@wix/himalaya-cli 0.1430.0 → 0.1431.0

package/dist/cli.mjs

@@ -212,6 +212,187 @@ var init_config = __esm({
   }
 });
 
+// ../../core/data-resources/src/base44/schema.ts
+var BASE44_FIELD_TYPES, BASE44_STRING_FORMATS, BASE44_BUILTIN_FIELDS;
+var init_schema = __esm({
+  "../../core/data-resources/src/base44/schema.ts"() {
+    BASE44_FIELD_TYPES = ["string", "number", "integer", "boolean", "array", "object"];
+    BASE44_STRING_FORMATS = ["date", "date-time", "time", "email", "uri", "uuid", "file", "richtext"];
+    BASE44_BUILTIN_FIELDS = ["id", "created_date", "updated_date", "created_by", "created_by_id"];
+  }
+});
+
+// ../../core/data-resources/src/base44/ownership.ts
+function base44Prefix(app) {
+  const runs = app.match(/[A-Za-z0-9]+/g) ?? [];
+  return `Himi${runs.map((r2) => r2.charAt(0).toUpperCase() + r2.slice(1)).join("")}`;
+}
+function nonEmpty(value) {
+  return typeof value === "string" && value.trim() !== "";
+}
+function isAdoptedEntity(spec) {
+  return nonEmpty(spec.base44Name);
+}
+function isOwnedEntity(spec) {
+  return !isAdoptedEntity(spec) && nonEmpty(spec.name);
+}
+function physicalEntityName(spec, app) {
+  if (isAdoptedEntity(spec)) return spec.base44Name;
+  return nonEmpty(spec.name) ? `${base44Prefix(app)}${spec.name}` : "";
+}
+function physicalFunctionName(spec) {
+  return nonEmpty(spec.base44Name) ? spec.base44Name : nonEmpty(spec.name) ? spec.name : "";
+}
+function label(spec) {
+  if (nonEmpty(spec.base44Name)) return spec.base44Name;
+  if (nonEmpty(spec.name)) return spec.name;
+  return "<unnamed>";
+}
+function userScoped(rule) {
+  if (rule === void 0) return false;
+  try {
+    return (JSON.stringify(rule) ?? "").includes("{{user.");
+  } catch {
+    return false;
+  }
+}
+function validateBase44Entities(cfg, app) {
+  if (!cfg) return [];
+  const issues = [];
+  const add = (severity, ruleCode, entity, message) => issues.push({ severity, ruleCode, message, ...entity !== void 0 ? { entity } : {} });
+  const err = (ruleCode, entity, message) => add("error", ruleCode, entity, message);
+  const prefix = base44Prefix(app);
+  const types = new Set(BASE44_FIELD_TYPES);
+  const formats = new Set(BASE44_STRING_FORMATS);
+  const builtins = new Set(BASE44_BUILTIN_FIELDS);
+  if (cfg.entities !== void 0 && !Array.isArray(cfg.entities)) err("shape-invalid", void 0, "base44.entities must be an array");
+  const seen = /* @__PURE__ */ new Set();
+  for (const raw of Array.isArray(cfg.entities) ? cfg.entities : []) {
+    if (!raw || typeof raw !== "object" || Array.isArray(raw)) {
+      err("shape-invalid", void 0, "every base44 entity declaration must be an object");
+      continue;
+    }
+    const spec = raw;
+    const name = label(spec);
+    const rawName = spec.name;
+    const rawAdopted = spec.base44Name;
+    const hasName = rawName !== void 0;
+    const hasAdopted = rawAdopted !== void 0;
+    if (hasName && hasAdopted) {
+      err("entity-owned-and-adopted", name, "declare either `name` (owned) or `base44Name` (adopted), not both");
+    } else if (!hasName && !hasAdopted) {
+      err("entity-neither-owned-nor-adopted", name, "needs `name` (owned, namespaced) or `base44Name` (adopted, an entity the Base44 app already has)");
+    } else {
+      const value = hasName ? rawName : rawAdopted;
+      if (typeof value !== "string" || !ENTITY_NAME.test(value)) {
+        err("entity-name-invalid", name, `entity ${hasName ? "name" : "base44Name"} ${JSON.stringify(value)} must be alphanumeric and start with a letter \u2014 Base44 entity names allow nothing else`);
+      } else if (hasAdopted && value.startsWith(prefix)) {
+        err("adopted-in-owned-namespace", name, `adopted entity "${value}" starts with this app's owned prefix "${prefix}" \u2014 himi would treat a foreign entity as its own. Declare it with \`name\` if himi owns it, or rename it.`);
+      }
+    }
+    const physical = physicalEntityName(spec, app);
+    if (physical) {
+      if (seen.has(physical)) err("entity-duplicate", name, `duplicate entity "${physical}"`);
+      seen.add(physical);
+    }
+    const keys = /* @__PURE__ */ new Set();
+    if (!Array.isArray(spec.fields)) {
+      err("shape-invalid", name, "`fields` must be an array");
+    } else {
+      for (const rawField of spec.fields) {
+        if (!rawField || typeof rawField !== "object" || Array.isArray(rawField)) {
+          err("shape-invalid", name, "every field declaration must be an object");
+          continue;
+        }
+        const field = rawField;
+        if (typeof field.key !== "string" || !field.key) {
+          err("shape-invalid", name, "every field needs a string `key`");
+          continue;
+        }
+        if (builtins.has(field.key)) {
+          err("field-builtin", name, `field "${field.key}" is built in \u2014 Base44 adds ${BASE44_BUILTIN_FIELDS.join(", ")} to every row. Remove it from the declaration.`);
+          continue;
+        }
+        if (keys.has(field.key)) err("field-duplicate", name, `duplicate field key "${field.key}"`);
+        keys.add(field.key);
+        if (!types.has(field.type)) err("field-type-unsupported", name, `field "${field.key}" has unsupported type ${JSON.stringify(field.type)} \u2014 supported: ${BASE44_FIELD_TYPES.join(", ")}`);
+        if (field.format !== void 0) {
+          if (field.type !== "string") err("field-format-invalid", name, `field "${field.key}" declares a format but only string fields take one`);
+          else if (!formats.has(field.format)) err("field-format-invalid", name, `field "${field.key}" has unsupported format ${JSON.stringify(field.format)} \u2014 supported: ${BASE44_STRING_FORMATS.join(", ")}`);
+        }
+        if (field.items !== void 0 && (field.type !== "array" || !types.has(field.items?.type))) {
+          err("field-type-unsupported", name, field.type !== "array" ? `field "${field.key}" declares \`items\` but only array fields take one` : `field "${field.key}" has unsupported items type ${JSON.stringify(field.items?.type)} \u2014 supported: ${BASE44_FIELD_TYPES.join(", ")}`);
+        }
+      }
+    }
+    if (spec.displayField !== void 0 && !keys.has(spec.displayField) && !builtins.has(spec.displayField)) {
+      err("display-field-unknown", name, `displayField "${spec.displayField}" is not one of the declared fields (${[...keys].join(", ") || "none"})`);
+    }
+    if (spec.required !== void 0) {
+      if (!Array.isArray(spec.required)) err("shape-invalid", name, "`required` must be an array of field keys");
+      else for (const key2 of spec.required) {
+        if (!keys.has(key2)) err("required-unknown", name, `required field "${key2}" is not declared`);
+      }
+    }
+    if (spec.seed !== void 0) {
+      if (hasAdopted) {
+        err("seed-on-adopted", name, "an adopted entity cannot declare `seed` \u2014 himi never writes to entities it does not own");
+      } else if (!Array.isArray(spec.seed)) {
+        err("shape-invalid", name, "seed must be an array of row objects");
+      } else {
+        spec.seed.forEach((row, index) => {
+          if (!row || typeof row !== "object" || Array.isArray(row)) {
+            err("shape-invalid", name, `seed row ${index} must be an object`);
+            return;
+          }
+          for (const key2 of Object.keys(row)) {
+            if (!keys.has(key2)) err("seed-key-unknown", name, `seed row ${index} sets undeclared field "${key2}"`);
+          }
+        });
+      }
+    }
+    if (userScoped(spec.rls?.read)) {
+      add("warning", "read-rule-user-scoped", name, "rls.read is scoped to the signed-in user ({{user.\u2026}}), so a signed-out viewer sees an empty list. Gate the screen behind a sign-in, or widen the read rule if the rows are public.");
+    }
+  }
+  if (cfg.functions !== void 0 && !Array.isArray(cfg.functions)) err("shape-invalid", void 0, "base44.functions must be an array");
+  const seenFns = /* @__PURE__ */ new Set();
+  for (const raw of Array.isArray(cfg.functions) ? cfg.functions : []) {
+    if (!raw || typeof raw !== "object" || Array.isArray(raw)) {
+      err("shape-invalid", void 0, "every base44 function declaration must be an object");
+      continue;
+    }
+    const spec = raw;
+    const name = label(spec);
+    const hasName = spec.name !== void 0;
+    const hasAdopted = spec.base44Name !== void 0;
+    if (hasName && hasAdopted) {
+      err("function-owned-and-adopted", name, "declare either `name` (owned) or `base44Name` (adopted), not both");
+      continue;
+    }
+    if (!hasName && !hasAdopted) {
+      err("function-neither-owned-nor-adopted", name, "needs `name` (owned, source under base44/functions/<name>/) or `base44Name` (adopted, an existing backend function)");
+      continue;
+    }
+    const value = hasName ? spec.name : spec.base44Name;
+    if (typeof value !== "string" || !FUNCTION_NAME.test(value)) {
+      err("function-name-invalid", name, `function name ${JSON.stringify(value)} must be letters, digits, "-" or "_"`);
+      continue;
+    }
+    if (seenFns.has(value)) err("function-duplicate", name, `duplicate function "${value}"`);
+    seenFns.add(value);
+  }
+  return issues;
+}
+var ENTITY_NAME, FUNCTION_NAME;
+var init_ownership = __esm({
+  "../../core/data-resources/src/base44/ownership.ts"() {
+    init_schema();
+    ENTITY_NAME = /^[A-Za-z][A-Za-z0-9]*$/;
+    FUNCTION_NAME = /^[A-Za-z0-9][A-Za-z0-9_-]*$/;
+  }
+});
+
 // ../../core/data-resources/src/schema.ts
 function provisionedKvSpec(spec) {
   const metadata2 = { name: spec.name };
@@ -231,8 +412,9 @@ function mergeDataResources(input) {
   };
 }
 var WIX_FIELD_TYPES, KV_DEFAULT_MAX_VALUE_BYTES, KV_MAX_VALUE_BYTES, KV_MAX_TTL_SECONDS;
-var init_schema = __esm({
+var init_schema2 = __esm({
   "../../core/data-resources/src/schema.ts"() {
+    init_ownership();
     WIX_FIELD_TYPES = [
       "TEXT",
       "NUMBER",
@@ -287,7 +469,7 @@ function isOwned(spec, app) {
 function physicalId(spec, _app) {
   return adoptedId(spec) ?? (typeof spec.id === "string" ? spec.id : "");
 }
-function label(spec) {
+function label2(spec) {
   if (typeof spec.wixId === "string") return spec.wixId;
   if (typeof spec.id === "string") return spec.id;
   return "<unnamed>";
@@ -327,7 +509,7 @@ function validateCmsConfig(cms, app, opts = {}) {
       continue;
     }
     const spec = rawSpec;
-    const name = label(spec);
+    const name = label2(spec);
     const rawId = spec.id;
     if (rawId !== void 0 && (typeof rawId !== "string" || rawId.trim() === "")) {
       err(name, "`id` must be a non-empty string");
@@ -476,9 +658,9 @@ function kvResourceKey(scope, store) {
   return `${scopePrefix(scope)}kv/${encodeURIComponent(store)}`;
 }
 var WIX_COLLECTION_ID_MAX_LENGTH, SAFE_APP_ID, KV_NAME;
-var init_ownership = __esm({
+var init_ownership2 = __esm({
   "../../core/data-resources/src/ownership.ts"() {
-    init_schema();
+    init_schema2();
     WIX_COLLECTION_ID_MAX_LENGTH = 256;
     SAFE_APP_ID = /^[a-z0-9]+(?:-[a-z0-9]+)*(?:\.[a-z0-9]+(?:-[a-z0-9]+)*)?$/;
     KV_NAME = /^[a-z0-9]+(?:-[a-z0-9]+)*$/;
@@ -592,7 +774,7 @@ async function retainedReleaseRefs(store, app, keepRecent = 20, keepReleaseIds =
 var TEMPLATE_APP_PREFIX;
 var init_store = __esm({
   "../../core/serve-storage/src/store.ts"() {
-    init_ownership();
+    init_ownership2();
     init_wip_pointer();
     TEMPLATE_APP_PREFIX = "himi-template-";
   }
@@ -3523,9 +3705,9 @@ var init_preview_surfaces = __esm({
     };
     CAR_TEMPLATES = ["list"];
     PROJECTION_SNAPSHOT_SIZE = "large";
-    widgetSurface = (family, label2, width, height, platformKey = null) => ({
+    widgetSurface = (family, label3, width, height, platformKey = null) => ({
       id: `widget:${family}`,
-      label: label2,
+      label: label3,
       chassis: "widget",
       viewport: { width, height },
       orientations: ["portrait"],
@@ -3738,7 +3920,7 @@ async function browserLogin(opts) {
   const log = opts.log ?? (() => {
   });
   const timeoutMs = opts.timeoutMs ?? DEFAULT_TIMEOUT_MS;
-  return await new Promise((resolve65, reject) => {
+  return await new Promise((resolve66, reject) => {
     let settled = false;
     let loginUrl = "";
     const server = createServer();
@@ -3804,7 +3986,7 @@ async function browserLogin(opts) {
         res.writeHead(200, { "content-type": "text/html; charset=utf-8", "cache-control": "no-store", connection: "close" }).end(closePage(opts.doneTitle ?? "Signed in to himi"));
         const extra = {};
         for (const [k2, v2] of params) if (k2 !== "token" && k2 !== "state") extra[k2] = v2;
-        finish2(() => resolve65({ token, loginUrl, extra }));
+        finish2(() => resolve66({ token, loginUrl, extra }));
       });
     });
     server.on("error", (err) => finish2(() => reject(err)));
@@ -3860,7 +4042,7 @@ __export(cms_schema_exports, {
 });
 var init_cms_schema = __esm({
   "src/cms-schema.ts"() {
-    init_ownership();
+    init_ownership2();
   }
 });
 
@@ -3908,7 +4090,7 @@ async function accountToken(spawnImpl = spawn2) {
   }
   return await mintToken(["token"], "wix token", ACCOUNT_TOKEN_KEY, spawnImpl);
 }
-async function mintToken(args, label2, cacheKey, spawnImpl) {
+async function mintToken(args, label3, cacheKey, spawnImpl) {
   const cached3 = tokenCache.get(cacheKey);
   if (cached3) return cached3;
   const fromEnv = process.env.WIX_TEST_TOKEN?.trim();
@@ -3916,12 +4098,12 @@ async function mintToken(args, label2, cacheKey, spawnImpl) {
     tokenCache.set(cacheKey, fromEnv);
     return fromEnv;
   }
-  const token = await new Promise((resolve65, reject) => {
+  const token = await new Promise((resolve66, reject) => {
     let child;
     try {
       child = spawnImpl("wix", [...args]);
     } catch (e2) {
-      reject(new Error(mintHelp(label2, e2.message)));
+      reject(new Error(mintHelp(label3, e2.message)));
       return;
     }
     let out2 = "";
@@ -3938,23 +4120,23 @@ async function mintToken(args, label2, cacheKey, spawnImpl) {
     };
     const timer = setTimeout(
       () => done(() => reject(new Error(
-        `\`${label2}\` printed no OauthNG token within ${TOKEN_MINT_TIMEOUT_MS}ms. Is the Wix CLI logged in (\`wix login\`)? ${redactForError(out2)}`
+        `\`${label3}\` printed no OauthNG token within ${TOKEN_MINT_TIMEOUT_MS}ms. Is the Wix CLI logged in (\`wix login\`)? ${redactForError(out2)}`
       ))),
       TOKEN_MINT_TIMEOUT_MS
     );
     child.stdout?.on("data", (d2) => {
       out2 += String(d2);
       const m2 = out2.match(TOKEN_RE);
-      if (m2) done(() => resolve65(m2[0]));
+      if (m2) done(() => resolve66(m2[0]));
     });
     child.stderr?.on("data", (d2) => {
       out2 += String(d2);
       const m2 = out2.match(TOKEN_RE);
-      if (m2) done(() => resolve65(m2[0]));
+      if (m2) done(() => resolve66(m2[0]));
     });
-    child.on("error", (e2) => done(() => reject(new Error(mintHelp(label2, e2.message)))));
+    child.on("error", (e2) => done(() => reject(new Error(mintHelp(label3, e2.message)))));
     child.on("exit", (code) => done(() => reject(new Error(
-      `\`${label2}\` exited (code ${code}) without printing an OauthNG token \u2014 is the Wix CLI logged in (\`wix login\`)? ${redactForError(out2)}`
+      `\`${label3}\` exited (code ${code}) without printing an OauthNG token \u2014 is the Wix CLI logged in (\`wix login\`)? ${redactForError(out2)}`
     ))));
   });
   tokenCache.set(cacheKey, token);
@@ -3966,8 +4148,8 @@ function redactForError(buf) {
   return trimmed ? `Output (credentials redacted):
 ${trimmed.slice(0, 300)}` : "It printed nothing.";
 }
-function mintHelp(label2, detail) {
-  return `could not run \`${label2}\` (${detail}). Install the Wix CLI and log in (\`npm i -g @wix/cli && wix login\`), or, with no browser, export WIX_API_KEY (manage.wix.com/account/api-keys).`;
+function mintHelp(label3, detail) {
+  return `could not run \`${label3}\` (${detail}). Install the Wix CLI and log in (\`npm i -g @wix/cli && wix login\`), or, with no browser, export WIX_API_KEY (manage.wix.com/account/api-keys).`;
 }
 function ownerTransport(msid, fetchImpl = fetch, timeoutMs = DEFAULT_TIMEOUT_MS2, mint = siteToken) {
   return async (method, path2, body) => {
@@ -4005,7 +4187,7 @@ function ownerTransport(msid, fetchImpl = fetch, timeoutMs = DEFAULT_TIMEOUT_MS2
     return parsed;
   };
 }
-async function withRetry(label2, fn2, attempts = 3) {
+async function withRetry(label3, fn2, attempts = 3) {
   let lastErr;
   for (let i2 = 0; i2 < attempts; i2++) {
     try {
@@ -4016,7 +4198,7 @@ async function withRetry(label2, fn2, attempts = 3) {
       if (status && status !== 429 && status < 500) throw err;
       if (i2 < attempts - 1) {
         const backoff = 500 * 2 ** i2;
-        console.warn(`  \u21BB ${label2} failed (${status || "network"}), retrying in ${backoff}ms`);
+        console.warn(`  \u21BB ${label3} failed (${status || "network"}), retrying in ${backoff}ms`);
         await new Promise((r2) => setTimeout(r2, backoff));
       }
     }
@@ -7733,12 +7915,12 @@ function resolveButtonTokens(tokens2, size, style) {
   set("height", nonNegative(own(s2, "height")));
   set("paddingH", nonNegative(own(s2, "paddingH")));
   set("paddingV", nonNegative(own(s2, "paddingV")));
-  set("text", nonEmpty(own(s2, "text")));
+  set("text", nonEmpty2(own(s2, "text")));
   set("icon", nonNegative(own(s2, "icon")));
   set("radius", nonNegative(own(v2, "radius")) ?? nonNegative(own(s2, "radius")));
-  set("fill", nonEmpty(own(v2, "fill")));
-  set("label", nonEmpty(own(v2, "label")));
-  set("border", nonEmpty(own(v2, "border")));
+  set("fill", nonEmpty2(own(v2, "fill")));
+  set("label", nonEmpty2(own(v2, "label")));
+  set("border", nonEmpty2(own(v2, "border")));
   set("borderWidth", nonNegative(own(v2, "borderWidth")));
   return out2;
 }
@@ -7834,7 +8016,7 @@ function buttonVariant(style) {
       return "text";
   }
 }
-var SYSTEM_FONT_FAMILY, TONAL_ELEVATION_ALPHA, BUTTON_MIN_HIT_TARGET, nonNegative, nonEmpty, own, COLOR_TOKEN_PROPS, TYPOGRAPHY_TOKEN_PROPS, BUTTON_VARIANTS;
+var SYSTEM_FONT_FAMILY, TONAL_ELEVATION_ALPHA, BUTTON_MIN_HIT_TARGET, nonNegative, nonEmpty2, own, COLOR_TOKEN_PROPS, TYPOGRAPHY_TOKEN_PROPS, BUTTON_VARIANTS;
 var init_tokens = __esm({
   "../../core/ts/src/tokens.ts"() {
     "use strict";
@@ -7842,7 +8024,7 @@ var init_tokens = __esm({
     TONAL_ELEVATION_ALPHA = [0, 0.05, 0.08, 0.11, 0.12, 0.14];
     BUTTON_MIN_HIT_TARGET = 44;
     nonNegative = (v2) => typeof v2 === "number" && Number.isFinite(v2) && v2 >= 0 ? v2 : void 0;
-    nonEmpty = (v2) => typeof v2 === "string" && v2 !== "" ? v2 : void 0;
+    nonEmpty2 = (v2) => typeof v2 === "string" && v2 !== "" ? v2 : void 0;
     own = (o2, k2) => o2 && typeof o2 === "object" && Object.prototype.hasOwnProperty.call(o2, k2) ? o2[k2] : void 0;
     COLOR_TOKEN_PROPS = {
       Badge: ["token"],
@@ -9290,14 +9472,14 @@ function collectDescriptorStrings(descriptor, options = {}) {
     const props = body?.props;
     if (type && props && typeof props === "object") {
       const mapped = STRING_FIELDS_BY_TYPE[type] ?? [];
-      for (const [prop, v2] of Object.entries(props)) {
+      for (const [prop2, v2] of Object.entries(props)) {
         if (typeof v2 !== "string" || BINDING_SIGIL.test(v2)) continue;
         if (!isCopy2(v2)) continue;
-        const at2 = `${path2}.body.props.${prop}`;
-        if (mapped.includes(prop) || SECONDARY_FIELDS.has(prop)) {
-          push({ value: v2, bucket: "reachable", type, prop, path: at2 });
-        } else if (UNREACHED_VISIBLE_FIELDS.has(prop)) {
-          push({ value: v2, bucket: "unreached-prop", type, prop, path: at2 });
+        const at2 = `${path2}.body.props.${prop2}`;
+        if (mapped.includes(prop2) || SECONDARY_FIELDS.has(prop2)) {
+          push({ value: v2, bucket: "reachable", type, prop: prop2, path: at2 });
+        } else if (UNREACHED_VISIBLE_FIELDS.has(prop2)) {
+          push({ value: v2, bucket: "unreached-prop", type, prop: prop2, path: at2 });
         }
       }
       const templ = props.template;
@@ -9713,7 +9895,7 @@ var init_a11y_contract = __esm({
 
