@wix/himalaya-cli 0.1090.0 → 0.1091.0

package/dist/cli.mjs

@@ -1455,7 +1455,7 @@ function sentinelizeIdentity(body, identity) {
   }
   if (identity.name) {
     const re = new RegExp(`\\b(${NAME_FIELDS.join("|")})(["']?\\s*[:=]\\s*)(["'])${escapeRe(identity.name)}\\3`, "g");
-    out2 = out2.replace(re, (_m, key2, sep16, q) => `${key2}${sep16}${q}__HIMI_APP_NAME__${q}`);
+    out2 = out2.replace(re, (_m, key2, sep17, q) => `${key2}${sep17}${q}__HIMI_APP_NAME__${q}`);
   }
   return out2;
 }
@@ -3738,7 +3738,7 @@ async function mintToken(args, label2, cacheKey, spawnImpl) {
     tokenCache.set(cacheKey, fromEnv);
     return fromEnv;
   }
-  const token = await new Promise((resolve51, reject) => {
+  const token = await new Promise((resolve52, reject) => {
     let child;
     try {
       child = spawnImpl("wix", [...args]);
@@ -3767,12 +3767,12 @@ async function mintToken(args, label2, cacheKey, spawnImpl) {
     child.stdout?.on("data", (d) => {
       out2 += String(d);
       const m = out2.match(TOKEN_RE);
-      if (m) done(() => resolve51(m[0]));
+      if (m) done(() => resolve52(m[0]));
     });
     child.stderr?.on("data", (d) => {
       out2 += String(d);
       const m = out2.match(TOKEN_RE);
-      if (m) done(() => resolve51(m[0]));
+      if (m) done(() => resolve52(m[0]));
     });
     child.on("error", (e) => done(() => reject(new Error(mintHelp(label2, e.message)))));
     child.on("exit", (code) => done(() => reject(new Error(
@@ -8434,8 +8434,8 @@ function textOf(node) {
 function plainText(node) {
   if (typeOf(node) === "TEXT") return str(at(node, "textData", "text"));
   const children = kids(node).filter(isObj);
-  const sep16 = children.every((c) => typeOf(c) === "TEXT") ? "" : "\n";
-  return children.map(plainText).join(sep16);
+  const sep17 = children.every((c) => typeOf(c) === "TEXT") ? "" : "\n";
+  return children.map(plainText).join(sep17);
 }
 function alignOf(v) {
   switch (v) {
@@ -19328,10 +19328,10 @@ var init_preview = __esm({
         }
       },
       kill: (pid, signal) => process.kill(pid, signal),
-      portFree: (port) => new Promise((resolve51) => {
+      portFree: (port) => new Promise((resolve52) => {
         const s = createServer2();
-        s.once("error", () => resolve51(false));
-        s.listen(port, "127.0.0.1", () => s.close(() => resolve51(true)));
+        s.once("error", () => resolve52(false));
+        s.listen(port, "127.0.0.1", () => s.close(() => resolve52(true)));
       }),
       sleep: (ms) => new Promise((r) => setTimeout(r, ms)),
       servingIdentity: async (origin) => {
@@ -20475,7 +20475,7 @@ async function injectRequest(listener, request) {
   req.headers.host ??= url.host;
   if (body && body.length > 0) req.push(body);
   req.push(null);
-  return await new Promise((resolve51, reject) => {
+  return await new Promise((resolve52, reject) => {
     const streamed = () => {
       queueMicrotask(() => {
         req.emit("close");
@@ -20491,7 +20491,7 @@ async function injectRequest(listener, request) {
         else headers2.set(name, value);
       }
       const bodyless = out2.status === 204 || out2.status === 304 || request.method === "HEAD";
-      resolve51(new Response(bodyless ? null : out2.body, { status: out2.status, headers: headers2 }));
+      resolve52(new Response(bodyless ? null : out2.body, { status: out2.status, headers: headers2 }));
     }, streamed);
     res.on("inject-error", reject);
     try {
@@ -21197,7 +21197,7 @@ function redactBodyString(body) {
     } catch {
     }
   }
-  return body.replace(FORM_ASSIGNMENT_RE, (m, name) => isSensitiveBodyName(name) ? `${name}=${REDACTED}` : m).replace(JSON_FIELD_RE, (m, name, sep16) => isSensitiveBodyName(name) ? `"${name}"${sep16}"${REDACTED}"` : m).replace(JSON_FIELD_UNTERMINATED_RE, (m, name, sep16) => isSensitiveBodyName(name) ? `"${name}"${sep16}"${REDACTED}` : m).replace(BEARER_RE, (_m, s) => `${s} ${REDACTED}`);
+  return body.replace(FORM_ASSIGNMENT_RE, (m, name) => isSensitiveBodyName(name) ? `${name}=${REDACTED}` : m).replace(JSON_FIELD_RE, (m, name, sep17) => isSensitiveBodyName(name) ? `"${name}"${sep17}"${REDACTED}"` : m).replace(JSON_FIELD_UNTERMINATED_RE, (m, name, sep17) => isSensitiveBodyName(name) ? `"${name}"${sep17}"${REDACTED}` : m).replace(BEARER_RE, (_m, s) => `${s} ${REDACTED}`);
 }
 function createWixGatewayState() {
   return { mode: "record", rules: [], traffic: [], clients: /* @__PURE__ */ new Set(), seq: 0, ruleSeq: 0 };
@@ -23025,12 +23025,12 @@ function finalizeRecording(key2, rec) {
   if (rec.finalize) return rec.finalize;
   rec.finalize = (async () => {
     clearTimeout(rec.autoStop);
-    await new Promise((resolve51) => {
+    await new Promise((resolve52) => {
       let done = false;
       const finish2 = () => {
         if (!done) {
           done = true;
-          resolve51();
+          resolve52();
         }
       };
       rec.child.once("close", finish2);
@@ -23141,7 +23141,7 @@ var init_preview2 = __esm({
     DEVICE_LIST_TIMEOUT_MS = 5e3;
     defaultRunner2 = {
       capture(cmd, args, timeoutMs = DEFAULT_CAPTURE_TIMEOUT_MS) {
-        return new Promise((resolve51, reject) => {
+        return new Promise((resolve52, reject) => {
           const child = spawn4(cmd, args, { stdio: ["ignore", "pipe", "pipe"] });
           const out2 = [];
           const err = [];
@@ -23163,7 +23163,7 @@ var init_preview2 = __esm({
           child.stderr.on("data", (b) => err.push(b));
           child.on("error", (e) => settle(reject, e));
           child.on("close", (code) => {
-            if (code === 0) settle(resolve51, Buffer.concat(out2));
+            if (code === 0) settle(resolve52, Buffer.concat(out2));
             else settle(reject, new Error(`${cmd} exited ${code}: ${Buffer.concat(err).toString("utf8")}`));
           });
         });
@@ -28633,8 +28633,8 @@ function ensureCountUpRuntime() {
     const neg = fixed.startsWith("-");
     const body = neg ? fixed.slice(1) : fixed;
     const [int2, frac] = body.split(".");
-    const sep16 = int2.replace(/\B(?=(\d{3})+(?!\d))/g, ",");
-    return (neg ? "-" : "") + sep16 + (frac ? "." + frac : "");
+    const sep17 = int2.replace(/\B(?=(\d{3})+(?!\d))/g, ",");
+    return (neg ? "-" : "") + sep17 + (frac ? "." + frac : "");
   };
   const animateEl = (el) => {
     const node = el;
@@ -34981,7 +34981,7 @@ async function stabilizePngPage(page, scheme) {
     const browser = globalThis;
     browser.document.documentElement.style.colorScheme = selected;
     await browser.document.fonts?.ready;
-    await new Promise((resolve51) => browser.requestAnimationFrame(() => browser.requestAnimationFrame(() => resolve51())));
+    await new Promise((resolve52) => browser.requestAnimationFrame(() => browser.requestAnimationFrame(() => resolve52())));
   }, scheme);
 }
 async function renderPngBatch(items) {
@@ -38550,7 +38550,7 @@ async function handleWebWix(req, res, state) {
       }
       if (match) {
         const mocked = match.rule.response;
-        if (mocked.delayMs) await new Promise((resolve51) => setTimeout(resolve51, mocked.delayMs));
+        if (mocked.delayMs) await new Promise((resolve52) => setTimeout(resolve52, mocked.delayMs));
         const responseBody = mocked.template ? renderTemplate(mocked.body, match.captures) : mocked.body;
         record2("mock", mocked.status, responseBody, match.rule.id, mocked.headers);
         return reply(200, { status: mocked.status, body: responseBody ?? "" });
@@ -40649,12 +40649,12 @@ var init_query = __esm({
 });
 
 // ../../core/dev-server/src/crawl-input.ts
-function resolved(v, resolve51) {
-  if (typeof v === "string") return v.startsWith("$service:") ? resolve51(v) : v;
+function resolved(v, resolve52) {
+  if (typeof v === "string") return v.startsWith("$service:") ? resolve52(v) : v;
   if (Array.isArray(v)) {
     const out2 = v.flatMap((el) => {
       if (typeof el !== "string" || !el.startsWith("$service:")) return [el];
-      const r = resolve51(el);
+      const r = resolve52(el);
       return Array.isArray(r) ? r : [r];
     });
     return out2;
@@ -40668,9 +40668,9 @@ function hasRowBinding(props) {
     return itemToken(v) || Array.isArray(v) && v.some(itemToken);
   });
 }
-function declaredOptionIds(props, resolve51) {
+function declaredOptionIds(props, resolve52) {
   const literal = props.options ?? props.tabs ?? props.chips;
-  const bound = props.optionsPath !== void 0 ? resolved(props.optionsPath, resolve51) : void 0;
+  const bound = props.optionsPath !== void 0 ? resolved(props.optionsPath, resolve52) : void 0;
   const raw = Array.isArray(bound) ? bound : literal;
   if (!Array.isArray(raw)) return [];
   const out2 = [];
@@ -40713,24 +40713,24 @@ function seedTokens(state, limit = 48) {
   walk2(state, 0);
   return out2;
 }
-function synthesizeInput(control, resolve51, tokens) {
+function synthesizeInput(control, resolve52, tokens) {
