@wix/himalaya-cli 0.1110.0 → 0.1112.0

package/dist/cli.mjs

@@ -994,8 +994,8 @@ function mobileUxDocumentBody(mobile) {
   }
   return out2 + mobile.slice(last);
 }
-function mobileUxSection(text6, heading) {
-  const match = new RegExp(`(?:^|\\n)##[ \\t]+${heading}\\b[^\\n]*([\\s\\S]*?)(?=\\n##[ \\t]|$)`, "i").exec(text6);
+function mobileUxSection(text8, heading) {
+  const match = new RegExp(`(?:^|\\n)##[ \\t]+${heading}\\b[^\\n]*([\\s\\S]*?)(?=\\n##[ \\t]|$)`, "i").exec(text8);
   return match ? match[1] : null;
 }
 function sectionTables(markdown) {
@@ -1024,8 +1024,8 @@ function namesOneCta(cell) {
   if (!cell) return false;
   return !/[,;]|\s\/\s/.test(cell);
 }
-function declaredStates(text6) {
-  const contract = section(text6, "Screen contract");
+function declaredStates(text8) {
+  const contract = section(text8, "Screen contract");
   if (!contract) return [];
   const states = [];
   for (const bullet of contract.matchAll(/^[ \t]*[-*][ \t]*[^:\n]*\bstates?[ \t]*:[ \t]*(\S.*)$/gim)) {
@@ -1035,8 +1035,8 @@ function declaredStates(text6) {
   }
   return [...new Set(states.map((state) => state.toLowerCase()))];
 }
-function primaryCtaStructureGap(text6) {
-  const acceptance = section(text6, "Implementation acceptance");
+function primaryCtaStructureGap(text8) {
+  const acceptance = section(text8, "Implementation acceptance");
   if (acceptance === null) return "There is no `## Implementation acceptance` section to read it from.";
   const tables = sectionTables(acceptance).filter((table) => table.data.length > 0);
   if (!tables.length) return "Its acceptance table has no rows.";
@@ -1049,7 +1049,7 @@ function primaryCtaStructureGap(text6) {
   const data = ctaTables.flatMap(({ table }) => table.data);
   const flat = (value) => value.toLowerCase().replace(/[^a-z0-9]+/g, " ").trim();
   const rowText = data.map((row) => flat(row.join(" ")));
-  const missing = declaredStates(text6).filter((state) => !rowText.some((row) => row.includes(flat(state))));
+  const missing = declaredStates(text8).filter((state) => !rowText.some((row) => row.includes(flat(state))));
   if (missing.length) return `The acceptance table has no row for the declared state(s): ${missing.join(", ")}.`;
   return null;
 }
@@ -1064,16 +1064,16 @@ function hasUnterminatedComment(mobile) {
   }
 }
 function mobileUxMarkerFindings(mobile, renderedWidths = []) {
-  const text6 = mobileUxDocumentBody(mobile);
+  const text8 = mobileUxDocumentBody(mobile);
   const findings = [];
-  if (!/^## Implementation acceptance\b/im.test(text6)) {
+  if (!/^## Implementation acceptance\b/im.test(text8)) {
     findings.push({ code: "missing-acceptance-matrix", message: "MOBILE-UX.md must contain the heading `## Implementation acceptance` at the start of a line. Case is not checked, but use this spelling: other tooling addresses the document by it." });
   }
-  if (!/^## Evidence\b/im.test(text6)) {
+  if (!/^## Evidence\b/im.test(text8)) {
     findings.push({ code: "missing-evidence-section", message: "MOBILE-UX.md must contain the heading `## Evidence` at the start of a line. Case is not checked, but use this spelling: other tooling addresses the document by it." });
   }
-  if (!/one primary CTA per state/i.test(text6)) {
-    const gap = primaryCtaStructureGap(text6);
+  if (!/one primary CTA per state/i.test(text8)) {
+    const gap = primaryCtaStructureGap(text8);
     if (gap) {
       findings.push({
         code: "missing-primary-cta-rule",
@@ -1081,8 +1081,8 @@ function mobileUxMarkerFindings(mobile, renderedWidths = []) {
       });
     }
   }
-  if (!hasWidthEvidence(text6, renderedWidths)) {
-    findings.push({ code: "missing-width-evidence", message: widthEvidenceMessage(text6, renderedWidths) });
+  if (!hasWidthEvidence(text8, renderedWidths)) {
+    findings.push({ code: "missing-width-evidence", message: widthEvidenceMessage(text8, renderedWidths) });
   }
   if (findings.length && hasUnterminatedComment(mobile)) {
     return [{
@@ -1092,15 +1092,15 @@ function mobileUxMarkerFindings(mobile, renderedWidths = []) {
   }
   return findings;
 }
-function widthMentions(text6) {
+function widthMentions(text8) {
   const mentions = [];
-  for (const match of text6.matchAll(/\d+/g)) {
+  for (const match of text8.matchAll(/\d+/g)) {
     const value = Number(match[0]);
     const start = match.index ?? 0;
     if (!inRange(value)) continue;
     const end = start + match[0].length;
-    const after = text6.slice(end, end + EDGE_WINDOW);
-    const before = text6.slice(Math.max(0, start - EDGE_WINDOW), start);
+    const after = text8.slice(end, end + EDGE_WINDOW);
+    const before = text8.slice(Math.max(0, start - EDGE_WINDOW), start);
     if (looksLikeYear(value) && !(UNIT_ATTACHED.test(after) || UNIT_WORD_ATTACHED.test(after))) continue;
     const spelledAsWidth = UNIT_ATTACHED.test(after) || UNIT_WORD_ATTACHED.test(after) || FILENAME_AFTER.test(after);
     const vetoed = spelledAsWidth && (ANTI_CUE_BEFORE.test(before) || PAIR_HEIGHT_BEFORE.test(before) || ANTI_CUE_AFTER.test(after));
@@ -2093,7 +2093,7 @@ function foldLegacyReport(legacy, seed2) {
     ...arrayField(legacy.failures),
     ...arrayField(legacy.warnings)
   ];
-  const report2 = emptyReport({
+  const report3 = emptyReport({
     ...seed2,
     ok: typeof legacy.ok === "boolean" ? legacy.ok : seed2.ok,
     app: seed2.app ?? stringField(legacy.app),
@@ -2104,12 +2104,12 @@ function foldLegacyReport(legacy, seed2) {
   const oldCounts = recordField(legacy.counts);
   return {
     ...legacy,
-    ...report2,
+    ...report3,
     counts: {
       ...oldCounts,
-      errors: numberField(oldCounts.errors) ?? report2.counts.errors,
-      warnings: numberField(oldCounts.warnings) ?? report2.counts.warnings,
-      gaps: report2.counts.gaps
+      errors: numberField(oldCounts.errors) ?? report3.counts.errors,
+      warnings: numberField(oldCounts.warnings) ?? report3.counts.warnings,
+      gaps: report3.counts.gaps
     }
   };
 }
@@ -2773,8 +2773,8 @@ function isAttestationV2(value) {
   if (!value || typeof value !== "object" || Array.isArray(value)) return false;
   const a = value;
   const coverage = a.coverage;
-  const report2 = a.report;
-  return a.attestation === 2 && typeof a.runId === "string" && ["himi-test", "himi-render", "himi-shots"].includes(a.tool) && [a.app, a.contentDir, a.gitDiffHash, a.gitUntrackedHash, a.releaseId, a.releaseHash, a.selfHash].every((item) => typeof item === "string" && item.length > 0) && stringRecord(a.descriptorHashes) && stringRecord(a.screenshots) && !!coverage && [coverage.screens, coverage.actionsDispatched, coverage.uncoveredFns, coverage.gaps].every((count2) => typeof count2 === "number" && Number.isFinite(count2) && count2 >= 0) && typeof report2?.ok === "boolean" && !!report2.counts && [report2.counts.errors, report2.counts.warnings, report2.counts.gaps].every((count2) => typeof count2 === "number" && Number.isFinite(count2) && count2 >= 0) && (a.prev === null || typeof a.prev === "string");
+  const report3 = a.report;
+  return a.attestation === 2 && typeof a.runId === "string" && ["himi-test", "himi-render", "himi-shots"].includes(a.tool) && [a.app, a.contentDir, a.gitDiffHash, a.gitUntrackedHash, a.releaseId, a.releaseHash, a.selfHash].every((item) => typeof item === "string" && item.length > 0) && stringRecord(a.descriptorHashes) && stringRecord(a.screenshots) && !!coverage && [coverage.screens, coverage.actionsDispatched, coverage.uncoveredFns, coverage.gaps].every((count2) => typeof count2 === "number" && Number.isFinite(count2) && count2 >= 0) && typeof report3?.ok === "boolean" && !!report3.counts && [report3.counts.errors, report3.counts.warnings, report3.counts.gaps].every((count2) => typeof count2 === "number" && Number.isFinite(count2) && count2 >= 0) && (a.prev === null || typeof a.prev === "string");
 }
 function readLatestAttestation(contentDir2) {
   try {
@@ -3170,8 +3170,8 @@ function penalty(m, size) {
   score += Math.floor(Math.abs(dark * 20 - total * 10) / total) * 10;
   return score;
 }
-function encodeQr(text6) {
-  const bytes2 = [...new TextEncoder().encode(text6)];
+function encodeQr(text8) {
+  const bytes2 = [...new TextEncoder().encode(text8)];
   const version2 = fitVersion(bytes2.length);
   if (!version2) {
     throw new RangeError(`QR payload too long: ${bytes2.length} bytes exceeds version ${QR_MAX_VERSION} at EC level L`);
@@ -3742,7 +3742,7 @@ async function mintToken(args, label2, cacheKey, spawnImpl) {
     tokenCache.set(cacheKey, fromEnv);
     return fromEnv;
   }
-  const token = await new Promise((resolve52, reject) => {
+  const token = await new Promise((resolve53, reject) => {
     let child;
     try {
       child = spawnImpl("wix", [...args]);
@@ -3771,12 +3771,12 @@ async function mintToken(args, label2, cacheKey, spawnImpl) {
     child.stdout?.on("data", (d) => {
       out2 += String(d);
       const m = out2.match(TOKEN_RE);
-      if (m) done(() => resolve52(m[0]));
+      if (m) done(() => resolve53(m[0]));
     });
     child.stderr?.on("data", (d) => {
       out2 += String(d);
       const m = out2.match(TOKEN_RE);
-      if (m) done(() => resolve52(m[0]));
+      if (m) done(() => resolve53(m[0]));
     });
     child.on("error", (e) => done(() => reject(new Error(mintHelp(label2, e.message)))));
     child.on("exit", (code) => done(() => reject(new Error(
@@ -3821,10 +3821,10 @@ function ownerTransport(msid, fetchImpl = fetch, timeoutMs = DEFAULT_TIMEOUT_MS2
       }
       throw new Error(`${method} ${path2} failed: ${err?.message ?? String(e)}`);
     }
-    const text6 = await res.text();
-    let parsed = text6;
+    const text8 = await res.text();
+    let parsed = text8;
     try {
-      parsed = text6 ? JSON.parse(text6) : null;
+      parsed = text8 ? JSON.parse(text8) : null;
     } catch {
     }
     if (!res.ok) throw new WixApiError(res.status, method, path2, parsed);
@@ -4486,18 +4486,18 @@ function confinementPlugin(contentRoot) {
 }
 function assertConfinedTsconfig(entry, contentRoot, allows) {
   const seen = /* @__PURE__ */ new Set();
-  const refuse4 = (p, why) => {
+  const refuse5 = (p, why) => {
     throw new Error(
       `refused to read ${p}: ${why}. A tsconfig may extend a file from its own package or an installed dependency \u2014 nothing else.`
     );
   };
-  const stripJsonc = (text6) => {
-    if (text6.charCodeAt(0) === 65279) text6 = text6.slice(1);
+  const stripJsonc = (text8) => {
+    if (text8.charCodeAt(0) === 65279) text8 = text8.slice(1);
     let out2 = "";
     let inStr = false;
     let esc = false;
-    for (let i = 0; i < text6.length; i++) {
-      const c = text6[i];
+    for (let i = 0; i < text8.length; i++) {
+      const c = text8[i];
       if (inStr) {
         out2 += c;
         if (esc) esc = false;
@@ -4510,13 +4510,13 @@ function assertConfinedTsconfig(entry, contentRoot, allows) {
         out2 += c;
         continue;
       }
-      if (c === "/" && text6[i + 1] === "/") {
-        while (i < text6.length && text6[i] !== "\n") i++;
+      if (c === "/" && text8[i + 1] === "/") {
+        while (i < text8.length && text8[i] !== "\n") i++;
         continue;
       }
-      if (c === "/" && text6[i + 1] === "*") {
+      if (c === "/" && text8[i + 1] === "*") {
         i += 2;
-        while (i < text6.length && !(text6[i] === "*" && text6[i + 1] === "/")) i++;
+        while (i < text8.length && !(text8[i] === "*" && text8[i + 1] === "/")) i++;
         i++;
         continue;
       }
@@ -4552,7 +4552,7 @@ function assertConfinedTsconfig(entry, contentRoot, allows) {
         try {
           manifest = JSON.parse(stripJsonc(readFileSync10(pj, "utf8")));
         } catch {
-          refuse4(pj, "its package.json could not be parsed, so its `tsconfig` field cannot be checked");
+          refuse5(pj, "its package.json could not be parsed, so its `tsconfig` field cannot be checked");
         }
         const field = manifest?.tsconfig;
         if (typeof field === "string" && field) {
@@ -4568,7 +4568,7 @@ function assertConfinedTsconfig(entry, contentRoot, allows) {
     const real = realpathOrSelf(file);
     if (seen.has(real)) return;
     seen.add(real);
-    if (!allows(real)) refuse4(file, "it is outside this content package");
+    if (!allows(real)) refuse5(file, "it is outside this content package");
     let raw;
     try {
       raw = readFileSync10(real, "utf8");
@@ -4579,7 +4579,7 @@ function assertConfinedTsconfig(entry, contentRoot, allows) {
     try {
       parsed = JSON.parse(stripJsonc(raw));
     } catch {
-      refuse4(file, "its tsconfig could not be parsed, so its `extends` cannot be checked");
+      refuse5(file, "its tsconfig could not be parsed, so its `extends` cannot be checked");
     }
     const ext = parsed?.extends;
     for (const one of Array.isArray(ext) ? ext : ext ? [ext] : []) {
@@ -8420,8 +8420,8 @@ function pushSpan(out2, s) {
   else out2.push(s);
 }
 function spanOf(textNode) {
-  const text6 = str(at(textNode, "textData", "text"));
-  if (text6 === "") return null;
+  const text8 = str(at(textNode, "textData", "text"));
+  if (text8 === "") return null;
   let bold = false, italic = false, underline = false;
   let link;
   const decorations = at(textNode, "textData", "decorations");
@@ -8448,7 +8448,7 @@ function spanOf(textNode) {
       }
     }
   }
-  const span = { text: text6 };
+  const span = { text: text8 };
   if (bold) span.bold = true;
   if (italic) span.italic = true;
   if (underline) span.underline = true;
@@ -8670,8 +8670,8 @@ function blockOf(ids, n, path2) {
         const { title, url } = cardFields(n, type);
         return [card(ids.claim(n, path2), type, title, url)];
       }
-      const text6 = plainText(n);
-      return text6.trim() !== "" ? [{ kind: "paragraph", id: ids.claim(n, path2), spans: [{ text: text6 }] }] : [];
+      const text8 = plainText(n);
+      return text8.trim() !== "" ? [{ kind: "paragraph", id: ids.claim(n, path2), spans: [{ text: text8 }] }] : [];
     }
   }
 }
@@ -9942,26 +9942,26 @@ function serviceOnlyBindingValues(props, key2) {
   });
   return out2;
 }
-function matchBraceSafe(text6, open) {
+function matchBraceSafe(text8, open) {
   let depth = 0;
-  for (let i = open; i < text6.length; i++) {
-    const c = text6[i];
+  for (let i = open; i < text8.length; i++) {
+    const c = text8[i];
     if (c === '"' || c === "'" || c === "`") {
       const q = c;
       i++;
-      while (i < text6.length && text6[i] !== q) {
-        if (text6[i] === "\\") i++;
+      while (i < text8.length && text8[i] !== q) {
+        if (text8[i] === "\\") i++;
         i++;
       }
       continue;
     }
-    if (c === "/" && text6[i + 1] === "/") {
-      while (i < text6.length && text6[i] !== "\n") i++;
+    if (c === "/" && text8[i + 1] === "/") {
+      while (i < text8.length && text8[i] !== "\n") i++;
       continue;
     }
-    if (c === "/" && text6[i + 1] === "*") {
+    if (c === "/" && text8[i + 1] === "*") {
       i += 2;
-      while (i < text6.length && !(text6[i] === "*" && text6[i + 1] === "/")) i++;
+      while (i < text8.length && !(text8[i] === "*" && text8[i + 1] === "/")) i++;
       i++;
       continue;
     }
@@ -12909,8 +12909,8 @@ var init_owner_claim = __esm({
 
 // ../native-config/car.ts
 function parseCarConfig(configTs) {
-  const { text: text6, inString } = scanConfig(configTs);
-  for (const m of text6.matchAll(/\bcar\s*[:=]\s*\{([^}]*)\}/g)) {
+  const { text: text8, inString } = scanConfig(configTs);
+  for (const m of text8.matchAll(/\bcar\s*[:=]\s*\{([^}]*)\}/g)) {
     if (inString[m.index]) continue;
     return { category: /category\s*:\s*["']([^"']+)["']/.exec(m[1])?.[1] };
   }
@@ -17996,12 +17996,12 @@ function hostAppliesDeferredWidgetActions(app) {
   }
   return false;
 }
-function hasMarkers(text6, kind, label2) {
-  const lines = text6.split("\n");
+function hasMarkers(text8, kind, label2) {
+  const lines = text8.split("\n");
   return lines.some((l) => isBegin(l, kind, label2)) && lines.some((l) => isEnd(l, kind, label2));
 }
-function injectBlock(text6, kind, label2, render) {
-  const lines = text6.split("\n");
+function injectBlock(text8, kind, label2, render) {
+  const lines = text8.split("\n");
   const beginIdx = lines.findIndex((l) => isBegin(l, kind, label2));
   const endIdx = lines.findIndex((l) => isEnd(l, kind, label2));
   if (beginIdx === -1 || endIdx === -1 || endIdx < beginIdx) {
@@ -18116,8 +18116,8 @@ function genNativeConfig(app, opts = {}) {
   ];
   const rce = declaresRichContentEditor(configTs);
   for (const yml of [iosYml, macosProjectYml(app)]) {
-    const text6 = existsSync26(yml) ? readFileSync26(yml, "utf8") : "";
-    const r = applyToFile(yml, "yaml", LABEL_LOCALWEB, renderLocalWebYaml(resourcesDirOf(text6), rce), check);
+    const text8 = existsSync26(yml) ? readFileSync26(yml, "utf8") : "";
+    const r = applyToFile(yml, "yaml", LABEL_LOCALWEB, renderLocalWebYaml(resourcesDirOf(text8), rce), check);
     if (existsSync26(yml)) assertLocalWebBlockLanded(app, rce, yml, r.outcome);
     files.push(r);
   }
@@ -18527,21 +18527,21 @@ function carryPlanningJournal(parentDir, appDir3) {
   return carried;
 }
 function formatBrief(input) {
-  const { summary, open } = input;
+  const { summary: summary2, open } = input;
   const who = `himi \u2014 ${input.appName ?? "this folder"}`;
   const lines = [];
-  if (!summary.count) {
+  if (!summary2.count) {
     lines.push(`${who}: no journey journal yet (${PROGRESS_FILE.split(sep6).join("/")}).`);
     lines.push(
       'A new app starts with discovery (step 1). An app built before journaling existed continues from its current state instead: confirm with the customer that its SPEC.md was approved rather than re-running discovery. Either way, journal each milestone with `himi progress "<what changed>" --step <n>` so the next session can pick up from it.'
     );
   } else {
-    const at2 = summary.current ? `journey step ${summary.current.stepNumber}/${summary.current.of} (${summary.current.step})` : "no journey step recorded yet";
-    lines.push(`${who}: ${at2} \xB7 ${summary.count} postcard${summary.count === 1 ? "" : "s"} since ${minute(summary.startedAt)}.`);
-    if (summary.last) lines.push(`Last postcard (${minute(summary.last.ts)}): ${summary.last.message}`);
-    const pastPlan = (summary.current?.stepNumber ?? 0) > JOURNEY_STEPS.indexOf("plan") + 1;
+    const at2 = summary2.current ? `journey step ${summary2.current.stepNumber}/${summary2.current.of} (${summary2.current.step})` : "no journey step recorded yet";
+    lines.push(`${who}: ${at2} \xB7 ${summary2.count} postcard${summary2.count === 1 ? "" : "s"} since ${minute(summary2.startedAt)}.`);
+    if (summary2.last) lines.push(`Last postcard (${minute(summary2.last.ts)}): ${summary2.last.message}`);
+    const pastPlan = (summary2.current?.stepNumber ?? 0) > JOURNEY_STEPS.indexOf("plan") + 1;
     lines.push(
-      !summary.current ? "No journey step recorded yet: a new app starts with discovery (step 1); one whose SPEC.md the customer approved continues from its current state. `himi progress` prints every postcard." : pastPlan ? `Resume at step ${summary.current.stepNumber}. Do not restart discovery: the approved plan is SPEC.md + MOBILE-UX.md.` : `Resume at step ${summary.current.stepNumber}. Implementation has not started: treat SPEC.md + MOBILE-UX.md as a draft unless the journal records the customer approving them.`
+      !summary2.current ? "No journey step recorded yet: a new app starts with discovery (step 1); one whose SPEC.md the customer approved continues from its current state. `himi progress` prints every postcard." : pastPlan ? `Resume at step ${summary2.current.stepNumber}. Do not restart discovery: the approved plan is SPEC.md + MOBILE-UX.md.` : `Resume at step ${summary2.current.stepNumber}. Implementation has not started: treat SPEC.md + MOBILE-UX.md as a draft unless the journal records the customer approving them.`
     );
   }
   if (open.length) {
@@ -19465,10 +19465,10 @@ var init_preview = __esm({
         }
       },
       kill: (pid, signal) => process.kill(pid, signal),
-      portFree: (port) => new Promise((resolve52) => {
+      portFree: (port) => new Promise((resolve53) => {
         const s = createServer2();
-        s.once("error", () => resolve52(false));
-        s.listen(port, "127.0.0.1", () => s.close(() => resolve52(true)));
+        s.once("error", () => resolve53(false));
+        s.listen(port, "127.0.0.1", () => s.close(() => resolve53(true)));
       }),
       sleep: (ms) => new Promise((r) => setTimeout(r, ms)),
       servingIdentity: async (origin) => {
@@ -19652,17 +19652,17 @@ ${BLOCK_END}`;
 ${block}
 `;
 }
-function markersIntact(text6) {
-  const begins = text6.split(BLOCK_BEGIN).length - 1;
-  const ends = text6.split(BLOCK_END).length - 1;
+function markersIntact(text8) {
+  const begins = text8.split(BLOCK_BEGIN).length - 1;
+  const ends = text8.split(BLOCK_END).length - 1;
   if (begins === 0 && ends === 0) return true;
-  return begins === 1 && ends === 1 && text6.indexOf(BLOCK_BEGIN) < text6.indexOf(BLOCK_END) && BLOCK_RE.test(text6);
+  return begins === 1 && ends === 1 && text8.indexOf(BLOCK_BEGIN) < text8.indexOf(BLOCK_END) && BLOCK_RE.test(text8);
 }
-function withoutBlock(text6) {
-  const m = BLOCK_RE.exec(text6);
-  if (!m) return text6;
-  const before = text6.slice(0, m.index).replace(/\n+$/, "");
-  const after = text6.slice(m.index + m[0].length).replace(/^\n+/, "");
+function withoutBlock(text8) {
+  const m = BLOCK_RE.exec(text8);
+  if (!m) return text8;
+  const before = text8.slice(0, m.index).replace(/\n+$/, "");
+  const after = text8.slice(m.index + m[0].length).replace(/^\n+/, "");
   if (!before) return after;
   if (!after) return `${before}
 `;
@@ -19670,8 +19670,8 @@ function withoutBlock(text6) {
 
 ${after}`;
 }
-function blockVersion(text6) {
-  return STAMP_RE.exec(text6)?.[1] ?? null;
+function blockVersion(text8) {
+  return STAMP_RE.exec(text8)?.[1] ?? null;
 }
 function agentsMdBody(appName2) {
   const gates = APPROVAL_GATES.map((g) => `- \`${g.id}\` \u2014 ${g.label}`).join("\n");
@@ -20612,7 +20612,7 @@ async function injectRequest(listener, request) {
   req.headers.host ??= url.host;
   if (body && body.length > 0) req.push(body);
   req.push(null);
-  return await new Promise((resolve52, reject) => {
+  return await new Promise((resolve53, reject) => {
     const streamed = () => {
       queueMicrotask(() => {
         req.emit("close");
@@ -20628,7 +20628,7 @@ async function injectRequest(listener, request) {
         else headers2.set(name, value);
       }
       const bodyless = out2.status === 204 || out2.status === 304 || request.method === "HEAD";
-      resolve52(new Response(bodyless ? null : out2.body, { status: out2.status, headers: headers2 }));
+      resolve53(new Response(bodyless ? null : out2.body, { status: out2.status, headers: headers2 }));
     }, streamed);
     res.on("inject-error", reject);
     try {
@@ -21166,8 +21166,8 @@ async function postJson(path2, body, auth) {
     headers: { "Content-Type": "application/json", ...auth ? { Authorization: auth } : {} },
     body: JSON.stringify(body)
   });
-  const text6 = await res.text();
-  return { status: res.status, json: text6 ? JSON.parse(text6) : {} };
+  const text8 = await res.text();
+  return { status: res.status, json: text8 ? JSON.parse(text8) : {} };
 }
 async function mintVisitor(clientId) {
   const r = await postJson("/oauth2/token", { clientId, grantType: "anonymous" });
@@ -21413,13 +21413,13 @@ function recordWixTraffic(gw, app, adminUrl, ev) {
   full.respBody = truncate(redactBodyString(full.respBody));
   gw.traffic.push(full);
   if (gw.traffic.length > TRAFFIC_CAP) gw.traffic.splice(0, gw.traffic.length - TRAFFIC_CAP);
-  const text6 = `event: wix.traffic
+  const text8 = `event: wix.traffic
 data: ${JSON.stringify(full)}
 
 `;
   for (const res of [...gw.clients]) {
     try {
-      res.write(text6);
+      res.write(text8);
     } catch {
       gw.clients.delete(res);
     }
@@ -21781,10 +21781,10 @@ async function mintAnonymousVisitor(clientId, fetchImpl = fetch) {
     headers: { "Content-Type": "application/json" },
     body: JSON.stringify({ clientId, grantType: "anonymous" })
   });
-  const text6 = await res.text();
+  const text8 = await res.text();
   let j = {};
   try {
-    j = text6 ? JSON.parse(text6) : {};
+    j = text8 ? JSON.parse(text8) : {};
   } catch {
   }
   if (res.status !== 200 || !j.access_token) throw new Error(`visitor mint failed (${res.status})`);
@@ -21948,10 +21948,10 @@ ${session}`);
             }),
             timedOut
           ]);
-          const text6 = await Promise.race([res.text(), timedOut]);
+          const text8 = await Promise.race([res.text(), timedOut]);
           let j = {};
           try {
-            j = text6 ? JSON.parse(text6) : {};
+            j = text8 ? JSON.parse(text8) : {};
           } catch {
           }
           if (res.status < 200 || res.status >= 300 || !j.signedInstance)
@@ -22302,9 +22302,9 @@ var init_images = __esm({
 });
 
