@wix/himalaya-cli 0.1126.0 → 0.1128.0

package/dist/cli.mjs

@@ -7988,6 +7988,16 @@ function isInteractive(node) {
     (k) => !!mods[k] && typeof mods[k] === "object" || !!node[k] && typeof node[k] === "object"
   );
 }
+function hasPropHandler(node) {
+  if (componentTypeOf(node) === null) return false;
+  const bag = (v) => v && typeof v === "object" && !Array.isArray(v) ? v : {};
+  const body = bag(node.body);
+  const bags = [bag(body.props), bag(node.props), node];
+  return bags.some((b) => PROP_HANDLER_KEYS.some((k) => {
+    const v = own(b, k);
+    return !!v && typeof v === "object" && !Array.isArray(v);
+  }));
+}
 function ownName(n) {
   for (const k of ACCESSIBLE_NAME_KEYS) {
     const v = own(n, k);
@@ -8042,6 +8052,7 @@ function componentTypeOf(node) {
 function accessibleNameGaps(descriptor, options = {}) {
   const out2 = [];
   const interactiveOnly = options.interactiveOnly === true;
+  const propHandlers = options.propHandlers === true;
   const walk2 = (node, path2, key2, suppressed = false) => {
     if (!node || typeof node !== "object") return;
     if (Array.isArray(node)) {
@@ -8057,9 +8068,9 @@ function accessibleNameGaps(descriptor, options = {}) {
     const viaBody = componentTypeOf(n) !== null && typeof n.body?.type === "string";
     const bodyMods = viaBody ? n.body.modifiers : void 0;
     const deferToBody = viaBody && !hasMods && !!bodyMods && typeof bodyMods === "object" && !Array.isArray(bodyMods);
-    if (key2 !== "modifiers" && !suppressed && !deferToBody) {
+    if (key2 !== "modifiers" && !suppressed && !deferToBody && !(propHandlers && key2 === "props")) {
       if (exposure !== "decorative") {
-        const tappable = isInteractive(n);
+        const tappable = isInteractive(n) || propHandlers && hasPropHandler(n);
         const type = componentTypeOf(n);
         const row = type ? own(A11Y_CONTRACT, type) : void 0;
         const contractual = !interactiveOnly && row?.name === "required";
@@ -8081,7 +8092,7 @@ function accessibleNameGaps(descriptor, options = {}) {
   walk2(descriptor, "", "");
   return out2;
 }
-var A11Y_CONTRACT, ACCESSIBLE_NAME_KEYS, CONTENT_ARM_KEYS, TAP_MODIFIER_KEYS;
+var A11Y_CONTRACT, ACCESSIBLE_NAME_KEYS, CONTENT_ARM_KEYS, TAP_MODIFIER_KEYS, PROP_HANDLER_KEYS;
 var init_a11y_contract = __esm({
   "../../core/dev-server/src/a11y-contract.ts"() {
     A11Y_CONTRACT = {
@@ -8220,6 +8231,7 @@ var init_a11y_contract = __esm({
     ];
     CONTENT_ARM_KEYS = ["template", "timeRef"];
     TAP_MODIFIER_KEYS = ["onTap", "onLongPress", "onDoubleTap"];
+    PROP_HANDLER_KEYS = ["action", ...TAP_MODIFIER_KEYS];
   }
 });
 
@@ -15843,6 +15855,24 @@ async function localDbEntities(dir) {
   const names = (schema?.entities ?? []).map((e) => e?.name).filter((n) => typeof n === "string" && n.length > 0);
   return names.length ? names.map((name) => ({ name })) : null;
 }
+function renderMocksFrom(rules, bad2, seeded) {
+  if (rules || seeded) {
+    return {
+      mocks: {
+        rules: rules?.rules ?? null,
+        cmsSeed: seeded,
+        from: [...rules ? [rules.from] : [], ...seeded ? ["config cms seed rows"] : []],
+        ...bad2 ? { ignored: `the net mocks could not be read (${bad2}), so only the cms seed rows were used` } : {}
+      }
+    };
+  }
+  return {
+    note: {
+      used: false,
+      reason: bad2 ? `the net mocks could not be read (${bad2}), and the config declares no cms seed rows \u2014 the initial state was rendered` : "no recorded data: no dev/net-mocks.json (`himi test --record` writes it) and no cms seed rows in config.ts \u2014 the initial state was rendered"
+    }
+  };
+}
 var init_crawl_layers = __esm({
   "src/crawl-layers.ts"() {
     init_app_config_loader();
@@ -24719,7 +24749,6 @@ function shouldRevealError(args) {
 var EMAIL_RE, URL_HOST_RE, INTEGER_RE, NUMBER_RE;
 var init_validation = __esm({
   "../../core/ts/src/validation.ts"() {
-    "use strict";
     EMAIL_RE = /^[A-Za-z0-9._%+-]+@[A-Za-z0-9-]+(\.[A-Za-z0-9-]+)*\.[A-Za-z]{2,}$/;
     URL_HOST_RE = /^[A-Za-z0-9-]+(\.[A-Za-z0-9-]+)*(:[0-9]+)?$/;
     INTEGER_RE = /^[+-]?[0-9]+$/;
@@ -29120,7 +29149,6 @@ function validateWorkerSubtree(raw, slotId, policy, actionCatalog) {
 var WORKER_SUBTREE_CEILINGS, ID_PART, ACTION_ID;
 var init_worker_subtree = __esm({
   "../../core/ts/src/worker-subtree.ts"() {
-    "use strict";
     init_worker_subtree_safe_types_generated();
     WORKER_SUBTREE_CEILINGS = Object.freeze({
       maxEncodedBytes: 65536,
@@ -42075,6 +42103,7 @@ __export(screen_crawl_exports, {
   emptiedArrays: () => emptiedArrays,
   findingKey: () => findingKey,
   hostDispatch: () => hostDispatch,
+  isUnservedRequest: () => isUnservedRequest,
   layeredTransport: () => layeredTransport,
   mapBundleFrame: () => mapBundleFrame,
   netTransport: () => netTransport,
@@ -42171,6 +42200,10 @@ function rootOnAppear(descriptor) {
 function isTransportReject(message) {
   return message === REJECT_ALL_MESSAGE || message.startsWith("no data layer served ");
 }
+function isUnservedRequest(e) {
+  const m = e instanceof Error ? e.message : typeof e === "string" ? e : "";
+  return isTransportReject(m) || m.startsWith("wix-data is served only from the config's declared cms") || m.startsWith("the cms seed layer answers queries only") || m.startsWith("no net fixture rule matched ") || m.startsWith("net fixture rule ") && m.includes("`transform` rule");
+}
 function mapBundleFrame(mapJson, genLine, genCol) {
   try {
     const map = JSON.parse(mapJson);
@@ -43573,7 +43606,8 @@ async function bootAndSnapshotState(opts) {
   const { screenId, descriptor, bundleJs } = opts;
   if (!bundleJs) return null;
   return withSwallowedRejections(async () => {
-    const { call: wixCall } = layeredTransport({ rules: opts.rules, cmsSeed: opts.cmsSeed, canned: opts.canned });
+    const layered = layeredTransport({ rules: opts.rules, cmsSeed: opts.cmsSeed, canned: opts.canned });
+    const wixCall = opts.transportWrap ? opts.transportWrap(layered.call) : layered.call;
     let w;
     try {
       w = await bootScreenWorker({ bundleJs, descriptor, wixCall, screenId, budgetMs: opts.budgetMs, localDbSchema: opts.localDbSchema, capabilitySuccess: opts.capabilitySuccess === true, ...opts.evaluator ? { evaluator: opts.evaluator } : {} });
@@ -44818,7 +44852,7 @@ async function buildFromLoaded(preloaded, dest, opts = {}) {
     };
     return liveWixCall;
   };
-  const renderServicesFor = async (bundleName, descriptor) => {
+  const renderServicesFor = async (bundleName, descriptor, renderedScreenId) => {
     const bakedInput = descriptor?.input;
     const input = {
       ...bakedInput && typeof bakedInput === "object" && !Array.isArray(bakedInput) ? bakedInput : {},
@@ -44828,6 +44862,9 @@ async function buildFromLoaded(preloaded, dest, opts = {}) {
     let liveCalls;
     let liveReturned;
     let liveErrors;
+    let mockCalls;
+    let mockBootFailed;
+    let mockUnserved;
     if (collect2?.render?.live) {
       const bundleJs = bundleName ? readBuiltBundle(tier5Dir, bundleName) : void 0;
       if (!bundleJs) {
@@ -44846,6 +44883,38 @@ async function buildFromLoaded(preloaded, dest, opts = {}) {
         liveReturned = counting.returned();
         liveErrors = live2.errors;
       }
+    } else if (collect2?.render?.mocks && collect2.render.hydrate !== false && bundleName && readBuiltBundle(tier5Dir, bundleName)) {
+      const calls = [];
+      const unserved = [];
+      const snap = await bootAndSnapshotState({
+        screenId: renderedScreenId ?? String(descriptor?.screenId ?? bundleName),
+        // `--input` rides on the descriptor's own input, as a navigator hands it over.
+        descriptor: collect2.render.input && descriptor && typeof descriptor === "object" ? { ...descriptor, input } : descriptor,
+        bundleJs: readBuiltBundle(tier5Dir, bundleName),
+        knownScreenIds: /* @__PURE__ */ new Set(),
+        rules: collect2.render.mocks.rules ?? null,
+        ...collect2.render.mocks.cmsSeed ? { cmsSeed: collect2.render.mocks.cmsSeed } : {},
+        localDbSchema: appLocalDbSchema,
+        ...collect2.render.loadBudgetMs ? { budgetMs: collect2.render.loadBudgetMs } : {},
+        transportWrap: (call) => async (method, path2, body) => {
+          const label2 = `${String(method).toUpperCase()} ${String(path2).split("?")[0]}`;
+          calls.push(label2);
+          try {
+            return await call(method, path2, body);
+          } catch (e) {
+            if (isUnservedRequest(e)) unserved.push(label2);
+            throw e;
+          }
+        }
+      });
+      if (snap && Object.keys(snap).length > 0) {
+        base2 = snap;
+        mockCalls = calls;
+        mockUnserved = unserved;
+      } else {
+        mockBootFailed = true;
+        base2 = hydrationServices(tier5Dir, bundleName, input);
+      }
     } else {
       base2 = collect2?.render?.hydrate === false ? null : hydrationServices(
         tier5Dir,
@@ -44860,7 +44929,7 @@ async function buildFromLoaded(preloaded, dest, opts = {}) {
         services[svc] = { ...services[svc] ?? {}, ...st };
       }
     }
-    return { services, ...liveCalls ? { liveCalls } : {}, ...liveReturned !== void 0 ? { liveReturned } : {}, ...liveErrors ? { liveErrors } : {} };
+    return { services, ...liveCalls ? { liveCalls } : {}, ...liveReturned !== void 0 ? { liveReturned } : {}, ...liveErrors ? { liveErrors } : {}, ...mockCalls ? { mockCalls, mockUnserved: mockUnserved ?? [] } : {}, ...mockBootFailed ? { mockBootFailed } : {} };
   };
   checkRegistry(preloaded.module.actions);
   await store.reset(app);
@@ -45130,9 +45199,9 @@ async function buildFromLoaded(preloaded, dest, opts = {}) {
         lint.push({ screenId, ok: report3.ok, issues: report3.issues });
       }
       if (collect2?.render && (!collect2.render.screenId || collect2.render.screenId === screenId)) {
-        const { services, liveCalls, liveReturned, liveErrors } = await renderServicesFor(bundleName, descriptor);
+        const { services, liveCalls, liveReturned, liveErrors, mockCalls, mockUnserved, mockBootFailed } = await renderServicesFor(bundleName, descriptor, screenId);
         const rr = await renderDescriptorWeb(descriptor, renderTokens, renderScheme, collect2.render.png === true, services, collect2.render.width, collect2.render.rtl === true);
-        renders.push({ screenId, scheme: renderScheme, ...rr, ...await renderCompare(descriptor, services), ...collect2.render.dumpState && services ? { serviceState: services } : {}, ...liveCalls ? { liveCalls } : {}, ...liveReturned !== void 0 ? { liveReturned } : {}, ...liveErrors ? { liveErrors } : {} });
+        renders.push({ screenId, scheme: renderScheme, ...rr, ...await renderCompare(descriptor, services), ...collect2.render.dumpState && services ? { serviceState: services } : {}, ...liveCalls ? { liveCalls } : {}, ...liveReturned !== void 0 ? { liveReturned } : {}, ...liveErrors ? { liveErrors } : {}, ...mockCalls ? { mockCalls, mockUnserved } : {}, ...mockBootFailed ? { mockBootFailed } : {} });
       }
     }
     const wantedRender = collect2?.render?.screenId;
@@ -45158,9 +45227,9 @@ async function buildFromLoaded(preloaded, dest, opts = {}) {
           });
           lint.push({ screenId: wantedRender, ok: report3.ok, issues: report3.issues });
         }
-        const { services, liveCalls, liveReturned, liveErrors } = await renderServicesFor(bundleName, descriptor);
+        const { services, liveCalls, liveReturned, liveErrors, mockCalls, mockUnserved, mockBootFailed } = await renderServicesFor(bundleName, descriptor, wantedRender);
         const rr = await renderDescriptorWeb(descriptor, renderTokens, renderScheme, collect2.render.png === true, services, collect2.render.width, collect2.render.rtl === true);
-        renders.push({ screenId: wantedRender, scheme: renderScheme, ...rr, ...await renderCompare(descriptor, services), ...collect2.render.dumpState && services ? { serviceState: services } : {}, ...liveCalls ? { liveCalls } : {}, ...liveReturned !== void 0 ? { liveReturned } : {}, ...liveErrors ? { liveErrors } : {} });
+        renders.push({ screenId: wantedRender, scheme: renderScheme, ...rr, ...await renderCompare(descriptor, services), ...collect2.render.dumpState && services ? { serviceState: services } : {}, ...liveCalls ? { liveCalls } : {}, ...liveReturned !== void 0 ? { liveReturned } : {}, ...liveErrors ? { liveErrors } : {}, ...mockCalls ? { mockCalls, mockUnserved } : {}, ...mockBootFailed ? { mockBootFailed } : {} });
       }
     }
     for (const t of preloaded.module.screens.templated ?? []) {
@@ -48573,19 +48642,300 @@ var init_app_source = __esm({
   }
 });
 
+// src/run-watch.ts
+var run_watch_exports = {};
+__export(run_watch_exports, {
+  ReloadBus: () => ReloadBus,
+  boardFile: () => boardFile,
+  diffReleases: () => diffReleases,
+  himiDir: () => himiDir,
+  ignoredChange: () => ignoredChange,
+  isEmptyDiff: () => isEmptyDiff,
+  rebuildBlocker: () => rebuildBlocker,
+  reloadEvents: () => reloadEvents,
+  removeInitWatchRecord: () => removeInitWatchRecord,
+  removeRunRecord: () => removeRunRecord,
+  serialize: () => serialize,
+  watchContent: () => watchContent,
+  watchFlagConflict: () => watchFlagConflict,
+  watchedContentDir: () => watchedContentDir,
+  writeRunRecord: () => writeRunRecord
+});
+import { closeSync as closeSync3, constants, existsSync as existsSync47, fstatSync, lstatSync as lstatSync10, statSync as statSync11, mkdirSync as mkdirSync23, openSync as openSync3, readFileSync as readFileSync51, realpathSync as realpathSync7, renameSync as renameSync5, rmSync as rmSync11, writeFileSync as writeFileSync18, watch as fsWatch } from "node:fs";
+import { randomUUID as randomUUID3 } from "node:crypto";
+import { extname as extname4, join as join45, resolve as resolve41, sep as sep12 } from "node:path";
+function diffReleases(prev, next) {
+  const bundles = Object.keys(next.bundles).filter((b) => prev.bundles[b]?.sha256 !== next.bundles[b].sha256).sort();
+  const changedBundles = new Set(bundles);
+  const screens = Object.entries(next.screens).filter(([id, s]) => {
+    const before = prev.screens[id];
+    return !before || before.descriptorHash !== s.descriptorHash || before.bundle !== s.bundle || s.bundle !== null && changedBundles.has(s.bundle);
+  }).map(([id]) => id).sort();
+  const prevIds = Object.keys(prev.screens).sort().join("\n");
+  const nextIds = Object.keys(next.screens).sort().join("\n");
+  return {
+    screens,
+    bundles,
+    tokens: prev.tokensHash !== next.tokensHash,
+    config: prev.appConfigHash !== next.appConfigHash || prevIds !== nextIds
+  };
+}
+function reloadEvents(d) {
+  const out2 = [];
+  if (d.bundles.length) out2.push(["bundle.invalidated", { bundles: d.bundles }]);
+  if (d.screens.length) out2.push(["screen.invalidated", { screenIds: d.screens }]);
+  if (d.tokens) out2.push(["tokens.changed", {}]);
+  if (d.config) out2.push(["config.invalidated", {}]);
+  return out2;
+}
+function ignoredChange(relPath, isDirectory = () => false) {
+  const parts = relPath.split(/[\\/]/).filter(Boolean);
+  if (!parts.length) return true;
+  const [top] = parts;
+  if ([".himi", "dist", "node_modules", ".git", ".build", ...AGENT_TOOLING_DIRS].includes(top)) return true;
+  if (parts.length === 1 && AGENT_TOOLING_ROOT_FILES.includes(top)) return true;
+  if ((top === "shots" || top === "evidence") && (parts.length > 1 || isDirectory(top))) return true;
+  const name = parts[parts.length - 1];
+  return /(^\.#|~$|\.sw[a-p]$|^\.DS_Store$|\.tmp$)/.test(name);
+}
+function watchContent(dir, onChange, opts = {}) {
+  const debounceMs = opts.debounceMs ?? 200;
+  const watch2 = opts.watch ?? ((p, o, l) => fsWatch(p, o, (event, file) => l(event, file === null ? null : String(file))));
+  let timer = null;
+  const pending = /* @__PURE__ */ new Set();
+  const watcher2 = watch2(dir, { recursive: true }, (_event, file) => {
+    if (!file || ignoredChange(file, (rel) => isDir(join45(dir, rel)))) return;
+    pending.add(file);
+    if (timer) clearTimeout(timer);
+    timer = setTimeout(() => {
+      timer = null;
+      const paths = [...pending];
+      pending.clear();
+      onChange(paths);
+    }, debounceMs);
+  });
+  return {
+    close() {
+      if (timer) clearTimeout(timer);
+      watcher2.close();
+    }
+  };
+}
+function watchedContentDir(source) {
+  if (!source || /^https?:\/\//i.test(source)) return null;
+  const dir = resolve41(source);
+  try {
+    return statSync11(dir).isDirectory() && existsSync47(join45(dir, "himalaya.content.json")) ? dir : null;
+  } catch {
+    return null;
+  }
+}
+function watchFlagConflict(opts) {
+  if (opts.source) {
+    return { error: "watch_needs_source", message: "--watch rebuilds a content package on every save, so it cannot watch a packaged release or a URL. Pass the app's directory (the one with himalaya.content.json), --content <dir>, or run it from there with no argument." };
+  }
+  if (opts.browser) {
+    return { error: "watch_with_browser", message: "--watch already opens the app in your browser, so drop --browser. (--browser is a different mode: it runs the whole serve plane inside the tab, leaving no process here to rebuild on save.) Under --watch a site-bound app shows the site's live data on its own." };
+  }
+  if (opts.spa) {
+    return { error: "watch_with_spa", message: "--watch pushes each rebuild to the open tab over this server's own origin, and a hosted SPA (--spa) listens on its origin instead, so it would never repaint. Drop --spa to watch with the bundled web host, or drop --watch." };
+  }
+  return null;
+}
+function rebuildBlocker(outcome, servedMissing) {
+  const failed2 = outcome.failedToBuild[0];
+  if (failed2) return `${failed2.screenId}: ${failed2.error.split("\n")[0]}`;
+  const had = new Set(servedMissing.map((m) => `${m.screen}\0${m.bundle}`));
+  const lost = outcome.missingBundles.find((m) => !had.has(`${m.screen}\0${m.bundle}`));
+  if (lost) return `${lost.screen}: its worker bundle "${lost.bundle}" is referenced but was not built`;
+  return null;
+}
+function serialize(task) {
+  let running = null;
+  let again = false;
+  let stopped = false;
+  const go = () => {
+    if (stopped) return;
+    if (running) {
+      again = true;
+      return;
+    }
+    running = (async () => {
+      try {
+        await task();
+      } finally {
+        running = null;
+        if (again && !stopped) {
+          again = false;
+          go();
+        }
+      }
+    })();
+  };
+  return Object.assign(() => go(), {
+    async stop() {
+      stopped = true;
+      again = false;
+      await running?.catch(() => {
+      });
+    }
+  });
+}
+function himiDir(dir) {
+  const root = join45(dir, ".himi");
+  try {
+    return lstatSync10(root).isDirectory() ? root : null;
+  } catch (e) {
+    if (e.code !== "ENOENT") return null;
+    mkdirSync23(root, { recursive: true });
+    return lstatSync10(root).isDirectory() ? root : null;
+  }
+}
+function writeRunRecord(dir, record2) {
+  const root = himiDir(dir);
+  if (!root) return false;
+  const tmp = join45(root, `.run.json.${process.pid}.${randomUUID3()}.tmp`);
+  try {
+    writeFileSync18(tmp, `${JSON.stringify(record2, null, 2)}
+`, { flag: "wx" });
+    renameSync5(tmp, join45(root, "run.json"));
+  } catch (e) {
+    rmSync11(tmp, { force: true });
+    throw e;
+  }
+  return true;
+}
+function removeRunRecord(dir, owner) {
+  const root = join45(dir, ".himi");
+  try {
+    if (!lstatSync10(root).isDirectory()) return;
+  } catch {
+    return;
+  }
+  if (owner !== void 0) {
+    const bytes2 = readConfined(root, "run.json");
+    let pid;
+    try {
+      pid = bytes2 ? JSON.parse(bytes2.toString("utf8")).pid : void 0;
+    } catch {
+    }
+    if (typeof pid === "number" && pid !== owner) return;
+  }
+  rmSync11(join45(root, "run.json"), { force: true });
+}
+function removeInitWatchRecord(dir, owner) {
+  const root = join45(dir, ".himi");
+  try {
+    if (!lstatSync10(root).isDirectory()) return;
+  } catch {
+    return;
+  }
+  const bytes2 = readConfined(root, "watch.json");
+  if (!bytes2) return;
+  let pid;
+  try {
+    pid = JSON.parse(bytes2.toString("utf8")).pid;
+  } catch {
+    return;
+  }
+  if (pid !== owner) return;
+  rmSync11(join45(root, "watch.json"), { force: true });
+}
+function boardFile(dir, pathname) {
+  if (pathname === RUN_IDENTITY_PATH) {
+    return new Response(JSON.stringify(runIdentity(dir)), { status: 200, headers: { "content-type": "application/json", "cache-control": "no-store" } });
+  }
+  let rel = null;
+  if (pathname === "/__himi/studio/" || pathname === "/__himi/studio/index.html") rel = join45("studio", "index.html");
+  else if (pathname === "/__himi/studio/state.js") rel = join45("studio", "state.js");
+  else if (pathname === "/__himi/studio/timeline.js") rel = join45("studio", "timeline.js");
+  else {
+    const m = /^\/__himi\/history\/([0-9a-f]{64}\.(png|jpg|gif|webp))$/.exec(pathname);
+    if (m) rel = join45("history", m[1]);
+  }
+  if (!rel) return null;
+  const bytes2 = readConfined(resolve41(dir, ".himi"), rel);
+  if (!bytes2) return new Response("not found", { status: 404 });
+  return new Response(bytes2, {
+    status: 200,
+    headers: { "content-type": BOARD_TYPES[extname4(rel)] ?? "application/octet-stream", "cache-control": rel.startsWith("history") ? "public, max-age=31536000, immutable" : "no-store" }
+  });
+}
+function readConfined(root, rel) {
+  try {
+    if (!lstatSync10(root).isDirectory()) return null;
+    const parts = rel.split(sep12);
+    let at2 = root;
+    for (let i = 0; i < parts.length; i++) {
+      at2 = join45(at2, parts[i]);
+      const st = lstatSync10(at2);
+      if (st.isSymbolicLink() || !(i === parts.length - 1 ? st.isFile() : st.isDirectory())) return null;
+    }
+    const canonicalRoot = realpathSync7(root);
+    if (!realpathSync7(at2).startsWith(canonicalRoot + sep12)) return null;
+    const fd = openSync3(at2, constants.O_RDONLY | (constants.O_NOFOLLOW ?? 0));
+    try {
+      if (!fstatSync(fd).isFile()) return null;
+      return readFileSync51(fd);
+    } finally {
+      closeSync3(fd);
+    }
+  } catch {
+    return null;
+  }
+}
+var isEmptyDiff, ReloadBus, isDir, BOARD_TYPES;
+var init_run_watch = __esm({
+  "src/run-watch.ts"() {
+    init_source_deny();
+    init_run_identity();
+    isEmptyDiff = (d) => !d.screens.length && !d.bundles.length && !d.tokens && !d.config;
+    ReloadBus = class {
+      subscribers = /* @__PURE__ */ new Set();
+      subscribe(send2) {
+        this.subscribers.add(send2);
+        return () => this.subscribers.delete(send2);
+      }
+      publish(event, data) {
+        for (const send2 of [...this.subscribers]) send2(event, data);
+      }
+      get listeners() {
+        return this.subscribers.size;
+      }
+    };
+    isDir = (path2) => {
+      try {
+        return statSync11(path2).isDirectory();
+      } catch {
+        return false;
+      }
+    };
+    BOARD_TYPES = {
+      ".html": "text/html; charset=utf-8",
+      ".js": "text/javascript; charset=utf-8",
+      ".png": "image/png",
+      ".jpg": "image/jpeg",
+      ".gif": "image/gif",
+      ".webp": "image/webp"
+    };
+  }
+});
+
 // src/screen-state.ts
 var screen_state_exports = {};
 __export(screen_state_exports, {
   homeStateCaveat: () => homeStateCaveat,
+  offlineArtifact: () => offlineArtifact,
   quotableLine: () => quotableLine,
   recordShotState: () => recordShotState,
+  recordedShots: () => recordedShots,
   screenStateOf: () => screenStateOf,
   shotStateFor: () => shotStateFor,
   withHomeCaveat: () => withHomeCaveat
 });
 import { createHash as createHash25 } from "node:crypto";
-import { lstatSync as lstatSync10, readFileSync as readFileSync51 } from "node:fs";
-import { join as join45 } from "node:path";
+import { lstatSync as lstatSync11, readFileSync as readFileSync52 } from "node:fs";
+import { join as join46 } from "node:path";
 function quotableLine(text8) {
   if (!text8) return void 0;
   const first = text8.split(/\r?\n/).map((l) => l.trim()).find(Boolean);
@@ -48627,7 +48977,7 @@ function screenStateOf(services, html, opts = {}) {
     const flagged = status === "error" || status === "failed" || s.hasError === true || s.isError === true || s.isErrored === true || s.errored === true || s.noError === false || s.notErrored === false;
     if (flagged && !(message && page !== void 0 && !painted(message, page)) || message && page !== void 0 && painted(message, page)) {
       const line = message && painted(message, page) ? quotableLine(message) : void 0;
-      return { state: "error", ...line ? { line } : {} };
+      return { state: "error", ...line ? { line } : {}, ...opts.offline ? { offline: true } : {} };
     }
     if (status === "loading" || s.isLoading === true || s.noLoading === false) loading = true;
     const emptyText = str3(s.emptyText) ?? str3(s.emptySourceText);
@@ -48636,14 +48986,15 @@ function screenStateOf(services, html, opts = {}) {
       empty = { state: "empty", ...line ? { line } : {} };
     }
   }
-  if (loading) return { state: "loading", ...opts.initial ? { initial: true } : {} };
-  return empty ?? { state: "content" };
+  const why = { ...opts.initial ? { initial: true } : {}, ...opts.offline ? { offline: true } : {} };
+  if (loading) return { state: "loading", ...why };
+  return empty ? { ...empty, ...why } : { state: "content" };
 }
 function readRecord(dir) {
-  const file = join45(dir, SHOT_STATES_FILE);
+  const file = join46(dir, SHOT_STATES_FILE);
   try {
-    if (!lstatSync10(file).isFile()) return {};
-    const r = JSON.parse(readFileSync51(file, "utf8"));
+    if (!lstatSync11(file).isFile()) return {};
+    const r = JSON.parse(readFileSync52(file, "utf8"));
     return r.v === 1 && r.shots && typeof r.shots === "object" ? r.shots : {};
   } catch {
     return {};
@@ -48653,9 +49004,9 @@ function recordShotState(dir, screenId, png, state, now = /* @__PURE__ */ new Da
   try {
     if (!state || !realDirIn(dir, ".himi")) return;
     const shots = readRecord(dir);
-    shots[sha256Of(png)] = { screen: screenId, state: state.state, ...state.line ? { line: state.line } : {}, ...state.initial ? { initial: true } : {}, at: now.toISOString() };
+    shots[sha256Of(png)] = { screen: screenId, state: state.state, ...state.line ? { line: state.line } : {}, ...state.initial ? { initial: true } : {}, ...state.offline ? { offline: true } : {}, at: now.toISOString() };
     const kept = Object.entries(shots).sort(([, a], [, b]) => a.at < b.at ? 1 : a.at > b.at ? -1 : 0).slice(0, KEEP);
-    writeFileAtomic(join45(dir, SHOT_STATES_FILE), `${JSON.stringify({ v: 1, shots: Object.fromEntries(kept) }, null, 2)}
+    writeFileAtomic(join46(dir, SHOT_STATES_FILE), `${JSON.stringify({ v: 1, shots: Object.fromEntries(kept) }, null, 2)}
 `);
   } catch {
   }
@@ -48666,18 +49017,27 @@ function shotStateFor(dir, image) {
     const r = readRecord(dir)[sha256Of(image)];
     if (!r || !["content", "error", "loading", "empty"].includes(r.state)) return null;
     const line = typeof r.line === "string" ? quotableLine(r.line) : void 0;
-    return { state: r.state, ...line ? { line } : {}, ...r.initial === true ? { initial: true } : {} };
+    return { state: r.state, ...line ? { line } : {}, ...r.initial === true ? { initial: true } : {}, ...r.offline === true ? { offline: true } : {} };
   } catch {
     return null;
   }
 }
+function recordedShots(dir, screenId) {
+  return Object.entries(readRecord(dir)).filter(([sha, r]) => /^[0-9a-f]{64}$/.test(sha) && !!r && r.screen === screenId && typeof r.at === "string" && ["content", "error", "loading", "empty"].includes(r.state)).map(([sha, r]) => ({ sha256: sha, at: r.at, state: { state: r.state, ...r.initial === true ? { initial: true } : {}, ...r.offline === true ? { offline: true } : {} } })).sort((a, b) => a.at < b.at ? 1 : a.at > b.at ? -1 : 0);
+}
+function offlineArtifact(state) {
+  if (!state || state.state === "content") return false;
+  return state.offline === true || state.initial === true && state.state !== "error";
+}
 function homeStateCaveat(state) {
   if (!state || state.state === "content") return void 0;
+  if (offlineArtifact(state)) {
+    const shows = state.state === "loading" ? "its loading placeholders" : state.state === "empty" ? "its empty state" : "what it paints when its data can't load";
+    return `it is an offline preview, without the site's data, so the home screen shows ${shows}`;
+  }
   const quote = state.line ? `: \u201C${state.line}\u201D` : "";
   if (state.state === "error") return `the home screen shows an error${quote}`;
-  if (state.state === "loading") {
-    return state.initial ? "the home screen shows its loading placeholders (an offline render loads no data)" : "the home screen is still on its loading state (its data never finished loading)";
-  }
+  if (state.state === "loading") return "the home screen is still on its loading state (its data never finished loading)";
   return `the home screen shows its empty state${quote}`;
 }
 function withHomeCaveat(message, caveat) {
@@ -48689,11 +49049,11 @@ var SHOT_STATES_FILE, KEEP, LINE_MAX, str3, sha256Of;
 var init_screen_state = __esm({
   "src/screen-state.ts"() {
     init_progress();
-    SHOT_STATES_FILE = join45(".himi", "shot-states.json");
+    SHOT_STATES_FILE = join46(".himi", "shot-states.json");
     KEEP = 40;
     LINE_MAX = 120;
     str3 = (v) => typeof v === "string" && v.trim() ? v : void 0;
-    sha256Of = (file) => createHash25("sha256").update(readFileSync51(file)).digest("hex");
+    sha256Of = (file) => createHash25("sha256").update(readFileSync52(file)).digest("hex");
   }
 });
 
@@ -48709,10 +49069,10 @@ __export(studio_reel_exports, {
   utcDay: () => utcDay
 });
 import { createHash as createHash26 } from "node:crypto";
-import { lstatSync as lstatSync11, readFileSync as readFileSync52 } from "node:fs";
-import { basename as basename13, join as join46 } from "node:path";
+import { lstatSync as lstatSync12, readFileSync as readFileSync53 } from "node:fs";
+import { basename as basename13, join as join47 } from "node:path";
 function loadMemory2(dir) {
-  const m = readJson5(join46(dir, ".himi", "studio", "memory.json"));
+  const m = readJson5(join47(dir, ".himi", "studio", "memory.json"));
   if (!isObj3(m) || m.version !== 1 || !isObj3(m.shots) || !Array.isArray(m.timeline)) return null;
   const shots = [];
   for (const [id, s] of Object.entries(m.shots)) {
@@ -48749,8 +49109,8 @@ function planReel(dir) {
   const memory = loadMemory2(dir);
   const { entries } = readProgress(dir);
   const summary2 = summarizeProgress(entries);
-  const manifest = readJson5(join46(dir, "himalaya.content.json"));
-  const tokens = readJson5(join46(dir, "tokens.json"));
+  const manifest = readJson5(join47(dir, "himalaya.content.json"));
+  const tokens = readJson5(join47(dir, "tokens.json"));
   const accentToken = tokens?.colors?.accentPrimary;
   const accentRaw = typeof accentToken === "string" ? accentToken : accentToken?.light;
   const accent = typeof accentRaw === "string" && ACCENT.test(accentRaw) ? accentRaw : DEFAULT_ACCENT;
@@ -48793,10 +49153,10 @@ function inlineImages(dir, plan, budget = REEL_BUDGET_BYTES) {
   const verified = (f) => {
     if (!HISTORY_NAME.test(f)) return null;
     try {
-      const path2 = join46(dir, HISTORY_DIR, f);
-      const st = lstatSync11(path2);
+      const path2 = join47(dir, HISTORY_DIR, f);
+      const st = lstatSync12(path2);
       if (!st.isFile() || st.nlink !== 1) return null;
-      const bytes2 = readFileSync52(path2);
+      const bytes2 = readFileSync53(path2);
       return createHash26("sha256").update(bytes2).digest("hex") === f.slice(0, 64) && imageExtension(bytes2) === f.slice(65) ? bytes2 : null;
     } catch {
       return null;
@@ -48930,7 +49290,7 @@ var init_studio_reel = __esm({
     mimeOf = (file) => MIME2[file.slice(65)] ?? "image/png";
     readJson5 = (file) => {
       try {
-        return JSON.parse(readFileSync52(file, "utf8"));
+        return JSON.parse(readFileSync53(file, "utf8"));
       } catch {
         return null;
       }
@@ -48954,7 +49314,7 @@ __export(milestones_exports, {
   FIRST_LOOK_BUDGET_MS: () => FIRST_LOOK_BUDGET_MS,
   INIT_SOURCE_FILE: () => INIT_SOURCE_FILE,
   INIT_WATCH_IDLE_MINUTES: () => INIT_WATCH_IDLE_MINUTES,
-  NO_WATCH_ENV: () => NO_WATCH_ENV,
+  LEGACY_NO_WATCH_ENV: () => LEGACY_NO_WATCH_ENV,
   NO_WATCH_IGNORED_NOTE: () => NO_WATCH_IGNORED_NOTE,
   REMOTE_FIRST_LOOK_SKIP: () => REMOTE_FIRST_LOOK_SKIP,
   REMOTE_WATCH_SKIP: () => REMOTE_WATCH_SKIP,
@@ -48974,6 +49334,7 @@ __export(milestones_exports, {
   defaultStartWatchDeps: () => defaultStartWatchDeps,
   displayPath: () => displayPath,
   doNowBlock: () => doNowBlock,
+  draftChangeNote: () => draftChangeNote,
   draftPictureGap: () => draftPictureGap,
   firstLookAtInit: () => firstLookAtInit,
   homePictureAtValidate: () => homePictureAtValidate,
@@ -48993,19 +49354,20 @@ __export(milestones_exports, {
   testChangeNote: () => testChangeNote,
   testPostcardCounts: () => testPostcardCounts,
   testPostcardMessage: () => testPostcardMessage,
+  watchOptOutIgnoredNote: () => watchOptOutIgnoredNote,
   watchReminder: () => watchReminder,
   watchUrlFor: () => watchUrlFor,
   writeHandoverReel: () => writeHandoverReel
 });
-import { createHash as createHash27, randomUUID as randomUUID3 } from "node:crypto";
+import { createHash as createHash27, randomUUID as randomUUID4 } from "node:crypto";
 import { spawn as spawn5 } from "node:child_process";
-import { closeSync as closeSync3, existsSync as existsSync47, lstatSync as lstatSync12, readFileSync as readFileSync53, statSync as statSync11 } from "node:fs";
+import { closeSync as closeSync4, existsSync as existsSync48, lstatSync as lstatSync13, readFileSync as readFileSync54, statSync as statSync12 } from "node:fs";
 import { createServer as createServer4 } from "node:net";
-import { basename as basename14, dirname as dirname27, isAbsolute as isAbsolute4, join as join47, relative as relative9, resolve as resolve41, sep as sep12 } from "node:path";
+import { basename as basename14, dirname as dirname27, isAbsolute as isAbsolute4, join as join48, relative as relative9, resolve as resolve42, sep as sep13 } from "node:path";
 function homeScreenIdOf(dir) {
   let src;
   try {
-    src = readFileSync53(join47(dir, "dev", "index.ts"), "utf8");
+    src = readFileSync54(join48(dir, "dev", "index.ts"), "utf8");
   } catch {
     return null;
   }
@@ -49014,13 +49376,13 @@ function homeScreenIdOf(dir) {
   return id && /^[A-Za-z0-9_.\-/{}]+$/.test(id) ? id : null;
 }
 function homeShotPath(dir, home) {
-  const root = resolve41(dir);
-  const base = resolve41(root, ".himi", "shots");
-  const shot = resolve41(base, `${home}.png`);
-  if (!shot.startsWith(base + sep12)) return null;
-  for (let p = shot; p !== root && p.startsWith(root + sep12); p = dirname27(p)) {
+  const root = resolve42(dir);
+  const base = resolve42(root, ".himi", "shots");
+  const shot = resolve42(base, `${home}.png`);
+  if (!shot.startsWith(base + sep13)) return null;
+  for (let p = shot; p !== root && p.startsWith(root + sep13); p = dirname27(p)) {
     try {
-      if (lstatSync12(p).isSymbolicLink()) return null;
+      if (lstatSync13(p).isSymbolicLink()) return null;
     } catch {
     }
   }
@@ -49057,7 +49419,7 @@ async function renderHomeInChild(dir, home, opts) {
     };
     let child;
     try {
-      child = spawn5(process.execPath, [...opts.loader ?? [], opts.entry, "render", home, "--png", "--device", "iphone", "--content", dir, "--skip-version-check"], {
+      child = spawn5(process.execPath, [...opts.loader ?? [], opts.entry, "render", home, "--png", "--mocks", "--device", "iphone", "--content", dir, "--skip-version-check"], {
         cwd: dir,
         // Which command ran it: validate's refresh is the one whose loading skeletons must not be
         // journaled; init's first look is the template's honest "Starting point" and always is.
@@ -49089,7 +49451,7 @@ async function renderHomeInChild(dir, home, opts) {
       }
       let fresh = false;
       try {
-        fresh = statSync11(shot).mtimeMs >= started - 1e3;
+        fresh = statSync12(shot).mtimeMs >= started - 1e3;
       } catch {
       }
       if (code === 0 && fresh) {
@@ -49123,7 +49485,7 @@ function autoPictureGate(dir) {
 }
 async function homePictureAtValidate(dir, opts) {
   if (!opts.ok) return { skipped: "validate found errors, so the picture was left as it is" };
-  if (!existsSync47(join47(dir, "himalaya.content.json"))) return { skipped: "not a content package" };
+  if (!existsSync48(join48(dir, "himalaya.content.json"))) return { skipped: "not a content package" };
   const env = opts.env ?? process.env;
   if (ciSet(env)) return { skipped: "the CI environment variable is set" };
   if (env.NODE_TEST_CONTEXT) return { skipped: "running under `node --test`" };
@@ -49193,7 +49555,7 @@ function stillBuilding(dir, image, now) {
   }
 }
 function firstLookBeforeOwnPostcard(dir, image, now) {
-  if (!image || !existsSync47(image) || initDivergence(dir).state !== "diverged") return void 0;
+  if (!image || !existsSync48(image) || initDivergence(dir).state !== "diverged") return void 0;
   return journal(dir, "first-look", withHomeCaveat(yourFirstLookMessage(dir), homeCaveat(dir, image)), { image, ...now ? { now } : {} });
 }
 function afterRenderPng(dir, input) {
@@ -49258,13 +49620,13 @@ function testChangeNote(headline2, change) {
 }
 function afterTestRun(dir, input) {
   const firstLook = firstLookBeforeOwnPostcard(dir, input.homeShot, input.now);
-  const shot = input.homeShot && existsSync47(input.homeShot) ? input.homeShot : void 0;
+  const shot = input.homeShot && existsSync48(input.homeShot) ? input.homeShot : void 0;
   const caveat = shot ? homeCaveat(dir, shot) : void 0;
   const counts = testPostcardMessage(input);
   const headline2 = caveat ? `${counts} But ${caveat}.` : counts;
   const postcard = journal(dir, "test", headline2, {
     ref: input.runId,
-    ...input.homeShot && existsSync47(input.homeShot) ? { image: input.homeShot } : {},
+    ...input.homeShot && existsSync48(input.homeShot) ? { image: input.homeShot } : {},
     ...input.now ? { now: input.now } : {},
     unlessUnchanged: true,
     changeNote: (change) => testChangeNote(headline2, change)
@@ -49285,7 +49647,7 @@ function afterBrowserTestRun(dir, input) {
   const now = input.now ?? /* @__PURE__ */ new Date();
   const failedSteps = input.report.ok === false ? (input.report.steps ?? []).filter((s) => s.ok === false && typeof s.step === "string" && s.step.length <= 40 && !looksSecret(s.step)).map((s) => s.step).slice(0, 3) : [];
   return afterTestRun(dir, {
-    runId: `browser-${now.toISOString()}-${randomUUID3().slice(0, 8)}`,
+    runId: `browser-${now.toISOString()}-${randomUUID4().slice(0, 8)}`,
     screens: 1,
     errors: Array.isArray(input.report.findings) ? input.report.findings.length : 0,
     browserScreen: input.screen,
@@ -49298,7 +49660,7 @@ function afterBrowserTestRun(dir, input) {
 function shotIsCurrent(shot, sourceChangedAtMs) {
   if (sourceChangedAtMs === void 0) return false;
   try {
-    return statSync11(shot).mtimeMs >= sourceChangedAtMs;
+    return statSync12(shot).mtimeMs >= sourceChangedAtMs;
   } catch {
     return false;
   }
@@ -49307,7 +49669,7 @@ function draftPictureGap(input) {
   if (!input.home) return { reason: "the app's dev/index.ts names no literal homeScreenId, so there is no home screen to picture" };
   if (!input.homeShot) return { reason: "the homeScreenId does not name a file under .himi/shots" };
   const render = `himi render ${shellQuote(input.home)} --png${contentArg(input.content)}`;
-  if (!existsSync47(input.homeShot)) return { reason: "there is no home shot yet", render };
+  if (!existsSync48(input.homeShot)) return { reason: "there is no home shot yet", render };
   if (input.sourceChangedAtMs === void 0) return { reason: "the source's last change could not be read, so the home shot cannot be shown to be current", render };
   if (!shotIsCurrent(input.homeShot, input.sourceChangedAtMs)) return { reason: "the home shot is older than the last source edit, so it is not a picture of this draft", render };
   return null;
@@ -49318,11 +49680,14 @@ function afterDraftPush(dir, input) {
   const gap = current || input.home === void 0 ? null : draftPictureGap(input);
   const why = gap ? ` No picture: ${gap.reason}${gap.render ? ` \u2014 \`himi render ${shellQuote(input.home)} --png\` makes a current one` : ""}.` : "";
   const draftLine = withHomeCaveat(`Draft pushed: release ${input.releaseId.slice(0, 12)} of ${input.app} \u2014 owner-private, not live.`, current ? homeCaveat(dir, input.homeShot) : void 0);
-  const postcard = journal(dir, "draft", `${draftLine}${why}`, {
+  const note = draftChangeNote(dir, { home: input.home ?? null, manifest: input.manifest, picture: current ? input.homeShot : void 0 });
+  const withNote = note && `${draftLine} ${note}${why}`.length <= MAX_MESSAGE_CHARS ? `${draftLine} ${note}` : draftLine;
+  const postcard = journal(dir, "draft", `${withNote}${why}`, {
     ref: input.releaseId,
     ...current ? { image: input.homeShot } : {},
     ...input.now ? { now: input.now } : {}
   });
+  if (input.manifest) rememberDraft(dir, input.releaseId, input.manifest);
   const reel = input.reel === false ? void 0 : writeHandoverReel(dir);
   const handover = reel && "file" in reel ? `At the handover, send the owner ${shellQuote(displayPath(reel.file))} (the making-of, rebuilt by every draft push) beside that link` : `At the handover, \`himi studio reel${input.content ? ` --content ${shellQuote(input.content)}` : ""}\` writes the making-of to hand the owner beside that link`;
   const postcardLine = `${progressCommand({ what: "what the owner can review in this draft", step: "review", content: input.content })} \u2014 your postcard for the draft; share the preview link in chat, never in the journal. ${handover}`;
@@ -49335,6 +49700,63 @@ function afterDraftPush(dir, input) {
     next: gap?.render ? `\`${gap.render}\` \u2014 this draft's postcard has no picture: ${gap.reason}; then ${postcardLine} (given no --image, it attaches that picture)` : postcardLine
   };
 }
+function rememberDraft(dir, releaseId, m) {
+  try {
+    if (!realDirIn(dir, ".himi")) return;
+    const manifest = {
+      screens: Object.fromEntries(Object.entries(m.screens).map(([id, x]) => [id, { descriptorHash: x.descriptorHash, bundle: x.bundle }])),
+      bundles: Object.fromEntries(Object.entries(m.bundles).map(([id, x]) => [id, { sha256: x.sha256 }])),
+      ...m.tokensHash ? { tokensHash: m.tokensHash } : {},
+      ...m.appConfigHash ? { appConfigHash: m.appConfigHash } : {}
+    };
+    writeFileAtomic(join48(dir, LAST_DRAFT_FILE), `${JSON.stringify({ v: 1, releaseId, manifest })}
+`);
+  } catch {
+  }
+}
+function lastDraft(dir) {
+  try {
+    const file = join48(dir, LAST_DRAFT_FILE);
+    if (!lstatSync13(file).isFile()) return null;
+    const r = JSON.parse(readFileSync54(file, "utf8"));
+    const m = r.manifest;
+    if (r.v !== 1 || typeof r.releaseId !== "string" || !m || typeof m.screens !== "object" || !m.screens || typeof m.bundles !== "object" || !m.bundles) return null;
+    return { releaseId: r.releaseId, manifest: m };
+  } catch {
+    return null;
+  }
+}
+function draftChangeNote(dir, input) {
+  try {
+    const entries = readProgress(dir, { all: true }).entries;
+    const previous = [...entries].reverse().find((e) => e.by === "himi" && e.milestone === "draft");
+    const was = lastDraft(dir);
+    const parts = [];
+    if (input.manifest && was) {
+      const d = diffReleases(was.manifest, input.manifest);
+      const added = Object.keys(input.manifest.screens).filter((id) => !(id in was.manifest.screens));
+      const removed = Object.keys(was.manifest.screens).filter((id) => !(id in input.manifest.screens));
+      const changed = d.screens.filter((id) => !added.includes(id));
+      const homeChanged = input.home !== null && changed.includes(input.home);
+      if (changed.length) parts.push(homeChanged ? changed.length === 1 ? "the home screen changed" : `${plural(changed.length, "screen")} changed, the home screen among them` : `${plural(changed.length, "screen")} changed`);
+      if (added.length) parts.push(`${plural(added.length, "screen")} added`);
+      if (removed.length) parts.push(`${plural(removed.length, "screen")} removed`);
+      if (d.tokens) parts.push("the design tokens changed");
+      if (!parts.length) parts.push(d.config ? "no screen changed, the app's settings did" : "no screen changed");
+    } else {
+      if (!previous) return void 0;
+      const shaOf = (i) => i && typeof i === "object" && typeof i.sha256 === "string" ? i.sha256 : void 0;
+      const had = Array.isArray(previous.images) ? previous.images.map(shaOf).find(Boolean) : void 0;
+      const has = input.picture && existsSync48(input.picture) ? sha256Of2(input.picture) : void 0;
+      if (had && has) parts.push(had === has ? "the home screen looks the same" : "the home screen changed");
+      else if (has) parts.push("a home picture this time");
+      else return void 0;
+    }
+    return `Since the last draft: ${parts.join(", ")}.`;
+  } catch {
+    return void 0;
+  }
+}
 function recordInitSource(dir, opts = {}) {
   try {
     const at2 = realDirIn(dir, ".himi");
@@ -49347,7 +49769,7 @@ function recordInitSource(dir, opts = {}) {
       template: opts.template && TEMPLATE_NAME.test(opts.template) ? opts.template : null,
       ...opts.source ? { source: opts.source } : {}
     };
-    writeFileAtomic(join47(dir, INIT_SOURCE_FILE), `${JSON.stringify(record2, null, 2)}
+    writeFileAtomic(join48(dir, INIT_SOURCE_FILE), `${JSON.stringify(record2, null, 2)}
 `);
     return true;
   } catch {
@@ -49355,10 +49777,10 @@ function recordInitSource(dir, opts = {}) {
   }
 }
 function readInitSource(dir) {
-  const file = join47(dir, INIT_SOURCE_FILE);
+  const file = join48(dir, INIT_SOURCE_FILE);
   try {
-    if (!lstatSync12(file).isFile()) return null;
-    const r = JSON.parse(readFileSync53(file, "utf8"));
+    if (!lstatSync13(file).isFile()) return null;
+    const r = JSON.parse(readFileSync54(file, "utf8"));
     if (r.v !== 1 || typeof r.fingerprint !== "string" || !/^[0-9a-f]{64}$/.test(r.fingerprint) || typeof r.newestMs !== "number") return null;
     return {
       v: 1,
@@ -49391,7 +49813,7 @@ function homeShotForPostcard(dir, opts = {}) {
   const shot = homeShotPath(dir, home);
   if (!shot) return { skipped: "the homeScreenId does not name a file under .himi/shots" };
   const render = `\`himi render ${shellQuote(home)} --png\``;
-  if (!existsSync47(shot)) return { skipped: `no home shot yet \u2014 ${render} makes one, and the next postcard carries it` };
+  if (!existsSync48(shot)) return { skipped: `no home shot yet \u2014 ${render} makes one, and the next postcard carries it` };
   let changed;
   try {
     changed = newestSourceChangeMs(dir);
@@ -49399,9 +49821,22 @@ function homeShotForPostcard(dir, opts = {}) {
     changed = void 0;
   }
   if (!shotIsCurrent(shot, changed)) return { skipped: `the home shot is older than the last source change \u2014 ${render} makes a current one` };
-  if (opts.repeatOk) return { image: shot };
+  let pick2 = { image: shot };
+  const landed = shotStateFor(dir, shot);
+  if (landed && landed.state !== "content") {
+    const shows = homeStateCaveat(landed) ?? `the home screen shows its ${landed.state} state`;
+    const content = contentHomePictures(dir, home);
+    const current = content.find((c) => changed !== void 0 && Date.parse(c.at) >= changed);
+    if (!current) {
+      const older = content[0] ? `; the newest home picture with content, ${shellQuote(displayPath(content[0].file))}, predates the last source change` : "";
+      const withData = `\`himi render ${shellQuote(home)} --png --mocks\` paints it from the app's recorded data (dev/net-mocks.json \u2014 \`himi test --record\` writes it), \`himi render ${shellQuote(home)} --png --live\` from the site's`;
+      return { skipped: `the current home picture would contradict a postcard about the app working \u2014 ${shows}${older}. ${withData}; or pass --image to attach it on purpose` };
+    }
+    pick2 = { image: current.file, note: `attached the newest home picture that shows content (recorded ${current.at}), not the current home shot \u2014 in that one ${shows}` };
+  }
+  if (opts.repeatOk) return pick2;
   try {
-    const sha = sha256Of2(shot);
+    const sha = sha256Of2(pick2.image);
     const entries = readProgress(dir, { all: true }).entries;
     const latest = entries[entries.length - 1];
     const shown2 = Array.isArray(latest?.images) && latest.images.some((i) => !!i && typeof i === "object" && i.sha256 === sha);
@@ -49409,13 +49844,31 @@ function homeShotForPostcard(dir, opts = {}) {
   } catch {
     return { skipped: "the home shot could not be read" };
   }
-  return { image: shot };
+  return pick2;
+}
+function contentHomePictures(dir, home) {
+  const out2 = [];
+  const shot = homeShotPath(dir, home);
+  const hist = realDirIn(dir, HISTORY_DIR) ? join48(dir, HISTORY_DIR) : null;
+  for (const r of recordedShots(dir, home)) {
+    if (r.state.state !== "content") continue;
+    for (const file of [shot, hist && join48(hist, `${r.sha256}.png`)]) {
+      try {
+        if (!file || !lstatSync13(file).isFile() || sha256Of2(file) !== r.sha256) continue;
+      } catch {
+        continue;
+      }
+      out2.push({ file, at: r.at });
+      break;
+    }
+  }
+  return out2;
 }
 function readInitWatch(dir) {
-  const file = join47(dir, INIT_WATCH_FILE);
+  const file = join48(dir, INIT_WATCH_FILE);
   try {
-    if (!lstatSync12(file).isFile()) return null;
-    const r = JSON.parse(readFileSync53(file, "utf8"));
+    if (!lstatSync13(file).isFile()) return null;
+    const r = JSON.parse(readFileSync54(file, "utf8"));
     if (r.v !== 1 || typeof r.pid !== "number" || !Number.isInteger(r.pid) || r.pid < 1) return null;
     if (typeof r.url !== "string" || !/^http:\/\/127\.0\.0\.1:\d+\//.test(r.url) || typeof r.board !== "string" || typeof r.log !== "string" || typeof r.startedAt !== "string") return null;
     if (r.root !== runRootId(dir)) return null;
@@ -49440,14 +49893,14 @@ function liveWatchRunning(dir, isAlive = pidAlive, now) {
 }
 function watchReminder(dir, opts = {}) {
   try {
-    if (!existsSync47(join47(dir, "himalaya.content.json"))) return void 0;
+    if (!existsSync48(join48(dir, "himalaya.content.json"))) return void 0;
     const nowDate = opts.now ?? /* @__PURE__ */ new Date();
     const live2 = liveWatch(dir, opts.isAlive, nowDate);
     const now = nowDate.getTime();
-    const file = join47(dir, REMINDERS_FILE);
+    const file = join48(dir, REMINDERS_FILE);
     let last = Number.NaN;
     try {
-      if (lstatSync12(file).isFile()) last = Date.parse(JSON.parse(readFileSync53(file, "utf8")).watch ?? "");
+      if (lstatSync13(file).isFile()) last = Date.parse(JSON.parse(readFileSync54(file, "utf8")).watch ?? "");
     } catch {
     }
     if (Number.isFinite(last) && now - last >= 0 && now - last < WATCH_REMINDER_EVERY_MS) return void 0;
@@ -49458,11 +49911,14 @@ function watchReminder(dir, opts = {}) {
       return `the live preview is running at ${live2.url} (pid ${live2.pid}${live2.by === "init" ? ", started by himi init" : ""}) \u2014 it repaints on every save, and the build board is ${live2.board}; give the owner that link to click around while you work, and do not start another`;
     }
     const content = opts.content ?? displayPath(dir);
-    return `start the live preview and leave it running: \`himi run --watch --content ${shellQuote(content)} &\` (the consent preflight first, if a worker or config calls Wix at boot) \u2014 it repaints on every save; the build board is ${shellQuote(join47(content, ".himi", "studio", "index.html"))}, or /__himi/studio/ on the preview`;
+    return `start the live preview and leave it running: \`himi run --watch --content ${shellQuote(content)} &\` (the consent preflight first, if a worker or config calls Wix at boot) \u2014 it repaints on every save; the build board is ${shellQuote(join48(content, ".himi", "studio", "index.html"))}, or /__himi/studio/ on the preview`;
   } catch {
     return void 0;
   }
 }
+function watchOptOutIgnoredNote(given) {
+  return `${given.join(" and ")} ${given.length > 1 ? "were" : "was"} ignored: the live preview is how the owner watches the build, so it stays running while you work`;
+}
 function watchUrlFor(port, app) {
   const origin = `http://127.0.0.1:${port}`;
   return { url: `${origin}/preview/a/${encodeURIComponent(app)}`, board: `${origin}/__himi/studio/` };
@@ -49489,13 +49945,13 @@ function absoluteLoaderArgs(args, resolveSpec = (spec) => import.meta.resolve(sp
 async function startWatchAtInit(dir, opts) {
   if (opts.source !== "bundled") return { skipped: REMOTE_WATCH_SKIP };
   const env = opts.env ?? process.env;
-  if (envOn(env[NO_WATCH_ENV])) return { skipped: `${NO_WATCH_ENV} is set, so nothing is left running after init` };
   const ci = ciSet(env);
   const underTest = !!env.NODE_TEST_CONTEXT;
   if (opts.noWatch && (ci || underTest)) return { skipped: "--no-watch" };
   if (ci) return { skipped: "the CI environment variable is set, so nothing is left running after init" };
   if (underTest) return { skipped: "running under `node --test`, so nothing is left running after init" };
-  const note = opts.noWatch ? { note: NO_WATCH_IGNORED_NOTE } : {};
+  const given = [...opts.noWatch ? ["--no-watch"] : [], ...envOn(env[LEGACY_NO_WATCH_ENV]) ? [LEGACY_NO_WATCH_ENV] : []];
+  const note = given.length ? { note: watchOptOutIgnoredNote(given) } : {};
   const deps = { ...defaultStartWatchDeps, ...opts.deps };
   const now = opts.now ?? /* @__PURE__ */ new Date();
   const live2 = liveWatch(dir, deps.isAlive, now);
@@ -49514,14 +49970,14 @@ async function startWatchAtInit(dir, opts) {
         { cwd: dir, detached: true, stdio: ["ignore", fd, fd], env: { ...env, HIMI_NO_UPDATE_CHECK: "1" } }
       );
     } finally {
-      closeSync3(fd);
+      closeSync4(fd);
     }
     child.once("error", () => {
     });
     child.unref();
     if (!child.pid) return { skipped: "the live preview did not start (no process) \u2014 start it yourself: `himi run --watch --content <dir> &`", ...note };
     const record2 = { v: 1, pid: child.pid, root: runRootId(dir), url, board, log: WATCH_LOG, startedAt: now.toISOString() };
-    if (realDirIn(dir, ".himi")) writeFileAtomic(join47(dir, INIT_WATCH_FILE), `${JSON.stringify(record2, null, 2)}
+    if (realDirIn(dir, ".himi")) writeFileAtomic(join48(dir, INIT_WATCH_FILE), `${JSON.stringify(record2, null, 2)}
 `);
     return { started: true, pid: child.pid, url, board, log: WATCH_LOG, ...note };
   } catch (e) {
@@ -49536,7 +49992,7 @@ function watchRunning(w) {
 function doNowBlock(opts) {
   const content = displayPath(opts.dir, opts.cwd);
   const home = opts.home ?? "<homeScreenId>";
-  const board = join47(content, ".himi", "studio", "index.html");
+  const board = join48(content, ".himi", "studio", "index.html");
   const running = watchRunning(opts.watch);
   const who = running?.by === "init" ? "init started it" : "already running";
   const watch2 = running ? `${running.url} (${who}; the board: ${running.board}) \u2014 leave it running, and do not start another` : `\`himi run --watch${contentArg(content)} &\` and leave it running (the board: ${shellQuote(board)}, or /__himi/studio/ on the preview)`;
@@ -49555,7 +50011,7 @@ function writeHandoverReel(dir) {
   try {
     if (!realDirIn(dir, ".himi")) return { skipped: ".himi is not a real directory inside the package (a symlink?), so no making-of was written" };
     const { html } = buildReel(dir);
-    const file = join47(dir, ".himi", "making-of.html");
+    const file = join48(dir, ".himi", "making-of.html");
     writeFileAtomic(file, html);
     return { file, hint: `hand ${basename14(file)} to the owner at the handover \u2014 one self-contained page of their app taking shape; send it beside the preview link, never instead of it` };
   } catch (e) {
@@ -49563,11 +50019,11 @@ function writeHandoverReel(dir) {
   }
 }
 function afterHandoverPostcard(dir, opts = {}) {
-  const file = join47(dir, ".himi", "making-of.html");
+  const file = join48(dir, ".himi", "making-of.html");
   let fresh = false;
   try {
-    const st = lstatSync12(file);
-    fresh = st.isFile() && !st.isSymbolicLink() && st.mtimeMs >= statSync11(join47(dir, ".himi", "progress.jsonl")).mtimeMs;
+    const st = lstatSync13(file);
+    fresh = st.isFile() && !st.isSymbolicLink() && st.mtimeMs >= statSync12(join48(dir, ".himi", "progress.jsonl")).mtimeMs;
   } catch {
     fresh = false;
   }
@@ -49575,13 +50031,14 @@ function afterHandoverPostcard(dir, opts = {}) {
   const next = "file" in makingOf ? [`hand the owner the making-of, ${shellQuote(displayPath(makingOf.file))}, beside the preview link \u2014 in your final message and report, never instead of the link`] : [`\`himi studio reel${contentArg(opts.content)}\` writes the making-of to hand the owner beside the preview link (${makingOf.skipped})`];
   return { makingOf, next };
 }
-var contentArg, CONSENT_PREFLIGHT, CONSENT_PREFLIGHT_STEP, REMOTE_FIRST_LOOK_SKIP, FIRST_LOOK_BUDGET_MS, VALIDATE_PICTURE_BUDGET_MS, plural, appName, STILL_BUILDING_AFTER_MS, STILL_BUILDING_MESSAGE, yourFirstLookMessage, homeCaveat, INIT_SOURCE_FILE, STARTING_POINT_REF, TEMPLATE_NAME, sha256Of2, WATCH_REMINDER_EVERY_MS, REMINDERS_FILE, pidAlive, INIT_WATCH_FILE, INIT_WATCH_STARTING_MS, INIT_WATCH_IDLE_MINUTES, WATCH_LOG, NO_WATCH_IGNORED_NOTE, NO_WATCH_ENV, REMOTE_WATCH_SKIP, listenOn, defaultStartWatchDeps, envOn, ciSet;
+var contentArg, CONSENT_PREFLIGHT, CONSENT_PREFLIGHT_STEP, REMOTE_FIRST_LOOK_SKIP, FIRST_LOOK_BUDGET_MS, VALIDATE_PICTURE_BUDGET_MS, plural, appName, STILL_BUILDING_AFTER_MS, STILL_BUILDING_MESSAGE, yourFirstLookMessage, homeCaveat, LAST_DRAFT_FILE, INIT_SOURCE_FILE, STARTING_POINT_REF, TEMPLATE_NAME, sha256Of2, WATCH_REMINDER_EVERY_MS, REMINDERS_FILE, pidAlive, INIT_WATCH_FILE, INIT_WATCH_STARTING_MS, INIT_WATCH_IDLE_MINUTES, WATCH_LOG, NO_WATCH_IGNORED_NOTE, LEGACY_NO_WATCH_ENV, REMOTE_WATCH_SKIP, listenOn, defaultStartWatchDeps, envOn, ciSet;
 var init_milestones = __esm({
   "src/milestones.ts"() {
     init_app_source();
     init_preview();
     init_run_identity();
     init_progress();
+    init_run_watch();
     init_screen_state();
     init_shell_quote();
     init_studio_reel();
@@ -49597,12 +50054,13 @@ var init_milestones = __esm({
     STILL_BUILDING_MESSAGE = "Still building: here's the home screen now.";
     yourFirstLookMessage = (dir) => `First look at your app: ${appName(dir)}'s home screen, with your changes.`;
     homeCaveat = (dir, image) => homeStateCaveat(shotStateFor(dir, image));
-    INIT_SOURCE_FILE = join47(".himi", "init-source.json");
+    LAST_DRAFT_FILE = join48(".himi", "last-draft.json");
+    INIT_SOURCE_FILE = join48(".himi", "init-source.json");
     STARTING_POINT_REF = "starting-point";
     TEMPLATE_NAME = /^[A-Za-z0-9._-]{1,64}$/;
-    sha256Of2 = (file) => createHash27("sha256").update(readFileSync53(file)).digest("hex");
+    sha256Of2 = (file) => createHash27("sha256").update(readFileSync54(file)).digest("hex");
     WATCH_REMINDER_EVERY_MS = 10 * 60 * 1e3;
-    REMINDERS_FILE = join47(".himi", "reminders.json");
+    REMINDERS_FILE = join48(".himi", "reminders.json");
     pidAlive = (pid) => {
       try {
         process.kill(pid, 0);
@@ -49611,12 +50069,12 @@ var init_milestones = __esm({
         return e.code === "EPERM";
       }
     };
-    INIT_WATCH_FILE = join47(".himi", "watch.json");
+    INIT_WATCH_FILE = join48(".himi", "watch.json");
     INIT_WATCH_STARTING_MS = 5 * 60 * 1e3;
     INIT_WATCH_IDLE_MINUTES = 30;
     WATCH_LOG = ".himi/watch.log";
-    NO_WATCH_IGNORED_NOTE = "--no-watch only applies in CI or a test runner; the live preview is how the owner watches the build";
-    NO_WATCH_ENV = "HIMI_NO_WATCH";
+    NO_WATCH_IGNORED_NOTE = watchOptOutIgnoredNote(["--no-watch"]);
+    LEGACY_NO_WATCH_ENV = "HIMI_NO_WATCH";
     REMOTE_WATCH_SKIP = "the template came off the serve plane: the live preview builds and serves its publisher's code on this machine, so init never starts it for one \u2014 read its dev/, config.ts and tier5-src/ first, then start it yourself";
     listenOn = (port) => new Promise((done) => {
       const srv = createServer4();
@@ -50078,8 +50536,8 @@ __export(template_trim_exports, {
   routeMatcher: () => routeMatcher,
   runTemplateTrim: () => runTemplateTrim
 });
-import { cpSync, existsSync as existsSync48, mkdirSync as mkdirSync23, readdirSync as readdirSync26, readFileSync as readFileSync54, renameSync as renameSync5, rmSync as rmSync11, statSync as statSync12, writeFileSync as writeFileSync18 } from "node:fs";
-import { dirname as dirname28, join as join48 } from "node:path";
+import { cpSync, existsSync as existsSync49, mkdirSync as mkdirSync24, readdirSync as readdirSync26, readFileSync as readFileSync55, renameSync as renameSync6, rmSync as rmSync12, statSync as statSync13, writeFileSync as writeFileSync19 } from "node:fs";
+import { dirname as dirname28, join as join49 } from "node:path";
 function routeMatcher(pattern) {
   const detail = /^\^([A-Za-z0-9_]+)\(\?:\[_\/\]\(\.\+\)\)\?\$$/.exec(pattern);
   if (detail) {
@@ -50773,20 +51231,20 @@ function homeModulesPass(app, kept, edited) {
   return { text: patched.src, dropped: patched.droppedModules };
 }
 function listWorkers(dir) {
-  const root = join48(dir, "tier5-src");
-  if (!existsSync48(root)) return { dirs: [], files: {} };
-  const dirs = readdirSync26(root).filter((n) => statSync12(join48(root, n)).isDirectory()).sort();
+  const root = join49(dir, "tier5-src");
+  if (!existsSync49(root)) return { dirs: [], files: {} };
+  const dirs = readdirSync26(root).filter((n) => statSync13(join49(root, n)).isDirectory()).sort();
   const files = {};
   const walk2 = (abs, rel) => {
     for (const name of readdirSync26(abs)) {
       if (name === "node_modules") continue;
-      const p = join48(abs, name);
+      const p = join49(abs, name);
       const r = `${rel}/${name}`;
-      if (statSync12(p).isDirectory()) walk2(p, r);
-      else if (/\.(?:[cm]?[jt]sx?|json)$/.test(name)) files[r] = readFileSync54(p, "utf8");
+      if (statSync13(p).isDirectory()) walk2(p, r);
+      else if (/\.(?:[cm]?[jt]sx?|json)$/.test(name)) files[r] = readFileSync55(p, "utf8");
     }
   };
-  for (const d of dirs) walk2(join48(root, d), `tier5-src/${d}`);
+  for (const d of dirs) walk2(join49(root, d), `tier5-src/${d}`);
   return { dirs, files };
 }
 function csv(v) {
@@ -50809,16 +51267,16 @@ async function runTemplateTrim(req, deps) {
     links = req.links;
   }
   const dir = req.dir;
-  const devPath = join48(dir, "dev/index.ts");
-  const configPath = join48(dir, "config.ts");
-  if (!existsSync48(devPath) || !existsSync48(configPath)) {
+  const devPath = join49(dir, "dev/index.ts");
+  const configPath = join49(dir, "config.ts");
+  if (!existsSync49(devPath) || !existsSync49(configPath)) {
     return refuse3(new TrimRefusal(`${dir} has no dev/index.ts + config.ts \u2014 point --content at an app scaffolded with \`himi init --template\``));
   }
   if (isTemplateSourceTree(dir)) {
     return refuse3(new TrimRefusal(`${dir} is a template source tree (its identity is still __HIMI_APP_*__ sentinels) \u2014 trim the app \`himi init --template\` scaffolds from it, not the template itself`));
   }
-  const dev = readFileSync54(devPath, "utf8");
-  const config = readFileSync54(configPath, "utf8");
+  const dev = readFileSync55(devPath, "utf8");
+  const config = readFileSync55(configPath, "utf8");
   const workers = listWorkers(dir);
   let plan;
   try {
@@ -50828,34 +51286,34 @@ async function runTemplateTrim(req, deps) {
     throw e;
   }
   if (req.dryRun) return { code: 0, result: { ok: true, dryRun: true, ...plan.report, validate: null } };
-  const hadHimi = existsSync48(join48(dir, ".himi"));
-  const backupRel = join48(".himi", "trim-backup", (/* @__PURE__ */ new Date()).toISOString().replace(/[:.]/g, "-"));
-  const backup = join48(dir, backupRel);
+  const hadHimi = existsSync49(join49(dir, ".himi"));
+  const backupRel = join49(".himi", "trim-backup", (/* @__PURE__ */ new Date()).toISOString().replace(/[:.]/g, "-"));
+  const backup = join49(dir, backupRel);
   const originals = [[devPath, "dev/index.ts"], [configPath, "config.ts"]];
   const moved = [];
   const restore = () => {
     for (const [path2, rel] of originals) {
-      const original = readFileSync54(join48(backup, rel));
-      if (!existsSync48(path2) || !readFileSync54(path2).equals(original)) writeFileSync18(path2, original);
+      const original = readFileSync55(join49(backup, rel));
+      if (!existsSync49(path2) || !readFileSync55(path2).equals(original)) writeFileSync19(path2, original);
     }
-    for (const name of [...moved].reverse()) renameSync5(join48(backup, "tier5-src", name), join48(dir, "tier5-src", name));
+    for (const name of [...moved].reverse()) renameSync6(join49(backup, "tier5-src", name), join49(dir, "tier5-src", name));
     moved.length = 0;
   };
   const apply = () => {
-    const moveDir = deps.moveDir ?? renameSync5;
+    const moveDir = deps.moveDir ?? renameSync6;
     for (const name of plan.removedWorkers) {
-      moveDir(join48(dir, "tier5-src", name), join48(backup, "tier5-src", name));
+      moveDir(join49(dir, "tier5-src", name), join49(backup, "tier5-src", name));
       moved.push(name);
     }
-    if (plan.dev !== dev) writeFileSync18(devPath, plan.dev);
-    if (plan.config !== config) writeFileSync18(configPath, plan.config);
+    if (plan.dev !== dev) writeFileSync19(devPath, plan.dev);
+    if (plan.config !== config) writeFileSync19(configPath, plan.config);
   };
   const dropBackup = () => {
-    rmSync11(backup, { recursive: true, force: true });
-    for (const d of [dirname28(backup), join48(dir, ".himi")]) {
-      if (d === join48(dir, ".himi") && hadHimi) break;
+    rmSync12(backup, { recursive: true, force: true });
+    for (const d of [dirname28(backup), join49(dir, ".himi")]) {
+      if (d === join49(dir, ".himi") && hadHimi) break;
       try {
-        if (!readdirSync26(d).length) rmSync11(d, { recursive: true });
+        if (!readdirSync26(d).length) rmSync12(d, { recursive: true });
       } catch {
       }
     }
@@ -50879,9 +51337,9 @@ async function runTemplateTrim(req, deps) {
     return { code: 1, result: { ok: false, error: `${error} (${message}); every file was restored`, rolledBack: true, ...base(validate4) } };
   };
   try {
-    mkdirSync23(join48(backup, "dev"), { recursive: true });
-    for (const [path2, rel] of originals) cpSync(path2, join48(backup, rel));
-    if (plan.removedWorkers.length) mkdirSync23(join48(backup, "tier5-src"), { recursive: true });
+    mkdirSync24(join49(backup, "dev"), { recursive: true });
+    for (const [path2, rel] of originals) cpSync(path2, join49(backup, rel));
+    if (plan.removedWorkers.length) mkdirSync24(join49(backup, "tier5-src"), { recursive: true });
   } catch (e) {
     dropBackup();
     return { code: 1, result: { ok: false, error: `could not back up the app before trimming it (${e.message}); nothing was changed`, rolledBack: true, ...base() } };
@@ -50894,7 +51352,7 @@ async function runTemplateTrim(req, deps) {
   let failure;
   let validate3;
   try {
-    const written = parseApp(readFileSync54(devPath, "utf8"), readFileSync54(configPath, "utf8"));
+    const written = parseApp(readFileSync55(devPath, "utf8"), readFileSync55(configPath, "utf8"));
     const leftovers = leftoverNavRefs(written.nav.value, plan.removedIds);
     if (leftovers.length) failure = { error: "navigation still names screens this trim removed", leftovers };
     else {
@@ -51217,13 +51675,13 @@ __export(eject_exports, {
   EJECTABLE: () => EJECTABLE,
   ejectModule: () => ejectModule
 });
-import { existsSync as existsSync49, mkdirSync as mkdirSync24, readFileSync as readFileSync55, writeFileSync as writeFileSync19 } from "node:fs";
-import { dirname as dirname29, join as join49, relative as relative10, resolve as resolve42, sep as sep13 } from "node:path";
+import { existsSync as existsSync50, mkdirSync as mkdirSync25, readFileSync as readFileSync56, writeFileSync as writeFileSync20 } from "node:fs";
+import { dirname as dirname29, join as join50, relative as relative10, resolve as resolve43, sep as sep14 } from "node:path";
 function locate(repoRootOrCwd, mod) {
-  const inRepo = resolve42(repoRootOrCwd, `stdlib/flows/${mod}/src/index.ts`);
-  if (existsSync49(inRepo)) return { path: inRepo, form: "source" };
-  const dist = resolve42(repoRootOrCwd, `node_modules/@wix/himalaya/dist/${mod}.mjs`);
-  if (existsSync49(dist)) return { path: dist, form: "bundle" };
+  const inRepo = resolve43(repoRootOrCwd, `stdlib/flows/${mod}/src/index.ts`);
+  if (existsSync50(inRepo)) return { path: inRepo, form: "source" };
+  const dist = resolve43(repoRootOrCwd, `node_modules/@wix/himalaya/dist/${mod}.mjs`);
+  if (existsSync50(dist)) return { path: dist, form: "bundle" };
   return null;
 }
 function specifiersFor(mod) {
@@ -51247,8 +51705,8 @@ function ejectModule(opts) {
     };
   }
   const ext = found.form === "source" ? "ts" : "mjs";
-  const target = join49(contentDir2, "tier5-src", "_ejected", `${mod}.${ext}`);
-  mkdirSync24(dirname29(target), { recursive: true });
+  const target = join50(contentDir2, "tier5-src", "_ejected", `${mod}.${ext}`);
+  mkdirSync25(dirname29(target), { recursive: true });
   const banner = `// EJECTED from @wix/himalaya/${mod}. This app owns this file now.
 //
 // Central fixes to @wix/himalaya/${mod} NO LONGER REACH THIS APP \u2014 including any
@@ -51261,17 +51719,17 @@ function ejectModule(opts) {
 // gate still applies. Ejecting buys layout and flow, never the floor.
 
 `;
-  const normalized = readFileSync55(found.path, "utf8").replace(
+  const normalized = readFileSync56(found.path, "utf8").replace(
     /(["'])@himalaya\/([a-z0-9-]+(?:\/[a-z0-9-]+)?)\1/g,
     (_m, q, sub) => `${q}@wix/himalaya/${sub}${q}`
   );
-  writeFileSync19(target, banner + normalized);
+  writeFileSync20(target, banner + normalized);
   const rewired = [];
   for (const f of files) {
-    if (!existsSync49(f)) continue;
-    const before = readFileSync55(f, "utf8");
+    if (!existsSync50(f)) continue;
+    const before = readFileSync56(f, "utf8");
     let after = before;
-    let rel = relative10(dirname29(f), target).split(sep13).join("/").replace(/\.tsx?$/, ".js");
+    let rel = relative10(dirname29(f), target).split(sep14).join("/").replace(/\.tsx?$/, ".js");
     if (!rel.startsWith(".")) rel = `./${rel}`;
     for (const spec of specifiersFor(mod)) {
       const q = spec.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
@@ -51281,7 +51739,7 @@ function ejectModule(opts) {
       );
     }
     if (after !== before) {
-      writeFileSync19(f, after);
+      writeFileSync20(f, after);
       rewired.push(f);
     }
   }
@@ -51389,8 +51847,8 @@ var init_app_map = __esm({
 });
 
 // src/wix-writes.ts
-import { existsSync as existsSync50, readFileSync as readFileSync56 } from "node:fs";
-import { join as join50 } from "node:path";
+import { existsSync as existsSync51, readFileSync as readFileSync57 } from "node:fs";
+import { join as join51 } from "node:path";
 function isProvenRead(method, path2) {
   if (/[#\x00-\x1F\x7F]/.test(path2)) return false;
   const verb = method.toUpperCase();
@@ -51508,11 +51966,11 @@ function parseDataAccess(text8, from) {
 }
 function readDataAccess(dir) {
   for (const name of ["SPEC.md", "MOBILE-UX.md"]) {
-    const p = join50(dir, name);
-    if (!existsSync50(p)) continue;
+    const p = join51(dir, name);
+    if (!existsSync51(p)) continue;
     let text8;
     try {
-      text8 = readFileSync56(p, "utf8");
+      text8 = readFileSync57(p, "utf8");
     } catch {
       continue;
     }
@@ -51625,14 +52083,14 @@ __export(test_exports, {
   scopeDescriptors: () => scopeDescriptors,
   writeRecordedMocks: () => writeRecordedMocks
 });
-import { existsSync as existsSync51, mkdirSync as mkdirSync25, readFileSync as readFileSync57, writeFileSync as writeFileSync20 } from "node:fs";
-import { join as join51, resolve as resolve43 } from "node:path";
+import { existsSync as existsSync52, mkdirSync as mkdirSync26, readFileSync as readFileSync58, writeFileSync as writeFileSync21 } from "node:fs";
+import { join as join52, resolve as resolve44 } from "node:path";
 function readTestConfig(dir) {
-  const p = resolve43(dir, TEST_CONFIG_FILE);
-  if (!existsSync51(p)) return {};
+  const p = resolve44(dir, TEST_CONFIG_FILE);
+  if (!existsSync52(p)) return {};
   let parsed;
   try {
-    parsed = JSON.parse(readFileSync57(p, "utf8"));
+    parsed = JSON.parse(readFileSync58(p, "utf8"));
   } catch (e) {
     throw new Error(`${TEST_CONFIG_FILE} is not valid JSON \u2014 ${e.message}`);
   }
@@ -51679,7 +52137,7 @@ function readTestConfig(dir) {
 function readNetRules(path2) {
   let parsed;
   try {
-    parsed = JSON.parse(readFileSync57(path2, "utf8"));
+    parsed = JSON.parse(readFileSync58(path2, "utf8"));
   } catch (e) {
     throw new Error(`--net ${path2} could not be read as JSON \u2014 ${e.message}`);
   }
@@ -51699,8 +52157,8 @@ function readNetRules(path2) {
 }
 function defaultNetRules(dir) {
   for (const rel of ["dev/net-mocks.json", "tests/net-mocks.json"]) {
-    const p = resolve43(dir, rel);
-    if (existsSync51(p)) {
+    const p = resolve44(dir, rel);
+    if (existsSync52(p)) {
       const rules = readNetRules(p);
       if (rules.length) return { rules, from: rel };
     }
@@ -51716,7 +52174,7 @@ function readCannedResponses() {
   ];
   for (const url of candidates) {
     try {
-      const parsed = JSON.parse(readFileSync57(url, "utf8"));
+      const parsed = JSON.parse(readFileSync58(url, "utf8"));
       const byKey = {};
       for (const [k, v] of Object.entries(parsed)) {
         if (!k.startsWith("//")) byKey[k] = v;
@@ -51803,11 +52261,11 @@ function writeRecordedMocks(opts) {
     };
   }
   const fs = opts.io ?? {
-    mkdir: (p) => mkdirSync25(p, { recursive: true }),
-    write: (p, s) => writeFileSync20(p, s)
+    mkdir: (p) => mkdirSync26(p, { recursive: true }),
+    write: (p, s) => writeFileSync21(p, s)
   };
-  fs.mkdir(join51(opts.dir, "dev"));
-  fs.write(join51(opts.dir, "dev", "net-mocks.json"), JSON.stringify(opts.mocks, null, 2) + "\n");
+  fs.mkdir(join52(opts.dir, "dev"));
+  fs.write(join52(opts.dir, "dev", "net-mocks.json"), JSON.stringify(opts.mocks, null, 2) + "\n");
   return { ok: true, rules, to: "dev/net-mocks.json" };
 }
 function scopeDescriptors(descriptors, requestedIds, invalidScreens) {
@@ -51818,6 +52276,8 @@ async function runShotsPass(opts) {
   const scheme = opts.scheme ?? "light";
   const shots = [];
   for (const baked of opts.descriptors) {
+    let unserved = 0;
+    const isUnserved = opts.deps.isUnserved;
     const state = baked.bundleJs ? await opts.deps.bootAndSnapshotState({
       screenId: baked.screenId,
       descriptor: baked.descriptor,
@@ -51826,10 +52286,20 @@ async function runShotsPass(opts) {
       rules: opts.layers.rules ?? null,
       ...opts.layers.cmsSeed ? { cmsSeed: opts.layers.cmsSeed } : {},
       ...opts.layers.canned ? { canned: opts.layers.canned } : {},
-      ...opts.budgetMs ? { budgetMs: opts.budgetMs } : {}
+      ...opts.budgetMs ? { budgetMs: opts.budgetMs } : {},
+      ...isUnserved ? {
+        transportWrap: (call) => async (method, path2, body) => {
+          try {
+            return await call(method, path2, body);
+          } catch (e) {
+            if (isUnserved(e)) unserved++;
+            throw e;
+          }
+        }
+      } : {}
     }) : null;
     const rr = await opts.deps.renderDescriptorWeb(baked.descriptor, opts.tokens, scheme, false, state, opts.width);
-    if (rr.renderable && rr.html) shots.push({ screenId: baked.screenId, html: rr.html, state: screenStateOf(state, rr.html) });
+    if (rr.renderable && rr.html) shots.push({ screenId: baked.screenId, html: rr.html, state: screenStateOf(state, rr.html, { offline: unserved > 0 }) });
   }
   const pngs = await opts.deps.renderPngBatch(shots.map((x) => ({ html: x.html, scheme, tokens: opts.tokens, ...opts.width ? { width: opts.width } : {} })));
   if (pngs === null) return { dir: opts.outDir, written: [], unavailable: true };
@@ -51883,7 +52353,7 @@ async function runCrawl(opts) {
       for (const d of list) if (d.screenId !== rep.screenId) coveredBy.set(d.screenId, rep.screenId);
     }
   }
-  const net = opts.offline ? null : opts.netPath ? { rules: readNetRules(resolve43(opts.netPath)), from: opts.netPath } : defaultNetRules(opts.dir);
+  const net = opts.offline ? null : opts.netPath ? { rules: readNetRules(resolve44(opts.netPath)), from: opts.netPath } : defaultNetRules(opts.dir);
   const suppressions = opts.config?.skip ?? [];
   const suppressed = [];
   const matchSuppression = (screen, actionId, componentId, invariant) => suppressions.find((s) => (s.screen === void 0 || s.screen === screen) && (s.action === void 0 || s.action === actionId) && (s.component === void 0 || s.component === componentId) && (s.invariant === void 0 || s.invariant === invariant));
@@ -52313,14 +52783,14 @@ var mobile_ux_lint_exports = {};
 __export(mobile_ux_lint_exports, {
   mobileUxIssues: () => mobileUxIssues
 });
-import { existsSync as existsSync52, readFileSync as readFileSync58 } from "node:fs";
-import { join as join52 } from "node:path";
+import { existsSync as existsSync53, readFileSync as readFileSync59 } from "node:fs";
+import { join as join53 } from "node:path";
 function mobileUxIssues(dir, strict) {
-  const file = join52(dir, "MOBILE-UX.md");
-  if (!existsSync52(file)) return [];
+  const file = join53(dir, "MOBILE-UX.md");
+  if (!existsSync53(file)) return [];
   let text8;
   try {
-    text8 = readFileSync58(file, "utf8");
+    text8 = readFileSync59(file, "utf8");
   } catch {
     return [];
   }
@@ -54001,8 +54471,8 @@ __export(functions_exports, {
   resolveFunctionsTarget: () => resolveFunctionsTarget,
   runRemoteFunctionOperation: () => runRemoteFunctionOperation
 });
-import { readFileSync as readFileSync59, existsSync as existsSync53 } from "node:fs";
-import { join as join53, resolve as resolve44 } from "node:path";
+import { readFileSync as readFileSync60, existsSync as existsSync54 } from "node:fs";
+import { join as join54, resolve as resolve45 } from "node:path";
 function resolveFunctionsTarget(input) {
   const explicitUrl = input.functionsUrl?.trim();
   if (explicitUrl) return { mode: "remote", baseUrl: explicitUrl };
@@ -54014,16 +54484,16 @@ function resolveFunctionsTarget(input) {
   return { mode: "local" };
 }
 async function loadFunctionsApp(dir) {
-  const loaded = await loadContent(resolve44(dir));
+  const loaded = await loadContent(resolve45(dir));
   const config = loaded.module.config;
   if (config.kind !== "functions" || !Array.isArray(config.functions?.functions)) {
     throw new Error(`content package "${dir}" is not a functions-only app`);
   }
   const sources = {};
   for (const definition of config.functions.functions) {
-    const source = [".ts", ".js", ".mts", ".mjs"].map((extension) => join53(loaded.dir, "functions", `${definition.name}${extension}`)).find(existsSync53);
+    const source = [".ts", ".js", ".mts", ".mjs"].map((extension) => join54(loaded.dir, "functions", `${definition.name}${extension}`)).find(existsSync54);
     if (!source) throw new Error(`missing source for function ${definition.name}; expected functions/${definition.name}.ts`);
-    sources[definition.name] = readFileSync59(source, "utf8");
+    sources[definition.name] = readFileSync60(source, "utf8");
   }
   const data = config.cms || config.data ? mergeDataResources(config) : void 0;
   const dataErrors = validateDataResources(data, loaded.name).filter((issue2) => issue2.severity === "error");
@@ -54211,30 +54681,30 @@ var init_cli_bridge = __esm({
 });
 
 // src/mcp/file-tools.ts
-import { closeSync as closeSync4, constants, lstatSync as lstatSync13, mkdirSync as mkdirSync26, openSync as openSync3, readdirSync as readdirSync27, readFileSync as readFileSync60, realpathSync as realpathSync7, renameSync as renameSync6, rmSync as rmSync12, statSync as statSync13, writeSync, existsSync as existsSync54 } from "node:fs";
+import { closeSync as closeSync5, constants as constants2, lstatSync as lstatSync14, mkdirSync as mkdirSync27, openSync as openSync4, readdirSync as readdirSync27, readFileSync as readFileSync61, realpathSync as realpathSync8, renameSync as renameSync7, rmSync as rmSync13, statSync as statSync14, writeSync, existsSync as existsSync55 } from "node:fs";
 import { randomBytes as randomBytes4 } from "node:crypto";
-import { dirname as dirname30, isAbsolute as isAbsolute5, join as join54, relative as relative11, resolve as resolve45, sep as sep14 } from "node:path";
+import { dirname as dirname30, isAbsolute as isAbsolute5, join as join55, relative as relative11, resolve as resolve46, sep as sep15 } from "node:path";
 import * as z from "zod";
 function within(root, p) {
-  return p === root || p.startsWith(root.endsWith(sep14) ? root : root + sep14);
+  return p === root || p.startsWith(root.endsWith(sep15) ? root : root + sep15);
 }
 function realish(p) {
   let cur = p;
   const tail = [];
-  while (!existsSync54(cur)) {
+  while (!existsSync55(cur)) {
     const up = dirname30(cur);
     if (up === cur) break;
-    tail.unshift(cur.slice(up.length + (up.endsWith(sep14) ? 0 : 1)));
+    tail.unshift(cur.slice(up.length + (up.endsWith(sep15) ? 0 : 1)));
     cur = up;
   }
-  return join54(realpathSync7(cur), ...tail);
+  return join55(realpathSync8(cur), ...tail);
 }
 function symlinkComponent(base, abs) {
   let cur = base;
-  for (const part of relative11(base, abs).split(sep14).filter(Boolean)) {
-    cur = join54(cur, part);
+  for (const part of relative11(base, abs).split(sep15).filter(Boolean)) {
+    cur = join55(cur, part);
     try {
-      if (lstatSync13(cur).isSymbolicLink()) return relative11(base, cur);
+      if (lstatSync14(cur).isSymbolicLink()) return relative11(base, cur);
     } catch {
       return void 0;
     }
@@ -54242,24 +54712,24 @@ function symlinkComponent(base, abs) {
   return void 0;
 }
 function workspaceRefusal(root, target) {
-  const r = resolve45(root);
-  const t = resolve45(r, target);
-  if (!existsSync54(r)) return `the workspace folder ${r} does not exist`;
-  if (!within(r, t) || !within(realpathSync7(r), realish(t))) return `"${target}" is outside the workspace folder ${r}`;
+  const r = resolve46(root);
+  const t = resolve46(r, target);
+  if (!existsSync55(r)) return `the workspace folder ${r} does not exist`;
+  if (!within(r, t) || !within(realpathSync8(r), realish(t))) return `"${target}" is outside the workspace folder ${r}`;
   const link = symlinkComponent(r, t);
   if (link) return `"${link}" is a symlink \u2014 paths must stay in real folders inside the workspace`;
   return null;
 }
 async function confinedAppDir(args, deps) {
-  const root = resolve45(await deps.defaultDir());
-  const dir = typeof args.dir === "string" && args.dir ? resolve45(root, args.dir) : root;
-  if (!existsSync54(root)) return refuse4("no_workspace", `the workspace folder ${root} does not exist`);
-  if (!within(root, dir) || !within(realpathSync7(root), realish(dir))) return refuse4("outside_workspace", `"${String(args.dir)}" is outside the workspace folder`);
+  const root = resolve46(await deps.defaultDir());
+  const dir = typeof args.dir === "string" && args.dir ? resolve46(root, args.dir) : root;
+  if (!existsSync55(root)) return refuse4("no_workspace", `the workspace folder ${root} does not exist`);
+  if (!within(root, dir) || !within(realpathSync8(root), realish(dir))) return refuse4("outside_workspace", `"${String(args.dir)}" is outside the workspace folder`);
   const link = symlinkComponent(root, dir);
   if (link) return refuse4("outside_workspace", `"${link}" is a symlink \u2014 the app folder must be a real folder in the workspace`);
   const rel = relative11(root, dir);
   if (rel && (isDeniedSourcePath(`${rel}/x`) || isDeniedSourcePath(`${rel.toLowerCase()}/x`))) return refuse4("denied", `"${rel}" is a folder this tool does not touch`);
-  if (!existsSync54(join54(dir, CONTENT_MARKER))) {
+  if (!existsSync55(join55(dir, CONTENT_MARKER))) {
     return refuse4("not_an_app", `"${rel || "."}" is not an app folder (no ${CONTENT_MARKER}) \u2014 see himi_list_apps, or create one with himi_init`);
   }
   return dir;
@@ -54267,19 +54737,19 @@ async function confinedAppDir(args, deps) {
 function onDiskSpelling(abs) {
   let cur = abs;
   const tail = [];
-  while (!existsSync54(cur)) {
+  while (!existsSync55(cur)) {
     const up = dirname30(cur);
     if (up === cur) break;
-    tail.unshift(cur.slice(up.length + (up.endsWith(sep14) ? 0 : 1)));
+    tail.unshift(cur.slice(up.length + (up.endsWith(sep15) ? 0 : 1)));
     cur = up;
   }
-  return join54(realpathSync7.native(cur), ...tail);
+  return join55(realpathSync8.native(cur), ...tail);
 }
 function denied(appDir3, abs) {
   const rel = relative11(appDir3, abs);
   if (isDeniedSourcePath(rel) || isDeniedSourcePath(rel.toLowerCase())) return true;
   try {
-    return isDeniedSourcePath(relative11(realpathSync7.native(appDir3), onDiskSpelling(abs)));
+    return isDeniedSourcePath(relative11(realpathSync8.native(appDir3), onDiskSpelling(abs)));
   } catch {
     return true;
   }
@@ -54288,10 +54758,10 @@ function confinedPath(appDir3, rel) {
   if (typeof rel !== "string" || !rel.trim()) return { error: "a path is required" };
   if (rel.includes("\0")) return { error: "a path may not contain NUL" };
   if (isAbsolute5(rel)) return { error: `"${rel}" is absolute \u2014 give a path inside the app folder` };
-  const abs = resolve45(appDir3, rel);
+  const abs = resolve46(appDir3, rel);
   if (!within(appDir3, abs) || abs === appDir3) return { error: `"${rel}" is outside the app folder` };
   const real = realish(abs);
-  const base = existsSync54(appDir3) ? realpathSync7(appDir3) : realish(appDir3);
+  const base = existsSync55(appDir3) ? realpathSync8(appDir3) : realish(appDir3);
   if (!within(base, real) || real === base) return { error: `"${rel}" is outside the app folder` };
   const link = symlinkComponent(appDir3, abs);
   if (link) return { error: `"${link}" is a symlink, which this tool does not follow` };
@@ -54299,22 +54769,22 @@ function confinedPath(appDir3, rel) {
   return abs;
 }
 function writeNoFollow(appDir3, abs, content) {
-  mkdirSync26(dirname30(abs), { recursive: true });
+  mkdirSync27(dirname30(abs), { recursive: true });
   const before = symlinkComponent(appDir3, abs);
   if (before) throw new Error(`"${before}" became a symlink`);
-  const tmp = join54(dirname30(abs), `.himi-write-${process.pid}-${randomBytes4(6).toString("hex")}.tmp`);
-  const fd = openSync3(tmp, constants.O_WRONLY | constants.O_CREAT | constants.O_EXCL | (constants.O_NOFOLLOW ?? 0), 420);
+  const tmp = join55(dirname30(abs), `.himi-write-${process.pid}-${randomBytes4(6).toString("hex")}.tmp`);
+  const fd = openSync4(tmp, constants2.O_WRONLY | constants2.O_CREAT | constants2.O_EXCL | (constants2.O_NOFOLLOW ?? 0), 420);
   try {
     writeSync(fd, content);
   } finally {
-    closeSync4(fd);
+    closeSync5(fd);
   }
   const link = symlinkComponent(appDir3, abs);
-  if (link || !within(realpathSync7(appDir3), realpathSync7(dirname30(abs)))) {
-    rmSync12(tmp, { force: true });
+  if (link || !within(realpathSync8(appDir3), realpathSync8(dirname30(abs)))) {
+    rmSync13(tmp, { force: true });
     throw new Error(`"${link ?? relative11(appDir3, dirname30(abs))}" changed into a link while writing`);
   }
-  renameSync6(tmp, abs);
+  renameSync7(tmp, abs);
 }
 function listFiles(appDir3) {
   const files = [];
@@ -54322,7 +54792,7 @@ function listFiles(appDir3) {
     const parentRel = relative11(appDir3, d);
     for (const e of readdirSync27(d, { withFileTypes: true }).sort((a, b) => a.name.localeCompare(b.name))) {
       if (e.isSymbolicLink()) continue;
-      const p = join54(d, e.name);
+      const p = join55(d, e.name);
       if (e.isDirectory()) {
         if (isDeniedSourceDir(e.name, parentRel) || isDeniedSourceDir(e.name.toLowerCase(), parentRel)) continue;
         if (!walk2(p)) return false;
@@ -54330,7 +54800,7 @@ function listFiles(appDir3) {
         const rel = relative11(appDir3, p);
         if (isDeniedSourcePath(rel) || isDeniedSourcePath(rel.toLowerCase())) continue;
         if (files.length >= MAX_LISTED) return false;
-        files.push({ path: rel.split(sep14).join("/"), bytes: statSync13(p).size });
+        files.push({ path: rel.split(sep15).join("/"), bytes: statSync14(p).size });
       }
     }
     return true;
@@ -54347,12 +54817,12 @@ function fileTools() {
       annotations: { readOnlyHint: true, destructiveHint: false, idempotentHint: true, openWorldHint: false },
       inputSchema: z.object({}),
       handler: async (_a, d) => {
-        const root = resolve45(await d.defaultDir());
-        if (!existsSync54(root)) return ok({ ok: true, workspace: root, apps: [] });
+        const root = resolve46(await d.defaultDir());
+        if (!existsSync55(root)) return ok({ ok: true, workspace: root, apps: [] });
         const apps = [];
-        if (existsSync54(join54(root, CONTENT_MARKER))) apps.push(".");
+        if (existsSync55(join55(root, CONTENT_MARKER))) apps.push(".");
         for (const e of readdirSync27(root, { withFileTypes: true })) {
-          if (e.isDirectory() && !e.name.startsWith(".") && existsSync54(join54(root, e.name, CONTENT_MARKER))) apps.push(e.name);
+          if (e.isDirectory() && !e.name.startsWith(".") && existsSync55(join55(root, e.name, CONTENT_MARKER))) apps.push(e.name);
         }
         return ok({ ok: true, workspace: root, apps: apps.sort() });
       }
@@ -54366,7 +54836,7 @@ function fileTools() {
       handler: async (a, d) => {
         const app = await confinedAppDir(a, d);
         if (typeof app !== "string") return app;
-        if (!existsSync54(app) || !statSync13(app).isDirectory()) return refuse4("no_app", `no folder at ${app}`);
+        if (!existsSync55(app) || !statSync14(app).isDirectory()) return refuse4("no_app", `no folder at ${app}`);
         return ok({ ok: true, dir: app, ...listFiles(app) });
       }
     },
@@ -54381,10 +54851,10 @@ function fileTools() {
         if (typeof app !== "string") return app;
         const p = confinedPath(app, a.path);
         if (typeof p !== "string") return refuse4("bad_path", p.error);
-        if (!existsSync54(p) || !lstatSync13(p).isFile()) return refuse4("not_found", `no file "${String(a.path)}"`);
-        const size = statSync13(p).size;
+        if (!existsSync55(p) || !lstatSync14(p).isFile()) return refuse4("not_found", `no file "${String(a.path)}"`);
+        const size = statSync14(p).size;
         if (size > MAX_FILE_BYTES) return refuse4("too_large", `"${String(a.path)}" is ${size} bytes \u2014 over the ${MAX_FILE_BYTES}-byte read limit`);
-        return ok({ ok: true, path: a.path, bytes: size, content: readFileSync60(p, "utf8") });
+        return ok({ ok: true, path: a.path, bytes: size, content: readFileSync61(p, "utf8") });
       }
     },
     {
@@ -54408,7 +54878,7 @@ function fileTools() {
           if (typeof p !== "string") refused2.push({ path: f.path, error: p.error });
           else if (typeof f.content !== "string") refused2.push({ path: f.path, error: "content must be text" });
           else if (Buffer.byteLength(f.content) > MAX_FILE_BYTES) refused2.push({ path: f.path, error: `over the ${MAX_FILE_BYTES}-byte limit` });
-          else if (existsSync54(p) && !lstatSync13(p).isFile()) refused2.push({ path: f.path, error: "not a regular file" });
+          else if (existsSync55(p) && !lstatSync14(p).isFile()) refused2.push({ path: f.path, error: "not a regular file" });
           else if (planned.some((q) => q.abs === p)) refused2.push({ path: f.path, error: "the same file twice in one call" });
           else planned.push({ abs: p, rel: String(f.path), content: f.content });
         }
@@ -54441,15 +54911,15 @@ function fileTools() {
         for (const rel of paths) {
           const p = confinedPath(app, rel);
           if (typeof p !== "string") refused2.push({ path: rel, error: p.error });
-          else if (!existsSync54(p)) refused2.push({ path: rel, error: "no such file" });
-          else if (!lstatSync13(p).isFile()) refused2.push({ path: rel, error: "not a regular file" });
+          else if (!existsSync55(p)) refused2.push({ path: rel, error: "no such file" });
+          else if (!lstatSync14(p).isFile()) refused2.push({ path: rel, error: "not a regular file" });
           else if (!planned.includes(p)) {
             planned.push(p);
             deleted.push(rel);
           }
         }
         if (refused2.length) return { ...ok({ ok: false, error: "refused", deleted: [], refused: refused2 }), isError: true };
-        for (const p of planned) rmSync12(p);
+        for (const p of planned) rmSync13(p);
         return ok({ ok: true, dir: app, deleted });
       }
     }
@@ -54472,7 +54942,7 @@ var init_file_tools = __esm({
 
 // src/mcp/tools.ts
 import * as z2 from "zod";
-import { resolve as resolve46 } from "node:path";
+import { resolve as resolve47 } from "node:path";
 function fromCli(r, extra = []) {
   const body = r.json !== void 0 ? JSON.stringify(r.json, null, 2) : r.text.trim();
   const content = [];
@@ -54484,7 +54954,7 @@ ${r.stderr.trim()}`) });
 }
 async function appDir2(args, deps) {
   const base = await deps.defaultDir();
-  return typeof args.dir === "string" && args.dir ? resolve46(base, args.dir) : base;
+  return typeof args.dir === "string" && args.dir ? resolve47(base, args.dir) : base;
 }
 function loginResult(s) {
   switch (s.state) {
@@ -54525,7 +54995,7 @@ function guarded(h) {
       for (const k of PATH_ARGS) {
         const v = args[k];
         if (typeof v !== "string" || !v) continue;
-        const why = workspaceRefusal(deps.workspaceBoundary, resolve46(base, v));
+        const why = workspaceRefusal(deps.workspaceBoundary, resolve47(base, v));
         if (why) return text6(`refused: ${k} ${why}`, true);
       }
     }
@@ -54581,7 +55051,7 @@ function rawTools() {
       }),
       handler: async (a, d) => {
         const base = await d.defaultDir();
-        const parent = typeof a.parentDir === "string" && a.parentDir ? resolve46(base, a.parentDir) : base;
+        const parent = typeof a.parentDir === "string" && a.parentDir ? resolve47(base, a.parentDir) : base;
         return fromCli(await d.runCli(["init", String(a.name), "--dir", parent, ...opt("--template", a.template)]));
       }
     },
@@ -54761,7 +55231,7 @@ ${log}` : ""}`, true);
       handler: async (a, d) => {
         const gate = await requireLogin(d);
         if (gate) return gate;
-        return fromCli(await d.runCli(["share", "--file", resolve46(await d.defaultDir(), String(a.file)), ...opt("--expires-at", a.expiresAt), ...opt("--target", d.login.target())]));
+        return fromCli(await d.runCli(["share", "--file", resolve47(await d.defaultDir(), String(a.file)), ...opt("--expires-at", a.expiresAt), ...opt("--target", d.login.target())]));
       }
     },
     {
@@ -54886,7 +55356,7 @@ __export(server_exports, {
   protectStdout: () => protectStdout,
   startMcpServer: () => startMcpServer
 });
-import { mkdirSync as mkdirSync27, readFileSync as readFileSync61 } from "node:fs";
+import { mkdirSync as mkdirSync28, readFileSync as readFileSync62 } from "node:fs";
 import { fileURLToPath as fileURLToPath21 } from "node:url";
 import { McpServer } from "@modelcontextprotocol/server";
 import { serveStdio, StdioServerTransport } from "@modelcontextprotocol/server/stdio";
@@ -54925,7 +55395,7 @@ async function startMcpServer(opts) {
   const runCli = createCliBridge(opts.run);
   if (opts.workspace) {
     try {
-      mkdirSync27(opts.workspace, { recursive: true });
+      mkdirSync28(opts.workspace, { recursive: true });
     } catch (e) {
       console.error(`[himi mcp] could not create the workspace folder ${opts.workspace}: ${e.message}`);
     }
@@ -54946,7 +55416,7 @@ async function startMcpServer(opts) {
       status: (dir) => previewStatus(dir, previewDeps),
       stop: (dir) => stopPreview(dir, previewDeps)
     },
-    readFile: (p) => readFileSync61(p),
+    readFile: (p) => readFileSync62(p),
     login: createLoginSession({ ...defaultLoginDeps, selfCommand: previewDeps.selfCommand, ...opts.login }),
     ...opts.workspace ? { workspaceBoundary: opts.workspace } : {}
   };
@@ -54990,9 +55460,9 @@ __export(native_decode_exports, {
   runNativeDecode: () => runNativeDecode
 });
 import { execFileSync as execFileSync5, spawnSync as spawnSync2 } from "node:child_process";
-import { existsSync as existsSync55, mkdtempSync as mkdtempSync2, readFileSync as readFileSync62, rmSync as rmSync13, writeFileSync as writeFileSync21 } from "node:fs";
+import { existsSync as existsSync56, mkdtempSync as mkdtempSync2, readFileSync as readFileSync63, rmSync as rmSync14, writeFileSync as writeFileSync22 } from "node:fs";
 import { tmpdir as tmpdir3 } from "node:os";
-import { join as join55 } from "node:path";
+import { join as join56 } from "node:path";
 import { fileURLToPath as fileURLToPath22 } from "node:url";
 function nativeDecodePackageDir() {
   return fileURLToPath22(new URL("../../../core/runtime/ios/HimalayaCore/", import.meta.url));
@@ -55002,8 +55472,8 @@ function nativeDecodeAndroidHarnessDir() {
 }
 function nativeOracleShipped() {
   return {
-    ios: existsSync55(join55(nativeDecodePackageDir(), "Package.swift")),
-    android: existsSync55(join55(nativeDecodeAndroidHarnessDir(), "gradlew"))
+    ios: existsSync56(join56(nativeDecodePackageDir(), "Package.swift")),
+    android: existsSync56(join56(nativeDecodeAndroidHarnessDir(), "gradlew"))
   };
 }
 function detectNativeDecode(options = {}) {
@@ -55014,7 +55484,7 @@ function detectNativeDecode(options = {}) {
     return { platform: "ios", available: false, reason: `the iOS decoder oracle requires macOS (darwin); this host is ${hostPlatform}` };
   }
   if (!swiftAvailable) return { platform: "ios", available: false, reason: "swift is not on PATH" };
-  const packageAvailable = options.packageAvailable ?? existsSync55(join55(packageDir, "Package.swift"));
+  const packageAvailable = options.packageAvailable ?? existsSync56(join56(packageDir, "Package.swift"));
   if (!packageAvailable) {
     return {
       platform: "ios",
@@ -55026,7 +55496,7 @@ function detectNativeDecode(options = {}) {
 }
 function localPropertiesSdk(harnessDir) {
   try {
-    const match = readFileSync62(join55(harnessDir, "local.properties"), "utf8").match(/^sdk\.dir\s*=\s*(.+)$/m);
+    const match = readFileSync63(join56(harnessDir, "local.properties"), "utf8").match(/^sdk\.dir\s*=\s*(.+)$/m);
     return match?.[1]?.trim().replace(/\\([ :\\])/g, "$1") ?? null;
   } catch {
     return null;
@@ -55034,8 +55504,8 @@ function localPropertiesSdk(harnessDir) {
 }
 function detectAndroidNativeDecode(options = {}) {
   const harnessDir = options.harnessDir ?? nativeDecodeAndroidHarnessDir();
-  const gradlew = join55(harnessDir, "gradlew");
-  const gradlewAvailable = options.gradlewAvailable ?? existsSync55(gradlew);
+  const gradlew = join56(harnessDir, "gradlew");
+  const gradlewAvailable = options.gradlewAvailable ?? existsSync56(gradlew);
   if (!gradlewAvailable) {
     return {
       platform: "android",
@@ -55045,7 +55515,7 @@ function detectAndroidNativeDecode(options = {}) {
   }
   const androidHome = options.androidHome ?? process.env.ANDROID_HOME ?? "";
   const sdk = androidHome.trim() || (options.localPropertiesSdk !== void 0 ? options.localPropertiesSdk : localPropertiesSdk(harnessDir));
-  const sdkAvailable = options.sdkAvailable ?? (typeof sdk === "string" && sdk.length > 0 && existsSync55(sdk));
+  const sdkAvailable = options.sdkAvailable ?? (typeof sdk === "string" && sdk.length > 0 && existsSync56(sdk));
   if (!sdkAvailable) {
     return {
       platform: "android",
@@ -55117,14 +55587,14 @@ function parseNativeDecodeOutput(stdout, expectedScreenIds, platform = "ios") {
   return verdicts;
 }
 function runNativeDecode(options) {
-  const descriptorDir = mkdtempSync2(join55(tmpdir3(), "himi-native-decode-"));
+  const descriptorDir = mkdtempSync2(join56(tmpdir3(), "himi-native-decode-"));
   const startedAt = Date.now();
   try {
     for (const descriptor of options.descriptors) {
       if (typeof descriptor.descriptorJson !== "string") {
         throw new Error(`native decode cannot judge ${descriptor.screenId}: the release builder did not return its exact baked JSON bytes`);
       }
-      writeFileSync21(join55(descriptorDir, `${encodeURIComponent(descriptor.screenId)}.json`), descriptor.descriptorJson);
+      writeFileSync22(join56(descriptorDir, `${encodeURIComponent(descriptor.screenId)}.json`), descriptor.descriptorJson);
     }
     options.progress?.("building cached Swift oracle");
     execFileSync5("swift", ["build", "--package-path", options.packageDir, "--product", "himi-decode-oracle"], {
@@ -55136,7 +55606,7 @@ function runNativeDecode(options) {
       encoding: "utf8"
     }).trim();
     options.progress?.(`running real Swift decoder over ${options.descriptors.length} screen${options.descriptors.length === 1 ? "" : "s"}`);
-    const stdout = execFileSync5(join55(binPath, "himi-decode-oracle"), ["--dir", descriptorDir], {
+    const stdout = execFileSync5(join56(binPath, "himi-decode-oracle"), ["--dir", descriptorDir], {
       stdio: ["ignore", "pipe", "pipe"],
       encoding: "utf8"
     });
@@ -55150,19 +55620,19 @@ function runNativeDecode(options) {
     const stderr = failure.stderr ? ` \u2014 ${String(failure.stderr).trim().slice(0, 2e3)}` : "";
     throw new Error(`iOS decoder oracle failed: ${failure.message}${stderr}`);
   } finally {
-    rmSync13(descriptorDir, { recursive: true, force: true });
+    rmSync14(descriptorDir, { recursive: true, force: true });
   }
 }
 function runAndroidNativeDecode(options) {
-  const descriptorDir = mkdtempSync2(join55(tmpdir3(), "himi-native-decode-android-"));
-  const outputPath = join55(descriptorDir, "verdicts.ndjson");
+  const descriptorDir = mkdtempSync2(join56(tmpdir3(), "himi-native-decode-android-"));
+  const outputPath = join56(descriptorDir, "verdicts.ndjson");
   const startedAt = Date.now();
   try {
     for (const descriptor of options.descriptors) {
       if (typeof descriptor.descriptorJson !== "string") {
         throw new Error(`native decode cannot judge ${descriptor.screenId}: the release builder did not return its exact baked JSON bytes`);
       }
-      writeFileSync21(join55(descriptorDir, `${encodeURIComponent(descriptor.screenId)}.json`), descriptor.descriptorJson);
+      writeFileSync22(join56(descriptorDir, `${encodeURIComponent(descriptor.screenId)}.json`), descriptor.descriptorJson);
     }
     options.progress?.(`running real Kotlin decoder over ${options.descriptors.length} screen${options.descriptors.length === 1 ? "" : "s"}`);
     execFileSync5(options.gradlew, [
@@ -55177,7 +55647,7 @@ function runAndroidNativeDecode(options) {
       stdio: ["ignore", "ignore", "pipe"],
       encoding: "utf8"
     });
-    const stdout = readFileSync62(outputPath, "utf8");
+    const stdout = readFileSync63(outputPath, "utf8");
     return {
       platform: "android",
       verdicts: parseNativeDecodeOutput(stdout, options.descriptors.map((descriptor) => descriptor.screenId), "android"),
@@ -55188,7 +55658,7 @@ function runAndroidNativeDecode(options) {
     const stderr = failure.stderr ? ` \u2014 ${String(failure.stderr).trim().slice(0, 2e3)}` : "";
     throw new Error(`Android decoder oracle failed: ${failure.message}${stderr}`);
   } finally {
-    rmSync13(descriptorDir, { recursive: true, force: true });
+    rmSync14(descriptorDir, { recursive: true, force: true });
   }
 }
 function fieldAt(path2) {
@@ -55247,30 +55717,30 @@ __export(browser_authoring_exports, {
 });
 import { createServer as createServer5 } from "node:http";
 import { createHash as createHash30, randomBytes as randomBytes5 } from "node:crypto";
-import { existsSync as existsSync56, readdirSync as readdirSync28, readFileSync as readFileSync63, realpathSync as realpathSync8, statSync as statSync14 } from "node:fs";
-import { join as join56, posix as posix2, relative as relative12, sep as sep15 } from "node:path";
+import { existsSync as existsSync57, readdirSync as readdirSync28, readFileSync as readFileSync64, realpathSync as realpathSync9, statSync as statSync15 } from "node:fs";
+import { join as join57, posix as posix2, relative as relative12, sep as sep16 } from "node:path";
 function humanMs(ms) {
   return ms < 1e3 ? `${ms}ms` : `${Math.round(ms / 1e3)}s`;
 }
 function collectWorkerSources(tier5SrcDir, bundleName) {
-  const root = join56(tier5SrcDir, bundleName);
+  const root = join57(tier5SrcDir, bundleName);
   const files = {};
   const visitedDirs = /* @__PURE__ */ new Set();
   const walk2 = (abs, rel) => {
-    const real = realpathSync8(abs);
+    const real = realpathSync9(abs);
     if (visitedDirs.has(real)) return;
     visitedDirs.add(real);
     for (const name of readdirSync28(abs).sort()) {
-      const childAbs = join56(abs, name);
+      const childAbs = join57(abs, name);
       const childRel = posix2.join(rel, name);
-      if (statSync14(childAbs).isDirectory()) {
+      if (statSync15(childAbs).isDirectory()) {
         walk2(childAbs, childRel);
       } else if (/\.(ts|tsx|js|mjs|json)$/.test(name)) {
-        files[childRel] = readFileSync63(childAbs, "utf8");
+        files[childRel] = readFileSync64(childAbs, "utf8");
       }
     }
   };
-  if (!existsSync56(root)) return null;
+  if (!existsSync57(root)) return null;
   walk2(root, `/tier5-src/${bundleName}`);
   const entry = [`/tier5-src/${bundleName}/index.ts`, `/tier5-src/${bundleName}/index.js`].find((p) => p in files);
   if (!entry) return null;
@@ -55287,20 +55757,20 @@ function collectRelativeSiblings(files, tier5SrcDir) {
       const spec = m[1];
       const virtual = posix2.normalize(posix2.join(dir, spec));
       if (!virtual.startsWith("/tier5-src/")) continue;
-      const onDisk = join56(tier5SrcDir, virtual.slice("/tier5-src/".length));
+      const onDisk = join57(tier5SrcDir, virtual.slice("/tier5-src/".length));
       const candidates = [
         onDisk,
         `${onDisk}.ts`,
         `${onDisk}.js`,
         onDisk.replace(/\.js$/, ".ts"),
-        join56(onDisk, "index.ts"),
-        join56(onDisk, "index.js")
+        join57(onDisk, "index.ts"),
+        join57(onDisk, "index.js")
       ];
       for (const abs of candidates) {
-        if (!existsSync56(abs) || statSync14(abs).isDirectory()) continue;
-        const key2 = `/tier5-src/${relative12(tier5SrcDir, abs).split(sep15).join(posix2.sep)}`;
+        if (!existsSync57(abs) || statSync15(abs).isDirectory()) continue;
+        const key2 = `/tier5-src/${relative12(tier5SrcDir, abs).split(sep16).join(posix2.sep)}`;
         if (key2 in files) break;
-        files[key2] = readFileSync63(abs, "utf8");
+        files[key2] = readFileSync64(abs, "utf8");
         queue.push(key2);
         break;
       }
@@ -55335,7 +55805,7 @@ function collectSdkModules(files, resolveSubpath) {
 function sdkSubpathReader(resolve54) {
   return (sub) => {
     try {
-      return readFileSync63(resolve54(`@wix/himalaya/${sub}`), "utf8");
+      return readFileSync64(resolve54(`@wix/himalaya/${sub}`), "utf8");
     } catch {
       return null;
     }
@@ -55507,8 +55977,8 @@ __export(coverage_exports, {
   suppressedNativeKeys: () => suppressedNativeKeys,
   trendAndStore: () => trendAndStore
 });
-import { existsSync as existsSync57, mkdirSync as mkdirSync28, readFileSync as readFileSync64, writeFileSync as writeFileSync22 } from "node:fs";
-import { dirname as dirname31, join as join57 } from "node:path";
+import { existsSync as existsSync58, mkdirSync as mkdirSync29, readFileSync as readFileSync65, writeFileSync as writeFileSync23 } from "node:fs";
+import { dirname as dirname31, join as join58 } from "node:path";
 function suppressedNativeKeys(oracle) {
   return [...oracle.ios ? [] : ["native-decode|ios"], ...oracle.android ? [] : ["native-decode|android"]];
 }
@@ -55688,11 +56158,11 @@ function assembleLedger(r, options = {}) {
   return out2;
 }
 function trendAndStore(dir, entries, suppressed) {
-  const p = join57(dir, LEDGER_FILE);
+  const p = join58(dir, LEDGER_FILE);
   let previous = null;
   try {
-    if (existsSync57(p)) {
-      const parsed = JSON.parse(readFileSync64(p, "utf8"));
+    if (existsSync58(p)) {
+      const parsed = JSON.parse(readFileSync65(p, "utf8"));
       if (Array.isArray(parsed.keys)) previous = parsed.keys.filter((k) => typeof k === "string");
     }
   } catch {
@@ -55700,8 +56170,8 @@ function trendAndStore(dir, entries, suppressed) {
   const current = entries.map((e) => e.key);
   const stored = [.../* @__PURE__ */ new Set([...current, ...(previous ?? []).filter((key2) => (suppressed ?? []).includes(key2))])];
   try {
-    mkdirSync28(dirname31(p), { recursive: true });
-    writeFileSync22(p, JSON.stringify({ keys: stored, ts: (/* @__PURE__ */ new Date()).toISOString() }, null, 2));
+    mkdirSync29(dirname31(p), { recursive: true });
+    writeFileSync23(p, JSON.stringify({ keys: stored, ts: (/* @__PURE__ */ new Date()).toISOString() }, null, 2));
   } catch {
     return null;
   }
@@ -55731,11 +56201,11 @@ function formatLedger(entries, trend) {
   return out2.join("\n");
 }
 function diffAndStoreObservations(dir, current) {
-  const p = join57(dir, OBS_FILE);
+  const p = join58(dir, OBS_FILE);
   let previous = null;
   try {
-    if (existsSync57(p)) {
-      const parsed = JSON.parse(readFileSync64(p, "utf8"));
+    if (existsSync58(p)) {
+      const parsed = JSON.parse(readFileSync65(p, "utf8"));
       if (parsed.screens && typeof parsed.screens === "object" && !Array.isArray(parsed.screens) && Object.values(parsed.screens).every(
         (v) => Array.isArray(v) && v.every((l) => typeof l === "string")
       )) {
@@ -55745,8 +56215,8 @@ function diffAndStoreObservations(dir, current) {
   } catch {
   }
   try {
-    mkdirSync28(dirname31(p), { recursive: true });
-    writeFileSync22(p, JSON.stringify({ screens: current, ts: (/* @__PURE__ */ new Date()).toISOString() }, null, 2));
+    mkdirSync29(dirname31(p), { recursive: true });
+    writeFileSync23(p, JSON.stringify({ screens: current, ts: (/* @__PURE__ */ new Date()).toISOString() }, null, 2));
   } catch {
     return null;
   }
@@ -55784,8 +56254,8 @@ var LEDGER_FILE, OBS_FILE;
 var init_coverage = __esm({
   "src/coverage.ts"() {
     init_native_decode();
-    LEDGER_FILE = join57(".himi", "test-ledger.json");
-    OBS_FILE = join57(".himi", "test-observations.json");
+    LEDGER_FILE = join58(".himi", "test-ledger.json");
+    OBS_FILE = join58(".himi", "test-observations.json");
   }
 });
 
@@ -55796,11 +56266,11 @@ __export(design_kits_exports, {
   kitsDir: () => kitsDir,
   listKits: () => listKits2
 });
-import { existsSync as existsSync58, readFileSync as readFileSync65, readdirSync as readdirSync29 } from "node:fs";
-import { join as join58, basename as basename15 } from "node:path";
+import { existsSync as existsSync59, readFileSync as readFileSync66, readdirSync as readdirSync29 } from "node:fs";
+import { join as join59, basename as basename15 } from "node:path";
 import { fileURLToPath as fileURLToPath23 } from "node:url";
 function kitsDir() {
-  return KIT_DIR_CANDIDATES.find((p) => existsSync58(p));
+  return KIT_DIR_CANDIDATES.find((p) => existsSync59(p));
 }
 function listKits2() {
   const dir = kitsDir();
@@ -55824,7 +56294,7 @@ In a published @wix/himalaya-cli this is a packaging bug \u2014 the kits should
   if (!kits.includes(name)) {
     return { ok: false, kit: name, kits, problems: [`no design kit named "${name}". Available: ${kits.join(", ")}`] };
   }
-  const raw = readFileSync65(join58(dir, `${name}.json`), "utf8");
+  const raw = readFileSync66(join59(dir, `${name}.json`), "utf8");
   let parsed;
   try {
     parsed = JSON.parse(raw);
@@ -55848,9 +56318,9 @@ var init_design_kits = __esm({
   "src/design-kits.ts"() {
     KIT_DIR_CANDIDATES = [
       // in-repo: tools/himi-cli/src/design-kits.ts → <repo>/stdlib/design-kits/
-      join58(fileURLToPath23(new URL("../../..", import.meta.url)), "stdlib", "design-kits"),
+      join59(fileURLToPath23(new URL("../../..", import.meta.url)), "stdlib", "design-kits"),
       // published CLI: <pkg>/dist/cli.mjs → <pkg>/stdlib/design-kits/
-      join58(fileURLToPath23(new URL("..", import.meta.url)), "stdlib", "design-kits")
+      join59(fileURLToPath23(new URL("..", import.meta.url)), "stdlib", "design-kits")
     ];
   }
 });
@@ -55864,11 +56334,11 @@ __export(assets_exports, {
   removeAssetPayload: () => removeAssetPayload,
   verifyReport: () => verifyReport
 });
-import { readFileSync as readFileSync66 } from "node:fs";
+import { readFileSync as readFileSync67 } from "node:fs";
 import { basename as basename16 } from "node:path";
 function declaredAssets(dir) {
   return collectAssets(dir).map((a) => {
-    const bytes2 = readFileSync66(a.path);
+    const bytes2 = readFileSync67(a.path);
     return {
       name: a.name,
       sha256: assetSha256(bytes2),
@@ -55945,7 +56415,7 @@ function verifyReport(dir, app, manifest) {
   };
 }
 function addAssetPayload(manifest, filePath, opts) {
-  const bytes2 = readFileSync66(filePath);
+  const bytes2 = readFileSync67(filePath);
   const name = opts.name ?? basename16(filePath);
   const sha2565 = assetSha256(bytes2);
   const record2 = {
@@ -57669,9 +58139,9 @@ __export(run_exports, {
   runPackage: () => runPackage,
   withoutProdServe: () => withoutProdServe
 });
-import { cpSync as cpSync2, existsSync as existsSync59, mkdirSync as mkdirSync29, mkdtempSync as mkdtempSync3, readFileSync as readFileSync67, rmSync as rmSync14, statSync as statSync15 } from "node:fs";
+import { cpSync as cpSync2, existsSync as existsSync60, mkdirSync as mkdirSync30, mkdtempSync as mkdtempSync3, readFileSync as readFileSync68, rmSync as rmSync15, statSync as statSync16 } from "node:fs";
 import { networkInterfaces as osNetworkInterfaces, tmpdir as tmpdir4 } from "node:os";
-import { dirname as dirname32, join as join59 } from "node:path";
+import { dirname as dirname32, join as join60 } from "node:path";
 import { fileURLToPath as fileURLToPath24 } from "node:url";
 function makePackageRunHandler(opts) {
   const store = new FileReleaseStore(opts.releaseRoot);
@@ -57699,9 +58169,9 @@ async function fetchBytes(url) {
 }
 async function resolvePackage(source, workDir) {
   const isUrl2 = /^https?:\/\//i.test(source);
-  if (!isUrl2 && existsSync59(source) && statSync15(source).isDirectory()) {
-    const appDirManifest = join59(source, "release-manifest.json");
-    if (existsSync59(appDirManifest)) {
+  if (!isUrl2 && existsSync60(source) && statSync16(source).isDirectory()) {
+    const appDirManifest = join60(source, "release-manifest.json");
+    if (existsSync60(appDirManifest)) {
       const opened2 = openPackageDir(source);
       if (!opened2.validation.ok) {
         throw new Error(`package is not valid:
@@ -57710,11 +58180,11 @@ async function resolvePackage(source, workDir) {
       const app2 = opened2.header?.app ?? opened2.manifest?.app;
       if (!app2) throw new Error(`${source} has no app id (no himi-package.json and no manifest.app)`);
       if (!isSafeAppId(app2)) throw new Error(`${source} declares an unsafe app id ${JSON.stringify(app2)} \u2014 refusing to open it`);
-      const root2 = workDir ?? mkdtempSync3(join59(tmpdir4(), "himi-run-"));
-      const target = join59(root2, app2);
-      if (join59(source) !== target) {
-        mkdirSync29(root2, { recursive: true });
-        rmSync14(target, { recursive: true, force: true });
+      const root2 = workDir ?? mkdtempSync3(join60(tmpdir4(), "himi-run-"));
+      const target = join60(root2, app2);
+      if (join60(source) !== target) {
+        mkdirSync30(root2, { recursive: true });
+        rmSync15(target, { recursive: true, force: true });
         cpSync2(source, target, { recursive: true });
       }
       return {
@@ -57729,12 +58199,12 @@ async function resolvePackage(source, workDir) {
     }
     throw new Error(`${source} is a directory but has no release-manifest.json \u2014 is it a package?`);
   }
-  const bytes2 = isUrl2 ? await fetchBytes(source) : readFileSync67(source);
-  const root = workDir ?? mkdtempSync3(join59(tmpdir4(), "himi-run-"));
+  const bytes2 = isUrl2 ? await fetchBytes(source) : readFileSync68(source);
+  const root = workDir ?? mkdtempSync3(join60(tmpdir4(), "himi-run-"));
   const { app, appDir: appDir3 } = unpackTo(bytes2, root);
   const opened = openPackageDir(appDir3);
   if (!opened.validation.ok) {
-    rmSync14(workDir ? appDir3 : root, { recursive: true, force: true });
+    rmSync15(workDir ? appDir3 : root, { recursive: true, force: true });
     throw new Error(`package is not valid:
   ${opened.validation.errors.join("\n  ")}`);
   }
@@ -57753,14 +58223,14 @@ async function loadPreviewAssets() {
     const mod = await Promise.resolve().then(() => (init_preview_assets_generated(), preview_assets_generated_exports));
     const here = dirname32(fileURLToPath24(import.meta.url));
     const candidates = [
-      join59(here, "preview-assets.generated.bin"),
+      join60(here, "preview-assets.generated.bin"),
       // published: copied next to the bundled CLI
-      join59(here, "../../../packages/serve/src/preview-assets.generated.bin")
+      join60(here, "../../../packages/serve/src/preview-assets.generated.bin")
       // in-repo checkout
     ];
     for (const path2 of candidates) {
-      if (!existsSync59(path2)) continue;
-      const blob = readFileSync67(path2);
+      if (!existsSync60(path2)) continue;
+      const blob = readFileSync68(path2);
       return mod.assemblePreviewAssetsFromBlob(new Uint8Array(blob.buffer, blob.byteOffset, blob.byteLength));
     }
     return /* @__PURE__ */ new Map();
@@ -57808,7 +58278,7 @@ async function runPackage(source, opts = {}) {
   const resolved2 = await resolvePackage(source, opts.workDir);
   const assets = opts.assets ?? (opts.spa ? /* @__PURE__ */ new Map() : await loadPreviewAssets());
   if (!opts.spa && assets.size === 0) {
-    if (resolved2.temp) rmSync14(resolved2.temp, { recursive: true, force: true });
+    if (resolved2.temp) rmSync15(resolved2.temp, { recursive: true, force: true });
     throw new Error(NO_SPA_MESSAGE);
   }
   const plane = makePackageRunHandler({
@@ -57846,7 +58316,7 @@ async function runPackage(source, opts = {}) {
       lanBound = (await listen(lanServer, port, lanHost)).address;
     } catch (e) {
       await closeServer(server);
-      if (resolved2.temp) rmSync14(resolved2.temp, { recursive: true, force: true });
+      if (resolved2.temp) rmSync15(resolved2.temp, { recursive: true, force: true });
       throw new Error(`himi run --lan could not listen on ${lanHost}:${port} (${e.message}); drop --lan, or pass --port for a free one`);
     }
     bound.push(lanBound);
@@ -57868,7 +58338,7 @@ async function runPackage(source, opts = {}) {
     warnings: resolved2.warnings,
     close: async () => {
       await Promise.all(servers.map(closeServer));
-      if (resolved2.temp) rmSync14(resolved2.temp, { recursive: true, force: true });
+      if (resolved2.temp) rmSync15(resolved2.temp, { recursive: true, force: true });
     }
   };
 }
@@ -57889,285 +58359,6 @@ var init_run = __esm({
   }
 });
 
-// src/run-watch.ts
-var run_watch_exports = {};
-__export(run_watch_exports, {
-  ReloadBus: () => ReloadBus,
-  boardFile: () => boardFile,
-  diffReleases: () => diffReleases,
-  himiDir: () => himiDir,
-  ignoredChange: () => ignoredChange,
-  isEmptyDiff: () => isEmptyDiff,
-  rebuildBlocker: () => rebuildBlocker,
-  reloadEvents: () => reloadEvents,
-  removeInitWatchRecord: () => removeInitWatchRecord,
-  removeRunRecord: () => removeRunRecord,
-  serialize: () => serialize,
-  watchContent: () => watchContent,
-  watchFlagConflict: () => watchFlagConflict,
-  watchedContentDir: () => watchedContentDir,
-  writeRunRecord: () => writeRunRecord
-});
-import { closeSync as closeSync5, constants as constants2, existsSync as existsSync60, fstatSync, lstatSync as lstatSync14, statSync as statSync16, mkdirSync as mkdirSync30, openSync as openSync4, readFileSync as readFileSync68, realpathSync as realpathSync9, renameSync as renameSync7, rmSync as rmSync15, writeFileSync as writeFileSync23, watch as fsWatch } from "node:fs";
-import { randomUUID as randomUUID4 } from "node:crypto";
-import { extname as extname4, join as join60, resolve as resolve47, sep as sep16 } from "node:path";
-function diffReleases(prev, next) {
-  const bundles = Object.keys(next.bundles).filter((b) => prev.bundles[b]?.sha256 !== next.bundles[b].sha256).sort();
-  const changedBundles = new Set(bundles);
-  const screens = Object.entries(next.screens).filter(([id, s]) => {
-    const before = prev.screens[id];
-    return !before || before.descriptorHash !== s.descriptorHash || before.bundle !== s.bundle || s.bundle !== null && changedBundles.has(s.bundle);
-  }).map(([id]) => id).sort();
-  const prevIds = Object.keys(prev.screens).sort().join("\n");
-  const nextIds = Object.keys(next.screens).sort().join("\n");
-  return {
-    screens,
-    bundles,
-    tokens: prev.tokensHash !== next.tokensHash,
-    config: prev.appConfigHash !== next.appConfigHash || prevIds !== nextIds
-  };
-}
-function reloadEvents(d) {
-  const out2 = [];
-  if (d.bundles.length) out2.push(["bundle.invalidated", { bundles: d.bundles }]);
-  if (d.screens.length) out2.push(["screen.invalidated", { screenIds: d.screens }]);
-  if (d.tokens) out2.push(["tokens.changed", {}]);
-  if (d.config) out2.push(["config.invalidated", {}]);
-  return out2;
-}
-function ignoredChange(relPath, isDirectory = () => false) {
-  const parts = relPath.split(/[\\/]/).filter(Boolean);
-  if (!parts.length) return true;
-  const [top] = parts;
-  if ([".himi", "dist", "node_modules", ".git", ".build", ...AGENT_TOOLING_DIRS].includes(top)) return true;
-  if (parts.length === 1 && AGENT_TOOLING_ROOT_FILES.includes(top)) return true;
-  if ((top === "shots" || top === "evidence") && (parts.length > 1 || isDirectory(top))) return true;
-  const name = parts[parts.length - 1];
-  return /(^\.#|~$|\.sw[a-p]$|^\.DS_Store$|\.tmp$)/.test(name);
-}
-function watchContent(dir, onChange, opts = {}) {
-  const debounceMs = opts.debounceMs ?? 200;
-  const watch2 = opts.watch ?? ((p, o, l) => fsWatch(p, o, (event, file) => l(event, file === null ? null : String(file))));
-  let timer = null;
-  const pending = /* @__PURE__ */ new Set();
-  const watcher2 = watch2(dir, { recursive: true }, (_event, file) => {
-    if (!file || ignoredChange(file, (rel) => isDir(join60(dir, rel)))) return;
-    pending.add(file);
-    if (timer) clearTimeout(timer);
-    timer = setTimeout(() => {
-      timer = null;
-      const paths = [...pending];
-      pending.clear();
-      onChange(paths);
-    }, debounceMs);
-  });
-  return {
-    close() {
-      if (timer) clearTimeout(timer);
-      watcher2.close();
-    }
-  };
-}
-function watchedContentDir(source) {
-  if (!source || /^https?:\/\//i.test(source)) return null;
-  const dir = resolve47(source);
-  try {
-    return statSync16(dir).isDirectory() && existsSync60(join60(dir, "himalaya.content.json")) ? dir : null;
-  } catch {
-    return null;
-  }
-}
-function watchFlagConflict(opts) {
-  if (opts.source) {
-    return { error: "watch_needs_source", message: "--watch rebuilds a content package on every save, so it cannot watch a packaged release or a URL. Pass the app's directory (the one with himalaya.content.json), --content <dir>, or run it from there with no argument." };
-  }
-  if (opts.browser) {
-    return { error: "watch_with_browser", message: "--watch already opens the app in your browser, so drop --browser. (--browser is a different mode: it runs the whole serve plane inside the tab, leaving no process here to rebuild on save.) Under --watch a site-bound app shows the site's live data on its own." };
-  }
-  if (opts.spa) {
-    return { error: "watch_with_spa", message: "--watch pushes each rebuild to the open tab over this server's own origin, and a hosted SPA (--spa) listens on its origin instead, so it would never repaint. Drop --spa to watch with the bundled web host, or drop --watch." };
-  }
-  return null;
-}
-function rebuildBlocker(outcome, servedMissing) {
-  const failed2 = outcome.failedToBuild[0];
-  if (failed2) return `${failed2.screenId}: ${failed2.error.split("\n")[0]}`;
-  const had = new Set(servedMissing.map((m) => `${m.screen}\0${m.bundle}`));
-  const lost = outcome.missingBundles.find((m) => !had.has(`${m.screen}\0${m.bundle}`));
-  if (lost) return `${lost.screen}: its worker bundle "${lost.bundle}" is referenced but was not built`;
-  return null;
-}
-function serialize(task) {
-  let running = null;
-  let again = false;
-  let stopped = false;
-  const go = () => {
-    if (stopped) return;
-    if (running) {
-      again = true;
-      return;
-    }
-    running = (async () => {
-      try {
-        await task();
-      } finally {
-        running = null;
-        if (again && !stopped) {
-          again = false;
-          go();
-        }
-      }
-    })();
-  };
-  return Object.assign(() => go(), {
-    async stop() {
-      stopped = true;
-      again = false;
-      await running?.catch(() => {
-      });
-    }
-  });
-}
-function himiDir(dir) {
-  const root = join60(dir, ".himi");
-  try {
-    return lstatSync14(root).isDirectory() ? root : null;
-  } catch (e) {
-    if (e.code !== "ENOENT") return null;
-    mkdirSync30(root, { recursive: true });
-    return lstatSync14(root).isDirectory() ? root : null;
-  }
-}
-function writeRunRecord(dir, record2) {
-  const root = himiDir(dir);
-  if (!root) return false;
-  const tmp = join60(root, `.run.json.${process.pid}.${randomUUID4()}.tmp`);
-  try {
-    writeFileSync23(tmp, `${JSON.stringify(record2, null, 2)}
-`, { flag: "wx" });
-    renameSync7(tmp, join60(root, "run.json"));
-  } catch (e) {
-    rmSync15(tmp, { force: true });
-    throw e;
-  }
-  return true;
-}
-function removeRunRecord(dir, owner) {
-  const root = join60(dir, ".himi");
-  try {
-    if (!lstatSync14(root).isDirectory()) return;
-  } catch {
-    return;
-  }
-  if (owner !== void 0) {
-    const bytes2 = readConfined(root, "run.json");
-    let pid;
-    try {
-      pid = bytes2 ? JSON.parse(bytes2.toString("utf8")).pid : void 0;
-    } catch {
-    }
-    if (typeof pid === "number" && pid !== owner) return;
-  }
-  rmSync15(join60(root, "run.json"), { force: true });
-}
-function removeInitWatchRecord(dir, owner) {
-  const root = join60(dir, ".himi");
-  try {
-    if (!lstatSync14(root).isDirectory()) return;
-  } catch {
-    return;
-  }
-  const bytes2 = readConfined(root, "watch.json");
-  if (!bytes2) return;
-  let pid;
-  try {
-    pid = JSON.parse(bytes2.toString("utf8")).pid;
-  } catch {
-    return;
-  }
-  if (pid !== owner) return;
-  rmSync15(join60(root, "watch.json"), { force: true });
-}
-function boardFile(dir, pathname) {
-  if (pathname === RUN_IDENTITY_PATH) {
-    return new Response(JSON.stringify(runIdentity(dir)), { status: 200, headers: { "content-type": "application/json", "cache-control": "no-store" } });
-  }
-  let rel = null;
-  if (pathname === "/__himi/studio/" || pathname === "/__himi/studio/index.html") rel = join60("studio", "index.html");
-  else if (pathname === "/__himi/studio/state.js") rel = join60("studio", "state.js");
-  else if (pathname === "/__himi/studio/timeline.js") rel = join60("studio", "timeline.js");
-  else {
-    const m = /^\/__himi\/history\/([0-9a-f]{64}\.(png|jpg|gif|webp))$/.exec(pathname);
-    if (m) rel = join60("history", m[1]);
-  }
-  if (!rel) return null;
-  const bytes2 = readConfined(resolve47(dir, ".himi"), rel);
-  if (!bytes2) return new Response("not found", { status: 404 });
-  return new Response(bytes2, {
-    status: 200,
-    headers: { "content-type": BOARD_TYPES[extname4(rel)] ?? "application/octet-stream", "cache-control": rel.startsWith("history") ? "public, max-age=31536000, immutable" : "no-store" }
-  });
-}
-function readConfined(root, rel) {
-  try {
-    if (!lstatSync14(root).isDirectory()) return null;
-    const parts = rel.split(sep16);
-    let at2 = root;
-    for (let i = 0; i < parts.length; i++) {
-      at2 = join60(at2, parts[i]);
-      const st = lstatSync14(at2);
-      if (st.isSymbolicLink() || !(i === parts.length - 1 ? st.isFile() : st.isDirectory())) return null;
-    }
-    const canonicalRoot = realpathSync9(root);
-    if (!realpathSync9(at2).startsWith(canonicalRoot + sep16)) return null;
-    const fd = openSync4(at2, constants2.O_RDONLY | (constants2.O_NOFOLLOW ?? 0));
-    try {
-      if (!fstatSync(fd).isFile()) return null;
-      return readFileSync68(fd);
-    } finally {
-      closeSync5(fd);
-    }
-  } catch {
-    return null;
-  }
-}
-var isEmptyDiff, ReloadBus, isDir, BOARD_TYPES;
-var init_run_watch = __esm({
-  "src/run-watch.ts"() {
-    init_source_deny();
-    init_run_identity();
-    isEmptyDiff = (d) => !d.screens.length && !d.bundles.length && !d.tokens && !d.config;
-    ReloadBus = class {
-      subscribers = /* @__PURE__ */ new Set();
-      subscribe(send2) {
-        this.subscribers.add(send2);
-        return () => this.subscribers.delete(send2);
-      }
-      publish(event, data) {
-        for (const send2 of [...this.subscribers]) send2(event, data);
-      }
-      get listeners() {
-        return this.subscribers.size;
-      }
-    };
-    isDir = (path2) => {
-      try {
-        return statSync16(path2).isDirectory();
-      } catch {
-        return false;
-      }
-    };
-    BOARD_TYPES = {
-      ".html": "text/html; charset=utf-8",
-      ".js": "text/javascript; charset=utf-8",
-      ".png": "image/png",
-      ".jpg": "image/jpeg",
-      ".gif": "image/gif",
-      ".webp": "image/webp"
-    };
-  }
-});
-
 // src/run-browser.ts
 var run_browser_exports = {};
 __export(run_browser_exports, {
@@ -72214,7 +72405,8 @@ var BOOLEAN_FLAGS = /* @__PURE__ */ new Set([
   "no-agent",
   "no-first-look",
   "no-image",
-  "no-watch"
+  "no-watch",
+  "mocks"
 ]);
 var SHELL_ENUM = SHELL_NAMES2.join("|");
 var SWITCH_FLAGS = new Set([...BOOLEAN_FLAGS].filter((name) => name !== "deep"));
@@ -72329,7 +72521,8 @@ var USAGE = `himi \u2014 the Himalaya authoring CLI (remote dev loop)
                                            preview itself (\`himi run --watch\`, detached, --no-open, log
                                            .himi/watch.log, stops after 30 idle minutes) and reports
                                            watch: {started, pid, url, board, log} \u2014 or {skipped} for a
-                                           --remote template or a CI environment (CI/scripts: HIMI_NO_WATCH=1)
+                                           --remote template, a CI environment or a test runner. Nothing
+                                           else skips it: outside CI it starts, and watch.note says why
   himi template list [--remote]            list starter templates + metadata (title/description/tags) + each one's start prompt
   himi template prompt <name>              print the prompt that starts an app from that template
   himi template publish [--dir <app>] [--source-dir <dir>] [--name <n>] [--icon <png>] [--visibility public|unlisted]
@@ -72375,7 +72568,9 @@ var USAGE = `himi \u2014 the Himalaya authoring CLI (remote dev loop)
                                            journal a postcard for the owner (.himi/progress.jsonl): what
                                            changed, which journey step, and the image that shows it (copied
                                            into .himi/history/ so later renders cannot replace it). With no
-                                           --image the current home shot is attached (never a stale one;
+                                           --image the current home shot is attached (never a stale one,
+                                           never placeholders or an error screen \u2014 then the newest home
+                                           picture with content, or none, imageNote says which;
                                            --no-image opts out; imageAttached says which; on the
                                            --step review handover card it attaches even as a repeat,
                                            and the output names the making-of to hand over). Bare
@@ -72419,7 +72614,7 @@ var USAGE = `himi \u2014 the Himalaya authoring CLI (remote dev loop)
                                            (--ai writes rows for you to review first)
   himi secrets set|list|rotate --app <app> --name <name> [--environment preview|production]
                                            encrypted secret metadata; set/rotate read the value from stdin
-  himi render <screenId> [--content <dir>] [--scheme dark] [--png [<file>]] [--tree] [--dump-state] [--static] [--live] [--state <json|file>] [--input <json|file>] [--width <px> | --device <name>] [--rtl] [--load-budget <ms>]
+  himi render <screenId> [--content <dir>] [--scheme dark] [--png [<file>]] [--tree] [--dump-state] [--static] [--live] [--mocks] [--state <json|file>] [--input <json|file>] [--width <px> | --device <name>] [--rtl] [--load-budget <ms>]
                                            [--remote --app <app> --release <id>]
                                            headless web render + diagnostics (no sim). Default: local content dir.
                                            A bare --png writes .himi/shots/<screenId>.png (what the build board shows).
@@ -72429,6 +72624,10 @@ var USAGE = `himi \u2014 the Himalaya authoring CLI (remote dev loop)
                                              render LOCALLY with --live (+ --png), not --remote.
                                            --live runs the worker's fetches against REAL Wix (minted visitor token) and awaits
                                            load(), so the render shows LIVE data (needs network + a Wix clientId in config.ts);
+                                           --mocks runs load() against the app's OWN recorded data instead \u2014 dev/net-mocks.json
+                                             (what \`himi test --record\` writes) and the config's cms seed rows, as \`himi test\`'s
+                                             shots do; no request leaves this machine. With none, it renders the initial state.
+                                             The automatic pictures (init's first look, validate's refresh) use it;
                                            --tree adds stable raw structure plus a resolvedRenderTree when hydrated;
                                              --dump-state explicitly includes the full worker snapshot;
                                            --state '{"<svc>":{\u2026}}' injects worker state (render loaded/error states);
@@ -72952,17 +73151,17 @@ WHAT A PATCH DOES NOT CARRY \u2014 all reported in the output, never silent
   himi docs releasing-with-himi-serve`;
 var COMMANDS = [
   { name: "captcha", summary: "create and store native CAPTCHA keys in Serve, or inspect setup status; customer setup verifies Wix site ownership; does not enable member CAPTCHA SDKs", required: "setup|status --app <app> [--content <dir>] [--site <msid>] [--ios-bundle-id <id>] [--android-package-name <id>] [--target <t>]" },
-  { name: "init", summary: "scaffold a starter content package (OTA-only; no native shells). --template <t> starts from a full reference app (branded-lite = consumer storefront over a Wix site; owner-lite = owner CRUD/management) instead of the minimal counter; --templates lists bundled ones; --remote fetches the template off the serve plane (falls back to the bundled copy offline). The new app also gets its agent files (the same set `himi agent-init` writes: AGENTS.md, CLAUDE.md, the himalaya skill, HIMALAYA.md, a SessionStart hook) so the next session started inside it picks the work up; --no-agent skips them. It also makes the build board (.himi/studio/, exactly as `himi studio --no-open` does \u2014 it never opens a browser), so every later render, test, validate, push and progress entry refreshes it; and, for a template bundled with this CLI, it makes the FIRST PICTURE itself (never for a --remote one: that is its publisher's code, and a render runs it on this machine, so next[] leaves the render to the agent after it has read the code): exactly `himi render <homeScreenId> --png --device iphone` (offline \u2014 no request; never --live), run as a child it kills after a time budget, writing .himi/shots/<home>.png and journaling it (by: himi) as the STARTING POINT (\"Starting point: the <template> template, before any of your changes\") so the board and the journal hold a picture when init returns. init also records the source it wrote (.himi/init-source.json: a content fingerprint, Markdown left out), and the first home PNG render after the source diverges from it is journaled once as \"First look at your app\" \u2014 reported as `firstLook: {image}` or `{skipped: <reason>}`, never a failed init; `--no-first-look` skips it (for scripts and CI that render themselves). For a bundled template (never a --remote one \u2014 the preview would build and serve its publisher's code) init also STARTS the live preview itself: `himi run --watch --content <dir> --port <p> --no-open --idle-exit 30`, detached in its own process group with its output in .himi/watch.log, never waited for (the url is chosen before it builds), recorded in .himi/watch.json, and reported as `watch: {started, pid, url, board, log}` \u2014 or `{skipped: <reason>}` for a `CI` environment, a test runner, a watch already running, or a start that failed (never a failed init). The envelope LEADS with `doNow`: three lines to run now (the consent preflight, the live preview \u2014 its url and board when init started it, else `himi run --watch --content <dir> &` with the board's path \u2014 and the postcard line), and ENDS with the same lines as `doNowAgain`, so an agent that reads only the head or only the tail (`| tail`) gets them; at a terminal they are also printed as plain text on stderr, before the JSON and again after it. Its `next[]` LEADS with the steps for THIS session, in this order for every app \u2014 the offline first render and that picture's `himi progress` postcard (only when init could not make the picture), the skill's consent preflight (authorize or mock any Wix or external startup request; with none, go straight on), and only then the live preview (the running one's url, or `himi run --watch &` when init did not start it) \u2014 ahead of the next-session guidance", required: "<name> [--dir] [--template <t>] [--remote] [--no-agent] [--no-first-look] | --templates" },
+  { name: "init", summary: "scaffold a starter content package (OTA-only; no native shells). --template <t> starts from a full reference app (branded-lite = consumer storefront over a Wix site; owner-lite = owner CRUD/management) instead of the minimal counter; --templates lists bundled ones; --remote fetches the template off the serve plane (falls back to the bundled copy offline). The new app also gets its agent files (the same set `himi agent-init` writes: AGENTS.md, CLAUDE.md, the himalaya skill, HIMALAYA.md, a SessionStart hook) so the next session started inside it picks the work up; --no-agent skips them. It also makes the build board (.himi/studio/, exactly as `himi studio --no-open` does \u2014 it never opens a browser), so every later render, test, validate, push and progress entry refreshes it; and, for a template bundled with this CLI, it makes the FIRST PICTURE itself (never for a --remote one: that is its publisher's code, and a render runs it on this machine, so next[] leaves the render to the agent after it has read the code): exactly `himi render <homeScreenId> --png --mocks --device iphone` (offline \u2014 no request; never --live; --mocks loads the app's recorded data when it has any), run as a child it kills after a time budget, writing .himi/shots/<home>.png and journaling it (by: himi) as the STARTING POINT (\"Starting point: the <template> template, before any of your changes\") so the board and the journal hold a picture when init returns. init also records the source it wrote (.himi/init-source.json: a content fingerprint, Markdown left out), and the first home PNG render after the source diverges from it is journaled once as \"First look at your app\" \u2014 reported as `firstLook: {image}` or `{skipped: <reason>}`, never a failed init; `--no-first-look` skips it (for scripts and CI that render themselves). For a bundled template (never a --remote one \u2014 the preview would build and serve its publisher's code) init also STARTS the live preview itself: `himi run --watch --content <dir> --port <p> --no-open --idle-exit 30`, detached in its own process group with its output in .himi/watch.log, never waited for (the url is chosen before it builds), recorded in .himi/watch.json, and reported as `watch: {started, pid, url, board, log}` \u2014 or `{skipped: <reason>}` for a `CI` environment, a test runner, a watch already running, or a start that failed (never a failed init). Nothing else skips it: outside CI it is started, and `watch.note` says an opt-out was ignored. The envelope LEADS with `doNow`: three lines to run now (the consent preflight, the live preview \u2014 its url and board when init started it, else `himi run --watch --content <dir> &` with the board's path \u2014 and the postcard line), and ENDS with the same lines as `doNowAgain`, so an agent that reads only the head or only the tail (`| tail`) gets them; at a terminal they are also printed as plain text on stderr, before the JSON and again after it. Its `next[]` LEADS with the steps for THIS session, in this order for every app \u2014 the offline first render and that picture's `himi progress` postcard (only when init could not make the picture), the skill's consent preflight (authorize or mock any Wix or external startup request; with none, go straight on), and only then the live preview (the running one's url, or `himi run --watch &` when init did not start it) \u2014 ahead of the next-session guidance", required: "<name> [--dir] [--template <t>] [--remote] [--no-agent] [--no-first-look] | --templates" },
   { name: "template", summary: "starter-template catalog + publishing. Every template is a SHOWCASE APP \u2014 a real published release you can open running before you start from it. `list` prints available templates with metadata (title/description/tags) plus each one's start prompt \u2014 pass --remote to include the serve-plane catalog so an agent can pick one; `prompt <name>` prints just that sentence for one template (the skill URL is the public door, or the plane named by --target/--serve-url); `publish` publishes an app AS a `himi init --template` (needs a himalaya.template.json; builds a previewable release + attaches the scaffold source; --source-dir overrides which tree becomes the source, --name sets the template name; bakes a launcher icon \u2014 --icon <png>, or the committed template-icons/<name>.png \u2014 and extracts accent/palette gallery meta from the scaffold's tokens.json; --visibility unlisted keeps it out of the /v1/templates catalog \u2014 templates default to public); `trim --keep <ids>` cuts an app scaffolded from a template down to those screens (the home, and any screen the navigation pins such as a drawer body, always stays) \u2014 it deletes the other SCREENS/TEMPLATED entries whole, prunes navigation (linkableScreens, tabBar, drawer, deep links, surfaces) and drops tier5-src workers no kept screen uses, then runs validate --strict and rolls everything back if it fails (--force keeps it, --dry-run writes nothing). A kept screen that links to a removed one is refused unless --links follow (keep those too) or --links drop (remove the taps)", required: "list [--remote] | prompt <name> | publish [--dir <app>] [--source-dir <dir>] [--name <n>] [--icon <png>] [--visibility public|unlisted] [--target <t>] | trim --keep <id,id,\u2026> [--content <dir>] [--links follow|drop] [--dry-run] [--force]" },
   { name: "build", summary: "compile tier5-src/<name>/index.ts -> dist/bundles/<name>.bundle.js with esbuild (--binary = resolve published @himalaya/*); semantic TypeScript checking belongs to himi validate", required: "[--content <dir>] [--binary]" },
   { name: "functions", summary: "inspect/invoke server functions and operate durable jobs or schedules", required: "list|describe|openapi|invoke | jobs list|get|cancel|retry|dlq | schedule describe|invoke [--app <a>] [--environment preview|production] [--release <id>]" },
   { name: "eject", summary: "take ownership of a shared flow module (auth|checkout|screens): copies its source into tier5-src/_ejected/ and repoints this package's imports at the copy. The ladder's escape hatch \u2014 for when the factory options cannot express what you need. AFTER EJECTING, CENTRAL FIXES NO LONGER REACH THIS APP, including future corrections to the fail-closed entitlement and confirm-the-session rules. The floor is unaffected: credentials still go only through the native auth actions and money only through the cashier rail.", required: "<auth|checkout|screens> [--content <dir>]" },
-  { name: "validate", summary: 'lint the content package (no push): fixed-contract TypeScript checking for tier5-src workers + schema/proto + token refs + component allowlist + $service bindings + strict-enum foot-guns + capability decls + worker boot dry-run + build/compile failures. Type issues are advisory warnings normally; --strict promotes them and hygiene warnings to errors. Exit 1 on any error. Off-repo, the CLI supplies its compiler and SDK declarations. A PASSING validate after a source change also refreshes the home picture: exactly `himi render <homeScreenId> --png --device iphone` (offline, never --live), run as a child it kills after 30 seconds, writing .himi/shots/<home>.png \u2014 whose own postcard logic then journals "First look at your app" or, after ten minutes of postcard silence, "Still building" \u2014 reported as `homePicture: {image}` (with `postcard` when one was journaled) or `{skipped: <reason>}`, never a failed validate. Skipped for a validate with errors, a home shot already current, CI or a test runner, and code nobody asked to run: a --remote template still unchanged since init.', required: "[--content <dir>] [--strict]" },
+  { name: "validate", summary: 'lint the content package (no push): fixed-contract TypeScript checking for tier5-src workers + schema/proto + token refs + component allowlist + $service bindings + strict-enum foot-guns + capability decls + worker boot dry-run + build/compile failures. Type issues are advisory warnings normally; --strict promotes them and hygiene warnings to errors. Exit 1 on any error. Off-repo, the CLI supplies its compiler and SDK declarations. A PASSING validate after a source change also refreshes the home picture: exactly `himi render <homeScreenId> --png --mocks --device iphone` (offline, never --live; with recorded data \u2014 dev/net-mocks.json or cms seed rows \u2014 the picture shows it, and without, its postcard calls it an offline preview), run as a child it kills after 30 seconds, writing .himi/shots/<home>.png \u2014 whose own postcard logic then journals "First look at your app" or, after ten minutes of postcard silence, "Still building" \u2014 reported as `homePicture: {image}` (with `postcard` when one was journaled) or `{skipped: <reason>}`, never a failed validate. Skipped for a validate with errors, a home shot already current, CI or a test runner, and code nobody asked to run: a --remote template still unchanged since init.', required: "[--content <dir>] [--strict]" },
   { name: "test", summary: "DERIVED behavioral crawl \u2014 no test files to write. Boots each screen's real worker, replays its onAppear, then dispatches every action site the descriptor already declares (each from a fresh boot) and checks a narrow set of unambiguous invariants: no uncaught throw, never stuck on `loading`, no `$service:` token or NaN/undefined/[object Object] reaching visible text, no binding aimed at state the worker never defines, no nav param silently dropped, no dead nav target. Catches what validate/render cannot \u2014 a WRONG REDUCER passes both with ok:true. Runs the worker in a DEVICE-PARITY sandbox (no setTimeout/setInterval, as on JSC/WebView) so a bundle that would die on device fails here. Crawls on HERMETIC DATA by default \u2014 zero network: the app's own dev/net-mocks.json first (--net <file> overrides), then the config's CMS `seed:` rows, then a canned fixture of frozen real vertical responses shipped with the CLI (exercises code paths, not API-contract truth) \u2014 so the success/mapping path runs, not just the failure UI. Two boot-only HOSTILE passes (every list empty; every request 500) then check the failure/empty day \u2014 corpus-proven, so their findings are errors. NAV EDGES are followed too: every himi.open site ($item params resolved against row 0 of its list, $service against worker state) and worker _nav directive is harvested, and each baked target is booted WITH the params the source sends \u2014 detail screens finally run their content arm; edge findings are errors tagged edge:<source>. --native runs both real native decoders over the exact baked JSON bytes; --native ios or --native android selects one. It is explicit, runs only from a Himalaya SOURCE CHECKOUT (the decoder oracles are that tree's own HimalayaCore Swift package and Gradle harness, which a published install does not ship), and needs the selected local toolchain. From a source checkout, default runs name missing native verdicts in the coverage ledger; elsewhere the ledger stays silent about them rather than offering a remedy you cannot run. --offline strips all data layers (the old reject-all axis); --no-hostile skips the hostile passes. --record (EXPLICIT, never automatic) refreshes dev/net-mocks.json from live reads first: it boots each screen (load + root onAppear ONLY \u2014 nothing the app's own launch would not fire; the tap/action crawl never sees the live transport, and only proven reads \u2014 GET, or read-shaped POST (/query, /search, /list*, \u2026) \u2014 ever reach the wire), freezes the round-trips, then crawls hermetically on the fresh fixture; record against a QA site, not production. Nodes it cannot judge headless are named, never silently passed. Exit 1 on any error. The CLI carries the authoring runtime off-repo; no per-app SDK install is required. --browser runs the whole loop (build \u2192 extract \u2192 validate \u2192 render \u2192 test) in YOUR browser instead of here, so the source never reaches a pod: it opens one screen's worker + descriptor in a tab, blocks on a loopback callback, and prints the report it posts back. One screen per tab \u2014 name it. --no-open prints the URL rather than launching a browser (SSH); --timeout <ms> bounds the wait, which matters because the page has no execution deadline of its own and an infinite loop in the worker hangs the tab.", required: "[<screenId>\u2026] [--content <dir>] [--net <file>] [--budget <ms>] [--deep [n]] [--record] [--native [ios|android]] [--no-shots] [--offline] [--no-hostile] [--all-screens] [--browser] [--no-open] [--timeout <ms>] [--json]" },
   { name: "ux", summary: "audit or record mobile UX evidence. `audit` checks the public-safe contract, seeded blank acceptance rows, placeholder source copy, app-specific mocks, and iOS/Android audit records. It warns while existing templates migrate; `--strict` promotes missing evidence. `record` stores checks performed on an installed iOS/Android build: `--checks` is required for passed|failed and empty for unavailable, which drove nothing and needs a `--reason` instead. `record` also STAMPS the release it audited (it resolves the id from a build, the same one a push would publish), because an unforced `himi push` of a release with screens refuses when no drive is recorded for THAT release, or when the one that is recorded says `failed` \u2014 the artifact stopped being advice nobody reads (#2955). `unavailable` still satisfies it; only `failed` refuses.", required: "audit [--content <dir>] [--strict] [--json] | record --content <dir> --platform ios|android --status passed|failed|unavailable [--checks back,keyboard,...] [--reason <text>]" },
-  { name: "progress", summary: 'the build JOURNAL an agent keeps for the owner while it works. `himi progress "<what changed>" --step <1-8|name> --image <png>` appends one postcard to .himi/progress.jsonl \u2014 the step is one of the customer journey\'s eight (discover, classify, plan, implement, brand, validate, review, download) \u2014 and COPIES each image, content-addressed, into .himi/history/, because .himi/shots/ is overwritten by every render and cleared by every full `himi test`, so a path into it would later show a different picture than the one the owner was sent. --image repeats. With NO --image, the home screen\'s current shot is attached automatically, only when it is no older than the last source change and not the picture the latest journaled postcard already shows \u2014 except on the HANDOVER card (`--step review`), where a repeat is the point and it attaches anyway; that card\'s output also names the making-of (`makingOf`, .himi/making-of.html, rebuilt when missing or older than the journal so it ends on this card) and its `next` says to hand it to the owner beside the preview link; `imageAttached` in the output says whether the postcard carries a picture (with `imageNote` saying why not), and `--no-image` sends a text-only postcard. --notify also raises a best-effort desktop notification for an owner who stepped away. A bare `himi progress` prints the journal with the current step and elapsed time \u2014 also how an agent recovers its place after its context was compacted. APPROVALS: `--approve <gate> "<what>"` records one the customer just gave (gates: site-create, connect, private-data, draft, promote, push-signing, qa-build) in .himi/approvals.jsonl, and `--done <gate>` / `--drop <gate>` closes it \u2014 an approval is owed until then, and the chat that held it does not survive a new session. `--brief` prints plain text for a session start: the current step, the last postcard, every open approval, and whether this app\'s agent files are stale \u2014 the SessionStart hook `himi agent-init` installs runs exactly this. The CLI also journals milestones by itself \u2014 the first PNG render of the home screen (for an app a current `himi init` started: once as the template\'s "Starting point" while the source is what init wrote, then once as "First look at your app" after it diverges, Markdown edits not counting; once per app otherwise), a `himi test` crawl whose outcome changed since the last one (its counts or its home picture; an identical re-run writes none, and a repeat names what changed: "The home screen changed since the last crawl." or the changed counts, was \u2192 now), every draft push (with the home picture only when that shot is newer than the last source edit \u2014 otherwise the postcard says why and names `himi render <home> --png`), and ONE rule for a long silence: a successful home `render --png` more than ten minutes after the newest postcard of any kind, with a picture the latest postcard does not show, journals "Still building: here\'s the home screen now." with it (never twice within the window). When a crawl\'s or a draft\'s home picture is the first of an app whose source diverged, "First look at your app" is journaled first, from that shot, once. All are marked `"by": "himi"`; they never move the journey step, carry no link or credential, and step aside (folded out of every reader) when the agent journals the same step or picture within five minutes. Local only: nothing is sent anywhere.', required: '["<message>" [--step <1-8|name>] [--image <png>]\u2026 [--no-image] [--notify]] [--content <dir>] | --approve|--done|--drop <gate> ["<note>"] | --brief' },
+  { name: "progress", summary: 'the build JOURNAL an agent keeps for the owner while it works. `himi progress "<what changed>" --step <1-8|name> --image <png>` appends one postcard to .himi/progress.jsonl \u2014 the step is one of the customer journey\'s eight (discover, classify, plan, implement, brand, validate, review, download) \u2014 and COPIES each image, content-addressed, into .himi/history/, because .himi/shots/ is overwritten by every render and cleared by every full `himi test`, so a path into it would later show a different picture than the one the owner was sent. --image repeats. With NO --image, the home screen\'s current shot is attached automatically, only when it is no older than the last source change and not the picture the latest journaled postcard already shows \u2014 and never a shot that landed on loading placeholders, an empty or an error state (.himi/shot-states.json): then the newest home picture of the current source that shows content goes on instead (its .himi/history copy, `imageNote` saying so), or none \u2014 except on the HANDOVER card (`--step review`), where a repeat is the point and it attaches anyway; that card\'s output also names the making-of (`makingOf`, .himi/making-of.html, rebuilt when missing or older than the journal so it ends on this card) and its `next` says to hand it to the owner beside the preview link; `imageAttached` in the output says whether the postcard carries a picture (with `imageNote` saying why not, or which picture went on instead), and `--no-image` sends a text-only postcard. --notify also raises a best-effort desktop notification for an owner who stepped away. A bare `himi progress` prints the journal with the current step and elapsed time \u2014 also how an agent recovers its place after its context was compacted. APPROVALS: `--approve <gate> "<what>"` records one the customer just gave (gates: site-create, connect, private-data, draft, promote, push-signing, qa-build) in .himi/approvals.jsonl, and `--done <gate>` / `--drop <gate>` closes it \u2014 an approval is owed until then, and the chat that held it does not survive a new session. `--brief` prints plain text for a session start: the current step, the last postcard, every open approval, and whether this app\'s agent files are stale \u2014 the SessionStart hook `himi agent-init` installs runs exactly this. The CLI also journals milestones by itself \u2014 the first PNG render of the home screen (for an app a current `himi init` started: once as the template\'s "Starting point" while the source is what init wrote, then once as "First look at your app" after it diverges, Markdown edits not counting; once per app otherwise), a `himi test` crawl whose outcome changed since the last one (its counts or its home picture; an identical re-run writes none, and a repeat names what changed: "The home screen changed since the last crawl." or the changed counts, was \u2192 now), every draft push (with the home picture only when that shot is newer than the last source edit \u2014 otherwise the postcard says why and names `himi render <home> --png`), and ONE rule for a long silence: a successful home `render --png` more than ten minutes after the newest postcard of any kind, with a picture the latest postcard does not show, journals "Still building: here\'s the home screen now." with it (never twice within the window). When a crawl\'s or a draft\'s home picture is the first of an app whose source diverged, "First look at your app" is journaled first, from that shot, once. All are marked `"by": "himi"`; they never move the journey step, carry no link or credential, and step aside (folded out of every reader) when the agent journals the same step or picture within five minutes. Local only: nothing is sent anywhere.', required: '["<message>" [--step <1-8|name>] [--image <png>]\u2026 [--no-image] [--notify]] [--content <dir>] | --approve|--done|--drop <gate> ["<note>"] | --brief' },
   { name: "studio", summary: "open the BUILD BOARD \u2014 one local page the owner can leave open while an agent builds their app, which fills itself in: every screen as it renders (NEW/CHANGED badges, and each earlier version kept for a filmstrip), the journey stepper and the latest postcard from `himi progress`, the validate/test/UX/draft checks as they run, the site next to the app's home screen with its palette, and the navigation the test crawl followed. Writes .himi/studio/index.html and opens it; the page re-reads its state every two seconds, so nothing needs to be served. OPT-IN BY EXISTENCE: until this command (or `himi init`, which makes the board for every app it creates, without opening a browser) has run, no other command touches .himi/studio/ \u2014 after it, render/test/validate/push/icon/site/ux/progress each refresh the board as they finish (best-effort; never fails a command). Every image is a content-addressed copy in .himi/history/, never a live path into .himi/shots/. Local only, no secrets: it never reads a preview token, handover code or control token. --no-open prints the path instead (SSH, CI). `himi studio reel` writes the MAKING-OF: one self-contained HTML file (every image inlined, nothing fetched) with a flipbook of the home screen version by version, captioned by the postcard in effect at the time, the final screens, and every postcard \u2014 sized to stay attachable, thinning frames first. Defaults to .himi/making-of.html (never archived by push), which every successful `himi push --draft` also rebuilds and names as `reel` in its output; --out to put it elsewhere. The output names that file as the one to hand the owner (`handover: {file, hint}` in JSON; two plain lines at a terminal) \u2014 beside the preview link, never instead of it.", required: "[--content <dir>] [--no-open] | reel [--out <file>] [--no-open]" },
-  { name: "render", summary: "headless-render a screen with the web renderer: render-tree + diagnostics, optional --png [<file>] (bare: .himi/shots/<id>.png, what the build board shows), --scheme dark, --tree. Local by default (content dir). Pass --remote --app --release to hit GET /v1/preview/\u2026/render on the serve plane after a push. Boots the worker so $service bindings resolve; --static raw bindings; --live real Wix fetches; --state injects worker state; --input supplies pre-boot navigation params; --width/--device for PNG viewport; --rtl for dir=rtl + $env:isRTL.", required: "<screenId> [--content <dir>] [--scheme dark] [--png [<file>]] [--tree] [--static] [--live] [--state <json|file>] [--input <json|file>] [--width <px> | --device <name>] [--rtl] [--remote --app --release]" },
+  { name: "render", summary: "headless-render a screen with the web renderer: render-tree + diagnostics, optional --png [<file>] (bare: .himi/shots/<id>.png, what the build board shows), --scheme dark, --tree. Local by default (content dir). Pass --remote --app --release to hit GET /v1/preview/\u2026/render on the serve plane after a push. Boots the worker so $service bindings resolve; --static raw bindings; --live real Wix fetches; --mocks runs load() against the app's own recorded data (dev/net-mocks.json from `himi test --record`, then the config's cms seed rows \u2014 hermetic, never a request; with neither it paints the initial state, and `mocks: {used: false}` says why), which is what the automatic pictures use, so they show the app's content instead of its offline placeholders; --state injects worker state; --input supplies pre-boot navigation params; --width/--device for PNG viewport; --rtl for dir=rtl + $env:isRTL.", required: "<screenId> [--content <dir>] [--scheme dark] [--png [<file>]] [--tree] [--static] [--live] [--mocks] [--state <json|file>] [--input <json|file>] [--width <px> | --device <name>] [--rtl] [--remote --app --release]" },
   { name: "cms", summary: "inspect, provision, and seed the app's CMS (Wix Data) collections, declared as a `cms` block in config.ts. `query` is READ-ONLY \u2014 by default it fetches ONLY the physical ids `config.ts` declares (item counts + schema drift) and reports `siteScanned: false`; it never lists the site, so an UNDECLARED `himi_<app>_` collection this app owns is not reached without `--all`. `--all` SCANS the site \u2014 every collection it lists is labeled `owned`/`adopted`/`foreign`, and it describes every foreign one \u2014 id, non-system field keys + types, and the site's read role \u2014 so an app with no `cms` block at all can DISCOVER a collection to adopt (`--all` is the one case where a missing `cms` block is not 'nothing to do'). Foreign collections are described up to a cap and are never item-counted (`itemCount: null`), because a row count is one query each; `foreign.count` is how many the scan LISTED \u2014 it follows the list endpoint's pages, and `listingIncomplete: true` says when the walk stopped short of the end, with `unlistedCollections` counting what it left out when Wix gave a paging total \u2014 and `foreign.truncated` says how many of those went undescribed, each still NAMED in `foreign.others` (id + displayName), so a collection the site already has is never hidden behind the cap. The scan is OWNER-scoped \u2014 it needs --site <msid> (or WIX_SITE_ID) plus owner auth via `wix token`; a visitor token can read a public collection's ITEMS but can never enumerate collections, so there is no tokenless discovery path. `create` reconciles declared collections additively and idempotently, and REFUSES any id outside the app's `himi_<app>_` namespace, so it is safe against a production site. It reports declared-vs-site `permissionDrift` but never writes permissions unless asked with --apply-permissions, so a field reconcile can't silently revert access control changed in the dashboard. `seed` inserts the git-tracked `seed:` rows into EMPTY owned collections (--force to add to a non-empty one; --ai writes placeholder rows plus a refinement prompt for you to review). Adopted collections (declared by `wixId`) are read-only and never created, updated, or seeded. Site from --site <msid> or WIX_SITE_ID; owner auth via `wix token`.", required: "query|create|seed [--site <msid>] [--content <dir>] [--all] [--dry-run] [--force] [--allow-destructive] [--apply-permissions] [--only <id>] [--ai] [--count <n>]" },
   { name: "data", summary: "read-only plan or explicitly provision/seed declared KV and Wix Data resources. Preview and production are separate scopes. KV administration uses the operator data plane from --data-url/HIMI_DATA_ADMIN_URL and HIMI_DATA_ADMIN_TOKEN; draft push never calls it.", required: "plan|create|seed [--site <msid>] [--environment preview|production] [--content <dir>] [--data-url <url>] [--dry-run] [--force]" },
   { name: "icons", summary: "list the valid Icon.name vocabulary (an unknown name renders a fallback glyph; validate warns on unknown names) (offline)", required: "[--json]" },
@@ -72973,7 +73172,7 @@ var COMMANDS = [
   { name: "site", summary: "PROVISION a Wix project, then analyze or extend it. `create` is the one door that makes a site instead of adopting one: POST /funnel/projects/v1/create (a WIX site, a HEADLESS backend, a BRANDED_APP, or a VIBE site), and for headless it also mints the OAuth app whose id IS the `WIX_CLIENT_ID` \u2014 with --redirect-uri already registered, because an unregistered redirect makes native signInDirect fail at redirect-session. `--verticals` REQUIRES `--template` and reports only what Wix confirmed: measured, installing onto a project created from the BLANK template returns 200 while the vertical's API answers 428 forever, because there is no site for it to attach to (the install asks for CREATE_SITE). A real template ships its verticals installed and populated, and installing further ones onto it then works. It MUTATES your Wix account and needs --yes; without it you get the payload and nothing is sent. `list` is the read-only site inventory (with each site's premium flag, which is what explains an installed-but-428 vertical). Auth is the account-scoped `wix token` (no --site), falling back to WIX_API_KEY + WIX_ACCOUNT_ID. `client` is the same OAuth step for a site that ALREADY exists \u2014 the one himi adopts rather than makes \u2014 so a clientId no longer means a manual trip to the dashboard: `client ensure` reconciles rather than mints, because a site can already carry a client with NO registered redirect and shipping that one fails signInDirect at runtime; it reuses a client that carries --redirect-uri, PATCHes one that matches --name but lacks it (unioning, so another app's redirect survives), and creates only when there is nothing to reuse (--new forces a fresh one). --name IS the idempotency key. `client` auth is SITE-scoped (`wix token --site <msid>`) because minting is owner-of-that-site, and --yes gates every mutation: a site that already has a usable client resolves WITHOUT it, but --write-provisioning needs --yes even then because it rewrites a manifest on disk (the dry run's planned.provisioning names the file). That query endpoint IGNORES paging (measured: query.paging, cursorPaging and a top-level paging all return the full set at offset 0), so when pagingMetadata reports more clients than came back, `ensure` REFUSES EVERY outcome \u2014 create, patch AND reuse. Reuse is refused too because pickClient breaks ties on the OLDEST createdDate, so an omitted older same-named MOBILE client with the same redirect would win a later complete read and the resolved clientId would MOVE between runs \u2014 and it gets written into provisioning.json; convergence is what makes a stray duplicate untidy rather than harmful. --name cannot narrow the query (no filter is sent; the name is applied to the rows after they arrive), so the recovery is the dashboard; --new skips the query entirely. A `patched` result is verified against what Wix STORED \u2014 the redirect list is read off the PATCH response, and re-read via GET when the response omits it, because falling back to the list himi just sent would make the guard pass vacuously on exactly the silent no-op it exists to catch. `client list` is the read-only inventory of a site's clients: act on its `shippable` column rather than `hasRedirect`, because shippable ALSO requires a MOBILE applicationType and `ensure` refuses a WEB client \u2014 a WEB one carrying your redirect looks right and is not a candidate \u2014 and it sets truncated:true rather than presenting a partial inventory as the whole one. `analyze --read-only` returns API-only generation context as JSON (identity, access probes, CMS permissions and selected redacted Velo source); it needs no URL/browser and never uploads or applies anything. `analyze` reads a site into a business-book folder (REST + Playwright, GET-only); `--url` alone is the visitor-only pass over the published pages, and `--client-id` adds the vertical probes and the app binding `--apply` requires; `site function` list/get/put/publish/invokes that site's Velo HTTP functions and is not `himi functions` (serve-plane jobs). `--apply` bakes into a brandable shell (a site shell needs no `--client-id`: it is visitor-only and binds no client); `--shell` takes the same names `himi dist --shell` does and defaults to branded-lite, and a shell that ships no prepare:customer is refused by name rather than half-built. `--shell brandy` (the site shell, RFC 0062) also derives the site's page map from its published pages and header menu \u2014 Home first, up to four tabs for the pages a visitor returns to, the rest in the drawer \u2014 into the overlay's `site` block, so it can be edited before `--apply`; only a site shell ever receives that block. It never overwrites any shell's committed apps/<shell>/provisioning.json.", required: "create <name> [--type wix|headless|branded-app|vibe] [--template <guid>] [--verticals stores,bookings,\u2026] [--folder <guid>] [--redirect-uri <uri>] [--no-oauth-app] [--write-provisioning [path]] [--site-url <url>] [--json] --yes | list | client ensure|list --site <msid> [--name <name>] [--redirect-uri <uri>] [--new] [--write-provisioning [path]] [--site-url <url>] [--json] --yes | analyze --read-only [--site <msid>] [--client-id <id>] [--json] | analyze --url <https> [--client-id <id>] [--site <msid>] [--out <dir>] [--redirect-uri <uri>] [--apply] [--shell " + SHELL_ENUM + "] | function list|get|put|publish|invoke [--site <msid>] [--url <https>] [--method GET|POST|PUT|DELETE] [--source <file>] [--body <json>] [--publish] [--invoke]" },
   { name: "doctor", summary: 'off-VPN preflight in one shot: probe the PUBLIC data plane (www.wixapis.com \u2014 reachable off-VPN), the INTERNAL serve/control plane for the selected target (VPN-gated), and report auth state (dpx session on disk + stored control token). --dpx additionally runs a live, EADDRINUSE-safe `dpx whoami`. Machine-readable with --json (an unreachable internal plane carries a stable code:"needs_vpn" so an agent branches on the code, not the prose); human-readable otherwise. Never loads the authoring runtime \u2014 works off-repo.', required: "[--target <t>] [--dpx] [--json] [--data-url <url>] [--timeout <ms>]" },
   { name: "upgrade", summary: "install the newest published CLI (`npm i -g @wix/himalaya-cli@latest`) and report what moved. This is the explicit door: himi also updates itself when the running build is more than a week old \u2014 unattended it just does it and re-runs your command, at a terminal it asks first \u2014 and `HIMI_NO_UPDATE_CHECK=1` turns that off, leaving this command as the way to catch up. Reports `unchanged` rather than claiming success when npm exits 0 without moving the version, which is what a registry mirror serving its own pinned copy looks like.", required: "[--json]" },
-  { name: "push", summary: "lint + build + publish a release (default --draft: servable via ?release= but NOT live). REFUSES to publish on any error unless --force; --strict promotes warnings. Prints preview + agent-context links. A successful draft push also rebuilds the making-of (.himi/making-of.html, local and offline) and names it as `reel` \u2014 the file to hand the owner beside the preview link. Its postcard carries the home shot only when that shot is newer than the last source edit; otherwise the postcard says why and names `himi render <home> --png`, and the envelope's `postcardPicture: {skipped, render}` leads next[] with that render (the push never renders it itself). The published slug is NAMESPACED per owner \u2014 `<ownerPrefix>.<name>`, composed offline from the control token's ownerPrefix claim, so the CLI and the server derive the identical string and himalaya.content.json is NOT rewritten (a legacy token with no ownerPrefix publishes the declared name unchanged). An app claimed BEFORE namespacing is stored under its FLAT slug, so the claim route answers `alreadyYours` naming that slug and the push adopts it \u2014 reported as `adoptedSlug`, since it is the one case where the published `app` differs from what the declared name composes to. `--no-claim` skips the route that knows this, so a pre-namespacing app pushed with it still fails 403. --visibility public|unlisted decides whether /v1/apps + the Himi Player picker LIST the app (also declarable as `visibility` in himalaya.content.json; omitted, a brand-new app defaults to unlisted \u2014 share by link \u2014 and an existing setting is kept). --account-id names which account owns the app when your Wix session resolves to several (the auto-claim of a brand-new slug cannot guess \u2014 without it a multi-account caller is told to name one). An unforced push of a release that carries SCREENS also refuses when `.himi/ux-audit.json` holds no mobile-UX drive recorded against that release id, or holds one that FAILED (#2955) \u2014 a published draft IS the owner-private preview a customer is handed; `himi ux record` clears it and `--force` overrides it, which the success envelope then says out loud. `--only <selector>` publishes ONLY the named items as a release derived from the app's live release (or `--from-release <id>`), running the identical build + lint gate and simply publishing less; it requires an explicit `--draft` or `--live` because a partial publish has no safe default, never claims a slug, and carries neither attestation nor a source archive (both named in the output). Selectors are comma-separated in ONE `--only`: `changed` (every item whose bytes differ from the base), `screen:<id|glob>`, `bundle:<name>`, `tokens`, `app-config` \u2014 a selected screen drags its logic bundle and a selected bundle drags the screens that reference it, or the bytes land under a key nothing reads.", required: "[--content <dir>] [--draft] [--live] [--force] [--strict] [--label] [--notes] [--visibility public|unlisted] [--no-claim] [--account-id <id>] [--only <selector>] [--from-release <id>] [--accept-regressions] [--accept-partial] [--app <slug>] (--control-token)" },
+  { name: "push", summary: "lint + build + publish a release (default --draft: servable via ?release= but NOT live). REFUSES to publish on any error unless --force; --strict promotes warnings. Prints preview + agent-context links. A successful draft push also rebuilds the making-of (.himi/making-of.html, local and offline) and names it as `reel` \u2014 the file to hand the owner beside the preview link. Its postcard carries the home shot only when that shot is newer than the last source edit; a repeat draft's postcard adds what changed since the last one (\"Since the last draft: the home screen changed.\", from the release manifests' screen hashes, remembered in .himi/last-draft.json); otherwise the postcard says why and names `himi render <home> --png`, and the envelope's `postcardPicture: {skipped, render}` leads next[] with that render (the push never renders it itself). The published slug is NAMESPACED per owner \u2014 `<ownerPrefix>.<name>`, composed offline from the control token's ownerPrefix claim, so the CLI and the server derive the identical string and himalaya.content.json is NOT rewritten (a legacy token with no ownerPrefix publishes the declared name unchanged). An app claimed BEFORE namespacing is stored under its FLAT slug, so the claim route answers `alreadyYours` naming that slug and the push adopts it \u2014 reported as `adoptedSlug`, since it is the one case where the published `app` differs from what the declared name composes to. `--no-claim` skips the route that knows this, so a pre-namespacing app pushed with it still fails 403. --visibility public|unlisted decides whether /v1/apps + the Himi Player picker LIST the app (also declarable as `visibility` in himalaya.content.json; omitted, a brand-new app defaults to unlisted \u2014 share by link \u2014 and an existing setting is kept). --account-id names which account owns the app when your Wix session resolves to several (the auto-claim of a brand-new slug cannot guess \u2014 without it a multi-account caller is told to name one). An unforced push of a release that carries SCREENS also refuses when `.himi/ux-audit.json` holds no mobile-UX drive recorded against that release id, or holds one that FAILED (#2955) \u2014 a published draft IS the owner-private preview a customer is handed; `himi ux record` clears it and `--force` overrides it, which the success envelope then says out loud. `--only <selector>` publishes ONLY the named items as a release derived from the app's live release (or `--from-release <id>`), running the identical build + lint gate and simply publishing less; it requires an explicit `--draft` or `--live` because a partial publish has no safe default, never claims a slug, and carries neither attestation nor a source archive (both named in the output). Selectors are comma-separated in ONE `--only`: `changed` (every item whose bytes differ from the base), `screen:<id|glob>`, `bundle:<name>`, `tokens`, `app-config` \u2014 a selected screen drags its logic bundle and a selected bundle drags the screens that reference it, or the bytes land under a key nothing reads.", required: "[--content <dir>] [--draft] [--live] [--force] [--strict] [--label] [--notes] [--visibility public|unlisted] [--no-claim] [--account-id <id>] [--only <selector>] [--from-release <id>] [--accept-regressions] [--accept-partial] [--app <slug>] (--control-token)" },
   { name: "pack", summary: 'write the app as a PORTABLE .himi package \u2014 one self-contained file holding every screen, Tier-5 bundle, token, asset and the app-config. Packages are live by default: they boot bundled content offline, then Himi Player follows its baked-in production ring. `--snapshot` makes a frozen reproducible artifact. Package-supplied origins are never trusted. --format dir writes the same tree unpacked, for static hosting. --release-dir packs a release that is already built on disk (needs --app) instead of rebuilding from source. `--dev` ALSO packs the app\'s own source archive into the container (`source.zip`, header `contents: "dev"`), so the package can be handed to someone who then keeps building \u2014 collected through the same deny-list and secret scan `himi push` uses, and refused if a credential is found. A dev package IS the codebase: it is never the default, it is always labelled in the output, the web host will not open one, and it is archive-only (`--dev --format dir` is refused, because a reader that predates the source entry drops it before hashing a directory and would call the package tampered). Restore one with `himi import`.', required: "[--content <dir>] [--out <file|dir>] [--format zip|dir] [--name <title>] [--snapshot] [--dev] [--strict] [--force] | --release-dir <dir> --app <a>" },
   { name: "import", summary: "turn a `himi pack --dev` package back into an EDITABLE content package \u2014 the file counterpart of `himi pull`, needing no serve plane, no account and no network. Refuses an invalid package before trusting its source (the content hash is recomputed over every entry on open, so the archive is provably the one that was packed), and refuses a RELEASE package by naming the absence \u2014 it carries built output and no source \u2014 rather than reporting a missing file. `--name` re-substitutes the app identity through the same machinery `himi init --template` and `himi pull --name` use, so the restored tree is a NEW app rather than a second copy of the same one, and a name that also appears inside a screen id (`feed` in `feed_home`) is left alone. A non-empty destination needs `--force` and a merge NAMES what it kept (`left: [...]`), the same contract `himi pull --force` has; a shape clash is refused whole before anything is written. There is no `--replace`: a file you were handed is not the plane's per-release archive.", required: "<package.himi> [--out <dir>] [--name <new>] [--force]" },
   { name: "pull", summary: "restore an app's SOURCE from the serve plane into an editable content package \u2014 the other half of `himi push`, which archives the content package on every publish. Owner or editor only: a viewer may download the RUNNING app (`/v1/owner/package`), not the codebase it was built from. A PAST release is restorable, not only the live one \u2014 the archive is content-addressed per release, so it has none of the live-single-slot problem that makes `himi pack` current-release-only. Two limits: pruning keeps the current release plus the newest ~20 ledger entries, and a release id identifies OTA content rather than source, so a source-only change republishes under the same id and replaces that id's archive. A release published before source archiving shipped, or pushed with `--no-source`, answers `app_source_not_found` and says to push again. `--name` re-substitutes the app identity through the same machinery `himi init --template` uses, so the restored tree is a NEW app rather than a second copy of the same one, and a name that also appears inside a screen id (`feed` in `feed_home`) is left alone. A NON-EMPTY destination is refused unless you say which you mean: `--force` merges and reports \u2014 it writes the archive over what is there, keeps files the release does not carry, and NAMES every one of them as `left: [...]` so a tree that matches no release is never silent (#2437); `--replace` restores exactly what was archived, removing those files first (`removed: [...]`) and implying `--force`. `--replace` refuses a directory holding no `himalaya.content.json`, so a mistyped `--out` cannot clear an unrelated tree, and the only paths it can remove are the ones a push would have archived \u2014 `.git/`, `node_modules/`, `dist/`, `.env*` and key material are out of its reach by construction.", required: "<app> [--release <id>] [--out <dir>] [--name <new>] [--force|--replace] [--target <t>]" },
@@ -74163,7 +74362,7 @@ function defaultTargetForCommand(command, authoringDir) {
   return isHimalayaMonorepoCheckout(authoringDir) ? void 0 : "wix";
 }
 function renderDataSource(input) {
-  if (!input.live) return input.hydrate ? "worker-initial-state" : "static";
+  if (!input.live) return input.mocked ? "app-mocks" : input.hydrate ? "worker-initial-state" : "static";
   if (!input.liveCalls) return "static";
   if (input.liveCalls.length === 0) return "worker-load-no-network";
   return (input.liveReturned ?? 0) > 0 ? "wix-network" : "wix-network-failed";
@@ -74645,6 +74844,7 @@ async function loadAuthoring() {
       webWixCall: wml.webWixCall,
       freezeTrafficToMocks: nf.freezeTrafficToMocks,
       bootAndSnapshotState: crawl.bootAndSnapshotState,
+      isUnservedRequest: crawl.isUnservedRequest,
       renderDescriptorWeb: rd.renderDescriptorWeb,
       renderPngBatch: rd.renderPngBatch,
       pngAvailable: rd.pngAvailable,
@@ -75868,8 +76068,10 @@ ${handover.hint[0].toUpperCase()}${handover.hint.slice(1)}.`);
         const handover = step === "review";
         if (!images.length && flags["no-image"] !== true && isContentPackage) {
           const auto = (await Promise.resolve().then(() => (init_milestones(), milestones_exports))).homeShotForPostcard(dir, { repeatOk: handover });
-          if ("image" in auto) images.push(auto.image);
-          else imageNote = `no picture attached: ${auto.skipped}`;
+          if ("image" in auto) {
+            images.push(auto.image);
+            if (auto.note) imageNote = auto.note;
+          } else imageNote = `no picture attached: ${auto.skipped}`;
         }
         try {
           const entry = appendProgress2(dir, { message, ...step ? { step } : {}, images });
@@ -75877,7 +76079,7 @@ ${handover.hint[0].toUpperCase()}${handover.hint.slice(1)}.`);
           const { count: count2 } = summarizeProgress2(readProgress2(dir).entries);
           const imageAttached = (entry.images?.length ?? 0) > 0;
           const handed = handover && isContentPackage ? (await Promise.resolve().then(() => (init_milestones(), milestones_exports))).afterHandoverPostcard(dir, { content: str9(flags.content) }) : null;
-          print({ ok: true, entry, journal: journal2, count: count2, imageAttached, ...!imageAttached && imageNote ? { imageNote } : {}, ...notified === void 0 ? {} : { notified }, ...handed ? { makingOf: handed.makingOf, next: handed.next } : {}, ...hint });
+          print({ ok: true, entry, journal: journal2, count: count2, imageAttached, ...imageNote ? { imageNote } : {}, ...notified === void 0 ? {} : { notified }, ...handed ? { makingOf: handed.makingOf, next: handed.next } : {}, ...hint });
           return 0;
         } catch (e) {
           if (e instanceof ProgressError2) {
@@ -75954,7 +76156,7 @@ ${handover.hint[0].toUpperCase()}${handover.hint.slice(1)}.`);
           return results.every((result2) => result2.ok) ? 0 : 1;
         }
         const app = await appId(dir);
-        const { buildContentBundles: buildContentBundles2, buildReleaseFromContent: buildReleaseFromContent2, bundleOutDir: bundleOutDir2, crawlScreen: crawlScreen2, crawlScreenJourney: crawlScreenJourney2, crawlScreenHostile: crawlScreenHostile2, crawlScreenRelations: crawlScreenRelations2, crawlScreenCapabilitySuccess: crawlScreenCapabilitySuccess2, findingKey: findingKey2, startWorkerCoverage: startWorkerCoverage2, uncoveredFunctions: uncoveredFunctions2, crawlScreenDeep: crawlScreenDeep2, crawlSignature: crawlSignature2, recordScreenTraffic: recordScreenTraffic2, mintVisitor: mintVisitor2, webWixCall: webWixCall2, freezeTrafficToMocks: freezeTrafficToMocks2, bootAndSnapshotState: bootAndSnapshotState2, renderDescriptorWeb: renderDescriptorWeb2, renderPngBatch: renderPngBatch2, pngAvailable: pngAvailable2, crawlBlockingPasses } = await loadAuthoring();
+        const { buildContentBundles: buildContentBundles2, buildReleaseFromContent: buildReleaseFromContent2, bundleOutDir: bundleOutDir2, crawlScreen: crawlScreen2, crawlScreenJourney: crawlScreenJourney2, crawlScreenHostile: crawlScreenHostile2, crawlScreenRelations: crawlScreenRelations2, crawlScreenCapabilitySuccess: crawlScreenCapabilitySuccess2, findingKey: findingKey2, startWorkerCoverage: startWorkerCoverage2, uncoveredFunctions: uncoveredFunctions2, crawlScreenDeep: crawlScreenDeep2, crawlSignature: crawlSignature2, recordScreenTraffic: recordScreenTraffic2, mintVisitor: mintVisitor2, webWixCall: webWixCall2, freezeTrafficToMocks: freezeTrafficToMocks2, bootAndSnapshotState: bootAndSnapshotState2, isUnservedRequest: isUnservedRequest2, renderDescriptorWeb: renderDescriptorWeb2, renderPngBatch: renderPngBatch2, pngAvailable: pngAvailable2, crawlBlockingPasses } = await loadAuthoring();
         const { readTestConfig: readTestConfig2, runCrawl: runCrawl2, formatReport: formatReport2, readCannedResponses: readCannedResponses2, makeRecordingWixCall: makeRecordingWixCall2, runRecordPass: runRecordPass2, runShotsPass: runShotsPass2, defaultNetRules: defaultNetRules2, readNetRules: readNetRules2, scopeDescriptors: scopeDescriptors2, writeRecordedMocks: writeRecordedMocks2 } = await Promise.resolve().then(() => (init_test(), test_exports));
         let config;
         try {
@@ -76259,6 +76461,7 @@ ${handover.hint[0].toUpperCase()}${handover.hint.slice(1)}.`);
                 bootAndSnapshotState: bootAndSnapshotState2,
                 renderDescriptorWeb: renderDescriptorWeb2,
                 renderPngBatch: renderPngBatch2,
+                isUnserved: isUnservedRequest2,
                 writePng: (path2, base64) => writePngFile(path2, base64),
                 clearDir: (d) => rmSync16(d, { recursive: true, force: true })
               }
@@ -76394,6 +76597,14 @@ ${[...afterRun.next, ...testReminder ? [testReminder] : []].join("\n")}`);
           io.error(JSON.stringify({ error: "--static and --live are mutually exclusive: --static renders raw bindings, --live renders real Wix data" }));
           return 2;
         }
+        if (flags.mocks !== void 0 && flags.mocks !== true) {
+          io.error(JSON.stringify({ error: `--mocks takes no value (got "${String(flags.mocks)}") \u2014 pass it bare` }));
+          return 2;
+        }
+        if (flags.mocks === true && (live2 || flags.static === true)) {
+          io.error(JSON.stringify({ error: `--mocks and ${live2 ? "--live" : "--static"} are mutually exclusive: --mocks loads the app's recorded data, ${live2 ? "--live real Wix data" : "--static no data at all"}` }));
+          return 2;
+        }
         let injectedState;
         if (flags.state !== void 0) {
           const stateArg = str9(flags.state);
@@ -76464,6 +76675,22 @@ ${[...afterRun.next, ...testReminder ? [testReminder] : []].join("\n")}`);
             return 2;
           }
         }
+        let mocks;
+        let mocksNote;
+        if (flags.mocks === true) {
+          let rules = null;
+          let bad2;
+          try {
+            rules = (await Promise.resolve().then(() => (init_test(), test_exports))).defaultNetRules(dir);
+          } catch (e) {
+            bad2 = e.message.split("\n")[0].slice(0, 200);
+          }
+          const cmsSeed = await cmsSeedRows(dir, app).catch(() => null);
+          const seeded = cmsSeed && Object.keys(cmsSeed).length ? cmsSeed : null;
+          const picked = renderMocksFrom(rules, bad2, seeded);
+          mocks = picked.mocks;
+          mocksNote = picked.note;
+        }
         const { buildContentBundles: buildContentBundles2, buildReleaseFromContent: buildReleaseFromContent2, bundleOutDir: bundleOutDir2 } = await loadAuthoring();
         const bres = await buildContentBundles2(dir, { resolution: resolutionFlag(flags) });
         const out2 = commandScratchDir("himi-render-");
@@ -76472,7 +76699,7 @@ ${[...afterRun.next, ...testReminder ? [testReminder] : []].join("\n")}`);
           ...hasWorkers ? { tier5Dir: bundleOutDir2(dir) } : {},
           // The settled state is always kept (printed only under --dump-state): it is what says whether
           // the picture landed on the screen's content or on its error, loading or empty state.
-          collect: { lint: true, strict, render: { screenId, scheme, png: wantPng, hydrate, dumpState: true, ...live2 ? { live: true } : {}, ...injectedState ? { state: injectedState } : {}, ...injectedInput ? { input: injectedInput } : {}, ...renderWidth ? { width: renderWidth } : {}, ...flags.rtl === true ? { rtl: true } : {}, ...loadBudgetMs ? { loadBudgetMs } : {} } }
+          collect: { lint: true, strict, render: { screenId, scheme, png: wantPng, hydrate, dumpState: true, ...live2 ? { live: true } : {}, ...injectedState ? { state: injectedState } : {}, ...injectedInput ? { input: injectedInput } : {}, ...renderWidth ? { width: renderWidth } : {}, ...flags.rtl === true ? { rtl: true } : {}, ...loadBudgetMs ? { loadBudgetMs } : {}, ...mocks ? { mocks: { rules: mocks.rules, cmsSeed: mocks.cmsSeed } } : {} } }
         });
         const r = (outcome.renders ?? [])[0];
         if (!r) {
@@ -76502,7 +76729,9 @@ ${[...afterRun.next, ...testReminder ? [testReminder] : []].join("\n")}`);
           scheme,
           renderable: r.renderable,
           hydrated: live2 ? "live" : hydrate,
-          dataSource: renderDataSource({ live: live2, hydrate, liveCalls: r.liveCalls, liveReturned: r.liveReturned }),
+          dataSource: renderDataSource({ live: live2, hydrate, liveCalls: r.liveCalls, liveReturned: r.liveReturned, mocked: !!r.mockCalls }),
+          // What --mocks loaded from, how many requests the load made, and the ones no layer held.
+          ...r.mockCalls && mocks ? { mocks: { used: true, from: mocks.from, calls: r.mockCalls.length, ...r.mockUnserved?.length ? { unserved: r.mockUnserved } : {}, ...mocks.ignored ? { ignored: mocks.ignored } : {} } } : mocksNote ? { mocks: mocksNote } : mocks ? { mocks: { used: false, reason: r.mockBootFailed ? "the screen's worker failed to boot against the recorded data, so its initial state was rendered" : "the screen has no worker bundle to load data into", ...mocks.ignored ? { ignored: mocks.ignored } : {} } } : {},
           ...live2 ? {
             liveCalls: r.liveCalls?.length ?? 0,
             // Beside the attempt count, because the two coming apart IS the signal (#1883).
@@ -76554,10 +76783,11 @@ ${[...afterRun.next, ...testReminder ? [testReminder] : []].join("\n")}`);
         let landed = null;
         if (pngFile && r.renderable) {
           const { recordShotState: recordShotState2, screenStateOf: screenStateOf2 } = await Promise.resolve().then(() => (init_screen_state(), screen_state_exports));
-          landed = screenStateOf2(r.serviceState, r.html, { initial: !live2 });
+          const mocked = !!r.mockCalls;
+          landed = screenStateOf2(r.serviceState, r.html, { initial: !live2 && !mocked, offline: mocked && (r.mockUnserved?.length ?? 0) > 0 });
           recordShotState2(dir, screenId, pngFile, landed);
         }
-        const autoSkip = process.env.HIMI_AUTO_RENDER === "validate" && landed !== null && (landed.state === "loading" || landed.state === "empty") ? `the picture shows the home screen's ${landed.state} state${landed.initial ? " (an offline render paints a data-driven screen before any data loads)" : ""}, so no postcard was journaled from it` : void 0;
+        const autoSkip = process.env.HIMI_AUTO_RENDER === "validate" && landed !== null && (landed.state === "loading" || landed.state === "empty" || landed.state === "error" && landed.offline === true) ? `the picture shows the home screen's ${landed.state} state${landed.initial || landed.offline ? " (an offline preview: the site's data is not loaded offline)" : ""}, so no postcard was journaled from it` : void 0;
         const afterPng = pngFile && !autoSkip ? milestoneKit.afterRenderPng(dir, { screenId, homeScreenId: outcome.homeScreenId ?? null, pngFile, renderable: r.renderable, content: str9(flags.content) }) : null;
         const reminder = process.env.HIMI_AUTO_RENDER ? void 0 : milestoneKit.watchReminder(dir, { content: str9(flags.content) });
         const renderNext = [...reminder ? [reminder] : [], ...afterPng?.next ?? []];
@@ -77320,7 +77550,9 @@ default (no --glyph): ${DEFAULT_GLYPH2} \u2014 a mark that claims nothing, so th
           releaseId: release,
           content: str9(flags.content),
           home: outcome.homeScreenId ?? null,
-          ...draftShot ? { homeShot: draftShot, sourceChangedAtMs } : {}
+          ...draftShot ? { homeShot: draftShot, sourceChangedAtMs } : {},
+          // Its screen hashes say what changed since the last draft, on the postcard.
+          manifest
         }) : null;
         print({
           ok: true,