   const id = `${control.type}.${control.callback}`;
   const row = SYNTHESIZED_CONTROLS[id];
   if (!row) return null;
   const props = control.props;
   if (hasRowBinding(props)) return null;
   if (row.from === "declared-options") {
-    const ids = declaredOptionIds(props, resolve51);
+    const ids = declaredOptionIds(props, resolve52);
     if (!ids.length) return null;
     if (row.encoding === "string-array") {
-      const currentRaw2 = resolved(props.selectedIds, resolve51);
+      const currentRaw2 = resolved(props.selectedIds, resolve52);
       const current3 = (Array.isArray(currentRaw2) ? currentRaw2 : []).filter((x) => typeof x === "string");
       const pick4 = ids.find((o) => !current3.includes(o));
       if (pick4 === void 0) return null;
       const value = props.multiSelect === true ? [...current3, pick4] : [pick4];
       return { key: row.key, value, from: row.from, current: current3, control: id };
     }
-    const currentRaw = resolved(props.selectedId, resolve51);
+    const currentRaw = resolved(props.selectedId, resolve52);
     const current2 = typeof currentRaw === "string" ? currentRaw : void 0;
     const pick3 = ids.find((o) => o !== current2);
     if (pick3 === void 0) return null;
@@ -40738,7 +40738,7 @@ function synthesizeInput(control, resolve51, tokens) {
   }
   if (!acceptsWords(props) || !acceptsWords(control.wrapper ?? {})) return null;
   const binding2 = typeof props.valuePath === "string" ? props.valuePath : typeof props.value === "string" && props.value.startsWith("$service:") ? props.value : void 0;
-  const bound = binding2 === void 0 ? void 0 : resolve51(binding2);
+  const bound = binding2 === void 0 ? void 0 : resolve52(binding2);
   const literal = typeof props.value === "string" && !props.value.startsWith("$") ? props.value : void 0;
   const current = typeof bound === "string" ? bound : typeof bound === "number" ? String(bound) : literal ?? "";
   const max = typeof props.maxLength === "number" && props.maxLength > 0 ? props.maxLength : void 0;
@@ -42223,8 +42223,8 @@ async function crawlScreenInner(opts) {
       if (linkable.has(target)) return true;
       for (const base of linkable) {
         if (target.length > base.length + 1 && target.startsWith(base)) {
-          const sep16 = target[base.length];
-          if (sep16 === "_" || sep16 === "/") return true;
+          const sep17 = target[base.length];
+          if (sep17 === "_" || sep17 === "/") return true;
         }
       }
       return false;
@@ -47680,6 +47680,7 @@ __export(milestones_exports, {
   firstLookAtInit: () => firstLookAtInit,
   homeScreenIdOf: () => homeScreenIdOf,
   homeShotForPostcard: () => homeShotForPostcard,
+  homeShotPath: () => homeShotPath,
   initDivergence: () => initDivergence,
   liveWatchRunning: () => liveWatchRunning,
   openBoardForSession: () => openBoardForSession,
@@ -47694,7 +47695,7 @@ __export(milestones_exports, {
 import { createHash as createHash26, randomUUID as randomUUID3 } from "node:crypto";
 import { spawn as spawn5 } from "node:child_process";
 import { existsSync as existsSync47, lstatSync as lstatSync11, readFileSync as readFileSync52, statSync as statSync11 } from "node:fs";
-import { basename as basename14, isAbsolute as isAbsolute4, join as join46, relative as relative9 } from "node:path";
+import { basename as basename14, dirname as dirname27, isAbsolute as isAbsolute4, join as join46, relative as relative9, resolve as resolve41, sep as sep12 } from "node:path";
 function homeScreenIdOf(dir) {
   let src;
   try {
@@ -47706,6 +47707,19 @@ function homeScreenIdOf(dir) {
   const id = m ? m[1] ?? m[2] : void 0;
   return id && /^[A-Za-z0-9_.\-/{}]+$/.test(id) ? id : null;
 }
+function homeShotPath(dir, home) {
+  const root = resolve41(dir);
+  const base = resolve41(root, ".himi", "shots");
+  const shot = resolve41(base, `${home}.png`);
+  if (!shot.startsWith(base + sep12)) return null;
+  for (let p = shot; p !== root && p.startsWith(root + sep12); p = dirname27(p)) {
+    try {
+      if (lstatSync11(p).isSymbolicLink()) return null;
+    } catch {
+    }
+  }
+  return shot;
+}
 function displayPath(p, cwd = process.cwd()) {
   const rel = relative9(cwd, p);
   return rel && !rel.startsWith("..") && !isAbsolute4(rel) ? rel : p;
@@ -47718,7 +47732,8 @@ async function firstLookAtInit(dir, opts) {
   const home = opts.home;
   if (!home) return { skipped: "no literal homeScreenId in dev/index.ts, so there is no home screen to render" };
   const budgetMs = opts.budgetMs ?? FIRST_LOOK_BUDGET_MS;
-  const shot = join46(dir, ".himi", "shots", `${home}.png`);
+  const shot = homeShotPath(dir, home);
+  if (!shot) return { skipped: "the homeScreenId does not name a file under .himi/shots" };
   const started = Date.now();
   return await new Promise((done) => {
     let settled = false;
@@ -47929,7 +47944,8 @@ function startingPointMessage(template) {
 function homeShotForPostcard(dir) {
   const home = homeScreenIdOf(dir);
   if (!home) return { skipped: "no literal homeScreenId in dev/index.ts, so there is no home shot to attach" };
-  const shot = join46(dir, ".himi", "shots", `${home}.png`);
+  const shot = homeShotPath(dir, home);
+  if (!shot) return { skipped: "the homeScreenId does not name a file under .himi/shots" };
   const render = `\`himi render ${shellQuote(home)} --png\``;
   if (!existsSync47(shot)) return { skipped: `no home shot yet \u2014 ${render} makes one, and the next postcard carries it` };
   let changed;
@@ -47941,8 +47957,10 @@ function homeShotForPostcard(dir) {
   if (!shotIsCurrent(shot, changed)) return { skipped: `the home shot is older than the last source change \u2014 ${render} makes a current one` };
   try {
     const sha = sha256Of(shot);
-    const latest = [...readProgress(dir, { all: true }).entries].reverse().find((e) => Array.isArray(e.images) && e.images.length > 0);
-    if (latest?.images?.some((i) => i.sha256 === sha)) return { skipped: "the latest postcard already shows this home picture" };
+    const entries = readProgress(dir, { all: true }).entries;
+    const latest = entries[entries.length - 1];
+    const shown2 = Array.isArray(latest?.images) && latest.images.some((i) => !!i && typeof i === "object" && i.sha256 === sha);
+    if (shown2) return { skipped: "the latest postcard already shows this home picture" };
   } catch {
     return { skipped: "the home shot could not be read" };
   }
@@ -48466,7 +48484,7 @@ __export(template_trim_exports, {
   runTemplateTrim: () => runTemplateTrim
 });
 import { cpSync, existsSync as existsSync48, mkdirSync as mkdirSync23, readdirSync as readdirSync26, readFileSync as readFileSync53, renameSync as renameSync5, rmSync as rmSync11, statSync as statSync12, writeFileSync as writeFileSync18 } from "node:fs";
-import { dirname as dirname27, join as join47 } from "node:path";
+import { dirname as dirname28, join as join47 } from "node:path";
 function routeMatcher(pattern) {
   const detail = /^\^([A-Za-z0-9_]+)\(\?:\[_\/\]\(\.\+\)\)\?\$$/.exec(pattern);
   if (detail) {
@@ -49239,7 +49257,7 @@ async function runTemplateTrim(req, deps) {
   };
   const dropBackup = () => {
     rmSync11(backup, { recursive: true, force: true });
-    for (const d of [dirname27(backup), join47(dir, ".himi")]) {
+    for (const d of [dirname28(backup), join47(dir, ".himi")]) {
       if (d === join47(dir, ".himi") && hadHimi) break;
       try {
         if (!readdirSync26(d).length) rmSync11(d, { recursive: true });
@@ -49605,11 +49623,11 @@ __export(eject_exports, {
   ejectModule: () => ejectModule
 });
 import { existsSync as existsSync49, mkdirSync as mkdirSync24, readFileSync as readFileSync54, writeFileSync as writeFileSync19 } from "node:fs";
-import { dirname as dirname28, join as join48, relative as relative10, resolve as resolve41, sep as sep12 } from "node:path";
+import { dirname as dirname29, join as join48, relative as relative10, resolve as resolve42, sep as sep13 } from "node:path";
 function locate(repoRootOrCwd, mod) {
-  const inRepo = resolve41(repoRootOrCwd, `stdlib/flows/${mod}/src/index.ts`);
+  const inRepo = resolve42(repoRootOrCwd, `stdlib/flows/${mod}/src/index.ts`);
   if (existsSync49(inRepo)) return { path: inRepo, form: "source" };
-  const dist = resolve41(repoRootOrCwd, `node_modules/@wix/himalaya/dist/${mod}.mjs`);
+  const dist = resolve42(repoRootOrCwd, `node_modules/@wix/himalaya/dist/${mod}.mjs`);
   if (existsSync49(dist)) return { path: dist, form: "bundle" };
   return null;
 }
@@ -49635,7 +49653,7 @@ function ejectModule(opts) {
   }
   const ext = found.form === "source" ? "ts" : "mjs";
   const target = join48(contentDir2, "tier5-src", "_ejected", `${mod}.${ext}`);
-  mkdirSync24(dirname28(target), { recursive: true });
+  mkdirSync24(dirname29(target), { recursive: true });
   const banner = `// EJECTED from @wix/himalaya/${mod}. This app owns this file now.
