@wix/himalaya-cli 0.1035.0 → 0.1037.0

package/dist/cli.mjs

@@ -3056,14 +3056,14 @@ function confinementMatcher(contentRoot, extraRoots = []) {
     linked = [];
     const scanned = /* @__PURE__ */ new Set();
     const queue = [...roots];
-    const CAP4 = 4096;
+    const CAP5 = 4096;
     const take = (abs) => {
       const target = realpathOrSelf(abs);
-      if (scanned.has(target) || linked.length >= CAP4) return;
+      if (scanned.has(target) || linked.length >= CAP5) return;
       linked.push(target);
       queue.push(target);
     };
-    while (queue.length && linked.length < CAP4) {
+    while (queue.length && linked.length < CAP5) {
       const r = queue.shift();
       for (const nm of [r, join12(r, "node_modules")]) {
         if (scanned.has(nm)) continue;
@@ -8206,8 +8206,8 @@ function findSkipDerive(bundleJs) {
       if (touchedBase.length === 0) continue;
       const missingDerived = [...outputUnion].filter((o) => !keySet.has(o));
       if (missingDerived.length === 0) continue;
-      const snippet2 = objBody.replace(/\s+/g, " ").trim();
-      findings.push({ touchedBase, missingDerived, snippet: `{ ${snippet2.slice(0, 70)}${snippet2.length > 70 ? " \u2026" : ""} }` });
+      const snippet3 = objBody.replace(/\s+/g, " ").trim();
+      findings.push({ touchedBase, missingDerived, snippet: `{ ${snippet3.slice(0, 70)}${snippet3.length > 70 ? " \u2026" : ""} }` });
     }
     return findings;
   } catch {
@@ -8812,8 +8812,8 @@ function validateScreenDescriptor(screenId, descriptor, opts = {}) {
   if (a11yMode !== "off") {
     const severity = a11yMode === "warn" && !strict ? "warning" : "error";
     const gaps = accessibleNameGaps(descriptor);
-    const CAP4 = 20;
-    for (const gap of gaps.slice(0, CAP4)) {
+    const CAP5 = 20;
+    for (const gap of gaps.slice(0, CAP5)) {
       const row = Object.prototype.hasOwnProperty.call(A11Y_CONTRACT, gap.type) ? A11Y_CONTRACT[gap.type] : void 0;
       const why = gap.reason === "interactive" ? `it carries an \`onTap\`/\`onLongPress\`/\`onDoubleTap\`, which promotes ANY node to a control that owes a name (RFC 0058 \xA73.4)` : `RFC 0058 \xA73.3 requires a name for \`${gap.type}\` (announced as \`${gap.role}\`)`;
       const fix = gap.reason === "contract" ? `Give it \`modifiers.accessibilityLabel\`, or copy on a descendant \u2014 or, if it really is presentational, say so with \`modifiers.accessibilityRole: "decorative"\` (node-local) or \`modifiers.accessibilityHidden: true\` (whole subtree).` : `Give it \`modifiers.accessibilityLabel\`, or put readable copy on a descendant. An icon-only control names itself with \`Icon.contentDescription\`. \`decorative\` does not silence a control${row?.decorative ? ` \u2014 a tappable \`${gap.type}\` is one` : ""}.`;
@@ -8824,11 +8824,11 @@ function validateScreenDescriptor(screenId, descriptor, opts = {}) {
         message: `${gap.type} renders no accessible name anywhere in its subtree, and ${why}. A screen reader announces this node as an unnamed \`${gap.role}\`. ${fix}`
       });
     }
-    if (gaps.length > CAP4) {
+    if (gaps.length > CAP5) {
       issues.push({
         severity,
         pass: "a11y",
-        message: `+${gaps.length - CAP4} more node(s) on this screen render no accessible name (${gaps.length} in total). Fix the ${CAP4} above and re-run to see the rest.`
+        message: `+${gaps.length - CAP5} more node(s) on this screen render no accessible name (${gaps.length} in total). Fix the ${CAP5} above and re-run to see the rest.`
       });
     }
   }
@@ -13417,12 +13417,12 @@ async function checkReport(appDir2, opts = {}) {
 function resolveFamilyName(input) {
   const catalog = loadCatalog();
   if (renderableFamilies(catalog).has(input)) return input;
-  const norm2 = input.toLowerCase().replace(/[^a-z0-9]/g, "");
+  const norm3 = input.toLowerCase().replace(/[^a-z0-9]/g, "");
   for (const name of renderableFamilies(catalog)) {
-    if (name.toLowerCase().replace(/[^a-z0-9]/g, "") === norm2) return name;
+    if (name.toLowerCase().replace(/[^a-z0-9]/g, "") === norm3) return name;
   }
   for (const [name, fam] of [...Object.entries(catalog.families), ...Object.entries(catalog.bundled)]) {
-    if ((fam.aliases ?? []).some((a) => a.toLowerCase().replace(/[^a-z0-9]/g, "") === norm2)) return name;
+    if ((fam.aliases ?? []).some((a) => a.toLowerCase().replace(/[^a-z0-9]/g, "") === norm3)) return name;
   }
   return void 0;
 }
@@ -24817,9 +24817,13 @@ function parseLocalDate(when) {
   const d = when instanceof Date ? new Date(when.getTime()) : new Date(when);
   return isNaN(d.getTime()) ? null : d;
 }
-function localHHMM(d) {
-  const p = (n) => String(n).padStart(2, "0");
-  return `${p(d.getHours())}:${p(d.getMinutes())}`;
+function localTimeLabel(d) {
+  try {
+    return d.toLocaleTimeString(void 0, { hour: "numeric", minute: "2-digit" }).replace(/[\u202F\u00A0]/g, " ");
+  } catch {
+    const p = (n) => String(n).padStart(2, "0");
+    return `${p(d.getHours())}:${p(d.getMinutes())}`;
+  }
 }
 function localDayKey(when) {
   const d = parseLocalDate(when);
@@ -26849,7 +26853,7 @@ var init_renderNode = __esm({
       const hostRef = React5.useRef(null);
       const autoplayConsumed = React5.useRef(false);
       const item = resolvedItems[index];
-      const mediaKey = `${index}:${item?.id ?? item?.url ?? ""}`;
+      const mediaKey2 = `${index}:${item?.id ?? item?.url ?? ""}`;
       React5.useEffect(() => {
         const outgoing = mediaRef.current;
         return () => {
@@ -26858,7 +26862,7 @@ var init_renderNode = __esm({
           } catch {
           }
         };
-      }, [mediaKey]);
+      }, [mediaKey2]);
       const sessionId = String(props.sessionId || nodeId || "media");
       const provider = String(item?.provider || "direct").toLowerCase();
       const isYouTube = provider === "youtube";
@@ -27215,7 +27219,7 @@ var init_renderNode = __esm({
             provider,
             "."
           ] })
-        ] }) : isYouTube ? /* @__PURE__ */ jsx6("iframe", { title: String(item?.title ?? "YouTube video"), src: `https://www.youtube-nocookie.com/embed/${encodeURIComponent(youtubeId(item))}?playsinline=1&autoplay=${props.autoplay === "never" ? 0 : 1}&mute=${props.muted === true ? 1 : 0}&controls=${chrome === "none" ? 0 : 1}`, allow: "autoplay; encrypted-media; picture-in-picture; fullscreen", allowFullScreen: true, style: { border: 0, width: "100%", flex: 1, minHeight: 0 } }, mediaKey) : isAudio ? /* @__PURE__ */ jsxs3("div", { style: { position: "relative", flex: 1, minHeight: 0, display: "grid", gridTemplateColumns: props.presentation === "compact" || props.presentation === "mini" ? "72px 1fr" : "1fr", alignItems: "center", gap: 16, padding: hidden ? 0 : 16, boxSizing: "border-box" }, children: [
+        ] }) : isYouTube ? /* @__PURE__ */ jsx6("iframe", { title: String(item?.title ?? "YouTube video"), src: `https://www.youtube-nocookie.com/embed/${encodeURIComponent(youtubeId(item))}?playsinline=1&autoplay=${props.autoplay === "never" ? 0 : 1}&mute=${props.muted === true ? 1 : 0}&controls=${chrome === "none" ? 0 : 1}`, allow: "autoplay; encrypted-media; picture-in-picture; fullscreen", allowFullScreen: true, style: { border: 0, width: "100%", flex: 1, minHeight: 0 } }, mediaKey2) : isAudio ? /* @__PURE__ */ jsxs3("div", { style: { position: "relative", flex: 1, minHeight: 0, display: "grid", gridTemplateColumns: props.presentation === "compact" || props.presentation === "mini" ? "72px 1fr" : "1fr", alignItems: "center", gap: 16, padding: hidden ? 0 : 16, boxSizing: "border-box" }, children: [
           poster && /* @__PURE__ */ jsx6("img", { src: poster, alt: "", style: chrome === "custom" ? { position: "absolute", inset: 0, width: "100%", height: "100%", objectFit: "cover", opacity: 0.62 } : { width: props.presentation === "compact" || props.presentation === "mini" ? 72 : "min(55%, 260px)", aspectRatio: "1", objectFit: "cover", borderRadius: ctx.radius("md", 8), justifySelf: "center" } }),
           chrome === "custom" && /* @__PURE__ */ jsx6("div", { style: { position: "absolute", inset: 0, background: "linear-gradient(transparent,rgba(0,0,0,.75))" } }),
           !hidden && chrome !== "custom" && /* @__PURE__ */ jsxs3("div", { style: { textAlign: props.presentation === "compact" || props.presentation === "mini" ? "left" : "center", minWidth: 0 }, children: [