 // ../../core/dev-server/src/l10n-catalog.ts
-function parseCatalog(text6) {
+function parseCatalog(text8) {
   try {
-    const c = JSON.parse(text6);
+    const c = JSON.parse(text8);
     return c && typeof c === "object" && c.messages && typeof c.messages === "object" ? c : void 0;
   } catch {
     return void 0;
@@ -22785,9 +22785,9 @@ async function getAndroidPixelDims(serial) {
   try {
     const args = serial ? ["-s", serial, "shell", "wm", "size"] : ["shell", "wm", "size"];
     const out2 = await runner.capture(ADB_BIN, args);
-    const text6 = out2.toString("utf8");
-    const override = /Override size:\s*(\d+)x(\d+)/.exec(text6);
-    const physical = /Physical size:\s*(\d+)x(\d+)/.exec(text6);
+    const text8 = out2.toString("utf8");
+    const override = /Override size:\s*(\d+)x(\d+)/.exec(text8);
+    const physical = /Physical size:\s*(\d+)x(\d+)/.exec(text8);
     const m = override ?? physical;
     if (!m) throw new Error("could not parse wm size");
     const dims = { width: parseInt(m[1], 10), height: parseInt(m[2], 10) };
@@ -23162,12 +23162,12 @@ function finalizeRecording(key2, rec) {
   if (rec.finalize) return rec.finalize;
   rec.finalize = (async () => {
     clearTimeout(rec.autoStop);
-    await new Promise((resolve52) => {
+    await new Promise((resolve53) => {
       let done = false;
       const finish2 = () => {
         if (!done) {
           done = true;
-          resolve52();
+          resolve53();
         }
       };
       rec.child.once("close", finish2);
@@ -23278,7 +23278,7 @@ var init_preview2 = __esm({
     DEVICE_LIST_TIMEOUT_MS = 5e3;
     defaultRunner2 = {
       capture(cmd, args, timeoutMs = DEFAULT_CAPTURE_TIMEOUT_MS) {
-        return new Promise((resolve52, reject) => {
+        return new Promise((resolve53, reject) => {
           const child = spawn4(cmd, args, { stdio: ["ignore", "pipe", "pipe"] });
           const out2 = [];
           const err = [];
@@ -23300,7 +23300,7 @@ var init_preview2 = __esm({
           child.stderr.on("data", (b) => err.push(b));
           child.on("error", (e) => settle(reject, e));
           child.on("close", (code) => {
-            if (code === 0) settle(resolve52, Buffer.concat(out2));
+            if (code === 0) settle(resolve53, Buffer.concat(out2));
             else settle(reject, new Error(`${cmd} exited ${code}: ${Buffer.concat(err).toString("utf8")}`));
           });
         });
@@ -23720,7 +23720,7 @@ function buildOpenApi(descriptors) {
     // Widgets
     "/__dev/widget/preview": ["get", "Render a frozen widget snapshot."]
   };
-  for (const [p, [method, summary]] of Object.entries(control)) {
+  for (const [p, [method, summary2]] of Object.entries(control)) {
     const responses = p === "/__dev/render" ? {
       "200": { description: "completed render (legacy mode, or clean envelope verdict)" },
       "400": { description: "invalid_json" },
@@ -23728,7 +23728,7 @@ function buildOpenApi(descriptors) {
       "422": { description: "completed render with a failing envelope:1 verdict" },
       "503": { description: "dev plane unavailable" }
     } : { "200": { description: "ok" } };
-    paths[p] = { [method]: { summary, responses } };
+    paths[p] = { [method]: { summary: summary2, responses } };
   }
   for (const scope of ["net", "wix"]) {
     paths[`/__dev/${scope}/rules`] = {
@@ -24156,9 +24156,9 @@ function mdScan(src, linkStyle = "") {
   }
   return out2 + mdEsc(src.slice(last));
 }
-function mdInline(text6, linkColor) {
+function mdInline(text8, linkColor) {
   const safe = typeof linkColor === "string" && /^[#a-zA-Z0-9(),.%\s-]+$/.test(linkColor) ? linkColor : "";
-  return { __html: mdScan(text6, safe ? ` style="color:${safe}"` : "") };
+  return { __html: mdScan(text8, safe ? ` style="color:${safe}"` : "") };
 }
 function sevColor(ctx, sev) {
   switch (sev) {
@@ -27527,9 +27527,9 @@ function createRicosHostSession(o) {
       if (!state.ready || state.unavailable) return;
       o.send({ v: 1, type: "command", name, ...arg?.level ? { level: arg.level } : {}, ...arg?.value ? { value: arg.value } : {} });
     },
-    insertLink(url, text6) {
+    insertLink(url, text8) {
       if (!state.ready || state.unavailable || !isSafeEditorLink(url)) return false;
-      o.send({ v: 1, type: "insertLink", url: url.trim(), ...text6 ? { text: text6 } : {} });
+      o.send({ v: 1, type: "insertLink", url: url.trim(), ...text8 ? { text: text8 } : {} });
       return true;
     },
     removeLink() {
@@ -27552,12 +27552,12 @@ function createRicosHostSession(o) {
     flush() {
       if (!state.ready || state.unavailable || disposed) return Promise.resolve(null);
       const requestId2 = newId();
-      return new Promise((resolve52) => {
+      return new Promise((resolve53) => {
         const timer = t.setTimeout(() => {
           flushes.delete(requestId2);
-          resolve52(null);
+          resolve53(null);
         }, flushMs);
-        flushes.set(requestId2, { resolve: resolve52, timer });
+        flushes.set(requestId2, { resolve: resolve53, timer });
         o.send({ v: 1, type: "requestContent", requestId: requestId2 });
       });
     },
@@ -27610,7 +27610,7 @@ async function runRicosImageUpload(o) {
   };
   session.insertMediaPlaceholder(requestId2);
   try {
-    const entry = await new Promise((resolve52) => {
+    const entry = await new Promise((resolve53) => {
       let done = false;
       let unsub = () => {
       };
@@ -27619,7 +27619,7 @@ async function runRicosImageUpload(o) {
         done = true;
         t.clearTimeout(timer);
         queueMicrotask(() => unsub());
-        resolve52(v);
+        resolve53(v);
       };
       const timer = t.setTimeout(() => finish2(null), o.timeoutMs ?? RICOS_UPLOAD_TIMEOUT_MS);
       unsub = deps.subscribe(`${svc}.uploads.${requestId2}`, (v) => {
@@ -29226,13 +29226,13 @@ function NamedImage({ node, alt, env }) {
 }
 function Block({ b, env, depth }) {
   const { ctx } = env;
-  const text6 = ctx.color("textPrimary", "#13171e");
+  const text8 = ctx.color("textPrimary", "#13171e");
   const secondary = ctx.color("textSecondary", "#5c6370");
   const border = ctx.color("border", "#e5e5e5");
   switch (b.kind) {
     case "paragraph":
       return /* @__PURE__ */ jsx7("p", { ...tid(env, b.id, b.kind), style: {
-        ...textStyle(ctx, "body", text6),
+        ...textStyle(ctx, "body", text8),
         textAlign: b.align,
         paddingInlineStart: b.indent ? Math.min(b.indent, 8) * 16 : void 0,
         minHeight: b.spans.length ? void 0 : "1.5em"
@@ -29240,7 +29240,7 @@ function Block({ b, env, depth }) {
     case "heading":
       return React6.createElement(
         `h${b.level}`,
-        { ...tid(env, b.id, b.kind), style: textStyle(ctx, RICH_CONTENT_HEADING_TOKENS[b.level - 1], text6) },
+        { ...tid(env, b.id, b.kind), style: textStyle(ctx, RICH_CONTENT_HEADING_TOKENS[b.level - 1], text8) },
         /* @__PURE__ */ jsx7(Spans, { spans: b.spans, env })
       );
     case "list": {
@@ -29250,7 +29250,7 @@ function Block({ b, env, depth }) {
         {
           ...tid(env, b.id, b.kind),
           start: b.ordered ? b.start : void 0,
-          style: { ...textStyle(ctx, "body", text6), paddingInlineStart: 24, listStyleType: b.ordered ? "decimal" : depth % 2 ? "circle" : "disc" },
+          style: { ...textStyle(ctx, "body", text8), paddingInlineStart: 24, listStyleType: b.ordered ? "decimal" : depth % 2 ? "circle" : "disc" },
           children: b.items.map((item, i) => /* @__PURE__ */ jsx7("li", { "data-component-id": `${env.componentId}/${item.id}`, id: `${env.componentId}/${item.id}`, style: { marginBottom: 6 }, children: /* @__PURE__ */ jsx7("div", { style: { display: "flex", flexDirection: "column", gap: 6 }, children: item.blocks.map((child, j) => /* @__PURE__ */ jsx7(Block, { b: child, env, depth: depth + 1 }, `${j}:${child.id}`)) }) }, `${i}:${item.id}`))
         }
       );
@@ -29264,7 +29264,7 @@ function Block({ b, env, depth }) {
         overflowWrap: "anywhere",
         fontFamily: "ui-monospace, SFMono-Regular, Menlo, monospace",
         fontSize: "0.9em",
-        color: text6,
+        color: text8,
         background: ctx.color("surfaceSecondary", "#f5f5f7"),
         padding: 10,
         borderRadius: 6
@@ -29283,11 +29283,11 @@ function Block({ b, env, depth }) {
     case "button":
       return /* @__PURE__ */ jsx7(LinkButton, { label: b.label, url: b.url, env, testId: `${env.componentId}/${b.id}` });
     case "table":
-      return /* @__PURE__ */ jsx7("table", { ...tid(env, b.id, b.kind), style: { width: "100%", borderCollapse: "collapse", ...textStyle(ctx, "body", text6) }, children: /* @__PURE__ */ jsx7("tbody", { children: b.rows.map((row, r) => /* @__PURE__ */ jsx7("tr", { children: row.map((cell, c) => /* @__PURE__ */ jsx7("td", { style: { border: `1px solid ${border}`, padding: 6, whiteSpace: "pre-wrap", verticalAlign: "top" }, children: cell }, c)) }, r)) }) });
+      return /* @__PURE__ */ jsx7("table", { ...tid(env, b.id, b.kind), style: { width: "100%", borderCollapse: "collapse", ...textStyle(ctx, "body", text8) }, children: /* @__PURE__ */ jsx7("tbody", { children: b.rows.map((row, r) => /* @__PURE__ */ jsx7("tr", { children: row.map((cell, c) => /* @__PURE__ */ jsx7("td", { style: { border: `1px solid ${border}`, padding: 6, whiteSpace: "pre-wrap", verticalAlign: "top" }, children: cell }, c)) }, r)) }) });
     case "card": {
       const title = richContentCardTitle(b);
       return /* @__PURE__ */ jsxs4("div", { ...tid(env, b.id, b.kind), role: "group", "aria-label": title, style: { border: `1px solid ${border}`, borderRadius: 8, padding: 12, display: "flex", flexDirection: "column", gap: 6 }, children: [
-        /* @__PURE__ */ jsx7("div", { style: textStyle(ctx, "bodyEmphasis", text6), children: title }),
+        /* @__PURE__ */ jsx7("div", { style: textStyle(ctx, "bodyEmphasis", text8), children: title }),
         b.url ? /* @__PURE__ */ jsxs4(Fragment3, { children: [
           /* @__PURE__ */ jsx7("div", { style: textStyle(ctx, "caption", secondary), children: richContentHost(b.url) }),
           /* @__PURE__ */ jsx7(LinkButton, { label: RICH_CONTENT_OPEN_LABEL, url: b.url, env, testId: `${env.componentId}/${b.id}/open` })
@@ -30883,8 +30883,8 @@ function applyA11ySemantics(node, ctx, extra) {
       extra["aria-live"] = str9(announce.politeness) === "assertive" ? "assertive" : "polite";
       extra["aria-atomic"] = "true";
       extra["aria-relevant"] = trigger === "on_appear" ? "additions" : trigger === "both" ? "additions text" : "text";
-      const text6 = str9(announce.text);
-      if (text6 && extra["aria-label"] == null) extra["aria-label"] = text6;
+      const text8 = str9(announce.text);
+      if (text8 && extra["aria-label"] == null) extra["aria-label"] = text8;
     }
   }
   return hint;
@@ -32474,13 +32474,13 @@ var init_renderNode = __esm({
       const C = ctx.color;
       const isBoundText = typeof props.textPath === "string" && isBinding(props.textPath);
       const bound = useResolvedScalar(isBoundText ? props.textPath : void 0, ctx);
-      const text6 = isBoundText ? typeof bound === "string" || typeof bound === "number" ? String(bound) : "" : literalErrorText;
+      const text8 = isBoundText ? typeof bound === "string" || typeof bound === "number" ? String(bound) : "" : literalErrorText;
       if (props.visible === false) return null;
-      if (isBoundText && !text6) return null;
+      if (isBoundText && !text8) return null;
       const c = (props.severity ?? "error") === "warning" ? C("warning", "#E89F00") : C("danger", "#E62214");
       return /* @__PURE__ */ jsxs5("div", { role: "alert", style: { display: "flex", gap: 6, alignItems: "center", color: c, fontSize: 13, fontFamily: bodyFont(ctx), ...wrap }, children: [
         /* @__PURE__ */ jsx8("span", { "aria-hidden": "true", children: "\u26A0" }),
-        text6
+        text8
       ] });
     });
     FormView = withExtras("FormView", ({ props, ctx, wrap }) => {
@@ -33967,8 +33967,8 @@ var init_renderNode = __esm({
       const base = invalidIcon ? ICON_FALLBACK : (typeof props.icon === "string" && props.icon ? props.icon : "star").replace(/_fill$/, "");
       const filledCount = Math.round(val);
       const onClickStar = (i) => ctx.onAction && props.interactive && props.onChange ? () => ctx.onAction({ ...props.onChange, params: { ...props.onChange?.params ?? {}, value: String(i + 1) } }) : void 0;
-      const cv = Number.isFinite(val) ? Math.max(0, Math.min(max, val)) : 0, summary = `${Number.isInteger(cv) ? cv : cv.toFixed(1)} of ${max}`;
-      return /* @__PURE__ */ jsx8("span", { style: { display: "inline-flex", alignItems: "center", gap: m.gap, ...wrap }, role: props.interactive ? "group" : "img", "aria-label": `Rating, ${summary}`, "data-a11y-value": summary, children: Array.from({ length: max }).map((_, i) => {
+      const cv = Number.isFinite(val) ? Math.max(0, Math.min(max, val)) : 0, summary2 = `${Number.isInteger(cv) ? cv : cv.toFixed(1)} of ${max}`;
+      return /* @__PURE__ */ jsx8("span", { style: { display: "inline-flex", alignItems: "center", gap: m.gap, ...wrap }, role: props.interactive ? "group" : "img", "aria-label": `Rating, ${summary2}`, "data-a11y-value": summary2, children: Array.from({ length: max }).map((_, i) => {
         const filled = i < filledCount;
         return /* @__PURE__ */ jsx8("span", { onClick: onClickStar(i), style: { display: "inline-grid", placeItems: "center", width: m.cell, height: m.cell, cursor: props.interactive ? "pointer" : "default", opacity: filled ? 1 : 0.28 }, children: iconSvg(filled ? `${base}_fill` : base, { size: m.glyph, color: col }) }, i);
       }) });
@@ -35720,8 +35720,8 @@ function buildRenderTree(node, path2 = "$", provider = null, itemScope = void 0,
     const asText3 = VALUE_PATH_TEXT.get(type);
     if (typeof valuePath === "string" && asText3 && (valuePath.startsWith("$service:") || /^\$item\.[^.]/.test(valuePath))) {
       const r = resolveTreeScalar(valuePath, provider, itemScope);
-      const text6 = asText3(r, props);
-      if (text6 !== void 0) values.value = text6;
+      const text8 = asText3(r, props);
+      if (text8 !== void 0) values.value = text8;
       else if (r !== void 0 && r !== null) {
         delete values.value;
       }
@@ -35902,7 +35902,7 @@ async function stabilizePngPage(page, scheme) {
     const browser = globalThis;
     browser.document.documentElement.style.colorScheme = selected;
     await browser.document.fonts?.ready;
-    await new Promise((resolve52) => browser.requestAnimationFrame(() => browser.requestAnimationFrame(() => resolve52())));
+    await new Promise((resolve53) => browser.requestAnimationFrame(() => browser.requestAnimationFrame(() => resolve53())));
   }, scheme);
 }
 async function renderPngBatch(items) {
@@ -37916,14 +37916,14 @@ function discoverNativeActions(appDir3) {
   const roots = NATIVE_SOURCE_ROOTS.filter(({ directory }) => existsSync38(resolve31(appDir3, directory)));
   const sources = roots.flatMap(({ directory, extension, buildDirMaxDepth }) => nativeSourceFiles(resolve31(appDir3, directory), extension, buildDirMaxDepth));
   const registered = sources.flatMap((source) => {
-    let text6;
+    let text8;
     try {
-      text6 = readFileSync40(source, "utf8");
+      text8 = readFileSync40(source, "utf8");
     } catch (err) {
       if (!vanished(err)) throw err;
       return [];
     }
-    return registeredActions(text6);
+    return registeredActions(text8);
   });
   return {
     registered: new Set(registered),
@@ -38022,11 +38022,11 @@ function strip(line) {
 function scalar(v) {
   return v.trim().replace(/^["']|["']$/g, "");
 }
-function parseRolloutYaml(text6) {
+function parseRolloutYaml(text8) {
   const cfg = { app: "", rings: [] };
   let cur = null;
   let inRings = false;
-  for (const raw of text6.split("\n")) {
+  for (const raw of text8.split("\n")) {
     const line = strip(raw);
     if (!line.trim()) continue;
     const top = /^([a-zA-Z_]+):\s*(.*)$/.exec(line);
@@ -38057,10 +38057,10 @@ function assignRing(r, key2, val) {
   else if (key2 === "percent") r.percent = Number(v);
   else if (key2 === "minBinaryVersion") r.minBinaryVersion = v;
 }
-function parseRevocationsYaml(text6) {
+function parseRevocationsYaml(text8) {
   const out2 = { app: "", revoked: [] };
   let inList = false;
-  for (const raw of text6.split("\n")) {
+  for (const raw of text8.split("\n")) {
     const line = strip(raw);
     if (!line.trim()) continue;
     const top = /^([a-zA-Z_]+):\s*(.*)$/.exec(line);
@@ -38417,7 +38417,7 @@ async function runScreenDiagnostics(state, screenId, descriptor) {
     state.app?.module.config,
     state.tier5Dir ?? TIER5_ROOT2
   );
-  const report2 = validateScreenDescriptor2(screenId, descriptor, {
+  const report3 = validateScreenDescriptor2(screenId, descriptor, {
     tokens,
     allowedComponents,
     bundleJs,
@@ -38430,7 +38430,7 @@ async function runScreenDiagnostics(state, screenId, descriptor) {
   });
   const telemetry = state.telemetryEvents.filter((e) => e.screenId === screenId && (/^worker_/.test(e.type) || e.type === "bundle_load_revoked")).slice(-20);
   const lastError = [...telemetry].reverse().find((e) => /crash|revoked|error|fail/i.test(e.type)) ?? null;
-  const legacy = { ...report2, bundle: bundleName ?? null, telemetry, lastError };
+  const legacy = { ...report3, bundle: bundleName ?? null, telemetry, lastError };
   return foldLegacyReport(legacy, {
     source: "diagnostics",
     screenId,
@@ -38639,11 +38639,11 @@ async function handleOwnerChatRequest(req, res) {
       return sendJson(res, 400, { error: "invalid_json" }, cors);
     }
     const chatroomId = (parsed.chatroomId ?? "").trim();
-    const text6 = (parsed.text ?? "").trim();
-    if (!chatroomId || !text6) return sendJson(res, 400, { error: "chatroomId_and_text_required" }, cors);
+    const text8 = (parsed.text ?? "").trim();
+    if (!chatroomId || !text8) return sendJson(res, 400, { error: "chatroomId_and_text_required" }, cors);
     const metaSiteId = (parsed.metaSiteId ?? "").trim() || await resolveMetaSiteId();
     if (!metaSiteId) return sendJson(res, 400, { error: "no_meta_site" }, cors);
-    const result = await sendChatMessageLive(metaSiteId, chatroomId, text6);
+    const result = await sendChatMessageLive(metaSiteId, chatroomId, text8);
     if (result.ok) return sendJson(res, 200, { ok: true, message: result.message }, cors);
     return sendJson(res, result.status >= 400 && result.status < 600 ? result.status : 502, { ok: false, status: result.status, error: result.error }, cors);
   }
@@ -38904,13 +38904,13 @@ function invalidate(state, ...screenIds) {
   publishSSE(state, "screen.invalidated", { screenIds });
 }
 function publishSSE(state, type, payload) {
-  const text6 = `event: ${type}
+  const text8 = `event: ${type}
 data: ${JSON.stringify(payload)}
 
 `;
   for (const res of [...state.sseClients]) {
     try {
-      res.write(text6);
+      res.write(text8);
     } catch {
       state.sseClients.delete(res);
     }
@@ -38926,13 +38926,13 @@ function publishAdminSSE(state, type, payload) {
       state.lastDeviceScreen.set(key2, screenId);
     }
   }
-  const text6 = `event: ${type}
+  const text8 = `event: ${type}
 data: ${JSON.stringify(payload)}
 
 `;
   for (const res of [...state.adminClients]) {
     try {
-      res.write(text6);
+      res.write(text8);
     } catch {
       state.adminClients.delete(res);
     }
@@ -38953,12 +38953,12 @@ function publishDevReady(state, res, extra = {}) {
     hotReloadEnabled: state.hotReloadEnabled,
     ...extra
   };
-  const text6 = `event: dev.ready
+  const text8 = `event: dev.ready
 data: ${JSON.stringify(payload)}
 
 `;
   if (res) {
-    res.write(text6);
+    res.write(text8);
   } else {
     publishSSE(state, "dev.ready", payload);
   }
@@ -39543,7 +39543,7 @@ async function handleWebWix(req, res, state) {
       }
       if (match) {
         const mocked = match.rule.response;
-        if (mocked.delayMs) await new Promise((resolve52) => setTimeout(resolve52, mocked.delayMs));
+        if (mocked.delayMs) await new Promise((resolve53) => setTimeout(resolve53, mocked.delayMs));
         const responseBody = mocked.template ? renderTemplate(mocked.body, match.captures) : mocked.body;
         record2("mock", mocked.status, responseBody, match.rule.id, mocked.headers);
         return reply(200, { status: mocked.status, body: responseBody ?? "" });
@@ -39709,7 +39709,7 @@ async function handleDev(req, res, state) {
       idiomContext
     );
     const legacy = { screenId, scheme, ...render, diagnostics };
-    const report2 = foldLegacyReport(legacy, {
+    const report3 = foldLegacyReport(legacy, {
       source: "render",
       screenId,
       ok: diagnostics.ok !== false && render.renderable !== false,
@@ -39721,8 +39721,8 @@ async function handleDev(req, res, state) {
       ],
       evidence: { runId: `dev:${state.startedAt}:${screenId}`, ts: (/* @__PURE__ */ new Date()).toISOString() }
     });
-    const status = body.envelope === 1 && !report2.ok ? 422 : 200;
-    return sendJson(res, status, report2);
+    const status = body.envelope === 1 && !report3.ok ? 422 : 200;
+    return sendJson(res, status, report3);
   }
   {
     const diagMatch = /^\/__dev\/screen\/(.+?)\/diagnostics(?:\?|$)/.exec(url);
@@ -40183,7 +40183,7 @@ async function handleAdminPlayground(req, res, state) {
       state.app?.module.config,
       state.tier5Dir ?? TIER5_ROOT2
     );
-    const report2 = validateScreenDescriptor2(screenId, descriptor, {
+    const report3 = validateScreenDescriptor2(screenId, descriptor, {
       tokens,
       allowedComponents,
       bundleJs,
@@ -40193,7 +40193,7 @@ async function handleAdminPlayground(req, res, state) {
       workerSubtreeScreens: new Set(uiConfig(state.app?.module.config).workerSubtreeScreens ?? []),
       a11y: uiConfig(state.app?.module.config).a11y
     });
-    return sendJson(res, report2.ok ? 200 : 422, report2);
+    return sendJson(res, report3.ok ? 200 : 422, report3);
   }
   const detailMatch = /^\/v1\/admin\/screens\/([^/]+)$/.exec(path2);
   if (detailMatch && req.method === "GET") {
@@ -40648,9 +40648,9 @@ async function handleLiveSubscription(req, res, state) {
       },
       body: JSON.stringify({ ...body, app })
     });
-    const text6 = await upstream.text();
+    const text8 = await upstream.text();
     res.writeHead(upstream.status, { "Content-Type": "application/json", ...cors });
-    res.end(text6 || JSON.stringify({ ok: upstream.ok }));
+    res.end(text8 || JSON.stringify({ ok: upstream.ok }));
   } catch (error) {
     sendJson(res, 502, { error: "admin_server_unreachable", detail: String(error) }, cors);
   }
@@ -41642,12 +41642,12 @@ var init_query = __esm({
 });
 
 // ../../core/dev-server/src/crawl-input.ts
-function resolved(v, resolve52) {
-  if (typeof v === "string") return v.startsWith("$service:") ? resolve52(v) : v;
+function resolved(v, resolve53) {
+  if (typeof v === "string") return v.startsWith("$service:") ? resolve53(v) : v;
   if (Array.isArray(v)) {
     const out2 = v.flatMap((el) => {
       if (typeof el !== "string" || !el.startsWith("$service:")) return [el];
-      const r = resolve52(el);
+      const r = resolve53(el);
       return Array.isArray(r) ? r : [r];
     });
     return out2;
@@ -41661,9 +41661,9 @@ function hasRowBinding(props) {
     return itemToken(v) || Array.isArray(v) && v.some(itemToken);
   });
 }
-function declaredOptionIds(props, resolve52) {
+function declaredOptionIds(props, resolve53) {
   const literal = props.options ?? props.tabs ?? props.chips;
-  const bound = props.optionsPath !== void 0 ? resolved(props.optionsPath, resolve52) : void 0;
+  const bound = props.optionsPath !== void 0 ? resolved(props.optionsPath, resolve53) : void 0;
   const raw = Array.isArray(bound) ? bound : literal;
   if (!Array.isArray(raw)) return [];
   const out2 = [];
@@ -41706,24 +41706,24 @@ function seedTokens(state, limit = 48) {
   walk2(state, 0);
   return out2;
 }
-function synthesizeInput(control, resolve52, tokens) {
+function synthesizeInput(control, resolve53, tokens) {
   const id = `${control.type}.${control.callback}`;
   const row = SYNTHESIZED_CONTROLS[id];
   if (!row) return null;
   const props = control.props;
   if (hasRowBinding(props)) return null;
   if (row.from === "declared-options") {
-    const ids = declaredOptionIds(props, resolve52);
+    const ids = declaredOptionIds(props, resolve53);
     if (!ids.length) return null;
     if (row.encoding === "string-array") {
-      const currentRaw2 = resolved(props.selectedIds, resolve52);
+      const currentRaw2 = resolved(props.selectedIds, resolve53);
       const current3 = (Array.isArray(currentRaw2) ? currentRaw2 : []).filter((x) => typeof x === "string");
       const pick4 = ids.find((o) => !current3.includes(o));
       if (pick4 === void 0) return null;
       const value = props.multiSelect === true ? [...current3, pick4] : [pick4];
       return { key: row.key, value, from: row.from, current: current3, control: id };
     }
-    const currentRaw = resolved(props.selectedId, resolve52);
+    const currentRaw = resolved(props.selectedId, resolve53);
     const current2 = typeof currentRaw === "string" ? currentRaw : void 0;
     const pick3 = ids.find((o) => o !== current2);
     if (pick3 === void 0) return null;
@@ -41731,7 +41731,7 @@ function synthesizeInput(control, resolve52, tokens) {
   }
   if (!acceptsWords(props) || !acceptsWords(control.wrapper ?? {})) return null;
   const binding2 = typeof props.valuePath === "string" ? props.valuePath : typeof props.value === "string" && props.value.startsWith("$service:") ? props.value : void 0;
-  const bound = binding2 === void 0 ? void 0 : resolve52(binding2);
+  const bound = binding2 === void 0 ? void 0 : resolve53(binding2);
   const literal = typeof props.value === "string" && !props.value.startsWith("$") ? props.value : void 0;
   const current = typeof bound === "string" ? bound : typeof bound === "number" ? String(bound) : literal ?? "";
   const max = typeof props.maxLength === "number" && props.maxLength > 0 ? props.maxLength : void 0;
@@ -42095,10 +42095,10 @@ function netTransport(rules) {
     if (res.needsUpstream) {
       throw new Error(`net fixture rule ${res.ruleId} is a \`transform\` rule, which needs a real upstream \u2014 not usable in a hermetic crawl`);
     }
-    const { status, body: text6 } = res.resolved;
+    const { status, body: text8 } = res.resolved;
     if (status < 200 || status >= 300) throw new Error(`Wix ${status} for ${method} ${bare}`);
     try {
-      return text6 ? JSON.parse(text6) : {};
+      return text8 ? JSON.parse(text8) : {};
     } catch {
       return {};
     }
@@ -42142,10 +42142,10 @@ function layeredTransport(layers2) {
       });
       if (res.matched) {
         if (res.needsUpstream) throw new Error(`net fixture rule ${res.ruleId} is a \`transform\` rule, which needs a real upstream \u2014 not usable in a hermetic crawl`);
-        const { status, body: text6 } = res.resolved;
+        const { status, body: text8 } = res.resolved;
         if (status < 200 || status >= 300) throw new Error(`Wix ${status} for ${m} ${bare}`);
         try {
-          return text6 ? JSON.parse(text6) : {};
+          return text8 ? JSON.parse(text8) : {};
         } catch {
           return {};
         }
@@ -44167,13 +44167,13 @@ var init_build2 = __esm({
 });
 
