOutsideRepo("ASC_KEY_PATH", env.ASC_KEY_PATH);
-  const jwt = ascJwt(env.ASC_KEY_ID, env.ASC_ISSUER_ID, readFileSync64(env.ASC_KEY_PATH, "utf8"), Math.floor(Date.now() / 1e3));
+  const jwt = ascJwt(env.ASC_KEY_ID, env.ASC_ISSUER_ID, readFileSync65(env.ASC_KEY_PATH, "utf8"), Math.floor(Date.now() / 1e3));
   const res = await fetch(`${ASC_API}/v1/bundleIds`, {
     method: "POST",
     headers: { Authorization: `Bearer ${jwt}`, "Content-Type": "application/json" },
@@ -49205,7 +49750,7 @@ __export(asc_status_exports, {
   ascStatus: () => ascStatus,
   buildVerdict: () => buildVerdict
 });
-import { readFileSync as readFileSync65 } from "node:fs";
+import { readFileSync as readFileSync66 } from "node:fs";
 function buildVerdict(builds) {
   if (!builds.length) {
     return "NO builds registered \u2014 if you uploaded recently and it's been >15 min, the binary was REJECTED IN PROCESSING (reason is email-only; run validate-binary.ts / scan-purpose-strings.ts to reproduce it).";
@@ -49219,7 +49764,7 @@ function buildVerdict(builds) {
 function client(creds) {
   const env = creds ?? requireEnv(["ASC_KEY_ID", "ASC_ISSUER_ID", "ASC_KEY_PATH"]);
   assertCredentialOutsideRepo("ASC_KEY_PATH", env.ASC_KEY_PATH);
-  const jwt = ascJwt(env.ASC_KEY_ID, env.ASC_ISSUER_ID, readFileSync65(env.ASC_KEY_PATH, "utf8"), Math.floor(Date.now() / 1e3));
+  const jwt = ascJwt(env.ASC_KEY_ID, env.ASC_ISSUER_ID, readFileSync66(env.ASC_KEY_PATH, "utf8"), Math.floor(Date.now() / 1e3));
   return async (path2) => {
     const r = await fetch(`${ASC}${path2}`, { headers: { Authorization: `Bearer ${jwt}` } });
     return { status: r.status, json: await r.json().catch(() => ({})) };
@@ -49379,7 +49924,7 @@ __export(secrets_exports, {
   runRemoteSecretsCommand: () => runRemoteSecretsCommand,
   runSecretsCommand: () => runSecretsCommand
 });
-import { readFileSync as readFileSync66 } from "node:fs";
+import { readFileSync as readFileSync67 } from "node:fs";
 function environment(value) {
   if (value === "preview" || value === "production") return value;
   throw new Error("--environment must be preview or production");
@@ -49410,7 +49955,7 @@ async function runSecretsCommand(operation, flags, io, options = {}) {
       io.log(JSON.stringify(await vault.list({ app, environment: env })));
       return 0;
     }
-    const value = options.readValue ? options.readValue() : readFileSync66(0, "utf8").replace(/\r?\n$/, "");
+    const value = options.readValue ? options.readValue() : readFileSync67(0, "utf8").replace(/\r?\n$/, "");
     if (operation === "set") await vault.set({ app, environment: env, name, value });
     else if (operation === "rotate") await vault.rotate({ app, environment: env, name, value });
     else throw new Error(`unknown secrets operation ${operation}`);
@@ -49439,7 +49984,7 @@ async function runRemoteSecretsCommand(operation, flags, io, options) {
     }
     let body;
     if (operation !== "list") {
-      const value = options.readValue ? options.readValue() : readFileSync66(0, "utf8").replace(/\r?\n$/, "");
+      const value = options.readValue ? options.readValue() : readFileSync67(0, "utf8").replace(/\r?\n$/, "");
       body = JSON.stringify({ value });
     }
     const response = await (options.fetchImpl ?? fetch)(url, { method: operation === "list" ? "GET" : operation === "set" ? "PUT" : "POST", headers: headers2, body });
@@ -49475,15 +50020,15 @@ __export(notify_exports, {
   runNotify: () => runNotify,
   saveAdminSession: () => saveAdminSession
 });
-import { chmodSync as chmodSync3, mkdirSync as mkdirSync27, readFileSync as readFileSync67, writeFileSync as writeFileSync24 } from "node:fs";
+import { chmodSync as chmodSync3, mkdirSync as mkdirSync27, readFileSync as readFileSync68, writeFileSync as writeFileSync24 } from "node:fs";
 import { homedir as homedir6 } from "node:os";
-import { dirname as dirname30, join as join53 } from "node:path";
+import { dirname as dirname30, join as join54 } from "node:path";
 function defaultSessionsPath() {
-  return process.env.HIMI_ADMIN_SESSIONS_FILE ?? join53(homedir6(), ".himalaya", "admin-sessions.json");
+  return process.env.HIMI_ADMIN_SESSIONS_FILE ?? join54(homedir6(), ".himalaya", "admin-sessions.json");
 }
 function loadSessionsFile(path2 = defaultSessionsPath()) {
   try {
-    return JSON.parse(readFileSync67(path2, "utf8"));
+    return JSON.parse(readFileSync68(path2, "utf8"));
   } catch {
     return {};
   }
@@ -49532,7 +50077,7 @@ function parseDataFlag(raw) {
 }
 async function runNotify(pos, flags, io, deps = {}) {
   const doFetch = deps.fetchImpl ?? fetch;
-  const str6 = (v) => typeof v === "string" ? v : void 0;
+  const str7 = (v) => typeof v === "string" ? v : void 0;
   const json5 = flags.json === true;
   const print = (v) => io.log(JSON.stringify(v, null, 2));
   const sub = pos[1];
@@ -49547,8 +50092,8 @@ async function runNotify(pos, flags, io, deps = {}) {
     return 2;
   }
   const { adminUrl, session } = resolveAuth({
-    adminUrl: str6(flags["admin-url"]),
-    adminSession: str6(flags["admin-session"]),
+    adminUrl: str7(flags["admin-url"]),
+    adminSession: str7(flags["admin-session"]),
     ...deps.env ? { env: deps.env } : {},
     ...deps.file ? { file: deps.file } : {}
   });
@@ -49599,14 +50144,14 @@ async function runNotify(pos, flags, io, deps = {}) {
     }
     return report2.ok ? 0 : 1;
   }
-  const app = str6(flags.app);
+  const app = str7(flags.app);
   if (!app) {
     io.error(JSON.stringify({ error: "--app is required", usage: USAGE2 }));
     return 2;
   }
   if (sub === "tokens") {
     const query = new URLSearchParams();
-    const platform = str6(flags.platform);
+    const platform = str7(flags.platform);
     if (platform) query.set("platform", platform);
     if (flags["include-disabled"] === true) query.set("includeDisabled", "1");
     const url = `${adminUrl}/v1/admin/push-tokens/${encodeURIComponent(app)}${query.size ? `?${query}` : ""}`;
@@ -49650,8 +50195,8 @@ async function runNotify(pos, flags, io, deps = {}) {
     }
     return 0;
   }
-  const token = str6(flags.token);
-  const device = str6(flags.device);
+  const token = str7(flags.token);
+  const device = str7(flags.device);
   const all = flags.all === true;
   const targets = [token && "--token", device && "--device", all && "--all"].filter(Boolean);
   if (targets.length === 0) {
@@ -49668,20 +50213,20 @@ async function runNotify(pos, flags, io, deps = {}) {
     return 2;
   }
   const silent = flags.silent === true;
-  const title = str6(flags.title);
+  const title = str7(flags.title);
   if (!silent && !title) {
     io.error(JSON.stringify({ error: "--title is required for a visible notification (use --silent for a background push)", usage: USAGE2 }));
     return 2;
   }
-  const badgeRaw = str6(flags.badge);
+  const badgeRaw = str7(flags.badge);
   const payload = {
     ...title ? { title } : {},
-    ...str6(flags.body) ? { body: str6(flags.body) } : {},
-    ...str6(flags.link) ? { link: str6(flags.link) } : {},
-    ...str6(flags.category) ? { category: str6(flags.category) } : {},
-    ...str6(flags.channel) ? { channelId: str6(flags.channel) } : {},
-    ...str6(flags.platform) ? { platform: str6(flags.platform) } : {},
-    ...str6(flags["bundle-id"]) ? { bundleId: str6(flags["bundle-id"]) } : {},
+    ...str7(flags.body) ? { body: str7(flags.body) } : {},
+    ...str7(flags.link) ? { link: str7(flags.link) } : {},
+    ...str7(flags.category) ? { category: str7(flags.category) } : {},
+    ...str7(flags.channel) ? { channelId: str7(flags.channel) } : {},
+    ...str7(flags.platform) ? { platform: str7(flags.platform) } : {},
+    ...str7(flags["bundle-id"]) ? { bundleId: str7(flags["bundle-id"]) } : {},
     ...badgeRaw !== void 0 && Number.isFinite(Number(badgeRaw)) ? { badge: Number(badgeRaw) } : {},
     ...silent ? { pushType: "background" } : {},
     ...flags["dry-run"] === true ? { dryRun: true } : {},
@@ -49946,7 +50491,7 @@ var init_copy_clean = __esm({
 function genericDescription(it) {
   for (const field of DESCRIPTION_FIELDS) {
     const raw = it[field];
-    const text5 = typeof raw === "string" ? raw : str3(raw?.text);
+    const text5 = typeof raw === "string" ? raw : str4(raw?.text);
     if (!text5) continue;
     const plain2 = text5.replace(/<[^>]*>/g, " ").replace(/&nbsp;/g, " ");
     if (plain2.trim()) return plain2;
@@ -49994,18 +50539,18 @@ function planPrice(p) {
   const price = pricing?.price ?? p.price;
   if (typeof price === "string" && price.trim()) return price.trim();
   if (price && typeof price === "object") {
-    return str3(price.formatted) || str3(price.value) || void 0;
+    return str4(price.formatted) || str4(price.value) || void 0;
   }
-  return str3(p.formattedPrice) || str3(pricing?.formattedPrice) || void 0;
+  return str4(p.formattedPrice) || str4(pricing?.formattedPrice) || void 0;
 }
 function planDetail(p) {
   const pricing = p.pricing && typeof p.pricing === "object" ? p.pricing : void 0;
   const sub = pricing?.subscription && typeof pricing.subscription === "object" ? pricing.subscription : void 0;
   const cycleDur = sub?.cycleDuration && typeof sub.cycleDuration === "object" ? sub.cycleDuration : void 0;
   const count = cycleDur?.count;
-  const unit = str3(cycleDur?.unit ?? cycleDur?.period).toLowerCase();
-  const cycle = typeof count === "number" && unit ? `${count} ${unit}` : str3(sub?.cycle ?? pricing?.cycle ?? p.period ?? p.billingPeriod);
-  const perks = asArr(p.perks ?? p.benefits).map((x) => str3(x) || str3(x.name)).filter(Boolean);
+  const unit = str4(cycleDur?.unit ?? cycleDur?.period).toLowerCase();
+  const cycle = typeof count === "number" && unit ? `${count} ${unit}` : str4(sub?.cycle ?? pricing?.cycle ?? p.period ?? p.billingPeriod);
+  const perks = asArr(p.perks ?? p.benefits).map((x) => str4(x) || str4(x.name)).filter(Boolean);
   const bits = [cycle, perks.slice(0, 4).join("; ")].filter(Boolean);
   return bits.length ? bits.join(" \xB7 ") : void 0;
 }
@@ -50017,7 +50562,7 @@ function formLabels(x, depth = 0, out = []) {
   }
   if (typeof x !== "object") return out;
   const o = x;
-  const label2 = str3(o.label ?? o.displayName ?? o.fieldTitle ?? o.title);
+  const label2 = str4(o.label ?? o.displayName ?? o.fieldTitle ?? o.title);
   if (label2 && !UUID_RE.test(label2) && label2.length < 80 && !out.includes(label2)) out.push(label2);
   for (const k of ["fields", "formFields", "form", "schema", "properties"]) {
     if (o[k] != null) formLabels(o[k], depth + 1, out);
@@ -50060,10 +50605,10 @@ function side(call, def) {
 }
 function toItems(def, raw) {
   return raw.slice(0, 12).map((it, i) => ({
-    id: str3((def.idOf ? def.idOf(it) : it.id) ?? `row-${i}`),
+    id: str4((def.idOf ? def.idOf(it) : it.id) ?? `row-${i}`),
     title: def.titleOf(it) || "(untitled)",
     imageUrl: def.imageOf?.(it),
-    price: def.priceOf?.(it) || str3(it.price?.formatted) || str3(it.formattedPrice) || void 0,
+    price: def.priceOf?.(it) || str4(it.price?.formatted) || str4(it.formattedPrice) || void 0,
     detail: def.detailOf?.(it),
     description: copyOrDrop(def.descriptionOf ? def.descriptionOf(it) : genericDescription(it), 240) || void 0
   }));
@@ -50088,7 +50633,7 @@ async function readBookingsCategories(call) {
   const { data } = await probeCall(call, "POST", "/bookings/v2/categories/query", {
     query: { paging: { limit: 100 } }
   });
-  return asArr(data?.categories).map((c) => ({ id: str3(c.id), name: str3(c.name ?? c.title) }));
+  return asArr(data?.categories).map((c) => ({ id: str4(c.id), name: str4(c.name ?? c.title) }));
 }
 async function readRedirects(call) {
   if (!call) return 0;
@@ -50101,27 +50646,27 @@ async function readStoreCategories(call) {
     query: { cursorPaging: { limit: 100 } },
     treeReference: { appNamespace: "@wix/stores" }
   });
-  return asArr(data?.categories).map((c) => ({ id: str3(c.id), name: str3(c.name), count: typeof c.numberOfProducts === "number" ? c.numberOfProducts : void 0 }));
+  return asArr(data?.categories).map((c) => ({ id: str4(c.id), name: str4(c.name), count: typeof c.numberOfProducts === "number" ? c.numberOfProducts : void 0 }));
 }
 async function readBlogCategories(call) {
   if (!call) return [];
   const { data } = await probeCall(call, "POST", "/blog/v3/categories/query", {
     query: { paging: { limit: 100 } }
   });
-  return asArr(data?.categories).map((c) => ({ id: str3(c.id), name: str3(c.label ?? c.name) }));
+  return asArr(data?.categories).map((c) => ({ id: str4(c.id), name: str4(c.label ?? c.name) }));
 }
 async function readMediaLibrary(call) {
   if (!call) return [];
   const { data } = await probeCall(call, "GET", "/site-media/v1/files?paging.limit=50");
   return asArr(data?.files).slice(0, 50).map((f) => ({
-    id: str3(f.id ?? f.fileId),
-    url: str3(f.url) || (str3(f.id) ? `https://static.wixstatic.com/media/${str3(f.id)}` : ""),
-    filename: str3(f.displayName ?? f.fileName ?? f.name) || void 0
+    id: str4(f.id ?? f.fileId),
+    url: str4(f.url) || (str4(f.id) ? `https://static.wixstatic.com/media/${str4(f.id)}` : ""),
+    filename: str4(f.displayName ?? f.fileName ?? f.name) || void 0
   })).filter((f) => f.id && f.url);
 }
 function sampleTitle(data) {
   for (const k of ["title", "name", "headline", "slug", "label", "displayName"]) {
-    const v = str3(data[k]).trim();
+    const v = str4(data[k]).trim();
     if (v && !v.includes("@") && v.length < 120) return v;
   }
   for (const [k, v] of Object.entries(data)) {
@@ -50145,13 +50690,13 @@ async function readCms(call, opts = {}) {
   const unread = Math.max(0, (total ?? all.length) - cols.length);
   const out = [];
   for (const c of cols) {
-    const id = str3(c.id);
+    const id = str4(c.id);
     if (!id) continue;
     const fieldsRaw = asArr(c.fields ?? c.displayFields);
     const fields = fieldsRaw.map((f) => ({
-      key: str3(f.key ?? f.id),
-      displayName: str3(f.displayName) || void 0,
-      type: str3(f.type) || void 0,
+      key: str4(f.key ?? f.id),
+      displayName: str4(f.displayName) || void 0,
+      type: str4(f.type) || void 0,
       ...f.systemField === true ? { systemField: true } : {},
       ...f.encrypted === true ? { encrypted: true } : {}
     })).filter((f) => f.key);
@@ -50164,17 +50709,17 @@ async function readCms(call, opts = {}) {
     const samples = items.slice(0, 5).map((row, i) => {
       const dataObj = row.data && typeof row.data === "object" ? row.data : row;
       const title = sampleTitle(dataObj);
-      return { id: str3(row.id ?? dataObj._id) || `row-${i}`, ...title ? { title } : {} };
+      return { id: str4(row.id ?? dataObj._id) || `row-${i}`, ...title ? { title } : {} };
     });
     out.push({
       id,
-      displayName: str3(c.displayName ?? c.name) || void 0,
+      displayName: str4(c.displayName ?? c.name) || void 0,
       // A Wix APP's collection (Stores, Bookings, …) — the generic CMS screen must not
       // advertise it, because its vertical already does, properly.
