@wix/himalaya-cli 0.1109.0 → 0.1111.0

package/dist/cli.mjs

@@ -994,8 +994,8 @@ function mobileUxDocumentBody(mobile) {
   }
   return out2 + mobile.slice(last);
 }
-function mobileUxSection(text6, heading) {
-  const match = new RegExp(`(?:^|\\n)##[ \\t]+${heading}\\b[^\\n]*([\\s\\S]*?)(?=\\n##[ \\t]|$)`, "i").exec(text6);
+function mobileUxSection(text8, heading) {
+  const match = new RegExp(`(?:^|\\n)##[ \\t]+${heading}\\b[^\\n]*([\\s\\S]*?)(?=\\n##[ \\t]|$)`, "i").exec(text8);
   return match ? match[1] : null;
 }
 function sectionTables(markdown) {
@@ -1024,8 +1024,8 @@ function namesOneCta(cell) {
   if (!cell) return false;
   return !/[,;]|\s\/\s/.test(cell);
 }
-function declaredStates(text6) {
-  const contract = section(text6, "Screen contract");
+function declaredStates(text8) {
+  const contract = section(text8, "Screen contract");
   if (!contract) return [];
   const states = [];
   for (const bullet of contract.matchAll(/^[ \t]*[-*][ \t]*[^:\n]*\bstates?[ \t]*:[ \t]*(\S.*)$/gim)) {
@@ -1035,8 +1035,8 @@ function declaredStates(text6) {
   }
   return [...new Set(states.map((state) => state.toLowerCase()))];
 }
-function primaryCtaStructureGap(text6) {
-  const acceptance = section(text6, "Implementation acceptance");
+function primaryCtaStructureGap(text8) {
+  const acceptance = section(text8, "Implementation acceptance");
   if (acceptance === null) return "There is no `## Implementation acceptance` section to read it from.";
   const tables = sectionTables(acceptance).filter((table) => table.data.length > 0);
   if (!tables.length) return "Its acceptance table has no rows.";
@@ -1049,7 +1049,7 @@ function primaryCtaStructureGap(text6) {
   const data = ctaTables.flatMap(({ table }) => table.data);
   const flat = (value) => value.toLowerCase().replace(/[^a-z0-9]+/g, " ").trim();
   const rowText = data.map((row) => flat(row.join(" ")));
-  const missing = declaredStates(text6).filter((state) => !rowText.some((row) => row.includes(flat(state))));
+  const missing = declaredStates(text8).filter((state) => !rowText.some((row) => row.includes(flat(state))));
   if (missing.length) return `The acceptance table has no row for the declared state(s): ${missing.join(", ")}.`;
   return null;
 }
@@ -1064,16 +1064,16 @@ function hasUnterminatedComment(mobile) {
   }
 }
 function mobileUxMarkerFindings(mobile, renderedWidths = []) {
-  const text6 = mobileUxDocumentBody(mobile);
+  const text8 = mobileUxDocumentBody(mobile);
   const findings = [];
-  if (!/^## Implementation acceptance\b/im.test(text6)) {
+  if (!/^## Implementation acceptance\b/im.test(text8)) {
     findings.push({ code: "missing-acceptance-matrix", message: "MOBILE-UX.md must contain the heading `## Implementation acceptance` at the start of a line. Case is not checked, but use this spelling: other tooling addresses the document by it." });
   }
-  if (!/^## Evidence\b/im.test(text6)) {
+  if (!/^## Evidence\b/im.test(text8)) {
     findings.push({ code: "missing-evidence-section", message: "MOBILE-UX.md must contain the heading `## Evidence` at the start of a line. Case is not checked, but use this spelling: other tooling addresses the document by it." });
   }
-  if (!/one primary CTA per state/i.test(text6)) {
-    const gap = primaryCtaStructureGap(text6);
+  if (!/one primary CTA per state/i.test(text8)) {
+    const gap = primaryCtaStructureGap(text8);
     if (gap) {
       findings.push({
         code: "missing-primary-cta-rule",
@@ -1081,8 +1081,8 @@ function mobileUxMarkerFindings(mobile, renderedWidths = []) {
       });
     }
   }
-  if (!hasWidthEvidence(text6, renderedWidths)) {
-    findings.push({ code: "missing-width-evidence", message: widthEvidenceMessage(text6, renderedWidths) });
+  if (!hasWidthEvidence(text8, renderedWidths)) {
+    findings.push({ code: "missing-width-evidence", message: widthEvidenceMessage(text8, renderedWidths) });
   }
   if (findings.length && hasUnterminatedComment(mobile)) {
     return [{
@@ -1092,15 +1092,15 @@ function mobileUxMarkerFindings(mobile, renderedWidths = []) {
   }
   return findings;
 }
-function widthMentions(text6) {
+function widthMentions(text8) {
   const mentions = [];
-  for (const match of text6.matchAll(/\d+/g)) {
+  for (const match of text8.matchAll(/\d+/g)) {
     const value = Number(match[0]);
     const start = match.index ?? 0;
     if (!inRange(value)) continue;
     const end = start + match[0].length;
-    const after = text6.slice(end, end + EDGE_WINDOW);
-    const before = text6.slice(Math.max(0, start - EDGE_WINDOW), start);
+    const after = text8.slice(end, end + EDGE_WINDOW);
+    const before = text8.slice(Math.max(0, start - EDGE_WINDOW), start);
     if (looksLikeYear(value) && !(UNIT_ATTACHED.test(after) || UNIT_WORD_ATTACHED.test(after))) continue;
     const spelledAsWidth = UNIT_ATTACHED.test(after) || UNIT_WORD_ATTACHED.test(after) || FILENAME_AFTER.test(after);
     const vetoed = spelledAsWidth && (ANTI_CUE_BEFORE.test(before) || PAIR_HEIGHT_BEFORE.test(before) || ANTI_CUE_AFTER.test(after));
@@ -2093,7 +2093,7 @@ function foldLegacyReport(legacy, seed2) {
     ...arrayField(legacy.failures),
     ...arrayField(legacy.warnings)
   ];
-  const report2 = emptyReport({
+  const report3 = emptyReport({
     ...seed2,
     ok: typeof legacy.ok === "boolean" ? legacy.ok : seed2.ok,
     app: seed2.app ?? stringField(legacy.app),
@@ -2104,12 +2104,12 @@ function foldLegacyReport(legacy, seed2) {
   const oldCounts = recordField(legacy.counts);
   return {
     ...legacy,
-    ...report2,
+    ...report3,
     counts: {
       ...oldCounts,
-      errors: numberField(oldCounts.errors) ?? report2.counts.errors,
-      warnings: numberField(oldCounts.warnings) ?? report2.counts.warnings,
-      gaps: report2.counts.gaps
+      errors: numberField(oldCounts.errors) ?? report3.counts.errors,
+      warnings: numberField(oldCounts.warnings) ?? report3.counts.warnings,
+      gaps: report3.counts.gaps
     }
   };
 }
@@ -2773,8 +2773,8 @@ function isAttestationV2(value) {
   if (!value || typeof value !== "object" || Array.isArray(value)) return false;
   const a = value;
   const coverage = a.coverage;
-  const report2 = a.report;
-  return a.attestation === 2 && typeof a.runId === "string" && ["himi-test", "himi-render", "himi-shots"].includes(a.tool) && [a.app, a.contentDir, a.gitDiffHash, a.gitUntrackedHash, a.releaseId, a.releaseHash, a.selfHash].every((item) => typeof item === "string" && item.length > 0) && stringRecord(a.descriptorHashes) && stringRecord(a.screenshots) && !!coverage && [coverage.screens, coverage.actionsDispatched, coverage.uncoveredFns, coverage.gaps].every((count2) => typeof count2 === "number" && Number.isFinite(count2) && count2 >= 0) && typeof report2?.ok === "boolean" && !!report2.counts && [report2.counts.errors, report2.counts.warnings, report2.counts.gaps].every((count2) => typeof count2 === "number" && Number.isFinite(count2) && count2 >= 0) && (a.prev === null || typeof a.prev === "string");
+  const report3 = a.report;
+  return a.attestation === 2 && typeof a.runId === "string" && ["himi-test", "himi-render", "himi-shots"].includes(a.tool) && [a.app, a.contentDir, a.gitDiffHash, a.gitUntrackedHash, a.releaseId, a.releaseHash, a.selfHash].every((item) => typeof item === "string" && item.length > 0) && stringRecord(a.descriptorHashes) && stringRecord(a.screenshots) && !!coverage && [coverage.screens, coverage.actionsDispatched, coverage.uncoveredFns, coverage.gaps].every((count2) => typeof count2 === "number" && Number.isFinite(count2) && count2 >= 0) && typeof report3?.ok === "boolean" && !!report3.counts && [report3.counts.errors, report3.counts.warnings, report3.counts.gaps].every((count2) => typeof count2 === "number" && Number.isFinite(count2) && count2 >= 0) && (a.prev === null || typeof a.prev === "string");
 }
 function readLatestAttestation(contentDir2) {
   try {
@@ -3170,8 +3170,8 @@ function penalty(m, size) {
   score += Math.floor(Math.abs(dark * 20 - total * 10) / total) * 10;
   return score;
 }
-function encodeQr(text6) {
-  const bytes2 = [...new TextEncoder().encode(text6)];
+function encodeQr(text8) {
+  const bytes2 = [...new TextEncoder().encode(text8)];
   const version2 = fitVersion(bytes2.length);
   if (!version2) {
     throw new RangeError(`QR payload too long: ${bytes2.length} bytes exceeds version ${QR_MAX_VERSION} at EC level L`);
@@ -3742,7 +3742,7 @@ async function mintToken(args, label2, cacheKey, spawnImpl) {
     tokenCache.set(cacheKey, fromEnv);
     return fromEnv;
   }
-  const token = await new Promise((resolve52, reject) => {
+  const token = await new Promise((resolve53, reject) => {
     let child;
     try {
       child = spawnImpl("wix", [...args]);
@@ -3771,12 +3771,12 @@ async function mintToken(args, label2, cacheKey, spawnImpl) {
     child.stdout?.on("data", (d) => {
       out2 += String(d);
       const m = out2.match(TOKEN_RE);
-      if (m) done(() => resolve52(m[0]));
+      if (m) done(() => resolve53(m[0]));
     });
     child.stderr?.on("data", (d) => {
       out2 += String(d);
       const m = out2.match(TOKEN_RE);
-      if (m) done(() => resolve52(m[0]));
+      if (m) done(() => resolve53(m[0]));
     });
     child.on("error", (e) => done(() => reject(new Error(mintHelp(label2, e.message)))));
     child.on("exit", (code) => done(() => reject(new Error(
@@ -3821,10 +3821,10 @@ function ownerTransport(msid, fetchImpl = fetch, timeoutMs = DEFAULT_TIMEOUT_MS2
       }
       throw new Error(`${method} ${path2} failed: ${err?.message ?? String(e)}`);
     }
-    const text6 = await res.text();
-    let parsed = text6;
+    const text8 = await res.text();
+    let parsed = text8;
     try {
-      parsed = text6 ? JSON.parse(text6) : null;
+      parsed = text8 ? JSON.parse(text8) : null;
     } catch {
     }
     if (!res.ok) throw new WixApiError(res.status, method, path2, parsed);
@@ -4486,18 +4486,18 @@ function confinementPlugin(contentRoot) {
 }
 function assertConfinedTsconfig(entry, contentRoot, allows) {
   const seen = /* @__PURE__ */ new Set();
-  const refuse4 = (p, why) => {
+  const refuse5 = (p, why) => {
     throw new Error(
       `refused to read ${p}: ${why}. A tsconfig may extend a file from its own package or an installed dependency \u2014 nothing else.`
     );
   };
-  const stripJsonc = (text6) => {
-    if (text6.charCodeAt(0) === 65279) text6 = text6.slice(1);
+  const stripJsonc = (text8) => {
+    if (text8.charCodeAt(0) === 65279) text8 = text8.slice(1);
     let out2 = "";
     let inStr = false;
     let esc = false;
-    for (let i = 0; i < text6.length; i++) {
-      const c = text6[i];
+    for (let i = 0; i < text8.length; i++) {
+      const c = text8[i];
       if (inStr) {
         out2 += c;
         if (esc) esc = false;
@@ -4510,13 +4510,13 @@ function assertConfinedTsconfig(entry, contentRoot, allows) {
         out2 += c;
         continue;
       }
-      if (c === "/" && text6[i + 1] === "/") {
-        while (i < text6.length && text6[i] !== "\n") i++;
+      if (c === "/" && text8[i + 1] === "/") {
+        while (i < text8.length && text8[i] !== "\n") i++;
         continue;
       }
-      if (c === "/" && text6[i + 1] === "*") {
+      if (c === "/" && text8[i + 1] === "*") {
         i += 2;
-        while (i < text6.length && !(text6[i] === "*" && text6[i + 1] === "/")) i++;
+        while (i < text8.length && !(text8[i] === "*" && text8[i + 1] === "/")) i++;
         i++;
         continue;
       }
@@ -4552,7 +4552,7 @@ function assertConfinedTsconfig(entry, contentRoot, allows) {
         try {
           manifest = JSON.parse(stripJsonc(readFileSync10(pj, "utf8")));
         } catch {
-          refuse4(pj, "its package.json could not be parsed, so its `tsconfig` field cannot be checked");
+          refuse5(pj, "its package.json could not be parsed, so its `tsconfig` field cannot be checked");
         }
         const field = manifest?.tsconfig;
         if (typeof field === "string" && field) {
@@ -4568,7 +4568,7 @@ function assertConfinedTsconfig(entry, contentRoot, allows) {
     const real = realpathOrSelf(file);
     if (seen.has(real)) return;
     seen.add(real);
-    if (!allows(real)) refuse4(file, "it is outside this content package");
+    if (!allows(real)) refuse5(file, "it is outside this content package");
     let raw;
     try {
       raw = readFileSync10(real, "utf8");
@@ -4579,7 +4579,7 @@ function assertConfinedTsconfig(entry, contentRoot, allows) {
     try {
       parsed = JSON.parse(stripJsonc(raw));
     } catch {
-      refuse4(file, "its tsconfig could not be parsed, so its `extends` cannot be checked");
+      refuse5(file, "its tsconfig could not be parsed, so its `extends` cannot be checked");
     }
     const ext = parsed?.extends;
     for (const one of Array.isArray(ext) ? ext : ext ? [ext] : []) {
@@ -6762,6 +6762,7 @@ function walk(node, registry, path2, out2) {
 var SYSTEM_FONT_FAMILY, TONAL_ELEVATION_ALPHA;
 var init_tokens = __esm({
   "../../core/ts/src/tokens.ts"() {
+    "use strict";
     SYSTEM_FONT_FAMILY = "$system";
     TONAL_ELEVATION_ALPHA = [0, 0.05, 0.08, 0.11, 0.12, 0.14];
   }
@@ -8419,8 +8420,8 @@ function pushSpan(out2, s) {
   else out2.push(s);
 }
 function spanOf(textNode) {
-  const text6 = str(at(textNode, "textData", "text"));
-  if (text6 === "") return null;
+  const text8 = str(at(textNode, "textData", "text"));
+  if (text8 === "") return null;
   let bold = false, italic = false, underline = false;
   let link;
   const decorations = at(textNode, "textData", "decorations");
@@ -8447,7 +8448,7 @@ function spanOf(textNode) {
       }
     }
   }
-  const span = { text: text6 };
+  const span = { text: text8 };
   if (bold) span.bold = true;
   if (italic) span.italic = true;
   if (underline) span.underline = true;
@@ -8669,8 +8670,8 @@ function blockOf(ids, n, path2) {
         const { title, url } = cardFields(n, type);
         return [card(ids.claim(n, path2), type, title, url)];
       }
-      const text6 = plainText(n);
-      return text6.trim() !== "" ? [{ kind: "paragraph", id: ids.claim(n, path2), spans: [{ text: text6 }] }] : [];
+      const text8 = plainText(n);
+      return text8.trim() !== "" ? [{ kind: "paragraph", id: ids.claim(n, path2), spans: [{ text: text8 }] }] : [];
     }
   }
 }
@@ -9941,26 +9942,26 @@ function serviceOnlyBindingValues(props, key2) {
   });
   return out2;
 }
-function matchBraceSafe(text6, open) {
+function matchBraceSafe(text8, open) {
   let depth = 0;
-  for (let i = open; i < text6.length; i++) {
-    const c = text6[i];
+  for (let i = open; i < text8.length; i++) {
+    const c = text8[i];
     if (c === '"' || c === "'" || c === "`") {
       const q = c;
       i++;
-      while (i < text6.length && text6[i] !== q) {
-        if (text6[i] === "\\") i++;
+      while (i < text8.length && text8[i] !== q) {
+        if (text8[i] === "\\") i++;
         i++;
       }
       continue;
     }
-    if (c === "/" && text6[i + 1] === "/") {
-      while (i < text6.length && text6[i] !== "\n") i++;
+    if (c === "/" && text8[i + 1] === "/") {
+      while (i < text8.length && text8[i] !== "\n") i++;
       continue;
     }
-    if (c === "/" && text6[i + 1] === "*") {
+    if (c === "/" && text8[i + 1] === "*") {
       i += 2;
-      while (i < text6.length && !(text6[i] === "*" && text6[i + 1] === "/")) i++;
+      while (i < text8.length && !(text8[i] === "*" && text8[i + 1] === "/")) i++;
       i++;
       continue;
     }
@@ -12908,8 +12909,8 @@ var init_owner_claim = __esm({
 
 // ../native-config/car.ts
 function parseCarConfig(configTs) {
-  const { text: text6, inString } = scanConfig(configTs);
-  for (const m of text6.matchAll(/\bcar\s*[:=]\s*\{([^}]*)\}/g)) {
+  const { text: text8, inString } = scanConfig(configTs);
+  for (const m of text8.matchAll(/\bcar\s*[:=]\s*\{([^}]*)\}/g)) {
     if (inString[m.index]) continue;
     return { category: /category\s*:\s*["']([^"']+)["']/.exec(m[1])?.[1] };
   }
@@ -17995,12 +17996,12 @@ function hostAppliesDeferredWidgetActions(app) {
   }
   return false;
 }
-function hasMarkers(text6, kind, label2) {
-  const lines = text6.split("\n");
+function hasMarkers(text8, kind, label2) {
+  const lines = text8.split("\n");
   return lines.some((l) => isBegin(l, kind, label2)) && lines.some((l) => isEnd(l, kind, label2));
 }
-function injectBlock(text6, kind, label2, render) {
-  const lines = text6.split("\n");
+function injectBlock(text8, kind, label2, render) {
+  const lines = text8.split("\n");
   const beginIdx = lines.findIndex((l) => isBegin(l, kind, label2));
   const endIdx = lines.findIndex((l) => isEnd(l, kind, label2));
   if (beginIdx === -1 || endIdx === -1 || endIdx < beginIdx) {
@@ -18115,8 +18116,8 @@ function genNativeConfig(app, opts = {}) {
   ];
   const rce = declaresRichContentEditor(configTs);
   for (const yml of [iosYml, macosProjectYml(app)]) {
-    const text6 = existsSync26(yml) ? readFileSync26(yml, "utf8") : "";
-    const r = applyToFile(yml, "yaml", LABEL_LOCALWEB, renderLocalWebYaml(resourcesDirOf(text6), rce), check);
+    const text8 = existsSync26(yml) ? readFileSync26(yml, "utf8") : "";
+    const r = applyToFile(yml, "yaml", LABEL_LOCALWEB, renderLocalWebYaml(resourcesDirOf(text8), rce), check);
     if (existsSync26(yml)) assertLocalWebBlockLanded(app, rce, yml, r.outcome);
     files.push(r);
   }
@@ -18526,21 +18527,21 @@ function carryPlanningJournal(parentDir, appDir3) {
   return carried;
 }
 function formatBrief(input) {
-  const { summary, open } = input;
+  const { summary: summary2, open } = input;
   const who = `himi \u2014 ${input.appName ?? "this folder"}`;
   const lines = [];
-  if (!summary.count) {
+  if (!summary2.count) {
     lines.push(`${who}: no journey journal yet (${PROGRESS_FILE.split(sep6).join("/")}).`);
     lines.push(
       'A new app starts with discovery (step 1). An app built before journaling existed continues from its current state instead: confirm with the customer that its SPEC.md was approved rather than re-running discovery. Either way, journal each milestone with `himi progress "<what changed>" --step <n>` so the next session can pick up from it.'
     );
   } else {
-    const at2 = summary.current ? `journey step ${summary.current.stepNumber}/${summary.current.of} (${summary.current.step})` : "no journey step recorded yet";
-    lines.push(`${who}: ${at2} \xB7 ${summary.count} postcard${summary.count === 1 ? "" : "s"} since ${minute(summary.startedAt)}.`);
-    if (summary.last) lines.push(`Last postcard (${minute(summary.last.ts)}): ${summary.last.message}`);
-    const pastPlan = (summary.current?.stepNumber ?? 0) > JOURNEY_STEPS.indexOf("plan") + 1;
+    const at2 = summary2.current ? `journey step ${summary2.current.stepNumber}/${summary2.current.of} (${summary2.current.step})` : "no journey step recorded yet";
+    lines.push(`${who}: ${at2} \xB7 ${summary2.count} postcard${summary2.count === 1 ? "" : "s"} since ${minute(summary2.startedAt)}.`);
+    if (summary2.last) lines.push(`Last postcard (${minute(summary2.last.ts)}): ${summary2.last.message}`);
+    const pastPlan = (summary2.current?.stepNumber ?? 0) > JOURNEY_STEPS.indexOf("plan") + 1;
     lines.push(
-      !summary.current ? "No journey step recorded yet: a new app starts with discovery (step 1); one whose SPEC.md the customer approved continues from its current state. `himi progress` prints every postcard." : pastPlan ? `Resume at step ${summary.current.stepNumber}. Do not restart discovery: the approved plan is SPEC.md + MOBILE-UX.md.` : `Resume at step ${summary.current.stepNumber}. Implementation has not started: treat SPEC.md + MOBILE-UX.md as a draft unless the journal records the customer approving them.`
+      !summary2.current ? "No journey step recorded yet: a new app starts with discovery (step 1); one whose SPEC.md the customer approved continues from its current state. `himi progress` prints every postcard." : pastPlan ? `Resume at step ${summary2.current.stepNumber}. Do not restart discovery: the approved plan is SPEC.md + MOBILE-UX.md.` : `Resume at step ${summary2.current.stepNumber}. Implementation has not started: treat SPEC.md + MOBILE-UX.md as a draft unless the journal records the customer approving them.`
     );
   }
   if (open.length) {
@@ -18620,8 +18621,8 @@ var init_progress = __esm({
   "src/progress.ts"() {
     JOURNEY_STEPS = ["discover", "classify", "plan", "implement", "brand", "validate", "review", "download"];
     CLI_AUTHOR = "himi";
-    AUTO_MILESTONES = ["first-look", "test", "draft"];
-    MILESTONE_STEP = { "first-look": "implement", test: "validate", draft: "review" };
+    AUTO_MILESTONES = ["first-look", "test", "draft", "still-building"];
+    MILESTONE_STEP = { "first-look": "implement", test: "validate", draft: "review", "still-building": "implement" };
     AGENT_WINS_WITHIN_MS = 5 * 60 * 1e3;
     isCliEntry = (e) => e.by === CLI_AUTHOR;
     shasOf = (images) => new Set(Array.isArray(images) ? images.flatMap((i) => i && typeof i === "object" && typeof i.sha256 === "string" ? [i.sha256] : []) : []);
@@ -19328,13 +19329,13 @@ async function recordState(dir, r, deps) {
   if (who.root === "") return "legacy";
   return who.root === runRootId(dir) ? "live" : "stale";
 }
-function openPreviewLog(dir) {
+function openPreviewLog(dir, name = "preview.log") {
   const himiDir2 = join31(dir, ".himi");
   if (existsSync28(himiDir2) && !lstatSync6(himiDir2).isDirectory()) {
     throw new PreviewStartError(`${himiDir2} is not a real directory (a symlink?) \u2014 refusing to write the preview log through it`, "");
   }
   mkdirSync14(himiDir2, { recursive: true });
-  const path2 = join31(himiDir2, "preview.log");
+  const path2 = join31(himiDir2, name);
   let existing;
   try {
     existing = lstatSync6(path2);
@@ -19464,10 +19465,10 @@ var init_preview = __esm({
         }
       },
       kill: (pid, signal) => process.kill(pid, signal),
-      portFree: (port) => new Promise((resolve52) => {
+      portFree: (port) => new Promise((resolve53) => {
         const s = createServer2();
-        s.once("error", () => resolve52(false));
-        s.listen(port, "127.0.0.1", () => s.close(() => resolve52(true)));
+        s.once("error", () => resolve53(false));
+        s.listen(port, "127.0.0.1", () => s.close(() => resolve53(true)));
       }),
       sleep: (ms) => new Promise((r) => setTimeout(r, ms)),
       servingIdentity: async (origin) => {
@@ -19651,17 +19652,17 @@ ${BLOCK_END}`;
 ${block}
 `;
 }
-function markersIntact(text6) {
-  const begins = text6.split(BLOCK_BEGIN).length - 1;
-  const ends = text6.split(BLOCK_END).length - 1;
+function markersIntact(text8) {
+  const begins = text8.split(BLOCK_BEGIN).length - 1;
+  const ends = text8.split(BLOCK_END).length - 1;
   if (begins === 0 && ends === 0) return true;
-  return begins === 1 && ends === 1 && text6.indexOf(BLOCK_BEGIN) < text6.indexOf(BLOCK_END) && BLOCK_RE.test(text6);
+  return begins === 1 && ends === 1 && text8.indexOf(BLOCK_BEGIN) < text8.indexOf(BLOCK_END) && BLOCK_RE.test(text8);
 }
-function withoutBlock(text6) {
-  const m = BLOCK_RE.exec(text6);
-  if (!m) return text6;
-  const before = text6.slice(0, m.index).replace(/\n+$/, "");
-  const after = text6.slice(m.index + m[0].length).replace(/^\n+/, "");
+function withoutBlock(text8) {
+  const m = BLOCK_RE.exec(text8);
+  if (!m) return text8;
+  const before = text8.slice(0, m.index).replace(/\n+$/, "");
+  const after = text8.slice(m.index + m[0].length).replace(/^\n+/, "");
   if (!before) return after;
   if (!after) return `${before}
 `;
@@ -19669,8 +19670,8 @@ function withoutBlock(text6) {
 
 ${after}`;
 }
-function blockVersion(text6) {
-  return STAMP_RE.exec(text6)?.[1] ?? null;
+function blockVersion(text8) {
+  return STAMP_RE.exec(text8)?.[1] ?? null;
 }
 function agentsMdBody(appName2) {
   const gates = APPROVAL_GATES.map((g) => `- \`${g.id}\` \u2014 ${g.label}`).join("\n");
@@ -20611,7 +20612,7 @@ async function injectRequest(listener, request) {
   req.headers.host ??= url.host;
   if (body && body.length > 0) req.push(body);
   req.push(null);
-  return await new Promise((resolve52, reject) => {
+  return await new Promise((resolve53, reject) => {
     const streamed = () => {
       queueMicrotask(() => {
         req.emit("close");
@@ -20627,7 +20628,7 @@ async function injectRequest(listener, request) {
         else headers2.set(name, value);
       }
       const bodyless = out2.status === 204 || out2.status === 304 || request.method === "HEAD";
-      resolve52(new Response(bodyless ? null : out2.body, { status: out2.status, headers: headers2 }));
+      resolve53(new Response(bodyless ? null : out2.body, { status: out2.status, headers: headers2 }));
     }, streamed);
     res.on("inject-error", reject);
     try {
@@ -21165,8 +21166,8 @@ async function postJson(path2, body, auth) {
     headers: { "Content-Type": "application/json", ...auth ? { Authorization: auth } : {} },
     body: JSON.stringify(body)
   });
-  const text6 = await res.text();
-  return { status: res.status, json: text6 ? JSON.parse(text6) : {} };
+  const text8 = await res.text();
+  return { status: res.status, json: text8 ? JSON.parse(text8) : {} };
 }
 async function mintVisitor(clientId) {
   const r = await postJson("/oauth2/token", { clientId, grantType: "anonymous" });
@@ -21412,13 +21413,13 @@ function recordWixTraffic(gw, app, adminUrl, ev) {
   full.respBody = truncate(redactBodyString(full.respBody));
   gw.traffic.push(full);
   if (gw.traffic.length > TRAFFIC_CAP) gw.traffic.splice(0, gw.traffic.length - TRAFFIC_CAP);
-  const text6 = `event: wix.traffic
+  const text8 = `event: wix.traffic
 data: ${JSON.stringify(full)}
 
 `;
   for (const res of [...gw.clients]) {
     try {
-      res.write(text6);
+      res.write(text8);
     } catch {
       gw.clients.delete(res);
     }
@@ -21780,10 +21781,10 @@ async function mintAnonymousVisitor(clientId, fetchImpl = fetch) {
     headers: { "Content-Type": "application/json" },
     body: JSON.stringify({ clientId, grantType: "anonymous" })
   });
-  const text6 = await res.text();
+  const text8 = await res.text();
   let j = {};
   try {
-    j = text6 ? JSON.parse(text6) : {};
+    j = text8 ? JSON.parse(text8) : {};
   } catch {
   }
   if (res.status !== 200 || !j.access_token) throw new Error(`visitor mint failed (${res.status})`);
@@ -21947,10 +21948,10 @@ ${session}`);
             }),
             timedOut
           ]);
-          const text6 = await Promise.race([res.text(), timedOut]);
+          const text8 = await Promise.race([res.text(), timedOut]);
           let j = {};
           try {
-            j = text6 ? JSON.parse(text6) : {};
+            j = text8 ? JSON.parse(text8) : {};
           } catch {
           }
           if (res.status < 200 || res.status >= 300 || !j.signedInstance)
@@ -22301,9 +22302,9 @@ var init_images = __esm({
 });
 