@@ -27224,10 +27228,10 @@ var init_renderNode = __esm({
           ] }),
           /* @__PURE__ */ jsx6("audio", { ref: (el) => {
             mediaRef.current = el;
-          }, ...commonMedia, children: renderMediaTracks() }, mediaKey)
+          }, ...commonMedia, children: renderMediaTracks() }, mediaKey2)
         ] }) : /* @__PURE__ */ jsx6("video", { ref: (el) => {
           mediaRef.current = el;
-        }, poster: poster || void 0, ...commonMedia, style: { width: "100%", flex: 1, minHeight: 0, display: "block", objectFit: props.contentMode === "fill" ? "cover" : "contain", background: "#000" }, children: renderMediaTracks() }, mediaKey),
+        }, poster: poster || void 0, ...commonMedia, style: { width: "100%", flex: 1, minHeight: 0, display: "block", objectFit: props.contentMode === "fill" ? "cover" : "contain", background: "#000" }, children: renderMediaTracks() }, mediaKey2),
         status === "idle" && slot("poster"),
         slot("overlay"),
         status === "loading" && slot("loading"),
@@ -29476,7 +29480,7 @@ var init_renderNode = __esm({
           /* @__PURE__ */ jsx6("div", { style: { position: sticky ? "sticky" : "static", top: 0, zIndex: 1, background: C("surfacePrimary", "#fff"), fontFamily: bodyFont(ctx), fontSize: 12, fontWeight: 700, textTransform: "uppercase", letterSpacing: 0.4, color: C("textSecondary", "#888"), padding: "8px 4px" }, children: dayHeaderLabel(g.key) }),
           g.items.map((ev, i) => {
             const start = parseLocalDate(ev.start);
-            const timeStr = ev.allDay === true ? "All day" : start ? localHHMM(start) : "";
+            const timeStr = ev.allDay === true ? "All day" : start ? localTimeLabel(start) : "";
             const tappable = !!(ev?.onTap || props.onSelectEvent);
             if (props.eventTemplate) {
               const itemCtx = { ...ctx, itemScope: calEventScope(ev, i) };
@@ -41683,7 +41687,7 @@ function assertRedirectUri(value) {
   }
   return trimmed;
 }
-var BOOK_SCHEMA_VERSION, KNOWN_VERTICALS;
+var BOOK_SCHEMA_VERSION, KNOWN_VERTICALS, REDIRECT_NEEDS_CLIENT;
 var init_types2 = __esm({
   "src/site-analyze/types.ts"() {
     BOOK_SCHEMA_VERSION = 2;
@@ -41717,6 +41721,7 @@ var init_types2 = __esm({
       "galleries",
       "inbox"
     ];
+    REDIRECT_NEEDS_CLIENT = "--redirect-uri is the redirect REGISTERED on --client-id, so it needs --client-id too";
   }
 });
 
@@ -49338,8 +49343,7 @@ async function localizeConfigResponse(res, kind, header) {
 }
 function makeRunHandler(opts) {
   const mount = opts.chrome === "app" ? "/app" : "/preview";
-  const serve = makeServeHandler({
-    store: opts.store,
+  const serveOpts = {
     defaultApp: opts.app,
     // A local plane is a pin: nothing mutates, and the owner rungs cannot work anyway — a service
     // worker never sees a `Cookie` header (it is a forbidden request header in both directions), so
@@ -49354,7 +49358,9 @@ function makeRunHandler(opts) {
     webwixBridge: Boolean(opts.serve?.webwixFetch),
     manifestCacheTtlMs: 0,
     ...opts.serve
-  });
+  };
+  const serve = makeServeHandler({ store: opts.store, ...serveOpts });
+  const ownerRungOn = serveOpts.webwixOwnerRung !== false;
   return async (request) => {
     const url = new URL(request.url);
     const path2 = url.pathname;
@@ -49375,6 +49381,10 @@ function makeRunHandler(opts) {
     if (path2.startsWith("/v1/flags/")) {
       return json4(200, { app: opts.app, definitions: {} }, { "cache-control": "no-store" });
     }
+    if (path2 === "/v1/owner/sites" && !ownerRungOn && (request.method === "GET" || request.method === "HEAD")) {
+      const headers2 = { "cache-control": "no-store" };
+      return request.method === "HEAD" ? new Response(null, { status: 200, headers: { "content-type": "application/json; charset=utf-8", ...headers2 } }) : json4(200, { sites: [] }, headers2);
+    }
     if (path2 === "/v1/telemetry/ingest") {
       if (request.method !== "POST") return json4(405, { error: "method_not_allowed" });
       try {
@@ -49577,21 +49587,21 @@ var init_preview_assets_generated = __esm({
   "../../packages/serve/src/preview-assets.generated.ts"() {
     init_preview_assets_format();
     PREVIEW_ASSET_MANIFEST = [
-      { key: "assets/index-CfirOMcp.js", contentType: "application/javascript; charset=utf-8", offset: 8, length: 1050991, sha256: "438f0a1b7a2d194f1eb7e5132d7d0bddc5ca326a63eb4ccebd18c1f9229ff89a" },
-      { key: "fonts/Roboto-LICENSE.txt", contentType: "application/octet-stream", offset: 1050999, length: 4610, sha256: "994062dd7af4186a739de55dd9e151c63b6301f8e2cbafc608d35c2e87da0cd2" },
-      { key: "fonts/Roboto-Variable.ttf", contentType: "font/ttf", offset: 1055609, length: 488584, sha256: "d7598e12c5dbef095ff8272cfc55da0250bd07fbdecbac8a530b9b277872a134" },
-      { key: "fonts/WixMadeforDisplay-Bold.ttf", contentType: "font/ttf", offset: 1544193, length: 90924, sha256: "ec4c7d63772d980d6e147b2df6215fd2737e4b04cebe0cf7e11dc695fb63cdcf" },
-      { key: "fonts/WixMadeforDisplay-ExtraBold.ttf", contentType: "font/ttf", offset: 1635117, length: 90984, sha256: "bf4c16a2774edd38a921edf3099469866cd74c094fd596f3fa4e81f54a04dfaa" },
-      { key: "fonts/WixMadeforDisplay-Medium.ttf", contentType: "font/ttf", offset: 1726101, length: 90980, sha256: "368faca44fb9f7207e4af784e94750b1ee59c1098b8689e0f4a918926f244fb5" },
-      { key: "fonts/WixMadeforDisplay-Regular.ttf", contentType: "font/ttf", offset: 1817081, length: 90872, sha256: "97ed8f1a6772abe26e3d8af5cecfc4b02faa94497d585b0398b5053b739a70c1" },
-      { key: "fonts/WixMadeforDisplay-SemiBold.ttf", contentType: "font/ttf", offset: 1907953, length: 90980, sha256: "642feab8a48ddf6c7a89d7c2a7c0edfa0e6e773f671287e460e222703563191e" },
-      { key: "fonts/WixMadeforText-Bold.ttf", contentType: "font/ttf", offset: 1998933, length: 108636, sha256: "37c179b4fefb63ea9637322b84583a2df53aa226c150294eea1675c14b1b8e29" },
-      { key: "fonts/WixMadeforText-ExtraBold.ttf", contentType: "font/ttf", offset: 2107569, length: 109084, sha256: "62e2fe4718129f36ecdb0ae4de385bd6b81ecc876146447167c6c140fad699a9" },
-      { key: "fonts/WixMadeforText-Medium.ttf", contentType: "font/ttf", offset: 2216653, length: 109048, sha256: "4ecf270136af928612c76fe4ebade91d8156975e5ea4c0cf9225501dd1788e02" },
-      { key: "fonts/WixMadeforText-Regular.ttf", contentType: "font/ttf", offset: 2325701, length: 107700, sha256: "dee56f09fd3efc127c1ea95557edc74110c1460a46287da36e0af25efd341ef5" },
-      { key: "fonts/WixMadeforText-SemiBold.ttf", contentType: "font/ttf", offset: 2433401, length: 88108, sha256: "dced97a77624bc5f8b1ae65850360908297f4588e09feb6f22792d29dc7e765b" },
-      { key: "index.html", contentType: "text/html; charset=utf-8", offset: 2521509, length: 4947, sha256: "1d5a5f1bb450a129547b3dade7581d17dcb6474051a1124b92b69d51def5446e" },
-      { key: "t5-frame.html", contentType: "text/html; charset=utf-8", offset: 2526456, length: 17209, sha256: "dffc9718e2faa63ae2cc919e0a842f585ed565aaaa7c53778e90379442c731b6" }
+      { key: "assets/index-3uQs-pBH.js", contentType: "application/javascript; charset=utf-8", offset: 8, length: 1050432, sha256: "928dfeb0c4f367f39a34c92f32a7194f483918a869912cf33ad05bc8d6f8a483" },
+      { key: "fonts/Roboto-LICENSE.txt", contentType: "application/octet-stream", offset: 1050440, length: 4610, sha256: "994062dd7af4186a739de55dd9e151c63b6301f8e2cbafc608d35c2e87da0cd2" },
+      { key: "fonts/Roboto-Variable.ttf", contentType: "font/ttf", offset: 1055050, length: 488584, sha256: "d7598e12c5dbef095ff8272cfc55da0250bd07fbdecbac8a530b9b277872a134" },
+      { key: "fonts/WixMadeforDisplay-Bold.ttf", contentType: "font/ttf", offset: 1543634, length: 90924, sha256: "ec4c7d63772d980d6e147b2df6215fd2737e4b04cebe0cf7e11dc695fb63cdcf" },
+      { key: "fonts/WixMadeforDisplay-ExtraBold.ttf", contentType: "font/ttf", offset: 1634558, length: 90984, sha256: "bf4c16a2774edd38a921edf3099469866cd74c094fd596f3fa4e81f54a04dfaa" },
+      { key: "fonts/WixMadeforDisplay-Medium.ttf", contentType: "font/ttf", offset: 1725542, length: 90980, sha256: "368faca44fb9f7207e4af784e94750b1ee59c1098b8689e0f4a918926f244fb5" },
+      { key: "fonts/WixMadeforDisplay-Regular.ttf", contentType: "font/ttf", offset: 1816522, length: 90872, sha256: "97ed8f1a6772abe26e3d8af5cecfc4b02faa94497d585b0398b5053b739a70c1" },