-      ...str3(c.ownerAppId) ? { ownerAppId: str3(c.ownerAppId) } : {},
-      ...str3(c.displayField) ? { displayField: str3(c.displayField) } : {},
-      readRole: str3(perms?.read) || str3(c.permissions) || void 0,
-      writeRole: str3(perms?.insert ?? perms?.update) || void 0,
+      ...str4(c.ownerAppId) ? { ownerAppId: str4(c.ownerAppId) } : {},
+      ...str4(c.displayField) ? { displayField: str4(c.displayField) } : {},
+      readRole: str4(perms?.read) || str4(c.permissions) || void 0,
+      writeRole: str4(perms?.insert ?? perms?.update) || void 0,
       fields,
       sampleCount: items.length,
       ...samples.length ? { samples } : {}
@@ -50198,8 +50743,8 @@ async function readInstalledApps(call) {
     if (!data) continue;
     const raw = asArr(data.apps ?? data.siteApps ?? data.items);
     const apps = raw.map((a) => ({
-      id: str3(a.id ?? a.appId ?? a.appDefId),
-      name: str3(a.name ?? a.appName ?? a.title) || void 0
+      id: str4(a.id ?? a.appId ?? a.appDefId),
+      name: str4(a.name ?? a.appName ?? a.title) || void 0
     })).filter((a) => a.id);
     if (apps.length) return apps.slice(0, 40);
   }
@@ -50218,7 +50763,7 @@ async function readMemberRoles(call) {
     }
     if (!data) continue;
     const raw = asArr(data.roles ?? data.items);
-    const names = raw.map((r) => str3(r.title ?? r.name ?? r.id)).filter((n) => n && !n.includes("@"));
+    const names = raw.map((r) => str4(r.title ?? r.name ?? r.id)).filter((n) => n && !n.includes("@"));
     if (names.length) return { names: names.slice(0, 24), status: "ok" };
     sawEmptyPayload = true;
   }
@@ -50226,13 +50771,13 @@ async function readMemberRoles(call) {
   if (sawAuthError) return { names: [], status: "error" };
   return { names: [], status: "empty" };
 }
-var asArr, str3, DESCRIPTION_FIELDS, UUID_RE, CORE_PROBES, OPTIONAL_PROBES, ALL, CMS_LIST_LIMIT;
+var asArr, str4, DESCRIPTION_FIELDS, UUID_RE, CORE_PROBES, OPTIONAL_PROBES, ALL, CMS_LIST_LIMIT;
 var init_probes = __esm({
   "src/site-analyze/probes.ts"() {
     init_rest();
     init_copy_clean();
     asArr = (x) => Array.isArray(x) ? x : [];
-    str3 = (x) => typeof x === "string" ? x : "";
+    str4 = (x) => typeof x === "string" ? x : "";
     DESCRIPTION_FIELDS = ["plainDescription", "description", "shortDescription", "excerpt", "tagLine", "subtitle"];
     UUID_RE = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;
     CORE_PROBES = [
@@ -50242,9 +50787,9 @@ var init_probes = __esm({
         path: "/stores/v3/products/query",
         body: { query: { cursorPaging: { limit: 50 } } },
         itemsOf: (d) => asArr(d.products),
-        titleOf: (p) => str3(p.name),
+        titleOf: (p) => str4(p.name),
         imageOf: productImage,
-        priceOf: (p) => str3(p.price?.formatted) || str3(p.priceData?.formatted?.price) || str3(p.formattedPrice) || (typeof p.price === "number" ? String(p.price) : void 0),
+        priceOf: (p) => str4(p.price?.formatted) || str4(p.priceData?.formatted?.price) || str4(p.formattedPrice) || (typeof p.price === "number" ? String(p.price) : void 0),
         fallbacks: [
           {
             method: "POST",
@@ -50266,7 +50811,7 @@ var init_probes = __esm({
         path: "/bookings/v2/services/query",
         body: { query: { paging: { limit: 50 } } },
         itemsOf: (d) => asArr(d.services),
-        titleOf: (s) => str3(s.name),
+        titleOf: (s) => str4(s.name),
         imageOf: serviceImage
       },
       {
@@ -50275,8 +50820,8 @@ var init_probes = __esm({
         path: "/events/v3/events/query",
         body: { query: { paging: { limit: 50 } } },
         itemsOf: (d) => asArr(d.events),
-        titleOf: (e) => str3(e.title ?? e.name),
-        imageOf: (e) => str3(e.mainImage) || str3(e.mainImage?.url) || void 0
+        titleOf: (e) => str4(e.title ?? e.name),
+        imageOf: (e) => str4(e.mainImage) || str4(e.mainImage?.url) || void 0
       },
       {
         vertical: "blog",
@@ -50284,7 +50829,7 @@ var init_probes = __esm({
         path: "/blog/v3/posts/query",
         body: { query: { paging: { limit: 50 } } },
         itemsOf: (d) => asArr(d.posts),
-        titleOf: (p) => str3(p.title),
+        titleOf: (p) => str4(p.title),
         imageOf: blogCover
       },
       {
@@ -50293,7 +50838,7 @@ var init_probes = __esm({
         path: "/social-groups-proxy/groups/v2/groups/query",
         body: { query: { paging: { limit: 50 } } },
         itemsOf: (d) => asArr(d.groups),
-        titleOf: (g) => str3(g.title ?? g.name),
+        titleOf: (g) => str4(g.title ?? g.name),
         imageOf: (g) => deepImageUrl(g.coverImage) || deepImageUrl(g.image)
       },
       {
@@ -50302,7 +50847,7 @@ var init_probes = __esm({
         path: "/online-programs/v3/programs/query",
         body: { query: { cursorPaging: { limit: 50 } } },
         itemsOf: (d) => asArr(d.programs),
-        titleOf: (p) => str3(p.title ?? p.name),
+        titleOf: (p) => str4(p.title ?? p.name),
         imageOf: (p) => deepImageUrl(p.image) || deepImageUrl(p.coverImage) || deepImageUrl(p.media)
       },
       {
@@ -50310,21 +50855,21 @@ var init_probes = __esm({
         method: "GET",
         path: "/restaurants/menus/v1/menus",
         itemsOf: (d) => asArr(d.menus),
-        titleOf: (m) => str3(m.name)
+        titleOf: (m) => str4(m.name)
       }
     ];
     OPTIONAL_PROBES = [
-      { vertical: "plans", method: "GET", path: "/pricing-plans/v2/plans", itemsOf: (d) => asArr(d.plans), titleOf: (p) => str3(p.name), imageOf: (p) => deepImageUrl(p.image) || deepImageUrl(p.media), priceOf: planPrice, detailOf: planDetail },
-      { vertical: "reviews", method: "POST", path: "/reviews/v1/reviews/query", body: { query: { cursorPaging: { limit: 20 } } }, itemsOf: (d) => asArr(d.reviews), titleOf: (r) => str3(r.content ?? r.title) },
-      { vertical: "loyalty", method: "GET", path: "/loyalty-programs/v1/program", itemsOf: (d) => d.loyaltyProgram ? [d.loyaltyProgram] : [], titleOf: (p) => str3(p.name) || "Loyalty" },
-      { vertical: "forum", method: "POST", path: "/forum/v1/posts/query", body: { query: { paging: { limit: 10 } } }, itemsOf: (d) => asArr(d.posts), titleOf: (p) => str3(p.title) },
-      { vertical: "donations", method: "POST", path: "/donation-campaigns/v2/donation-campaigns/query", body: { query: { cursorPaging: { limit: 20 } } }, itemsOf: (d) => asArr(d.donationCampaigns), titleOf: (c) => str3(c.name) },
-      { vertical: "giftCards", method: "POST", path: "/gift-cards/v1/gift-cards/query", body: { query: { paging: { limit: 10 } } }, itemsOf: (d) => asArr(d.giftCards), titleOf: (g) => str3(g.name) },
-      { vertical: "reservations", method: "GET", path: "/table-reservations/reservation-locations/v1/reservation-locations", itemsOf: (d) => asArr(d.reservationLocations ?? d.reservations), titleOf: (l) => str3(l.name) },
-      { vertical: "badges", method: "POST", path: "/badges/v4/badges/query", body: { query: { cursorPaging: { limit: 50 } } }, itemsOf: (d) => asArr(d.badges), titleOf: (b) => str3(b.title ?? b.name) },
-      { vertical: "coupons", method: "POST", path: "/stores/v2/coupons/query", body: { query: { paging: { limit: 30 } } }, itemsOf: (d) => asArr(d.coupons), titleOf: (c) => str3(c.name) },
-      { vertical: "forms", method: "POST", path: "/form-schema-service/v4/forms/query", body: { query: { paging: { limit: 30 } }, namespace: "wix.form_app.form" }, itemsOf: (d) => asArr(d.forms), titleOf: (f) => str3(f.name), detailOf: formDetail },
-      { vertical: "portfolio", method: "GET", path: "/portfolio/v1/projects", itemsOf: (d) => asArr(d.projects), titleOf: (p) => str3(p.title ?? p.name), imageOf: (p) => deepImageUrl(p.coverImage) || deepImageUrl(p.image) },
+      { vertical: "plans", method: "GET", path: "/pricing-plans/v2/plans", itemsOf: (d) => asArr(d.plans), titleOf: (p) => str4(p.name), imageOf: (p) => deepImageUrl(p.image) || deepImageUrl(p.media), priceOf: planPrice, detailOf: planDetail },
+      { vertical: "reviews", method: "POST", path: "/reviews/v1/reviews/query", body: { query: { cursorPaging: { limit: 20 } } }, itemsOf: (d) => asArr(d.reviews), titleOf: (r) => str4(r.content ?? r.title) },
+      { vertical: "loyalty", method: "GET", path: "/loyalty-programs/v1/program", itemsOf: (d) => d.loyaltyProgram ? [d.loyaltyProgram] : [], titleOf: (p) => str4(p.name) || "Loyalty" },
+      { vertical: "forum", method: "POST", path: "/forum/v1/posts/query", body: { query: { paging: { limit: 10 } } }, itemsOf: (d) => asArr(d.posts), titleOf: (p) => str4(p.title) },
+      { vertical: "donations", method: "POST", path: "/donation-campaigns/v2/donation-campaigns/query", body: { query: { cursorPaging: { limit: 20 } } }, itemsOf: (d) => asArr(d.donationCampaigns), titleOf: (c) => str4(c.name) },
+      { vertical: "giftCards", method: "POST", path: "/gift-cards/v1/gift-cards/query", body: { query: { paging: { limit: 10 } } }, itemsOf: (d) => asArr(d.giftCards), titleOf: (g) => str4(g.name) },
+      { vertical: "reservations", method: "GET", path: "/table-reservations/reservation-locations/v1/reservation-locations", itemsOf: (d) => asArr(d.reservationLocations ?? d.reservations), titleOf: (l) => str4(l.name) },
+      { vertical: "badges", method: "POST", path: "/badges/v4/badges/query", body: { query: { cursorPaging: { limit: 50 } } }, itemsOf: (d) => asArr(d.badges), titleOf: (b) => str4(b.title ?? b.name) },
+      { vertical: "coupons", method: "POST", path: "/stores/v2/coupons/query", body: { query: { paging: { limit: 30 } } }, itemsOf: (d) => asArr(d.coupons), titleOf: (c) => str4(c.name) },
+      { vertical: "forms", method: "POST", path: "/form-schema-service/v4/forms/query", body: { query: { paging: { limit: 30 } }, namespace: "wix.form_app.form" }, itemsOf: (d) => asArr(d.forms), titleOf: (f) => str4(f.name), detailOf: formDetail },
+      { vertical: "portfolio", method: "GET", path: "/portfolio/v1/projects", itemsOf: (d) => asArr(d.projects), titleOf: (p) => str4(p.title ?? p.name), imageOf: (p) => deepImageUrl(p.coverImage) || deepImageUrl(p.image) },
       {
         vertical: "members",
         method: "POST",
@@ -51428,7 +51973,7 @@ function veloArtifactRelPath(veloPath) {
   if (!parts.length || parts.some((s) => s === "..")) return void 0;
   return `${VELO_DIR}/${parts.join("/")}`;
 }
-function str4(x) {
+function str5(x) {
   return typeof x === "string" ? x : "";
 }
 function asArr2(x) {
@@ -51446,9 +51991,9 @@ function filesFromOwnerPayload(data, redact = redactSecrets) {
   for (const item of raw) {
     if (!item || typeof item !== "object") continue;
     const f = item;
-    const path2 = str4(f.path || f.relativePath || f.fileName || f.name);
+    const path2 = str5(f.path || f.relativePath || f.fileName || f.name);
     if (!path2 || isSecretVeloPath(path2)) continue;
-    const content = str4(f.content ?? f.source ?? f.code ?? f.body);
+    const content = str5(f.content ?? f.source ?? f.code ?? f.body);
     const bytes2 = typeof f.bytes === "number" ? f.bytes : typeof f.size === "number" ? f.size : content.length;
     const redacted = content ? redact(content) : "";
     const forDisk = redacted.length > VELO_FILE_CAP ? redacted.slice(0, VELO_FILE_CAP) + "\n/* \u2026truncated */" : redacted;
@@ -53041,7 +53586,7 @@ var init_brand_font = __esm({
 
 // src/site-analyze/write-artifacts.ts
 import { mkdirSync as mkdirSync28, writeFileSync as writeFileSync25 } from "node:fs";
-import { join as join54 } from "node:path";
+import { join as join55 } from "node:path";
 function attachVeloSources(book, sources, put) {
   const byPath = new Map((sources ?? []).map((s) => [s.path, s.text]));
   for (const f of book.velo.files) {
@@ -53196,12 +53741,12 @@ async function downloadMedia(book, fetchImpl, put) {
 }
 async function writeBusinessBook(result, opts) {
   const out = opts.outDir;
-  mkdirSync28(join54(out, "evidence/pages"), { recursive: true });
-  mkdirSync28(join54(out, "media/catalog"), { recursive: true });
+  mkdirSync28(join55(out, "evidence/pages"), { recursive: true });
+  mkdirSync28(join55(out, "media/catalog"), { recursive: true });
   const files = [];
   const put = (rel, body) => {
-    const p = join54(out, rel);
-    mkdirSync28(join54(p, ".."), { recursive: true });
+    const p = join55(out, rel);
+    mkdirSync28(join55(p, ".."), { recursive: true });
     writeFileSync25(p, body);
     files.push(rel);
   };
@@ -53295,8 +53840,8 @@ var init_customer_build = __esm({
 });
 
 // src/site-analyze/apply.ts
-import { existsSync as existsSync58, readFileSync as readFileSync68, writeFileSync as writeFileSync26, copyFileSync as copyFileSync3, mkdirSync as mkdirSync29, realpathSync as realpathSync7, statSync as statSync16 } from "node:fs";
-import { dirname as dirname31, isAbsolute as isAbsolute4, join as join55, resolve as resolve45, sep as sep14 } from "node:path";
+import { existsSync as existsSync58, readFileSync as readFileSync69, writeFileSync as writeFileSync26, copyFileSync as copyFileSync3, mkdirSync as mkdirSync29, realpathSync as realpathSync7, statSync as statSync16 } from "node:fs";
+import { dirname as dirname31, isAbsolute as isAbsolute4, join as join56, resolve as resolve45, sep as sep14 } from "node:path";
 import { spawnSync as spawnSync4 } from "node:child_process";
 function unpairedRedirectNote(overlay) {
   if (!overlay.wix?.clientId || overlay.wix.redirectUri) return void 0;
@@ -53311,7 +53856,7 @@ function committedShellProvisioning(path2) {
 function findRepoRoot(cwd) {
   let dir = cwd;
   for (let i = 0; i < 8; i++) {
-    if (SHELL_NAMES2.some((name) => existsSync58(join55(dir, shellAppDir(name), "package.json")))) return dir;
+    if (SHELL_NAMES2.some((name) => existsSync58(join56(dir, shellAppDir(name), "package.json")))) return dir;
     const next = dirname31(dir);
     if (next === dir) break;
     dir = next;
@@ -53379,11 +53924,11 @@ function mergeCustomerOwned(committed, overlay) {
 }
 function buildMergedContract(options) {
   const { appDir: appDir2, packageDir, overlay } = options;
-  const committedPath = join55(appDir2, "provisioning.json");
+  const committedPath = join56(appDir2, "provisioning.json");
   if (!existsSync58(committedPath)) {
     throw new Error(`shell has no committed provisioning.json at ${committedPath} to build a contract from`);
   }
-  const committed = JSON.parse(readFileSync68(committedPath, "utf8"));
+  const committed = JSON.parse(readFileSync69(committedPath, "utf8"));
   const merged = mergeCustomerOwned(committed, overlay);
   const overlayFontFamily = (overlay.branding ?? {}).fontFamily;
   const branding = merged.branding ?? {};
@@ -53395,7 +53940,7 @@ function buildMergedContract(options) {
   };
   const stage = (fromRel, toRel) => {
     const from = contained(packageDir, fromRel);
-    const to = contained(join55(appDir2, STAGED), toRel.slice(STAGED.length + 1));
+    const to = contained(join56(appDir2, STAGED), toRel.slice(STAGED.length + 1));
     if (!from || !to || !existsSync58(from)) return void 0;
     let real;
     let realRoot;
@@ -53418,11 +53963,11 @@ function buildMergedContract(options) {
   };
   const icon = stage("media/icon.png", `${STAGED}/icon.png`);
   if (icon) branding.appIconPath = icon;
-  const facesPath = join55(packageDir, "media/fonts/faces.json");
+  const facesPath = join56(packageDir, "media/fonts/faces.json");
   if (existsSync58(facesPath)) {
     let faces = [];
     try {
-      const parsed = JSON.parse(readFileSync68(facesPath, "utf8"));
+      const parsed = JSON.parse(readFileSync69(facesPath, "utf8"));
       faces = Array.isArray(parsed) ? parsed : [];
     } catch {
       faces = [];
@@ -53443,9 +53988,9 @@ function buildMergedContract(options) {
   merged.branding = branding;
   const body = `${JSON.stringify(merged, null, 2)}
 `;
-  const path2 = join55(packageDir, "provisioning.contract.json");
+  const path2 = join56(packageDir, "provisioning.contract.json");
   writeFileSync26(path2, body);
-  const localPath = join55(appDir2, LOCAL_CONTRACT_REL);
+  const localPath = join56(appDir2, LOCAL_CONTRACT_REL);
   mkdirSync29(dirname31(localPath), { recursive: true });
   writeFileSync26(localPath, body);
   staged.push(localPath);
@@ -53455,8 +54000,8 @@ async function applyOverlays(input) {
   const cwd = resolve45(input.cwd);
   const shell = input.shell ?? DEFAULT_BRANDABLE_SHELL;
   assertKnownShell(shell);
-  const overlay = JSON.parse(readFileSync68(input.overlayPath, "utf8"));
-  const tokens = JSON.parse(readFileSync68(input.tokensPath, "utf8"));
+  const overlay = JSON.parse(readFileSync69(input.overlayPath, "utf8"));
+  const tokens = JSON.parse(readFileSync69(input.tokensPath, "utf8"));
   const wrote = [];
   const notes = [];
   const repoRoot2 = findRepoRoot(cwd);
@@ -53466,7 +54011,7 @@ async function applyOverlays(input) {
         `shell "${shell}" cannot bake a customer brand \u2014 it ships no prepare:customer script`
       );
     }
-    const appDir2 = join55(repoRoot2, shellAppDir(shell));
+    const appDir2 = join56(repoRoot2, shellAppDir(shell));
     const packageDir = dirname31(resolve45(input.overlayPath));
     const { path: contract, staged } = buildMergedContract({ appDir: appDir2, packageDir, overlay });
     wrote.push(...staged);
@@ -53488,10 +54033,10 @@ async function applyOverlays(input) {
       note: `prepare:customer --contract with a merged contract (committed provisioning.json untouched)${unpairedInRepo ? ` \xB7 ${unpairedInRepo}` : ""}`
     };
   }
-  const pkgProv = join55(cwd, "provisioning.json");
+  const pkgProv = join56(cwd, "provisioning.json");
   assertNotCommitted(pkgProv, input.forbiddenProvisioning);
   if (existsSync58(pkgProv)) {
-    const cur = JSON.parse(readFileSync68(pkgProv, "utf8"));
+    const cur = JSON.parse(readFileSync69(pkgProv, "utf8"));
     const merged = deepMerge4(cur, overlay);
     writeFileSync26(pkgProv, JSON.stringify(merged, null, 2) + "\n");
     wrote.push(pkgProv);
@@ -53499,9 +54044,9 @@ async function applyOverlays(input) {
     writeFileSync26(pkgProv, JSON.stringify(overlay, null, 2) + "\n");
     wrote.push(pkgProv);
   }
-  const pkgTokens = join55(cwd, "tokens.json");
+  const pkgTokens = join56(cwd, "tokens.json");
   if (existsSync58(pkgTokens) && (tokens.colors || tokens.typography)) {
-    const cur = JSON.parse(readFileSync68(pkgTokens, "utf8"));
+    const cur = JSON.parse(readFileSync69(pkgTokens, "utf8"));
     const merged = deepMerge4(cur, tokens);
     const mergedColors = merged.colors;
     if (mergedColors && typeof mergedColors === "object" && !Array.isArray(mergedColors)) {
@@ -53520,9 +54065,9 @@ async function applyOverlays(input) {
     wrote.push(pkgTokens);
   }
   const homeAction = homeRefreshActionId(shell);
-  const homeSrc = join55(cwd, "dev/index.ts");
+  const homeSrc = join56(cwd, "dev/index.ts");
   if (homeAction && existsSync58(homeSrc)) {
-    const prev = readFileSync68(homeSrc, "utf8");
+    const prev = readFileSync69(homeSrc, "utf8");
     const patched = patchBrandParams(prev, overlay, homeAction);
     let next = patched.src;
     if (!patched.foreign && overlay.installedVerticals?.length) {
@@ -54558,20 +55103,20 @@ function canonicalDomain(domainName) {
   if (domainName == null) {
     return void 0;
   }
-  let str6 = domainName.trim().replace(/^\./, "");
-  if (IP_V6_REGEX_OBJECT.test(str6)) {
-    if (!str6.startsWith("[")) {
-      str6 = "[" + str6;
+  let str7 = domainName.trim().replace(/^\./, "");
+  if (IP_V6_REGEX_OBJECT.test(str7)) {
+    if (!str7.startsWith("[")) {
+      str7 = "[" + str7;
     }
-    if (!str6.endsWith("]")) {
-      str6 = str6 + "]";
+    if (!str7.endsWith("]")) {
+      str7 = str7 + "]";
     }
-    return domainToASCII(str6).slice(1, -1);
+    return domainToASCII(str7).slice(1, -1);
   }
-  if (/[^\u0001-\u007f]/.test(str6)) {
-    return domainToASCII(str6);
+  if (/[^\u0001-\u007f]/.test(str7)) {
+    return domainToASCII(str7);
   }
-  return str6.toLowerCase();
+  return str7.toLowerCase();
 }
 function formatDate(date) {
   return date.toUTCString();
@@ -54665,16 +55210,16 @@ function parseDate(cookieDate) {
   }
   return date;
 }
-function trimTerminator(str6) {
-  if (isEmptyString(str6)) return str6;
+function trimTerminator(str7) {
+  if (isEmptyString(str7)) return str7;
   for (let t = 0; t < TERMINATORS.length; t++) {
     const terminator = TERMINATORS[t];
-    const terminatorIdx = terminator ? str6.indexOf(terminator) : -1;
+    const terminatorIdx = terminator ? str7.indexOf(terminator) : -1;
     if (terminatorIdx !== -1) {
-      str6 = str6.slice(0, terminatorIdx);
+      str7 = str7.slice(0, terminatorIdx);
     }
   }
-  return str6;
+  return str7;
 }
 function parseCookiePair(cookiePair, looseMode) {
   cookiePair = trimTerminator(cookiePair);
@@ -54705,13 +55250,13 @@ function parseCookiePair(cookiePair, looseMode) {
   c.value = cookieValue;
   return c;
 }
-function parse(str6, options) {
-  if (isEmptyString(str6) || !isString(str6)) {
+function parse(str7, options) {
+  if (isEmptyString(str7) || !isString(str7)) {
     return void 0;
   }
-  str6 = str6.trim();
-  const firstSemi = str6.indexOf(";");
-  const cookiePair = firstSemi === -1 ? str6 : str6.slice(0, firstSemi);
+  str7 = str7.trim();
+  const firstSemi = str7.indexOf(";");
+  const cookiePair = firstSemi === -1 ? str7 : str7.slice(0, firstSemi);
   const c = parseCookiePair(cookiePair, options?.loose ?? false);
   if (!c) {
     return void 0;
@@ -54719,7 +55264,7 @@ function parse(str6, options) {
   if (firstSemi === -1) {
     return c;
   }
-  const unparsed = str6.slice(firstSemi + 1).trim();
+  const unparsed = str7.slice(firstSemi + 1).trim();
   if (unparsed.length === 0) {
     return c;
   }
@@ -54800,19 +55345,19 @@ function parse(str6, options) {
   }
   return c;
 }
-function fromJSON(str6) {
-  if (!str6 || isEmptyString(str6)) {
+function fromJSON(str7) {
+  if (!str7 || isEmptyString(str7)) {
     return void 0;
   }
   let obj3;
-  if (typeof str6 === "string") {
+  if (typeof str7 === "string") {
     try {
-      obj3 = JSON.parse(str6);
+      obj3 = JSON.parse(str7);
     } catch {
       return void 0;
     }
   } else {
-    obj3 = str6;
+    obj3 = str7;
   }
   const c = new Cookie();
   Cookie.serializableProperties.forEach((prop) => {
@@ -55530,42 +56075,42 @@ var init_dist = __esm({
        * @public
        */
       toString() {
-        let str6 = this.cookieString();
+        let str7 = this.cookieString();
         if (this.expires != "Infinity") {
           if (this.expires instanceof Date) {
-            str6 += `; Expires=${formatDate(this.expires)}`;
+            str7 += `; Expires=${formatDate(this.expires)}`;
           }
         }
         if (this.maxAge != null && this.maxAge != Infinity) {
-          str6 += `; Max-Age=${String(this.maxAge)}`;
+          str7 += `; Max-Age=${String(this.maxAge)}`;
         }
         if (this.domain && !this.hostOnly) {
-          str6 += `; Domain=${this.domain}`;
+          str7 += `; Domain=${this.domain}`;
         }
         if (this.path) {
-          str6 += `; Path=${this.path}`;
+          str7 += `; Path=${this.path}`;
         }
         if (this.secure) {
-          str6 += "; Secure";
+          str7 += "; Secure";
         }
         if (this.httpOnly) {
-          str6 += "; HttpOnly";
+          str7 += "; HttpOnly";
         }
         if (this.sameSite && this.sameSite !== "none") {
           if (this.sameSite.toLowerCase() === _Cookie2.sameSiteCanonical.lax.toLowerCase()) {
-            str6 += `; SameSite=${_Cookie2.sameSiteCanonical.lax}`;
+            str7 += `; SameSite=${_Cookie2.sameSiteCanonical.lax}`;
           } else if (this.sameSite.toLowerCase() === _Cookie2.sameSiteCanonical.strict.toLowerCase()) {
-            str6 += `; SameSite=${_Cookie2.sameSiteCanonical.strict}`;
+            str7 += `; SameSite=${_Cookie2.sameSiteCanonical.strict}`;
           } else {
-            str6 += `; SameSite=${this.sameSite}`;
+            str7 += `; SameSite=${this.sameSite}`;
           }
         }
         if (this.extensions) {
           this.extensions.forEach((ext) => {
-            str6 += `; ${ext}`;
+            str7 += `; ${ext}`;
           });
         }
-        return str6;
+        return str7;
       }
       /**
        * Computes the TTL relative to now (milliseconds).