 //
 // Central fixes to @wix/himalaya/${mod} NO LONGER REACH THIS APP \u2014 including any
@@ -49658,7 +49676,7 @@ function ejectModule(opts) {
     if (!existsSync49(f)) continue;
     const before = readFileSync54(f, "utf8");
     let after = before;
-    let rel = relative10(dirname28(f), target).split(sep12).join("/").replace(/\.tsx?$/, ".js");
+    let rel = relative10(dirname29(f), target).split(sep13).join("/").replace(/\.tsx?$/, ".js");
     if (!rel.startsWith(".")) rel = `./${rel}`;
     for (const spec of specifiersFor(mod)) {
       const q = spec.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
@@ -49762,8 +49780,8 @@ function baseOf(target, linkable, known) {
   let best = null;
   for (const base of linkable ?? []) {
     if (!known.has(base) || target.length <= base.length + 1 || !target.startsWith(base)) continue;
-    const sep16 = target[base.length];
-    if ((sep16 === "_" || sep16 === "/") && (!best || base.length > best.length)) best = base;
+    const sep17 = target[base.length];
+    if ((sep17 === "_" || sep17 === "/") && (!best || base.length > best.length)) best = base;
   }
   return best;
 }
@@ -50013,9 +50031,9 @@ __export(test_exports, {
   writeRecordedMocks: () => writeRecordedMocks
 });
 import { existsSync as existsSync51, mkdirSync as mkdirSync25, readFileSync as readFileSync56, writeFileSync as writeFileSync20 } from "node:fs";
-import { join as join50, resolve as resolve42 } from "node:path";
+import { join as join50, resolve as resolve43 } from "node:path";
 function readTestConfig(dir) {
-  const p = resolve42(dir, TEST_CONFIG_FILE);
+  const p = resolve43(dir, TEST_CONFIG_FILE);
   if (!existsSync51(p)) return {};
   let parsed;
   try {
@@ -50086,7 +50104,7 @@ function readNetRules(path2) {
 }
 function defaultNetRules(dir) {
   for (const rel of ["dev/net-mocks.json", "tests/net-mocks.json"]) {
-    const p = resolve42(dir, rel);
+    const p = resolve43(dir, rel);
     if (existsSync51(p)) {
       const rules = readNetRules(p);
       if (rules.length) return { rules, from: rel };
@@ -50268,7 +50286,7 @@ async function runCrawl(opts) {
       for (const d of list) if (d.screenId !== rep.screenId) coveredBy.set(d.screenId, rep.screenId);
     }
   }
-  const net = opts.offline ? null : opts.netPath ? { rules: readNetRules(resolve42(opts.netPath)), from: opts.netPath } : defaultNetRules(opts.dir);
+  const net = opts.offline ? null : opts.netPath ? { rules: readNetRules(resolve43(opts.netPath)), from: opts.netPath } : defaultNetRules(opts.dir);
   const suppressions = opts.config?.skip ?? [];
   const suppressed = [];
   const matchSuppression = (screen, actionId, componentId, invariant) => suppressions.find((s) => (s.screen === void 0 || s.screen === screen) && (s.action === void 0 || s.action === actionId) && (s.component === void 0 || s.component === componentId) && (s.invariant === void 0 || s.invariant === invariant));
@@ -51004,7 +51022,7 @@ async function pinnedFetch(url, init, addresses, maxResponseBytes) {
   const headers2 = Object.fromEntries(new Headers(init.headers).entries());
   const request = url.protocol === "https:" ? httpsRequest : httpRequest;
   const hostname2 = url.hostname.replace(/^\[|\]$/g, "");
-  return await new Promise((resolve51, reject) => {
+  return await new Promise((resolve52, reject) => {
     let settled = false;
     const finish2 = (fn) => {
       if (settled) return;
@@ -51041,7 +51059,7 @@ async function pinnedFetch(url, init, addresses, maxResponseBytes) {
         }
         const responseHeaders = new Headers();
         for (const [key2, value] of Object.entries(response.headers)) if (value !== void 0) responseHeaders.set(key2, Array.isArray(value) ? value.join(", ") : value);
-        resolve51(new Response(bytes2, { status: response.statusCode, statusText: response.statusMessage, headers: responseHeaders }));
+        resolve52(new Response(bytes2, { status: response.statusCode, statusText: response.statusMessage, headers: responseHeaders }));
       }));
     });
     req.once("error", (error) => finish2(() => reject(error)));
@@ -51341,7 +51359,7 @@ function createLocalTestSandbox() {
           }
         })();
       `;
-      return await new Promise((resolve51, reject) => {
+      return await new Promise((resolve52, reject) => {
         const { port1, port2 } = new MessageChannel();
         const serializableContext = {
           auth: context.auth,
@@ -51417,7 +51435,7 @@ function createLocalTestSandbox() {
             timer = setTimeout(() => finish2(() => reject(new SandboxError("timeout", `execution exceeded ${limits.timeoutMs}ms`))), Math.max(1, limits.timeoutMs));
             return;
           }
-          if (message.ok) finish2(() => resolve51({ value: message.value, durationMs: Date.now() - started }));
+          if (message.ok) finish2(() => resolve52({ value: message.value, durationMs: Date.now() - started }));
           else finish2(() => reject(new SandboxError("execution_failed", message.message ?? "handler failed")));
         });
         worker.once("error", (error) => finish2(() => reject(new SandboxError("execution_failed", error.message))));
@@ -52386,7 +52404,7 @@ __export(functions_exports, {
   runRemoteFunctionOperation: () => runRemoteFunctionOperation
 });
 import { readFileSync as readFileSync58, existsSync as existsSync53 } from "node:fs";
-import { join as join52, resolve as resolve43 } from "node:path";
+import { join as join52, resolve as resolve44 } from "node:path";
 function resolveFunctionsTarget(input) {
   const explicitUrl = input.functionsUrl?.trim();
   if (explicitUrl) return { mode: "remote", baseUrl: explicitUrl };
@@ -52398,7 +52416,7 @@ function resolveFunctionsTarget(input) {
   return { mode: "local" };
 }
 async function loadFunctionsApp(dir) {
-  const loaded = await loadContent(resolve43(dir));
+  const loaded = await loadContent(resolve44(dir));
   const config = loaded.module.config;
   if (config.kind !== "functions" || !Array.isArray(config.functions?.functions)) {
     throw new Error(`content package "${dir}" is not a functions-only app`);
@@ -52596,7 +52614,7 @@ var init_cli_bridge = __esm({
 
 // src/mcp/tools.ts
 import * as z from "zod";
-import { resolve as resolve44 } from "node:path";
+import { resolve as resolve45 } from "node:path";
 function fromCli(r, extra = []) {
   const body = r.json !== void 0 ? JSON.stringify(r.json, null, 2) : r.text.trim();
   const content = [];
@@ -52608,7 +52626,7 @@ ${r.stderr.trim()}`) });
 }
 async function appDir2(args, deps) {
   const base = await deps.defaultDir();
-  return typeof args.dir === "string" && args.dir ? resolve44(base, args.dir) : base;
+  return typeof args.dir === "string" && args.dir ? resolve45(base, args.dir) : base;
 }
 async function requireLogin(deps) {
   const who = await deps.runCli(["whoami"]);
@@ -52679,7 +52697,7 @@ function rawTools() {
       }),
       handler: async (a, d) => {
         const base = await d.defaultDir();
-        const parent = typeof a.parentDir === "string" && a.parentDir ? resolve44(base, a.parentDir) : base;
+        const parent = typeof a.parentDir === "string" && a.parentDir ? resolve45(base, a.parentDir) : base;
         return fromCli(await d.runCli(["init", String(a.name), "--dir", parent, ...opt("--template", a.template)]));
       }
     },
@@ -52837,7 +52855,7 @@ ${log}` : ""}`, true);
       handler: async (a, d) => {
         const gate = await requireLogin(d);
         if (gate) return gate;
-        return fromCli(await d.runCli(["share", "--file", resolve44(await d.defaultDir(), String(a.file)), ...opt("--expires-at", a.expiresAt)]));
+        return fromCli(await d.runCli(["share", "--file", resolve45(await d.defaultDir(), String(a.file)), ...opt("--expires-at", a.expiresAt)]));
       }
     },
     {
@@ -52938,9 +52956,9 @@ async function startMcpServer(opts) {
     },
     readFile: (p) => readFileSync59(p)
   };
-  const closed = new Promise((resolve51) => {
-    stdin.once("end", resolve51);
-    stdin.once("close", resolve51);
+  const closed = new Promise((resolve52) => {
+    stdin.once("end", resolve52);
+    stdin.once("close", resolve52);
   });
   const handle = serveStdio(
     () => {
@@ -53235,7 +53253,7 @@ __export(browser_authoring_exports, {
 import { createServer as createServer4 } from "node:http";
 import { createHash as createHash29, randomBytes as randomBytes4 } from "node:crypto";
 import { existsSync as existsSync55, readdirSync as readdirSync27, readFileSync as readFileSync61, realpathSync as realpathSync7, statSync as statSync13 } from "node:fs";
-import { join as join54, posix as posix2, relative as relative11, sep as sep13 } from "node:path";
+import { join as join54, posix as posix2, relative as relative11, sep as sep14 } from "node:path";
 function humanMs(ms) {
   return ms < 1e3 ? `${ms}ms` : `${Math.round(ms / 1e3)}s`;
 }
@@ -53285,7 +53303,7 @@ function collectRelativeSiblings(files, tier5SrcDir) {
       ];
       for (const abs of candidates) {
         if (!existsSync55(abs) || statSync13(abs).isDirectory()) continue;
-        const key2 = `/tier5-src/${relative11(tier5SrcDir, abs).split(sep13).join(posix2.sep)}`;
+        const key2 = `/tier5-src/${relative11(tier5SrcDir, abs).split(sep14).join(posix2.sep)}`;
         if (key2 in files) break;
         files[key2] = readFileSync61(abs, "utf8");
         queue.push(key2);
@@ -53319,10 +53337,10 @@ function collectSdkModules(files, resolveSubpath) {
   for (const source of Object.values(files)) visit(source);
   return { modules, unsupported };
 }
-function sdkSubpathReader(resolve51) {
+function sdkSubpathReader(resolve52) {
   return (sub) => {
     try {
-      return readFileSync61(resolve51(`@wix/himalaya/${sub}`), "utf8");
+      return readFileSync61(resolve52(`@wix/himalaya/${sub}`), "utf8");
     } catch {
       return null;
     }
@@ -53400,7 +53418,7 @@ async function runBrowserAuthoring(opts) {
   const token = mintToken2(payload);
   const unusable = await probeAuthoringPage(opts.authoringBase, opts.fetchImpl, opts.probeTimeoutMs);
   if (unusable) throw new Error(unusable);
-  return await new Promise((resolve51, reject) => {
+  return await new Promise((resolve52, reject) => {
     let settled = false;
     let url = "";
     const server = createServer4();
@@ -53452,7 +53470,7 @@ async function runBrowserAuthoring(opts) {
         }
         res.writeHead(200, { "content-type": "text/plain" }).end("ok");
         const report2 = body.result;
-        finish2(() => resolve51({ report: report2, url }));
+        finish2(() => resolve52({ report: report2, url }));
       })();
     });
     server.on("error", (e) => finish2(() => reject(e)));
@@ -53495,7 +53513,7 @@ __export(coverage_exports, {
   trendAndStore: () => trendAndStore
 });
 import { existsSync as existsSync56, mkdirSync as mkdirSync26, readFileSync as readFileSync62, writeFileSync as writeFileSync22 } from "node:fs";
-import { dirname as dirname29, join as join55 } from "node:path";
+import { dirname as dirname30, join as join55 } from "node:path";
 function suppressedNativeKeys(oracle) {
   return [...oracle.ios ? [] : ["native-decode|ios"], ...oracle.android ? [] : ["native-decode|android"]];
 }
