@wix/himalaya-cli 0.1068.0 → 0.1070.0

package/dist/cli.mjs

@@ -484,6 +484,36 @@ var init_ownership = __esm({
   }
 });
 
+// ../../core/serve-storage/src/wip-pointer.ts
+function wipSupported(store) {
+  if (!store.getWipRecord || !store.updateWipRecord) return false;
+  return store.supportsWip ? store.supportsWip() : true;
+}
+function normalizeWipRecord(value) {
+  if (!value || typeof value !== "object") return { wip: null, promoted: [], evictedBefore: null };
+  const v = value;
+  const wip = v.wip && typeof v.wip.releaseId === "string" ? v.wip : null;
+  const promoted = (Array.isArray(v.promoted) ? v.promoted : []).flatMap((entry) => {
+    if (typeof entry === "string") return [{ id: entry, at: null }];
+    const e = entry;
+    return e && typeof e.id === "string" ? [{ id: e.id, at: storedTime(e.at) }] : [];
+  });
+  return { wip, promoted, evictedBefore: storedTime(v.evictedBefore) };
+}
+async function readWip(store, app) {
+  if (!wipSupported(store)) return "unsupported";
+  const { wip, promoted } = normalizeWipRecord(await store.getWipRecord(app));
+  if (!wip || promoted.some((p) => p.id === wip.releaseId)) return null;
+  const live2 = await store.getManifest(app);
+  return live2?.releaseId === wip.releaseId ? null : wip;
+}
+var storedTime;
+var init_wip_pointer = __esm({
+  "../../core/serve-storage/src/wip-pointer.ts"() {
+    storedTime = (value) => typeof value === "string" && !Number.isNaN(Date.parse(value)) ? value : null;
+  }
+});
+
 // ../../core/serve-storage/src/store.ts
 function validateFunctionManifest(manifest) {
   const dataErrors = validateDataResources(manifest.functionDataResources, manifest.app).filter((issue2) => issue2.severity === "error");
@@ -526,6 +556,14 @@ async function retainedReleaseRefs(store, app, keepRecent = 20, keepReleaseIds =
       }
     }
   }
+  const offered = await readWip(store, app);
+  if (offered && offered !== "unsupported" && !loaded.has(offered.releaseId) && store.getManifestById) {
+    const m = await store.getManifestById(app, offered.releaseId);
+    if (m) {
+      manifests.push(m);
+      loaded.add(m.releaseId);
+    }
+  }
   for (const releaseId of new Set(keepReleaseIds)) {
     if (loaded.has(releaseId)) continue;
     if (!store.getManifestById) throw new Error(`cannot retain function job release ${releaseId}: versioned manifest lookup is unsupported`);
@@ -554,6 +592,7 @@ var TEMPLATE_APP_PREFIX;
 var init_store = __esm({
   "../../core/serve-storage/src/store.ts"() {
     init_ownership();
+    init_wip_pointer();
     TEMPLATE_APP_PREFIX = "himi-template-";
   }
 });
@@ -764,34 +803,28 @@ var init_file_store = __esm({
         else ledger.push(entry);
         writeFileSync2(this.ledgerPath(app), JSON.stringify(ledger, null, 2));
       }
-      // ---- RFC 0061 §3.1 owner-follow `wip` pointer ----
-      // Inside the app directory, so `remove` and `reset` take it with the app. `clearWipIf` is a CAS
-      // for the way this backend is deployed — ONE writer process (serve-control; serve only reads):
-      // the read, compare and delete below are synchronous with no await between them, so no other
+      // ---- RFC 0061 §3.1 owner-follow `wip` record ----
+      // Inside the app directory, so `remove` and `reset` take it with the app. `updateWipRecord` is a
+      // CAS for the way this backend is deployed — ONE writer process (serve-control; serve only
+      // reads): the read, `fn` and write below are synchronous with no await between them, so no other
       // request in that process can land in the middle. It is not a cross-process lock.
-      wipPath(app) {
-        return join2(this.appDir(app), "_wip.json");
-      }
       readWipSync(app) {
         const b = this.read(app, "_wip.json");
         if (!b) return null;
         try {
-          const wip = JSON.parse(b.toString("utf8"));
-          return wip && typeof wip.releaseId === "string" ? wip : null;
+          return JSON.parse(b.toString("utf8"));
         } catch {
           return null;
         }
       }
-      async putWip(app, wip) {
-        mkdirSync2(this.appDir(app), { recursive: true });
-        writeFileSync2(this.wipPath(app), JSON.stringify(wip, null, 2));
-      }
-      async getWip(app) {
+      async getWipRecord(app) {
         return this.readWipSync(app);
       }
-      async clearWipIf(app, releaseId) {
-        if (this.readWipSync(app)?.releaseId !== releaseId) return false;
-        rmSync(this.wipPath(app), { force: true });
+      async updateWipRecord(app, fn) {
+        const next = fn(this.readWipSync(app));
+        if (next === void 0) return false;
+        mkdirSync2(this.appDir(app), { recursive: true });
+        writeFileSync2(join2(this.appDir(app), "_wip.json"), JSON.stringify(next, null, 2));
         return true;
       }
       bundleUrl(_app, sha2565) {
@@ -3924,8 +3957,8 @@ function committedProvisioningPath(name) {
 function committedShellFor(path2) {
   const normalized = path2.replace(/\\/g, "/");
   return SHELL_NAMES2.find((name) => {
-    const relative12 = committedProvisioningPath(name);
-    return normalized === relative12 || normalized.endsWith(`/${relative12}`);
+    const relative13 = committedProvisioningPath(name);
+    return normalized === relative13 || normalized.endsWith(`/${relative13}`);
   });
 }
 function isBrandable(repoRoot2, name) {
@@ -17387,15 +17420,20 @@ var init_gen_native_config = __esm({
 // src/progress.ts
 var progress_exports = {};
 __export(progress_exports, {
+  AGENT_WINS_WITHIN_MS: () => AGENT_WINS_WITHIN_MS,
   APPROVALS_FILE: () => APPROVALS_FILE,
   APPROVAL_GATES: () => APPROVAL_GATES,
+  AUTO_MILESTONES: () => AUTO_MILESTONES,
+  CLI_AUTHOR: () => CLI_AUTHOR,
   HISTORY_DIR: () => HISTORY_DIR,
   JOURNEY_STEPS: () => JOURNEY_STEPS,
   MAX_IMAGE_BYTES: () => MAX_IMAGE_BYTES,
   MAX_MESSAGE_CHARS: () => MAX_MESSAGE_CHARS,
+  MILESTONE_STEP: () => MILESTONE_STEP,
   PROGRESS_FILE: () => PROGRESS_FILE,
   ProgressError: () => ProgressError,
   UnsafeHimiDirError: () => UnsafeHimiDirError,
+  agentCovers: () => agentCovers,
   appLabel: () => appLabel,
   appendApproval: () => appendApproval,
   appendProgress: () => appendProgress,
@@ -17405,7 +17443,10 @@ __export(progress_exports, {
   carryPlanningJournal: () => carryPlanningJournal,
   formatBrief: () => formatBrief,
   imageExtension: () => imageExtension,
+  isCliEntry: () => isCliEntry,
+  journalMilestone: () => journalMilestone,
   journalPath: () => journalPath,
+  looksSecret: () => looksSecret,
   notifyDesktop: () => notifyDesktop,
   openApprovals: () => openApprovals,
   parseApprovalRef: () => parseApprovalRef,
@@ -17415,13 +17456,26 @@ __export(progress_exports, {
   readProgress: () => readProgress,
   realDirIn: () => realDirIn,
   summarizeProgress: () => summarizeProgress,
+  visibleEntries: () => visibleEntries,
   writeFileAtomic: () => writeFileAtomic
 });
 import { spawn as spawn3 } from "node:child_process";
 import { createHash as createHash8 } from "node:crypto";
 import { randomUUID } from "node:crypto";
 import { appendFileSync, closeSync, existsSync as existsSync27, lstatSync as lstatSync5, mkdirSync as mkdirSync13, openSync, readdirSync as readdirSync15, readFileSync as readFileSync27, readSync, renameSync as renameSync3, rmSync as rmSync5, statSync as statSync5, writeFileSync as writeFileSync12 } from "node:fs";
-import { join as join30, relative as relative5, resolve as resolve19, sep as sep6 } from "node:path";
+import { isAbsolute as isAbsolute3, join as join30, relative as relative5, resolve as resolve19, sep as sep6 } from "node:path";
+function agentCovers(agent, cli) {
+  if (isCliEntry(agent)) return false;
+  const agentShas = shasOf(agent.images);
+  if (!agentShas.size) return false;
+  const gap = Math.abs(Date.parse(agent.ts) - Date.parse(cli.ts));
+  if (!(gap <= AGENT_WINS_WITHIN_MS)) return false;
+  if (cli.step && agent.step === cli.step) return true;
+  return [...shasOf(cli.images)].some((sha) => agentShas.has(sha));
+}
+function visibleEntries(entries) {
+  return entries.filter((e) => !isCliEntry(e) || !entries.some((a) => agentCovers(a, e)));
+}
 function parseStep(raw) {
   const v = raw.trim().toLowerCase();
   if (/^[1-8]$/.test(v)) return JOURNEY_STEPS[Number(v) - 1];
@@ -17510,12 +17564,13 @@ function appendProgress(dir, input) {
       `a postcard is a line or two (${message.length} chars; the cap is ${MAX_MESSAGE_CHARS}) \u2014 put the detail in your reply and journal the headline`
     );
   }
-  const images = (input.images ?? []).map((src) => archiveImage(dir, src));
+  const images = (input.images ?? []).map((src) => archiveImage(dir, src)).map((img) => input.auto ? { ...img, source: packageRelative(dir, img.source) } : img);
   const entry = {
     ts: (input.now ?? /* @__PURE__ */ new Date()).toISOString(),
     message,
     ...input.step ? { step: input.step, stepNumber: JOURNEY_STEPS.indexOf(input.step) + 1 } : {},
-    ...images.length ? { images } : {}
+    ...images.length ? { images } : {},
+    ...input.auto ? { by: CLI_AUTHOR, milestone: input.auto.milestone, ...input.auto.ref ? { ref: input.auto.ref } : {} } : {}
   };
   if (!realDirIn(dir, ".himi")) throw new ProgressError("unsafe_himi_dir", new UnsafeHimiDirError(".himi").message);
   const file = join30(dir, PROGRESS_FILE);
@@ -17524,6 +17579,10 @@ function appendProgress(dir, input) {
 `);
   return entry;
 }
+function packageRelative(dir, p) {
+  const rel = relative5(dir, resolve19(p));
+  return rel && !rel.startsWith("..") && !isAbsolute3(rel) ? toPosix(rel) : p;
+}
 function endsWithNewline(file) {
   if (!existsSync27(file)) return true;
   const size = statSync5(file).size;
@@ -17542,7 +17601,7 @@ function isEntry(v) {
   const e = v;
   return typeof e.ts === "string" && typeof e.message === "string";
 }
-function readProgress(dir) {
+function readProgress(dir, opts = {}) {
   const file = join30(dir, PROGRESS_FILE);
   if (!existsSync27(file)) return { entries: [], skipped: 0 };
   const entries = [];
@@ -17557,7 +17616,34 @@ function readProgress(dir) {
       skipped++;
     }
   }
-  return { entries, skipped };
+  return { entries: opts.all ? entries : visibleEntries(entries), skipped };
+}
+function journalMilestone(dir, input) {
+  try {
+    if (looksSecret(input.message) || input.ref !== void 0 && (!REF_SHAPE.test(input.ref) || looksSecret(input.ref))) {
+      return { journaled: false, reason: "unsafe" };
+    }
+    const { entries } = readProgress(dir, { all: true });
+    const ref = input.ref ?? null;
+    if (entries.some((e) => isCliEntry(e) && e.milestone === input.milestone && (e.ref ?? null) === ref)) {
+      return { journaled: false, reason: "already-journaled" };
+    }
+    const now = input.now ?? /* @__PURE__ */ new Date();
+    const step = MILESTONE_STEP[input.milestone];
+    const abs = input.image ? locateImage(dir, input.image) : null;
+    const images = abs ? [{ sha256: createHash8("sha256").update(readFileSync27(abs)).digest("hex") }] : [];
+    if (entries.some((e) => agentCovers(e, { ts: now.toISOString(), step, images }))) return { journaled: false, reason: "agent-journaled" };
+    const entry = appendProgress(dir, {
+      message: input.message,
+      step,
+      ...abs ? { images: [abs] } : {},
+      now,
+      auto: { milestone: input.milestone, ...input.ref ? { ref: input.ref } : {} }
+    });
+    return { journaled: true, entry };
+  } catch {
+    return { journaled: false, reason: "failed" };
+  }
 }
 function parseGate(raw) {
   const v = raw.trim().toLowerCase();
@@ -17688,7 +17774,7 @@ function formatBrief(input) {
     if (summary.last) lines.push(`Last postcard (${minute(summary.last.ts)}): ${summary.last.message}`);
     const pastPlan = (summary.current?.stepNumber ?? 0) > JOURNEY_STEPS.indexOf("plan") + 1;
     lines.push(
-      !summary.current ? "Resume from the journal: `himi progress` prints every postcard." : pastPlan ? `Resume at step ${summary.current.stepNumber}. Do not restart discovery: the approved plan is SPEC.md + MOBILE-UX.md.` : `Resume at step ${summary.current.stepNumber}. Implementation has not started: treat SPEC.md + MOBILE-UX.md as a draft unless the journal records the customer approving them.`
+      !summary.current ? "No journey step recorded yet: a new app starts with discovery (step 1); one whose SPEC.md the customer approved continues from its current state. `himi progress` prints every postcard." : pastPlan ? `Resume at step ${summary.current.stepNumber}. Do not restart discovery: the approved plan is SPEC.md + MOBILE-UX.md.` : `Resume at step ${summary.current.stepNumber}. Implementation has not started: treat SPEC.md + MOBILE-UX.md as a draft unless the journal records the customer approving them.`
     );
   }
   if (open.length) {
@@ -17702,7 +17788,7 @@ function formatBrief(input) {
 }
 function summarizeProgress(entries) {
   if (!entries.length) return { count: 0 };
-  const stepped = [...entries].reverse().find((e) => e.step && JOURNEY_STEPS.includes(e.step));
+  const stepped = [...entries].reverse().find((e) => !isCliEntry(e) && e.step && JOURNEY_STEPS.includes(e.step));
   const first = entries[0];
   const last = entries[entries.length - 1];
   const elapsed = Date.parse(last.ts) - Date.parse(first.ts);
@@ -17763,10 +17849,16 @@ function journalPath(dir) {
   const rel = relative5(process.cwd(), abs);
   return rel && !rel.startsWith("..") ? rel : abs;
 }
-var JOURNEY_STEPS, PROGRESS_FILE, HISTORY_DIR, APPROVALS_FILE, APPROVAL_GATES, MAX_MESSAGE_CHARS, MAX_IMAGE_BYTES, ProgressError, toPosix, UnsafeHimiDirError, gateLabel, minute, NOTIFY_TIMEOUT_MS;
+var JOURNEY_STEPS, CLI_AUTHOR, AUTO_MILESTONES, MILESTONE_STEP, AGENT_WINS_WITHIN_MS, isCliEntry, shasOf, PROGRESS_FILE, HISTORY_DIR, APPROVALS_FILE, APPROVAL_GATES, MAX_MESSAGE_CHARS, MAX_IMAGE_BYTES, ProgressError, toPosix, UnsafeHimiDirError, SECRET_SHAPES, looksSecret, REF_SHAPE, gateLabel, minute, NOTIFY_TIMEOUT_MS;
 var init_progress = __esm({
   "src/progress.ts"() {
     JOURNEY_STEPS = ["discover", "classify", "plan", "implement", "brand", "validate", "review", "download"];
+    CLI_AUTHOR = "himi";
+    AUTO_MILESTONES = ["first-look", "test", "draft"];
+    MILESTONE_STEP = { "first-look": "plan", test: "validate", draft: "review" };
+    AGENT_WINS_WITHIN_MS = 5 * 60 * 1e3;
+    isCliEntry = (e) => e.by === CLI_AUTHOR;
+    shasOf = (images) => new Set(Array.isArray(images) ? images.flatMap((i) => i && typeof i === "object" && typeof i.sha256 === "string" ? [i.sha256] : []) : []);
     PROGRESS_FILE = join30(".himi", "progress.jsonl");
     HISTORY_DIR = join30(".himi", "history");
     APPROVALS_FILE = join30(".himi", "approvals.jsonl");
@@ -17793,6 +17885,17 @@ var init_progress = __esm({
         super(`${rel} is not a real directory inside the content package (a symlink?) \u2014 refusing to write through it`);
       }
     };
+    SECRET_SHAPES = [
+      /:\/\//,
+      // any URL: a preview link carries its bearer in the query
+      /[?&#;](?:pvt|h|token|code|handover|key|secret|access_token)=/i,
+      // `?h=` is the handover code
+      /\bpvt[_=-]/i,
+      /\beyJ[A-Za-z0-9_-]{6,}/
+      // a JWT (a control token), whose header always starts `{"`
+    ];
+    looksSecret = (s) => SECRET_SHAPES.some((re) => re.test(s));
+    REF_SHAPE = /^[A-Za-z0-9._:-]{1,128}$/;
     gateLabel = (gate) => APPROVAL_GATES.find((g) => g.id === gate)?.label ?? gate;
     minute = (iso) => `${iso.slice(0, 16).replace("T", " ")} UTC`;
     NOTIFY_TIMEOUT_MS = 3e3;
@@ -17861,9 +17964,9 @@ ${after}`;
 function blockVersion(text5) {
   return STAMP_RE.exec(text5)?.[1] ?? null;
 }
-function agentsMdBody(appName) {
+function agentsMdBody(appName2) {
   const gates = APPROVAL_GATES.map((g) => `- \`${g.id}\` \u2014 ${g.label}`).join("\n");
-  return `# ${appName ? `${appName} \u2014 a Himalaya app` : "A Himalaya app"}
+  return `# ${appName2 ? `${appName2} \u2014 a Himalaya app` : "A Himalaya app"}
 
 This folder is a Himalaya content package: a native iOS / Android / web app whose screens are data
 (JSON descriptors) plus small JavaScript workers, built and shipped with the \`himi\` CLI
@@ -18924,9 +19027,9 @@ var init_store2 = __esm({
     Store = class {
       _db;
       dbPath;
-      constructor(appName) {
+      constructor(appName2) {
         const dataRoot = process.env.HIMALAYA_DEV_STORE_DIR ? resolve23(process.env.HIMALAYA_DEV_STORE_DIR) : resolve23(ROOT3, "core/dev-server/data");
-        this.dbPath = resolve23(dataRoot, `${appName}.sqlite`);
+        this.dbPath = resolve23(dataRoot, `${appName2}.sqlite`);
       }
       /** The node:sqlite handle — opened, bootstrapped, and seeded on first access. */
       get db() {
@@ -21651,8 +21754,8 @@ var init_net_mocks_rollover = __esm({
 });
 
 // ../../core/dev-server/src/player-proxy.ts
-function isPlayerHost(appName) {
-  return appName === PLAYER_APP_ID || process.env.HIMALAYA_DEV_MULTI_APP === "1";
+function isPlayerHost(appName2) {
+  return appName2 === PLAYER_APP_ID || process.env.HIMALAYA_DEV_MULTI_APP === "1";
 }
 function resolveServeBase() {
   const override = process.env.HIMALAYA_PLAYER_SERVE_URL;
@@ -22900,6 +23003,7 @@ function shouldRevealError(args) {
 var EMAIL_RE, URL_HOST_RE, INTEGER_RE, NUMBER_RE;
 var init_validation = __esm({
   "../../core/ts/src/validation.ts"() {
+    "use strict";
     EMAIL_RE = /^[A-Za-z0-9._%+-]+@[A-Za-z0-9-]+(\.[A-Za-z0-9-]+)*\.[A-Za-z]{2,}$/;
     URL_HOST_RE = /^[A-Za-z0-9-]+(\.[A-Za-z0-9-]+)*(:[0-9]+)?$/;
     INTEGER_RE = /^[+-]?[0-9]+$/;
@@ -26500,6 +26604,7 @@ function validateWorkerSubtree(raw, slotId, policy, actionCatalog) {
 var WORKER_SUBTREE_CEILINGS, ID_PART, ACTION_ID;
 var init_worker_subtree = __esm({
   "../../core/ts/src/worker-subtree.ts"() {
+    "use strict";
     init_worker_subtree_safe_types_generated();
     WORKER_SUBTREE_CEILINGS = Object.freeze({
       maxEncodedBytes: 65536,
@@ -33161,8 +33266,8 @@ function clampRule(rule, denyPrefixes, maxTTL) {
     ttl: Math.min(rule.ttl, maxTTL)
   };
 }
-function resolveWixCachePolicy(appName) {
-  const appRules = CACHE_OVERRIDES[appName] ?? [];
+function resolveWixCachePolicy(appName2) {
+  const appRules = CACHE_OVERRIDES[appName2] ?? [];
   const rules = appRules.map((r) => clampRule(r, PLATFORM_DENY_PREFIXES, PLATFORM_MAX_TTL));
   return { rules, defaultCacheable: false };
 }
@@ -33280,7 +33385,7 @@ function expandNavBundle(ref, ctx) {
   };
 }
 function deriveNavigationConfig(app, bundleCtx) {
-  const appName = app.name;
+  const appName2 = app.name;
   const concrete = app.screenIds.map((screenId) => ({
     screenId,
     isPublic: true,
@@ -33293,7 +33398,7 @@ function deriveNavigationConfig(app, bundleCtx) {
     const keys = (pat.match(/\{([^}]+)\}/g) ?? []).map((m) => m.slice(1, -1));
     return { screenId: base, isPublic: true, paramKeys: keys, parentScreenId: "", tabId: "" };
   });
-  const ov = NAV_OVERRIDES[appName];
+  const ov = NAV_OVERRIDES[appName2];
   if (ov?.parents) {
     for (const s of [...concrete, ...templated]) {
       if (ov.parents[s.screenId]) s.parentScreenId = ov.parents[s.screenId];
@@ -33304,7 +33409,7 @@ function deriveNavigationConfig(app, bundleCtx) {
     scheme: app.urlScheme,
     deepLinkPatterns: app.deepLinkPatterns ?? ov?.deepLinkPatterns ?? [],
     linkableScreens,
-    wixCachePolicy: resolveWixCachePolicy(appName),
+    wixCachePolicy: resolveWixCachePolicy(appName2),
     // Fail-open baseline; tightened OTA via the admin app-config override. The
     // DESTINATION(s) are derived generically from the app's config (no app-name
     // special-casing) so the app chooses where telemetry goes via OTA:
@@ -33382,12 +33487,12 @@ function buildAppConfigDocument(req, meta, override, bundleCtx) {
   return { config, body, etag, locale };
 }
 function handleAppConfigRequest(req, res, meta, override, bundleCtx) {
-  const appName = decodeURIComponent(
+  const appName2 = decodeURIComponent(
     (req.url ?? "").replace(/^\/v1\/app-config\//, "").split("?")[0]
   );
-  if (appName !== meta.name) {
+  if (appName2 !== meta.name) {
     res.writeHead(404, { "Content-Type": "application/json" });
-    res.end(JSON.stringify({ error: "unknown_app", appName }));
+    res.end(JSON.stringify({ error: "unknown_app", appName: appName2 }));
     return;
   }
   const { body, etag, locale } = buildAppConfigDocument(req, meta, override, bundleCtx);
@@ -36344,7 +36449,7 @@ async function handleToggleEval(req, res, state) {
   for (const id of requested) out[id] = state.toggles[id] ?? false;
   sendJson(res, 200, out);
 }
-function evalContextFromReq(req, appName) {
+function evalContextFromReq(req, appName2) {
   const h = (k) => {
     const v = req.headers[k];
     return typeof v === "string" ? v : void 0;
@@ -36352,7 +36457,7 @@ function evalContextFromReq(req, appName) {
   return {
     sessionId: h("x-himalaya-session") ?? "dev-session",
     userId: h("x-himalaya-user"),
-    appId: appName,
+    appId: appName2,
     platform: h("x-himalaya-platform"),
     appVersion: h("x-himalaya-app-version"),
     locale: typeof req.headers["accept-language"] === "string" ? req.headers["accept-language"].split(",")[0] : void 0
@@ -37500,8 +37605,8 @@ async function handleActionHandlerBundleGet(res, app) {
 }
 async function serveStatic(req, res, root, prefix) {
   const requested = decodeURIComponent((req.url ?? "").split("?")[0]);
-  const relative12 = requested.replace(prefix, "").replace(/^\//, "");
-  const safe = normalize3(relative12).replace(/^(\.\.[\/\\])+/, "");
+  const relative13 = requested.replace(prefix, "").replace(/^\//, "");
+  const safe = normalize3(relative13).replace(/^(\.\.[\/\\])+/, "");
   const fullPath = resolve31(root, safe);
   if (!fullPath.startsWith(root)) {
     return send(res, 403, "forbidden");
@@ -37665,19 +37770,19 @@ function handleAssetLinks(res, state) {
   });
 }
 function createDevServer(opts = {}) {
-  const appName = opts.app ?? "sample";
+  const appName2 = opts.app ?? "sample";
   if (!opts.preloaded) {
-    throw new Error(`createDevServer requires a preloaded module for "${appName}". Preload via loadApp("${appName}").`);
+    throw new Error(`createDevServer requires a preloaded module for "${appName2}". Preload via loadApp("${appName2}").`);
   }
   checkRegistry(opts.preloaded.module.actions);
   const port = opts.port ?? Number(process.env.HIMALAYA_DEV_PORT ?? 8080);
   const hotReloadEnabled = opts.enableHotReload ?? process.env.HIMALAYA_DEV_HOT_RELOAD === "1";
   const state = {
-    appName,
+    appName: appName2,
     // Store construction is cheap now; its node:sqlite DB is opened LAZILY on first query
     // (store.ts), so the serve authoring plane can boot createDevServer on a Whirlwind guest
     // that has no node:sqlite — the stateless build/render path never queries the demo store.
-    store: new Store(appName),
+    store: new Store(appName2),
     toggles: {
       pinned_notes_v2: false,
       weekly_review_v1: true,
@@ -37698,7 +37803,7 @@ function createDevServer(opts = {}) {
     localOverrides: /* @__PURE__ */ new Map(),
     localOverrideHistory: /* @__PURE__ */ new Map(),
     app: opts.preloaded,
-    moduleStore: opts.preloaded ? opts.preloaded.module.createStore(appName) : void 0,
+    moduleStore: opts.preloaded ? opts.preloaded.module.createStore(appName2) : void 0,
     telemetryEvents: [],
     adminUrl: process.env.HIMALAYA_ADMIN_URL,
     wix: createWixGatewayState(),
@@ -38224,12 +38329,6 @@ var init_src6 = __esm({
   }
 });
 