@@ -55688,8 +56233,8 @@ var init_dist = __esm({
        * @param str - The `Set-Cookie` header or a Cookie string to parse.
        * @param options - Configures `strict` or `loose` mode for cookie parsing
        */
-      static parse(str6, options) {
-        return parse(str6, options);
+      static parse(str7, options) {
+        return parse(str7, options);
       }
       /**
        * Does the reverse of {@link Cookie.toJSON}.
@@ -55716,8 +56261,8 @@ var init_dist = __esm({
        *
        * @param str - An unparsed JSON string or a value that has already been parsed as JSON
        */
-      static fromJSON(str6) {
-        return fromJSON(str6);
+      static fromJSON(str7) {
+        return fromJSON(str7);
       }
     };
     _Cookie.cookiesCreated = 0;
@@ -57706,7 +58251,7 @@ __export(cli_exports, {
   runSiteAnalyze: () => runSiteAnalyze,
   runSiteFunctionCli: () => runSiteFunctionCli
 });
-import { readFileSync as readFileSync69 } from "node:fs";
+import { readFileSync as readFileSync70 } from "node:fs";
 import { resolve as resolve46 } from "node:path";
 function assetFetchFor(_opts) {
   return pinnedFetch2;
@@ -57793,7 +58338,7 @@ async function runSiteFunctionCli(opts) {
   let source;
   if (opts.sourcePath) {
     const p = resolve46(opts.cwd ?? process.cwd(), opts.sourcePath);
-    source = readFileSync69(p, "utf8");
+    source = readFileSync70(p, "utf8");
   }
   let body;
   if (opts.bodyRaw != null) {
@@ -58050,7 +58595,7 @@ __export(site_create_exports, {
   runSiteList: () => runSiteList,
   writeProvisioningBinding: () => writeProvisioningBinding
 });
-import { existsSync as existsSync59, readFileSync as readFileSync70, writeFileSync as writeFileSync27 } from "node:fs";
+import { existsSync as existsSync59, readFileSync as readFileSync71, writeFileSync as writeFileSync27 } from "node:fs";
 import { resolve as resolvePath2 } from "node:path";
 function oauthClientName(projectName) {
   return `${projectName} client`;
@@ -58199,7 +58744,7 @@ async function runSiteCreate(opts) {
   if (!wantOauthApp) return { ...base, nextSteps: nextSteps(metaSiteId) };
   return { ...base, clientId, redirectUri, nextSteps: nextSteps(metaSiteId, clientId) };
 }
-function writeProvisioningBinding(target, binding2, fs = { existsSync: existsSync59, readFileSync: readFileSync70, writeFileSync: writeFileSync27 }) {
+function writeProvisioningBinding(target, binding2, fs = { existsSync: existsSync59, readFileSync: readFileSync71, writeFileSync: writeFileSync27 }) {
   const msid = binding2.siteId;
   const path2 = resolvePath2(target);
   const committed = committedShellProvisioning(path2);
@@ -58872,11 +59417,11 @@ var init_context = __esm({
 });
 
 // src/cli.ts
-import { mkdtempSync as mkdtempSync4, readFileSync as readFileSync71, mkdirSync as mkdirSync30, writeFileSync as writeFileSync28, existsSync as existsSync60, rmSync as rmSync13, readdirSync as readdirSync27, statSync as statSync17, lstatSync as lstatSync8, accessSync, constants as constants2, renameSync as renameSync6, cpSync as cpSync3 } from "node:fs";
+import { mkdtempSync as mkdtempSync4, readFileSync as readFileSync72, mkdirSync as mkdirSync30, writeFileSync as writeFileSync28, existsSync as existsSync60, rmSync as rmSync13, readdirSync as readdirSync27, statSync as statSync17, lstatSync as lstatSync9, accessSync, constants as constants2, renameSync as renameSync6, cpSync as cpSync3 } from "node:fs";
 import { execFile, execFileSync as execFileSync7, spawnSync as spawnSync5, spawn as spawn6 } from "node:child_process";
-import { createHash as createHash26, randomUUID as randomUUID5 } from "node:crypto";
+import { createHash as createHash27, randomUUID as randomUUID5 } from "node:crypto";
 import { tmpdir as tmpdir5, homedir as homedir7, hostname } from "node:os";
-import { join as join56, resolve as resolve47, relative as relative10, basename as basename13, dirname as dirname32 } from "node:path";
+import { join as join57, resolve as resolve47, relative as relative10, basename as basename14, dirname as dirname32 } from "node:path";
 import { fileURLToPath as fileURLToPath24 } from "node:url";
 
 // ../serve-cli/src/client.ts
@@ -62148,12 +62693,12 @@ function parseFlags(argv) {
   return { _, flags };
 }
 var caveatLead = (ni) => ni.severity === "category" ? "WARNING \u2014 not implemented" : "NOTE \u2014 implemented, but these props are inert";
-var str5 = (v) => typeof v === "string" ? v : void 0;
+var str6 = (v) => typeof v === "string" ? v : void 0;
 var num2 = (v) => typeof v === "string" && v !== "" && Number.isFinite(Number(v)) ? Number(v) : void 0;
 function embeddedTemplateCatalog() {
   return availableTemplates().map((name) => {
-    const path2 = join56(templateSourceDir(name), TEMPLATE_META_FILE);
-    const meta = JSON.parse(readFileSync71(path2, "utf8"));
+    const path2 = join57(templateSourceDir(name), TEMPLATE_META_FILE);
+    const meta = JSON.parse(readFileSync72(path2, "utf8"));
     if (!meta || typeof meta.title !== "string" || typeof meta.description !== "string" || !Array.isArray(meta.tags)) {
       throw new Error(`${path2} must be { title: string, description: string, tags: string[], category?: string }`);
     }
@@ -62215,6 +62760,10 @@ var USAGE = `himi \u2014 the Himalaya authoring CLI (remote dev loop)
                                            app is built \u2014 screens as they render, the journey step and the
                                            latest postcard, validate/test/UX/draft checks, site vs app.
                                            Updates itself; once open, other commands keep it current.
+  himi studio reel [--out <file>] [--no-open]
+                                           the making-of: one self-contained HTML file of the app taking
+                                           shape \u2014 a flipbook of the home screen, the final screens, the
+                                           postcards. Default .himi/making-of.html.
   himi progress ["<message>" [--step <1-8|name>] [--image <png>]\u2026 [--notify]] [--content <dir>]
                                            journal a postcard for the owner (.himi/progress.jsonl): what
                                            changed, which journey step, and the image that shows it (copied
@@ -62766,7 +63315,7 @@ var COMMANDS = [
   { name: "test", summary: "DERIVED behavioral crawl \u2014 no test files to write. Boots each screen's real worker, replays its onAppear, then dispatches every action site the descriptor already declares (each from a fresh boot) and checks a narrow set of unambiguous invariants: no uncaught throw, never stuck on `loading`, no `$service:` token or NaN/undefined/[object Object] reaching visible text, no binding aimed at state the worker never defines, no nav param silently dropped, no dead nav target. Catches what validate/render cannot \u2014 a WRONG REDUCER passes both with ok:true. Runs the worker in a DEVICE-PARITY sandbox (no setTimeout/setInterval, as on JSC/WebView) so a bundle that would die on device fails here. Crawls on HERMETIC DATA by default \u2014 zero network: the app's own dev/net-mocks.json first (--net <file> overrides), then the config's CMS `seed:` rows, then a canned fixture of frozen real vertical responses shipped with the CLI (exercises code paths, not API-contract truth) \u2014 so the success/mapping path runs, not just the failure UI. Two boot-only HOSTILE passes (every list empty; every request 500) then check the failure/empty day \u2014 corpus-proven, so their findings are errors. NAV EDGES are followed too: every himi.open site ($item params resolved against row 0 of its list, $service against worker state) and worker _nav directive is harvested, and each baked target is booted WITH the params the source sends \u2014 detail screens finally run their content arm; edge findings are errors tagged edge:<source>. --native runs both real native decoders over the exact baked JSON bytes; --native ios or --native android selects one. It is explicit, runs only from a Himalaya SOURCE CHECKOUT (the decoder oracles are that tree's own HimalayaCore Swift package and Gradle harness, which a published install does not ship), and needs the selected local toolchain. From a source checkout, default runs name missing native verdicts in the coverage ledger; elsewhere the ledger stays silent about them rather than offering a remedy you cannot run. --offline strips all data layers (the old reject-all axis); --no-hostile skips the hostile passes. --record (EXPLICIT, never automatic) refreshes dev/net-mocks.json from live reads first: it boots each screen (load + root onAppear ONLY \u2014 nothing the app's own launch would not fire; the tap/action crawl never sees the live transport, and only proven reads \u2014 GET, or read-shaped POST (/query, /search, /list*, \u2026) \u2014 ever reach the wire), freezes the round-trips, then crawls hermetically on the fresh fixture; record against a QA site, not production. Nodes it cannot judge headless are named, never silently passed. Exit 1 on any error. The CLI carries the authoring runtime off-repo; no per-app SDK install is required. --browser runs the whole loop (build \u2192 extract \u2192 validate \u2192 render \u2192 test) in YOUR browser instead of here, so the source never reaches a pod: it opens one screen's worker + descriptor in a tab, blocks on a loopback callback, and prints the report it posts back. One screen per tab \u2014 name it. --no-open prints the URL rather than launching a browser (SSH); --timeout <ms> bounds the wait, which matters because the page has no execution deadline of its own and an infinite loop in the worker hangs the tab.", required: "[<screenId>\u2026] [--content <dir>] [--net <file>] [--budget <ms>] [--deep [n]] [--record] [--native [ios|android]] [--no-shots] [--offline] [--no-hostile] [--all-screens] [--browser] [--no-open] [--timeout <ms>] [--json]" },
   { name: "ux", summary: "audit or record mobile UX evidence. `audit` checks the public-safe contract, seeded blank acceptance rows, placeholder source copy, app-specific mocks, and iOS/Android audit records. It warns while existing templates migrate; `--strict` promotes missing evidence. `record` stores checks performed on an installed iOS/Android build: `--checks` is required for passed|failed and empty for unavailable, which drove nothing and needs a `--reason` instead. `record` also STAMPS the release it audited (it resolves the id from a build, the same one a push would publish), because an unforced `himi push` of a release with screens refuses when no drive is recorded for THAT release, or when the one that is recorded says `failed` \u2014 the artifact stopped being advice nobody reads (#2955). `unavailable` still satisfies it; only `failed` refuses.", required: "audit [--content <dir>] [--strict] [--json] | record --content <dir> --platform ios|android --status passed|failed|unavailable [--checks back,keyboard,...] [--reason <text>]" },
   { name: "progress", summary: 'the build JOURNAL an agent keeps for the owner while it works. `himi progress "<what changed>" --step <1-8|name> --image <png>` appends one postcard to .himi/progress.jsonl \u2014 the step is one of the customer journey\'s eight (discover, classify, plan, implement, brand, validate, review, download) \u2014 and COPIES each image, content-addressed, into .himi/history/, because .himi/shots/ is overwritten by every render and cleared by every full `himi test`, so a path into it would later show a different picture than the one the owner was sent. --image repeats. --notify also raises a best-effort desktop notification for an owner who stepped away. A bare `himi progress` prints the journal with the current step and elapsed time \u2014 also how an agent recovers its place after its context was compacted. Local only: nothing is sent anywhere.', required: '["<message>" [--step <1-8|name>] [--image <png>]\u2026 [--notify]] [--content <dir>]' },
-  { name: "studio", summary: "open the BUILD BOARD \u2014 one local page the owner can leave open while an agent builds their app, which fills itself in: every screen as it renders (NEW/CHANGED badges, and each earlier version kept for a filmstrip), the journey stepper and the latest postcard from `himi progress`, the validate/test/UX/draft checks as they run, the site next to the app's home screen with its palette, and the navigation the test crawl followed. Writes .himi/studio/index.html and opens it; the page re-reads its state every two seconds, so nothing needs to be served. OPT-IN BY EXISTENCE: until this command has run, no other command touches .himi/studio/ \u2014 after it, render/test/validate/push/icon/site/ux/progress each refresh the board as they finish (best-effort; never fails a command). Every image is a content-addressed copy in .himi/history/, never a live path into .himi/shots/. Local only, no secrets: it never reads a preview token, handover code or control token. --no-open prints the path instead (SSH, CI).", required: "[--content <dir>] [--no-open]" },
+  { name: "studio", summary: "open the BUILD BOARD \u2014 one local page the owner can leave open while an agent builds their app, which fills itself in: every screen as it renders (NEW/CHANGED badges, and each earlier version kept for a filmstrip), the journey stepper and the latest postcard from `himi progress`, the validate/test/UX/draft checks as they run, the site next to the app's home screen with its palette, and the navigation the test crawl followed. Writes .himi/studio/index.html and opens it; the page re-reads its state every two seconds, so nothing needs to be served. OPT-IN BY EXISTENCE: until this command has run, no other command touches .himi/studio/ \u2014 after it, render/test/validate/push/icon/site/ux/progress each refresh the board as they finish (best-effort; never fails a command). Every image is a content-addressed copy in .himi/history/, never a live path into .himi/shots/. Local only, no secrets: it never reads a preview token, handover code or control token. --no-open prints the path instead (SSH, CI). `himi studio reel` writes the MAKING-OF: one self-contained HTML file (every image inlined, nothing fetched) with a flipbook of the home screen version by version, captioned by the postcard in effect at the time, the final screens, and every postcard \u2014 sized to stay attachable, thinning frames first. Defaults to .himi/making-of.html (never archived by push); --out to put it elsewhere.", required: "[--content <dir>] [--no-open] | reel [--out <file>] [--no-open]" },
   { name: "render", summary: "headless-render a screen with the web renderer: render-tree + diagnostics, optional --png <file>, --scheme dark, --tree. Local by default (content dir). Pass --remote --app --release to hit GET /v1/preview/\u2026/render on the serve plane after a push. Boots the worker so $service bindings resolve; --static raw bindings; --live real Wix fetches; --state injects worker state; --input supplies pre-boot navigation params; --width/--device for PNG viewport; --rtl for dir=rtl + $env:isRTL.", required: "<screenId> [--content <dir>] [--scheme dark] [--png <file>] [--tree] [--static] [--live] [--state <json|file>] [--input <json|file>] [--width <px> | --device <name>] [--rtl] [--remote --app --release]" },
   { name: "cms", summary: "inspect, provision, and seed the app's CMS (Wix Data) collections, declared as a `cms` block in config.ts. `query` is READ-ONLY \u2014 by default it fetches ONLY the physical ids `config.ts` declares (item counts + schema drift) and reports `siteScanned: false`; it never lists the site, so an UNDECLARED `himi_<app>_` collection this app owns is not reached without `--all`. `--all` SCANS the site \u2014 every collection it lists is labeled `owned`/`adopted`/`foreign`, and it describes every foreign one \u2014 id, non-system field keys + types, and the site's read role \u2014 so an app with no `cms` block at all can DISCOVER a collection to adopt (`--all` is the one case where a missing `cms` block is not 'nothing to do'). Foreign collections are described up to a cap and are never item-counted (`itemCount: null`), because a row count is one query each; `foreign.count` is how many the scan LISTED \u2014 it follows the list endpoint's pages, and `listingIncomplete: true` says when the walk stopped short of the end, with `unlistedCollections` counting what it left out when Wix gave a paging total \u2014 and `foreign.truncated` says how many of those went undescribed, each still NAMED in `foreign.others` (id + displayName), so a collection the site already has is never hidden behind the cap. The scan is OWNER-scoped \u2014 it needs --site <msid> (or WIX_SITE_ID) plus owner auth via `wix token`; a visitor token can read a public collection's ITEMS but can never enumerate collections, so there is no tokenless discovery path. `create` reconciles declared collections additively and idempotently, and REFUSES any id outside the app's `himi_<app>_` namespace, so it is safe against a production site. It reports declared-vs-site `permissionDrift` but never writes permissions unless asked with --apply-permissions, so a field reconcile can't silently revert access control changed in the dashboard. `seed` inserts the git-tracked `seed:` rows into EMPTY owned collections (--force to add to a non-empty one; --ai writes placeholder rows plus a refinement prompt for you to review). Adopted collections (declared by `wixId`) are read-only and never created, updated, or seeded. Site from --site <msid> or WIX_SITE_ID; owner auth via `wix token`.", required: "query|create|seed [--site <msid>] [--content <dir>] [--all] [--dry-run] [--force] [--allow-destructive] [--apply-permissions] [--only <id>] [--ai] [--count <n>]" },
   { name: "data", summary: "read-only plan or explicitly provision/seed declared KV and Wix Data resources. Preview and production are separate scopes. KV administration uses the operator data plane from --data-url/HIMI_DATA_ADMIN_URL and HIMI_DATA_ADMIN_TOKEN; draft push never calls it.", required: "plan|create|seed [--site <msid>] [--environment preview|production] [--content <dir>] [--data-url <url>] [--dry-run] [--force]" },
@@ -62815,7 +63364,7 @@ var COMMANDS = [
 ];
 function cliVersion() {
   try {
-    return JSON.parse(readFileSync71(new URL("../package.json", import.meta.url), "utf8")).version ?? "unknown";
+    return JSON.parse(readFileSync72(new URL("../package.json", import.meta.url), "utf8")).version ?? "unknown";
   } catch {
     return "unknown";
   }
@@ -62933,7 +63482,7 @@ function ageInDays(publishedAt, now = Date.now()) {
 }
 function packageVersion(path2) {
   try {
-    const version2 = JSON.parse(readFileSync71(path2, "utf8")).version;
+    const version2 = JSON.parse(readFileSync72(path2, "utf8")).version;
     return typeof version2 === "string" && version2 ? version2 : void 0;
   } catch {
     return void 0;
@@ -62942,7 +63491,7 @@ function packageVersion(path2) {
 function resolvedSdkVersion(fromDir = process.cwd(), bundledManifest = new URL("./authoring-runtime/node_modules/@wix/himalaya/package.json", import.meta.url)) {
   let dir = resolve47(fromDir);
   for (; ; ) {
-    const version2 = packageVersion(join56(dir, "node_modules", "@wix", "himalaya", "package.json"));
+    const version2 = packageVersion(join57(dir, "node_modules", "@wix", "himalaya", "package.json"));
     if (version2) return { version: version2, source: "local" };
     const parent = dirname32(dir);
     if (parent === dir) break;
@@ -62952,7 +63501,7 @@ function resolvedSdkVersion(fromDir = process.cwd(), bundledManifest = new URL("
   if (bundled) return { version: bundled, source: "bundled" };
   try {
     const root = execFileSync7("npm", ["root", "-g"], { stdio: ["ignore", "pipe", "ignore"] }).toString().trim();
-    const version2 = root ? packageVersion(join56(root, "@wix", "himalaya", "package.json")) : void 0;
+    const version2 = root ? packageVersion(join57(root, "@wix", "himalaya", "package.json")) : void 0;
     return version2 ? { version: version2, source: "global" } : {};
   } catch {
     return {};
@@ -62999,11 +63548,11 @@ var UPDATE_RETRY_AFTER_FAILURE_MS = 60 * 60 * 1e3;
 var UPDATE_SNOOZE_MS = 24 * 60 * 60 * 1e3;
 var UPDATE_REEXEC_ENV = "HIMI_UPDATED_ONCE";
 function updateCachePath(env = process.env) {
-  return env.HIMI_UPDATE_CACHE_FILE ?? join56(homedir7(), ".himalaya", "update-check.json");
+  return env.HIMI_UPDATE_CACHE_FILE ?? join57(homedir7(), ".himalaya", "update-check.json");
 }
 function readUpdateCache(path2) {
   try {
-    const parsed = JSON.parse(readFileSync71(path2, "utf8"));
+    const parsed = JSON.parse(readFileSync72(path2, "utf8"));
     return parsed && typeof parsed === "object" ? parsed : {};
   } catch {
     return {};
@@ -63071,11 +63620,11 @@ function createUpdateRunner(spawn7 = spawnSync5) {
     },
     installedVersion: () => {
       const root = globalNodeModulesRoot();
-      return root ? packageVersion(join56(root, "@wix", "himalaya-cli", "package.json")) : void 0;
+      return root ? packageVersion(join57(root, "@wix", "himalaya-cli", "package.json")) : void 0;
     },
     reexec: (argv) => {
       const root = globalNodeModulesRoot();
-      const entry = root ? join56(root, "@wix", "himalaya-cli", "dist", "cli.mjs") : void 0;
+      const entry = root ? join57(root, "@wix", "himalaya-cli", "dist", "cli.mjs") : void 0;
       if (!entry || !existsSync60(entry)) return void 0;
       const result = spawnSync5(process.execPath, [entry, ...argv], {
         // inherit keeps PIPED STDIN working — commands that read stdin must survive a re-exec.