 // ../../core/ts/src/schema.ts
 var RICH_CONTENT_EDITOR_TOOLS;
-var init_schema2 = __esm({
+var init_schema3 = __esm({
   "../../core/ts/src/schema.ts"() {
     RICH_CONTENT_EDITOR_TOOLS = ["bold", "italic", "underline", "heading", "bullet", "ordered", "quote", "link", "image", "divider", "undo", "redo"];
   }
@@ -10628,10 +10810,10 @@ function makeInert() {
     return inert;
   };
   const inert = new Proxy(fn2, {
-    get: (_t2, prop) => {
-      if (prop === "then") return void 0;
-      if (prop === Symbol.toPrimitive) return () => "";
-      if (prop === "toString" || prop === "valueOf") return () => "";
+    get: (_t2, prop2) => {
+      if (prop2 === "then") return void 0;
+      if (prop2 === Symbol.toPrimitive) return () => "";
+      if (prop2 === "toString" || prop2 === "valueOf") return () => "";
       return inert;
     },
     apply: () => inert,
@@ -10700,7 +10882,7 @@ function runBundleSandbox(bundleJs, opts) {
     }
   };
   const himalaya = new Proxy(himalayaTarget, {
-    get: (t2, prop) => prop in t2 ? t2[prop] : inert
+    get: (t2, prop2) => prop2 in t2 ? t2[prop2] : inert
   });
   const mkConsole = () => {
     const sink = (level) => (message) => {
@@ -10904,14 +11086,14 @@ async function bootBundleWorker(bundleJs, opts) {
     // than the ambient one (`site.forSite(msid)` → `wix-site-id`), and a wrapper that drops
     // it answers for the wrong business while every caller renders the result as correct.
     call: (method, path2, body, headers2) => {
-      const label2 = `${String(method)} ${String(path2)}`;
-      calls.push(label2);
+      const label3 = `${String(method)} ${String(path2)}`;
+      calls.push(label3);
       return Promise.resolve(opts.wixCall(method, path2, body, headers2)).then((value) => {
         const bytes2 = responseBytes(value);
         if (bytes2 > MAX_FRAME_MESSAGE_BYTES) {
-          oversizeWixResponses.push({ call: label2, bytes: bytes2 });
+          oversizeWixResponses.push({ call: label3, bytes: bytes2 });
           diagnose(
-            `[web-bridge] ${label2} answered ${bytes2} bytes \u2014 over the web Tier-5 frame bridge's ${MAX_FRAME_MESSAGE_BYTES}-byte per-message ceiling, so on web it must be chunked across the bridge. This realm has no serialization boundary, which is why it passes here. Page or narrow the request if you can.`
+            `[web-bridge] ${label3} answered ${bytes2} bytes \u2014 over the web Tier-5 frame bridge's ${MAX_FRAME_MESSAGE_BYTES}-byte per-message ceiling, so on web it must be chunked across the bridge. This realm has no serialization boundary, which is why it passes here. Page or narrow the request if you can.`
           );
         }
         return value;
@@ -10958,7 +11140,7 @@ async function bootBundleWorker(bundleJs, opts) {
       return handle;
     }
   };
-  const himalaya = new Proxy(himalayaTarget, { get: (t2, prop) => prop in t2 ? t2[prop] : inert });
+  const himalaya = new Proxy(himalayaTarget, { get: (t2, prop2) => prop2 in t2 ? t2[prop2] : inert });
   const timers = /* @__PURE__ */ new Set();
   const sbSetTimeout = (fn2, ms2, ...args) => {
     if (typeof fn2 !== "function") return 0;
@@ -11168,11 +11350,11 @@ async function bootBundleWorker(bundleJs, opts) {
     if (typeof prev.error === "string") failed3.error = message;
     def.state = failed3;
   };
-  const runAction = async (def, label2, fn2, args) => {
+  const runAction = async (def, label3, fn2, args) => {
     let timer;
     try {
       const timeout = new Promise((_2, rej) => {
-        timer = setTimeout(() => rej(new Error(`${label2} exceeded ${budgetMs}ms budget`)), budgetMs);
+        timer = setTimeout(() => rej(new Error(`${label3} exceeded ${budgetMs}ms budget`)), budgetMs);
       });
       const next = await Promise.race([Promise.resolve(fn2(def.state, ...args)), timeout]);
       applyResult(def, next);
@@ -11523,10 +11705,10 @@ function nativeRequiredFindings(descriptor) {
           message: `${type}.${name} is REQUIRED by the native decoder but is missing \u2014 native decode rejects it ("Field '${name}' is required for type with serial name 'io.himalaya.core.${type}Props', but it was missing") and drops the WHOLE screen from the seed, while web renders it fine${hint}`
         });
       }
-      for (const [prop, cls] of Object.entries(own3(NATIVE_NESTED_PROPS, type) ?? {})) {
-        const value = own3(bag, prop);
+      for (const [prop2, cls] of Object.entries(own3(NATIVE_NESTED_PROPS, type) ?? {})) {
+        const value = own3(bag, prop2);
         if (value === void 0 || value === null) continue;
-        checkNested(value, cls, `${base}.${prop}`, `${type}.${prop}`);
+        checkNested(value, cls, `${base}.${prop2}`, `${type}.${prop2}`);
       }
     }
     if (body && typeof body === "object" && typeof body.type === "string" && typeof body.package === "string") {
@@ -12224,8 +12406,8 @@ function emptyStateFindings(descriptor) {
     if (body?.package === "himalaya" && body.type === "EmptyState") {
       const p2 = body.props ?? {};
       const base = path2 ? `${path2}.body.props` : "body.props";
-      const label2 = p2.actionLabel;
-      if (p2.action != null && (typeof label2 !== "string" || label2.trim() === "")) {
+      const label3 = p2.actionLabel;
+      if (p2.action != null && (typeof label3 !== "string" || label3.trim() === "")) {
         out2.push({
           path: `${base}.actionLabel`,
           message: "EmptyState.action is set but EmptyState.actionLabel is missing. There is no default label: the renderers draw no button, so the action is unreachable. Set `actionLabel` to the button text (it is also the accessibility label), or remove `action`"
@@ -12913,7 +13095,7 @@ var init_validate_descriptor_core = __esm({
     init_l10n_strings();
     init_a11y_contract();
     init_bindings();
-    init_schema2();
+    init_schema3();
     init_media_value();
     init_frame_limits();
     init_rich_content();
@@ -15767,12 +15949,12 @@ function installWebGlobals(ctx) {
   ctx.setProp(ctx.global, "__himiSetUrlPart", setPart);
   setPart.dispose();
   const decoderInfo = ctx.newFunction("__himiDecoderInfo", (labelH) => {
-    const label2 = ctx.getString(labelH);
+    const label3 = ctx.getString(labelH);
     try {
-      const d2 = new TextDecoder(label2);
+      const d2 = new TextDecoder(label3);
       return ctx.newString(JSON.stringify({ encoding: d2.encoding }));
     } catch (err) {
-      return ctx.newString(JSON.stringify({ error: err?.message ?? `Invalid label: ${label2}` }));
+      return ctx.newString(JSON.stringify({ error: err?.message ?? `Invalid label: ${label3}` }));
     }
   });
   ctx.setProp(ctx.global, "__himiDecoderInfo", decoderInfo);
@@ -19368,9 +19550,9 @@ function renderableFamilies(catalog3 = loadCatalog()) {
 function findFamily(name, catalog3 = loadCatalog()) {
   const exact = catalog3.families[name] ?? catalog3.bundled[name];
   if (exact) return exact;
-  const canonical4 = familyIndex(catalog3).get(normalizeFamily(name));
-  if (!canonical4) return void 0;
-  return catalog3.families[canonical4] ?? catalog3.bundled[canonical4];
+  const canonical5 = familyIndex(catalog3).get(normalizeFamily(name));
+  if (!canonical5) return void 0;
+  return catalog3.families[canonical5] ?? catalog3.bundled[canonical5];
 }
 function canonicalFamilyName(name, catalog3 = loadCatalog()) {
   if (catalog3.families[name] ?? catalog3.bundled[name] ?? catalog3.system[name]) return name;
@@ -22909,9 +23091,9 @@ function isKnownCapability(id) {
 function needsNativeBuild(id) {
   const req = CAPABILITY_NATIVE[catalogKey(id)];
   if (!req) return false;
-  const nonEmpty3 = (v2) => Array.isArray(v2) ? v2.length > 0 : v2 != null && typeof v2 === "object" ? Object.keys(v2).length > 0 : false;
+  const nonEmpty4 = (v2) => Array.isArray(v2) ? v2.length > 0 : v2 != null && typeof v2 === "object" ? Object.keys(v2).length > 0 : false;
   const { ios, android } = req;
-  return nonEmpty3(ios?.usageStrings) || nonEmpty3(ios?.infoPlist) || nonEmpty3(ios?.entitlements) || nonEmpty3(ios?.spmProducts) || nonEmpty3(android?.permissions) || nonEmpty3(android?.features) || nonEmpty3(android?.services) || nonEmpty3(android?.foregroundServiceTypes) || nonEmpty3(android?.gradleDeps);
+  return nonEmpty4(ios?.usageStrings) || nonEmpty4(ios?.infoPlist) || nonEmpty4(ios?.entitlements) || nonEmpty4(ios?.spmProducts) || nonEmpty4(android?.permissions) || nonEmpty4(android?.features) || nonEmpty4(android?.services) || nonEmpty4(android?.foregroundServiceTypes) || nonEmpty4(android?.gradleDeps);
 }
 function capabilitiesUsedBy(bundleJs) {
   const out2 = /* @__PURE__ */ new Set();
@@ -24346,30 +24528,30 @@ function assertSingleModuleInstall(app, paths) {
     );
   }
 }
-function isBegin(line, kind, label2) {
+function isBegin(line, kind, label3) {
   const s2 = line.trim();
-  const open = kind === "yaml" ? `# >>> ${label2}` : kind === "xml" ? `<!-- >>> ${label2}` : `// >>> ${label2}`;
+  const open = kind === "yaml" ? `# >>> ${label3}` : kind === "xml" ? `<!-- >>> ${label3}` : `// >>> ${label3}`;
   const close = kind === "xml" ? "-->" : ">>>";
   if (!s2.startsWith(open) || !s2.endsWith(close)) return false;
   const rest = s2.slice(open.length);
   return /^\s/.test(rest) || rest.startsWith(close) || kind === "xml" && rest.startsWith(">>>");
 }
-function isEnd(line, kind, label2) {
+function isEnd(line, kind, label3) {
   const s2 = line.trim();
-  if (kind === "yaml") return s2 === `# <<< ${label2} <<<`;
-  if (kind === "xml") return s2 === `<!-- <<< ${label2} <<< -->`;
-  return s2 === `// <<< ${label2} <<<`;
+  if (kind === "yaml") return s2 === `# <<< ${label3} <<<`;
+  if (kind === "xml") return s2 === `<!-- <<< ${label3} <<< -->`;
+  return s2 === `// <<< ${label3} <<<`;
 }
-function beginText(kind, label2, indent) {
-  const note = `${label2} (generated by gen-native-config \u2014 do not edit)`;
+function beginText(kind, label3, indent) {
+  const note = `${label3} (generated by gen-native-config \u2014 do not edit)`;
   if (kind === "yaml") return `${indent}# >>> ${note} >>>`;
   if (kind === "xml") return `${indent}<!-- >>> ${note} >>> -->`;
   return `${indent}// >>> ${note} >>>`;
 }
-function endText(kind, label2, indent) {
-  if (kind === "yaml") return `${indent}# <<< ${label2} <<<`;
-  if (kind === "xml") return `${indent}<!-- <<< ${label2} <<< -->`;
-  return `${indent}// <<< ${label2} <<<`;
+function endText(kind, label3, indent) {
+  if (kind === "yaml") return `${indent}# <<< ${label3} <<<`;
+  if (kind === "xml") return `${indent}<!-- <<< ${label3} <<< -->`;
+  return `${indent}// <<< ${label3} <<<`;
 }
 function hostAppliesDeferredWidgetActions(app) {
   const root = join34(appDir(app), "ios");
@@ -24390,36 +24572,36 @@ function hostAppliesDeferredWidgetActions(app) {
   }
   return false;
 }
-function countBeginMarkers(text9, kind, label2) {
-  return text9.split("\n").filter((l2) => isBegin(l2, kind, label2)).length;
+function countBeginMarkers(text9, kind, label3) {
+  return text9.split("\n").filter((l2) => isBegin(l2, kind, label3)).length;
 }
-function countEndMarkers(text9, kind, label2) {
-  return text9.split("\n").filter((l2) => isEnd(l2, kind, label2)).length;
+function countEndMarkers(text9, kind, label3) {
+  return text9.split("\n").filter((l2) => isEnd(l2, kind, label3)).length;
 }
-function hasMarkers(text9, kind, label2) {
+function hasMarkers(text9, kind, label3) {
   const lines = text9.split("\n");
-  return lines.some((l2) => isBegin(l2, kind, label2)) && lines.some((l2) => isEnd(l2, kind, label2));
+  return lines.some((l2) => isBegin(l2, kind, label3)) && lines.some((l2) => isEnd(l2, kind, label3));
 }
-function assertSingleMarkerPair(text9, kind, label2, where = "the file") {
-  const opens = countBeginMarkers(text9, kind, label2);
-  const closes = countEndMarkers(text9, kind, label2);
+function assertSingleMarkerPair(text9, kind, label3, where = "the file") {
+  const opens = countBeginMarkers(text9, kind, label3);
+  const closes = countEndMarkers(text9, kind, label3);
   if (opens > 1 || closes > 1) {
-    const which = opens > 1 ? `">>> ${label2}" opens ${opens} times` : `"<<< ${label2}" closes ${closes} times`;
+    const which = opens > 1 ? `">>> ${label3}" opens ${opens} times` : `"<<< ${label3}" closes ${closes} times`;
     throw new Error(
       `native-config: managed marker ${which} in ${where} \u2014 a merge duplicated the generated block; delete every copy but one, then run \`npm run native-config -- --all\``
     );
   }
 }
-function injectBlock(text9, kind, label2, render, where = "the file") {
-  assertSingleMarkerPair(text9, kind, label2, where);
+function injectBlock(text9, kind, label3, render, where = "the file") {
+  assertSingleMarkerPair(text9, kind, label3, where);
   const lines = text9.split("\n");
-  const beginIdx = lines.findIndex((l2) => isBegin(l2, kind, label2));
-  const endIdx = lines.findIndex((l2) => isEnd(l2, kind, label2));
+  const beginIdx = lines.findIndex((l2) => isBegin(l2, kind, label3));
+  const endIdx = lines.findIndex((l2) => isEnd(l2, kind, label3));
   if (beginIdx === -1 || endIdx === -1 || endIdx < beginIdx) {
-    throw new Error(`native-config: managed markers for "${label2}" not found or mis-ordered`);
+    throw new Error(`native-config: managed markers for "${label3}" not found or mis-ordered`);
   }
   const indent = /^([ \t]*)/.exec(lines[beginIdx])[1];
-  const block = [beginText(kind, label2, indent), ...render(indent), endText(kind, label2, indent)];
+  const block = [beginText(kind, label3, indent), ...render(indent), endText(kind, label3, indent)];
   return [...lines.slice(0, beginIdx), ...block, ...lines.slice(endIdx + 1)].join("\n");
 }
 function androidSettingsGradle(app) {
@@ -24438,12 +24620,12 @@ function androidManifestPath2(app) {
 function automotiveAppDescPath(app) {
   return join34(dirname21(androidManifestPath2(app)), "res", "xml", "automotive_app_desc.xml");
 }
-function applyToFile(path2, kind, label2, render, check) {
+function applyToFile(path2, kind, label3, render, check) {
   if (!existsSync34(path2)) return { path: path2, outcome: "skipped" };
   const before = readFileSync33(path2, "utf8");
-  assertSingleMarkerPair(before, kind, label2, path2);
-  if (!hasMarkers(before, kind, label2)) return { path: path2, outcome: "skipped" };
-  const after = injectBlock(before, kind, label2, render, path2);
+  assertSingleMarkerPair(before, kind, label3, path2);
+  if (!hasMarkers(before, kind, label3)) return { path: path2, outcome: "skipped" };
+  const after = injectBlock(before, kind, label3, render, path2);
   if (after === before) return { path: path2, outcome: "unchanged" };
   if (check) return { path: path2, outcome: "drift" };
   writeFileSync13(path2, after);
@@ -24663,7 +24845,7 @@ function genNativeConfig(app, opts = {}) {
   ];
   if (dist) {
     const manifestPath = androidManifestPath2(app);
-    const marked = (path2, kind, label2) => !existsSync34(path2) || hasMarkers(readFileSync33(path2, "utf8"), kind, label2);
+    const marked = (path2, kind, label3) => !existsSync34(path2) || hasMarkers(readFileSync33(path2, "utf8"), kind, label3);
     if (!marked(iosYml, "yaml", LABEL_IOS_INFO)) throw new Error(`${app}: dist capabilities need the ${LABEL_IOS_INFO} markers in ${iosYml}`);
     if (!marked(manifestPath, "xml", LABEL_ANDROID_SERVICES)) {
       throw new Error(`${app}: dist capabilities need the ${LABEL_ANDROID_SERVICES} markers inside <application> in ${manifestPath}`);
@@ -24673,9 +24855,9 @@ function genNativeConfig(app, opts = {}) {
     const addsSpm = added.spm.some((p2) => !ownModules.spm.includes(p2));
     const addsGradle = added.gradle.some((p2) => !ownModules.gradle.includes(p2));
     if (addsSpm || addsGradle) {
-      const requireMarkers = (path2, kind, label2) => {
-        if (!existsSync34(path2) || !hasMarkers(readFileSync33(path2, "utf8"), kind, label2)) {
-          throw new Error(`${app}: dist added ${dist.added.join(", ")} but ${path2} has no ${label2} markers \u2014 the module would stay unlinked and every verb would answer module_not_linked`);
+      const requireMarkers = (path2, kind, label3) => {
+        if (!existsSync34(path2) || !hasMarkers(readFileSync33(path2, "utf8"), kind, label3)) {
+          throw new Error(`${app}: dist added ${dist.added.join(", ")} but ${path2} has no ${label3} markers \u2014 the module would stay unlinked and every verb would answer module_not_linked`);
         }
       };
       if (addsSpm) {
@@ -26328,10 +26510,10 @@ var init_preview = __esm({
         }
       },
       kill: (pid, signal) => process.kill(pid, signal),
-      portFree: (port) => new Promise((resolve65) => {
+      portFree: (port) => new Promise((resolve66) => {
         const s2 = createServer2();
-        s2.once("error", () => resolve65(false));
-        s2.listen(port, "127.0.0.1", () => s2.close(() => resolve65(true)));
+        s2.once("error", () => resolve66(false));
+        s2.listen(port, "127.0.0.1", () => s2.close(() => resolve66(true)));
       }),
       sleep: (ms2) => new Promise((r2) => setTimeout(r2, ms2)),
       servingIdentity: async (origin) => {
@@ -26909,9 +27091,9 @@ function validateScreenMetadata(screens) {
     labels.set(key2, { viewId, explicit: name !== void 0 || other?.explicit === true });
   }
 }
-function screenMetadataFor(definitions2, id, canonical4) {
+function screenMetadataFor(definitions2, id, canonical5) {
   if (definitions2 && Object.hasOwn(definitions2, id)) return definitions2[id];
-  if (canonical4 && definitions2 && Object.hasOwn(definitions2, canonical4)) return { ...definitions2[canonical4], viewId: definitions2[canonical4].viewId ?? canonical4 };
+  if (canonical5 && definitions2 && Object.hasOwn(definitions2, canonical5)) return { ...definitions2[canonical5], viewId: definitions2[canonical5].viewId ?? canonical5 };
   return {};
 }
 function screenViewRepresentatives(screens) {
@@ -27555,8 +27737,8 @@ function parseApp(dev, config) {
       throw new TrimRefusal(`dev/index.ts: the templated route ${display} has a pattern trim does not recognise (${JSON.stringify(pattern)}); trim compiles a route pattern only when it is anchored and cannot backtrack exponentially (no repeated group whose body repeats or alternates, no backreferences or lookarounds)`);
     }
     const block = parseJson2(dev.slice(open, close), `the templated route ${display} in dev/index.ts`);
-    const label2 = display.replace(/[[{].*$/, "").replace(/[_/]+$/, "") || display;
-    const route = { kind: "templated", label: label2, lineStart: pos, end: close + 4, open, close, block, re: re2, bundles: bundlesOf(block) };
+    const label3 = display.replace(/[[{].*$/, "").replace(/[_/]+$/, "") || display;
+    const route = { kind: "templated", label: label3, lineStart: pos, end: close + 4, open, close, block, re: re2, bundles: bundlesOf(block) };
     routes.push(route);
     templated.push(route);
     pos = close + 4;
@@ -30345,7 +30527,7 @@ function deriveNavigationConfig(app, bundleCtx) {
   if (authConfig !== void 0) config.authConfig = authConfig;
   if (app.iap !== void 0) config.iapConfig = app.iap;
   if (app.cashier !== void 0) config.cashierConfig = app.cashier;
-  if (app.base44 !== void 0) config.base44Config = app.base44;
+  if (app.base44 !== void 0) config.base44Config = { appId: app.base44.appId, ...app.base44.serverUrl !== void 0 ? { serverUrl: app.base44.serverUrl } : {} };
   if (app.wixIap !== void 0) config.wixIapConfig = app.wixIap;
   if (app.wixPlatform !== void 0) config.wixPlatformConfig = app.wixPlatform;
   if (app.devGateway !== void 0) config.devGatewayConfig = app.devGateway;
@@ -30450,7 +30632,7 @@ async function injectRequest(listener, request) {
   req.headers.host ??= url.host;
   if (body && body.length > 0) req.push(body);
   req.push(null);
-  return await new Promise((resolve65, reject) => {
+  return await new Promise((resolve66, reject) => {
     const streamed = () => {
       queueMicrotask(() => {
         req.emit("close");
@@ -30466,7 +30648,7 @@ async function injectRequest(listener, request) {
         else headers2.set(name, value);
       }
       const bodyless = out2.status === 204 || out2.status === 304 || request.method === "HEAD";
-      resolve65(new Response(bodyless ? null : out2.body, { status: out2.status, headers: headers2 }));
+      resolve66(new Response(bodyless ? null : out2.body, { status: out2.status, headers: headers2 }));
     }, streamed);
     res.on("inject-error", reject);
     try {
@@ -31045,6 +31227,13 @@ var init_distribution = __esm({
   }
 });
 
+// ../../core/ts/src/base44-entities.ts
+var init_base44_entities = __esm({
+  "../../core/ts/src/base44-entities.ts"() {
+    init_schema2();
+  }
+});
+
 // ../../core/sdk/functions/src/index.ts
 function fail2(message) {
   throw new Error(`defineFunction: ${message}`);
@@ -31165,7 +31354,7 @@ var init_src3 = __esm({
 // ../../core/ts/src/cms.ts
 var init_cms = __esm({
   "../../core/ts/src/cms.ts"() {
-    init_schema();
+    init_schema2();
   }
 });
 
@@ -31175,9 +31364,11 @@ var init_define_app = __esm({
   "../../core/ts/src/define-app.ts"() {
     init_locale();
     init_distribution();
-    init_schema();
+    init_schema2();
+    init_base44_entities();
     init_src3();
     init_cms();
+    init_base44_entities();
     ALL_ORIENTATIONS2 = [
       "portrait",
       "portraitUpsideDown",
@@ -34169,7 +34360,7 @@ var init_site_menu = __esm({
 var init_src4 = __esm({
   "../../core/ts/src/index.ts"() {
     "use strict";
-    init_schema2();
+    init_schema3();
     init_stream_policy();
     init_locale();
     init_media();
@@ -36787,12 +36978,12 @@ function finalizeRecording(key2, rec) {
   if (rec.finalize) return rec.finalize;
   rec.finalize = (async () => {
     clearTimeout(rec.autoStop);
-    await new Promise((resolve65) => {
+    await new Promise((resolve66) => {
       let done = false;
       const finish2 = () => {
         if (!done) {
           done = true;
-          resolve65();
+          resolve66();
         }
       };
       rec.child.once("close", finish2);
@@ -36903,7 +37094,7 @@ var init_preview2 = __esm({
     DEVICE_LIST_TIMEOUT_MS = 5e3;
     defaultRunner2 = {
       capture(cmd, args, timeoutMs = DEFAULT_CAPTURE_TIMEOUT_MS) {
-        return new Promise((resolve65, reject) => {
+        return new Promise((resolve66, reject) => {
           const child = spawn4(cmd, args, { stdio: ["ignore", "pipe", "pipe"] });
           const out2 = [];
           const err = [];
@@ -36925,7 +37116,7 @@ var init_preview2 = __esm({
           child.stderr.on("data", (b2) => err.push(b2));
           child.on("error", (e2) => settle(reject, e2));
           child.on("close", (code) => {
-            if (code === 0) settle(resolve65, Buffer.concat(out2));
+            if (code === 0) settle(resolve66, Buffer.concat(out2));
             else settle(reject, new Error(`${cmd} exited ${code}: ${Buffer.concat(err).toString("utf8")}`));
           });
         });
@@ -38073,14 +38264,14 @@ function mdScan(src, linkStyle = "") {
   let out2 = "";
   let last = 0;
   for (let m2 = re2.exec(src); m2; m2 = re2.exec(src)) {
-    const [whole, code, label2, url, bold, italic] = m2;
+    const [whole, code, label3, url, bold, italic] = m2;
     out2 += mdEsc(src.slice(last, m2.index));
     if (code !== void 0) {
       out2 += `<code style="${CODE_STYLE}">${mdEsc(code)}</code>`;
-    } else if (label2 !== void 0) {
+    } else if (label3 !== void 0) {
       if (/^https?:\/\//i.test(url)) {
         const href = mdEsc(url).replace(/"/g, "&quot;");
-        out2 += `<a href="${href}" target="_blank" rel="noopener noreferrer"${linkStyle}>${mdScan(label2, linkStyle)}</a>`;
+        out2 += `<a href="${href}" target="_blank" rel="noopener noreferrer"${linkStyle}>${mdScan(label3, linkStyle)}</a>`;
       } else {
         out2 += mdEsc(whole);
       }
@@ -38629,7 +38820,7 @@ var init_icons = __esm({
         // table by the NORMALIZED name, so those separator-free spellings were in the accepted set and
         // are authored in the wild (#473). The validator compares literally against this list, so
         // omitting them would silently start flagging descriptors that render perfectly.
-        ...Object.entries(ICON_NORMALIZED_INDEX).filter(([, canonical4]) => !canonical4.startsWith("_")).map(([normalized]) => normalized)
+        ...Object.entries(ICON_NORMALIZED_INDEX).filter(([, canonical5]) => !canonical5.startsWith("_")).map(([normalized]) => normalized)
       ])
     ].sort();
     FALLBACK = ICON_CATALOG[ICON_FALLBACK];
@@ -38896,13 +39087,13 @@ function webViewWebConfig(raw) {
   return {
     allowedOrigins: Array.isArray(c2.allowedOrigins) ? c2.allowedOrigins.filter((o2) => typeof o2 === "string" && o2.length > 0) : [],
     allow: allow.join("; "),
-    injectStart: nonEmpty2(c2.injectJsDocumentStart),
-    injectEnd: nonEmpty2(c2.injectJsDocumentEnd),
+    injectStart: nonEmpty3(c2.injectJsDocumentStart),
+    injectEnd: nonEmpty3(c2.injectJsDocumentEnd),
     gestureCss: css.join(""),
     disableContextMenu,
-    loadingText: nonEmpty2(c2.loadingText),
+    loadingText: nonEmpty3(c2.loadingText),
     showProgressBar: c2.showProgressBar === true,
-    coverBandColor: nonEmpty2(c2.coverBandColor)
+    coverBandColor: nonEmpty3(c2.coverBandColor)
   };
 }
 function maskInertHtml(html) {
@@ -38993,12 +39184,12 @@ function webViewOriginAllowed(url, origins) {
   }
   return false;
 }
-var NETWORK_SCHEMES, asRecord, nonEmpty2, scriptBody;
+var NETWORK_SCHEMES, asRecord, nonEmpty3, scriptBody;
 var init_webviewFrame = __esm({
   "../../core/web-renderer/src/webviewFrame.ts"() {
     NETWORK_SCHEMES = /* @__PURE__ */ new Set(["http:", "https:"]);
     asRecord = (v2) => v2 && typeof v2 === "object" ? v2 : {};
-    nonEmpty2 = (v2) => typeof v2 === "string" && v2.length > 0 ? v2 : void 0;
+    nonEmpty3 = (v2) => typeof v2 === "string" && v2.length > 0 ? v2 : void 0;
     scriptBody = (js2) => js2.replace(/<\/(script)/gi, "<\\/$1");
   }
 });
@@ -39273,12 +39464,12 @@ function createRicosHostSession(o2) {
     flush() {
       if (!state.ready || state.unavailable || disposed) return Promise.resolve(null);
       const requestId2 = newId();
-      return new Promise((resolve65) => {
+      return new Promise((resolve66) => {
         const timer = t2.setTimeout(() => {
           flushes.delete(requestId2);
-          resolve65(null);
+          resolve66(null);
         }, flushMs);
-        flushes.set(requestId2, { resolve: resolve65, timer });
+        flushes.set(requestId2, { resolve: resolve66, timer });
         o2.send({ v: 1, type: "requestContent", requestId: requestId2 });
       });
     },
@@ -39337,7 +39528,7 @@ async function runRicosImageUpload(o2) {
   };
   session.insertMediaPlaceholder(requestId2);
   try {
-    const entry = await new Promise((resolve65) => {
+    const entry = await new Promise((resolve66) => {
       let done = false;
       let unsub = () => {
       };
@@ -39346,7 +39537,7 @@ async function runRicosImageUpload(o2) {
         done = true;
         t2.clearTimeout(timer);
         queueMicrotask(() => unsub());
-        resolve65(v2);
+        resolve66(v2);
       };
       const timer = t2.setTimeout(() => finish2(null), o2.timeoutMs ?? RICOS_UPLOAD_TIMEOUT_MS);
       unsub = deps.subscribe(`${svc}.uploads.${requestId2}`, (v2) => {
@@ -39833,8 +40024,8 @@ var init_presigned_upload_policy = __esm({
 });
 
 // ../../core/web-renderer/src/mediaFieldUpload.ts
-function mediaFieldName(label2) {
-  return typeof label2 === "string" && label2.trim() !== "" ? label2 : MEDIA_FIELD_DEFAULT_LABEL;
+function mediaFieldName(label3) {
+  return typeof label3 === "string" && label3.trim() !== "" ? label3 : MEDIA_FIELD_DEFAULT_LABEL;
 }
 function mediaFieldState(uploading, hasPhoto, failed3 = false) {
   if (uploading) return "Uploading";
@@ -39868,10 +40059,10 @@ async function runMediaFieldUpload(o2) {
   }, o2.timeoutMs ?? MEDIA_FIELD_UPLOAD_TIMEOUT_MS);
   const bounded2 = (p2) => {
     if (expired) return Promise.reject(new Deadline());
-    return new Promise((resolve65, reject) => {
+    return new Promise((resolve66, reject) => {
       const stop = () => reject(new Deadline());
       onExpire.push(stop);
-      p2.then(resolve65, reject).finally(() => {
+      p2.then(resolve66, reject).finally(() => {
         onExpire = onExpire.filter((f2) => f2 !== stop);
       });
     });
@@ -39894,7 +40085,7 @@ async function runMediaFieldUpload(o2) {
     const before = deps.value(urlPath);
     let uploadUrl;
     try {
-      uploadUrl = await bounded2(new Promise((resolve65, reject) => {
+      uploadUrl = await bounded2(new Promise((resolve66, reject) => {
         let done = false;
         let unsub = () => {
         };
@@ -39902,7 +40093,7 @@ async function runMediaFieldUpload(o2) {
           if (done || typeof v2 !== "string" || v2 === "" || v2 === before) return;
           done = true;
           queueMicrotask(() => unsub());
-          resolve65(v2);
+          resolve66(v2);
         });
         onExpire.push(() => {
           if (!done) {
@@ -39917,7 +40108,7 @@ async function runMediaFieldUpload(o2) {
             if (typeof now === "string" && now !== "" && now !== before) {
               done = true;
               queueMicrotask(() => unsub());
-              resolve65(now);
+              resolve66(now);
               return;
             }
           }
@@ -40023,12 +40214,12 @@ var init_pdfSource = __esm({
 // ../../core/web-renderer/src/a11y/controls.tsx
 import React5 from "react";
 import { jsx as jsx6, jsxs as jsxs3 } from "react/jsx-runtime";
-function labelText(label2, ctx) {
-  if (typeof label2 === "string" && isBinding(label2)) {
-    const v2 = resolveScalarStatic(label2, ctx);
+function labelText(label3, ctx) {
+  if (typeof label3 === "string" && isBinding(label3)) {
+    const v2 = resolveScalarStatic(label3, ctx);
     return v2 == null ? "" : asText2(v2);
   }
-  return asText2(label2);
+  return asText2(label3);
 }
 function resolveRowAction(action, ctx) {
   const resolved2 = resolveItemDeep(action, ctx);
@@ -40743,7 +40934,7 @@ var init_listGestures = __esm({
     init_tokens2();
     PULL_THRESHOLD = 56;
     SWIPE_OPEN = 76;
-    PullToRefreshList = ({ onRefresh, accent, fg, surface, label: label2 = "Pull to refresh", fontFamily = '"Wix Madefor Text", system-ui', style, children }) => {
+    PullToRefreshList = ({ onRefresh, accent, fg, surface, label: label3 = "Pull to refresh", fontFamily = '"Wix Madefor Text", system-ui', style, children }) => {
       const [pull, setPull] = useState2(0);
       const [busy, setBusy] = useState2(false);
       const startY = useRef(null);
@@ -40782,7 +40973,7 @@ var init_listGestures = __esm({
                 type: "button",
                 "data-testid": "list-pull-refresh",
                 "data-himalaya-pull-refresh": true,
-                "aria-label": busy ? "Refreshing" : label2,
+                "aria-label": busy ? "Refreshing" : label3,
                 onClick: fire,
                 style: {
                   display: "flex",
@@ -41622,7 +41813,7 @@ function Spans({ spans, env }) {
     }, children: s2.text }, i2);
   }) });
 }
-function LinkButton({ label: label2, url, env, testId }) {
+function LinkButton({ label: label3, url, env, testId }) {
   const { ctx } = env;
   const fg = accentTextColor(ctx);
   const f2 = ctx.font("bodyEmphasis");
@@ -41660,7 +41851,7 @@ function LinkButton({ label: label2, url, env, testId }) {
         maxWidth: "100%",
         overflowWrap: "anywhere"
       },
-      children: label2
+      children: label3
     }
   );
 }
@@ -41949,8 +42140,8 @@ function updateUrlHash(url, hash2, allowRel = false) {
 function stripPath(str11) {
   return str11.substring(str11.lastIndexOf("/") + 1);
 }
-function shadow(obj4, prop, value, nonSerializable2 = false) {
-  Object.defineProperty(obj4, prop, {
+function shadow(obj4, prop2, value, nonSerializable2 = false) {
+  Object.defineProperty(obj4, prop2, {
     value,
     enumerable: !nonSerializable2,
     configurable: true,
@@ -42070,7 +42261,7 @@ async function fetchData(url, type = "text") {
     }
     return response.text();
   }
-  return new Promise((resolve65, reject) => {
+  return new Promise((resolve66, reject) => {
     const request = new XMLHttpRequest();
     request.open("GET", url, true);
     request.responseType = type === "bytes" ? "arraybuffer" : type;
@@ -42081,14 +42272,14 @@ async function fetchData(url, type = "text") {
       if (request.status === 200 || request.status === 0) {
         switch (type) {
           case "bytes":
-            resolve65(new Uint8Array(request.response));
+            resolve66(new Uint8Array(request.response));
             return;
           case "blob":
           case "json":
-            resolve65(request.response);
+            resolve66(request.response);
             return;
         }
-        resolve65(request.responseText);
+        resolve66(request.responseText);
         return;
       }
       reject(new Error(request.statusText));
@@ -45020,7 +45211,7 @@ var init_pdf = __esm({
         var defineProperty = Object.defineProperty;
         var stringSlice = uncurryThis("".slice);
         var replace = uncurryThis("".replace);
-        var join88 = uncurryThis([].join);
+        var join89 = uncurryThis([].join);
         var CONFIGURABLE_LENGTH = DESCRIPTORS && !fails(function() {
           return defineProperty(function() {
           }, "length", { value: 8 }).length !== 8;
@@ -45047,7 +45238,7 @@ var init_pdf = __esm({
           }
           var state = enforceInternalState(value);
           if (!hasOwn(state, "source")) {
-            state.source = join88(TEMPLATE, typeof name == "string" ? name : "");
+            state.source = join89(TEMPLATE, typeof name == "string" ? name : "");
           }
           return value;
         };
@@ -45092,13 +45283,13 @@ var init_pdf = __esm({
         var aCallable = __webpack_require__3(9306);
         var $TypeError = TypeError;
         var PromiseCapability = function(C2) {
-          var resolve65, reject;
+          var resolve66, reject;
           this.promise = new C2(function($$resolve, $$reject) {
-            if (resolve65 !== void 0 || reject !== void 0) throw new $TypeError("Bad Promise constructor");
-            resolve65 = $$resolve;
+            if (resolve66 !== void 0 || reject !== void 0) throw new $TypeError("Bad Promise constructor");
+            resolve66 = $$resolve;
             reject = $$reject;
           });
-          this.resolve = aCallable(resolve65);
+          this.resolve = aCallable(resolve66);
           this.reject = aCallable(reject);
         };
         module.exports.f = function(C2) {
@@ -45466,8 +45657,8 @@ var init_pdf = __esm({
           anObject(C2);
           if (isObject3(x2) && x2.constructor === C2) return x2;
           var promiseCapability = newPromiseCapability.f(C2);
-          var resolve65 = promiseCapability.resolve;
-          resolve65(x2);
+          var resolve66 = promiseCapability.resolve;
+          resolve66(x2);
           return promiseCapability.promise;
         };
       },
@@ -47570,7 +47761,7 @@ var init_pdf = __esm({
         var charAt = uncurryThis("".charAt);
         var Uint8Array2 = globalThis2.Uint8Array;
         var $Array = globalThis2.Array;
-        var join88 = uncurryThis([].join);
+        var join89 = uncurryThis([].join);
         var INCORRECT_BEHAVIOR_OR_DOESNT_EXISTS = !Uint8Array2 || !Uint8Array2.prototype.toBase64 || !(function() {
           try {
             var target = new Uint8Array2();
@@ -47616,7 +47807,7 @@ var init_pdf = __esm({
                 result[written++] = "=";
               }
             }
-            return join88(result, "");
+            return join89(result, "");
           }
         });
       },
@@ -47628,7 +47819,7 @@ var init_pdf = __esm({
         var anUint8Array = __webpack_require__3(4154);
         var notDetached = __webpack_require__3(5169);
         var numberToString2 = uncurryThis(1.1.toString);
-        var join88 = uncurryThis([].join);
+        var join89 = uncurryThis([].join);
         var $Array = Array;
         var Uint8Array2 = globalThis2.Uint8Array;
         var INCORRECT_BEHAVIOR_OR_DOESNT_EXISTS = !Uint8Array2 || !Uint8Array2.prototype.toHex || !(function() {
@@ -47648,7 +47839,7 @@ var init_pdf = __esm({
               var hex2 = numberToString2(this[i2], 16);
               result[i2] = hex2.length === 1 ? "0" + hex2 : hex2;
             }
-            return join88(result, "");
+            return join89(result, "");
           }
         });
       },
@@ -47806,7 +47997,7 @@ var init_pdf = __esm({
       };
     })();
     (() => {
-      __webpack_require__.o = (obj4, prop) => Object.prototype.hasOwnProperty.call(obj4, prop);
+      __webpack_require__.o = (obj4, prop2) => Object.prototype.hasOwnProperty.call(obj4, prop2);
     })();
     es_array_includes = __webpack_require__(4423);
     es_array_push = __webpack_require__(4114);
@@ -49321,11 +49512,11 @@ var init_pdf = __esm({
             const mustRemoveAspectRatioPromise = _ImageManager._isSVGFittingCanvas;
             const fileReader = new FileReader();
             const imageElement = new Image();
-            const imagePromise = new Promise((resolve65, reject) => {
+            const imagePromise = new Promise((resolve66, reject) => {
               imageElement.onload = () => {
                 data.bitmap = imageElement;
                 data.isSvg = true;
-                resolve65();
+                resolve66();
               };
               fileReader.onload = async () => {
                 const url = data.svgUrl = fileReader.result;
@@ -50011,13 +50202,13 @@ var init_pdf = __esm({
           return;
         }
         const {
-          resolve: resolve65,
+          resolve: resolve66,
           promise
         } = Promise.withResolvers();
         const onEditorsRendered = (evt) => {
           if (evt.pageNumber === pageNumber) {
             this._eventBus.off("editorsrendered", onEditorsRendered);
-            resolve65();
+            resolve66();
           }
         };
         this._eventBus.on("editorsrendered", onEditorsRendered, internalOpt);
@@ -51425,15 +51616,15 @@ var init_pdf = __esm({
         const altText = this.#altTextButton = document.createElement("button");
         altText.className = "altText";
         altText.tabIndex = "0";
-        const label2 = this.#altTextButtonLabel = document.createElement("span");
-        altText.append(label2);
+        const label3 = this.#altTextButtonLabel = document.createElement("span");
+        altText.append(label3);
         if (this.#useNewAltTextFlow) {
           altText.classList.add("new");
           altText.setAttribute("data-l10n-id", _AltText.#l10nNewButton.missing);
-          label2.setAttribute("data-l10n-id", _AltText.#l10nNewButton["missing-label"]);
+          label3.setAttribute("data-l10n-id", _AltText.#l10nNewButton["missing-label"]);
         } else {
           altText.setAttribute("data-l10n-id", "pdfjs-editor-alt-text-button");
-          label2.setAttribute("data-l10n-id", "pdfjs-editor-alt-text-button-label");
+          label3.setAttribute("data-l10n-id", "pdfjs-editor-alt-text-button-label");
         }
         const signal = this.#editor._uiManager._signal;
         altText.addEventListener("contextmenu", noContextMenu, {
@@ -55055,8 +55246,8 @@ var init_pdf = __esm({
           if (this.isSyncFontLoadingSupported) {
             return;
           }
-          await new Promise((resolve65) => {
-            const request = this._queueLoadingCallback(resolve65);
+          await new Promise((resolve66) => {
+            const request = this._queueLoadingCallback(resolve66);
             this._prepareFontLoadEvent(font, request);
           });
         }
@@ -72096,7 +72287,7 @@ fn fs_main(in : VertexOutput) -> @location(0) vec4<f32> {
         input.type = "file";
         input.accept = SupportedImageMimeTypes.join(",");
         const signal = this._uiManager._signal;
-        this.#bitmapPromise = new Promise((resolve65) => {
+        this.#bitmapPromise = new Promise((resolve66) => {
           input.addEventListener("change", async () => {
             if (!input.files || input.files.length === 0) {
               this.remove();
@@ -72111,13 +72302,13 @@ fn fs_main(in : VertexOutput) -> @location(0) vec4<f32> {
               });
               this.#getBitmapFetched(data);
             }
-            resolve65();
+            resolve66();
           }, {
             signal
           });
           input.addEventListener("cancel", () => {
             this.remove();
-            resolve65();
+            resolve66();
           }, {
             signal
           });
@@ -123276,7 +123467,7 @@ function autoGrowBox(contentHeight, lineHeight, verticalPadding, maxLines) {
   const cap = Math.max(floor2, lineHeight * lines + verticalPadding);
   return { height: Math.max(floor2, Math.min(contentHeight, cap)), scrolls: contentHeight > cap };
 }
-function PreviewMenuOverlay({ label: label2, dialogRef, preview, ctx, onClose, anchorHost, children }) {
+function PreviewMenuOverlay({ label: label3, dialogRef, preview, ctx, onClose, anchorHost, children }) {
   const host = anchorHost?.closest(`[${MODAL_SCOPE_ATTR}]`) ?? (typeof document !== "undefined" ? document.body : null);
   const reduce = ctx.reduceMotion();
   const [shown2, setShown] = React9.useState(reduce);
@@ -123299,7 +123490,7 @@ function PreviewMenuOverlay({ label: label2, dialogRef, preview, ctx, onClose, a
       ref: dialogRef,
       role: "dialog",
       "aria-modal": "true",
-      "aria-label": label2,
+      "aria-label": label3,
       "data-testid": "menu.preview-overlay",
       onClick: (e2) => {
         e2.stopPropagation();
@@ -123326,8 +123517,8 @@ function PreviewMenuOverlay({ label: label2, dialogRef, preview, ctx, onClose, a
   );
   return host ? createPortal(overlay, host) : null;
 }
-function wrapModalMenu(modal, label2, placement, ref, menu) {
-  return modal ? /* @__PURE__ */ jsx10("div", { ref, role: "dialog", "aria-modal": "true", "aria-label": label2, style: placement, children: menu }) : menu;
+function wrapModalMenu(modal, label3, placement, ref, menu) {
+  return modal ? /* @__PURE__ */ jsx10("div", { ref, role: "dialog", "aria-modal": "true", "aria-label": label3, style: placement, children: menu }) : menu;
 }
 function bindMediaSlot(value, sessionId) {
   if (typeof value === "string") {
@@ -123549,18 +123740,18 @@ function trackActivatorName(activator) {
   });
   activatorNameObservers.set(activator, observer);
 }
-function TapActivator({ label: label2, state, tabIndex = 0, role = "button", hint, initialFocus }) {
+function TapActivator({ label: label3, state, tabIndex = 0, role = "button", hint, initialFocus }) {
   const ref = React9.useRef(null);
   const hintId = `hm-tap-hint${React9.useId()}`;
   useIsomorphicLayoutEffect(() => {
     const el2 = ref.current;
-    if (!el2 || label2) return;
+    if (!el2 || label3) return;
     trackActivatorName(el2);
     return () => {
       activatorNameObservers.get(el2)?.disconnect();
       activatorNameObservers.delete(el2);
     };
-  }, [label2]);
+  }, [label3]);
   const activator = /* @__PURE__ */ jsx10(
     "span",
     {
@@ -123568,7 +123759,7 @@ function TapActivator({ label: label2, state, tabIndex = 0, role = "button", hin
       ...{ [TAP_ACTIVATOR_ATTR]: "" },
       role,
       tabIndex,
-      "aria-label": label2 || void 0,
+      "aria-label": label3 || void 0,
       "aria-describedby": hint ? hintId : void 0,
       ...initialFocus !== void 0 ? { "data-himalaya-initial-focus": initialFocus } : {},
       ...state,
@@ -124210,7 +124401,7 @@ function actionClick(ctx, action) {
     ctx.onAction(resolveItemDeep2(action, ctx));
   };
 }
-function actionTextButton(ctx, action, label2, color, extra) {
+function actionTextButton(ctx, action, label3, color, extra) {
   if (action == null) return null;
   const onClick = actionClick(ctx, action);
   return /* @__PURE__ */ jsx10(
@@ -124219,7 +124410,7 @@ function actionTextButton(ctx, action, label2, color, extra) {
       type: "button",
       onClick,
       style: { display: "block", margin: 0, padding: 0, appearance: "none", WebkitAppearance: "none", background: "none", border: "none", textAlign: "left", fontFamily: bodyFont(ctx), fontWeight: 600, fontSize: pxToRem(13), color, cursor: onClick ? "pointer" : "default", ...extra },
-      children: label2
+      children: label3
     }
   );
 }
@@ -127414,13 +127605,13 @@ var init_renderNode = __esm({
         if (dateBag && dateFieldId) dateBag.set(dateFieldId, dateBagVal);
       }, [dateBagVal, dateFieldId, dateBag]);
       if (!ctx.onAction) {
-        let label2 = "Select date";
+        let label3 = "Select date";
         if (!ctx.empty && props.valueUnix) {
           const d2 = new Date(props.valueUnix * 1e3);
-          label2 = timeMode ? d2.toLocaleTimeString([], { hour: "2-digit", minute: "2-digit" }) : dateTimeMode ? d2.toLocaleString(void 0, { year: "numeric", month: "short", day: "numeric", hour: "2-digit", minute: "2-digit" }) : d2.toLocaleDateString(void 0, { year: "numeric", month: "short", day: "numeric" });
+          label3 = timeMode ? d2.toLocaleTimeString([], { hour: "2-digit", minute: "2-digit" }) : dateTimeMode ? d2.toLocaleString(void 0, { year: "numeric", month: "short", day: "numeric", hour: "2-digit", minute: "2-digit" }) : d2.toLocaleDateString(void 0, { year: "numeric", month: "short", day: "numeric" });
         }
         return /* @__PURE__ */ jsxs7("div", { style: { display: "flex", alignItems: "center", justifyContent: "space-between", width: "100%", background: C2("surfacePrimary", "#fff"), border: `1px solid ${C2("border", "#e3e3e3")}`, borderRadius: ctx.radius("md", 8), padding: "12px 14px", boxSizing: "border-box", fontFamily: bodyFont(ctx), fontSize: pxToRem(15), color: C2("textPrimary", "#111"), ...wrap }, children: [
-          /* @__PURE__ */ jsx10("span", { children: label2 }),
+          /* @__PURE__ */ jsx10("span", { children: label3 }),
           /* @__PURE__ */ jsx10("span", { style: { fontSize: pxToRem(18) }, children: "\u{1F4C5}" })
         ] });
       }
@@ -128027,8 +128218,8 @@ var init_renderNode = __esm({
       });
       const hasIcon2 = typeof props.icon === "string" ? props.icon.length > 0 : props.icon != null;
       const hasSubtitle = subtitleText.trim().length > 0;
-      const label2 = props.actionLabel;
-      const hasAction = props.action != null && typeof label2 === "string" && label2.trim().length > 0;
+      const label3 = props.actionLabel;
+      const hasAction = props.action != null && typeof label3 === "string" && label3.trim().length > 0;
       const padding = spacingToken(ctx, EMPTY_STATE_SPACING.padding);
       return /* @__PURE__ */ jsxs7("div", { style: { display: "flex", flexDirection: "column", alignItems: "center", textAlign: "center", width: "100%", padding, boxSizing: "border-box", ...wrap }, children: [
         hasIcon2 && /* @__PURE__ */ jsx10("div", { "data-empty-state-part": "icon", "aria-hidden": "true", style: { width: 46, height: 46, borderRadius: 13, background: C2("surfaceTertiary", "#eee"), display: "grid", placeItems: "center", color: C2("textSecondary", "#9aa2ad"), flexShrink: 0 }, children: iconSvg(props.icon, { size: 24 }) }),
@@ -128040,7 +128231,7 @@ var init_renderNode = __esm({
             package: "himalaya",
             type: "Button",
             props: {
-              title: label2,
+              title: label3,
               action: props.action,
               style: props.actionStyle ?? "secondary",
               size: props.actionSize ?? "sm",
@@ -128410,7 +128601,7 @@ var init_renderNode = __esm({
     });
     BottomDrawerNode = withExtras("BottomDrawerNode", ({ props, ctx, wrap, nodeId, nodeExtras = {} }) => {
       const C2 = ctx.color;
-      const label2 = useBoundString(props.label, ctx);
+      const label3 = useBoundString(props.label, ctx);
       const bound = useResolvedScalar(props.presentedPath, ctx);
       const gated = props.presentedPath != null || props.presented != null;
       const presented = props.presentedPath != null ? bound : props.presented;
@@ -128565,7 +128756,7 @@ var init_renderNode = __esm({
       if (!shown2 && !mounted) return /* @__PURE__ */ jsx10("span", { ref: anchorRef, "data-bottom-drawer-anchor": "", hidden: true, ...{ [NODE_EXTRAS_TARGET]: "bottom-drawer-panel" } });
       const sheet = idiomControls(ctx.idiom).sheet;
       const r2 = `${sheet.cornerRadius}px`;
-      const name = label2 || DRAWER_DEFAULT_LABEL;
+      const name = label3 || DRAWER_DEFAULT_LABEL;
       const portaled = host != null;
       const index = Math.min(detentIndex, Math.max(detents.length - 1, 0));
       dragState.current = { index, count: detents.length, dismissible };
@@ -130888,13 +131079,13 @@ __export(render_descriptor_exports, {
   stabilizePngPage: () => stabilizePngPage,
   withRetry: () => withRetry2
 });
-function a11ySemantics(type, props, modifiers, ancestorHidden, resolve65) {
+function a11ySemantics(type, props, modifiers, ancestorHidden, resolve66) {
   if (!A11Y_MODIFIER_KEYS.some((k2) => modifiers[k2] !== void 0)) return void 0;
   const literal = (v2) => typeof v2 === "string" && v2.trim() !== "" && !isDynamicValue(v2) ? v2 : void 0;
   const spoken = (v2) => {
     const lit = literal(v2);
-    if (lit !== void 0 || !resolve65 || typeof v2 !== "string" || !isDynamicValue(v2)) return lit;
-    const r2 = resolve65(v2);
+    if (lit !== void 0 || !resolve66 || typeof v2 !== "string" || !isDynamicValue(v2)) return lit;
+    const r2 = resolve66(v2);
     if (r2 === v2) return void 0;
     return typeof r2 === "string" && r2.trim() !== "" ? r2 : typeof r2 === "number" ? String(r2) : void 0;
   };
@@ -130908,7 +131099,7 @@ function a11ySemantics(type, props, modifiers, ancestorHidden, resolve65) {
   if (name !== void 0 && exposure === "exposed") out2.name = name;
   const hint = spoken(modifiers.accessibilityHint);
   if (hint !== void 0) out2.hint = hint;
-  const value = spoken(modifiers.accessibilityValue) ?? controlState(role, props, resolve65);
+  const value = spoken(modifiers.accessibilityValue) ?? controlState(role, props, resolve66);
   if (value !== void 0) out2.value = value;
   if (typeof modifiers.headingLevel === "number") out2.headingLevel = modifiers.headingLevel;
   if (exposure !== "exposed") out2.exposure = exposure;
@@ -130929,13 +131120,13 @@ function a11ySemantics(type, props, modifiers, ancestorHidden, resolve65) {
   }
   return out2;
 }
-function controlState(role, props, resolve65) {
+function controlState(role, props, resolve66) {
   if (role !== "toggle" && role !== "checkbox" && role !== "radio") return void 0;
   if (role === "checkbox" && props.indeterminate === true) return "mixed";
   const binding2 = typeof props.valuePath === "string" ? props.valuePath : typeof props.value === "string" && isDynamicValue(props.value) ? props.value : void 0;
   let on4;
   if (binding2 !== void 0) {
-    const v2 = resolve65 ? resolve65(binding2) : void 0;
+    const v2 = resolve66 ? resolve66(binding2) : void 0;
     if (v2 === true || v2 === 1 || v2 === "true" || v2 === "1") on4 = true;
     else if (v2 === false || v2 === 0 || v2 === "false" || v2 === "0") on4 = false;
     else return void 0;
@@ -131271,7 +131462,7 @@ async function stabilizePngPage(page, scheme) {
     const browser = globalThis;
     browser.document.documentElement.style.colorScheme = selected;
     await browser.document.fonts?.ready;
-    await new Promise((resolve65) => browser.requestAnimationFrame(() => browser.requestAnimationFrame(() => resolve65())));
+    await new Promise((resolve66) => browser.requestAnimationFrame(() => browser.requestAnimationFrame(() => resolve66())));
   }, scheme);
 }
 async function renderPngBatch(items) {
@@ -131949,7 +132140,7 @@ ${bundleJs}
 function makeInert2() {
   const fn2 = () => inert;
   const inert = new Proxy(fn2, {
-    get: (_t2, prop) => prop === "then" ? void 0 : inert,
+    get: (_t2, prop2) => prop2 === "then" ? void 0 : inert,
     apply: () => inert,
     construct: () => ({})
   });
@@ -132029,7 +132220,7 @@ function runProduce(evaluator, bundleJs, timeoutMs, clock) {
     }
   };
   const sandbox = {
-    himalaya: new Proxy(himalayaTarget, { get: (t2, prop) => prop in t2 ? t2[prop] : inert }),
+    himalaya: new Proxy(himalayaTarget, { get: (t2, prop2) => prop2 in t2 ? t2[prop2] : inert }),
     globalThis: void 0,
     // #4546 — every method a device worker console has, as no-ops: a bundle calling console.group
     // or console.time must not fail here when it works on every phone, web host and wrist.
@@ -132120,7 +132311,7 @@ function interpretProduce(services, parsed) {
   return { services, widgets, views };
 }
 function contentEtag(snapshot2) {
-  const canonical4 = JSON.stringify({
+  const canonical5 = JSON.stringify({
     widgetId: snapshot2.widgetId,
     family: snapshot2.family,
     size: snapshot2.size,
@@ -132129,7 +132320,7 @@ function contentEtag(snapshot2) {
     // Lever A — a timeline change must bump the etag (frame values/times are content).
     frames: snapshot2.frames ?? null
   });
-  return "sha256-" + createHash20("sha256").update(canonical4).digest("base64");
+  return "sha256-" + createHash20("sha256").update(canonical5).digest("base64");
 }
 async function buildWidgetSnapshot(bundleJs, widgetId, opts = {}) {
   const { widgets } = await extractWidgets(bundleJs, opts);
@@ -133880,14 +134071,14 @@ async function pipeWebWixStream(upstream, res, signal, recordStream) {
     const chunk = await reader.read();
     if (chunk.done) break;
     if (chunk.value && !res.write(chunk.value)) {
-      await new Promise((resolve65) => {
+      await new Promise((resolve66) => {
         let settled = false;
         const finish2 = () => {
           if (settled) return;
           settled = true;
           res.off("drain", finish2);
           res.off("close", finish2);
-          resolve65();
+          resolve66();
         };
         if (res.destroyed || !res.writable) finish2();
         else {
@@ -133975,7 +134166,7 @@ async function handleWebWix(req, res, state) {
       }
       if (match) {
         const mocked = match.rule.response;
-        if (mocked.delayMs) await new Promise((resolve65) => setTimeout(resolve65, mocked.delayMs));
+        if (mocked.delayMs) await new Promise((resolve66) => setTimeout(resolve66, mocked.delayMs));
         const payload = mocked.template ? renderTemplate(mocked.body, match.captures) : mocked.body;
         recordStream("mock", mocked.status, match.rule.id, mocked.headers);
         res.statusCode = mocked.status;
@@ -134255,7 +134446,7 @@ async function handleWebWix(req, res, state) {
       }
       if (match) {
         const mocked = match.rule.response;
-        if (mocked.delayMs) await new Promise((resolve65) => setTimeout(resolve65, mocked.delayMs));
+        if (mocked.delayMs) await new Promise((resolve66) => setTimeout(resolve66, mocked.delayMs));
         const responseBody = mocked.template ? renderTemplate(mocked.body, match.captures) : mocked.body;
         record2("mock", mocked.status, responseBody, match.rule.id, mocked.headers);
         return reply(200, { status: mocked.status, body: responseBody ?? "" });
@@ -136491,12 +136682,12 @@ var init_query = __esm({
 });
 
