@wix/himalaya-cli 0.1385.0 → 0.1387.0

package/dist/cli.mjs

@@ -3738,7 +3738,7 @@ async function browserLogin(opts) {
   const log = opts.log ?? (() => {
   });
   const timeoutMs = opts.timeoutMs ?? DEFAULT_TIMEOUT_MS;
-  return await new Promise((resolve63, reject) => {
+  return await new Promise((resolve65, reject) => {
     let settled = false;
     let loginUrl = "";
     const server = createServer();
@@ -3804,7 +3804,7 @@ async function browserLogin(opts) {
         res.writeHead(200, { "content-type": "text/html; charset=utf-8", "cache-control": "no-store", connection: "close" }).end(closePage(opts.doneTitle ?? "Signed in to himi"));
         const extra = {};
         for (const [k2, v2] of params) if (k2 !== "token" && k2 !== "state") extra[k2] = v2;
-        finish2(() => resolve63({ token, loginUrl, extra }));
+        finish2(() => resolve65({ token, loginUrl, extra }));
       });
     });
     server.on("error", (err) => finish2(() => reject(err)));
@@ -3916,7 +3916,7 @@ async function mintToken(args, label2, cacheKey, spawnImpl) {
     tokenCache.set(cacheKey, fromEnv);
     return fromEnv;
   }
-  const token = await new Promise((resolve63, reject) => {
+  const token = await new Promise((resolve65, reject) => {
     let child;
     try {
       child = spawnImpl("wix", [...args]);
@@ -3945,12 +3945,12 @@ async function mintToken(args, label2, cacheKey, spawnImpl) {
     child.stdout?.on("data", (d2) => {
       out2 += String(d2);
       const m2 = out2.match(TOKEN_RE);
-      if (m2) done(() => resolve63(m2[0]));
+      if (m2) done(() => resolve65(m2[0]));
     });
     child.stderr?.on("data", (d2) => {
       out2 += String(d2);
       const m2 = out2.match(TOKEN_RE);
-      if (m2) done(() => resolve63(m2[0]));
+      if (m2) done(() => resolve65(m2[0]));
     });
     child.on("error", (e2) => done(() => reject(new Error(mintHelp(label2, e2.message)))));
     child.on("exit", (code) => done(() => reject(new Error(
@@ -4160,8 +4160,8 @@ function committedProvisioningPath(name) {
 function committedShellFor(path2) {
   const normalized = path2.replace(/\\/g, "/");
   return SHELL_NAMES2.find((name) => {
-    const relative16 = committedProvisioningPath(name);
-    return normalized === relative16 || normalized.endsWith(`/${relative16}`);
+    const relative17 = committedProvisioningPath(name);
+    return normalized === relative17 || normalized.endsWith(`/${relative17}`);
   });
 }
 function isBrandable(repoRoot2, name) {
@@ -6876,9 +6876,9 @@ function compileV2(html, profile, options) {
       if (!row) error(el2, "HHP-BINDING-SCOPE", "Item bindings require a keyed list template.");
       return raw;
     }
-    const relative16 = statePath(raw);
-    if (!info4?.paths.has(relative16)) error(el2, "HHP-BINDING-PATH", `Unknown controller state path ${relative16}.`);
-    return `$service:${serviceName}.${relative16}`;
+    const relative17 = statePath(raw);
+    if (!info4?.paths.has(relative17)) error(el2, "HHP-BINDING-PATH", `Unknown controller state path ${relative17}.`);
+    return `$service:${serviceName}.${relative17}`;
   }
   function coerce(raw, field) {
     if (field.schema.type === "boolean") return raw === "" || raw === "true" ? true : raw === "false" ? false : raw;
@@ -7708,7 +7708,6 @@ function resolveTranslation(value, catalog3, sourceCatalog) {
 var BINDING_SIGILS, BINDING_SIGIL_RE, TRANSLATION_PREFIX, TRANSLATION_KEY_RE;
 var init_bindings = __esm({
   "../../core/ts/src/bindings.ts"() {
-    "use strict";
     BINDING_SIGILS = ["service", "flag", "item", "t"];
     BINDING_SIGIL_RE = new RegExp(
       `^\\$(?:${BINDING_SIGILS.filter((s2) => s2 !== "t").join("|")})\\b|^\\$t:`
@@ -10250,7 +10249,8 @@ async function bootBundleWorker(bundleJs, opts) {
         }
         return value;
       });
-    }
+    },
+    ...opts.wixApiSession ? { identityBound: opts.wixApiSession.identityBound, session: opts.wixApiSession.session } : {}
   };
   const dispatchHost = (action, params) => {
     if (action === "himi.open" && params && typeof params.screenId === "string") {
@@ -25434,10 +25434,10 @@ var init_preview = __esm({
         }
       },
       kill: (pid, signal) => process.kill(pid, signal),
-      portFree: (port) => new Promise((resolve63) => {
+      portFree: (port) => new Promise((resolve65) => {
         const s2 = createServer2();
-        s2.once("error", () => resolve63(false));
-        s2.listen(port, "127.0.0.1", () => s2.close(() => resolve63(true)));
+        s2.once("error", () => resolve65(false));
+        s2.listen(port, "127.0.0.1", () => s2.close(() => resolve65(true)));
       }),
       sleep: (ms2) => new Promise((r2) => setTimeout(r2, ms2)),
       servingIdentity: async (origin) => {
@@ -29428,7 +29428,7 @@ async function injectRequest(listener, request) {
   req.headers.host ??= url.host;
   if (body && body.length > 0) req.push(body);
   req.push(null);
-  return await new Promise((resolve63, reject) => {
+  return await new Promise((resolve65, reject) => {
     const streamed = () => {
       queueMicrotask(() => {
         req.emit("close");
@@ -29444,7 +29444,7 @@ async function injectRequest(listener, request) {
         else headers2.set(name, value);
       }
       const bodyless = out2.status === 204 || out2.status === 304 || request.method === "HEAD";
-      resolve63(new Response(bodyless ? null : out2.body, { status: out2.status, headers: headers2 }));
+      resolve65(new Response(bodyless ? null : out2.body, { status: out2.status, headers: headers2 }));
     }, streamed);
     res.on("inject-error", reject);
     try {
@@ -35581,12 +35581,12 @@ function finalizeRecording(key2, rec) {
   if (rec.finalize) return rec.finalize;
   rec.finalize = (async () => {
     clearTimeout(rec.autoStop);
-    await new Promise((resolve63) => {
+    await new Promise((resolve65) => {
       let done = false;
       const finish2 = () => {
         if (!done) {
           done = true;
-          resolve63();
+          resolve65();
         }
       };
       rec.child.once("close", finish2);
@@ -35697,7 +35697,7 @@ var init_preview2 = __esm({
     DEVICE_LIST_TIMEOUT_MS = 5e3;
     defaultRunner2 = {
       capture(cmd, args, timeoutMs = DEFAULT_CAPTURE_TIMEOUT_MS) {
-        return new Promise((resolve63, reject) => {
+        return new Promise((resolve65, reject) => {
           const child = spawn4(cmd, args, { stdio: ["ignore", "pipe", "pipe"] });
           const out2 = [];
           const err = [];
@@ -35719,7 +35719,7 @@ var init_preview2 = __esm({
           child.stderr.on("data", (b2) => err.push(b2));
           child.on("error", (e2) => settle(reject, e2));
           child.on("close", (code) => {
-            if (code === 0) settle(resolve63, Buffer.concat(out2));
+            if (code === 0) settle(resolve65, Buffer.concat(out2));
             else settle(reject, new Error(`${cmd} exited ${code}: ${Buffer.concat(err).toString("utf8")}`));
           });
         });
@@ -38032,12 +38032,12 @@ function createRicosHostSession(o2) {
     flush() {
       if (!state.ready || state.unavailable || disposed) return Promise.resolve(null);
       const requestId2 = newId();
-      return new Promise((resolve63) => {
+      return new Promise((resolve65) => {
         const timer = t2.setTimeout(() => {
           flushes.delete(requestId2);
-          resolve63(null);
+          resolve65(null);
         }, flushMs);
-        flushes.set(requestId2, { resolve: resolve63, timer });
+        flushes.set(requestId2, { resolve: resolve65, timer });
         o2.send({ v: 1, type: "requestContent", requestId: requestId2 });
       });
     },
@@ -38096,7 +38096,7 @@ async function runRicosImageUpload(o2) {
   };
   session.insertMediaPlaceholder(requestId2);
   try {
-    const entry = await new Promise((resolve63) => {
+    const entry = await new Promise((resolve65) => {
       let done = false;
       let unsub = () => {
       };
@@ -38105,7 +38105,7 @@ async function runRicosImageUpload(o2) {
         done = true;
         t2.clearTimeout(timer);
         queueMicrotask(() => unsub());
-        resolve63(v2);
+        resolve65(v2);
       };
       const timer = t2.setTimeout(() => finish2(null), o2.timeoutMs ?? RICOS_UPLOAD_TIMEOUT_MS);
       unsub = deps.subscribe(`${svc}.uploads.${requestId2}`, (v2) => {
@@ -38627,10 +38627,10 @@ async function runMediaFieldUpload(o2) {
   }, o2.timeoutMs ?? MEDIA_FIELD_UPLOAD_TIMEOUT_MS);
   const bounded2 = (p2) => {
     if (expired) return Promise.reject(new Deadline());
-    return new Promise((resolve63, reject) => {
+    return new Promise((resolve65, reject) => {
       const stop = () => reject(new Deadline());
       onExpire.push(stop);
-      p2.then(resolve63, reject).finally(() => {
+      p2.then(resolve65, reject).finally(() => {
         onExpire = onExpire.filter((f2) => f2 !== stop);
       });
     });
@@ -38653,7 +38653,7 @@ async function runMediaFieldUpload(o2) {
     const before = deps.value(urlPath);
     let uploadUrl;
     try {
-      uploadUrl = await bounded2(new Promise((resolve63, reject) => {
+      uploadUrl = await bounded2(new Promise((resolve65, reject) => {
         let done = false;
         let unsub = () => {
         };
@@ -38661,7 +38661,7 @@ async function runMediaFieldUpload(o2) {
           if (done || typeof v2 !== "string" || v2 === "" || v2 === before) return;
           done = true;
           queueMicrotask(() => unsub());
-          resolve63(v2);
+          resolve65(v2);
         });
         onExpire.push(() => {
           if (!done) {
@@ -38676,7 +38676,7 @@ async function runMediaFieldUpload(o2) {
             if (typeof now === "string" && now !== "" && now !== before) {
               done = true;
               queueMicrotask(() => unsub());
-              resolve63(now);
+              resolve65(now);
               return;
             }
           }
@@ -39122,7 +39122,7 @@ var init_controls = __esm({
       }, [selectedId]);
       const current = local != null && tabs.some((t2) => t2.id === local) ? local : selectedId;
       const selIdx = Math.max(0, tabs.findIndex((t2) => t2.id === (current ?? tabs[0]?.id)));
-      const select = (i2) => {
+      const select2 = (i2) => {
         if (pages2) setLocal(tabs[i2]?.id);
         const act = actOf(tabs[i2], props.onChange ?? props.onSelect);
         if (ctx.onAction && act) ctx.onAction(withSelection(act, { selectedId: String(tabs[i2]?.id ?? i2) }));
@@ -39135,7 +39135,7 @@ var init_controls = __esm({
         else if (e2.key === "End") ni2 = tabs.length - 1;
         else return;
         e2.preventDefault();
-        if (ni2 !== selIdx) select(ni2);
+        if (ni2 !== selIdx) select2(ni2);
       };
       const pagerRef = React5.useRef(null);
       const settle = React5.useRef(void 0);
@@ -39152,7 +39152,7 @@ var init_controls = __esm({
           const el2 = pagerRef.current;
           if (!el2 || !el2.clientWidth) return;
           const i2 = Math.round(el2.scrollLeft / el2.clientWidth);
-          if (i2 >= 0 && i2 < tabs.length && i2 !== selIdx) select(i2);
+          if (i2 >= 0 && i2 < tabs.length && i2 !== selIdx) select2(i2);
         }, 120);
       };
       const accent = C2("accentPrimary", "#116DFF");
@@ -39167,7 +39167,7 @@ var init_controls = __esm({
             role: "tab",
             "aria-selected": on4,
             tabIndex: on4 ? 0 : -1,
-            onClick: () => select(i2),
+            onClick: () => select2(i2),
             style: { all: "unset", display: "flex", gap: 6, alignItems: "center", minWidth: 44, minHeight: 44, padding: "10px 0", fontFamily: FONT(ctx), fontWeight: 600, fontSize: pxToRem(14), cursor: "pointer", color: on4 ? activeLabel : C2("textSecondary", "#777"), borderBottom: on4 ? `2px solid ${activeTint}` : "2px solid transparent", marginBottom: -1 },
             children: [
               asText2(t2.label),
@@ -39210,7 +39210,7 @@ var init_controls = __esm({
       const awaitingBinding = isBinding(props.selectedId) && resolvedSel == null;
       const selId = ctx.empty || awaitingBinding ? null : resolvedSel ?? opts[0]?.id;
       const selIdx = Math.max(0, opts.findIndex((o2) => o2.id === selId));
-      const select = (i2) => {
+      const select2 = (i2) => {
         const act = actOf(opts[i2], props.onChange ?? props.onSelect);
         if (ctx.onAction && act) ctx.onAction(withSelection(act, { selectedId: String(opts[i2]?.id ?? i2) }));
       };
@@ -39220,7 +39220,7 @@ var init_controls = __esm({
         else if (e2.key === "ArrowLeft" || e2.key === "ArrowUp") ni2 = (selIdx - 1 + opts.length) % opts.length;
         else return;
         e2.preventDefault();
-        if (ni2 !== selIdx) select(ni2);
+        if (ni2 !== selIdx) select2(ni2);
       };
       return /* @__PURE__ */ jsx6("div", { role: "radiogroup", onKeyDown, style: { display: "flex", background: seg.outlined ? "transparent" : C2("surfaceTertiary", "#eee"), borderRadius: radius(seg.trackRadius, "md", 8), padding: seg.trackPadding, width: "100%", boxSizing: "border-box", ...wrap }, children: opts.map((o2, i2) => {
         const on4 = o2.id === selId;
@@ -39237,7 +39237,7 @@ var init_controls = __esm({
             role: "radio",
             "aria-checked": on4,
             tabIndex: on4 || selId == null && i2 === 0 ? 0 : -1,
-            onClick: () => select(i2),
+            onClick: () => select2(i2),
             style: { all: "unset", flex: 1, minWidth: 44, minHeight: seg.height - 2 * seg.trackPadding, textAlign: "center", padding: "7px 4px", borderRadius: outerR, fontFamily: FONT(ctx), fontWeight: 600, fontSize: pxToRem(13), cursor: "pointer", boxSizing: "border-box", background: on4 ? C2("surfacePrimary", "#fff") : seg.outlined ? C2(pickRole(ctx.tokens.colors, seg.roles.inactive), "#eee") : "transparent", color: on4 ? C2("textPrimary", "#111") : C2("textSecondary", "#777"), boxShadow: on4 && !seg.outlined ? "0 1px 3px rgba(0,0,0,.12)" : "none", ...outlinedShape },
             children: [
               on4 && seg.selectedCheck ? /* @__PURE__ */ jsx6("span", { "aria-hidden": "true", children: "\u2713 " }) : null,
@@ -40825,7 +40825,7 @@ async function fetchData(url, type = "text") {
     }
     return response.text();
   }
-  return new Promise((resolve63, reject) => {
+  return new Promise((resolve65, reject) => {
     const request = new XMLHttpRequest();
     request.open("GET", url, true);
     request.responseType = type === "bytes" ? "arraybuffer" : type;
@@ -40836,14 +40836,14 @@ async function fetchData(url, type = "text") {
       if (request.status === 200 || request.status === 0) {
         switch (type) {
           case "bytes":
-            resolve63(new Uint8Array(request.response));
+            resolve65(new Uint8Array(request.response));
             return;
           case "blob":
           case "json":
-            resolve63(request.response);
+            resolve65(request.response);
             return;
         }
-        resolve63(request.responseText);
+        resolve65(request.responseText);
         return;
       }
       reject(new Error(request.statusText));
@@ -43775,7 +43775,7 @@ var init_pdf = __esm({
         var defineProperty = Object.defineProperty;
         var stringSlice = uncurryThis("".slice);
         var replace = uncurryThis("".replace);
-        var join86 = uncurryThis([].join);
+        var join88 = uncurryThis([].join);
         var CONFIGURABLE_LENGTH = DESCRIPTORS && !fails(function() {
           return defineProperty(function() {
           }, "length", { value: 8 }).length !== 8;
@@ -43802,7 +43802,7 @@ var init_pdf = __esm({
           }
           var state = enforceInternalState(value);
           if (!hasOwn(state, "source")) {
-            state.source = join86(TEMPLATE, typeof name == "string" ? name : "");
+            state.source = join88(TEMPLATE, typeof name == "string" ? name : "");
           }
           return value;
         };
@@ -43847,13 +43847,13 @@ var init_pdf = __esm({
         var aCallable = __webpack_require__3(9306);
         var $TypeError = TypeError;
         var PromiseCapability = function(C2) {
-          var resolve63, reject;
+          var resolve65, reject;
           this.promise = new C2(function($$resolve, $$reject) {
-            if (resolve63 !== void 0 || reject !== void 0) throw new $TypeError("Bad Promise constructor");
-            resolve63 = $$resolve;
+            if (resolve65 !== void 0 || reject !== void 0) throw new $TypeError("Bad Promise constructor");
+            resolve65 = $$resolve;
             reject = $$reject;
           });
-          this.resolve = aCallable(resolve63);
+          this.resolve = aCallable(resolve65);
           this.reject = aCallable(reject);
         };
         module.exports.f = function(C2) {
@@ -44221,8 +44221,8 @@ var init_pdf = __esm({
           anObject(C2);
           if (isObject3(x2) && x2.constructor === C2) return x2;
           var promiseCapability = newPromiseCapability.f(C2);
-          var resolve63 = promiseCapability.resolve;
-          resolve63(x2);
+          var resolve65 = promiseCapability.resolve;
+          resolve65(x2);
           return promiseCapability.promise;
         };
       },
@@ -46325,7 +46325,7 @@ var init_pdf = __esm({
         var charAt = uncurryThis("".charAt);
         var Uint8Array2 = globalThis2.Uint8Array;
         var $Array = globalThis2.Array;
-        var join86 = uncurryThis([].join);
+        var join88 = uncurryThis([].join);
         var INCORRECT_BEHAVIOR_OR_DOESNT_EXISTS = !Uint8Array2 || !Uint8Array2.prototype.toBase64 || !(function() {
           try {
             var target = new Uint8Array2();
@@ -46371,7 +46371,7 @@ var init_pdf = __esm({
                 result[written++] = "=";
               }
             }
-            return join86(result, "");
+            return join88(result, "");
           }
         });
       },
@@ -46383,7 +46383,7 @@ var init_pdf = __esm({
         var anUint8Array = __webpack_require__3(4154);
         var notDetached = __webpack_require__3(5169);
         var numberToString2 = uncurryThis(1.1.toString);
-        var join86 = uncurryThis([].join);
+        var join88 = uncurryThis([].join);
         var $Array = Array;
         var Uint8Array2 = globalThis2.Uint8Array;
         var INCORRECT_BEHAVIOR_OR_DOESNT_EXISTS = !Uint8Array2 || !Uint8Array2.prototype.toHex || !(function() {
@@ -46403,7 +46403,7 @@ var init_pdf = __esm({
               var hex2 = numberToString2(this[i2], 16);
               result[i2] = hex2.length === 1 ? "0" + hex2 : hex2;
             }
-            return join86(result, "");
+            return join88(result, "");
           }
         });
       },
@@ -48076,11 +48076,11 @@ var init_pdf = __esm({
             const mustRemoveAspectRatioPromise = _ImageManager._isSVGFittingCanvas;
             const fileReader = new FileReader();
             const imageElement = new Image();
-            const imagePromise = new Promise((resolve63, reject) => {
+            const imagePromise = new Promise((resolve65, reject) => {
               imageElement.onload = () => {
                 data.bitmap = imageElement;
                 data.isSvg = true;
-                resolve63();
+                resolve65();
               };
               fileReader.onload = async () => {
                 const url = data.svgUrl = fileReader.result;
@@ -48766,13 +48766,13 @@ var init_pdf = __esm({
           return;
         }
         const {
-          resolve: resolve63,
+          resolve: resolve65,
           promise
         } = Promise.withResolvers();
         const onEditorsRendered = (evt) => {
           if (evt.pageNumber === pageNumber) {
             this._eventBus.off("editorsrendered", onEditorsRendered);
-            resolve63();
+            resolve65();
           }
         };
         this._eventBus.on("editorsrendered", onEditorsRendered, internalOpt);
@@ -53810,8 +53810,8 @@ var init_pdf = __esm({
           if (this.isSyncFontLoadingSupported) {
             return;
           }
-          await new Promise((resolve63) => {
-            const request = this._queueLoadingCallback(resolve63);
+          await new Promise((resolve65) => {
+            const request = this._queueLoadingCallback(resolve65);
             this._prepareFontLoadEvent(font, request);
           });
         }
@@ -70851,7 +70851,7 @@ fn fs_main(in : VertexOutput) -> @location(0) vec4<f32> {
         input.type = "file";
         input.accept = SupportedImageMimeTypes.join(",");
         const signal = this._uiManager._signal;
-        this.#bitmapPromise = new Promise((resolve63) => {
+        this.#bitmapPromise = new Promise((resolve65) => {
           input.addEventListener("change", async () => {
             if (!input.files || input.files.length === 0) {
               this.remove();
@@ -70866,13 +70866,13 @@ fn fs_main(in : VertexOutput) -> @location(0) vec4<f32> {
               });
               this.#getBitmapFetched(data);
             }
-            resolve63();
+            resolve65();
           }, {
             signal
           });
           input.addEventListener("cancel", () => {
             this.remove();
-            resolve63();
+            resolve65();
           }, {
             signal
           });
@@ -125162,7 +125162,7 @@ var init_renderNode = __esm({
         media.currentTime = Math.max(0, Math.min(seconds, Number.isFinite(media.duration) ? media.duration : seconds));
         setPosition(media.currentTime);
       }, []);
-      const select = React9.useCallback((next) => {
+      const select2 = React9.useCallback((next) => {
         if (resolvedItems.length === 0) return;
         const normalized = (next % resolvedItems.length + resolvedItems.length) % resolvedItems.length;
         const nextItem = resolvedItems[normalized];
@@ -125213,10 +125213,10 @@ var init_renderNode = __esm({
               seek(Number(detail.value ?? 0));
               break;
             case "next":
-              select(index + 1);
+              select2(index + 1);
               break;
             case "previous":
-              select(index - 1);
+              select2(index - 1);
               break;
             case "setRate": {
               const next = Number(detail.value ?? 1);
@@ -125241,7 +125241,7 @@ var init_renderNode = __esm({
         };
         window.addEventListener("himalaya-media-command", listener);
         return () => window.removeEventListener("himalaya-media-command", listener);
-      }, [sessionId, index, play, pause, seek, select, toggleFullscreen]);
+      }, [sessionId, index, play, pause, seek, select2, toggleFullscreen]);
       React9.useEffect(() => {
         const listener = () => {
           const value = document.fullscreenElement === hostRef.current;
@@ -125297,10 +125297,10 @@ var init_renderNode = __esm({
             seek(Number(raw.seconds ?? raw.positionSeconds ?? 0));
             return;
           case "media.next":
-            select(index + 1);
+            select2(index + 1);
             return;
           case "media.previous":
-            select(index - 1);
+            select2(index - 1);
             return;
           case "media.fullscreen":
             void toggleFullscreen();
@@ -125343,14 +125343,14 @@ var init_renderNode = __esm({
         return `${Math.floor(safe / 60)}:${String(Math.floor(safe % 60)).padStart(2, "0")}`;
       };
       const builtInControls = /* @__PURE__ */ jsxs7("div", { "data-media-controls": "builtIn", style: { display: "grid", gridTemplateColumns: "auto auto 1fr auto auto", gap: 10, alignItems: "center", width: "100%", padding: "10px 12px", boxSizing: "border-box", color: foreground, background: "linear-gradient(transparent,rgba(0,0,0,.82))" }, children: [
-        items.length > 1 && /* @__PURE__ */ jsx10("button", { "aria-label": "Previous", onClick: () => select(index - 1), style: { color: "inherit", background: "transparent", border: 0, fontSize: pxToRem(18) }, children: "\u25C0\u25C0" }),
+        items.length > 1 && /* @__PURE__ */ jsx10("button", { "aria-label": "Previous", onClick: () => select2(index - 1), style: { color: "inherit", background: "transparent", border: 0, fontSize: pxToRem(18) }, children: "\u25C0\u25C0" }),
         /* @__PURE__ */ jsx10("button", { "aria-label": status === "playing" ? "Pause" : "Play", onClick: () => status === "playing" ? pause() : void play(), style: { width: 38, height: 38, borderRadius: "50%", color: background, background: foreground, border: 0, fontSize: 18 }, children: status === "playing" ? "\u275A\u275A" : "\u25B6" }),
         /* @__PURE__ */ jsxs7("div", { style: { display: "flex", alignItems: "center", gap: 8, minWidth: 0 }, children: [
           /* @__PURE__ */ jsx10("span", { style: { fontSize: pxToRem(11), whiteSpace: "nowrap" }, children: time(position) }),
           /* @__PURE__ */ jsx10("input", { "aria-label": "Media position", type: "range", min: 0, max: Math.max(duration2, 1), step: 0.1, value: Math.min(position, Math.max(duration2, 1)), onChange: (event) => seek(Number(event.currentTarget.value)), style: { width: "100%", accentColor: accent } }),
           /* @__PURE__ */ jsx10("span", { style: { fontSize: pxToRem(11), whiteSpace: "nowrap" }, children: time(duration2) })
         ] }),
-        items.length > 1 && /* @__PURE__ */ jsx10("button", { "aria-label": "Next", onClick: () => select(index + 1), style: { color: "inherit", background: "transparent", border: 0, fontSize: pxToRem(18) }, children: "\u25B6\u25B6" }),
+        items.length > 1 && /* @__PURE__ */ jsx10("button", { "aria-label": "Next", onClick: () => select2(index + 1), style: { color: "inherit", background: "transparent", border: 0, fontSize: pxToRem(18) }, children: "\u25B6\u25B6" }),
         props.fullscreen !== "disabled" && /* @__PURE__ */ jsx10("button", { "aria-label": "Fullscreen", onClick: () => void toggleFullscreen(), style: { color: "inherit", background: "transparent", border: 0, fontSize: pxToRem(18) }, children: "\u26F6" })
       ] });
       const customControls = chrome === "custom" ? slot("controls") : null;
@@ -125392,7 +125392,7 @@ var init_renderNode = __esm({
             return;
           }
           if (props.loop === "all" || index + 1 < items.length) {
-            select(index + 1);
+            select2(index + 1);
             return;
           }
           setStatus("ended");
@@ -127708,7 +127708,7 @@ var init_renderNode = __esm({
       const currentRef = React9.useRef(current);
       const itemsPath = props.itemsPath ?? props.items_path;
       const boundRail = !!itemsPath && !!items[0] && !!ctx.provider;
-      const select = (index) => {
+      const select2 = (index) => {
         if (index === currentRef.current) return;
         currentRef.current = index;
         setCurrent(index);
@@ -127725,7 +127725,7 @@ var init_renderNode = __esm({
         const timer = setInterval(() => {
           const next = (currentRef.current + 1) % pages2.length;
           if (rail.current) rail.current.scrollLeft = next * rail.current.clientWidth;
-          select(next);
+          select2(next);
         }, interval);
         return () => clearInterval(timer);
       }, [props.autoplayIntervalMs, props.__pager, boundRail, pages2.length, props.onChange, ctx]);
@@ -127742,10 +127742,10 @@ var init_renderNode = __esm({
               event.preventDefault();
               const index = event.key === "Home" ? 0 : event.key === "End" ? pages2.length - 1 : Math.max(0, Math.min(pages2.length - 1, currentRef.current + (event.key === "ArrowRight" ? 1 : -1)));
               if (rail.current) rail.current.scrollLeft = index * rail.current.clientWidth;
-              select(index);
+              select2(index);
             },
             onScroll: (event) => {
-              if (!boundRail && event.currentTarget.clientWidth > 0) select(Math.max(0, Math.min(pages2.length - 1, Math.round(event.currentTarget.scrollLeft / event.currentTarget.clientWidth))));
+              if (!boundRail && event.currentTarget.clientWidth > 0) select2(Math.max(0, Math.min(pages2.length - 1, Math.round(event.currentTarget.scrollLeft / event.currentTarget.clientWidth))));
             },
             style: { display: "flex", overflowX: "auto", scrollSnapType: boundRail ? void 0 : "x mandatory", gap: boundRail ? 12 : void 0, width: "100%" },
             children: boundRail ? /* @__PURE__ */ jsx10(BoundList, { ctx, itemsPath, template: items[0], renderRow: (template, itemCtx) => /* @__PURE__ */ jsx10("div", { style: { flex: "0 0 auto" }, children: renderNode(template, itemCtx) }) }) : pages2.map((page, index) => /* @__PURE__ */ jsx10("div", { style: { minWidth: "100%", scrollSnapAlign: "start" }, children: renderNode(page, ctx) }, page?.id ?? index))
@@ -129146,13 +129146,13 @@ __export(render_descriptor_exports, {
   stabilizePngPage: () => stabilizePngPage,
   withRetry: () => withRetry2
 });
-function a11ySemantics(type, props, modifiers, ancestorHidden, resolve63) {
+function a11ySemantics(type, props, modifiers, ancestorHidden, resolve65) {
   if (!A11Y_MODIFIER_KEYS.some((k2) => modifiers[k2] !== void 0)) return void 0;
   const literal = (v2) => typeof v2 === "string" && v2.trim() !== "" && !isDynamicValue(v2) ? v2 : void 0;
   const spoken = (v2) => {
     const lit = literal(v2);
-    if (lit !== void 0 || !resolve63 || typeof v2 !== "string" || !isDynamicValue(v2)) return lit;
-    const r2 = resolve63(v2);
+    if (lit !== void 0 || !resolve65 || typeof v2 !== "string" || !isDynamicValue(v2)) return lit;
+    const r2 = resolve65(v2);
     if (r2 === v2) return void 0;
     return typeof r2 === "string" && r2.trim() !== "" ? r2 : typeof r2 === "number" ? String(r2) : void 0;
   };
@@ -129166,7 +129166,7 @@ function a11ySemantics(type, props, modifiers, ancestorHidden, resolve63) {
   if (name !== void 0 && exposure === "exposed") out2.name = name;
   const hint = spoken(modifiers.accessibilityHint);
   if (hint !== void 0) out2.hint = hint;
-  const value = spoken(modifiers.accessibilityValue) ?? controlState(role, props, resolve63);
+  const value = spoken(modifiers.accessibilityValue) ?? controlState(role, props, resolve65);
   if (value !== void 0) out2.value = value;
   if (typeof modifiers.headingLevel === "number") out2.headingLevel = modifiers.headingLevel;
   if (exposure !== "exposed") out2.exposure = exposure;
@@ -129187,13 +129187,13 @@ function a11ySemantics(type, props, modifiers, ancestorHidden, resolve63) {
   }
   return out2;
 }
-function controlState(role, props, resolve63) {
+function controlState(role, props, resolve65) {
   if (role !== "toggle" && role !== "checkbox" && role !== "radio") return void 0;
   if (role === "checkbox" && props.indeterminate === true) return "mixed";
   const binding2 = typeof props.valuePath === "string" ? props.valuePath : typeof props.value === "string" && isDynamicValue(props.value) ? props.value : void 0;
   let on4;
   if (binding2 !== void 0) {
-    const v2 = resolve63 ? resolve63(binding2) : void 0;
+    const v2 = resolve65 ? resolve65(binding2) : void 0;
     if (v2 === true || v2 === 1 || v2 === "true" || v2 === "1") on4 = true;
     else if (v2 === false || v2 === 0 || v2 === "false" || v2 === "0") on4 = false;
     else return void 0;
@@ -129523,7 +129523,7 @@ async function stabilizePngPage(page, scheme) {
     const browser = globalThis;
     browser.document.documentElement.style.colorScheme = selected;
     await browser.document.fonts?.ready;
-    await new Promise((resolve63) => browser.requestAnimationFrame(() => browser.requestAnimationFrame(() => resolve63())));
+    await new Promise((resolve65) => browser.requestAnimationFrame(() => browser.requestAnimationFrame(() => resolve65())));
   }, scheme);
 }
 async function renderPngBatch(items) {
@@ -132144,7 +132144,7 @@ async function handleWebWix(req, res, state) {
       }
       if (match) {
         const mocked = match.rule.response;
-        if (mocked.delayMs) await new Promise((resolve63) => setTimeout(resolve63, mocked.delayMs));
+        if (mocked.delayMs) await new Promise((resolve65) => setTimeout(resolve65, mocked.delayMs));
         const payload = mocked.template ? renderTemplate(mocked.body, match.captures) : mocked.body;
         recordStream("mock", mocked.status, match.rule.id, mocked.headers);
         res.statusCode = mocked.status;
@@ -132209,14 +132209,14 @@ async function handleWebWix(req, res, state) {
         const chunk = await reader.read();
         if (chunk.done) break;
         if (chunk.value && !res.write(chunk.value)) {
-          await new Promise((resolve63) => {
+          await new Promise((resolve65) => {
             let settled = false;
             const finish2 = () => {
               if (settled) return;
               settled = true;
               res.off("drain", finish2);
               res.off("close", finish2);
-              resolve63();
+              resolve65();
             };
             if (res.destroyed || !res.writable) finish2();
             else {
@@ -132371,7 +132371,7 @@ async function handleWebWix(req, res, state) {
       }
       if (match) {
         const mocked = match.rule.response;
-        if (mocked.delayMs) await new Promise((resolve63) => setTimeout(resolve63, mocked.delayMs));
+        if (mocked.delayMs) await new Promise((resolve65) => setTimeout(resolve65, mocked.delayMs));
         const responseBody = mocked.template ? renderTemplate(mocked.body, match.captures) : mocked.body;
         record2("mock", mocked.status, responseBody, match.rule.id, mocked.headers);
         return reply(200, { status: mocked.status, body: responseBody ?? "" });
@@ -133410,8 +133410,8 @@ async function handleActionHandlerBundleGet(res, app) {
 }
 async function serveStatic(req, res, root, prefix) {
   const requested = decodeURIComponent((req.url ?? "").split("?")[0]);
-  const relative16 = requested.replace(prefix, "").replace(/^\//, "");
-  const safe = normalize3(relative16).replace(/^(\.\.[\/\\])+/, "");
+  const relative17 = requested.replace(prefix, "").replace(/^\//, "");
+  const safe = normalize3(relative17).replace(/^(\.\.[\/\\])+/, "");
   const fullPath = resolve38(root, safe);
   if (!fullPath.startsWith(root)) {
     return send(res, 403, "forbidden");
@@ -134575,12 +134575,12 @@ var init_query = __esm({
 });
 