+      { key: "fonts/WixMadeforDisplay-SemiBold.ttf", contentType: "font/ttf", offset: 1907394, length: 90980, sha256: "642feab8a48ddf6c7a89d7c2a7c0edfa0e6e773f671287e460e222703563191e" },
+      { key: "fonts/WixMadeforText-Bold.ttf", contentType: "font/ttf", offset: 1998374, length: 108636, sha256: "37c179b4fefb63ea9637322b84583a2df53aa226c150294eea1675c14b1b8e29" },
+      { key: "fonts/WixMadeforText-ExtraBold.ttf", contentType: "font/ttf", offset: 2107010, length: 109084, sha256: "62e2fe4718129f36ecdb0ae4de385bd6b81ecc876146447167c6c140fad699a9" },
+      { key: "fonts/WixMadeforText-Medium.ttf", contentType: "font/ttf", offset: 2216094, length: 109048, sha256: "4ecf270136af928612c76fe4ebade91d8156975e5ea4c0cf9225501dd1788e02" },
+      { key: "fonts/WixMadeforText-Regular.ttf", contentType: "font/ttf", offset: 2325142, length: 107700, sha256: "dee56f09fd3efc127c1ea95557edc74110c1460a46287da36e0af25efd341ef5" },
+      { key: "fonts/WixMadeforText-SemiBold.ttf", contentType: "font/ttf", offset: 2432842, length: 88108, sha256: "dced97a77624bc5f8b1ae65850360908297f4588e09feb6f22792d29dc7e765b" },
+      { key: "index.html", contentType: "text/html; charset=utf-8", offset: 2520950, length: 4947, sha256: "d5b6c88c0e67711667b4df9d04e74e4a77af7131bd8082754447cbfd69a173a8" },
+      { key: "t5-frame.html", contentType: "text/html; charset=utf-8", offset: 2525897, length: 17209, sha256: "dffc9718e2faa63ae2cc919e0a842f585ed565aaaa7c53778e90379442c731b6" }
     ];
   }
 });
@@ -52041,14 +52051,17 @@ var init_visitor_auth = __esm({
 });
 
 // src/site-analyze/copy-clean.ts
+function isTemplatePlaceholder(text5) {
+  return PLACEHOLDER_RE.test(text5);
+}
 function cleanText(raw, cap) {
   const s = String(raw ?? "").replace(/[\u0000-\u001F\u007F]/g, " ").replace(/\s+/g, " ").trim();
   return s.length > cap ? `${s.slice(0, cap - 1).trimEnd()}\u2026` : s;
 }
 function stripPii(text5) {
   return text5.replace(EMAIL_RE2, "").replace(PHONE_SHAPE_RE, (m) => {
-    const digits = (m.match(ANY_DIGIT_RE) ?? []).length;
-    return digits >= PHONE_MIN_DIGITS && PHONE_DIGIT_RUN_RE.test(m) ? "" : m;
+    const digits2 = (m.match(ANY_DIGIT_RE) ?? []).length;
+    return digits2 >= PHONE_MIN_DIGITS && PHONE_DIGIT_RUN_RE.test(m) ? "" : m;
   }).replace(/\s+/g, " ").trim();
 }
 function isBoilerplate(text5) {
@@ -52084,7 +52097,7 @@ var init_copy_clean = __esm({
     PHONE_DIGIT_RUN_RE = new RegExp(`[${DIGIT}]{3}`);
     ANY_DIGIT_RE = new RegExp(`[${DIGIT}]`, "g");
     BOILERPLATE_RE = /powered by wix|this site was designed with|wix\.com|all rights reserved|©|\(c\)\s*\d{4}|privacy policy|terms (of use|and conditions)|accessibility statement|cookie (policy|settings|preferences)|accept all|manage preferences|do not sell/i;
-    PLACEHOLDER_RE = /i'?m a (paragraph|title|description)|click here to add|add your own text|double click to edit|this is a great (place|space)|tell your visitors|lorem ipsum|service title|item title|your paragraph text/i;
+    PLACEHOLDER_RE = /i'?m a (paragraph|title|description)|click here to add|add your own text|double click to edit|this is a great (place|space)|tell your visitors|lorem ipsum|service title|item title|your paragraph text|tell clients about what you['’]?re offering|to add a description,? click|click manage services|booking settings\s*>\s*booking polic|in your dashboard,? go to|go to booking settings/i;
     ABOUT_HEADING_RE_SOURCE = "^(?:about\\b|who we are|who are we|our story|our mission|\u05DE\u05D9 \u05D0\u05E0\u05D7\u05E0\u05D5)";
   }
 });
@@ -52156,6 +52169,49 @@ function planDetail(p) {
   const bits = [cycle, perks.slice(0, 4).join("; ")].filter(Boolean);
   return bits.length ? bits.join(" \xB7 ") : void 0;
 }
+function moneyText(m) {
+  if (!m || typeof m !== "object") return void 0;
+  const o = m;
+  const formatted = str4(o.formattedValue ?? o.formatted);
+  if (formatted.trim()) return formatted.trim();
+  const raw = o.value ?? o.amount;
+  const value = typeof raw === "number" ? String(raw) : str4(raw);
+  if (!value.trim()) return void 0;
+  return [value.trim(), str4(o.currency).trim()].filter(Boolean).join(" ");
+}
+function servicePrice(s) {
+  const payment = s.payment && typeof s.payment === "object" ? s.payment : void 0;
+  if (!payment) return void 0;
+  const rate = str4(payment.rateType).toUpperCase();
+  const fixed = payment.fixed;
+  const varied = payment.varied;
+  const custom = payment.custom;
+  if (rate === "NO_FEE") return void 0;
+  if (rate === "VARIED" || !rate && varied) {
+    const min = moneyText(varied?.minPrice);
+    return moneyText(varied?.defaultPrice) ?? (min ? `from ${min}` : void 0);
+  }
+  if (rate === "CUSTOM" || !rate && custom) {
+    return copyOrDrop(custom?.description, 80) || void 0;
+  }
+  const legacy = typeof payment.price === "number" || typeof payment.price === "string" ? moneyText({ value: payment.price, currency: payment.currency ?? s.currency }) : moneyText(payment.price);
+  return moneyText(fixed?.price) ?? legacy;
+}
+function serviceDetail(s) {
+  const payment = s.payment && typeof s.payment === "object" ? s.payment : void 0;
+  if (!payment) return void 0;
+  if (str4(payment.rateType).toUpperCase() === "NO_FEE") return "free";
+  const options = payment.options && typeof payment.options === "object" ? payment.options : {};
+  const hasPlanIds = asArr(payment.pricingPlanIds).length > 0;
+  const modes = [
+    options.online === true && "online",
+    options.inPerson === true && "in person",
+    (options.pricingPlan === true || hasPlanIds) && "with a pricing plan"
+  ].filter((m) => !!m);
+  if (!modes.length) return void 0;
+  const how = modes.length === 1 ? `pay ${modes[0]} only` : `pay ${modes.slice(0, -1).join(", ")} or ${modes[modes.length - 1]}`;
+  return options.deposit === true ? `${how} (deposit)` : how;
+}
 function formLabels(x, depth = 0, out = []) {
   if (x == null || depth > 5) return out;
   if (Array.isArray(x)) {
@@ -52176,7 +52232,7 @@ function formDetail(f) {
   return names.length ? names.join(", ") : void 0;
 }
 function side(call, def) {
-  if (!call) return Promise.resolve({ status: "error", count: 0, note: "no-auth", items: [] });
+  if (!call) return Promise.resolve({ status: "skipped", count: 0, note: "no-auth", items: [] });
   const attempts = [
     { method: def.method, path: def.path, body: def.body, itemsOf: def.itemsOf },
     ...def.fallbacks ?? []
@@ -52206,14 +52262,20 @@ function side(call, def) {
   })();
 }
 function toItems(def, raw) {
-  return raw.slice(0, 12).map((it, i) => ({
-    id: str4((def.idOf ? def.idOf(it) : it.id) ?? `row-${i}`),
-    title: def.titleOf(it) || "(untitled)",
-    imageUrl: def.imageOf?.(it),
-    price: def.priceOf?.(it) || str4(it.price?.formatted) || str4(it.formattedPrice) || void 0,
-    detail: def.detailOf?.(it),
-    description: copyOrDrop(def.descriptionOf ? def.descriptionOf(it) : genericDescription(it), 240) || void 0
-  }));
+  return raw.slice(0, 12).map((it, i) => {
+    const rawDescription = def.descriptionOf ? def.descriptionOf(it) : genericDescription(it);
+    const description = copyOrDrop(rawDescription, 240) || void 0;
+    const template = rawDescription && !description && isTemplatePlaceholder(rawDescription) ? stripPii(cleanText(rawDescription, 90)) : void 0;
+    return {
+      id: str4((def.idOf ? def.idOf(it) : it.id) ?? `row-${i}`),
+      title: def.titleOf(it) || "(untitled)",
+      imageUrl: def.imageOf?.(it),
+      price: def.priceOf?.(it) || str4(it.price?.formatted) || str4(it.formattedPrice) || void 0,
+      detail: def.detailOf?.(it),
+      description,
+      ...template ? { templateText: template } : {}
+    };
+  });
 }
 async function runDualProbes(owner, visitor, definitions2 = ALL) {
   const rows = await Promise.all(definitions2.map(async (def) => {
@@ -52223,7 +52285,10 @@ async function runDualProbes(owner, visitor, definitions2 = ALL) {
       vertical: def.vertical,
       owner: { status: o.status, count: o.count, httpStatus: o.httpStatus, note: o.note },
       visitor: { status: vis.status, count: vis.count, httpStatus: vis.httpStatus, note: vis.note },
-      appInvisible: o.count > 0 && vis.count === 0 && vis.status !== "wrong-path",
+      // Only a visitor request that was actually MADE can show the app cannot see a row. With no
+      // client id (#3269) the visitor side is `skipped`, and every owner-visible vertical would
+      // otherwise read APP-INVISIBLE off a request nobody sent (codebot review on #3283).