 // ../../core/dev-server/src/l10n-catalog.ts
-function parseCatalog(text6) {
+function parseCatalog(text8) {
   try {
-    const c = JSON.parse(text6);
+    const c = JSON.parse(text8);
     return c && typeof c === "object" && c.messages && typeof c.messages === "object" ? c : void 0;
   } catch {
     return void 0;
@@ -22784,9 +22785,9 @@ async function getAndroidPixelDims(serial) {
   try {
     const args = serial ? ["-s", serial, "shell", "wm", "size"] : ["shell", "wm", "size"];
     const out2 = await runner.capture(ADB_BIN, args);
-    const text6 = out2.toString("utf8");
-    const override = /Override size:\s*(\d+)x(\d+)/.exec(text6);
-    const physical = /Physical size:\s*(\d+)x(\d+)/.exec(text6);
+    const text8 = out2.toString("utf8");
+    const override = /Override size:\s*(\d+)x(\d+)/.exec(text8);
+    const physical = /Physical size:\s*(\d+)x(\d+)/.exec(text8);
     const m = override ?? physical;
     if (!m) throw new Error("could not parse wm size");
     const dims = { width: parseInt(m[1], 10), height: parseInt(m[2], 10) };
@@ -23161,12 +23162,12 @@ function finalizeRecording(key2, rec) {
   if (rec.finalize) return rec.finalize;
   rec.finalize = (async () => {
     clearTimeout(rec.autoStop);
-    await new Promise((resolve52) => {
+    await new Promise((resolve53) => {
       let done = false;
       const finish2 = () => {
         if (!done) {
           done = true;
-          resolve52();
+          resolve53();
         }
       };
       rec.child.once("close", finish2);
@@ -23277,7 +23278,7 @@ var init_preview2 = __esm({
     DEVICE_LIST_TIMEOUT_MS = 5e3;
     defaultRunner2 = {
       capture(cmd, args, timeoutMs = DEFAULT_CAPTURE_TIMEOUT_MS) {
-        return new Promise((resolve52, reject) => {
+        return new Promise((resolve53, reject) => {
           const child = spawn4(cmd, args, { stdio: ["ignore", "pipe", "pipe"] });
           const out2 = [];
           const err = [];
@@ -23299,7 +23300,7 @@ var init_preview2 = __esm({
           child.stderr.on("data", (b) => err.push(b));
           child.on("error", (e) => settle(reject, e));
           child.on("close", (code) => {
-            if (code === 0) settle(resolve52, Buffer.concat(out2));
+            if (code === 0) settle(resolve53, Buffer.concat(out2));
             else settle(reject, new Error(`${cmd} exited ${code}: ${Buffer.concat(err).toString("utf8")}`));
           });
         });
@@ -23719,7 +23720,7 @@ function buildOpenApi(descriptors) {
     // Widgets
     "/__dev/widget/preview": ["get", "Render a frozen widget snapshot."]
   };
-  for (const [p, [method, summary]] of Object.entries(control)) {
+  for (const [p, [method, summary2]] of Object.entries(control)) {
     const responses = p === "/__dev/render" ? {
       "200": { description: "completed render (legacy mode, or clean envelope verdict)" },
       "400": { description: "invalid_json" },
@@ -23727,7 +23728,7 @@ function buildOpenApi(descriptors) {
       "422": { description: "completed render with a failing envelope:1 verdict" },
       "503": { description: "dev plane unavailable" }
     } : { "200": { description: "ok" } };
-    paths[p] = { [method]: { summary, responses } };
+    paths[p] = { [method]: { summary: summary2, responses } };
   }
   for (const scope of ["net", "wix"]) {
     paths[`/__dev/${scope}/rules`] = {
@@ -24155,9 +24156,9 @@ function mdScan(src, linkStyle = "") {
   }
   return out2 + mdEsc(src.slice(last));
 }
-function mdInline(text6, linkColor) {
+function mdInline(text8, linkColor) {
   const safe = typeof linkColor === "string" && /^[#a-zA-Z0-9(),.%\s-]+$/.test(linkColor) ? linkColor : "";
-  return { __html: mdScan(text6, safe ? ` style="color:${safe}"` : "") };
+  return { __html: mdScan(text8, safe ? ` style="color:${safe}"` : "") };
 }
 function sevColor(ctx, sev) {
   switch (sev) {
@@ -27526,9 +27527,9 @@ function createRicosHostSession(o) {
       if (!state.ready || state.unavailable) return;
       o.send({ v: 1, type: "command", name, ...arg?.level ? { level: arg.level } : {}, ...arg?.value ? { value: arg.value } : {} });
     },
-    insertLink(url, text6) {
+    insertLink(url, text8) {
       if (!state.ready || state.unavailable || !isSafeEditorLink(url)) return false;
-      o.send({ v: 1, type: "insertLink", url: url.trim(), ...text6 ? { text: text6 } : {} });
+      o.send({ v: 1, type: "insertLink", url: url.trim(), ...text8 ? { text: text8 } : {} });
       return true;
     },
     removeLink() {
@@ -27551,12 +27552,12 @@ function createRicosHostSession(o) {
     flush() {
       if (!state.ready || state.unavailable || disposed) return Promise.resolve(null);
       const requestId2 = newId();
-      return new Promise((resolve52) => {
+      return new Promise((resolve53) => {
         const timer = t.setTimeout(() => {
           flushes.delete(requestId2);
-          resolve52(null);
+          resolve53(null);
         }, flushMs);
-        flushes.set(requestId2, { resolve: resolve52, timer });
+        flushes.set(requestId2, { resolve: resolve53, timer });
         o.send({ v: 1, type: "requestContent", requestId: requestId2 });
       });
     },
@@ -27609,7 +27610,7 @@ async function runRicosImageUpload(o) {
   };
   session.insertMediaPlaceholder(requestId2);
   try {
-    const entry = await new Promise((resolve52) => {
+    const entry = await new Promise((resolve53) => {
       let done = false;
       let unsub = () => {
       };
@@ -27618,7 +27619,7 @@ async function runRicosImageUpload(o) {
         done = true;
         t.clearTimeout(timer);
         queueMicrotask(() => unsub());
-        resolve52(v);
+        resolve53(v);
       };
       const timer = t.setTimeout(() => finish2(null), o.timeoutMs ?? RICOS_UPLOAD_TIMEOUT_MS);
       unsub = deps.subscribe(`${svc}.uploads.${requestId2}`, (v) => {
@@ -29225,13 +29226,13 @@ function NamedImage({ node, alt, env }) {
 }
 function Block({ b, env, depth }) {
   const { ctx } = env;
-  const text6 = ctx.color("textPrimary", "#13171e");
+  const text8 = ctx.color("textPrimary", "#13171e");
   const secondary = ctx.color("textSecondary", "#5c6370");
   const border = ctx.color("border", "#e5e5e5");
   switch (b.kind) {
     case "paragraph":
       return /* @__PURE__ */ jsx7("p", { ...tid(env, b.id, b.kind), style: {
-        ...textStyle(ctx, "body", text6),
+        ...textStyle(ctx, "body", text8),
         textAlign: b.align,
         paddingInlineStart: b.indent ? Math.min(b.indent, 8) * 16 : void 0,
         minHeight: b.spans.length ? void 0 : "1.5em"
@@ -29239,7 +29240,7 @@ function Block({ b, env, depth }) {
     case "heading":
       return React6.createElement(
         `h${b.level}`,
-        { ...tid(env, b.id, b.kind), style: textStyle(ctx, RICH_CONTENT_HEADING_TOKENS[b.level - 1], text6) },
+        { ...tid(env, b.id, b.kind), style: textStyle(ctx, RICH_CONTENT_HEADING_TOKENS[b.level - 1], text8) },
         /* @__PURE__ */ jsx7(Spans, { spans: b.spans, env })
       );
     case "list": {
@@ -29249,7 +29250,7 @@ function Block({ b, env, depth }) {
         {
           ...tid(env, b.id, b.kind),
           start: b.ordered ? b.start : void 0,
-          style: { ...textStyle(ctx, "body", text6), paddingInlineStart: 24, listStyleType: b.ordered ? "decimal" : depth % 2 ? "circle" : "disc" },
+          style: { ...textStyle(ctx, "body", text8), paddingInlineStart: 24, listStyleType: b.ordered ? "decimal" : depth % 2 ? "circle" : "disc" },
           children: b.items.map((item, i) => /* @__PURE__ */ jsx7("li", { "data-component-id": `${env.componentId}/${item.id}`, id: `${env.componentId}/${item.id}`, style: { marginBottom: 6 }, children: /* @__PURE__ */ jsx7("div", { style: { display: "flex", flexDirection: "column", gap: 6 }, children: item.blocks.map((child, j) => /* @__PURE__ */ jsx7(Block, { b: child, env, depth: depth + 1 }, `${j}:${child.id}`)) }) }, `${i}:${item.id}`))
         }
       );
@@ -29263,7 +29264,7 @@ function Block({ b, env, depth }) {
         overflowWrap: "anywhere",
         fontFamily: "ui-monospace, SFMono-Regular, Menlo, monospace",
         fontSize: "0.9em",
-        color: text6,
+        color: text8,
         background: ctx.color("surfaceSecondary", "#f5f5f7"),
         padding: 10,
         borderRadius: 6
@@ -29282,11 +29283,11 @@ function Block({ b, env, depth }) {
     case "button":
       return /* @__PURE__ */ jsx7(LinkButton, { label: b.label, url: b.url, env, testId: `${env.componentId}/${b.id}` });
     case "table":
-      return /* @__PURE__ */ jsx7("table", { ...tid(env, b.id, b.kind), style: { width: "100%", borderCollapse: "collapse", ...textStyle(ctx, "body", text6) }, children: /* @__PURE__ */ jsx7("tbody", { children: b.rows.map((row, r) => /* @__PURE__ */ jsx7("tr", { children: row.map((cell, c) => /* @__PURE__ */ jsx7("td", { style: { border: `1px solid ${border}`, padding: 6, whiteSpace: "pre-wrap", verticalAlign: "top" }, children: cell }, c)) }, r)) }) });
+      return /* @__PURE__ */ jsx7("table", { ...tid(env, b.id, b.kind), style: { width: "100%", borderCollapse: "collapse", ...textStyle(ctx, "body", text8) }, children: /* @__PURE__ */ jsx7("tbody", { children: b.rows.map((row, r) => /* @__PURE__ */ jsx7("tr", { children: row.map((cell, c) => /* @__PURE__ */ jsx7("td", { style: { border: `1px solid ${border}`, padding: 6, whiteSpace: "pre-wrap", verticalAlign: "top" }, children: cell }, c)) }, r)) }) });
     case "card": {
       const title = richContentCardTitle(b);
       return /* @__PURE__ */ jsxs4("div", { ...tid(env, b.id, b.kind), role: "group", "aria-label": title, style: { border: `1px solid ${border}`, borderRadius: 8, padding: 12, display: "flex", flexDirection: "column", gap: 6 }, children: [
-        /* @__PURE__ */ jsx7("div", { style: textStyle(ctx, "bodyEmphasis", text6), children: title }),
+        /* @__PURE__ */ jsx7("div", { style: textStyle(ctx, "bodyEmphasis", text8), children: title }),
         b.url ? /* @__PURE__ */ jsxs4(Fragment3, { children: [
           /* @__PURE__ */ jsx7("div", { style: textStyle(ctx, "caption", secondary), children: richContentHost(b.url) }),
           /* @__PURE__ */ jsx7(LinkButton, { label: RICH_CONTENT_OPEN_LABEL, url: b.url, env, testId: `${env.componentId}/${b.id}/open` })
@@ -30882,8 +30883,8 @@ function applyA11ySemantics(node, ctx, extra) {
       extra["aria-live"] = str9(announce.politeness) === "assertive" ? "assertive" : "polite";
       extra["aria-atomic"] = "true";
       extra["aria-relevant"] = trigger === "on_appear" ? "additions" : trigger === "both" ? "additions text" : "text";
-      const text6 = str9(announce.text);
-      if (text6 && extra["aria-label"] == null) extra["aria-label"] = text6;
+      const text8 = str9(announce.text);
+      if (text8 && extra["aria-label"] == null) extra["aria-label"] = text8;
     }
   }
   return hint;
@@ -32473,13 +32474,13 @@ var init_renderNode = __esm({
       const C = ctx.color;
       const isBoundText = typeof props.textPath === "string" && isBinding(props.textPath);
       const bound = useResolvedScalar(isBoundText ? props.textPath : void 0, ctx);
-      const text6 = isBoundText ? typeof bound === "string" || typeof bound === "number" ? String(bound) : "" : literalErrorText;
+      const text8 = isBoundText ? typeof bound === "string" || typeof bound === "number" ? String(bound) : "" : literalErrorText;
       if (props.visible === false) return null;
-      if (isBoundText && !text6) return null;
+      if (isBoundText && !text8) return null;
       const c = (props.severity ?? "error") === "warning" ? C("warning", "#E89F00") : C("danger", "#E62214");
       return /* @__PURE__ */ jsxs5("div", { role: "alert", style: { display: "flex", gap: 6, alignItems: "center", color: c, fontSize: 13, fontFamily: bodyFont(ctx), ...wrap }, children: [
         /* @__PURE__ */ jsx8("span", { "aria-hidden": "true", children: "\u26A0" }),
-        text6
+        text8
       ] });
     });
     FormView = withExtras("FormView", ({ props, ctx, wrap }) => {
@@ -33966,8 +33967,8 @@ var init_renderNode = __esm({
       const base = invalidIcon ? ICON_FALLBACK : (typeof props.icon === "string" && props.icon ? props.icon : "star").replace(/_fill$/, "");
       const filledCount = Math.round(val);
       const onClickStar = (i) => ctx.onAction && props.interactive && props.onChange ? () => ctx.onAction({ ...props.onChange, params: { ...props.onChange?.params ?? {}, value: String(i + 1) } }) : void 0;
-      const cv = Number.isFinite(val) ? Math.max(0, Math.min(max, val)) : 0, summary = `${Number.isInteger(cv) ? cv : cv.toFixed(1)} of ${max}`;
-      return /* @__PURE__ */ jsx8("span", { style: { display: "inline-flex", alignItems: "center", gap: m.gap, ...wrap }, role: props.interactive ? "group" : "img", "aria-label": `Rating, ${summary}`, "data-a11y-value": summary, children: Array.from({ length: max }).map((_, i) => {
+      const cv = Number.isFinite(val) ? Math.max(0, Math.min(max, val)) : 0, summary2 = `${Number.isInteger(cv) ? cv : cv.toFixed(1)} of ${max}`;
+      return /* @__PURE__ */ jsx8("span", { style: { display: "inline-flex", alignItems: "center", gap: m.gap, ...wrap }, role: props.interactive ? "group" : "img", "aria-label": `Rating, ${summary2}`, "data-a11y-value": summary2, children: Array.from({ length: max }).map((_, i) => {
         const filled = i < filledCount;
         return /* @__PURE__ */ jsx8("span", { onClick: onClickStar(i), style: { display: "inline-grid", placeItems: "center", width: m.cell, height: m.cell, cursor: props.interactive ? "pointer" : "default", opacity: filled ? 1 : 0.28 }, children: iconSvg(filled ? `${base}_fill` : base, { size: m.glyph, color: col }) }, i);
       }) });
@@ -35719,8 +35720,8 @@ function buildRenderTree(node, path2 = "$", provider = null, itemScope = void 0,
     const asText3 = VALUE_PATH_TEXT.get(type);
     if (typeof valuePath === "string" && asText3 && (valuePath.startsWith("$service:") || /^\$item\.[^.]/.test(valuePath))) {
       const r = resolveTreeScalar(valuePath, provider, itemScope);
-      const text6 = asText3(r, props);
-      if (text6 !== void 0) values.value = text6;
+      const text8 = asText3(r, props);
+      if (text8 !== void 0) values.value = text8;
       else if (r !== void 0 && r !== null) {
         delete values.value;
       }
@@ -35901,7 +35902,7 @@ async function stabilizePngPage(page, scheme) {
     const browser = globalThis;
     browser.document.documentElement.style.colorScheme = selected;
     await browser.document.fonts?.ready;
-    await new Promise((resolve52) => browser.requestAnimationFrame(() => browser.requestAnimationFrame(() => resolve52())));
+    await new Promise((resolve53) => browser.requestAnimationFrame(() => browser.requestAnimationFrame(() => resolve53())));
   }, scheme);
 }
 async function renderPngBatch(items) {
@@ -37915,14 +37916,14 @@ function discoverNativeActions(appDir3) {
   const roots = NATIVE_SOURCE_ROOTS.filter(({ directory }) => existsSync38(resolve31(appDir3, directory)));
   const sources = roots.flatMap(({ directory, extension, buildDirMaxDepth }) => nativeSourceFiles(resolve31(appDir3, directory), extension, buildDirMaxDepth));
   const registered = sources.flatMap((source) => {
-    let text6;
+    let text8;
     try {
-      text6 = readFileSync40(source, "utf8");
+      text8 = readFileSync40(source, "utf8");
     } catch (err) {
       if (!vanished(err)) throw err;
       return [];
     }
-    return registeredActions(text6);
+    return registeredActions(text8);
   });
   return {
     registered: new Set(registered),
@@ -38021,11 +38022,11 @@ function strip(line) {
 function scalar(v) {
   return v.trim().replace(/^["']|["']$/g, "");
 }
-function parseRolloutYaml(text6) {
+function parseRolloutYaml(text8) {
   const cfg = { app: "", rings: [] };
   let cur = null;
   let inRings = false;
-  for (const raw of text6.split("\n")) {
+  for (const raw of text8.split("\n")) {
     const line = strip(raw);
     if (!line.trim()) continue;
     const top = /^([a-zA-Z_]+):\s*(.*)$/.exec(line);
@@ -38056,10 +38057,10 @@ function assignRing(r, key2, val) {
   else if (key2 === "percent") r.percent = Number(v);
   else if (key2 === "minBinaryVersion") r.minBinaryVersion = v;
 }
-function parseRevocationsYaml(text6) {
+function parseRevocationsYaml(text8) {
   const out2 = { app: "", revoked: [] };
   let inList = false;
-  for (const raw of text6.split("\n")) {
+  for (const raw of text8.split("\n")) {
     const line = strip(raw);
     if (!line.trim()) continue;
     const top = /^([a-zA-Z_]+):\s*(.*)$/.exec(line);
@@ -38416,7 +38417,7 @@ async function runScreenDiagnostics(state, screenId, descriptor) {
     state.app?.module.config,
     state.tier5Dir ?? TIER5_ROOT2
   );
-  const report2 = validateScreenDescriptor2(screenId, descriptor, {
+  const report3 = validateScreenDescriptor2(screenId, descriptor, {
     tokens,
     allowedComponents,
     bundleJs,
@@ -38429,7 +38430,7 @@ async function runScreenDiagnostics(state, screenId, descriptor) {
   });
   const telemetry = state.telemetryEvents.filter((e) => e.screenId === screenId && (/^worker_/.test(e.type) || e.type === "bundle_load_revoked")).slice(-20);
   const lastError = [...telemetry].reverse().find((e) => /crash|revoked|error|fail/i.test(e.type)) ?? null;
-  const legacy = { ...report2, bundle: bundleName ?? null, telemetry, lastError };
+  const legacy = { ...report3, bundle: bundleName ?? null, telemetry, lastError };
   return foldLegacyReport(legacy, {
     source: "diagnostics",
     screenId,
@@ -38638,11 +38639,11 @@ async function handleOwnerChatRequest(req, res) {
       return sendJson(res, 400, { error: "invalid_json" }, cors);
     }
     const chatroomId = (parsed.chatroomId ?? "").trim();
-    const text6 = (parsed.text ?? "").trim();
-    if (!chatroomId || !text6) return sendJson(res, 400, { error: "chatroomId_and_text_required" }, cors);
+    const text8 = (parsed.text ?? "").trim();
+    if (!chatroomId || !text8) return sendJson(res, 400, { error: "chatroomId_and_text_required" }, cors);
     const metaSiteId = (parsed.metaSiteId ?? "").trim() || await resolveMetaSiteId();
     if (!metaSiteId) return sendJson(res, 400, { error: "no_meta_site" }, cors);
-    const result = await sendChatMessageLive(metaSiteId, chatroomId, text6);
+    const result = await sendChatMessageLive(metaSiteId, chatroomId, text8);
     if (result.ok) return sendJson(res, 200, { ok: true, message: result.message }, cors);
     return sendJson(res, result.status >= 400 && result.status < 600 ? result.status : 502, { ok: false, status: result.status, error: result.error }, cors);
   }
@@ -38903,13 +38904,13 @@ function invalidate(state, ...screenIds) {
   publishSSE(state, "screen.invalidated", { screenIds });
 }
 function publishSSE(state, type, payload) {
-  const text6 = `event: ${type}
+  const text8 = `event: ${type}
 data: ${JSON.stringify(payload)}
 
 `;
   for (const res of [...state.sseClients]) {
     try {
-      res.write(text6);
+      res.write(text8);
     } catch {
       state.sseClients.delete(res);
     }
@@ -38925,13 +38926,13 @@ function publishAdminSSE(state, type, payload) {
       state.lastDeviceScreen.set(key2, screenId);
     }
   }
-  const text6 = `event: ${type}
+  const text8 = `event: ${type}
 data: ${JSON.stringify(payload)}
 
 `;
   for (const res of [...state.adminClients]) {
     try {
-      res.write(text6);
+      res.write(text8);
     } catch {
       state.adminClients.delete(res);
     }
@@ -38952,12 +38953,12 @@ function publishDevReady(state, res, extra = {}) {
     hotReloadEnabled: state.hotReloadEnabled,
     ...extra
   };
-  const text6 = `event: dev.ready
+  const text8 = `event: dev.ready
 data: ${JSON.stringify(payload)}
 
 `;
   if (res) {
-    res.write(text6);
+    res.write(text8);
   } else {
     publishSSE(state, "dev.ready", payload);
   }
@@ -39542,7 +39543,7 @@ async function handleWebWix(req, res, state) {
       }
       if (match) {
         const mocked = match.rule.response;
-        if (mocked.delayMs) await new Promise((resolve52) => setTimeout(resolve52, mocked.delayMs));
+        if (mocked.delayMs) await new Promise((resolve53) => setTimeout(resolve53, mocked.delayMs));
         const responseBody = mocked.template ? renderTemplate(mocked.body, match.captures) : mocked.body;
         record2("mock", mocked.status, responseBody, match.rule.id, mocked.headers);
         return reply(200, { status: mocked.status, body: responseBody ?? "" });
@@ -39708,7 +39709,7 @@ async function handleDev(req, res, state) {
       idiomContext
     );
     const legacy = { screenId, scheme, ...render, diagnostics };
-    const report2 = foldLegacyReport(legacy, {
+    const report3 = foldLegacyReport(legacy, {
       source: "render",
       screenId,
       ok: diagnostics.ok !== false && render.renderable !== false,
@@ -39720,8 +39721,8 @@ async function handleDev(req, res, state) {
       ],
       evidence: { runId: `dev:${state.startedAt}:${screenId}`, ts: (/* @__PURE__ */ new Date()).toISOString() }
     });
-    const status = body.envelope === 1 && !report2.ok ? 422 : 200;
-    return sendJson(res, status, report2);
+    const status = body.envelope === 1 && !report3.ok ? 422 : 200;
+    return sendJson(res, status, report3);
   }
   {
     const diagMatch = /^\/__dev\/screen\/(.+?)\/diagnostics(?:\?|$)/.exec(url);
@@ -40182,7 +40183,7 @@ async function handleAdminPlayground(req, res, state) {
       state.app?.module.config,
       state.tier5Dir ?? TIER5_ROOT2
     );
-    const report2 = validateScreenDescriptor2(screenId, descriptor, {
+    const report3 = validateScreenDescriptor2(screenId, descriptor, {
       tokens,
       allowedComponents,
       bundleJs,
@@ -40192,7 +40193,7 @@ async function handleAdminPlayground(req, res, state) {
       workerSubtreeScreens: new Set(uiConfig(state.app?.module.config).workerSubtreeScreens ?? []),
       a11y: uiConfig(state.app?.module.config).a11y
     });
-    return sendJson(res, report2.ok ? 200 : 422, report2);
+    return sendJson(res, report3.ok ? 200 : 422, report3);
   }
   const detailMatch = /^\/v1\/admin\/screens\/([^/]+)$/.exec(path2);
   if (detailMatch && req.method === "GET") {
@@ -40647,9 +40648,9 @@ async function handleLiveSubscription(req, res, state) {
       },
       body: JSON.stringify({ ...body, app })
     });
-    const text6 = await upstream.text();
+    const text8 = await upstream.text();
     res.writeHead(upstream.status, { "Content-Type": "application/json", ...cors });
-    res.end(text6 || JSON.stringify({ ok: upstream.ok }));
+    res.end(text8 || JSON.stringify({ ok: upstream.ok }));
   } catch (error) {
     sendJson(res, 502, { error: "admin_server_unreachable", detail: String(error) }, cors);
   }
@@ -41641,12 +41642,12 @@ var init_query = __esm({
 });
 
 // ../../core/dev-server/src/crawl-input.ts
-function resolved(v, resolve52) {
-  if (typeof v === "string") return v.startsWith("$service:") ? resolve52(v) : v;
+function resolved(v, resolve53) {
+  if (typeof v === "string") return v.startsWith("$service:") ? resolve53(v) : v;
   if (Array.isArray(v)) {
     const out2 = v.flatMap((el) => {
       if (typeof el !== "string" || !el.startsWith("$service:")) return [el];
-      const r = resolve52(el);
+      const r = resolve53(el);
       return Array.isArray(r) ? r : [r];
     });
     return out2;
@@ -41660,9 +41661,9 @@ function hasRowBinding(props) {
     return itemToken(v) || Array.isArray(v) && v.some(itemToken);
   });
 }
-function declaredOptionIds(props, resolve52) {
+function declaredOptionIds(props, resolve53) {
   const literal = props.options ?? props.tabs ?? props.chips;
-  const bound = props.optionsPath !== void 0 ? resolved(props.optionsPath, resolve52) : void 0;
+  const bound = props.optionsPath !== void 0 ? resolved(props.optionsPath, resolve53) : void 0;
   const raw = Array.isArray(bound) ? bound : literal;
   if (!Array.isArray(raw)) return [];
   const out2 = [];
@@ -41705,24 +41706,24 @@ function seedTokens(state, limit = 48) {
   walk2(state, 0);
   return out2;
 }
-function synthesizeInput(control, resolve52, tokens) {
+function synthesizeInput(control, resolve53, tokens) {
   const id = `${control.type}.${control.callback}`;
   const row = SYNTHESIZED_CONTROLS[id];
   if (!row) return null;
   const props = control.props;
   if (hasRowBinding(props)) return null;
   if (row.from === "declared-options") {
-    const ids = declaredOptionIds(props, resolve52);
+    const ids = declaredOptionIds(props, resolve53);
     if (!ids.length) return null;
     if (row.encoding === "string-array") {
-      const currentRaw2 = resolved(props.selectedIds, resolve52);
+      const currentRaw2 = resolved(props.selectedIds, resolve53);
       const current3 = (Array.isArray(currentRaw2) ? currentRaw2 : []).filter((x) => typeof x === "string");
       const pick4 = ids.find((o) => !current3.includes(o));
       if (pick4 === void 0) return null;
       const value = props.multiSelect === true ? [...current3, pick4] : [pick4];
       return { key: row.key, value, from: row.from, current: current3, control: id };
     }
-    const currentRaw = resolved(props.selectedId, resolve52);
+    const currentRaw = resolved(props.selectedId, resolve53);
     const current2 = typeof currentRaw === "string" ? currentRaw : void 0;
     const pick3 = ids.find((o) => o !== current2);
     if (pick3 === void 0) return null;
@@ -41730,7 +41731,7 @@ function synthesizeInput(control, resolve52, tokens) {
   }
   if (!acceptsWords(props) || !acceptsWords(control.wrapper ?? {})) return null;
   const binding2 = typeof props.valuePath === "string" ? props.valuePath : typeof props.value === "string" && props.value.startsWith("$service:") ? props.value : void 0;
-  const bound = binding2 === void 0 ? void 0 : resolve52(binding2);
+  const bound = binding2 === void 0 ? void 0 : resolve53(binding2);
   const literal = typeof props.value === "string" && !props.value.startsWith("$") ? props.value : void 0;
   const current = typeof bound === "string" ? bound : typeof bound === "number" ? String(bound) : literal ?? "";
   const max = typeof props.maxLength === "number" && props.maxLength > 0 ? props.maxLength : void 0;
@@ -42094,10 +42095,10 @@ function netTransport(rules) {
     if (res.needsUpstream) {
       throw new Error(`net fixture rule ${res.ruleId} is a \`transform\` rule, which needs a real upstream \u2014 not usable in a hermetic crawl`);
     }
-    const { status, body: text6 } = res.resolved;
+    const { status, body: text8 } = res.resolved;
     if (status < 200 || status >= 300) throw new Error(`Wix ${status} for ${method} ${bare}`);
     try {
-      return text6 ? JSON.parse(text6) : {};
+      return text8 ? JSON.parse(text8) : {};
     } catch {
       return {};
     }
@@ -42141,10 +42142,10 @@ function layeredTransport(layers2) {
       });
       if (res.matched) {
         if (res.needsUpstream) throw new Error(`net fixture rule ${res.ruleId} is a \`transform\` rule, which needs a real upstream \u2014 not usable in a hermetic crawl`);
-        const { status, body: text6 } = res.resolved;
+        const { status, body: text8 } = res.resolved;
         if (status < 200 || status >= 300) throw new Error(`Wix ${status} for ${m} ${bare}`);
         try {
-          return text6 ? JSON.parse(text6) : {};
+          return text8 ? JSON.parse(text8) : {};
         } catch {
           return {};
         }
@@ -44166,13 +44167,13 @@ var init_build2 = __esm({
 });
 
 // ../mobile-dist/release-pin.ts
-function withPinnedRelease(text6, releaseId) {
-  if (!releaseId) return text6;
+function withPinnedRelease(text8, releaseId) {
+  if (!releaseId) return text8;
   let cfg;
   try {
-    cfg = JSON.parse(text6);
+    cfg = JSON.parse(text8);
   } catch {
-    return text6;
+    return text8;
   }
   cfg.releaseId = releaseId;
   cfg.releasePinned = true;
@@ -44290,10 +44291,10 @@ async function bakeCatalogs(app, locale, fetchCatalog, putDoc) {
   if (!declared.length) return out2;
   const tags = [.../* @__PURE__ */ new Set([...locale?.default ? [locale.default] : [], ...declared])];
   for (const tag of tags) {
-    const text6 = await fetchCatalog(tag);
-    if (!text6) continue;
-    const hash = sha2564(text6);
-    await putDoc(app, hash, text6);
+    const text8 = await fetchCatalog(tag);
+    if (!text8) continue;
+    const hash = sha2564(text8);
+    await putDoc(app, hash, text8);
     out2[tag] = hash;
   }
   return out2;
@@ -44385,9 +44386,9 @@ async function snapshotTokens(app, base, fetchTokens, put) {
       }
     };
   }
-  const text6 = await res.text();
-  await put(text6);
-  return { hash: sha2564(text6) };
+  const text8 = await res.text();
+  await put(text8);
+  return { hash: sha2564(text8) };
 }
 function tokensSnapshotMessage(app, base, status) {
   const why = status === 400 ? `the dev-server rejected the app id as malformed (400 bad_app). It must be lowercase letters, digits and hyphens, starting with a letter or digit, at most 63 characters, with at most one interior dot \u2014 so a leading underscore or an uppercase letter fails, on every build of that app. A single dot is FINE (an owner-namespaced slug), so do not remove one to get past this` : `${status} from the tokens route`;
@@ -44481,23 +44482,23 @@ function maximumBinaryVersion(current, candidate) {
   }
   return current;
 }
-async function withStoreNavBundle(text6, address) {
+async function withStoreNavBundle(text8, address) {
   let cfg;
   try {
-    cfg = JSON.parse(text6);
+    cfg = JSON.parse(text8);
   } catch {
-    return text6;
+    return text8;
   }
   const refs = [cfg?.navigation?.navLogicBundle, cfg?.navLogicBundle].filter(
     (r) => !!r && typeof r === "object" && typeof r.url === "string"
   );
-  if (refs.length === 0) return text6;
+  if (refs.length === 0) return text8;
   const resolved2 = [];
   for (const ref of refs) {
     const name = bundleNameFromUrl(ref.url);
-    if (!name) return text6;
+    if (!name) return text8;
     const addressed = await address(name);
-    if (!addressed) return text6;
+    if (!addressed) return text8;
     resolved2.push({ ref, url: addressed.url, sri: addressed.sri });
   }
   for (const { ref, url, sri: integrity2 } of resolved2) {
@@ -44506,10 +44507,10 @@ async function withStoreNavBundle(text6, address) {
   }
   return JSON.stringify(cfg);
 }
-function linkableScreenIdsFrom(text6) {
+function linkableScreenIdsFrom(text8) {
   let cfg;
   try {
-    cfg = JSON.parse(text6);
+    cfg = JSON.parse(text8);
   } catch {
     return [];
   }
@@ -44521,24 +44522,24 @@ function linkableScreenIdsFrom(text6) {
   }
   return [...ids];
 }
-function withoutDevOnlyAppConfig(text6) {
+function withoutDevOnlyAppConfig(text8) {
   let cfg;
   try {
-    cfg = JSON.parse(text6);
+    cfg = JSON.parse(text8);
   } catch {
-    return text6;
+    return text8;
   }
-  if (!cfg || typeof cfg !== "object" || !("devGatewayConfig" in cfg)) return text6;
+  if (!cfg || typeof cfg !== "object" || !("devGatewayConfig" in cfg)) return text8;
   delete cfg.devGatewayConfig;
   return JSON.stringify(cfg);
 }
-function withProdServeAppConfig(text6, prod) {
-  if (!prod?.serve) return text6;
+function withProdServeAppConfig(text8, prod) {
+  if (!prod?.serve) return text8;
   let cfg;
   try {
-    cfg = JSON.parse(text6);
+    cfg = JSON.parse(text8);
   } catch {
-    return text6;
+    return text8;
   }
   cfg.useProdServe = true;
   cfg.prodServeBaseUrl = prod.serve;
@@ -44759,10 +44760,10 @@ async function buildFromLoaded(preloaded, dest, opts = {}) {
       if (bytes2.length === 0 || bytes2.length > MAX_AUTHORING_DOC_BYTES) {
         throw new Error(`${file} must be non-empty and at most ${MAX_AUTHORING_DOC_BYTES} bytes to ship with a release.`);
       }
-      const text6 = bytes2.toString("utf8");
-      if (!Buffer.from(text6, "utf8").equals(bytes2)) throw new Error(`${file} must be canonical UTF-8 Markdown.`);
+      const text8 = bytes2.toString("utf8");
+      if (!Buffer.from(text8, "utf8").equals(bytes2)) throw new Error(`${file} must be canonical UTF-8 Markdown.`);
       const hash = sha2564(bytes2);
-      await store.putDoc(app, hash, text6);
+      await store.putDoc(app, hash, text8);
       authoringDocs[name] = { sha256: hash, sri: sri2(bytes2), bytes: bytes2.length, contentType: "text/markdown; charset=utf-8" };
     }
   }
@@ -44961,7 +44962,7 @@ async function buildFromLoaded(preloaded, dest, opts = {}) {
       }
       if (collect2?.lint) {
         const bundleJs = bundleName ? readBuiltBundle(tier5Dir, bundleName) : void 0;
-        const report2 = validateScreenDescriptor(screenId, descriptor, {
+        const report3 = validateScreenDescriptor(screenId, descriptor, {
           tokens: lintTokens,
           allowedComponents,
           allowedIcons: KNOWN_ICONS,
@@ -44975,7 +44976,7 @@ async function buildFromLoaded(preloaded, dest, opts = {}) {
           // default, "error"; an in-repo app with ratcheted debt declares "warn".
           a11y: config.a11y
         });
-        lint.push({ screenId, ok: report2.ok, issues: report2.issues });
+        lint.push({ screenId, ok: report3.ok, issues: report3.issues });
       }
       if (collect2?.render && (!collect2.render.screenId || collect2.render.screenId === screenId)) {
         const { services, liveCalls, liveReturned, liveErrors } = await renderServicesFor(bundleName, descriptor);
@@ -44993,7 +44994,7 @@ async function buildFromLoaded(preloaded, dest, opts = {}) {
         const bundleName = lb ? bundleNameFromUrl(lb.url) : null;
         if (collect2?.lint) {
           const bundleJs = bundleName ? readBuiltBundle(tier5Dir, bundleName) : void 0;
-          const report2 = validateScreenDescriptor(wantedRender, descriptor, {
+          const report3 = validateScreenDescriptor(wantedRender, descriptor, {
             tokens: lintTokens,
             allowedComponents,
             allowedIcons: KNOWN_ICONS,
@@ -45004,7 +45005,7 @@ async function buildFromLoaded(preloaded, dest, opts = {}) {
             workerSubtreeScreens: new Set(config.workerSubtreeScreens ?? []),
             a11y: config.a11y
           });
-          lint.push({ screenId: wantedRender, ok: report2.ok, issues: report2.issues });
+          lint.push({ screenId: wantedRender, ok: report3.ok, issues: report3.issues });
         }
         const { services, liveCalls, liveReturned, liveErrors } = await renderServicesFor(bundleName, descriptor);
         const rr = await renderDescriptorWeb(descriptor, renderTokens, renderScheme, collect2.render.png === true, services, collect2.render.width, collect2.render.rtl === true);
@@ -45122,11 +45123,11 @@ async function buildFromLoaded(preloaded, dest, opts = {}) {
           ok: res.ok,
           status: res.status,
           text: async () => {
-            const text6 = await res.text();
+            const text8 = await res.text();
             try {
-              const doc = JSON.parse(text6);
+              const doc = JSON.parse(text8);
               if (!publishedFontPlan) {
-                if (!("fontFaces" in doc)) return text6;
+                if (!("fontFaces" in doc)) return text8;
                 const kept = publishableFontFaces(doc.fontFaces);
                 if (kept) doc.fontFaces = kept;
                 else delete doc.fontFaces;
@@ -45135,12 +45136,12 @@ async function buildFromLoaded(preloaded, dest, opts = {}) {
               doc.fontFaces = servedProjection(publishedFontPlan);
               return JSON.stringify(doc);
             } catch {
-              return text6;
+              return text8;
             }
           }
         };
       },
-      (text6) => store.putTokens(app, text6)
+      (text8) => store.putTokens(app, text8)
     );
     if (snapshot2.hash) tokensHash = snapshot2.hash;
     if (snapshot2.failure) {
@@ -45170,14 +45171,14 @@ async function buildFromLoaded(preloaded, dest, opts = {}) {
       if (streamPolicyErrors.length) {
         throw new Error(`invalid streamPolicy for release ${app}: ${streamPolicyErrors.join("; ")}`);
       }
-      const text6 = await withStoreNavBundle(prodText, async (name) => {
+      const text8 = await withStoreNavBundle(prodText, async (name) => {
         const hash = await addressBundle(name) ?? null;
         const entry = hash ? bundles[name] : void 0;
         return entry ? { url: store.bundleUrl(app, entry.sha256), sri: entry.sri } : null;
       });
-      await store.putAppConfig(app, text6);
-      appConfigHash = sha2564(text6);
-      if (collect2?.descriptors) for (const id of linkableScreenIdsFrom(text6)) linkable.add(id);
+      await store.putAppConfig(app, text8);
+      appConfigHash = sha2564(text8);
+      if (collect2?.descriptors) for (const id of linkableScreenIdsFrom(text8)) linkable.add(id);
     }
     const ahRes = await devFetch(`${base}/v1/action-handlers/${encodeURIComponent(app)}`, { headers: { "X-Himalaya-App": app } });
     if (ahRes.ok) {
@@ -46043,14 +46044,14 @@ function headline(changes) {
 function boardLines(changes) {
   const lines = [];
   for (const c of changes.items) {
-    const text6 = lineOf(c);
-    const same3 = lines.find((l) => l.text === text6);
+    const text8 = lineOf(c);
+    const same3 = lines.find((l) => l.text === text8);
     if (same3) {
       same3.n++;
       continue;
     }
     lines.push({
-      text: text6,
+      text: text8,
       n: 1,
       ...c.kind === "token" && c.from && HEX.test(c.from) ? { from: c.from } : {},
       ...c.kind === "token" && c.to && HEX.test(c.to) ? { to: c.to } : {}
@@ -46370,12 +46371,12 @@ function testRuns(dir) {
     if (!f.endsWith(".json") || f === "latest.json") continue;
     const r = obj(readJson3(join41(att, f)));
     if (!r || r.tool !== "himi-test" || typeof r.runId !== "string") continue;
-    const report2 = obj(r.report);
+    const report3 = obj(r.report);
     const coverage = obj(r.coverage);
     runs.push({
       runId: r.runId,
-      ok: report2?.ok === true,
-      errors: num(obj(report2?.counts)?.errors),
+      ok: report3?.ok === true,
+      errors: num(obj(report3?.counts)?.errors),
       screens: num(coverage?.screens),
       actions: num(coverage?.actionsDispatched),
       gaps: num(coverage?.gaps)
@@ -46494,7 +46495,7 @@ function focusScreen(memory) {
 }
 function buildView(dir, memory, now) {
   const { entries } = readProgress(dir);
-  const summary = summarizeProgress(entries);
+  const summary2 = summarizeProgress(entries);
   const { name, iconFile } = appIdentity(dir);
   const iconArchived = iconFile ? archiveFile(dir, memory, iconFile) : null;
   const icon = iconArchived ? historyUrl(iconArchived.file) : null;
@@ -46523,12 +46524,12 @@ function buildView(dir, memory, now) {
     }
   }
   const firstShot = screens.map((s) => s.firstSeen).sort()[0];
-  const startedAt = [summary.startedAt, firstShot, memory.createdAt].filter((x) => !!x).sort()[0] ?? null;
+  const startedAt = [summary2.startedAt, firstShot, memory.createdAt].filter((x) => !!x).sort()[0] ?? null;
   const view = {
     generatedAt: now,
     app: { name, icon, palette: palette(dir) },
     steps: JOURNEY_STEPS,
-    current: summary.current ?? null,
+    current: summary2.current ?? null,
     startedAt,
     journal: entries.slice(-MAX_JOURNAL).reverse().map((e) => ({
       ts: e.ts,
@@ -47193,16 +47194,16 @@ function pushSetupBodyBytes(body) {
   return Buffer.byteLength(JSON.stringify(body), "utf8");
 }
 async function pushSetupRequest(options) {
-  const refuse4 = (error) => ({ ok: false, status: 0, body: null, error });
-  if (!options.target.controlToken) return refuse4("control_token_required");
-  if (!options.wixToken) return refuse4("wix_account_token_required");
-  if (credentialHostRefusal(options.target.control)) return refuse4("insecure_target");
-  if (options.previewTag !== void 0 && !PREVIEW_TAG.test(options.previewTag)) return refuse4("invalid_preview_tag");
+  const refuse5 = (error) => ({ ok: false, status: 0, body: null, error });
+  if (!options.target.controlToken) return refuse5("control_token_required");
+  if (!options.wixToken) return refuse5("wix_account_token_required");
+  if (credentialHostRefusal(options.target.control)) return refuse5("insecure_target");
+  if (options.previewTag !== void 0 && !PREVIEW_TAG.test(options.previewTag)) return refuse5("invalid_preview_tag");
   const setup = options.operation === "setup";
-  if (setup && !options.body) return refuse4("push_setup_body_required");
-  if (!setup && (!options.query?.app || !options.query?.site)) return refuse4("push_setup_query_required");
+  if (setup && !options.body) return refuse5("push_setup_body_required");
+  if (!setup && (!options.query?.app || !options.query?.site)) return refuse5("push_setup_query_required");
   if (setup && pushSetupBodyBytes(options.body) > MAX_PUSH_SETUP_BODY_BYTES) {
-    return refuse4("push_setup_body_too_large");
+    return refuse5("push_setup_body_too_large");
   }
   const base = options.target.control.replace(/\/+$/, "");
   let path2 = "/v1/admin/push/setup";
@@ -47227,10 +47228,10 @@ async function pushSetupRequest(options) {
       signal: AbortSignal.timeout(options.timeoutMs ?? (setup ? 12e4 : 3e4)),
       ...setup ? { body: JSON.stringify(options.body) } : {}
     });
-    const text6 = await response.text();
+    const text8 = await response.text();
     let parsed = null;
     try {
-      const value = text6 ? JSON.parse(text6) : null;
+      const value = text8 ? JSON.parse(text8) : null;
       parsed = value && typeof value === "object" && !Array.isArray(value) ? value : null;
     } catch {
       parsed = null;
@@ -47270,6 +47271,41 @@ var init_push_setup_apple_credentials = __esm({
   }
 });
 