 // ../../core/dev-server/src/crawl-input.ts
-function resolved(v2, resolve63) {
-  if (typeof v2 === "string") return v2.startsWith("$service:") ? resolve63(v2) : v2;
+function resolved(v2, resolve65) {
+  if (typeof v2 === "string") return v2.startsWith("$service:") ? resolve65(v2) : v2;
   if (Array.isArray(v2)) {
     const out2 = v2.flatMap((el2) => {
       if (typeof el2 !== "string" || !el2.startsWith("$service:")) return [el2];
-      const r2 = resolve63(el2);
+      const r2 = resolve65(el2);
       return Array.isArray(r2) ? r2 : [r2];
     });
     return out2;
@@ -134594,9 +134594,9 @@ function hasRowBinding(props) {
     return itemToken(v2) || Array.isArray(v2) && v2.some(itemToken);
   });
 }
-function declaredOptionIds(props, resolve63) {
+function declaredOptionIds(props, resolve65) {
   const literal = props.options ?? props.tabs ?? props.chips;
-  const bound = props.optionsPath !== void 0 ? resolved(props.optionsPath, resolve63) : void 0;
+  const bound = props.optionsPath !== void 0 ? resolved(props.optionsPath, resolve65) : void 0;
   const raw = Array.isArray(bound) ? bound : literal;
   if (!Array.isArray(raw)) return [];
   const out2 = [];
@@ -134639,24 +134639,24 @@ function seedTokens(state, limit = 48) {
   walk2(state, 0);
   return out2;
 }
-function synthesizeInput(control, resolve63, tokens2) {
+function synthesizeInput(control, resolve65, tokens2) {
   const id = `${control.type}.${control.callback}`;
   const row = SYNTHESIZED_CONTROLS[id];
   if (!row) return null;
   const props = control.props;
   if (hasRowBinding(props)) return null;
   if (row.from === "declared-options") {
-    const ids = declaredOptionIds(props, resolve63);
+    const ids = declaredOptionIds(props, resolve65);
     if (!ids.length) return null;
     if (row.encoding === "string-array") {
-      const currentRaw2 = resolved(props.selectedIds, resolve63);
+      const currentRaw2 = resolved(props.selectedIds, resolve65);
       const current3 = (Array.isArray(currentRaw2) ? currentRaw2 : []).filter((x2) => typeof x2 === "string");
       const pick4 = ids.find((o2) => !current3.includes(o2));
       if (pick4 === void 0) return null;
       const value = props.multiSelect === true ? [...current3, pick4] : [pick4];
       return { key: row.key, value, from: row.from, current: current3, control: id };
     }
-    const currentRaw = resolved(props.selectedId, resolve63);
+    const currentRaw = resolved(props.selectedId, resolve65);
     const current2 = typeof currentRaw === "string" ? currentRaw : void 0;
     const pick3 = ids.find((o2) => o2 !== current2);
     if (pick3 === void 0) return null;
@@ -134664,7 +134664,7 @@ function synthesizeInput(control, resolve63, tokens2) {
   }
   if (!acceptsWords(props) || !acceptsWords(control.wrapper ?? {})) return null;
   const binding2 = typeof props.valuePath === "string" ? props.valuePath : typeof props.value === "string" && props.value.startsWith("$service:") ? props.value : void 0;
-  const bound = binding2 === void 0 ? void 0 : resolve63(binding2);
+  const bound = binding2 === void 0 ? void 0 : resolve65(binding2);
   const literal = typeof props.value === "string" && !props.value.startsWith("$") ? props.value : void 0;
   const current = typeof bound === "string" ? bound : typeof bound === "number" ? String(bound) : literal ?? "";
   const max = typeof props.maxLength === "number" && props.maxLength > 0 ? props.maxLength : void 0;
@@ -137284,6 +137284,7 @@ __export(build_exports2, {
   bundleNameFromUrl: () => bundleNameFromUrl,
   collectComponentTypes: () => collectComponentTypes,
   contentReleaseId: () => contentReleaseId,
+  countingHostAnswers: () => countingHostAnswers,
   countingWixCall: () => countingWixCall,
   declaresHostProvidedIdentity: () => declaresHostProvidedIdentity,
   gitSha: () => gitSha,
@@ -137657,17 +137658,39 @@ async function buildRelease(app, dest, opts = {}) {
 }
 function countingWixCall(base) {
   let returned = 0;
+  const failed3 = [];
   return {
     call: async (method, path2, body) => {
-      const out2 = await base(method, path2, body);
+      let out2;
+      try {
+        out2 = await base(method, path2, body);
+      } catch (e2) {
+        failed3.push(`${String(method).toUpperCase()} ${String(path2).split("?")[0]}`);
+        throw e2;
+      }
       returned += 1;
       return out2;
     },
-    returned: () => returned
+    returned: () => returned,
+    failed: () => [...failed3]
+  };
+}
+function countingHostAnswers(host) {
+  let answered = 0;
+  const { wixCall } = host;
+  if (!wixCall) return { host, answered: () => answered };
+  return {
+    host: { ...host, wixCall: (method, path2, body) => {
+      const answer = wixCall(method, path2, body);
+      if (answer !== void 0) answered += 1;
+      return answer;
+    } },
+    answered: () => answered
   };
 }
 async function liveRenderServices(bundleJs, opts) {
-  const bus = hostDispatch(opts.localDbSchema, declaredCapabilitiesOf(opts.descriptor));
+  const declared = declaredCapabilitiesOf(opts.descriptor);
+  const bus = withHostAnswers(hostDispatch(opts.localDbSchema, declared), declared, opts.host);
   const appear = rootOnAppear(opts.descriptor);
   const fired = appear ? parseWorkerAction(appear.actionId) : null;
   if (fired) {
@@ -137690,16 +137713,46 @@ async function liveRenderServices(bundleJs, opts) {
           }
         }
       }
+      if (opts.host) await settleUnawaitedWork();
       return { services: snapshot(w2).state, calls: w2.calls, errors: w2.errors };
     } finally {
       w2.dispose();
     }
   }
+  if (opts.host) return loadAndSettle(bundleJs, liveBootOptions(opts, bus));
   return loadBundleServicesLive(bundleJs, liveBootOptions(opts, bus));
 }
+async function settleUnawaitedWork() {
+  for (let turn = 0; turn < SETTLE_TURNS; turn++) await new Promise((resolve65) => setTimeout(resolve65, 0));
+}
+async function loadAndSettle(bundleJs, options) {
+  const w2 = await bootBundleWorker(bundleJs, options);
+  try {
+    await settleUnawaitedWork();
+    return { services: snapshot(w2).state, calls: w2.calls, errors: w2.errors };
+  } finally {
+    w2.dispose();
+  }
+}
+function withHostAnswers(bus, declared, host) {
+  if (!host) return bus;
+  return (action, params) => {
+    const capability = /^capability\.([^.]+)\./.exec(action)?.[1];
+    const answer = capability === void 0 || declared.has(capability) ? host.dispatch(action, params) : void 0;
+    return answer === void 0 ? bus(action, params) : Promise.resolve(answer);
+  };
+}
+function memoryStorage() {
+  const items = /* @__PURE__ */ new Map();
+  return { getItem: (key2) => items.get(key2) ?? null, setItem: (key2, value) => void items.set(key2, value) };
+}
 function liveBootOptions(opts, bus) {
+  const { host } = opts;
+  const wixCall = host?.wixCall ? async (method, path2, body) => host.wixCall(method, path2, body) ?? opts.wixCall(method, path2, body) : opts.wixCall;
   return {
-    wixCall: opts.wixCall,
+    wixCall,
+    ...host ? { storage: memoryStorage() } : {},
+    ...host?.wixApiSession ? { wixApiSession: host.wixApiSession } : {},
     input: opts.input,
     budgetMs: opts.budgetMs,
     // The capability arms, but NOT the signed-in-member arm. `hostDispatch` answers
@@ -137817,6 +137870,7 @@ async function buildFromLoaded(preloaded, dest, opts = {}) {
     let base2;
     let liveCalls;
     let liveReturned;
+    let liveFailed;
     let liveErrors;
     let mockCalls;
     let mockBootFailed;
@@ -137827,16 +137881,20 @@ async function buildFromLoaded(preloaded, dest, opts = {}) {
         base2 = null;
       } else {
         const counting = countingWixCall(await ensureLiveWixCall());
+        const host = collect2.render.host ? countingHostAnswers(collect2.render.host) : void 0;
         const live3 = await liveRenderServices(bundleJs, {
           wixCall: counting.call,
           input,
           budgetMs: collect2.render.loadBudgetMs ?? LIVE_LOAD_BUDGET_MS,
           localDbSchema: appLocalDbSchema,
-          descriptor
+          descriptor,
+          ...host ? { host: host.host } : {}
         });
         base2 = live3.services;
         liveCalls = [...live3.calls];
         liveReturned = counting.returned();
+        if (host) liveReturned += host.answered();
+        liveFailed = counting.failed();
         liveErrors = live3.errors;
       }
     } else if (collect2?.render?.mocks && collect2.render.hydrate !== false && bundleName && readBundle(bundleName)) {
@@ -137885,7 +137943,7 @@ async function buildFromLoaded(preloaded, dest, opts = {}) {
         services[svc] = { ...services[svc] ?? {}, ...st2 };
       }
     }
-    return { services, ...liveCalls ? { liveCalls } : {}, ...liveReturned !== void 0 ? { liveReturned } : {}, ...liveErrors ? { liveErrors } : {}, ...mockCalls ? { mockCalls, mockUnserved: mockUnserved ?? [] } : {}, ...mockBootFailed ? { mockBootFailed } : {} };
+    return { services, ...liveCalls ? { liveCalls } : {}, ...liveReturned !== void 0 ? { liveReturned } : {}, ...liveFailed?.length ? { liveFailed } : {}, ...liveErrors ? { liveErrors } : {}, ...mockCalls ? { mockCalls, mockUnserved: mockUnserved ?? [] } : {}, ...mockBootFailed ? { mockBootFailed } : {} };
   };
   checkRegistry(preloaded.module.actions);
   const contentManifestPath2 = join47(preloaded.dir, "himalaya.content.json");
@@ -138180,9 +138238,9 @@ async function buildFromLoaded(preloaded, dest, opts = {}) {
         lint.push({ screenId, ok: report3.ok, issues: report3.issues });
       }
       if (collect2?.render && (!collect2.render.screenId || collect2.render.screenId === screenId)) {
-        const { services, liveCalls, liveReturned, liveErrors, mockCalls, mockUnserved, mockBootFailed } = await renderServicesFor(bundleName, descriptor, screenId);
+        const { services, liveCalls, liveReturned, liveErrors, mockCalls, mockUnserved, mockBootFailed, liveFailed } = await renderServicesFor(bundleName, descriptor, screenId);
         const rr2 = await renderDescriptorWeb(descriptor, renderTokens, renderScheme, collect2.render.png === true, services, collect2.render.width, collect2.render.rtl === true);
-        renders.push({ screenId, scheme: renderScheme, ...rr2, ...await renderCompare(descriptor, services), ...collect2.render.dumpState && services ? { serviceState: services } : {}, ...liveCalls ? { liveCalls } : {}, ...liveReturned !== void 0 ? { liveReturned } : {}, ...liveErrors ? { liveErrors } : {}, ...mockCalls ? { mockCalls, mockUnserved } : {}, ...mockBootFailed ? { mockBootFailed } : {} });
+        renders.push({ screenId, scheme: renderScheme, ...rr2, ...await renderCompare(descriptor, services), ...collect2.render.dumpState && services ? { serviceState: services } : {}, ...liveCalls ? { liveCalls } : {}, ...liveReturned !== void 0 ? { liveReturned } : {}, ...liveFailed ? { liveFailed } : {}, ...liveErrors ? { liveErrors } : {}, ...mockCalls ? { mockCalls, mockUnserved } : {}, ...mockBootFailed ? { mockBootFailed } : {} });
       }
     }
     const wantedRender = collect2?.render?.screenId;
@@ -138208,9 +138266,9 @@ async function buildFromLoaded(preloaded, dest, opts = {}) {
           });
           lint.push({ screenId: wantedRender, ok: report3.ok, issues: report3.issues });
         }
-        const { services, liveCalls, liveReturned, liveErrors, mockCalls, mockUnserved, mockBootFailed } = await renderServicesFor(bundleName, descriptor, wantedRender);
+        const { services, liveCalls, liveReturned, liveErrors, mockCalls, mockUnserved, mockBootFailed, liveFailed } = await renderServicesFor(bundleName, descriptor, wantedRender);
         const rr2 = await renderDescriptorWeb(descriptor, renderTokens, renderScheme, collect2.render.png === true, services, collect2.render.width, collect2.render.rtl === true);
-        renders.push({ screenId: wantedRender, scheme: renderScheme, ...rr2, ...await renderCompare(descriptor, services), ...collect2.render.dumpState && services ? { serviceState: services } : {}, ...liveCalls ? { liveCalls } : {}, ...liveReturned !== void 0 ? { liveReturned } : {}, ...liveErrors ? { liveErrors } : {}, ...mockCalls ? { mockCalls, mockUnserved } : {}, ...mockBootFailed ? { mockBootFailed } : {} });
+        renders.push({ screenId: wantedRender, scheme: renderScheme, ...rr2, ...await renderCompare(descriptor, services), ...collect2.render.dumpState && services ? { serviceState: services } : {}, ...liveCalls ? { liveCalls } : {}, ...liveReturned !== void 0 ? { liveReturned } : {}, ...liveFailed ? { liveFailed } : {}, ...liveErrors ? { liveErrors } : {}, ...mockCalls ? { mockCalls, mockUnserved } : {}, ...mockBootFailed ? { mockBootFailed } : {} });
       }
     }
     for (const t2 of preloaded.module.screens.templated ?? []) {
@@ -138581,7 +138639,7 @@ function declaresHostProvidedIdentity(auth) {
   const config = auth?.config;
   return typeof config === "object" && config !== null && config.hostProvided === true;
 }
-var BAKE_OFFLINE_BASE, KNOWN_ICON_NAMES, KNOWN_ICONS, REPO_ROOT7, TIER5_DIR, requireFromHere, SOURCEMAP_ON_DEMAND_PATH, BAKED_SERVER_BASE_URL;
+var BAKE_OFFLINE_BASE, KNOWN_ICON_NAMES, KNOWN_ICONS, REPO_ROOT7, TIER5_DIR, requireFromHere, SOURCEMAP_ON_DEMAND_PATH, BAKED_SERVER_BASE_URL, SETTLE_TURNS;
 var init_build3 = __esm({
   "../release-build/build.ts"() {
     init_site_view_metadata();
@@ -138623,6 +138681,7 @@ var init_build3 = __esm({
     requireFromHere = createRequire2(import.meta.url);
     SOURCEMAP_ON_DEMAND_PATH = join47(REPO_ROOT7, "core/dev-server/tier5-bundles-src/sourcemap-on-demand.mjs");
     BAKED_SERVER_BASE_URL = "http://baked.himalaya.invalid";
+    SETTLE_TURNS = 20;
   }
 });
 
@@ -152745,7 +152804,7 @@ async function pinnedFetch(url, init, addresses, maxResponseBytes) {
   const headers2 = Object.fromEntries(new Headers(init.headers).entries());
   const request = url.protocol === "https:" ? httpsRequest : httpRequest;
   const hostname3 = url.hostname.replace(/^\[|\]$/g, "");
-  return await new Promise((resolve63, reject) => {
+  return await new Promise((resolve65, reject) => {
     let settled = false;
     const finish2 = (fn2) => {
       if (settled) return;
@@ -152782,7 +152841,7 @@ async function pinnedFetch(url, init, addresses, maxResponseBytes) {
         }
         const responseHeaders = new Headers();
         for (const [key2, value] of Object.entries(response.headers)) if (value !== void 0) responseHeaders.set(key2, Array.isArray(value) ? value.join(", ") : value);
-        resolve63(new Response(bytes2, { status: response.statusCode, statusText: response.statusMessage, headers: responseHeaders }));
+        resolve65(new Response(bytes2, { status: response.statusCode, statusText: response.statusMessage, headers: responseHeaders }));
       }));
     });
     req.once("error", (error) => finish2(() => reject(error)));
@@ -153082,7 +153141,7 @@ function createLocalTestSandbox() {
           }
         })();
       `;
-      return await new Promise((resolve63, reject) => {
+      return await new Promise((resolve65, reject) => {
         const { port1, port2 } = new MessageChannel();
         const serializableContext = {
           auth: context.auth,
@@ -153158,7 +153217,7 @@ function createLocalTestSandbox() {
             timer = setTimeout(() => finish2(() => reject(new SandboxError("timeout", `execution exceeded ${limits.timeoutMs}ms`))), Math.max(1, limits.timeoutMs));
             return;
           }
-          if (message.ok) finish2(() => resolve63({ value: message.value, durationMs: Date.now() - started }));
+          if (message.ok) finish2(() => resolve65({ value: message.value, durationMs: Date.now() - started }));
           else finish2(() => reject(new SandboxError("execution_failed", message.message ?? "handler failed")));
         });
         worker.once("error", (error) => finish2(() => reject(new SandboxError("execution_failed", error.message))));
@@ -155057,12 +155116,12 @@ function createLoginSession(deps) {
       current = pending;
       const out2 = [];
       const err = [];
-      return new Promise((resolve63) => {
+      return new Promise((resolve65) => {
         let answered = false;
         const answer = () => {
           if (answered) return;
           answered = true;
-          resolve63(current);
+          resolve65(current);
         };
         let child;
         try {
@@ -155185,9 +155244,9 @@ async function startMcpServer(opts) {
     login: createLoginSession({ ...defaultLoginDeps, selfCommand: previewDeps.selfCommand, ...opts.login }),
     ...opts.workspace ? { workspaceBoundary: opts.workspace } : {}
   };
-  const closed = new Promise((resolve63) => {
-    stdin.once("end", resolve63);
-    stdin.once("close", resolve63);
+  const closed = new Promise((resolve65) => {
+    stdin.once("end", resolve65);
+    stdin.once("close", resolve65);
   });
   const handle = serveStdio(
     () => {
@@ -155567,10 +155626,10 @@ function collectSdkModules(files, resolveSubpath) {
   for (const source of Object.values(files)) visit(source);
   return { modules, unsupported };
 }
-function sdkSubpathReader(resolve63) {
+function sdkSubpathReader(resolve65) {
   return (sub) => {
     try {
-      return readFileSync79(resolve63(`@wix/himalaya/${sub}`), "utf8");
+      return readFileSync79(resolve65(`@wix/himalaya/${sub}`), "utf8");
     } catch {
       return null;
     }
@@ -155648,7 +155707,7 @@ async function runBrowserAuthoring(opts) {
   const token = mintToken2(payload);
   const unusable = await probeAuthoringPage(opts.authoringBase, opts.fetchImpl, opts.probeTimeoutMs);
   if (unusable) throw new Error(unusable);
-  return await new Promise((resolve63, reject) => {
+  return await new Promise((resolve65, reject) => {
     let settled = false;
     let url = "";
     const server = createServer5();
@@ -155700,7 +155759,7 @@ async function runBrowserAuthoring(opts) {
         }
         res.writeHead(200, { "content-type": "text/plain" }).end("ok");
         const report3 = body.result;
-        finish2(() => resolve63({ report: report3, url }));
+        finish2(() => resolve65({ report: report3, url }));
       })();
     });
     server.on("error", (e2) => finish2(() => reject(e2)));
@@ -158606,6 +158665,15 @@ function retryAfterMs(header, nowMs) {
   const ms2 = /^\d+$/.test(trimmed) ? Number(trimmed) * 1e3 : Date.parse(trimmed) - nowMs;
   return Number.isFinite(ms2) ? Math.min(Math.max(ms2, 0), MAX_RETRY_WAIT_MS) : void 0;
 }
+function assetUploadUrl(operation, size) {
+  const url = new URL(operation.url);
+  const appleHost = url.hostname === "apple.com" || url.hostname.endsWith(".apple.com");
+  const inFile = Number.isInteger(operation.offset) && Number.isInteger(operation.length) && operation.offset >= 0 && operation.length > 0 && operation.offset + operation.length <= size;
+  if (url.protocol !== "https:" || !appleHost || url.username || url.password || operation.method !== "PUT" || !inFile) {
+    throw new AscError("refused", `refusing an asset upload operation Apple would not issue (${operation.method} ${url.origin})`);
+  }
+  return url;
+}
 function backoffMs(attempt) {
   return Math.min(BASE_BACKOFF_MS * 2 ** (attempt - 1), MAX_RETRY_WAIT_MS);
 }
@@ -158668,7 +158736,7 @@ var init_iap_client = __esm({
         this.options = options;
         this.fetchImpl = options.fetchImpl ?? ((input, init) => globalThis.fetch(input, init));
         this.now = options.now ?? Date.now;
-        this.sleep = options.sleep ?? ((ms2) => new Promise((resolve63) => setTimeout(resolve63, ms2)));
+        this.sleep = options.sleep ?? ((ms2) => new Promise((resolve65) => setTimeout(resolve65, ms2)));
       }
       fetchImpl;
       now;
@@ -158695,6 +158763,32 @@ var init_iap_client = __esm({
       async patch(path2, body) {
         return this.write("PATCH", this.resolve(path2), body);
       }
+      async delete(path2) {
+        await this.write("DELETE", this.resolve(path2));
+      }
+      async uploadParts(operations, bytes2) {
+        for (const [i2, operation] of operations.entries()) {
+          const where = `upload of part ${i2 + 1} of ${operations.length} to Apple's asset storage`;
+          const response = await this.putPart(operation, bytes2, where);
+          if (response.status >= 500) throw new AscError("server", `${where} \u2192 ${response.status}`, response.status);
+          if (!response.ok) throw new AscError("invalid", `${where} \u2192 ${response.status} \u2014 the reserved upload was refused; make a new plan, which reserves a fresh one`, response.status);
+        }
+      }
+      async putPart(operation, bytes2, where) {
+        const url = assetUploadUrl(operation, bytes2.length);
+        const headers2 = Object.fromEntries(operation.requestHeaders.filter((h2) => h2.name.toLowerCase() !== "authorization").map((h2) => [h2.name, h2.value]));
+        try {
+          return await this.fetchImpl(url.href, {
+            method: "PUT",
+            headers: headers2,
+            body: bytes2.slice(operation.offset, operation.offset + operation.length),
+            redirect: "error",
+            signal: AbortSignal.timeout(REQUEST_TIMEOUT_MS)
+          });
+        } catch (e2) {
+          throw new AscError("network", `${where} failed before a response: ${this.scrub(e2.message)}`);
+        }
+      }
       resolve(pathOrUrl) {
         const url = new URL(pathOrUrl, ASC_ORIGIN);
         const allowed2 = url.origin === ASC_ORIGIN && !url.username && !url.password && /^\/v[12]\//.test(url.pathname);
@@ -158819,6 +158913,20 @@ function toVersion(resource) {
 function toLocalization(resource) {
   return { id: resource.id, locale: attr(resource, "locale"), name: attr(resource, "name"), description: attr(resource, "description") };
 }
+function toReviewScreenshot(resource) {
+  const attributes = resource.attributes ?? {};
+  const delivery = attributes.assetDeliveryState ?? {};
+  const errors = (delivery.errors ?? []).map((e2) => [e2.code, e2.description].filter((part2) => typeof part2 === "string").join(": "));
+  const checksum = attr(resource, "sourceFileChecksum");
+  return {
+    id: resource.id,
+    fileName: attr(resource, "fileName"),
+    fileSize: typeof attributes.fileSize === "number" ? attributes.fileSize : 0,
+    ...checksum ? { checksum } : {},
+    state: typeof delivery.state === "string" ? delivery.state : "",
+    errors
+  };
+}
 function toManualPrice(price, included) {
   const point = included.find((r2) => r2.type === "inAppPurchasePricePoints" && r2.id === relatedId(price, "inAppPurchasePricePoint"));
   const date = (name) => typeof price.attributes?.[name] === "string" ? price.attributes[name] : null;
@@ -158840,7 +158948,7 @@ async function readOptional(read) {
 function createIapApi(client2) {
   return new AppStoreConnectIapApi(client2);
 }
-var APPLE_PRODUCT_TYPES, PRICE_POINT_PAGE, INITIAL_PRICE_REF, PAGE, linkage, related, enc, AppStoreConnectIapApi;
+var APPLE_PRODUCT_TYPES, PRICE_POINT_PAGE, INITIAL_PRICE_REF, PAGE, linkage, related, enc, AppStoreConnectIapApi, SCREENSHOTS, SCREENSHOT_TYPE, ReviewScreenshotEndpoints;
 var init_iap_api = __esm({
   "../store-release/iap-api.ts"() {
     init_iap_client();
@@ -158854,7 +158962,9 @@ var init_iap_api = __esm({
     AppStoreConnectIapApi = class {
       constructor(client2) {
         this.client = client2;
+        this.screenshots = new ReviewScreenshotEndpoints(client2);
       }
+      screenshots;
       async readApp(appId2) {
         const app = requireSingle(await this.client.get(`/v1/apps/${enc(appId2)}?fields[apps]=bundleId`), "app");
         return { id: app.id, bundleId: attr(app, "bundleId") };
@@ -158974,6 +159084,50 @@ var init_iap_api = __esm({
           }
         });
       }
+      async readReviewScreenshot(resourceId) {
+        return this.screenshots.read(resourceId);
+      }
+      async reserveReviewScreenshot(resourceId, file2) {
+        return this.screenshots.reserve(resourceId, file2);
+      }
+      async uploadReviewScreenshotParts(reservation, bytes2) {
+        await this.client.uploadParts(reservation.uploadOperations, bytes2);
+      }
+      async commitReviewScreenshot(screenshotId, checksum) {
+        return this.screenshots.commit(screenshotId, checksum);
+      }
+      async deleteReviewScreenshot(screenshotId) {
+        await this.screenshots.delete(screenshotId);
+      }
+    };
+    SCREENSHOTS = "/v1/inAppPurchaseAppStoreReviewScreenshots";
+    SCREENSHOT_TYPE = "inAppPurchaseAppStoreReviewScreenshots";
+    ReviewScreenshotEndpoints = class {
+      constructor(client2) {
+        this.client = client2;
+      }
+      async read(resourceId) {
+        const screenshot = await readOptional(() => this.client.get(`/v2/inAppPurchases/${enc(resourceId)}/appStoreReviewScreenshot`));
+        return screenshot && toReviewScreenshot(screenshot);
+      }
+      async reserve(resourceId, file2) {
+        const doc = await this.client.post(SCREENSHOTS, {
+          data: { type: SCREENSHOT_TYPE, attributes: file2, relationships: { inAppPurchaseV2: related("inAppPurchases", resourceId) } }
+        });
+        const reservation = requireSingle(doc, "review screenshot reservation");
+        const operations = reservation.attributes?.uploadOperations;
+        if (!Array.isArray(operations) || !operations.length) throw new AscError("server", "App Store Connect reserved the review screenshot without upload operations");
+        return { id: reservation.id, uploadOperations: operations };
+      }
+      async commit(screenshotId, checksum) {
+        const doc = await this.client.patch(`${SCREENSHOTS}/${enc(screenshotId)}`, {
+          data: { type: SCREENSHOT_TYPE, id: screenshotId, attributes: { uploaded: true, sourceFileChecksum: checksum } }
+        });
+        return toReviewScreenshot(requireSingle(doc, "review screenshot"));
+      }
+      async delete(screenshotId) {
+        await this.client.delete(`${SCREENSHOTS}/${enc(screenshotId)}`);
+      }
     };
   }
 });
@@ -159058,6 +159212,7 @@ function readItem(reader, value, index) {
   const price = readPrice(reader, obj3, path2);
   const reviewNote = reader.optionalText(obj3, "reviewNote", path2);
   if (reviewNote) reader.maxLength(reviewNote, `${path2}.reviewNote`, APPLE_LIMITS.reviewNote);
+  const reviewScreenshot = obj3.reviewScreenshot === void 0 ? void 0 : reader.text(obj3, "reviewScreenshot", path2, SCREENSHOT_PATH);
   return {
     ...readSubject(reader, obj3, path2, type),
     classification: reader.literal(obj3, "classification", path2, "digital", "physical goods and unclassified products are never registered as in-app purchases"),
@@ -159066,6 +159221,7 @@ function readItem(reader, value, index) {
     type,
     referenceName: limitedText(reader, obj3, "referenceName", path2, APPLE_LIMITS.referenceName),
     ...reviewNote === void 0 ? {} : { reviewNote },
+    ...reviewScreenshot === void 0 ? {} : { reviewScreenshot },
     localizations: readLocalizations(reader, obj3, path2),
     price,
     territories: readTerritories(reader, obj3, path2, price.baseTerritory)
@@ -159128,7 +159284,7 @@ function sha256Digest(value) {
 function manifestDigest(manifest) {
   return sha256Digest(manifest);
 }
-var IapManifestError, APPLE_APP_ID, TEAM_ID, BUNDLE_ID, PRODUCT_ID, TERRITORY, CURRENCY2, AMOUNT, LOCALE, CREDENTIAL_SHAPES, MANIFEST_KEYS, TARGET_KEYS, ITEM_KEYS, WIX_KEYS, UNLOCK_KEYS, LOCALIZATION_KEYS, PRICE_KEYS, PRODUCT_TYPES, PRICE_RULES, APPLE_LIMITS, childPath, ManifestReader;
+var IapManifestError, APPLE_APP_ID, TEAM_ID, BUNDLE_ID, PRODUCT_ID, TERRITORY, CURRENCY2, AMOUNT, LOCALE, SCREENSHOT_PATH, CREDENTIAL_SHAPES, MANIFEST_KEYS, TARGET_KEYS, ITEM_KEYS, WIX_KEYS, UNLOCK_KEYS, LOCALIZATION_KEYS, PRICE_KEYS, PRODUCT_TYPES, PRICE_RULES, APPLE_LIMITS, childPath, ManifestReader;
 var init_iap_manifest = __esm({
   "../store-release/iap-manifest.ts"() {
     IapManifestError = class extends Error {
@@ -159147,6 +159303,7 @@ var init_iap_manifest = __esm({
     CURRENCY2 = { pattern: /^[A-Z]{3}$/, hint: "an ISO 4217 currency code such as USD" };
     AMOUNT = { pattern: /^\d+(\.\d+)?$/, hint: 'an exact decimal string such as "0.99"' };
     LOCALE = { pattern: /^[a-z]{2,3}(-[A-Za-z0-9]{2,8})*$/, hint: "a locale such as en-US" };
+    SCREENSHOT_PATH = { pattern: /\.(png|jpe?g)$/i, hint: "a path to a .png, .jpg or .jpeg file" };
     CREDENTIAL_SHAPES = [
       /-----BEGIN [A-Z ]*PRIVATE KEY-----/,
       /\beyJ[A-Za-z0-9_-]{8,}\.[A-Za-z0-9_-]{8,}\.[A-Za-z0-9_-]{8,}/,
@@ -159163,6 +159320,7 @@ var init_iap_manifest = __esm({
       "type",
       "referenceName",
       "reviewNote",
+      "reviewScreenshot",
       "localizations",
       "price",
       "territories"
@@ -159312,8 +159470,16 @@ var init_iap_pricing = __esm({
 });
 
