@wix/himalaya-cli 0.1117.0 → 0.1119.0

package/dist/cli.mjs

@@ -13266,12 +13266,12 @@ function stripBrandFromIdiom(tokens) {
       for (const key2 of BRAND_COLOR_TOKENS) delete colors[key2];
       if (Object.keys(colors).length === 0) delete o.colors;
     }
-    const shadows = o.shadows;
-    const glow = shadows && typeof shadows === "object" && !Array.isArray(shadows) ? shadows[BRAND_GLOW_SHADOW] : void 0;
+    const shadows2 = o.shadows;
+    const glow = shadows2 && typeof shadows2 === "object" && !Array.isArray(shadows2) ? shadows2[BRAND_GLOW_SHADOW] : void 0;
     if (glow && typeof glow === "object" && !Array.isArray(glow) && "color" in glow) {
       delete glow.color;
-      if (Object.keys(glow).length === 0) delete shadows[BRAND_GLOW_SHADOW];
-      if (Object.keys(shadows).length === 0) delete o.shadows;
+      if (Object.keys(glow).length === 0) delete shadows2[BRAND_GLOW_SHADOW];
+      if (Object.keys(shadows2).length === 0) delete o.shadows;
     }
   }
 }
@@ -13363,9 +13363,9 @@ function tokenColorIssues(dir, tokensPathOverride) {
     error(`${tokensPath}: must be an object`);
     return issues;
   }
-  const shadows = raw.shadows;
-  if (shadows !== null && typeof shadows === "object" && !Array.isArray(shadows)) {
-    for (const [name, token] of Object.entries(shadows)) {
+  const shadows2 = raw.shadows;
+  if (shadows2 !== null && typeof shadows2 === "object" && !Array.isArray(shadows2)) {
+    for (const [name, token] of Object.entries(shadows2)) {
       const value = token?.color;
       if (value === void 0) continue;
       if (typeof value === "string" && isCanonicalHex(value)) continue;
@@ -19946,6 +19946,7 @@ function deriveAppMeta(name, m, platforms = {}) {
     drawer: config.navigation?.drawer,
     navKind: config.navigation?.navKind,
     orientation: config.navigation?.orientation,
+    cache: config.cache,
     sidebar: config.navigation?.sidebar,
     navLogicBundle: config.navigation?.navLogicBundle,
     appIconBadgeSources: config.navigation?.appIconBadgeSources,
@@ -36087,6 +36088,108 @@ var init_render_fonts = __esm({
   }
 });
 
+// ../../core/dev-server/src/wix-cache-defaults.generated.ts
+var PLATFORM_DEFAULT_WIX_CACHE_RULES;
+var init_wix_cache_defaults_generated = __esm({
+  "../../core/dev-server/src/wix-cache-defaults.generated.ts"() {
+    PLATFORM_DEFAULT_WIX_CACHE_RULES = [
+      { method: "POST", pathPrefix: "/_api/bookings/v2/services/search", cacheable: true, ttl: 60, swr: 86400, tag: "bookings/services" },
+      { method: "POST", pathPrefix: "/blog/v3/categories/query", cacheable: true, ttl: 60, swr: 86400, tag: "blog" },
+      { method: "GET", pathPrefix: "/blog/v3/posts/", cacheable: true, ttl: 60, swr: 86400, tag: "blog" },
+      { method: "POST", pathPrefix: "/blog/v3/posts/query", cacheable: true, ttl: 60, swr: 86400, tag: "blog" },
+      { method: "GET", pathPrefix: "/bookings/v2/services/", cacheable: true, ttl: 60, swr: 86400, tag: "bookings/services" },
+      { method: "POST", pathPrefix: "/bookings/v2/services/query", cacheable: true, ttl: 60, swr: 86400, tag: "bookings/services" },
+      { method: "GET", pathPrefix: "/donation-campaigns/v2/donation-campaigns/", cacheable: true, ttl: 60, swr: 86400, tag: "donations" },
+      { method: "POST", pathPrefix: "/donation-campaigns/v2/donation-campaigns/query", cacheable: true, ttl: 60, swr: 86400, tag: "donations" },
+      { method: "GET", pathPrefix: "/events/v3/events/", cacheable: true, ttl: 60, swr: 86400, tag: "events" },
+      { method: "GET", pathPrefix: "/events/v3/events/category/", cacheable: true, ttl: 60, swr: 86400, tag: "events" },
+      { method: "POST", pathPrefix: "/events/v3/events/query", cacheable: true, ttl: 60, swr: 86400, tag: "events" },
+      { method: "GET", pathPrefix: "/events/v3/events/slug/", cacheable: true, ttl: 60, swr: 86400, tag: "events" },
+      { method: "GET", pathPrefix: "/faq/v2/categories", cacheable: true, ttl: 60, swr: 86400, tag: "faq" },
+      { method: "GET", pathPrefix: "/faq/v2/categories/", cacheable: true, ttl: 60, swr: 86400, tag: "faq" },
+      { method: "POST", pathPrefix: "/faq/v2/categories/query", cacheable: true, ttl: 60, swr: 86400, tag: "faq" },
+      { method: "GET", pathPrefix: "/faq/v2/question-entries", cacheable: true, ttl: 60, swr: 86400, tag: "faq" },
+      { method: "GET", pathPrefix: "/faq/v2/question-entries/", cacheable: true, ttl: 60, swr: 86400, tag: "faq" },
+      { method: "POST", pathPrefix: "/faq/v2/question-entries/query", cacheable: true, ttl: 60, swr: 86400, tag: "faq" },
+      { method: "POST", pathPrefix: "/online-programs/v3/programs/query", cacheable: true, ttl: 60, swr: 86400, tag: "online-programs" },
+      { method: "GET", pathPrefix: "/portfolio/v1/collections", cacheable: true, ttl: 60, swr: 86400, tag: "portfolio" },
+      { method: "GET", pathPrefix: "/portfolio/v1/collections/", cacheable: true, ttl: 60, swr: 86400, tag: "portfolio" },
+      { method: "POST", pathPrefix: "/portfolio/v1/collections/query", cacheable: true, ttl: 60, swr: 86400, tag: "portfolio" },
+      { method: "GET", pathPrefix: "/portfolio/v1/projects", cacheable: true, ttl: 60, swr: 86400, tag: "portfolio" },
+      { method: "GET", pathPrefix: "/portfolio/v1/projects/", cacheable: true, ttl: 60, swr: 86400, tag: "portfolio" },
+      { method: "POST", pathPrefix: "/portfolio/v1/projects/collections/query", cacheable: true, ttl: 60, swr: 86400, tag: "portfolio" },
+      { method: "POST", pathPrefix: "/portfolio/v1/projects/query", cacheable: true, ttl: 60, swr: 86400, tag: "portfolio" },
+      { method: "GET", pathPrefix: "/pricing-plans/v2/plans/public", cacheable: true, ttl: 60, swr: 86400, tag: "pricing-plans" },
+      { method: "POST", pathPrefix: "/pricing-plans/v2/plans/public/query", cacheable: true, ttl: 60, swr: 86400, tag: "pricing-plans" },
+      { method: "GET", pathPrefix: "/restaurants/menus/v1/items/", cacheable: true, ttl: 60, swr: 86400, tag: "restaurants/menus" },
+      { method: "POST", pathPrefix: "/restaurants/menus/v1/items/query", cacheable: true, ttl: 60, swr: 86400, tag: "restaurants/menus" },
+      { method: "GET", pathPrefix: "/restaurants/menus/v1/menus/", cacheable: true, ttl: 60, swr: 86400, tag: "restaurants/menus" },
+      { method: "POST", pathPrefix: "/restaurants/menus/v1/menus/query", cacheable: true, ttl: 60, swr: 86400, tag: "restaurants/menus" },
+      { method: "POST", pathPrefix: "/restaurants/menus/v1/sections/query", cacheable: true, ttl: 60, swr: 86400, tag: "restaurants/menus" },
+      { method: "GET", pathPrefix: "/reviews/v1/reviews/", cacheable: true, ttl: 60, swr: 86400, tag: "reviews" },
+      { method: "POST", pathPrefix: "/reviews/v1/reviews/query", cacheable: true, ttl: 60, swr: 86400, tag: "reviews" },
+      { method: "GET", pathPrefix: "/stores/v1/products/", cacheable: true, ttl: 60, swr: 86400, tag: "stores/products" },
+      { method: "POST", pathPrefix: "/stores/v1/products/query", cacheable: true, ttl: 60, swr: 86400, tag: "stores/products" },
+      { method: "POST", pathPrefix: "/stores/v3/categories/query", cacheable: true, ttl: 60, swr: 86400, tag: "stores/categories" },
+      { method: "GET", pathPrefix: "/stores/v3/products/", cacheable: true, ttl: 60, swr: 86400, tag: "stores/products" },
+      { method: "POST", pathPrefix: "/stores/v3/products/query", cacheable: true, ttl: 60, swr: 86400, tag: "stores/products" },
+      { method: "POST", pathPrefix: "/stores/v3/products/search", cacheable: true, ttl: 60, swr: 86400, tag: "stores/products" },
+      { method: "DELETE", pathPrefix: "/blog/v3/categories", cacheable: false, ttl: 0, swr: 0, tag: "blog" },
+      { method: "PATCH", pathPrefix: "/blog/v3/categories", cacheable: false, ttl: 0, swr: 0, tag: "blog" },
+      { method: "POST", pathPrefix: "/blog/v3/categories", cacheable: false, ttl: 0, swr: 0, tag: "blog" },
+      { method: "DELETE", pathPrefix: "/blog/v3/posts", cacheable: false, ttl: 0, swr: 0, tag: "blog" },
+      { method: "PATCH", pathPrefix: "/blog/v3/posts", cacheable: false, ttl: 0, swr: 0, tag: "blog" },
+      { method: "POST", pathPrefix: "/blog/v3/posts", cacheable: false, ttl: 0, swr: 0, tag: "blog" },
+      { method: "DELETE", pathPrefix: "/bookings/v1/services", cacheable: false, ttl: 0, swr: 0, tag: "bookings/services" },