+// src/hosted-owner.ts
+async function hostedOwnerSession(flags, deps = {}) {
+  let target;
+  try {
+    target = resolveTarget({ target: text3(flags.target), defaultTarget: "wix", controlUrl: text3(flags["control-url"]), controlToken: text3(flags["control-token"]), ownerIssueUrl: text3(flags["owner-issue-url"]) });
+  } catch {
+    return refused("unknown_target", "Select a configured serve target.");
+  }
+  if (credentialHostRefusal(target.control)) return refused("insecure_target");
+  const previewTag = text3(flags["preview-tag"]) ?? process.env.HIMI_SERVE_PREVIEW_TAG;
+  if (previewTag !== void 0 && !/^dp-[a-z0-9]+$/.test(previewTag)) return refused("invalid_preview_tag");
+  const controlToken = target.controlToken;
+  if (!controlToken || !decodeControlTokenClaims(controlToken)?.sub) return refused("owner_login_required", "Run himi login --browser --target wix.");
+  let wixToken;
+  try {
+    wixToken = await (deps.wixToken ?? accountToken)();
+  } catch {
+    return refused("wix_account_token_required", "Browser login supplies a Himi control token only. Sign into the Wix CLI with wix login, using the same Wix account, then retry. You can continue building without push setup.", 1);
+  }
+  if (!wixToken) return refused("wix_account_token_required", "Run wix login using the same Wix account.", 1);
+  if (!target.ownerIssue) return refused("owner_issuer_required");
+  return { ok: true, session: { target, controlToken, wixToken, ownerIssue: target.ownerIssue, ...previewTag ? { previewTag } : {} } };
+}
+var text3, refused;
+var init_hosted_owner = __esm({
+  "src/hosted-owner.ts"() {
+    init_config();
+    init_credential_hosts();
+    init_owner_claim();
+    init_wix_owner();
+    text3 = (v) => typeof v === "string" && v.length > 0 ? v : void 0;
+    refused = (error, hint, exit = 2) => ({ ok: false, error, ...hint ? { hint } : {}, exit });
+  }
+});
+
 // src/push-onboarding.ts
 import { existsSync as existsSync44, mkdirSync as mkdirSync20, readFileSync as readFileSync48, statSync as statSync9, writeFileSync as writeFileSync15, chmodSync as chmodSync2 } from "node:fs";
 import { basename as basename12, dirname as dirname25, join as join42, resolve as resolve37 } from "node:path";
@@ -47293,26 +47329,26 @@ function pushInputsFromContent(dir) {
     // autoClaimSlug's docblock describes as the project-declared slug. Without the fallback a
     // package with no `name` sent a body missing `app` and earned `400 invalid_app_id` with both
     // private keys already on the wire.
-    app: text3(content.name) ?? basename12(root),
-    ...text3(provisioning.siteId) ? { site: text3(provisioning.siteId) } : {},
-    ...text3(native.iosBundleId) ? { bundleId: text3(native.iosBundleId) } : {},
-    ...text3(native.androidApplicationId) ? { androidApplicationId: text3(native.androidApplicationId) } : {}
+    app: text4(content.name) ?? basename12(root),
+    ...text4(provisioning.siteId) ? { site: text4(provisioning.siteId) } : {},
+    ...text4(native.iosBundleId) ? { bundleId: text4(native.iosBundleId) } : {},
+    ...text4(native.androidApplicationId) ? { androidApplicationId: text4(native.androidApplicationId) } : {}
   };
 }
 function mergePushInputs(content, flags) {
   const merged = { ...content };
   for (const [flag, apply] of FLAG_SETTERS) {
-    const value = text3(flags[flag]);
+    const value = text4(flags[flag]);
     if (value !== void 0) apply(merged, value);
   }
   return merged;
 }
 function missingPushInputs(i, scope) {
   const needed = scope === "push_and_signing" ? [...REQUIRED_ORDER, ...ASC_ORDER] : REQUIRED_ORDER;
-  return needed.filter((name) => !text3(i[name]));
+  return needed.filter((name) => !text4(i[name]));
 }
 function ascGroupError(i) {
-  const present = ASC_ORDER.filter((name) => text3(i[name])).length;
+  const present = ASC_ORDER.filter((name) => text4(i[name])).length;
   return present === 0 || present === ASC_ORDER.length ? null : "incomplete_asc_group";
 }
 function localIdentityRefusal(i) {
@@ -47381,8 +47417,8 @@ function validateApnsAuthKey(body) {
   return { ok: true };
 }
 function buildPushSetupBody(i, keys) {
-  const missing = REQUIRED_ORDER.filter((name) => !text3(i[name]));
-  const app = text3(i.app);
+  const missing = REQUIRED_ORDER.filter((name) => !text4(i[name]));
+  const app = text4(i.app);
   if (!app) return { ok: false, code: "app_not_initialized", missing };
   if (missing.length > 0) return { ok: false, code: "needs_input", missing };
   if (i.apnsEnvironment !== "development" && i.apnsEnvironment !== "production") {
@@ -47462,7 +47498,7 @@ function savePushSelection(dir, input) {
   if (input.androidApplicationId) selection.androidApplicationId = input.androidApplicationId;
   writeFile(dir, { ...readPushOnboarding(dir), selection });
 }
-var PUSH_ONBOARDING_PATH, MAX_KEY_FILE_BYTES, SITE_RE, APP_RE, ANDROID_ID_RE, PLACEHOLDER_BUNDLE_RE, text3, FLAG_SETTERS, REQUIRED_ORDER, ASC_ORDER, NOTE;
+var PUSH_ONBOARDING_PATH, MAX_KEY_FILE_BYTES, SITE_RE, APP_RE, ANDROID_ID_RE, PLACEHOLDER_BUNDLE_RE, text4, FLAG_SETTERS, REQUIRED_ORDER, ASC_ORDER, NOTE;
 var init_push_onboarding = __esm({
   "src/push-onboarding.ts"() {
     PUSH_ONBOARDING_PATH = ".himi/push-onboarding.json";
@@ -47471,7 +47507,7 @@ var init_push_onboarding = __esm({
     APP_RE = /^[a-z0-9][a-z0-9._-]{0,63}$/i;
     ANDROID_ID_RE = /^[A-Za-z][A-Za-z0-9_]*(\.[A-Za-z][A-Za-z0-9_]*)+$/;
     PLACEHOLDER_BUNDLE_RE = /^com\.example\.|^__HIMI_APP_/;
-    text3 = (v) => typeof v === "string" && v.length > 0 ? v : void 0;
+    text4 = (v) => typeof v === "string" && v.length > 0 ? v : void 0;
     FLAG_SETTERS = [
       ["app", (m, v) => {
         m.app = v;
@@ -47603,7 +47639,7 @@ async function runNotifySetup(pos, flags, io, deps = {}) {
   if (operation !== "setup" && operation !== "status") return refuse2(io, "invalid_notify_operation");
   const flagError = pushSetupFlagError(flags);
   if (flagError) return refuse2(io, flagError);
-  const dir = resolve38(text4(flags.content) ?? process.cwd());
+  const dir = resolve38(text5(flags.content) ?? process.cwd());
   const local = readPushOnboarding(dir);
   const progress = local.push;
   const content = pushInputsFromContent(dir);
@@ -47635,26 +47671,10 @@ async function runNotifySetup(pos, flags, io, deps = {}) {
     return 2;
   }
   if (operation === "setup" && ascGroupError(input)) return refuse2(io, "incomplete_asc_group");
-  let target;
-  try {
-    target = resolveTarget({ target: text4(flags.target), defaultTarget: "wix", controlUrl: text4(flags["control-url"]), controlToken: text4(flags["control-token"]), ownerIssueUrl: text4(flags["owner-issue-url"]) });
-  } catch {
-    return refuse2(io, "unknown_target", "Select a configured serve target.");
-  }
-  if (credentialHostRefusal(target.control)) return refuse2(io, "insecure_target");
-  const previewTag = text4(flags["preview-tag"]) ?? process.env.HIMI_SERVE_PREVIEW_TAG;
-  if (previewTag !== void 0 && !/^dp-[a-z0-9]+$/.test(previewTag)) return refuse2(io, "invalid_preview_tag");
-  const token = target.controlToken;
-  if (!token || !decodeControlTokenClaims(token)?.sub) return refuse2(io, "owner_login_required", "Run himi login --browser --target wix.");
-  let wixToken;
-  try {
-    wixToken = await (deps.wixToken ?? accountToken)();
-  } catch {
-    return refuse2(io, "wix_account_token_required", "Browser login supplies a Himi control token only. Sign into the Wix CLI with wix login, using the same Wix account, then retry. You can continue building without push setup.", 1);
-  }
-  if (!wixToken) return refuse2(io, "wix_account_token_required", "Run wix login using the same Wix account.", 1);
-  if (!target.ownerIssue) return refuse2(io, "owner_issuer_required");
-  const ownershipArgs = { ownerIssue: target.ownerIssue, controlToken: token, declaredName: input.app, fetchImpl: deps.fetchImpl };
+  const owner = await hostedOwnerSession(flags, deps);
+  if (!owner.ok) return refuse2(io, owner.error, owner.hint, owner.exit);
+  const { target, controlToken: token, wixToken, previewTag, ownerIssue } = owner.session;
+  const ownershipArgs = { ownerIssue, controlToken: token, declaredName: input.app, fetchImpl: deps.fetchImpl };
   let ownership = await verifyAppOwnership(ownershipArgs);
   logOwnershipFailure(io, ownership);
   if (ownership.state !== "owned" && ownership.state !== "not_claimed") return refuse2(io, `app_ownership_${ownership.state}`, "Setup requires the app owner; retry after ownership is verified.", 1);
@@ -47700,7 +47720,7 @@ async function runNotifySetup(pos, flags, io, deps = {}) {
       }
     }
     if (ownership.state === "not_claimed") {
-      const claim = await autoClaimSlug({ ownerIssue: target.ownerIssue, controlToken: token, app: input.app, accountId: text4(flags["account-id"]), fetchImpl: deps.fetchImpl });
+      const claim = await autoClaimSlug({ ownerIssue, controlToken: token, app: input.app, accountId: text5(flags["account-id"]), fetchImpl: deps.fetchImpl });
       if (claim.fatal) return refuse2(io, "app_claim_refused", "Check app ownership and the selected account.", 1);
       ownership = await verifyAppOwnership({ ...ownershipArgs, declaredName: claim.slug ?? input.app });
       logOwnershipFailure(io, ownership);
@@ -47750,17 +47770,15 @@ async function offerPushSetup(options) {
     return { status: "needs_attention", resume: resume(contentDir2) };
   }
 }
-var text4, obj2, STATES, CHECKS, CHECK_STATES, STAGES, ERROR_CODES, PROMPTS, later, resume;
+var text5, obj2, STATES, CHECKS, CHECK_STATES, STAGES, ERROR_CODES, PROMPTS, later, resume;
 var init_notify_setup = __esm({
   "src/notify-setup.ts"() {
-    init_config();
-    init_credential_hosts();
     init_push_setup();
     init_push_setup_apple_credentials();
-    init_wix_owner();
     init_owner_claim();
+    init_hosted_owner();
     init_push_onboarding();
-    text4 = (v) => typeof v === "string" && v.length > 0 ? v : void 0;
+    text5 = (v) => typeof v === "string" && v.length > 0 ? v : void 0;
     obj2 = (v) => v && typeof v === "object" && !Array.isArray(v) ? v : {};
     STATES = /* @__PURE__ */ new Set(["not_configured", "provisioning", "ready", "needs_attention"]);
     CHECKS = ["brandedRecord", "pingApns", "pingFcm", "appleSigning", "nativeBuild", "himiRouting", "deviceDelivery"];
@@ -48455,7 +48473,7 @@ function thin(items, max) {
 function planReel(dir) {
   const memory = loadMemory2(dir);
   const { entries } = readProgress(dir);
-  const summary = summarizeProgress(entries);
+  const summary2 = summarizeProgress(entries);
   const manifest = readJson5(join45(dir, "himalaya.content.json"));
   const tokens = readJson5(join45(dir, "tokens.json"));
   const accentToken = tokens?.colors?.accentPrimary;
@@ -48475,9 +48493,9 @@ function planReel(dir) {
     by: isCliEntry(e) ? CLI_AUTHOR : null,
     files: (Array.isArray(e.images) ? e.images : []).map((i) => isObj3(i) && typeof i.file === "string" ? basename13(i.file) : "").filter((f) => HISTORY_NAME.test(f))
   }));
-  const times = [summary.startedAt, ...timeline.map((t) => t.ts), memory?.createdAt].filter((x) => !!x).sort();
+  const times = [summary2.startedAt, ...timeline.map((t) => t.ts), memory?.createdAt].filter((x) => !!x).sort();
   const startedAt = times[0] ?? null;
-  const endedAt = [summary.lastAt, ...timeline.map((t) => t.ts)].filter((x) => !!x).sort().pop() ?? null;
+  const endedAt = [summary2.lastAt, ...timeline.map((t) => t.ts)].filter((x) => !!x).sort().pop() ?? null;
   return {
     app: typeof manifest?.name === "string" && manifest.name ? manifest.name : basename13(dir),
     accent,
@@ -48660,13 +48678,21 @@ __export(milestones_exports, {
   CONSENT_PREFLIGHT_STEP: () => CONSENT_PREFLIGHT_STEP,
   FIRST_LOOK_BUDGET_MS: () => FIRST_LOOK_BUDGET_MS,
   INIT_SOURCE_FILE: () => INIT_SOURCE_FILE,
+  INIT_WATCH_IDLE_MINUTES: () => INIT_WATCH_IDLE_MINUTES,
   REMOTE_FIRST_LOOK_SKIP: () => REMOTE_FIRST_LOOK_SKIP,
+  REMOTE_WATCH_SKIP: () => REMOTE_WATCH_SKIP,
   STARTING_POINT_REF: () => STARTING_POINT_REF,
+  STILL_BUILDING_AFTER_MS: () => STILL_BUILDING_AFTER_MS,
+  STILL_BUILDING_MESSAGE: () => STILL_BUILDING_MESSAGE,
+  WATCH_LOG: () => WATCH_LOG,
   WATCH_REMINDER_EVERY_MS: () => WATCH_REMINDER_EVERY_MS,
+  absoluteLoaderArgs: () => absoluteLoaderArgs,
   afterBrowserTestRun: () => afterBrowserTestRun,
   afterDraftPush: () => afterDraftPush,
+  afterHandoverPostcard: () => afterHandoverPostcard,
   afterRenderPng: () => afterRenderPng,
   afterTestRun: () => afterTestRun,
+  defaultStartWatchDeps: () => defaultStartWatchDeps,
   displayPath: () => displayPath,
   doNowBlock: () => doNowBlock,
   draftPictureGap: () => draftPictureGap,
@@ -48675,21 +48701,25 @@ __export(milestones_exports, {
   homeShotForPostcard: () => homeShotForPostcard,
   homeShotPath: () => homeShotPath,
   initDivergence: () => initDivergence,
+  liveWatch: () => liveWatch,
   liveWatchRunning: () => liveWatchRunning,
   openBoardForSession: () => openBoardForSession,
   progressCommand: () => progressCommand,
   recordInitSource: () => recordInitSource,
   sessionSteps: () => sessionSteps,
+  startWatchAtInit: () => startWatchAtInit,
   startingPointMessage: () => startingPointMessage,
   testChangeNote: () => testChangeNote,
   testPostcardCounts: () => testPostcardCounts,
   testPostcardMessage: () => testPostcardMessage,
   watchReminder: () => watchReminder,
+  watchUrlFor: () => watchUrlFor,
   writeHandoverReel: () => writeHandoverReel
 });
 import { createHash as createHash26, randomUUID as randomUUID3 } from "node:crypto";
 import { spawn as spawn5 } from "node:child_process";
-import { existsSync as existsSync47, lstatSync as lstatSync11, readFileSync as readFileSync52, statSync as statSync11 } from "node:fs";
+import { closeSync as closeSync3, existsSync as existsSync47, lstatSync as lstatSync11, readFileSync as readFileSync52, statSync as statSync11 } from "node:fs";
+import { createServer as createServer4 } from "node:net";
 import { basename as basename14, dirname as dirname27, isAbsolute as isAbsolute4, join as join46, relative as relative9, resolve as resolve41, sep as sep12 } from "node:path";
 function homeScreenIdOf(dir) {
   let src;
@@ -48765,9 +48795,9 @@ async function firstLookAtInit(dir, opts) {
     child.on("error", (e) => finish2({ skipped: `the render did not start: ${e.message}` }));
     child.on("close", (code) => {
       clearTimeout(hardKill);
-      let report2 = null;
+      let report3 = null;
       try {
-        report2 = JSON.parse(Buffer.concat(out2).toString("utf8"));
+        report3 = JSON.parse(Buffer.concat(out2).toString("utf8"));
       } catch {
       }
       let fresh = false;
@@ -48776,7 +48806,7 @@ async function firstLookAtInit(dir, opts) {
       } catch {
       }
       if (code === 0 && fresh) return finish2({ image: `.himi/shots/${home}.png` });
-      if (report2?.pngUnavailable) return finish2({ skipped: "no headless browser to draw the PNG \u2014 `npx playwright install chromium`, then run the render step below" });
+      if (report3?.pngUnavailable) return finish2({ skipped: "no headless browser to draw the PNG \u2014 `npx playwright install chromium`, then run the render step below" });
       let refusal = null;
       for (const line of errTail.trim().split("\n").reverse()) {
         try {
@@ -48786,13 +48816,14 @@ async function firstLookAtInit(dir, opts) {
         }
         if (refusal) break;
       }
-      const why = typeof report2?.reason === "string" ? report2.reason : typeof report2?.error === "string" ? report2.error : refusal;
+      const why = typeof report3?.reason === "string" ? report3.reason : typeof report3?.error === "string" ? report3.error : refusal;
       finish2({ skipped: `the render made no picture (exit ${code ?? "killed"})${why ? `: ${why.slice(0, 200)}` : ""}` });
     });
   });
 }
 function sessionSteps(opts) {
   const content = displayPath(opts.dir, opts.cwd);
+  const running = watchRunning(opts.watch);
   const home = opts.home ?? "<homeScreenId>";
   const shot = `.himi/shots/${home}.png`;
   const when = opts.source === "remote" ? "the first picture, once you have read the template's dev/, config.ts and tier5-src/ (it came off the serve plane, and a render runs its dev/index.ts on this machine)" : "the first picture, now";
@@ -48802,7 +48833,7 @@ function sessionSteps(opts) {
       `${progressCommand({ what: "where the build starts", step: "implement", image: shot, content })} \u2014 your postcard for the owner, with that picture`
     ],
     CONSENT_PREFLIGHT_STEP,
-    `himi run --watch${contentArg(content)} & \u2014 after the consent preflight: keep it running in the background. The live preview repaints on every save and serves the build board at <its url>/__himi/studio/`
+    running ? `the live preview is already running at ${running.url} \u2014 ${running.by === "init" ? `init started it in the background (pid ${running.pid}, log ${running.log}; it stops itself after ${INIT_WATCH_IDLE_MINUTES} minutes with no save)` : `pid ${running.pid}`}; do not start another. It repaints on every save and serves the build board at ${running.board}. Open it in a browser only after the consent preflight` : `himi run --watch${contentArg(content)} & \u2014 ${opts.source === "remote" ? "once you have read the template's code (init never starts it for a --remote template: the preview runs that code on this machine), and " : ""}after the consent preflight: keep it running in the background. The live preview repaints on every save and serves the build board at <its url>/__himi/studio/`
   ];
 }
 async function openBoardForSession(dir, cwd = process.cwd()) {
@@ -48819,13 +48850,32 @@ function journal(dir, milestone, message, extra) {
   const r = journalMilestone(dir, { milestone, message, ...extra });
   return r.journaled ? { journaled: true, milestone, message: r.entry.message } : void 0;
 }
+function stillBuilding(dir, image, now) {
+  try {
+    const entries = readProgress(dir, { all: true }).entries;
+    if (!entries.length) return void 0;
+    const times = entries.map((e) => Date.parse(e.ts)).filter(Number.isFinite);
+    if (!times.length || !(now.getTime() - Math.max(...times) > STILL_BUILDING_AFTER_MS)) return void 0;
+    const sha = sha256Of(image);
+    const latest = entries[entries.length - 1];
+    if (Array.isArray(latest.images) && latest.images.some((i) => !!i && typeof i === "object" && i.sha256 === sha)) return void 0;
+    return journal(dir, "still-building", STILL_BUILDING_MESSAGE, { ref: `home-${sha.slice(0, 16)}`, image, now });
+  } catch {
+    return void 0;
+  }
+}
+function firstLookBeforeOwnPostcard(dir, image, now) {
+  if (!image || !existsSync47(image) || initDivergence(dir).state !== "diverged") return void 0;
+  return journal(dir, "first-look", yourFirstLookMessage(dir), { image, ...now ? { now } : {} });
+}
 function afterRenderPng(dir, input) {
   const isHome = input.renderable && input.homeScreenId !== null && input.screenId === input.homeScreenId;
   const at2 = input.now ? { now: input.now } : {};
   let postcard;
   if (isHome) {
     const d = initDivergence(dir);
-    postcard = d.state === "unchanged" ? journal(dir, "first-look", startingPointMessage(d.template), { ref: STARTING_POINT_REF, image: input.pngFile, ...at2 }) : d.state === "diverged" ? journal(dir, "first-look", `First look at your app: ${appName(dir)}'s home screen, with your changes.`, { image: input.pngFile, ...at2 }) : journal(dir, "first-look", `First look at ${appName(dir)}: the home screen, where the build starts.`, { image: input.pngFile, ...at2 });
+    postcard = d.state === "unchanged" ? journal(dir, "first-look", startingPointMessage(d.template), { ref: STARTING_POINT_REF, image: input.pngFile, ...at2 }) : d.state === "diverged" ? journal(dir, "first-look", yourFirstLookMessage(dir), { image: input.pngFile, ...at2 }) : journal(dir, "first-look", `First look at ${appName(dir)}: the home screen, where the build starts.`, { image: input.pngFile, ...at2 });
+    postcard ??= stillBuilding(dir, input.pngFile, input.now ?? /* @__PURE__ */ new Date());
   }
   return {
     ...postcard ? { postcard } : {},
@@ -48878,6 +48928,7 @@ function testChangeNote(headline2, change) {
   return picture ? `Since the last crawl: ${picture}.` : void 0;
 }
 function afterTestRun(dir, input) {
+  const firstLook = firstLookBeforeOwnPostcard(dir, input.homeShot, input.now);
   const headline2 = testPostcardMessage(input);
   const postcard = journal(dir, "test", headline2, {
     ref: input.runId,
@@ -48888,6 +48939,7 @@ function afterTestRun(dir, input) {
   });
   return {
     ...postcard ? { postcard } : {},
+    ...firstLook ? { firstLook } : {},
     next: [
       input.browserScreen !== void 0 ? "this run crawled one screen in the browser; `himi test` without --browser crawls every screen and draws the build board's App map \u2014 how they link, and any broken link" : input.boardOpen ? "the build board's App map now shows every screen this crawl reached, how they link, and any broken link \u2014 .himi/studio/index.html, or /__himi/studio/ under `himi run --watch`" : "`himi studio` opens the build board, whose App map draws every screen this crawl reached, how they link, and any broken link"
     ]
@@ -48929,6 +48981,7 @@ function draftPictureGap(input) {
 }
 function afterDraftPush(dir, input) {
   const current = !!input.homeShot && shotIsCurrent(input.homeShot, input.sourceChangedAtMs);
+  const firstLook = current ? firstLookBeforeOwnPostcard(dir, input.homeShot, input.now) : void 0;
   const gap = current || input.home === void 0 ? null : draftPictureGap(input);
   const why = gap ? ` No picture: ${gap.reason}${gap.render ? ` \u2014 \`himi render ${shellQuote(input.home)} --png\` makes a current one` : ""}.` : "";
   const postcard = journal(dir, "draft", `Draft pushed: release ${input.releaseId.slice(0, 12)} of ${input.app} \u2014 owner-private, not live.${why}`, {
@@ -48941,6 +48994,7 @@ function afterDraftPush(dir, input) {
   const postcardLine = `${progressCommand({ what: "what the owner can review in this draft", step: "review", content: input.content })} \u2014 your postcard for the draft; share the preview link in chat, never in the journal. ${handover}`;
   return {
     ...postcard ? { postcard } : {},
+    ...firstLook ? { firstLook } : {},
     ...reel ? { reel } : {},
     ...gap ? { picture: { skipped: gap.reason, ...gap.render ? { render: gap.render } : {} } } : {},
     // With a render to run, it comes first: then the agent's postcard carries the current picture itself.
@@ -48989,7 +49043,7 @@ function initDivergence(dir) {
 function startingPointMessage(template) {
   return template ? `Starting point: the ${template} template, before any of your changes.` : "Starting point: the starter app, before any of your changes.";
 }
-function homeShotForPostcard(dir) {
+function homeShotForPostcard(dir, opts = {}) {
   const home = homeScreenIdOf(dir);
   if (!home) return { skipped: "no literal homeScreenId in dev/index.ts, so there is no home shot to attach" };
   const shot = homeShotPath(dir, home);
@@ -49003,6 +49057,7 @@ function homeShotForPostcard(dir) {
     changed = void 0;
   }
   if (!shotIsCurrent(shot, changed)) return { skipped: `the home shot is older than the last source change \u2014 ${render} makes a current one` };
+  if (opts.repeatOk) return { image: shot };
   try {
     const sha = sha256Of(shot);
     const entries = readProgress(dir, { all: true }).entries;
@@ -49014,15 +49069,38 @@ function homeShotForPostcard(dir) {
   }
   return { image: shot };
 }
-function liveWatchRunning(dir, isAlive = pidAlive) {
+function readInitWatch(dir) {
+  const file = join46(dir, INIT_WATCH_FILE);
+  try {
+    if (!lstatSync11(file).isFile()) return null;
+    const r = JSON.parse(readFileSync52(file, "utf8"));
+    if (r.v !== 1 || typeof r.pid !== "number" || !Number.isInteger(r.pid) || r.pid < 1) return null;
+    if (typeof r.url !== "string" || !/^http:\/\/127\.0\.0\.1:\d+\//.test(r.url) || typeof r.board !== "string" || typeof r.log !== "string" || typeof r.startedAt !== "string") return null;
+    return r;
+  } catch {
+    return null;
+  }
+}
+function liveWatch(dir, isAlive = pidAlive, now = /* @__PURE__ */ new Date()) {
   const r = readRunRecord(dir);
-  return !!r && r.watching === true && isAlive(r.pid);
+  if (r) {
+    if (r.watching === true && isAlive(r.pid)) return { url: r.url, board: `${new URL(r.url).origin}/__himi/studio/`, pid: r.pid, by: "run" };
+    return null;
+  }
+  const w = readInitWatch(dir);
+  const age = w ? now.getTime() - Date.parse(w.startedAt) : Number.NaN;
+  if (w && age >= 0 && age < INIT_WATCH_STARTING_MS && isAlive(w.pid)) return { url: w.url, board: w.board, pid: w.pid, by: "init", log: w.log };
+  return null;
+}
+function liveWatchRunning(dir, isAlive = pidAlive, now) {
+  return liveWatch(dir, isAlive, now) !== null;
 }
 function watchReminder(dir, opts = {}) {
   try {
     if (!existsSync47(join46(dir, "himalaya.content.json"))) return void 0;
-    if (liveWatchRunning(dir, opts.isAlive)) return void 0;
-    const now = (opts.now ?? /* @__PURE__ */ new Date()).getTime();
+    const nowDate = opts.now ?? /* @__PURE__ */ new Date();
+    const live2 = liveWatch(dir, opts.isAlive, nowDate);
+    const now = nowDate.getTime();
     const file = join46(dir, REMINDERS_FILE);
     let last = Number.NaN;
     try {
@@ -49033,21 +49111,96 @@ function watchReminder(dir, opts = {}) {
     if (!realDirIn(dir, ".himi")) return void 0;
     writeFileAtomic(file, `${JSON.stringify({ watch: new Date(now).toISOString() })}
 `);
+    if (live2) {
+      return `the live preview is running at ${live2.url} (pid ${live2.pid}${live2.by === "init" ? ", started by himi init" : ""}) \u2014 it repaints on every save, and the build board is ${live2.board}; give the owner that link to click around while you work, and do not start another`;
+    }
     const content = opts.content ?? displayPath(dir);
     return `start the live preview and leave it running: \`himi run --watch --content ${shellQuote(content)} &\` (the consent preflight first, if a worker or config calls Wix at boot) \u2014 it repaints on every save; the build board is ${shellQuote(join46(content, ".himi", "studio", "index.html"))}, or /__himi/studio/ on the preview`;
   } catch {
     return void 0;
   }
 }
+function watchUrlFor(port, app) {
+  const origin = `http://127.0.0.1:${port}`;
+  return { url: `${origin}/preview/a/${encodeURIComponent(app)}`, board: `${origin}/__himi/studio/` };
+}
+function absoluteLoaderArgs(args, resolveSpec = (spec) => import.meta.resolve(spec)) {
+  const bare = (v) => !/^(?:\.{1,2}[\\/]|\/|[A-Za-z]:[\\/]|file:|data:|node:)/.test(v);
+  const fix = (v) => {
+    if (!bare(v)) return v;
+    try {
+      return resolveSpec(v);
+    } catch {
+      return v;
+    }
+  };
+  const out2 = [];
+  for (let i = 0; i < args.length; i++) {
+    const m = /^(--(?:import|loader|experimental-loader|require))=(.*)$/.exec(args[i]);
+    if (m) out2.push(`${m[1]}=${fix(m[2])}`);
+    else if (/^(--import|--loader|--experimental-loader|--require|-r)$/.test(args[i]) && i + 1 < args.length) out2.push(args[i], fix(args[++i]));
+    else out2.push(args[i]);
+  }
+  return out2;
+}
+async function startWatchAtInit(dir, opts) {
+  if (opts.source !== "bundled") return { skipped: REMOTE_WATCH_SKIP };
+  if (opts.noWatch) return { skipped: "--no-watch" };
+  const env = opts.env ?? process.env;
+  if (ciSet(env)) return { skipped: "the CI environment variable is set, so nothing is left running after init" };
+  if (env.NODE_TEST_CONTEXT) return { skipped: "running under `node --test`, so nothing is left running after init" };
+  const deps = { ...defaultStartWatchDeps, ...opts.deps };
+  const now = opts.now ?? /* @__PURE__ */ new Date();
+  const live2 = liveWatch(dir, deps.isAlive, now);
+  if (live2 && (live2.by === "init" || await deps.previewRunning(dir))) {
+    return { skipped: `a live preview of this app is already running (pid ${live2.pid})`, url: live2.url, board: live2.board, pid: live2.pid };
+  }
+  try {
+    const port = await deps.freePort(previewPortForDir(dir));
+    const { url, board } = watchUrlFor(port, opts.app);
+    const { fd } = openPreviewLog(dir, "watch.log");
+    let child;
+    try {
+      child = deps.spawn(
+        process.execPath,
+        [...absoluteLoaderArgs(opts.loader ?? []), opts.entry, "run", "--watch", "--content", dir, "--port", String(port), "--no-open", "--idle-exit", String(INIT_WATCH_IDLE_MINUTES), "--skip-version-check"],
+        { cwd: dir, detached: true, stdio: ["ignore", fd, fd], env: { ...env, HIMI_NO_UPDATE_CHECK: "1" } }
+      );
+    } finally {
+      closeSync3(fd);
+    }
+    child.once("error", () => {
+    });
+    child.unref();
+    if (!child.pid) return { skipped: "the live preview did not start (no process) \u2014 start it yourself: `himi run --watch --content <dir> &`" };
+    const record2 = { v: 1, pid: child.pid, url, board, log: WATCH_LOG, startedAt: now.toISOString() };
+    if (realDirIn(dir, ".himi")) writeFileAtomic(join46(dir, INIT_WATCH_FILE), `${JSON.stringify(record2, null, 2)}
+`);
+    return { started: true, pid: child.pid, url, board, log: WATCH_LOG };
+  } catch (e) {
+    return { skipped: `the live preview did not start: ${e.message.split("\n")[0]}` };
+  }
+}
+function watchRunning(w) {
+  if (!w) return null;
+  if ("started" in w) return { url: w.url, board: w.board, pid: w.pid, log: w.log, by: "init" };
+  return w.url && w.board && w.pid ? { url: w.url, board: w.board, pid: w.pid, by: "run" } : null;
+}
 function doNowBlock(opts) {
   const content = displayPath(opts.dir, opts.cwd);
   const home = opts.home ?? "<homeScreenId>";
   const board = join46(content, ".himi", "studio", "index.html");
-  const watch2 = `\`himi run --watch${contentArg(content)} &\` and leave it running (the board: ${shellQuote(board)}, or /__himi/studio/ on the preview)`;
+  const running = watchRunning(opts.watch);
+  const who = running?.by === "init" ? "init started it" : "already running";
+  const watch2 = running ? `${running.url} (${who}; the board: ${running.board}) \u2014 leave it running, and do not start another` : `\`himi run --watch${contentArg(content)} &\` and leave it running (the board: ${shellQuote(board)}, or /__himi/studio/ on the preview)`;
   const postcard = `after each milestone, \`himi progress "<what changed>" --step <n>${contentArg(content)}\` \u2014 the current home picture attaches itself`;
-  return opts.pictured ? [`1. Consent preflight: if a worker or config can call Wix or anything external at boot, authorize or mock it (none: go on).`, `2. ${watch2}.`, `3. ${postcard[0].toUpperCase()}${postcard.slice(1)}.`] : [
+  return opts.pictured ? [
+    `1. Consent preflight: if a worker or config can call Wix or anything external at boot, authorize or mock it (none: go on).`,
+    running ? `2. The live preview is already running at ${watch2}; open it in a browser only after step 1.` : `2. ${watch2}.`,
+    `3. ${postcard[0].toUpperCase()}${postcard.slice(1)}.`
+  ] : [
     `1. \`himi render ${shellQuote(home)} --png --device iphone${contentArg(content)}\` \u2014 the starting picture, offline${opts.source === "remote" ? " (read the template's dev/, config.ts and tier5-src/ first)" : ""}.`,
-    `2. Consent preflight (authorize or mock any Wix or external startup request), then ${watch2}.`,
+    running ? `2. Consent preflight (authorize or mock any Wix or external startup request), then open the live preview at ${watch2}.` : `2. Consent preflight (authorize or mock any Wix or external startup request), then ${watch2}.`,
     `3. ${postcard[0].toUpperCase()}${postcard.slice(1)}.`
   ];
 }
@@ -49062,7 +49215,20 @@ function writeHandoverReel(dir) {
     return { skipped: `the making-of was not written: ${e.message.split("\n")[0]} \u2014 \`himi studio reel\` retries it` };
   }
 }
-var contentArg, CONSENT_PREFLIGHT, CONSENT_PREFLIGHT_STEP, REMOTE_FIRST_LOOK_SKIP, FIRST_LOOK_BUDGET_MS, plural, appName, INIT_SOURCE_FILE, STARTING_POINT_REF, TEMPLATE_NAME, sha256Of, WATCH_REMINDER_EVERY_MS, REMINDERS_FILE, pidAlive;
+function afterHandoverPostcard(dir, opts = {}) {
+  const file = join46(dir, ".himi", "making-of.html");
+  let fresh = false;
+  try {
+    const st = lstatSync11(file);
+    fresh = st.isFile() && !st.isSymbolicLink() && st.mtimeMs >= statSync11(join46(dir, ".himi", "progress.jsonl")).mtimeMs;
+  } catch {
+    fresh = false;
+  }
+  const makingOf = fresh ? { file, hint: `hand ${basename14(file)} to the owner at the handover \u2014 one self-contained page of their app taking shape; send it beside the preview link, never instead of it` } : writeHandoverReel(dir);
+  const next = "file" in makingOf ? [`hand the owner the making-of, ${shellQuote(displayPath(makingOf.file))}, beside the preview link \u2014 in your final message and report, never instead of the link`] : [`\`himi studio reel${contentArg(opts.content)}\` writes the making-of to hand the owner beside the preview link (${makingOf.skipped})`];
+  return { makingOf, next };
+}
+var contentArg, CONSENT_PREFLIGHT, CONSENT_PREFLIGHT_STEP, REMOTE_FIRST_LOOK_SKIP, FIRST_LOOK_BUDGET_MS, plural, appName, STILL_BUILDING_AFTER_MS, STILL_BUILDING_MESSAGE, yourFirstLookMessage, INIT_SOURCE_FILE, STARTING_POINT_REF, TEMPLATE_NAME, sha256Of, WATCH_REMINDER_EVERY_MS, REMINDERS_FILE, pidAlive, INIT_WATCH_FILE, INIT_WATCH_STARTING_MS, INIT_WATCH_IDLE_MINUTES, WATCH_LOG, REMOTE_WATCH_SKIP, listenOn, defaultStartWatchDeps, ciSet;
 var init_milestones = __esm({
   "src/milestones.ts"() {
     init_app_source();
@@ -49077,6 +49243,9 @@ var init_milestones = __esm({
     FIRST_LOOK_BUDGET_MS = 9e4;
     plural = (n, one, many = `${one}s`) => `${n} ${n === 1 ? one : many}`;
     appName = (dir) => appLabel(dir) ?? basename14(dir);
+    STILL_BUILDING_AFTER_MS = 10 * 60 * 1e3;
+    STILL_BUILDING_MESSAGE = "Still building: here's the home screen now.";
+    yourFirstLookMessage = (dir) => `First look at your app: ${appName(dir)}'s home screen, with your changes.`;
     INIT_SOURCE_FILE = join46(".himi", "init-source.json");
     STARTING_POINT_REF = "starting-point";
     TEMPLATE_NAME = /^[A-Za-z0-9._-]{1,64}$/;
@@ -49091,6 +49260,30 @@ var init_milestones = __esm({
         return e.code === "EPERM";
       }
     };
+    INIT_WATCH_FILE = join46(".himi", "watch.json");
+    INIT_WATCH_STARTING_MS = 5 * 60 * 1e3;
+    INIT_WATCH_IDLE_MINUTES = 30;
+    WATCH_LOG = ".himi/watch.log";
+    REMOTE_WATCH_SKIP = "the template came off the serve plane: the live preview builds and serves its publisher's code on this machine, so init never starts it for one \u2014 read its dev/, config.ts and tier5-src/ first, then start it yourself";
+    listenOn = (port) => new Promise((done) => {
+      const srv = createServer4();
+      srv.once("error", () => done(null));
+      srv.listen(port, "127.0.0.1", () => {
+        const addr = srv.address();
+        const got = typeof addr === "object" && addr ? addr.port : null;
+        srv.close(() => done(got));
+      });
+    });
+    defaultStartWatchDeps = {
+      spawn: (cmd, args, opts) => spawn5(cmd, args, opts),
+      isAlive: (pid) => pidAlive(pid),
+      freePort: async (preferred) => await listenOn(preferred) ?? await listenOn(0) ?? preferred,
+      previewRunning: async (dir) => (await previewStatus(dir)).running
+    };
+    ciSet = (env) => {
+      const v = env.CI?.trim().toLowerCase();
+      return !!v && v !== "0" && v !== "false";
+    };
   }
 });
 