@@ -63123,7 +63672,7 @@ function staleUpdateLockFile(cachePath, now) {
   for (const path2 of [`${cachePath}.lock.break`, `${cachePath}.lock`]) {
     let content;
     try {
-      content = readFileSync71(path2, "utf8");
+      content = readFileSync72(path2, "utf8");
     } catch {
       continue;
     }
@@ -63146,7 +63695,7 @@ function acquireUpdateLock(cachePath, now, hooks = {}) {
   const mine = lockStamp(now);
   const readLock = (path2) => {
     try {
-      return readFileSync71(path2, "utf8");
+      return readFileSync72(path2, "utf8");
     } catch {
       return void 0;
     }
@@ -63684,7 +64233,7 @@ function executableOnPath(name, env = process.env) {
   const suffixes = process.platform === "win32" ? (env.PATHEXT ?? ".COM;.EXE;.BAT;.CMD").split(";").filter(Boolean) : [""];
   for (const dir of entries) {
     for (const suffix of suffixes) {
-      const candidate = join56(dir, `${name}${suffix}`);
+      const candidate = join57(dir, `${name}${suffix}`);
       try {
         if (!statSync17(candidate).isFile()) continue;
         if (process.platform !== "win32") accessSync(candidate, constants2.X_OK);
@@ -63793,7 +64342,7 @@ async function nativeConfigAdvisories(app, configSource) {
     const { iosProjectYml: iosProjectYml2 } = await Promise.resolve().then(() => (init_paths(), paths_exports));
     const { androidOptedIn: androidOptedIn3, LABEL_IOS_SPLASH: LABEL_IOS_SPLASH2 } = await Promise.resolve().then(() => (init_splash(), splash_exports));
     const iosYmlPath = iosProjectYml2(app);
-    const iosYml = existsSync60(iosYmlPath) ? readFileSync71(iosYmlPath, "utf8") : "";
+    const iosYml = existsSync60(iosYmlPath) ? readFileSync72(iosYmlPath, "utf8") : "";
     let optedIn = iosYml.includes(LABEL_IOS_SPLASH2);
     if (!optedIn) {
       const { androidManifestPath: androidManifestPath3 } = await Promise.resolve().then(() => (init_gen_native_config(), gen_native_config_exports));
@@ -63807,7 +64356,7 @@ async function nativeConfigAdvisories(app, configSource) {
 }
 function readConfigSource(dir) {
   try {
-    return readFileSync71(join56(dir, "config.ts"), "utf8");
+    return readFileSync72(join57(dir, "config.ts"), "utf8");
   } catch {
     return null;
   }
@@ -63819,7 +64368,7 @@ function writePngFile(path2, base64) {
 }
 async function initFromRemoteTemplate(name, parentDir, template, c) {
   const dir = resolve47(parentDir, name);
-  if (existsSync60(join56(dir, "himalaya.content.json"))) {
+  if (existsSync60(join57(dir, "himalaya.content.json"))) {
     throw new Error(`content package already exists at ${dir}`);
   }
   const r = await c.fetchTemplateSource(TEMPLATE_APP_PREFIX + template);
@@ -63831,7 +64380,7 @@ async function initFromRemoteTemplate(name, parentDir, template, c) {
   return finishScaffold(materializeSource(archive.files, name, dir), template);
 }
 function contentDir(flags) {
-  return resolve47(str5(flags.content) ?? process.cwd());
+  return resolve47(str6(flags.content) ?? process.cwd());
 }
 function renameRestoredSource(restored, declaredApp, renamed) {
   const text5 = {};
@@ -63849,7 +64398,7 @@ function renameRestoredSource(restored, declaredApp, renamed) {
 function symlinkDestinationIssue(dest) {
   let kind;
   try {
-    kind = lstatSync8(dest);
+    kind = lstatSync9(dest);
   } catch {
     return null;
   }
@@ -63877,7 +64426,7 @@ function restoreDestinationIssue(dest, force) {
 function isHimalayaMonorepoCheckout(start) {
   let dir = resolve47(start);
   for (; ; ) {
-    if (existsSync60(join56(dir, "tools", "himi-cli", "src", "cli.ts")) && existsSync60(join56(dir, "core", "serve", "src", "server.ts"))) return true;
+    if (existsSync60(join57(dir, "tools", "himi-cli", "src", "cli.ts")) && existsSync60(join57(dir, "core", "serve", "src", "server.ts"))) return true;
     const parent = dirname32(dir);
     if (parent === dir) return false;
     dir = parent;
@@ -63920,7 +64469,7 @@ function materializeForPreview(appDir2, slug, displayName) {
     Object.entries(files).map(([rel, body]) => [rel, rel === "himalaya.content.json" ? substituteIdentity(body, slug) : body])
   );
   const repoRoot2 = resolve47(fileURLToPath24(new URL("../../..", import.meta.url)));
-  const root = join56(repoRoot2, "node_modules", ".cache", "himi-template-preview");
+  const root = join57(repoRoot2, "node_modules", ".cache", "himi-template-preview");
   const stillRunning = (pid) => {
     try {
       process.kill(pid, 0);
@@ -63934,12 +64483,12 @@ function materializeForPreview(appDir2, slug, displayName) {
       if (!entry.isDirectory()) continue;
       const pid = Number(entry.name.startsWith(`${slug}-`) ? entry.name.slice(slug.length + 1) : NaN);
       if (Number.isInteger(pid) && pid > 0 && pid !== process.pid && !stillRunning(pid)) {
-        rmSync13(join56(root, entry.name), { recursive: true, force: true });
+        rmSync13(join57(root, entry.name), { recursive: true, force: true });
       }
     }
   } catch {
   }
-  const dest = join56(root, `${slug}-${process.pid}`);
+  const dest = join57(root, `${slug}-${process.pid}`);
   rmSync13(dest, { recursive: true, force: true });
   mkdirSync30(dest, { recursive: true });
   materializeSource(forBuild, displayName, dest, slug);
@@ -63947,17 +64496,17 @@ function materializeForPreview(appDir2, slug, displayName) {
 }
 async function appId(dir) {
   try {
-    const { readFileSync: readFileSync72 } = await import("node:fs");
-    const m = JSON.parse(readFileSync72(join56(dir, "himalaya.content.json"), "utf8"));
+    const { readFileSync: readFileSync73 } = await import("node:fs");
+    const m = JSON.parse(readFileSync73(join57(dir, "himalaya.content.json"), "utf8"));
     if (m.name) return m.name;
   } catch {
   }
-  return basename13(dir);
+  return basename14(dir);
 }
 async function contentVisibility(dir) {
   try {
-    const { readFileSync: readFileSync72 } = await import("node:fs");
-    const m = JSON.parse(readFileSync72(join56(dir, "himalaya.content.json"), "utf8"));
+    const { readFileSync: readFileSync73 } = await import("node:fs");
+    const m = JSON.parse(readFileSync73(join57(dir, "himalaya.content.json"), "utf8"));
     if (m.visibility === "public" || m.visibility === "unlisted") return m.visibility;
   } catch {
   }
@@ -63965,7 +64514,7 @@ async function contentVisibility(dir) {
 }
 function visibilityFlag(flags, io) {
   if (flags.visibility === void 0) return {};
-  const v = str5(flags.visibility);
+  const v = str6(flags.visibility);
   if (v !== "public" && v !== "unlisted") {
     io.error(JSON.stringify({ error: `--visibility must be public or unlisted (got "${v ?? ""}")` }));
     return null;
@@ -64159,7 +64708,7 @@ Seed your coding agent with \`himi agent-init\`. Guides: ${idx.portalUrl}`);
       return 0;
     }
     case "agent-init": {
-      const dir = resolve47(str5(flags.dir) ?? process.cwd());
+      const dir = resolve47(str6(flags.dir) ?? process.cwd());
       const res = writeAgentContext(dir);
       print({ ok: true, dir: res.dir, files: res.files, portalUrl: idx.portalUrl });
       return 0;
@@ -64181,7 +64730,7 @@ async function recordedReleaseForContentQuietly(dir, resolution, onDrift) {
   try {
     const { buildContentForValidation: buildContentForValidation2, buildReleaseFromContent: buildReleaseFromContent2, bundleOutDir: bundleOutDir2 } = await loadAuthoring();
     const bres = await buildContentForValidation2(dir, { resolution });
-    out = mkdtempSync4(join56(tmpdir5(), "himi-ux-record-"));
+    out = mkdtempSync4(join57(tmpdir5(), "himi-ux-record-"));
     const hasWorkers = bres.built.length > 0 || bres.compileErrors.length > 0;
     const outcome = await buildReleaseFromContent2(dir, out, { ...hasWorkers ? { tier5Dir: bundleOutDir2(dir) } : {}, collect: { lint: true } });
     const releaseId = outcome.manifest.releaseId;
@@ -64359,7 +64908,7 @@ async function producedWidgetFamilies(dir) {
     let js;
     for (const candidate of [`${name}.bundle.js`, `${name}.js`, name]) {
       try {
-        js = readFileSync71(join56(outDir, candidate), "utf8");
+        js = readFileSync72(join57(outDir, candidate), "utf8");
         break;
       } catch {
       }
@@ -64390,7 +64939,7 @@ async function producedWidgetFamilies(dir) {
   }
   return { families, source: "dist/bundles" };
 }
-var boardOpen = (dir) => existsSync60(join56(dir, ".himi", "studio", "index.html"));
+var boardOpen = (dir) => existsSync60(join57(dir, ".himi", "studio", "index.html"));
 var BOARD_REFRESHERS = /* @__PURE__ */ new Set(["render", "test", "validate", "build", "push", "icon", "site", "ux", "progress"]);
 async function leaveForBoard(dir, record2, value) {
   if (!boardOpen(dir)) return;
@@ -64445,20 +64994,20 @@ himi v${cliVersion()} \u2014 run \`himi --version\`. If authoring commands fail
     if (update) updateNotice = update;
   }
   const contextualDefaultTarget = defaultTargetForCommand(command, contentDir(flags));
-  const targetName = () => resolveTargetName({ target: str5(flags.target), defaultTarget: contextualDefaultTarget });
+  const targetName = () => resolveTargetName({ target: str6(flags.target), defaultTarget: contextualDefaultTarget });
   const client2 = () => new ServeCliClient(
     resolveTarget({
-      target: str5(flags.target),
+      target: str6(flags.target),
       defaultTarget: contextualDefaultTarget,
-      serveUrl: str5(flags["serve-url"]),
-      telemetryUrl: str5(flags["telemetry-url"]),
-      controlUrl: str5(flags["control-url"]),
-      telemetryToken: str5(flags["telemetry-token"]),
-      controlToken: str5(flags["control-token"])
+      serveUrl: str6(flags["serve-url"]),
+      telemetryUrl: str6(flags["telemetry-url"]),
+      controlUrl: str6(flags["control-url"]),
+      telemetryToken: str6(flags["telemetry-token"]),
+      controlToken: str6(flags["control-token"])
     })
   );
-  const serveBase = () => resolveTarget({ target: str5(flags.target), defaultTarget: contextualDefaultTarget, serveUrl: str5(flags["serve-url"]) }).serve;
-  const controlBase = () => resolveTarget({ target: str5(flags.target), defaultTarget: contextualDefaultTarget, controlUrl: str5(flags["control-url"]) }).control ?? "";
+  const serveBase = () => resolveTarget({ target: str6(flags.target), defaultTarget: contextualDefaultTarget, serveUrl: str6(flags["serve-url"]) }).serve;
+  const controlBase = () => resolveTarget({ target: str6(flags.target), defaultTarget: contextualDefaultTarget, controlUrl: str6(flags["control-url"]) }).control ?? "";
   const foreignPlaneRefusal = async () => {
     const base = serveBase();
     if (!isLoopbackBase(base)) return null;
@@ -64656,8 +65205,8 @@ himi v${cliVersion()} \u2014 run \`himi --version\`. If authoring commands fail
           io.error(JSON.stringify({ ok: false, error: flagError }));
           return 2;
         }
-        const template = str5(flags.template);
-        const parentDir = resolve47(str5(flags.dir) ?? process.cwd());
+        const template = str6(flags.template);
+        const parentDir = resolve47(str6(flags.dir) ?? process.cwd());
         if (template && flags.remote === true) {
           try {
             const res2 = await initFromRemoteTemplate(name, parentDir, template, client2());
@@ -64774,11 +65323,11 @@ himi v${cliVersion()} \u2014 run \`himi --version\`. If authoring commands fail
           return outcome.code;
         }
         if (sub === "publish") {
-          const appDir2 = resolve47(str5(flags.dir) ?? process.cwd());
-          const sourceDir = resolve47(str5(flags["source-dir"]) ?? appDir2);
+          const appDir2 = resolve47(str6(flags.dir) ?? process.cwd());
+          const sourceDir = resolve47(str6(flags["source-dir"]) ?? appDir2);
           let meta;
           try {
-            meta = JSON.parse(readFileSync71(join56(sourceDir, TEMPLATE_META_FILE), "utf8"));
+            meta = JSON.parse(readFileSync72(join57(sourceDir, TEMPLATE_META_FILE), "utf8"));
           } catch {
             io.error(JSON.stringify({ error: `no ${TEMPLATE_META_FILE} in ${sourceDir} \u2014 a template must declare { title, description, tags } to be published`, hint: `add ${TEMPLATE_META_FILE} next to himalaya.content.json (or pass --source-dir <dir>)` }));
             return 2;
@@ -64788,11 +65337,11 @@ himi v${cliVersion()} \u2014 run \`himi --version\`. If authoring commands fail
             return 2;
           }
           try {
-            const appearance = extractTemplateAppearance(JSON.parse(readFileSync71(join56(sourceDir, "tokens.json"), "utf8")));
+            const appearance = extractTemplateAppearance(JSON.parse(readFileSync72(join57(sourceDir, "tokens.json"), "utf8")));
             meta = { ...appearance, ...meta };
           } catch {
           }
-          const name = str5(flags.name) ?? await appId(sourceDir);
+          const name = str6(flags.name) ?? await appId(sourceDir);
           const templateAppId = TEMPLATE_APP_PREFIX + name;
           const buildDir = materializeForPreview(appDir2, name, meta.title);
           const app = await appId(buildDir);
@@ -64800,7 +65349,7 @@ himi v${cliVersion()} \u2014 run \`himi --version\`. If authoring commands fail
           const force = flags.force === true;
           const { buildContentForValidation: buildContentForValidation2, buildReleaseFromContent: buildReleaseFromContent2, bundleOutDir: bundleOutDir2 } = await loadAuthoring();
           const bres = await buildContentForValidation2(buildDir, { resolution: resolutionFlag(flags) });
-          const out = mkdtempSync4(join56(tmpdir5(), "himi-template-"));
+          const out = mkdtempSync4(join57(tmpdir5(), "himi-template-"));
           const hasWorkers = bres.built.length > 0 || bres.compileErrors.length > 0;
           const outcome = await buildReleaseFromContent2(buildDir, out, {
             ...hasWorkers ? { tier5Dir: bundleOutDir2(buildDir) } : {},
@@ -64849,13 +65398,13 @@ himi v${cliVersion()} \u2014 run \`himi --version\`. If authoring commands fail
             }));
             return 1;
           }
-          const iconPath = str5(flags.icon) ? resolve47(str5(flags.icon)) : templateIconPath(name);
+          const iconPath = str6(flags.icon) ? resolve47(str6(flags.icon)) : templateIconPath(name);
           let iconHash;
           if (iconPath) {
             try {
-              const bytes2 = readFileSync71(iconPath);
+              const bytes2 = readFileSync72(iconPath);
               payload.icon = bytes2.toString("base64");
-              iconHash = createHash26("sha256").update(bytes2).digest("hex");
+              iconHash = createHash27("sha256").update(bytes2).digest("hex");
             } catch {
             }
           }
@@ -64904,8 +65453,8 @@ himi v${cliVersion()} \u2014 run \`himi --version\`. If authoring commands fail
           const tplVis = visibilityFlag(flags, io);
           if (!tplVis) return 2;
           const publishMeta = {
-            ...str5(flags.label) ? { label: str5(flags.label) } : {},
-            ...str5(flags.notes) ? { notes: str5(flags.notes) } : {},
+            ...str6(flags.label) ? { label: str6(flags.label) } : {},
+            ...str6(flags.notes) ? { notes: str6(flags.notes) } : {},
             ...tplVis.value ? { visibility: tplVis.value } : {}
           };
           let sendPayload = payload;
@@ -65005,7 +65554,7 @@ himi v${cliVersion()} \u2014 run \`himi --version\`. If authoring commands fail
             return 1;
           }
           const releaseId = r.json?.releaseId ?? payload.manifest.releaseId;
-          const targetFlag = str5(flags.target) ? ` --target ${str5(flags.target)}` : "";
+          const targetFlag = str6(flags.target) ? ` --target ${str6(flags.target)}` : "";
           print({
             ok: true,
             template: name,
@@ -65086,7 +65635,7 @@ himi v${cliVersion()} \u2014 run \`himi --version\`. If authoring commands fail
         const { navIssues: navIssues2 } = await Promise.resolve().then(() => (init_nav_lint(), nav_lint_exports));
         const { buildContentForValidation: buildContentForValidation2, buildReleaseFromContent: buildReleaseFromContent2, bundleOutDir: bundleOutDir2 } = await loadAuthoring();
         const bres = await buildContentForValidation2(dir, { resolution: resolutionFlag(flags) });
-        const out = mkdtempSync4(join56(tmpdir5(), "himi-validate-"));
+        const out = mkdtempSync4(join57(tmpdir5(), "himi-validate-"));
         const hasWorkers = bres.built.length > 0 || bres.compileErrors.length > 0;
         const outcome = await buildReleaseFromContent2(dir, out, {
           ...hasWorkers ? { tier5Dir: bundleOutDir2(dir) } : {},
@@ -65124,12 +65673,12 @@ himi v${cliVersion()} \u2014 run \`himi --version\`. If authoring commands fail
       }
       case "functions": {
         const { buildLocalFunctions: buildLocalFunctions2, describeFunction: describeFunction2, invokeLocalFunction: invokeLocalFunction2, invokeRemoteFunction: invokeRemoteFunction2, listFunctions: listFunctions2, loadFunctionsApp: loadFunctionsApp2, openApiForFunctions: openApiForFunctions2, resolveFunctionsTarget: resolveFunctionsTarget2, runRemoteFunctionOperation: runRemoteFunctionOperation2 } = await Promise.resolve().then(() => (init_functions(), functions_exports));
-        const remoteTarget = str5(flags.target);
+        const remoteTarget = str6(flags.target);
         const boCookie = () => {
           const path2 = dpxSessionTokenPath();
           let raw;
           try {
-            raw = readFileSync71(path2, "utf8");
+            raw = readFileSync72(path2, "utf8");
           } catch {
             throw new Error(`no DPX BO session at ${path2}; run dpx auth login, write dpx auth token to that path, then himi login --dpx --target bo`);
           }
@@ -65147,14 +65696,14 @@ himi v${cliVersion()} \u2014 run \`himi --version\`. If authoring commands fail
             io.error(JSON.stringify({ error: `functions ${sub} needs ${allowed2.join(" | ")}` }));
             return 2;
           }
-          const app = str5(flags.app);
+          const app = str6(flags.app);
           const id = pos[3];
           if (!app || !["list", "dlq"].includes(action) && !id) {
             io.error(JSON.stringify({ error: `functions ${sub} ${action} needs --app${["list", "dlq"].includes(action) ? "" : " and an id/name"}` }));
             return 2;
           }
-          const target2 = resolveFunctionsTarget2({ target: remoteTarget, functionsUrl: str5(flags["functions-url"]), releaseId: str5(flags.release), requireRemote: true });
-          const result = await runRemoteFunctionOperation2({ baseUrl: target2.mode === "remote" ? target2.baseUrl : "", app, environment: str5(flags.environment) === "preview" ? "preview" : "production", resource: sub === "jobs" ? "jobs" : "schedules", action, id, releaseId: str5(flags.release), boCookie: boCookie(), previewToken: str5(flags["preview-token"]) });
+          const target2 = resolveFunctionsTarget2({ target: remoteTarget, functionsUrl: str6(flags["functions-url"]), releaseId: str6(flags.release), requireRemote: true });
+          const result = await runRemoteFunctionOperation2({ baseUrl: target2.mode === "remote" ? target2.baseUrl : "", app, environment: str6(flags.environment) === "preview" ? "preview" : "production", resource: sub === "jobs" ? "jobs" : "schedules", action, id, releaseId: str6(flags.release), boCookie: boCookie(), previewToken: str6(flags["preview-token"]) });
           print({ ...result.body, ok: result.ok, status: result.status });
           return result.ok ? 0 : 1;
         }
@@ -65190,7 +65739,7 @@ himi v${cliVersion()} \u2014 run \`himi --version\`. If authoring commands fail
         }
         let input = { name: "Himi", value: "echo", ok: true };
         if (flags.body !== void 0) {
-          const raw = str5(flags.body);
+          const raw = str6(flags.body);
           if (!raw) {
             io.error(JSON.stringify({ error: "--body must be non-empty JSON" }));
             return 2;
@@ -65204,7 +65753,7 @@ himi v${cliVersion()} \u2014 run \`himi --version\`. If authoring commands fail
         }
         let params = {};
         if (flags.params !== void 0) {
-          const raw = str5(flags.params);
+          const raw = str6(flags.params);
           try {
             const parsed = JSON.parse(raw ?? "");
             if (!parsed || typeof parsed !== "object" || Array.isArray(parsed) || Object.values(parsed).some((value) => typeof value !== "string")) throw new Error("must be a JSON object of string values");
@@ -65214,16 +65763,16 @@ himi v${cliVersion()} \u2014 run \`himi --version\`. If authoring commands fail
             return 2;
           }
         }
-        const remoteRelease = str5(flags.release);
-        const target = resolveFunctionsTarget2({ target: remoteTarget, functionsUrl: str5(flags["functions-url"]), releaseId: remoteRelease });
+        const remoteRelease = str6(flags.release);
+        const target = resolveFunctionsTarget2({ target: remoteTarget, functionsUrl: str6(flags["functions-url"]), releaseId: remoteRelease });
         if (target.mode === "remote") {
           const definition = loaded.definitions.find((item) => item.name === name);
           if (!definition) {
             io.error(JSON.stringify({ error: `unknown function "${name}"` }));
             return 1;
           }
-          const app = str5(flags.app) ?? loaded.app;
-          const invoked2 = await invokeRemoteFunction2({ baseUrl: target.baseUrl, app, definition, body: input, params, releaseId: remoteRelease, previewToken: str5(flags["preview-token"]), boCookie: boCookie() });
+          const app = str6(flags.app) ?? loaded.app;
+          const invoked2 = await invokeRemoteFunction2({ baseUrl: target.baseUrl, app, definition, body: input, params, releaseId: remoteRelease, previewToken: str6(flags["preview-token"]), boCookie: boCookie() });
           const response = invoked2.response;
           const text6 = await response.text();
           let body2;
@@ -65249,10 +65798,41 @@ himi v${cliVersion()} \u2014 run \`himi --version\`. If authoring commands fail
       case "studio": {