+      appInvisible: o.count > 0 && vis.count === 0 && vis.status !== "wrong-path" && vis.status !== "skipped",
       imageless,
       items: toItems(def, o.items.length ? o.items : vis.items)
     };
@@ -52414,7 +52479,9 @@ var init_probes = __esm({
         body: { query: { paging: { limit: 50 } } },
         itemsOf: (d) => asArr(d.services),
         titleOf: (s) => str4(s.name),
-        imageOf: serviceImage
+        imageOf: serviceImage,
+        priceOf: servicePrice,
+        detailOf: serviceDetail
       },
       {
         vertical: "events",
@@ -53853,6 +53920,10 @@ function taglineFrom(identity, pages, published) {
   const hero = copyOrDrop(home?.heroCopy, CAP2.tagline);
   return hero ? { text: hero, source: "hero" } : null;
 }
+function tabLabel(label2) {
+  const trimmed = label2.replace(/\s+page$/i, "").trim();
+  return trimmed && trimmed !== label2.trim() && !/^(front|landing|title|web)$/i.test(trimmed) ? trimmed : label2;
+}
 function suggestKeys(args) {
   const { nav, sections, tagline, installedVerticals } = args;
   const out = {};
@@ -53866,7 +53937,7 @@ function suggestKeys(args) {
   const allowed2 = (rule) => !rule.vertical || installed.has(rule.vertical);
   for (const label2 of nav) {
     for (const rule of KEY_RULES) {
-      if (rule.tab && allowed2(rule) && rule.re.test(label2)) set(rule.tab, label2);
+      if (rule.tab && allowed2(rule) && rule.re.test(label2)) set(rule.tab, tabLabel(label2));
     }
   }
   for (const section2 of sections) {
@@ -54456,6 +54527,234 @@ var init_net_guard = __esm({
   }
 });
 
+// src/site-analyze/placeholders.ts
+function textFields(look) {
+  if (look.unavailable) return [];
+  const out = [];
+  const add = (text5, where, narrative = false) => {
+    if (text5 && text5.trim()) out.push({ text: text5, where, narrative });
+  };
+  for (const label2 of look.navLabels) add(label2, "nav");
+  for (const p of look.pages) {
+    for (const label2 of p.navLabels) add(label2, "nav");
+    add(p.title, `${p.url} (title)`);
+    add(p.heroCopy, p.url, true);
+    for (const h of p.headings) add(h, p.url);
+    for (const c of p.ctaLabels ?? []) add(c, p.url);
+    for (const s of p.sections ?? []) {
+      add(s.heading, p.url);
+      add(s.body, p.url, true);
+    }
+    for (const f of p.faq ?? []) {
+      add(f.q, `${p.url} (faq)`, true);
+      add(f.a, `${p.url} (faq)`, true);
+    }
+    for (const t of p.testimonials ?? []) add(t, `${p.url} (testimonials)`, true);
+    add(p.about, `${p.url} (about)`, true);
+    add(p.meta?.ogTitle, `${p.url} (og:title)`);
+    add(p.meta?.description, `${p.url} (meta)`, true);
+    for (const t of p.templateText ?? []) add(t, p.url);
+  }
+  return out;
+}
+function pushWhere(map, key2, value, where) {
+  const row = map.get(key2) ?? { value, where: [] };
+  if (!row.where.includes(where) && row.where.length < CAP3.where) row.where.push(where);
+  map.set(key2, row);
+}
+function templateContacts(identity, fields) {
+  const hits = /* @__PURE__ */ new Map();
+  const phone = identity.contact.phone ?? "";
+  if (phone && TEMPLATE_PHONES.has(digits(phone))) pushWhere(hits, `p:${digits(phone)}`, phone.trim(), "identity.contact.phone");
+  const email = identity.contact.email ?? "";
+  if (email && TEMPLATE_EMAIL_RE.test(email)) pushWhere(hits, `e:${email.toLowerCase()}`, email.trim(), "identity.contact.email");
+  const address = identity.contact.address ?? "";
+  if (address && TEMPLATE_ADDRESS_RE.test(address)) pushWhere(hits, "a:terry", "500 Terry Francine Street", "identity.contact.address");
+  for (const f of fields) {
+    for (const m of f.text.matchAll(PHONE_IN_TEXT_RE)) {
+      const d = digits(m[0]);
+      if (TEMPLATE_PHONES.has(d)) pushWhere(hits, `p:${d}`, m[0].trim(), f.where);
+    }
+    const e = f.text.match(TEMPLATE_EMAIL_RE)?.[0];
+    if (e) pushWhere(hits, `e:${e.toLowerCase()}`, e, f.where);
+    if (TEMPLATE_ADDRESS_RE.test(f.text)) pushWhere(hits, "a:terry", "500 Terry Francine Street", f.where);
+  }
+  return [...hits.values()].slice(0, CAP3.perKind).map((h) => ({
+    kind: "template-contact",
+    value: h.value,
+    where: h.where,
+    note: "a Wix template's sample contact detail, not the business's \u2014 get the real one before any screen shows it"
+  }));
+}
+function editorText(fields, probes) {
+  const hits = /* @__PURE__ */ new Map();
+  const all = [
+    ...fields,
+    ...probes.flatMap((p) => p.items.flatMap((it) => [
+      { text: it.title, where: `catalog:${p.vertical}` },
+      { text: it.description ?? "", where: `catalog:${p.vertical}` },
+      // Already dropped from `description` by `copyOrDrop`; `toItems` kept the fact.
+      { text: it.templateText ?? "", where: `catalog:${p.vertical}` }
+    ]))
+  ];
+  for (const f of all) {
+    if (!f.text || !isTemplatePlaceholder(f.text)) continue;
+    const value = snippet(stripPii(f.text));
+    pushWhere(hits, value.toLowerCase(), value, f.where);
+  }
+  return [...hits.values()].slice(0, CAP3.perKind).map((h) => ({
+    kind: "editor-text",
+    value: h.value,
+    where: h.where,
+    note: "unedited Wix template/editor text the published site still shows \u2014 dropped from book.copy; do not ship it, and tell the owner the site shows it"
+  }));
+}
+function stripLead(name) {
+  const [left = "", ...rest] = name.split(/\s+&\s+/);
+  const words = left.split(/\s+/);
+  let cut = 0;
+  words.forEach((w, i) => {
+    if (LEAD_STOPWORDS.has(w.toLowerCase())) cut = i + 1;
+  });
+  const kept = words.slice(cut).join(" ");
+  return kept ? [kept, ...rest].join(" & ") : "";
+}
+function nameMismatches(identity, look, fields) {
+  const name = (identity.businessName || identity.siteDisplayName || "").trim();
+  const n = norm2(name);
+  if (n.length < 3) return [];
+  const pageNames = /* @__PURE__ */ new Set([
+    ...(look.sitePages ?? []).map((p) => norm2(p.title)),
+    ...look.navLabels.map(norm2)
+  ]);
+  const differs = (candidate) => {
+    const c = norm2(candidate);
+    return c.length >= 3 && c !== n && !c.includes(n) && !n.includes(c) && !pageNames.has(c);
+  };
+  const hits = /* @__PURE__ */ new Map();
+  for (const f of fields) {
+    if (/\((?:og:)?title\)$/.test(f.where)) {
+      const parts = f.text.split(TITLE_SPLIT_RE).map((s) => s.trim()).filter(Boolean);
+      const site = parts.length >= 2 ? parts[parts.length - 1] : "";
+      if (site && differs(site)) pushWhere(hits, norm2(site), site, f.where);
+    }
+    for (const m of f.text.matchAll(COPYRIGHT_BY_RE)) {
+      const who = m[1].trim();
+      if (differs(who)) pushWhere(hits, norm2(who), who, f.where);
+    }
+    if (!f.narrative) continue;
+    for (const m of f.text.matchAll(AMP_NAME_RE)) {
+      const who = stripLead(m[1].trim());
+      if (who.includes("&") && differs(who)) pushWhere(hits, norm2(who), who, f.where);
+    }
+  }
+  return [...hits.values()].slice(0, CAP3.perKind).map((h) => ({
+    kind: "name-mismatch",
+    value: h.value,
+    where: h.where,
+    note: `the business is "${name}" but the site also calls itself "${h.value}" \u2014 likely the template's name left in the copy; confirm with the owner which is theirs before reusing any sentence that says it`
+  }));
+}
+function mediaKey(url) {
+  return wixMediaFileId(url) ?? url.split(/[?#]/)[0];
+}
+function duplicateMedia(look, probes) {
+  const out = [];
+  const scan = (urls, where) => {
+    const counts = /* @__PURE__ */ new Map();
+    for (const u of urls) {
+      if (!u) continue;
+      const k = mediaKey(u);
+      counts.set(k, (counts.get(k) ?? 0) + 1);
+    }
+    for (const [k, count] of counts) {
+      if (count < DUPLICATE_MEDIA_MIN || out.length >= CAP3.perKind) continue;
+      out.push({
+        kind: "duplicate-media",
+        value: k.slice(0, 80),
+        where: [where],
+        note: `the same image is used ${count} times here \u2014 template filler, not ${count} distinct photos; do not present it as the business's gallery`
+      });
+    }
+  };
+  if (!look.unavailable) for (const p of look.pages) scan(p.imageUrls, p.url);
+  for (const p of probes) scan(p.items.map((it) => it.imageUrl ?? ""), `catalog:${p.vertical}`);
+  return out;
+}
+function detectPlaceholders(args) {
+  const fields = textFields(args.look);
+  return [
+    ...templateContacts(args.identity, fields),
+    ...editorText(fields, args.probes),
+    ...nameMismatches(args.identity, args.look, fields),
+    ...duplicateMedia(args.look, args.probes)
+  ];
+}
+function placeholderWarnings(findings) {
+  const byKind = /* @__PURE__ */ new Map();
+  for (const f of findings) byKind.set(f.kind, [...byKind.get(f.kind) ?? [], f]);
+  const quote = (rows) => rows.slice(0, 3).map((r) => `"${r.value}"`).join(", ");
+  const out = [];