 // ../../core/dev-server/src/crawl-input.ts
-function resolved(v2, resolve65) {
-  if (typeof v2 === "string") return v2.startsWith("$service:") ? resolve65(v2) : v2;
+function resolved(v2, resolve66) {
+  if (typeof v2 === "string") return v2.startsWith("$service:") ? resolve66(v2) : v2;
   if (Array.isArray(v2)) {
     const out2 = v2.flatMap((el2) => {
       if (typeof el2 !== "string" || !el2.startsWith("$service:")) return [el2];
-      const r2 = resolve65(el2);
+      const r2 = resolve66(el2);
       return Array.isArray(r2) ? r2 : [r2];
     });
     return out2;
@@ -136510,9 +136701,9 @@ function hasRowBinding(props) {
     return itemToken(v2) || Array.isArray(v2) && v2.some(itemToken);
   });
 }
-function declaredOptionIds(props, resolve65) {
+function declaredOptionIds(props, resolve66) {
   const literal = props.options ?? props.tabs ?? props.chips;
-  const bound = props.optionsPath !== void 0 ? resolved(props.optionsPath, resolve65) : void 0;
+  const bound = props.optionsPath !== void 0 ? resolved(props.optionsPath, resolve66) : void 0;
   const raw = Array.isArray(bound) ? bound : literal;
   if (!Array.isArray(raw)) return [];
   const out2 = [];
@@ -136555,24 +136746,24 @@ function seedTokens(state, limit = 48) {
   walk2(state, 0);
   return out2;
 }
-function synthesizeInput(control, resolve65, tokens2) {
+function synthesizeInput(control, resolve66, tokens2) {
   const id = `${control.type}.${control.callback}`;
   const row = SYNTHESIZED_CONTROLS[id];
   if (!row) return null;
   const props = control.props;
   if (hasRowBinding(props)) return null;
   if (row.from === "declared-options") {
-    const ids = declaredOptionIds(props, resolve65);
+    const ids = declaredOptionIds(props, resolve66);
     if (!ids.length) return null;
     if (row.encoding === "string-array") {
-      const currentRaw2 = resolved(props.selectedIds, resolve65);
+      const currentRaw2 = resolved(props.selectedIds, resolve66);
       const current3 = (Array.isArray(currentRaw2) ? currentRaw2 : []).filter((x2) => typeof x2 === "string");
       const pick5 = ids.find((o2) => !current3.includes(o2));
       if (pick5 === void 0) return null;
       const value = props.multiSelect === true ? [...current3, pick5] : [pick5];
       return { key: row.key, value, from: row.from, current: current3, control: id };
     }
-    const currentRaw = resolved(props.selectedId, resolve65);
+    const currentRaw = resolved(props.selectedId, resolve66);
     const current2 = typeof currentRaw === "string" ? currentRaw : void 0;
     const pick4 = ids.find((o2) => o2 !== current2);
     if (pick4 === void 0) return null;
@@ -136580,7 +136771,7 @@ function synthesizeInput(control, resolve65, tokens2) {
   }
   if (!acceptsWords(props) || !acceptsWords(control.wrapper ?? {})) return null;
   const binding2 = typeof props.valuePath === "string" ? props.valuePath : typeof props.value === "string" && props.value.startsWith("$service:") ? props.value : void 0;
-  const bound = binding2 === void 0 ? void 0 : resolve65(binding2);
+  const bound = binding2 === void 0 ? void 0 : resolve66(binding2);
   const literal = typeof props.value === "string" && !props.value.startsWith("$") ? props.value : void 0;
   const current = typeof bound === "string" ? bound : typeof bound === "number" ? String(bound) : literal ?? "";
   const max = typeof props.maxLength === "number" && props.maxLength > 0 ? props.maxLength : void 0;
@@ -136980,7 +137171,7 @@ function layeredTransport(layers3) {
   const rules = layers3.rules?.length ? [...layers3.rules] : null;
   const cms = layers3.cmsSeed && Object.keys(layers3.cmsSeed).length ? layers3.cmsSeed : null;
   const canned = layers3.canned && Object.keys(layers3.canned).length ? layers3.canned : null;
-  const label2 = [rules && "mocked", cms && "cms", canned && "canned"].filter(Boolean).join("+") || "offline";
+  const label3 = [rules && "mocked", cms && "cms", canned && "canned"].filter(Boolean).join("+") || "offline";
   const call = async (method, path2, body) => {
     const m2 = String(method).toUpperCase();
     const p2 = String(path2);
@@ -137018,10 +137209,10 @@ function layeredTransport(layers3) {
       const hit = canned[`${m2} ${bare}`] ?? canned[`${m2} ${p2}`];
       if (hit !== void 0) return structuredClone(hit);
     }
-    if (label2 === "offline") throw new Error(REJECT_ALL_MESSAGE);
-    throw new Error(`no data layer served ${m2} ${bare} (layers: ${label2}) \u2014 add a net-mocks rule for it, or handle the failure in the worker`);
+    if (label3 === "offline") throw new Error(REJECT_ALL_MESSAGE);
+    throw new Error(`no data layer served ${m2} ${bare} (layers: ${label3}) \u2014 add a net-mocks rule for it, or handle the failure in the worker`);
   };
-  return { call, label: label2 };
+  return { call, label: label3 };
 }
 function emptiedArrays(value) {
   if (Array.isArray(value)) return [];
@@ -137797,7 +137988,7 @@ async function crawlScreenInner(opts) {
   const drainPollDirectives = (w2, trigger) => {
     const declared = Object.keys(w2.handles);
     for (const d2 of w2.pollDirectives.splice(0)) {
-      const label2 = d2.id ? `_poll "${d2.id}"` : "_poll";
+      const label3 = d2.id ? `_poll "${d2.id}"` : "_poll";
       if (!d2.id) {
         findings.push({
           screen: screenId,
@@ -137817,7 +138008,7 @@ async function crawlScreenInner(opts) {
           trigger,
           invariant: "poll-action-missing",
           severity: "error",
-          message: `${label2} names action "${d2.action}", which is not "<service>.<action>" \u2014 every host ignores it, so the screen never refreshes`,
+          message: `${label3} names action "${d2.action}", which is not "<service>.<action>" \u2014 every host ignores it, so the screen never refreshes`,
           actual: d2.action || void 0,
           hint: `\`action\` is exactly two dot-separated segments, the same contract _stream's onEvent uses. Services defined: ${declared.join(", ") || "none"}`
         });
@@ -137831,7 +138022,7 @@ async function crawlScreenInner(opts) {
           trigger,
           invariant: "poll-action-missing",
           severity: "error",
-          message: `${label2} polls ${d2.action}, but the bundle defines no service "${service}" \u2014 the tick fires forever and does nothing`,
+          message: `${label3} polls ${d2.action}, but the bundle defines no service "${service}" \u2014 the tick fires forever and does nothing`,
           actual: d2.action,
           hint: `services defined: ${declared.join(", ") || "none"}. The host invokes the poll on THIS screen's worker, so the service has to be one this bundle defines.`
         });
@@ -137843,7 +138034,7 @@ async function crawlScreenInner(opts) {
           trigger,
           invariant: "poll-action-missing",
           severity: "error",
-          message: `${label2} polls ${d2.action}, but service "${service}" declares no action "${action}" \u2014 the tick fires forever and does nothing`,
+          message: `${label3} polls ${d2.action}, but service "${service}" declares no action "${action}" \u2014 the tick fires forever and does nothing`,
           actual: d2.action,
           hint: `${service} actions: ${handle.actionNames().join(", ") || "none"}`
         });
@@ -137855,7 +138046,7 @@ async function crawlScreenInner(opts) {
           trigger,
           invariant: "poll-action-missing",
           severity: "error",
-          message: `${label2} asks for an intervalMs of ${d2.intervalMs === null ? "(absent)" : d2.intervalMs} \u2014 every host rejects a non-positive/non-finite interval outright, so no timer is ever armed`,
+          message: `${label3} asks for an intervalMs of ${d2.intervalMs === null ? "(absent)" : d2.intervalMs} \u2014 every host rejects a non-positive/non-finite interval outright, so no timer is ever armed`,
           actual: d2.intervalMs === null ? "(absent)" : String(d2.intervalMs),
           hint: "give a positive number of milliseconds; the host clamps anything under the 1000ms floor and logs the clamp, so a small-but-coherent request is fine"
         });
@@ -139639,7 +139830,7 @@ async function liveRenderServices(bundleJs, opts) {
   return loadBundleServicesLive(bundleJs, liveBootOptions(opts, bus));
 }
 async function settleUnawaitedWork() {
-  for (let turn = 0; turn < SETTLE_TURNS; turn++) await new Promise((resolve65) => setTimeout(resolve65, 0));
+  for (let turn = 0; turn < SETTLE_TURNS; turn++) await new Promise((resolve66) => setTimeout(resolve66, 0));
 }
 async function loadAndSettle(bundleJs, options) {
   const w2 = await bootBundleWorker(bundleJs, options);
@@ -139828,12 +140019,12 @@ async function buildFromLoaded(preloaded, dest, opts = {}) {
         localDbSchema: appLocalDbSchema,
         ...collect2.render.loadBudgetMs ? { budgetMs: collect2.render.loadBudgetMs } : {},
         transportWrap: (call) => async (method, path2, body) => {
-          const label2 = `${String(method).toUpperCase()} ${String(path2).split("?")[0]}`;
-          calls.push(label2);
+          const label3 = `${String(method).toUpperCase()} ${String(path2).split("?")[0]}`;
+          calls.push(label3);
           try {
             return await call(method, path2, body);
           } catch (e2) {
-            if (isUnservedRequest(e2)) unserved.push(label2);
+            if (isUnservedRequest(e2)) unserved.push(label3);
             throw e2;
           }
         }
@@ -140235,7 +140426,7 @@ async function buildFromLoaded(preloaded, dest, opts = {}) {
       const src = t2.pattern.source;
       const raw = src.startsWith("^") && src.endsWith(DUAL_FORM_TAIL) ? src.slice(1, src.length - DUAL_FORM_TAIL.length) : null;
       return { t: t2, canonical: raw && /^[A-Za-z0-9_]+$/.test(raw) ? raw : null };
-    }).filter(({ t: t2, canonical: canonical4 }) => canonical4 !== null || typeof t2.seedIds === "function");
+    }).filter(({ t: t2, canonical: canonical5 }) => canonical5 !== null || typeof t2.seedIds === "function");
     if (bakeRoutes.length) {
       const seedCtx = {
         store: preloaded.module.createStore(app),
@@ -140251,7 +140442,7 @@ async function buildFromLoaded(preloaded, dest, opts = {}) {
         // carry a working URL + digest into the release, not a null.
         asset: (name) => resolveAssetForBuild(preloaded.dir, name, base, app)
       };
-      for (const { t: t2, canonical: canonical4 } of bakeRoutes) {
+      for (const { t: t2, canonical: canonical5 } of bakeRoutes) {
         let ids = [];
         try {
           ids = typeof t2.seedIds === "function" ? await t2.seedIds(seedCtx) ?? [] : [];
@@ -140262,7 +140453,7 @@ async function buildFromLoaded(preloaded, dest, opts = {}) {
             `[release-build] seedIds threw for templated route ${String(t2.pattern)} in "${app}" \u2014 no instances of it will be baked. If it reaches the network, note that the bake origin is ${base} and a plain bake opens no socket. ${String(err)}`
           );
         }
-        if (canonical4) ids = [canonical4, ...ids.filter((id) => id !== canonical4)];
+        if (canonical5) ids = [canonical5, ...ids.filter((id) => id !== canonical5)];
         for (const screenId of ids) {
           if (screens[screenId]) continue;
           if (screenId.includes("/") || screenId.includes("..")) continue;
@@ -140309,7 +140500,7 @@ async function buildFromLoaded(preloaded, dest, opts = {}) {
           }
           const json7 = pinBakedServerBaseUrl(JSON.stringify(descriptor), base);
           await store.putScreen(app, screenId, json7);
-          screens[screenId] = { descriptorHash: sha2564(json7), bundle: bundleName, ...screenMetadataFor(screenMetadata, screenId, canonical4) };
+          screens[screenId] = { descriptorHash: sha2564(json7), bundle: bundleName, ...screenMetadataFor(screenMetadata, screenId, canonical5) };
           rememberInput(bundleName, JSON.parse(json7));
           if (collect2?.descriptors) {
             baked.push({
@@ -140626,8 +140817,8 @@ var init_build3 = __esm({
     init_icons();
     init_build2();
     init_release_pin();
-    init_schema();
-    init_ownership();
+    init_schema2();
+    init_ownership2();
     init_src2();
     init_tier_caps();
     init_stream_policy2();
@@ -142524,10 +142715,10 @@ function isInsideRepo(p2) {
   const rel = relative10(REPO_ROOT3, resolve42(p2));
   return rel !== "" && !rel.startsWith("..") && !isAbsolute4(rel);
 }
-function assertCredentialOutsideRepo(label2, p2) {
+function assertCredentialOutsideRepo(label3, p2) {
   if (isInsideRepo(p2)) {
     throw new Error(
-      `${label2} resolves inside the repo (${p2}). Store credentials/keystores must live outside the tree and be gitignored \u2014 move it and reference an absolute external path.`
+      `${label3} resolves inside the repo (${p2}). Store credentials/keystores must live outside the tree and be gitignored \u2014 move it and reference an absolute external path.`
     );
   }
 }
@@ -152034,9 +152225,9 @@ function testPostcardMessage(s2) {
 function testPostcardCounts(message) {
   const head = message.split(". ")[0];
   const counts = /* @__PURE__ */ new Map();
-  const num4 = (re2, label2) => {
+  const num4 = (re2, label3) => {
     const m2 = re2.exec(head);
-    if (m2) counts.set(label2, Number(m2[1]));
+    if (m2) counts.set(label3, Number(m2[1]));
   };
   if (head.startsWith("Test crawl in the browser: ")) {
     num4(/ — (\d+) findings? to fix\.?$/, "findings");
@@ -152055,12 +152246,12 @@ function testChangeNote(headline2, change) {
   const was = testPostcardCounts(change.previous);
   const now = testPostcardCounts(headline2);
   const sameKind = headline2.startsWith("Test crawl in the browser: ") === change.previous.startsWith("Test crawl in the browser: ");
-  const read = (m2, label2) => m2.get(label2) ?? (label2 === "unlinked screens" && m2.has("broken links") ? 0 : void 0);
+  const read = (m2, label3) => m2.get(label3) ?? (label3 === "unlinked screens" && m2.has("broken links") ? 0 : void 0);
   const labels = [.../* @__PURE__ */ new Set([...now.keys(), ...was.keys()])];
-  const moved = sameKind ? labels.flatMap((label2) => {
-    const a2 = read(was, label2);
-    const b2 = read(now, label2);
-    return a2 !== void 0 && b2 !== void 0 && a2 !== b2 ? [`${label2} ${a2} \u2192 ${b2}`] : [];
+  const moved = sameKind ? labels.flatMap((label3) => {
+    const a2 = read(was, label3);
+    const b2 = read(now, label3);
+    return a2 !== void 0 && b2 !== void 0 && a2 !== b2 ? [`${label3} ${a2} \u2192 ${b2}`] : [];
   }) : [];
   const picture = !change.pictureChanged ? void 0 : change.hadPicture && change.hasPicture ? "the home screen changed" : change.hasPicture ? "a home picture this time" : "no home picture this time";
   if (moved.length) return `Since the last crawl: ${moved.join(", ")}${picture ? `; ${picture}` : ""}.`;
@@ -153223,7 +153414,7 @@ function pushRouteAdvisories(pushRoutes) {
   ];
 }
 function unmappedAdvisory({ destination, vertical, reason, screenId, paramKey }) {
-  const canonical4 = WIX_MEMBER_PUSH_DESTINATIONS.find((d2) => d2.id === destination)?.canonicalScreen;
+  const canonical5 = WIX_MEMBER_PUSH_DESTINATIONS.find((d2) => d2.id === destination)?.canonicalScreen;
   if (reason === "param_not_declared") {
     return `push-route-unmapped: push.screens sends "${destination}" notifications to "${screenId}" with paramKey "${paramKey}", which "${screenId}" does not declare, so a shell would drop it. Use one of the keys its linkable screen declares, or add "${paramKey}" to its paramKeys.`;
   }
@@ -153233,7 +153424,7 @@ function unmappedAdvisory({ destination, vertical, reason, screenId, paramKey })
   if (screenId) {
     return `push-route-unmapped: push.screens maps "${destination}" to "${screenId}", which is not a linkable screen, so the device could not open it. Add it to navigation.linkableScreens, or map another screen.`;
   }
-  return `push-route-unmapped: the site has ${vertical}, but no screen opens "${destination}" notifications. Name that screen "${canonical4}", or map it: push.screens: { "${destination}": "<screenId>" }.`;
+  return `push-route-unmapped: the site has ${vertical}, but no screen opens "${destination}" notifications. Name that screen "${canonical5}", or map it: push.screens: { "${destination}": "<screenId>" }.`;
 }
 function navSharedIdErrors(nav) {
   const items = (key2) => {
@@ -153316,6 +153507,63 @@ var init_nav_lint = __esm({
   }
 });
 
+// src/base44-schema.ts
+var base44_schema_exports = {};
+__export(base44_schema_exports, {
+  BASE44_BUILTIN_FIELDS: () => BASE44_BUILTIN_FIELDS,
+  BASE44_FIELD_TYPES: () => BASE44_FIELD_TYPES,
+  BASE44_STRING_FORMATS: () => BASE44_STRING_FORMATS,
+  base44Prefix: () => base44Prefix,
+  isAdoptedEntity: () => isAdoptedEntity,
+  isOwnedEntity: () => isOwnedEntity,
+  physicalEntityName: () => physicalEntityName,
+  physicalFunctionName: () => physicalFunctionName,
+  validateBase44Entities: () => validateBase44Entities
+});
+var init_base44_schema = __esm({
+  "src/base44-schema.ts"() {
+    init_ownership();
+  }
+});
+
+// src/base44-lint.ts
+var base44_lint_exports = {};
+__export(base44_lint_exports, {
+  base44DefineAppFinding: () => base44DefineAppFinding,
+  base44Issues: () => base44Issues
+});
+function base44DefineAppFinding(err) {
+  const m2 = DEFINE_APP_THROW.exec(err instanceof Error ? err.message : String(err));
+  return m2 ? { ruleCode: m2[2], message: m2[1] } : null;
+}
+async function base44Issues(dir, app, strict, opts) {
+  let base44;
+  try {
+    const cfg = await loadAppConfigModule(dir);
+    base44 = cfg?.base44;
+  } catch (err) {
+    const m2 = opts?.local === true ? base44DefineAppFinding(err) : null;
+    if (!m2) return [];
+    return [{ screen: null, pass: "base44", severity: "error", ruleCode: m2.ruleCode, message: `base44: ${m2.message}` }];
+  }
+  if (!base44 || typeof base44 !== "object") return [];
+  return validateBase44Entities({ entities: base44.entities, functions: base44.functions }, app).map((i2) => ({
+    screen: null,
+    pass: "base44",
+    severity: strict && i2.severity === "warning" ? "error" : i2.severity,
+    ruleCode: i2.ruleCode,
+    message: i2.entity ? `base44 "${i2.entity}": ${i2.message}` : `base44: ${i2.message}`
+  }));
+}
+var DEFINE_APP_THROW;
+var init_base44_lint = __esm({
+  "src/base44-lint.ts"() {
+    init_app_config_loader();
+    init_base44_schema();
+    DEFINE_APP_THROW = /defineApp: base44\.entities: (.*) \(([a-z-]+)\)$/s;
+  }
+});
+
 // src/eject.ts
 var eject_exports = {};
 __export(eject_exports, {
@@ -154768,7 +155016,7 @@ async function pinnedFetch(url, init, addresses, maxResponseBytes) {
   const headers2 = Object.fromEntries(new Headers(init.headers).entries());
   const request = url.protocol === "https:" ? httpsRequest : httpRequest;
   const hostname3 = url.hostname.replace(/^\[|\]$/g, "");
-  return await new Promise((resolve65, reject) => {
+  return await new Promise((resolve66, reject) => {
     let settled = false;
     const finish2 = (fn2) => {
       if (settled) return;
@@ -154805,7 +155053,7 @@ async function pinnedFetch(url, init, addresses, maxResponseBytes) {
         }
         const responseHeaders = new Headers();
         for (const [key2, value] of Object.entries(response.headers)) if (value !== void 0) responseHeaders.set(key2, Array.isArray(value) ? value.join(", ") : value);
-        resolve65(new Response(bytes2, { status: response.statusCode, statusText: response.statusMessage, headers: responseHeaders }));
+        resolve66(new Response(bytes2, { status: response.statusCode, statusText: response.statusMessage, headers: responseHeaders }));
       }));
     });
     req.once("error", (error) => finish2(() => reject(error)));
@@ -155105,7 +155353,7 @@ function createLocalTestSandbox() {
           }
         })();
       `;
-      return await new Promise((resolve65, reject) => {
+      return await new Promise((resolve66, reject) => {
         const { port1, port2 } = new MessageChannel();
         const serializableContext = {
           auth: context.auth,
@@ -155181,7 +155429,7 @@ function createLocalTestSandbox() {
             timer = setTimeout(() => finish2(() => reject(new SandboxError("timeout", `execution exceeded ${limits.timeoutMs}ms`))), Math.max(1, limits.timeoutMs));
             return;
           }
-          if (message.ok) finish2(() => resolve65({ value: message.value, durationMs: Date.now() - started }));
+          if (message.ok) finish2(() => resolve66({ value: message.value, durationMs: Date.now() - started }));
           else finish2(() => reject(new SandboxError("execution_failed", message.message ?? "handler failed")));
         });
         worker.once("error", (error) => finish2(() => reject(new SandboxError("execution_failed", error.message))));
@@ -155478,9 +155726,9 @@ function planResourceChange(input) {
 }
 var init_plan3 = __esm({
   "../../core/data-resources/src/plan.ts"() {
-    init_ownership();
-    init_ownership();
-    init_schema();
+    init_ownership2();
+    init_ownership2();
+    init_schema2();
   }
 });
 