 // ../mobile-dist/release-pin.ts
-function withPinnedRelease(text6, releaseId) {
-  if (!releaseId) return text6;
+function withPinnedRelease(text8, releaseId) {
+  if (!releaseId) return text8;
   let cfg;
   try {
-    cfg = JSON.parse(text6);
+    cfg = JSON.parse(text8);
   } catch {
-    return text6;
+    return text8;
   }
   cfg.releaseId = releaseId;
   cfg.releasePinned = true;
@@ -44291,10 +44291,10 @@ async function bakeCatalogs(app, locale, fetchCatalog, putDoc) {
   if (!declared.length) return out2;
   const tags = [.../* @__PURE__ */ new Set([...locale?.default ? [locale.default] : [], ...declared])];
   for (const tag of tags) {
-    const text6 = await fetchCatalog(tag);
-    if (!text6) continue;
-    const hash = sha2564(text6);
-    await putDoc(app, hash, text6);
+    const text8 = await fetchCatalog(tag);
+    if (!text8) continue;
+    const hash = sha2564(text8);
+    await putDoc(app, hash, text8);
     out2[tag] = hash;
   }
   return out2;
@@ -44386,9 +44386,9 @@ async function snapshotTokens(app, base, fetchTokens, put) {
       }
     };
   }
-  const text6 = await res.text();
-  await put(text6);
-  return { hash: sha2564(text6) };
+  const text8 = await res.text();
+  await put(text8);
+  return { hash: sha2564(text8) };
 }
 function tokensSnapshotMessage(app, base, status) {
   const why = status === 400 ? `the dev-server rejected the app id as malformed (400 bad_app). It must be lowercase letters, digits and hyphens, starting with a letter or digit, at most 63 characters, with at most one interior dot \u2014 so a leading underscore or an uppercase letter fails, on every build of that app. A single dot is FINE (an owner-namespaced slug), so do not remove one to get past this` : `${status} from the tokens route`;
@@ -44482,23 +44482,23 @@ function maximumBinaryVersion(current, candidate) {
   }
   return current;
 }
-async function withStoreNavBundle(text6, address) {
+async function withStoreNavBundle(text8, address) {
   let cfg;
   try {
-    cfg = JSON.parse(text6);
+    cfg = JSON.parse(text8);
   } catch {
-    return text6;
+    return text8;
   }
   const refs = [cfg?.navigation?.navLogicBundle, cfg?.navLogicBundle].filter(
     (r) => !!r && typeof r === "object" && typeof r.url === "string"
   );
-  if (refs.length === 0) return text6;
+  if (refs.length === 0) return text8;
   const resolved2 = [];
   for (const ref of refs) {
     const name = bundleNameFromUrl(ref.url);
-    if (!name) return text6;
+    if (!name) return text8;
     const addressed = await address(name);
-    if (!addressed) return text6;
+    if (!addressed) return text8;
     resolved2.push({ ref, url: addressed.url, sri: addressed.sri });
   }
   for (const { ref, url, sri: integrity2 } of resolved2) {
@@ -44507,10 +44507,10 @@ async function withStoreNavBundle(text6, address) {
   }
   return JSON.stringify(cfg);
 }
-function linkableScreenIdsFrom(text6) {
+function linkableScreenIdsFrom(text8) {
   let cfg;
   try {
-    cfg = JSON.parse(text6);
+    cfg = JSON.parse(text8);
   } catch {
     return [];
   }
@@ -44522,24 +44522,24 @@ function linkableScreenIdsFrom(text6) {
   }
   return [...ids];
 }
-function withoutDevOnlyAppConfig(text6) {
+function withoutDevOnlyAppConfig(text8) {
   let cfg;
   try {
-    cfg = JSON.parse(text6);
+    cfg = JSON.parse(text8);
   } catch {
-    return text6;
+    return text8;
   }
-  if (!cfg || typeof cfg !== "object" || !("devGatewayConfig" in cfg)) return text6;
+  if (!cfg || typeof cfg !== "object" || !("devGatewayConfig" in cfg)) return text8;
   delete cfg.devGatewayConfig;
   return JSON.stringify(cfg);
 }
-function withProdServeAppConfig(text6, prod) {
-  if (!prod?.serve) return text6;
+function withProdServeAppConfig(text8, prod) {
+  if (!prod?.serve) return text8;
   let cfg;
   try {
-    cfg = JSON.parse(text6);
+    cfg = JSON.parse(text8);
   } catch {
-    return text6;
+    return text8;
   }
   cfg.useProdServe = true;
   cfg.prodServeBaseUrl = prod.serve;
@@ -44760,10 +44760,10 @@ async function buildFromLoaded(preloaded, dest, opts = {}) {
       if (bytes2.length === 0 || bytes2.length > MAX_AUTHORING_DOC_BYTES) {
         throw new Error(`${file} must be non-empty and at most ${MAX_AUTHORING_DOC_BYTES} bytes to ship with a release.`);
       }
-      const text6 = bytes2.toString("utf8");
-      if (!Buffer.from(text6, "utf8").equals(bytes2)) throw new Error(`${file} must be canonical UTF-8 Markdown.`);
+      const text8 = bytes2.toString("utf8");
+      if (!Buffer.from(text8, "utf8").equals(bytes2)) throw new Error(`${file} must be canonical UTF-8 Markdown.`);
       const hash = sha2564(bytes2);
-      await store.putDoc(app, hash, text6);
+      await store.putDoc(app, hash, text8);
       authoringDocs[name] = { sha256: hash, sri: sri2(bytes2), bytes: bytes2.length, contentType: "text/markdown; charset=utf-8" };
     }
   }
@@ -44962,7 +44962,7 @@ async function buildFromLoaded(preloaded, dest, opts = {}) {
       }
       if (collect2?.lint) {
         const bundleJs = bundleName ? readBuiltBundle(tier5Dir, bundleName) : void 0;
-        const report2 = validateScreenDescriptor(screenId, descriptor, {
+        const report3 = validateScreenDescriptor(screenId, descriptor, {
           tokens: lintTokens,
           allowedComponents,
           allowedIcons: KNOWN_ICONS,
@@ -44976,7 +44976,7 @@ async function buildFromLoaded(preloaded, dest, opts = {}) {
           // default, "error"; an in-repo app with ratcheted debt declares "warn".
           a11y: config.a11y
         });
-        lint.push({ screenId, ok: report2.ok, issues: report2.issues });
+        lint.push({ screenId, ok: report3.ok, issues: report3.issues });
       }
       if (collect2?.render && (!collect2.render.screenId || collect2.render.screenId === screenId)) {
         const { services, liveCalls, liveReturned, liveErrors } = await renderServicesFor(bundleName, descriptor);
@@ -44994,7 +44994,7 @@ async function buildFromLoaded(preloaded, dest, opts = {}) {
         const bundleName = lb ? bundleNameFromUrl(lb.url) : null;
         if (collect2?.lint) {
           const bundleJs = bundleName ? readBuiltBundle(tier5Dir, bundleName) : void 0;
-          const report2 = validateScreenDescriptor(wantedRender, descriptor, {
+          const report3 = validateScreenDescriptor(wantedRender, descriptor, {
             tokens: lintTokens,
             allowedComponents,
             allowedIcons: KNOWN_ICONS,
@@ -45005,7 +45005,7 @@ async function buildFromLoaded(preloaded, dest, opts = {}) {
             workerSubtreeScreens: new Set(config.workerSubtreeScreens ?? []),
             a11y: config.a11y
           });
-          lint.push({ screenId: wantedRender, ok: report2.ok, issues: report2.issues });
+          lint.push({ screenId: wantedRender, ok: report3.ok, issues: report3.issues });
         }
         const { services, liveCalls, liveReturned, liveErrors } = await renderServicesFor(bundleName, descriptor);
         const rr = await renderDescriptorWeb(descriptor, renderTokens, renderScheme, collect2.render.png === true, services, collect2.render.width, collect2.render.rtl === true);
@@ -45123,11 +45123,11 @@ async function buildFromLoaded(preloaded, dest, opts = {}) {
           ok: res.ok,
           status: res.status,
           text: async () => {
-            const text6 = await res.text();
+            const text8 = await res.text();
             try {
-              const doc = JSON.parse(text6);
+              const doc = JSON.parse(text8);
               if (!publishedFontPlan) {
-                if (!("fontFaces" in doc)) return text6;
+                if (!("fontFaces" in doc)) return text8;
                 const kept = publishableFontFaces(doc.fontFaces);
                 if (kept) doc.fontFaces = kept;
                 else delete doc.fontFaces;
@@ -45136,12 +45136,12 @@ async function buildFromLoaded(preloaded, dest, opts = {}) {
               doc.fontFaces = servedProjection(publishedFontPlan);
               return JSON.stringify(doc);
             } catch {
-              return text6;
+              return text8;
             }
           }
         };
       },
-      (text6) => store.putTokens(app, text6)
+      (text8) => store.putTokens(app, text8)
     );
     if (snapshot2.hash) tokensHash = snapshot2.hash;
     if (snapshot2.failure) {
@@ -45171,14 +45171,14 @@ async function buildFromLoaded(preloaded, dest, opts = {}) {
       if (streamPolicyErrors.length) {
         throw new Error(`invalid streamPolicy for release ${app}: ${streamPolicyErrors.join("; ")}`);
       }
-      const text6 = await withStoreNavBundle(prodText, async (name) => {
+      const text8 = await withStoreNavBundle(prodText, async (name) => {
         const hash = await addressBundle(name) ?? null;
         const entry = hash ? bundles[name] : void 0;
         return entry ? { url: store.bundleUrl(app, entry.sha256), sri: entry.sri } : null;
       });
-      await store.putAppConfig(app, text6);
-      appConfigHash = sha2564(text6);
-      if (collect2?.descriptors) for (const id of linkableScreenIdsFrom(text6)) linkable.add(id);
+      await store.putAppConfig(app, text8);
+      appConfigHash = sha2564(text8);
+      if (collect2?.descriptors) for (const id of linkableScreenIdsFrom(text8)) linkable.add(id);
     }
     const ahRes = await devFetch(`${base}/v1/action-handlers/${encodeURIComponent(app)}`, { headers: { "X-Himalaya-App": app } });
     if (ahRes.ok) {
@@ -46044,14 +46044,14 @@ function headline(changes) {
 function boardLines(changes) {
   const lines = [];
   for (const c of changes.items) {
-    const text6 = lineOf(c);
-    const same3 = lines.find((l) => l.text === text6);
+    const text8 = lineOf(c);
+    const same3 = lines.find((l) => l.text === text8);
     if (same3) {
       same3.n++;
       continue;
     }
     lines.push({
-      text: text6,
+      text: text8,
       n: 1,
       ...c.kind === "token" && c.from && HEX.test(c.from) ? { from: c.from } : {},
       ...c.kind === "token" && c.to && HEX.test(c.to) ? { to: c.to } : {}
@@ -46371,12 +46371,12 @@ function testRuns(dir) {
     if (!f.endsWith(".json") || f === "latest.json") continue;
     const r = obj(readJson3(join41(att, f)));
     if (!r || r.tool !== "himi-test" || typeof r.runId !== "string") continue;
-    const report2 = obj(r.report);
+    const report3 = obj(r.report);
     const coverage = obj(r.coverage);
     runs.push({
       runId: r.runId,
-      ok: report2?.ok === true,
-      errors: num(obj(report2?.counts)?.errors),
+      ok: report3?.ok === true,
+      errors: num(obj(report3?.counts)?.errors),
       screens: num(coverage?.screens),
       actions: num(coverage?.actionsDispatched),
       gaps: num(coverage?.gaps)
@@ -46495,7 +46495,7 @@ function focusScreen(memory) {
 }
 function buildView(dir, memory, now) {
   const { entries } = readProgress(dir);
-  const summary = summarizeProgress(entries);
+  const summary2 = summarizeProgress(entries);
   const { name, iconFile } = appIdentity(dir);
   const iconArchived = iconFile ? archiveFile(dir, memory, iconFile) : null;
   const icon = iconArchived ? historyUrl(iconArchived.file) : null;
@@ -46524,12 +46524,12 @@ function buildView(dir, memory, now) {
     }
   }
   const firstShot = screens.map((s) => s.firstSeen).sort()[0];
-  const startedAt = [summary.startedAt, firstShot, memory.createdAt].filter((x) => !!x).sort()[0] ?? null;
+  const startedAt = [summary2.startedAt, firstShot, memory.createdAt].filter((x) => !!x).sort()[0] ?? null;
   const view = {
     generatedAt: now,
     app: { name, icon, palette: palette(dir) },
     steps: JOURNEY_STEPS,
-    current: summary.current ?? null,
+    current: summary2.current ?? null,
     startedAt,
     journal: entries.slice(-MAX_JOURNAL).reverse().map((e) => ({
       ts: e.ts,
@@ -47194,16 +47194,16 @@ function pushSetupBodyBytes(body) {
   return Buffer.byteLength(JSON.stringify(body), "utf8");
 }
 async function pushSetupRequest(options) {
-  const refuse4 = (error) => ({ ok: false, status: 0, body: null, error });
-  if (!options.target.controlToken) return refuse4("control_token_required");
-  if (!options.wixToken) return refuse4("wix_account_token_required");
-  if (credentialHostRefusal(options.target.control)) return refuse4("insecure_target");
-  if (options.previewTag !== void 0 && !PREVIEW_TAG.test(options.previewTag)) return refuse4("invalid_preview_tag");
+  const refuse5 = (error) => ({ ok: false, status: 0, body: null, error });
+  if (!options.target.controlToken) return refuse5("control_token_required");
+  if (!options.wixToken) return refuse5("wix_account_token_required");
+  if (credentialHostRefusal(options.target.control)) return refuse5("insecure_target");
+  if (options.previewTag !== void 0 && !PREVIEW_TAG.test(options.previewTag)) return refuse5("invalid_preview_tag");
   const setup = options.operation === "setup";
-  if (setup && !options.body) return refuse4("push_setup_body_required");
-  if (!setup && (!options.query?.app || !options.query?.site)) return refuse4("push_setup_query_required");
+  if (setup && !options.body) return refuse5("push_setup_body_required");
+  if (!setup && (!options.query?.app || !options.query?.site)) return refuse5("push_setup_query_required");
   if (setup && pushSetupBodyBytes(options.body) > MAX_PUSH_SETUP_BODY_BYTES) {
-    return refuse4("push_setup_body_too_large");
+    return refuse5("push_setup_body_too_large");
   }
   const base = options.target.control.replace(/\/+$/, "");
   let path2 = "/v1/admin/push/setup";
@@ -47228,10 +47228,10 @@ async function pushSetupRequest(options) {
       signal: AbortSignal.timeout(options.timeoutMs ?? (setup ? 12e4 : 3e4)),
       ...setup ? { body: JSON.stringify(options.body) } : {}
     });
-    const text6 = await response.text();
+    const text8 = await response.text();
     let parsed = null;
     try {
-      const value = text6 ? JSON.parse(text6) : null;
+      const value = text8 ? JSON.parse(text8) : null;
       parsed = value && typeof value === "object" && !Array.isArray(value) ? value : null;
     } catch {
       parsed = null;
@@ -47271,6 +47271,41 @@ var init_push_setup_apple_credentials = __esm({
   }
 });
 