+      { method: "POST", pathPrefix: "/bookings/v1/services", cacheable: false, ttl: 0, swr: 0, tag: "bookings/services" },
+      { method: "PUT", pathPrefix: "/bookings/v1/services", cacheable: false, ttl: 0, swr: 0, tag: "bookings/services" },
+      { method: "DELETE", pathPrefix: "/bookings/v2/services", cacheable: false, ttl: 0, swr: 0, tag: "bookings/services" },
+      { method: "PATCH", pathPrefix: "/bookings/v2/services", cacheable: false, ttl: 0, swr: 0, tag: "bookings/services" },
+      { method: "POST", pathPrefix: "/bookings/v2/services", cacheable: false, ttl: 0, swr: 0, tag: "bookings/services" },
+      { method: "PATCH", pathPrefix: "/donation-campaigns/v2/donation-campaigns", cacheable: false, ttl: 0, swr: 0, tag: "donations" },
+      { method: "POST", pathPrefix: "/donation-campaigns/v2/donation-campaigns", cacheable: false, ttl: 0, swr: 0, tag: "donations" },
+      { method: "PATCH", pathPrefix: "/events/v1/events", cacheable: false, ttl: 0, swr: 0, tag: "events" },
+      { method: "POST", pathPrefix: "/events/v1/events", cacheable: false, ttl: 0, swr: 0, tag: "events" },
+      { method: "POST", pathPrefix: "/events/v1/events/orders", cacheable: false, ttl: 0, swr: 0, tag: "events" },
+      { method: "DELETE", pathPrefix: "/events/v3/events", cacheable: false, ttl: 0, swr: 0, tag: "events" },
+      { method: "POST", pathPrefix: "/events/v3/events", cacheable: false, ttl: 0, swr: 0, tag: "events" },
+      { method: "POST", pathPrefix: "/events/v3/events/count-by-status", cacheable: false, ttl: 0, swr: 0, tag: "events" },
+      { method: "DELETE", pathPrefix: "/faq/v2/categories", cacheable: false, ttl: 0, swr: 0, tag: "faq" },
+      { method: "PATCH", pathPrefix: "/faq/v2/categories", cacheable: false, ttl: 0, swr: 0, tag: "faq" },
+      { method: "POST", pathPrefix: "/faq/v2/categories", cacheable: false, ttl: 0, swr: 0, tag: "faq" },
+      { method: "DELETE", pathPrefix: "/faq/v2/question-entries", cacheable: false, ttl: 0, swr: 0, tag: "faq" },
+      { method: "PATCH", pathPrefix: "/faq/v2/question-entries", cacheable: false, ttl: 0, swr: 0, tag: "faq" },
+      { method: "POST", pathPrefix: "/faq/v2/question-entries", cacheable: false, ttl: 0, swr: 0, tag: "faq" },
+      { method: "DELETE", pathPrefix: "/online-programs/v3/programs", cacheable: false, ttl: 0, swr: 0, tag: "online-programs" },
+      { method: "PATCH", pathPrefix: "/online-programs/v3/programs", cacheable: false, ttl: 0, swr: 0, tag: "online-programs" },
+      { method: "POST", pathPrefix: "/online-programs/v3/programs", cacheable: false, ttl: 0, swr: 0, tag: "online-programs" },
+      { method: "DELETE", pathPrefix: "/portfolio/v1/collections", cacheable: false, ttl: 0, swr: 0, tag: "portfolio" },
+      { method: "POST", pathPrefix: "/portfolio/v1/collections", cacheable: false, ttl: 0, swr: 0, tag: "portfolio" },
+      { method: "DELETE", pathPrefix: "/portfolio/v1/projects", cacheable: false, ttl: 0, swr: 0, tag: "portfolio" },
+      { method: "PATCH", pathPrefix: "/portfolio/v1/projects", cacheable: false, ttl: 0, swr: 0, tag: "portfolio" },
+      { method: "DELETE", pathPrefix: "/pricing-plans/v2/plans", cacheable: false, ttl: 0, swr: 0, tag: "pricing-plans" },
+      { method: "PATCH", pathPrefix: "/pricing-plans/v2/plans", cacheable: false, ttl: 0, swr: 0, tag: "pricing-plans" },
+      { method: "POST", pathPrefix: "/pricing-plans/v2/plans", cacheable: false, ttl: 0, swr: 0, tag: "pricing-plans" },
+      { method: "DELETE", pathPrefix: "/restaurants/menus/v1/sections", cacheable: false, ttl: 0, swr: 0, tag: "restaurants/menus" },
+      { method: "PATCH", pathPrefix: "/restaurants/menus/v1/sections", cacheable: false, ttl: 0, swr: 0, tag: "restaurants/menus" },
+      { method: "POST", pathPrefix: "/restaurants/menus/v1/sections", cacheable: false, ttl: 0, swr: 0, tag: "restaurants/menus" },
+      { method: "DELETE", pathPrefix: "/reviews/v1/reviews", cacheable: false, ttl: 0, swr: 0, tag: "reviews" },
+      { method: "PATCH", pathPrefix: "/reviews/v1/reviews", cacheable: false, ttl: 0, swr: 0, tag: "reviews" },
+      { method: "POST", pathPrefix: "/reviews/v1/reviews", cacheable: false, ttl: 0, swr: 0, tag: "reviews" },
+      { method: "POST", pathPrefix: "/reviews/v1/reviews/count", cacheable: false, ttl: 0, swr: 0, tag: "reviews" },
+      { method: "DELETE", pathPrefix: "/stores/v1/products", cacheable: false, ttl: 0, swr: 0, tag: "stores/products" },
+      { method: "PATCH", pathPrefix: "/stores/v1/products", cacheable: false, ttl: 0, swr: 0, tag: "stores/products" },
+      { method: "POST", pathPrefix: "/stores/v1/products", cacheable: false, ttl: 0, swr: 0, tag: "stores/products" },
+      { method: "DELETE", pathPrefix: "/stores/v3/categories", cacheable: false, ttl: 0, swr: 0, tag: "stores/categories" },
+      { method: "PATCH", pathPrefix: "/stores/v3/categories", cacheable: false, ttl: 0, swr: 0, tag: "stores/categories" },
+      { method: "POST", pathPrefix: "/stores/v3/categories", cacheable: false, ttl: 0, swr: 0, tag: "stores/categories" },
+      { method: "DELETE", pathPrefix: "/stores/v3/products", cacheable: false, ttl: 0, swr: 0, tag: "stores/products" },
+      { method: "PATCH", pathPrefix: "/stores/v3/products", cacheable: false, ttl: 0, swr: 0, tag: "stores/products" },
+      { method: "POST", pathPrefix: "/stores/v3/products", cacheable: false, ttl: 0, swr: 0, tag: "stores/products" }
+    ];
+  }
+});
+
 // ../../core/dev-server/src/wix-cache-policy.ts
 function clampRule(rule, denyPrefixes, maxTTL) {
   const denied2 = denyPrefixes.some((p) => rule.pathPrefix.startsWith(p));
@@ -36096,15 +36199,61 @@ function clampRule(rule, denyPrefixes, maxTTL) {
     ttl: Math.min(rule.ttl, maxTTL)
   };
 }
-function resolveWixCachePolicy(appName2) {
-  const appRules = CACHE_OVERRIDES[appName2] ?? [];
-  const rules = appRules.map((r) => clampRule(r, PLATFORM_DENY_PREFIXES, PLATFORM_MAX_TTL));
-  return { rules, defaultCacheable: false };
+function shadows(own3, dflt) {
+  const methodCovers = own3.method === null || own3.method.toUpperCase() === (dflt.method ?? "").toUpperCase();
+  return methodCovers && dflt.pathPrefix.startsWith(own3.pathPrefix);
 }
-var PLATFORM_DENY_PREFIXES, PLATFORM_MAX_TTL, CACHE_OVERRIDES;
+function resolveWixCachePolicy(appName2, declared) {
+  const own3 = (declared?.rules ?? []).map((r) => ({
+    method: r.method ?? null,
+    pathPrefix: r.pathPrefix,
+    cacheable: r.cacheable,
+    ttl: r.ttl,
+    swr: r.swr ?? 0,
+    tag: r.tag ?? null
+  }));
+  const legacy = CACHE_OVERRIDES[appName2] ?? [];
+  const appLevel = [...own3, ...legacy];
+  const defaults = declared?.platformDefaults === false ? [] : PLATFORM_DEFAULT_WIX_CACHE_RULES.filter((d) => !appLevel.some((a) => shadows(a, d)));
+  const denies = [
+    ...[...PLATFORM_DENY_PREFIXES, ...PERSONAL_DATA_PREFIXES].map((pathPrefix) => ({ method: null, pathPrefix, cacheable: false, ttl: 0, swr: 0, tag: null })),
+    ...PERSONAL_DATA_READS.map(([method, pathPrefix]) => ({ method, pathPrefix, cacheable: false, ttl: 0, swr: 0, tag: null }))
+  ];
+  const rules = [...appLevel, ...defaults, ...denies].map((r) => clampRule(r, PLATFORM_DENY_PREFIXES, PLATFORM_MAX_TTL));
+  return { rules, defaultCacheable: declared?.defaultCacheable ?? false };
+}
+var PLATFORM_DENY_PREFIXES, PERSONAL_DATA_PREFIXES, PERSONAL_DATA_READS, PLATFORM_MAX_TTL, CACHE_OVERRIDES;
 var init_wix_cache_policy = __esm({
   "../../core/dev-server/src/wix-cache-policy.ts"() {
+    init_wix_cache_defaults_generated();
     PLATFORM_DENY_PREFIXES = ["/stores/v2/orders", "/stores/v3/orders"];
+    PERSONAL_DATA_PREFIXES = [
+      "/ecom/v1/carts",
+      "/ecom/v1/checkouts",
+      "/ecom/v1/orders",
+      "/members/",
+      "/contacts/",
+      "/invoices/",
+      "/bookings/v1/bookings",
+      "/bookings/v2/bookings",
+      "/events/v1/orders",
+      "/events/v1/tickets",
+      "/events/v2/rsvps",
+      "/gift-cards/",
+      "/loyalty/",
+      "/inbox/",
+      "/pricing-plans/v2/orders",
+      // Every answer below depends on who is asking, like the ones above — the generator's
+      // NEVER_CACHED set (codegen/wix/scripts/gen-cache-defaults.ts), which the platform-defaults
+      // fixture pins. Denied HERE so an app opting into `defaultCacheable` cannot cache them either
+      // (tests/wix-cache-policy.test.ts walks that fixture against the fallback).