-// ../../core/serve-storage/src/wip-pointer.ts
-var init_wip_pointer = __esm({
-  "../../core/serve-storage/src/wip-pointer.ts"() {
-  }
-});
-
 // ../../core/serve-storage/src/release-patch.ts
 import { createHash as createHash17 } from "node:crypto";
 function sha256hex(b) {
@@ -42271,7 +42370,7 @@ async function buildFromLoaded(preloaded, dest, opts = {}) {
     ...collect2?.lint ? { lint, workers } : {},
     ...collect2?.render ? { renders } : {},
     ...collect2?.descriptors ? { descriptors: baked, linkableScreenIds: [...linkable] } : {},
-    ...collect2?.descriptors && typeof preloaded.meta.homeScreenId === "string" && preloaded.meta.homeScreenId ? { homeScreenId: preloaded.meta.homeScreenId } : {},
+    ...typeof preloaded.meta.homeScreenId === "string" && preloaded.meta.homeScreenId ? { homeScreenId: preloaded.meta.homeScreenId } : {},
     ...renderTokens !== void 0 ? { tokens: renderTokens } : {},
     ...preloaded.meta.surfaces ? { surfaceNav: preloaded.meta.surfaces } : {},
     auth: (() => {
@@ -42568,7 +42667,7 @@ h2{font-size:12px;font-weight:600;color:var(--muted);text-transform:uppercase;le
 .sw{display:flex;gap:6px}.sw span{width:22px;height:22px;border-radius:50%;border:1px solid var(--line)}
 .nav{display:flex;flex-wrap:wrap;gap:6px}.nav span{font-size:12px;padding:3px 8px;border-radius:6px;background:var(--bg);border:1px solid var(--line)}
 .log{list-style:none;margin:0;padding:0}.log li{display:flex;gap:10px;padding:10px 0;border-top:1px solid var(--line)}.log li:first-child{border-top:0}
-.log .t{color:var(--faint);font-size:12px;min-width:64px;font-variant-numeric:tabular-nums}.log .s{font-size:11px;color:var(--muted);text-transform:capitalize}.log .imgs{display:flex;gap:6px;margin-top:6px}.log .imgs img{height:72px;border-radius:8px;border:1px solid var(--line);cursor:zoom-in}
+.log .t{color:var(--faint);font-size:12px;min-width:64px;font-variant-numeric:tabular-nums}.log .s{font-size:11px;color:var(--muted);text-transform:capitalize}.log .by{font-size:11px;color:var(--faint)}.log .imgs{display:flex;gap:6px;margin-top:6px}.log .imgs img{height:72px;border-radius:8px;border:1px solid var(--line);cursor:zoom-in}
 .empty{color:var(--faint);font-size:13px;padding:8px 0}
 #lb{position:fixed;inset:0;background:rgba(0,0,0,.72);display:none;align-items:center;justify-content:center;z-index:9;cursor:zoom-out}#lb img{max-height:92vh;max-width:92vw;border-radius:14px;background:#fff}
 .enter{animation:enter .7s cubic-bezier(.2,.8,.2,1) both}@keyframes enter{from{opacity:0;transform:translateY(10px) scale(.94);filter:grayscale(1)}to{opacity:1;transform:none;filter:none}}
@@ -42697,7 +42796,7 @@ function render(s){
   s.steps.forEach(function(name,i){var d=el("div","step"+(i+1<n?" done":i+1===n?" cur":""));d.appendChild(el("div","bar"));d.appendChild(el("div","lbl",(i+1)+". "+name));steps.appendChild(d)});
   var last=s.journal[0];
   $("nowmsg").textContent=last?last.message:"Waiting for the first postcard.";
-  $("nowmeta").textContent=last?("Now \xB7 "+(last.step?("step "+last.stepNumber+" of 8, "+last.step+" \xB7 "):"")+ago(last.ts)):"Now";
+  $("nowmeta").textContent=last?("Now \xB7 "+(last.step?("step "+last.stepNumber+" of 8, "+last.step+" \xB7 "):"")+(last.by?"noted by "+last.by+" \xB7 ":"")+ago(last.ts)):"Now";
   var film=$("film");clear(film);
   if(!rewinding){var n0=s.timelineFrames||0;$("scrub").hidden=n0<2;$("slider").max=String(Math.max(1,n0-1));$("slider").value=$("slider").max}
   if(rewinding){paintStill(s)}else{$("still").hidden=true;$("focus").hidden=false;var focus=$("focus");
@@ -42729,7 +42828,7 @@ function render(s){
   if(s.app.palette.length){var sw=el("div","sw");s.app.palette.forEach(function(c){var d=el("span");d.style.background=c.hex;d.title=c.name+" "+c.hex;sw.appendChild(d)});brand.appendChild(sw)}
   var nav=$("nav");clear(nav);$("navcard").style.display=s.nav.length&&!s.map?"":"none";drawMap(s.map);s.nav.forEach(function(e){nav.appendChild(el("span",null,e.from+" \u2192 "+e.to))});
   var log=$("log");clear(log);if(!s.journal.length)log.appendChild(el("li","empty","Postcards the agent journals appear here."));
-  s.journal.forEach(function(j){var li=el("li");li.appendChild(el("div","t",hhmm(j.ts)));var body=el("div");body.appendChild(el("div",null,j.message));if(j.step)body.appendChild(el("div","s","step "+j.stepNumber+" \xB7 "+j.step));
+  s.journal.forEach(function(j){var li=el("li");li.appendChild(el("div","t",hhmm(j.ts)));var body=el("div");body.appendChild(el("div",null,j.message));if(j.step)body.appendChild(el("div","s","step "+j.stepNumber+" \xB7 "+j.step));if(j.by)body.appendChild(el("div","by","noted by "+j.by));
     if(j.images.length){var row=el("div","imgs");j.images.forEach(function(u){row.appendChild(img(u))});body.appendChild(row)}li.appendChild(body);log.appendChild(li)});
   paintPop(s);
 }
@@ -43502,9 +43601,10 @@ function buildView(dir, memory, now) {
     journal: entries.slice(-MAX_JOURNAL).reverse().map((e) => ({
       ts: e.ts,
       message: e.message,
-      step: e.step ?? null,
-      stepNumber: e.stepNumber ?? null,
-      images: (e.images ?? []).map((i) => historyUrl(basename10(i.file)))
+      step: isCliEntry(e) ? null : e.step ?? null,
+      stepNumber: isCliEntry(e) ? null : e.stepNumber ?? null,
+      images: (e.images ?? []).map((i) => historyUrl(basename10(i.file))),
+      by: isCliEntry(e) ? CLI_AUTHOR : null
     })),
     screens,
     focus,
@@ -44752,6 +44852,109 @@ var init_notify_setup = __esm({
   }
 });
 
+// src/milestones.ts
+var milestones_exports = {};
+__export(milestones_exports, {
+  afterDraftPush: () => afterDraftPush,
+  afterRenderPng: () => afterRenderPng,
+  afterTestRun: () => afterTestRun,
+  displayPath: () => displayPath,
+  homeScreenIdOf: () => homeScreenIdOf,
+  openBoardForSession: () => openBoardForSession,
+  progressCommand: () => progressCommand,
+  sessionSteps: () => sessionSteps,
+  testPostcardMessage: () => testPostcardMessage
+});
+import { existsSync as existsSync44, readFileSync as readFileSync48 } from "node:fs";
+import { basename as basename12, isAbsolute as isAbsolute4, join as join42, relative as relative8 } from "node:path";
+function homeScreenIdOf(dir) {
+  let src;
+  try {
+    src = readFileSync48(join42(dir, "dev", "index.ts"), "utf8");
+  } catch {
+    return null;
+  }
+  const m = /^[ \t]*homeScreenId[ \t]*:[ \t]*(?:"((?:[^"\\\n]|\\.)*)"|'((?:[^'\\\n]|\\.)*)')/m.exec(src);
+  const id = m ? m[1] ?? m[2] : void 0;
+  return id && /^[A-Za-z0-9_.\-/{}]+$/.test(id) ? id : null;
+}
+function displayPath(p, cwd = process.cwd()) {
+  const rel = relative8(cwd, p);
+  return rel && !rel.startsWith("..") && !isAbsolute4(rel) ? rel : p;
+}
+function progressCommand(opts) {
+  return `himi progress "<${opts.what}>"${opts.step ? ` --step ${opts.step}` : ""}${opts.image ? ` --image ${shellQuote(opts.image)}` : ""}${contentArg(opts.content)}`;
+}
+function sessionSteps(opts) {
+  const content = displayPath(opts.dir, opts.cwd);
+  const home = opts.home ?? "<homeScreenId>";
+  const shot = `.himi/shots/${home}.png`;
+  return [
+    `himi run --watch${contentArg(content)} & \u2014 now, in this session: keep it running in the background. The live preview repaints on every save and serves the build board at <its url>/__himi/studio/`,
+    `himi render ${shellQuote(home)} --png --device iphone${contentArg(content)} \u2014 the first picture, written to ${shot}${opts.home ? "" : " (the id is the dev module's homeScreenId)"}; the CLI journals it as the first look`,
+    `${progressCommand({ what: "where the build starts", step: "plan", image: shot, content })} \u2014 your postcard for the owner, with that picture`
+  ];
+}
+async function openBoardForSession(dir, cwd = process.cwd()) {
+  try {
+    const { openStudio: openStudio2 } = await Promise.resolve().then(() => (init_studio(), studio_exports));
+    const { page, url } = openStudio2(dir);
+    const rel = relative8(cwd, page);
+    return { page: rel && !rel.startsWith("..") && !isAbsolute4(rel) ? rel : page, url, opened: false };
+  } catch (e) {
+    return { opened: false, error: `the build board was not created: ${e.message} \u2014 \`himi studio --no-open\` in the app retries it` };
+  }
+}
+function journal(dir, milestone, message, extra) {
+  const r = journalMilestone(dir, { milestone, message, ...extra });
+  return r.journaled ? { journaled: true, milestone, message } : void 0;
+}
+function afterRenderPng(dir, input) {
+  const postcard = input.renderable && input.homeScreenId !== null && input.screenId === input.homeScreenId ? journal(dir, "first-look", `First look at ${appName(dir)}: the home screen, where the build starts.`, { image: input.pngFile, ...input.now ? { now: input.now } : {} }) : void 0;
+  return {
+    ...postcard ? { postcard } : {},
+    next: input.renderable ? [progressCommand({ what: "what changed", image: displayPath(input.pngFile), content: input.content })] : []
+  };
+}
+function testPostcardMessage(s) {
+  const links = s.broken === void 0 ? "" : `, ${plural(s.broken, "broken link")}`;
+  const unreached = s.unreached ? `, ${plural(s.unreached, "screen")} nothing links to` : "";
+  return `Test crawl: ${plural(s.screens, "screen")} and ${plural(s.actions, "action")} exercised${links}${unreached} \u2014 ${s.errors ? `${plural(s.errors, "error")} to fix` : "no errors"}.`;
+}
+function afterTestRun(dir, input) {
+  const postcard = journal(dir, "test", testPostcardMessage(input), {
+    ref: input.runId,
+    ...input.homeShot && existsSync44(input.homeShot) ? { image: input.homeShot } : {},
+    ...input.now ? { now: input.now } : {}
+  });
+  return {
+    ...postcard ? { postcard } : {},
+    next: [
+      input.boardOpen ? "the build board's App map now shows every screen this crawl reached, how they link, and any broken link \u2014 .himi/studio/index.html, or /__himi/studio/ under `himi run --watch`" : "`himi studio` opens the build board, whose App map draws every screen this crawl reached, how they link, and any broken link"
+    ]
+  };
+}
+function afterDraftPush(dir, input) {
+  const postcard = journal(dir, "draft", `Draft pushed: release ${input.releaseId.slice(0, 12)} of ${input.app} \u2014 owner-private, not live.`, {
+    ref: input.releaseId,
+    ...input.now ? { now: input.now } : {}
+  });
+  return {
+    ...postcard ? { postcard } : {},
+    next: `${progressCommand({ what: "what the owner can review in this draft", step: "review", content: input.content })} \u2014 your postcard for the draft; share the preview link in chat, never in the journal`
+  };
+}
+var contentArg, plural, appName;
+var init_milestones = __esm({
+  "src/milestones.ts"() {
+    init_progress();
+    init_shell_quote();
+    contentArg = (content) => content ? ` --content ${shellQuote(content)}` : "";
+    plural = (n, one, many = `${one}s`) => `${n} ${n === 1 ? one : many}`;
+    appName = (dir) => appLabel(dir) ?? basename12(dir);
+  }
+});
+
 // src/site-analyze/types.ts
 function isRedirectUri(value) {
   return /^[a-z][a-z0-9+.-]*:\/\/\S*$/i.test(value);
@@ -45189,8 +45392,8 @@ __export(template_trim_exports, {
   routeMatcher: () => routeMatcher,
   runTemplateTrim: () => runTemplateTrim
 });
-import { cpSync, existsSync as existsSync44, mkdirSync as mkdirSync20, readdirSync as readdirSync24, readFileSync as readFileSync48, renameSync as renameSync5, rmSync as rmSync8, statSync as statSync10, writeFileSync as writeFileSync16 } from "node:fs";
-import { dirname as dirname25, join as join42 } from "node:path";
+import { cpSync, existsSync as existsSync45, mkdirSync as mkdirSync20, readdirSync as readdirSync24, readFileSync as readFileSync49, renameSync as renameSync5, rmSync as rmSync8, statSync as statSync10, writeFileSync as writeFileSync16 } from "node:fs";
+import { dirname as dirname25, join as join43 } from "node:path";
 function routeMatcher(pattern) {
   const detail = /^\^([A-Za-z0-9_]+)\(\?:\[_\/\]\(\.\+\)\)\?\$$/.exec(pattern);
   if (detail) {
@@ -45884,20 +46087,20 @@ function homeModulesPass(app, kept, edited) {
   return { text: patched.src, dropped: patched.droppedModules };
 }
 function listWorkers(dir) {
-  const root = join42(dir, "tier5-src");
-  if (!existsSync44(root)) return { dirs: [], files: {} };
-  const dirs = readdirSync24(root).filter((n) => statSync10(join42(root, n)).isDirectory()).sort();
+  const root = join43(dir, "tier5-src");
+  if (!existsSync45(root)) return { dirs: [], files: {} };
+  const dirs = readdirSync24(root).filter((n) => statSync10(join43(root, n)).isDirectory()).sort();
   const files = {};
   const walk2 = (abs, rel) => {
     for (const name of readdirSync24(abs)) {
       if (name === "node_modules") continue;
-      const p = join42(abs, name);
+      const p = join43(abs, name);
       const r = `${rel}/${name}`;
       if (statSync10(p).isDirectory()) walk2(p, r);
-      else if (/\.(?:[cm]?[jt]sx?|json)$/.test(name)) files[r] = readFileSync48(p, "utf8");
+      else if (/\.(?:[cm]?[jt]sx?|json)$/.test(name)) files[r] = readFileSync49(p, "utf8");
     }
   };
-  for (const d of dirs) walk2(join42(root, d), `tier5-src/${d}`);
+  for (const d of dirs) walk2(join43(root, d), `tier5-src/${d}`);
   return { dirs, files };
 }
 function csv(v) {
@@ -45920,16 +46123,16 @@ async function runTemplateTrim(req, deps) {
     links = req.links;
   }
   const dir = req.dir;
-  const devPath = join42(dir, "dev/index.ts");
-  const configPath = join42(dir, "config.ts");
-  if (!existsSync44(devPath) || !existsSync44(configPath)) {
+  const devPath = join43(dir, "dev/index.ts");
+  const configPath = join43(dir, "config.ts");
+  if (!existsSync45(devPath) || !existsSync45(configPath)) {
     return refuse3(new TrimRefusal(`${dir} has no dev/index.ts + config.ts \u2014 point --content at an app scaffolded with \`himi init --template\``));
   }
   if (isTemplateSourceTree(dir)) {
     return refuse3(new TrimRefusal(`${dir} is a template source tree (its identity is still __HIMI_APP_*__ sentinels) \u2014 trim the app \`himi init --template\` scaffolds from it, not the template itself`));
   }
-  const dev = readFileSync48(devPath, "utf8");
-  const config = readFileSync48(configPath, "utf8");
+  const dev = readFileSync49(devPath, "utf8");
+  const config = readFileSync49(configPath, "utf8");
   const workers = listWorkers(dir);
   let plan;
   try {
@@ -45939,23 +46142,23 @@ async function runTemplateTrim(req, deps) {
     throw e;
   }
   if (req.dryRun) return { code: 0, result: { ok: true, dryRun: true, ...plan.report, validate: null } };
-  const hadHimi = existsSync44(join42(dir, ".himi"));
-  const backupRel = join42(".himi", "trim-backup", (/* @__PURE__ */ new Date()).toISOString().replace(/[:.]/g, "-"));
-  const backup = join42(dir, backupRel);
+  const hadHimi = existsSync45(join43(dir, ".himi"));
+  const backupRel = join43(".himi", "trim-backup", (/* @__PURE__ */ new Date()).toISOString().replace(/[:.]/g, "-"));
+  const backup = join43(dir, backupRel);
   const originals = [[devPath, "dev/index.ts"], [configPath, "config.ts"]];
   const moved = [];
   const restore = () => {
     for (const [path2, rel] of originals) {
-      const original = readFileSync48(join42(backup, rel));
-      if (!existsSync44(path2) || !readFileSync48(path2).equals(original)) writeFileSync16(path2, original);
+      const original = readFileSync49(join43(backup, rel));
+      if (!existsSync45(path2) || !readFileSync49(path2).equals(original)) writeFileSync16(path2, original);
     }
-    for (const name of [...moved].reverse()) renameSync5(join42(backup, "tier5-src", name), join42(dir, "tier5-src", name));
+    for (const name of [...moved].reverse()) renameSync5(join43(backup, "tier5-src", name), join43(dir, "tier5-src", name));
     moved.length = 0;
   };
   const apply = () => {
     const moveDir = deps.moveDir ?? renameSync5;
     for (const name of plan.removedWorkers) {
-      moveDir(join42(dir, "tier5-src", name), join42(backup, "tier5-src", name));
+      moveDir(join43(dir, "tier5-src", name), join43(backup, "tier5-src", name));
       moved.push(name);
     }
     if (plan.dev !== dev) writeFileSync16(devPath, plan.dev);
@@ -45963,8 +46166,8 @@ async function runTemplateTrim(req, deps) {
   };
   const dropBackup = () => {
     rmSync8(backup, { recursive: true, force: true });
-    for (const d of [dirname25(backup), join42(dir, ".himi")]) {
-      if (d === join42(dir, ".himi") && hadHimi) break;
+    for (const d of [dirname25(backup), join43(dir, ".himi")]) {
+      if (d === join43(dir, ".himi") && hadHimi) break;
       try {
         if (!readdirSync24(d).length) rmSync8(d, { recursive: true });
       } catch {
@@ -45990,9 +46193,9 @@ async function runTemplateTrim(req, deps) {
     return { code: 1, result: { ok: false, error: `${error} (${message}); every file was restored`, rolledBack: true, ...base(validate4) } };
   };
   try {
-    mkdirSync20(join42(backup, "dev"), { recursive: true });
-    for (const [path2, rel] of originals) cpSync(path2, join42(backup, rel));
-    if (plan.removedWorkers.length) mkdirSync20(join42(backup, "tier5-src"), { recursive: true });
+    mkdirSync20(join43(backup, "dev"), { recursive: true });
+    for (const [path2, rel] of originals) cpSync(path2, join43(backup, rel));
+    if (plan.removedWorkers.length) mkdirSync20(join43(backup, "tier5-src"), { recursive: true });
   } catch (e) {
     dropBackup();
     return { code: 1, result: { ok: false, error: `could not back up the app before trimming it (${e.message}); nothing was changed`, rolledBack: true, ...base() } };
@@ -46005,7 +46208,7 @@ async function runTemplateTrim(req, deps) {
   let failure;
   let validate3;
   try {
-    const written = parseApp(readFileSync48(devPath, "utf8"), readFileSync48(configPath, "utf8"));
+    const written = parseApp(readFileSync49(devPath, "utf8"), readFileSync49(configPath, "utf8"));
     const leftovers = leftoverNavRefs(written.nav.value, plan.removedIds);
     if (leftovers.length) failure = { error: "navigation still names screens this trim removed", leftovers };
     else {
@@ -46042,7 +46245,7 @@ async function runTemplateTrim(req, deps) {
     else if (compared) {
       failure = {
         ...failure,
-        error: `himi validate --strict failed on the trimmed app \u2014 the trim introduced ${plural(compared.introduced.length, "error")} the untrimmed app does not have: ${summarize3(compared.introduced)}`,
+        error: `himi validate --strict failed on the trimmed app \u2014 the trim introduced ${plural2(compared.introduced.length, "error")} the untrimmed app does not have: ${summarize3(compared.introduced)}`,
         introducedErrors: compared.introduced,
         preExistingErrors: compared.preExisting
       };
@@ -46058,7 +46261,7 @@ async function runTemplateTrim(req, deps) {
         ...base(validate3),
         ...preExisting.length ? {
           preExistingErrors: preExisting,
-          note: `trimmed; ${plural(preExisting.length, "error")} ${preExisting.length === 1 ? "was" : "were"} already present before trim: ${summarize3(preExisting)}`
+          note: `trimmed; ${plural2(preExisting.length, "error")} ${preExisting.length === 1 ? "was" : "were"} already present before trim: ${summarize3(preExisting)}`
         } : {}
       }
     };
@@ -46109,7 +46312,7 @@ function summarize3(errors) {
   const shown2 = errors.slice(0, 5).map(one).join("; ");
   return errors.length > 5 ? `${shown2}; and ${errors.length - 5} more` : shown2;
 }
-var TrimRefusal, LIT, ATOM, QUANT, CAP, SAFE_ROUTE_PATTERN, lineOf2, isStatic, entryLabel, isNode3, asItems, NAV_SCREEN_KEYS, sorted, refuse3, plural;
+var TrimRefusal, LIT, ATOM, QUANT, CAP, SAFE_ROUTE_PATTERN, lineOf2, isStatic, entryLabel, isNode3, asItems, NAV_SCREEN_KEYS, sorted, refuse3, plural2;
 var init_template_trim = __esm({
   "src/template-trim.ts"() {
     init_validate_descriptor();
@@ -46143,7 +46346,7 @@ var init_template_trim = __esm({
     NAV_SCREEN_KEYS = /* @__PURE__ */ new Set(["screenId", "parentScreenId", "contentScreenId", "badgeScreenId"]);
     sorted = (xs) => [...new Set(xs)].sort();
     refuse3 = (e) => ({ code: 2, result: { ok: false, error: e.message, ...e.detail } });
-    plural = (n, word) => `${n} ${word}${n === 1 ? "" : "s"}`;
+    plural2 = (n, word) => `${n} ${word}${n === 1 ? "" : "s"}`;
   }
 });
 
