@wix/himalaya-cli 0.1114.0 → 0.1116.0

package/dist/cli.mjs

@@ -1456,7 +1456,7 @@ function sentinelizeIdentity(body, identity) {
   }
   if (identity.name) {
     const re = new RegExp(`\\b(${NAME_FIELDS.join("|")})(["']?\\s*[:=]\\s*)(["'])${escapeRe(identity.name)}\\3`, "g");
-    out2 = out2.replace(re, (_m, key2, sep17, q) => `${key2}${sep17}${q}__HIMI_APP_NAME__${q}`);
+    out2 = out2.replace(re, (_m, key2, sep18, q) => `${key2}${sep18}${q}__HIMI_APP_NAME__${q}`);
   }
   return out2;
 }
@@ -2513,14 +2513,14 @@ function commitChange(repo, base, branch, rel, body) {
 function runSelfTest() {
   let failed2 = 0;
   for (const testCase of SELF_TEST_CASES) {
-    let ok = false;
+    let ok2 = false;
     let thrown = null;
     try {
-      ok = testCase.run() === true;
+      ok2 = testCase.run() === true;
     } catch (error) {
       thrown = error?.message || String(error);
     }
-    if (ok) {
+    if (ok2) {
       process.stdout.write(`  \u2713 ${testCase.name}
 `);
       continue;
@@ -3742,7 +3742,7 @@ async function mintToken(args, label2, cacheKey, spawnImpl) {
     tokenCache.set(cacheKey, fromEnv);
     return fromEnv;
   }
-  const token = await new Promise((resolve53, reject) => {
+  const token = await new Promise((resolve54, reject) => {
     let child;
     try {
       child = spawnImpl("wix", [...args]);
@@ -3771,12 +3771,12 @@ async function mintToken(args, label2, cacheKey, spawnImpl) {
     child.stdout?.on("data", (d) => {
       out2 += String(d);
       const m = out2.match(TOKEN_RE);
-      if (m) done(() => resolve53(m[0]));
+      if (m) done(() => resolve54(m[0]));
     });
     child.stderr?.on("data", (d) => {
       out2 += String(d);
       const m = out2.match(TOKEN_RE);
-      if (m) done(() => resolve53(m[0]));
+      if (m) done(() => resolve54(m[0]));
     });
     child.on("error", (e) => done(() => reject(new Error(mintHelp(label2, e.message)))));
     child.on("exit", (code) => done(() => reject(new Error(
@@ -3965,8 +3965,8 @@ function committedProvisioningPath(name) {
 function committedShellFor(path2) {
   const normalized = path2.replace(/\\/g, "/");
   return SHELL_NAMES2.find((name) => {
-    const relative14 = committedProvisioningPath(name);
-    return normalized === relative14 || normalized.endsWith(`/${relative14}`);
+    const relative15 = committedProvisioningPath(name);
+    return normalized === relative15 || normalized.endsWith(`/${relative15}`);
   });
 }
 function isBrandable(repoRoot2, name) {
@@ -4486,7 +4486,7 @@ function confinementPlugin(contentRoot) {
 }
 function assertConfinedTsconfig(entry, contentRoot, allows) {
   const seen = /* @__PURE__ */ new Set();
-  const refuse5 = (p, why) => {
+  const refuse6 = (p, why) => {
     throw new Error(
       `refused to read ${p}: ${why}. A tsconfig may extend a file from its own package or an installed dependency \u2014 nothing else.`
     );
@@ -4552,7 +4552,7 @@ function assertConfinedTsconfig(entry, contentRoot, allows) {
         try {
           manifest = JSON.parse(stripJsonc(readFileSync10(pj, "utf8")));
         } catch {
-          refuse5(pj, "its package.json could not be parsed, so its `tsconfig` field cannot be checked");
+          refuse6(pj, "its package.json could not be parsed, so its `tsconfig` field cannot be checked");
         }
         const field = manifest?.tsconfig;
         if (typeof field === "string" && field) {
@@ -4568,7 +4568,7 @@ function assertConfinedTsconfig(entry, contentRoot, allows) {
     const real = realpathOrSelf(file);
     if (seen.has(real)) return;
     seen.add(real);
-    if (!allows(real)) refuse5(file, "it is outside this content package");
+    if (!allows(real)) refuse6(file, "it is outside this content package");
     let raw;
     try {
       raw = readFileSync10(real, "utf8");
@@ -4579,7 +4579,7 @@ function assertConfinedTsconfig(entry, contentRoot, allows) {
     try {
       parsed = JSON.parse(stripJsonc(raw));
     } catch {
-      refuse5(file, "its tsconfig could not be parsed, so its `extends` cannot be checked");
+      refuse6(file, "its tsconfig could not be parsed, so its `extends` cannot be checked");
     }
     const ext = parsed?.extends;
     for (const one of Array.isArray(ext) ? ext : ext ? [ext] : []) {
@@ -8472,8 +8472,8 @@ function textOf(node) {
 function plainText(node) {
   if (typeOf(node) === "TEXT") return str(at(node, "textData", "text"));
   const children = kids(node).filter(isObj);
-  const sep17 = children.every((c) => typeOf(c) === "TEXT") ? "" : "\n";
-  return children.map(plainText).join(sep17);
+  const sep18 = children.every((c) => typeOf(c) === "TEXT") ? "" : "\n";
+  return children.map(plainText).join(sep18);
 }
 function alignOf(v) {
   switch (v) {
@@ -14806,8 +14806,8 @@ function matchWeightCss(available, desired) {
   const upFrom = (n) => sorted2.find((w) => w >= n);
   const downFrom = (n) => [...sorted2].reverse().find((w) => w <= n);
   if (desired >= 400 && desired <= 500) {
-    const within = sorted2.find((w) => w >= desired && w <= 500);
-    return within ?? downFrom(desired) ?? upFrom(desired);
+    const within2 = sorted2.find((w) => w >= desired && w <= 500);
+    return within2 ?? downFrom(desired) ?? upFrom(desired);
   }
   if (desired < 400) return downFrom(desired) ?? upFrom(desired);
   return upFrom(desired) ?? downFrom(desired);
@@ -15930,29 +15930,29 @@ function matchRuleEx(rules, method, path2, ctx = {}) {
     }
     if (m.query) {
       const q = ctx.query ?? {};
-      let ok = true;
+      let ok2 = true;
       for (const [k, v] of Object.entries(m.query)) {
         if (q[k] !== v) {
-          ok = false;
+          ok2 = false;
           break;
         }
         captures[`query.${k}`] = q[k];
       }
-      if (!ok) continue;
+      if (!ok2) continue;
       for (const [k, v] of Object.entries(q)) captures[`query.${k}`] = v;
     } else if (ctx.query) {
       for (const [k, v] of Object.entries(ctx.query)) captures[`query.${k}`] = v;
     }
     if (m.headers) {
       const hh = lc(ctx.headers);
-      let ok = true;
+      let ok2 = true;
       for (const [k, v] of Object.entries(m.headers)) {
         if (hh[k.toLowerCase()] !== v) {
-          ok = false;
+          ok2 = false;
           break;
         }
       }
-      if (!ok) continue;
+      if (!ok2) continue;
     }
     if (m.bodyContains && !(ctx.body ?? "").includes(m.bodyContains)) continue;
     return { rule: r, captures };
@@ -18574,11 +18574,11 @@ function appleScriptString(s) {
 function runNotifier(cmd, args) {
   return new Promise((done) => {
     let settled = false;
-    const finish2 = (ok) => {
+    const finish2 = (ok2) => {
       if (!settled) {
         settled = true;
         clearTimeout(timer);
-        done(ok);
+        done(ok2);
       }
     };
     const child = spawn3(cmd, args, { stdio: "ignore" });
@@ -19465,10 +19465,10 @@ var init_preview = __esm({
         }
       },
       kill: (pid, signal) => process.kill(pid, signal),
-      portFree: (port) => new Promise((resolve53) => {
+      portFree: (port) => new Promise((resolve54) => {
         const s = createServer2();
-        s.once("error", () => resolve53(false));
-        s.listen(port, "127.0.0.1", () => s.close(() => resolve53(true)));
+        s.once("error", () => resolve54(false));
+        s.listen(port, "127.0.0.1", () => s.close(() => resolve54(true)));
       }),
       sleep: (ms) => new Promise((r) => setTimeout(r, ms)),
       servingIdentity: async (origin) => {
@@ -20612,7 +20612,7 @@ async function injectRequest(listener, request) {
   req.headers.host ??= url.host;
   if (body && body.length > 0) req.push(body);
   req.push(null);
-  return await new Promise((resolve53, reject) => {
+  return await new Promise((resolve54, reject) => {
     const streamed = () => {
       queueMicrotask(() => {
         req.emit("close");
@@ -20628,7 +20628,7 @@ async function injectRequest(listener, request) {
         else headers2.set(name, value);
       }
       const bodyless = out2.status === 204 || out2.status === 304 || request.method === "HEAD";
-      resolve53(new Response(bodyless ? null : out2.body, { status: out2.status, headers: headers2 }));
+      resolve54(new Response(bodyless ? null : out2.body, { status: out2.status, headers: headers2 }));
     }, streamed);
     res.on("inject-error", reject);
     try {
@@ -21334,7 +21334,7 @@ function redactBodyString(body) {
     } catch {
     }
   }
-  return body.replace(FORM_ASSIGNMENT_RE, (m, name) => isSensitiveBodyName(name) ? `${name}=${REDACTED}` : m).replace(JSON_FIELD_RE, (m, name, sep17) => isSensitiveBodyName(name) ? `"${name}"${sep17}"${REDACTED}"` : m).replace(JSON_FIELD_UNTERMINATED_RE, (m, name, sep17) => isSensitiveBodyName(name) ? `"${name}"${sep17}"${REDACTED}` : m).replace(BEARER_RE, (_m, s) => `${s} ${REDACTED}`);
+  return body.replace(FORM_ASSIGNMENT_RE, (m, name) => isSensitiveBodyName(name) ? `${name}=${REDACTED}` : m).replace(JSON_FIELD_RE, (m, name, sep18) => isSensitiveBodyName(name) ? `"${name}"${sep18}"${REDACTED}"` : m).replace(JSON_FIELD_UNTERMINATED_RE, (m, name, sep18) => isSensitiveBodyName(name) ? `"${name}"${sep18}"${REDACTED}` : m).replace(BEARER_RE, (_m, s) => `${s} ${REDACTED}`);
 }
 function createWixGatewayState() {
   return { mode: "record", rules: [], traffic: [], clients: /* @__PURE__ */ new Set(), seq: 0, ruleSeq: 0 };
@@ -23080,10 +23080,10 @@ function recordDeviceLayout(payload) {
 }
 async function handleDeviceLayoutReport(res, payload) {
   const screenId = recordDeviceLayout(payload);
-  const ok = screenId !== null;
-  res.statusCode = ok ? 200 : 400;
+  const ok2 = screenId !== null;
+  res.statusCode = ok2 ? 200 : 400;
   res.setHeader("content-type", "application/json");
-  res.end(JSON.stringify(ok ? { status: "ok", screenId } : { error: "invalid_layout" }));
+  res.end(JSON.stringify(ok2 ? { status: "ok", screenId } : { error: "invalid_layout" }));
   return screenId;
 }
 async function handlePreviewHitTest(res, payload) {
@@ -23162,12 +23162,12 @@ function finalizeRecording(key2, rec) {
   if (rec.finalize) return rec.finalize;
   rec.finalize = (async () => {
     clearTimeout(rec.autoStop);
-    await new Promise((resolve53) => {
+    await new Promise((resolve54) => {
       let done = false;
       const finish2 = () => {
         if (!done) {
           done = true;
-          resolve53();
+          resolve54();
         }
       };
       rec.child.once("close", finish2);
@@ -23278,7 +23278,7 @@ var init_preview2 = __esm({
     DEVICE_LIST_TIMEOUT_MS = 5e3;
     defaultRunner2 = {
       capture(cmd, args, timeoutMs = DEFAULT_CAPTURE_TIMEOUT_MS) {
-        return new Promise((resolve53, reject) => {
+        return new Promise((resolve54, reject) => {
           const child = spawn4(cmd, args, { stdio: ["ignore", "pipe", "pipe"] });
           const out2 = [];
           const err = [];
@@ -23300,7 +23300,7 @@ var init_preview2 = __esm({
           child.stderr.on("data", (b) => err.push(b));
           child.on("error", (e) => settle(reject, e));
           child.on("close", (code) => {
-            if (code === 0) settle(resolve53, Buffer.concat(out2));
+            if (code === 0) settle(resolve54, Buffer.concat(out2));
             else settle(reject, new Error(`${cmd} exited ${code}: ${Buffer.concat(err).toString("utf8")}`));
           });
         });
@@ -24632,13 +24632,13 @@ function validate(rule, rawValue) {
     return { rule: "type", type: rule.type };
   }
   if (rule.regex) {
-    let ok;
+    let ok2;
     try {
-      ok = new RegExp(`^(?:${rule.regex})$`).test(value);
+      ok2 = new RegExp(`^(?:${rule.regex})$`).test(value);
     } catch {
-      ok = true;
+      ok2 = true;
     }
-    if (!ok) return { rule: "regex" };
+    if (!ok2) return { rule: "regex" };
   }
   if (typeof rule.minLength === "number" && rule.minLength > 0 && value.length < rule.minLength) {
     return { rule: "minLength", limit: rule.minLength };
@@ -27552,12 +27552,12 @@ function createRicosHostSession(o) {
     flush() {
       if (!state.ready || state.unavailable || disposed) return Promise.resolve(null);
       const requestId2 = newId();
-      return new Promise((resolve53) => {
+      return new Promise((resolve54) => {
         const timer = t.setTimeout(() => {
           flushes.delete(requestId2);
-          resolve53(null);
+          resolve54(null);
         }, flushMs);
-        flushes.set(requestId2, { resolve: resolve53, timer });
+        flushes.set(requestId2, { resolve: resolve54, timer });
         o.send({ v: 1, type: "requestContent", requestId: requestId2 });
       });
     },
@@ -27610,7 +27610,7 @@ async function runRicosImageUpload(o) {
   };
   session.insertMediaPlaceholder(requestId2);
   try {
-    const entry = await new Promise((resolve53) => {
+    const entry = await new Promise((resolve54) => {
       let done = false;
       let unsub = () => {
       };
@@ -27619,7 +27619,7 @@ async function runRicosImageUpload(o) {
         done = true;
         t.clearTimeout(timer);
         queueMicrotask(() => unsub());
-        resolve53(v);
+        resolve54(v);
       };
       const timer = t.setTimeout(() => finish2(null), o.timeoutMs ?? RICOS_UPLOAD_TIMEOUT_MS);
       unsub = deps.subscribe(`${svc}.uploads.${requestId2}`, (v) => {
@@ -27638,10 +27638,10 @@ async function runRicosImageUpload(o) {
     } catch {
       return fail2("read");
     }
-    const sep17 = entry.uploadUrl.includes("?") ? "&" : "?";
+    const sep18 = entry.uploadUrl.includes("?") ? "&" : "?";
     let res;
     try {
-      res = await deps.fetch(`${entry.uploadUrl}${sep17}filename=${encodeURIComponent(file.fileName)}`, { method: "PUT", headers: { "Content-Type": file.mimeType }, body });
+      res = await deps.fetch(`${entry.uploadUrl}${sep18}filename=${encodeURIComponent(file.fileName)}`, { method: "PUT", headers: { "Content-Type": file.mimeType }, body });
     } catch {
       return fail2("put");
     }
@@ -27656,14 +27656,14 @@ async function runRicosImageUpload(o) {
     const d = root.file && typeof root.file === "object" ? root.file : root;
     const id = typeof d.id === "string" ? d.id : "";
     if (!id) return fail2("bad_descriptor");
-    const ok = session.resolveMedia(requestId2, {
+    const ok2 = session.resolveMedia(requestId2, {
       id,
       url: typeof d.url === "string" ? d.url : "",
       ...typeof d.width === "number" ? { width: d.width } : {},
       ...typeof d.height === "number" ? { height: d.height } : {},
       mimeType: file.mimeType
     });
-    return ok ? { ok: true, mediaId: id } : { ok: false, reason: "bad_descriptor" };
+    return ok2 ? { ok: true, mediaId: id } : { ok: false, reason: "bad_descriptor" };
   } finally {
     deps.dispatch({ actionId: `tier5.${svc}.clearUpload`, args: { requestId: requestId2 } });
   }
@@ -29550,8 +29550,8 @@ function ensureCountUpRuntime() {
     const neg = fixed.startsWith("-");
     const body = neg ? fixed.slice(1) : fixed;
     const [int2, frac] = body.split(".");
-    const sep17 = int2.replace(/\B(?=(\d{3})+(?!\d))/g, ",");
-    return (neg ? "-" : "") + sep17 + (frac ? "." + frac : "");
+    const sep18 = int2.replace(/\B(?=(\d{3})+(?!\d))/g, ",");
+    return (neg ? "-" : "") + sep18 + (frac ? "." + frac : "");
   };
   const animateEl = (el) => {
     const node = el;
@@ -30372,24 +30372,24 @@ function usesSchematicRoute(props) {
   const hasRouteFeed = typeof props.routePath === "string" && props.routePath !== "";
   return hasFeed && !hasRoute && !hasRouteFeed;
 }
-function longitudeAt(x, z2) {
-  return x / (TILE_PX * Math.pow(2, z2)) * 360 - 180;
+function longitudeAt(x, z3) {
+  return x / (TILE_PX * Math.pow(2, z3)) * 360 - 180;
 }
-function latitudeAt(y, z2) {
-  const n = Math.PI - 2 * Math.PI * y / (TILE_PX * Math.pow(2, z2));
+function latitudeAt(y, z3) {
+  const n = Math.PI - 2 * Math.PI * y / (TILE_PX * Math.pow(2, z3));
   return 180 / Math.PI * Math.atan(Math.sinh(n));
 }
-function regionArgs(centerLat, centerLng, z2, w, h) {
-  const cx = mercatorX(centerLng, z2);
-  const cy = mercatorY(centerLat, z2);
+function regionArgs(centerLat, centerLng, z3, w, h) {
+  const cx = mercatorX(centerLng, z3);
+  const cy = mercatorY(centerLat, z3);
   return {
     latitude: centerLat,
     longitude: centerLng,
-    zoom: z2,
-    north: latitudeAt(cy - h / 2, z2),
-    south: latitudeAt(cy + h / 2, z2),
-    east: longitudeAt(cx + w / 2, z2),
-    west: longitudeAt(cx - w / 2, z2)
+    zoom: z3,
+    north: latitudeAt(cy - h / 2, z3),
+    south: latitudeAt(cy + h / 2, z3),
+    east: longitudeAt(cx + w / 2, z3),
+    west: longitudeAt(cx - w / 2, z3)
   };
 }
 function decodeCamera(v) {
@@ -30419,9 +30419,9 @@ function resolveTileSource(source) {
   const maxZoom = typeof s.maxZoom === "number" && s.maxZoom > 0 ? s.maxZoom : DEFAULT_TILE_MAX_ZOOM;
   return { urlTemplate, attribution, maxZoom };
 }
-function tileUrl(source, z2, x, y) {
-  if (!source) return `https://tile.openstreetmap.org/${z2}/${x}/${y}.png`;
-  return source.urlTemplate.replace("{z}", String(z2)).replace("{x}", String(x)).replace("{y}", String(y));
+function tileUrl(source, z3, x, y) {
+  if (!source) return `https://tile.openstreetmap.org/${z3}/${x}/${y}.png`;
+  return source.urlTemplate.replace("{z}", String(z3)).replace("{x}", String(x)).replace("{y}", String(y));
 }
 function parseShapeKind(raw) {
   const k = typeof raw === "string" ? raw.toLowerCase() : "";
@@ -30438,12 +30438,12 @@ function circleRing(centreLat, centreLng, radiusM, segments = CIRCLE_SEGMENTS) {
     return { latitude: centreLat + dLat * Math.sin(theta), longitude: centreLng + dLng * Math.cos(theta) };
   });
 }
-function distanceToPolylinePx(px, py, points, z2, originX, originY) {
+function distanceToPolylinePx(px, py, points, z3, originX, originY) {
   if (points.length < 2) return null;
   let best = Infinity;
   for (let i = 0; i < points.length - 1; i++) {
-    const ax = mercatorX(points[i].longitude, z2) - originX, ay = mercatorY(points[i].latitude, z2) - originY;
-    const bx = mercatorX(points[i + 1].longitude, z2) - originX, by = mercatorY(points[i + 1].latitude, z2) - originY;
+    const ax = mercatorX(points[i].longitude, z3) - originX, ay = mercatorY(points[i].latitude, z3) - originY;
+    const bx = mercatorX(points[i + 1].longitude, z3) - originX, by = mercatorY(points[i + 1].latitude, z3) - originY;
     const dx = bx - ax, dy = by - ay;
     const lenSq = dx * dx + dy * dy;
     const t = lenSq === 0 ? 0 : ((px - ax) * dx + (py - ay) * dy) / lenSq;
@@ -30453,22 +30453,22 @@ function distanceToPolylinePx(px, py, points, z2, originX, originY) {
   }
   return best;
 }
-function polygonContainsPx(px, py, points, z2, originX, originY) {
+function polygonContainsPx(px, py, points, z3, originX, originY) {
   if (points.length < 3) return false;
   let inside2 = false;
   for (let i = 0, j = points.length - 1; i < points.length; j = i++) {
-    const xi = mercatorX(points[i].longitude, z2) - originX, yi = mercatorY(points[i].latitude, z2) - originY;
-    const xj = mercatorX(points[j].longitude, z2) - originX, yj = mercatorY(points[j].latitude, z2) - originY;
+    const xi = mercatorX(points[i].longitude, z3) - originX, yi = mercatorY(points[i].latitude, z3) - originY;
+    const xj = mercatorX(points[j].longitude, z3) - originX, yj = mercatorY(points[j].latitude, z3) - originY;
     if (yi > py !== yj > py && px < (xj - xi) * (py - yi) / (yj - yi) + xi) inside2 = !inside2;
   }
   return inside2;
 }
-function markerHit(px, py, markers, z2, originX, originY) {
+function markerHit(px, py, markers, z3, originX, originY) {
   let best = null;
   let bestDistance = MARKER_HIT_RADIUS;
   markers.forEach((m, i) => {
-    const dx = mercatorX(m.longitude, z2) - originX - px;
-    const dy = mercatorY(m.latitude, z2) - originY - py;
+    const dx = mercatorX(m.longitude, z3) - originX - px;
+    const dy = mercatorY(m.latitude, z3) - originY - py;
     const d = Math.sqrt(dx * dx + dy * dy);
     if (d <= bestDistance) {
       bestDistance = d;
@@ -30477,22 +30477,22 @@ function markerHit(px, py, markers, z2, originX, originY) {
   });
   return best;
 }
-function mercatorX(lng, z2) {
-  return (lng + 180) / 360 * TILE_PX * Math.pow(2, z2);
+function mercatorX(lng, z3) {
+  return (lng + 180) / 360 * TILE_PX * Math.pow(2, z3);
 }
-function mercatorY(lat, z2) {
+function mercatorY(lat, z3) {
   const s = Math.max(-85.05112878, Math.min(85.05112878, lat)) * Math.PI / 180;
-  return (1 - Math.log(Math.tan(s) + 1 / Math.cos(s)) / Math.PI) / 2 * TILE_PX * Math.pow(2, z2);
+  return (1 - Math.log(Math.tan(s) + 1 / Math.cos(s)) / Math.PI) / 2 * TILE_PX * Math.pow(2, z3);
 }
 function fitZoom(pts, w, h, fallback) {
   if (pts.length < 2 || w <= 0 || h <= 0) return fallback;
   const lats = pts.map((p) => p.latitude), lngs = pts.map((p) => p.longitude);
   const minLa = Math.min(...lats), maxLa = Math.max(...lats);
   const minLo = Math.min(...lngs), maxLo = Math.max(...lngs);
-  for (let z2 = 19; z2 >= 1; z2--) {
-    const dx = Math.abs(mercatorX(maxLo, z2) - mercatorX(minLo, z2));
-    const dy = Math.abs(mercatorY(maxLa, z2) - mercatorY(minLa, z2));
-    if (dx <= w && dy <= h) return z2;
+  for (let z3 = 19; z3 >= 1; z3--) {
+    const dx = Math.abs(mercatorX(maxLo, z3) - mercatorX(minLo, z3));
+    const dy = Math.abs(mercatorY(maxLa, z3) - mercatorY(minLa, z3));
+    if (dx <= w && dy <= h) return z3;
   }
   return 1;
 }
@@ -34611,20 +34611,20 @@ var init_renderNode = __esm({
         const fitted = shouldFit ? fitZoom(all, W - 48, H - 48, declared) : declared;
         const baseLat = all.length && shouldFit ? (Math.min(...all.map((p) => p.latitude)) + Math.max(...all.map((p) => p.latitude))) / 2 : typeof props.latitude === "number" ? props.latitude : 37.7749;
         const baseLng = all.length && shouldFit ? (Math.min(...all.map((p) => p.longitude)) + Math.max(...all.map((p) => p.longitude))) / 2 : typeof props.longitude === "number" ? props.longitude : -122.4194;
-        const z2 = userCam?.z ?? fitted;
+        const z3 = userCam?.z ?? fitted;
         const cLat = userCam?.lat ?? baseLat;
         const cLng = userCam?.lng ?? baseLng;
         React7.useEffect(() => {
-          const resolved2 = resolveCamera(commandedCamera, cLat, cLng, z2);
+          const resolved2 = resolveCamera(commandedCamera, cLat, cLng, z3);
           if (!resolved2) return;
           setUserCam({
             lat: Math.max(-MAX_MERCATOR_LAT, Math.min(MAX_MERCATOR_LAT, resolved2.latitude)),
             lng: resolved2.longitude,
-            z: Math.max(1, Math.min(19, resolved2.zoom ?? z2))
+            z: Math.max(1, Math.min(19, resolved2.zoom ?? z3))
           });
         }, [commandedCamera]);
-        const originX = mercatorX(cLng, z2) - W / 2;
-        const originY = mercatorY(cLat, z2) - H / 2;
+        const originX = mercatorX(cLng, z3) - W / 2;
+        const originY = mercatorY(cLat, z3) - H / 2;
         const interactive = pinsOnly ? props.interactive === true : props.interactive !== false;
         const resolvedTileSource = resolveTileSource(props.tileSource);
         const fireMapEvent = (action, payload) => {
@@ -34642,7 +34642,7 @@ var init_renderNode = __esm({
           const { kx, ky } = layoutScale(el);
           const px = (e.clientX - r.left) * kx - el.clientLeft;
           const py = (e.clientY - r.top) * ky - el.clientTop;
-          const hit = markerHit(px, py, markers, z2, originX, originY);
+          const hit = markerHit(px, py, markers, z3, originX, originY);
           if (hit !== null) {
             const m = markers[hit];
             const payload = { index: hit, latitude: m.latitude, longitude: m.longitude };
@@ -34653,10 +34653,10 @@ var init_renderNode = __esm({
             const shapeIndex = shapes.findIndex((sh) => {
               if (sh.kind === "unknown" || sh.points.length < 2) return false;
               if (sh.kind === "line") {
-                const d2 = distanceToPolylinePx(px, py, sh.points, z2, originX, originY);
+                const d2 = distanceToPolylinePx(px, py, sh.points, z3, originX, originY);
                 return d2 !== null && d2 <= SHAPE_HIT_RADIUS;
               }
-              return polygonContainsPx(px, py, sh.points, z2, originX, originY);
+              return polygonContainsPx(px, py, sh.points, z3, originX, originY);
             });
             if (shapeIndex >= 0 && props.onShapeTap) {
               const sh = shapes[shapeIndex];
@@ -34665,15 +34665,15 @@ var init_renderNode = __esm({
               fireMapEvent(props.onShapeTap, payload);
             } else {
               fireMapEvent(props.onMapTap, {
-                latitude: latitudeAt(originY + py, z2),
-                longitude: longitudeAt(originX + px, z2)
+                latitude: latitudeAt(originY + py, z3),
+                longitude: longitudeAt(originX + px, z3)
               });
             }
           }
         };
         const onPointerDown = (e) => {
           if (!interactive) return;
-          dragRef.current = { x: e.clientX, y: e.clientY, lat: cLat, lng: cLng, z: z2, ...layoutScale(e.currentTarget) };
+          dragRef.current = { x: e.clientX, y: e.clientY, lat: cLat, lng: cLng, z: z3, ...layoutScale(e.currentTarget) };
           dragMovedRef.current = false;
         };
         const onPointerMove = (e) => {
@@ -34697,8 +34697,8 @@ var init_renderNode = __esm({
         const onWheel = (e) => {
           if (!interactive) return;
           e.preventDefault();
-          const next = Math.max(1, Math.min(19, z2 + (e.deltaY < 0 ? 1 : -1)));
-          if (next !== z2) setUserCam({ lat: cLat, lng: cLng, z: next });
+          const next = Math.max(1, Math.min(19, z3 + (e.deltaY < 0 ? 1 : -1)));
+          if (next !== z3) setUserCam({ lat: cLat, lng: cLng, z: next });
         };
         React7.useEffect(() => {
           const action = props.onRegionChange;
@@ -34709,22 +34709,22 @@ var init_renderNode = __esm({
               regionReportedRef.current = true;
               return;
             }
-            fire({ ...action, args: { ...action.args ?? {}, ...regionArgs(cLat, cLng, z2, W, H) } });
+            fire({ ...action, args: { ...action.args ?? {}, ...regionArgs(cLat, cLng, z3, W, H) } });
           }, 250);
           return () => clearTimeout(t);
-        }, [cLat, cLng, z2, W, H, props.onRegionChange]);
-        const sx = (p) => mercatorX(p.longitude, z2) - originX;
-        const sy = (p) => mercatorY(p.latitude, z2) - originY;
+        }, [cLat, cLng, z3, W, H, props.onRegionChange]);
+        const sx = (p) => mercatorX(p.longitude, z3) - originX;
+        const sy = (p) => mercatorY(p.latitude, z3) - originY;
         const accent = C("accentPrimary", "#116DFF");
-        const n = Math.pow(2, z2);
+        const n = Math.pow(2, z3);
         const tiles = [];
         for (let tx = Math.floor(originX / TILE_PX); tx <= Math.floor((originX + W) / TILE_PX); tx++) {
           for (let ty = Math.floor(originY / TILE_PX); ty <= Math.floor((originY + H) / TILE_PX); ty++) {
             if (ty < 0 || ty >= n) continue;
             const wrapX = (tx % n + n) % n;
             tiles.push({
-              key: `${z2}/${wrapX}/${ty}`,
-              src: tileUrl(resolvedTileSource, z2, wrapX, ty),
+              key: `${z3}/${wrapX}/${ty}`,
+              src: tileUrl(resolvedTileSource, z3, wrapX, ty),
               left: tx * TILE_PX - originX,
               top: ty * TILE_PX - originY
             });
@@ -34736,7 +34736,7 @@ var init_renderNode = __esm({
             ref: attachBox,
             "data-map-mode": "tile",
             "data-route-points": route.length,
-            "data-map-zoom": z2,
+            "data-map-zoom": z3,
             onClick: onSurfaceClick,
             onPointerDown,
             onPointerMove,
@@ -35902,7 +35902,7 @@ async function stabilizePngPage(page, scheme) {
     const browser = globalThis;