@@ -53687,7 +53705,7 @@ function trendAndStore(dir, entries, suppressed) {
   const current = entries.map((e) => e.key);
   const stored = [.../* @__PURE__ */ new Set([...current, ...(previous ?? []).filter((key2) => (suppressed ?? []).includes(key2))])];
   try {
-    mkdirSync26(dirname29(p), { recursive: true });
+    mkdirSync26(dirname30(p), { recursive: true });
     writeFileSync22(p, JSON.stringify({ keys: stored, ts: (/* @__PURE__ */ new Date()).toISOString() }, null, 2));
   } catch {
     return null;
@@ -53732,7 +53750,7 @@ function diffAndStoreObservations(dir, current) {
   } catch {
   }
   try {
-    mkdirSync26(dirname29(p), { recursive: true });
+    mkdirSync26(dirname30(p), { recursive: true });
     writeFileSync22(p, JSON.stringify({ screens: current, ts: (/* @__PURE__ */ new Date()).toISOString() }, null, 2));
   } catch {
     return null;
@@ -55626,7 +55644,7 @@ __export(run_exports, {
 });
 import { cpSync as cpSync2, existsSync as existsSync58, mkdirSync as mkdirSync27, mkdtempSync as mkdtempSync3, readFileSync as readFileSync65, rmSync as rmSync13, statSync as statSync14 } from "node:fs";
 import { networkInterfaces as osNetworkInterfaces, tmpdir as tmpdir4 } from "node:os";
-import { dirname as dirname30, join as join57 } from "node:path";
+import { dirname as dirname31, join as join57 } from "node:path";
 import { fileURLToPath as fileURLToPath24 } from "node:url";
 function makePackageRunHandler(opts) {
   const store = new FileReleaseStore(opts.releaseRoot);
@@ -55706,7 +55724,7 @@ async function resolvePackage(source, workDir) {
 async function loadPreviewAssets() {
   try {
     const mod = await Promise.resolve().then(() => (init_preview_assets_generated(), preview_assets_generated_exports));
-    const here = dirname30(fileURLToPath24(import.meta.url));
+    const here = dirname31(fileURLToPath24(import.meta.url));
     const candidates = [
       join57(here, "preview-assets.generated.bin"),
       // published: copied next to the bundled CLI
@@ -55864,7 +55882,7 @@ __export(run_watch_exports, {
 });
 import { closeSync as closeSync3, constants, existsSync as existsSync59, fstatSync, lstatSync as lstatSync12, statSync as statSync15, mkdirSync as mkdirSync28, openSync as openSync3, readFileSync as readFileSync66, realpathSync as realpathSync8, renameSync as renameSync6, rmSync as rmSync14, writeFileSync as writeFileSync23, watch as fsWatch } from "node:fs";
 import { randomUUID as randomUUID4 } from "node:crypto";
-import { extname as extname4, join as join58, resolve as resolve45, sep as sep14 } from "node:path";
+import { extname as extname4, join as join58, resolve as resolve46, sep as sep15 } from "node:path";
 function diffReleases(prev, next) {
   const bundles = Object.keys(next.bundles).filter((b) => prev.bundles[b]?.sha256 !== next.bundles[b].sha256).sort();
   const changedBundles = new Set(bundles);
@@ -55924,7 +55942,7 @@ function watchContent(dir, onChange, opts = {}) {
 }
 function watchedContentDir(source) {
   if (!source || /^https?:\/\//i.test(source)) return null;
-  const dir = resolve45(source);
+  const dir = resolve46(source);
   try {
     return statSync15(dir).isDirectory() && existsSync59(join58(dir, "himalaya.content.json")) ? dir : null;
   } catch {
@@ -56037,7 +56055,7 @@ function boardFile(dir, pathname) {
     if (m) rel = join58("history", m[1]);
   }
   if (!rel) return null;
-  const bytes2 = readConfined(resolve45(dir, ".himi"), rel);
+  const bytes2 = readConfined(resolve46(dir, ".himi"), rel);
   if (!bytes2) return new Response("not found", { status: 404 });
   return new Response(bytes2, {
     status: 200,
@@ -56047,7 +56065,7 @@ function boardFile(dir, pathname) {
 function readConfined(root, rel) {
   try {
     if (!lstatSync12(root).isDirectory()) return null;
-    const parts = rel.split(sep14);
+    const parts = rel.split(sep15);
     let at2 = root;
     for (let i = 0; i < parts.length; i++) {
       at2 = join58(at2, parts[i]);
@@ -56055,7 +56073,7 @@ function readConfined(root, rel) {
       if (st.isSymbolicLink() || !(i === parts.length - 1 ? st.isFile() : st.isDirectory())) return null;
     }
     const canonicalRoot = realpathSync8(root);
-    if (!realpathSync8(at2).startsWith(canonicalRoot + sep14)) return null;
+    if (!realpathSync8(at2).startsWith(canonicalRoot + sep15)) return null;
     const fd = openSync3(at2, constants.O_RDONLY | (constants.O_NOFOLLOW ?? 0));
     try {
       if (!fstatSync(fd).isFile()) return null;
@@ -56114,17 +56132,17 @@ __export(run_browser_exports, {
 import { createServer as createServer6 } from "node:http";
 import { existsSync as existsSync60, readFileSync as readFileSync67 } from "node:fs";
 import { spawnSync as spawnSync3 } from "node:child_process";
-import { dirname as dirname31, resolve as resolve46 } from "node:path";
+import { dirname as dirname32, resolve as resolve47 } from "node:path";
 import { fileURLToPath as fileURLToPath25 } from "node:url";
 function stagedDir() {
-  return process.env.HIMI_BROWSER_PLANE_OUT ? resolve46(process.env.HIMI_BROWSER_PLANE_OUT) : resolve46(REPO, "packages", "serve", "dist", "browser-plane");
+  return process.env.HIMI_BROWSER_PLANE_OUT ? resolve47(process.env.HIMI_BROWSER_PLANE_OUT) : resolve47(REPO, "packages", "serve", "dist", "browser-plane");
 }
 function missingStaged() {
-  return [...SERVED].filter((f) => !existsSync60(resolve46(stagedDir(), f))).sort();
+  return [...SERVED].filter((f) => !existsSync60(resolve47(stagedDir(), f))).sort();
 }
 function ensureBrowserPlaneStaged() {
   if (missingStaged().length === 0) return { ok: true, detail: "already staged" };
-  const r = spawnSync3(process.execPath, [resolve46(REPO, "core/serve/scripts/stage-browser-plane.mjs")], {
+  const r = spawnSync3(process.execPath, [resolve47(REPO, "core/serve/scripts/stage-browser-plane.mjs")], {
     cwd: REPO,
     encoding: "utf8"
   });
@@ -56210,7 +56228,7 @@ async function runInBrowser(releaseRoot, app, header, opts = {}) {
     }
     const name = path2 === "/" || path2 === "/index.html" ? "host.html" : path2.slice(1);
     if (SERVED.has(name)) {
-      if (!existsSync60(resolve46(stagedDir(), name))) {
+      if (!existsSync60(resolve47(stagedDir(), name))) {
         const restaged = ensureBrowserPlaneStaged();
         if (!restaged.ok) {
           res.writeHead(503, { "content-type": "application/json" });
@@ -56220,7 +56238,7 @@ async function runInBrowser(releaseRoot, app, header, opts = {}) {
       }
       let bytes2;
       try {
-        bytes2 = readFileSync67(resolve46(stagedDir(), name));
+        bytes2 = readFileSync67(resolve47(stagedDir(), name));
       } catch (e) {
         res.writeHead(503, { "content-type": "application/json" });
         res.end(JSON.stringify({ error: "browser_plane_unstaged", file: name, detail: String(e) }));
@@ -56262,8 +56280,8 @@ var init_run_browser = __esm({
     init_open_url();
     init_file_store();
     init_wix_client_id();
-    HERE2 = dirname31(fileURLToPath25(import.meta.url));
-    REPO = resolve46(HERE2, "..", "..", "..");
+    HERE2 = dirname32(fileURLToPath25(import.meta.url));
+    REPO = resolve47(HERE2, "..", "..", "..");
     SERVED = /* @__PURE__ */ new Set(["host.html", "sw.js", "package-reader.js"]);
   }
 });
@@ -56683,9 +56701,9 @@ __export(preflight_exports, {
   requireEnv: () => requireEnv
 });
 import { existsSync as existsSync61, readFileSync as readFileSync68 } from "node:fs";
-import { isAbsolute as isAbsolute5, relative as relative12, resolve as resolve47 } from "node:path";
+import { isAbsolute as isAbsolute5, relative as relative12, resolve as resolve48 } from "node:path";
 function isInsideRepo(p) {
-  const rel = relative12(REPO_ROOT3, resolve47(p));
+  const rel = relative12(REPO_ROOT3, resolve48(p));
   return rel !== "" && !rel.startsWith("..") && !isAbsolute5(rel);
 }
 function assertCredentialOutsideRepo(label2, p) {
@@ -57494,7 +57512,7 @@ var init_asc_status = __esm({
 // ../../core/functions-secrets/src/vault.ts
 import { createCipheriv, createDecipheriv, randomBytes as randomBytes5 } from "node:crypto";
 import { mkdir, readFile as readFile2, rename, writeFile as writeFile2 } from "node:fs/promises";
-import { dirname as dirname32 } from "node:path";
+import { dirname as dirname33 } from "node:path";
 function createJsonSecretStore(filePath) {
   const read = async () => {
     try {
@@ -57507,7 +57525,7 @@ function createJsonSecretStore(filePath) {
     }
   };
   const write2 = async (records) => {
-    await mkdir(dirname32(filePath), { recursive: true });
+    await mkdir(dirname33(filePath), { recursive: true });
     const temporary = `${filePath}.${process.pid}.tmp`;
     await writeFile2(temporary, `${JSON.stringify(records, null, 2)}
 `, { mode: 384 });
@@ -57703,7 +57721,7 @@ __export(notify_exports, {
 });
 import { chmodSync as chmodSync3, mkdirSync as mkdirSync29, readFileSync as readFileSync75, writeFileSync as writeFileSync25 } from "node:fs";
 import { homedir as homedir6 } from "node:os";
-import { dirname as dirname33, join as join61 } from "node:path";
+import { dirname as dirname34, join as join61 } from "node:path";
 function defaultSessionsPath() {
   return process.env.HIMI_ADMIN_SESSIONS_FILE ?? join61(homedir6(), ".himalaya", "admin-sessions.json");
 }
@@ -57717,10 +57735,10 @@ function loadSessionsFile(path2 = defaultSessionsPath()) {
 function saveAdminSession(adminUrl, session, path2 = defaultSessionsPath()) {
   const file = loadSessionsFile(path2);
   file.sessions = { ...file.sessions, [adminUrl]: session };
-  mkdirSync29(dirname33(path2), { recursive: true, mode: 448 });
+  mkdirSync29(dirname34(path2), { recursive: true, mode: 448 });
   writeFileSync25(path2, JSON.stringify(file, null, 2) + "\n", { mode: 384 });
   try {
-    chmodSync3(dirname33(path2), 448);
+    chmodSync3(dirname34(path2), 448);
     chmodSync3(path2, 384);
   } catch {
   }
@@ -60320,10 +60338,10 @@ function assertPublicSiteUrl(raw) {
   if (refusal) throw new Error(refusal);
 }
 function resolveAll(hostname2) {
-  return new Promise((resolve51, reject) => {
+  return new Promise((resolve52, reject) => {
     dnsLookup(hostname2, { all: true, verbatim: true }, (err, addresses) => {
       if (err) reject(err);
-      else resolve51(addresses);
+      else resolve52(addresses);
     });
   });
 }
@@ -60331,13 +60349,13 @@ function withAbort(start, signal, what) {
   if (signal?.aborted) return Promise.reject(new Error(`${what} aborted`));
   const work = start();
   if (!signal) return work;
-  return new Promise((resolve51, reject) => {
+  return new Promise((resolve52, reject) => {
     const onAbort = () => reject(new Error(`${what} aborted`));
     signal.addEventListener("abort", onAbort, { once: true });
-    work.then(resolve51, reject).finally(() => signal.removeEventListener("abort", onAbort));
+    work.then(resolve52, reject).finally(() => signal.removeEventListener("abort", onAbort));
   });
 }
-async function pinAddress(url, resolve51 = resolveAll, signal) {
+async function pinAddress(url, resolve52 = resolveAll, signal) {
   const host = url.hostname.replace(/^\[|\]$/g, "");
   if (ipv4Octets(host)) {
     if (isBlockedAddress(host)) throw new Error(`${host} is a blocked address`);