@@ -49578,9 +49771,9 @@ function bundlesOf(block) {
   walk2(block);
   return [...out2];
 }
-function parseJson2(text6, what) {
+function parseJson2(text8, what) {
   try {
-    const value = JSON.parse(text6);
+    const value = JSON.parse(text8);
     if (!value || typeof value !== "object" || Array.isArray(value)) throw new Error("not an object");
     return value;
   } catch (e) {
@@ -49815,25 +50008,25 @@ function pruneChrome(items, removed, ledger) {
 }
 function rewriteNav(nav, removed, homeId) {
   const next = structuredClone(nav);
-  const report2 = { linkable: [], tabs: [], drawer: [], sidebar: [], deepLinkPatterns: [], topBarActions: [], headerActions: [], surfaceDestinations: [], appIconBadgeSources: [], reparented: [] };
+  const report3 = { linkable: [], tabs: [], drawer: [], sidebar: [], deepLinkPatterns: [], topBarActions: [], headerActions: [], surfaceDestinations: [], appIconBadgeSources: [], reparented: [] };
   const tabItems = asItems(next.tabBar);
   const hadTabs = !!tabItems?.length;
-  if (tabItems) next.tabBar.items = pruneChrome(tabItems, removed, report2.tabs);
+  if (tabItems) next.tabBar.items = pruneChrome(tabItems, removed, report3.tabs);
   const drawerItems = asItems(next.drawer);
-  if (drawerItems) next.drawer.items = pruneChrome(drawerItems, removed, report2.drawer);
+  if (drawerItems) next.drawer.items = pruneChrome(drawerItems, removed, report3.drawer);
   const sidebarItems = asItems(next.sidebar);
-  if (sidebarItems) next.sidebar.items = pruneChrome(sidebarItems, removed, report2.sidebar);
+  if (sidebarItems) next.sidebar.items = pruneChrome(sidebarItems, removed, report3.sidebar);
   if (hadTabs && !asItems(next.tabBar).length) {
-    throw new TrimRefusal(`no tab would remain \u2014 every tabBar item opens a screen this trim removes (${report2.tabs.join(", ")}); keep at least one tab's screen`, { removedTabs: report2.tabs });
+    throw new TrimRefusal(`no tab would remain \u2014 every tabBar item opens a screen this trim removes (${report3.tabs.join(", ")}); keep at least one tab's screen`, { removedTabs: report3.tabs });
   }
   const remainingRoots = [...asItems(next.tabBar) ?? [], ...asItems(next.sidebar) ?? []].filter((i) => i.role !== "section");
   const remainingRootIds = new Set(remainingRoots.map((i) => i.id).filter((id) => typeof id === "string"));
-  const removedRootIds = /* @__PURE__ */ new Set([...report2.tabs, ...report2.sidebar]);
+  const removedRootIds = /* @__PURE__ */ new Set([...report3.tabs, ...report3.sidebar]);
   if (Array.isArray(next.deepLinkPatterns)) {
     next.deepLinkPatterns = next.deepLinkPatterns.filter((p) => {
       const id = p?.params?.screenId ?? p?.screenId;
       if (typeof id === "string" && removed(id)) {
-        report2.deepLinkPatterns.push(String(p.pattern ?? id));
+        report3.deepLinkPatterns.push(String(p.pattern ?? id));
         return false;
       }
       return true;
@@ -49844,7 +50037,7 @@ function rewriteNav(nav, removed, homeId) {
     if (!Array.isArray(actions)) continue;
     next[key2].header.actions = actions.filter((a) => {
       if (!(typeof a?.screenId === "string" && removed(a.screenId))) return true;
-      report2.headerActions.push(`${key2}:${String(a.icon ?? a.screenId)}`);
+      report3.headerActions.push(`${key2}:${String(a.icon ?? a.screenId)}`);
       return false;
     });
   }
@@ -49853,7 +50046,7 @@ function rewriteNav(nav, removed, homeId) {
     next.topBarDefault.actions = topActions.filter((a) => {
       const to = openTarget(a?.onTap) ?? openTarget(a?.action);
       if (to && removed(to)) {
-        report2.topBarActions.push(entryLabel(a));
+        report3.topBarActions.push(entryLabel(a));
         return false;
       }
       return true;
@@ -49868,7 +50061,7 @@ function rewriteNav(nav, removed, homeId) {
         for (const [dest, screenId] of Object.entries(cfg.screenIds)) {
           if (goneDest(dest) || typeof screenId === "string" && removed(screenId)) {
             delete cfg.screenIds[dest];
-            report2.surfaceDestinations.push(`${surface}:${dest}`);
+            report3.surfaceDestinations.push(`${surface}:${dest}`);
             if (!remainingRootIds.has(dest)) unmapped.add(dest);
           }
         }
@@ -49878,24 +50071,24 @@ function rewriteNav(nav, removed, homeId) {
           const gone = goneDest(id) || typeof id === "string" && unmapped.has(id);
           if (!gone) return true;
           const entry = `${surface}:${String(id)}`;
-          if (!report2.surfaceDestinations.includes(entry)) report2.surfaceDestinations.push(entry);
+          if (!report3.surfaceDestinations.includes(entry)) report3.surfaceDestinations.push(entry);
           return false;
         });
       }
     }
   }
   if (Array.isArray(next.appIconBadgeSources)) {
-    const goneActions = new Set(report2.topBarActions);
+    const goneActions = new Set(report3.topBarActions);
     const idsOf = (items) => new Set((items ?? []).map((i) => i.id).filter((x) => typeof x === "string"));
-    const removedTabs = new Set(report2.tabs);
-    const removedDrawer = new Set(report2.drawer);
+    const removedTabs = new Set(report3.tabs);
+    const removedDrawer = new Set(report3.drawer);
     const remainingTabIds = idsOf(asItems(next.tabBar));
     const remainingDrawerIds = idsOf(asItems(next.drawer));
     next.appIconBadgeSources = next.appIconBadgeSources.filter((s) => {
       if (typeof s !== "string") return true;
       const [kind, id] = [s.slice(0, s.indexOf(":")), s.slice(s.indexOf(":") + 1)];
       const gone = kind === "topBarAction" ? goneActions.has(id) : kind === "tab" ? removedTabs.has(id) && !remainingTabIds.has(id) : kind === "drawer" ? removedDrawer.has(id) && !remainingDrawerIds.has(id) : false;
-      if (gone) report2.appIconBadgeSources.push(s);
+      if (gone) report3.appIconBadgeSources.push(s);
       return !gone;
     });
   }
@@ -49905,7 +50098,7 @@ function rewriteNav(nav, removed, homeId) {
     for (const l of original) if (typeof l.screenId === "string") byId.set(l.screenId, l);
     const kept = original.filter((l) => {
       if (typeof l.screenId === "string" && removed(l.screenId)) {
-        report2.linkable.push(l.screenId);
+        report3.linkable.push(l.screenId);
         return false;
       }
       return true;
@@ -49949,7 +50142,7 @@ function rewriteNav(nav, removed, homeId) {
       const entry = { screenId: String(l.screenId) };
       if (toParent !== fromParent) entry.parentScreenId = { from: fromParent, to: toParent };
       if (toTab !== fromTab) entry.tabId = { from: fromTab, to: toTab };
-      report2.reparented.push(entry);
+      report3.reparented.push(entry);
     }
     for (const l of kept) {
       if (typeof l.parentScreenId === "string") l.parentScreenId = newParent(l);
@@ -49957,7 +50150,7 @@ function rewriteNav(nav, removed, homeId) {
     }
     next.linkableScreens = kept;
   }
-  return { nav: next, report: report2 };
+  return { nav: next, report: report3 };
 }
 function leftoverNavRefs(nav, removedIds) {
   const gone = new Set(removedIds);
@@ -50116,9 +50309,9 @@ function planTrim(src, keepIds, links) {
   for (const r of keptRoutes) for (const b of r.bundles) keptWorkers.add(b);
   const importsOf = (dir) => {
     const out2 = [];
-    for (const [rel, text6] of Object.entries(src.workerFiles)) {
+    for (const [rel, text8] of Object.entries(src.workerFiles)) {
       if (!rel.startsWith(`tier5-src/${dir}/`)) continue;
-      for (const m of text6.matchAll(/(?:\bfrom\s*|\bimport\s*\(?\s*|\brequire\s*\(\s*)["']\.\.\/([A-Za-z0-9_.-]+)(?:\/|["'])/g)) out2.push(m[1]);
+      for (const m of text8.matchAll(/(?:\bfrom\s*|\bimport\s*\(?\s*|\brequire\s*\(\s*)["']\.\.\/([A-Za-z0-9_.-]+)(?:\/|["'])/g)) out2.push(m[1]);
     }
     return out2;
   };
@@ -50164,9 +50357,9 @@ function planTrim(src, keepIds, links) {
       continue;
     }
     const block = edited.get(r);
-    let text6 = block ? serializeAt(block, app.dev, r.open) : void 0;
-    if (r === app.home && homeModules?.text !== void 0) text6 = homeModules.text;
-    if (text6 !== void 0) cut2(r.open, r.close, text6);
+    let text8 = block ? serializeAt(block, app.dev, r.open) : void 0;
+    if (r === app.home && homeModules?.text !== void 0) text8 = homeModules.text;
+    if (text8 !== void 0) cut2(r.open, r.close, text8);
   }
   if (templatedEmptied) cut2(templatedEmptied[0], templatedEmptied[1], "\n");
   dev += app.dev.slice(cursor);
@@ -50182,7 +50375,7 @@ function planTrim(src, keepIds, links) {
   for (const e of edits.sort((a, b) => b.start - a.start)) config = config.slice(0, e.start) + e.text + config.slice(e.end);
   const keptExact = keptRoutes.filter((r) => r.kind === "screen");
   const keptTemplated = keptRoutes.filter((r) => r.kind === "templated");
-  const report2 = {
+  const report3 = {
     ...links ? { links } : {},
     kept: { screens: sorted(keptExact.map((r) => r.label)), templated: sorted(keptTemplated.map((r) => r.label)) },
     implicit: implicit.map((r) => r.label),
@@ -50212,16 +50405,16 @@ function planTrim(src, keepIds, links) {
     },
     bytes: { before: Buffer.byteLength(app.dev), after: Buffer.byteLength(dev) }
   };
-  return { dev, config, removedWorkers, removedIds, report: report2 };
+  return { dev, config, removedWorkers, removedIds, report: report3 };
 }
 function homeModulesPass(app, kept, edited) {
   const verticals = Object.entries(EXPLORE_CARDS).filter(([, card2]) => app.exact.has(card2.screenId));
   const removedVertical = verticals.some(([, card2]) => !kept.has(app.exact.get(card2.screenId)));
   if (!removedVertical) return { dropped: [] };
   const block = edited.get(app.home);
-  const text6 = block ? serializeAt(block, app.dev, app.home.open) : app.dev.slice(app.home.open, app.home.close);
+  const text8 = block ? serializeAt(block, app.dev, app.home.open) : app.dev.slice(app.home.open, app.home.close);
   const installed = verticals.filter(([, card2]) => kept.has(app.exact.get(card2.screenId))).map(([v]) => v);
-  const patched = patchHomeModules(text6, installed);
+  const patched = patchHomeModules(text8, installed);
   if (!patched.droppedModules.length) return { dropped: [] };
   return { text: patched.src, dropped: patched.droppedModules };
 }
@@ -50935,8 +51128,8 @@ function isNoneEntry(entry) {
   const head = entryHead(entry);
   return NONE.test(entry) || head !== "" && NONE.test(head);
 }
-function parseDataAccess(text6, from) {
-  const body = text6.replace(/<!--[\s\S]*?(?:-->|$)/g, "");
+function parseDataAccess(text8, from) {
+  const body = text8.replace(/<!--[\s\S]*?(?:-->|$)/g, "");
   const heading = new RegExp(`(?:^|\\n)##[ \\t]+${DATA_ACCESS_HEADING}\\b[^\\n]*([\\s\\S]*?)(?=\\n##[ \\t]|$)`, "i").exec(body);
   if (!heading) return null;
   const lines = heading[1].split("\n").map((l) => l.trim()).filter((l) => l.startsWith("|"));
@@ -50963,13 +51156,13 @@ function readDataAccess(dir) {
   for (const name of ["SPEC.md", "MOBILE-UX.md"]) {
     const p = join49(dir, name);
     if (!existsSync50(p)) continue;
-    let text6;
+    let text8;
     try {
-      text6 = readFileSync55(p, "utf8");
+      text8 = readFileSync55(p, "utf8");
     } catch {
       continue;
     }
-    const plan = parseDataAccess(text6, name);
+    const plan = parseDataAccess(text8, name);
     if (plan) return plan;
   }
   return null;
@@ -51122,7 +51315,7 @@ function readTestConfig(dir) {
       if (input !== void 0 && (!input || typeof input !== "object" || Array.isArray(input) || Object.values(input).some((v) => typeof v !== "string"))) {
         throw new Error(`${TEST_CONFIG_FILE}: journeys[${i}].input must be an object of string values \u2014 the screen input a nav edge would send, e.g. { "id": "svc-0001" }`);
       }
-      if (!Array.isArray(journey.expectText) || !journey.expectText.length || journey.expectText.some((text6) => typeof text6 !== "string" || !text6.trim())) {
+      if (!Array.isArray(journey.expectText) || !journey.expectText.length || journey.expectText.some((text8) => typeof text8 !== "string" || !text8.trim())) {
         throw new Error(`${TEST_CONFIG_FILE}: journeys[${i}] needs non-empty expectText values that prove a visible result`);
       }
     });
@@ -51183,16 +51376,16 @@ function readCannedResponses() {
 }
 function makeRecordingWixCall(send2, token, app) {
   const events = [];
-  const refused = [];
+  const refused2 = [];
   let id = 0;
   const call = async (method, path2, body) => {
     const verb = method.toUpperCase();
     if (/[#\x00-\x1F\x7F]/.test(path2)) {
-      refused.push(`${verb} ${path2}`);
+      refused2.push(`${verb} ${path2}`);
       throw new Error(`--record refused ${verb} ${path2}: the path carries a fragment or control character \u2014 not a provable read`);
     }
     if (!isProvenRead(verb, path2)) {
-      refused.push(`${verb} ${path2}`);
+      refused2.push(`${verb} ${path2}`);
       throw new Error(`--record refused ${verb} ${path2}: recording sends only proven reads (GET, or POST ending in /query, /search, /list*, /get*, /count, /aggregate, /facets, /connections) \u2014 if this IS a read, add its rule to dev/net-mocks.json by hand`);
     }
     const bodyStr = body === void 0 ? void 0 : typeof body === "string" ? body : JSON.stringify(body);
@@ -51219,7 +51412,7 @@ function makeRecordingWixCall(send2, token, app) {
       return r.body;
     }
   };
-  return { call, events, refused };
+  return { call, events, refused: refused2 };
 }
 async function runRecordPass(opts) {
   const bootErrors = [];
@@ -51623,9 +51816,9 @@ function formatReport(r) {
   out2.push(`transport: ${r.transport}`);
   if (r.nativeDecode) {
     for (const platform of ["ios", "android"]) {
-      const summary = r.nativeDecode[platform];
-      if (!summary) continue;
-      out2.push("unavailable" in summary ? `native decode ${platform}: unavailable \u2014 ${summary.reason}` : `native decode ${platform}: ${summary.checked} checked, ${summary.failed} failed in ${r.nativeDecode.wallMs}ms`);
+      const summary2 = r.nativeDecode[platform];
+      if (!summary2) continue;
+      out2.push("unavailable" in summary2 ? `native decode ${platform}: unavailable \u2014 ${summary2.reason}` : `native decode ${platform}: ${summary2.checked} checked, ${summary2.failed} failed in ${r.nativeDecode.wallMs}ms`);
     }
   }
   out2.push("");
@@ -51768,14 +51961,14 @@ import { join as join51 } from "node:path";
 function mobileUxIssues(dir, strict) {
   const file = join51(dir, "MOBILE-UX.md");
   if (!existsSync52(file)) return [];
-  let text6;
+  let text8;
   try {
-    text6 = readFileSync57(file, "utf8");
+    text8 = readFileSync57(file, "utf8");
   } catch {
     return [];
   }
-  if (!text6) return [];
-  return mobileUxMarkerFindings(text6, recordedRenderWidths(dir)).map((finding) => {
+  if (!text8) return [];
+  return mobileUxMarkerFindings(text8, recordedRenderWidths(dir)).map((finding) => {
     const scaffoldAdvisory = finding.code === "missing-width-evidence";
     return {
       screen: null,
@@ -52070,7 +52263,7 @@ async function pinnedFetch(url, init, addresses, maxResponseBytes) {
   const headers2 = Object.fromEntries(new Headers(init.headers).entries());
   const request = url.protocol === "https:" ? httpsRequest : httpRequest;
   const hostname2 = url.hostname.replace(/^\[|\]$/g, "");
-  return await new Promise((resolve52, reject) => {
+  return await new Promise((resolve53, reject) => {
     let settled = false;
     const finish2 = (fn) => {
       if (settled) return;
@@ -52107,7 +52300,7 @@ async function pinnedFetch(url, init, addresses, maxResponseBytes) {
         }
         const responseHeaders = new Headers();
         for (const [key2, value] of Object.entries(response.headers)) if (value !== void 0) responseHeaders.set(key2, Array.isArray(value) ? value.join(", ") : value);
-        resolve52(new Response(bytes2, { status: response.statusCode, statusText: response.statusMessage, headers: responseHeaders }));
+        resolve53(new Response(bytes2, { status: response.statusCode, statusText: response.statusMessage, headers: responseHeaders }));
       }));
     });
     req.once("error", (error) => finish2(() => reject(error)));
@@ -52407,7 +52600,7 @@ function createLocalTestSandbox() {
           }
         })();
       `;
-      return await new Promise((resolve52, reject) => {
+      return await new Promise((resolve53, reject) => {
         const { port1, port2 } = new MessageChannel();
         const serializableContext = {
           auth: context.auth,
@@ -52483,7 +52676,7 @@ function createLocalTestSandbox() {
             timer = setTimeout(() => finish2(() => reject(new SandboxError("timeout", `execution exceeded ${limits.timeoutMs}ms`))), Math.max(1, limits.timeoutMs));
             return;
           }
-          if (message.ok) finish2(() => resolve52({ value: message.value, durationMs: Date.now() - started }));
+          if (message.ok) finish2(() => resolve53({ value: message.value, durationMs: Date.now() - started }));
           else finish2(() => reject(new SandboxError("execution_failed", message.message ?? "handler failed")));
         });
         worker.once("error", (error) => finish2(() => reject(new SandboxError("execution_failed", error.message))));
@@ -53599,12 +53792,12 @@ async function runRemoteFunctionOperation(input) {
   if (input.boCookie) headers2.cookie = input.boCookie;
   if (input.previewToken) headers2["x-himalaya-preview-token"] = input.previewToken;
   const response = await (input.fetchImpl ?? fetch)(url, { method, headers: headers2 });
-  const text6 = await response.text();
+  const text8 = await response.text();
   let body;
   try {
-    body = JSON.parse(text6);
+    body = JSON.parse(text8);
   } catch {
-    body = text6;
+    body = text8;
   }
   return { ok: response.ok, status: response.status, body };
 }
@@ -53692,7 +53885,7 @@ function flagShapedInputs(args) {
 function guarded(h) {
   return async (args, deps) => {
     const bad2 = flagShapedInputs(args);
-    if (bad2.length) return text5(`refused: ${bad2.join(", ")} may not start with "-" (it would be read as a himi flag)`, true);
+    if (bad2.length) return text6(`refused: ${bad2.join(", ")} may not start with "-" (it would be read as a himi flag)`, true);
     return h(args, deps);
   };
 }
@@ -53845,7 +54038,7 @@ function rawTools() {
           return json3({ ...await d.preview.start(await appDir2(a, d)), hint: PREVIEW_HINT });
         } catch (e) {
           const log = e.log;
-          return text5(`${e.message}${typeof log === "string" && log ? `
+          return text6(`${e.message}${typeof log === "string" && log ? `
 
 ${log}` : ""}`, true);
         }
@@ -53921,14 +54114,14 @@ ${log}` : ""}`, true);
     }
   ];
 }
-var MAX_TEXT2, clip, text5, json3, opt, sw, DIR, LEARN, CHECK, LOCAL_WRITE, PUBLISH, PREVIEW_HINT, LOGIN_HINT;
+var MAX_TEXT2, clip, text6, json3, opt, sw, DIR, LEARN, CHECK, LOCAL_WRITE, PUBLISH, PREVIEW_HINT, LOGIN_HINT;
 var init_tools = __esm({
   "src/mcp/tools.ts"() {
     MAX_TEXT2 = 8e4;
     clip = (s) => s.length <= MAX_TEXT2 ? s : `${s.slice(0, MAX_TEXT2)}
 \u2026 [truncated ${s.length - MAX_TEXT2} chars \u2014 re-run the command in a terminal for the full output]`;
-    text5 = (t, isError = false) => ({ content: [{ type: "text", text: t }], ...isError ? { isError: true } : {} });
-    json3 = (o) => text5(JSON.stringify(o, null, 2));
+    text6 = (t, isError = false) => ({ content: [{ type: "text", text: t }], ...isError ? { isError: true } : {} });
+    json3 = (o) => text6(JSON.stringify(o, null, 2));
     opt = (flag, v) => typeof v === "string" && v ? [flag, v] : typeof v === "number" ? [flag, String(v)] : [];
     sw = (flag, v) => v === true ? [flag] : [];
     DIR = z.string().optional().describe("The app (content package) directory. Default: the workspace root the host opened, else the server's working directory.");
@@ -54004,9 +54197,9 @@ async function startMcpServer(opts) {
     },
     readFile: (p) => readFileSync59(p)
   };
-  const closed = new Promise((resolve52) => {
-    stdin.once("end", resolve52);
-    stdin.once("close", resolve52);
+  const closed = new Promise((resolve53) => {
+    stdin.once("end", resolve53);
+    stdin.once("close", resolve53);
   });
   const handle = serveStdio(
     () => {
@@ -54248,7 +54441,7 @@ function fieldAt(path2) {
   if (path2 === null) return void 0;
   return path2.match(/\.([^.[\]]+)$/)?.[1];
 }
-function mergeNativeDecode(report2, run2) {
+function mergeNativeDecode(report3, run2) {
   const platformLabel = run2.platform === "ios" ? "iOS" : "Android";
   const nativeFailures = run2.verdicts.flatMap((verdict) => verdict.errors.map((error) => ({
     screen: verdict.screenId,
@@ -54261,18 +54454,18 @@ function mergeNativeDecode(report2, run2) {
     ...error.actual ? { actual: error.actual } : {},
     hint: `This descriptor ships as a full-screen \u201CCouldn't load\u201D; fix the typed field and rerun \`himi test --native ${run2.platform}\`.`
   })));
-  const failures = [...report2.failures, ...nativeFailures];
+  const failures = [...report3.failures, ...nativeFailures];
   const failedScreens = new Set(failures.map((finding) => finding.screen));
   return {
-    ...report2,
-    ok: report2.ok && nativeFailures.length === 0,
+    ...report3,
+    ok: report3.ok && nativeFailures.length === 0,
     failures,
-    counts: { ...report2.counts, errors: failures.length },
-    screens: { ...report2.screens, clean: report2.screens.total - failedScreens.size, failed: failedScreens.size },
+    counts: { ...report3.counts, errors: failures.length },
+    screens: { ...report3.screens, clean: report3.screens.total - failedScreens.size, failed: failedScreens.size },
     nativeDecode: {
-      ...report2.nativeDecode,
+      ...report3.nativeDecode,
       [run2.platform]: { checked: run2.verdicts.length, failed: run2.verdicts.filter((verdict) => !verdict.ok).length },
-      wallMs: (report2.nativeDecode?.wallMs ?? 0) + run2.wallMs
+      wallMs: (report3.nativeDecode?.wallMs ?? 0) + run2.wallMs
     }
   };
 }
@@ -54298,7 +54491,7 @@ __export(browser_authoring_exports, {
   runBrowserAuthoring: () => runBrowserAuthoring,
   sdkSubpathReader: () => sdkSubpathReader
 });
-import { createServer as createServer4 } from "node:http";
+import { createServer as createServer5 } from "node:http";
 import { createHash as createHash29, randomBytes as randomBytes4 } from "node:crypto";
 import { existsSync as existsSync55, readdirSync as readdirSync27, readFileSync as readFileSync61, realpathSync as realpathSync7, statSync as statSync13 } from "node:fs";
 import { join as join54, posix as posix2, relative as relative11, sep as sep14 } from "node:path";
@@ -54385,10 +54578,10 @@ function collectSdkModules(files, resolveSubpath) {
   for (const source of Object.values(files)) visit(source);
   return { modules, unsupported };
 }
-function sdkSubpathReader(resolve52) {
+function sdkSubpathReader(resolve53) {
   return (sub) => {
     try {
-      return readFileSync61(resolve52(`@wix/himalaya/${sub}`), "utf8");
+      return readFileSync61(resolve53(`@wix/himalaya/${sub}`), "utf8");
     } catch {
       return null;
     }
@@ -54466,10 +54659,10 @@ async function runBrowserAuthoring(opts) {
   const token = mintToken2(payload);
   const unusable = await probeAuthoringPage(opts.authoringBase, opts.fetchImpl, opts.probeTimeoutMs);
   if (unusable) throw new Error(unusable);
-  return await new Promise((resolve52, reject) => {
+  return await new Promise((resolve53, reject) => {
     let settled = false;
     let url = "";
-    const server = createServer4();
+    const server = createServer5();
     const finish2 = (fn) => {
       if (settled) return;
       settled = true;
@@ -54517,8 +54710,8 @@ async function runBrowserAuthoring(opts) {
           return;
         }
         res.writeHead(200, { "content-type": "text/plain" }).end("ok");
-        const report2 = body.result;
-        finish2(() => resolve52({ report: report2, url }));
+        const report3 = body.result;
+        finish2(() => resolve53({ report: report3, url }));
       })();
     });
     server.on("error", (e) => finish2(() => reject(e)));
@@ -55195,10 +55388,10 @@ async function hostedAuthUrl(req, visitorToken, fetchImpl = fetch) {
       }
     })
   });
-  const text6 = await res.text();
+  const text8 = await res.text();
   let parsed = {};
   try {
-    parsed = text6 ? JSON.parse(text6) : {};
+    parsed = text8 ? JSON.parse(text8) : {};
   } catch {
   }
   const fullUrl = parsed.redirectSession?.fullUrl;
@@ -55218,10 +55411,10 @@ async function exchangeAuthCode(cfg, code, verifier, fetchImpl = fetch) {
       redirectUri: cfg.redirectUri
     })
   });
-  const text6 = await res.text();
+  const text8 = await res.text();
   let parsed = {};
   try {
-    parsed = text6 ? JSON.parse(text6) : {};
+    parsed = text8 ? JSON.parse(text8) : {};
   } catch {
   }
   if (res.status !== 200 || !parsed.access_token) throw new Error(`token exchange failed (${res.status})`);
@@ -56435,11 +56628,11 @@ async function localizeConfigResponse(res, kind, header) {
       header
     )
   };
-  const text6 = JSON.stringify(next);
+  const text8 = JSON.stringify(next);
   const headers2 = new Headers(res.headers);
   headers2.delete("etag");
-  headers2.set("content-length", String(new TextEncoder().encode(text6).length));
-  return new Response(text6, { status: 200, headers: headers2 });
+  headers2.set("content-length", String(new TextEncoder().encode(text8).length));
+  return new Response(text8, { status: 200, headers: headers2 });
 }
 function makeRunHandler(opts) {
   const mount = opts.chrome === "app" ? "/app" : "/preview";
@@ -56562,7 +56755,7 @@ var init_run_handler = __esm({
 });
 
 // ../../core/serve-runtime/src/node-adapter.ts
-import { createServer as createServer5 } from "node:http";
+import { createServer as createServer6 } from "node:http";
 async function toRequest(req) {
   const method = (req.method ?? "GET").toUpperCase();
   const host = typeof req.headers.host === "string" && req.headers.host || "serve.local";
@@ -56606,7 +56799,7 @@ async function writeResponse(res, response) {
   res.end(ab.byteLength ? Buffer.from(ab) : void 0);
 }
 function nodeAdapter(handler) {
-  return createServer5(async (req, res) => {
+  return createServer6(async (req, res) => {
     try {
       const response = await handler(await toRequest(req));
       await writeResponse(res, response);
@@ -56627,8 +56820,8 @@ var init_node_adapter = __esm({
 function authConfigOf(appConfig) {
   if (!appConfig) return void 0;
   try {
-    const text6 = typeof appConfig === "string" ? appConfig : new TextDecoder().decode(appConfig);
-    return JSON.parse(text6)?.authConfig ?? void 0;
+    const text8 = typeof appConfig === "string" ? appConfig : new TextDecoder().decode(appConfig);
+    return JSON.parse(text8)?.authConfig ?? void 0;
   } catch {
     return void 0;
   }
@@ -56960,7 +57153,7 @@ __export(run_watch_exports, {
   watchedContentDir: () => watchedContentDir,
   writeRunRecord: () => writeRunRecord
 });
-import { closeSync as closeSync3, constants, existsSync as existsSync59, fstatSync, lstatSync as lstatSync12, statSync as statSync15, mkdirSync as mkdirSync28, openSync as openSync3, readFileSync as readFileSync66, realpathSync as realpathSync8, renameSync as renameSync6, rmSync as rmSync14, writeFileSync as writeFileSync23, watch as fsWatch } from "node:fs";
+import { closeSync as closeSync4, constants, existsSync as existsSync59, fstatSync, lstatSync as lstatSync12, statSync as statSync15, mkdirSync as mkdirSync28, openSync as openSync3, readFileSync as readFileSync66, realpathSync as realpathSync8, renameSync as renameSync6, rmSync as rmSync14, writeFileSync as writeFileSync23, watch as fsWatch } from "node:fs";
 import { randomUUID as randomUUID4 } from "node:crypto";
 import { extname as extname4, join as join58, resolve as resolve46, sep as sep15 } from "node:path";
 function diffReleases(prev, next) {
@@ -57159,7 +57352,7 @@ function readConfined(root, rel) {
       if (!fstatSync(fd).isFile()) return null;
       return readFileSync66(fd);
     } finally {
-      closeSync3(fd);
+      closeSync4(fd);
     }
   } catch {
     return null;
@@ -57209,7 +57402,7 @@ __export(run_browser_exports, {
   releasePayloadFromDir: () => releasePayloadFromDir,
   runInBrowser: () => runInBrowser
 });
-import { createServer as createServer6 } from "node:http";
+import { createServer as createServer7 } from "node:http";
 import { existsSync as existsSync60, readFileSync as readFileSync67 } from "node:fs";
 import { spawnSync as spawnSync3 } from "node:child_process";
 import { dirname as dirname32, resolve as resolve47 } from "node:path";
@@ -57238,16 +57431,16 @@ async function releasePayloadFromDir(root, app, header) {
   const manifest = await store.getManifest(app);
   if (!manifest) throw new Error(`no release manifest for ${app} under ${root}`);
   const b64 = (b) => b ? Buffer.from(b).toString("base64") : void 0;
-  const text6 = (b) => b ? new TextDecoder().decode(b) : void 0;
+  const text8 = (b) => b ? new TextDecoder().decode(b) : void 0;
   const screens = {};
   const docs = {};
   const addDoc = async (hash) => {
     if (!hash || docs[hash] !== void 0) return;
-    const d = text6(await store.getDoc?.(app, hash) ?? null);
+    const d = text8(await store.getDoc?.(app, hash) ?? null);
     if (d !== void 0) docs[hash] = d;
   };
   for (const [id, meta] of Object.entries(manifest.screens ?? {})) {
-    const s = text6(await store.getScreen(app, id));
+    const s = text8(await store.getScreen(app, id));
     if (s !== void 0) screens[id] = s;
     await addDoc(meta.descriptorHash);
   }
@@ -57268,10 +57461,10 @@ async function releasePayloadFromDir(root, app, header) {
   }
   const widgets = {};
   for (const id of Object.keys(manifest.widgets ?? {})) {
-    const w = text6(await store.getWidget?.(app, id) ?? null);
+    const w = text8(await store.getWidget?.(app, id) ?? null);
     if (w !== void 0) widgets[id] = w;
   }
-  const appConfig = text6(await store.getAppConfig(app));
+  const appConfig = text8(await store.getAppConfig(app));
   const wixClientId = appConfigWixClientId(appConfig);
   return {
     app,
@@ -57281,7 +57474,7 @@ async function releasePayloadFromDir(root, app, header) {
     docs,
     assets,
     widgets,
-    tokens: text6(await store.getTokens(app)),
+    tokens: text8(await store.getTokens(app)),
     appConfig,
     icon: b64(await store.getIcon?.(app) ?? null),
     header,
@@ -57294,7 +57487,7 @@ async function runInBrowser(releaseRoot, app, header, opts = {}) {
   const payload = { ...await releasePayloadFromDir(releaseRoot, app, header), chrome: opts.chrome ?? "preview" };
   const body = JSON.stringify(payload);
   const missed = [];
-  const server = createServer6((req, res) => {
+  const server = createServer7((req, res) => {
     const path2 = (req.url ?? "/").split("?")[0];
     if (path2 === RUN_IDENTITY_PATH && opts.identityDir) {
       res.writeHead(200, { "content-type": "application/json", "cache-control": "no-store" });
@@ -57811,10 +58004,10 @@ function scalar3(v) {
   }
   return t;
 }
-function parseStoreConfig(text6) {
+function parseStoreConfig(text8) {
   const cfg = {};
   let section2 = null;
-  for (const raw of text6.split("\n")) {
+  for (const raw of text8.split("\n")) {
     const line = strip2(raw);
     if (!line.trim()) continue;
     const indented = /^\s+/.test(raw);
@@ -57873,10 +58066,10 @@ function profilePath(name, home = homedir5()) {
   }
   return join59(credentialsDir(home), `${name}.json`);
 }
-function parseProfile(text6, label2) {
+function parseProfile(text8, label2) {
   let doc;
   try {
-    doc = JSON.parse(text6);
+    doc = JSON.parse(text8);
   } catch (e) {
     throw new Error(`${label2} is not valid JSON: ${e.message}`);
   }
@@ -58485,11 +58678,11 @@ async function registerBundleId(opts) {
     const j = await res.json();
     return { status: "created", id: j.data?.id };
   }
-  const text6 = await res.text();
-  if (res.status === 409 || /already (exists|in use)|duplicate|ENTITY_ERROR.*identifier/i.test(text6)) {
+  const text8 = await res.text();
+  if (res.status === 409 || /already (exists|in use)|duplicate|ENTITY_ERROR.*identifier/i.test(text8)) {
     return { status: "exists" };
   }
-  throw new Error(`POST /v1/bundleIds \u2192 ${res.status}: ${text6.slice(0, 300)}`);
+  throw new Error(`POST /v1/bundleIds \u2192 ${res.status}: ${text8.slice(0, 300)}`);
 }
 async function main2() {
   const [app, ...rest] = process.argv.slice(2);
@@ -58767,12 +58960,12 @@ async function runRemoteSecretsCommand(operation, flags, io, options) {
       body = JSON.stringify({ value });
     }
     const response = await (options.fetchImpl ?? fetch)(url, { method: operation === "list" ? "GET" : operation === "set" ? "PUT" : "POST", headers: headers2, body });
-    const text6 = await response.text();
+    const text8 = await response.text();
     let output;
     try {
-      output = JSON.parse(text6);
+      output = JSON.parse(text8);
     } catch {
-      output = text6;
+      output = text8;
     }
     if (!response.ok) throw new Error(typeof output === "string" ? output : JSON.stringify(output));
     io.log(JSON.stringify(output));
@@ -58788,6 +58981,217 @@ var init_secrets2 = __esm({
   }
 });
 