+      "/social-groups-proxy/",
+      "/stores/v2/coupons",
+      "/analytics/",
+      "/site-list/",
+      "/blog/v3/draft-posts"
+    ];
+    PERSONAL_DATA_READS = [["GET", "/events/v1/events/"]];
     PLATFORM_MAX_TTL = 3600;
     CACHE_OVERRIDES = {
       // The reference fixture exercises the cache-policy contract (products cacheable).
@@ -36255,7 +36404,7 @@ function deriveNavigationConfig(app, bundleCtx) {
     scheme: app.urlScheme,
     deepLinkPatterns: app.deepLinkPatterns ?? ov?.deepLinkPatterns ?? [],
     linkableScreens,
-    wixCachePolicy: resolveWixCachePolicy(appName2),
+    wixCachePolicy: resolveWixCachePolicy(appName2, app.cache),
     // Fail-open baseline; tightened OTA via the admin app-config override. The
     // DESTINATION(s) are derived generically from the app's config (no app-name
     // special-casing) so the app chooses where telemetry goes via OTA:
@@ -49076,6 +49225,7 @@ function readInitWatch(dir) {
     const r = JSON.parse(readFileSync52(file, "utf8"));
     if (r.v !== 1 || typeof r.pid !== "number" || !Number.isInteger(r.pid) || r.pid < 1) return null;
     if (typeof r.url !== "string" || !/^http:\/\/127\.0\.0\.1:\d+\//.test(r.url) || typeof r.board !== "string" || typeof r.log !== "string" || typeof r.startedAt !== "string") return null;
+    if (r.root !== runRootId(dir)) return null;
     return r;
   } catch {
     return null;
@@ -49173,7 +49323,7 @@ async function startWatchAtInit(dir, opts) {
     });
     child.unref();
     if (!child.pid) return { skipped: "the live preview did not start (no process) \u2014 start it yourself: `himi run --watch --content <dir> &`" };
-    const record2 = { v: 1, pid: child.pid, url, board, log: WATCH_LOG, startedAt: now.toISOString() };
+    const record2 = { v: 1, pid: child.pid, root: runRootId(dir), url, board, log: WATCH_LOG, startedAt: now.toISOString() };
     if (realDirIn(dir, ".himi")) writeFileAtomic(join46(dir, INIT_WATCH_FILE), `${JSON.stringify(record2, null, 2)}
 `);
     return { started: true, pid: child.pid, url, board, log: WATCH_LOG };
@@ -49233,6 +49383,7 @@ var init_milestones = __esm({
   "src/milestones.ts"() {
     init_app_source();
     init_preview();
+    init_run_identity();
     init_progress();
     init_shell_quote();
     init_studio_reel();
@@ -53884,6 +54035,15 @@ function symlinkComponent(base, abs) {
   }
   return void 0;
 }
+function workspaceRefusal(root, target) {
+  const r = resolve45(root);
+  const t = resolve45(r, target);
+  if (!existsSync54(r)) return `the workspace folder ${r} does not exist`;
+  if (!within(r, t) || !within(realpathSync7(r), realish(t))) return `"${target}" is outside the workspace folder ${r}`;
+  const link = symlinkComponent(r, t);
+  if (link) return `"${link}" is a symlink \u2014 paths must stay in real folders inside the workspace`;
+  return null;
+}
 async function confinedAppDir(args, deps) {
   const root = resolve45(await deps.defaultDir());
   const dir = typeof args.dir === "string" && args.dir ? resolve45(root, args.dir) : root;
@@ -54154,6 +54314,15 @@ function guarded(h) {
   return async (args, deps) => {
     const bad2 = flagShapedInputs(args);
     if (bad2.length) return text6(`refused: ${bad2.join(", ")} may not start with "-" (it would be read as a himi flag)`, true);
+    if (deps.workspaceBoundary) {
+      const base = await deps.defaultDir();
+      for (const k of PATH_ARGS) {
+        const v = args[k];
+        if (typeof v !== "string" || !v) continue;
+        const why = workspaceRefusal(deps.workspaceBoundary, resolve46(base, v));
+        if (why) return text6(`refused: ${k} ${why}`, true);
+      }
+    }
     return h(args, deps);
   };
 }
@@ -54406,7 +54575,7 @@ ${log}` : ""}`, true);
     }
   ];
 }
-var MAX_TEXT2, clip, text6, json3, opt, sw, DIR2, LEARN, CHECK, LOCAL_WRITE, PUBLISH, PREVIEW_HINT, LOGIN_HINT;
+var MAX_TEXT2, clip, text6, json3, opt, sw, DIR2, LEARN, CHECK, LOCAL_WRITE, PUBLISH, PREVIEW_HINT, LOGIN_HINT, PATH_ARGS;
 var init_tools = __esm({
   "src/mcp/tools.ts"() {
     init_file_tools();
@@ -54424,6 +54593,7 @@ var init_tools = __esm({
     PUBLISH = { readOnlyHint: false, destructiveHint: false, idempotentHint: false, openWorldHint: true };
     PREVIEW_HINT = "The preview is already running: open `url` in your built-in browser \u2014 Claude Code desktop's browser pane, Cursor's Browser tool, the Browser in Codex inside the ChatGPT desktop app, VS Code's integrated browser. Do not also start the `himi-preview` launch configuration: it serves the same port, and is the way to start a preview only when none is running. A terminal-only agent should show the owner `himi_render` PNGs instead. `board` (when present) is the build board on the same origin.";
     LOGIN_HINT = "Not signed in to the himi serve plane. Call himi_login: it opens a browser window where the user signs in to Wix (this server never sees the credential). A user with a terminal can run `himi login --browser` instead. Then retry.";
+    PATH_ARGS = ["dir", "parentDir", "file"];
   }
 });
 
@@ -54564,7 +54734,8 @@ async function startMcpServer(opts) {
       stop: (dir) => stopPreview(dir, previewDeps)
     },
     readFile: (p) => readFileSync60(p),
-    login: createLoginSession({ ...defaultLoginDeps, selfCommand: previewDeps.selfCommand, ...opts.login })
+    login: createLoginSession({ ...defaultLoginDeps, selfCommand: previewDeps.selfCommand, ...opts.login }),
+    ...opts.workspace ? { workspaceBoundary: opts.workspace } : {}
   };
   const closed = new Promise((resolve54) => {
     stdin.once("end", resolve54);
@@ -57253,21 +57424,21 @@ var init_preview_assets_generated = __esm({
   "../../packages/serve/src/preview-assets.generated.ts"() {
     init_preview_assets_format();
     PREVIEW_ASSET_MANIFEST = [
-      { key: "assets/index-DRJmxLKY.js", contentType: "application/javascript; charset=utf-8", offset: 8, length: 1102618, sha256: "9976a79a9d6842770adfdc5605a486bef46bfe8a3570538b6f585fc1ef100f82" },
-      { key: "fonts/Roboto-LICENSE.txt", contentType: "application/octet-stream", offset: 1102626, length: 4610, sha256: "994062dd7af4186a739de55dd9e151c63b6301f8e2cbafc608d35c2e87da0cd2" },
-      { key: "fonts/Roboto-Variable.ttf", contentType: "font/ttf", offset: 1107236, length: 488584, sha256: "d7598e12c5dbef095ff8272cfc55da0250bd07fbdecbac8a530b9b277872a134" },
-      { key: "fonts/WixMadeforDisplay-Bold.ttf", contentType: "font/ttf", offset: 1595820, length: 90924, sha256: "ec4c7d63772d980d6e147b2df6215fd2737e4b04cebe0cf7e11dc695fb63cdcf" },
-      { key: "fonts/WixMadeforDisplay-ExtraBold.ttf", contentType: "font/ttf", offset: 1686744, length: 90984, sha256: "bf4c16a2774edd38a921edf3099469866cd74c094fd596f3fa4e81f54a04dfaa" },