@@ -155573,8 +155821,8 @@ var ResourceApplyError;
 var init_apply = __esm({
   "../../core/data-resources/src/apply.ts"() {
     init_plan3();
-    init_ownership();
-    init_schema();
+    init_ownership2();
+    init_schema2();
     init_tombstones();
     ResourceApplyError = class extends Error {
       constructor(code, message) {
@@ -155790,8 +156038,8 @@ function createFunctionDataCapability(options) {
 }
 var init_data = __esm({
   "../../core/functions-runtime/src/data.ts"() {
-    init_schema();
-    init_ownership();
+    init_schema2();
+    init_ownership2();
     init_plan3();
     init_apply();
     init_tombstones();
@@ -156313,8 +156561,8 @@ var init_functions = __esm({
     init_build2();
     init_gateway();
     init_sandbox();
-    init_schema();
-    init_ownership();
+    init_schema2();
+    init_ownership2();
     BO_FUNCTIONS_BASE_URL = "https://bo.wix.com/_api/himalaya-functions";
   }
 });
@@ -157080,12 +157328,12 @@ function createLoginSession(deps) {
       current = pending;
       const out2 = [];
       const err = [];
-      return new Promise((resolve65) => {
+      return new Promise((resolve66) => {
         let answered = false;
         const answer = () => {
           if (answered) return;
           answered = true;
-          resolve65(current);
+          resolve66(current);
         };
         let child;
         try {
@@ -157208,9 +157456,9 @@ async function startMcpServer(opts) {
     login: createLoginSession({ ...defaultLoginDeps, selfCommand: previewDeps.selfCommand, ...opts.login }),
     ...opts.workspace ? { workspaceBoundary: opts.workspace } : {}
   };
-  const closed = new Promise((resolve65) => {
-    stdin.once("end", resolve65);
-    stdin.once("close", resolve65);
+  const closed = new Promise((resolve66) => {
+    stdin.once("end", resolve66);
+    stdin.once("close", resolve66);
   });
   const handle = serveStdio(
     () => {
@@ -157590,10 +157838,10 @@ function collectSdkModules(files, resolveSubpath) {
   for (const source of Object.values(files)) visit(source);
   return { modules, unsupported };
 }
-function sdkSubpathReader(resolve65) {
+function sdkSubpathReader(resolve66) {
   return (sub) => {
     try {
-      return readFileSync79(resolve65(`@wix/himalaya/${sub}`), "utf8");
+      return readFileSync79(resolve66(`@wix/himalaya/${sub}`), "utf8");
     } catch {
       return null;
     }
@@ -157671,7 +157919,7 @@ async function runBrowserAuthoring(opts) {
   const token = mintToken2(payload);
   const unusable = await probeAuthoringPage(opts.authoringBase, opts.fetchImpl, opts.probeTimeoutMs);
   if (unusable) throw new Error(unusable);
-  return await new Promise((resolve65, reject) => {
+  return await new Promise((resolve66, reject) => {
     let settled = false;
     let url = "";
     const server = createServer5();
@@ -157723,7 +157971,7 @@ async function runBrowserAuthoring(opts) {
         }
         res.writeHead(200, { "content-type": "text/plain" }).end("ok");
         const report3 = body.result;
-        finish2(() => resolve65({ report: report3, url }));
+        finish2(() => resolve66({ report: report3, url }));
       })();
     });
     server.on("error", (e2) => finish2(() => reject(e2)));
@@ -160674,12 +160922,12 @@ function defaultGitOps(cwd = process.cwd()) {
     }
   };
 }
-function slugForTag(label2) {
-  const s2 = label2.toLowerCase().replace(/[^a-z0-9._-]+/g, "-").replace(/-+/g, "-").replace(/^[-.]+|[-.]+$/g, "");
+function slugForTag(label3) {
+  const s2 = label3.toLowerCase().replace(/[^a-z0-9._-]+/g, "-").replace(/-+/g, "-").replace(/^[-.]+|[-.]+$/g, "");
   return s2 || "release";
 }
-function tagName(app, label2) {
-  return `serve/${app}/${slugForTag(label2)}`;
+function tagName(app, label3) {
+  return `serve/${app}/${slugForTag(label3)}`;
 }
 var init_git = __esm({
   "../serve-cli/src/git.ts"() {
@@ -160822,11 +161070,11 @@ async function main() {
   const ni2 = rest.indexOf("--name");
   const name = ni2 >= 0 ? rest[ni2 + 1] : cfg.app ?? app;
   const yml = readFileSync86(iosProjectYml(app), "utf8");
-  for (const { id, label: label2 } of [{ id: identifier, label: name }, ...embeddedBundles(yml).map((b2) => ({
+  for (const { id, label: label3 } of [{ id: identifier, label: name }, ...embeddedBundles(yml).map((b2) => ({
     id: embeddedBundleId(identifier, b2),
     label: `${name} ${embeddedAppIdLabel(b2)}`
   }))]) {
-    const r2 = await registerBundleId({ identifier: id, name: label2 });
+    const r2 = await registerBundleId({ identifier: id, name: label3 });
     console.log(`bundle id ${id}: ${r2.status}${r2.id ? ` (${r2.id})` : ""}`);
   }
 }
@@ -160930,7 +161178,7 @@ var init_iap_client = __esm({
         this.options = options;
         this.fetchImpl = options.fetchImpl ?? ((input, init) => globalThis.fetch(input, init));
         this.now = options.now ?? Date.now;
-        this.sleep = options.sleep ?? ((ms2) => new Promise((resolve65) => setTimeout(resolve65, ms2)));
+        this.sleep = options.sleep ?? ((ms2) => new Promise((resolve66) => setTimeout(resolve66, ms2)));
       }
       fetchImpl;
       now;
@@ -161444,15 +161692,15 @@ function reportCredentialMaterial(reader, value, path2) {
     for (const [key2, v2] of Object.entries(value)) reportCredentialMaterial(reader, v2, childPath(path2, key2));
   }
 }
-function parseJson3(text9, label2) {
+function parseJson3(text9, label3) {
   try {
     return JSON.parse(text9);
   } catch (e2) {
-    throw new Error(`${label2} is not valid JSON: ${e2.message}`);
+    throw new Error(`${label3} is not valid JSON: ${e2.message}`);
   }
 }
-function parseIapManifest(text9, label2) {
-  const doc = parseJson3(text9, label2);
+function parseIapManifest(text9, label3) {
+  const doc = parseJson3(text9, label3);
   const reader = new ManifestReader();
   const obj4 = reader.object(doc, "", MANIFEST_KEYS);
   if (obj4.manifestVersion !== 1) reader.problems.push("manifestVersion must be 1");
@@ -161460,7 +161708,7 @@ function parseIapManifest(text9, label2) {
   const items = reader.list(obj4, "items", "").map((item, i2) => readItem(reader, item, i2));
   reportDuplicateMappings(reader, items);
   reportCredentialMaterial(reader, doc, "");
-  if (reader.problems.length) throw new IapManifestError(label2, reader.problems);
+  if (reader.problems.length) throw new IapManifestError(label3, reader.problems);
   return { manifestVersion: 1, target, items };
 }
 function sortKeys(value) {
@@ -161482,10 +161730,10 @@ var IapManifestError, APPLE_APP_ID, TEAM_ID, BUNDLE_ID, PRODUCT_ID, TERRITORY, C
 var init_iap_manifest = __esm({
   "../store-release/iap-manifest.ts"() {
     IapManifestError = class extends Error {
-      constructor(label2, problems) {
-        super(`${label2} is not a valid IAP manifest:
+      constructor(label3, problems) {
+        super(`${label3} is not a valid IAP manifest:
   - ${problems.join("\n  - ")}`);
-        this.label = label2;
+        this.label = label3;
         this.problems = problems;
       }
     };
@@ -162685,22 +162933,22 @@ function profilePath(name, home = homedir9()) {
   }
   return join74(credentialsDir(home), `${name}.json`);
 }
-function parseProfile(text9, label2) {
+function parseProfile(text9, label3) {
   let doc;
   try {
     doc = JSON.parse(text9);
   } catch (e2) {
-    throw new Error(`${label2} is not valid JSON: ${e2.message}`);
+    throw new Error(`${label3} is not valid JSON: ${e2.message}`);
   }
   if (!doc || typeof doc !== "object" || Array.isArray(doc)) {
-    throw new Error(`${label2} must be a JSON object with ${FIELDS.join(", ")}.`);
+    throw new Error(`${label3} must be a JSON object with ${FIELDS.join(", ")}.`);
   }
   const rec = doc;
   const out2 = {};
   for (const f2 of FIELDS) {
     const v2 = rec[f2];
     if (typeof v2 !== "string" || !v2.trim() || /^TODO/i.test(v2.trim())) {
-      throw new Error(`${label2} is missing a usable "${f2}" (got ${JSON.stringify(v2)}).`);
+      throw new Error(`${label3} is missing a usable "${f2}" (got ${JSON.stringify(v2)}).`);
     }
     out2[f2] = v2.trim();
   }
@@ -162942,15 +163190,15 @@ function tierPrice(amount, applePoint, options) {
   return { baseTerritory: options.baseTerritory, currency: options.currency, amount: normalizeAmount(applePoint) };
 }
 function newTier(key2, price, options, names) {
-  const label2 = `${price.amount} ${options.currency}`;
+  const label3 = `${price.amount} ${options.currency}`;
   return {
     unlocks: [],
     classification: "digital",
     entitlement: `tier:${key2}`,
     productId: tierProductId(options, key2),
     type: "consumable",
-    referenceName: names.claim(`Credit ${label2}`, key2),
-    localizations: [{ locale: options.locale, name: displayName(`Unlock (${label2})`), description: TIER_DESCRIPTION }],
+    referenceName: names.claim(`Credit ${label3}`, key2),
+    localizations: [{ locale: options.locale, name: displayName(`Unlock (${label3})`), description: TIER_DESCRIPTION }],
     price,
     territories: options.territories
   };
@@ -163499,15 +163747,15 @@ async function allByCursor(wix, path2, key2, extra = {}) {
   }
   throw new Error(`${path2} had more than ${MAX_PAGES2} pages \u2014 refusing to draft from a partial catalog`);
 }
-async function allByOffset(fetchPage, label2) {
+async function allByOffset(fetchPage, label3) {
   const rows = [];
   for (let page = 0; page < MAX_PAGES2; page++) {
-    const { rows: batch, total } = await withRetry(label2, () => fetchPage(rows.length));
+    const { rows: batch, total } = await withRetry(label3, () => fetchPage(rows.length));
     rows.push(...batch);
     const done = batch.length === 0 || (total !== void 0 ? rows.length >= total : batch.length < PAGE2);
     if (done) return rows;
   }
-  throw new Error(`${label2} had more than ${MAX_PAGES2} pages \u2014 refusing to draft from a partial catalog`);
+  throw new Error(`${label3} had more than ${MAX_PAGES2} pages \u2014 refusing to draft from a partial catalog`);
 }
 function fromV3Product(p2) {
   return catalogItem({
@@ -164572,7 +164820,7 @@ function firstProblem(report3) {
 function printConnect(out2, report3, heading) {
   out2.line(`himi store iap connect \u2014 ${heading}`);
   out2.line(`  ${pad("site")}${report3.site} \xB7 bundle ${report3.bundleId}`);
-  const row = (label2, step) => out2.line(`  ${pad(label2)}${step.state.padEnd(9)}${step.detail}`);
+  const row = (label3, step) => out2.line(`  ${pad(label3)}${step.state.padEnd(9)}${step.detail}`);
   row("app", report3.app);
   row("key", report3.credentials);
   row("provider", report3.provider);
@@ -164832,7 +165080,7 @@ function defaultStoreIapDeps() {
     profileTeam: (profile) => resolveStoreCredentials({ app: profile, cfg: {}, profileFlag: profile, env: {} }).team,
     confirm: confirmOnTerminal,
     now: () => /* @__PURE__ */ new Date(),
-    sleep: (ms2) => new Promise((resolve65) => setTimeout(resolve65, ms2))
+    sleep: (ms2) => new Promise((resolve66) => setTimeout(resolve66, ms2))
   };
 }
 var STORE_IAP_USAGE, SUMMARY_THRESHOLD, SUMMARY_DETAIL_LIMIT, UsageError, CommandOutput, pad, DECISION_ORDER, OUTCOME_ORDER, COMPLETE, DRAFT_MODES, TERRITORY_CODE, LOCALE_CODE, GRID_UNAVAILABLE_NOTE, KeyError, CredentialsError, writesPlanned, COMMANDS;
@@ -164902,7 +165150,7 @@ var init_store_iap = __esm({
         return scrubString(out2);
       }
     };
-    pad = (label2, width = 12) => label2.padEnd(width);
+    pad = (label3, width = 12) => label3.padEnd(width);
     DECISION_ORDER = ["create", "update", "reuse", "conflict"];
     OUTCOME_ORDER = ["created", "updated", "reused", "conflict", "partial", "failed", "deferred", "absent", "incomplete"];
     COMPLETE = /* @__PURE__ */ new Set(["created", "updated", "reused"]);
@@ -165007,8 +165255,8 @@ __export(store_exports, {
   partitionFindings: () => partitionFindings,
   runStore: () => runStore
 });
-function pad2(label2, width = 12) {
-  return label2.length >= width ? label2 : label2 + " ".repeat(width - label2.length);
+function pad2(label3, width = 12) {
+  return label3.length >= width ? label3 : label3 + " ".repeat(width - label3.length);
 }
 function accountHeader(args) {
   const { app, bundleId, version: version4, nextBuild, creds, track } = args;
@@ -166527,7 +166775,7 @@ async function runAllMembers(args) {
     const result = await sendCampaign({
       recipients,
       campaignId: requestId2,
-      wait: deps.wait ?? ((ms2) => new Promise((resolve65) => setTimeout(resolve65, ms2))),
+      wait: deps.wait ?? ((ms2) => new Promise((resolve66) => setTimeout(resolve66, ms2))),
       onProgress: (completed) => {
         if (completed % 10 === 0 || completed === recipients.length) {
           io2.log(JSON.stringify({ ok: true, state: "progress", campaignId: requestId2, completed, recipients: recipients.length }));
@@ -166998,6 +167246,150 @@ var init_base44_auth_check = __esm({
   }
 });
 
+// src/base44-adopt.ts
+var base44_adopt_exports = {};
+__export(base44_adopt_exports, {
+  ADOPT_MODULE_FILENAME: () => ADOPT_MODULE_FILENAME,
+  AdoptError: () => AdoptError,
+  adoptFromBook: () => adoptFromBook,
+  renderAdoptModule: () => renderAdoptModule,
+  runBase44Adopt: () => runBase44Adopt
+});
+import { existsSync as existsSync77, readFileSync as readFileSync97, writeFileSync as writeFileSync32 } from "node:fs";
+import { join as join81, resolve as resolve59 } from "node:path";
+function prop(entity, key2) {
+  const props = entity.schema?.properties;
+  const p2 = props && typeof props === "object" ? props[key2] : void 0;
+  return p2 && typeof p2 === "object" && !Array.isArray(p2) ? p2 : {};
+}
+function adoptEntity(entity, skipped, prefix) {
+  if (typeof entity.name !== "string" || !ENTITY_NAME2.test(entity.name)) {
+    skipped.push({ entity: String(entity.name), reason: "entity name is not alphanumeric, so it cannot be declared" });
+    return null;
+  }
+  if (prefix && entity.name.startsWith(prefix)) {
+    skipped.push({ entity: entity.name, reason: `in this app's owned namespace "${prefix}" \u2014 declare it with \`name\` if himi owns it` });
+    return null;
+  }
+  const fields = [];
+  for (const f2 of entity.fields) {
+    if (BUILTINS.has(f2.name)) {
+      skipped.push({ entity: entity.name, field: f2.name, reason: "built-in field \u2014 Base44 adds it to every row" });
+      continue;
+    }
+    if (!TYPES.has(f2.type)) {
+      skipped.push({ entity: entity.name, field: f2.name, reason: `unsupported type "${f2.type}" \u2014 supported: ${BASE44_FIELD_TYPES.join(", ")}` });
+      continue;
+    }
+    const p2 = prop(entity, f2.name);
+    const field = { key: f2.name, type: f2.type };
+    if (f2.format !== void 0) {
+      if (f2.type === "string" && FORMATS2.has(f2.format)) field.format = f2.format;
+      else skipped.push({ entity: entity.name, field: f2.name, reason: `format "${f2.format}" dropped \u2014 only ${BASE44_STRING_FORMATS.join(", ")} on string fields` });
+    }
+    if (Array.isArray(f2.enum)) {
+      const values = f2.enum.filter((v2) => typeof v2 === "string" || typeof v2 === "number");
+      if (values.length) field.enum = values;
+    }
+    if (p2.default !== void 0) field.default = p2.default;
+    const items = p2.items;
+    if (f2.type === "array" && items !== void 0) {
+      if (items && typeof items.type === "string" && TYPES.has(items.type)) field.items = { type: items.type };
+      else skipped.push({ entity: entity.name, field: f2.name, reason: `array item schema ${JSON.stringify(items)} dropped \u2014 only ${BASE44_FIELD_TYPES.join(", ")} item types` });
+    }
+    if (f2.description) field.description = f2.description;
+    if (f2.rls !== void 0) field.rls = f2.rls;
+    fields.push(field);
+  }
+  const keys = new Set(fields.map((f2) => f2.key));
+  const required3 = entity.required.filter((k2) => keys.has(k2));
+  return {
+    base44Name: entity.name,
+    ...entity.title ? { title: entity.title } : {},
+    fields,
+    ...required3.length ? { required: required3 } : {},
+    // Verbatim: the access rule is Base44's own document, and himi does not reinterpret it.
+    ...entity.rls ? { rls: entity.rls } : {}
+  };
+}
+function adoptFromBook(book, opts = {}) {
+  const prefix = opts.app ? base44Prefix(opts.app) : void 0;
+  const skipped = [];
+  const only = opts.only?.length ? new Set(opts.only) : void 0;
+  const entities = (book.entities ?? []).filter((e2) => !only || only.has(e2.name)).map((e2) => adoptEntity(e2, skipped, prefix)).filter((e2) => e2 !== null);
+  const seen = /* @__PURE__ */ new Set();
+  const functions = [];
+  for (const f2 of book.functions ?? []) {
+    if (!f2?.name || seen.has(f2.name)) continue;
+    seen.add(f2.name);
+    if (!/^[A-Za-z0-9][A-Za-z0-9_-]*$/.test(f2.name)) {
+      skipped.push({ entity: f2.name, reason: "function name is not letters, digits, - or _" });
+      continue;
+    }
+    functions.push({ base44Name: f2.name });
+  }
+  return { entities, functions, skipped };
+}
+function renderAdoptModule(r2, source = ".himi/base44-book/book.json") {
+  const json7 = (v2) => JSON.stringify(v2, null, 2);
+  return [
+    `// Generated by \`himi base44 adopt\` from ${source}. Every entry is ADOPTED: the Base44 app's`,
+    `// own entity or function, read-only to himi. Review it, then wire it into config.ts:`,
+    `//   defineApp({ \u2026, base44: { appId, entities: base44Entities, functions: base44Functions } })`,
+    `// See docs/base44-entities.md.`,
+    `import type { Base44EntitySpec, Base44FunctionSpec } from "@wix/himalaya/core";`,
+    ``,
+    `export const base44Entities = ${json7(r2.entities)} satisfies Base44EntitySpec[];`,
+    ``,
+    `export const base44Functions = ${json7(r2.functions)} satisfies Base44FunctionSpec[];`,
+    ``
+  ].join("\n");
+}
+function runBase44Adopt(opts) {
+  const bookDir = resolve59(opts.cwd, opts.book ?? ".himi/base44-book");
+  const bookPath = join81(bookDir, "book.json");
+  let book;
+  try {
+    book = JSON.parse(readFileSync97(bookPath, "utf8"));
+    if (!book || typeof book !== "object" || !Array.isArray(book.entities)) throw new Error("not a Base44 app book (no entities[])");
+  } catch (e2) {
+    throw new AdoptError("book_unreadable", `could not read ${bookPath}: ${e2.message}. Run \`himi base44 analyze --app-id <id>\` first.`);
+  }
+  const unknown = (opts.only ?? []).filter((n2) => !book.entities.some((e2) => e2.name === n2));
+  if (unknown.length) {
+    throw new AdoptError("unknown_entity", `--entities names ${unknown.map((n2) => `"${n2}"`).join(", ")}, which the book does not have`, 2, { known: book.entities.map((e2) => e2.name) });
+  }
+  const result = adoptFromBook(book, { only: opts.only, app: opts.app });
+  const module = renderAdoptModule(result, opts.book ? join81(opts.book, "book.json") : void 0);
+  const issues = validateBase44Entities({ entities: result.entities, functions: result.functions }, opts.app);
+  if (opts.write === void 0 || opts.write === false || issues.some((i2) => i2.severity === "error")) return { result, module, issues };
+  const target = typeof opts.write === "string" ? resolve59(opts.cwd, opts.write) : join81(opts.cwd, ADOPT_MODULE_FILENAME);
+  if (existsSync77(target)) {
+    throw new AdoptError("adopt_target_exists", `${target} already exists \u2014 adopt never overwrites. Delete or rename it, or pass --write <other path>.`, 1, { path: target });
+  }
+  writeFileSync32(target, module);
+  return { result, module, issues, written: target };
+}
+var ADOPT_MODULE_FILENAME, TYPES, FORMATS2, BUILTINS, ENTITY_NAME2, AdoptError;
+var init_base44_adopt = __esm({
+  "src/base44-adopt.ts"() {
+    init_base44_schema();
+    ADOPT_MODULE_FILENAME = "base44-entities.ts";
+    TYPES = new Set(BASE44_FIELD_TYPES);
+    FORMATS2 = new Set(BASE44_STRING_FORMATS);
+    BUILTINS = new Set(BASE44_BUILTIN_FIELDS);
+    ENTITY_NAME2 = /^[A-Za-z][A-Za-z0-9]*$/;
+    AdoptError = class extends Error {
+      constructor(code, message, exit = 1, extra = {}) {
+        super(message);
+        this.code = code;
+        this.exit = exit;
+        this.extra = extra;
+      }
+    };
+  }
+});
+
 // src/base44-auth.ts
 var base44_auth_exports = {};
 __export(base44_auth_exports, {
@@ -167015,20 +167407,20 @@ __export(base44_auth_exports, {
   usableBase44Auth: () => usableBase44Auth,
   writeBase44Session: () => writeBase44Session
 });
-import { chmodSync as chmodSync4, existsSync as existsSync77, mkdirSync as mkdirSync36, readFileSync as readFileSync97, rmSync as rmSync20, writeFileSync as writeFileSync32 } from "node:fs";
+import { chmodSync as chmodSync4, existsSync as existsSync78, mkdirSync as mkdirSync36, readFileSync as readFileSync98, rmSync as rmSync20, writeFileSync as writeFileSync33 } from "node:fs";
 import { homedir as homedir13 } from "node:os";
-import { dirname as dirname45, join as join81 } from "node:path";
+import { dirname as dirname45, join as join82 } from "node:path";
 function base44ApiBase(env = process.env) {
   return (env.BASE44_API_URL?.trim() || "https://app.base44.com").replace(/\/+$/, "");
 }
 function base44SessionPath(home = homedir13()) {
-  return join81(home, ".himi", "base44", "session.json");
+  return join82(home, ".himi", "base44", "session.json");
 }
 function readBase44Session(home) {
   const p2 = base44SessionPath(home);
-  if (!existsSync77(p2)) return void 0;
+  if (!existsSync78(p2)) return void 0;
   try {
-    const s2 = JSON.parse(readFileSync97(p2, "utf8"));
+    const s2 = JSON.parse(readFileSync98(p2, "utf8"));
     return typeof s2.accessToken === "string" && s2.accessToken ? s2 : void 0;
   } catch {
     return void 0;
@@ -167037,14 +167429,14 @@ function readBase44Session(home) {
 function writeBase44Session(session, home) {
   const p2 = base44SessionPath(home);
   mkdirSync36(dirname45(p2), { recursive: true, mode: 448 });
-  writeFileSync32(p2, `${JSON.stringify(session, null, 2)}
+  writeFileSync33(p2, `${JSON.stringify(session, null, 2)}
 `, { mode: 384 });
   chmodSync4(p2, 384);
   return p2;
 }
 function deleteBase44Session(home) {
   const p2 = base44SessionPath(home);
-  if (!existsSync77(p2)) return false;
+  if (!existsSync78(p2)) return false;
   rmSync20(p2, { force: true });
   return true;
 }
@@ -167139,9 +167531,9 @@ async function base44DeviceLogin(opts) {
   throw new Error("the Base44 sign-in code expired before it was approved \u2014 run `himi base44 login` again");
 }
 function importBase44CliSession(home = homedir13(), env = process.env) {
-  const src = join81(home, ".base44", "auth", "auth.json");
-  if (!existsSync77(src)) throw new Error(`no Base44 CLI session at ${src} \u2014 run \`npx base44 login\` first, or use \`himi base44 login\``);
-  const a2 = JSON.parse(readFileSync97(src, "utf8"));
+  const src = join82(home, ".base44", "auth", "auth.json");
+  if (!existsSync78(src)) throw new Error(`no Base44 CLI session at ${src} \u2014 run \`npx base44 login\` first, or use \`himi base44 login\``);
+  const a2 = JSON.parse(readFileSync98(src, "utf8"));
   if (typeof a2.accessToken !== "string" || !a2.accessToken) throw new Error(`${src} holds no access token`);
   const session = {
     accessToken: a2.accessToken,
@@ -167312,10 +167704,10 @@ function assertPublicSiteUrl(raw) {
   if (refusal) throw new Error(refusal);
 }
 function resolveAll(hostname3) {
-  return new Promise((resolve65, reject) => {
+  return new Promise((resolve66, reject) => {
     dnsLookup(hostname3, { all: true, verbatim: true }, (err, addresses) => {
       if (err) reject(err);
-      else resolve65(addresses);
+      else resolve66(addresses);
     });
   });
 }
@@ -167323,13 +167715,13 @@ function withAbort(start, signal, what) {
   if (signal?.aborted) return Promise.reject(new Error(`${what} aborted`));
   const work = start();
   if (!signal) return work;
-  return new Promise((resolve65, reject) => {
+  return new Promise((resolve66, reject) => {
     const onAbort = () => reject(new Error(`${what} aborted`));
     signal.addEventListener("abort", onAbort, { once: true });
-    work.then(resolve65, reject).finally(() => signal.removeEventListener("abort", onAbort));
+    work.then(resolve66, reject).finally(() => signal.removeEventListener("abort", onAbort));
   });
 }
-async function pinAddress(url, resolve65 = resolveAll, signal) {
+async function pinAddress(url, resolve66 = resolveAll, signal) {
   const host = url.hostname.replace(/^\[|\]$/g, "");
   if (ipv4Octets(host)) {
     if (isBlockedAddress(host)) throw new Error(`${host} is a blocked address`);
@@ -167339,7 +167731,7 @@ async function pinAddress(url, resolve65 = resolveAll, signal) {
     if (isBlockedAddress(host)) throw new Error(`${host} is a blocked address`);
     return { address: host, family: 6 };
   }
-  const addresses = await withAbort(() => resolve65(host), signal, `${host} lookup`);
+  const addresses = await withAbort(() => resolve66(host), signal, `${host} lookup`);
   if (!addresses.length) throw new Error(`${host} resolved to no address`);
   const blocked = addresses.filter((a2) => isBlockedAddress(a2.address)).map((a2) => a2.address);
   if (blocked.length) throw new Error(`${host} resolves to a blocked address (${blocked.join(", ")})`);
@@ -167379,7 +167771,7 @@ function copyIncomingHeaders(headers2) {
   return out2;
 }
 function requestOnce(url, pinned, init) {
-  return new Promise((resolve65, reject) => {
+  return new Promise((resolve66, reject) => {
     const headers2 = { host: url.host, "accept-encoding": "identity" };
     new Headers(init.headers ?? {}).forEach((value, key2) => {
       if (key2.toLowerCase() !== "host") headers2[key2] = value;
@@ -167409,7 +167801,7 @@ function requestOnce(url, pinned, init) {
           reject(err);
           return;
         }
-        resolve65(new Response(body, { status, statusText: res.statusMessage ?? "", headers: out2 }));
+        resolve66(new Response(body, { status, statusText: res.statusMessage ?? "", headers: out2 }));
       }
     );
     req.on("error", reject);
@@ -167444,17 +167836,17 @@ async function followPinned(href, init, perform, pin = (u2, s2) => pinAddress(u2
     url = new URL(location, url);
   }
 }
-function makePinnedFetch(allow, label2, pin = realPin, perform = requestOnce) {
+function makePinnedFetch(allow, label3, pin = realPin, perform = requestOnce) {
   const transport = (async (input, init) => {
     if (typeof input !== "string" && !(input instanceof URL)) {
-      throw new TypeError(`${label2} takes a url \u2014 the analyzer's Request-shaped calls use the API transport`);
+      throw new TypeError(`${label3} takes a url \u2014 the analyzer's Request-shaped calls use the API transport`);
     }
     if (init?.body != null) {
-      throw new TypeError(`${label2} is GET-only \u2014 a request with a body belongs on the API transport`);
+      throw new TypeError(`${label3} is GET-only \u2014 a request with a body belongs on the API transport`);
     }
     const method = (init?.method ?? "GET").toUpperCase();
     if (method !== "GET" && method !== "HEAD") {
-      throw new TypeError(`${label2} is GET-only, refusing ${method}`);
+      throw new TypeError(`${label3} is GET-only, refusing ${method}`);
     }
     return followPinned(input instanceof URL ? input.href : input, init ?? {}, perform, pin, allow);
   });
@@ -167985,9 +168377,9 @@ function scanVeloAuthSignals(files) {
     if (HAS_ROLE_RE.test(src)) usesHasRole = true;
     if (!LOGIN_CHECK_RE.test(src) && !HAS_ROLE_RE.test(src) && !AUTH_IMPORT_RE.test(src)) continue;
     if (!LOGIN_CHECK_RE.test(src) && !HAS_ROLE_RE.test(src)) continue;
-    const label2 = f2.pageTitle || f2.pageUrl || f2.path;
+    const label3 = f2.pageTitle || f2.pageUrl || f2.path;
     if ((f2.kind === "page" || f2.kind === "public") && LOGIN_CHECK_RE.test(src)) {
-      if (!pagesCheckingLogin.includes(label2)) pagesCheckingLogin.push(label2);
+      if (!pagesCheckingLogin.includes(label3)) pagesCheckingLogin.push(label3);
     } else if (LOGIN_CHECK_RE.test(src) || HAS_ROLE_RE.test(src)) {
       if (!modulesCheckingLoggedIn.includes(f2.path)) modulesCheckingLoggedIn.push(f2.path);
     }
@@ -168181,8 +168573,8 @@ function formLabels(x2, depth = 0, out2 = []) {
   }
   if (typeof x2 !== "object") return out2;
   const o2 = x2;
-  const label2 = str7(o2.label ?? o2.displayName ?? o2.fieldTitle ?? o2.title);
-  if (label2 && !UUID_RE2.test(label2) && label2.length < 80 && !out2.includes(label2)) out2.push(label2);
+  const label3 = str7(o2.label ?? o2.displayName ?? o2.fieldTitle ?? o2.title);
+  if (label3 && !UUID_RE2.test(label3) && label3.length < 80 && !out2.includes(label3)) out2.push(label3);
   for (const k2 of ["fields", "formFields", "form", "schema", "properties"]) {
     if (o2[k2] != null) formLabels(o2[k2], depth + 1, out2);
   }
@@ -169239,12 +169631,12 @@ var init_velo = __esm({
 