+// ../serve-cli/src/push-send.ts
+async function pushSendRequest(options) {
+  const refusal = localRefusal(options);
+  if (refusal) return { ok: false, status: 0, body: null, error: refusal };
+  try {
+    const response = await (options.fetchImpl ?? fetch)(`${options.target.control.replace(/\/+$/, "")}/v1/admin/push/send`, {
+      method: "POST",
+      headers: headersFor(options),
+      redirect: "error",
+      signal: AbortSignal.timeout(TIMEOUT_MS),
+      body: JSON.stringify(options.body)
+    });
+    const retryAfterSec = response.status === 429 ? Number(response.headers.get("retry-after")) : NaN;
+    return {
+      ok: response.ok,
+      status: response.status,
+      body: objectFrom(await response.text()),
+      ...Number.isFinite(retryAfterSec) && retryAfterSec > 0 ? { retryAfterSec } : {}
+    };
+  } catch {
+    return { ok: false, status: 0, body: null, error: "push_send_unreachable" };
+  }
+}
+function localRefusal(options) {
+  if (!options.target.controlToken) return "control_token_required";
+  if (!options.wixToken) return "wix_account_token_required";
+  if (!options.siteToken) return "site_token_required";
+  if (credentialHostRefusal(options.target.control)) return "insecure_target";
+  if (options.previewTag !== void 0 && !PREVIEW_TAG2.test(options.previewTag)) return "invalid_preview_tag";
+  return void 0;
+}
+function headersFor(options) {
+  return {
+    "x-control-token": options.target.controlToken,
+    // RAW, never `Bearer ` — what normalizeWixAuthorization and token-info expect.
+    Authorization: options.wixToken,
+    [SITE_TOKEN_HEADER]: options.siteToken,
+    accept: "application/json",
+    "content-type": "application/json",
+    ...options.previewTag ? { "x-wix-route-serve": options.previewTag } : {}
+  };
+}
+function objectFrom(text8) {
+  try {
+    const value = text8 ? JSON.parse(text8) : null;
+    return value && typeof value === "object" && !Array.isArray(value) ? value : null;
+  } catch {
+    return null;
+  }
+}
+var SITE_TOKEN_HEADER, PREVIEW_TAG2, TIMEOUT_MS;
+var init_push_send = __esm({
+  "../serve-cli/src/push-send.ts"() {
+    init_credential_hosts();
+    SITE_TOKEN_HEADER = "x-himi-site-token";
+    PREVIEW_TAG2 = /^dp-[a-z0-9]+$/;
+    TIMEOUT_MS = 6e4;
+  }
+});
+
+// ../../core/serve-control/src/push-send-service.ts
+var PUSH_SEND_ERROR_CODES;
+var init_push_send_service = __esm({
+  "../../core/serve-control/src/push-send-service.ts"() {
+    PUSH_SEND_ERROR_CODES = [
+      "unauthorized",
+      "token_revoked",
+      "revocation_check_unavailable",
+      "method_not_allowed",
+      "rate_limited",
+      "forbidden_cross_tenant",
+      "forbidden_site",
+      "site_check_unavailable",
+      "push_send_unconfigured",
+      "push_send_unavailable",
+      "invalid_input",
+      "payload_too_large",
+      "unknown_field",
+      "invalid_app_id",
+      "invalid_site_id",
+      "invalid_member_email",
+      "invalid_title",
+      "invalid_body",
+      "invalid_link",
+      "invalid_request_id",
+      "invalid_dry_run",
+      "link_not_routable",
+      "app_config_unavailable",
+      "push_not_ready",
+      "site_token_required",
+      "site_token_invalid",
+      "site_token_unverifiable",
+      "member_not_found",
+      "member_ambiguous",
+      "member_not_active",
+      "member_read_forbidden",
+      "member_lookup_unavailable",
+      "ping_unconfigured",
+      "ping_permission_denied",
+      "ping_rejected",
+      "ping_rate_limited",
+      "send_outcome_unknown"
+    ];
+  }
+});
+
+// src/notify-ping.ts
+var notify_ping_exports = {};
+__export(notify_ping_exports, {
+  runNotifyPing: () => runNotifyPing
+});
+import { randomUUID as randomUUID5 } from "node:crypto";
+import { resolve as resolve49 } from "node:path";
+function refuse4(io, error, hint, exit = 2, extra = {}) {
+  io.error(JSON.stringify({ ok: false, error, ...hint ? { hint } : {}, ...extra }));
+  return exit;
+}
+async function runNotifyPing(flags, io, deps = {}) {
+  const flagError = flagRefusal(flags);
+  if (flagError) return refuse4(io, flagError);
+  const input = mergePushInputs(pushInputsFromContent(resolve49(text7(flags.content) ?? process.cwd())), flags);
+  const missing = [...input.app ? [] : ["app"], ...input.site ? [] : ["site"], ...REQUIRED_FLAGS.filter((f) => !text7(flags[f]))];
+  if (missing.length) return refuse4(io, "needs_input", "Name the app and site (or --content), the member's login email, a title and a link.", 2, { missing });
+  const requestId2 = text7(flags["request-id"]) ?? (deps.newRequestId ?? randomUUID5)();
+  if (!UUID_RE.test(requestId2)) return refuse4(io, "invalid_request_id", "Reuse the requestId a previous send printed.");
+  const owner = await hostedOwnerSession(flags, deps);
+  if (!owner.ok) return refuse4(io, owner.error, owner.hint, owner.exit);
+  const { session } = owner;
+  const ownership = await verifyAppOwnership({ ownerIssue: session.ownerIssue, controlToken: session.controlToken, declaredName: input.app, fetchImpl: deps.fetchImpl });
+  if (ownership.state !== "owned") return refuse4(io, `app_ownership_${ownership.state}`, "Sending requires the app owner.", 1);
+  let siteToken2;
+  try {
+    siteToken2 = await (deps.siteToken ?? siteToken)(input.site);
+  } catch {
+    return refuse4(io, "wix_site_token_required", "Run wix login as the site owner; the site token reads this site's members.", 1);
+  }
+  const body = {
+    app: ownership.slug,
+    site: input.site,
+    memberEmail: text7(flags["member-email"]),
+    title: text7(flags.title),
+    ...text7(flags.body) ? { body: text7(flags.body) } : {},
+    link: text7(flags.link),
+    requestId: requestId2,
+    ...flags["dry-run"] === true ? { dryRun: true } : {}
+  };
+  const http = await pushSendRequest({ target: session.target, wixToken: session.wixToken, siteToken: siteToken2, body, previewTag: session.previewTag, fetchImpl: deps.fetchImpl });
+  return report2(http, body, flags, io);
+}
+function flagRefusal(flags) {
+  if (LOCAL_SENDER_FLAGS.some((f) => flags[f] !== void 0)) return "flag_not_supported_with_ping";
+  if (SWITCHES.some((f) => flags[f] !== void 0 && typeof flags[f] !== "boolean")) return "invalid_boolean_flag";
+  return void 0;
+}
+function report2(http, sent, flags, io) {
+  const code = refusalCode(http);
+  if (code === "send_outcome_unknown") {
+    return refuse4(io, code, `Ping may have accepted it. Re-run the same command with --request-id ${sent.requestId}: Ping runs one request at most once per site for 24 hours.`, 1, { requestId: sent.requestId });
+  }
+  if (code === "rate_limited" && http.retryAfterSec) {
+    return refuse4(io, code, `Test sends are limited per owner; retry in ${http.retryAfterSec} seconds.`, 1, { retryAfterSec: http.retryAfterSec });
+  }
+  if (code) return refuse4(io, code, HINTS[code], 1);
+  if (flags.json === true) io.log(JSON.stringify(http.body, null, 2));
+  else io.log(summary(http.body ?? {}, sent));
+  return 0;
+}
+function refusalCode(http) {
+  if (http.error) return http.error === "push_send_unreachable" ? "send_outcome_unknown" : http.error;
+  if (http.ok && (http.body?.state === "accepted" || http.body?.state === "dry_run")) return void 0;
+  const code = String(http.body?.error ?? "");
+  if (KNOWN_CODES.has(code)) return code;
+  return http.ok || http.status >= 500 ? "send_outcome_unknown" : "push_send_failed";
+}
+function summary(result, sent) {
+  if (result.state === "dry_run") {
+    return `Dry run passed: ${sent.memberEmail} is an approved member, the link routes, and push is ready for ${sent.app}. No notification was sent.`;
+  }
+  if (result.deduplicated === true) {
+    return `Ping already ran request ${sent.requestId}; the earlier send stands and no second notification was sent.`;
+  }
+  return `Ping accepted request ${sent.requestId} for ${sent.memberEmail}. Ping does not confirm delivery: it reaches the member's signed-in devices with notifications allowed.`;
+}
+var LOCAL_SENDER_FLAGS, SWITCHES, REQUIRED_FLAGS, UUID_RE, KNOWN_CODES, HINTS, text7;
+var init_notify_ping = __esm({
+  "src/notify-ping.ts"() {
+    init_push_send();
+    init_push_send_service();
+    init_hosted_owner();
+    init_owner_claim();
+    init_push_onboarding();
+    init_wix_owner();
+    LOCAL_SENDER_FLAGS = ["token", "device", "all", "admin-url", "admin-session", "silent", "badge", "data", "category", "channel", "platform", "bundle-id"];
+    SWITCHES = ["json", "dry-run"];
+    REQUIRED_FLAGS = ["member-email", "title", "link"];
+    UUID_RE = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;
+    KNOWN_CODES = new Set(PUSH_SEND_ERROR_CODES);
+    HINTS = {
+      push_not_ready: "Run himi notify setup for this app and site first; status must be ready.",
+      member_not_found: "Use the login email of an approved member of this site.",
+      member_ambiguous: "More than one member has this login email; resolve it in the site's Members.",
+      member_not_active: "The member must be approved before they can be notified.",
+      link_not_routable: "Link to a screen this app's published release ships, e.g. <scheme>://screen/<screenId>?id=\u2026.",
+      forbidden_site: "The Wix account from wix login must own this site.",
+      site_token_invalid: "Run wix login as the site owner; the site token must belong to the app owner's account.",
+      ping_permission_denied: "Himi Serve is not permitted to send through Ping; this is a platform issue, not your setup."
+    };
+    text7 = (v) => typeof v === "string" && v.length > 0 ? v : void 0;
+  }
+});
+
 // src/notify.ts
 var notify_exports = {};
 __export(notify_exports, {
@@ -58890,7 +59294,7 @@ async function runNotify(pos, flags, io, deps = {}) {
     } catch {
       reachable = false;
     }
-    const report2 = {
+    const report3 = {
       // BOTH platforms must be ready. Considering only iOS meant a server with an APNs
       // key but no Firebase credentials reported ok and exited 0, while every Android
       // send would fail — from the command whose whole job is to answer that question.
@@ -58903,15 +59307,15 @@ async function runNotify(pos, flags, io, deps = {}) {
       ...reachable && authed && !senders ? { hint: "this admin-server predates /v1/admin/push-doctor \u2014 upgrade it to see sender readiness" } : {}
     };
     if (json6) {
-      print(report2);
-      return report2.ok ? 0 : 1;
+      print(report3);
+      return report3.ok ? 0 : 1;
     }
     io.log(
       `admin       ${adminUrl} ${reachable ? authed ? "reachable, authenticated" : "reachable, NOT authenticated" : "UNREACHABLE"}`
     );
     if (!senders) {
       io.log("senders     unknown \u2014 credentials live on the admin-server, and it did not report them");
-      if (report2.hint) io.log(`            ${report2.hint}`);
+      if (report3.hint) io.log(`            ${report3.hint}`);
       return 1;
     }
     for (const [platform, r] of [
@@ -58921,7 +59325,7 @@ async function runNotify(pos, flags, io, deps = {}) {
       io.log(`${platform.padEnd(11)} ${r.sender}${r.note ? ` \u2014 ${r.note}` : ""}`);
       if (r.missing.length) io.log(`            missing on the server: ${r.missing.join(", ")}`);
     }
-    return report2.ok ? 0 : 1;
+    return report3.ok ? 0 : 1;
   }
   const app = str9(flags.app);
   if (!app) {
@@ -59100,10 +59504,10 @@ function makeTransport(fetchImpl, auth, timeoutMs = DEFAULT_TIMEOUT_MS4) {
       body: body === void 0 ? void 0 : JSON.stringify(body),
       signal: AbortSignal.timeout(timeoutMs)
     });
-    const text6 = await res.text();
-    let parsed = text6;
+    const text8 = await res.text();
+    let parsed = text8;
     try {
-      parsed = text6 ? JSON.parse(text6) : null;
+      parsed = text8 ? JSON.parse(text8) : null;
     } catch {
     }
     if (!res.ok) throw new WixApiError2(res.status, method, path2, parsed);
@@ -59200,10 +59604,10 @@ async function mintVisitorToken(fetchImpl, clientId) {
     body: JSON.stringify({ clientId, grantType: "anonymous" }),
     signal: AbortSignal.timeout(8e3)
   });
-  const text6 = await res.text();
-  let parsed = text6;
+  const text8 = await res.text();
+  let parsed = text8;
   try {
-    parsed = text6 ? JSON.parse(text6) : null;
+    parsed = text8 ? JSON.parse(text8) : null;
   } catch {
   }
   if (!res.ok) throw new WixApiError2(res.status, "POST", "/oauth2/token", parsed);
@@ -59218,28 +59622,28 @@ var init_visitor_auth = __esm({
 });
 
 // src/site-analyze/copy-clean.ts
-function isTemplatePlaceholder(text6) {
-  return PLACEHOLDER_RE.test(text6);
+function isTemplatePlaceholder(text8) {
+  return PLACEHOLDER_RE.test(text8);
 }
 function cleanText(raw, cap) {
   const s = String(raw ?? "").replace(/[\u0000-\u001F\u007F]/g, " ").replace(/\s+/g, " ").trim();
   return s.length > cap ? `${s.slice(0, cap - 1).trimEnd()}\u2026` : s;
 }
-function stripPii(text6) {
-  return text6.replace(EMAIL_RE2, "").replace(PHONE_SHAPE_RE, (m) => {
+function stripPii(text8) {
+  return text8.replace(EMAIL_RE2, "").replace(PHONE_SHAPE_RE, (m) => {
     const digits2 = (m.match(ANY_DIGIT_RE) ?? []).length;
     return digits2 >= PHONE_MIN_DIGITS && PHONE_DIGIT_RUN_RE.test(m) ? "" : m;
   }).replace(/\s+/g, " ").trim();
 }
-function isBoilerplate(text6) {
-  return BOILERPLATE_RE.test(text6) || PLACEHOLDER_RE.test(text6);
+function isBoilerplate(text8) {
+  return BOILERPLATE_RE.test(text8) || PLACEHOLDER_RE.test(text8);
 }
 function copyOrDrop(raw, cap) {
-  const text6 = stripPii(cleanText(raw, cap));
-  if (text6.length < 2) return "";
-  if (isBoilerplate(text6)) return "";
-  if (!/[A-Za-zͰ-῿぀-힯]/.test(text6)) return "";
-  return text6;
+  const text8 = stripPii(cleanText(raw, cap));
+  if (text8.length < 2) return "";
+  if (isBoilerplate(text8)) return "";
+  if (!/[A-Za-zͰ-῿぀-힯]/.test(text8)) return "";
+  return text8;
 }
 function dedupe2(values, cap) {
   const out2 = [];
@@ -59273,9 +59677,9 @@ var init_copy_clean = __esm({
 function genericDescription(it) {
   for (const field of DESCRIPTION_FIELDS) {
     const raw = it[field];
-    const text6 = typeof raw === "string" ? raw : str6(raw?.text);
-    if (!text6) continue;
-    const plain2 = text6.replace(/<[^>]*>/g, " ").replace(/&nbsp;/g, " ");
+    const text8 = typeof raw === "string" ? raw : str6(raw?.text);
+    if (!text8) continue;
+    const plain2 = text8.replace(/<[^>]*>/g, " ").replace(/&nbsp;/g, " ");
     if (plain2.trim()) return plain2;
   }
   return void 0;
@@ -59388,7 +59792,7 @@ function formLabels(x, depth = 0, out2 = []) {
   if (typeof x !== "object") return out2;
   const o = x;
   const label2 = str6(o.label ?? o.displayName ?? o.fieldTitle ?? o.title);
-  if (label2 && !UUID_RE.test(label2) && label2.length < 80 && !out2.includes(label2)) out2.push(label2);
+  if (label2 && !UUID_RE2.test(label2) && label2.length < 80 && !out2.includes(label2)) out2.push(label2);
   for (const k of ["fields", "formFields", "form", "schema", "properties"]) {
     if (o[k] != null) formLabels(o[k], depth + 1, out2);
   }
@@ -59506,7 +59910,7 @@ function sampleTitle(data) {
   for (const [k, v] of Object.entries(data)) {
     if (k.startsWith("_") || typeof v !== "string") continue;
     const s = v.trim();
-    if (s.length > 2 && s.length < 80 && !s.includes("@") && !/^https?:/i.test(s) && !UUID_RE.test(s)) return s;
+    if (s.length > 2 && s.length < 80 && !s.includes("@") && !/^https?:/i.test(s) && !UUID_RE2.test(s)) return s;
   }
   return void 0;
 }
@@ -59605,7 +60009,7 @@ async function readMemberRoles(call) {
   if (sawAuthError) return { names: [], status: "error" };
   return { names: [], status: "empty" };
 }
-var asArr, str6, DESCRIPTION_FIELDS, UUID_RE, CORE_PROBES, OPTIONAL_PROBES, ALL, CMS_LIST_LIMIT;
+var asArr, str6, DESCRIPTION_FIELDS, UUID_RE2, CORE_PROBES, OPTIONAL_PROBES, ALL, CMS_LIST_LIMIT;
 var init_probes = __esm({
   "src/site-analyze/probes.ts"() {
     init_rest();
@@ -59613,7 +60017,7 @@ var init_probes = __esm({
     asArr = (x) => Array.isArray(x) ? x : [];
     str6 = (x) => typeof x === "string" ? x : "";
     DESCRIPTION_FIELDS = ["plainDescription", "description", "shortDescription", "excerpt", "tagLine", "subtitle"];
-    UUID_RE = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;
+    UUID_RE2 = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;
     CORE_PROBES = [
       {
         vertical: "store",
@@ -60320,12 +60724,12 @@ function mergeWst(pages) {
   return acc;
 }
 function fontSlug(value) {
-  let text6 = value;
+  let text8 = value;
   try {
-    text6 = decodeURIComponent(value);
+    text8 = decodeURIComponent(value);
   } catch {
   }
-  return text6.toLowerCase().replace(/[^a-z0-9]+/g, "");
+  return text8.toLowerCase().replace(/[^a-z0-9]+/g, "");
 }
 function fontUrlSlug(url) {
   const last = url.split("?")[0].split("#")[0].split("/").pop() ?? "";
@@ -60499,8 +60903,8 @@ function parsePublishedHtml(html) {
   const rawHeadings = [];
   HEADING_RE.lastIndex = 0;
   while (m = HEADING_RE.exec(html)) {
-    const text6 = copyOrDrop(textFromHtml(m[1] ?? ""), 120);
-    if (text6) rawHeadings.push(text6);
+    const text8 = copyOrDrop(textFromHtml(m[1] ?? ""), 120);
+    if (text8) rawHeadings.push(text8);
     if (rawHeadings.length >= 40) break;
   }
   const headings = dedupe2(rawHeadings, 20);
@@ -61327,16 +61731,16 @@ function isPrivateV4([a, b, c]) {
   return a >= 224;
 }
 function v6Groups(host) {
-  let text6 = host;
-  const dotted = /:((?:\d{1,3}\.){3}\d{1,3})$/.exec(text6);
+  let text8 = host;
+  const dotted = /:((?:\d{1,3}\.){3}\d{1,3})$/.exec(text8);
   if (dotted) {
     const octets = ipv4Octets(dotted[1]);
     if (!octets) return null;
     const hi = (octets[0] << 8 | octets[1]).toString(16);
     const lo = (octets[2] << 8 | octets[3]).toString(16);
-    text6 = `${text6.slice(0, dotted.index)}:${hi}:${lo}`;
+    text8 = `${text8.slice(0, dotted.index)}:${hi}:${lo}`;
   }
-  const halves = text6.split("::");
+  const halves = text8.split("::");
   if (halves.length > 2) return null;
   const parts = (part) => part ? part.split(":") : [];
   const head = parts(halves[0]);
@@ -61418,10 +61822,10 @@ function assertPublicSiteUrl(raw) {
   if (refusal) throw new Error(refusal);
 }
 function resolveAll(hostname2) {
-  return new Promise((resolve52, reject) => {
+  return new Promise((resolve53, reject) => {
     dnsLookup(hostname2, { all: true, verbatim: true }, (err, addresses) => {
       if (err) reject(err);
-      else resolve52(addresses);
+      else resolve53(addresses);
     });
   });
 }
@@ -61429,13 +61833,13 @@ function withAbort(start, signal, what) {
   if (signal?.aborted) return Promise.reject(new Error(`${what} aborted`));
   const work = start();
   if (!signal) return work;
-  return new Promise((resolve52, reject) => {
+  return new Promise((resolve53, reject) => {
     const onAbort = () => reject(new Error(`${what} aborted`));
     signal.addEventListener("abort", onAbort, { once: true });
-    work.then(resolve52, reject).finally(() => signal.removeEventListener("abort", onAbort));
+    work.then(resolve53, reject).finally(() => signal.removeEventListener("abort", onAbort));
   });
 }
-async function pinAddress(url, resolve52 = resolveAll, signal) {
+async function pinAddress(url, resolve53 = resolveAll, signal) {
   const host = url.hostname.replace(/^\[|\]$/g, "");
   if (ipv4Octets(host)) {
     if (isBlockedAddress(host)) throw new Error(`${host} is a blocked address`);
@@ -61445,7 +61849,7 @@ async function pinAddress(url, resolve52 = resolveAll, signal) {
     if (isBlockedAddress(host)) throw new Error(`${host} is a blocked address`);
     return { address: host, family: 6 };
   }
-  const addresses = await withAbort(() => resolve52(host), signal, `${host} lookup`);
+  const addresses = await withAbort(() => resolve53(host), signal, `${host} lookup`);
   if (!addresses.length) throw new Error(`${host} resolved to no address`);
   const blocked = addresses.filter((a) => isBlockedAddress(a.address)).map((a) => a.address);
   if (blocked.length) throw new Error(`${host} resolves to a blocked address (${blocked.join(", ")})`);
@@ -61485,7 +61889,7 @@ function copyIncomingHeaders(headers2) {
   return out2;
 }
 function requestOnce(url, pinned, init) {
-  return new Promise((resolve52, reject) => {
+  return new Promise((resolve53, reject) => {
     const headers2 = { host: url.host, "accept-encoding": "identity" };
     new Headers(init.headers ?? {}).forEach((value, key2) => {
       if (key2.toLowerCase() !== "host") headers2[key2] = value;
@@ -61515,7 +61919,7 @@ function requestOnce(url, pinned, init) {
           reject(err);
           return;
         }
-        resolve52(new Response(body, { status, statusText: res.statusMessage ?? "", headers: out2 }));
+        resolve53(new Response(body, { status, statusText: res.statusMessage ?? "", headers: out2 }));
       }
     );
     req.on("error", reject);
@@ -61591,8 +61995,8 @@ var init_net_guard = __esm({
 function textFields(look) {
   if (look.unavailable) return [];
   const out2 = [];
-  const add = (text6, where, narrative = false) => {
-    if (text6 && text6.trim()) out2.push({ text: text6, where, narrative });
+  const add = (text8, where, narrative = false) => {
+    if (text8 && text8.trim()) out2.push({ text: text8, where, narrative });
   };
   for (const label2 of look.navLabels) add(label2, "nav");
   for (const p of look.pages) {
@@ -61983,8 +62387,8 @@ async function analyzeSite(input, ports) {
   if (locale) plan.provisioning.locale = locale;
   const velo = buildVeloChapter({ look, owner: ownerVelo });
   const veloFiles = ownerVelo.files.flatMap((f) => {
-    const text6 = f.content ?? f.excerpt;
-    return text6 ? [{ path: f.path, text: text6 }] : [];
+    const text8 = f.content ?? f.excerpt;
+    return text8 ? [{ path: f.path, text: text8 }] : [];
   }).slice(0, 80);
   const permissions = buildPermissionsChapter({
     cms,
@@ -62206,8 +62610,8 @@ function cmsStatusNote(taxonomy) {
 function yn(v) {
   return v == null || v === "" ? "\u2014" : String(v);
 }
-function isAuthPhrase(text6) {
-  const t = text6.trim();
+function isAuthPhrase(text8) {
+  const t = text8.trim();
   return AUTH_ONLY_ASCII.test(t) || LOGIN_HE.includes(t);
 }
 function looksGated(page) {
@@ -62584,9 +62988,9 @@ function attachVeloSources(book, sources, put) {
     if (isSecretVeloPath(f.path)) continue;
     const rel = veloArtifactRelPath(f.path);
     if (!rel) continue;
-    const text6 = byPath.get(f.path) ?? f.excerpt;
-    if (!text6) continue;
-    put(rel, text6);
+    const text8 = byPath.get(f.path) ?? f.excerpt;
+    if (!text8) continue;
+    put(rel, text8);
     f.localPath = rel;
   }
 }
@@ -62831,14 +63235,14 @@ var init_customer_build = __esm({
 
 // src/site-analyze/apply.ts
 import { existsSync as existsSync64, readFileSync as readFileSync76, writeFileSync as writeFileSync27, copyFileSync as copyFileSync3, mkdirSync as mkdirSync31, realpathSync as realpathSync9, statSync as statSync17 } from "node:fs";
-import { dirname as dirname35, isAbsolute as isAbsolute6, join as join63, resolve as resolve49, sep as sep16 } from "node:path";
+import { dirname as dirname35, isAbsolute as isAbsolute6, join as join63, resolve as resolve50, sep as sep16 } from "node:path";
 import { spawnSync as spawnSync4 } from "node:child_process";
 function unpairedRedirectNote(overlay) {
   if (!overlay.wix?.clientId || overlay.wix.redirectUri) return void 0;
   return `no OAuth redirect paired with client ${overlay.wix.clientId} \u2014 the app (and prepare:customer) will refuse to start until one is set. Register it with \`himi site client ensure --site ${overlay.siteId?.trim() || "<msid>"} --redirect-uri <uri> --yes\`, then re-run analyze with \`--redirect-uri <uri>\` (or export HIMI_BRANDED_LITE_WIX_REDIRECT_URI)`;
 }
 function posix3(p) {
-  return resolve49(p).replace(/\\/g, "/");
+  return resolve50(p).replace(/\\/g, "/");
 }
 function committedShellProvisioning(path2) {
   return committedShellFor(posix3(path2));
@@ -62872,7 +63276,7 @@ function assertNotCommitted(path2, forbidden) {
       `refusing to overwrite committed ${committedProvisioningPath(committed)} \u2014 use prepare:customer --contract`
     );
   }
-  if (forbidden && resolve49(path2) === resolve49(forbidden)) {
+  if (forbidden && resolve50(path2) === resolve50(forbidden)) {
     const named = committedShellProvisioning(forbidden);
     throw new Error(
       `refusing to overwrite committed ${named ? committedProvisioningPath(named) : forbidden} \u2014 pass a content-package provisioning.json or use prepare:customer --contract`
@@ -62928,8 +63332,8 @@ function buildMergedContract(options) {
   const staged = [];
   const contained = (root, rel) => {
     if (isAbsolute6(rel)) return void 0;
-    const full = resolve49(root, rel);
-    return full.startsWith(resolve49(root) + sep16) ? full : void 0;
+    const full = resolve50(root, rel);
+    return full.startsWith(resolve50(root) + sep16) ? full : void 0;
   };
   const stage = (fromRel, toRel) => {
     const from = contained(packageDir, fromRel);
@@ -63018,7 +63422,7 @@ function catalogTypography(overlay, template) {
 function staticFaqFor(overlay, overlayPath) {
   const own3 = overlay.faq;
   if (own3 !== void 0) return deriveStaticFaq(own3);
-  const bookPath = join63(dirname35(resolve49(overlayPath)), "book.json");
+  const bookPath = join63(dirname35(resolve50(overlayPath)), "book.json");
   if (!existsSync64(bookPath)) return void 0;
   try {
     const book = JSON.parse(readFileSync76(bookPath, "utf8"));
@@ -63032,7 +63436,7 @@ function staticFaqFor(overlay, overlayPath) {
   }
 }
 async function applyOverlays(input) {
-  const cwd = resolve49(input.cwd);
+  const cwd = resolve50(input.cwd);
   const shell = input.shell ?? DEFAULT_BRANDABLE_SHELL;
   assertKnownShell(shell);
   const overlay = JSON.parse(readFileSync76(input.overlayPath, "utf8"));
@@ -63056,7 +63460,7 @@ async function applyOverlays(input) {
         `shell "${shell}" is a site shell: its contract names the customer's website (a \`site\` block), and this overlay has none. Re-run \`himi site analyze --url <site> --shell ${shell}\` to derive the site's page map (edit \`site.pages\` in provisioning.overlay.json if needed), then --apply.`
       );
     }
-    const packageDir = dirname35(resolve49(input.overlayPath));
+    const packageDir = dirname35(resolve50(input.overlayPath));
     const { path: contract, staged } = buildMergedContract({ appDir: appDir3, packageDir, overlay });
     wrote.push(...staged);
     const r = spawnSync4("npm", ["run", "prepare:customer", "--", "--contract", contract], {
@@ -63151,7 +63555,7 @@ async function applyOverlays(input) {
     }
   }
   if (!input.iconPath || !existsSync64(input.iconPath)) {
-    const book = input.iconPath ? dirname35(dirname35(resolve49(input.iconPath))) : void 0;
+    const book = input.iconPath ? dirname35(dirname35(resolve50(input.iconPath))) : void 0;
     notes.push(
       book ? `no icon installed \u2014 ${siteLogoAbsence(book).hint}` : "no icon installed and no business book to say why \u2014 `himi icon generate` draws one from the accent, or `himi icon set <file.png>` installs the customer's own mark"
     );
@@ -64270,10 +64674,10 @@ function permuteDomain(domain, allowSpecialUseDomain) {
 }
 function createPromiseCallback(cb) {
   let callback;
-  let resolve52;
+  let resolve53;
   let reject;
   const promise = new Promise((_resolve, _reject) => {
-    resolve52 = _resolve;
+    resolve53 = _resolve;
     reject = _reject;
   });
   if (typeof cb === "function") {
@@ -64289,7 +64693,7 @@ function createPromiseCallback(cb) {
     callback = (err, result) => {
       try {
         if (err) reject(err);
-        else resolve52(result);
+        else resolve53(result);
       } catch (e) {
         reject(e instanceof Error ? e : new Error());
       }
@@ -66356,8 +66760,8 @@ function copyFromEval(evaled) {
       evaled.meta?.ogTitle,
       evaled.meta?.ogDescription
     ].map((raw) => {
-      const text6 = cleanText(raw, 400);
-      return text6 && isTemplatePlaceholder(text6) ? stripPii(cleanText(text6, 90)) : "";
+      const text8 = cleanText(raw, 400);
+      return text8 && isTemplatePlaceholder(text8) ? stripPii(cleanText(text8, 90)) : "";
     }),
     8
   );
@@ -66889,7 +67293,7 @@ var init_crawl_look = __esm({
 });
 
 // src/site-analyze/site-function.ts
-import { randomUUID as randomUUID5 } from "node:crypto";
+import { randomUUID as randomUUID6 } from "node:crypto";
 function createRevisionUrl(msid, esi) {
   const q = new URLSearchParams({ editorSessionId: esi, esi, metaSiteId: msid });
   return `https://editor.wix.com/html/v1/create_revision?${q}`;
@@ -67256,13 +67660,13 @@ async function veloCall(fetchImpl, method, url, opts = {}) {
     body: opts.body === void 0 ? void 0 : JSON.stringify(opts.body),
     signal: AbortSignal.timeout(opts.timeoutMs ?? 3e4)
   });
-  const text6 = await res.text();
-  let json6 = text6;
+  const text8 = await res.text();
+  let json6 = text8;
   try {
-    json6 = text6 ? JSON.parse(text6) : null;
+    json6 = text8 ? JSON.parse(text8) : null;
   } catch {
   }
-  return { status: res.status, json: json6, text: text6 };
+  return { status: res.status, json: json6, text: text8 };
 }
 function snippet2(x, cap = 180) {
   const s = typeof x === "string" ? x : JSON.stringify(x) ?? "";
@@ -67334,7 +67738,7 @@ function codeAppIdFromRevision(json6) {
 async function snapshotAndPublish(fetchImpl, token, msid, opts = {}) {
   const production = opts.production !== false;
   const initiator = opts.initiator ?? "himi";
-  const esi = randomUUID5();
+  const esi = randomUUID6();
   const rev = await veloCall(fetchImpl, "POST", createRevisionUrl(msid, esi), {
     token,
     msid,
@@ -67431,7 +67835,7 @@ async function runSiteFunction(opts) {
   if (!httpOk(patched)) {
     return { ...base, error: `UpdateFiles ${patched.status}: ${snippet2(patched.json ?? patched.text)}` };
   }
-  let report2 = {
+  let report3 = {
     ...base,
     ok: true,
     source: extractHttpFunction(next, method, name),
@@ -67440,21 +67844,21 @@ async function runSiteFunction(opts) {
   if (opts.publish) {
     const snap = await snapshotAndPublish(fetchImpl, opts.token, opts.msid, { production: true, initiator: "himi" });
     const pubOk = httpOk(snap.rev) && httpOk(snap.live);
-    report2 = {
-      ...report2,
-      ok: report2.ok && pubOk,
+    report3 = {
+      ...report3,
+      ok: report3.ok && pubOk,
       revision: snap.revision,
       codeAppId: snap.codeAppId,
       publish: { revision: httpOk(snap.rev), rc: httpOk(snap.rc), live: httpOk(snap.live), status: snap.live?.status },
-      error: pubOk ? report2.error : snippet2(snap.live?.json ?? snap.rev.json)
+      error: pubOk ? report3.error : snippet2(snap.live?.json ?? snap.rev.json)
     };
   }
   if (opts.invoke) {
-    if (!opts.siteUrl) return { ...report2, ok: false, error: "put --invoke needs --url" };
-    const invoked = await invokeAndReport(fetchImpl, opts, report2, name, method);
-    return { ...report2, ...invoked, op: "put", ok: report2.ok && invoked.ok };
+    if (!opts.siteUrl) return { ...report3, ok: false, error: "put --invoke needs --url" };
+    const invoked = await invokeAndReport(fetchImpl, opts, report3, name, method);
+    return { ...report3, ...invoked, op: "put", ok: report3.ok && invoked.ok };
   }
-  return report2;
+  return report3;
 }
 async function invokeAndReport(fetchImpl, opts, base, name, method) {
   const siteUrl = opts.siteUrl;
@@ -67519,7 +67923,7 @@ __export(cli_exports, {
   runSiteFunctionCli: () => runSiteFunctionCli
 });
 import { readFileSync as readFileSync77 } from "node:fs";
-import { resolve as resolve50 } from "node:path";
+import { resolve as resolve51 } from "node:path";
 function assetFetchFor(_opts) {
   return pinnedFetch2;
 }
@@ -67539,7 +67943,7 @@ async function runSiteAnalyze(opts) {
   const assetFetch = assetFetchFor(opts);
   const siteFetch = guardedSiteFetch;
   const cwd = opts.cwd ?? process.cwd();
-  const outDir = resolve50(cwd, opts.outDir ?? ".himi/business-book");
+  const outDir = resolve51(cwd, opts.outDir ?? ".himi/business-book");
   let ownerAuth;
   let msid;
   const ownerSite = ownerSiteFor(opts);
@@ -67591,9 +67995,9 @@ async function runSiteAnalyze(opts) {
   if (opts.apply) {
     applied = await applyOverlays({
       cwd,
-      overlayPath: resolve50(outDir, "provisioning.overlay.json"),
-      tokensPath: resolve50(outDir, "tokens.overlay.json"),
-      iconPath: resolve50(outDir, "media/icon.png"),
+      overlayPath: resolve51(outDir, "provisioning.overlay.json"),
+      tokensPath: resolve51(outDir, "tokens.overlay.json"),
+      iconPath: resolve51(outDir, "media/icon.png"),
       shell: opts.shell
     });
     const note = noteWithWarnings(applied.note, warnings);
@@ -67629,7 +68033,7 @@ async function runSiteFunctionCli(opts) {
   const token = opts.token ?? await siteToken(msid);
   let source;
   if (opts.sourcePath) {
-    const p = resolve50(opts.cwd ?? process.cwd(), opts.sourcePath);
+    const p = resolve51(opts.cwd ?? process.cwd(), opts.sourcePath);
     source = readFileSync77(p, "utf8");
   }
   let body;
@@ -67685,7 +68089,7 @@ async function accountToken2(spawnImpl = spawn6) {
     cached2 = fromEnv;
     return fromEnv;
   }
-  const token = await new Promise((resolve52, reject) => {
+  const token = await new Promise((resolve53, reject) => {
     let child;
     try {
       child = spawnImpl("wix", ["token"]);
@@ -67714,7 +68118,7 @@ async function accountToken2(spawnImpl = spawn6) {
     const scan = (d) => {
       out2 += String(d);
       const m = out2.match(TOKEN_RE2);
-      if (m) done(() => resolve52(m[0]));
+      if (m) done(() => resolve53(m[0]));
     };
     child.stdout?.on("data", scan);
     child.stderr?.on("data", scan);
@@ -67757,10 +68161,10 @@ function accountTransport(fetchImpl = fetch, timeoutMs = DEFAULT_TIMEOUT_MS5, sp
       }
       throw new Error(`${method} ${path2} failed: ${err?.message ?? String(e)}`);
     }
-    const text6 = await res.text();
-    let parsed = text6;
+    const text8 = await res.text();
+    let parsed = text8;
     try {
-      parsed = text6 ? JSON.parse(text6) : null;
+      parsed = text8 ? JSON.parse(text8) : null;
     } catch {
     }
     if (!res.ok) throw new WixApiError(res.status, method, path2, parsed);
@@ -67821,16 +68225,16 @@ async function installVerticals(msid, wanted, token, fetchImpl = fetch, timeoutM
     body: JSON.stringify({ apps: wanted.map((w) => ({ id: w.appDefId })) }),
     signal: AbortSignal.timeout(timeoutMs)
   });
-  const text6 = await res.text();
+  const text8 = await res.text();
   if (!res.ok) {
     return {
       ...empty,
-      errors: wanted.map((w) => ({ ...w, message: `bulk-install -> ${res.status}: ${text6.slice(0, 200)}` }))
+      errors: wanted.map((w) => ({ ...w, message: `bulk-install -> ${res.status}: ${text8.slice(0, 200)}` }))
     };
   }
   let body = {};
   try {
-    body = text6 ? JSON.parse(text6) : {};
+    body = text8 ? JSON.parse(text8) : {};
   } catch {
   }
   const nameOf = (appDefId) => wanted.find((w) => w.appDefId === appDefId)?.vertical ?? appDefId;
@@ -68433,9 +68837,9 @@ function redactVeloSource(source, knownSecrets = []) {
   const visitLiterals = (node) => {
     if (ts.isStringLiteral(node) || ts.isNoSubstitutionTemplateLiteral(node) || ts.isTemplateExpression(node)) {
       const start = node.getStart(clean2);
-      const text6 = source.slice(start, node.end);
-      const redacted = redactLiteral(text6, start);
-      if (redacted !== text6) {
+      const text8 = source.slice(start, node.end);
+      const redacted = redactLiteral(text8, start);
+      if (redacted !== text8) {
         edits.push({ start, end: node.end, text: redacted });
         return;
       }
@@ -68716,9 +69120,9 @@ var init_context = __esm({
 import { mkdtempSync as mkdtempSync4, readFileSync as readFileSync79, mkdirSync as mkdirSync32, writeFileSync as writeFileSync29, existsSync as existsSync66, rmSync as rmSync15, readdirSync as readdirSync30, statSync as statSync18, lstatSync as lstatSync13, accessSync, constants as constants2, renameSync as renameSync7, cpSync as cpSync3 } from "node:fs";
 import { execFile, execFileSync as execFileSync7, spawnSync as spawnSync5, spawn as spawn7 } from "node:child_process";
 import { AsyncLocalStorage } from "node:async_hooks";
-import { createHash as createHash31, randomUUID as randomUUID6 } from "node:crypto";
+import { createHash as createHash31, randomUUID as randomUUID7 } from "node:crypto";
 import { tmpdir as tmpdir5, homedir as homedir7, hostname } from "node:os";
-import { join as join64, resolve as resolve51, relative as relative13, basename as basename17, dirname as dirname36 } from "node:path";
+import { join as join64, resolve as resolve52, relative as relative13, basename as basename17, dirname as dirname36 } from "node:path";
 import { fileURLToPath as fileURLToPath26 } from "node:url";
 