     browser.document.documentElement.style.colorScheme = selected;
     await browser.document.fonts?.ready;
-    await new Promise((resolve53) => browser.requestAnimationFrame(() => browser.requestAnimationFrame(() => resolve53())));
+    await new Promise((resolve54) => browser.requestAnimationFrame(() => browser.requestAnimationFrame(() => resolve54())));
   }, scheme);
 }
 async function renderPngBatch(items) {
@@ -39543,7 +39543,7 @@ async function handleWebWix(req, res, state) {
       }
       if (match) {
         const mocked = match.rule.response;
-        if (mocked.delayMs) await new Promise((resolve53) => setTimeout(resolve53, mocked.delayMs));
+        if (mocked.delayMs) await new Promise((resolve54) => setTimeout(resolve54, mocked.delayMs));
         const responseBody = mocked.template ? renderTemplate(mocked.body, match.captures) : mocked.body;
         record2("mock", mocked.status, responseBody, match.rule.id, mocked.headers);
         return reply(200, { status: mocked.status, body: responseBody ?? "" });
@@ -40537,8 +40537,8 @@ async function handleActionHandlerBundleGet(res, app) {
 }
 async function serveStatic(req, res, root, prefix) {
   const requested = decodeURIComponent((req.url ?? "").split("?")[0]);
-  const relative14 = requested.replace(prefix, "").replace(/^\//, "");
-  const safe = normalize3(relative14).replace(/^(\.\.[\/\\])+/, "");
+  const relative15 = requested.replace(prefix, "").replace(/^\//, "");
+  const safe = normalize3(relative15).replace(/^(\.\.[\/\\])+/, "");
   const fullPath = resolve33(root, safe);
   if (!fullPath.startsWith(root)) {
     return send(res, 403, "forbidden");
@@ -41269,8 +41269,8 @@ function sha256hex(b) {
 function stableStringify(value) {
   if (value === null || typeof value !== "object") return JSON.stringify(value);
   if (Array.isArray(value)) return "[" + value.map(stableStringify).join(",") + "]";
-  const object2 = value;
-  return "{" + Object.keys(object2).sort().map((key2) => JSON.stringify(key2) + ":" + stableStringify(object2[key2])).join(",") + "}";
+  const object3 = value;
+  return "{" + Object.keys(object3).sort().map((key2) => JSON.stringify(key2) + ":" + stableStringify(object3[key2])).join(",") + "}";
 }
 function manifestContent(m) {
   const {
@@ -41642,12 +41642,12 @@ var init_query = __esm({
 });
 
 // ../../core/dev-server/src/crawl-input.ts
-function resolved(v, resolve53) {
-  if (typeof v === "string") return v.startsWith("$service:") ? resolve53(v) : v;
+function resolved(v, resolve54) {
+  if (typeof v === "string") return v.startsWith("$service:") ? resolve54(v) : v;
   if (Array.isArray(v)) {
     const out2 = v.flatMap((el) => {
       if (typeof el !== "string" || !el.startsWith("$service:")) return [el];
-      const r = resolve53(el);
+      const r = resolve54(el);
       return Array.isArray(r) ? r : [r];
     });
     return out2;
@@ -41661,9 +41661,9 @@ function hasRowBinding(props) {
     return itemToken(v) || Array.isArray(v) && v.some(itemToken);
   });
 }
-function declaredOptionIds(props, resolve53) {
+function declaredOptionIds(props, resolve54) {
   const literal = props.options ?? props.tabs ?? props.chips;
-  const bound = props.optionsPath !== void 0 ? resolved(props.optionsPath, resolve53) : void 0;
+  const bound = props.optionsPath !== void 0 ? resolved(props.optionsPath, resolve54) : void 0;
   const raw = Array.isArray(bound) ? bound : literal;
   if (!Array.isArray(raw)) return [];
   const out2 = [];
@@ -41706,24 +41706,24 @@ function seedTokens(state, limit = 48) {
   walk2(state, 0);
   return out2;
 }
-function synthesizeInput(control, resolve53, tokens) {
+function synthesizeInput(control, resolve54, tokens) {
   const id = `${control.type}.${control.callback}`;
   const row = SYNTHESIZED_CONTROLS[id];
   if (!row) return null;
   const props = control.props;
   if (hasRowBinding(props)) return null;
   if (row.from === "declared-options") {
-    const ids = declaredOptionIds(props, resolve53);
+    const ids = declaredOptionIds(props, resolve54);
     if (!ids.length) return null;
     if (row.encoding === "string-array") {
-      const currentRaw2 = resolved(props.selectedIds, resolve53);
+      const currentRaw2 = resolved(props.selectedIds, resolve54);
       const current3 = (Array.isArray(currentRaw2) ? currentRaw2 : []).filter((x) => typeof x === "string");
       const pick4 = ids.find((o) => !current3.includes(o));
       if (pick4 === void 0) return null;
       const value = props.multiSelect === true ? [...current3, pick4] : [pick4];
       return { key: row.key, value, from: row.from, current: current3, control: id };
     }
-    const currentRaw = resolved(props.selectedId, resolve53);
+    const currentRaw = resolved(props.selectedId, resolve54);
     const current2 = typeof currentRaw === "string" ? currentRaw : void 0;
     const pick3 = ids.find((o) => o !== current2);
     if (pick3 === void 0) return null;
@@ -41731,7 +41731,7 @@ function synthesizeInput(control, resolve53, tokens) {
   }
   if (!acceptsWords(props) || !acceptsWords(control.wrapper ?? {})) return null;
   const binding2 = typeof props.valuePath === "string" ? props.valuePath : typeof props.value === "string" && props.value.startsWith("$service:") ? props.value : void 0;
-  const bound = binding2 === void 0 ? void 0 : resolve53(binding2);
+  const bound = binding2 === void 0 ? void 0 : resolve54(binding2);
   const literal = typeof props.value === "string" && !props.value.startsWith("$") ? props.value : void 0;
   const current = typeof bound === "string" ? bound : typeof bound === "number" ? String(bound) : literal ?? "";
   const max = typeof props.maxLength === "number" && props.maxLength > 0 ? props.maxLength : void 0;
@@ -43216,8 +43216,8 @@ async function crawlScreenInner(opts) {
       if (linkable.has(target)) return true;
       for (const base of linkable) {
         if (target.length > base.length + 1 && target.startsWith(base)) {
-          const sep17 = target[base.length];
-          if (sep17 === "_" || sep17 === "/") return true;
+          const sep18 = target[base.length];
+          if (sep18 === "_" || sep18 === "/") return true;
         }
       }
       return false;
@@ -46244,7 +46244,7 @@ var init_studio_timeline = __esm({
     isStr = (x) => typeof x === "string";
     isObj2 = (x) => typeof x === "object" && x !== null && !Array.isArray(x);
     strs = (x) => Array.isArray(x) && x.every(isStr);
-    nullOr = (x, ok) => x === null || isObj2(x) && ok(x);
+    nullOr = (x, ok2) => x === null || isObj2(x) && ok2(x);
     accentOf = (palette2) => {
       for (const p of palette2 ?? []) {
         const [name, hex2] = Array.isArray(p) ? p : [p.name, p.hex];
@@ -47194,16 +47194,16 @@ function pushSetupBodyBytes(body) {
   return Buffer.byteLength(JSON.stringify(body), "utf8");
 }
 async function pushSetupRequest(options) {
-  const refuse5 = (error) => ({ ok: false, status: 0, body: null, error });
-  if (!options.target.controlToken) return refuse5("control_token_required");
-  if (!options.wixToken) return refuse5("wix_account_token_required");
-  if (credentialHostRefusal(options.target.control)) return refuse5("insecure_target");
-  if (options.previewTag !== void 0 && !PREVIEW_TAG.test(options.previewTag)) return refuse5("invalid_preview_tag");
+  const refuse6 = (error) => ({ ok: false, status: 0, body: null, error });
+  if (!options.target.controlToken) return refuse6("control_token_required");
+  if (!options.wixToken) return refuse6("wix_account_token_required");
+  if (credentialHostRefusal(options.target.control)) return refuse6("insecure_target");
+  if (options.previewTag !== void 0 && !PREVIEW_TAG.test(options.previewTag)) return refuse6("invalid_preview_tag");
   const setup = options.operation === "setup";
-  if (setup && !options.body) return refuse5("push_setup_body_required");
-  if (!setup && (!options.query?.app || !options.query?.site)) return refuse5("push_setup_query_required");
+  if (setup && !options.body) return refuse6("push_setup_body_required");
+  if (!setup && (!options.query?.app || !options.query?.site)) return refuse6("push_setup_query_required");
   if (setup && pushSetupBodyBytes(options.body) > MAX_PUSH_SETUP_BODY_BYTES) {
-    return refuse5("push_setup_body_too_large");
+    return refuse6("push_setup_body_too_large");
   }
   const base = options.target.control.replace(/\/+$/, "");
   let path2 = "/v1/admin/push/setup";
@@ -51021,8 +51021,8 @@ function baseOf(target, linkable, known) {
   let best = null;
   for (const base of linkable ?? []) {
     if (!known.has(base) || target.length <= base.length + 1 || !target.startsWith(base)) continue;
-    const sep17 = target[base.length];
-    if ((sep17 === "_" || sep17 === "/") && (!best || base.length > best.length)) best = base;
+    const sep18 = target[base.length];
+    if ((sep18 === "_" || sep18 === "/") && (!best || base.length > best.length)) best = base;
   }
   return best;
 }
@@ -52263,7 +52263,7 @@ async function pinnedFetch(url, init, addresses, maxResponseBytes) {
   const headers2 = Object.fromEntries(new Headers(init.headers).entries());
   const request = url.protocol === "https:" ? httpsRequest : httpRequest;
   const hostname2 = url.hostname.replace(/^\[|\]$/g, "");
-  return await new Promise((resolve53, reject) => {
+  return await new Promise((resolve54, reject) => {
     let settled = false;
     const finish2 = (fn) => {
       if (settled) return;
@@ -52300,7 +52300,7 @@ async function pinnedFetch(url, init, addresses, maxResponseBytes) {
         }
         const responseHeaders = new Headers();
         for (const [key2, value] of Object.entries(response.headers)) if (value !== void 0) responseHeaders.set(key2, Array.isArray(value) ? value.join(", ") : value);
-        resolve53(new Response(bytes2, { status: response.statusCode, statusText: response.statusMessage, headers: responseHeaders }));
+        resolve54(new Response(bytes2, { status: response.statusCode, statusText: response.statusMessage, headers: responseHeaders }));
       }));
     });
     req.once("error", (error) => finish2(() => reject(error)));
@@ -52600,7 +52600,7 @@ function createLocalTestSandbox() {
           }
         })();
       `;
-      return await new Promise((resolve53, reject) => {
+      return await new Promise((resolve54, reject) => {
         const { port1, port2 } = new MessageChannel();
         const serializableContext = {
           auth: context.auth,
@@ -52676,7 +52676,7 @@ function createLocalTestSandbox() {
             timer = setTimeout(() => finish2(() => reject(new SandboxError("timeout", `execution exceeded ${limits.timeoutMs}ms`))), Math.max(1, limits.timeoutMs));
             return;
           }
-          if (message.ok) finish2(() => resolve53({ value: message.value, durationMs: Date.now() - started }));
+          if (message.ok) finish2(() => resolve54({ value: message.value, durationMs: Date.now() - started }));
           else finish2(() => reject(new SandboxError("execution_failed", message.message ?? "handler failed")));
         });
         worker.once("error", (error) => finish2(() => reject(new SandboxError("execution_failed", error.message))));
@@ -53853,9 +53853,187 @@ var init_cli_bridge = __esm({
   }
 });
 
-// src/mcp/tools.ts
+// src/mcp/file-tools.ts
+import { lstatSync as lstatSync12, mkdirSync as mkdirSync26, readdirSync as readdirSync27, readFileSync as readFileSync59, realpathSync as realpathSync7, rmSync as rmSync12, statSync as statSync13, writeFileSync as writeFileSync21, existsSync as existsSync54 } from "node:fs";
+import { dirname as dirname30, isAbsolute as isAbsolute5, join as join53, relative as relative11, resolve as resolve45, sep as sep14 } from "node:path";
 import * as z from "zod";
-import { resolve as resolve45 } from "node:path";
+function within(root, p) {
+  return p === root || p.startsWith(root.endsWith(sep14) ? root : root + sep14);
+}
+function realish(p) {
+  let cur = p;
+  const tail = [];
+  while (!existsSync54(cur)) {
+    const up = dirname30(cur);
+    if (up === cur) break;
+    tail.unshift(cur.slice(up.length + (up.endsWith(sep14) ? 0 : 1)));
+    cur = up;
+  }
+  return join53(realpathSync7(cur), ...tail);
+}
+async function confinedAppDir(args, deps) {
+  const root = resolve45(await deps.defaultDir());
+  const dir = typeof args.dir === "string" && args.dir ? resolve45(root, args.dir) : root;
+  if (!existsSync54(root)) return refuse4("no_workspace", `the workspace folder ${root} does not exist`);
+  if (!within(realpathSync7(root), realish(dir))) return refuse4("outside_workspace", `"${String(args.dir)}" is outside the workspace folder`);
+  return dir;
+}
+function confinedPath(appDir3, rel) {
+  if (typeof rel !== "string" || !rel.trim()) return { error: "a path is required" };
+  if (rel.includes("\0")) return { error: "a path may not contain NUL" };
+  if (isAbsolute5(rel)) return { error: `"${rel}" is absolute \u2014 give a path inside the app folder` };
+  const abs = resolve45(appDir3, rel);
+  const real = realish(abs);
+  const base = existsSync54(appDir3) ? realpathSync7(appDir3) : realish(appDir3);
+  if (!within(base, real) || real === base) return { error: `"${rel}" is outside the app folder` };
+  const first = relative11(base, real).split(sep14)[0];
+  if (RESERVED.has(first)) return { error: `"${rel}" is inside ${first}/, which this tool does not touch` };
+  return abs;
+}
+function listFiles(appDir3) {
+  const files = [];
+  const walk2 = (d) => {
+    for (const e of readdirSync27(d, { withFileTypes: true }).sort((a, b) => a.name.localeCompare(b.name))) {
+      if (RESERVED.has(e.name)) continue;
+      if (e.isSymbolicLink()) continue;
+      const p = join53(d, e.name);
+      if (e.isDirectory()) {
+        if (!walk2(p)) return false;
+      } else if (e.isFile()) {
+        if (files.length >= MAX_LISTED) return false;
+        files.push({ path: relative11(appDir3, p).split(sep14).join("/"), bytes: statSync13(p).size });
+      }
+    }
+    return true;
+  };
+  const complete = walk2(appDir3);
+  return { files, truncated: !complete };
+}
+function fileTools() {
+  return [
+    {
+      name: "himi_list_apps",
+      title: "List apps in the workspace",
+      description: "The apps (content packages) in the workspace folder: the folder itself if it is one, and each sub-folder that is. Pass an app's `dir` to the other tools.",
+      annotations: { readOnlyHint: true, destructiveHint: false, idempotentHint: true, openWorldHint: false },
+      inputSchema: z.object({}),
+      handler: async (_a, d) => {
+        const root = resolve45(await d.defaultDir());
+        if (!existsSync54(root)) return ok({ ok: true, workspace: root, apps: [] });
+        const apps = [];
+        if (existsSync54(join53(root, CONTENT_MARKER))) apps.push(".");
+        for (const e of readdirSync27(root, { withFileTypes: true })) {
+          if (e.isDirectory() && !e.name.startsWith(".") && existsSync54(join53(root, e.name, CONTENT_MARKER))) apps.push(e.name);
+        }
+        return ok({ ok: true, workspace: root, apps: apps.sort() });
+      }
+    },
+    {
+      name: "himi_list_files",
+      title: "List app files",
+      description: `Every file in an app folder with its size (skips ${[...RESERVED].join(", ")}; at most ${MAX_LISTED}).`,
+      annotations: { readOnlyHint: true, destructiveHint: false, idempotentHint: true, openWorldHint: false },
+      inputSchema: z.object({ dir: DIR }),
+      handler: async (a, d) => {
+        const app = await confinedAppDir(a, d);
+        if (typeof app !== "string") return app;
+        if (!existsSync54(app) || !statSync13(app).isDirectory()) return refuse4("no_app", `no folder at ${app}`);
+        return ok({ ok: true, dir: app, ...listFiles(app) });
+      }
+    },
+    {
+      name: "himi_read_file",
+      title: "Read an app file",
+      description: `One file of an app folder, as UTF-8 text (at most ${MAX_FILE_BYTES / 1024} KiB).`,
+      annotations: { readOnlyHint: true, destructiveHint: false, idempotentHint: true, openWorldHint: false },
+      inputSchema: z.object({ dir: DIR, path: z.string().min(1).describe('Path inside the app folder, e.g. "screens/home.ts".') }),
+      handler: async (a, d) => {
+        const app = await confinedAppDir(a, d);
+        if (typeof app !== "string") return app;
+        const p = confinedPath(app, a.path);
+        if (typeof p !== "string") return refuse4("bad_path", p.error);
+        if (!existsSync54(p) || !lstatSync12(p).isFile()) return refuse4("not_found", `no file "${String(a.path)}"`);
+        const size = statSync13(p).size;
+        if (size > MAX_FILE_BYTES) return refuse4("too_large", `"${String(a.path)}" is ${size} bytes \u2014 over the ${MAX_FILE_BYTES}-byte read limit`);
+        return ok({ ok: true, path: a.path, bytes: size, content: readFileSync59(p, "utf8") });
+      }
+    },
+    {
+      name: "himi_write_files",
+      title: "Write app files",
+      description: `Create or REPLACE files in an app folder (parent folders are created). At most ${MAX_FILES_PER_WRITE} files and ${MAX_FILE_BYTES / 1024} KiB each per call. Nothing is written if any path is refused.`,
+      annotations: WRITE_ANN,
+      inputSchema: z.object({
+        dir: DIR,
+        files: z.array(z.object({ path: z.string().min(1), content: z.string() })).min(1).max(MAX_FILES_PER_WRITE)
+      }),
+      handler: async (a, d) => {
+        const app = await confinedAppDir(a, d);
+        if (typeof app !== "string") return app;
+        const files = Array.isArray(a.files) ? a.files : [];
+        if (!files.length || files.length > MAX_FILES_PER_WRITE) return refuse4("bad_request", `between 1 and ${MAX_FILES_PER_WRITE} files per call`);
+        const planned = [];
+        const refused2 = [];
+        for (const f of files) {
+          const p = confinedPath(app, f.path);
+          if (typeof p !== "string") refused2.push({ path: f.path, error: p.error });
+          else if (typeof f.content !== "string") refused2.push({ path: f.path, error: "content must be text" });
+          else if (Buffer.byteLength(f.content) > MAX_FILE_BYTES) refused2.push({ path: f.path, error: `over the ${MAX_FILE_BYTES}-byte limit` });
+          else if (existsSync54(p) && !lstatSync12(p).isFile()) refused2.push({ path: f.path, error: "not a regular file" });
+          else planned.push({ abs: p, rel: String(f.path), content: f.content });
+        }
+        if (refused2.length) return { ...ok({ ok: false, error: "refused", written: [], refused: refused2 }), isError: true };
+        for (const f of planned) {
+          mkdirSync26(dirname30(f.abs), { recursive: true });
+          writeFileSync21(f.abs, f.content);
+        }
+        return ok({ ok: true, dir: app, written: planned.map((f) => f.rel) });
+      }
+    },
+    {
+      name: "himi_delete_files",
+      title: "Delete app files",
+      description: "Delete files (not folders) from an app folder. Nothing is deleted if any path is refused.",
+      annotations: { ...WRITE_ANN, idempotentHint: false },
+      inputSchema: z.object({ dir: DIR, paths: z.array(z.string().min(1)).min(1).max(MAX_FILES_PER_WRITE) }),
+      handler: async (a, d) => {
+        const app = await confinedAppDir(a, d);
+        if (typeof app !== "string") return app;
+        const paths = Array.isArray(a.paths) ? a.paths : [];
+        const planned = [];
+        const refused2 = [];
+        for (const rel of paths) {
+          const p = confinedPath(app, rel);
+          if (typeof p !== "string") refused2.push({ path: rel, error: p.error });
+          else if (!existsSync54(p)) refused2.push({ path: rel, error: "no such file" });
+          else if (!lstatSync12(p).isFile()) refused2.push({ path: rel, error: "not a regular file" });
+          else planned.push(p);
+        }
+        if (refused2.length) return { ...ok({ ok: false, error: "refused", deleted: [], refused: refused2 }), isError: true };
+        for (const p of planned) rmSync12(p);
+        return ok({ ok: true, dir: app, deleted: paths });
+      }
+    }
+  ];
+}
+var MAX_FILE_BYTES, MAX_FILES_PER_WRITE, MAX_LISTED, RESERVED, CONTENT_MARKER, ok, refuse4, DIR, WRITE_ANN;
+var init_file_tools = __esm({
+  "src/mcp/file-tools.ts"() {
+    MAX_FILE_BYTES = 1024 * 1024;
+    MAX_FILES_PER_WRITE = 100;
+    MAX_LISTED = 2e3;
+    RESERVED = /* @__PURE__ */ new Set([".git", "node_modules", "dist"]);
+    CONTENT_MARKER = "himalaya.content.json";
+    ok = (o) => ({ content: [{ type: "text", text: JSON.stringify(o, null, 2) }] });
+    refuse4 = (error, message) => ({ content: [{ type: "text", text: JSON.stringify({ ok: false, error, message }, null, 2) }], isError: true });
+    DIR = z.string().optional().describe("The app folder, relative to the workspace folder. Default: the workspace folder itself.");
+    WRITE_ANN = { readOnlyHint: false, destructiveHint: true, idempotentHint: true, openWorldHint: false };
+  }
+});
+
+// src/mcp/tools.ts
+import * as z2 from "zod";
+import { resolve as resolve46 } from "node:path";
 function fromCli(r, extra = []) {
   const body = r.json !== void 0 ? JSON.stringify(r.json, null, 2) : r.text.trim();
   const content = [];
@@ -53867,7 +54045,7 @@ ${r.stderr.trim()}`) });
 }
 async function appDir2(args, deps) {
   const base = await deps.defaultDir();
-  return typeof args.dir === "string" && args.dir ? resolve45(base, args.dir) : base;
+  return typeof args.dir === "string" && args.dir ? resolve46(base, args.dir) : base;
 }
 function loginResult(s) {
   switch (s.state) {
@@ -53906,8 +54084,8 @@ function guarded(h) {
     return h(args, deps);
   };
 }
-function himiTools() {
-  return rawTools().map((t) => ({ ...t, handler: guarded(t.handler) }));
+function himiTools(opts = {}) {
+  return [...rawTools(), ...opts.withFiles ? fileTools() : []].map((t) => ({ ...t, handler: guarded(t.handler) }));
 }
 function rawTools() {
   return [
@@ -53916,7 +54094,7 @@ function rawTools() {
       title: "Read a himi authoring guide",
       description: "List the Himalaya authoring guides, or read one by topic id. Offline \u2014 the guides ship with this CLI. Start here before authoring.",
       annotations: LEARN,
-      inputSchema: z.object({ topic: z.string().optional().describe("Guide id (e.g. `headless-loop`). Omit to list every guide.") }),
+      inputSchema: z2.object({ topic: z2.string().optional().describe("Guide id (e.g. `headless-loop`). Omit to list every guide.") }),
       handler: async (a, d) => fromCli(await d.runCli(["docs", ...typeof a.topic === "string" && a.topic ? [a.topic] : [], "--json"]))
     },
     {
@@ -53924,7 +54102,7 @@ function rawTools() {
       title: "SDUI component vocabulary",
       description: "The SDUI component vocabulary and props a descriptor may use; a name returns that one component. Offline.",
       annotations: LEARN,
-      inputSchema: z.object({ name: z.string().optional().describe("One component, e.g. `Button`. Omit for all.") }),
+      inputSchema: z2.object({ name: z2.string().optional().describe("One component, e.g. `Button`. Omit for all.") }),
       handler: async (a, d) => fromCli(await d.runCli(["components", ...typeof a.name === "string" && a.name ? [a.name] : [], "--json"]))
     },
     {
@@ -53932,7 +54110,7 @@ function rawTools() {
       title: "Importable @himalaya SDKs",
       description: "The @himalaya/* SDKs a Tier-5 worker may import; a name returns that SDK's typed API. Offline.",
       annotations: LEARN,
-      inputSchema: z.object({ name: z.string().optional().describe("One SDK, e.g. `state`. Omit for the list.") }),
+      inputSchema: z2.object({ name: z2.string().optional().describe("One SDK, e.g. `state`. Omit for the list.") }),
       handler: async (a, d) => fromCli(await d.runCli(["sdk", ...typeof a.name === "string" && a.name ? [a.name] : [], "--json"]))
     },
     {
@@ -53940,7 +54118,7 @@ function rawTools() {
       title: "Icon name vocabulary",
       description: "The valid Icon.name values. An unknown name renders a fallback glyph and `himi_validate` warns. Offline.",
       annotations: LEARN,
-      inputSchema: z.object({}),
+      inputSchema: z2.object({}),
       handler: async (_a, d) => fromCli(await d.runCli(["icons", "--json"]))
     },
     {
@@ -53948,14 +54126,14 @@ function rawTools() {
       title: "Create a new himi app",
       description: "Scaffold a new content package `<parentDir>/<name>` (optionally from a reference template), with its agent files and this MCP server already configured for Claude Code, Cursor, Codex and VS Code. Refuses a directory that already exists.",
       annotations: LOCAL_WRITE,
-      inputSchema: z.object({
-        name: z.string().min(1).describe("The app name \u2014 also its folder name."),
-        parentDir: z.string().optional().describe("Where to create the folder. Default: the workspace root."),
-        template: z.string().optional().describe("A reference template id (see `himi init --templates` in a terminal).")
+      inputSchema: z2.object({
+        name: z2.string().min(1).describe("The app name \u2014 also its folder name."),
+        parentDir: z2.string().optional().describe("Where to create the folder. Default: the workspace root."),
+        template: z2.string().optional().describe("A reference template id (see `himi init --templates` in a terminal).")
       }),
       handler: async (a, d) => {
         const base = await d.defaultDir();
-        const parent = typeof a.parentDir === "string" && a.parentDir ? resolve45(base, a.parentDir) : base;
+        const parent = typeof a.parentDir === "string" && a.parentDir ? resolve46(base, a.parentDir) : base;
         return fromCli(await d.runCli(["init", String(a.name), "--dir", parent, ...opt("--template", a.template)]));
       }
     },
@@ -53964,7 +54142,7 @@ function rawTools() {
       title: "Build the app's worker bundles",
       description: "Compile every tier5-src/<name>/index.ts to dist/bundles/<name>.bundle.js with esbuild. Writes dist/ only.",
       annotations: LOCAL_WRITE,
-      inputSchema: z.object({ dir: DIR }),
+      inputSchema: z2.object({ dir: DIR2 }),
       handler: async (a, d) => fromCli(await d.runCli(["build", "--content", await appDir2(a, d)]))
     },
     {
@@ -53972,7 +54150,7 @@ function rawTools() {
       title: "Validate the app",
       description: "Lint the content package without publishing: worker type-checking, schema/proto, token refs, the component allowlist, $service bindings. Run before every preview or push.",
       annotations: CHECK,
-      inputSchema: z.object({ dir: DIR, strict: z.boolean().optional().describe("Promote warnings to errors (what a push should pass).") }),
+      inputSchema: z2.object({ dir: DIR2, strict: z2.boolean().optional().describe("Promote warnings to errors (what a push should pass).") }),
       handler: async (a, d) => fromCli(await d.runCli(["validate", "--content", await appDir2(a, d), ...sw("--strict", a.strict)]))
     },
     {
@@ -53980,10 +54158,10 @@ function rawTools() {
       title: "Behavioral crawl",
       description: "The derived behavioral crawl: boots each screen's real worker and dispatches every action its descriptor declares, against the app's mocked network (dev/net-mocks.json). Hermetic \u2014 never reaches live Wix. Catches the wrong-reducer class validate and render pass clean.",
       annotations: CHECK,
-      inputSchema: z.object({
-        dir: DIR,
-        screens: z.array(z.string()).optional().describe("Only these screen ids. Omit for all."),
-        deep: z.boolean().optional().describe("Also follow navigation into the screens actions open.")
+      inputSchema: z2.object({
+        dir: DIR2,
+        screens: z2.array(z2.string()).optional().describe("Only these screen ids. Omit for all."),
+        deep: z2.boolean().optional().describe("Also follow navigation into the screens actions open.")