-      { key: "fonts/WixMadeforDisplay-Medium.ttf", contentType: "font/ttf", offset: 1777728, length: 90980, sha256: "368faca44fb9f7207e4af784e94750b1ee59c1098b8689e0f4a918926f244fb5" },
-      { key: "fonts/WixMadeforDisplay-Regular.ttf", contentType: "font/ttf", offset: 1868708, length: 90872, sha256: "97ed8f1a6772abe26e3d8af5cecfc4b02faa94497d585b0398b5053b739a70c1" },
-      { key: "fonts/WixMadeforDisplay-SemiBold.ttf", contentType: "font/ttf", offset: 1959580, length: 90980, sha256: "642feab8a48ddf6c7a89d7c2a7c0edfa0e6e773f671287e460e222703563191e" },
-      { key: "fonts/WixMadeforText-Bold.ttf", contentType: "font/ttf", offset: 2050560, length: 108636, sha256: "37c179b4fefb63ea9637322b84583a2df53aa226c150294eea1675c14b1b8e29" },
-      { key: "fonts/WixMadeforText-ExtraBold.ttf", contentType: "font/ttf", offset: 2159196, length: 109084, sha256: "62e2fe4718129f36ecdb0ae4de385bd6b81ecc876146447167c6c140fad699a9" },
-      { key: "fonts/WixMadeforText-Medium.ttf", contentType: "font/ttf", offset: 2268280, length: 109048, sha256: "4ecf270136af928612c76fe4ebade91d8156975e5ea4c0cf9225501dd1788e02" },
-      { key: "fonts/WixMadeforText-Regular.ttf", contentType: "font/ttf", offset: 2377328, length: 107700, sha256: "dee56f09fd3efc127c1ea95557edc74110c1460a46287da36e0af25efd341ef5" },
-      { key: "fonts/WixMadeforText-SemiBold.ttf", contentType: "font/ttf", offset: 2485028, length: 88108, sha256: "dced97a77624bc5f8b1ae65850360908297f4588e09feb6f22792d29dc7e765b" },
-      { key: "index.html", contentType: "text/html; charset=utf-8", offset: 2573136, length: 4947, sha256: "1217e0b9a45c53ee3c35fd8dfe751a50b2276661a3e699efde98c17152c1b960" },
-      { key: "t5-frame.html", contentType: "text/html; charset=utf-8", offset: 2578083, length: 17209, sha256: "dffc9718e2faa63ae2cc919e0a842f585ed565aaaa7c53778e90379442c731b6" }
+      { key: "assets/index-nG7b3MPu.js", contentType: "application/javascript; charset=utf-8", offset: 8, length: 1104209, sha256: "88839c5eb15058f706e50664752a75646d690de5148f8b504eb82c0f87a70a15" },
+      { key: "fonts/Roboto-LICENSE.txt", contentType: "application/octet-stream", offset: 1104217, length: 4610, sha256: "994062dd7af4186a739de55dd9e151c63b6301f8e2cbafc608d35c2e87da0cd2" },
+      { key: "fonts/Roboto-Variable.ttf", contentType: "font/ttf", offset: 1108827, length: 488584, sha256: "d7598e12c5dbef095ff8272cfc55da0250bd07fbdecbac8a530b9b277872a134" },
+      { key: "fonts/WixMadeforDisplay-Bold.ttf", contentType: "font/ttf", offset: 1597411, length: 90924, sha256: "ec4c7d63772d980d6e147b2df6215fd2737e4b04cebe0cf7e11dc695fb63cdcf" },
+      { key: "fonts/WixMadeforDisplay-ExtraBold.ttf", contentType: "font/ttf", offset: 1688335, length: 90984, sha256: "bf4c16a2774edd38a921edf3099469866cd74c094fd596f3fa4e81f54a04dfaa" },
+      { key: "fonts/WixMadeforDisplay-Medium.ttf", contentType: "font/ttf", offset: 1779319, length: 90980, sha256: "368faca44fb9f7207e4af784e94750b1ee59c1098b8689e0f4a918926f244fb5" },
+      { key: "fonts/WixMadeforDisplay-Regular.ttf", contentType: "font/ttf", offset: 1870299, length: 90872, sha256: "97ed8f1a6772abe26e3d8af5cecfc4b02faa94497d585b0398b5053b739a70c1" },
+      { key: "fonts/WixMadeforDisplay-SemiBold.ttf", contentType: "font/ttf", offset: 1961171, length: 90980, sha256: "642feab8a48ddf6c7a89d7c2a7c0edfa0e6e773f671287e460e222703563191e" },
+      { key: "fonts/WixMadeforText-Bold.ttf", contentType: "font/ttf", offset: 2052151, length: 108636, sha256: "37c179b4fefb63ea9637322b84583a2df53aa226c150294eea1675c14b1b8e29" },
+      { key: "fonts/WixMadeforText-ExtraBold.ttf", contentType: "font/ttf", offset: 2160787, length: 109084, sha256: "62e2fe4718129f36ecdb0ae4de385bd6b81ecc876146447167c6c140fad699a9" },
+      { key: "fonts/WixMadeforText-Medium.ttf", contentType: "font/ttf", offset: 2269871, length: 109048, sha256: "4ecf270136af928612c76fe4ebade91d8156975e5ea4c0cf9225501dd1788e02" },
+      { key: "fonts/WixMadeforText-Regular.ttf", contentType: "font/ttf", offset: 2378919, length: 107700, sha256: "dee56f09fd3efc127c1ea95557edc74110c1460a46287da36e0af25efd341ef5" },
+      { key: "fonts/WixMadeforText-SemiBold.ttf", contentType: "font/ttf", offset: 2486619, length: 88108, sha256: "dced97a77624bc5f8b1ae65850360908297f4588e09feb6f22792d29dc7e765b" },
+      { key: "index.html", contentType: "text/html; charset=utf-8", offset: 2574727, length: 4947, sha256: "5c0a3e1b1d5bda7b6bc8cc2a025321bf6d0aa74d1f14b073861f188fd7b13a8b" },
+      { key: "t5-frame.html", contentType: "text/html; charset=utf-8", offset: 2579674, length: 17209, sha256: "dffc9718e2faa63ae2cc919e0a842f585ed565aaaa7c53778e90379442c731b6" }
     ];
   }
 });
@@ -57516,6 +57687,7 @@ __export(run_watch_exports, {
   isEmptyDiff: () => isEmptyDiff,
   rebuildBlocker: () => rebuildBlocker,
   reloadEvents: () => reloadEvents,
+  removeInitWatchRecord: () => removeInitWatchRecord,
   removeRunRecord: () => removeRunRecord,
   serialize: () => serialize,
   watchContent: () => watchContent,
@@ -57685,6 +57857,24 @@ function removeRunRecord(dir, owner) {
   }
   rmSync15(join59(root, "run.json"), { force: true });
 }
+function removeInitWatchRecord(dir, owner) {
+  const root = join59(dir, ".himi");
+  try {
+    if (!lstatSync13(root).isDirectory()) return;
+  } catch {
+    return;
+  }
+  const bytes2 = readConfined(root, "watch.json");
+  if (!bytes2) return;
+  let pid;
+  try {
+    pid = JSON.parse(bytes2.toString("utf8")).pid;
+  } catch {
+    return;
+  }
+  if (pid !== owner) return;
+  rmSync15(join59(root, "watch.json"), { force: true });
+}
 function boardFile(dir, pathname) {
   if (pathname === RUN_IDENTITY_PATH) {
     return new Response(JSON.stringify(runIdentity(dir)), { status: 200, headers: { "content-type": "application/json", "cache-control": "no-store" } });
@@ -59412,7 +59602,7 @@ var init_push_send = __esm({
 });
 
 // ../../core/serve-control/src/push-send-service.ts
-var PUSH_SEND_ERROR_CODES;
+var PUSH_SEND_ERROR_CODES, PushSendError;
 var init_push_send_service = __esm({
   "../../core/serve-control/src/push-send-service.ts"() {
     PUSH_SEND_ERROR_CODES = [
@@ -59454,6 +59644,160 @@ var init_push_send_service = __esm({
       "ping_rate_limited",
       "send_outcome_unknown"
     ];
+    PushSendError = class extends Error {
+      constructor(code, status, retryAfterSec) {
+        super(code);
+        this.code = code;
+        this.status = status;
+        this.retryAfterSec = retryAfterSec;
+      }
+    };
+  }
+});
+
+// ../../core/serve-control/src/site-member.ts
+async function assertOwnerSiteToken(input, fetchImpl = input.fetch ?? fetch) {
+  const info2 = await upstreamJson(fetchImpl, {
+    path: "/oauth2/token-info",
+    body: { token: input.siteToken },
+    unavailable: "site_token_unverifiable",
+    // An expired, revoked or malformed token is answered with a 4xx: the caller's to fix, not an outage.