+  const contact = byKind.get("template-contact");
+  if (contact) out.push(`template placeholder contact details on the site: ${quote(contact)} \u2014 the Wix template's samples, not the business's; get the real ones before any screen shows them (book.placeholders)`);
+  const editor = byKind.get("editor-text");
+  if (editor) out.push(`${editor.length} unedited Wix editor/template string(s) on the published site, e.g. ${quote(editor.slice(0, 1))} \u2014 dropped from book.copy, never ship them (book.placeholders)`);
+  const names = byKind.get("name-mismatch");
+  if (names) out.push(`the site names the business inconsistently \u2014 it also says ${quote(names)}; likely the template's name left in the copy, so confirm with the owner (book.placeholders)`);
+  const media = byKind.get("duplicate-media");
+  if (media) out.push(`${media.length} place(s) repeat one image ${DUPLICATE_MEDIA_MIN}+ times (${media.slice(0, 3).map((m) => m.where[0]).join(", ")}) \u2014 template filler, not real photos (book.placeholders)`);
+  return out;
+}
+var TEMPLATE_PHONES, TEMPLATE_EMAIL_RE, TEMPLATE_ADDRESS_RE, PHONE_IN_TEXT_RE, DUPLICATE_MEDIA_MIN, CAP3, digits, norm2, snippet, LEAD_STOPWORDS, AMP_NAME_RE, COPYRIGHT_BY_RE, TITLE_SPLIT_RE;
+var init_placeholders = __esm({
+  "src/site-analyze/placeholders.ts"() {
+    init_copy_clean();
+    init_rest();
+    TEMPLATE_PHONES = /* @__PURE__ */ new Set(["1234567890", "11234567890", "5555555555", "15555555555", "0000000000"]);
+    TEMPLATE_EMAIL_RE = /[\w.+-]+@(?:my-?site|my-?domain|mydomain|your-?domain|your-?site|example|domain)\.(?:com|org|net|co)\b/i;
+    TEMPLATE_ADDRESS_RE = /\b500 Terry Franc(?:ine|ois)\b/i;
+    PHONE_IN_TEXT_RE = /\+?\d[\d\s().-]{6,}\d/g;
+    DUPLICATE_MEDIA_MIN = 3;
+    CAP3 = { perKind: 6, where: 6, snippet: 90 };
+    digits = (s) => s.replace(/\D/g, "");
+    norm2 = (s) => s.toLowerCase().normalize("NFKD").replace(/[^\p{L}\p{N}]+/gu, "");
+    snippet = (s) => {
+      const t = s.replace(/\s+/g, " ").trim();
+      return t.length > CAP3.snippet ? `${t.slice(0, CAP3.snippet - 1).trimEnd()}\u2026` : t;
+    };
+    LEAD_STOPWORDS = /* @__PURE__ */ new Set([
+      "at",
+      "by",
+      "with",
+      "from",
+      "choose",
+      "call",
+      "contact",
+      "welcome",
+      "about",
+      "to",
+      "for",
+      "in",
+      "on",
+      "our",
+      "why",
+      "is",
+      "are",
+      "do",
+      "does",
+      "the",
+      "and",
+      "meet",
+      "join",
+      "trust",
+      "hire"
+    ]);
+    AMP_NAME_RE = new RegExp("(\\p{Lu}[\\p{L}'\u2019]*(?:\\s+\\p{Lu}[\\p{L}'\u2019]*){0,2}\\s+&\\s+\\p{Lu}[\\p{L}'\u2019]*(?:\\s+\\p{Lu}[\\p{L}'\u2019]*){0,1})", "gu");
+    COPYRIGHT_BY_RE = /©\s*\d{4}\s+by\s+([^.|\n©]{2,40})/giu;
+    TITLE_SPLIT_RE = /\s+[|–—]\s+|\s+-\s+/;
+  }
+});
+
 // src/site-analyze/analyze.ts
 function siteFetchFor(ports) {
   return ports.siteFetch ?? guardedSiteFetch;
@@ -54466,14 +54765,15 @@ function localeFromSiteLanguage(languageCode) {
   return void 0;
 }
 async function analyzeSite(input, ports) {
-  const clientId = input.clientId.trim();
+  const clientId = input.clientId?.trim() || void 0;
   const siteUrl = input.siteUrl.trim();
-  if (!clientId) throw new Error("clientId is required");
   if (!siteUrl) throw new Error("siteUrl is required");
   assertPublicSiteUrl(siteUrl);
   const redirectUri = input.redirectUri?.trim() ? assertRedirectUri(input.redirectUri) : void 0;
-  const visitorToken = await mintVisitorToken(ports.fetch, clientId);
-  const visitor = visitorTransportFrom(ports.fetch, visitorToken, input.msid ?? ports.ownerAuth?.msid);
+  if (redirectUri && !clientId) {
+    throw Object.assign(new Error(REDIRECT_NEEDS_CLIENT), { exit: 2 });
+  }
+  const visitor = clientId ? visitorTransportFrom(ports.fetch, await mintVisitorToken(ports.fetch, clientId), input.msid ?? ports.ownerAuth?.msid) : void 0;
   const owner = ports.ownerAuth ? ownerTransportFrom(ports.fetch, ports.ownerAuth) : void 0;
   const lookP = (ports.browser ? ports.browser.crawl({ siteUrl, budget: 12 }) : Promise.resolve({
     unavailable: ports.lookUnavailableReason ?? "no_browser_on_plane",
@@ -54611,12 +54911,14 @@ async function analyzeSite(input, ports) {
   });
   plan.provisioning.appearance = { homeLayout: traits.homeLayout.id };
   plan.provisioning.navigation = { navKind: traits.navKind.id };
-  plan.provisioning.wix = {
-    clientId,
-    siteUrl,
-    // Already validated and trimmed at the top of this function, with the other input guards.
-    ...redirectUri ? { redirectUri } : {}
-  };
+  if (clientId) {
+    plan.provisioning.wix = {
+      clientId,
+      siteUrl,
+      // Already validated and trimmed at the top of this function, with the other input guards.
+      ...redirectUri ? { redirectUri } : {}
+    };
+  }
   const locale = localeFromSiteLanguage(identity.locale.languageCode || identity.language?.site || "");
   if (locale) plan.provisioning.locale = locale;
   const velo = buildVeloChapter({ look, owner: ownerVelo });
@@ -54636,7 +54938,7 @@ async function analyzeSite(input, ports) {
   const book = {
     schemaVersion: BOOK_SCHEMA_VERSION,
     generatedAt: (/* @__PURE__ */ new Date()).toISOString(),
-    input: { clientId, siteUrl, msid: input.msid, hasOwner: !!owner },
+    input: { ...clientId ? { clientId } : {}, siteUrl, msid: input.msid, hasOwner: !!owner },
     identity,
     probes,
     media: mergeMedia(media, look, identity.logoUrl),
@@ -54651,7 +54953,10 @@ async function analyzeSite(input, ports) {
     velo,
     taxonomy,
     traits,
-    permissions
+    permissions,
+    // Template leftovers, recorded in the BOOK (the durable artifact the next agent reads) and
+    // repeated as warnings below for whoever is watching this run (#3276).
+    placeholders: detectPlaceholders({ identity, look, probes })
   };
   if (Object.keys(book.copy.suggestedCopyKeys).length) {
     plan.provisioning.copy = { ...book.copy.suggestedCopyKeys };
@@ -54678,6 +54983,12 @@ async function analyzeSite(input, ports) {
       `${cmsRead.truncated} further CMS collection(s) were not read \u2014 the listing stops at ${CMS_LIST_LIMIT}, so the applied app ships only the ones above.`
     );
   }
+  warnings.push(...placeholderWarnings(book.placeholders));
+  if (!clientId) {
+    warnings.push(
+      owner ? "no --client-id: the VISITOR side of every vertical probe was skipped, so the book cannot say what a shipped app will see, and there is no `wix` binding to --apply. Re-run with --client-id (`himi site client list --site <msid>`) for both." : "no --client-id: this was the URL-only pass (published pages, look, copy). The vertical probes were skipped, so the catalog has no counts, and there is no `wix` binding to --apply. Re-run with --client-id (`himi site client list --site <msid>`) for both."
+    );
+  }
   return {
     book,
     provisioningOverlay: plan.provisioning,
@@ -54795,6 +55106,7 @@ var init_analyze = __esm({
     init_permissions();
     init_published_html();
     init_net_guard();
+    init_placeholders();
     SCREENSHOT_NAME = /^(home|shop|book|menu|blog|about|contact|events|gallery|plans|faq|library|members|other)-\d+\.png$/i;
   }
 });
@@ -54866,7 +55178,7 @@ function renderBookMarkdown(book) {
   lines.push(`# Business book`);
   lines.push("");
   lines.push(`schema ${book.schemaVersion} \xB7 generated ${book.generatedAt}`);
-  lines.push(`site: ${yn(book.input.siteUrl)} \xB7 msid: ${yn(book.input.msid)} \xB7 owner: ${book.input.hasOwner}`);
+  lines.push(`site: ${yn(book.input.siteUrl)} \xB7 msid: ${yn(book.input.msid)} \xB7 owner: ${book.input.hasOwner}` + (book.input.clientId ? "" : book.input.hasOwner ? " \xB7 client: none \u2014 visitor-side probes skipped (owner side ran)" : " \xB7 client: none \u2014 URL-only pass, vertical probes skipped"));
   lines.push("");
   lines.push(`## Identity`);
   lines.push(`- name: ${yn(id.businessName)} (${yn(id.siteDisplayName)})`);
@@ -54875,13 +55187,29 @@ function renderBookMarkdown(book) {
   lines.push(`- language: site=${yn(id.language.site)} \xB7 business=${yn(id.language.business)}${id.language.site && id.language.business && id.language.site !== id.language.business ? " (mismatch)" : ""}`);
   lines.push(`- locale: ${yn(id.locale.languageCode)}/${yn(id.locale.country)} ${yn(id.locale.currency)} ${yn(id.locale.timeZone)}`);
   lines.push(`- logo: ${yn(id.logoUrl)}`);
-  lines.push(`- contact (PII, do not log): address=${id.contact.address ? "yes" : "no"} email=${id.contact.email ? "yes" : "no"} phone=${id.contact.phone ? "yes" : "no"}`);
+  const templated = new Set(
+    (book.placeholders ?? []).filter((f) => f.kind === "template-contact").flatMap((f) => f.where).filter((w) => w.startsWith("identity.contact."))