 // ../serve-cli/src/client.ts
@@ -68759,10 +69163,10 @@ var ServeCliClient = class {
       ...carriesCredential ? { redirect: "error" } : {},
       body: opts.body !== void 0 ? JSON.stringify(opts.body) : void 0
     });
-    const text6 = await res.text();
+    const text8 = await res.text();
     let json6 = null;
     try {
-      json6 = text6 ? JSON.parse(text6) : null;
+      json6 = text8 ? JSON.parse(text8) : null;
     } catch {
       json6 = null;
     }
@@ -68770,7 +69174,7 @@ var ServeCliClient = class {
     res.headers.forEach((v, k) => {
       h[k] = v;
     });
-    return { status: res.status, ok: res.ok, json: json6, text: text6, headers: h };
+    return { status: res.status, ok: res.ok, json: json6, text: text8, headers: h };
   }
   // ---- serve (device-facing reads) ----
   health(plane) {
@@ -69335,8 +69739,8 @@ init_attestation();
 
 // ../../core/admin-web/src/utils/qr-terminal.ts
 init_qr();
-function qrTerminal(text6, opts = {}) {
-  const { modules, size } = encodeQr(text6);
+function qrTerminal(text8, opts = {}) {
+  const { modules, size } = encodeQr(text8);
   const quietZone = opts.quietZone ?? 4;
   const dim = size + quietZone * 2;
   const dark = (x, y) => x >= quietZone && x < quietZone + size && y >= quietZone && y < quietZone + size ? modules[y - quietZone][x - quietZone] : false;
@@ -69392,9 +69796,9 @@ function dpxSessionPresent(path2 = dpxSessionTokenPath()) {
     return false;
   }
 }
-function isPortInUseError(text6) {
-  if (!text6) return false;
-  return /EADDRINUSE/i.test(text6) || new RegExp(`(:::|:)${DPX_SESSION_PORT}\\b`).test(text6);
+function isPortInUseError(text8) {
+  if (!text8) return false;
+  return /EADDRINUSE/i.test(text8) || new RegExp(`(:::|:)${DPX_SESSION_PORT}\\b`).test(text8);
 }
 function parseDpxAuthStatusIdentity(stdout) {
   if (!stdout) return void 0;
@@ -69459,7 +69863,7 @@ async function browserLogin(opts) {
   const log = opts.log ?? (() => {
   });
   const timeoutMs = opts.timeoutMs ?? DEFAULT_TIMEOUT_MS;
-  return await new Promise((resolve52, reject) => {
+  return await new Promise((resolve53, reject) => {
     let settled = false;
     let loginUrl = "";
     const server = createServer();
@@ -69523,7 +69927,7 @@ async function browserLogin(opts) {
           return;
         }
         res.writeHead(200, { "content-type": "text/html; charset=utf-8", "cache-control": "no-store", connection: "close" }).end(CLOSE_PAGE);
-        finish2(() => resolve52({ token, loginUrl }));
+        finish2(() => resolve53({ token, loginUrl }));
       });
     });
     server.on("error", (err) => finish2(() => reject(err)));
@@ -69787,7 +70191,7 @@ async function queryCms(opts) {
 async function createCms(opts) {
   const { app, cms, call, dryRun = false, allowDestructive = false, applyPermissions = false } = opts;
   const prefix = namespacePrefix(app);
-  const report2 = {
+  const report3 = {
     ok: true,
     app,
     namespace: prefix,
@@ -69809,19 +70213,19 @@ async function createCms(opts) {
   for (const spec of cms?.collections ?? []) {
     const id = physicalId(spec, app);
     if (spec.wixId) {
-      report2.skipped.push({
+      report3.skipped.push({
         collection: id,
         reason: remoteById.has(id) ? "adopted (read-only) \u2014 himi never changes the schema of a collection it does not own" : `adopted but absent from this site \u2014 create it in the Wix dashboard, or declare it as owned ("${prefix}\u2026")`
       });
-      if (!remoteById.has(id)) report2.ok = false;
+      if (!remoteById.has(id)) report3.ok = false;
       continue;
     }
     if (!spec.id?.startsWith(prefix)) {
-      report2.refused.push({
+      report3.refused.push({
         collection: id || "<unnamed>",
         reason: `"${id}" is outside this app's namespace "${prefix}" \u2014 himi only writes collections it owns. Rename it in config.ts, or bind an existing collection read-only with \`wixId\`.`
       });
-      report2.ok = false;
+      report3.ok = false;
       continue;
     }
     const existing = remoteById.get(id);
@@ -69829,35 +70233,35 @@ async function createCms(opts) {
       if (!dryRun) {
         await call("POST", "/data/v2/collections", { collection: toWixCollection(spec, app) });
       }
-      report2.created.push(id);
+      report3.created.push(id);
       continue;
     }
     const permDrift = diffPermissions(spec, existing);
-    for (const d of permDrift) report2.permissionDrift.push({ collection: id, ...d });
+    for (const d of permDrift) report3.permissionDrift.push({ collection: id, ...d });
     const applyingPermissions = applyPermissions && permDrift.length > 0;
     const drift = diffFields(spec, existing);
     const extras = drift.filter((d) => d.kind === "extra-field");
     const mismatches = drift.filter((d) => d.kind === "type-mismatch");
     const missing = drift.filter((d) => d.kind === "missing-field");
     for (const m of mismatches) {
-      report2.skipped.push({ collection: id, reason: m.detail });
-      report2.ok = false;
+      report3.skipped.push({ collection: id, reason: m.detail });
+      report3.ok = false;
     }
     for (const e of extras) {
       if (allowDestructive) continue;
-      report2.skipped.push({ collection: id, reason: e.detail });
+      report3.skipped.push({ collection: id, reason: e.detail });
     }
     if (mismatches.length > 0) continue;
     if (missing.length === 0 && (extras.length === 0 || !allowDestructive) && !applyingPermissions) {
-      report2.unchanged.push(id);
+      report3.unchanged.push(id);
       continue;
     }
     if (!allowDestructive && !Array.isArray(existing.fields)) {
-      report2.skipped.push({
+      report3.skipped.push({
         collection: id,
         reason: "the site returned this collection without a `fields` array, so an update would drop every field (and its data) by omission. Re-run to retry the read; pass --allow-destructive only if narrowing to the declaration is genuinely what you want."
       });
-      report2.ok = false;
+      report3.ok = false;
       continue;
     }
     if (applyingPermissions) {
@@ -69894,14 +70298,14 @@ async function createCms(opts) {
         }
       }
     }
-    report2.updated.push(id);
+    report3.updated.push(id);
   }
-  return report2;
+  return report3;
 }
 async function seedCms(opts) {
   const { app, cms, call, dryRun = false, force = false, only, dir } = opts;
   const prefix = namespacePrefix(app);
-  const report2 = { ok: true, app, inserted: {}, sources: {}, skipped: [], refused: [], dryRun };
+  const report3 = { ok: true, app, inserted: {}, sources: {}, skipped: [], refused: [], dryRun };
   const fileRows = dir ? readSeedFile(dir) : {};
   const rowsFor = (id, spec) => fileRows[id]?.length ? { rows: fileRows[id], source: "cms-seed.json" } : { rows: spec.seed ?? [], source: "config.ts" };
   const remoteIds = /* @__PURE__ */ new Set();
@@ -69918,30 +70322,30 @@ async function seedCms(opts) {
     const { rows, source } = rowsFor(id, spec);
     considered++;
     if (!rows.length) {
-      report2.skipped.push({
+      report3.skipped.push({
         collection: id,
         reason: `no seed rows \u2014 add a \`seed\` array to this collection in config.ts, or run \`himi cms seed --ai\` and refine ${dir ? "cms-seed.json" : "the generated cms-seed.json"}`
       });
       continue;
     }
     if (!spec.id?.startsWith(prefix)) {
-      report2.refused.push({ collection: id, reason: `"${id}" is outside this app's namespace "${prefix}" \u2014 himi only seeds collections it owns.` });
-      report2.ok = false;
+      report3.refused.push({ collection: id, reason: `"${id}" is outside this app's namespace "${prefix}" \u2014 himi only seeds collections it owns.` });
+      report3.ok = false;
       continue;
     }
     if (!remoteIds.has(id)) {
-      report2.skipped.push({ collection: id, reason: `not on the site yet \u2014 run \`himi cms create\` first` });
-      report2.ok = false;
+      report3.skipped.push({ collection: id, reason: `not on the site yet \u2014 run \`himi cms create\` first` });
+      report3.ok = false;
       continue;
     }
     const count2 = await countItems(call, id);
     if (count2 === null && !force) {
-      report2.skipped.push({ collection: id, reason: "could not read the current row count, so seeding might bury existing content. Re-run, or pass --force if you are sure." });
-      report2.ok = false;
+      report3.skipped.push({ collection: id, reason: "could not read the current row count, so seeding might bury existing content. Re-run, or pass --force if you are sure." });
+      report3.ok = false;
       continue;
     }
     if (count2 !== null && count2 > 0 && !force) {
-      report2.skipped.push({ collection: id, reason: `already has ${count2} items \u2014 seeding an already-populated collection needs --force so real content is never buried under sample rows` });
+      report3.skipped.push({ collection: id, reason: `already has ${count2} items \u2014 seeding an already-populated collection needs --force so real content is never buried under sample rows` });
       continue;
     }
     if (!dryRun) {
@@ -69953,7 +70357,7 @@ async function seedCms(opts) {
       });
       const droppedKeys = [...new Set(rows.flatMap((r) => Object.keys(r).filter((k) => !declaredKeys.has(k))))];
       if (droppedKeys.length > 0) {
-        report2.skipped.push({
+        report3.skipped.push({
           collection: id,
           reason: `ignored undeclared key(s) in seed rows: ${droppedKeys.join(", ")} \u2014 only declared fields are written (a row cannot set system keys such as _id or _owner)`
         });
@@ -69969,18 +70373,18 @@ async function seedCms(opts) {
         )
       );
     }
-    report2.inserted[id] = rows.length;
-    report2.sources[id] = source;
+    report3.inserted[id] = rows.length;
+    report3.sources[id] = source;
   }
   if (considered === 0) {
     const adopted = (cms?.collections ?? []).map((spec) => ({ spec, id: physicalId(spec, app) })).filter(({ spec, id }) => !!spec.wixId && (!only || id === only));
-    report2.skipped.push({
+    report3.skipped.push({
       collection: only ?? "<none>",
       reason: adopted.length ? `the selected collection${adopted.length === 1 ? " is" : "s are"} adopted and read-only \u2014 himi never seeds ${adopted.map(({ id }) => `"${id}"`).join(", ")}. Add rows in Wix CMS, or declare an owned collection with an id beginning "${prefix}".` : only ? `--only "${only}" matched no owned collection declared by this app` : "this app declares no owned CMS collections to seed"
     });
-    report2.ok = false;
+    report3.ok = false;
   }
-  return report2;
+  return report3;
 }
 function readSeedFile(dir) {
   const file = join8(dir, "cms-seed.json");
@@ -70281,57 +70685,57 @@ function summarizeLint(app, bres, outcome, strict, extraIssues = []) {
     }
   };
   const record2 = (value) => value && typeof value === "object" && !Array.isArray(value) ? value : {};
-  const text6 = (value) => typeof value === "string" && value ? value : void 0;
+  const text8 = (value) => typeof value === "string" && value ? value : void 0;
   const message = (value) => {
     const item = record2(value);
-    if (text6(item.message)) return text6(item.message);
-    if (text6(item.error)) return text6(item.error);
+    if (text8(item.message)) return text8(item.message);
+    if (text8(item.error)) return text8(item.error);
     if (Array.isArray(item.errors)) {
       const diagnostics = item.errors.map((entry) => {
         const diagnostic = record2(entry);
-        return text6(diagnostic.text) ?? text6(diagnostic.message);
+        return text8(diagnostic.text) ?? text8(diagnostic.message);
       }).filter((entry) => !!entry);
       if (diagnostics.length) return diagnostics.join("; ");
     }
     return typeof value === "string" ? value : JSON.stringify(value);
   };
-  const report2 = foldLegacyReport(legacy, {
+  const report3 = foldLegacyReport(legacy, {
     source: "validate",
     evidence: { runId: `validate:${outcome.manifest.releaseId}`, ts: (/* @__PURE__ */ new Date()).toISOString() },
     findings: [
       ...issues,
       ...bres.compileErrors.map((value) => ({
         pass: "compile",
-        path: text6(record2(value).bundle),
+        path: text8(record2(value).bundle),
         ruleCode: "compile-error",
         severity: "error",
         message: message(value)
       })),
       ...outcome.failedToBuild.map((value) => ({
         pass: "build",
-        screen: text6(record2(value).screenId),
+        screen: text8(record2(value).screenId),
         ruleCode: "failed-to-build",
         severity: "error",
         message: message(value)
       })),
       ...outcome.missingBundles.map((value) => ({
         pass: "build",
-        screen: text6(record2(value).screen),
-        path: text6(record2(value).bundle),
+        screen: text8(record2(value).screen),
+        path: text8(record2(value).bundle),
         ruleCode: "missing-bundle",
         severity: "error",
         message: message(value)
       })),
       ...workerThrows.map((value) => ({
         pass: "worker",
-        path: text6(record2(value).bundle),
+        path: text8(record2(value).bundle),
         ruleCode: "worker-threw",
         severity: "error",
         message: message(value.threw)
       }))
     ]
   });
-  return { report: report2, hasErrors };
+  return { report: report3, hasErrors };
 }
 
 // src/cms-lint.ts
@@ -70455,8 +70859,8 @@ function surfaceIssues(dir, surfaceNav, strict) {
   if (requested.length) {
     const { rejected } = resolveSurfaceEnvelope(platforms, requested);
     for (const r of rejected) {
-      const report2 = surfaceById(r.id) ? warn : error;
-      report2(`navigation.surfaces: ${r.reason} \u2014 the server will drop this key (narrow-only rule, RFC 0051 \xA73.6)`);
+      const report3 = surfaceById(r.id) ? warn : error;
+      report3(`navigation.surfaces: ${r.reason} \u2014 the server will drop this key (narrow-only rule, RFC 0051 \xA73.6)`);
     }
   }
   return issues;
@@ -70603,18 +71007,18 @@ function walkSource(dir, root = dir) {
     const ext = entry.name.slice(entry.name.lastIndexOf("."));
     if (!SOURCE_EXTENSIONS.has(ext)) continue;
     const absolute = join25(dir, entry.name);
-    const text6 = readText2(absolute);
-    if (text6 !== null) found.push({ path: relative4(root, absolute), text: text6 });
+    const text8 = readText2(absolute);
+    if (text8 !== null) found.push({ path: relative4(root, absolute), text: text8 });
   }
   return found;
 }
-function blankMatrixRows(text6) {
-  const acceptance = mobileUxSection(mobileUxDocumentBody(text6), "Implementation acceptance") ?? "";
+function blankMatrixRows(text8) {
+  const acceptance = mobileUxSection(mobileUxDocumentBody(text8), "Implementation acceptance") ?? "";
   return /\|\s*(?:Ready|Empty|Add\s*\/\s*edit|Saved\s*\/\s*completed|Error\s*\/\s*recovery)\s*\|\s*\|\s*\|\s*\|\s*\|/i.test(acceptance);
 }
 function usesAppNetwork(source) {
-  const code = (text6) => text6.replace(/\/\*[\s\S]*?\*\//g, "").replace(/\/\/[^\n]*/g, "");
-  return source.some(({ text: text6 }) => /\bwixApi\b|(?:from|import)\s*["']@(?:himalaya|wix\/himalaya)\/wix-[^"']+["']/.test(code(text6)));
+  const code = (text8) => text8.replace(/\/\*[\s\S]*?\*\//g, "").replace(/\/\/[^\n]*/g, "");
+  return source.some(({ text: text8 }) => /\bwixApi\b|(?:from|import)\s*["']@(?:himalaya|wix\/himalaya)\/wix-[^"']+["']/.test(code(text8)));
 }
 function auditUx(content, strict = false) {
   const dir = resolve16(content);
@@ -70782,7 +71186,8 @@ var BOOLEAN_FLAGS = /* @__PURE__ */ new Set([
   "brief",
   "no-agent",
   "no-first-look",
-  "no-image"
+  "no-image",
+  "no-watch"
 ]);
 var SHELL_ENUM = SHELL_NAMES2.join("|");
 var SWITCH_FLAGS = new Set([...BOOLEAN_FLAGS].filter((name) => name !== "deep"));
@@ -70879,7 +71284,7 @@ var USAGE = `himi \u2014 the Himalaya authoring CLI (remote dev loop)
                                            create/store or inspect CAPTCHA keys (not login tokens).
                                            Setup needs final --ios-bundle-id / --android-package-name.
 