         const { openStudio: openStudio2 } = await Promise.resolve().then(() => (init_studio(), studio_exports));
         const dir = contentDir(flags);
-        if (!existsSync60(join56(dir, "himalaya.content.json"))) {
+        if (!existsSync60(join57(dir, "himalaya.content.json"))) {
           io.error(JSON.stringify({ ok: false, error: "not_a_content_package", dir, hint: "run from the app directory (or pass --content <dir>) \u2014 the board reads that package's .himi/" }));
           return 2;
         }
+        if (pos[1] === "reel") {
+          const { buildReel: buildReel2 } = await Promise.resolve().then(() => (init_studio_reel(), studio_reel_exports));
+          const out = resolve47(str6(flags.out) ?? join57(dir, ".himi", "making-of.html"));
+          const { html, plan } = buildReel2(dir);
+          mkdirSync30(dirname32(out), { recursive: true });
+          writeFileSync28(out, html);
+          const { pathToFileURL: pathToFileURL9 } = await import("node:url");
+          const url2 = pathToFileURL9(out).href;
+          const open2 = flags["no-open"] !== true;
+          if (open2) {
+            const { openUrl: openUrl2 } = await Promise.resolve().then(() => (init_open_url(), open_url_exports));
+            openUrl2(url2);
+          }
+          print({
+            ok: true,
+            file: out,
+            url: url2,
+            opened: open2,
+            bytes: Buffer.byteLength(html),
+            frames: plan.frames.length,
+            screens: plan.stats.screens,
+            postcards: plan.stats.postcards,
+            ...plan.dropped ? { dropped: plan.dropped, note: "pictures were left out to keep the file attachable" } : {},
+            ...plan.frames.length === 0 ? { hint: "no screen versions were recorded \u2014 run `himi studio` before building so the board keeps them" } : {}
+          });
+          return 0;
+        }
+        if (pos[1] !== void 0) {
+          io.error(JSON.stringify({ ok: false, error: "unknown_subcommand", got: pos[1], expected: "himi studio [reel]" }));
+          return 2;
+        }
         const { page, url, view } = openStudio2(dir);
         const open = flags["no-open"] !== true;
         if (open) {
@@ -65274,7 +65854,7 @@ himi v${cliVersion()} \u2014 run \`himi --version\`. If authoring commands fail
         const { appendProgress: appendProgress2, readProgress: readProgress2, summarizeProgress: summarizeProgress2, parseStep: parseStep2, notifyDesktop: notifyDesktop2, appLabel: appLabel2, journalPath: journalPath2, ProgressError: ProgressError2, JOURNEY_STEPS: JOURNEY_STEPS2 } = await Promise.resolve().then(() => (init_progress(), progress_exports));
         const dir = contentDir(flags);
         const journal = journalPath2(dir);
-        const hint = existsSync60(join56(dir, "himalaya.content.json")) ? {} : { hint: "no himalaya.content.json here \u2014 run from the app directory (or pass --content <dir>) so the build board finds this journal" };
+        const hint = existsSync60(join57(dir, "himalaya.content.json")) ? {} : { hint: "no himalaya.content.json here \u2014 run from the app directory (or pass --content <dir>) so the build board finds this journal" };
         const message = pos.slice(1).join(" ").trim();
         if (!message) {
           if (flags.step !== void 0 || flags.image !== void 0 || flags.notify === true) {
@@ -65325,9 +65905,9 @@ himi v${cliVersion()} \u2014 run \`himi --version\`. If authoring commands fail
           io.error(JSON.stringify({ error: "ux needs audit | record" }));
           return 2;
         }
-        const platform = str5(flags.platform);
-        const status = str5(flags.status);
-        const checks = str5(flags.checks)?.split(",").map((item) => item.trim()).filter(Boolean) ?? [];
+        const platform = str6(flags.platform);
+        const status = str6(flags.status);
+        const checks = str6(flags.checks)?.split(",").map((item) => item.trim()).filter(Boolean) ?? [];
         if (!isNativePlatform(platform)) {
           io.error(JSON.stringify({ error: `ux record needs --platform ${NATIVE_PLATFORMS.join("|")}` }));
           return 2;
@@ -65341,7 +65921,7 @@ himi v${cliVersion()} \u2014 run \`himi --version\`. If authoring commands fail
           drifting = workers;
         });
         try {
-          const evidence = recordNativeAudit(dir, platform, status, checks, str5(flags.reason), uxRelease ?? void 0);
+          const evidence = recordNativeAudit(dir, platform, status, checks, str6(flags.reason), uxRelease ?? void 0);
           print({
             ok: true,
             content: dir,
@@ -65366,7 +65946,7 @@ himi v${cliVersion()} \u2014 run \`himi --version\`. If authoring commands fail
       case "test": {
         const dir = contentDir(flags);
         const structuredOutput = flags.json === true || io.isTTY !== true;
-        if (existsSync60(join56(dir, "functions"))) {
+        if (existsSync60(join57(dir, "functions"))) {
           const { invokeLocalFunction: invokeLocalFunction2, loadFunctionsApp: loadFunctionsApp2 } = await Promise.resolve().then(() => (init_functions(), functions_exports));
           const loaded = await loadFunctionsApp2(dir);
           const results = [];
@@ -65391,21 +65971,21 @@ himi v${cliVersion()} \u2014 run \`himi --version\`. If authoring commands fail
         }
         let budgetMs;
         if (flags.budget !== void 0) {
-          budgetMs = Number(str5(flags.budget));
+          budgetMs = Number(str6(flags.budget));
           if (!Number.isFinite(budgetMs) || budgetMs <= 0) {
-            io.error(JSON.stringify({ error: `--budget must be a positive number of ms (got "${str5(flags.budget) ?? ""}")` }));
+            io.error(JSON.stringify({ error: `--budget must be a positive number of ms (got "${str6(flags.budget) ?? ""}")` }));
             return 2;
           }
         }
         let deep;
         if (flags.deep !== void 0) {
-          deep = flags.deep === true ? 3 : Number(str5(flags.deep));
+          deep = flags.deep === true ? 3 : Number(str6(flags.deep));
           if (!Number.isFinite(deep) || deep < 2 || deep > 6) {
             io.error(JSON.stringify({ error: `--deep takes a chain depth between 2 and 6 (got "${String(flags.deep)}") \u2014 bare --deep means 3` }));
             return 2;
           }
         }
-        const netPath = str5(flags.net);
+        const netPath = str6(flags.net);
         if (flags.net !== void 0 && !netPath) {
           io.error(JSON.stringify({ error: "--net was given but empty \u2014 pass a path to a net-mocks JSON file" }));
           return 2;
@@ -65436,7 +66016,7 @@ himi v${cliVersion()} \u2014 run \`himi --version\`. If authoring commands fail
           const { detectAndroidNativeDecode: detectAndroidNativeDecode2, detectNativeDecode: detectNativeDecode2, nativeDecodePlatforms: nativeDecodePlatforms2 } = await Promise.resolve().then(() => (init_native_decode(), native_decode_exports));
           let platforms;
           try {
-            platforms = nativeDecodePlatforms2(flags.native === true ? true : str5(flags.native));
+            platforms = nativeDecodePlatforms2(flags.native === true ? true : str6(flags.native));
           } catch (error) {
             io.error(JSON.stringify({ error: error.message }));
             return 2;
@@ -65453,7 +66033,7 @@ himi v${cliVersion()} \u2014 run \`himi --version\`. If authoring commands fail
           }
         }
         const bres = await buildContentBundles2(dir, { resolution: resolutionFlag(flags) });
-        const out = mkdtempSync4(join56(tmpdir5(), "himi-test-"));
+        const out = mkdtempSync4(join57(tmpdir5(), "himi-test-"));
         const hasWorkers = bres.built.length > 0 || bres.compileErrors.length > 0;
         const outcome = await buildReleaseFromContent2(dir, out, {
           ...hasWorkers ? { tier5Dir: bundleOutDir2(dir) } : {},
@@ -65478,9 +66058,9 @@ himi v${cliVersion()} \u2014 run \`himi --version\`. If authoring commands fail
           }
           let browserTimeoutMs;
           if (flags.timeout !== void 0) {
-            browserTimeoutMs = Number(str5(flags.timeout));
+            browserTimeoutMs = Number(str6(flags.timeout));
             if (!Number.isFinite(browserTimeoutMs) || browserTimeoutMs <= 0) {
-              io.error(JSON.stringify({ error: `--timeout must be a positive number of ms (got "${str5(flags.timeout) ?? ""}")` }));
+              io.error(JSON.stringify({ error: `--timeout must be a positive number of ms (got "${str6(flags.timeout) ?? ""}")` }));
               return 2;
             }
           }
@@ -65498,7 +66078,7 @@ himi v${cliVersion()} \u2014 run \`himi --version\`. If authoring commands fail
             io.error(JSON.stringify({ error: `screen "${screen.screenId}" has no Tier-5 worker, so there is nothing for the browser loop to build` }));
             return 2;
           }
-          const sources = collectWorkerSources2(join56(dir, "tier5-src"), screen.bundleName);
+          const sources = collectWorkerSources2(join57(dir, "tier5-src"), screen.bundleName);
           if (!sources) {
             io.error(JSON.stringify({ error: `no worker source found at tier5-src/${screen.bundleName} \u2014 the browser loop compiles SOURCE, not the built bundle` }));
             return 2;
@@ -65659,7 +66239,7 @@ himi v${cliVersion()} \u2014 run \`himi --version\`. If authoring commands fail
             const sp = await runShotsPass2({
               descriptors: scopeDescriptors2(outcome.descriptors ?? [], pos.slice(1), invalidScreens),
               tokens: outcome.tokens,
-              outDir: join56(dir, ".himi", "shots"),
+              outDir: join57(dir, ".himi", "shots"),
               width: 390,
               layers: { rules: shotRules, ...cmsSeed ? { cmsSeed } : {}, ...canned ? { canned: canned.byKey } : {} },
               ...budgetMs ? { budgetMs } : {},
@@ -65697,7 +66277,7 @@ himi v${cliVersion()} \u2014 run \`himi --version\`. If authoring commands fail
           releaseId: result.releaseId,
           releasePayload: release,
           descriptors: attestedDescriptors,
-          screenshots: Object.fromEntries(writtenShots.filter((name) => crawledScreens.has(name.replace(/\.png$/, ""))).map((name) => [name.replace(/\.png$/, ""), join56(dir, ".himi", "shots", name)])),
+          screenshots: Object.fromEntries(writtenShots.filter((name) => crawledScreens.has(name.replace(/\.png$/, ""))).map((name) => [name.replace(/\.png$/, ""), join57(dir, ".himi", "shots", name)])),
           coverage: {
             screens: crawledScreens.size,
             actionsDispatched: result.actions.exercised,
@@ -65731,15 +66311,15 @@ himi v${cliVersion()} \u2014 run \`himi --version\`. If authoring commands fail
             io.error(JSON.stringify({ error: "render --remote cannot --dump-state: the serve plane has no worker runtime. Render locally to inspect state." }));
             return 2;
           }
-          const app2 = str5(flags.app);
-          const release2 = str5(flags.release);
+          const app2 = str6(flags.app);
+          const release2 = str6(flags.release);
           if (!app2 || !release2) {
             io.error(JSON.stringify({ error: "render --remote needs --app and --release" }));
             return 2;
           }
-          const scheme2 = str5(flags.scheme) === "dark" ? "dark" : "light";
+          const scheme2 = str6(flags.scheme) === "dark" ? "dark" : "light";
           const wantPng2 = flags.png === true || typeof flags.png === "string";
-          const widthRaw = str5(flags.width);
+          const widthRaw = str6(flags.width);
           const width = widthRaw ? Number(widthRaw) : void 0;
           let r2;
           try {
@@ -65770,7 +66350,7 @@ himi v${cliVersion()} \u2014 run \`himi --version\`. If authoring commands fail
         }
         const dir = contentDir(flags);
         const app = await appId(dir);
-        const scheme = str5(flags.scheme) === "dark" ? "dark" : "light";
+        const scheme = str6(flags.scheme) === "dark" ? "dark" : "light";
         const wantPng = flags.png === true || typeof flags.png === "string";
         const hydrate = flags.static !== true;
         const live2 = flags.live === true;
@@ -65781,13 +66361,13 @@ himi v${cliVersion()} \u2014 run \`himi --version\`. If authoring commands fail
         }
         let injectedState;
         if (flags.state !== void 0) {
-          const stateArg = str5(flags.state);
+          const stateArg = str6(flags.state);
           if (!stateArg || !stateArg.trim()) {
             io.error(JSON.stringify({ error: "--state was given but empty \u2014 pass inline JSON `{\u2026}` or a path to a .json file" }));
             return 2;
           }
           try {
-            const raw = stateArg.trim().startsWith("{") ? stateArg : readFileSync71(stateArg.replace(/^@/, ""), "utf8");
+            const raw = stateArg.trim().startsWith("{") ? stateArg : readFileSync72(stateArg.replace(/^@/, ""), "utf8");
             injectedState = JSON.parse(raw);
           } catch (e) {
             io.error(JSON.stringify({ error: `--state must be inline JSON or a path to a .json file \u2014 ${e.message}` }));
@@ -65796,13 +66376,13 @@ himi v${cliVersion()} \u2014 run \`himi --version\`. If authoring commands fail
         }
         let injectedInput;
         if (flags.input !== void 0) {
-          const inputArg = str5(flags.input);
+          const inputArg = str6(flags.input);
           if (!inputArg || !inputArg.trim()) {
             io.error(JSON.stringify({ error: "--input was given but empty \u2014 pass inline JSON `{\u2026}` or a path to a .json file" }));
             return 2;
           }
           try {
-            const raw = inputArg.trim().startsWith("{") ? inputArg : readFileSync71(inputArg.replace(/^@/, ""), "utf8");
+            const raw = inputArg.trim().startsWith("{") ? inputArg : readFileSync72(inputArg.replace(/^@/, ""), "utf8");
             const parsed = JSON.parse(raw);
             if (!parsed || typeof parsed !== "object" || Array.isArray(parsed)) throw new Error("must be a JSON object");
             injectedInput = parsed;
@@ -65812,7 +66392,7 @@ himi v${cliVersion()} \u2014 run \`himi --version\`. If authoring commands fail
           }
         }
         const DEVICE_WIDTHS = renderDeviceWidths();
-        const deviceName = str5(flags.device);
+        const deviceName = str6(flags.device);
         let renderWidth;
         if (deviceName) {
           renderWidth = DEVICE_WIDTHS[deviceName.toLowerCase()];
@@ -65837,7 +66417,7 @@ himi v${cliVersion()} \u2014 run \`himi --version\`. If authoring commands fail
         } else if (typeof flags.width === "string" && flags.width) {
           renderWidth = Math.round(Number(flags.width));
           if (!Number.isFinite(renderWidth) || renderWidth <= 0) {
-            io.error(JSON.stringify({ error: `--width must be a positive number of pixels (got "${str5(flags.width)}")` }));
+            io.error(JSON.stringify({ error: `--width must be a positive number of pixels (got "${str6(flags.width)}")` }));
             return 2;
           }
         }
@@ -65845,13 +66425,13 @@ himi v${cliVersion()} \u2014 run \`himi --version\`. If authoring commands fail
         if (typeof flags["load-budget"] === "string" && flags["load-budget"]) {
           loadBudgetMs = Number(flags["load-budget"]);
           if (!Number.isFinite(loadBudgetMs) || loadBudgetMs <= 0) {
-            io.error(JSON.stringify({ error: `--load-budget must be a positive number of ms (got "${str5(flags["load-budget"])}")` }));
+            io.error(JSON.stringify({ error: `--load-budget must be a positive number of ms (got "${str6(flags["load-budget"])}")` }));
             return 2;
           }
         }
         const { buildContentBundles: buildContentBundles2, buildReleaseFromContent: buildReleaseFromContent2, bundleOutDir: bundleOutDir2 } = await loadAuthoring();
         const bres = await buildContentBundles2(dir, { resolution: resolutionFlag(flags) });
-        const out = mkdtempSync4(join56(tmpdir5(), "himi-render-"));
+        const out = mkdtempSync4(join57(tmpdir5(), "himi-render-"));
         const hasWorkers = bres.built.length > 0 || bres.compileErrors.length > 0;
         const outcome = await buildReleaseFromContent2(dir, out, {
           ...hasWorkers ? { tier5Dir: bundleOutDir2(dir) } : {},
@@ -65865,8 +66445,8 @@ himi v${cliVersion()} \u2014 run \`himi --version\`. If authoring commands fail
         const diagnostics = (outcome.lint ?? []).find((s) => s.screenId === screenId)?.issues ?? [];
         let pngFile;
         let attestationPngFile;
-        const shotPath = join56(dir, ".himi", "shots", `${screenId}.png`);
-        const pngTarget = typeof flags.png === "string" ? str5(flags.png) : flags.png === true ? shotPath : void 0;
+        const shotPath = join57(dir, ".himi", "shots", `${screenId}.png`);
+        const pngTarget = typeof flags.png === "string" ? str6(flags.png) : flags.png === true ? shotPath : void 0;
         if (pngTarget && r.pngBase64) {
           pngFile = writePngFile(pngTarget, r.pngBase64);
           attestationPngFile = resolve47(pngTarget) === resolve47(shotPath) ? pngFile : writePngFile(shotPath, r.pngBase64);
@@ -66047,7 +66627,7 @@ himi v${cliVersion()} \u2014 run \`himi --version\`. If authoring commands fail
           return report2(res.status, { wrote: res.wrote, normalized: res.normalized, playListingIcon: res.playDerived });
         }
         if (sub === "from-site") {
-          const book = str5(flags.book) ?? ".himi/business-book";
+          const book = str6(flags.book) ?? ".himi/business-book";
           const logo = siteBookIcon2(book);
           if (!logo) {
             const absence = siteLogoAbsence2(book);
@@ -66062,7 +66642,7 @@ himi v${cliVersion()} \u2014 run \`himi --version\`. If authoring commands fail
           return report2(res.status, { from: logo, wrote: res.wrote, normalized: res.normalized, playListingIcon: res.playDerived });
         }
         if (sub === "generate") {
-          const res = await generateIcon2(dir, { glyph: str5(flags.glyph), background: str5(flags.accent), derivePlay: true });
+          const res = await generateIcon2(dir, { glyph: str6(flags.glyph), background: str6(flags.accent), derivePlay: true });
           return report2(res.status, { wrote: res.wrote });
         }
         if (sub === "glyphs") {
@@ -66094,8 +66674,8 @@ default (no --glyph): ${DEFAULT_GLYPH2} \u2014 a mark that claims nothing, so th
           return report2.ok ? 0 : 1;
         }
         if (sub === "verify") {
-          const app = str5(flags.app) ?? await appId(dir);
-          const found = await fetchReleaseManifest(client2, app, str5(flags.release));
+          const app = str6(flags.app) ?? await appId(dir);
+          const found = await fetchReleaseManifest(client2, app, str6(flags.release));
           if ("error" in found) {
             io.error(JSON.stringify(found));
             return 1;
@@ -66105,9 +66685,9 @@ default (no --glyph): ${DEFAULT_GLYPH2} \u2014 a mark that claims nothing, so th
           return report2.ok ? 0 : 1;
         }
         if (sub === "add" || sub === "rm") {
-          const app = str5(flags.app) ?? await appId(dir);
+          const app = str6(flags.app) ?? await appId(dir);
           const { contentReleaseId: contentReleaseId2 } = await Promise.resolve().then(() => (init_build3(), build_exports2));
-          const found = await fetchReleaseManifest(client2, app, str5(flags.release));
+          const found = await fetchReleaseManifest(client2, app, str6(flags.release));
           if ("error" in found) {
             io.error(JSON.stringify(found));
             return 1;
@@ -66123,7 +66703,7 @@ default (no --glyph): ${DEFAULT_GLYPH2} \u2014 a mark that claims nothing, so th
               io.error(JSON.stringify({ error: "assets add needs a file: himi assets add <file> [--name <logical/name>]" }));
               return 2;
             }
-            const { payload, record: record2, name: name2 } = addAssetPayload2(manifest, file, { name: str5(flags.name), mintReleaseId: contentReleaseId2 });
+            const { payload, record: record2, name: name2 } = addAssetPayload2(manifest, file, { name: str6(flags.name), mintReleaseId: contentReleaseId2 });
             const r2 = await client2().publishRelease(payload, {}, flags.live !== true);
             if (!r2.ok) {
               print({ ok: false, status: r2.status, body: r2.json ?? r2.text });
@@ -66192,8 +66772,8 @@ default (no --glyph): ${DEFAULT_GLYPH2} \u2014 a mark that claims nothing, so th
           io.error(JSON.stringify({ error: "pull needs an <app>", usage: "himi pull <app> [--release <id>] [--out <dir>] [--name <new>]" }));
           return 2;
         }
-        const renamed = str5(flags.name);
-        const dest = resolve47(str5(flags.out) ?? process.cwd(), renamed ?? wanted);
+        const renamed = str6(flags.name);
+        const dest = resolve47(str6(flags.out) ?? process.cwd(), renamed ?? wanted);
         const replace = flags.replace === true;
         const force = replace || flags.force === true;
         const linked = symlinkDestinationIssue(dest);
@@ -66214,7 +66794,7 @@ default (no --glyph): ${DEFAULT_GLYPH2} \u2014 a mark that claims nothing, so th
             io.error(JSON.stringify({ error: `${dest} already exists and is not empty`, hint: "pass --force to write into it anyway (merging, and naming what it keeps), --replace to restore exactly what was archived, or --out/--name to land somewhere else" }));
             return 1;
           }
-          if (replace && occupied && !existsSync60(join56(dest, "himalaya.content.json"))) {
+          if (replace && occupied && !existsSync60(join57(dest, "himalaya.content.json"))) {
             io.error(JSON.stringify({
               error: `${dest} is not a content package \u2014 refusing to --replace it`,
               hint: "--replace only clears a directory that holds himalaya.content.json. Check --out/--name, or pass --force to merge into it instead."