+    rejected: { code: "site_token_invalid", when: (status) => status >= 400 && status < 500 }
+  });
+  const owned = info2.active === true && info2.subjectType === "USER" && info2.siteId === input.site && info2.accountId === input.ownerAccountId;
+  if (!owned) throw new PushSendError("site_token_invalid", 403);
+}
+async function upstreamJson(fetchImpl, call) {
+  let response;
+  try {
+    response = await fetchImpl(`${WIXAPIS}${call.path}`, {
+      method: "POST",
+      redirect: "error",
+      signal: AbortSignal.timeout(TIMEOUT_MS2),
+      headers: {
+        "content-type": "application/json",
+        accept: "application/json",
+        ...call.authorization ? { Authorization: call.authorization } : {},
+        ...call.siteId ? { "wix-site-id": call.siteId } : {}
+      },
+      body: JSON.stringify(call.body)
+    });
+  } catch {
+    throw new PushSendError(call.unavailable, 503);
+  }
+  if (call.rejected?.when(response.status)) throw new PushSendError(call.rejected.code, 403);
+  if (!response.ok) throw new PushSendError(call.unavailable, 503);
+  try {
+    return await response.json();
+  } catch {
+    throw new PushSendError(call.unavailable, 503);
+  }
+}
+var WIXAPIS, TIMEOUT_MS2;
+var init_site_member = __esm({
+  "../../core/serve-control/src/site-member.ts"() {
+    init_push_send_service();
+    WIXAPIS = "https://www.wixapis.com";
+    TIMEOUT_MS2 = 1e4;
+  }
+});
+
+// src/notify-ping-all.ts
+import { createHash as createHash31 } from "node:crypto";
+async function listApprovedMembers(input) {
+  const first = await scanMembers(input);
+  const second = await scanMembers(input);
+  if (JSON.stringify(first.fingerprint) !== JSON.stringify(second.fingerprint)) throw new Error("member_roster_unstable");
+  return second.recipients;
+}
+async function scanMembers(input) {
+  const recipients = [];
+  const fingerprint = [];
+  const seenIds = /* @__PURE__ */ new Set();
+  const seenEmails = /* @__PURE__ */ new Set();
+  const fetchImpl = input.fetchImpl ?? fetch;
+  for (let offset = 0; ; ) {
+    let response;
+    try {
+      response = await fetchImpl(`${WIXAPIS2}/members/v1/members/query`, {
+        method: "POST",
+        headers: { Authorization: input.siteToken, "wix-site-id": input.site, "content-type": "application/json", accept: "application/json" },
+        redirect: "error",
+        signal: AbortSignal.timeout(1e4),
+        body: JSON.stringify({ query: { paging: { limit: PAGE_SIZE, offset } }, fieldsets: ["FULL"] })
+      });
+    } catch {
+      throw new Error("member_lookup_unavailable");
+    }
+    if (!response.ok) throw new Error("member_lookup_unavailable");
+    let raw;
+    try {
+      raw = await response.json();
+    } catch {
+      throw new Error("member_lookup_unavailable");
+    }
+    if (raw === null || typeof raw !== "object" || Array.isArray(raw)) throw new Error("member_lookup_unavailable");
+    const result = raw;
+    if (!Array.isArray(result.members)) throw new Error("member_lookup_unavailable");
+    if (result.members.length === 0) return { recipients, fingerprint };
+    if (result.members.length > PAGE_SIZE) throw new Error("member_roster_unstable");
+    for (const member of result.members) {
+      if (member === null || typeof member !== "object" || Array.isArray(member)) throw new Error("member_lookup_unavailable");
+      if (typeof member.id !== "string" || !member.id || seenIds.has(member.id)) throw new Error("member_roster_unstable");
+      seenIds.add(member.id);
+      fingerprint.push(JSON.stringify([member.id, member.loginEmail, member.contactId, member.status]));
+      if (member.status !== "APPROVED") continue;
+      if (typeof member.loginEmail !== "string" || !member.loginEmail || typeof member.contactId !== "string" || !member.contactId) throw new Error("member_roster_incomplete");
+      const email = member.loginEmail.toLowerCase();
+      if (seenEmails.has(email)) throw new Error("member_ambiguous");
+      seenEmails.add(email);
+      recipients.push({ id: member.id, email: member.loginEmail });
+    }
+    offset += result.members.length;
+  }
+}
+function campaignRequestId(campaignId, memberId) {
+  const bytes2 = createHash31("sha256").update(JSON.stringify(["himi-push-campaign", campaignId, memberId])).digest().subarray(0, 16);
+  bytes2[6] = bytes2[6] & 15 | 80;
+  bytes2[8] = bytes2[8] & 63 | 128;
+  const hex2 = bytes2.toString("hex");
+  return `${hex2.slice(0, 8)}-${hex2.slice(8, 12)}-${hex2.slice(12, 16)}-${hex2.slice(16, 20)}-${hex2.slice(20)}`;
+}
+async function sendCampaign(input) {
+  let accepted = 0;
+  let deduplicated = 0;
+  for (const [index, recipient] of input.recipients.entries()) {
+    if (index > 0) await input.wait(6100);
+    const requestId2 = campaignRequestId(input.campaignId, recipient.id);
+    let outcome = await input.send(recipient, requestId2);
+    let retries = 0;
+    while (outcome.state === "rate_limited" && outcome.retryAfterSec > 0 && retries < 3) {
+      retries += 1;
+      await input.wait(outcome.retryAfterSec * 1e3);
+      outcome = await input.send(recipient, requestId2);
+    }
+    if (outcome.state !== "accepted") {
+      throw new CampaignFailure(outcome.state === "failed" ? outcome.code : "rate_limited", index, recipient.email);
+    }
+    if (outcome.deduplicated) deduplicated += 1;
+    else accepted += 1;
+    input.onProgress?.(index + 1);
+  }
+  return { accepted, deduplicated };
+}
+var CampaignFailure, PAGE_SIZE, WIXAPIS2;
+var init_notify_ping_all = __esm({
+  "src/notify-ping-all.ts"() {
+    CampaignFailure = class extends Error {
+      constructor(code, completed, memberEmail) {
+        super(code);
+        this.code = code;
+        this.completed = completed;
+        this.memberEmail = memberEmail;
+      }
+    };
+    PAGE_SIZE = 100;
+    WIXAPIS2 = "https://www.wixapis.com";
   }
 });
 
@@ -59471,8 +59815,11 @@ function refuse5(io, error, hint, exit = 2, extra = {}) {
 async function runNotifyPing(flags, io, deps = {}) {
   const flagError = flagRefusal(flags);
   if (flagError) return refuse5(io, flagError);
+  const allMembers = flags["all-members"] === true;
+  if (allMembers && text7(flags["member-email"])) return refuse5(io, "recipient_conflict", "Choose --all-members or --member-email.");
+  if (allMembers && flags["dry-run"] !== true && flags.yes !== true) return refuse5(io, "confirmation_required", "Preview with --dry-run, then add --yes to send to every approved member.");
   const input = mergePushInputs(pushInputsFromContent(resolve50(text7(flags.content) ?? process.cwd())), flags);
-  const missing = [...input.app ? [] : ["app"], ...input.site ? [] : ["site"], ...REQUIRED_FLAGS.filter((f) => !text7(flags[f]))];
+  const missing = [...input.app ? [] : ["app"], ...input.site ? [] : ["site"], ...REQUIRED_FLAGS.filter((f) => !(allMembers && f === "member-email") && !text7(flags[f]))];
   if (missing.length) return refuse5(io, "needs_input", "Name the app and site (or --content), the member's login email, a title and a link.", 2, { missing });
   const requestId2 = text7(flags["request-id"]) ?? (deps.newRequestId ?? randomUUID5)();
   if (!UUID_RE.test(requestId2)) return refuse5(io, "invalid_request_id", "Reuse the requestId a previous send printed.");
@@ -59487,6 +59834,7 @@ async function runNotifyPing(flags, io, deps = {}) {
   } catch {
     return refuse5(io, "wix_site_token_required", "Run wix login as the site owner; the site token reads this site's members.", 1);
   }
+  if (allMembers) return runAllMembers({ input: { app: ownership.slug, site: input.site }, siteToken: siteToken2, session, requestId: requestId2, flags, io, deps });
   const body = {
     app: ownership.slug,
     site: input.site,
@@ -59500,6 +59848,88 @@ async function runNotifyPing(flags, io, deps = {}) {
   const http = await pushSendRequest({ target: session.target, wixToken: session.wixToken, siteToken: siteToken2, body, previewTag: session.previewTag, fetchImpl: deps.fetchImpl });
   return report2(http, body, flags, io);
 }