 // ../store-release/iap-result.ts
-function remainingRequirements(observed) {
+import { basename as basename18 } from "node:path";
+function missingMetadataRequirement(screenshotState, itemNamesFile) {
+  if (screenshotState === void 0) return MISSING_SCREENSHOT;
+  const leftover = LEFTOVER_STATES[screenshotState];
+  if (!leftover) return MISSING_AFTER_SCREENSHOT;
+  return leftover.problem + (itemNamesFile ? leftover.fix : ADD_FILE_FIRST);
+}
+function remainingRequirements(observed, itemNamesFile = true) {
   if (!observed) return ["the product does not exist in App Store Connect yet"];
+  if (observed.state === "MISSING_METADATA") return [observed.reviewScreenshotRead ? missingMetadataRequirement(observed.reviewScreenshot?.state, itemNamesFile) : MISSING_UNREAD];
   const requirement = STATE_REQUIREMENTS[observed.state];
   return requirement ? [requirement] : [];
 }
@@ -159334,6 +159500,10 @@ function mappingFor(target, item, appleResourceId) {
 function metadataVersion(observed) {
   return observed?.versions.find((v2) => v2.id === observed.metadataVersionId);
 }
+function screenshotReport(path2, observed) {
+  const held = observed?.reviewScreenshot;
+  return { requested: basename18(path2), ...held ? { observed: { fileName: held.fileName, state: held.state } } : {} };
+}
 function itemResult(input) {
   const { target, item, observed } = input;
   const version4 = metadataVersion(observed);
@@ -159352,7 +159522,8 @@ function itemResult(input) {
         ...observed?.availability ? { observed: observed.availability.territories, availableInNewTerritories: observed.availability.availableInNewTerritories } : {}
       },
       localizations: { requested: item.localizations.map((l2) => l2.locale), observed: observed?.localizations.map((l2) => l2.locale) ?? [] },
-      remainingRequirements: [...input.requirements ?? [], ...remainingRequirements(observed)],
+      ...item.reviewScreenshot ? { reviewScreenshot: screenshotReport(item.reviewScreenshot, observed) } : {},
+      remainingRequirements: [...input.requirements ?? [], ...remainingRequirements(observed, item.reviewScreenshot !== void 0)],
       lastReadAt: input.readAt.toISOString()
     }
   };
@@ -159369,12 +159540,11 @@ function iapResult(args) {
     items: args.items
   };
 }
-var COMPLETE_OUTCOMES, STATE_REQUIREMENTS;
+var COMPLETE_OUTCOMES, STATE_REQUIREMENTS, MISSING_SCREENSHOT, MISSING_UNREAD, REFUSED_SCREENSHOT, MISSING_AFTER_SCREENSHOT, UNFINISHED_SCREENSHOT, LEFTOVER_STATES, ADD_FILE_FIRST;
 var init_iap_result = __esm({
   "../store-release/iap-result.ts"() {
     COMPLETE_OUTCOMES = /* @__PURE__ */ new Set(["created", "updated", "reused"]);
     STATE_REQUIREMENTS = {
-      MISSING_METADATA: "App Store Connect reports MISSING_METADATA \u2014 usually the App Review screenshot, which this command does not upload",
       READY_TO_SUBMIT: "submit the product for App Review with an app version \u2014 this command never submits",
       DEVELOPER_ACTION_NEEDED: "resolve the App Review feedback in App Store Connect",
       REJECTED: "resolve the App Review rejection in App Store Connect",
@@ -159386,6 +159556,16 @@ var init_iap_result = __esm({
       WAITING_FOR_UPLOAD: "waiting for its hosted content to be uploaded",
       PROCESSING_CONTENT: "Apple is still processing its hosted content"
     };
+    MISSING_SCREENSHOT = 'App Store Connect reports MISSING_METADATA and the product has no App Review screenshot \u2014 add "reviewScreenshot" to the item and apply, or upload one in App Store Connect';
+    MISSING_UNREAD = 'App Store Connect reports MISSING_METADATA \u2014 check the product in App Store Connect; when it lacks the App Review screenshot, add "reviewScreenshot" to the item and apply';
+    REFUSED_SCREENSHOT = "App Store Connect reports MISSING_METADATA \u2014 Apple could not process the review screenshot";
+    MISSING_AFTER_SCREENSHOT = "App Store Connect still reports MISSING_METADATA \u2014 Apple may still be processing the review screenshot; if it stays, check the product in App Store Connect";
+    UNFINISHED_SCREENSHOT = "App Store Connect reports MISSING_METADATA \u2014 the review screenshot upload is unfinished";
+    LEFTOVER_STATES = {
+      FAILED: { problem: REFUSED_SCREENSHOT, fix: "; replace the file and apply again" },
+      AWAITING_UPLOAD: { problem: UNFINISHED_SCREENSHOT, fix: "; rerun plan and apply to replace it" }
+    };
+    ADD_FILE_FIRST = ' \u2014 add "reviewScreenshot" to the item first, then plan and apply';
   }
 });
 
@@ -159429,6 +159609,99 @@ var init_iap_price_status = __esm({
   }
 });
 
+// ../store-release/screenshot-display-types.ts
+function displayTypeForSize(w2, h2) {
+  const key2 = `${Math.min(w2, h2)}x${Math.max(w2, h2)}`;
+  const map = {
+    "1320x2868": "APP_IPHONE_67",
+    // 6.9" → 6.7"/6.9" combined slot
+    "1290x2796": "APP_IPHONE_67",
+    // 6.7"
+    "1242x2688": "APP_IPHONE_65",
+    // 6.5"
+    "1284x2778": "APP_IPHONE_65",
+    "1206x2622": "APP_IPHONE_61",
+    // 6.3"/6.1"
+    "1179x2556": "APP_IPHONE_61",
+    "2048x2732": "APP_IPAD_PRO_129",
+    "2064x2752": "APP_IPAD_PRO_3GEN_129"
+  };
+  return map[key2] ?? null;
+}
+var init_screenshot_display_types = __esm({
+  "../store-release/screenshot-display-types.ts"() {
+  }
+});
+
+// ../store-release/iap-review-screenshot.ts
+import { createHash as createHash38 } from "node:crypto";
+import { basename as basename19, resolve as resolve56 } from "node:path";
+function pngSize(bytes2) {
+  const signed = PNG_SIGNATURE.every((b2, i2) => bytes2[i2] === b2);
+  if (!signed || bytes2.length < 24 || bytes2.toString("ascii", 12, 16) !== "IHDR") return void 0;
+  return { format: "png", width: bytes2.readUInt32BE(16), height: bytes2.readUInt32BE(20) };
+}
+function jpegSize(bytes2) {
+  if (bytes2[0] !== 255 || bytes2[1] !== 216) return void 0;
+  for (let at2 = 2; at2 + 9 <= bytes2.length && bytes2[at2] === 255; at2 += 2 + bytes2.readUInt16BE(at2 + 2)) {
+    if (JPEG_SOF_MARKERS.has(bytes2[at2 + 1])) return { format: "jpeg", height: bytes2.readUInt16BE(at2 + 5), width: bytes2.readUInt16BE(at2 + 7) };
+  }
+  return void 0;
+}
+function readImageSize(bytes2) {
+  const buffer = Buffer.from(bytes2.buffer, bytes2.byteOffset, bytes2.byteLength);
+  return pngSize(buffer) ?? jpegSize(buffer);
+}
+function md5Hex(bytes2) {
+  return createHash38("md5").update(bytes2).digest("hex");
+}
+function isAppStoreScreenshotSize(file2) {
+  return displayTypeForSize(file2.width, file2.height) !== null;
+}
+function screenshotNotes(file2) {
+  const size = `${file2.width}\xD7${file2.height}`;
+  const notes = [`review screenshot ${file2.fileName} (${size} ${file2.format.toUpperCase()})`];
+  if (!isAppStoreScreenshotSize(file2)) notes.push(`${size} is not an App Store screenshot size this tool knows \u2014 Apple may refuse it; a full-size iPhone screenshot is safest`);
+  return notes;
+}
+function readReviewScreenshot(path2, source) {
+  if (!source.readBytes) throw new Error("this run cannot read files");
+  const absolute = resolve56(source.manifestDir ?? process.cwd(), path2);
+  let bytes2;
+  try {
+    bytes2 = source.readBytes(absolute);
+  } catch (e2) {
+    throw new Error(`cannot read ${absolute}: ${e2.message}`);
+  }
+  const size = readImageSize(bytes2);
+  if (!size) throw new Error(`${absolute} is not a PNG or JPEG image`);
+  return { ...size, path: absolute, fileName: basename19(absolute), bytes: bytes2, checksum: md5Hex(bytes2) };
+}
+function loadReviewScreenshots(manifest, source, indices = manifest.items.map((_2, i2) => i2)) {
+  const files = /* @__PURE__ */ new Map();
+  const problems = [];
+  for (const i2 of indices) {
+    const path2 = manifest.items[i2].reviewScreenshot;
+    if (path2 === void 0) continue;
+    try {
+      files.set(i2, readReviewScreenshot(path2, source));
+    } catch (e2) {
+      problems.push(`items[${i2}].reviewScreenshot: ${e2.message}`);
+    }
+  }
+  if (problems.length) throw new IapManifestError("the manifest", problems);
+  return files;
+}
+var PNG_SIGNATURE, JPEG_SOF_MARKERS;
+var init_iap_review_screenshot = __esm({
+  "../store-release/iap-review-screenshot.ts"() {
+    init_iap_manifest();
+    init_screenshot_display_types();
+    PNG_SIGNATURE = [137, 80, 78, 71, 13, 10, 26, 10];
+    JPEG_SOF_MARKERS = /* @__PURE__ */ new Set([192, 193, 194, 195, 197, 198, 199, 201, 202, 203, 205, 206, 207]);
+  }
+});
+
 // ../store-release/iap-plan.ts
 function priceNote(price, target) {
   if (price.rule !== "atLeast") return CONDITIONAL_PRICE_NOTE;
@@ -159568,6 +159841,47 @@ function availabilityDiff(item, observed) {
 function metadataDiffs(item, observed, target = exactTarget(item.price)) {
   return [...localizationDiffs(item, observed), ...priceDiff(item, observed, target), ...availabilityDiff(item, observed)];
 }
+function screenshotMatches(observed, checksum) {
+  return observed?.checksum === checksum && observed.state !== "FAILED";
+}
+function describeScreenshotGap(observed, fileName) {
+  if (!observed) return "the review screenshot is not uploaded";
+  if (observed.state === "AWAITING_UPLOAD") return "the review screenshot is not uploaded \u2014 an unfinished upload is waiting";
+  if (observed.state === "FAILED") return `Apple could not process the review screenshot: ${observed.errors.join("; ") || "no reason given"}`;
+  return `the review screenshot differs from ${fileName}`;
+}
+function screenshotUnmet(planned2, observed) {
+  if (!planned2 || !observed || screenshotMatches(observed.reviewScreenshot, planned2.checksum)) return [];
+  return [describeScreenshotGap(observed.reviewScreenshot, planned2.fileName)];
+}
+async function withReviewScreenshot(api2, observed) {
+  if (observed.reviewScreenshotRead) return observed;
+  const reviewScreenshot = await api2.readReviewScreenshot(observed.resourceId);
+  return { ...observed, reviewScreenshotRead: true, ...reviewScreenshot ? { reviewScreenshot } : {} };
+}
+function isScreenshotLeftover(held) {
+  return LEFTOVER_SCREENSHOT_STATES.has(held.state);
+}
+function screenshotOp(observed, checksum) {
+  return { kind: observed.reviewScreenshot ? "replaceReviewScreenshot" : "uploadReviewScreenshot", checksum };
+}
+async function planReviewScreenshot(api2, plan, file2) {
+  if (!file2) return plan;
+  const planned2 = { ...plan, notes: [...plan.notes, ...screenshotNotes(file2)], reviewScreenshot: { fileName: file2.fileName, checksum: file2.checksum } };
+  if (plan.decision === "conflict") return plan.observed ? { ...planned2, observed: await withReviewScreenshot(api2, plan.observed) } : planned2;
+  if (plan.decision === "create") return { ...planned2, ops: [...plan.ops, { kind: "uploadReviewScreenshot", checksum: file2.checksum }] };
+  const observed = await withReviewScreenshot(api2, observationOf(plan));
+  const [gap] = screenshotUnmet(planned2.reviewScreenshot, observed);
+  if (!gap) return { ...planned2, observed };
+  if (isLocked(observed)) {
+    return { ...planned2, observed, decision: "conflict", ops: [], conflicts: [`${plan.productId} is ${observed.state} and this command never changes a live or in-review product: ${gap}`] };
+  }
+  return { ...planned2, observed, decision: "update", ops: [...plan.ops, screenshotOp(observed, file2.checksum)] };
+}
+function observationOf(plan) {
+  if (!plan.observed) throw new Error(`internal: the plan for existing product ${plan.productId} has no observation`);
+  return plan.observed;
+}
 function isLocked(observed) {
   return !EDITABLE_PRODUCT_STATES.has(observed.state) || observed.versions.some((v2) => LOCKED_VERSION_STATES.has(v2.state));
 }
@@ -159672,11 +159986,15 @@ async function planItem(pricing, api2, item, products, today) {
 }
 async function planItemsAt(context, manifest, indices = manifest.items.map((_2, i2) => i2)) {
   const pricing = context.pricing ?? new PriceGrid(context.api);
+  const screenshots = loadReviewScreenshots(manifest, context, indices);
   return withAccessContext(context.identity, manifest.target, async () => {
     await verifyTarget(context.api, manifest, context.identity);
     const products = await discoverProducts(context, manifest);
     const plans = /* @__PURE__ */ new Map();
-    for (const i2 of indices) plans.set(i2, await planItem(pricing, context.api, manifest.items[i2], products, isoDay(context.now())));
+    for (const i2 of indices) {
+      const planned2 = await planItem(pricing, context.api, manifest.items[i2], products, isoDay(context.now()));
+      plans.set(i2, await planReviewScreenshot(context.api, planned2, screenshots.get(i2)));
+    }
     return plans;
   });
 }
@@ -159696,6 +160014,7 @@ async function planIap(manifest, context) {
     target: manifest.target,
     manifestDigest: manifestDigest(manifest),
     manifest,
+    ...context.manifestDir ? { manifestDir: context.manifestDir } : {},
     items
   });
 }
@@ -159706,13 +160025,18 @@ function verifyOps(plan, manifest) {
     if (itemPlan2.productId !== item.productId || !Array.isArray(itemPlan2.ops)) throw planError(`plan item ${i2} does not match manifest product ${item.productId}`);
     for (const op of itemPlan2.ops) {
       const locales = item.localizations.map((l2) => l2.locale);
-      const knownShape = OP_KINDS.has(op.kind) && Object.keys(op).every((k2) => k2 === "kind" || k2 === "locale" && LOCALE_OPS.has(op.kind) || op.kind === "changePrice" && (k2 === "from" || k2 === "to"));
+      const knownShape = OP_KINDS.has(op.kind) && Object.keys(op).every((k2) => k2 === "kind" || k2 === "locale" && LOCALE_OPS.has(op.kind) || op.kind === "changePrice" && (k2 === "from" || k2 === "to") || k2 === "checksum" && SCREENSHOT_OPS.has(op.kind));
       const localeOk = !LOCALE_OPS.has(op.kind) || locales.includes(op.locale);
       const priceOk = op.kind !== "changePrice" || item.price.rule === "atLeast" && [op.from, op.to].every((v2) => typeof v2 === "string" && /^\d+(\.\d+)?$/.test(v2) && compareAmounts(v2, "0") > 0) && itemPlan2.observed?.priceSchedule !== void 0 && itemPlan2.targetPrice === op.to;
-      if (!knownShape || !localeOk || !priceOk) throw planError(`plan item ${item.productId} has an unknown operation ${JSON.stringify(op)}`);
+      const screenshotOk = !SCREENSHOT_OPS.has(op.kind) || screenshotOpOk(op, item, itemPlan2);
+      if (!knownShape || !localeOk || !priceOk || !screenshotOk) throw planError(`plan item ${item.productId} has an unknown operation ${JSON.stringify(op)}`);
     }
   });
 }
+function screenshotOpOk(op, item, itemPlan2) {
+  const { checksum } = op;
+  return item.reviewScreenshot !== void 0 && typeof checksum === "string" && MD5_HEX.test(checksum) && itemPlan2.reviewScreenshot?.checksum === checksum;
+}
 function verifyPlan2(doc) {
   const plan = doc;
   if (!plan || typeof plan !== "object" || plan.planVersion !== 1) throw planError("not a himi store iap plan (planVersion 1)");
@@ -159729,8 +160053,9 @@ async function statusIap(manifest, context, catalog3) {
   const plans = await planItems({ ...context, pricing }, manifest);
   const readAt2 = context.now();
   const items = [];
-  for (const [i2, p2] of plans.entries()) {
+  for (const [i2, planned2] of plans.entries()) {
     const item = manifest.items[i2];
+    const p2 = planned2.observed ? { ...planned2, observed: await withAccessContext(context.identity, manifest.target, () => withReviewScreenshot(context.api, planned2.observed)) } : planned2;
     const target = p2.observed ? await pricing.targetAmount(item.price, p2.observed.resourceId) : void 0;
     const result = itemResult({
       target: manifest.target,
@@ -159738,7 +160063,7 @@ async function statusIap(manifest, context, catalog3) {
       observed: p2.observed,
       outcome: STATUS_OUTCOMES[p2.decision],
       conflicts: p2.conflicts,
-      unmet: p2.observed ? metadataDiffs(item, p2.observed, target) : [],
+      unmet: p2.observed ? [...metadataDiffs(item, p2.observed, target), ...screenshotUnmet(p2.reviewScreenshot, p2.observed)] : [],
       readAt: readAt2
     });
     Object.assign(result.provisioning, await withAccessContext(context.identity, manifest.target, () => checkStatusPrice(item, p2.observed, pricing, catalog3)));
@@ -159746,7 +160071,7 @@ async function statusIap(manifest, context, catalog3) {
   }
   return iapResult({ target: manifest.target, identity: context.identity, items, generatedAt: readAt2 });
 }
-var IapProvisionError, EDITABLE_VERSION_STATE, EDITABLE_PRODUCT_STATES, LOCKED_VERSION_STATES, OP_KINDS, LOCALE_OPS, CONDITIONAL_PRICE_NOTE, STATUS_OUTCOMES, isoDay, exactTarget, planError;
+var IapProvisionError, EDITABLE_VERSION_STATE, EDITABLE_PRODUCT_STATES, LOCKED_VERSION_STATES, SCREENSHOT_OPS, OP_KINDS, MD5_HEX, LOCALE_OPS, CONDITIONAL_PRICE_NOTE, STATUS_OUTCOMES, isoDay, exactTarget, LEFTOVER_SCREENSHOT_STATES, planError;
 var init_iap_plan = __esm({
   "../store-release/iap-plan.ts"() {
     init_iap_api();
@@ -159755,6 +160080,7 @@ var init_iap_plan = __esm({
     init_iap_pricing();
     init_iap_result();
     init_iap_price_status();
+    init_iap_review_screenshot();
     IapProvisionError = class extends Error {
       constructor(reason, message) {
         super(message);
@@ -159765,12 +160091,15 @@ var init_iap_plan = __esm({
     EDITABLE_VERSION_STATE = "PREPARE_FOR_SUBMISSION";
     EDITABLE_PRODUCT_STATES = /* @__PURE__ */ new Set(["MISSING_METADATA", "READY_TO_SUBMIT", "DEVELOPER_ACTION_NEEDED", "REJECTED"]);
     LOCKED_VERSION_STATES = /* @__PURE__ */ new Set(["READY_FOR_REVIEW", "WAITING_FOR_REVIEW", "IN_REVIEW", "ACCEPTED", "APPROVED"]);
-    OP_KINDS = /* @__PURE__ */ new Set(["createProduct", "createVersion", "createLocalization", "updateLocalization", "setPrice", "changePrice", "setAvailability"]);
+    SCREENSHOT_OPS = /* @__PURE__ */ new Set(["uploadReviewScreenshot", "replaceReviewScreenshot"]);
+    OP_KINDS = /* @__PURE__ */ new Set(["createProduct", "createVersion", "createLocalization", "updateLocalization", "setPrice", "changePrice", "setAvailability", ...SCREENSHOT_OPS]);
+    MD5_HEX = /^[0-9a-f]{32}$/;
     LOCALE_OPS = /* @__PURE__ */ new Set(["createLocalization", "updateLocalization"]);
     CONDITIONAL_PRICE_NOTE = "the exact price point can only be looked up after the product exists \u2014 apply stops with a partial result if Apple has no point of exactly the requested amount";
     STATUS_OUTCOMES = { create: "absent", update: "incomplete", reuse: "reused", conflict: "conflict" };
     isoDay = (date) => date.toISOString().slice(0, 10);
     exactTarget = (price) => price.rule === "atLeast" ? void 0 : price.amount;
+    LEFTOVER_SCREENSHOT_STATES = /* @__PURE__ */ new Set(["AWAITING_UPLOAD", "FAILED"]);
     planError = (message) => new IapProvisionError("plan", message);
   }
 });
@@ -159778,6 +160107,7 @@ var init_iap_plan = __esm({
 // ../store-release/iap-apply.ts
 function sameOp(a2, b2) {
   if (a2.kind === "changePrice" && b2.kind === "changePrice") return a2.from === b2.from && a2.to === b2.to;
+  if ("checksum" in a2 || "checksum" in b2) return "checksum" in a2 && "checksum" in b2 && a2.checksum === b2.checksum;
   return a2.kind === b2.kind && ("locale" in a2 ? a2.locale : void 0) === ("locale" in b2 ? b2.locale : void 0);
 }
 function assertSameAccount(planned2, current) {
@@ -159798,9 +160128,19 @@ function driftOf(planned2, live3, today) {
     const scheduleProblem = priceScheduleConflict(live3.observed?.priceSchedule, today);
     if (scheduleProblem) return `${live3.productId}: ${scheduleProblem}`;
   }
+  const [plannedShot, liveShot] = [planned2.reviewScreenshot, live3.reviewScreenshot];
+  if (plannedShot && liveShot && plannedShot.checksum !== liveShot.checksum) return `${live3.productId}: ${liveShot.fileName} changed since the plan was made`;
+  if (replacesUnplannedScreenshot(planned2, live3)) return `${live3.productId}: a review screenshot was added in App Store Connect after the plan \u2014 make a new plan before replacing it`;
   const unplanned = live3.ops.filter((op) => !planned2.ops.some((p2) => sameOp(p2, op)));
   return unplanned.length ? `${live3.productId} now needs ${unplanned.map(describeOp).join(", ")}, which the plan did not list` : void 0;
 }
+function replacesUnplannedScreenshot(planned2, live3) {
+  if (!live3.ops.some((op) => op.kind === "replaceReviewScreenshot")) return false;
+  const held = live3.observed?.reviewScreenshot;
+  if (!held || isScreenshotLeftover(held)) return false;
+  const seen = planned2.observed?.reviewScreenshot;
+  return !seen || seen.id !== held.id || isScreenshotLeftover(seen);
+}
 function assertNoDrift(plan, live3, today) {
   const drift = [...live3].map(([i2, current]) => driftOf(plan.items[i2], current, today)).filter((d2) => d2 !== void 0);
   if (!drift.length) return;
@@ -159853,6 +160193,50 @@ async function findLocalization(api2, versionId, locale, matchText) {
   if (!found || matchText && (found.name !== matchText.name || found.description !== matchText.description)) return void 0;
   return found;
 }
+function plannedScreenshot(item, op, context) {
+  const file2 = readReviewScreenshot(required(item.reviewScreenshot, "the review screenshot path"), context);
+  if (!("checksum" in op) || file2.checksum !== op.checksum) throw new UnresolvedWriteError(`${file2.fileName} changed after the plan was made \u2014 make a new plan`);
+  return file2;
+}
+async function reserveScreenshot(api2, resourceId, file2, overValid) {
+  try {
+    return await api2.reserveReviewScreenshot(resourceId, { fileName: file2.fileName, fileSize: file2.bytes.length });
+  } catch (e2) {
+    if (overValid && e2 instanceof AscError && e2.kind === "conflict") throw new UnresolvedWriteError(KEPT_EXISTING_SCREENSHOT);
+    if (!(e2 instanceof AscError) || !AMBIGUOUS_WRITE_KINDS.has(e2.kind)) throw e2;
+    throw new UnresolvedWriteError(`could not confirm the review screenshot reservation (${e2.message}). Make a new plan \u2014 it replaces an unfinished reservation.`);
+  }
+}
+async function settledScreenshot(api2, resourceId, committed, sleep) {
+  if (SETTLED_SCREENSHOT_STATES.has(committed.state)) return committed;
+  const read = async () => {
+    const current = await api2.readReviewScreenshot(resourceId);
+    return current && SETTLED_SCREENSHOT_STATES.has(current.state) ? current : void 0;
+  };
+  return await pollFor(read, sleep) ?? committed;
+}
+async function uploadScreenshot(context, resourceId, file2) {
+  const { api: api2, sleep } = context;
+  const current = await api2.readReviewScreenshot(resourceId);
+  if (current && screenshotMatches(current, file2.checksum)) return { state: "reconciled", resourceId: current.id };
+  const reservation = await reserveScreenshot(api2, resourceId, file2, current !== void 0 && !isScreenshotLeftover(current));
+  await api2.uploadReviewScreenshotParts(reservation, file2.bytes);
+  const committed = async () => {
+    const screenshot = await api2.readReviewScreenshot(resourceId);
+    return screenshot?.id === reservation.id && screenshot.checksum === file2.checksum ? screenshot : void 0;
+  };
+  const { value, state } = await ensure({ write: () => api2.commitReviewScreenshot(reservation.id, file2.checksum), find: committed }, sleep);
+  const settled = await settledScreenshot(api2, resourceId, value, sleep);
+  if (settled.state === "FAILED") throw new UnresolvedWriteError(`Apple could not process the review screenshot: ${settled.errors.join("; ") || "no reason given"}`);
+  return { state, resourceId: reservation.id };
+}
+async function deleteLeftoverScreenshot(context, resourceId) {
+  const { api: api2, sleep } = context;
+  const stale = await api2.readReviewScreenshot(resourceId);
+  if (!stale || !isScreenshotLeftover(stale)) return;
+  const gone = async () => (await api2.readReviewScreenshot(resourceId))?.id !== stale.id ? true : void 0;
+  await ensure({ write: async () => (await api2.deleteReviewScreenshot(stale.id), true), find: gone }, sleep);
+}
 function operationRunners(context, manifest) {
   const { api: api2, sleep, pricing } = context;
   const appId2 = manifest.target.appleAppId;
@@ -159918,6 +160302,13 @@ function operationRunners(context, manifest) {
       const matches = async () => availabilityMatches(await readObservedAvailability(api2, resourceId), territories) ? true : void 0;
       const { state } = await ensure({ write: async () => (await api2.createAvailability(resourceId, territories), true), find: matches }, sleep);
       return { state };
+    },
+    uploadReviewScreenshot: async (run2, op) => uploadScreenshot(context, required(run2.resourceId, "the product id"), plannedScreenshot(run2.item, op, context)),
+    replaceReviewScreenshot: async (run2, op) => {
+      const resourceId = required(run2.resourceId, "the product id");
+      const file2 = plannedScreenshot(run2.item, op, context);
+      await deleteLeftoverScreenshot(context, resourceId);
+      return uploadScreenshot(context, resourceId, file2);
     }
   };
 }
@@ -159944,7 +160335,8 @@ async function runStep(runner2, run2, op, context, manifest) {
 async function resumeFromApple(run2, remaining, context) {
   const product = await context.api.readProduct(required(run2.resourceId, "the product id"));
   if (!product) return { reason: "the product exists but cannot be read back yet \u2014 rerun apply later" };
-  const replanned = await planForProduct(context.api, run2.item, product, context.pricing, context.now().toISOString().slice(0, 10));
+  const file2 = run2.item.reviewScreenshot === void 0 ? void 0 : readReviewScreenshot(run2.item.reviewScreenshot, context);
+  const replanned = await planReviewScreenshot(context.api, await planForProduct(context.api, run2.item, product, context.pricing, context.now().toISOString().slice(0, 10)), file2);
   if (replanned.decision === "conflict") return { reason: `the product already existed: ${replanned.conflicts.join("; ")}` };
   const unplanned = replanned.ops.filter((op) => !remaining.some((r2) => sameOp(r2, op)));
   if (unplanned.length) return { reason: `the product already existed and needs ${unplanned.map(describeOp).join(", ")}, which the plan did not list \u2014 make a new plan` };
@@ -159979,7 +160371,9 @@ async function readBack(run2, context, manifest) {
   if (!run2.resourceId) return {};
   try {
     const product = await context.api.readProduct(run2.resourceId);
-    return product ? { observed: await observeProduct(context.api, product, context.now().toISOString().slice(0, 10)) } : { failure: "Apple does not return it yet" };
+    if (!product) return { failure: "Apple does not return it yet" };
+    const observed = await observeProduct(context.api, product, context.now().toISOString().slice(0, 10));
+    return { observed: run2.item.reviewScreenshot === void 0 ? observed : await withReviewScreenshot(context.api, observed) };
   } catch (e2) {
     return { failure: explainFailure(e2, context, manifest) };
   }
@@ -159989,7 +160383,8 @@ async function unmetFor(item, observed, context) {
 }
 async function knownUnmetFor(item, planned2, context) {
   if (!planned2.observed) return [];
-  return metadataDiffs(item, planned2.observed, planned2.targetPrice ?? await context.pricing.targetAmount(item.price));
+  const metadata2 = metadataDiffs(item, planned2.observed, planned2.targetPrice ?? await context.pricing.targetAmount(item.price));
+  return [...metadata2, ...screenshotUnmet(planned2.reviewScreenshot, planned2.observed)];
 }
 async function applyItem(item, live3, context, manifest) {
   const base = { target: manifest.target, item, readAt: context.now() };
@@ -160006,7 +160401,7 @@ async function applyItem(item, live3, context, manifest) {
   };
   const steps = await runOps(run2, live3.ops, context, manifest);
   const { observed, failure } = await readBack(run2, context, manifest);
-  const unmet = failure ? [`could not read the product back: ${failure}`] : await unmetFor(item, observed, context);
+  const unmet = failure ? [`could not read the product back: ${failure}`] : [...await unmetFor(item, observed, context), ...screenshotUnmet(live3.reviewScreenshot, observed)];
   const outcome = outcomeOf(live3.ops, steps, unmet);
   return itemResult({ ...base, readAt: context.now(), observed, outcome, steps, unmet, appleResourceId: run2.resourceId });
 }
@@ -160024,7 +160419,8 @@ function plannedResult(item, planned2, plan, context, manifest) {
 async function applyIap(planDoc, applyContext) {
   const plan = verifyPlan2(planDoc);
   assertSameAccount(plan.identity, applyContext.identity);
-  const context = { ...applyContext, pricing: applyContext.pricing ?? new PriceGrid(applyContext.api) };
+  const manifestDir = plan.manifestDir ?? applyContext.manifestDir;
+  const context = { ...applyContext, ...manifestDir ? { manifestDir } : {}, pricing: applyContext.pricing ?? new PriceGrid(applyContext.api) };
   const manifest = plan.manifest;
   const refresh = plan.items.flatMap((planned2, i2) => needsRefresh(planned2) ? [i2] : []);
   const live3 = await planItemsAt(context, manifest, refresh);
@@ -160047,23 +160443,26 @@ async function applyIap(planDoc, applyContext) {
   }
   return iapResult({ target: manifest.target, identity: context.identity, items, generatedAt: context.now() });
 }
-var DEFERRED_REQUIREMENT, RECONCILE_READS, RECONCILE_BASE_WAIT_MS, AMBIGUOUS_WRITE_KINDS, UnresolvedWriteError, required;
+var DEFERRED_REQUIREMENT, RECONCILE_READS, RECONCILE_BASE_WAIT_MS, AMBIGUOUS_WRITE_KINDS, SETTLED_SCREENSHOT_STATES, UnresolvedWriteError, required, KEPT_EXISTING_SCREENSHOT;
 var init_iap_apply = __esm({
   "../store-release/iap-apply.ts"() {
     init_iap_client();
     init_iap_plan();
     init_iap_pricing();
+    init_iap_review_screenshot();
     init_iap_result();
     DEFERRED_REQUIREMENT = "deferred by --limit \u2014 rerun apply to continue; nothing was written for this product in this run";
     RECONCILE_READS = 4;
     RECONCILE_BASE_WAIT_MS = 1e3;
     AMBIGUOUS_WRITE_KINDS = /* @__PURE__ */ new Set(["uncertain", "rateLimited", "conflict"]);
+    SETTLED_SCREENSHOT_STATES = /* @__PURE__ */ new Set(["COMPLETE", "FAILED"]);
     UnresolvedWriteError = class extends Error {
     };
     required = (value, what) => {
       if (!value) throw new Error(`internal: ${what} is not known yet`);
       return value;
     };
+    KEPT_EXISTING_SCREENSHOT = "Apple kept the existing review screenshot and refused a second one \u2014 replace it in App Store Connect (a review screenshot can be updated there but not removed)";
   }
 });
 
@@ -160187,11 +160586,11 @@ var init_credential_profile = __esm({
 });
 
 // ../store-release/iap-credentials.ts
-import { createHash as createHash38 } from "node:crypto";
+import { createHash as createHash39 } from "node:crypto";
 import { existsSync as existsSync73, readFileSync as readFileSync88, realpathSync as realpathSync12 } from "node:fs";
 import { homedir as homedir10 } from "node:os";
 function accountFingerprint(keyId, issuerId) {
-  return `sha256:${createHash38("sha256").update(`${issuerId}:${keyId}`).digest("hex").slice(0, 16)}`;
+  return `sha256:${createHash39("sha256").update(`${issuerId}:${keyId}`).digest("hex").slice(0, 16)}`;
 }
 function requireExplicitProfile(profileFlag, target) {
   const profile = profileFlag?.trim();
@@ -160278,7 +160677,7 @@ var init_wix_payments_contract = __esm({
 });
 
 // ../store-release/iap-draft.ts
-import { createHash as createHash39 } from "node:crypto";
+import { createHash as createHash40 } from "node:crypto";
 function fit(text9, max) {
   const chars = [...text9];
   return chars.length <= max ? text9 : `${chars.slice(0, max - 1).join("").trimEnd()}${ELLIPSIS}`;
@@ -160428,7 +160827,7 @@ var init_iap_draft = __esm({
     TIER_DESCRIPTION = "Unlocks one item in the app";
     ELLIPSIS = "\u2026";
     entityKey = (entityType, entityId) => `${entityType}:${entityId}`;
-    sha = (text9) => createHash39("sha256").update(text9).digest("hex");
+    sha = (text9) => createHash40("sha256").update(text9).digest("hex");
     ENTITIES = { "&amp;": "&", "&nbsp;": " ", "&lt;": "<", "&gt;": ">", "&quot;": '"', "&#39;": "'" };
     MAX_SUFFIX = 24;
     ReferenceNames = class {
@@ -160745,7 +161144,7 @@ var init_store_spec = __esm({
 