@@ -66222,7 +66802,7 @@ default (no --glyph): ${DEFAULT_GLYPH2} \u2014 a mark that claims nothing, so th
             return 1;
           }
         }
-        const pulled = await client2().ownerSource(wanted, str5(flags.release));
+        const pulled = await client2().ownerSource(wanted, str6(flags.release));
         if (!pulled.ok) {
           io.error(JSON.stringify({ ok: false, app: wanted, status: pulled.status, ...pulled.json ?? {} }));
           return 1;
@@ -66295,7 +66875,7 @@ default (no --glyph): ${DEFAULT_GLYPH2} \u2014 a mark that claims nothing, so th
         const declared = await appId(dir);
         let onlyRaw;
         if (flags.only !== void 0) {
-          onlyRaw = str5(flags.only);
+          onlyRaw = str6(flags.only);
           if (!onlyRaw) {
             io.error(JSON.stringify({ error: "--only needs a selector", usage: ONLY_USAGE }));
             return 2;
@@ -66317,7 +66897,7 @@ default (no --glyph): ${DEFAULT_GLYPH2} \u2014 a mark that claims nothing, so th
               return 2;
             }
           }
-          if (flags["from-release"] !== void 0 && !str5(flags["from-release"])) {
+          if (flags["from-release"] !== void 0 && !str6(flags["from-release"])) {
             io.error(JSON.stringify({ ok: false, error: "from_release_needs_a_value", message: "--from-release takes a release id to branch from. Omit the flag entirely to patch the live release.", usage: ONLY_USAGE }));
             return 2;
           }
@@ -66327,7 +66907,7 @@ default (no --glyph): ${DEFAULT_GLYPH2} \u2014 a mark that claims nothing, so th
         let ownerIssue;
         let pushToken;
         try {
-          const t = resolveTarget({ target: pushTarget, controlToken: str5(flags["control-token"]) });
+          const t = resolveTarget({ target: pushTarget, controlToken: str6(flags["control-token"]) });
           ownerIssue = t.ownerIssue;
           pushToken = t.controlToken;
         } catch {
@@ -66353,7 +66933,7 @@ default (no --glyph): ${DEFAULT_GLYPH2} \u2014 a mark that claims nothing, so th
         const force = flags.force === true;
         const { buildContentForValidation: buildContentForValidation2, buildReleaseFromContent: buildReleaseFromContent2, bundleOutDir: bundleOutDir2 } = await loadAuthoring();
         const bres = await buildContentForValidation2(dir, { resolution: resolutionFlag(flags) });
-        const out = mkdtempSync4(join56(tmpdir5(), "himi-push-"));
+        const out = mkdtempSync4(join57(tmpdir5(), "himi-push-"));
         const hasWorkers = bres.built.length > 0 || bres.compileErrors.length > 0;
         const outcome = await buildReleaseFromContent2(dir, out, {
           ...hasWorkers ? { tier5Dir: bundleOutDir2(dir) } : {},
@@ -66392,7 +66972,7 @@ default (no --glyph): ${DEFAULT_GLYPH2} \u2014 a mark that claims nothing, so th
             io.error(JSON.stringify(parsed.error, null, 2));
             return 2;
           }
-          const fromRelease = str5(flags["from-release"]);
+          const fromRelease = str6(flags["from-release"]);
           const baseForPlan = await fetchReleaseManifest(client2, app, fromRelease);
           if ("error" in baseForPlan) {
             io.error(JSON.stringify(baseForPlan));
@@ -66441,7 +67021,7 @@ default (no --glyph): ${DEFAULT_GLYPH2} \u2014 a mark that claims nothing, so th
           let localSourceHash;
           try {
             const { collectAppSource: collectAppSource2, zipAppSource: zipAppSource2 } = await Promise.resolve().then(() => (init_app_source(), app_source_exports));
-            localSourceHash = createHash26("sha256").update(zipAppSource2(collectAppSource2(dir).entries).toString("base64")).digest("hex");
+            localSourceHash = createHash27("sha256").update(zipAppSource2(collectAppSource2(dir).entries).toString("base64")).digest("hex");
           } catch {
           }
           return runReleasePatch({
@@ -66460,8 +67040,8 @@ default (no --glyph): ${DEFAULT_GLYPH2} \u2014 a mark that claims nothing, so th
             acceptPartial: flags["accept-partial"] === true,
             force,
             meta: {
-              ...str5(flags.label) ? { label: str5(flags.label) } : {},
-              ...str5(flags.notes) ? { notes: str5(flags.notes) } : {},
+              ...str6(flags.label) ? { label: str6(flags.label) } : {},
+              ...str6(flags.notes) ? { notes: str6(flags.notes) } : {},
               ...hasErrors ? { forcedPastErrors: true } : {}
             },
             ...localSourceHash ? { localSourceHash } : {},
@@ -66581,8 +67161,8 @@ default (no --glyph): ${DEFAULT_GLYPH2} \u2014 a mark that claims nothing, so th
         if (!visArg) return 2;
         const visibility = visArg.value ?? await contentVisibility(dir);
         const meta = {
-          ...str5(flags.label) ? { label: str5(flags.label) } : {},
-          ...str5(flags.notes) ? { notes: str5(flags.notes) } : {},
+          ...str6(flags.label) ? { label: str6(flags.label) } : {},
+          ...str6(flags.notes) ? { notes: str6(flags.notes) } : {},
           ...visibility ? { visibility } : {},
           ...attestation ? { attestation } : {},
           ...forcedPastErrors ? { forcedPastErrors: true } : {}
@@ -66614,7 +67194,7 @@ default (no --glyph): ${DEFAULT_GLYPH2} \u2014 a mark that claims nothing, so th
         let adoptedSlug;
         if (flags["no-claim"] !== true) {
           if (ownerIssue && pushToken && !tokenCoversApp(pushToken, app)) {
-            const claim = await autoClaimSlug({ ownerIssue, controlToken: pushToken, app, accountId: str5(flags["account-id"]) });
+            const claim = await autoClaimSlug({ ownerIssue, controlToken: pushToken, app, accountId: str6(flags["account-id"]) });
             if (claim.fatal) {
               io.error(JSON.stringify({
                 ok: false,
@@ -66791,7 +67371,7 @@ default (no --glyph): ${DEFAULT_GLYPH2} \u2014 a mark that claims nothing, so th
       // goes. `push` hands it to a serve plane, `pack` hands it to a FILE, so an app can
       // be emailed, dropped on a static host, or opened from Files with no serve at all.
       case "pack": {
-        const format = str5(flags.format) ?? "zip";
+        const format = str6(flags.format) ?? "zip";
         if (format !== "zip" && format !== "dir") {
           io.error(JSON.stringify({ error: `unknown --format ${JSON.stringify(format)}`, formats: ["zip", "dir"] }));
           return 2;
@@ -66806,13 +67386,13 @@ default (no --glyph): ${DEFAULT_GLYPH2} \u2014 a mark that claims nothing, so th
           return 2;
         }
         const { packRelease: packRelease2, packReleaseToDir: packReleaseToDir2 } = await Promise.resolve().then(() => (init_pack(), pack_exports));
-        const displayName = str5(flags.name);
+        const displayName = str6(flags.name);
         const launchMode = flags.snapshot === true ? "snapshot" : "live";
         const packOpts = { createdBy: `himi-cli ${cliVersion()}`, launchMode, ...displayName ? { displayName } : {} };
         const writePack = (root, appName, out, source) => format === "dir" ? packReleaseToDir2(root, appName, out, packOpts) : packRelease2(root, appName, out, { ...packOpts, ...source ? { source } : {} });
-        const releaseDir = str5(flags["release-dir"]);
+        const releaseDir = str6(flags["release-dir"]);
         if (releaseDir) {
-          const only = str5(flags.app);
+          const only = str6(flags.app);
           if (!only) {
             io.error(JSON.stringify({ error: "--release-dir needs --app (a release store holds many apps)" }));
             return 2;
@@ -66825,7 +67405,7 @@ default (no --glyph): ${DEFAULT_GLYPH2} \u2014 a mark that claims nothing, so th
             return 2;
           }
           try {
-            const res = writePack(resolve47(releaseDir), only, resolve47(str5(flags.out) ?? process.cwd()));
+            const res = writePack(resolve47(releaseDir), only, resolve47(str6(flags.out) ?? process.cwd()));
             print({
               ok: true,
               app: res.app,
@@ -66874,7 +67454,7 @@ default (no --glyph): ${DEFAULT_GLYPH2} \u2014 a mark that claims nothing, so th
         }
         const { buildContentForValidation: buildContentForValidation2, buildReleaseFromContent: buildReleaseFromContent2, bundleOutDir: bundleOutDir2 } = await loadAuthoring();
         const bres = await buildContentForValidation2(dir, { resolution: resolutionFlag(flags) });
-        const built = mkdtempSync4(join56(tmpdir5(), "himi-pack-"));
+        const built = mkdtempSync4(join57(tmpdir5(), "himi-pack-"));
         const hasWorkers = bres.built.length > 0 || bres.compileErrors.length > 0;
         const outcome = await buildReleaseFromContent2(dir, built, {
           ...hasWorkers ? { tier5Dir: bundleOutDir2(dir) } : {},
@@ -66896,7 +67476,7 @@ default (no --glyph): ${DEFAULT_GLYPH2} \u2014 a mark that claims nothing, so th
           return 1;
         }
         try {
-          const res = writePack(built, app, resolve47(str5(flags.out) ?? dir), sourceArchive);
+          const res = writePack(built, app, resolve47(str6(flags.out) ?? dir), sourceArchive);
           print({
             ok: true,
             app: res.app,
@@ -66964,7 +67544,7 @@ default (no --glyph): ${DEFAULT_GLYPH2} \u2014 a mark that claims nothing, so th
           io.error(JSON.stringify({ ok: false, error: "app_source_not_in_package", detail: `${HIMI_PACKAGE_SOURCE_PATH2} is absent despite the header declaring it` }));
           return 1;
         }
-        const renamed = str5(flags.name);
+        const renamed = str6(flags.name);
         const idsToCheck = renamed ? [["--name", renamed]] : [["package", opened.header.app]];
         for (const [what, value] of idsToCheck) {
           if (!isSafeAppId2(value)) {
@@ -66977,7 +67557,7 @@ default (no --glyph): ${DEFAULT_GLYPH2} \u2014 a mark that claims nothing, so th
             return 1;
           }
         }
-        const dest = resolve47(str5(flags.out) ?? process.cwd(), renamed ?? opened.header.app);
+        const dest = resolve47(str6(flags.out) ?? process.cwd(), renamed ?? opened.header.app);
         const issue2 = restoreDestinationIssue(dest, flags.force === true);
         if (issue2) {
           io.error(JSON.stringify(issue2));
@@ -67041,7 +67621,7 @@ default (no --glyph): ${DEFAULT_GLYPH2} \u2014 a mark that claims nothing, so th
       case "share": {
         const sub = pos[1];
         if (sub === "revoke") {
-          const app = str5(flags.app);
+          const app = str6(flags.app);
           const shareId = pos[2];
           if (!app || !shareId) {
             io.error(JSON.stringify({ error: "himi share revoke needs --app <app> <shareId>" }));
@@ -67055,7 +67635,7 @@ default (no --glyph): ${DEFAULT_GLYPH2} \u2014 a mark that claims nothing, so th
           print({ ok: true, ...result.json });
           return 0;
         }
-        const file = str5(flags.file);
+        const file = str6(flags.file);
         if (!file) {
           io.error(JSON.stringify({ error: "himi share needs --file <package.himi>; create it with `himi pack --out <file>`" }));
           return 2;
@@ -67077,13 +67657,13 @@ default (no --glyph): ${DEFAULT_GLYPH2} \u2014 a mark that claims nothing, so th
             }));
             return 1;
           }
-          const archive = readFileSync71(resolve47(file));
+          const archive = readFileSync72(resolve47(file));
           const result = await client2().createPackageShare({
             app: opened.header.app,
             releaseId: opened.header.releaseId,
             launchMode: opened.header.launchMode ?? "snapshot",
             archiveBase64: archive.toString("base64"),
-            ...str5(flags["expires-at"]) ? { expiresAt: str5(flags["expires-at"]) } : {}
+            ...str6(flags["expires-at"]) ? { expiresAt: str6(flags["expires-at"]) } : {}
           });
           if (!result.ok) {
             print({ ok: false, status: result.status, body: result.json ?? result.text });
@@ -67116,7 +67696,7 @@ default (no --glyph): ${DEFAULT_GLYPH2} \u2014 a mark that claims nothing, so th
             flags.content = watchedDir;
             source = void 0;
           }
-          const conflict = watchFlagConflict2({ source, browser: flags.browser === true, spa: str5(flags.spa) });
+          const conflict = watchFlagConflict2({ source, browser: flags.browser === true, spa: str6(flags.spa) });
           if (conflict) {
             io.error(JSON.stringify({ ok: false, ...conflict }));
             return 2;
@@ -67130,22 +67710,22 @@ default (no --glyph): ${DEFAULT_GLYPH2} \u2014 a mark that claims nothing, so th
             const app = await appId(dir2);
             const { buildContentBundles: buildContentBundles2, buildReleaseFromContent: buildReleaseFromContent2, bundleOutDir: bundleOutDir2 } = await loadAuthoring();
             const bres = await buildContentBundles2(dir2, { resolution: resolutionFlag(flags) });
-            temp = mkdtempSync4(join56(tmpdir5(), "himi-run-build-"));
+            temp = mkdtempSync4(join57(tmpdir5(), "himi-run-build-"));
             const hasWorkers = bres.built.length > 0 || bres.compileErrors.length > 0;
             const initial = await buildReleaseFromContent2(dir2, temp, { ...hasWorkers ? { tier5Dir: bundleOutDir2(dir2) } : {} });
             servedMissing = initial.missingBundles;
-            source = join56(temp, app);
+            source = join57(temp, app);
           }
-          const chromeArg = str5(flags.chrome) ?? "preview";
+          const chromeArg = str6(flags.chrome) ?? "preview";
           if (chromeArg !== "preview" && chromeArg !== "app") {
             io.error(JSON.stringify({ error: `unknown --chrome ${JSON.stringify(chromeArg)}`, values: ["preview", "app"] }));
             return 2;
           }
           let port;
           if (flags.port !== void 0) {
-            port = Number(str5(flags.port));
+            port = Number(str6(flags.port));
             if (!Number.isInteger(port) || port < 0 || port > 65535) {
-              io.error(JSON.stringify({ error: `--port needs a number 0-65535, got ${JSON.stringify(str5(flags.port) ?? "")}` }));
+              io.error(JSON.stringify({ error: `--port needs a number 0-65535, got ${JSON.stringify(str6(flags.port) ?? "")}` }));
               return 2;
             }
           }
@@ -67171,13 +67751,13 @@ default (no --glyph): ${DEFAULT_GLYPH2} \u2014 a mark that claims nothing, so th
           const dir = contentDir(flags);
           const watchKit = watch2 ? await Promise.resolve().then(() => (init_run_watch(), run_watch_exports)) : null;
           const bus = watchKit ? new watchKit.ReloadBus() : void 0;
-          if (watch2) served = mkdtempSync4(join56(tmpdir5(), "himi-run-served-"));
+          if (watch2) served = mkdtempSync4(join57(tmpdir5(), "himi-run-served-"));
           const running = await runPackage2(source, {
             port,
             chrome: chromeArg,
-            screen: str5(flags.screen),
-            surface: str5(flags.surface),
-            spa: str5(flags.spa),
+            screen: str6(flags.screen),
+            surface: str6(flags.surface),
+            spa: str6(flags.spa),
             open: flags["no-open"] !== true,
             ...watchKit && served && bus ? { workDir: served, screenEvents: bus, extraRoutes: (request) => watchKit.boardFile(dir, new URL(request.url).pathname) } : {}
           });
@@ -67197,11 +67777,11 @@ default (no --glyph): ${DEFAULT_GLYPH2} \u2014 a mark that claims nothing, so th
                 if (watchKit.writeRunRecord(dir, { url: running.url, port: running.port, pid: process.pid, startedAt, build: build2 })) recorded = true;
               };
               record2({ ok: true, at: startedAt });
-              if (!recorded) io.error(JSON.stringify({ watch: "run_record_skipped", message: `${join56(dir, ".himi")} is not a real directory, so the build board will not frame this preview.` }));
+              if (!recorded) io.error(JSON.stringify({ watch: "run_record_skipped", message: `${join57(dir, ".himi")} is not a real directory, so the build board will not frame this preview.` }));
               await refreshBoard();
               const { buildContentBundles: buildContentBundles2, buildReleaseFromContent: buildReleaseFromContent2, bundleOutDir: bundleOutDir2 } = await loadAuthoring();
-              const live2 = join56(running.releaseRoot, running.app);
-              const manifestOf = (tree) => JSON.parse(readFileSync71(join56(tree, "release-manifest.json"), "utf8"));
+              const live2 = join57(running.releaseRoot, running.app);
+              const manifestOf = (tree) => JSON.parse(readFileSync72(join57(tree, "release-manifest.json"), "utf8"));
               let current = manifestOf(live2);
               const failed2 = async (message) => {
                 if (stopping) return;
@@ -67212,7 +67792,7 @@ default (no --glyph): ${DEFAULT_GLYPH2} \u2014 a mark that claims nothing, so th
               };
               rebuild = watchKit.serialize(async () => {
                 const t0 = Date.now();
-                const next = mkdtempSync4(join56(tmpdir5(), "himi-run-build-"));
+                const next = mkdtempSync4(join57(tmpdir5(), "himi-run-build-"));
                 try {
                   const bres = await buildContentBundles2(dir, { resolution: resolutionFlag(flags) });
                   if (bres.compileErrors.length) {
@@ -67229,14 +67809,14 @@ default (no --glyph): ${DEFAULT_GLYPH2} \u2014 a mark that claims nothing, so th
                     return;
                   }
                   if (stopping) return;
-                  const fresh = manifestOf(join56(next, running.app));
+                  const fresh = manifestOf(join57(next, running.app));
                   const diff = watchKit.diffReleases(current, fresh);
                   const retired = `${live2}.retired-${Date.now()}`;
                   renameSync6(live2, retired);
                   try {
-                    renameSync6(join56(next, running.app), live2);
+                    renameSync6(join57(next, running.app), live2);
                   } catch {
-                    cpSync3(join56(next, running.app), live2, { recursive: true });
+                    cpSync3(join57(next, running.app), live2, { recursive: true });
                   }
                   rmSync13(retired, { recursive: true, force: true });
                   current = fresh;
@@ -67298,15 +67878,15 @@ default (no --glyph): ${DEFAULT_GLYPH2} \u2014 a mark that claims nothing, so th
         }
       }
       case "preview": {
-        const app = str5(flags.app);
-        const release = str5(flags.release);
+        const app = str6(flags.app);
+        const release = str6(flags.release);
         if (!app || !release) {
           io.error(JSON.stringify({ error: "preview needs --app and --release" }));
           return 2;
         }
         const base = serveBase();
-        const screen = str5(flags.screen);
-        const surface = str5(flags.surface);
+        const screen = str6(flags.screen);
+        const surface = str6(flags.surface);
         if (surface && !surfaceById(surface)) {
           io.error(JSON.stringify({
             error: `unknown --surface "${surface}"`,
@@ -67314,22 +67894,22 @@ default (no --glyph): ${DEFAULT_GLYPH2} \u2014 a mark that claims nothing, so th
           }));
           return 2;
         }
-        let previewToken = str5(flags["preview-token"]);
+        let previewToken = str6(flags["preview-token"]);
         let previewTokenExpiresAt;
         let previewHandover;
         let mintedHere = false;
         let mintFailure;
         if (!previewToken) {
           const target = resolveTarget({
-            target: str5(flags.target),
+            target: str6(flags.target),
             // Same default as `client()` (#2483.1) — without it this resolved a DIFFERENT target
             // than the request that follows, so off-repo the mint was attempted against `local`.