 // src/site-analyze/tokens.ts
 function channels2(css) {
-  const canonical4 = canonicalHex(css);
-  if (!canonical4) return null;
+  const canonical5 = canonicalHex(css);
+  if (!canonical5) return null;
   return [
-    parseInt(canonical4.slice(1, 3), 16),
-    parseInt(canonical4.slice(3, 5), 16),
-    parseInt(canonical4.slice(5, 7), 16)
+    parseInt(canonical5.slice(1, 3), 16),
+    parseInt(canonical5.slice(3, 5), 16),
+    parseInt(canonical5.slice(5, 7), 16)
   ];
 }
 function isNearWhite(css) {
@@ -169434,8 +169826,8 @@ var init_brand_font = __esm({
 });
 
 // src/site-analyze/write-artifacts.ts
-import { mkdirSync as mkdirSync37, rmSync as rmSync21, writeFileSync as writeFileSync33 } from "node:fs";
-import { join as join82 } from "node:path";
+import { mkdirSync as mkdirSync37, rmSync as rmSync21, writeFileSync as writeFileSync34 } from "node:fs";
+import { join as join83 } from "node:path";
 function attachVeloSources(book, sources, put) {
   const byPath = new Map((sources ?? []).map((s2) => [s2.path, s2.text]));
   for (const f2 of book.velo.files) {
@@ -169590,13 +169982,13 @@ async function downloadMedia(book, fetchImpl, put) {
 }
 async function writeBusinessBook(result, opts) {
   const out2 = opts.outDir;
-  mkdirSync37(join82(out2, "evidence/pages"), { recursive: true });
-  mkdirSync37(join82(out2, "media/catalog"), { recursive: true });
+  mkdirSync37(join83(out2, "evidence/pages"), { recursive: true });
+  mkdirSync37(join83(out2, "media/catalog"), { recursive: true });
   const files = [];
   const put = (rel, body) => {
-    const p2 = join82(out2, rel);
-    mkdirSync37(join82(p2, ".."), { recursive: true });
-    writeFileSync33(p2, body);
+    const p2 = join83(out2, rel);
+    mkdirSync37(join83(p2, ".."), { recursive: true });
+    writeFileSync34(p2, body);
     files.push(rel);
   };
   const book = result.book;
@@ -169638,7 +170030,7 @@ async function writeBusinessBook(result, opts) {
   const allGated = shots.length > 0 && gatedPages.length > 0 && usablePages.length === 0;
   put("README.md", folderReadme(shots.length > 0 && !allGated, book.look.unavailable, allGated));
   put("evidence/probes.json", JSON.stringify(book.probes, null, 2) + "\n");
-  rmSync21(join82(out2, "evidence/mobile-app"), { recursive: true, force: true });
+  rmSync21(join83(out2, "evidence/mobile-app"), { recursive: true, force: true });
   for (const [name, value] of Object.entries(result.mobileAppEvidence ?? {})) {
     if (/^[a-z-]+\.json$/.test(name)) put(`evidence/mobile-app/${name}`, JSON.stringify(value, null, 2) + "\n");
   }
@@ -170503,11 +170895,11 @@ var init_analyze = __esm({
 });
 
 // src/base44-analyze/write-artifacts.ts
-import { existsSync as existsSync78, mkdirSync as mkdirSync38, readFileSync as readFileSync98, rmSync as rmSync22, writeFileSync as writeFileSync34 } from "node:fs";
-import { dirname as dirname46, join as join83, resolve as resolve59, sep as sep19 } from "node:path";
+import { existsSync as existsSync79, mkdirSync as mkdirSync38, readFileSync as readFileSync99, rmSync as rmSync22, writeFileSync as writeFileSync35 } from "node:fs";
+import { dirname as dirname46, join as join84, resolve as resolve60, sep as sep19 } from "node:path";
 function isBookFolder(dir) {
   try {
-    return JSON.parse(readFileSync98(join83(dir, "book.json"), "utf8")).kind === "base44-app-book";
+    return JSON.parse(readFileSync99(join84(dir, "book.json"), "utf8")).kind === "base44-app-book";
   } catch {
     return false;
   }
@@ -170581,7 +170973,7 @@ function renderBookMd(book) {
   return L2.join("\n");
 }
 function writeBase44Book(result, outDir, opts = {}) {
-  const out2 = resolve59(outDir);
+  const out2 = resolve60(outDir);
   const book = result.book;
   const files = [];
   const shots = (opts.screenshots ?? []).filter((s2) => safeRel(s2.filename) && !s2.filename.includes("/"));
@@ -170594,27 +170986,27 @@ function writeBase44Book(result, outDir, opts = {}) {
   const md = renderBookMd(book);
   assertNoSecrets(json7);
   assertNoSecrets(md);
-  const owned = ["book.json", "BOOK.md", "source", "screenshots"].filter((n2) => existsSync78(join83(out2, n2)));
+  const owned = ["book.json", "BOOK.md", "source", "screenshots"].filter((n2) => existsSync79(join84(out2, n2)));
   if (owned.length) {
     if (!isBookFolder(out2)) throw new Error(`refusing to write the app book into ${out2}: it already has ${owned.join(", ")} that ${owned.length === 1 ? "is" : "are"} not from an app book \u2014 pick an empty --out`);
-    for (const d2 of ["source", "screenshots"]) rmSync22(join83(out2, d2), { recursive: true, force: true });
+    for (const d2 of ["source", "screenshots"]) rmSync22(join84(out2, d2), { recursive: true, force: true });
   }
   mkdirSync38(out2, { recursive: true });
-  writeFileSync34(join83(out2, "book.json"), json7);
-  writeFileSync34(join83(out2, "BOOK.md"), md);
+  writeFileSync35(join84(out2, "book.json"), json7);
+  writeFileSync35(join84(out2, "BOOK.md"), md);
   files.push("book.json", "BOOK.md");
   for (const s2 of shots) {
-    mkdirSync38(join83(out2, "screenshots"), { recursive: true });
-    writeFileSync34(join83(out2, "screenshots", s2.filename), s2.bytes);
+    mkdirSync38(join84(out2, "screenshots"), { recursive: true });
+    writeFileSync35(join84(out2, "screenshots", s2.filename), s2.bytes);
     files.push(`screenshots/${s2.filename}`);
   }
-  const sourceRoot = join83(out2, "source");
+  const sourceRoot = join84(out2, "source");
   for (const f2 of result.sourceFiles) {
     if (!safeRel(f2.path)) continue;
-    const dest = join83(sourceRoot, ...f2.path.split("/"));
+    const dest = join84(sourceRoot, ...f2.path.split("/"));
     if (!dest.startsWith(sourceRoot + sep19)) continue;
     mkdirSync38(dirname46(dest), { recursive: true });
-    writeFileSync34(dest, f2.bytes);
+    writeFileSync35(dest, f2.bytes);
   }
   if (result.sourceFiles.length) files.push(`source/ (${result.sourceFiles.length} files)`);
   return { outDir: out2, files };
@@ -171484,10 +171876,10 @@ function permuteDomain(domain, allowSpecialUseDomain) {
 }
 function createPromiseCallback(cb) {
   let callback;
-  let resolve65;
+  let resolve66;
   let reject;
   const promise = new Promise((_resolve, _reject) => {
-    resolve65 = _resolve;
+    resolve66 = _resolve;
     reject = _reject;
   });
   if (typeof cb === "function") {
@@ -171503,7 +171895,7 @@ function createPromiseCallback(cb) {
     callback = (err, result) => {
       try {
         if (err) reject(err);
-        else resolve65(result);
+        else resolve66(result);
       } catch (e2) {
         reject(e2 instanceof Error ? e2 : new Error());
       }
@@ -171810,58 +172202,58 @@ function fromJSON(str11) {
     obj4 = str11;
   }
   const c2 = new Cookie();
-  Cookie.serializableProperties.forEach((prop) => {
-    if (obj4 && typeof obj4 === "object" && inOperator(prop, obj4)) {
-      const val = obj4[prop];
+  Cookie.serializableProperties.forEach((prop2) => {
+    if (obj4 && typeof obj4 === "object" && inOperator(prop2, obj4)) {
+      const val = obj4[prop2];
       if (val === void 0) {
         return;
       }
-      if (inOperator(prop, cookieDefaults) && val === cookieDefaults[prop]) {
+      if (inOperator(prop2, cookieDefaults) && val === cookieDefaults[prop2]) {
         return;
       }
-      switch (prop) {
+      switch (prop2) {
         case "key":
         case "value":
         case "sameSite":
           if (typeof val === "string") {
-            c2[prop] = val;
+            c2[prop2] = val;
           }
           break;
         case "expires":
         case "creation":
         case "lastAccessed":
           if (typeof val === "number" || typeof val === "string" || val instanceof Date) {
-            c2[prop] = obj4[prop] == "Infinity" ? "Infinity" : new Date(val);
+            c2[prop2] = obj4[prop2] == "Infinity" ? "Infinity" : new Date(val);
           } else if (val === null) {
-            c2[prop] = null;
+            c2[prop2] = null;
           }
           break;
         case "maxAge":
           if (typeof val === "number" || val === "Infinity" || val === "-Infinity") {
-            c2[prop] = val;
+            c2[prop2] = val;
           }
           break;
         case "domain":
         case "path":
           if (typeof val === "string" || val === null) {
-            c2[prop] = val;
+            c2[prop2] = val;
           }
           break;
         case "secure":
         case "httpOnly":
           if (typeof val === "boolean") {
-            c2[prop] = val;
+            c2[prop2] = val;
           }
           break;
         case "extensions":
           if (Array.isArray(val) && val.every((item) => typeof item === "string")) {
-            c2[prop] = val;
+            c2[prop2] = val;
           }
           break;
         case "hostOnly":
         case "pathIsDefault":
           if (typeof val === "boolean" || val === null) {
-            c2[prop] = val;
+            c2[prop2] = val;
           }
           break;
       }
@@ -172381,54 +172773,54 @@ var init_dist = __esm({
        */
       toJSON() {
         const obj4 = {};
-        for (const prop of _Cookie2.serializableProperties) {
-          const val = this[prop];
-          if (val === cookieDefaults[prop]) {
+        for (const prop2 of _Cookie2.serializableProperties) {
+          const val = this[prop2];
+          if (val === cookieDefaults[prop2]) {
             continue;
           }
-          switch (prop) {
+          switch (prop2) {
             case "key":
             case "value":
             case "sameSite":
               if (typeof val === "string") {
-                obj4[prop] = val;
+                obj4[prop2] = val;
               }
               break;
             case "expires":
             case "creation":
             case "lastAccessed":
               if (typeof val === "number" || typeof val === "string" || val instanceof Date) {
-                obj4[prop] = val == "Infinity" ? "Infinity" : new Date(val).toISOString();
+                obj4[prop2] = val == "Infinity" ? "Infinity" : new Date(val).toISOString();
               } else if (val === null) {
-                obj4[prop] = null;
+                obj4[prop2] = null;
               }
               break;
             case "maxAge":
               if (typeof val === "number" || val === "Infinity" || val === "-Infinity") {
-                obj4[prop] = val;
+                obj4[prop2] = val;
               }
               break;
             case "domain":
             case "path":
               if (typeof val === "string" || val === null) {
-                obj4[prop] = val;
+                obj4[prop2] = val;
               }
               break;
             case "secure":
             case "httpOnly":
               if (typeof val === "boolean") {
-                obj4[prop] = val;
+                obj4[prop2] = val;
               }
               break;
             case "extensions":
               if (Array.isArray(val)) {
-                obj4[prop] = val;
+                obj4[prop2] = val;
               }
               break;
             case "hostOnly":
             case "pathIsDefault":
               if (typeof val === "boolean" || val === null) {
-                obj4[prop] = val;
+                obj4[prop2] = val;
               }
               break;
           }
@@ -174155,9 +174547,9 @@ __export(cli_exports, {
   systemTar: () => systemTar
 });
 import { execFile } from "node:child_process";
-import { mkdirSync as mkdirSync39, mkdtempSync as mkdtempSync5, rmSync as rmSync23, writeFileSync as writeFileSync35 } from "node:fs";
+import { mkdirSync as mkdirSync39, mkdtempSync as mkdtempSync5, rmSync as rmSync23, writeFileSync as writeFileSync36 } from "node:fs";
 import { tmpdir as tmpdir6 } from "node:os";
-import { join as join84, resolve as resolve60 } from "node:path";
+import { join as join85, resolve as resolve61 } from "node:path";
 import { promisify } from "node:util";
 function projectDownloader(apiFetch, apiBase, token, extract = systemTar) {
   return async (appId2) => {
@@ -174170,12 +174562,12 @@ function projectDownloader(apiFetch, apiBase, token, extract = systemTar) {
     }
     const bytes2 = await readCapped(res, MAX_TARBALL_BYTES);
     if (!bytes2) throw new Error(`project download is over the ${MAX_TARBALL_BYTES}-byte cap`);
-    const root = mkdtempSync5(join84(tmpdir6(), "himi-base44-"));
+    const root = mkdtempSync5(join85(tmpdir6(), "himi-base44-"));
     const cleanup = () => rmSync23(root, { recursive: true, force: true });
     try {
-      const archive = join84(root, "project.tar");
-      const dir = join84(root, "project");
-      writeFileSync35(archive, bytes2);
+      const archive = join85(root, "project.tar");
+      const dir = join85(root, "project");
+      writeFileSync36(archive, bytes2);
       mkdirSync39(dir);
       await extract(archive, dir);
       return { dir, cleanup };
@@ -174212,7 +174604,7 @@ async function runBase44Analyze(opts) {
     now: opts.now ?? (() => /* @__PURE__ */ new Date())
   };
   const result = await analyzeBase44({ url: opts.url, appId: opts.appId, sample: opts.sample }, ports);
-  const written = writeBase44Book(result, resolve60(opts.cwd ?? process.cwd(), opts.outDir ?? ".himi/base44-book"), { screenshots });
+  const written = writeBase44Book(result, resolve61(opts.cwd ?? process.cwd(), opts.outDir ?? ".himi/base44-book"), { screenshots });
   return { ok: true, out: written.outDir, files: written.files, mode: result.book.mode, gaps: result.book.gaps, book: result.book };
 }
 var MAX_TARBALL_BYTES, systemTar;
@@ -174230,6 +174622,155 @@ var init_cli = __esm({
   }
 });
 
+// src/base44-entities.ts
+var base44_entities_exports = {};
+__export(base44_entities_exports, {
+  ROW_COUNT_CAP: () => ROW_COUNT_CAP,
+  ROW_PAGE: () => ROW_PAGE,
+  countRows: () => countRows,
+  diffEntityFields: () => diffEntityFields,
+  queryBase44Entities: () => queryBase44Entities
+});
+function typeLabel(type, format) {
+  return format ? `${type} (${format})` : type;
+}
+function canonical4(v2) {
+  if (Array.isArray(v2)) return `[${v2.map(canonical4).join(",")}]`;
+  if (v2 && typeof v2 === "object") {
+    return `{${Object.keys(v2).sort().map((k2) => `${JSON.stringify(k2)}:${canonical4(v2[k2])}`).join(",")}}`;
+  }
+  return JSON.stringify(v2) ?? "undefined";
+}
+function liveItemType(live3, key2) {
+  const props = live3.schema?.properties;
+  const items = props?.[key2]?.items;
+  const t2 = items && typeof items === "object" ? items.type : void 0;
+  return typeof t2 === "string" ? t2 : void 0;
+}
+function diffEntityFields(spec, live3) {
+  const entity = live3.name;
+  const out2 = [];
+  const liveFields = new Map(live3.fields.filter((f2) => !BUILTINS2.has(f2.name)).map((f2) => [f2.name, f2]));
+  for (const f2 of spec.fields ?? []) {
+    const remote = liveFields.get(f2.key);
+    const declared = typeLabel(f2.type, f2.format);
+    if (!remote) {
+      out2.push({ entity, kind: "missing-field", detail: `field "${f2.key}" (${declared}) is declared but not on the live entity` });
+    } else {
+      const actual = typeLabel(remote.type, remote.format && remote.type === "string" && DECLARABLE_FORMATS.has(remote.format) ? remote.format : void 0);
+      if (actual !== declared) out2.push({ entity, kind: "type-mismatch", detail: `field "${f2.key}" is declared ${declared} but the live entity has ${actual}` });
+      else if (f2.type === "array") {
+        const declaredItems = f2.items?.type;
+        const liveItems = liveItemType(live3, f2.key);
+        if (declaredItems !== liveItems) {
+          out2.push({ entity, kind: "type-mismatch", detail: `field "${f2.key}" is declared array of ${declaredItems ?? "unspecified"} but the live entity has array of ${liveItems ?? "unspecified"}` });
+        }
+      }
+    }
+    liveFields.delete(f2.key);
+  }
+  for (const [key2, f2] of liveFields) {
+    if (!DECLARABLE_TYPES.has(f2.type)) continue;
+    out2.push({ entity, kind: "extra-field", detail: `field "${key2}" (${typeLabel(f2.type, f2.format)}) exists on the live entity but is not declared` });
+  }
+  if (spec.rls !== void 0 && canonical4(spec.rls) !== canonical4(live3.rls ?? {})) {
+    out2.push({ entity, kind: "rls-mismatch", detail: `declared rls ${canonical4(spec.rls)} differs from the live rls ${canonical4(live3.rls ?? {})} \u2014 informational; nothing is changed` });
+  }
+  return out2;
+}
+async function readLiveSchemas(ports, appId2) {
+  if (!ports.downloadSource) throw new Error("no project download available");
+  const dl2 = await ports.downloadSource(appId2);
+  try {
+    const files = new Map(collectAppSource(dl2.dir).entries.map((e2) => [e2.path, e2.bytes.toString("utf8")]));
+    return new Map(readEntities(files, projectDirs(files)).map((e2) => [e2.name, e2]));
+  } finally {
+    dl2.cleanup();
+  }
+}
+async function countRows(ports, appId2, entity, cap = ROW_COUNT_CAP) {
+  const root = new URL(`/api/apps/${encodeURIComponent(appId2)}/entities/${encodeURIComponent(entity)}`, ports.apiBase).href;
+  let rows = 0;
+  for (let skip = 0; ; skip += ROW_PAGE) {
+    const res = await ports.apiFetch(`${root}?fields=id&limit=${ROW_PAGE}&skip=${skip}`, {
+      method: "GET",
+      headers: { ...ports.token ? { Authorization: `Bearer ${ports.token}` } : {}, Accept: "application/json", "User-Agent": "himi base44 entities" }
+    });
+    if (!res.ok) throw new Error(res.status === 401 || res.status === 403 ? `refused (${res.status}) \u2014 the signed-in user cannot list ${entity}` : `HTTP ${res.status} listing ${entity}`);
+    const body = await res.json();
+    const page = Array.isArray(body) ? body : Array.isArray(body?.items) ? body.items : [];
+    rows += page.length;
+    if (page.length < ROW_PAGE) return rows > cap ? { rows: cap, capped: true } : { rows };
+    if (rows > cap) return { rows: cap, capped: true };
+  }
+}
+async function queryBase44Entities(opts) {
+  const { app, appId: appId2, ports } = opts;
+  const cap = opts.cap ?? ROW_COUNT_CAP;
+  let live3;
+  let sourceError;
+  try {
+    live3 = await readLiveSchemas(ports, appId2);
+  } catch (e2) {
+    sourceError = e2.message;
+  }
+  if (live3 && live3.size === 0) {
+    live3 = void 0;
+    sourceError = "the downloaded project files contain no entity schemas \u2014 drift not checked";
+  }
+  const specs = (opts.base44.entities ?? []).filter((s2) => !!s2 && typeof s2 === "object" && !!physicalEntityName(s2, app));
+  const declared = [];
+  for (const spec of specs) {
+    const physical = physicalEntityName(spec, app);
+    const row = {
+      entity: isAdoptedEntity(spec) ? spec.base44Name : spec.name,
+      physical,
+      ownership: isAdoptedEntity(spec) ? "adopted" : "owned",
+      rows: null,
+      drift: []
+    };
+    const remote = live3?.get(physical);
+    if (live3 && !remote) {
+      row.drift.push({ entity: physical, kind: "missing", detail: `entity "${physical}" is declared but the live app does not have it` });
+    } else {
+      if (remote) row.drift = diffEntityFields(spec, remote);
+      try {
+        const c2 = await countRows(ports, appId2, physical, cap);
+        row.rows = c2.rows;
+        if (c2.capped) row.capped = true;
+      } catch (e2) {
+        row.countError = e2.message;
+      }
+    }
+    declared.push(row);
+  }
+  const known = new Set(declared.map((d2) => d2.physical));
+  const foreignNames = live3 ? [...live3.keys()].filter((n2) => !known.has(n2)).sort() : [];
+  return {
+    ok: true,
+    app,
+    appId: appId2,
+    prefix: base44Prefix(app),
+    declared,
+    foreign: opts.all ? foreignNames : { count: foreignNames.length },
+    sourceRead: live3 ? "ok" : "unavailable",
+    ...sourceError ? { sourceError } : {}
+  };
+}
+var ROW_PAGE, ROW_COUNT_CAP, BUILTINS2, DECLARABLE_FORMATS, DECLARABLE_TYPES;
+var init_base44_entities2 = __esm({
+  "src/base44-entities.ts"() {
+    init_app_source();
+    init_project();
+    init_base44_schema();
+    ROW_PAGE = 500;
+    ROW_COUNT_CAP = 5e3;
+    BUILTINS2 = new Set(BASE44_BUILTIN_FIELDS);
+    DECLARABLE_FORMATS = new Set(BASE44_STRING_FORMATS);
+    DECLARABLE_TYPES = new Set(BASE44_FIELD_TYPES);
+  }
+});
+
 // src/one-app/errors.ts
 var OneAppError;
 var init_errors2 = __esm({
@@ -174311,14 +174852,14 @@ function boundedSetting(value, ceiling) {
   return value !== void 0 && Number.isFinite(value) && value > 0 ? Math.min(value, ceiling) : ceiling;
 }
 function semanticFingerprint(structure) {
-  const canonical4 = (value, root = false) => {
-    if (Array.isArray(value)) return `[${value.map((item) => canonical4(item)).join(",")}]`;
+  const canonical5 = (value, root = false) => {
+    if (Array.isArray(value)) return `[${value.map((item) => canonical5(item)).join(",")}]`;
     if (isObject2(value)) {
-      return `{${Object.keys(value).filter((key2) => !root || !LIFECYCLE_FIELDS.has(key2)).sort().map((key2) => `${JSON.stringify(key2)}:${canonical4(value[key2])}`).join(",")}}`;
+      return `{${Object.keys(value).filter((key2) => !root || !LIFECYCLE_FIELDS.has(key2)).sort().map((key2) => `${JSON.stringify(key2)}:${canonical5(value[key2])}`).join(",")}}`;
     }
     return JSON.stringify(value);
   };
-  return createHash43("sha256").update(canonical4(structure, true)).digest("hex");
+  return createHash43("sha256").update(canonical5(structure, true)).digest("hex");
 }
 async function collectOneApp(input, deps = {}) {
   if (typeof input.metaSiteId !== "string" || !UUID.test(input.metaSiteId)) {
@@ -174883,15 +175424,15 @@ function planNavigation(raw, policy = "bottom-tabs") {
       return;
     }
     const layoutPointer = `/layoutItems/${part2(layoutItemId)}`;
-    const label2 = string4(layout.title) ?? null;
-    if (label2 === null) warnings.push({ code: "missing_label", pointer: `${layoutPointer}/title` });
+    const label3 = string4(layout.title) ?? null;
+    if (label3 === null) warnings.push({ code: "missing_label", pointer: `${layoutPointer}/title` });
     const fallback = tabs.length === 0 ? string4(firstEntry.icon) : void 0;
     const icon = string4(layout.icon) ?? fallback ?? null;
     if (icon === null) warnings.push({ code: "missing_icon", pointer: `${layoutPointer}/icon` });
     tabs.push({
       layoutItemId,
       pointer: itemPointer,
-      label: label2,
+      label: label3,
       icon,
       iconSource: string4(layout.icon) ? "layout-item" : fallback ? "bottom-entry" : "missing",
       header: tabs.length === 0 ? { kind: "source", headerId: string4(rootScreen.headerId) ?? null } : { kind: "default" }
@@ -174942,9 +175483,9 @@ __export(cli_exports2, {
   ONE_APP_WORKFLOW: () => ONE_APP_WORKFLOW,
   runOneAppCommand: () => runOneAppCommand
 });
-import { closeSync as closeSync7, constants as constants4, lstatSync as lstatSync21, mkdirSync as mkdirSync40, openSync as openSync6, readFileSync as readFileSync99, realpathSync as realpathSync14, writeFileSync as writeFileSync36 } from "node:fs";
+import { closeSync as closeSync7, constants as constants4, lstatSync as lstatSync21, mkdirSync as mkdirSync40, openSync as openSync6, readFileSync as readFileSync100, realpathSync as realpathSync14, writeFileSync as writeFileSync37 } from "node:fs";
 import { createHash as createHash44 } from "node:crypto";
-import { dirname as dirname47, join as join85, parse as parse3, resolve as resolve61 } from "node:path";
+import { dirname as dirname47, join as join86, parse as parse3, resolve as resolve62 } from "node:path";
 function readOptions(argv, cwd, commandIncluded) {
   let cursor = 0;
   const skipGlobalSwitches = () => {
@@ -174989,10 +175530,10 @@ function readOptions(argv, cwd, commandIncluded) {
   let prompt = flags.prompt ?? "";
   if (flags["prompt-file"] !== void 0) {
     try {
-      const file2 = resolve61(cwd, flags["prompt-file"]);
+      const file2 = resolve62(cwd, flags["prompt-file"]);
       const stat2 = lstatSync21(file2);
       if (!stat2.isFile() || stat2.size > MAX_PROMPT_BYTES) throw new Error("invalid prompt file");
-      prompt = readFileSync99(file2, "utf8");
+      prompt = readFileSync100(file2, "utf8");
     } catch {
       throw new OneAppError("invalid_prompt", "Use a readable text file of at most 64 KiB for --prompt-file.");
     }
@@ -175007,8 +175548,8 @@ function readOptions(argv, cwd, commandIncluded) {
   if (flags.dir !== void 0 && !flags.dir.trim()) {
     throw new OneAppError("invalid_output_path", "Pass a parent directory with --dir.");
   }
-  const parentDir = resolve61(cwd, flags.dir ?? ".");
-  const workspace = join85(parentDir, name);
+  const parentDir = resolve62(cwd, flags.dir ?? ".");
+  const workspace = join86(parentDir, name);
   assertSafeParents(parentDir);
   if (pathExists(workspace)) throw new OneAppError("output_exists", "The destination already exists. Choose a new --name or --dir.");
   return { metaSiteId, appInstance, prompt, name, parentDir, workspace, target, topTabs };
@@ -175043,7 +175584,7 @@ function assertSafeParents(path2) {
 function writePrivate(path2, contents, append) {
   const fd = openSync6(path2, constants4.O_WRONLY | constants4.O_CREAT | constants4.O_NOFOLLOW | (append ? constants4.O_APPEND : constants4.O_EXCL), 384);
   try {
-    writeFileSync36(fd, contents, { encoding: "utf8" });
+    writeFileSync37(fd, contents, { encoding: "utf8" });
   } finally {
     closeSync7(fd);
   }
@@ -175065,7 +175606,7 @@ Collect the source mobile app and hand it to the current coding agent. The agent
   const hashes = {};
   const diskWrite = deps.writeFile ?? writePrivate;
   const put = (name, content) => {
-    const path2 = join85(evidenceDir, name);
+    const path2 = join86(evidenceDir, name);
     try {
       assertSafeParents(evidenceDir);
       diskWrite(path2, content, false);
@@ -175081,7 +175622,7 @@ Collect the source mobile app and hand it to the current coding agent. The agent
     if (!evidenceDir) return;
     try {
       assertSafeParents(evidenceDir);
-      diskWrite(join85(evidenceDir, "progress.jsonl"), JSON.stringify({ stage, at: now() }) + "\n", true);
+      diskWrite(join86(evidenceDir, "progress.jsonl"), JSON.stringify({ stage, at: now() }) + "\n", true);
     } catch {
       throw new OneAppError("artifact_write_failed", "Could not record migration progress. Existing files were kept.", { stage });
     }
@@ -175097,7 +175638,7 @@ Collect the source mobile app and hand it to the current coding agent. The agent
       assertSafeParents(options.parentDir);
       mkdirSync40(options.workspace, { mode: 448 });
       if (realpathSync14(options.workspace) !== options.workspace) throw new Error("destination changed");
-      evidenceDir = join85(options.workspace, ".himi", "one-app");
+      evidenceDir = join86(options.workspace, ".himi", "one-app");
       mkdirSync40(evidenceDir, { recursive: true, mode: 448 });
     } catch (error) {
       if (error.code === "EEXIST") {
@@ -175867,16 +176408,16 @@ function deriveAdoptedCmsCollections(cms) {
   const dropped = [];
   const seen = /* @__PURE__ */ new Set();
   for (const collection of cms) {
-    const label2 = typeof collection.id === "string" ? collection.id.trim().slice(0, 60) : "";
-    if (!label2) continue;
+    const label3 = typeof collection.id === "string" ? collection.id.trim().slice(0, 60) : "";
+    if (!label3) continue;
     if (collection.ownerAppId) {
-      dropped.push({ id: label2, reason: "owned by a Wix app \u2014 its own vertical covers it" });
+      dropped.push({ id: label3, reason: "owned by a Wix app \u2014 its own vertical covers it" });
       continue;
     }
     const readRole = collection.readRole;
     if (readRole !== "ANYONE") {
       dropped.push({
-        id: label2,
+        id: label3,
         reason: readRole === "SITE_MEMBER" || readRole === "SITE_MEMBER_AUTHOR" ? `read permission "${readRole}" \u2014 member-only rows would be cached unencrypted on the device and served to a later visitor` : `read permission ${readRole ? `"${readRole}"` : "unknown"} \u2014 a shipped app can only read ANYONE`
       });
       continue;
@@ -175888,7 +176429,7 @@ function deriveAdoptedCmsCollections(cms) {
     }
     const id = collection.id;
     if (seen.has(id)) {
-      dropped.push({ id: label2, reason: "duplicate id" });
+      dropped.push({ id: label3, reason: "duplicate id" });
       continue;
     }
     const fields = collection.fields.flatMap((field) => {
@@ -175908,7 +176449,7 @@ function deriveAdoptedCmsCollections(cms) {
     const requested = collection.displayField;
     const displayField = fields.some((field) => field.key === requested) ? requested : fields[0]?.key;
     if (!displayField) {
-      dropped.push({ id: label2, reason: "no readable field to show as a row title" });
+      dropped.push({ id: label3, reason: "no readable field to show as a row title" });
       continue;
     }
     seen.add(id);
@@ -176164,9 +176705,9 @@ function taglineFrom(identity, pages2, published) {
   const hero = copyOrDrop(home?.heroCopy, CAP3.tagline);
   return hero ? { text: hero, source: "hero" } : null;
 }
-function tabLabel(label2) {
-  const trimmed = label2.replace(/\s+page$/i, "").trim();
-  return trimmed && trimmed !== label2.trim() && !/^(front|landing|title|web)$/i.test(trimmed) ? trimmed : label2;
+function tabLabel(label3) {
+  const trimmed = label3.replace(/\s+page$/i, "").trim();
+  return trimmed && trimmed !== label3.trim() && !/^(front|landing|title|web)$/i.test(trimmed) ? trimmed : label3;
 }
 function suggestKeys(args) {
   const { nav, sections, tagline, installedVerticals } = args;
@@ -176179,9 +176720,9 @@ function suggestKeys(args) {
     out2[key2] = value.slice(0, CAP3.value);
   };
   const allowed2 = (rule) => !rule.vertical || installed.has(rule.vertical);
-  for (const label2 of nav) {
+  for (const label3 of nav) {
     for (const rule of KEY_RULES) {
-      if (rule.tab && allowed2(rule) && rule.re.test(label2)) set(rule.tab, tabLabel(label2));
+      if (rule.tab && allowed2(rule) && rule.re.test(label3)) set(rule.tab, tabLabel(label3));
     }
   }
   for (const section3 of sections) {
@@ -176334,9 +176875,9 @@ function textFields(look) {
   const add = (text9, where, narrative = false) => {
     if (text9 && text9.trim()) out2.push({ text: text9, where, narrative });
   };
-  for (const label2 of look.navLabels) add(label2, "nav");
+  for (const label3 of look.navLabels) add(label3, "nav");
   for (const p2 of look.pages) {
-    for (const label2 of p2.navLabels) add(label2, "nav");
+    for (const label3 of p2.navLabels) add(label3, "nav");
     add(p2.title, `${p2.url} (title)`);
     add(p2.heroCopy, p2.url, true);
     for (const h2 of p2.headings) add(h2, p2.url);
@@ -177234,15 +177775,15 @@ var init_customer_build = __esm({
 });
 
