@wix/himalaya-cli 0.1026.0 → 0.1028.0

package/dist/cli.mjs

@@ -5351,7 +5351,6 @@ function walk(node, registry, path2, out) {
 var SYSTEM_FONT_FAMILY, TONAL_ELEVATION_ALPHA;
 var init_tokens = __esm({
   "../../core/ts/src/tokens.ts"() {
-    "use strict";
     SYSTEM_FONT_FAMILY = "$system";
     TONAL_ELEVATION_ALPHA = [0, 0.05, 0.08, 0.11, 0.12, 0.14];
   }
@@ -5378,7 +5377,6 @@ function resolveTranslation(value, catalog, sourceCatalog) {
 var BINDING_SIGILS, BINDING_SIGIL_RE, TRANSLATION_PREFIX, TRANSLATION_KEY_RE;
 var init_bindings = __esm({
   "../../core/ts/src/bindings.ts"() {
-    "use strict";
     BINDING_SIGILS = ["service", "flag", "item", "t"];
     BINDING_SIGIL_RE = new RegExp(
       `^\\$(?:${BINDING_SIGILS.filter((s) => s !== "t").join("|")})\\b|^\\$t:`
@@ -22580,6 +22578,40 @@ var init_icons = __esm({
   }
 });
 
+// ../../core/web-renderer/src/webviewFrame.ts
+function currentOrigin() {
+  try {
+    const origin = typeof window !== "undefined" ? window.location?.origin : void 0;
+    return origin && origin !== "null" ? origin : null;
+  } catch {
+    return null;
+  }
+}
+function webviewFrameSandbox(url, grants2 = [], pageOrigin = currentOrigin()) {
+  const parsed = url.replace(/^[\u0000-\u0020]+|[\u0000-\u0020]+$/g, "").replace(/[\t\n\r]/g, "");
+  const absolute = /^[a-z][a-z0-9+.-]*:/i.test(parsed);
+  let target;
+  try {
+    target = new URL(parsed, pageOrigin ?? "http://relative.invalid");
+  } catch {
+    return null;
+  }
+  if (!NETWORK_SCHEMES.has(target.protocol)) return null;
+  const crossOrigin = pageOrigin !== null && absolute && target.origin !== pageOrigin;
+  const tokens = ["allow-scripts", ...grants2.filter((g) => g !== "allow-scripts" && g !== "allow-same-origin")];
+  if (crossOrigin) tokens.splice(1, 0, "allow-same-origin");
+  return { src: crossOrigin ? target.href : url, sandbox: tokens.join(" ") };
+}
+function isWebviewUrlAllowed(url) {
+  return webviewFrameSandbox(url, [], null) !== null;
+}
+var NETWORK_SCHEMES;
+var init_webviewFrame = __esm({
+  "../../core/web-renderer/src/webviewFrame.ts"() {
+    NETWORK_SCHEMES = /* @__PURE__ */ new Set(["http:", "https:"]);
+  }
+});
+
 // ../../core/web-renderer/src/a11y/controls.tsx
 import React3 from "react";
 import { jsx as jsx4, jsxs } from "react/jsx-runtime";
@@ -22907,6 +22939,65 @@ var init_controls = __esm({
   }
 });
 
+// ../../core/web-renderer/src/a11y/modalStack.ts
+function pushModalLayer(el) {
+  const layer = { el: typeof el === "function" ? el : () => el };
+  layers.push(layer);
+  sync();
+  return {
+    isTop: () => layers[layers.length - 1] === layer,
+    release: () => {
+      const i = layers.indexOf(layer);
+      if (i < 0) return;
+      layers.splice(i, 1);
+      sync();
+    }
+  };
+}
+function topElement() {
+  for (let i = layers.length - 1; i >= 0; i--) {
+    const el = layers[i].el();
+    if (el?.isConnected) return el;
+  }
+  return null;
+}
+function sync() {
+  watcher?.disconnect();
+  watcher = null;
+  for (const el of madeInert) el.removeAttribute("inert");
+  madeInert.clear();
+  const top = topElement();
+  if (!top) return;
+  const scope = top.parentElement?.closest(`[${MODAL_SCOPE_ATTR}]`) ?? top.ownerDocument.body;
+  const levels = [];
+  let node = top;
+  while (node !== scope && node.parentElement) {
+    const parent = node.parentElement;
+    levels.push(parent);
+    for (const sibling of Array.from(parent.children)) {
+      if (sibling === node || SKIP.has(sibling.tagName) || sibling.hasAttribute("inert")) continue;
+      sibling.setAttribute("inert", "");
+      madeInert.add(sibling);
+    }
+    node = parent;
+  }
+  const Observer = top.ownerDocument.defaultView?.MutationObserver;
+  if (Observer && levels.length) {
+    watcher = new Observer(() => sync());
+    for (const level of levels) watcher.observe(level, { childList: true });
+  }
+}
+var MODAL_SCOPE_ATTR, SKIP, layers, madeInert, watcher;
+var init_modalStack = __esm({
+  "../../core/web-renderer/src/a11y/modalStack.ts"() {
+    MODAL_SCOPE_ATTR = "data-himi-modal-scope";
+    SKIP = /* @__PURE__ */ new Set(["SCRIPT", "STYLE", "LINK", "META", "TEMPLATE", "NOSCRIPT", "HEAD"]);
+    layers = [];
+    madeInert = /* @__PURE__ */ new Set();
+    watcher = null;
+  }
+});
+
 // ../../core/web-renderer/src/listGestures.tsx
 import { useRef, useState as useState2 } from "react";
 import { Fragment as Fragment2, jsx as jsx5, jsxs as jsxs2 } from "react/jsx-runtime";
@@ -24158,8 +24249,8 @@ function autoGrowBox(contentHeight, lineHeight, verticalPadding, maxLines) {
   const cap = Math.max(floor, lineHeight * lines + verticalPadding);
   return { height: Math.max(floor, Math.min(contentHeight, cap)), scrolls: contentHeight > cap };
 }
-function wrapModalMenu(modal, label2, placement, menu) {
-  return modal ? /* @__PURE__ */ jsx6("div", { role: "dialog", "aria-modal": "true", "aria-label": label2, style: placement, children: menu }) : menu;
+function wrapModalMenu(modal, label2, placement, ref, menu) {
+  return modal ? /* @__PURE__ */ jsx6("div", { ref, role: "dialog", "aria-modal": "true", "aria-label": label2, style: placement, children: menu }) : menu;
 }
 function bindMediaSlot(value, sessionId) {
   if (typeof value === "string") {
@@ -24263,9 +24354,10 @@ function withExtras(name, render) {
     const additive = addIntrinsicPadding(el.props.style, wrap ?? {});
     const inferredDecorative = el.props[INFERRED_DECORATIVE] === true;
     const iconGlyph2 = el.props[ICON_GLYPH] === true;
+    const roleWhenNamed = el.props[ROLE_WHEN_NAMED];
     if (!Object.keys(pass).length) {
-      if (inferredDecorative || iconGlyph2) {
-        return React5.cloneElement(el, { [INFERRED_DECORATIVE]: void 0, [ICON_GLYPH]: void 0, ...additive ? { style: additive } : {} });
+      if (inferredDecorative || iconGlyph2 || roleWhenNamed != null) {
+        return React5.cloneElement(el, { [INFERRED_DECORATIVE]: void 0, [ICON_GLYPH]: void 0, [ROLE_WHEN_NAMED]: void 0, ...additive ? { style: additive } : {} });
       }
       return additive ? React5.cloneElement(el, { style: additive }) : /* @__PURE__ */ jsx6(Fragment3, { children: el });
     }
@@ -24277,6 +24369,14 @@ function withExtras(name, render) {
       const nodeSpeaksForItself = pass["aria-label"] != null || passRole != null && passRole !== "presentation" && passRole !== "none" || typeof pass.onClick === "function" || typeof pass.onDoubleClick === "function";
       if (pass["aria-hidden"] == null && nodeSpeaksForItself) next["aria-hidden"] = void 0;
     }
+    if (roleWhenNamed != null) {
+      next[ROLE_WHEN_NAMED] = void 0;
+      const isControl = typeof pass.onClick === "function" || typeof pass.onDoubleClick === "function";
+      const roleAuthored = pass[AUTHORED_ROLE] === true;
+      if (typeof roleWhenNamed === "string" && pass["aria-label"] != null && pass.role == null && prev.role == null && !isControl && !roleAuthored) {
+        next.role = roleWhenNamed;
+      }
+    }
     if (iconGlyph2) {
       next[ICON_GLYPH] = void 0;
       if (pass.role === "presentation" && typeof pass.onClick !== "function" && typeof pass.onDoubleClick !== "function") {
@@ -24290,6 +24390,7 @@ function withExtras(name, render) {
     delete next[SYNTHETIC_TAP_ROLE];
     const tabIndexIsSynthetic = next[SYNTHETIC_TABINDEX] === true;
     delete next[SYNTHETIC_TABINDEX];
+    delete next[AUTHORED_ROLE];
     if (additive) next.style = additive;
     const ownsInteractiveSemantics = isNativeInteractiveElement(el) || hasInteractiveReactDescendant(el);
     if (ownsInteractiveSemantics) {
@@ -24774,8 +24875,36 @@ function ensureInitialFocusRuntime() {
         restoreFocusOnDismiss(presentedScope, active);
       }
       el.focus();
+      if (document.activeElement === el) enterAuthoredOrderOnTab(el);
+    }
+  }, 0);
+}
+function enterAuthoredOrderOnTab(target) {
+  const doc = target.ownerDocument;
+  const scope = target.closest(PRESENTED_SCOPE);
+  const root = scope ?? doc;
+  const onKeyDown = (e) => {
+    if (e.key !== "Tab" || e.shiftKey || e.altKey || e.ctrlKey || e.metaKey || e.defaultPrevented || e.target !== target) return;
+    if (target.tabIndex > 0) return;
+    const ordered = Array.from(root.querySelectorAll("[tabindex]")).filter((c) => c.tabIndex > 0 && c.closest(PRESENTED_SCOPE) === scope).sort((a, b) => a.tabIndex - b.tabIndex);
+    for (const c of ordered) {
+      c.focus();
+      if (doc.activeElement === c) {
+        e.preventDefault();
+        e.stopPropagation();
+        return;
+      }
     }
+  };
+  const onBlur = () => setTimeout(() => {
+    if (doc.activeElement !== target) disarm();
   }, 0);
+  const disarm = () => {
+    target.removeEventListener("keydown", onKeyDown);
+    target.removeEventListener("blur", onBlur);
+  };
+  target.addEventListener("keydown", onKeyDown);
+  target.addEventListener("blur", onBlur);
 }
 function ariaModal(modal, dflt) {
   const on3 = modal === true || modal === false ? modal : dflt;
@@ -24810,6 +24939,7 @@ function applyA11ySemantics(node, ctx, extra) {
   if (typeof headingLevel === "number" && headingLevel >= 1 && headingLevel <= 6) {
     extra["aria-level"] = String(headingLevel);
   }
+  if (role != null && Object.prototype.hasOwnProperty.call(ARIA_ROLE, role)) extra[AUTHORED_ROLE] = true;
   const hint = str7(m.accessibilityHint ?? m.accessibility_hint);
   const value = str7(m.accessibilityValue ?? m.accessibility_value);
   if (value) extra["aria-valuetext"] = value;
@@ -25005,7 +25135,10 @@ function renderNodeInner(node, ctx) {
       if (composed) extra.style = composed;
     }
   }
-  if (typeof el.type === "string") delete extra[SYNTHETIC_TABINDEX];
+  if (typeof el.type === "string") {
+    delete extra[SYNTHETIC_TABINDEX];
+    delete extra[AUTHORED_ROLE];
+  }
   let out = Object.keys(extra).length ? React5.cloneElement(el, extra) : el;
   if (a11yHint) {
     out = /* @__PURE__ */ jsx6(A11yHintDescription, { hint: a11yHint, idBase: componentId, children: out });
@@ -25726,7 +25859,7 @@ function renderInner(node, ctx) {
     }
   }
 }
-var useIsomorphicLayoutEffect, ResponsiveGrid, SPLIT_EXPANDED_MIN_WIDTH, SPLIT_COLUMN_GAP, ResponsiveSplitView, ABSOLUTE_URL_RE, appearKeyframesInjected, pressStylesInjected, FOCUS_RING_CSS, focusStylesInjected, HLIST_CHILD_CSS, hListStylesInjected, listAnimateRuntimeInstalled, transitionKeyframesInjected, countUpRuntimeInjected, MEASURE_PREFIX, measureRuntimeInjected, revealRuntimeInjected, vectorAnimStylesInjected, scrollProgressRuntimeInjected, confettiRuntimeInjected, lottieRuntimeInjected, riveRuntimeInjected, gradientKeyframesInjected, parallaxRuntimeInjected, spinKeyframesInjected, marqueeKeyframesInjected, alignItems, zJustifyItems, hAlignItems, bodyFont, kids, rowKids, staggeredKids, asTextL10n, asBoundText, useBoundString, InterpolatedTextView, txt, selectFragmentCase, fragmentValueHash, fragmentSlotContent, FragmentSlotNode, WorkerSubtreeNode, resolveItemDeep2, resolveSwipeActions, resolveModBindings, resolvedComponentId, directServiceBindings, ReactiveDirectScalars, HiddenGate, KEYBOARD_INPUT_MODES, AUTOCAPITALIZE_VALUES, ENTER_KEY_HINTS, AUTOGROW_CEILING, EditableField, MenuNode, LoadMoreSentinel, FieldErrorNode, FormView, MediaSlotProvider, MEDIA_ITEM_BINDABLE, MediaPlayerView, VideoNode, PdfViewNode, WebViewNode, InteractivePicker, InteractiveDatePicker, InteractiveSearchField, InteractiveStepper, SYNTHETIC_TAP_ROLE, SYNTHETIC_TABINDEX, INFERRED_DECORATIVE, ICON_GLYPH, INTERACTIVE_ROLES, ALWAYS_INTERACTIVE_COMPONENT_TYPES, controlNode, ToggleNode, SliderNode, SelectionControlNode, TabsNode, SegmentedControlNode, DisclosureGroupNode, GridNode, SplitViewNode, TextNode, ImageNode, AvatarNode, IconNode, ButtonNode, OtpInputNode, ProgressBarNode, ActivityIndicatorNode, BottomSheetNode, ChipsInputNode, ChipNode, TableNode, GaugeRing, GaugeNode, RATING_METRICS, ratingMetrics, RatingNode, AvatarStripNode, CHART_STROKE_CYCLE, chartStrokeAt, chartBarCenter, ChartNode, donutSliceOpacity, DonutChartNode, LegendMarker, LegendNode, cellAlign, DataTableNode, voiceNoteState, voiceNoteDelivery, VOICE_NOTE_DEFAULT_BARS, clampBarCount, VoiceNoteNode, TimelineNode, WheelPickerNode, ColorPickerNode, FilterChipsNode, TILE_PX, MAX_MERCATOR_LAT, DEFAULT_TILE_MAX_ZOOM, CIRCLE_SEGMENTS, METRES_PER_DEG_LAT, MARKER_HIT_RADIUS, SHAPE_HIT_RADIUS, MapNode, CollapsingHeaderNode, UnsupportedOnSurface, CALENDAR_DATE_ONLY_RE, CAL_DEFAULT_MAX_DOTS, CAL_AGENDA_INITIAL_DAYS, CAL_AGENDA_PAGE_DAYS, CAL_DEFAULT_SNAP_MINUTES, CAL_UNASSIGNED_LANE_ID, MonthCalendarNode, TimeGridNode, AgendaNode, ARIA_ROLE, initialFocusScheduled, initialFocusSeen, PRESENTED_SCOPE, presentedOpeners, presentedObserver, A11yHintDescription, WebRenderer;
+var useIsomorphicLayoutEffect, ResponsiveGrid, SPLIT_EXPANDED_MIN_WIDTH, SPLIT_COLUMN_GAP, ResponsiveSplitView, ABSOLUTE_URL_RE, appearKeyframesInjected, pressStylesInjected, FOCUS_RING_CSS, focusStylesInjected, HLIST_CHILD_CSS, hListStylesInjected, listAnimateRuntimeInstalled, transitionKeyframesInjected, countUpRuntimeInjected, MEASURE_PREFIX, measureRuntimeInjected, revealRuntimeInjected, vectorAnimStylesInjected, scrollProgressRuntimeInjected, confettiRuntimeInjected, lottieRuntimeInjected, riveRuntimeInjected, gradientKeyframesInjected, parallaxRuntimeInjected, spinKeyframesInjected, marqueeKeyframesInjected, alignItems, zJustifyItems, hAlignItems, bodyFont, kids, rowKids, staggeredKids, asTextL10n, asBoundText, useBoundString, InterpolatedTextView, txt, selectFragmentCase, fragmentValueHash, fragmentSlotContent, FragmentSlotNode, WorkerSubtreeNode, resolveItemDeep2, resolveSwipeActions, resolveModBindings, resolvedComponentId, directServiceBindings, ReactiveDirectScalars, HiddenGate, KEYBOARD_INPUT_MODES, AUTOCAPITALIZE_VALUES, ENTER_KEY_HINTS, AUTOGROW_CEILING, EditableField, MenuNode, LoadMoreSentinel, FieldErrorNode, FormView, MediaSlotProvider, MEDIA_ITEM_BINDABLE, MediaPlayerView, VideoNode, PdfViewNode, WebViewNode, InteractivePicker, InteractiveDatePicker, InteractiveSearchField, InteractiveStepper, SYNTHETIC_TAP_ROLE, SYNTHETIC_TABINDEX, INFERRED_DECORATIVE, ICON_GLYPH, ROLE_WHEN_NAMED, AUTHORED_ROLE, INTERACTIVE_ROLES, ALWAYS_INTERACTIVE_COMPONENT_TYPES, controlNode, ToggleNode, SliderNode, SelectionControlNode, TabsNode, SegmentedControlNode, DisclosureGroupNode, GridNode, SplitViewNode, TextNode, ImageNode, AvatarNode, IconNode, ButtonNode, OtpInputNode, ProgressBarNode, ActivityIndicatorNode, BottomSheetNode, ChipsInputNode, ChipNode, TableNode, GaugeRing, GaugeNode, RATING_METRICS, ratingMetrics, RatingNode, AvatarStripNode, CHART_STROKE_CYCLE, chartStrokeAt, chartBarCenter, ChartNode, donutSliceOpacity, DonutChartNode, LegendMarker, LegendNode, cellAlign, DataTableNode, voiceNoteState, voiceNoteDelivery, VOICE_NOTE_DEFAULT_BARS, clampBarCount, VoiceNoteNode, TimelineNode, WheelPickerNode, ColorPickerNode, FilterChipsNode, TILE_PX, MAX_MERCATOR_LAT, DEFAULT_TILE_MAX_ZOOM, CIRCLE_SEGMENTS, METRES_PER_DEG_LAT, MARKER_HIT_RADIUS, SHAPE_HIT_RADIUS, MapNode, CollapsingHeaderNode, UnsupportedOnSurface, CALENDAR_DATE_ONLY_RE, CAL_DEFAULT_MAX_DOTS, CAL_AGENDA_INITIAL_DAYS, CAL_AGENDA_PAGE_DAYS, CAL_DEFAULT_SNAP_MINUTES, CAL_UNASSIGNED_LANE_ID, MonthCalendarNode, TimeGridNode, AgendaNode, ARIA_ROLE, initialFocusScheduled, initialFocusSeen, PRESENTED_SCOPE, presentedOpeners, presentedObserver, A11yHintDescription, WebRenderer;
 var init_renderNode = __esm({
   "../../core/web-renderer/src/renderNode.tsx"() {
     "use strict";
@@ -25743,8 +25876,10 @@ var init_renderNode = __esm({
     init_env();
     init_actionParams();
     init_icons();
+    init_webviewFrame();
     init_icon_catalog_generated();
     init_controls();
+    init_modalStack();
     init_listGestures();
     init_worker_subtree();
     init_preview_surfaces();
@@ -26275,6 +26410,7 @@ var init_renderNode = __esm({
       const popupPlacement = { position: "absolute", top: "100%", right: 0, zIndex: 20, marginTop: 4 };
       const anchorRef = React5.useRef(null);
       const menuRef = React5.useRef(null);
+      const dialogRef = React5.useRef(null);
       const itemsKey = items.map((it, i) => `${it?.id ?? i}:${it?.disabled ? 0 : 1}`).join("|");
       React5.useEffect(() => {
         if (!open || !modal) return;
@@ -26284,7 +26420,9 @@ var init_renderNode = __esm({
       }, [open, modal, itemsKey]);
       React5.useEffect(() => {
         if (!open || !modal) return;
+        const layer = pushModalLayer(() => dialogRef.current);
         return () => {
+          layer.release();
           const active = document.activeElement;
           if (active == null || active === document.body || !document.contains(active)) anchorRef.current?.focus();
         };
@@ -26322,11 +26460,11 @@ var init_renderNode = __esm({
                 setOpen((v) => !v);
               }
             },
-            style: { display: "inline-flex", alignItems: "center", cursor: "pointer" },
+            style: { display: "inline-flex", alignItems: "center", justifyContent: "center", minWidth: 44, minHeight: 44, cursor: "pointer" },
             children: props.anchor ? renderNode(props.anchor, ctx) : iconSvg("more", { size: 20, color: C("textSecondary", "#636b78") })
           }
         ),
-        open && wrapModalMenu(modal, anchorLabel, popupPlacement, /* @__PURE__ */ jsx6(
+        open && wrapModalMenu(modal, anchorLabel, popupPlacement, dialogRef, /* @__PURE__ */ jsx6(
           "div",
           {
             ref: menuRef,
@@ -26958,13 +27096,14 @@ var init_renderNode = __esm({
       const inlineHtml = props.inlineHtml != null && isBinding(props.inlineHtml) ? boundHtml : props.inlineHtml;
       const urlStr = typeof url === "string" && url.length > 0 && !isBinding(url) ? url : void 0;
       const htmlStr = typeof inlineHtml === "string" && inlineHtml.length > 0 && !isBinding(inlineHtml) ? inlineHtml : void 0;
+      const urlFrame = urlStr ? webviewFrameSandbox(urlStr) : null;
       const h = typeof props.height === "number" && props.height > 0 ? props.height : void 0;
       const ar = typeof props.aspectRatio === "number" && props.aspectRatio > 0 ? props.aspectRatio : void 0;
       const frameStyle = { width: "100%", boxSizing: "border-box", border: "none", borderRadius: ctx.radius("md", 8), background: "#fff", ...h ? { height: h } : ar ? { aspectRatio: String(ar) } : { height: 200 } };
       const bandColor = typeof props.coverBandColor === "string" && props.coverBandColor.length > 0 ? props.coverBandColor : void 0;
       return /* @__PURE__ */ jsxs3("div", { style: { width: "100%", position: "relative", ...bandColor ? { background: bandColor, borderRadius: ctx.radius("md", 8), overflow: "hidden" } : {}, ...wrap }, children: [
         bandColor ? /* @__PURE__ */ jsx6("div", { "data-testid": "webview-cover-band", style: { height: 8, background: bandColor } }) : null,
-        htmlStr ? /* @__PURE__ */ jsx6("iframe", { title: "webview", srcDoc: htmlStr, sandbox: "allow-scripts", style: frameStyle }) : urlStr ? /* @__PURE__ */ jsx6("iframe", { title: "webview", src: urlStr, sandbox: "allow-scripts allow-same-origin", style: frameStyle }) : /* @__PURE__ */ jsx6("div", { style: { ...frameStyle, display: "grid", placeItems: "center", color: "#999", fontFamily: "ui-monospace, monospace", fontSize: 11, border: "1px dashed #ccc" }, children: "WebView (no url)" })
+        htmlStr ? /* @__PURE__ */ jsx6("iframe", { title: "webview", srcDoc: htmlStr, sandbox: "allow-scripts", style: frameStyle }) : urlFrame ? /* @__PURE__ */ jsx6("iframe", { title: "webview", src: urlFrame.src, sandbox: urlFrame.sandbox, style: frameStyle }) : /* @__PURE__ */ jsx6("div", { style: { ...frameStyle, display: "grid", placeItems: "center", color: "#999", fontFamily: "ui-monospace, monospace", fontSize: 11, border: "1px dashed #ccc" }, children: urlStr ? "WebView (url not allowed)" : "WebView (no url)" })
       ] });
     });
     InteractivePicker = withExtras("InteractivePicker", ({ props, ctx, wrap }) => {
@@ -27242,6 +27381,8 @@ var init_renderNode = __esm({
     SYNTHETIC_TABINDEX = "data-hm-synthetic-tabindex";
     INFERRED_DECORATIVE = "data-hm-inferred-decorative";
     ICON_GLYPH = "data-hm-icon-glyph";
+    ROLE_WHEN_NAMED = "data-hm-role-when-named";
+    AUTHORED_ROLE = "data-hm-authored-role";
     INTERACTIVE_ROLES = /* @__PURE__ */ new Set([
       "button",
       "checkbox",
@@ -27388,7 +27529,7 @@ var init_renderNode = __esm({
       const tAlign = props.textAlign === "center" ? "center" : props.textAlign === "trailing" ? "right" : props.textAlign === "justify" ? "justify" : props.textAlign === "leading" ? "left" : void 0;
       const tDecor = props.decoration === "strikethrough" ? "line-through" : props.decoration === "underline" ? "underline" : void 0;
       const ln = typeof props.lineSpacing === "number" ? pxToRem((f.line ?? 1.4) * f.size + props.lineSpacing) : f.line;
-      return /* @__PURE__ */ jsx6("div", { ...countAttrs, style: { fontFamily: fontStack(f.family, ctx.idiom), fontSize: f.remSize, fontWeight: f.weight, lineHeight: ln, letterSpacing: f.letterSpacing, color: C(resolveScalarStatic(props.color, ctx) ?? "textPrimary", "#13171e"), whiteSpace: "pre-wrap", overflowWrap: "anywhere", wordBreak: "break-word", minWidth: 0, ...tAlign ? { textAlign: tAlign } : {}, ...tDecor ? { textDecoration: tDecor } : {}, ...props.maxLines ? { display: "-webkit-box", WebkitLineClamp: props.maxLines, WebkitBoxOrient: "vertical", overflow: "hidden" } : {}, ...wrap }, children: content == null || content === "" ? collapse ? null : "\xA0" : content });
+      return /* @__PURE__ */ jsx6("div", { ...countAttrs, style: { fontFamily: fontStack(f.family, ctx.idiom), fontSize: f.remSize, fontWeight: f.weight, lineHeight: ln, letterSpacing: f.letterSpacing, color: C(resolveScalarStatic(props.color, ctx) ?? "textPrimary", "#13171e"), whiteSpace: props.maxLines === 1 ? "nowrap" : "pre-wrap", overflowWrap: "anywhere", wordBreak: "break-word", minWidth: 0, ...tAlign ? { textAlign: tAlign } : {}, ...tDecor ? { textDecoration: tDecor } : {}, ...props.maxLines === 1 ? { overflow: "hidden", textOverflow: "ellipsis" } : props.maxLines ? { display: "-webkit-box", WebkitLineClamp: props.maxLines, WebkitBoxOrient: "vertical", overflow: "hidden" } : {}, ...wrap }, children: content == null || content === "" ? collapse ? null : "\xA0" : content });
     });
     ImageNode = withExtras("ImageNode", ({ props, ctx, wrap }) => {
       const C = ctx.color;
@@ -27449,7 +27590,7 @@ var init_renderNode = __esm({
       const iconName = isBinding(props.name) ? String(bound ?? "") : props.name;
       const contentDescription = useResolvedScalar(props.contentDescription, ctx);
       const described = contentDescription != null && String(contentDescription).trim() !== "";
-      const a11y = described ? { role: "img", "aria-label": String(contentDescription), [ICON_GLYPH]: true } : { "aria-hidden": "true", [INFERRED_DECORATIVE]: true, [ICON_GLYPH]: true };
+      const a11y = described ? { role: "img", "aria-label": String(contentDescription), [ICON_GLYPH]: true } : { "aria-hidden": "true", [INFERRED_DECORATIVE]: true, [ICON_GLYPH]: true, [ROLE_WHEN_NAMED]: "img" };
       return /* @__PURE__ */ jsx6("span", { ...a11y, style: { display: "inline-grid", placeItems: "center", width: size + 6, height: size + 6, lineHeight: 1, flex: "none", ...wrap }, children: iconSvg(iconName, { size, color: C(resolveScalarStatic(props.tint, ctx) ?? "textPrimary", "#636b78") }) });
     });
     ButtonNode = withExtras("ButtonNode", ({ props, ctx, wrap }) => {
@@ -27585,11 +27726,13 @@ var init_renderNode = __esm({
       const thick = Math.max(3, Math.round(size / 8));
       const bound = useResolvedScalar(props.valuePath, ctx);
       const aiRaw = props.valuePath != null ? bound : props.value;
-      const determinate = !props.indeterminate && typeof aiRaw === "number";
+      const aiNum = typeof aiRaw === "number" ? aiRaw : typeof aiRaw === "string" && aiRaw.trim() !== "" ? Number(aiRaw) : void 0;
+      const determinate = !props.indeterminate && aiNum !== void 0 && Number.isFinite(aiNum);
       if (determinate) {
-        const pct = Math.max(0, Math.min(1, aiRaw));
+        const pct = Math.max(0, Math.min(1, aiNum));
         const ringMask = `radial-gradient(farthest-side, transparent calc(100% - ${thick}px), #000 calc(100% - ${thick}px))`;
-        return /* @__PURE__ */ jsx6("div", { role: "progressbar", style: { width: size, height: size, borderRadius: "50%", flex: "none", background: `conic-gradient(${tint} ${pct * 360}deg, ${track} 0deg)`, WebkitMask: ringMask, mask: ringMask, ...wrap } });
+        const a11y = { "aria-valuemin": 0, "aria-valuemax": 100, "aria-valuenow": Math.round(pct * 100) };
+        return /* @__PURE__ */ jsx6("div", { role: "progressbar", ...a11y, style: { width: size, height: size, borderRadius: "50%", flex: "none", background: `conic-gradient(${tint} ${pct * 360}deg, ${track} 0deg)`, WebkitMask: ringMask, mask: ringMask, ...wrap } });
       }
       ensureSpinKeyframes();
       return /* @__PURE__ */ jsx6("div", { role: "progressbar", style: { width: size, height: size, borderRadius: "50%", border: `${thick}px solid ${track}`, borderTopColor: tint, boxSizing: "border-box", flex: "none", animation: ctx.empty ? void 0 : "himalaya-spin 0.8s linear infinite", ...wrap } });
@@ -28264,18 +28407,23 @@ var init_renderNode = __esm({
         const next = multiSelect ? isSel ? selected.filter((x) => x !== id) : [...selected, id] : isSel ? [] : [id];
         ctx.onAction({ ...onChange, args: { ...onChange.args ?? {}, selectedIds: next } });
       };
-      return /* @__PURE__ */ jsx6("div", { role: "group", style: { display: "flex", gap: 8, flexWrap: "wrap", width: "100%", ...wrap }, children: chips.map((c, i) => {
-        const on3 = selected.includes(c.id);
-        const chipStyle = { display: "flex", gap: 6, alignItems: "center", fontFamily: bodyFont(ctx), fontWeight: 500, fontSize: 13, border: `1px solid ${on3 ? "transparent" : C("border", "#ddd")}`, background: on3 ? C("accentPrimary", "#116DFF") : "transparent", color: on3 ? C("textOnAccent", "#fff") : C("textSecondary", "#666"), padding: "6px 12px", borderRadius: 999 };
-        const inner = /* @__PURE__ */ jsxs3(Fragment3, { children: [
-          asText2(c.label),
-          c.count != null && /* @__PURE__ */ jsxs3(Fragment3, { children: [
-            " ",
-            /* @__PURE__ */ jsx6("span", { style: { opacity: 0.7, fontSize: 11 }, children: c.count })
-          ] })
-        ] });
-        return interactive ? /* @__PURE__ */ jsx6("button", { type: "button", "aria-pressed": on3, onClick: () => toggle(c.id), style: { all: "unset", cursor: "pointer", boxSizing: "border-box", ...chipStyle }, children: inner }, c.id ?? i) : /* @__PURE__ */ jsx6("span", { style: chipStyle, children: inner }, c.id ?? i);
-      }) });
+      return (
+        // ONE horizontally scrolling row, like the iOS ScrollView(.horizontal) and the
+        // Android LazyRow. Wrapping here turned a long filter set into a ragged grid and
+        // pushed a sibling count onto two lines (#3080, #3004).
+        /* @__PURE__ */ jsx6("div", { role: "group", style: { display: "flex", gap: 8, flexWrap: "nowrap", overflowX: "auto", scrollbarWidth: "none", width: "100%", minWidth: 0, ...wrap }, children: chips.map((c, i) => {
+          const on3 = selected.includes(c.id);
+          const chipStyle = { display: "flex", flex: "none", whiteSpace: "nowrap", gap: 6, alignItems: "center", fontFamily: bodyFont(ctx), fontWeight: 500, fontSize: 13, border: `1px solid ${on3 ? "transparent" : C("border", "#ddd")}`, background: on3 ? C("accentPrimary", "#116DFF") : "transparent", color: on3 ? C("textOnAccent", "#fff") : C("textSecondary", "#666"), padding: "6px 12px", borderRadius: 999 };
+          const inner = /* @__PURE__ */ jsxs3(Fragment3, { children: [
+            asText2(c.label),
+            c.count != null && /* @__PURE__ */ jsxs3(Fragment3, { children: [
+              " ",
+              /* @__PURE__ */ jsx6("span", { style: { opacity: 0.7, fontSize: 11 }, children: c.count })
+            ] })
+          ] });
+          return interactive ? /* @__PURE__ */ jsx6("button", { type: "button", "aria-pressed": on3, onClick: () => toggle(c.id), style: { all: "unset", cursor: "pointer", boxSizing: "border-box", ...chipStyle }, children: inner }, c.id ?? i) : /* @__PURE__ */ jsx6("span", { style: chipStyle, children: inner }, c.id ?? i);
+        }) })
+      );
     });
     TILE_PX = 256;
     MAX_MERCATOR_LAT = 85.05112878;
@@ -29279,6 +29427,7 @@ __export(src_exports, {
   isBinding: () => isBinding,
   isNodeLike: () => isNodeLike,
   isSerifFamily: () => isSerifFamily,
+  isWebviewUrlAllowed: () => isWebviewUrlAllowed,
   makeCtx: () => makeCtx,
   makeModStyle: () => makeModStyle,
   makeTokenResolvers: () => makeTokenResolvers,
@@ -29287,7 +29436,8 @@ __export(src_exports, {
   renderDescriptorToHtml: () => renderDescriptorToHtml,
   renderNode: () => renderNode,
   servicePath: () => servicePath,
-  useBoundValue: () => useBoundValue
+  useBoundValue: () => useBoundValue,
+  webviewFrameSandbox: () => webviewFrameSandbox
 });
 var init_src3 = __esm({
   "../../core/web-renderer/src/index.ts"() {
@@ -29301,6 +29451,7 @@ var init_src3 = __esm({
     init_AppRegistry();
     init_helpers();
     init_icons();
+    init_webviewFrame();
   }
 });
 
@@ -32789,18 +32940,18 @@ function startBundleArtifactWatcher(state) {
     });
   };
   try {
-    const watcher = watch(TIER5_ROOT2, { persistent: false }, (_event, filename) => {
+    const watcher2 = watch(TIER5_ROOT2, { persistent: false }, (_event, filename) => {
       const bundle = builtBundleName(filename);
       if (!bundle) return;
       pending.add(bundle);
       if (timer) clearTimeout(timer);
       timer = setTimeout(flush, 120);
     });
-    watcher.on("error", (err) => {
+    watcher2.on("error", (err) => {
       console.warn(`[himalaya-dev] bundle watcher stopped: ${err.message}`);
     });
     console.log(`[himalaya-dev] watching built bundles: ${TIER5_ROOT2}`);
-    return watcher;
+    return watcher2;
   } catch (err) {
     console.warn(`[himalaya-dev] bundle watcher unavailable: ${err.message}`);
     return void 0;
@@ -32835,7 +32986,7 @@ function startBundleSourceWatcher(state) {
     building = false;
   };
   try {
-    const watcher = watch(TIER5_SRC_ROOT, { persistent: false, recursive: true }, (_event, filename) => {
+    const watcher2 = watch(TIER5_SRC_ROOT, { persistent: false, recursive: true }, (_event, filename) => {
       if (!filename || !/\.(ts|tsx)$/.test(filename)) return;
       const name = filename.split(sep7)[0];
       if (!name || name.startsWith(".")) return;
@@ -32843,11 +32994,11 @@ function startBundleSourceWatcher(state) {
       if (timer) clearTimeout(timer);
       timer = setTimeout(flush, 200);
     });
-    watcher.on("error", (err) => {
+    watcher2.on("error", (err) => {
       console.warn(`[himalaya-dev] bundle source watcher stopped: ${err.message}`);
     });
     console.log(`[himalaya-dev] watching T5 bundle sources: ${TIER5_SRC_ROOT}`);
-    return watcher;
+    return watcher2;
   } catch (err) {
     console.warn(`[himalaya-dev] bundle source watcher unavailable: ${err.message}`);
     return void 0;
@@ -33015,7 +33166,7 @@ function startAppSourceWatcher(state) {
     }
   };
   try {
-    const watcher = watch(appDir2, { persistent: false, recursive: true }, (_event, filename) => {
+    const watcher2 = watch(appDir2, { persistent: false, recursive: true }, (_event, filename) => {
       if (!filename) return;
       const rel = String(filename).split(sep7).join("/");
       if (!classifyAppPath(rel)) return;
@@ -33023,11 +33174,11 @@ function startAppSourceWatcher(state) {
       if (timer) clearTimeout(timer);
       timer = setTimeout(flush, 200);
     });
-    watcher.on("error", (err) => {
+    watcher2.on("error", (err) => {
       console.warn(`[himalaya-dev] app source watcher stopped: ${err.message}`);
     });
     console.log(`[himalaya-dev] watching app source: ${appDir2}`);
-    return watcher;
+    return watcher2;
   } catch (err) {
     console.warn(`[himalaya-dev] app source watcher unavailable: ${err.message}`);
     return void 0;
@@ -35697,10 +35848,10 @@ function cmsAnswer(seed2, method, bare, body) {
     pagingMetadata: { count: rows.length, tooManyToCount: false }
   };
 }
-function layeredTransport(layers) {
-  const rules = layers.rules?.length ? [...layers.rules] : null;
-  const cms = layers.cmsSeed && Object.keys(layers.cmsSeed).length ? layers.cmsSeed : null;
-  const canned = layers.canned && Object.keys(layers.canned).length ? layers.canned : null;
+function layeredTransport(layers2) {
+  const rules = layers2.rules?.length ? [...layers2.rules] : null;
+  const cms = layers2.cmsSeed && Object.keys(layers2.cmsSeed).length ? layers2.cmsSeed : null;
+  const canned = layers2.canned && Object.keys(layers2.canned).length ? layers2.canned : null;
   const label2 = [rules && "mocked", cms && "cms", canned && "canned"].filter(Boolean).join("+") || "offline";
   const call = async (method, path2, body) => {
     const m = String(method).toUpperCase();
@@ -39030,6 +39181,332 @@ var init_net_freeze = __esm({
   }
 });
 
+// src/studio-page.ts
+function renderStudioHtml(initial) {
+  const accent = initial.app.palette.find((p) => p.name === "accentPrimary")?.hex ?? "#3b6fd8";
+  return `<!doctype html>
+<html lang="en">
+<head>
+<meta charset="utf-8">
+<meta name="viewport" content="width=device-width, initial-scale=1">
+<title>${escapeHtml(initial.app.name)} \xB7 build board</title>
+<link rel="icon" id="fav" href="data:,">
+<style>
+:root{--bg:#f6f5f2;--card:#fff;--ink:#1c1c1a;--muted:#6b6a64;--faint:#a3a19a;--line:#e6e3dc;--ok:#1f7a4d;--okbg:#e3f3ea;--warn:#8a5a00;--warnbg:#fbefd6;--bad:#a12a2a;--badbg:#fbe4e4;--accent:${accent};--shadow:0 1px 2px rgba(0,0,0,.04),0 4px 16px rgba(0,0,0,.04)}
+@media (prefers-color-scheme:dark){:root{--bg:#121211;--card:#1c1c1a;--ink:#ecebe6;--muted:#a3a19a;--faint:#6b6a64;--line:#2c2b28;--okbg:#15301f;--ok:#7fd3a2;--warnbg:#33270f;--warn:#f0c46b;--badbg:#3a1616;--bad:#f09a9a;--shadow:none}}
+*{box-sizing:border-box}body{margin:0;background:var(--bg);color:var(--ink);font:14px/1.5 -apple-system,BlinkMacSystemFont,"Segoe UI",Roboto,Helvetica,Arial,sans-serif}
+.wrap{max-width:1180px;margin:0 auto;padding:20px 20px 60px}
+header{display:flex;align-items:center;gap:12px;margin-bottom:16px}
+.icon{width:40px;height:40px;border-radius:10px;background:var(--accent);object-fit:cover;flex:none}
+h1{font-size:20px;font-weight:600;margin:0}.sub{color:var(--muted);font-size:13px}
+.right{margin-left:auto;text-align:right}.clock{font-size:22px;font-variant-numeric:tabular-nums;font-weight:600}
+.live{display:inline-flex;align-items:center;gap:6px;color:var(--muted);font-size:12px}.dot{width:8px;height:8px;border-radius:50%;background:var(--ok)}.stale .dot{background:var(--faint)}
+.steps{display:grid;grid-template-columns:repeat(8,1fr);gap:6px;margin:4px 0 16px}.step .bar{height:6px;border-radius:3px;background:var(--line)}.step.done .bar{background:var(--ok)}.step.cur .bar{background:var(--accent)}
+.step .lbl{font-size:11px;color:var(--faint);margin-top:4px;text-transform:capitalize}.step.cur .lbl{color:var(--ink);font-weight:600}
+.card{background:var(--card);border:1px solid var(--line);border-radius:14px;padding:14px 16px;box-shadow:var(--shadow)}
+.now{display:flex;gap:12px;align-items:flex-start;margin-bottom:16px}.now .msg{font-size:16px}.now .meta{color:var(--muted);font-size:12px}
+.grid{display:grid;grid-template-columns:320px 1fr;gap:16px;align-items:start}@media (max-width:860px){.grid{grid-template-columns:1fr}.steps .lbl{display:none}}
+h2{font-size:12px;font-weight:600;color:var(--muted);text-transform:uppercase;letter-spacing:.04em;margin:0 0 10px}
+.phone{width:100%;max-width:300px;aspect-ratio:390/844;border-radius:34px;border:9px solid #111;background:#fff;overflow:hidden;margin:0 auto;display:block}
+.phone img,.phone iframe{width:100%;height:100%;object-fit:cover;object-position:top;border:0;display:block;cursor:zoom-in}
+.phone.vpf{position:relative}.phone iframe.vp{position:absolute;top:0;left:0;width:390px;height:844px;transform-origin:0 0;transform:scale(var(--k,.72));cursor:auto}
+.cap{text-align:center;color:var(--muted);font-size:12px;margin-top:8px}
+.film{display:flex;gap:6px;overflow-x:auto;margin-top:12px;padding-bottom:4px}.film img{width:48px;aspect-ratio:390/844;object-fit:cover;object-position:top;border-radius:8px;border:1px solid var(--line);cursor:zoom-in}
+.chips{display:flex;flex-wrap:wrap;gap:8px;margin-bottom:16px}.chip{font-size:12px;padding:5px 10px;border-radius:999px;background:var(--card);border:1px solid var(--line);color:var(--muted)}
+.chip.ok{background:var(--okbg);color:var(--ok);border-color:transparent}.chip.warn{background:var(--warnbg);color:var(--warn);border-color:transparent}.chip.bad{background:var(--badbg);color:var(--bad);border-color:transparent}
+.wall{display:grid;grid-template-columns:repeat(auto-fill,minmax(112px,1fr));gap:14px}
+.shot{text-align:center}.shot .frame{aspect-ratio:390/844;border-radius:16px;border:5px solid #111;overflow:hidden;background:#fff}.shot img{width:100%;height:100%;object-fit:cover;object-position:top;display:block;cursor:zoom-in}
+.shot .id{font-size:12px;margin-top:6px;word-break:break-all}.badge{display:inline-block;font-size:10px;padding:1px 7px;border-radius:999px;margin-top:3px}.badge.new{background:var(--okbg);color:var(--ok)}.badge.chg{background:var(--warnbg);color:var(--warn)}
+.section{margin-bottom:16px}.brand{display:flex;gap:14px;align-items:center;flex-wrap:wrap}.brand .site{width:220px;border-radius:10px;border:1px solid var(--line);cursor:zoom-in}
+.sw{display:flex;gap:6px}.sw span{width:22px;height:22px;border-radius:50%;border:1px solid var(--line)}
+.nav{display:flex;flex-wrap:wrap;gap:6px}.nav span{font-size:12px;padding:3px 8px;border-radius:6px;background:var(--bg);border:1px solid var(--line)}
+.log{list-style:none;margin:0;padding:0}.log li{display:flex;gap:10px;padding:10px 0;border-top:1px solid var(--line)}.log li:first-child{border-top:0}
+.log .t{color:var(--faint);font-size:12px;min-width:64px;font-variant-numeric:tabular-nums}.log .s{font-size:11px;color:var(--muted);text-transform:capitalize}.log .imgs{display:flex;gap:6px;margin-top:6px}.log .imgs img{height:72px;border-radius:8px;border:1px solid var(--line);cursor:zoom-in}
+.empty{color:var(--faint);font-size:13px;padding:8px 0}
+#lb{position:fixed;inset:0;background:rgba(0,0,0,.72);display:none;align-items:center;justify-content:center;z-index:9;cursor:zoom-out}#lb img{max-height:92vh;max-width:92vw;border-radius:14px;background:#fff}
+.enter{animation:enter .7s cubic-bezier(.2,.8,.2,1) both}@keyframes enter{from{opacity:0;transform:translateY(10px) scale(.94);filter:grayscale(1)}to{opacity:1;transform:none;filter:none}}
+.changed .frame{animation:chg .9s ease both}@keyframes chg{35%{opacity:.25;transform:scale(.96)}100%{opacity:1;transform:none}}
+.step.fresh .bar{animation:fill .7s ease both;transform-origin:left}@keyframes fill{from{transform:scaleX(0)}to{transform:scaleX(1)}}
+.slidein{animation:slide .45s cubic-bezier(.2,.8,.2,1) both}@keyframes slide{from{opacity:0;transform:translateY(-8px)}to{opacity:1;transform:none}}
+.phone.pulse{animation:pulse 1s ease-out}.phone.pulse.bad{animation-name:pulsebad}@keyframes pulse{from{outline:3px solid var(--ok);outline-offset:0}to{outline:3px solid transparent;outline-offset:10px}}@keyframes pulsebad{from{outline:3px solid var(--bad);outline-offset:0}to{outline:3px solid transparent;outline-offset:10px}}
+.toast{display:block;width:max-content;max-width:100%;margin:8px auto 0;font-size:12px;padding:4px 10px;border-radius:999px;background:var(--okbg);color:var(--ok);animation:toast 3.4s ease both}.toast.bad{background:var(--badbg);color:var(--bad)}@keyframes toast{0%{opacity:0;transform:translateY(4px)}10%,80%{opacity:1;transform:none}100%{opacity:0}}
+.icon,.step.cur .bar{transition:background-color .8s}.sw.pop span{animation:pop .6s ease both}@keyframes pop{50%{transform:scale(1.25)}}
+.quiet{color:var(--warn)}.quiet .dot{background:var(--warn)}.idle .dot{background:var(--faint)}
+.tog{font:inherit;font-size:12px;color:var(--muted);background:none;border:1px solid var(--line);border-radius:999px;padding:2px 9px;margin:6px 0 0 6px;cursor:pointer}.tog.on{color:var(--ink);border-color:var(--ink)}
+#fx{position:fixed;inset:0;width:100%;height:100%;pointer-events:none;z-index:8}
+@media (max-width:560px){header{flex-wrap:wrap}.right{margin-left:0;width:100%;text-align:left;display:flex;flex-wrap:wrap;align-items:center;gap:4px 12px}.right .clock{font-size:18px}.tog{margin:0 6px 0 0}}
+.scrub{display:flex;align-items:center;gap:8px;margin:-6px 0 4px}.scrub[hidden]{display:none}.scrub input{flex:1;min-width:0}
+.scrub .rd{font-size:12px;color:var(--muted);min-width:160px;font-variant-numeric:tabular-nums}
+.marks{position:relative;height:8px;margin:0 9px 12px}.marks span{position:absolute;top:0;width:7px;height:7px;border-radius:50%;background:var(--faint);transform:translateX(-50%)}.marks .ms{background:var(--warn)}.marks .bad{background:var(--bad)}
+.viewing{font-size:13px;padding:6px 10px;border-radius:8px;background:var(--warnbg);color:var(--warn);margin:0 0 12px}.viewing[hidden]{display:none}.viewing a{color:inherit}
+.newdot{display:inline-block;width:8px;height:8px;border-radius:50%;background:var(--bad);margin-left:6px;vertical-align:middle}.newdot[hidden]{display:none}
+#focus[hidden],#still[hidden]{display:none}
+.reveal{position:fixed;inset:0;z-index:7;display:flex;align-items:center;justify-content:center;background:rgba(0,0,0,.5)}.reveal[hidden]{display:none}
+.rv{background:var(--card);border-radius:16px;padding:18px;max-width:760px;width:calc(100% - 32px)}.rv h3{margin:0;font-size:18px}.rv .row{display:grid;grid-template-columns:repeat(auto-fit,minmax(200px,1fr));gap:16px;margin-top:12px}
+.rv figure{margin:0}.rv figcaption{font-size:12px;color:var(--muted);margin-bottom:6px}.rv .site img{width:100%;border-radius:10px;border:1px solid var(--line)}
+.rv .ph{position:relative;aspect-ratio:390/844;max-height:60vh;border-radius:22px;border:6px solid #111;overflow:hidden;background:#fff;margin:0 auto}.rv .ph img{position:absolute;inset:0;width:100%;height:100%;object-fit:cover;object-position:top}
+.rv .after{clip-path:inset(0 100% 0 0);transition:clip-path 1.4s cubic-bezier(.6,0,.2,1)}.rv.on .after{clip-path:inset(0 0 0 0)}
+@media (prefers-reduced-motion:reduce){.rv .after{transition:none}.enter,.changed .frame,.step.fresh .bar,.slidein,.phone.pulse,.sw.pop span,.toast{animation:none}.icon,.step.cur .bar{transition:none}}
+</style>
+</head>
+<body>
+<div class="wrap">
+<header><img class="icon" id="icon" alt=""><div><h1 id="name"></h1><div class="sub">Build board \xB7 updates itself as the app is built</div></div>
+<div class="right"><div class="clock" id="clock">00:00</div><div class="live" id="live"><span class="dot"></span><span id="updated">live</span></div>
+<div><span class="live idle" id="agent"><span class="dot"></span><span id="agentt">Waiting for the agent</span></span></div>
+<div><button class="tog" id="snd" type="button" aria-pressed="false">Sound off</button><button class="tog" id="say" type="button" aria-pressed="false" hidden>Read aloud: off</button><button class="tog" id="ntf" type="button" aria-pressed="false" hidden>Notices off</button></div></div></header>
+<div class="steps" id="steps"></div>
+<div class="scrub" id="scrub" hidden><button class="tog" id="replay" type="button">Replay</button><input type="range" id="slider" min="0" max="1" step="1" value="1" aria-label="Build timeline"><span class="rd" id="readout"></span><button class="tog" id="golive" type="button">Live<span class="newdot" id="newdot" hidden></span></button></div>
+<div class="marks" id="marks"></div>
+<div class="viewing" id="viewing" hidden>Viewing <span id="viewingt"></span> \xB7 <a href="#" id="backlive">Back to live</a></div>
+<div class="card now"><div style="flex:1"><div class="meta" id="nowmeta">Now</div><div class="msg" id="nowmsg"></div></div></div>
+<div class="grid">
+<div><div class="card"><h2 id="focuslbl">Latest</h2><div id="focus"></div><div id="still" hidden></div><div class="film" id="film"></div>
+<button class="tog" id="pop" type="button" hidden>Pop out phone</button></div></div>
+<div>
+<div class="chips" id="chips"></div>
+<div class="card section"><h2>Screens</h2><div class="wall" id="wall"></div></div>
+<div class="card section" id="brandcard"><h2>Brand</h2><div class="brand" id="brand"></div></div>
+<div class="card section" id="navcard"><h2>Navigation the test crawl followed</h2><div class="nav" id="nav"></div></div>
+<div class="card section"><h2>Postcards</h2><ul class="log" id="log"></ul></div>
+</div></div></div>
+<div id="lb"><img alt=""></div>
+<div class="reveal" id="reveal" hidden role="dialog" aria-labelledby="rvh"><div class="rv" id="rv"><div style="display:flex;justify-content:space-between;align-items:center;gap:12px"><h3 id="rvh">Your brand, in your app</h3><button class="tog" id="rvx" type="button">Close</button></div><div class="row" id="rvrow"></div></div></div>
+<canvas id="fx" aria-hidden="true"></canvas>
+<script>window.__himiInitial = ${scriptJson(initial)};</script>
+<script>
+(function(){
+var cur=null, lastSeen=Date.now();
+function $(id){return document.getElementById(id)}
+function el(tag,cls,txt){var e=document.createElement(tag);if(cls)e.className=cls;if(txt!=null)e.textContent=txt;return e}
+function clear(e){while(e.firstChild)e.removeChild(e.firstChild)}
+function nowMs(){return asOf||Date.now()}
+function ago(ts){var s=Math.max(0,Math.round((nowMs()-Date.parse(ts))/1000));if(s<60)return s+"s ago";var m=Math.round(s/60);if(m<60)return m+" min ago";return Math.round(m/60)+" h ago"}
+function hhmm(ts){var d=new Date(ts);return d.toLocaleTimeString([], {hour:"2-digit",minute:"2-digit"})}
+function recent(ts){return nowMs()-Date.parse(ts)<10*60*1000}
+function zoomable(img){img.addEventListener("click",function(){var lb=$("lb");lb.firstChild.src=img.src;lb.style.display="flex"})}
+function img(src,cls){var i=el("img",cls);i.src=src;i.alt="";i.loading="lazy";zoomable(i);return i}
+function chip(txt,kind){return el("span","chip"+(kind?" "+kind:""),txt)}
+function render(s){
+  var sn=s.current?s.current.stepNumber:0;document.title=(sn?"("+sn+"/8) ":"")+s.app.name+" \xB7 build board";favicon(sn,!!(s.live&&s.live.buildError));$("name").textContent=s.app.name;
+  if(s.app.icon){$("icon").src=s.app.icon}else{$("icon").removeAttribute("src")}
+  var steps=$("steps");clear(steps);var n=s.current?s.current.stepNumber:0;
+  s.steps.forEach(function(name,i){var d=el("div","step"+(i+1<n?" done":i+1===n?" cur":""));d.appendChild(el("div","bar"));d.appendChild(el("div","lbl",(i+1)+". "+name));steps.appendChild(d)});
+  var last=s.journal[0];
+  $("nowmsg").textContent=last?last.message:"Waiting for the first postcard.";
+  $("nowmeta").textContent=last?("Now \xB7 "+(last.step?("step "+last.stepNumber+" of 8, "+last.step+" \xB7 "):"")+ago(last.ts)):"Now";
+  var film=$("film");clear(film);
+  if(!rewinding){var n0=s.timelineFrames||0;$("scrub").hidden=n0<2;$("slider").max=String(Math.max(1,n0-1));$("slider").value=$("slider").max}
+  if(rewinding){paintStill(s)}else{$("still").hidden=true;$("focus").hidden=false;var focus=$("focus");
+  /* The live frame is KEPT across renders while its URL and its run are unchanged (a restarted run on
+     the same port is a different server, and the old frame would never see its builds). A new iframe is a full page
+     load of the preview: every postcard, rebuild and the once-a-minute re-render used to throw away
+     the in-place repaint, the preview's scroll and wherever the owner had navigated inside it. */
+  if(pip&&(!s.live||pip.frame.getAttribute("src")!==s.live.url||pip.frame.getAttribute("data-run")!==s.live.runId))bringBack();
+  if(pip){paintStrip(s)}else{
+  var kept=s.live?focus.querySelector("iframe"):null;if(kept&&(kept.getAttribute("src")!==s.live.url||kept.getAttribute("data-run")!==s.live.runId))kept=null;
+  if(kept){while(focus.lastChild&&focus.lastChild!==kept.parentNode)focus.removeChild(focus.lastChild)}else clear(focus);
+  if(s.live){$("focuslbl").textContent="Live preview";if(!kept){var f=el("div","phone vpf");var fr=document.createElement("iframe");fr.className="vp";fr.setAttribute("width","390");fr.setAttribute("height","844");fr.setAttribute("data-run",s.live.runId);fr.src=s.live.url;fr.title="Live preview";f.appendChild(fr);focus.appendChild(f)}fit();if(s.live.buildError){var be=el("div","chip bad",null);be.style.display="block";be.style.marginTop="8px";be.textContent="Last edit did not build, still showing the last good version: "+s.live.buildError;focus.appendChild(be)}focus.appendChild(el("div","cap",(s.live.watching?"Repaints as the app is edited \xB7 ":"The build this run started with; himi run --watch repaints on every edit \xB7 ")+s.live.url))}
+  else if(s.focus&&s.focus.frames.length){var fl=s.focus.frames;$("focuslbl").textContent="Latest \xB7 "+s.focus.id;var p=el("div","phone");p.appendChild(img(fl[fl.length-1].img));focus.appendChild(p);focus.appendChild(el("div","cap",fl.length+(fl.length===1?" version":" versions")+" so far"))}
+  else{$("focuslbl").textContent="Latest";focus.appendChild(el("div","empty","The first render appears here."))}
+  if(s.focus&&s.focus.frames.length>1)s.focus.frames.forEach(function(fm){film.appendChild(img(fm.img))});}}
+  var chips=$("chips");clear(chips);var h=s.health;
+  if(h.validate)chips.appendChild(chip(h.validate.ok?"Validate passing":"Validate: "+h.validate.errors+" errors",h.validate.ok?"ok":"bad"));
+  if(h.test){var t=h.test;var moved=t.prevGaps!=null&&t.prevGaps!==t.gaps;var tc=chip("Test crawl: "+t.screens+" screens, "+t.actions+" actions, "+(moved?"gaps "+t.prevGaps+" \u2192 ":""),t.ok?"ok":"bad");var gn=el("span",null,String(t.gaps));gn.id="gapn";tc.appendChild(gn);if(!moved)tc.appendChild(document.createTextNode(" gaps"));chips.appendChild(tc)}
+  h.ux.forEach(function(u){chips.appendChild(chip("UX drive "+u.platform+": "+u.status,u.status==="passed"?"ok":u.status==="failed"?"bad":"warn"))});
+  if(h.push)chips.appendChild(chip((h.push.draft?"Draft published":"Published live")+" \xB7 "+h.push.releaseId.slice(0,10),h.push.draft?"warn":"ok"));
+  if(!chips.firstChild)chips.appendChild(chip("Checks appear here as validate, test and push run"));
+  var wall=$("wall");clear(wall);
+  if(!s.screens.length)wall.appendChild(el("div","empty","Screens appear here as they render."));
+  s.screens.forEach(function(sc){var d=el("div","shot");d.setAttribute("data-id",sc.id);var fr=el("div","frame");fr.appendChild(img(sc.img));d.appendChild(fr);d.appendChild(el("div","id",sc.id));
+    if(recent(sc.firstSeen)&&sc.versions===1)d.appendChild(el("span","badge new","New"));else if(recent(sc.changedAt)&&sc.versions>1)d.appendChild(el("span","badge chg","Changed"));wall.appendChild(d)});
+  var brand=$("brand");clear(brand);$("brandcard").style.display=(s.brand.site||s.app.palette.length)?"":"none";
+  if(s.brand.site){var si=img(s.brand.site,"site");brand.appendChild(si)}
+  if(s.brand.site&&s.focus&&s.focus.frames.length){brand.appendChild(el("span","sub","\u2192"));var pf=el("div","shot");pf.style.width="90px";var ff=el("div","frame");ff.appendChild(img(s.focus.frames[s.focus.frames.length-1].img));pf.appendChild(ff);brand.appendChild(pf)}
+  if(s.app.palette.length){var sw=el("div","sw");s.app.palette.forEach(function(c){var d=el("span");d.style.background=c.hex;d.title=c.name+" "+c.hex;sw.appendChild(d)});brand.appendChild(sw)}
+  var nav=$("nav");clear(nav);$("navcard").style.display=s.nav.length?"":"none";s.nav.forEach(function(e){nav.appendChild(el("span",null,e.from+" \u2192 "+e.to))});
+  var log=$("log");clear(log);if(!s.journal.length)log.appendChild(el("li","empty","Postcards the agent journals appear here."));
+  s.journal.forEach(function(j){var li=el("li");li.appendChild(el("div","t",hhmm(j.ts)));var body=el("div");body.appendChild(el("div",null,j.message));if(j.step)body.appendChild(el("div","s","step "+j.stepNumber+" \xB7 "+j.step));
+    if(j.images.length){var row=el("div","imgs");j.images.forEach(function(u){row.appendChild(img(u))});body.appendChild(row)}li.appendChild(body);log.appendChild(li)});
+  paintPop(s);
+}
+/* Motion, sound and notices answer a CHANGE, never a redraw: effects() compares what is on the page
+   now with what it showed last, so opening the board, the once-a-minute redraw and the two-second
+   poll of an unchanged state do nothing, and each effect names a real event. */
+var seen=null,actx=null,sound=false,notices=false;
+var tlStates=null,rewinding=false,replaying=false,asOf=0,replayTimer=null;
+function foldAll(frames){var out=[],st=null,meta={};(frames||[]).forEach(function(f){
+  var ns={step:null,now:null,screens:{},palette:[],checks:{validate:null,test:null,push:null},build:null};
+  if(!f.key&&st){ns.step=st.step;ns.now=st.now;for(var k in st.screens)ns.screens[k]=st.screens[k];ns.palette=st.palette;ns.checks=st.checks;ns.build=st.build}
+  if("step" in f)ns.step=f.step;if("now" in f)ns.now=f.now;if(f.palette)ns.palette=f.palette;if(f.checks)ns.checks=f.checks;if("build" in f)ns.build=f.build;
+  var sc=f.screens||{};for(var id in sc){if(sc[id]===null)delete ns.screens[id];else ns.screens[id]=sc[id]}
+  for(var j in ns.screens){var m=meta[j];if(!m)meta[j]={first:f.ts,changed:f.ts,img:ns.screens[j],n:1};else if(m.img!==ns.screens[j]){m.changed=f.ts;m.img=ns.screens[j];m.n++}}
+  var copy={};for(var q in meta)copy[q]={first:meta[q].first,changed:meta[q].changed,n:meta[q].n};
+  ns.meta=copy;ns.ts=f.ts;ns.reveal=f.reveal||null;out.push(ns);st=ns});return out}
+function viewAt(i){var st=tlStates[i],b=cur;
+  var screens=Object.keys(st.screens).sort().map(function(id){var m=st.meta[id];return{id:id,img:st.screens[id],firstSeen:m.first,changedAt:m.changed,versions:m.n}});
+  var t=st.checks.test,prevGaps=null;for(var k=i-1;k>=0&&t;k--){var pt=tlStates[k].checks.test;if(pt&&pt.gaps!==t.gaps){prevGaps=pt.gaps;break}}
+  var fid=b.focus?b.focus.id:null,fimg=fid&&st.screens[fid];
+  return{v:"tl-"+i,generatedAt:st.ts,app:{name:b.app.name,icon:b.app.icon,palette:st.palette.map(function(p){return{name:p[0],hex:p[1]}})},steps:b.steps,
+    current:st.step?{step:st.step.name,stepNumber:st.step.n,of:8}:null,startedAt:b.startedAt,
+    journal:journalAt(st,b),screens:screens,focus:fimg?{id:fid,frames:[{ts:st.ts,img:fimg}]}:null,
+    health:{validate:st.checks.validate?{ok:st.checks.validate.ok,errors:st.checks.validate.errors,warnings:0,at:st.ts}:null,
+      test:t?{ok:t.ok,screens:t.screens,actions:t.actions,gaps:t.gaps,prevGaps:prevGaps,errors:0,at:st.ts}:null,ux:[],
+      push:st.checks.push?{app:"",releaseId:st.checks.push.releaseId,draft:st.checks.push.draft,at:st.ts}:null},
+    brand:b.brand,nav:b.nav,live:null,pastBuild:st.build,reveal:st.reveal?{at:st.ts,site:st.reveal.site,before:st.reveal.before,after:st.reveal.after}:null,timelineFrames:b.timelineFrames}}
+/* The board keeps only the newest postcards; the timeline remembers the one showing at each moment. */
+function journalAt(st,b){var jr=b.journal.filter(function(x){return x.ts<=st.ts});if(st.now&&(!jr[0]||jr[0].ts!==st.now.ts))jr.unshift({ts:st.now.ts,message:st.now.message,images:st.now.images,step:st.step?st.step.name:null,stepNumber:st.step?st.step.n:null});return jr}
+function loadTimeline(cb){window.__himiTimeline=function(frames){tlStates=foldAll(frames);cb()};var sc=document.createElement("script");sc.src="timeline.js?t="+Date.now();sc.onload=sc.onerror=function(){sc.remove()};document.head.appendChild(sc)}
+function readout(i){var st=tlStates[i],t0=Date.parse(tlStates[0].ts);return hhmm(st.ts)+(st.step?" \xB7 step "+st.step.n+", "+st.step.name:"")+" \xB7 "+Math.round((Date.parse(st.ts)-t0)/60000)+" min in"}
+function marks(){var m=$("marks");clear(m);var n=tlStates.length;tlStates.forEach(function(st,i){var p=tlStates[i-1],kind=null;
+  if(st.build&&st.build.ok===false&&(!p||p.build!==st.build))kind="bad";
+  else if(st.reveal||(st.checks.push&&(!p||!p.checks.push||p.checks.push.releaseId!==st.checks.push.releaseId))||(st.step&&st.step.n===8&&(!p||!p.step||p.step.n<8)))kind="ms";
+  else if(st.now&&(!p||!p.now||p.now.ts!==st.now.ts))kind="";
+  if(kind===null)return;var d=el("span",kind||null);d.style.left=(n>1?i/(n-1)*100:0)+"%";m.appendChild(d)})}
+function paintStill(s){$("focus").hidden=true;var still=$("still");still.hidden=false;clear(still);$("focuslbl").textContent="Home at "+hhmm(s.generatedAt);
+  if(s.focus&&s.focus.frames.length){var p=el("div","phone");p.appendChild(img(s.focus.frames[0].img));still.appendChild(p)}else still.appendChild(el("div","empty","No picture of the home screen yet at this moment."))}
+function rewindTo(i){if(!tlStates||tlStates.length<2)return null;i=Math.max(0,Math.min(tlStates.length-1,i));rewinding=true;asOf=Date.parse(tlStates[i].ts);
+  var sl=$("slider");sl.max=String(tlStates.length-1);sl.value=String(i);var r=readout(i);$("readout").textContent=r;sl.setAttribute("aria-valuetext",r);
+  $("viewing").hidden=false;$("viewingt").textContent=hhmm(tlStates[i].ts);var s=viewAt(i);render(s);return s}
+function enterRewind(i){loadTimeline(function(){if(!tlStates||tlStates.length<2)return;marks();rewindTo(i==null?tlStates.length-1:i<0?tlStates.length-1+i:i)})}
+function stopReplay(){replaying=false;if(replayTimer){clearTimeout(replayTimer);replayTimer=null}$("replay").textContent="Replay"}
+function toLive(){stopReplay();rewinding=false;asOf=0;$("viewing").hidden=true;$("newdot").hidden=true;$("still").hidden=true;$("focus").hidden=false;$("readout").textContent="";seen=snap(cur);if(seen.accent)document.documentElement.style.setProperty("--accent",seen.accent);render(cur)}
+/* The replay plan: about 30 s whatever the build's length. Frames that carry a milestone (a step,
+   a draft, a failed build, the reveal) always play; the rest are sampled down to 120 moments; gaps
+   follow real time, 150 ms-1.5 s each, and are scaled down so the whole never runs past 30 s. */
+function replayPlan(){var n=tlStates.length,keep={0:1};keep[n-1]=1;
+  for(var i=1;i<n;i++){var st=tlStates[i],p=tlStates[i-1];if(st.reveal||(st.step&&(!p.step||p.step.n!==st.step.n))||(st.checks.push&&(!p.checks.push||p.checks.push.releaseId!==st.checks.push.releaseId))||(st.build&&st.build.ok===false&&p.build!==st.build))keep[i]=1}
+  var idx=[],MAX=120;if(n<=MAX){for(var a=0;a<n;a++)idx.push(a)}else{var room=MAX-Object.keys(keep).length;for(var k=1;k<=room;k++)keep[Math.round(k*(n-1)/(room+1))]=1;idx=Object.keys(keep).map(Number).sort(function(x,y){return x-y})}
+  var t0=Date.parse(tlStates[0].ts),span=Math.max(1,Date.parse(tlStates[n-1].ts)-t0),gaps=[],sum=0;
+  for(var q=1;q<idx.length;q++){var g=Math.min(1500,Math.max(150,(Date.parse(tlStates[idx[q]].ts)-Date.parse(tlStates[idx[q-1]].ts))/span*30000));gaps.push(g);sum+=g}
+  var f=sum>30000?30000/sum:1;return{idx:idx,gaps:gaps.map(function(x){return x*f}),total:sum*f}}
+function replay(){loadTimeline(function(){if(!tlStates||tlStates.length<2)return;marks();replaying=true;$("replay").textContent="Pause";
+  var scale=window.__himiReplayScale!=null?window.__himiReplayScale:1,plan=replayPlan();window.__himiReplayPlan={idx:plan.idx,totalMs:plan.total};
+  seen=snap(rewindTo(0));var q=0;
+  (function next(){if(!replaying)return;q++;if(q>=plan.idx.length){toLive();return}
+    replayTimer=setTimeout(function(){var s=rewindTo(plan.idx[q]);if(s)effects(s);next()},plan.gaps[q-1]*scale)})()})}
+/* The floating phone: the ONE live frame moves into an always-on-top window (Document Picture-in-
+   Picture; a small ordinary window elsewhere) and back. Two copies would run the app twice and
+   drift apart as the owner taps; the cost of moving is one reload per move. */
+var pip=null;
+function canPip(){return !!window.documentPictureInPicture}
+function paintStrip(s){if(!pip)return;pip.strip.firstChild.textContent=s.current?s.current.stepNumber+"/8 \xB7 "+s.current.step:"";pip.strip.lastChild.textContent=s.journal[0]?s.journal[0].message:""}
+function fitPip(){if(!pip)return;var w=pip.w.innerWidth,h=pip.w.innerHeight-44;if(w>0&&h>0)pip.frame.style.transform="scale("+Math.min(w/390,h/844)+")"}
+function mountPip(w,fr){var d=w.document;d.title=cur.app.name+" \xB7 phone";
+  var st=d.createElement("style");st.textContent="html,body{margin:0;height:100%;background:#111;font:12px -apple-system,Segoe UI,Roboto,sans-serif}.pp{position:absolute;top:0;left:0;right:0;bottom:44px;overflow:hidden}.pp iframe{position:absolute;top:0;left:0;width:390px;height:844px;border:0;transform-origin:0 0}.pp.pulse{outline:3px solid #1f7a4d;outline-offset:-3px}.pp.bad{outline-color:#a12a2a}.strip{position:absolute;left:0;right:0;bottom:0;height:44px;padding:4px 10px;box-sizing:border-box;background:#fff;color:#1c1c1a}.strip div:first-child{color:#6b6a64}.strip div:last-child{white-space:nowrap;overflow:hidden;text-overflow:ellipsis}";
+  d.head.appendChild(st);var box=d.createElement("div");box.className="pp";d.body.appendChild(box);
+  var home=fr.parentNode;box.appendChild(fr);
+  var strip=d.createElement("div");strip.className="strip";strip.appendChild(d.createElement("div"));strip.appendChild(d.createElement("div"));d.body.appendChild(strip);
+  pip={w:w,box:box,frame:fr,strip:strip,home:home};
+  var note=el("div","empty","Phone popped out \xB7 ");var back=el("a",null,"Bring back");back.href="#";back.addEventListener("click",function(e){e.preventDefault();bringBack()});note.appendChild(back);note.id="away";home.appendChild(note);
+  w.addEventListener("resize",fitPip);w.addEventListener("pagehide",bringBack);fitPip();paintStrip(cur);paintPop(cur)}
+var pipRefused=false;
+function openWindow(fr,afterPip){var w=window.open("","himiPhone","width=340,height=760");if(!w){$("pop").textContent=afterPip?"Open in a window":"Pop-up blocked";return}mountPip(w,fr)}
+/* A browser can expose Document PiP and still refuse the window (an embedded webview does): fall
+   back to the small window rather than a click that does nothing and says nothing. The refusal may
+   have spent the click's user activation, so a popup opened from it can be blocked: then the button
+   offers the window, and the next click opens it directly with an activation of its own. */
+function popOut(){var fr=$("focus").querySelector("iframe.vp");if(!fr||pip)return;
+  if(canPip()&&!pipRefused){Promise.resolve().then(function(){return window.documentPictureInPicture.requestWindow({width:320,height:740})}).then(function(w){mountPip(w,fr)},function(){pipRefused=true;openWindow(fr,true)})}
+  else openWindow(fr)}
+function bringBack(){if(!pip)return;var p=pip;pip=null;var away=document.getElementById("away");if(away&&away.parentNode)away.parentNode.removeChild(away);
+  p.frame.style.transform="";if(p.home&&p.home.isConnected!==false)p.home.appendChild(p.frame);else if(p.frame.parentNode)p.frame.parentNode.removeChild(p.frame);try{p.w.close()}catch(e){}fit();paintPop(cur)}
+function paintPop(s){var b=$("pop");b.hidden=!(s&&s.live)||rewinding;b.textContent=pip?"Bring back":canPip()&&!pipRefused?"Pop out phone":"Open in a window"}
+/* The brand reveal (decided board-side, played here only when it ARRIVES as a change) and opt-in
+   read aloud: postcards and milestones, never rebuild messages, the newer cancelling the older. */
+var revealTimer=null,speakOn=false;try{speakOn=localStorage.getItem("himiStudioSpeak")==="1"}catch(e){}
+function fig(cap,cls){var f=el("figure",cls||null);f.appendChild(el("figcaption",null,cap));return f}
+function phoneImg(srcs){var ph=el("div","ph");srcs.forEach(function(p){var i=el("img",p[1]||null);i.src=p[0];i.alt="";ph.appendChild(i)});return ph}
+function showReveal(r){var row=$("rvrow"),rv=$("rv");clear(row);rv.classList.remove("on");
+  if(r.site){var fs=fig("Your website","site");var si=el("img");si.src=r.site;si.alt="";fs.appendChild(si);row.appendChild(fs)}
+  var same=!r.before||r.before===r.after;
+  if(same){var f1=fig("Your app, your brand");f1.appendChild(phoneImg([[r.after]]));row.appendChild(f1)}
+  else if(reduced()){var fb=fig("Your app, before");fb.appendChild(phoneImg([[r.before]]));row.appendChild(fb);var fa=fig("Your app, your brand");fa.appendChild(phoneImg([[r.after]]));row.appendChild(fa)}
+  else{var fw=fig("Your app");fw.appendChild(phoneImg([[r.before],[r.after,"after"]]));row.appendChild(fw);setTimeout(function(){rv.classList.add("on")},700)}
+  var box=$("reveal");box.hidden=false;box.setAttribute("data-shown",String((+box.getAttribute("data-shown")||0)+1));clearTimeout(revealTimer);revealTimer=setTimeout(hideReveal,6000)}
+function hideReveal(){$("reveal").hidden=true;clearTimeout(revealTimer)}
+function speak(t){if(!speakOn||!t)return;try{var ss=window.speechSynthesis;if(!ss||!window.SpeechSynthesisUtterance)return;ss.cancel();var u=new SpeechSynthesisUtterance(t);u.lang=navigator.language||"en";ss.speak(u)}catch(e){}}try{sound=localStorage.getItem("himiStudioSound")==="1";notices=localStorage.getItem("himiStudioNotify")==="1"}catch(e){}
+var raf=window.requestAnimationFrame?window.requestAnimationFrame.bind(window):function(f){return setTimeout(function(){f(Date.now())},16)};
+function now(){return window.performance&&performance.now?performance.now():Date.now()}
+function reduced(){try{return matchMedia("(prefers-reduced-motion: reduce)").matches}catch(e){return false}}
+function tone(f,t,d,v,type){if(!sound)return;try{if(!actx){var AC=window.AudioContext||window.webkitAudioContext;if(!AC)return;actx=new AC()}var o=actx.createOscillator(),g=actx.createGain(),n=actx.currentTime+(t||0),dd=d||.18;o.type=type||"sine";o.frequency.value=f;g.gain.setValueAtTime(0,n);g.gain.linearRampToValueAtTime(v||.05,n+.01);g.gain.exponentialRampToValueAtTime(.0001,n+dd);o.connect(g);g.connect(actx.destination);o.start(n);o.stop(n+dd+.05)}catch(e){}}
+var SND={tick:function(){tone(1320,0,.05,.025,"triangle")},post:function(){tone(880,0,.08,.03)},step:function(){tone(523);tone(784,.12)},win:function(){tone(523);tone(659,.1);tone(784,.2);tone(1047,.3,.35)},fail:function(){tone(160,0,.3,.05,"sawtooth")}};
+/* Notices are the BOARD's opt-in, not just the browser's: a permission granted to this origin once
+   (an earlier board, another run) must not switch them on, and the toggle must switch them off. */
+function notify(title,body){if(replaying)return;try{if(notices&&"Notification" in window&&Notification.permission==="granted"&&document.hidden)new Notification(title,{body:body})}catch(e){}}
+function accentNow(){return (getComputedStyle(document.documentElement).getPropertyValue("--accent")||"").trim()||"#3b6fd8"}
+/* The preview lays out at a real phone's viewport (390 x 844 CSS px) and is scaled into the frame.
+   Sized to the frame itself it was ~280px wide: narrower than any phone, so screens overflowed
+   sideways and scrolled horizontally. */
+function fit(){var ph=$("focus").querySelector(".phone.vpf");if(!ph)return;var w=ph.clientWidth,h=ph.clientHeight;if(w&&h)ph.style.setProperty("--k",String(Math.min(w/390,h/844)))}
+window.addEventListener("resize",fit);
+function favicon(n,bad){try{var c=document.createElement("canvas");c.width=c.height=32;var x=c.getContext&&c.getContext("2d");if(!x)return;x.lineWidth=5;x.strokeStyle="rgba(128,128,128,.35)";x.beginPath();x.arc(16,16,12,0,6.2832);x.stroke();x.strokeStyle=accentNow();x.beginPath();x.arc(16,16,12,-1.5708,-1.5708+6.2832*n/8);x.stroke();if(bad){x.fillStyle="#d33";x.beginPath();x.arc(25,7,6,0,6.2832);x.fill()}$("fav").href=c.toDataURL("image/png")}catch(e){}}
+function burst(){var c=$("fx");c.setAttribute("data-bursts",String((+c.getAttribute("data-bursts")||0)+1));if(reduced())return;var x=c.getContext&&c.getContext("2d");if(!x)return;var W=c.width=innerWidth,H=c.height=innerHeight,cols=["#1f7a4d","#3b6fd8","#e0a030","#d4537e",accentNow()],P=[];for(var i=0;i<120;i++)P.push({x:W/2,y:H*.35,vx:(Math.random()-.5)*14,vy:-Math.random()*12-4,c:cols[i%cols.length],r:Math.random()*6.28});var t0=now();(function f(){x.clearRect(0,0,W,H);P.forEach(function(p){p.x+=p.vx;p.y+=p.vy;p.vy+=.35;p.r+=.2;x.save();x.translate(p.x,p.y);x.rotate(p.r);x.fillStyle=p.c;x.fillRect(-4,-2,8,4);x.restore()});if(now()-t0<2200)raf(f);else x.clearRect(0,0,W,H)})()}
+function countTo(e,a,b){if(!e)return;if(reduced()){e.textContent=String(b);return}var t0=now();(function f(){var k=Math.min(1,(now()-t0)/900);e.textContent=String(Math.round(a+(b-a)*k));if(k<1)raf(f)})()}
+function snap(s){var sc={},acc=null;s.screens.forEach(function(x){sc[x.id]=x.img});s.app.palette.forEach(function(p){if(p.name==="accentPrimary")acc=p.hex});return{screens:sc,step:s.current?s.current.stepNumber:0,top:s.journal[0]?s.journal[0].ts:null,build:s.live&&s.live.lastBuild?s.live.lastBuild.at:s.pastBuild?s.pastBuild.at:null,run:s.live?s.live.runId:s.pastBuild?s.pastBuild.run:null,push:s.health.push?s.health.push.releaseId:null,gaps:s.health.test?s.health.test.gaps:null,accent:acc,reveal:s.reveal?s.reveal.at:null}}
+function buildLine(b){if(!b.ok)return "Build failed \xB7 still showing the last good version";var what=b.screens.length?b.screens.slice(0,3).join(", ")+(b.screens.length>3?" +"+(b.screens.length-3):""):b.tokens?"design tokens":b.config?"app config":"no visible change";return "Rebuilt"+(b.ms!=null?" in "+(b.ms/1000).toFixed(1)+" s":"")+" \xB7 "+what}
+function effects(s){var is=snap(s),was=seen;seen=is;if(is.accent)document.documentElement.style.setProperty("--accent",is.accent);
+  /* The phone (kept across renders) and the Now line outlive a render: clear what they played last. */
+  var stage=rewinding?$("still"):$("focus"),ph=stage.querySelector(".phone"),nm=$("nowmsg");if(ph)ph.classList.remove("pulse","bad");nm.classList.remove("slidein");if(!was)return;
+  var ticked=false;[].forEach.call($("wall").children,function(d){var id=d.getAttribute("data-id");if(!id)return;if(!(id in was.screens)){d.classList.add("enter");ticked=true}else if(was.screens[id]!==is.screens[id]){d.classList.add("changed");ticked=true}});if(ticked)SND.tick();
+  if(is.top&&is.top!==was.top){void nm.offsetWidth;nm.classList.add("slidein");var li=$("log").firstChild;if(li&&li.classList)li.classList.add("slidein");SND.post()}
+  if(is.step>was.step){var cs=$("steps").children[is.step-1];if(cs)cs.classList.add("fresh");SND.step();notify(s.app.name+" \xB7 step "+is.step+" of 8",s.journal[0]?s.journal[0].message:s.steps[is.step-1])}
+  /* A rebuild is a later build of the SAME run: a run appearing, or restarting, records its first
+     build too, and nothing was rebuilt then. */
+  if(is.build&&was.build&&is.run===was.run&&is.build!==was.build){var b=s.live&&s.live.lastBuild||s.pastBuild;if(ph){void ph.offsetWidth;ph.classList.add("pulse");if(!b.ok)ph.classList.add("bad")}if(pip){pip.box.classList.remove("pulse","bad");void pip.box.offsetWidth;pip.box.classList.add("pulse");if(!b.ok)pip.box.classList.add("bad");pip.strip.lastChild.textContent=buildLine(b)}var tt=el("div","toast"+(b.ok?"":" bad"),buildLine(b));stage.appendChild(tt);setTimeout(function(){if(tt.parentNode)tt.parentNode.removeChild(tt)},3500);if(b.ok)SND.tick();else{SND.fail();notify(s.app.name+" \xB7 build failed",s.live&&s.live.buildError||"")}}
+  if(was.gaps!=null&&is.gaps!=null&&is.gaps!==was.gaps)countTo($("gapn"),was.gaps,is.gaps);
+  if(is.accent&&was.accent&&is.accent!==was.accent){var sw=$("brand").querySelector(".sw");if(sw)sw.classList.add("pop");favicon(is.step,!!(s.live&&s.live.buildError))}
+  var published=is.push&&is.push!==was.push,handed=is.step===8&&was.step<8;if(published||handed){burst();SND.win();notify(s.app.name,published?"Draft published":"Handed over")}
+  var said=false;if(is.top&&is.top!==was.top){speak((s.current?"Step "+s.current.stepNumber+", "+s.current.step+". ":"")+(s.journal[0]?s.journal[0].message:""));said=true}
+  if((published||handed)&&!said)speak(published?"Your draft is ready to open on your phone.":"Your app is handed over.");
+  if(is.reveal&&is.reveal!==was.reveal)showReveal(s.reveal);
+}
+function activityAt(s){var m=0;function add(v){var d=v?Date.parse(v):0;if(d>m)m=d}if(s.journal[0])add(s.journal[0].ts);s.screens.forEach(function(x){add(x.changedAt)});if(s.live&&s.live.lastBuild)add(s.live.lastBuild.at);["validate","test","push"].forEach(function(k){if(s.health[k])add(s.health[k].at)});return m}
+function paintToggles(){var sy=$("say");sy.hidden=!("speechSynthesis" in window);sy.textContent="Read aloud: "+(speakOn?"on":"off");sy.className="tog"+(speakOn?" on":"");sy.setAttribute("aria-pressed",String(speakOn));var b=$("snd");b.textContent=sound?"Sound on":"Sound off";b.className="tog"+(sound?" on":"");b.setAttribute("aria-pressed",String(sound));var nb=$("ntf");if(!("Notification" in window)){nb.hidden=true;return}var p=Notification.permission,on=notices&&p==="granted";nb.hidden=p==="denied";nb.textContent=on?"Notices on":"Notices off";nb.className="tog"+(on?" on":"");nb.setAttribute("aria-pressed",String(on))}
+function setNotices(v){notices=v;try{localStorage.setItem("himiStudioNotify",v?"1":"0")}catch(e){}paintToggles()}
+$("snd").addEventListener("click",function(){sound=!sound;try{localStorage.setItem("himiStudioSound",sound?"1":"0")}catch(e){}if(sound){try{if(actx&&actx.resume)actx.resume()}catch(e){}SND.post()}paintToggles()});
+/* The click acts on what the button SAYS (the effective state), so a remembered opt-in whose browser
+   permission was since reset reads "off" and one click asks for permission, not two. */
+$("ntf").addEventListener("click",function(){try{var p=Notification.permission;if(notices&&p==="granted"){setNotices(false);return}if(p==="granted"){setNotices(true);return}if(Notification.permission==="default")Promise.resolve(Notification.requestPermission()).then(function(p){setNotices(p==="granted")})}catch(e){}});
+document.addEventListener("click",function(){try{if(actx&&actx.state==="suspended")actx.resume()}catch(e){}},{once:true});
+paintToggles();
+$("slider").addEventListener("input",function(){var i=+this.value;if(replaying)stopReplay();if(!rewinding||!tlStates)enterRewind(i);else rewindTo(i)});
+$("replay").addEventListener("click",function(){if(replaying){stopReplay();return}replay()});
+$("golive").addEventListener("click",toLive);
+$("rvx").addEventListener("click",hideReveal);$("reveal").addEventListener("click",function(e){if(e.target===this)hideReveal()});
+$("say").addEventListener("click",function(){speakOn=!speakOn;try{localStorage.setItem("himiStudioSpeak",speakOn?"1":"0")}catch(e){}paintToggles();if(speakOn)speak("Read aloud is on.")});
+$("pop").addEventListener("click",function(){if(pip)bringBack();else popOut()});
+$("backlive").addEventListener("click",function(e){e.preventDefault();toLive()});
+document.addEventListener("keydown",function(e){if($("scrub").hidden)return;var tg=e.target,tn=tg&&tg.tagName;
+  if(e.key==="Escape"&&rewinding){toLive();return}
+  if((e.key==="ArrowLeft"||e.key==="ArrowRight")&&!(tg&&tg.id==="slider")){var d=e.key==="ArrowRight"?1:-1;if(!rewinding){if(d<0)enterRewind(d)}else rewindTo(+$("slider").value+d);e.preventDefault()}
+  if(e.key===" "&&tn!=="BUTTON"&&tn!=="INPUT"){e.preventDefault();$("replay").click()}});
+window.__himiStudio=function(s){lastSeen=Date.now();if(!cur||cur.v!==s.v){cur=s;if(rewinding){$("newdot").hidden=false;return}render(s);effects(s)}else{cur.generatedAt=s.generatedAt}};
+$("lb").addEventListener("click",function(){this.style.display="none"});
+window.__himiStudio(window.__himiInitial);
+setInterval(function(){var sc=document.createElement("script");sc.src="state.js?t="+Date.now();sc.onload=sc.onerror=function(){sc.remove()};document.head.appendChild(sc)},2000);
+var ticks=0;
+setInterval(function(){if(!cur)return;if(++ticks%60===0&&!rewinding)render(cur);var start=cur.startedAt?Date.parse(cur.startedAt):Date.now();var s=Math.max(0,Math.floor((Date.now()-start)/1000));var hh=Math.floor(s/3600),mm=Math.floor(s%3600/60),ss=s%60;
+  $("clock").textContent=(hh?hh+":":"")+(mm<10&&hh?"0":"")+mm+":"+(ss<10?"0":"")+ss;
+  $("updated").textContent="updated "+ago(cur.generatedAt);$("live").className="live"+(Date.now()-lastSeen>10000?" stale":"");
+  var a=activityAt(cur),q=a?Date.now()-a:0,done=cur.current&&cur.current.stepNumber===8;
+  $("agent").className="live"+(!a?" idle":done?"":q>5*60*1000?" quiet":"");$("agentt").textContent=!a?"Waiting for the agent":done?"Handed over":q>5*60*1000?"Quiet for "+Math.floor(q/60000)+" min":"Agent active"},1000);
+})();
+</script>
+</body>
+</html>
+`;
+}
+function escapeHtml(s) {
+  return s.replace(/[&<>"']/g, (c) => ({ "&": "&amp;", "<": "&lt;", ">": "&gt;", '"': "&quot;", "'": "&#39;" })[c]);
+}
+var scriptJson;
+var init_studio_page = __esm({
+  "src/studio-page.ts"() {
+    scriptJson = (value) => JSON.stringify(value).replace(/</g, "\\u003c").replace(/\u2028/g, "\\u2028").replace(/\u2029/g, "\\u2029");
+  }
+});
+
 // src/progress.ts
 var progress_exports = {};
 __export(progress_exports, {
@@ -39276,6 +39753,152 @@ var init_progress = __esm({
   }
 });
 
+// src/studio-timeline.ts
+import { existsSync as existsSync39, readFileSync as readFileSync42 } from "node:fs";
+import { join as join36 } from "node:path";
+function stateOf(view) {
+  const j = view.journal[0];
+  const h = view.health;
+  const b = view.live?.lastBuild ?? null;
+  return {
+    step: view.current ? { n: view.current.stepNumber, name: view.current.step } : null,
+    now: j ? { ts: j.ts, message: j.message, images: j.images } : null,
+    screens: Object.fromEntries(view.screens.map((s) => [s.id, s.img])),
+    palette: view.app.palette.map((p) => [p.name, p.hex]),
+    checks: {
+      validate: h.validate ? { ok: h.validate.ok, errors: h.validate.errors } : null,
+      test: h.test ? { screens: h.test.screens, actions: h.test.actions, gaps: h.test.gaps, ok: h.test.ok } : null,
+      push: h.push ? { draft: h.push.draft, releaseId: h.push.releaseId } : null
+    },
+    build: b && view.live ? { ok: b.ok, ms: b.ms, screens: b.screens, at: b.at, run: view.live.runId } : null
+  };
+}
+function frameFor(state, prev, ts2, v, key2) {
+  if (key2 || !prev) return { ts: ts2, v, key: true, ...state };
+  const f = { ts: ts2, v };
+  if (!same(state.step, prev.step)) f.step = state.step;
+  if (!same(state.now, prev.now)) f.now = state.now;
+  const screens = {};
+  for (const [id, img] of Object.entries(state.screens)) if (prev.screens[id] !== img) screens[id] = img;
+  for (const id of Object.keys(prev.screens)) if (!(id in state.screens)) screens[id] = null;
+  if (Object.keys(screens).length) f.screens = screens;
+  if (!same(state.palette, prev.palette)) f.palette = state.palette;
+  if (!same(state.checks, prev.checks)) f.checks = state.checks;
+  if (!same(state.build, prev.build)) f.build = state.build;
+  return f;
+}
+function fold(prev, f) {
+  const base = f.key || !prev ? EMPTY : prev;
+  const screens = f.key ? {} : { ...base.screens };
+  for (const [id, img] of Object.entries(f.screens ?? {})) {
+    if (img === null) delete screens[id];
+    else screens[id] = img;
+  }
+  return {
+    step: "step" in f ? f.step ?? null : base.step,
+    now: "now" in f ? f.now ?? null : base.now,
+    screens,
+    palette: f.palette ?? base.palette,
+    checks: f.checks ?? base.checks,
+    build: "build" in f ? f.build ?? null : base.build
+  };
+}
+function validFrame(f) {
+  if (!isObj(f) || !isStr(f.ts) || !isStr(f.v)) return false;
+  if (f.key !== void 0 && f.key !== true) return false;
+  if ("step" in f && !nullOr(f.step, (x) => typeof x.n === "number" && isStr(x.name))) return false;
+  if ("now" in f && !nullOr(f.now, (x) => isStr(x.ts) && isStr(x.message) && strs(x.images))) return false;
+  if ("screens" in f && !(isObj(f.screens) && Object.values(f.screens).every((x) => x === null || isStr(x)))) return false;
+  if ("palette" in f && !(Array.isArray(f.palette) && f.palette.every((p) => Array.isArray(p) && p.length === 2 && p.every(isStr)))) return false;
+  if ("checks" in f) {
+    const c = f.checks;
+    if (!isObj(c)) return false;
+    if (!nullOr(c.validate ?? null, (x) => typeof x.ok === "boolean" && typeof x.errors === "number")) return false;
+    if (!nullOr(c.test ?? null, (x) => ["screens", "actions", "gaps"].every((k) => typeof x[k] === "number") && typeof x.ok === "boolean")) return false;
+    if (!nullOr(c.push ?? null, (x) => typeof x.draft === "boolean" && isStr(x.releaseId))) return false;
+  }
+  if ("build" in f && !nullOr(f.build, (x) => typeof x.ok === "boolean" && (x.ms === null || typeof x.ms === "number") && strs(x.screens) && isStr(x.at) && isStr(x.run))) return false;
+  if ("reveal" in f && !(isObj(f.reveal) && (f.reveal.site === null || isStr(f.reveal.site)) && isStr(f.reveal.before) && isStr(f.reveal.after))) return false;
+  return true;
+}
+function readTimeline(dir) {
+  const file = join36(dir, TIMELINE_FILE);
+  if (!existsSync39(file)) return [];
+  const out = [];
+  for (const line of readFileSync42(file, "utf8").split("\n")) {
+    if (!line.trim()) continue;
+    try {
+      const f = JSON.parse(line);
+      if (validFrame(f)) out.push(f);
+    } catch {
+    }
+  }
+  const first = out.findIndex((f) => f.key === true);
+  return first < 0 ? [] : out.slice(first);
+}
+function trim(frames) {
+  if (frames.length <= MAX_FRAMES) return frames;
+  for (let i = 1; i < frames.length; i++) if (frames[i].key && frames.length - i <= MAX_FRAMES) return frames.slice(i);
+  return frames.slice(-MAX_FRAMES);
+}
+function writeTimelineJs(dir, frames) {
+  writeFileAtomic(join36(dir, TIMELINE_JS), `window.__himiTimeline && window.__himiTimeline(${scriptJson(frames)});
+`);
+}
+function appendFrame(dir, view, reveal = null) {
+  const frames = readTimeline(dir);
+  const last = frames[frames.length - 1];
+  if (last && last.v === view.v && !reveal) {
+    if (!existsSync39(join36(dir, TIMELINE_JS))) writeTimelineJs(dir, frames);
+    return frames.length;
+  }
+  let prev = null;
+  for (const f of frames) prev = fold(prev, f);
+  const frame = frameFor(stateOf(view), prev, view.generatedAt, view.v, frames.length % KEYFRAME_EVERY === 0);
+  if (reveal) frame.reveal = reveal;
+  const kept = trim([...frames, frame]);
+  writeFileAtomic(join36(dir, TIMELINE_FILE), kept.map((f) => JSON.stringify(f)).join("\n") + "\n");
+  writeTimelineJs(dir, kept);
+  return kept.length;
+}
+function brandLanded(view, first) {
+  const was = accentOf(first?.palette);
+  const is = accentOf(view.app.palette);
+  return was !== null && is !== null && was !== is || view.journal.some((j) => j.step === "brand");
+}
+function revealFor(view, memory) {
+  if (memory.revealedAt || !memory.brandSeenAt || !view.focus || !view.focus.frames.length) return null;
+  const latest = view.focus.frames[view.focus.frames.length - 1];
+  if (latest.ts < memory.brandSeenAt) return null;
+  const firstVersion = memory.timeline.find((t) => t.id === view.focus.id);
+  const before = firstVersion ? `../history/${firstVersion.sha}.${firstVersion.ext}` : latest.img;
+  return { site: view.brand.site, before, after: latest.img };
+}
+var TIMELINE_FILE, TIMELINE_JS, MAX_FRAMES, KEYFRAME_EVERY, same, EMPTY, isStr, isObj, strs, nullOr, accentOf;
+var init_studio_timeline = __esm({
+  "src/studio-timeline.ts"() {
+    init_progress();
+    init_studio_page();
+    TIMELINE_FILE = join36(".himi", "studio", "timeline.jsonl");
+    TIMELINE_JS = join36(".himi", "studio", "timeline.js");
+    MAX_FRAMES = 2e3;
+    KEYFRAME_EVERY = 50;
+    same = (a, b) => JSON.stringify(a) === JSON.stringify(b);
+    EMPTY = { step: null, now: null, screens: {}, palette: [], checks: { validate: null, test: null, push: null }, build: null };
+    isStr = (x) => typeof x === "string";
+    isObj = (x) => typeof x === "object" && x !== null && !Array.isArray(x);
+    strs = (x) => Array.isArray(x) && x.every(isStr);
+    nullOr = (x, ok) => x === null || isObj(x) && ok(x);
+    accentOf = (palette2) => {
+      for (const p of palette2 ?? []) {
+        const [name, hex2] = Array.isArray(p) ? p : [p.name, p.hex];
+        if (name === "accentPrimary") return hex2;
+      }
+      return null;
+    };
+  }
+});
+
 // src/studio.ts
 var studio_exports = {};
 __export(studio_exports, {
@@ -39294,8 +39917,8 @@ __export(studio_exports, {
   writeStudioRecord: () => writeStudioRecord
 });
 import { createHash as createHash20 } from "node:crypto";
-import { existsSync as existsSync39, readdirSync as readdirSync20, readFileSync as readFileSync42, realpathSync as realpathSync4, statSync as statSync8 } from "node:fs";
-import { basename as basename9, extname as extname3, join as join36, relative as relative6, resolve as resolve33, sep as sep9 } from "node:path";
+import { existsSync as existsSync40, readdirSync as readdirSync20, readFileSync as readFileSync43, realpathSync as realpathSync4, statSync as statSync8 } from "node:fs";
+import { basename as basename9, extname as extname3, join as join37, relative as relative6, resolve as resolve33, sep as sep9 } from "node:path";
 import { pathToFileURL as pathToFileURL7 } from "node:url";
 function realInside(dir, abs) {
   try {
@@ -39320,12 +39943,12 @@ function archiveFile(dir, memory, abs) {
   if (size === 0) return null;
   const key2 = relative6(dir, abs);
   const hit = memory.files?.[key2];
-  if (hit && hit.size === size && hit.mtimeMs === mtimeMs && hit.ino === ino && existsSync39(join36(dir, HISTORY_DIR, `${hit.sha}.${hit.ext}`))) {
+  if (hit && hit.size === size && hit.mtimeMs === mtimeMs && hit.ino === ino && existsSync40(join37(dir, HISTORY_DIR, `${hit.sha}.${hit.ext}`))) {
     return { sha: hit.sha, ext: hit.ext, file: `${hit.sha}.${hit.ext}` };
   }
   let archived;
   try {
-    archived = archiveBytes(dir, readFileSync42(real));
+    archived = archiveBytes(dir, readFileSync43(real));
   } catch {
     return null;
   }
@@ -39334,17 +39957,17 @@ function archiveFile(dir, memory, abs) {
   return { sha: archived.sha256, ext: archived.ext, file: `${archived.sha256}.${archived.ext}` };
 }
 function loadMemory(dir, now) {
-  const raw = obj(readJson2(join36(dir, MEMORY_FILE)));
+  const raw = obj(readJson2(join37(dir, MEMORY_FILE)));
   if (raw && raw.version === 1 && obj(raw.shots) && Array.isArray(raw.timeline)) return raw;
   return { version: 1, createdAt: now, shots: {}, timeline: [] };
 }
 function observeShots(dir, memory, now) {
-  const shotsDir = join36(dir, ".himi", "shots");
+  const shotsDir = join37(dir, ".himi", "shots");
   const seen = /* @__PURE__ */ new Set();
-  const files = existsSync39(shotsDir) ? readdirSync20(shotsDir).filter((f) => /\.(png|jpe?g)$/i.test(f)).sort() : [];
+  const files = existsSync40(shotsDir) ? readdirSync20(shotsDir).filter((f) => /\.(png|jpe?g)$/i.test(f)).sort() : [];
   for (const f of files) {
     const id = basename9(f, extname3(f));
-    const archived = archiveFile(dir, memory, join36(shotsDir, f));
+    const archived = archiveFile(dir, memory, join37(shotsDir, f));
     if (!archived) continue;
     seen.add(id);
     const { sha, ext } = archived;
@@ -39359,14 +39982,14 @@ function observeShots(dir, memory, now) {
       memory.shots[id] = { ...prev, present: true };
     }
   }
-  if (existsSync39(shotsDir)) {
+  if (existsSync40(shotsDir)) {
     for (const [id, shot] of Object.entries(memory.shots)) if (!seen.has(id) && shot.present) memory.shots[id] = { ...shot, present: false };
   }
   if (memory.timeline.length > MAX_TIMELINE) memory.timeline = memory.timeline.slice(-MAX_TIMELINE);
   return memory;
 }
 function palette(dir) {
-  const colors = obj(obj(readJson2(join36(dir, "tokens.json")))?.colors);
+  const colors = obj(obj(readJson2(join37(dir, "tokens.json")))?.colors);
   if (!colors) return [];
   const pick2 = (key2) => {
     const v = colors[key2];
@@ -39376,7 +39999,7 @@ function palette(dir) {
   return ["accentPrimary", "accentSecondary", "accentSurface", "surfacePrimary", "textPrimary"].map(pick2).filter((x) => !!x);
 }
 function appIdentity(dir) {
-  const manifest = obj(readJson2(join36(dir, "himalaya.content.json")));
+  const manifest = obj(readJson2(join37(dir, "himalaya.content.json")));
   const name = text(manifest?.name) ?? basename9(resolve33(dir));
   const icon = text(manifest?.icon)?.trim();
   const iconPath = icon ? resolve33(dir, icon) : null;
@@ -39384,12 +40007,12 @@ function appIdentity(dir) {
   return { name, iconFile: real && statSync8(real).isFile() ? iconPath : null };
 }
 function testRuns(dir) {
-  const att = join36(dir, ".himi", "attestations");
-  if (!existsSync39(att)) return [];
+  const att = join37(dir, ".himi", "attestations");
+  if (!existsSync40(att)) return [];
   const runs = [];
   for (const f of readdirSync20(att)) {
     if (!f.endsWith(".json") || f === "latest.json") continue;
-    const r = obj(readJson2(join36(att, f)));
+    const r = obj(readJson2(join37(att, f)));
     if (!r || r.tool !== "himi-test" || typeof r.runId !== "string") continue;
     const report2 = obj(r.report);
     const coverage = obj(r.coverage);
@@ -39405,20 +40028,20 @@ function testRuns(dir) {
   return runs.sort((a, b) => a.runId.localeCompare(b.runId));
 }
 function siteHome(dir) {
-  for (const pages of [join36(dir, ".himi", "business-book", "evidence", "pages"), join36(dir, "evidence", "pages")]) {
-    if (!existsSync39(pages)) continue;
+  for (const pages of [join37(dir, ".himi", "business-book", "evidence", "pages"), join37(dir, "evidence", "pages")]) {
+    if (!existsSync40(pages)) continue;
     const home = readdirSync20(pages).filter((f) => /^home.*\.(png|jpe?g)$/i.test(f)).sort()[0];
-    if (home) return join36(pages, home);
+    if (home) return join37(pages, home);
   }
   return null;
 }
 function uxStatuses(dir) {
-  const platforms = obj(obj(readJson2(join36(dir, ".himi", "ux-audit.json")))?.platforms);
+  const platforms = obj(obj(readJson2(join37(dir, ".himi", "ux-audit.json")))?.platforms);
   if (!platforms) return [];
   return Object.entries(platforms).map(([platform, rec]) => ({ platform, status: text(obj(rec)?.status) ?? "" })).filter((p) => p.status);
 }
 function liveRun(dir) {
-  const rec = obj(readJson2(join36(dir, RUN_RECORD)));
+  const rec = obj(readJson2(join37(dir, RUN_RECORD)));
   const url = text(rec?.url);
   const pid = rec?.pid;
   if (!url || !/^https?:\/\//i.test(url) || typeof pid !== "number") return null;
@@ -39468,9 +40091,9 @@ function buildView(dir, memory, now) {
   const runs = testRuns(dir);
   const last = runs[runs.length - 1];
   const prev = runs[runs.length - 2];
-  const validate3 = obj(readJson2(join36(dir, VALIDATE_RECORD)));
-  const push = obj(readJson2(join36(dir, PUSH_RECORD)));
-  const edges = readJson2(join36(dir, EDGES_RECORD));
+  const validate3 = obj(readJson2(join37(dir, VALIDATE_RECORD)));
+  const push = obj(readJson2(join37(dir, PUSH_RECORD)));
+  const edges = readJson2(join37(dir, EDGES_RECORD));
   const nav = [];
   if (Array.isArray(edges)) {
     const seen = /* @__PURE__ */ new Set();
@@ -39508,9 +40131,11 @@ function buildView(dir, memory, now) {
     },
     brand: { site: siteImg },
     nav,
-    live: liveRun(dir)
+    live: liveRun(dir),
+    timelineFrames: 0,
+    reveal: memory.reveal ?? null
   };
-  const { generatedAt: _ignored, ...stable } = view;
+  const { generatedAt: _ignored, timelineFrames: _count, ...stable } = view;
   const v = createHash20("sha256").update(JSON.stringify(stable)).digest("hex").slice(0, 16);
   return { v, ...view };
 }
@@ -39521,16 +40146,33 @@ function writeBoard(dir, now) {
   if (!realDirIn(dir, STUDIO_DIR)) throw new UnsafeHimiDirError(STUDIO_DIR);
   if (!realDirIn(dir, HISTORY_DIR)) throw new UnsafeHimiDirError(HISTORY_DIR);
   const memory = observeShots(dir, loadMemory(dir, now), now);
-  const view = buildView(dir, memory, now);
-  writeAtomic(join36(dir, MEMORY_FILE), JSON.stringify(memory));
-  writeAtomic(join36(dir, STATE_FILE), `window.__himiStudio && window.__himiStudio(${scriptJson(view)});
+  let view = buildView(dir, memory, now);
+  let reveal = null;
+  try {
+    if (!memory.brandSeenAt && brandLanded(view, readTimeline(dir)[0])) memory.brandSeenAt = now;
+    reveal = revealFor(view, memory);
+    if (reveal) {
+      memory.revealedAt = now;
+      memory.reveal = { at: now, ...reveal };
+      view = buildView(dir, memory, now);
+    }
+  } catch {
+    reveal = null;
+  }
+  try {
+    view.timelineFrames = appendFrame(dir, view, reveal);
+  } catch {
+    view.timelineFrames = 0;
+  }
+  writeAtomic(join37(dir, MEMORY_FILE), JSON.stringify(memory));
+  writeAtomic(join37(dir, STATE_FILE), `window.__himiStudio && window.__himiStudio(${scriptJson(view)});
 `);
-  writeAtomic(join36(dir, STUDIO_PAGE), renderStudioHtml(view));
+  writeAtomic(join37(dir, STUDIO_PAGE), renderStudioHtml(view));
   return view;
 }
 function refreshStudio(dir, now = /* @__PURE__ */ new Date()) {
   try {
-    if (!existsSync39(join36(dir, STUDIO_PAGE))) return { refreshed: false };
+    if (!existsSync40(join37(dir, STUDIO_PAGE))) return { refreshed: false };
     return { refreshed: true, view: writeBoard(dir, now.toISOString()) };
   } catch {
     return { refreshed: false };
@@ -39538,225 +40180,38 @@ function refreshStudio(dir, now = /* @__PURE__ */ new Date()) {
 }
 function openStudio(dir, now = /* @__PURE__ */ new Date()) {
   const view = writeBoard(dir, now.toISOString());
-  const page = join36(dir, STUDIO_PAGE);
+  const page = join37(dir, STUDIO_PAGE);
   return { page, url: pathToFileURL7(page).href, view };
 }
 function writeStudioRecord(dir, record2, value) {
   try {
     if (!realDirIn(dir, ".himi")) return;
-    writeAtomic(join36(dir, record2), `${JSON.stringify(value, null, 2)}
+    writeAtomic(join37(dir, record2), `${JSON.stringify(value, null, 2)}
 `);
   } catch {
   }
 }
-function renderStudioHtml(initial) {
-  const accent = initial.app.palette.find((p) => p.name === "accentPrimary")?.hex ?? "#3b6fd8";
-  return `<!doctype html>
-<html lang="en">
-<head>
-<meta charset="utf-8">
-<meta name="viewport" content="width=device-width, initial-scale=1">
-<title>${escapeHtml(initial.app.name)} \xB7 build board</title>
-<link rel="icon" id="fav" href="data:,">
-<style>
-:root{--bg:#f6f5f2;--card:#fff;--ink:#1c1c1a;--muted:#6b6a64;--faint:#a3a19a;--line:#e6e3dc;--ok:#1f7a4d;--okbg:#e3f3ea;--warn:#8a5a00;--warnbg:#fbefd6;--bad:#a12a2a;--badbg:#fbe4e4;--accent:${accent};--shadow:0 1px 2px rgba(0,0,0,.04),0 4px 16px rgba(0,0,0,.04)}
-@media (prefers-color-scheme:dark){:root{--bg:#121211;--card:#1c1c1a;--ink:#ecebe6;--muted:#a3a19a;--faint:#6b6a64;--line:#2c2b28;--okbg:#15301f;--ok:#7fd3a2;--warnbg:#33270f;--warn:#f0c46b;--badbg:#3a1616;--bad:#f09a9a;--shadow:none}}
-*{box-sizing:border-box}body{margin:0;background:var(--bg);color:var(--ink);font:14px/1.5 -apple-system,BlinkMacSystemFont,"Segoe UI",Roboto,Helvetica,Arial,sans-serif}
-.wrap{max-width:1180px;margin:0 auto;padding:20px 20px 60px}
-header{display:flex;align-items:center;gap:12px;margin-bottom:16px}
-.icon{width:40px;height:40px;border-radius:10px;background:var(--accent);object-fit:cover;flex:none}
-h1{font-size:20px;font-weight:600;margin:0}.sub{color:var(--muted);font-size:13px}
-.right{margin-left:auto;text-align:right}.clock{font-size:22px;font-variant-numeric:tabular-nums;font-weight:600}
-.live{display:inline-flex;align-items:center;gap:6px;color:var(--muted);font-size:12px}.dot{width:8px;height:8px;border-radius:50%;background:var(--ok)}.stale .dot{background:var(--faint)}
-.steps{display:grid;grid-template-columns:repeat(8,1fr);gap:6px;margin:4px 0 16px}.step .bar{height:6px;border-radius:3px;background:var(--line)}.step.done .bar{background:var(--ok)}.step.cur .bar{background:var(--accent)}
-.step .lbl{font-size:11px;color:var(--faint);margin-top:4px;text-transform:capitalize}.step.cur .lbl{color:var(--ink);font-weight:600}
-.card{background:var(--card);border:1px solid var(--line);border-radius:14px;padding:14px 16px;box-shadow:var(--shadow)}
-.now{display:flex;gap:12px;align-items:flex-start;margin-bottom:16px}.now .msg{font-size:16px}.now .meta{color:var(--muted);font-size:12px}
-.grid{display:grid;grid-template-columns:320px 1fr;gap:16px;align-items:start}@media (max-width:860px){.grid{grid-template-columns:1fr}.steps .lbl{display:none}}
-h2{font-size:12px;font-weight:600;color:var(--muted);text-transform:uppercase;letter-spacing:.04em;margin:0 0 10px}
-.phone{width:100%;max-width:300px;aspect-ratio:390/844;border-radius:34px;border:9px solid #111;background:#fff;overflow:hidden;margin:0 auto;display:block}
-.phone img,.phone iframe{width:100%;height:100%;object-fit:cover;object-position:top;border:0;display:block;cursor:zoom-in}
-.phone.vpf{position:relative}.phone iframe.vp{position:absolute;top:0;left:0;width:390px;height:844px;transform-origin:0 0;transform:scale(var(--k,.72));cursor:auto}
-.cap{text-align:center;color:var(--muted);font-size:12px;margin-top:8px}
-.film{display:flex;gap:6px;overflow-x:auto;margin-top:12px;padding-bottom:4px}.film img{width:48px;aspect-ratio:390/844;object-fit:cover;object-position:top;border-radius:8px;border:1px solid var(--line);cursor:zoom-in}
-.chips{display:flex;flex-wrap:wrap;gap:8px;margin-bottom:16px}.chip{font-size:12px;padding:5px 10px;border-radius:999px;background:var(--card);border:1px solid var(--line);color:var(--muted)}
-.chip.ok{background:var(--okbg);color:var(--ok);border-color:transparent}.chip.warn{background:var(--warnbg);color:var(--warn);border-color:transparent}.chip.bad{background:var(--badbg);color:var(--bad);border-color:transparent}
-.wall{display:grid;grid-template-columns:repeat(auto-fill,minmax(112px,1fr));gap:14px}
-.shot{text-align:center}.shot .frame{aspect-ratio:390/844;border-radius:16px;border:5px solid #111;overflow:hidden;background:#fff}.shot img{width:100%;height:100%;object-fit:cover;object-position:top;display:block;cursor:zoom-in}
-.shot .id{font-size:12px;margin-top:6px;word-break:break-all}.badge{display:inline-block;font-size:10px;padding:1px 7px;border-radius:999px;margin-top:3px}.badge.new{background:var(--okbg);color:var(--ok)}.badge.chg{background:var(--warnbg);color:var(--warn)}
-.section{margin-bottom:16px}.brand{display:flex;gap:14px;align-items:center;flex-wrap:wrap}.brand .site{width:220px;border-radius:10px;border:1px solid var(--line);cursor:zoom-in}
-.sw{display:flex;gap:6px}.sw span{width:22px;height:22px;border-radius:50%;border:1px solid var(--line)}
-.nav{display:flex;flex-wrap:wrap;gap:6px}.nav span{font-size:12px;padding:3px 8px;border-radius:6px;background:var(--bg);border:1px solid var(--line)}
-.log{list-style:none;margin:0;padding:0}.log li{display:flex;gap:10px;padding:10px 0;border-top:1px solid var(--line)}.log li:first-child{border-top:0}
-.log .t{color:var(--faint);font-size:12px;min-width:64px;font-variant-numeric:tabular-nums}.log .s{font-size:11px;color:var(--muted);text-transform:capitalize}.log .imgs{display:flex;gap:6px;margin-top:6px}.log .imgs img{height:72px;border-radius:8px;border:1px solid var(--line);cursor:zoom-in}
-.empty{color:var(--faint);font-size:13px;padding:8px 0}
-#lb{position:fixed;inset:0;background:rgba(0,0,0,.72);display:none;align-items:center;justify-content:center;z-index:9;cursor:zoom-out}#lb img{max-height:92vh;max-width:92vw;border-radius:14px;background:#fff}
-.enter{animation:enter .7s cubic-bezier(.2,.8,.2,1) both}@keyframes enter{from{opacity:0;transform:translateY(10px) scale(.94);filter:grayscale(1)}to{opacity:1;transform:none;filter:none}}
-.changed .frame{animation:chg .9s ease both}@keyframes chg{35%{opacity:.25;transform:scale(.96)}100%{opacity:1;transform:none}}
-.step.fresh .bar{animation:fill .7s ease both;transform-origin:left}@keyframes fill{from{transform:scaleX(0)}to{transform:scaleX(1)}}
-.slidein{animation:slide .45s cubic-bezier(.2,.8,.2,1) both}@keyframes slide{from{opacity:0;transform:translateY(-8px)}to{opacity:1;transform:none}}
-.phone.pulse{animation:pulse 1s ease-out}.phone.pulse.bad{animation-name:pulsebad}@keyframes pulse{from{outline:3px solid var(--ok);outline-offset:0}to{outline:3px solid transparent;outline-offset:10px}}@keyframes pulsebad{from{outline:3px solid var(--bad);outline-offset:0}to{outline:3px solid transparent;outline-offset:10px}}
-.toast{display:block;width:max-content;max-width:100%;margin:8px auto 0;font-size:12px;padding:4px 10px;border-radius:999px;background:var(--okbg);color:var(--ok);animation:toast 3.4s ease both}.toast.bad{background:var(--badbg);color:var(--bad)}@keyframes toast{0%{opacity:0;transform:translateY(4px)}10%,80%{opacity:1;transform:none}100%{opacity:0}}
-.icon,.step.cur .bar{transition:background-color .8s}.sw.pop span{animation:pop .6s ease both}@keyframes pop{50%{transform:scale(1.25)}}
-.quiet{color:var(--warn)}.quiet .dot{background:var(--warn)}.idle .dot{background:var(--faint)}
-.tog{font:inherit;font-size:12px;color:var(--muted);background:none;border:1px solid var(--line);border-radius:999px;padding:2px 9px;margin:6px 0 0 6px;cursor:pointer}.tog.on{color:var(--ink);border-color:var(--ink)}
-#fx{position:fixed;inset:0;width:100%;height:100%;pointer-events:none;z-index:8}
-@media (max-width:560px){header{flex-wrap:wrap}.right{margin-left:0;width:100%;text-align:left;display:flex;flex-wrap:wrap;align-items:center;gap:4px 12px}.right .clock{font-size:18px}.tog{margin:0 6px 0 0}}
-@media (prefers-reduced-motion:reduce){.enter,.changed .frame,.step.fresh .bar,.slidein,.phone.pulse,.sw.pop span,.toast{animation:none}.icon,.step.cur .bar{transition:none}}
-</style>
-</head>
-<body>
-<div class="wrap">
-<header><img class="icon" id="icon" alt=""><div><h1 id="name"></h1><div class="sub">Build board \xB7 updates itself as the app is built</div></div>
-<div class="right"><div class="clock" id="clock">00:00</div><div class="live" id="live"><span class="dot"></span><span id="updated">live</span></div>
-<div><span class="live idle" id="agent"><span class="dot"></span><span id="agentt">Waiting for the agent</span></span></div>
-<div><button class="tog" id="snd" type="button" aria-pressed="false">Sound off</button><button class="tog" id="ntf" type="button" aria-pressed="false" hidden>Notices off</button></div></div></header>
-<div class="steps" id="steps"></div>
-<div class="card now"><div style="flex:1"><div class="meta" id="nowmeta">Now</div><div class="msg" id="nowmsg"></div></div></div>
-<div class="grid">
-<div><div class="card"><h2 id="focuslbl">Latest</h2><div id="focus"></div><div class="film" id="film"></div></div></div>
-<div>
-<div class="chips" id="chips"></div>
-<div class="card section"><h2>Screens</h2><div class="wall" id="wall"></div></div>
-<div class="card section" id="brandcard"><h2>Brand</h2><div class="brand" id="brand"></div></div>
-<div class="card section" id="navcard"><h2>Navigation the test crawl followed</h2><div class="nav" id="nav"></div></div>
-<div class="card section"><h2>Postcards</h2><ul class="log" id="log"></ul></div>
-</div></div></div>
-<div id="lb"><img alt=""></div>
-<canvas id="fx" aria-hidden="true"></canvas>
-<script>window.__himiInitial = ${scriptJson(initial)};</script>
-<script>
-(function(){
-var cur=null, lastSeen=Date.now();
-function $(id){return document.getElementById(id)}
-function el(tag,cls,txt){var e=document.createElement(tag);if(cls)e.className=cls;if(txt!=null)e.textContent=txt;return e}
-function clear(e){while(e.firstChild)e.removeChild(e.firstChild)}
-function ago(ts){var s=Math.max(0,Math.round((Date.now()-Date.parse(ts))/1000));if(s<60)return s+"s ago";var m=Math.round(s/60);if(m<60)return m+" min ago";return Math.round(m/60)+" h ago"}
-function hhmm(ts){var d=new Date(ts);return d.toLocaleTimeString([], {hour:"2-digit",minute:"2-digit"})}
-function recent(ts){return Date.now()-Date.parse(ts)<10*60*1000}
-function zoomable(img){img.addEventListener("click",function(){var lb=$("lb");lb.firstChild.src=img.src;lb.style.display="flex"})}
-function img(src,cls){var i=el("img",cls);i.src=src;i.alt="";i.loading="lazy";zoomable(i);return i}
-function chip(txt,kind){return el("span","chip"+(kind?" "+kind:""),txt)}
-function render(s){
-  var sn=s.current?s.current.stepNumber:0;document.title=(sn?"("+sn+"/8) ":"")+s.app.name+" \xB7 build board";favicon(sn,!!(s.live&&s.live.buildError));$("name").textContent=s.app.name;
-  if(s.app.icon){$("icon").src=s.app.icon}else{$("icon").removeAttribute("src")}
-  var steps=$("steps");clear(steps);var n=s.current?s.current.stepNumber:0;
-  s.steps.forEach(function(name,i){var d=el("div","step"+(i+1<n?" done":i+1===n?" cur":""));d.appendChild(el("div","bar"));d.appendChild(el("div","lbl",(i+1)+". "+name));steps.appendChild(d)});
-  var last=s.journal[0];
-  $("nowmsg").textContent=last?last.message:"Waiting for the first postcard.";
-  $("nowmeta").textContent=last?("Now \xB7 "+(last.step?("step "+last.stepNumber+" of 8, "+last.step+" \xB7 "):"")+ago(last.ts)):"Now";
-  var focus=$("focus");var film=$("film");clear(film);
-  /* The live frame is KEPT across renders while its URL and its run are unchanged (a restarted run on
-     the same port is a different server, and the old frame would never see its builds). A new iframe is a full page
-     load of the preview: every postcard, rebuild and the once-a-minute re-render used to throw away
-     the in-place repaint, the preview's scroll and wherever the owner had navigated inside it. */
-  var kept=s.live?focus.querySelector("iframe"):null;if(kept&&(kept.getAttribute("src")!==s.live.url||kept.getAttribute("data-run")!==s.live.runId))kept=null;
-  if(kept){while(focus.lastChild&&focus.lastChild!==kept.parentNode)focus.removeChild(focus.lastChild)}else clear(focus);
-  if(s.live){$("focuslbl").textContent="Live preview";if(!kept){var f=el("div","phone vpf");var fr=document.createElement("iframe");fr.className="vp";fr.setAttribute("width","390");fr.setAttribute("height","844");fr.setAttribute("data-run",s.live.runId);fr.src=s.live.url;fr.title="Live preview";f.appendChild(fr);focus.appendChild(f)}fit();if(s.live.buildError){var be=el("div","chip bad",null);be.style.display="block";be.style.marginTop="8px";be.textContent="Last edit did not build, still showing the last good version: "+s.live.buildError;focus.appendChild(be)}focus.appendChild(el("div","cap",(s.live.watching?"Repaints as the app is edited \xB7 ":"The build this run started with; himi run --watch repaints on every edit \xB7 ")+s.live.url))}
-  else if(s.focus&&s.focus.frames.length){var fl=s.focus.frames;$("focuslbl").textContent="Latest \xB7 "+s.focus.id;var p=el("div","phone");p.appendChild(img(fl[fl.length-1].img));focus.appendChild(p);focus.appendChild(el("div","cap",fl.length+(fl.length===1?" version":" versions")+" so far"))}
-  else{$("focuslbl").textContent="Latest";focus.appendChild(el("div","empty","The first render appears here."))}
-  if(s.focus&&s.focus.frames.length>1)s.focus.frames.forEach(function(fm){film.appendChild(img(fm.img))});
-  var chips=$("chips");clear(chips);var h=s.health;
-  if(h.validate)chips.appendChild(chip(h.validate.ok?"Validate passing":"Validate: "+h.validate.errors+" errors",h.validate.ok?"ok":"bad"));
-  if(h.test){var t=h.test;var moved=t.prevGaps!=null&&t.prevGaps!==t.gaps;var tc=chip("Test crawl: "+t.screens+" screens, "+t.actions+" actions, "+(moved?"gaps "+t.prevGaps+" \u2192 ":""),t.ok?"ok":"bad");var gn=el("span",null,String(t.gaps));gn.id="gapn";tc.appendChild(gn);if(!moved)tc.appendChild(document.createTextNode(" gaps"));chips.appendChild(tc)}
-  h.ux.forEach(function(u){chips.appendChild(chip("UX drive "+u.platform+": "+u.status,u.status==="passed"?"ok":u.status==="failed"?"bad":"warn"))});
-  if(h.push)chips.appendChild(chip((h.push.draft?"Draft published":"Published live")+" \xB7 "+h.push.releaseId.slice(0,10),h.push.draft?"warn":"ok"));
-  if(!chips.firstChild)chips.appendChild(chip("Checks appear here as validate, test and push run"));
-  var wall=$("wall");clear(wall);
-  if(!s.screens.length)wall.appendChild(el("div","empty","Screens appear here as they render."));
-  s.screens.forEach(function(sc){var d=el("div","shot");d.setAttribute("data-id",sc.id);var fr=el("div","frame");fr.appendChild(img(sc.img));d.appendChild(fr);d.appendChild(el("div","id",sc.id));
-    if(recent(sc.firstSeen)&&sc.versions===1)d.appendChild(el("span","badge new","New"));else if(recent(sc.changedAt)&&sc.versions>1)d.appendChild(el("span","badge chg","Changed"));wall.appendChild(d)});
-  var brand=$("brand");clear(brand);$("brandcard").style.display=(s.brand.site||s.app.palette.length)?"":"none";
-  if(s.brand.site){var si=img(s.brand.site,"site");brand.appendChild(si)}
-  if(s.brand.site&&s.focus&&s.focus.frames.length){brand.appendChild(el("span","sub","\u2192"));var pf=el("div","shot");pf.style.width="90px";var ff=el("div","frame");ff.appendChild(img(s.focus.frames[s.focus.frames.length-1].img));pf.appendChild(ff);brand.appendChild(pf)}
-  if(s.app.palette.length){var sw=el("div","sw");s.app.palette.forEach(function(c){var d=el("span");d.style.background=c.hex;d.title=c.name+" "+c.hex;sw.appendChild(d)});brand.appendChild(sw)}
-  var nav=$("nav");clear(nav);$("navcard").style.display=s.nav.length?"":"none";s.nav.forEach(function(e){nav.appendChild(el("span",null,e.from+" \u2192 "+e.to))});
-  var log=$("log");clear(log);if(!s.journal.length)log.appendChild(el("li","empty","Postcards the agent journals appear here."));
-  s.journal.forEach(function(j){var li=el("li");li.appendChild(el("div","t",hhmm(j.ts)));var body=el("div");body.appendChild(el("div",null,j.message));if(j.step)body.appendChild(el("div","s","step "+j.stepNumber+" \xB7 "+j.step));
-    if(j.images.length){var row=el("div","imgs");j.images.forEach(function(u){row.appendChild(img(u))});body.appendChild(row)}li.appendChild(body);log.appendChild(li)});
-}
-/* Motion, sound and notices answer a CHANGE, never a redraw: effects() compares what is on the page
-   now with what it showed last, so opening the board, the once-a-minute redraw and the two-second
-   poll of an unchanged state do nothing, and each effect names a real event. */
-var seen=null,actx=null,sound=false,notices=false;try{sound=localStorage.getItem("himiStudioSound")==="1";notices=localStorage.getItem("himiStudioNotify")==="1"}catch(e){}
-var raf=window.requestAnimationFrame?window.requestAnimationFrame.bind(window):function(f){return setTimeout(function(){f(Date.now())},16)};
-function now(){return window.performance&&performance.now?performance.now():Date.now()}
-function reduced(){try{return matchMedia("(prefers-reduced-motion: reduce)").matches}catch(e){return false}}
-function tone(f,t,d,v,type){if(!sound)return;try{if(!actx){var AC=window.AudioContext||window.webkitAudioContext;if(!AC)return;actx=new AC()}var o=actx.createOscillator(),g=actx.createGain(),n=actx.currentTime+(t||0),dd=d||.18;o.type=type||"sine";o.frequency.value=f;g.gain.setValueAtTime(0,n);g.gain.linearRampToValueAtTime(v||.05,n+.01);g.gain.exponentialRampToValueAtTime(.0001,n+dd);o.connect(g);g.connect(actx.destination);o.start(n);o.stop(n+dd+.05)}catch(e){}}
-var SND={tick:function(){tone(1320,0,.05,.025,"triangle")},post:function(){tone(880,0,.08,.03)},step:function(){tone(523);tone(784,.12)},win:function(){tone(523);tone(659,.1);tone(784,.2);tone(1047,.3,.35)},fail:function(){tone(160,0,.3,.05,"sawtooth")}};
-/* Notices are the BOARD's opt-in, not just the browser's: a permission granted to this origin once
-   (an earlier board, another run) must not switch them on, and the toggle must switch them off. */
-function notify(title,body){try{if(notices&&"Notification" in window&&Notification.permission==="granted"&&document.hidden)new Notification(title,{body:body})}catch(e){}}
-function accentNow(){return (getComputedStyle(document.documentElement).getPropertyValue("--accent")||"").trim()||"#3b6fd8"}
-/* The preview lays out at a real phone's viewport (390 x 844 CSS px) and is scaled into the frame.
-   Sized to the frame itself it was ~280px wide: narrower than any phone, so screens overflowed
-   sideways and scrolled horizontally. */
-function fit(){var ph=$("focus").querySelector(".phone.vpf");if(!ph)return;var w=ph.clientWidth,h=ph.clientHeight;if(w&&h)ph.style.setProperty("--k",String(Math.min(w/390,h/844)))}
-window.addEventListener("resize",fit);
-function favicon(n,bad){try{var c=document.createElement("canvas");c.width=c.height=32;var x=c.getContext&&c.getContext("2d");if(!x)return;x.lineWidth=5;x.strokeStyle="rgba(128,128,128,.35)";x.beginPath();x.arc(16,16,12,0,6.2832);x.stroke();x.strokeStyle=accentNow();x.beginPath();x.arc(16,16,12,-1.5708,-1.5708+6.2832*n/8);x.stroke();if(bad){x.fillStyle="#d33";x.beginPath();x.arc(25,7,6,0,6.2832);x.fill()}$("fav").href=c.toDataURL("image/png")}catch(e){}}
-function burst(){var c=$("fx");c.setAttribute("data-bursts",String((+c.getAttribute("data-bursts")||0)+1));if(reduced())return;var x=c.getContext&&c.getContext("2d");if(!x)return;var W=c.width=innerWidth,H=c.height=innerHeight,cols=["#1f7a4d","#3b6fd8","#e0a030","#d4537e",accentNow()],P=[];for(var i=0;i<120;i++)P.push({x:W/2,y:H*.35,vx:(Math.random()-.5)*14,vy:-Math.random()*12-4,c:cols[i%cols.length],r:Math.random()*6.28});var t0=now();(function f(){x.clearRect(0,0,W,H);P.forEach(function(p){p.x+=p.vx;p.y+=p.vy;p.vy+=.35;p.r+=.2;x.save();x.translate(p.x,p.y);x.rotate(p.r);x.fillStyle=p.c;x.fillRect(-4,-2,8,4);x.restore()});if(now()-t0<2200)raf(f);else x.clearRect(0,0,W,H)})()}
-function countTo(e,a,b){if(!e)return;if(reduced()){e.textContent=String(b);return}var t0=now();(function f(){var k=Math.min(1,(now()-t0)/900);e.textContent=String(Math.round(a+(b-a)*k));if(k<1)raf(f)})()}
-function snap(s){var sc={},acc=null;s.screens.forEach(function(x){sc[x.id]=x.img});s.app.palette.forEach(function(p){if(p.name==="accentPrimary")acc=p.hex});return{screens:sc,step:s.current?s.current.stepNumber:0,top:s.journal[0]?s.journal[0].ts:null,build:s.live&&s.live.lastBuild?s.live.lastBuild.at:null,run:s.live?s.live.runId:null,push:s.health.push?s.health.push.releaseId:null,gaps:s.health.test?s.health.test.gaps:null,accent:acc}}
-function buildLine(b){if(!b.ok)return "Build failed \xB7 still showing the last good version";var what=b.screens.length?b.screens.slice(0,3).join(", ")+(b.screens.length>3?" +"+(b.screens.length-3):""):b.tokens?"design tokens":b.config?"app config":"no visible change";return "Rebuilt"+(b.ms!=null?" in "+(b.ms/1000).toFixed(1)+" s":"")+" \xB7 "+what}
-function effects(s){var is=snap(s),was=seen;seen=is;if(is.accent)document.documentElement.style.setProperty("--accent",is.accent);
-  /* The phone (kept across renders) and the Now line outlive a render: clear what they played last. */
-  var ph=$("focus").querySelector(".phone"),nm=$("nowmsg");if(ph)ph.classList.remove("pulse","bad");nm.classList.remove("slidein");if(!was)return;
-  var ticked=false;[].forEach.call($("wall").children,function(d){var id=d.getAttribute("data-id");if(!id)return;if(!(id in was.screens)){d.classList.add("enter");ticked=true}else if(was.screens[id]!==is.screens[id]){d.classList.add("changed");ticked=true}});if(ticked)SND.tick();
-  if(is.top&&is.top!==was.top){void nm.offsetWidth;nm.classList.add("slidein");var li=$("log").firstChild;if(li&&li.classList)li.classList.add("slidein");SND.post()}
-  if(is.step>was.step){var cs=$("steps").children[is.step-1];if(cs)cs.classList.add("fresh");SND.step();notify(s.app.name+" \xB7 step "+is.step+" of 8",s.journal[0]?s.journal[0].message:s.steps[is.step-1])}
-  /* A rebuild is a later build of the SAME run: a run appearing, or restarting, records its first
-     build too, and nothing was rebuilt then. */
-  if(is.build&&was.build&&is.run===was.run&&is.build!==was.build){var b=s.live.lastBuild;if(ph){void ph.offsetWidth;ph.classList.add("pulse");if(!b.ok)ph.classList.add("bad")}var tt=el("div","toast"+(b.ok?"":" bad"),buildLine(b));$("focus").appendChild(tt);setTimeout(function(){if(tt.parentNode)tt.parentNode.removeChild(tt)},3500);if(b.ok)SND.tick();else{SND.fail();notify(s.app.name+" \xB7 build failed",s.live.buildError||"")}}
-  if(was.gaps!=null&&is.gaps!=null&&is.gaps!==was.gaps)countTo($("gapn"),was.gaps,is.gaps);
-  if(is.accent&&was.accent&&is.accent!==was.accent){var sw=$("brand").querySelector(".sw");if(sw)sw.classList.add("pop");favicon(is.step,!!(s.live&&s.live.buildError))}
-  var published=is.push&&is.push!==was.push,handed=is.step===8&&was.step<8;if(published||handed){burst();SND.win();notify(s.app.name,published?"Draft published":"Handed over")}
-}
-function activityAt(s){var m=0;function add(v){var d=v?Date.parse(v):0;if(d>m)m=d}if(s.journal[0])add(s.journal[0].ts);s.screens.forEach(function(x){add(x.changedAt)});if(s.live&&s.live.lastBuild)add(s.live.lastBuild.at);["validate","test","push"].forEach(function(k){if(s.health[k])add(s.health[k].at)});return m}
-function paintToggles(){var b=$("snd");b.textContent=sound?"Sound on":"Sound off";b.className="tog"+(sound?" on":"");b.setAttribute("aria-pressed",String(sound));var nb=$("ntf");if(!("Notification" in window)){nb.hidden=true;return}var p=Notification.permission,on=notices&&p==="granted";nb.hidden=p==="denied";nb.textContent=on?"Notices on":"Notices off";nb.className="tog"+(on?" on":"");nb.setAttribute("aria-pressed",String(on))}
-function setNotices(v){notices=v;try{localStorage.setItem("himiStudioNotify",v?"1":"0")}catch(e){}paintToggles()}
-$("snd").addEventListener("click",function(){sound=!sound;try{localStorage.setItem("himiStudioSound",sound?"1":"0")}catch(e){}if(sound){try{if(actx&&actx.resume)actx.resume()}catch(e){}SND.post()}paintToggles()});
-/* The click acts on what the button SAYS (the effective state), so a remembered opt-in whose browser
-   permission was since reset reads "off" and one click asks for permission, not two. */
-$("ntf").addEventListener("click",function(){try{var p=Notification.permission;if(notices&&p==="granted"){setNotices(false);return}if(p==="granted"){setNotices(true);return}if(Notification.permission==="default")Promise.resolve(Notification.requestPermission()).then(function(p){setNotices(p==="granted")})}catch(e){}});
-document.addEventListener("click",function(){try{if(actx&&actx.state==="suspended")actx.resume()}catch(e){}},{once:true});
-paintToggles();
-window.__himiStudio=function(s){lastSeen=Date.now();if(!cur||cur.v!==s.v){cur=s;render(s);effects(s)}else{cur.generatedAt=s.generatedAt}};
-$("lb").addEventListener("click",function(){this.style.display="none"});
-window.__himiStudio(window.__himiInitial);
-setInterval(function(){var sc=document.createElement("script");sc.src="state.js?t="+Date.now();sc.onload=sc.onerror=function(){sc.remove()};document.head.appendChild(sc)},2000);
-var ticks=0;
-setInterval(function(){if(!cur)return;if(++ticks%60===0)render(cur);var start=cur.startedAt?Date.parse(cur.startedAt):Date.now();var s=Math.max(0,Math.floor((Date.now()-start)/1000));var hh=Math.floor(s/3600),mm=Math.floor(s%3600/60),ss=s%60;
-  $("clock").textContent=(hh?hh+":":"")+(mm<10&&hh?"0":"")+mm+":"+(ss<10?"0":"")+ss;
-  $("updated").textContent="updated "+ago(cur.generatedAt);$("live").className="live"+(Date.now()-lastSeen>10000?" stale":"");
-  var a=activityAt(cur),q=a?Date.now()-a:0,done=cur.current&&cur.current.stepNumber===8;
-  $("agent").className="live"+(!a?" idle":done?"":q>5*60*1000?" quiet":"");$("agentt").textContent=!a?"Waiting for the agent":done?"Handed over":q>5*60*1000?"Quiet for "+Math.floor(q/60000)+" min":"Agent active"},1000);
-})();
-</script>
-</body>
-</html>
-`;
-}
-function escapeHtml(s) {
-  return s.replace(/[&<>"']/g, (c) => ({ "&": "&amp;", "<": "&lt;", ">": "&gt;", '"': "&quot;", "'": "&#39;" })[c]);
-}
-var STUDIO_DIR, STUDIO_PAGE, STATE_FILE, MEMORY_FILE, VALIDATE_RECORD, PUSH_RECORD, EDGES_RECORD, RUN_RECORD, MAX_TIMELINE, MAX_JOURNAL, MAX_NAV_EDGES, readJson2, obj, num, text, historyUrl, runTime, scriptJson;
+var STUDIO_DIR, STUDIO_PAGE, STATE_FILE, MEMORY_FILE, VALIDATE_RECORD, PUSH_RECORD, EDGES_RECORD, RUN_RECORD, MAX_TIMELINE, MAX_JOURNAL, MAX_NAV_EDGES, readJson2, obj, num, text, historyUrl, runTime;
 var init_studio = __esm({
   "src/studio.ts"() {
+    init_studio_page();
+    init_studio_timeline();
     init_progress();
-    STUDIO_DIR = join36(".himi", "studio");
-    STUDIO_PAGE = join36(STUDIO_DIR, "index.html");
-    STATE_FILE = join36(STUDIO_DIR, "state.js");
-    MEMORY_FILE = join36(STUDIO_DIR, "memory.json");
-    VALIDATE_RECORD = join36(".himi", "validate.json");
-    PUSH_RECORD = join36(".himi", "last-push.json");
-    EDGES_RECORD = join36(".himi", "test-edges.json");
-    RUN_RECORD = join36(".himi", "run.json");
+    init_studio_page();
+    STUDIO_DIR = join37(".himi", "studio");
+    STUDIO_PAGE = join37(STUDIO_DIR, "index.html");
+    STATE_FILE = join37(STUDIO_DIR, "state.js");
+    MEMORY_FILE = join37(STUDIO_DIR, "memory.json");
+    VALIDATE_RECORD = join37(".himi", "validate.json");
+    PUSH_RECORD = join37(".himi", "last-push.json");
+    EDGES_RECORD = join37(".himi", "test-edges.json");
+    RUN_RECORD = join37(".himi", "run.json");
     MAX_TIMELINE = 500;
     MAX_JOURNAL = 80;
     MAX_NAV_EDGES = 40;
     readJson2 = (file) => {
       try {
-        return JSON.parse(readFileSync42(file, "utf8"));
+        return JSON.parse(readFileSync43(file, "utf8"));
       } catch {
         return null;
       }
@@ -39766,7 +40221,6 @@ var init_studio = __esm({
     text = (v) => typeof v === "string" && v ? v : null;
     historyUrl = (fileName) => `../history/${fileName}`;
     runTime = (runId) => runId.replace(/-[0-9a-f]+$/i, "");
-    scriptJson = (value) => JSON.stringify(value).replace(/</g, "\\u003c").replace(/\u2028/g, "\\u2028").replace(/\u2029/g, "\\u2029");
   }
 });
 
@@ -40245,11 +40699,11 @@ __export(captcha_exports, {
   captchaContentInput: () => captchaContentInput,
   runCaptcha: () => runCaptcha
 });
-import { readFileSync as readFileSync43 } from "node:fs";
+import { readFileSync as readFileSync44 } from "node:fs";
 import { resolve as resolve34 } from "node:path";
 function readObject(path2) {
   try {
-    return JSON.parse(readFileSync43(path2, "utf8"));
+    return JSON.parse(readFileSync44(path2, "utf8"));
   } catch {
     return {};
   }
@@ -40393,11 +40847,11 @@ var init_push_setup_apple_credentials = __esm({
 });
 
 // src/push-onboarding.ts
-import { existsSync as existsSync40, mkdirSync as mkdirSync18, readFileSync as readFileSync44, statSync as statSync9, writeFileSync as writeFileSync14, chmodSync as chmodSync2 } from "node:fs";
-import { basename as basename10, dirname as dirname22, join as join37, resolve as resolve35 } from "node:path";
+import { existsSync as existsSync41, mkdirSync as mkdirSync18, readFileSync as readFileSync45, statSync as statSync9, writeFileSync as writeFileSync14, chmodSync as chmodSync2 } from "node:fs";
+import { basename as basename10, dirname as dirname22, join as join38, resolve as resolve35 } from "node:path";
 function readJson3(path2) {
   try {
-    const parsed = JSON.parse(readFileSync44(path2, "utf8"));
+    const parsed = JSON.parse(readFileSync45(path2, "utf8"));
     return parsed && typeof parsed === "object" && !Array.isArray(parsed) ? parsed : {};
   } catch {
     return {};
@@ -40405,9 +40859,9 @@ function readJson3(path2) {
 }
 function pushInputsFromContent(dir) {
   const root = resolve35(dir);
-  if (!existsSync40(join37(root, "himalaya.content.json"))) return { initialized: false };
-  const content = readJson3(join37(root, "himalaya.content.json"));
-  const provisioning = readJson3(join37(root, "provisioning.json"));
+  if (!existsSync41(join38(root, "himalaya.content.json"))) return { initialized: false };
+  const content = readJson3(join38(root, "himalaya.content.json"));
+  const provisioning = readJson3(join38(root, "provisioning.json"));
   const native = provisioning.native ?? {};
   return {
     initialized: true,
@@ -40482,7 +40936,7 @@ function readKeyFile(path2) {
   }
   let body;
   try {
-    body = readFileSync44(path2, "utf8");
+    body = readFileSync45(path2, "utf8");
   } catch {
     return { ok: false, code: "key_file_unreadable", reason: "cannot read the selected key file; check its path and file permissions" };
   }
@@ -40536,13 +40990,13 @@ function buildPushSetupBody(i, keys) {
   };
 }
 function readPushOnboarding(dir) {
-  const path2 = join37(resolve35(dir), PUSH_ONBOARDING_PATH);
-  if (!existsSync40(path2)) return { version: 1 };
+  const path2 = join38(resolve35(dir), PUSH_ONBOARDING_PATH);
+  if (!existsSync41(path2)) return { version: 1 };
   const parsed = readJson3(path2);
   return { version: 1, ...parsed };
 }
 function writeFile(dir, file) {
-  const path2 = join37(resolve35(dir), PUSH_ONBOARDING_PATH);
+  const path2 = join38(resolve35(dir), PUSH_ONBOARDING_PATH);
   mkdirSync18(dirname22(path2), { recursive: true, mode: 448 });
   writeFileSync14(path2, JSON.stringify(file, null, 2) + "\n", { mode: 384 });
   try {
@@ -40571,8 +41025,8 @@ function recordPushDeferral(dir, d) {
   return push;
 }
 function clearPushDeferral(dir) {
-  const path2 = join37(resolve35(dir), PUSH_ONBOARDING_PATH);
-  if (!existsSync40(path2)) return;
+  const path2 = join38(resolve35(dir), PUSH_ONBOARDING_PATH);
+  if (!existsSync41(path2)) return;
   const { push: _dropped, ...rest } = readPushOnboarding(dir);
   writeFile(dir, { ...rest, version: 1 });
 }
@@ -41305,8 +41759,8 @@ __export(template_trim_exports, {
   routeMatcher: () => routeMatcher,
   runTemplateTrim: () => runTemplateTrim
 });
-import { cpSync, existsSync as existsSync41, mkdirSync as mkdirSync19, readdirSync as readdirSync21, readFileSync as readFileSync45, renameSync as renameSync4, rmSync as rmSync8, statSync as statSync10, writeFileSync as writeFileSync15 } from "node:fs";
-import { dirname as dirname23, join as join38 } from "node:path";
+import { cpSync, existsSync as existsSync42, mkdirSync as mkdirSync19, readdirSync as readdirSync21, readFileSync as readFileSync46, renameSync as renameSync4, rmSync as rmSync8, statSync as statSync10, writeFileSync as writeFileSync15 } from "node:fs";
+import { dirname as dirname23, join as join39 } from "node:path";
 function routeMatcher(pattern) {
   const detail = /^\^([A-Za-z0-9_]+)\(\?:\[_\/\]\(\.\+\)\)\?\$$/.exec(pattern);
   if (detail) {
@@ -42000,20 +42454,20 @@ function homeModulesPass(app, kept, edited) {
   return { text: patched.src, dropped: patched.droppedModules };
 }
 function listWorkers(dir) {
-  const root = join38(dir, "tier5-src");
-  if (!existsSync41(root)) return { dirs: [], files: {} };
-  const dirs = readdirSync21(root).filter((n) => statSync10(join38(root, n)).isDirectory()).sort();
+  const root = join39(dir, "tier5-src");
+  if (!existsSync42(root)) return { dirs: [], files: {} };
+  const dirs = readdirSync21(root).filter((n) => statSync10(join39(root, n)).isDirectory()).sort();
   const files = {};
   const walk2 = (abs, rel) => {
     for (const name of readdirSync21(abs)) {
       if (name === "node_modules") continue;
-      const p = join38(abs, name);
+      const p = join39(abs, name);
       const r = `${rel}/${name}`;
       if (statSync10(p).isDirectory()) walk2(p, r);
-      else if (/\.(?:[cm]?[jt]sx?|json)$/.test(name)) files[r] = readFileSync45(p, "utf8");
+      else if (/\.(?:[cm]?[jt]sx?|json)$/.test(name)) files[r] = readFileSync46(p, "utf8");
     }
   };
-  for (const d of dirs) walk2(join38(root, d), `tier5-src/${d}`);
+  for (const d of dirs) walk2(join39(root, d), `tier5-src/${d}`);
   return { dirs, files };
 }
 function csv(v) {
@@ -42036,16 +42490,16 @@ async function runTemplateTrim(req, deps) {
     links = req.links;
   }
   const dir = req.dir;
-  const devPath = join38(dir, "dev/index.ts");
-  const configPath = join38(dir, "config.ts");
-  if (!existsSync41(devPath) || !existsSync41(configPath)) {
+  const devPath = join39(dir, "dev/index.ts");
+  const configPath = join39(dir, "config.ts");
+  if (!existsSync42(devPath) || !existsSync42(configPath)) {
     return refuse3(new TrimRefusal(`${dir} has no dev/index.ts + config.ts \u2014 point --content at an app scaffolded with \`himi init --template\``));
   }
   if (isTemplateSourceTree(dir)) {
     return refuse3(new TrimRefusal(`${dir} is a template source tree (its identity is still __HIMI_APP_*__ sentinels) \u2014 trim the app \`himi init --template\` scaffolds from it, not the template itself`));
   }
-  const dev = readFileSync45(devPath, "utf8");
-  const config = readFileSync45(configPath, "utf8");
+  const dev = readFileSync46(devPath, "utf8");
+  const config = readFileSync46(configPath, "utf8");
   const workers = listWorkers(dir);
   let plan;
   try {
@@ -42055,22 +42509,22 @@ async function runTemplateTrim(req, deps) {
     throw e;
   }
   if (req.dryRun) return { code: 0, result: { ok: true, dryRun: true, ...plan.report, validate: null } };
-  const hadHimi = existsSync41(join38(dir, ".himi"));
-  const backupRel = join38(".himi", "trim-backup", (/* @__PURE__ */ new Date()).toISOString().replace(/[:.]/g, "-"));
-  const backup = join38(dir, backupRel);
+  const hadHimi = existsSync42(join39(dir, ".himi"));
+  const backupRel = join39(".himi", "trim-backup", (/* @__PURE__ */ new Date()).toISOString().replace(/[:.]/g, "-"));
+  const backup = join39(dir, backupRel);
   const originals = [[devPath, "dev/index.ts"], [configPath, "config.ts"]];
   const moved = [];
   const restore = () => {
     for (const [path2, rel] of originals) {
-      const original = readFileSync45(join38(backup, rel));
-      if (!existsSync41(path2) || !readFileSync45(path2).equals(original)) writeFileSync15(path2, original);
+      const original = readFileSync46(join39(backup, rel));
+      if (!existsSync42(path2) || !readFileSync46(path2).equals(original)) writeFileSync15(path2, original);
     }
-    for (const name of [...moved].reverse()) renameSync4(join38(backup, "tier5-src", name), join38(dir, "tier5-src", name));
+    for (const name of [...moved].reverse()) renameSync4(join39(backup, "tier5-src", name), join39(dir, "tier5-src", name));
   };
   const dropBackup = () => {
     rmSync8(backup, { recursive: true, force: true });
-    for (const d of [dirname23(backup), join38(dir, ".himi")]) {
-      if (d === join38(dir, ".himi") && hadHimi) break;
+    for (const d of [dirname23(backup), join39(dir, ".himi")]) {
+      if (d === join39(dir, ".himi") && hadHimi) break;
       try {
         if (!readdirSync21(d).length) rmSync8(d, { recursive: true });
       } catch {
@@ -42096,9 +42550,9 @@ async function runTemplateTrim(req, deps) {
     return { code: 1, result: { ok: false, error: `${error} (${message}); every file was restored`, rolledBack: true, ...base(validate4) } };
   };
   try {
-    mkdirSync19(join38(backup, "dev"), { recursive: true });
-    for (const [path2, rel] of originals) cpSync(path2, join38(backup, rel));
-    if (plan.removedWorkers.length) mkdirSync19(join38(backup, "tier5-src"), { recursive: true });
+    mkdirSync19(join39(backup, "dev"), { recursive: true });
+    for (const [path2, rel] of originals) cpSync(path2, join39(backup, rel));
+    if (plan.removedWorkers.length) mkdirSync19(join39(backup, "tier5-src"), { recursive: true });
   } catch (e) {
     dropBackup();
     return { code: 1, result: { ok: false, error: `could not back up the app before trimming it (${e.message}); nothing was changed`, rolledBack: true, ...base() } };
@@ -42106,7 +42560,7 @@ async function runTemplateTrim(req, deps) {
   try {
     const moveDir = deps.moveDir ?? renameSync4;
     for (const name of plan.removedWorkers) {
-      moveDir(join38(dir, "tier5-src", name), join38(backup, "tier5-src", name));
+      moveDir(join39(dir, "tier5-src", name), join39(backup, "tier5-src", name));
       moved.push(name);
     }
     if (plan.dev !== dev) writeFileSync15(devPath, plan.dev);
@@ -42117,7 +42571,7 @@ async function runTemplateTrim(req, deps) {
   let failure;
   let validate3;
   try {
-    const written = parseApp(readFileSync45(devPath, "utf8"), readFileSync45(configPath, "utf8"));
+    const written = parseApp(readFileSync46(devPath, "utf8"), readFileSync46(configPath, "utf8"));
     const leftovers = leftoverNavRefs(written.nav.value, plan.removedIds);
     if (leftovers.length) failure = { error: "navigation still names screens this trim removed", leftovers };
     else {
@@ -42811,8 +43265,8 @@ __export(pack_exports, {
 });
 import { createHash as createHash21 } from "node:crypto";
 import { deflateRawSync, inflateRawSync } from "node:zlib";
-import { existsSync as existsSync42, mkdirSync as mkdirSync20, readFileSync as readFileSync46, readdirSync as readdirSync22, rmSync as rmSync9, statSync as statSync11, writeFileSync as writeFileSync16 } from "node:fs";
-import { dirname as dirname24, join as join39, resolve as resolve37 } from "node:path";
+import { existsSync as existsSync43, mkdirSync as mkdirSync20, readFileSync as readFileSync47, readdirSync as readdirSync22, rmSync as rmSync9, statSync as statSync11, writeFileSync as writeFileSync16 } from "node:fs";
+import { dirname as dirname24, join as join40, resolve as resolve37 } from "node:path";
 function writeZip(entries) {
   const sorted2 = entries.slice().sort((a, b) => a.path < b.path ? -1 : a.path > b.path ? 1 : 0);
   const total = sorted2.reduce((n, e) => n + e.bytes.length, 0);
@@ -42906,13 +43360,13 @@ function inflateEntry(buf, entry) {
   return bytes2;
 }
 function readIf(path2) {
-  return existsSync42(path2) && statSync11(path2).isFile() ? readFileSync46(path2) : null;
+  return existsSync43(path2) && statSync11(path2).isFile() ? readFileSync47(path2) : null;
 }
 function listDir(dir) {
-  return existsSync42(dir) ? readdirSync22(dir).filter((f) => statSync11(join39(dir, f)).isFile()) : [];
+  return existsSync43(dir) ? readdirSync22(dir).filter((f) => statSync11(join40(dir, f)).isFile()) : [];
 }
 function gatherReleaseEntries(appDir2) {
-  const manifestPath = join39(appDir2, HIMI_PACKAGE_MANIFEST_PATH);
+  const manifestPath = join40(appDir2, HIMI_PACKAGE_MANIFEST_PATH);
   const manifestBytes = readIf(manifestPath);
   if (!manifestBytes) throw new Error(`no ${HIMI_PACKAGE_MANIFEST_PATH} in ${appDir2} \u2014 build a release there first`);
   const manifest = JSON.parse(manifestBytes.toString("utf8"));
@@ -42936,7 +43390,7 @@ function gatherReleaseEntries(appDir2) {
   }
   const missing = [];
   for (const rel of wanted) {
-    const bytes2 = readIf(join39(appDir2, rel));
+    const bytes2 = readIf(join40(appDir2, rel));
     if (bytes2) entries.push({ path: rel, bytes: bytes2 });
     else missing.push(rel);
   }
@@ -42947,12 +43401,12 @@ function gatherReleaseEntries(appDir2) {
     );
   }
   for (const name of SINGLETONS) {
-    const bytes2 = readIf(join39(appDir2, name));
+    const bytes2 = readIf(join40(appDir2, name));
     if (bytes2) entries.push({ path: name, bytes: bytes2 });
   }
   const skipped = [];
   for (const sub of ["screens", "bundles", "assets", "widgets"]) {
-    for (const f of listDir(join39(appDir2, sub))) {
+    for (const f of listDir(join40(appDir2, sub))) {
       if (!wanted.has(`${sub}/${f}`)) skipped.push(`${sub}/${f}`);
     }
   }
@@ -42985,18 +43439,18 @@ function buildEntries(appDir2, app, opts) {
   return { all, header, manifest, skipped };
 }
 function packRelease(releaseRoot, app, out, opts = {}) {
-  const appDir2 = join39(resolve37(releaseRoot), app);
+  const appDir2 = join40(resolve37(releaseRoot), app);
   const { all, header, skipped } = buildEntries(appDir2, app, opts);
   const buf = writeZip(all);
-  const isDir2 = existsSync42(out) && statSync11(out).isDirectory();
-  const outFile = isDir2 ? join39(resolve37(out), packageFileName(app, header.releaseId)) : resolve37(out);
+  const isDir2 = existsSync43(out) && statSync11(out).isDirectory();
+  const outFile = isDir2 ? join40(resolve37(out), packageFileName(app, header.releaseId)) : resolve37(out);
   mkdirSync20(dirname24(outFile), { recursive: true });
   writeFileSync16(outFile, buf);
   return { app, releaseId: header.releaseId, header, out: outFile, bytes: buf.length, entryCount: all.length, skipped };
 }
 function resolvePackageDirDest(outDir, app, releaseId) {
   const packagedApp = (dir) => {
-    const bytes2 = readIf(join39(dir, HIMI_PACKAGE_HEADER_PATH));
+    const bytes2 = readIf(join40(dir, HIMI_PACKAGE_HEADER_PATH));
     if (!bytes2) return void 0;
     try {
       return JSON.parse(bytes2.toString("utf8")).app;
@@ -43005,15 +43459,15 @@ function resolvePackageDirDest(outDir, app, releaseId) {
     }
   };
   const replaceable = (dir) => {
-    if (!existsSync42(dir)) return true;
+    if (!existsSync43(dir)) return true;
     if (!statSync11(dir).isDirectory()) return false;
     return readdirSync22(dir).length === 0 || packagedApp(dir) === app;
   };
-  if (existsSync42(outDir) && !statSync11(outDir).isDirectory()) {
+  if (existsSync43(outDir) && !statSync11(outDir).isDirectory()) {
     throw new Error(`refusing to write a package tree over ${outDir} \u2014 it is a file, not a directory`);
   }
   if (replaceable(outDir)) return outDir;
-  const child = join39(outDir, packageDirName(app, releaseId));
+  const child = join40(outDir, packageDirName(app, releaseId));
   if (!replaceable(child)) {
     throw new Error(
       `refusing to replace ${child}: it is not empty and is not a ${app} package (no ${HIMI_PACKAGE_HEADER_PATH}). Pass --out to a new or empty directory.`
@@ -43027,13 +43481,13 @@ function packReleaseToDir(releaseRoot, app, outDir, opts = {}) {
       "a package carrying the app's source has no --format dir form: readers that predate the source entry drop it before hashing a directory and refuse the package as tampered. Pack it as a .himi archive."
     );
   }
-  const appDir2 = join39(resolve37(releaseRoot), app);
+  const appDir2 = join40(resolve37(releaseRoot), app);
   const { all, header, skipped } = buildEntries(appDir2, app, opts);
   const dest = resolvePackageDirDest(resolve37(outDir), app, header.releaseId);
   rmSync9(dest, { recursive: true, force: true });
   let bytes2 = 0;
   for (const entry of all) {
-    const target = join39(dest, entry.path);
+    const target = join40(dest, entry.path);
     mkdirSync20(dirname24(target), { recursive: true });
     writeFileSync16(target, entry.bytes);
     bytes2 += entry.bytes.length;
@@ -43056,21 +43510,21 @@ function openPackageBuffer(buf) {
   return openFromEntries(readZip(buf), { requireHeader: true });
 }
 function openPackageFile(file) {
-  return openPackageBuffer(readFileSync46(file));
+  return openPackageBuffer(readFileSync47(file));
 }
 function openPackageDir(dir) {
   const root = resolve37(dir);
   const entries = /* @__PURE__ */ new Map();
   const walk2 = (rel) => {
-    const abs = rel ? join39(root, rel) : root;
+    const abs = rel ? join40(root, rel) : root;
     for (const name of readdirSync22(abs)) {
       const childRel = rel ? `${rel}/${name}` : name;
-      const childAbs = join39(abs, name);
+      const childAbs = join40(abs, name);
       if (statSync11(childAbs).isDirectory()) walk2(childRel);
-      else if (isSafeEntryName(childRel)) entries.set(childRel, readFileSync46(childAbs));
+      else if (isSafeEntryName(childRel)) entries.set(childRel, readFileSync47(childAbs));
     }
   };
-  if (!existsSync42(root)) throw new Error(`no such package directory: ${root}`);
+  if (!existsSync43(root)) throw new Error(`no such package directory: ${root}`);
   walk2("");
   const manifestBytes = entries.get(HIMI_PACKAGE_MANIFEST_PATH);
   if (manifestBytes) {
@@ -43112,10 +43566,10 @@ function unpackTo(buf, dest, appFallback) {
   if (!app) throw new Error("package declares no app id (no himi-package.json and no manifest.app)");
   if (!isSafeAppId(app)) throw new Error(`package declares an unsafe app id ${JSON.stringify(app)} \u2014 refusing to unpack it`);
   const root = resolve37(dest);
-  const appDir2 = join39(root, app);
+  const appDir2 = join40(root, app);
   rmSync9(appDir2, { recursive: true, force: true });
   for (const [rel, bytes2] of entries) {
-    const target = join39(appDir2, rel);
+    const target = join40(appDir2, rel);
     mkdirSync20(dirname24(target), { recursive: true });
     writeFileSync16(target, bytes2);
   }
@@ -43151,20 +43605,20 @@ __export(app_source_exports, {
   writeConflicts: () => writeConflicts,
   zipAppSource: () => zipAppSource
 });
-import { readdirSync as readdirSync23, lstatSync as lstatSync6, readFileSync as readFileSync47, mkdirSync as mkdirSync21, writeFileSync as writeFileSync17, existsSync as existsSync43, rmSync as rmSync10, rmdirSync, unlinkSync as unlinkSync3 } from "node:fs";
-import { join as join40, resolve as resolve38, sep as sep10 } from "node:path";
+import { readdirSync as readdirSync23, lstatSync as lstatSync6, readFileSync as readFileSync48, mkdirSync as mkdirSync21, writeFileSync as writeFileSync17, existsSync as existsSync44, rmSync as rmSync10, rmdirSync, unlinkSync as unlinkSync3 } from "node:fs";
+import { join as join41, resolve as resolve38, sep as sep10 } from "node:path";
 import { deflateRawSync as deflateRawSync2 } from "node:zlib";
 function walkSourceTree(dir, file, skip) {
   const walk2 = (relDir) => {
-    for (const name of readdirSync23(join40(dir, relDir))) {
-      const rel = relDir ? join40(relDir, name) : name;
-      const st = lstatSync6(join40(dir, rel));
+    for (const name of readdirSync23(join41(dir, relDir))) {
+      const rel = relDir ? join41(relDir, name) : name;
+      const st = lstatSync6(join41(dir, rel));
       if (st.isSymbolicLink()) {
         skip(rel);
         continue;
       }
       if (st.isDirectory()) {
-        if (isDeniedSourceDir(name, relDir) || existsSync43(join40(dir, rel, PACKAGE_DIR_MARKER))) skip(rel);
+        if (isDeniedSourceDir(name, relDir) || existsSync44(join41(dir, rel, PACKAGE_DIR_MARKER))) skip(rel);
         else walk2(rel);
         continue;
       }
@@ -43182,7 +43636,7 @@ function collectAppSource(dir) {
   const skipped = [];
   walkSourceTree(
     dir,
-    (archivePath, hostRel) => entries.push({ path: archivePath, bytes: readFileSync47(join40(dir, hostRel)) }),
+    (archivePath, hostRel) => entries.push({ path: archivePath, bytes: readFileSync48(join41(dir, hostRel)) }),
     (hostRel) => skipped.push(hostRel)
   );
   entries.sort((a, b) => a.path < b.path ? -1 : a.path > b.path ? 1 : 0);
@@ -43236,13 +43690,13 @@ function writeAppSource(entries, destDir) {
     const segments = entry.path.split("/");
     let dir = root;
     for (const segment of segments.slice(0, -1)) {
-      dir = join40(dir, segment);
+      dir = join41(dir, segment);
       const kind = pathKind(dir);
       if (kind?.isSymbolicLink()) unlinkSync3(dir);
       else if (kind) continue;
       mkdirSync21(dir);
     }
-    const target = join40(root, ...segments);
+    const target = join41(root, ...segments);
     if (pathKind(target)?.isSymbolicLink()) unlinkSync3(target);
     writeFileSync17(target, entry.bytes);
     written.push(entry.path);
@@ -43250,7 +43704,7 @@ function writeAppSource(entries, destDir) {
   return written;
 }
 function staleSourcePaths(entries, destDir) {
-  if (!existsSync43(destDir)) return [];
+  if (!existsSync44(destDir)) return [];
   const archived = new Set(entries.map((e) => e.path));
   const stale = [];
   walkSourceTree(destDir, (archivePath) => {
@@ -43277,7 +43731,7 @@ function writeConflicts(entries, destDir) {
     let dir = root;
     let stop = false;
     for (const [i, segment] of segments.slice(0, -1).entries()) {
-      dir = join40(dir, segment);
+      dir = join41(dir, segment);
       const kind2 = pathKind(dir);
       if (!kind2 || kind2.isSymbolicLink()) {
         stop = true;
@@ -43289,7 +43743,7 @@ function writeConflicts(entries, destDir) {
       break;
     }
     if (stop) continue;
-    const kind = pathKind(join40(root, ...segments));
+    const kind = pathKind(join41(root, ...segments));
     if (kind && !kind.isSymbolicLink() && kind.isDirectory()) {
       say(entry.path, "is a directory here, but the release has a file at that path");
     }
@@ -43299,22 +43753,22 @@ function writeConflicts(entries, destDir) {
 function removeStaleSource(entries, destDir) {
   const root = resolve38(destDir);
   const removed = staleSourcePaths(entries, root);
-  for (const rel of removed) rmSync10(join40(root, ...rel.split("/")), { force: true });
+  for (const rel of removed) rmSync10(join41(root, ...rel.split("/")), { force: true });
   const needed = /* @__PURE__ */ new Set();
   for (const entry of entries) {
     if (isDeniedSourcePath(entry.path)) continue;
     const segments = entry.path.split("/");
     for (let i = 1; i < segments.length; i++) needed.add(segments.slice(0, i).join("/"));
   }
-  if (existsSync43(root)) pruneEmptyDirs(root, "", needed, removed);
+  if (existsSync44(root)) pruneEmptyDirs(root, "", needed, removed);
   return removed.sort();
 }
 function pruneEmptyDirs(root, rel, needed, removed) {
   let empty = true;
-  for (const name of readdirSync23(rel ? join40(root, rel) : root)) {
-    const childRel = rel ? join40(rel, name) : name;
+  for (const name of readdirSync23(rel ? join41(root, rel) : root)) {
+    const childRel = rel ? join41(rel, name) : name;
     const posix3 = childRel.split(sep10).join("/");
-    const kind = lstatSync6(join40(root, childRel));
+    const kind = lstatSync6(join41(root, childRel));
     if (kind.isSymbolicLink() || !kind.isDirectory() || isDeniedSourceDir(name, rel)) {
       empty = false;
       continue;
@@ -43324,7 +43778,7 @@ function pruneEmptyDirs(root, rel, needed, removed) {
       empty = false;
       continue;
     }
-    rmdirSync(join40(root, childRel));
+    rmdirSync(join41(root, childRel));
     removed.push(`${posix3}/`);
   }
   return empty;
@@ -43379,13 +43833,13 @@ __export(eject_exports, {
   EJECTABLE: () => EJECTABLE,
   ejectModule: () => ejectModule
 });
-import { existsSync as existsSync44, mkdirSync as mkdirSync22, readFileSync as readFileSync48, writeFileSync as writeFileSync18 } from "node:fs";
-import { dirname as dirname25, join as join41, relative as relative7, resolve as resolve39, sep as sep11 } from "node:path";
+import { existsSync as existsSync45, mkdirSync as mkdirSync22, readFileSync as readFileSync49, writeFileSync as writeFileSync18 } from "node:fs";
+import { dirname as dirname25, join as join42, relative as relative7, resolve as resolve39, sep as sep11 } from "node:path";
 function locate(repoRootOrCwd, mod) {
   const inRepo = resolve39(repoRootOrCwd, `stdlib/flows/${mod}/src/index.ts`);
-  if (existsSync44(inRepo)) return { path: inRepo, form: "source" };
+  if (existsSync45(inRepo)) return { path: inRepo, form: "source" };
   const dist = resolve39(repoRootOrCwd, `node_modules/@wix/himalaya/dist/${mod}.mjs`);
-  if (existsSync44(dist)) return { path: dist, form: "bundle" };
+  if (existsSync45(dist)) return { path: dist, form: "bundle" };
   return null;
 }
 function specifiersFor(mod) {
@@ -43409,7 +43863,7 @@ function ejectModule(opts) {
     };
   }
   const ext = found.form === "source" ? "ts" : "mjs";
-  const target = join41(contentDir2, "tier5-src", "_ejected", `${mod}.${ext}`);
+  const target = join42(contentDir2, "tier5-src", "_ejected", `${mod}.${ext}`);
   mkdirSync22(dirname25(target), { recursive: true });
   const banner = `// EJECTED from @wix/himalaya/${mod}. This app owns this file now.
 //
@@ -43423,15 +43877,15 @@ function ejectModule(opts) {
 // gate still applies. Ejecting buys layout and flow, never the floor.
 
 `;
-  const normalized = readFileSync48(found.path, "utf8").replace(
+  const normalized = readFileSync49(found.path, "utf8").replace(
     /(["'])@himalaya\/([a-z0-9-]+(?:\/[a-z0-9-]+)?)\1/g,
     (_m, q, sub) => `${q}@wix/himalaya/${sub}${q}`
   );
   writeFileSync18(target, banner + normalized);
   const rewired = [];
   for (const f of files) {
-    if (!existsSync44(f)) continue;
-    const before = readFileSync48(f, "utf8");
+    if (!existsSync45(f)) continue;
+    const before = readFileSync49(f, "utf8");
     let after = before;
     let rel = relative7(dirname25(f), target).split(sep11).join("/").replace(/\.tsx?$/, ".js");
     if (!rel.startsWith(".")) rel = `./${rel}`;
@@ -43479,14 +43933,14 @@ __export(test_exports, {
   scopeDescriptors: () => scopeDescriptors,
   writeRecordedMocks: () => writeRecordedMocks
 });
-import { existsSync as existsSync45, mkdirSync as mkdirSync23, readFileSync as readFileSync49, writeFileSync as writeFileSync19 } from "node:fs";
-import { join as join42, resolve as resolve40 } from "node:path";
+import { existsSync as existsSync46, mkdirSync as mkdirSync23, readFileSync as readFileSync50, writeFileSync as writeFileSync19 } from "node:fs";
+import { join as join43, resolve as resolve40 } from "node:path";
 function readTestConfig(dir) {
   const p = resolve40(dir, TEST_CONFIG_FILE);
-  if (!existsSync45(p)) return {};
+  if (!existsSync46(p)) return {};
   let parsed;
   try {
-    parsed = JSON.parse(readFileSync49(p, "utf8"));
+    parsed = JSON.parse(readFileSync50(p, "utf8"));
   } catch (e) {
     throw new Error(`${TEST_CONFIG_FILE} is not valid JSON \u2014 ${e.message}`);
   }
@@ -43529,7 +43983,7 @@ function readTestConfig(dir) {
 function readNetRules(path2) {
   let parsed;
   try {
-    parsed = JSON.parse(readFileSync49(path2, "utf8"));
+    parsed = JSON.parse(readFileSync50(path2, "utf8"));
   } catch (e) {
     throw new Error(`--net ${path2} could not be read as JSON \u2014 ${e.message}`);
   }
@@ -43550,7 +44004,7 @@ function readNetRules(path2) {
 function defaultNetRules(dir) {
   for (const rel of ["dev/net-mocks.json", "tests/net-mocks.json"]) {
     const p = resolve40(dir, rel);
-    if (existsSync45(p)) {
+    if (existsSync46(p)) {
       const rules = readNetRules(p);
       if (rules.length) return { rules, from: rel };
     }
@@ -43566,7 +44020,7 @@ function readCannedResponses() {
   ];
   for (const url of candidates) {
     try {
-      const parsed = JSON.parse(readFileSync49(url, "utf8"));
+      const parsed = JSON.parse(readFileSync50(url, "utf8"));
       const byKey = {};
       for (const [k, v] of Object.entries(parsed)) {
         if (!k.startsWith("//")) byKey[k] = v;
@@ -43658,8 +44112,8 @@ function writeRecordedMocks(opts) {
     mkdir: (p) => mkdirSync23(p, { recursive: true }),
     write: (p, s) => writeFileSync19(p, s)
   };
-  fs.mkdir(join42(opts.dir, "dev"));
-  fs.write(join42(opts.dir, "dev", "net-mocks.json"), JSON.stringify(opts.mocks, null, 2) + "\n");
+  fs.mkdir(join43(opts.dir, "dev"));
+  fs.write(join43(opts.dir, "dev", "net-mocks.json"), JSON.stringify(opts.mocks, null, 2) + "\n");
   return { ok: true, rules, to: "dev/net-mocks.json" };
 }
 function scopeDescriptors(descriptors, requestedIds, invalidScreens) {
@@ -43973,12 +44427,12 @@ async function runCrawl(opts) {
   };
 }
 function describeTransport(net, opts, ran) {
-  const layers = [];
-  if (net) layers.push(`mocked (${net.from})`);
+  const layers2 = [];
+  if (net) layers2.push(`mocked (${net.from})`);
   const cmsCount = Object.keys(opts.cmsSeed ?? {}).length;
-  if (cmsCount) layers.push(`cms (${cmsCount} seeded collection${cmsCount === 1 ? "" : "s"})`);
-  if (opts.canned?.count) layers.push(`canned (${opts.canned.count} frozen endpoints, ${opts.canned.from} \u2014 exercises code paths, not API-contract truth)`);
-  const base = layers.length ? layers.join(" + ") : "offline (no net fixture \u2014 screens are crawled against a rejecting transport, which exercises their failure UI)";
+  if (cmsCount) layers2.push(`cms (${cmsCount} seeded collection${cmsCount === 1 ? "" : "s"})`);
+  if (opts.canned?.count) layers2.push(`canned (${opts.canned.count} frozen endpoints, ${opts.canned.from} \u2014 exercises code paths, not API-contract truth)`);
+  const base = layers2.length ? layers2.join(" + ") : "offline (no net fixture \u2014 screens are crawled against a rejecting transport, which exercises their failure UI)";
   const hostile = ran.hostile ? " + hostile boot passes (empty-lists, all-500)" : "";
   const relations = ran.relations ? " + relations" : "";
   const deep = ran.deep ? ` + deep chains (depth ${opts.deep})` : "";
@@ -44116,14 +44570,14 @@ var mobile_ux_lint_exports = {};
 __export(mobile_ux_lint_exports, {
   mobileUxIssues: () => mobileUxIssues
 });
-import { existsSync as existsSync46, readFileSync as readFileSync50 } from "node:fs";
-import { join as join43 } from "node:path";
+import { existsSync as existsSync47, readFileSync as readFileSync51 } from "node:fs";
+import { join as join44 } from "node:path";
 function mobileUxIssues(dir, strict) {
-  const file = join43(dir, "MOBILE-UX.md");
-  if (!existsSync46(file)) return [];
+  const file = join44(dir, "MOBILE-UX.md");
+  if (!existsSync47(file)) return [];
   let text5;
   try {
-    text5 = readFileSync50(file, "utf8");
+    text5 = readFileSync51(file, "utf8");
   } catch {
     return [];
   }
@@ -45798,8 +46252,8 @@ __export(functions_exports, {
   resolveFunctionsTarget: () => resolveFunctionsTarget,
   runRemoteFunctionOperation: () => runRemoteFunctionOperation
 });
-import { readFileSync as readFileSync51, existsSync as existsSync47 } from "node:fs";
-import { join as join44, resolve as resolve41 } from "node:path";
+import { readFileSync as readFileSync52, existsSync as existsSync48 } from "node:fs";
+import { join as join45, resolve as resolve41 } from "node:path";
 function resolveFunctionsTarget(input) {
   const explicitUrl = input.functionsUrl?.trim();
   if (explicitUrl) return { mode: "remote", baseUrl: explicitUrl };
@@ -45818,9 +46272,9 @@ async function loadFunctionsApp(dir) {
   }
   const sources = {};
   for (const definition of config.functions.functions) {
-    const source = [".ts", ".js", ".mts", ".mjs"].map((extension) => join44(loaded.dir, "functions", `${definition.name}${extension}`)).find(existsSync47);
+    const source = [".ts", ".js", ".mts", ".mjs"].map((extension) => join45(loaded.dir, "functions", `${definition.name}${extension}`)).find(existsSync48);
     if (!source) throw new Error(`missing source for function ${definition.name}; expected functions/${definition.name}.ts`);
-    sources[definition.name] = readFileSync51(source, "utf8");
+    sources[definition.name] = readFileSync52(source, "utf8");
   }
   const data = config.cms || config.data ? mergeDataResources(config) : void 0;
   const dataErrors = validateDataResources(data, loaded.name).filter((issue2) => issue2.severity === "error");
@@ -45972,14 +46426,14 @@ __export(studio_reel_exports, {
   utcDay: () => utcDay
 });
 import { createHash as createHash24 } from "node:crypto";
-import { lstatSync as lstatSync7, readFileSync as readFileSync52 } from "node:fs";
-import { basename as basename11, join as join45 } from "node:path";
+import { lstatSync as lstatSync7, readFileSync as readFileSync53 } from "node:fs";
+import { basename as basename11, join as join46 } from "node:path";
 function loadMemory2(dir) {
-  const m = readJson4(join45(dir, ".himi", "studio", "memory.json"));
-  if (!isObj(m) || m.version !== 1 || !isObj(m.shots) || !Array.isArray(m.timeline)) return null;
+  const m = readJson4(join46(dir, ".himi", "studio", "memory.json"));
+  if (!isObj2(m) || m.version !== 1 || !isObj2(m.shots) || !Array.isArray(m.timeline)) return null;
   const shots = [];
   for (const [id, s] of Object.entries(m.shots)) {
-    if (!isObj(s)) continue;
+    if (!isObj2(s)) continue;
     const file = historyName(s.sha, s.ext);
     const firstSeen = str(s.firstSeen);
     if (!file || !firstSeen) continue;
@@ -45988,7 +46442,7 @@ function loadMemory2(dir) {
   }
   const timeline = [];
   for (const t of m.timeline) {
-    if (!isObj(t)) continue;
+    if (!isObj2(t)) continue;
     const file = historyName(t.sha, t.ext);
     const ts2 = str(t.ts);
     const id = str(t.id);
@@ -46012,8 +46466,8 @@ function planReel(dir) {
   const memory = loadMemory2(dir);
   const { entries } = readProgress(dir);
   const summary = summarizeProgress(entries);
-  const manifest = readJson4(join45(dir, "himalaya.content.json"));
-  const tokens = readJson4(join45(dir, "tokens.json"));
+  const manifest = readJson4(join46(dir, "himalaya.content.json"));
+  const tokens = readJson4(join46(dir, "tokens.json"));
   const accentToken = tokens?.colors?.accentPrimary;
   const accentRaw = typeof accentToken === "string" ? accentToken : accentToken?.light;
   const accent = typeof accentRaw === "string" && ACCENT.test(accentRaw) ? accentRaw : DEFAULT_ACCENT;
@@ -46028,7 +46482,7 @@ function planReel(dir) {
     ts: e.ts,
     message: e.message,
     step: str(e.step),
-    files: (Array.isArray(e.images) ? e.images : []).map((i) => isObj(i) && typeof i.file === "string" ? basename11(i.file) : "").filter((f) => HISTORY_NAME.test(f))
+    files: (Array.isArray(e.images) ? e.images : []).map((i) => isObj2(i) && typeof i.file === "string" ? basename11(i.file) : "").filter((f) => HISTORY_NAME.test(f))
   }));
   const times = [summary.startedAt, ...timeline.map((t) => t.ts), memory?.createdAt].filter((x) => !!x).sort();
   const startedAt = times[0] ?? null;
@@ -46055,10 +46509,10 @@ function inlineImages(dir, plan, budget = REEL_BUDGET_BYTES) {
   const verified = (f) => {
     if (!HISTORY_NAME.test(f)) return null;
     try {
-      const path2 = join45(dir, HISTORY_DIR, f);
+      const path2 = join46(dir, HISTORY_DIR, f);
       const st = lstatSync7(path2);
       if (!st.isFile() || st.nlink !== 1) return null;
-      const bytes2 = readFileSync52(path2);
+      const bytes2 = readFileSync53(path2);
       return createHash24("sha256").update(bytes2).digest("hex") === f.slice(0, 64) && imageExtension(bytes2) === f.slice(65) ? bytes2 : null;
     } catch {
       return null;
@@ -46178,7 +46632,7 @@ function buildReel(dir, budget = REEL_BUDGET_BYTES) {
   const { plan, images } = inlineImages(dir, planReel(dir), budget);
   return { html: renderReel(plan, images), plan };
 }
-var REEL_BUDGET_BYTES, MAX_FLIP_FRAMES, DEFAULT_ACCENT, ACCENT, HISTORY_NAME, MIME2, mimeOf, readJson4, isObj, str, historyName, cited;
+var REEL_BUDGET_BYTES, MAX_FLIP_FRAMES, DEFAULT_ACCENT, ACCENT, HISTORY_NAME, MIME2, mimeOf, readJson4, isObj2, str, historyName, cited;
 var init_studio_reel = __esm({
   "src/studio-reel.ts"() {
     init_progress();
@@ -46192,12 +46646,12 @@ var init_studio_reel = __esm({
     mimeOf = (file) => MIME2[file.slice(65)] ?? "image/png";
     readJson4 = (file) => {
       try {
-        return JSON.parse(readFileSync52(file, "utf8"));
+        return JSON.parse(readFileSync53(file, "utf8"));
       } catch {
         return null;
       }
     };
-    isObj = (v) => !!v && typeof v === "object" && !Array.isArray(v);
+    isObj2 = (v) => !!v && typeof v === "object" && !Array.isArray(v);
     str = (v) => typeof v === "string" && v ? v : null;
     historyName = (sha, ext) => typeof sha === "string" && typeof ext === "string" && HISTORY_NAME.test(`${sha}.${ext}`) ? `${sha}.${ext}` : null;
     cited = (p) => [
@@ -46223,9 +46677,9 @@ __export(native_decode_exports, {
   runNativeDecode: () => runNativeDecode
 });
 import { execFileSync as execFileSync5, spawnSync as spawnSync2 } from "node:child_process";
-import { existsSync as existsSync48, mkdtempSync as mkdtempSync2, readFileSync as readFileSync53, rmSync as rmSync11, writeFileSync as writeFileSync20 } from "node:fs";
+import { existsSync as existsSync49, mkdtempSync as mkdtempSync2, readFileSync as readFileSync54, rmSync as rmSync11, writeFileSync as writeFileSync20 } from "node:fs";
 import { tmpdir as tmpdir3 } from "node:os";
-import { join as join46 } from "node:path";
+import { join as join47 } from "node:path";
 import { fileURLToPath as fileURLToPath20 } from "node:url";
 function nativeDecodePackageDir() {
   return fileURLToPath20(new URL("../../../core/runtime/ios/HimalayaCore/", import.meta.url));
@@ -46235,8 +46689,8 @@ function nativeDecodeAndroidHarnessDir() {
 }
 function nativeOracleShipped() {
   return {
-    ios: existsSync48(join46(nativeDecodePackageDir(), "Package.swift")),
-    android: existsSync48(join46(nativeDecodeAndroidHarnessDir(), "gradlew"))
+    ios: existsSync49(join47(nativeDecodePackageDir(), "Package.swift")),
+    android: existsSync49(join47(nativeDecodeAndroidHarnessDir(), "gradlew"))
   };
 }
 function detectNativeDecode(options = {}) {
@@ -46247,7 +46701,7 @@ function detectNativeDecode(options = {}) {
     return { platform: "ios", available: false, reason: `the iOS decoder oracle requires macOS (darwin); this host is ${hostPlatform}` };
   }
   if (!swiftAvailable) return { platform: "ios", available: false, reason: "swift is not on PATH" };
-  const packageAvailable = options.packageAvailable ?? existsSync48(join46(packageDir, "Package.swift"));
+  const packageAvailable = options.packageAvailable ?? existsSync49(join47(packageDir, "Package.swift"));
   if (!packageAvailable) {
     return {
       platform: "ios",
@@ -46259,7 +46713,7 @@ function detectNativeDecode(options = {}) {
 }
 function localPropertiesSdk(harnessDir) {
   try {
-    const match = readFileSync53(join46(harnessDir, "local.properties"), "utf8").match(/^sdk\.dir\s*=\s*(.+)$/m);
+    const match = readFileSync54(join47(harnessDir, "local.properties"), "utf8").match(/^sdk\.dir\s*=\s*(.+)$/m);
     return match?.[1]?.trim().replace(/\\([ :\\])/g, "$1") ?? null;
   } catch {
     return null;
@@ -46267,8 +46721,8 @@ function localPropertiesSdk(harnessDir) {
 }
 function detectAndroidNativeDecode(options = {}) {
   const harnessDir = options.harnessDir ?? nativeDecodeAndroidHarnessDir();
-  const gradlew = join46(harnessDir, "gradlew");
-  const gradlewAvailable = options.gradlewAvailable ?? existsSync48(gradlew);
+  const gradlew = join47(harnessDir, "gradlew");
+  const gradlewAvailable = options.gradlewAvailable ?? existsSync49(gradlew);
   if (!gradlewAvailable) {
     return {
       platform: "android",
@@ -46278,7 +46732,7 @@ function detectAndroidNativeDecode(options = {}) {
   }
   const androidHome = options.androidHome ?? process.env.ANDROID_HOME ?? "";
   const sdk = androidHome.trim() || (options.localPropertiesSdk !== void 0 ? options.localPropertiesSdk : localPropertiesSdk(harnessDir));
-  const sdkAvailable = options.sdkAvailable ?? (typeof sdk === "string" && sdk.length > 0 && existsSync48(sdk));
+  const sdkAvailable = options.sdkAvailable ?? (typeof sdk === "string" && sdk.length > 0 && existsSync49(sdk));
   if (!sdkAvailable) {
     return {
       platform: "android",
@@ -46350,14 +46804,14 @@ function parseNativeDecodeOutput(stdout, expectedScreenIds, platform = "ios") {
   return verdicts;
 }
 function runNativeDecode(options) {
-  const descriptorDir = mkdtempSync2(join46(tmpdir3(), "himi-native-decode-"));
+  const descriptorDir = mkdtempSync2(join47(tmpdir3(), "himi-native-decode-"));
   const startedAt = Date.now();
   try {
     for (const descriptor of options.descriptors) {
       if (typeof descriptor.descriptorJson !== "string") {
         throw new Error(`native decode cannot judge ${descriptor.screenId}: the release builder did not return its exact baked JSON bytes`);
       }
-      writeFileSync20(join46(descriptorDir, `${encodeURIComponent(descriptor.screenId)}.json`), descriptor.descriptorJson);
+      writeFileSync20(join47(descriptorDir, `${encodeURIComponent(descriptor.screenId)}.json`), descriptor.descriptorJson);
     }
     options.progress?.("building cached Swift oracle");
     execFileSync5("swift", ["build", "--package-path", options.packageDir, "--product", "himi-decode-oracle"], {
@@ -46369,7 +46823,7 @@ function runNativeDecode(options) {
       encoding: "utf8"
     }).trim();
     options.progress?.(`running real Swift decoder over ${options.descriptors.length} screen${options.descriptors.length === 1 ? "" : "s"}`);
-    const stdout = execFileSync5(join46(binPath, "himi-decode-oracle"), ["--dir", descriptorDir], {
+    const stdout = execFileSync5(join47(binPath, "himi-decode-oracle"), ["--dir", descriptorDir], {
       stdio: ["ignore", "pipe", "pipe"],
       encoding: "utf8"
     });
@@ -46387,15 +46841,15 @@ function runNativeDecode(options) {
   }
 }
 function runAndroidNativeDecode(options) {
-  const descriptorDir = mkdtempSync2(join46(tmpdir3(), "himi-native-decode-android-"));
-  const outputPath = join46(descriptorDir, "verdicts.ndjson");
+  const descriptorDir = mkdtempSync2(join47(tmpdir3(), "himi-native-decode-android-"));
+  const outputPath = join47(descriptorDir, "verdicts.ndjson");
   const startedAt = Date.now();
   try {
     for (const descriptor of options.descriptors) {
       if (typeof descriptor.descriptorJson !== "string") {
         throw new Error(`native decode cannot judge ${descriptor.screenId}: the release builder did not return its exact baked JSON bytes`);
       }
-      writeFileSync20(join46(descriptorDir, `${encodeURIComponent(descriptor.screenId)}.json`), descriptor.descriptorJson);
+      writeFileSync20(join47(descriptorDir, `${encodeURIComponent(descriptor.screenId)}.json`), descriptor.descriptorJson);
     }
     options.progress?.(`running real Kotlin decoder over ${options.descriptors.length} screen${options.descriptors.length === 1 ? "" : "s"}`);
     execFileSync5(options.gradlew, [
@@ -46410,7 +46864,7 @@ function runAndroidNativeDecode(options) {
       stdio: ["ignore", "ignore", "pipe"],
       encoding: "utf8"
     });
-    const stdout = readFileSync53(outputPath, "utf8");
+    const stdout = readFileSync54(outputPath, "utf8");
     return {
       platform: "android",
       verdicts: parseNativeDecodeOutput(stdout, options.descriptors.map((descriptor) => descriptor.screenId), "android"),
@@ -46480,13 +46934,13 @@ __export(browser_authoring_exports, {
 });
 import { createServer as createServer3 } from "node:http";
 import { createHash as createHash25, randomBytes as randomBytes4 } from "node:crypto";
-import { existsSync as existsSync49, readdirSync as readdirSync24, readFileSync as readFileSync54, realpathSync as realpathSync5, statSync as statSync12 } from "node:fs";
-import { join as join47, posix, relative as relative8, sep as sep12 } from "node:path";
+import { existsSync as existsSync50, readdirSync as readdirSync24, readFileSync as readFileSync55, realpathSync as realpathSync5, statSync as statSync12 } from "node:fs";
+import { join as join48, posix, relative as relative8, sep as sep12 } from "node:path";
 function humanMs(ms) {
   return ms < 1e3 ? `${ms}ms` : `${Math.round(ms / 1e3)}s`;
 }
 function collectWorkerSources(tier5SrcDir, bundleName) {
-  const root = join47(tier5SrcDir, bundleName);
+  const root = join48(tier5SrcDir, bundleName);
   const files = {};
   const visitedDirs = /* @__PURE__ */ new Set();
   const walk2 = (abs, rel) => {
@@ -46494,16 +46948,16 @@ function collectWorkerSources(tier5SrcDir, bundleName) {
     if (visitedDirs.has(real)) return;
     visitedDirs.add(real);
     for (const name of readdirSync24(abs).sort()) {
-      const childAbs = join47(abs, name);
+      const childAbs = join48(abs, name);
       const childRel = posix.join(rel, name);
       if (statSync12(childAbs).isDirectory()) {
         walk2(childAbs, childRel);
       } else if (/\.(ts|tsx|js|mjs|json)$/.test(name)) {
-        files[childRel] = readFileSync54(childAbs, "utf8");
+        files[childRel] = readFileSync55(childAbs, "utf8");
       }
     }
   };
-  if (!existsSync49(root)) return null;
+  if (!existsSync50(root)) return null;
   walk2(root, `/tier5-src/${bundleName}`);
   const entry = [`/tier5-src/${bundleName}/index.ts`, `/tier5-src/${bundleName}/index.js`].find((p) => p in files);
   if (!entry) return null;
@@ -46520,20 +46974,20 @@ function collectRelativeSiblings(files, tier5SrcDir) {
       const spec = m[1];
       const virtual = posix.normalize(posix.join(dir, spec));
       if (!virtual.startsWith("/tier5-src/")) continue;
-      const onDisk = join47(tier5SrcDir, virtual.slice("/tier5-src/".length));
+      const onDisk = join48(tier5SrcDir, virtual.slice("/tier5-src/".length));
       const candidates = [
         onDisk,
         `${onDisk}.ts`,
         `${onDisk}.js`,
         onDisk.replace(/\.js$/, ".ts"),
-        join47(onDisk, "index.ts"),
-        join47(onDisk, "index.js")
+        join48(onDisk, "index.ts"),
+        join48(onDisk, "index.js")
       ];
       for (const abs of candidates) {
-        if (!existsSync49(abs) || statSync12(abs).isDirectory()) continue;
+        if (!existsSync50(abs) || statSync12(abs).isDirectory()) continue;
         const key2 = `/tier5-src/${relative8(tier5SrcDir, abs).split(sep12).join(posix.sep)}`;
         if (key2 in files) break;
-        files[key2] = readFileSync54(abs, "utf8");
+        files[key2] = readFileSync55(abs, "utf8");
         queue.push(key2);
         break;
       }
@@ -46568,7 +47022,7 @@ function collectSdkModules(files, resolveSubpath) {
 function sdkSubpathReader(resolve48) {
   return (sub) => {
     try {
-      return readFileSync54(resolve48(`@wix/himalaya/${sub}`), "utf8");
+      return readFileSync55(resolve48(`@wix/himalaya/${sub}`), "utf8");
     } catch {
       return null;
     }
@@ -46740,8 +47194,8 @@ __export(coverage_exports, {
   suppressedNativeKeys: () => suppressedNativeKeys,
   trendAndStore: () => trendAndStore
 });
-import { existsSync as existsSync50, mkdirSync as mkdirSync24, readFileSync as readFileSync55, writeFileSync as writeFileSync21 } from "node:fs";
-import { dirname as dirname26, join as join48 } from "node:path";
+import { existsSync as existsSync51, mkdirSync as mkdirSync24, readFileSync as readFileSync56, writeFileSync as writeFileSync21 } from "node:fs";
+import { dirname as dirname26, join as join49 } from "node:path";
 function suppressedNativeKeys(oracle) {
   return [...oracle.ios ? [] : ["native-decode|ios"], ...oracle.android ? [] : ["native-decode|android"]];
 }
@@ -46921,11 +47375,11 @@ function assembleLedger(r, options = {}) {
   return out;
 }
 function trendAndStore(dir, entries, suppressed) {
-  const p = join48(dir, LEDGER_FILE);
+  const p = join49(dir, LEDGER_FILE);
   let previous = null;
   try {
-    if (existsSync50(p)) {
-      const parsed = JSON.parse(readFileSync55(p, "utf8"));
+    if (existsSync51(p)) {
+      const parsed = JSON.parse(readFileSync56(p, "utf8"));
       if (Array.isArray(parsed.keys)) previous = parsed.keys.filter((k) => typeof k === "string");
     }
   } catch {
@@ -46964,11 +47418,11 @@ function formatLedger(entries, trend) {
   return out.join("\n");
 }
 function diffAndStoreObservations(dir, current) {
-  const p = join48(dir, OBS_FILE);
+  const p = join49(dir, OBS_FILE);
   let previous = null;
   try {
-    if (existsSync50(p)) {
-      const parsed = JSON.parse(readFileSync55(p, "utf8"));
+    if (existsSync51(p)) {
+      const parsed = JSON.parse(readFileSync56(p, "utf8"));
       if (parsed.screens && typeof parsed.screens === "object" && !Array.isArray(parsed.screens) && Object.values(parsed.screens).every(
         (v) => Array.isArray(v) && v.every((l) => typeof l === "string")
       )) {
@@ -47017,8 +47471,8 @@ var LEDGER_FILE, OBS_FILE;
 var init_coverage = __esm({
   "src/coverage.ts"() {
     init_native_decode();
-    LEDGER_FILE = join48(".himi", "test-ledger.json");
-    OBS_FILE = join48(".himi", "test-observations.json");
+    LEDGER_FILE = join49(".himi", "test-ledger.json");
+    OBS_FILE = join49(".himi", "test-observations.json");
   }
 });
 
@@ -47029,11 +47483,11 @@ __export(design_kits_exports, {
   kitsDir: () => kitsDir,
   listKits: () => listKits2
 });
-import { existsSync as existsSync51, readFileSync as readFileSync56, readdirSync as readdirSync25 } from "node:fs";
-import { join as join49, basename as basename12 } from "node:path";
+import { existsSync as existsSync52, readFileSync as readFileSync57, readdirSync as readdirSync25 } from "node:fs";
+import { join as join50, basename as basename12 } from "node:path";
 import { fileURLToPath as fileURLToPath21 } from "node:url";
 function kitsDir() {
-  return KIT_DIR_CANDIDATES.find((p) => existsSync51(p));
+  return KIT_DIR_CANDIDATES.find((p) => existsSync52(p));
 }
 function listKits2() {
   const dir = kitsDir();
@@ -47057,7 +47511,7 @@ In a published @wix/himalaya-cli this is a packaging bug \u2014 the kits should
   if (!kits.includes(name)) {
     return { ok: false, kit: name, kits, problems: [`no design kit named "${name}". Available: ${kits.join(", ")}`] };
   }
-  const raw = readFileSync56(join49(dir, `${name}.json`), "utf8");
+  const raw = readFileSync57(join50(dir, `${name}.json`), "utf8");
   let parsed;
   try {
     parsed = JSON.parse(raw);
@@ -47081,9 +47535,9 @@ var init_design_kits = __esm({
   "src/design-kits.ts"() {
     KIT_DIR_CANDIDATES = [
       // in-repo: tools/himi-cli/src/design-kits.ts → <repo>/stdlib/design-kits/
-      join49(fileURLToPath21(new URL("../../..", import.meta.url)), "stdlib", "design-kits"),
+      join50(fileURLToPath21(new URL("../../..", import.meta.url)), "stdlib", "design-kits"),
       // published CLI: <pkg>/dist/cli.mjs → <pkg>/stdlib/design-kits/
-      join49(fileURLToPath21(new URL("..", import.meta.url)), "stdlib", "design-kits")
+      join50(fileURLToPath21(new URL("..", import.meta.url)), "stdlib", "design-kits")
     ];
   }
 });
@@ -47097,11 +47551,11 @@ __export(assets_exports, {
   removeAssetPayload: () => removeAssetPayload,
   verifyReport: () => verifyReport
 });
-import { readFileSync as readFileSync57 } from "node:fs";
+import { readFileSync as readFileSync58 } from "node:fs";
 import { basename as basename13 } from "node:path";
 function declaredAssets(dir) {
   return collectAssets(dir).map((a) => {
-    const bytes2 = readFileSync57(a.path);
+    const bytes2 = readFileSync58(a.path);
     return {
       name: a.name,
       sha256: assetSha256(bytes2),
@@ -47178,7 +47632,7 @@ function verifyReport(dir, app, manifest) {
   };
 }
 function addAssetPayload(manifest, filePath, opts) {
-  const bytes2 = readFileSync57(filePath);
+  const bytes2 = readFileSync58(filePath);
   const name = opts.name ?? basename13(filePath);
   const sha2565 = assetSha256(bytes2);
   const record2 = {
@@ -48493,7 +48947,14 @@ function indexHtml(asset, pathname, creds, handoverAttempted = false) {
     headers: {
       "content-type": asset.contentType || "text/html; charset=utf-8",
       "cache-control": creds || handoverAttempted ? "no-store" : "public, max-age=60, stale-while-revalidate=600",
-      "content-security-policy": previewCsp(nonce)
+      "content-security-policy": previewCsp(nonce),
+      // This document's URL can name a credential: `?pvt=` (still accepted from an embedder such
+      // as the dashboard frame) or a `?h=` code before the inline script strips it. The browser
+      // default sends the FULL URL as `Referer` on same-origin requests, so every `/v1/*` read,
+      // the gateway's request log and the Tier-5 frame's `document.referrer` would carry it.
+      // `strict-origin` sends the origin alone. Not `no-referrer`: that also turns a same-origin
+      // POST's `Origin` header into `null`, and `/v1/telemetry/ingest` is one (#2386).
+      "referrer-policy": "strict-origin"
     }
   });
 }
@@ -48527,7 +48988,7 @@ function previewResponse(pathname, assets, mount = "/preview", creds, handoverAt
 var T5_FRAME_CSP, PREVIEW_BASE_JS, PREVIEW_ENTRY_RECOVERY_JS, MOUNT_STRIP;
 var init_preview2 = __esm({
   "../../packages/serve/src/preview.ts"() {
-    T5_FRAME_CSP = "default-src 'none'; script-src 'unsafe-inline' 'unsafe-eval'; connect-src 'none'; img-src 'none'; media-src 'none'; style-src 'unsafe-inline'; base-uri 'none'; form-action 'none'";
+    T5_FRAME_CSP = "default-src 'none'; script-src 'unsafe-inline' 'unsafe-eval'; connect-src 'none'; img-src 'none'; media-src 'none'; style-src 'unsafe-inline'; base-uri 'none'; form-action 'none'; sandbox allow-scripts";
     PREVIEW_BASE_JS = // Both serve mounts (/preview framed + /app unframed — RFC 0051 track D) serve the SAME
     // embedded artifact, so one shim derives whichever mount the browser is on. Non-greedy:
     // the EARLIEST mount segment wins, mirroring the SPA's own deployBase (an app literally
@@ -48780,21 +49241,21 @@ var init_preview_assets_generated = __esm({
   "../../packages/serve/src/preview-assets.generated.ts"() {
     init_preview_assets_format();
     PREVIEW_ASSET_MANIFEST = [
-      { key: "assets/index-CxGyJNjV.js", contentType: "application/javascript; charset=utf-8", offset: 8, length: 1041209, sha256: "4eb08b810b7f8e5ae57dc8eef60fe084213c20e0ba7a9bc79b55c89b50cd1291" },
-      { key: "fonts/Roboto-LICENSE.txt", contentType: "application/octet-stream", offset: 1041217, length: 4610, sha256: "994062dd7af4186a739de55dd9e151c63b6301f8e2cbafc608d35c2e87da0cd2" },
-      { key: "fonts/Roboto-Variable.ttf", contentType: "font/ttf", offset: 1045827, length: 488584, sha256: "d7598e12c5dbef095ff8272cfc55da0250bd07fbdecbac8a530b9b277872a134" },
-      { key: "fonts/WixMadeforDisplay-Bold.ttf", contentType: "font/ttf", offset: 1534411, length: 90924, sha256: "ec4c7d63772d980d6e147b2df6215fd2737e4b04cebe0cf7e11dc695fb63cdcf" },
-      { key: "fonts/WixMadeforDisplay-ExtraBold.ttf", contentType: "font/ttf", offset: 1625335, length: 90984, sha256: "bf4c16a2774edd38a921edf3099469866cd74c094fd596f3fa4e81f54a04dfaa" },
-      { key: "fonts/WixMadeforDisplay-Medium.ttf", contentType: "font/ttf", offset: 1716319, length: 90980, sha256: "368faca44fb9f7207e4af784e94750b1ee59c1098b8689e0f4a918926f244fb5" },
-      { key: "fonts/WixMadeforDisplay-Regular.ttf", contentType: "font/ttf", offset: 1807299, length: 90872, sha256: "97ed8f1a6772abe26e3d8af5cecfc4b02faa94497d585b0398b5053b739a70c1" },
-      { key: "fonts/WixMadeforDisplay-SemiBold.ttf", contentType: "font/ttf", offset: 1898171, length: 90980, sha256: "642feab8a48ddf6c7a89d7c2a7c0edfa0e6e773f671287e460e222703563191e" },
-      { key: "fonts/WixMadeforText-Bold.ttf", contentType: "font/ttf", offset: 1989151, length: 108636, sha256: "37c179b4fefb63ea9637322b84583a2df53aa226c150294eea1675c14b1b8e29" },
-      { key: "fonts/WixMadeforText-ExtraBold.ttf", contentType: "font/ttf", offset: 2097787, length: 109084, sha256: "62e2fe4718129f36ecdb0ae4de385bd6b81ecc876146447167c6c140fad699a9" },
-      { key: "fonts/WixMadeforText-Medium.ttf", contentType: "font/ttf", offset: 2206871, length: 109048, sha256: "4ecf270136af928612c76fe4ebade91d8156975e5ea4c0cf9225501dd1788e02" },
-      { key: "fonts/WixMadeforText-Regular.ttf", contentType: "font/ttf", offset: 2315919, length: 107700, sha256: "dee56f09fd3efc127c1ea95557edc74110c1460a46287da36e0af25efd341ef5" },
-      { key: "fonts/WixMadeforText-SemiBold.ttf", contentType: "font/ttf", offset: 2423619, length: 88108, sha256: "dced97a77624bc5f8b1ae65850360908297f4588e09feb6f22792d29dc7e765b" },
-      { key: "index.html", contentType: "text/html; charset=utf-8", offset: 2511727, length: 4947, sha256: "8f89772181b62b7bda8f1620af71cca03ee0aae2471127d0633e07488edbf290" },
-      { key: "t5-frame.html", contentType: "text/html; charset=utf-8", offset: 2516674, length: 17209, sha256: "dffc9718e2faa63ae2cc919e0a842f585ed565aaaa7c53778e90379442c731b6" }
+      { key: "assets/index-Dn3oPAne.js", contentType: "application/javascript; charset=utf-8", offset: 8, length: 1044844, sha256: "7b781f264f2aac500b00ea4def7cb6f3c19e46dd4ebb3b797de5da8386056543" },
+      { key: "fonts/Roboto-LICENSE.txt", contentType: "application/octet-stream", offset: 1044852, length: 4610, sha256: "994062dd7af4186a739de55dd9e151c63b6301f8e2cbafc608d35c2e87da0cd2" },
+      { key: "fonts/Roboto-Variable.ttf", contentType: "font/ttf", offset: 1049462, length: 488584, sha256: "d7598e12c5dbef095ff8272cfc55da0250bd07fbdecbac8a530b9b277872a134" },
+      { key: "fonts/WixMadeforDisplay-Bold.ttf", contentType: "font/ttf", offset: 1538046, length: 90924, sha256: "ec4c7d63772d980d6e147b2df6215fd2737e4b04cebe0cf7e11dc695fb63cdcf" },
+      { key: "fonts/WixMadeforDisplay-ExtraBold.ttf", contentType: "font/ttf", offset: 1628970, length: 90984, sha256: "bf4c16a2774edd38a921edf3099469866cd74c094fd596f3fa4e81f54a04dfaa" },
+      { key: "fonts/WixMadeforDisplay-Medium.ttf", contentType: "font/ttf", offset: 1719954, length: 90980, sha256: "368faca44fb9f7207e4af784e94750b1ee59c1098b8689e0f4a918926f244fb5" },
+      { key: "fonts/WixMadeforDisplay-Regular.ttf", contentType: "font/ttf", offset: 1810934, length: 90872, sha256: "97ed8f1a6772abe26e3d8af5cecfc4b02faa94497d585b0398b5053b739a70c1" },
+      { key: "fonts/WixMadeforDisplay-SemiBold.ttf", contentType: "font/ttf", offset: 1901806, length: 90980, sha256: "642feab8a48ddf6c7a89d7c2a7c0edfa0e6e773f671287e460e222703563191e" },
+      { key: "fonts/WixMadeforText-Bold.ttf", contentType: "font/ttf", offset: 1992786, length: 108636, sha256: "37c179b4fefb63ea9637322b84583a2df53aa226c150294eea1675c14b1b8e29" },
+      { key: "fonts/WixMadeforText-ExtraBold.ttf", contentType: "font/ttf", offset: 2101422, length: 109084, sha256: "62e2fe4718129f36ecdb0ae4de385bd6b81ecc876146447167c6c140fad699a9" },
+      { key: "fonts/WixMadeforText-Medium.ttf", contentType: "font/ttf", offset: 2210506, length: 109048, sha256: "4ecf270136af928612c76fe4ebade91d8156975e5ea4c0cf9225501dd1788e02" },
+      { key: "fonts/WixMadeforText-Regular.ttf", contentType: "font/ttf", offset: 2319554, length: 107700, sha256: "dee56f09fd3efc127c1ea95557edc74110c1460a46287da36e0af25efd341ef5" },
+      { key: "fonts/WixMadeforText-SemiBold.ttf", contentType: "font/ttf", offset: 2427254, length: 88108, sha256: "dced97a77624bc5f8b1ae65850360908297f4588e09feb6f22792d29dc7e765b" },
+      { key: "index.html", contentType: "text/html; charset=utf-8", offset: 2515362, length: 4947, sha256: "25d01e5f772c7b782ca7c68f997765d3838295369054c0855ba63320d071ec22" },
+      { key: "t5-frame.html", contentType: "text/html; charset=utf-8", offset: 2520309, length: 17209, sha256: "dffc9718e2faa63ae2cc919e0a842f585ed565aaaa7c53778e90379442c731b6" }
     ];
   }
 });
@@ -48810,9 +49271,9 @@ __export(run_exports, {
   runPackage: () => runPackage,
   withoutProdServe: () => withoutProdServe
 });
-import { cpSync as cpSync2, existsSync as existsSync52, mkdirSync as mkdirSync25, mkdtempSync as mkdtempSync3, readFileSync as readFileSync58, rmSync as rmSync12, statSync as statSync13 } from "node:fs";
+import { cpSync as cpSync2, existsSync as existsSync53, mkdirSync as mkdirSync25, mkdtempSync as mkdtempSync3, readFileSync as readFileSync59, rmSync as rmSync12, statSync as statSync13 } from "node:fs";
 import { tmpdir as tmpdir4 } from "node:os";
-import { dirname as dirname27, join as join50 } from "node:path";
+import { dirname as dirname27, join as join51 } from "node:path";
 import { fileURLToPath as fileURLToPath22 } from "node:url";
 function makePackageRunHandler(opts) {
   return makeRunHandler({
@@ -48831,9 +49292,9 @@ async function fetchBytes(url) {
 }
 async function resolvePackage(source, workDir) {
   const isUrl2 = /^https?:\/\//i.test(source);
-  if (!isUrl2 && existsSync52(source) && statSync13(source).isDirectory()) {
-    const appDirManifest = join50(source, "release-manifest.json");
-    if (existsSync52(appDirManifest)) {
+  if (!isUrl2 && existsSync53(source) && statSync13(source).isDirectory()) {
+    const appDirManifest = join51(source, "release-manifest.json");
+    if (existsSync53(appDirManifest)) {
       const opened2 = openPackageDir(source);
       if (!opened2.validation.ok) {
         throw new Error(`package is not valid:
@@ -48842,9 +49303,9 @@ async function resolvePackage(source, workDir) {
       const app2 = opened2.header?.app ?? opened2.manifest?.app;
       if (!app2) throw new Error(`${source} has no app id (no himi-package.json and no manifest.app)`);
       if (!isSafeAppId(app2)) throw new Error(`${source} declares an unsafe app id ${JSON.stringify(app2)} \u2014 refusing to open it`);
-      const root2 = workDir ?? mkdtempSync3(join50(tmpdir4(), "himi-run-"));
-      const target = join50(root2, app2);
-      if (join50(source) !== target) {
+      const root2 = workDir ?? mkdtempSync3(join51(tmpdir4(), "himi-run-"));
+      const target = join51(root2, app2);
+      if (join51(source) !== target) {
         mkdirSync25(root2, { recursive: true });
         rmSync12(target, { recursive: true, force: true });
         cpSync2(source, target, { recursive: true });
@@ -48861,8 +49322,8 @@ async function resolvePackage(source, workDir) {
     }
     throw new Error(`${source} is a directory but has no release-manifest.json \u2014 is it a package?`);
   }
-  const bytes2 = isUrl2 ? await fetchBytes(source) : readFileSync58(source);
-  const root = workDir ?? mkdtempSync3(join50(tmpdir4(), "himi-run-"));
+  const bytes2 = isUrl2 ? await fetchBytes(source) : readFileSync59(source);
+  const root = workDir ?? mkdtempSync3(join51(tmpdir4(), "himi-run-"));
   const { app, appDir: appDir2 } = unpackTo(bytes2, root);
   const opened = openPackageDir(appDir2);
   if (!opened.validation.ok) {
@@ -48885,14 +49346,14 @@ async function loadPreviewAssets() {
     const mod = await Promise.resolve().then(() => (init_preview_assets_generated(), preview_assets_generated_exports));
     const here = dirname27(fileURLToPath22(import.meta.url));
     const candidates = [
-      join50(here, "preview-assets.generated.bin"),
+      join51(here, "preview-assets.generated.bin"),
       // published: copied next to the bundled CLI
-      join50(here, "../../../packages/serve/src/preview-assets.generated.bin")
+      join51(here, "../../../packages/serve/src/preview-assets.generated.bin")
       // in-repo checkout
     ];
     for (const path2 of candidates) {
-      if (!existsSync52(path2)) continue;
-      const blob = readFileSync58(path2);
+      if (!existsSync53(path2)) continue;
+      const blob = readFileSync59(path2);
       return mod.assemblePreviewAssetsFromBlob(new Uint8Array(blob.buffer, blob.byteOffset, blob.byteLength));
     }
     return /* @__PURE__ */ new Map();
@@ -48987,9 +49448,9 @@ __export(run_watch_exports, {
   watchedContentDir: () => watchedContentDir,
   writeRunRecord: () => writeRunRecord
 });
-import { closeSync as closeSync2, constants, existsSync as existsSync53, fstatSync, lstatSync as lstatSync8, statSync as statSync14, mkdirSync as mkdirSync26, openSync as openSync2, readFileSync as readFileSync59, realpathSync as realpathSync6, renameSync as renameSync5, rmSync as rmSync13, writeFileSync as writeFileSync22, watch as fsWatch } from "node:fs";
+import { closeSync as closeSync2, constants, existsSync as existsSync54, fstatSync, lstatSync as lstatSync8, statSync as statSync14, mkdirSync as mkdirSync26, openSync as openSync2, readFileSync as readFileSync60, realpathSync as realpathSync6, renameSync as renameSync5, rmSync as rmSync13, writeFileSync as writeFileSync22, watch as fsWatch } from "node:fs";
 import { randomUUID as randomUUID3 } from "node:crypto";
-import { extname as extname4, join as join51, resolve as resolve42, sep as sep13 } from "node:path";
+import { extname as extname4, join as join52, resolve as resolve42, sep as sep13 } from "node:path";
 function diffReleases(prev, next) {
   const bundles = Object.keys(next.bundles).filter((b) => prev.bundles[b]?.sha256 !== next.bundles[b].sha256).sort();
   const changedBundles = new Set(bundles);
@@ -49028,8 +49489,8 @@ function watchContent(dir, onChange, opts = {}) {
   const watch2 = opts.watch ?? ((p, o, l) => fsWatch(p, o, (event, file) => l(event, file === null ? null : String(file))));
   let timer = null;
   const pending = /* @__PURE__ */ new Set();
-  const watcher = watch2(dir, { recursive: true }, (_event, file) => {
-    if (!file || ignoredChange(file, (rel) => isDir(join51(dir, rel)))) return;
+  const watcher2 = watch2(dir, { recursive: true }, (_event, file) => {
+    if (!file || ignoredChange(file, (rel) => isDir(join52(dir, rel)))) return;
     pending.add(file);
     if (timer) clearTimeout(timer);
     timer = setTimeout(() => {
@@ -49042,7 +49503,7 @@ function watchContent(dir, onChange, opts = {}) {
   return {
     close() {
       if (timer) clearTimeout(timer);
-      watcher.close();
+      watcher2.close();
     }
   };
 }
@@ -49050,7 +49511,7 @@ function watchedContentDir(source) {
   if (!source || /^https?:\/\//i.test(source)) return null;
   const dir = resolve42(source);
   try {
-    return statSync14(dir).isDirectory() && existsSync53(join51(dir, "himalaya.content.json")) ? dir : null;
+    return statSync14(dir).isDirectory() && existsSync54(join52(dir, "himalaya.content.json")) ? dir : null;
   } catch {
     return null;
   }
@@ -49107,7 +49568,7 @@ function serialize(task) {
   });
 }
 function himiDir(dir) {
-  const root = join51(dir, ".himi");
+  const root = join52(dir, ".himi");
   try {
     return lstatSync8(root).isDirectory() ? root : null;
   } catch (e) {
@@ -49119,11 +49580,11 @@ function himiDir(dir) {
 function writeRunRecord(dir, record2) {
   const root = himiDir(dir);
   if (!root) return false;
-  const tmp = join51(root, `.run.json.${process.pid}.${randomUUID3()}.tmp`);
+  const tmp = join52(root, `.run.json.${process.pid}.${randomUUID3()}.tmp`);
   try {
     writeFileSync22(tmp, `${JSON.stringify(record2, null, 2)}
 `, { flag: "wx" });
-    renameSync5(tmp, join51(root, "run.json"));
+    renameSync5(tmp, join52(root, "run.json"));
   } catch (e) {
     rmSync13(tmp, { force: true });
     throw e;
@@ -49131,7 +49592,7 @@ function writeRunRecord(dir, record2) {
   return true;
 }
 function removeRunRecord(dir, owner) {
-  const root = join51(dir, ".himi");
+  const root = join52(dir, ".himi");
   try {
     if (!lstatSync8(root).isDirectory()) return;
   } catch {
@@ -49146,15 +49607,16 @@ function removeRunRecord(dir, owner) {
     }
     if (typeof pid === "number" && pid !== owner) return;
   }
-  rmSync13(join51(root, "run.json"), { force: true });
+  rmSync13(join52(root, "run.json"), { force: true });
 }
 function boardFile(dir, pathname) {
   let rel = null;
-  if (pathname === "/__himi/studio/" || pathname === "/__himi/studio/index.html") rel = join51("studio", "index.html");
-  else if (pathname === "/__himi/studio/state.js") rel = join51("studio", "state.js");
+  if (pathname === "/__himi/studio/" || pathname === "/__himi/studio/index.html") rel = join52("studio", "index.html");
+  else if (pathname === "/__himi/studio/state.js") rel = join52("studio", "state.js");
+  else if (pathname === "/__himi/studio/timeline.js") rel = join52("studio", "timeline.js");
   else {
     const m = /^\/__himi\/history\/([0-9a-f]{64}\.(png|jpg|gif|webp))$/.exec(pathname);
-    if (m) rel = join51("history", m[1]);
+    if (m) rel = join52("history", m[1]);
   }
   if (!rel) return null;
   const bytes2 = readConfined(resolve42(dir, ".himi"), rel);
@@ -49170,7 +49632,7 @@ function readConfined(root, rel) {
     const parts = rel.split(sep13);
     let at = root;
     for (let i = 0; i < parts.length; i++) {
-      at = join51(at, parts[i]);
+      at = join52(at, parts[i]);
       const st = lstatSync8(at);
       if (st.isSymbolicLink() || !(i === parts.length - 1 ? st.isFile() : st.isDirectory())) return null;
     }
@@ -49179,7 +49641,7 @@ function readConfined(root, rel) {
     const fd = openSync2(at, constants.O_RDONLY | (constants.O_NOFOLLOW ?? 0));
     try {
       if (!fstatSync(fd).isFile()) return null;
-      return readFileSync59(fd);
+      return readFileSync60(fd);
     } finally {
       closeSync2(fd);
     }
@@ -49230,7 +49692,7 @@ __export(run_browser_exports, {
   runInBrowser: () => runInBrowser
 });
 import { createServer as createServer5 } from "node:http";
-import { existsSync as existsSync54, readFileSync as readFileSync60 } from "node:fs";
+import { existsSync as existsSync55, readFileSync as readFileSync61 } from "node:fs";
 import { spawnSync as spawnSync3 } from "node:child_process";
 import { dirname as dirname28, resolve as resolve43 } from "node:path";
 import { fileURLToPath as fileURLToPath23 } from "node:url";
@@ -49238,7 +49700,7 @@ function stagedDir() {
   return process.env.HIMI_BROWSER_PLANE_OUT ? resolve43(process.env.HIMI_BROWSER_PLANE_OUT) : resolve43(REPO, "packages", "serve", "dist", "browser-plane");
 }
 function missingStaged() {
-  return [...SERVED].filter((f) => !existsSync54(resolve43(stagedDir(), f))).sort();
+  return [...SERVED].filter((f) => !existsSync55(resolve43(stagedDir(), f))).sort();
 }
 function ensureBrowserPlaneStaged() {
   if (missingStaged().length === 0) return { ok: true, detail: "already staged" };
@@ -49328,7 +49790,7 @@ async function runInBrowser(releaseRoot, app, header, opts = {}) {
     }
     const name = path2 === "/" || path2 === "/index.html" ? "host.html" : path2.slice(1);
     if (SERVED.has(name)) {
-      if (!existsSync54(resolve43(stagedDir(), name))) {
+      if (!existsSync55(resolve43(stagedDir(), name))) {
         const restaged = ensureBrowserPlaneStaged();
         if (!restaged.ok) {
           res.writeHead(503, { "content-type": "application/json" });
@@ -49338,7 +49800,7 @@ async function runInBrowser(releaseRoot, app, header, opts = {}) {
       }
       let bytes2;
       try {
-        bytes2 = readFileSync60(resolve43(stagedDir(), name));
+        bytes2 = readFileSync61(resolve43(stagedDir(), name));
       } catch (e) {
         res.writeHead(503, { "content-type": "application/json" });
         res.end(JSON.stringify({ error: "browser_plane_unstaged", file: name, detail: String(e) }));
@@ -49798,7 +50260,7 @@ __export(preflight_exports, {
   parseStoreConfig: () => parseStoreConfig,
   requireEnv: () => requireEnv
 });
-import { existsSync as existsSync55, readFileSync as readFileSync61 } from "node:fs";
+import { existsSync as existsSync56, readFileSync as readFileSync62 } from "node:fs";
 import { isAbsolute as isAbsolute3, relative as relative9, resolve as resolve44 } from "node:path";
 function isInsideRepo(p) {
   const rel = relative9(REPO_ROOT3, resolve44(p));
@@ -49855,10 +50317,10 @@ function parseStoreConfig(text5) {
 }
 function loadStoreConfig(app) {
   const p = storeConfigPath(app);
-  if (!existsSync55(p)) {
+  if (!existsSync56(p)) {
     throw new Error(`No store config at ${p}. Create apps/${app}/store/store.config.yaml first (see /setup-store-signing).`);
   }
-  return parseStoreConfig(readFileSync61(p, "utf8"));
+  return parseStoreConfig(readFileSync62(p, "utf8"));
 }
 var init_preflight = __esm({
   "../store-release/preflight.ts"() {
@@ -49877,19 +50339,19 @@ __export(credential_profile_exports, {
   profilePath: () => profilePath,
   resolveStoreCredentials: () => resolveStoreCredentials
 });
-import { existsSync as existsSync56, readFileSync as readFileSync62 } from "node:fs";
+import { existsSync as existsSync57, readFileSync as readFileSync63 } from "node:fs";
 import { homedir as homedir5 } from "node:os";
-import { join as join52 } from "node:path";
+import { join as join53 } from "node:path";
 function credentialsDir(home = homedir5()) {
-  return join52(home, ".himalaya", "store-credentials");
+  return join53(home, ".himalaya", "store-credentials");
 }
 function profilePath(name, home = homedir5()) {
   if (!PROFILE_NAME.test(name)) {
     throw new Error(
-      `credential profile ${JSON.stringify(name)} is not a profile name \u2014 use letters, digits, ".", "_" or "-" starting with a letter or digit. It names ${join52(credentialsDir(home), "<name>.json")}; it is never a path.`
+      `credential profile ${JSON.stringify(name)} is not a profile name \u2014 use letters, digits, ".", "_" or "-" starting with a letter or digit. It names ${join53(credentialsDir(home), "<name>.json")}; it is never a path.`
     );
   }
-  return join52(credentialsDir(home), `${name}.json`);
+  return join53(credentialsDir(home), `${name}.json`);
 }
 function parseProfile(text5, label2) {
   let doc;
@@ -49920,8 +50382,8 @@ function resolveStoreCredentials(opts) {
   const { app, cfg } = opts;
   const env = opts.env ?? process.env;
   const home = opts.home ?? homedir5();
-  const read = opts.readProfile ?? ((p) => readFileSync62(p, "utf8"));
-  const exists = opts.profileExists ?? existsSync56;
+  const read = opts.readProfile ?? ((p) => readFileSync63(p, "utf8"));
+  const exists = opts.profileExists ?? existsSync57;
   const ios = cfg.ios ?? {};
   const flagName = opts.profileFlag?.trim();
   const named = namedProfile(cfg, opts.profileFlag);
@@ -50001,9 +50463,9 @@ __export(preflight_app_exports, {
   preflightApp: () => preflightApp,
   profileAccount: () => profileAccount
 });
-import { readFileSync as readFileSync63, existsSync as existsSync57, readdirSync as readdirSync26, statSync as statSync15 } from "node:fs";
+import { readFileSync as readFileSync64, existsSync as existsSync58, readdirSync as readdirSync26, statSync as statSync15 } from "node:fs";
 import { createHash as createHash26 } from "node:crypto";
-import { join as join53 } from "node:path";
+import { join as join54 } from "node:path";
 function analyze(projectYml, storeConfig, icon, account) {
   const f = [];
   const has = (re, s) => re.test(s);
@@ -50067,13 +50529,13 @@ function profileAccount(app, storeConfig, opts = {}) {
   }
 }
 async function preflightApp(app, opts = {}) {
-  const projectYml = existsSync57(iosProjectYml(app)) ? readFileSync63(iosProjectYml(app), "utf8") : "";
-  const storeConfig = existsSync57(storeConfigPath(app)) ? readFileSync63(storeConfigPath(app), "utf8") : "";
+  const projectYml = existsSync58(iosProjectYml(app)) ? readFileSync64(iosProjectYml(app), "utf8") : "";
+  const storeConfig = existsSync58(storeConfigPath(app)) ? readFileSync64(storeConfigPath(app), "utf8") : "";
   if (!storeConfig) return [{ level: "error", message: `no apps/${app}/store/store.config.yaml \u2014 run /setup-store-signing first.` }];
   const findings = analyze(
     projectYml,
     storeConfig,
-    await appIconState(join53(appDir(app), "ios")),
+    await appIconState(join54(appDir(app), "ios")),
     profileAccount(app, storeConfig, opts)
   );
   findings.push(...analyzeListing(metadataFilesPresent(app), listScreenshots(app)));
@@ -50102,17 +50564,17 @@ function analyzeSubmissionRecord(appLevel, review, opts) {
   return f;
 }
 function appLevelMetadataFiles(app, locale = "en-US") {
-  const root = join53(storeDir(app), "metadata");
+  const root = join54(storeDir(app), "metadata");
   const out = /* @__PURE__ */ new Set();
-  if (existsSync57(root)) {
+  if (existsSync58(root)) {
     for (const n of readdirSync26(root)) if (n.endsWith(".txt")) out.add(n);
   }
-  if (existsSync57(join53(root, locale, "privacy_url.txt"))) out.add("privacy_url.txt");
+  if (existsSync58(join54(root, locale, "privacy_url.txt"))) out.add("privacy_url.txt");
   return out;
 }
 function reviewInfoFiles(app) {
-  const dir = join53(storeDir(app), "review_information");
-  if (!existsSync57(dir)) return /* @__PURE__ */ new Set();
+  const dir = join54(storeDir(app), "review_information");
+  if (!existsSync58(dir)) return /* @__PURE__ */ new Set();
   return new Set(readdirSync26(dir).filter((n) => n.endsWith(".txt")));
 }
 function isValidAppStoreSize(w, h) {
@@ -50222,12 +50684,12 @@ function analyzePlayListing(assets) {
   return f;
 }
 function playListingAssets(app, locale = "en-US") {
-  const dir = join53(storeDir(app), "play", locale, "images");
+  const dir = join54(storeDir(app), "play", locale, "images");
   const read = (names) => {
     for (const name of names) {
-      const p = join53(dir, name);
+      const p = join54(dir, name);
       try {
-        if (statSync15(p).isFile()) return { name, bytes: readFileSync63(p) };
+        if (statSync15(p).isFile()) return { name, bytes: readFileSync64(p) };
       } catch {
       }
     }
@@ -50258,26 +50720,26 @@ function analyzeListing(metaFiles, shots) {
   return f;
 }
 function metadataFilesPresent(app, locale = "en-US") {
-  const dir = join53(storeDir(app), "metadata", locale);
-  if (!existsSync57(dir)) return /* @__PURE__ */ new Set();
+  const dir = join54(storeDir(app), "metadata", locale);
+  if (!existsSync58(dir)) return /* @__PURE__ */ new Set();
   return new Set(readdirSync26(dir).filter((n) => n.endsWith(".txt")));
 }
 function listScreenshots(app, locale = "en-US") {
   const out = [];
-  const flat = join53(storeDir(app), "screenshots", locale);
-  if (existsSync57(flat)) {
+  const flat = join54(storeDir(app), "screenshots", locale);
+  if (existsSync58(flat)) {
     for (const png of readdirSync26(flat).filter((n) => n.endsWith(".png"))) {
-      const sz = pngSize(readFileSync63(join53(flat, png)));
+      const sz = pngSize(readFileSync64(join54(flat, png)));
       if (sz) out.push({ name: png, w: sz.w, h: sz.h });
     }
   }
-  const legacy = join53(storeDir(app), "metadata", locale, "screenshots");
-  if (existsSync57(legacy)) {
+  const legacy = join54(storeDir(app), "metadata", locale, "screenshots");
+  if (existsSync58(legacy)) {
     for (const deviceDir of readdirSync26(legacy)) {
-      const d = join53(legacy, deviceDir);
+      const d = join54(legacy, deviceDir);
       if (!statSync15(d).isDirectory()) continue;
       for (const png of readdirSync26(d).filter((n) => n.endsWith(".png"))) {
-        const sz = pngSize(readFileSync63(join53(d, png)));
+        const sz = pngSize(readFileSync64(join54(d, png)));
         if (sz) out.push({ name: `${deviceDir}/${png}`, w: sz.w, h: sz.h });
       }
     }
@@ -50285,13 +50747,13 @@ function listScreenshots(app, locale = "en-US") {
   return out;
 }
 function placeholderHashes2() {
-  const templateIos = join53(appDir("_template"), "ios");
-  if (!existsSync57(templateIos)) return [LEGACY_PLACEHOLDER_SHA2562];
+  const templateIos = join54(appDir("_template"), "ios");
+  if (!existsSync58(templateIos)) return [LEGACY_PLACEHOLDER_SHA2562];
   for (const target of readdirSync26(templateIos)) {
-    const p = join53(templateIos, target, "Assets.xcassets", "AppIcon.appiconset", "icon_1024.png");
+    const p = join54(templateIos, target, "Assets.xcassets", "AppIcon.appiconset", "icon_1024.png");
     try {
       if (!statSync15(p).isFile()) continue;
-      return [LEGACY_PLACEHOLDER_SHA2562, createHash26("sha256").update(readFileSync63(p)).digest("hex")];
+      return [LEGACY_PLACEHOLDER_SHA2562, createHash26("sha256").update(readFileSync64(p)).digest("hex")];
     } catch {
     }
   }
@@ -50322,12 +50784,12 @@ async function pixelIssues(bytes2) {
   }
 }
 async function appIconState(iosDir) {
-  if (!existsSync57(iosDir)) return { exists: false, isPlaceholder: false, storeIssues: [] };
+  if (!existsSync58(iosDir)) return { exists: false, isPlaceholder: false, storeIssues: [] };
   for (const target of readdirSync26(iosDir)) {
-    const p = join53(iosDir, target, "Assets.xcassets", "AppIcon.appiconset", "icon_1024.png");
+    const p = join54(iosDir, target, "Assets.xcassets", "AppIcon.appiconset", "icon_1024.png");
     try {
       if (!statSync15(p).isFile()) continue;
-      const bytes2 = readFileSync63(p);
+      const bytes2 = readFileSync64(p);
       const hash = createHash26("sha256").update(bytes2).digest("hex");
       const pixels = await pixelIssues(bytes2);
       return {
@@ -50399,7 +50861,7 @@ __export(version_exports, {
   setAndroidVersion: () => setAndroidVersion,
   setIosVersion: () => setIosVersion
 });
-import { readFileSync as readFileSync64, writeFileSync as writeFileSync23 } from "node:fs";
+import { readFileSync as readFileSync65, writeFileSync as writeFileSync23 } from "node:fs";
 function readIosVersion(projectYml) {
   const marketing = matchScalar(projectYml, "CFBundleShortVersionString");
   const build2 = matchScalar(projectYml, "CFBundleVersion");
@@ -50457,8 +50919,8 @@ function setAndroidVersion(gradle, v) {
 function bumpVersion(app, opts) {
   const iosPath = iosProjectYml(app);
   const gradlePath = androidGradle(app);
-  const iosYml = readFileSync64(iosPath, "utf8");
-  const gradle = readFileSync64(gradlePath, "utf8");
+  const iosYml = readFileSync65(iosPath, "utf8");
+  const gradle = readFileSync65(gradlePath, "utf8");
   const current = readIosVersion(iosYml);
   const next = {
     marketing: opts.marketing ?? current.marketing,
@@ -50475,7 +50937,7 @@ var init_version = __esm({
 });
 
 // ../store-release/register-bundle.ts
-import { readFileSync as readFileSync65 } from "node:fs";
+import { readFileSync as readFileSync66 } from "node:fs";
 import { createPrivateKey as createPrivateKey2, sign } from "node:crypto";
 function b64url2(b) {
   return Buffer.from(b).toString("base64").replace(/\+/g, "-").replace(/\//g, "_").replace(/=+$/, "");
@@ -50493,7 +50955,7 @@ function bundleIdBody(identifier, name, platform = "IOS") {
 async function registerBundleId(opts) {
   const env = requireEnv(["ASC_KEY_ID", "ASC_ISSUER_ID", "ASC_KEY_PATH"]);
   assertCredentialOutsideRepo("ASC_KEY_PATH", env.ASC_KEY_PATH);
-  const jwt = ascJwt(env.ASC_KEY_ID, env.ASC_ISSUER_ID, readFileSync65(env.ASC_KEY_PATH, "utf8"), Math.floor(Date.now() / 1e3));
+  const jwt = ascJwt(env.ASC_KEY_ID, env.ASC_ISSUER_ID, readFileSync66(env.ASC_KEY_PATH, "utf8"), Math.floor(Date.now() / 1e3));
   const res = await fetch(`${ASC_API}/v1/bundleIds`, {
     method: "POST",
     headers: { Authorization: `Bearer ${jwt}`, "Content-Type": "application/json" },
@@ -50547,7 +51009,7 @@ __export(asc_status_exports, {
   ascStatus: () => ascStatus,
   buildVerdict: () => buildVerdict
 });
-import { readFileSync as readFileSync66 } from "node:fs";
+import { readFileSync as readFileSync67 } from "node:fs";
 function buildVerdict(builds) {
   if (!builds.length) {
     return "NO builds registered \u2014 if you uploaded recently and it's been >15 min, the binary was REJECTED IN PROCESSING (reason is email-only; run validate-binary.ts / scan-purpose-strings.ts to reproduce it).";
@@ -50561,7 +51023,7 @@ function buildVerdict(builds) {
 function client(creds) {
   const env = creds ?? requireEnv(["ASC_KEY_ID", "ASC_ISSUER_ID", "ASC_KEY_PATH"]);
   assertCredentialOutsideRepo("ASC_KEY_PATH", env.ASC_KEY_PATH);
-  const jwt = ascJwt(env.ASC_KEY_ID, env.ASC_ISSUER_ID, readFileSync66(env.ASC_KEY_PATH, "utf8"), Math.floor(Date.now() / 1e3));
+  const jwt = ascJwt(env.ASC_KEY_ID, env.ASC_ISSUER_ID, readFileSync67(env.ASC_KEY_PATH, "utf8"), Math.floor(Date.now() / 1e3));
   return async (path2) => {
     const r = await fetch(`${ASC}${path2}`, { headers: { Authorization: `Bearer ${jwt}` } });
     return { status: r.status, json: await r.json().catch(() => ({})) };
@@ -50721,7 +51183,7 @@ __export(secrets_exports, {
   runRemoteSecretsCommand: () => runRemoteSecretsCommand,
   runSecretsCommand: () => runSecretsCommand
 });
-import { readFileSync as readFileSync67 } from "node:fs";
+import { readFileSync as readFileSync68 } from "node:fs";
 function environment(value) {
   if (value === "preview" || value === "production") return value;
   throw new Error("--environment must be preview or production");
@@ -50752,7 +51214,7 @@ async function runSecretsCommand(operation, flags, io, options = {}) {
       io.log(JSON.stringify(await vault.list({ app, environment: env })));
       return 0;
     }
-    const value = options.readValue ? options.readValue() : readFileSync67(0, "utf8").replace(/\r?\n$/, "");
+    const value = options.readValue ? options.readValue() : readFileSync68(0, "utf8").replace(/\r?\n$/, "");
     if (operation === "set") await vault.set({ app, environment: env, name, value });
     else if (operation === "rotate") await vault.rotate({ app, environment: env, name, value });
     else throw new Error(`unknown secrets operation ${operation}`);
@@ -50781,7 +51243,7 @@ async function runRemoteSecretsCommand(operation, flags, io, options) {
     }
     let body;
     if (operation !== "list") {
-      const value = options.readValue ? options.readValue() : readFileSync67(0, "utf8").replace(/\r?\n$/, "");
+      const value = options.readValue ? options.readValue() : readFileSync68(0, "utf8").replace(/\r?\n$/, "");
       body = JSON.stringify({ value });
     }
     const response = await (options.fetchImpl ?? fetch)(url, { method: operation === "list" ? "GET" : operation === "set" ? "PUT" : "POST", headers: headers2, body });
@@ -50817,15 +51279,15 @@ __export(notify_exports, {
   runNotify: () => runNotify,
   saveAdminSession: () => saveAdminSession
 });
-import { chmodSync as chmodSync3, mkdirSync as mkdirSync27, readFileSync as readFileSync68, writeFileSync as writeFileSync24 } from "node:fs";
+import { chmodSync as chmodSync3, mkdirSync as mkdirSync27, readFileSync as readFileSync69, writeFileSync as writeFileSync24 } from "node:fs";
 import { homedir as homedir6 } from "node:os";
-import { dirname as dirname30, join as join54 } from "node:path";
+import { dirname as dirname30, join as join55 } from "node:path";
 function defaultSessionsPath() {
-  return process.env.HIMI_ADMIN_SESSIONS_FILE ?? join54(homedir6(), ".himalaya", "admin-sessions.json");
+  return process.env.HIMI_ADMIN_SESSIONS_FILE ?? join55(homedir6(), ".himalaya", "admin-sessions.json");
 }
 function loadSessionsFile(path2 = defaultSessionsPath()) {
   try {
-    return JSON.parse(readFileSync68(path2, "utf8"));
+    return JSON.parse(readFileSync69(path2, "utf8"));
   } catch {
     return {};
   }
@@ -54383,7 +54845,7 @@ var init_brand_font = __esm({
 
 // src/site-analyze/write-artifacts.ts
 import { mkdirSync as mkdirSync28, writeFileSync as writeFileSync25 } from "node:fs";
-import { join as join55 } from "node:path";
+import { join as join56 } from "node:path";
 function attachVeloSources(book, sources, put) {
   const byPath = new Map((sources ?? []).map((s) => [s.path, s.text]));
   for (const f of book.velo.files) {
@@ -54538,12 +55000,12 @@ async function downloadMedia(book, fetchImpl, put) {
 }
 async function writeBusinessBook(result, opts) {
   const out = opts.outDir;
-  mkdirSync28(join55(out, "evidence/pages"), { recursive: true });
-  mkdirSync28(join55(out, "media/catalog"), { recursive: true });
+  mkdirSync28(join56(out, "evidence/pages"), { recursive: true });
+  mkdirSync28(join56(out, "media/catalog"), { recursive: true });
   const files = [];
   const put = (rel, body) => {
-    const p = join55(out, rel);
-    mkdirSync28(join55(p, ".."), { recursive: true });
+    const p = join56(out, rel);
+    mkdirSync28(join56(p, ".."), { recursive: true });
     writeFileSync25(p, body);
     files.push(rel);
   };
@@ -54637,8 +55099,8 @@ var init_customer_build = __esm({
 });
 
 // src/site-analyze/apply.ts
-import { existsSync as existsSync58, readFileSync as readFileSync69, writeFileSync as writeFileSync26, copyFileSync as copyFileSync3, mkdirSync as mkdirSync29, realpathSync as realpathSync7, statSync as statSync16 } from "node:fs";
-import { dirname as dirname31, isAbsolute as isAbsolute4, join as join56, resolve as resolve45, sep as sep14 } from "node:path";
+import { existsSync as existsSync59, readFileSync as readFileSync70, writeFileSync as writeFileSync26, copyFileSync as copyFileSync3, mkdirSync as mkdirSync29, realpathSync as realpathSync7, statSync as statSync16 } from "node:fs";
+import { dirname as dirname31, isAbsolute as isAbsolute4, join as join57, resolve as resolve45, sep as sep14 } from "node:path";
 import { spawnSync as spawnSync4 } from "node:child_process";
 function unpairedRedirectNote(overlay) {
   if (!overlay.wix?.clientId || overlay.wix.redirectUri) return void 0;
@@ -54653,7 +55115,7 @@ function committedShellProvisioning(path2) {
 function findRepoRoot(cwd) {
   let dir = cwd;
   for (let i = 0; i < 8; i++) {
-    if (SHELL_NAMES2.some((name) => existsSync58(join56(dir, shellAppDir(name), "package.json")))) return dir;
+    if (SHELL_NAMES2.some((name) => existsSync59(join57(dir, shellAppDir(name), "package.json")))) return dir;
     const next = dirname31(dir);
     if (next === dir) break;
     dir = next;
@@ -54721,11 +55183,11 @@ function mergeCustomerOwned(committed, overlay) {
 }
 function buildMergedContract(options) {
   const { appDir: appDir2, packageDir, overlay } = options;
-  const committedPath = join56(appDir2, "provisioning.json");
-  if (!existsSync58(committedPath)) {
+  const committedPath = join57(appDir2, "provisioning.json");
+  if (!existsSync59(committedPath)) {
     throw new Error(`shell has no committed provisioning.json at ${committedPath} to build a contract from`);
   }
-  const committed = JSON.parse(readFileSync69(committedPath, "utf8"));
+  const committed = JSON.parse(readFileSync70(committedPath, "utf8"));
   const merged = mergeCustomerOwned(committed, overlay);
   const overlayFontFamily = (overlay.branding ?? {}).fontFamily;
   const branding = merged.branding ?? {};
@@ -54737,8 +55199,8 @@ function buildMergedContract(options) {
   };
   const stage = (fromRel, toRel) => {
     const from = contained(packageDir, fromRel);
-    const to = contained(join56(appDir2, STAGED), toRel.slice(STAGED.length + 1));
-    if (!from || !to || !existsSync58(from)) return void 0;
+    const to = contained(join57(appDir2, STAGED), toRel.slice(STAGED.length + 1));
+    if (!from || !to || !existsSync59(from)) return void 0;
     let real;
     let realRoot;
     try {
@@ -54760,11 +55222,11 @@ function buildMergedContract(options) {
   };
   const icon = stage("media/icon.png", `${STAGED}/icon.png`);
   if (icon) branding.appIconPath = icon;
-  const facesPath = join56(packageDir, "media/fonts/faces.json");
-  if (existsSync58(facesPath)) {
+  const facesPath = join57(packageDir, "media/fonts/faces.json");
+  if (existsSync59(facesPath)) {
     let faces = [];
     try {
-      const parsed = JSON.parse(readFileSync69(facesPath, "utf8"));
+      const parsed = JSON.parse(readFileSync70(facesPath, "utf8"));
       faces = Array.isArray(parsed) ? parsed : [];
     } catch {
       faces = [];
@@ -54785,9 +55247,9 @@ function buildMergedContract(options) {
   merged.branding = branding;
   const body = `${JSON.stringify(merged, null, 2)}
 `;
-  const path2 = join56(packageDir, "provisioning.contract.json");
+  const path2 = join57(packageDir, "provisioning.contract.json");
   writeFileSync26(path2, body);
-  const localPath = join56(appDir2, LOCAL_CONTRACT_REL);
+  const localPath = join57(appDir2, LOCAL_CONTRACT_REL);
   mkdirSync29(dirname31(localPath), { recursive: true });
   writeFileSync26(localPath, body);
   staged.push(localPath);
@@ -54797,8 +55259,8 @@ async function applyOverlays(input) {
   const cwd = resolve45(input.cwd);
   const shell = input.shell ?? DEFAULT_BRANDABLE_SHELL;
   assertKnownShell(shell);
-  const overlay = JSON.parse(readFileSync69(input.overlayPath, "utf8"));
-  const tokens = JSON.parse(readFileSync69(input.tokensPath, "utf8"));
+  const overlay = JSON.parse(readFileSync70(input.overlayPath, "utf8"));
+  const tokens = JSON.parse(readFileSync70(input.tokensPath, "utf8"));
   const wrote = [];
   const notes = [];
   const repoRoot2 = findRepoRoot(cwd);
@@ -54808,7 +55270,7 @@ async function applyOverlays(input) {
         `shell "${shell}" cannot bake a customer brand \u2014 it ships no prepare:customer script`
       );
     }
-    const appDir2 = join56(repoRoot2, shellAppDir(shell));
+    const appDir2 = join57(repoRoot2, shellAppDir(shell));
     const packageDir = dirname31(resolve45(input.overlayPath));
     const { path: contract, staged } = buildMergedContract({ appDir: appDir2, packageDir, overlay });
     wrote.push(...staged);
@@ -54830,10 +55292,10 @@ async function applyOverlays(input) {
       note: `prepare:customer --contract with a merged contract (committed provisioning.json untouched)${unpairedInRepo ? ` \xB7 ${unpairedInRepo}` : ""}`
     };
   }
-  const pkgProv = join56(cwd, "provisioning.json");
+  const pkgProv = join57(cwd, "provisioning.json");
   assertNotCommitted(pkgProv, input.forbiddenProvisioning);
-  if (existsSync58(pkgProv)) {
-    const cur = JSON.parse(readFileSync69(pkgProv, "utf8"));
+  if (existsSync59(pkgProv)) {
+    const cur = JSON.parse(readFileSync70(pkgProv, "utf8"));
     const merged = deepMerge4(cur, overlay);
     writeFileSync26(pkgProv, JSON.stringify(merged, null, 2) + "\n");
     wrote.push(pkgProv);
@@ -54841,9 +55303,9 @@ async function applyOverlays(input) {
     writeFileSync26(pkgProv, JSON.stringify(overlay, null, 2) + "\n");
     wrote.push(pkgProv);
   }
-  const pkgTokens = join56(cwd, "tokens.json");
-  if (existsSync58(pkgTokens) && (tokens.colors || tokens.typography)) {
-    const cur = JSON.parse(readFileSync69(pkgTokens, "utf8"));
+  const pkgTokens = join57(cwd, "tokens.json");
+  if (existsSync59(pkgTokens) && (tokens.colors || tokens.typography)) {
+    const cur = JSON.parse(readFileSync70(pkgTokens, "utf8"));
     const merged = deepMerge4(cur, tokens);
     const mergedColors = merged.colors;
     if (mergedColors && typeof mergedColors === "object" && !Array.isArray(mergedColors)) {
@@ -54862,9 +55324,9 @@ async function applyOverlays(input) {
     wrote.push(pkgTokens);
   }
   const homeAction = homeRefreshActionId(shell);
-  const homeSrc = join56(cwd, "dev/index.ts");
-  if (homeAction && existsSync58(homeSrc)) {
-    const prev = readFileSync69(homeSrc, "utf8");
+  const homeSrc = join57(cwd, "dev/index.ts");
+  if (homeAction && existsSync59(homeSrc)) {
+    const prev = readFileSync70(homeSrc, "utf8");
     const patched = patchBrandParams(prev, overlay, homeAction);
     let next = patched.src;
     if (!patched.foreign && overlay.installedVerticals?.length) {
@@ -54887,13 +55349,13 @@ async function applyOverlays(input) {
       notes.push(`${patched.unparsed} onAppear params block(s) in ${homeSrc} could not be read \u2014 any brand values inside them were not applied`);
     }
   }
-  if (!input.iconPath || !existsSync58(input.iconPath)) {
+  if (!input.iconPath || !existsSync59(input.iconPath)) {
     const book = input.iconPath ? dirname31(dirname31(resolve45(input.iconPath))) : void 0;
     notes.push(
       book ? `no icon installed \u2014 ${siteLogoAbsence(book).hint}` : "no icon installed and no business book to say why \u2014 `himi icon generate` draws one from the accent, or `himi icon set <file.png>` installs the customer's own mark"
     );
   }
-  if (input.iconPath && existsSync58(input.iconPath)) {
+  if (input.iconPath && existsSync59(input.iconPath)) {
     try {
       const installed = await installIcon(cwd, input.iconPath, { derivePlay: true });
       wrote.push(...installed.wrote);
@@ -59048,7 +59510,7 @@ __export(cli_exports, {
   runSiteAnalyze: () => runSiteAnalyze,
   runSiteFunctionCli: () => runSiteFunctionCli
 });
-import { readFileSync as readFileSync70 } from "node:fs";
+import { readFileSync as readFileSync71 } from "node:fs";
 import { resolve as resolve46 } from "node:path";
 function assetFetchFor(_opts) {
   return pinnedFetch2;
@@ -59135,7 +59597,7 @@ async function runSiteFunctionCli(opts) {
   let source;
   if (opts.sourcePath) {
     const p = resolve46(opts.cwd ?? process.cwd(), opts.sourcePath);
-    source = readFileSync70(p, "utf8");
+    source = readFileSync71(p, "utf8");
   }
   let body;
   if (opts.bodyRaw != null) {
@@ -59392,7 +59854,7 @@ __export(site_create_exports, {
   runSiteList: () => runSiteList,
   writeProvisioningBinding: () => writeProvisioningBinding
 });
-import { existsSync as existsSync59, readFileSync as readFileSync71, writeFileSync as writeFileSync27 } from "node:fs";
+import { existsSync as existsSync60, readFileSync as readFileSync72, writeFileSync as writeFileSync27 } from "node:fs";
 import { resolve as resolvePath2 } from "node:path";
 function oauthClientName(projectName) {
   return `${projectName} client`;
@@ -59541,7 +60003,7 @@ async function runSiteCreate(opts) {
   if (!wantOauthApp) return { ...base, nextSteps: nextSteps(metaSiteId) };
   return { ...base, clientId, redirectUri, nextSteps: nextSteps(metaSiteId, clientId) };
 }
-function writeProvisioningBinding(target, binding2, fs = { existsSync: existsSync59, readFileSync: readFileSync71, writeFileSync: writeFileSync27 }) {
+function writeProvisioningBinding(target, binding2, fs = { existsSync: existsSync60, readFileSync: readFileSync72, writeFileSync: writeFileSync27 }) {
   const msid = binding2.siteId;
   const path2 = resolvePath2(target);
   const committed = committedShellProvisioning(path2);
@@ -60214,11 +60676,11 @@ var init_context = __esm({
 });
 
 // src/cli.ts
-import { mkdtempSync as mkdtempSync4, readFileSync as readFileSync72, mkdirSync as mkdirSync30, writeFileSync as writeFileSync28, existsSync as existsSync60, rmSync as rmSync14, readdirSync as readdirSync27, statSync as statSync17, lstatSync as lstatSync9, accessSync, constants as constants2, renameSync as renameSync6, cpSync as cpSync3 } from "node:fs";
+import { mkdtempSync as mkdtempSync4, readFileSync as readFileSync73, mkdirSync as mkdirSync30, writeFileSync as writeFileSync28, existsSync as existsSync61, rmSync as rmSync14, readdirSync as readdirSync27, statSync as statSync17, lstatSync as lstatSync9, accessSync, constants as constants2, renameSync as renameSync6, cpSync as cpSync3 } from "node:fs";
 import { execFile, execFileSync as execFileSync7, spawnSync as spawnSync5, spawn as spawn6 } from "node:child_process";
 import { createHash as createHash27, randomUUID as randomUUID5 } from "node:crypto";
 import { tmpdir as tmpdir5, homedir as homedir7, hostname } from "node:os";
-import { join as join57, resolve as resolve47, relative as relative10, basename as basename14, dirname as dirname32 } from "node:path";
+import { join as join58, resolve as resolve47, relative as relative10, basename as basename14, dirname as dirname32 } from "node:path";
 import { fileURLToPath as fileURLToPath24 } from "node:url";
 
 // ../serve-cli/src/client.ts
@@ -63494,8 +63956,8 @@ var str6 = (v) => typeof v === "string" ? v : void 0;
 var num2 = (v) => typeof v === "string" && v !== "" && Number.isFinite(Number(v)) ? Number(v) : void 0;
 function embeddedTemplateCatalog() {
   return availableTemplates().map((name) => {
-    const path2 = join57(templateSourceDir(name), TEMPLATE_META_FILE);
-    const meta = JSON.parse(readFileSync72(path2, "utf8"));
+    const path2 = join58(templateSourceDir(name), TEMPLATE_META_FILE);
+    const meta = JSON.parse(readFileSync73(path2, "utf8"));
     if (!meta || typeof meta.title !== "string" || typeof meta.description !== "string" || !Array.isArray(meta.tags)) {
       throw new Error(`${path2} must be { title: string, description: string, tags: string[], category?: string }`);
     }
@@ -64164,7 +64626,7 @@ var COMMANDS = [
 ];
 function cliVersion() {
   try {
-    return JSON.parse(readFileSync72(new URL("../package.json", import.meta.url), "utf8")).version ?? "unknown";
+    return JSON.parse(readFileSync73(new URL("../package.json", import.meta.url), "utf8")).version ?? "unknown";
   } catch {
     return "unknown";
   }
@@ -64282,7 +64744,7 @@ function ageInDays(publishedAt, now = Date.now()) {
 }
 function packageVersion(path2) {
   try {
-    const version2 = JSON.parse(readFileSync72(path2, "utf8")).version;
+    const version2 = JSON.parse(readFileSync73(path2, "utf8")).version;
     return typeof version2 === "string" && version2 ? version2 : void 0;
   } catch {
     return void 0;
@@ -64291,7 +64753,7 @@ function packageVersion(path2) {
 function resolvedSdkVersion(fromDir = process.cwd(), bundledManifest = new URL("./authoring-runtime/node_modules/@wix/himalaya/package.json", import.meta.url)) {
   let dir = resolve47(fromDir);
   for (; ; ) {
-    const version2 = packageVersion(join57(dir, "node_modules", "@wix", "himalaya", "package.json"));
+    const version2 = packageVersion(join58(dir, "node_modules", "@wix", "himalaya", "package.json"));
     if (version2) return { version: version2, source: "local" };
     const parent = dirname32(dir);
     if (parent === dir) break;
@@ -64301,7 +64763,7 @@ function resolvedSdkVersion(fromDir = process.cwd(), bundledManifest = new URL("
   if (bundled) return { version: bundled, source: "bundled" };
   try {
     const root = execFileSync7("npm", ["root", "-g"], { stdio: ["ignore", "pipe", "ignore"] }).toString().trim();
-    const version2 = root ? packageVersion(join57(root, "@wix", "himalaya", "package.json")) : void 0;
+    const version2 = root ? packageVersion(join58(root, "@wix", "himalaya", "package.json")) : void 0;
     return version2 ? { version: version2, source: "global" } : {};
   } catch {
     return {};
@@ -64348,11 +64810,11 @@ var UPDATE_RETRY_AFTER_FAILURE_MS = 60 * 60 * 1e3;
 var UPDATE_SNOOZE_MS = 24 * 60 * 60 * 1e3;
 var UPDATE_REEXEC_ENV = "HIMI_UPDATED_ONCE";
 function updateCachePath(env = process.env) {
-  return env.HIMI_UPDATE_CACHE_FILE ?? join57(homedir7(), ".himalaya", "update-check.json");
+  return env.HIMI_UPDATE_CACHE_FILE ?? join58(homedir7(), ".himalaya", "update-check.json");
 }
 function readUpdateCache(path2) {
   try {
-    const parsed = JSON.parse(readFileSync72(path2, "utf8"));
+    const parsed = JSON.parse(readFileSync73(path2, "utf8"));
     return parsed && typeof parsed === "object" ? parsed : {};
   } catch {
     return {};
@@ -64420,12 +64882,12 @@ function createUpdateRunner(spawn7 = spawnSync5) {
     },
     installedVersion: () => {
       const root = globalNodeModulesRoot();
-      return root ? packageVersion(join57(root, "@wix", "himalaya-cli", "package.json")) : void 0;
+      return root ? packageVersion(join58(root, "@wix", "himalaya-cli", "package.json")) : void 0;
     },
     reexec: (argv) => {
       const root = globalNodeModulesRoot();
-      const entry = root ? join57(root, "@wix", "himalaya-cli", "dist", "cli.mjs") : void 0;
-      if (!entry || !existsSync60(entry)) return void 0;
+      const entry = root ? join58(root, "@wix", "himalaya-cli", "dist", "cli.mjs") : void 0;
+      if (!entry || !existsSync61(entry)) return void 0;
       const result = spawnSync5(process.execPath, [entry, ...argv], {
         // inherit keeps PIPED STDIN working — commands that read stdin must survive a re-exec.
         stdio: "inherit",
@@ -64472,7 +64934,7 @@ function staleUpdateLockFile(cachePath, now) {
   for (const path2 of [`${cachePath}.lock.break`, `${cachePath}.lock`]) {
     let content;
     try {
-      content = readFileSync72(path2, "utf8");
+      content = readFileSync73(path2, "utf8");
     } catch {
       continue;
     }
@@ -64495,7 +64957,7 @@ function acquireUpdateLock(cachePath, now, hooks = {}) {
   const mine = lockStamp(now);
   const readLock = (path2) => {
     try {
-      return readFileSync72(path2, "utf8");
+      return readFileSync73(path2, "utf8");
     } catch {
       return void 0;
     }
@@ -64792,9 +65254,9 @@ function diagnoseBody(body) {
   const out = {};
   const emptied = [];
   for (const [key2, value] of Object.entries(body)) {
-    const fold = (key2 === "issues" || key2 === "failures" || key2 === "warnings") && folded(value);
-    if (fold) emptied.push(key2);
-    out[key2] = fold ? [] : value;
+    const fold2 = (key2 === "issues" || key2 === "failures" || key2 === "warnings") && folded(value);
+    if (fold2) emptied.push(key2);
+    out[key2] = fold2 ? [] : value;
   }
   if (emptied.length) out.foldedIntoFindings = emptied;
   return out;
@@ -65033,7 +65495,7 @@ function executableOnPath(name, env = process.env) {
   const suffixes = process.platform === "win32" ? (env.PATHEXT ?? ".COM;.EXE;.BAT;.CMD").split(";").filter(Boolean) : [""];
   for (const dir of entries) {
     for (const suffix of suffixes) {
-      const candidate = join57(dir, `${name}${suffix}`);
+      const candidate = join58(dir, `${name}${suffix}`);
       try {
         if (!statSync17(candidate).isFile()) continue;
         if (process.platform !== "win32") accessSync(candidate, constants2.X_OK);
@@ -65142,7 +65604,7 @@ async function nativeConfigAdvisories(app, configSource) {
     const { iosProjectYml: iosProjectYml2 } = await Promise.resolve().then(() => (init_paths(), paths_exports));
     const { androidOptedIn: androidOptedIn3, LABEL_IOS_SPLASH: LABEL_IOS_SPLASH2 } = await Promise.resolve().then(() => (init_splash(), splash_exports));
     const iosYmlPath = iosProjectYml2(app);
-    const iosYml = existsSync60(iosYmlPath) ? readFileSync72(iosYmlPath, "utf8") : "";
+    const iosYml = existsSync61(iosYmlPath) ? readFileSync73(iosYmlPath, "utf8") : "";
     let optedIn = iosYml.includes(LABEL_IOS_SPLASH2);
     if (!optedIn) {
       const { androidManifestPath: androidManifestPath3 } = await Promise.resolve().then(() => (init_gen_native_config(), gen_native_config_exports));
@@ -65156,7 +65618,7 @@ async function nativeConfigAdvisories(app, configSource) {
 }
 function readConfigSource(dir) {
   try {
-    return readFileSync72(join57(dir, "config.ts"), "utf8");
+    return readFileSync73(join58(dir, "config.ts"), "utf8");
   } catch {
     return null;
   }
@@ -65168,7 +65630,7 @@ function writePngFile(path2, base64) {
 }
 async function initFromRemoteTemplate(name, parentDir, template, c) {
   const dir = resolve47(parentDir, name);
-  if (existsSync60(join57(dir, "himalaya.content.json"))) {
+  if (existsSync61(join58(dir, "himalaya.content.json"))) {
     throw new Error(`content package already exists at ${dir}`);
   }
   const r = await c.fetchTemplateSource(TEMPLATE_APP_PREFIX + template);
@@ -65211,7 +65673,7 @@ function symlinkDestinationIssue(dest) {
 function restoreDestinationIssue(dest, force) {
   const link = symlinkDestinationIssue(dest);
   if (link) return link;
-  if (!existsSync60(dest)) return null;
+  if (!existsSync61(dest)) return null;
   if (!statSync17(dest).isDirectory()) {
     return { error: `${dest} exists and is not a directory`, hint: "pass --out/--name to land somewhere else, or remove the file" };
   }
@@ -65226,7 +65688,7 @@ function restoreDestinationIssue(dest, force) {
 function isHimalayaMonorepoCheckout(start) {
   let dir = resolve47(start);
   for (; ; ) {
-    if (existsSync60(join57(dir, "tools", "himi-cli", "src", "cli.ts")) && existsSync60(join57(dir, "core", "serve", "src", "server.ts"))) return true;
+    if (existsSync61(join58(dir, "tools", "himi-cli", "src", "cli.ts")) && existsSync61(join58(dir, "core", "serve", "src", "server.ts"))) return true;
     const parent = dirname32(dir);
     if (parent === dir) return false;
     dir = parent;
@@ -65269,7 +65731,7 @@ function materializeForPreview(appDir2, slug, displayName) {
     Object.entries(files).map(([rel, body]) => [rel, rel === "himalaya.content.json" ? substituteIdentity(body, slug) : body])
   );
   const repoRoot2 = resolve47(fileURLToPath24(new URL("../../..", import.meta.url)));
-  const root = join57(repoRoot2, "node_modules", ".cache", "himi-template-preview");
+  const root = join58(repoRoot2, "node_modules", ".cache", "himi-template-preview");
   const stillRunning = (pid) => {
     try {
       process.kill(pid, 0);
@@ -65283,12 +65745,12 @@ function materializeForPreview(appDir2, slug, displayName) {
       if (!entry.isDirectory()) continue;
       const pid = Number(entry.name.startsWith(`${slug}-`) ? entry.name.slice(slug.length + 1) : NaN);
       if (Number.isInteger(pid) && pid > 0 && pid !== process.pid && !stillRunning(pid)) {
-        rmSync14(join57(root, entry.name), { recursive: true, force: true });
+        rmSync14(join58(root, entry.name), { recursive: true, force: true });
       }
     }
   } catch {
   }
-  const dest = join57(root, `${slug}-${process.pid}`);
+  const dest = join58(root, `${slug}-${process.pid}`);
   rmSync14(dest, { recursive: true, force: true });
   mkdirSync30(dest, { recursive: true });
   materializeSource(forBuild, displayName, dest, slug);
@@ -65296,8 +65758,8 @@ function materializeForPreview(appDir2, slug, displayName) {
 }
 async function appId(dir) {
   try {
-    const { readFileSync: readFileSync73 } = await import("node:fs");
-    const m = JSON.parse(readFileSync73(join57(dir, "himalaya.content.json"), "utf8"));
+    const { readFileSync: readFileSync74 } = await import("node:fs");
+    const m = JSON.parse(readFileSync74(join58(dir, "himalaya.content.json"), "utf8"));
     if (m.name) return m.name;
   } catch {
   }
@@ -65305,8 +65767,8 @@ async function appId(dir) {
 }
 async function contentVisibility(dir) {
   try {
-    const { readFileSync: readFileSync73 } = await import("node:fs");
-    const m = JSON.parse(readFileSync73(join57(dir, "himalaya.content.json"), "utf8"));
+    const { readFileSync: readFileSync74 } = await import("node:fs");
+    const m = JSON.parse(readFileSync74(join58(dir, "himalaya.content.json"), "utf8"));
     if (m.visibility === "public" || m.visibility === "unlisted") return m.visibility;
   } catch {
   }
@@ -65530,7 +65992,7 @@ async function recordedReleaseForContentQuietly(dir, resolution, onDrift) {
   try {
     const { buildContentForValidation: buildContentForValidation2, buildReleaseFromContent: buildReleaseFromContent2, bundleOutDir: bundleOutDir2 } = await loadAuthoring();
     const bres = await buildContentForValidation2(dir, { resolution });
-    out = mkdtempSync4(join57(tmpdir5(), "himi-ux-record-"));
+    out = mkdtempSync4(join58(tmpdir5(), "himi-ux-record-"));
     const hasWorkers = bres.built.length > 0 || bres.compileErrors.length > 0;
     const outcome = await buildReleaseFromContent2(dir, out, { ...hasWorkers ? { tier5Dir: bundleOutDir2(dir) } : {}, collect: { lint: true } });
     const releaseId = outcome.manifest.releaseId;
@@ -65708,7 +66170,7 @@ async function producedWidgetFamilies(dir) {
     let js;
     for (const candidate of [`${name}.bundle.js`, `${name}.js`, name]) {
       try {
-        js = readFileSync72(join57(outDir, candidate), "utf8");
+        js = readFileSync73(join58(outDir, candidate), "utf8");
         break;
       } catch {
       }
@@ -65739,7 +66201,7 @@ async function producedWidgetFamilies(dir) {
   }
   return { families, source: "dist/bundles" };
 }
-var boardOpen = (dir) => existsSync60(join57(dir, ".himi", "studio", "index.html"));
+var boardOpen = (dir) => existsSync61(join58(dir, ".himi", "studio", "index.html"));
 var BOARD_REFRESHERS = /* @__PURE__ */ new Set(["render", "test", "validate", "build", "push", "icon", "site", "ux", "progress"]);
 async function leaveForBoard(dir, record2, value) {
   if (!boardOpen(dir)) return;
@@ -66127,7 +66589,7 @@ himi v${cliVersion()} \u2014 run \`himi --version\`. If authoring commands fail
           const sourceDir = resolve47(str6(flags["source-dir"]) ?? appDir2);
           let meta;
           try {
-            meta = JSON.parse(readFileSync72(join57(sourceDir, TEMPLATE_META_FILE), "utf8"));
+            meta = JSON.parse(readFileSync73(join58(sourceDir, TEMPLATE_META_FILE), "utf8"));
           } catch {
             io.error(JSON.stringify({ error: `no ${TEMPLATE_META_FILE} in ${sourceDir} \u2014 a template must declare { title, description, tags } to be published`, hint: `add ${TEMPLATE_META_FILE} next to himalaya.content.json (or pass --source-dir <dir>)` }));
             return 2;
@@ -66137,7 +66599,7 @@ himi v${cliVersion()} \u2014 run \`himi --version\`. If authoring commands fail
             return 2;
           }
           try {
-            const appearance = extractTemplateAppearance(JSON.parse(readFileSync72(join57(sourceDir, "tokens.json"), "utf8")));
+            const appearance = extractTemplateAppearance(JSON.parse(readFileSync73(join58(sourceDir, "tokens.json"), "utf8")));
             meta = { ...appearance, ...meta };
           } catch {
           }
@@ -66149,7 +66611,7 @@ himi v${cliVersion()} \u2014 run \`himi --version\`. If authoring commands fail
           const force = flags.force === true;
           const { buildContentForValidation: buildContentForValidation2, buildReleaseFromContent: buildReleaseFromContent2, bundleOutDir: bundleOutDir2 } = await loadAuthoring();
           const bres = await buildContentForValidation2(buildDir, { resolution: resolutionFlag(flags) });
-          const out = mkdtempSync4(join57(tmpdir5(), "himi-template-"));
+          const out = mkdtempSync4(join58(tmpdir5(), "himi-template-"));
           const hasWorkers = bres.built.length > 0 || bres.compileErrors.length > 0;
           const outcome = await buildReleaseFromContent2(buildDir, out, {
             ...hasWorkers ? { tier5Dir: bundleOutDir2(buildDir) } : {},
@@ -66202,7 +66664,7 @@ himi v${cliVersion()} \u2014 run \`himi --version\`. If authoring commands fail
           let iconHash;
           if (iconPath) {
             try {
-              const bytes2 = readFileSync72(iconPath);
+              const bytes2 = readFileSync73(iconPath);
               payload.icon = bytes2.toString("base64");
               iconHash = createHash27("sha256").update(bytes2).digest("hex");
             } catch {
@@ -66435,7 +66897,7 @@ himi v${cliVersion()} \u2014 run \`himi --version\`. If authoring commands fail
         const { navIssues: navIssues2 } = await Promise.resolve().then(() => (init_nav_lint(), nav_lint_exports));
         const { buildContentForValidation: buildContentForValidation2, buildReleaseFromContent: buildReleaseFromContent2, bundleOutDir: bundleOutDir2 } = await loadAuthoring();
         const bres = await buildContentForValidation2(dir, { resolution: resolutionFlag(flags) });
-        const out = mkdtempSync4(join57(tmpdir5(), "himi-validate-"));
+        const out = mkdtempSync4(join58(tmpdir5(), "himi-validate-"));
         const hasWorkers = bres.built.length > 0 || bres.compileErrors.length > 0;
         const outcome = await buildReleaseFromContent2(dir, out, {
           ...hasWorkers ? { tier5Dir: bundleOutDir2(dir) } : {},
@@ -66478,7 +66940,7 @@ himi v${cliVersion()} \u2014 run \`himi --version\`. If authoring commands fail
           const path2 = dpxSessionTokenPath();
           let raw;
           try {
-            raw = readFileSync72(path2, "utf8");
+            raw = readFileSync73(path2, "utf8");
           } catch {
             throw new Error(`no DPX BO session at ${path2}; run dpx auth login, write dpx auth token to that path, then himi login --dpx --target bo`);
           }
@@ -66598,13 +67060,13 @@ himi v${cliVersion()} \u2014 run \`himi --version\`. If authoring commands fail
       case "studio": {
         const { openStudio: openStudio2 } = await Promise.resolve().then(() => (init_studio(), studio_exports));
         const dir = contentDir(flags);
-        if (!existsSync60(join57(dir, "himalaya.content.json"))) {
+        if (!existsSync61(join58(dir, "himalaya.content.json"))) {
           io.error(JSON.stringify({ ok: false, error: "not_a_content_package", dir, hint: "run from the app directory (or pass --content <dir>) \u2014 the board reads that package's .himi/" }));
           return 2;
         }
         if (pos[1] === "reel") {
           const { buildReel: buildReel2 } = await Promise.resolve().then(() => (init_studio_reel(), studio_reel_exports));
-          const out = resolve47(str6(flags.out) ?? join57(dir, ".himi", "making-of.html"));
+          const out = resolve47(str6(flags.out) ?? join58(dir, ".himi", "making-of.html"));
           const { html, plan } = buildReel2(dir);
           mkdirSync30(dirname32(out), { recursive: true });
           writeFileSync28(out, html);
@@ -66654,7 +67116,7 @@ himi v${cliVersion()} \u2014 run \`himi --version\`. If authoring commands fail
         const { appendProgress: appendProgress2, readProgress: readProgress2, summarizeProgress: summarizeProgress2, parseStep: parseStep2, notifyDesktop: notifyDesktop2, appLabel: appLabel2, journalPath: journalPath2, ProgressError: ProgressError2, JOURNEY_STEPS: JOURNEY_STEPS2 } = await Promise.resolve().then(() => (init_progress(), progress_exports));
         const dir = contentDir(flags);
         const journal = journalPath2(dir);
-        const hint = existsSync60(join57(dir, "himalaya.content.json")) ? {} : { hint: "no himalaya.content.json here \u2014 run from the app directory (or pass --content <dir>) so the build board finds this journal" };
+        const hint = existsSync61(join58(dir, "himalaya.content.json")) ? {} : { hint: "no himalaya.content.json here \u2014 run from the app directory (or pass --content <dir>) so the build board finds this journal" };
         const message = pos.slice(1).join(" ").trim();
         if (!message) {
           if (flags.step !== void 0 || flags.image !== void 0 || flags.notify === true) {
@@ -66746,7 +67208,7 @@ himi v${cliVersion()} \u2014 run \`himi --version\`. If authoring commands fail
       case "test": {
         const dir = contentDir(flags);
         const structuredOutput = flags.json === true || io.isTTY !== true;
-        if (existsSync60(join57(dir, "functions"))) {
+        if (existsSync61(join58(dir, "functions"))) {
           const { invokeLocalFunction: invokeLocalFunction2, loadFunctionsApp: loadFunctionsApp2 } = await Promise.resolve().then(() => (init_functions(), functions_exports));
           const loaded = await loadFunctionsApp2(dir);
           const results = [];
@@ -66833,7 +67295,7 @@ himi v${cliVersion()} \u2014 run \`himi --version\`. If authoring commands fail
           }
         }
         const bres = await buildContentBundles2(dir, { resolution: resolutionFlag(flags) });
-        const out = mkdtempSync4(join57(tmpdir5(), "himi-test-"));
+        const out = mkdtempSync4(join58(tmpdir5(), "himi-test-"));
         const hasWorkers = bres.built.length > 0 || bres.compileErrors.length > 0;
         const outcome = await buildReleaseFromContent2(dir, out, {
           ...hasWorkers ? { tier5Dir: bundleOutDir2(dir) } : {},
@@ -66878,7 +67340,7 @@ himi v${cliVersion()} \u2014 run \`himi --version\`. If authoring commands fail
             io.error(JSON.stringify({ error: `screen "${screen.screenId}" has no Tier-5 worker, so there is nothing for the browser loop to build` }));
             return 2;
           }
-          const sources = collectWorkerSources2(join57(dir, "tier5-src"), screen.bundleName);
+          const sources = collectWorkerSources2(join58(dir, "tier5-src"), screen.bundleName);
           if (!sources) {
             io.error(JSON.stringify({ error: `no worker source found at tier5-src/${screen.bundleName} \u2014 the browser loop compiles SOURCE, not the built bundle` }));
             return 2;
@@ -67039,7 +67501,7 @@ himi v${cliVersion()} \u2014 run \`himi --version\`. If authoring commands fail
             const sp = await runShotsPass2({
               descriptors: scopeDescriptors2(outcome.descriptors ?? [], pos.slice(1), invalidScreens),
               tokens: outcome.tokens,
-              outDir: join57(dir, ".himi", "shots"),
+              outDir: join58(dir, ".himi", "shots"),
               width: 390,
               layers: { rules: shotRules, ...cmsSeed ? { cmsSeed } : {}, ...canned ? { canned: canned.byKey } : {} },
               ...budgetMs ? { budgetMs } : {},
@@ -67077,7 +67539,7 @@ himi v${cliVersion()} \u2014 run \`himi --version\`. If authoring commands fail
           releaseId: result.releaseId,
           releasePayload: release,
           descriptors: attestedDescriptors,
-          screenshots: Object.fromEntries(writtenShots.filter((name) => crawledScreens.has(name.replace(/\.png$/, ""))).map((name) => [name.replace(/\.png$/, ""), join57(dir, ".himi", "shots", name)])),
+          screenshots: Object.fromEntries(writtenShots.filter((name) => crawledScreens.has(name.replace(/\.png$/, ""))).map((name) => [name.replace(/\.png$/, ""), join58(dir, ".himi", "shots", name)])),
           coverage: {
             screens: crawledScreens.size,
             actionsDispatched: result.actions.exercised,
@@ -67167,7 +67629,7 @@ himi v${cliVersion()} \u2014 run \`himi --version\`. If authoring commands fail
             return 2;
           }
           try {
-            const raw = stateArg.trim().startsWith("{") ? stateArg : readFileSync72(stateArg.replace(/^@/, ""), "utf8");
+            const raw = stateArg.trim().startsWith("{") ? stateArg : readFileSync73(stateArg.replace(/^@/, ""), "utf8");
             injectedState = JSON.parse(raw);
           } catch (e) {
             io.error(JSON.stringify({ error: `--state must be inline JSON or a path to a .json file \u2014 ${e.message}` }));
@@ -67182,7 +67644,7 @@ himi v${cliVersion()} \u2014 run \`himi --version\`. If authoring commands fail
             return 2;
           }
           try {
-            const raw = inputArg.trim().startsWith("{") ? inputArg : readFileSync72(inputArg.replace(/^@/, ""), "utf8");
+            const raw = inputArg.trim().startsWith("{") ? inputArg : readFileSync73(inputArg.replace(/^@/, ""), "utf8");
             const parsed = JSON.parse(raw);
             if (!parsed || typeof parsed !== "object" || Array.isArray(parsed)) throw new Error("must be a JSON object");
             injectedInput = parsed;
@@ -67231,7 +67693,7 @@ himi v${cliVersion()} \u2014 run \`himi --version\`. If authoring commands fail
         }
         const { buildContentBundles: buildContentBundles2, buildReleaseFromContent: buildReleaseFromContent2, bundleOutDir: bundleOutDir2 } = await loadAuthoring();
         const bres = await buildContentBundles2(dir, { resolution: resolutionFlag(flags) });
-        const out = mkdtempSync4(join57(tmpdir5(), "himi-render-"));
+        const out = mkdtempSync4(join58(tmpdir5(), "himi-render-"));
         const hasWorkers = bres.built.length > 0 || bres.compileErrors.length > 0;
         const outcome = await buildReleaseFromContent2(dir, out, {
           ...hasWorkers ? { tier5Dir: bundleOutDir2(dir) } : {},
@@ -67245,7 +67707,7 @@ himi v${cliVersion()} \u2014 run \`himi --version\`. If authoring commands fail
         const diagnostics = (outcome.lint ?? []).find((s) => s.screenId === screenId)?.issues ?? [];
         let pngFile;
         let attestationPngFile;
-        const shotPath = join57(dir, ".himi", "shots", `${screenId}.png`);
+        const shotPath = join58(dir, ".himi", "shots", `${screenId}.png`);
         const pngTarget = typeof flags.png === "string" ? str6(flags.png) : flags.png === true ? shotPath : void 0;
         if (pngTarget && r.pngBase64) {
           pngFile = writePngFile(pngTarget, r.pngBase64);
@@ -67581,7 +68043,7 @@ default (no --glyph): ${DEFAULT_GLYPH2} \u2014 a mark that claims nothing, so th
           io.error(JSON.stringify(linked));
           return 1;
         }
-        if (existsSync60(dest)) {
+        if (existsSync61(dest)) {
           if (!statSync17(dest).isDirectory()) {
             io.error(JSON.stringify({
               error: `${dest} exists and is not a directory`,
@@ -67594,7 +68056,7 @@ default (no --glyph): ${DEFAULT_GLYPH2} \u2014 a mark that claims nothing, so th
             io.error(JSON.stringify({ error: `${dest} already exists and is not empty`, hint: "pass --force to write into it anyway (merging, and naming what it keeps), --replace to restore exactly what was archived, or --out/--name to land somewhere else" }));
             return 1;
           }
-          if (replace && occupied && !existsSync60(join57(dest, "himalaya.content.json"))) {
+          if (replace && occupied && !existsSync61(join58(dest, "himalaya.content.json"))) {
             io.error(JSON.stringify({
               error: `${dest} is not a content package \u2014 refusing to --replace it`,
               hint: "--replace only clears a directory that holds himalaya.content.json. Check --out/--name, or pass --force to merge into it instead."
@@ -67733,7 +68195,7 @@ default (no --glyph): ${DEFAULT_GLYPH2} \u2014 a mark that claims nothing, so th
         const force = flags.force === true;
         const { buildContentForValidation: buildContentForValidation2, buildReleaseFromContent: buildReleaseFromContent2, bundleOutDir: bundleOutDir2 } = await loadAuthoring();
         const bres = await buildContentForValidation2(dir, { resolution: resolutionFlag(flags) });
-        const out = mkdtempSync4(join57(tmpdir5(), "himi-push-"));
+        const out = mkdtempSync4(join58(tmpdir5(), "himi-push-"));
         const hasWorkers = bres.built.length > 0 || bres.compileErrors.length > 0;
         const outcome = await buildReleaseFromContent2(dir, out, {
           ...hasWorkers ? { tier5Dir: bundleOutDir2(dir) } : {},
@@ -68254,7 +68716,7 @@ default (no --glyph): ${DEFAULT_GLYPH2} \u2014 a mark that claims nothing, so th
         }
         const { buildContentForValidation: buildContentForValidation2, buildReleaseFromContent: buildReleaseFromContent2, bundleOutDir: bundleOutDir2 } = await loadAuthoring();
         const bres = await buildContentForValidation2(dir, { resolution: resolutionFlag(flags) });
-        const built = mkdtempSync4(join57(tmpdir5(), "himi-pack-"));
+        const built = mkdtempSync4(join58(tmpdir5(), "himi-pack-"));
         const hasWorkers = bres.built.length > 0 || bres.compileErrors.length > 0;
         const outcome = await buildReleaseFromContent2(dir, built, {
           ...hasWorkers ? { tier5Dir: bundleOutDir2(dir) } : {},
@@ -68457,7 +68919,7 @@ default (no --glyph): ${DEFAULT_GLYPH2} \u2014 a mark that claims nothing, so th
             }));
             return 1;
           }
-          const archive = readFileSync72(resolve47(file));
+          const archive = readFileSync73(resolve47(file));
           const result = await client2().createPackageShare({
             app: opened.header.app,
             releaseId: opened.header.releaseId,
@@ -68511,11 +68973,11 @@ default (no --glyph): ${DEFAULT_GLYPH2} \u2014 a mark that claims nothing, so th
             const app = await appId(dir2);
             const { buildContentBundles: buildContentBundles2, buildReleaseFromContent: buildReleaseFromContent2, bundleOutDir: bundleOutDir2 } = await loadAuthoring();
             const bres = await buildContentBundles2(dir2, { resolution: resolutionFlag(flags) });
-            temp = mkdtempSync4(join57(tmpdir5(), "himi-run-build-"));
+            temp = mkdtempSync4(join58(tmpdir5(), "himi-run-build-"));
             const hasWorkers = bres.built.length > 0 || bres.compileErrors.length > 0;
             const initial = await buildReleaseFromContent2(dir2, temp, { ...hasWorkers ? { tier5Dir: bundleOutDir2(dir2) } : {} });
             servedMissing = initial.missingBundles;
-            source = join57(temp, app);
+            source = join58(temp, app);
           }
           const chromeArg = str6(flags.chrome) ?? "preview";
           if (chromeArg !== "preview" && chromeArg !== "app") {
@@ -68551,7 +69013,7 @@ default (no --glyph): ${DEFAULT_GLYPH2} \u2014 a mark that claims nothing, so th
             if (!recordKit) return;
             startedAt = (/* @__PURE__ */ new Date()).toISOString();
             const failure = record2(served2, { ok: true, at: startedAt });
-            if (!recorded) io.error(JSON.stringify({ run: "run_record_skipped", message: `${failure ?? `${join57(dir, ".himi")} is not a real directory`}, so the build board will not frame this preview.` }));
+            if (!recorded) io.error(JSON.stringify({ run: "run_record_skipped", message: `${failure ?? `${join58(dir, ".himi")} is not a real directory`}, so the build board will not frame this preview.` }));
             await refreshBoard();
           };
           const retract = async () => {
@@ -68582,7 +69044,7 @@ default (no --glyph): ${DEFAULT_GLYPH2} \u2014 a mark that claims nothing, so th
           }
           const watchKit = watch2 ? await Promise.resolve().then(() => (init_run_watch(), run_watch_exports)) : null;
           const bus = watchKit ? new watchKit.ReloadBus() : void 0;
-          if (watch2) served = mkdtempSync4(join57(tmpdir5(), "himi-run-served-"));
+          if (watch2) served = mkdtempSync4(join58(tmpdir5(), "himi-run-served-"));
           const running = await runPackage2(source, {
             port,
             chrome: chromeArg,
@@ -68594,15 +69056,15 @@ default (no --glyph): ${DEFAULT_GLYPH2} \u2014 a mark that claims nothing, so th
             ...recordKit ? { extraRoutes: (request) => recordKit.boardFile(dir, new URL(request.url).pathname) } : {},
             ...watchKit && served && bus ? { workDir: served, screenEvents: bus } : {}
           });
-          let watcher;
+          let watcher2;
           let rebuild;
           let stopping = false;
           try {
             await announce(running);
             if (watchKit && bus) {
               const { buildContentBundles: buildContentBundles2, buildReleaseFromContent: buildReleaseFromContent2, bundleOutDir: bundleOutDir2 } = await loadAuthoring();
-              const live2 = join57(running.releaseRoot, running.app);
-              const manifestOf = (tree) => JSON.parse(readFileSync72(join57(tree, "release-manifest.json"), "utf8"));
+              const live2 = join58(running.releaseRoot, running.app);
+              const manifestOf = (tree) => JSON.parse(readFileSync73(join58(tree, "release-manifest.json"), "utf8"));
               let current = manifestOf(live2);
               const failed2 = async (message) => {
                 if (stopping) return;
@@ -68613,7 +69075,7 @@ default (no --glyph): ${DEFAULT_GLYPH2} \u2014 a mark that claims nothing, so th
               };
               rebuild = watchKit.serialize(async () => {
                 const t0 = Date.now();
-                const next = mkdtempSync4(join57(tmpdir5(), "himi-run-build-"));
+                const next = mkdtempSync4(join58(tmpdir5(), "himi-run-build-"));
                 try {
                   const bres = await buildContentBundles2(dir, { resolution: resolutionFlag(flags) });
                   if (bres.compileErrors.length) {
@@ -68630,14 +69092,14 @@ default (no --glyph): ${DEFAULT_GLYPH2} \u2014 a mark that claims nothing, so th
                     return;
                   }
                   if (stopping) return;
-                  const fresh = manifestOf(join57(next, running.app));
+                  const fresh = manifestOf(join58(next, running.app));
                   const diff = watchKit.diffReleases(current, fresh);
                   const retired = `${live2}.retired-${Date.now()}`;
                   renameSync6(live2, retired);
                   try {
-                    renameSync6(join57(next, running.app), live2);
+                    renameSync6(join58(next, running.app), live2);
                   } catch {
-                    cpSync3(join57(next, running.app), live2, { recursive: true });
+                    cpSync3(join58(next, running.app), live2, { recursive: true });
                   }
                   rmSync14(retired, { recursive: true, force: true });
                   current = fresh;
@@ -68652,7 +69114,7 @@ default (no --glyph): ${DEFAULT_GLYPH2} \u2014 a mark that claims nothing, so th
                   rmSync14(next, { recursive: true, force: true });
                 }
               });
-              watcher = watchKit.watchContent(dir, () => rebuild?.());
+              watcher2 = watchKit.watchContent(dir, () => rebuild?.());
             }
           } catch (e) {
             await retract().catch(() => {
@@ -68674,7 +69136,7 @@ default (no --glyph): ${DEFAULT_GLYPH2} \u2014 a mark that claims nothing, so th
           await new Promise((done) => {
             const stop = async () => {
               stopping = true;
-              watcher?.close();
+              watcher2?.close();
               try {
                 await rebuild?.stop();
                 await retract();
@@ -69235,7 +69697,7 @@ default (no --glyph): ${DEFAULT_GLYPH2} \u2014 a mark that claims nothing, so th
           io.error(JSON.stringify({ error: `patch ${kind} needs --file`, usage: PATCH_USAGE }));
           return 2;
         }
-        if (!existsSync60(file)) {
+        if (!existsSync61(file)) {
           io.error(JSON.stringify({ error: `no such file: ${file}` }));
           return 2;
         }
@@ -69291,7 +69753,7 @@ default (no --glyph): ${DEFAULT_GLYPH2} \u2014 a mark that claims nothing, so th
           lintNote: "`himi patch` sends a raw file. Nothing here built or linted your app \u2014 `himi push --only <selector>` is the same edit with the full lint gate in front of it."
         };
         if (kind === "tokens" || kind === "app-config") {
-          const body = readFileSync72(file, "utf8");
+          const body = readFileSync73(file, "utf8");
           const patch2 = kind === "tokens" ? { tokens: body } : { appConfig: body };
           return runReleasePatch({
             ...common,
@@ -69306,7 +69768,7 @@ default (no --glyph): ${DEFAULT_GLYPH2} \u2014 a mark that claims nothing, so th
             io.error(JSON.stringify({ error: "patch screen needs a <screenId>", usage: PATCH_USAGE }));
             return 2;
           }
-          const descriptor = readFileSync72(file, "utf8");
+          const descriptor = readFileSync73(file, "utf8");
           try {
             JSON.parse(descriptor);
           } catch (e) {
@@ -69346,7 +69808,7 @@ default (no --glyph): ${DEFAULT_GLYPH2} \u2014 a mark that claims nothing, so th
             extra: { kind, screen: id, file: { path: file, bytes: Buffer.byteLength(descriptor, "utf8") } }
           });
         }
-        const bytes2 = readFileSync72(file);
+        const bytes2 = readFileSync73(file);
         const sha = createHash27("sha256").update(bytes2).digest("hex");
         const forScreens = (str6(flags["for-screen"]) ?? "").split(",").map((s) => s.trim()).filter(Boolean);
         if (flags["no-rebind"] !== void 0 && flags["no-rebind"] !== true) {
@@ -69490,7 +69952,7 @@ default (no --glyph): ${DEFAULT_GLYPH2} \u2014 a mark that claims nothing, so th
           }
           let def;
           try {
-            const parsed = JSON.parse(arg.startsWith("@") ? readFileSync72(arg.slice(1), "utf8") : arg);
+            const parsed = JSON.parse(arg.startsWith("@") ? readFileSync73(arg.slice(1), "utf8") : arg);
             if (parsed === null || typeof parsed !== "object" || Array.isArray(parsed)) {
               io.error(JSON.stringify({ error: "invalid_definition", problems: [`--definition must be a JSON object, got ${Array.isArray(parsed) ? "an array" : parsed === null ? "null" : typeof parsed}`] }));
               return 2;
@@ -69954,7 +70416,7 @@ ${label2}`);
         const platform = str6(flags.platform)?.split(",").map((p) => p.trim()).filter(Boolean);
         {
           const distDir = contentDir(flags);
-          if (existsSync60(join57(distDir, "himalaya.content.json"))) {
+          if (existsSync61(join58(distDir, "himalaya.content.json"))) {
             const issues = await iconIssues(distDir, flags.strict === true, { requireDeclared: true, requireVerified: true });
             const errors = issues.filter((i) => i.severity === "error");
             for (const i of issues.filter((i2) => i2.severity === "warning")) {
@@ -70223,7 +70685,7 @@ ${label2}`);
           const dpxPath = dpxSessionTokenPath();
           let dpx;
           try {
-            dpx = readFileSync72(dpxPath, "utf8").trim();
+            dpx = readFileSync73(dpxPath, "utf8").trim();
           } catch {
             io.error(JSON.stringify({ error: `no dpx session at ${dpxPath} \u2014 run \`dpx auth login\` then \`dpx auth token > ${dpxPath}\` (dpx 2.x keeps its own state in ~/.dpx/auth.json and does NOT write the legacy session file), or omit --dpx` }));
             return 1;
@@ -70625,7 +71087,7 @@ ${report2.ok ? "OK \u2014 data + serve plane reachable." : typeof report2.hint =
           const path2 = dpxSessionTokenPath();
           let raw;
           try {
-            raw = readFileSync72(path2, "utf8");
+            raw = readFileSync73(path2, "utf8");
           } catch {
             io.error(JSON.stringify({ error: `no DPX BO session at ${path2}` }));
             return 1;