@@ -46773,8 +46976,8 @@ __export(pack_exports, {
 });
 import { createHash as createHash22 } from "node:crypto";
 import { deflateRawSync, inflateRawSync } from "node:zlib";
-import { existsSync as existsSync45, mkdirSync as mkdirSync21, readFileSync as readFileSync49, readdirSync as readdirSync25, rmSync as rmSync9, statSync as statSync11, writeFileSync as writeFileSync17 } from "node:fs";
-import { dirname as dirname26, join as join43, resolve as resolve37 } from "node:path";
+import { existsSync as existsSync46, mkdirSync as mkdirSync21, readFileSync as readFileSync50, readdirSync as readdirSync25, rmSync as rmSync9, statSync as statSync11, writeFileSync as writeFileSync17 } from "node:fs";
+import { dirname as dirname26, join as join44, resolve as resolve37 } from "node:path";
 function writeZip(entries) {
   const sorted2 = entries.slice().sort((a, b) => a.path < b.path ? -1 : a.path > b.path ? 1 : 0);
   const total = sorted2.reduce((n, e) => n + e.bytes.length, 0);
@@ -46868,13 +47071,13 @@ function inflateEntry(buf, entry) {
   return bytes2;
 }
 function readIf(path2) {
-  return existsSync45(path2) && statSync11(path2).isFile() ? readFileSync49(path2) : null;
+  return existsSync46(path2) && statSync11(path2).isFile() ? readFileSync50(path2) : null;
 }
 function listDir(dir) {
-  return existsSync45(dir) ? readdirSync25(dir).filter((f) => statSync11(join43(dir, f)).isFile()) : [];
+  return existsSync46(dir) ? readdirSync25(dir).filter((f) => statSync11(join44(dir, f)).isFile()) : [];
 }
 function gatherReleaseEntries(appDir2) {
-  const manifestPath = join43(appDir2, HIMI_PACKAGE_MANIFEST_PATH);
+  const manifestPath = join44(appDir2, HIMI_PACKAGE_MANIFEST_PATH);
   const manifestBytes = readIf(manifestPath);
   if (!manifestBytes) throw new Error(`no ${HIMI_PACKAGE_MANIFEST_PATH} in ${appDir2} \u2014 build a release there first`);
   const manifest = JSON.parse(manifestBytes.toString("utf8"));
@@ -46898,7 +47101,7 @@ function gatherReleaseEntries(appDir2) {
   }
   const missing = [];
   for (const rel of wanted) {
-    const bytes2 = readIf(join43(appDir2, rel));
+    const bytes2 = readIf(join44(appDir2, rel));
     if (bytes2) entries.push({ path: rel, bytes: bytes2 });
     else missing.push(rel);
   }
@@ -46909,12 +47112,12 @@ function gatherReleaseEntries(appDir2) {
     );
   }
   for (const name of SINGLETONS) {
-    const bytes2 = readIf(join43(appDir2, name));
+    const bytes2 = readIf(join44(appDir2, name));
     if (bytes2) entries.push({ path: name, bytes: bytes2 });
   }
   const skipped = [];
   for (const sub of ["screens", "bundles", "assets", "widgets"]) {
-    for (const f of listDir(join43(appDir2, sub))) {
+    for (const f of listDir(join44(appDir2, sub))) {
       if (!wanted.has(`${sub}/${f}`)) skipped.push(`${sub}/${f}`);
     }
   }
@@ -46947,18 +47150,18 @@ function buildEntries(appDir2, app, opts) {
   return { all, header, manifest, skipped };
 }
 function packRelease(releaseRoot, app, out, opts = {}) {
-  const appDir2 = join43(resolve37(releaseRoot), app);
+  const appDir2 = join44(resolve37(releaseRoot), app);
   const { all, header, skipped } = buildEntries(appDir2, app, opts);
   const buf = writeZip(all);
-  const isDir2 = existsSync45(out) && statSync11(out).isDirectory();
-  const outFile = isDir2 ? join43(resolve37(out), packageFileName(app, header.releaseId)) : resolve37(out);
+  const isDir2 = existsSync46(out) && statSync11(out).isDirectory();
+  const outFile = isDir2 ? join44(resolve37(out), packageFileName(app, header.releaseId)) : resolve37(out);
   mkdirSync21(dirname26(outFile), { recursive: true });
   writeFileSync17(outFile, buf);
   return { app, releaseId: header.releaseId, header, out: outFile, bytes: buf.length, entryCount: all.length, skipped };
 }
 function resolvePackageDirDest(outDir, app, releaseId) {
   const packagedApp = (dir) => {
-    const bytes2 = readIf(join43(dir, HIMI_PACKAGE_HEADER_PATH));
+    const bytes2 = readIf(join44(dir, HIMI_PACKAGE_HEADER_PATH));
     if (!bytes2) return void 0;
     try {
       return JSON.parse(bytes2.toString("utf8")).app;
@@ -46967,15 +47170,15 @@ function resolvePackageDirDest(outDir, app, releaseId) {
     }
   };
   const replaceable = (dir) => {
-    if (!existsSync45(dir)) return true;
+    if (!existsSync46(dir)) return true;
     if (!statSync11(dir).isDirectory()) return false;
     return readdirSync25(dir).length === 0 || packagedApp(dir) === app;
   };
-  if (existsSync45(outDir) && !statSync11(outDir).isDirectory()) {
+  if (existsSync46(outDir) && !statSync11(outDir).isDirectory()) {
     throw new Error(`refusing to write a package tree over ${outDir} \u2014 it is a file, not a directory`);
   }
   if (replaceable(outDir)) return outDir;
-  const child = join43(outDir, packageDirName(app, releaseId));
+  const child = join44(outDir, packageDirName(app, releaseId));
   if (!replaceable(child)) {
     throw new Error(
       `refusing to replace ${child}: it is not empty and is not a ${app} package (no ${HIMI_PACKAGE_HEADER_PATH}). Pass --out to a new or empty directory.`
@@ -46989,13 +47192,13 @@ function packReleaseToDir(releaseRoot, app, outDir, opts = {}) {
       "a package carrying the app's source has no --format dir form: readers that predate the source entry drop it before hashing a directory and refuse the package as tampered. Pack it as a .himi archive."
     );
   }
-  const appDir2 = join43(resolve37(releaseRoot), app);
+  const appDir2 = join44(resolve37(releaseRoot), app);
   const { all, header, skipped } = buildEntries(appDir2, app, opts);
   const dest = resolvePackageDirDest(resolve37(outDir), app, header.releaseId);
   rmSync9(dest, { recursive: true, force: true });
   let bytes2 = 0;
   for (const entry of all) {
-    const target = join43(dest, entry.path);
+    const target = join44(dest, entry.path);
     mkdirSync21(dirname26(target), { recursive: true });
     writeFileSync17(target, entry.bytes);
     bytes2 += entry.bytes.length;
@@ -47018,21 +47221,21 @@ function openPackageBuffer(buf) {
   return openFromEntries(readZip(buf), { requireHeader: true });
 }
 function openPackageFile(file) {
-  return openPackageBuffer(readFileSync49(file));
+  return openPackageBuffer(readFileSync50(file));
 }
 function openPackageDir(dir) {
   const root = resolve37(dir);
   const entries = /* @__PURE__ */ new Map();
   const walk2 = (rel) => {
-    const abs = rel ? join43(root, rel) : root;
+    const abs = rel ? join44(root, rel) : root;
     for (const name of readdirSync25(abs)) {
       const childRel = rel ? `${rel}/${name}` : name;
-      const childAbs = join43(abs, name);
+      const childAbs = join44(abs, name);
       if (statSync11(childAbs).isDirectory()) walk2(childRel);
-      else if (isSafeEntryName(childRel)) entries.set(childRel, readFileSync49(childAbs));
+      else if (isSafeEntryName(childRel)) entries.set(childRel, readFileSync50(childAbs));
     }
   };
-  if (!existsSync45(root)) throw new Error(`no such package directory: ${root}`);
+  if (!existsSync46(root)) throw new Error(`no such package directory: ${root}`);
   walk2("");
   const manifestBytes = entries.get(HIMI_PACKAGE_MANIFEST_PATH);
   if (manifestBytes) {
@@ -47074,10 +47277,10 @@ function unpackTo(buf, dest, appFallback) {
   if (!app) throw new Error("package declares no app id (no himi-package.json and no manifest.app)");
   if (!isSafeAppId(app)) throw new Error(`package declares an unsafe app id ${JSON.stringify(app)} \u2014 refusing to unpack it`);
   const root = resolve37(dest);
-  const appDir2 = join43(root, app);
+  const appDir2 = join44(root, app);
   rmSync9(appDir2, { recursive: true, force: true });
   for (const [rel, bytes2] of entries) {
-    const target = join43(appDir2, rel);
+    const target = join44(appDir2, rel);
     mkdirSync21(dirname26(target), { recursive: true });
     writeFileSync17(target, bytes2);
   }
@@ -47113,20 +47316,20 @@ __export(app_source_exports, {
   writeConflicts: () => writeConflicts,
   zipAppSource: () => zipAppSource
 });
-import { readdirSync as readdirSync26, lstatSync as lstatSync8, readFileSync as readFileSync50, mkdirSync as mkdirSync22, writeFileSync as writeFileSync18, existsSync as existsSync46, rmSync as rmSync10, rmdirSync as rmdirSync2, unlinkSync as unlinkSync3 } from "node:fs";
-import { join as join44, resolve as resolve38, sep as sep10 } from "node:path";
+import { readdirSync as readdirSync26, lstatSync as lstatSync8, readFileSync as readFileSync51, mkdirSync as mkdirSync22, writeFileSync as writeFileSync18, existsSync as existsSync47, rmSync as rmSync10, rmdirSync as rmdirSync2, unlinkSync as unlinkSync3 } from "node:fs";
+import { join as join45, resolve as resolve38, sep as sep10 } from "node:path";
 import { deflateRawSync as deflateRawSync2 } from "node:zlib";
 function walkSourceTree(dir, file, skip) {
   const walk2 = (relDir) => {
-    for (const name of readdirSync26(join44(dir, relDir))) {
-      const rel = relDir ? join44(relDir, name) : name;
-      const st = lstatSync8(join44(dir, rel));
+    for (const name of readdirSync26(join45(dir, relDir))) {
+      const rel = relDir ? join45(relDir, name) : name;
+      const st = lstatSync8(join45(dir, rel));
       if (st.isSymbolicLink()) {
         skip(rel);
         continue;
       }
       if (st.isDirectory()) {
-        if (isDeniedSourceDir(name, relDir) || existsSync46(join44(dir, rel, PACKAGE_DIR_MARKER))) skip(rel);
+        if (isDeniedSourceDir(name, relDir) || existsSync47(join45(dir, rel, PACKAGE_DIR_MARKER))) skip(rel);
         else walk2(rel);
         continue;
       }
@@ -47144,7 +47347,7 @@ function collectAppSource(dir) {
   const skipped = [];
   walkSourceTree(
     dir,
-    (archivePath, hostRel) => entries.push({ path: archivePath, bytes: readFileSync50(join44(dir, hostRel)) }),
+    (archivePath, hostRel) => entries.push({ path: archivePath, bytes: readFileSync51(join45(dir, hostRel)) }),
     (hostRel) => skipped.push(hostRel)
   );
   entries.sort((a, b) => a.path < b.path ? -1 : a.path > b.path ? 1 : 0);
@@ -47198,13 +47401,13 @@ function writeAppSource(entries, destDir) {
     const segments = entry.path.split("/");
     let dir = root;
     for (const segment of segments.slice(0, -1)) {
-      dir = join44(dir, segment);
+      dir = join45(dir, segment);
       const kind = pathKind(dir);
       if (kind?.isSymbolicLink()) unlinkSync3(dir);
       else if (kind) continue;
       mkdirSync22(dir);
     }
-    const target = join44(root, ...segments);
+    const target = join45(root, ...segments);
     if (pathKind(target)?.isSymbolicLink()) unlinkSync3(target);
     writeFileSync18(target, entry.bytes);
     written.push(entry.path);
@@ -47212,7 +47415,7 @@ function writeAppSource(entries, destDir) {
   return written;
 }
 function staleSourcePaths(entries, destDir) {
-  if (!existsSync46(destDir)) return [];
+  if (!existsSync47(destDir)) return [];
   const archived = new Set(entries.map((e) => e.path));
   const stale = [];
   walkSourceTree(destDir, (archivePath) => {
@@ -47239,7 +47442,7 @@ function writeConflicts(entries, destDir) {
     let dir = root;
     let stop = false;
     for (const [i, segment] of segments.slice(0, -1).entries()) {
-      dir = join44(dir, segment);
+      dir = join45(dir, segment);
       const kind2 = pathKind(dir);
       if (!kind2 || kind2.isSymbolicLink()) {
         stop = true;
@@ -47251,7 +47454,7 @@ function writeConflicts(entries, destDir) {
       break;
     }
     if (stop) continue;
-    const kind = pathKind(join44(root, ...segments));
+    const kind = pathKind(join45(root, ...segments));
     if (kind && !kind.isSymbolicLink() && kind.isDirectory()) {
       say(entry.path, "is a directory here, but the release has a file at that path");
     }
@@ -47261,22 +47464,22 @@ function writeConflicts(entries, destDir) {
 function removeStaleSource(entries, destDir) {
   const root = resolve38(destDir);
   const removed = staleSourcePaths(entries, root);
-  for (const rel of removed) rmSync10(join44(root, ...rel.split("/")), { force: true });
+  for (const rel of removed) rmSync10(join45(root, ...rel.split("/")), { force: true });
   const needed = /* @__PURE__ */ new Set();
   for (const entry of entries) {
     if (isDeniedSourcePath(entry.path)) continue;
     const segments = entry.path.split("/");
     for (let i = 1; i < segments.length; i++) needed.add(segments.slice(0, i).join("/"));
   }
-  if (existsSync46(root)) pruneEmptyDirs(root, "", needed, removed);
+  if (existsSync47(root)) pruneEmptyDirs(root, "", needed, removed);
   return removed.sort();
 }
 function pruneEmptyDirs(root, rel, needed, removed) {
   let empty = true;
-  for (const name of readdirSync26(rel ? join44(root, rel) : root)) {
-    const childRel = rel ? join44(rel, name) : name;
+  for (const name of readdirSync26(rel ? join45(root, rel) : root)) {
+    const childRel = rel ? join45(rel, name) : name;
     const posix4 = childRel.split(sep10).join("/");
-    const kind = lstatSync8(join44(root, childRel));
+    const kind = lstatSync8(join45(root, childRel));
     if (kind.isSymbolicLink() || !kind.isDirectory() || isDeniedSourceDir(name, rel)) {
       empty = false;
       continue;
@@ -47286,7 +47489,7 @@ function pruneEmptyDirs(root, rel, needed, removed) {
       empty = false;
       continue;
     }
-    rmdirSync2(join44(root, childRel));
+    rmdirSync2(join45(root, childRel));
     removed.push(`${posix4}/`);
   }
   return empty;
@@ -47341,13 +47544,13 @@ __export(eject_exports, {
   EJECTABLE: () => EJECTABLE,
   ejectModule: () => ejectModule
 });
-import { existsSync as existsSync47, mkdirSync as mkdirSync23, readFileSync as readFileSync51, writeFileSync as writeFileSync19 } from "node:fs";
-import { dirname as dirname27, join as join45, relative as relative8, resolve as resolve39, sep as sep11 } from "node:path";
+import { existsSync as existsSync48, mkdirSync as mkdirSync23, readFileSync as readFileSync52, writeFileSync as writeFileSync19 } from "node:fs";
+import { dirname as dirname27, join as join46, relative as relative9, resolve as resolve39, sep as sep11 } from "node:path";
 function locate(repoRootOrCwd, mod) {
   const inRepo = resolve39(repoRootOrCwd, `stdlib/flows/${mod}/src/index.ts`);
-  if (existsSync47(inRepo)) return { path: inRepo, form: "source" };
+  if (existsSync48(inRepo)) return { path: inRepo, form: "source" };
   const dist = resolve39(repoRootOrCwd, `node_modules/@wix/himalaya/dist/${mod}.mjs`);
-  if (existsSync47(dist)) return { path: dist, form: "bundle" };
+  if (existsSync48(dist)) return { path: dist, form: "bundle" };
   return null;
 }
 function specifiersFor(mod) {
@@ -47371,7 +47574,7 @@ function ejectModule(opts) {
     };
   }
   const ext = found.form === "source" ? "ts" : "mjs";
-  const target = join45(contentDir2, "tier5-src", "_ejected", `${mod}.${ext}`);
+  const target = join46(contentDir2, "tier5-src", "_ejected", `${mod}.${ext}`);
   mkdirSync23(dirname27(target), { recursive: true });
   const banner = `// EJECTED from @wix/himalaya/${mod}. This app owns this file now.
 //
@@ -47385,17 +47588,17 @@ function ejectModule(opts) {
 // gate still applies. Ejecting buys layout and flow, never the floor.
 
 `;
-  const normalized = readFileSync51(found.path, "utf8").replace(
+  const normalized = readFileSync52(found.path, "utf8").replace(
     /(["'])@himalaya\/([a-z0-9-]+(?:\/[a-z0-9-]+)?)\1/g,
     (_m, q, sub) => `${q}@wix/himalaya/${sub}${q}`
   );
   writeFileSync19(target, banner + normalized);
   const rewired = [];
   for (const f of files) {
-    if (!existsSync47(f)) continue;
-    const before = readFileSync51(f, "utf8");
+    if (!existsSync48(f)) continue;
+    const before = readFileSync52(f, "utf8");
     let after = before;
-    let rel = relative8(dirname27(f), target).split(sep11).join("/").replace(/\.tsx?$/, ".js");
+    let rel = relative9(dirname27(f), target).split(sep11).join("/").replace(/\.tsx?$/, ".js");
     if (!rel.startsWith(".")) rel = `./${rel}`;
     for (const spec of specifiersFor(mod)) {
       const q = spec.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
@@ -47513,8 +47716,8 @@ var init_app_map = __esm({
 });
 
 // src/wix-writes.ts
-import { existsSync as existsSync48, readFileSync as readFileSync52 } from "node:fs";
-import { join as join46 } from "node:path";
+import { existsSync as existsSync49, readFileSync as readFileSync53 } from "node:fs";
+import { join as join47 } from "node:path";
 function isProvenRead(method, path2) {
   if (/[#\x00-\x1F\x7F]/.test(path2)) return false;
   const verb = method.toUpperCase();
@@ -47595,11 +47798,11 @@ function parseDataAccess(text5, from) {
 }
 function readDataAccess(dir) {
   for (const name of ["SPEC.md", "MOBILE-UX.md"]) {
-    const p = join46(dir, name);
-    if (!existsSync48(p)) continue;
+    const p = join47(dir, name);
+    if (!existsSync49(p)) continue;
     let text5;
     try {
-      text5 = readFileSync52(p, "utf8");
+      text5 = readFileSync53(p, "utf8");
     } catch {
       continue;
     }
@@ -47706,14 +47909,14 @@ __export(test_exports, {
   scopeDescriptors: () => scopeDescriptors,
   writeRecordedMocks: () => writeRecordedMocks
 });
-import { existsSync as existsSync49, mkdirSync as mkdirSync24, readFileSync as readFileSync53, writeFileSync as writeFileSync20 } from "node:fs";
-import { join as join47, resolve as resolve40 } from "node:path";
+import { existsSync as existsSync50, mkdirSync as mkdirSync24, readFileSync as readFileSync54, writeFileSync as writeFileSync20 } from "node:fs";
+import { join as join48, resolve as resolve40 } from "node:path";
 function readTestConfig(dir) {
   const p = resolve40(dir, TEST_CONFIG_FILE);
-  if (!existsSync49(p)) return {};
+  if (!existsSync50(p)) return {};
   let parsed;
   try {
-    parsed = JSON.parse(readFileSync53(p, "utf8"));
+    parsed = JSON.parse(readFileSync54(p, "utf8"));
   } catch (e) {
     throw new Error(`${TEST_CONFIG_FILE} is not valid JSON \u2014 ${e.message}`);
   }
@@ -47760,7 +47963,7 @@ function readTestConfig(dir) {
 function readNetRules(path2) {
   let parsed;
   try {
-    parsed = JSON.parse(readFileSync53(path2, "utf8"));
+    parsed = JSON.parse(readFileSync54(path2, "utf8"));
   } catch (e) {
     throw new Error(`--net ${path2} could not be read as JSON \u2014 ${e.message}`);
   }
@@ -47781,7 +47984,7 @@ function readNetRules(path2) {
 function defaultNetRules(dir) {
   for (const rel of ["dev/net-mocks.json", "tests/net-mocks.json"]) {
     const p = resolve40(dir, rel);
-    if (existsSync49(p)) {
+    if (existsSync50(p)) {
       const rules = readNetRules(p);
       if (rules.length) return { rules, from: rel };
     }
@@ -47797,7 +48000,7 @@ function readCannedResponses() {
   ];
   for (const url of candidates) {
     try {
-      const parsed = JSON.parse(readFileSync53(url, "utf8"));
+      const parsed = JSON.parse(readFileSync54(url, "utf8"));
       const byKey = {};
       for (const [k, v] of Object.entries(parsed)) {
         if (!k.startsWith("//")) byKey[k] = v;
@@ -47887,8 +48090,8 @@ function writeRecordedMocks(opts) {
     mkdir: (p) => mkdirSync24(p, { recursive: true }),
     write: (p, s) => writeFileSync20(p, s)
   };
-  fs.mkdir(join47(opts.dir, "dev"));
-  fs.write(join47(opts.dir, "dev", "net-mocks.json"), JSON.stringify(opts.mocks, null, 2) + "\n");
+  fs.mkdir(join48(opts.dir, "dev"));
+  fs.write(join48(opts.dir, "dev", "net-mocks.json"), JSON.stringify(opts.mocks, null, 2) + "\n");
   return { ok: true, rules, to: "dev/net-mocks.json" };
 }
 function scopeDescriptors(descriptors, requestedIds, invalidScreens) {
@@ -48391,14 +48594,14 @@ var mobile_ux_lint_exports = {};
 __export(mobile_ux_lint_exports, {
   mobileUxIssues: () => mobileUxIssues
 });
-import { existsSync as existsSync50, readFileSync as readFileSync54 } from "node:fs";
-import { join as join48 } from "node:path";
+import { existsSync as existsSync51, readFileSync as readFileSync55 } from "node:fs";
+import { join as join49 } from "node:path";
 function mobileUxIssues(dir, strict) {
-  const file = join48(dir, "MOBILE-UX.md");
-  if (!existsSync50(file)) return [];
+  const file = join49(dir, "MOBILE-UX.md");
+  if (!existsSync51(file)) return [];
   let text5;
   try {
-    text5 = readFileSync54(file, "utf8");
+    text5 = readFileSync55(file, "utf8");
   } catch {
     return [];
   }
@@ -50073,8 +50276,8 @@ __export(functions_exports, {
   resolveFunctionsTarget: () => resolveFunctionsTarget,
   runRemoteFunctionOperation: () => runRemoteFunctionOperation
 });
-import { readFileSync as readFileSync55, existsSync as existsSync51 } from "node:fs";
-import { join as join49, resolve as resolve41 } from "node:path";
+import { readFileSync as readFileSync56, existsSync as existsSync52 } from "node:fs";
+import { join as join50, resolve as resolve41 } from "node:path";
 function resolveFunctionsTarget(input) {
   const explicitUrl = input.functionsUrl?.trim();
   if (explicitUrl) return { mode: "remote", baseUrl: explicitUrl };
@@ -50093,9 +50296,9 @@ async function loadFunctionsApp(dir) {
   }
   const sources = {};
   for (const definition of config.functions.functions) {
-    const source = [".ts", ".js", ".mts", ".mjs"].map((extension) => join49(loaded.dir, "functions", `${definition.name}${extension}`)).find(existsSync51);
+    const source = [".ts", ".js", ".mts", ".mjs"].map((extension) => join50(loaded.dir, "functions", `${definition.name}${extension}`)).find(existsSync52);
     if (!source) throw new Error(`missing source for function ${definition.name}; expected functions/${definition.name}.ts`);
-    sources[definition.name] = readFileSync55(source, "utf8");
+    sources[definition.name] = readFileSync56(source, "utf8");
   }
   const data = config.cms || config.data ? mergeDataResources(config) : void 0;
   const dataErrors = validateDataResources(data, loaded.name).filter((issue2) => issue2.severity === "error");
@@ -50255,10 +50458,10 @@ __export(studio_reel_exports, {
   utcDay: () => utcDay
 });
 import { createHash as createHash25 } from "node:crypto";
-import { lstatSync as lstatSync9, readFileSync as readFileSync56 } from "node:fs";
-import { basename as basename12, join as join50 } from "node:path";
+import { lstatSync as lstatSync9, readFileSync as readFileSync57 } from "node:fs";
+import { basename as basename13, join as join51 } from "node:path";
 function loadMemory2(dir) {
-  const m = readJson5(join50(dir, ".himi", "studio", "memory.json"));
+  const m = readJson5(join51(dir, ".himi", "studio", "memory.json"));
   if (!isObj2(m) || m.version !== 1 || !isObj2(m.shots) || !Array.isArray(m.timeline)) return null;
   const shots = [];
   for (const [id, s] of Object.entries(m.shots)) {
@@ -50295,8 +50498,8 @@ function planReel(dir) {
   const memory = loadMemory2(dir);
   const { entries } = readProgress(dir);
   const summary = summarizeProgress(entries);
-  const manifest = readJson5(join50(dir, "himalaya.content.json"));
-  const tokens = readJson5(join50(dir, "tokens.json"));
+  const manifest = readJson5(join51(dir, "himalaya.content.json"));
+  const tokens = readJson5(join51(dir, "tokens.json"));
   const accentToken = tokens?.colors?.accentPrimary;
   const accentRaw = typeof accentToken === "string" ? accentToken : accentToken?.light;
   const accent = typeof accentRaw === "string" && ACCENT.test(accentRaw) ? accentRaw : DEFAULT_ACCENT;
@@ -50310,14 +50513,15 @@ function planReel(dir) {
   const postcards = entries.map((e) => ({
     ts: e.ts,
     message: e.message,
-    step: str(e.step),
-    files: (Array.isArray(e.images) ? e.images : []).map((i) => isObj2(i) && typeof i.file === "string" ? basename12(i.file) : "").filter((f) => HISTORY_NAME.test(f))
+    step: isCliEntry(e) ? null : str(e.step),
+    by: isCliEntry(e) ? CLI_AUTHOR : null,
+    files: (Array.isArray(e.images) ? e.images : []).map((i) => isObj2(i) && typeof i.file === "string" ? basename13(i.file) : "").filter((f) => HISTORY_NAME.test(f))
   }));
   const times = [summary.startedAt, ...timeline.map((t) => t.ts), memory?.createdAt].filter((x) => !!x).sort();
   const startedAt = times[0] ?? null;
   const endedAt = [summary.lastAt, ...timeline.map((t) => t.ts)].filter((x) => !!x).sort().pop() ?? null;
   return {
-    app: typeof manifest?.name === "string" && manifest.name ? manifest.name : basename12(dir),
+    app: typeof manifest?.name === "string" && manifest.name ? manifest.name : basename13(dir),
     accent,
     startedAt,
     endedAt,
@@ -50338,10 +50542,10 @@ function inlineImages(dir, plan, budget = REEL_BUDGET_BYTES) {
   const verified = (f) => {
     if (!HISTORY_NAME.test(f)) return null;
     try {
-      const path2 = join50(dir, HISTORY_DIR, f);
+      const path2 = join51(dir, HISTORY_DIR, f);
       const st = lstatSync9(path2);
       if (!st.isFile() || st.nlink !== 1) return null;
-      const bytes2 = readFileSync56(path2);
+      const bytes2 = readFileSync57(path2);
       return createHash25("sha256").update(bytes2).digest("hex") === f.slice(0, 64) && imageExtension(bytes2) === f.slice(65) ? bytes2 : null;
     } catch {
       return null;
@@ -50435,7 +50639,7 @@ function renderReel(plan, images) {
 .flipcap{flex:1;min-width:220px}.flipcap .t{font-size:40px;font-weight:700;font-variant-numeric:tabular-nums;color:var(--accent)}.bar{height:4px;background:var(--line);border-radius:2px;margin-top:16px}.bar div{height:4px;background:var(--accent);border-radius:2px;width:0}
 .grid{display:grid;grid-template-columns:repeat(auto-fill,minmax(150px,1fr));gap:18px}.grid figure{margin:0;text-align:center}.grid img{width:100%;aspect-ratio:390/844;object-fit:cover;object-position:top;border:6px solid #111;border-radius:22px;background:#fff}
 figcaption{font-size:12px;color:var(--muted);margin-top:6px;word-break:break-all}
-.log{list-style:none;padding:0;margin:0}.log li{display:flex;gap:14px;padding:12px 0;border-top:1px solid var(--line)}.log .t{min-width:52px;color:var(--muted);font-variant-numeric:tabular-nums}.log .s{font-size:12px;color:var(--muted);text-transform:capitalize}
+.log{list-style:none;padding:0;margin:0}.log li{display:flex;gap:14px;padding:12px 0;border-top:1px solid var(--line)}.log .t{min-width:52px;color:var(--muted);font-variant-numeric:tabular-nums}.log .s{font-size:12px;color:var(--muted);text-transform:capitalize}.log .by{font-size:12px;color:var(--muted)}
 .log .imgs{display:flex;gap:8px;margin-top:8px;flex-wrap:wrap}.log .imgs img{height:120px;border-radius:10px;border:1px solid var(--line)}
 footer{margin-top:48px;font-size:12px;color:var(--muted)}
 </style></head><body><div class="wrap">
@@ -50446,7 +50650,7 @@ ${flip}
 <h2>Where it ended up</h2>
 <div class="grid">${plan.finals.map((f) => `<figure>${img(f.file, f.id)}<figcaption>${escapeHtml(f.id)}</figcaption></figure>`).join("")}</div>
 <h2>Postcards</h2>
-<ul class="log">${plan.postcards.map((c) => `<li><div class="t">${clock(c.ts)}</div><div><div>${escapeHtml(c.message)}</div>${c.step ? `<div class="s">step ${JOURNEY_STEPS.indexOf(c.step) + 1} \xB7 ${escapeHtml(c.step)}</div>` : ""}${c.files.length ? `<div class="imgs">${c.files.map((f) => img(f, c.message)).join("")}</div>` : ""}</div></li>`).join("") || `<li class="muted">No postcards were journaled.</li>`}</ul>
+<ul class="log">${plan.postcards.map((c) => `<li><div class="t">${clock(c.ts)}</div><div><div>${escapeHtml(c.message)}</div>${c.step ? `<div class="s">step ${JOURNEY_STEPS.indexOf(c.step) + 1} \xB7 ${escapeHtml(c.step)}</div>` : ""}${c.by ? `<div class="by">noted by ${escapeHtml(c.by)}</div>` : ""}${c.files.length ? `<div class="imgs">${c.files.map((f) => img(f, c.message)).join("")}</div>` : ""}</div></li>`).join("") || `<li class="muted">No postcards were journaled.</li>`}</ul>
 <footer>Built with himi.${plan.dropped ? ` ${count2(plan.dropped)} pictures were left out to keep this file small.` : ""}</footer>
 </div>
 <script>
@@ -50475,7 +50679,7 @@ var init_studio_reel = __esm({
     mimeOf = (file) => MIME2[file.slice(65)] ?? "image/png";
     readJson5 = (file) => {
       try {
-        return JSON.parse(readFileSync56(file, "utf8"));
+        return JSON.parse(readFileSync57(file, "utf8"));
       } catch {
         return null;
       }
@@ -50506,9 +50710,9 @@ __export(native_decode_exports, {
   runNativeDecode: () => runNativeDecode
 });
 import { execFileSync as execFileSync5, spawnSync as spawnSync2 } from "node:child_process";
-import { existsSync as existsSync52, mkdtempSync as mkdtempSync2, readFileSync as readFileSync57, rmSync as rmSync11, writeFileSync as writeFileSync21 } from "node:fs";
+import { existsSync as existsSync53, mkdtempSync as mkdtempSync2, readFileSync as readFileSync58, rmSync as rmSync11, writeFileSync as writeFileSync21 } from "node:fs";
 import { tmpdir as tmpdir3 } from "node:os";
-import { join as join51 } from "node:path";
+import { join as join52 } from "node:path";
 import { fileURLToPath as fileURLToPath20 } from "node:url";
 function nativeDecodePackageDir() {
   return fileURLToPath20(new URL("../../../core/runtime/ios/HimalayaCore/", import.meta.url));
@@ -50518,8 +50722,8 @@ function nativeDecodeAndroidHarnessDir() {
 }
 function nativeOracleShipped() {
   return {
-    ios: existsSync52(join51(nativeDecodePackageDir(), "Package.swift")),
-    android: existsSync52(join51(nativeDecodeAndroidHarnessDir(), "gradlew"))
+    ios: existsSync53(join52(nativeDecodePackageDir(), "Package.swift")),
+    android: existsSync53(join52(nativeDecodeAndroidHarnessDir(), "gradlew"))
   };
 }
 function detectNativeDecode(options = {}) {
@@ -50530,7 +50734,7 @@ function detectNativeDecode(options = {}) {
     return { platform: "ios", available: false, reason: `the iOS decoder oracle requires macOS (darwin); this host is ${hostPlatform}` };
   }
   if (!swiftAvailable) return { platform: "ios", available: false, reason: "swift is not on PATH" };
-  const packageAvailable = options.packageAvailable ?? existsSync52(join51(packageDir, "Package.swift"));
+  const packageAvailable = options.packageAvailable ?? existsSync53(join52(packageDir, "Package.swift"));
   if (!packageAvailable) {
     return {
       platform: "ios",
@@ -50542,7 +50746,7 @@ function detectNativeDecode(options = {}) {
 }
 function localPropertiesSdk(harnessDir) {
   try {
-    const match = readFileSync57(join51(harnessDir, "local.properties"), "utf8").match(/^sdk\.dir\s*=\s*(.+)$/m);
+    const match = readFileSync58(join52(harnessDir, "local.properties"), "utf8").match(/^sdk\.dir\s*=\s*(.+)$/m);
     return match?.[1]?.trim().replace(/\\([ :\\])/g, "$1") ?? null;
   } catch {
     return null;
@@ -50550,8 +50754,8 @@ function localPropertiesSdk(harnessDir) {
 }
 function detectAndroidNativeDecode(options = {}) {
   const harnessDir = options.harnessDir ?? nativeDecodeAndroidHarnessDir();
-  const gradlew = join51(harnessDir, "gradlew");
-  const gradlewAvailable = options.gradlewAvailable ?? existsSync52(gradlew);
+  const gradlew = join52(harnessDir, "gradlew");
+  const gradlewAvailable = options.gradlewAvailable ?? existsSync53(gradlew);
   if (!gradlewAvailable) {
     return {
       platform: "android",
@@ -50561,7 +50765,7 @@ function detectAndroidNativeDecode(options = {}) {
   }
   const androidHome = options.androidHome ?? process.env.ANDROID_HOME ?? "";
   const sdk = androidHome.trim() || (options.localPropertiesSdk !== void 0 ? options.localPropertiesSdk : localPropertiesSdk(harnessDir));
-  const sdkAvailable = options.sdkAvailable ?? (typeof sdk === "string" && sdk.length > 0 && existsSync52(sdk));
+  const sdkAvailable = options.sdkAvailable ?? (typeof sdk === "string" && sdk.length > 0 && existsSync53(sdk));
   if (!sdkAvailable) {
     return {
       platform: "android",
@@ -50633,14 +50837,14 @@ function parseNativeDecodeOutput(stdout, expectedScreenIds, platform = "ios") {
   return verdicts;
 }
 function runNativeDecode(options) {
-  const descriptorDir = mkdtempSync2(join51(tmpdir3(), "himi-native-decode-"));
+  const descriptorDir = mkdtempSync2(join52(tmpdir3(), "himi-native-decode-"));
   const startedAt = Date.now();
   try {
     for (const descriptor of options.descriptors) {
       if (typeof descriptor.descriptorJson !== "string") {
         throw new Error(`native decode cannot judge ${descriptor.screenId}: the release builder did not return its exact baked JSON bytes`);
       }
-      writeFileSync21(join51(descriptorDir, `${encodeURIComponent(descriptor.screenId)}.json`), descriptor.descriptorJson);
+      writeFileSync21(join52(descriptorDir, `${encodeURIComponent(descriptor.screenId)}.json`), descriptor.descriptorJson);
     }
     options.progress?.("building cached Swift oracle");
     execFileSync5("swift", ["build", "--package-path", options.packageDir, "--product", "himi-decode-oracle"], {
@@ -50652,7 +50856,7 @@ function runNativeDecode(options) {
       encoding: "utf8"
     }).trim();
     options.progress?.(`running real Swift decoder over ${options.descriptors.length} screen${options.descriptors.length === 1 ? "" : "s"}`);
-    const stdout = execFileSync5(join51(binPath, "himi-decode-oracle"), ["--dir", descriptorDir], {
+    const stdout = execFileSync5(join52(binPath, "himi-decode-oracle"), ["--dir", descriptorDir], {
       stdio: ["ignore", "pipe", "pipe"],
       encoding: "utf8"
     });
@@ -50670,15 +50874,15 @@ function runNativeDecode(options) {
   }
 }
 function runAndroidNativeDecode(options) {
-  const descriptorDir = mkdtempSync2(join51(tmpdir3(), "himi-native-decode-android-"));
-  const outputPath = join51(descriptorDir, "verdicts.ndjson");
+  const descriptorDir = mkdtempSync2(join52(tmpdir3(), "himi-native-decode-android-"));
+  const outputPath = join52(descriptorDir, "verdicts.ndjson");
   const startedAt = Date.now();
   try {
     for (const descriptor of options.descriptors) {
       if (typeof descriptor.descriptorJson !== "string") {
         throw new Error(`native decode cannot judge ${descriptor.screenId}: the release builder did not return its exact baked JSON bytes`);
       }
-      writeFileSync21(join51(descriptorDir, `${encodeURIComponent(descriptor.screenId)}.json`), descriptor.descriptorJson);
+      writeFileSync21(join52(descriptorDir, `${encodeURIComponent(descriptor.screenId)}.json`), descriptor.descriptorJson);
     }
     options.progress?.(`running real Kotlin decoder over ${options.descriptors.length} screen${options.descriptors.length === 1 ? "" : "s"}`);
     execFileSync5(options.gradlew, [
@@ -50693,7 +50897,7 @@ function runAndroidNativeDecode(options) {
       stdio: ["ignore", "ignore", "pipe"],
       encoding: "utf8"
     });
-    const stdout = readFileSync57(outputPath, "utf8");
+    const stdout = readFileSync58(outputPath, "utf8");
     return {
       platform: "android",
       verdicts: parseNativeDecodeOutput(stdout, options.descriptors.map((descriptor) => descriptor.screenId), "android"),
@@ -50763,13 +50967,13 @@ __export(browser_authoring_exports, {
 });
 import { createServer as createServer3 } from "node:http";
 import { createHash as createHash26, randomBytes as randomBytes4 } from "node:crypto";
-import { existsSync as existsSync53, readdirSync as readdirSync27, readFileSync as readFileSync58, realpathSync as realpathSync6, statSync as statSync12 } from "node:fs";
-import { join as join52, posix as posix2, relative as relative9, sep as sep12 } from "node:path";
+import { existsSync as existsSync54, readdirSync as readdirSync27, readFileSync as readFileSync59, realpathSync as realpathSync6, statSync as statSync12 } from "node:fs";
+import { join as join53, posix as posix2, relative as relative10, sep as sep12 } from "node:path";
 function humanMs(ms) {
   return ms < 1e3 ? `${ms}ms` : `${Math.round(ms / 1e3)}s`;
 }
 function collectWorkerSources(tier5SrcDir, bundleName) {
-  const root = join52(tier5SrcDir, bundleName);
+  const root = join53(tier5SrcDir, bundleName);
   const files = {};
   const visitedDirs = /* @__PURE__ */ new Set();
   const walk2 = (abs, rel) => {
@@ -50777,16 +50981,16 @@ function collectWorkerSources(tier5SrcDir, bundleName) {
     if (visitedDirs.has(real)) return;
     visitedDirs.add(real);
     for (const name of readdirSync27(abs).sort()) {
-      const childAbs = join52(abs, name);
+      const childAbs = join53(abs, name);
       const childRel = posix2.join(rel, name);
       if (statSync12(childAbs).isDirectory()) {
         walk2(childAbs, childRel);
       } else if (/\.(ts|tsx|js|mjs|json)$/.test(name)) {
-        files[childRel] = readFileSync58(childAbs, "utf8");
+        files[childRel] = readFileSync59(childAbs, "utf8");
       }
     }
   };
-  if (!existsSync53(root)) return null;
+  if (!existsSync54(root)) return null;
   walk2(root, `/tier5-src/${bundleName}`);
   const entry = [`/tier5-src/${bundleName}/index.ts`, `/tier5-src/${bundleName}/index.js`].find((p) => p in files);
   if (!entry) return null;
@@ -50803,20 +51007,20 @@ function collectRelativeSiblings(files, tier5SrcDir) {
       const spec = m[1];
       const virtual = posix2.normalize(posix2.join(dir, spec));
       if (!virtual.startsWith("/tier5-src/")) continue;
-      const onDisk = join52(tier5SrcDir, virtual.slice("/tier5-src/".length));
+      const onDisk = join53(tier5SrcDir, virtual.slice("/tier5-src/".length));
       const candidates = [
         onDisk,
         `${onDisk}.ts`,
         `${onDisk}.js`,
         onDisk.replace(/\.js$/, ".ts"),
-        join52(onDisk, "index.ts"),
-        join52(onDisk, "index.js")
+        join53(onDisk, "index.ts"),
+        join53(onDisk, "index.js")
       ];
       for (const abs of candidates) {
-        if (!existsSync53(abs) || statSync12(abs).isDirectory()) continue;
-        const key2 = `/tier5-src/${relative9(tier5SrcDir, abs).split(sep12).join(posix2.sep)}`;
+        if (!existsSync54(abs) || statSync12(abs).isDirectory()) continue;
+        const key2 = `/tier5-src/${relative10(tier5SrcDir, abs).split(sep12).join(posix2.sep)}`;
         if (key2 in files) break;
-        files[key2] = readFileSync58(abs, "utf8");
+        files[key2] = readFileSync59(abs, "utf8");
         queue.push(key2);
         break;
       }
@@ -50851,7 +51055,7 @@ function collectSdkModules(files, resolveSubpath) {
 function sdkSubpathReader(resolve48) {
   return (sub) => {
     try {
-      return readFileSync58(resolve48(`@wix/himalaya/${sub}`), "utf8");
+      return readFileSync59(resolve48(`@wix/himalaya/${sub}`), "utf8");
     } catch {
       return null;
     }
@@ -51023,8 +51227,8 @@ __export(coverage_exports, {
   suppressedNativeKeys: () => suppressedNativeKeys,
   trendAndStore: () => trendAndStore
 });
-import { existsSync as existsSync54, mkdirSync as mkdirSync25, readFileSync as readFileSync59, writeFileSync as writeFileSync22 } from "node:fs";
-import { dirname as dirname28, join as join53 } from "node:path";
+import { existsSync as existsSync55, mkdirSync as mkdirSync25, readFileSync as readFileSync60, writeFileSync as writeFileSync22 } from "node:fs";
+import { dirname as dirname28, join as join54 } from "node:path";
 function suppressedNativeKeys(oracle) {
   return [...oracle.ios ? [] : ["native-decode|ios"], ...oracle.android ? [] : ["native-decode|android"]];
 }
@@ -51204,11 +51408,11 @@ function assembleLedger(r, options = {}) {
   return out;
 }
 function trendAndStore(dir, entries, suppressed) {
-  const p = join53(dir, LEDGER_FILE);
+  const p = join54(dir, LEDGER_FILE);
   let previous = null;
   try {
-    if (existsSync54(p)) {
-      const parsed = JSON.parse(readFileSync59(p, "utf8"));
+    if (existsSync55(p)) {
+      const parsed = JSON.parse(readFileSync60(p, "utf8"));
       if (Array.isArray(parsed.keys)) previous = parsed.keys.filter((k) => typeof k === "string");
     }
   } catch {
@@ -51247,11 +51451,11 @@ function formatLedger(entries, trend) {
   return out.join("\n");
 }
 function diffAndStoreObservations(dir, current) {
-  const p = join53(dir, OBS_FILE);
+  const p = join54(dir, OBS_FILE);
   let previous = null;
   try {
-    if (existsSync54(p)) {
-      const parsed = JSON.parse(readFileSync59(p, "utf8"));
+    if (existsSync55(p)) {
+      const parsed = JSON.parse(readFileSync60(p, "utf8"));
       if (parsed.screens && typeof parsed.screens === "object" && !Array.isArray(parsed.screens) && Object.values(parsed.screens).every(
         (v) => Array.isArray(v) && v.every((l) => typeof l === "string")
       )) {
@@ -51300,8 +51504,8 @@ var LEDGER_FILE, OBS_FILE;
 var init_coverage = __esm({
   "src/coverage.ts"() {
     init_native_decode();
-    LEDGER_FILE = join53(".himi", "test-ledger.json");
-    OBS_FILE = join53(".himi", "test-observations.json");
+    LEDGER_FILE = join54(".himi", "test-ledger.json");
+    OBS_FILE = join54(".himi", "test-observations.json");
   }
 });
 