       }),
       handler: async (a, d) => {
         const screens = Array.isArray(a.screens) ? a.screens.filter((s) => typeof s === "string") : [];
@@ -53995,13 +54173,13 @@ function rawTools() {
       title: "Render a screen to PNG",
       description: "Headless-render one screen with the web renderer and return the PNG plus the render diagnostics. The PNG is also written to .himi/shots/<screen>.png, which the build board shows. Needs Playwright's Chromium; without it the result says how to install it and still returns the diagnostics.",
       annotations: CHECK,
-      inputSchema: z.object({
-        screen: z.string().min(1).describe("The screen id."),
-        dir: DIR,
-        scheme: z.enum(["light", "dark"]).optional(),
-        width: z.number().int().positive().optional().describe("Viewport width in px."),
-        device: z.string().optional().describe("A named device (overrides width)."),
-        rtl: z.boolean().optional()
+      inputSchema: z2.object({
+        screen: z2.string().min(1).describe("The screen id."),
+        dir: DIR2,
+        scheme: z2.enum(["light", "dark"]).optional(),
+        width: z2.number().int().positive().optional().describe("Viewport width in px."),
+        device: z2.string().optional().describe("A named device (overrides width)."),
+        rtl: z2.boolean().optional()
       }),
       handler: async (a, d) => {
         const r = await d.runCli([
@@ -54031,12 +54209,12 @@ function rawTools() {
       title: "Build journal",
       description: "Read or append the owner-facing build journal (.himi/progress.jsonl). With `message`, append one postcard for a journey step; without, print the journal \u2014 `brief` gives the short session-start summary (current step, open approvals).",
       annotations: { ...LOCAL_WRITE, idempotentHint: false },
-      inputSchema: z.object({
-        dir: DIR,
-        message: z.string().optional().describe("What changed, one or two lines, for the owner."),
-        step: z.string().optional().describe("Journey step 1-8 or its name (discover, classify, plan, implement, brand, validate, review, download)."),
-        noImage: z.boolean().optional().describe("Send a text-only postcard. By default the home screen's current shot is attached (never a stale one)."),
-        brief: z.boolean().optional()
+      inputSchema: z2.object({
+        dir: DIR2,
+        message: z2.string().optional().describe("What changed, one or two lines, for the owner."),
+        step: z2.string().optional().describe("Journey step 1-8 or its name (discover, classify, plan, implement, brand, validate, review, download)."),
+        noImage: z2.boolean().optional().describe("Send a text-only postcard. By default the home screen's current shot is attached (never a stale one)."),
+        brief: z2.boolean().optional()
       }),
       handler: async (a, d) => {
         const dir = await appDir2(a, d);
@@ -54049,7 +54227,7 @@ function rawTools() {
       title: "Start the live preview",
       description: "Serve the app on localhost and keep it live (`himi run --watch`): every save rebuilds and repaints the open tab. Returns the URL. Reuses a preview that is already running for this app. " + PREVIEW_HINT,
       annotations: LOCAL_WRITE,
-      inputSchema: z.object({ dir: DIR }),
+      inputSchema: z2.object({ dir: DIR2 }),
       handler: async (a, d) => {
         try {
           return json3({ ...await d.preview.start(await appDir2(a, d)), hint: PREVIEW_HINT });
@@ -54066,7 +54244,7 @@ ${log}` : ""}`, true);
       title: "Live preview status",
       description: "Whether this app's live preview is running, and its URL and last build result.",
       annotations: CHECK,
-      inputSchema: z.object({ dir: DIR }),
+      inputSchema: z2.object({ dir: DIR2 }),
       handler: async (a, d) => json3(await d.preview.status(await appDir2(a, d)))
     },
     {
@@ -54074,7 +54252,7 @@ ${log}` : ""}`, true);
       title: "Stop the live preview",
       description: "Stop this app's live preview (the `himi run --watch` a `himi_preview_start` started).",
       annotations: { ...LOCAL_WRITE, destructiveHint: false },
-      inputSchema: z.object({ dir: DIR }),
+      inputSchema: z2.object({ dir: DIR2 }),
       handler: async (a, d) => json3(await d.preview.stop(await appDir2(a, d)))
     },
     {
@@ -54082,7 +54260,7 @@ ${log}` : ""}`, true);
       title: "Signed-in identity",
       description: "The identity the stored serve-plane credential carries (account, scope, expiry). Local \u2014 decodes the stored token, no network.",
       annotations: LEARN,
-      inputSchema: z.object({ target: z.string().optional().describe("Serve target. Default: the CLI's default.") }),
+      inputSchema: z2.object({ target: z2.string().optional().describe("Serve target. Default: the CLI's default.") }),
       handler: async (a, d) => fromCli(await d.runCli(["whoami", ...opt("--target", a.target ?? d.login.target())]))
     },
     {
@@ -54090,9 +54268,9 @@ ${log}` : ""}`, true);
       title: "Sign in to Wix",
       description: "Open a browser window where the USER signs in to Wix, so himi_push and himi_share can publish. Returns at once with the sign-in link; call again to see whether the sign-in finished. Already signed in: says who, and opens nothing unless `switchAccount` is true. This server never sees the credential \u2014 the sign-in stores a scoped token on this machine.",
       annotations: { readOnlyHint: false, destructiveHint: false, idempotentHint: false, openWorldHint: true },
-      inputSchema: z.object({
-        target: z.string().optional().describe("Serve target. Default: the CLI's default."),
-        switchAccount: z.boolean().optional().describe("Sign in again even though a credential is stored (e.g. to use another Wix account).")
+      inputSchema: z2.object({
+        target: z2.string().optional().describe("Serve target. Default: the CLI's default."),
+        switchAccount: z2.boolean().optional().describe("Sign in again even though a credential is stored (e.g. to use another Wix account).")
       }),
       handler: async (a, d) => {
         const s = d.login.status();
@@ -54112,10 +54290,10 @@ ${log}` : ""}`, true);
       title: "Publish a draft",
       description: "Lint, build and publish the app as a DRAFT release: owner-private, servable by preview link and in Himi Player, NOT live. Returns the preview links and the universal link that opens it in Himi Player. Never promotes \u2014 going live is a human command. Refuses on any validation error. Needs a sign-in first (himi_login).",
       annotations: PUBLISH,
-      inputSchema: z.object({
-        dir: DIR,
-        label: z.string().optional().describe("A short label for this draft."),
-        notes: z.string().optional().describe("Release notes for this draft.")
+      inputSchema: z2.object({
+        dir: DIR2,
+        label: z2.string().optional().describe("A short label for this draft."),
+        notes: z2.string().optional().describe("Release notes for this draft.")
       }),
       handler: async (a, d) => {
         const gate = await requireLogin(d);
@@ -54128,14 +54306,14 @@ ${log}` : ""}`, true);
       title: "Share a .himi package link",
       description: "Publish a content-addressed share link for a validated `.himi` package of an already-published release. Needs a sign-in first (himi_login).",
       annotations: PUBLISH,
-      inputSchema: z.object({
-        file: z.string().min(1).describe("Path to the .himi package (see `himi pack`)."),
-        expiresAt: z.string().optional().describe("ISO timestamp the link stops working.")
+      inputSchema: z2.object({
+        file: z2.string().min(1).describe("Path to the .himi package (see `himi pack`)."),
+        expiresAt: z2.string().optional().describe("ISO timestamp the link stops working.")
       }),
       handler: async (a, d) => {
         const gate = await requireLogin(d);
         if (gate) return gate;
-        return fromCli(await d.runCli(["share", "--file", resolve45(await d.defaultDir(), String(a.file)), ...opt("--expires-at", a.expiresAt), ...opt("--target", d.login.target())]));
+        return fromCli(await d.runCli(["share", "--file", resolve46(await d.defaultDir(), String(a.file)), ...opt("--expires-at", a.expiresAt), ...opt("--target", d.login.target())]));
       }
     },
     {
@@ -54145,19 +54323,20 @@ ${log}` : ""}`, true);
       // Not idempotent: with credentials, each `himi preview` mints a fresh single-use handover —
       // the same reason the hosted connector's tool of this name says false (RFC 0064 §5).
       annotations: { ...PUBLISH, readOnlyHint: true, idempotentHint: false },
-      inputSchema: z.object({
-        app: z.string().min(1),
-        release: z.string().min(1),
-        screen: z.string().optional(),
-        surface: z.string().optional()
+      inputSchema: z2.object({
+        app: z2.string().min(1),
+        release: z2.string().min(1),
+        screen: z2.string().optional(),
+        surface: z2.string().optional()
       }),
       handler: async (a, d) => fromCli(await d.runCli(["preview", "--app", String(a.app), "--release", String(a.release), ...opt("--screen", a.screen), ...opt("--surface", a.surface), ...opt("--target", d.login.target())]))
     }
   ];
 }
-var MAX_TEXT2, clip, text6, json3, opt, sw, DIR, LEARN, CHECK, LOCAL_WRITE, PUBLISH, PREVIEW_HINT, LOGIN_HINT;
+var MAX_TEXT2, clip, text6, json3, opt, sw, DIR2, LEARN, CHECK, LOCAL_WRITE, PUBLISH, PREVIEW_HINT, LOGIN_HINT;
 var init_tools = __esm({
   "src/mcp/tools.ts"() {
+    init_file_tools();
     MAX_TEXT2 = 8e4;
     clip = (s) => s.length <= MAX_TEXT2 ? s : `${s.slice(0, MAX_TEXT2)}
 \u2026 [truncated ${s.length - MAX_TEXT2} chars \u2014 re-run the command in a terminal for the full output]`;
@@ -54165,7 +54344,7 @@ var init_tools = __esm({
     json3 = (o) => text6(JSON.stringify(o, null, 2));
     opt = (flag, v) => typeof v === "string" && v ? [flag, v] : typeof v === "number" ? [flag, String(v)] : [];
     sw = (flag, v) => v === true ? [flag] : [];
-    DIR = z.string().optional().describe("The app (content package) directory. Default: the workspace root the host opened, else the server's working directory.");
+    DIR2 = z2.string().optional().describe("The app (content package) directory. Default: the workspace root the host opened, else the server's working directory.");
     LEARN = { readOnlyHint: true, destructiveHint: false, idempotentHint: true, openWorldHint: false };
     CHECK = { readOnlyHint: true, destructiveHint: false, idempotentHint: true, openWorldHint: false };
     LOCAL_WRITE = { readOnlyHint: false, destructiveHint: false, idempotentHint: true, openWorldHint: false };
@@ -54194,12 +54373,12 @@ function createLoginSession(deps) {
       current = pending;
       const out2 = [];
       const err = [];
-      return new Promise((resolve53) => {
+      return new Promise((resolve54) => {
         let answered = false;
         const answer = () => {
           if (answered) return;
           answered = true;
-          resolve53(current);
+          resolve54(current);
         };
         let child;
         try {
@@ -54258,7 +54437,7 @@ __export(server_exports, {
   protectStdout: () => protectStdout,
   startMcpServer: () => startMcpServer
 });
-import { readFileSync as readFileSync59 } from "node:fs";
+import { readFileSync as readFileSync60 } from "node:fs";
 import { fileURLToPath as fileURLToPath21 } from "node:url";
 import { McpServer } from "@modelcontextprotocol/server";
 import { serveStdio, StdioServerTransport } from "@modelcontextprotocol/server/stdio";
@@ -54268,9 +54447,9 @@ function protectStdout() {
   console.info = toErr;
   console.debug = toErr;
 }
-function buildServer(deps, version2) {
+function buildServer(deps, version2, tools = {}) {
   const server = new McpServer({ name: "himi", version: version2 }, { capabilities: { tools: {} }, instructions: SERVER_INSTRUCTIONS });
-  for (const tool of himiTools()) {
+  for (const tool of himiTools(tools)) {
     server.registerTool(
       tool.name,
       { title: tool.title, description: tool.description, inputSchema: tool.inputSchema, annotations: { title: tool.title, ...tool.annotations } },
@@ -54304,23 +54483,23 @@ async function startMcpServer(opts) {
     // next call rather than pinning every later tool to the server's cwd (often $HOME for a GUI host).
     defaultDir: async () => {
       if (!rootDir && pinned) rootDir = await firstRoot(pinned);
-      return rootDir || process.cwd();
+      return rootDir || opts.workspace || process.cwd();
     },
     preview: {
       start: (dir) => startPreview(dir, { port: previewPortForDir(dir) }, previewDeps),
       status: (dir) => previewStatus(dir, previewDeps),
       stop: (dir) => stopPreview(dir, previewDeps)
     },
-    readFile: (p) => readFileSync59(p),
+    readFile: (p) => readFileSync60(p),
     login: createLoginSession({ ...defaultLoginDeps, selfCommand: previewDeps.selfCommand, ...opts.login })
   };
-  const closed = new Promise((resolve53) => {
-    stdin.once("end", resolve53);
-    stdin.once("close", resolve53);
+  const closed = new Promise((resolve54) => {
+    stdin.once("end", resolve54);
+    stdin.once("close", resolve54);
   });
   const handle = serveStdio(
     () => {
-      pinned = buildServer(deps, opts.version);
+      pinned = buildServer(deps, opts.version, { withFiles: opts.withFiles });
       return pinned;
     },
     { transport: new StdioServerTransport(stdin, stdout), onerror: (e) => console.error(`[himi mcp] ${e.message}`) }
@@ -54354,9 +54533,9 @@ __export(native_decode_exports, {
   runNativeDecode: () => runNativeDecode
 });
 import { execFileSync as execFileSync5, spawnSync as spawnSync2 } from "node:child_process";
-import { existsSync as existsSync54, mkdtempSync as mkdtempSync2, readFileSync as readFileSync60, rmSync as rmSync12, writeFileSync as writeFileSync21 } from "node:fs";
+import { existsSync as existsSync55, mkdtempSync as mkdtempSync2, readFileSync as readFileSync61, rmSync as rmSync13, writeFileSync as writeFileSync22 } from "node:fs";
 import { tmpdir as tmpdir3 } from "node:os";
-import { join as join53 } from "node:path";
+import { join as join54 } from "node:path";
 import { fileURLToPath as fileURLToPath22 } from "node:url";
 function nativeDecodePackageDir() {
   return fileURLToPath22(new URL("../../../core/runtime/ios/HimalayaCore/", import.meta.url));
@@ -54366,8 +54545,8 @@ function nativeDecodeAndroidHarnessDir() {
 }
 function nativeOracleShipped() {
   return {
-    ios: existsSync54(join53(nativeDecodePackageDir(), "Package.swift")),
-    android: existsSync54(join53(nativeDecodeAndroidHarnessDir(), "gradlew"))
+    ios: existsSync55(join54(nativeDecodePackageDir(), "Package.swift")),
+    android: existsSync55(join54(nativeDecodeAndroidHarnessDir(), "gradlew"))
   };
 }
 function detectNativeDecode(options = {}) {
@@ -54378,7 +54557,7 @@ function detectNativeDecode(options = {}) {
     return { platform: "ios", available: false, reason: `the iOS decoder oracle requires macOS (darwin); this host is ${hostPlatform}` };
   }
   if (!swiftAvailable) return { platform: "ios", available: false, reason: "swift is not on PATH" };
-  const packageAvailable = options.packageAvailable ?? existsSync54(join53(packageDir, "Package.swift"));
+  const packageAvailable = options.packageAvailable ?? existsSync55(join54(packageDir, "Package.swift"));
   if (!packageAvailable) {
     return {
       platform: "ios",
@@ -54390,7 +54569,7 @@ function detectNativeDecode(options = {}) {
 }
 function localPropertiesSdk(harnessDir) {
   try {
-    const match = readFileSync60(join53(harnessDir, "local.properties"), "utf8").match(/^sdk\.dir\s*=\s*(.+)$/m);
+    const match = readFileSync61(join54(harnessDir, "local.properties"), "utf8").match(/^sdk\.dir\s*=\s*(.+)$/m);
     return match?.[1]?.trim().replace(/\\([ :\\])/g, "$1") ?? null;
   } catch {
     return null;
@@ -54398,8 +54577,8 @@ function localPropertiesSdk(harnessDir) {
 }
 function detectAndroidNativeDecode(options = {}) {
   const harnessDir = options.harnessDir ?? nativeDecodeAndroidHarnessDir();
-  const gradlew = join53(harnessDir, "gradlew");
-  const gradlewAvailable = options.gradlewAvailable ?? existsSync54(gradlew);
+  const gradlew = join54(harnessDir, "gradlew");
+  const gradlewAvailable = options.gradlewAvailable ?? existsSync55(gradlew);
   if (!gradlewAvailable) {
     return {
       platform: "android",
@@ -54409,7 +54588,7 @@ function detectAndroidNativeDecode(options = {}) {
   }
   const androidHome = options.androidHome ?? process.env.ANDROID_HOME ?? "";
   const sdk = androidHome.trim() || (options.localPropertiesSdk !== void 0 ? options.localPropertiesSdk : localPropertiesSdk(harnessDir));
-  const sdkAvailable = options.sdkAvailable ?? (typeof sdk === "string" && sdk.length > 0 && existsSync54(sdk));
+  const sdkAvailable = options.sdkAvailable ?? (typeof sdk === "string" && sdk.length > 0 && existsSync55(sdk));
   if (!sdkAvailable) {
     return {
       platform: "android",
@@ -54481,14 +54660,14 @@ function parseNativeDecodeOutput(stdout, expectedScreenIds, platform = "ios") {
   return verdicts;
 }
 function runNativeDecode(options) {
-  const descriptorDir = mkdtempSync2(join53(tmpdir3(), "himi-native-decode-"));
+  const descriptorDir = mkdtempSync2(join54(tmpdir3(), "himi-native-decode-"));
   const startedAt = Date.now();
   try {
     for (const descriptor of options.descriptors) {
       if (typeof descriptor.descriptorJson !== "string") {
         throw new Error(`native decode cannot judge ${descriptor.screenId}: the release builder did not return its exact baked JSON bytes`);
       }
-      writeFileSync21(join53(descriptorDir, `${encodeURIComponent(descriptor.screenId)}.json`), descriptor.descriptorJson);
+      writeFileSync22(join54(descriptorDir, `${encodeURIComponent(descriptor.screenId)}.json`), descriptor.descriptorJson);
     }
     options.progress?.("building cached Swift oracle");
     execFileSync5("swift", ["build", "--package-path", options.packageDir, "--product", "himi-decode-oracle"], {
@@ -54500,7 +54679,7 @@ function runNativeDecode(options) {
       encoding: "utf8"
     }).trim();
     options.progress?.(`running real Swift decoder over ${options.descriptors.length} screen${options.descriptors.length === 1 ? "" : "s"}`);
-    const stdout = execFileSync5(join53(binPath, "himi-decode-oracle"), ["--dir", descriptorDir], {
+    const stdout = execFileSync5(join54(binPath, "himi-decode-oracle"), ["--dir", descriptorDir], {
       stdio: ["ignore", "pipe", "pipe"],
       encoding: "utf8"
     });
@@ -54514,19 +54693,19 @@ function runNativeDecode(options) {
     const stderr = failure.stderr ? ` \u2014 ${String(failure.stderr).trim().slice(0, 2e3)}` : "";
     throw new Error(`iOS decoder oracle failed: ${failure.message}${stderr}`);
   } finally {
-    rmSync12(descriptorDir, { recursive: true, force: true });
+    rmSync13(descriptorDir, { recursive: true, force: true });
   }
 }
 function runAndroidNativeDecode(options) {
-  const descriptorDir = mkdtempSync2(join53(tmpdir3(), "himi-native-decode-android-"));
-  const outputPath = join53(descriptorDir, "verdicts.ndjson");
+  const descriptorDir = mkdtempSync2(join54(tmpdir3(), "himi-native-decode-android-"));
+  const outputPath = join54(descriptorDir, "verdicts.ndjson");
   const startedAt = Date.now();
   try {
     for (const descriptor of options.descriptors) {
       if (typeof descriptor.descriptorJson !== "string") {
         throw new Error(`native decode cannot judge ${descriptor.screenId}: the release builder did not return its exact baked JSON bytes`);
       }
-      writeFileSync21(join53(descriptorDir, `${encodeURIComponent(descriptor.screenId)}.json`), descriptor.descriptorJson);
+      writeFileSync22(join54(descriptorDir, `${encodeURIComponent(descriptor.screenId)}.json`), descriptor.descriptorJson);
     }
     options.progress?.(`running real Kotlin decoder over ${options.descriptors.length} screen${options.descriptors.length === 1 ? "" : "s"}`);
     execFileSync5(options.gradlew, [
@@ -54541,7 +54720,7 @@ function runAndroidNativeDecode(options) {
       stdio: ["ignore", "ignore", "pipe"],
       encoding: "utf8"
     });
-    const stdout = readFileSync60(outputPath, "utf8");
+    const stdout = readFileSync61(outputPath, "utf8");
     return {
       platform: "android",
       verdicts: parseNativeDecodeOutput(stdout, options.descriptors.map((descriptor) => descriptor.screenId), "android"),
@@ -54552,7 +54731,7 @@ function runAndroidNativeDecode(options) {
     const stderr = failure.stderr ? ` \u2014 ${String(failure.stderr).trim().slice(0, 2e3)}` : "";
     throw new Error(`Android decoder oracle failed: ${failure.message}${stderr}`);
   } finally {
-    rmSync12(descriptorDir, { recursive: true, force: true });
+    rmSync13(descriptorDir, { recursive: true, force: true });
   }
 }
 function fieldAt(path2) {
@@ -54611,30 +54790,30 @@ __export(browser_authoring_exports, {
 });
 import { createServer as createServer5 } from "node:http";
 import { createHash as createHash29, randomBytes as randomBytes4 } from "node:crypto";
-import { existsSync as existsSync55, readdirSync as readdirSync27, readFileSync as readFileSync61, realpathSync as realpathSync7, statSync as statSync13 } from "node:fs";
-import { join as join54, posix as posix2, relative as relative11, sep as sep14 } from "node:path";
+import { existsSync as existsSync56, readdirSync as readdirSync28, readFileSync as readFileSync62, realpathSync as realpathSync8, statSync as statSync14 } from "node:fs";
+import { join as join55, posix as posix2, relative as relative12, sep as sep15 } from "node:path";
 function humanMs(ms) {
   return ms < 1e3 ? `${ms}ms` : `${Math.round(ms / 1e3)}s`;
 }
 function collectWorkerSources(tier5SrcDir, bundleName) {
-  const root = join54(tier5SrcDir, bundleName);
+  const root = join55(tier5SrcDir, bundleName);
   const files = {};
   const visitedDirs = /* @__PURE__ */ new Set();
   const walk2 = (abs, rel) => {
-    const real = realpathSync7(abs);
+    const real = realpathSync8(abs);
     if (visitedDirs.has(real)) return;
     visitedDirs.add(real);
-    for (const name of readdirSync27(abs).sort()) {
-      const childAbs = join54(abs, name);
+    for (const name of readdirSync28(abs).sort()) {
+      const childAbs = join55(abs, name);
       const childRel = posix2.join(rel, name);
-      if (statSync13(childAbs).isDirectory()) {
+      if (statSync14(childAbs).isDirectory()) {
         walk2(childAbs, childRel);
       } else if (/\.(ts|tsx|js|mjs|json)$/.test(name)) {
-        files[childRel] = readFileSync61(childAbs, "utf8");
+        files[childRel] = readFileSync62(childAbs, "utf8");
       }
     }
   };
-  if (!existsSync55(root)) return null;
+  if (!existsSync56(root)) return null;
   walk2(root, `/tier5-src/${bundleName}`);
   const entry = [`/tier5-src/${bundleName}/index.ts`, `/tier5-src/${bundleName}/index.js`].find((p) => p in files);
   if (!entry) return null;
@@ -54651,20 +54830,20 @@ function collectRelativeSiblings(files, tier5SrcDir) {
       const spec = m[1];
       const virtual = posix2.normalize(posix2.join(dir, spec));
       if (!virtual.startsWith("/tier5-src/")) continue;
-      const onDisk = join54(tier5SrcDir, virtual.slice("/tier5-src/".length));
+      const onDisk = join55(tier5SrcDir, virtual.slice("/tier5-src/".length));
       const candidates = [
         onDisk,
         `${onDisk}.ts`,
         `${onDisk}.js`,
         onDisk.replace(/\.js$/, ".ts"),
-        join54(onDisk, "index.ts"),
-        join54(onDisk, "index.js")
+        join55(onDisk, "index.ts"),
+        join55(onDisk, "index.js")
       ];
       for (const abs of candidates) {
-        if (!existsSync55(abs) || statSync13(abs).isDirectory()) continue;
-        const key2 = `/tier5-src/${relative11(tier5SrcDir, abs).split(sep14).join(posix2.sep)}`;
+        if (!existsSync56(abs) || statSync14(abs).isDirectory()) continue;
+        const key2 = `/tier5-src/${relative12(tier5SrcDir, abs).split(sep15).join(posix2.sep)}`;
         if (key2 in files) break;
-        files[key2] = readFileSync61(abs, "utf8");
+        files[key2] = readFileSync62(abs, "utf8");
         queue.push(key2);
         break;
       }
@@ -54696,10 +54875,10 @@ function collectSdkModules(files, resolveSubpath) {
   for (const source of Object.values(files)) visit(source);
   return { modules, unsupported };
 }
-function sdkSubpathReader(resolve53) {
+function sdkSubpathReader(resolve54) {
   return (sub) => {
     try {
-      return readFileSync61(resolve53(`@wix/himalaya/${sub}`), "utf8");
+      return readFileSync62(resolve54(`@wix/himalaya/${sub}`), "utf8");
     } catch {
       return null;
     }
@@ -54777,7 +54956,7 @@ async function runBrowserAuthoring(opts) {
   const token = mintToken2(payload);
   const unusable = await probeAuthoringPage(opts.authoringBase, opts.fetchImpl, opts.probeTimeoutMs);
   if (unusable) throw new Error(unusable);
-  return await new Promise((resolve53, reject) => {
+  return await new Promise((resolve54, reject) => {
     let settled = false;
     let url = "";
     const server = createServer5();
@@ -54829,7 +55008,7 @@ async function runBrowserAuthoring(opts) {
         }
         res.writeHead(200, { "content-type": "text/plain" }).end("ok");
         const report3 = body.result;
-        finish2(() => resolve53({ report: report3, url }));
+        finish2(() => resolve54({ report: report3, url }));
       })();
     });
     server.on("error", (e) => finish2(() => reject(e)));
@@ -54871,8 +55050,8 @@ __export(coverage_exports, {
   suppressedNativeKeys: () => suppressedNativeKeys,
   trendAndStore: () => trendAndStore
 });
-import { existsSync as existsSync56, mkdirSync as mkdirSync26, readFileSync as readFileSync62, writeFileSync as writeFileSync22 } from "node:fs";
-import { dirname as dirname30, join as join55 } from "node:path";
+import { existsSync as existsSync57, mkdirSync as mkdirSync27, readFileSync as readFileSync63, writeFileSync as writeFileSync23 } from "node:fs";
+import { dirname as dirname31, join as join56 } from "node:path";
 function suppressedNativeKeys(oracle) {
   return [...oracle.ios ? [] : ["native-decode|ios"], ...oracle.android ? [] : ["native-decode|android"]];
 }
@@ -55052,11 +55231,11 @@ function assembleLedger(r, options = {}) {
   return out2;
 }
 function trendAndStore(dir, entries, suppressed) {
-  const p = join55(dir, LEDGER_FILE);
+  const p = join56(dir, LEDGER_FILE);
   let previous = null;
   try {
-    if (existsSync56(p)) {
-      const parsed = JSON.parse(readFileSync62(p, "utf8"));
+    if (existsSync57(p)) {
+      const parsed = JSON.parse(readFileSync63(p, "utf8"));
       if (Array.isArray(parsed.keys)) previous = parsed.keys.filter((k) => typeof k === "string");
     }
   } catch {
@@ -55064,8 +55243,8 @@ function trendAndStore(dir, entries, suppressed) {
   const current = entries.map((e) => e.key);
   const stored = [.../* @__PURE__ */ new Set([...current, ...(previous ?? []).filter((key2) => (suppressed ?? []).includes(key2))])];
   try {
-    mkdirSync26(dirname30(p), { recursive: true });
-    writeFileSync22(p, JSON.stringify({ keys: stored, ts: (/* @__PURE__ */ new Date()).toISOString() }, null, 2));
+    mkdirSync27(dirname31(p), { recursive: true });
+    writeFileSync23(p, JSON.stringify({ keys: stored, ts: (/* @__PURE__ */ new Date()).toISOString() }, null, 2));
   } catch {
     return null;
   }
@@ -55095,11 +55274,11 @@ function formatLedger(entries, trend) {
   return out2.join("\n");
 }
 function diffAndStoreObservations(dir, current) {
-  const p = join55(dir, OBS_FILE);
+  const p = join56(dir, OBS_FILE);
   let previous = null;
   try {
-    if (existsSync56(p)) {
-      const parsed = JSON.parse(readFileSync62(p, "utf8"));
+    if (existsSync57(p)) {
+      const parsed = JSON.parse(readFileSync63(p, "utf8"));
       if (parsed.screens && typeof parsed.screens === "object" && !Array.isArray(parsed.screens) && Object.values(parsed.screens).every(
         (v) => Array.isArray(v) && v.every((l) => typeof l === "string")
       )) {
@@ -55109,8 +55288,8 @@ function diffAndStoreObservations(dir, current) {
   } catch {
   }
   try {
-    mkdirSync26(dirname30(p), { recursive: true });
-    writeFileSync22(p, JSON.stringify({ screens: current, ts: (/* @__PURE__ */ new Date()).toISOString() }, null, 2));
+    mkdirSync27(dirname31(p), { recursive: true });
+    writeFileSync23(p, JSON.stringify({ screens: current, ts: (/* @__PURE__ */ new Date()).toISOString() }, null, 2));
   } catch {
     return null;
   }
@@ -55148,8 +55327,8 @@ var LEDGER_FILE, OBS_FILE;
 var init_coverage = __esm({
   "src/coverage.ts"() {
     init_native_decode();
-    LEDGER_FILE = join55(".himi", "test-ledger.json");
-    OBS_FILE = join55(".himi", "test-observations.json");
+    LEDGER_FILE = join56(".himi", "test-ledger.json");
+    OBS_FILE = join56(".himi", "test-observations.json");
   }
 });
 
@@ -55160,16 +55339,16 @@ __export(design_kits_exports, {
   kitsDir: () => kitsDir,
   listKits: () => listKits2
 });
-import { existsSync as existsSync57, readFileSync as readFileSync63, readdirSync as readdirSync28 } from "node:fs";
-import { join as join56, basename as basename15 } from "node:path";
+import { existsSync as existsSync58, readFileSync as readFileSync64, readdirSync as readdirSync29 } from "node:fs";
+import { join as join57, basename as basename15 } from "node:path";
 import { fileURLToPath as fileURLToPath23 } from "node:url";
 function kitsDir() {
-  return KIT_DIR_CANDIDATES.find((p) => existsSync57(p));
+  return KIT_DIR_CANDIDATES.find((p) => existsSync58(p));
 }
 function listKits2() {
   const dir = kitsDir();
   if (!dir) return [];
-  return readdirSync28(dir).filter((f) => f.endsWith(".json")).map((f) => basename15(f, ".json")).sort();
+  return readdirSync29(dir).filter((f) => f.endsWith(".json")).map((f) => basename15(f, ".json")).sort();
 }
 function kitReport(name) {
   const dir = kitsDir();
@@ -55188,7 +55367,7 @@ In a published @wix/himalaya-cli this is a packaging bug \u2014 the kits should
   if (!kits.includes(name)) {
     return { ok: false, kit: name, kits, problems: [`no design kit named "${name}". Available: ${kits.join(", ")}`] };
   }
-  const raw = readFileSync63(join56(dir, `${name}.json`), "utf8");
+  const raw = readFileSync64(join57(dir, `${name}.json`), "utf8");
   let parsed;
   try {
     parsed = JSON.parse(raw);
@@ -55212,9 +55391,9 @@ var init_design_kits = __esm({
   "src/design-kits.ts"() {
     KIT_DIR_CANDIDATES = [
       // in-repo: tools/himi-cli/src/design-kits.ts → <repo>/stdlib/design-kits/
-      join56(fileURLToPath23(new URL("../../..", import.meta.url)), "stdlib", "design-kits"),
+      join57(fileURLToPath23(new URL("../../..", import.meta.url)), "stdlib", "design-kits"),
       // published CLI: <pkg>/dist/cli.mjs → <pkg>/stdlib/design-kits/
-      join56(fileURLToPath23(new URL("..", import.meta.url)), "stdlib", "design-kits")
+      join57(fileURLToPath23(new URL("..", import.meta.url)), "stdlib", "design-kits")
     ];
   }
 });
@@ -55228,11 +55407,11 @@ __export(assets_exports, {
   removeAssetPayload: () => removeAssetPayload,
   verifyReport: () => verifyReport
 });
-import { readFileSync as readFileSync64 } from "node:fs";
+import { readFileSync as readFileSync65 } from "node:fs";
 import { basename as basename16 } from "node:path";
 function declaredAssets(dir) {
   return collectAssets(dir).map((a) => {
-    const bytes2 = readFileSync64(a.path);
+    const bytes2 = readFileSync65(a.path);
     return {
       name: a.name,
       sha256: assetSha256(bytes2),
@@ -55309,7 +55488,7 @@ function verifyReport(dir, app, manifest) {
   };
 }
 function addAssetPayload(manifest, filePath, opts) {
-  const bytes2 = readFileSync64(filePath);
+  const bytes2 = readFileSync65(filePath);
   const name = opts.name ?? basename16(filePath);
   const sha2565 = assetSha256(bytes2);
   const record2 = {
@@ -57033,9 +57212,9 @@ __export(run_exports, {
   runPackage: () => runPackage,
   withoutProdServe: () => withoutProdServe
 });
-import { cpSync as cpSync2, existsSync as existsSync58, mkdirSync as mkdirSync27, mkdtempSync as mkdtempSync3, readFileSync as readFileSync65, rmSync as rmSync13, statSync as statSync14 } from "node:fs";
+import { cpSync as cpSync2, existsSync as existsSync59, mkdirSync as mkdirSync28, mkdtempSync as mkdtempSync3, readFileSync as readFileSync66, rmSync as rmSync14, statSync as statSync15 } from "node:fs";