-  himi init <name> [--dir <parent>] [--template <t>] [--remote] [--push-setup | --no-push-setup] [--no-agent] [--no-first-look]
+  himi init <name> [--dir <parent>] [--template <t>] [--remote] [--push-setup | --no-push-setup] [--no-agent] [--no-first-look] [--no-watch]
                                            scaffold a starter content package (--template <t> starts
                                            from a reference app; --remote fetches it off the serve plane),
                                            with the agent files inside it (AGENTS.md, CLAUDE.md, the himalaya
@@ -70893,7 +71298,11 @@ var USAGE = `himi \u2014 the Himalaya authoring CLI (remote dev loop)
                                            first; doNowAgain is the last key, for a reader of the tail) and
                                            next[] with THIS session's steps: the consent preflight, then
                                            the live preview (and the picture's steps when init could not
-                                           make it)
+                                           make it). For a bundled template it also STARTS the live
+                                           preview itself (\`himi run --watch\`, detached, --no-open, log
+                                           .himi/watch.log, stops after 30 idle minutes) and reports
+                                           watch: {started, pid, url, board, log} \u2014 or {skipped} for a
+                                           --remote template, --no-watch, or a CI environment
   himi template list [--remote]            list starter templates + metadata (title/description/tags) + each one's start prompt
   himi template prompt <name>              print the prompt that starts an app from that template
   himi template publish [--dir <app>] [--source-dir <dir>] [--name <n>] [--icon <png>] [--visibility public|unlisted]
@@ -70938,7 +71347,9 @@ var USAGE = `himi \u2014 the Himalaya authoring CLI (remote dev loop)
                                            changed, which journey step, and the image that shows it (copied
                                            into .himi/history/ so later renders cannot replace it). With no
                                            --image the current home shot is attached (never a stale one;
-                                           --no-image opts out; imageAttached says which). Bare
+                                           --no-image opts out; imageAttached says which; on the
+                                           --step review handover card it attaches even as a repeat,
+                                           and the output names the making-of to hand over). Bare
                                            prints the journal, the current step and the elapsed time.
   himi ux audit [--content <dir>] [--strict] [--json]
                                            inspect the mobile UX contract, template placeholders, app fixtures,
@@ -71159,14 +71570,16 @@ var USAGE = `himi \u2014 the Himalaya authoring CLI (remote dev loop)
   himi mcp [plugin --out <dir>]            the himi tools as a local MCP server over stdio, for coding
                                            agents (Claude Code, Cursor, Codex, VS Code). \`himi init\`
                                            configures each; see \`himi docs himi-mcp\`.
-  himi run [<package.himi|dir|url>] [--browser] [--watch] [--lan] [--port <n>] [--chrome preview|app] [--screen <id>] [--surface <id>] [--no-open]
+  himi run [<package.himi|dir|url>] [--browser] [--watch [--idle-exit <min>]] [--lan] [--port <n>] [--chrome preview|app] [--screen <id>] [--surface <id>] [--no-open]
                                            serve a package on localhost + open it in a browser. No serve
                                            plane, no dev-server. With no argument it packs the current
                                            content package first \u2014 edit, run, look at it.
                                            --watch rebuilds on every save and repaints the open tab
                                            (a failed build keeps the last good preview). The build board
                                            is served beside it at /__himi/studio/ with the preview framed
-                                           in it. Blocks until Ctrl-C.
+                                           in it. Blocks until Ctrl-C (or, with --idle-exit <min>, until
+                                           that long passes with no source save \u2014 the watch \`himi init\`
+                                           starts passes 30).
                                            --lan also serves it to the local network and prints a QR:
                                            a phone on the same Wi-Fi opens it as the real app, full
                                            screen. Read-only, but anyone on that network can open it.
@@ -71319,6 +71732,13 @@ var USAGE = `himi \u2014 the Himalaya authoring CLI (remote dev loop)
       Requires Himi owner login plus Wix CLI login for site authorization.
   himi notify status --content <dir> [--site <msid>] [--refresh] [--json]
       Reads server setup status. --refresh checks Branded/Ping live; it does not send push.
+  himi notify send --provider ping --target wix --app <a> --site <msid> --member-email <email>
+                   --title <s> [--body <s>] --link <scheme>://screen/<id>[?\u2026] [--request-id <uuid>] [--dry-run] [--json]
+      Hosted test notification to ONE site member's devices: Himi Serve sends it through Ping
+      as Himalaya, so no Apple/Firebase keys or Fire Console. Needs himi login --browser and
+      wix login as the site owner, and a ready notify setup. Acceptance is not delivery.
+      --dry-run checks ownership, member, link and readiness without sending. After an unknown
+      outcome, re-run the same command with the printed --request-id; Ping never runs it twice.
   himi notify send --app <a> (--token <t> | --device <id> | --all) --title <s> [--body <s>] [--link <url>]
                                            deliver a REAL push notification to registered devices \u2014
                                            APNs (.p8) for iOS, FCM v1 for Android. --all fans out to
@@ -71493,7 +71913,7 @@ WHAT A PATCH DOES NOT CARRY \u2014 all reported in the output, never silent
   himi docs releasing-with-himi-serve`;
 var COMMANDS = [
   { name: "captcha", summary: "create and store native CAPTCHA keys in Serve, or inspect setup status; customer setup verifies Wix site ownership; does not enable member CAPTCHA SDKs", required: "setup|status --app <app> [--content <dir>] [--site <msid>] [--ios-bundle-id <id>] [--android-package-name <id>] [--target <t>]" },
-  { name: "init", summary: "scaffold a starter content package (OTA-only; no native shells). --template <t> starts from a full reference app (branded-lite = consumer storefront over a Wix site; owner-lite = owner CRUD/management) instead of the minimal counter; --templates lists bundled ones; --remote fetches the template off the serve plane (falls back to the bundled copy offline). The new app also gets its agent files (the same set `himi agent-init` writes: AGENTS.md, CLAUDE.md, the himalaya skill, HIMALAYA.md, a SessionStart hook) so the next session started inside it picks the work up; --no-agent skips them. It also makes the build board (.himi/studio/, exactly as `himi studio --no-open` does \u2014 it never opens a browser), so every later render, test, validate, push and progress entry refreshes it; and, for a template bundled with this CLI, it makes the FIRST PICTURE itself (never for a --remote one: that is its publisher's code, and a render runs it on this machine, so next[] leaves the render to the agent after it has read the code): exactly `himi render <homeScreenId> --png --device iphone` (offline \u2014 no request; never --live), run as a child it kills after a time budget, writing .himi/shots/<home>.png and journaling it (by: himi) as the STARTING POINT (\"Starting point: the <template> template, before any of your changes\") so the board and the journal hold a picture when init returns. init also records the source it wrote (.himi/init-source.json: a content fingerprint, Markdown left out), and the first home PNG render after the source diverges from it is journaled once as \"First look at your app\" \u2014 reported as `firstLook: {image}` or `{skipped: <reason>}`, never a failed init; `--no-first-look` skips it (for scripts and CI that render themselves). The envelope LEADS with `doNow`: three lines to run now (the consent preflight, `himi run --watch --content <dir> &` with the board's path, and the postcard line), and ENDS with the same lines as `doNowAgain`, so an agent that reads only the head or only the tail (`| tail`) gets them; at a terminal they are also printed as plain text on stderr, before the JSON and again after it. Its `next[]` LEADS with the steps for THIS session, in this order for every app \u2014 the offline first render and that picture's `himi progress` postcard (only when init could not make the picture), the skill's consent preflight (authorize or mock any Wix or external startup request; with none, go straight on), and only then `himi run --watch &` \u2014 ahead of the next-session guidance", required: "<name> [--dir] [--template <t>] [--remote] [--no-agent] [--no-first-look] | --templates" },
+  { name: "init", summary: "scaffold a starter content package (OTA-only; no native shells). --template <t> starts from a full reference app (branded-lite = consumer storefront over a Wix site; owner-lite = owner CRUD/management) instead of the minimal counter; --templates lists bundled ones; --remote fetches the template off the serve plane (falls back to the bundled copy offline). The new app also gets its agent files (the same set `himi agent-init` writes: AGENTS.md, CLAUDE.md, the himalaya skill, HIMALAYA.md, a SessionStart hook) so the next session started inside it picks the work up; --no-agent skips them. It also makes the build board (.himi/studio/, exactly as `himi studio --no-open` does \u2014 it never opens a browser), so every later render, test, validate, push and progress entry refreshes it; and, for a template bundled with this CLI, it makes the FIRST PICTURE itself (never for a --remote one: that is its publisher's code, and a render runs it on this machine, so next[] leaves the render to the agent after it has read the code): exactly `himi render <homeScreenId> --png --device iphone` (offline \u2014 no request; never --live), run as a child it kills after a time budget, writing .himi/shots/<home>.png and journaling it (by: himi) as the STARTING POINT (\"Starting point: the <template> template, before any of your changes\") so the board and the journal hold a picture when init returns. init also records the source it wrote (.himi/init-source.json: a content fingerprint, Markdown left out), and the first home PNG render after the source diverges from it is journaled once as \"First look at your app\" \u2014 reported as `firstLook: {image}` or `{skipped: <reason>}`, never a failed init; `--no-first-look` skips it (for scripts and CI that render themselves). For a bundled template (never a --remote one \u2014 the preview would build and serve its publisher's code) init also STARTS the live preview itself: `himi run --watch --content <dir> --port <p> --no-open --idle-exit 30`, detached in its own process group with its output in .himi/watch.log, never waited for (the url is chosen before it builds), recorded in .himi/watch.json, and reported as `watch: {started, pid, url, board, log}` \u2014 or `{skipped: <reason>}` for `--no-watch`, a `CI` environment, a test runner, a watch already running, or a start that failed (never a failed init). The envelope LEADS with `doNow`: three lines to run now (the consent preflight, the live preview \u2014 its url and board when init started it, else `himi run --watch --content <dir> &` with the board's path \u2014 and the postcard line), and ENDS with the same lines as `doNowAgain`, so an agent that reads only the head or only the tail (`| tail`) gets them; at a terminal they are also printed as plain text on stderr, before the JSON and again after it. Its `next[]` LEADS with the steps for THIS session, in this order for every app \u2014 the offline first render and that picture's `himi progress` postcard (only when init could not make the picture), the skill's consent preflight (authorize or mock any Wix or external startup request; with none, go straight on), and only then the live preview (the running one's url, or `himi run --watch &` when init did not start it) \u2014 ahead of the next-session guidance", required: "<name> [--dir] [--template <t>] [--remote] [--no-agent] [--no-first-look] [--no-watch] | --templates" },
   { name: "template", summary: "starter-template catalog + publishing. Every template is a SHOWCASE APP \u2014 a real published release you can open running before you start from it. `list` prints available templates with metadata (title/description/tags) plus each one's start prompt \u2014 pass --remote to include the serve-plane catalog so an agent can pick one; `prompt <name>` prints just that sentence for one template (the skill URL is the public door, or the plane named by --target/--serve-url); `publish` publishes an app AS a `himi init --template` (needs a himalaya.template.json; builds a previewable release + attaches the scaffold source; --source-dir overrides which tree becomes the source, --name sets the template name; bakes a launcher icon \u2014 --icon <png>, or the committed template-icons/<name>.png \u2014 and extracts accent/palette gallery meta from the scaffold's tokens.json; --visibility unlisted keeps it out of the /v1/templates catalog \u2014 templates default to public); `trim --keep <ids>` cuts an app scaffolded from a template down to those screens (the home, and any screen the navigation pins such as a drawer body, always stays) \u2014 it deletes the other SCREENS/TEMPLATED entries whole, prunes navigation (linkableScreens, tabBar, drawer, deep links, surfaces) and drops tier5-src workers no kept screen uses, then runs validate --strict and rolls everything back if it fails (--force keeps it, --dry-run writes nothing). A kept screen that links to a removed one is refused unless --links follow (keep those too) or --links drop (remove the taps)", required: "list [--remote] | prompt <name> | publish [--dir <app>] [--source-dir <dir>] [--name <n>] [--icon <png>] [--visibility public|unlisted] [--target <t>] | trim --keep <id,id,\u2026> [--content <dir>] [--links follow|drop] [--dry-run] [--force]" },
   { name: "build", summary: "compile tier5-src/<name>/index.ts -> dist/bundles/<name>.bundle.js with esbuild (--binary = resolve published @himalaya/*); semantic TypeScript checking belongs to himi validate", required: "[--content <dir>] [--binary]" },
   { name: "functions", summary: "inspect/invoke server functions and operate durable jobs or schedules", required: "list|describe|openapi|invoke | jobs list|get|cancel|retry|dlq | schedule describe|invoke [--app <a>] [--environment preview|production] [--release <id>]" },
@@ -71501,7 +71921,7 @@ var COMMANDS = [
   { name: "validate", summary: "lint the content package (no push): fixed-contract TypeScript checking for tier5-src workers + schema/proto + token refs + component allowlist + $service bindings + strict-enum foot-guns + capability decls + worker boot dry-run + build/compile failures. Type issues are advisory warnings normally; --strict promotes them and hygiene warnings to errors. Exit 1 on any error. Off-repo, the CLI supplies its compiler and SDK declarations.", required: "[--content <dir>] [--strict]" },
   { name: "test", summary: "DERIVED behavioral crawl \u2014 no test files to write. Boots each screen's real worker, replays its onAppear, then dispatches every action site the descriptor already declares (each from a fresh boot) and checks a narrow set of unambiguous invariants: no uncaught throw, never stuck on `loading`, no `$service:` token or NaN/undefined/[object Object] reaching visible text, no binding aimed at state the worker never defines, no nav param silently dropped, no dead nav target. Catches what validate/render cannot \u2014 a WRONG REDUCER passes both with ok:true. Runs the worker in a DEVICE-PARITY sandbox (no setTimeout/setInterval, as on JSC/WebView) so a bundle that would die on device fails here. Crawls on HERMETIC DATA by default \u2014 zero network: the app's own dev/net-mocks.json first (--net <file> overrides), then the config's CMS `seed:` rows, then a canned fixture of frozen real vertical responses shipped with the CLI (exercises code paths, not API-contract truth) \u2014 so the success/mapping path runs, not just the failure UI. Two boot-only HOSTILE passes (every list empty; every request 500) then check the failure/empty day \u2014 corpus-proven, so their findings are errors. NAV EDGES are followed too: every himi.open site ($item params resolved against row 0 of its list, $service against worker state) and worker _nav directive is harvested, and each baked target is booted WITH the params the source sends \u2014 detail screens finally run their content arm; edge findings are errors tagged edge:<source>. --native runs both real native decoders over the exact baked JSON bytes; --native ios or --native android selects one. It is explicit, runs only from a Himalaya SOURCE CHECKOUT (the decoder oracles are that tree's own HimalayaCore Swift package and Gradle harness, which a published install does not ship), and needs the selected local toolchain. From a source checkout, default runs name missing native verdicts in the coverage ledger; elsewhere the ledger stays silent about them rather than offering a remedy you cannot run. --offline strips all data layers (the old reject-all axis); --no-hostile skips the hostile passes. --record (EXPLICIT, never automatic) refreshes dev/net-mocks.json from live reads first: it boots each screen (load + root onAppear ONLY \u2014 nothing the app's own launch would not fire; the tap/action crawl never sees the live transport, and only proven reads \u2014 GET, or read-shaped POST (/query, /search, /list*, \u2026) \u2014 ever reach the wire), freezes the round-trips, then crawls hermetically on the fresh fixture; record against a QA site, not production. Nodes it cannot judge headless are named, never silently passed. Exit 1 on any error. The CLI carries the authoring runtime off-repo; no per-app SDK install is required. --browser runs the whole loop (build \u2192 extract \u2192 validate \u2192 render \u2192 test) in YOUR browser instead of here, so the source never reaches a pod: it opens one screen's worker + descriptor in a tab, blocks on a loopback callback, and prints the report it posts back. One screen per tab \u2014 name it. --no-open prints the URL rather than launching a browser (SSH); --timeout <ms> bounds the wait, which matters because the page has no execution deadline of its own and an infinite loop in the worker hangs the tab.", required: "[<screenId>\u2026] [--content <dir>] [--net <file>] [--budget <ms>] [--deep [n]] [--record] [--native [ios|android]] [--no-shots] [--offline] [--no-hostile] [--all-screens] [--browser] [--no-open] [--timeout <ms>] [--json]" },
   { name: "ux", summary: "audit or record mobile UX evidence. `audit` checks the public-safe contract, seeded blank acceptance rows, placeholder source copy, app-specific mocks, and iOS/Android audit records. It warns while existing templates migrate; `--strict` promotes missing evidence. `record` stores checks performed on an installed iOS/Android build: `--checks` is required for passed|failed and empty for unavailable, which drove nothing and needs a `--reason` instead. `record` also STAMPS the release it audited (it resolves the id from a build, the same one a push would publish), because an unforced `himi push` of a release with screens refuses when no drive is recorded for THAT release, or when the one that is recorded says `failed` \u2014 the artifact stopped being advice nobody reads (#2955). `unavailable` still satisfies it; only `failed` refuses.", required: "audit [--content <dir>] [--strict] [--json] | record --content <dir> --platform ios|android --status passed|failed|unavailable [--checks back,keyboard,...] [--reason <text>]" },
-  { name: "progress", summary: 'the build JOURNAL an agent keeps for the owner while it works. `himi progress "<what changed>" --step <1-8|name> --image <png>` appends one postcard to .himi/progress.jsonl \u2014 the step is one of the customer journey\'s eight (discover, classify, plan, implement, brand, validate, review, download) \u2014 and COPIES each image, content-addressed, into .himi/history/, because .himi/shots/ is overwritten by every render and cleared by every full `himi test`, so a path into it would later show a different picture than the one the owner was sent. --image repeats. With NO --image, the home screen\'s current shot is attached automatically, only when it is no older than the last source change and not the picture the latest journaled postcard already shows; `imageAttached` in the output says whether the postcard carries a picture (with `imageNote` saying why not), and `--no-image` sends a text-only postcard. --notify also raises a best-effort desktop notification for an owner who stepped away. A bare `himi progress` prints the journal with the current step and elapsed time \u2014 also how an agent recovers its place after its context was compacted. APPROVALS: `--approve <gate> "<what>"` records one the customer just gave (gates: site-create, connect, private-data, draft, promote, push-signing, qa-build) in .himi/approvals.jsonl, and `--done <gate>` / `--drop <gate>` closes it \u2014 an approval is owed until then, and the chat that held it does not survive a new session. `--brief` prints plain text for a session start: the current step, the last postcard, every open approval, and whether this app\'s agent files are stale \u2014 the SessionStart hook `himi agent-init` installs runs exactly this. The CLI also journals milestones by itself \u2014 the first PNG render of the home screen (for an app a current `himi init` started: once as the template\'s "Starting point" while the source is what init wrote, then once as "First look at your app" after it diverges, Markdown edits not counting; once per app otherwise), a `himi test` crawl whose outcome changed since the last one (its counts or its home picture; an identical re-run writes none, and a repeat names what changed: "The home screen changed since the last crawl." or the changed counts, was \u2192 now), every draft push (with the home picture only when that shot is newer than the last source edit \u2014 otherwise the postcard says why and names `himi render <home> --png`) \u2014 marked `"by": "himi"`; they never move the journey step, carry no link or credential, and step aside (folded out of every reader) when the agent journals the same step or picture within five minutes. Local only: nothing is sent anywhere.', required: '["<message>" [--step <1-8|name>] [--image <png>]\u2026 [--no-image] [--notify]] [--content <dir>] | --approve|--done|--drop <gate> ["<note>"] | --brief' },
+  { name: "progress", summary: 'the build JOURNAL an agent keeps for the owner while it works. `himi progress "<what changed>" --step <1-8|name> --image <png>` appends one postcard to .himi/progress.jsonl \u2014 the step is one of the customer journey\'s eight (discover, classify, plan, implement, brand, validate, review, download) \u2014 and COPIES each image, content-addressed, into .himi/history/, because .himi/shots/ is overwritten by every render and cleared by every full `himi test`, so a path into it would later show a different picture than the one the owner was sent. --image repeats. With NO --image, the home screen\'s current shot is attached automatically, only when it is no older than the last source change and not the picture the latest journaled postcard already shows \u2014 except on the HANDOVER card (`--step review`), where a repeat is the point and it attaches anyway; that card\'s output also names the making-of (`makingOf`, .himi/making-of.html, rebuilt when missing or older than the journal so it ends on this card) and its `next` says to hand it to the owner beside the preview link; `imageAttached` in the output says whether the postcard carries a picture (with `imageNote` saying why not), and `--no-image` sends a text-only postcard. --notify also raises a best-effort desktop notification for an owner who stepped away. A bare `himi progress` prints the journal with the current step and elapsed time \u2014 also how an agent recovers its place after its context was compacted. APPROVALS: `--approve <gate> "<what>"` records one the customer just gave (gates: site-create, connect, private-data, draft, promote, push-signing, qa-build) in .himi/approvals.jsonl, and `--done <gate>` / `--drop <gate>` closes it \u2014 an approval is owed until then, and the chat that held it does not survive a new session. `--brief` prints plain text for a session start: the current step, the last postcard, every open approval, and whether this app\'s agent files are stale \u2014 the SessionStart hook `himi agent-init` installs runs exactly this. The CLI also journals milestones by itself \u2014 the first PNG render of the home screen (for an app a current `himi init` started: once as the template\'s "Starting point" while the source is what init wrote, then once as "First look at your app" after it diverges, Markdown edits not counting; once per app otherwise), a `himi test` crawl whose outcome changed since the last one (its counts or its home picture; an identical re-run writes none, and a repeat names what changed: "The home screen changed since the last crawl." or the changed counts, was \u2192 now), every draft push (with the home picture only when that shot is newer than the last source edit \u2014 otherwise the postcard says why and names `himi render <home> --png`), and ONE rule for a long silence: a successful home `render --png` more than ten minutes after the newest postcard of any kind, with a picture the latest postcard does not show, journals "Still building: here\'s the home screen now." with it (never twice within the window). When a crawl\'s or a draft\'s home picture is the first of an app whose source diverged, "First look at your app" is journaled first, from that shot, once. All are marked `"by": "himi"`; they never move the journey step, carry no link or credential, and step aside (folded out of every reader) when the agent journals the same step or picture within five minutes. Local only: nothing is sent anywhere.', required: '["<message>" [--step <1-8|name>] [--image <png>]\u2026 [--no-image] [--notify]] [--content <dir>] | --approve|--done|--drop <gate> ["<note>"] | --brief' },
   { name: "studio", summary: "open the BUILD BOARD \u2014 one local page the owner can leave open while an agent builds their app, which fills itself in: every screen as it renders (NEW/CHANGED badges, and each earlier version kept for a filmstrip), the journey stepper and the latest postcard from `himi progress`, the validate/test/UX/draft checks as they run, the site next to the app's home screen with its palette, and the navigation the test crawl followed. Writes .himi/studio/index.html and opens it; the page re-reads its state every two seconds, so nothing needs to be served. OPT-IN BY EXISTENCE: until this command (or `himi init`, which makes the board for every app it creates, without opening a browser) has run, no other command touches .himi/studio/ \u2014 after it, render/test/validate/push/icon/site/ux/progress each refresh the board as they finish (best-effort; never fails a command). Every image is a content-addressed copy in .himi/history/, never a live path into .himi/shots/. Local only, no secrets: it never reads a preview token, handover code or control token. --no-open prints the path instead (SSH, CI). `himi studio reel` writes the MAKING-OF: one self-contained HTML file (every image inlined, nothing fetched) with a flipbook of the home screen version by version, captioned by the postcard in effect at the time, the final screens, and every postcard \u2014 sized to stay attachable, thinning frames first. Defaults to .himi/making-of.html (never archived by push), which every successful `himi push --draft` also rebuilds and names as `reel` in its output; --out to put it elsewhere. The output names that file as the one to hand the owner (`handover: {file, hint}` in JSON; two plain lines at a terminal) \u2014 beside the preview link, never instead of it.", required: "[--content <dir>] [--no-open] | reel [--out <file>] [--no-open]" },
   { name: "render", summary: "headless-render a screen with the web renderer: render-tree + diagnostics, optional --png [<file>] (bare: .himi/shots/<id>.png, what the build board shows), --scheme dark, --tree. Local by default (content dir). Pass --remote --app --release to hit GET /v1/preview/\u2026/render on the serve plane after a push. Boots the worker so $service bindings resolve; --static raw bindings; --live real Wix fetches; --state injects worker state; --input supplies pre-boot navigation params; --width/--device for PNG viewport; --rtl for dir=rtl + $env:isRTL.", required: "<screenId> [--content <dir>] [--scheme dark] [--png [<file>]] [--tree] [--static] [--live] [--state <json|file>] [--input <json|file>] [--width <px> | --device <name>] [--rtl] [--remote --app --release]" },
   { name: "cms", summary: "inspect, provision, and seed the app's CMS (Wix Data) collections, declared as a `cms` block in config.ts. `query` is READ-ONLY \u2014 by default it fetches ONLY the physical ids `config.ts` declares (item counts + schema drift) and reports `siteScanned: false`; it never lists the site, so an UNDECLARED `himi_<app>_` collection this app owns is not reached without `--all`. `--all` SCANS the site \u2014 every collection it lists is labeled `owned`/`adopted`/`foreign`, and it describes every foreign one \u2014 id, non-system field keys + types, and the site's read role \u2014 so an app with no `cms` block at all can DISCOVER a collection to adopt (`--all` is the one case where a missing `cms` block is not 'nothing to do'). Foreign collections are described up to a cap and are never item-counted (`itemCount: null`), because a row count is one query each; `foreign.count` is how many the scan LISTED \u2014 it follows the list endpoint's pages, and `listingIncomplete: true` says when the walk stopped short of the end, with `unlistedCollections` counting what it left out when Wix gave a paging total \u2014 and `foreign.truncated` says how many of those went undescribed, each still NAMED in `foreign.others` (id + displayName), so a collection the site already has is never hidden behind the cap. The scan is OWNER-scoped \u2014 it needs --site <msid> (or WIX_SITE_ID) plus owner auth via `wix token`; a visitor token can read a public collection's ITEMS but can never enumerate collections, so there is no tokenless discovery path. `create` reconciles declared collections additively and idempotently, and REFUSES any id outside the app's `himi_<app>_` namespace, so it is safe against a production site. It reports declared-vs-site `permissionDrift` but never writes permissions unless asked with --apply-permissions, so a field reconcile can't silently revert access control changed in the dashboard. `seed` inserts the git-tracked `seed:` rows into EMPTY owned collections (--force to add to a non-empty one; --ai writes placeholder rows plus a refinement prompt for you to review). Adopted collections (declared by `wixId`) are read-only and never created, updated, or seeded. Site from --site <msid> or WIX_SITE_ID; owner auth via `wix token`.", required: "query|create|seed [--site <msid>] [--content <dir>] [--all] [--dry-run] [--force] [--allow-destructive] [--apply-permissions] [--only <id>] [--ai] [--count <n>]" },
@@ -71510,7 +71930,7 @@ var COMMANDS = [
   { name: "icon", summary: "the app's LAUNCHER icon \u2014 the home-screen / store mark, which is BINARY-floor and never over-the-air (distinct from `himi icons`, the in-screen glyph vocabulary). `status`/`check` report what this app would actually ship and validate it against both stores: exact 1024x1024, no tRNS chunk, non-interlaced, and \u2014 when the optional image toolchain is installed \u2014 no transparent regions (Apple permits an alpha channel but not transparent pixels: ITMS-90717), no pre-masked corners, no letterboxed wordmark; they also print the store-policy checklist no checker can decide. `set <file.png>` installs supplied art, `from-site` installs the logo `himi site analyze` downloaded, and `generate` makes a gradient tile + glyph \u2014 all three trim, flatten onto the app's accent, write the 1024 opaque master plus the 512 Play listing icon (Play wants 32-bit WITH alpha, so it is a separate file), and DECLARE it in himalaya.content.json, without which the release bakes no icon at all", required: "[status|check] | set <file.png> | from-site [--book <dir>] | generate [--glyph <g>] [--accent <hex>] | glyphs [--content <dir>] [--json]" },
   { name: "login", summary: "obtain a scoped serve-control token from Wix identity and store it in ~/.himalaya/serve-targets.json (so push/promote need no hand-pasted token). Three modes: --browser (your own Wix account, no VPN/BO), --wix (HEADLESS \u2014 the machine's own Wix CLI credential; the mode a CI pod or agent container can satisfy), --dpx (Wix employee, reads ~/.dpx/session/token). RFC 0026 WS3.", required: "[--browser|--wix|--dpx] [--target <t>] [--issue-url <url>]" },
   { name: "logout", summary: "remove the stored control token for a target", required: "[--target <t>]" },
-  { name: "notify", summary: "`setup` optionally configures Branded/Ping from local customer key files; `status --refresh` reads live backend readiness. Setup may be deferred while building. These use serve-control and require owner plus Wix account authentication. `send`, `tokens`, `doctor`: send a REAL push notification to registered devices (RFC 0036 WS5) \u2014 APNs .p8 over HTTP/2 for iOS, FCM v1 for Android. `send` targets one device (--token / --device <registry id>) or fans out to the whole app (--all), reporting a per-device result; a token the provider says is uninstalled (APNs 410 Unregistered / FCM UNREGISTERED) is auto-disabled, while a merely wrong one (BadDeviceToken \u2014 usually a sandbox/production mismatch) is recorded and left enabled. `tokens` lists the registry. `doctor` reports which credentials resolve and which sender each platform picks. Talks to the admin-server via --admin-url/HIMALAYA_ADMIN_URL, authenticated with --admin-session/HIMALAYA_ADMIN_SESSION. NOT `himi push`, which publishes a release.", required: "setup|status [--content <dir>] [--target <t>] [--refresh] [--yes] [--no-push-setup] | send|tokens|doctor [--app <a>] [--token <t> | --device <id> | --all] [--title <s>] [--body <s>] [--link <url>] [--platform ios|android] [--badge <n>] [--channel <id>] [--silent] [--dry-run] [--json]" },
+  { name: "notify", summary: "`setup` optionally configures Branded/Ping from local customer key files; `status --refresh` reads live backend readiness. Setup may be deferred while building. These use serve-control and require owner plus Wix account authentication. `send`, `tokens`, `doctor`: send a REAL push notification to registered devices (RFC 0036 WS5) \u2014 APNs .p8 over HTTP/2 for iOS, FCM v1 for Android. `send` targets one device (--token / --device <registry id>) or fans out to the whole app (--all), reporting a per-device result; a token the provider says is uninstalled (APNs 410 Unregistered / FCM UNREGISTERED) is auto-disabled, while a merely wrong one (BadDeviceToken \u2014 usually a sandbox/production mismatch) is recorded and left enabled. `tokens` lists the registry. `doctor` reports which credentials resolve and which sender each platform picks. Talks to the admin-server via --admin-url/HIMALAYA_ADMIN_URL, authenticated with --admin-session/HIMALAYA_ADMIN_SESSION. `send --provider ping` is the hosted alternative: the serve plane sends one test notification to one site member through Ping as Himalaya, with owner login instead of provider keys, and reports acceptance, never delivery. NOT `himi push`, which publishes a release.", required: "setup|status [--content <dir>] [--target <t>] [--refresh] [--yes] [--no-push-setup] | send --provider ping [--content <dir>] [--app <a>] [--site <msid>] --member-email <email> --title <s> [--body <s>] --link <url> [--request-id <uuid>] [--dry-run] [--json] | send|tokens|doctor [--app <a>] [--token <t> | --device <id> | --all] [--title <s>] [--body <s>] [--link <url>] [--platform ios|android] [--badge <n>] [--channel <id>] [--silent] [--dry-run] [--json]" },
   { name: "site", summary: "PROVISION a Wix project, then analyze or extend it. `create` is the one door that makes a site instead of adopting one: POST /funnel/projects/v1/create (a WIX site, a HEADLESS backend, a BRANDED_APP, or a VIBE site), and for headless it also mints the OAuth app whose id IS the `WIX_CLIENT_ID` \u2014 with --redirect-uri already registered, because an unregistered redirect makes native signInDirect fail at redirect-session. `--verticals` REQUIRES `--template` and reports only what Wix confirmed: measured, installing onto a project created from the BLANK template returns 200 while the vertical's API answers 428 forever, because there is no site for it to attach to (the install asks for CREATE_SITE). A real template ships its verticals installed and populated, and installing further ones onto it then works. It MUTATES your Wix account and needs --yes; without it you get the payload and nothing is sent. `list` is the read-only site inventory (with each site's premium flag, which is what explains an installed-but-428 vertical). Auth is the account-scoped `wix token` (no --site), falling back to WIX_API_KEY + WIX_ACCOUNT_ID. `client` is the same OAuth step for a site that ALREADY exists \u2014 the one himi adopts rather than makes \u2014 so a clientId no longer means a manual trip to the dashboard: `client ensure` reconciles rather than mints, because a site can already carry a client with NO registered redirect and shipping that one fails signInDirect at runtime; it reuses a client that carries --redirect-uri, PATCHes one that matches --name but lacks it (unioning, so another app's redirect survives), and creates only when there is nothing to reuse (--new forces a fresh one). --name IS the idempotency key. `client` auth is SITE-scoped (`wix token --site <msid>`) because minting is owner-of-that-site, and --yes gates every mutation: a site that already has a usable client resolves WITHOUT it, but --write-provisioning needs --yes even then because it rewrites a manifest on disk (the dry run's planned.provisioning names the file). That query endpoint IGNORES paging (measured: query.paging, cursorPaging and a top-level paging all return the full set at offset 0), so when pagingMetadata reports more clients than came back, `ensure` REFUSES EVERY outcome \u2014 create, patch AND reuse. Reuse is refused too because pickClient breaks ties on the OLDEST createdDate, so an omitted older same-named MOBILE client with the same redirect would win a later complete read and the resolved clientId would MOVE between runs \u2014 and it gets written into provisioning.json; convergence is what makes a stray duplicate untidy rather than harmful. --name cannot narrow the query (no filter is sent; the name is applied to the rows after they arrive), so the recovery is the dashboard; --new skips the query entirely. A `patched` result is verified against what Wix STORED \u2014 the redirect list is read off the PATCH response, and re-read via GET when the response omits it, because falling back to the list himi just sent would make the guard pass vacuously on exactly the silent no-op it exists to catch. `client list` is the read-only inventory of a site's clients: act on its `shippable` column rather than `hasRedirect`, because shippable ALSO requires a MOBILE applicationType and `ensure` refuses a WEB client \u2014 a WEB one carrying your redirect looks right and is not a candidate \u2014 and it sets truncated:true rather than presenting a partial inventory as the whole one. `analyze --read-only` returns API-only generation context as JSON (identity, access probes, CMS permissions and selected redacted Velo source); it needs no URL/browser and never uploads or applies anything. `analyze` reads a site into a business-book folder (REST + Playwright, GET-only); `--url` alone is the visitor-only pass over the published pages, and `--client-id` adds the vertical probes and the app binding `--apply` requires; `site function` list/get/put/publish/invokes that site's Velo HTTP functions and is not `himi functions` (serve-plane jobs). `--apply` bakes into a brandable shell; `--shell` takes the same names `himi dist --shell` does and defaults to branded-lite, and a shell that ships no prepare:customer is refused by name rather than half-built. `--shell brandy` (the site shell, RFC 0062) also derives the site's page map from its published pages and header menu \u2014 Home first, up to four tabs for the pages a visitor returns to, the rest in the drawer \u2014 into the overlay's `site` block, so it can be edited before `--apply`; only a site shell ever receives that block. It never overwrites any shell's committed apps/<shell>/provisioning.json.", required: "create <name> [--type wix|headless|branded-app|vibe] [--template <guid>] [--verticals stores,bookings,\u2026] [--folder <guid>] [--redirect-uri <uri>] [--no-oauth-app] [--write-provisioning [path]] [--site-url <url>] [--json] --yes | list | client ensure|list --site <msid> [--name <name>] [--redirect-uri <uri>] [--new] [--write-provisioning [path]] [--site-url <url>] [--json] --yes | analyze --read-only [--site <msid>] [--client-id <id>] [--json] | analyze --url <https> [--client-id <id>] [--site <msid>] [--out <dir>] [--redirect-uri <uri>] [--apply] [--shell " + SHELL_ENUM + "] | function list|get|put|publish|invoke [--site <msid>] [--url <https>] [--method GET|POST|PUT|DELETE] [--source <file>] [--body <json>] [--publish] [--invoke]" },
   { name: "doctor", summary: 'off-VPN preflight in one shot: probe the PUBLIC data plane (www.wixapis.com \u2014 reachable off-VPN), the INTERNAL serve/control plane for the selected target (VPN-gated), and report auth state (dpx session on disk + stored control token). --dpx additionally runs a live, EADDRINUSE-safe `dpx whoami`. Machine-readable with --json (an unreachable internal plane carries a stable code:"needs_vpn" so an agent branches on the code, not the prose); human-readable otherwise. Never loads the authoring runtime \u2014 works off-repo.', required: "[--target <t>] [--dpx] [--json] [--data-url <url>] [--timeout <ms>]" },
   { name: "upgrade", summary: "install the newest published CLI (`npm i -g @wix/himalaya-cli@latest`) and report what moved. This is the explicit door: himi also updates itself when the running build is more than a week old \u2014 unattended it just does it and re-runs your command, at a terminal it asks first \u2014 and `HIMI_NO_UPDATE_CHECK=1` turns that off, leaving this command as the way to catch up. Reports `unchanged` rather than claiming success when npm exits 0 without moving the version, which is what a registry mirror serving its own pinned copy looks like.", required: "[--json]" },
@@ -71519,7 +71939,7 @@ var COMMANDS = [
   { name: "import", summary: "turn a `himi pack --dev` package back into an EDITABLE content package \u2014 the file counterpart of `himi pull`, needing no serve plane, no account and no network. Refuses an invalid package before trusting its source (the content hash is recomputed over every entry on open, so the archive is provably the one that was packed), and refuses a RELEASE package by naming the absence \u2014 it carries built output and no source \u2014 rather than reporting a missing file. `--name` re-substitutes the app identity through the same machinery `himi init --template` and `himi pull --name` use, so the restored tree is a NEW app rather than a second copy of the same one, and a name that also appears inside a screen id (`feed` in `feed_home`) is left alone. A non-empty destination needs `--force` and a merge NAMES what it kept (`left: [...]`), the same contract `himi pull --force` has; a shape clash is refused whole before anything is written. There is no `--replace`: a file you were handed is not the plane's per-release archive.", required: "<package.himi> [--out <dir>] [--name <new>] [--force]" },
   { name: "pull", summary: "restore an app's SOURCE from the serve plane into an editable content package \u2014 the other half of `himi push`, which archives the content package on every publish. Owner or editor only: a viewer may download the RUNNING app (`/v1/owner/package`), not the codebase it was built from. A PAST release is restorable, not only the live one \u2014 the archive is content-addressed per release, so it has none of the live-single-slot problem that makes `himi pack` current-release-only. Two limits: pruning keeps the current release plus the newest ~20 ledger entries, and a release id identifies OTA content rather than source, so a source-only change republishes under the same id and replaces that id's archive. A release published before source archiving shipped, or pushed with `--no-source`, answers `app_source_not_found` and says to push again. `--name` re-substitutes the app identity through the same machinery `himi init --template` uses, so the restored tree is a NEW app rather than a second copy of the same one, and a name that also appears inside a screen id (`feed` in `feed_home`) is left alone. A NON-EMPTY destination is refused unless you say which you mean: `--force` merges and reports \u2014 it writes the archive over what is there, keeps files the release does not carry, and NAMES every one of them as `left: [...]` so a tree that matches no release is never silent (#2437); `--replace` restores exactly what was archived, removing those files first (`removed: [...]`) and implying `--force`. `--replace` refuses a directory holding no `himalaya.content.json`, so a mistyped `--out` cannot clear an unrelated tree, and the only paths it can remove are the ones a push would have archived \u2014 `.git/`, `node_modules/`, `dist/`, `.env*` and key material are out of its reach by construction.", required: "<app> [--release <id>] [--out <dir>] [--name <new>] [--force|--replace] [--target <t>]" },
   { name: "share", summary: "publish or revoke a content-addressed `.himi` share link. The package must be a validated archive for an already-published release; the resulting https URL is safe to QR, copy, or open in Himi Player.", required: "--file <package.himi> [--expires-at <ISO>] | revoke --app <app> <shareId>" },
-  { name: "run", summary: "serve a .himi package on localhost and open it in a browser \u2014 no serve plane, no dev-server, no setup. Given no argument it builds the current content package first, so `himi run` is the inner loop: edit, run, look at it. The SPA and /v1 are served from ONE origin because Tier-5 bundle fetches on web are same-origin-only. --chrome preview frames the app in a device chassis; --chrome app serves it as a plain web app. Blocks until Ctrl-C, like any dev server. --browser runs the whole plane INSIDE the tab (service worker + in-memory store) so no app code executes in this process or on any pod. --lan also serves it to the local network and prints a QR, so a phone on the same Wi-Fi opens it as the real app, full screen. --watch keeps the preview LIVE: every save in the content package rebuilds it and repaints the open tab with only what changed (the dev-server's hot-reload events); a build that fails keeps the last good preview on screen and says why. Any `himi run` of a content package (plain, --watch or --browser) frames its preview on the build board (`himi studio`) while it serves, and all but --browser also serve that board at /__himi/studio/ on the preview's own origin. Its .himi/run.json (pid, watching) is also how `himi render` and `himi test` tell a live --watch is running: while none is, they add a `reminder` naming `himi run --watch --content <dir> &` (at most once every ten minutes per app) \u2014 first in `next[]` and again as the envelope's LAST key (the last line of `himi test`'s plain report), so an output read with `tail` still carries it.", required: "[<package.himi|dir|url>] [--browser] [--watch] [--lan] [--content <dir>] [--port <n>] [--chrome preview|app] [--screen <id>] [--surface <id>] [--no-open] [--spa <url>]" },
+  { name: "run", summary: "serve a .himi package on localhost and open it in a browser \u2014 no serve plane, no dev-server, no setup. Given no argument it builds the current content package first, so `himi run` is the inner loop: edit, run, look at it. The SPA and /v1 are served from ONE origin because Tier-5 bundle fetches on web are same-origin-only. --chrome preview frames the app in a device chassis; --chrome app serves it as a plain web app. Blocks until Ctrl-C, like any dev server. --browser runs the whole plane INSIDE the tab (service worker + in-memory store) so no app code executes in this process or on any pod. --lan also serves it to the local network and prints a QR, so a phone on the same Wi-Fi opens it as the real app, full screen. --watch keeps the preview LIVE: every save in the content package rebuilds it and repaints the open tab with only what changed (the dev-server's hot-reload events); a build that fails keeps the last good preview on screen and says why. --idle-exit <min> (with --watch only) stops the watch once that many minutes pass with no source save, printing `{\"watch\":\"idle_exit\"}` and removing its .himi/run.json on the way out \u2014 the watch `himi init` starts passes 30; one started by hand runs until Ctrl-C. Stopping (Ctrl-C, SIGTERM, SIGHUP or the idle exit) removes the run's own .himi/run.json. Any `himi run` of a content package (plain, --watch or --browser) frames its preview on the build board (`himi studio`) while it serves, and all but --browser also serve that board at /__himi/studio/ on the preview's own origin. Its .himi/run.json (pid, watching) is also how `himi render` and `himi test` tell a live --watch is running: while none is, they add a `reminder` naming `himi run --watch --content <dir> &`, and while one is (the one `himi init` started, usually, whose .himi/watch.json vouches for it until it serves) the reminder names its url and board instead (either at most once every ten minutes per app) \u2014 first in `next[]` and again as the envelope's LAST key (the last line of `himi test`'s plain report), so an output read with `tail` still carries it.", required: "[<package.himi|dir|url>] [--browser] [--watch] [--idle-exit <min>] [--lan] [--content <dir>] [--port <n>] [--chrome preview|app] [--screen <id>] [--surface <id>] [--no-open] [--spa <url>]" },
   { name: "mcp", summary: "run the himi tools as a local Model Context Protocol server over stdio, for coding agents \u2014 Claude Code, Cursor, Codex, VS Code. Tools: docs/components/sdk/icons, init, build, validate, test (hermetic), render (returns the PNG), progress, a live preview (start/status/stop a `himi run --watch`), whoami, and DRAFT-only push/share/preview links \u2014 never promote, login, dist or secrets. Each tool runs the same command in-process on the content package on disk (default: the host's workspace root). `himi init` and `himi agent-init` write the config for every host (.mcp.json, .cursor/mcp.json, .vscode/mcp.json, .codex/config.toml when absent) plus a `himi-preview` launch configuration (.claude/launch.json) that opens the live preview in Claude Code desktop's browser pane. Never self-updates (npx already runs the current CLI). Blocks until the host closes stdin. `himi mcp plugin --out <dir>` writes the Claude Code plugin (the customer skill + this server) as a folder \u2014 the same plugin the serve plane's marketplace hands out at /.claude-plugin/marketplace.json.", required: "[plugin --out <dir>]" },
   { name: "preview", summary: "print the shareable web URL + himi:// deep link + agent /v1/preview JSON URLs for an app+release; --surface frames the web preview as any catalog surface (?surface=)", required: "--app --release [--screen] [--surface]" },
   { name: "surfaces", summary: "the surface catalog vs this app's envelope (platforms.json): targeted surfaces, the opt-in key for the rest, per-surface preview links with --app --release, and which widget families the package produces with --measure-widgets (which runs its built bundles)", required: "[--content <dir>] [--app --release] [--measure-widgets]" },
@@ -71603,16 +72023,16 @@ function createScopedRegistryResolver(exec = execNpmConfig) {