 // src/iap-config-edit.ts
 import { existsSync as existsSync74, readFileSync as readFileSync90 } from "node:fs";
-import { basename as basename18, join as join75 } from "node:path";
+import { basename as basename20, join as join75 } from "node:path";
 import ts8 from "typescript";
 function bindPurchasesAppInConfig(source, options) {
   const fileName = options.fileName ?? "config.ts";
@@ -160832,14 +161231,14 @@ function withStoreBundle(dir, options) {
 function previewIapConfigEdit(dir, options) {
   const path2 = configEntry(dir);
   if (!path2) return void 0;
-  if (isSymlink2(path2)) return { path: path2, changed: false, applied: [], conflicts: [], instructions: [`${basename18(path2)} is a symlink, so it would not be edited: add the purchases app in the file it points to.`] };
-  const { changed, applied, conflicts, instructions } = bindPurchasesAppInConfig(readFileSync90(path2, "utf8"), { ...withStoreBundle(dir, options), fileName: basename18(path2) });
+  if (isSymlink2(path2)) return { path: path2, changed: false, applied: [], conflicts: [], instructions: [`${basename20(path2)} is a symlink, so it would not be edited: add the purchases app in the file it points to.`] };
+  const { changed, applied, conflicts, instructions } = bindPurchasesAppInConfig(readFileSync90(path2, "utf8"), { ...withStoreBundle(dir, options), fileName: basename20(path2) });
   return { path: path2, changed, applied, conflicts, instructions };
 }
 async function applyIapConfigEdit(dir, options, validate4) {
   const path2 = configEntry(dir);
   if (!path2) return void 0;
-  const fileName = basename18(path2);
+  const fileName = basename20(path2);
   const refuse7 = (why) => ({ path: path2, changed: false, applied: [], conflicts: [], instructions: [why] });
   if (isSymlink2(path2)) return refuse7(`${fileName} is a symlink, so it was not edited: add the purchases app in the file it points to.`);
   const original = readFileSync90(path2, "utf8");
@@ -161298,6 +161697,281 @@ var init_store_iap_connect = __esm({
   }
 });
 
+// src/store-iap-screenshots.ts
+import { dirname as dirname40, join as join76, relative as relative15 } from "node:path";
+function purchaseScreensFor(item) {
+  const screen = item.wix && PURCHASE_SCREENS[item.wix.entityType];
+  if (!screen || !item.wix) return [];
+  const list = LIST_SCREENS[item.wix.entityType];
+  return [{ screenId: `${screen}_${item.wix.entityId}` }, { screenId: screen, input: { id: item.wix.entityId } }, ...list ? [{ screenId: list }] : []];
+}
+function formatApplePrice(amount, currency, locale) {
+  return new Intl.NumberFormat(locale, { style: "currency", currency }).format(Number(amount));
+}
+function bindingHost(target, offers) {
+  const appId2 = target.himiApp;
+  const byEntity = new Map(offers.flatMap((offer) => offer.item.wix ? [[offer.item.wix.entityId, offer]] : []));
+  const product = ({ item, displayPrice }) => ({ id: item.productId, type: item.type, displayName: item.localizations[0]?.name ?? item.referenceName, displayPrice });
+  const answers = {
+    "capability.app_info.get": () => ({ appId: appId2, bundleId: target.bundleId, platform: "ios" }),
+    "capability.iap.appBinding": () => ({ status: "bound", binding: { purchasesAppId: RENDER_PURCHASES_APP_ID, himalayaAppId: appId2, bundleId: target.bundleId, siteId: target.wixSiteId } }),
+    "capability.iap.getProducts": (params) => {
+      const asked = new Set(String(params?.productIds ?? "").split(",").map((id) => id.trim()));
+      return { products: offers.filter((offer) => asked.has(offer.item.productId)).map(product) };
+    },
+    "capability.iap.getUnfinishedTransactions": () => ({ status: "ok", transactions: [] })
+  };
+  const member = { generation: 1, kind: "member", memberId: RENDER_MEMBER_ID, siteId: target.wixSiteId, appId: appId2, ready: true };
+  return {
+    dispatch: (action, params) => answers[action]?.(params),
+    wixCall: (method, path2, body) => {
+      if (method === "GET") return MEMBER_OWN_READS.find((read) => read.path.test(path2))?.answer;
+      if (method !== "POST" || !MAPPINGS_PATH.test(path2)) return void 0;
+      const asked = body?.appProductIds;
+      const ids = Array.isArray(asked) ? asked.filter((id) => typeof id === "string" && byEntity.has(id)) : [];
+      return { mappings: ids.map((id) => {
+        const { item } = byEntity.get(id);
+        return { appProductId: id, storeProductId: item.productId, type: item.type === "consumable" ? "CONSUMABLE" : "NON_CONSUMABLE", active: true };
+      }) };
+    },
+    wixApiSession: { identityBound: true, session: { current: () => member, subscribe: () => () => {
+    } } }
+  };
+}
+function offersPurchase(fields) {
+  return PURCHASE_FLAGS.some((flag) => fields[`${flag}Disabled`] === false && fields[`${flag}Hidden`] !== true);
+}
+function isItemRow(fields, entityId, price) {
+  const values = Object.values(fields).filter((v2) => typeof v2 === "string");
+  return values.some((v2) => v2.toLowerCase() === entityId.toLowerCase()) && values.some((v2) => visibleText2(v2).includes(price));
+}
+function rowOffersPurchase(value, entityId, price) {
+  if (Array.isArray(value)) return value.some((row) => rowOffersPurchase(row, entityId, price));
+  if (!value || typeof value !== "object") return false;
+  const fields = value;
+  if (isItemRow(fields, entityId, price)) return offersPurchase(fields);
+  return Object.values(fields).some((child) => rowOffersPurchase(child, entityId, price));
+}
+function purchaseEnabled(state, entityId, price) {
+  return Object.values(state).some((service) => {
+    if (!service || typeof service !== "object") return false;
+    return offersPurchase(service) || Object.values(service).some((child) => rowOffersPurchase(child, entityId, price));
+  });
+}
+function priceFor2(item, run2) {
+  const amount = run2.applePrice(item) ?? (item.price.rule === "atLeast" ? void 0 : item.price.amount);
+  if (amount === void 0) {
+    return { skipped: run2.appleRead ? "App Store Connect has no price for it yet \u2014 run himi store iap apply first" : "Apple's price for an atLeast item is only known once App Store Connect is read \u2014 pass --profile" };
+  }
+  return formatApplePrice(amount, item.price.currency, item.localizations[0]?.locale ?? "en-US");
+}
+function unknownOnlyIds(run2) {
+  const known = new Set(run2.manifest.items.map((item) => item.productId));
+  return [...run2.only ?? []].filter((id) => !known.has(id)).map((productId) => ({ productId, skipped: "not in the manifest" }));
+}
+function select(run2) {
+  return run2.manifest.items.flatMap((item, index) => {
+    if (run2.only && !run2.only.has(item.productId)) return [];
+    const screens = purchaseScreensFor(item);
+    const report3 = { productId: item.productId, ...screens[0] ? { screenId: screens[0].screenId } : {} };
+    const selected = (extra) => [{ index, item, screens, report: { ...report3, ...extra } }];
+    if (!screens.length) return selected({ skipped: "no purchase screen: a price tier or an entity type the templates have no detail screen for" });
+    const locked = run2.appleLocked?.(item);
+    if (locked) return selected({ skipped: `is ${locked} \u2014 a live or in-review product's screenshot is never changed` });
+    if (item.reviewScreenshot && !run2.force) return selected({ skipped: `already names ${item.reviewScreenshot} \u2014 pass --force to replace it` });
+    const price = priceFor2(item, run2);
+    return selected(typeof price === "string" ? { price } : price);
+  });
+}
+function offersFor(selected, run2) {
+  const others = run2.manifest.items.flatMap((item) => {
+    if (item === selected.item || item.wix?.entityType !== selected.item.wix?.entityType) return [];
+    const price = priceFor2(item, run2);
+    return typeof price === "string" ? [{ item, displayPrice: price }] : [];
+  });
+  return [{ item: selected.item, displayPrice: selected.report.price }, ...others];
+}
+function notAPurchase(rendered, entityId, price) {
+  if (rendered.problems.length) return `the screen reported problems while loading: ${rendered.problems.join("; ")}`;
+  if (!visibleText2(rendered.html).includes(price)) return `did not show the Apple price ${price} \u2014 it is not a purchase screen this command knows, or it did not load`;
+  if (!purchaseEnabled(rendered.state, entityId, price)) return "showed the price but no enabled buy or join action for this item";
+  return void 0;
+}
+async function renderPurchaseScreen(selected, run2) {
+  const host = bindingHost(run2.manifest.target, offersFor(selected, run2));
+  const price = selected.report.price;
+  const reasons = [];
+  for (const screen of selected.screens) {
+    let rendered;
+    try {
+      rendered = await run2.renderer.render({ contentDir: run2.contentDir, host, entityId: selected.item.wix.entityId, ...screen });
+    } catch (e2) {
+      if (e2 instanceof MissingScreenError) continue;
+      return { skipped: `could not render ${screen.screenId}: ${e2.message}` };
+    }
+    const reason = notAPurchase(rendered, selected.item.wix.entityId, price);
+    if (!reason) return { screenId: screen.screenId, html: rendered.html };
+    reasons.push(`${screen.screenId} ${reason}`);
+  }
+  if (!reasons.length) return { skipped: `the app has none of these screens: ${selected.screens.map((s2) => s2.screenId).join(", ")}` };
+  return { skipped: reasons.join("; ") };
+}
+async function shoot(selected, run2, outDir) {
+  const found = await renderPurchaseScreen(selected, run2);
+  if ("skipped" in found) return { ...selected.report, skipped: found.skipped };
+  const report3 = { ...selected.report, screenId: found.screenId };
+  const path2 = join76(outDir, `${selected.item.productId}.png`);
+  try {
+    run2.writeBytes(path2, await run2.renderer.capture(found.html, run2.contentDir));
+  } catch (e2) {
+    return { ...report3, skipped: `could not save the screenshot: ${e2.message}` };
+  }
+  return { ...report3, screenshot: relative15(dirname40(run2.manifestPath), path2) };
+}
+function visibleText2(html) {
+  return html.replace(/&nbsp;|&#160;|&#xa0;/gi, "\xA0").replace(/&amp;/g, "&");
+}
+function manifestWithScreenshots(text9, shot) {
+  const doc = JSON.parse(text9);
+  for (const [index, path2] of shot) doc.items[index].reviewScreenshot = path2;
+  return `${JSON.stringify(doc, null, 2)}
+`;
+}
+async function takeReviewScreenshots(run2) {
+  const outDir = run2.outDir ?? join76(dirname40(run2.manifestPath), DEFAULT_OUT_DIR);
+  const items = unknownOnlyIds(run2);
+  const shot = /* @__PURE__ */ new Map();
+  try {
+    for (const selected of select(run2)) {
+      const ready = !selected.report.skipped && !run2.dryRun;
+      const report3 = ready ? await shoot(selected, run2, outDir) : selected.report;
+      if (report3.screenshot) shot.set(selected.index, report3.screenshot);
+      items.push(report3);
+    }
+  } finally {
+    if (shot.size) run2.writeText(run2.manifestPath, manifestWithScreenshots(run2.manifestText, shot));
+  }
+  return { complete: items.every((i2) => !i2.skipped), items };
+}
+var MissingScreenError, REVIEW_SCREENSHOT_FRAME, DEFAULT_OUT_DIR, PURCHASE_SCREENS, LIST_SCREENS, RENDER_PURCHASES_APP_ID, RENDER_MEMBER_ID, MAPPINGS_PATH, MEMBER_OWN_READS, PURCHASE_FLAGS;
+var init_store_iap_screenshots = __esm({
+  "src/store-iap-screenshots.ts"() {
+    MissingScreenError = class extends Error {
+      constructor(screenId) {
+        super(`the app has no screen ${screenId}`);
+        this.screenId = screenId;
+      }
+    };
+    REVIEW_SCREENSHOT_FRAME = { width: 430, height: 932, scale: 3 };
+    DEFAULT_OUT_DIR = "review-screenshots";
+    PURCHASE_SCREENS = { storesProduct: "himi_product", onlineProgram: "himi_program", pricingPlan: "himi_plan" };
+    LIST_SCREENS = { pricingPlan: "himi_plans" };
+    RENDER_PURCHASES_APP_ID = "00000000-0000-4000-8000-00000000a99e";
+    RENDER_MEMBER_ID = "00000000-0000-4000-8000-0000000be4e7";
+    MAPPINGS_PATH = /\/v1\/iap\/mappings$/;
+    MEMBER_OWN_READS = [{ path: /^\/pricing-plans\/v2\/member\/orders(\?|$)/, answer: { orders: [] } }];
+    PURCHASE_FLAGS = ["buy", "join"];
+  }
+});
+
+// src/store-iap-screenshot-render.ts
+import { existsSync as existsSync75, mkdtempSync as mkdtempSync4, readFileSync as readFileSync91, rmSync as rmSync18 } from "node:fs";
+import { tmpdir as tmpdir5 } from "node:os";
+import { join as join77 } from "node:path";
+function renderProblems(render, entityId) {
+  const problems = (render.liveErrors ?? []).map((e2) => `${e2.service}: ${e2.message}`);
+  const ofItem = (call) => call.toLowerCase().includes(entityId.toLowerCase());
+  const failed3 = (render.liveFailed ?? []).filter(ofItem);
+  const attempted = (render.liveCalls ?? []).filter(ofItem).length;
+  if (failed3.length > 0 && attempted <= failed3.length) problems.push(`reading the item failed (${failed3[0]}), so the screen could not show it`);
+  return problems;
+}
+function workerBundleDir(result, dir) {
+  if (result.compileErrors.length) {
+    const detail = result.compileErrors.map((e2) => `${e2.bundle}: ${e2.errors.map((x2) => x2.text).join("; ")}`).join(" \xB7 ");
+    throw new Error(`the app's screen code does not compile \u2014 fix it first (himi validate): ${detail}`);
+  }
+  return result.built.length > 0 ? dir : void 0;
+}
+function createReviewScreenRenderer() {
+  const bundles = /* @__PURE__ */ new Map();
+  let browser;
+  function workerBundles(contentDir2) {
+    let built = bundles.get(contentDir2);
+    if (!built) {
+      built = (async () => {
+        const { buildContentBundles: buildContentBundles2, bundleOutDir: bundleOutDir2 } = await Promise.resolve().then(() => (init_build(), build_exports));
+        return workerBundleDir(await buildContentBundles2(contentDir2, {}), bundleOutDir2(contentDir2));
+      })();
+      bundles.set(contentDir2, built);
+    }
+    return built;
+  }
+  async function launch() {
+    let chromium;
+    try {
+      ({ chromium } = await import("playwright"));
+    } catch {
+      throw new Error("taking a screenshot needs Playwright's Chromium: run `npx playwright install chromium`");
+    }
+    return chromium.launch();
+  }
+  return {
+    async render({ contentDir: contentDir2, screenId, input, host, entityId }) {
+      const { buildReleaseFromContent: buildReleaseFromContent2 } = await Promise.resolve().then(() => (init_build3(), build_exports2));
+      const tier5Dir = await workerBundles(contentDir2);
+      const out2 = mkdtempSync4(join77(tmpdir5(), "himi-iap-shot-"));
+      try {
+        const outcome = await buildReleaseFromContent2(contentDir2, out2, {
+          ...tier5Dir ? { tier5Dir } : {},
+          collect: { render: { screenId, scheme: "light", png: false, hydrate: true, live: true, dumpState: true, width: REVIEW_SCREENSHOT_FRAME.width, host, ...input ? { input } : {} } }
+        });
+        const render = (outcome.renders ?? [])[0];
+        if (!render) throw new MissingScreenError(screenId);
+        if (!render.renderable || !render.html) throw new Error(render.reason ?? `${screenId} is not an SDUI screen`);
+        return { html: render.html, problems: renderProblems(render, entityId), state: render.serviceState ?? {} };
+      } finally {
+        rmSync18(out2, { recursive: true, force: true });
+      }
+    },
+    async capture(html, contentDir2) {
+      const { pngPageHtml: pngPageHtml2, stabilizePngPage: stabilizePngPage2 } = await Promise.resolve().then(() => (init_render_descriptor(), render_descriptor_exports));
+      const tokensPath = join77(contentDir2, "tokens.json");
+      const tokens2 = existsSync75(tokensPath) ? JSON.parse(readFileSync91(tokensPath, "utf8")) : null;
+      const { width, height, scale } = REVIEW_SCREENSHOT_FRAME;
+      const page = await (await (browser ??= launch())).newPage({ viewport: { width, height }, deviceScaleFactor: scale, colorScheme: "light" });
+      try {
+        await page.setContent(await pngPageHtml2({ html, tokens: tokens2, hasStickyFooter: true }), { waitUntil: "load" });
+        await stabilizePngPage2(page, "light");
+        await page.evaluate(FILL_PAGE_WITH_SCREEN_BACKGROUND);
+        return new Uint8Array(await page.screenshot({ fullPage: false }));
+      } finally {
+        await page.close().catch(() => {
+        });
+      }
+    },
+    async close() {
+      if (browser) await (await browser.catch(() => void 0))?.close().catch(() => {
+      });
+    }
+  };
+}
+var FILL_PAGE_WITH_SCREEN_BACKGROUND;
+var init_store_iap_screenshot_render = __esm({
+  "src/store-iap-screenshot-render.ts"() {
+    init_store_iap_screenshots();
+    FILL_PAGE_WITH_SCREEN_BACKGROUND = `(() => {
+  const root = [...document.body.children].find((el) => el.tagName !== "STYLE");
+  if (!root) return;
+  const style = getComputedStyle(root);
+  for (const el of [document.documentElement, document.body]) {
+    el.style.backgroundColor = style.backgroundColor;
+    el.style.backgroundImage = style.backgroundImage;
+  }
+})()`;
+  }
+});
+
 // src/serve-preview.ts
 function parsePreviewTag(value) {
   if (value === void 0 || value === "") return void 0;
@@ -161339,9 +162013,9 @@ __export(store_iap_exports, {
   runStoreIap: () => runStoreIap
 });
 import { randomUUID as randomUUID8 } from "node:crypto";
-import { appendFileSync as appendFileSync2, mkdirSync as mkdirSync34, readFileSync as readFileSync91, realpathSync as realpathSync13, rmSync as rmSync18, writeFileSync as writeFileSync30 } from "node:fs";
+import { appendFileSync as appendFileSync2, mkdirSync as mkdirSync34, readFileSync as readFileSync92, realpathSync as realpathSync13, renameSync as renameSync12, rmSync as rmSync19, writeFileSync as writeFileSync30 } from "node:fs";
 import { homedir as homedir11, hostname } from "node:os";
-import { join as join76 } from "node:path";
+import { dirname as dirname41, join as join78, resolve as resolve57 } from "node:path";
 function scrubDeep(value, scrub) {
   if (typeof value === "string") return scrub(value);
   if (Array.isArray(value)) return value.map((v2) => scrubDeep(v2, scrub));
@@ -161349,7 +162023,7 @@ function scrubDeep(value, scrub) {
   return value;
 }
 function failFrom(error, out2) {
-  if (error instanceof IapManifestError) return out2.fail(`${error.label} is not a valid IAP manifest`, { problems: error.problems });
+  if (error instanceof IapManifestError) return out2.fail(`${error.label} is not a valid IAP manifest`, { code: "manifest_invalid", problems: error.problems });
   if (error instanceof IapProvisionError) return out2.fail(error.message, { code: error.reason, reason: error.reason }, error.reason === "drift" ? 1 : 2);
   return out2.fail(error instanceof Error ? error.message : String(error));
 }
@@ -161372,6 +162046,9 @@ function readInput(deps, path2, what) {
 function readManifest2(deps, path2) {
   return parseIapManifest(readInput(deps, path2, "manifest"), path2);
 }
+function manifestDirOf(manifestPath) {
+  return dirname41(resolve57(manifestPath));
+}
 function readPlan(deps, path2) {
   const text9 = readInput(deps, path2, "plan");
   try {
@@ -161397,7 +162074,7 @@ function openSession(deps, out2, target, profile) {
   const identity = { profile: creds.profile, team: creds.team, fingerprint: creds.fingerprint };
   const api2 = deps.createApi(creds.key);
   const journal2 = deps.openJournal(target.appleAppId);
-  return { identity, api: api2, journal: journal2, planContext: { api: api2, identity, now: deps.now } };
+  return { identity, api: api2, journal: journal2, planContext: { api: api2, identity, now: deps.now, readBytes: deps.readBytes } };
 }
 function printHeader(out2, identity, target) {
   out2.line(`  ${pad("account")}profile "${identity.profile}" \xB7 team ${identity.team} \xB7 key ${identity.fingerprint}`);
@@ -161466,6 +162143,7 @@ function printItemResult(out2, item) {
     out2.line(`      price drift: Wix ${wix} \xB7 Apple ${apple} \xB7 target ${wouldBe} ${currency} in ${baseTerritory}`);
   }
   for (const step of provisioning.steps.filter((s2) => s2.detail)) out2.line(`      ${step.kind}${step.locale ? ` ${step.locale}` : ""} ${step.state}: ${step.detail}`);
+  if (provisioning.reviewScreenshot?.observed) out2.line(`      review screenshot: ${provisioning.reviewScreenshot.observed.fileName} ${provisioning.reviewScreenshot.observed.state}`);
   for (const conflict of provisioning.conflicts) out2.line(`      conflict: ${conflict}`);
   for (const unmet of provisioning.unmet) out2.line(`      unmet: ${unmet}`);
   for (const remaining of provisioning.remainingRequirements) out2.line(`      remaining: ${remaining}`);
@@ -161495,7 +162173,7 @@ async function planCommand(flags, deps, out2) {
   const planPath = requireFlag(flags, "out", "plan");
   const manifest = readManifest2(deps, manifestPath);
   const session = openSession(deps, out2, manifest.target, profile);
-  const plan = await planIap(manifest, session.planContext);
+  const plan = await planIap(manifest, { ...session.planContext, manifestDir: manifestDirOf(manifestPath) });
   writePlan(deps, out2, planPath, plan);
   const summary2 = plan.items.map((i2) => ({ productId: i2.productId, decision: i2.decision, ops: i2.ops.length, conflicts: i2.conflicts }));
   if (out2.json) out2.print({ ok: true, plan: planPath, items: summary2 });
@@ -161511,7 +162189,7 @@ function createLimit(flags) {
 async function applyWithLock(deps, plan, session, limit) {
   const release2 = deps.acquireLock(plan.target.appleAppId);
   try {
-    const context = { api: session.api, identity: session.identity, now: deps.now, sleep: deps.sleep, journal: session.journal };
+    const context = { ...session.planContext, sleep: deps.sleep, journal: session.journal };
     return await applyIap(plan, limit === void 0 ? context : { ...context, createLimit: limit });
   } finally {
     release2();
@@ -161557,7 +162235,7 @@ async function statusCommand(flags, deps, out2) {
       return out2.fail("could not read the current Wix catalog \u2014 check owner authentication and site access; no manifest fallback was used", { ok: false, code: "wix_catalog_unavailable" });
     }
   }
-  const result = await statusIap(manifest, session.planContext, catalog3?.items);
+  const result = await statusIap(manifest, { ...session.planContext, manifestDir: manifestDirOf(manifestPath) }, catalog3?.items);
   if (resultPath) writeJson(deps, out2, resultPath, result);
   const code = result.complete ? void 0 : result.items.some((i2) => i2.provisioning.priceCheckIssue) ? "price_check_unavailable" : result.items.some((i2) => i2.provisioning.priceDrift) ? "price_drift" : "status_incomplete";
   if (out2.json) out2.print({ ok: result.complete, ...code ? { code } : {}, result });
@@ -161797,6 +162475,71 @@ async function connectWith(flags, deps, out2) {
   }
   return code ? 1 : 0;
 }
+async function appleFacts(flags, deps, out2, manifest) {
+  const profile = textFlag(flags, "profile");
+  if (!profile) return /* @__PURE__ */ new Map();
+  const session = openSession(deps, out2, manifest.target, profile);
+  const unscreenshotted = { ...manifest, items: manifest.items.map(({ reviewScreenshot: _shot, ...item }) => item) };
+  const plans = await planItems(session.planContext, unscreenshotted);
+  return new Map(plans.flatMap((plan, i2) => {
+    const observed = plan.observed;
+    if (!observed) return [];
+    const base = observed.price?.baseTerritory === manifest.items[i2].price.baseTerritory && observed.price.customerPrices.length === 1;
+    return [[plan.productId, { ...base ? { price: observed.price.customerPrices[0] } : {}, ...isLocked(observed) ? { locked: observed.state } : {} }]];
+  }));
+}
+function printScreenshots(out2, report3, manifestPath, dryRun) {
+  for (const item of report3.items) {
+    if (item.skipped) out2.line(`  \u2717 ${item.productId}   ${item.skipped}`);
+    else if (dryRun) out2.line(`  \xB7 ${item.productId}   would render ${item.screenId} at ${item.price}`);
+    else out2.line(`  \u2713 ${item.productId}   ${item.screenshot}   (${item.screenId}, ${item.price})`);
+  }
+  out2.line();
+  if (dryRun) out2.line("  dry run \u2014 nothing was rendered or written.");
+  else if (report3.items.some((i2) => i2.screenshot)) out2.line(`  manifest updated: ${manifestPath} \u2014 next: himi store iap plan --manifest ${manifestPath} \u2026 uploads them.`);
+}
+async function screenshotsCommand(flags, deps, out2) {
+  const manifestPath = requireFlag(flags, "manifest", "screenshots");
+  const contentDir2 = requireFlag(flags, "content", "screenshots");
+  const manifestText = readInput(deps, manifestPath, "manifest");
+  const manifest = parseIapManifest(manifestText, manifestPath);
+  const facts = await appleFacts(flags, deps, out2, manifest);
+  const renderer = (deps.reviewScreenRenderer ?? createReviewScreenRenderer)();
+  const only = textFlag(flags, "only");
+  const outDir = textFlag(flags, "out-dir");
+  const dryRun = flags["dry-run"] === true;
+  let report3;
+  try {
+    report3 = await takeReviewScreenshots({
+      manifest,
+      manifestPath,
+      manifestText,
+      contentDir: contentDir2,
+      renderer,
+      applePrice: (item) => facts.get(item.productId)?.price,
+      appleLocked: (item) => facts.get(item.productId)?.locked,
+      appleRead: textFlag(flags, "profile") !== void 0,
+      writeBytes: deps.writeBytes ?? writeBinaryFile,
+      writeText: (path2, text9) => deps.writeFileAtomic(path2, text9),
+      ...only ? { only: new Set(only.split(",").map((id) => id.trim()).filter(Boolean)) } : {},
+      ...outDir ? { outDir: resolve57(outDir) } : {},
+      force: flags.force === true,
+      dryRun
+    });
+  } finally {
+    await renderer.close?.();
+  }
+  const code = report3.complete ? void 0 : "screenshots_incomplete";
+  if (out2.json) out2.print({ ok: report3.complete, ...code ? { code } : {}, manifest: manifestPath, items: report3.items });
+  else printScreenshots(out2, report3, manifestPath, dryRun);
+  return report3.complete ? 0 : 1;
+}
+function writeBinaryFile(path2, bytes2) {
+  mkdirSync34(dirname41(path2), { recursive: true });
+  const partial = `${path2}.${process.pid}.partial`;
+  writeFileSync30(partial, bytes2);
+  renameSync12(partial, path2);
+}
 async function runStoreIap(pos, flags, io2, deps) {
   const out2 = new CommandOutput(io2, flags.json === true);
   const sub = pos[2];
@@ -161817,14 +162560,14 @@ function fileJournal(path2) {
 }
 function readLockSummary(path2) {
   try {
-    const { pid, host, at: at2 } = JSON.parse(readFileSync91(path2, "utf8"));
+    const { pid, host, at: at2 } = JSON.parse(readFileSync92(path2, "utf8"));
     return `pid ${pid} on ${host} since ${at2}`;
   } catch {
     return "unreadable lock";
   }
 }
 function acquireApplyLock(dir, appleAppId) {
-  const path2 = join76(dir, "apply.lock");
+  const path2 = join78(dir, "apply.lock");
   const stamp = JSON.stringify({ pid: process.pid, host: hostname(), at: (/* @__PURE__ */ new Date()).toISOString(), token: randomUUID8() });
   try {
     writeFileSync30(path2, stamp, { flag: "wx", mode: 384 });
@@ -161837,15 +162580,15 @@ function acquireApplyLock(dir, appleAppId) {
   return () => {
     let current = "";
     try {
-      current = readFileSync91(path2, "utf8");
+      current = readFileSync92(path2, "utf8");
     } catch {
       return;
     }
-    if (current === stamp) rmSync18(path2, { force: true });
+    if (current === stamp) rmSync19(path2, { force: true });
   };
 }
 function stateDir(appleAppId) {
-  const dir = join76(homedir11(), ".himalaya", "store-iap", appleAppId);
+  const dir = join78(homedir11(), ".himalaya", "store-iap", appleAppId);
   mkdirSync34(dir, { recursive: true, mode: 448 });
   return dir;
 }
@@ -161861,11 +162604,12 @@ async function confirmOnTerminal(question) {
 }
 function defaultStoreIapDeps() {
   return {
-    readFile: (path2) => readFileSync91(path2, "utf8"),
+    readFile: (path2) => readFileSync92(path2, "utf8"),
+    readBytes: (path2) => readFileSync92(path2),
     writeFileAtomic,
     resolveCredentials: ({ profileFlag, target }) => resolveIapCredentials({ profileFlag, target }),
     createApi: (key2) => createIapApi(createAscClient({ key: key2 })),
-    openJournal: (appleAppId) => fileJournal(join76(stateDir(appleAppId), "journal.jsonl")),
+    openJournal: (appleAppId) => fileJournal(join78(stateDir(appleAppId), "journal.jsonl")),
     acquireLock: (appleAppId) => acquireApplyLock(stateDir(appleAppId), appleAppId),
     canPrompt: () => process.stdin.isTTY === true,
     wixTransport: (siteId) => ownerTransport(siteId),
@@ -161876,7 +162620,7 @@ function defaultStoreIapDeps() {
     profileTeam: (profile) => resolveStoreCredentials({ app: profile, cfg: {}, profileFlag: profile, env: {} }).team,
     confirm: confirmOnTerminal,
     now: () => /* @__PURE__ */ new Date(),
-    sleep: (ms2) => new Promise((resolve63) => setTimeout(resolve63, ms2))
+    sleep: (ms2) => new Promise((resolve65) => setTimeout(resolve65, ms2))
   };
 }
 var STORE_IAP_USAGE, SUMMARY_THRESHOLD, SUMMARY_DETAIL_LIMIT, UsageError, CommandOutput, pad, DECISION_ORDER, OUTCOME_ORDER, COMPLETE, DRAFT_MODES, TERRITORY_CODE, LOCALE_CODE, GRID_UNAVAILABLE_NOTE, KeyError, CredentialsError, writesPlanned, COMMANDS;
@@ -161898,10 +162642,12 @@ var init_store_iap = __esm({
     init_iap_config_edit();
     init_store_iap_catalog();
     init_store_iap_connect();
+    init_store_iap_screenshots();
+    init_store_iap_screenshot_render();
     init_store_iap_purchases();
     init_serve_preview();
     init_wix_owner();
-    STORE_IAP_USAGE = "himi store iap draft|plan|apply|status|connect \u2014 draft --site <msid> --profile <name> --apple-app <id> --bundle <id> --base-territory <ISO3> --out <manifest.json> [--territories <a,b>] [--locale <l>] [--mode per-item|tiers] [--merge <manifest.json>] [--report <file>] \xB7 plan --manifest <file> --profile <name> --out <plan.json> \xB7 apply --plan <plan.json> --profile <name> --out <result.json> [--yes] [--limit <n>] \xB7 status --manifest <file> --profile <name> [--out <file>] [--refresh-wix] \xB7 connect --manifest <file> --profile <name> [--iap-key <AuthKey.p8> --iap-key-id <id>] [--content <dir>] [--preview-tag dp-<tag>] [--dry-run] [--yes] [--out <report.json>]";
+    STORE_IAP_USAGE = "himi store iap draft|plan|apply|status|connect|screenshots \u2014 draft --site <msid> --profile <name> --apple-app <id> --bundle <id> --base-territory <ISO3> --out <manifest.json> [--territories <a,b>] [--locale <l>] [--mode per-item|tiers] [--merge <manifest.json>] [--report <file>] \xB7 plan --manifest <file> --profile <name> --out <plan.json> \xB7 apply --plan <plan.json> --profile <name> --out <result.json> [--yes] [--limit <n>] \xB7 status --manifest <file> --profile <name> [--out <file>] [--refresh-wix] \xB7 connect --manifest <file> --profile <name> [--iap-key <AuthKey.p8> --iap-key-id <id>] [--content <dir>] [--preview-tag dp-<tag>] [--dry-run] [--yes] [--out <report.json>] \xB7 screenshots --manifest <file> --content <app dir> [--profile <name>] [--out-dir <dir>] [--only <productId,\u2026>] [--force] [--dry-run]";
     SUMMARY_THRESHOLD = 50;
     SUMMARY_DETAIL_LIMIT = 20;
     UsageError = class extends Error {
@@ -161962,7 +162708,8 @@ var init_store_iap = __esm({
       plan: planCommand,
       apply: applyCommand,
       status: statusCommand,
-      connect: connectCommand
+      connect: connectCommand,
+      screenshots: screenshotsCommand
     };
   }
 });
@@ -162337,15 +163084,15 @@ __export(preflight_app_exports, {
   analyzeSubmissionRecord: () => analyzeSubmissionRecord,
   appIconState: () => appIconState,
   isValidAppStoreSize: () => isValidAppStoreSize,
-  jpegSize: () => jpegSize,
+  jpegSize: () => jpegSize2,
   playListingAssets: () => playListingAssets,
-  pngSize: () => pngSize,
+  pngSize: () => pngSize2,
   preflightApp: () => preflightApp,
   profileAccount: () => profileAccount
 });
-import { readFileSync as readFileSync92, existsSync as existsSync75, readdirSync as readdirSync34, statSync as statSync21 } from "node:fs";
-import { createHash as createHash40 } from "node:crypto";
-import { join as join77 } from "node:path";
+import { readFileSync as readFileSync93, existsSync as existsSync76, readdirSync as readdirSync34, statSync as statSync21 } from "node:fs";
+import { createHash as createHash41 } from "node:crypto";
+import { join as join79 } from "node:path";
 function analyze(projectYml, storeConfig, icon, account) {
   const f2 = [];
   const has = (re2, s2) => re2.test(s2);
@@ -162409,13 +163156,13 @@ function profileAccount(app, storeConfig, opts = {}) {
   }
 }
 async function preflightApp(app, opts = {}) {
-  const projectYml = existsSync75(iosProjectYml(app)) ? readFileSync92(iosProjectYml(app), "utf8") : "";
-  const storeConfig = existsSync75(storeConfigPath(app)) ? readFileSync92(storeConfigPath(app), "utf8") : "";
+  const projectYml = existsSync76(iosProjectYml(app)) ? readFileSync93(iosProjectYml(app), "utf8") : "";
+  const storeConfig = existsSync76(storeConfigPath(app)) ? readFileSync93(storeConfigPath(app), "utf8") : "";
   if (!storeConfig) return [{ level: "error", message: `no apps/${app}/store/store.config.yaml \u2014 run /setup-store-signing first.` }];
   const findings = analyze(
     projectYml,
     storeConfig,
-    await appIconState(join77(appDir(app), "ios")),
+    await appIconState(join79(appDir(app), "ios")),
     profileAccount(app, storeConfig, opts)
   );
   findings.push(...analyzeListing(metadataFilesPresent(app), listScreenshots(app)));
@@ -162444,17 +163191,17 @@ function analyzeSubmissionRecord(appLevel, review, opts) {
   return f2;
 }
 function appLevelMetadataFiles(app, locale = "en-US") {
-  const root = join77(storeDir(app), "metadata");
+  const root = join79(storeDir(app), "metadata");
   const out2 = /* @__PURE__ */ new Set();
-  if (existsSync75(root)) {
+  if (existsSync76(root)) {
     for (const n2 of readdirSync34(root)) if (n2.endsWith(".txt")) out2.add(n2);
   }
-  if (existsSync75(join77(root, locale, "privacy_url.txt"))) out2.add("privacy_url.txt");
+  if (existsSync76(join79(root, locale, "privacy_url.txt"))) out2.add("privacy_url.txt");
   return out2;
 }
 function reviewInfoFiles(app) {
-  const dir = join77(storeDir(app), "review_information");
-  if (!existsSync75(dir)) return /* @__PURE__ */ new Set();
+  const dir = join79(storeDir(app), "review_information");
+  if (!existsSync76(dir)) return /* @__PURE__ */ new Set();
   return new Set(readdirSync34(dir).filter((n2) => n2.endsWith(".txt")));
 }
 function isValidAppStoreSize(w2, h2) {
@@ -162463,7 +163210,7 @@ function isValidAppStoreSize(w2, h2) {
 function isRequired69(w2, h2) {
   return w2 === 1320 && h2 === 2868 || w2 === 1290 && h2 === 2796 || w2 === 2868 && h2 === 1320 || w2 === 2796 && h2 === 1290;
 }
-function pngSize(buf) {
+function pngSize2(buf) {
   if (buf.length < 24 || buf.toString("ascii", 12, 16) !== "IHDR") return null;
   return { w: buf.readUInt32BE(16), h: buf.readUInt32BE(20) };
 }
@@ -162488,7 +163235,7 @@ function jpegStructure(bytes2) {
   }
   return null;
 }
-function jpegSize(buf) {
+function jpegSize2(buf) {
   if (buf.length < 4 || buf[0] !== 255 || buf[1] !== 216) return null;
   let at2 = 2;
   while (at2 + 9 < buf.length) {
@@ -162520,7 +163267,7 @@ function analyzePlayListing(assets) {
   } else {
     const { name, bytes: bytes2 } = assets.featureGraphic;
     const isPng = bytes2.length > 8 && bytes2.toString("ascii", 1, 4) === "PNG";
-    const size = isPng ? pngSize(bytes2) : jpegSize(bytes2);
+    const size = isPng ? pngSize2(bytes2) : jpegSize2(bytes2);
     if (!size) {
       f2.push({
         level: "error",
@@ -162564,12 +163311,12 @@ function analyzePlayListing(assets) {
   return f2;
 }
 function playListingAssets(app, locale = "en-US") {
-  const dir = join77(storeDir(app), "play", locale, "images");
+  const dir = join79(storeDir(app), "play", locale, "images");
   const read = (names) => {
     for (const name of names) {
-      const p2 = join77(dir, name);
+      const p2 = join79(dir, name);
       try {
-        if (statSync21(p2).isFile()) return { name, bytes: readFileSync92(p2) };
+        if (statSync21(p2).isFile()) return { name, bytes: readFileSync93(p2) };
       } catch {
       }
     }
@@ -162600,26 +163347,26 @@ function analyzeListing(metaFiles, shots) {
   return f2;
 }
 function metadataFilesPresent(app, locale = "en-US") {
-  const dir = join77(storeDir(app), "metadata", locale);
-  if (!existsSync75(dir)) return /* @__PURE__ */ new Set();
+  const dir = join79(storeDir(app), "metadata", locale);
+  if (!existsSync76(dir)) return /* @__PURE__ */ new Set();
   return new Set(readdirSync34(dir).filter((n2) => n2.endsWith(".txt")));
 }
 function listScreenshots(app, locale = "en-US") {
   const out2 = [];
-  const flat = join77(storeDir(app), "screenshots", locale);
-  if (existsSync75(flat)) {
+  const flat = join79(storeDir(app), "screenshots", locale);
+  if (existsSync76(flat)) {
     for (const png of readdirSync34(flat).filter((n2) => n2.endsWith(".png"))) {
-      const sz = pngSize(readFileSync92(join77(flat, png)));
+      const sz = pngSize2(readFileSync93(join79(flat, png)));
       if (sz) out2.push({ name: png, w: sz.w, h: sz.h });
     }
   }
-  const legacy = join77(storeDir(app), "metadata", locale, "screenshots");
-  if (existsSync75(legacy)) {
+  const legacy = join79(storeDir(app), "metadata", locale, "screenshots");
+  if (existsSync76(legacy)) {
     for (const deviceDir of readdirSync34(legacy)) {
-      const d2 = join77(legacy, deviceDir);
+      const d2 = join79(legacy, deviceDir);
       if (!statSync21(d2).isDirectory()) continue;
       for (const png of readdirSync34(d2).filter((n2) => n2.endsWith(".png"))) {
-        const sz = pngSize(readFileSync92(join77(d2, png)));
+        const sz = pngSize2(readFileSync93(join79(d2, png)));
         if (sz) out2.push({ name: `${deviceDir}/${png}`, w: sz.w, h: sz.h });
       }
     }
@@ -162627,13 +163374,13 @@ function listScreenshots(app, locale = "en-US") {
   return out2;
 }
 function placeholderHashes2() {
-  const templateIos = join77(appDir("_template"), "ios");
-  if (!existsSync75(templateIos)) return [LEGACY_PLACEHOLDER_SHA2562];
+  const templateIos = join79(appDir("_template"), "ios");
+  if (!existsSync76(templateIos)) return [LEGACY_PLACEHOLDER_SHA2562];
   for (const target of readdirSync34(templateIos)) {
-    const p2 = join77(templateIos, target, "Assets.xcassets", "AppIcon.appiconset", "icon_1024.png");
+    const p2 = join79(templateIos, target, "Assets.xcassets", "AppIcon.appiconset", "icon_1024.png");
     try {
       if (!statSync21(p2).isFile()) continue;
-      return [LEGACY_PLACEHOLDER_SHA2562, createHash40("sha256").update(readFileSync92(p2)).digest("hex")];
+      return [LEGACY_PLACEHOLDER_SHA2562, createHash41("sha256").update(readFileSync93(p2)).digest("hex")];
     } catch {
     }
   }
@@ -162664,13 +163411,13 @@ async function pixelIssues(bytes2) {
   }
 }
 async function appIconState(iosDir) {
-  if (!existsSync75(iosDir)) return { exists: false, isPlaceholder: false, storeIssues: [] };
+  if (!existsSync76(iosDir)) return { exists: false, isPlaceholder: false, storeIssues: [] };
   for (const target of readdirSync34(iosDir)) {
-    const p2 = join77(iosDir, target, "Assets.xcassets", "AppIcon.appiconset", "icon_1024.png");
+    const p2 = join79(iosDir, target, "Assets.xcassets", "AppIcon.appiconset", "icon_1024.png");
     try {
       if (!statSync21(p2).isFile()) continue;
-      const bytes2 = readFileSync92(p2);
-      const hash2 = createHash40("sha256").update(bytes2).digest("hex");
+      const bytes2 = readFileSync93(p2);
+      const hash2 = createHash41("sha256").update(bytes2).digest("hex");
       const pixels = await pixelIssues(bytes2);
       return {
         exists: true,
@@ -162736,7 +163483,7 @@ __export(asc_status_exports, {
   ascStatus: () => ascStatus,
   buildVerdict: () => buildVerdict
 });
-import { readFileSync as readFileSync93 } from "node:fs";
+import { readFileSync as readFileSync94 } from "node:fs";
 function buildVerdict(builds) {
   if (!builds.length) {
     return "NO builds registered \u2014 if you uploaded recently and it's been >15 min, the binary was REJECTED IN PROCESSING (reason is email-only; run validate-binary.ts / scan-purpose-strings.ts to reproduce it).";
@@ -162750,7 +163497,7 @@ function buildVerdict(builds) {
 function client(creds) {
   const env = creds ?? requireEnv(["ASC_KEY_ID", "ASC_ISSUER_ID", "ASC_KEY_PATH"]);
   assertCredentialOutsideRepo("ASC_KEY_PATH", env.ASC_KEY_PATH);
-  const jwt = ascJwt(env.ASC_KEY_ID, env.ASC_ISSUER_ID, readFileSync93(env.ASC_KEY_PATH, "utf8"), Math.floor(Date.now() / 1e3));
+  const jwt = ascJwt(env.ASC_KEY_ID, env.ASC_ISSUER_ID, readFileSync94(env.ASC_KEY_PATH, "utf8"), Math.floor(Date.now() / 1e3));
   return async (path2) => {
     const r2 = await fetch(`${ASC}${path2}`, { headers: { Authorization: `Bearer ${jwt}` } });
     return { status: r2.status, json: await r2.json().catch(() => ({})) };
@@ -162904,7 +163651,7 @@ var init_connector_token = __esm({
 // ../../core/functions-secrets/src/vault.ts
 import { createCipheriv, createDecipheriv as createDecipheriv2, randomBytes as randomBytes6 } from "node:crypto";
 import { mkdir, readFile as readFile2, rename, writeFile as writeFile2 } from "node:fs/promises";
-import { dirname as dirname40 } from "node:path";
+import { dirname as dirname42 } from "node:path";
 function createJsonSecretStore(filePath) {
   const read = async () => {
     try {
@@ -162917,7 +163664,7 @@ function createJsonSecretStore(filePath) {
     }
   };
   const write2 = async (records) => {
-    await mkdir(dirname40(filePath), { recursive: true });
+    await mkdir(dirname42(filePath), { recursive: true });
     const temporary = `${filePath}.${process.pid}.tmp`;
     await writeFile2(temporary, `${JSON.stringify(records, null, 2)}
 `, { mode: 384 });
@@ -163015,7 +163762,7 @@ __export(secrets_exports, {
   runRemoteSecretsCommand: () => runRemoteSecretsCommand,
   runSecretsCommand: () => runSecretsCommand
 });
-import { readFileSync as readFileSync94 } from "node:fs";
+import { readFileSync as readFileSync95 } from "node:fs";
 function environment(value) {
   if (value === "preview" || value === "production") return value;
   throw new Error("--environment must be preview or production");
@@ -163046,7 +163793,7 @@ async function runSecretsCommand(operation, flags, io2, options = {}) {
       io2.log(JSON.stringify(await vault.list({ app, environment: env })));
       return 0;
     }
-    const value = options.readValue ? options.readValue() : readFileSync94(0, "utf8").replace(/\r?\n$/, "");
+    const value = options.readValue ? options.readValue() : readFileSync95(0, "utf8").replace(/\r?\n$/, "");
     if (operation === "set") await vault.set({ app, environment: env, name, value });
     else if (operation === "rotate") await vault.rotate({ app, environment: env, name, value });
     else throw new Error(`unknown secrets operation ${operation}`);
@@ -163075,7 +163822,7 @@ async function runRemoteSecretsCommand(operation, flags, io2, options) {
     }
     let body;
     if (operation !== "list") {
-      const value = options.readValue ? options.readValue() : readFileSync94(0, "utf8").replace(/\r?\n$/, "");
+      const value = options.readValue ? options.readValue() : readFileSync95(0, "utf8").replace(/\r?\n$/, "");
       body = JSON.stringify({ value });
     }
     const response = await (options.fetchImpl ?? fetch)(url, { method: operation === "list" ? "GET" : operation === "set" ? "PUT" : "POST", headers: headers2, body });
@@ -163269,7 +164016,7 @@ var init_site_member = __esm({
 });
 