 // src/site-analyze/apply.ts
-import { existsSync as existsSync79, readFileSync as readFileSync100, writeFileSync as writeFileSync37, copyFileSync as copyFileSync2, mkdirSync as mkdirSync41, realpathSync as realpathSync15, statSync as statSync22 } from "node:fs";
-import { dirname as dirname48, isAbsolute as isAbsolute8, join as join86, resolve as resolve62, sep as sep20 } from "node:path";
+import { existsSync as existsSync80, readFileSync as readFileSync101, writeFileSync as writeFileSync38, copyFileSync as copyFileSync2, mkdirSync as mkdirSync41, realpathSync as realpathSync15, statSync as statSync22 } from "node:fs";
+import { dirname as dirname48, isAbsolute as isAbsolute8, join as join87, resolve as resolve63, sep as sep20 } from "node:path";
 import { spawnSync as spawnSync4 } from "node:child_process";
 function unpairedRedirectNote(overlay) {
   if (!overlay.wix?.clientId || overlay.wix.redirectUri) return void 0;
   return `no OAuth redirect paired with client ${overlay.wix.clientId} \u2014 the app (and prepare:customer) will refuse to start until one is set. Register it with \`himi site client ensure --site ${overlay.siteId?.trim() || "<msid>"} --redirect-uri <uri> --yes\`, then re-run analyze with \`--redirect-uri <uri>\` (or export HIMI_BRANDED_LITE_WIX_REDIRECT_URI)`;
 }
 function posix4(p2) {
-  return resolve62(p2).replace(/\\/g, "/");
+  return resolve63(p2).replace(/\\/g, "/");
 }
 function committedShellProvisioning(path2) {
   return committedShellFor(posix4(path2));
@@ -177250,7 +177791,7 @@ function committedShellProvisioning(path2) {
 function findRepoRoot(cwd) {
   let dir = cwd;
   for (let i2 = 0; i2 < 8; i2++) {
-    if (SHELL_NAMES2.some((name) => existsSync79(join86(dir, shellAppDir(name), "package.json")))) return dir;
+    if (SHELL_NAMES2.some((name) => existsSync80(join87(dir, shellAppDir(name), "package.json")))) return dir;
     const next = dirname48(dir);
     if (next === dir) break;
     dir = next;
@@ -177276,7 +177817,7 @@ function assertNotCommitted(path2, forbidden2) {
       `refusing to overwrite committed ${committedProvisioningPath(committed)} \u2014 use prepare:customer --contract`
     );
   }
-  if (forbidden2 && resolve62(path2) === resolve62(forbidden2)) {
+  if (forbidden2 && resolve63(path2) === resolve63(forbidden2)) {
     const named = committedShellProvisioning(forbidden2);
     throw new Error(
       `refusing to overwrite committed ${named ? committedProvisioningPath(named) : forbidden2} \u2014 pass a content-package provisioning.json or use prepare:customer --contract`
@@ -177353,24 +177894,24 @@ function sameKnownSite(previous, next) {
 }
 function buildMergedContract(options) {
   const { appDir: appDir3, packageDir, overlay } = options;
-  const committedPath = join86(appDir3, "provisioning.json");
-  if (!existsSync79(committedPath)) {
+  const committedPath = join87(appDir3, "provisioning.json");
+  if (!existsSync80(committedPath)) {
     throw new Error(`shell has no committed provisioning.json at ${committedPath} to build a contract from`);
   }
-  const committed = JSON.parse(readFileSync100(committedPath, "utf8"));
+  const committed = JSON.parse(readFileSync101(committedPath, "utf8"));
   const merged = mergeCustomerOwned(committed, overlay);
   const overlayFontFamily = (overlay.branding ?? {}).fontFamily;
   const branding = merged.branding ?? {};
   const staged = [];
   const contained = (root, rel) => {
     if (isAbsolute8(rel)) return void 0;
-    const full = resolve62(root, rel);
-    return full.startsWith(resolve62(root) + sep20) ? full : void 0;
+    const full = resolve63(root, rel);
+    return full.startsWith(resolve63(root) + sep20) ? full : void 0;
   };
   const stage = (fromRel, toRel) => {
     const from = contained(packageDir, fromRel);
-    const to2 = contained(join86(appDir3, STAGED), toRel.slice(STAGED.length + 1));
-    if (!from || !to2 || !existsSync79(from)) return void 0;
+    const to2 = contained(join87(appDir3, STAGED), toRel.slice(STAGED.length + 1));
+    if (!from || !to2 || !existsSync80(from)) return void 0;
     let real;
     let realRoot;
     try {
@@ -177392,11 +177933,11 @@ function buildMergedContract(options) {
   };
   const icon = stage("media/icon.png", `${STAGED}/icon.png`);
   if (icon) branding.appIconPath = icon;
-  const facesPath = join86(packageDir, "media/fonts/faces.json");
-  if (existsSync79(facesPath)) {
+  const facesPath = join87(packageDir, "media/fonts/faces.json");
+  if (existsSync80(facesPath)) {
     let faces = [];
     try {
-      const parsed = JSON.parse(readFileSync100(facesPath, "utf8"));
+      const parsed = JSON.parse(readFileSync101(facesPath, "utf8"));
       faces = Array.isArray(parsed) ? parsed : [];
     } catch {
       faces = [];
@@ -177417,11 +177958,11 @@ function buildMergedContract(options) {
   merged.branding = branding;
   const body = `${JSON.stringify(merged, null, 2)}
 `;
-  const path2 = join86(packageDir, "provisioning.contract.json");
-  writeFileSync37(path2, body);
-  const localPath2 = join86(appDir3, LOCAL_CONTRACT_REL);
+  const path2 = join87(packageDir, "provisioning.contract.json");
+  writeFileSync38(path2, body);
+  const localPath2 = join87(appDir3, LOCAL_CONTRACT_REL);
   mkdirSync41(dirname48(localPath2), { recursive: true });
-  writeFileSync37(localPath2, body);
+  writeFileSync38(localPath2, body);
   staged.push(localPath2);
   return { path: path2, staged };
 }
@@ -177440,9 +177981,9 @@ function catalogTypography(overlay, template) {
       typography[role] = token;
       continue;
     }
-    const canonical4 = canonicalFamilyName(family.trim());
-    if (canonical4) {
-      typography[role] = { ...token, family: canonical4 };
+    const canonical5 = canonicalFamilyName(family.trim());
+    if (canonical5) {
+      typography[role] = { ...token, family: canonical5 };
       continue;
     }
     const kept = base[role]?.family;
@@ -177454,10 +177995,10 @@ function catalogTypography(overlay, template) {
 function staticFaqFor(overlay, overlayPath) {
   const own5 = overlay.faq;
   if (own5 !== void 0) return deriveStaticFaq(own5);
-  const bookPath = join86(dirname48(resolve62(overlayPath)), "book.json");
-  if (!existsSync79(bookPath)) return void 0;
+  const bookPath = join87(dirname48(resolve63(overlayPath)), "book.json");
+  if (!existsSync80(bookPath)) return void 0;
   try {
-    const book = JSON.parse(readFileSync100(bookPath, "utf8"));
+    const book = JSON.parse(readFileSync101(bookPath, "utf8"));
     const copy = book?.copy;
     if (!copy || typeof copy !== "object" || copy.unavailable) return void 0;
     const pairs = deriveStaticFaq(copy.faq);
@@ -177471,10 +178012,10 @@ function staticGalleriesFor(overlay, overlayPath) {
   if (overlay.galleries !== void 0) return deriveStaticGalleries(
     overlay.galleries.map((gallery) => ({ role: "gallery", title: gallery.title, galleryImageUrls: gallery.photos }))
   );
-  const bookPath = join86(dirname48(resolve62(overlayPath)), "book.json");
-  if (!existsSync79(bookPath)) return void 0;
+  const bookPath = join87(dirname48(resolve63(overlayPath)), "book.json");
+  if (!existsSync80(bookPath)) return void 0;
   try {
-    const book = JSON.parse(readFileSync100(bookPath, "utf8"));
+    const book = JSON.parse(readFileSync101(bookPath, "utf8"));
     if (!book.look || book.look.unavailable || !Array.isArray(book.look.pages)) return void 0;
     const galleries = deriveStaticGalleries(book.look.pages);
     return galleries.length || book.look.complete === true ? galleries : void 0;
@@ -177483,11 +178024,11 @@ function staticGalleriesFor(overlay, overlayPath) {
   }
 }
 async function applyOverlays(input) {
-  const cwd = resolve62(input.cwd);
+  const cwd = resolve63(input.cwd);
   const shell = input.shell ?? DEFAULT_BRANDABLE_SHELL;
   assertKnownShell(shell);
-  const overlay = JSON.parse(readFileSync100(input.overlayPath, "utf8"));
-  const tokens2 = JSON.parse(readFileSync100(input.tokensPath, "utf8"));
+  const overlay = JSON.parse(readFileSync101(input.overlayPath, "utf8"));
+  const tokens2 = JSON.parse(readFileSync101(input.tokensPath, "utf8"));
   const faq = staticFaqFor(overlay, input.overlayPath);
   if (faq !== void 0) overlay.faq = faq;
   const galleries = staticGalleriesFor(overlay, input.overlayPath);
@@ -177504,15 +178045,15 @@ async function applyOverlays(input) {
         `shell "${shell}" cannot bake a customer brand \u2014 it ships no prepare:customer script`
       );
     }
-    const appDir3 = join86(repoRoot2, shellAppDir(shell));
-    const committedPath = join86(appDir3, "provisioning.json");
-    const committedSite = existsSync79(committedPath) ? JSON.parse(readFileSync100(committedPath, "utf8")).site : void 0;
+    const appDir3 = join87(repoRoot2, shellAppDir(shell));
+    const committedPath = join87(appDir3, "provisioning.json");
+    const committedSite = existsSync80(committedPath) ? JSON.parse(readFileSync101(committedPath, "utf8")).site : void 0;
     if (committedSite !== void 0 && overlay.site === void 0) {
       throw new Error(
         `shell "${shell}" is a site shell: its contract names the customer's website (a \`site\` block), and this overlay has none. Re-run \`himi site analyze --url <site> --shell ${shell}\` to derive the site's page map (edit \`site.pages\` in provisioning.overlay.json if needed), then --apply.`
       );
     }
-    const packageDir = dirname48(resolve62(input.overlayPath));
+    const packageDir = dirname48(resolve63(input.overlayPath));
     const { path: contract, staged } = buildMergedContract({ appDir: appDir3, packageDir, overlay });
     wrote.push(...staged);
     const r2 = spawnSync4("npm", ["run", "prepare:customer", "--", "--contract", contract], {
@@ -177533,9 +178074,9 @@ async function applyOverlays(input) {
       note: `prepare:customer --contract with a merged contract (committed provisioning.json untouched)${unpairedInRepo ? ` \xB7 ${unpairedInRepo}` : ""}`
     };
   }
-  const pkgProv = join86(cwd, "provisioning.json");
+  const pkgProv = join87(cwd, "provisioning.json");
   assertNotCommitted(pkgProv, input.forbiddenProvisioning);
-  const contentPath = join86(cwd, "himalaya.content.json");
+  const contentPath = join87(cwd, "himalaya.content.json");
   const syncViewNames = (before, after) => {
     const content = readContentManifest(cwd);
     if (!content) return;
@@ -177547,26 +178088,26 @@ async function applyOverlays(input) {
   };
   let packageFaq = faq;
   let packageGalleries = galleries;
-  if (existsSync79(pkgProv)) {
-    const cur = JSON.parse(readFileSync100(pkgProv, "utf8"));
+  if (existsSync80(pkgProv)) {
+    const cur = JSON.parse(readFileSync101(pkgProv, "utf8"));
     if (galleries === void 0 && !sameKnownSite(cur, overlay)) overlay.galleries = [];
     const merged = deepMerge4(cur, overlay);
     packageFaq = merged.faq;
     packageGalleries = merged.galleries;
     syncViewNames(cur.site, merged.site);
-    writeFileSync37(pkgProv, JSON.stringify(merged, null, 2) + "\n");
+    writeFileSync38(pkgProv, JSON.stringify(merged, null, 2) + "\n");
     wrote.push(pkgProv);
   } else {
     syncViewNames(void 0, overlay.site);
-    writeFileSync37(pkgProv, JSON.stringify(overlay, null, 2) + "\n");
+    writeFileSync38(pkgProv, JSON.stringify(overlay, null, 2) + "\n");
     wrote.push(pkgProv);
   }
   if (Array.isArray(packageGalleries) && packageGalleries.length && !overlay.installedVerticals.includes("galleries")) {
     overlay.installedVerticals.push("galleries");
   }
-  const pkgTokens = join86(cwd, "tokens.json");
-  if (existsSync79(pkgTokens) && (tokens2.colors || tokens2.typography)) {
-    const cur = JSON.parse(readFileSync100(pkgTokens, "utf8"));
+  const pkgTokens = join87(cwd, "tokens.json");
+  if (existsSync80(pkgTokens) && (tokens2.colors || tokens2.typography)) {
+    const cur = JSON.parse(readFileSync101(pkgTokens, "utf8"));
     let tokensIn = tokens2;
     if (tokens2.typography) {
       const fonts = catalogTypography(tokens2.typography, cur.typography);
@@ -177587,13 +178128,13 @@ async function applyOverlays(input) {
       if (primary && glow && typeof glow.color === "string") glow.color = primary;
       stripBrandFromIdiom(merged);
     }
-    writeFileSync37(pkgTokens, JSON.stringify(merged, null, 2) + "\n");
+    writeFileSync38(pkgTokens, JSON.stringify(merged, null, 2) + "\n");
     wrote.push(pkgTokens);
   }
   const homeAction = homeRefreshActionId(shell);
-  const homeSrc = join86(cwd, "dev/index.ts");
-  if (homeAction && existsSync79(homeSrc)) {
-    const prev = readFileSync100(homeSrc, "utf8");
+  const homeSrc = join87(cwd, "dev/index.ts");
+  if (homeAction && existsSync80(homeSrc)) {
+    const prev = readFileSync101(homeSrc, "utf8");
     const patched = patchBrandParams(prev, overlay, homeAction);
     let next = patched.src;
     if (!patched.foreign && faq?.length && prev.includes('"tier5.himiBrandedFaq.load"') && !prev.includes('"staticFaq"')) {
@@ -177621,20 +178162,20 @@ async function applyOverlays(input) {
       }
     }
     if (next !== prev) {
-      writeFileSync37(homeSrc, next);
+      writeFileSync38(homeSrc, next);
       wrote.push(homeSrc);
     }
     if (patched.unparsed) {
       notes.push(`${patched.unparsed} onAppear params block(s) in ${homeSrc} could not be read \u2014 any brand values inside them were not applied`);
     }
   }
-  if (!input.iconPath || !existsSync79(input.iconPath)) {
-    const book = input.iconPath ? dirname48(dirname48(resolve62(input.iconPath))) : void 0;
+  if (!input.iconPath || !existsSync80(input.iconPath)) {
+    const book = input.iconPath ? dirname48(dirname48(resolve63(input.iconPath))) : void 0;
     notes.push(
       book ? `no icon installed \u2014 ${siteLogoAbsence(book).hint}` : "no icon installed and no business book to say why \u2014 `himi icon generate` draws one from the accent, or `himi icon set <file.png>` installs the customer's own mark"
     );
   }
-  if (input.iconPath && existsSync79(input.iconPath)) {
+  if (input.iconPath && existsSync80(input.iconPath)) {
     try {
       const installed = await installIcon(cwd, input.iconPath, { derivePlay: true });
       wrote.push(...installed.wrote);
@@ -177825,11 +178366,11 @@ function deriveSiteShell(input) {
     }
   } else if (input.look.navLabels.length && published.length) {
     const byTitle = new Map(published.map((p2) => [oneLine2(p2.title).toLowerCase(), p2]));
-    for (const label2 of input.look.navLabels) {
-      if (homeTitle === "Home" && HOME_WORD.test(oneLine2(label2))) homeTitle = boundedTitle(label2);
-      const page = byTitle.get(oneLine2(label2).toLowerCase());
+    for (const label3 of input.look.navLabels) {
+      if (homeTitle === "Home" && HOME_WORD.test(oneLine2(label3))) homeTitle = boundedTitle(label3);
+      const page = byTitle.get(oneLine2(label3).toLowerCase());
       const path2 = page?.url ? pathOnSite(origin, page.url) : null;
-      if (page && path2 !== null) add(label2, path2, page.url);
+      if (page && path2 !== null) add(label3, path2, page.url);
     }
   }
   if (!candidates.length && navLinks.length) {
@@ -178593,8 +179134,8 @@ __export(cli_exports3, {
   runSiteAnalyze: () => runSiteAnalyze,
   runSiteFunctionCli: () => runSiteFunctionCli
 });
-import { existsSync as existsSync80, readFileSync as readFileSync101 } from "node:fs";
-import { resolve as resolve63 } from "node:path";
+import { existsSync as existsSync81, readFileSync as readFileSync102 } from "node:fs";
+import { resolve as resolve64 } from "node:path";
 function applyNeedsClient(shell) {
   if (shell === void 0 || !SHELL_NAMES2.includes(shell)) return true;
   return !isSiteShell(shell);
@@ -178627,7 +179168,7 @@ async function runSiteAnalyze(opts) {
   const assetFetch = assetFetchFor(opts);
   const siteFetch = guardedSiteFetch;
   const cwd = opts.cwd ?? process.cwd();
-  const outDir = resolve63(cwd, opts.outDir ?? ".himi/business-book");
+  const outDir = resolve64(cwd, opts.outDir ?? ".himi/business-book");
   let ownerAuth;
   let msid;
   const ownerSite = ownerSiteFor(opts);
@@ -178656,14 +179197,14 @@ async function runSiteAnalyze(opts) {
   if (opts.shell !== void 0 && isSiteShell(opts.shell)) {
     try {
       const kind = siteKindForOrigin(result.book.input.siteUrl);
-      const book = kind === "base44" ? base44BookRoutes(resolve63(cwd, ".himi/base44-book/book.json"), result.book.input.siteUrl) : void 0;
+      const book = kind === "base44" ? base44BookRoutes(resolve64(cwd, ".himi/base44-book/book.json"), result.book.input.siteUrl) : void 0;
       const routes = book?.routes;
       if (book?.skipped) result.warnings = [...result.warnings ?? [], book.skipped];
       const derived = deriveSiteShell({ siteUrl: result.book.input.siteUrl, look: result.book.look, kind, routes });
-      const prevOverlayPath = resolve63(outDir, "provisioning.overlay.json");
-      const prevSite = existsSync80(prevOverlayPath) ? (() => {
+      const prevOverlayPath = resolve64(outDir, "provisioning.overlay.json");
+      const prevSite = existsSync81(prevOverlayPath) ? (() => {
         try {
-          return JSON.parse(readFileSync101(prevOverlayPath, "utf8")).site;
+          return JSON.parse(readFileSync102(prevOverlayPath, "utf8")).site;
         } catch {
           return void 0;
         }
@@ -178680,9 +179221,9 @@ async function runSiteAnalyze(opts) {
       ];
     }
   }
-  const previousOverlay = resolve63(outDir, "provisioning.overlay.json");
+  const previousOverlay = resolve64(outDir, "provisioning.overlay.json");
   carryOverGoals(
-    existsSync80(previousOverlay) ? readFileSync101(previousOverlay, "utf8") : void 0,
+    existsSync81(previousOverlay) ? readFileSync102(previousOverlay, "utf8") : void 0,
     result.provisioningOverlay
   );
   const ownerCall = ownerAuth ? ownerTransportFrom(fetchImpl, ownerAuth) : void 0;
@@ -178701,9 +179242,9 @@ async function runSiteAnalyze(opts) {
   if (opts.apply) {
     applied = await applyOverlays({
       cwd,
-      overlayPath: resolve63(outDir, "provisioning.overlay.json"),
-      tokensPath: resolve63(outDir, "tokens.overlay.json"),
-      iconPath: resolve63(outDir, "media/icon.png"),
+      overlayPath: resolve64(outDir, "provisioning.overlay.json"),
+      tokensPath: resolve64(outDir, "tokens.overlay.json"),
+      iconPath: resolve64(outDir, "media/icon.png"),
       shell: opts.shell
     });
     const note = noteWithWarnings(applied.note, warnings);
@@ -178739,8 +179280,8 @@ async function runSiteFunctionCli(opts) {
   const token = opts.token ?? await siteToken(msid);
   let source;
   if (opts.sourcePath) {
-    const p2 = resolve63(opts.cwd ?? process.cwd(), opts.sourcePath);
-    source = readFileSync101(p2, "utf8");
+    const p2 = resolve64(opts.cwd ?? process.cwd(), opts.sourcePath);
+    source = readFileSync102(p2, "utf8");
   }
   let body;
   if (opts.bodyRaw != null) {
@@ -178768,9 +179309,9 @@ async function runSiteFunctionCli(opts) {
   });
 }
 function base44BookRoutes(bookPath, siteUrl) {
-  if (!existsSync80(bookPath)) return void 0;
+  if (!existsSync81(bookPath)) return void 0;
   try {
-    const book = JSON.parse(readFileSync101(bookPath, "utf8"));
+    const book = JSON.parse(readFileSync102(bookPath, "utf8"));
     if (book.kind !== "base44-app-book" || !Array.isArray(book.routes)) return void 0;
     const host = (u2) => {
       try {
@@ -178819,7 +179360,7 @@ async function accountToken2(spawnImpl = spawn6) {
     cached2 = fromEnv;
     return fromEnv;
   }
-  const token = await new Promise((resolve65, reject) => {
+  const token = await new Promise((resolve66, reject) => {
     let child;
     try {
       child = spawnImpl("wix", ["token"]);
@@ -178848,7 +179389,7 @@ async function accountToken2(spawnImpl = spawn6) {
     const scan = (d2) => {
       out2 += String(d2);
       const m2 = out2.match(TOKEN_RE2);
-      if (m2) done(() => resolve65(m2[0]));
+      if (m2) done(() => resolve66(m2[0]));
     };
     child.stdout?.on("data", scan);
     child.stderr?.on("data", scan);
@@ -179025,7 +179566,7 @@ __export(site_create_exports, {
   runSiteList: () => runSiteList,
   writeProvisioningBinding: () => writeProvisioningBinding
 });
-import { existsSync as existsSync81, readFileSync as readFileSync102, writeFileSync as writeFileSync38 } from "node:fs";
+import { existsSync as existsSync82, readFileSync as readFileSync103, writeFileSync as writeFileSync39 } from "node:fs";
 import { resolve as resolvePath2 } from "node:path";
 function oauthClientName(projectName) {
   return `${projectName} client`;
@@ -179174,7 +179715,7 @@ async function runSiteCreate(opts) {
   if (!wantOauthApp) return { ...base, nextSteps: nextSteps(metaSiteId) };
   return { ...base, clientId, redirectUri, nextSteps: nextSteps(metaSiteId, clientId) };
 }
-function writeProvisioningBinding(target, binding2, fs2 = { existsSync: existsSync81, readFileSync: readFileSync102, writeFileSync: writeFileSync38 }) {
+function writeProvisioningBinding(target, binding2, fs2 = { existsSync: existsSync82, readFileSync: readFileSync103, writeFileSync: writeFileSync39 }) {
   const msid = binding2.siteId;
   const path2 = resolvePath2(target);
   const committed = committedShellProvisioning(path2);
@@ -179871,12 +180412,12 @@ var init_context = __esm({
 });
 
 // src/cli.ts
-import { mkdtempSync as mkdtempSync6, readFileSync as readFileSync103, mkdirSync as mkdirSync42, writeFileSync as writeFileSync39, existsSync as existsSync82, rmSync as rmSync24, readdirSync as readdirSync35, statSync as statSync23, lstatSync as lstatSync22, accessSync, constants as constants5, renameSync as renameSync13, cpSync as cpSync3 } from "node:fs";
+import { mkdtempSync as mkdtempSync6, readFileSync as readFileSync104, mkdirSync as mkdirSync42, writeFileSync as writeFileSync40, existsSync as existsSync83, rmSync as rmSync24, readdirSync as readdirSync35, statSync as statSync23, lstatSync as lstatSync22, accessSync, constants as constants5, renameSync as renameSync13, cpSync as cpSync3 } from "node:fs";
 import { execFile as execFile2, execFileSync as execFileSync7, spawnSync as spawnSync5, spawn as spawn7 } from "node:child_process";
 import { AsyncLocalStorage as AsyncLocalStorage2 } from "node:async_hooks";
 import { createHash as createHash45, randomUUID as randomUUID11 } from "node:crypto";
 import { tmpdir as tmpdir7, homedir as homedir14, hostname as hostname2 } from "node:os";
-import { join as join87, resolve as resolve64, relative as relative16, basename as basename21, dirname as dirname49 } from "node:path";
+import { join as join88, resolve as resolve65, relative as relative16, basename as basename21, dirname as dirname49 } from "node:path";
 import { fileURLToPath as fileURLToPath29 } from "node:url";
 
 // ../serve-cli/src/client.ts
@@ -181193,7 +181734,7 @@ ${s2.fields.map((f2) => `      ${f2.key} (${f2.type})`).join("\n")}`
 }
 
 // src/data.ts
-init_schema();
+init_schema2();
 import { createHash as createHash4 } from "node:crypto";
 async function planData(options) {
   const kv = [];
@@ -181273,8 +181814,8 @@ var HttpDataKvAdminProvider = class {
 };
 
 // src/cli.ts
-init_schema();
-init_ownership();
+init_schema2();
+init_ownership2();
 init_wix_owner();
 init_brandable_shells();
 init_splash();
@@ -181430,9 +181971,9 @@ function summarizeLint(app, bres, outcome, strict, extraIssues = []) {
 }
 