+// src/hosted-owner.ts
+async function hostedOwnerSession(flags, deps = {}) {
+  let target;
+  try {
+    target = resolveTarget({ target: text3(flags.target), defaultTarget: "wix", controlUrl: text3(flags["control-url"]), controlToken: text3(flags["control-token"]), ownerIssueUrl: text3(flags["owner-issue-url"]) });
+  } catch {
+    return refused("unknown_target", "Select a configured serve target.");
+  }
+  if (credentialHostRefusal(target.control)) return refused("insecure_target");
+  const previewTag = text3(flags["preview-tag"]) ?? process.env.HIMI_SERVE_PREVIEW_TAG;
+  if (previewTag !== void 0 && !/^dp-[a-z0-9]+$/.test(previewTag)) return refused("invalid_preview_tag");
+  const controlToken = target.controlToken;
+  if (!controlToken || !decodeControlTokenClaims(controlToken)?.sub) return refused("owner_login_required", "Run himi login --browser --target wix.");
+  let wixToken;
+  try {
+    wixToken = await (deps.wixToken ?? accountToken)();
+  } catch {
+    return refused("wix_account_token_required", "Browser login supplies a Himi control token only. Sign into the Wix CLI with wix login, using the same Wix account, then retry. You can continue building without push setup.", 1);
+  }
+  if (!wixToken) return refused("wix_account_token_required", "Run wix login using the same Wix account.", 1);
+  if (!target.ownerIssue) return refused("owner_issuer_required");
+  return { ok: true, session: { target, controlToken, wixToken, ownerIssue: target.ownerIssue, ...previewTag ? { previewTag } : {} } };
+}
+var text3, refused;
+var init_hosted_owner = __esm({
+  "src/hosted-owner.ts"() {
+    init_config();
+    init_credential_hosts();
+    init_owner_claim();
+    init_wix_owner();
+    text3 = (v) => typeof v === "string" && v.length > 0 ? v : void 0;
+    refused = (error, hint, exit = 2) => ({ ok: false, error, ...hint ? { hint } : {}, exit });
+  }
+});
+
 // src/push-onboarding.ts
 import { existsSync as existsSync44, mkdirSync as mkdirSync20, readFileSync as readFileSync48, statSync as statSync9, writeFileSync as writeFileSync15, chmodSync as chmodSync2 } from "node:fs";
 import { basename as basename12, dirname as dirname25, join as join42, resolve as resolve37 } from "node:path";
@@ -47294,26 +47329,26 @@ function pushInputsFromContent(dir) {
     // autoClaimSlug's docblock describes as the project-declared slug. Without the fallback a
     // package with no `name` sent a body missing `app` and earned `400 invalid_app_id` with both
     // private keys already on the wire.
-    app: text3(content.name) ?? basename12(root),
-    ...text3(provisioning.siteId) ? { site: text3(provisioning.siteId) } : {},
-    ...text3(native.iosBundleId) ? { bundleId: text3(native.iosBundleId) } : {},
-    ...text3(native.androidApplicationId) ? { androidApplicationId: text3(native.androidApplicationId) } : {}
+    app: text4(content.name) ?? basename12(root),
+    ...text4(provisioning.siteId) ? { site: text4(provisioning.siteId) } : {},
+    ...text4(native.iosBundleId) ? { bundleId: text4(native.iosBundleId) } : {},
+    ...text4(native.androidApplicationId) ? { androidApplicationId: text4(native.androidApplicationId) } : {}
   };
 }
 function mergePushInputs(content, flags) {
   const merged = { ...content };
   for (const [flag, apply] of FLAG_SETTERS) {
-    const value = text3(flags[flag]);
+    const value = text4(flags[flag]);
     if (value !== void 0) apply(merged, value);
   }
   return merged;
 }
 function missingPushInputs(i, scope) {
   const needed = scope === "push_and_signing" ? [...REQUIRED_ORDER, ...ASC_ORDER] : REQUIRED_ORDER;
-  return needed.filter((name) => !text3(i[name]));
+  return needed.filter((name) => !text4(i[name]));
 }
 function ascGroupError(i) {
-  const present = ASC_ORDER.filter((name) => text3(i[name])).length;
+  const present = ASC_ORDER.filter((name) => text4(i[name])).length;
   return present === 0 || present === ASC_ORDER.length ? null : "incomplete_asc_group";
 }
 function localIdentityRefusal(i) {
@@ -47382,8 +47417,8 @@ function validateApnsAuthKey(body) {
   return { ok: true };
 }
 function buildPushSetupBody(i, keys) {
-  const missing = REQUIRED_ORDER.filter((name) => !text3(i[name]));
-  const app = text3(i.app);
+  const missing = REQUIRED_ORDER.filter((name) => !text4(i[name]));
+  const app = text4(i.app);
   if (!app) return { ok: false, code: "app_not_initialized", missing };
   if (missing.length > 0) return { ok: false, code: "needs_input", missing };
   if (i.apnsEnvironment !== "development" && i.apnsEnvironment !== "production") {
@@ -47463,7 +47498,7 @@ function savePushSelection(dir, input) {
   if (input.androidApplicationId) selection.androidApplicationId = input.androidApplicationId;
   writeFile(dir, { ...readPushOnboarding(dir), selection });
 }
-var PUSH_ONBOARDING_PATH, MAX_KEY_FILE_BYTES, SITE_RE, APP_RE, ANDROID_ID_RE, PLACEHOLDER_BUNDLE_RE, text3, FLAG_SETTERS, REQUIRED_ORDER, ASC_ORDER, NOTE;
+var PUSH_ONBOARDING_PATH, MAX_KEY_FILE_BYTES, SITE_RE, APP_RE, ANDROID_ID_RE, PLACEHOLDER_BUNDLE_RE, text4, FLAG_SETTERS, REQUIRED_ORDER, ASC_ORDER, NOTE;
 var init_push_onboarding = __esm({
   "src/push-onboarding.ts"() {
     PUSH_ONBOARDING_PATH = ".himi/push-onboarding.json";
@@ -47472,7 +47507,7 @@ var init_push_onboarding = __esm({
     APP_RE = /^[a-z0-9][a-z0-9._-]{0,63}$/i;
     ANDROID_ID_RE = /^[A-Za-z][A-Za-z0-9_]*(\.[A-Za-z][A-Za-z0-9_]*)+$/;
     PLACEHOLDER_BUNDLE_RE = /^com\.example\.|^__HIMI_APP_/;
-    text3 = (v) => typeof v === "string" && v.length > 0 ? v : void 0;
+    text4 = (v) => typeof v === "string" && v.length > 0 ? v : void 0;
     FLAG_SETTERS = [
       ["app", (m, v) => {
         m.app = v;
@@ -47604,7 +47639,7 @@ async function runNotifySetup(pos, flags, io, deps = {}) {
   if (operation !== "setup" && operation !== "status") return refuse2(io, "invalid_notify_operation");
   const flagError = pushSetupFlagError(flags);
   if (flagError) return refuse2(io, flagError);
-  const dir = resolve38(text4(flags.content) ?? process.cwd());
+  const dir = resolve38(text5(flags.content) ?? process.cwd());
   const local = readPushOnboarding(dir);
   const progress = local.push;
   const content = pushInputsFromContent(dir);
@@ -47636,26 +47671,10 @@ async function runNotifySetup(pos, flags, io, deps = {}) {
     return 2;
   }
   if (operation === "setup" && ascGroupError(input)) return refuse2(io, "incomplete_asc_group");
-  let target;
-  try {
-    target = resolveTarget({ target: text4(flags.target), defaultTarget: "wix", controlUrl: text4(flags["control-url"]), controlToken: text4(flags["control-token"]), ownerIssueUrl: text4(flags["owner-issue-url"]) });
-  } catch {
-    return refuse2(io, "unknown_target", "Select a configured serve target.");
-  }
-  if (credentialHostRefusal(target.control)) return refuse2(io, "insecure_target");
-  const previewTag = text4(flags["preview-tag"]) ?? process.env.HIMI_SERVE_PREVIEW_TAG;
-  if (previewTag !== void 0 && !/^dp-[a-z0-9]+$/.test(previewTag)) return refuse2(io, "invalid_preview_tag");
-  const token = target.controlToken;
-  if (!token || !decodeControlTokenClaims(token)?.sub) return refuse2(io, "owner_login_required", "Run himi login --browser --target wix.");
-  let wixToken;
-  try {
-    wixToken = await (deps.wixToken ?? accountToken)();
-  } catch {
-    return refuse2(io, "wix_account_token_required", "Browser login supplies a Himi control token only. Sign into the Wix CLI with wix login, using the same Wix account, then retry. You can continue building without push setup.", 1);
-  }
-  if (!wixToken) return refuse2(io, "wix_account_token_required", "Run wix login using the same Wix account.", 1);
-  if (!target.ownerIssue) return refuse2(io, "owner_issuer_required");
-  const ownershipArgs = { ownerIssue: target.ownerIssue, controlToken: token, declaredName: input.app, fetchImpl: deps.fetchImpl };
+  const owner = await hostedOwnerSession(flags, deps);
+  if (!owner.ok) return refuse2(io, owner.error, owner.hint, owner.exit);
+  const { target, controlToken: token, wixToken, previewTag, ownerIssue } = owner.session;
+  const ownershipArgs = { ownerIssue, controlToken: token, declaredName: input.app, fetchImpl: deps.fetchImpl };
   let ownership = await verifyAppOwnership(ownershipArgs);
   logOwnershipFailure(io, ownership);
   if (ownership.state !== "owned" && ownership.state !== "not_claimed") return refuse2(io, `app_ownership_${ownership.state}`, "Setup requires the app owner; retry after ownership is verified.", 1);
@@ -47701,7 +47720,7 @@ async function runNotifySetup(pos, flags, io, deps = {}) {
       }
     }
     if (ownership.state === "not_claimed") {
-      const claim = await autoClaimSlug({ ownerIssue: target.ownerIssue, controlToken: token, app: input.app, accountId: text4(flags["account-id"]), fetchImpl: deps.fetchImpl });
+      const claim = await autoClaimSlug({ ownerIssue, controlToken: token, app: input.app, accountId: text5(flags["account-id"]), fetchImpl: deps.fetchImpl });
       if (claim.fatal) return refuse2(io, "app_claim_refused", "Check app ownership and the selected account.", 1);
       ownership = await verifyAppOwnership({ ...ownershipArgs, declaredName: claim.slug ?? input.app });
       logOwnershipFailure(io, ownership);
@@ -47751,17 +47770,15 @@ async function offerPushSetup(options) {
     return { status: "needs_attention", resume: resume(contentDir2) };
   }
 }
-var text4, obj2, STATES, CHECKS, CHECK_STATES, STAGES, ERROR_CODES, PROMPTS, later, resume;
+var text5, obj2, STATES, CHECKS, CHECK_STATES, STAGES, ERROR_CODES, PROMPTS, later, resume;
 var init_notify_setup = __esm({
   "src/notify-setup.ts"() {
-    init_config();
-    init_credential_hosts();
     init_push_setup();
     init_push_setup_apple_credentials();
-    init_wix_owner();
     init_owner_claim();
+    init_hosted_owner();
     init_push_onboarding();
-    text4 = (v) => typeof v === "string" && v.length > 0 ? v : void 0;
+    text5 = (v) => typeof v === "string" && v.length > 0 ? v : void 0;
     obj2 = (v) => v && typeof v === "object" && !Array.isArray(v) ? v : {};
     STATES = /* @__PURE__ */ new Set(["not_configured", "provisioning", "ready", "needs_attention"]);
     CHECKS = ["brandedRecord", "pingApns", "pingFcm", "appleSigning", "nativeBuild", "himiRouting", "deviceDelivery"];
@@ -48456,7 +48473,7 @@ function thin(items, max) {
 function planReel(dir) {
   const memory = loadMemory2(dir);
   const { entries } = readProgress(dir);
-  const summary = summarizeProgress(entries);
+  const summary2 = summarizeProgress(entries);
   const manifest = readJson5(join45(dir, "himalaya.content.json"));
   const tokens = readJson5(join45(dir, "tokens.json"));
   const accentToken = tokens?.colors?.accentPrimary;
@@ -48476,9 +48493,9 @@ function planReel(dir) {
     by: isCliEntry(e) ? CLI_AUTHOR : null,
     files: (Array.isArray(e.images) ? e.images : []).map((i) => isObj3(i) && typeof i.file === "string" ? basename13(i.file) : "").filter((f) => HISTORY_NAME.test(f))
   }));
-  const times = [summary.startedAt, ...timeline.map((t) => t.ts), memory?.createdAt].filter((x) => !!x).sort();
+  const times = [summary2.startedAt, ...timeline.map((t) => t.ts), memory?.createdAt].filter((x) => !!x).sort();
   const startedAt = times[0] ?? null;
-  const endedAt = [summary.lastAt, ...timeline.map((t) => t.ts)].filter((x) => !!x).sort().pop() ?? null;
+  const endedAt = [summary2.lastAt, ...timeline.map((t) => t.ts)].filter((x) => !!x).sort().pop() ?? null;
   return {
     app: typeof manifest?.name === "string" && manifest.name ? manifest.name : basename13(dir),
     accent,
@@ -48778,9 +48795,9 @@ async function firstLookAtInit(dir, opts) {
     child.on("error", (e) => finish2({ skipped: `the render did not start: ${e.message}` }));
     child.on("close", (code) => {
       clearTimeout(hardKill);
-      let report2 = null;
+      let report3 = null;
       try {
-        report2 = JSON.parse(Buffer.concat(out2).toString("utf8"));
+        report3 = JSON.parse(Buffer.concat(out2).toString("utf8"));
       } catch {
       }
       let fresh = false;
@@ -48789,7 +48806,7 @@ async function firstLookAtInit(dir, opts) {
       } catch {
       }
       if (code === 0 && fresh) return finish2({ image: `.himi/shots/${home}.png` });
-      if (report2?.pngUnavailable) return finish2({ skipped: "no headless browser to draw the PNG \u2014 `npx playwright install chromium`, then run the render step below" });
+      if (report3?.pngUnavailable) return finish2({ skipped: "no headless browser to draw the PNG \u2014 `npx playwright install chromium`, then run the render step below" });
       let refusal = null;
       for (const line of errTail.trim().split("\n").reverse()) {
         try {
@@ -48799,7 +48816,7 @@ async function firstLookAtInit(dir, opts) {
         }
         if (refusal) break;
       }
-      const why = typeof report2?.reason === "string" ? report2.reason : typeof report2?.error === "string" ? report2.error : refusal;
+      const why = typeof report3?.reason === "string" ? report3.reason : typeof report3?.error === "string" ? report3.error : refusal;
       finish2({ skipped: `the render made no picture (exit ${code ?? "killed"})${why ? `: ${why.slice(0, 200)}` : ""}` });
     });
   });
@@ -49754,9 +49771,9 @@ function bundlesOf(block) {
   walk2(block);
   return [...out2];
 }
-function parseJson2(text6, what) {
+function parseJson2(text8, what) {
   try {
-    const value = JSON.parse(text6);
+    const value = JSON.parse(text8);
     if (!value || typeof value !== "object" || Array.isArray(value)) throw new Error("not an object");
     return value;
   } catch (e) {
@@ -49991,25 +50008,25 @@ function pruneChrome(items, removed, ledger) {
 }
 function rewriteNav(nav, removed, homeId) {
   const next = structuredClone(nav);
-  const report2 = { linkable: [], tabs: [], drawer: [], sidebar: [], deepLinkPatterns: [], topBarActions: [], headerActions: [], surfaceDestinations: [], appIconBadgeSources: [], reparented: [] };
+  const report3 = { linkable: [], tabs: [], drawer: [], sidebar: [], deepLinkPatterns: [], topBarActions: [], headerActions: [], surfaceDestinations: [], appIconBadgeSources: [], reparented: [] };
   const tabItems = asItems(next.tabBar);
   const hadTabs = !!tabItems?.length;
-  if (tabItems) next.tabBar.items = pruneChrome(tabItems, removed, report2.tabs);
+  if (tabItems) next.tabBar.items = pruneChrome(tabItems, removed, report3.tabs);
   const drawerItems = asItems(next.drawer);
-  if (drawerItems) next.drawer.items = pruneChrome(drawerItems, removed, report2.drawer);
+  if (drawerItems) next.drawer.items = pruneChrome(drawerItems, removed, report3.drawer);
   const sidebarItems = asItems(next.sidebar);
-  if (sidebarItems) next.sidebar.items = pruneChrome(sidebarItems, removed, report2.sidebar);
+  if (sidebarItems) next.sidebar.items = pruneChrome(sidebarItems, removed, report3.sidebar);
   if (hadTabs && !asItems(next.tabBar).length) {
-    throw new TrimRefusal(`no tab would remain \u2014 every tabBar item opens a screen this trim removes (${report2.tabs.join(", ")}); keep at least one tab's screen`, { removedTabs: report2.tabs });
+    throw new TrimRefusal(`no tab would remain \u2014 every tabBar item opens a screen this trim removes (${report3.tabs.join(", ")}); keep at least one tab's screen`, { removedTabs: report3.tabs });
   }
   const remainingRoots = [...asItems(next.tabBar) ?? [], ...asItems(next.sidebar) ?? []].filter((i) => i.role !== "section");
   const remainingRootIds = new Set(remainingRoots.map((i) => i.id).filter((id) => typeof id === "string"));
-  const removedRootIds = /* @__PURE__ */ new Set([...report2.tabs, ...report2.sidebar]);
+  const removedRootIds = /* @__PURE__ */ new Set([...report3.tabs, ...report3.sidebar]);
   if (Array.isArray(next.deepLinkPatterns)) {
     next.deepLinkPatterns = next.deepLinkPatterns.filter((p) => {
       const id = p?.params?.screenId ?? p?.screenId;
       if (typeof id === "string" && removed(id)) {
-        report2.deepLinkPatterns.push(String(p.pattern ?? id));
+        report3.deepLinkPatterns.push(String(p.pattern ?? id));
         return false;
       }
       return true;
@@ -50020,7 +50037,7 @@ function rewriteNav(nav, removed, homeId) {
     if (!Array.isArray(actions)) continue;
     next[key2].header.actions = actions.filter((a) => {
       if (!(typeof a?.screenId === "string" && removed(a.screenId))) return true;
-      report2.headerActions.push(`${key2}:${String(a.icon ?? a.screenId)}`);
+      report3.headerActions.push(`${key2}:${String(a.icon ?? a.screenId)}`);
       return false;
     });
   }
@@ -50029,7 +50046,7 @@ function rewriteNav(nav, removed, homeId) {
     next.topBarDefault.actions = topActions.filter((a) => {
       const to = openTarget(a?.onTap) ?? openTarget(a?.action);
       if (to && removed(to)) {
-        report2.topBarActions.push(entryLabel(a));
+        report3.topBarActions.push(entryLabel(a));
         return false;
       }
       return true;
@@ -50044,7 +50061,7 @@ function rewriteNav(nav, removed, homeId) {
         for (const [dest, screenId] of Object.entries(cfg.screenIds)) {
           if (goneDest(dest) || typeof screenId === "string" && removed(screenId)) {
             delete cfg.screenIds[dest];
-            report2.surfaceDestinations.push(`${surface}:${dest}`);
+            report3.surfaceDestinations.push(`${surface}:${dest}`);
             if (!remainingRootIds.has(dest)) unmapped.add(dest);
           }
         }
@@ -50054,24 +50071,24 @@ function rewriteNav(nav, removed, homeId) {
           const gone = goneDest(id) || typeof id === "string" && unmapped.has(id);
           if (!gone) return true;
           const entry = `${surface}:${String(id)}`;
-          if (!report2.surfaceDestinations.includes(entry)) report2.surfaceDestinations.push(entry);
+          if (!report3.surfaceDestinations.includes(entry)) report3.surfaceDestinations.push(entry);
           return false;
         });
       }
     }
   }
   if (Array.isArray(next.appIconBadgeSources)) {
-    const goneActions = new Set(report2.topBarActions);
+    const goneActions = new Set(report3.topBarActions);
     const idsOf = (items) => new Set((items ?? []).map((i) => i.id).filter((x) => typeof x === "string"));
-    const removedTabs = new Set(report2.tabs);
-    const removedDrawer = new Set(report2.drawer);
+    const removedTabs = new Set(report3.tabs);
+    const removedDrawer = new Set(report3.drawer);
     const remainingTabIds = idsOf(asItems(next.tabBar));
     const remainingDrawerIds = idsOf(asItems(next.drawer));
     next.appIconBadgeSources = next.appIconBadgeSources.filter((s) => {
       if (typeof s !== "string") return true;
       const [kind, id] = [s.slice(0, s.indexOf(":")), s.slice(s.indexOf(":") + 1)];
       const gone = kind === "topBarAction" ? goneActions.has(id) : kind === "tab" ? removedTabs.has(id) && !remainingTabIds.has(id) : kind === "drawer" ? removedDrawer.has(id) && !remainingDrawerIds.has(id) : false;
-      if (gone) report2.appIconBadgeSources.push(s);
+      if (gone) report3.appIconBadgeSources.push(s);
       return !gone;
     });
   }
@@ -50081,7 +50098,7 @@ function rewriteNav(nav, removed, homeId) {
     for (const l of original) if (typeof l.screenId === "string") byId.set(l.screenId, l);
     const kept = original.filter((l) => {
       if (typeof l.screenId === "string" && removed(l.screenId)) {
-        report2.linkable.push(l.screenId);
+        report3.linkable.push(l.screenId);
         return false;
       }
       return true;
@@ -50125,7 +50142,7 @@ function rewriteNav(nav, removed, homeId) {
       const entry = { screenId: String(l.screenId) };
       if (toParent !== fromParent) entry.parentScreenId = { from: fromParent, to: toParent };
       if (toTab !== fromTab) entry.tabId = { from: fromTab, to: toTab };
-      report2.reparented.push(entry);
+      report3.reparented.push(entry);
     }
     for (const l of kept) {
       if (typeof l.parentScreenId === "string") l.parentScreenId = newParent(l);
@@ -50133,7 +50150,7 @@ function rewriteNav(nav, removed, homeId) {
     }
     next.linkableScreens = kept;
   }
-  return { nav: next, report: report2 };
+  return { nav: next, report: report3 };
 }
 function leftoverNavRefs(nav, removedIds) {
   const gone = new Set(removedIds);
@@ -50292,9 +50309,9 @@ function planTrim(src, keepIds, links) {
   for (const r of keptRoutes) for (const b of r.bundles) keptWorkers.add(b);
   const importsOf = (dir) => {
     const out2 = [];
-    for (const [rel, text6] of Object.entries(src.workerFiles)) {
+    for (const [rel, text8] of Object.entries(src.workerFiles)) {
       if (!rel.startsWith(`tier5-src/${dir}/`)) continue;
-      for (const m of text6.matchAll(/(?:\bfrom\s*|\bimport\s*\(?\s*|\brequire\s*\(\s*)["']\.\.\/([A-Za-z0-9_.-]+)(?:\/|["'])/g)) out2.push(m[1]);
+      for (const m of text8.matchAll(/(?:\bfrom\s*|\bimport\s*\(?\s*|\brequire\s*\(\s*)["']\.\.\/([A-Za-z0-9_.-]+)(?:\/|["'])/g)) out2.push(m[1]);
     }
     return out2;
   };
@@ -50340,9 +50357,9 @@ function planTrim(src, keepIds, links) {
       continue;
     }
     const block = edited.get(r);
-    let text6 = block ? serializeAt(block, app.dev, r.open) : void 0;
-    if (r === app.home && homeModules?.text !== void 0) text6 = homeModules.text;
-    if (text6 !== void 0) cut2(r.open, r.close, text6);
+    let text8 = block ? serializeAt(block, app.dev, r.open) : void 0;
+    if (r === app.home && homeModules?.text !== void 0) text8 = homeModules.text;
+    if (text8 !== void 0) cut2(r.open, r.close, text8);
   }
   if (templatedEmptied) cut2(templatedEmptied[0], templatedEmptied[1], "\n");
   dev += app.dev.slice(cursor);
@@ -50358,7 +50375,7 @@ function planTrim(src, keepIds, links) {
   for (const e of edits.sort((a, b) => b.start - a.start)) config = config.slice(0, e.start) + e.text + config.slice(e.end);
   const keptExact = keptRoutes.filter((r) => r.kind === "screen");
   const keptTemplated = keptRoutes.filter((r) => r.kind === "templated");
-  const report2 = {
+  const report3 = {
     ...links ? { links } : {},
     kept: { screens: sorted(keptExact.map((r) => r.label)), templated: sorted(keptTemplated.map((r) => r.label)) },
     implicit: implicit.map((r) => r.label),
@@ -50388,16 +50405,16 @@ function planTrim(src, keepIds, links) {
     },
     bytes: { before: Buffer.byteLength(app.dev), after: Buffer.byteLength(dev) }
   };
-  return { dev, config, removedWorkers, removedIds, report: report2 };
+  return { dev, config, removedWorkers, removedIds, report: report3 };
 }
 function homeModulesPass(app, kept, edited) {
   const verticals = Object.entries(EXPLORE_CARDS).filter(([, card2]) => app.exact.has(card2.screenId));
   const removedVertical = verticals.some(([, card2]) => !kept.has(app.exact.get(card2.screenId)));
   if (!removedVertical) return { dropped: [] };
   const block = edited.get(app.home);
-  const text6 = block ? serializeAt(block, app.dev, app.home.open) : app.dev.slice(app.home.open, app.home.close);
+  const text8 = block ? serializeAt(block, app.dev, app.home.open) : app.dev.slice(app.home.open, app.home.close);
   const installed = verticals.filter(([, card2]) => kept.has(app.exact.get(card2.screenId))).map(([v]) => v);
-  const patched = patchHomeModules(text6, installed);
+  const patched = patchHomeModules(text8, installed);
   if (!patched.droppedModules.length) return { dropped: [] };
   return { text: patched.src, dropped: patched.droppedModules };
 }
@@ -51111,8 +51128,8 @@ function isNoneEntry(entry) {
   const head = entryHead(entry);
   return NONE.test(entry) || head !== "" && NONE.test(head);
 }
-function parseDataAccess(text6, from) {
-  const body = text6.replace(/<!--[\s\S]*?(?:-->|$)/g, "");
+function parseDataAccess(text8, from) {
+  const body = text8.replace(/<!--[\s\S]*?(?:-->|$)/g, "");
   const heading = new RegExp(`(?:^|\\n)##[ \\t]+${DATA_ACCESS_HEADING}\\b[^\\n]*([\\s\\S]*?)(?=\\n##[ \\t]|$)`, "i").exec(body);
   if (!heading) return null;
   const lines = heading[1].split("\n").map((l) => l.trim()).filter((l) => l.startsWith("|"));
@@ -51139,13 +51156,13 @@ function readDataAccess(dir) {
   for (const name of ["SPEC.md", "MOBILE-UX.md"]) {
     const p = join49(dir, name);
     if (!existsSync50(p)) continue;
-    let text6;
+    let text8;
     try {
-      text6 = readFileSync55(p, "utf8");
+      text8 = readFileSync55(p, "utf8");
     } catch {
       continue;
     }
-    const plan = parseDataAccess(text6, name);
+    const plan = parseDataAccess(text8, name);
     if (plan) return plan;
   }
   return null;
@@ -51298,7 +51315,7 @@ function readTestConfig(dir) {
       if (input !== void 0 && (!input || typeof input !== "object" || Array.isArray(input) || Object.values(input).some((v) => typeof v !== "string"))) {
         throw new Error(`${TEST_CONFIG_FILE}: journeys[${i}].input must be an object of string values \u2014 the screen input a nav edge would send, e.g. { "id": "svc-0001" }`);
       }
-      if (!Array.isArray(journey.expectText) || !journey.expectText.length || journey.expectText.some((text6) => typeof text6 !== "string" || !text6.trim())) {
+      if (!Array.isArray(journey.expectText) || !journey.expectText.length || journey.expectText.some((text8) => typeof text8 !== "string" || !text8.trim())) {
         throw new Error(`${TEST_CONFIG_FILE}: journeys[${i}] needs non-empty expectText values that prove a visible result`);
       }
     });
@@ -51359,16 +51376,16 @@ function readCannedResponses() {
 }
 function makeRecordingWixCall(send2, token, app) {
   const events = [];
-  const refused = [];
+  const refused2 = [];
   let id = 0;
   const call = async (method, path2, body) => {
     const verb = method.toUpperCase();
     if (/[#\x00-\x1F\x7F]/.test(path2)) {
-      refused.push(`${verb} ${path2}`);
+      refused2.push(`${verb} ${path2}`);
       throw new Error(`--record refused ${verb} ${path2}: the path carries a fragment or control character \u2014 not a provable read`);
     }
     if (!isProvenRead(verb, path2)) {
-      refused.push(`${verb} ${path2}`);
+      refused2.push(`${verb} ${path2}`);
       throw new Error(`--record refused ${verb} ${path2}: recording sends only proven reads (GET, or POST ending in /query, /search, /list*, /get*, /count, /aggregate, /facets, /connections) \u2014 if this IS a read, add its rule to dev/net-mocks.json by hand`);
     }
     const bodyStr = body === void 0 ? void 0 : typeof body === "string" ? body : JSON.stringify(body);
@@ -51395,7 +51412,7 @@ function makeRecordingWixCall(send2, token, app) {
       return r.body;
     }
   };
-  return { call, events, refused };
+  return { call, events, refused: refused2 };
 }
 async function runRecordPass(opts) {
   const bootErrors = [];
@@ -51799,9 +51816,9 @@ function formatReport(r) {
   out2.push(`transport: ${r.transport}`);
   if (r.nativeDecode) {
     for (const platform of ["ios", "android"]) {
-      const summary = r.nativeDecode[platform];
-      if (!summary) continue;
-      out2.push("unavailable" in summary ? `native decode ${platform}: unavailable \u2014 ${summary.reason}` : `native decode ${platform}: ${summary.checked} checked, ${summary.failed} failed in ${r.nativeDecode.wallMs}ms`);
+      const summary2 = r.nativeDecode[platform];
+      if (!summary2) continue;
+      out2.push("unavailable" in summary2 ? `native decode ${platform}: unavailable \u2014 ${summary2.reason}` : `native decode ${platform}: ${summary2.checked} checked, ${summary2.failed} failed in ${r.nativeDecode.wallMs}ms`);
     }
   }
   out2.push("");
@@ -51944,14 +51961,14 @@ import { join as join51 } from "node:path";
 function mobileUxIssues(dir, strict) {
   const file = join51(dir, "MOBILE-UX.md");
   if (!existsSync52(file)) return [];
-  let text6;
+  let text8;
   try {
-    text6 = readFileSync57(file, "utf8");
+    text8 = readFileSync57(file, "utf8");
   } catch {
     return [];
   }
-  if (!text6) return [];
-  return mobileUxMarkerFindings(text6, recordedRenderWidths(dir)).map((finding) => {
+  if (!text8) return [];
+  return mobileUxMarkerFindings(text8, recordedRenderWidths(dir)).map((finding) => {
     const scaffoldAdvisory = finding.code === "missing-width-evidence";
     return {
       screen: null,
@@ -52246,7 +52263,7 @@ async function pinnedFetch(url, init, addresses, maxResponseBytes) {
   const headers2 = Object.fromEntries(new Headers(init.headers).entries());
   const request = url.protocol === "https:" ? httpsRequest : httpRequest;
   const hostname2 = url.hostname.replace(/^\[|\]$/g, "");
-  return await new Promise((resolve52, reject) => {
+  return await new Promise((resolve53, reject) => {
     let settled = false;
     const finish2 = (fn) => {
       if (settled) return;
@@ -52283,7 +52300,7 @@ async function pinnedFetch(url, init, addresses, maxResponseBytes) {
         }
         const responseHeaders = new Headers();
         for (const [key2, value] of Object.entries(response.headers)) if (value !== void 0) responseHeaders.set(key2, Array.isArray(value) ? value.join(", ") : value);
-        resolve52(new Response(bytes2, { status: response.statusCode, statusText: response.statusMessage, headers: responseHeaders }));
+        resolve53(new Response(bytes2, { status: response.statusCode, statusText: response.statusMessage, headers: responseHeaders }));
       }));
     });
     req.once("error", (error) => finish2(() => reject(error)));
@@ -52583,7 +52600,7 @@ function createLocalTestSandbox() {
           }
         })();
       `;
-      return await new Promise((resolve52, reject) => {
+      return await new Promise((resolve53, reject) => {
         const { port1, port2 } = new MessageChannel();
         const serializableContext = {
           auth: context.auth,
@@ -52659,7 +52676,7 @@ function createLocalTestSandbox() {
             timer = setTimeout(() => finish2(() => reject(new SandboxError("timeout", `execution exceeded ${limits.timeoutMs}ms`))), Math.max(1, limits.timeoutMs));
             return;
           }
-          if (message.ok) finish2(() => resolve52({ value: message.value, durationMs: Date.now() - started }));
+          if (message.ok) finish2(() => resolve53({ value: message.value, durationMs: Date.now() - started }));
           else finish2(() => reject(new SandboxError("execution_failed", message.message ?? "handler failed")));
         });
         worker.once("error", (error) => finish2(() => reject(new SandboxError("execution_failed", error.message))));
@@ -53775,12 +53792,12 @@ async function runRemoteFunctionOperation(input) {
   if (input.boCookie) headers2.cookie = input.boCookie;
   if (input.previewToken) headers2["x-himalaya-preview-token"] = input.previewToken;
   const response = await (input.fetchImpl ?? fetch)(url, { method, headers: headers2 });
-  const text6 = await response.text();
+  const text8 = await response.text();
   let body;
   try {
-    body = JSON.parse(text6);
+    body = JSON.parse(text8);
   } catch {
-    body = text6;
+    body = text8;
   }
   return { ok: response.ok, status: response.status, body };
 }
@@ -53868,7 +53885,7 @@ function flagShapedInputs(args) {
 function guarded(h) {
   return async (args, deps) => {
     const bad2 = flagShapedInputs(args);
-    if (bad2.length) return text5(`refused: ${bad2.join(", ")} may not start with "-" (it would be read as a himi flag)`, true);
+    if (bad2.length) return text6(`refused: ${bad2.join(", ")} may not start with "-" (it would be read as a himi flag)`, true);
     return h(args, deps);
   };
 }
@@ -54021,7 +54038,7 @@ function rawTools() {
           return json3({ ...await d.preview.start(await appDir2(a, d)), hint: PREVIEW_HINT });
         } catch (e) {
           const log = e.log;
-          return text5(`${e.message}${typeof log === "string" && log ? `
+          return text6(`${e.message}${typeof log === "string" && log ? `
 
 ${log}` : ""}`, true);
         }
@@ -54086,7 +54103,9 @@ ${log}` : ""}`, true);
       name: "himi_preview_links",
       title: "Preview links for a release",
       description: "The shareable web preview URL, the Himi Player deep link and the agent preview JSON URLs for an app + release (for example the draft `himi_push` just published).",
-      annotations: { ...PUBLISH, readOnlyHint: true, idempotentHint: true },
+      // Not idempotent: with credentials, each `himi preview` mints a fresh single-use handover —
+      // the same reason the hosted connector's tool of this name says false (RFC 0064 §5).
+      annotations: { ...PUBLISH, readOnlyHint: true, idempotentHint: false },
       inputSchema: z.object({
         app: z.string().min(1),
         release: z.string().min(1),
@@ -54097,14 +54116,14 @@ ${log}` : ""}`, true);
     }
   ];
 }
-var MAX_TEXT2, clip, text5, json3, opt, sw, DIR, LEARN, CHECK, LOCAL_WRITE, PUBLISH, PREVIEW_HINT, LOGIN_HINT;
+var MAX_TEXT2, clip, text6, json3, opt, sw, DIR, LEARN, CHECK, LOCAL_WRITE, PUBLISH, PREVIEW_HINT, LOGIN_HINT;
 var init_tools = __esm({
   "src/mcp/tools.ts"() {
     MAX_TEXT2 = 8e4;
     clip = (s) => s.length <= MAX_TEXT2 ? s : `${s.slice(0, MAX_TEXT2)}
 \u2026 [truncated ${s.length - MAX_TEXT2} chars \u2014 re-run the command in a terminal for the full output]`;
-    text5 = (t, isError = false) => ({ content: [{ type: "text", text: t }], ...isError ? { isError: true } : {} });
-    json3 = (o) => text5(JSON.stringify(o, null, 2));
+    text6 = (t, isError = false) => ({ content: [{ type: "text", text: t }], ...isError ? { isError: true } : {} });
+    json3 = (o) => text6(JSON.stringify(o, null, 2));
     opt = (flag, v) => typeof v === "string" && v ? [flag, v] : typeof v === "number" ? [flag, String(v)] : [];
     sw = (flag, v) => v === true ? [flag] : [];
     DIR = z.string().optional().describe("The app (content package) directory. Default: the workspace root the host opened, else the server's working directory.");
@@ -54180,9 +54199,9 @@ async function startMcpServer(opts) {
     },
     readFile: (p) => readFileSync59(p)
   };
-  const closed = new Promise((resolve52) => {
-    stdin.once("end", resolve52);
-    stdin.once("close", resolve52);
+  const closed = new Promise((resolve53) => {
+    stdin.once("end", resolve53);
+    stdin.once("close", resolve53);
   });
   const handle = serveStdio(
     () => {
@@ -54424,7 +54443,7 @@ function fieldAt(path2) {
   if (path2 === null) return void 0;
   return path2.match(/\.([^.[\]]+)$/)?.[1];
 }
-function mergeNativeDecode(report2, run2) {
+function mergeNativeDecode(report3, run2) {
   const platformLabel = run2.platform === "ios" ? "iOS" : "Android";
   const nativeFailures = run2.verdicts.flatMap((verdict) => verdict.errors.map((error) => ({
     screen: verdict.screenId,
@@ -54437,18 +54456,18 @@ function mergeNativeDecode(report2, run2) {
     ...error.actual ? { actual: error.actual } : {},
     hint: `This descriptor ships as a full-screen \u201CCouldn't load\u201D; fix the typed field and rerun \`himi test --native ${run2.platform}\`.`
   })));
-  const failures = [...report2.failures, ...nativeFailures];
+  const failures = [...report3.failures, ...nativeFailures];
   const failedScreens = new Set(failures.map((finding) => finding.screen));
   return {
-    ...report2,
-    ok: report2.ok && nativeFailures.length === 0,
+    ...report3,
+    ok: report3.ok && nativeFailures.length === 0,
     failures,
-    counts: { ...report2.counts, errors: failures.length },
-    screens: { ...report2.screens, clean: report2.screens.total - failedScreens.size, failed: failedScreens.size },
+    counts: { ...report3.counts, errors: failures.length },
+    screens: { ...report3.screens, clean: report3.screens.total - failedScreens.size, failed: failedScreens.size },
     nativeDecode: {
-      ...report2.nativeDecode,
+      ...report3.nativeDecode,
       [run2.platform]: { checked: run2.verdicts.length, failed: run2.verdicts.filter((verdict) => !verdict.ok).length },
-      wallMs: (report2.nativeDecode?.wallMs ?? 0) + run2.wallMs
+      wallMs: (report3.nativeDecode?.wallMs ?? 0) + run2.wallMs
     }
   };
 }
@@ -54561,10 +54580,10 @@ function collectSdkModules(files, resolveSubpath) {
   for (const source of Object.values(files)) visit(source);
   return { modules, unsupported };
 }
-function sdkSubpathReader(resolve52) {
+function sdkSubpathReader(resolve53) {
   return (sub) => {
     try {
-      return readFileSync61(resolve52(`@wix/himalaya/${sub}`), "utf8");
+      return readFileSync61(resolve53(`@wix/himalaya/${sub}`), "utf8");
     } catch {
       return null;
     }
@@ -54642,7 +54661,7 @@ async function runBrowserAuthoring(opts) {
   const token = mintToken2(payload);
   const unusable = await probeAuthoringPage(opts.authoringBase, opts.fetchImpl, opts.probeTimeoutMs);
   if (unusable) throw new Error(unusable);
-  return await new Promise((resolve52, reject) => {
+  return await new Promise((resolve53, reject) => {
     let settled = false;
     let url = "";
     const server = createServer5();
@@ -54693,8 +54712,8 @@ async function runBrowserAuthoring(opts) {
           return;
         }
         res.writeHead(200, { "content-type": "text/plain" }).end("ok");
-        const report2 = body.result;
-        finish2(() => resolve52({ report: report2, url }));
+        const report3 = body.result;
+        finish2(() => resolve53({ report: report3, url }));
       })();
     });
     server.on("error", (e) => finish2(() => reject(e)));
@@ -55371,10 +55390,10 @@ async function hostedAuthUrl(req, visitorToken, fetchImpl = fetch) {
       }
     })
   });
-  const text6 = await res.text();
+  const text8 = await res.text();
   let parsed = {};
   try {
-    parsed = text6 ? JSON.parse(text6) : {};
+    parsed = text8 ? JSON.parse(text8) : {};
   } catch {
   }
   const fullUrl = parsed.redirectSession?.fullUrl;
@@ -55394,10 +55413,10 @@ async function exchangeAuthCode(cfg, code, verifier, fetchImpl = fetch) {
       redirectUri: cfg.redirectUri
     })
   });
-  const text6 = await res.text();
+  const text8 = await res.text();
   let parsed = {};
   try {
-    parsed = text6 ? JSON.parse(text6) : {};
+    parsed = text8 ? JSON.parse(text8) : {};
   } catch {
   }
   if (res.status !== 200 || !parsed.access_token) throw new Error(`token exchange failed (${res.status})`);
@@ -56611,11 +56630,11 @@ async function localizeConfigResponse(res, kind, header) {
       header
     )
   };
-  const text6 = JSON.stringify(next);
+  const text8 = JSON.stringify(next);
   const headers2 = new Headers(res.headers);
   headers2.delete("etag");
-  headers2.set("content-length", String(new TextEncoder().encode(text6).length));
-  return new Response(text6, { status: 200, headers: headers2 });
+  headers2.set("content-length", String(new TextEncoder().encode(text8).length));
+  return new Response(text8, { status: 200, headers: headers2 });
 }
 function makeRunHandler(opts) {
   const mount = opts.chrome === "app" ? "/app" : "/preview";
@@ -56803,8 +56822,8 @@ var init_node_adapter = __esm({
 function authConfigOf(appConfig) {
   if (!appConfig) return void 0;
   try {
-    const text6 = typeof appConfig === "string" ? appConfig : new TextDecoder().decode(appConfig);
-    return JSON.parse(text6)?.authConfig ?? void 0;
+    const text8 = typeof appConfig === "string" ? appConfig : new TextDecoder().decode(appConfig);
+    return JSON.parse(text8)?.authConfig ?? void 0;
   } catch {
     return void 0;
   }
@@ -57414,16 +57433,16 @@ async function releasePayloadFromDir(root, app, header) {
   const manifest = await store.getManifest(app);
   if (!manifest) throw new Error(`no release manifest for ${app} under ${root}`);
   const b64 = (b) => b ? Buffer.from(b).toString("base64") : void 0;
-  const text6 = (b) => b ? new TextDecoder().decode(b) : void 0;
+  const text8 = (b) => b ? new TextDecoder().decode(b) : void 0;
   const screens = {};
   const docs = {};
   const addDoc = async (hash) => {
     if (!hash || docs[hash] !== void 0) return;
-    const d = text6(await store.getDoc?.(app, hash) ?? null);
+    const d = text8(await store.getDoc?.(app, hash) ?? null);
     if (d !== void 0) docs[hash] = d;
   };
   for (const [id, meta] of Object.entries(manifest.screens ?? {})) {
-    const s = text6(await store.getScreen(app, id));
+    const s = text8(await store.getScreen(app, id));
     if (s !== void 0) screens[id] = s;
     await addDoc(meta.descriptorHash);
   }
@@ -57444,10 +57463,10 @@ async function releasePayloadFromDir(root, app, header) {
   }
   const widgets = {};
   for (const id of Object.keys(manifest.widgets ?? {})) {
-    const w = text6(await store.getWidget?.(app, id) ?? null);
+    const w = text8(await store.getWidget?.(app, id) ?? null);
     if (w !== void 0) widgets[id] = w;
   }
-  const appConfig = text6(await store.getAppConfig(app));
+  const appConfig = text8(await store.getAppConfig(app));
   const wixClientId = appConfigWixClientId(appConfig);
   return {
     app,
@@ -57457,7 +57476,7 @@ async function releasePayloadFromDir(root, app, header) {
     docs,
     assets,
     widgets,
-    tokens: text6(await store.getTokens(app)),
+    tokens: text8(await store.getTokens(app)),
     appConfig,
     icon: b64(await store.getIcon?.(app) ?? null),
     header,
@@ -57987,10 +58006,10 @@ function scalar3(v) {
   }
   return t;
 }
-function parseStoreConfig(text6) {
+function parseStoreConfig(text8) {
   const cfg = {};
   let section2 = null;
-  for (const raw of text6.split("\n")) {
+  for (const raw of text8.split("\n")) {
     const line = strip2(raw);
     if (!line.trim()) continue;
     const indented = /^\s+/.test(raw);
@@ -58049,10 +58068,10 @@ function profilePath(name, home = homedir5()) {
   }
   return join59(credentialsDir(home), `${name}.json`);
 }
-function parseProfile(text6, label2) {
+function parseProfile(text8, label2) {
   let doc;
   try {
-    doc = JSON.parse(text6);
+    doc = JSON.parse(text8);
   } catch (e) {
     throw new Error(`${label2} is not valid JSON: ${e.message}`);
   }
@@ -58661,11 +58680,11 @@ async function registerBundleId(opts) {
     const j = await res.json();
     return { status: "created", id: j.data?.id };
   }
-  const text6 = await res.text();
-  if (res.status === 409 || /already (exists|in use)|duplicate|ENTITY_ERROR.*identifier/i.test(text6)) {
+  const text8 = await res.text();
+  if (res.status === 409 || /already (exists|in use)|duplicate|ENTITY_ERROR.*identifier/i.test(text8)) {
     return { status: "exists" };
   }
-  throw new Error(`POST /v1/bundleIds \u2192 ${res.status}: ${text6.slice(0, 300)}`);
+  throw new Error(`POST /v1/bundleIds \u2192 ${res.status}: ${text8.slice(0, 300)}`);
 }
 async function main2() {
   const [app, ...rest] = process.argv.slice(2);
@@ -58943,12 +58962,12 @@ async function runRemoteSecretsCommand(operation, flags, io, options) {
       body = JSON.stringify({ value });
     }
     const response = await (options.fetchImpl ?? fetch)(url, { method: operation === "list" ? "GET" : operation === "set" ? "PUT" : "POST", headers: headers2, body });
-    const text6 = await response.text();
+    const text8 = await response.text();
     let output;
     try {
-      output = JSON.parse(text6);
+      output = JSON.parse(text8);
     } catch {
-      output = text6;
+      output = text8;
     }
     if (!response.ok) throw new Error(typeof output === "string" ? output : JSON.stringify(output));
     io.log(JSON.stringify(output));
@@ -58964,6 +58983,217 @@ var init_secrets2 = __esm({
   }
 });
 