 // src/notify-ping-all.ts
-import { createHash as createHash41 } from "node:crypto";
+import { createHash as createHash42 } from "node:crypto";
 async function listApprovedMembers(input) {
   const first = await scanMembers(input);
   const second = await scanMembers(input);
@@ -163323,7 +164070,7 @@ async function scanMembers(input) {
   }
 }
 function campaignRequestId(campaignId, memberId) {
-  const bytes2 = createHash41("sha256").update(JSON.stringify(["himi-push-campaign", campaignId, memberId])).digest().subarray(0, 16);
+  const bytes2 = createHash42("sha256").update(JSON.stringify(["himi-push-campaign", campaignId, memberId])).digest().subarray(0, 16);
   bytes2[6] = bytes2[6] & 15 | 80;
   bytes2[8] = bytes2[8] & 63 | 128;
   const hex2 = bytes2.toString("hex");
@@ -163373,7 +164120,7 @@ __export(notify_ping_exports, {
   runNotifyPing: () => runNotifyPing
 });
 import { randomUUID as randomUUID9 } from "node:crypto";
-import { resolve as resolve56 } from "node:path";
+import { resolve as resolve58 } from "node:path";
 function refuse6(io2, error, hint, exit = 2, extra = {}) {
   io2.error(JSON.stringify({ ok: false, error, ...hint ? { hint } : {}, ...extra }));
   return exit;
@@ -163384,7 +164131,7 @@ async function runNotifyPing(flags, io2, deps = {}) {
   const allMembers = flags["all-members"] === true;
   if (allMembers && text8(flags["member-email"])) return refuse6(io2, "recipient_conflict", "Choose --all-members or --member-email.");
   if (allMembers && flags["dry-run"] !== true && flags.yes !== true) return refuse6(io2, "confirmation_required", "Preview with --dry-run, then add --yes to send to every approved member.");
-  const input = mergePushInputs(pushInputsFromContent(resolve56(text8(flags.content) ?? process.cwd())), flags);
+  const input = mergePushInputs(pushInputsFromContent(resolve58(text8(flags.content) ?? process.cwd())), flags);
   const missing = [...input.app ? [] : ["app"], ...input.site ? [] : ["site"], ...REQUIRED_FLAGS.filter((f2) => !(allMembers && f2 === "member-email") && !text8(flags[f2]))];
   if (missing.length) return refuse6(io2, "needs_input", "Name the app and site (or --content), the member's login email, a title and a link.", 2, { missing });
   const requestId2 = text8(flags["request-id"]) ?? (deps.newRequestId ?? randomUUID9)();
@@ -163470,7 +164217,7 @@ async function runAllMembers(args) {
     const result = await sendCampaign({
       recipients,
       campaignId: requestId2,
-      wait: deps.wait ?? ((ms2) => new Promise((resolve63) => setTimeout(resolve63, ms2))),
+      wait: deps.wait ?? ((ms2) => new Promise((resolve65) => setTimeout(resolve65, ms2))),
       onProgress: (completed) => {
         if (completed % 10 === 0 || completed === recipients.length) {
           io2.log(JSON.stringify({ ok: true, state: "progress", campaignId: requestId2, completed, recipients: recipients.length }));
@@ -163573,15 +164320,15 @@ __export(notify_exports, {
   runNotify: () => runNotify,
   saveAdminSession: () => saveAdminSession
 });
-import { chmodSync as chmodSync3, mkdirSync as mkdirSync35, readFileSync as readFileSync95, writeFileSync as writeFileSync31 } from "node:fs";
+import { chmodSync as chmodSync3, mkdirSync as mkdirSync35, readFileSync as readFileSync96, writeFileSync as writeFileSync31 } from "node:fs";
 import { homedir as homedir12 } from "node:os";
-import { dirname as dirname41, join as join78 } from "node:path";
+import { dirname as dirname43, join as join80 } from "node:path";
 function defaultSessionsPath() {
-  return process.env.HIMI_ADMIN_SESSIONS_FILE ?? join78(homedir12(), ".himalaya", "admin-sessions.json");
+  return process.env.HIMI_ADMIN_SESSIONS_FILE ?? join80(homedir12(), ".himalaya", "admin-sessions.json");
 }
 function loadSessionsFile(path2 = defaultSessionsPath()) {
   try {
-    return JSON.parse(readFileSync95(path2, "utf8"));
+    return JSON.parse(readFileSync96(path2, "utf8"));
   } catch {
     return {};
   }
@@ -163589,10 +164336,10 @@ function loadSessionsFile(path2 = defaultSessionsPath()) {
 function saveAdminSession(adminUrl, session, path2 = defaultSessionsPath()) {
   const file2 = loadSessionsFile(path2);
   file2.sessions = { ...file2.sessions, [adminUrl]: session };
-  mkdirSync35(dirname41(path2), { recursive: true, mode: 448 });
+  mkdirSync35(dirname43(path2), { recursive: true, mode: 448 });
   writeFileSync31(path2, JSON.stringify(file2, null, 2) + "\n", { mode: 384 });
   try {
-    chmodSync3(dirname41(path2), 448);
+    chmodSync3(dirname43(path2), 448);
     chmodSync3(path2, 384);
   } catch {
   }
@@ -163958,20 +164705,20 @@ __export(base44_auth_exports, {
   usableBase44Auth: () => usableBase44Auth,
   writeBase44Session: () => writeBase44Session
 });
-import { chmodSync as chmodSync4, existsSync as existsSync76, mkdirSync as mkdirSync36, readFileSync as readFileSync96, rmSync as rmSync19, writeFileSync as writeFileSync32 } from "node:fs";
+import { chmodSync as chmodSync4, existsSync as existsSync77, mkdirSync as mkdirSync36, readFileSync as readFileSync97, rmSync as rmSync20, writeFileSync as writeFileSync32 } from "node:fs";
 import { homedir as homedir13 } from "node:os";
-import { dirname as dirname42, join as join79 } from "node:path";
+import { dirname as dirname44, join as join81 } from "node:path";
 function base44ApiBase(env = process.env) {
   return (env.BASE44_API_URL?.trim() || "https://app.base44.com").replace(/\/+$/, "");
 }
 function base44SessionPath(home = homedir13()) {
-  return join79(home, ".himi", "base44", "session.json");
+  return join81(home, ".himi", "base44", "session.json");
 }
 function readBase44Session(home) {
   const p2 = base44SessionPath(home);
-  if (!existsSync76(p2)) return void 0;
+  if (!existsSync77(p2)) return void 0;
   try {
-    const s2 = JSON.parse(readFileSync96(p2, "utf8"));
+    const s2 = JSON.parse(readFileSync97(p2, "utf8"));
     return typeof s2.accessToken === "string" && s2.accessToken ? s2 : void 0;
   } catch {
     return void 0;
@@ -163979,7 +164726,7 @@ function readBase44Session(home) {
 }
 function writeBase44Session(session, home) {
   const p2 = base44SessionPath(home);
-  mkdirSync36(dirname42(p2), { recursive: true, mode: 448 });
+  mkdirSync36(dirname44(p2), { recursive: true, mode: 448 });
   writeFileSync32(p2, `${JSON.stringify(session, null, 2)}
 `, { mode: 384 });
   chmodSync4(p2, 384);
@@ -163987,8 +164734,8 @@ function writeBase44Session(session, home) {
 }
 function deleteBase44Session(home) {
   const p2 = base44SessionPath(home);
-  if (!existsSync76(p2)) return false;
-  rmSync19(p2, { force: true });
+  if (!existsSync77(p2)) return false;
+  rmSync20(p2, { force: true });
   return true;
 }
 function jwtClaims(token) {
@@ -164082,9 +164829,9 @@ async function base44DeviceLogin(opts) {
   throw new Error("the Base44 sign-in code expired before it was approved \u2014 run `himi base44 login` again");
 }
 function importBase44CliSession(home = homedir13(), env = process.env) {
-  const src = join79(home, ".base44", "auth", "auth.json");
-  if (!existsSync76(src)) throw new Error(`no Base44 CLI session at ${src} \u2014 run \`npx base44 login\` first, or use \`himi base44 login\``);
-  const a2 = JSON.parse(readFileSync96(src, "utf8"));
+  const src = join81(home, ".base44", "auth", "auth.json");
+  if (!existsSync77(src)) throw new Error(`no Base44 CLI session at ${src} \u2014 run \`npx base44 login\` first, or use \`himi base44 login\``);
+  const a2 = JSON.parse(readFileSync97(src, "utf8"));
   if (typeof a2.accessToken !== "string" || !a2.accessToken) throw new Error(`${src} holds no access token`);
   const session = {
     accessToken: a2.accessToken,
@@ -164255,10 +165002,10 @@ function assertPublicSiteUrl(raw) {
   if (refusal) throw new Error(refusal);
 }
 function resolveAll(hostname3) {
-  return new Promise((resolve63, reject) => {
+  return new Promise((resolve65, reject) => {
     dnsLookup(hostname3, { all: true, verbatim: true }, (err, addresses) => {
       if (err) reject(err);
-      else resolve63(addresses);
+      else resolve65(addresses);
     });
   });
 }
@@ -164266,13 +165013,13 @@ function withAbort(start, signal, what) {
   if (signal?.aborted) return Promise.reject(new Error(`${what} aborted`));
   const work = start();
   if (!signal) return work;
-  return new Promise((resolve63, reject) => {
+  return new Promise((resolve65, reject) => {
     const onAbort = () => reject(new Error(`${what} aborted`));
     signal.addEventListener("abort", onAbort, { once: true });
-    work.then(resolve63, reject).finally(() => signal.removeEventListener("abort", onAbort));
+    work.then(resolve65, reject).finally(() => signal.removeEventListener("abort", onAbort));
   });
 }
-async function pinAddress(url, resolve63 = resolveAll, signal) {
+async function pinAddress(url, resolve65 = resolveAll, signal) {
   const host = url.hostname.replace(/^\[|\]$/g, "");
   if (ipv4Octets(host)) {
     if (isBlockedAddress(host)) throw new Error(`${host} is a blocked address`);
@@ -164282,7 +165029,7 @@ async function pinAddress(url, resolve63 = resolveAll, signal) {
     if (isBlockedAddress(host)) throw new Error(`${host} is a blocked address`);
     return { address: host, family: 6 };
   }
-  const addresses = await withAbort(() => resolve63(host), signal, `${host} lookup`);
+  const addresses = await withAbort(() => resolve65(host), signal, `${host} lookup`);
   if (!addresses.length) throw new Error(`${host} resolved to no address`);
   const blocked = addresses.filter((a2) => isBlockedAddress(a2.address)).map((a2) => a2.address);
   if (blocked.length) throw new Error(`${host} resolves to a blocked address (${blocked.join(", ")})`);
@@ -164322,7 +165069,7 @@ function copyIncomingHeaders(headers2) {
   return out2;
 }
 function requestOnce(url, pinned, init) {
-  return new Promise((resolve63, reject) => {
+  return new Promise((resolve65, reject) => {
     const headers2 = { host: url.host, "accept-encoding": "identity" };
     new Headers(init.headers ?? {}).forEach((value, key2) => {
       if (key2.toLowerCase() !== "host") headers2[key2] = value;
@@ -164352,7 +165099,7 @@ function requestOnce(url, pinned, init) {
           reject(err);
           return;
         }
-        resolve63(new Response(body, { status, statusText: res.statusMessage ?? "", headers: out2 }));
+        resolve65(new Response(body, { status, statusText: res.statusMessage ?? "", headers: out2 }));
       }
     );
     req.on("error", reject);
@@ -166324,7 +167071,7 @@ var init_brand_font = __esm({
 
 // src/site-analyze/write-artifacts.ts
 import { mkdirSync as mkdirSync37, writeFileSync as writeFileSync33 } from "node:fs";
-import { join as join80 } from "node:path";
+import { join as join82 } from "node:path";
 function attachVeloSources(book, sources, put) {
   const byPath = new Map((sources ?? []).map((s2) => [s2.path, s2.text]));
   for (const f2 of book.velo.files) {
@@ -166479,12 +167226,12 @@ async function downloadMedia(book, fetchImpl, put) {
 }
 async function writeBusinessBook(result, opts) {
   const out2 = opts.outDir;
-  mkdirSync37(join80(out2, "evidence/pages"), { recursive: true });
-  mkdirSync37(join80(out2, "media/catalog"), { recursive: true });
+  mkdirSync37(join82(out2, "evidence/pages"), { recursive: true });
+  mkdirSync37(join82(out2, "media/catalog"), { recursive: true });
   const files = [];
   const put = (rel, body) => {
-    const p2 = join80(out2, rel);
-    mkdirSync37(join80(p2, ".."), { recursive: true });
+    const p2 = join82(out2, rel);
+    mkdirSync37(join82(p2, ".."), { recursive: true });
     writeFileSync33(p2, body);
     files.push(rel);
   };
@@ -167388,11 +168135,11 @@ var init_analyze = __esm({
 });
 
 // src/base44-analyze/write-artifacts.ts
-import { existsSync as existsSync77, mkdirSync as mkdirSync38, readFileSync as readFileSync97, rmSync as rmSync20, writeFileSync as writeFileSync34 } from "node:fs";
-import { dirname as dirname43, join as join81, resolve as resolve57, sep as sep19 } from "node:path";
+import { existsSync as existsSync78, mkdirSync as mkdirSync38, readFileSync as readFileSync98, rmSync as rmSync21, writeFileSync as writeFileSync34 } from "node:fs";
+import { dirname as dirname45, join as join83, resolve as resolve59, sep as sep19 } from "node:path";
 function isBookFolder(dir) {
   try {
-    return JSON.parse(readFileSync97(join81(dir, "book.json"), "utf8")).kind === "base44-app-book";
+    return JSON.parse(readFileSync98(join83(dir, "book.json"), "utf8")).kind === "base44-app-book";
   } catch {
     return false;
   }
@@ -167466,7 +168213,7 @@ function renderBookMd(book) {
   return L2.join("\n");
 }
 function writeBase44Book(result, outDir, opts = {}) {
-  const out2 = resolve57(outDir);
+  const out2 = resolve59(outDir);
   const book = result.book;
   const files = [];
   const shots = (opts.screenshots ?? []).filter((s2) => safeRel(s2.filename) && !s2.filename.includes("/"));
@@ -167479,26 +168226,26 @@ function writeBase44Book(result, outDir, opts = {}) {
   const md = renderBookMd(book);
   assertNoSecrets(json6);
   assertNoSecrets(md);
-  const owned = ["book.json", "BOOK.md", "source", "screenshots"].filter((n2) => existsSync77(join81(out2, n2)));
+  const owned = ["book.json", "BOOK.md", "source", "screenshots"].filter((n2) => existsSync78(join83(out2, n2)));
   if (owned.length) {
     if (!isBookFolder(out2)) throw new Error(`refusing to write the app book into ${out2}: it already has ${owned.join(", ")} that ${owned.length === 1 ? "is" : "are"} not from an app book \u2014 pick an empty --out`);
-    for (const d2 of ["source", "screenshots"]) rmSync20(join81(out2, d2), { recursive: true, force: true });
+    for (const d2 of ["source", "screenshots"]) rmSync21(join83(out2, d2), { recursive: true, force: true });
   }
   mkdirSync38(out2, { recursive: true });
-  writeFileSync34(join81(out2, "book.json"), json6);
-  writeFileSync34(join81(out2, "BOOK.md"), md);
+  writeFileSync34(join83(out2, "book.json"), json6);
+  writeFileSync34(join83(out2, "BOOK.md"), md);
   files.push("book.json", "BOOK.md");
   for (const s2 of shots) {
-    mkdirSync38(join81(out2, "screenshots"), { recursive: true });
-    writeFileSync34(join81(out2, "screenshots", s2.filename), s2.bytes);
+    mkdirSync38(join83(out2, "screenshots"), { recursive: true });
+    writeFileSync34(join83(out2, "screenshots", s2.filename), s2.bytes);
     files.push(`screenshots/${s2.filename}`);
   }
-  const sourceRoot = join81(out2, "source");
+  const sourceRoot = join83(out2, "source");
   for (const f2 of result.sourceFiles) {
     if (!safeRel(f2.path)) continue;
-    const dest = join81(sourceRoot, ...f2.path.split("/"));
+    const dest = join83(sourceRoot, ...f2.path.split("/"));
     if (!dest.startsWith(sourceRoot + sep19)) continue;
-    mkdirSync38(dirname43(dest), { recursive: true });
+    mkdirSync38(dirname45(dest), { recursive: true });
     writeFileSync34(dest, f2.bytes);
   }
   if (result.sourceFiles.length) files.push(`source/ (${result.sourceFiles.length} files)`);
@@ -168369,10 +169116,10 @@ function permuteDomain(domain, allowSpecialUseDomain) {
 }
 function createPromiseCallback(cb) {
   let callback;
-  let resolve63;
+  let resolve65;
   let reject;
   const promise = new Promise((_resolve, _reject) => {
-    resolve63 = _resolve;
+    resolve65 = _resolve;
     reject = _reject;
   });
   if (typeof cb === "function") {
@@ -168388,7 +169135,7 @@ function createPromiseCallback(cb) {
     callback = (err, result) => {
       try {
         if (err) reject(err);
-        else resolve63(result);
+        else resolve65(result);
       } catch (e2) {
         reject(e2 instanceof Error ? e2 : new Error());
       }
@@ -171040,9 +171787,9 @@ __export(cli_exports, {
   systemTar: () => systemTar
 });
 import { execFile } from "node:child_process";
-import { mkdirSync as mkdirSync39, mkdtempSync as mkdtempSync4, rmSync as rmSync21, writeFileSync as writeFileSync35 } from "node:fs";
-import { tmpdir as tmpdir5 } from "node:os";
-import { join as join82, resolve as resolve58 } from "node:path";
+import { mkdirSync as mkdirSync39, mkdtempSync as mkdtempSync5, rmSync as rmSync22, writeFileSync as writeFileSync35 } from "node:fs";
+import { tmpdir as tmpdir6 } from "node:os";
+import { join as join84, resolve as resolve60 } from "node:path";
 import { promisify } from "node:util";
 function projectDownloader(apiFetch, apiBase, token, extract = systemTar) {
   return async (appId2) => {
@@ -171055,11 +171802,11 @@ function projectDownloader(apiFetch, apiBase, token, extract = systemTar) {
     }
     const bytes2 = await readCapped(res, MAX_TARBALL_BYTES);
     if (!bytes2) throw new Error(`project download is over the ${MAX_TARBALL_BYTES}-byte cap`);
-    const root = mkdtempSync4(join82(tmpdir5(), "himi-base44-"));
-    const cleanup = () => rmSync21(root, { recursive: true, force: true });
+    const root = mkdtempSync5(join84(tmpdir6(), "himi-base44-"));
+    const cleanup = () => rmSync22(root, { recursive: true, force: true });
     try {
-      const archive = join82(root, "project.tar");
-      const dir = join82(root, "project");
+      const archive = join84(root, "project.tar");
+      const dir = join84(root, "project");
       writeFileSync35(archive, bytes2);
       mkdirSync39(dir);
       await extract(archive, dir);
@@ -171097,7 +171844,7 @@ async function runBase44Analyze(opts) {
     now: opts.now ?? (() => /* @__PURE__ */ new Date())
   };
   const result = await analyzeBase44({ url: opts.url, appId: opts.appId, sample: opts.sample }, ports);
-  const written = writeBase44Book(result, resolve58(opts.cwd ?? process.cwd(), opts.outDir ?? ".himi/base44-book"), { screenshots });
+  const written = writeBase44Book(result, resolve60(opts.cwd ?? process.cwd(), opts.outDir ?? ".himi/base44-book"), { screenshots });
   return { ok: true, out: written.outDir, files: written.files, mode: result.book.mode, gaps: result.book.gaps, book: result.book };
 }
 var MAX_TARBALL_BYTES, systemTar;
@@ -171131,7 +171878,7 @@ var init_errors2 = __esm({
 });
 