+async function runAllMembers(args) {
+  const { input, siteToken: siteToken2, session, requestId: requestId2, flags, io, deps } = args;
+  const ownerAccountId = decodeControlTokenClaims(session.controlToken)?.sub;
+  if (!ownerAccountId) return refuse5(io, "owner_login_required");
+  const readiness = await pushSetupRequest({
+    target: session.target,
+    wixToken: session.wixToken,
+    operation: "status",
+    query: input,
+    previewTag: session.previewTag,
+    fetchImpl: deps.fetchImpl
+  });
+  if (!readiness.ok) {
+    const reported = String(readiness.body?.error ?? "");
+    const code = KNOWN_CODES.has(reported) ? reported : "push_setup_unavailable";
+    return refuse5(io, code, HINTS[code], 1);
+  }
+  if (readiness.body?.app !== input.app || readiness.body?.site !== input.site || readiness.body?.state !== "ready") {
+    return refuse5(io, "push_not_ready", HINTS.push_not_ready, 1);
+  }
+  let recipients;
+  try {
+    await assertOwnerSiteToken({
+      site: input.site,
+      siteToken: siteToken2,
+      ownerAccountId,
+      fetch: deps.fetchImpl
+    });
+    recipients = await listApprovedMembers({ site: input.site, siteToken: siteToken2, fetchImpl: deps.fetchImpl });
+  } catch (error) {
+    const code = error instanceof PushSendError ? error.code : error instanceof Error && ROSTER_CODES.has(error.message) ? error.message : "member_lookup_unavailable";
+    return refuse5(io, code, void 0, 1);
+  }
+  const base = { app: input.app, site: input.site, title: text7(flags.title), ...text7(flags.body) ? { body: text7(flags.body) } : {}, link: text7(flags.link) };
+  const send2 = (recipient, memberRequestId, dryRun = false) => pushSendRequest({
+    target: session.target,
+    wixToken: session.wixToken,
+    siteToken: siteToken2,
+    previewTag: session.previewTag,
+    fetchImpl: deps.fetchImpl,
+    body: { ...base, memberEmail: recipient.email, requestId: memberRequestId, ...dryRun ? { dryRun: true } : {} }
+  });
+  if (flags["dry-run"] === true) {
+    if (recipients.length) {
+      const result = await send2(recipients[0], requestId2, true);
+      const code = refusalCode(result);
+      if (code) return refuse5(io, code, HINTS[code], 1);
+    }
+    io.log(JSON.stringify({ ok: true, state: "dry_run", campaignId: requestId2, recipients: recipients.length, sent: false }));
+    return 0;
+  }
+  io.log(JSON.stringify({ ok: true, state: "started", campaignId: requestId2, recipients: recipients.length }));
+  try {
+    const result = await sendCampaign({
+      recipients,
+      campaignId: requestId2,
+      wait: deps.wait ?? ((ms) => new Promise((resolve54) => setTimeout(resolve54, ms))),
+      onProgress: (completed) => {
+        if (completed % 10 === 0 || completed === recipients.length) {
+          io.log(JSON.stringify({ ok: true, state: "progress", campaignId: requestId2, completed, recipients: recipients.length }));
+        }
+      },
+      send: async (recipient, memberRequestId) => {
+        const response = await send2(recipient, memberRequestId);
+        const code = refusalCode(response);
+        if (code === "rate_limited" && response.retryAfterSec) return { state: "rate_limited", retryAfterSec: response.retryAfterSec };
+        if (code) return { state: "failed", code };
+        return { state: "accepted", deduplicated: response.body?.deduplicated === true };
+      }
+    });
+    io.log(JSON.stringify({ ok: true, state: "completed", campaignId: requestId2, recipients: recipients.length, ...result }));
+    return 0;
+  } catch (error) {
+    if (!(error instanceof CampaignFailure)) return refuse5(io, "send_outcome_unknown", void 0, 1, { campaignId: requestId2 });
+    const hint = error.code === "send_outcome_unknown" || error.code === "rate_limited" ? `Re-run the same command with --request-id ${requestId2} within Ping's 24-hour deduplication window.` : HINTS[error.code];
+    return refuse5(io, error.code, hint, 1, {
+      campaignId: requestId2,
+      completed: error.completed,
+      memberEmail: error.memberEmail
+    });
+  }
+}
 function flagRefusal(flags) {
   if (LOCAL_SENDER_FLAGS.some((f) => flags[f] !== void 0)) return "flag_not_supported_with_ping";
   if (SWITCHES.some((f) => flags[f] !== void 0 && typeof flags[f] !== "boolean")) return "invalid_boolean_flag";
@@ -59534,20 +59964,24 @@ function summary(result, sent) {
   }
   return `Ping accepted request ${sent.requestId} for ${sent.memberEmail}. Ping does not confirm delivery: it reaches the member's signed-in devices with notifications allowed.`;
 }
-var LOCAL_SENDER_FLAGS, SWITCHES, REQUIRED_FLAGS, UUID_RE, KNOWN_CODES, HINTS, text7;
+var LOCAL_SENDER_FLAGS, SWITCHES, REQUIRED_FLAGS, UUID_RE, KNOWN_CODES, ROSTER_CODES, HINTS, text7;
 var init_notify_ping = __esm({
   "src/notify-ping.ts"() {
     init_push_send();
+    init_push_setup();
+    init_site_member();
     init_push_send_service();
     init_hosted_owner();
+    init_notify_ping_all();
     init_owner_claim();
     init_push_onboarding();
     init_wix_owner();
     LOCAL_SENDER_FLAGS = ["token", "device", "all", "admin-url", "admin-session", "silent", "badge", "data", "category", "channel", "platform", "bundle-id"];
-    SWITCHES = ["json", "dry-run"];
+    SWITCHES = ["json", "dry-run", "all-members"];
     REQUIRED_FLAGS = ["member-email", "title", "link"];
     UUID_RE = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;
     KNOWN_CODES = new Set(PUSH_SEND_ERROR_CODES);
+    ROSTER_CODES = /* @__PURE__ */ new Set(["member_lookup_unavailable", "member_roster_unstable", "member_roster_incomplete", "member_ambiguous"]);
     HINTS = {
       push_not_ready: "Run himi notify setup for this app and site first; status must be ready.",
       member_not_found: "Use the login email of an approved member of this site.",
@@ -63882,8 +64316,8 @@ async function applyOverlays(input) {
     if (bringsBrand) {
       const accent = tokens.colors?.accentPrimary;
       const primary = typeof accent === "string" ? accent : accent?.light;
-      const shadows = merged.shadows;
-      const glow = shadows && typeof shadows === "object" && !Array.isArray(shadows) ? shadows[BRAND_GLOW_SHADOW] : void 0;
+      const shadows2 = merged.shadows;
+      const glow = shadows2 && typeof shadows2 === "object" && !Array.isArray(shadows2) ? shadows2[BRAND_GLOW_SHADOW] : void 0;
       if (primary && glow && typeof glow.color === "string") glow.color = primary;
       stripBrandFromIdiom(merged);
     }
@@ -69498,7 +69932,7 @@ var init_context = __esm({
 import { mkdtempSync as mkdtempSync4, readFileSync as readFileSync80, mkdirSync as mkdirSync33, writeFileSync as writeFileSync29, existsSync as existsSync67, rmSync as rmSync16, readdirSync as readdirSync31, statSync as statSync19, lstatSync as lstatSync14, accessSync, constants as constants3, renameSync as renameSync8, cpSync as cpSync3 } from "node:fs";
 import { execFile, execFileSync as execFileSync7, spawnSync as spawnSync5, spawn as spawn7 } from "node:child_process";
 import { AsyncLocalStorage } from "node:async_hooks";
-import { createHash as createHash31, randomUUID as randomUUID7 } from "node:crypto";
+import { createHash as createHash32, randomUUID as randomUUID7 } from "node:crypto";
 import { tmpdir as tmpdir5, homedir as homedir7, hostname } from "node:os";
 import { join as join65, resolve as resolve53, relative as relative14, basename as basename17, dirname as dirname37 } from "node:path";
 import { fileURLToPath as fileURLToPath26 } from "node:url";
@@ -71520,6 +71954,7 @@ var BOOLEAN_FLAGS = /* @__PURE__ */ new Set([
   "allow-destructive",
   "allow-draft",
   "all",
+  "all-members",
   "all-screens",
   "ai",
   "binary",
@@ -71554,6 +71989,7 @@ var BOOLEAN_FLAGS = /* @__PURE__ */ new Set([
   "wait",
   "wix",
   "silent",
+  "with-files",
   "include-disabled",
   "skip-build",
   "refresh",
@@ -72120,6 +72556,12 @@ var USAGE = `himi \u2014 the Himalaya authoring CLI (remote dev loop)
       wix login as the site owner, and a ready notify setup. Acceptance is not delivery.