             defaultTarget: contextualDefaultTarget,
-            serveUrl: str5(flags["serve-url"]),
-            telemetryUrl: str5(flags["telemetry-url"]),
-            controlUrl: str5(flags["control-url"]),
-            telemetryToken: str5(flags["telemetry-token"]),
-            controlToken: str5(flags["control-token"])
+            serveUrl: str6(flags["serve-url"]),
+            telemetryUrl: str6(flags["telemetry-url"]),
+            controlUrl: str6(flags["control-url"]),
+            telemetryToken: str6(flags["telemetry-token"]),
+            controlToken: str6(flags["control-token"])
           });
           if (!target.controlToken) {
             mintFailure = `this target has no stored control credential, so none was requested \u2014 run \`himi login --target ${targetName()}\`, or pass --control-token`;
@@ -67390,8 +67970,8 @@ default (no --glyph): ${DEFAULT_GLYPH2} \u2014 a mark that claims nothing, so th
       case "surfaces": {
         const dir = contentDir(flags);
         const platforms = readLocalPlatforms(dir);
-        const app = str5(flags.app);
-        const release = str5(flags.release);
+        const app = str6(flags.app);
+        const release = str6(flags.release);
         const base = serveBase();
         const withLinks = !!(app && release && base);
         const produced = flags["measure-widgets"] === true ? await producedWidgetFamilies(dir) : { families: void 0, source: "not-measured" };
@@ -67443,16 +68023,16 @@ default (no --glyph): ${DEFAULT_GLYPH2} \u2014 a mark that claims nothing, so th
         return 0;
       }
       case "context": {
-        const app = str5(flags.app);
-        const release = str5(flags.release);
+        const app = str6(flags.app);
+        const release = str6(flags.release);
         if (!app || !release) {
           io.error(JSON.stringify({ error: "context needs --app and --release" }));
           return 2;
         }
-        const include = str5(flags.include);
+        const include = str6(flags.include);
         let r;
         try {
-          r = await client2().previewContext(app, release, { screen: str5(flags.screen), include });
+          r = await client2().previewContext(app, release, { screen: str6(flags.screen), include });
         } catch (e) {
           io.error(JSON.stringify({
             error: `cannot reach serve for context: ${e.message}. Pass --target bo.`,
@@ -67467,8 +68047,8 @@ default (no --glyph): ${DEFAULT_GLYPH2} \u2014 a mark that claims nothing, so th
       }
       case "app-docs": {
         const subcommand = pos[1] ?? "list";
-        const app = str5(flags.app);
-        const release = str5(flags.release) ?? str5(flags.releaseId);
+        const app = str6(flags.app);
+        const release = str6(flags.release) ?? str6(flags.releaseId);
         if (!app) {
           io.error(JSON.stringify({ error: "app-docs needs --app" }));
           return 2;
@@ -67496,15 +68076,15 @@ default (no --glyph): ${DEFAULT_GLYPH2} \u2014 a mark that claims nothing, so th
         return 0;
       }
       case "telemetry": {
-        const app = str5(flags.app);
-        const release = str5(flags.release) ?? str5(flags.releaseId);
+        const app = str6(flags.app);
+        const release = str6(flags.release) ?? str6(flags.releaseId);
         if (!app || !release) {
           io.error(JSON.stringify({ error: "telemetry needs --app and --release" }));
           return 2;
         }
         const c = client2();
         const target = targetName();
-        const level = str5(flags.level);
+        const level = str6(flags.level);
         const byLevel = (ls) => level ? ls.filter((l) => l.level === level) : ls;
         const includeEvents = flags["no-events"] !== true;
         const includeLogs = flags["no-logs"] !== true;
@@ -67519,8 +68099,8 @@ default (no --glyph): ${DEFAULT_GLYPH2} \u2014 a mark that claims nothing, so th
           if (includeEvents) {
             const r = await c.telemetryEvents(app, {
               releaseId: release,
-              screenId: str5(flags.screen) ?? str5(flags.screenId),
-              event: str5(flags.type) ?? str5(flags.event),
+              screenId: str6(flags.screen) ?? str6(flags.screenId),
+              event: str6(flags.type) ?? str6(flags.event),
               since: eventSince,
               limit: num2(flags.limit),
               crashesOnly: flags["crashes-only"] === true || flags.crashesOnly === true
@@ -67533,7 +68113,7 @@ default (no --glyph): ${DEFAULT_GLYPH2} \u2014 a mark that claims nothing, so th
           if (includeLogs) {
             const r = await c.telemetryLogs(app, {
               releaseId: release,
-              screenId: str5(flags.screen) ?? str5(flags.screenId),
+              screenId: str6(flags.screen) ?? str6(flags.screenId),
               since: logSince,
               limit: num2(flags.limit)
             });
@@ -67555,7 +68135,7 @@ default (no --glyph): ${DEFAULT_GLYPH2} \u2014 a mark that claims nothing, so th
           }
           const eventCount = out.events?.length ?? 0;
           const logCount = out.logs?.length ?? 0;
-          const narrowed = !!(level || str5(flags.screen) || str5(flags.screenId) || str5(flags.type) || str5(flags.event) || flags["crashes-only"] === true || flags.crashesOnly === true || num2(flags.limit) !== void 0 || eventSince !== void 0 || logSince !== void 0);
+          const narrowed = !!(level || str6(flags.screen) || str6(flags.screenId) || str6(flags.type) || str6(flags.event) || flags["crashes-only"] === true || flags.crashesOnly === true || num2(flags.limit) !== void 0 || eventSince !== void 0 || logSince !== void 0);
           const wholeChannels = includeEvents && includeLogs && !narrowed;
           if (wholeChannels && eventCount === 0 && logCount === 0 && !includeSummary && !includeCrashes) {
             out.note = "no events and no worker console output on this release \u2014 open the web preview or Himi Player link for it, then retry or use --follow";
@@ -67599,8 +68179,8 @@ default (no --glyph): ${DEFAULT_GLYPH2} \u2014 a mark that claims nothing, so th
         }
       }
       case "screens": {
-        const app = str5(flags.app);
-        const release = str5(flags.release);
+        const app = str6(flags.app);
+        const release = str6(flags.release);
         if (!app || !release) {
           io.error(JSON.stringify({ error: "screens needs --app and --release" }));
           return 2;
@@ -67621,8 +68201,8 @@ default (no --glyph): ${DEFAULT_GLYPH2} \u2014 a mark that claims nothing, so th
       }
       case "diagnose": {
         const screenId = pos[1];
-        const app = str5(flags.app);
-        const release = str5(flags.release);
+        const app = str6(flags.app);
+        const release = str6(flags.release);
         if (!screenId || !app || !release) {
           io.error(JSON.stringify({ error: "diagnose needs <screenId> --app --release" }));
           return 2;
@@ -67647,8 +68227,8 @@ default (no --glyph): ${DEFAULT_GLYPH2} \u2014 a mark that claims nothing, so th
         return body.ok === false ? 1 : 0;
       }
       case "deeplinks": {
-        const app = str5(flags.app);
-        const release = str5(flags.release);
+        const app = str6(flags.app);
+        const release = str6(flags.release);
         if (!app || !release) {
           io.error(JSON.stringify({ error: "deeplinks needs --app and --release" }));
           return 2;
@@ -67668,13 +68248,13 @@ default (no --glyph): ${DEFAULT_GLYPH2} \u2014 a mark that claims nothing, so th
         return 0;
       }
       case "logs": {
-        const app = str5(flags.app);
+        const app = str6(flags.app);
         if (!app) {
           io.error(JSON.stringify({ error: "logs needs --app" }));
           return 2;
         }
-        const release = str5(flags.release);
-        const level = str5(flags.level);
+        const release = str6(flags.release);
+        const level = str6(flags.level);
         const byLevel = (ls) => level ? ls.filter((l) => l.level === level) : ls;
         const num3 = (v) => typeof v === "string" && v ? Number(v) : void 0;
         const c = client2();
@@ -67683,7 +68263,7 @@ default (no --glyph): ${DEFAULT_GLYPH2} \u2014 a mark that claims nothing, so th
           try {
             r = await c.telemetryLogs(app, {
               releaseId: release,
-              screenId: str5(flags.screen) ?? str5(flags.screenId),
+              screenId: str6(flags.screen) ?? str6(flags.screenId),
               since: num3(flags.since),
               limit: num3(flags.limit)
             });
@@ -67701,7 +68281,7 @@ default (no --glyph): ${DEFAULT_GLYPH2} \u2014 a mark that claims nothing, so th
           }
           const rawLogs = r.json?.logs ?? [];
           const logs = byLevel(rawLogs);
-          const narrowed = !!(level || str5(flags.screen) || str5(flags.screenId) || num3(flags.since) !== void 0 || num3(flags.limit) !== void 0);
+          const narrowed = !!(level || str6(flags.screen) || str6(flags.screenId) || num3(flags.since) !== void 0 || num3(flags.limit) !== void 0);
           const scope = release ? "this release" : "this app";
           const note = logs.length > 0 ? void 0 : narrowed ? `no worker \`console.*\` lines matched this query${level && rawLogs.length ? ` (${rawLogs.length} line(s) were hidden by --level ${level})` : ""}. Drop --level/--screen/--since/--limit to see the whole console channel for ${scope}; the telemetry EVENT stream is a separate channel, read with \`himi telemetry\`.` : `no worker \`console.*\` output on ${scope}. This is the console channel \u2014 distinct from the telemetry EVENT stream, which \`himi telemetry --app <app> --release <id>\` reads: ${scope} can carry many events and no console lines \u2014 commonly because the worker never logged any, though an empty channel can also mean the lines aged out or never made it through ingestion. Boot-time \`console.log\` is visible via \`himi validate\` / \`himi render\`.`;
           print({ ok: true, logs, ...note ? { note } : {} });
@@ -67711,7 +68291,7 @@ default (no --glyph): ${DEFAULT_GLYPH2} \u2014 a mark that claims nothing, so th
         const deadline = num3(flags.for) !== void 0 ? Date.now() + num3(flags.for) : Infinity;
         let since = num3(flags.since) ?? 0;
         for (; ; ) {
-          const r = await c.telemetryLogs(app, { releaseId: release, screenId: str5(flags.screen) ?? str5(flags.screenId), since });
+          const r = await c.telemetryLogs(app, { releaseId: release, screenId: str6(flags.screen) ?? str6(flags.screenId), since });
           if (r.ok) {
             const logs = r.json?.logs ?? [];
             for (const l of byLevel(logs)) io.log(JSON.stringify(l));
@@ -67722,8 +68302,8 @@ default (no --glyph): ${DEFAULT_GLYPH2} \u2014 a mark that claims nothing, so th
         }
       }
       case "promote": {
-        const app = str5(flags.app);
-        const release = str5(flags.release);
+        const app = str6(flags.app);
+        const release = str6(flags.release);
         if (!app || !release) {
           io.error(JSON.stringify({ error: "promote needs --app and --release" }));
           return 2;
@@ -67731,7 +68311,7 @@ default (no --glyph): ${DEFAULT_GLYPH2} \u2014 a mark that claims nothing, so th
         const target = targetName();
         const force = flags.force === true;
         const ringGiven = flags.ring !== void 0;
-        const ring = str5(flags.ring);
+        const ring = str6(flags.ring);
         if (ringGiven && !ring) {
           io.error(JSON.stringify({ error: "--ring needs a ring name, e.g. --ring ga" }));
           return 2;
@@ -67829,8 +68409,8 @@ default (no --glyph): ${DEFAULT_GLYPH2} \u2014 a mark that claims nothing, so th
           }));
           return 2;
         }
-        const app = str5(flags.app) ?? await appId(contentDir(flags));
-        const file = str5(flags.file);
+        const app = str6(flags.app) ?? await appId(contentDir(flags));
+        const file = str6(flags.file);
         if (!file) {
           io.error(JSON.stringify({ error: `patch ${kind} needs --file`, usage: PATCH_USAGE }));
           return 2;
@@ -67841,7 +68421,7 @@ default (no --glyph): ${DEFAULT_GLYPH2} \u2014 a mark that claims nothing, so th
         }
         const draft = patchBlastRadius(PATCH_USAGE);
         if (draft === null) return 2;
-        const notes = str5(flags.notes);
+        const notes = str6(flags.notes);
         if (!draft && (kind === "screen" || kind === "app-config") && !notes) {
           io.error(JSON.stringify({
             ok: false,
@@ -67852,11 +68432,11 @@ default (no --glyph): ${DEFAULT_GLYPH2} \u2014 a mark that claims nothing, so th
           }));
           return 2;
         }
-        if (flags["from-release"] !== void 0 && !str5(flags["from-release"])) {
+        if (flags["from-release"] !== void 0 && !str6(flags["from-release"])) {
           io.error(JSON.stringify({ ok: false, error: "from_release_needs_a_value", message: "--from-release takes a release id to branch from. Omit the flag entirely to patch the live release.", usage: PATCH_USAGE }));
           return 2;
         }
-        const fromRelease = str5(flags["from-release"]);
+        const fromRelease = str6(flags["from-release"]);
         const baseOrRefuse = (manifest) => {
           if (manifest) return true;
           io.error(JSON.stringify({
@@ -67874,7 +68454,7 @@ default (no --glyph): ${DEFAULT_GLYPH2} \u2014 a mark that claims nothing, so th
         const patchGitSha = defaultGitOps2(contentDir(flags)).shortSha() ?? "dev";
         const meta = {
           gitSha: patchGitSha,
-          ...str5(flags.label) ? { label: str5(flags.label) } : {},
+          ...str6(flags.label) ? { label: str6(flags.label) } : {},
           ...notes ? { notes } : {}
         };
         const common = {
@@ -67891,7 +68471,7 @@ default (no --glyph): ${DEFAULT_GLYPH2} \u2014 a mark that claims nothing, so th
           lintNote: "`himi patch` sends a raw file. Nothing here built or linted your app \u2014 `himi push --only <selector>` is the same edit with the full lint gate in front of it."
         };
         if (kind === "tokens" || kind === "app-config") {
-          const body = readFileSync71(file, "utf8");
+          const body = readFileSync72(file, "utf8");
           const patch2 = kind === "tokens" ? { tokens: body } : { appConfig: body };
           return runReleasePatch({
             ...common,
@@ -67906,7 +68486,7 @@ default (no --glyph): ${DEFAULT_GLYPH2} \u2014 a mark that claims nothing, so th
             io.error(JSON.stringify({ error: "patch screen needs a <screenId>", usage: PATCH_USAGE }));
             return 2;
           }
-          const descriptor = readFileSync71(file, "utf8");
+          const descriptor = readFileSync72(file, "utf8");
           try {
             JSON.parse(descriptor);
           } catch (e) {
@@ -67935,7 +68515,7 @@ default (no --glyph): ${DEFAULT_GLYPH2} \u2014 a mark that claims nothing, so th
             io.error(JSON.stringify({ ok: false, error: "bundle_flag_needs_a_value", message: "--bundle takes a bundle sha256, or the literal `none` to unbind the screen.", usage: PATCH_USAGE }));
             return 2;
           }
-          const bundleFlag = str5(flags.bundle);
+          const bundleFlag = str6(flags.bundle);
           const bundle = bundleFlag === "none" ? null : bundleFlag;
           if (!baseOrRefuse(baseFound.manifest)) return 1;
           return runReleasePatch({
@@ -67946,9 +68526,9 @@ default (no --glyph): ${DEFAULT_GLYPH2} \u2014 a mark that claims nothing, so th
             extra: { kind, screen: id, file: { path: file, bytes: Buffer.byteLength(descriptor, "utf8") } }
           });
         }
-        const bytes2 = readFileSync71(file);
-        const sha = createHash26("sha256").update(bytes2).digest("hex");
-        const forScreens = (str5(flags["for-screen"]) ?? "").split(",").map((s) => s.trim()).filter(Boolean);
+        const bytes2 = readFileSync72(file);
+        const sha = createHash27("sha256").update(bytes2).digest("hex");
+        const forScreens = (str6(flags["for-screen"]) ?? "").split(",").map((s) => s.trim()).filter(Boolean);
         if (flags["no-rebind"] !== void 0 && flags["no-rebind"] !== true) {
           io.error(JSON.stringify({ ok: false, error: "no_rebind_takes_no_value", message: "--no-rebind is a switch and takes no value; pass it bare.", usage: PATCH_USAGE }));
           return 2;
@@ -68037,7 +68617,7 @@ default (no --glyph): ${DEFAULT_GLYPH2} \u2014 a mark that claims nothing, so th
       // READ of the device-facing door, and what that read says is what gets printed.
       case "flags": {
         const sub = pos[1];
-        const app = str5(flags.app) ?? await appId(contentDir(flags));
+        const app = str6(flags.app) ?? await appId(contentDir(flags));
         const usage = "usage: himi flags list | set <key> --definition <json|@file> | ramp <key> [--percent 0-100] [--enabled true|false] | rm <key>";
         if (sub !== "list" && sub !== "set" && sub !== "ramp" && sub !== "rm") {
           io.error(JSON.stringify({ error: `unknown flags subcommand: ${sub ?? "(none)"}`, hint: usage }));
@@ -68083,14 +68663,14 @@ default (no --glyph): ${DEFAULT_GLYPH2} \u2014 a mark that claims nothing, so th
           return 2;
         }
         if (sub === "set") {
-          const arg = str5(flags.definition);
+          const arg = str6(flags.definition);
           if (!arg) {
             io.error(JSON.stringify({ error: "flags set needs --definition <json|@file>", hint: usage }));
             return 2;
           }
           let def;
           try {
-            const parsed = JSON.parse(arg.startsWith("@") ? readFileSync71(arg.slice(1), "utf8") : arg);
+            const parsed = JSON.parse(arg.startsWith("@") ? readFileSync72(arg.slice(1), "utf8") : arg);
             if (parsed === null || typeof parsed !== "object" || Array.isArray(parsed)) {
               io.error(JSON.stringify({ error: "invalid_definition", problems: [`--definition must be a JSON object, got ${Array.isArray(parsed) ? "an array" : parsed === null ? "null" : typeof parsed}`] }));
               return 2;
@@ -68135,7 +68715,7 @@ default (no --glyph): ${DEFAULT_GLYPH2} \u2014 a mark that claims nothing, so th
             return 2;
           }
           const enabledGiven = flags.enabled !== void 0;
-          const enabledRaw = flags.enabled === true ? "true" : str5(flags.enabled);
+          const enabledRaw = flags.enabled === true ? "true" : str6(flags.enabled);
           if (enabledGiven && enabledRaw !== "true" && enabledRaw !== "false") {
             io.error(JSON.stringify({ error: `--enabled must be true or false, got ${String(flags.enabled)}` }));
             return 2;
@@ -68213,7 +68793,7 @@ default (no --glyph): ${DEFAULT_GLYPH2} \u2014 a mark that claims nothing, so th
           io.error(JSON.stringify({ error: `visibility takes public|unlisted (got "${value}")` }));
           return 2;
         }
-        const app = str5(flags.app) ?? await appId(contentDir(flags));
+        const app = str6(flags.app) ?? await appId(contentDir(flags));
         let r;
         try {
           r = value === void 0 ? await client2().appSettings(app) : await client2().setVisibility(app, value);
@@ -68235,8 +68815,8 @@ default (no --glyph): ${DEFAULT_GLYPH2} \u2014 a mark that claims nothing, so th
       // a minBinaryVersion floor bump.