 import { networkInterfaces as osNetworkInterfaces, tmpdir as tmpdir4 } from "node:os";
-import { dirname as dirname31, join as join57 } from "node:path";
+import { dirname as dirname32, join as join58 } from "node:path";
 import { fileURLToPath as fileURLToPath24 } from "node:url";
 function makePackageRunHandler(opts) {
   const store = new FileReleaseStore(opts.releaseRoot);
@@ -57063,9 +57242,9 @@ async function fetchBytes(url) {
 }
 async function resolvePackage(source, workDir) {
   const isUrl2 = /^https?:\/\//i.test(source);
-  if (!isUrl2 && existsSync58(source) && statSync14(source).isDirectory()) {
-    const appDirManifest = join57(source, "release-manifest.json");
-    if (existsSync58(appDirManifest)) {
+  if (!isUrl2 && existsSync59(source) && statSync15(source).isDirectory()) {
+    const appDirManifest = join58(source, "release-manifest.json");
+    if (existsSync59(appDirManifest)) {
       const opened2 = openPackageDir(source);
       if (!opened2.validation.ok) {
         throw new Error(`package is not valid:
@@ -57074,11 +57253,11 @@ async function resolvePackage(source, workDir) {
       const app2 = opened2.header?.app ?? opened2.manifest?.app;
       if (!app2) throw new Error(`${source} has no app id (no himi-package.json and no manifest.app)`);
       if (!isSafeAppId(app2)) throw new Error(`${source} declares an unsafe app id ${JSON.stringify(app2)} \u2014 refusing to open it`);
-      const root2 = workDir ?? mkdtempSync3(join57(tmpdir4(), "himi-run-"));
-      const target = join57(root2, app2);
-      if (join57(source) !== target) {
-        mkdirSync27(root2, { recursive: true });
-        rmSync13(target, { recursive: true, force: true });
+      const root2 = workDir ?? mkdtempSync3(join58(tmpdir4(), "himi-run-"));
+      const target = join58(root2, app2);
+      if (join58(source) !== target) {
+        mkdirSync28(root2, { recursive: true });
+        rmSync14(target, { recursive: true, force: true });
         cpSync2(source, target, { recursive: true });
       }
       return {
@@ -57093,12 +57272,12 @@ async function resolvePackage(source, workDir) {
     }
     throw new Error(`${source} is a directory but has no release-manifest.json \u2014 is it a package?`);
   }
-  const bytes2 = isUrl2 ? await fetchBytes(source) : readFileSync65(source);
-  const root = workDir ?? mkdtempSync3(join57(tmpdir4(), "himi-run-"));
+  const bytes2 = isUrl2 ? await fetchBytes(source) : readFileSync66(source);
+  const root = workDir ?? mkdtempSync3(join58(tmpdir4(), "himi-run-"));
   const { app, appDir: appDir3 } = unpackTo(bytes2, root);
   const opened = openPackageDir(appDir3);
   if (!opened.validation.ok) {
-    rmSync13(workDir ? appDir3 : root, { recursive: true, force: true });
+    rmSync14(workDir ? appDir3 : root, { recursive: true, force: true });
     throw new Error(`package is not valid:
   ${opened.validation.errors.join("\n  ")}`);
   }
@@ -57115,16 +57294,16 @@ async function resolvePackage(source, workDir) {
 async function loadPreviewAssets() {
   try {
     const mod = await Promise.resolve().then(() => (init_preview_assets_generated(), preview_assets_generated_exports));
-    const here = dirname31(fileURLToPath24(import.meta.url));
+    const here = dirname32(fileURLToPath24(import.meta.url));
     const candidates = [
-      join57(here, "preview-assets.generated.bin"),
+      join58(here, "preview-assets.generated.bin"),
       // published: copied next to the bundled CLI
-      join57(here, "../../../packages/serve/src/preview-assets.generated.bin")
+      join58(here, "../../../packages/serve/src/preview-assets.generated.bin")
       // in-repo checkout
     ];
     for (const path2 of candidates) {
-      if (!existsSync58(path2)) continue;
-      const blob = readFileSync65(path2);
+      if (!existsSync59(path2)) continue;
+      const blob = readFileSync66(path2);
       return mod.assemblePreviewAssetsFromBlob(new Uint8Array(blob.buffer, blob.byteOffset, blob.byteLength));
     }
     return /* @__PURE__ */ new Map();
@@ -57172,7 +57351,7 @@ async function runPackage(source, opts = {}) {
   const resolved2 = await resolvePackage(source, opts.workDir);
   const assets = opts.assets ?? (opts.spa ? /* @__PURE__ */ new Map() : await loadPreviewAssets());
   if (!opts.spa && assets.size === 0) {
-    if (resolved2.temp) rmSync13(resolved2.temp, { recursive: true, force: true });
+    if (resolved2.temp) rmSync14(resolved2.temp, { recursive: true, force: true });
     throw new Error(NO_SPA_MESSAGE);
   }
   const plane = makePackageRunHandler({
@@ -57210,7 +57389,7 @@ async function runPackage(source, opts = {}) {
       lanBound = (await listen(lanServer, port, lanHost)).address;
     } catch (e) {
       await closeServer(server);
-      if (resolved2.temp) rmSync13(resolved2.temp, { recursive: true, force: true });
+      if (resolved2.temp) rmSync14(resolved2.temp, { recursive: true, force: true });
       throw new Error(`himi run --lan could not listen on ${lanHost}:${port} (${e.message}); drop --lan, or pass --port for a free one`);
     }
     bound.push(lanBound);
@@ -57232,7 +57411,7 @@ async function runPackage(source, opts = {}) {
     warnings: resolved2.warnings,
     close: async () => {
       await Promise.all(servers.map(closeServer));
-      if (resolved2.temp) rmSync13(resolved2.temp, { recursive: true, force: true });
+      if (resolved2.temp) rmSync14(resolved2.temp, { recursive: true, force: true });
     }
   };
 }
@@ -57271,9 +57450,9 @@ __export(run_watch_exports, {
   watchedContentDir: () => watchedContentDir,
   writeRunRecord: () => writeRunRecord
 });
-import { closeSync as closeSync4, constants, existsSync as existsSync59, fstatSync, lstatSync as lstatSync12, statSync as statSync15, mkdirSync as mkdirSync28, openSync as openSync3, readFileSync as readFileSync66, realpathSync as realpathSync8, renameSync as renameSync6, rmSync as rmSync14, writeFileSync as writeFileSync23, watch as fsWatch } from "node:fs";
+import { closeSync as closeSync4, constants, existsSync as existsSync60, fstatSync, lstatSync as lstatSync13, statSync as statSync16, mkdirSync as mkdirSync29, openSync as openSync3, readFileSync as readFileSync67, realpathSync as realpathSync9, renameSync as renameSync6, rmSync as rmSync15, writeFileSync as writeFileSync24, watch as fsWatch } from "node:fs";
 import { randomUUID as randomUUID4 } from "node:crypto";
-import { extname as extname4, join as join58, resolve as resolve46, sep as sep15 } from "node:path";
+import { extname as extname4, join as join59, resolve as resolve47, sep as sep16 } from "node:path";
 function diffReleases(prev, next) {
   const bundles = Object.keys(next.bundles).filter((b) => prev.bundles[b]?.sha256 !== next.bundles[b].sha256).sort();
   const changedBundles = new Set(bundles);
@@ -57314,7 +57493,7 @@ function watchContent(dir, onChange, opts = {}) {
   let timer = null;
   const pending = /* @__PURE__ */ new Set();
   const watcher2 = watch2(dir, { recursive: true }, (_event, file) => {
-    if (!file || ignoredChange(file, (rel) => isDir(join58(dir, rel)))) return;
+    if (!file || ignoredChange(file, (rel) => isDir(join59(dir, rel)))) return;
     pending.add(file);
     if (timer) clearTimeout(timer);
     timer = setTimeout(() => {
@@ -57333,9 +57512,9 @@ function watchContent(dir, onChange, opts = {}) {
 }
 function watchedContentDir(source) {
   if (!source || /^https?:\/\//i.test(source)) return null;
-  const dir = resolve46(source);
+  const dir = resolve47(source);
   try {
-    return statSync15(dir).isDirectory() && existsSync59(join58(dir, "himalaya.content.json")) ? dir : null;
+    return statSync16(dir).isDirectory() && existsSync60(join59(dir, "himalaya.content.json")) ? dir : null;
   } catch {
     return null;
   }
@@ -57392,33 +57571,33 @@ function serialize(task) {
   });
 }
 function himiDir(dir) {
-  const root = join58(dir, ".himi");
+  const root = join59(dir, ".himi");
   try {
-    return lstatSync12(root).isDirectory() ? root : null;
+    return lstatSync13(root).isDirectory() ? root : null;
   } catch (e) {
     if (e.code !== "ENOENT") return null;
-    mkdirSync28(root, { recursive: true });
-    return lstatSync12(root).isDirectory() ? root : null;
+    mkdirSync29(root, { recursive: true });
+    return lstatSync13(root).isDirectory() ? root : null;
   }
 }
 function writeRunRecord(dir, record2) {
   const root = himiDir(dir);
   if (!root) return false;
-  const tmp = join58(root, `.run.json.${process.pid}.${randomUUID4()}.tmp`);
+  const tmp = join59(root, `.run.json.${process.pid}.${randomUUID4()}.tmp`);
   try {
-    writeFileSync23(tmp, `${JSON.stringify(record2, null, 2)}
+    writeFileSync24(tmp, `${JSON.stringify(record2, null, 2)}
 `, { flag: "wx" });
-    renameSync6(tmp, join58(root, "run.json"));
+    renameSync6(tmp, join59(root, "run.json"));
   } catch (e) {
-    rmSync14(tmp, { force: true });
+    rmSync15(tmp, { force: true });
     throw e;
   }
   return true;
 }
 function removeRunRecord(dir, owner) {
-  const root = join58(dir, ".himi");
+  const root = join59(dir, ".himi");
   try {
-    if (!lstatSync12(root).isDirectory()) return;
+    if (!lstatSync13(root).isDirectory()) return;
   } catch {
     return;
   }
@@ -57431,22 +57610,22 @@ function removeRunRecord(dir, owner) {
     }
     if (typeof pid === "number" && pid !== owner) return;
   }
-  rmSync14(join58(root, "run.json"), { force: true });
+  rmSync15(join59(root, "run.json"), { force: true });
 }
 function boardFile(dir, pathname) {
   if (pathname === RUN_IDENTITY_PATH) {
     return new Response(JSON.stringify(runIdentity(dir)), { status: 200, headers: { "content-type": "application/json", "cache-control": "no-store" } });
   }
   let rel = null;
-  if (pathname === "/__himi/studio/" || pathname === "/__himi/studio/index.html") rel = join58("studio", "index.html");
-  else if (pathname === "/__himi/studio/state.js") rel = join58("studio", "state.js");
-  else if (pathname === "/__himi/studio/timeline.js") rel = join58("studio", "timeline.js");
+  if (pathname === "/__himi/studio/" || pathname === "/__himi/studio/index.html") rel = join59("studio", "index.html");
+  else if (pathname === "/__himi/studio/state.js") rel = join59("studio", "state.js");
+  else if (pathname === "/__himi/studio/timeline.js") rel = join59("studio", "timeline.js");
   else {
     const m = /^\/__himi\/history\/([0-9a-f]{64}\.(png|jpg|gif|webp))$/.exec(pathname);
-    if (m) rel = join58("history", m[1]);
+    if (m) rel = join59("history", m[1]);
   }
   if (!rel) return null;
-  const bytes2 = readConfined(resolve46(dir, ".himi"), rel);
+  const bytes2 = readConfined(resolve47(dir, ".himi"), rel);
   if (!bytes2) return new Response("not found", { status: 404 });
   return new Response(bytes2, {
     status: 200,
@@ -57455,20 +57634,20 @@ function boardFile(dir, pathname) {
 }
 function readConfined(root, rel) {
   try {
-    if (!lstatSync12(root).isDirectory()) return null;
-    const parts = rel.split(sep15);
+    if (!lstatSync13(root).isDirectory()) return null;
+    const parts = rel.split(sep16);
     let at2 = root;
     for (let i = 0; i < parts.length; i++) {
-      at2 = join58(at2, parts[i]);
-      const st = lstatSync12(at2);
+      at2 = join59(at2, parts[i]);
+      const st = lstatSync13(at2);
       if (st.isSymbolicLink() || !(i === parts.length - 1 ? st.isFile() : st.isDirectory())) return null;
     }
-    const canonicalRoot = realpathSync8(root);
-    if (!realpathSync8(at2).startsWith(canonicalRoot + sep15)) return null;
+    const canonicalRoot = realpathSync9(root);
+    if (!realpathSync9(at2).startsWith(canonicalRoot + sep16)) return null;
     const fd = openSync3(at2, constants.O_RDONLY | (constants.O_NOFOLLOW ?? 0));
     try {
       if (!fstatSync(fd).isFile()) return null;
-      return readFileSync66(fd);
+      return readFileSync67(fd);
     } finally {
       closeSync4(fd);
     }
@@ -57497,7 +57676,7 @@ var init_run_watch = __esm({
     };
     isDir = (path2) => {
       try {
-        return statSync15(path2).isDirectory();
+        return statSync16(path2).isDirectory();
       } catch {
         return false;
       }
@@ -57521,19 +57700,19 @@ __export(run_browser_exports, {
   runInBrowser: () => runInBrowser
 });
 import { createServer as createServer7 } from "node:http";
-import { existsSync as existsSync60, readFileSync as readFileSync67 } from "node:fs";
+import { existsSync as existsSync61, readFileSync as readFileSync68 } from "node:fs";
 import { spawnSync as spawnSync3 } from "node:child_process";
-import { dirname as dirname32, resolve as resolve47 } from "node:path";
+import { dirname as dirname33, resolve as resolve48 } from "node:path";
 import { fileURLToPath as fileURLToPath25 } from "node:url";
 function stagedDir() {
-  return process.env.HIMI_BROWSER_PLANE_OUT ? resolve47(process.env.HIMI_BROWSER_PLANE_OUT) : resolve47(REPO, "packages", "serve", "dist", "browser-plane");
+  return process.env.HIMI_BROWSER_PLANE_OUT ? resolve48(process.env.HIMI_BROWSER_PLANE_OUT) : resolve48(REPO, "packages", "serve", "dist", "browser-plane");
 }
 function missingStaged() {
-  return [...SERVED].filter((f) => !existsSync60(resolve47(stagedDir(), f))).sort();
+  return [...SERVED].filter((f) => !existsSync61(resolve48(stagedDir(), f))).sort();
 }
 function ensureBrowserPlaneStaged() {
   if (missingStaged().length === 0) return { ok: true, detail: "already staged" };
-  const r = spawnSync3(process.execPath, [resolve47(REPO, "core/serve/scripts/stage-browser-plane.mjs")], {
+  const r = spawnSync3(process.execPath, [resolve48(REPO, "core/serve/scripts/stage-browser-plane.mjs")], {
     cwd: REPO,
     encoding: "utf8"
   });
@@ -57619,7 +57798,7 @@ async function runInBrowser(releaseRoot, app, header, opts = {}) {
     }
     const name = path2 === "/" || path2 === "/index.html" ? "host.html" : path2.slice(1);
     if (SERVED.has(name)) {
-      if (!existsSync60(resolve47(stagedDir(), name))) {
+      if (!existsSync61(resolve48(stagedDir(), name))) {
         const restaged = ensureBrowserPlaneStaged();
         if (!restaged.ok) {
           res.writeHead(503, { "content-type": "application/json" });
@@ -57629,7 +57808,7 @@ async function runInBrowser(releaseRoot, app, header, opts = {}) {
       }
       let bytes2;
       try {
-        bytes2 = readFileSync67(resolve47(stagedDir(), name));
+        bytes2 = readFileSync68(resolve48(stagedDir(), name));
       } catch (e) {
         res.writeHead(503, { "content-type": "application/json" });
         res.end(JSON.stringify({ error: "browser_plane_unstaged", file: name, detail: String(e) }));
@@ -57671,8 +57850,8 @@ var init_run_browser = __esm({
     init_open_url();
     init_file_store();
     init_wix_client_id();
-    HERE2 = dirname32(fileURLToPath25(import.meta.url));
-    REPO = resolve47(HERE2, "..", "..", "..");
+    HERE2 = dirname33(fileURLToPath25(import.meta.url));
+    REPO = resolve48(HERE2, "..", "..", "..");
     SERVED = /* @__PURE__ */ new Set(["host.html", "sw.js", "package-reader.js"]);
   }
 });
@@ -58091,11 +58270,11 @@ __export(preflight_exports, {
   parseStoreConfig: () => parseStoreConfig,
   requireEnv: () => requireEnv
 });
-import { existsSync as existsSync61, readFileSync as readFileSync68 } from "node:fs";
-import { isAbsolute as isAbsolute5, relative as relative12, resolve as resolve48 } from "node:path";
+import { existsSync as existsSync62, readFileSync as readFileSync69 } from "node:fs";
+import { isAbsolute as isAbsolute6, relative as relative13, resolve as resolve49 } from "node:path";
 function isInsideRepo(p) {
-  const rel = relative12(REPO_ROOT3, resolve48(p));
-  return rel !== "" && !rel.startsWith("..") && !isAbsolute5(rel);
+  const rel = relative13(REPO_ROOT3, resolve49(p));
+  return rel !== "" && !rel.startsWith("..") && !isAbsolute6(rel);
 }
 function assertCredentialOutsideRepo(label2, p) {
   if (isInsideRepo(p)) {
@@ -58148,10 +58327,10 @@ function parseStoreConfig(text8) {
 }
 function loadStoreConfig(app) {
   const p = storeConfigPath(app);
-  if (!existsSync61(p)) {
+  if (!existsSync62(p)) {
     throw new Error(`No store config at ${p}. Create apps/${app}/store/store.config.yaml first (see /setup-store-signing).`);
   }
-  return parseStoreConfig(readFileSync68(p, "utf8"));
+  return parseStoreConfig(readFileSync69(p, "utf8"));
 }
 var init_preflight = __esm({
   "../store-release/preflight.ts"() {
@@ -58170,19 +58349,19 @@ __export(credential_profile_exports, {
   profilePath: () => profilePath,
   resolveStoreCredentials: () => resolveStoreCredentials
 });
-import { existsSync as existsSync62, readFileSync as readFileSync69 } from "node:fs";
+import { existsSync as existsSync63, readFileSync as readFileSync70 } from "node:fs";
 import { homedir as homedir5 } from "node:os";
-import { join as join59 } from "node:path";
+import { join as join60 } from "node:path";
 function credentialsDir(home = homedir5()) {
-  return join59(home, ".himalaya", "store-credentials");
+  return join60(home, ".himalaya", "store-credentials");
 }
 function profilePath(name, home = homedir5()) {
   if (!PROFILE_NAME.test(name)) {
     throw new Error(
-      `credential profile ${JSON.stringify(name)} is not a profile name \u2014 use letters, digits, ".", "_" or "-" starting with a letter or digit. It names ${join59(credentialsDir(home), "<name>.json")}; it is never a path.`
+      `credential profile ${JSON.stringify(name)} is not a profile name \u2014 use letters, digits, ".", "_" or "-" starting with a letter or digit. It names ${join60(credentialsDir(home), "<name>.json")}; it is never a path.`
     );
   }
-  return join59(credentialsDir(home), `${name}.json`);
+  return join60(credentialsDir(home), `${name}.json`);
 }
 function parseProfile(text8, label2) {
   let doc;
@@ -58213,8 +58392,8 @@ function resolveStoreCredentials(opts) {
   const { app, cfg } = opts;
   const env = opts.env ?? process.env;
   const home = opts.home ?? homedir5();
-  const read = opts.readProfile ?? ((p) => readFileSync69(p, "utf8"));
-  const exists = opts.profileExists ?? existsSync62;
+  const read = opts.readProfile ?? ((p) => readFileSync70(p, "utf8"));
+  const exists = opts.profileExists ?? existsSync63;
   const ios = cfg.ios ?? {};
   const flagName = opts.profileFlag?.trim();
   const named = namedProfile(cfg, opts.profileFlag);
@@ -58294,9 +58473,9 @@ __export(preflight_app_exports, {
   preflightApp: () => preflightApp,
   profileAccount: () => profileAccount
 });
-import { readFileSync as readFileSync70, existsSync as existsSync63, readdirSync as readdirSync29, statSync as statSync16 } from "node:fs";
+import { readFileSync as readFileSync71, existsSync as existsSync64, readdirSync as readdirSync30, statSync as statSync17 } from "node:fs";
 import { createHash as createHash30 } from "node:crypto";
-import { join as join60 } from "node:path";
+import { join as join61 } from "node:path";
 function analyze(projectYml, storeConfig, icon, account) {
   const f = [];
   const has = (re, s) => re.test(s);
@@ -58360,13 +58539,13 @@ function profileAccount(app, storeConfig, opts = {}) {
   }
 }
 async function preflightApp(app, opts = {}) {
-  const projectYml = existsSync63(iosProjectYml(app)) ? readFileSync70(iosProjectYml(app), "utf8") : "";
-  const storeConfig = existsSync63(storeConfigPath(app)) ? readFileSync70(storeConfigPath(app), "utf8") : "";
+  const projectYml = existsSync64(iosProjectYml(app)) ? readFileSync71(iosProjectYml(app), "utf8") : "";
+  const storeConfig = existsSync64(storeConfigPath(app)) ? readFileSync71(storeConfigPath(app), "utf8") : "";
   if (!storeConfig) return [{ level: "error", message: `no apps/${app}/store/store.config.yaml \u2014 run /setup-store-signing first.` }];
   const findings = analyze(
     projectYml,
     storeConfig,
-    await appIconState(join60(appDir(app), "ios")),
+    await appIconState(join61(appDir(app), "ios")),
     profileAccount(app, storeConfig, opts)
   );
   findings.push(...analyzeListing(metadataFilesPresent(app), listScreenshots(app)));
@@ -58395,18 +58574,18 @@ function analyzeSubmissionRecord(appLevel, review, opts) {
   return f;
 }
 function appLevelMetadataFiles(app, locale = "en-US") {
-  const root = join60(storeDir(app), "metadata");
+  const root = join61(storeDir(app), "metadata");
   const out2 = /* @__PURE__ */ new Set();
-  if (existsSync63(root)) {
-    for (const n of readdirSync29(root)) if (n.endsWith(".txt")) out2.add(n);
+  if (existsSync64(root)) {
+    for (const n of readdirSync30(root)) if (n.endsWith(".txt")) out2.add(n);
   }
-  if (existsSync63(join60(root, locale, "privacy_url.txt"))) out2.add("privacy_url.txt");
+  if (existsSync64(join61(root, locale, "privacy_url.txt"))) out2.add("privacy_url.txt");
   return out2;
 }
 function reviewInfoFiles(app) {
-  const dir = join60(storeDir(app), "review_information");
-  if (!existsSync63(dir)) return /* @__PURE__ */ new Set();
-  return new Set(readdirSync29(dir).filter((n) => n.endsWith(".txt")));
+  const dir = join61(storeDir(app), "review_information");
+  if (!existsSync64(dir)) return /* @__PURE__ */ new Set();
+  return new Set(readdirSync30(dir).filter((n) => n.endsWith(".txt")));
 }
 function isValidAppStoreSize(w, h) {
   return APP_STORE_SIZES.some(([a, b]) => w === a && h === b || w === b && h === a);
@@ -58515,12 +58694,12 @@ function analyzePlayListing(assets) {
   return f;
 }
 function playListingAssets(app, locale = "en-US") {
-  const dir = join60(storeDir(app), "play", locale, "images");
+  const dir = join61(storeDir(app), "play", locale, "images");
   const read = (names) => {
     for (const name of names) {
-      const p = join60(dir, name);
+      const p = join61(dir, name);
       try {
-        if (statSync16(p).isFile()) return { name, bytes: readFileSync70(p) };
+        if (statSync17(p).isFile()) return { name, bytes: readFileSync71(p) };
       } catch {
       }
     }
@@ -58551,26 +58730,26 @@ function analyzeListing(metaFiles, shots) {
   return f;
 }
 function metadataFilesPresent(app, locale = "en-US") {
-  const dir = join60(storeDir(app), "metadata", locale);
-  if (!existsSync63(dir)) return /* @__PURE__ */ new Set();
-  return new Set(readdirSync29(dir).filter((n) => n.endsWith(".txt")));
+  const dir = join61(storeDir(app), "metadata", locale);
+  if (!existsSync64(dir)) return /* @__PURE__ */ new Set();
+  return new Set(readdirSync30(dir).filter((n) => n.endsWith(".txt")));
 }
 function listScreenshots(app, locale = "en-US") {
   const out2 = [];
-  const flat = join60(storeDir(app), "screenshots", locale);
-  if (existsSync63(flat)) {
-    for (const png of readdirSync29(flat).filter((n) => n.endsWith(".png"))) {
-      const sz = pngSize(readFileSync70(join60(flat, png)));
+  const flat = join61(storeDir(app), "screenshots", locale);
+  if (existsSync64(flat)) {
+    for (const png of readdirSync30(flat).filter((n) => n.endsWith(".png"))) {
+      const sz = pngSize(readFileSync71(join61(flat, png)));
       if (sz) out2.push({ name: png, w: sz.w, h: sz.h });
     }
   }
-  const legacy = join60(storeDir(app), "metadata", locale, "screenshots");
-  if (existsSync63(legacy)) {
-    for (const deviceDir of readdirSync29(legacy)) {
-      const d = join60(legacy, deviceDir);
-      if (!statSync16(d).isDirectory()) continue;
-      for (const png of readdirSync29(d).filter((n) => n.endsWith(".png"))) {
-        const sz = pngSize(readFileSync70(join60(d, png)));
+  const legacy = join61(storeDir(app), "metadata", locale, "screenshots");
+  if (existsSync64(legacy)) {
+    for (const deviceDir of readdirSync30(legacy)) {
+      const d = join61(legacy, deviceDir);
+      if (!statSync17(d).isDirectory()) continue;
+      for (const png of readdirSync30(d).filter((n) => n.endsWith(".png"))) {
+        const sz = pngSize(readFileSync71(join61(d, png)));
         if (sz) out2.push({ name: `${deviceDir}/${png}`, w: sz.w, h: sz.h });
       }
     }
@@ -58578,13 +58757,13 @@ function listScreenshots(app, locale = "en-US") {
   return out2;
 }
 function placeholderHashes2() {
-  const templateIos = join60(appDir("_template"), "ios");
-  if (!existsSync63(templateIos)) return [LEGACY_PLACEHOLDER_SHA2562];
-  for (const target of readdirSync29(templateIos)) {
-    const p = join60(templateIos, target, "Assets.xcassets", "AppIcon.appiconset", "icon_1024.png");
+  const templateIos = join61(appDir("_template"), "ios");
+  if (!existsSync64(templateIos)) return [LEGACY_PLACEHOLDER_SHA2562];
+  for (const target of readdirSync30(templateIos)) {
+    const p = join61(templateIos, target, "Assets.xcassets", "AppIcon.appiconset", "icon_1024.png");
     try {
-      if (!statSync16(p).isFile()) continue;
-      return [LEGACY_PLACEHOLDER_SHA2562, createHash30("sha256").update(readFileSync70(p)).digest("hex")];
+      if (!statSync17(p).isFile()) continue;
+      return [LEGACY_PLACEHOLDER_SHA2562, createHash30("sha256").update(readFileSync71(p)).digest("hex")];
     } catch {
     }
   }
@@ -58615,12 +58794,12 @@ async function pixelIssues(bytes2) {
   }
 }
 async function appIconState(iosDir) {
-  if (!existsSync63(iosDir)) return { exists: false, isPlaceholder: false, storeIssues: [] };
-  for (const target of readdirSync29(iosDir)) {
-    const p = join60(iosDir, target, "Assets.xcassets", "AppIcon.appiconset", "icon_1024.png");
+  if (!existsSync64(iosDir)) return { exists: false, isPlaceholder: false, storeIssues: [] };
+  for (const target of readdirSync30(iosDir)) {
+    const p = join61(iosDir, target, "Assets.xcassets", "AppIcon.appiconset", "icon_1024.png");
     try {
-      if (!statSync16(p).isFile()) continue;
-      const bytes2 = readFileSync70(p);
+      if (!statSync17(p).isFile()) continue;
+      const bytes2 = readFileSync71(p);
       const hash = createHash30("sha256").update(bytes2).digest("hex");
       const pixels = await pixelIssues(bytes2);
       return {
@@ -58692,7 +58871,7 @@ __export(version_exports, {
   setAndroidVersion: () => setAndroidVersion,
   setIosVersion: () => setIosVersion
 });
-import { readFileSync as readFileSync71, writeFileSync as writeFileSync24 } from "node:fs";
+import { readFileSync as readFileSync72, writeFileSync as writeFileSync25 } from "node:fs";
 function readIosVersion(projectYml) {
   const marketing = matchScalar(projectYml, "CFBundleShortVersionString");
   const build2 = matchScalar(projectYml, "CFBundleVersion");
@@ -58750,15 +58929,15 @@ function setAndroidVersion(gradle, v) {
 function bumpVersion(app, opts) {
   const iosPath = iosProjectYml(app);
   const gradlePath = androidGradle(app);
-  const iosYml = readFileSync71(iosPath, "utf8");
-  const gradle = readFileSync71(gradlePath, "utf8");
+  const iosYml = readFileSync72(iosPath, "utf8");
+  const gradle = readFileSync72(gradlePath, "utf8");
   const current = readIosVersion(iosYml);
   const next = {
     marketing: opts.marketing ?? current.marketing,
     build: opts.build === "increment" || opts.build === void 0 ? current.build + (opts.build === "increment" ? 1 : 0) : opts.build
   };
-  writeFileSync24(iosPath, setIosVersion(iosYml, next));
-  writeFileSync24(gradlePath, setAndroidVersion(gradle, next));
+  writeFileSync25(iosPath, setIosVersion(iosYml, next));
+  writeFileSync25(gradlePath, setAndroidVersion(gradle, next));
   return next;
 }
 var init_version = __esm({
@@ -58768,7 +58947,7 @@ var init_version = __esm({
 });
 
 // ../store-release/register-bundle.ts
-import { readFileSync as readFileSync72 } from "node:fs";
+import { readFileSync as readFileSync73 } from "node:fs";
 import { createPrivateKey as createPrivateKey2, sign } from "node:crypto";
 function b64url2(b) {
   return Buffer.from(b).toString("base64").replace(/\+/g, "-").replace(/\//g, "_").replace(/=+$/, "");
@@ -58786,7 +58965,7 @@ function bundleIdBody(identifier, name, platform = "IOS") {
 async function registerBundleId(opts) {
   const env = requireEnv(["ASC_KEY_ID", "ASC_ISSUER_ID", "ASC_KEY_PATH"]);
   assertCredentialOutsideRepo("ASC_KEY_PATH", env.ASC_KEY_PATH);
-  const jwt = ascJwt(env.ASC_KEY_ID, env.ASC_ISSUER_ID, readFileSync72(env.ASC_KEY_PATH, "utf8"), Math.floor(Date.now() / 1e3));
+  const jwt = ascJwt(env.ASC_KEY_ID, env.ASC_ISSUER_ID, readFileSync73(env.ASC_KEY_PATH, "utf8"), Math.floor(Date.now() / 1e3));
   const res = await fetch(`${ASC_API}/v1/bundleIds`, {
     method: "POST",
     headers: { Authorization: `Bearer ${jwt}`, "Content-Type": "application/json" },
@@ -58840,7 +59019,7 @@ __export(asc_status_exports, {
   ascStatus: () => ascStatus,
   buildVerdict: () => buildVerdict
 });
-import { readFileSync as readFileSync73 } from "node:fs";
+import { readFileSync as readFileSync74 } from "node:fs";
 function buildVerdict(builds) {
   if (!builds.length) {
     return "NO builds registered \u2014 if you uploaded recently and it's been >15 min, the binary was REJECTED IN PROCESSING (reason is email-only; run validate-binary.ts / scan-purpose-strings.ts to reproduce it).";
@@ -58854,7 +59033,7 @@ function buildVerdict(builds) {
 function client(creds) {
   const env = creds ?? requireEnv(["ASC_KEY_ID", "ASC_ISSUER_ID", "ASC_KEY_PATH"]);
   assertCredentialOutsideRepo("ASC_KEY_PATH", env.ASC_KEY_PATH);
-  const jwt = ascJwt(env.ASC_KEY_ID, env.ASC_ISSUER_ID, readFileSync73(env.ASC_KEY_PATH, "utf8"), Math.floor(Date.now() / 1e3));
+  const jwt = ascJwt(env.ASC_KEY_ID, env.ASC_ISSUER_ID, readFileSync74(env.ASC_KEY_PATH, "utf8"), Math.floor(Date.now() / 1e3));
   return async (path2) => {
     const r = await fetch(`${ASC}${path2}`, { headers: { Authorization: `Bearer ${jwt}` } });
     return { status: r.status, json: await r.json().catch(() => ({})) };
@@ -58903,7 +59082,7 @@ var init_asc_status = __esm({
 // ../../core/functions-secrets/src/vault.ts
 import { createCipheriv, createDecipheriv, randomBytes as randomBytes5 } from "node:crypto";
 import { mkdir, readFile as readFile2, rename, writeFile as writeFile2 } from "node:fs/promises";
-import { dirname as dirname33 } from "node:path";
+import { dirname as dirname34 } from "node:path";
 function createJsonSecretStore(filePath) {
   const read = async () => {
     try {
@@ -58916,7 +59095,7 @@ function createJsonSecretStore(filePath) {
     }
   };
   const write2 = async (records) => {
-    await mkdir(dirname33(filePath), { recursive: true });
+    await mkdir(dirname34(filePath), { recursive: true });
     const temporary = `${filePath}.${process.pid}.tmp`;
     await writeFile2(temporary, `${JSON.stringify(records, null, 2)}
 `, { mode: 384 });
@@ -59014,7 +59193,7 @@ __export(secrets_exports, {
   runRemoteSecretsCommand: () => runRemoteSecretsCommand,
   runSecretsCommand: () => runSecretsCommand
 });
-import { readFileSync as readFileSync74 } from "node:fs";
+import { readFileSync as readFileSync75 } from "node:fs";
 function environment(value) {
   if (value === "preview" || value === "production") return value;
   throw new Error("--environment must be preview or production");
@@ -59045,7 +59224,7 @@ async function runSecretsCommand(operation, flags, io, options = {}) {
       io.log(JSON.stringify(await vault.list({ app, environment: env })));
       return 0;
     }
-    const value = options.readValue ? options.readValue() : readFileSync74(0, "utf8").replace(/\r?\n$/, "");
+    const value = options.readValue ? options.readValue() : readFileSync75(0, "utf8").replace(/\r?\n$/, "");
     if (operation === "set") await vault.set({ app, environment: env, name, value });
     else if (operation === "rotate") await vault.rotate({ app, environment: env, name, value });
     else throw new Error(`unknown secrets operation ${operation}`);
@@ -59074,7 +59253,7 @@ async function runRemoteSecretsCommand(operation, flags, io, options) {
     }
     let body;
     if (operation !== "list") {
-      const value = options.readValue ? options.readValue() : readFileSync74(0, "utf8").replace(/\r?\n$/, "");
+      const value = options.readValue ? options.readValue() : readFileSync75(0, "utf8").replace(/\r?\n$/, "");
       body = JSON.stringify({ value });
     }
     const response = await (options.fetchImpl ?? fetch)(url, { method: operation === "list" ? "GET" : operation === "set" ? "PUT" : "POST", headers: headers2, body });
@@ -59211,29 +59390,29 @@ __export(notify_ping_exports, {
   runNotifyPing: () => runNotifyPing
 });
 import { randomUUID as randomUUID5 } from "node:crypto";
-import { resolve as resolve49 } from "node:path";
-function refuse4(io, error, hint, exit = 2, extra = {}) {
+import { resolve as resolve50 } from "node:path";