@@ -51312,16 +51516,16 @@ __export(design_kits_exports, {
   kitsDir: () => kitsDir,
   listKits: () => listKits2
 });
-import { existsSync as existsSync55, readFileSync as readFileSync60, readdirSync as readdirSync28 } from "node:fs";
-import { join as join54, basename as basename13 } from "node:path";
+import { existsSync as existsSync56, readFileSync as readFileSync61, readdirSync as readdirSync28 } from "node:fs";
+import { join as join55, basename as basename14 } from "node:path";
 import { fileURLToPath as fileURLToPath21 } from "node:url";
 function kitsDir() {
-  return KIT_DIR_CANDIDATES.find((p) => existsSync55(p));
+  return KIT_DIR_CANDIDATES.find((p) => existsSync56(p));
 }
 function listKits2() {
   const dir = kitsDir();
   if (!dir) return [];
-  return readdirSync28(dir).filter((f) => f.endsWith(".json")).map((f) => basename13(f, ".json")).sort();
+  return readdirSync28(dir).filter((f) => f.endsWith(".json")).map((f) => basename14(f, ".json")).sort();
 }
 function kitReport(name) {
   const dir = kitsDir();
@@ -51340,7 +51544,7 @@ In a published @wix/himalaya-cli this is a packaging bug \u2014 the kits should
   if (!kits.includes(name)) {
     return { ok: false, kit: name, kits, problems: [`no design kit named "${name}". Available: ${kits.join(", ")}`] };
   }
-  const raw = readFileSync60(join54(dir, `${name}.json`), "utf8");
+  const raw = readFileSync61(join55(dir, `${name}.json`), "utf8");
   let parsed;
   try {
     parsed = JSON.parse(raw);
@@ -51364,9 +51568,9 @@ var init_design_kits = __esm({
   "src/design-kits.ts"() {
     KIT_DIR_CANDIDATES = [
       // in-repo: tools/himi-cli/src/design-kits.ts → <repo>/stdlib/design-kits/
-      join54(fileURLToPath21(new URL("../../..", import.meta.url)), "stdlib", "design-kits"),
+      join55(fileURLToPath21(new URL("../../..", import.meta.url)), "stdlib", "design-kits"),
       // published CLI: <pkg>/dist/cli.mjs → <pkg>/stdlib/design-kits/
-      join54(fileURLToPath21(new URL("..", import.meta.url)), "stdlib", "design-kits")
+      join55(fileURLToPath21(new URL("..", import.meta.url)), "stdlib", "design-kits")
     ];
   }
 });
@@ -51380,11 +51584,11 @@ __export(assets_exports, {
   removeAssetPayload: () => removeAssetPayload,
   verifyReport: () => verifyReport
 });
-import { readFileSync as readFileSync61 } from "node:fs";
-import { basename as basename14 } from "node:path";
+import { readFileSync as readFileSync62 } from "node:fs";
+import { basename as basename15 } from "node:path";
 function declaredAssets(dir) {
   return collectAssets(dir).map((a) => {
-    const bytes2 = readFileSync61(a.path);
+    const bytes2 = readFileSync62(a.path);
     return {
       name: a.name,
       sha256: assetSha256(bytes2),
@@ -51461,8 +51665,8 @@ function verifyReport(dir, app, manifest) {
   };
 }
 function addAssetPayload(manifest, filePath, opts) {
-  const bytes2 = readFileSync61(filePath);
-  const name = opts.name ?? basename14(filePath);
+  const bytes2 = readFileSync62(filePath);
+  const name = opts.name ?? basename15(filePath);
   const sha2565 = assetSha256(bytes2);
   const record2 = {
     sha256: sha2565,
@@ -53136,9 +53340,9 @@ __export(run_exports, {
   runPackage: () => runPackage,
   withoutProdServe: () => withoutProdServe
 });
-import { cpSync as cpSync2, existsSync as existsSync56, mkdirSync as mkdirSync26, mkdtempSync as mkdtempSync3, readFileSync as readFileSync62, rmSync as rmSync12, statSync as statSync13 } from "node:fs";
+import { cpSync as cpSync2, existsSync as existsSync57, mkdirSync as mkdirSync26, mkdtempSync as mkdtempSync3, readFileSync as readFileSync63, rmSync as rmSync12, statSync as statSync13 } from "node:fs";
 import { networkInterfaces as osNetworkInterfaces, tmpdir as tmpdir4 } from "node:os";
-import { dirname as dirname29, join as join55 } from "node:path";
+import { dirname as dirname29, join as join56 } from "node:path";
 import { fileURLToPath as fileURLToPath22 } from "node:url";
 function makePackageRunHandler(opts) {
   const store = new FileReleaseStore(opts.releaseRoot);
@@ -53166,9 +53370,9 @@ async function fetchBytes(url) {
 }
 async function resolvePackage(source, workDir) {
   const isUrl2 = /^https?:\/\//i.test(source);
-  if (!isUrl2 && existsSync56(source) && statSync13(source).isDirectory()) {
-    const appDirManifest = join55(source, "release-manifest.json");
-    if (existsSync56(appDirManifest)) {
+  if (!isUrl2 && existsSync57(source) && statSync13(source).isDirectory()) {
+    const appDirManifest = join56(source, "release-manifest.json");
+    if (existsSync57(appDirManifest)) {
       const opened2 = openPackageDir(source);
       if (!opened2.validation.ok) {
         throw new Error(`package is not valid:
@@ -53177,9 +53381,9 @@ async function resolvePackage(source, workDir) {
       const app2 = opened2.header?.app ?? opened2.manifest?.app;
       if (!app2) throw new Error(`${source} has no app id (no himi-package.json and no manifest.app)`);
       if (!isSafeAppId(app2)) throw new Error(`${source} declares an unsafe app id ${JSON.stringify(app2)} \u2014 refusing to open it`);
-      const root2 = workDir ?? mkdtempSync3(join55(tmpdir4(), "himi-run-"));
-      const target = join55(root2, app2);
-      if (join55(source) !== target) {
+      const root2 = workDir ?? mkdtempSync3(join56(tmpdir4(), "himi-run-"));
+      const target = join56(root2, app2);
+      if (join56(source) !== target) {
         mkdirSync26(root2, { recursive: true });
         rmSync12(target, { recursive: true, force: true });
         cpSync2(source, target, { recursive: true });
@@ -53196,8 +53400,8 @@ async function resolvePackage(source, workDir) {
     }
     throw new Error(`${source} is a directory but has no release-manifest.json \u2014 is it a package?`);
   }
-  const bytes2 = isUrl2 ? await fetchBytes(source) : readFileSync62(source);
-  const root = workDir ?? mkdtempSync3(join55(tmpdir4(), "himi-run-"));
+  const bytes2 = isUrl2 ? await fetchBytes(source) : readFileSync63(source);
+  const root = workDir ?? mkdtempSync3(join56(tmpdir4(), "himi-run-"));
   const { app, appDir: appDir2 } = unpackTo(bytes2, root);
   const opened = openPackageDir(appDir2);
   if (!opened.validation.ok) {
@@ -53220,14 +53424,14 @@ async function loadPreviewAssets() {
     const mod = await Promise.resolve().then(() => (init_preview_assets_generated(), preview_assets_generated_exports));
     const here = dirname29(fileURLToPath22(import.meta.url));
     const candidates = [
-      join55(here, "preview-assets.generated.bin"),
+      join56(here, "preview-assets.generated.bin"),
       // published: copied next to the bundled CLI
-      join55(here, "../../../packages/serve/src/preview-assets.generated.bin")
+      join56(here, "../../../packages/serve/src/preview-assets.generated.bin")
       // in-repo checkout
     ];
     for (const path2 of candidates) {
-      if (!existsSync56(path2)) continue;
-      const blob = readFileSync62(path2);
+      if (!existsSync57(path2)) continue;
+      const blob = readFileSync63(path2);
       return mod.assemblePreviewAssetsFromBlob(new Uint8Array(blob.buffer, blob.byteOffset, blob.byteLength));
     }
     return /* @__PURE__ */ new Map();
@@ -53374,9 +53578,9 @@ __export(run_watch_exports, {
   watchedContentDir: () => watchedContentDir,
   writeRunRecord: () => writeRunRecord
 });
-import { closeSync as closeSync2, constants, existsSync as existsSync57, fstatSync, lstatSync as lstatSync10, statSync as statSync14, mkdirSync as mkdirSync27, openSync as openSync2, readFileSync as readFileSync63, realpathSync as realpathSync7, renameSync as renameSync6, rmSync as rmSync13, writeFileSync as writeFileSync23, watch as fsWatch } from "node:fs";
+import { closeSync as closeSync2, constants, existsSync as existsSync58, fstatSync, lstatSync as lstatSync10, statSync as statSync14, mkdirSync as mkdirSync27, openSync as openSync2, readFileSync as readFileSync64, realpathSync as realpathSync7, renameSync as renameSync6, rmSync as rmSync13, writeFileSync as writeFileSync23, watch as fsWatch } from "node:fs";
 import { randomUUID as randomUUID3 } from "node:crypto";
-import { extname as extname4, join as join56, resolve as resolve42, sep as sep13 } from "node:path";
+import { extname as extname4, join as join57, resolve as resolve42, sep as sep13 } from "node:path";
 function diffReleases(prev, next) {
   const bundles = Object.keys(next.bundles).filter((b) => prev.bundles[b]?.sha256 !== next.bundles[b].sha256).sort();
   const changedBundles = new Set(bundles);
@@ -53417,7 +53621,7 @@ function watchContent(dir, onChange, opts = {}) {
   let timer = null;
   const pending = /* @__PURE__ */ new Set();
   const watcher2 = watch2(dir, { recursive: true }, (_event, file) => {
-    if (!file || ignoredChange(file, (rel) => isDir(join56(dir, rel)))) return;
+    if (!file || ignoredChange(file, (rel) => isDir(join57(dir, rel)))) return;
     pending.add(file);
     if (timer) clearTimeout(timer);
     timer = setTimeout(() => {
@@ -53438,7 +53642,7 @@ function watchedContentDir(source) {
   if (!source || /^https?:\/\//i.test(source)) return null;
   const dir = resolve42(source);
   try {
-    return statSync14(dir).isDirectory() && existsSync57(join56(dir, "himalaya.content.json")) ? dir : null;
+    return statSync14(dir).isDirectory() && existsSync58(join57(dir, "himalaya.content.json")) ? dir : null;
   } catch {
     return null;
   }
@@ -53495,7 +53699,7 @@ function serialize(task) {
   });
 }
 function himiDir(dir) {
-  const root = join56(dir, ".himi");
+  const root = join57(dir, ".himi");
   try {
     return lstatSync10(root).isDirectory() ? root : null;
   } catch (e) {
@@ -53507,11 +53711,11 @@ function himiDir(dir) {
 function writeRunRecord(dir, record2) {
   const root = himiDir(dir);
   if (!root) return false;
-  const tmp = join56(root, `.run.json.${process.pid}.${randomUUID3()}.tmp`);
+  const tmp = join57(root, `.run.json.${process.pid}.${randomUUID3()}.tmp`);
   try {
     writeFileSync23(tmp, `${JSON.stringify(record2, null, 2)}
 `, { flag: "wx" });
-    renameSync6(tmp, join56(root, "run.json"));
+    renameSync6(tmp, join57(root, "run.json"));
   } catch (e) {
     rmSync13(tmp, { force: true });
     throw e;
@@ -53519,7 +53723,7 @@ function writeRunRecord(dir, record2) {
   return true;
 }
 function removeRunRecord(dir, owner) {
-  const root = join56(dir, ".himi");
+  const root = join57(dir, ".himi");
   try {
     if (!lstatSync10(root).isDirectory()) return;
   } catch {
@@ -53534,16 +53738,16 @@ function removeRunRecord(dir, owner) {
     }
     if (typeof pid === "number" && pid !== owner) return;
   }
-  rmSync13(join56(root, "run.json"), { force: true });
+  rmSync13(join57(root, "run.json"), { force: true });
 }
 function boardFile(dir, pathname) {
   let rel = null;
-  if (pathname === "/__himi/studio/" || pathname === "/__himi/studio/index.html") rel = join56("studio", "index.html");
-  else if (pathname === "/__himi/studio/state.js") rel = join56("studio", "state.js");
-  else if (pathname === "/__himi/studio/timeline.js") rel = join56("studio", "timeline.js");
+  if (pathname === "/__himi/studio/" || pathname === "/__himi/studio/index.html") rel = join57("studio", "index.html");
+  else if (pathname === "/__himi/studio/state.js") rel = join57("studio", "state.js");
+  else if (pathname === "/__himi/studio/timeline.js") rel = join57("studio", "timeline.js");
   else {
     const m = /^\/__himi\/history\/([0-9a-f]{64}\.(png|jpg|gif|webp))$/.exec(pathname);
-    if (m) rel = join56("history", m[1]);
+    if (m) rel = join57("history", m[1]);
   }
   if (!rel) return null;
   const bytes2 = readConfined(resolve42(dir, ".himi"), rel);
@@ -53559,7 +53763,7 @@ function readConfined(root, rel) {
     const parts = rel.split(sep13);
     let at = root;
     for (let i = 0; i < parts.length; i++) {
-      at = join56(at, parts[i]);
+      at = join57(at, parts[i]);
       const st = lstatSync10(at);
       if (st.isSymbolicLink() || !(i === parts.length - 1 ? st.isFile() : st.isDirectory())) return null;
     }
@@ -53568,7 +53772,7 @@ function readConfined(root, rel) {
     const fd = openSync2(at, constants.O_RDONLY | (constants.O_NOFOLLOW ?? 0));
     try {
       if (!fstatSync(fd).isFile()) return null;
-      return readFileSync63(fd);
+      return readFileSync64(fd);
     } finally {
       closeSync2(fd);
     }
@@ -53620,7 +53824,7 @@ __export(run_browser_exports, {
   runInBrowser: () => runInBrowser
 });
 import { createServer as createServer5 } from "node:http";
-import { existsSync as existsSync58, readFileSync as readFileSync64 } from "node:fs";
+import { existsSync as existsSync59, readFileSync as readFileSync65 } from "node:fs";
 import { spawnSync as spawnSync3 } from "node:child_process";
 import { dirname as dirname30, resolve as resolve43 } from "node:path";
 import { fileURLToPath as fileURLToPath23 } from "node:url";
@@ -53628,7 +53832,7 @@ function stagedDir() {
   return process.env.HIMI_BROWSER_PLANE_OUT ? resolve43(process.env.HIMI_BROWSER_PLANE_OUT) : resolve43(REPO, "packages", "serve", "dist", "browser-plane");
 }
 function missingStaged() {
-  return [...SERVED].filter((f) => !existsSync58(resolve43(stagedDir(), f))).sort();
+  return [...SERVED].filter((f) => !existsSync59(resolve43(stagedDir(), f))).sort();
 }
 function ensureBrowserPlaneStaged() {
   if (missingStaged().length === 0) return { ok: true, detail: "already staged" };
@@ -53713,7 +53917,7 @@ async function runInBrowser(releaseRoot, app, header, opts = {}) {
     }
     const name = path2 === "/" || path2 === "/index.html" ? "host.html" : path2.slice(1);
     if (SERVED.has(name)) {
-      if (!existsSync58(resolve43(stagedDir(), name))) {
+      if (!existsSync59(resolve43(stagedDir(), name))) {
         const restaged = ensureBrowserPlaneStaged();
         if (!restaged.ok) {
           res.writeHead(503, { "content-type": "application/json" });
@@ -53723,7 +53927,7 @@ async function runInBrowser(releaseRoot, app, header, opts = {}) {
       }
       let bytes2;
       try {
-        bytes2 = readFileSync64(resolve43(stagedDir(), name));
+        bytes2 = readFileSync65(resolve43(stagedDir(), name));
       } catch (e) {
         res.writeHead(503, { "content-type": "application/json" });
         res.end(JSON.stringify({ error: "browser_plane_unstaged", file: name, detail: String(e) }));
@@ -54184,11 +54388,11 @@ __export(preflight_exports, {
   parseStoreConfig: () => parseStoreConfig,
   requireEnv: () => requireEnv
 });
-import { existsSync as existsSync59, readFileSync as readFileSync65 } from "node:fs";
-import { isAbsolute as isAbsolute3, relative as relative10, resolve as resolve44 } from "node:path";
+import { existsSync as existsSync60, readFileSync as readFileSync66 } from "node:fs";
+import { isAbsolute as isAbsolute5, relative as relative11, resolve as resolve44 } from "node:path";
 function isInsideRepo(p) {
-  const rel = relative10(REPO_ROOT3, resolve44(p));
-  return rel !== "" && !rel.startsWith("..") && !isAbsolute3(rel);
+  const rel = relative11(REPO_ROOT3, resolve44(p));
+  return rel !== "" && !rel.startsWith("..") && !isAbsolute5(rel);
 }
 function assertCredentialOutsideRepo(label2, p) {
   if (isInsideRepo(p)) {
@@ -54241,10 +54445,10 @@ function parseStoreConfig(text5) {
 }
 function loadStoreConfig(app) {
   const p = storeConfigPath(app);
-  if (!existsSync59(p)) {
+  if (!existsSync60(p)) {
     throw new Error(`No store config at ${p}. Create apps/${app}/store/store.config.yaml first (see /setup-store-signing).`);
   }
-  return parseStoreConfig(readFileSync65(p, "utf8"));
+  return parseStoreConfig(readFileSync66(p, "utf8"));
 }
 var init_preflight = __esm({
   "../store-release/preflight.ts"() {
@@ -54263,19 +54467,19 @@ __export(credential_profile_exports, {
   profilePath: () => profilePath,
   resolveStoreCredentials: () => resolveStoreCredentials
 });
-import { existsSync as existsSync60, readFileSync as readFileSync66 } from "node:fs";
+import { existsSync as existsSync61, readFileSync as readFileSync67 } from "node:fs";
 import { homedir as homedir5 } from "node:os";
-import { join as join57 } from "node:path";
+import { join as join58 } from "node:path";
 function credentialsDir(home = homedir5()) {
-  return join57(home, ".himalaya", "store-credentials");
+  return join58(home, ".himalaya", "store-credentials");
 }
 function profilePath(name, home = homedir5()) {
   if (!PROFILE_NAME.test(name)) {
     throw new Error(
-      `credential profile ${JSON.stringify(name)} is not a profile name \u2014 use letters, digits, ".", "_" or "-" starting with a letter or digit. It names ${join57(credentialsDir(home), "<name>.json")}; it is never a path.`
+      `credential profile ${JSON.stringify(name)} is not a profile name \u2014 use letters, digits, ".", "_" or "-" starting with a letter or digit. It names ${join58(credentialsDir(home), "<name>.json")}; it is never a path.`
     );
   }
-  return join57(credentialsDir(home), `${name}.json`);
+  return join58(credentialsDir(home), `${name}.json`);
 }
 function parseProfile(text5, label2) {
   let doc;
@@ -54306,8 +54510,8 @@ function resolveStoreCredentials(opts) {
   const { app, cfg } = opts;
   const env = opts.env ?? process.env;
   const home = opts.home ?? homedir5();
-  const read = opts.readProfile ?? ((p) => readFileSync66(p, "utf8"));
-  const exists = opts.profileExists ?? existsSync60;
+  const read = opts.readProfile ?? ((p) => readFileSync67(p, "utf8"));
+  const exists = opts.profileExists ?? existsSync61;
   const ios = cfg.ios ?? {};
   const flagName = opts.profileFlag?.trim();
   const named = namedProfile(cfg, opts.profileFlag);
@@ -54387,9 +54591,9 @@ __export(preflight_app_exports, {
   preflightApp: () => preflightApp,
   profileAccount: () => profileAccount
 });
-import { readFileSync as readFileSync67, existsSync as existsSync61, readdirSync as readdirSync29, statSync as statSync15 } from "node:fs";
+import { readFileSync as readFileSync68, existsSync as existsSync62, readdirSync as readdirSync29, statSync as statSync15 } from "node:fs";
 import { createHash as createHash27 } from "node:crypto";
-import { join as join58 } from "node:path";
+import { join as join59 } from "node:path";
 function analyze(projectYml, storeConfig, icon, account) {
   const f = [];
   const has = (re, s) => re.test(s);
@@ -54453,13 +54657,13 @@ function profileAccount(app, storeConfig, opts = {}) {
   }
 }
 async function preflightApp(app, opts = {}) {
-  const projectYml = existsSync61(iosProjectYml(app)) ? readFileSync67(iosProjectYml(app), "utf8") : "";
-  const storeConfig = existsSync61(storeConfigPath(app)) ? readFileSync67(storeConfigPath(app), "utf8") : "";
+  const projectYml = existsSync62(iosProjectYml(app)) ? readFileSync68(iosProjectYml(app), "utf8") : "";
+  const storeConfig = existsSync62(storeConfigPath(app)) ? readFileSync68(storeConfigPath(app), "utf8") : "";
   if (!storeConfig) return [{ level: "error", message: `no apps/${app}/store/store.config.yaml \u2014 run /setup-store-signing first.` }];
   const findings = analyze(
     projectYml,
     storeConfig,
-    await appIconState(join58(appDir(app), "ios")),
+    await appIconState(join59(appDir(app), "ios")),
     profileAccount(app, storeConfig, opts)
   );
   findings.push(...analyzeListing(metadataFilesPresent(app), listScreenshots(app)));
@@ -54488,17 +54692,17 @@ function analyzeSubmissionRecord(appLevel, review, opts) {
   return f;
 }
 function appLevelMetadataFiles(app, locale = "en-US") {
-  const root = join58(storeDir(app), "metadata");
+  const root = join59(storeDir(app), "metadata");
   const out = /* @__PURE__ */ new Set();
-  if (existsSync61(root)) {
+  if (existsSync62(root)) {
     for (const n of readdirSync29(root)) if (n.endsWith(".txt")) out.add(n);
   }
-  if (existsSync61(join58(root, locale, "privacy_url.txt"))) out.add("privacy_url.txt");
+  if (existsSync62(join59(root, locale, "privacy_url.txt"))) out.add("privacy_url.txt");
   return out;
 }
 function reviewInfoFiles(app) {
-  const dir = join58(storeDir(app), "review_information");
-  if (!existsSync61(dir)) return /* @__PURE__ */ new Set();
+  const dir = join59(storeDir(app), "review_information");
+  if (!existsSync62(dir)) return /* @__PURE__ */ new Set();
   return new Set(readdirSync29(dir).filter((n) => n.endsWith(".txt")));
 }
 function isValidAppStoreSize(w, h) {
@@ -54608,12 +54812,12 @@ function analyzePlayListing(assets) {
   return f;
 }
 function playListingAssets(app, locale = "en-US") {
-  const dir = join58(storeDir(app), "play", locale, "images");
+  const dir = join59(storeDir(app), "play", locale, "images");
   const read = (names) => {
     for (const name of names) {
-      const p = join58(dir, name);
+      const p = join59(dir, name);
       try {
-        if (statSync15(p).isFile()) return { name, bytes: readFileSync67(p) };
+        if (statSync15(p).isFile()) return { name, bytes: readFileSync68(p) };
       } catch {
       }
     }
@@ -54644,26 +54848,26 @@ function analyzeListing(metaFiles, shots) {
   return f;
 }
 function metadataFilesPresent(app, locale = "en-US") {
-  const dir = join58(storeDir(app), "metadata", locale);
-  if (!existsSync61(dir)) return /* @__PURE__ */ new Set();
+  const dir = join59(storeDir(app), "metadata", locale);
+  if (!existsSync62(dir)) return /* @__PURE__ */ new Set();
   return new Set(readdirSync29(dir).filter((n) => n.endsWith(".txt")));
 }
 function listScreenshots(app, locale = "en-US") {
   const out = [];
-  const flat = join58(storeDir(app), "screenshots", locale);
-  if (existsSync61(flat)) {
+  const flat = join59(storeDir(app), "screenshots", locale);
+  if (existsSync62(flat)) {
     for (const png of readdirSync29(flat).filter((n) => n.endsWith(".png"))) {
-      const sz = pngSize(readFileSync67(join58(flat, png)));
+      const sz = pngSize(readFileSync68(join59(flat, png)));
       if (sz) out.push({ name: png, w: sz.w, h: sz.h });
     }
   }
-  const legacy = join58(storeDir(app), "metadata", locale, "screenshots");
-  if (existsSync61(legacy)) {
+  const legacy = join59(storeDir(app), "metadata", locale, "screenshots");
+  if (existsSync62(legacy)) {
     for (const deviceDir of readdirSync29(legacy)) {
-      const d = join58(legacy, deviceDir);
+      const d = join59(legacy, deviceDir);
       if (!statSync15(d).isDirectory()) continue;
       for (const png of readdirSync29(d).filter((n) => n.endsWith(".png"))) {
-        const sz = pngSize(readFileSync67(join58(d, png)));
+        const sz = pngSize(readFileSync68(join59(d, png)));
         if (sz) out.push({ name: `${deviceDir}/${png}`, w: sz.w, h: sz.h });
       }
     }
@@ -54671,13 +54875,13 @@ function listScreenshots(app, locale = "en-US") {
   return out;
 }
 function placeholderHashes2() {
-  const templateIos = join58(appDir("_template"), "ios");
-  if (!existsSync61(templateIos)) return [LEGACY_PLACEHOLDER_SHA2562];
+  const templateIos = join59(appDir("_template"), "ios");
+  if (!existsSync62(templateIos)) return [LEGACY_PLACEHOLDER_SHA2562];
   for (const target of readdirSync29(templateIos)) {
-    const p = join58(templateIos, target, "Assets.xcassets", "AppIcon.appiconset", "icon_1024.png");
+    const p = join59(templateIos, target, "Assets.xcassets", "AppIcon.appiconset", "icon_1024.png");
     try {
       if (!statSync15(p).isFile()) continue;
-      return [LEGACY_PLACEHOLDER_SHA2562, createHash27("sha256").update(readFileSync67(p)).digest("hex")];
+      return [LEGACY_PLACEHOLDER_SHA2562, createHash27("sha256").update(readFileSync68(p)).digest("hex")];
     } catch {
     }
   }
@@ -54708,12 +54912,12 @@ async function pixelIssues(bytes2) {
   }
 }
 async function appIconState(iosDir) {
-  if (!existsSync61(iosDir)) return { exists: false, isPlaceholder: false, storeIssues: [] };
+  if (!existsSync62(iosDir)) return { exists: false, isPlaceholder: false, storeIssues: [] };
   for (const target of readdirSync29(iosDir)) {
-    const p = join58(iosDir, target, "Assets.xcassets", "AppIcon.appiconset", "icon_1024.png");
+    const p = join59(iosDir, target, "Assets.xcassets", "AppIcon.appiconset", "icon_1024.png");
     try {
       if (!statSync15(p).isFile()) continue;
-      const bytes2 = readFileSync67(p);
+      const bytes2 = readFileSync68(p);
       const hash = createHash27("sha256").update(bytes2).digest("hex");
       const pixels = await pixelIssues(bytes2);
       return {
@@ -54785,7 +54989,7 @@ __export(version_exports, {
   setAndroidVersion: () => setAndroidVersion,
   setIosVersion: () => setIosVersion
 });
-import { readFileSync as readFileSync68, writeFileSync as writeFileSync24 } from "node:fs";
+import { readFileSync as readFileSync69, writeFileSync as writeFileSync24 } from "node:fs";
 function readIosVersion(projectYml) {
   const marketing = matchScalar(projectYml, "CFBundleShortVersionString");
   const build2 = matchScalar(projectYml, "CFBundleVersion");
@@ -54843,8 +55047,8 @@ function setAndroidVersion(gradle, v) {
 function bumpVersion(app, opts) {
   const iosPath = iosProjectYml(app);
   const gradlePath = androidGradle(app);
-  const iosYml = readFileSync68(iosPath, "utf8");
-  const gradle = readFileSync68(gradlePath, "utf8");
+  const iosYml = readFileSync69(iosPath, "utf8");
+  const gradle = readFileSync69(gradlePath, "utf8");
   const current = readIosVersion(iosYml);
   const next = {
     marketing: opts.marketing ?? current.marketing,
@@ -54861,7 +55065,7 @@ var init_version = __esm({
 });
 