       case "store":
       case "testflight": {
-        if (str5(flags.provider) === "wix-mobile-release") {
-          const playerTarget = wixPlayerTestflightTarget(str5(flags.target));
+        if (str6(flags.provider) === "wix-mobile-release") {
+          const playerTarget = wixPlayerTestflightTarget(str6(flags.target));
           if (!playerTarget) {
             io.error(JSON.stringify({ error: "Wix Mobile Release requires deployed --target bo or --target prod; local/custom targets cannot hold the Himi service identity" }));
             return 2;
@@ -68470,8 +69050,8 @@ ${label2}`);
             io.error(JSON.stringify({ error: "dist watch needs a <jobId>" }));
             return 2;
           }
-          const intervalMs2 = Number(str5(flags.interval)) || 2e4;
-          const deadline2 = Date.now() + (Number(str5(flags.timeout)) || 45 * 6e4);
+          const intervalMs2 = Number(str6(flags.interval)) || 2e4;
+          const deadline2 = Date.now() + (Number(str6(flags.timeout)) || 45 * 6e4);
           let announced = false;
           for (; ; ) {
             let s;
@@ -68513,14 +69093,14 @@ ${label2}`);
           }
         }
         if (sub === "list") {
-          const app2 = str5(flags.app) ?? await appId(contentDir(flags));
+          const app2 = str6(flags.app) ?? await appId(contentDir(flags));
           if (!app2) {
             io.error(JSON.stringify({ error: "dist list needs --app" }));
             return 2;
           }
           let r2;
           try {
-            r2 = await c.distList(app2, Number(str5(flags.limit)) || void 0);
+            r2 = await c.distList(app2, Number(str6(flags.limit)) || void 0);
           } catch (e) {
             return distUnreachable(e);
           }
@@ -68546,15 +69126,15 @@ ${label2}`);
           io.error(JSON.stringify({ error: `unknown dist subcommand "${sub}" \u2014 use status | watch | list | cancel, or no subcommand to start a build` }));
           return 2;
         }
-        const app = str5(flags.app) ?? await appId(contentDir(flags));
+        const app = str6(flags.app) ?? await appId(contentDir(flags));
         if (!app) {
           io.error(JSON.stringify({ error: "dist needs --app (or a content dir whose himalaya.content.json names one)" }));
           return 2;
         }
-        const platform = str5(flags.platform)?.split(",").map((p) => p.trim()).filter(Boolean);
+        const platform = str6(flags.platform)?.split(",").map((p) => p.trim()).filter(Boolean);
         {
           const distDir = contentDir(flags);
-          if (existsSync60(join56(distDir, "himalaya.content.json"))) {
+          if (existsSync60(join57(distDir, "himalaya.content.json"))) {
             const issues = await iconIssues(distDir, flags.strict === true, { requireDeclared: true, requireVerified: true });
             const errors = issues.filter((i) => i.severity === "error");
             for (const i of issues.filter((i2) => i2.severity === "warning")) {
@@ -68572,31 +69152,31 @@ ${label2}`);
           }
         }
         const { captchaContentInput: captchaContentInput2 } = await Promise.resolve().then(() => (init_captcha2(), captcha_exports));
-        const captchaSiteId = str5(flags.site) ?? captchaContentInput2(contentDir(flags)).siteId;
+        const captchaSiteId = str6(flags.site) ?? captchaContentInput2(contentDir(flags)).siteId;
         let r;
         try {
           r = await c.distCreate({
             app,
             ...platform?.length ? { platform } : {},
-            ...str5(flags.release) ? { release: str5(flags.release) } : {},
+            ...str6(flags.release) ? { release: str6(flags.release) } : {},
             ...flags["allow-draft"] === true ? { allowDraft: true } : {},
             ...captchaSiteId ? { captchaSiteId } : {},
-            ...str5(flags.shell) ? { shell: str5(flags.shell) } : {},
+            ...str6(flags.shell) ? { shell: str6(flags.shell) } : {},
             // INTERIM, iOS only: sign under an internal enterprise id the Mac pool already holds a
             // profile for, because no profile covers a himi shell's own id yet. The serve plane
             // refuses anything outside its allow-list (internal `ent.*` only — never a store id).
             // flags["borrow-ios-id"], NOT flags.borrowIosId — parseFlags does no kebab→camel
             // conversion (see line ~58), so the camel form reads undefined and the flag would be a
             // silent no-op. Every other multi-word flag here uses the bracket form for the same reason.
-            ...str5(flags["borrow-ios-id"]) ? { borrowIosBundleId: str5(flags["borrow-ios-id"]) } : {},
-            ...str5(flags.destination) ? { destination: str5(flags.destination) } : {},
-            ...str5(flags.signing) ? { signing: str5(flags.signing) } : {},
+            ...str6(flags["borrow-ios-id"]) ? { borrowIosBundleId: str6(flags["borrow-ios-id"]) } : {},
+            ...str6(flags.destination) ? { destination: str6(flags.destination) } : {},
+            ...str6(flags.signing) ? { signing: str6(flags.signing) } : {},
             // WHICH KEYSTORE signs the APK. A separate axis from --signing (that one is the Apple
             // account), so a `--platform ios,android` build can say "Wix-managed on iOS, the QA
             // keystore on Android" — the normal combination — with one command.
             // flags["android-signing"], NOT flags.androidSigning: parseFlags does no kebab→camel
             // conversion, so the camel form reads undefined and the flag is a silent no-op.
-            ...str5(flags["android-signing"]) ? { androidSigning: str5(flags["android-signing"]) } : {}
+            ...str6(flags["android-signing"]) ? { androidSigning: str6(flags["android-signing"]) } : {}
           });
         } catch (e) {
           return distUnreachable(e);
@@ -68611,14 +69191,14 @@ ${label2}`);
         if (noWait) {
           print({ status: r.status, ...r.json ?? {} });
           if (!flags.json) {
-            const t = str5(flags.target);
+            const t = str6(flags.target);
             const targetArg = t ? ` --target ${t}` : "";
             for (const j of jobs) io.log(`  ${j.platform}  ${j.jobId}  \u2192 himi dist status ${j.jobId}${targetArg}`);
           }
           return 0;
         }
-        const intervalMs = Number(str5(flags.interval)) || 2e4;
-        const timeoutMs = Number(str5(flags.timeout)) || 45 * 6e4;
+        const intervalMs = Number(str6(flags.interval)) || 2e4;
+        const timeoutMs = Number(str6(flags.timeout)) || 45 * 6e4;
         const deadline = Date.now() + timeoutMs;
         const pending = new Map(jobs.map((j) => [String(j.jobId), String(j.platform)]));
         const done = [];
@@ -68660,7 +69240,7 @@ ${label2}`);
         let issue2;
         let ownerIssue;
         try {
-          const t = resolveTarget({ target, issueUrl: str5(flags["issue-url"]), ownerIssueUrl: str5(flags["owner-issue-url"]) });
+          const t = resolveTarget({ target, issueUrl: str6(flags["issue-url"]), ownerIssueUrl: str6(flags["owner-issue-url"]) });
           issue2 = t.issue;
           ownerIssue = t.ownerIssue;
         } catch (e) {
@@ -68823,7 +69403,7 @@ ${label2}`);
           const dpxPath = dpxSessionTokenPath();
           let dpx;
           try {
-            dpx = readFileSync71(dpxPath, "utf8").trim();
+            dpx = readFileSync72(dpxPath, "utf8").trim();
           } catch {
             io.error(JSON.stringify({ error: `no dpx session at ${dpxPath} \u2014 run \`dpx auth login\` then \`dpx auth token > ${dpxPath}\` (dpx 2.x keeps its own state in ~/.dpx/auth.json and does NOT write the legacy session file), or omit --dpx` }));
             return 1;
@@ -68859,7 +69439,7 @@ ${label2}`);
         const target = targetName();
         let ownerIssue;
         try {
-          ownerIssue = resolveTarget({ target, ownerIssueUrl: str5(flags["owner-issue-url"]) }).ownerIssue;
+          ownerIssue = resolveTarget({ target, ownerIssueUrl: str6(flags["owner-issue-url"]) }).ownerIssue;
         } catch (e) {
           io.error(JSON.stringify({ error: e.message }));
           return 2;
@@ -68875,10 +69455,10 @@ ${label2}`);
         }
         const base = ownerIssue.replace(/\/$/, "");
         const sub = pos[1];
-        const cookie = str5(flags.cookie) ?? process.env.HIMI_WIX_COOKIE;
+        const cookie = str6(flags.cookie) ?? process.env.HIMI_WIX_COOKIE;
         let ownerToken;
         try {
-          ownerToken = resolveTarget({ target, controlToken: str5(flags["control-token"]) }).controlToken;
+          ownerToken = resolveTarget({ target, controlToken: str6(flags["control-token"]) }).controlToken;
         } catch {
         }
         if (!cookie && !ownerToken) {
@@ -68898,9 +69478,9 @@ ${label2}`);
               return 2;
             }
             const body = { slug };
-            const dn = str5(flags["display-name"]);
+            const dn = str6(flags["display-name"]);
             if (dn) body.displayName = dn;
-            const acct = str5(flags["account-id"]);
+            const acct = str6(flags["account-id"]);
             if (acct) body.accountId = acct;
             const r2 = await fetch(`${base}/v1/owner/apps/claim`, { method: "POST", redirect: "error", headers: { ...headers2, "content-type": "application/json" }, body: JSON.stringify(body) });
             const j2 = await r2.json().catch(() => ({}));
@@ -69020,8 +69600,8 @@ ${label2}`);
         try {
           const t = resolveTarget({
             target,
-            controlUrl: str5(flags["control-url"]),
-            controlToken: str5(flags["control-token"])
+            controlUrl: str6(flags["control-url"]),
+            controlToken: str6(flags["control-token"])
           });
           if (t.controlToken && t.control) {
             const revokeRefusal = credentialHostRefusal(t.control);
@@ -69099,8 +69679,8 @@ ${label2}`);
       }
       case "doctor": {
         const target = targetName();
-        const timeoutMs = Number(str5(flags.timeout)) > 0 ? Number(str5(flags.timeout)) : DOCTOR_TIMEOUT_MS;
-        const dataUrl = str5(flags["data-url"]) ?? process.env.HIMI_DATA_URL ?? PUBLIC_WIX_API_BASE;
+        const timeoutMs = Number(str6(flags.timeout)) > 0 ? Number(str6(flags.timeout)) : DOCTOR_TIMEOUT_MS;
+        const dataUrl = str6(flags["data-url"]) ?? process.env.HIMI_DATA_URL ?? PUBLIC_WIX_API_BASE;
         let resolved2;
         let serveUrl = "";
         let targetError;
@@ -69110,9 +69690,9 @@ ${label2}`);
             // Passing `str(flags.target)` re-ran resolution without `defaultTarget`, so off-repo
             // doctor labelled its report `wix` while probing the `local` URLs.
             target,
-            serveUrl: str5(flags["serve-url"]),
-            controlUrl: str5(flags["control-url"]),
-            controlToken: str5(flags["control-token"])
+            serveUrl: str6(flags["serve-url"]),
+            controlUrl: str6(flags["control-url"]),
+            controlToken: str6(flags["control-token"])
           });
           serveUrl = resolved2.serve;
         } catch (e) {
@@ -69216,7 +69796,7 @@ ${report2.ok ? "OK \u2014 data + serve plane reachable." : typeof report2.hint =
         const { BO_FUNCTIONS_BASE_URL: BO_FUNCTIONS_BASE_URL2, resolveFunctionsTarget: resolveFunctionsTarget2 } = await Promise.resolve().then(() => (init_functions(), functions_exports));
         let secretTarget;
         try {
-          secretTarget = resolveFunctionsTarget2({ target: str5(flags.target), functionsUrl: str5(flags["functions-url"]), releaseId: str5(flags.release) });
+          secretTarget = resolveFunctionsTarget2({ target: str6(flags.target), functionsUrl: str6(flags["functions-url"]), releaseId: str6(flags.release) });
         } catch (error) {
           io.error(JSON.stringify({ error: error.message }));
           return 1;
@@ -69225,7 +69805,7 @@ ${report2.ok ? "OK \u2014 data + serve plane reachable." : typeof report2.hint =
           const path2 = dpxSessionTokenPath();
           let raw;
           try {
-            raw = readFileSync71(path2, "utf8");
+            raw = readFileSync72(path2, "utf8");
           } catch {
             io.error(JSON.stringify({ error: `no DPX BO session at ${path2}` }));
             return 1;
@@ -69269,20 +69849,20 @@ ${report2.ok ? "OK \u2014 data + serve plane reachable." : typeof report2.hint =
         let site;
         let call;
         try {
-          site = resolveSiteId(str5(flags.site));
+          site = resolveSiteId(str6(flags.site));
           call = ownerTransport(site);
         } catch (error) {
           io.error(JSON.stringify({ error: error.message }));
           return 2;
         }
-        const environment2 = str5(flags.environment) ?? "preview";
+        const environment2 = str6(flags.environment) ?? "preview";
         if (environment2 !== "preview" && environment2 !== "production") {
           io.error(JSON.stringify({ error: "--environment must be preview or production" }));
           return 2;
         }
         let kv;
         if (data.kv?.length) {
-          const baseUrl = str5(flags["data-url"]) ?? process.env.HIMI_DATA_ADMIN_URL;
+          const baseUrl = str6(flags["data-url"]) ?? process.env.HIMI_DATA_ADMIN_URL;
           const token = process.env.HIMI_DATA_ADMIN_TOKEN;
           if (!baseUrl || !token) {
             io.error(JSON.stringify({ error: "KV declarations require --data-url/HIMI_DATA_ADMIN_URL and HIMI_DATA_ADMIN_TOKEN for the operator data plane", app, site, environment: environment2 }));
@@ -69354,7 +69934,7 @@ ${report2.ok ? "OK \u2014 data + serve plane reachable." : typeof report2.hint =
           return 1;
         }
         if (sub === "seed" && flags.ai === true) {
-          const res = await writeSeedRows({ app, cms, dir, count: Number(str5(flags.count)) || 8 });
+          const res = await writeSeedRows({ app, cms, dir, count: Number(str6(flags.count)) || 8 });
           print(res);
           return res.ok ? 0 : 1;
         }
@@ -69371,7 +69951,7 @@ ${report2.ok ? "OK \u2014 data + serve plane reachable." : typeof report2.hint =
         let call;
         let site;
         try {
-          site = resolveSiteId(str5(flags.site));
+          site = resolveSiteId(str6(flags.site));
           call = ownerTransport(site);
         } catch (e) {
           io.error(JSON.stringify({ error: e.message }));
@@ -69380,7 +69960,7 @@ ${report2.ok ? "OK \u2014 data + serve plane reachable." : typeof report2.hint =
         const common = { app, cms, call };
         let report2;
         try {
-          report2 = sub === "query" ? await queryCms({ ...common, all: flags.all === true }) : sub === "create" ? await createCms({ ...common, dryRun: flags["dry-run"] === true, allowDestructive: flags["allow-destructive"] === true, applyPermissions: flags["apply-permissions"] === true }) : await seedCms({ ...common, dir, dryRun: flags["dry-run"] === true, force: flags.force === true, only: str5(flags.only) });
+          report2 = sub === "query" ? await queryCms({ ...common, all: flags.all === true }) : sub === "create" ? await createCms({ ...common, dryRun: flags["dry-run"] === true, allowDestructive: flags["allow-destructive"] === true, applyPermissions: flags["apply-permissions"] === true }) : await seedCms({ ...common, dir, dryRun: flags["dry-run"] === true, force: flags.force === true, only: str6(flags.only) });
         } catch (e) {
           const partial = e.partial;
           io.error(JSON.stringify({
@@ -69403,17 +69983,17 @@ ${report2.ok ? "OK \u2014 data + serve plane reachable." : typeof report2.hint =
             const r = await runSiteFunctionCli2({
               op: pos[2],
               name: pos[3],
-              siteFlag: str5(flags.site),
-              siteUrl: str5(flags.url) ?? str5(flags["site-url"]) ?? process.env.WIX_SITE_URL,
-              clientId: str5(flags["client-id"]) ?? process.env.WIX_CLIENT_ID,
-              method: str5(flags.method),
-              sourcePath: str5(flags.source),
-              bodyRaw: str5(flags.body),
+              siteFlag: str6(flags.site),
+              siteUrl: str6(flags.url) ?? str6(flags["site-url"]) ?? process.env.WIX_SITE_URL,
+              clientId: str6(flags["client-id"]) ?? process.env.WIX_CLIENT_ID,
+              method: str6(flags.method),
+              sourcePath: str6(flags.source),
+              bodyRaw: str6(flags.body),
               publish: flags.publish === true,
               invoke: flags.invoke === true,
               dryRun: flags["dry-run"] === true,
               visitor: flags.visitor === true,
-              cwd: str5(flags.content) ?? process.cwd()
+              cwd: str6(flags.content) ?? process.cwd()
             });
             print(r);
             return r.ok ? 0 : 1;
@@ -69435,17 +70015,17 @@ ${report2.ok ? "OK \u2014 data + serve plane reachable." : typeof report2.hint =
           }
           try {
             const r = op === "list" ? await runSiteClientList2({
-              siteFlag: str5(flags.site),
-              redirectUri: str5(flags["redirect-uri"])
+              siteFlag: str6(flags.site),
+              redirectUri: str6(flags["redirect-uri"])
             }) : await runSiteClientEnsure2({
-              siteFlag: str5(flags.site),
-              name: str5(flags.name),
-              redirectUri: str5(flags["redirect-uri"]),
+              siteFlag: str6(flags.site),
+              name: str6(flags.name),
+              redirectUri: str6(flags["redirect-uri"]),
               new: flags.new === true,
               yes: flags.yes === true,
               // Bare `--write-provisioning` is the default path; with a value it is that path.
-              writeProvisioning: flags["write-provisioning"] === true ? true : str5(flags["write-provisioning"]),
-              siteUrl: str5(flags["site-url"]) ?? str5(flags.url)
+              writeProvisioning: flags["write-provisioning"] === true ? true : str6(flags["write-provisioning"]),
+              siteUrl: str6(flags["site-url"]) ?? str6(flags.url)
             });
             print(r);
             return r.ok ? 0 : 1;
@@ -69468,15 +70048,15 @@ ${report2.ok ? "OK \u2014 data + serve plane reachable." : typeof report2.hint =
           try {
             const r = sub === "list" ? await runSiteList2() : await runSiteCreate2({
               name: pos[2],
-              type: str5(flags.type),
-              templateId: str5(flags.template),
-              verticals: str5(flags.verticals),
-              folderId: str5(flags.folder),
-              redirectUri: str5(flags["redirect-uri"]),
+              type: str6(flags.type),
+              templateId: str6(flags.template),
+              verticals: str6(flags.verticals),
+              folderId: str6(flags.folder),
+              redirectUri: str6(flags["redirect-uri"]),
               noOauthApp: flags["no-oauth-app"] === true,
               // Bare `--write-provisioning` is the default path; with a value it is that path.
-              writeProvisioning: flags["write-provisioning"] === true ? true : str5(flags["write-provisioning"]),
-              siteUrl: str5(flags["site-url"]),
+              writeProvisioning: flags["write-provisioning"] === true ? true : str6(flags["write-provisioning"]),
+              siteUrl: str6(flags["site-url"]),
               yes: flags.yes === true,
               // The argv as typed, so the dry run echoes back a command that actually
               // recreates THIS plan. Reconstructing it from the fields above would
@@ -69495,14 +70075,14 @@ ${report2.ok ? "OK \u2014 data + serve plane reachable." : typeof report2.hint =
           io.error(JSON.stringify({ error: sub ? `unknown site subcommand "${sub}"` : "site needs a subcommand", usage: `himi site create <name> [--type wix|headless|branded-app|vibe] --yes  |  himi site list  |  himi site client ensure|list --site <msid>  |  himi site analyze --client-id <id> --url <https://\u2026> [--site <msid>] [--out <dir>] [--apply [--shell <id>]]  |  himi site function list|get|put|publish|invoke \u2026` }));
           return 2;
         }
-        const clientId = str5(flags["client-id"]) ?? process.env.WIX_CLIENT_ID;
-        const siteUrl = str5(flags.url) ?? str5(flags["site-url"]);
+        const clientId = str6(flags["client-id"]) ?? process.env.WIX_CLIENT_ID;
+        const siteUrl = str6(flags.url) ?? str6(flags["site-url"]);
         if (flags["read-only"] === true) {
           if (flags.apply || flags.out || flags.shell || flags["redirect-uri"]) {
             io.error(JSON.stringify({ error: "--read-only returns API context only; it cannot be combined with --apply, --out, --shell, or --redirect-uri" }));
             return 2;
           }
-          const siteId = str5(flags.site) ?? process.env.WIX_SITE_ID;
+          const siteId = str6(flags.site) ?? process.env.WIX_SITE_ID;
           if (!clientId && !siteId && !process.env.WIX_TEST_TOKEN?.trim()) {
             io.error(JSON.stringify({ error: "--read-only needs --site, --client-id, or a site-scoped WIX_TEST_TOKEN" }));
             return 2;
@@ -69544,16 +70124,16 @@ ${report2.ok ? "OK \u2014 data + serve plane reachable." : typeof report2.hint =
           const r = await runSiteAnalyze2({
             clientId,
             siteUrl,
-            siteFlag: str5(flags.site),
-            outDir: str5(flags.out),
+            siteFlag: str6(flags.site),
+            outDir: str6(flags.out),
             apply: flags.apply === true,
-            shell: str5(flags.shell),
+            shell: str6(flags.shell),
             // A redirect already REGISTERED on --client-id, recorded into the applied binding.
             // Analyze cannot discover it (GET-only; the registered list lives behind
             // `oauth-app/v1`), and the shell refuses to reuse its own default once a customer
             // client is in play — so it is passed in by whoever registered it.
-            redirectUri: str5(flags["redirect-uri"]),
-            cwd: str5(flags.content) ?? process.cwd()
+            redirectUri: str6(flags["redirect-uri"]),
+            cwd: str6(flags.content) ?? process.cwd()
           });
           print({ ok: true, ...r });
           return 0;