 // src/one-app/collect.ts
-import { createHash as createHash42 } from "node:crypto";
+import { createHash as createHash43 } from "node:crypto";
 function isObject2(value) {
   return value !== null && typeof value === "object" && !Array.isArray(value);
 }
@@ -171203,7 +171950,7 @@ function semanticFingerprint(structure) {
     }
     return JSON.stringify(value);
   };
-  return createHash42("sha256").update(canonical4(structure, true)).digest("hex");
+  return createHash43("sha256").update(canonical4(structure, true)).digest("hex");
 }
 async function collectOneApp(input, deps = {}) {
   if (typeof input.metaSiteId !== "string" || !UUID.test(input.metaSiteId)) {
@@ -171616,9 +172363,9 @@ __export(cli_exports2, {
   ONE_APP_WORKFLOW: () => ONE_APP_WORKFLOW,
   runOneAppCommand: () => runOneAppCommand
 });
-import { closeSync as closeSync7, constants as constants4, lstatSync as lstatSync21, mkdirSync as mkdirSync40, openSync as openSync6, readFileSync as readFileSync98, realpathSync as realpathSync14, writeFileSync as writeFileSync36 } from "node:fs";
-import { createHash as createHash43 } from "node:crypto";
-import { dirname as dirname44, join as join83, parse as parse3, resolve as resolve59 } from "node:path";
+import { closeSync as closeSync7, constants as constants4, lstatSync as lstatSync21, mkdirSync as mkdirSync40, openSync as openSync6, readFileSync as readFileSync99, realpathSync as realpathSync14, writeFileSync as writeFileSync36 } from "node:fs";
+import { createHash as createHash44 } from "node:crypto";
+import { dirname as dirname46, join as join85, parse as parse3, resolve as resolve61 } from "node:path";
 function readOptions(argv, cwd, commandIncluded) {
   let cursor = 0;
   const skipGlobalSwitches = () => {
@@ -171659,10 +172406,10 @@ function readOptions(argv, cwd, commandIncluded) {
   let prompt = flags.prompt ?? "";
   if (flags["prompt-file"] !== void 0) {
     try {
-      const file2 = resolve59(cwd, flags["prompt-file"]);
+      const file2 = resolve61(cwd, flags["prompt-file"]);
       const stat2 = lstatSync21(file2);
       if (!stat2.isFile() || stat2.size > MAX_PROMPT_BYTES) throw new Error("invalid prompt file");
-      prompt = readFileSync98(file2, "utf8");
+      prompt = readFileSync99(file2, "utf8");
     } catch {
       throw new OneAppError("invalid_prompt", "Use a readable text file of at most 64 KiB for --prompt-file.");
     }
@@ -171677,8 +172424,8 @@ function readOptions(argv, cwd, commandIncluded) {
   if (flags.dir !== void 0 && !flags.dir.trim()) {
     throw new OneAppError("invalid_output_path", "Pass a parent directory with --dir.");
   }
-  const parentDir = resolve59(cwd, flags.dir ?? ".");
-  const workspace = join83(parentDir, name);
+  const parentDir = resolve61(cwd, flags.dir ?? ".");
+  const workspace = join85(parentDir, name);
   assertSafeParents(parentDir);
   if (pathExists(workspace)) throw new OneAppError("output_exists", "The destination already exists. Choose a new --name or --dir.");
   return { metaSiteId, appInstance, prompt, name, parentDir, workspace, target };
@@ -171707,7 +172454,7 @@ function assertSafeParents(path2) {
         throw new OneAppError("invalid_output_path", "The output parent cannot be inspected.");
       }
     }
-    current = dirname44(current);
+    current = dirname46(current);
   }
 }
 function writePrivate(path2, contents, append) {
@@ -171735,7 +172482,7 @@ Collect the source mobile app and hand it to the current coding agent. The agent
   const hashes = {};
   const diskWrite = deps.writeFile ?? writePrivate;
   const put = (name, content) => {
-    const path2 = join83(evidenceDir, name);
+    const path2 = join85(evidenceDir, name);
     try {
       assertSafeParents(evidenceDir);
       diskWrite(path2, content, false);
@@ -171743,7 +172490,7 @@ Collect the source mobile app and hand it to the current coding agent. The agent
       throw new OneAppError("artifact_write_failed", "Could not save the migration evidence. Existing files were kept.", { stage });
     }
     artifacts[name] = path2;
-    hashes[name] = createHash43("sha256").update(content).digest("hex");
+    hashes[name] = createHash44("sha256").update(content).digest("hex");
     return path2;
   };
   const progress = (nextStage) => {
@@ -171751,7 +172498,7 @@ Collect the source mobile app and hand it to the current coding agent. The agent
     if (!evidenceDir) return;
     try {
       assertSafeParents(evidenceDir);
-      diskWrite(join83(evidenceDir, "progress.jsonl"), JSON.stringify({ stage, at: now() }) + "\n", true);
+      diskWrite(join85(evidenceDir, "progress.jsonl"), JSON.stringify({ stage, at: now() }) + "\n", true);
     } catch {
       throw new OneAppError("artifact_write_failed", "Could not record migration progress. Existing files were kept.", { stage });
     }
@@ -171767,7 +172514,7 @@ Collect the source mobile app and hand it to the current coding agent. The agent
       assertSafeParents(options.parentDir);
       mkdirSync40(options.workspace, { mode: 448 });
       if (realpathSync14(options.workspace) !== options.workspace) throw new Error("destination changed");
-      evidenceDir = join83(options.workspace, ".himi", "one-app");
+      evidenceDir = join85(options.workspace, ".himi", "one-app");
       mkdirSync40(evidenceDir, { recursive: true, mode: 448 });
     } catch (error) {
       if (error.code === "EEXIST") {
@@ -173583,15 +174330,15 @@ var init_customer_build = __esm({
 });
 
 // src/site-analyze/apply.ts
-import { existsSync as existsSync78, readFileSync as readFileSync99, writeFileSync as writeFileSync37, copyFileSync as copyFileSync2, mkdirSync as mkdirSync41, realpathSync as realpathSync15, statSync as statSync22 } from "node:fs";
-import { dirname as dirname45, isAbsolute as isAbsolute8, join as join84, resolve as resolve60, sep as sep20 } from "node:path";
+import { existsSync as existsSync79, readFileSync as readFileSync100, writeFileSync as writeFileSync37, copyFileSync as copyFileSync2, mkdirSync as mkdirSync41, realpathSync as realpathSync15, statSync as statSync22 } from "node:fs";
+import { dirname as dirname47, isAbsolute as isAbsolute8, join as join86, resolve as resolve62, sep as sep20 } from "node:path";
 import { spawnSync as spawnSync4 } from "node:child_process";
 function unpairedRedirectNote(overlay) {
   if (!overlay.wix?.clientId || overlay.wix.redirectUri) return void 0;
   return `no OAuth redirect paired with client ${overlay.wix.clientId} \u2014 the app (and prepare:customer) will refuse to start until one is set. Register it with \`himi site client ensure --site ${overlay.siteId?.trim() || "<msid>"} --redirect-uri <uri> --yes\`, then re-run analyze with \`--redirect-uri <uri>\` (or export HIMI_BRANDED_LITE_WIX_REDIRECT_URI)`;
 }
 function posix4(p2) {
-  return resolve60(p2).replace(/\\/g, "/");
+  return resolve62(p2).replace(/\\/g, "/");
 }
 function committedShellProvisioning(path2) {
   return committedShellFor(posix4(path2));
@@ -173599,8 +174346,8 @@ function committedShellProvisioning(path2) {
 function findRepoRoot(cwd) {
   let dir = cwd;
   for (let i2 = 0; i2 < 8; i2++) {
-    if (SHELL_NAMES2.some((name) => existsSync78(join84(dir, shellAppDir(name), "package.json")))) return dir;
-    const next = dirname45(dir);
+    if (SHELL_NAMES2.some((name) => existsSync79(join86(dir, shellAppDir(name), "package.json")))) return dir;
+    const next = dirname47(dir);
     if (next === dir) break;
     dir = next;
   }
@@ -173625,7 +174372,7 @@ function assertNotCommitted(path2, forbidden2) {
       `refusing to overwrite committed ${committedProvisioningPath(committed)} \u2014 use prepare:customer --contract`
     );
   }
-  if (forbidden2 && resolve60(path2) === resolve60(forbidden2)) {
+  if (forbidden2 && resolve62(path2) === resolve62(forbidden2)) {
     const named = committedShellProvisioning(forbidden2);
     throw new Error(
       `refusing to overwrite committed ${named ? committedProvisioningPath(named) : forbidden2} \u2014 pass a content-package provisioning.json or use prepare:customer --contract`
@@ -173702,24 +174449,24 @@ function sameKnownSite(previous, next) {
 }
 function buildMergedContract(options) {
   const { appDir: appDir3, packageDir, overlay } = options;
-  const committedPath = join84(appDir3, "provisioning.json");
-  if (!existsSync78(committedPath)) {
+  const committedPath = join86(appDir3, "provisioning.json");
+  if (!existsSync79(committedPath)) {
     throw new Error(`shell has no committed provisioning.json at ${committedPath} to build a contract from`);
   }
-  const committed = JSON.parse(readFileSync99(committedPath, "utf8"));
+  const committed = JSON.parse(readFileSync100(committedPath, "utf8"));
   const merged = mergeCustomerOwned(committed, overlay);
   const overlayFontFamily = (overlay.branding ?? {}).fontFamily;
   const branding = merged.branding ?? {};
   const staged = [];
   const contained = (root, rel) => {
     if (isAbsolute8(rel)) return void 0;
-    const full = resolve60(root, rel);
-    return full.startsWith(resolve60(root) + sep20) ? full : void 0;
+    const full = resolve62(root, rel);
+    return full.startsWith(resolve62(root) + sep20) ? full : void 0;
   };
   const stage = (fromRel, toRel) => {
     const from = contained(packageDir, fromRel);
-    const to2 = contained(join84(appDir3, STAGED), toRel.slice(STAGED.length + 1));
-    if (!from || !to2 || !existsSync78(from)) return void 0;
+    const to2 = contained(join86(appDir3, STAGED), toRel.slice(STAGED.length + 1));
+    if (!from || !to2 || !existsSync79(from)) return void 0;
     let real;
     let realRoot;
     try {
@@ -173731,7 +174478,7 @@ function buildMergedContract(options) {
     if (!real.startsWith(realRoot + sep20)) return void 0;
     try {
       if (!statSync22(real).isFile()) return void 0;
-      mkdirSync41(dirname45(to2), { recursive: true });
+      mkdirSync41(dirname47(to2), { recursive: true });
       copyFileSync2(real, to2);
     } catch {
       return void 0;
@@ -173741,11 +174488,11 @@ function buildMergedContract(options) {
   };
   const icon = stage("media/icon.png", `${STAGED}/icon.png`);
   if (icon) branding.appIconPath = icon;
-  const facesPath = join84(packageDir, "media/fonts/faces.json");
-  if (existsSync78(facesPath)) {
+  const facesPath = join86(packageDir, "media/fonts/faces.json");
+  if (existsSync79(facesPath)) {
     let faces = [];
     try {
-      const parsed = JSON.parse(readFileSync99(facesPath, "utf8"));
+      const parsed = JSON.parse(readFileSync100(facesPath, "utf8"));
       faces = Array.isArray(parsed) ? parsed : [];
     } catch {
       faces = [];
@@ -173766,10 +174513,10 @@ function buildMergedContract(options) {
   merged.branding = branding;
   const body = `${JSON.stringify(merged, null, 2)}
 `;
-  const path2 = join84(packageDir, "provisioning.contract.json");
+  const path2 = join86(packageDir, "provisioning.contract.json");
   writeFileSync37(path2, body);
-  const localPath2 = join84(appDir3, LOCAL_CONTRACT_REL);
-  mkdirSync41(dirname45(localPath2), { recursive: true });
+  const localPath2 = join86(appDir3, LOCAL_CONTRACT_REL);
+  mkdirSync41(dirname47(localPath2), { recursive: true });
   writeFileSync37(localPath2, body);
   staged.push(localPath2);
   return { path: path2, staged };
@@ -173803,10 +174550,10 @@ function catalogTypography(overlay, template) {
 function staticFaqFor(overlay, overlayPath) {
   const own5 = overlay.faq;
   if (own5 !== void 0) return deriveStaticFaq(own5);
-  const bookPath = join84(dirname45(resolve60(overlayPath)), "book.json");
-  if (!existsSync78(bookPath)) return void 0;
+  const bookPath = join86(dirname47(resolve62(overlayPath)), "book.json");
+  if (!existsSync79(bookPath)) return void 0;
   try {
-    const book = JSON.parse(readFileSync99(bookPath, "utf8"));
+    const book = JSON.parse(readFileSync100(bookPath, "utf8"));
     const copy = book?.copy;
     if (!copy || typeof copy !== "object" || copy.unavailable) return void 0;
     const pairs = deriveStaticFaq(copy.faq);
@@ -173820,10 +174567,10 @@ function staticGalleriesFor(overlay, overlayPath) {
   if (overlay.galleries !== void 0) return deriveStaticGalleries(
     overlay.galleries.map((gallery) => ({ role: "gallery", title: gallery.title, galleryImageUrls: gallery.photos }))
   );
-  const bookPath = join84(dirname45(resolve60(overlayPath)), "book.json");
-  if (!existsSync78(bookPath)) return void 0;
+  const bookPath = join86(dirname47(resolve62(overlayPath)), "book.json");
+  if (!existsSync79(bookPath)) return void 0;
   try {
-    const book = JSON.parse(readFileSync99(bookPath, "utf8"));
+    const book = JSON.parse(readFileSync100(bookPath, "utf8"));
     if (!book.look || book.look.unavailable || !Array.isArray(book.look.pages)) return void 0;
     const galleries = deriveStaticGalleries(book.look.pages);
     return galleries.length || book.look.complete === true ? galleries : void 0;
@@ -173832,11 +174579,11 @@ function staticGalleriesFor(overlay, overlayPath) {
   }
 }
 async function applyOverlays(input) {
-  const cwd = resolve60(input.cwd);
+  const cwd = resolve62(input.cwd);
   const shell = input.shell ?? DEFAULT_BRANDABLE_SHELL;
   assertKnownShell(shell);
-  const overlay = JSON.parse(readFileSync99(input.overlayPath, "utf8"));
-  const tokens2 = JSON.parse(readFileSync99(input.tokensPath, "utf8"));
+  const overlay = JSON.parse(readFileSync100(input.overlayPath, "utf8"));
+  const tokens2 = JSON.parse(readFileSync100(input.tokensPath, "utf8"));
   const faq = staticFaqFor(overlay, input.overlayPath);
   if (faq !== void 0) overlay.faq = faq;
   const galleries = staticGalleriesFor(overlay, input.overlayPath);
@@ -173853,15 +174600,15 @@ async function applyOverlays(input) {
         `shell "${shell}" cannot bake a customer brand \u2014 it ships no prepare:customer script`
       );
     }
-    const appDir3 = join84(repoRoot2, shellAppDir(shell));
-    const committedPath = join84(appDir3, "provisioning.json");
-    const committedSite = existsSync78(committedPath) ? JSON.parse(readFileSync99(committedPath, "utf8")).site : void 0;
+    const appDir3 = join86(repoRoot2, shellAppDir(shell));
+    const committedPath = join86(appDir3, "provisioning.json");
+    const committedSite = existsSync79(committedPath) ? JSON.parse(readFileSync100(committedPath, "utf8")).site : void 0;
     if (committedSite !== void 0 && overlay.site === void 0) {
       throw new Error(
         `shell "${shell}" is a site shell: its contract names the customer's website (a \`site\` block), and this overlay has none. Re-run \`himi site analyze --url <site> --shell ${shell}\` to derive the site's page map (edit \`site.pages\` in provisioning.overlay.json if needed), then --apply.`
       );
     }
-    const packageDir = dirname45(resolve60(input.overlayPath));
+    const packageDir = dirname47(resolve62(input.overlayPath));
     const { path: contract, staged } = buildMergedContract({ appDir: appDir3, packageDir, overlay });
     wrote.push(...staged);
     const r2 = spawnSync4("npm", ["run", "prepare:customer", "--", "--contract", contract], {
@@ -173882,9 +174629,9 @@ async function applyOverlays(input) {
       note: `prepare:customer --contract with a merged contract (committed provisioning.json untouched)${unpairedInRepo ? ` \xB7 ${unpairedInRepo}` : ""}`
     };
   }
-  const pkgProv = join84(cwd, "provisioning.json");
+  const pkgProv = join86(cwd, "provisioning.json");
   assertNotCommitted(pkgProv, input.forbiddenProvisioning);
-  const contentPath = join84(cwd, "himalaya.content.json");
+  const contentPath = join86(cwd, "himalaya.content.json");
   const syncViewNames = (before, after) => {
     const content = readContentManifest(cwd);
     if (!content) return;
@@ -173896,8 +174643,8 @@ async function applyOverlays(input) {
   };
   let packageFaq = faq;
   let packageGalleries = galleries;
-  if (existsSync78(pkgProv)) {
-    const cur = JSON.parse(readFileSync99(pkgProv, "utf8"));
+  if (existsSync79(pkgProv)) {
+    const cur = JSON.parse(readFileSync100(pkgProv, "utf8"));
     if (galleries === void 0 && !sameKnownSite(cur, overlay)) overlay.galleries = [];
     const merged = deepMerge4(cur, overlay);
     packageFaq = merged.faq;
@@ -173913,9 +174660,9 @@ async function applyOverlays(input) {
   if (Array.isArray(packageGalleries) && packageGalleries.length && !overlay.installedVerticals.includes("galleries")) {
     overlay.installedVerticals.push("galleries");
   }
-  const pkgTokens = join84(cwd, "tokens.json");
-  if (existsSync78(pkgTokens) && (tokens2.colors || tokens2.typography)) {
-    const cur = JSON.parse(readFileSync99(pkgTokens, "utf8"));
+  const pkgTokens = join86(cwd, "tokens.json");
+  if (existsSync79(pkgTokens) && (tokens2.colors || tokens2.typography)) {
+    const cur = JSON.parse(readFileSync100(pkgTokens, "utf8"));
     let tokensIn = tokens2;
     if (tokens2.typography) {
       const fonts = catalogTypography(tokens2.typography, cur.typography);
@@ -173940,9 +174687,9 @@ async function applyOverlays(input) {
     wrote.push(pkgTokens);
   }
   const homeAction = homeRefreshActionId(shell);
-  const homeSrc = join84(cwd, "dev/index.ts");
-  if (homeAction && existsSync78(homeSrc)) {
-    const prev = readFileSync99(homeSrc, "utf8");
+  const homeSrc = join86(cwd, "dev/index.ts");
+  if (homeAction && existsSync79(homeSrc)) {
+    const prev = readFileSync100(homeSrc, "utf8");
     const patched = patchBrandParams(prev, overlay, homeAction);
     let next = patched.src;
     if (!patched.foreign && faq?.length && prev.includes('"tier5.himiBrandedFaq.load"') && !prev.includes('"staticFaq"')) {
@@ -173977,13 +174724,13 @@ async function applyOverlays(input) {
       notes.push(`${patched.unparsed} onAppear params block(s) in ${homeSrc} could not be read \u2014 any brand values inside them were not applied`);
     }
   }
-  if (!input.iconPath || !existsSync78(input.iconPath)) {
-    const book = input.iconPath ? dirname45(dirname45(resolve60(input.iconPath))) : void 0;
+  if (!input.iconPath || !existsSync79(input.iconPath)) {
+    const book = input.iconPath ? dirname47(dirname47(resolve62(input.iconPath))) : void 0;
     notes.push(
       book ? `no icon installed \u2014 ${siteLogoAbsence(book).hint}` : "no icon installed and no business book to say why \u2014 `himi icon generate` draws one from the accent, or `himi icon set <file.png>` installs the customer's own mark"
     );
   }
-  if (input.iconPath && existsSync78(input.iconPath)) {
+  if (input.iconPath && existsSync79(input.iconPath)) {
     try {
       const installed = await installIcon(cwd, input.iconPath, { derivePlay: true });
       wrote.push(...installed.wrote);
@@ -174941,8 +175688,8 @@ __export(cli_exports3, {
   runSiteAnalyze: () => runSiteAnalyze,
   runSiteFunctionCli: () => runSiteFunctionCli
 });
-import { existsSync as existsSync79, readFileSync as readFileSync100 } from "node:fs";
-import { resolve as resolve61 } from "node:path";
+import { existsSync as existsSync80, readFileSync as readFileSync101 } from "node:fs";
+import { resolve as resolve63 } from "node:path";
 function applyNeedsClient(shell) {
   if (shell === void 0 || !SHELL_NAMES2.includes(shell)) return true;
   return !isSiteShell(shell);
@@ -174966,7 +175713,7 @@ async function runSiteAnalyze(opts) {
   const assetFetch = assetFetchFor(opts);
   const siteFetch = guardedSiteFetch;
   const cwd = opts.cwd ?? process.cwd();
-  const outDir = resolve61(cwd, opts.outDir ?? ".himi/business-book");
+  const outDir = resolve63(cwd, opts.outDir ?? ".himi/business-book");
   let ownerAuth;
   let msid;
   const ownerSite = ownerSiteFor(opts);
@@ -174993,14 +175740,14 @@ async function runSiteAnalyze(opts) {
   if (opts.shell !== void 0 && isSiteShell(opts.shell)) {
     try {
       const kind = siteKindForOrigin(result.book.input.siteUrl);
-      const book = kind === "base44" ? base44BookRoutes(resolve61(cwd, ".himi/base44-book/book.json"), result.book.input.siteUrl) : void 0;
+      const book = kind === "base44" ? base44BookRoutes(resolve63(cwd, ".himi/base44-book/book.json"), result.book.input.siteUrl) : void 0;
       const routes = book?.routes;
       if (book?.skipped) result.warnings = [...result.warnings ?? [], book.skipped];
       const derived = deriveSiteShell({ siteUrl: result.book.input.siteUrl, look: result.book.look, kind, routes });
-      const prevOverlayPath = resolve61(outDir, "provisioning.overlay.json");
-      const prevSite = existsSync79(prevOverlayPath) ? (() => {
+      const prevOverlayPath = resolve63(outDir, "provisioning.overlay.json");
+      const prevSite = existsSync80(prevOverlayPath) ? (() => {
         try {
-          return JSON.parse(readFileSync100(prevOverlayPath, "utf8")).site;
+          return JSON.parse(readFileSync101(prevOverlayPath, "utf8")).site;
         } catch {
           return void 0;
         }
@@ -175017,9 +175764,9 @@ async function runSiteAnalyze(opts) {
       ];
     }
   }
-  const previousOverlay = resolve61(outDir, "provisioning.overlay.json");
+  const previousOverlay = resolve63(outDir, "provisioning.overlay.json");
   carryOverGoals(
-    existsSync79(previousOverlay) ? readFileSync100(previousOverlay, "utf8") : void 0,
+    existsSync80(previousOverlay) ? readFileSync101(previousOverlay, "utf8") : void 0,
     result.provisioningOverlay
   );
   const ownerCall = ownerAuth ? ownerTransportFrom(fetchImpl, ownerAuth) : void 0;
@@ -175038,9 +175785,9 @@ async function runSiteAnalyze(opts) {
   if (opts.apply) {
     applied = await applyOverlays({
       cwd,
-      overlayPath: resolve61(outDir, "provisioning.overlay.json"),
-      tokensPath: resolve61(outDir, "tokens.overlay.json"),
-      iconPath: resolve61(outDir, "media/icon.png"),
+      overlayPath: resolve63(outDir, "provisioning.overlay.json"),
+      tokensPath: resolve63(outDir, "tokens.overlay.json"),
+      iconPath: resolve63(outDir, "media/icon.png"),
       shell: opts.shell
     });
     const note = noteWithWarnings(applied.note, warnings);
@@ -175076,8 +175823,8 @@ async function runSiteFunctionCli(opts) {
   const token = opts.token ?? await siteToken(msid);
   let source;
   if (opts.sourcePath) {
-    const p2 = resolve61(opts.cwd ?? process.cwd(), opts.sourcePath);
-    source = readFileSync100(p2, "utf8");
+    const p2 = resolve63(opts.cwd ?? process.cwd(), opts.sourcePath);
+    source = readFileSync101(p2, "utf8");
   }
   let body;
   if (opts.bodyRaw != null) {
@@ -175105,9 +175852,9 @@ async function runSiteFunctionCli(opts) {
   });
 }
 function base44BookRoutes(bookPath, siteUrl) {
-  if (!existsSync79(bookPath)) return void 0;
+  if (!existsSync80(bookPath)) return void 0;
   try {
-    const book = JSON.parse(readFileSync100(bookPath, "utf8"));
+    const book = JSON.parse(readFileSync101(bookPath, "utf8"));
     if (book.kind !== "base44-app-book" || !Array.isArray(book.routes)) return void 0;
     const host = (u2) => {
       try {
@@ -175156,7 +175903,7 @@ async function accountToken2(spawnImpl = spawn6) {
     cached2 = fromEnv;
     return fromEnv;
   }
-  const token = await new Promise((resolve63, reject) => {
+  const token = await new Promise((resolve65, reject) => {
     let child;
     try {
       child = spawnImpl("wix", ["token"]);
@@ -175185,7 +175932,7 @@ async function accountToken2(spawnImpl = spawn6) {
     const scan = (d2) => {
       out2 += String(d2);
       const m2 = out2.match(TOKEN_RE2);
-      if (m2) done(() => resolve63(m2[0]));
+      if (m2) done(() => resolve65(m2[0]));
     };
     child.stdout?.on("data", scan);
     child.stderr?.on("data", scan);
@@ -175362,7 +176109,7 @@ __export(site_create_exports, {
   runSiteList: () => runSiteList,
   writeProvisioningBinding: () => writeProvisioningBinding
 });
-import { existsSync as existsSync80, readFileSync as readFileSync101, writeFileSync as writeFileSync38 } from "node:fs";
+import { existsSync as existsSync81, readFileSync as readFileSync102, writeFileSync as writeFileSync38 } from "node:fs";
 import { resolve as resolvePath2 } from "node:path";
 function oauthClientName(projectName) {
   return `${projectName} client`;
@@ -175511,7 +176258,7 @@ async function runSiteCreate(opts) {
   if (!wantOauthApp) return { ...base, nextSteps: nextSteps(metaSiteId) };
   return { ...base, clientId, redirectUri, nextSteps: nextSteps(metaSiteId, clientId) };
 }
-function writeProvisioningBinding(target, binding2, fs2 = { existsSync: existsSync80, readFileSync: readFileSync101, writeFileSync: writeFileSync38 }) {
+function writeProvisioningBinding(target, binding2, fs2 = { existsSync: existsSync81, readFileSync: readFileSync102, writeFileSync: writeFileSync38 }) {
   const msid = binding2.siteId;
   const path2 = resolvePath2(target);
   const committed = committedShellProvisioning(path2);
@@ -176208,12 +176955,12 @@ var init_context = __esm({
 });
 
 // src/cli.ts
-import { mkdtempSync as mkdtempSync5, readFileSync as readFileSync102, mkdirSync as mkdirSync42, writeFileSync as writeFileSync39, existsSync as existsSync81, rmSync as rmSync22, readdirSync as readdirSync35, statSync as statSync23, lstatSync as lstatSync22, accessSync, constants as constants5, renameSync as renameSync12, cpSync as cpSync3 } from "node:fs";
+import { mkdtempSync as mkdtempSync6, readFileSync as readFileSync103, mkdirSync as mkdirSync42, writeFileSync as writeFileSync39, existsSync as existsSync82, rmSync as rmSync23, readdirSync as readdirSync35, statSync as statSync23, lstatSync as lstatSync22, accessSync, constants as constants5, renameSync as renameSync13, cpSync as cpSync3 } from "node:fs";
 import { execFile as execFile2, execFileSync as execFileSync7, spawnSync as spawnSync5, spawn as spawn7 } from "node:child_process";
 import { AsyncLocalStorage as AsyncLocalStorage2 } from "node:async_hooks";
-import { createHash as createHash44, randomUUID as randomUUID11 } from "node:crypto";
-import { tmpdir as tmpdir6, homedir as homedir14, hostname as hostname2 } from "node:os";
-import { join as join85, resolve as resolve62, relative as relative15, basename as basename19, dirname as dirname46 } from "node:path";
+import { createHash as createHash45, randomUUID as randomUUID11 } from "node:crypto";
+import { tmpdir as tmpdir7, homedir as homedir14, hostname as hostname2 } from "node:os";
+import { join as join87, resolve as resolve64, relative as relative16, basename as basename21, dirname as dirname48 } from "node:path";
 import { fileURLToPath as fileURLToPath29 } from "node:url";
 