 // ../store-release/register-bundle.ts
-import { readFileSync as readFileSync69 } from "node:fs";
+import { readFileSync as readFileSync70 } from "node:fs";
 import { createPrivateKey as createPrivateKey2, sign } from "node:crypto";
 function b64url2(b) {
   return Buffer.from(b).toString("base64").replace(/\+/g, "-").replace(/\//g, "_").replace(/=+$/, "");
@@ -54879,7 +55083,7 @@ function bundleIdBody(identifier, name, platform = "IOS") {
 async function registerBundleId(opts) {
   const env = requireEnv(["ASC_KEY_ID", "ASC_ISSUER_ID", "ASC_KEY_PATH"]);
   assertCredentialOutsideRepo("ASC_KEY_PATH", env.ASC_KEY_PATH);
-  const jwt = ascJwt(env.ASC_KEY_ID, env.ASC_ISSUER_ID, readFileSync69(env.ASC_KEY_PATH, "utf8"), Math.floor(Date.now() / 1e3));
+  const jwt = ascJwt(env.ASC_KEY_ID, env.ASC_ISSUER_ID, readFileSync70(env.ASC_KEY_PATH, "utf8"), Math.floor(Date.now() / 1e3));
   const res = await fetch(`${ASC_API}/v1/bundleIds`, {
     method: "POST",
     headers: { Authorization: `Bearer ${jwt}`, "Content-Type": "application/json" },
@@ -54933,7 +55137,7 @@ __export(asc_status_exports, {
   ascStatus: () => ascStatus,
   buildVerdict: () => buildVerdict
 });
-import { readFileSync as readFileSync70 } from "node:fs";
+import { readFileSync as readFileSync71 } from "node:fs";
 function buildVerdict(builds) {
   if (!builds.length) {
     return "NO builds registered \u2014 if you uploaded recently and it's been >15 min, the binary was REJECTED IN PROCESSING (reason is email-only; run validate-binary.ts / scan-purpose-strings.ts to reproduce it).";
@@ -54947,7 +55151,7 @@ function buildVerdict(builds) {
 function client(creds) {
   const env = creds ?? requireEnv(["ASC_KEY_ID", "ASC_ISSUER_ID", "ASC_KEY_PATH"]);
   assertCredentialOutsideRepo("ASC_KEY_PATH", env.ASC_KEY_PATH);
-  const jwt = ascJwt(env.ASC_KEY_ID, env.ASC_ISSUER_ID, readFileSync70(env.ASC_KEY_PATH, "utf8"), Math.floor(Date.now() / 1e3));
+  const jwt = ascJwt(env.ASC_KEY_ID, env.ASC_ISSUER_ID, readFileSync71(env.ASC_KEY_PATH, "utf8"), Math.floor(Date.now() / 1e3));
   return async (path2) => {
     const r = await fetch(`${ASC}${path2}`, { headers: { Authorization: `Bearer ${jwt}` } });
     return { status: r.status, json: await r.json().catch(() => ({})) };
@@ -55107,7 +55311,7 @@ __export(secrets_exports, {
   runRemoteSecretsCommand: () => runRemoteSecretsCommand,
   runSecretsCommand: () => runSecretsCommand
 });
-import { readFileSync as readFileSync71 } from "node:fs";
+import { readFileSync as readFileSync72 } from "node:fs";
 function environment(value) {
   if (value === "preview" || value === "production") return value;
   throw new Error("--environment must be preview or production");
@@ -55138,7 +55342,7 @@ async function runSecretsCommand(operation, flags, io, options = {}) {
       io.log(JSON.stringify(await vault.list({ app, environment: env })));
       return 0;
     }
-    const value = options.readValue ? options.readValue() : readFileSync71(0, "utf8").replace(/\r?\n$/, "");
+    const value = options.readValue ? options.readValue() : readFileSync72(0, "utf8").replace(/\r?\n$/, "");
     if (operation === "set") await vault.set({ app, environment: env, name, value });
     else if (operation === "rotate") await vault.rotate({ app, environment: env, name, value });
     else throw new Error(`unknown secrets operation ${operation}`);
@@ -55167,7 +55371,7 @@ async function runRemoteSecretsCommand(operation, flags, io, options) {
     }
     let body;
     if (operation !== "list") {
-      const value = options.readValue ? options.readValue() : readFileSync71(0, "utf8").replace(/\r?\n$/, "");
+      const value = options.readValue ? options.readValue() : readFileSync72(0, "utf8").replace(/\r?\n$/, "");
       body = JSON.stringify({ value });
     }
     const response = await (options.fetchImpl ?? fetch)(url, { method: operation === "list" ? "GET" : operation === "set" ? "PUT" : "POST", headers: headers2, body });
@@ -55203,15 +55407,15 @@ __export(notify_exports, {
   runNotify: () => runNotify,
   saveAdminSession: () => saveAdminSession
 });
-import { chmodSync as chmodSync3, mkdirSync as mkdirSync28, readFileSync as readFileSync72, writeFileSync as writeFileSync25 } from "node:fs";
+import { chmodSync as chmodSync3, mkdirSync as mkdirSync28, readFileSync as readFileSync73, writeFileSync as writeFileSync25 } from "node:fs";
 import { homedir as homedir6 } from "node:os";
-import { dirname as dirname32, join as join59 } from "node:path";
+import { dirname as dirname32, join as join60 } from "node:path";
 function defaultSessionsPath() {
-  return process.env.HIMI_ADMIN_SESSIONS_FILE ?? join59(homedir6(), ".himalaya", "admin-sessions.json");
+  return process.env.HIMI_ADMIN_SESSIONS_FILE ?? join60(homedir6(), ".himalaya", "admin-sessions.json");
 }
 function loadSessionsFile(path2 = defaultSessionsPath()) {
   try {
-    return JSON.parse(readFileSync72(path2, "utf8"));
+    return JSON.parse(readFileSync73(path2, "utf8"));
   } catch {
     return {};
   }
@@ -56341,7 +56545,7 @@ function deriveAdoptedCmsCollections(cms) {
   return { collections, dropped };
 }
 function deriveTailoring(ctx, overrides = {}, revision = "site-derived") {
-  const appName = deriveAppName(ctx, overrides.appName);
+  const appName2 = deriveAppName(ctx, overrides.appName);
   const supportUrl = clean(overrides.supportUrl) || clean(ctx.url.primary);
   const privacyUrl = clean(overrides.privacyUrl);
   const termsUrl = clean(overrides.termsUrl);
@@ -56361,8 +56565,8 @@ function deriveTailoring(ctx, overrides = {}, revision = "site-derived") {
     // empty; either way the key exists and the shell's list never survives the merge.
     cmsCollections: [],
     identity: {
-      appName,
-      businessName: clean(ctx.identity.businessName) || appName,
+      appName: appName2,
+      businessName: clean(ctx.identity.businessName) || appName2,
       tagline: clean(overrides.tagline) || clean(ctx.identity.description),
       // "" means UNKNOWN here, with `missing` above as the signal — the published overlay's
       // documented shape. Keeping an unknown url out of a MERGE is `apply.ts`'s job, at the
@@ -56372,7 +56576,7 @@ function deriveTailoring(ctx, overrides = {}, revision = "site-derived") {
       termsUrl
     }
   };
-  return { appName, iconSource: deriveIconSource(ctx), provisioning, missing };
+  return { appName: appName2, iconSource: deriveIconSource(ctx), provisioning, missing };
 }
 function bounded(s, max) {
   if (s.length <= max) return s;
@@ -58468,11 +58672,11 @@ function crawledPageName(look, page) {
   const hit = (page?.pageId ? sitePages.find((p) => p.pageId === page.pageId) : void 0) ?? (look.mainPageId ? sitePages.find((p) => p.pageId === look.mainPageId) : void 0) ?? sitePages.find((p) => p.slug === "home");
   return hit?.title.trim() ?? "";
 }
-function guessedNameWarning(appName, crawledTitle, ownerLookupError) {
-  const from = crawledTitle && crawledTitle !== appName ? ` off the crawled page title "${crawledTitle}"` : " from the site crawl";
+function guessedNameWarning(appName2, crawledTitle, ownerLookupError) {
+  const from = crawledTitle && crawledTitle !== appName2 ? ` off the crawled page title "${crawledTitle}"` : " from the site crawl";
   const why = ownerLookupError ? `the owner site-properties read FAILED (${ownerLookupError}), so the owner-entered name was never read` : "no owner token was available, so site-properties was never read";
   const remedy = ownerLookupError ? "resolve that failure and re-run the same owner-authenticated command" : "re-run with owner auth (`himi site analyze --site <msid>`)";
-  return `identity.appName "${appName}" is a GUESS, read${from} rather than from the owner-entered business name \u2014 ${why}. --apply writes it into provisioning.json as-is and it reaches both app stores verbatim, so check it: ${remedy}, or set identity.appName in provisioning.json yourself.`;
+  return `identity.appName "${appName2}" is a GUESS, read${from} rather than from the owner-entered business name \u2014 ${why}. --apply writes it into provisioning.json as-is and it reaches both app stores verbatim, so check it: ${remedy}, or set identity.appName in provisioning.json yourself.`;
 }
 function mergeLookFromPublished(look, published, siteUrl) {
   const sitePages = withPageUrls(
@@ -58980,7 +59184,7 @@ var init_brand_font = __esm({
 
 // src/site-analyze/write-artifacts.ts
 import { mkdirSync as mkdirSync29, writeFileSync as writeFileSync26 } from "node:fs";
-import { join as join60 } from "node:path";
+import { join as join61 } from "node:path";
 function attachVeloSources(book, sources, put) {
   const byPath = new Map((sources ?? []).map((s) => [s.path, s.text]));
   for (const f of book.velo.files) {
@@ -59135,12 +59339,12 @@ async function downloadMedia(book, fetchImpl, put) {
 }
 async function writeBusinessBook(result, opts) {
   const out = opts.outDir;
-  mkdirSync29(join60(out, "evidence/pages"), { recursive: true });
-  mkdirSync29(join60(out, "media/catalog"), { recursive: true });
+  mkdirSync29(join61(out, "evidence/pages"), { recursive: true });
+  mkdirSync29(join61(out, "media/catalog"), { recursive: true });
   const files = [];
   const put = (rel, body) => {
-    const p = join60(out, rel);
-    mkdirSync29(join60(p, ".."), { recursive: true });
+    const p = join61(out, rel);
+    mkdirSync29(join61(p, ".."), { recursive: true });
     writeFileSync26(p, body);
     files.push(rel);
   };
@@ -59234,8 +59438,8 @@ var init_customer_build = __esm({
 });
 