+  );
+  const contactFlag = (field) => !id.contact[field] ? "no" : templated.has(`identity.contact.${field}`) ? "TEMPLATE PLACEHOLDER (not the business's)" : "yes";
+  lines.push(`- contact (PII, do not log): address=${contactFlag("address")} email=${contactFlag("email")} phone=${contactFlag("phone")}`);
   lines.push(`- source: ${id.source}`);
   if (id.source === "crawl") {
     lines.push(`- NAME IS A GUESS: no owner token, so the name above was read off the crawled page`);
     lines.push(`  \`<title>\` rather than the owner-entered business name. Verify it before it ships.`);
   }
   lines.push("");
+  lines.push(`## Placeholders`);
+  const placeholders = book.placeholders ?? [];
+  if (!placeholders.length) {
+    lines.push(!book.placeholders ? `- not checked (book written before this chapter existed)` : look.unavailable ? `- page text NOT checked \u2014 the crawl did not run (${look.unavailable}); only identity and catalog fields were scanned, and they showed none` : `- none detected (template contact values, editor text, a second business name, repeated images)`);
+  } else {
+    lines.push(`The site still carries TEMPLATE content. None of it is the business's \u2014 keep it out of the`);
+    lines.push(`app, and tell the owner their site shows it. Sample content is never the deliverable.`);
+    for (const f of placeholders) {
+      lines.push(`- ${f.kind}: "${f.value}" \u2014 ${f.note} (${f.where.join(", ")})`);
+    }
+  }
+  lines.push("");
   lines.push(`## Copy`);
   lines.push(`The customer's OWN words. Reuse these before inventing any \u2014 screen titles, tab`);
   lines.push(`labels, section headings, CTA text, empty states. Write in \`${yn(copy.language)}\`.`);
@@ -58711,31 +59039,47 @@ function ctasOf(texts) {
   return out.slice(0, 8);
 }
 function copyFromEval(evaled) {
+  const templateText = dedupe2(
+    [
+      ...(evaled.sections ?? []).flatMap((s) => [s?.heading, s?.body]),
+      ...(evaled.faq ?? []).flatMap((f) => [f?.q, f?.a]),
+      ...evaled.ctaLabels ?? [],
+      ...evaled.testimonials ?? [],
+      evaled.about,
+      evaled.meta?.description,
+      evaled.meta?.ogTitle,
+      evaled.meta?.ogDescription
+    ].map((raw) => {
+      const text5 = cleanText(raw, 400);
+      return text5 && isTemplatePlaceholder(text5) ? stripPii(cleanText(text5, 90)) : "";
+    }),
+    8
+  );
   const sections = [];
   for (const raw of evaled.sections ?? []) {
-    const heading = copyOrDrop(raw?.heading, CAP3.heading);
+    const heading = copyOrDrop(raw?.heading, CAP4.heading);
     if (!heading) continue;
-    const body = copyOrDrop(raw?.body, CAP3.body);
+    const body = copyOrDrop(raw?.body, CAP4.body);
     sections.push(body ? { heading, body } : { heading });
-    if (sections.length >= CAP3.sections) break;
+    if (sections.length >= CAP4.sections) break;
   }
   const faq = [];
   for (const raw of evaled.faq ?? []) {
-    const q = copyOrDrop(raw?.q, CAP3.q);
-    const a = copyOrDrop(raw?.a, CAP3.a);
+    const q = copyOrDrop(raw?.q, CAP4.q);
+    const a = copyOrDrop(raw?.a, CAP4.a);
     if (q && a && q !== a) faq.push({ q, a });
-    if (faq.length >= CAP3.faq) break;
+    if (faq.length >= CAP4.faq) break;
   }
-  const ctaLabels = dedupe2((evaled.ctaLabels ?? []).map((c) => copyOrDrop(c, CAP3.cta)), CAP3.ctas);
+  const ctaLabels = dedupe2((evaled.ctaLabels ?? []).map((c) => copyOrDrop(c, CAP4.cta)), CAP4.ctas);
   const testimonials = dedupe2(
-    (evaled.testimonials ?? []).map((t) => copyOrDrop(t, CAP3.testimonial)),
-    CAP3.testimonials
+    (evaled.testimonials ?? []).map((t) => copyOrDrop(t, CAP4.testimonial)),
+    CAP4.testimonials
   );
-  const about = copyOrDrop(evaled.about, CAP3.about);
+  const about = copyOrDrop(evaled.about, CAP4.about);
   const meta = {};
-  const description = copyOrDrop(evaled.meta?.description, CAP3.meta);
-  const ogTitle = copyOrDrop(evaled.meta?.ogTitle, CAP3.meta);
-  const ogDescription = copyOrDrop(evaled.meta?.ogDescription, CAP3.meta);
+  const description = copyOrDrop(evaled.meta?.description, CAP4.meta);
+  const ogTitle = copyOrDrop(evaled.meta?.ogTitle, CAP4.meta);
+  const ogDescription = copyOrDrop(evaled.meta?.ogDescription, CAP4.meta);
   if (description) meta.description = description;
   if (ogTitle) meta.ogTitle = ogTitle;
   if (ogDescription) meta.ogDescription = ogDescription;
@@ -58745,7 +59089,8 @@ function copyFromEval(evaled) {
     ...faq.length ? { faq } : {},
     ...testimonials.length ? { testimonials } : {},
     ...about ? { about } : {},
-    ...Object.keys(meta).length ? { meta } : {}
+    ...Object.keys(meta).length ? { meta } : {},
+    ...templateText.length ? { templateText } : {}
   };
 }
 function forwardedRequestHeaders(all) {
@@ -59009,7 +59354,7 @@ async function createPlaywrightBrowser(load = () => import("playwright"), siteFe
   };
   return { port, screenshots, siteFetch, pin };
 }
-var PLAYWRIGHT_HINT, PAGE_EVAL, CAP3, DOCUMENT_FETCH_TIMEOUT_MS, MAX_DOCUMENT_BYTES, SUBRESOURCE_PIN_TIMEOUT_MS, NON_NETWORK_SCHEMES, FORWARDED_REQUEST_HEADERS;
+var PLAYWRIGHT_HINT, PAGE_EVAL, CAP4, DOCUMENT_FETCH_TIMEOUT_MS, MAX_DOCUMENT_BYTES, SUBRESOURCE_PIN_TIMEOUT_MS, NON_NETWORK_SCHEMES, FORWARDED_REQUEST_HEADERS;
 var init_crawl_look = __esm({
   "src/site-analyze/crawl-look.ts"() {
     init_dist();
@@ -59204,7 +59549,7 @@ var init_crawl_look = __esm({
   } catch (e4) {}
   return { wst, nav, headings, hero, imgs, hrefs, buttons, html, htmlLang, velo, sections, ctaLabels, faq, testimonials, about, meta };
 })()`;
-    CAP3 = {
+    CAP4 = {
       heading: 120,
       body: 300,
       cta: 80,
@@ -59602,7 +59947,7 @@ async function veloCall(fetchImpl, method, url, opts = {}) {
   }
   return { status: res.status, json: json5, text: text5 };
 }
-function snippet(x, cap = 180) {
+function snippet2(x, cap = 180) {
   const s = typeof x === "string" ? x : JSON.stringify(x) ?? "";
   return s.replace(/\s+/g, " ").slice(0, cap);
 }
@@ -59625,7 +59970,7 @@ async function resolveGridAppId(fetchImpl, token, msid, siteUrl) {
     return { gridAppId: app.id, source: "lifecycle-provision", mutable: app.mutable !== false };
   }
   if (publishedId) return { gridAppId: publishedId, source: "published-html", mutable: false };
-  return { source: `provision ${provisioned.status}: ${snippet(provisioned.json ?? provisioned.text)}` };
+  return { source: `provision ${provisioned.status}: ${snippet2(provisioned.json ?? provisioned.text)}` };
 }
 function sameVeloPath(listed, wanted) {
   const n = (p) => p.replace(/^\.?\//, "");
@@ -59722,7 +60067,7 @@ async function runSiteFunction(opts) {
       revision: snap.revision,
       codeAppId: snap.codeAppId,
       publish: { revision: httpOk(snap.rev), rc: httpOk(snap.rc), live: httpOk(snap.live), status: snap.live?.status },
-      error: ok ? void 0 : snippet(snap.live?.json ?? snap.rev.json)
+      error: ok ? void 0 : snippet2(snap.live?.json ?? snap.rev.json)
     };
   }
   const { id, listed } = await withGrid(fetchImpl, opts.token, opts.msid, opts.siteUrl);
@@ -59767,7 +60112,7 @@ async function runSiteFunction(opts) {
     next
   );
   if (!httpOk(patched)) {
-    return { ...base, error: `UpdateFiles ${patched.status}: ${snippet(patched.json ?? patched.text)}` };
+    return { ...base, error: `UpdateFiles ${patched.status}: ${snippet2(patched.json ?? patched.text)}` };
   }
   let report2 = {
     ...base,
@@ -59784,7 +60129,7 @@ async function runSiteFunction(opts) {
       revision: snap.revision,
       codeAppId: snap.codeAppId,
       publish: { revision: httpOk(snap.rev), rc: httpOk(snap.rc), live: httpOk(snap.live), status: snap.live?.status },
-      error: pubOk ? report2.error : snippet(snap.live?.json ?? snap.rev.json)
+      error: pubOk ? report2.error : snippet2(snap.live?.json ?? snap.rev.json)
     };
   }
   if (opts.invoke) {
@@ -59821,8 +60166,8 @@ async function invokeAndReport(fetchImpl, opts, base, name, method) {
   return {
     ...base,
     ok,
-    invoke: { url: hit.url, status: hit.r.status, body: hit.r.json ?? snippet(hit.r.text) },
-    error: ok ? void 0 : `invoke ${hit.r.status}: ${snippet(hit.r.json ?? hit.r.text)}`
+    invoke: { url: hit.url, status: hit.r.status, body: hit.r.json ?? snippet2(hit.r.text) },
+    error: ok ? void 0 : `invoke ${hit.r.status}: ${snippet2(hit.r.json ?? hit.r.text)}`
   };
 }
 var HTTP_METHODS2, WRITE_LAYOUTS, VELO_PROVISION_URL, SITE_PUBLISH_URL, PUBLISH_RC_URL, SITE_FUNCTION_USAGE, NAME_RE, EXPORT_HEAD, WIX_HTTP_IMPORT_LINE;
@@ -59847,9 +60192,12 @@ var init_site_function = __esm({
 // src/site-analyze/cli.ts
 var cli_exports = {};
 __export(cli_exports, {
+  APPLY_NEEDS_CLIENT: () => APPLY_NEEDS_CLIENT,
+  REDIRECT_NEEDS_CLIENT: () => REDIRECT_NEEDS_CLIENT,
   SITE_FUNCTION_USAGE: () => SITE_FUNCTION_USAGE,
   assetFetchFor: () => assetFetchFor,
   noteWithWarnings: () => noteWithWarnings,
+  ownerSiteFor: () => ownerSiteFor,
   runSiteAnalyze: () => runSiteAnalyze,
   runSiteFunctionCli: () => runSiteFunctionCli
 });
@@ -59858,7 +60206,17 @@ import { resolve as resolve46 } from "node:path";
 function assetFetchFor(_opts) {
   return pinnedFetch2;
 }
+function ownerSiteFor(opts, env = process.env) {
+  const flag = opts.siteFlag?.trim();
+  if (flag) return flag;
+  if (!opts.clientId?.trim() || opts.explicitClient !== true) return void 0;
+  return env.WIX_SITE_ID?.trim() || void 0;
+}
 async function runSiteAnalyze(opts) {
+  if (!opts.clientId?.trim()) {
+    if (opts.apply) throw Object.assign(new Error(APPLY_NEEDS_CLIENT), { exit: 2 });
+    if (opts.redirectUri?.trim()) throw Object.assign(new Error(REDIRECT_NEEDS_CLIENT), { exit: 2 });
+  }
   const fetchImpl = opts.fetchImpl ?? fetch;
   const assetFetch = assetFetchFor(opts);
   const siteFetch = guardedSiteFetch;
@@ -59866,9 +60224,11 @@ async function runSiteAnalyze(opts) {
   const outDir = resolve46(cwd, opts.outDir ?? ".himi/business-book");
   let ownerAuth;
   let msid;
+  const ownerSite = ownerSiteFor(opts);
   try {
-    msid = resolveSiteId(opts.siteFlag);
-    const token = await siteToken(msid);
+    if (!ownerSite) throw new Error("no owner site for this run");
+    const token = await siteToken(ownerSite);
+    msid = ownerSite;
     ownerAuth = { token, msid };
   } catch {
     msid = opts.siteFlag?.trim() || void 0;
@@ -59967,7 +60327,7 @@ async function runSiteFunctionCli(opts) {
     fetchImpl: opts.fetchImpl
   });
 }
-var FUNCTION_OPS;
+var APPLY_NEEDS_CLIENT, FUNCTION_OPS;
 var init_cli = __esm({
   "src/site-analyze/cli.ts"() {
     init_analyze();
@@ -59978,6 +60338,8 @@ var init_cli = __esm({
     init_rest();
     init_wix_owner();
     init_site_function();
+    init_types2();
+    APPLY_NEEDS_CLIENT = "--apply needs --client-id: the applied app must be bound to the site's own Headless client, and a URL-only run has none. `himi site client list --site <msid>` shows the site's clients (`himi site client ensure --site <msid> --yes` mints one); WIX_CLIENT_ID is read as a fallback.";
     FUNCTION_OPS = ["list", "get", "put", "publish", "invoke"];
   }
 });
@@ -64831,11 +65193,14 @@ var USAGE = `himi \u2014 the Himalaya authoring CLI (remote dev loop)
                                            refuses a WEB client \u2014 so a WEB one carrying your
                                            redirect looks right and is not a candidate.