@@ -60347,7 +60365,7 @@ async function pinAddress(url, resolve51 = resolveAll, signal) {
     if (isBlockedAddress(host)) throw new Error(`${host} is a blocked address`);
     return { address: host, family: 6 };
   }
-  const addresses = await withAbort(() => resolve51(host), signal, `${host} lookup`);
+  const addresses = await withAbort(() => resolve52(host), signal, `${host} lookup`);
   if (!addresses.length) throw new Error(`${host} resolved to no address`);
   const blocked = addresses.filter((a) => isBlockedAddress(a.address)).map((a) => a.address);
   if (blocked.length) throw new Error(`${host} resolves to a blocked address (${blocked.join(", ")})`);
@@ -60387,7 +60405,7 @@ function copyIncomingHeaders(headers2) {
   return out2;
 }
 function requestOnce(url, pinned, init) {
-  return new Promise((resolve51, reject) => {
+  return new Promise((resolve52, reject) => {
     const headers2 = { host: url.host, "accept-encoding": "identity" };
     new Headers(init.headers ?? {}).forEach((value, key2) => {
       if (key2.toLowerCase() !== "host") headers2[key2] = value;
@@ -60417,7 +60435,7 @@ function requestOnce(url, pinned, init) {
           reject(err);
           return;
         }
-        resolve51(new Response(body, { status, statusText: res.statusMessage ?? "", headers: out2 }));
+        resolve52(new Response(body, { status, statusText: res.statusMessage ?? "", headers: out2 }));
       }
     );
     req.on("error", reject);
@@ -61733,14 +61751,14 @@ var init_customer_build = __esm({
 
 // src/site-analyze/apply.ts
 import { existsSync as existsSync64, readFileSync as readFileSync76, writeFileSync as writeFileSync27, copyFileSync as copyFileSync3, mkdirSync as mkdirSync31, realpathSync as realpathSync9, statSync as statSync17 } from "node:fs";
-import { dirname as dirname34, isAbsolute as isAbsolute6, join as join63, resolve as resolve48, sep as sep15 } from "node:path";
+import { dirname as dirname35, isAbsolute as isAbsolute6, join as join63, resolve as resolve49, sep as sep16 } from "node:path";
 import { spawnSync as spawnSync4 } from "node:child_process";
 function unpairedRedirectNote(overlay) {
   if (!overlay.wix?.clientId || overlay.wix.redirectUri) return void 0;
   return `no OAuth redirect paired with client ${overlay.wix.clientId} \u2014 the app (and prepare:customer) will refuse to start until one is set. Register it with \`himi site client ensure --site ${overlay.siteId?.trim() || "<msid>"} --redirect-uri <uri> --yes\`, then re-run analyze with \`--redirect-uri <uri>\` (or export HIMI_BRANDED_LITE_WIX_REDIRECT_URI)`;
 }
 function posix3(p) {
-  return resolve48(p).replace(/\\/g, "/");
+  return resolve49(p).replace(/\\/g, "/");
 }
 function committedShellProvisioning(path2) {
   return committedShellFor(posix3(path2));
@@ -61749,7 +61767,7 @@ function findRepoRoot(cwd) {
   let dir = cwd;
   for (let i = 0; i < 8; i++) {
     if (SHELL_NAMES2.some((name) => existsSync64(join63(dir, shellAppDir(name), "package.json")))) return dir;
-    const next = dirname34(dir);
+    const next = dirname35(dir);
     if (next === dir) break;
     dir = next;
   }
@@ -61774,7 +61792,7 @@ function assertNotCommitted(path2, forbidden) {
       `refusing to overwrite committed ${committedProvisioningPath(committed)} \u2014 use prepare:customer --contract`
     );
   }
-  if (forbidden && resolve48(path2) === resolve48(forbidden)) {
+  if (forbidden && resolve49(path2) === resolve49(forbidden)) {
     const named = committedShellProvisioning(forbidden);
     throw new Error(
       `refusing to overwrite committed ${named ? committedProvisioningPath(named) : forbidden} \u2014 pass a content-package provisioning.json or use prepare:customer --contract`
@@ -61828,8 +61846,8 @@ function buildMergedContract(options) {
   const staged = [];
   const contained = (root, rel) => {
     if (isAbsolute6(rel)) return void 0;
-    const full = resolve48(root, rel);
-    return full.startsWith(resolve48(root) + sep15) ? full : void 0;
+    const full = resolve49(root, rel);
+    return full.startsWith(resolve49(root) + sep16) ? full : void 0;
   };
   const stage = (fromRel, toRel) => {
     const from = contained(packageDir, fromRel);
@@ -61843,10 +61861,10 @@ function buildMergedContract(options) {
     } catch {
       return void 0;
     }
-    if (!real.startsWith(realRoot + sep15)) return void 0;
+    if (!real.startsWith(realRoot + sep16)) return void 0;
     try {
       if (!statSync17(real).isFile()) return void 0;
-      mkdirSync31(dirname34(to), { recursive: true });
+      mkdirSync31(dirname35(to), { recursive: true });
       copyFileSync3(real, to);
     } catch {
       return void 0;
@@ -61884,7 +61902,7 @@ function buildMergedContract(options) {
   const path2 = join63(packageDir, "provisioning.contract.json");
   writeFileSync27(path2, body);
   const localPath = join63(appDir3, LOCAL_CONTRACT_REL);
-  mkdirSync31(dirname34(localPath), { recursive: true });
+  mkdirSync31(dirname35(localPath), { recursive: true });
   writeFileSync27(localPath, body);
   staged.push(localPath);
   return { path: path2, staged };
@@ -61918,7 +61936,7 @@ function catalogTypography(overlay, template) {
 function staticFaqFor(overlay, overlayPath) {
   const own3 = overlay.faq;
   if (own3 !== void 0) return deriveStaticFaq(own3);
-  const bookPath = join63(dirname34(resolve48(overlayPath)), "book.json");
+  const bookPath = join63(dirname35(resolve49(overlayPath)), "book.json");
   if (!existsSync64(bookPath)) return void 0;
   try {
     const book = JSON.parse(readFileSync76(bookPath, "utf8"));
@@ -61932,7 +61950,7 @@ function staticFaqFor(overlay, overlayPath) {
   }
 }
 async function applyOverlays(input) {
-  const cwd = resolve48(input.cwd);
+  const cwd = resolve49(input.cwd);
   const shell = input.shell ?? DEFAULT_BRANDABLE_SHELL;
   assertKnownShell(shell);
   const overlay = JSON.parse(readFileSync76(input.overlayPath, "utf8"));
@@ -61956,7 +61974,7 @@ async function applyOverlays(input) {
         `shell "${shell}" is a site shell: its contract names the customer's website (a \`site\` block), which this analysis does not produce yet. Write the site block into a contract and run \`npm run prepare:customer -- --contract <file>\` in ${shellAppDir(shell)} (or \`himi dist --shell ${shell}\`).`
       );
     }
-    const packageDir = dirname34(resolve48(input.overlayPath));
+    const packageDir = dirname35(resolve49(input.overlayPath));
     const { path: contract, staged } = buildMergedContract({ appDir: appDir3, packageDir, overlay });
     wrote.push(...staged);
     const r = spawnSync4("npm", ["run", "prepare:customer", "--", "--contract", contract], {
@@ -62051,7 +62069,7 @@ async function applyOverlays(input) {
     }
   }
   if (!input.iconPath || !existsSync64(input.iconPath)) {
-    const book = input.iconPath ? dirname34(dirname34(resolve48(input.iconPath))) : void 0;
+    const book = input.iconPath ? dirname35(dirname35(resolve49(input.iconPath))) : void 0;
     notes.push(
       book ? `no icon installed \u2014 ${siteLogoAbsence(book).hint}` : "no icon installed and no business book to say why \u2014 `himi icon generate` draws one from the accent, or `himi icon set <file.png>` installs the customer's own mark"
     );
@@ -63006,10 +63024,10 @@ function permuteDomain(domain, allowSpecialUseDomain) {
 }
 function createPromiseCallback(cb) {
   let callback;
-  let resolve51;
+  let resolve52;
   let reject;
   const promise = new Promise((_resolve, _reject) => {
-    resolve51 = _resolve;
+    resolve52 = _resolve;
     reject = _reject;
   });
   if (typeof cb === "function") {
@@ -63025,7 +63043,7 @@ function createPromiseCallback(cb) {
     callback = (err, result) => {
       try {
         if (err) reject(err);
-        else resolve51(result);
+        else resolve52(result);
       } catch (e) {
         reject(e instanceof Error ? e : new Error());
       }
@@ -66244,7 +66262,7 @@ __export(cli_exports, {
   runSiteFunctionCli: () => runSiteFunctionCli
 });
 import { readFileSync as readFileSync77 } from "node:fs";
-import { resolve as resolve49 } from "node:path";
+import { resolve as resolve50 } from "node:path";
 function assetFetchFor(_opts) {
   return pinnedFetch2;
 }
@@ -66263,7 +66281,7 @@ async function runSiteAnalyze(opts) {
   const assetFetch = assetFetchFor(opts);
   const siteFetch = guardedSiteFetch;
   const cwd = opts.cwd ?? process.cwd();
-  const outDir = resolve49(cwd, opts.outDir ?? ".himi/business-book");
+  const outDir = resolve50(cwd, opts.outDir ?? ".himi/business-book");
   let ownerAuth;
   let msid;
   const ownerSite = ownerSiteFor(opts);
@@ -66303,9 +66321,9 @@ async function runSiteAnalyze(opts) {
   if (opts.apply) {
     applied = await applyOverlays({
       cwd,
-      overlayPath: resolve49(outDir, "provisioning.overlay.json"),
-      tokensPath: resolve49(outDir, "tokens.overlay.json"),
-      iconPath: resolve49(outDir, "media/icon.png"),
+      overlayPath: resolve50(outDir, "provisioning.overlay.json"),
+      tokensPath: resolve50(outDir, "tokens.overlay.json"),
+      iconPath: resolve50(outDir, "media/icon.png"),
       shell: opts.shell
     });
     const note = noteWithWarnings(applied.note, warnings);
@@ -66341,7 +66359,7 @@ async function runSiteFunctionCli(opts) {
   const token = opts.token ?? await siteToken(msid);
   let source;
   if (opts.sourcePath) {
-    const p = resolve49(opts.cwd ?? process.cwd(), opts.sourcePath);
+    const p = resolve50(opts.cwd ?? process.cwd(), opts.sourcePath);
     source = readFileSync77(p, "utf8");
   }
   let body;
@@ -66395,7 +66413,7 @@ async function accountToken2(spawnImpl = spawn6) {
     cached2 = fromEnv;
     return fromEnv;
   }
-  const token = await new Promise((resolve51, reject) => {
+  const token = await new Promise((resolve52, reject) => {
     let child;
     try {
       child = spawnImpl("wix", ["token"]);
@@ -66424,7 +66442,7 @@ async function accountToken2(spawnImpl = spawn6) {
     const scan = (d) => {
       out2 += String(d);
       const m = out2.match(TOKEN_RE2);
-      if (m) done(() => resolve51(m[0]));
+      if (m) done(() => resolve52(m[0]));
     };
     child.stdout?.on("data", scan);
     child.stderr?.on("data", scan);
@@ -67427,7 +67445,7 @@ import { mkdtempSync as mkdtempSync4, readFileSync as readFileSync79, mkdirSync
 import { execFile, execFileSync as execFileSync7, spawnSync as spawnSync5, spawn as spawn7 } from "node:child_process";
 import { createHash as createHash31, randomUUID as randomUUID6 } from "node:crypto";
 import { tmpdir as tmpdir5, homedir as homedir7, hostname } from "node:os";
-import { join as join64, resolve as resolve50, relative as relative13, basename as basename17, dirname as dirname35 } from "node:path";
+import { join as join64, resolve as resolve51, relative as relative13, basename as basename17, dirname as dirname36 } from "node:path";
 import { fileURLToPath as fileURLToPath26 } from "node:url";
 
 // ../serve-cli/src/client.ts
@@ -68153,7 +68171,7 @@ async function browserLogin(opts) {
   const log = opts.log ?? (() => {
   });
   const timeoutMs = opts.timeoutMs ?? DEFAULT_TIMEOUT_MS;
-  return await new Promise((resolve51, reject) => {