 // src/site-analyze/apply.ts
-import { existsSync as existsSync62, readFileSync as readFileSync73, writeFileSync as writeFileSync27, copyFileSync as copyFileSync3, mkdirSync as mkdirSync30, realpathSync as realpathSync8, statSync as statSync16 } from "node:fs";
-import { dirname as dirname33, isAbsolute as isAbsolute4, join as join61, resolve as resolve45, sep as sep14 } from "node:path";
+import { existsSync as existsSync63, readFileSync as readFileSync74, writeFileSync as writeFileSync27, copyFileSync as copyFileSync3, mkdirSync as mkdirSync30, realpathSync as realpathSync8, statSync as statSync16 } from "node:fs";
+import { dirname as dirname33, isAbsolute as isAbsolute6, join as join62, resolve as resolve45, sep as sep14 } from "node:path";
 import { spawnSync as spawnSync4 } from "node:child_process";
 function unpairedRedirectNote(overlay) {
   if (!overlay.wix?.clientId || overlay.wix.redirectUri) return void 0;
@@ -59250,7 +59454,7 @@ function committedShellProvisioning(path2) {
 function findRepoRoot(cwd) {
   let dir = cwd;
   for (let i = 0; i < 8; i++) {
-    if (SHELL_NAMES2.some((name) => existsSync62(join61(dir, shellAppDir(name), "package.json")))) return dir;
+    if (SHELL_NAMES2.some((name) => existsSync63(join62(dir, shellAppDir(name), "package.json")))) return dir;
     const next = dirname33(dir);
     if (next === dir) break;
     dir = next;
@@ -59319,24 +59523,24 @@ function mergeCustomerOwned(committed, overlay) {
 }
 function buildMergedContract(options) {
   const { appDir: appDir2, packageDir, overlay } = options;
-  const committedPath = join61(appDir2, "provisioning.json");
-  if (!existsSync62(committedPath)) {
+  const committedPath = join62(appDir2, "provisioning.json");
+  if (!existsSync63(committedPath)) {
     throw new Error(`shell has no committed provisioning.json at ${committedPath} to build a contract from`);
   }
-  const committed = JSON.parse(readFileSync73(committedPath, "utf8"));
+  const committed = JSON.parse(readFileSync74(committedPath, "utf8"));
   const merged = mergeCustomerOwned(committed, overlay);
   const overlayFontFamily = (overlay.branding ?? {}).fontFamily;
   const branding = merged.branding ?? {};
   const staged = [];
   const contained = (root, rel) => {
-    if (isAbsolute4(rel)) return void 0;
+    if (isAbsolute6(rel)) return void 0;
     const full = resolve45(root, rel);
     return full.startsWith(resolve45(root) + sep14) ? full : void 0;
   };
   const stage = (fromRel, toRel) => {
     const from = contained(packageDir, fromRel);
-    const to = contained(join61(appDir2, STAGED), toRel.slice(STAGED.length + 1));
-    if (!from || !to || !existsSync62(from)) return void 0;
+    const to = contained(join62(appDir2, STAGED), toRel.slice(STAGED.length + 1));
+    if (!from || !to || !existsSync63(from)) return void 0;
     let real;
     let realRoot;
     try {
@@ -59358,11 +59562,11 @@ function buildMergedContract(options) {
   };
   const icon = stage("media/icon.png", `${STAGED}/icon.png`);
   if (icon) branding.appIconPath = icon;
-  const facesPath = join61(packageDir, "media/fonts/faces.json");
-  if (existsSync62(facesPath)) {
+  const facesPath = join62(packageDir, "media/fonts/faces.json");
+  if (existsSync63(facesPath)) {
     let faces = [];
     try {
-      const parsed = JSON.parse(readFileSync73(facesPath, "utf8"));
+      const parsed = JSON.parse(readFileSync74(facesPath, "utf8"));
       faces = Array.isArray(parsed) ? parsed : [];
     } catch {
       faces = [];
@@ -59383,9 +59587,9 @@ function buildMergedContract(options) {
   merged.branding = branding;
   const body = `${JSON.stringify(merged, null, 2)}
 `;
-  const path2 = join61(packageDir, "provisioning.contract.json");
+  const path2 = join62(packageDir, "provisioning.contract.json");
   writeFileSync27(path2, body);
-  const localPath = join61(appDir2, LOCAL_CONTRACT_REL);
+  const localPath = join62(appDir2, LOCAL_CONTRACT_REL);
   mkdirSync30(dirname33(localPath), { recursive: true });
   writeFileSync27(localPath, body);
   staged.push(localPath);
@@ -59420,10 +59624,10 @@ function catalogTypography(overlay, template) {
 function staticFaqFor(overlay, overlayPath) {
   const own3 = overlay.faq;
   if (own3 !== void 0) return deriveStaticFaq(own3);
-  const bookPath = join61(dirname33(resolve45(overlayPath)), "book.json");
-  if (!existsSync62(bookPath)) return void 0;
+  const bookPath = join62(dirname33(resolve45(overlayPath)), "book.json");
+  if (!existsSync63(bookPath)) return void 0;
   try {
-    const book = JSON.parse(readFileSync73(bookPath, "utf8"));
+    const book = JSON.parse(readFileSync74(bookPath, "utf8"));
     const copy = book?.copy;
     if (!copy || typeof copy !== "object" || copy.unavailable) return void 0;
     const pairs = deriveStaticFaq(copy.faq);
@@ -59437,8 +59641,8 @@ async function applyOverlays(input) {
   const cwd = resolve45(input.cwd);
   const shell = input.shell ?? DEFAULT_BRANDABLE_SHELL;
   assertKnownShell(shell);
-  const overlay = JSON.parse(readFileSync73(input.overlayPath, "utf8"));
-  const tokens = JSON.parse(readFileSync73(input.tokensPath, "utf8"));
+  const overlay = JSON.parse(readFileSync74(input.overlayPath, "utf8"));
+  const tokens = JSON.parse(readFileSync74(input.tokensPath, "utf8"));
   const faq = staticFaqFor(overlay, input.overlayPath);
   if (faq !== void 0) overlay.faq = faq;
   const wrote = [];
@@ -59450,9 +59654,9 @@ async function applyOverlays(input) {
         `shell "${shell}" cannot bake a customer brand \u2014 it ships no prepare:customer script`
       );
     }
-    const appDir2 = join61(repoRoot2, shellAppDir(shell));
-    const committedPath = join61(appDir2, "provisioning.json");
-    const committedSite = existsSync62(committedPath) ? JSON.parse(readFileSync73(committedPath, "utf8")).site : void 0;
+    const appDir2 = join62(repoRoot2, shellAppDir(shell));
+    const committedPath = join62(appDir2, "provisioning.json");
+    const committedSite = existsSync63(committedPath) ? JSON.parse(readFileSync74(committedPath, "utf8")).site : void 0;
     if (committedSite !== void 0 && overlay.site === void 0) {
       throw new Error(
         `shell "${shell}" is a site shell: its contract names the customer's website (a \`site\` block), which this analysis does not produce yet. Write the site block into a contract and run \`npm run prepare:customer -- --contract <file>\` in ${shellAppDir(shell)} (or \`himi dist --shell ${shell}\`).`
@@ -59479,11 +59683,11 @@ async function applyOverlays(input) {
       note: `prepare:customer --contract with a merged contract (committed provisioning.json untouched)${unpairedInRepo ? ` \xB7 ${unpairedInRepo}` : ""}`
     };
   }
-  const pkgProv = join61(cwd, "provisioning.json");
+  const pkgProv = join62(cwd, "provisioning.json");
   assertNotCommitted(pkgProv, input.forbiddenProvisioning);
   let packageFaq = faq;
-  if (existsSync62(pkgProv)) {
-    const cur = JSON.parse(readFileSync73(pkgProv, "utf8"));
+  if (existsSync63(pkgProv)) {
+    const cur = JSON.parse(readFileSync74(pkgProv, "utf8"));
     const merged = deepMerge4(cur, overlay);
     packageFaq = merged.faq;
     writeFileSync27(pkgProv, JSON.stringify(merged, null, 2) + "\n");
@@ -59492,9 +59696,9 @@ async function applyOverlays(input) {
     writeFileSync27(pkgProv, JSON.stringify(overlay, null, 2) + "\n");
     wrote.push(pkgProv);
   }
-  const pkgTokens = join61(cwd, "tokens.json");
-  if (existsSync62(pkgTokens) && (tokens.colors || tokens.typography)) {
-    const cur = JSON.parse(readFileSync73(pkgTokens, "utf8"));
+  const pkgTokens = join62(cwd, "tokens.json");
+  if (existsSync63(pkgTokens) && (tokens.colors || tokens.typography)) {
+    const cur = JSON.parse(readFileSync74(pkgTokens, "utf8"));
     let tokensIn = tokens;
     if (tokens.typography) {
       const fonts = catalogTypography(tokens.typography, cur.typography);
@@ -59519,9 +59723,9 @@ async function applyOverlays(input) {
     wrote.push(pkgTokens);
   }
   const homeAction = homeRefreshActionId(shell);
-  const homeSrc = join61(cwd, "dev/index.ts");
-  if (homeAction && existsSync62(homeSrc)) {
-    const prev = readFileSync73(homeSrc, "utf8");
+  const homeSrc = join62(cwd, "dev/index.ts");
+  if (homeAction && existsSync63(homeSrc)) {
+    const prev = readFileSync74(homeSrc, "utf8");
     const patched = patchBrandParams(prev, overlay, homeAction);
     let next = patched.src;
     if (!patched.foreign && faq?.length && prev.includes('"tier5.himiBrandedFaq.load"') && !prev.includes('"staticFaq"')) {
@@ -59552,13 +59756,13 @@ async function applyOverlays(input) {
       notes.push(`${patched.unparsed} onAppear params block(s) in ${homeSrc} could not be read \u2014 any brand values inside them were not applied`);
     }
   }
-  if (!input.iconPath || !existsSync62(input.iconPath)) {
+  if (!input.iconPath || !existsSync63(input.iconPath)) {
     const book = input.iconPath ? dirname33(dirname33(resolve45(input.iconPath))) : void 0;
     notes.push(
       book ? `no icon installed \u2014 ${siteLogoAbsence(book).hint}` : "no icon installed and no business book to say why \u2014 `himi icon generate` draws one from the accent, or `himi icon set <file.png>` installs the customer's own mark"
     );
   }
-  if (input.iconPath && existsSync62(input.iconPath)) {
+  if (input.iconPath && existsSync63(input.iconPath)) {
     try {
       const installed = await installIcon(cwd, input.iconPath, { derivePlay: true });
       wrote.push(...installed.wrote);
@@ -63745,7 +63949,7 @@ __export(cli_exports, {
   runSiteAnalyze: () => runSiteAnalyze,
   runSiteFunctionCli: () => runSiteFunctionCli
 });
-import { readFileSync as readFileSync74 } from "node:fs";
+import { readFileSync as readFileSync75 } from "node:fs";
 import { resolve as resolve46 } from "node:path";
 function assetFetchFor(_opts) {
   return pinnedFetch2;
@@ -63844,7 +64048,7 @@ async function runSiteFunctionCli(opts) {
   let source;
   if (opts.sourcePath) {
     const p = resolve46(opts.cwd ?? process.cwd(), opts.sourcePath);
-    source = readFileSync74(p, "utf8");
+    source = readFileSync75(p, "utf8");
   }
   let body;
   if (opts.bodyRaw != null) {
@@ -64103,7 +64307,7 @@ __export(site_create_exports, {
   runSiteList: () => runSiteList,
   writeProvisioningBinding: () => writeProvisioningBinding
 });
-import { existsSync as existsSync63, readFileSync as readFileSync75, writeFileSync as writeFileSync28 } from "node:fs";
+import { existsSync as existsSync64, readFileSync as readFileSync76, writeFileSync as writeFileSync28 } from "node:fs";
 import { resolve as resolvePath2 } from "node:path";
 function oauthClientName(projectName) {
   return `${projectName} client`;
@@ -64252,7 +64456,7 @@ async function runSiteCreate(opts) {
   if (!wantOauthApp) return { ...base, nextSteps: nextSteps(metaSiteId) };
   return { ...base, clientId, redirectUri, nextSteps: nextSteps(metaSiteId, clientId) };
 }
-function writeProvisioningBinding(target, binding2, fs = { existsSync: existsSync63, readFileSync: readFileSync75, writeFileSync: writeFileSync28 }) {
+function writeProvisioningBinding(target, binding2, fs = { existsSync: existsSync64, readFileSync: readFileSync76, writeFileSync: writeFileSync28 }) {
   const msid = binding2.siteId;
   const path2 = resolvePath2(target);
   const committed = committedShellProvisioning(path2);
@@ -64925,11 +65129,11 @@ var init_context = __esm({
 });
 
 // src/cli.ts
-import { mkdtempSync as mkdtempSync4, readFileSync as readFileSync76, mkdirSync as mkdirSync31, writeFileSync as writeFileSync29, existsSync as existsSync64, rmSync as rmSync14, readdirSync as readdirSync30, statSync as statSync17, lstatSync as lstatSync11, accessSync, constants as constants2, renameSync as renameSync7, cpSync as cpSync3 } from "node:fs";
+import { mkdtempSync as mkdtempSync4, readFileSync as readFileSync77, mkdirSync as mkdirSync31, writeFileSync as writeFileSync29, existsSync as existsSync65, rmSync as rmSync14, readdirSync as readdirSync30, statSync as statSync17, lstatSync as lstatSync11, accessSync, constants as constants2, renameSync as renameSync7, cpSync as cpSync3 } from "node:fs";
 import { execFile, execFileSync as execFileSync7, spawnSync as spawnSync5, spawn as spawn6 } from "node:child_process";
 import { createHash as createHash28, randomUUID as randomUUID5 } from "node:crypto";
 import { tmpdir as tmpdir5, homedir as homedir7, hostname } from "node:os";
-import { join as join62, resolve as resolve47, relative as relative11, basename as basename15, dirname as dirname34 } from "node:path";
+import { join as join63, resolve as resolve47, relative as relative12, basename as basename16, dirname as dirname34 } from "node:path";
 import { fileURLToPath as fileURLToPath24 } from "node:url";
 