+// ../serve-cli/src/push-send.ts
+async function pushSendRequest(options) {
+  const refusal = localRefusal(options);
+  if (refusal) return { ok: false, status: 0, body: null, error: refusal };
+  try {
+    const response = await (options.fetchImpl ?? fetch)(`${options.target.control.replace(/\/+$/, "")}/v1/admin/push/send`, {
+      method: "POST",
+      headers: headersFor(options),
+      redirect: "error",
+      signal: AbortSignal.timeout(TIMEOUT_MS),
+      body: JSON.stringify(options.body)
+    });
+    const retryAfterSec = response.status === 429 ? Number(response.headers.get("retry-after")) : NaN;
+    return {
+      ok: response.ok,
+      status: response.status,
+      body: objectFrom(await response.text()),
+      ...Number.isFinite(retryAfterSec) && retryAfterSec > 0 ? { retryAfterSec } : {}
+    };
+  } catch {
+    return { ok: false, status: 0, body: null, error: "push_send_unreachable" };
+  }
+}
+function localRefusal(options) {
+  if (!options.target.controlToken) return "control_token_required";
+  if (!options.wixToken) return "wix_account_token_required";
+  if (!options.siteToken) return "site_token_required";
+  if (credentialHostRefusal(options.target.control)) return "insecure_target";
+  if (options.previewTag !== void 0 && !PREVIEW_TAG2.test(options.previewTag)) return "invalid_preview_tag";
+  return void 0;
+}
+function headersFor(options) {
+  return {
+    "x-control-token": options.target.controlToken,
+    // RAW, never `Bearer ` — what normalizeWixAuthorization and token-info expect.
+    Authorization: options.wixToken,
+    [SITE_TOKEN_HEADER]: options.siteToken,
+    accept: "application/json",
+    "content-type": "application/json",
+    ...options.previewTag ? { "x-wix-route-serve": options.previewTag } : {}
+  };
+}
+function objectFrom(text8) {
+  try {
+    const value = text8 ? JSON.parse(text8) : null;
+    return value && typeof value === "object" && !Array.isArray(value) ? value : null;
+  } catch {
+    return null;
+  }
+}
+var SITE_TOKEN_HEADER, PREVIEW_TAG2, TIMEOUT_MS;
+var init_push_send = __esm({
+  "../serve-cli/src/push-send.ts"() {
+    init_credential_hosts();
+    SITE_TOKEN_HEADER = "x-himi-site-token";
+    PREVIEW_TAG2 = /^dp-[a-z0-9]+$/;
+    TIMEOUT_MS = 6e4;
+  }
+});
+
+// ../../core/serve-control/src/push-send-service.ts
+var PUSH_SEND_ERROR_CODES;
+var init_push_send_service = __esm({
+  "../../core/serve-control/src/push-send-service.ts"() {
+    PUSH_SEND_ERROR_CODES = [
+      "unauthorized",
+      "token_revoked",
+      "revocation_check_unavailable",
+      "method_not_allowed",
+      "rate_limited",
+      "forbidden_cross_tenant",
+      "forbidden_site",
+      "site_check_unavailable",
+      "push_send_unconfigured",
+      "push_send_unavailable",
+      "invalid_input",
+      "payload_too_large",
+      "unknown_field",
+      "invalid_app_id",
+      "invalid_site_id",
+      "invalid_member_email",
+      "invalid_title",
+      "invalid_body",
+      "invalid_link",
+      "invalid_request_id",
+      "invalid_dry_run",
+      "link_not_routable",
+      "app_config_unavailable",
+      "push_not_ready",
+      "site_token_required",
+      "site_token_invalid",
+      "site_token_unverifiable",
+      "member_not_found",
+      "member_ambiguous",
+      "member_not_active",
+      "member_read_forbidden",
+      "member_lookup_unavailable",
+      "ping_unconfigured",
+      "ping_permission_denied",
+      "ping_rejected",
+      "ping_rate_limited",
+      "send_outcome_unknown"
+    ];
+  }
+});
+
+// src/notify-ping.ts
+var notify_ping_exports = {};
+__export(notify_ping_exports, {
+  runNotifyPing: () => runNotifyPing
+});
+import { randomUUID as randomUUID5 } from "node:crypto";
+import { resolve as resolve49 } from "node:path";
+function refuse4(io, error, hint, exit = 2, extra = {}) {
+  io.error(JSON.stringify({ ok: false, error, ...hint ? { hint } : {}, ...extra }));
+  return exit;
+}
+async function runNotifyPing(flags, io, deps = {}) {
+  const flagError = flagRefusal(flags);
+  if (flagError) return refuse4(io, flagError);
+  const input = mergePushInputs(pushInputsFromContent(resolve49(text7(flags.content) ?? process.cwd())), flags);
+  const missing = [...input.app ? [] : ["app"], ...input.site ? [] : ["site"], ...REQUIRED_FLAGS.filter((f) => !text7(flags[f]))];
+  if (missing.length) return refuse4(io, "needs_input", "Name the app and site (or --content), the member's login email, a title and a link.", 2, { missing });
+  const requestId2 = text7(flags["request-id"]) ?? (deps.newRequestId ?? randomUUID5)();
+  if (!UUID_RE.test(requestId2)) return refuse4(io, "invalid_request_id", "Reuse the requestId a previous send printed.");
+  const owner = await hostedOwnerSession(flags, deps);
+  if (!owner.ok) return refuse4(io, owner.error, owner.hint, owner.exit);
+  const { session } = owner;
+  const ownership = await verifyAppOwnership({ ownerIssue: session.ownerIssue, controlToken: session.controlToken, declaredName: input.app, fetchImpl: deps.fetchImpl });
+  if (ownership.state !== "owned") return refuse4(io, `app_ownership_${ownership.state}`, "Sending requires the app owner.", 1);
+  let siteToken2;
+  try {
+    siteToken2 = await (deps.siteToken ?? siteToken)(input.site);
+  } catch {
+    return refuse4(io, "wix_site_token_required", "Run wix login as the site owner; the site token reads this site's members.", 1);
+  }
+  const body = {
+    app: ownership.slug,
+    site: input.site,
+    memberEmail: text7(flags["member-email"]),
+    title: text7(flags.title),
+    ...text7(flags.body) ? { body: text7(flags.body) } : {},
+    link: text7(flags.link),
+    requestId: requestId2,
+    ...flags["dry-run"] === true ? { dryRun: true } : {}
+  };
+  const http = await pushSendRequest({ target: session.target, wixToken: session.wixToken, siteToken: siteToken2, body, previewTag: session.previewTag, fetchImpl: deps.fetchImpl });
+  return report2(http, body, flags, io);
+}
+function flagRefusal(flags) {
+  if (LOCAL_SENDER_FLAGS.some((f) => flags[f] !== void 0)) return "flag_not_supported_with_ping";
+  if (SWITCHES.some((f) => flags[f] !== void 0 && typeof flags[f] !== "boolean")) return "invalid_boolean_flag";
+  return void 0;
+}
+function report2(http, sent, flags, io) {
+  const code = refusalCode(http);
+  if (code === "send_outcome_unknown") {
+    return refuse4(io, code, `Ping may have accepted it. Re-run the same command with --request-id ${sent.requestId}: Ping runs one request at most once per site for 24 hours.`, 1, { requestId: sent.requestId });
+  }
+  if (code === "rate_limited" && http.retryAfterSec) {
+    return refuse4(io, code, `Test sends are limited per owner; retry in ${http.retryAfterSec} seconds.`, 1, { retryAfterSec: http.retryAfterSec });
+  }
+  if (code) return refuse4(io, code, HINTS[code], 1);
+  if (flags.json === true) io.log(JSON.stringify(http.body, null, 2));
+  else io.log(summary(http.body ?? {}, sent));
+  return 0;
+}
+function refusalCode(http) {
+  if (http.error) return http.error === "push_send_unreachable" ? "send_outcome_unknown" : http.error;
+  if (http.ok && (http.body?.state === "accepted" || http.body?.state === "dry_run")) return void 0;
+  const code = String(http.body?.error ?? "");
+  if (KNOWN_CODES.has(code)) return code;
+  return http.ok || http.status >= 500 ? "send_outcome_unknown" : "push_send_failed";
+}
+function summary(result, sent) {
+  if (result.state === "dry_run") {
+    return `Dry run passed: ${sent.memberEmail} is an approved member, the link routes, and push is ready for ${sent.app}. No notification was sent.`;
+  }
+  if (result.deduplicated === true) {
+    return `Ping already ran request ${sent.requestId}; the earlier send stands and no second notification was sent.`;
+  }
+  return `Ping accepted request ${sent.requestId} for ${sent.memberEmail}. Ping does not confirm delivery: it reaches the member's signed-in devices with notifications allowed.`;
+}
+var LOCAL_SENDER_FLAGS, SWITCHES, REQUIRED_FLAGS, UUID_RE, KNOWN_CODES, HINTS, text7;
+var init_notify_ping = __esm({
+  "src/notify-ping.ts"() {
+    init_push_send();
+    init_push_send_service();
+    init_hosted_owner();
+    init_owner_claim();
+    init_push_onboarding();
+    init_wix_owner();
+    LOCAL_SENDER_FLAGS = ["token", "device", "all", "admin-url", "admin-session", "silent", "badge", "data", "category", "channel", "platform", "bundle-id"];
+    SWITCHES = ["json", "dry-run"];
+    REQUIRED_FLAGS = ["member-email", "title", "link"];
+    UUID_RE = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;
+    KNOWN_CODES = new Set(PUSH_SEND_ERROR_CODES);
+    HINTS = {
+      push_not_ready: "Run himi notify setup for this app and site first; status must be ready.",
+      member_not_found: "Use the login email of an approved member of this site.",
+      member_ambiguous: "More than one member has this login email; resolve it in the site's Members.",
+      member_not_active: "The member must be approved before they can be notified.",
+      link_not_routable: "Link to a screen this app's published release ships, e.g. <scheme>://screen/<screenId>?id=\u2026.",
+      forbidden_site: "The Wix account from wix login must own this site.",
+      site_token_invalid: "Run wix login as the site owner; the site token must belong to the app owner's account.",
+      ping_permission_denied: "Himi Serve is not permitted to send through Ping; this is a platform issue, not your setup."
+    };
+    text7 = (v) => typeof v === "string" && v.length > 0 ? v : void 0;
+  }
+});
+
 // src/notify.ts
 var notify_exports = {};
 __export(notify_exports, {
@@ -59066,7 +59296,7 @@ async function runNotify(pos, flags, io, deps = {}) {
     } catch {
       reachable = false;
     }
-    const report2 = {
+    const report3 = {
       // BOTH platforms must be ready. Considering only iOS meant a server with an APNs
       // key but no Firebase credentials reported ok and exited 0, while every Android
       // send would fail — from the command whose whole job is to answer that question.
@@ -59079,15 +59309,15 @@ async function runNotify(pos, flags, io, deps = {}) {
       ...reachable && authed && !senders ? { hint: "this admin-server predates /v1/admin/push-doctor \u2014 upgrade it to see sender readiness" } : {}
     };
     if (json6) {
-      print(report2);
-      return report2.ok ? 0 : 1;
+      print(report3);
+      return report3.ok ? 0 : 1;
     }
     io.log(
       `admin       ${adminUrl} ${reachable ? authed ? "reachable, authenticated" : "reachable, NOT authenticated" : "UNREACHABLE"}`
     );
     if (!senders) {
       io.log("senders     unknown \u2014 credentials live on the admin-server, and it did not report them");
-      if (report2.hint) io.log(`            ${report2.hint}`);
+      if (report3.hint) io.log(`            ${report3.hint}`);
       return 1;
     }
     for (const [platform, r] of [
@@ -59097,7 +59327,7 @@ async function runNotify(pos, flags, io, deps = {}) {
       io.log(`${platform.padEnd(11)} ${r.sender}${r.note ? ` \u2014 ${r.note}` : ""}`);
       if (r.missing.length) io.log(`            missing on the server: ${r.missing.join(", ")}`);
     }
-    return report2.ok ? 0 : 1;
+    return report3.ok ? 0 : 1;
   }
   const app = str9(flags.app);
   if (!app) {
@@ -59276,10 +59506,10 @@ function makeTransport(fetchImpl, auth, timeoutMs = DEFAULT_TIMEOUT_MS4) {
       body: body === void 0 ? void 0 : JSON.stringify(body),
       signal: AbortSignal.timeout(timeoutMs)
     });
-    const text6 = await res.text();
-    let parsed = text6;
+    const text8 = await res.text();
+    let parsed = text8;
     try {
-      parsed = text6 ? JSON.parse(text6) : null;
+      parsed = text8 ? JSON.parse(text8) : null;
     } catch {
     }
     if (!res.ok) throw new WixApiError2(res.status, method, path2, parsed);
@@ -59376,10 +59606,10 @@ async function mintVisitorToken(fetchImpl, clientId) {
     body: JSON.stringify({ clientId, grantType: "anonymous" }),
     signal: AbortSignal.timeout(8e3)
   });
-  const text6 = await res.text();
-  let parsed = text6;
+  const text8 = await res.text();
+  let parsed = text8;
   try {
-    parsed = text6 ? JSON.parse(text6) : null;
+    parsed = text8 ? JSON.parse(text8) : null;
   } catch {
   }
   if (!res.ok) throw new WixApiError2(res.status, "POST", "/oauth2/token", parsed);
@@ -59394,28 +59624,28 @@ var init_visitor_auth = __esm({
 });
 
 // src/site-analyze/copy-clean.ts
-function isTemplatePlaceholder(text6) {
-  return PLACEHOLDER_RE.test(text6);
+function isTemplatePlaceholder(text8) {
+  return PLACEHOLDER_RE.test(text8);
 }
 function cleanText(raw, cap) {
   const s = String(raw ?? "").replace(/[\u0000-\u001F\u007F]/g, " ").replace(/\s+/g, " ").trim();
   return s.length > cap ? `${s.slice(0, cap - 1).trimEnd()}\u2026` : s;
 }
-function stripPii(text6) {
-  return text6.replace(EMAIL_RE2, "").replace(PHONE_SHAPE_RE, (m) => {
+function stripPii(text8) {
+  return text8.replace(EMAIL_RE2, "").replace(PHONE_SHAPE_RE, (m) => {
     const digits2 = (m.match(ANY_DIGIT_RE) ?? []).length;
     return digits2 >= PHONE_MIN_DIGITS && PHONE_DIGIT_RUN_RE.test(m) ? "" : m;
   }).replace(/\s+/g, " ").trim();
 }
-function isBoilerplate(text6) {
-  return BOILERPLATE_RE.test(text6) || PLACEHOLDER_RE.test(text6);
+function isBoilerplate(text8) {
+  return BOILERPLATE_RE.test(text8) || PLACEHOLDER_RE.test(text8);
 }
 function copyOrDrop(raw, cap) {
-  const text6 = stripPii(cleanText(raw, cap));
-  if (text6.length < 2) return "";
-  if (isBoilerplate(text6)) return "";
-  if (!/[A-Za-zͰ-῿぀-힯]/.test(text6)) return "";
-  return text6;
+  const text8 = stripPii(cleanText(raw, cap));
+  if (text8.length < 2) return "";
+  if (isBoilerplate(text8)) return "";
+  if (!/[A-Za-zͰ-῿぀-힯]/.test(text8)) return "";
+  return text8;
 }
 function dedupe2(values, cap) {
   const out2 = [];
@@ -59449,9 +59679,9 @@ var init_copy_clean = __esm({
 function genericDescription(it) {
   for (const field of DESCRIPTION_FIELDS) {
     const raw = it[field];
-    const text6 = typeof raw === "string" ? raw : str6(raw?.text);
-    if (!text6) continue;
-    const plain2 = text6.replace(/<[^>]*>/g, " ").replace(/&nbsp;/g, " ");
+    const text8 = typeof raw === "string" ? raw : str6(raw?.text);
+    if (!text8) continue;
+    const plain2 = text8.replace(/<[^>]*>/g, " ").replace(/&nbsp;/g, " ");
     if (plain2.trim()) return plain2;
   }
   return void 0;
@@ -59564,7 +59794,7 @@ function formLabels(x, depth = 0, out2 = []) {
   if (typeof x !== "object") return out2;
   const o = x;
   const label2 = str6(o.label ?? o.displayName ?? o.fieldTitle ?? o.title);
-  if (label2 && !UUID_RE.test(label2) && label2.length < 80 && !out2.includes(label2)) out2.push(label2);
+  if (label2 && !UUID_RE2.test(label2) && label2.length < 80 && !out2.includes(label2)) out2.push(label2);
   for (const k of ["fields", "formFields", "form", "schema", "properties"]) {
     if (o[k] != null) formLabels(o[k], depth + 1, out2);
   }
@@ -59682,7 +59912,7 @@ function sampleTitle(data) {
   for (const [k, v] of Object.entries(data)) {
     if (k.startsWith("_") || typeof v !== "string") continue;
     const s = v.trim();
-    if (s.length > 2 && s.length < 80 && !s.includes("@") && !/^https?:/i.test(s) && !UUID_RE.test(s)) return s;
+    if (s.length > 2 && s.length < 80 && !s.includes("@") && !/^https?:/i.test(s) && !UUID_RE2.test(s)) return s;
   }
   return void 0;
 }
@@ -59781,7 +60011,7 @@ async function readMemberRoles(call) {
   if (sawAuthError) return { names: [], status: "error" };
   return { names: [], status: "empty" };
 }
-var asArr, str6, DESCRIPTION_FIELDS, UUID_RE, CORE_PROBES, OPTIONAL_PROBES, ALL, CMS_LIST_LIMIT;
+var asArr, str6, DESCRIPTION_FIELDS, UUID_RE2, CORE_PROBES, OPTIONAL_PROBES, ALL, CMS_LIST_LIMIT;
 var init_probes = __esm({
   "src/site-analyze/probes.ts"() {
     init_rest();
@@ -59789,7 +60019,7 @@ var init_probes = __esm({
     asArr = (x) => Array.isArray(x) ? x : [];
     str6 = (x) => typeof x === "string" ? x : "";
     DESCRIPTION_FIELDS = ["plainDescription", "description", "shortDescription", "excerpt", "tagLine", "subtitle"];
-    UUID_RE = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;
+    UUID_RE2 = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;
     CORE_PROBES = [
       {
         vertical: "store",
@@ -60496,12 +60726,12 @@ function mergeWst(pages) {
   return acc;
 }
 function fontSlug(value) {
-  let text6 = value;
+  let text8 = value;
   try {
-    text6 = decodeURIComponent(value);
+    text8 = decodeURIComponent(value);
   } catch {
   }
-  return text6.toLowerCase().replace(/[^a-z0-9]+/g, "");
+  return text8.toLowerCase().replace(/[^a-z0-9]+/g, "");
 }
 function fontUrlSlug(url) {
   const last = url.split("?")[0].split("#")[0].split("/").pop() ?? "";
@@ -60675,8 +60905,8 @@ function parsePublishedHtml(html) {
   const rawHeadings = [];
   HEADING_RE.lastIndex = 0;
   while (m = HEADING_RE.exec(html)) {
-    const text6 = copyOrDrop(textFromHtml(m[1] ?? ""), 120);
-    if (text6) rawHeadings.push(text6);
+    const text8 = copyOrDrop(textFromHtml(m[1] ?? ""), 120);
+    if (text8) rawHeadings.push(text8);
     if (rawHeadings.length >= 40) break;
   }
   const headings = dedupe2(rawHeadings, 20);
@@ -61503,16 +61733,16 @@ function isPrivateV4([a, b, c]) {
   return a >= 224;
 }
 function v6Groups(host) {
-  let text6 = host;
-  const dotted = /:((?:\d{1,3}\.){3}\d{1,3})$/.exec(text6);
+  let text8 = host;
+  const dotted = /:((?:\d{1,3}\.){3}\d{1,3})$/.exec(text8);
   if (dotted) {
     const octets = ipv4Octets(dotted[1]);
     if (!octets) return null;
     const hi = (octets[0] << 8 | octets[1]).toString(16);
     const lo = (octets[2] << 8 | octets[3]).toString(16);
-    text6 = `${text6.slice(0, dotted.index)}:${hi}:${lo}`;
+    text8 = `${text8.slice(0, dotted.index)}:${hi}:${lo}`;
   }
-  const halves = text6.split("::");
+  const halves = text8.split("::");
   if (halves.length > 2) return null;
   const parts = (part) => part ? part.split(":") : [];
   const head = parts(halves[0]);
@@ -61594,10 +61824,10 @@ function assertPublicSiteUrl(raw) {
   if (refusal) throw new Error(refusal);
 }
 function resolveAll(hostname2) {
-  return new Promise((resolve52, reject) => {
+  return new Promise((resolve53, reject) => {
     dnsLookup(hostname2, { all: true, verbatim: true }, (err, addresses) => {
       if (err) reject(err);
-      else resolve52(addresses);
+      else resolve53(addresses);
     });
   });
 }
@@ -61605,13 +61835,13 @@ function withAbort(start, signal, what) {
   if (signal?.aborted) return Promise.reject(new Error(`${what} aborted`));
   const work = start();
   if (!signal) return work;
-  return new Promise((resolve52, reject) => {
+  return new Promise((resolve53, reject) => {
     const onAbort = () => reject(new Error(`${what} aborted`));
     signal.addEventListener("abort", onAbort, { once: true });
-    work.then(resolve52, reject).finally(() => signal.removeEventListener("abort", onAbort));
+    work.then(resolve53, reject).finally(() => signal.removeEventListener("abort", onAbort));
   });
 }
-async function pinAddress(url, resolve52 = resolveAll, signal) {
+async function pinAddress(url, resolve53 = resolveAll, signal) {
   const host = url.hostname.replace(/^\[|\]$/g, "");
   if (ipv4Octets(host)) {
     if (isBlockedAddress(host)) throw new Error(`${host} is a blocked address`);
@@ -61621,7 +61851,7 @@ async function pinAddress(url, resolve52 = resolveAll, signal) {
     if (isBlockedAddress(host)) throw new Error(`${host} is a blocked address`);
     return { address: host, family: 6 };
   }
-  const addresses = await withAbort(() => resolve52(host), signal, `${host} lookup`);
+  const addresses = await withAbort(() => resolve53(host), signal, `${host} lookup`);
   if (!addresses.length) throw new Error(`${host} resolved to no address`);
   const blocked = addresses.filter((a) => isBlockedAddress(a.address)).map((a) => a.address);
   if (blocked.length) throw new Error(`${host} resolves to a blocked address (${blocked.join(", ")})`);
@@ -61661,7 +61891,7 @@ function copyIncomingHeaders(headers2) {
   return out2;
 }
 function requestOnce(url, pinned, init) {
-  return new Promise((resolve52, reject) => {
+  return new Promise((resolve53, reject) => {
     const headers2 = { host: url.host, "accept-encoding": "identity" };
     new Headers(init.headers ?? {}).forEach((value, key2) => {
       if (key2.toLowerCase() !== "host") headers2[key2] = value;
@@ -61691,7 +61921,7 @@ function requestOnce(url, pinned, init) {
           reject(err);
           return;
         }
-        resolve52(new Response(body, { status, statusText: res.statusMessage ?? "", headers: out2 }));
+        resolve53(new Response(body, { status, statusText: res.statusMessage ?? "", headers: out2 }));
       }
     );
     req.on("error", reject);
@@ -61767,8 +61997,8 @@ var init_net_guard = __esm({
 function textFields(look) {
   if (look.unavailable) return [];
   const out2 = [];
-  const add = (text6, where, narrative = false) => {
-    if (text6 && text6.trim()) out2.push({ text: text6, where, narrative });
+  const add = (text8, where, narrative = false) => {
+    if (text8 && text8.trim()) out2.push({ text: text8, where, narrative });
   };
   for (const label2 of look.navLabels) add(label2, "nav");
   for (const p of look.pages) {
@@ -62159,8 +62389,8 @@ async function analyzeSite(input, ports) {
   if (locale) plan.provisioning.locale = locale;
   const velo = buildVeloChapter({ look, owner: ownerVelo });
   const veloFiles = ownerVelo.files.flatMap((f) => {
-    const text6 = f.content ?? f.excerpt;
-    return text6 ? [{ path: f.path, text: text6 }] : [];
+    const text8 = f.content ?? f.excerpt;
+    return text8 ? [{ path: f.path, text: text8 }] : [];
   }).slice(0, 80);
   const permissions = buildPermissionsChapter({
     cms,
@@ -62382,8 +62612,8 @@ function cmsStatusNote(taxonomy) {
 function yn(v) {
   return v == null || v === "" ? "\u2014" : String(v);
 }
-function isAuthPhrase(text6) {
-  const t = text6.trim();
+function isAuthPhrase(text8) {
+  const t = text8.trim();
   return AUTH_ONLY_ASCII.test(t) || LOGIN_HE.includes(t);
 }
 function looksGated(page) {
@@ -62760,9 +62990,9 @@ function attachVeloSources(book, sources, put) {
     if (isSecretVeloPath(f.path)) continue;
     const rel = veloArtifactRelPath(f.path);
     if (!rel) continue;
-    const text6 = byPath.get(f.path) ?? f.excerpt;
-    if (!text6) continue;
-    put(rel, text6);
+    const text8 = byPath.get(f.path) ?? f.excerpt;
+    if (!text8) continue;
+    put(rel, text8);
     f.localPath = rel;
   }
 }
@@ -63007,14 +63237,14 @@ var init_customer_build = __esm({
 