+  return await new Promise((resolve52, reject) => {
     let settled = false;
     let loginUrl = "";
     const server = createServer();
@@ -68217,7 +68235,7 @@ async function browserLogin(opts) {
           return;
         }
         res.writeHead(200, { "content-type": "text/html; charset=utf-8", "cache-control": "no-store", connection: "close" }).end(CLOSE_PAGE);
-        finish2(() => resolve51({ token, loginUrl }));
+        finish2(() => resolve52({ token, loginUrl }));
       });
     });
     server.on("error", (err) => finish2(() => reject(err)));
@@ -70191,7 +70209,7 @@ var COMMANDS = [
   { name: "validate", summary: "lint the content package (no push): fixed-contract TypeScript checking for tier5-src workers + schema/proto + token refs + component allowlist + $service bindings + strict-enum foot-guns + capability decls + worker boot dry-run + build/compile failures. Type issues are advisory warnings normally; --strict promotes them and hygiene warnings to errors. Exit 1 on any error. Off-repo, the CLI supplies its compiler and SDK declarations.", required: "[--content <dir>] [--strict]" },
   { name: "test", summary: "DERIVED behavioral crawl \u2014 no test files to write. Boots each screen's real worker, replays its onAppear, then dispatches every action site the descriptor already declares (each from a fresh boot) and checks a narrow set of unambiguous invariants: no uncaught throw, never stuck on `loading`, no `$service:` token or NaN/undefined/[object Object] reaching visible text, no binding aimed at state the worker never defines, no nav param silently dropped, no dead nav target. Catches what validate/render cannot \u2014 a WRONG REDUCER passes both with ok:true. Runs the worker in a DEVICE-PARITY sandbox (no setTimeout/setInterval, as on JSC/WebView) so a bundle that would die on device fails here. Crawls on HERMETIC DATA by default \u2014 zero network: the app's own dev/net-mocks.json first (--net <file> overrides), then the config's CMS `seed:` rows, then a canned fixture of frozen real vertical responses shipped with the CLI (exercises code paths, not API-contract truth) \u2014 so the success/mapping path runs, not just the failure UI. Two boot-only HOSTILE passes (every list empty; every request 500) then check the failure/empty day \u2014 corpus-proven, so their findings are errors. NAV EDGES are followed too: every himi.open site ($item params resolved against row 0 of its list, $service against worker state) and worker _nav directive is harvested, and each baked target is booted WITH the params the source sends \u2014 detail screens finally run their content arm; edge findings are errors tagged edge:<source>. --native runs both real native decoders over the exact baked JSON bytes; --native ios or --native android selects one. It is explicit, runs only from a Himalaya SOURCE CHECKOUT (the decoder oracles are that tree's own HimalayaCore Swift package and Gradle harness, which a published install does not ship), and needs the selected local toolchain. From a source checkout, default runs name missing native verdicts in the coverage ledger; elsewhere the ledger stays silent about them rather than offering a remedy you cannot run. --offline strips all data layers (the old reject-all axis); --no-hostile skips the hostile passes. --record (EXPLICIT, never automatic) refreshes dev/net-mocks.json from live reads first: it boots each screen (load + root onAppear ONLY \u2014 nothing the app's own launch would not fire; the tap/action crawl never sees the live transport, and only proven reads \u2014 GET, or read-shaped POST (/query, /search, /list*, \u2026) \u2014 ever reach the wire), freezes the round-trips, then crawls hermetically on the fresh fixture; record against a QA site, not production. Nodes it cannot judge headless are named, never silently passed. Exit 1 on any error. The CLI carries the authoring runtime off-repo; no per-app SDK install is required. --browser runs the whole loop (build \u2192 extract \u2192 validate \u2192 render \u2192 test) in YOUR browser instead of here, so the source never reaches a pod: it opens one screen's worker + descriptor in a tab, blocks on a loopback callback, and prints the report it posts back. One screen per tab \u2014 name it. --no-open prints the URL rather than launching a browser (SSH); --timeout <ms> bounds the wait, which matters because the page has no execution deadline of its own and an infinite loop in the worker hangs the tab.", required: "[<screenId>\u2026] [--content <dir>] [--net <file>] [--budget <ms>] [--deep [n]] [--record] [--native [ios|android]] [--no-shots] [--offline] [--no-hostile] [--all-screens] [--browser] [--no-open] [--timeout <ms>] [--json]" },
   { name: "ux", summary: "audit or record mobile UX evidence. `audit` checks the public-safe contract, seeded blank acceptance rows, placeholder source copy, app-specific mocks, and iOS/Android audit records. It warns while existing templates migrate; `--strict` promotes missing evidence. `record` stores checks performed on an installed iOS/Android build: `--checks` is required for passed|failed and empty for unavailable, which drove nothing and needs a `--reason` instead. `record` also STAMPS the release it audited (it resolves the id from a build, the same one a push would publish), because an unforced `himi push` of a release with screens refuses when no drive is recorded for THAT release, or when the one that is recorded says `failed` \u2014 the artifact stopped being advice nobody reads (#2955). `unavailable` still satisfies it; only `failed` refuses.", required: "audit [--content <dir>] [--strict] [--json] | record --content <dir> --platform ios|android --status passed|failed|unavailable [--checks back,keyboard,...] [--reason <text>]" },
-  { name: "progress", summary: 'the build JOURNAL an agent keeps for the owner while it works. `himi progress "<what changed>" --step <1-8|name> --image <png>` appends one postcard to .himi/progress.jsonl \u2014 the step is one of the customer journey\'s eight (discover, classify, plan, implement, brand, validate, review, download) \u2014 and COPIES each image, content-addressed, into .himi/history/, because .himi/shots/ is overwritten by every render and cleared by every full `himi test`, so a path into it would later show a different picture than the one the owner was sent. --image repeats. With NO --image, the home screen\'s current shot is attached automatically, only when it is no older than the last source change and not the picture the latest journaled postcard already shows; `imageAttached` in the output says whether the postcard carries a picture (with `imageNote` saying why not), and `--no-image` sends a text-only postcard. --notify also raises a best-effort desktop notification for an owner who stepped away. A bare `himi progress` prints the journal with the current step and elapsed time \u2014 also how an agent recovers its place after its context was compacted. APPROVALS: `--approve <gate> "<what>"` records one the customer just gave (gates: site-create, connect, private-data, draft, promote, push-signing, qa-build) in .himi/approvals.jsonl, and `--done <gate>` / `--drop <gate>` closes it \u2014 an approval is owed until then, and the chat that held it does not survive a new session. `--brief` prints plain text for a session start: the current step, the last postcard, every open approval, and whether this app\'s agent files are stale \u2014 the SessionStart hook `himi agent-init` installs runs exactly this. The CLI also journals milestones by itself \u2014 the first PNG render of the home screen (for an app a current `himi init` started: once as the template\'s "Starting point" while the source is what init wrote, then once as "First look at your app" after it diverges, Markdown edits not counting; once per app otherwise), a `himi test` crawl whose outcome changed since the last one (its counts or its home picture; an identical re-run writes none), every draft push (with the home picture only when that shot is newer than the last source edit) \u2014 marked `"by": "himi"`; they never move the journey step, carry no link or credential, and step aside (folded out of every reader) when the agent journals the same step or picture within five minutes. Local only: nothing is sent anywhere.', required: '["<message>" [--step <1-8|name>] [--image <png>]\u2026 [--notify]] [--content <dir>] | --approve|--done|--drop <gate> ["<note>"] | --brief' },
+  { name: "progress", summary: 'the build JOURNAL an agent keeps for the owner while it works. `himi progress "<what changed>" --step <1-8|name> --image <png>` appends one postcard to .himi/progress.jsonl \u2014 the step is one of the customer journey\'s eight (discover, classify, plan, implement, brand, validate, review, download) \u2014 and COPIES each image, content-addressed, into .himi/history/, because .himi/shots/ is overwritten by every render and cleared by every full `himi test`, so a path into it would later show a different picture than the one the owner was sent. --image repeats. With NO --image, the home screen\'s current shot is attached automatically, only when it is no older than the last source change and not the picture the latest journaled postcard already shows; `imageAttached` in the output says whether the postcard carries a picture (with `imageNote` saying why not), and `--no-image` sends a text-only postcard. --notify also raises a best-effort desktop notification for an owner who stepped away. A bare `himi progress` prints the journal with the current step and elapsed time \u2014 also how an agent recovers its place after its context was compacted. APPROVALS: `--approve <gate> "<what>"` records one the customer just gave (gates: site-create, connect, private-data, draft, promote, push-signing, qa-build) in .himi/approvals.jsonl, and `--done <gate>` / `--drop <gate>` closes it \u2014 an approval is owed until then, and the chat that held it does not survive a new session. `--brief` prints plain text for a session start: the current step, the last postcard, every open approval, and whether this app\'s agent files are stale \u2014 the SessionStart hook `himi agent-init` installs runs exactly this. The CLI also journals milestones by itself \u2014 the first PNG render of the home screen (for an app a current `himi init` started: once as the template\'s "Starting point" while the source is what init wrote, then once as "First look at your app" after it diverges, Markdown edits not counting; once per app otherwise), a `himi test` crawl whose outcome changed since the last one (its counts or its home picture; an identical re-run writes none), every draft push (with the home picture only when that shot is newer than the last source edit) \u2014 marked `"by": "himi"`; they never move the journey step, carry no link or credential, and step aside (folded out of every reader) when the agent journals the same step or picture within five minutes. Local only: nothing is sent anywhere.', required: '["<message>" [--step <1-8|name>] [--image <png>]\u2026 [--no-image] [--notify]] [--content <dir>] | --approve|--done|--drop <gate> ["<note>"] | --brief' },