 // ../serve-cli/src/client.ts
@@ -67045,8 +67249,8 @@ var str6 = (v) => typeof v === "string" ? v : void 0;
 var num2 = (v) => typeof v === "string" && v !== "" && Number.isFinite(Number(v)) ? Number(v) : void 0;
 function embeddedTemplateCatalog() {
   return availableTemplates().map((name) => {
-    const path2 = join62(templateSourceDir(name), TEMPLATE_META_FILE);
-    const meta = JSON.parse(readFileSync76(path2, "utf8"));
+    const path2 = join63(templateSourceDir(name), TEMPLATE_META_FILE);
+    const meta = JSON.parse(readFileSync77(path2, "utf8"));
     if (!meta || typeof meta.title !== "string" || typeof meta.description !== "string" || !Array.isArray(meta.tags)) {
       throw new Error(`${path2} must be { title: string, description: string, tags: string[], category?: string }`);
     }
@@ -67076,7 +67280,9 @@ var USAGE = `himi \u2014 the Himalaya authoring CLI (remote dev loop)
                                            scaffold a starter content package (--template <t> starts
                                            from a reference app; --remote fetches it off the serve plane),
                                            with the agent files inside it (AGENTS.md, CLAUDE.md, the himalaya
-                                           skill, a session-start hook); --no-agent skips them
+                                           skill, a session-start hook); --no-agent skips them. Also makes
+                                           the build board (no browser is opened), and its next[] leads with
+                                           THIS session's steps: the live preview, the first picture, a postcard
   himi template list [--remote]            list starter templates + metadata (title/description/tags) + each one's start prompt
   himi template prompt <name>              print the prompt that starts an app from that template
   himi template publish [--dir <app>] [--source-dir <dir>] [--name <n>] [--icon <png>] [--visibility public|unlisted]
@@ -67667,7 +67873,7 @@ WHAT A PATCH DOES NOT CARRY \u2014 all reported in the output, never silent
   himi docs releasing-with-himi-serve`;
 var COMMANDS = [
   { name: "captcha", summary: "create and store native CAPTCHA keys in Serve, or inspect setup status; customer setup verifies Wix site ownership; does not enable member CAPTCHA SDKs", required: "setup|status --app <app> [--content <dir>] [--site <msid>] [--ios-bundle-id <id>] [--android-package-name <id>] [--target <t>]" },
-  { name: "init", summary: "scaffold a starter content package (OTA-only; no native shells). --template <t> starts from a full reference app (branded-lite = consumer storefront over a Wix site; owner-lite = owner CRUD/management) instead of the minimal counter; --templates lists bundled ones; --remote fetches the template off the serve plane (falls back to the bundled copy offline). The new app also gets its agent files (the same set `himi agent-init` writes: AGENTS.md, CLAUDE.md, the himalaya skill, HIMALAYA.md, a SessionStart hook) so the next session started inside it picks the work up; --no-agent skips them", required: "<name> [--dir] [--template <t>] [--remote] [--no-agent] | --templates" },
+  { name: "init", summary: "scaffold a starter content package (OTA-only; no native shells). --template <t> starts from a full reference app (branded-lite = consumer storefront over a Wix site; owner-lite = owner CRUD/management) instead of the minimal counter; --templates lists bundled ones; --remote fetches the template off the serve plane (falls back to the bundled copy offline). The new app also gets its agent files (the same set `himi agent-init` writes: AGENTS.md, CLAUDE.md, the himalaya skill, HIMALAYA.md, a SessionStart hook) so the next session started inside it picks the work up; --no-agent skips them. It also makes the build board (.himi/studio/, exactly as `himi studio --no-open` does \u2014 it never opens a browser), so every later render, test, validate, push and progress entry refreshes it; and its `next[]` LEADS with the steps for THIS session \u2014 `himi run --watch &`, the first `himi render <homeScreenId> --png --device iphone`, and that picture's `himi progress` postcard \u2014 ahead of the next-session guidance", required: "<name> [--dir] [--template <t>] [--remote] [--no-agent] | --templates" },
   { name: "template", summary: "starter-template catalog + publishing. Every template is a SHOWCASE APP \u2014 a real published release you can open running before you start from it. `list` prints available templates with metadata (title/description/tags) plus each one's start prompt \u2014 pass --remote to include the serve-plane catalog so an agent can pick one; `prompt <name>` prints just that sentence for one template (the skill URL is the public door, or the plane named by --target/--serve-url); `publish` publishes an app AS a `himi init --template` (needs a himalaya.template.json; builds a previewable release + attaches the scaffold source; --source-dir overrides which tree becomes the source, --name sets the template name; bakes a launcher icon \u2014 --icon <png>, or the committed template-icons/<name>.png \u2014 and extracts accent/palette gallery meta from the scaffold's tokens.json; --visibility unlisted keeps it out of the /v1/templates catalog \u2014 templates default to public); `trim --keep <ids>` cuts an app scaffolded from a template down to those screens (the home, and any screen the navigation pins such as a drawer body, always stays) \u2014 it deletes the other SCREENS/TEMPLATED entries whole, prunes navigation (linkableScreens, tabBar, drawer, deep links, surfaces) and drops tier5-src workers no kept screen uses, then runs validate --strict and rolls everything back if it fails (--force keeps it, --dry-run writes nothing). A kept screen that links to a removed one is refused unless --links follow (keep those too) or --links drop (remove the taps)", required: "list [--remote] | prompt <name> | publish [--dir <app>] [--source-dir <dir>] [--name <n>] [--icon <png>] [--visibility public|unlisted] [--target <t>] | trim --keep <id,id,\u2026> [--content <dir>] [--links follow|drop] [--dry-run] [--force]" },
   { name: "build", summary: "compile tier5-src/<name>/index.ts -> dist/bundles/<name>.bundle.js with esbuild (--binary = resolve published @himalaya/*); semantic TypeScript checking belongs to himi validate", required: "[--content <dir>] [--binary]" },
   { name: "functions", summary: "inspect/invoke server functions and operate durable jobs or schedules", required: "list|describe|openapi|invoke | jobs list|get|cancel|retry|dlq | schedule describe|invoke [--app <a>] [--environment preview|production] [--release <id>]" },
@@ -67675,8 +67881,8 @@ var COMMANDS = [
   { name: "validate", summary: "lint the content package (no push): fixed-contract TypeScript checking for tier5-src workers + schema/proto + token refs + component allowlist + $service bindings + strict-enum foot-guns + capability decls + worker boot dry-run + build/compile failures. Type issues are advisory warnings normally; --strict promotes them and hygiene warnings to errors. Exit 1 on any error. Off-repo, the CLI supplies its compiler and SDK declarations.", required: "[--content <dir>] [--strict]" },
   { name: "test", summary: "DERIVED behavioral crawl \u2014 no test files to write. Boots each screen's real worker, replays its onAppear, then dispatches every action site the descriptor already declares (each from a fresh boot) and checks a narrow set of unambiguous invariants: no uncaught throw, never stuck on `loading`, no `$service:` token or NaN/undefined/[object Object] reaching visible text, no binding aimed at state the worker never defines, no nav param silently dropped, no dead nav target. Catches what validate/render cannot \u2014 a WRONG REDUCER passes both with ok:true. Runs the worker in a DEVICE-PARITY sandbox (no setTimeout/setInterval, as on JSC/WebView) so a bundle that would die on device fails here. Crawls on HERMETIC DATA by default \u2014 zero network: the app's own dev/net-mocks.json first (--net <file> overrides), then the config's CMS `seed:` rows, then a canned fixture of frozen real vertical responses shipped with the CLI (exercises code paths, not API-contract truth) \u2014 so the success/mapping path runs, not just the failure UI. Two boot-only HOSTILE passes (every list empty; every request 500) then check the failure/empty day \u2014 corpus-proven, so their findings are errors. NAV EDGES are followed too: every himi.open site ($item params resolved against row 0 of its list, $service against worker state) and worker _nav directive is harvested, and each baked target is booted WITH the params the source sends \u2014 detail screens finally run their content arm; edge findings are errors tagged edge:<source>. --native runs both real native decoders over the exact baked JSON bytes; --native ios or --native android selects one. It is explicit, runs only from a Himalaya SOURCE CHECKOUT (the decoder oracles are that tree's own HimalayaCore Swift package and Gradle harness, which a published install does not ship), and needs the selected local toolchain. From a source checkout, default runs name missing native verdicts in the coverage ledger; elsewhere the ledger stays silent about them rather than offering a remedy you cannot run. --offline strips all data layers (the old reject-all axis); --no-hostile skips the hostile passes. --record (EXPLICIT, never automatic) refreshes dev/net-mocks.json from live reads first: it boots each screen (load + root onAppear ONLY \u2014 nothing the app's own launch would not fire; the tap/action crawl never sees the live transport, and only proven reads \u2014 GET, or read-shaped POST (/query, /search, /list*, \u2026) \u2014 ever reach the wire), freezes the round-trips, then crawls hermetically on the fresh fixture; record against a QA site, not production. Nodes it cannot judge headless are named, never silently passed. Exit 1 on any error. The CLI carries the authoring runtime off-repo; no per-app SDK install is required. --browser runs the whole loop (build \u2192 extract \u2192 validate \u2192 render \u2192 test) in YOUR browser instead of here, so the source never reaches a pod: it opens one screen's worker + descriptor in a tab, blocks on a loopback callback, and prints the report it posts back. One screen per tab \u2014 name it. --no-open prints the URL rather than launching a browser (SSH); --timeout <ms> bounds the wait, which matters because the page has no execution deadline of its own and an infinite loop in the worker hangs the tab.", required: "[<screenId>\u2026] [--content <dir>] [--net <file>] [--budget <ms>] [--deep [n]] [--record] [--native [ios|android]] [--no-shots] [--offline] [--no-hostile] [--all-screens] [--browser] [--no-open] [--timeout <ms>] [--json]" },
   { name: "ux", summary: "audit or record mobile UX evidence. `audit` checks the public-safe contract, seeded blank acceptance rows, placeholder source copy, app-specific mocks, and iOS/Android audit records. It warns while existing templates migrate; `--strict` promotes missing evidence. `record` stores checks performed on an installed iOS/Android build: `--checks` is required for passed|failed and empty for unavailable, which drove nothing and needs a `--reason` instead. `record` also STAMPS the release it audited (it resolves the id from a build, the same one a push would publish), because an unforced `himi push` of a release with screens refuses when no drive is recorded for THAT release, or when the one that is recorded says `failed` \u2014 the artifact stopped being advice nobody reads (#2955). `unavailable` still satisfies it; only `failed` refuses.", required: "audit [--content <dir>] [--strict] [--json] | record --content <dir> --platform ios|android --status passed|failed|unavailable [--checks back,keyboard,...] [--reason <text>]" },
-  { name: "progress", summary: 'the build JOURNAL an agent keeps for the owner while it works. `himi progress "<what changed>" --step <1-8|name> --image <png>` appends one postcard to .himi/progress.jsonl \u2014 the step is one of the customer journey\'s eight (discover, classify, plan, implement, brand, validate, review, download) \u2014 and COPIES each image, content-addressed, into .himi/history/, because .himi/shots/ is overwritten by every render and cleared by every full `himi test`, so a path into it would later show a different picture than the one the owner was sent. --image repeats. --notify also raises a best-effort desktop notification for an owner who stepped away. A bare `himi progress` prints the journal with the current step and elapsed time \u2014 also how an agent recovers its place after its context was compacted. APPROVALS: `--approve <gate> "<what>"` records one the customer just gave (gates: site-create, connect, private-data, draft, promote, push-signing, qa-build) in .himi/approvals.jsonl, and `--done <gate>` / `--drop <gate>` closes it \u2014 an approval is owed until then, and the chat that held it does not survive a new session. `--brief` prints plain text for a session start: the current step, the last postcard, every open approval, and whether this app\'s agent files are stale \u2014 the SessionStart hook `himi agent-init` installs runs exactly this. Local only: nothing is sent anywhere.', required: '["<message>" [--step <1-8|name>] [--image <png>]\u2026 [--notify]] [--content <dir>] | --approve|--done|--drop <gate> ["<note>"] | --brief' },
-  { name: "studio", summary: "open the BUILD BOARD \u2014 one local page the owner can leave open while an agent builds their app, which fills itself in: every screen as it renders (NEW/CHANGED badges, and each earlier version kept for a filmstrip), the journey stepper and the latest postcard from `himi progress`, the validate/test/UX/draft checks as they run, the site next to the app's home screen with its palette, and the navigation the test crawl followed. Writes .himi/studio/index.html and opens it; the page re-reads its state every two seconds, so nothing needs to be served. OPT-IN BY EXISTENCE: until this command has run, no other command touches .himi/studio/ \u2014 after it, render/test/validate/push/icon/site/ux/progress each refresh the board as they finish (best-effort; never fails a command). Every image is a content-addressed copy in .himi/history/, never a live path into .himi/shots/. Local only, no secrets: it never reads a preview token, handover code or control token. --no-open prints the path instead (SSH, CI). `himi studio reel` writes the MAKING-OF: one self-contained HTML file (every image inlined, nothing fetched) with a flipbook of the home screen version by version, captioned by the postcard in effect at the time, the final screens, and every postcard \u2014 sized to stay attachable, thinning frames first. Defaults to .himi/making-of.html (never archived by push); --out to put it elsewhere.", required: "[--content <dir>] [--no-open] | reel [--out <file>] [--no-open]" },
+  { name: "progress", summary: 'the build JOURNAL an agent keeps for the owner while it works. `himi progress "<what changed>" --step <1-8|name> --image <png>` appends one postcard to .himi/progress.jsonl \u2014 the step is one of the customer journey\'s eight (discover, classify, plan, implement, brand, validate, review, download) \u2014 and COPIES each image, content-addressed, into .himi/history/, because .himi/shots/ is overwritten by every render and cleared by every full `himi test`, so a path into it would later show a different picture than the one the owner was sent. --image repeats. --notify also raises a best-effort desktop notification for an owner who stepped away. A bare `himi progress` prints the journal with the current step and elapsed time \u2014 also how an agent recovers its place after its context was compacted. APPROVALS: `--approve <gate> "<what>"` records one the customer just gave (gates: site-create, connect, private-data, draft, promote, push-signing, qa-build) in .himi/approvals.jsonl, and `--done <gate>` / `--drop <gate>` closes it \u2014 an approval is owed until then, and the chat that held it does not survive a new session. `--brief` prints plain text for a session start: the current step, the last postcard, every open approval, and whether this app\'s agent files are stale \u2014 the SessionStart hook `himi agent-init` installs runs exactly this. The CLI also journals three milestones by itself \u2014 the first PNG render of the home screen (once per app), every completed `himi test` crawl, every draft push \u2014 marked `"by": "himi"`; they never move the journey step, carry no link or credential, and step aside (folded out of every reader) when the agent journals the same step or picture within five minutes. Local only: nothing is sent anywhere.', required: '["<message>" [--step <1-8|name>] [--image <png>]\u2026 [--notify]] [--content <dir>] | --approve|--done|--drop <gate> ["<note>"] | --brief' },
+  { name: "studio", summary: "open the BUILD BOARD \u2014 one local page the owner can leave open while an agent builds their app, which fills itself in: every screen as it renders (NEW/CHANGED badges, and each earlier version kept for a filmstrip), the journey stepper and the latest postcard from `himi progress`, the validate/test/UX/draft checks as they run, the site next to the app's home screen with its palette, and the navigation the test crawl followed. Writes .himi/studio/index.html and opens it; the page re-reads its state every two seconds, so nothing needs to be served. OPT-IN BY EXISTENCE: until this command (or `himi init`, which makes the board for every app it creates, without opening a browser) has run, no other command touches .himi/studio/ \u2014 after it, render/test/validate/push/icon/site/ux/progress each refresh the board as they finish (best-effort; never fails a command). Every image is a content-addressed copy in .himi/history/, never a live path into .himi/shots/. Local only, no secrets: it never reads a preview token, handover code or control token. --no-open prints the path instead (SSH, CI). `himi studio reel` writes the MAKING-OF: one self-contained HTML file (every image inlined, nothing fetched) with a flipbook of the home screen version by version, captioned by the postcard in effect at the time, the final screens, and every postcard \u2014 sized to stay attachable, thinning frames first. Defaults to .himi/making-of.html (never archived by push); --out to put it elsewhere.", required: "[--content <dir>] [--no-open] | reel [--out <file>] [--no-open]" },
   { name: "render", summary: "headless-render a screen with the web renderer: render-tree + diagnostics, optional --png [<file>] (bare: .himi/shots/<id>.png, what the build board shows), --scheme dark, --tree. Local by default (content dir). Pass --remote --app --release to hit GET /v1/preview/\u2026/render on the serve plane after a push. Boots the worker so $service bindings resolve; --static raw bindings; --live real Wix fetches; --state injects worker state; --input supplies pre-boot navigation params; --width/--device for PNG viewport; --rtl for dir=rtl + $env:isRTL.", required: "<screenId> [--content <dir>] [--scheme dark] [--png [<file>]] [--tree] [--static] [--live] [--state <json|file>] [--input <json|file>] [--width <px> | --device <name>] [--rtl] [--remote --app --release]" },
   { name: "cms", summary: "inspect, provision, and seed the app's CMS (Wix Data) collections, declared as a `cms` block in config.ts. `query` is READ-ONLY \u2014 by default it fetches ONLY the physical ids `config.ts` declares (item counts + schema drift) and reports `siteScanned: false`; it never lists the site, so an UNDECLARED `himi_<app>_` collection this app owns is not reached without `--all`. `--all` SCANS the site \u2014 every collection it lists is labeled `owned`/`adopted`/`foreign`, and it describes every foreign one \u2014 id, non-system field keys + types, and the site's read role \u2014 so an app with no `cms` block at all can DISCOVER a collection to adopt (`--all` is the one case where a missing `cms` block is not 'nothing to do'). Foreign collections are described up to a cap and are never item-counted (`itemCount: null`), because a row count is one query each; `foreign.count` is how many the scan LISTED \u2014 it follows the list endpoint's pages, and `listingIncomplete: true` says when the walk stopped short of the end, with `unlistedCollections` counting what it left out when Wix gave a paging total \u2014 and `foreign.truncated` says how many of those went undescribed, each still NAMED in `foreign.others` (id + displayName), so a collection the site already has is never hidden behind the cap. The scan is OWNER-scoped \u2014 it needs --site <msid> (or WIX_SITE_ID) plus owner auth via `wix token`; a visitor token can read a public collection's ITEMS but can never enumerate collections, so there is no tokenless discovery path. `create` reconciles declared collections additively and idempotently, and REFUSES any id outside the app's `himi_<app>_` namespace, so it is safe against a production site. It reports declared-vs-site `permissionDrift` but never writes permissions unless asked with --apply-permissions, so a field reconcile can't silently revert access control changed in the dashboard. `seed` inserts the git-tracked `seed:` rows into EMPTY owned collections (--force to add to a non-empty one; --ai writes placeholder rows plus a refinement prompt for you to review). Adopted collections (declared by `wixId`) are read-only and never created, updated, or seeded. Site from --site <msid> or WIX_SITE_ID; owner auth via `wix token`.", required: "query|create|seed [--site <msid>] [--content <dir>] [--all] [--dry-run] [--force] [--allow-destructive] [--apply-permissions] [--only <id>] [--ai] [--count <n>]" },
   { name: "data", summary: "read-only plan or explicitly provision/seed declared KV and Wix Data resources. Preview and production are separate scopes. KV administration uses the operator data plane from --data-url/HIMI_DATA_ADMIN_URL and HIMI_DATA_ADMIN_TOKEN; draft push never calls it.", required: "plan|create|seed [--site <msid>] [--environment preview|production] [--content <dir>] [--data-url <url>] [--dry-run] [--force]" },
@@ -67725,7 +67931,7 @@ var COMMANDS = [
 ];
 function cliVersion() {
   try {
-    return JSON.parse(readFileSync76(new URL("../package.json", import.meta.url), "utf8")).version ?? "unknown";
+    return JSON.parse(readFileSync77(new URL("../package.json", import.meta.url), "utf8")).version ?? "unknown";
   } catch {
     return "unknown";
   }
@@ -67843,7 +68049,7 @@ function ageInDays(publishedAt, now = Date.now()) {
 }
 function packageVersion(path2) {
   try {
-    const version2 = JSON.parse(readFileSync76(path2, "utf8")).version;
+    const version2 = JSON.parse(readFileSync77(path2, "utf8")).version;
     return typeof version2 === "string" && version2 ? version2 : void 0;
   } catch {
     return void 0;
@@ -67852,7 +68058,7 @@ function packageVersion(path2) {
 function resolvedSdkVersion(fromDir = process.cwd(), bundledManifest = new URL("./authoring-runtime/node_modules/@wix/himalaya/package.json", import.meta.url)) {
   let dir = resolve47(fromDir);
   for (; ; ) {
-    const version2 = packageVersion(join62(dir, "node_modules", "@wix", "himalaya", "package.json"));
+    const version2 = packageVersion(join63(dir, "node_modules", "@wix", "himalaya", "package.json"));
     if (version2) return { version: version2, source: "local" };
     const parent = dirname34(dir);
     if (parent === dir) break;
@@ -67862,7 +68068,7 @@ function resolvedSdkVersion(fromDir = process.cwd(), bundledManifest = new URL("
   if (bundled) return { version: bundled, source: "bundled" };
   try {
     const root = execFileSync7("npm", ["root", "-g"], { stdio: ["ignore", "pipe", "ignore"] }).toString().trim();
-    const version2 = root ? packageVersion(join62(root, "@wix", "himalaya", "package.json")) : void 0;
+    const version2 = root ? packageVersion(join63(root, "@wix", "himalaya", "package.json")) : void 0;
     return version2 ? { version: version2, source: "global" } : {};
   } catch {
     return {};
@@ -67909,11 +68115,11 @@ var UPDATE_RETRY_AFTER_FAILURE_MS = 60 * 60 * 1e3;
 var UPDATE_SNOOZE_MS = 24 * 60 * 60 * 1e3;
 var UPDATE_REEXEC_ENV = "HIMI_UPDATED_ONCE";
 function updateCachePath(env = process.env) {
-  return env.HIMI_UPDATE_CACHE_FILE ?? join62(homedir7(), ".himalaya", "update-check.json");
+  return env.HIMI_UPDATE_CACHE_FILE ?? join63(homedir7(), ".himalaya", "update-check.json");
 }
 function readUpdateCache(path2) {
   try {
-    const parsed = JSON.parse(readFileSync76(path2, "utf8"));
+    const parsed = JSON.parse(readFileSync77(path2, "utf8"));
     return parsed && typeof parsed === "object" ? parsed : {};
   } catch {
     return {};
@@ -67981,12 +68187,12 @@ function createUpdateRunner(spawn7 = spawnSync5) {
     },
     installedVersion: () => {
       const root = globalNodeModulesRoot();
-      return root ? packageVersion(join62(root, "@wix", "himalaya-cli", "package.json")) : void 0;
+      return root ? packageVersion(join63(root, "@wix", "himalaya-cli", "package.json")) : void 0;
     },
     reexec: (argv) => {
       const root = globalNodeModulesRoot();
-      const entry = root ? join62(root, "@wix", "himalaya-cli", "dist", "cli.mjs") : void 0;
-      if (!entry || !existsSync64(entry)) return void 0;
+      const entry = root ? join63(root, "@wix", "himalaya-cli", "dist", "cli.mjs") : void 0;
+      if (!entry || !existsSync65(entry)) return void 0;
       const result = spawnSync5(process.execPath, [entry, ...argv], {
         // inherit keeps PIPED STDIN working — commands that read stdin must survive a re-exec.
         stdio: "inherit",
@@ -68033,7 +68239,7 @@ function staleUpdateLockFile(cachePath, now) {
   for (const path2 of [`${cachePath}.lock.break`, `${cachePath}.lock`]) {
     let content;
     try {
-      content = readFileSync76(path2, "utf8");
+      content = readFileSync77(path2, "utf8");
     } catch {
       continue;
     }
@@ -68056,7 +68262,7 @@ function acquireUpdateLock(cachePath, now, hooks = {}) {
   const mine = lockStamp(now);
   const readLock = (path2) => {
     try {
-      return readFileSync76(path2, "utf8");
+      return readFileSync77(path2, "utf8");
     } catch {
       return void 0;
     }
@@ -68640,7 +68846,7 @@ function executableOnPath(name, env = process.env) {
   const suffixes = process.platform === "win32" ? (env.PATHEXT ?? ".COM;.EXE;.BAT;.CMD").split(";").filter(Boolean) : [""];
   for (const dir of entries) {
     for (const suffix of suffixes) {
-      const candidate = join62(dir, `${name}${suffix}`);
+      const candidate = join63(dir, `${name}${suffix}`);
       try {
         if (!statSync17(candidate).isFile()) continue;
         if (process.platform !== "win32") accessSync(candidate, constants2.X_OK);
@@ -68749,7 +68955,7 @@ async function nativeConfigAdvisories(app, configSource) {
     const { iosProjectYml: iosProjectYml2 } = await Promise.resolve().then(() => (init_paths2(), paths_exports));
     const { androidOptedIn: androidOptedIn3, LABEL_IOS_SPLASH: LABEL_IOS_SPLASH2 } = await Promise.resolve().then(() => (init_splash(), splash_exports));
     const iosYmlPath = iosProjectYml2(app);
-    const iosYml = existsSync64(iosYmlPath) ? readFileSync76(iosYmlPath, "utf8") : "";
+    const iosYml = existsSync65(iosYmlPath) ? readFileSync77(iosYmlPath, "utf8") : "";
     let optedIn = iosYml.includes(LABEL_IOS_SPLASH2);
     if (!optedIn) {
       const { androidManifestPath: androidManifestPath3 } = await Promise.resolve().then(() => (init_gen_native_config(), gen_native_config_exports));
@@ -68763,7 +68969,7 @@ async function nativeConfigAdvisories(app, configSource) {
 }
 function readConfigSource(dir) {
   try {
-    return readFileSync76(join62(dir, "config.ts"), "utf8");
+    return readFileSync77(join63(dir, "config.ts"), "utf8");
   } catch {
     return null;
   }
@@ -68799,7 +69005,7 @@ function keptPlan(kept) {
 }
 async function initFromRemoteTemplate(name, parentDir, template, c) {
   const dir = resolve47(parentDir, name);
-  if (existsSync64(join62(dir, "himalaya.content.json"))) {
+  if (existsSync65(join63(dir, "himalaya.content.json"))) {
     throw new Error(`content package already exists at ${dir}`);
   }
   const r = await c.fetchTemplateSource(TEMPLATE_APP_PREFIX + template);
@@ -68842,7 +69048,7 @@ function symlinkDestinationIssue(dest) {
 function restoreDestinationIssue(dest, force) {
   const link = symlinkDestinationIssue(dest);
   if (link) return link;
-  if (!existsSync64(dest)) return null;
+  if (!existsSync65(dest)) return null;
   if (!statSync17(dest).isDirectory()) {
     return { error: `${dest} exists and is not a directory`, hint: "pass --out/--name to land somewhere else, or remove the file" };
   }
@@ -68857,7 +69063,7 @@ function restoreDestinationIssue(dest, force) {
 function isHimalayaMonorepoCheckout(start) {
   let dir = resolve47(start);
   for (; ; ) {
-    if (existsSync64(join62(dir, "tools", "himi-cli", "src", "cli.ts")) && existsSync64(join62(dir, "core", "serve", "src", "server.ts"))) return true;
+    if (existsSync65(join63(dir, "tools", "himi-cli", "src", "cli.ts")) && existsSync65(join63(dir, "core", "serve", "src", "server.ts"))) return true;
     const parent = dirname34(dir);
     if (parent === dir) return false;
     dir = parent;
@@ -68895,7 +69101,7 @@ function shellShaDivergenceWarnings(jobs) {
 }
 async function templatePublishName(sourceDir) {
   const id = await appId(sourceDir);
-  return IDENTITY_SENTINELS.some((s) => id.includes(s)) ? basename15(sourceDir) : id;
+  return IDENTITY_SENTINELS.some((s) => id.includes(s)) ? basename16(sourceDir) : id;
 }
 function templateNameError(name, from) {
   if (name.startsWith(TEMPLATE_APP_PREFIX)) {
@@ -68918,7 +69124,7 @@ function materializeForPreview(appDir2, slug, displayName) {
     Object.entries(files).map(([rel, body]) => [rel, rel === "himalaya.content.json" ? substituteIdentity(body, slug) : body])
   );
   const repoRoot2 = resolve47(fileURLToPath24(new URL("../../..", import.meta.url)));
-  const root = join62(repoRoot2, "node_modules", ".cache", "himi-template-preview");
+  const root = join63(repoRoot2, "node_modules", ".cache", "himi-template-preview");
   const stillRunning = (pid) => {
     try {
       process.kill(pid, 0);
@@ -68932,12 +69138,12 @@ function materializeForPreview(appDir2, slug, displayName) {
       if (!entry.isDirectory()) continue;
       const pid = Number(entry.name.startsWith(`${slug}-`) ? entry.name.slice(slug.length + 1) : NaN);
       if (Number.isInteger(pid) && pid > 0 && pid !== process.pid && !stillRunning(pid)) {
-        rmSync14(join62(root, entry.name), { recursive: true, force: true });
+        rmSync14(join63(root, entry.name), { recursive: true, force: true });
       }
     }
   } catch {
   }
-  const dest = join62(root, `${slug}-${process.pid}`);
+  const dest = join63(root, `${slug}-${process.pid}`);
   rmSync14(dest, { recursive: true, force: true });
   mkdirSync31(dest, { recursive: true });
   try {
@@ -68950,17 +69156,17 @@ function materializeForPreview(appDir2, slug, displayName) {
 }
 async function appId(dir) {
   try {
-    const { readFileSync: readFileSync77 } = await import("node:fs");
-    const m = JSON.parse(readFileSync77(join62(dir, "himalaya.content.json"), "utf8"));
+    const { readFileSync: readFileSync78 } = await import("node:fs");
+    const m = JSON.parse(readFileSync78(join63(dir, "himalaya.content.json"), "utf8"));
     if (m.name) return m.name;
   } catch {
   }
-  return basename15(dir);
+  return basename16(dir);
 }
 async function contentVisibility(dir) {
   try {
-    const { readFileSync: readFileSync77 } = await import("node:fs");
-    const m = JSON.parse(readFileSync77(join62(dir, "himalaya.content.json"), "utf8"));
+    const { readFileSync: readFileSync78 } = await import("node:fs");
+    const m = JSON.parse(readFileSync78(join63(dir, "himalaya.content.json"), "utf8"));
     if (m.visibility === "public" || m.visibility === "unlisted") return m.visibility;
   } catch {
   }
@@ -69184,7 +69390,7 @@ Seed your coding agent with \`himi agent-init\`. Guides: ${idx.portalUrl}`);
         ...res.removed.length ? { removed: res.removed, note: "older copies at the app root, moved to .himi/legacy-agent-files/ (a backup, in case one became app code) \u2014 the current ones live in .agents/skills/himalaya/" } : {},
         // In a git repo the refresh moves the diff identity an earlier `himi test` attested (that
         // hash is shared with the repo gates and deliberately exempts nothing but its own metadata).
-        ...existsSync64(join62(dir, ".himi", "attestations", "latest.json")) ? { next: "if `himi push` then refuses the attestation as stale, re-run `himi test` \u2014 in a git checkout this refresh changed the tree it covered" } : {},
+        ...existsSync65(join63(dir, ".himi", "attestations", "latest.json")) ? { next: "if `himi push` then refuses the attestation as stale, re-run `himi test` \u2014 in a git checkout this refresh changed the tree it covered" } : {},
         ...res.skipped.length ? { skipped: res.skipped } : {},
         portalUrl: idx.portalUrl
       });
@@ -69207,7 +69413,7 @@ async function recordedReleaseForContentQuietly(dir, resolution, onDrift) {
   try {
     const { buildContentForValidation: buildContentForValidation2, buildReleaseFromContent: buildReleaseFromContent2, bundleOutDir: bundleOutDir2 } = await loadAuthoring();
     const bres = await buildContentForValidation2(dir, { resolution });
-    out = mkdtempSync4(join62(tmpdir5(), "himi-ux-record-"));
+    out = mkdtempSync4(join63(tmpdir5(), "himi-ux-record-"));
     const hasWorkers = bres.built.length > 0 || bres.compileErrors.length > 0;
     const outcome = await buildReleaseFromContent2(dir, out, { ...hasWorkers ? { tier5Dir: bundleOutDir2(dir) } : {}, collect: { lint: true } });
     const releaseId = outcome.manifest.releaseId;
@@ -69257,8 +69463,8 @@ function uxRestoreCommands(ctx) {
   };
 }
 function uxHandoverHint(uxEvidence, ctx) {
-  const { releaseId, contentArg, door, app } = ctx;
-  const uxRemedy = uxRecordCommands(contentArg);
+  const { releaseId, contentArg: contentArg2, door, app } = ctx;
+  const uxRemedy = uxRecordCommands(contentArg2);
   if (uxEvidence.state === "inherited-screens") {
     const restore = uxRestoreCommands(ctx);
     const alsoOwed = uxEvidence.supersededState === "failed" ? ` This package's own drive FAILED on ${uxEvidence.failedPlatforms.join(", ")}, so you owe more than a record: fix what that drive found, then record it against the restored tree \u2014 re-recording a failure without changing the app writes the same failure down again.` : uxEvidence.supersededState ? ` This package also has no drive this gate accepts (${uxEvidence.supersededState}), so the record below is a step you take AFTER the restore, not instead of it.` : "";
@@ -69385,7 +69591,7 @@ async function producedWidgetFamilies(dir) {
     let js;
     for (const candidate of [`${name}.bundle.js`, `${name}.js`, name]) {
       try {
-        js = readFileSync76(join62(outDir, candidate), "utf8");
+        js = readFileSync77(join63(outDir, candidate), "utf8");
         break;
       } catch {
       }
@@ -69416,7 +69622,7 @@ async function producedWidgetFamilies(dir) {
   }
   return { families, source: "dist/bundles" };
 }
-var boardOpen = (dir) => existsSync64(join62(dir, ".himi", "studio", "index.html"));
+var boardOpen = (dir) => existsSync65(join63(dir, ".himi", "studio", "index.html"));
 var BOARD_REFRESHERS = /* @__PURE__ */ new Set(["render", "test", "validate", "build", "push", "icon", "site", "ux", "progress"]);
 async function leaveForBoard(dir, record2, value) {
   if (!boardOpen(dir)) return;
@@ -69711,12 +69917,18 @@ himi v${cliVersion()} \u2014 run \`himi --version\`. If authoring commands fail
             const owed = openApprovals2(readApprovals2(dir).events).length;
             next.push(`carried the planning journal into the app (${carried.join(", ")}${owed ? `; ${owed} approval${owed === 1 ? "" : "s"} still owed` : ""}) \u2014 \`himi progress --brief\` there shows it`);
           }
-          const planInParent = ["SPEC.md", "MOBILE-UX.md"].filter((f) => existsSync64(join62(parentDir, f)));
+          const planInParent = ["SPEC.md", "MOBILE-UX.md"].filter((f) => existsSync65(join63(parentDir, f)));
           if (planInParent.length) {
             next.push(`${planInParent.join(" and ")} in ${parentDir} ${planInParent.length > 1 ? "are" : "is"} not the app's \u2014 if that is the approved plan, move it over the template's boilerplate in ${dir}`);
           }
           return { ...seeded, next };
         };
+        const startSession = async (dir, agent2) => {
+          const { openBoardForSession: openBoardForSession2, sessionSteps: sessionSteps2, homeScreenIdOf: homeScreenIdOf2 } = await Promise.resolve().then(() => (init_milestones(), milestones_exports));
+          const board = await openBoardForSession2(dir);
+          const { next: later2, ...rest } = agent2;
+          return { ...rest, board, next: [...sessionSteps2({ dir, home: homeScreenIdOf2(dir) }), ...later2 ?? []] };
+        };
         if (template && flags.remote === true) {
           let fetched;
           try {
@@ -69729,14 +69941,14 @@ himi v${cliVersion()} \u2014 run \`himi --version\`. If authoring commands fail