+function refuse5(io, error, hint, exit = 2, extra = {}) {
   io.error(JSON.stringify({ ok: false, error, ...hint ? { hint } : {}, ...extra }));
   return exit;
 }
 async function runNotifyPing(flags, io, deps = {}) {
   const flagError = flagRefusal(flags);
-  if (flagError) return refuse4(io, flagError);
-  const input = mergePushInputs(pushInputsFromContent(resolve49(text7(flags.content) ?? process.cwd())), flags);
+  if (flagError) return refuse5(io, flagError);
+  const input = mergePushInputs(pushInputsFromContent(resolve50(text7(flags.content) ?? process.cwd())), flags);
   const missing = [...input.app ? [] : ["app"], ...input.site ? [] : ["site"], ...REQUIRED_FLAGS.filter((f) => !text7(flags[f]))];
-  if (missing.length) return refuse4(io, "needs_input", "Name the app and site (or --content), the member's login email, a title and a link.", 2, { missing });
+  if (missing.length) return refuse5(io, "needs_input", "Name the app and site (or --content), the member's login email, a title and a link.", 2, { missing });
   const requestId2 = text7(flags["request-id"]) ?? (deps.newRequestId ?? randomUUID5)();
-  if (!UUID_RE.test(requestId2)) return refuse4(io, "invalid_request_id", "Reuse the requestId a previous send printed.");
+  if (!UUID_RE.test(requestId2)) return refuse5(io, "invalid_request_id", "Reuse the requestId a previous send printed.");
   const owner = await hostedOwnerSession(flags, deps);
-  if (!owner.ok) return refuse4(io, owner.error, owner.hint, owner.exit);
+  if (!owner.ok) return refuse5(io, owner.error, owner.hint, owner.exit);
   const { session } = owner;
   const ownership = await verifyAppOwnership({ ownerIssue: session.ownerIssue, controlToken: session.controlToken, declaredName: input.app, fetchImpl: deps.fetchImpl });
-  if (ownership.state !== "owned") return refuse4(io, `app_ownership_${ownership.state}`, "Sending requires the app owner.", 1);
+  if (ownership.state !== "owned") return refuse5(io, `app_ownership_${ownership.state}`, "Sending requires the app owner.", 1);
   let siteToken2;
   try {
     siteToken2 = await (deps.siteToken ?? siteToken)(input.site);
   } catch {
-    return refuse4(io, "wix_site_token_required", "Run wix login as the site owner; the site token reads this site's members.", 1);
+    return refuse5(io, "wix_site_token_required", "Run wix login as the site owner; the site token reads this site's members.", 1);
   }
   const body = {
     app: ownership.slug,
@@ -59256,12 +59435,12 @@ function flagRefusal(flags) {
 function report2(http, sent, flags, io) {
   const code = refusalCode(http);
   if (code === "send_outcome_unknown") {
-    return refuse4(io, code, `Ping may have accepted it. Re-run the same command with --request-id ${sent.requestId}: Ping runs one request at most once per site for 24 hours.`, 1, { requestId: sent.requestId });
+    return refuse5(io, code, `Ping may have accepted it. Re-run the same command with --request-id ${sent.requestId}: Ping runs one request at most once per site for 24 hours.`, 1, { requestId: sent.requestId });
   }
   if (code === "rate_limited" && http.retryAfterSec) {
-    return refuse4(io, code, `Test sends are limited per owner; retry in ${http.retryAfterSec} seconds.`, 1, { retryAfterSec: http.retryAfterSec });
+    return refuse5(io, code, `Test sends are limited per owner; retry in ${http.retryAfterSec} seconds.`, 1, { retryAfterSec: http.retryAfterSec });
   }
-  if (code) return refuse4(io, code, HINTS[code], 1);
+  if (code) return refuse5(io, code, HINTS[code], 1);
   if (flags.json === true) io.log(JSON.stringify(http.body, null, 2));
   else io.log(summary(http.body ?? {}, sent));
   return 0;
@@ -59321,15 +59500,15 @@ __export(notify_exports, {
   runNotify: () => runNotify,
   saveAdminSession: () => saveAdminSession
 });
-import { chmodSync as chmodSync3, mkdirSync as mkdirSync29, readFileSync as readFileSync75, writeFileSync as writeFileSync25 } from "node:fs";
+import { chmodSync as chmodSync3, mkdirSync as mkdirSync30, readFileSync as readFileSync76, writeFileSync as writeFileSync26 } from "node:fs";
 import { homedir as homedir6 } from "node:os";
-import { dirname as dirname34, join as join61 } from "node:path";
+import { dirname as dirname35, join as join62 } from "node:path";
 function defaultSessionsPath() {
-  return process.env.HIMI_ADMIN_SESSIONS_FILE ?? join61(homedir6(), ".himalaya", "admin-sessions.json");
+  return process.env.HIMI_ADMIN_SESSIONS_FILE ?? join62(homedir6(), ".himalaya", "admin-sessions.json");
 }
 function loadSessionsFile(path2 = defaultSessionsPath()) {
   try {
-    return JSON.parse(readFileSync75(path2, "utf8"));
+    return JSON.parse(readFileSync76(path2, "utf8"));
   } catch {
     return {};
   }
@@ -59337,10 +59516,10 @@ function loadSessionsFile(path2 = defaultSessionsPath()) {
 function saveAdminSession(adminUrl, session, path2 = defaultSessionsPath()) {
   const file = loadSessionsFile(path2);
   file.sessions = { ...file.sessions, [adminUrl]: session };
-  mkdirSync29(dirname34(path2), { recursive: true, mode: 448 });
-  writeFileSync25(path2, JSON.stringify(file, null, 2) + "\n", { mode: 384 });
+  mkdirSync30(dirname35(path2), { recursive: true, mode: 448 });
+  writeFileSync26(path2, JSON.stringify(file, null, 2) + "\n", { mode: 384 });
   try {
-    chmodSync3(dirname34(path2), 448);
+    chmodSync3(dirname35(path2), 448);
     chmodSync3(path2, 384);
   } catch {
   }
@@ -61940,10 +62119,10 @@ function assertPublicSiteUrl(raw) {
   if (refusal) throw new Error(refusal);
 }
 function resolveAll(hostname2) {
-  return new Promise((resolve53, reject) => {
+  return new Promise((resolve54, reject) => {
     dnsLookup(hostname2, { all: true, verbatim: true }, (err, addresses) => {
       if (err) reject(err);
-      else resolve53(addresses);
+      else resolve54(addresses);
     });
   });
 }
@@ -61951,13 +62130,13 @@ function withAbort(start, signal, what) {
   if (signal?.aborted) return Promise.reject(new Error(`${what} aborted`));
   const work = start();
   if (!signal) return work;
-  return new Promise((resolve53, reject) => {
+  return new Promise((resolve54, reject) => {
     const onAbort = () => reject(new Error(`${what} aborted`));
     signal.addEventListener("abort", onAbort, { once: true });
-    work.then(resolve53, reject).finally(() => signal.removeEventListener("abort", onAbort));
+    work.then(resolve54, reject).finally(() => signal.removeEventListener("abort", onAbort));
   });
 }
-async function pinAddress(url, resolve53 = resolveAll, signal) {
+async function pinAddress(url, resolve54 = resolveAll, signal) {
   const host = url.hostname.replace(/^\[|\]$/g, "");
   if (ipv4Octets(host)) {
     if (isBlockedAddress(host)) throw new Error(`${host} is a blocked address`);
@@ -61967,7 +62146,7 @@ async function pinAddress(url, resolve53 = resolveAll, signal) {
     if (isBlockedAddress(host)) throw new Error(`${host} is a blocked address`);
     return { address: host, family: 6 };
   }
-  const addresses = await withAbort(() => resolve53(host), signal, `${host} lookup`);
+  const addresses = await withAbort(() => resolve54(host), signal, `${host} lookup`);
   if (!addresses.length) throw new Error(`${host} resolved to no address`);
   const blocked = addresses.filter((a) => isBlockedAddress(a.address)).map((a) => a.address);
   if (blocked.length) throw new Error(`${host} resolves to a blocked address (${blocked.join(", ")})`);
@@ -62007,7 +62186,7 @@ function copyIncomingHeaders(headers2) {
   return out2;
 }
 function requestOnce(url, pinned, init) {
-  return new Promise((resolve53, reject) => {
+  return new Promise((resolve54, reject) => {
     const headers2 = { host: url.host, "accept-encoding": "identity" };
     new Headers(init.headers ?? {}).forEach((value, key2) => {
       if (key2.toLowerCase() !== "host") headers2[key2] = value;
@@ -62037,7 +62216,7 @@ function requestOnce(url, pinned, init) {
           reject(err);
           return;
         }
-        resolve53(new Response(body, { status, statusText: res.statusMessage ?? "", headers: out2 }));
+        resolve54(new Response(body, { status, statusText: res.statusMessage ?? "", headers: out2 }));
       }
     );
     req.on("error", reject);
@@ -63097,8 +63276,8 @@ var init_brand_font = __esm({
 });
 
 // src/site-analyze/write-artifacts.ts
-import { mkdirSync as mkdirSync30, writeFileSync as writeFileSync26 } from "node:fs";
-import { join as join62 } from "node:path";
+import { mkdirSync as mkdirSync31, writeFileSync as writeFileSync27 } from "node:fs";
+import { join as join63 } from "node:path";
 function attachVeloSources(book, sources, put) {
   const byPath = new Map((sources ?? []).map((s) => [s.path, s.text]));
   for (const f of book.velo.files) {
@@ -63253,13 +63432,13 @@ async function downloadMedia(book, fetchImpl, put) {
 }
 async function writeBusinessBook(result, opts) {
   const out2 = opts.outDir;
-  mkdirSync30(join62(out2, "evidence/pages"), { recursive: true });
-  mkdirSync30(join62(out2, "media/catalog"), { recursive: true });
+  mkdirSync31(join63(out2, "evidence/pages"), { recursive: true });
+  mkdirSync31(join63(out2, "media/catalog"), { recursive: true });
   const files = [];
   const put = (rel, body) => {
-    const p = join62(out2, rel);
-    mkdirSync30(join62(p, ".."), { recursive: true });
-    writeFileSync26(p, body);
+    const p = join63(out2, rel);
+    mkdirSync31(join63(p, ".."), { recursive: true });
+    writeFileSync27(p, body);
     files.push(rel);
   };
   const book = result.book;
@@ -63352,15 +63531,15 @@ var init_customer_build = __esm({
 });
 
 // src/site-analyze/apply.ts
-import { existsSync as existsSync64, readFileSync as readFileSync76, writeFileSync as writeFileSync27, copyFileSync as copyFileSync3, mkdirSync as mkdirSync31, realpathSync as realpathSync9, statSync as statSync17 } from "node:fs";
-import { dirname as dirname35, isAbsolute as isAbsolute6, join as join63, resolve as resolve50, sep as sep16 } from "node:path";
+import { existsSync as existsSync65, readFileSync as readFileSync77, writeFileSync as writeFileSync28, copyFileSync as copyFileSync3, mkdirSync as mkdirSync32, realpathSync as realpathSync10, statSync as statSync18 } from "node:fs";
+import { dirname as dirname36, isAbsolute as isAbsolute7, join as join64, resolve as resolve51, sep as sep17 } from "node:path";
 import { spawnSync as spawnSync4 } from "node:child_process";
 function unpairedRedirectNote(overlay) {
   if (!overlay.wix?.clientId || overlay.wix.redirectUri) return void 0;
   return `no OAuth redirect paired with client ${overlay.wix.clientId} \u2014 the app (and prepare:customer) will refuse to start until one is set. Register it with \`himi site client ensure --site ${overlay.siteId?.trim() || "<msid>"} --redirect-uri <uri> --yes\`, then re-run analyze with \`--redirect-uri <uri>\` (or export HIMI_BRANDED_LITE_WIX_REDIRECT_URI)`;
 }
 function posix3(p) {
-  return resolve50(p).replace(/\\/g, "/");
+  return resolve51(p).replace(/\\/g, "/");
 }
 function committedShellProvisioning(path2) {
   return committedShellFor(posix3(path2));
@@ -63368,8 +63547,8 @@ function committedShellProvisioning(path2) {
 function findRepoRoot(cwd) {
   let dir = cwd;
   for (let i = 0; i < 8; i++) {
-    if (SHELL_NAMES2.some((name) => existsSync64(join63(dir, shellAppDir(name), "package.json")))) return dir;
-    const next = dirname35(dir);
+    if (SHELL_NAMES2.some((name) => existsSync65(join64(dir, shellAppDir(name), "package.json")))) return dir;
+    const next = dirname36(dir);
     if (next === dir) break;
     dir = next;
   }
@@ -63394,7 +63573,7 @@ function assertNotCommitted(path2, forbidden) {
       `refusing to overwrite committed ${committedProvisioningPath(committed)} \u2014 use prepare:customer --contract`
     );
   }
-  if (forbidden && resolve50(path2) === resolve50(forbidden)) {
+  if (forbidden && resolve51(path2) === resolve51(forbidden)) {
     const named = committedShellProvisioning(forbidden);
     throw new Error(
       `refusing to overwrite committed ${named ? committedProvisioningPath(named) : forbidden} \u2014 pass a content-package provisioning.json or use prepare:customer --contract`
@@ -63439,36 +63618,36 @@ function mergeCustomerOwned(committed, overlay) {
 }
 function buildMergedContract(options) {
   const { appDir: appDir3, packageDir, overlay } = options;
-  const committedPath = join63(appDir3, "provisioning.json");
-  if (!existsSync64(committedPath)) {
+  const committedPath = join64(appDir3, "provisioning.json");
+  if (!existsSync65(committedPath)) {
     throw new Error(`shell has no committed provisioning.json at ${committedPath} to build a contract from`);
   }
-  const committed = JSON.parse(readFileSync76(committedPath, "utf8"));
+  const committed = JSON.parse(readFileSync77(committedPath, "utf8"));
   const merged = mergeCustomerOwned(committed, overlay);
   const overlayFontFamily = (overlay.branding ?? {}).fontFamily;
   const branding = merged.branding ?? {};
   const staged = [];
   const contained = (root, rel) => {
-    if (isAbsolute6(rel)) return void 0;
-    const full = resolve50(root, rel);
-    return full.startsWith(resolve50(root) + sep16) ? full : void 0;
+    if (isAbsolute7(rel)) return void 0;
+    const full = resolve51(root, rel);
+    return full.startsWith(resolve51(root) + sep17) ? full : void 0;
   };
   const stage = (fromRel, toRel) => {
     const from = contained(packageDir, fromRel);
-    const to = contained(join63(appDir3, STAGED), toRel.slice(STAGED.length + 1));
-    if (!from || !to || !existsSync64(from)) return void 0;
+    const to = contained(join64(appDir3, STAGED), toRel.slice(STAGED.length + 1));
+    if (!from || !to || !existsSync65(from)) return void 0;
     let real;
     let realRoot;
     try {
-      real = realpathSync9(from);
-      realRoot = realpathSync9(packageDir);
+      real = realpathSync10(from);
+      realRoot = realpathSync10(packageDir);
     } catch {
       return void 0;
     }
-    if (!real.startsWith(realRoot + sep16)) return void 0;
+    if (!real.startsWith(realRoot + sep17)) return void 0;
     try {
-      if (!statSync17(real).isFile()) return void 0;
-      mkdirSync31(dirname35(to), { recursive: true });
+      if (!statSync18(real).isFile()) return void 0;
+      mkdirSync32(dirname36(to), { recursive: true });
       copyFileSync3(real, to);
     } catch {
       return void 0;
@@ -63478,11 +63657,11 @@ function buildMergedContract(options) {
   };
   const icon = stage("media/icon.png", `${STAGED}/icon.png`);
   if (icon) branding.appIconPath = icon;
-  const facesPath = join63(packageDir, "media/fonts/faces.json");
-  if (existsSync64(facesPath)) {
+  const facesPath = join64(packageDir, "media/fonts/faces.json");
+  if (existsSync65(facesPath)) {
     let faces = [];
     try {
-      const parsed = JSON.parse(readFileSync76(facesPath, "utf8"));
+      const parsed = JSON.parse(readFileSync77(facesPath, "utf8"));
       faces = Array.isArray(parsed) ? parsed : [];
     } catch {
       faces = [];
@@ -63503,11 +63682,11 @@ function buildMergedContract(options) {
   merged.branding = branding;
   const body = `${JSON.stringify(merged, null, 2)}
 `;
-  const path2 = join63(packageDir, "provisioning.contract.json");
-  writeFileSync27(path2, body);
-  const localPath = join63(appDir3, LOCAL_CONTRACT_REL);
-  mkdirSync31(dirname35(localPath), { recursive: true });
-  writeFileSync27(localPath, body);
+  const path2 = join64(packageDir, "provisioning.contract.json");
+  writeFileSync28(path2, body);
+  const localPath = join64(appDir3, LOCAL_CONTRACT_REL);
+  mkdirSync32(dirname36(localPath), { recursive: true });
+  writeFileSync28(localPath, body);
   staged.push(localPath);
   return { path: path2, staged };
 }
@@ -63540,10 +63719,10 @@ function catalogTypography(overlay, template) {
 function staticFaqFor(overlay, overlayPath) {
   const own3 = overlay.faq;
   if (own3 !== void 0) return deriveStaticFaq(own3);
-  const bookPath = join63(dirname35(resolve50(overlayPath)), "book.json");
-  if (!existsSync64(bookPath)) return void 0;
+  const bookPath = join64(dirname36(resolve51(overlayPath)), "book.json");
+  if (!existsSync65(bookPath)) return void 0;
   try {
-    const book = JSON.parse(readFileSync76(bookPath, "utf8"));
+    const book = JSON.parse(readFileSync77(bookPath, "utf8"));
     const copy = book?.copy;
     if (!copy || typeof copy !== "object" || copy.unavailable) return void 0;
     const pairs = deriveStaticFaq(copy.faq);
@@ -63554,11 +63733,11 @@ function staticFaqFor(overlay, overlayPath) {
   }
 }
 async function applyOverlays(input) {
-  const cwd = resolve50(input.cwd);
+  const cwd = resolve51(input.cwd);
   const shell = input.shell ?? DEFAULT_BRANDABLE_SHELL;
   assertKnownShell(shell);
-  const overlay = JSON.parse(readFileSync76(input.overlayPath, "utf8"));
-  const tokens = JSON.parse(readFileSync76(input.tokensPath, "utf8"));
+  const overlay = JSON.parse(readFileSync77(input.overlayPath, "utf8"));
+  const tokens = JSON.parse(readFileSync77(input.tokensPath, "utf8"));
   const faq = staticFaqFor(overlay, input.overlayPath);
   if (faq !== void 0) overlay.faq = faq;
   const wrote = [];
@@ -63570,15 +63749,15 @@ async function applyOverlays(input) {
         `shell "${shell}" cannot bake a customer brand \u2014 it ships no prepare:customer script`
       );
     }
-    const appDir3 = join63(repoRoot2, shellAppDir(shell));
-    const committedPath = join63(appDir3, "provisioning.json");
-    const committedSite = existsSync64(committedPath) ? JSON.parse(readFileSync76(committedPath, "utf8")).site : void 0;
+    const appDir3 = join64(repoRoot2, shellAppDir(shell));
+    const committedPath = join64(appDir3, "provisioning.json");
+    const committedSite = existsSync65(committedPath) ? JSON.parse(readFileSync77(committedPath, "utf8")).site : void 0;
     if (committedSite !== void 0 && overlay.site === void 0) {
       throw new Error(
         `shell "${shell}" is a site shell: its contract names the customer's website (a \`site\` block), and this overlay has none. Re-run \`himi site analyze --url <site> --shell ${shell}\` to derive the site's page map (edit \`site.pages\` in provisioning.overlay.json if needed), then --apply.`
       );
     }
-    const packageDir = dirname35(resolve50(input.overlayPath));
+    const packageDir = dirname36(resolve51(input.overlayPath));
     const { path: contract, staged } = buildMergedContract({ appDir: appDir3, packageDir, overlay });
     wrote.push(...staged);
     const r = spawnSync4("npm", ["run", "prepare:customer", "--", "--contract", contract], {
@@ -63599,22 +63778,22 @@ async function applyOverlays(input) {
       note: `prepare:customer --contract with a merged contract (committed provisioning.json untouched)${unpairedInRepo ? ` \xB7 ${unpairedInRepo}` : ""}`
     };
   }
-  const pkgProv = join63(cwd, "provisioning.json");
+  const pkgProv = join64(cwd, "provisioning.json");
   assertNotCommitted(pkgProv, input.forbiddenProvisioning);
   let packageFaq = faq;
-  if (existsSync64(pkgProv)) {
-    const cur = JSON.parse(readFileSync76(pkgProv, "utf8"));
+  if (existsSync65(pkgProv)) {
+    const cur = JSON.parse(readFileSync77(pkgProv, "utf8"));
     const merged = deepMerge4(cur, overlay);
     packageFaq = merged.faq;
-    writeFileSync27(pkgProv, JSON.stringify(merged, null, 2) + "\n");
+    writeFileSync28(pkgProv, JSON.stringify(merged, null, 2) + "\n");
     wrote.push(pkgProv);
   } else {
-    writeFileSync27(pkgProv, JSON.stringify(overlay, null, 2) + "\n");
+    writeFileSync28(pkgProv, JSON.stringify(overlay, null, 2) + "\n");
     wrote.push(pkgProv);
   }
-  const pkgTokens = join63(cwd, "tokens.json");
-  if (existsSync64(pkgTokens) && (tokens.colors || tokens.typography)) {
-    const cur = JSON.parse(readFileSync76(pkgTokens, "utf8"));
+  const pkgTokens = join64(cwd, "tokens.json");
+  if (existsSync65(pkgTokens) && (tokens.colors || tokens.typography)) {
+    const cur = JSON.parse(readFileSync77(pkgTokens, "utf8"));
     let tokensIn = tokens;
     if (tokens.typography) {
       const fonts = catalogTypography(tokens.typography, cur.typography);
@@ -63635,13 +63814,13 @@ async function applyOverlays(input) {
       if (primary && glow && typeof glow.color === "string") glow.color = primary;
       stripBrandFromIdiom(merged);
     }
-    writeFileSync27(pkgTokens, JSON.stringify(merged, null, 2) + "\n");
+    writeFileSync28(pkgTokens, JSON.stringify(merged, null, 2) + "\n");
     wrote.push(pkgTokens);
   }
   const homeAction = homeRefreshActionId(shell);
-  const homeSrc = join63(cwd, "dev/index.ts");
-  if (homeAction && existsSync64(homeSrc)) {
-    const prev = readFileSync76(homeSrc, "utf8");
+  const homeSrc = join64(cwd, "dev/index.ts");
+  if (homeAction && existsSync65(homeSrc)) {
+    const prev = readFileSync77(homeSrc, "utf8");
     const patched = patchBrandParams(prev, overlay, homeAction);
     let next = patched.src;
     if (!patched.foreign && faq?.length && prev.includes('"tier5.himiBrandedFaq.load"') && !prev.includes('"staticFaq"')) {
@@ -63665,20 +63844,20 @@ async function applyOverlays(input) {
       }
     }
     if (next !== prev) {
-      writeFileSync27(homeSrc, next);
+      writeFileSync28(homeSrc, next);
       wrote.push(homeSrc);
     }
     if (patched.unparsed) {
       notes.push(`${patched.unparsed} onAppear params block(s) in ${homeSrc} could not be read \u2014 any brand values inside them were not applied`);
     }
   }
-  if (!input.iconPath || !existsSync64(input.iconPath)) {
-    const book = input.iconPath ? dirname35(dirname35(resolve50(input.iconPath))) : void 0;
+  if (!input.iconPath || !existsSync65(input.iconPath)) {
+    const book = input.iconPath ? dirname36(dirname36(resolve51(input.iconPath))) : void 0;
     notes.push(
       book ? `no icon installed \u2014 ${siteLogoAbsence(book).hint}` : "no icon installed and no business book to say why \u2014 `himi icon generate` draws one from the accent, or `himi icon set <file.png>` installs the customer's own mark"
     );
   }
-  if (input.iconPath && existsSync64(input.iconPath)) {
+  if (input.iconPath && existsSync65(input.iconPath)) {
     try {
       const installed = await installIcon(cwd, input.iconPath, { derivePlay: true });
       wrote.push(...installed.wrote);
@@ -64792,10 +64971,10 @@ function permuteDomain(domain, allowSpecialUseDomain) {
 }
 function createPromiseCallback(cb) {
   let callback;
-  let resolve53;
+  let resolve54;
   let reject;
   const promise = new Promise((_resolve, _reject) => {
-    resolve53 = _resolve;
+    resolve54 = _resolve;
     reject = _reject;
   });
   if (typeof cb === "function") {
@@ -64811,7 +64990,7 @@ function createPromiseCallback(cb) {
     callback = (err, result) => {
       try {
         if (err) reject(err);
-        else resolve53(result);
+        else resolve54(result);
       } catch (e) {
         reject(e instanceof Error ? e : new Error());
       }
@@ -67899,14 +68078,14 @@ async function runSiteFunction(opts) {
   }
   if (opts.op === "publish") {
     const snap = await snapshotAndPublish(fetchImpl, opts.token, opts.msid, { production: true, initiator: "himi" });
-    const ok = httpOk(snap.rev) && httpOk(snap.live);
+    const ok2 = httpOk(snap.rev) && httpOk(snap.live);
     return {
       ...base,
-      ok,
+      ok: ok2,
       revision: snap.revision,
       codeAppId: snap.codeAppId,
       publish: { revision: httpOk(snap.rev), rc: httpOk(snap.rc), live: httpOk(snap.live), status: snap.live?.status },
-      error: ok ? void 0 : snippet2(snap.live?.json ?? snap.rev.json)
+      error: ok2 ? void 0 : snippet2(snap.live?.json ?? snap.rev.json)
     };
   }
   const { id, listed } = await withGrid(fetchImpl, opts.token, opts.msid, opts.siteUrl);
@@ -68001,12 +68180,12 @@ async function invokeAndReport(fetchImpl, opts, base, name, method) {
     await new Promise((res) => setTimeout(res, 2500));
     hit = await tryInvoke();
   }
-  const ok = httpOk(hit.r);
+  const ok2 = httpOk(hit.r);
   return {
     ...base,
-    ok,
+    ok: ok2,
     invoke: { url: hit.url, status: hit.r.status, body: hit.r.json ?? snippet2(hit.r.text) },
-    error: ok ? void 0 : `invoke ${hit.r.status}: ${snippet2(hit.r.json ?? hit.r.text)}`
+    error: ok2 ? void 0 : `invoke ${hit.r.status}: ${snippet2(hit.r.json ?? hit.r.text)}`
   };
 }
 var HTTP_METHODS2, WRITE_LAYOUTS, VELO_PROVISION_URL, SITE_PUBLISH_URL, PUBLISH_RC_URL, SITE_FUNCTION_USAGE, NAME_RE, EXPORT_HEAD, WIX_HTTP_IMPORT_LINE;
@@ -68034,14 +68213,19 @@ __export(cli_exports, {
   APPLY_NEEDS_CLIENT: () => APPLY_NEEDS_CLIENT,
   REDIRECT_NEEDS_CLIENT: () => REDIRECT_NEEDS_CLIENT,
   SITE_FUNCTION_USAGE: () => SITE_FUNCTION_USAGE,
+  applyNeedsClient: () => applyNeedsClient,
   assetFetchFor: () => assetFetchFor,
   noteWithWarnings: () => noteWithWarnings,
   ownerSiteFor: () => ownerSiteFor,
   runSiteAnalyze: () => runSiteAnalyze,
   runSiteFunctionCli: () => runSiteFunctionCli
 });
-import { readFileSync as readFileSync77 } from "node:fs";
-import { resolve as resolve51 } from "node:path";
+import { readFileSync as readFileSync78 } from "node:fs";
+import { resolve as resolve52 } from "node:path";
+function applyNeedsClient(shell) {
+  if (shell === void 0 || !SHELL_NAMES2.includes(shell)) return true;
+  return !isSiteShell(shell);
+}
 function assetFetchFor(_opts) {
   return pinnedFetch2;
 }
@@ -68054,14 +68238,14 @@ function ownerSiteFor(opts, env = process.env) {
 async function runSiteAnalyze(opts) {
   if (opts.shell !== void 0) assertKnownShell(opts.shell);
   if (!opts.clientId?.trim()) {
-    if (opts.apply) throw Object.assign(new Error(APPLY_NEEDS_CLIENT), { exit: 2 });
+    if (opts.apply && applyNeedsClient(opts.shell)) throw Object.assign(new Error(APPLY_NEEDS_CLIENT), { exit: 2 });
     if (opts.redirectUri?.trim()) throw Object.assign(new Error(REDIRECT_NEEDS_CLIENT), { exit: 2 });
   }
   const fetchImpl = opts.fetchImpl ?? fetch;
   const assetFetch = assetFetchFor(opts);
   const siteFetch = guardedSiteFetch;
   const cwd = opts.cwd ?? process.cwd();
-  const outDir = resolve51(cwd, opts.outDir ?? ".himi/business-book");
+  const outDir = resolve52(cwd, opts.outDir ?? ".himi/business-book");
   let ownerAuth;
   let msid;
   const ownerSite = ownerSiteFor(opts);
@@ -68089,7 +68273,10 @@ async function runSiteAnalyze(opts) {
     try {
       const derived = deriveSiteShell({ siteUrl: result.book.input.siteUrl, look: result.book.look });
       result.provisioningOverlay.site = derived.site;
-      result.warnings = [...result.warnings ?? [], ...derived.notes];
+      const warnings2 = (result.warnings ?? []).map(
+        (w) => !opts.clientId?.trim() && w.startsWith("no --client-id:") ? `no --client-id: fine for --shell ${opts.shell} \u2014 a site shell binds no client, so --apply works without one. Only the vertical probes were skipped, so the catalog has no counts.` : w
+      );
+      result.warnings = [...warnings2, ...derived.notes];
     } catch (e) {
       result.warnings = [
         ...result.warnings ?? [],
@@ -68113,9 +68300,9 @@ async function runSiteAnalyze(opts) {
   if (opts.apply) {
     applied = await applyOverlays({
       cwd,
-      overlayPath: resolve51(outDir, "provisioning.overlay.json"),
-      tokensPath: resolve51(outDir, "tokens.overlay.json"),
-      iconPath: resolve51(outDir, "media/icon.png"),
+      overlayPath: resolve52(outDir, "provisioning.overlay.json"),
+      tokensPath: resolve52(outDir, "tokens.overlay.json"),
+      iconPath: resolve52(outDir, "media/icon.png"),
       shell: opts.shell
     });
     const note = noteWithWarnings(applied.note, warnings);
@@ -68151,8 +68338,8 @@ async function runSiteFunctionCli(opts) {
   const token = opts.token ?? await siteToken(msid);
   let source;
   if (opts.sourcePath) {
-    const p = resolve51(opts.cwd ?? process.cwd(), opts.sourcePath);
-    source = readFileSync77(p, "utf8");
+    const p = resolve52(opts.cwd ?? process.cwd(), opts.sourcePath);
+    source = readFileSync78(p, "utf8");
   }
   let body;
   if (opts.bodyRaw != null) {
@@ -68207,7 +68394,7 @@ async function accountToken2(spawnImpl = spawn6) {
     cached2 = fromEnv;
     return fromEnv;
   }
-  const token = await new Promise((resolve53, reject) => {
+  const token = await new Promise((resolve54, reject) => {
     let child;
     try {
       child = spawnImpl("wix", ["token"]);
@@ -68236,7 +68423,7 @@ async function accountToken2(spawnImpl = spawn6) {
     const scan = (d) => {
       out2 += String(d);
       const m = out2.match(TOKEN_RE2);
-      if (m) done(() => resolve53(m[0]));
+      if (m) done(() => resolve54(m[0]));
     };
     child.stdout?.on("data", scan);
     child.stderr?.on("data", scan);
@@ -68413,7 +68600,7 @@ __export(site_create_exports, {
   runSiteList: () => runSiteList,
   writeProvisioningBinding: () => writeProvisioningBinding
 });
-import { existsSync as existsSync65, readFileSync as readFileSync78, writeFileSync as writeFileSync28 } from "node:fs";
+import { existsSync as existsSync66, readFileSync as readFileSync79, writeFileSync as writeFileSync29 } from "node:fs";
 import { resolve as resolvePath2 } from "node:path";
 function oauthClientName(projectName) {
   return `${projectName} client`;
@@ -68562,7 +68749,7 @@ async function runSiteCreate(opts) {
   if (!wantOauthApp) return { ...base, nextSteps: nextSteps(metaSiteId) };
   return { ...base, clientId, redirectUri, nextSteps: nextSteps(metaSiteId, clientId) };
 }
-function writeProvisioningBinding(target, binding2, fs = { existsSync: existsSync65, readFileSync: readFileSync78, writeFileSync: writeFileSync28 }) {
+function writeProvisioningBinding(target, binding2, fs = { existsSync: existsSync66, readFileSync: readFileSync79, writeFileSync: writeFileSync29 }) {
   const msid = binding2.siteId;
   const path2 = resolvePath2(target);
   const committed = committedShellProvisioning(path2);
@@ -69235,12 +69422,12 @@ var init_context = __esm({
 });
 
 // src/cli.ts
-import { mkdtempSync as mkdtempSync4, readFileSync as readFileSync79, mkdirSync as mkdirSync32, writeFileSync as writeFileSync29, existsSync as existsSync66, rmSync as rmSync15, readdirSync as readdirSync30, statSync as statSync18, lstatSync as lstatSync13, accessSync, constants as constants2, renameSync as renameSync7, cpSync as cpSync3 } from "node:fs";
+import { mkdtempSync as mkdtempSync4, readFileSync as readFileSync80, mkdirSync as mkdirSync33, writeFileSync as writeFileSync30, existsSync as existsSync67, rmSync as rmSync16, readdirSync as readdirSync31, statSync as statSync19, lstatSync as lstatSync14, accessSync, constants as constants2, renameSync as renameSync7, cpSync as cpSync3 } from "node:fs";
 import { execFile, execFileSync as execFileSync7, spawnSync as spawnSync5, spawn as spawn7 } from "node:child_process";
 import { AsyncLocalStorage } from "node:async_hooks";
 import { createHash as createHash31, randomUUID as randomUUID7 } from "node:crypto";
 import { tmpdir as tmpdir5, homedir as homedir7, hostname } from "node:os";
-import { join as join64, resolve as resolve52, relative as relative13, basename as basename17, dirname as dirname36 } from "node:path";
+import { join as join65, resolve as resolve53, relative as relative14, basename as basename17, dirname as dirname37 } from "node:path";
 import { fileURLToPath as fileURLToPath26 } from "node:url";
 
 // ../serve-cli/src/client.ts
@@ -69981,7 +70168,7 @@ async function browserLogin(opts) {
   const log = opts.log ?? (() => {
   });
   const timeoutMs = opts.timeoutMs ?? DEFAULT_TIMEOUT_MS;
-  return await new Promise((resolve53, reject) => {
+  return await new Promise((resolve54, reject) => {
     let settled = false;
     let loginUrl = "";
     const server = createServer();
@@ -70045,7 +70232,7 @@ async function browserLogin(opts) {
           return;
         }
         res.writeHead(200, { "content-type": "text/html; charset=utf-8", "cache-control": "no-store", connection: "close" }).end(CLOSE_PAGE);
-        finish2(() => resolve53({ token, loginUrl }));
+        finish2(() => resolve54({ token, loginUrl }));
       });
     });
     server.on("error", (err) => finish2(() => reject(err)));
@@ -71375,8 +71562,8 @@ var str8 = (v) => typeof v === "string" ? v : void 0;
 var num2 = (v) => typeof v === "string" && v !== "" && Number.isFinite(Number(v)) ? Number(v) : void 0;
 function embeddedTemplateCatalog() {
   return availableTemplates().map((name) => {
-    const path2 = join64(templateSourceDir(name), TEMPLATE_META_FILE);