 // ../serve-cli/src/client.ts
@@ -176510,8 +177257,16 @@ var ServeCliClient = class {
     const { bytes: bytes2, gzip } = encodePublishBody(publishReleaseBody(payload, meta, draft));
     const headers2 = { ...this.ctrlHeaders(), ...gzip ? { "content-encoding": "gzip" } : {} };
     const res = await this.request("control", "POST", "/v1/admin/release", { rawBody: bytes2, headers: headers2 });
-    if (gzip && res.status === 400 && res.json?.error === "bad_json") {
-      const json6 = { code: "compressed_publish_unsupported", error: "compressed_publish_unsupported", hint: "this body is over the plain publish cap, and the plane did not accept it compressed: either the plane predates gzip publish bodies (it needs a serve deploy), or this is a self-serve credential, which keeps the plain 8 MB cap" };
+    const refusal = res.json;
+    const decodedOverPlainCap = res.status === 413 && refusal?.error === "payload_too_large" && refusal.limit === MAX_PUBLISH_BODY_BYTES && bytes2.byteLength <= MAX_PUBLISH_BODY_BYTES;
+    if (gzip && (res.status === 400 && refusal?.error === "bad_json" || decodedOverPlainCap)) {
+      const json6 = {
+        code: "compressed_publish_unsupported",
+        error: "compressed_publish_unsupported",
+        hint: "this body is over the plain publish cap, and the plane did not accept it compressed: either the plane predates compressed publish bodies (it needs a serve deploy), or this is a self-serve credential, which keeps the plain 8 MB cap",
+        sentBytes: bytes2.byteLength,
+        ...typeof refusal?.bytes === "number" ? { planeCountedBytes: refusal.bytes } : {}
+      };
       return { ...res, json: json6, text: JSON.stringify(json6) };
     }
     return res;
@@ -178287,8 +179042,8 @@ var str9 = (v2) => typeof v2 === "string" ? v2 : void 0;
 var num3 = (v2) => typeof v2 === "string" && v2 !== "" && Number.isFinite(Number(v2)) ? Number(v2) : void 0;
 function embeddedTemplateCatalog() {
   return availableTemplates().map((name) => {
-    const path2 = join85(templateSourceDir(name), TEMPLATE_META_FILE);
-    const meta = JSON.parse(readFileSync102(path2, "utf8"));
+    const path2 = join87(templateSourceDir(name), TEMPLATE_META_FILE);
+    const meta = JSON.parse(readFileSync103(path2, "utf8"));
     if (!meta || typeof meta.title !== "string" || typeof meta.description !== "string" || !Array.isArray(meta.tags)) {
       throw new Error(`${path2} must be { title: string, description: string, tags: string[], category?: string }`);
     }
@@ -178848,6 +179603,13 @@ var USAGE = `himi \u2014 the Himalaya authoring CLI (remote dev loop)
                                            conflict, never overwritten. --content records the
                                            purchases app as wixIap in the app's config.ts.
                                            No build, signing or repo checkout. Guide: himi docs iap-products
+  himi store iap screenshots --manifest <file> --content <app dir> [--profile <name>] [--out-dir <dir>]
+                      [--only <productId,\u2026>] [--force] [--dry-run] [--json]
+                                           render each product's purchase screen from the app, as a
+                                           signed-in member sees it on a bound iPhone (Apple price, buy
+                                           button), save it at 1290\xD72796 and name it as the item's
+                                           reviewScreenshot. --profile reads Apple's price (read-only)
+                                           and skips live products. Guide: himi docs iap-products
   himi logout [--target <t>]               clear the stored control token for a target
   himi notify setup --content <dir> [--target wix] [--yes] [--no-push-setup]
       Optional Branded/Ping setup. Prompts for site, native IDs and APNs key file.
@@ -179158,7 +179920,7 @@ var COMMANDS2 = [
   { name: "visibility", summary: "read (no value) or set whether the public registry (/v1/apps + the Himi Player picker) LISTS the app. `public` lists it for everyone; `unlisted` hides it from listings while direct reads by app id \u2014 deep links, previews \u2014 keep working. App from --app or the content dir. Setting it needs no republish.", required: "[public|unlisted] [--app <a>] [--content <dir>] (--control-token)" },
   { name: "dist", summary: "build an INSTALLABLE QA binary (signed IPA / APK) on the Wix Job Service Mac pool and return an install link \u2014 the serve plane brokers the job, the pool builds it. WAITS for the build by default (~4 min) and prints the install link; `--no-wait` returns a jobId immediately instead. Omitting `--release` builds whatever is LIVE for the app. A named draft is refused unless `--allow-draft` makes that exceptional build explicit. `status <jobId>` / `watch <jobId>` / `list --app <a>` / `cancel <jobId>` inspect and stop builds (`watch` reports up front whether the job mints its own signing identity or borrows one, so a doomed iOS build is cancellable in seconds rather than after the archive). Off-repo, name a target \u2014 `--target wix` for a self-serve Wix login or `--target bo` for the internal employee path (the in-repo default is a local dev plane that isn't reachable off-repo); self-serve callers may build their OWN apps under a tighter budget (2 in flight / 5 per 24h), while a manage-only owner-role credential is refused. `--shell` picks the native host to sign into (branded-lite | owner-lite | brandy | base44 | player | demo-app) and defaults to the content package's himalaya.content.json `shell` (templates carry the one they were written for), else branded-lite. The per-app shells ADD the release's declared capabilities to the binary, while Himi Player and demo-app refuse a release declaring one they lack; `--plan` previews it without building; `brandy` is the site shell \u2014 the customer's own website as native-framed tabs. `--signing` defaults to `wix-managed` \u2014 the Wix Apple account mints a per-app signing identity for the build, so the caller provisions no Apple credentials of their own; `--signing byo --site <id>` reuses an existing customer ad-hoc profile and certificate for iOS; requires an owned site and a completed personal signing binding. `--android-signing` is the Android counterpart and a SEPARATE axis (a keystore, not an Apple account): `qa-keystore` (default \u2014 the repo's committed QA key, identical on every pool machine, so a build installs over the previous one), `wix-keystore` (the Wix key the pool machine carries; the build FAILS naming the paths searched if it carries none, rather than quietly signing with something else), or `debug` (the old per-machine key \u2014 QA must uninstall any previous build first). NOT the normal way to ship: screens, Tier-5 bundles, tokens and app-config all go over the air with `himi push` in seconds \u2014 a binary trip is only needed for a NATIVE delta (a new SDUI component, a new declared capability/entitlement, a new bundle id, or a minBinaryVersion floor bump). Refuses to build an app whose launcher icon is missing, a placeholder, or one a store would reject \u2014 the one thing a binary carries that no later OTA push can fix; `--force` builds anyway", required: "[--app <a>] [--platform ios,android] [--release <id>] [--allow-draft] [--target <t>] [--shell branded-lite|owner-lite|brandy|base44|player|demo-app] [--signing wix-managed|byo] [--site <id>] [--android-signing qa-keystore|wix-keystore|debug] [--borrow-ios-id <bundleId>] [--no-wait] [--force] [--plan] | status <jobId> [--target <t>] | watch <jobId> [--target <t>] [--interval <ms>] | list --app <a> [--target <t>] | cancel <jobId> [--target <t>]" },
   { name: "testflight", summary: 'build, sign and upload an app to TestFlight (internal testers \u2014 no Beta App Review), then WAIT until App Store Connect finishes processing it. Sugar for `store upload --track testflight`. Prompts first: a build number is consumed permanently on a real Apple account and cannot be reused \u2014 `--yes` for CI, `--dry-run` to see the plan without touching anything. The wait is the real check, not a nicety: fastlane prints "Successfully uploaded" for a binary App Store Connect then rejects in processing, and a rejected binary leaves NO build record at all (the reason is emailed). Public App Store review is deliberately NOT automatable here \u2014 `--track appstore` is refused; use /submit-ios-app when you mean to go public', required: "<app> [--track testflight|internal] [--profile <name>] [--yes] [--dry-run] [--skip-build] [--no-wait] [--json]" },
-  { name: "store", summary: "the App Store Connect group behind `testflight`. `preflight <app>` checks readiness offline (icon, entitlements, encryption flag, version, store.config ids, listing + review record); `upload <app>` is what `testflight` runs; `status <app>` reads live build + processing state. `--profile` selects WHICH App Store Connect account: an app built for a Wix customer ships under the CUSTOMER's Apple team (Apple guideline 4.2.6 forbids an app-generation service submitting on a client's behalf), declared per-app as ios.credentialProfile in store.config.yaml and resolved from ~/.himalaya/store-credentials/<name>.json \u2014 the .p8 itself never enters the repo. `iap draft|plan|apply|status|connect` registers an app owner's digital products as in-app purchases (non-consumables, or consumable price tiers): draft reads the Wix catalog and writes the manifest, plan and status only read, apply is the one App Store mutation boundary, connect readies the Wix site to sell them (purchases app, In-App Purchase key, appleIAP provider, product mappings; --preview-tag routes only its Serve calls to a deploy preview), and none of them builds, signs or needs a checkout (`himi docs iap-products`)", required: "preflight <app> [--profile <n>] | upload <app> [--track <t>] [--profile <n>] [--yes] [--dry-run] | status <app> [--profile <n>] | iap draft --site <msid> --profile <n> --apple-app <id> --bundle <id> --base-territory <t> --out <f> [--territories <a,b>] [--locale <l>] [--mode per-item|tiers] [--merge <f>] [--report <f>] [--json] | iap plan --manifest <f> --profile <n> --out <f> [--json] | iap apply --plan <f> --profile <n> --out <f> [--yes] [--limit <n>] [--json] | iap status --manifest <f> --profile <n> [--out <f>] [--json] | iap connect --manifest <f> --profile <n> [--iap-key <AuthKey.p8> --iap-key-id <id>] [--content <dir>] [--preview-tag dp-<tag>] [--dry-run] [--yes] [--out <f>] [--json]" },
+  { name: "store", summary: "the App Store Connect group behind `testflight`. `preflight <app>` checks readiness offline (icon, entitlements, encryption flag, version, store.config ids, listing + review record); `upload <app>` is what `testflight` runs; `status <app>` reads live build + processing state. `--profile` selects WHICH App Store Connect account: an app built for a Wix customer ships under the CUSTOMER's Apple team (Apple guideline 4.2.6 forbids an app-generation service submitting on a client's behalf), declared per-app as ios.credentialProfile in store.config.yaml and resolved from ~/.himalaya/store-credentials/<name>.json \u2014 the .p8 itself never enters the repo. `iap draft|plan|apply|status|connect|screenshots` registers an app owner's digital products as in-app purchases (non-consumables, or consumable price tiers): draft reads the Wix catalog and writes the manifest, plan and status only read, apply is the one App Store mutation boundary, connect readies the Wix site to sell them (purchases app, In-App Purchase key, appleIAP provider, product mappings; --preview-tag routes only its Serve calls to a deploy preview), screenshots renders each product's purchase screen from the app (--content) as a bound iPhone shows it to a signed-in member and names the 1290\xD72796 PNG as the item's App Review screenshot, and none of them builds, signs or needs a checkout (`himi docs iap-products`)", required: "preflight <app> [--profile <n>] | upload <app> [--track <t>] [--profile <n>] [--yes] [--dry-run] | status <app> [--profile <n>] | iap draft --site <msid> --profile <n> --apple-app <id> --bundle <id> --base-territory <t> --out <f> [--territories <a,b>] [--locale <l>] [--mode per-item|tiers] [--merge <f>] [--report <f>] [--json] | iap plan --manifest <f> --profile <n> --out <f> [--json] | iap apply --plan <f> --profile <n> --out <f> [--yes] [--limit <n>] [--json] | iap status --manifest <f> --profile <n> [--out <f>] [--json] | iap connect --manifest <f> --profile <n> [--iap-key <AuthKey.p8> --iap-key-id <id>] [--content <dir>] [--preview-tag dp-<tag>] [--dry-run] [--yes] [--out <f>] [--json] | iap screenshots --manifest <f> --content <dir> [--profile <n>] [--out-dir <d>] [--only <id,\u2026>] [--force] [--dry-run] [--json]" },
   { name: "guide", summary: "print the Himalaya overview + headless dev loop + available topics (offline)", required: "[--json]" },
   { name: "docs", summary: "print bundled/verified cached guides offline; status reports kit identity; refresh downloads compatible reference content independently of CLI without changing app source", required: "[<topic>|catalog [kind]|status|refresh] [--pin <version|digest>] [--unpin] [--no-network] [--json]" },
   { name: "components", summary: "print the SDUI component vocabulary + props; a name = that component (offline)", required: "[<Name>] [--json]" },
@@ -179175,7 +179937,7 @@ var COMMANDS2 = [
 ];
 function cliVersion() {
   try {
-    return JSON.parse(readFileSync102(new URL("../package.json", import.meta.url), "utf8")).version ?? "unknown";
+    return JSON.parse(readFileSync103(new URL("../package.json", import.meta.url), "utf8")).version ?? "unknown";
   } catch {
     return "unknown";
   }
@@ -179226,18 +179988,18 @@ function createScopedRegistryResolver(exec = execNpmConfig) {
 }
 var SCOPED_REGISTRY_TIMEOUT_MS = 5e3;
 function execNpmConfig(file2, args, options) {
-  return new Promise((resolve63, reject) => {
-    execFile2(file2, args, { ...options, windowsHide: true }, (error, stdout) => error ? reject(error) : resolve63(String(stdout)));
+  return new Promise((resolve65, reject) => {
+    execFile2(file2, args, { ...options, windowsHide: true }, (error, stdout) => error ? reject(error) : resolve65(String(stdout)));
   });
 }
 var npmScopedWixRegistry = createScopedRegistryResolver();
 async function scopedRegistryBefore(lookup3, deadline, onTimeout) {
   let cancel = () => {
   };
-  const expired = new Promise((resolve63) => {
+  const expired = new Promise((resolve65) => {
     const timer = setTimeout(() => {
       onTimeout?.();
-      resolve63(void 0);
+      resolve65(void 0);
     }, Math.max(0, deadline - Date.now()));
     cancel = () => clearTimeout(timer);
   });
@@ -179300,18 +180062,18 @@ function ageInDays(publishedAt, now = Date.now()) {
 }
 function packageVersion(path2) {
   try {
-    const version4 = JSON.parse(readFileSync102(path2, "utf8")).version;
+    const version4 = JSON.parse(readFileSync103(path2, "utf8")).version;
     return typeof version4 === "string" && version4 ? version4 : void 0;
   } catch {
     return void 0;
   }
 }
 function resolvedSdkVersion(fromDir = process.cwd(), bundledManifest = new URL("./authoring-runtime/node_modules/@wix/himalaya/package.json", import.meta.url)) {
-  let dir = resolve62(fromDir);
+  let dir = resolve64(fromDir);
   for (; ; ) {
-    const version4 = packageVersion(join85(dir, "node_modules", "@wix", "himalaya", "package.json"));
+    const version4 = packageVersion(join87(dir, "node_modules", "@wix", "himalaya", "package.json"));
     if (version4) return { version: version4, source: "local" };
-    const parent = dirname46(dir);
+    const parent = dirname48(dir);
     if (parent === dir) break;
     dir = parent;
   }
@@ -179319,7 +180081,7 @@ function resolvedSdkVersion(fromDir = process.cwd(), bundledManifest = new URL("
   if (bundled) return { version: bundled, source: "bundled" };
   try {
     const root = execFileSync7("npm", ["root", "-g"], { stdio: ["ignore", "pipe", "ignore"] }).toString().trim();
-    const version4 = root ? packageVersion(join85(root, "@wix", "himalaya", "package.json")) : void 0;
+    const version4 = root ? packageVersion(join87(root, "@wix", "himalaya", "package.json")) : void 0;
     return version4 ? { version: version4, source: "global" } : {};
   } catch {
     return {};
@@ -179366,11 +180128,11 @@ var UPDATE_RETRY_AFTER_FAILURE_MS = 60 * 60 * 1e3;
 var UPDATE_SNOOZE_MS = 24 * 60 * 60 * 1e3;
 var UPDATE_REEXEC_ENV = "HIMI_UPDATED_ONCE";
 function updateCachePath(env = process.env) {
-  return env.HIMI_UPDATE_CACHE_FILE ?? join85(homedir14(), ".himalaya", "update-check.json");
+  return env.HIMI_UPDATE_CACHE_FILE ?? join87(homedir14(), ".himalaya", "update-check.json");
 }
 function readUpdateCache(path2) {
   try {
-    const parsed = JSON.parse(readFileSync102(path2, "utf8"));
+    const parsed = JSON.parse(readFileSync103(path2, "utf8"));
     return parsed && typeof parsed === "object" ? parsed : {};
   } catch {
     return {};
@@ -179378,7 +180140,7 @@ function readUpdateCache(path2) {
 }
 function writeUpdateCache(path2, cache) {
   try {
-    mkdirSync42(dirname46(path2), { recursive: true, mode: 448 });
+    mkdirSync42(dirname48(path2), { recursive: true, mode: 448 });
     writeFileSync39(path2, JSON.stringify(cache, null, 2) + "\n", { mode: 384 });
   } catch {
   }
@@ -179439,12 +180201,12 @@ function createUpdateRunner(spawn8 = spawnSync5) {
     },
     installedVersion: () => {
       const root = globalNodeModulesRoot();
-      return root ? packageVersion(join85(root, "@wix", "himalaya-cli", "package.json")) : void 0;
+      return root ? packageVersion(join87(root, "@wix", "himalaya-cli", "package.json")) : void 0;
     },
     reexec: (argv) => {
       const root = globalNodeModulesRoot();
-      const entry = root ? join85(root, "@wix", "himalaya-cli", "dist", "cli.mjs") : void 0;
-      if (!entry || !existsSync81(entry)) return void 0;
+      const entry = root ? join87(root, "@wix", "himalaya-cli", "dist", "cli.mjs") : void 0;
+      if (!entry || !existsSync82(entry)) return void 0;
       const result = spawnSync5(process.execPath, [entry, ...argv], {
         // inherit keeps PIPED STDIN working — commands that read stdin must survive a re-exec.
         stdio: "inherit",
@@ -179491,7 +180253,7 @@ function staleUpdateLockFile(cachePath, now) {
   for (const path2 of [`${cachePath}.lock.break`, `${cachePath}.lock`]) {
     let content;
     try {
-      content = readFileSync102(path2, "utf8");
+      content = readFileSync103(path2, "utf8");
     } catch {
       continue;
     }
@@ -179514,7 +180276,7 @@ function acquireUpdateLock(cachePath, now, hooks = {}) {
   const mine = lockStamp(now);
   const readLock = (path2) => {
     try {
-      return readFileSync102(path2, "utf8");
+      return readFileSync103(path2, "utf8");
     } catch {
       return void 0;
     }
@@ -179529,13 +180291,13 @@ function acquireUpdateLock(cachePath, now, hooks = {}) {
   };
   const removeIfMine = (path2) => {
     try {
-      if (readLock(path2) === mine) rmSync22(path2, { force: true });
+      if (readLock(path2) === mine) rmSync23(path2, { force: true });
     } catch {
     }
   };
   const release2 = () => removeIfMine(lockPath);
   try {
-    mkdirSync42(dirname46(lockPath), { recursive: true, mode: 448 });
+    mkdirSync42(dirname48(lockPath), { recursive: true, mode: 448 });
   } catch {
     return () => {
     };
@@ -179552,7 +180314,7 @@ function acquireUpdateLock(cachePath, now, hooks = {}) {
       hooks.underBreakLock?.();
       if (current === void 0) return tryCreate(lockPath) ? release2 : void 0;
       if (!isAbandoned(current)) return void 0;
-      rmSync22(lockPath, { force: true });
+      rmSync23(lockPath, { force: true });
       return tryCreate(lockPath) ? release2 : void 0;
     } finally {
       removeIfMine(breakPath);
@@ -179648,7 +180410,7 @@ function createTrimValidator(deps = {}, spawnFn = spawn7) {
     return { code, counts, ...errors ? { errors } : {}, ...code !== 0 ? { tail: said.slice(-4e3) } : {} };
   };
   return async (dir, opts = {}) => {
-    const argv = ["validate", "--content", resolve62(dir), "--strict", "--skip-version-check"];
+    const argv = ["validate", "--content", resolve64(dir), "--strict", "--skip-version-check"];
     if (!opts.fresh) {
       const out2 = [];
       const err = [];
@@ -180106,7 +180868,7 @@ function executableOnPath(name, env = process.env) {
   const suffixes = process.platform === "win32" ? (env.PATHEXT ?? ".COM;.EXE;.BAT;.CMD").split(";").filter(Boolean) : [""];
   for (const dir of entries) {
     for (const suffix of suffixes) {
-      const candidate = join85(dir, `${name}${suffix}`);
+      const candidate = join87(dir, `${name}${suffix}`);
       try {
         if (!statSync23(candidate).isFile()) continue;
         if (process.platform !== "win32") accessSync(candidate, constants5.X_OK);
@@ -180215,7 +180977,7 @@ async function nativeConfigAdvisories(app, configSource) {
     const { iosProjectYml: iosProjectYml2 } = await Promise.resolve().then(() => (init_paths2(), paths_exports));
     const { androidOptedIn: androidOptedIn3, LABEL_IOS_SPLASH: LABEL_IOS_SPLASH2 } = await Promise.resolve().then(() => (init_splash(), splash_exports));
     const iosYmlPath = iosProjectYml2(app);
-    const iosYml = existsSync81(iosYmlPath) ? readFileSync102(iosYmlPath, "utf8") : "";
+    const iosYml = existsSync82(iosYmlPath) ? readFileSync103(iosYmlPath, "utf8") : "";
     let optedIn = iosYml.includes(LABEL_IOS_SPLASH2);
     if (!optedIn) {
       const { androidManifestPath: androidManifestPath3 } = await Promise.resolve().then(() => (init_gen_native_config(), gen_native_config_exports));
@@ -180229,13 +180991,13 @@ async function nativeConfigAdvisories(app, configSource) {
 }
 function readConfigSource(dir) {
   try {
-    return readFileSync102(join85(dir, "config.ts"), "utf8");
+    return readFileSync103(join87(dir, "config.ts"), "utf8");
   } catch {
     return null;
   }
 }
 function writePngFile(path2, base64) {
-  mkdirSync42(dirname46(path2), { recursive: true });
+  mkdirSync42(dirname48(path2), { recursive: true });
   writeFileSync39(path2, Buffer.from(base64, "base64"));
   return path2;
 }
@@ -180282,8 +181044,8 @@ function keptPlan(kept) {
 var NoBase44SlotError = class extends Error {
 };
 async function initFromRemoteTemplate(name, parentDir, template, c2, opts = {}) {
-  const dir = resolve62(parentDir, name);
-  if (existsSync81(join85(dir, "himalaya.content.json"))) {
+  const dir = resolve64(parentDir, name);
+  if (existsSync82(join87(dir, "himalaya.content.json"))) {
     throw new Error(`content package already exists at ${dir}`);
   }
   const r2 = await c2.fetchTemplateSource(TEMPLATE_APP_PREFIX + template);
@@ -180298,7 +181060,7 @@ async function initFromRemoteTemplate(name, parentDir, template, c2, opts = {})
   return finishScaffold(materializeSource(archive.files, name, dir), template);
 }
 function contentDir(flags) {
-  return resolve62(str9(flags.content) ?? process.cwd());
+  return resolve64(str9(flags.content) ?? process.cwd());
 }
 function renameRestoredSource(restored, declaredApp, renamed) {
   const text9 = {};
@@ -180329,7 +181091,7 @@ function symlinkDestinationIssue(dest) {
 function restoreDestinationIssue(dest, force) {
   const link = symlinkDestinationIssue(dest);
   if (link) return link;
-  if (!existsSync81(dest)) return null;
+  if (!existsSync82(dest)) return null;
   if (!statSync23(dest).isDirectory()) {
     return { error: `${dest} exists and is not a directory`, hint: "pass --out/--name to land somewhere else, or remove the file" };
   }
@@ -180342,10 +181104,10 @@ function restoreDestinationIssue(dest, force) {
   return null;
 }
 function isHimalayaMonorepoCheckout(start) {
-  let dir = resolve62(start);
+  let dir = resolve64(start);
   for (; ; ) {
-    if (existsSync81(join85(dir, "tools", "himi-cli", "src", "cli.ts")) && existsSync81(join85(dir, "core", "serve", "src", "server.ts"))) return true;
-    const parent = dirname46(dir);
+    if (existsSync82(join87(dir, "tools", "himi-cli", "src", "cli.ts")) && existsSync82(join87(dir, "core", "serve", "src", "server.ts"))) return true;
+    const parent = dirname48(dir);
     if (parent === dir) return false;
     dir = parent;
   }
@@ -180382,7 +181144,7 @@ function shellShaDivergenceWarnings(jobs) {
 }
 async function templatePublishName(sourceDir) {
   const id = await appId(sourceDir);
-  return IDENTITY_SENTINELS.some((s2) => id.includes(s2)) ? basename19(sourceDir) : id;
+  return IDENTITY_SENTINELS.some((s2) => id.includes(s2)) ? basename21(sourceDir) : id;
 }
 function templateNameError(name, from) {
   if (name.startsWith(TEMPLATE_APP_PREFIX)) {
@@ -180404,8 +181166,8 @@ function materializeForPreview(appDir3, slug, displayName2) {
   const forBuild = Object.fromEntries(
     Object.entries(files).map(([rel, body]) => [rel, rel === "himalaya.content.json" ? substituteIdentity(body, slug) : body])
   );
-  const repoRoot2 = resolve62(fileURLToPath29(new URL("../../..", import.meta.url)));
-  const root = join85(repoRoot2, "node_modules", ".cache", "himi-template-preview");
+  const repoRoot2 = resolve64(fileURLToPath29(new URL("../../..", import.meta.url)));
+  const root = join87(repoRoot2, "node_modules", ".cache", "himi-template-preview");
   const stillRunning = (pid) => {
     try {
       process.kill(pid, 0);
@@ -180419,35 +181181,35 @@ function materializeForPreview(appDir3, slug, displayName2) {
       if (!entry.isDirectory()) continue;
       const pid = Number(entry.name.startsWith(`${slug}-`) ? entry.name.slice(slug.length + 1) : NaN);
       if (Number.isInteger(pid) && pid > 0 && pid !== process.pid && !stillRunning(pid)) {
-        rmSync22(join85(root, entry.name), { recursive: true, force: true });
+        rmSync23(join87(root, entry.name), { recursive: true, force: true });
       }
     }
   } catch {
   }
-  const dest = join85(root, `${slug}-${process.pid}`);
-  rmSync22(dest, { recursive: true, force: true });
+  const dest = join87(root, `${slug}-${process.pid}`);
+  rmSync23(dest, { recursive: true, force: true });
   mkdirSync42(dest, { recursive: true });
   try {
     materializeSource(forBuild, displayName2, dest, slug);
   } catch (e2) {
-    rmSync22(dest, { recursive: true, force: true });
+    rmSync23(dest, { recursive: true, force: true });
     throw e2;
   }
   return dest;
 }
 async function appId(dir) {
   try {
-    const { readFileSync: readFileSync103 } = await import("node:fs");
-    const m2 = JSON.parse(readFileSync103(join85(dir, "himalaya.content.json"), "utf8"));
+    const { readFileSync: readFileSync104 } = await import("node:fs");
+    const m2 = JSON.parse(readFileSync104(join87(dir, "himalaya.content.json"), "utf8"));
     if (m2.name) return m2.name;
   } catch {
   }
-  return basename19(dir);
+  return basename21(dir);
 }
 async function contentVisibility(dir) {
   try {
-    const { readFileSync: readFileSync103 } = await import("node:fs");
-    const m2 = JSON.parse(readFileSync103(join85(dir, "himalaya.content.json"), "utf8"));
+    const { readFileSync: readFileSync104 } = await import("node:fs");
+    const m2 = JSON.parse(readFileSync104(join87(dir, "himalaya.content.json"), "utf8"));
     if (m2.visibility === "public" || m2.visibility === "unlisted") return m2.visibility;
   } catch {
   }
@@ -180717,7 +181479,7 @@ Seed your coding agent with \`himi agent-init\`. Guides: ${idx.portalUrl}`);
       return 0;
     }
     case "agent-init": {
-      const dir = resolve62(str9(flags.dir) ?? process.cwd());
+      const dir = resolve64(str9(flags.dir) ?? process.cwd());
       const { seedAgentFiles: seedAgentFiles2, NotAContentPackage: NotAContentPackage2 } = await Promise.resolve().then(() => (init_agent_context(), agent_context_exports));
       let res;
       try {
@@ -180739,7 +181501,7 @@ Seed your coding agent with \`himi agent-init\`. Guides: ${idx.portalUrl}`);
         ...res.removed.length ? { removed: res.removed, note: "older copies at the app root, moved to .himi/legacy-agent-files/ (a backup, in case one became app code) \u2014 the current ones live in .agents/skills/himalaya/" } : {},
         // In a git repo the refresh moves the diff identity an earlier `himi test` attested (that
         // hash is shared with the repo gates and deliberately exempts nothing but its own metadata).
-        ...existsSync81(join85(dir, ".himi", "attestations", "latest.json")) ? { next: "if `himi push` then refuses the attestation as stale, re-run `himi test` \u2014 in a git checkout this refresh changed the tree it covered" } : {},
+        ...existsSync82(join87(dir, ".himi", "attestations", "latest.json")) ? { next: "if `himi push` then refuses the attestation as stale, re-run `himi test` \u2014 in a git checkout this refresh changed the tree it covered" } : {},
         ...res.skipped.length ? { skipped: res.skipped } : {},
         portalUrl: idx.portalUrl
       });
@@ -180762,7 +181524,7 @@ async function recordedReleaseForContentQuietly(dir, resolution, onDrift) {
   try {
     const { buildContentForValidation: buildContentForValidation2, buildReleaseFromContent: buildReleaseFromContent2, bundleOutDir: bundleOutDir2 } = await loadAuthoring();
     const bres = await buildContentForValidation2(dir, { resolution });
-    out2 = mkdtempSync5(join85(tmpdir6(), "himi-ux-record-"));
+    out2 = mkdtempSync6(join87(tmpdir7(), "himi-ux-record-"));
     const hasWorkers = bres.built.length > 0 || bres.compileErrors.length > 0;
     const outcome = await buildReleaseFromContent2(dir, out2, { ...hasWorkers ? { tier5Dir: bundleOutDir2(dir) } : {}, collect: { lint: true } });
     const releaseId = outcome.manifest.releaseId;
@@ -180775,7 +181537,7 @@ async function recordedReleaseForContentQuietly(dir, resolution, onDrift) {
     return null;
   } finally {
     if (out2 !== void 0) try {
-      rmSync22(out2, { recursive: true, force: true });
+      rmSync23(out2, { recursive: true, force: true });
     } catch {
     }
   }
@@ -180941,7 +181703,7 @@ async function producedWidgetFamilies(dir) {
     let js2;
     for (const candidate of [`${name}.bundle.js`, `${name}.js`, name]) {
       try {
-        js2 = readFileSync102(join85(outDir, candidate), "utf8");
+        js2 = readFileSync103(join87(outDir, candidate), "utf8");
         break;
       } catch {
       }
@@ -180972,7 +181734,7 @@ async function producedWidgetFamilies(dir) {
   }
   return { families, source: "dist/bundles" };
 }
-var boardOpen = (dir) => existsSync81(join85(dir, ".himi", "studio", "index.html"));
+var boardOpen = (dir) => existsSync82(join87(dir, ".himi", "studio", "index.html"));
 var BOARD_REFRESHERS = /* @__PURE__ */ new Set(["render", "test", "validate", "build", "push", "icon", "site", "ux", "progress"]);
 async function leaveForBoard(dir, record2, value) {
   if (!boardOpen(dir)) return;
@@ -180996,7 +181758,7 @@ async function liveMapFor(dir) {
 }
 var commandScratch = new AsyncLocalStorage2();
 function commandScratchDir(prefix) {
-  const dir = mkdtempSync5(join85(tmpdir6(), prefix));
+  const dir = mkdtempSync6(join87(tmpdir7(), prefix));
   commandScratch.getStore()?.push(dir);
   return dir;
 }
@@ -181007,7 +181769,7 @@ async function run(argv, io2 = defaultIO, deps = {}) {
     code = await commandScratch.run(scratch, () => runCommand(argv, io2, deps));
   } finally {
     for (const dir of scratch) try {
-      rmSync22(dir, { recursive: true, force: true });
+      rmSync23(dir, { recursive: true, force: true });
     } catch {
     }
   }
@@ -181307,7 +182069,7 @@ himi v${cliVersion()} \u2014 run \`himi --version\`. If authoring commands fail
           return 2;
         }
         const template = str9(flags.template);
-        const parentDir = resolve62(str9(flags.dir) ?? process.cwd());
+        const parentDir = resolve64(str9(flags.dir) ?? process.cwd());
         const base44AppId = flags["base44-app-id"] === void 0 ? void 0 : String(flags["base44-app-id"]);
         const base44AppUrl = flags["base44-app-url"] === void 0 ? void 0 : String(flags["base44-app-url"]);
         if (base44AppUrl !== void 0) {
@@ -181350,7 +182112,7 @@ himi v${cliVersion()} \u2014 run \`himi --version\`. If authoring commands fail
             const owed = openApprovals2(readApprovals2(dir).events).length;
             next.push(`carried the planning journal into the app (${carried.join(", ")}${owed ? `; ${owed} approval${owed === 1 ? "" : "s"} still owed` : ""}) \u2014 \`himi progress --brief\` there shows it`);
           }
-          const planInParent = ["SPEC.md", "MOBILE-UX.md"].filter((f2) => existsSync81(join85(parentDir, f2)));
+          const planInParent = ["SPEC.md", "MOBILE-UX.md"].filter((f2) => existsSync82(join87(parentDir, f2)));
           if (planInParent.length) {
             next.push(`${planInParent.join(" and ")} in ${parentDir} ${planInParent.length > 1 ? "are" : "is"} not the app's \u2014 if that is the approved plan, move it over the template's boilerplate in ${dir}`);
           }
@@ -181511,13 +182273,13 @@ ${doNow.map((l2) => `  ${l2}`).join("\n")}`);
               if (adding) {
                 const from = str9(flags.from);
                 if (!from) throw new TrimRefusal2('--add <id> needs --from <file> holding the whole new SCREENS entry (`  "<id>": { "screenId": "<id>", \u2026 },`)');
-                print(adopt.addScreen(dir, adding, readFileSync102(from, "utf8"), { parent: str9(flags.parent), tab: str9(flags.tab), displayName: str9(flags["display-name"]) }));
+                print(adopt.addScreen(dir, adding, readFileSync103(from, "utf8"), { parent: str9(flags.parent), tab: str9(flags.tab), displayName: str9(flags["display-name"]) }));
                 return 0;
               }
               if (target) {
                 const from = str9(flags.from);
                 if (!from) throw new TrimRefusal2("--write <id> needs --from <file> holding the whole entry, as --show prints it");
-                print(adopt.replaceScreen(dir, target, readFileSync102(from, "utf8")));
+                print(adopt.replaceScreen(dir, target, readFileSync103(from, "utf8")));
                 return 0;
               }
               if (show) {
@@ -181599,7 +182361,7 @@ ${doNow.map((l2) => `  ${l2}`).join("\n")}`);
             const { keepFromSpec: keepFromSpec2 } = await Promise.resolve().then(() => (init_template_adopt(), template_adopt_exports));
             const dir = contentDir(flags);
             try {
-              const spec = keepFromSpec2(dir, str9(flags["from-spec"]) ?? join85(dir, "SPEC.md"));
+              const spec = keepFromSpec2(dir, str9(flags["from-spec"]) ?? join87(dir, "SPEC.md"));
               const own5 = typeof keep === "string" ? keep.split(",").map((k2) => k2.trim()).filter(Boolean) : [];
               keep = [.../* @__PURE__ */ new Set([...spec.keep, ...own5])].join(",");
               fromSpec = { fromSpec: {
@@ -181640,7 +182402,7 @@ ${doNow.map((l2) => `  ${l2}`).join("\n")}`);
           const result = { ...outcome.result, ...fromSpec };
           const adoptDir = contentDir(flags);
           const kept = flags["dry-run"] !== true && (outcome.code === 0 || outcome.result.forcedKeep === true);
-          if (kept && existsSync81(join85(adoptDir, adoptBits.ADOPT_FILE))) {
+          if (kept && existsSync82(join87(adoptDir, adoptBits.ADOPT_FILE))) {
             try {
               const inv = adoptBits.inspectApp(adoptDir);
               adoptBits.writeInventory(adoptDir, inv, { companions: "if-missing" });