 }
 var SCOPED_REGISTRY_TIMEOUT_MS = 5e3;
 function execNpmConfig(file, args, options) {
-  return new Promise((resolve52, reject) => {
-    execFile(file, args, { ...options, windowsHide: true }, (error, stdout) => error ? reject(error) : resolve52(String(stdout)));
+  return new Promise((resolve53, reject) => {
+    execFile(file, args, { ...options, windowsHide: true }, (error, stdout) => error ? reject(error) : resolve53(String(stdout)));
   });
 }
 var npmScopedWixRegistry = createScopedRegistryResolver();
 async function scopedRegistryBefore(lookup2, deadline) {
   let cancel = () => {
   };
-  const expired = new Promise((resolve52) => {
-    const timer = setTimeout(() => resolve52(void 0), Math.max(0, deadline - Date.now()));
+  const expired = new Promise((resolve53) => {
+    const timer = setTimeout(() => resolve53(void 0), Math.max(0, deadline - Date.now()));
     cancel = () => clearTimeout(timer);
   });
   try {
@@ -71677,7 +72097,7 @@ function packageVersion(path2) {
   }
 }
 function resolvedSdkVersion(fromDir = process.cwd(), bundledManifest = new URL("./authoring-runtime/node_modules/@wix/himalaya/package.json", import.meta.url)) {
-  let dir = resolve51(fromDir);
+  let dir = resolve52(fromDir);
   for (; ; ) {
     const version2 = packageVersion(join64(dir, "node_modules", "@wix", "himalaya", "package.json"));
     if (version2) return { version: version2, source: "local" };
@@ -71842,7 +72262,7 @@ function thisHost() {
   return hostname().replace(/\s+/g, "_");
 }
 function lockStamp(now) {
-  return `${now} ${process.pid} ${thisHost()} ${randomUUID6()}`;
+  return `${now} ${process.pid} ${thisHost()} ${randomUUID7()}`;
 }
 function processAlive(pid) {
   try {
@@ -71996,21 +72416,21 @@ function loaderArgs(execArgv) {
 }
 var spawnUpdateRefresh = createUpdateRefreshSpawner();
 function createTrimValidator(deps = {}, spawnFn = spawn7) {
-  const outcome = (code, report2, said) => {
+  const outcome = (code, report3, said) => {
     let counts;
     let errors;
     try {
-      const parsed = JSON.parse(report2);
+      const parsed = JSON.parse(report3);
       counts = parsed.counts;
       if (Array.isArray(parsed.findings)) {
-        const text6 = (v) => typeof v === "string" && v ? v : void 0;
+        const text8 = (v) => typeof v === "string" && v ? v : void 0;
         errors = parsed.findings.filter((f) => f && f.severity === "error" && typeof f.id === "string").map((f) => ({
           id: f.id,
-          message: text6(f.message) ?? "",
-          ...text6(f.pass) ? { pass: text6(f.pass) } : {},
-          ...text6(f.screen) ? { screen: text6(f.screen) } : {},
-          ...text6(f.path) ? { path: text6(f.path) } : {},
-          ...text6(f.ruleCode) ? { ruleCode: text6(f.ruleCode) } : {}
+          message: text8(f.message) ?? "",
+          ...text8(f.pass) ? { pass: text8(f.pass) } : {},
+          ...text8(f.screen) ? { screen: text8(f.screen) } : {},
+          ...text8(f.path) ? { path: text8(f.path) } : {},
+          ...text8(f.ruleCode) ? { ruleCode: text8(f.ruleCode) } : {}
         }));
       }
     } catch {
@@ -72018,7 +72438,7 @@ function createTrimValidator(deps = {}, spawnFn = spawn7) {
     return { code, counts, ...errors ? { errors } : {}, ...code !== 0 ? { tail: said.slice(-4e3) } : {} };
   };
   return async (dir, opts = {}) => {
-    const argv = ["validate", "--content", resolve51(dir), "--strict", "--skip-version-check"];
+    const argv = ["validate", "--content", resolve52(dir), "--strict", "--skip-version-check"];
     if (!opts.fresh) {
       const out2 = [];
       const err = [];
@@ -72634,7 +73054,7 @@ function keptPlan(kept) {
   return note ? { kept, note } : {};
 }
 async function initFromRemoteTemplate(name, parentDir, template, c) {
-  const dir = resolve51(parentDir, name);
+  const dir = resolve52(parentDir, name);
   if (existsSync66(join64(dir, "himalaya.content.json"))) {
     throw new Error(`content package already exists at ${dir}`);
   }
@@ -72647,17 +73067,17 @@ async function initFromRemoteTemplate(name, parentDir, template, c) {
   return finishScaffold(materializeSource(archive.files, name, dir), template);
 }
 function contentDir(flags) {
-  return resolve51(str8(flags.content) ?? process.cwd());
+  return resolve52(str8(flags.content) ?? process.cwd());
 }
 function renameRestoredSource(restored, declaredApp, renamed) {
-  const text6 = {};
+  const text8 = {};
   for (const entry of restored) {
     const decoded = entry.bytes.toString("utf8");
-    if (Buffer.from(decoded, "utf8").equals(entry.bytes)) text6[entry.path] = decoded;
+    if (Buffer.from(decoded, "utf8").equals(entry.bytes)) text8[entry.path] = decoded;
   }
-  const sentineled = sentinelizeArchive(text6, declaredApp);
+  const sentineled = sentinelizeArchive(text8, declaredApp);
   for (const entry of restored) {
-    if (!(entry.path in text6)) continue;
+    if (!(entry.path in text8)) continue;
     const body = sentineled[entry.path];
     if (body !== void 0) entry.bytes = Buffer.from(substituteIdentity(body, renamed), "utf8");
   }
@@ -72691,7 +73111,7 @@ function restoreDestinationIssue(dest, force) {
   return null;
 }
 function isHimalayaMonorepoCheckout(start) {
-  let dir = resolve51(start);
+  let dir = resolve52(start);
   for (; ; ) {
     if (existsSync66(join64(dir, "tools", "himi-cli", "src", "cli.ts")) && existsSync66(join64(dir, "core", "serve", "src", "server.ts"))) return true;
     const parent = dirname36(dir);
@@ -72753,7 +73173,7 @@ function materializeForPreview(appDir3, slug, displayName) {
   const forBuild = Object.fromEntries(
     Object.entries(files).map(([rel, body]) => [rel, rel === "himalaya.content.json" ? substituteIdentity(body, slug) : body])
   );
-  const repoRoot2 = resolve51(fileURLToPath26(new URL("../../..", import.meta.url)));
+  const repoRoot2 = resolve52(fileURLToPath26(new URL("../../..", import.meta.url)));
   const root = join64(repoRoot2, "node_modules", ".cache", "himi-template-preview");
   const stillRunning = (pid) => {
     try {
@@ -72999,7 +73419,7 @@ Seed your coding agent with \`himi agent-init\`. Guides: ${idx.portalUrl}`);
       return 0;
     }
     case "agent-init": {
-      const dir = resolve51(str8(flags.dir) ?? process.cwd());
+      const dir = resolve52(str8(flags.dir) ?? process.cwd());
       const { seedAgentFiles: seedAgentFiles2, NotAContentPackage: NotAContentPackage2 } = await Promise.resolve().then(() => (init_agent_context(), agent_context_exports));
       let res;
       try {
@@ -73556,7 +73976,7 @@ himi v${cliVersion()} \u2014 run \`himi --version\`. If authoring commands fail
           return 2;
         }
         const template = str8(flags.template);
-        const parentDir = resolve51(str8(flags.dir) ?? process.cwd());
+        const parentDir = resolve52(str8(flags.dir) ?? process.cwd());
         const withAgentFiles = async (dir) => {
           const seeded = await seedAgentFilesFor(dir, flags);
           if (!seeded.agent || "error" in seeded.agent) return seeded;
@@ -73576,16 +73996,23 @@ himi v${cliVersion()} \u2014 run \`himi --version\`. If authoring commands fail
           return { ...seeded, next };
         };
         const startSession = async (dir, agent2, source) => {
-          const { openBoardForSession: openBoardForSession2, sessionSteps: sessionSteps2, homeScreenIdOf: homeScreenIdOf2, firstLookAtInit: firstLookAtInit2, recordInitSource: recordInitSource2, doNowBlock: doNowBlock2 } = await Promise.resolve().then(() => (init_milestones(), milestones_exports));
+          const { openBoardForSession: openBoardForSession2, sessionSteps: sessionSteps2, homeScreenIdOf: homeScreenIdOf2, firstLookAtInit: firstLookAtInit2, recordInitSource: recordInitSource2, doNowBlock: doNowBlock2, startWatchAtInit: startWatchAtInit2 } = await Promise.resolve().then(() => (init_milestones(), milestones_exports));
           const board = await openBoardForSession2(dir);
           const home = homeScreenIdOf2(dir);
           recordInitSource2(dir, { template: template ?? null });
           const firstLook = flags["no-first-look"] === true ? { skipped: "--no-first-look" } : await firstLookAtInit2(dir, { source, home, entry: fileURLToPath26(import.meta.url), loader: loaderArgs(process.execArgv) });
           const pictured = "image" in firstLook;
+          const watch2 = await startWatchAtInit2(dir, {
+            source,
+            app: await appId(dir),
+            entry: fileURLToPath26(import.meta.url),
+            loader: loaderArgs(process.execArgv),
+            noWatch: flags["no-watch"] === true
+          });
           const { next: later2, ...rest } = agent2;
-          const doNow = doNowBlock2({ dir, home, pictured, source });
+          const doNow = doNowBlock2({ dir, home, pictured, source, watch: watch2 });
           sayDoNow(doNow);
-          return { doNow, ...rest, board, firstLook, next: [...sessionSteps2({ dir, home, pictured, source }), ...later2 ?? []] };
+          return { doNow, ...rest, board, firstLook, watch: watch2, next: [...sessionSteps2({ dir, home, pictured, source, watch: watch2 }), ...later2 ?? []] };
         };
         const sayDoNow = (doNow, again = false) => {
           if (io.isTTY === true && flags.json !== true) io.error(`Do these now${again ? " (again)" : ""}:
@@ -73710,8 +74137,8 @@ ${doNow.map((l) => `  ${l}`).join("\n")}`);
                 return 2;
               }
             }
-            const appDir3 = resolve51(str8(flags.dir) ?? process.cwd());
-            const sourceDir = resolve51(str8(flags["source-dir"]) ?? appDir3);
+            const appDir3 = resolve52(str8(flags.dir) ?? process.cwd());
+            const sourceDir = resolve52(str8(flags["source-dir"]) ?? appDir3);
             let meta;
             try {
               meta = JSON.parse(readFileSync79(join64(sourceDir, TEMPLATE_META_FILE), "utf8"));
@@ -73753,7 +74180,7 @@ ${doNow.map((l) => `  ${l}`).join("\n")}`);
               ...hasWorkers ? { tier5Dir: bundleOutDir2(buildDir) } : {},
               collect: { lint: true, strict }
             });
-            const scaffoldSourceFindings = resolve51(sourceDir) === resolve51(appDir3) ? [] : [
+            const scaffoldSourceFindings = resolve52(sourceDir) === resolve52(appDir3) ? [] : [
               ...tokenColorIssues(sourceDir),
               ...surfaceIssues(sourceDir, void 0, strict),
               ...await fontIssues(sourceDir, strict),
@@ -73765,7 +74192,7 @@ ${doNow.map((l) => `  ${l}`).join("\n")}`);
               message: `scaffold source (--source-dir ${sourceDir}): ${issue2.message}`
             }));
             const { navIssues: navIssues2 } = await Promise.resolve().then(() => (init_nav_lint(), nav_lint_exports));
-            const { report: report2, hasErrors } = summarizeLint(app, bres, outcome, strict, [
+            const { report: report3, hasErrors } = summarizeLint(app, bres, outcome, strict, [
               ...await cmsIssues(buildDir, app, strict, { local: true }),
               ...surfaceIssues(buildDir, outcome.surfaceNav, strict),
               ...tokenColorIssues(buildDir),
@@ -73775,7 +74202,7 @@ ${doNow.map((l) => `  ${l}`).join("\n")}`);
               ...scaffoldSourceFindings
             ]);
             if (hasErrors && !force) {
-              print({ ...report2, published: false, hint: "lint found errors \u2014 fix them, or re-run with --force to publish anyway" });
+              print({ ...report3, published: false, hint: "lint found errors \u2014 fix them, or re-run with --force to publish anyway" });
               return 1;
             }
             const payload = await loadReleaseFromDir(app, out2);
@@ -73796,7 +74223,7 @@ ${doNow.map((l) => `  ${l}`).join("\n")}`);
               }));
               return 1;
             }
-            const iconPath = str8(flags.icon) ? resolve51(str8(flags.icon)) : templateIconPath(name);
+            const iconPath = str8(flags.icon) ? resolve52(str8(flags.icon)) : templateIconPath(name);
             let iconHash;
             if (iconPath) {
               try {
@@ -74050,7 +74477,7 @@ ${doNow.map((l) => `  ${l}`).join("\n")}`);
           ...hasWorkers ? { tier5Dir: bundleOutDir2(dir) } : {},
           collect: { lint: true, strict }
         });
-        const { report: report2, hasErrors } = summarizeLint(app, bres, outcome, strict, [
+        const { report: report3, hasErrors } = summarizeLint(app, bres, outcome, strict, [
           ...await cmsIssues(dir, app, strict, { local: true }),
           ...surfaceIssues(dir, outcome.surfaceNav, strict),
           ...tokenColorIssues(dir),
@@ -74067,10 +74494,10 @@ ${doNow.map((l) => `  ${l}`).join("\n")}`);
         if (authWarning) advisories.push(authWarning);
         advisories.push(...await nativeConfigAdvisories(app, configSource));
         const finalReport = advisories.length ? {
-          ...report2,
-          warnings: [...report2.warnings ?? [], ...advisories],
-          counts: { ...report2.counts, warnings: report2.counts.warnings + advisories.length }
-        } : report2;
+          ...report3,
+          warnings: [...report3.warnings ?? [], ...advisories],
+          counts: { ...report3.counts, warnings: report3.counts.warnings + advisories.length }
+        } : report3;
         await leaveForBoard(dir, "validate", {
           ok: !hasErrors,
           errors: finalReport.counts.errors,
@@ -74183,23 +74610,23 @@ ${doNow.map((l) => `  ${l}`).join("\n")}`);
           const app = str8(flags.app) ?? loaded.app;
           const invoked2 = await invokeRemoteFunction2({ baseUrl: target.baseUrl, app, definition, body: input, params, releaseId: remoteRelease, previewToken: str8(flags["preview-token"]), boCookie: boCookie() });
           const response = invoked2.response;
-          const text7 = await response.text();
+          const text9 = await response.text();
           let body2;
           try {
-            body2 = JSON.parse(text7);
+            body2 = JSON.parse(text9);
           } catch {
-            body2 = text7;
+            body2 = text9;
           }
           print({ ok: response.ok, app, releaseId: remoteRelease ?? null, url: invoked2.url, status: response.status, body: body2 });
           return response.ok ? 0 : 1;
         }
         const invoked = await invokeLocalFunction2(loaded, name, input, params);
-        const text6 = await invoked.response.text();
+        const text8 = await invoked.response.text();
         let body;
         try {
-          body = JSON.parse(text6);
+          body = JSON.parse(text8);
         } catch {
-          body = text6;
+          body = text8;
         }
         print({ ok: invoked.response.ok, app: loaded.app, releaseId: invoked.releaseId, status: invoked.response.status, body });
         return invoked.response.ok ? 0 : 1;
@@ -74218,7 +74645,7 @@ ${doNow.map((l) => `  ${l}`).join("\n")}`);
             return 1;
           }
           const { himiPluginFiles: himiPluginFiles2 } = await Promise.resolve().then(() => (init_claude_plugin(), claude_plugin_exports));
-          const dir = resolve51(out2);
+          const dir = resolve52(out2);
           const files = himiPluginFiles2(skills.skillMd);
           for (const f of files) {
             mkdirSync32(dirname36(join64(dir, f.path)), { recursive: true });
@@ -74240,7 +74667,7 @@ ${doNow.map((l) => `  ${l}`).join("\n")}`);
         }
         if (pos[1] === "reel") {
           const { buildReel: buildReel2 } = await Promise.resolve().then(() => (init_studio_reel(), studio_reel_exports));
-          const out2 = resolve51(str8(flags.out) ?? join64(dir, ".himi", "making-of.html"));
+          const out2 = resolve52(str8(flags.out) ?? join64(dir, ".himi", "making-of.html"));
           const { html, plan } = buildReel2(dir);
           mkdirSync32(dirname36(out2), { recursive: true });
           writeFileSync29(out2, html);
@@ -74252,7 +74679,7 @@ ${doNow.map((l) => `  ${l}`).join("\n")}`);
             openUrl2(url2);
           }
           const handover = { file: out2, hint: `hand ${basename17(out2)} to the owner at the handover \u2014 one self-contained page of their app taking shape; send it beside the preview link, never instead of it` };
-          const report2 = {
+          const report3 = {
             ok: true,
             file: out2,
             url: url2,
@@ -74265,7 +74692,7 @@ ${doNow.map((l) => `  ${l}`).join("\n")}`);
             ...plan.dropped ? { dropped: plan.dropped, note: "pictures were left out to keep the file attachable" } : {},
             ...plan.frames.length === 0 ? { hint: "no screen versions were recorded \u2014 run `himi studio` before building so the board keeps them" } : {}
           };
-          if (flags.json === true || io.isTTY !== true) print(report2);
+          if (flags.json === true || io.isTTY !== true) print(report3);
           else io.log(`The making-of: ${out2}
 ${handover.hint[0].toUpperCase()}${handover.hint.slice(1)}.`);
           return 0;
@@ -74351,10 +74778,10 @@ ${handover.hint[0].toUpperCase()}${handover.hint.slice(1)}.`);
         }
         if (flags.brief === true) {
           const { agentContextNote: agentContextNote2 } = await Promise.resolve().then(() => (init_agent_context(), agent_context_exports));
-          const summary = summarizeProgress2(readProgress2(dir).entries);
+          const summary2 = summarizeProgress2(readProgress2(dir).entries);
           const open = openApprovals2(readApprovals2(dir).events);
           const note = agentContextNote2(dir, cliVersion());
-          io.log(formatBrief2({ appName: appLabel2(dir), isContentPackage, summary, open, ...note ? { agentContextNote: note } : {} }));
+          io.log(formatBrief2({ appName: appLabel2(dir), isContentPackage, summary: summary2, open, ...note ? { agentContextNote: note } : {} }));
           return 0;
         }
         if (!message) {
@@ -74386,8 +74813,9 @@ ${handover.hint[0].toUpperCase()}${handover.hint.slice(1)}.`);
           return 2;
         }
         let imageNote;
+        const handover = step === "review";
         if (!images.length && flags["no-image"] !== true && isContentPackage) {
-          const auto = (await Promise.resolve().then(() => (init_milestones(), milestones_exports))).homeShotForPostcard(dir);
+          const auto = (await Promise.resolve().then(() => (init_milestones(), milestones_exports))).homeShotForPostcard(dir, { repeatOk: handover });
           if ("image" in auto) images.push(auto.image);
           else imageNote = `no picture attached: ${auto.skipped}`;
         }
@@ -74396,7 +74824,8 @@ ${handover.hint[0].toUpperCase()}${handover.hint.slice(1)}.`);
           const notified = flags.notify === true ? await notifyDesktop2(`himi \xB7 ${appLabel2(dir) ?? "your app"}`, message) : void 0;
           const { count: count2 } = summarizeProgress2(readProgress2(dir).entries);
           const imageAttached = (entry.images?.length ?? 0) > 0;
-          print({ ok: true, entry, journal: journal2, count: count2, imageAttached, ...!imageAttached && imageNote ? { imageNote } : {}, ...notified === void 0 ? {} : { notified }, ...hint });
+          const handed = handover && isContentPackage ? (await Promise.resolve().then(() => (init_milestones(), milestones_exports))).afterHandoverPostcard(dir, { content: str8(flags.content) }) : null;
+          print({ ok: true, entry, journal: journal2, count: count2, imageAttached, ...!imageAttached && imageNote ? { imageNote } : {}, ...notified === void 0 ? {} : { notified }, ...handed ? { makingOf: handed.makingOf, next: handed.next } : {}, ...hint });
           return 0;
         } catch (e) {
           if (e instanceof ProgressError2) {
@@ -74410,9 +74839,9 @@ ${handover.hint[0].toUpperCase()}${handover.hint.slice(1)}.`);
         const sub = pos[1] ?? "audit";
         const dir = contentDir(flags);
         if (sub === "audit") {
-          const report2 = auditUx(dir, flags.strict === true);
-          print(report2);
-          return report2.ok ? 0 : 1;
+          const report3 = auditUx(dir, flags.strict === true);
+          print(report3);
+          return report3.ok ? 0 : 1;
         }
         if (sub !== "record") {
           io.error(JSON.stringify({ error: "ux needs audit | record" }));
@@ -74624,7 +75053,7 @@ ${handover.hint[0].toUpperCase()}${handover.hint.slice(1)}.`);
           }
           const authoringBase = serveBase();
           try {
-            const { report: report2 } = await (deps.browserAuthoring ?? runBrowserAuthoring2)({
+            const { report: report3 } = await (deps.browserAuthoring ?? runBrowserAuthoring2)({
               authoringBase,
               job: {
                 entry: sources.entry,
@@ -74641,10 +75070,10 @@ ${handover.hint[0].toUpperCase()}${handover.hint.slice(1)}.`);
               log: (line) => io.error(line)
             });
             const { afterBrowserTestRun: afterBrowserTestRun2, watchReminder: watchReminder3 } = await Promise.resolve().then(() => (init_milestones(), milestones_exports));
-            const afterRun2 = afterBrowserTestRun2(dir, { screen: screen.screenId, report: report2, boardOpen: boardOpen(dir) });
+            const afterRun2 = afterBrowserTestRun2(dir, { screen: screen.screenId, report: report3, boardOpen: boardOpen(dir) });
             const browserReminder = watchReminder3(dir, { content: str8(flags.content) });
             print({
-              ...report2,
+              ...report3,
               screen: screen.screenId,
               ranIn: "browser",
               liveRequested: jobWix !== void 0,
@@ -74653,7 +75082,7 @@ ${handover.hint[0].toUpperCase()}${handover.hint.slice(1)}.`);
               // Also the envelope's LAST key (`tailLast` keeps it there): an agent may read only the tail.
               ...browserReminder ? { reminder: browserReminder } : {}
             });
-            return report2.ok ? 0 : 1;
+            return report3.ok ? 0 : 1;
           } catch (e) {
             io.error(JSON.stringify({ error: e.message }));
             return 1;
@@ -74838,6 +75267,7 @@ ${handover.hint[0].toUpperCase()}${handover.hint.slice(1)}.`);
               gaps: ledger,
               artifacts: result.shots?.dir ? [{ kind: "shots-dir", path: result.shots.dir }] : []
             }),
+            ...afterRun.firstLook ? { firstLookPostcard: afterRun.firstLook } : {},
             ...afterRun.postcard ? { postcard: afterRun.postcard } : {},
             next: [...testReminder ? [testReminder] : [], ...afterRun.next],
             // Also the envelope's LAST key (`tailLast` keeps it there): an agent may read only the tail.
@@ -74998,7 +75428,7 @@ ${[...afterRun.next, ...testReminder ? [testReminder] : []].join("\n")}`);
         const pngTarget = typeof flags.png === "string" ? str8(flags.png) : flags.png === true ? shotPath : void 0;
         if (pngTarget && r.pngBase64) {
           pngFile = writePngFile(pngTarget, r.pngBase64);
-          attestationPngFile = resolve51(pngTarget) === resolve51(shotPath) ? pngFile : writePngFile(shotPath, r.pngBase64);
+          attestationPngFile = resolve52(pngTarget) === resolve52(shotPath) ? pngFile : writePngFile(shotPath, r.pngBase64);
         }
         if (renderWidth !== void 0 && r.renderable) {
           recordRenderWidth(dir, {
@@ -75090,23 +75520,23 @@ ${[...afterRun.next, ...testReminder ? [testReminder] : []].join("\n")}`);
           return 2;
         }
         const { kitReport: kitReport2 } = await Promise.resolve().then(() => (init_design_kits(), design_kits_exports));
-        const report2 = kitReport2(pos[2]);
-        print(report2);
-        return report2.ok ? 0 : 1;
+        const report3 = kitReport2(pos[2]);
+        print(report3);
+        return report3.ok ? 0 : 1;
       }
       case "fonts": {
         const sub = pos[1];
         const dir = contentDir(flags);
         const { listReport: listReport3, checkReport: checkReport2, addReport: addReport2 } = await Promise.resolve().then(() => (init_fonts(), fonts_exports));
         if (sub === void 0 || sub === "list") {
-          const report2 = listReport3({ licenses: flags.licenses === true });
-          print(report2);
-          return report2.ok ? 0 : 1;
+          const report3 = listReport3({ licenses: flags.licenses === true });
+          print(report3);
+          return report3.ok ? 0 : 1;
         }
         if (sub === "check") {
-          const report2 = await checkReport2(dir);
-          print(report2);
-          return report2.ok ? 0 : 1;
+          const report3 = await checkReport2(dir);
+          print(report3);
+          return report3.ok ? 0 : 1;
         }
         if (sub === "add") {
           const family = pos[2];
@@ -75114,9 +75544,9 @@ ${[...afterRun.next, ...testReminder ? [testReminder] : []].join("\n")}`);
             print({ ok: false, problems: ["usage: himi fonts add <Family>"] });
             return 2;
           }
-          const report2 = addReport2(dir, family);
-          print(report2);
-          return report2.ok ? 0 : 1;
+          const report3 = addReport2(dir, family);
+          print(report3);
+          return report3.ok ? 0 : 1;
         }
         print({ ok: false, problems: [`unknown subcommand "${sub}"`], hint: "himi fonts [list|check|add]" });
         return 2;
@@ -75137,7 +75567,7 @@ ${[...afterRun.next, ...testReminder ? [testReminder] : []].join("\n")}`);
           summarize: summarize4
         } = await Promise.resolve().then(() => (init_icon(), icon_exports));
         const requireVerified = sub === "check";
-        const report2 = async (status, extra = {}) => {
+        const report3 = async (status, extra = {}) => {
           const findings = [
             // Not a store rule, so it is not in byteIssues — but it is the one `himi dist`
             // will refuse, and the point of `check` is to say so before the build does.
@@ -75175,7 +75605,7 @@ ${[...afterRun.next, ...testReminder ? [testReminder] : []].join("\n")}`);
           }
           return blocksRelease2(status, { requireVerified }) ? 1 : 0;
         };
-        if (sub === "status" || sub === "check") return report2(await iconStatus2(dir));
+        if (sub === "status" || sub === "check") return report3(await iconStatus2(dir));
         if (sub === "set") {
           const file = pos[2];
           if (!file) {
@@ -75183,7 +75613,7 @@ ${[...afterRun.next, ...testReminder ? [testReminder] : []].join("\n")}`);
             return 1;
           }
           const res = await installIcon2(dir, file, { derivePlay: true });
-          return report2(res.status, { wrote: res.wrote, normalized: res.normalized, playListingIcon: res.playDerived });
+          return report3(res.status, { wrote: res.wrote, normalized: res.normalized, playListingIcon: res.playDerived });
         }
         if (sub === "from-site") {
           const book = str8(flags.book) ?? ".himi/business-book";
@@ -75198,11 +75628,11 @@ ${[...afterRun.next, ...testReminder ? [testReminder] : []].join("\n")}`);
             return 1;
           }
           const res = await installIcon2(dir, logo, { derivePlay: true });
-          return report2(res.status, { from: logo, wrote: res.wrote, normalized: res.normalized, playListingIcon: res.playDerived });
+          return report3(res.status, { from: logo, wrote: res.wrote, normalized: res.normalized, playListingIcon: res.playDerived });
         }
         if (sub === "generate") {
           const res = await generateIcon2(dir, { glyph: str8(flags.glyph), background: str8(flags.accent), derivePlay: true });
-          return report2(res.status, { wrote: res.wrote });
+          return report3(res.status, { wrote: res.wrote });
         }
         if (sub === "glyphs") {
           const names = glyphNames2();
@@ -75228,9 +75658,9 @@ default (no --glyph): ${DEFAULT_GLYPH2} \u2014 a mark that claims nothing, so th
         const dir = contentDir(flags);
         const { listReport: listReport3, verifyReport: verifyReport2, addAssetPayload: addAssetPayload2, removeAssetPayload: removeAssetPayload2 } = await Promise.resolve().then(() => (init_assets(), assets_exports));
         if (sub === void 0 || sub === "list") {
-          const report2 = listReport3(dir);
-          print(report2);
-          return report2.ok ? 0 : 1;
+          const report3 = listReport3(dir);
+          print(report3);
+          return report3.ok ? 0 : 1;
         }
         if (sub === "verify") {
           const app = str8(flags.app) ?? await appId(dir);
@@ -75239,9 +75669,9 @@ default (no --glyph): ${DEFAULT_GLYPH2} \u2014 a mark that claims nothing, so th
             io.error(JSON.stringify(found));
             return 1;
           }
-          const report2 = verifyReport2(dir, app, found.manifest);
-          print(report2);
-          return report2.ok ? 0 : 1;
+          const report3 = verifyReport2(dir, app, found.manifest);
+          print(report3);
+          return report3.ok ? 0 : 1;
         }
         if (sub === "add" || sub === "rm") {
           const app = str8(flags.app) ?? await appId(dir);
@@ -75334,7 +75764,7 @@ default (no --glyph): ${DEFAULT_GLYPH2} \u2014 a mark that claims nothing, so th
           return 2;
         }
         const renamed = str8(flags.name);
-        const dest = resolve51(str8(flags.out) ?? process.cwd(), renamed ?? wanted);
+        const dest = resolve52(str8(flags.out) ?? process.cwd(), renamed ?? wanted);
         const replace = flags.replace === true;
         const force = replace || flags.force === true;
         const linked = symlinkDestinationIssue(dest);
@@ -75407,7 +75837,7 @@ default (no --glyph): ${DEFAULT_GLYPH2} \u2014 a mark that claims nothing, so th
         let removed = [];
         if (replace) removed = removeStaleSource2(restored, dest);
         else left = staleSourcePaths2(restored, dest);
-        const refused = deniedArchivePaths2(restored);
+        const refused2 = deniedArchivePaths2(restored);
         const written = writeAppSource2(restored, dest);
         const agent = await seedAgentFilesFor(dest, flags, "restore");
         print({
@@ -75418,8 +75848,8 @@ default (no --glyph): ${DEFAULT_GLYPH2} \u2014 a mark that claims nothing, so th
           ...agent,
           ...renamed ? { renamedTo: renamed } : {},
           ...removed.length ? { removed } : {},
-          ...refused.length ? {
-            refused,
+          ...refused2.length ? {
+            refused: refused2,
             refusedNote: "this archive carries paths a restore will not write (the deny-list has grown since it was published) \u2014 they were skipped, not written over"
           } : {},
           // EVERY path, not a count and not a sample: the whole failure was that a hybrid tree
@@ -75503,7 +75933,7 @@ default (no --glyph): ${DEFAULT_GLYPH2} \u2014 a mark that claims nothing, so th
           collect: { lint: true, strict }
         });
         const { navIssues: navIssues2 } = await Promise.resolve().then(() => (init_nav_lint(), nav_lint_exports));
-        const { report: report2, hasErrors } = summarizeLint(declared, bres, outcome, strict, [
+        const { report: report3, hasErrors } = summarizeLint(declared, bres, outcome, strict, [
           ...await cmsIssues(dir, declared, strict, { local: true }),
           ...surfaceIssues(dir, outcome.surfaceNav, strict),
           ...tokenColorIssues(dir),
@@ -75513,7 +75943,7 @@ default (no --glyph): ${DEFAULT_GLYPH2} \u2014 a mark that claims nothing, so th
           ...await navIssues2(dir, strict)
         ]);
         if (hasErrors && !force) {
-          print({ ...report2, pushed: false, hint: "lint found errors \u2014 fix them, or re-run `himi push --force` to publish anyway" });
+          print({ ...report3, pushed: false, hint: "lint found errors \u2014 fix them, or re-run `himi push --force` to publish anyway" });
           return 1;
         }
         const declaredData = await loadDataResourcesQuietly(dir);
@@ -75612,7 +76042,7 @@ default (no --glyph): ${DEFAULT_GLYPH2} \u2014 a mark that claims nothing, so th
             // Reaches here ONLY on the forced path — the refusal above returned otherwise — so
             // this is the override's record, and the case it matters most for is a `failed` drive.
             ux: { evidence: patchUxEvidence, ctx: patchUxContext },
-            lint: report2.counts ?? null,
+            lint: report3.counts ?? null,
             extra: { selector: parsed.selectors.map((s) => "pattern" in s ? `${s.kind}:${s.pattern}` : s.kind) }
           });
         }
@@ -75832,6 +76262,7 @@ default (no --glyph): ${DEFAULT_GLYPH2} \u2014 a mark that claims nothing, so th
           releaseId: release,
           draft,
           ...unchanged ? { unchanged: true, unchangedNote: "the serve plane already holds this exact release under this id, so nothing was written" } : {},
+          ...afterDraft?.firstLook ? { firstLookPostcard: afterDraft.firstLook } : {},
           ...afterDraft?.postcard ? { postcard: afterDraft.postcard } : {},
           // No picture on the draft postcard: why, and the render that makes a current one.
           ...afterDraft?.picture ? { postcardPicture: afterDraft.picture } : {},
@@ -75863,7 +76294,7 @@ default (no --glyph): ${DEFAULT_GLYPH2} \u2014 a mark that claims nothing, so th
           // print a `himi pull` command that answers app_source_not_found later — the worst
           // shape for a backup, which is one you are told you have.
           ...sourceSummary ? sourceStored === true ? { source: { ...sourceSummary, restore: `himi pull ${app} --release ${release}` } } : sourceStored === false ? { source: { ...sourceSummary, archived: false, note: "this serve target cannot store source archives, so this release cannot be restored with `himi pull`" } } : { source: { ...sourceSummary, archived: "unconfirmed", note: `this serve target did not report whether it stored the source (it may predate the field). Verify with \`himi pull ${app} --release ${release}\` before relying on it.` } } : { source: { archived: false, note: "pushed with --no-source \u2014 this release cannot be restored with `himi pull`" } },
-          lint: report2.counts,
+          lint: report3.counts,
           // A push ships content, not backends. If the app declares CMS
           // collections, say so and point at the verbs — but never mutate the
           // site as a side effect of publishing a release.
@@ -75895,7 +76326,7 @@ default (no --glyph): ${DEFAULT_GLYPH2} \u2014 a mark that claims nothing, so th
             nondeterministicWorkers: drifting
           }),
           ...loopbackWarning ? { warning: loopbackWarning } : {},
-          ...report2.issues ? { issues: report2.issues } : {},
+          ...report3.issues ? { issues: report3.issues } : {},
           previewWeb: base ? previewWebUrl(base, app, release, void 0, void 0, previewToken, previewHandover) : null,
           // A timestamp alone leaves the reader to work out both how long they have and how to
           // get another one. Print the duration and the re-mint command beside it (#2502 item 3).
@@ -75992,7 +76423,7 @@ default (no --glyph): ${DEFAULT_GLYPH2} \u2014 a mark that claims nothing, so th
             return 2;
           }
           try {
-            const res = writePack(resolve51(releaseDir), only, resolve51(str8(flags.out) ?? process.cwd()));
+            const res = writePack(resolve52(releaseDir), only, resolve52(str8(flags.out) ?? process.cwd()));
             print({
               ok: true,
               app: res.app,
@@ -76048,7 +76479,7 @@ default (no --glyph): ${DEFAULT_GLYPH2} \u2014 a mark that claims nothing, so th
           collect: { lint: true, strict }
         });
         const { navIssues: navIssues2 } = await Promise.resolve().then(() => (init_nav_lint(), nav_lint_exports));
-        const { report: report2, hasErrors } = summarizeLint(app, bres, outcome, strict, [
+        const { report: report3, hasErrors } = summarizeLint(app, bres, outcome, strict, [
           ...await cmsIssues(dir, app, strict, { local: true }),
           ...surfaceIssues(dir, outcome.surfaceNav, strict),
           ...tokenColorIssues(dir),
@@ -76059,11 +76490,11 @@ default (no --glyph): ${DEFAULT_GLYPH2} \u2014 a mark that claims nothing, so th
         ]);
         if (hasErrors && !force) {
           rmSync15(built, { recursive: true, force: true });
-          print({ ...report2, packed: false, hint: "lint found errors \u2014 fix them, or re-run `himi pack --force` to pack anyway" });
+          print({ ...report3, packed: false, hint: "lint found errors \u2014 fix them, or re-run `himi pack --force` to pack anyway" });
           return 1;
         }
         try {
-          const res = writePack(built, app, resolve51(str8(flags.out) ?? dir), sourceArchive);
+          const res = writePack(built, app, resolve52(str8(flags.out) ?? dir), sourceArchive);
           print({
             ok: true,
             app: res.app,
@@ -76073,12 +76504,12 @@ default (no --glyph): ${DEFAULT_GLYPH2} \u2014 a mark that claims nothing, so th
             entries: res.entryCount,
             format,
             launchMode,
-            lint: report2.counts,
+            lint: report3.counts,
             contents: withSource ? "dev" : "release",
             ...sourceSummary ? { source: sourceSummary } : {},
             ...res.skipped.length ? { skipped: res.skipped } : {},
             ...hasErrors && force ? { forcedPastErrors: true } : {},
-            ...report2.issues ? { issues: report2.issues } : {},
+            ...report3.issues ? { issues: report3.issues } : {},
             open: [
               ...withSource ? [`himi import ${res.out}`] : [],
               `himi run ${res.out}`,
@@ -76108,7 +76539,7 @@ default (no --glyph): ${DEFAULT_GLYPH2} \u2014 a mark that claims nothing, so th
         const { HIMI_PACKAGE_SOURCE_PATH: HIMI_PACKAGE_SOURCE_PATH2, isSafeAppId: isSafeAppId2, packageContents: packageContents2 } = await Promise.resolve().then(() => (init_himi_package(), himi_package_exports));
         let opened;
         try {
-          opened = openPackageFile2(resolve51(file));
+          opened = openPackageFile2(resolve52(file));
         } catch (e) {
           io.error(JSON.stringify({ error: e.message }));
           return 1;
@@ -76121,7 +76552,7 @@ default (no --glyph): ${DEFAULT_GLYPH2} \u2014 a mark that claims nothing, so th
           io.error(JSON.stringify({
             ok: false,
             error: "app_source_not_in_package",
-            detail: `${resolve51(file)} is a release package: it carries built output (screens, bundles, tokens) and no source`,
+            detail: `${resolve52(file)} is a release package: it carries built output (screens, bundles, tokens) and no source`,
             hint: "re-pack it from the content package with `himi pack --dev`, or restore from the serve plane with `himi pull <app>`"
           }));
           return 1;
@@ -76144,7 +76575,7 @@ default (no --glyph): ${DEFAULT_GLYPH2} \u2014 a mark that claims nothing, so th
             return 1;
           }
         }
-        const dest = resolve51(str8(flags.out) ?? process.cwd(), renamed ?? opened.header.app);
+        const dest = resolve52(str8(flags.out) ?? process.cwd(), renamed ?? opened.header.app);
         const issue2 = restoreDestinationIssue(dest, flags.force === true);
         if (issue2) {
           io.error(JSON.stringify(issue2));
@@ -76183,7 +76614,7 @@ default (no --glyph): ${DEFAULT_GLYPH2} \u2014 a mark that claims nothing, so th
           return 1;
         }
         const left = staleSourcePaths2(restored, dest);
-        const refused = deniedArchivePaths2(restored);
+        const refused2 = deniedArchivePaths2(restored);
         const written = writeAppSource2(restored, dest);
         const agent = await seedAgentFilesFor(dest, flags, "restore");
         print({
@@ -76194,8 +76625,8 @@ default (no --glyph): ${DEFAULT_GLYPH2} \u2014 a mark that claims nothing, so th
           files: written.length,
           ...agent,
           ...renamed ? { renamedTo: renamed } : {},
-          ...refused.length ? {
-            refused,
+          ...refused2.length ? {
+            refused: refused2,
             refusedNote: "this package carries paths a restore will not write (the deny-list has grown since it was packed) \u2014 they were skipped, not written over"
           } : {},
           ...left.length ? {
@@ -76231,7 +76662,7 @@ default (no --glyph): ${DEFAULT_GLYPH2} \u2014 a mark that claims nothing, so th
         }
         try {
           const { openPackageFile: openPackageFile2 } = await Promise.resolve().then(() => (init_pack(), pack_exports));
-          const opened = openPackageFile2(resolve51(file));
+          const opened = openPackageFile2(resolve52(file));
           if (!opened.validation.ok || !opened.header) {
             io.error(JSON.stringify({ error: "refusing to share an invalid package", issues: opened.validation.errors }));
             return 1;
@@ -76241,12 +76672,12 @@ default (no --glyph): ${DEFAULT_GLYPH2} \u2014 a mark that claims nothing, so th
             io.error(JSON.stringify({
               ok: false,
               error: "refusing to share a package that carries the app's source",
-              detail: `${resolve51(file)} was packed with --dev, and a share link is public and unauthenticated \u2014 anyone with the URL could \`himi import\` your codebase`,
+              detail: `${resolve52(file)} was packed with --dev, and a share link is public and unauthenticated \u2014 anyone with the URL could \`himi import\` your codebase`,
               hint: "share a release package instead (`himi pack` with no --dev), or hand the dev package over directly"
             }));
             return 1;
           }
-          const archive = readFileSync79(resolve51(file));
+          const archive = readFileSync79(resolve52(file));
           const result = await client2().createPackageShare({
             app: opened.header.app,
             releaseId: opened.header.releaseId,
@@ -76297,6 +76728,21 @@ default (no --glyph): ${DEFAULT_GLYPH2} \u2014 a mark that claims nothing, so th
             return 2;
           }
         }
+        let idleExitMs;
+        if (flags["idle-exit"] !== void 0) {
+          const raw = str8(flags["idle-exit"]);
+          const minutes = raw === void 0 ? Number.NaN : Number(raw);
+          const IDLE_EXIT_MAX_MINUTES = Math.floor(2147483647 / 6e4);
+          if (!watch2 || !Number.isFinite(minutes) || minutes <= 0 || minutes > IDLE_EXIT_MAX_MINUTES) {
+            io.error(JSON.stringify({
+              ok: false,
+              error: watch2 ? "invalid_idle_exit" : "idle_exit_needs_watch",
+              message: watch2 ? `--idle-exit needs a number of minutes above 0 and at most ${IDLE_EXIT_MAX_MINUTES}, got ${JSON.stringify(raw ?? "")}` : "--idle-exit stops a --watch preview that has seen no save for that long; add --watch, or drop --idle-exit"
+            }));
+            return 2;
+          }
+          idleExitMs = minutes * 6e4;
+        }
         let served = null;
         let browserCopy = null;
         let servedMissing = [];
@@ -76370,9 +76816,9 @@ default (no --glyph): ${DEFAULT_GLYPH2} \u2014 a mark that claims nothing, so th
             });
             await announce(run2);
             print({ ok: true, app: run2.app, url: run2.url, port: run2.port, plane: "browser" });
-            await new Promise((resolve52) => {
+            await new Promise((resolve53) => {
               const stop = () => {
-                void retract().catch((e) => io.error(JSON.stringify({ run: "stop_cleanup_failed", message: e.message }))).finally(() => run2.close().finally(() => resolve52()));
+                void retract().catch((e) => io.error(JSON.stringify({ run: "stop_cleanup_failed", message: e.message }))).finally(() => run2.close().finally(() => resolve53()));
               };
               process.once("SIGINT", stop);
               process.once("SIGTERM", stop);
@@ -76399,6 +76845,13 @@ default (no --glyph): ${DEFAULT_GLYPH2} \u2014 a mark that claims nothing, so th
           let watcher2;
           let rebuild;
           let stopping = false;
+          let stopNow;
+          let idleTimer;
+          const armIdle = () => {
+            if (idleExitMs === void 0) return;
+            clearTimeout(idleTimer);
+            idleTimer = setTimeout(() => stopNow?.("idle"), idleExitMs);
+          };
           try {
             await announce(running);
             if (watchKit && bus) {
@@ -76456,7 +76909,10 @@ default (no --glyph): ${DEFAULT_GLYPH2} \u2014 a mark that claims nothing, so th
                   rmSync15(next, { recursive: true, force: true });
                 }
               });
-              watcher2 = watchKit.watchContent(dir, () => rebuild?.());
+              watcher2 = watchKit.watchContent(dir, () => {
+                armIdle();
+                rebuild?.();
+              });
             }
           } catch (e) {
             await retract().catch(() => {
@@ -76484,11 +76940,19 @@ default (no --glyph): ${DEFAULT_GLYPH2} \u2014 a mark that claims nothing, so th
             ...watch2 ? { watching: dir } : {},
             ...recordKit && boardOpen(dir) ? { board: `${running.origin}/__himi/studio/` } : {},
             ...running.warnings.length ? { warnings: running.warnings } : {},
+            ...idleExitMs !== void 0 ? { idleExit: { minutes: idleExitMs / 6e4, note: "stops itself after this long with no source save" } } : {},
             stop: "Ctrl-C"
           });
           await new Promise((done) => {
-            const stop = async () => {
+            const stop = async (why) => {
+              if (stopping) return;
               stopping = true;
+              clearTimeout(idleTimer);
+              if (why === "idle") {
+                const { shellQuote: shellQuote3 } = await Promise.resolve().then(() => (init_shell_quote(), shell_quote_exports));
+                io.error(JSON.stringify({ watch: "idle_exit", minutes: idleExitMs / 6e4, message: `no source save for ${idleExitMs / 6e4} min, so this preview stopped \u2014 \`himi run --watch --content ${shellQuote3(dir)} &\` starts it again` }));
+              }
+              for (const sig of ["SIGINT", "SIGTERM", "SIGHUP"]) process.removeListener(sig, onSignal);
               watcher2?.close();
               try {
                 await rebuild?.stop();
@@ -76500,8 +76964,10 @@ default (no --glyph): ${DEFAULT_GLYPH2} \u2014 a mark that claims nothing, so th
                 done();
               }
             };
-            process.once("SIGINT", () => void stop());
-            process.once("SIGTERM", () => void stop());
+            const onSignal = () => void stop();
+            for (const sig of ["SIGINT", "SIGTERM", "SIGHUP"]) process.once(sig, onSignal);
+            stopNow = (why) => void stop(why);
+            armIdle();
           });
           return 0;
         } catch (e) {
@@ -78392,13 +78858,13 @@ ${label2}`);
           // advertisable for the target this report is about.
           hasOwnerIssuer: (resolved2?.ownerIssue ?? "") !== ""
         });
-        const report2 = buildDoctorReport({ target, version: cliVersion(), data, serve, auth, loginModes, dpxStatus, versions });
-        if (targetError) report2.targetError = targetError;
+        const report3 = buildDoctorReport({ target, version: cliVersion(), data, serve, auth, loginModes, dpxStatus, versions });
+        if (targetError) report3.targetError = targetError;
         const { agentContextStatus: agentContextStatus2 } = await Promise.resolve().then(() => (init_agent_context(), agent_context_exports));
         const agentContext = agentContextStatus2(contentDir(flags), cliVersion());
-        if (agentContext) report2.agentContext = agentContext;
+        if (agentContext) report3.agentContext = agentContext;
         if (flags.json === true) {
-          print(report2);
+          print(report3);
           return 0;
         }
         const mark = (r) => r.reachable ? `reachable${r.status ? ` [${r.status}]` : ""}` : `UNREACHABLE${r.error ? ` (${r.error})` : ""}`;
@@ -78408,7 +78874,7 @@ ${label2}`);
         io.log(`               ${mark(data)}`);
         io.log(`  serve plane  ${serveUrl || "(no serve url)"}`);
         io.log(`               ${mark(serve)}`);
-        const serveCode = report2.servePlane.code;
+        const serveCode = report3.servePlane.code;
         if (serveCode) io.log(`               ${serveCode}: ${serveUnreachableHint(target)}`);
         io.log(`  auth         dpx session: ${auth.dpxSession ? "yes" : "no"}   control token: ${auth.controlToken ? "yes" : controlHostRefused ? "REFUSED" : auth.controlTokenPresent ? "STALE" : "no"}`);
         if (auth.controlTokenHint) io.log(`               ${auth.controlTokenHint}`);
@@ -78431,7 +78897,7 @@ ${label2}`);
         }
         io.log(
           `
-${report2.ok ? "OK \u2014 data + serve plane reachable." : typeof report2.hint === "string" && report2.hint ? report2.hint : serve.reachable ? "Data plane unreachable \u2014 check basic connectivity." : serveUnreachableHint(target)}`
+${report3.ok ? "OK \u2014 data + serve plane reachable." : typeof report3.hint === "string" && report3.hint ? report3.hint : serve.reachable ? "Data plane unreachable \u2014 check basic connectivity." : serveUnreachableHint(target)}`
         );
         return 0;
       }
@@ -78544,9 +79010,9 @@ ${report2.ok ? "OK \u2014 data + serve plane reachable." : typeof report2.hint =
         }
         const scope = { app, siteId: site, environment: environment2 };
         try {
-          const report2 = sub === "plan" ? await planData({ scope, data, kv, call }) : sub === "create" ? await createData({ scope, data, kv, call, dryRun: flags["dry-run"] === true }) : await seedData({ scope, data, kv, call, dir, dryRun: flags["dry-run"] === true, force: flags.force === true });
-          print(report2);
-          return report2.ok ? 0 : 1;
+          const report3 = sub === "plan" ? await planData({ scope, data, kv, call }) : sub === "create" ? await createData({ scope, data, kv, call, dryRun: flags["dry-run"] === true }) : await seedData({ scope, data, kv, call, dir, dryRun: flags["dry-run"] === true, force: flags.force === true });
+          print(report3);
+          return report3.ok ? 0 : 1;
         } catch (error) {
           io.error(JSON.stringify({ error: error.message, app, site, environment: environment2, hint: "run `himi data plan` to re-read actual state before retrying" }));
           return 1;
@@ -78561,6 +79027,14 @@ ${report2.ok ? "OK \u2014 data + serve plane reachable." : typeof report2.hint =
           const { runNotifySetup: runNotifySetup2 } = await Promise.resolve().then(() => (init_notify_setup(), notify_setup_exports));
           return runNotifySetup2(pos, flags, io);
         }
+        if (pos[1] === "send" && flags.provider !== void 0) {
+          if (flags.provider !== "ping") {
+            io.error(JSON.stringify({ ok: false, error: "unknown_provider", hint: "The hosted sender is --provider ping." }));
+            return 2;
+          }
+          const { runNotifyPing: runNotifyPing2 } = await Promise.resolve().then(() => (init_notify_ping(), notify_ping_exports));
+          return runNotifyPing2(flags, io);
+        }
         const { runNotify: runNotify2 } = await Promise.resolve().then(() => (init_notify(), notify_exports));
         return await runNotify2(pos, flags, io);
       case "cms": {
@@ -78619,9 +79093,9 @@ ${report2.ok ? "OK \u2014 data + serve plane reachable." : typeof report2.hint =
           return 2;
         }
         const common = { app, cms, call };
-        let report2;
+        let report3;
         try {
-          report2 = sub === "query" ? await queryCms({ ...common, all: flags.all === true }) : sub === "create" ? await createCms({ ...common, dryRun: flags["dry-run"] === true, allowDestructive: flags["allow-destructive"] === true, applyPermissions: flags["apply-permissions"] === true }) : await seedCms({ ...common, dir, dryRun: flags["dry-run"] === true, force: flags.force === true, only: str8(flags.only) });
+          report3 = sub === "query" ? await queryCms({ ...common, all: flags.all === true }) : sub === "create" ? await createCms({ ...common, dryRun: flags["dry-run"] === true, allowDestructive: flags["allow-destructive"] === true, applyPermissions: flags["apply-permissions"] === true }) : await seedCms({ ...common, dir, dryRun: flags["dry-run"] === true, force: flags.force === true, only: str8(flags.only) });
         } catch (e) {
           const partial = e.partial;
           io.error(JSON.stringify({
@@ -78633,8 +79107,8 @@ ${report2.ok ? "OK \u2014 data + serve plane reachable." : typeof report2.hint =
           }));
           return 1;
         }
-        print({ ...report2, site });
-        return report2.ok ? 0 : 1;
+        print({ ...report3, site });
+        return report3.ok ? 0 : 1;
       }
       case "site": {
         const sub = pos[1];