 // src/cms-lint.ts
-init_schema();
+init_schema2();
 init_app_config_loader();
-init_ownership();
+init_ownership2();
 function bootsAsVisitor(auth) {
   if (!auth) return false;
   const flag = auth.config?.bootAsVisitor;
@@ -181962,8 +182503,8 @@ var str10 = (v2) => typeof v2 === "string" ? v2 : void 0;
 var num3 = (v2) => typeof v2 === "string" && v2 !== "" && Number.isFinite(Number(v2)) ? Number(v2) : void 0;
 function embeddedTemplateCatalog() {
   return availableTemplates().map((name) => {
-    const path2 = join87(templateSourceDir(name), TEMPLATE_META_FILE);
-    const meta = JSON.parse(readFileSync103(path2, "utf8"));
+    const path2 = join88(templateSourceDir(name), TEMPLATE_META_FILE);
+    const meta = JSON.parse(readFileSync104(path2, "utf8"));
     if (!meta || typeof meta.title !== "string" || typeof meta.description !== "string" || !Array.isArray(meta.tags)) {
       throw new Error(`${path2} must be { title: string, description: string, tags: string[], category?: string }`);
     }
@@ -182671,6 +183212,14 @@ var USAGE = `himi \u2014 the Himalaya authoring CLI (remote dev loop)
                                            RLS + redacted samples (--sample, default 5), functions,
                                            agents, connectors and secret NAMES. himi docs
                                            base44-app-context.
+  himi base44 adopt [--book <dir>] [--entities A,B] [--write [path]] [--json]
+                                           turn an app book into a reviewable base44-entities.ts of
+                                           ADOPTED entity + function declarations to wire into
+                                           config.ts. Never edits config.ts, never overwrites a file.
+  himi base44 entities query [--content <dir>] [--all] [--json]
+                                           READ-ONLY: per declared entity, ownership, row count and
+                                           schema drift against the live app, plus foreign entities.
+                                           Needs a session. himi docs base44-entities.
   himi base44 login [--from-base44-cli] | whoami | logout
                                            the Base44 session, in ~/.himi/base44/ (never the repo).
                                            BASE44_ACCESS_TOKEN wins, for CI.
@@ -182818,7 +183367,7 @@ var COMMANDS2 = [
   { name: "notify", summary: "Hosted --all-members requires --yes for a live send; --dry-run checks ownership/readiness and counts approved recipients without sending. `setup` optionally configures Branded/Ping from local customer key files; `status --refresh` reads live backend readiness. Setup may be deferred while building. These use serve-control and require owner plus Wix account authentication. `send`, `tokens`, `doctor`: send a REAL push notification to registered devices (RFC 0036 WS5) \u2014 APNs .p8 over HTTP/2 for iOS, FCM v1 for Android. `send` targets one device (--token / --device <registry id>) or fans out to the whole app (--all), reporting a per-device result; a token the provider says is uninstalled (APNs 410 Unregistered / FCM UNREGISTERED) is auto-disabled, while a merely wrong one (BadDeviceToken \u2014 usually a sandbox/production mismatch) is recorded and left enabled. `tokens` lists the registry. `doctor` reports which credentials resolve and which sender each platform picks. Talks to the admin-server via --admin-url/HIMALAYA_ADMIN_URL, authenticated with --admin-session/HIMALAYA_ADMIN_SESSION. `send --provider ping` is the hosted alternative: the serve plane sends to one site member (--member-email) or all approved members (--all-members) through Ping as Himalaya, with owner login instead of provider keys, and reports acceptance, never delivery. NOT `himi push`, which publishes a release.", required: "setup|status [--content <dir>] [--target <t>] [--refresh] [--yes] [--no-push-setup] | send --provider ping [--content <dir>] [--app <a>] [--site <msid>] (--member-email <email> | --all-members (--dry-run | --yes)) --title <s> [--body <s>] --link <url> [--request-id <uuid>] [--dry-run] [--json] | send|tokens|doctor [--app <a>] [--token <t> | --device <id> | --all] [--title <s>] [--body <s>] [--link <url>] [--platform ios|android] [--badge <n>] [--channel <id>] [--silent] [--dry-run] [--json]" },
   { name: "signing", summary: "READ-ONLY App Store Connect inventory for customer BYO TestFlight readiness. `inspect` lists whether the bundle id, distribution certificate, IOS_APP_STORE profile, and ASC app record exist for --bundle-id / --team-id using a local ASC .p8 (flags or ASC_KEY_* env). Never uploads or mutates Apple resources. Optional --cert-file/--profile-file classify on-disk material.", required: "inspect --bundle-id <id> --team-id <id> --asc-key-file <path> --asc-key-id <id> --asc-issuer-id <id> [--cert-file <p12> --cert-password <pw> --profile-file <mobileprovision>] [--json]" },
   { name: "site", summary: "PROVISION a Wix project, then analyze or extend it. `create` is the one door that makes a site instead of adopting one: POST /funnel/projects/v1/create (a WIX site, a HEADLESS backend, a BRANDED_APP, or a VIBE site), and for headless it also mints the OAuth app whose id IS the `WIX_CLIENT_ID` \u2014 with --redirect-uri already registered, because an unregistered redirect makes native signInDirect fail at redirect-session. `--verticals` REQUIRES `--template` and reports only what Wix confirmed: measured, installing onto a project created from the BLANK template returns 200 while the vertical's API answers 428 forever, because there is no site for it to attach to (the install asks for CREATE_SITE). A real template ships its verticals installed and populated, and installing further ones onto it then works. It MUTATES your Wix account and needs --yes; without it you get the payload and nothing is sent. `list` is the read-only site inventory (with each site's premium flag, which is what explains an installed-but-428 vertical). Auth is the account-scoped `wix token` (no --site), falling back to WIX_API_KEY + WIX_ACCOUNT_ID. `client` is the same OAuth step for a site that ALREADY exists \u2014 the one himi adopts rather than makes \u2014 so a clientId no longer means a manual trip to the dashboard: `client ensure` reconciles rather than mints, because a site can already carry a client with NO registered redirect and shipping that one fails signInDirect at runtime; it reuses a client that carries --redirect-uri, PATCHes one that matches --name but lacks it (unioning, so another app's redirect survives), and creates only when there is nothing to reuse (--new forces a fresh one). --name IS the idempotency key. `client` auth is SITE-scoped (`wix token --site <msid>`) because minting is owner-of-that-site, and --yes gates every mutation: a site that already has a usable client resolves WITHOUT it, but --write-provisioning needs --yes even then because it rewrites a manifest on disk (the dry run's planned.provisioning names the file). That query endpoint IGNORES paging (measured: query.paging, cursorPaging and a top-level paging all return the full set at offset 0), so when pagingMetadata reports more clients than came back, `ensure` REFUSES EVERY outcome \u2014 create, patch AND reuse. Reuse is refused too because pickClient breaks ties on the OLDEST createdDate, so an omitted older same-named MOBILE client with the same redirect would win a later complete read and the resolved clientId would MOVE between runs \u2014 and it gets written into provisioning.json; convergence is what makes a stray duplicate untidy rather than harmful. --name cannot narrow the query (no filter is sent; the name is applied to the rows after they arrive), so the recovery is the dashboard; --new skips the query entirely. A `patched` result is verified against what Wix STORED \u2014 the redirect list is read off the PATCH response, and re-read via GET when the response omits it, because falling back to the list himi just sent would make the guard pass vacuously on exactly the silent no-op it exists to catch. `client list` is the read-only inventory of a site's clients: act on its `shippable` column rather than `hasRedirect`, because shippable ALSO requires a MOBILE applicationType and `ensure` refuses a WEB client \u2014 a WEB one carrying your redirect looks right and is not a candidate \u2014 and it sets truncated:true rather than presenting a partial inventory as the whole one. `analyze --read-only` returns API-only generation context as JSON (identity, access probes, CMS permissions and selected redacted Velo source); it needs no browser and never uploads or applies anything. A URL is optional there: `--url` lets it read the published page's Velo code-app ids (credential-free, pinned transport) so the backend source is found on sites where the owner code-app probe 404s. `analyze` reads a site into a business-book folder (REST + Playwright, GET-only); `--url` alone is the visitor-only pass over the published pages, and `--client-id` adds the vertical probes and the app binding `--apply` requires; `site function` list/get/put/publish/invokes that site's Velo HTTP functions and is not `himi functions` (serve-plane jobs). `--apply` bakes into a brandable shell (a site shell needs no `--client-id`: it is visitor-only and binds no client); `--shell` takes the same names `himi dist --shell` does and defaults to branded-lite, and a shell that ships no prepare:customer is refused by name rather than half-built. `--shell brandy` (the site shell, RFC 0062) also derives the site's page map from its published pages and header menu \u2014 Home first, up to four tabs for the pages a visitor returns to, the rest in the drawer \u2014 into the overlay's `site` block, so it can be edited before `--apply`; only a site shell ever receives that block. It never overwrites any shell's committed apps/<shell>/provisioning.json. `member-app set|clear|show <msid>` is the site's member app in Spaces (#4091): the himi app the site's members open in Spaces Lite instead of Branded Lite. `set --app <id>` takes the site's own app or one your account owns (an owned app not yet tied to the site is linked first; another account's app is refused, 403); `clear` returns the site to Branded Lite; `show` prints the pick plus the COMPUTED verdict \u2014 the picked release's requirements judged against the Spaces host manifest (checkHostCompatibility, `--platform` to judge one phone platform) \u2014 and `reason` when it falls back to Branded Lite. Auth is your `himi login` control token plus the account `wix token`, which the plane uses to verify you own the site.", required: "create <name> [--type wix|headless|branded-app|vibe] [--template <guid>] [--verticals stores,bookings,\u2026] [--folder <guid>] [--redirect-uri <uri>] [--no-oauth-app] [--write-provisioning [path]] [--site-url <url>] [--json] --yes | list | client ensure|list --site <msid> [--name <name>] [--redirect-uri <uri>] [--new] [--write-provisioning [path]] [--site-url <url>] [--json] --yes | analyze --read-only [--site <msid>] [--client-id <id>] [--url <https>] [--json] | analyze --url <https> [--client-id <id>] [--site <msid>] [--out <dir>] [--redirect-uri <uri>] [--apply] [--shell " + SHELL_ENUM + "] | function list|get|put|publish|invoke [--site <msid>] [--url <https>] [--method GET|POST|PUT|DELETE] [--source <file>] [--body <json>] [--publish] [--invoke] | member-app set|clear|show <msid> [--app <id>] [--platform ios|android]" },
-  { name: "base44", summary: "read a BASE44 app into an app book (book.json + BOOK.md) for the agent building a Himi app from it \u2014 the Base44 counterpart of `site analyze`, READ-ONLY. `analyze --url <published app>` is the VISITOR pass: the app id, name, favicon and colours from the published SPA, its router paths, and screenshots + look tokens from the Playwright crawl. `analyze --app-id <id>` adds the OWNER pass and needs a session: the project source under <out>/source/ (the read half of `base44 eject` \u2014 GET api/apps/<id>/eject \u2014 through the same deny-list and secret scan `himi push` uses, widened by the book's token shapes; `eject` itself is never run because it CREATES a copy of the app), every entity's JSON schema, required fields and RLS rules with up to --sample redacted rows (default 5, 0 = off), backend functions, agents, connectors (names and scopes only, never tokens), secret NAMES (never values), auth visibility + providers, and the route \u2192 component \u2192 entities map from the source router. Every chapter it could not read is listed in `gaps` rather than failing the run. `login` runs Base44's device sign-in and stores the session in ~/.himi/base44/session.json (never the repo; --from-base44-cli imports `npx base44 login`'s session instead); BASE44_ACCESS_TOKEN in the environment wins, for CI. `whoami` prints who is signed in (never the token); `logout` removes the stored session. `auth-check --url <tenant> --ios-app-id <PREFIX.bundle.id>` and/or `--android-package <package> --android-sha256 <fingerprint>` checks public native-login associations and prints missing entries; it never reads an owner token. --json prints the book itself. himi docs base44-app-context", required: "analyze (--url <https://\u2026> | --app-id <id>) [--out .himi/base44-book] [--sample <n>] [--json] | login [--from-base44-cli] | whoami | logout | auth-check --url <https://tenant> [--ios-app-id <PREFIX.bundle.id>] [--android-package <package> --android-sha256 <fingerprint>]" },
+  { name: "base44", summary: "read a BASE44 app into an app book (book.json + BOOK.md) for the agent building a Himi app from it \u2014 the Base44 counterpart of `site analyze`, READ-ONLY. `analyze --url <published app>` is the VISITOR pass: the app id, name, favicon and colours from the published SPA, its router paths, and screenshots + look tokens from the Playwright crawl. `analyze --app-id <id>` adds the OWNER pass and needs a session: the project source under <out>/source/ (the read half of `base44 eject` \u2014 GET api/apps/<id>/eject \u2014 through the same deny-list and secret scan `himi push` uses, widened by the book's token shapes; `eject` itself is never run because it CREATES a copy of the app), every entity's JSON schema, required fields and RLS rules with up to --sample redacted rows (default 5, 0 = off), backend functions, agents, connectors (names and scopes only, never tokens), secret NAMES (never values), auth visibility + providers, and the route \u2192 component \u2192 entities map from the source router. Every chapter it could not read is listed in `gaps` rather than failing the run. `login` runs Base44's device sign-in and stores the session in ~/.himi/base44/session.json (never the repo; --from-base44-cli imports `npx base44 login`'s session instead); BASE44_ACCESS_TOKEN in the environment wins, for CI. `whoami` prints who is signed in (never the token); `logout` removes the stored session. `auth-check --url <tenant> --ios-app-id <PREFIX.bundle.id>` and/or `--android-package <package> --android-sha256 <fingerprint>` checks public native-login associations and prints missing entries; it never reads an owner token. --json prints the book itself. himi docs base44-app-context. `adopt` turns the book into a reviewable base44-entities.ts of ADOPTED entity + function declarations for config.ts (never edits config.ts, never overwrites); `entities query` is READ-ONLY and reports, per declared entity, ownership, row count and schema drift against the live app, plus foreign entities. himi docs base44-entities", required: "analyze (--url <https://\u2026> | --app-id <id>) [--out .himi/base44-book] [--sample <n>] [--json] | adopt [--book .himi/base44-book] [--entities A,B] [--write [path]] [--json] | entities query [--content <dir>] [--all] [--json] | login [--from-base44-cli] | whoami | logout | auth-check --url <https://tenant> [--ios-app-id <PREFIX.bundle.id>] [--android-package <package> --android-sha256 <fingerprint>]" },
   { name: "doctor", summary: 'off-VPN preflight in one shot: probe the PUBLIC data plane (www.wixapis.com \u2014 reachable off-VPN), the INTERNAL serve/control plane for the selected target (VPN-gated), and report auth state (dpx session on disk + stored control token). --dpx additionally runs a live, EADDRINUSE-safe `dpx whoami`. Machine-readable with --json (an unreachable internal plane carries a stable code:"needs_vpn" so an agent branches on the code, not the prose); human-readable otherwise. Never loads the authoring runtime \u2014 works off-repo.', required: "[--target <t>] [--dpx] [--json] [--data-url <url>] [--timeout <ms>]" },
   { name: "upgrade", summary: "install the newest published CLI (`npm i -g @wix/himalaya-cli@latest`) and report what moved. This is the explicit door: himi also updates itself when the running build is more than a week old \u2014 unattended it just does it and re-runs your command, at a terminal it asks first \u2014 and `HIMI_NO_UPDATE_CHECK=1` turns that off, leaving this command as the way to catch up. Reports `unchanged` rather than claiming success when npm exits 0 without moving the version, which is what a registry mirror serving its own pinned copy looks like.", required: "[--json]" },
   { name: "push", summary: "lint + build + publish a release (default --draft: servable via ?release= but NOT live). REFUSES to publish on any error unless --force; --strict promotes warnings. Prints preview + agent-context links. A successful draft push also rebuilds the making-of (.himi/making-of.html, local and offline) and names it as `reel` \u2014 the file to hand the owner beside the preview link. Its postcard carries the home shot only when that shot is newer than the last source edit; a repeat draft's postcard adds what changed since the last one (\"Since the last draft: the home screen changed.\", from the release manifests' screen hashes, remembered in .himi/last-draft.json); otherwise the postcard says why and names `himi render <home> --png`, and the envelope's `postcardPicture: {skipped, render}` leads next[] with that render (the push never renders it itself). The published slug is NAMESPACED per owner \u2014 `<ownerPrefix>.<name>`, composed offline from the control token's ownerPrefix claim, so the CLI and the server derive the identical string and himalaya.content.json is NOT rewritten (a legacy token with no ownerPrefix publishes the declared name unchanged). An app claimed BEFORE namespacing is stored under its FLAT slug, so the claim route answers `alreadyYours` naming that slug and the push adopts it \u2014 reported as `adoptedSlug`, since it is the one case where the published `app` differs from what the declared name composes to. `--no-claim` skips the route that knows this, so a pre-namespacing app pushed with it still fails 403. --visibility public|unlisted decides whether /v1/apps + the Himi Player picker LIST the app (also declarable as `visibility` in himalaya.content.json; omitted, a brand-new app defaults to unlisted \u2014 share by link \u2014 and an existing setting is kept). --account-id names which account owns the app when your Wix session resolves to several (the auto-claim of a brand-new slug cannot guess \u2014 without it a multi-account caller is told to name one). An unforced push of a release that carries SCREENS also refuses when `.himi/ux-audit.json` holds no mobile-UX drive recorded against that release id, or holds one that FAILED (#2955) \u2014 a published draft IS the owner-private preview a customer is handed; `himi ux record` clears it and `--force` overrides it, which the success envelope then says out loud. `--only <selector>` publishes ONLY the named items as a release derived from the app's live release (or `--from-release <id>`), running the identical build + lint gate and simply publishing less; it requires an explicit `--draft` or `--live` because a partial publish has no safe default, never claims a slug, and carries neither attestation nor a source archive (both named in the output). Selectors are comma-separated in ONE `--only`: `changed` (every item whose bytes differ from the base), `screen:<id|glob>`, `bundle:<name>`, `tokens`, `app-config` \u2014 a selected screen drags its logic bundle and a selected bundle drags the screens that reference it, or the bytes land under a key nothing reads. The plane REFUSES (409 binary_capability_gap) a release declaring a PERMISSION-BEARING capability (iOS usage string or entitlement, Android permission \u2014 camera, location, push, \u2026) that the app's last successful `himi dist` was not built with: an OTA push cannot add an OS permission, and on iOS asking for one whose purpose string is missing kills the app. Run `himi dist` first, or pass `--allow-binary-gap` when every installed binary already carries it \u2014 recorded on the release as `allowedBinaryGap`. A gap in a permission-free capability (share, clipboard, \u2026) stays the `needsBinary` advice.", required: "[--content <dir>] [--draft] [--live] [--force] [--strict] [--label] [--notes] [--visibility public|unlisted] [--allow-binary-gap] [--no-claim] [--account-id <id>] [--only <selector>] [--from-release <id>] [--accept-regressions] [--accept-partial] [--app <slug>] (--control-token)" },
@@ -182860,7 +183409,7 @@ var COMMANDS2 = [
 ];
 function cliVersion() {
   try {
-    return JSON.parse(readFileSync103(new URL("../package.json", import.meta.url), "utf8")).version ?? "unknown";
+    return JSON.parse(readFileSync104(new URL("../package.json", import.meta.url), "utf8")).version ?? "unknown";
   } catch {
     return "unknown";
   }
@@ -182911,18 +183460,18 @@ function createScopedRegistryResolver(exec = execNpmConfig) {
 }
 var SCOPED_REGISTRY_TIMEOUT_MS = 5e3;
 function execNpmConfig(file2, args, options) {
-  return new Promise((resolve65, reject) => {
-    execFile2(file2, args, { ...options, windowsHide: true }, (error, stdout) => error ? reject(error) : resolve65(String(stdout)));
+  return new Promise((resolve66, reject) => {
+    execFile2(file2, args, { ...options, windowsHide: true }, (error, stdout) => error ? reject(error) : resolve66(String(stdout)));
   });
 }
 var npmScopedWixRegistry = createScopedRegistryResolver();
 async function scopedRegistryBefore(lookup3, deadline, onTimeout) {
   let cancel = () => {
   };
-  const expired = new Promise((resolve65) => {
+  const expired = new Promise((resolve66) => {
     const timer = setTimeout(() => {
       onTimeout?.();
-      resolve65(void 0);
+      resolve66(void 0);
     }, Math.max(0, deadline - Date.now()));
     cancel = () => clearTimeout(timer);
   });
@@ -182985,16 +183534,16 @@ function ageInDays(publishedAt, now = Date.now()) {
 }
 function packageVersion(path2) {
   try {
-    const version4 = JSON.parse(readFileSync103(path2, "utf8")).version;
+    const version4 = JSON.parse(readFileSync104(path2, "utf8")).version;
     return typeof version4 === "string" && version4 ? version4 : void 0;
   } catch {
     return void 0;
   }
 }
 function resolvedSdkVersion(fromDir = process.cwd(), bundledManifest = new URL("./authoring-runtime/node_modules/@wix/himalaya/package.json", import.meta.url)) {
-  let dir = resolve64(fromDir);
+  let dir = resolve65(fromDir);
   for (; ; ) {
-    const version4 = packageVersion(join87(dir, "node_modules", "@wix", "himalaya", "package.json"));
+    const version4 = packageVersion(join88(dir, "node_modules", "@wix", "himalaya", "package.json"));
     if (version4) return { version: version4, source: "local" };
     const parent = dirname49(dir);
     if (parent === dir) break;
@@ -183004,7 +183553,7 @@ function resolvedSdkVersion(fromDir = process.cwd(), bundledManifest = new URL("
   if (bundled) return { version: bundled, source: "bundled" };
   try {
     const root = execFileSync7("npm", ["root", "-g"], { stdio: ["ignore", "pipe", "ignore"] }).toString().trim();
-    const version4 = root ? packageVersion(join87(root, "@wix", "himalaya", "package.json")) : void 0;
+    const version4 = root ? packageVersion(join88(root, "@wix", "himalaya", "package.json")) : void 0;
     return version4 ? { version: version4, source: "global" } : {};
   } catch {
     return {};
@@ -183051,11 +183600,11 @@ var UPDATE_RETRY_AFTER_FAILURE_MS = 60 * 60 * 1e3;
 var UPDATE_SNOOZE_MS = 24 * 60 * 60 * 1e3;
 var UPDATE_REEXEC_ENV = "HIMI_UPDATED_ONCE";
 function updateCachePath(env = process.env) {
-  return env.HIMI_UPDATE_CACHE_FILE ?? join87(homedir14(), ".himalaya", "update-check.json");
+  return env.HIMI_UPDATE_CACHE_FILE ?? join88(homedir14(), ".himalaya", "update-check.json");
 }
 function readUpdateCache(path2) {
   try {
-    const parsed = JSON.parse(readFileSync103(path2, "utf8"));
+    const parsed = JSON.parse(readFileSync104(path2, "utf8"));
     return parsed && typeof parsed === "object" ? parsed : {};
   } catch {
     return {};
@@ -183064,7 +183613,7 @@ function readUpdateCache(path2) {
 function writeUpdateCache(path2, cache) {
   try {
     mkdirSync42(dirname49(path2), { recursive: true, mode: 448 });
-    writeFileSync39(path2, JSON.stringify(cache, null, 2) + "\n", { mode: 384 });
+    writeFileSync40(path2, JSON.stringify(cache, null, 2) + "\n", { mode: 384 });
   } catch {
   }
 }
@@ -183124,12 +183673,12 @@ function createUpdateRunner(spawn8 = spawnSync5) {
     },
     installedVersion: () => {
       const root = globalNodeModulesRoot();
-      return root ? packageVersion(join87(root, "@wix", "himalaya-cli", "package.json")) : void 0;
+      return root ? packageVersion(join88(root, "@wix", "himalaya-cli", "package.json")) : void 0;
     },
     reexec: (argv) => {
       const root = globalNodeModulesRoot();
-      const entry = root ? join87(root, "@wix", "himalaya-cli", "dist", "cli.mjs") : void 0;
-      if (!entry || !existsSync82(entry)) return void 0;
+      const entry = root ? join88(root, "@wix", "himalaya-cli", "dist", "cli.mjs") : void 0;
+      if (!entry || !existsSync83(entry)) return void 0;
       const result = spawnSync5(process.execPath, [entry, ...argv], {
         // inherit keeps PIPED STDIN working — commands that read stdin must survive a re-exec.
         stdio: "inherit",
@@ -183176,7 +183725,7 @@ function staleUpdateLockFile(cachePath, now) {
   for (const path2 of [`${cachePath}.lock.break`, `${cachePath}.lock`]) {
     let content;
     try {
-      content = readFileSync103(path2, "utf8");
+      content = readFileSync104(path2, "utf8");
     } catch {
       continue;
     }
@@ -183199,14 +183748,14 @@ function acquireUpdateLock(cachePath, now, hooks = {}) {
   const mine = lockStamp(now);
   const readLock = (path2) => {
     try {
-      return readFileSync103(path2, "utf8");
+      return readFileSync104(path2, "utf8");
     } catch {
       return void 0;
     }
   };
   const tryCreate = (path2) => {
     try {
-      writeFileSync39(path2, mine, { flag: "wx", mode: 384 });
+      writeFileSync40(path2, mine, { flag: "wx", mode: 384 });
       return true;
     } catch {
       return false;
@@ -183333,7 +183882,7 @@ function createTrimValidator(deps = {}, spawnFn = spawn7) {
     return { code, counts, ...errors ? { errors } : {}, ...code !== 0 ? { tail: said.slice(-4e3) } : {} };
   };
   return async (dir, opts = {}) => {
-    const argv = ["validate", "--content", resolve64(dir), "--strict", "--skip-version-check"];
+    const argv = ["validate", "--content", resolve65(dir), "--strict", "--skip-version-check"];
     if (!opts.fresh) {
       const out2 = [];
       const err = [];
@@ -183791,7 +184340,7 @@ function executableOnPath(name, env = process.env) {
   const suffixes = process.platform === "win32" ? (env.PATHEXT ?? ".COM;.EXE;.BAT;.CMD").split(";").filter(Boolean) : [""];
   for (const dir of entries) {
     for (const suffix of suffixes) {
-      const candidate = join87(dir, `${name}${suffix}`);
+      const candidate = join88(dir, `${name}${suffix}`);
       try {
         if (!statSync23(candidate).isFile()) continue;
         if (process.platform !== "win32") accessSync(candidate, constants5.X_OK);
@@ -183900,7 +184449,7 @@ async function nativeConfigAdvisories(app, configSource) {
     const { iosProjectYml: iosProjectYml2 } = await Promise.resolve().then(() => (init_paths2(), paths_exports));
     const { androidOptedIn: androidOptedIn3, LABEL_IOS_SPLASH: LABEL_IOS_SPLASH2 } = await Promise.resolve().then(() => (init_splash(), splash_exports));
     const iosYmlPath = iosProjectYml2(app);
-    const iosYml = existsSync82(iosYmlPath) ? readFileSync103(iosYmlPath, "utf8") : "";
+    const iosYml = existsSync83(iosYmlPath) ? readFileSync104(iosYmlPath, "utf8") : "";
     let optedIn = iosYml.includes(LABEL_IOS_SPLASH2);
     if (!optedIn) {
       const { androidManifestPath: androidManifestPath3 } = await Promise.resolve().then(() => (init_gen_native_config(), gen_native_config_exports));
@@ -183914,14 +184463,14 @@ async function nativeConfigAdvisories(app, configSource) {
 }
 function readConfigSource(dir) {
   try {
-    return readFileSync103(join87(dir, "config.ts"), "utf8");
+    return readFileSync104(join88(dir, "config.ts"), "utf8");
   } catch {
     return null;
   }
 }
 function writePngFile(path2, base64) {
   mkdirSync42(dirname49(path2), { recursive: true });
-  writeFileSync39(path2, Buffer.from(base64, "base64"));
+  writeFileSync40(path2, Buffer.from(base64, "base64"));
   return path2;
 }
 async function seedAgentFilesFor(dir, flags, mode = "init") {
@@ -183967,8 +184516,8 @@ function keptPlan(kept) {
 var NoBase44SlotError = class extends Error {
 };
 async function initFromRemoteTemplate(name, parentDir, template, c2, opts = {}) {
-  const dir = resolve64(parentDir, name);
-  if (existsSync82(join87(dir, "himalaya.content.json"))) {
+  const dir = resolve65(parentDir, name);
+  if (existsSync83(join88(dir, "himalaya.content.json"))) {
     throw new Error(`content package already exists at ${dir}`);
   }
   const r2 = await c2.fetchTemplateSource(TEMPLATE_APP_PREFIX + template);
@@ -183983,7 +184532,7 @@ async function initFromRemoteTemplate(name, parentDir, template, c2, opts = {})
   return finishScaffold(materializeSource(archive.files, name, dir), template);
 }
 function contentDir(flags) {
-  return resolve64(str10(flags.content) ?? process.cwd());
+  return resolve65(str10(flags.content) ?? process.cwd());
 }
 function renameRestoredSource(restored, declaredApp, renamed) {
   const text9 = {};
@@ -184014,7 +184563,7 @@ function symlinkDestinationIssue(dest) {
 function restoreDestinationIssue(dest, force) {
   const link = symlinkDestinationIssue(dest);
   if (link) return link;
-  if (!existsSync82(dest)) return null;
+  if (!existsSync83(dest)) return null;
   if (!statSync23(dest).isDirectory()) {
     return { error: `${dest} exists and is not a directory`, hint: "pass --out/--name to land somewhere else, or remove the file" };
   }
@@ -184027,9 +184576,9 @@ function restoreDestinationIssue(dest, force) {
   return null;
 }
 function isHimalayaMonorepoCheckout(start) {
-  let dir = resolve64(start);
+  let dir = resolve65(start);
   for (; ; ) {
-    if (existsSync82(join87(dir, "tools", "himi-cli", "src", "cli.ts")) && existsSync82(join87(dir, "core", "serve", "src", "server.ts"))) return true;
+    if (existsSync83(join88(dir, "tools", "himi-cli", "src", "cli.ts")) && existsSync83(join88(dir, "core", "serve", "src", "server.ts"))) return true;
     const parent = dirname49(dir);
     if (parent === dir) return false;
     dir = parent;
@@ -184089,8 +184638,8 @@ function materializeForPreview(appDir3, slug, displayName2) {
   const forBuild = Object.fromEntries(
     Object.entries(files).map(([rel, body]) => [rel, rel === "himalaya.content.json" ? substituteIdentity(body, slug) : body])
   );
-  const repoRoot2 = resolve64(fileURLToPath29(new URL("../../..", import.meta.url)));
-  const root = join87(repoRoot2, "node_modules", ".cache", "himi-template-preview");
+  const repoRoot2 = resolve65(fileURLToPath29(new URL("../../..", import.meta.url)));
+  const root = join88(repoRoot2, "node_modules", ".cache", "himi-template-preview");
   const stillRunning = (pid) => {
     try {
       process.kill(pid, 0);
@@ -184104,12 +184653,12 @@ function materializeForPreview(appDir3, slug, displayName2) {
       if (!entry.isDirectory()) continue;
       const pid = Number(entry.name.startsWith(`${slug}-`) ? entry.name.slice(slug.length + 1) : NaN);
       if (Number.isInteger(pid) && pid > 0 && pid !== process.pid && !stillRunning(pid)) {
-        rmSync24(join87(root, entry.name), { recursive: true, force: true });
+        rmSync24(join88(root, entry.name), { recursive: true, force: true });
       }
     }
   } catch {
   }
-  const dest = join87(root, `${slug}-${process.pid}`);
+  const dest = join88(root, `${slug}-${process.pid}`);
   rmSync24(dest, { recursive: true, force: true });
   mkdirSync42(dest, { recursive: true });
   try {
@@ -184122,8 +184671,8 @@ function materializeForPreview(appDir3, slug, displayName2) {
 }
 async function appId(dir) {
   try {
-    const { readFileSync: readFileSync104 } = await import("node:fs");
-    const m2 = JSON.parse(readFileSync104(join87(dir, "himalaya.content.json"), "utf8"));
+    const { readFileSync: readFileSync105 } = await import("node:fs");
+    const m2 = JSON.parse(readFileSync105(join88(dir, "himalaya.content.json"), "utf8"));
     if (m2.name) return m2.name;
   } catch {
   }
@@ -184131,8 +184680,8 @@ async function appId(dir) {
 }
 async function contentVisibility(dir) {
   try {
-    const { readFileSync: readFileSync104 } = await import("node:fs");
-    const m2 = JSON.parse(readFileSync104(join87(dir, "himalaya.content.json"), "utf8"));
+    const { readFileSync: readFileSync105 } = await import("node:fs");
+    const m2 = JSON.parse(readFileSync105(join88(dir, "himalaya.content.json"), "utf8"));
     if (m2.visibility === "public" || m2.visibility === "unlisted") return m2.visibility;
   } catch {
   }
@@ -184315,8 +184864,8 @@ Guides in your browser: ${idx.portalUrl}`);
       const sdks = loadSdkReference();
       const arg = pos[1];
       if (arg) {
-        const canonical4 = arg.replace(/^@wix\/himalaya\//, "@himalaya/");
-        const want = canonical4.startsWith("@himalaya/") ? canonical4 : `@himalaya/${canonical4}`;
+        const canonical5 = arg.replace(/^@wix\/himalaya\//, "@himalaya/");
+        const want = canonical5.startsWith("@himalaya/") ? canonical5 : `@himalaya/${canonical5}`;
         const s2 = sdks.find((x2) => x2.name === want || x2.name === arg);
         if (!s2) {
           io2.error(JSON.stringify({ error: `unknown sdk: ${arg}`, sdks: sdks.map((x2) => x2.name) }));
@@ -184402,7 +184951,7 @@ Seed your coding agent with \`himi agent-init\`. Guides: ${idx.portalUrl}`);
       return 0;
     }
     case "agent-init": {
-      const dir = resolve64(str10(flags.dir) ?? process.cwd());
+      const dir = resolve65(str10(flags.dir) ?? process.cwd());
       const { seedAgentFiles: seedAgentFiles2, NotAContentPackage: NotAContentPackage2 } = await Promise.resolve().then(() => (init_agent_context(), agent_context_exports));
       let res;
       try {
@@ -184424,7 +184973,7 @@ Seed your coding agent with \`himi agent-init\`. Guides: ${idx.portalUrl}`);
         ...res.removed.length ? { removed: res.removed, note: "older copies at the app root, moved to .himi/legacy-agent-files/ (a backup, in case one became app code) \u2014 the current ones live in .agents/skills/himalaya/" } : {},
         // In a git repo the refresh moves the diff identity an earlier `himi test` attested (that
         // hash is shared with the repo gates and deliberately exempts nothing but its own metadata).
-        ...existsSync82(join87(dir, ".himi", "attestations", "latest.json")) ? { next: "if `himi push` then refuses the attestation as stale, re-run `himi test` \u2014 in a git checkout this refresh changed the tree it covered" } : {},
+        ...existsSync83(join88(dir, ".himi", "attestations", "latest.json")) ? { next: "if `himi push` then refuses the attestation as stale, re-run `himi test` \u2014 in a git checkout this refresh changed the tree it covered" } : {},
         ...res.skipped.length ? { skipped: res.skipped } : {},
         portalUrl: idx.portalUrl
       });
@@ -184447,7 +184996,7 @@ async function recordedReleaseForContentQuietly(dir, resolution, onDrift) {
   try {
     const { buildContentForValidation: buildContentForValidation2, buildReleaseFromContent: buildReleaseFromContent2, bundleOutDir: bundleOutDir2 } = await loadAuthoring();
     const bres = await buildContentForValidation2(dir, { resolution });
-    out2 = mkdtempSync6(join87(tmpdir7(), "himi-ux-record-"));
+    out2 = mkdtempSync6(join88(tmpdir7(), "himi-ux-record-"));
     const hasWorkers = bres.built.length > 0 || bres.compileErrors.length > 0;
     const outcome = await buildReleaseFromContent2(dir, out2, { ...hasWorkers ? { tier5Dir: bundleOutDir2(dir) } : {}, collect: { lint: true } });
     const releaseId = outcome.manifest.releaseId;
@@ -184626,7 +185175,7 @@ async function producedWidgetFamilies(dir) {
     let js2;
     for (const candidate of [`${name}.bundle.js`, `${name}.js`, name]) {
       try {
-        js2 = readFileSync103(join87(outDir, candidate), "utf8");
+        js2 = readFileSync104(join88(outDir, candidate), "utf8");
         break;
       } catch {
       }
@@ -184657,7 +185206,7 @@ async function producedWidgetFamilies(dir) {
   }
   return { families, source: "dist/bundles" };
 }
-var boardOpen = (dir) => existsSync82(join87(dir, ".himi", "studio", "index.html"));
+var boardOpen = (dir) => existsSync83(join88(dir, ".himi", "studio", "index.html"));
 var BOARD_REFRESHERS = /* @__PURE__ */ new Set(["render", "test", "validate", "build", "push", "icon", "site", "ux", "progress"]);
 async function leaveForBoard(dir, record2, value) {
   if (!boardOpen(dir)) return;
@@ -184681,7 +185230,7 @@ async function liveMapFor(dir) {
 }
 var commandScratch = new AsyncLocalStorage2();
 function commandScratchDir(prefix) {
-  const dir = mkdtempSync6(join87(tmpdir7(), prefix));
+  const dir = mkdtempSync6(join88(tmpdir7(), prefix));
   commandScratch.getStore()?.push(dir);
   return dir;
 }
@@ -184992,7 +185541,7 @@ himi v${cliVersion()} \u2014 run \`himi --version\`. If authoring commands fail
           return 2;
         }
         const template = str10(flags.template);
-        const parentDir = resolve64(str10(flags.dir) ?? process.cwd());
+        const parentDir = resolve65(str10(flags.dir) ?? process.cwd());
         const base44AppId = flags["base44-app-id"] === void 0 ? void 0 : String(flags["base44-app-id"]);
         const base44AppUrl = flags["base44-app-url"] === void 0 ? void 0 : String(flags["base44-app-url"]);
         if (base44AppUrl !== void 0) {