@@ -181665,11 +182427,11 @@ ${doNow.map((l2) => `  ${l2}`).join("\n")}`);
                 return 2;
               }
             }
-            const appDir3 = resolve62(str9(flags.dir) ?? process.cwd());
-            const sourceDir = resolve62(str9(flags["source-dir"]) ?? appDir3);
+            const appDir3 = resolve64(str9(flags.dir) ?? process.cwd());
+            const sourceDir = resolve64(str9(flags["source-dir"]) ?? appDir3);
             let meta;
             try {
-              meta = JSON.parse(readFileSync102(join85(sourceDir, TEMPLATE_META_FILE), "utf8"));
+              meta = JSON.parse(readFileSync103(join87(sourceDir, TEMPLATE_META_FILE), "utf8"));
             } catch {
               io2.error(JSON.stringify({ error: `no ${TEMPLATE_META_FILE} in ${sourceDir} \u2014 a template must declare { title, description, tags } to be published`, hint: `add ${TEMPLATE_META_FILE} next to himalaya.content.json (or pass --source-dir <dir>)` }));
               return 2;
@@ -181679,7 +182441,7 @@ ${doNow.map((l2) => `  ${l2}`).join("\n")}`);
               return 2;
             }
             try {
-              const appearance = extractTemplateAppearance(JSON.parse(readFileSync102(join85(sourceDir, "tokens.json"), "utf8")));
+              const appearance = extractTemplateAppearance(JSON.parse(readFileSync103(join87(sourceDir, "tokens.json"), "utf8")));
               meta = { ...appearance, ...meta };
             } catch {
             }
@@ -181701,14 +182463,14 @@ ${doNow.map((l2) => `  ${l2}`).join("\n")}`);
             const force = flags.force === true;
             const { buildContentForValidation: buildContentForValidation2, buildReleaseFromContent: buildReleaseFromContent2, bundleOutDir: bundleOutDir2 } = await loadAuthoring();
             const bres = await buildContentForValidation2(buildDir, { resolution: resolutionFlag(flags) });
-            const out2 = mkdtempSync5(join85(tmpdir6(), "himi-template-"));
+            const out2 = mkdtempSync6(join87(tmpdir7(), "himi-template-"));
             publishScratch.push(out2);
             const hasWorkers = bres.built.length > 0 || bres.compileErrors.length > 0;
             const outcome = await buildReleaseFromContent2(buildDir, out2, {
               ...hasWorkers ? { tier5Dir: bundleOutDir2(buildDir) } : {},
               collect: { lint: true, strict }
             });
-            const scaffoldSourceFindings = resolve62(sourceDir) === resolve62(appDir3) ? [] : [
+            const scaffoldSourceFindings = resolve64(sourceDir) === resolve64(appDir3) ? [] : [
               ...(await Promise.resolve().then(() => (init_capabilities(), capabilities_exports))).capabilityConfigFindings(sourceDir, buildDir),
               ...tokenColorIssues(sourceDir),
               ...surfaceIssues(sourceDir, void 0, strict),
@@ -181754,13 +182516,13 @@ ${doNow.map((l2) => `  ${l2}`).join("\n")}`);
               }));
               return 1;
             }
-            const iconPath = str9(flags.icon) ? resolve62(str9(flags.icon)) : templateIconPath(name);
+            const iconPath = str9(flags.icon) ? resolve64(str9(flags.icon)) : templateIconPath(name);
             let iconHash;
             if (iconPath) {
               try {
-                const bytes2 = readFileSync102(iconPath);
+                const bytes2 = readFileSync103(iconPath);
                 payload.icon = bytes2.toString("base64");
-                iconHash = createHash44("sha256").update(bytes2).digest("hex");
+                iconHash = createHash45("sha256").update(bytes2).digest("hex");
               } catch {
               }
             }
@@ -181936,7 +182698,7 @@ ${doNow.map((l2) => `  ${l2}`).join("\n")}`);
           } finally {
             for (const dir of publishScratch) {
               try {
-                rmSync22(dir, { recursive: true, force: true });
+                rmSync23(dir, { recursive: true, force: true });
               } catch (e2) {
                 io2.error(JSON.stringify({ warning: `could not remove temp dir ${dir}: ${e2.message}` }));
               }
@@ -182062,7 +182824,7 @@ ${doNow.map((l2) => `  ${l2}`).join("\n")}`);
           const path2 = dpxSessionTokenPath();
           let raw;
           try {
-            raw = readFileSync102(path2, "utf8");
+            raw = readFileSync103(path2, "utf8");
           } catch {
             throw new Error(`no DPX BO session at ${path2}; run dpx auth login, write dpx auth token to that path, then himi login --dpx --target bo`);
           }
@@ -182193,11 +182955,11 @@ ${doNow.map((l2) => `  ${l2}`).join("\n")}`);
             return 1;
           }
           const { himiPluginFiles: himiPluginFiles2 } = await Promise.resolve().then(() => (init_claude_plugin(), claude_plugin_exports));
-          const dir = resolve62(out2);
+          const dir = resolve64(out2);
           const files = himiPluginFiles2(skills.skillMd);
           for (const f2 of files) {
-            mkdirSync42(dirname46(join85(dir, f2.path)), { recursive: true });
-            writeFileSync39(join85(dir, f2.path), f2.text);
+            mkdirSync42(dirname48(join87(dir, f2.path)), { recursive: true });
+            writeFileSync39(join87(dir, f2.path), f2.text);
           }
           print({ ok: true, dir, files: files.map((f2) => f2.path), next: [`claude plugin validate ${dir}`, `claude --plugin-dir ${dir}`] });
           return 0;
@@ -182207,22 +182969,22 @@ ${doNow.map((l2) => `  ${l2}`).join("\n")}`);
           run,
           version: cliVersion(),
           withFiles: flags["with-files"] === true,
-          ...process.env.HIMI_WORKSPACE ? { workspace: resolve62(process.env.HIMI_WORKSPACE) } : {}
+          ...process.env.HIMI_WORKSPACE ? { workspace: resolve64(process.env.HIMI_WORKSPACE) } : {}
         });
         return 0;
       }
       case "studio": {
         const { openStudio: openStudio2 } = await Promise.resolve().then(() => (init_studio(), studio_exports));
         const dir = contentDir(flags);
-        if (!existsSync81(join85(dir, "himalaya.content.json"))) {
+        if (!existsSync82(join87(dir, "himalaya.content.json"))) {
           io2.error(JSON.stringify({ ok: false, error: "not_a_content_package", dir, hint: "run from the app directory (or pass --content <dir>) \u2014 the board reads that package's .himi/" }));
           return 2;
         }
         if (pos[1] === "reel") {
           const { buildReel: buildReel2 } = await Promise.resolve().then(() => (init_studio_reel(), studio_reel_exports));
-          const out2 = resolve62(str9(flags.out) ?? join85(dir, ".himi", "making-of.html"));
+          const out2 = resolve64(str9(flags.out) ?? join87(dir, ".himi", "making-of.html"));
           const { html, plan } = buildReel2(dir);
-          mkdirSync42(dirname46(out2), { recursive: true });
+          mkdirSync42(dirname48(out2), { recursive: true });
           writeFileSync39(out2, html);
           const { pathToFileURL: pathToFileURL9 } = await import("node:url");
           const url2 = pathToFileURL9(out2).href;
@@ -182231,7 +182993,7 @@ ${doNow.map((l2) => `  ${l2}`).join("\n")}`);
             const { openUrl: openUrl2 } = await Promise.resolve().then(() => (init_open_url(), open_url_exports));
             openUrl2(url2);
           }
-          const handover = { file: out2, hint: `hand ${basename19(out2)} to the owner at the handover \u2014 one self-contained page of their app taking shape; send it beside the preview link, never instead of it` };
+          const handover = { file: out2, hint: `hand ${basename21(out2)} to the owner at the handover \u2014 one self-contained page of their app taking shape; send it beside the preview link, never instead of it` };
           const report3 = {
             ok: true,
             file: out2,
@@ -182292,7 +183054,7 @@ ${handover.hint[0].toUpperCase()}${handover.hint.slice(1)}.`);
         } = await Promise.resolve().then(() => (init_progress(), progress_exports));
         const dir = contentDir(flags);
         const journal2 = journalPath2(dir);
-        const isContentPackage = existsSync81(join85(dir, "himalaya.content.json"));
+        const isContentPackage = existsSync82(join87(dir, "himalaya.content.json"));
         const hint = isContentPackage ? {} : { hint: "no himalaya.content.json here \u2014 run from the app directory (or pass --content <dir>) so the build board finds this journal" };
         const message = pos.slice(1).join(" ").trim();
         const approvalFlags = ["approve", "done", "drop"].filter((f2) => flags[f2] !== void 0);
@@ -182444,7 +183206,7 @@ ${handover.hint[0].toUpperCase()}${handover.hint.slice(1)}.`);
       case "test": {
         const dir = contentDir(flags);
         const structuredOutput = flags.json === true || io2.isTTY !== true;
-        if (existsSync81(join85(dir, "functions"))) {
+        if (existsSync82(join87(dir, "functions"))) {
           const { invokeLocalFunction: invokeLocalFunction2, loadFunctionsApp: loadFunctionsApp2 } = await Promise.resolve().then(() => (init_functions(), functions_exports));
           const loaded = await loadFunctionsApp2(dir);
           const results = [];
@@ -182576,7 +183338,7 @@ ${handover.hint[0].toUpperCase()}${handover.hint.slice(1)}.`);
             io2.error(JSON.stringify({ error: `screen "${screen.screenId}" has no Tier-5 worker, so there is nothing for the browser loop to build` }));
             return 2;
           }
-          const sources = collectWorkerSources2(join85(dir, "tier5-src"), screen.bundleName);
+          const sources = collectWorkerSources2(join87(dir, "tier5-src"), screen.bundleName);
           if (!sources) {
             io2.error(JSON.stringify({ error: `no worker source found at tier5-src/${screen.bundleName} \u2014 the browser loop compiles SOURCE, not the built bundle` }));
             return 2;
@@ -182754,7 +183516,7 @@ ${handover.hint[0].toUpperCase()}${handover.hint.slice(1)}.`);
             const sp = await runShotsPass2({
               descriptors: scopeDescriptors2(outcome.descriptors ?? [], pos.slice(1), invalidScreens),
               tokens: outcome.tokens,
-              outDir: join85(dir, ".himi", "shots"),
+              outDir: join87(dir, ".himi", "shots"),
               width: 390,
               layers: { rules: shotRules, ...cmsSeed ? { cmsSeed } : {}, ...canned ? { canned: canned.byKey } : {} },
               ...budgetMs ? { budgetMs } : {},
@@ -182765,7 +183527,7 @@ ${handover.hint[0].toUpperCase()}${handover.hint.slice(1)}.`);
                 renderPngBatch: renderPngBatch2,
                 isUnserved: isUnservedRequest2,
                 writePng: (path2, base64) => writePngFile(path2, base64),
-                clearDir: (d2) => rmSync22(d2, { recursive: true, force: true })
+                clearDir: (d2) => rmSync23(d2, { recursive: true, force: true })
               }
             });
             writtenShots = sp.written;
@@ -182794,7 +183556,7 @@ ${handover.hint[0].toUpperCase()}${handover.hint.slice(1)}.`);
           releaseId: result.releaseId,
           releasePayload: release2,
           descriptors: attestedDescriptors,
-          screenshots: Object.fromEntries(writtenShots.filter((name) => crawledScreens.has(name.replace(/\.png$/, ""))).map((name) => [name.replace(/\.png$/, ""), join85(dir, ".himi", "shots", name)])),
+          screenshots: Object.fromEntries(writtenShots.filter((name) => crawledScreens.has(name.replace(/\.png$/, ""))).map((name) => [name.replace(/\.png$/, ""), join87(dir, ".himi", "shots", name)])),
           coverage: {
             screens: crawledScreens.size,
             actionsDispatched: result.actions.exercised,
@@ -182919,7 +183681,7 @@ ${[...afterRun.next, ...testReminder ? [testReminder] : []].join("\n")}`);
             return 2;
           }
           try {
-            const raw = stateArg.trim().startsWith("{") ? stateArg : readFileSync102(stateArg.replace(/^@/, ""), "utf8");
+            const raw = stateArg.trim().startsWith("{") ? stateArg : readFileSync103(stateArg.replace(/^@/, ""), "utf8");
             injectedState = JSON.parse(raw);
           } catch (e2) {
             io2.error(JSON.stringify({ error: `--state must be inline JSON or a path to a .json file \u2014 ${e2.message}` }));
@@ -182934,7 +183696,7 @@ ${[...afterRun.next, ...testReminder ? [testReminder] : []].join("\n")}`);
             return 2;
           }
           try {
-            const raw = inputArg.trim().startsWith("{") ? inputArg : readFileSync102(inputArg.replace(/^@/, ""), "utf8");
+            const raw = inputArg.trim().startsWith("{") ? inputArg : readFileSync103(inputArg.replace(/^@/, ""), "utf8");
             const parsed = JSON.parse(raw);
             if (!parsed || typeof parsed !== "object" || Array.isArray(parsed)) throw new Error("must be a JSON object");
             injectedInput = parsed;
@@ -183016,11 +183778,11 @@ ${[...afterRun.next, ...testReminder ? [testReminder] : []].join("\n")}`);
         const diagnostics = (outcome.lint ?? []).find((s2) => s2.screenId === screenId)?.issues ?? [];
         let pngFile;
         let attestationPngFile;
-        const shotPath = join85(dir, ".himi", "shots", `${screenId}.png`);
+        const shotPath = join87(dir, ".himi", "shots", `${screenId}.png`);
         const pngTarget = typeof flags.png === "string" ? str9(flags.png) : flags.png === true ? shotPath : void 0;
         if (pngTarget && r2.pngBase64) {
           pngFile = writePngFile(pngTarget, r2.pngBase64);
-          attestationPngFile = resolve62(pngTarget) === resolve62(shotPath) ? pngFile : writePngFile(shotPath, r2.pngBase64);
+          attestationPngFile = resolve64(pngTarget) === resolve64(shotPath) ? pngFile : writePngFile(shotPath, r2.pngBase64);
         }
         if (renderWidth !== void 0 && r2.renderable) {
           recordRenderWidth(dir, {
@@ -183367,7 +184129,7 @@ default (no --glyph): ${DEFAULT_GLYPH2} \u2014 a mark that claims nothing, so th
           return 2;
         }
         const renamed = str9(flags.name);
-        const dest = resolve62(str9(flags.out) ?? process.cwd(), renamed ?? wanted);
+        const dest = resolve64(str9(flags.out) ?? process.cwd(), renamed ?? wanted);
         const replace = flags.replace === true;
         const force = replace || flags.force === true;
         const linked = symlinkDestinationIssue(dest);
@@ -183375,7 +184137,7 @@ default (no --glyph): ${DEFAULT_GLYPH2} \u2014 a mark that claims nothing, so th
           io2.error(JSON.stringify(linked));
           return 1;
         }
-        if (existsSync81(dest)) {
+        if (existsSync82(dest)) {
           if (!statSync23(dest).isDirectory()) {
             io2.error(JSON.stringify({
               error: `${dest} exists and is not a directory`,
@@ -183388,7 +184150,7 @@ default (no --glyph): ${DEFAULT_GLYPH2} \u2014 a mark that claims nothing, so th
             io2.error(JSON.stringify({ error: `${dest} already exists and is not empty`, hint: "pass --force to write into it anyway (merging, and naming what it keeps), --replace to restore exactly what was archived, or --out/--name to land somewhere else" }));
             return 1;
           }
-          if (replace && occupied && !existsSync81(join85(dest, "himalaya.content.json"))) {
+          if (replace && occupied && !existsSync82(join87(dest, "himalaya.content.json"))) {
             io2.error(JSON.stringify({
               error: `${dest} is not a content package \u2014 refusing to --replace it`,
               hint: "--replace only clears a directory that holds himalaya.content.json. Check --out/--name, or pass --force to merge into it instead."
@@ -183557,7 +184319,7 @@ default (no --glyph): ${DEFAULT_GLYPH2} \u2014 a mark that claims nothing, so th
         const manifest = outcome.manifest;
         const payload = await loadReleaseFromDir(declared, out2);
         const { shellQuote: shellQuote3 } = await Promise.resolve().then(() => (init_shell_quote(), shell_quote_exports));
-        const contentRel = relative15(process.cwd(), dir) || ".";
+        const contentRel = relative16(process.cwd(), dir) || ".";
         const contentArg2 = shellQuote3(contentRel);
         if (onlyRaw !== void 0) {
           const onlyDraft = flags.draft === true;
@@ -183619,7 +184381,7 @@ default (no --glyph): ${DEFAULT_GLYPH2} \u2014 a mark that claims nothing, so th
           let localSourceHash;
           try {
             const { collectAppSource: collectAppSource2, zipAppSource: zipAppSource2 } = await Promise.resolve().then(() => (init_app_source(), app_source_exports));
-            localSourceHash = createHash44("sha256").update(zipAppSource2(collectAppSource2(dir).entries).toString("base64")).digest("hex");
+            localSourceHash = createHash45("sha256").update(zipAppSource2(collectAppSource2(dir).entries).toString("base64")).digest("hex");
           } catch {
           }
           return runReleasePatch({
@@ -184047,7 +184809,7 @@ default (no --glyph): ${DEFAULT_GLYPH2} \u2014 a mark that claims nothing, so th
             return 2;
           }
           try {
-            const res = writePack(resolve62(releaseDir), only, resolve62(str9(flags.out) ?? process.cwd()));
+            const res = writePack(resolve64(releaseDir), only, resolve64(str9(flags.out) ?? process.cwd()));
             print({
               ok: true,
               app: res.app,
@@ -184096,7 +184858,7 @@ default (no --glyph): ${DEFAULT_GLYPH2} \u2014 a mark that claims nothing, so th
         }
         const { buildContentForValidation: buildContentForValidation2, buildReleaseFromContent: buildReleaseFromContent2, bundleOutDir: bundleOutDir2 } = await loadAuthoring();
         const bres = await buildContentForValidation2(dir, { resolution: resolutionFlag(flags) });
-        const built = mkdtempSync5(join85(tmpdir6(), "himi-pack-"));
+        const built = mkdtempSync6(join87(tmpdir7(), "himi-pack-"));
         const hasWorkers = bres.built.length > 0 || bres.compileErrors.length > 0;
         const outcome = await buildReleaseFromContent2(dir, built, {
           ...hasWorkers ? { tier5Dir: bundleOutDir2(dir) } : {},
@@ -184115,12 +184877,12 @@ default (no --glyph): ${DEFAULT_GLYPH2} \u2014 a mark that claims nothing, so th
           ...await navIssues2(dir, strict)
         ]);
         if (hasErrors && !force) {
-          rmSync22(built, { recursive: true, force: true });
+          rmSync23(built, { recursive: true, force: true });
           print({ ...report3, packed: false, hint: "lint found errors \u2014 fix them, or re-run `himi pack --force` to pack anyway" });
           return 1;
         }
         try {
-          const res = writePack(built, app, resolve62(str9(flags.out) ?? dir), sourceArchive);
+          const res = writePack(built, app, resolve64(str9(flags.out) ?? dir), sourceArchive);
           print({
             ok: true,
             app: res.app,
@@ -184151,7 +184913,7 @@ default (no --glyph): ${DEFAULT_GLYPH2} \u2014 a mark that claims nothing, so th
           io2.error(JSON.stringify({ error: e2.message }));
           return 1;
         } finally {
-          rmSync22(built, { recursive: true, force: true });
+          rmSync23(built, { recursive: true, force: true });
         }
       }
       // ---- himi import — turn a dev .himi back into an editable content package ----
@@ -184165,7 +184927,7 @@ default (no --glyph): ${DEFAULT_GLYPH2} \u2014 a mark that claims nothing, so th
         const { HIMI_PACKAGE_SOURCE_PATH: HIMI_PACKAGE_SOURCE_PATH2, isSafeAppId: isSafeAppId2, packageContents: packageContents2 } = await Promise.resolve().then(() => (init_himi_package(), himi_package_exports));
         let opened;
         try {
-          opened = openPackageFile2(resolve62(file2));
+          opened = openPackageFile2(resolve64(file2));
         } catch (e2) {
           io2.error(JSON.stringify({ error: e2.message }));
           return 1;
@@ -184178,7 +184940,7 @@ default (no --glyph): ${DEFAULT_GLYPH2} \u2014 a mark that claims nothing, so th
           io2.error(JSON.stringify({
             ok: false,
             error: "app_source_not_in_package",
-            detail: `${resolve62(file2)} is a release package: it carries built output (screens, bundles, tokens) and no source`,
+            detail: `${resolve64(file2)} is a release package: it carries built output (screens, bundles, tokens) and no source`,
             hint: "re-pack it from the content package with `himi pack --dev`, or restore from the serve plane with `himi pull <app>`"
           }));
           return 1;
@@ -184201,7 +184963,7 @@ default (no --glyph): ${DEFAULT_GLYPH2} \u2014 a mark that claims nothing, so th
             return 1;
           }
         }
-        const dest = resolve62(str9(flags.out) ?? process.cwd(), renamed ?? opened.header.app);
+        const dest = resolve64(str9(flags.out) ?? process.cwd(), renamed ?? opened.header.app);
         const issue2 = restoreDestinationIssue(dest, flags.force === true);
         if (issue2) {
           io2.error(JSON.stringify(issue2));
@@ -184288,7 +185050,7 @@ default (no --glyph): ${DEFAULT_GLYPH2} \u2014 a mark that claims nothing, so th
         }
         try {
           const { openPackageFile: openPackageFile2 } = await Promise.resolve().then(() => (init_pack(), pack_exports));
-          const opened = openPackageFile2(resolve62(file2));
+          const opened = openPackageFile2(resolve64(file2));
           if (!opened.validation.ok || !opened.header) {
             io2.error(JSON.stringify({ error: "refusing to share an invalid package", issues: opened.validation.errors }));
             return 1;
@@ -184298,12 +185060,12 @@ default (no --glyph): ${DEFAULT_GLYPH2} \u2014 a mark that claims nothing, so th
             io2.error(JSON.stringify({
               ok: false,
               error: "refusing to share a package that carries the app's source",
-              detail: `${resolve62(file2)} was packed with --dev, and a share link is public and unauthenticated \u2014 anyone with the URL could \`himi import\` your codebase`,
+              detail: `${resolve64(file2)} was packed with --dev, and a share link is public and unauthenticated \u2014 anyone with the URL could \`himi import\` your codebase`,
               hint: "share a release package instead (`himi pack` with no --dev), or hand the dev package over directly"
             }));
             return 1;
           }
-          const archive = readFileSync102(resolve62(file2));
+          const archive = readFileSync103(resolve64(file2));
           const result = await client2().createPackageShare({
             app: opened.header.app,
             releaseId: opened.header.releaseId,
@@ -184400,11 +185162,11 @@ default (no --glyph): ${DEFAULT_GLYPH2} \u2014 a mark that claims nothing, so th
             const app = await appId(dir2);
             const { buildContentBundles: buildContentBundles2, buildReleaseFromContent: buildReleaseFromContent2, bundleOutDir: bundleOutDir2 } = await loadAuthoring();
             const bres = await buildContentBundles2(dir2, { resolution: resolutionFlag(flags) });
-            temp = mkdtempSync5(join85(tmpdir6(), "himi-run-build-"));
+            temp = mkdtempSync6(join87(tmpdir7(), "himi-run-build-"));
             const hasWorkers = bres.built.length > 0 || bres.compileErrors.length > 0;
             const initial = await buildReleaseFromContent2(dir2, temp, { ...hasWorkers ? { tier5Dir: bundleOutDir2(dir2) } : {} });
             servedMissing = initial.missingBundles;
-            source = join85(temp, app);
+            source = join87(temp, app);
           }
           const chromeArg = str9(flags.chrome) ?? "preview";
           if (chromeArg !== "preview" && chromeArg !== "app") {
@@ -184443,7 +185205,7 @@ default (no --glyph): ${DEFAULT_GLYPH2} \u2014 a mark that claims nothing, so th
             if (!recordKit) return;
             startedAt = (/* @__PURE__ */ new Date()).toISOString();
             const failure = record2(served2, { ok: true, at: startedAt });
-            if (!recorded) io2.error(JSON.stringify({ run: "run_record_skipped", message: `${failure ?? `${join85(dir, ".himi")} is not a real directory`}, so the build board will not frame this preview.` }));
+            if (!recorded) io2.error(JSON.stringify({ run: "run_record_skipped", message: `${failure ?? `${join87(dir, ".himi")} is not a real directory`}, so the build board will not frame this preview.` }));
             await refreshBoard();
           };
           const retract = async () => {
@@ -184466,9 +185228,9 @@ default (no --glyph): ${DEFAULT_GLYPH2} \u2014 a mark that claims nothing, so th
             });
             await announce(run2);
             print({ ok: true, app: run2.app, url: run2.url, port: run2.port, plane: "browser" });
-            await new Promise((resolve63) => {
+            await new Promise((resolve65) => {
               const stop = () => {
-                void retract().catch((e2) => io2.error(JSON.stringify({ run: "stop_cleanup_failed", message: e2.message }))).finally(() => run2.close().finally(() => resolve63()));
+                void retract().catch((e2) => io2.error(JSON.stringify({ run: "stop_cleanup_failed", message: e2.message }))).finally(() => run2.close().finally(() => resolve65()));
               };
               dropEarlySignals?.();
               process.once("SIGINT", stop);
@@ -184479,7 +185241,7 @@ default (no --glyph): ${DEFAULT_GLYPH2} \u2014 a mark that claims nothing, so th
           const watchKit = watch2 ? await Promise.resolve().then(() => (init_run_watch(), run_watch_exports)) : null;
           const hhpPreviewRoute = watch2 ? (await Promise.resolve().then(() => (init_hhp_preview(), hhp_preview_exports))).hhpPreviewResponse : null;
           const bus = watchKit ? new watchKit.ReloadBus() : void 0;
-          if (watch2) served = mkdtempSync5(join85(tmpdir6(), "himi-run-served-"));
+          if (watch2) served = mkdtempSync6(join87(tmpdir7(), "himi-run-served-"));
           const running = await runPackage2(source, {
             port,
             chrome: chromeArg,
@@ -184508,8 +185270,8 @@ default (no --glyph): ${DEFAULT_GLYPH2} \u2014 a mark that claims nothing, so th
             await announce(running);
             if (watchKit && bus) {
               const { buildContentBundles: buildContentBundles2, buildReleaseFromContent: buildReleaseFromContent2, bundleOutDir: bundleOutDir2 } = await loadAuthoring();
-              const live3 = join85(running.releaseRoot, running.app);
-              const manifestOf = (tree) => JSON.parse(readFileSync102(join85(tree, "release-manifest.json"), "utf8"));
+              const live3 = join87(running.releaseRoot, running.app);
+              const manifestOf = (tree) => JSON.parse(readFileSync103(join87(tree, "release-manifest.json"), "utf8"));
               let current = manifestOf(live3);
               const failed3 = async (message) => {
                 if (stopping) return;
@@ -184520,7 +185282,7 @@ default (no --glyph): ${DEFAULT_GLYPH2} \u2014 a mark that claims nothing, so th
               };
               rebuild = watchKit.serialize(async () => {
                 const t0 = Date.now();
-                const next = mkdtempSync5(join85(tmpdir6(), "himi-run-build-"));
+                const next = mkdtempSync6(join87(tmpdir7(), "himi-run-build-"));
                 try {
                   const bres = await buildContentBundles2(dir, { resolution: resolutionFlag(flags) });
                   if (bres.compileErrors.length) {
@@ -184537,18 +185299,18 @@ default (no --glyph): ${DEFAULT_GLYPH2} \u2014 a mark that claims nothing, so th
                     return;
                   }
                   if (stopping) return;
-                  const fresh = manifestOf(join85(next, running.app));
+                  const fresh = manifestOf(join87(next, running.app));
                   const diff = watchKit.diffReleases(current, fresh);
                   const { describeChanges: describeChanges2, headline: headline2 } = await Promise.resolve().then(() => (init_build_changes(), build_changes_exports));
-                  const changes = describeChanges2(live3, join85(next, running.app), diff);
+                  const changes = describeChanges2(live3, join87(next, running.app), diff);
                   const retired = `${live3}.retired-${Date.now()}`;
-                  renameSync12(live3, retired);
+                  renameSync13(live3, retired);
                   try {
-                    renameSync12(join85(next, running.app), live3);
+                    renameSync13(join87(next, running.app), live3);
                   } catch {
-                    cpSync3(join85(next, running.app), live3, { recursive: true });
+                    cpSync3(join87(next, running.app), live3, { recursive: true });
                   }
-                  rmSync22(retired, { recursive: true, force: true });
+                  rmSync23(retired, { recursive: true, force: true });
                   current = fresh;
                   servedMissing = outcome.missingBundles;
                   for (const [event, data] of watchKit.reloadEvents(diff)) bus.publish(event, data);
@@ -184558,7 +185320,7 @@ default (no --glyph): ${DEFAULT_GLYPH2} \u2014 a mark that claims nothing, so th
                 } catch (e2) {
                   await failed3(e2.message.split("\n")[0]);
                 } finally {
-                  rmSync22(next, { recursive: true, force: true });
+                  rmSync23(next, { recursive: true, force: true });
                 }
               });
               watcher2 = watchKit.watchContent(dir, () => {
@@ -184629,9 +185391,9 @@ default (no --glyph): ${DEFAULT_GLYPH2} \u2014 a mark that claims nothing, so th
         } finally {
           dropEarlySignals?.();
           dropInitRecord?.();
-          if (temp) rmSync22(temp, { recursive: true, force: true });
-          if (served) rmSync22(served, { recursive: true, force: true });
-          if (browserCopy) rmSync22(browserCopy, { recursive: true, force: true });
+          if (temp) rmSync23(temp, { recursive: true, force: true });
+          if (served) rmSync23(served, { recursive: true, force: true });
+          if (browserCopy) rmSync23(browserCopy, { recursive: true, force: true });
         }
       }
       case "preview": {
@@ -185173,7 +185935,7 @@ default (no --glyph): ${DEFAULT_GLYPH2} \u2014 a mark that claims nothing, so th
           io2.error(JSON.stringify({ error: `patch ${kind} needs --file`, usage: PATCH_USAGE }));
           return 2;
         }
-        if (!existsSync81(file2)) {
+        if (!existsSync82(file2)) {
           io2.error(JSON.stringify({ error: `no such file: ${file2}` }));
           return 2;
         }
@@ -185229,7 +185991,7 @@ default (no --glyph): ${DEFAULT_GLYPH2} \u2014 a mark that claims nothing, so th
           lintNote: "`himi patch` sends a raw file. Nothing here built or linted your app \u2014 `himi push --only <selector>` is the same edit with the full lint gate in front of it."
         };
         if (kind === "tokens" || kind === "app-config") {
-          const body = readFileSync102(file2, "utf8");
+          const body = readFileSync103(file2, "utf8");
           const patch2 = kind === "tokens" ? { tokens: body } : { appConfig: body };
           return runReleasePatch({
             ...common,
@@ -185244,7 +186006,7 @@ default (no --glyph): ${DEFAULT_GLYPH2} \u2014 a mark that claims nothing, so th
             io2.error(JSON.stringify({ error: "patch screen needs a <screenId>", usage: PATCH_USAGE }));
             return 2;
           }
-          const descriptor = readFileSync102(file2, "utf8");
+          const descriptor = readFileSync103(file2, "utf8");
           try {
             JSON.parse(descriptor);
           } catch (e2) {
@@ -185284,8 +186046,8 @@ default (no --glyph): ${DEFAULT_GLYPH2} \u2014 a mark that claims nothing, so th
             extra: { kind, screen: id, file: { path: file2, bytes: Buffer.byteLength(descriptor, "utf8") } }
           });
         }
-        const bytes2 = readFileSync102(file2);
-        const sha2 = createHash44("sha256").update(bytes2).digest("hex");
+        const bytes2 = readFileSync103(file2);
+        const sha2 = createHash45("sha256").update(bytes2).digest("hex");
         const forScreens = (str9(flags["for-screen"]) ?? "").split(",").map((s2) => s2.trim()).filter(Boolean);
         if (flags["no-rebind"] !== void 0 && flags["no-rebind"] !== true) {
           io2.error(JSON.stringify({ ok: false, error: "no_rebind_takes_no_value", message: "--no-rebind is a switch and takes no value; pass it bare.", usage: PATCH_USAGE }));
@@ -185428,7 +186190,7 @@ default (no --glyph): ${DEFAULT_GLYPH2} \u2014 a mark that claims nothing, so th
           }
           let def;
           try {
-            const parsed = JSON.parse(arg.startsWith("@") ? readFileSync102(arg.slice(1), "utf8") : arg);
+            const parsed = JSON.parse(arg.startsWith("@") ? readFileSync103(arg.slice(1), "utf8") : arg);
             if (parsed === null || typeof parsed !== "object" || Array.isArray(parsed)) {
               io2.error(JSON.stringify({ error: "invalid_definition", problems: [`--definition must be a JSON object, got ${Array.isArray(parsed) ? "an array" : parsed === null ? "null" : typeof parsed}`] }));
               return 2;
@@ -185710,7 +186472,7 @@ default (no --glyph): ${DEFAULT_GLYPH2} \u2014 a mark that claims nothing, so th
         const rememberLastDist = async (jobs2) => {
           try {
             const dir = contentDir(flags);
-            if (!existsSync81(join85(dir, "himalaya.content.json"))) return;
+            if (!existsSync82(join87(dir, "himalaya.content.json"))) return;
             const { lastDistFromJob: lastDistFromJob2, writeLastDist: writeLastDist2 } = await Promise.resolve().then(() => (init_capabilities(), capabilities_exports));
             const own5 = await appId(dir);
             for (const job of jobs2) {
@@ -185950,7 +186712,7 @@ ${label2}`);
         const platform = str9(flags.platform)?.split(",").map((p2) => p2.trim()).filter(Boolean);
         {
           const distDir = contentDir(flags);
-          if (existsSync81(join85(distDir, "himalaya.content.json"))) {
+          if (existsSync82(join87(distDir, "himalaya.content.json"))) {
             const issues = await iconIssues(distDir, flags.strict === true, { requireDeclared: true, requireVerified: true });
             const errors = issues.filter((i2) => i2.severity === "error");
             for (const i2 of issues.filter((i3) => i3.severity === "warning")) {
@@ -186290,7 +187052,7 @@ ${label2}`);
           const dpxPath = dpxSessionTokenPath();
           let dpx;
           try {
-            dpx = readFileSync102(dpxPath, "utf8").trim();
+            dpx = readFileSync103(dpxPath, "utf8").trim();
           } catch {
             io2.error(JSON.stringify({ error: `no dpx session at ${dpxPath} \u2014 run \`dpx auth login\` then \`dpx auth token > ${dpxPath}\` (dpx 2.x keeps its own state in ~/.dpx/auth.json and does NOT write the legacy session file), or omit --dpx` }));
             return 1;
@@ -186753,7 +187515,7 @@ ${report3.ok ? "OK \u2014 data + serve plane reachable." : typeof report3.hint =
           const path2 = dpxSessionTokenPath();
           let raw;
           try {
-            raw = readFileSync102(path2, "utf8");
+            raw = readFileSync103(path2, "utf8");
           } catch {
             io2.error(JSON.stringify({ error: `no DPX BO session at ${path2}` }));
             return 1;