 // src/site-analyze/apply.ts
 import { existsSync as existsSync64, readFileSync as readFileSync76, writeFileSync as writeFileSync27, copyFileSync as copyFileSync3, mkdirSync as mkdirSync31, realpathSync as realpathSync9, statSync as statSync17 } from "node:fs";
-import { dirname as dirname35, isAbsolute as isAbsolute6, join as join63, resolve as resolve49, sep as sep16 } from "node:path";
+import { dirname as dirname35, isAbsolute as isAbsolute6, join as join63, resolve as resolve50, sep as sep16 } from "node:path";
 import { spawnSync as spawnSync4 } from "node:child_process";
 function unpairedRedirectNote(overlay) {
   if (!overlay.wix?.clientId || overlay.wix.redirectUri) return void 0;
   return `no OAuth redirect paired with client ${overlay.wix.clientId} \u2014 the app (and prepare:customer) will refuse to start until one is set. Register it with \`himi site client ensure --site ${overlay.siteId?.trim() || "<msid>"} --redirect-uri <uri> --yes\`, then re-run analyze with \`--redirect-uri <uri>\` (or export HIMI_BRANDED_LITE_WIX_REDIRECT_URI)`;
 }
 function posix3(p) {
-  return resolve49(p).replace(/\\/g, "/");
+  return resolve50(p).replace(/\\/g, "/");
 }
 function committedShellProvisioning(path2) {
   return committedShellFor(posix3(path2));
@@ -63048,7 +63278,7 @@ function assertNotCommitted(path2, forbidden) {
       `refusing to overwrite committed ${committedProvisioningPath(committed)} \u2014 use prepare:customer --contract`
     );
   }
-  if (forbidden && resolve49(path2) === resolve49(forbidden)) {
+  if (forbidden && resolve50(path2) === resolve50(forbidden)) {
     const named = committedShellProvisioning(forbidden);
     throw new Error(
       `refusing to overwrite committed ${named ? committedProvisioningPath(named) : forbidden} \u2014 pass a content-package provisioning.json or use prepare:customer --contract`
@@ -63104,8 +63334,8 @@ function buildMergedContract(options) {
   const staged = [];
   const contained = (root, rel) => {
     if (isAbsolute6(rel)) return void 0;
-    const full = resolve49(root, rel);
-    return full.startsWith(resolve49(root) + sep16) ? full : void 0;
+    const full = resolve50(root, rel);
+    return full.startsWith(resolve50(root) + sep16) ? full : void 0;
   };
   const stage = (fromRel, toRel) => {
     const from = contained(packageDir, fromRel);
@@ -63194,7 +63424,7 @@ function catalogTypography(overlay, template) {
 function staticFaqFor(overlay, overlayPath) {
   const own3 = overlay.faq;
   if (own3 !== void 0) return deriveStaticFaq(own3);
-  const bookPath = join63(dirname35(resolve49(overlayPath)), "book.json");
+  const bookPath = join63(dirname35(resolve50(overlayPath)), "book.json");
   if (!existsSync64(bookPath)) return void 0;
   try {
     const book = JSON.parse(readFileSync76(bookPath, "utf8"));
@@ -63208,7 +63438,7 @@ function staticFaqFor(overlay, overlayPath) {
   }
 }
 async function applyOverlays(input) {
-  const cwd = resolve49(input.cwd);
+  const cwd = resolve50(input.cwd);
   const shell = input.shell ?? DEFAULT_BRANDABLE_SHELL;
   assertKnownShell(shell);
   const overlay = JSON.parse(readFileSync76(input.overlayPath, "utf8"));
@@ -63232,7 +63462,7 @@ async function applyOverlays(input) {
         `shell "${shell}" is a site shell: its contract names the customer's website (a \`site\` block), and this overlay has none. Re-run \`himi site analyze --url <site> --shell ${shell}\` to derive the site's page map (edit \`site.pages\` in provisioning.overlay.json if needed), then --apply.`
       );
     }
-    const packageDir = dirname35(resolve49(input.overlayPath));
+    const packageDir = dirname35(resolve50(input.overlayPath));
     const { path: contract, staged } = buildMergedContract({ appDir: appDir3, packageDir, overlay });
     wrote.push(...staged);
     const r = spawnSync4("npm", ["run", "prepare:customer", "--", "--contract", contract], {
@@ -63327,7 +63557,7 @@ async function applyOverlays(input) {
     }
   }
   if (!input.iconPath || !existsSync64(input.iconPath)) {
-    const book = input.iconPath ? dirname35(dirname35(resolve49(input.iconPath))) : void 0;
+    const book = input.iconPath ? dirname35(dirname35(resolve50(input.iconPath))) : void 0;
     notes.push(
       book ? `no icon installed \u2014 ${siteLogoAbsence(book).hint}` : "no icon installed and no business book to say why \u2014 `himi icon generate` draws one from the accent, or `himi icon set <file.png>` installs the customer's own mark"
     );
@@ -64446,10 +64676,10 @@ function permuteDomain(domain, allowSpecialUseDomain) {
 }
 function createPromiseCallback(cb) {
   let callback;
-  let resolve52;
+  let resolve53;
   let reject;
   const promise = new Promise((_resolve, _reject) => {
-    resolve52 = _resolve;
+    resolve53 = _resolve;
     reject = _reject;
   });
   if (typeof cb === "function") {
@@ -64465,7 +64695,7 @@ function createPromiseCallback(cb) {
     callback = (err, result) => {
       try {
         if (err) reject(err);
-        else resolve52(result);
+        else resolve53(result);
       } catch (e) {
         reject(e instanceof Error ? e : new Error());
       }
@@ -66532,8 +66762,8 @@ function copyFromEval(evaled) {
       evaled.meta?.ogTitle,
       evaled.meta?.ogDescription
     ].map((raw) => {
-      const text6 = cleanText(raw, 400);
-      return text6 && isTemplatePlaceholder(text6) ? stripPii(cleanText(text6, 90)) : "";
+      const text8 = cleanText(raw, 400);
+      return text8 && isTemplatePlaceholder(text8) ? stripPii(cleanText(text8, 90)) : "";
     }),
     8
   );
@@ -67065,7 +67295,7 @@ var init_crawl_look = __esm({
 });
 
 // src/site-analyze/site-function.ts
-import { randomUUID as randomUUID5 } from "node:crypto";
+import { randomUUID as randomUUID6 } from "node:crypto";
 function createRevisionUrl(msid, esi) {
   const q = new URLSearchParams({ editorSessionId: esi, esi, metaSiteId: msid });
   return `https://editor.wix.com/html/v1/create_revision?${q}`;
@@ -67432,13 +67662,13 @@ async function veloCall(fetchImpl, method, url, opts = {}) {
     body: opts.body === void 0 ? void 0 : JSON.stringify(opts.body),
     signal: AbortSignal.timeout(opts.timeoutMs ?? 3e4)
   });
-  const text6 = await res.text();
-  let json6 = text6;
+  const text8 = await res.text();
+  let json6 = text8;
   try {
-    json6 = text6 ? JSON.parse(text6) : null;
+    json6 = text8 ? JSON.parse(text8) : null;
   } catch {
   }
-  return { status: res.status, json: json6, text: text6 };
+  return { status: res.status, json: json6, text: text8 };
 }
 function snippet2(x, cap = 180) {
   const s = typeof x === "string" ? x : JSON.stringify(x) ?? "";
@@ -67510,7 +67740,7 @@ function codeAppIdFromRevision(json6) {
 async function snapshotAndPublish(fetchImpl, token, msid, opts = {}) {
   const production = opts.production !== false;
   const initiator = opts.initiator ?? "himi";
-  const esi = randomUUID5();
+  const esi = randomUUID6();
   const rev = await veloCall(fetchImpl, "POST", createRevisionUrl(msid, esi), {
     token,
     msid,
@@ -67607,7 +67837,7 @@ async function runSiteFunction(opts) {
   if (!httpOk(patched)) {
     return { ...base, error: `UpdateFiles ${patched.status}: ${snippet2(patched.json ?? patched.text)}` };
   }
-  let report2 = {
+  let report3 = {
     ...base,
     ok: true,
     source: extractHttpFunction(next, method, name),
@@ -67616,21 +67846,21 @@ async function runSiteFunction(opts) {
   if (opts.publish) {
     const snap = await snapshotAndPublish(fetchImpl, opts.token, opts.msid, { production: true, initiator: "himi" });
     const pubOk = httpOk(snap.rev) && httpOk(snap.live);
-    report2 = {
-      ...report2,
-      ok: report2.ok && pubOk,
+    report3 = {
+      ...report3,
+      ok: report3.ok && pubOk,
       revision: snap.revision,
       codeAppId: snap.codeAppId,
       publish: { revision: httpOk(snap.rev), rc: httpOk(snap.rc), live: httpOk(snap.live), status: snap.live?.status },
-      error: pubOk ? report2.error : snippet2(snap.live?.json ?? snap.rev.json)
+      error: pubOk ? report3.error : snippet2(snap.live?.json ?? snap.rev.json)
     };
   }
   if (opts.invoke) {
-    if (!opts.siteUrl) return { ...report2, ok: false, error: "put --invoke needs --url" };
-    const invoked = await invokeAndReport(fetchImpl, opts, report2, name, method);
-    return { ...report2, ...invoked, op: "put", ok: report2.ok && invoked.ok };
+    if (!opts.siteUrl) return { ...report3, ok: false, error: "put --invoke needs --url" };
+    const invoked = await invokeAndReport(fetchImpl, opts, report3, name, method);
+    return { ...report3, ...invoked, op: "put", ok: report3.ok && invoked.ok };
   }
-  return report2;
+  return report3;
 }
 async function invokeAndReport(fetchImpl, opts, base, name, method) {
   const siteUrl = opts.siteUrl;
@@ -67695,7 +67925,7 @@ __export(cli_exports, {
   runSiteFunctionCli: () => runSiteFunctionCli
 });
 import { readFileSync as readFileSync77 } from "node:fs";
-import { resolve as resolve50 } from "node:path";
+import { resolve as resolve51 } from "node:path";
 function assetFetchFor(_opts) {
   return pinnedFetch2;
 }
@@ -67715,7 +67945,7 @@ async function runSiteAnalyze(opts) {
   const assetFetch = assetFetchFor(opts);
   const siteFetch = guardedSiteFetch;
   const cwd = opts.cwd ?? process.cwd();
-  const outDir = resolve50(cwd, opts.outDir ?? ".himi/business-book");
+  const outDir = resolve51(cwd, opts.outDir ?? ".himi/business-book");
   let ownerAuth;
   let msid;
   const ownerSite = ownerSiteFor(opts);
@@ -67767,9 +67997,9 @@ async function runSiteAnalyze(opts) {
   if (opts.apply) {
     applied = await applyOverlays({
       cwd,
-      overlayPath: resolve50(outDir, "provisioning.overlay.json"),
-      tokensPath: resolve50(outDir, "tokens.overlay.json"),
-      iconPath: resolve50(outDir, "media/icon.png"),
+      overlayPath: resolve51(outDir, "provisioning.overlay.json"),
+      tokensPath: resolve51(outDir, "tokens.overlay.json"),
+      iconPath: resolve51(outDir, "media/icon.png"),
       shell: opts.shell
     });
     const note = noteWithWarnings(applied.note, warnings);
@@ -67805,7 +68035,7 @@ async function runSiteFunctionCli(opts) {
   const token = opts.token ?? await siteToken(msid);
   let source;
   if (opts.sourcePath) {
-    const p = resolve50(opts.cwd ?? process.cwd(), opts.sourcePath);
+    const p = resolve51(opts.cwd ?? process.cwd(), opts.sourcePath);
     source = readFileSync77(p, "utf8");
   }
   let body;
@@ -67861,7 +68091,7 @@ async function accountToken2(spawnImpl = spawn6) {
     cached2 = fromEnv;
     return fromEnv;
   }
-  const token = await new Promise((resolve52, reject) => {
+  const token = await new Promise((resolve53, reject) => {
     let child;
     try {
       child = spawnImpl("wix", ["token"]);
@@ -67890,7 +68120,7 @@ async function accountToken2(spawnImpl = spawn6) {
     const scan = (d) => {
       out2 += String(d);
       const m = out2.match(TOKEN_RE2);
-      if (m) done(() => resolve52(m[0]));
+      if (m) done(() => resolve53(m[0]));
     };
     child.stdout?.on("data", scan);
     child.stderr?.on("data", scan);
@@ -67933,10 +68163,10 @@ function accountTransport(fetchImpl = fetch, timeoutMs = DEFAULT_TIMEOUT_MS5, sp
       }
       throw new Error(`${method} ${path2} failed: ${err?.message ?? String(e)}`);
     }
-    const text6 = await res.text();
-    let parsed = text6;
+    const text8 = await res.text();
+    let parsed = text8;
     try {
-      parsed = text6 ? JSON.parse(text6) : null;
+      parsed = text8 ? JSON.parse(text8) : null;
     } catch {
     }
     if (!res.ok) throw new WixApiError(res.status, method, path2, parsed);
@@ -67997,16 +68227,16 @@ async function installVerticals(msid, wanted, token, fetchImpl = fetch, timeoutM
     body: JSON.stringify({ apps: wanted.map((w) => ({ id: w.appDefId })) }),
     signal: AbortSignal.timeout(timeoutMs)
   });
-  const text6 = await res.text();
+  const text8 = await res.text();
   if (!res.ok) {
     return {
       ...empty,
-      errors: wanted.map((w) => ({ ...w, message: `bulk-install -> ${res.status}: ${text6.slice(0, 200)}` }))
+      errors: wanted.map((w) => ({ ...w, message: `bulk-install -> ${res.status}: ${text8.slice(0, 200)}` }))
     };
   }
   let body = {};
   try {
-    body = text6 ? JSON.parse(text6) : {};
+    body = text8 ? JSON.parse(text8) : {};
   } catch {
   }
   const nameOf = (appDefId) => wanted.find((w) => w.appDefId === appDefId)?.vertical ?? appDefId;
@@ -68609,9 +68839,9 @@ function redactVeloSource(source, knownSecrets = []) {
   const visitLiterals = (node) => {
     if (ts.isStringLiteral(node) || ts.isNoSubstitutionTemplateLiteral(node) || ts.isTemplateExpression(node)) {
       const start = node.getStart(clean2);
-      const text6 = source.slice(start, node.end);
-      const redacted = redactLiteral(text6, start);
-      if (redacted !== text6) {
+      const text8 = source.slice(start, node.end);
+      const redacted = redactLiteral(text8, start);
+      if (redacted !== text8) {
         edits.push({ start, end: node.end, text: redacted });
         return;
       }
@@ -68892,9 +69122,9 @@ var init_context = __esm({
 import { mkdtempSync as mkdtempSync4, readFileSync as readFileSync79, mkdirSync as mkdirSync32, writeFileSync as writeFileSync29, existsSync as existsSync66, rmSync as rmSync15, readdirSync as readdirSync30, statSync as statSync18, lstatSync as lstatSync13, accessSync, constants as constants2, renameSync as renameSync7, cpSync as cpSync3 } from "node:fs";
 import { execFile, execFileSync as execFileSync7, spawnSync as spawnSync5, spawn as spawn7 } from "node:child_process";
 import { AsyncLocalStorage } from "node:async_hooks";
-import { createHash as createHash31, randomUUID as randomUUID6 } from "node:crypto";
+import { createHash as createHash31, randomUUID as randomUUID7 } from "node:crypto";
 import { tmpdir as tmpdir5, homedir as homedir7, hostname } from "node:os";
-import { join as join64, resolve as resolve51, relative as relative13, basename as basename17, dirname as dirname36 } from "node:path";
+import { join as join64, resolve as resolve52, relative as relative13, basename as basename17, dirname as dirname36 } from "node:path";
 import { fileURLToPath as fileURLToPath26 } from "node:url";
 
 // ../serve-cli/src/client.ts
@@ -68935,10 +69165,10 @@ var ServeCliClient = class {
       ...carriesCredential ? { redirect: "error" } : {},
       body: opts.body !== void 0 ? JSON.stringify(opts.body) : void 0
     });
-    const text6 = await res.text();
+    const text8 = await res.text();
     let json6 = null;
     try {
-      json6 = text6 ? JSON.parse(text6) : null;
+      json6 = text8 ? JSON.parse(text8) : null;
     } catch {
       json6 = null;
     }
@@ -68946,7 +69176,7 @@ var ServeCliClient = class {
     res.headers.forEach((v, k) => {
       h[k] = v;
     });
-    return { status: res.status, ok: res.ok, json: json6, text: text6, headers: h };
+    return { status: res.status, ok: res.ok, json: json6, text: text8, headers: h };
   }
   // ---- serve (device-facing reads) ----
   health(plane) {
@@ -69511,8 +69741,8 @@ init_attestation();
 
 // ../../core/admin-web/src/utils/qr-terminal.ts
 init_qr();
-function qrTerminal(text6, opts = {}) {
-  const { modules, size } = encodeQr(text6);
+function qrTerminal(text8, opts = {}) {
+  const { modules, size } = encodeQr(text8);
   const quietZone = opts.quietZone ?? 4;
   const dim = size + quietZone * 2;
   const dark = (x, y) => x >= quietZone && x < quietZone + size && y >= quietZone && y < quietZone + size ? modules[y - quietZone][x - quietZone] : false;
@@ -69568,9 +69798,9 @@ function dpxSessionPresent(path2 = dpxSessionTokenPath()) {
     return false;
   }
 }
-function isPortInUseError(text6) {
-  if (!text6) return false;
-  return /EADDRINUSE/i.test(text6) || new RegExp(`(:::|:)${DPX_SESSION_PORT}\\b`).test(text6);
+function isPortInUseError(text8) {
+  if (!text8) return false;
+  return /EADDRINUSE/i.test(text8) || new RegExp(`(:::|:)${DPX_SESSION_PORT}\\b`).test(text8);
 }
 function parseDpxAuthStatusIdentity(stdout) {
   if (!stdout) return void 0;
@@ -69635,7 +69865,7 @@ async function browserLogin(opts) {
   const log = opts.log ?? (() => {
   });
   const timeoutMs = opts.timeoutMs ?? DEFAULT_TIMEOUT_MS;
-  return await new Promise((resolve52, reject) => {
+  return await new Promise((resolve53, reject) => {
     let settled = false;
     let loginUrl = "";
     const server = createServer();
@@ -69699,7 +69929,7 @@ async function browserLogin(opts) {
           return;
         }
         res.writeHead(200, { "content-type": "text/html; charset=utf-8", "cache-control": "no-store", connection: "close" }).end(CLOSE_PAGE);
-        finish2(() => resolve52({ token, loginUrl }));
+        finish2(() => resolve53({ token, loginUrl }));
       });
     });
     server.on("error", (err) => finish2(() => reject(err)));
@@ -69963,7 +70193,7 @@ async function queryCms(opts) {
 async function createCms(opts) {
   const { app, cms, call, dryRun = false, allowDestructive = false, applyPermissions = false } = opts;
   const prefix = namespacePrefix(app);
-  const report2 = {
+  const report3 = {
     ok: true,
     app,
     namespace: prefix,
@@ -69985,19 +70215,19 @@ async function createCms(opts) {
   for (const spec of cms?.collections ?? []) {
     const id = physicalId(spec, app);
     if (spec.wixId) {
-      report2.skipped.push({
+      report3.skipped.push({
         collection: id,
         reason: remoteById.has(id) ? "adopted (read-only) \u2014 himi never changes the schema of a collection it does not own" : `adopted but absent from this site \u2014 create it in the Wix dashboard, or declare it as owned ("${prefix}\u2026")`
       });
-      if (!remoteById.has(id)) report2.ok = false;
+      if (!remoteById.has(id)) report3.ok = false;
       continue;
     }
     if (!spec.id?.startsWith(prefix)) {
-      report2.refused.push({
+      report3.refused.push({
         collection: id || "<unnamed>",
         reason: `"${id}" is outside this app's namespace "${prefix}" \u2014 himi only writes collections it owns. Rename it in config.ts, or bind an existing collection read-only with \`wixId\`.`
       });
-      report2.ok = false;
+      report3.ok = false;
       continue;
     }
     const existing = remoteById.get(id);
@@ -70005,35 +70235,35 @@ async function createCms(opts) {
       if (!dryRun) {
         await call("POST", "/data/v2/collections", { collection: toWixCollection(spec, app) });
       }
-      report2.created.push(id);
+      report3.created.push(id);
       continue;
     }
     const permDrift = diffPermissions(spec, existing);
-    for (const d of permDrift) report2.permissionDrift.push({ collection: id, ...d });
+    for (const d of permDrift) report3.permissionDrift.push({ collection: id, ...d });
     const applyingPermissions = applyPermissions && permDrift.length > 0;
     const drift = diffFields(spec, existing);
     const extras = drift.filter((d) => d.kind === "extra-field");
     const mismatches = drift.filter((d) => d.kind === "type-mismatch");
     const missing = drift.filter((d) => d.kind === "missing-field");
     for (const m of mismatches) {
-      report2.skipped.push({ collection: id, reason: m.detail });
-      report2.ok = false;
+      report3.skipped.push({ collection: id, reason: m.detail });
+      report3.ok = false;
     }
     for (const e of extras) {
       if (allowDestructive) continue;
-      report2.skipped.push({ collection: id, reason: e.detail });
+      report3.skipped.push({ collection: id, reason: e.detail });
     }
     if (mismatches.length > 0) continue;
     if (missing.length === 0 && (extras.length === 0 || !allowDestructive) && !applyingPermissions) {
-      report2.unchanged.push(id);
+      report3.unchanged.push(id);
       continue;
     }
     if (!allowDestructive && !Array.isArray(existing.fields)) {
-      report2.skipped.push({
+      report3.skipped.push({
         collection: id,
         reason: "the site returned this collection without a `fields` array, so an update would drop every field (and its data) by omission. Re-run to retry the read; pass --allow-destructive only if narrowing to the declaration is genuinely what you want."
       });
-      report2.ok = false;
+      report3.ok = false;
       continue;
     }
     if (applyingPermissions) {
@@ -70070,14 +70300,14 @@ async function createCms(opts) {
         }
       }
     }
-    report2.updated.push(id);
+    report3.updated.push(id);
   }
-  return report2;
+  return report3;
 }
 async function seedCms(opts) {
   const { app, cms, call, dryRun = false, force = false, only, dir } = opts;
   const prefix = namespacePrefix(app);
-  const report2 = { ok: true, app, inserted: {}, sources: {}, skipped: [], refused: [], dryRun };
+  const report3 = { ok: true, app, inserted: {}, sources: {}, skipped: [], refused: [], dryRun };
   const fileRows = dir ? readSeedFile(dir) : {};
   const rowsFor = (id, spec) => fileRows[id]?.length ? { rows: fileRows[id], source: "cms-seed.json" } : { rows: spec.seed ?? [], source: "config.ts" };
   const remoteIds = /* @__PURE__ */ new Set();
@@ -70094,30 +70324,30 @@ async function seedCms(opts) {
     const { rows, source } = rowsFor(id, spec);
     considered++;
     if (!rows.length) {
-      report2.skipped.push({
+      report3.skipped.push({
         collection: id,
         reason: `no seed rows \u2014 add a \`seed\` array to this collection in config.ts, or run \`himi cms seed --ai\` and refine ${dir ? "cms-seed.json" : "the generated cms-seed.json"}`
       });
       continue;
     }
     if (!spec.id?.startsWith(prefix)) {
-      report2.refused.push({ collection: id, reason: `"${id}" is outside this app's namespace "${prefix}" \u2014 himi only seeds collections it owns.` });
-      report2.ok = false;
+      report3.refused.push({ collection: id, reason: `"${id}" is outside this app's namespace "${prefix}" \u2014 himi only seeds collections it owns.` });
+      report3.ok = false;
       continue;
     }
     if (!remoteIds.has(id)) {
-      report2.skipped.push({ collection: id, reason: `not on the site yet \u2014 run \`himi cms create\` first` });
-      report2.ok = false;
+      report3.skipped.push({ collection: id, reason: `not on the site yet \u2014 run \`himi cms create\` first` });
+      report3.ok = false;
       continue;
     }
     const count2 = await countItems(call, id);
     if (count2 === null && !force) {
-      report2.skipped.push({ collection: id, reason: "could not read the current row count, so seeding might bury existing content. Re-run, or pass --force if you are sure." });
-      report2.ok = false;
+      report3.skipped.push({ collection: id, reason: "could not read the current row count, so seeding might bury existing content. Re-run, or pass --force if you are sure." });
+      report3.ok = false;
       continue;
     }
     if (count2 !== null && count2 > 0 && !force) {
-      report2.skipped.push({ collection: id, reason: `already has ${count2} items \u2014 seeding an already-populated collection needs --force so real content is never buried under sample rows` });
+      report3.skipped.push({ collection: id, reason: `already has ${count2} items \u2014 seeding an already-populated collection needs --force so real content is never buried under sample rows` });
       continue;
     }
     if (!dryRun) {
@@ -70129,7 +70359,7 @@ async function seedCms(opts) {
       });
       const droppedKeys = [...new Set(rows.flatMap((r) => Object.keys(r).filter((k) => !declaredKeys.has(k))))];
       if (droppedKeys.length > 0) {
-        report2.skipped.push({
+        report3.skipped.push({
           collection: id,
           reason: `ignored undeclared key(s) in seed rows: ${droppedKeys.join(", ")} \u2014 only declared fields are written (a row cannot set system keys such as _id or _owner)`
         });
@@ -70145,18 +70375,18 @@ async function seedCms(opts) {
         )
       );
     }
-    report2.inserted[id] = rows.length;
-    report2.sources[id] = source;
+    report3.inserted[id] = rows.length;
+    report3.sources[id] = source;
   }
   if (considered === 0) {
     const adopted = (cms?.collections ?? []).map((spec) => ({ spec, id: physicalId(spec, app) })).filter(({ spec, id }) => !!spec.wixId && (!only || id === only));
-    report2.skipped.push({
+    report3.skipped.push({
       collection: only ?? "<none>",
       reason: adopted.length ? `the selected collection${adopted.length === 1 ? " is" : "s are"} adopted and read-only \u2014 himi never seeds ${adopted.map(({ id }) => `"${id}"`).join(", ")}. Add rows in Wix CMS, or declare an owned collection with an id beginning "${prefix}".` : only ? `--only "${only}" matched no owned collection declared by this app` : "this app declares no owned CMS collections to seed"
     });
-    report2.ok = false;
+    report3.ok = false;
   }
-  return report2;
+  return report3;
 }
 function readSeedFile(dir) {
   const file = join8(dir, "cms-seed.json");
@@ -70457,57 +70687,57 @@ function summarizeLint(app, bres, outcome, strict, extraIssues = []) {
     }
   };
   const record2 = (value) => value && typeof value === "object" && !Array.isArray(value) ? value : {};
-  const text6 = (value) => typeof value === "string" && value ? value : void 0;
+  const text8 = (value) => typeof value === "string" && value ? value : void 0;
   const message = (value) => {
     const item = record2(value);
-    if (text6(item.message)) return text6(item.message);
-    if (text6(item.error)) return text6(item.error);
+    if (text8(item.message)) return text8(item.message);
+    if (text8(item.error)) return text8(item.error);
     if (Array.isArray(item.errors)) {
       const diagnostics = item.errors.map((entry) => {
         const diagnostic = record2(entry);
-        return text6(diagnostic.text) ?? text6(diagnostic.message);
+        return text8(diagnostic.text) ?? text8(diagnostic.message);
       }).filter((entry) => !!entry);
       if (diagnostics.length) return diagnostics.join("; ");
     }
     return typeof value === "string" ? value : JSON.stringify(value);
   };
-  const report2 = foldLegacyReport(legacy, {
+  const report3 = foldLegacyReport(legacy, {
     source: "validate",
     evidence: { runId: `validate:${outcome.manifest.releaseId}`, ts: (/* @__PURE__ */ new Date()).toISOString() },
     findings: [
       ...issues,
       ...bres.compileErrors.map((value) => ({
         pass: "compile",
-        path: text6(record2(value).bundle),
+        path: text8(record2(value).bundle),
         ruleCode: "compile-error",
         severity: "error",
         message: message(value)
       })),
       ...outcome.failedToBuild.map((value) => ({
         pass: "build",
-        screen: text6(record2(value).screenId),
+        screen: text8(record2(value).screenId),
         ruleCode: "failed-to-build",
         severity: "error",
         message: message(value)
       })),
       ...outcome.missingBundles.map((value) => ({
         pass: "build",
-        screen: text6(record2(value).screen),
-        path: text6(record2(value).bundle),
+        screen: text8(record2(value).screen),
+        path: text8(record2(value).bundle),
         ruleCode: "missing-bundle",
         severity: "error",
         message: message(value)
       })),
       ...workerThrows.map((value) => ({
         pass: "worker",
-        path: text6(record2(value).bundle),
+        path: text8(record2(value).bundle),
         ruleCode: "worker-threw",
         severity: "error",
         message: message(value.threw)
       }))
     ]
   });
-  return { report: report2, hasErrors };
+  return { report: report3, hasErrors };
 }
 