       --dry-run checks ownership, member, link and readiness without sending. After an unknown
       outcome, re-run the same command with the printed --request-id; Ping never runs it twice.
+  himi notify send --provider ping --target wix --app <a> --site <msid> --all-members
+                   --title <s> [--body <s>] --link <scheme>://screen/<id>[?\u2026] [--dry-run | --yes] [--request-id <uuid>]
+      Sends to every approved site member with a login email. --dry-run counts recipients and
+      checks one member's server gates; --yes is required to send. The CLI paces sends for the
+      owner's 10/minute limit. Reuse the campaign ID with --request-id after an interrupted run
+      within Ping's 24-hour deduplication window. Acceptance is not delivery.
   himi notify send --app <a> (--token <t> | --device <id> | --all) --title <s> [--body <s>] [--link <url>]
                                            deliver a REAL push notification to registered devices \u2014
                                            APNs (.p8) for iOS, FCM v1 for Android. --all fans out to
@@ -72312,7 +72754,7 @@ var COMMANDS = [
   { name: "icon", summary: "the app's LAUNCHER icon \u2014 the home-screen / store mark, which is BINARY-floor and never over-the-air (distinct from `himi icons`, the in-screen glyph vocabulary). `status`/`check` report what this app would actually ship and validate it against both stores: exact 1024x1024, no tRNS chunk, non-interlaced, and \u2014 when the optional image toolchain is installed \u2014 no transparent regions (Apple permits an alpha channel but not transparent pixels: ITMS-90717), no pre-masked corners, no letterboxed wordmark; they also print the store-policy checklist no checker can decide. `set <file.png>` installs supplied art, `from-site` installs the logo `himi site analyze` downloaded, and `generate` makes a gradient tile + glyph \u2014 all three trim, flatten onto the app's accent, write the 1024 opaque master plus the 512 Play listing icon (Play wants 32-bit WITH alpha, so it is a separate file), and DECLARE it in himalaya.content.json, without which the release bakes no icon at all", required: "[status|check] | set <file.png> | from-site [--book <dir>] | generate [--glyph <g>] [--accent <hex>] | glyphs [--content <dir>] [--json]" },
   { name: "login", summary: "obtain a scoped serve-control token from Wix identity and store it in ~/.himalaya/serve-targets.json (so push/promote need no hand-pasted token). Three modes: --browser (your own Wix account, no VPN/BO), --wix (HEADLESS \u2014 the machine's own Wix CLI credential; the mode a CI pod or agent container can satisfy), --dpx (Wix employee, reads ~/.dpx/session/token). RFC 0026 WS3.", required: "[--browser|--wix|--dpx] [--target <t>] [--issue-url <url>]" },
   { name: "logout", summary: "remove the stored control token for a target", required: "[--target <t>]" },
-  { name: "notify", summary: "`setup` optionally configures Branded/Ping from local customer key files; `status --refresh` reads live backend readiness. Setup may be deferred while building. These use serve-control and require owner plus Wix account authentication. `send`, `tokens`, `doctor`: send a REAL push notification to registered devices (RFC 0036 WS5) \u2014 APNs .p8 over HTTP/2 for iOS, FCM v1 for Android. `send` targets one device (--token / --device <registry id>) or fans out to the whole app (--all), reporting a per-device result; a token the provider says is uninstalled (APNs 410 Unregistered / FCM UNREGISTERED) is auto-disabled, while a merely wrong one (BadDeviceToken \u2014 usually a sandbox/production mismatch) is recorded and left enabled. `tokens` lists the registry. `doctor` reports which credentials resolve and which sender each platform picks. Talks to the admin-server via --admin-url/HIMALAYA_ADMIN_URL, authenticated with --admin-session/HIMALAYA_ADMIN_SESSION. `send --provider ping` is the hosted alternative: the serve plane sends one test notification to one site member through Ping as Himalaya, with owner login instead of provider keys, and reports acceptance, never delivery. NOT `himi push`, which publishes a release.", required: "setup|status [--content <dir>] [--target <t>] [--refresh] [--yes] [--no-push-setup] | send --provider ping [--content <dir>] [--app <a>] [--site <msid>] --member-email <email> --title <s> [--body <s>] --link <url> [--request-id <uuid>] [--dry-run] [--json] | send|tokens|doctor [--app <a>] [--token <t> | --device <id> | --all] [--title <s>] [--body <s>] [--link <url>] [--platform ios|android] [--badge <n>] [--channel <id>] [--silent] [--dry-run] [--json]" },
+  { name: "notify", summary: "Hosted --all-members requires --yes for a live send; --dry-run checks ownership/readiness and counts approved recipients without sending. `setup` optionally configures Branded/Ping from local customer key files; `status --refresh` reads live backend readiness. Setup may be deferred while building. These use serve-control and require owner plus Wix account authentication. `send`, `tokens`, `doctor`: send a REAL push notification to registered devices (RFC 0036 WS5) \u2014 APNs .p8 over HTTP/2 for iOS, FCM v1 for Android. `send` targets one device (--token / --device <registry id>) or fans out to the whole app (--all), reporting a per-device result; a token the provider says is uninstalled (APNs 410 Unregistered / FCM UNREGISTERED) is auto-disabled, while a merely wrong one (BadDeviceToken \u2014 usually a sandbox/production mismatch) is recorded and left enabled. `tokens` lists the registry. `doctor` reports which credentials resolve and which sender each platform picks. Talks to the admin-server via --admin-url/HIMALAYA_ADMIN_URL, authenticated with --admin-session/HIMALAYA_ADMIN_SESSION. `send --provider ping` is the hosted alternative: the serve plane sends to one site member (--member-email) or all approved members (--all-members) through Ping as Himalaya, with owner login instead of provider keys, and reports acceptance, never delivery. NOT `himi push`, which publishes a release.", required: "setup|status [--content <dir>] [--target <t>] [--refresh] [--yes] [--no-push-setup] | send --provider ping [--content <dir>] [--app <a>] [--site <msid>] (--member-email <email> | --all-members (--dry-run | --yes)) --title <s> [--body <s>] --link <url> [--request-id <uuid>] [--dry-run] [--json] | send|tokens|doctor [--app <a>] [--token <t> | --device <id> | --all] [--title <s>] [--body <s>] [--link <url>] [--platform ios|android] [--badge <n>] [--channel <id>] [--silent] [--dry-run] [--json]" },
   { name: "site", summary: "PROVISION a Wix project, then analyze or extend it. `create` is the one door that makes a site instead of adopting one: POST /funnel/projects/v1/create (a WIX site, a HEADLESS backend, a BRANDED_APP, or a VIBE site), and for headless it also mints the OAuth app whose id IS the `WIX_CLIENT_ID` \u2014 with --redirect-uri already registered, because an unregistered redirect makes native signInDirect fail at redirect-session. `--verticals` REQUIRES `--template` and reports only what Wix confirmed: measured, installing onto a project created from the BLANK template returns 200 while the vertical's API answers 428 forever, because there is no site for it to attach to (the install asks for CREATE_SITE). A real template ships its verticals installed and populated, and installing further ones onto it then works. It MUTATES your Wix account and needs --yes; without it you get the payload and nothing is sent. `list` is the read-only site inventory (with each site's premium flag, which is what explains an installed-but-428 vertical). Auth is the account-scoped `wix token` (no --site), falling back to WIX_API_KEY + WIX_ACCOUNT_ID. `client` is the same OAuth step for a site that ALREADY exists \u2014 the one himi adopts rather than makes \u2014 so a clientId no longer means a manual trip to the dashboard: `client ensure` reconciles rather than mints, because a site can already carry a client with NO registered redirect and shipping that one fails signInDirect at runtime; it reuses a client that carries --redirect-uri, PATCHes one that matches --name but lacks it (unioning, so another app's redirect survives), and creates only when there is nothing to reuse (--new forces a fresh one). --name IS the idempotency key. `client` auth is SITE-scoped (`wix token --site <msid>`) because minting is owner-of-that-site, and --yes gates every mutation: a site that already has a usable client resolves WITHOUT it, but --write-provisioning needs --yes even then because it rewrites a manifest on disk (the dry run's planned.provisioning names the file). That query endpoint IGNORES paging (measured: query.paging, cursorPaging and a top-level paging all return the full set at offset 0), so when pagingMetadata reports more clients than came back, `ensure` REFUSES EVERY outcome \u2014 create, patch AND reuse. Reuse is refused too because pickClient breaks ties on the OLDEST createdDate, so an omitted older same-named MOBILE client with the same redirect would win a later complete read and the resolved clientId would MOVE between runs \u2014 and it gets written into provisioning.json; convergence is what makes a stray duplicate untidy rather than harmful. --name cannot narrow the query (no filter is sent; the name is applied to the rows after they arrive), so the recovery is the dashboard; --new skips the query entirely. A `patched` result is verified against what Wix STORED \u2014 the redirect