   { name: "studio", summary: "open the BUILD BOARD \u2014 one local page the owner can leave open while an agent builds their app, which fills itself in: every screen as it renders (NEW/CHANGED badges, and each earlier version kept for a filmstrip), the journey stepper and the latest postcard from `himi progress`, the validate/test/UX/draft checks as they run, the site next to the app's home screen with its palette, and the navigation the test crawl followed. Writes .himi/studio/index.html and opens it; the page re-reads its state every two seconds, so nothing needs to be served. OPT-IN BY EXISTENCE: until this command (or `himi init`, which makes the board for every app it creates, without opening a browser) has run, no other command touches .himi/studio/ \u2014 after it, render/test/validate/push/icon/site/ux/progress each refresh the board as they finish (best-effort; never fails a command). Every image is a content-addressed copy in .himi/history/, never a live path into .himi/shots/. Local only, no secrets: it never reads a preview token, handover code or control token. --no-open prints the path instead (SSH, CI). `himi studio reel` writes the MAKING-OF: one self-contained HTML file (every image inlined, nothing fetched) with a flipbook of the home screen version by version, captioned by the postcard in effect at the time, the final screens, and every postcard \u2014 sized to stay attachable, thinning frames first. Defaults to .himi/making-of.html (never archived by push), which every successful `himi push --draft` also rebuilds and names as `reel` in its output; --out to put it elsewhere. The output names that file as the one to hand the owner (`handover: {file, hint}` in JSON; two plain lines at a terminal) \u2014 beside the preview link, never instead of it.", required: "[--content <dir>] [--no-open] | reel [--out <file>] [--no-open]" },
   { name: "render", summary: "headless-render a screen with the web renderer: render-tree + diagnostics, optional --png [<file>] (bare: .himi/shots/<id>.png, what the build board shows), --scheme dark, --tree. Local by default (content dir). Pass --remote --app --release to hit GET /v1/preview/\u2026/render on the serve plane after a push. Boots the worker so $service bindings resolve; --static raw bindings; --live real Wix fetches; --state injects worker state; --input supplies pre-boot navigation params; --width/--device for PNG viewport; --rtl for dir=rtl + $env:isRTL.", required: "<screenId> [--content <dir>] [--scheme dark] [--png [<file>]] [--tree] [--static] [--live] [--state <json|file>] [--input <json|file>] [--width <px> | --device <name>] [--rtl] [--remote --app --release]" },
   { name: "cms", summary: "inspect, provision, and seed the app's CMS (Wix Data) collections, declared as a `cms` block in config.ts. `query` is READ-ONLY \u2014 by default it fetches ONLY the physical ids `config.ts` declares (item counts + schema drift) and reports `siteScanned: false`; it never lists the site, so an UNDECLARED `himi_<app>_` collection this app owns is not reached without `--all`. `--all` SCANS the site \u2014 every collection it lists is labeled `owned`/`adopted`/`foreign`, and it describes every foreign one \u2014 id, non-system field keys + types, and the site's read role \u2014 so an app with no `cms` block at all can DISCOVER a collection to adopt (`--all` is the one case where a missing `cms` block is not 'nothing to do'). Foreign collections are described up to a cap and are never item-counted (`itemCount: null`), because a row count is one query each; `foreign.count` is how many the scan LISTED \u2014 it follows the list endpoint's pages, and `listingIncomplete: true` says when the walk stopped short of the end, with `unlistedCollections` counting what it left out when Wix gave a paging total \u2014 and `foreign.truncated` says how many of those went undescribed, each still NAMED in `foreign.others` (id + displayName), so a collection the site already has is never hidden behind the cap. The scan is OWNER-scoped \u2014 it needs --site <msid> (or WIX_SITE_ID) plus owner auth via `wix token`; a visitor token can read a public collection's ITEMS but can never enumerate collections, so there is no tokenless discovery path. `create` reconciles declared collections additively and idempotently, and REFUSES any id outside the app's `himi_<app>_` namespace, so it is safe against a production site. It reports declared-vs-site `permissionDrift` but never writes permissions unless asked with --apply-permissions, so a field reconcile can't silently revert access control changed in the dashboard. `seed` inserts the git-tracked `seed:` rows into EMPTY owned collections (--force to add to a non-empty one; --ai writes placeholder rows plus a refinement prompt for you to review). Adopted collections (declared by `wixId`) are read-only and never created, updated, or seeded. Site from --site <msid> or WIX_SITE_ID; owner auth via `wix token`.", required: "query|create|seed [--site <msid>] [--content <dir>] [--all] [--dry-run] [--force] [--allow-destructive] [--apply-permissions] [--only <id>] [--ai] [--count <n>]" },
@@ -70293,16 +70311,16 @@ function createScopedRegistryResolver(exec = execNpmConfig) {
 }
 var SCOPED_REGISTRY_TIMEOUT_MS = 5e3;
 function execNpmConfig(file, args, options) {
-  return new Promise((resolve51, reject) => {
-    execFile(file, args, { ...options, windowsHide: true }, (error, stdout) => error ? reject(error) : resolve51(String(stdout)));
+  return new Promise((resolve52, reject) => {
+    execFile(file, args, { ...options, windowsHide: true }, (error, stdout) => error ? reject(error) : resolve52(String(stdout)));
   });
 }
 var npmScopedWixRegistry = createScopedRegistryResolver();
 async function scopedRegistryBefore(lookup2, deadline) {
   let cancel = () => {
   };
-  const expired = new Promise((resolve51) => {
-    const timer = setTimeout(() => resolve51(void 0), Math.max(0, deadline - Date.now()));
+  const expired = new Promise((resolve52) => {
+    const timer = setTimeout(() => resolve52(void 0), Math.max(0, deadline - Date.now()));
     cancel = () => clearTimeout(timer);
   });
   try {
@@ -70367,11 +70385,11 @@ function packageVersion(path2) {
   }
 }
 function resolvedSdkVersion(fromDir = process.cwd(), bundledManifest = new URL("./authoring-runtime/node_modules/@wix/himalaya/package.json", import.meta.url)) {
-  let dir = resolve50(fromDir);
+  let dir = resolve51(fromDir);
   for (; ; ) {
     const version2 = packageVersion(join64(dir, "node_modules", "@wix", "himalaya", "package.json"));
     if (version2) return { version: version2, source: "local" };
-    const parent = dirname35(dir);
+    const parent = dirname36(dir);
     if (parent === dir) break;
     dir = parent;
   }
@@ -70438,7 +70456,7 @@ function readUpdateCache(path2) {
 }
 function writeUpdateCache(path2, cache) {
   try {
-    mkdirSync32(dirname35(path2), { recursive: true, mode: 448 });
+    mkdirSync32(dirname36(path2), { recursive: true, mode: 448 });
     writeFileSync29(path2, JSON.stringify(cache, null, 2) + "\n", { mode: 384 });
   } catch {
   }
@@ -70595,7 +70613,7 @@ function acquireUpdateLock(cachePath, now, hooks = {}) {
   };
   const release = () => removeIfMine(lockPath);
   try {
-    mkdirSync32(dirname35(lockPath), { recursive: true, mode: 448 });
+    mkdirSync32(dirname36(lockPath), { recursive: true, mode: 448 });
   } catch {
     return () => {
     };
@@ -70708,7 +70726,7 @@ function createTrimValidator(deps = {}, spawnFn = spawn7) {
     return { code, counts, ...errors ? { errors } : {}, ...code !== 0 ? { tail: said.slice(-4e3) } : {} };
   };
   return async (dir, opts = {}) => {
-    const argv = ["validate", "--content", resolve50(dir), "--strict", "--skip-version-check"];
+    const argv = ["validate", "--content", resolve51(dir), "--strict", "--skip-version-check"];
     if (!opts.fresh) {
       const out2 = [];
       const err = [];
@@ -71295,7 +71313,7 @@ function readConfigSource(dir) {
   }
 }
 function writePngFile(path2, base64) {
-  mkdirSync32(dirname35(path2), { recursive: true });
+  mkdirSync32(dirname36(path2), { recursive: true });
   writeFileSync29(path2, Buffer.from(base64, "base64"));
   return path2;
 }
@@ -71324,7 +71342,7 @@ function keptPlan(kept) {
   return note ? { kept, note } : {};
 }
 async function initFromRemoteTemplate(name, parentDir, template, c) {
-  const dir = resolve50(parentDir, name);
+  const dir = resolve51(parentDir, name);
   if (existsSync66(join64(dir, "himalaya.content.json"))) {
     throw new Error(`content package already exists at ${dir}`);
   }
@@ -71337,7 +71355,7 @@ async function initFromRemoteTemplate(name, parentDir, template, c) {
   return finishScaffold(materializeSource(archive.files, name, dir), template);
 }
 function contentDir(flags) {
-  return resolve50(str7(flags.content) ?? process.cwd());
+  return resolve51(str7(flags.content) ?? process.cwd());
 }
 function renameRestoredSource(restored, declaredApp, renamed) {
   const text6 = {};
@@ -71381,10 +71399,10 @@ function restoreDestinationIssue(dest, force) {
   return null;
 }
 function isHimalayaMonorepoCheckout(start) {
-  let dir = resolve50(start);
+  let dir = resolve51(start);
   for (; ; ) {
     if (existsSync66(join64(dir, "tools", "himi-cli", "src", "cli.ts")) && existsSync66(join64(dir, "core", "serve", "src", "server.ts"))) return true;
-    const parent = dirname35(dir);
+    const parent = dirname36(dir);
     if (parent === dir) return false;
     dir = parent;
   }
@@ -71443,7 +71461,7 @@ function materializeForPreview(appDir3, slug, displayName) {
   const forBuild = Object.fromEntries(
     Object.entries(files).map(([rel, body]) => [rel, rel === "himalaya.content.json" ? substituteIdentity(body, slug) : body])
   );
-  const repoRoot2 = resolve50(fileURLToPath26(new URL("../../..", import.meta.url)));
+  const repoRoot2 = resolve51(fileURLToPath26(new URL("../../..", import.meta.url)));
   const root = join64(repoRoot2, "node_modules", ".cache", "himi-template-preview");
   const stillRunning = (pid) => {
     try {
@@ -71689,7 +71707,7 @@ Seed your coding agent with \`himi agent-init\`. Guides: ${idx.portalUrl}`);
       return 0;
     }
     case "agent-init": {
-      const dir = resolve50(str7(flags.dir) ?? process.cwd());
+      const dir = resolve51(str7(flags.dir) ?? process.cwd());
       const { seedAgentFiles: seedAgentFiles2, NotAContentPackage: NotAContentPackage2 } = await Promise.resolve().then(() => (init_agent_context(), agent_context_exports));
       let res;
       try {
@@ -72225,7 +72243,7 @@ himi v${cliVersion()} \u2014 run \`himi --version\`. If authoring commands fail
           return 2;
         }
         const template = str7(flags.template);
-        const parentDir = resolve50(str7(flags.dir) ?? process.cwd());
+        const parentDir = resolve51(str7(flags.dir) ?? process.cwd());
         const withAgentFiles = async (dir) => {
           const seeded = await seedAgentFilesFor(dir, flags);
           if (!seeded.agent || "error" in seeded.agent) return seeded;
@@ -72374,8 +72392,8 @@ ${doNow.map((l) => `  ${l}`).join("\n")}`);
                 return 2;
               }
             }
-            const appDir3 = resolve50(str7(flags.dir) ?? process.cwd());