 // src/cms-lint.ts
@@ -70631,8 +70861,8 @@ function surfaceIssues(dir, surfaceNav, strict) {
   if (requested.length) {
     const { rejected } = resolveSurfaceEnvelope(platforms, requested);
     for (const r of rejected) {
-      const report2 = surfaceById(r.id) ? warn : error;
-      report2(`navigation.surfaces: ${r.reason} \u2014 the server will drop this key (narrow-only rule, RFC 0051 \xA73.6)`);
+      const report3 = surfaceById(r.id) ? warn : error;
+      report3(`navigation.surfaces: ${r.reason} \u2014 the server will drop this key (narrow-only rule, RFC 0051 \xA73.6)`);
     }
   }
   return issues;
@@ -70779,18 +71009,18 @@ function walkSource(dir, root = dir) {
     const ext = entry.name.slice(entry.name.lastIndexOf("."));
     if (!SOURCE_EXTENSIONS.has(ext)) continue;
     const absolute = join25(dir, entry.name);
-    const text6 = readText2(absolute);
-    if (text6 !== null) found.push({ path: relative4(root, absolute), text: text6 });
+    const text8 = readText2(absolute);
+    if (text8 !== null) found.push({ path: relative4(root, absolute), text: text8 });
   }
   return found;
 }
-function blankMatrixRows(text6) {
-  const acceptance = mobileUxSection(mobileUxDocumentBody(text6), "Implementation acceptance") ?? "";
+function blankMatrixRows(text8) {
+  const acceptance = mobileUxSection(mobileUxDocumentBody(text8), "Implementation acceptance") ?? "";
   return /\|\s*(?:Ready|Empty|Add\s*\/\s*edit|Saved\s*\/\s*completed|Error\s*\/\s*recovery)\s*\|\s*\|\s*\|\s*\|\s*\|/i.test(acceptance);
 }
 function usesAppNetwork(source) {
-  const code = (text6) => text6.replace(/\/\*[\s\S]*?\*\//g, "").replace(/\/\/[^\n]*/g, "");
-  return source.some(({ text: text6 }) => /\bwixApi\b|(?:from|import)\s*["']@(?:himalaya|wix\/himalaya)\/wix-[^"']+["']/.test(code(text6)));
+  const code = (text8) => text8.replace(/\/\*[\s\S]*?\*\//g, "").replace(/\/\/[^\n]*/g, "");
+  return source.some(({ text: text8 }) => /\bwixApi\b|(?:from|import)\s*["']@(?:himalaya|wix\/himalaya)\/wix-[^"']+["']/.test(code(text8)));
 }
 function auditUx(content, strict = false) {
   const dir = resolve16(content);
@@ -71504,6 +71734,13 @@ var USAGE = `himi \u2014 the Himalaya authoring CLI (remote dev loop)
       Requires Himi owner login plus Wix CLI login for site authorization.
   himi notify status --content <dir> [--site <msid>] [--refresh] [--json]
       Reads server setup status. --refresh checks Branded/Ping live; it does not send push.
+  himi notify send --provider ping --target wix --app <a> --site <msid> --member-email <email>
+                   --title <s> [--body <s>] --link <scheme>://screen/<id>[?\u2026] [--request-id <uuid>] [--dry-run] [--json]
+      Hosted test notification to ONE site member's devices: Himi Serve sends it through Ping
+      as Himalaya, so no Apple/Firebase keys or Fire Console. Needs himi login --browser and
+      wix login as the site owner, and a ready notify setup. Acceptance is not delivery.
+      --dry-run checks ownership, member, link and readiness without sending. After an unknown
+      outcome, re-run the same command with the printed --request-id; Ping never runs it twice.
   himi notify send --app <a> (--token <t> | --device <id> | --all) --title <s> [--body <s>] [--link <url>]
                                            deliver a REAL push notification to registered devices \u2014
                                            APNs (.p8) for iOS, FCM v1 for Android. --all fans out to
@@ -71695,7 +71932,7 @@ var COMMANDS = [
   { name: "icon", summary: "the app's LAUNCHER icon \u2014 the home-screen / store mark, which is BINARY-floor and never over-the-air (distinct from `himi icons`, the in-screen glyph vocabulary). `status`/`check` report what this app would actually ship and validate it against both stores: exact 1024x1024, no tRNS chunk, non-interlaced, and \u2014 when the optional image toolchain is installed \u2014 no transparent regions (Apple permits an alpha channel but not transparent pixels: ITMS-90717), no pre-masked corners, no letterboxed wordmark; they also print the store-policy checklist no checker can decide. `set <file.png>` installs supplied art, `from-site` installs the logo `himi site analyze` downloaded, and `generate` makes a gradient tile + glyph \u2014 all three trim, flatten onto the app's accent, write the 1024 opaque master plus the 512 Play listing icon (Play wants 32-bit WITH alpha, so it is a separate file), and DECLARE it in himalaya.content.json, without which the release bakes no icon at all", required: "[status|check] | set <file.png> | from-site [--book <dir>] | generate [--glyph <g>] [--accent <hex>] | glyphs [--content <dir>] [--json]" },
   { name: "login", summary: "obtain a scoped serve-control token from Wix identity and store it in ~/.himalaya/serve-targets.json (so push/promote need no hand-pasted token). Three modes: --browser (your own Wix account, no VPN/BO), --wix (HEADLESS \u2014 the machine's own Wix CLI credential; the mode a CI pod or agent container can satisfy), --dpx (Wix employee, reads ~/.dpx/session/token). RFC 0026 WS3.", required: "[--browser|--wix|--dpx] [--target <t>] [--issue-url <url>]" },
   { name: "logout", summary: "remove the stored control token for a target", required: "[--target <t>]" },
-  { name: "notify", summary: "`setup` optionally configures Branded/Ping from local customer key files; `status --refresh` reads live backend readiness. Setup may be deferred while building. These use serve-control and require owner plus Wix account authentication. `send`, `tokens`, `doctor`: send a REAL push notification to registered devices (RFC 0036 WS5) \u2014 APNs .p8 over HTTP/2 for iOS, FCM v1 for Android. `send` targets one device (--token / --device <registry id>) or fans out to the whole app (--all), reporting a per-device result; a token the provider says is uninstalled (APNs 410 Unregistered / FCM UNREGISTERED) is auto-disabled, while a merely wrong one (BadDeviceToken \u2014 usually a sandbox/production mismatch) is recorded and left enabled. `tokens` lists the registry. `doctor` reports which credentials resolve and which sender each platform picks. Talks to the admin-server via --admin-url/HIMALAYA_ADMIN_URL, authenticated with --admin-session/HIMALAYA_ADMIN_SESSION. NOT `himi push`, which publishes a release.", required: "setup|status [--content <dir>] [--target <t>] [--refresh] [--yes] [--no-push-setup] | send|tokens|doctor [--app <a>] [--token <t> | --device <id> | --all] [--title <s>] [--body <s>] [--link <url>] [--platform ios|android] [--badge <n>] [--channel <id>] [--silent] [--dry-run] [--json]" },
+  { name: "notify", summary: "`setup` optionally configures Branded/Ping from local customer key files; `status --refresh` reads live backend readiness. Setup may be deferred while building. These use serve-control and require owner plus Wix account authentication. `send`, `tokens`, `doctor`: send a REAL push notification to registered devices (RFC 0036 WS5) \u2014 APNs .p8 over HTTP/2 for iOS, FCM v1 for Android. `send` targets one device (--token / --device <registry id>) or fans out to the whole app (--all), reporting a per-device result; a token the provider says is uninstalled (APNs 410 Unregistered / FCM UNREGISTERED) is auto-disabled, while a merely wrong one (BadDeviceToken \u2014 usually a sandbox/production mismatch) is recorded and left enabled. `tokens` lists the registry. `doctor` reports which credentials resolve and which sender each platform picks. Talks to the admin-server via --admin-url/HIMALAYA_ADMIN_URL, authenticated with --admin-session/HIMALAYA_ADMIN_SESSION. `send --provider ping` is the hosted alternative: the serve plane sends one test notification to one site member through Ping as Himalaya, with owner login instead of provider keys, and reports acceptance, never delivery. NOT `himi push`, which publishes a release.", required: "setup|status [--content <dir>] [--target <t>] [--refresh] [--yes] [--no-push-setup] | send --provider ping [--content <dir>] [--app <a>] [--site <msid>] --member-email <email> --title <s> [--body <s>] --link <url> [--request-id <uuid>] [--dry-run] [--json] | send|tokens|doctor [--app <a>] [--token <t> | --device <id> | --all] [--title <s>] [--body <s>] [--link <url>] [--platform ios|android] [--badge <n>] [--channel <id>] [--silent] [--dry-run] [--json]" },
   { name: "site", summary: "PROVISION a Wix project, then analyze or extend it. `create` is the one door that makes a site instead of adopting one: POST /funnel/projects/v1/create (a WIX site, a HEADLESS backend, a BRANDED_APP, or a VIBE site), and for headless it also mints the OAuth app whose id IS the `WIX_CLIENT_ID` \u2014 with --redirect-uri already registered, because an unregistered redirect makes native signInDirect fail at redirect-session. `--verticals` REQUIRES `--template` and reports only what Wix confirmed: measured, installing onto a project created from the BLANK template returns 200 while the vertical's API answers 428 forever, because there is no site for it to attach to (the install asks for CREATE_SITE). A real template ships its verticals installed and populated, and installing further ones onto it then works. It MUTATES your Wix account and needs --yes; without it you get the payload and nothing is sent. `list` is the read-only site inventory (with each site's premium flag, which is what explains an installed-but-428 vertical). Auth is the account-scoped `wix token` (no --site), falling back to WIX_API_KEY + WIX_ACCOUNT_ID. `client` is the same OAuth step for a site that ALREADY exists \u2014 the one himi adopts rather than makes \u2014 so a clientId no longer means a manual trip to the dashboard: `client ensure` reconciles rather than mints, because a site can already carry a client with NO registered redirect and shipping that one fails signInDirect at runtime; it reuses a client that carries --redirect-uri, PATCHes one that matches --name but lacks it (unioning, so another app's redirect survives), and creates only when there is nothing to reuse (--new forces a fresh one). --name IS the idempotency key. `client` auth is SITE-scoped (`wix token --site <msid>`) because minting is owner-of-that-site, and --yes gates every mutation: a site that already has a usable client resolves WITHOUT it, but --write-provisioning needs --yes even then because it rewrites a manifest on disk (the dry run's planned.provisioning names the file). That query endpoint IGNORES paging (measured: query.paging, cursorPaging and a top-level paging all return the full set at offset 0), so when pagingMetadata reports more clients than came back, `ensure` REFUSES EVERY outcome \u2014 create, patch AND reuse. Reuse is refused too because pickClient breaks ties on the OLDEST createdDate, so an omitted older same-named MOBILE client with the same redirect would win a later complete read and the resolved clientId would MOVE between runs \u2014 and it gets written into provisioning.json; convergence is what makes a stray duplicate untidy rather than harmful. --name cannot narrow the query (no filter is sent; the name is applied to the rows after they arrive), so the recovery is the dashboard; --new skips the query entirely. A `patched` result is verified against what Wix STORED \u2014 the redirect list is read off the PATCH response, and re-read via GET when the response omits it, because falling back to the list himi just sent would make the guard pass vacuously on exactly the silent no-op it exists to catch. `client list` is the read-only inventory of a site's clients: act on its `shippable` column rather than `hasRedirect`, because shippable ALSO requires a MOBILE applicationType and `ensure` refuses a WEB client \u2014 a WEB one carrying your redirect looks right and is not a candidate \u2014 and it sets truncated:true rather than presenting a partial inventory as the whole one. `analyze --read-only` returns API-only generation context as JSON (identity, access probes, CMS permissions and selected redacted Velo source); it needs no URL/browser and never uploads or applies anything. `analyze` reads a site into a business-book folder (REST + Playwright, GET-only); `--url` alone is the visitor-only pass over the published pages, and `--client-id` adds the vertical probes and the app binding `--apply` requires; `site function` list/get/put/publish/invokes that site's Velo HTTP functions and is not `himi functions` (serve-plane jobs). `--apply` bakes into a brandable shell; `--shell` takes the same names `himi dist --shell` does and defaults to branded-lite, and a shell that ships no prepare:customer is refused by name rather than half-built. `--shell brandy` (the site shell, RFC 0062) also derives the site's page map from its published pages and header menu \u2014 Home first, up to four tabs for the pages a visitor returns to, the rest in the drawer \u2014 into the overlay's `site` block, so it can be edited before `--apply`; only a site shell ever receives that block. It never overwrites any shell's committed apps/<shell>/provisioning.json.", required: "create <name> [--type wix|headless|branded-app|vibe] [--template <guid>] [--verticals stores,bookings,\u2026] [--folder <guid>] [--redirect-uri <uri>] [--no-oauth-app] [--write-provisioning [path]] [--site-url <url>] [--json] --yes | list | client ensure|list --site <msid> [--name <name>] [--redirect-uri <uri>] [--new] [--write-provisioning [path]] [--site-url <url>] [--json] --yes | analyze --read-only [--site <msid>] [--client-id <id>] [--json] | analyze --url <https> [--client-id <id>] [--site <msid>] [--out <dir>] [--redirect-uri <uri>] [--apply] [--shell " + SHELL_ENUM + "] | function list|get|put|publish|invoke [--site <msid>] [--url <https>] [--method GET|POST|PUT|DELETE] [--source <file>] [--body <json>] [--publish] [--invoke]" },
   { name: "doctor", summary: 'off-VPN preflight in one shot: probe the PUBLIC data plane (www.wixapis.com \u2014 reachable off-VPN), the INTERNAL serve/control plane for the selected target (VPN-gated), and report auth state (dpx session on disk + stored control token). --dpx additionally runs a live, EADDRINUSE-safe `dpx whoami`. Machine-readable with --json (an unreachable internal plane carries a stable code:"needs_vpn" so an agent branches on the code, not the prose); human-readable otherwise. Never loads the authoring runtime \u2014 works off-repo.', required: "[--target <t>] [--dpx] [--json] [--data-url <url>] [--timeout <ms>]" },
   { name: "upgrade", summary: "install the newest published CLI (`npm i -g @wix/himalaya-cli@latest`) and report what moved. This is the explicit door: himi also updates itself when the running build is more than a week old \u2014 unattended it just does it and re-runs your command, at a terminal it asks first \u2014 and `HIMI_NO_UPDATE_CHECK=1` turns that off, leaving this command as the way to catch up. Reports `unchanged` rather than claiming success when npm exits 0 without moving the version, which is what a registry mirror serving its own pinned copy looks like.", required: "[--json]" },
@@ -71788,16 +72025,16 @@ function createScopedRegistryResolver(exec = execNpmConfig) {
 }
 var SCOPED_REGISTRY_TIMEOUT_MS = 5e3;
 function execNpmConfig(file, args, options) {
-  return new Promise((resolve52, reject) => {
-    execFile(file, args, { ...options, windowsHide: true }, (error, stdout) => error ? reject(error) : resolve52(String(stdout)));
+  return new Promise((resolve53, reject) => {
+    execFile(file, args, { ...options, windowsHide: true }, (error, stdout) => error ? reject(error) : resolve53(String(stdout)));
   });
 }
 var npmScopedWixRegistry = createScopedRegistryResolver();
 async function scopedRegistryBefore(lookup2, deadline) {
   let cancel = () => {
   };
-  const expired = new Promise((resolve52) => {
-    const timer = setTimeout(() => resolve52(void 0), Math.max(0, deadline - Date.now()));
+  const expired = new Promise((resolve53) => {
+    const timer = setTimeout(() => resolve53(void 0), Math.max(0, deadline - Date.now()));
     cancel = () => clearTimeout(timer);
   });
   try {
@@ -71862,7 +72099,7 @@ function packageVersion(path2) {
   }
 }
 function resolvedSdkVersion(fromDir = process.cwd(), bundledManifest = new URL("./authoring-runtime/node_modules/@wix/himalaya/package.json", import.meta.url)) {
-  let dir = resolve51(fromDir);
+  let dir = resolve52(fromDir);
   for (; ; ) {
     const version2 = packageVersion(join64(dir, "node_modules", "@wix", "himalaya", "package.json"));
     if (version2) return { version: version2, source: "local" };
@@ -72027,7 +72264,7 @@ function thisHost() {
   return hostname().replace(/\s+/g, "_");
 }
 function lockStamp(now) {
-  return `${now} ${process.pid} ${thisHost()} ${randomUUID6()}`;
+  return `${now} ${process.pid} ${thisHost()} ${randomUUID7()}`;
 }
 function processAlive(pid) {
   try {
@@ -72181,21 +72418,21 @@ function loaderArgs(execArgv) {
 }
 var spawnUpdateRefresh = createUpdateRefreshSpawner();
 function createTrimValidator(deps = {}, spawnFn = spawn7) {
-  const outcome = (code, report2, said) => {
+  const outcome = (code, report3, said) => {
     let counts;
     let errors;
     try {
-      const parsed = JSON.parse(report2);
+      const parsed = JSON.parse(report3);
       counts = parsed.counts;
       if (Array.isArray(parsed.findings)) {
-        const text6 = (v) => typeof v === "string" && v ? v : void 0;
+        const text8 = (v) => typeof v === "string" && v ? v : void 0;
         errors = parsed.findings.filter((f) => f && f.severity === "error" && typeof f.id === "string").map((f) => ({
           id: f.id,
-          message: text6(f.message) ?? "",
-          ...text6(f.pass) ? { pass: text6(f.pass) } : {},
-          ...text6(f.screen) ? { screen: text6(f.screen) } : {},
-          ...text6(f.path) ? { path: text6(f.path) } : {},
-          ...text6(f.ruleCode) ? { ruleCode: text6(f.ruleCode) } : {}
+          message: text8(f.message) ?? "",
+          ...text8(f.pass) ? { pass: text8(f.pass) } : {},
+          ...text8(f.screen) ? { screen: text8(f.screen) } : {},
+          ...text8(f.path) ? { path: text8(f.path) } : {},
+          ...text8(f.ruleCode) ? { ruleCode: text8(f.ruleCode) } : {}
         }));
       }
     } catch {
@@ -72203,7 +72440,7 @@ function createTrimValidator(deps = {}, spawnFn = spawn7) {
     return { code, counts, ...errors ? { errors } : {}, ...code !== 0 ? { tail: said.slice(-4e3) } : {} };
   };
   return async (dir, opts = {}) => {
-    const argv = ["validate", "--content", resolve51(dir), "--strict", "--skip-version-check"];
+    const argv = ["validate", "--content", resolve52(dir), "--strict", "--skip-version-check"];
     if (!opts.fresh) {
       const out2 = [];
       const err = [];
@@ -72819,7 +73056,7 @@ function keptPlan(kept) {
   return note ? { kept, note } : {};
 }
 async function initFromRemoteTemplate(name, parentDir, template, c) {
-  const dir = resolve51(parentDir, name);
+  const dir = resolve52(parentDir, name);
   if (existsSync66(join64(dir, "himalaya.content.json"))) {
     throw new Error(`content package already exists at ${dir}`);
   }
@@ -72832,17 +73069,17 @@ async function initFromRemoteTemplate(name, parentDir, template, c) {
   return finishScaffold(materializeSource(archive.files, name, dir), template);
 }
 function contentDir(flags) {
-  return resolve51(str8(flags.content) ?? process.cwd());
+  return resolve52(str8(flags.content) ?? process.cwd());
 }
 function renameRestoredSource(restored, declaredApp, renamed) {
-  const text6 = {};
+  const text8 = {};
   for (const entry of restored) {
     const decoded = entry.bytes.toString("utf8");
-    if (Buffer.from(decoded, "utf8").equals(entry.bytes)) text6[entry.path] = decoded;
+    if (Buffer.from(decoded, "utf8").equals(entry.bytes)) text8[entry.path] = decoded;
   }
-  const sentineled = sentinelizeArchive(text6, declaredApp);
+  const sentineled = sentinelizeArchive(text8, declaredApp);
   for (const entry of restored) {
-    if (!(entry.path in text6)) continue;
+    if (!(entry.path in text8)) continue;
     const body = sentineled[entry.path];
     if (body !== void 0) entry.bytes = Buffer.from(substituteIdentity(body, renamed), "utf8");
   }
@@ -72876,7 +73113,7 @@ function restoreDestinationIssue(dest, force) {
   return null;
 }
 function isHimalayaMonorepoCheckout(start) {
-  let dir = resolve51(start);
+  let dir = resolve52(start);
   for (; ; ) {
     if (existsSync66(join64(dir, "tools", "himi-cli", "src", "cli.ts")) && existsSync66(join64(dir, "core", "serve", "src", "server.ts"))) return true;
     const parent = dirname36(dir);
@@ -72938,7 +73175,7 @@ function materializeForPreview(appDir3, slug, displayName) {
   const forBuild = Object.fromEntries(
     Object.entries(files).map(([rel, body]) => [rel, rel === "himalaya.content.json" ? substituteIdentity(body, slug) : body])
   );
-  const repoRoot2 = resolve51(fileURLToPath26(new URL("../../..", import.meta.url)));
+  const repoRoot2 = resolve52(fileURLToPath26(new URL("../../..", import.meta.url)));
   const root = join64(repoRoot2, "node_modules", ".cache", "himi-template-preview");
   const stillRunning = (pid) => {
     try {
@@ -73184,7 +73421,7 @@ Seed your coding agent with \`himi agent-init\`. Guides: ${idx.portalUrl}`);
       return 0;
     }
     case "agent-init": {
-      const dir = resolve51(str8(flags.dir) ?? process.cwd());
+      const dir = resolve52(str8(flags.dir) ?? process.cwd());
       const { seedAgentFiles: seedAgentFiles2, NotAContentPackage: NotAContentPackage2 } = await Promise.resolve().then(() => (init_agent_context(), agent_context_exports));
       let res;
       try {
@@ -73741,7 +73978,7 @@ himi v${cliVersion()} \u2014 run \`himi --version\`. If authoring commands fail
           return 2;
         }
         const template = str8(flags.template);
-        const parentDir = resolve51(str8(flags.dir) ?? process.cwd());
+        const parentDir = resolve52(str8(flags.dir) ?? process.cwd());
         const withAgentFiles = async (dir) => {
           const seeded = await seedAgentFilesFor(dir, flags);
           if (!seeded.agent || "error" in seeded.agent) return seeded;
@@ -73902,8 +74139,8 @@ ${doNow.map((l) => `  ${l}`).join("\n")}`);
                 return 2;
               }
             }
-            const appDir3 = resolve51(str8(flags.dir) ?? process.cwd());
-            const sourceDir = resolve51(str8(flags["source-dir"]) ?? appDir3);
+            const appDir3 = resolve52(str8(flags.dir) ?? process.cwd());
+            const sourceDir = resolve52(str8(flags["source-dir"]) ?? appDir3);
             let meta;
             try {
               meta = JSON.parse(readFileSync79(join64(sourceDir, TEMPLATE_META_FILE), "utf8"));
@@ -73945,7 +74182,7 @@ ${doNow.map((l) => `  ${l}`).join("\n")}`);
               ...hasWorkers ? { tier5Dir: bundleOutDir2(buildDir) } : {},
               collect: { lint: true, strict }
             });
-            const scaffoldSourceFindings = resolve51(sourceDir) === resolve51(appDir3) ? [] : [
+            const scaffoldSourceFindings = resolve52(sourceDir) === resolve52(appDir3) ? [] : [
               ...tokenColorIssues(sourceDir),
               ...surfaceIssues(sourceDir, void 0, strict),
               ...await fontIssues(sourceDir, strict),
@@ -73957,7 +74194,7 @@ ${doNow.map((l) => `  ${l}`).join("\n")}`);
               message: `scaffold source (--source-dir ${sourceDir}): ${issue2.message}`
             }));
             const { navIssues: navIssues2 } = await Promise.resolve().then(() => (init_nav_lint(), nav_lint_exports));
-            const { report: report2, hasErrors } = summarizeLint(app, bres, outcome, strict, [
+            const { report: report3, hasErrors } = summarizeLint(app, bres, outcome, strict, [
               ...await cmsIssues(buildDir, app, strict, { local: true }),
               ...surfaceIssues(buildDir, outcome.surfaceNav, strict),
               ...tokenColorIssues(buildDir),
@@ -73967,7 +74204,7 @@ ${doNow.map((l) => `  ${l}`).join("\n")}`);
               ...scaffoldSourceFindings
             ]);
             if (hasErrors && !force) {
-              print({ ...report2, published: false, hint: "lint found errors \u2014 fix them, or re-run with --force to publish anyway" });
+              print({ ...report3, published: false, hint: "lint found errors \u2014 fix them, or re-run with --force to publish anyway" });
               return 1;
             }
             const payload = await loadReleaseFromDir(app, out2);
@@ -73988,7 +74225,7 @@ ${doNow.map((l) => `  ${l}`).join("\n")}`);
               }));
               return 1;
             }
-            const iconPath = str8(flags.icon) ? resolve51(str8(flags.icon)) : templateIconPath(name);
+            const iconPath = str8(flags.icon) ? resolve52(str8(flags.icon)) : templateIconPath(name);
             let iconHash;
             if (iconPath) {
               try {
@@ -74242,7 +74479,7 @@ ${doNow.map((l) => `  ${l}`).join("\n")}`);
           ...hasWorkers ? { tier5Dir: bundleOutDir2(dir) } : {},
           collect: { lint: true, strict }
         });
-        const { report: report2, hasErrors } = summarizeLint(app, bres, outcome, strict, [
+        const { report: report3, hasErrors } = summarizeLint(app, bres, outcome, strict, [
           ...await cmsIssues(dir, app, strict, { local: true }),
           ...surfaceIssues(dir, outcome.surfaceNav, strict),
           ...tokenColorIssues(dir),
@@ -74259,10 +74496,10 @@ ${doNow.map((l) => `  ${l}`).join("\n")}`);
         if (authWarning) advisories.push(authWarning);
         advisories.push(...await nativeConfigAdvisories(app, configSource));
         const finalReport = advisories.length ? {
-          ...report2,
-          warnings: [...report2.warnings ?? [], ...advisories],
-          counts: { ...report2.counts, warnings: report2.counts.warnings + advisories.length }
-        } : report2;
+          ...report3,
+          warnings: [...report3.warnings ?? [], ...advisories],
+          counts: { ...report3.counts, warnings: report3.counts.warnings + advisories.length }
+        } : report3;
         await leaveForBoard(dir, "validate", {
           ok: !hasErrors,
           errors: finalReport.counts.errors,
@@ -74375,23 +74612,23 @@ ${doNow.map((l) => `  ${l}`).join("\n")}`);
           const app = str8(flags.app) ?? loaded.app;
           const invoked2 = await invokeRemoteFunction2({ baseUrl: target.baseUrl, app, definition, body: input, params, releaseId: remoteRelease, previewToken: str8(flags["preview-token"]), boCookie: boCookie() });
           const response = invoked2.response;
-          const text7 = await response.text();
+          const text9 = await response.text();
           let body2;
           try {
-            body2 = JSON.parse(text7);
+            body2 = JSON.parse(text9);
           } catch {
-            body2 = text7;
+            body2 = text9;
           }
           print({ ok: response.ok, app, releaseId: remoteRelease ?? null, url: invoked2.url, status: response.status, body: body2 });
           return response.ok ? 0 : 1;
         }
         const invoked = await invokeLocalFunction2(loaded, name, input, params);
-        const text6 = await invoked.response.text();
+        const text8 = await invoked.response.text();
         let body;
         try {
-          body = JSON.parse(text6);
+          body = JSON.parse(text8);
         } catch {
-          body = text6;
+          body = text8;
         }
         print({ ok: invoked.response.ok, app: loaded.app, releaseId: invoked.releaseId, status: invoked.response.status, body });
         return invoked.response.ok ? 0 : 1;
@@ -74410,7 +74647,7 @@ ${doNow.map((l) => `  ${l}`).join("\n")}`);
             return 1;
           }
           const { himiPluginFiles: himiPluginFiles2 } = await Promise.resolve().then(() => (init_claude_plugin(), claude_plugin_exports));
-          const dir = resolve51(out2);
+          const dir = resolve52(out2);
           const files = himiPluginFiles2(skills.skillMd);
           for (const f of files) {
             mkdirSync32(dirname36(join64(dir, f.path)), { recursive: true });
@@ -74432,7 +74669,7 @@ ${doNow.map((l) => `  ${l}`).join("\n")}`);
         }
         if (pos[1] === "reel") {
           const { buildReel: buildReel2 } = await Promise.resolve().then(() => (init_studio_reel(), studio_reel_exports));
-          const out2 = resolve51(str8(flags.out) ?? join64(dir, ".himi", "making-of.html"));
+          const out2 = resolve52(str8(flags.out) ?? join64(dir, ".himi", "making-of.html"));
           const { html, plan } = buildReel2(dir);
           mkdirSync32(dirname36(out2), { recursive: true });
           writeFileSync29(out2, html);
@@ -74444,7 +74681,7 @@ ${doNow.map((l) => `  ${l}`).join("\n")}`);
             openUrl2(url2);
           }
           const handover = { file: out2, hint: `hand ${basename17(out2)} to the owner at the handover \u2014 one self-contained page of their app taking shape; send it beside the preview link, never instead of it` };
-          const report2 = {
+          const report3 = {
             ok: true,
             file: out2,
             url: url2,
@@ -74457,7 +74694,7 @@ ${doNow.map((l) => `  ${l}`).join("\n")}`);
             ...plan.dropped ? { dropped: plan.dropped, note: "pictures were left out to keep the file attachable" } : {},