list is read off the PATCH response, and re-read via GET when the response omits it, because falling back to the list himi just sent would make the guard pass vacuously on exactly the silent no-op it exists to catch. `client list` is the read-only inventory of a site's clients: act on its `shippable` column rather than `hasRedirect`, because shippable ALSO requires a MOBILE applicationType and `ensure` refuses a WEB client \u2014 a WEB one carrying your redirect looks right and is not a candidate \u2014 and it sets truncated:true rather than presenting a partial inventory as the whole one. `analyze --read-only` returns API-only generation context as JSON (identity, access probes, CMS permissions and selected redacted Velo source); it needs no URL/browser and never uploads or applies anything. `analyze` reads a site into a business-book folder (REST + Playwright, GET-only); `--url` alone is the visitor-only pass over the published pages, and `--client-id` adds the vertical probes and the app binding `--apply` requires; `site function` list/get/put/publish/invokes that site's Velo HTTP functions and is not `himi functions` (serve-plane jobs). `--apply` bakes into a brandable shell (a site shell needs no `--client-id`: it is visitor-only and binds no client); `--shell` takes the same names `himi dist --shell` does and defaults to branded-lite, and a shell that ships no prepare:customer is refused by name rather than half-built. `--shell brandy` (the site shell, RFC 0062) also derives the site's page map from its published pages and header menu \u2014 Home first, up to four tabs for the pages a visitor returns to, the rest in the drawer \u2014 into the overlay's `site` block, so it can be edited before `--apply`; only a site shell ever receives that block. It never overwrites any shell's committed apps/<shell>/provisioning.json.", required: "create <name> [--type wix|headless|branded-app|vibe] [--template <guid>] [--verticals stores,bookings,\u2026] [--folder <guid>] [--redirect-uri <uri>] [--no-oauth-app] [--write-provisioning [path]] [--site-url <url>] [--json] --yes | list | client ensure|list --site <msid> [--name <name>] [--redirect-uri <uri>] [--new] [--write-provisioning [path]] [--site-url <url>] [--json] --yes | analyze --read-only [--site <msid>] [--client-id <id>] [--json] | analyze --url <https> [--client-id <id>] [--site <msid>] [--out <dir>] [--redirect-uri <uri>] [--apply] [--shell " + SHELL_ENUM + "] | function list|get|put|publish|invoke [--site <msid>] [--url <https>] [--method GET|POST|PUT|DELETE] [--source <file>] [--body <json>] [--publish] [--invoke]" },
   { name: "doctor", summary: 'off-VPN preflight in one shot: probe the PUBLIC data plane (www.wixapis.com \u2014 reachable off-VPN), the INTERNAL serve/control plane for the selected target (VPN-gated), and report auth state (dpx session on disk + stored control token). --dpx additionally runs a live, EADDRINUSE-safe `dpx whoami`. Machine-readable with --json (an unreachable internal plane carries a stable code:"needs_vpn" so an agent branches on the code, not the prose); human-readable otherwise. Never loads the authoring runtime \u2014 works off-repo.', required: "[--target <t>] [--dpx] [--json] [--data-url <url>] [--timeout <ms>]" },
   { name: "upgrade", summary: "install the newest published CLI (`npm i -g @wix/himalaya-cli@latest`) and report what moved. This is the explicit door: himi also updates itself when the running build is more than a week old \u2014 unattended it just does it and re-runs your command, at a terminal it asks first \u2014 and `HIMI_NO_UPDATE_CHECK=1` turns that off, leaving this command as the way to catch up. Reports `unchanged` rather than claiming success when npm exits 0 without moving the version, which is what a registry mirror serving its own pinned copy looks like.", required: "[--json]" },
@@ -74611,7 +75053,7 @@ ${doNow.map((l) => `  ${l}`).join("\n")}`);
               try {
                 const bytes2 = readFileSync80(iconPath);
                 payload.icon = bytes2.toString("base64");
-                iconHash = createHash31("sha256").update(bytes2).digest("hex");
+                iconHash = createHash32("sha256").update(bytes2).digest("hex");
               } catch {
               }
             }
@@ -76401,7 +76843,7 @@ default (no --glyph): ${DEFAULT_GLYPH2} \u2014 a mark that claims nothing, so th
           let localSourceHash;
           try {
             const { collectAppSource: collectAppSource2, zipAppSource: zipAppSource2 } = await Promise.resolve().then(() => (init_app_source(), app_source_exports));
-            localSourceHash = createHash31("sha256").update(zipAppSource2(collectAppSource2(dir).entries).toString("base64")).digest("hex");
+            localSourceHash = createHash32("sha256").update(zipAppSource2(collectAppSource2(dir).entries).toString("base64")).digest("hex");
           } catch {
           }
           return runReleasePatch({
@@ -77134,9 +77576,30 @@ default (no --glyph): ${DEFAULT_GLYPH2} \u2014 a mark that claims nothing, so th
         let browserCopy = null;
         let servedMissing = [];
         const fromContent = !source;
+        let dropEarlySignals;
+        let dropInitRecord;
         try {
           if (!source) {
             const dir2 = contentDir(flags);
+            if (watch2) {
+              const { removeInitWatchRecord: removeInitWatchRecord2 } = await Promise.resolve().then(() => (init_run_watch(), run_watch_exports));
+              dropInitRecord = () => removeInitWatchRecord2(dir2, process.pid);
+              const onExit = () => dropInitRecord?.();
+              process.once("exit", onExit);
+              const early = [["SIGINT", 130], ["SIGTERM", 143], ["SIGHUP", 129]].map(([sig, code]) => {
+                const onEarly = () => {
+                  dropInitRecord?.();
+                  process.exit(code);
+                };
+                process.once(sig, onEarly);
+                return [sig, onEarly];
+              });
+              dropEarlySignals = () => {
+                for (const [sig, onEarly] of early) process.removeListener(sig, onEarly);
+                process.removeListener("exit", onExit);
+                dropEarlySignals = void 0;
+              };
+            }
             const app = await appId(dir2);
             const { buildContentBundles: buildContentBundles2, buildReleaseFromContent: buildReleaseFromContent2, bundleOutDir: bundleOutDir2 } = await loadAuthoring();
             const bres = await buildContentBundles2(dir2, { resolution: resolutionFlag(flags) });
@@ -77170,7 +77633,10 @@ default (no --glyph): ${DEFAULT_GLYPH2} \u2014 a mark that claims nothing, so th
           let startedAt = "";
           const record2 = (served2, build2) => {
             try {
-              if (recordKit?.writeRunRecord(dir, { url: served2.url, port: served2.port, ...served2.lanUrl ? { lanUrl: served2.lanUrl } : {}, pid: process.pid, startedAt, watching: watch2, build: build2 })) recorded = true;
+              if (recordKit?.writeRunRecord(dir, { url: served2.url, port: served2.port, ...served2.lanUrl ? { lanUrl: served2.lanUrl } : {}, pid: process.pid, startedAt, watching: watch2, build: build2 })) {
+                recorded = true;
+                if (watch2) recordKit.removeInitWatchRecord(dir, process.pid);
+              }
               return null;
             } catch (e) {
               return e.message;
@@ -77207,6 +77673,7 @@ default (no --glyph): ${DEFAULT_GLYPH2} \u2014 a mark that claims nothing, so th
               const stop = () => {
                 void retract().catch((e) => io.error(JSON.stringify({ run: "stop_cleanup_failed", message: e.message }))).finally(() => run2.close().finally(() => resolve54()));
               };
+              dropEarlySignals?.();
               process.once("SIGINT", stop);
               process.once("SIGTERM", stop);
             });
@@ -77352,6 +77819,7 @@ default (no --glyph): ${DEFAULT_GLYPH2} \u2014 a mark that claims nothing, so th
               }
             };
             const onSignal = () => void stop();
+            dropEarlySignals?.();
             for (const sig of ["SIGINT", "SIGTERM", "SIGHUP"]) process.once(sig, onSignal);
             stopNow = (why) => void stop(why);
             armIdle();
@@ -77361,6 +77829,8 @@ default (no --glyph): ${DEFAULT_GLYPH2} \u2014 a mark that claims nothing, so th
           io.error(JSON.stringify({ error: e.message }));
           return 1;
         } finally {
+          dropEarlySignals?.();
+          dropInitRecord?.();
           if (temp) rmSync16(temp, { recursive: true, force: true });
           if (served) rmSync16(served, { recursive: true, force: true });
           if (browserCopy) rmSync16(browserCopy, { recursive: true, force: true });
@@ -78017,7 +78487,7 @@ default (no --glyph): ${DEFAULT_GLYPH2} \u2014 a mark that claims nothing, so th
           });
         }
         const bytes2 = readFileSync80(file);
-        const sha = createHash31("sha256").update(bytes2).digest("hex");
+        const sha = createHash32("sha256").update(bytes2).digest("hex");
         const forScreens = (str8(flags["for-screen"]) ?? "").split(",").map((s) => s.trim()).filter(Boolean);
         if (flags["no-rebind"] !== void 0 && flags["no-rebind"] !== true) {
           io.error(JSON.stringify({ ok: false, error: "no_rebind_takes_no_value", message: "--no-rebind is a switch and takes no value; pass it bare.", usage: PATCH_USAGE }));