   himi site analyze --read-only --site <msid> [--client-id <id>] [--json]
-  himi site analyze --client-id <id> --url <https://\u2026> [--site <msid>] [--out <dir>] [--apply]
+  himi site analyze --url <https://\u2026> [--client-id <id>] [--site <msid>] [--out <dir>] [--apply]
                     [--shell ${SHELL_ENUM}]
                                            collect a Wix business book (APIs + Playwright look) and
                                            optionally bake identity/verticals/palette/homeLayout into
-                                           a brandable shell's content package. --shell takes the same
+                                           a brandable shell's content package. --url alone is the
+                                           visitor-only pass (published pages, look, copy); --client-id
+                                           adds the vertical catalog counts and the app binding, and
+                                           --apply requires it. --shell takes the same
                                            names 'himi dist --shell' does; default branded-lite. Owner token: WIX_TEST_TOKEN
                                            or 'wix token --site'. Look/screenshots need Chromium:
                                            npx playwright install chromium.
@@ -64946,7 +65311,7 @@ var COMMANDS = [
   { name: "login", summary: "obtain a scoped serve-control token from Wix identity and store it in ~/.himalaya/serve-targets.json (so push/promote need no hand-pasted token). Three modes: --browser (your own Wix account, no VPN/BO), --wix (HEADLESS \u2014 the machine's own Wix CLI credential; the mode a CI pod or agent container can satisfy), --dpx (Wix employee, reads ~/.dpx/session/token). RFC 0026 WS3.", required: "[--browser|--wix|--dpx] [--target <t>] [--issue-url <url>]" },
   { name: "logout", summary: "remove the stored control token for a target", required: "[--target <t>]" },
   { name: "notify", summary: "`setup` optionally configures Branded/Ping from local customer key files; `status --refresh` reads live backend readiness. Setup may be deferred while building. These use serve-control and require owner plus Wix account authentication. `send`, `tokens`, `doctor`: send a REAL push notification to registered devices (RFC 0036 WS5) \u2014 APNs .p8 over HTTP/2 for iOS, FCM v1 for Android. `send` targets one device (--token / --device <registry id>) or fans out to the whole app (--all), reporting a per-device result; a token the provider says is uninstalled (APNs 410 Unregistered / FCM UNREGISTERED) is auto-disabled, while a merely wrong one (BadDeviceToken \u2014 usually a sandbox/production mismatch) is recorded and left enabled. `tokens` lists the registry. `doctor` reports which credentials resolve and which sender each platform picks. Talks to the admin-server via --admin-url/HIMALAYA_ADMIN_URL, authenticated with --admin-session/HIMALAYA_ADMIN_SESSION. NOT `himi push`, which publishes a release.", required: "setup|status [--content <dir>] [--target <t>] [--refresh] [--yes] [--no-push-setup] | send|tokens|doctor [--app <a>] [--token <t> | --device <id> | --all] [--title <s>] [--body <s>] [--link <url>] [--platform ios|android] [--badge <n>] [--channel <id>] [--silent] [--dry-run] [--json]" },
-  { name: "site", summary: "PROVISION a Wix project, then analyze or extend it. `create` is the one door that makes a site instead of adopting one: POST /funnel/projects/v1/create (a WIX site, a HEADLESS backend, a BRANDED_APP, or a VIBE site), and for headless it also mints the OAuth app whose id IS the `WIX_CLIENT_ID` \u2014 with --redirect-uri already registered, because an unregistered redirect makes native signInDirect fail at redirect-session. `--verticals` REQUIRES `--template` and reports only what Wix confirmed: measured, installing onto a project created from the BLANK template returns 200 while the vertical's API answers 428 forever, because there is no site for it to attach to (the install asks for CREATE_SITE). A real template ships its verticals installed and populated, and installing further ones onto it then works. It MUTATES your Wix account and needs --yes; without it you get the payload and nothing is sent. `list` is the read-only site inventory (with each site's premium flag, which is what explains an installed-but-428 vertical). Auth is the account-scoped `wix token` (no --site), falling back to WIX_API_KEY + WIX_ACCOUNT_ID. `client` is the same OAuth step for a site that ALREADY exists \u2014 the one himi adopts rather than makes \u2014 so a clientId no longer means a manual trip to the dashboard: `client ensure` reconciles rather than mints, because a site can already carry a client with NO registered redirect and shipping that one fails signInDirect at runtime; it reuses a client that carries --redirect-uri, PATCHes one that matches --name but lacks it (unioning, so another app's redirect survives), and creates only when there is nothing to reuse (--new forces a fresh one). --name IS the idempotency key. `client` auth is SITE-scoped (`wix token --site <msid>`) because minting is owner-of-that-site, and --yes gates every mutation: a site that already has a usable client resolves WITHOUT it, but --write-provisioning needs --yes even then because it rewrites a manifest on disk (the dry run's planned.provisioning names the file). That query endpoint IGNORES paging (measured: query.paging, cursorPaging and a top-level paging all return the full set at offset 0), so when pagingMetadata reports more clients than came back, `ensure` REFUSES EVERY outcome \u2014 create, patch AND reuse. Reuse is refused too because pickClient breaks ties on the OLDEST createdDate, so an omitted older same-named MOBILE client with the same redirect would win a later complete read and the resolved clientId would MOVE between runs \u2014 and it gets written into provisioning.json; convergence is what makes a stray duplicate untidy rather than harmful. --name cannot narrow the query (no filter is sent; the name is applied to the rows after they arrive), so the recovery is the dashboard; --new skips the query entirely. A `patched` result is verified against what Wix STORED \u2014 the redirect list is read off the PATCH response, and re-read via GET when the response omits it, because falling back to the list himi just sent would make the guard pass vacuously on exactly the silent no-op it exists to catch. `client list` is the read-only inventory of a site's clients: act on its `shippable` column rather than `hasRedirect`, because shippable ALSO requires a MOBILE applicationType and `ensure` refuses a WEB client \u2014 a WEB one carrying your redirect looks right and is not a candidate \u2014 and it sets truncated:true rather than presenting a partial inventory as the whole one. `analyze --read-only` returns API-only generation context as JSON (identity, access probes, CMS permissions and selected redacted Velo source); it needs no URL/browser and never uploads or applies anything. `analyze` reads a site into a business-book folder (REST + Playwright, GET-only); `site function` list/get/put/publish/invokes that site's Velo HTTP functions and is not `himi functions` (serve-plane jobs). `--apply` bakes into a brandable shell; `--shell` takes the same names `himi dist --shell` does and defaults to branded-lite, and a shell that ships no prepare:customer is refused by name rather than half-built. It never overwrites any shell's committed apps/<shell>/provisioning.json.", required: "create <name> [--type wix|headless|branded-app|vibe] [--template <guid>] [--verticals stores,bookings,\u2026] [--folder <guid>] [--redirect-uri <uri>] [--no-oauth-app] [--write-provisioning [path]] [--site-url <url>] [--json] --yes | list | client ensure|list --site <msid> [--name <name>] [--redirect-uri <uri>] [--new] [--write-provisioning [path]] [--site-url <url>] [--json] --yes | analyze --read-only [--site <msid>] [--client-id <id>] [--json] | analyze --client-id <id> --url <https> [--site <msid>] [--out <dir>] [--redirect-uri <uri>] [--apply] [--shell " + SHELL_ENUM + "] | function list|get|put|publish|invoke [--site <msid>] [--url <https>] [--method GET|POST|PUT|DELETE] [--source <file>] [--body <json>] [--publish] [--invoke]" },
+  { name: "site", summary: "PROVISION a Wix project, then analyze or extend it. `create` is the one door that makes a site instead of adopting one: POST /funnel/projects/v1/create (a WIX site, a HEADLESS backend, a BRANDED_APP, or a VIBE site), and for headless it also mints the OAuth app whose id IS the `WIX_CLIENT_ID` \u2014 with --redirect-uri already registered, because an unregistered redirect makes native signInDirect fail at redirect-session. `--verticals` REQUIRES `--template` and reports only what Wix confirmed: measured, installing onto a project created from the BLANK template returns 200 while the vertical's API answers 428 forever, because there is no site for it to attach to (the install asks for CREATE_SITE). A real template ships its verticals installed and populated, and installing further ones onto it then works. It MUTATES your Wix account and needs --yes; without it you get the payload and nothing is sent. `list` is the read-only site inventory (with each site's premium flag, which is what explains an installed-but-428 vertical). Auth is the account-scoped `wix token` (no --site), falling back to WIX_API_KEY + WIX_ACCOUNT_ID. `client` is the same OAuth step for a site that ALREADY exists \u2014 the one himi adopts rather than makes \u2014 so a clientId no longer means a manual trip to the dashboard: `client ensure` reconciles rather than mints, because a site can already carry a client with NO registered redirect and shipping that one fails signInDirect at runtime; it reuses a client that carries --redirect-uri, PATCHes one that matches --name but lacks it (unioning, so another app's redirect survives), and creates only when there is nothing to reuse (--new forces a fresh one). --name IS the idempotency key. `client` auth is SITE-scoped (`wix token --site <msid>`) because minting is owner-of-that-site, and --yes gates every mutation: a site that already has a usable client resolves WITHOUT it, but --write-provisioning needs --yes even then because it rewrites a manifest on disk (the dry run's planned.provisioning names the file). That query endpoint IGNORES paging (measured: query.paging, cursorPaging and a top-level paging all return the full set at offset 0), so when pagingMetadata reports more clients than came back, `ensure` REFUSES EVERY outcome \u2014 create, patch AND reuse. Reuse is refused too because pickClient breaks ties on the OLDEST createdDate, so an omitted older same-named MOBILE client with the same redirect would win a later complete read and the resolved clientId would MOVE between runs \u2014 and it gets written into provisioning.json; convergence is what makes a stray duplicate untidy rather than harmful. --name cannot narrow the query (no filter is sent; the name is applied to the rows after they arrive), so the recovery