             ...plan.frames.length === 0 ? { hint: "no screen versions were recorded \u2014 run `himi studio` before building so the board keeps them" } : {}
           };
-          if (flags.json === true || io.isTTY !== true) print(report2);
+          if (flags.json === true || io.isTTY !== true) print(report3);
           else io.log(`The making-of: ${out2}
 ${handover.hint[0].toUpperCase()}${handover.hint.slice(1)}.`);
           return 0;
@@ -74543,10 +74780,10 @@ ${handover.hint[0].toUpperCase()}${handover.hint.slice(1)}.`);
         }
         if (flags.brief === true) {
           const { agentContextNote: agentContextNote2 } = await Promise.resolve().then(() => (init_agent_context(), agent_context_exports));
-          const summary = summarizeProgress2(readProgress2(dir).entries);
+          const summary2 = summarizeProgress2(readProgress2(dir).entries);
           const open = openApprovals2(readApprovals2(dir).events);
           const note = agentContextNote2(dir, cliVersion());
-          io.log(formatBrief2({ appName: appLabel2(dir), isContentPackage, summary, open, ...note ? { agentContextNote: note } : {} }));
+          io.log(formatBrief2({ appName: appLabel2(dir), isContentPackage, summary: summary2, open, ...note ? { agentContextNote: note } : {} }));
           return 0;
         }
         if (!message) {
@@ -74604,9 +74841,9 @@ ${handover.hint[0].toUpperCase()}${handover.hint.slice(1)}.`);
         const sub = pos[1] ?? "audit";
         const dir = contentDir(flags);
         if (sub === "audit") {
-          const report2 = auditUx(dir, flags.strict === true);
-          print(report2);
-          return report2.ok ? 0 : 1;
+          const report3 = auditUx(dir, flags.strict === true);
+          print(report3);
+          return report3.ok ? 0 : 1;
         }
         if (sub !== "record") {
           io.error(JSON.stringify({ error: "ux needs audit | record" }));
@@ -74818,7 +75055,7 @@ ${handover.hint[0].toUpperCase()}${handover.hint.slice(1)}.`);
           }
           const authoringBase = serveBase();
           try {
-            const { report: report2 } = await (deps.browserAuthoring ?? runBrowserAuthoring2)({
+            const { report: report3 } = await (deps.browserAuthoring ?? runBrowserAuthoring2)({
               authoringBase,
               job: {
                 entry: sources.entry,
@@ -74835,10 +75072,10 @@ ${handover.hint[0].toUpperCase()}${handover.hint.slice(1)}.`);
               log: (line) => io.error(line)
             });
             const { afterBrowserTestRun: afterBrowserTestRun2, watchReminder: watchReminder3 } = await Promise.resolve().then(() => (init_milestones(), milestones_exports));
-            const afterRun2 = afterBrowserTestRun2(dir, { screen: screen.screenId, report: report2, boardOpen: boardOpen(dir) });
+            const afterRun2 = afterBrowserTestRun2(dir, { screen: screen.screenId, report: report3, boardOpen: boardOpen(dir) });
             const browserReminder = watchReminder3(dir, { content: str8(flags.content) });
             print({
-              ...report2,
+              ...report3,
               screen: screen.screenId,
               ranIn: "browser",
               liveRequested: jobWix !== void 0,
@@ -74847,7 +75084,7 @@ ${handover.hint[0].toUpperCase()}${handover.hint.slice(1)}.`);
               // Also the envelope's LAST key (`tailLast` keeps it there): an agent may read only the tail.
               ...browserReminder ? { reminder: browserReminder } : {}
             });
-            return report2.ok ? 0 : 1;
+            return report3.ok ? 0 : 1;
           } catch (e) {
             io.error(JSON.stringify({ error: e.message }));
             return 1;
@@ -75193,7 +75430,7 @@ ${[...afterRun.next, ...testReminder ? [testReminder] : []].join("\n")}`);
         const pngTarget = typeof flags.png === "string" ? str8(flags.png) : flags.png === true ? shotPath : void 0;
         if (pngTarget && r.pngBase64) {
           pngFile = writePngFile(pngTarget, r.pngBase64);
-          attestationPngFile = resolve51(pngTarget) === resolve51(shotPath) ? pngFile : writePngFile(shotPath, r.pngBase64);
+          attestationPngFile = resolve52(pngTarget) === resolve52(shotPath) ? pngFile : writePngFile(shotPath, r.pngBase64);
         }
         if (renderWidth !== void 0 && r.renderable) {
           recordRenderWidth(dir, {
@@ -75285,23 +75522,23 @@ ${[...afterRun.next, ...testReminder ? [testReminder] : []].join("\n")}`);
           return 2;
         }
         const { kitReport: kitReport2 } = await Promise.resolve().then(() => (init_design_kits(), design_kits_exports));
-        const report2 = kitReport2(pos[2]);
-        print(report2);
-        return report2.ok ? 0 : 1;
+        const report3 = kitReport2(pos[2]);
+        print(report3);
+        return report3.ok ? 0 : 1;
       }
       case "fonts": {
         const sub = pos[1];
         const dir = contentDir(flags);
         const { listReport: listReport3, checkReport: checkReport2, addReport: addReport2 } = await Promise.resolve().then(() => (init_fonts(), fonts_exports));
         if (sub === void 0 || sub === "list") {
-          const report2 = listReport3({ licenses: flags.licenses === true });
-          print(report2);
-          return report2.ok ? 0 : 1;
+          const report3 = listReport3({ licenses: flags.licenses === true });
+          print(report3);
+          return report3.ok ? 0 : 1;
         }
         if (sub === "check") {
-          const report2 = await checkReport2(dir);
-          print(report2);
-          return report2.ok ? 0 : 1;
+          const report3 = await checkReport2(dir);
+          print(report3);
+          return report3.ok ? 0 : 1;
         }
         if (sub === "add") {
           const family = pos[2];
@@ -75309,9 +75546,9 @@ ${[...afterRun.next, ...testReminder ? [testReminder] : []].join("\n")}`);
             print({ ok: false, problems: ["usage: himi fonts add <Family>"] });
             return 2;
           }
-          const report2 = addReport2(dir, family);
-          print(report2);
-          return report2.ok ? 0 : 1;
+          const report3 = addReport2(dir, family);
+          print(report3);
+          return report3.ok ? 0 : 1;
         }
         print({ ok: false, problems: [`unknown subcommand "${sub}"`], hint: "himi fonts [list|check|add]" });
         return 2;
@@ -75332,7 +75569,7 @@ ${[...afterRun.next, ...testReminder ? [testReminder] : []].join("\n")}`);
           summarize: summarize4
         } = await Promise.resolve().then(() => (init_icon(), icon_exports));
         const requireVerified = sub === "check";
-        const report2 = async (status, extra = {}) => {
+        const report3 = async (status, extra = {}) => {
           const findings = [
             // Not a store rule, so it is not in byteIssues — but it is the one `himi dist`
             // will refuse, and the point of `check` is to say so before the build does.
@@ -75370,7 +75607,7 @@ ${[...afterRun.next, ...testReminder ? [testReminder] : []].join("\n")}`);
           }
           return blocksRelease2(status, { requireVerified }) ? 1 : 0;
         };
-        if (sub === "status" || sub === "check") return report2(await iconStatus2(dir));
+        if (sub === "status" || sub === "check") return report3(await iconStatus2(dir));
         if (sub === "set") {
           const file = pos[2];
           if (!file) {
@@ -75378,7 +75615,7 @@ ${[...afterRun.next, ...testReminder ? [testReminder] : []].join("\n")}`);
             return 1;
           }
           const res = await installIcon2(dir, file, { derivePlay: true });
-          return report2(res.status, { wrote: res.wrote, normalized: res.normalized, playListingIcon: res.playDerived });
+          return report3(res.status, { wrote: res.wrote, normalized: res.normalized, playListingIcon: res.playDerived });
         }
         if (sub === "from-site") {
           const book = str8(flags.book) ?? ".himi/business-book";
@@ -75393,11 +75630,11 @@ ${[...afterRun.next, ...testReminder ? [testReminder] : []].join("\n")}`);
             return 1;
           }
           const res = await installIcon2(dir, logo, { derivePlay: true });
-          return report2(res.status, { from: logo, wrote: res.wrote, normalized: res.normalized, playListingIcon: res.playDerived });
+          return report3(res.status, { from: logo, wrote: res.wrote, normalized: res.normalized, playListingIcon: res.playDerived });
         }
         if (sub === "generate") {
           const res = await generateIcon2(dir, { glyph: str8(flags.glyph), background: str8(flags.accent), derivePlay: true });
-          return report2(res.status, { wrote: res.wrote });
+          return report3(res.status, { wrote: res.wrote });
         }
         if (sub === "glyphs") {
           const names = glyphNames2();
@@ -75423,9 +75660,9 @@ default (no --glyph): ${DEFAULT_GLYPH2} \u2014 a mark that claims nothing, so th
         const dir = contentDir(flags);
         const { listReport: listReport3, verifyReport: verifyReport2, addAssetPayload: addAssetPayload2, removeAssetPayload: removeAssetPayload2 } = await Promise.resolve().then(() => (init_assets(), assets_exports));
         if (sub === void 0 || sub === "list") {
-          const report2 = listReport3(dir);
-          print(report2);
-          return report2.ok ? 0 : 1;
+          const report3 = listReport3(dir);
+          print(report3);
+          return report3.ok ? 0 : 1;
         }
         if (sub === "verify") {
           const app = str8(flags.app) ?? await appId(dir);
@@ -75434,9 +75671,9 @@ default (no --glyph): ${DEFAULT_GLYPH2} \u2014 a mark that claims nothing, so th
             io.error(JSON.stringify(found));
             return 1;
           }
-          const report2 = verifyReport2(dir, app, found.manifest);
-          print(report2);
-          return report2.ok ? 0 : 1;
+          const report3 = verifyReport2(dir, app, found.manifest);
+          print(report3);
+          return report3.ok ? 0 : 1;
         }
         if (sub === "add" || sub === "rm") {
           const app = str8(flags.app) ?? await appId(dir);
@@ -75529,7 +75766,7 @@ default (no --glyph): ${DEFAULT_GLYPH2} \u2014 a mark that claims nothing, so th
           return 2;
         }
         const renamed = str8(flags.name);
-        const dest = resolve51(str8(flags.out) ?? process.cwd(), renamed ?? wanted);
+        const dest = resolve52(str8(flags.out) ?? process.cwd(), renamed ?? wanted);
         const replace = flags.replace === true;
         const force = replace || flags.force === true;
         const linked = symlinkDestinationIssue(dest);
@@ -75602,7 +75839,7 @@ default (no --glyph): ${DEFAULT_GLYPH2} \u2014 a mark that claims nothing, so th
         let removed = [];
         if (replace) removed = removeStaleSource2(restored, dest);
         else left = staleSourcePaths2(restored, dest);
-        const refused = deniedArchivePaths2(restored);
+        const refused2 = deniedArchivePaths2(restored);
         const written = writeAppSource2(restored, dest);
         const agent = await seedAgentFilesFor(dest, flags, "restore");
         print({
@@ -75613,8 +75850,8 @@ default (no --glyph): ${DEFAULT_GLYPH2} \u2014 a mark that claims nothing, so th
           ...agent,
           ...renamed ? { renamedTo: renamed } : {},
           ...removed.length ? { removed } : {},
-          ...refused.length ? {
-            refused,
+          ...refused2.length ? {
+            refused: refused2,
             refusedNote: "this archive carries paths a restore will not write (the deny-list has grown since it was published) \u2014 they were skipped, not written over"
           } : {},
           // EVERY path, not a count and not a sample: the whole failure was that a hybrid tree
@@ -75698,7 +75935,7 @@ default (no --glyph): ${DEFAULT_GLYPH2} \u2014 a mark that claims nothing, so th
           collect: { lint: true, strict }
         });
         const { navIssues: navIssues2 } = await Promise.resolve().then(() => (init_nav_lint(), nav_lint_exports));
-        const { report: report2, hasErrors } = summarizeLint(declared, bres, outcome, strict, [
+        const { report: report3, hasErrors } = summarizeLint(declared, bres, outcome, strict, [
           ...await cmsIssues(dir, declared, strict, { local: true }),
           ...surfaceIssues(dir, outcome.surfaceNav, strict),
           ...tokenColorIssues(dir),
@@ -75708,7 +75945,7 @@ default (no --glyph): ${DEFAULT_GLYPH2} \u2014 a mark that claims nothing, so th
           ...await navIssues2(dir, strict)
         ]);
         if (hasErrors && !force) {
-          print({ ...report2, pushed: false, hint: "lint found errors \u2014 fix them, or re-run `himi push --force` to publish anyway" });
+          print({ ...report3, pushed: false, hint: "lint found errors \u2014 fix them, or re-run `himi push --force` to publish anyway" });
           return 1;
         }
         const declaredData = await loadDataResourcesQuietly(dir);
@@ -75807,7 +76044,7 @@ default (no --glyph): ${DEFAULT_GLYPH2} \u2014 a mark that claims nothing, so th
             // Reaches here ONLY on the forced path — the refusal above returned otherwise — so
             // this is the override's record, and the case it matters most for is a `failed` drive.
             ux: { evidence: patchUxEvidence, ctx: patchUxContext },
-            lint: report2.counts ?? null,
+            lint: report3.counts ?? null,
             extra: { selector: parsed.selectors.map((s) => "pattern" in s ? `${s.kind}:${s.pattern}` : s.kind) }
           });
         }
@@ -76059,7 +76296,7 @@ default (no --glyph): ${DEFAULT_GLYPH2} \u2014 a mark that claims nothing, so th
           // print a `himi pull` command that answers app_source_not_found later — the worst
           // shape for a backup, which is one you are told you have.
           ...sourceSummary ? sourceStored === true ? { source: { ...sourceSummary, restore: `himi pull ${app} --release ${release}` } } : sourceStored === false ? { source: { ...sourceSummary, archived: false, note: "this serve target cannot store source archives, so this release cannot be restored with `himi pull`" } } : { source: { ...sourceSummary, archived: "unconfirmed", note: `this serve target did not report whether it stored the source (it may predate the field). Verify with \`himi pull ${app} --release ${release}\` before relying on it.` } } : { source: { archived: false, note: "pushed with --no-source \u2014 this release cannot be restored with `himi pull`" } },
-          lint: report2.counts,
+          lint: report3.counts,
           // A push ships content, not backends. If the app declares CMS
           // collections, say so and point at the verbs — but never mutate the
           // site as a side effect of publishing a release.
@@ -76091,7 +76328,7 @@ default (no --glyph): ${DEFAULT_GLYPH2} \u2014 a mark that claims nothing, so th
             nondeterministicWorkers: drifting
           }),
           ...loopbackWarning ? { warning: loopbackWarning } : {},
-          ...report2.issues ? { issues: report2.issues } : {},
+          ...report3.issues ? { issues: report3.issues } : {},
           previewWeb: base ? previewWebUrl(base, app, release, void 0, void 0, previewToken, previewHandover) : null,
           // A timestamp alone leaves the reader to work out both how long they have and how to
           // get another one. Print the duration and the re-mint command beside it (#2502 item 3).
@@ -76188,7 +76425,7 @@ default (no --glyph): ${DEFAULT_GLYPH2} \u2014 a mark that claims nothing, so th
             return 2;
           }
           try {
-            const res = writePack(resolve51(releaseDir), only, resolve51(str8(flags.out) ?? process.cwd()));
+            const res = writePack(resolve52(releaseDir), only, resolve52(str8(flags.out) ?? process.cwd()));
             print({
               ok: true,
               app: res.app,
@@ -76244,7 +76481,7 @@ default (no --glyph): ${DEFAULT_GLYPH2} \u2014 a mark that claims nothing, so th
           collect: { lint: true, strict }
         });
         const { navIssues: navIssues2 } = await Promise.resolve().then(() => (init_nav_lint(), nav_lint_exports));
-        const { report: report2, hasErrors } = summarizeLint(app, bres, outcome, strict, [
+        const { report: report3, hasErrors } = summarizeLint(app, bres, outcome, strict, [
           ...await cmsIssues(dir, app, strict, { local: true }),
           ...surfaceIssues(dir, outcome.surfaceNav, strict),
           ...tokenColorIssues(dir),
@@ -76255,11 +76492,11 @@ default (no --glyph): ${DEFAULT_GLYPH2} \u2014 a mark that claims nothing, so th
         ]);
         if (hasErrors && !force) {
           rmSync15(built, { recursive: true, force: true });
-          print({ ...report2, packed: false, hint: "lint found errors \u2014 fix them, or re-run `himi pack --force` to pack anyway" });
+          print({ ...report3, packed: false, hint: "lint found errors \u2014 fix them, or re-run `himi pack --force` to pack anyway" });
           return 1;
         }
         try {
-          const res = writePack(built, app, resolve51(str8(flags.out) ?? dir), sourceArchive);
+          const res = writePack(built, app, resolve52(str8(flags.out) ?? dir), sourceArchive);
           print({
             ok: true,
             app: res.app,
@@ -76269,12 +76506,12 @@ default (no --glyph): ${DEFAULT_GLYPH2} \u2014 a mark that claims nothing, so th
             entries: res.entryCount,
             format,
             launchMode,
-            lint: report2.counts,
+            lint: report3.counts,
             contents: withSource ? "dev" : "release",
             ...sourceSummary ? { source: sourceSummary } : {},
             ...res.skipped.length ? { skipped: res.skipped } : {},
             ...hasErrors && force ? { forcedPastErrors: true } : {},
-            ...report2.issues ? { issues: report2.issues } : {},
+            ...report3.issues ? { issues: report3.issues } : {},
             open: [
               ...withSource ? [`himi import ${res.out}`] : [],
               `himi run ${res.out}`,
@@ -76304,7 +76541,7 @@ default (no --glyph): ${DEFAULT_GLYPH2} \u2014 a mark that claims nothing, so th
         const { HIMI_PACKAGE_SOURCE_PATH: HIMI_PACKAGE_SOURCE_PATH2, isSafeAppId: isSafeAppId2, packageContents: packageContents2 } = await Promise.resolve().then(() => (init_himi_package(), himi_package_exports));
         let opened;
         try {
-          opened = openPackageFile2(resolve51(file));
+          opened = openPackageFile2(resolve52(file));
         } catch (e) {
           io.error(JSON.stringify({ error: e.message }));
           return 1;
@@ -76317,7 +76554,7 @@ default (no --glyph): ${DEFAULT_GLYPH2} \u2014 a mark that claims nothing, so th
           io.error(JSON.stringify({
             ok: false,
             error: "app_source_not_in_package",
-            detail: `${resolve51(file)} is a release package: it carries built output (screens, bundles, tokens) and no source`,
+            detail: `${resolve52(file)} is a release package: it carries built output (screens, bundles, tokens) and no source`,
             hint: "re-pack it from the content package with `himi pack --dev`, or restore from the serve plane with `himi pull <app>`"
           }));
           return 1;
@@ -76340,7 +76577,7 @@ default (no --glyph): ${DEFAULT_GLYPH2} \u2014 a mark that claims nothing, so th
             return 1;
           }
         }
-        const dest = resolve51(str8(flags.out) ?? process.cwd(), renamed ?? opened.header.app);
+        const dest = resolve52(str8(flags.out) ?? process.cwd(), renamed ?? opened.header.app);
         const issue2 = restoreDestinationIssue(dest, flags.force === true);
         if (issue2) {
           io.error(JSON.stringify(issue2));
@@ -76379,7 +76616,7 @@ default (no --glyph): ${DEFAULT_GLYPH2} \u2014 a mark that claims nothing, so th
           return 1;
         }
         const left = staleSourcePaths2(restored, dest);
-        const refused = deniedArchivePaths2(restored);
+        const refused2 = deniedArchivePaths2(restored);
         const written = writeAppSource2(restored, dest);
         const agent = await seedAgentFilesFor(dest, flags, "restore");
         print({
@@ -76390,8 +76627,8 @@ default (no --glyph): ${DEFAULT_GLYPH2} \u2014 a mark that claims nothing, so th
           files: written.length,
           ...agent,
           ...renamed ? { renamedTo: renamed } : {},
-          ...refused.length ? {
-            refused,
+          ...refused2.length ? {
+            refused: refused2,
             refusedNote: "this package carries paths a restore will not write (the deny-list has grown since it was packed) \u2014 they were skipped, not written over"
           } : {},
           ...left.length ? {
@@ -76427,7 +76664,7 @@ default (no --glyph): ${DEFAULT_GLYPH2} \u2014 a mark that claims nothing, so th
         }
         try {
           const { openPackageFile: openPackageFile2 } = await Promise.resolve().then(() => (init_pack(), pack_exports));
-          const opened = openPackageFile2(resolve51(file));
+          const opened = openPackageFile2(resolve52(file));
           if (!opened.validation.ok || !opened.header) {
             io.error(JSON.stringify({ error: "refusing to share an invalid package", issues: opened.validation.errors }));
             return 1;
@@ -76437,12 +76674,12 @@ default (no --glyph): ${DEFAULT_GLYPH2} \u2014 a mark that claims nothing, so th
             io.error(JSON.stringify({
               ok: false,
               error: "refusing to share a package that carries the app's source",
-              detail: `${resolve51(file)} was packed with --dev, and a share link is public and unauthenticated \u2014 anyone with the URL could \`himi import\` your codebase`,
+              detail: `${resolve52(file)} was packed with --dev, and a share link is public and unauthenticated \u2014 anyone with the URL could \`himi import\` your codebase`,
               hint: "share a release package instead (`himi pack` with no --dev), or hand the dev package over directly"
             }));
             return 1;
           }
-          const archive = readFileSync79(resolve51(file));
+          const archive = readFileSync79(resolve52(file));
           const result = await client2().createPackageShare({
             app: opened.header.app,
             releaseId: opened.header.releaseId,
@@ -76581,9 +76818,9 @@ default (no --glyph): ${DEFAULT_GLYPH2} \u2014 a mark that claims nothing, so th
             });
             await announce(run2);
             print({ ok: true, app: run2.app, url: run2.url, port: run2.port, plane: "browser" });
-            await new Promise((resolve52) => {
+            await new Promise((resolve53) => {
               const stop = () => {
-                void retract().catch((e) => io.error(JSON.stringify({ run: "stop_cleanup_failed", message: e.message }))).finally(() => run2.close().finally(() => resolve52()));
+                void retract().catch((e) => io.error(JSON.stringify({ run: "stop_cleanup_failed", message: e.message }))).finally(() => run2.close().finally(() => resolve53()));
               };
               process.once("SIGINT", stop);
               process.once("SIGTERM", stop);
@@ -78623,13 +78860,13 @@ ${label2}`);
           // advertisable for the target this report is about.
           hasOwnerIssuer: (resolved2?.ownerIssue ?? "") !== ""
         });
-        const report2 = buildDoctorReport({ target, version: cliVersion(), data, serve, auth, loginModes, dpxStatus, versions });
-        if (targetError) report2.targetError = targetError;
+        const report3 = buildDoctorReport({ target, version: cliVersion(), data, serve, auth, loginModes, dpxStatus, versions });
+        if (targetError) report3.targetError = targetError;
         const { agentContextStatus: agentContextStatus2 } = await Promise.resolve().then(() => (init_agent_context(), agent_context_exports));
         const agentContext = agentContextStatus2(contentDir(flags), cliVersion());
-        if (agentContext) report2.agentContext = agentContext;
+        if (agentContext) report3.agentContext = agentContext;
         if (flags.json === true) {
-          print(report2);
+          print(report3);
           return 0;
         }
         const mark = (r) => r.reachable ? `reachable${r.status ? ` [${r.status}]` : ""}` : `UNREACHABLE${r.error ? ` (${r.error})` : ""}`;
@@ -78639,7 +78876,7 @@ ${label2}`);
         io.log(`               ${mark(data)}`);
         io.log(`  serve plane  ${serveUrl || "(no serve url)"}`);
         io.log(`               ${mark(serve)}`);
-        const serveCode = report2.servePlane.code;
+        const serveCode = report3.servePlane.code;
         if (serveCode) io.log(`               ${serveCode}: ${serveUnreachableHint(target)}`);
         io.log(`  auth         dpx session: ${auth.dpxSession ? "yes" : "no"}   control token: ${auth.controlToken ? "yes" : controlHostRefused ? "REFUSED" : auth.controlTokenPresent ? "STALE" : "no"}`);
         if (auth.controlTokenHint) io.log(`               ${auth.controlTokenHint}`);
@@ -78662,7 +78899,7 @@ ${label2}`);
         }
         io.log(
           `
-${report2.ok ? "OK \u2014 data + serve plane reachable." : typeof report2.hint === "string" && report2.hint ? report2.hint : serve.reachable ? "Data plane unreachable \u2014 check basic connectivity." : serveUnreachableHint(target)}`
+${report3.ok ? "OK \u2014 data + serve plane reachable." : typeof report3.hint === "string" && report3.hint ? report3.hint : serve.reachable ? "Data plane unreachable \u2014 check basic connectivity." : serveUnreachableHint(target)}`
         );
         return 0;
       }
@@ -78775,9 +79012,9 @@ ${report2.ok ? "OK \u2014 data + serve plane reachable." : typeof report2.hint =
         }
         const scope = { app, siteId: site, environment: environment2 };
         try {
-          const report2 = sub === "plan" ? await planData({ scope, data, kv, call }) : sub === "create" ? await createData({ scope, data, kv, call, dryRun: flags["dry-run"] === true }) : await seedData({ scope, data, kv, call, dir, dryRun: flags["dry-run"] === true, force: flags.force === true });
-          print(report2);
-          return report2.ok ? 0 : 1;
+          const report3 = sub === "plan" ? await planData({ scope, data, kv, call }) : sub === "create" ? await createData({ scope, data, kv, call, dryRun: flags["dry-run"] === true }) : await seedData({ scope, data, kv, call, dir, dryRun: flags["dry-run"] === true, force: flags.force === true });
+          print(report3);
+          return report3.ok ? 0 : 1;
         } catch (error) {
           io.error(JSON.stringify({ error: error.message, app, site, environment: environment2, hint: "run `himi data plan` to re-read actual state before retrying" }));
           return 1;
@@ -78792,6 +79029,14 @@ ${report2.ok ? "OK \u2014 data + serve plane reachable." : typeof report2.hint =
           const { runNotifySetup: runNotifySetup2 } = await Promise.resolve().then(() => (init_notify_setup(), notify_setup_exports));
           return runNotifySetup2(pos, flags, io);
         }
+        if (pos[1] === "send" && flags.provider !== void 0) {
+          if (flags.provider !== "ping") {
+            io.error(JSON.stringify({ ok: false, error: "unknown_provider", hint: "The hosted sender is --provider ping." }));
+            return 2;
+          }
+          const { runNotifyPing: runNotifyPing2 } = await Promise.resolve().then(() => (init_notify_ping(), notify_ping_exports));
+          return runNotifyPing2(flags, io);
+        }
         const { runNotify: runNotify2 } = await Promise.resolve().then(() => (init_notify(), notify_exports));
         return await runNotify2(pos, flags, io);
       case "cms": {
@@ -78850,9 +79095,9 @@ ${report2.ok ? "OK \u2014 data + serve plane reachable." : typeof report2.hint =
           return 2;
         }
         const common = { app, cms, call };
-        let report2;
+        let report3;
         try {
-          report2 = sub === "query" ? await queryCms({ ...common, all: flags.all === true }) : sub === "create" ? await createCms({ ...common, dryRun: flags["dry-run"] === true, allowDestructive: flags["allow-destructive"] === true, applyPermissions: flags["apply-permissions"] === true }) : await seedCms({ ...common, dir, dryRun: flags["dry-run"] === true, force: flags.force === true, only: str8(flags.only) });
+          report3 = sub === "query" ? await queryCms({ ...common, all: flags.all === true }) : sub === "create" ? await createCms({ ...common, dryRun: flags["dry-run"] === true, allowDestructive: flags["allow-destructive"] === true, applyPermissions: flags["apply-permissions"] === true }) : await seedCms({ ...common, dir, dryRun: flags["dry-run"] === true, force: flags.force === true, only: str8(flags.only) });
         } catch (e) {
           const partial = e.partial;
           io.error(JSON.stringify({
@@ -78864,8 +79109,8 @@ ${report2.ok ? "OK \u2014 data + serve plane reachable." : typeof report2.hint =
           }));
           return 1;
         }
-        print({ ...report2, site });
-        return report2.ok ? 0 : 1;
+        print({ ...report3, site });
+        return report3.ok ? 0 : 1;
       }
       case "site": {
         const sub = pos[1];