             io.error(JSON.stringify({ warning: `remote template fetch failed (${e.message}); falling back to the bundled "${template}"` }));
           }
           if (fetched) {
-            const agent2 = await withAgentFiles(fetched.dir);
+            const agent2 = await startSession(fetched.dir, await withAgentFiles(fetched.dir));
             const pushSetup2 = await offerPushSetup2({ contentDir: fetched.dir, flags, io });
             print({ ok: true, app: name, dir: fetched.dir, template, source: "remote", files: fetched.files, ...keptPlan(fetched.kept), ...agent2, pushSetup: pushSetup2 });
             return 0;
           }
         }
         const res = scaffoldContentPackage(name, parentDir, template);
-        const agent = await withAgentFiles(res.dir);
+        const agent = await startSession(res.dir, await withAgentFiles(res.dir));
         const pushSetup = await offerPushSetup2({ contentDir: res.dir, flags, io });
         print({ ok: true, app: name, dir: res.dir, ...template ? { template, source: "embedded" } : {}, files: res.files, ...keptPlan(res.kept), ...agent, pushSetup });
         return 0;
@@ -69838,7 +70050,7 @@ himi v${cliVersion()} \u2014 run \`himi --version\`. If authoring commands fail
             const sourceDir = resolve47(str6(flags["source-dir"]) ?? appDir2);
             let meta;
             try {
-              meta = JSON.parse(readFileSync76(join62(sourceDir, TEMPLATE_META_FILE), "utf8"));
+              meta = JSON.parse(readFileSync77(join63(sourceDir, TEMPLATE_META_FILE), "utf8"));
             } catch {
               io.error(JSON.stringify({ error: `no ${TEMPLATE_META_FILE} in ${sourceDir} \u2014 a template must declare { title, description, tags } to be published`, hint: `add ${TEMPLATE_META_FILE} next to himalaya.content.json (or pass --source-dir <dir>)` }));
               return 2;
@@ -69848,7 +70060,7 @@ himi v${cliVersion()} \u2014 run \`himi --version\`. If authoring commands fail
               return 2;
             }
             try {
-              const appearance = extractTemplateAppearance(JSON.parse(readFileSync76(join62(sourceDir, "tokens.json"), "utf8")));
+              const appearance = extractTemplateAppearance(JSON.parse(readFileSync77(join63(sourceDir, "tokens.json"), "utf8")));
               meta = { ...appearance, ...meta };
             } catch {
             }
@@ -69870,7 +70082,7 @@ himi v${cliVersion()} \u2014 run \`himi --version\`. If authoring commands fail
             const force = flags.force === true;
             const { buildContentForValidation: buildContentForValidation2, buildReleaseFromContent: buildReleaseFromContent2, bundleOutDir: bundleOutDir2 } = await loadAuthoring();
             const bres = await buildContentForValidation2(buildDir, { resolution: resolutionFlag(flags) });
-            const out = mkdtempSync4(join62(tmpdir5(), "himi-template-"));
+            const out = mkdtempSync4(join63(tmpdir5(), "himi-template-"));
             publishScratch.push(out);
             const hasWorkers = bres.built.length > 0 || bres.compileErrors.length > 0;
             const outcome = await buildReleaseFromContent2(buildDir, out, {
@@ -69924,7 +70136,7 @@ himi v${cliVersion()} \u2014 run \`himi --version\`. If authoring commands fail
             let iconHash;
             if (iconPath) {
               try {
-                const bytes2 = readFileSync76(iconPath);
+                const bytes2 = readFileSync77(iconPath);
                 payload.icon = bytes2.toString("base64");
                 iconHash = createHash28("sha256").update(bytes2).digest("hex");
               } catch {
@@ -70167,7 +70379,7 @@ himi v${cliVersion()} \u2014 run \`himi --version\`. If authoring commands fail
         const { navIssues: navIssues2 } = await Promise.resolve().then(() => (init_nav_lint(), nav_lint_exports));
         const { buildContentForValidation: buildContentForValidation2, buildReleaseFromContent: buildReleaseFromContent2, bundleOutDir: bundleOutDir2 } = await loadAuthoring();
         const bres = await buildContentForValidation2(dir, { resolution: resolutionFlag(flags) });
-        const out = mkdtempSync4(join62(tmpdir5(), "himi-validate-"));
+        const out = mkdtempSync4(join63(tmpdir5(), "himi-validate-"));
         const hasWorkers = bres.built.length > 0 || bres.compileErrors.length > 0;
         const outcome = await buildReleaseFromContent2(dir, out, {
           ...hasWorkers ? { tier5Dir: bundleOutDir2(dir) } : {},
@@ -70210,7 +70422,7 @@ himi v${cliVersion()} \u2014 run \`himi --version\`. If authoring commands fail
           const path2 = dpxSessionTokenPath();
           let raw;
           try {
-            raw = readFileSync76(path2, "utf8");
+            raw = readFileSync77(path2, "utf8");
           } catch {
             throw new Error(`no DPX BO session at ${path2}; run dpx auth login, write dpx auth token to that path, then himi login --dpx --target bo`);
           }
@@ -70330,13 +70542,13 @@ himi v${cliVersion()} \u2014 run \`himi --version\`. If authoring commands fail
       case "studio": {
         const { openStudio: openStudio2 } = await Promise.resolve().then(() => (init_studio(), studio_exports));
         const dir = contentDir(flags);
-        if (!existsSync64(join62(dir, "himalaya.content.json"))) {
+        if (!existsSync65(join63(dir, "himalaya.content.json"))) {
           io.error(JSON.stringify({ ok: false, error: "not_a_content_package", dir, hint: "run from the app directory (or pass --content <dir>) \u2014 the board reads that package's .himi/" }));
           return 2;
         }
         if (pos[1] === "reel") {
           const { buildReel: buildReel2 } = await Promise.resolve().then(() => (init_studio_reel(), studio_reel_exports));
-          const out = resolve47(str6(flags.out) ?? join62(dir, ".himi", "making-of.html"));
+          const out = resolve47(str6(flags.out) ?? join63(dir, ".himi", "making-of.html"));
           const { html, plan } = buildReel2(dir);
           mkdirSync31(dirname34(out), { recursive: true });
           writeFileSync29(out, html);
@@ -70402,8 +70614,8 @@ himi v${cliVersion()} \u2014 run \`himi --version\`. If authoring commands fail
           formatBrief: formatBrief2
         } = await Promise.resolve().then(() => (init_progress(), progress_exports));
         const dir = contentDir(flags);
-        const journal = journalPath2(dir);
-        const isContentPackage = existsSync64(join62(dir, "himalaya.content.json"));
+        const journal2 = journalPath2(dir);
+        const isContentPackage = existsSync65(join63(dir, "himalaya.content.json"));
         const hint = isContentPackage ? {} : { hint: "no himalaya.content.json here \u2014 run from the app directory (or pass --content <dir>) so the build board finds this journal" };
         const message = pos.slice(1).join(" ").trim();
         const approvalFlags = ["approve", "done", "drop"].filter((f) => flags[f] !== void 0);
@@ -70455,7 +70667,7 @@ himi v${cliVersion()} \u2014 run \`himi --version\`. If authoring commands fail
           }
           const { entries, skipped } = readProgress2(dir);
           const approvals = openApprovals2(readApprovals2(dir).events);
-          print({ ok: true, journal, ...summarizeProgress2(entries), entries, ...approvals.length ? { approvals } : {}, ...skipped ? { skipped } : {}, ...hint });
+          print({ ok: true, journal: journal2, ...summarizeProgress2(entries), entries, ...approvals.length ? { approvals } : {}, ...skipped ? { skipped } : {}, ...hint });
           return 0;
         }
         let step;
@@ -70476,7 +70688,7 @@ himi v${cliVersion()} \u2014 run \`himi --version\`. If authoring commands fail
           const entry = appendProgress2(dir, { message, ...step ? { step } : {}, images });
           const notified = flags.notify === true ? await notifyDesktop2(`himi \xB7 ${appLabel2(dir) ?? "your app"}`, message) : void 0;
           const { count: count2 } = summarizeProgress2(readProgress2(dir).entries);
-          print({ ok: true, entry, journal, count: count2, ...notified === void 0 ? {} : { notified }, ...hint });
+          print({ ok: true, entry, journal: journal2, count: count2, ...notified === void 0 ? {} : { notified }, ...hint });
           return 0;
         } catch (e) {
           if (e instanceof ProgressError2) {
@@ -70539,7 +70751,7 @@ himi v${cliVersion()} \u2014 run \`himi --version\`. If authoring commands fail
       case "test": {
         const dir = contentDir(flags);
         const structuredOutput = flags.json === true || io.isTTY !== true;
-        if (existsSync64(join62(dir, "functions"))) {
+        if (existsSync65(join63(dir, "functions"))) {
           const { invokeLocalFunction: invokeLocalFunction2, loadFunctionsApp: loadFunctionsApp2 } = await Promise.resolve().then(() => (init_functions(), functions_exports));
           const loaded = await loadFunctionsApp2(dir);
           const results = [];
@@ -70626,7 +70838,7 @@ himi v${cliVersion()} \u2014 run \`himi --version\`. If authoring commands fail
           }
         }
         const bres = await buildContentBundles2(dir, { resolution: resolutionFlag(flags) });
-        const out = mkdtempSync4(join62(tmpdir5(), "himi-test-"));
+        const out = mkdtempSync4(join63(tmpdir5(), "himi-test-"));
         const hasWorkers = bres.built.length > 0 || bres.compileErrors.length > 0;
         const outcome = await buildReleaseFromContent2(dir, out, {
           ...hasWorkers ? { tier5Dir: bundleOutDir2(dir) } : {},
@@ -70671,7 +70883,7 @@ himi v${cliVersion()} \u2014 run \`himi --version\`. If authoring commands fail
             io.error(JSON.stringify({ error: `screen "${screen.screenId}" has no Tier-5 worker, so there is nothing for the browser loop to build` }));
             return 2;
           }
-          const sources = collectWorkerSources2(join62(dir, "tier5-src"), screen.bundleName);
+          const sources = collectWorkerSources2(join63(dir, "tier5-src"), screen.bundleName);
           if (!sources) {
             io.error(JSON.stringify({ error: `no worker source found at tier5-src/${screen.bundleName} \u2014 the browser loop compiles SOURCE, not the built bundle` }));
             return 2;
@@ -70836,7 +71048,7 @@ himi v${cliVersion()} \u2014 run \`himi --version\`. If authoring commands fail
             const sp = await runShotsPass2({
               descriptors: scopeDescriptors2(outcome.descriptors ?? [], pos.slice(1), invalidScreens),
               tokens: outcome.tokens,
-              outDir: join62(dir, ".himi", "shots"),
+              outDir: join63(dir, ".himi", "shots"),
               width: 390,
               layers: { rules: shotRules, ...cmsSeed ? { cmsSeed } : {}, ...canned ? { canned: canned.byKey } : {} },
               ...budgetMs ? { budgetMs } : {},
@@ -70874,7 +71086,7 @@ himi v${cliVersion()} \u2014 run \`himi --version\`. If authoring commands fail
           releaseId: result.releaseId,
           releasePayload: release,
           descriptors: attestedDescriptors,
-          screenshots: Object.fromEntries(writtenShots.filter((name) => crawledScreens.has(name.replace(/\.png$/, ""))).map((name) => [name.replace(/\.png$/, ""), join62(dir, ".himi", "shots", name)])),
+          screenshots: Object.fromEntries(writtenShots.filter((name) => crawledScreens.has(name.replace(/\.png$/, ""))).map((name) => [name.replace(/\.png$/, ""), join63(dir, ".himi", "shots", name)])),
           coverage: {
             screens: crawledScreens.size,
             actionsDispatched: result.actions.exercised,
@@ -70886,14 +71098,30 @@ himi v${cliVersion()} \u2014 run \`himi --version\`. If authoring commands fail
             counts: { errors: result.counts.errors, warnings: result.counts.warnings, gaps: ledger.length }
           }
         });
+        const home = outcome.homeScreenId;
+        const { afterTestRun: afterTestRun2 } = await Promise.resolve().then(() => (init_milestones(), milestones_exports));
+        const afterRun = afterTestRun2(dir, {
+          runId: attestation.runId,
+          screens: crawledScreens.size,
+          actions: result.actions.exercised,
+          errors: result.counts.errors,
+          ...result.navGraph ? { broken: result.navGraph.broken.length, unreached: result.navGraph.unreached.length } : {},
+          ...home && writtenShots.includes(`${home}.png`) ? { homeShot: join63(dir, ".himi", "shots", `${home}.png`) } : {},
+          boardOpen: boardOpen(dir)
+        });
         if (structuredOutput) {
-          print(foldLegacyReport(legacy, {
-            source: "test",
-            evidence: { runId: attestation.runId, ts: attestation.runId.slice(0, 24), gitDiffHash },
-            gaps: ledger,
-            artifacts: result.shots?.dir ? [{ kind: "shots-dir", path: result.shots.dir }] : []
-          }));
-        } else io.log(formatReport2(result) + formatDelta2(delta) + formatLedger2(ledger, trend));
+          print({
+            ...foldLegacyReport(legacy, {
+              source: "test",
+              evidence: { runId: attestation.runId, ts: attestation.runId.slice(0, 24), gitDiffHash },
+              gaps: ledger,
+              artifacts: result.shots?.dir ? [{ kind: "shots-dir", path: result.shots.dir }] : []
+            }),
+            ...afterRun.postcard ? { postcard: afterRun.postcard } : {},
+            next: afterRun.next
+          });
+        } else io.log(formatReport2(result) + formatDelta2(delta) + formatLedger2(ledger, trend) + `
+${afterRun.next.join("\n")}`);
         await leaveForBoard(dir, "edges", result.edges ?? []);
         if (result.navGraph) await leaveForBoard(dir, "map", result.navGraph);
         return result.ok ? 0 : 1;
@@ -70965,7 +71193,7 @@ himi v${cliVersion()} \u2014 run \`himi --version\`. If authoring commands fail
             return 2;
           }
           try {
-            const raw = stateArg.trim().startsWith("{") ? stateArg : readFileSync76(stateArg.replace(/^@/, ""), "utf8");
+            const raw = stateArg.trim().startsWith("{") ? stateArg : readFileSync77(stateArg.replace(/^@/, ""), "utf8");
             injectedState = JSON.parse(raw);
           } catch (e) {
             io.error(JSON.stringify({ error: `--state must be inline JSON or a path to a .json file \u2014 ${e.message}` }));
@@ -70980,7 +71208,7 @@ himi v${cliVersion()} \u2014 run \`himi --version\`. If authoring commands fail
             return 2;
           }
           try {
-            const raw = inputArg.trim().startsWith("{") ? inputArg : readFileSync76(inputArg.replace(/^@/, ""), "utf8");
+            const raw = inputArg.trim().startsWith("{") ? inputArg : readFileSync77(inputArg.replace(/^@/, ""), "utf8");
             const parsed = JSON.parse(raw);
             if (!parsed || typeof parsed !== "object" || Array.isArray(parsed)) throw new Error("must be a JSON object");
             injectedInput = parsed;
@@ -71029,7 +71257,7 @@ himi v${cliVersion()} \u2014 run \`himi --version\`. If authoring commands fail
         }
         const { buildContentBundles: buildContentBundles2, buildReleaseFromContent: buildReleaseFromContent2, bundleOutDir: bundleOutDir2 } = await loadAuthoring();
         const bres = await buildContentBundles2(dir, { resolution: resolutionFlag(flags) });
-        const out = mkdtempSync4(join62(tmpdir5(), "himi-render-"));
+        const out = mkdtempSync4(join63(tmpdir5(), "himi-render-"));
         const hasWorkers = bres.built.length > 0 || bres.compileErrors.length > 0;
         const outcome = await buildReleaseFromContent2(dir, out, {
           ...hasWorkers ? { tier5Dir: bundleOutDir2(dir) } : {},
@@ -71043,7 +71271,7 @@ himi v${cliVersion()} \u2014 run \`himi --version\`. If authoring commands fail
         const diagnostics = (outcome.lint ?? []).find((s) => s.screenId === screenId)?.issues ?? [];
         let pngFile;
         let attestationPngFile;
-        const shotPath = join62(dir, ".himi", "shots", `${screenId}.png`);
+        const shotPath = join63(dir, ".himi", "shots", `${screenId}.png`);
         const pngTarget = typeof flags.png === "string" ? str6(flags.png) : flags.png === true ? shotPath : void 0;
         if (pngTarget && r.pngBase64) {
           pngFile = writePngFile(pngTarget, r.pngBase64);
@@ -71111,15 +71339,20 @@ himi v${cliVersion()} \u2014 run \`himi --version\`. If authoring commands fail
           coverage: { screens: 1, actionsDispatched: 0, uncoveredFns: 0, gaps: provisional.counts.gaps },
           report: { ok: provisional.ok, counts: provisional.counts }
         });
-        print(foldLegacyReport(legacyRender, {
-          source: "render",
-          app,
-          screenId,
-          releaseId: outcome.manifest.releaseId,
-          findings: diagnostics,
-          evidence: { runId: attestation.runId, ts: attestation.runId.slice(0, 24), gitDiffHash },
-          artifacts: pngFile ? [{ kind: "png", path: pngFile }] : []
-        }));
+        const afterPng = pngFile ? (await Promise.resolve().then(() => (init_milestones(), milestones_exports))).afterRenderPng(dir, { screenId, homeScreenId: outcome.homeScreenId ?? null, pngFile, renderable: r.renderable, content: str6(flags.content) }) : null;
+        print({
+          ...foldLegacyReport(legacyRender, {
+            source: "render",
+            app,
+            screenId,
+            releaseId: outcome.manifest.releaseId,
+            findings: diagnostics,
+            evidence: { runId: attestation.runId, ts: attestation.runId.slice(0, 24), gitDiffHash },
+            artifacts: pngFile ? [{ kind: "png", path: pngFile }] : []
+          }),
+          ...afterPng?.postcard ? { postcard: afterPng.postcard } : {},
+          ...afterPng?.next.length ? { next: afterPng.next } : {}
+        });
         return r.renderable ? 0 : 1;
       }
       case "tokens": {
@@ -71379,7 +71612,7 @@ default (no --glyph): ${DEFAULT_GLYPH2} \u2014 a mark that claims nothing, so th
           io.error(JSON.stringify(linked));
           return 1;
         }
-        if (existsSync64(dest)) {
+        if (existsSync65(dest)) {
           if (!statSync17(dest).isDirectory()) {
             io.error(JSON.stringify({
               error: `${dest} exists and is not a directory`,
@@ -71392,7 +71625,7 @@ default (no --glyph): ${DEFAULT_GLYPH2} \u2014 a mark that claims nothing, so th
             io.error(JSON.stringify({ error: `${dest} already exists and is not empty`, hint: "pass --force to write into it anyway (merging, and naming what it keeps), --replace to restore exactly what was archived, or --out/--name to land somewhere else" }));
             return 1;
           }
-          if (replace && occupied && !existsSync64(join62(dest, "himalaya.content.json"))) {
+          if (replace && occupied && !existsSync65(join63(dest, "himalaya.content.json"))) {
             io.error(JSON.stringify({
               error: `${dest} is not a content package \u2014 refusing to --replace it`,
               hint: "--replace only clears a directory that holds himalaya.content.json. Check --out/--name, or pass --force to merge into it instead."
@@ -71533,7 +71766,7 @@ default (no --glyph): ${DEFAULT_GLYPH2} \u2014 a mark that claims nothing, so th
         const force = flags.force === true;
         const { buildContentForValidation: buildContentForValidation2, buildReleaseFromContent: buildReleaseFromContent2, bundleOutDir: bundleOutDir2 } = await loadAuthoring();
         const bres = await buildContentForValidation2(dir, { resolution: resolutionFlag(flags) });
-        const out = mkdtempSync4(join62(tmpdir5(), "himi-push-"));
+        const out = mkdtempSync4(join63(tmpdir5(), "himi-push-"));
         const hasWorkers = bres.built.length > 0 || bres.compileErrors.length > 0;
         const outcome = await buildReleaseFromContent2(dir, out, {
           ...hasWorkers ? { tier5Dir: bundleOutDir2(dir) } : {},
@@ -71559,8 +71792,8 @@ default (no --glyph): ${DEFAULT_GLYPH2} \u2014 a mark that claims nothing, so th
         const manifest = outcome.manifest;
         const payload = await loadReleaseFromDir(declared, out);
         const { shellQuote: shellQuote2 } = await Promise.resolve().then(() => (init_shell_quote(), shell_quote_exports));
-        const contentRel = relative11(process.cwd(), dir) || ".";
-        const contentArg = shellQuote2(contentRel);
+        const contentRel = relative12(process.cwd(), dir) || ".";
+        const contentArg2 = shellQuote2(contentRel);
         if (onlyRaw !== void 0) {
           const onlyDraft = flags.draft === true;
           const { parseOnlySelectors: parseOnlySelectors2, planFromPayload: planFromPayload2, notCarriedDiff: notCarriedDiff2 } = await Promise.resolve().then(() => (init_release_patch2(), release_patch_exports));
@@ -71604,7 +71837,7 @@ default (no --glyph): ${DEFAULT_GLYPH2} \u2014 a mark that claims nothing, so th
           });
           const patchUxContext = {
             releaseId: manifest.releaseId,
-            contentArg,
+            contentArg: contentArg2,
             contentDir: contentRel,
             app,
             door: echoedInvocation("himi push", flags, shellQuote2),
@@ -71699,7 +71932,7 @@ default (no --glyph): ${DEFAULT_GLYPH2} \u2014 a mark that claims nothing, so th
         const staleEvidence = evidence.staleRuns > 0 ? `${evidence.staleRuns} retained attestation(s) were recorded at this commit, but none describes the content being published` : null;
         const attestationErrors = [...evidence.historyErrors, ...staleEvidence ? [staleEvidence] : []];
         if (attestationErrors.length > 0 && !force) {
-          const remedy = `\`himi test --content ${contentArg}\` (or \`himi render <screenId> --content ${contentArg}\`)`;
+          const remedy = `\`himi test --content ${contentArg2}\` (or \`himi render <screenId> --content ${contentArg2}\`)`;
           const corrupted = evidence.historyErrors.length > 0;
           print({
             ok: false,
@@ -71737,7 +71970,7 @@ default (no --glyph): ${DEFAULT_GLYPH2} \u2014 a mark that claims nothing, so th
             // fixing one door and not the other is the drift the shared helpers exist to stop.
             hint: uxHandoverHint(uxEvidence, {
               releaseId: manifest.releaseId,
-              contentArg,
+              contentArg: contentArg2,
               contentDir: contentRel,
               app,
               door: echoedInvocation("himi push", flags, shellQuote2),
@@ -71846,11 +72079,13 @@ default (no --glyph): ${DEFAULT_GLYPH2} \u2014 a mark that claims nothing, so th
         const base = serveBase();
         const explicitTarget = contextualDefaultTarget !== void 0 || flags.target !== void 0 || flags["serve-url"] !== void 0 || !!process.env.HIMI_SERVE_TARGET;
         const loopbackWarning = base ? loopbackTargetWarning(base, explicitTarget) : null;
+        const afterDraft = draft ? (await Promise.resolve().then(() => (init_milestones(), milestones_exports))).afterDraftPush(dir, { app, releaseId: release, content: str6(flags.content) }) : null;
         print({
           ok: true,
           app,
           releaseId: release,
           draft,
+          ...afterDraft?.postcard ? { postcard: afterDraft.postcard } : {},
           // Say so when the push acquired the slug on the caller's behalf. A claim takes a name
           // out of a global first-come namespace, counts against quota, and cannot be undone —
           // so it must never happen silently.
@@ -71891,7 +72126,7 @@ default (no --glyph): ${DEFAULT_GLYPH2} \u2014 a mark that claims nothing, so th
           // behind that: the plane keeps the previous attestation for this release id when a
           // push carries none, so the published release can look attested by an earlier run.
           ...!attestation && staleEvidence ? {
-            attestationNote: `${staleEvidence} \u2014 this release was published with no headless evidence of its own, and the serve plane may still show the attestation from an earlier push of this release id. Re-attest with \`himi test --content ${contentArg}\` and push again to attach one.`
+            attestationNote: `${staleEvidence} \u2014 this release was published with no headless evidence of its own, and the serve plane may still show the attestation from an earlier push of this release id. Re-attest with \`himi test --content ${contentArg2}\` and push again to attach one.`
           } : {},
           // #2955 — the SAME honesty for the UX gate: `--force` published this preview without a
           // recorded mobile-UX drive for it, and the link below goes to a customer. Say it in the
@@ -71899,7 +72134,7 @@ default (no --glyph): ${DEFAULT_GLYPH2} \u2014 a mark that claims nothing, so th
           // the same silence one step apart.
           ...uxHandoverOverride(uxEvidence, {
             releaseId: manifest.releaseId,
-            contentArg,
+            contentArg: contentArg2,
             contentDir: contentRel,
             app,
             door: echoedInvocation("himi push", flags, shellQuote2),
@@ -71945,7 +72180,8 @@ default (no --glyph): ${DEFAULT_GLYPH2} \u2014 a mark that claims nothing, so th
           next: [
             `himi context --app ${app} --release ${release}${targetName() !== "local" ? ` --target ${targetName()}` : ""}`,
             `himi screens --app ${app} --release ${release}${targetName() !== "local" ? ` --target ${targetName()}` : ""}`,
-            `himi telemetry --app ${app} --release ${release}${targetName() !== "local" ? ` --target ${targetName()}` : ""}`
+            `himi telemetry --app ${app} --release ${release}${targetName() !== "local" ? ` --target ${targetName()}` : ""}`,
+            ...afterDraft ? [afterDraft.next] : []
           ],
           promote: draft ? `himi promote --app ${app} --release ${release}${forcedPastErrors ? " --force" : ""}${targetName() !== "local" ? ` --target ${targetName()}` : ""}` : null,
           ...(outcome.manifest.functions?.length ?? 0) > 0 ? {
@@ -71989,7 +72225,7 @@ default (no --glyph): ${DEFAULT_GLYPH2} \u2014 a mark that claims nothing, so th
         const displayName = str6(flags.name);
         const launchMode = flags.snapshot === true ? "snapshot" : "live";
         const packOpts = { createdBy: `himi-cli ${cliVersion()}`, launchMode, ...displayName ? { displayName } : {} };
-        const writePack = (root, appName, out, source) => format === "dir" ? packReleaseToDir2(root, appName, out, packOpts) : packRelease2(root, appName, out, { ...packOpts, ...source ? { source } : {} });
+        const writePack = (root, appName2, out, source) => format === "dir" ? packReleaseToDir2(root, appName2, out, packOpts) : packRelease2(root, appName2, out, { ...packOpts, ...source ? { source } : {} });
         const releaseDir = str6(flags["release-dir"]);
         if (releaseDir) {
           const only = str6(flags.app);
@@ -72054,7 +72290,7 @@ default (no --glyph): ${DEFAULT_GLYPH2} \u2014 a mark that claims nothing, so th
         }
         const { buildContentForValidation: buildContentForValidation2, buildReleaseFromContent: buildReleaseFromContent2, bundleOutDir: bundleOutDir2 } = await loadAuthoring();
         const bres = await buildContentForValidation2(dir, { resolution: resolutionFlag(flags) });
-        const built = mkdtempSync4(join62(tmpdir5(), "himi-pack-"));
+        const built = mkdtempSync4(join63(tmpdir5(), "himi-pack-"));
         const hasWorkers = bres.built.length > 0 || bres.compileErrors.length > 0;
         const outcome = await buildReleaseFromContent2(dir, built, {
           ...hasWorkers ? { tier5Dir: bundleOutDir2(dir) } : {},
@@ -72259,7 +72495,7 @@ default (no --glyph): ${DEFAULT_GLYPH2} \u2014 a mark that claims nothing, so th
             }));
             return 1;
           }
-          const archive = readFileSync76(resolve47(file));
+          const archive = readFileSync77(resolve47(file));
           const result = await client2().createPackageShare({
             app: opened.header.app,
             releaseId: opened.header.releaseId,
@@ -72319,11 +72555,11 @@ default (no --glyph): ${DEFAULT_GLYPH2} \u2014 a mark that claims nothing, so th
             const app = await appId(dir2);
             const { buildContentBundles: buildContentBundles2, buildReleaseFromContent: buildReleaseFromContent2, bundleOutDir: bundleOutDir2 } = await loadAuthoring();
             const bres = await buildContentBundles2(dir2, { resolution: resolutionFlag(flags) });
-            temp = mkdtempSync4(join62(tmpdir5(), "himi-run-build-"));
+            temp = mkdtempSync4(join63(tmpdir5(), "himi-run-build-"));
             const hasWorkers = bres.built.length > 0 || bres.compileErrors.length > 0;
             const initial = await buildReleaseFromContent2(dir2, temp, { ...hasWorkers ? { tier5Dir: bundleOutDir2(dir2) } : {} });
             servedMissing = initial.missingBundles;
-            source = join62(temp, app);
+            source = join63(temp, app);
           }
           const chromeArg = str6(flags.chrome) ?? "preview";
           if (chromeArg !== "preview" && chromeArg !== "app") {
@@ -72359,7 +72595,7 @@ default (no --glyph): ${DEFAULT_GLYPH2} \u2014 a mark that claims nothing, so th
             if (!recordKit) return;
             startedAt = (/* @__PURE__ */ new Date()).toISOString();
             const failure = record2(served2, { ok: true, at: startedAt });
-            if (!recorded) io.error(JSON.stringify({ run: "run_record_skipped", message: `${failure ?? `${join62(dir, ".himi")} is not a real directory`}, so the build board will not frame this preview.` }));
+            if (!recorded) io.error(JSON.stringify({ run: "run_record_skipped", message: `${failure ?? `${join63(dir, ".himi")} is not a real directory`}, so the build board will not frame this preview.` }));
             await refreshBoard();
           };
           const retract = async () => {
@@ -72390,7 +72626,7 @@ default (no --glyph): ${DEFAULT_GLYPH2} \u2014 a mark that claims nothing, so th
           }
           const watchKit = watch2 ? await Promise.resolve().then(() => (init_run_watch(), run_watch_exports)) : null;
           const bus = watchKit ? new watchKit.ReloadBus() : void 0;
-          if (watch2) served = mkdtempSync4(join62(tmpdir5(), "himi-run-served-"));
+          if (watch2) served = mkdtempSync4(join63(tmpdir5(), "himi-run-served-"));
           const running = await runPackage2(source, {
             port,
             chrome: chromeArg,
@@ -72412,8 +72648,8 @@ default (no --glyph): ${DEFAULT_GLYPH2} \u2014 a mark that claims nothing, so th
             await announce(running);
             if (watchKit && bus) {
               const { buildContentBundles: buildContentBundles2, buildReleaseFromContent: buildReleaseFromContent2, bundleOutDir: bundleOutDir2 } = await loadAuthoring();
-              const live2 = join62(running.releaseRoot, running.app);
-              const manifestOf = (tree) => JSON.parse(readFileSync76(join62(tree, "release-manifest.json"), "utf8"));
+              const live2 = join63(running.releaseRoot, running.app);
+              const manifestOf = (tree) => JSON.parse(readFileSync77(join63(tree, "release-manifest.json"), "utf8"));
               let current = manifestOf(live2);
               const failed2 = async (message) => {
                 if (stopping) return;
@@ -72424,7 +72660,7 @@ default (no --glyph): ${DEFAULT_GLYPH2} \u2014 a mark that claims nothing, so th
               };
               rebuild = watchKit.serialize(async () => {
                 const t0 = Date.now();
-                const next = mkdtempSync4(join62(tmpdir5(), "himi-run-build-"));
+                const next = mkdtempSync4(join63(tmpdir5(), "himi-run-build-"));
                 try {
                   const bres = await buildContentBundles2(dir, { resolution: resolutionFlag(flags) });
                   if (bres.compileErrors.length) {
@@ -72441,16 +72677,16 @@ default (no --glyph): ${DEFAULT_GLYPH2} \u2014 a mark that claims nothing, so th
                     return;
                   }
                   if (stopping) return;
-                  const fresh = manifestOf(join62(next, running.app));
+                  const fresh = manifestOf(join63(next, running.app));
                   const diff = watchKit.diffReleases(current, fresh);
                   const { describeChanges: describeChanges2, headline: headline2 } = await Promise.resolve().then(() => (init_build_changes(), build_changes_exports));
-                  const changes = describeChanges2(live2, join62(next, running.app), diff);
+                  const changes = describeChanges2(live2, join63(next, running.app), diff);
                   const retired = `${live2}.retired-${Date.now()}`;
                   renameSync7(live2, retired);
                   try {
-                    renameSync7(join62(next, running.app), live2);
+                    renameSync7(join63(next, running.app), live2);
                   } catch {
-                    cpSync3(join62(next, running.app), live2, { recursive: true });
+                    cpSync3(join63(next, running.app), live2, { recursive: true });
                   }
                   rmSync14(retired, { recursive: true, force: true });
                   current = fresh;
@@ -73060,7 +73296,7 @@ default (no --glyph): ${DEFAULT_GLYPH2} \u2014 a mark that claims nothing, so th
           io.error(JSON.stringify({ error: `patch ${kind} needs --file`, usage: PATCH_USAGE }));
           return 2;
         }
-        if (!existsSync64(file)) {
+        if (!existsSync65(file)) {
           io.error(JSON.stringify({ error: `no such file: ${file}` }));
           return 2;
         }
@@ -73116,7 +73352,7 @@ default (no --glyph): ${DEFAULT_GLYPH2} \u2014 a mark that claims nothing, so th
           lintNote: "`himi patch` sends a raw file. Nothing here built or linted your app \u2014 `himi push --only <selector>` is the same edit with the full lint gate in front of it."
         };
         if (kind === "tokens" || kind === "app-config") {
-          const body = readFileSync76(file, "utf8");
+          const body = readFileSync77(file, "utf8");
           const patch2 = kind === "tokens" ? { tokens: body } : { appConfig: body };
           return runReleasePatch({
             ...common,
@@ -73131,7 +73367,7 @@ default (no --glyph): ${DEFAULT_GLYPH2} \u2014 a mark that claims nothing, so th
             io.error(JSON.stringify({ error: "patch screen needs a <screenId>", usage: PATCH_USAGE }));
             return 2;
           }
-          const descriptor = readFileSync76(file, "utf8");
+          const descriptor = readFileSync77(file, "utf8");
           try {
             JSON.parse(descriptor);
           } catch (e) {
@@ -73171,7 +73407,7 @@ default (no --glyph): ${DEFAULT_GLYPH2} \u2014 a mark that claims nothing, so th
             extra: { kind, screen: id, file: { path: file, bytes: Buffer.byteLength(descriptor, "utf8") } }
           });
         }
-        const bytes2 = readFileSync76(file);
+        const bytes2 = readFileSync77(file);
         const sha = createHash28("sha256").update(bytes2).digest("hex");
         const forScreens = (str6(flags["for-screen"]) ?? "").split(",").map((s) => s.trim()).filter(Boolean);
         if (flags["no-rebind"] !== void 0 && flags["no-rebind"] !== true) {
@@ -73315,7 +73551,7 @@ default (no --glyph): ${DEFAULT_GLYPH2} \u2014 a mark that claims nothing, so th
           }
           let def;
           try {
-            const parsed = JSON.parse(arg.startsWith("@") ? readFileSync76(arg.slice(1), "utf8") : arg);
+            const parsed = JSON.parse(arg.startsWith("@") ? readFileSync77(arg.slice(1), "utf8") : arg);
             if (parsed === null || typeof parsed !== "object" || Array.isArray(parsed)) {
               io.error(JSON.stringify({ error: "invalid_definition", problems: [`--definition must be a JSON object, got ${Array.isArray(parsed) ? "an array" : parsed === null ? "null" : typeof parsed}`] }));
               return 2;
@@ -73779,7 +74015,7 @@ ${label2}`);
         const platform = str6(flags.platform)?.split(",").map((p) => p.trim()).filter(Boolean);
         {
           const distDir = contentDir(flags);
-          if (existsSync64(join62(distDir, "himalaya.content.json"))) {
+          if (existsSync65(join63(distDir, "himalaya.content.json"))) {
             const issues = await iconIssues(distDir, flags.strict === true, { requireDeclared: true, requireVerified: true });
             const errors = issues.filter((i) => i.severity === "error");
             for (const i of issues.filter((i2) => i2.severity === "warning")) {
@@ -74048,7 +74284,7 @@ ${label2}`);
           const dpxPath = dpxSessionTokenPath();
           let dpx;
           try {
-            dpx = readFileSync76(dpxPath, "utf8").trim();
+            dpx = readFileSync77(dpxPath, "utf8").trim();
           } catch {
             io.error(JSON.stringify({ error: `no dpx session at ${dpxPath} \u2014 run \`dpx auth login\` then \`dpx auth token > ${dpxPath}\` (dpx 2.x keeps its own state in ~/.dpx/auth.json and does NOT write the legacy session file), or omit --dpx` }));
             return 1;
@@ -74456,7 +74692,7 @@ ${report2.ok ? "OK \u2014 data + serve plane reachable." : typeof report2.hint =
           const path2 = dpxSessionTokenPath();
           let raw;
           try {
-            raw = readFileSync76(path2, "utf8");
+            raw = readFileSync77(path2, "utf8");
           } catch {
             io.error(JSON.stringify({ error: `no DPX BO session at ${path2}` }));
             return 1;