-            const sourceDir = resolve50(str7(flags["source-dir"]) ?? appDir3);
+            const appDir3 = resolve51(str7(flags.dir) ?? process.cwd());
+            const sourceDir = resolve51(str7(flags["source-dir"]) ?? appDir3);
             let meta;
             try {
               meta = JSON.parse(readFileSync79(join64(sourceDir, TEMPLATE_META_FILE), "utf8"));
@@ -72417,7 +72435,7 @@ ${doNow.map((l) => `  ${l}`).join("\n")}`);
               ...hasWorkers ? { tier5Dir: bundleOutDir2(buildDir) } : {},
               collect: { lint: true, strict }
             });
-            const scaffoldSourceFindings = resolve50(sourceDir) === resolve50(appDir3) ? [] : [
+            const scaffoldSourceFindings = resolve51(sourceDir) === resolve51(appDir3) ? [] : [
               ...tokenColorIssues(sourceDir),
               ...surfaceIssues(sourceDir, void 0, strict),
               ...await fontIssues(sourceDir, strict),
@@ -72460,7 +72478,7 @@ ${doNow.map((l) => `  ${l}`).join("\n")}`);
               }));
               return 1;
             }
-            const iconPath = str7(flags.icon) ? resolve50(str7(flags.icon)) : templateIconPath(name);
+            const iconPath = str7(flags.icon) ? resolve51(str7(flags.icon)) : templateIconPath(name);
             let iconHash;
             if (iconPath) {
               try {
@@ -72882,10 +72900,10 @@ ${doNow.map((l) => `  ${l}`).join("\n")}`);
             return 1;
           }
           const { himiPluginFiles: himiPluginFiles2 } = await Promise.resolve().then(() => (init_claude_plugin(), claude_plugin_exports));
-          const dir = resolve50(out2);
+          const dir = resolve51(out2);
           const files = himiPluginFiles2(skills.skillMd);
           for (const f of files) {
-            mkdirSync32(dirname35(join64(dir, f.path)), { recursive: true });
+            mkdirSync32(dirname36(join64(dir, f.path)), { recursive: true });
             writeFileSync29(join64(dir, f.path), f.text);
           }
           print({ ok: true, dir, files: files.map((f) => f.path), next: [`claude plugin validate ${dir}`, `claude --plugin-dir ${dir}`] });
@@ -72904,9 +72922,9 @@ ${doNow.map((l) => `  ${l}`).join("\n")}`);
         }
         if (pos[1] === "reel") {
           const { buildReel: buildReel2 } = await Promise.resolve().then(() => (init_studio_reel(), studio_reel_exports));
-          const out2 = resolve50(str7(flags.out) ?? join64(dir, ".himi", "making-of.html"));
+          const out2 = resolve51(str7(flags.out) ?? join64(dir, ".himi", "making-of.html"));
           const { html, plan } = buildReel2(dir);
-          mkdirSync32(dirname35(out2), { recursive: true });
+          mkdirSync32(dirname36(out2), { recursive: true });
           writeFileSync29(out2, html);
           const { pathToFileURL: pathToFileURL9 } = await import("node:url");
           const url2 = pathToFileURL9(out2).href;
@@ -73482,7 +73500,7 @@ ${handover.hint[0].toUpperCase()}${handover.hint.slice(1)}.`);
           }
         });
         const home = outcome.homeScreenId;
-        const { afterTestRun: afterTestRun2, watchReminder: watchReminder2 } = await Promise.resolve().then(() => (init_milestones(), milestones_exports));
+        const { afterTestRun: afterTestRun2, watchReminder: watchReminder2, homeShotPath: homeShotPath2 } = await Promise.resolve().then(() => (init_milestones(), milestones_exports));
         const testReminder = watchReminder2(dir, { content: str7(flags.content) });
         const afterRun = afterTestRun2(dir, {
           runId: attestation.runId,
@@ -73490,7 +73508,7 @@ ${handover.hint[0].toUpperCase()}${handover.hint.slice(1)}.`);
           actions: result.actions.exercised,
           errors: result.counts.errors,
           ...result.navGraph ? { broken: result.navGraph.broken.length, unreached: result.navGraph.unreached.length } : {},
-          ...home && writtenShots.includes(`${home}.png`) ? { homeShot: join64(dir, ".himi", "shots", `${home}.png`) } : {},
+          ...home && writtenShots.includes(`${home}.png`) && homeShotPath2(dir, home) ? { homeShot: homeShotPath2(dir, home) } : {},
           boardOpen: boardOpen(dir)
         });
         if (structuredOutput) {
@@ -73660,7 +73678,7 @@ ${[...testReminder ? [testReminder] : [], ...afterRun.next].join("\n")}`);
         const pngTarget = typeof flags.png === "string" ? str7(flags.png) : flags.png === true ? shotPath : void 0;
         if (pngTarget && r.pngBase64) {
           pngFile = writePngFile(pngTarget, r.pngBase64);
-          attestationPngFile = resolve50(pngTarget) === resolve50(shotPath) ? pngFile : writePngFile(shotPath, r.pngBase64);
+          attestationPngFile = resolve51(pngTarget) === resolve51(shotPath) ? pngFile : writePngFile(shotPath, r.pngBase64);
         }
         if (renderWidth !== void 0 && r.renderable) {
           recordRenderWidth(dir, {
@@ -73995,7 +74013,7 @@ default (no --glyph): ${DEFAULT_GLYPH2} \u2014 a mark that claims nothing, so th
           return 2;
         }
         const renamed = str7(flags.name);
-        const dest = resolve50(str7(flags.out) ?? process.cwd(), renamed ?? wanted);
+        const dest = resolve51(str7(flags.out) ?? process.cwd(), renamed ?? wanted);
         const replace = flags.replace === true;
         const force = replace || flags.force === true;
         const linked = symlinkDestinationIssue(dest);
@@ -74479,11 +74497,12 @@ default (no --glyph): ${DEFAULT_GLYPH2} \u2014 a mark that claims nothing, so th
           } catch {
           }
         }
+        const draftShot = draft && outcome.homeScreenId ? (await Promise.resolve().then(() => (init_milestones(), milestones_exports))).homeShotPath(dir, outcome.homeScreenId) : null;
         const afterDraft = draft ? (await Promise.resolve().then(() => (init_milestones(), milestones_exports))).afterDraftPush(dir, {
           app,
           releaseId: release,
           content: str7(flags.content),
-          ...outcome.homeScreenId ? { homeShot: join64(dir, ".himi", "shots", `${outcome.homeScreenId}.png`), sourceChangedAtMs } : {}
+          ...draftShot ? { homeShot: draftShot, sourceChangedAtMs } : {}
         }) : null;
         print({
           ok: true,
@@ -74649,7 +74668,7 @@ default (no --glyph): ${DEFAULT_GLYPH2} \u2014 a mark that claims nothing, so th
             return 2;
           }
           try {
-            const res = writePack(resolve50(releaseDir), only, resolve50(str7(flags.out) ?? process.cwd()));
+            const res = writePack(resolve51(releaseDir), only, resolve51(str7(flags.out) ?? process.cwd()));
             print({
               ok: true,
               app: res.app,
@@ -74720,7 +74739,7 @@ default (no --glyph): ${DEFAULT_GLYPH2} \u2014 a mark that claims nothing, so th
           return 1;
         }
         try {
-          const res = writePack(built, app, resolve50(str7(flags.out) ?? dir), sourceArchive);
+          const res = writePack(built, app, resolve51(str7(flags.out) ?? dir), sourceArchive);
           print({
             ok: true,
             app: res.app,
@@ -74765,7 +74784,7 @@ default (no --glyph): ${DEFAULT_GLYPH2} \u2014 a mark that claims nothing, so th
         const { HIMI_PACKAGE_SOURCE_PATH: HIMI_PACKAGE_SOURCE_PATH2, isSafeAppId: isSafeAppId2, packageContents: packageContents2 } = await Promise.resolve().then(() => (init_himi_package(), himi_package_exports));
         let opened;
         try {
-          opened = openPackageFile2(resolve50(file));
+          opened = openPackageFile2(resolve51(file));
         } catch (e) {
           io.error(JSON.stringify({ error: e.message }));
           return 1;
@@ -74778,7 +74797,7 @@ default (no --glyph): ${DEFAULT_GLYPH2} \u2014 a mark that claims nothing, so th
           io.error(JSON.stringify({
             ok: false,
             error: "app_source_not_in_package",
-            detail: `${resolve50(file)} is a release package: it carries built output (screens, bundles, tokens) and no source`,
+            detail: `${resolve51(file)} is a release package: it carries built output (screens, bundles, tokens) and no source`,
             hint: "re-pack it from the content package with `himi pack --dev`, or restore from the serve plane with `himi pull <app>`"
           }));
           return 1;
@@ -74801,7 +74820,7 @@ default (no --glyph): ${DEFAULT_GLYPH2} \u2014 a mark that claims nothing, so th
             return 1;
           }
         }
-        const dest = resolve50(str7(flags.out) ?? process.cwd(), renamed ?? opened.header.app);
+        const dest = resolve51(str7(flags.out) ?? process.cwd(), renamed ?? opened.header.app);
         const issue2 = restoreDestinationIssue(dest, flags.force === true);
         if (issue2) {
           io.error(JSON.stringify(issue2));
@@ -74888,7 +74907,7 @@ default (no --glyph): ${DEFAULT_GLYPH2} \u2014 a mark that claims nothing, so th
         }
         try {
           const { openPackageFile: openPackageFile2 } = await Promise.resolve().then(() => (init_pack(), pack_exports));
-          const opened = openPackageFile2(resolve50(file));
+          const opened = openPackageFile2(resolve51(file));
           if (!opened.validation.ok || !opened.header) {
             io.error(JSON.stringify({ error: "refusing to share an invalid package", issues: opened.validation.errors }));
             return 1;
@@ -74898,12 +74917,12 @@ default (no --glyph): ${DEFAULT_GLYPH2} \u2014 a mark that claims nothing, so th
             io.error(JSON.stringify({
               ok: false,
               error: "refusing to share a package that carries the app's source",
-              detail: `${resolve50(file)} was packed with --dev, and a share link is public and unauthenticated \u2014 anyone with the URL could \`himi import\` your codebase`,
+              detail: `${resolve51(file)} was packed with --dev, and a share link is public and unauthenticated \u2014 anyone with the URL could \`himi import\` your codebase`,
               hint: "share a release package instead (`himi pack` with no --dev), or hand the dev package over directly"
             }));
             return 1;
           }
-          const archive = readFileSync79(resolve50(file));
+          const archive = readFileSync79(resolve51(file));
           const result = await client2().createPackageShare({
             app: opened.header.app,
             releaseId: opened.header.releaseId,
@@ -75025,9 +75044,9 @@ default (no --glyph): ${DEFAULT_GLYPH2} \u2014 a mark that claims nothing, so th
             });
             await announce(run2);
             print({ ok: true, app: run2.app, url: run2.url, port: run2.port, plane: "browser" });
-            await new Promise((resolve51) => {
+            await new Promise((resolve52) => {
               const stop = () => {
-                void retract().catch((e) => io.error(JSON.stringify({ run: "stop_cleanup_failed", message: e.message }))).finally(() => run2.close().finally(() => resolve51()));
+                void retract().catch((e) => io.error(JSON.stringify({ run: "stop_cleanup_failed", message: e.message }))).finally(() => run2.close().finally(() => resolve52()));
               };
               process.once("SIGINT", stop);
               process.once("SIGTERM", stop);