-    const meta = JSON.parse(readFileSync79(path2, "utf8"));
+    const path2 = join65(templateSourceDir(name), TEMPLATE_META_FILE);
+    const meta = JSON.parse(readFileSync80(path2, "utf8"));
     if (!meta || typeof meta.title !== "string" || typeof meta.description !== "string" || !Array.isArray(meta.tags)) {
       throw new Error(`${path2} must be { title: string, description: string, tags: string[], category?: string }`);
     }
@@ -71934,7 +72121,8 @@ var USAGE = `himi \u2014 the Himalaya authoring CLI (remote dev loop)
                                            a brandable shell's content package. --url alone is the
                                            visitor-only pass (published pages, look, copy); --client-id
                                            adds the vertical catalog counts and the app binding, and
-                                           --apply requires it. --shell takes the same
+                                           --apply requires it (not for a site shell, which binds no
+                                           client). --shell takes the same
                                            names 'himi dist --shell' does; default branded-lite.
                                            A SITE shell (brandy) also derives the site's page map
                                            (tabs/drawer from its menu) into the overlay's \`site\`
@@ -72049,7 +72237,7 @@ var COMMANDS = [
   { name: "login", summary: "obtain a scoped serve-control token from Wix identity and store it in ~/.himalaya/serve-targets.json (so push/promote need no hand-pasted token). Three modes: --browser (your own Wix account, no VPN/BO), --wix (HEADLESS \u2014 the machine's own Wix CLI credential; the mode a CI pod or agent container can satisfy), --dpx (Wix employee, reads ~/.dpx/session/token). RFC 0026 WS3.", required: "[--browser|--wix|--dpx] [--target <t>] [--issue-url <url>]" },
   { name: "logout", summary: "remove the stored control token for a target", required: "[--target <t>]" },
   { name: "notify", summary: "`setup` optionally configures Branded/Ping from local customer key files; `status --refresh` reads live backend readiness. Setup may be deferred while building. These use serve-control and require owner plus Wix account authentication. `send`, `tokens`, `doctor`: send a REAL push notification to registered devices (RFC 0036 WS5) \u2014 APNs .p8 over HTTP/2 for iOS, FCM v1 for Android. `send` targets one device (--token / --device <registry id>) or fans out to the whole app (--all), reporting a per-device result; a token the provider says is uninstalled (APNs 410 Unregistered / FCM UNREGISTERED) is auto-disabled, while a merely wrong one (BadDeviceToken \u2014 usually a sandbox/production mismatch) is recorded and left enabled. `tokens` lists the registry. `doctor` reports which credentials resolve and which sender each platform picks. Talks to the admin-server via --admin-url/HIMALAYA_ADMIN_URL, authenticated with --admin-session/HIMALAYA_ADMIN_SESSION. `send --provider ping` is the hosted alternative: the serve plane sends one test notification to one site member through Ping as Himalaya, with owner login instead of provider keys, and reports acceptance, never delivery. NOT `himi push`, which publishes a release.", required: "setup|status [--content <dir>] [--target <t>] [--refresh] [--yes] [--no-push-setup] | send --provider ping [--content <dir>] [--app <a>] [--site <msid>] --member-email <email> --title <s> [--body <s>] --link <url> [--request-id <uuid>] [--dry-run] [--json] | send|tokens|doctor [--app <a>] [--token <t> | --device <id> | --all] [--title <s>] [--body <s>] [--link <url>] [--platform ios|android] [--badge <n>] [--channel <id>] [--silent] [--dry-run] [--json]" },
-  { name: "site", summary: "PROVISION a Wix project, then analyze or extend it. `create` is the one door that makes a site instead of adopting one: POST /funnel/projects/v1/create (a WIX site, a HEADLESS backend, a BRANDED_APP, or a VIBE site), and for headless it also mints the OAuth app whose id IS the `WIX_CLIENT_ID` \u2014 with --redirect-uri already registered, because an unregistered redirect makes native signInDirect fail at redirect-session. `--verticals` REQUIRES `--template` and reports only what Wix confirmed: measured, installing onto a project created from the BLANK template returns 200 while the vertical's API answers 428 forever, because there is no site for it to attach to (the install asks for CREATE_SITE). A real template ships its verticals installed and populated, and installing further ones onto it then works. It MUTATES your Wix account and needs --yes; without it you get the payload and nothing is sent. `list` is the read-only site inventory (with each site's premium flag, which is what explains an installed-but-428 vertical). Auth is the account-scoped `wix token` (no --site), falling back to WIX_API_KEY + WIX_ACCOUNT_ID. `client` is the same OAuth step for a site that ALREADY exists \u2014 the one himi adopts rather than makes \u2014 so a clientId no longer means a manual trip to the dashboard: `client ensure` reconciles rather than mints, because a site can already carry a client with NO registered redirect and shipping that one fails signInDirect at runtime; it reuses a client that carries --redirect-uri, PATCHes one that matches --name but lacks it (unioning, so another app's redirect survives), and creates only when there is nothing to reuse (--new forces a fresh one). --name IS the idempotency key. `client` auth is SITE-scoped (`wix token --site <msid>`) because minting is owner-of-that-site, and --yes gates every mutation: a site that already has a usable client resolves WITHOUT it, but --write-provisioning needs --yes even then because it rewrites a manifest on disk (the dry run's planned.provisioning names the file). That query endpoint IGNORES paging (measured: query.paging, cursorPaging and a top-level paging all return the full set at offset 0), so when pagingMetadata reports more clients than came back, `ensure` REFUSES EVERY outcome \u2014 create, patch AND reuse. Reuse is refused too because pickClient breaks ties on the OLDEST createdDate, so an omitted older same-named MOBILE client with the same redirect would win a later complete read and the resolved clientId would MOVE between runs \u2014 and it gets written into provisioning.json; convergence is what makes a stray duplicate untidy rather than harmful. --name cannot narrow the query (no filter is sent; the name is applied to the rows after they arrive), so the recovery is the dashboard; --new skips the query entirely. A `patched` result is verified against what Wix STORED \u2014 the redirect list is read off the PATCH response, and re-read via GET when the response omits it, because falling back to the list himi just sent would make the guard pass vacuously on exactly the silent no-op it exists to catch. `client list` is the read-only inventory of a site's clients: act on its `shippable` column rather than `hasRedirect`, because shippable ALSO requires a MOBILE applicationType and `ensure` refuses a WEB client \u2014 a WEB one carrying your redirect looks right and is not a candidate \u2014 and it sets truncated:true rather than presenting a partial inventory as the whole one. `analyze --read-only` returns API-only generation context as JSON (identity, access probes, CMS permissions and selected redacted Velo source); it needs no URL/browser and never uploads or applies anything. `analyze` reads a site into a business-book folder (REST + Playwright, GET-only); `--url` alone is the visitor-only pass over the published pages, and `--client-id` adds the vertical probes and the app binding `--apply` requires; `site function` list/get/put/publish/invokes that site's Velo HTTP functions and is not `himi functions` (serve-plane jobs). `--apply` bakes into a brandable shell; `--shell` takes the same names `himi dist --shell` does and defaults to branded-lite, and a shell that ships no prepare:customer is refused by name rather than half-built. `--shell brandy` (the site shell, RFC 0062) also derives the site's page map from its published pages and header menu \u2014 Home first, up to four tabs for the pages a visitor returns to, the rest in the drawer \u2014 into the overlay's `site` block, so it can be edited before `--apply`; only a site shell ever receives that block. It never overwrites any shell's committed apps/<shell>/provisioning.json.", required: "create <name> [--type wix|headless|branded-app|vibe] [--template <guid>] [--verticals stores,bookings,\u2026] [--folder <guid>] [--redirect-uri <uri>] [--no-oauth-app] [--write-provisioning [path]] [--site-url <url>] [--json] --yes | list | client ensure|list --site <msid> [--name <name>] [--redirect-uri <uri>] [--new] [--write-provisioning [path]] [--site-url <url>] [--json] --yes | analyze --read-only [--site <msid>] [--client-id <id>] [--json] | analyze --url <https> [--client-id <id>] [--site <msid>] [--out <dir>] [--redirect-uri <uri>] [--apply] [--shell " + SHELL_ENUM + "] | function list|get|put|publish|invoke [--site <msid>] [--url <https>] [--method GET|POST|PUT|DELETE] [--source <file>] [--body <json>] [--publish] [--invoke]" },
+  { name: "site", summary: "PROVISION a Wix project, then analyze or extend it. `create` is the one door that makes a site instead of adopting one: POST /funnel/projects/v1/create (a WIX site, a HEADLESS backend, a BRANDED_APP, or a VIBE site), and for headless it also mints the OAuth app whose id IS the `WIX_CLIENT_ID` \u2014 with --redirect-uri already registered, because an unregistered redirect makes native signInDirect fail at redirect-session. `--verticals` REQUIRES `--template` and reports only what Wix confirmed: measured, installing onto a project created from the BLANK template returns 200 while the vertical's API answers 428 forever, because there is no site for it to attach to (the install asks for CREATE_SITE). A real template ships its verticals installed and populated, and installing further ones onto it then works. It MUTATES your Wix account and needs --yes; without it you get the payload and nothing is sent. `list` is the read-only site inventory (with each site's premium flag, which is what explains an installed-but-428 vertical). Auth is the account-scoped `wix token` (no --site), falling back to WIX_API_KEY + WIX_ACCOUNT_ID. `client` is the same OAuth step for a site that ALREADY exists \u2014 the one himi adopts rather than makes \u2014 so a clientId no longer means a manual trip to the dashboard: `client ensure` reconciles rather than mints, because a site can already carry a client with NO registered redirect and shipping that one fails signInDirect at runtime; it reuses a client that carries --redirect-uri, PATCHes one that matches --name but lacks it (unioning, so another app's redirect survives), and creates only when there is nothing to reuse (--new forces a fresh one). --name IS the idempotency key. `client` auth is SITE-scoped (`wix token --site <msid>`) because minting is owner-of-that-site, and --yes gates every mutation: a site that already has a usable client resolves WITHOUT it, but --write-provisioning needs --yes even then because it rewrites a manifest on disk (the dry run's planned.provisioning names the file). That query endpoint IGNORES paging (measured: query.paging, cursorPaging and a top-level paging all return the full set at offset 0), so when pagingMetadata reports more clients than came back, `ensure` REFUSES EVERY outcome \u2014 create, patch AND reuse. Reuse is refused too because pickClient breaks ties on the OLDEST createdDate, so an omitted older same-named MOBILE client with the same redirect would win a later complete read and the resolved clientId would MOVE between runs \u2014 and it gets written into provisioning.json; convergence is what makes a stray duplicate untidy rather than harmful. --name cannot narrow the query (no filter is sent; the name is applied to the rows after they arrive), so the recovery is the dashboard; --new skips the query entirely. A `patched` result is verified against what Wix STORED \u2014 the redirect list is read off the PATCH response, and re-read via GET when the response omits it, because falling back to the list himi just sent would make the guard pass vacuously on exactly the silent no-op it exists to catch. `client list` is the read-only inventory of a site's clients: act on its `shippable` column rather than `hasRedirect`, because shippable ALSO requires a MOBILE applicationType and `ensure` refuses a WEB client \u2014 a WEB one carrying your redirect looks right and is not a candidate \u2014 and it sets truncated:true rather than presenting a partial inventory as the whole one. `analyze --read-only` returns API-only generation context as JSON (identity, access probes, CMS permissions and selected redacted Velo source); it needs no URL/browser and never uploads or applies anything. `analyze` reads a site into a business-book folder (REST + Playwright, GET-only); `--url` alone is the visitor-only pass over the published pages, and `--client-id` adds the vertical probes and the app binding `--apply` requires; `site function` list/get/put/publish/invokes that site's Velo HTTP functions and is not `himi functions` (serve-plane jobs). `--apply` bakes into a brandable shell (a site shell needs no `--client-id`: it is visitor-only and binds no client); `--shell` takes the same names `himi dist --shell` does and defaults to branded-lite, and a shell that ships no prepare:customer is refused by name rather than half-built. `--shell brandy` (the site shell, RFC 0062) also derives the site's page map from its published pages and header menu \u2014 Home first, up to four tabs for the pages a visitor returns to, the rest in the drawer \u2014 into the overlay's `site` block, so it can be edited before `--apply`; only a site shell ever receives that block. It never overwrites any shell's committed apps/<shell>/provisioning.json.", required: "create <name> [--type wix|headless|branded-app|vibe] [--template <guid>] [--verticals stores,bookings,\u2026] [--folder <guid>] [--redirect-uri <uri>] [--no-oauth-app] [--write-provisioning [path]] [--site-url <url>] [--json] --yes | list | client ensure|list --site <msid> [--name <name>] [--redirect-uri <uri>] [--new] [--write-provisioning [path]] [--site-url <url>] [--json] --yes | analyze --read-only [--site <msid>] [--client-id <id>] [--json] | analyze --url <https> [--client-id <id>] [--site <msid>] [--out <dir>] [--redirect-uri <uri>] [--apply] [--shell " + SHELL_ENUM + "] | function list|get|put|publish|invoke [--site <msid>] [--url <https>] [--method GET|POST|PUT|DELETE] [--source <file>] [--body <json>] [--publish] [--invoke]" },
   { name: "doctor", summary: 'off-VPN preflight in one shot: probe the PUBLIC data plane (www.wixapis.com \u2014 reachable off-VPN), the INTERNAL serve/control plane for the selected target (VPN-gated), and report auth state (dpx session on disk + stored control token). --dpx additionally runs a live, EADDRINUSE-safe `dpx whoami`. Machine-readable with --json (an unreachable internal plane carries a stable code:"needs_vpn" so an agent branches on the code, not the prose); human-readable otherwise. Never loads the authoring runtime \u2014 works off-repo.', required: "[--target <t>] [--dpx] [--json] [--data-url <url>] [--timeout <ms>]" },
   { name: "upgrade", summary: "install the newest published CLI (`npm i -g @wix/himalaya-cli@latest`) and report what moved. This is the explicit door: himi also updates itself when the running build is more than a week old \u2014 unattended it just does it and re-runs your command, at a terminal it asks first \u2014 and `HIMI_NO_UPDATE_CHECK=1` turns that off, leaving this command as the way to catch up. Reports `unchanged` rather than claiming success when npm exits 0 without moving the version, which is what a registry mirror serving its own pinned copy looks like.", required: "[--json]" },
   { name: "push", summary: "lint + build + publish a release (default --draft: servable via ?release= but NOT live). REFUSES to publish on any error unless --force; --strict promotes warnings. Prints preview + agent-context links. A successful draft push also rebuilds the making-of (.himi/making-of.html, local and offline) and names it as `reel` \u2014 the file to hand the owner beside the preview link. Its postcard carries the home shot only when that shot is newer than the last source edit; otherwise the postcard says why and names `himi render <home> --png`, and the envelope's `postcardPicture: {skipped, render}` leads next[] with that render (the push never renders it itself). The published slug is NAMESPACED per owner \u2014 `<ownerPrefix>.<name>`, composed offline from the control token's ownerPrefix claim, so the CLI and the server derive the identical string and himalaya.content.json is NOT rewritten (a legacy token with no ownerPrefix publishes the declared name unchanged). An app claimed BEFORE namespacing is stored under its FLAT slug, so the claim route answers `alreadyYours` naming that slug and the push adopts it \u2014 reported as `adoptedSlug`, since it is the one case where the published `app` differs from what the declared name composes to. `--no-claim` skips the route that knows this, so a pre-namespacing app pushed with it still fails 403. --visibility public|unlisted decides whether /v1/apps + the Himi Player picker LIST the app (also declarable as `visibility` in himalaya.content.json; omitted, a brand-new app defaults to unlisted \u2014 share by link \u2014 and an existing setting is kept). --account-id names which account owns the app when your Wix session resolves to several (the auto-claim of a brand-new slug cannot guess \u2014 without it a multi-account caller is told to name one). An unforced push of a release that carries SCREENS also refuses when `.himi/ux-audit.json` holds no mobile-UX drive recorded against that release id, or holds one that FAILED (#2955) \u2014 a published draft IS the owner-private preview a customer is handed; `himi ux record` clears it and `--force` overrides it, which the success envelope then says out loud. `--only <selector>` publishes ONLY the named items as a release derived from the app's live release (or `--from-release <id>`), running the identical build + lint gate and simply publishing less; it requires an explicit `--draft` or `--live` because a partial publish has no safe default, never claims a slug, and carries neither attestation nor a source archive (both named in the output). Selectors are comma-separated in ONE `--only`: `changed` (every item whose bytes differ from the base), `screen:<id|glob>`, `bundle:<name>`, `tokens`, `app-config` \u2014 a selected screen drags its logic bundle and a selected bundle drags the screens that reference it, or the bytes land under a key nothing reads.", required: "[--content <dir>] [--draft] [--live] [--force] [--strict] [--label] [--notes] [--visibility public|unlisted] [--no-claim] [--account-id <id>] [--only <selector>] [--from-release <id>] [--accept-regressions] [--accept-partial] [--app <slug>] (--control-token)" },
@@ -72058,7 +72246,7 @@ var COMMANDS = [
   { name: "pull", summary: "restore an app's SOURCE from the serve plane into an editable content package \u2014 the other half of `himi push`, which archives the content package on every publish. Owner or editor only: a viewer may download the RUNNING app (`/v1/owner/package`), not the codebase it was built from. A PAST release is restorable, not only the live one \u2014 the archive is content-addressed per release, so it has none of the live-single-slot problem that makes `himi pack` current-release-only. Two limits: pruning keeps the current release plus the newest ~20 ledger entries, and a release id identifies OTA content rather than source, so a source-only change republishes under the same id and replaces that id's archive. A release published before source archiving shipped, or pushed with `--no-source`, answers `app_source_not_found` and says to push again. `--name` re-substitutes the app identity through the same machinery `himi init --template` uses, so the restored tree is a NEW app rather than a second copy of the same one, and a name that also appears inside a screen id (`feed` in `feed_home`) is left alone. A NON-EMPTY destination is refused unless you say which you mean: `--force` merges and reports \u2014 it writes the archive over what is there, keeps files the release does not carry, and NAMES every one of them as `left: [...]` so a tree that matches no release is never silent (#2437); `--replace` restores exactly what was archived, removing those files first (`removed: [...]`) and implying `--force`. `--replace` refuses a directory holding no `himalaya.content.json`, so a mistyped `--out` cannot clear an unrelated tree, and the only paths it can remove are the ones a push would have archived \u2014 `.git/`, `node_modules/`, `dist/`, `.env*` and key material are out of its reach by construction.", required: "<app> [--release <id>] [--out <dir>] [--name <new>] [--force|--replace] [--target <t>]" },
   { name: "share", summary: "publish or revoke a content-addressed `.himi` share link. The package must be a validated archive for an already-published release; the resulting https URL is safe to QR, copy, or open in Himi Player.", required: "--file <package.himi> [--expires-at <ISO>] | revoke --app <app> <shareId>" },
   { name: "run", summary: "serve a .himi package on localhost and open it in a browser \u2014 no serve plane, no dev-server, no setup. Given no argument it builds the current content package first, so `himi run` is the inner loop: edit, run, look at it. The SPA and /v1 are served from ONE origin because Tier-5 bundle fetches on web are same-origin-only. --chrome preview frames the app in a device chassis; --chrome app serves it as a plain web app. Blocks until Ctrl-C, like any dev server. --browser runs the whole plane INSIDE the tab (service worker + in-memory store) so no app code executes in this process or on any pod. --lan also serves it to the local network and prints a QR, so a phone on the same Wi-Fi opens it as the real app, full screen. --watch keeps the preview LIVE: every save in the content package rebuilds it and repaints the open tab with only what changed (the dev-server's hot-reload events); a build that fails keeps the last good preview on screen and says why. --idle-exit <min> (with --watch only) stops the watch once that many minutes pass with no source save, printing `{\"watch\":\"idle_exit\"}` and removing its .himi/run.json on the way out \u2014 the watch `himi init` starts passes 30; one started by hand runs until Ctrl-C. Stopping (Ctrl-C, SIGTERM, SIGHUP or the idle exit) removes the run's own .himi/run.json. Any `himi run` of a content package (plain, --watch or --browser) frames its preview on the build board (`himi studio`) while it serves, and all but --browser also serve that board at /__himi/studio/ on the preview's own origin. Its .himi/run.json (pid, watching) is also how `himi render` and `himi test` tell a live --watch is running: while none is, they add a `reminder` naming `himi run --watch --content <dir> &`, and while one is (the one `himi init` started, usually, whose .himi/watch.json vouches for it until it serves) the reminder names its url and board instead (either at most once every ten minutes per app) \u2014 first in `next[]` and again as the envelope's LAST key (the last line of `himi test`'s plain report), so an output read with `tail` still carries it.", required: "[<package.himi|dir|url>] [--browser] [--watch] [--idle-exit <min>] [--lan] [--content <dir>] [--port <n>] [--chrome preview|app] [--screen <id>] [--surface <id>] [--no-open] [--spa <url>]" },
-  { name: "mcp", summary: "run the himi tools as a local Model Context Protocol server over stdio, for coding agents \u2014 Claude Code, Cursor, Codex, VS Code. Tools: docs/components/sdk/icons, init, build, validate, test (hermetic), render (returns the PNG), progress, a live preview (start/status/stop a `himi run --watch`), whoami, login (opens the browser sign-in for the user; the credential goes to a child `himi login` and onto disk, never through the server), and DRAFT-only push/share/preview links \u2014 never promote, dist or secrets. A sign-in's target is the one push/share then use. Each tool runs the same command in-process on the content package on disk (default: the host's workspace root). `himi init` and `himi agent-init` write the config for every host (.mcp.json, .cursor/mcp.json, .vscode/mcp.json, .codex/config.toml when absent) plus a `himi-preview` launch configuration (.claude/launch.json) that opens the live preview in Claude Code desktop's browser pane. Never self-updates (npx already runs the current CLI). Blocks until the host closes stdin. `himi mcp plugin --out <dir>` writes the Claude Code plugin (the customer skill + this server) as a folder \u2014 the same plugin the serve plane's marketplace hands out at /.claude-plugin/marketplace.json.", required: "[plugin --out <dir>]" },
+  { name: "mcp", summary: "run the himi tools as a local Model Context Protocol server over stdio, for coding agents \u2014 Claude Code, Cursor, Codex, VS Code. Tools: docs/components/sdk/icons, init, build, validate, test (hermetic), render (returns the PNG), progress, a live preview (start/status/stop a `himi run --watch`), whoami, login (opens the browser sign-in for the user; the credential goes to a child `himi login` and onto disk, never through the server), and DRAFT-only push/share/preview links \u2014 never promote, dist or secrets. A sign-in's target is the one push/share then use. Each tool runs the same command in-process on the content package on disk (default: the host's workspace root). `himi init` and `himi agent-init` write the config for every host (.mcp.json, .cursor/mcp.json, .vscode/mcp.json, .codex/config.toml when absent) plus a `himi-preview` launch configuration (.claude/launch.json) that opens the live preview in Claude Code desktop's browser pane. Never self-updates (npx already runs the current CLI). Blocks until the host closes stdin. `himi mcp plugin --out <dir>` writes the Claude Code plugin (the customer skill + this server) as a folder \u2014 the same plugin the serve plane's marketplace hands out at /.claude-plugin/marketplace.json. `--with-files` adds list/read/write/delete file tools confined to the workspace folder, for a host that cannot edit files (Claude Desktop chat, via the Desktop Extension); `HIMI_WORKSPACE` names that folder when the host names none.", required: "[plugin --out <dir>] [--with-files]" },
   { name: "preview", summary: "print the shareable web URL + himi:// deep link + agent /v1/preview JSON URLs for an app+release; --surface frames the web preview as any catalog surface (?surface=)", required: "--app --release [--screen] [--surface]" },
   { name: "surfaces", summary: "the surface catalog vs this app's envelope (platforms.json): targeted surfaces, the opt-in key for the rest, per-surface preview links with --app --release, and which widget families the package produces with --measure-widgets (which runs its built bundles)", required: "[--content <dir>] [--app --release] [--measure-widgets]" },
   { name: "context", summary: "fetch the agent preview envelope (GET /v1/preview/a/<app>) \u2014 ok/issues/screens/links; exit 1 if ok:false", required: "--app --release [--screen] [--include telemetry]" },
@@ -72090,7 +72278,7 @@ var COMMANDS = [
 ];
 function cliVersion() {
   try {
-    return JSON.parse(readFileSync79(new URL("../package.json", import.meta.url), "utf8")).version ?? "unknown";
+    return JSON.parse(readFileSync80(new URL("../package.json", import.meta.url), "utf8")).version ?? "unknown";
   } catch {
     return "unknown";
   }
@@ -72141,16 +72329,16 @@ function createScopedRegistryResolver(exec = execNpmConfig) {
 }
 var SCOPED_REGISTRY_TIMEOUT_MS = 5e3;
 function execNpmConfig(file, args, options) {
-  return new Promise((resolve53, reject) => {
-    execFile(file, args, { ...options, windowsHide: true }, (error, stdout) => error ? reject(error) : resolve53(String(stdout)));
+  return new Promise((resolve54, reject) => {
+    execFile(file, args, { ...options, windowsHide: true }, (error, stdout) => error ? reject(error) : resolve54(String(stdout)));
   });
 }
 var npmScopedWixRegistry = createScopedRegistryResolver();
 async function scopedRegistryBefore(lookup2, deadline) {
   let cancel = () => {
   };
-  const expired = new Promise((resolve53) => {
-    const timer = setTimeout(() => resolve53(void 0), Math.max(0, deadline - Date.now()));
+  const expired = new Promise((resolve54) => {
+    const timer = setTimeout(() => resolve54(void 0), Math.max(0, deadline - Date.now()));
     cancel = () => clearTimeout(timer);
   });
   try {
@@ -72208,18 +72396,18 @@ function ageInDays(publishedAt, now = Date.now()) {
 }
 function packageVersion(path2) {
   try {
-    const version2 = JSON.parse(readFileSync79(path2, "utf8")).version;
+    const version2 = JSON.parse(readFileSync80(path2, "utf8")).version;
     return typeof version2 === "string" && version2 ? version2 : void 0;
   } catch {
     return void 0;
   }
 }
 function resolvedSdkVersion(fromDir = process.cwd(), bundledManifest = new URL("./authoring-runtime/node_modules/@wix/himalaya/package.json", import.meta.url)) {
-  let dir = resolve52(fromDir);
+  let dir = resolve53(fromDir);
   for (; ; ) {
-    const version2 = packageVersion(join64(dir, "node_modules", "@wix", "himalaya", "package.json"));
+    const version2 = packageVersion(join65(dir, "node_modules", "@wix", "himalaya", "package.json"));
     if (version2) return { version: version2, source: "local" };
-    const parent = dirname36(dir);
+    const parent = dirname37(dir);
     if (parent === dir) break;
     dir = parent;
   }
@@ -72227,7 +72415,7 @@ function resolvedSdkVersion(fromDir = process.cwd(), bundledManifest = new URL("
   if (bundled) return { version: bundled, source: "bundled" };
   try {
     const root = execFileSync7("npm", ["root", "-g"], { stdio: ["ignore", "pipe", "ignore"] }).toString().trim();
-    const version2 = root ? packageVersion(join64(root, "@wix", "himalaya", "package.json")) : void 0;
+    const version2 = root ? packageVersion(join65(root, "@wix", "himalaya", "package.json")) : void 0;
     return version2 ? { version: version2, source: "global" } : {};
   } catch {
     return {};
@@ -72274,11 +72462,11 @@ var UPDATE_RETRY_AFTER_FAILURE_MS = 60 * 60 * 1e3;
 var UPDATE_SNOOZE_MS = 24 * 60 * 60 * 1e3;
 var UPDATE_REEXEC_ENV = "HIMI_UPDATED_ONCE";
 function updateCachePath(env = process.env) {
-  return env.HIMI_UPDATE_CACHE_FILE ?? join64(homedir7(), ".himalaya", "update-check.json");
+  return env.HIMI_UPDATE_CACHE_FILE ?? join65(homedir7(), ".himalaya", "update-check.json");
 }
 function readUpdateCache(path2) {
   try {
-    const parsed = JSON.parse(readFileSync79(path2, "utf8"));
+    const parsed = JSON.parse(readFileSync80(path2, "utf8"));
     return parsed && typeof parsed === "object" ? parsed : {};
   } catch {
     return {};
@@ -72286,8 +72474,8 @@ function readUpdateCache(path2) {
 }
 function writeUpdateCache(path2, cache) {
   try {
-    mkdirSync32(dirname36(path2), { recursive: true, mode: 448 });
-    writeFileSync29(path2, JSON.stringify(cache, null, 2) + "\n", { mode: 384 });
+    mkdirSync33(dirname37(path2), { recursive: true, mode: 448 });
+    writeFileSync30(path2, JSON.stringify(cache, null, 2) + "\n", { mode: 384 });
   } catch {
   }
 }
@@ -72347,12 +72535,12 @@ function createUpdateRunner(spawn8 = spawnSync5) {
     },
     installedVersion: () => {
       const root = globalNodeModulesRoot();
-      return root ? packageVersion(join64(root, "@wix", "himalaya-cli", "package.json")) : void 0;
+      return root ? packageVersion(join65(root, "@wix", "himalaya-cli", "package.json")) : void 0;
     },
     reexec: (argv) => {
       const root = globalNodeModulesRoot();
-      const entry = root ? join64(root, "@wix", "himalaya-cli", "dist", "cli.mjs") : void 0;
-      if (!entry || !existsSync66(entry)) return void 0;
+      const entry = root ? join65(root, "@wix", "himalaya-cli", "dist", "cli.mjs") : void 0;
+      if (!entry || !existsSync67(entry)) return void 0;
       const result = spawnSync5(process.execPath, [entry, ...argv], {
         // inherit keeps PIPED STDIN working — commands that read stdin must survive a re-exec.
         stdio: "inherit",
@@ -72399,7 +72587,7 @@ function staleUpdateLockFile(cachePath, now) {
   for (const path2 of [`${cachePath}.lock.break`, `${cachePath}.lock`]) {
     let content;
     try {
-      content = readFileSync79(path2, "utf8");
+      content = readFileSync80(path2, "utf8");
     } catch {
       continue;
     }
@@ -72407,7 +72595,7 @@ function staleUpdateLockFile(cachePath, now) {
     let since = stamped;
     if (!Number.isFinite(since)) {
       try {
-        since = statSync18(path2).mtimeMs;
+        since = statSync19(path2).mtimeMs;
       } catch {
         continue;
       }
@@ -72422,14 +72610,14 @@ function acquireUpdateLock(cachePath, now, hooks = {}) {
   const mine = lockStamp(now);
   const readLock = (path2) => {
     try {
-      return readFileSync79(path2, "utf8");
+      return readFileSync80(path2, "utf8");
     } catch {
       return void 0;
     }
   };
   const tryCreate = (path2) => {
     try {
-      writeFileSync29(path2, mine, { flag: "wx", mode: 384 });
+      writeFileSync30(path2, mine, { flag: "wx", mode: 384 });
       return true;
     } catch {
       return false;
@@ -72437,13 +72625,13 @@ function acquireUpdateLock(cachePath, now, hooks = {}) {
   };
   const removeIfMine = (path2) => {
     try {
-      if (readLock(path2) === mine) rmSync15(path2, { force: true });
+      if (readLock(path2) === mine) rmSync16(path2, { force: true });
     } catch {
     }
   };
   const release = () => removeIfMine(lockPath);
   try {
-    mkdirSync32(dirname36(lockPath), { recursive: true, mode: 448 });
+    mkdirSync33(dirname37(lockPath), { recursive: true, mode: 448 });
   } catch {
     return () => {
     };
@@ -72460,7 +72648,7 @@ function acquireUpdateLock(cachePath, now, hooks = {}) {
       hooks.underBreakLock?.();
       if (current === void 0) return tryCreate(lockPath) ? release : void 0;
       if (!isAbandoned(current)) return void 0;
-      rmSync15(lockPath, { force: true });
+      rmSync16(lockPath, { force: true });
       return tryCreate(lockPath) ? release : void 0;
     } finally {
       removeIfMine(breakPath);
@@ -72556,7 +72744,7 @@ function createTrimValidator(deps = {}, spawnFn = spawn7) {
     return { code, counts, ...errors ? { errors } : {}, ...code !== 0 ? { tail: said.slice(-4e3) } : {} };
   };
   return async (dir, opts = {}) => {
-    const argv = ["validate", "--content", resolve52(dir), "--strict", "--skip-version-check"];
+    const argv = ["validate", "--content", resolve53(dir), "--strict", "--skip-version-check"];
     if (!opts.fresh) {
       const out2 = [];
       const err = [];
@@ -73014,9 +73202,9 @@ function executableOnPath(name, env = process.env) {
   const suffixes = process.platform === "win32" ? (env.PATHEXT ?? ".COM;.EXE;.BAT;.CMD").split(";").filter(Boolean) : [""];
   for (const dir of entries) {
     for (const suffix of suffixes) {
-      const candidate = join64(dir, `${name}${suffix}`);
+      const candidate = join65(dir, `${name}${suffix}`);
       try {
-        if (!statSync18(candidate).isFile()) continue;
+        if (!statSync19(candidate).isFile()) continue;
         if (process.platform !== "win32") accessSync(candidate, constants2.X_OK);
         return true;
       } catch {
@@ -73063,9 +73251,9 @@ function buildDoctorReport(input) {
   const versionSkew = versions?.cli.status === "outdated" || sdkSkew;
   const hostRefused = auth.controlTokenStatus === "refused";
   const staleToken = auth.controlTokenPresent === true && auth.controlToken === false && !hostRefused;
-  const ok = data.reachable && serve.reachable && !versionSkew && !staleToken && !hostRefused;
+  const ok2 = data.reachable && serve.reachable && !versionSkew && !staleToken && !hostRefused;
   return {
-    ok,
+    ok: ok2,
     target,
     version: version2,
     dataPlane: { ...data, note: "public Wix APIs \u2014 reachable off-VPN" },
@@ -73123,7 +73311,7 @@ async function nativeConfigAdvisories(app, configSource) {
     const { iosProjectYml: iosProjectYml2 } = await Promise.resolve().then(() => (init_paths2(), paths_exports));
     const { androidOptedIn: androidOptedIn3, LABEL_IOS_SPLASH: LABEL_IOS_SPLASH2 } = await Promise.resolve().then(() => (init_splash(), splash_exports));
     const iosYmlPath = iosProjectYml2(app);
-    const iosYml = existsSync66(iosYmlPath) ? readFileSync79(iosYmlPath, "utf8") : "";
+    const iosYml = existsSync67(iosYmlPath) ? readFileSync80(iosYmlPath, "utf8") : "";
     let optedIn = iosYml.includes(LABEL_IOS_SPLASH2);
     if (!optedIn) {
       const { androidManifestPath: androidManifestPath3 } = await Promise.resolve().then(() => (init_gen_native_config(), gen_native_config_exports));
@@ -73137,14 +73325,14 @@ async function nativeConfigAdvisories(app, configSource) {
 }
 function readConfigSource(dir) {
   try {
-    return readFileSync79(join64(dir, "config.ts"), "utf8");
+    return readFileSync80(join65(dir, "config.ts"), "utf8");
   } catch {
     return null;
   }
 }
 function writePngFile(path2, base64) {
-  mkdirSync32(dirname36(path2), { recursive: true });
-  writeFileSync29(path2, Buffer.from(base64, "base64"));
+  mkdirSync33(dirname37(path2), { recursive: true });
+  writeFileSync30(path2, Buffer.from(base64, "base64"));
   return path2;
 }
 async function seedAgentFilesFor(dir, flags, mode = "init") {
@@ -73172,8 +73360,8 @@ function keptPlan(kept) {
   return note ? { kept, note } : {};
 }
 async function initFromRemoteTemplate(name, parentDir, template, c) {
-  const dir = resolve52(parentDir, name);
-  if (existsSync66(join64(dir, "himalaya.content.json"))) {
+  const dir = resolve53(parentDir, name);
+  if (existsSync67(join65(dir, "himalaya.content.json"))) {
     throw new Error(`content package already exists at ${dir}`);
   }
   const r = await c.fetchTemplateSource(TEMPLATE_APP_PREFIX + template);
@@ -73185,7 +73373,7 @@ async function initFromRemoteTemplate(name, parentDir, template, c) {
   return finishScaffold(materializeSource(archive.files, name, dir), template);
 }
 function contentDir(flags) {
-  return resolve52(str8(flags.content) ?? process.cwd());
+  return resolve53(str8(flags.content) ?? process.cwd());
 }
 function renameRestoredSource(restored, declaredApp, renamed) {
   const text8 = {};
@@ -73203,7 +73391,7 @@ function renameRestoredSource(restored, declaredApp, renamed) {
 function symlinkDestinationIssue(dest) {
   let kind;
   try {
-    kind = lstatSync13(dest);
+    kind = lstatSync14(dest);
   } catch {
     return null;
   }
@@ -73216,11 +73404,11 @@ function symlinkDestinationIssue(dest) {
 function restoreDestinationIssue(dest, force) {
   const link = symlinkDestinationIssue(dest);
   if (link) return link;
-  if (!existsSync66(dest)) return null;
-  if (!statSync18(dest).isDirectory()) {
+  if (!existsSync67(dest)) return null;
+  if (!statSync19(dest).isDirectory()) {
     return { error: `${dest} exists and is not a directory`, hint: "pass --out/--name to land somewhere else, or remove the file" };
   }
-  if (readdirSync30(dest).length > 0 && !force) {
+  if (readdirSync31(dest).length > 0 && !force) {
     return {
       error: `${dest} already exists and is not empty`,
       hint: "pass --force to write into it anyway, or --out/--name to land somewhere else"
@@ -73229,10 +73417,10 @@ function restoreDestinationIssue(dest, force) {
   return null;
 }
 function isHimalayaMonorepoCheckout(start) {
-  let dir = resolve52(start);
+  let dir = resolve53(start);
   for (; ; ) {
-    if (existsSync66(join64(dir, "tools", "himi-cli", "src", "cli.ts")) && existsSync66(join64(dir, "core", "serve", "src", "server.ts"))) return true;
-    const parent = dirname36(dir);
+    if (existsSync67(join65(dir, "tools", "himi-cli", "src", "cli.ts")) && existsSync67(join65(dir, "core", "serve", "src", "server.ts"))) return true;
+    const parent = dirname37(dir);
     if (parent === dir) return false;
     dir = parent;
   }
@@ -73291,8 +73479,8 @@ function materializeForPreview(appDir3, slug, displayName) {
   const forBuild = Object.fromEntries(
     Object.entries(files).map(([rel, body]) => [rel, rel === "himalaya.content.json" ? substituteIdentity(body, slug) : body])
   );
-  const repoRoot2 = resolve52(fileURLToPath26(new URL("../../..", import.meta.url)));
-  const root = join64(repoRoot2, "node_modules", ".cache", "himi-template-preview");
+  const repoRoot2 = resolve53(fileURLToPath26(new URL("../../..", import.meta.url)));
+  const root = join65(repoRoot2, "node_modules", ".cache", "himi-template-preview");
   const stillRunning = (pid) => {
     try {
       process.kill(pid, 0);
@@ -73302,30 +73490,30 @@ function materializeForPreview(appDir3, slug, displayName) {
     }
   };
   try {
-    for (const entry of readdirSync30(root, { withFileTypes: true })) {
+    for (const entry of readdirSync31(root, { withFileTypes: true })) {
       if (!entry.isDirectory()) continue;
       const pid = Number(entry.name.startsWith(`${slug}-`) ? entry.name.slice(slug.length + 1) : NaN);
       if (Number.isInteger(pid) && pid > 0 && pid !== process.pid && !stillRunning(pid)) {
-        rmSync15(join64(root, entry.name), { recursive: true, force: true });
+        rmSync16(join65(root, entry.name), { recursive: true, force: true });
       }
     }
   } catch {
   }
-  const dest = join64(root, `${slug}-${process.pid}`);
-  rmSync15(dest, { recursive: true, force: true });
-  mkdirSync32(dest, { recursive: true });
+  const dest = join65(root, `${slug}-${process.pid}`);
+  rmSync16(dest, { recursive: true, force: true });
+  mkdirSync33(dest, { recursive: true });
   try {
     materializeSource(forBuild, displayName, dest, slug);
   } catch (e) {
-    rmSync15(dest, { recursive: true, force: true });
+    rmSync16(dest, { recursive: true, force: true });
     throw e;
   }
   return dest;
 }
 async function appId(dir) {
   try {
-    const { readFileSync: readFileSync80 } = await import("node:fs");
-    const m = JSON.parse(readFileSync80(join64(dir, "himalaya.content.json"), "utf8"));
+    const { readFileSync: readFileSync81 } = await import("node:fs");
+    const m = JSON.parse(readFileSync81(join65(dir, "himalaya.content.json"), "utf8"));
     if (m.name) return m.name;
   } catch {
   }
@@ -73333,8 +73521,8 @@ async function appId(dir) {
 }
 async function contentVisibility(dir) {
   try {
-    const { readFileSync: readFileSync80 } = await import("node:fs");
-    const m = JSON.parse(readFileSync80(join64(dir, "himalaya.content.json"), "utf8"));
+    const { readFileSync: readFileSync81 } = await import("node:fs");
+    const m = JSON.parse(readFileSync81(join65(dir, "himalaya.content.json"), "utf8"));
     if (m.visibility === "public" || m.visibility === "unlisted") return m.visibility;
   } catch {
   }
@@ -73537,7 +73725,7 @@ Seed your coding agent with \`himi agent-init\`. Guides: ${idx.portalUrl}`);
       return 0;
     }
     case "agent-init": {
-      const dir = resolve52(str8(flags.dir) ?? process.cwd());
+      const dir = resolve53(str8(flags.dir) ?? process.cwd());
       const { seedAgentFiles: seedAgentFiles2, NotAContentPackage: NotAContentPackage2 } = await Promise.resolve().then(() => (init_agent_context(), agent_context_exports));
       let res;
       try {
@@ -73559,7 +73747,7 @@ Seed your coding agent with \`himi agent-init\`. Guides: ${idx.portalUrl}`);
         ...res.removed.length ? { removed: res.removed, note: "older copies at the app root, moved to .himi/legacy-agent-files/ (a backup, in case one became app code) \u2014 the current ones live in .agents/skills/himalaya/" } : {},
         // In a git repo the refresh moves the diff identity an earlier `himi test` attested (that
         // hash is shared with the repo gates and deliberately exempts nothing but its own metadata).
-        ...existsSync66(join64(dir, ".himi", "attestations", "latest.json")) ? { next: "if `himi push` then refuses the attestation as stale, re-run `himi test` \u2014 in a git checkout this refresh changed the tree it covered" } : {},
+        ...existsSync67(join65(dir, ".himi", "attestations", "latest.json")) ? { next: "if `himi push` then refuses the attestation as stale, re-run `himi test` \u2014 in a git checkout this refresh changed the tree it covered" } : {},
         ...res.skipped.length ? { skipped: res.skipped } : {},
         portalUrl: idx.portalUrl
       });
@@ -73582,7 +73770,7 @@ async function recordedReleaseForContentQuietly(dir, resolution, onDrift) {
   try {
     const { buildContentForValidation: buildContentForValidation2, buildReleaseFromContent: buildReleaseFromContent2, bundleOutDir: bundleOutDir2 } = await loadAuthoring();
     const bres = await buildContentForValidation2(dir, { resolution });
-    out2 = mkdtempSync4(join64(tmpdir5(), "himi-ux-record-"));
+    out2 = mkdtempSync4(join65(tmpdir5(), "himi-ux-record-"));
     const hasWorkers = bres.built.length > 0 || bres.compileErrors.length > 0;
     const outcome = await buildReleaseFromContent2(dir, out2, { ...hasWorkers ? { tier5Dir: bundleOutDir2(dir) } : {}, collect: { lint: true } });
     const releaseId = outcome.manifest.releaseId;
@@ -73595,7 +73783,7 @@ async function recordedReleaseForContentQuietly(dir, resolution, onDrift) {
     return null;
   } finally {
     if (out2 !== void 0) try {
-      rmSync15(out2, { recursive: true, force: true });
+      rmSync16(out2, { recursive: true, force: true });
     } catch {
     }
   }
@@ -73749,7 +73937,7 @@ async function producedWidgetFamilies(dir) {
   }
   const outDir = tier5Dir.bundleOutDir(dir);
   try {
-    readdirSync30(outDir);
+    readdirSync31(outDir);
   } catch {
     return { families: void 0, source: "unbuilt" };
   }
@@ -73760,7 +73948,7 @@ async function producedWidgetFamilies(dir) {
     let js;
     for (const candidate of [`${name}.bundle.js`, `${name}.js`, name]) {
       try {
-        js = readFileSync79(join64(outDir, candidate), "utf8");
+        js = readFileSync80(join65(outDir, candidate), "utf8");
         break;
       } catch {
       }
@@ -73791,7 +73979,7 @@ async function producedWidgetFamilies(dir) {
   }
   return { families, source: "dist/bundles" };
 }
-var boardOpen = (dir) => existsSync66(join64(dir, ".himi", "studio", "index.html"));
+var boardOpen = (dir) => existsSync67(join65(dir, ".himi", "studio", "index.html"));
 var BOARD_REFRESHERS = /* @__PURE__ */ new Set(["render", "test", "validate", "build", "push", "icon", "site", "ux", "progress"]);
 async function leaveForBoard(dir, record2, value) {
   if (!boardOpen(dir)) return;
@@ -73815,7 +74003,7 @@ async function liveMapFor(dir) {
 }
 var commandScratch = new AsyncLocalStorage();
 function commandScratchDir(prefix) {
-  const dir = mkdtempSync4(join64(tmpdir5(), prefix));
+  const dir = mkdtempSync4(join65(tmpdir5(), prefix));
   commandScratch.getStore()?.push(dir);
   return dir;
 }
@@ -73826,7 +74014,7 @@ async function run(argv, io = defaultIO, deps = {}) {
     code = await commandScratch.run(scratch, () => runCommand(argv, io, deps));
   } finally {
     for (const dir of scratch) try {
-      rmSync15(dir, { recursive: true, force: true });
+      rmSync16(dir, { recursive: true, force: true });
     } catch {
     }
   }
@@ -74094,7 +74282,7 @@ himi v${cliVersion()} \u2014 run \`himi --version\`. If authoring commands fail
           return 2;
         }
         const template = str8(flags.template);
-        const parentDir = resolve52(str8(flags.dir) ?? process.cwd());
+        const parentDir = resolve53(str8(flags.dir) ?? process.cwd());
         const withAgentFiles = async (dir) => {
           const seeded = await seedAgentFilesFor(dir, flags);
           if (!seeded.agent || "error" in seeded.agent) return seeded;
@@ -74107,7 +74295,7 @@ himi v${cliVersion()} \u2014 run \`himi --version\`. If authoring commands fail
             const owed = openApprovals2(readApprovals2(dir).events).length;
             next.push(`carried the planning journal into the app (${carried.join(", ")}${owed ? `; ${owed} approval${owed === 1 ? "" : "s"} still owed` : ""}) \u2014 \`himi progress --brief\` there shows it`);
           }
-          const planInParent = ["SPEC.md", "MOBILE-UX.md"].filter((f) => existsSync66(join64(parentDir, f)));
+          const planInParent = ["SPEC.md", "MOBILE-UX.md"].filter((f) => existsSync67(join65(parentDir, f)));
           if (planInParent.length) {
             next.push(`${planInParent.join(" and ")} in ${parentDir} ${planInParent.length > 1 ? "are" : "is"} not the app's \u2014 if that is the approved plan, move it over the template's boilerplate in ${dir}`);
           }
@@ -74255,11 +74443,11 @@ ${doNow.map((l) => `  ${l}`).join("\n")}`);
                 return 2;
               }
             }
-            const appDir3 = resolve52(str8(flags.dir) ?? process.cwd());
-            const sourceDir = resolve52(str8(flags["source-dir"]) ?? appDir3);
+            const appDir3 = resolve53(str8(flags.dir) ?? process.cwd());
+            const sourceDir = resolve53(str8(flags["source-dir"]) ?? appDir3);
             let meta;
             try {
-              meta = JSON.parse(readFileSync79(join64(sourceDir, TEMPLATE_META_FILE), "utf8"));
+              meta = JSON.parse(readFileSync80(join65(sourceDir, TEMPLATE_META_FILE), "utf8"));
             } catch {
               io.error(JSON.stringify({ error: `no ${TEMPLATE_META_FILE} in ${sourceDir} \u2014 a template must declare { title, description, tags } to be published`, hint: `add ${TEMPLATE_META_FILE} next to himalaya.content.json (or pass --source-dir <dir>)` }));
               return 2;
@@ -74269,7 +74457,7 @@ ${doNow.map((l) => `  ${l}`).join("\n")}`);
               return 2;
             }
             try {
-              const appearance = extractTemplateAppearance(JSON.parse(readFileSync79(join64(sourceDir, "tokens.json"), "utf8")));
+              const appearance = extractTemplateAppearance(JSON.parse(readFileSync80(join65(sourceDir, "tokens.json"), "utf8")));
               meta = { ...appearance, ...meta };
             } catch {
             }
@@ -74291,14 +74479,14 @@ ${doNow.map((l) => `  ${l}`).join("\n")}`);
             const force = flags.force === true;
             const { buildContentForValidation: buildContentForValidation2, buildReleaseFromContent: buildReleaseFromContent2, bundleOutDir: bundleOutDir2 } = await loadAuthoring();
             const bres = await buildContentForValidation2(buildDir, { resolution: resolutionFlag(flags) });
-            const out2 = mkdtempSync4(join64(tmpdir5(), "himi-template-"));
+            const out2 = mkdtempSync4(join65(tmpdir5(), "himi-template-"));
             publishScratch.push(out2);
             const hasWorkers = bres.built.length > 0 || bres.compileErrors.length > 0;
             const outcome = await buildReleaseFromContent2(buildDir, out2, {
               ...hasWorkers ? { tier5Dir: bundleOutDir2(buildDir) } : {},
               collect: { lint: true, strict }
             });
-            const scaffoldSourceFindings = resolve52(sourceDir) === resolve52(appDir3) ? [] : [
+            const scaffoldSourceFindings = resolve53(sourceDir) === resolve53(appDir3) ? [] : [
               ...tokenColorIssues(sourceDir),
               ...surfaceIssues(sourceDir, void 0, strict),
               ...await fontIssues(sourceDir, strict),
@@ -74341,11 +74529,11 @@ ${doNow.map((l) => `  ${l}`).join("\n")}`);
               }));
               return 1;
             }
-            const iconPath = str8(flags.icon) ? resolve52(str8(flags.icon)) : templateIconPath(name);
+            const iconPath = str8(flags.icon) ? resolve53(str8(flags.icon)) : templateIconPath(name);
             let iconHash;
             if (iconPath) {
               try {
-                const bytes2 = readFileSync79(iconPath);
+                const bytes2 = readFileSync80(iconPath);
                 payload.icon = bytes2.toString("base64");
                 iconHash = createHash31("sha256").update(bytes2).digest("hex");
               } catch {
@@ -74518,7 +74706,7 @@ ${doNow.map((l) => `  ${l}`).join("\n")}`);
           } finally {
             for (const dir of publishScratch) {
               try {
-                rmSync15(dir, { recursive: true, force: true });
+                rmSync16(dir, { recursive: true, force: true });
               } catch (e) {
                 io.error(JSON.stringify({ warning: `could not remove temp dir ${dir}: ${e.message}` }));
               }
@@ -74552,12 +74740,12 @@ ${doNow.map((l) => `  ${l}`).join("\n")}`);
           print({ ok: false, error: "eject needs a module", hint: `one of: ${EJECTABLE2.join(", ")}` });
           return 2;
         }
-        const { readdirSync: readdirSync31, existsSync: fileExists } = await import("node:fs");
+        const { readdirSync: readdirSync32, existsSync: fileExists } = await import("node:fs");
         const { join: pathJoin } = await import("node:path");
         const targets = [];
         const t5 = pathJoin(dir, "tier5-src");
         if (fileExists(t5)) {
-          for (const d of readdirSync31(t5, { withFileTypes: true })) {
+          for (const d of readdirSync32(t5, { withFileTypes: true })) {
             if (d.isDirectory()) targets.push(pathJoin(t5, d.name, "index.ts"));
           }
         }
@@ -74632,7 +74820,7 @@ ${doNow.map((l) => `  ${l}`).join("\n")}`);
           const path2 = dpxSessionTokenPath();
           let raw;
           try {
-            raw = readFileSync79(path2, "utf8");
+            raw = readFileSync80(path2, "utf8");
           } catch {
             throw new Error(`no DPX BO session at ${path2}; run dpx auth login, write dpx auth token to that path, then himi login --dpx --target bo`);
           }
@@ -74763,32 +74951,37 @@ ${doNow.map((l) => `  ${l}`).join("\n")}`);
             return 1;
           }
           const { himiPluginFiles: himiPluginFiles2 } = await Promise.resolve().then(() => (init_claude_plugin(), claude_plugin_exports));
-          const dir = resolve52(out2);
+          const dir = resolve53(out2);
           const files = himiPluginFiles2(skills.skillMd);
           for (const f of files) {
-            mkdirSync32(dirname36(join64(dir, f.path)), { recursive: true });
-            writeFileSync29(join64(dir, f.path), f.text);
+            mkdirSync33(dirname37(join65(dir, f.path)), { recursive: true });
+            writeFileSync30(join65(dir, f.path), f.text);
           }
           print({ ok: true, dir, files: files.map((f) => f.path), next: [`claude plugin validate ${dir}`, `claude --plugin-dir ${dir}`] });
           return 0;
         }
         const { startMcpServer: startMcpServer2 } = await Promise.resolve().then(() => (init_server(), server_exports));
-        await startMcpServer2({ run, version: cliVersion() });
+        await startMcpServer2({
+          run,
+          version: cliVersion(),
+          withFiles: flags["with-files"] === true,
+          ...process.env.HIMI_WORKSPACE ? { workspace: resolve53(process.env.HIMI_WORKSPACE) } : {}
+        });
         return 0;
       }
       case "studio": {
         const { openStudio: openStudio2 } = await Promise.resolve().then(() => (init_studio(), studio_exports));
         const dir = contentDir(flags);
-        if (!existsSync66(join64(dir, "himalaya.content.json"))) {
+        if (!existsSync67(join65(dir, "himalaya.content.json"))) {
           io.error(JSON.stringify({ ok: false, error: "not_a_content_package", dir, hint: "run from the app directory (or pass --content <dir>) \u2014 the board reads that package's .himi/" }));
           return 2;
         }
         if (pos[1] === "reel") {
           const { buildReel: buildReel2 } = await Promise.resolve().then(() => (init_studio_reel(), studio_reel_exports));
-          const out2 = resolve52(str8(flags.out) ?? join64(dir, ".himi", "making-of.html"));
+          const out2 = resolve53(str8(flags.out) ?? join65(dir, ".himi", "making-of.html"));
           const { html, plan } = buildReel2(dir);
-          mkdirSync32(dirname36(out2), { recursive: true });
-          writeFileSync29(out2, html);
+          mkdirSync33(dirname37(out2), { recursive: true });
+          writeFileSync30(out2, html);
           const { pathToFileURL: pathToFileURL9 } = await import("node:url");
           const url2 = pathToFileURL9(out2).href;
           const open2 = flags["no-open"] !== true;
@@ -74857,7 +75050,7 @@ ${handover.hint[0].toUpperCase()}${handover.hint.slice(1)}.`);
         } = await Promise.resolve().then(() => (init_progress(), progress_exports));
         const dir = contentDir(flags);
         const journal2 = journalPath2(dir);
-        const isContentPackage = existsSync66(join64(dir, "himalaya.content.json"));
+        const isContentPackage = existsSync67(join65(dir, "himalaya.content.json"));
         const hint = isContentPackage ? {} : { hint: "no himalaya.content.json here \u2014 run from the app directory (or pass --content <dir>) so the build board finds this journal" };
         const message = pos.slice(1).join(" ").trim();
         const approvalFlags = ["approve", "done", "drop"].filter((f) => flags[f] !== void 0);
@@ -75006,7 +75199,7 @@ ${handover.hint[0].toUpperCase()}${handover.hint.slice(1)}.`);
       case "test": {
         const dir = contentDir(flags);
         const structuredOutput = flags.json === true || io.isTTY !== true;
-        if (existsSync66(join64(dir, "functions"))) {
+        if (existsSync67(join65(dir, "functions"))) {
           const { invokeLocalFunction: invokeLocalFunction2, loadFunctionsApp: loadFunctionsApp2 } = await Promise.resolve().then(() => (init_functions(), functions_exports));
           const loaded = await loadFunctionsApp2(dir);
           const results = [];
@@ -75138,7 +75331,7 @@ ${handover.hint[0].toUpperCase()}${handover.hint.slice(1)}.`);
             io.error(JSON.stringify({ error: `screen "${screen.screenId}" has no Tier-5 worker, so there is nothing for the browser loop to build` }));
             return 2;
           }
-          const sources = collectWorkerSources2(join64(dir, "tier5-src"), screen.bundleName);
+          const sources = collectWorkerSources2(join65(dir, "tier5-src"), screen.bundleName);
           if (!sources) {
             io.error(JSON.stringify({ error: `no worker source found at tier5-src/${screen.bundleName} \u2014 the browser loop compiles SOURCE, not the built bundle` }));
             return 2;
@@ -75315,7 +75508,7 @@ ${handover.hint[0].toUpperCase()}${handover.hint.slice(1)}.`);
             const sp = await runShotsPass2({
               descriptors: scopeDescriptors2(outcome.descriptors ?? [], pos.slice(1), invalidScreens),
               tokens: outcome.tokens,
-              outDir: join64(dir, ".himi", "shots"),
+              outDir: join65(dir, ".himi", "shots"),
               width: 390,
               layers: { rules: shotRules, ...cmsSeed ? { cmsSeed } : {}, ...canned ? { canned: canned.byKey } : {} },
               ...budgetMs ? { budgetMs } : {},
@@ -75325,7 +75518,7 @@ ${handover.hint[0].toUpperCase()}${handover.hint.slice(1)}.`);
                 renderDescriptorWeb: renderDescriptorWeb2,
                 renderPngBatch: renderPngBatch2,
                 writePng: (path2, base64) => writePngFile(path2, base64),
-                clearDir: (d) => rmSync15(d, { recursive: true, force: true })
+                clearDir: (d) => rmSync16(d, { recursive: true, force: true })
               }
             });
             writtenShots = sp.written;
@@ -75353,7 +75546,7 @@ ${handover.hint[0].toUpperCase()}${handover.hint.slice(1)}.`);
           releaseId: result.releaseId,
           releasePayload: release,
           descriptors: attestedDescriptors,
-          screenshots: Object.fromEntries(writtenShots.filter((name) => crawledScreens.has(name.replace(/\.png$/, ""))).map((name) => [name.replace(/\.png$/, ""), join64(dir, ".himi", "shots", name)])),
+          screenshots: Object.fromEntries(writtenShots.filter((name) => crawledScreens.has(name.replace(/\.png$/, ""))).map((name) => [name.replace(/\.png$/, ""), join65(dir, ".himi", "shots", name)])),
           coverage: {
             screens: crawledScreens.size,
             actionsDispatched: result.actions.exercised,
@@ -75464,7 +75657,7 @@ ${[...afterRun.next, ...testReminder ? [testReminder] : []].join("\n")}`);
             return 2;
           }
           try {
-            const raw = stateArg.trim().startsWith("{") ? stateArg : readFileSync79(stateArg.replace(/^@/, ""), "utf8");
+            const raw = stateArg.trim().startsWith("{") ? stateArg : readFileSync80(stateArg.replace(/^@/, ""), "utf8");
             injectedState = JSON.parse(raw);
           } catch (e) {
             io.error(JSON.stringify({ error: `--state must be inline JSON or a path to a .json file \u2014 ${e.message}` }));
@@ -75479,7 +75672,7 @@ ${[...afterRun.next, ...testReminder ? [testReminder] : []].join("\n")}`);
             return 2;
           }
           try {
-            const raw = inputArg.trim().startsWith("{") ? inputArg : readFileSync79(inputArg.replace(/^@/, ""), "utf8");
+            const raw = inputArg.trim().startsWith("{") ? inputArg : readFileSync80(inputArg.replace(/^@/, ""), "utf8");
             const parsed = JSON.parse(raw);
             if (!parsed || typeof parsed !== "object" || Array.isArray(parsed)) throw new Error("must be a JSON object");
             injectedInput = parsed;
@@ -75542,11 +75735,11 @@ ${[...afterRun.next, ...testReminder ? [testReminder] : []].join("\n")}`);
         const diagnostics = (outcome.lint ?? []).find((s) => s.screenId === screenId)?.issues ?? [];
         let pngFile;
         let attestationPngFile;
-        const shotPath = join64(dir, ".himi", "shots", `${screenId}.png`);
+        const shotPath = join65(dir, ".himi", "shots", `${screenId}.png`);
         const pngTarget = typeof flags.png === "string" ? str8(flags.png) : flags.png === true ? shotPath : void 0;
         if (pngTarget && r.pngBase64) {
           pngFile = writePngFile(pngTarget, r.pngBase64);
-          attestationPngFile = resolve52(pngTarget) === resolve52(shotPath) ? pngFile : writePngFile(shotPath, r.pngBase64);
+          attestationPngFile = resolve53(pngTarget) === resolve53(shotPath) ? pngFile : writePngFile(shotPath, r.pngBase64);
         }
         if (renderWidth !== void 0 && r.renderable) {
           recordRenderWidth(dir, {
@@ -75882,7 +76075,7 @@ default (no --glyph): ${DEFAULT_GLYPH2} \u2014 a mark that claims nothing, so th
           return 2;
         }
         const renamed = str8(flags.name);
-        const dest = resolve52(str8(flags.out) ?? process.cwd(), renamed ?? wanted);
+        const dest = resolve53(str8(flags.out) ?? process.cwd(), renamed ?? wanted);
         const replace = flags.replace === true;
         const force = replace || flags.force === true;
         const linked = symlinkDestinationIssue(dest);
@@ -75890,20 +76083,20 @@ default (no --glyph): ${DEFAULT_GLYPH2} \u2014 a mark that claims nothing, so th
           io.error(JSON.stringify(linked));
           return 1;
         }
-        if (existsSync66(dest)) {
-          if (!statSync18(dest).isDirectory()) {
+        if (existsSync67(dest)) {
+          if (!statSync19(dest).isDirectory()) {
             io.error(JSON.stringify({
               error: `${dest} exists and is not a directory`,
               hint: "pass --out/--name to land somewhere else, or remove the file"
             }));
             return 1;
           }
-          const occupied = readdirSync30(dest).length > 0;
+          const occupied = readdirSync31(dest).length > 0;
           if (occupied && !force) {
             io.error(JSON.stringify({ error: `${dest} already exists and is not empty`, hint: "pass --force to write into it anyway (merging, and naming what it keeps), --replace to restore exactly what was archived, or --out/--name to land somewhere else" }));
             return 1;
           }
-          if (replace && occupied && !existsSync66(join64(dest, "himalaya.content.json"))) {
+          if (replace && occupied && !existsSync67(join65(dest, "himalaya.content.json"))) {
             io.error(JSON.stringify({
               error: `${dest} is not a content package \u2014 refusing to --replace it`,
               hint: "--replace only clears a directory that holds himalaya.content.json. Check --out/--name, or pass --force to merge into it instead."
@@ -76070,7 +76263,7 @@ default (no --glyph): ${DEFAULT_GLYPH2} \u2014 a mark that claims nothing, so th
         const manifest = outcome.manifest;
         const payload = await loadReleaseFromDir(declared, out2);
         const { shellQuote: shellQuote3 } = await Promise.resolve().then(() => (init_shell_quote(), shell_quote_exports));
-        const contentRel = relative13(process.cwd(), dir) || ".";
+        const contentRel = relative14(process.cwd(), dir) || ".";
         const contentArg2 = shellQuote3(contentRel);
         if (onlyRaw !== void 0) {
           const onlyDraft = flags.draft === true;
@@ -76541,7 +76734,7 @@ default (no --glyph): ${DEFAULT_GLYPH2} \u2014 a mark that claims nothing, so th
             return 2;
           }
           try {
-            const res = writePack(resolve52(releaseDir), only, resolve52(str8(flags.out) ?? process.cwd()));
+            const res = writePack(resolve53(releaseDir), only, resolve53(str8(flags.out) ?? process.cwd()));
             print({
               ok: true,
               app: res.app,
@@ -76590,7 +76783,7 @@ default (no --glyph): ${DEFAULT_GLYPH2} \u2014 a mark that claims nothing, so th
         }
         const { buildContentForValidation: buildContentForValidation2, buildReleaseFromContent: buildReleaseFromContent2, bundleOutDir: bundleOutDir2 } = await loadAuthoring();
         const bres = await buildContentForValidation2(dir, { resolution: resolutionFlag(flags) });
-        const built = mkdtempSync4(join64(tmpdir5(), "himi-pack-"));
+        const built = mkdtempSync4(join65(tmpdir5(), "himi-pack-"));
         const hasWorkers = bres.built.length > 0 || bres.compileErrors.length > 0;
         const outcome = await buildReleaseFromContent2(dir, built, {
           ...hasWorkers ? { tier5Dir: bundleOutDir2(dir) } : {},
@@ -76607,12 +76800,12 @@ default (no --glyph): ${DEFAULT_GLYPH2} \u2014 a mark that claims nothing, so th
           ...await navIssues2(dir, strict)
         ]);
         if (hasErrors && !force) {
-          rmSync15(built, { recursive: true, force: true });
+          rmSync16(built, { recursive: true, force: true });
           print({ ...report3, packed: false, hint: "lint found errors \u2014 fix them, or re-run `himi pack --force` to pack anyway" });
           return 1;
         }
         try {
-          const res = writePack(built, app, resolve52(str8(flags.out) ?? dir), sourceArchive);
+          const res = writePack(built, app, resolve53(str8(flags.out) ?? dir), sourceArchive);
           print({
             ok: true,
             app: res.app,
@@ -76643,7 +76836,7 @@ default (no --glyph): ${DEFAULT_GLYPH2} \u2014 a mark that claims nothing, so th
           io.error(JSON.stringify({ error: e.message }));
           return 1;
         } finally {
-          rmSync15(built, { recursive: true, force: true });
+          rmSync16(built, { recursive: true, force: true });
         }
       }
       // ---- himi import — turn a dev .himi back into an editable content package ----
@@ -76657,7 +76850,7 @@ default (no --glyph): ${DEFAULT_GLYPH2} \u2014 a mark that claims nothing, so th
         const { HIMI_PACKAGE_SOURCE_PATH: HIMI_PACKAGE_SOURCE_PATH2, isSafeAppId: isSafeAppId2, packageContents: packageContents2 } = await Promise.resolve().then(() => (init_himi_package(), himi_package_exports));
         let opened;
         try {
-          opened = openPackageFile2(resolve52(file));
+          opened = openPackageFile2(resolve53(file));
         } catch (e) {
           io.error(JSON.stringify({ error: e.message }));
           return 1;
@@ -76670,7 +76863,7 @@ default (no --glyph): ${DEFAULT_GLYPH2} \u2014 a mark that claims nothing, so th
           io.error(JSON.stringify({
             ok: false,
             error: "app_source_not_in_package",
-            detail: `${resolve52(file)} is a release package: it carries built output (screens, bundles, tokens) and no source`,
+            detail: `${resolve53(file)} is a release package: it carries built output (screens, bundles, tokens) and no source`,
             hint: "re-pack it from the content package with `himi pack --dev`, or restore from the serve plane with `himi pull <app>`"
           }));
           return 1;
@@ -76693,7 +76886,7 @@ default (no --glyph): ${DEFAULT_GLYPH2} \u2014 a mark that claims nothing, so th
             return 1;
           }
         }
-        const dest = resolve52(str8(flags.out) ?? process.cwd(), renamed ?? opened.header.app);
+        const dest = resolve53(str8(flags.out) ?? process.cwd(), renamed ?? opened.header.app);
         const issue2 = restoreDestinationIssue(dest, flags.force === true);
         if (issue2) {
           io.error(JSON.stringify(issue2));
@@ -76780,7 +76973,7 @@ default (no --glyph): ${DEFAULT_GLYPH2} \u2014 a mark that claims nothing, so th
         }
         try {
           const { openPackageFile: openPackageFile2 } = await Promise.resolve().then(() => (init_pack(), pack_exports));
-          const opened = openPackageFile2(resolve52(file));
+          const opened = openPackageFile2(resolve53(file));
           if (!opened.validation.ok || !opened.header) {
             io.error(JSON.stringify({ error: "refusing to share an invalid package", issues: opened.validation.errors }));
             return 1;
@@ -76790,12 +76983,12 @@ default (no --glyph): ${DEFAULT_GLYPH2} \u2014 a mark that claims nothing, so th
             io.error(JSON.stringify({
               ok: false,
               error: "refusing to share a package that carries the app's source",
-              detail: `${resolve52(file)} was packed with --dev, and a share link is public and unauthenticated \u2014 anyone with the URL could \`himi import\` your codebase`,
+              detail: `${resolve53(file)} was packed with --dev, and a share link is public and unauthenticated \u2014 anyone with the URL could \`himi import\` your codebase`,
               hint: "share a release package instead (`himi pack` with no --dev), or hand the dev package over directly"
             }));
             return 1;
           }
-          const archive = readFileSync79(resolve52(file));
+          const archive = readFileSync80(resolve53(file));
           const result = await client2().createPackageShare({
             app: opened.header.app,
             releaseId: opened.header.releaseId,
@@ -76871,11 +77064,11 @@ default (no --glyph): ${DEFAULT_GLYPH2} \u2014 a mark that claims nothing, so th
             const app = await appId(dir2);
             const { buildContentBundles: buildContentBundles2, buildReleaseFromContent: buildReleaseFromContent2, bundleOutDir: bundleOutDir2 } = await loadAuthoring();
             const bres = await buildContentBundles2(dir2, { resolution: resolutionFlag(flags) });
-            temp = mkdtempSync4(join64(tmpdir5(), "himi-run-build-"));
+            temp = mkdtempSync4(join65(tmpdir5(), "himi-run-build-"));
             const hasWorkers = bres.built.length > 0 || bres.compileErrors.length > 0;
             const initial = await buildReleaseFromContent2(dir2, temp, { ...hasWorkers ? { tier5Dir: bundleOutDir2(dir2) } : {} });
             servedMissing = initial.missingBundles;
-            source = join64(temp, app);
+            source = join65(temp, app);
           }
           const chromeArg = str8(flags.chrome) ?? "preview";
           if (chromeArg !== "preview" && chromeArg !== "app") {
@@ -76911,7 +77104,7 @@ default (no --glyph): ${DEFAULT_GLYPH2} \u2014 a mark that claims nothing, so th
             if (!recordKit) return;
             startedAt = (/* @__PURE__ */ new Date()).toISOString();
             const failure = record2(served2, { ok: true, at: startedAt });
-            if (!recorded) io.error(JSON.stringify({ run: "run_record_skipped", message: `${failure ?? `${join64(dir, ".himi")} is not a real directory`}, so the build board will not frame this preview.` }));
+            if (!recorded) io.error(JSON.stringify({ run: "run_record_skipped", message: `${failure ?? `${join65(dir, ".himi")} is not a real directory`}, so the build board will not frame this preview.` }));
             await refreshBoard();
           };
           const retract = async () => {
@@ -76934,9 +77127,9 @@ default (no --glyph): ${DEFAULT_GLYPH2} \u2014 a mark that claims nothing, so th
             });
             await announce(run2);
             print({ ok: true, app: run2.app, url: run2.url, port: run2.port, plane: "browser" });
-            await new Promise((resolve53) => {
+            await new Promise((resolve54) => {
               const stop = () => {
-                void retract().catch((e) => io.error(JSON.stringify({ run: "stop_cleanup_failed", message: e.message }))).finally(() => run2.close().finally(() => resolve53()));
+                void retract().catch((e) => io.error(JSON.stringify({ run: "stop_cleanup_failed", message: e.message }))).finally(() => run2.close().finally(() => resolve54()));
               };
               process.once("SIGINT", stop);
               process.once("SIGTERM", stop);
@@ -76945,7 +77138,7 @@ default (no --glyph): ${DEFAULT_GLYPH2} \u2014 a mark that claims nothing, so th
           }
           const watchKit = watch2 ? await Promise.resolve().then(() => (init_run_watch(), run_watch_exports)) : null;
           const bus = watchKit ? new watchKit.ReloadBus() : void 0;
-          if (watch2) served = mkdtempSync4(join64(tmpdir5(), "himi-run-served-"));
+          if (watch2) served = mkdtempSync4(join65(tmpdir5(), "himi-run-served-"));
           const running = await runPackage2(source, {
             port,
             chrome: chromeArg,
@@ -76974,8 +77167,8 @@ default (no --glyph): ${DEFAULT_GLYPH2} \u2014 a mark that claims nothing, so th
             await announce(running);
             if (watchKit && bus) {
               const { buildContentBundles: buildContentBundles2, buildReleaseFromContent: buildReleaseFromContent2, bundleOutDir: bundleOutDir2 } = await loadAuthoring();
-              const live2 = join64(running.releaseRoot, running.app);
-              const manifestOf = (tree) => JSON.parse(readFileSync79(join64(tree, "release-manifest.json"), "utf8"));
+              const live2 = join65(running.releaseRoot, running.app);
+              const manifestOf = (tree) => JSON.parse(readFileSync80(join65(tree, "release-manifest.json"), "utf8"));
               let current = manifestOf(live2);
               const failed2 = async (message) => {
                 if (stopping) return;
@@ -76986,7 +77179,7 @@ default (no --glyph): ${DEFAULT_GLYPH2} \u2014 a mark that claims nothing, so th
               };
               rebuild = watchKit.serialize(async () => {
                 const t0 = Date.now();
-                const next = mkdtempSync4(join64(tmpdir5(), "himi-run-build-"));
+                const next = mkdtempSync4(join65(tmpdir5(), "himi-run-build-"));
                 try {
                   const bres = await buildContentBundles2(dir, { resolution: resolutionFlag(flags) });
                   if (bres.compileErrors.length) {
@@ -77003,18 +77196,18 @@ default (no --glyph): ${DEFAULT_GLYPH2} \u2014 a mark that claims nothing, so th
                     return;
                   }
                   if (stopping) return;
-                  const fresh = manifestOf(join64(next, running.app));
+                  const fresh = manifestOf(join65(next, running.app));
                   const diff = watchKit.diffReleases(current, fresh);
                   const { describeChanges: describeChanges2, headline: headline2 } = await Promise.resolve().then(() => (init_build_changes(), build_changes_exports));
-                  const changes = describeChanges2(live2, join64(next, running.app), diff);
+                  const changes = describeChanges2(live2, join65(next, running.app), diff);
                   const retired = `${live2}.retired-${Date.now()}`;
                   renameSync7(live2, retired);
                   try {
-                    renameSync7(join64(next, running.app), live2);
+                    renameSync7(join65(next, running.app), live2);
                   } catch {
-                    cpSync3(join64(next, running.app), live2, { recursive: true });
+                    cpSync3(join65(next, running.app), live2, { recursive: true });
                   }
-                  rmSync15(retired, { recursive: true, force: true });
+                  rmSync16(retired, { recursive: true, force: true });
                   current = fresh;
                   servedMissing = outcome.missingBundles;
                   for (const [event, data] of watchKit.reloadEvents(diff)) bus.publish(event, data);
@@ -77024,7 +77217,7 @@ default (no --glyph): ${DEFAULT_GLYPH2} \u2014 a mark that claims nothing, so th
                 } catch (e) {
                   await failed2(e.message.split("\n")[0]);
                 } finally {
-                  rmSync15(next, { recursive: true, force: true });
+                  rmSync16(next, { recursive: true, force: true });
                 }
               });
               watcher2 = watchKit.watchContent(dir, () => {
@@ -77092,9 +77285,9 @@ default (no --glyph): ${DEFAULT_GLYPH2} \u2014 a mark that claims nothing, so th
           io.error(JSON.stringify({ error: e.message }));
           return 1;
         } finally {
-          if (temp) rmSync15(temp, { recursive: true, force: true });
-          if (served) rmSync15(served, { recursive: true, force: true });
-          if (browserCopy) rmSync15(browserCopy, { recursive: true, force: true });
+          if (temp) rmSync16(temp, { recursive: true, force: true });
+          if (served) rmSync16(served, { recursive: true, force: true });
+          if (browserCopy) rmSync16(browserCopy, { recursive: true, force: true });
         }
       }
       case "preview": {
@@ -77636,7 +77829,7 @@ default (no --glyph): ${DEFAULT_GLYPH2} \u2014 a mark that claims nothing, so th
           io.error(JSON.stringify({ error: `patch ${kind} needs --file`, usage: PATCH_USAGE }));
           return 2;
         }
-        if (!existsSync66(file)) {
+        if (!existsSync67(file)) {
           io.error(JSON.stringify({ error: `no such file: ${file}` }));
           return 2;
         }
@@ -77692,7 +77885,7 @@ default (no --glyph): ${DEFAULT_GLYPH2} \u2014 a mark that claims nothing, so th
           lintNote: "`himi patch` sends a raw file. Nothing here built or linted your app \u2014 `himi push --only <selector>` is the same edit with the full lint gate in front of it."
         };
         if (kind === "tokens" || kind === "app-config") {
-          const body = readFileSync79(file, "utf8");
+          const body = readFileSync80(file, "utf8");
           const patch2 = kind === "tokens" ? { tokens: body } : { appConfig: body };
           return runReleasePatch({
             ...common,
@@ -77707,7 +77900,7 @@ default (no --glyph): ${DEFAULT_GLYPH2} \u2014 a mark that claims nothing, so th
             io.error(JSON.stringify({ error: "patch screen needs a <screenId>", usage: PATCH_USAGE }));
             return 2;
           }
-          const descriptor = readFileSync79(file, "utf8");
+          const descriptor = readFileSync80(file, "utf8");
           try {
             JSON.parse(descriptor);
           } catch (e) {
@@ -77747,7 +77940,7 @@ default (no --glyph): ${DEFAULT_GLYPH2} \u2014 a mark that claims nothing, so th
             extra: { kind, screen: id, file: { path: file, bytes: Buffer.byteLength(descriptor, "utf8") } }
           });
         }
-        const bytes2 = readFileSync79(file);
+        const bytes2 = readFileSync80(file);
         const sha = createHash31("sha256").update(bytes2).digest("hex");
         const forScreens = (str8(flags["for-screen"]) ?? "").split(",").map((s) => s.trim()).filter(Boolean);
         if (flags["no-rebind"] !== void 0 && flags["no-rebind"] !== true) {
@@ -77891,7 +78084,7 @@ default (no --glyph): ${DEFAULT_GLYPH2} \u2014 a mark that claims nothing, so th
           }
           let def;
           try {
-            const parsed = JSON.parse(arg.startsWith("@") ? readFileSync79(arg.slice(1), "utf8") : arg);
+            const parsed = JSON.parse(arg.startsWith("@") ? readFileSync80(arg.slice(1), "utf8") : arg);
             if (parsed === null || typeof parsed !== "object" || Array.isArray(parsed)) {
               io.error(JSON.stringify({ error: "invalid_definition", problems: [`--definition must be a JSON object, got ${Array.isArray(parsed) ? "an array" : parsed === null ? "null" : typeof parsed}`] }));
               return 2;
@@ -78355,7 +78548,7 @@ ${label2}`);
         const platform = str8(flags.platform)?.split(",").map((p) => p.trim()).filter(Boolean);
         {
           const distDir = contentDir(flags);
-          if (existsSync66(join64(distDir, "himalaya.content.json"))) {
+          if (existsSync67(join65(distDir, "himalaya.content.json"))) {
             const issues = await iconIssues(distDir, flags.strict === true, { requireDeclared: true, requireVerified: true });
             const errors = issues.filter((i) => i.severity === "error");
             for (const i of issues.filter((i2) => i2.severity === "warning")) {
@@ -78641,7 +78834,7 @@ ${label2}`);
           const dpxPath = dpxSessionTokenPath();
           let dpx;
           try {
-            dpx = readFileSync79(dpxPath, "utf8").trim();
+            dpx = readFileSync80(dpxPath, "utf8").trim();
           } catch {
             io.error(JSON.stringify({ error: `no dpx session at ${dpxPath} \u2014 run \`dpx auth login\` then \`dpx auth token > ${dpxPath}\` (dpx 2.x keeps its own state in ~/.dpx/auth.json and does NOT write the legacy session file), or omit --dpx` }));
             return 1;
@@ -79049,7 +79242,7 @@ ${report3.ok ? "OK \u2014 data + serve plane reachable." : typeof report3.hint =
           const path2 = dpxSessionTokenPath();
           let raw;
           try {
-            raw = readFileSync79(path2, "utf8");
+            raw = readFileSync80(path2, "utf8");
           } catch {
             io.error(JSON.stringify({ error: `no DPX BO session at ${path2}` }));
             return 1;
@@ -79365,10 +79558,11 @@ ${report3.ok ? "OK \u2014 data + serve plane reachable." : typeof report3.hint =
           return 2;
         }
         const redirectFlag = str8(flags["redirect-uri"]);
-        if (!clientId && (flags.apply === true || redirectFlag)) {
-          const { APPLY_NEEDS_CLIENT: APPLY_NEEDS_CLIENT2, REDIRECT_NEEDS_CLIENT: REDIRECT_NEEDS_CLIENT2 } = await Promise.resolve().then(() => (init_cli(), cli_exports));
+        const { APPLY_NEEDS_CLIENT: APPLY_NEEDS_CLIENT2, REDIRECT_NEEDS_CLIENT: REDIRECT_NEEDS_CLIENT2, applyNeedsClient: applyNeedsClient2 } = await Promise.resolve().then(() => (init_cli(), cli_exports));
+        const applyWantsClient = flags.apply === true && applyNeedsClient2(str8(flags.shell));
+        if (!clientId && (applyWantsClient || redirectFlag)) {
           io.error(JSON.stringify({
-            error: flags.apply === true ? APPLY_NEEDS_CLIENT2 : REDIRECT_NEEDS_CLIENT2,
+            error: applyWantsClient ? APPLY_NEEDS_CLIENT2 : REDIRECT_NEEDS_CLIENT2,
             usage: analyzeUsage
           }));
           return 2;