is the dashboard; --new skips the query entirely. A `patched` result is verified against what Wix STORED \u2014 the redirect list is read off the PATCH response, and re-read via GET when the response omits it, because falling back to the list himi just sent would make the guard pass vacuously on exactly the silent no-op it exists to catch. `client list` is the read-only inventory of a site's clients: act on its `shippable` column rather than `hasRedirect`, because shippable ALSO requires a MOBILE applicationType and `ensure` refuses a WEB client \u2014 a WEB one carrying your redirect looks right and is not a candidate \u2014 and it sets truncated:true rather than presenting a partial inventory as the whole one. `analyze --read-only` returns API-only generation context as JSON (identity, access probes, CMS permissions and selected redacted Velo source); it needs no URL/browser and never uploads or applies anything. `analyze` reads a site into a business-book folder (REST + Playwright, GET-only); `--url` alone is the visitor-only pass over the published pages, and `--client-id` adds the vertical probes and the app binding `--apply` requires; `site function` list/get/put/publish/invokes that site's Velo HTTP functions and is not `himi functions` (serve-plane jobs). `--apply` bakes into a brandable shell; `--shell` takes the same names `himi dist --shell` does and defaults to branded-lite, and a shell that ships no prepare:customer is refused by name rather than half-built. It never overwrites any shell's committed apps/<shell>/provisioning.json.", required: "create <name> [--type wix|headless|branded-app|vibe] [--template <guid>] [--verticals stores,bookings,\u2026] [--folder <guid>] [--redirect-uri <uri>] [--no-oauth-app] [--write-provisioning [path]] [--site-url <url>] [--json] --yes | list | client ensure|list --site <msid> [--name <name>] [--redirect-uri <uri>] [--new] [--write-provisioning [path]] [--site-url <url>] [--json] --yes | analyze --read-only [--site <msid>] [--client-id <id>] [--json] | analyze --url <https> [--client-id <id>] [--site <msid>] [--out <dir>] [--redirect-uri <uri>] [--apply] [--shell " + SHELL_ENUM + "] | function list|get|put|publish|invoke [--site <msid>] [--url <https>] [--method GET|POST|PUT|DELETE] [--source <file>] [--body <json>] [--publish] [--invoke]" },
   { name: "doctor", summary: 'off-VPN preflight in one shot: probe the PUBLIC data plane (www.wixapis.com \u2014 reachable off-VPN), the INTERNAL serve/control plane for the selected target (VPN-gated), and report auth state (dpx session on disk + stored control token). --dpx additionally runs a live, EADDRINUSE-safe `dpx whoami`. Machine-readable with --json (an unreachable internal plane carries a stable code:"needs_vpn" so an agent branches on the code, not the prose); human-readable otherwise. Never loads the authoring runtime \u2014 works off-repo.', required: "[--target <t>] [--dpx] [--json] [--data-url <url>] [--timeout <ms>]" },
   { name: "upgrade", summary: "install the newest published CLI (`npm i -g @wix/himalaya-cli@latest`) and report what moved. This is the explicit door: himi also updates itself when the running build is more than a week old \u2014 unattended it just does it and re-runs your command, at a terminal it asks first \u2014 and `HIMI_NO_UPDATE_CHECK=1` turns that off, leaving this command as the way to catch up. Reports `unchanged` rather than claiming success when npm exits 0 without moving the version, which is what a registry mirror serving its own pinned copy looks like.", required: "[--json]" },
   { name: "push", summary: "lint + build + publish a release (default --draft: servable via ?release= but NOT live). REFUSES to publish on any error unless --force; --strict promotes warnings. Prints preview + agent-context links. The published slug is NAMESPACED per owner \u2014 `<ownerPrefix>.<name>`, composed offline from the control token's ownerPrefix claim, so the CLI and the server derive the identical string and himalaya.content.json is NOT rewritten (a legacy token with no ownerPrefix publishes the declared name unchanged). An app claimed BEFORE namespacing is stored under its FLAT slug, so the claim route answers `alreadyYours` naming that slug and the push adopts it \u2014 reported as `adoptedSlug`, since it is the one case where the published `app` differs from what the declared name composes to. `--no-claim` skips the route that knows this, so a pre-namespacing app pushed with it still fails 403. --visibility public|unlisted decides whether /v1/apps + the Himi Player picker LIST the app (also declarable as `visibility` in himalaya.content.json; omitted, a brand-new app defaults to unlisted \u2014 share by link \u2014 and an existing setting is kept). --account-id names which account owns the app when your Wix session resolves to several (the auto-claim of a brand-new slug cannot guess \u2014 without it a multi-account caller is told to name one). An unforced push of a release that carries SCREENS also refuses when `.himi/ux-audit.json` holds no mobile-UX drive recorded against that release id, or holds one that FAILED (#2955) \u2014 a published draft IS the owner-private preview a customer is handed; `himi ux record` clears it and `--force` overrides it, which the success envelope then says out loud. `--only <selector>` publishes ONLY the named items as a release derived from the app's live release (or `--from-release <id>`), running the identical build + lint gate and simply publishing less; it requires an explicit `--draft` or `--live` because a partial publish has no safe default, never claims a slug, and carries neither attestation nor a source archive (both named in the output). Selectors are comma-separated in ONE `--only`: `changed` (every item whose bytes differ from the base), `screen:<id|glob>`, `bundle:<name>`, `tokens`, `app-config` \u2014 a selected screen drags its logic bundle and a selected bundle drags the screens that reference it, or the bytes land under a key nothing reads.", required: "[--content <dir>] [--draft] [--live] [--force] [--strict] [--label] [--notes] [--visibility public|unlisted] [--no-claim] [--account-id <id>] [--only <selector>] [--from-release <id>] [--accept-regressions] [--accept-partial] [--app <slug>] (--control-token)" },
@@ -71720,10 +72085,11 @@ ${report2.ok ? "OK \u2014 data + serve plane reachable." : typeof report2.hint =
           }
         }
         if (sub !== "analyze") {
-          io.error(JSON.stringify({ error: sub ? `unknown site subcommand "${sub}"` : "site needs a subcommand", usage: `himi site create <name> [--type wix|headless|branded-app|vibe] --yes  |  himi site list  |  himi site client ensure|list --site <msid>  |  himi site analyze --client-id <id> --url <https://\u2026> [--site <msid>] [--out <dir>] [--apply [--shell <id>]]  |  himi site function list|get|put|publish|invoke \u2026` }));
+          io.error(JSON.stringify({ error: sub ? `unknown site subcommand "${sub}"` : "site needs a subcommand", usage: `himi site create <name> [--type wix|headless|branded-app|vibe] --yes  |  himi site list  |  himi site client ensure|list --site <msid>  |  himi site analyze --url <https://\u2026> [--client-id <id>] [--site <msid>] [--out <dir>] [--apply [--shell <id>]]  |  himi site function list|get|put|publish|invoke \u2026` }));
           return 2;
         }
-        const clientId = str6(flags["client-id"]) ?? process.env.WIX_CLIENT_ID;
+        const clientFlag = str6(flags["client-id"]);
+        const clientId = clientFlag ?? process.env.WIX_CLIENT_ID;
         const siteUrl = str6(flags.url) ?? str6(flags["site-url"]);
         if (flags["read-only"] === true) {
           if (flags.apply || flags.out || flags.shell || flags["redirect-uri"]) {
@@ -71753,24 +72119,27 @@ ${report2.ok ? "OK \u2014 data + serve plane reachable." : typeof report2.hint =
           print({ ok: true, context });
           return 0;
         }
-        if (!clientId || !siteUrl) {
+        const analyzeUsage = "himi site analyze --url https://\u2026 [--client-id <headless-oauth-client-id>] [--site <msid>] [--out .himi/business-book] [--redirect-uri <uri>] [--apply [--shell " + SHELL_ENUM + "]]";
+        if (!siteUrl) {
+          io.error(JSON.stringify({ error: "himi site analyze needs --url", usage: analyzeUsage }));
+          return 2;
+        }
+        const redirectFlag = str6(flags["redirect-uri"]);
+        if (!clientId && (flags.apply === true || redirectFlag)) {
+          const { APPLY_NEEDS_CLIENT: APPLY_NEEDS_CLIENT2, REDIRECT_NEEDS_CLIENT: REDIRECT_NEEDS_CLIENT2 } = await Promise.resolve().then(() => (init_cli(), cli_exports));
           io.error(JSON.stringify({
-            error: "himi site analyze needs --client-id and --url",
-            // Analyze is GET-only and takes the client as INPUT, so a missing one used to
-            // be a dead end that named only the dashboard. Name the command that resolves
-            // it instead — that is what lets an unattended loop start from a site it did
-            // not create.
-            ...clientId ? {} : {
-              hint: "no --client-id? `himi site client ensure --site <msid> --yes` resolves (or mints) the site's Headless client and prints it; `himi site client list --site <msid>` shows what the site already has. WIX_CLIENT_ID is read as a fallback."
-            },
-            usage: "himi site analyze --client-id <headless-oauth-client-id> --url https://\u2026 [--site <msid>] [--out .himi/business-book] [--redirect-uri <uri>] [--apply [--shell " + SHELL_ENUM + "]]"
+            error: flags.apply === true ? APPLY_NEEDS_CLIENT2 : REDIRECT_NEEDS_CLIENT2,
+            usage: analyzeUsage
           }));
           return 2;
         }
         try {
           const { runSiteAnalyze: runSiteAnalyze2 } = await Promise.resolve().then(() => (init_cli(), cli_exports));
           const r = await runSiteAnalyze2({
-            clientId,
+            ...clientId ? { clientId } : {},
+            // The AMBIENT `WIX_SITE_ID` selects owner mode only beside an explicit --client-id,
+            // so exported env vars cannot turn a bare `--url` run into an owner read (#3283).
+            explicitClient: !!clientFlag,
             siteUrl,
             siteFlag: str6(flags.site),
             outDir: str6(flags.out),
@@ -71780,14 +72149,14 @@ ${report2.ok ? "OK \u2014 data + serve plane reachable." : typeof report2.hint =
             // Analyze cannot discover it (GET-only; the registered list lives behind
             // `oauth-app/v1`), and the shell refuses to reuse its own default once a customer
             // client is in play — so it is passed in by whoever registered it.
-            redirectUri: str6(flags["redirect-uri"]),
+            redirectUri: redirectFlag,
             cwd: str6(flags.content) ?? process.cwd()
           });
           print({ ok: true, ...r });
           return 0;
         } catch (e) {
           io.error(JSON.stringify({ error: e.message }));
-          return 1;
+          return e.exit === 2 ? 2 : 1;
         }
       }
       default: