@wix/himalaya-cli 0.1326.0 → 0.1328.0

package/dist/cli.mjs

@@ -7591,6 +7591,7 @@ function resolveTranslation(value, catalog3, sourceCatalog) {
 var BINDING_SIGILS, BINDING_SIGIL_RE, TRANSLATION_PREFIX, TRANSLATION_KEY_RE;
 var init_bindings = __esm({
   "../../core/ts/src/bindings.ts"() {
+    "use strict";
     BINDING_SIGILS = ["service", "flag", "item", "t"];
     BINDING_SIGIL_RE = new RegExp(
       `^\\$(?:${BINDING_SIGILS.filter((s2) => s2 !== "t").join("|")})\\b|^\\$t:`
@@ -34746,9 +34747,83 @@ var init_net_mocks_rollover = __esm({
 });
 
 // ../../core/dev-server/src/player-proxy.ts
+import { readFileSync as readFileSync45 } from "node:fs";
+import { homedir as homedir6 } from "node:os";
+import { dirname as dirname27, join as join41 } from "node:path";
+import { fileURLToPath as fileURLToPath18 } from "node:url";
+function readJson2(path2) {
+  try {
+    return JSON.parse(readFileSync45(path2, "utf8"));
+  } catch {
+    return void 0;
+  }
+}
+function ledgerDevServerPort(tenant) {
+  const here = dirname27(fileURLToPath18(import.meta.url));
+  const ledger = readJson2(join41(here, "..", "..", "..", "tools", "dev-cli", "ports.json"));
+  const port = ledger?.apps?.[tenant]?.devServer;
+  return typeof port === "number" ? port : void 0;
+}
+function loadSupervisorRegistry() {
+  const home = process.env.HIMALAYA_HOME ?? join41(homedir6(), ".himalaya");
+  const reg = readJson2(join41(home, "instances.json"));
+  return { instances: reg?.instances && typeof reg.instances === "object" ? reg.instances : {} };
+}
 function isPlayerHost(appName2) {
   return appName2 === PLAYER_APP_ID || process.env.HIMALAYA_DEV_MULTI_APP === "1";
 }
+function isTenantHost(appName2) {
+  return !!appName2 && Object.prototype.hasOwnProperty.call(HOSTED_TENANTS, appName2);
+}
+function resolveTenantBase(tenant, registry2 = loadSupervisorRegistry) {
+  for (const pair of (process.env.HIMALAYA_DEV_TENANT_UPSTREAMS ?? "").split(",")) {
+    const i2 = pair.indexOf("=");
+    if (i2 > 0 && pair.slice(0, i2).trim() === tenant) return pair.slice(i2 + 1).trim().replace(/\/$/, "");
+  }
+  if (process.env.HIMALAYA_DEV_TENANT_SOURCE !== "serve") {
+    let port;
+    try {
+      const running = registry2().instances[tenant];
+      if (running?.status === "running" && running.port) port = running.port;
+    } catch {
+    }
+    port ??= ledgerDevServerPort(tenant);
+    if (port) return `http://127.0.0.1:${port}`;
+  }
+  return resolveServeBase();
+}
+function isTenantAdminPath(url) {
+  const path2 = url.split("?")[0];
+  return path2 === "/v1/admin" || path2.startsWith("/v1/admin/");
+}
+function tenantPrefixed(url, hostApp, method = "GET") {
+  if (!hostApp || !isTenantHost(hostApp) || !url.startsWith(TENANT_PREFIX)) return null;
+  if (method !== "GET" && method !== "HEAD") return null;
+  const rest = url.slice(TENANT_PREFIX.length);
+  const slash = rest.indexOf("/");
+  if (slash <= 0) return null;
+  const tenant = decodeURIComponent(rest.slice(0, slash));
+  const tenantUrl = rest.slice(slash);
+  const path2 = tenantUrl.split("?")[0];
+  let normalized;
+  try {
+    normalized = new URL(decodeURIComponent(path2), "http://tenant.invalid").pathname;
+  } catch {
+    return null;
+  }
+  if (!normalized.startsWith("/v1/") || normalized !== path2 || isTenantAdminPath(normalized)) return null;
+  return HOSTED_TENANTS[hostApp].includes(tenant) ? { tenant, url: tenantUrl } : null;
+}
+function forwardedBaseUrl(req) {
+  if (!LOOPBACK_PEERS.has(req.socket?.remoteAddress ?? "")) return null;
+  const first = (h2) => (Array.isArray(h2) ? h2[0] : h2)?.split(",", 1)[0]?.trim() ?? "";
+  const host = first(req.headers["x-forwarded-host"]);
+  if (!host || !/^[A-Za-z0-9.\-:[\]]+$/.test(host)) return null;
+  const proto = first(req.headers["x-forwarded-proto"]).toLowerCase() === "https" ? "https" : "http";
+  const prefix = first(req.headers["x-forwarded-prefix"]);
+  const safePrefix = /^(\/[A-Za-z0-9._~\-]+)+$/.test(prefix) && !prefix.split("/").some((seg) => seg === "." || seg === "..") ? prefix : "";
+  return `${proto}://${host}${safePrefix}`;
+}
 function resolveServeBase() {
   const override = process.env.HIMALAYA_PLAYER_SERVE_URL;
   let raw = override;
@@ -34776,15 +34851,16 @@ function targetTenant(url, headers2, hostApp) {
   }
   if (!app) return null;
   if (app === hostApp || app === PLAYER_APP_ID) return null;
+  if (hostApp && isTenantHost(hostApp) && !HOSTED_TENANTS[hostApp].includes(app)) return null;
   return app;
 }
 function shouldServeFromPlane(url, headers2, hostApp) {
   const path2 = url.split("?")[0];
-  if (path2 === "/v1/apps" || path2 === "/v1/templates") return true;
+  if (path2 === "/v1/apps" || path2 === "/v1/templates") return !isTenantHost(hostApp);
   if (!path2.startsWith("/v1/")) return false;
   return targetTenant(url, headers2, hostApp) !== null;
 }
-async function proxyToServe(base, req, res) {
+async function proxyToServe(base, req, res, opts = {}) {
   const body = await new Promise((done) => {
     const chunks = [];
     req.on("data", (c2) => chunks.push(Buffer.from(c2)));
@@ -34796,7 +34872,11 @@ async function proxyToServe(base, req, res) {
     if (STRIP_REQUEST_HEADERS.has(k2.toLowerCase()) || v2 === void 0) continue;
     reqHeaders[k2] = Array.isArray(v2) ? v2.join(", ") : v2;
   }
-  const target = `${base}${req.url ?? ""}`;
+  if (opts.forwardAs) {
+    reqHeaders["x-forwarded-host"] = opts.forwardAs.host;
+    reqHeaders["x-forwarded-prefix"] = opts.forwardAs.prefix;
+  }
+  const target = `${base}${opts.url ?? req.url ?? ""}`;
   let upstream;
   try {
     upstream = await fetch(target, {
@@ -34819,11 +34899,16 @@ async function proxyToServe(base, req, res) {
   res.writeHead(upstream.status, outHeaders);
   res.end(buf);
 }
-var PLAYER_APP_ID, STRIP_RESPONSE_HEADERS, STRIP_REQUEST_HEADERS;
+var PLAYER_APP_ID, HOSTED_TENANTS, TENANT_PREFIX, LOOPBACK_PEERS, STRIP_RESPONSE_HEADERS, STRIP_REQUEST_HEADERS;
 var init_player_proxy = __esm({
   "../../core/dev-server/src/player-proxy.ts"() {
     init_config();
     PLAYER_APP_ID = "himi-player";
+    HOSTED_TENANTS = {
+      "himi-spaces-lite": ["himi-branded-lite"]
+    };
+    TENANT_PREFIX = "/__tenant/";
+    LOOPBACK_PEERS = /* @__PURE__ */ new Set(["127.0.0.1", "::1", "::ffff:127.0.0.1"]);
     STRIP_RESPONSE_HEADERS = /* @__PURE__ */ new Set([
       "connection",
       "keep-alive",
@@ -42407,7 +42492,7 @@ var init_pdf = __esm({
         var defineProperty = Object.defineProperty;
         var stringSlice = uncurryThis("".slice);
         var replace = uncurryThis("".replace);
-        var join83 = uncurryThis([].join);
+        var join84 = uncurryThis([].join);
         var CONFIGURABLE_LENGTH = DESCRIPTORS && !fails(function() {
           return defineProperty(function() {
           }, "length", { value: 8 }).length !== 8;
@@ -42434,7 +42519,7 @@ var init_pdf = __esm({
           }
           var state = enforceInternalState(value);
           if (!hasOwn(state, "source")) {
-            state.source = join83(TEMPLATE, typeof name == "string" ? name : "");
+            state.source = join84(TEMPLATE, typeof name == "string" ? name : "");
           }
           return value;
         };
@@ -44957,7 +45042,7 @@ var init_pdf = __esm({
         var charAt = uncurryThis("".charAt);
         var Uint8Array2 = globalThis2.Uint8Array;
         var $Array = globalThis2.Array;
-        var join83 = uncurryThis([].join);
+        var join84 = uncurryThis([].join);
         var INCORRECT_BEHAVIOR_OR_DOESNT_EXISTS = !Uint8Array2 || !Uint8Array2.prototype.toBase64 || !(function() {
           try {
             var target = new Uint8Array2();
@@ -45003,7 +45088,7 @@ var init_pdf = __esm({
                 result[written++] = "=";
               }
             }
-            return join83(result, "");
+            return join84(result, "");
           }
         });
       },
@@ -45015,7 +45100,7 @@ var init_pdf = __esm({
         var anUint8Array = __webpack_require__3(4154);
         var notDetached = __webpack_require__3(5169);
         var numberToString2 = uncurryThis(1.1.toString);
-        var join83 = uncurryThis([].join);
+        var join84 = uncurryThis([].join);
         var $Array = Array;
         var Uint8Array2 = globalThis2.Uint8Array;
         var INCORRECT_BEHAVIOR_OR_DOESNT_EXISTS = !Uint8Array2 || !Uint8Array2.prototype.toHex || !(function() {
@@ -45035,7 +45120,7 @@ var init_pdf = __esm({
               var hex2 = numberToString2(this[i2], 16);
               result[i2] = hex2.length === 1 ? "0" + hex2 : hex2;
             }
-            return join83(result, "");
+            return join84(result, "");
           }
         });
       },
@@ -127862,12 +127947,12 @@ var init_render_descriptor = __esm({
 });
 
 // ../../core/dev-server/src/render-fonts.ts
-import { existsSync as existsSync44, readFileSync as readFileSync45 } from "node:fs";
-import { extname, join as join41 } from "node:path";
+import { existsSync as existsSync44, readFileSync as readFileSync46 } from "node:fs";
+import { extname, join as join42 } from "node:path";
 function servedFontFaces(appDir3, tokens2) {
   try {
-    const policyPath = join41(appDir3, "fonts.json");
-    const policy = existsSync44(policyPath) ? JSON.parse(readFileSync45(policyPath, "utf8")) : {};
+    const policyPath = join42(appDir3, "fonts.json");
+    const policy = existsSync44(policyPath) ? JSON.parse(readFileSync46(policyPath, "utf8")) : {};
     let plan = planFonts(tokens2, policy);
     if (!hasVendoredFloor()) plan = { ...plan, families: plan.families.filter((f2) => !isHostProvided(f2.name)) };
     if (plan.families.length === 0) return void 0;
@@ -127888,7 +127973,7 @@ async function faceBytes(face, catalog3, opts) {
   try {
     if (opts.source) {
       const path2 = opts.source(face.file, face.sha256);
-      return path2 ? readFileSync45(path2) : null;
+      return path2 ? readFileSync46(path2) : null;
     }
     const bytes2 = await catalogFaceBytes(face.sha256, { catalog: catalog3, ...opts.fetchFace ? { fetchFace: opts.fetchFace } : {} });
     return bytes2 ?? null;
@@ -127954,7 +128039,7 @@ async function idiomFontFaceCss(idiomContext) {
   const bundled = idiomControls2(controlIdiomFor2(idiomContext)).font.bundled;
   if (!bundled) return "";
   try {
-    const bytes2 = readFileSync45(new URL(`../../web-host/public/${bundled.file}`, import.meta.url));
+    const bytes2 = readFileSync46(new URL(`../../web-host/public/${bundled.file}`, import.meta.url));
     return `@font-face { font-family: "${bundled.family}"; font-weight: 100 900; font-style: normal; src: url(data:font/ttf;base64,${bytes2.toString("base64")}) format("truetype"); }`;
   } catch {
     return "";
@@ -127997,7 +128082,7 @@ var init_tier = __esm({
 });
 
 // ../../core/dev-server/src/flags/index.ts
-import { readFileSync as readFileSync46 } from "node:fs";
+import { readFileSync as readFileSync47 } from "node:fs";
 import { resolve as resolve34 } from "node:path";
 function selectProvider(config, store) {
   const local = new LocalFlagProvider(store, () => config?.overrides);
@@ -128093,7 +128178,7 @@ var init_flags2 = __esm({
         if (now - this.lastFetch < this.ttlMs) return;
         this.lastFetch = now;
         try {
-          const defs = JSON.parse(readFileSync46(resolve34(appDir3, "flags.json"), "utf8"));
+          const defs = JSON.parse(readFileSync47(resolve34(appDir3, "flags.json"), "utf8"));
           if (Array.isArray(defs) && defs.length > 0) store.replaceAll(defs);
         } catch {
         }
@@ -128143,19 +128228,19 @@ var init_motion_flags = __esm({
 });
 
 // ../../core/dev-server/src/kits.ts
-import { readdirSync as readdirSync23, readFileSync as readFileSync47 } from "node:fs";
-import { resolve as resolve35, join as join42 } from "node:path";
-import { fileURLToPath as fileURLToPath18 } from "node:url";
+import { readdirSync as readdirSync23, readFileSync as readFileSync48 } from "node:fs";
+import { resolve as resolve35, join as join43 } from "node:path";
+import { fileURLToPath as fileURLToPath19 } from "node:url";
 function listKits() {
   return readdirSync23(CATALOG).filter((f2) => f2.endsWith(".json")).map((f2) => {
-    const { tokens: tokens2, ...meta } = JSON.parse(readFileSync47(join42(CATALOG, f2), "utf8"));
+    const { tokens: tokens2, ...meta } = JSON.parse(readFileSync48(join43(CATALOG, f2), "utf8"));
     return meta;
   });
 }
 function readKit(id) {
   if (!/^[a-z0-9-]+$/.test(id)) return null;
   try {
-    return JSON.parse(readFileSync47(join42(CATALOG, `${id}.json`), "utf8"));
+    return JSON.parse(readFileSync48(join43(CATALOG, `${id}.json`), "utf8"));
   } catch {
     return null;
   }
@@ -128163,8 +128248,8 @@ function readKit(id) {
 var ROOT5, CATALOG;
 var init_kits = __esm({
   "../../core/dev-server/src/kits.ts"() {
-    ROOT5 = resolve35(fileURLToPath18(new URL("../../..", import.meta.url)));
-    CATALOG = join42(ROOT5, "stdlib/design-kits");
+    ROOT5 = resolve35(fileURLToPath19(new URL("../../..", import.meta.url)));
+    CATALOG = join43(ROOT5, "stdlib/design-kits");
   }
 });
 
@@ -128890,9 +128975,9 @@ __export(config_exports2, {
   serializeRolloutYaml: () => serializeRolloutYaml,
   validateOverlayPatch: () => validateOverlayPatch
 });
-import { mkdirSync as mkdirSync22, readFileSync as readFileSync48, writeFileSync as writeFileSync19 } from "node:fs";
-import { dirname as dirname27, join as join43, resolve as resolve36 } from "node:path";
-import { fileURLToPath as fileURLToPath19 } from "node:url";
+import { mkdirSync as mkdirSync22, readFileSync as readFileSync49, writeFileSync as writeFileSync19 } from "node:fs";
+import { dirname as dirname28, join as join44, resolve as resolve36 } from "node:path";
+import { fileURLToPath as fileURLToPath20 } from "node:url";
 function strip(line) {
   const h2 = line.indexOf("#");
   return (h2 >= 0 ? line.slice(0, h2) : line).replace(/\s+$/, "");
@@ -128956,14 +129041,14 @@ function parseRevocationsYaml(text9) {
 function appConfigPath(app, file2, root = REPO_ROOT6) {
   assertAppId(app, "appConfigPath");
   for (const base of ["apps", "test-apps"]) {
-    const p2 = join43(root, base, app, file2);
+    const p2 = join44(root, base, app, file2);
     try {
-      readFileSync48(p2);
+      readFileSync49(p2);
       return p2;
     } catch {
     }
   }
-  return join43(root, "apps", app, file2);
+  return join44(root, "apps", app, file2);
 }
 function serializeRolloutYaml(cfg) {
   const lines = [`app: ${cfg.app}`, "rings:"];
@@ -129011,14 +129096,14 @@ function validateOverlayPatch(patch) {
 }
 function readJsonAt(app, file2, root) {
   try {
-    return JSON.parse(readFileSync48(appConfigPath(app, file2, root), "utf8"));
+    return JSON.parse(readFileSync49(appConfigPath(app, file2, root), "utf8"));
   } catch {
     return null;
   }
 }
 function writeJsonAt(app, file2, root, value) {
   const path2 = appConfigPath(app, file2, root);
-  mkdirSync22(dirname27(path2), { recursive: true });
+  mkdirSync22(dirname28(path2), { recursive: true });
   writeFileSync19(path2, JSON.stringify(value, null, 2) + "\n");
   return path2;
 }
@@ -129049,14 +129134,14 @@ function saveLocalFlags(app, defs, root = REPO_ROOT6) {
 }
 function loadRollout(app) {
   try {
-    return parseRolloutYaml(readFileSync48(appConfigPath(app, "rollout.yaml"), "utf8"));
+    return parseRolloutYaml(readFileSync49(appConfigPath(app, "rollout.yaml"), "utf8"));
   } catch {
     return null;
   }
 }
 function loadRevocations(app) {
   try {
-    return parseRevocationsYaml(readFileSync48(appConfigPath(app, "revocations.yaml"), "utf8")).revoked;
+    return parseRevocationsYaml(readFileSync49(appConfigPath(app, "revocations.yaml"), "utf8")).revoked;
   } catch {
     return [];
   }
@@ -129066,7 +129151,7 @@ var init_config2 = __esm({
   "../../core/serve-control/src/config.ts"() {
     init_errors();
     init_contract();
-    REPO_ROOT6 = resolve36(dirname27(fileURLToPath19(import.meta.url)), "../../..");
+    REPO_ROOT6 = resolve36(dirname28(fileURLToPath20(import.meta.url)), "../../..");
     OPERATIONAL_OVERLAY_KEYS = /* @__PURE__ */ new Set([
       "wixCachePolicy",
       "telemetryConfig",
@@ -129134,10 +129219,10 @@ var init_config2 = __esm({
 // ../../core/dev-server/src/index.ts
 import { createServer as createServer3 } from "node:http";
 import { readFile, stat } from "node:fs/promises";
-import { readFileSync as readFileSync49, existsSync as existsSync45, watch, mkdirSync as mkdirSync23, rmSync as rmSync11 } from "node:fs";
-import { basename as basename10, dirname as dirname28, extname as extname2, join as join44, relative as relative8, resolve as resolve37, normalize as normalize3, sep as sep10 } from "node:path";
+import { readFileSync as readFileSync50, existsSync as existsSync45, watch, mkdirSync as mkdirSync23, rmSync as rmSync11 } from "node:fs";
+import { basename as basename10, dirname as dirname29, extname as extname2, join as join45, relative as relative8, resolve as resolve37, normalize as normalize3, sep as sep10 } from "node:path";
 import { createHash as createHash20, randomUUID as randomUUID5 } from "node:crypto";
-import { fileURLToPath as fileURLToPath20, pathToFileURL as pathToFileURL6 } from "node:url";
+import { fileURLToPath as fileURLToPath21, pathToFileURL as pathToFileURL6 } from "node:url";
 function readLogicBundle(read, tier5Dir, name) {
   return read(tier5Dir ?? TIER5_ROOT2, name) ?? (tier5Dir && tier5Dir !== TIER5_ROOT2 ? read(TIER5_ROOT2, name) : void 0);
 }
@@ -129190,7 +129275,7 @@ function servedTokensPath(app) {
 function readAppTokens(state) {
   if (!state.app) return null;
   try {
-    const parsed = JSON.parse(readFileSync49(servedTokensPath(state.app), "utf8"));
+    const parsed = JSON.parse(readFileSync50(servedTokensPath(state.app), "utf8"));
     delete parsed._meta;
     return parsed;
   } catch {
@@ -129202,7 +129287,7 @@ function effectiveAppConfigOverride(state) {
   if (state.app) {
     try {
       gitOverlay = JSON.parse(
-        readFileSync49(resolve37(state.app.dir, "app-config.overlay.json"), "utf8")
+        readFileSync50(resolve37(state.app.dir, "app-config.overlay.json"), "utf8")
       );
     } catch {
     }
@@ -129271,7 +129356,7 @@ function handleL10nRequest(req, res, state) {
   let messages;
   try {
     messages = Object.fromEntries(
-      keyMap(parseCatalog(readFileSync49(path2, "utf8")), { sourceFallback: tag === sourceLocale })
+      keyMap(parseCatalog(readFileSync50(path2, "utf8")), { sourceFallback: tag === sourceLocale })
     );
   } catch {
     return sendJson(res, 500, { error: "catalog_unreadable", app, tag }, cors);
@@ -129375,6 +129460,8 @@ function requestServerBaseUrl(req, configuredBaseUrl) {
   }
   const loopbackHosts = /* @__PURE__ */ new Set(["localhost", "127.0.0.1", "0.0.0.0", "::1", "[::1]"]);
   if (!loopbackHosts.has(configured.hostname)) return configuredBaseUrl;
+  const forwarded = forwardedBaseUrl(req);
+  if (forwarded) return forwarded;
   const reqHost = req.headers.host;
   if (!reqHost) return configuredBaseUrl;
   const forwardedProto = String(req.headers["x-forwarded-proto"] ?? "").split(",", 1)[0].trim().toLowerCase();
@@ -129671,7 +129758,7 @@ async function buildDescriptorForScreenId(state, screenId, query = new URLSearch
 function bundleIntegritySync(name, dir) {
   for (const root of dir ? [dir, TIER5_ROOT2] : [TIER5_ROOT2]) {
     try {
-      const bytes2 = readFileSync49(resolve37(root, `${name}.bundle.js`));
+      const bytes2 = readFileSync50(resolve37(root, `${name}.bundle.js`));
       return "sha256-" + createHash20("sha256").update(bytes2).digest("base64");
     } catch {
     }
@@ -129688,7 +129775,7 @@ async function handleScreenRequest(req, res, state) {
   const acceptLanguage = req.headers["accept-language"];
   const locale = pickLocale(typeof acceptLanguage === "string" ? acceptLanguage : null);
   const reqHost = req.headers.host;
-  const reqBaseUrl = reqHost ? `http://${reqHost}` : state.serverBaseUrl;
+  const reqBaseUrl = forwardedBaseUrl(req) ?? (reqHost ? `http://${reqHost}` : state.serverBaseUrl);
   const reqState = reqBaseUrl === state.serverBaseUrl ? state : { ...state, serverBaseUrl: reqBaseUrl };
   const baseKey = queryString ? `${screenId}?${query.toString()}` : screenId;
   const localeKey = locale ? `${baseKey}::${locale}` : baseKey;
@@ -130093,7 +130180,7 @@ function tokensAreDerived(state) {
 }
 function servedTokensHash(app) {
   try {
-    return createHash20("sha256").update(readFileSync49(servedTokensPath(app))).digest("hex");
+    return createHash20("sha256").update(readFileSync50(servedTokensPath(app))).digest("hex");
   } catch {
     return "";
   }
@@ -130119,7 +130206,7 @@ function syncAppDependencyWatchers(state, inputs) {
   }
   const byDir = /* @__PURE__ */ new Map();
   for (const file2 of appDependencyFiles(inputs, state.app.dir)) {
-    const dir = dirname28(file2);
+    const dir = dirname29(file2);
     if (!byDir.has(dir)) byDir.set(dir, /* @__PURE__ */ new Set());
     byDir.get(dir).add(basename10(file2));
   }
@@ -130130,7 +130217,7 @@ function syncAppDependencyWatchers(state, inputs) {
     try {
       const w2 = watch(dir, { persistent: false }, (_event, filename) => {
         if (!filename || !names.has(String(filename))) return;
-        changed.add(join44(dir, String(filename)));
+        changed.add(join45(dir, String(filename)));
         if (timer) clearTimeout(timer);
         timer = setTimeout(() => {
           timer = void 0;
@@ -130321,7 +130408,7 @@ async function handleWebWix(req, res, state) {
   const session = webWixSession(req, res, state);
   const auth = resolveWebWixAuth(state.app);
   const path2 = new URL(req.url ?? "", "http://localhost").pathname;
-  const readJson8 = async () => {
+  const readJson9 = async () => {
     const chunks = [];
     for await (const c2 of req) chunks.push(c2);
     const t2 = Buffer.concat(chunks).toString("utf8");
@@ -130338,7 +130425,7 @@ async function handleWebWix(req, res, state) {
     res.end(JSON.stringify(obj3));
   };
   if (path2 === "/v1/__webwix/stream" && req.method === "POST") {
-    const b2 = await readJson8();
+    const b2 = await readJson9();
     const method = String(b2.method ?? "GET").toUpperCase();
     const requestedUrl = String(b2.url ?? "");
     const body = b2.body === void 0 ? void 0 : typeof b2.body === "string" ? b2.body : JSON.stringify(b2.body);
@@ -130487,7 +130574,7 @@ async function handleWebWix(req, res, state) {
     return;
   }
   if (path2 === "/v1/__webwix/login" && req.method === "POST") {
-    const b2 = await readJson8();
+    const b2 = await readJson9();
     try {
       const { memberToken, visitorToken } = await memberDirectLogin(
         auth.clientId,
@@ -130504,7 +130591,7 @@ async function handleWebWix(req, res, state) {
     }
   }
   if (path2 === "/v1/__webwix/call" && req.method === "POST") {
-    const b2 = await readJson8();
+    const b2 = await readJson9();
     const ownerRung = b2.ownerMsid !== void 0 || b2.checkOwnerSession === true;
     const msid = String(b2.ownerMsid ?? "");
     const cookie = req.headers.cookie ?? "";
@@ -130652,7 +130739,7 @@ async function handleWebWix(req, res, state) {
     });
   }
   if (path2 === "/v1/__webwix/register" && req.method === "POST") {
-    const b2 = await readJson8();
+    const b2 = await readJson9();
     try {
       const { memberToken, visitorToken } = await memberDirectRegister(
         auth.clientId,
@@ -131528,8 +131615,8 @@ function readActionHandlerManifest(app) {
   let decls;
   let bytes2;
   try {
-    decls = JSON.parse(readFileSync49(manifestPath, "utf8"));
-    bytes2 = readFileSync49(bundlePath);
+    decls = JSON.parse(readFileSync50(manifestPath, "utf8"));
+    bytes2 = readFileSync50(bundlePath);
   } catch {
     return { handlers: [] };
   }
@@ -131812,6 +131899,25 @@ function createDevServer(opts = {}) {
       try {
         await maybeReseedNetMocks(state);
         if (url.startsWith("/__dev/")) return await handleDev(req, res, state);
+        if (isTenantHost(state.appName)) {
+          const prefixed = tenantPrefixed(url, state.appName, req.method);
+          const tenant = prefixed?.tenant ?? (shouldServeFromPlane(url, req.headers, state.appName) && !isTenantAdminPath(url) ? targetTenant(url, req.headers, state.appName) : null);
+          if (tenant) {
+            const upstream = resolveTenantBase(tenant);
+            if (!upstream) {
+              return sendJson(res, 503, {
+                error: "tenant_upstream_unconfigured",
+                tenant,
+                hint: "Start the tenant's dev-server, or set HIMALAYA_DEV_TENANT_UPSTREAMS=<app>=<url>."
+              }, { "access-control-allow-origin": "*" });
+            }
+            const clientHost = req.headers.host ?? "";
+            return await proxyToServe(upstream, req, res, {
+              url: prefixed?.url,
+              forwardAs: clientHost ? { host: clientHost, prefix: `${TENANT_PREFIX}${encodeURIComponent(tenant)}` } : void 0
+            });
+          }
+        }
         if (url.split("?")[0] === "/v1/app-icon" && req.method === "GET") {
           const iconApp = new URLSearchParams(url.split("?")[1] ?? "").get("app") ?? "";
           const iconDir = iconApp ? state.app && iconApp === state.app.name ? state.app.dir : resolveAppDir(iconApp) : null;
@@ -131827,7 +131933,7 @@ function createDevServer(opts = {}) {
           const q2 = new URLSearchParams(url.split("?")[1] ?? "");
           const assetApp = q2.get("app") ?? state.appName;
           const assetDir = state.app && assetApp === state.app.name ? state.app.dir : resolveAppDir(assetApp);
-          const hit = assetDir ? collectAssets(assetDir).find((a2) => assetSha256(readFileSync49(a2.path)) === sha2) : void 0;
+          const hit = assetDir ? collectAssets(assetDir).find((a2) => assetSha256(readFileSync50(a2.path)) === sha2) : void 0;
           if (!hit && assetDir) {
             const fontBytes = await fontFaceBytesBySha(assetDir, sha2);
             if (fontBytes) {
@@ -131850,7 +131956,7 @@ function createDevServer(opts = {}) {
             res.end(JSON.stringify({ error: "asset_not_found", app: assetApp, sha: sha2 }));
             return;
           }
-          const bytes2 = readFileSync49(hit.path);
+          const bytes2 = readFileSync50(hit.path);
           res.writeHead(200, {
             "content-type": hit.contentType,
             "content-length": String(bytes2.length),
@@ -131943,7 +132049,7 @@ function createDevServer(opts = {}) {
         if (url === "/v1/schema/screen-descriptor.json" && req.method === "GET") {
           try {
             const schemaPath = resolve37(ROOT6, "core/schema/generated/screen-descriptor.schema.json");
-            const body = readFileSync49(schemaPath, "utf8");
+            const body = readFileSync50(schemaPath, "utf8");
             return send(res, 200, body, {
               "content-type": "application/schema+json; charset=utf-8",
               "cache-control": "no-store",
@@ -131994,7 +132100,7 @@ function createDevServer(opts = {}) {
             try {
               const { parseRevocationsYaml: parseRevocationsYaml2 } = await Promise.resolve().then(() => (init_config2(), config_exports2));
               revoked = parseRevocationsYaml2(
-                readFileSync49(resolve37(state.app.dir, "revocations.yaml"), "utf8")
+                readFileSync50(resolve37(state.app.dir, "revocations.yaml"), "utf8")
               ).revoked;
             } catch {
             }
@@ -132009,7 +132115,8 @@ function createDevServer(opts = {}) {
         if (url.startsWith("/v1/app-config/") && req.method === "GET") {
           const override = effectiveAppConfigOverride(state);
           return handleAppConfigRequest(req, res, state.app.meta, override, {
-            serverBaseUrl: state.serverBaseUrl,
+            // Through a tenant host's proxy, the nav bundle routes back through that host, as screens do.
+            serverBaseUrl: forwardedBaseUrl(req) ?? state.serverBaseUrl,
             bundleIntegrity: (name) => bundleIntegritySync(name, state.tier5Dir)
           });
         }
@@ -132020,7 +132127,7 @@ function createDevServer(opts = {}) {
             const hit = appRoutes[routePath] ?? Object.entries(appRoutes).sort((a2, b2) => b2[0].length - a2[0].length).find(([p2]) => routePath.startsWith(p2))?.[1];
             if (hit) {
               const reqHost = req.headers.host;
-              const serverBaseUrl = reqHost ? `http://${reqHost}` : state.serverBaseUrl;
+              const serverBaseUrl = forwardedBaseUrl(req) ?? (reqHost ? `http://${reqHost}` : state.serverBaseUrl);
               return await hit(req, res, { store: state.moduleStore, serverBaseUrl });
             }
           }
@@ -132249,7 +132356,7 @@ var init_src6 = __esm({
     init_kits();
     init_widgets();
     init_descriptor_postprocess();
-    ROOT6 = resolve37(fileURLToPath20(new URL("../../..", import.meta.url)));
+    ROOT6 = resolve37(fileURLToPath21(new URL("../../..", import.meta.url)));
     setPngFontCss(async (tokens2, idiomContext) => await pngFontFaceCss(tokens2) + (idiomContext ? await idiomFontFaceCss(idiomContext) : ""));
     TIER3_ROOT = resolve37(ROOT6, "core/dev-server/web");
     TIER4_ROOT = resolve37(ROOT6, "core/dev-server/tier4-bundles");
@@ -135430,9 +135537,9 @@ __export(build_exports2, {
   withoutDevOnlyAppConfig: () => withoutDevOnlyAppConfig
 });
 import { createHash as createHash24 } from "node:crypto";
-import { readFileSync as readFileSync50, readdirSync as readdirSync24, existsSync as existsSync46 } from "node:fs";
-import { dirname as dirname29, join as join45, resolve as resolve38 } from "node:path";
-import { fileURLToPath as fileURLToPath21 } from "node:url";
+import { readFileSync as readFileSync51, readdirSync as readdirSync24, existsSync as existsSync46 } from "node:fs";
+import { dirname as dirname30, join as join46, resolve as resolve38 } from "node:path";
+import { fileURLToPath as fileURLToPath22 } from "node:url";
 import { createRequire as createRequire2 } from "node:module";
 import { execFileSync as execFileSync4 } from "node:child_process";
 import { gzipSync } from "node:zlib";
@@ -135473,10 +135580,10 @@ function l10nLintOptions(locale, appDir3) {
   const tags = (locale.translations ?? []).filter((t2) => t2 !== locale.default);
   const catalog3 = /* @__PURE__ */ new Set();
   for (const tag of tags) {
-    const path2 = join45(appDir3, "l10n", `${tag}.json`);
+    const path2 = join46(appDir3, "l10n", `${tag}.json`);
     if (!existsSync46(path2)) continue;
     try {
-      const parsed = JSON.parse(readFileSync50(path2, "utf8"));
+      const parsed = JSON.parse(readFileSync51(path2, "utf8"));
       for (const m2 of Object.values(parsed.messages ?? {})) {
         if (typeof m2?.source === "string" && typeof m2.translation === "string" && m2.translation.length > 0) {
           catalog3.add(m2.source);
@@ -135647,7 +135754,7 @@ function shellSha(root = REPO_ROOT7) {
 function isMonorepoCheckout(dir) {
   try {
     const top = execFileSync4("git", ["rev-parse", "--show-toplevel"], { cwd: dir, stdio: ["ignore", "pipe", "ignore"] }).toString().trim();
-    return top.length > 0 && existsSync46(join45(top, "core", "schema", "core.proto"));
+    return top.length > 0 && existsSync46(join46(top, "core", "schema", "core.proto"));
   } catch {
     return false;
   }
@@ -135834,7 +135941,7 @@ async function buildReleaseFromContent(contentDir2, dest, opts = {}) {
 function readTokensForLint(preloaded) {
   try {
     const tokenPath = preloaded.module.designTokensPath ?? resolve38(preloaded.dir, uiConfig(preloaded.module.config).designTokensPath ?? "tokens.json");
-    const parsed = JSON.parse(readFileSync50(tokenPath, "utf8"));
+    const parsed = JSON.parse(readFileSync51(tokenPath, "utf8"));
     delete parsed._meta;
     return parsed;
   } catch {
@@ -135845,18 +135952,18 @@ async function buildFromLoaded(preloaded, dest, opts = {}) {
   const app = preloaded.name;
   const tier5Dir = opts.tier5Dir ?? TIER5_DIR;
   const bundlePath = (name) => {
-    const own4 = join45(tier5Dir, `${name}.bundle.js`);
+    const own4 = join46(tier5Dir, `${name}.bundle.js`);
     if (existsSync46(own4)) return own4;
-    const shared = join45(TIER5_DIR, `${name}.bundle.js`);
+    const shared = join46(TIER5_DIR, `${name}.bundle.js`);
     return resolve38(tier5Dir) !== TIER5_DIR && existsSync46(shared) ? shared : void 0;
   };
   const bundleDirFor = (name) => {
     const path2 = name ? bundlePath(name) : void 0;
-    return path2 ? dirname29(path2) : tier5Dir;
+    return path2 ? dirname30(path2) : tier5Dir;
   };
   const readBundle = (name) => {
     const path2 = bundlePath(name);
-    return path2 ? readFileSync50(path2, "utf8") : void 0;
+    return path2 ? readFileSync51(path2, "utf8") : void 0;
   };
   const collect2 = opts.collect;
   const config = preloaded.module.config;
@@ -136001,12 +136108,12 @@ async function buildFromLoaded(preloaded, dest, opts = {}) {
     return { services, ...liveCalls ? { liveCalls } : {}, ...liveReturned !== void 0 ? { liveReturned } : {}, ...liveErrors ? { liveErrors } : {}, ...mockCalls ? { mockCalls, mockUnserved: mockUnserved ?? [] } : {}, ...mockBootFailed ? { mockBootFailed } : {} };
   };
   checkRegistry(preloaded.module.actions);
-  const contentManifestPath2 = join45(preloaded.dir, "himalaya.content.json");
-  const contentManifest = existsSync46(contentManifestPath2) ? JSON.parse(readFileSync50(contentManifestPath2, "utf8")) : void 0;
+  const contentManifestPath2 = join46(preloaded.dir, "himalaya.content.json");
+  const contentManifest = existsSync46(contentManifestPath2) ? JSON.parse(readFileSync51(contentManifestPath2, "utf8")) : void 0;
   let screenMetadata = parseScreenMetadata(contentManifest?.screens);
   if (contentManifest?.shell === "brandy" && screenMetadata) {
-    const provisioningPath2 = join45(preloaded.dir, "provisioning.json");
-    if (existsSync46(provisioningPath2)) screenMetadata = siteViewMetadataForBuild(screenMetadata, JSON.parse(readFileSync50(provisioningPath2, "utf8")).site);
+    const provisioningPath2 = join46(preloaded.dir, "provisioning.json");
+    if (existsSync46(provisioningPath2)) screenMetadata = siteViewMetadataForBuild(screenMetadata, JSON.parse(readFileSync51(provisioningPath2, "utf8")).site);
   }
   await store.reset(app);
   const bundles = {};
@@ -136043,7 +136150,7 @@ async function buildFromLoaded(preloaded, dest, opts = {}) {
     try {
       const path2 = bundlePath(name);
       if (!path2) return null;
-      bytes2 = readFileSync50(path2);
+      bytes2 = readFileSync51(path2);
     } catch {
       return null;
     }
@@ -136065,9 +136172,9 @@ async function buildFromLoaded(preloaded, dest, opts = {}) {
   const MAX_AUTHORING_DOC_BYTES = 128 * 1024;
   if (store.putDoc) {
     for (const [name, file2] of [["spec", "SPEC.md"], ["mobile-ux", "MOBILE-UX.md"]]) {
-      const path2 = join45(preloaded.dir, file2);
+      const path2 = join46(preloaded.dir, file2);
       if (!existsSync46(path2)) continue;
-      const bytes2 = readFileSync50(path2);
+      const bytes2 = readFileSync51(path2);
       if (bytes2.length === 0 || bytes2.length > MAX_AUTHORING_DOC_BYTES) {
         throw new Error(`${file2} must be non-empty and at most ${MAX_AUTHORING_DOC_BYTES} bytes to ship with a release.`);
       }
@@ -136082,7 +136189,7 @@ async function buildFromLoaded(preloaded, dest, opts = {}) {
     const iconPath = resolveAppDirIcon(preloaded.dir);
     if (iconPath) {
       try {
-        const bytes2 = readFileSync50(iconPath);
+        const bytes2 = readFileSync51(iconPath);
         await store.putIcon(app, bytes2);
         iconHash = sha2564(bytes2);
       } catch {
@@ -136104,7 +136211,7 @@ async function buildFromLoaded(preloaded, dest, opts = {}) {
     }
     const seenAssetSha = /* @__PURE__ */ new Set();
     for (const a2 of collected) {
-      const bytes2 = readFileSync50(a2.path);
+      const bytes2 = readFileSync51(a2.path);
       const hash2 = sha2564(bytes2);
       if (!seenAssetSha.has(hash2)) {
         await store.putAsset(app, hash2, bytes2, a2.contentType);
@@ -136126,7 +136233,7 @@ async function buildFromLoaded(preloaded, dest, opts = {}) {
   const fontWarnings = [];
   try {
     const appTokens = readTokensForLint(preloaded) ?? {};
-    const policy = existsSync46(join45(preloaded.dir, "fonts.json")) ? JSON.parse(readFileSync50(join45(preloaded.dir, "fonts.json"), "utf8")) : {};
+    const policy = existsSync46(join46(preloaded.dir, "fonts.json")) ? JSON.parse(readFileSync51(join46(preloaded.dir, "fonts.json"), "utf8")) : {};
     fontPlan = planFonts(appTokens, policy);
   } catch (err) {
     throw new Error(
@@ -136142,7 +136249,7 @@ async function buildFromLoaded(preloaded, dest, opts = {}) {
             `[release-build] ${family.name} face ${face.postScriptName} has no local bytes (sha ${face.sha256.slice(0, 12)}\u2026), so the release would declare a face the asset route cannot serve. Run \`npm run fonts:catalog\` to warm the cache before publishing.`
           );
         }
-        const bytes2 = readFileSync50(src);
+        const bytes2 = readFileSync51(src);
         const hash2 = sha2564(bytes2);
         if (hash2 !== face.sha256) {
           throw new Error(
@@ -136192,7 +136299,7 @@ async function buildFromLoaded(preloaded, dest, opts = {}) {
   if (store.putAsset) {
     for (const face of collectBrandFonts(preloaded.dir)) {
       try {
-        const bytes2 = readFileSync50(face.path);
+        const bytes2 = readFileSync51(face.path);
         if (bytes2.length === 0) continue;
         const hash2 = sha2564(bytes2);
         await store.putAsset(app, hash2, bytes2, "font/ttf");
@@ -136648,10 +136755,10 @@ async function buildFunctionsOnlyRelease(preloaded, dest) {
   await store.reset(app);
   const sources = {};
   for (const definition of config.functions.functions) {
-    const candidates = [".ts", ".js", ".mts", ".mjs"].map((extension) => join45(preloaded.dir, "functions", `${definition.name}${extension}`));
+    const candidates = [".ts", ".js", ".mts", ".mjs"].map((extension) => join46(preloaded.dir, "functions", `${definition.name}${extension}`));
     const source = candidates.find((candidate) => existsSync46(candidate));
     if (!source) throw new Error(`missing source for function ${definition.name}; expected functions/${definition.name}.ts`);
-    sources[definition.name] = readFileSync50(source, "utf8");
+    sources[definition.name] = readFileSync51(source, "utf8");
   }
   const built = await buildFunctions(config.functions.functions, sources);
   const bundles = {};
@@ -136679,7 +136786,7 @@ async function buildFunctionsOnlyRelease(preloaded, dest) {
   return { manifest, failedToBuild: [], missingBundles: [], auth: {}, tierCapViolations: [] };
 }
 function listBuildableApps() {
-  const appsDir = join45(REPO_ROOT7, "apps");
+  const appsDir = join46(REPO_ROOT7, "apps");
   return readdirSync24(appsDir, { withFileTypes: true }).filter((d2) => d2.isDirectory() && !d2.name.startsWith("_")).map((d2) => d2.name);
 }
 var BAKE_OFFLINE_BASE, KNOWN_ICON_NAMES, KNOWN_ICONS, REPO_ROOT7, TIER5_DIR, requireFromHere, SOURCEMAP_ON_DEMAND_PATH, BAKED_SERVER_BASE_URL;
@@ -136719,10 +136826,10 @@ var init_build3 = __esm({
     BAKE_OFFLINE_BASE = "http://himalaya-bake.invalid";
     KNOWN_ICON_NAMES = [...ICON_NAMES].sort();
     KNOWN_ICONS = new Set(KNOWN_ICON_NAMES);
-    REPO_ROOT7 = resolve38(dirname29(fileURLToPath21(import.meta.url)), "../..");
-    TIER5_DIR = join45(REPO_ROOT7, "core/dev-server/tier5-bundles");
+    REPO_ROOT7 = resolve38(dirname30(fileURLToPath22(import.meta.url)), "../..");
+    TIER5_DIR = join46(REPO_ROOT7, "core/dev-server/tier5-bundles");
     requireFromHere = createRequire2(import.meta.url);
-    SOURCEMAP_ON_DEMAND_PATH = join45(REPO_ROOT7, "core/dev-server/tier5-bundles-src/sourcemap-on-demand.mjs");
+    SOURCEMAP_ON_DEMAND_PATH = join46(REPO_ROOT7, "core/dev-server/tier5-bundles-src/sourcemap-on-demand.mjs");
     BAKED_SERVER_BASE_URL = "http://baked.himalaya.invalid";
   }
 });
@@ -137282,8 +137389,8 @@ __export(build_changes_exports, {
   diffTokens: () => diffTokens,
   headline: () => headline
 });
-import { existsSync as existsSync47, readdirSync as readdirSync25, readFileSync as readFileSync51 } from "node:fs";
-import { join as join46 } from "node:path";
+import { existsSync as existsSync47, readdirSync as readdirSync25, readFileSync as readFileSync52 } from "node:fs";
+import { join as join47 } from "node:path";
 function componentsOf(descriptor) {
   const out2 = /* @__PURE__ */ new Map();
   visitComponents(descriptor, (n2) => {
@@ -137354,13 +137461,13 @@ function describeChanges(oldTree, newTree, diff, opts = {}) {
   const after = screensIn(newTree);
   for (const id of diff.screens) {
     if (!after.has(id) || !before.has(id)) continue;
-    const was = readJson2(join46(oldTree, "screens", `${id}.json`));
-    const now = readJson2(join46(newTree, "screens", `${id}.json`));
+    const was = readJson3(join47(oldTree, "screens", `${id}.json`));
+    const now = readJson3(join47(newTree, "screens", `${id}.json`));
     const changes = diffDescriptors(id, was, now);
     if (changes.length) all.push(...changes);
     else all.push({ kind: JSON.stringify(was) === JSON.stringify(now) ? "logic" : "descriptor", screen: id });
   }
-  if (diff.tokens) all.push(...diffTokens(readJson2(join46(oldTree, "tokens.json")), readJson2(join46(newTree, "tokens.json"))));
+  if (diff.tokens) all.push(...diffTokens(readJson3(join47(oldTree, "tokens.json")), readJson3(join47(newTree, "tokens.json"))));
   for (const id of [...after].sort()) if (!before.has(id)) all.push({ kind: "screen-added", screen: id });
   for (const id of [...before].sort()) if (!after.has(id)) all.push({ kind: "screen-removed", screen: id });
   const ranked = all.map((c2, i2) => ({ c: c2, i: i2 })).sort((x2, y2) => RANK[x2.c.kind] - RANK[y2.c.kind] || x2.i - y2.i).map((x2) => x2.c);
@@ -137410,7 +137517,7 @@ function lineOf2(c2) {
       return `screen removed: ${c2.screen}`;
   }
 }
-var TEXT_PROPS, RANK, MAX_TEXT, MAX_ITEMS, cut, scalar2, readJson2, screensIn, HEX;
+var TEXT_PROPS, RANK, MAX_TEXT, MAX_ITEMS, cut, scalar2, readJson3, screensIn, HEX;
 var init_build_changes = __esm({
   "src/build-changes.ts"() {
     init_stable_ids();
@@ -137420,16 +137527,16 @@ var init_build_changes = __esm({
     MAX_ITEMS = 12;
     cut = (s2) => s2.length > MAX_TEXT ? `${s2.slice(0, MAX_TEXT - 1)}\u2026` : s2;
     scalar2 = (v2) => typeof v2 === "string" || typeof v2 === "number" || typeof v2 === "boolean";
-    readJson2 = (path2) => {
+    readJson3 = (path2) => {
       try {
-        return JSON.parse(readFileSync51(path2, "utf8"));
+        return JSON.parse(readFileSync52(path2, "utf8"));
       } catch {
         return void 0;
       }
     };
     screensIn = (tree) => {
       try {
-        return new Set(readdirSync25(join46(tree, "screens")).filter((f2) => f2.endsWith(".json")).map((f2) => f2.slice(0, -5)));
+        return new Set(readdirSync25(join47(tree, "screens")).filter((f2) => f2.endsWith(".json")).map((f2) => f2.slice(0, -5)));
       } catch {
         return /* @__PURE__ */ new Set();
       }
@@ -137439,8 +137546,8 @@ var init_build_changes = __esm({
 });
 
 // src/studio-timeline.ts
-import { existsSync as existsSync48, readFileSync as readFileSync52 } from "node:fs";
-import { join as join47 } from "node:path";
+import { existsSync as existsSync48, readFileSync as readFileSync53 } from "node:fs";
+import { join as join48 } from "node:path";
 function stateOf(view) {
   const j2 = view.journal[0];
   const h2 = view.health;
@@ -137507,10 +137614,10 @@ function validFrame(f2) {
   return true;
 }
 function readTimeline(dir) {
-  const file2 = join47(dir, TIMELINE_FILE);
+  const file2 = join48(dir, TIMELINE_FILE);
   if (!existsSync48(file2)) return [];
   const out2 = [];
-  for (const line of readFileSync52(file2, "utf8").split("\n")) {
+  for (const line of readFileSync53(file2, "utf8").split("\n")) {
     if (!line.trim()) continue;
     try {
       const f2 = JSON.parse(line);
@@ -137527,14 +137634,14 @@ function trim(frames) {
   return frames.slice(-MAX_FRAMES);
 }
 function writeTimelineJs(dir, frames) {
-  writeFileAtomic(join47(dir, TIMELINE_JS), `window.__himiTimeline && window.__himiTimeline(${scriptJson(frames)});
+  writeFileAtomic(join48(dir, TIMELINE_JS), `window.__himiTimeline && window.__himiTimeline(${scriptJson(frames)});
 `);
 }
 function appendFrame(dir, view, reveal = null) {
   const frames = readTimeline(dir);
   const last = frames[frames.length - 1];
   if (last && last.v === view.v && !reveal) {
-    if (!existsSync48(join47(dir, TIMELINE_JS))) writeTimelineJs(dir, frames);
+    if (!existsSync48(join48(dir, TIMELINE_JS))) writeTimelineJs(dir, frames);
     return frames.length;
   }
   let prev = null;
@@ -137543,7 +137650,7 @@ function appendFrame(dir, view, reveal = null) {
   if (!frame.key && !reveal && Object.keys(frame).every((k2) => k2 === "ts" || k2 === "v")) return frames.length;
   if (reveal) frame.reveal = reveal;
   const kept = trim([...frames, frame]);
-  writeFileAtomic(join47(dir, TIMELINE_FILE), kept.map((f2) => JSON.stringify(f2)).join("\n") + "\n");
+  writeFileAtomic(join48(dir, TIMELINE_FILE), kept.map((f2) => JSON.stringify(f2)).join("\n") + "\n");
   writeTimelineJs(dir, kept);
   return kept.length;
 }
@@ -137565,8 +137672,8 @@ var init_studio_timeline = __esm({
   "src/studio-timeline.ts"() {
     init_progress();
     init_studio_page();
-    TIMELINE_FILE = join47(".himi", "studio", "timeline.jsonl");
-    TIMELINE_JS = join47(".himi", "studio", "timeline.js");
+    TIMELINE_FILE = join48(".himi", "studio", "timeline.jsonl");
+    TIMELINE_JS = join48(".himi", "studio", "timeline.js");
     MAX_FRAMES = 2e3;
     KEYFRAME_EVERY = 50;
     same2 = (a2, b2) => JSON.stringify(a2) === JSON.stringify(b2);
@@ -137604,8 +137711,8 @@ __export(studio_exports, {
   writeStudioRecord: () => writeStudioRecord
 });
 import { createHash as createHash25 } from "node:crypto";
-import { existsSync as existsSync49, readdirSync as readdirSync26, readFileSync as readFileSync53, realpathSync as realpathSync8, statSync as statSync10 } from "node:fs";
-import { basename as basename11, extname as extname3, join as join48, relative as relative9, resolve as resolve39, sep as sep11 } from "node:path";
+import { existsSync as existsSync49, readdirSync as readdirSync26, readFileSync as readFileSync54, realpathSync as realpathSync8, statSync as statSync10 } from "node:fs";
+import { basename as basename11, extname as extname3, join as join49, relative as relative9, resolve as resolve39, sep as sep11 } from "node:path";
 import { pathToFileURL as pathToFileURL7 } from "node:url";
 function realInside(dir, abs) {
   try {
@@ -137630,12 +137737,12 @@ function archiveFile(dir, memory, abs) {
   if (size === 0) return null;
   const key2 = relative9(dir, abs);
   const hit = memory.files?.[key2];
-  if (hit && hit.size === size && hit.mtimeMs === mtimeMs && hit.ino === ino && existsSync49(join48(dir, HISTORY_DIR, `${hit.sha}.${hit.ext}`))) {
+  if (hit && hit.size === size && hit.mtimeMs === mtimeMs && hit.ino === ino && existsSync49(join49(dir, HISTORY_DIR, `${hit.sha}.${hit.ext}`))) {
     return { sha: hit.sha, ext: hit.ext, file: `${hit.sha}.${hit.ext}` };
   }
   let archived;
   try {
-    archived = archiveBytes(dir, readFileSync53(real));
+    archived = archiveBytes(dir, readFileSync54(real));
   } catch {
     return null;
   }
@@ -137644,17 +137751,17 @@ function archiveFile(dir, memory, abs) {
   return { sha: archived.sha256, ext: archived.ext, file: `${archived.sha256}.${archived.ext}` };
 }
 function loadMemory(dir, now) {
-  const raw = obj(readJson3(join48(dir, MEMORY_FILE)));
+  const raw = obj(readJson4(join49(dir, MEMORY_FILE)));
   if (raw && raw.version === 1 && obj(raw.shots) && Array.isArray(raw.timeline)) return raw;
   return { version: 1, createdAt: now, shots: {}, timeline: [] };
 }
 function observeShots(dir, memory, now) {
-  const shotsDir = join48(dir, ".himi", "shots");
+  const shotsDir = join49(dir, ".himi", "shots");
   const seen = /* @__PURE__ */ new Set();
   const files = existsSync49(shotsDir) ? readdirSync26(shotsDir).filter((f2) => /\.(png|jpe?g)$/i.test(f2)).sort() : [];
   for (const f2 of files) {
     const id = basename11(f2, extname3(f2));
-    const archived = archiveFile(dir, memory, join48(shotsDir, f2));
+    const archived = archiveFile(dir, memory, join49(shotsDir, f2));
     if (!archived) continue;
     seen.add(id);
     const { sha: sha2, ext } = archived;
@@ -137676,7 +137783,7 @@ function observeShots(dir, memory, now) {
   return memory;
 }
 function palette(dir) {
-  const colors = obj(obj(readJson3(join48(dir, "tokens.json")))?.colors);
+  const colors = obj(obj(readJson4(join49(dir, "tokens.json")))?.colors);
   if (!colors) return [];
   const pick2 = (key2) => {
     const v2 = colors[key2];
@@ -137686,7 +137793,7 @@ function palette(dir) {
   return ["accentPrimary", "accentSecondary", "accentSurface", "surfacePrimary", "textPrimary"].map(pick2).filter((x2) => !!x2);
 }
 function appIdentity(dir) {
-  const manifest = obj(readJson3(join48(dir, "himalaya.content.json")));
+  const manifest = obj(readJson4(join49(dir, "himalaya.content.json")));
   const name = text(manifest?.name) ?? basename11(resolve39(dir));
   const icon = text(manifest?.icon)?.trim();
   const iconPath = icon ? resolve39(dir, icon) : null;
@@ -137694,12 +137801,12 @@ function appIdentity(dir) {
   return { name, iconFile: real && statSync10(real).isFile() ? iconPath : null };
 }
 function testRuns(dir) {
-  const att = join48(dir, ".himi", "attestations");
+  const att = join49(dir, ".himi", "attestations");
   if (!existsSync49(att)) return [];
   const runs = [];
   for (const f2 of readdirSync26(att)) {
     if (!f2.endsWith(".json") || f2 === "latest.json") continue;
-    const r2 = obj(readJson3(join48(att, f2)));
+    const r2 = obj(readJson4(join49(att, f2)));
     if (!r2 || r2.tool !== "himi-test" || typeof r2.runId !== "string") continue;
     const report3 = obj(r2.report);
     const coverage = obj(r2.coverage);
@@ -137715,20 +137822,20 @@ function testRuns(dir) {
   return runs.sort((a2, b2) => a2.runId.localeCompare(b2.runId));
 }
 function siteHome(dir) {
-  for (const pages2 of [join48(dir, ".himi", "business-book", "evidence", "pages"), join48(dir, "evidence", "pages")]) {
+  for (const pages2 of [join49(dir, ".himi", "business-book", "evidence", "pages"), join49(dir, "evidence", "pages")]) {
     if (!existsSync49(pages2)) continue;
     const home = readdirSync26(pages2).filter((f2) => /^home.*\.(png|jpe?g)$/i.test(f2)).sort()[0];
-    if (home) return join48(pages2, home);
+    if (home) return join49(pages2, home);
   }
   return null;
 }
 function uxStatuses(dir) {
-  const platforms = obj(obj(readJson3(join48(dir, ".himi", "ux-audit.json")))?.platforms);
+  const platforms = obj(obj(readJson4(join49(dir, ".himi", "ux-audit.json")))?.platforms);
   if (!platforms) return [];
   return Object.entries(platforms).map(([platform, rec]) => ({ platform, status: text(obj(rec)?.status) ?? "" })).filter((p2) => p2.status);
 }
 function liveRun(dir) {
-  const rec = obj(readJson3(join48(dir, RUN_RECORD)));
+  const rec = obj(readJson4(join49(dir, RUN_RECORD)));
   const url = text(rec?.url);
   const pid = rec?.pid;
   if (!url || !/^https?:\/\//i.test(url) || typeof pid !== "number") return null;
@@ -137838,9 +137945,9 @@ function buildView(dir, memory, now) {
   const runs = testRuns(dir);
   const last = runs[runs.length - 1];
   const prev = runs[runs.length - 2];
-  const validate4 = obj(readJson3(join48(dir, VALIDATE_RECORD)));
-  const push = obj(readJson3(join48(dir, PUSH_RECORD)));
-  const edges = readJson3(join48(dir, EDGES_RECORD));
+  const validate4 = obj(readJson4(join49(dir, VALIDATE_RECORD)));
+  const push = obj(readJson4(join49(dir, PUSH_RECORD)));
+  const edges = readJson4(join49(dir, EDGES_RECORD));
   const nav = [];
   if (Array.isArray(edges)) {
     const seen = /* @__PURE__ */ new Set();
@@ -137879,7 +137986,7 @@ function buildView(dir, memory, now) {
     },
     brand: { site: siteImg },
     nav,
-    map: mapOf(readJson3(join48(dir, MAP_RECORD))),
+    map: mapOf(readJson4(join49(dir, MAP_RECORD))),
     live: liveRun(dir),
     timelineFrames: 0,
     reveal: memory.reveal ?? null
@@ -137913,15 +138020,15 @@ function writeBoard(dir, now) {
   } catch {
     view.timelineFrames = 0;
   }
-  writeAtomic(join48(dir, MEMORY_FILE), JSON.stringify(memory));
-  writeAtomic(join48(dir, STATE_FILE), `window.__himiStudio && window.__himiStudio(${scriptJson(view)});
+  writeAtomic(join49(dir, MEMORY_FILE), JSON.stringify(memory));
+  writeAtomic(join49(dir, STATE_FILE), `window.__himiStudio && window.__himiStudio(${scriptJson(view)});
 `);
-  writeAtomic(join48(dir, STUDIO_PAGE), renderStudioHtml(view));
+  writeAtomic(join49(dir, STUDIO_PAGE), renderStudioHtml(view));
   return view;
 }
 function refreshStudio(dir, now = /* @__PURE__ */ new Date()) {
   try {
-    if (!existsSync49(join48(dir, STUDIO_PAGE))) return { refreshed: false };
+    if (!existsSync49(join49(dir, STUDIO_PAGE))) return { refreshed: false };
     return { refreshed: true, view: writeBoard(dir, now.toISOString()) };
   } catch {
     return { refreshed: false };
@@ -137929,18 +138036,18 @@ function refreshStudio(dir, now = /* @__PURE__ */ new Date()) {
 }
 function openStudio(dir, now = /* @__PURE__ */ new Date()) {
   const view = writeBoard(dir, now.toISOString());
-  const page = join48(dir, STUDIO_PAGE);
+  const page = join49(dir, STUDIO_PAGE);
   return { page, url: pathToFileURL7(page).href, view };
 }
 function writeStudioRecord(dir, record2, value) {
   try {
     if (!realDirIn(dir, ".himi")) return;
-    writeAtomic(join48(dir, record2), `${JSON.stringify(value, null, 2)}
+    writeAtomic(join49(dir, record2), `${JSON.stringify(value, null, 2)}
 `);
   } catch {
   }
 }
-var STUDIO_DIR, STUDIO_PAGE, STATE_FILE, MEMORY_FILE, VALIDATE_RECORD, PUSH_RECORD, EDGES_RECORD, MAP_RECORD, RUN_RECORD, MAX_TIMELINE, MAX_JOURNAL, MAX_NAV_EDGES, readJson3, obj, num2, text, historyUrl, runTime, MAP_STATUSES, count, CHANGE_KINDS;
+var STUDIO_DIR, STUDIO_PAGE, STATE_FILE, MEMORY_FILE, VALIDATE_RECORD, PUSH_RECORD, EDGES_RECORD, MAP_RECORD, RUN_RECORD, MAX_TIMELINE, MAX_JOURNAL, MAX_NAV_EDGES, readJson4, obj, num2, text, historyUrl, runTime, MAP_STATUSES, count, CHANGE_KINDS;
 var init_studio = __esm({
   "src/studio.ts"() {
     init_studio_page();
@@ -137949,21 +138056,21 @@ var init_studio = __esm({
     init_studio_timeline();
     init_progress();
     init_studio_page();
-    STUDIO_DIR = join48(".himi", "studio");
-    STUDIO_PAGE = join48(STUDIO_DIR, "index.html");
-    STATE_FILE = join48(STUDIO_DIR, "state.js");
-    MEMORY_FILE = join48(STUDIO_DIR, "memory.json");
-    VALIDATE_RECORD = join48(".himi", "validate.json");
-    PUSH_RECORD = join48(".himi", "last-push.json");
-    EDGES_RECORD = join48(".himi", "test-edges.json");
-    MAP_RECORD = join48(".himi", "test-map.json");
-    RUN_RECORD = join48(".himi", "run.json");
+    STUDIO_DIR = join49(".himi", "studio");
+    STUDIO_PAGE = join49(STUDIO_DIR, "index.html");
+    STATE_FILE = join49(STUDIO_DIR, "state.js");
+    MEMORY_FILE = join49(STUDIO_DIR, "memory.json");
+    VALIDATE_RECORD = join49(".himi", "validate.json");
+    PUSH_RECORD = join49(".himi", "last-push.json");
+    EDGES_RECORD = join49(".himi", "test-edges.json");
+    MAP_RECORD = join49(".himi", "test-map.json");
+    RUN_RECORD = join49(".himi", "run.json");
     MAX_TIMELINE = 500;
     MAX_JOURNAL = 80;
     MAX_NAV_EDGES = 40;
-    readJson3 = (file2) => {
+    readJson4 = (file2) => {
       try {
-        return JSON.parse(readFileSync53(file2, "utf8"));
+        return JSON.parse(readFileSync54(file2, "utf8"));
       } catch {
         return null;
       }
@@ -138527,11 +138634,11 @@ __export(captcha_exports, {
   captchaContentInput: () => captchaContentInput,
   runCaptcha: () => runCaptcha
 });
-import { readFileSync as readFileSync54 } from "node:fs";
+import { readFileSync as readFileSync55 } from "node:fs";
 import { resolve as resolve40 } from "node:path";
 function readObject(path2) {
   try {
-    return JSON.parse(readFileSync54(path2, "utf8"));
+    return JSON.parse(readFileSync55(path2, "utf8"));
   } catch {
     return {};
   }
@@ -138601,7 +138708,7 @@ __export(preflight_exports, {
   parseStoreConfig: () => parseStoreConfig,
   requireEnv: () => requireEnv
 });
-import { existsSync as existsSync50, readFileSync as readFileSync55 } from "node:fs";
+import { existsSync as existsSync50, readFileSync as readFileSync56 } from "node:fs";
 import { isAbsolute as isAbsolute4, relative as relative10, resolve as resolve41 } from "node:path";
 function isInsideRepo(p2) {
   const rel = relative10(REPO_ROOT3, resolve41(p2));
@@ -138661,7 +138768,7 @@ function loadStoreConfig(app) {
   if (!existsSync50(p2)) {
     throw new Error(`No store config at ${p2}. Create apps/${app}/store/store.config.yaml first (see /setup-store-signing).`);
   }
-  return parseStoreConfig(readFileSync55(p2, "utf8"));
+  return parseStoreConfig(readFileSync56(p2, "utf8"));
 }
 var init_preflight = __esm({
   "../store-release/preflight.ts"() {
@@ -145390,11 +145497,11 @@ var init_customer_signing_inspect = __esm({
 });
 
 // src/push-onboarding.ts
-import { existsSync as existsSync51, mkdirSync as mkdirSync24, readFileSync as readFileSync56, statSync as statSync11, writeFileSync as writeFileSync20, chmodSync as chmodSync2 } from "node:fs";
-import { basename as basename12, dirname as dirname30, join as join49, resolve as resolve42 } from "node:path";
-function readJson4(path2) {
+import { existsSync as existsSync51, mkdirSync as mkdirSync24, readFileSync as readFileSync57, statSync as statSync11, writeFileSync as writeFileSync20, chmodSync as chmodSync2 } from "node:fs";
+import { basename as basename12, dirname as dirname31, join as join50, resolve as resolve42 } from "node:path";
+function readJson5(path2) {
   try {
-    const parsed = JSON.parse(readFileSync56(path2, "utf8"));
+    const parsed = JSON.parse(readFileSync57(path2, "utf8"));
     return parsed && typeof parsed === "object" && !Array.isArray(parsed) ? parsed : {};
   } catch {
     return {};
@@ -145402,9 +145509,9 @@ function readJson4(path2) {
 }
 function pushInputsFromContent(dir) {
   const root = resolve42(dir);
-  if (!existsSync51(join49(root, "himalaya.content.json"))) return { initialized: false };
-  const content = readJson4(join49(root, "himalaya.content.json"));
-  const provisioning = readJson4(join49(root, "provisioning.json"));
+  if (!existsSync51(join50(root, "himalaya.content.json"))) return { initialized: false };
+  const content = readJson5(join50(root, "himalaya.content.json"));
+  const provisioning = readJson5(join50(root, "provisioning.json"));
   const native = provisioning.native ?? {};
   return {
     initialized: true,
@@ -145479,7 +145586,7 @@ function readKeyFile(path2) {
   }
   let body;
   try {
-    body = readFileSync56(path2, "utf8");
+    body = readFileSync57(path2, "utf8");
   } catch {
     return { ok: false, code: "key_file_unreadable", reason: "cannot read the selected key file; check its path and file permissions" };
   }
@@ -145533,14 +145640,14 @@ function buildPushSetupBody(i2, keys) {
   };
 }
 function readPushOnboarding(dir) {
-  const path2 = join49(resolve42(dir), PUSH_ONBOARDING_PATH);
+  const path2 = join50(resolve42(dir), PUSH_ONBOARDING_PATH);
   if (!existsSync51(path2)) return { version: 1 };
-  const parsed = readJson4(path2);
+  const parsed = readJson5(path2);
   return { version: 1, ...parsed };
 }
 function writeFile(dir, file2) {
-  const path2 = join49(resolve42(dir), PUSH_ONBOARDING_PATH);
-  mkdirSync24(dirname30(path2), { recursive: true, mode: 448 });
+  const path2 = join50(resolve42(dir), PUSH_ONBOARDING_PATH);
+  mkdirSync24(dirname31(path2), { recursive: true, mode: 448 });
   writeFileSync20(path2, JSON.stringify(file2, null, 2) + "\n", { mode: 384 });
   try {
     chmodSync2(path2, 384);
@@ -145568,7 +145675,7 @@ function recordPushDeferral(dir, d2) {
   return push;
 }
 function clearPushDeferral(dir) {
-  const path2 = join49(resolve42(dir), PUSH_ONBOARDING_PATH);
+  const path2 = join50(resolve42(dir), PUSH_ONBOARDING_PATH);
   if (!existsSync51(path2)) return;
   const { push: _dropped, ...rest } = readPushOnboarding(dir);
   writeFile(dir, { ...rest, version: 1 });
@@ -145637,7 +145744,7 @@ var signing_inspect_exports = {};
 __export(signing_inspect_exports, {
   runSigningInspect: () => runSigningInspect
 });
-import { existsSync as existsSync52, readFileSync as readFileSync57, statSync as statSync12 } from "node:fs";
+import { existsSync as existsSync52, readFileSync as readFileSync58, statSync as statSync12 } from "node:fs";
 import { isAbsolute as isAbsolute5, resolve as resolve43 } from "node:path";
 function fail3(io2, code, fields = {}) {
   io2.error(JSON.stringify({ ok: false, code, ...fields }));
@@ -145734,9 +145841,9 @@ async function runSigningInspect(pos, flags, io2, deps = {}) {
       return fail3(io2, "signing_inspect_local_assets_unreadable", { error: "cert or profile file is unexpectedly large" });
     }
     assets = {
-      certificate: readFileSync57(certPath),
+      certificate: readFileSync58(certPath),
       certificatePassword: text4(flags["cert-password"]),
-      provisioningProfile: readFileSync57(profilePath2)
+      provisioningProfile: readFileSync58(profilePath2)
     };
   }
   try {
@@ -145885,7 +145992,7 @@ var init_hosted_owner = __esm({
 
 // src/config-source-edit.ts
 import { lstatSync as lstatSync14 } from "node:fs";
-import { join as join50 } from "node:path";
+import { join as join51 } from "node:path";
 import ts5 from "typescript";
 function defineAppLiteral(file2) {
   for (const statement of file2.statements) {
@@ -145984,7 +146091,7 @@ function backUpConfig(dir, folder, fileName, original) {
   const stamp = (/* @__PURE__ */ new Date()).toISOString().replace(/[:.]/g, "-");
   const backupDir = realDirIn(dir, `.himi/${folder}/${stamp}`);
   if (!backupDir) return void 0;
-  const backup = join50(backupDir, fileName);
+  const backup = join51(backupDir, fileName);
   writeFileAtomic(backup, original);
   return backup;
 }
@@ -146021,7 +146128,7 @@ __export(config_push_edit_exports, {
   enablePushInConfig: () => enablePushInConfig,
   previewPushConfigEdit: () => previewPushConfigEdit
 });
-import { readFileSync as readFileSync58 } from "node:fs";
+import { readFileSync as readFileSync59 } from "node:fs";
 import { basename as basename13 } from "node:path";
 import ts6 from "typescript";
 function enablePushInConfig(source, options) {
@@ -146141,7 +146248,7 @@ function noLiteralInstruction(pingAppName) {
 function previewPushConfigEdit(dir, options) {
   const path2 = configEntry(dir);
   if (!path2) return void 0;
-  const { applied, instructions } = enablePushInConfig(readFileSync58(path2, "utf8"), { ...options, fileName: basename13(path2) });
+  const { applied, instructions } = enablePushInConfig(readFileSync59(path2, "utf8"), { ...options, fileName: basename13(path2) });
   return { wouldApply: applied, instructions };
 }
 async function applyPushConfigEdit(dir, options, validate4) {
@@ -146150,7 +146257,7 @@ async function applyPushConfigEdit(dir, options, validate4) {
   const fileName = basename13(path2);
   const refuse7 = (why) => ({ changed: false, pushOn: false, applied: [], instructions: [why] });
   if (isSymlink2(path2)) return refuse7(`${fileName} is a symlink, so it was not edited: turn push on in the file it points to.`);
-  const original = readFileSync58(path2, "utf8");
+  const original = readFileSync59(path2, "utf8");
   const edit = enablePushInConfig(original, { ...options, fileName });
   const { applied, instructions, pushOn } = edit;
   if (!edit.changed) return { changed: false, pushOn, applied, instructions };
@@ -146470,8 +146577,8 @@ __export(pack_exports, {
 });
 import { createHash as createHash28 } from "node:crypto";
 import { deflateRawSync, inflateRawSync } from "node:zlib";
-import { existsSync as existsSync53, mkdirSync as mkdirSync25, readFileSync as readFileSync59, readdirSync as readdirSync27, rmSync as rmSync12, statSync as statSync13, writeFileSync as writeFileSync21 } from "node:fs";
-import { dirname as dirname31, join as join51, resolve as resolve45 } from "node:path";
+import { existsSync as existsSync53, mkdirSync as mkdirSync25, readFileSync as readFileSync60, readdirSync as readdirSync27, rmSync as rmSync12, statSync as statSync13, writeFileSync as writeFileSync21 } from "node:fs";
+import { dirname as dirname32, join as join52, resolve as resolve45 } from "node:path";
 function writeZip(entries) {
   const sorted2 = entries.slice().sort((a2, b2) => a2.path < b2.path ? -1 : a2.path > b2.path ? 1 : 0);
   const total = sorted2.reduce((n2, e2) => n2 + e2.bytes.length, 0);
@@ -146565,13 +146672,13 @@ function inflateEntry(buf, entry) {
   return bytes2;
 }
 function readIf(path2) {
-  return existsSync53(path2) && statSync13(path2).isFile() ? readFileSync59(path2) : null;
+  return existsSync53(path2) && statSync13(path2).isFile() ? readFileSync60(path2) : null;
 }
 function listDir(dir) {
-  return existsSync53(dir) ? readdirSync27(dir).filter((f2) => statSync13(join51(dir, f2)).isFile()) : [];
+  return existsSync53(dir) ? readdirSync27(dir).filter((f2) => statSync13(join52(dir, f2)).isFile()) : [];
 }
 function gatherReleaseEntries(appDir3) {
-  const manifestPath = join51(appDir3, HIMI_PACKAGE_MANIFEST_PATH);
+  const manifestPath = join52(appDir3, HIMI_PACKAGE_MANIFEST_PATH);
   const manifestBytes = readIf(manifestPath);
   if (!manifestBytes) throw new Error(`no ${HIMI_PACKAGE_MANIFEST_PATH} in ${appDir3} \u2014 build a release there first`);
   const manifest = JSON.parse(manifestBytes.toString("utf8"));
@@ -146595,7 +146702,7 @@ function gatherReleaseEntries(appDir3) {
   }
   const missing = [];
   for (const rel of wanted) {
-    const bytes2 = readIf(join51(appDir3, rel));
+    const bytes2 = readIf(join52(appDir3, rel));
     if (bytes2) entries.push({ path: rel, bytes: bytes2 });
     else missing.push(rel);
   }
@@ -146606,12 +146713,12 @@ function gatherReleaseEntries(appDir3) {
     );
   }
   for (const name of SINGLETONS) {
-    const bytes2 = readIf(join51(appDir3, name));
+    const bytes2 = readIf(join52(appDir3, name));
     if (bytes2) entries.push({ path: name, bytes: bytes2 });
   }
   const skipped = [];
   for (const sub of ["screens", "bundles", "assets", "widgets"]) {
-    for (const f2 of listDir(join51(appDir3, sub))) {
+    for (const f2 of listDir(join52(appDir3, sub))) {
       if (!wanted.has(`${sub}/${f2}`)) skipped.push(`${sub}/${f2}`);
     }
   }
@@ -146644,18 +146751,18 @@ function buildEntries(appDir3, app, opts) {
   return { all, header, manifest, skipped };
 }
 function packRelease(releaseRoot, app, out2, opts = {}) {
-  const appDir3 = join51(resolve45(releaseRoot), app);
+  const appDir3 = join52(resolve45(releaseRoot), app);
   const { all, header, skipped } = buildEntries(appDir3, app, opts);
   const buf = writeZip(all);
   const isDir2 = existsSync53(out2) && statSync13(out2).isDirectory();
-  const outFile = isDir2 ? join51(resolve45(out2), packageFileName(app, header.releaseId)) : resolve45(out2);
-  mkdirSync25(dirname31(outFile), { recursive: true });
+  const outFile = isDir2 ? join52(resolve45(out2), packageFileName(app, header.releaseId)) : resolve45(out2);
+  mkdirSync25(dirname32(outFile), { recursive: true });
   writeFileSync21(outFile, buf);
   return { app, releaseId: header.releaseId, header, out: outFile, bytes: buf.length, entryCount: all.length, skipped };
 }
 function resolvePackageDirDest(outDir, app, releaseId) {
   const packagedApp = (dir) => {
-    const bytes2 = readIf(join51(dir, HIMI_PACKAGE_HEADER_PATH));
+    const bytes2 = readIf(join52(dir, HIMI_PACKAGE_HEADER_PATH));
     if (!bytes2) return void 0;
     try {
       return JSON.parse(bytes2.toString("utf8")).app;
@@ -146672,7 +146779,7 @@ function resolvePackageDirDest(outDir, app, releaseId) {
     throw new Error(`refusing to write a package tree over ${outDir} \u2014 it is a file, not a directory`);
   }
   if (replaceable(outDir)) return outDir;
-  const child = join51(outDir, packageDirName(app, releaseId));
+  const child = join52(outDir, packageDirName(app, releaseId));
   if (!replaceable(child)) {
     throw new Error(
       `refusing to replace ${child}: it is not empty and is not a ${app} package (no ${HIMI_PACKAGE_HEADER_PATH}). Pass --out to a new or empty directory.`
@@ -146686,14 +146793,14 @@ function packReleaseToDir(releaseRoot, app, outDir, opts = {}) {
       "a package carrying the app's source has no --format dir form: readers that predate the source entry drop it before hashing a directory and refuse the package as tampered. Pack it as a .himi archive."
     );
   }
-  const appDir3 = join51(resolve45(releaseRoot), app);
+  const appDir3 = join52(resolve45(releaseRoot), app);
   const { all, header, skipped } = buildEntries(appDir3, app, opts);
   const dest = resolvePackageDirDest(resolve45(outDir), app, header.releaseId);
   rmSync12(dest, { recursive: true, force: true });
   let bytes2 = 0;
   for (const entry of all) {
-    const target = join51(dest, entry.path);
-    mkdirSync25(dirname31(target), { recursive: true });
+    const target = join52(dest, entry.path);
+    mkdirSync25(dirname32(target), { recursive: true });
     writeFileSync21(target, entry.bytes);
     bytes2 += entry.bytes.length;
   }
@@ -146715,18 +146822,18 @@ function openPackageBuffer(buf) {
   return openFromEntries(readZip(buf), { requireHeader: true });
 }
 function openPackageFile(file2) {
-  return openPackageBuffer(readFileSync59(file2));
+  return openPackageBuffer(readFileSync60(file2));
 }
 function openPackageDir(dir) {
   const root = resolve45(dir);
   const entries = /* @__PURE__ */ new Map();
   const walk2 = (rel) => {
-    const abs = rel ? join51(root, rel) : root;
+    const abs = rel ? join52(root, rel) : root;
     for (const name of readdirSync27(abs)) {
       const childRel = rel ? `${rel}/${name}` : name;
-      const childAbs = join51(abs, name);
+      const childAbs = join52(abs, name);
       if (statSync13(childAbs).isDirectory()) walk2(childRel);
-      else if (isSafeEntryName(childRel)) entries.set(childRel, readFileSync59(childAbs));
+      else if (isSafeEntryName(childRel)) entries.set(childRel, readFileSync60(childAbs));
     }
   };
   if (!existsSync53(root)) throw new Error(`no such package directory: ${root}`);
@@ -146771,11 +146878,11 @@ function unpackTo(buf, dest, appFallback) {
   if (!app) throw new Error("package declares no app id (no himi-package.json and no manifest.app)");
   if (!isSafeAppId(app)) throw new Error(`package declares an unsafe app id ${JSON.stringify(app)} \u2014 refusing to unpack it`);
   const root = resolve45(dest);
-  const appDir3 = join51(root, app);
+  const appDir3 = join52(root, app);
   rmSync12(appDir3, { recursive: true, force: true });
   for (const [rel, bytes2] of entries) {
-    const target = join51(appDir3, rel);
-    mkdirSync25(dirname31(target), { recursive: true });
+    const target = join52(appDir3, rel);
+    mkdirSync25(dirname32(target), { recursive: true });
     writeFileSync21(target, bytes2);
   }
   return { root, appDir: appDir3, app };
@@ -146814,23 +146921,23 @@ __export(app_source_exports, {
   zipAppSource: () => zipAppSource
 });
 import { createHash as createHash29 } from "node:crypto";
-import { readdirSync as readdirSync28, lstatSync as lstatSync15, readFileSync as readFileSync60, mkdirSync as mkdirSync26, writeFileSync as writeFileSync22, existsSync as existsSync54, rmSync as rmSync13, rmdirSync as rmdirSync2, unlinkSync as unlinkSync4 } from "node:fs";
-import { join as join52, resolve as resolve46, sep as sep13 } from "node:path";
+import { readdirSync as readdirSync28, lstatSync as lstatSync15, readFileSync as readFileSync61, mkdirSync as mkdirSync26, writeFileSync as writeFileSync22, existsSync as existsSync54, rmSync as rmSync13, rmdirSync as rmdirSync2, unlinkSync as unlinkSync4 } from "node:fs";
+import { join as join53, resolve as resolve46, sep as sep13 } from "node:path";
 import { createRequire as createRequire3 } from "node:module";
 import { deflateRawSync as deflateRawSync2 } from "node:zlib";
 function walkSourceTree(dir, file2, skip, enter = () => {
 }) {
   const walk2 = (relDir) => {
     enter(relDir);
-    for (const name of readdirSync28(join52(dir, relDir))) {
-      const rel = relDir ? join52(relDir, name) : name;
-      const st2 = lstatSync15(join52(dir, rel));
+    for (const name of readdirSync28(join53(dir, relDir))) {
+      const rel = relDir ? join53(relDir, name) : name;
+      const st2 = lstatSync15(join53(dir, rel));
       if (st2.isSymbolicLink()) {
         skip(rel);
         continue;
       }
       if (st2.isDirectory()) {
-        if (isDeniedSourceDir(name, relDir) || existsSync54(join52(dir, rel, PACKAGE_DIR_MARKER))) skip(rel);
+        if (isDeniedSourceDir(name, relDir) || existsSync54(join53(dir, rel, PACKAGE_DIR_MARKER))) skip(rel);
         else walk2(rel);
         continue;
       }
@@ -146848,7 +146955,7 @@ function collectAppSource(dir) {
   const skipped = [];
   walkSourceTree(
     dir,
-    (archivePath, hostRel) => entries.push({ path: archivePath, bytes: readFileSync60(join52(dir, hostRel)) }),
+    (archivePath, hostRel) => entries.push({ path: archivePath, bytes: readFileSync61(join53(dir, hostRel)) }),
     (hostRel) => skipped.push(hostRel)
   );
   entries.sort((a2, b2) => a2.path < b2.path ? -1 : a2.path > b2.path ? 1 : 0);
@@ -146862,7 +146969,7 @@ function renderInputRootDirs(dir) {
     (archivePath, hostRel) => {
       const segs = archivePath.split("/");
       if (!CODE_FILE.test(archivePath) || /\.d\.[cm]?ts$/i.test(archivePath)) return;
-      if (segs.length === 1 || segs[0] === "dev" || segs[0] === "tier5-src") entries.push(join52(dir, hostRel));
+      if (segs.length === 1 || segs[0] === "dev" || segs[0] === "tier5-src") entries.push(join53(dir, hostRel));
     },
     () => {
     }
@@ -146883,7 +146990,7 @@ function renderInputRootDirs(dir) {
       packages: "external",
       platform: "neutral",
       format: "esm",
-      outdir: join52(dir, ".himi", "render-inputs-out"),
+      outdir: join53(dir, ".himi", "render-inputs-out"),
       loader: empty,
       logLevel: "silent"
     });
@@ -146905,7 +147012,7 @@ function newestSourceChangeMs(dir) {
     dir,
     (archivePath, hostRel) => {
       if (/\.md$/i.test(archivePath) || !counts(hostRel)) return;
-      const m2 = lstatSync15(join52(dir, hostRel)).mtimeMs;
+      const m2 = lstatSync15(join53(dir, hostRel)).mtimeMs;
       if (m2 > newest) newest = m2;
     },
     () => {
@@ -146917,7 +147024,7 @@ function newestSourceChangeMs(dir) {
     // Nor a root directory the render does not read: creating a file in `_qa/` moves `_qa/`.
     (hostRel) => {
       if (hostRel === "" || !inRead(hostRel)) return;
-      const m2 = lstatSync15(join52(dir, hostRel)).mtimeMs;
+      const m2 = lstatSync15(join53(dir, hostRel)).mtimeMs;
       if (m2 > newest) newest = m2;
     }
   );
@@ -146929,7 +147036,7 @@ function sourceFingerprint(dir) {
     dir,
     (archivePath, hostRel) => {
       if (/\.md$/i.test(archivePath)) return;
-      files.push(`${archivePath}\0${createHash29("sha256").update(readFileSync60(join52(dir, hostRel))).digest("hex")}`);
+      files.push(`${archivePath}\0${createHash29("sha256").update(readFileSync61(join53(dir, hostRel))).digest("hex")}`);
     },
     () => {
     }
@@ -146984,13 +147091,13 @@ function writeAppSource(entries, destDir) {
     const segments = entry.path.split("/");
     let dir = root;
     for (const segment of segments.slice(0, -1)) {
-      dir = join52(dir, segment);
+      dir = join53(dir, segment);
       const kind = pathKind(dir);
       if (kind?.isSymbolicLink()) unlinkSync4(dir);
       else if (kind) continue;
       mkdirSync26(dir);
     }
-    const target = join52(root, ...segments);
+    const target = join53(root, ...segments);
     if (pathKind(target)?.isSymbolicLink()) unlinkSync4(target);
     writeFileSync22(target, entry.bytes);
     written.push(entry.path);
@@ -147025,7 +147132,7 @@ function writeConflicts(entries, destDir) {
     let dir = root;
     let stop = false;
     for (const [i2, segment] of segments.slice(0, -1).entries()) {
-      dir = join52(dir, segment);
+      dir = join53(dir, segment);
       const kind2 = pathKind(dir);
       if (!kind2 || kind2.isSymbolicLink()) {
         stop = true;
@@ -147037,7 +147144,7 @@ function writeConflicts(entries, destDir) {
       break;
     }
     if (stop) continue;
-    const kind = pathKind(join52(root, ...segments));
+    const kind = pathKind(join53(root, ...segments));
     if (kind && !kind.isSymbolicLink() && kind.isDirectory()) {
       say(entry.path, "is a directory here, but the release has a file at that path");
     }
@@ -147047,7 +147154,7 @@ function writeConflicts(entries, destDir) {
 function removeStaleSource(entries, destDir) {
   const root = resolve46(destDir);
   const removed = staleSourcePaths(entries, root);
-  for (const rel of removed) rmSync13(join52(root, ...rel.split("/")), { force: true });
+  for (const rel of removed) rmSync13(join53(root, ...rel.split("/")), { force: true });
   const needed = /* @__PURE__ */ new Set();
   for (const entry of entries) {
     if (isDeniedSourcePath(entry.path)) continue;
@@ -147059,10 +147166,10 @@ function removeStaleSource(entries, destDir) {
 }
 function pruneEmptyDirs(root, rel, needed, removed) {
   let empty = true;
-  for (const name of readdirSync28(rel ? join52(root, rel) : root)) {
-    const childRel = rel ? join52(rel, name) : name;
+  for (const name of readdirSync28(rel ? join53(root, rel) : root)) {
+    const childRel = rel ? join53(rel, name) : name;
     const posix5 = childRel.split(sep13).join("/");
-    const kind = lstatSync15(join52(root, childRel));
+    const kind = lstatSync15(join53(root, childRel));
     if (kind.isSymbolicLink() || !kind.isDirectory() || isDeniedSourceDir(name, rel)) {
       empty = false;
       continue;
@@ -147072,7 +147179,7 @@ function pruneEmptyDirs(root, rel, needed, removed) {
       empty = false;
       continue;
     }
-    rmdirSync2(join52(root, childRel));
+    rmdirSync2(join53(root, childRel));
     removed.push(`${posix5}/`);
   }
   return empty;
@@ -147142,9 +147249,9 @@ __export(run_watch_exports, {
   watchedContentDir: () => watchedContentDir,
   writeRunRecord: () => writeRunRecord
 });
-import { closeSync as closeSync4, constants as constants2, existsSync as existsSync55, fstatSync, lstatSync as lstatSync16, statSync as statSync14, readdirSync as readdirSync29, mkdirSync as mkdirSync27, openSync as openSync4, readFileSync as readFileSync61, realpathSync as realpathSync9, renameSync as renameSync10, rmSync as rmSync14, writeFileSync as writeFileSync23, watch as fsWatch } from "node:fs";
+import { closeSync as closeSync4, constants as constants2, existsSync as existsSync55, fstatSync, lstatSync as lstatSync16, statSync as statSync14, readdirSync as readdirSync29, mkdirSync as mkdirSync27, openSync as openSync4, readFileSync as readFileSync62, realpathSync as realpathSync9, renameSync as renameSync10, rmSync as rmSync14, writeFileSync as writeFileSync23, watch as fsWatch } from "node:fs";
 import { randomUUID as randomUUID6 } from "node:crypto";
-import { extname as extname4, join as join53, resolve as resolve47, sep as sep14 } from "node:path";
+import { extname as extname4, join as join54, resolve as resolve47, sep as sep14 } from "node:path";
 function diffReleases(prev, next) {
   const bundles = Object.keys(next.bundles).filter((b2) => prev.bundles[b2]?.sha256 !== next.bundles[b2].sha256).sort();
   const changedBundles = new Set(bundles);
@@ -147187,7 +147294,7 @@ function watchContent(dir, onChange, opts = {}) {
   let timer = null;
   const pending = /* @__PURE__ */ new Set();
   const changed = (_event, file2) => {
-    if (!file2 || ignoredChange(file2, (rel) => isDir(join53(dir, rel)))) return;
+    if (!file2 || ignoredChange(file2, (rel) => isDir(join54(dir, rel)))) return;
     pending.add(file2);
     if (timer) clearTimeout(timer);
     timer = setTimeout(() => {
@@ -147208,7 +147315,7 @@ function watchContent(dir, onChange, opts = {}) {
         return;
       }
       for (const name of entries) {
-        const path2 = join53(directory, String(name)), rel = prefix ? `${prefix}/${name}` : String(name);
+        const path2 = join54(directory, String(name)), rel = prefix ? `${prefix}/${name}` : String(name);
         try {
           const stat2 = lstatSync16(path2);
           if (stat2.isSymbolicLink() || ignoredChange(rel, () => stat2.isDirectory())) continue;
@@ -147249,7 +147356,7 @@ function watchedContentDir(source) {
   if (!source || /^https?:\/\//i.test(source)) return null;
   const dir = resolve47(source);
   try {
-    return statSync14(dir).isDirectory() && existsSync55(join53(dir, "himalaya.content.json")) ? dir : null;
+    return statSync14(dir).isDirectory() && existsSync55(join54(dir, "himalaya.content.json")) ? dir : null;
   } catch {
     return null;
   }
@@ -147306,7 +147413,7 @@ function serialize(task) {
   });
 }
 function himiDir(dir) {
-  const root = join53(dir, ".himi");
+  const root = join54(dir, ".himi");
   try {
     return lstatSync16(root).isDirectory() ? root : null;
   } catch (e2) {
@@ -147318,11 +147425,11 @@ function himiDir(dir) {
 function writeRunRecord(dir, record2) {
   const root = himiDir(dir);
   if (!root) return false;
-  const tmp = join53(root, `.run.json.${process.pid}.${randomUUID6()}.tmp`);
+  const tmp = join54(root, `.run.json.${process.pid}.${randomUUID6()}.tmp`);
   try {
     writeFileSync23(tmp, `${JSON.stringify(record2, null, 2)}
 `, { flag: "wx" });
-    renameSync10(tmp, join53(root, "run.json"));
+    renameSync10(tmp, join54(root, "run.json"));
   } catch (e2) {
     rmSync14(tmp, { force: true });
     throw e2;
@@ -147330,7 +147437,7 @@ function writeRunRecord(dir, record2) {
   return true;
 }
 function removeRunRecord(dir, owner) {
-  const root = join53(dir, ".himi");
+  const root = join54(dir, ".himi");
   try {
     if (!lstatSync16(root).isDirectory()) return;
   } catch {
@@ -147345,10 +147452,10 @@ function removeRunRecord(dir, owner) {
     }
     if (typeof pid === "number" && pid !== owner) return;
   }
-  rmSync14(join53(root, "run.json"), { force: true });
+  rmSync14(join54(root, "run.json"), { force: true });
 }
 function removeInitWatchRecord(dir, owner) {
-  const root = join53(dir, ".himi");
+  const root = join54(dir, ".himi");
   try {
     if (!lstatSync16(root).isDirectory()) return;
   } catch {
@@ -147363,19 +147470,19 @@ function removeInitWatchRecord(dir, owner) {
     return;
   }
   if (pid !== owner) return;
-  rmSync14(join53(root, "watch.json"), { force: true });
+  rmSync14(join54(root, "watch.json"), { force: true });
 }
 function boardFile(dir, pathname) {
   if (pathname === RUN_IDENTITY_PATH) {
     return new Response(JSON.stringify(runIdentity(dir)), { status: 200, headers: { "content-type": "application/json", "cache-control": "no-store" } });
   }
   let rel = null;
-  if (pathname === "/__himi/studio/" || pathname === "/__himi/studio/index.html") rel = join53("studio", "index.html");
-  else if (pathname === "/__himi/studio/state.js") rel = join53("studio", "state.js");
-  else if (pathname === "/__himi/studio/timeline.js") rel = join53("studio", "timeline.js");
+  if (pathname === "/__himi/studio/" || pathname === "/__himi/studio/index.html") rel = join54("studio", "index.html");
+  else if (pathname === "/__himi/studio/state.js") rel = join54("studio", "state.js");
+  else if (pathname === "/__himi/studio/timeline.js") rel = join54("studio", "timeline.js");
   else {
     const m2 = /^\/__himi\/history\/([0-9a-f]{64}\.(png|jpg|gif|webp))$/.exec(pathname);
-    if (m2) rel = join53("history", m2[1]);
+    if (m2) rel = join54("history", m2[1]);
   }
   if (!rel) return null;
   const bytes2 = readConfined(resolve47(dir, ".himi"), rel);
@@ -147391,7 +147498,7 @@ function readConfined(root, rel) {
     const parts = rel.split(sep14);
     let at2 = root;
     for (let i2 = 0; i2 < parts.length; i2++) {
-      at2 = join53(at2, parts[i2]);
+      at2 = join54(at2, parts[i2]);
       const st2 = lstatSync16(at2);
       if (st2.isSymbolicLink() || !(i2 === parts.length - 1 ? st2.isFile() : st2.isDirectory())) return null;
     }
@@ -147400,7 +147507,7 @@ function readConfined(root, rel) {
     const fd = openSync4(at2, constants2.O_RDONLY | (constants2.O_NOFOLLOW ?? 0));
     try {
       if (!fstatSync(fd).isFile()) return null;
-      return readFileSync61(fd);
+      return readFileSync62(fd);
     } finally {
       closeSync4(fd);
     }
@@ -147458,8 +147565,8 @@ __export(screen_state_exports, {
   withHomeCaveat: () => withHomeCaveat
 });
 import { createHash as createHash30 } from "node:crypto";
-import { lstatSync as lstatSync17, readFileSync as readFileSync62 } from "node:fs";
-import { join as join54 } from "node:path";
+import { lstatSync as lstatSync17, readFileSync as readFileSync63 } from "node:fs";
+import { join as join55 } from "node:path";
 function quotableLine(text9) {
   if (!text9) return void 0;
   const first = text9.split(/\r?\n/).map((l2) => l2.trim()).find(Boolean);
@@ -147515,10 +147622,10 @@ function screenStateOf(services, html, opts = {}) {
   return empty ? { ...empty, ...why } : { state: "content" };
 }
 function readRecord(dir) {
-  const file2 = join54(dir, SHOT_STATES_FILE);
+  const file2 = join55(dir, SHOT_STATES_FILE);
   try {
     if (!lstatSync17(file2).isFile()) return {};
-    const r2 = JSON.parse(readFileSync62(file2, "utf8"));
+    const r2 = JSON.parse(readFileSync63(file2, "utf8"));
     return r2.v === 1 && r2.shots && typeof r2.shots === "object" ? r2.shots : {};
   } catch {
     return {};
@@ -147530,7 +147637,7 @@ function recordShotState(dir, screenId, png, state, now = /* @__PURE__ */ new Da
     const shots = readRecord(dir);
     shots[sha256Of(png)] = { screen: screenId, state: state.state, ...state.line ? { line: state.line } : {}, ...state.initial ? { initial: true } : {}, ...state.offline ? { offline: true } : {}, at: now.toISOString() };
     const kept = Object.entries(shots).sort(([, a2], [, b2]) => a2.at < b2.at ? 1 : a2.at > b2.at ? -1 : 0).slice(0, KEEP);
-    writeFileAtomic(join54(dir, SHOT_STATES_FILE), `${JSON.stringify({ v: 1, shots: Object.fromEntries(kept) }, null, 2)}
+    writeFileAtomic(join55(dir, SHOT_STATES_FILE), `${JSON.stringify({ v: 1, shots: Object.fromEntries(kept) }, null, 2)}
 `);
   } catch {
   }
@@ -147573,11 +147680,11 @@ var SHOT_STATES_FILE, KEEP, LINE_MAX, str3, sha256Of;
 var init_screen_state = __esm({
   "src/screen-state.ts"() {
     init_progress();
-    SHOT_STATES_FILE = join54(".himi", "shot-states.json");
+    SHOT_STATES_FILE = join55(".himi", "shot-states.json");
     KEEP = 40;
     LINE_MAX = 120;
     str3 = (v2) => typeof v2 === "string" && v2.trim() ? v2 : void 0;
-    sha256Of = (file2) => createHash30("sha256").update(readFileSync62(file2)).digest("hex");
+    sha256Of = (file2) => createHash30("sha256").update(readFileSync63(file2)).digest("hex");
   }
 });
 
@@ -147593,10 +147700,10 @@ __export(studio_reel_exports, {
   utcDay: () => utcDay
 });
 import { createHash as createHash31 } from "node:crypto";
-import { lstatSync as lstatSync18, readFileSync as readFileSync63 } from "node:fs";
-import { basename as basename14, join as join55 } from "node:path";
+import { lstatSync as lstatSync18, readFileSync as readFileSync64 } from "node:fs";
+import { basename as basename14, join as join56 } from "node:path";
 function loadMemory2(dir) {
-  const m2 = readJson5(join55(dir, ".himi", "studio", "memory.json"));
+  const m2 = readJson6(join56(dir, ".himi", "studio", "memory.json"));
   if (!isObj3(m2) || m2.version !== 1 || !isObj3(m2.shots) || !Array.isArray(m2.timeline)) return null;
   const shots = [];
   for (const [id, s2] of Object.entries(m2.shots)) {
@@ -147633,8 +147740,8 @@ function planReel(dir) {
   const memory = loadMemory2(dir);
   const { entries } = readProgress(dir);
   const summary2 = summarizeProgress(entries);
-  const manifest = readJson5(join55(dir, "himalaya.content.json"));
-  const tokens2 = readJson5(join55(dir, "tokens.json"));
+  const manifest = readJson6(join56(dir, "himalaya.content.json"));
+  const tokens2 = readJson6(join56(dir, "tokens.json"));
   const accentToken = tokens2?.colors?.accentPrimary;
   const accentRaw = typeof accentToken === "string" ? accentToken : accentToken?.light;
   const accent = typeof accentRaw === "string" && ACCENT.test(accentRaw) ? accentRaw : DEFAULT_ACCENT;
@@ -147677,10 +147784,10 @@ function inlineImages(dir, plan, budget = REEL_BUDGET_BYTES) {
   const verified = (f2) => {
     if (!HISTORY_NAME.test(f2)) return null;
     try {
-      const path2 = join55(dir, HISTORY_DIR, f2);
+      const path2 = join56(dir, HISTORY_DIR, f2);
       const st2 = lstatSync18(path2);
       if (!st2.isFile() || st2.nlink !== 1) return null;
-      const bytes2 = readFileSync63(path2);
+      const bytes2 = readFileSync64(path2);
       return createHash31("sha256").update(bytes2).digest("hex") === f2.slice(0, 64) && imageExtension(bytes2) === f2.slice(65) ? bytes2 : null;
     } catch {
       return null;
@@ -147800,7 +147907,7 @@ function buildReel(dir, budget = REEL_BUDGET_BYTES) {
   const { plan, images } = inlineImages(dir, planReel(dir), budget);
   return { html: renderReel(plan, images), plan };
 }
-var REEL_BUDGET_BYTES, MAX_FLIP_FRAMES, DEFAULT_ACCENT, ACCENT, HISTORY_NAME, MIME2, mimeOf, readJson5, isObj3, str4, historyName, cited;
+var REEL_BUDGET_BYTES, MAX_FLIP_FRAMES, DEFAULT_ACCENT, ACCENT, HISTORY_NAME, MIME2, mimeOf, readJson6, isObj3, str4, historyName, cited;
 var init_studio_reel = __esm({
   "src/studio-reel.ts"() {
     init_progress();
@@ -147812,9 +147919,9 @@ var init_studio_reel = __esm({
     HISTORY_NAME = /^[0-9a-f]{64}\.(png|jpg|gif|webp)$/;
     MIME2 = { png: "image/png", jpg: "image/jpeg", gif: "image/gif", webp: "image/webp" };
     mimeOf = (file2) => MIME2[file2.slice(65)] ?? "image/png";
-    readJson5 = (file2) => {
+    readJson6 = (file2) => {
       try {
-        return JSON.parse(readFileSync63(file2, "utf8"));
+        return JSON.parse(readFileSync64(file2, "utf8"));
       } catch {
         return null;
       }
@@ -147831,12 +147938,12 @@ var init_studio_reel = __esm({
 });
 
 // src/home-screen-id.ts
-import { readFileSync as readFileSync64 } from "node:fs";
-import { join as join56 } from "node:path";
+import { readFileSync as readFileSync65 } from "node:fs";
+import { join as join57 } from "node:path";
 function homeScreenIdOf(dir) {
   let src;
   try {
-    src = readFileSync64(join56(dir, "dev", "index.ts"), "utf8");
+    src = readFileSync65(join57(dir, "dev", "index.ts"), "utf8");
   } catch {
     return null;
   }
@@ -147904,15 +148011,15 @@ __export(milestones_exports, {
 });
 import { createHash as createHash32, randomUUID as randomUUID7 } from "node:crypto";
 import { spawn as spawn5 } from "node:child_process";
-import { closeSync as closeSync5, existsSync as existsSync56, lstatSync as lstatSync19, readFileSync as readFileSync65, statSync as statSync15 } from "node:fs";
+import { closeSync as closeSync5, existsSync as existsSync56, lstatSync as lstatSync19, readFileSync as readFileSync66, statSync as statSync15 } from "node:fs";
 import { createServer as createServer4 } from "node:net";
-import { basename as basename15, dirname as dirname32, isAbsolute as isAbsolute6, join as join57, relative as relative11, resolve as resolve48, sep as sep15 } from "node:path";
+import { basename as basename15, dirname as dirname33, isAbsolute as isAbsolute6, join as join58, relative as relative11, resolve as resolve48, sep as sep15 } from "node:path";
 function homeShotPath(dir, home) {
   const root = resolve48(dir);
   const base = resolve48(root, ".himi", "shots");
   const shot = resolve48(base, `${home}.png`);
   if (!shot.startsWith(base + sep15)) return null;
-  for (let p2 = shot; p2 !== root && p2.startsWith(root + sep15); p2 = dirname32(p2)) {
+  for (let p2 = shot; p2 !== root && p2.startsWith(root + sep15); p2 = dirname33(p2)) {
     try {
       if (lstatSync19(p2).isSymbolicLink()) return null;
     } catch {
@@ -148017,7 +148124,7 @@ function autoPictureGate(dir) {
 }
 async function homePictureAtValidate(dir, opts) {
   if (!opts.ok) return { skipped: "validate found errors, so the picture was left as it is" };
-  if (!existsSync56(join57(dir, "himalaya.content.json"))) return { skipped: "not a content package" };
+  if (!existsSync56(join58(dir, "himalaya.content.json"))) return { skipped: "not a content package" };
   const env = opts.env ?? process.env;
   if (ciSet(env)) return { skipped: "the CI environment variable is set" };
   if (env.NODE_TEST_CONTEXT) return { skipped: "running under `node --test`" };
@@ -148241,16 +148348,16 @@ function rememberDraft(dir, releaseId, m2) {
       ...m2.tokensHash ? { tokensHash: m2.tokensHash } : {},
       ...m2.appConfigHash ? { appConfigHash: m2.appConfigHash } : {}
     };
-    writeFileAtomic(join57(dir, LAST_DRAFT_FILE), `${JSON.stringify({ v: 1, releaseId, manifest })}
+    writeFileAtomic(join58(dir, LAST_DRAFT_FILE), `${JSON.stringify({ v: 1, releaseId, manifest })}
 `);
   } catch {
   }
 }
 function lastDraft(dir) {
   try {
-    const file2 = join57(dir, LAST_DRAFT_FILE);
+    const file2 = join58(dir, LAST_DRAFT_FILE);
     if (!lstatSync19(file2).isFile()) return null;
-    const r2 = JSON.parse(readFileSync65(file2, "utf8"));
+    const r2 = JSON.parse(readFileSync66(file2, "utf8"));
     const m2 = r2.manifest;
     if (r2.v !== 1 || typeof r2.releaseId !== "string" || !m2 || typeof m2.screens !== "object" || !m2.screens || typeof m2.bundles !== "object" || !m2.bundles) return null;
     return { releaseId: r2.releaseId, manifest: m2 };
@@ -148301,7 +148408,7 @@ function recordInitSource(dir, opts = {}) {
       template: opts.template && TEMPLATE_NAME.test(opts.template) ? opts.template : null,
       ...opts.source ? { source: opts.source } : {}
     };
-    writeFileAtomic(join57(dir, INIT_SOURCE_FILE), `${JSON.stringify(record2, null, 2)}
+    writeFileAtomic(join58(dir, INIT_SOURCE_FILE), `${JSON.stringify(record2, null, 2)}
 `);
     return true;
   } catch {
@@ -148309,10 +148416,10 @@ function recordInitSource(dir, opts = {}) {
   }
 }
 function readInitSource(dir) {
-  const file2 = join57(dir, INIT_SOURCE_FILE);
+  const file2 = join58(dir, INIT_SOURCE_FILE);
   try {
     if (!lstatSync19(file2).isFile()) return null;
-    const r2 = JSON.parse(readFileSync65(file2, "utf8"));
+    const r2 = JSON.parse(readFileSync66(file2, "utf8"));
     if (r2.v !== 1 || typeof r2.fingerprint !== "string" || !/^[0-9a-f]{64}$/.test(r2.fingerprint) || typeof r2.newestMs !== "number") return null;
     return {
       v: 1,
@@ -148381,10 +148488,10 @@ function homeShotForPostcard(dir, opts = {}) {
 function contentHomePictures(dir, home) {
   const out2 = [];
   const shot = homeShotPath(dir, home);
-  const hist = realDirIn(dir, HISTORY_DIR) ? join57(dir, HISTORY_DIR) : null;
+  const hist = realDirIn(dir, HISTORY_DIR) ? join58(dir, HISTORY_DIR) : null;
   for (const r2 of recordedShots(dir, home)) {
     if (r2.state.state !== "content") continue;
-    for (const file2 of [shot, hist && join57(hist, `${r2.sha256}.png`)]) {
+    for (const file2 of [shot, hist && join58(hist, `${r2.sha256}.png`)]) {
       try {
         if (!file2 || !lstatSync19(file2).isFile() || sha256Of2(file2) !== r2.sha256) continue;
       } catch {
@@ -148397,10 +148504,10 @@ function contentHomePictures(dir, home) {
   return out2;
 }
 function readInitWatch(dir) {
-  const file2 = join57(dir, INIT_WATCH_FILE);
+  const file2 = join58(dir, INIT_WATCH_FILE);
   try {
     if (!lstatSync19(file2).isFile()) return null;
-    const r2 = JSON.parse(readFileSync65(file2, "utf8"));
+    const r2 = JSON.parse(readFileSync66(file2, "utf8"));
     if (r2.v !== 1 || typeof r2.pid !== "number" || !Number.isInteger(r2.pid) || r2.pid < 1) return null;
     if (typeof r2.url !== "string" || !/^http:\/\/127\.0\.0\.1:\d+\//.test(r2.url) || typeof r2.board !== "string" || typeof r2.log !== "string" || typeof r2.startedAt !== "string") return null;
     if (r2.root !== runRootId(dir)) return null;
@@ -148425,14 +148532,14 @@ function liveWatchRunning(dir, isAlive = pidAlive, now) {
 }
 function watchReminder(dir, opts = {}) {
   try {
-    if (!existsSync56(join57(dir, "himalaya.content.json"))) return void 0;
+    if (!existsSync56(join58(dir, "himalaya.content.json"))) return void 0;
     const nowDate = opts.now ?? /* @__PURE__ */ new Date();
     const live3 = liveWatch(dir, opts.isAlive, nowDate);
     const now = nowDate.getTime();
-    const file2 = join57(dir, REMINDERS_FILE);
+    const file2 = join58(dir, REMINDERS_FILE);
     let last = Number.NaN;
     try {
-      if (lstatSync19(file2).isFile()) last = Date.parse(JSON.parse(readFileSync65(file2, "utf8")).watch ?? "");
+      if (lstatSync19(file2).isFile()) last = Date.parse(JSON.parse(readFileSync66(file2, "utf8")).watch ?? "");
     } catch {
     }
     if (Number.isFinite(last) && now - last >= 0 && now - last < WATCH_REMINDER_EVERY_MS) return void 0;
@@ -148444,7 +148551,7 @@ function watchReminder(dir, opts = {}) {
     }
     const content = opts.content ?? displayPath(dir);
     const remote = readInitSource(dir)?.source === "remote" ? "init did not start it because this template came off the serve plane \u2014 once you have read its code, " : "";
-    return `${remote}start the live preview and leave it running: \`himi run --watch --content ${shellQuote(content)} &\` (the consent preflight first, if a worker or config calls Wix at boot) \u2014 it repaints on every save; the build board is ${shellQuote(join57(content, ".himi", "studio", "index.html"))}, or /__himi/studio/ on the preview`;
+    return `${remote}start the live preview and leave it running: \`himi run --watch --content ${shellQuote(content)} &\` (the consent preflight first, if a worker or config calls Wix at boot) \u2014 it repaints on every save; the build board is ${shellQuote(join58(content, ".himi", "studio", "index.html"))}, or /__himi/studio/ on the preview`;
   } catch {
     return void 0;
   }
@@ -148510,7 +148617,7 @@ async function startWatchAtInit(dir, opts) {
     child.unref();
     if (!child.pid) return { skipped: "the live preview did not start (no process) \u2014 start it yourself: `himi run --watch --content <dir> &`", ...note };
     const record2 = { v: 1, pid: child.pid, root: runRootId(dir), url, board, log: WATCH_LOG, startedAt: now.toISOString() };
-    if (realDirIn(dir, ".himi")) writeFileAtomic(join57(dir, INIT_WATCH_FILE), `${JSON.stringify(record2, null, 2)}
+    if (realDirIn(dir, ".himi")) writeFileAtomic(join58(dir, INIT_WATCH_FILE), `${JSON.stringify(record2, null, 2)}
 `);
     return { started: true, pid: child.pid, url, board, log: WATCH_LOG, ...note };
   } catch (e2) {
@@ -148525,7 +148632,7 @@ function watchRunning(w2) {
 function doNowBlock(opts) {
   const content = displayPath(opts.dir, opts.cwd);
   const home = opts.home ?? "<homeScreenId>";
-  const board = join57(content, ".himi", "studio", "index.html");
+  const board = join58(content, ".himi", "studio", "index.html");
   const running = watchRunning(opts.watch);
   const who = running?.by === "init" ? "init started it" : "already running";
   const watch2 = running ? `${running.url} (${who}; the board: ${running.board}) \u2014 leave it running, and do not start another` : `\`himi run --watch${contentArg(content)} &\` and leave it running (the board: ${shellQuote(board)}, or /__himi/studio/ on the preview)`;
@@ -148544,7 +148651,7 @@ function writeHandoverReel(dir) {
   try {
     if (!realDirIn(dir, ".himi")) return { skipped: ".himi is not a real directory inside the package (a symlink?), so no making-of was written" };
     const { html } = buildReel(dir);
-    const file2 = join57(dir, ".himi", "making-of.html");
+    const file2 = join58(dir, ".himi", "making-of.html");
     writeFileAtomic(file2, html);
     return { file: file2, hint: `hand ${basename15(file2)} to the owner at the handover \u2014 one self-contained page of their app taking shape; send it beside the preview link, never instead of it` };
   } catch (e2) {
@@ -148552,11 +148659,11 @@ function writeHandoverReel(dir) {
   }
 }
 function afterHandoverPostcard(dir, opts = {}) {
-  const file2 = join57(dir, ".himi", "making-of.html");
+  const file2 = join58(dir, ".himi", "making-of.html");
   let fresh = false;
   try {
     const st2 = lstatSync19(file2);
-    fresh = st2.isFile() && !st2.isSymbolicLink() && st2.mtimeMs >= statSync15(join57(dir, ".himi", "progress.jsonl")).mtimeMs;
+    fresh = st2.isFile() && !st2.isSymbolicLink() && st2.mtimeMs >= statSync15(join58(dir, ".himi", "progress.jsonl")).mtimeMs;
   } catch {
     fresh = false;
   }
@@ -148588,13 +148695,13 @@ var init_milestones = __esm({
     STILL_BUILDING_MESSAGE = "Still building: here's the home screen now.";
     yourFirstLookMessage = (dir) => `First look at your app: ${appName(dir)}'s home screen, with your changes.`;
     homeCaveat = (dir, image) => homeStateCaveat(shotStateFor(dir, image));
-    LAST_DRAFT_FILE = join57(".himi", "last-draft.json");
-    INIT_SOURCE_FILE = join57(".himi", "init-source.json");
+    LAST_DRAFT_FILE = join58(".himi", "last-draft.json");
+    INIT_SOURCE_FILE = join58(".himi", "init-source.json");
     STARTING_POINT_REF = "starting-point";
     TEMPLATE_NAME = /^[A-Za-z0-9._-]{1,64}$/;
-    sha256Of2 = (file2) => createHash32("sha256").update(readFileSync65(file2)).digest("hex");
+    sha256Of2 = (file2) => createHash32("sha256").update(readFileSync66(file2)).digest("hex");
     WATCH_REMINDER_EVERY_MS = 10 * 60 * 1e3;
-    REMINDERS_FILE = join57(".himi", "reminders.json");
+    REMINDERS_FILE = join58(".himi", "reminders.json");
     pidAlive = (pid) => {
       try {
         process.kill(pid, 0);
@@ -148603,7 +148710,7 @@ var init_milestones = __esm({
         return e2.code === "EPERM";
       }
     };
-    INIT_WATCH_FILE = join57(".himi", "watch.json");
+    INIT_WATCH_FILE = join58(".himi", "watch.json");
     INIT_WATCH_STARTING_MS = 5 * 60 * 1e3;
     INIT_WATCH_IDLE_MINUTES = 30;
     WATCH_LOG = ".himi/watch.log";
@@ -148639,8 +148746,8 @@ __export(template_sweep_exports, {
   sweepCopy: () => sweepCopy,
   sweepPairs: () => sweepPairs
 });
-import { readFileSync as readFileSync66, writeFileSync as writeFileSync24 } from "node:fs";
-import { join as join58 } from "node:path";
+import { readFileSync as readFileSync67, writeFileSync as writeFileSync24 } from "node:fs";
+import { join as join59 } from "node:path";
 import ts7 from "typescript";
 function isCopy(node, file2) {
   const parent = node.parent;
@@ -148681,7 +148788,7 @@ function sweepCopy(dir, pairs, dryRun) {
   const next = /* @__PURE__ */ new Map();
   const replaced = pairs.map(([from, to2]) => ({ from, to: to2, files: {} }));
   for (const f2 of files) {
-    const text9 = readFileSync66(join58(dir, f2), "utf8");
+    const text9 = readFileSync67(join59(dir, f2), "utf8");
     if (!pairs.some(([from]) => text9.includes(from) || text9.includes(JSON.stringify(from).slice(1, -1)))) continue;
     const kind = f2.endsWith(".json") ? ts7.ScriptKind.JSON : f2.endsWith("x") ? ts7.ScriptKind.TSX : ts7.ScriptKind.TS;
     const sf2 = ts7.createSourceFile(f2, text9, ts7.ScriptTarget.Latest, true, kind);
@@ -148710,16 +148817,16 @@ function sweepCopy(dir, pairs, dryRun) {
     if (errors.length) throw new TrimRefusal(`the sweep would break ${f2} \u2014 nothing written: ${errors[0]}`);
     next.set(f2, out2);
   }
-  const dev = next.get("dev/index.ts") ?? readFileSync66(join58(dir, "dev", "index.ts"), "utf8");
-  const config = next.get("config.ts") ?? readFileSync66(join58(dir, "config.ts"), "utf8");
+  const dev = next.get("dev/index.ts") ?? readFileSync67(join59(dir, "dev", "index.ts"), "utf8");
+  const config = next.get("config.ts") ?? readFileSync67(join59(dir, "config.ts"), "utf8");
   try {
     parseApp(dev, config);
   } catch (e2) {
     throw new TrimRefusal(`the sweep would leave dev/index.ts or config.ts unparseable \u2014 nothing written: ${e2.message}`);
   }
-  if (!dryRun) for (const [f2, t2] of next) writeFileSync24(join58(dir, f2), t2);
+  if (!dryRun) for (const [f2, t2] of next) writeFileSync24(join59(dir, f2), t2);
   const g2 = new RegExp(PLACEHOLDER.source, `${PLACEHOLDER.flags.replace("g", "")}g`);
-  const placeholdersLeft = all.reduce((n2, f2) => n2 + [...(next.get(f2) ?? readFileSync66(join58(dir, f2), "utf8")).matchAll(g2)].length, 0);
+  const placeholdersLeft = all.reduce((n2, f2) => n2 + [...(next.get(f2) ?? readFileSync67(join59(dir, f2), "utf8")).matchAll(g2)].length, 0);
   return {
     ok: true,
     dryRun,
@@ -148736,7 +148843,7 @@ function sweepPairs(set, mapFile) {
     pairs.push([s2.slice(0, at2), s2.slice(at2 + 2)]);
   }
   if (mapFile) {
-    const map = JSON.parse(readFileSync66(mapFile, "utf8"));
+    const map = JSON.parse(readFileSync67(mapFile, "utf8"));
     for (const [k2, v2] of Object.entries(map)) {
       if (typeof v2 !== "string") throw new TrimRefusal(`--map ${mapFile}: "${k2}" must map to a string`);
       pairs.push([k2, v2]);
@@ -148981,18 +149088,18 @@ __export(template_recommend_exports, {
   recommendTemplates: () => recommendTemplates,
   verticalsFromBook: () => verticalsFromBook
 });
-import { existsSync as existsSync57, readFileSync as readFileSync67 } from "node:fs";
-import { join as join59 } from "node:path";
+import { existsSync as existsSync57, readFileSync as readFileSync68 } from "node:fs";
+import { join as join60 } from "node:path";
 function verticalsFromBook(path2) {
-  const dir = existsSync57(join59(path2, "book.json")) || existsSync57(join59(path2, "provisioning.overlay.json")) ? path2 : join59(path2, ".himi", "business-book");
-  const overlay = join59(dir, "provisioning.overlay.json");
+  const dir = existsSync57(join60(path2, "book.json")) || existsSync57(join60(path2, "provisioning.overlay.json")) ? path2 : join60(path2, ".himi", "business-book");
+  const overlay = join60(dir, "provisioning.overlay.json");
   if (existsSync57(overlay)) {
-    const v2 = JSON.parse(readFileSync67(overlay, "utf8")).installedVerticals;
+    const v2 = JSON.parse(readFileSync68(overlay, "utf8")).installedVerticals;
     if (Array.isArray(v2) && v2.length) return v2.filter((x2) => typeof x2 === "string");
   }
-  const book = join59(dir, "book.json");
+  const book = join60(dir, "book.json");
   if (existsSync57(book)) {
-    const probes = JSON.parse(readFileSync67(book, "utf8")).probes;
+    const probes = JSON.parse(readFileSync68(book, "utf8")).probes;
     if (Array.isArray(probes)) return installedFromProbes(probes);
   }
   throw new Error(`no book.json / provisioning.overlay.json under ${path2} \u2014 run \`himi site analyze\` first, or pass --verticals`);
@@ -149402,8 +149509,8 @@ __export(eject_exports, {
   EJECTABLE: () => EJECTABLE,
   ejectModule: () => ejectModule
 });
-import { existsSync as existsSync58, mkdirSync as mkdirSync28, readFileSync as readFileSync68, writeFileSync as writeFileSync25 } from "node:fs";
-import { dirname as dirname33, join as join60, relative as relative12, resolve as resolve49, sep as sep16 } from "node:path";
+import { existsSync as existsSync58, mkdirSync as mkdirSync28, readFileSync as readFileSync69, writeFileSync as writeFileSync25 } from "node:fs";
+import { dirname as dirname34, join as join61, relative as relative12, resolve as resolve49, sep as sep16 } from "node:path";
 function locate(repoRootOrCwd, mod) {
   const inRepo = resolve49(repoRootOrCwd, `stdlib/flows/${mod}/src/index.ts`);
   if (existsSync58(inRepo)) return { path: inRepo, form: "source" };
@@ -149432,8 +149539,8 @@ function ejectModule(opts) {
     };
   }
   const ext = found.form === "source" ? "ts" : "mjs";
-  const target = join60(contentDir2, "tier5-src", "_ejected", `${mod}.${ext}`);
-  mkdirSync28(dirname33(target), { recursive: true });
+  const target = join61(contentDir2, "tier5-src", "_ejected", `${mod}.${ext}`);
+  mkdirSync28(dirname34(target), { recursive: true });
   const banner = `// EJECTED from @wix/himalaya/${mod}. This app owns this file now.
 //
 // Central fixes to @wix/himalaya/${mod} NO LONGER REACH THIS APP \u2014 including any
@@ -149446,7 +149553,7 @@ function ejectModule(opts) {
 // gate still applies. Ejecting buys layout and flow, never the floor.
 
 `;
-  const normalized = readFileSync68(found.path, "utf8").replace(
+  const normalized = readFileSync69(found.path, "utf8").replace(
     /(["'])@himalaya\/([a-z0-9-]+(?:\/[a-z0-9-]+)?)\1/g,
     (_m, q2, sub) => `${q2}@wix/himalaya/${sub}${q2}`
   );
@@ -149454,9 +149561,9 @@ function ejectModule(opts) {
   const rewired = [];
   for (const f2 of files) {
     if (!existsSync58(f2)) continue;
-    const before = readFileSync68(f2, "utf8");
+    const before = readFileSync69(f2, "utf8");
     let after = before;
-    let rel = relative12(dirname33(f2), target).split(sep16).join("/").replace(/\.tsx?$/, ".js");
+    let rel = relative12(dirname34(f2), target).split(sep16).join("/").replace(/\.tsx?$/, ".js");
     if (!rel.startsWith(".")) rel = `./${rel}`;
     for (const spec of specifiersFor(mod)) {
       const q2 = spec.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
@@ -149574,8 +149681,8 @@ var init_app_map = __esm({
 });
 
 // src/wix-writes.ts
-import { existsSync as existsSync59, readFileSync as readFileSync69 } from "node:fs";
-import { join as join61 } from "node:path";
+import { existsSync as existsSync59, readFileSync as readFileSync70 } from "node:fs";
+import { join as join62 } from "node:path";
 function isProvenRead(method, path2) {
   if (/[#\x00-\x1F\x7F]/.test(path2)) return false;
   const verb = method.toUpperCase();
@@ -149693,11 +149800,11 @@ function parseDataAccess(text9, from) {
 }
 function readDataAccess(dir) {
   for (const name of ["SPEC.md", "MOBILE-UX.md"]) {
-    const p2 = join61(dir, name);
+    const p2 = join62(dir, name);
     if (!existsSync59(p2)) continue;
     let text9;
     try {
-      text9 = readFileSync69(p2, "utf8");
+      text9 = readFileSync70(p2, "utf8");
     } catch {
       continue;
     }
@@ -149811,14 +149918,14 @@ __export(test_exports, {
   scopeDescriptors: () => scopeDescriptors,
   writeRecordedMocks: () => writeRecordedMocks
 });
-import { existsSync as existsSync60, mkdirSync as mkdirSync29, readFileSync as readFileSync70, writeFileSync as writeFileSync26 } from "node:fs";
-import { join as join62, resolve as resolve50 } from "node:path";
+import { existsSync as existsSync60, mkdirSync as mkdirSync29, readFileSync as readFileSync71, writeFileSync as writeFileSync26 } from "node:fs";
+import { join as join63, resolve as resolve50 } from "node:path";
 function readTestConfig(dir) {
   const p2 = resolve50(dir, TEST_CONFIG_FILE);
   if (!existsSync60(p2)) return {};
   let parsed;
   try {
-    parsed = JSON.parse(readFileSync70(p2, "utf8"));
+    parsed = JSON.parse(readFileSync71(p2, "utf8"));
   } catch (e2) {
     throw new Error(`${TEST_CONFIG_FILE} is not valid JSON \u2014 ${e2.message}`);
   }
@@ -149865,7 +149972,7 @@ function readTestConfig(dir) {
 function readNetRules(path2) {
   let parsed;
   try {
-    parsed = JSON.parse(readFileSync70(path2, "utf8"));
+    parsed = JSON.parse(readFileSync71(path2, "utf8"));
   } catch (e2) {
     throw new Error(`--net ${path2} could not be read as JSON \u2014 ${e2.message}`);
   }
@@ -149902,7 +150009,7 @@ function readCannedResponses() {
   ];
   for (const url of candidates) {
     try {
-      const parsed = JSON.parse(readFileSync70(url, "utf8"));
+      const parsed = JSON.parse(readFileSync71(url, "utf8"));
       const byKey = {};
       for (const [k2, v2] of Object.entries(parsed)) {
         if (!k2.startsWith("//")) byKey[k2] = v2;
@@ -149992,8 +150099,8 @@ function writeRecordedMocks(opts) {
     mkdir: (p2) => mkdirSync29(p2, { recursive: true }),
     write: (p2, s2) => writeFileSync26(p2, s2)
   };
-  fs2.mkdir(join62(opts.dir, "dev"));
-  fs2.write(join62(opts.dir, "dev", "net-mocks.json"), JSON.stringify(opts.mocks, null, 2) + "\n");
+  fs2.mkdir(join63(opts.dir, "dev"));
+  fs2.write(join63(opts.dir, "dev", "net-mocks.json"), JSON.stringify(opts.mocks, null, 2) + "\n");
   return { ok: true, rules, to: "dev/net-mocks.json" };
 }
 function scopeDescriptors(descriptors, requestedIds, invalidScreens) {
@@ -150539,14 +150646,14 @@ var mobile_ux_lint_exports = {};
 __export(mobile_ux_lint_exports, {
   mobileUxIssues: () => mobileUxIssues
 });
-import { existsSync as existsSync61, readFileSync as readFileSync71 } from "node:fs";
-import { join as join63 } from "node:path";
+import { existsSync as existsSync61, readFileSync as readFileSync72 } from "node:fs";
+import { join as join64 } from "node:path";
 function mobileUxIssues(dir, strict) {
-  const file2 = join63(dir, "MOBILE-UX.md");
+  const file2 = join64(dir, "MOBILE-UX.md");
   if (!existsSync61(file2)) return [];
   let text9;
   try {
-    text9 = readFileSync71(file2, "utf8");
+    text9 = readFileSync72(file2, "utf8");
   } catch {
     return [];
   }
@@ -152227,8 +152334,8 @@ __export(functions_exports, {
   resolveFunctionsTarget: () => resolveFunctionsTarget,
   runRemoteFunctionOperation: () => runRemoteFunctionOperation
 });
-import { readFileSync as readFileSync72, existsSync as existsSync62 } from "node:fs";
-import { join as join64, resolve as resolve51 } from "node:path";
+import { readFileSync as readFileSync73, existsSync as existsSync62 } from "node:fs";
+import { join as join65, resolve as resolve51 } from "node:path";
 function resolveFunctionsTarget(input) {
   const explicitUrl = input.functionsUrl?.trim();
   if (explicitUrl) return { mode: "remote", baseUrl: explicitUrl };
@@ -152247,9 +152354,9 @@ async function loadFunctionsApp(dir) {
   }
   const sources = {};
   for (const definition of config.functions.functions) {
-    const source = [".ts", ".js", ".mts", ".mjs"].map((extension) => join64(loaded.dir, "functions", `${definition.name}${extension}`)).find(existsSync62);
+    const source = [".ts", ".js", ".mts", ".mjs"].map((extension) => join65(loaded.dir, "functions", `${definition.name}${extension}`)).find(existsSync62);
     if (!source) throw new Error(`missing source for function ${definition.name}; expected functions/${definition.name}.ts`);
-    sources[definition.name] = readFileSync72(source, "utf8");
+    sources[definition.name] = readFileSync73(source, "utf8");
   }
   const data = config.cms || config.data ? mergeDataResources(config) : void 0;
   const dataErrors = validateDataResources(data, loaded.name).filter((issue2) => issue2.severity === "error");
@@ -152437,9 +152544,9 @@ var init_cli_bridge = __esm({
 });
 
 // src/mcp/file-tools.ts
-import { closeSync as closeSync6, constants as constants3, lstatSync as lstatSync20, mkdirSync as mkdirSync30, openSync as openSync5, readdirSync as readdirSync30, readFileSync as readFileSync73, realpathSync as realpathSync10, renameSync as renameSync11, rmSync as rmSync15, statSync as statSync16, writeSync, existsSync as existsSync63 } from "node:fs";
+import { closeSync as closeSync6, constants as constants3, lstatSync as lstatSync20, mkdirSync as mkdirSync30, openSync as openSync5, readdirSync as readdirSync30, readFileSync as readFileSync74, realpathSync as realpathSync10, renameSync as renameSync11, rmSync as rmSync15, statSync as statSync16, writeSync, existsSync as existsSync63 } from "node:fs";
 import { randomBytes as randomBytes4 } from "node:crypto";
-import { dirname as dirname34, isAbsolute as isAbsolute7, join as join65, relative as relative13, resolve as resolve52, sep as sep17 } from "node:path";
+import { dirname as dirname35, isAbsolute as isAbsolute7, join as join66, relative as relative13, resolve as resolve52, sep as sep17 } from "node:path";
 import * as z2 from "zod";
 function within(root, p2) {
   return p2 === root || p2.startsWith(root.endsWith(sep17) ? root : root + sep17);
@@ -152448,17 +152555,17 @@ function realish(p2) {
   let cur = p2;
   const tail = [];
   while (!existsSync63(cur)) {
-    const up = dirname34(cur);
+    const up = dirname35(cur);
     if (up === cur) break;
     tail.unshift(cur.slice(up.length + (up.endsWith(sep17) ? 0 : 1)));
     cur = up;
   }
-  return join65(realpathSync10(cur), ...tail);
+  return join66(realpathSync10(cur), ...tail);
 }
 function symlinkComponent(base, abs) {
   let cur = base;
   for (const part of relative13(base, abs).split(sep17).filter(Boolean)) {
-    cur = join65(cur, part);
+    cur = join66(cur, part);
     try {
       if (lstatSync20(cur).isSymbolicLink()) return relative13(base, cur);
     } catch {
@@ -152485,7 +152592,7 @@ async function confinedAppDir(args, deps) {
   if (link) return refuse5("outside_workspace", `"${link}" is a symlink \u2014 the app folder must be a real folder in the workspace`);
   const rel = relative13(root, dir);
   if (rel && (isDeniedSourcePath(`${rel}/x`) || isDeniedSourcePath(`${rel.toLowerCase()}/x`))) return refuse5("denied", `"${rel}" is a folder this tool does not touch`);
-  if (!existsSync63(join65(dir, CONTENT_MARKER))) {
+  if (!existsSync63(join66(dir, CONTENT_MARKER))) {
     return refuse5("not_an_app", `"${rel || "."}" is not an app folder (no ${CONTENT_MARKER}) \u2014 see himi_list_apps, or create one with himi_init`);
   }
   return dir;
@@ -152494,12 +152601,12 @@ function onDiskSpelling(abs) {
   let cur = abs;
   const tail = [];
   while (!existsSync63(cur)) {
-    const up = dirname34(cur);
+    const up = dirname35(cur);
     if (up === cur) break;
     tail.unshift(cur.slice(up.length + (up.endsWith(sep17) ? 0 : 1)));
     cur = up;
   }
-  return join65(realpathSync10.native(cur), ...tail);
+  return join66(realpathSync10.native(cur), ...tail);
 }
 function denied(appDir3, abs) {
   const rel = relative13(appDir3, abs);
@@ -152525,10 +152632,10 @@ function confinedPath(appDir3, rel) {
   return abs;
 }
 function writeNoFollow2(appDir3, abs, content) {
-  mkdirSync30(dirname34(abs), { recursive: true });
+  mkdirSync30(dirname35(abs), { recursive: true });
   const before = symlinkComponent(appDir3, abs);
   if (before) throw new Error(`"${before}" became a symlink`);
-  const tmp = join65(dirname34(abs), `.himi-write-${process.pid}-${randomBytes4(6).toString("hex")}.tmp`);
+  const tmp = join66(dirname35(abs), `.himi-write-${process.pid}-${randomBytes4(6).toString("hex")}.tmp`);
   const fd = openSync5(tmp, constants3.O_WRONLY | constants3.O_CREAT | constants3.O_EXCL | (constants3.O_NOFOLLOW ?? 0), 420);
   try {
     writeSync(fd, content);
@@ -152536,9 +152643,9 @@ function writeNoFollow2(appDir3, abs, content) {
     closeSync6(fd);
   }
   const link = symlinkComponent(appDir3, abs);
-  if (link || !within(realpathSync10(appDir3), realpathSync10(dirname34(abs)))) {
+  if (link || !within(realpathSync10(appDir3), realpathSync10(dirname35(abs)))) {
     rmSync15(tmp, { force: true });
-    throw new Error(`"${link ?? relative13(appDir3, dirname34(abs))}" changed into a link while writing`);
+    throw new Error(`"${link ?? relative13(appDir3, dirname35(abs))}" changed into a link while writing`);
   }
   renameSync11(tmp, abs);
 }
@@ -152548,7 +152655,7 @@ function listFiles(appDir3) {
     const parentRel = relative13(appDir3, d2);
     for (const e2 of readdirSync30(d2, { withFileTypes: true }).sort((a2, b2) => a2.name.localeCompare(b2.name))) {
       if (e2.isSymbolicLink()) continue;
-      const p2 = join65(d2, e2.name);
+      const p2 = join66(d2, e2.name);
       if (e2.isDirectory()) {
         if (isDeniedSourceDir(e2.name, parentRel) || isDeniedSourceDir(e2.name.toLowerCase(), parentRel)) continue;
         if (!walk2(p2)) return false;
@@ -152576,9 +152683,9 @@ function fileTools() {
         const root = resolve52(await d2.defaultDir());
         if (!existsSync63(root)) return ok({ ok: true, workspace: root, apps: [] });
         const apps = [];
-        if (existsSync63(join65(root, CONTENT_MARKER))) apps.push(".");
+        if (existsSync63(join66(root, CONTENT_MARKER))) apps.push(".");
         for (const e2 of readdirSync30(root, { withFileTypes: true })) {
-          if (e2.isDirectory() && !e2.name.startsWith(".") && existsSync63(join65(root, e2.name, CONTENT_MARKER))) apps.push(e2.name);
+          if (e2.isDirectory() && !e2.name.startsWith(".") && existsSync63(join66(root, e2.name, CONTENT_MARKER))) apps.push(e2.name);
         }
         return ok({ ok: true, workspace: root, apps: apps.sort() });
       }
@@ -152610,7 +152717,7 @@ function fileTools() {
         if (!existsSync63(p2) || !lstatSync20(p2).isFile()) return refuse5("not_found", `no file "${String(a2.path)}"`);
         const size = statSync16(p2).size;
         if (size > MAX_FILE_BYTES) return refuse5("too_large", `"${String(a2.path)}" is ${size} bytes \u2014 over the ${MAX_FILE_BYTES}-byte read limit`);
-        return ok({ ok: true, path: a2.path, bytes: size, content: readFileSync73(p2, "utf8") });
+        return ok({ ok: true, path: a2.path, bytes: size, content: readFileSync74(p2, "utf8") });
       }
     },
     {
@@ -153222,8 +153329,8 @@ __export(server_exports, {
   protectStdout: () => protectStdout,
   startMcpServer: () => startMcpServer
 });
-import { mkdirSync as mkdirSync31, readFileSync as readFileSync74 } from "node:fs";
-import { fileURLToPath as fileURLToPath22 } from "node:url";
+import { mkdirSync as mkdirSync31, readFileSync as readFileSync75 } from "node:fs";
+import { fileURLToPath as fileURLToPath23 } from "node:url";
 import { McpServer } from "@modelcontextprotocol/server";
 import { serveStdio, StdioServerTransport } from "@modelcontextprotocol/server/stdio";
 function protectStdout() {
@@ -153248,7 +153355,7 @@ async function firstRoot(server) {
     if (!server.server.getClientCapabilities()?.roots) return void 0;
     const { roots } = await server.server.listRoots();
     const uri = roots.find((r2) => r2.uri.startsWith("file://"))?.uri;
-    return uri ? fileURLToPath22(uri) : void 0;
+    return uri ? fileURLToPath23(uri) : void 0;
   } catch {
     return void 0;
   }
@@ -153282,7 +153389,7 @@ async function startMcpServer(opts) {
       status: (dir) => previewStatus(dir, previewDeps),
       stop: (dir) => stopPreview(dir, previewDeps)
     },
-    readFile: (p2) => readFileSync74(p2),
+    readFile: (p2) => readFileSync75(p2),
     login: createLoginSession({ ...defaultLoginDeps, selfCommand: previewDeps.selfCommand, ...opts.login }),
     ...opts.workspace ? { workspaceBoundary: opts.workspace } : {}
   };
@@ -153326,20 +153433,20 @@ __export(native_decode_exports, {
   runNativeDecode: () => runNativeDecode
 });
 import { execFileSync as execFileSync5, spawnSync as spawnSync2 } from "node:child_process";
-import { existsSync as existsSync64, mkdtempSync as mkdtempSync2, readFileSync as readFileSync75, rmSync as rmSync16, writeFileSync as writeFileSync27 } from "node:fs";
+import { existsSync as existsSync64, mkdtempSync as mkdtempSync2, readFileSync as readFileSync76, rmSync as rmSync16, writeFileSync as writeFileSync27 } from "node:fs";
 import { tmpdir as tmpdir3 } from "node:os";
-import { join as join66 } from "node:path";
-import { fileURLToPath as fileURLToPath23 } from "node:url";
+import { join as join67 } from "node:path";
+import { fileURLToPath as fileURLToPath24 } from "node:url";
 function nativeDecodePackageDir() {
-  return fileURLToPath23(new URL("../../../core/runtime/ios/HimalayaCore/", import.meta.url));
+  return fileURLToPath24(new URL("../../../core/runtime/ios/HimalayaCore/", import.meta.url));
 }
 function nativeDecodeAndroidHarnessDir() {
-  return fileURLToPath23(new URL("../../../tools/wix-sdk-android-tests/", import.meta.url));
+  return fileURLToPath24(new URL("../../../tools/wix-sdk-android-tests/", import.meta.url));
 }
 function nativeOracleShipped() {
   return {
-    ios: existsSync64(join66(nativeDecodePackageDir(), "Package.swift")),
-    android: existsSync64(join66(nativeDecodeAndroidHarnessDir(), "gradlew"))
+    ios: existsSync64(join67(nativeDecodePackageDir(), "Package.swift")),
+    android: existsSync64(join67(nativeDecodeAndroidHarnessDir(), "gradlew"))
   };
 }
 function detectNativeDecode(options = {}) {
@@ -153350,7 +153457,7 @@ function detectNativeDecode(options = {}) {
     return { platform: "ios", available: false, reason: `the iOS decoder oracle requires macOS (darwin); this host is ${hostPlatform}` };
   }
   if (!swiftAvailable) return { platform: "ios", available: false, reason: "swift is not on PATH" };
-  const packageAvailable = options.packageAvailable ?? existsSync64(join66(packageDir, "Package.swift"));
+  const packageAvailable = options.packageAvailable ?? existsSync64(join67(packageDir, "Package.swift"));
   if (!packageAvailable) {
     return {
       platform: "ios",
@@ -153362,7 +153469,7 @@ function detectNativeDecode(options = {}) {
 }
 function localPropertiesSdk(harnessDir) {
   try {
-    const match = readFileSync75(join66(harnessDir, "local.properties"), "utf8").match(/^sdk\.dir\s*=\s*(.+)$/m);
+    const match = readFileSync76(join67(harnessDir, "local.properties"), "utf8").match(/^sdk\.dir\s*=\s*(.+)$/m);
     return match?.[1]?.trim().replace(/\\([ :\\])/g, "$1") ?? null;
   } catch {
     return null;
@@ -153370,7 +153477,7 @@ function localPropertiesSdk(harnessDir) {
 }
 function detectAndroidNativeDecode(options = {}) {
   const harnessDir = options.harnessDir ?? nativeDecodeAndroidHarnessDir();
-  const gradlew = join66(harnessDir, "gradlew");
+  const gradlew = join67(harnessDir, "gradlew");
   const gradlewAvailable = options.gradlewAvailable ?? existsSync64(gradlew);
   if (!gradlewAvailable) {
     return {
@@ -153453,14 +153560,14 @@ function parseNativeDecodeOutput(stdout, expectedScreenIds, platform = "ios") {
   return verdicts;
 }
 function runNativeDecode(options) {
-  const descriptorDir = mkdtempSync2(join66(tmpdir3(), "himi-native-decode-"));
+  const descriptorDir = mkdtempSync2(join67(tmpdir3(), "himi-native-decode-"));
   const startedAt = Date.now();
   try {
     for (const descriptor of options.descriptors) {
       if (typeof descriptor.descriptorJson !== "string") {
         throw new Error(`native decode cannot judge ${descriptor.screenId}: the release builder did not return its exact baked JSON bytes`);
       }
-      writeFileSync27(join66(descriptorDir, `${encodeURIComponent(descriptor.screenId)}.json`), descriptor.descriptorJson);
+      writeFileSync27(join67(descriptorDir, `${encodeURIComponent(descriptor.screenId)}.json`), descriptor.descriptorJson);
     }
     options.progress?.("building cached Swift oracle");
     execFileSync5("swift", ["build", "--package-path", options.packageDir, "--product", "himi-decode-oracle"], {
@@ -153472,7 +153579,7 @@ function runNativeDecode(options) {
       encoding: "utf8"
     }).trim();
     options.progress?.(`running real Swift decoder over ${options.descriptors.length} screen${options.descriptors.length === 1 ? "" : "s"}`);
-    const stdout = execFileSync5(join66(binPath, "himi-decode-oracle"), ["--dir", descriptorDir], {
+    const stdout = execFileSync5(join67(binPath, "himi-decode-oracle"), ["--dir", descriptorDir], {
       stdio: ["ignore", "pipe", "pipe"],
       encoding: "utf8"
     });
@@ -153490,15 +153597,15 @@ function runNativeDecode(options) {
   }
 }
 function runAndroidNativeDecode(options) {
-  const descriptorDir = mkdtempSync2(join66(tmpdir3(), "himi-native-decode-android-"));
-  const outputPath = join66(descriptorDir, "verdicts.ndjson");
+  const descriptorDir = mkdtempSync2(join67(tmpdir3(), "himi-native-decode-android-"));
+  const outputPath = join67(descriptorDir, "verdicts.ndjson");
   const startedAt = Date.now();
   try {
     for (const descriptor of options.descriptors) {
       if (typeof descriptor.descriptorJson !== "string") {
         throw new Error(`native decode cannot judge ${descriptor.screenId}: the release builder did not return its exact baked JSON bytes`);
       }
-      writeFileSync27(join66(descriptorDir, `${encodeURIComponent(descriptor.screenId)}.json`), descriptor.descriptorJson);
+      writeFileSync27(join67(descriptorDir, `${encodeURIComponent(descriptor.screenId)}.json`), descriptor.descriptorJson);
     }
     options.progress?.(`running real Kotlin decoder over ${options.descriptors.length} screen${options.descriptors.length === 1 ? "" : "s"}`);
     execFileSync5(options.gradlew, [
@@ -153513,7 +153620,7 @@ function runAndroidNativeDecode(options) {
       stdio: ["ignore", "ignore", "pipe"],
       encoding: "utf8"
     });
-    const stdout = readFileSync75(outputPath, "utf8");
+    const stdout = readFileSync76(outputPath, "utf8");
     return {
       platform: "android",
       verdicts: parseNativeDecodeOutput(stdout, options.descriptors.map((descriptor) => descriptor.screenId), "android"),
@@ -153583,13 +153690,13 @@ __export(browser_authoring_exports, {
 });
 import { createServer as createServer5 } from "node:http";
 import { createHash as createHash35, randomBytes as randomBytes5 } from "node:crypto";
-import { existsSync as existsSync65, readdirSync as readdirSync31, readFileSync as readFileSync76, realpathSync as realpathSync11, statSync as statSync17 } from "node:fs";
-import { join as join67, posix as posix3, relative as relative14, sep as sep18 } from "node:path";
+import { existsSync as existsSync65, readdirSync as readdirSync31, readFileSync as readFileSync77, realpathSync as realpathSync11, statSync as statSync17 } from "node:fs";
+import { join as join68, posix as posix3, relative as relative14, sep as sep18 } from "node:path";
 function humanMs(ms2) {
   return ms2 < 1e3 ? `${ms2}ms` : `${Math.round(ms2 / 1e3)}s`;
 }
 function collectWorkerSources(tier5SrcDir, bundleName) {
-  const root = join67(tier5SrcDir, bundleName);
+  const root = join68(tier5SrcDir, bundleName);
   const files = {};
   const visitedDirs = /* @__PURE__ */ new Set();
   const walk2 = (abs, rel) => {
@@ -153597,12 +153704,12 @@ function collectWorkerSources(tier5SrcDir, bundleName) {
     if (visitedDirs.has(real)) return;
     visitedDirs.add(real);
     for (const name of readdirSync31(abs).sort()) {
-      const childAbs = join67(abs, name);
+      const childAbs = join68(abs, name);
       const childRel = posix3.join(rel, name);
       if (statSync17(childAbs).isDirectory()) {
         walk2(childAbs, childRel);
       } else if (/\.(ts|tsx|js|mjs|json)$/.test(name)) {
-        files[childRel] = readFileSync76(childAbs, "utf8");
+        files[childRel] = readFileSync77(childAbs, "utf8");
       }
     }
   };
@@ -153623,20 +153730,20 @@ function collectRelativeSiblings(files, tier5SrcDir) {
       const spec = m2[1];
       const virtual = posix3.normalize(posix3.join(dir, spec));
       if (!virtual.startsWith("/tier5-src/")) continue;
-      const onDisk = join67(tier5SrcDir, virtual.slice("/tier5-src/".length));
+      const onDisk = join68(tier5SrcDir, virtual.slice("/tier5-src/".length));
       const candidates = [
         onDisk,
         `${onDisk}.ts`,
         `${onDisk}.js`,
         onDisk.replace(/\.js$/, ".ts"),
-        join67(onDisk, "index.ts"),
-        join67(onDisk, "index.js")
+        join68(onDisk, "index.ts"),
+        join68(onDisk, "index.js")
       ];
       for (const abs of candidates) {
         if (!existsSync65(abs) || statSync17(abs).isDirectory()) continue;
         const key2 = `/tier5-src/${relative14(tier5SrcDir, abs).split(sep18).join(posix3.sep)}`;
         if (key2 in files) break;
-        files[key2] = readFileSync76(abs, "utf8");
+        files[key2] = readFileSync77(abs, "utf8");
         queue.push(key2);
         break;
       }
@@ -153671,7 +153778,7 @@ function collectSdkModules(files, resolveSubpath) {
 function sdkSubpathReader(resolve61) {
   return (sub) => {
     try {
-      return readFileSync76(resolve61(`@wix/himalaya/${sub}`), "utf8");
+      return readFileSync77(resolve61(`@wix/himalaya/${sub}`), "utf8");
     } catch {
       return null;
     }
@@ -153843,8 +153950,8 @@ __export(coverage_exports, {
   suppressedNativeKeys: () => suppressedNativeKeys,
   trendAndStore: () => trendAndStore
 });
-import { existsSync as existsSync66, mkdirSync as mkdirSync32, readFileSync as readFileSync77, writeFileSync as writeFileSync28 } from "node:fs";
-import { dirname as dirname35, join as join68 } from "node:path";
+import { existsSync as existsSync66, mkdirSync as mkdirSync32, readFileSync as readFileSync78, writeFileSync as writeFileSync28 } from "node:fs";
+import { dirname as dirname36, join as join69 } from "node:path";
 function suppressedNativeKeys(oracle) {
   return [...oracle.ios ? [] : ["native-decode|ios"], ...oracle.android ? [] : ["native-decode|android"]];
 }
@@ -154024,11 +154131,11 @@ function assembleLedger(r2, options = {}) {
   return out2;
 }
 function trendAndStore(dir, entries, suppressed) {
-  const p2 = join68(dir, LEDGER_FILE);
+  const p2 = join69(dir, LEDGER_FILE);
   let previous = null;
   try {
     if (existsSync66(p2)) {
-      const parsed = JSON.parse(readFileSync77(p2, "utf8"));
+      const parsed = JSON.parse(readFileSync78(p2, "utf8"));
       if (Array.isArray(parsed.keys)) previous = parsed.keys.filter((k2) => typeof k2 === "string");
     }
   } catch {
@@ -154036,7 +154143,7 @@ function trendAndStore(dir, entries, suppressed) {
   const current = entries.map((e2) => e2.key);
   const stored = [.../* @__PURE__ */ new Set([...current, ...(previous ?? []).filter((key2) => (suppressed ?? []).includes(key2))])];
   try {
-    mkdirSync32(dirname35(p2), { recursive: true });
+    mkdirSync32(dirname36(p2), { recursive: true });
     writeFileSync28(p2, JSON.stringify({ keys: stored, ts: (/* @__PURE__ */ new Date()).toISOString() }, null, 2));
   } catch {
     return null;
@@ -154067,11 +154174,11 @@ function formatLedger(entries, trend) {
   return out2.join("\n");
 }
 function diffAndStoreObservations(dir, current) {
-  const p2 = join68(dir, OBS_FILE);
+  const p2 = join69(dir, OBS_FILE);
   let previous = null;
   try {
     if (existsSync66(p2)) {
-      const parsed = JSON.parse(readFileSync77(p2, "utf8"));
+      const parsed = JSON.parse(readFileSync78(p2, "utf8"));
       if (parsed.screens && typeof parsed.screens === "object" && !Array.isArray(parsed.screens) && Object.values(parsed.screens).every(
         (v2) => Array.isArray(v2) && v2.every((l2) => typeof l2 === "string")
       )) {
@@ -154081,7 +154188,7 @@ function diffAndStoreObservations(dir, current) {
   } catch {
   }
   try {
-    mkdirSync32(dirname35(p2), { recursive: true });
+    mkdirSync32(dirname36(p2), { recursive: true });
     writeFileSync28(p2, JSON.stringify({ screens: current, ts: (/* @__PURE__ */ new Date()).toISOString() }, null, 2));
   } catch {
     return null;
@@ -154120,8 +154227,8 @@ var LEDGER_FILE, OBS_FILE;
 var init_coverage = __esm({
   "src/coverage.ts"() {
     init_native_decode();
-    LEDGER_FILE = join68(".himi", "test-ledger.json");
-    OBS_FILE = join68(".himi", "test-observations.json");
+    LEDGER_FILE = join69(".himi", "test-ledger.json");
+    OBS_FILE = join69(".himi", "test-observations.json");
   }
 });
 
@@ -154132,9 +154239,9 @@ __export(design_kits_exports, {
   kitsDir: () => kitsDir,
   listKits: () => listKits2
 });
-import { existsSync as existsSync67, readFileSync as readFileSync78, readdirSync as readdirSync32 } from "node:fs";
-import { join as join69, basename as basename16 } from "node:path";
-import { fileURLToPath as fileURLToPath24 } from "node:url";
+import { existsSync as existsSync67, readFileSync as readFileSync79, readdirSync as readdirSync32 } from "node:fs";
+import { join as join70, basename as basename16 } from "node:path";
+import { fileURLToPath as fileURLToPath25 } from "node:url";
 function kitsDir() {
   return KIT_DIR_CANDIDATES.find((p2) => existsSync67(p2));
 }
@@ -154160,7 +154267,7 @@ In a published @wix/himalaya-cli this is a packaging bug \u2014 the kits should
   if (!kits.includes(name)) {
     return { ok: false, kit: name, kits, problems: [`no design kit named "${name}". Available: ${kits.join(", ")}`] };
   }
-  const raw = readFileSync78(join69(dir, `${name}.json`), "utf8");
+  const raw = readFileSync79(join70(dir, `${name}.json`), "utf8");
   let parsed;
   try {
     parsed = JSON.parse(raw);
@@ -154184,9 +154291,9 @@ var init_design_kits = __esm({
   "src/design-kits.ts"() {
     KIT_DIR_CANDIDATES = [
       // in-repo: tools/himi-cli/src/design-kits.ts → <repo>/stdlib/design-kits/
-      join69(fileURLToPath24(new URL("../../..", import.meta.url)), "stdlib", "design-kits"),
+      join70(fileURLToPath25(new URL("../../..", import.meta.url)), "stdlib", "design-kits"),
       // published CLI: <pkg>/dist/cli.mjs → <pkg>/stdlib/design-kits/
-      join69(fileURLToPath24(new URL("..", import.meta.url)), "stdlib", "design-kits")
+      join70(fileURLToPath25(new URL("..", import.meta.url)), "stdlib", "design-kits")
     ];
   }
 });
@@ -154200,11 +154307,11 @@ __export(assets_exports, {
   removeAssetPayload: () => removeAssetPayload,
   verifyReport: () => verifyReport
 });
-import { readFileSync as readFileSync79 } from "node:fs";
+import { readFileSync as readFileSync80 } from "node:fs";
 import { basename as basename17 } from "node:path";
 function declaredAssets(dir) {
   return collectAssets(dir).map((a2) => {
-    const bytes2 = readFileSync79(a2.path);
+    const bytes2 = readFileSync80(a2.path);
     return {
       name: a2.name,
       sha256: assetSha256(bytes2),
@@ -154281,7 +154388,7 @@ function verifyReport(dir, app, manifest) {
   };
 }
 function addAssetPayload(manifest, filePath, opts) {
-  const bytes2 = readFileSync79(filePath);
+  const bytes2 = readFileSync80(filePath);
   const name = opts.name ?? basename17(filePath);
   const sha2566 = assetSha256(bytes2);
   const record2 = {
@@ -156072,10 +156179,10 @@ __export(run_exports, {
   runPackage: () => runPackage,
   withoutProdServe: () => withoutProdServe
 });
-import { cpSync as cpSync2, existsSync as existsSync68, mkdirSync as mkdirSync33, mkdtempSync as mkdtempSync3, readFileSync as readFileSync80, rmSync as rmSync17, statSync as statSync18 } from "node:fs";
+import { cpSync as cpSync2, existsSync as existsSync68, mkdirSync as mkdirSync33, mkdtempSync as mkdtempSync3, readFileSync as readFileSync81, rmSync as rmSync17, statSync as statSync18 } from "node:fs";
 import { networkInterfaces as osNetworkInterfaces, tmpdir as tmpdir4 } from "node:os";
-import { dirname as dirname36, join as join70 } from "node:path";
-import { fileURLToPath as fileURLToPath25 } from "node:url";
+import { dirname as dirname37, join as join71 } from "node:path";
+import { fileURLToPath as fileURLToPath26 } from "node:url";
 function makePackageRunHandler(opts) {
   const store = new FileReleaseStore(opts.releaseRoot);
   const webwixDirect = async () => {
@@ -156103,7 +156210,7 @@ async function fetchBytes(url) {
 async function resolvePackage(source, workDir) {
   const isUrl2 = /^https?:\/\//i.test(source);
   if (!isUrl2 && existsSync68(source) && statSync18(source).isDirectory()) {
-    const appDirManifest = join70(source, "release-manifest.json");
+    const appDirManifest = join71(source, "release-manifest.json");
     if (existsSync68(appDirManifest)) {
       const opened2 = openPackageDir(source);
       if (!opened2.validation.ok) {
@@ -156113,9 +156220,9 @@ async function resolvePackage(source, workDir) {
       const app2 = opened2.header?.app ?? opened2.manifest?.app;
       if (!app2) throw new Error(`${source} has no app id (no himi-package.json and no manifest.app)`);
       if (!isSafeAppId(app2)) throw new Error(`${source} declares an unsafe app id ${JSON.stringify(app2)} \u2014 refusing to open it`);
-      const root2 = workDir ?? mkdtempSync3(join70(tmpdir4(), "himi-run-"));
-      const target = join70(root2, app2);
-      if (join70(source) !== target) {
+      const root2 = workDir ?? mkdtempSync3(join71(tmpdir4(), "himi-run-"));
+      const target = join71(root2, app2);
+      if (join71(source) !== target) {
         mkdirSync33(root2, { recursive: true });
         rmSync17(target, { recursive: true, force: true });
         cpSync2(source, target, { recursive: true });
@@ -156132,8 +156239,8 @@ async function resolvePackage(source, workDir) {
     }
     throw new Error(`${source} is a directory but has no release-manifest.json \u2014 is it a package?`);
   }
-  const bytes2 = isUrl2 ? await fetchBytes(source) : readFileSync80(source);
-  const root = workDir ?? mkdtempSync3(join70(tmpdir4(), "himi-run-"));
+  const bytes2 = isUrl2 ? await fetchBytes(source) : readFileSync81(source);
+  const root = workDir ?? mkdtempSync3(join71(tmpdir4(), "himi-run-"));
   const { app, appDir: appDir3 } = unpackTo(bytes2, root);
   const opened = openPackageDir(appDir3);
   if (!opened.validation.ok) {
@@ -156154,16 +156261,16 @@ async function resolvePackage(source, workDir) {
 async function loadPreviewAssets() {
   try {
     const mod = await Promise.resolve().then(() => (init_preview_assets_generated(), preview_assets_generated_exports));
-    const here = dirname36(fileURLToPath25(import.meta.url));
+    const here = dirname37(fileURLToPath26(import.meta.url));
     const candidates = [
-      join70(here, "preview-assets.generated.bin"),
+      join71(here, "preview-assets.generated.bin"),
       // published: copied next to the bundled CLI
-      join70(here, "../../../packages/serve/src/preview-assets.generated.bin")
+      join71(here, "../../../packages/serve/src/preview-assets.generated.bin")
       // in-repo checkout
     ];
     for (const path2 of candidates) {
       if (!existsSync68(path2)) continue;
-      const blob = readFileSync80(path2);
+      const blob = readFileSync81(path2);
       return mod.assemblePreviewAssetsFromBlob(new Uint8Array(blob.buffer, blob.byteOffset, blob.byteLength));
     }
     return /* @__PURE__ */ new Map();
@@ -156300,10 +156407,10 @@ __export(run_browser_exports, {
   runInBrowser: () => runInBrowser
 });
 import { createServer as createServer7 } from "node:http";
-import { existsSync as existsSync69, readFileSync as readFileSync81 } from "node:fs";
+import { existsSync as existsSync69, readFileSync as readFileSync82 } from "node:fs";
 import { spawnSync as spawnSync3 } from "node:child_process";
-import { dirname as dirname37, resolve as resolve54 } from "node:path";
-import { fileURLToPath as fileURLToPath26 } from "node:url";
+import { dirname as dirname38, resolve as resolve54 } from "node:path";
+import { fileURLToPath as fileURLToPath27 } from "node:url";
 function stagedDir() {
   return process.env.HIMI_BROWSER_PLANE_OUT ? resolve54(process.env.HIMI_BROWSER_PLANE_OUT) : resolve54(REPO, "packages", "serve", "dist", "browser-plane");
 }
@@ -156408,7 +156515,7 @@ async function runInBrowser(releaseRoot, app, header, opts = {}) {
       }
       let bytes2;
       try {
-        bytes2 = readFileSync81(resolve54(stagedDir(), name));
+        bytes2 = readFileSync82(resolve54(stagedDir(), name));
       } catch (e2) {
         res.writeHead(503, { "content-type": "application/json" });
         res.end(JSON.stringify({ error: "browser_plane_unstaged", file: name, detail: String(e2) }));
@@ -156450,7 +156557,7 @@ var init_run_browser = __esm({
     init_open_url();
     init_file_store();
     init_wix_client_id();
-    HERE2 = dirname37(fileURLToPath26(import.meta.url));
+    HERE2 = dirname38(fileURLToPath27(import.meta.url));
     REPO = resolve54(HERE2, "..", "..", "..");
     SERVED = /* @__PURE__ */ new Set(["host.html", "sw.js", "package-reader.js"]);
   }
@@ -156461,14 +156568,14 @@ var hhp_preview_exports = {};
 __export(hhp_preview_exports, {
   hhpPreviewResponse: () => hhpPreviewResponse
 });
-import { existsSync as existsSync70, readFileSync as readFileSync82 } from "node:fs";
-import { join as join71 } from "node:path";
+import { existsSync as existsSync70, readFileSync as readFileSync83 } from "node:fs";
+import { join as join72 } from "node:path";
 function hhpPreviewResponse(root, request) {
-  if (new URL(request.url).pathname !== "/__himi/hhp-preview" || !existsSync70(join71(root, "hhp.json"))) return null;
+  if (new URL(request.url).pathname !== "/__himi/hhp-preview" || !existsSync70(join72(root, "hhp.json"))) return null;
   if (request.method !== "GET") return new Response(null, { status: 405 });
   try {
     const file2 = localPath(root, ".himi/hhp-preview.json");
-    const authored2 = existsSync70(file2) ? JSON.parse(readFileSync82(file2, "utf8")) : {};
+    const authored2 = existsSync70(file2) ? JSON.parse(readFileSync83(file2, "utf8")) : {};
     if (authored2.mockCapabilities && (!Array.isArray(authored2.mockCapabilities) || authored2.mockCapabilities.some((v2) => typeof v2 !== "string"))) throw new Error("mockCapabilities must be a string array.");
     const fixtures = authored2.fixtures ?? {};
     if (typeof fixtures !== "object" || Array.isArray(fixtures) || fixtures === null) throw new Error("fixtures must be an object.");
@@ -156618,7 +156725,7 @@ var init_embedded_bundles = __esm({
 });
 
 // ../store-release/register-bundle.ts
-import { readFileSync as readFileSync83 } from "node:fs";
+import { readFileSync as readFileSync84 } from "node:fs";
 import { createPrivateKey as createPrivateKey4, sign as sign2 } from "node:crypto";
 function b64url2(b2) {
   return Buffer.from(b2).toString("base64").replace(/\+/g, "-").replace(/\//g, "_").replace(/=+$/, "");
@@ -156636,7 +156743,7 @@ function bundleIdBody(identifier, name, platform = "IOS") {
 async function registerBundleId(opts) {
   const env = requireEnv(["ASC_KEY_ID", "ASC_ISSUER_ID", "ASC_KEY_PATH"]);
   assertCredentialOutsideRepo("ASC_KEY_PATH", env.ASC_KEY_PATH);
-  const jwt = ascJwt(env.ASC_KEY_ID, env.ASC_ISSUER_ID, readFileSync83(env.ASC_KEY_PATH, "utf8"), Math.floor(Date.now() / 1e3));
+  const jwt = ascJwt(env.ASC_KEY_ID, env.ASC_ISSUER_ID, readFileSync84(env.ASC_KEY_PATH, "utf8"), Math.floor(Date.now() / 1e3));
   const res = await fetch(`${ASC_API}/v1/bundleIds`, {
     method: "POST",
     headers: { Authorization: `Bearer ${jwt}`, "Content-Type": "application/json" },
@@ -156666,7 +156773,7 @@ async function main() {
   }
   const ni2 = rest.indexOf("--name");
   const name = ni2 >= 0 ? rest[ni2 + 1] : cfg.app ?? app;
-  const yml = readFileSync83(iosProjectYml(app), "utf8");
+  const yml = readFileSync84(iosProjectYml(app), "utf8");
   for (const { id, label: label2 } of [{ id: identifier, label: name }, ...embeddedBundles(yml).map((b2) => ({
     id: embeddedBundleId(identifier, b2),
     label: `${name} ${embeddedAppIdLabel(b2)}`
@@ -156707,7 +156814,7 @@ function retryAfterMs(header, nowMs) {
 function backoffMs(attempt) {
   return Math.min(BASE_BACKOFF_MS * 2 ** (attempt - 1), MAX_RETRY_WAIT_MS);
 }
-async function readJson6(response) {
+async function readJson7(response) {
   try {
     return await response.json();
   } catch {
@@ -156821,7 +156928,7 @@ var init_iap_client = __esm({
       }
       async send(method, url, body) {
         const response = await this.fetchOrNetworkError(method, url, body);
-        const payload = await readJson6(response);
+        const payload = await readJson7(response);
         if (!response.ok) throw this.httpError(method, url, response, payload);
         if (payload === void 0 && response.status !== 204) {
           throw new AscError("server", `${method} ${url.pathname} \u2192 ${response.status} with an unreadable body`, response.status);
@@ -158075,19 +158182,19 @@ __export(credential_profile_exports, {
   profilePath: () => profilePath,
   resolveStoreCredentials: () => resolveStoreCredentials
 });
-import { existsSync as existsSync71, readFileSync as readFileSync84 } from "node:fs";
-import { homedir as homedir6 } from "node:os";
-import { join as join72 } from "node:path";
-function credentialsDir(home = homedir6()) {
-  return join72(home, ".himalaya", "store-credentials");
+import { existsSync as existsSync71, readFileSync as readFileSync85 } from "node:fs";
+import { homedir as homedir7 } from "node:os";
+import { join as join73 } from "node:path";
+function credentialsDir(home = homedir7()) {
+  return join73(home, ".himalaya", "store-credentials");
 }
-function profilePath(name, home = homedir6()) {
+function profilePath(name, home = homedir7()) {
   if (!PROFILE_NAME.test(name)) {
     throw new Error(
-      `credential profile ${JSON.stringify(name)} is not a profile name \u2014 use letters, digits, ".", "_" or "-" starting with a letter or digit. It names ${join72(credentialsDir(home), "<name>.json")}; it is never a path.`
+      `credential profile ${JSON.stringify(name)} is not a profile name \u2014 use letters, digits, ".", "_" or "-" starting with a letter or digit. It names ${join73(credentialsDir(home), "<name>.json")}; it is never a path.`
     );
   }
-  return join72(credentialsDir(home), `${name}.json`);
+  return join73(credentialsDir(home), `${name}.json`);
 }
 function parseProfile(text9, label2) {
   let doc;
@@ -158117,8 +158224,8 @@ function namedProfile(cfg, profileFlag) {
 function resolveStoreCredentials(opts) {
   const { app, cfg } = opts;
   const env = opts.env ?? process.env;
-  const home = opts.home ?? homedir6();
-  const read = opts.readProfile ?? ((p2) => readFileSync84(p2, "utf8"));
+  const home = opts.home ?? homedir7();
+  const read = opts.readProfile ?? ((p2) => readFileSync85(p2, "utf8"));
   const exists = opts.profileExists ?? existsSync71;
   const ios = cfg.ios ?? {};
   const flagName = opts.profileFlag?.trim();
@@ -158185,8 +158292,8 @@ var init_credential_profile = __esm({
 
 // ../store-release/iap-credentials.ts
 import { createHash as createHash37 } from "node:crypto";
-import { existsSync as existsSync72, readFileSync as readFileSync85, realpathSync as realpathSync12 } from "node:fs";
-import { homedir as homedir7 } from "node:os";
+import { existsSync as existsSync72, readFileSync as readFileSync86, realpathSync as realpathSync12 } from "node:fs";
+import { homedir as homedir8 } from "node:os";
 function accountFingerprint(keyId, issuerId) {
   return `sha256:${createHash37("sha256").update(`${issuerId}:${keyId}`).digest("hex").slice(0, 16)}`;
 }
@@ -158218,8 +158325,8 @@ function canonicalKeyPath(path2, profile, realpath) {
 }
 function resolveIapCredentials(options) {
   const { target } = options;
-  const home = options.home ?? homedir7();
-  const readFile3 = options.readFile ?? ((p2) => readFileSync85(p2, "utf8"));
+  const home = options.home ?? homedir8();
+  const readFile3 = options.readFile ?? ((p2) => readFileSync86(p2, "utf8"));
   const realpath = options.realpath ?? realpathSync12;
   const profile = requireExplicitProfile(options.profileFlag, target);
   const creds = resolveStoreCredentials({
@@ -158540,7 +158647,7 @@ __export(version_exports, {
   stampTargetVersion: () => stampTargetVersion,
   stampVersionKeys: () => stampVersionKeys
 });
-import { readFileSync as readFileSync86, writeFileSync as writeFileSync29 } from "node:fs";
+import { readFileSync as readFileSync87, writeFileSync as writeFileSync29 } from "node:fs";
 function readIosVersion(projectYml) {
   const marketing = matchScalar(projectYml, "CFBundleShortVersionString");
   const build3 = matchScalar(projectYml, "CFBundleVersion");
@@ -158687,8 +158794,8 @@ function setAndroidVersion(gradle, v2) {
 function bumpVersion(app, opts) {
   const iosPath = iosProjectYml(app);
   const gradlePath = androidGradle(app);
-  const iosYml = readFileSync86(iosPath, "utf8");
-  const gradle = readFileSync86(gradlePath, "utf8");
+  const iosYml = readFileSync87(iosPath, "utf8");
+  const gradle = readFileSync87(gradlePath, "utf8");
   const current = readIosVersion(iosYml);
   const next = {
     marketing: opts.marketing ?? current.marketing,
@@ -158718,8 +158825,8 @@ var init_store_spec = __esm({
 });
 
 // src/iap-config-edit.ts
-import { existsSync as existsSync73, readFileSync as readFileSync87 } from "node:fs";
-import { basename as basename18, join as join73 } from "node:path";
+import { existsSync as existsSync73, readFileSync as readFileSync88 } from "node:fs";
+import { basename as basename18, join as join74 } from "node:path";
 import ts8 from "typescript";
 function bindPurchasesAppInConfig(source, options) {
   const fileName = options.fileName ?? "config.ts";
@@ -158798,16 +158905,16 @@ function capabilityFinding(app, fileName) {
 }
 function withStoreBundle(dir, options) {
   if (options.storeBundleId) return options;
-  const path2 = join73(dir, "store", "store.config.yaml");
+  const path2 = join74(dir, "store", "store.config.yaml");
   if (!existsSync73(path2)) return options;
-  const storeBundleId = parseStoreConfig(readFileSync87(path2, "utf8")).ios?.bundleId;
+  const storeBundleId = parseStoreConfig(readFileSync88(path2, "utf8")).ios?.bundleId;
   return storeBundleId ? { ...options, storeBundleId } : options;
 }
 function previewIapConfigEdit(dir, options) {
   const path2 = configEntry(dir);
   if (!path2) return void 0;
   if (isSymlink2(path2)) return { path: path2, changed: false, applied: [], conflicts: [], instructions: [`${basename18(path2)} is a symlink, so it would not be edited: add the purchases app in the file it points to.`] };
-  const { changed, applied, conflicts, instructions } = bindPurchasesAppInConfig(readFileSync87(path2, "utf8"), { ...withStoreBundle(dir, options), fileName: basename18(path2) });
+  const { changed, applied, conflicts, instructions } = bindPurchasesAppInConfig(readFileSync88(path2, "utf8"), { ...withStoreBundle(dir, options), fileName: basename18(path2) });
   return { path: path2, changed, applied, conflicts, instructions };
 }
 async function applyIapConfigEdit(dir, options, validate4) {
@@ -158816,7 +158923,7 @@ async function applyIapConfigEdit(dir, options, validate4) {
   const fileName = basename18(path2);
   const refuse7 = (why) => ({ path: path2, changed: false, applied: [], conflicts: [], instructions: [why] });
   if (isSymlink2(path2)) return refuse7(`${fileName} is a symlink, so it was not edited: add the purchases app in the file it points to.`);
-  const original = readFileSync87(path2, "utf8");
+  const original = readFileSync88(path2, "utf8");
   const edit = bindPurchasesAppInConfig(original, { ...withStoreBundle(dir, options), fileName });
   const { applied, conflicts, instructions } = edit;
   if (!edit.changed) return { path: path2, changed: false, applied, conflicts, instructions };
@@ -159289,9 +159396,9 @@ __export(store_iap_exports, {
   runStoreIap: () => runStoreIap
 });
 import { randomUUID as randomUUID8 } from "node:crypto";
-import { appendFileSync as appendFileSync2, mkdirSync as mkdirSync34, readFileSync as readFileSync88, realpathSync as realpathSync13, rmSync as rmSync18, writeFileSync as writeFileSync30 } from "node:fs";
-import { homedir as homedir8, hostname } from "node:os";
-import { join as join74 } from "node:path";
+import { appendFileSync as appendFileSync2, mkdirSync as mkdirSync34, readFileSync as readFileSync89, realpathSync as realpathSync13, rmSync as rmSync18, writeFileSync as writeFileSync30 } from "node:fs";
+import { homedir as homedir9, hostname } from "node:os";
+import { join as join75 } from "node:path";
 function scrubDeep(value, scrub) {
   if (typeof value === "string") return scrub(value);
   if (Array.isArray(value)) return value.map((v2) => scrubDeep(v2, scrub));
@@ -159747,14 +159854,14 @@ function fileJournal(path2) {
 }
 function readLockSummary(path2) {
   try {
-    const { pid, host, at: at2 } = JSON.parse(readFileSync88(path2, "utf8"));
+    const { pid, host, at: at2 } = JSON.parse(readFileSync89(path2, "utf8"));
     return `pid ${pid} on ${host} since ${at2}`;
   } catch {
     return "unreadable lock";
   }
 }
 function acquireApplyLock(dir, appleAppId) {
-  const path2 = join74(dir, "apply.lock");
+  const path2 = join75(dir, "apply.lock");
   const stamp = JSON.stringify({ pid: process.pid, host: hostname(), at: (/* @__PURE__ */ new Date()).toISOString(), token: randomUUID8() });
   try {
     writeFileSync30(path2, stamp, { flag: "wx", mode: 384 });
@@ -159767,7 +159874,7 @@ function acquireApplyLock(dir, appleAppId) {
   return () => {
     let current = "";
     try {
-      current = readFileSync88(path2, "utf8");
+      current = readFileSync89(path2, "utf8");
     } catch {
       return;
     }
@@ -159775,7 +159882,7 @@ function acquireApplyLock(dir, appleAppId) {
   };
 }
 function stateDir(appleAppId) {
-  const dir = join74(homedir8(), ".himalaya", "store-iap", appleAppId);
+  const dir = join75(homedir9(), ".himalaya", "store-iap", appleAppId);
   mkdirSync34(dir, { recursive: true, mode: 448 });
   return dir;
 }
@@ -159791,11 +159898,11 @@ async function confirmOnTerminal(question) {
 }
 function defaultStoreIapDeps() {
   return {
-    readFile: (path2) => readFileSync88(path2, "utf8"),
+    readFile: (path2) => readFileSync89(path2, "utf8"),
     writeFileAtomic,
     resolveCredentials: ({ profileFlag, target }) => resolveIapCredentials({ profileFlag, target }),
     createApi: (key2) => createIapApi(createAscClient({ key: key2 })),
-    openJournal: (appleAppId) => fileJournal(join74(stateDir(appleAppId), "journal.jsonl")),
+    openJournal: (appleAppId) => fileJournal(join75(stateDir(appleAppId), "journal.jsonl")),
     acquireLock: (appleAppId) => acquireApplyLock(stateDir(appleAppId), appleAppId),
     canPrompt: () => process.stdin.isTTY === true,
     wixTransport: (siteId) => ownerTransport(siteId),
@@ -160273,9 +160380,9 @@ __export(preflight_app_exports, {
   preflightApp: () => preflightApp,
   profileAccount: () => profileAccount
 });
-import { readFileSync as readFileSync89, existsSync as existsSync74, readdirSync as readdirSync33, statSync as statSync19 } from "node:fs";
+import { readFileSync as readFileSync90, existsSync as existsSync74, readdirSync as readdirSync33, statSync as statSync19 } from "node:fs";
 import { createHash as createHash39 } from "node:crypto";
-import { join as join75 } from "node:path";
+import { join as join76 } from "node:path";
 function analyze(projectYml, storeConfig, icon, account) {
   const f2 = [];
   const has = (re2, s2) => re2.test(s2);
@@ -160339,13 +160446,13 @@ function profileAccount(app, storeConfig, opts = {}) {
   }
 }
 async function preflightApp(app, opts = {}) {
-  const projectYml = existsSync74(iosProjectYml(app)) ? readFileSync89(iosProjectYml(app), "utf8") : "";
-  const storeConfig = existsSync74(storeConfigPath(app)) ? readFileSync89(storeConfigPath(app), "utf8") : "";
+  const projectYml = existsSync74(iosProjectYml(app)) ? readFileSync90(iosProjectYml(app), "utf8") : "";
+  const storeConfig = existsSync74(storeConfigPath(app)) ? readFileSync90(storeConfigPath(app), "utf8") : "";
   if (!storeConfig) return [{ level: "error", message: `no apps/${app}/store/store.config.yaml \u2014 run /setup-store-signing first.` }];
   const findings = analyze(
     projectYml,
     storeConfig,
-    await appIconState(join75(appDir(app), "ios")),
+    await appIconState(join76(appDir(app), "ios")),
     profileAccount(app, storeConfig, opts)
   );
   findings.push(...analyzeListing(metadataFilesPresent(app), listScreenshots(app)));
@@ -160374,16 +160481,16 @@ function analyzeSubmissionRecord(appLevel, review, opts) {
   return f2;
 }
 function appLevelMetadataFiles(app, locale = "en-US") {
-  const root = join75(storeDir(app), "metadata");
+  const root = join76(storeDir(app), "metadata");
   const out2 = /* @__PURE__ */ new Set();
   if (existsSync74(root)) {
     for (const n2 of readdirSync33(root)) if (n2.endsWith(".txt")) out2.add(n2);
   }
-  if (existsSync74(join75(root, locale, "privacy_url.txt"))) out2.add("privacy_url.txt");
+  if (existsSync74(join76(root, locale, "privacy_url.txt"))) out2.add("privacy_url.txt");
   return out2;
 }
 function reviewInfoFiles(app) {
-  const dir = join75(storeDir(app), "review_information");
+  const dir = join76(storeDir(app), "review_information");
   if (!existsSync74(dir)) return /* @__PURE__ */ new Set();
   return new Set(readdirSync33(dir).filter((n2) => n2.endsWith(".txt")));
 }
@@ -160494,12 +160601,12 @@ function analyzePlayListing(assets) {
   return f2;
 }
 function playListingAssets(app, locale = "en-US") {
-  const dir = join75(storeDir(app), "play", locale, "images");
+  const dir = join76(storeDir(app), "play", locale, "images");
   const read = (names) => {
     for (const name of names) {
-      const p2 = join75(dir, name);
+      const p2 = join76(dir, name);
       try {
-        if (statSync19(p2).isFile()) return { name, bytes: readFileSync89(p2) };
+        if (statSync19(p2).isFile()) return { name, bytes: readFileSync90(p2) };
       } catch {
       }
     }
@@ -160530,26 +160637,26 @@ function analyzeListing(metaFiles, shots) {
   return f2;
 }
 function metadataFilesPresent(app, locale = "en-US") {
-  const dir = join75(storeDir(app), "metadata", locale);
+  const dir = join76(storeDir(app), "metadata", locale);
   if (!existsSync74(dir)) return /* @__PURE__ */ new Set();
   return new Set(readdirSync33(dir).filter((n2) => n2.endsWith(".txt")));
 }
 function listScreenshots(app, locale = "en-US") {
   const out2 = [];
-  const flat = join75(storeDir(app), "screenshots", locale);
+  const flat = join76(storeDir(app), "screenshots", locale);
   if (existsSync74(flat)) {
     for (const png of readdirSync33(flat).filter((n2) => n2.endsWith(".png"))) {
-      const sz = pngSize(readFileSync89(join75(flat, png)));
+      const sz = pngSize(readFileSync90(join76(flat, png)));
       if (sz) out2.push({ name: png, w: sz.w, h: sz.h });
     }
   }
-  const legacy = join75(storeDir(app), "metadata", locale, "screenshots");
+  const legacy = join76(storeDir(app), "metadata", locale, "screenshots");
   if (existsSync74(legacy)) {
     for (const deviceDir of readdirSync33(legacy)) {
-      const d2 = join75(legacy, deviceDir);
+      const d2 = join76(legacy, deviceDir);
       if (!statSync19(d2).isDirectory()) continue;
       for (const png of readdirSync33(d2).filter((n2) => n2.endsWith(".png"))) {
-        const sz = pngSize(readFileSync89(join75(d2, png)));
+        const sz = pngSize(readFileSync90(join76(d2, png)));
         if (sz) out2.push({ name: `${deviceDir}/${png}`, w: sz.w, h: sz.h });
       }
     }
@@ -160557,13 +160664,13 @@ function listScreenshots(app, locale = "en-US") {
   return out2;
 }
 function placeholderHashes2() {
-  const templateIos = join75(appDir("_template"), "ios");
+  const templateIos = join76(appDir("_template"), "ios");
   if (!existsSync74(templateIos)) return [LEGACY_PLACEHOLDER_SHA2562];
   for (const target of readdirSync33(templateIos)) {
-    const p2 = join75(templateIos, target, "Assets.xcassets", "AppIcon.appiconset", "icon_1024.png");
+    const p2 = join76(templateIos, target, "Assets.xcassets", "AppIcon.appiconset", "icon_1024.png");
     try {
       if (!statSync19(p2).isFile()) continue;
-      return [LEGACY_PLACEHOLDER_SHA2562, createHash39("sha256").update(readFileSync89(p2)).digest("hex")];
+      return [LEGACY_PLACEHOLDER_SHA2562, createHash39("sha256").update(readFileSync90(p2)).digest("hex")];
     } catch {
     }
   }
@@ -160596,10 +160703,10 @@ async function pixelIssues(bytes2) {
 async function appIconState(iosDir) {
   if (!existsSync74(iosDir)) return { exists: false, isPlaceholder: false, storeIssues: [] };
   for (const target of readdirSync33(iosDir)) {
-    const p2 = join75(iosDir, target, "Assets.xcassets", "AppIcon.appiconset", "icon_1024.png");
+    const p2 = join76(iosDir, target, "Assets.xcassets", "AppIcon.appiconset", "icon_1024.png");
     try {
       if (!statSync19(p2).isFile()) continue;
-      const bytes2 = readFileSync89(p2);
+      const bytes2 = readFileSync90(p2);
       const hash2 = createHash39("sha256").update(bytes2).digest("hex");
       const pixels = await pixelIssues(bytes2);
       return {
@@ -160666,7 +160773,7 @@ __export(asc_status_exports, {
   ascStatus: () => ascStatus,
   buildVerdict: () => buildVerdict
 });
-import { readFileSync as readFileSync90 } from "node:fs";
+import { readFileSync as readFileSync91 } from "node:fs";
 function buildVerdict(builds) {
   if (!builds.length) {
     return "NO builds registered \u2014 if you uploaded recently and it's been >15 min, the binary was REJECTED IN PROCESSING (reason is email-only; run validate-binary.ts / scan-purpose-strings.ts to reproduce it).";
@@ -160680,7 +160787,7 @@ function buildVerdict(builds) {
 function client(creds) {
   const env = creds ?? requireEnv(["ASC_KEY_ID", "ASC_ISSUER_ID", "ASC_KEY_PATH"]);
   assertCredentialOutsideRepo("ASC_KEY_PATH", env.ASC_KEY_PATH);
-  const jwt = ascJwt(env.ASC_KEY_ID, env.ASC_ISSUER_ID, readFileSync90(env.ASC_KEY_PATH, "utf8"), Math.floor(Date.now() / 1e3));
+  const jwt = ascJwt(env.ASC_KEY_ID, env.ASC_ISSUER_ID, readFileSync91(env.ASC_KEY_PATH, "utf8"), Math.floor(Date.now() / 1e3));
   return async (path2) => {
     const r2 = await fetch(`${ASC}${path2}`, { headers: { Authorization: `Bearer ${jwt}` } });
     return { status: r2.status, json: await r2.json().catch(() => ({})) };
@@ -160729,7 +160836,7 @@ var init_asc_status = __esm({
 // ../../core/functions-secrets/src/vault.ts
 import { createCipheriv, createDecipheriv as createDecipheriv2, randomBytes as randomBytes6 } from "node:crypto";
 import { mkdir, readFile as readFile2, rename, writeFile as writeFile2 } from "node:fs/promises";
-import { dirname as dirname38 } from "node:path";
+import { dirname as dirname39 } from "node:path";
 function createJsonSecretStore(filePath) {
   const read = async () => {
     try {
@@ -160742,7 +160849,7 @@ function createJsonSecretStore(filePath) {
     }
   };
   const write2 = async (records) => {
-    await mkdir(dirname38(filePath), { recursive: true });
+    await mkdir(dirname39(filePath), { recursive: true });
     const temporary = `${filePath}.${process.pid}.tmp`;
     await writeFile2(temporary, `${JSON.stringify(records, null, 2)}
 `, { mode: 384 });
@@ -160840,7 +160947,7 @@ __export(secrets_exports, {
   runRemoteSecretsCommand: () => runRemoteSecretsCommand,
   runSecretsCommand: () => runSecretsCommand
 });
-import { readFileSync as readFileSync91 } from "node:fs";
+import { readFileSync as readFileSync92 } from "node:fs";
 function environment(value) {
   if (value === "preview" || value === "production") return value;
   throw new Error("--environment must be preview or production");
@@ -160871,7 +160978,7 @@ async function runSecretsCommand(operation, flags, io2, options = {}) {
       io2.log(JSON.stringify(await vault.list({ app, environment: env })));
       return 0;
     }
-    const value = options.readValue ? options.readValue() : readFileSync91(0, "utf8").replace(/\r?\n$/, "");
+    const value = options.readValue ? options.readValue() : readFileSync92(0, "utf8").replace(/\r?\n$/, "");
     if (operation === "set") await vault.set({ app, environment: env, name, value });
     else if (operation === "rotate") await vault.rotate({ app, environment: env, name, value });
     else throw new Error(`unknown secrets operation ${operation}`);
@@ -160900,7 +161007,7 @@ async function runRemoteSecretsCommand(operation, flags, io2, options) {
     }
     let body;
     if (operation !== "list") {
-      const value = options.readValue ? options.readValue() : readFileSync91(0, "utf8").replace(/\r?\n$/, "");
+      const value = options.readValue ? options.readValue() : readFileSync92(0, "utf8").replace(/\r?\n$/, "");
       body = JSON.stringify({ value });
     }
     const response = await (options.fetchImpl ?? fetch)(url, { method: operation === "list" ? "GET" : operation === "set" ? "PUT" : "POST", headers: headers2, body });
@@ -161398,15 +161505,15 @@ __export(notify_exports, {
   runNotify: () => runNotify,
   saveAdminSession: () => saveAdminSession
 });
-import { chmodSync as chmodSync3, mkdirSync as mkdirSync35, readFileSync as readFileSync92, writeFileSync as writeFileSync31 } from "node:fs";
-import { homedir as homedir9 } from "node:os";
-import { dirname as dirname39, join as join76 } from "node:path";
+import { chmodSync as chmodSync3, mkdirSync as mkdirSync35, readFileSync as readFileSync93, writeFileSync as writeFileSync31 } from "node:fs";
+import { homedir as homedir10 } from "node:os";
+import { dirname as dirname40, join as join77 } from "node:path";
 function defaultSessionsPath() {
-  return process.env.HIMI_ADMIN_SESSIONS_FILE ?? join76(homedir9(), ".himalaya", "admin-sessions.json");
+  return process.env.HIMI_ADMIN_SESSIONS_FILE ?? join77(homedir10(), ".himalaya", "admin-sessions.json");
 }
 function loadSessionsFile(path2 = defaultSessionsPath()) {
   try {
-    return JSON.parse(readFileSync92(path2, "utf8"));
+    return JSON.parse(readFileSync93(path2, "utf8"));
   } catch {
     return {};
   }
@@ -161414,10 +161521,10 @@ function loadSessionsFile(path2 = defaultSessionsPath()) {
 function saveAdminSession(adminUrl, session, path2 = defaultSessionsPath()) {
   const file2 = loadSessionsFile(path2);
   file2.sessions = { ...file2.sessions, [adminUrl]: session };
-  mkdirSync35(dirname39(path2), { recursive: true, mode: 448 });
+  mkdirSync35(dirname40(path2), { recursive: true, mode: 448 });
   writeFileSync31(path2, JSON.stringify(file2, null, 2) + "\n", { mode: 384 });
   try {
-    chmodSync3(dirname39(path2), 448);
+    chmodSync3(dirname40(path2), 448);
     chmodSync3(path2, 384);
   } catch {
   }
@@ -161783,20 +161890,20 @@ __export(base44_auth_exports, {
   usableBase44Auth: () => usableBase44Auth,
   writeBase44Session: () => writeBase44Session
 });
-import { chmodSync as chmodSync4, existsSync as existsSync75, mkdirSync as mkdirSync36, readFileSync as readFileSync93, rmSync as rmSync19, writeFileSync as writeFileSync32 } from "node:fs";
-import { homedir as homedir10 } from "node:os";
-import { dirname as dirname40, join as join77 } from "node:path";
+import { chmodSync as chmodSync4, existsSync as existsSync75, mkdirSync as mkdirSync36, readFileSync as readFileSync94, rmSync as rmSync19, writeFileSync as writeFileSync32 } from "node:fs";
+import { homedir as homedir11 } from "node:os";
+import { dirname as dirname41, join as join78 } from "node:path";
 function base44ApiBase(env = process.env) {
   return (env.BASE44_API_URL?.trim() || "https://app.base44.com").replace(/\/+$/, "");
 }
-function base44SessionPath(home = homedir10()) {
-  return join77(home, ".himi", "base44", "session.json");
+function base44SessionPath(home = homedir11()) {
+  return join78(home, ".himi", "base44", "session.json");
 }
 function readBase44Session(home) {
   const p2 = base44SessionPath(home);
   if (!existsSync75(p2)) return void 0;
   try {
-    const s2 = JSON.parse(readFileSync93(p2, "utf8"));
+    const s2 = JSON.parse(readFileSync94(p2, "utf8"));
     return typeof s2.accessToken === "string" && s2.accessToken ? s2 : void 0;
   } catch {
     return void 0;
@@ -161804,7 +161911,7 @@ function readBase44Session(home) {
 }
 function writeBase44Session(session, home) {
   const p2 = base44SessionPath(home);
-  mkdirSync36(dirname40(p2), { recursive: true, mode: 448 });
+  mkdirSync36(dirname41(p2), { recursive: true, mode: 448 });
   writeFileSync32(p2, `${JSON.stringify(session, null, 2)}
 `, { mode: 384 });
   chmodSync4(p2, 384);
@@ -161906,10 +162013,10 @@ async function base44DeviceLogin(opts) {
   }
   throw new Error("the Base44 sign-in code expired before it was approved \u2014 run `himi base44 login` again");
 }
-function importBase44CliSession(home = homedir10(), env = process.env) {
-  const src = join77(home, ".base44", "auth", "auth.json");
+function importBase44CliSession(home = homedir11(), env = process.env) {
+  const src = join78(home, ".base44", "auth", "auth.json");
   if (!existsSync75(src)) throw new Error(`no Base44 CLI session at ${src} \u2014 run \`npx base44 login\` first, or use \`himi base44 login\``);
-  const a2 = JSON.parse(readFileSync93(src, "utf8"));
+  const a2 = JSON.parse(readFileSync94(src, "utf8"));
   if (typeof a2.accessToken !== "string" || !a2.accessToken) throw new Error(`${src} holds no access token`);
   const session = {
     accessToken: a2.accessToken,
@@ -164044,7 +164151,7 @@ var init_brand_font = __esm({
 
 // src/site-analyze/write-artifacts.ts
 import { mkdirSync as mkdirSync37, writeFileSync as writeFileSync33 } from "node:fs";
-import { join as join78 } from "node:path";
+import { join as join79 } from "node:path";
 function attachVeloSources(book, sources, put) {
   const byPath = new Map((sources ?? []).map((s2) => [s2.path, s2.text]));
   for (const f2 of book.velo.files) {
@@ -164199,12 +164306,12 @@ async function downloadMedia(book, fetchImpl, put) {
 }
 async function writeBusinessBook(result, opts) {
   const out2 = opts.outDir;
-  mkdirSync37(join78(out2, "evidence/pages"), { recursive: true });
-  mkdirSync37(join78(out2, "media/catalog"), { recursive: true });
+  mkdirSync37(join79(out2, "evidence/pages"), { recursive: true });
+  mkdirSync37(join79(out2, "media/catalog"), { recursive: true });
   const files = [];
   const put = (rel, body) => {
-    const p2 = join78(out2, rel);
-    mkdirSync37(join78(p2, ".."), { recursive: true });
+    const p2 = join79(out2, rel);
+    mkdirSync37(join79(p2, ".."), { recursive: true });
     writeFileSync33(p2, body);
     files.push(rel);
   };
@@ -164345,7 +164452,7 @@ function dropTrailingCommas(text9) {
   }
   return out2;
 }
-function readJson7(files, path2) {
+function readJson8(files, path2) {
   const text9 = files.get(path2);
   if (text9 === void 0) return void 0;
   try {
@@ -164360,7 +164467,7 @@ function filesIn(files, dir, re2) {
   return [...files.keys()].filter((p2) => p2.startsWith(prefix) && !p2.slice(prefix.length).includes("/") && re2.test(p2)).sort();
 }
 function projectDirs(files) {
-  const cfg = readJson7(files, "base44/config.jsonc") ?? readJson7(files, "base44/config.json") ?? {};
+  const cfg = readJson8(files, "base44/config.jsonc") ?? readJson8(files, "base44/config.json") ?? {};
   const dir = (k2, d2) => {
     const v2 = cfg[k2];
     return `base44/${typeof v2 === "string" && v2 && !v2.includes("..") ? v2.replace(/^\.\/|\/+$/g, "") : d2}`;
@@ -164391,7 +164498,7 @@ function fieldsOf(schema) {
 function readEntities(files, dirs) {
   const out2 = [];
   for (const path2 of [...filesIn(files, dirs.entities, JSON_FILE), ...filesIn(files, "entities", JSON_FILE)]) {
-    const schema = readJson7(files, path2);
+    const schema = readJson8(files, path2);
     if (!schema) continue;
     const base = path2.split("/").pop().replace(JSON_FILE, "");
     const name = typeof schema.name === "string" && schema.name ? schema.name : base;
@@ -164435,7 +164542,7 @@ function readFunctions(files, dirs) {
   const prefix = `${dirs.functions}/`;
   const under = [...files.keys()].filter((p2) => p2.startsWith(prefix)).sort();
   for (const cfgPath of under.filter((p2) => /\/function\.jsonc?$/i.test(p2))) {
-    const cfg = readJson7(files, cfgPath);
+    const cfg = readJson8(files, cfgPath);
     if (!cfg || typeof cfg.name !== "string") continue;
     const folder = cfgPath.slice(0, cfgPath.lastIndexOf("/"));
     const entry = typeof cfg.entry === "string" ? `${folder}/${cfg.entry.replace(/^\.\//, "")}` : void 0;
@@ -164462,12 +164569,12 @@ function agentFromConfig(cfg, source) {
   return { name: cfg.name, ...typeof cfg.description === "string" ? { description: cfg.description } : {}, tools, source };
 }
 function readAgents(files, dirs) {
-  return filesIn(files, dirs.agents, JSON_FILE).map((p2) => readJson7(files, p2)).map((cfg) => cfg ? agentFromConfig(cfg, "project-files") : void 0).filter((a2) => !!a2);
+  return filesIn(files, dirs.agents, JSON_FILE).map((p2) => readJson8(files, p2)).map((cfg) => cfg ? agentFromConfig(cfg, "project-files") : void 0).filter((a2) => !!a2);
 }
 function readConnectors(files, dirs) {
   const out2 = [];
   for (const p2 of filesIn(files, dirs.connectors, JSON_FILE)) {
-    const cfg = readJson7(files, p2);
+    const cfg = readJson8(files, p2);
     if (!cfg || typeof cfg.type !== "string") continue;
     out2.push({ type: cfg.type, scopes: Array.isArray(cfg.scopes) ? cfg.scopes.map(String) : [], source: "project-files" });
   }
@@ -164486,7 +164593,7 @@ function providersOf(cfg) {
 }
 function readAuthConfig(files, dirs) {
   for (const p2 of filesIn(files, dirs.auth, JSON_FILE)) {
-    const cfg = readJson7(files, p2);
+    const cfg = readJson8(files, p2);
     if (cfg && Object.keys(cfg).some((k2) => /^enable/.test(k2))) return { providers: providersOf(cfg), source: "project-files" };
   }
   return void 0;
@@ -165108,11 +165215,11 @@ var init_analyze = __esm({
 });
 
 // src/base44-analyze/write-artifacts.ts
-import { existsSync as existsSync76, mkdirSync as mkdirSync38, readFileSync as readFileSync94, rmSync as rmSync20, writeFileSync as writeFileSync34 } from "node:fs";
-import { dirname as dirname41, join as join79, resolve as resolve56, sep as sep19 } from "node:path";
+import { existsSync as existsSync76, mkdirSync as mkdirSync38, readFileSync as readFileSync95, rmSync as rmSync20, writeFileSync as writeFileSync34 } from "node:fs";
+import { dirname as dirname42, join as join80, resolve as resolve56, sep as sep19 } from "node:path";
 function isBookFolder(dir) {
   try {
-    return JSON.parse(readFileSync94(join79(dir, "book.json"), "utf8")).kind === "base44-app-book";
+    return JSON.parse(readFileSync95(join80(dir, "book.json"), "utf8")).kind === "base44-app-book";
   } catch {
     return false;
   }
@@ -165199,26 +165306,26 @@ function writeBase44Book(result, outDir, opts = {}) {
   const md = renderBookMd(book);
   assertNoSecrets(json6);
   assertNoSecrets(md);
-  const owned = ["book.json", "BOOK.md", "source", "screenshots"].filter((n2) => existsSync76(join79(out2, n2)));
+  const owned = ["book.json", "BOOK.md", "source", "screenshots"].filter((n2) => existsSync76(join80(out2, n2)));
   if (owned.length) {
     if (!isBookFolder(out2)) throw new Error(`refusing to write the app book into ${out2}: it already has ${owned.join(", ")} that ${owned.length === 1 ? "is" : "are"} not from an app book \u2014 pick an empty --out`);
-    for (const d2 of ["source", "screenshots"]) rmSync20(join79(out2, d2), { recursive: true, force: true });
+    for (const d2 of ["source", "screenshots"]) rmSync20(join80(out2, d2), { recursive: true, force: true });
   }
   mkdirSync38(out2, { recursive: true });
-  writeFileSync34(join79(out2, "book.json"), json6);
-  writeFileSync34(join79(out2, "BOOK.md"), md);
+  writeFileSync34(join80(out2, "book.json"), json6);
+  writeFileSync34(join80(out2, "BOOK.md"), md);
   files.push("book.json", "BOOK.md");
   for (const s2 of shots) {
-    mkdirSync38(join79(out2, "screenshots"), { recursive: true });
-    writeFileSync34(join79(out2, "screenshots", s2.filename), s2.bytes);
+    mkdirSync38(join80(out2, "screenshots"), { recursive: true });
+    writeFileSync34(join80(out2, "screenshots", s2.filename), s2.bytes);
     files.push(`screenshots/${s2.filename}`);
   }
-  const sourceRoot = join79(out2, "source");
+  const sourceRoot = join80(out2, "source");
   for (const f2 of result.sourceFiles) {
     if (!safeRel(f2.path)) continue;
-    const dest = join79(sourceRoot, ...f2.path.split("/"));
+    const dest = join80(sourceRoot, ...f2.path.split("/"));
     if (!dest.startsWith(sourceRoot + sep19)) continue;
-    mkdirSync38(dirname41(dest), { recursive: true });
+    mkdirSync38(dirname42(dest), { recursive: true });
     writeFileSync34(dest, f2.bytes);
   }
   if (result.sourceFiles.length) files.push(`source/ (${result.sourceFiles.length} files)`);
@@ -168762,7 +168869,7 @@ __export(cli_exports, {
 import { execFile } from "node:child_process";
 import { mkdirSync as mkdirSync39, mkdtempSync as mkdtempSync4, rmSync as rmSync21, writeFileSync as writeFileSync35 } from "node:fs";
 import { tmpdir as tmpdir5 } from "node:os";
-import { join as join80, resolve as resolve57 } from "node:path";
+import { join as join81, resolve as resolve57 } from "node:path";
 import { promisify } from "node:util";
 function projectDownloader(apiFetch, apiBase, token, extract = systemTar) {
   return async (appId2) => {
@@ -168775,11 +168882,11 @@ function projectDownloader(apiFetch, apiBase, token, extract = systemTar) {
     }
     const bytes2 = await readCapped(res, MAX_TARBALL_BYTES);
     if (!bytes2) throw new Error(`project download is over the ${MAX_TARBALL_BYTES}-byte cap`);
-    const root = mkdtempSync4(join80(tmpdir5(), "himi-base44-"));
+    const root = mkdtempSync4(join81(tmpdir5(), "himi-base44-"));
     const cleanup = () => rmSync21(root, { recursive: true, force: true });
     try {
-      const archive = join80(root, "project.tar");
-      const dir = join80(root, "project");
+      const archive = join81(root, "project.tar");
+      const dir = join81(root, "project");
       writeFileSync35(archive, bytes2);
       mkdirSync39(dir);
       await extract(archive, dir);
@@ -170074,8 +170181,8 @@ var init_customer_build = __esm({
 });
 
 // src/site-analyze/apply.ts
-import { existsSync as existsSync77, readFileSync as readFileSync95, writeFileSync as writeFileSync36, copyFileSync as copyFileSync2, mkdirSync as mkdirSync40, realpathSync as realpathSync14, statSync as statSync20 } from "node:fs";
-import { dirname as dirname42, isAbsolute as isAbsolute8, join as join81, resolve as resolve58, sep as sep20 } from "node:path";
+import { existsSync as existsSync77, readFileSync as readFileSync96, writeFileSync as writeFileSync36, copyFileSync as copyFileSync2, mkdirSync as mkdirSync40, realpathSync as realpathSync14, statSync as statSync20 } from "node:fs";
+import { dirname as dirname43, isAbsolute as isAbsolute8, join as join82, resolve as resolve58, sep as sep20 } from "node:path";
 import { spawnSync as spawnSync4 } from "node:child_process";
 function unpairedRedirectNote(overlay) {
   if (!overlay.wix?.clientId || overlay.wix.redirectUri) return void 0;
@@ -170090,8 +170197,8 @@ function committedShellProvisioning(path2) {
 function findRepoRoot(cwd) {
   let dir = cwd;
   for (let i2 = 0; i2 < 8; i2++) {
-    if (SHELL_NAMES2.some((name) => existsSync77(join81(dir, shellAppDir(name), "package.json")))) return dir;
-    const next = dirname42(dir);
+    if (SHELL_NAMES2.some((name) => existsSync77(join82(dir, shellAppDir(name), "package.json")))) return dir;
+    const next = dirname43(dir);
     if (next === dir) break;
     dir = next;
   }
@@ -170193,11 +170300,11 @@ function sameKnownSite(previous, next) {
 }
 function buildMergedContract(options) {
   const { appDir: appDir3, packageDir, overlay } = options;
-  const committedPath = join81(appDir3, "provisioning.json");
+  const committedPath = join82(appDir3, "provisioning.json");
   if (!existsSync77(committedPath)) {
     throw new Error(`shell has no committed provisioning.json at ${committedPath} to build a contract from`);
   }
-  const committed = JSON.parse(readFileSync95(committedPath, "utf8"));
+  const committed = JSON.parse(readFileSync96(committedPath, "utf8"));
   const merged = mergeCustomerOwned(committed, overlay);
   const overlayFontFamily = (overlay.branding ?? {}).fontFamily;
   const branding = merged.branding ?? {};
@@ -170209,7 +170316,7 @@ function buildMergedContract(options) {
   };
   const stage = (fromRel, toRel) => {
     const from = contained(packageDir, fromRel);
-    const to2 = contained(join81(appDir3, STAGED), toRel.slice(STAGED.length + 1));
+    const to2 = contained(join82(appDir3, STAGED), toRel.slice(STAGED.length + 1));
     if (!from || !to2 || !existsSync77(from)) return void 0;
     let real;
     let realRoot;
@@ -170222,7 +170329,7 @@ function buildMergedContract(options) {
     if (!real.startsWith(realRoot + sep20)) return void 0;
     try {
       if (!statSync20(real).isFile()) return void 0;
-      mkdirSync40(dirname42(to2), { recursive: true });
+      mkdirSync40(dirname43(to2), { recursive: true });
       copyFileSync2(real, to2);
     } catch {
       return void 0;
@@ -170232,11 +170339,11 @@ function buildMergedContract(options) {
   };
   const icon = stage("media/icon.png", `${STAGED}/icon.png`);
   if (icon) branding.appIconPath = icon;
-  const facesPath = join81(packageDir, "media/fonts/faces.json");
+  const facesPath = join82(packageDir, "media/fonts/faces.json");
   if (existsSync77(facesPath)) {
     let faces = [];
     try {
-      const parsed = JSON.parse(readFileSync95(facesPath, "utf8"));
+      const parsed = JSON.parse(readFileSync96(facesPath, "utf8"));
       faces = Array.isArray(parsed) ? parsed : [];
     } catch {
       faces = [];
@@ -170257,10 +170364,10 @@ function buildMergedContract(options) {
   merged.branding = branding;
   const body = `${JSON.stringify(merged, null, 2)}
 `;
-  const path2 = join81(packageDir, "provisioning.contract.json");
+  const path2 = join82(packageDir, "provisioning.contract.json");
   writeFileSync36(path2, body);
-  const localPath2 = join81(appDir3, LOCAL_CONTRACT_REL);
-  mkdirSync40(dirname42(localPath2), { recursive: true });
+  const localPath2 = join82(appDir3, LOCAL_CONTRACT_REL);
+  mkdirSync40(dirname43(localPath2), { recursive: true });
   writeFileSync36(localPath2, body);
   staged.push(localPath2);
   return { path: path2, staged };
@@ -170294,10 +170401,10 @@ function catalogTypography(overlay, template) {
 function staticFaqFor(overlay, overlayPath) {
   const own4 = overlay.faq;
   if (own4 !== void 0) return deriveStaticFaq(own4);
-  const bookPath = join81(dirname42(resolve58(overlayPath)), "book.json");
+  const bookPath = join82(dirname43(resolve58(overlayPath)), "book.json");
   if (!existsSync77(bookPath)) return void 0;
   try {
-    const book = JSON.parse(readFileSync95(bookPath, "utf8"));
+    const book = JSON.parse(readFileSync96(bookPath, "utf8"));
     const copy = book?.copy;
     if (!copy || typeof copy !== "object" || copy.unavailable) return void 0;
     const pairs = deriveStaticFaq(copy.faq);
@@ -170311,10 +170418,10 @@ function staticGalleriesFor(overlay, overlayPath) {
   if (overlay.galleries !== void 0) return deriveStaticGalleries(
     overlay.galleries.map((gallery) => ({ role: "gallery", title: gallery.title, galleryImageUrls: gallery.photos }))
   );
-  const bookPath = join81(dirname42(resolve58(overlayPath)), "book.json");
+  const bookPath = join82(dirname43(resolve58(overlayPath)), "book.json");
   if (!existsSync77(bookPath)) return void 0;
   try {
-    const book = JSON.parse(readFileSync95(bookPath, "utf8"));
+    const book = JSON.parse(readFileSync96(bookPath, "utf8"));
     if (!book.look || book.look.unavailable || !Array.isArray(book.look.pages)) return void 0;
     const galleries = deriveStaticGalleries(book.look.pages);
     return galleries.length || book.look.complete === true ? galleries : void 0;
@@ -170326,8 +170433,8 @@ async function applyOverlays(input) {
   const cwd = resolve58(input.cwd);
   const shell = input.shell ?? DEFAULT_BRANDABLE_SHELL;
   assertKnownShell(shell);
-  const overlay = JSON.parse(readFileSync95(input.overlayPath, "utf8"));
-  const tokens2 = JSON.parse(readFileSync95(input.tokensPath, "utf8"));
+  const overlay = JSON.parse(readFileSync96(input.overlayPath, "utf8"));
+  const tokens2 = JSON.parse(readFileSync96(input.tokensPath, "utf8"));
   const faq = staticFaqFor(overlay, input.overlayPath);
   if (faq !== void 0) overlay.faq = faq;
   const galleries = staticGalleriesFor(overlay, input.overlayPath);
@@ -170344,15 +170451,15 @@ async function applyOverlays(input) {
         `shell "${shell}" cannot bake a customer brand \u2014 it ships no prepare:customer script`
       );
     }
-    const appDir3 = join81(repoRoot2, shellAppDir(shell));
-    const committedPath = join81(appDir3, "provisioning.json");
-    const committedSite = existsSync77(committedPath) ? JSON.parse(readFileSync95(committedPath, "utf8")).site : void 0;
+    const appDir3 = join82(repoRoot2, shellAppDir(shell));
+    const committedPath = join82(appDir3, "provisioning.json");
+    const committedSite = existsSync77(committedPath) ? JSON.parse(readFileSync96(committedPath, "utf8")).site : void 0;
     if (committedSite !== void 0 && overlay.site === void 0) {
       throw new Error(
         `shell "${shell}" is a site shell: its contract names the customer's website (a \`site\` block), and this overlay has none. Re-run \`himi site analyze --url <site> --shell ${shell}\` to derive the site's page map (edit \`site.pages\` in provisioning.overlay.json if needed), then --apply.`
       );
     }
-    const packageDir = dirname42(resolve58(input.overlayPath));
+    const packageDir = dirname43(resolve58(input.overlayPath));
     const { path: contract, staged } = buildMergedContract({ appDir: appDir3, packageDir, overlay });
     wrote.push(...staged);
     const r2 = spawnSync4("npm", ["run", "prepare:customer", "--", "--contract", contract], {
@@ -170373,9 +170480,9 @@ async function applyOverlays(input) {
       note: `prepare:customer --contract with a merged contract (committed provisioning.json untouched)${unpairedInRepo ? ` \xB7 ${unpairedInRepo}` : ""}`
     };
   }
-  const pkgProv = join81(cwd, "provisioning.json");
+  const pkgProv = join82(cwd, "provisioning.json");
   assertNotCommitted(pkgProv, input.forbiddenProvisioning);
-  const contentPath = join81(cwd, "himalaya.content.json");
+  const contentPath = join82(cwd, "himalaya.content.json");
   const syncViewNames = (before, after) => {
     const content = readContentManifest(cwd);
     if (!content) return;
@@ -170388,7 +170495,7 @@ async function applyOverlays(input) {
   let packageFaq = faq;
   let packageGalleries = galleries;
   if (existsSync77(pkgProv)) {
-    const cur = JSON.parse(readFileSync95(pkgProv, "utf8"));
+    const cur = JSON.parse(readFileSync96(pkgProv, "utf8"));
     if (galleries === void 0 && !sameKnownSite(cur, overlay)) overlay.galleries = [];
     const merged = deepMerge4(cur, overlay);
     packageFaq = merged.faq;
@@ -170404,9 +170511,9 @@ async function applyOverlays(input) {
   if (Array.isArray(packageGalleries) && packageGalleries.length && !overlay.installedVerticals.includes("galleries")) {
     overlay.installedVerticals.push("galleries");
   }
-  const pkgTokens = join81(cwd, "tokens.json");
+  const pkgTokens = join82(cwd, "tokens.json");
   if (existsSync77(pkgTokens) && (tokens2.colors || tokens2.typography)) {
-    const cur = JSON.parse(readFileSync95(pkgTokens, "utf8"));
+    const cur = JSON.parse(readFileSync96(pkgTokens, "utf8"));
     let tokensIn = tokens2;
     if (tokens2.typography) {
       const fonts = catalogTypography(tokens2.typography, cur.typography);
@@ -170431,9 +170538,9 @@ async function applyOverlays(input) {
     wrote.push(pkgTokens);
   }
   const homeAction = homeRefreshActionId(shell);
-  const homeSrc = join81(cwd, "dev/index.ts");
+  const homeSrc = join82(cwd, "dev/index.ts");
   if (homeAction && existsSync77(homeSrc)) {
-    const prev = readFileSync95(homeSrc, "utf8");
+    const prev = readFileSync96(homeSrc, "utf8");
     const patched = patchBrandParams(prev, overlay, homeAction);
     let next = patched.src;
     if (!patched.foreign && faq?.length && prev.includes('"tier5.himiBrandedFaq.load"') && !prev.includes('"staticFaq"')) {
@@ -170469,7 +170576,7 @@ async function applyOverlays(input) {
     }
   }
   if (!input.iconPath || !existsSync77(input.iconPath)) {
-    const book = input.iconPath ? dirname42(dirname42(resolve58(input.iconPath))) : void 0;
+    const book = input.iconPath ? dirname43(dirname43(resolve58(input.iconPath))) : void 0;
     notes.push(
       book ? `no icon installed \u2014 ${siteLogoAbsence(book).hint}` : "no icon installed and no business book to say why \u2014 `himi icon generate` draws one from the accent, or `himi icon set <file.png>` installs the customer's own mark"
     );
@@ -171432,7 +171539,7 @@ __export(cli_exports2, {
   runSiteAnalyze: () => runSiteAnalyze,
   runSiteFunctionCli: () => runSiteFunctionCli
 });
-import { existsSync as existsSync78, readFileSync as readFileSync96 } from "node:fs";
+import { existsSync as existsSync78, readFileSync as readFileSync97 } from "node:fs";
 import { resolve as resolve59 } from "node:path";
 function applyNeedsClient(shell) {
   if (shell === void 0 || !SHELL_NAMES2.includes(shell)) return true;
@@ -171491,7 +171598,7 @@ async function runSiteAnalyze(opts) {
       const prevOverlayPath = resolve59(outDir, "provisioning.overlay.json");
       const prevSite = existsSync78(prevOverlayPath) ? (() => {
         try {
-          return JSON.parse(readFileSync96(prevOverlayPath, "utf8")).site;
+          return JSON.parse(readFileSync97(prevOverlayPath, "utf8")).site;
         } catch {
           return void 0;
         }
@@ -171510,7 +171617,7 @@ async function runSiteAnalyze(opts) {
   }
   const previousOverlay = resolve59(outDir, "provisioning.overlay.json");
   carryOverGoals(
-    existsSync78(previousOverlay) ? readFileSync96(previousOverlay, "utf8") : void 0,
+    existsSync78(previousOverlay) ? readFileSync97(previousOverlay, "utf8") : void 0,
     result.provisioningOverlay
   );
   const ownerCall = ownerAuth ? ownerTransportFrom(fetchImpl, ownerAuth) : void 0;
@@ -171568,7 +171675,7 @@ async function runSiteFunctionCli(opts) {
   let source;
   if (opts.sourcePath) {
     const p2 = resolve59(opts.cwd ?? process.cwd(), opts.sourcePath);
-    source = readFileSync96(p2, "utf8");
+    source = readFileSync97(p2, "utf8");
   }
   let body;
   if (opts.bodyRaw != null) {
@@ -171598,7 +171705,7 @@ async function runSiteFunctionCli(opts) {
 function base44BookRoutes(bookPath, siteUrl) {
   if (!existsSync78(bookPath)) return void 0;
   try {
-    const book = JSON.parse(readFileSync96(bookPath, "utf8"));
+    const book = JSON.parse(readFileSync97(bookPath, "utf8"));
     if (book.kind !== "base44-app-book" || !Array.isArray(book.routes)) return void 0;
     const host = (u2) => {
       try {
@@ -171853,7 +171960,7 @@ __export(site_create_exports, {
   runSiteList: () => runSiteList,
   writeProvisioningBinding: () => writeProvisioningBinding
 });
-import { existsSync as existsSync79, readFileSync as readFileSync97, writeFileSync as writeFileSync37 } from "node:fs";
+import { existsSync as existsSync79, readFileSync as readFileSync98, writeFileSync as writeFileSync37 } from "node:fs";
 import { resolve as resolvePath2 } from "node:path";
 function oauthClientName(projectName) {
   return `${projectName} client`;
@@ -172002,7 +172109,7 @@ async function runSiteCreate(opts) {
   if (!wantOauthApp) return { ...base, nextSteps: nextSteps(metaSiteId) };
   return { ...base, clientId, redirectUri, nextSteps: nextSteps(metaSiteId, clientId) };
 }
-function writeProvisioningBinding(target, binding2, fs2 = { existsSync: existsSync79, readFileSync: readFileSync97, writeFileSync: writeFileSync37 }) {
+function writeProvisioningBinding(target, binding2, fs2 = { existsSync: existsSync79, readFileSync: readFileSync98, writeFileSync: writeFileSync37 }) {
   const msid = binding2.siteId;
   const path2 = resolvePath2(target);
   const committed = committedShellProvisioning(path2);
@@ -172678,13 +172785,13 @@ var init_context = __esm({
 });
 
 // src/cli.ts
-import { mkdtempSync as mkdtempSync5, readFileSync as readFileSync98, mkdirSync as mkdirSync41, writeFileSync as writeFileSync38, existsSync as existsSync80, rmSync as rmSync22, readdirSync as readdirSync34, statSync as statSync21, lstatSync as lstatSync21, accessSync, constants as constants4, renameSync as renameSync12, cpSync as cpSync3 } from "node:fs";
+import { mkdtempSync as mkdtempSync5, readFileSync as readFileSync99, mkdirSync as mkdirSync41, writeFileSync as writeFileSync38, existsSync as existsSync80, rmSync as rmSync22, readdirSync as readdirSync34, statSync as statSync21, lstatSync as lstatSync21, accessSync, constants as constants4, renameSync as renameSync12, cpSync as cpSync3 } from "node:fs";
 import { execFile as execFile2, execFileSync as execFileSync7, spawnSync as spawnSync5, spawn as spawn7 } from "node:child_process";
 import { AsyncLocalStorage as AsyncLocalStorage2 } from "node:async_hooks";
 import { createHash as createHash41, randomUUID as randomUUID11 } from "node:crypto";
-import { tmpdir as tmpdir6, homedir as homedir11, hostname as hostname2 } from "node:os";
-import { join as join82, resolve as resolve60, relative as relative15, basename as basename19, dirname as dirname43 } from "node:path";
-import { fileURLToPath as fileURLToPath27 } from "node:url";
+import { tmpdir as tmpdir6, homedir as homedir12, hostname as hostname2 } from "node:os";
+import { join as join83, resolve as resolve60, relative as relative15, basename as basename19, dirname as dirname44 } from "node:path";
+import { fileURLToPath as fileURLToPath28 } from "node:url";
 
 // ../serve-cli/src/client.ts
 var MAX_PUBLISH_BODY_BYTES = 8 * 1024 * 1024;
@@ -174837,8 +174944,8 @@ var str9 = (v2) => typeof v2 === "string" ? v2 : void 0;
 var num3 = (v2) => typeof v2 === "string" && v2 !== "" && Number.isFinite(Number(v2)) ? Number(v2) : void 0;
 function embeddedTemplateCatalog() {
   return availableTemplates().map((name) => {
-    const path2 = join82(templateSourceDir(name), TEMPLATE_META_FILE);
-    const meta = JSON.parse(readFileSync98(path2, "utf8"));
+    const path2 = join83(templateSourceDir(name), TEMPLATE_META_FILE);
+    const meta = JSON.parse(readFileSync99(path2, "utf8"));
     if (!meta || typeof meta.title !== "string" || typeof meta.description !== "string" || !Array.isArray(meta.tags)) {
       throw new Error(`${path2} must be { title: string, description: string, tags: string[], category?: string }`);
     }
@@ -175709,7 +175816,7 @@ var COMMANDS2 = [
 ];
 function cliVersion() {
   try {
-    return JSON.parse(readFileSync98(new URL("../package.json", import.meta.url), "utf8")).version ?? "unknown";
+    return JSON.parse(readFileSync99(new URL("../package.json", import.meta.url), "utf8")).version ?? "unknown";
   } catch {
     return "unknown";
   }
@@ -175747,7 +175854,7 @@ function createScopedRegistryResolver(exec = execNpmConfig) {
       const configured = async (key2) => {
         const timeout = deadline - Date.now();
         if (timeout <= 0) throw new Error("npm config: out of budget");
-        const raw = String(await exec("npm", ["config", "get", key2], { cwd: homedir11(), timeout })).trim();
+        const raw = String(await exec("npm", ["config", "get", key2], { cwd: homedir12(), timeout })).trim();
         return raw && raw !== "undefined" ? raw : void 0;
       };
       const effective = normalizeRegistry(await configured("@wix:registry") ?? await configured("registry"));
@@ -175834,7 +175941,7 @@ function ageInDays(publishedAt, now = Date.now()) {
 }
 function packageVersion(path2) {
   try {
-    const version4 = JSON.parse(readFileSync98(path2, "utf8")).version;
+    const version4 = JSON.parse(readFileSync99(path2, "utf8")).version;
     return typeof version4 === "string" && version4 ? version4 : void 0;
   } catch {
     return void 0;
@@ -175843,9 +175950,9 @@ function packageVersion(path2) {
 function resolvedSdkVersion(fromDir = process.cwd(), bundledManifest = new URL("./authoring-runtime/node_modules/@wix/himalaya/package.json", import.meta.url)) {
   let dir = resolve60(fromDir);
   for (; ; ) {
-    const version4 = packageVersion(join82(dir, "node_modules", "@wix", "himalaya", "package.json"));
+    const version4 = packageVersion(join83(dir, "node_modules", "@wix", "himalaya", "package.json"));
     if (version4) return { version: version4, source: "local" };
-    const parent = dirname43(dir);
+    const parent = dirname44(dir);
     if (parent === dir) break;
     dir = parent;
   }
@@ -175853,7 +175960,7 @@ function resolvedSdkVersion(fromDir = process.cwd(), bundledManifest = new URL("
   if (bundled) return { version: bundled, source: "bundled" };
   try {
     const root = execFileSync7("npm", ["root", "-g"], { stdio: ["ignore", "pipe", "ignore"] }).toString().trim();
-    const version4 = root ? packageVersion(join82(root, "@wix", "himalaya", "package.json")) : void 0;
+    const version4 = root ? packageVersion(join83(root, "@wix", "himalaya", "package.json")) : void 0;
     return version4 ? { version: version4, source: "global" } : {};
   } catch {
     return {};
@@ -175900,11 +176007,11 @@ var UPDATE_RETRY_AFTER_FAILURE_MS = 60 * 60 * 1e3;
 var UPDATE_SNOOZE_MS = 24 * 60 * 60 * 1e3;
 var UPDATE_REEXEC_ENV = "HIMI_UPDATED_ONCE";
 function updateCachePath(env = process.env) {
-  return env.HIMI_UPDATE_CACHE_FILE ?? join82(homedir11(), ".himalaya", "update-check.json");
+  return env.HIMI_UPDATE_CACHE_FILE ?? join83(homedir12(), ".himalaya", "update-check.json");
 }
 function readUpdateCache(path2) {
   try {
-    const parsed = JSON.parse(readFileSync98(path2, "utf8"));
+    const parsed = JSON.parse(readFileSync99(path2, "utf8"));
     return parsed && typeof parsed === "object" ? parsed : {};
   } catch {
     return {};
@@ -175912,7 +176019,7 @@ function readUpdateCache(path2) {
 }
 function writeUpdateCache(path2, cache) {
   try {
-    mkdirSync41(dirname43(path2), { recursive: true, mode: 448 });
+    mkdirSync41(dirname44(path2), { recursive: true, mode: 448 });
     writeFileSync38(path2, JSON.stringify(cache, null, 2) + "\n", { mode: 384 });
   } catch {
   }
@@ -175966,18 +176073,18 @@ function createUpdateRunner(spawn8 = spawnSync5) {
         // parse — the agent case this whole feature exists for (#2985 review). And no stdin: an
         // install needs none, and must not consume input piped to the command we are about to re-run.
         stdio: ["ignore", 2, 2],
-        cwd: homedir11()
+        cwd: homedir12()
       });
       if (result.error) return { ok: false, detail: result.error.message };
       return result.status === 0 ? { ok: true } : { ok: false, detail: `npm exited ${result.status}` };
     },
     installedVersion: () => {
       const root = globalNodeModulesRoot();
-      return root ? packageVersion(join82(root, "@wix", "himalaya-cli", "package.json")) : void 0;
+      return root ? packageVersion(join83(root, "@wix", "himalaya-cli", "package.json")) : void 0;
     },
     reexec: (argv) => {
       const root = globalNodeModulesRoot();
-      const entry = root ? join82(root, "@wix", "himalaya-cli", "dist", "cli.mjs") : void 0;
+      const entry = root ? join83(root, "@wix", "himalaya-cli", "dist", "cli.mjs") : void 0;
       if (!entry || !existsSync80(entry)) return void 0;
       const result = spawnSync5(process.execPath, [entry, ...argv], {
         // inherit keeps PIPED STDIN working — commands that read stdin must survive a re-exec.
@@ -176025,7 +176132,7 @@ function staleUpdateLockFile(cachePath, now) {
   for (const path2 of [`${cachePath}.lock.break`, `${cachePath}.lock`]) {
     let content;
     try {
-      content = readFileSync98(path2, "utf8");
+      content = readFileSync99(path2, "utf8");
     } catch {
       continue;
     }
@@ -176048,7 +176155,7 @@ function acquireUpdateLock(cachePath, now, hooks = {}) {
   const mine = lockStamp(now);
   const readLock = (path2) => {
     try {
-      return readFileSync98(path2, "utf8");
+      return readFileSync99(path2, "utf8");
     } catch {
       return void 0;
     }
@@ -176069,7 +176176,7 @@ function acquireUpdateLock(cachePath, now, hooks = {}) {
   };
   const release2 = () => removeIfMine(lockPath);
   try {
-    mkdirSync41(dirname43(lockPath), { recursive: true, mode: 448 });
+    mkdirSync41(dirname44(lockPath), { recursive: true, mode: 448 });
   } catch {
     return () => {
     };
@@ -176136,10 +176243,10 @@ function supersededInCache(current, latest, now) {
 function createUpdateRefreshSpawner(spawnFn = spawn7, execArgv = process.execArgv) {
   return () => {
     try {
-      const child = spawnFn(process.execPath, [...loaderArgs(execArgv), fileURLToPath27(import.meta.url), UPDATE_REFRESH_COMMAND], {
+      const child = spawnFn(process.execPath, [...loaderArgs(execArgv), fileURLToPath28(import.meta.url), UPDATE_REFRESH_COMMAND], {
         detached: true,
         stdio: "ignore",
-        cwd: homedir11(),
+        cwd: homedir12(),
         env: process.env
       });
       child.on("error", () => {
@@ -176191,7 +176298,7 @@ function createTrimValidator(deps = {}, spawnFn = spawn7) {
     }
     const { code, stdout, stderr } = await new Promise((done) => {
       const chunks = { out: [], err: [] };
-      const child = spawnFn(process.execPath, [...loaderArgs(process.execArgv), fileURLToPath27(import.meta.url), ...argv], {
+      const child = spawnFn(process.execPath, [...loaderArgs(process.execArgv), fileURLToPath28(import.meta.url), ...argv], {
         cwd: process.cwd(),
         env: process.env,
         stdio: ["ignore", "pipe", "pipe"]
@@ -176640,7 +176747,7 @@ function executableOnPath(name, env = process.env) {
   const suffixes = process.platform === "win32" ? (env.PATHEXT ?? ".COM;.EXE;.BAT;.CMD").split(";").filter(Boolean) : [""];
   for (const dir of entries) {
     for (const suffix of suffixes) {
-      const candidate = join82(dir, `${name}${suffix}`);
+      const candidate = join83(dir, `${name}${suffix}`);
       try {
         if (!statSync21(candidate).isFile()) continue;
         if (process.platform !== "win32") accessSync(candidate, constants4.X_OK);
@@ -176749,7 +176856,7 @@ async function nativeConfigAdvisories(app, configSource) {
     const { iosProjectYml: iosProjectYml2 } = await Promise.resolve().then(() => (init_paths2(), paths_exports));
     const { androidOptedIn: androidOptedIn3, LABEL_IOS_SPLASH: LABEL_IOS_SPLASH2 } = await Promise.resolve().then(() => (init_splash(), splash_exports));
     const iosYmlPath = iosProjectYml2(app);
-    const iosYml = existsSync80(iosYmlPath) ? readFileSync98(iosYmlPath, "utf8") : "";
+    const iosYml = existsSync80(iosYmlPath) ? readFileSync99(iosYmlPath, "utf8") : "";
     let optedIn = iosYml.includes(LABEL_IOS_SPLASH2);
     if (!optedIn) {
       const { androidManifestPath: androidManifestPath3 } = await Promise.resolve().then(() => (init_gen_native_config(), gen_native_config_exports));
@@ -176763,13 +176870,13 @@ async function nativeConfigAdvisories(app, configSource) {
 }
 function readConfigSource(dir) {
   try {
-    return readFileSync98(join82(dir, "config.ts"), "utf8");
+    return readFileSync99(join83(dir, "config.ts"), "utf8");
   } catch {
     return null;
   }
 }
 function writePngFile(path2, base64) {
-  mkdirSync41(dirname43(path2), { recursive: true });
+  mkdirSync41(dirname44(path2), { recursive: true });
   writeFileSync38(path2, Buffer.from(base64, "base64"));
   return path2;
 }
@@ -176817,7 +176924,7 @@ var NoBase44SlotError = class extends Error {
 };
 async function initFromRemoteTemplate(name, parentDir, template, c2, opts = {}) {
   const dir = resolve60(parentDir, name);
-  if (existsSync80(join82(dir, "himalaya.content.json"))) {
+  if (existsSync80(join83(dir, "himalaya.content.json"))) {
     throw new Error(`content package already exists at ${dir}`);
   }
   const r2 = await c2.fetchTemplateSource(TEMPLATE_APP_PREFIX + template);
@@ -176878,8 +176985,8 @@ function restoreDestinationIssue(dest, force) {
 function isHimalayaMonorepoCheckout(start) {
   let dir = resolve60(start);
   for (; ; ) {
-    if (existsSync80(join82(dir, "tools", "himi-cli", "src", "cli.ts")) && existsSync80(join82(dir, "core", "serve", "src", "server.ts"))) return true;
-    const parent = dirname43(dir);
+    if (existsSync80(join83(dir, "tools", "himi-cli", "src", "cli.ts")) && existsSync80(join83(dir, "core", "serve", "src", "server.ts"))) return true;
+    const parent = dirname44(dir);
     if (parent === dir) return false;
     dir = parent;
   }
@@ -176938,8 +177045,8 @@ function materializeForPreview(appDir3, slug, displayName2) {
   const forBuild = Object.fromEntries(
     Object.entries(files).map(([rel, body]) => [rel, rel === "himalaya.content.json" ? substituteIdentity(body, slug) : body])
   );
-  const repoRoot2 = resolve60(fileURLToPath27(new URL("../../..", import.meta.url)));
-  const root = join82(repoRoot2, "node_modules", ".cache", "himi-template-preview");
+  const repoRoot2 = resolve60(fileURLToPath28(new URL("../../..", import.meta.url)));
+  const root = join83(repoRoot2, "node_modules", ".cache", "himi-template-preview");
   const stillRunning = (pid) => {
     try {
       process.kill(pid, 0);
@@ -176953,12 +177060,12 @@ function materializeForPreview(appDir3, slug, displayName2) {
       if (!entry.isDirectory()) continue;
       const pid = Number(entry.name.startsWith(`${slug}-`) ? entry.name.slice(slug.length + 1) : NaN);
       if (Number.isInteger(pid) && pid > 0 && pid !== process.pid && !stillRunning(pid)) {
-        rmSync22(join82(root, entry.name), { recursive: true, force: true });
+        rmSync22(join83(root, entry.name), { recursive: true, force: true });
       }
     }
   } catch {
   }
-  const dest = join82(root, `${slug}-${process.pid}`);
+  const dest = join83(root, `${slug}-${process.pid}`);
   rmSync22(dest, { recursive: true, force: true });
   mkdirSync41(dest, { recursive: true });
   try {
@@ -176971,8 +177078,8 @@ function materializeForPreview(appDir3, slug, displayName2) {
 }
 async function appId(dir) {
   try {
-    const { readFileSync: readFileSync99 } = await import("node:fs");
-    const m2 = JSON.parse(readFileSync99(join82(dir, "himalaya.content.json"), "utf8"));
+    const { readFileSync: readFileSync100 } = await import("node:fs");
+    const m2 = JSON.parse(readFileSync100(join83(dir, "himalaya.content.json"), "utf8"));
     if (m2.name) return m2.name;
   } catch {
   }
@@ -176980,8 +177087,8 @@ async function appId(dir) {
 }
 async function contentVisibility(dir) {
   try {
-    const { readFileSync: readFileSync99 } = await import("node:fs");
-    const m2 = JSON.parse(readFileSync99(join82(dir, "himalaya.content.json"), "utf8"));
+    const { readFileSync: readFileSync100 } = await import("node:fs");
+    const m2 = JSON.parse(readFileSync100(join83(dir, "himalaya.content.json"), "utf8"));
     if (m2.visibility === "public" || m2.visibility === "unlisted") return m2.visibility;
   } catch {
   }
@@ -177270,7 +177377,7 @@ Seed your coding agent with \`himi agent-init\`. Guides: ${idx.portalUrl}`);
         ...res.removed.length ? { removed: res.removed, note: "older copies at the app root, moved to .himi/legacy-agent-files/ (a backup, in case one became app code) \u2014 the current ones live in .agents/skills/himalaya/" } : {},
         // In a git repo the refresh moves the diff identity an earlier `himi test` attested (that
         // hash is shared with the repo gates and deliberately exempts nothing but its own metadata).
-        ...existsSync80(join82(dir, ".himi", "attestations", "latest.json")) ? { next: "if `himi push` then refuses the attestation as stale, re-run `himi test` \u2014 in a git checkout this refresh changed the tree it covered" } : {},
+        ...existsSync80(join83(dir, ".himi", "attestations", "latest.json")) ? { next: "if `himi push` then refuses the attestation as stale, re-run `himi test` \u2014 in a git checkout this refresh changed the tree it covered" } : {},
         ...res.skipped.length ? { skipped: res.skipped } : {},
         portalUrl: idx.portalUrl
       });
@@ -177293,7 +177400,7 @@ async function recordedReleaseForContentQuietly(dir, resolution, onDrift) {
   try {
     const { buildContentForValidation: buildContentForValidation2, buildReleaseFromContent: buildReleaseFromContent2, bundleOutDir: bundleOutDir2 } = await loadAuthoring();
     const bres = await buildContentForValidation2(dir, { resolution });
-    out2 = mkdtempSync5(join82(tmpdir6(), "himi-ux-record-"));
+    out2 = mkdtempSync5(join83(tmpdir6(), "himi-ux-record-"));
     const hasWorkers = bres.built.length > 0 || bres.compileErrors.length > 0;
     const outcome = await buildReleaseFromContent2(dir, out2, { ...hasWorkers ? { tier5Dir: bundleOutDir2(dir) } : {}, collect: { lint: true } });
     const releaseId = outcome.manifest.releaseId;
@@ -177472,7 +177579,7 @@ async function producedWidgetFamilies(dir) {
     let js2;
     for (const candidate of [`${name}.bundle.js`, `${name}.js`, name]) {
       try {
-        js2 = readFileSync98(join82(outDir, candidate), "utf8");
+        js2 = readFileSync99(join83(outDir, candidate), "utf8");
         break;
       } catch {
       }
@@ -177503,7 +177610,7 @@ async function producedWidgetFamilies(dir) {
   }
   return { families, source: "dist/bundles" };
 }
-var boardOpen = (dir) => existsSync80(join82(dir, ".himi", "studio", "index.html"));
+var boardOpen = (dir) => existsSync80(join83(dir, ".himi", "studio", "index.html"));
 var BOARD_REFRESHERS = /* @__PURE__ */ new Set(["render", "test", "validate", "build", "push", "icon", "site", "ux", "progress"]);
 async function leaveForBoard(dir, record2, value) {
   if (!boardOpen(dir)) return;
@@ -177527,7 +177634,7 @@ async function liveMapFor(dir) {
 }
 var commandScratch = new AsyncLocalStorage2();
 function commandScratchDir(prefix) {
-  const dir = mkdtempSync5(join82(tmpdir6(), prefix));
+  const dir = mkdtempSync5(join83(tmpdir6(), prefix));
   commandScratch.getStore()?.push(dir);
   return dir;
 }
@@ -177881,7 +177988,7 @@ himi v${cliVersion()} \u2014 run \`himi --version\`. If authoring commands fail
             const owed = openApprovals2(readApprovals2(dir).events).length;
             next.push(`carried the planning journal into the app (${carried.join(", ")}${owed ? `; ${owed} approval${owed === 1 ? "" : "s"} still owed` : ""}) \u2014 \`himi progress --brief\` there shows it`);
           }
-          const planInParent = ["SPEC.md", "MOBILE-UX.md"].filter((f2) => existsSync80(join82(parentDir, f2)));
+          const planInParent = ["SPEC.md", "MOBILE-UX.md"].filter((f2) => existsSync80(join83(parentDir, f2)));
           if (planInParent.length) {
             next.push(`${planInParent.join(" and ")} in ${parentDir} ${planInParent.length > 1 ? "are" : "is"} not the app's \u2014 if that is the approved plan, move it over the template's boilerplate in ${dir}`);
           }
@@ -177892,12 +177999,12 @@ himi v${cliVersion()} \u2014 run \`himi --version\`. If authoring commands fail
           const board = await openBoardForSession2(dir);
           const home = homeScreenIdOf2(dir);
           recordInitSource2(dir, { template: template ?? null, source });
-          const firstLook = flags["no-first-look"] === true ? { skipped: "--no-first-look" } : await firstLookAtInit2(dir, { source, home, entry: fileURLToPath27(import.meta.url), loader: loaderArgs(process.execArgv) });
+          const firstLook = flags["no-first-look"] === true ? { skipped: "--no-first-look" } : await firstLookAtInit2(dir, { source, home, entry: fileURLToPath28(import.meta.url), loader: loaderArgs(process.execArgv) });
           const pictured = "image" in firstLook;
           const watch2 = await startWatchAtInit2(dir, {
             source,
             app: await appId(dir),
-            entry: fileURLToPath27(import.meta.url),
+            entry: fileURLToPath28(import.meta.url),
             loader: loaderArgs(process.execArgv),
             noWatch: flags["no-watch"] === true
           });
@@ -178042,13 +178149,13 @@ ${doNow.map((l2) => `  ${l2}`).join("\n")}`);
               if (adding) {
                 const from = str9(flags.from);
                 if (!from) throw new TrimRefusal2('--add <id> needs --from <file> holding the whole new SCREENS entry (`  "<id>": { "screenId": "<id>", \u2026 },`)');
-                print(adopt.addScreen(dir, adding, readFileSync98(from, "utf8"), { parent: str9(flags.parent), tab: str9(flags.tab), displayName: str9(flags["display-name"]) }));
+                print(adopt.addScreen(dir, adding, readFileSync99(from, "utf8"), { parent: str9(flags.parent), tab: str9(flags.tab), displayName: str9(flags["display-name"]) }));
                 return 0;
               }
               if (target) {
                 const from = str9(flags.from);
                 if (!from) throw new TrimRefusal2("--write <id> needs --from <file> holding the whole entry, as --show prints it");
-                print(adopt.replaceScreen(dir, target, readFileSync98(from, "utf8")));
+                print(adopt.replaceScreen(dir, target, readFileSync99(from, "utf8")));
                 return 0;
               }
               if (show) {
@@ -178130,7 +178237,7 @@ ${doNow.map((l2) => `  ${l2}`).join("\n")}`);
             const { keepFromSpec: keepFromSpec2 } = await Promise.resolve().then(() => (init_template_adopt(), template_adopt_exports));
             const dir = contentDir(flags);
             try {
-              const spec = keepFromSpec2(dir, str9(flags["from-spec"]) ?? join82(dir, "SPEC.md"));
+              const spec = keepFromSpec2(dir, str9(flags["from-spec"]) ?? join83(dir, "SPEC.md"));
               const own4 = typeof keep === "string" ? keep.split(",").map((k2) => k2.trim()).filter(Boolean) : [];
               keep = [.../* @__PURE__ */ new Set([...spec.keep, ...own4])].join(",");
               fromSpec = { fromSpec: {
@@ -178171,7 +178278,7 @@ ${doNow.map((l2) => `  ${l2}`).join("\n")}`);
           const result = { ...outcome.result, ...fromSpec };
           const adoptDir = contentDir(flags);
           const kept = flags["dry-run"] !== true && (outcome.code === 0 || outcome.result.forcedKeep === true);
-          if (kept && existsSync80(join82(adoptDir, adoptBits.ADOPT_FILE))) {
+          if (kept && existsSync80(join83(adoptDir, adoptBits.ADOPT_FILE))) {
             try {
               const inv = adoptBits.inspectApp(adoptDir);
               adoptBits.writeInventory(adoptDir, inv, { companions: "if-missing" });
@@ -178200,7 +178307,7 @@ ${doNow.map((l2) => `  ${l2}`).join("\n")}`);
             const sourceDir = resolve60(str9(flags["source-dir"]) ?? appDir3);
             let meta;
             try {
-              meta = JSON.parse(readFileSync98(join82(sourceDir, TEMPLATE_META_FILE), "utf8"));
+              meta = JSON.parse(readFileSync99(join83(sourceDir, TEMPLATE_META_FILE), "utf8"));
             } catch {
               io2.error(JSON.stringify({ error: `no ${TEMPLATE_META_FILE} in ${sourceDir} \u2014 a template must declare { title, description, tags } to be published`, hint: `add ${TEMPLATE_META_FILE} next to himalaya.content.json (or pass --source-dir <dir>)` }));
               return 2;
@@ -178210,7 +178317,7 @@ ${doNow.map((l2) => `  ${l2}`).join("\n")}`);
               return 2;
             }
             try {
-              const appearance = extractTemplateAppearance(JSON.parse(readFileSync98(join82(sourceDir, "tokens.json"), "utf8")));
+              const appearance = extractTemplateAppearance(JSON.parse(readFileSync99(join83(sourceDir, "tokens.json"), "utf8")));
               meta = { ...appearance, ...meta };
             } catch {
             }
@@ -178232,7 +178339,7 @@ ${doNow.map((l2) => `  ${l2}`).join("\n")}`);
             const force = flags.force === true;
             const { buildContentForValidation: buildContentForValidation2, buildReleaseFromContent: buildReleaseFromContent2, bundleOutDir: bundleOutDir2 } = await loadAuthoring();
             const bres = await buildContentForValidation2(buildDir, { resolution: resolutionFlag(flags) });
-            const out2 = mkdtempSync5(join82(tmpdir6(), "himi-template-"));
+            const out2 = mkdtempSync5(join83(tmpdir6(), "himi-template-"));
             publishScratch.push(out2);
             const hasWorkers = bres.built.length > 0 || bres.compileErrors.length > 0;
             const outcome = await buildReleaseFromContent2(buildDir, out2, {
@@ -178289,7 +178396,7 @@ ${doNow.map((l2) => `  ${l2}`).join("\n")}`);
             let iconHash;
             if (iconPath) {
               try {
-                const bytes2 = readFileSync98(iconPath);
+                const bytes2 = readFileSync99(iconPath);
                 payload.icon = bytes2.toString("base64");
                 iconHash = createHash41("sha256").update(bytes2).digest("hex");
               } catch {
@@ -178573,7 +178680,7 @@ ${doNow.map((l2) => `  ${l2}`).join("\n")}`);
         const homePicture = await homePictureAtValidate2(dir, {
           ok: !hasErrors,
           home: outcome.homeScreenId,
-          entry: fileURLToPath27(import.meta.url),
+          entry: fileURLToPath28(import.meta.url),
           loader: loaderArgs(process.execArgv)
         });
         const { postcard: picturePostcard, ...picture } = homePicture;
@@ -178588,7 +178695,7 @@ ${doNow.map((l2) => `  ${l2}`).join("\n")}`);
           const path2 = dpxSessionTokenPath();
           let raw;
           try {
-            raw = readFileSync98(path2, "utf8");
+            raw = readFileSync99(path2, "utf8");
           } catch {
             throw new Error(`no DPX BO session at ${path2}; run dpx auth login, write dpx auth token to that path, then himi login --dpx --target bo`);
           }
@@ -178722,8 +178829,8 @@ ${doNow.map((l2) => `  ${l2}`).join("\n")}`);
           const dir = resolve60(out2);
           const files = himiPluginFiles2(skills.skillMd);
           for (const f2 of files) {
-            mkdirSync41(dirname43(join82(dir, f2.path)), { recursive: true });
-            writeFileSync38(join82(dir, f2.path), f2.text);
+            mkdirSync41(dirname44(join83(dir, f2.path)), { recursive: true });
+            writeFileSync38(join83(dir, f2.path), f2.text);
           }
           print({ ok: true, dir, files: files.map((f2) => f2.path), next: [`claude plugin validate ${dir}`, `claude --plugin-dir ${dir}`] });
           return 0;
@@ -178740,15 +178847,15 @@ ${doNow.map((l2) => `  ${l2}`).join("\n")}`);
       case "studio": {
         const { openStudio: openStudio2 } = await Promise.resolve().then(() => (init_studio(), studio_exports));
         const dir = contentDir(flags);
-        if (!existsSync80(join82(dir, "himalaya.content.json"))) {
+        if (!existsSync80(join83(dir, "himalaya.content.json"))) {
           io2.error(JSON.stringify({ ok: false, error: "not_a_content_package", dir, hint: "run from the app directory (or pass --content <dir>) \u2014 the board reads that package's .himi/" }));
           return 2;
         }
         if (pos[1] === "reel") {
           const { buildReel: buildReel2 } = await Promise.resolve().then(() => (init_studio_reel(), studio_reel_exports));
-          const out2 = resolve60(str9(flags.out) ?? join82(dir, ".himi", "making-of.html"));
+          const out2 = resolve60(str9(flags.out) ?? join83(dir, ".himi", "making-of.html"));
           const { html, plan } = buildReel2(dir);
-          mkdirSync41(dirname43(out2), { recursive: true });
+          mkdirSync41(dirname44(out2), { recursive: true });
           writeFileSync38(out2, html);
           const { pathToFileURL: pathToFileURL9 } = await import("node:url");
           const url2 = pathToFileURL9(out2).href;
@@ -178818,7 +178925,7 @@ ${handover.hint[0].toUpperCase()}${handover.hint.slice(1)}.`);
         } = await Promise.resolve().then(() => (init_progress(), progress_exports));
         const dir = contentDir(flags);
         const journal2 = journalPath2(dir);
-        const isContentPackage = existsSync80(join82(dir, "himalaya.content.json"));
+        const isContentPackage = existsSync80(join83(dir, "himalaya.content.json"));
         const hint = isContentPackage ? {} : { hint: "no himalaya.content.json here \u2014 run from the app directory (or pass --content <dir>) so the build board finds this journal" };
         const message = pos.slice(1).join(" ").trim();
         const approvalFlags = ["approve", "done", "drop"].filter((f2) => flags[f2] !== void 0);
@@ -178970,7 +179077,7 @@ ${handover.hint[0].toUpperCase()}${handover.hint.slice(1)}.`);
       case "test": {
         const dir = contentDir(flags);
         const structuredOutput = flags.json === true || io2.isTTY !== true;
-        if (existsSync80(join82(dir, "functions"))) {
+        if (existsSync80(join83(dir, "functions"))) {
           const { invokeLocalFunction: invokeLocalFunction2, loadFunctionsApp: loadFunctionsApp2 } = await Promise.resolve().then(() => (init_functions(), functions_exports));
           const loaded = await loadFunctionsApp2(dir);
           const results = [];
@@ -179102,13 +179209,13 @@ ${handover.hint[0].toUpperCase()}${handover.hint.slice(1)}.`);
             io2.error(JSON.stringify({ error: `screen "${screen.screenId}" has no Tier-5 worker, so there is nothing for the browser loop to build` }));
             return 2;
           }
-          const sources = collectWorkerSources2(join82(dir, "tier5-src"), screen.bundleName);
+          const sources = collectWorkerSources2(join83(dir, "tier5-src"), screen.bundleName);
           if (!sources) {
             io2.error(JSON.stringify({ error: `no worker source found at tier5-src/${screen.bundleName} \u2014 the browser loop compiles SOURCE, not the built bundle` }));
             return 2;
           }
-          const { fileURLToPath: fileURLToPath28 } = await import("node:url");
-          const sdk = collectSdkModules2(sources.files, sdkSubpathReader2((s2) => fileURLToPath28(import.meta.resolve(s2))));
+          const { fileURLToPath: fileURLToPath29 } = await import("node:url");
+          const sdk = collectSdkModules2(sources.files, sdkSubpathReader2((s2) => fileURLToPath29(import.meta.resolve(s2))));
           if (sdk.unsupported.length) {
             io2.error(JSON.stringify({
               error: `this worker imports ${sdk.unsupported.map((u2) => `@himalaya/${u2.sub}`).join(", ")}, which the browser loop cannot build: ${sdk.unsupported.map((u2) => `${u2.sub} needs ${u2.builtin}`).join("; ")}. The page compiles in a tab with no node builtins. Run \`himi test\` without --browser for this screen.`,
@@ -179280,7 +179387,7 @@ ${handover.hint[0].toUpperCase()}${handover.hint.slice(1)}.`);
             const sp = await runShotsPass2({
               descriptors: scopeDescriptors2(outcome.descriptors ?? [], pos.slice(1), invalidScreens),
               tokens: outcome.tokens,
-              outDir: join82(dir, ".himi", "shots"),
+              outDir: join83(dir, ".himi", "shots"),
               width: 390,
               layers: { rules: shotRules, ...cmsSeed ? { cmsSeed } : {}, ...canned ? { canned: canned.byKey } : {} },
               ...budgetMs ? { budgetMs } : {},
@@ -179320,7 +179427,7 @@ ${handover.hint[0].toUpperCase()}${handover.hint.slice(1)}.`);
           releaseId: result.releaseId,
           releasePayload: release2,
           descriptors: attestedDescriptors,
-          screenshots: Object.fromEntries(writtenShots.filter((name) => crawledScreens.has(name.replace(/\.png$/, ""))).map((name) => [name.replace(/\.png$/, ""), join82(dir, ".himi", "shots", name)])),
+          screenshots: Object.fromEntries(writtenShots.filter((name) => crawledScreens.has(name.replace(/\.png$/, ""))).map((name) => [name.replace(/\.png$/, ""), join83(dir, ".himi", "shots", name)])),
           coverage: {
             screens: crawledScreens.size,
             actionsDispatched: result.actions.exercised,
@@ -179445,7 +179552,7 @@ ${[...afterRun.next, ...testReminder ? [testReminder] : []].join("\n")}`);
             return 2;
           }
           try {
-            const raw = stateArg.trim().startsWith("{") ? stateArg : readFileSync98(stateArg.replace(/^@/, ""), "utf8");
+            const raw = stateArg.trim().startsWith("{") ? stateArg : readFileSync99(stateArg.replace(/^@/, ""), "utf8");
             injectedState = JSON.parse(raw);
           } catch (e2) {
             io2.error(JSON.stringify({ error: `--state must be inline JSON or a path to a .json file \u2014 ${e2.message}` }));
@@ -179460,7 +179567,7 @@ ${[...afterRun.next, ...testReminder ? [testReminder] : []].join("\n")}`);
             return 2;
           }
           try {
-            const raw = inputArg.trim().startsWith("{") ? inputArg : readFileSync98(inputArg.replace(/^@/, ""), "utf8");
+            const raw = inputArg.trim().startsWith("{") ? inputArg : readFileSync99(inputArg.replace(/^@/, ""), "utf8");
             const parsed = JSON.parse(raw);
             if (!parsed || typeof parsed !== "object" || Array.isArray(parsed)) throw new Error("must be a JSON object");
             injectedInput = parsed;
@@ -179542,7 +179649,7 @@ ${[...afterRun.next, ...testReminder ? [testReminder] : []].join("\n")}`);
         const diagnostics = (outcome.lint ?? []).find((s2) => s2.screenId === screenId)?.issues ?? [];
         let pngFile;
         let attestationPngFile;
-        const shotPath = join82(dir, ".himi", "shots", `${screenId}.png`);
+        const shotPath = join83(dir, ".himi", "shots", `${screenId}.png`);
         const pngTarget = typeof flags.png === "string" ? str9(flags.png) : flags.png === true ? shotPath : void 0;
         if (pngTarget && r2.pngBase64) {
           pngFile = writePngFile(pngTarget, r2.pngBase64);
@@ -179914,7 +180021,7 @@ default (no --glyph): ${DEFAULT_GLYPH2} \u2014 a mark that claims nothing, so th
             io2.error(JSON.stringify({ error: `${dest} already exists and is not empty`, hint: "pass --force to write into it anyway (merging, and naming what it keeps), --replace to restore exactly what was archived, or --out/--name to land somewhere else" }));
             return 1;
           }
-          if (replace && occupied && !existsSync80(join82(dest, "himalaya.content.json"))) {
+          if (replace && occupied && !existsSync80(join83(dest, "himalaya.content.json"))) {
             io2.error(JSON.stringify({
               error: `${dest} is not a content package \u2014 refusing to --replace it`,
               hint: "--replace only clears a directory that holds himalaya.content.json. Check --out/--name, or pass --force to merge into it instead."
@@ -180622,7 +180729,7 @@ default (no --glyph): ${DEFAULT_GLYPH2} \u2014 a mark that claims nothing, so th
         }
         const { buildContentForValidation: buildContentForValidation2, buildReleaseFromContent: buildReleaseFromContent2, bundleOutDir: bundleOutDir2 } = await loadAuthoring();
         const bres = await buildContentForValidation2(dir, { resolution: resolutionFlag(flags) });
-        const built = mkdtempSync5(join82(tmpdir6(), "himi-pack-"));
+        const built = mkdtempSync5(join83(tmpdir6(), "himi-pack-"));
         const hasWorkers = bres.built.length > 0 || bres.compileErrors.length > 0;
         const outcome = await buildReleaseFromContent2(dir, built, {
           ...hasWorkers ? { tier5Dir: bundleOutDir2(dir) } : {},
@@ -180829,7 +180936,7 @@ default (no --glyph): ${DEFAULT_GLYPH2} \u2014 a mark that claims nothing, so th
             }));
             return 1;
           }
-          const archive = readFileSync98(resolve60(file2));
+          const archive = readFileSync99(resolve60(file2));
           const result = await client2().createPackageShare({
             app: opened.header.app,
             releaseId: opened.header.releaseId,
@@ -180926,11 +181033,11 @@ default (no --glyph): ${DEFAULT_GLYPH2} \u2014 a mark that claims nothing, so th
             const app = await appId(dir2);
             const { buildContentBundles: buildContentBundles2, buildReleaseFromContent: buildReleaseFromContent2, bundleOutDir: bundleOutDir2 } = await loadAuthoring();
             const bres = await buildContentBundles2(dir2, { resolution: resolutionFlag(flags) });
-            temp = mkdtempSync5(join82(tmpdir6(), "himi-run-build-"));
+            temp = mkdtempSync5(join83(tmpdir6(), "himi-run-build-"));
             const hasWorkers = bres.built.length > 0 || bres.compileErrors.length > 0;
             const initial = await buildReleaseFromContent2(dir2, temp, { ...hasWorkers ? { tier5Dir: bundleOutDir2(dir2) } : {} });
             servedMissing = initial.missingBundles;
-            source = join82(temp, app);
+            source = join83(temp, app);
           }
           const chromeArg = str9(flags.chrome) ?? "preview";
           if (chromeArg !== "preview" && chromeArg !== "app") {
@@ -180969,7 +181076,7 @@ default (no --glyph): ${DEFAULT_GLYPH2} \u2014 a mark that claims nothing, so th
             if (!recordKit) return;
             startedAt = (/* @__PURE__ */ new Date()).toISOString();
             const failure = record2(served2, { ok: true, at: startedAt });
-            if (!recorded) io2.error(JSON.stringify({ run: "run_record_skipped", message: `${failure ?? `${join82(dir, ".himi")} is not a real directory`}, so the build board will not frame this preview.` }));
+            if (!recorded) io2.error(JSON.stringify({ run: "run_record_skipped", message: `${failure ?? `${join83(dir, ".himi")} is not a real directory`}, so the build board will not frame this preview.` }));
             await refreshBoard();
           };
           const retract = async () => {
@@ -181005,7 +181112,7 @@ default (no --glyph): ${DEFAULT_GLYPH2} \u2014 a mark that claims nothing, so th
           const watchKit = watch2 ? await Promise.resolve().then(() => (init_run_watch(), run_watch_exports)) : null;
           const hhpPreviewRoute = watch2 ? (await Promise.resolve().then(() => (init_hhp_preview(), hhp_preview_exports))).hhpPreviewResponse : null;
           const bus = watchKit ? new watchKit.ReloadBus() : void 0;
-          if (watch2) served = mkdtempSync5(join82(tmpdir6(), "himi-run-served-"));
+          if (watch2) served = mkdtempSync5(join83(tmpdir6(), "himi-run-served-"));
           const running = await runPackage2(source, {
             port,
             chrome: chromeArg,
@@ -181034,8 +181141,8 @@ default (no --glyph): ${DEFAULT_GLYPH2} \u2014 a mark that claims nothing, so th
             await announce(running);
             if (watchKit && bus) {
               const { buildContentBundles: buildContentBundles2, buildReleaseFromContent: buildReleaseFromContent2, bundleOutDir: bundleOutDir2 } = await loadAuthoring();
-              const live3 = join82(running.releaseRoot, running.app);
-              const manifestOf = (tree) => JSON.parse(readFileSync98(join82(tree, "release-manifest.json"), "utf8"));
+              const live3 = join83(running.releaseRoot, running.app);
+              const manifestOf = (tree) => JSON.parse(readFileSync99(join83(tree, "release-manifest.json"), "utf8"));
               let current = manifestOf(live3);
               const failed3 = async (message) => {
                 if (stopping) return;
@@ -181046,7 +181153,7 @@ default (no --glyph): ${DEFAULT_GLYPH2} \u2014 a mark that claims nothing, so th
               };
               rebuild = watchKit.serialize(async () => {
                 const t0 = Date.now();
-                const next = mkdtempSync5(join82(tmpdir6(), "himi-run-build-"));
+                const next = mkdtempSync5(join83(tmpdir6(), "himi-run-build-"));
                 try {
                   const bres = await buildContentBundles2(dir, { resolution: resolutionFlag(flags) });
                   if (bres.compileErrors.length) {
@@ -181063,16 +181170,16 @@ default (no --glyph): ${DEFAULT_GLYPH2} \u2014 a mark that claims nothing, so th
                     return;
                   }
                   if (stopping) return;
-                  const fresh = manifestOf(join82(next, running.app));
+                  const fresh = manifestOf(join83(next, running.app));
                   const diff = watchKit.diffReleases(current, fresh);
                   const { describeChanges: describeChanges2, headline: headline2 } = await Promise.resolve().then(() => (init_build_changes(), build_changes_exports));
-                  const changes = describeChanges2(live3, join82(next, running.app), diff);
+                  const changes = describeChanges2(live3, join83(next, running.app), diff);
                   const retired = `${live3}.retired-${Date.now()}`;
                   renameSync12(live3, retired);
                   try {
-                    renameSync12(join82(next, running.app), live3);
+                    renameSync12(join83(next, running.app), live3);
                   } catch {
-                    cpSync3(join82(next, running.app), live3, { recursive: true });
+                    cpSync3(join83(next, running.app), live3, { recursive: true });
                   }
                   rmSync22(retired, { recursive: true, force: true });
                   current = fresh;
@@ -181755,7 +181862,7 @@ default (no --glyph): ${DEFAULT_GLYPH2} \u2014 a mark that claims nothing, so th
           lintNote: "`himi patch` sends a raw file. Nothing here built or linted your app \u2014 `himi push --only <selector>` is the same edit with the full lint gate in front of it."
         };
         if (kind === "tokens" || kind === "app-config") {
-          const body = readFileSync98(file2, "utf8");
+          const body = readFileSync99(file2, "utf8");
           const patch2 = kind === "tokens" ? { tokens: body } : { appConfig: body };
           return runReleasePatch({
             ...common,
@@ -181770,7 +181877,7 @@ default (no --glyph): ${DEFAULT_GLYPH2} \u2014 a mark that claims nothing, so th
             io2.error(JSON.stringify({ error: "patch screen needs a <screenId>", usage: PATCH_USAGE }));
             return 2;
           }
-          const descriptor = readFileSync98(file2, "utf8");
+          const descriptor = readFileSync99(file2, "utf8");
           try {
             JSON.parse(descriptor);
           } catch (e2) {
@@ -181810,7 +181917,7 @@ default (no --glyph): ${DEFAULT_GLYPH2} \u2014 a mark that claims nothing, so th
             extra: { kind, screen: id, file: { path: file2, bytes: Buffer.byteLength(descriptor, "utf8") } }
           });
         }
-        const bytes2 = readFileSync98(file2);
+        const bytes2 = readFileSync99(file2);
         const sha2 = createHash41("sha256").update(bytes2).digest("hex");
         const forScreens = (str9(flags["for-screen"]) ?? "").split(",").map((s2) => s2.trim()).filter(Boolean);
         if (flags["no-rebind"] !== void 0 && flags["no-rebind"] !== true) {
@@ -181954,7 +182061,7 @@ default (no --glyph): ${DEFAULT_GLYPH2} \u2014 a mark that claims nothing, so th
           }
           let def;
           try {
-            const parsed = JSON.parse(arg.startsWith("@") ? readFileSync98(arg.slice(1), "utf8") : arg);
+            const parsed = JSON.parse(arg.startsWith("@") ? readFileSync99(arg.slice(1), "utf8") : arg);
             if (parsed === null || typeof parsed !== "object" || Array.isArray(parsed)) {
               io2.error(JSON.stringify({ error: "invalid_definition", problems: [`--definition must be a JSON object, got ${Array.isArray(parsed) ? "an array" : parsed === null ? "null" : typeof parsed}`] }));
               return 2;
@@ -182236,7 +182343,7 @@ default (no --glyph): ${DEFAULT_GLYPH2} \u2014 a mark that claims nothing, so th
         const rememberLastDist = async (jobs2) => {
           try {
             const dir = contentDir(flags);
-            if (!existsSync80(join82(dir, "himalaya.content.json"))) return;
+            if (!existsSync80(join83(dir, "himalaya.content.json"))) return;
             const { lastDistFromJob: lastDistFromJob2, writeLastDist: writeLastDist2 } = await Promise.resolve().then(() => (init_capabilities(), capabilities_exports));
             const own4 = await appId(dir);
             for (const job of jobs2) {
@@ -182474,7 +182581,7 @@ ${label2}`);
         const platform = str9(flags.platform)?.split(",").map((p2) => p2.trim()).filter(Boolean);
         {
           const distDir = contentDir(flags);
-          if (existsSync80(join82(distDir, "himalaya.content.json"))) {
+          if (existsSync80(join83(distDir, "himalaya.content.json"))) {
             const issues = await iconIssues(distDir, flags.strict === true, { requireDeclared: true, requireVerified: true });
             const errors = issues.filter((i2) => i2.severity === "error");
             for (const i2 of issues.filter((i3) => i3.severity === "warning")) {
@@ -182813,7 +182920,7 @@ ${label2}`);
           const dpxPath = dpxSessionTokenPath();
           let dpx;
           try {
-            dpx = readFileSync98(dpxPath, "utf8").trim();
+            dpx = readFileSync99(dpxPath, "utf8").trim();
           } catch {
             io2.error(JSON.stringify({ error: `no dpx session at ${dpxPath} \u2014 run \`dpx auth login\` then \`dpx auth token > ${dpxPath}\` (dpx 2.x keeps its own state in ~/.dpx/auth.json and does NOT write the legacy session file), or omit --dpx` }));
             return 1;
@@ -183234,7 +183341,7 @@ ${report3.ok ? "OK \u2014 data + serve plane reachable." : typeof report3.hint =
           const path2 = dpxSessionTokenPath();
           let raw;
           try {
-            raw = readFileSync98(path2, "utf8");
+            raw = readFileSync99(path2, "utf8");
           } catch {
             io2.error(JSON.stringify({ error: `no DPX BO session at ${path2}` }));
             return 1;