@@ -185035,7 +185584,7 @@ himi v${cliVersion()} \u2014 run \`himi --version\`. If authoring commands fail
             const owed = openApprovals2(readApprovals2(dir).events).length;
             next.push(`carried the planning journal into the app (${carried.join(", ")}${owed ? `; ${owed} approval${owed === 1 ? "" : "s"} still owed` : ""}) \u2014 \`himi progress --brief\` there shows it`);
           }
-          const planInParent = ["SPEC.md", "MOBILE-UX.md"].filter((f2) => existsSync82(join87(parentDir, f2)));
+          const planInParent = ["SPEC.md", "MOBILE-UX.md"].filter((f2) => existsSync83(join88(parentDir, f2)));
           if (planInParent.length) {
             next.push(`${planInParent.join(" and ")} in ${parentDir} ${planInParent.length > 1 ? "are" : "is"} not the app's \u2014 if that is the approved plan, move it over the template's boilerplate in ${dir}`);
           }
@@ -185196,13 +185745,13 @@ ${doNow.map((l2) => `  ${l2}`).join("\n")}`);
               if (adding) {
                 const from = str10(flags.from);
                 if (!from) throw new TrimRefusal2('--add <id> needs --from <file> holding the whole new SCREENS entry (`  "<id>": { "screenId": "<id>", \u2026 },`)');
-                print(adopt.addScreen(dir, adding, readFileSync103(from, "utf8"), { parent: str10(flags.parent), tab: str10(flags.tab), displayName: str10(flags["display-name"]) }));
+                print(adopt.addScreen(dir, adding, readFileSync104(from, "utf8"), { parent: str10(flags.parent), tab: str10(flags.tab), displayName: str10(flags["display-name"]) }));
                 return 0;
               }
               if (target) {
                 const from = str10(flags.from);
                 if (!from) throw new TrimRefusal2("--write <id> needs --from <file> holding the whole entry, as --show prints it");
-                print(adopt.replaceScreen(dir, target, readFileSync103(from, "utf8")));
+                print(adopt.replaceScreen(dir, target, readFileSync104(from, "utf8")));
                 return 0;
               }
               if (show) {
@@ -185284,7 +185833,7 @@ ${doNow.map((l2) => `  ${l2}`).join("\n")}`);
             const { keepFromSpec: keepFromSpec2 } = await Promise.resolve().then(() => (init_template_adopt(), template_adopt_exports));
             const dir = contentDir(flags);
             try {
-              const spec = keepFromSpec2(dir, str10(flags["from-spec"]) ?? join87(dir, "SPEC.md"));
+              const spec = keepFromSpec2(dir, str10(flags["from-spec"]) ?? join88(dir, "SPEC.md"));
               const own5 = typeof keep === "string" ? keep.split(",").map((k2) => k2.trim()).filter(Boolean) : [];
               keep = [.../* @__PURE__ */ new Set([...spec.keep, ...own5])].join(",");
               fromSpec = { fromSpec: {
@@ -185325,7 +185874,7 @@ ${doNow.map((l2) => `  ${l2}`).join("\n")}`);
           const result = { ...outcome.result, ...fromSpec };
           const adoptDir = contentDir(flags);
           const kept = flags["dry-run"] !== true && (outcome.code === 0 || outcome.result.forcedKeep === true);
-          if (kept && existsSync82(join87(adoptDir, adoptBits.ADOPT_FILE))) {
+          if (kept && existsSync83(join88(adoptDir, adoptBits.ADOPT_FILE))) {
             try {
               const inv = adoptBits.inspectApp(adoptDir);
               adoptBits.writeInventory(adoptDir, inv, { companions: "if-missing" });
@@ -185350,11 +185899,11 @@ ${doNow.map((l2) => `  ${l2}`).join("\n")}`);
                 return 2;
               }
             }
-            const appDir3 = resolve64(str10(flags.dir) ?? process.cwd());
-            const sourceDir = resolve64(str10(flags["source-dir"]) ?? appDir3);
+            const appDir3 = resolve65(str10(flags.dir) ?? process.cwd());
+            const sourceDir = resolve65(str10(flags["source-dir"]) ?? appDir3);
             let meta;
             try {
-              meta = JSON.parse(readFileSync103(join87(sourceDir, TEMPLATE_META_FILE), "utf8"));
+              meta = JSON.parse(readFileSync104(join88(sourceDir, TEMPLATE_META_FILE), "utf8"));
             } catch {
               io2.error(JSON.stringify({ error: `no ${TEMPLATE_META_FILE} in ${sourceDir} \u2014 a template must declare { title, description, tags } to be published`, hint: `add ${TEMPLATE_META_FILE} next to himalaya.content.json (or pass --source-dir <dir>)` }));
               return 2;
@@ -185364,7 +185913,7 @@ ${doNow.map((l2) => `  ${l2}`).join("\n")}`);
               return 2;
             }
             try {
-              const appearance = extractTemplateAppearance(JSON.parse(readFileSync103(join87(sourceDir, "tokens.json"), "utf8")));
+              const appearance = extractTemplateAppearance(JSON.parse(readFileSync104(join88(sourceDir, "tokens.json"), "utf8")));
               meta = { ...appearance, ...meta };
             } catch {
             }
@@ -185386,14 +185935,14 @@ ${doNow.map((l2) => `  ${l2}`).join("\n")}`);
             const force = flags.force === true;
             const { buildContentForValidation: buildContentForValidation2, buildReleaseFromContent: buildReleaseFromContent2, bundleOutDir: bundleOutDir2 } = await loadAuthoring();
             const bres = await buildContentForValidation2(buildDir, { resolution: resolutionFlag(flags) });
-            const out2 = mkdtempSync6(join87(tmpdir7(), "himi-template-"));
+            const out2 = mkdtempSync6(join88(tmpdir7(), "himi-template-"));
             publishScratch.push(out2);
             const hasWorkers = bres.built.length > 0 || bres.compileErrors.length > 0;
             const outcome = await buildReleaseFromContent2(buildDir, out2, {
               ...hasWorkers ? { tier5Dir: bundleOutDir2(buildDir) } : {},
               collect: { lint: true, strict }
             });
-            const scaffoldSourceFindings = resolve64(sourceDir) === resolve64(appDir3) ? [] : [
+            const scaffoldSourceFindings = resolve65(sourceDir) === resolve65(appDir3) ? [] : [
               ...(await Promise.resolve().then(() => (init_capabilities(), capabilities_exports))).capabilityConfigFindings(sourceDir, buildDir),
               ...tokenColorIssues(sourceDir),
               ...surfaceIssues(sourceDir, void 0, strict),
@@ -185410,6 +185959,7 @@ ${doNow.map((l2) => `  ${l2}`).join("\n")}`);
             const { report: report3, hasErrors } = summarizeLint(app, bres, outcome, strict, [
               ...capabilityIssues2(outcome.capabilityUsage, contentShell2(buildDir, str10(flags.shell)), strict, readLastDist2(buildDir)),
               ...await cmsIssues(buildDir, app, strict, { local: true }),
+              ...await (await Promise.resolve().then(() => (init_base44_lint(), base44_lint_exports))).base44Issues(buildDir, app, strict, { local: true }),
               ...surfaceIssues(buildDir, outcome.surfaceNav, strict),
               ...tokenColorIssues(buildDir),
               ...await fontIssues(buildDir, strict),
@@ -185443,11 +185993,11 @@ ${doNow.map((l2) => `  ${l2}`).join("\n")}`);
               }));
               return 1;
             }
-            const iconPath = str10(flags.icon) ? resolve64(str10(flags.icon)) : templateIconPath(name);
+            const iconPath = str10(flags.icon) ? resolve65(str10(flags.icon)) : templateIconPath(name);
             let iconHash;
             if (iconPath) {
               try {
-                const bytes2 = readFileSync103(iconPath);
+                const bytes2 = readFileSync104(iconPath);
                 payload.icon = bytes2.toString("base64");
                 iconHash = createHash45("sha256").update(bytes2).digest("hex");
               } catch {
@@ -185706,6 +186256,7 @@ ${doNow.map((l2) => `  ${l2}`).join("\n")}`);
         const { report: report3, hasErrors } = summarizeLint(app, bres, outcome, strict, [
           ...capabilityIssues2(outcome.capabilityUsage, contentShell2(dir, str10(flags.shell)), strict, readLastDist2(dir)),
           ...await cmsIssues(dir, app, strict, { local: true }),
+          ...await (await Promise.resolve().then(() => (init_base44_lint(), base44_lint_exports))).base44Issues(dir, app, strict, { local: true }),
           ...surfaceIssues(dir, outcome.surfaceNav, strict),
           ...tokenColorIssues(dir),
           ...await iconIssues(dir, strict),
@@ -185751,7 +186302,7 @@ ${doNow.map((l2) => `  ${l2}`).join("\n")}`);
           const path2 = dpxSessionTokenPath();
           let raw;
           try {
-            raw = readFileSync103(path2, "utf8");
+            raw = readFileSync104(path2, "utf8");
           } catch {
             throw new Error(`no DPX BO session at ${path2}; run dpx auth login, write dpx auth token to that path, then himi login --dpx --target bo`);
           }
@@ -185882,11 +186433,11 @@ ${doNow.map((l2) => `  ${l2}`).join("\n")}`);
             return 1;
           }
           const { himiPluginFiles: himiPluginFiles2 } = await Promise.resolve().then(() => (init_claude_plugin(), claude_plugin_exports));
-          const dir = resolve64(out2);
+          const dir = resolve65(out2);
           const files = himiPluginFiles2(skills.skillMd);
           for (const f2 of files) {
-            mkdirSync42(dirname49(join87(dir, f2.path)), { recursive: true });
-            writeFileSync39(join87(dir, f2.path), f2.text);
+            mkdirSync42(dirname49(join88(dir, f2.path)), { recursive: true });
+            writeFileSync40(join88(dir, f2.path), f2.text);
           }
           print({ ok: true, dir, files: files.map((f2) => f2.path), next: [`claude plugin validate ${dir}`, `claude --plugin-dir ${dir}`] });
           return 0;
@@ -185896,23 +186447,23 @@ ${doNow.map((l2) => `  ${l2}`).join("\n")}`);
           run,
           version: cliVersion(),
           withFiles: flags["with-files"] === true,
-          ...process.env.HIMI_WORKSPACE ? { workspace: resolve64(process.env.HIMI_WORKSPACE) } : {}
+          ...process.env.HIMI_WORKSPACE ? { workspace: resolve65(process.env.HIMI_WORKSPACE) } : {}
         });
         return 0;
       }
       case "studio": {
         const { openStudio: openStudio2 } = await Promise.resolve().then(() => (init_studio(), studio_exports));
         const dir = contentDir(flags);
-        if (!existsSync82(join87(dir, "himalaya.content.json"))) {
+        if (!existsSync83(join88(dir, "himalaya.content.json"))) {
           io2.error(JSON.stringify({ ok: false, error: "not_a_content_package", dir, hint: "run from the app directory (or pass --content <dir>) \u2014 the board reads that package's .himi/" }));
           return 2;
         }
         if (pos[1] === "reel") {
           const { buildReel: buildReel2 } = await Promise.resolve().then(() => (init_studio_reel(), studio_reel_exports));
-          const out2 = resolve64(str10(flags.out) ?? join87(dir, ".himi", "making-of.html"));
+          const out2 = resolve65(str10(flags.out) ?? join88(dir, ".himi", "making-of.html"));
           const { html, plan } = buildReel2(dir);
           mkdirSync42(dirname49(out2), { recursive: true });
-          writeFileSync39(out2, html);
+          writeFileSync40(out2, html);
           const { pathToFileURL: pathToFileURL9 } = await import("node:url");
           const url2 = pathToFileURL9(out2).href;
           const open2 = flags["no-open"] !== true;
@@ -185981,7 +186532,7 @@ ${handover.hint[0].toUpperCase()}${handover.hint.slice(1)}.`);
         } = await Promise.resolve().then(() => (init_progress(), progress_exports));
         const dir = contentDir(flags);
         const journal2 = journalPath2(dir);
-        const isContentPackage = existsSync82(join87(dir, "himalaya.content.json"));
+        const isContentPackage = existsSync83(join88(dir, "himalaya.content.json"));
         const hint = isContentPackage ? {} : { hint: "no himalaya.content.json here \u2014 run from the app directory (or pass --content <dir>) so the build board finds this journal" };
         const message = pos.slice(1).join(" ").trim();
         const approvalFlags = ["approve", "done", "drop"].filter((f2) => flags[f2] !== void 0);
@@ -186133,7 +186684,7 @@ ${handover.hint[0].toUpperCase()}${handover.hint.slice(1)}.`);
       case "test": {
         const dir = contentDir(flags);
         const structuredOutput = flags.json === true || io2.isTTY !== true;
-        if (existsSync82(join87(dir, "functions"))) {
+        if (existsSync83(join88(dir, "functions"))) {
           const { invokeLocalFunction: invokeLocalFunction2, loadFunctionsApp: loadFunctionsApp2 } = await Promise.resolve().then(() => (init_functions(), functions_exports));
           const loaded = await loadFunctionsApp2(dir);
           const results = [];
@@ -186226,7 +186777,7 @@ ${handover.hint[0].toUpperCase()}${handover.hint.slice(1)}.`);
           ...hasWorkers ? { tier5Dir: bundleOutDir2(dir) } : {},
           collect: { lint: true, descriptors: true }
         });
-        const { report: lintReport } = summarizeLint(app, bres, outcome, false, await cmsIssues(dir, app, false, { local: true }));
+        const { report: lintReport } = summarizeLint(app, bres, outcome, false, [...await cmsIssues(dir, app, false, { local: true }), ...await (await Promise.resolve().then(() => (init_base44_lint(), base44_lint_exports))).base44Issues(dir, app, false, { local: true })]);
         if (bres.compileErrors.length || outcome.failedToBuild.length || outcome.missingBundles.length) {
           print({ ...lintReport, ok: false, stage: "build", hint: "`himi test` needs something that builds \u2014 fix these, then re-run (same findings as `himi validate`)" });
           return 1;
@@ -186265,7 +186816,7 @@ ${handover.hint[0].toUpperCase()}${handover.hint.slice(1)}.`);
             io2.error(JSON.stringify({ error: `screen "${screen.screenId}" has no Tier-5 worker, so there is nothing for the browser loop to build` }));
             return 2;
           }
-          const sources = collectWorkerSources2(join87(dir, "tier5-src"), screen.bundleName);
+          const sources = collectWorkerSources2(join88(dir, "tier5-src"), screen.bundleName);
           if (!sources) {
             io2.error(JSON.stringify({ error: `no worker source found at tier5-src/${screen.bundleName} \u2014 the browser loop compiles SOURCE, not the built bundle` }));
             return 2;
@@ -186443,7 +186994,7 @@ ${handover.hint[0].toUpperCase()}${handover.hint.slice(1)}.`);
             const sp = await runShotsPass2({
               descriptors: scopeDescriptors2(outcome.descriptors ?? [], pos.slice(1), invalidScreens),
               tokens: outcome.tokens,
-              outDir: join87(dir, ".himi", "shots"),
+              outDir: join88(dir, ".himi", "shots"),
               width: 390,
               layers: { rules: shotRules, ...cmsSeed ? { cmsSeed } : {}, ...canned ? { canned: canned.byKey } : {} },
               ...budgetMs ? { budgetMs } : {},
@@ -186483,7 +187034,7 @@ ${handover.hint[0].toUpperCase()}${handover.hint.slice(1)}.`);
           releaseId: result.releaseId,
           releasePayload: release2,
           descriptors: attestedDescriptors,
-          screenshots: Object.fromEntries(writtenShots.filter((name) => crawledScreens.has(name.replace(/\.png$/, ""))).map((name) => [name.replace(/\.png$/, ""), join87(dir, ".himi", "shots", name)])),
+          screenshots: Object.fromEntries(writtenShots.filter((name) => crawledScreens.has(name.replace(/\.png$/, ""))).map((name) => [name.replace(/\.png$/, ""), join88(dir, ".himi", "shots", name)])),
           coverage: {
             screens: crawledScreens.size,
             actionsDispatched: result.actions.exercised,
@@ -186608,7 +187159,7 @@ ${[...afterRun.next, ...testReminder ? [testReminder] : []].join("\n")}`);
             return 2;
           }
           try {
-            const raw = stateArg.trim().startsWith("{") ? stateArg : readFileSync103(stateArg.replace(/^@/, ""), "utf8");
+            const raw = stateArg.trim().startsWith("{") ? stateArg : readFileSync104(stateArg.replace(/^@/, ""), "utf8");
             injectedState = JSON.parse(raw);
           } catch (e2) {
             io2.error(JSON.stringify({ error: `--state must be inline JSON or a path to a .json file \u2014 ${e2.message}` }));
@@ -186623,7 +187174,7 @@ ${[...afterRun.next, ...testReminder ? [testReminder] : []].join("\n")}`);
             return 2;
           }
           try {
-            const raw = inputArg.trim().startsWith("{") ? inputArg : readFileSync103(inputArg.replace(/^@/, ""), "utf8");
+            const raw = inputArg.trim().startsWith("{") ? inputArg : readFileSync104(inputArg.replace(/^@/, ""), "utf8");
             const parsed = JSON.parse(raw);
             if (!parsed || typeof parsed !== "object" || Array.isArray(parsed)) throw new Error("must be a JSON object");
             injectedInput = parsed;
@@ -186706,11 +187257,11 @@ ${[...afterRun.next, ...testReminder ? [testReminder] : []].join("\n")}`);
         const diagnostics = (outcome.lint ?? []).find((s2) => s2.screenId === screenId)?.issues ?? [];
         let pngFile;
         let attestationPngFile;
-        const shotPath = join87(dir, ".himi", "shots", `${screenId}.png`);
+        const shotPath = join88(dir, ".himi", "shots", `${screenId}.png`);
         const pngTarget = typeof flags.png === "string" ? str10(flags.png) : flags.png === true ? shotPath : void 0;
         if (pngTarget && r2.pngBase64) {
           pngFile = writePngFile(pngTarget, r2.pngBase64);
-          attestationPngFile = resolve64(pngTarget) === resolve64(shotPath) ? pngFile : writePngFile(shotPath, r2.pngBase64);
+          attestationPngFile = resolve65(pngTarget) === resolve65(shotPath) ? pngFile : writePngFile(shotPath, r2.pngBase64);
         }
         if (renderWidth !== void 0 && r2.renderable) {
           recordRenderWidth(dir, {
@@ -187057,7 +187608,7 @@ default (no --glyph): ${DEFAULT_GLYPH2} \u2014 a mark that claims nothing, so th
           return 2;
         }
         const renamed = str10(flags.name);
-        const dest = resolve64(str10(flags.out) ?? process.cwd(), renamed ?? wanted);
+        const dest = resolve65(str10(flags.out) ?? process.cwd(), renamed ?? wanted);
         const replace = flags.replace === true;
         const force = replace || flags.force === true;
         const linked = symlinkDestinationIssue(dest);
@@ -187065,7 +187616,7 @@ default (no --glyph): ${DEFAULT_GLYPH2} \u2014 a mark that claims nothing, so th
           io2.error(JSON.stringify(linked));
           return 1;
         }
-        if (existsSync82(dest)) {
+        if (existsSync83(dest)) {
           if (!statSync23(dest).isDirectory()) {
             io2.error(JSON.stringify({
               error: `${dest} exists and is not a directory`,
@@ -187078,7 +187629,7 @@ default (no --glyph): ${DEFAULT_GLYPH2} \u2014 a mark that claims nothing, so th
             io2.error(JSON.stringify({ error: `${dest} already exists and is not empty`, hint: "pass --force to write into it anyway (merging, and naming what it keeps), --replace to restore exactly what was archived, or --out/--name to land somewhere else" }));
             return 1;
           }
-          if (replace && occupied && !existsSync82(join87(dest, "himalaya.content.json"))) {
+          if (replace && occupied && !existsSync83(join88(dest, "himalaya.content.json"))) {
             io2.error(JSON.stringify({
               error: `${dest} is not a content package \u2014 refusing to --replace it`,
               hint: "--replace only clears a directory that holds himalaya.content.json. Check --out/--name, or pass --force to merge into it instead."
@@ -187230,6 +187781,7 @@ default (no --glyph): ${DEFAULT_GLYPH2} \u2014 a mark that claims nothing, so th
         const { report: report3, hasErrors } = summarizeLint(declared, bres, outcome, strict, [
           ...capabilityIssues2(outcome.capabilityUsage, contentShell2(dir, str10(flags.shell)), strict, readLastDist2(dir)),
           ...await cmsIssues(dir, declared, strict, { local: true }),
+          ...await (await Promise.resolve().then(() => (init_base44_lint(), base44_lint_exports))).base44Issues(dir, declared, strict, { local: true }),
           ...surfaceIssues(dir, outcome.surfaceNav, strict),
           ...tokenColorIssues(dir),
           ...await iconIssues(dir, strict),
@@ -187741,7 +188293,7 @@ default (no --glyph): ${DEFAULT_GLYPH2} \u2014 a mark that claims nothing, so th
             return 2;
           }
           try {
-            const res = writePack(resolve64(releaseDir), only, resolve64(str10(flags.out) ?? process.cwd()));
+            const res = writePack(resolve65(releaseDir), only, resolve65(str10(flags.out) ?? process.cwd()));
             print({
               ok: true,
               app: res.app,
@@ -187790,7 +188342,7 @@ default (no --glyph): ${DEFAULT_GLYPH2} \u2014 a mark that claims nothing, so th
         }
         const { buildContentForValidation: buildContentForValidation2, buildReleaseFromContent: buildReleaseFromContent2, bundleOutDir: bundleOutDir2 } = await loadAuthoring();
         const bres = await buildContentForValidation2(dir, { resolution: resolutionFlag(flags) });
-        const built = mkdtempSync6(join87(tmpdir7(), "himi-pack-"));
+        const built = mkdtempSync6(join88(tmpdir7(), "himi-pack-"));
         const hasWorkers = bres.built.length > 0 || bres.compileErrors.length > 0;
         const outcome = await buildReleaseFromContent2(dir, built, {
           ...hasWorkers ? { tier5Dir: bundleOutDir2(dir) } : {},
@@ -187801,6 +188353,7 @@ default (no --glyph): ${DEFAULT_GLYPH2} \u2014 a mark that claims nothing, so th
         const { report: report3, hasErrors } = summarizeLint(app, bres, outcome, strict, [
           ...capabilityIssues2(outcome.capabilityUsage, contentShell2(dir, str10(flags.shell)), strict, readLastDist2(dir)),
           ...await cmsIssues(dir, app, strict, { local: true }),
+          ...await (await Promise.resolve().then(() => (init_base44_lint(), base44_lint_exports))).base44Issues(dir, app, strict, { local: true }),
           ...surfaceIssues(dir, outcome.surfaceNav, strict),
           ...tokenColorIssues(dir),
           ...await iconIssues(dir, strict),
@@ -187819,7 +188372,7 @@ default (no --glyph): ${DEFAULT_GLYPH2} \u2014 a mark that claims nothing, so th
           return 1;
         }
         try {
-          const res = writePack(built, app, resolve64(str10(flags.out) ?? dir), sourceArchive);
+          const res = writePack(built, app, resolve65(str10(flags.out) ?? dir), sourceArchive);
           print({
             ok: true,
             app: res.app,
@@ -187864,7 +188417,7 @@ default (no --glyph): ${DEFAULT_GLYPH2} \u2014 a mark that claims nothing, so th
         const { HIMI_PACKAGE_SOURCE_PATH: HIMI_PACKAGE_SOURCE_PATH2, isSafeAppId: isSafeAppId2, packageContents: packageContents2 } = await Promise.resolve().then(() => (init_himi_package(), himi_package_exports));
         let opened;
         try {
-          opened = openPackageFile2(resolve64(file2));
+          opened = openPackageFile2(resolve65(file2));
         } catch (e2) {
           io2.error(JSON.stringify({ error: e2.message }));
           return 1;
@@ -187877,7 +188430,7 @@ default (no --glyph): ${DEFAULT_GLYPH2} \u2014 a mark that claims nothing, so th
           io2.error(JSON.stringify({
             ok: false,
             error: "app_source_not_in_package",
-            detail: `${resolve64(file2)} is a release package: it carries built output (screens, bundles, tokens) and no source`,
+            detail: `${resolve65(file2)} is a release package: it carries built output (screens, bundles, tokens) and no source`,
             hint: "re-pack it from the content package with `himi pack --dev`, or restore from the serve plane with `himi pull <app>`"
           }));
           return 1;
@@ -187900,7 +188453,7 @@ default (no --glyph): ${DEFAULT_GLYPH2} \u2014 a mark that claims nothing, so th
             return 1;
           }
         }
-        const dest = resolve64(str10(flags.out) ?? process.cwd(), renamed ?? opened.header.app);
+        const dest = resolve65(str10(flags.out) ?? process.cwd(), renamed ?? opened.header.app);
         const issue2 = restoreDestinationIssue(dest, flags.force === true);
         if (issue2) {
           io2.error(JSON.stringify(issue2));
@@ -187987,7 +188540,7 @@ default (no --glyph): ${DEFAULT_GLYPH2} \u2014 a mark that claims nothing, so th
         }
         try {
           const { openPackageFile: openPackageFile2 } = await Promise.resolve().then(() => (init_pack(), pack_exports));
-          const opened = openPackageFile2(resolve64(file2));
+          const opened = openPackageFile2(resolve65(file2));
           if (!opened.validation.ok || !opened.header) {
             io2.error(JSON.stringify({ error: "refusing to share an invalid package", issues: opened.validation.errors }));
             return 1;
@@ -187997,12 +188550,12 @@ default (no --glyph): ${DEFAULT_GLYPH2} \u2014 a mark that claims nothing, so th
             io2.error(JSON.stringify({
               ok: false,
               error: "refusing to share a package that carries the app's source",
-              detail: `${resolve64(file2)} was packed with --dev, and a share link is public and unauthenticated \u2014 anyone with the URL could \`himi import\` your codebase`,
+              detail: `${resolve65(file2)} was packed with --dev, and a share link is public and unauthenticated \u2014 anyone with the URL could \`himi import\` your codebase`,
               hint: "share a release package instead (`himi pack` with no --dev), or hand the dev package over directly"
             }));
             return 1;
           }
-          const archive = readFileSync103(resolve64(file2));
+          const archive = readFileSync104(resolve65(file2));
           const result = await client2().createPackageShare({
             app: opened.header.app,
             releaseId: opened.header.releaseId,
@@ -188099,11 +188652,11 @@ default (no --glyph): ${DEFAULT_GLYPH2} \u2014 a mark that claims nothing, so th
             const app = await appId(dir2);
             const { buildContentBundles: buildContentBundles2, buildReleaseFromContent: buildReleaseFromContent2, bundleOutDir: bundleOutDir2 } = await loadAuthoring();
             const bres = await buildContentBundles2(dir2, { resolution: resolutionFlag(flags) });
-            temp = mkdtempSync6(join87(tmpdir7(), "himi-run-build-"));
+            temp = mkdtempSync6(join88(tmpdir7(), "himi-run-build-"));
             const hasWorkers = bres.built.length > 0 || bres.compileErrors.length > 0;
             const initial = await buildReleaseFromContent2(dir2, temp, { ...hasWorkers ? { tier5Dir: bundleOutDir2(dir2) } : {} });
             servedMissing = initial.missingBundles;
-            source = join87(temp, app);
+            source = join88(temp, app);
           }
           const chromeArg = str10(flags.chrome) ?? "preview";
           if (chromeArg !== "preview" && chromeArg !== "app") {
@@ -188142,7 +188695,7 @@ default (no --glyph): ${DEFAULT_GLYPH2} \u2014 a mark that claims nothing, so th
             if (!recordKit) return;
             startedAt = (/* @__PURE__ */ new Date()).toISOString();
             const failure = record2(served2, { ok: true, at: startedAt });
-            if (!recorded) io2.error(JSON.stringify({ run: "run_record_skipped", message: `${failure ?? `${join87(dir, ".himi")} is not a real directory`}, so the build board will not frame this preview.` }));
+            if (!recorded) io2.error(JSON.stringify({ run: "run_record_skipped", message: `${failure ?? `${join88(dir, ".himi")} is not a real directory`}, so the build board will not frame this preview.` }));
             await refreshBoard();
           };
           const retract = async () => {
@@ -188165,9 +188718,9 @@ default (no --glyph): ${DEFAULT_GLYPH2} \u2014 a mark that claims nothing, so th
             });
             await announce(run2);
             print({ ok: true, app: run2.app, url: run2.url, port: run2.port, plane: "browser" });
-            await new Promise((resolve65) => {
+            await new Promise((resolve66) => {
               const stop = () => {
-                void retract().catch((e2) => io2.error(JSON.stringify({ run: "stop_cleanup_failed", message: e2.message }))).finally(() => run2.close().finally(() => resolve65()));
+                void retract().catch((e2) => io2.error(JSON.stringify({ run: "stop_cleanup_failed", message: e2.message }))).finally(() => run2.close().finally(() => resolve66()));
               };
               dropEarlySignals?.();
               process.once("SIGINT", stop);
@@ -188178,7 +188731,7 @@ default (no --glyph): ${DEFAULT_GLYPH2} \u2014 a mark that claims nothing, so th
           const watchKit = watch2 ? await Promise.resolve().then(() => (init_run_watch(), run_watch_exports)) : null;
           const hhpPreviewRoute = watch2 ? (await Promise.resolve().then(() => (init_hhp_preview(), hhp_preview_exports))).hhpPreviewResponse : null;
           const bus = watchKit ? new watchKit.ReloadBus() : void 0;
-          if (watch2) served = mkdtempSync6(join87(tmpdir7(), "himi-run-served-"));
+          if (watch2) served = mkdtempSync6(join88(tmpdir7(), "himi-run-served-"));
           const running = await runPackage2(source, {
             port,
             chrome: chromeArg,
@@ -188207,8 +188760,8 @@ default (no --glyph): ${DEFAULT_GLYPH2} \u2014 a mark that claims nothing, so th
             await announce(running);
             if (watchKit && bus) {
               const { buildContentBundles: buildContentBundles2, buildReleaseFromContent: buildReleaseFromContent2, bundleOutDir: bundleOutDir2 } = await loadAuthoring();
-              const live3 = join87(running.releaseRoot, running.app);
-              const manifestOf = (tree) => JSON.parse(readFileSync103(join87(tree, "release-manifest.json"), "utf8"));
+              const live3 = join88(running.releaseRoot, running.app);
+              const manifestOf = (tree) => JSON.parse(readFileSync104(join88(tree, "release-manifest.json"), "utf8"));
               let current = manifestOf(live3);
               const failed3 = async (message) => {
                 if (stopping) return;
@@ -188219,7 +188772,7 @@ default (no --glyph): ${DEFAULT_GLYPH2} \u2014 a mark that claims nothing, so th
               };
               rebuild = watchKit.serialize(async () => {
                 const t0 = Date.now();
-                const next = mkdtempSync6(join87(tmpdir7(), "himi-run-build-"));
+                const next = mkdtempSync6(join88(tmpdir7(), "himi-run-build-"));
                 try {
                   const bres = await buildContentBundles2(dir, { resolution: resolutionFlag(flags) });
                   if (bres.compileErrors.length) {
@@ -188236,16 +188789,16 @@ default (no --glyph): ${DEFAULT_GLYPH2} \u2014 a mark that claims nothing, so th
                     return;
                   }
                   if (stopping) return;
-                  const fresh = manifestOf(join87(next, running.app));
+                  const fresh = manifestOf(join88(next, running.app));
                   const diff = watchKit.diffReleases(current, fresh);
                   const { describeChanges: describeChanges2, headline: headline2 } = await Promise.resolve().then(() => (init_build_changes(), build_changes_exports));
-                  const changes = describeChanges2(live3, join87(next, running.app), diff);
+                  const changes = describeChanges2(live3, join88(next, running.app), diff);
                   const retired = `${live3}.retired-${Date.now()}`;
                   renameSync13(live3, retired);
                   try {
-                    renameSync13(join87(next, running.app), live3);
+                    renameSync13(join88(next, running.app), live3);
                   } catch {
-                    cpSync3(join87(next, running.app), live3, { recursive: true });
+                    cpSync3(join88(next, running.app), live3, { recursive: true });
                   }
                   rmSync24(retired, { recursive: true, force: true });
                   current = fresh;
@@ -188872,7 +189425,7 @@ default (no --glyph): ${DEFAULT_GLYPH2} \u2014 a mark that claims nothing, so th
           io2.error(JSON.stringify({ error: `patch ${kind} needs --file`, usage: PATCH_USAGE }));
           return 2;
         }
-        if (!existsSync82(file2)) {
+        if (!existsSync83(file2)) {
           io2.error(JSON.stringify({ error: `no such file: ${file2}` }));
           return 2;
         }
@@ -188928,7 +189481,7 @@ default (no --glyph): ${DEFAULT_GLYPH2} \u2014 a mark that claims nothing, so th
           lintNote: "`himi patch` sends a raw file. Nothing here built or linted your app \u2014 `himi push --only <selector>` is the same edit with the full lint gate in front of it."
         };
         if (kind === "tokens" || kind === "app-config") {
-          const body = readFileSync103(file2, "utf8");
+          const body = readFileSync104(file2, "utf8");
           const patch2 = kind === "tokens" ? { tokens: body } : { appConfig: body };
           return runReleasePatch({
             ...common,
@@ -188943,7 +189496,7 @@ default (no --glyph): ${DEFAULT_GLYPH2} \u2014 a mark that claims nothing, so th
             io2.error(JSON.stringify({ error: "patch screen needs a <screenId>", usage: PATCH_USAGE }));
             return 2;
           }
-          const descriptor = readFileSync103(file2, "utf8");
+          const descriptor = readFileSync104(file2, "utf8");
           let parsed;
           try {
             parsed = JSON.parse(descriptor);
@@ -189000,7 +189553,7 @@ default (no --glyph): ${DEFAULT_GLYPH2} \u2014 a mark that claims nothing, so th
             extra: { kind, screen: id, file: { path: file2, bytes: Buffer.byteLength(descriptor, "utf8") } }
           });
         }
-        const bytes2 = readFileSync103(file2);
+        const bytes2 = readFileSync104(file2);
         const sha2 = createHash45("sha256").update(bytes2).digest("hex");
         const forScreens = (str10(flags["for-screen"]) ?? "").split(",").map((s2) => s2.trim()).filter(Boolean);
         if (flags["no-rebind"] !== void 0 && flags["no-rebind"] !== true) {
@@ -189144,7 +189697,7 @@ default (no --glyph): ${DEFAULT_GLYPH2} \u2014 a mark that claims nothing, so th
           }
           let def;
           try {
-            const parsed = JSON.parse(arg.startsWith("@") ? readFileSync103(arg.slice(1), "utf8") : arg);
+            const parsed = JSON.parse(arg.startsWith("@") ? readFileSync104(arg.slice(1), "utf8") : arg);
             if (parsed === null || typeof parsed !== "object" || Array.isArray(parsed)) {
               io2.error(JSON.stringify({ error: "invalid_definition", problems: [`--definition must be a JSON object, got ${Array.isArray(parsed) ? "an array" : parsed === null ? "null" : typeof parsed}`] }));
               return 2;
@@ -189426,7 +189979,7 @@ default (no --glyph): ${DEFAULT_GLYPH2} \u2014 a mark that claims nothing, so th
         const rememberLastDist = async (jobs2) => {
           try {
             const dir = contentDir(flags);
-            if (!existsSync82(join87(dir, "himalaya.content.json"))) return;
+            if (!existsSync83(join88(dir, "himalaya.content.json"))) return;
             const { lastDistFromJob: lastDistFromJob2, writeLastDist: writeLastDist2 } = await Promise.resolve().then(() => (init_capabilities(), capabilities_exports));
             const own5 = await appId(dir);
             for (const job of jobs2) {
@@ -189447,9 +190000,9 @@ default (no --glyph): ${DEFAULT_GLYPH2} \u2014 a mark that claims nothing, so th
           const app2 = typeof job.app === "string" ? job.app : void 0;
           const jobId = typeof job.jobId === "string" ? job.jobId : void 0;
           if (!player || !app2 || !jobId) return;
-          const render = (label2, payload, literal) => {
+          const render = (label3, payload, literal) => {
             io2.log(`
-${label2}`);
+${label3}`);
             try {
               const qr2 = qrTerminal(payload);
               if (qr2.cols <= 50) io2.log(qr2.text);
@@ -189666,7 +190219,7 @@ ${label2}`);
         const platform = str10(flags.platform)?.split(",").map((p2) => p2.trim()).filter(Boolean);
         {
           const distDir = contentDir(flags);
-          if (existsSync82(join87(distDir, "himalaya.content.json"))) {
+          if (existsSync83(join88(distDir, "himalaya.content.json"))) {
             const issues = await iconIssues(distDir, flags.strict === true, { requireDeclared: true, requireVerified: true });
             const errors = issues.filter((i2) => i2.severity === "error");
             for (const i2 of issues.filter((i3) => i3.severity === "warning")) {
@@ -190006,7 +190559,7 @@ ${label2}`);
           const dpxPath = dpxSessionTokenPath();
           let dpx;
           try {
-            dpx = readFileSync103(dpxPath, "utf8").trim();
+            dpx = readFileSync104(dpxPath, "utf8").trim();
           } catch {
             io2.error(JSON.stringify({ error: `no dpx session at ${dpxPath} \u2014 run \`dpx auth login\` then \`dpx auth token > ${dpxPath}\` (dpx 2.x keeps its own state in ~/.dpx/auth.json and does NOT write the legacy session file), or omit --dpx` }));
             return 1;
@@ -190469,7 +191022,7 @@ ${report3.ok ? "OK \u2014 data + serve plane reachable." : typeof report3.hint =
           const path2 = dpxSessionTokenPath();
           let raw;
           try {
-            raw = readFileSync103(path2, "utf8");
+            raw = readFileSync104(path2, "utf8");
           } catch {
             io2.error(JSON.stringify({ error: `no DPX BO session at ${path2}` }));
             return 1;
@@ -190663,7 +191216,79 @@ ${report3.ok ? "OK \u2014 data + serve plane reachable." : typeof report3.hint =
           }
         }
         const sub = pos[1];
-        const b44Usage = "himi base44 analyze (--url <https://\u2026> | --app-id <id>) [--out .himi/base44-book] [--sample <n>] [--json]  |  himi base44 login [--from-base44-cli]  |  himi base44 whoami  |  himi base44 logout";
+        const b44Usage = "himi base44 analyze (--url <https://\u2026> | --app-id <id>) [--out .himi/base44-book] [--sample <n>] [--json]  |  himi base44 adopt [--book .himi/base44-book] [--entities A,B] [--write [path]] [--json]  |  himi base44 entities query [--content <dir>] [--all] [--json]  |  himi base44 login [--from-base44-cli]  |  himi base44 whoami  |  himi base44 logout";
+        if (sub === "adopt") {
+          const { runBase44Adopt: runBase44Adopt2, AdoptError: AdoptError2 } = await Promise.resolve().then(() => (init_base44_adopt(), base44_adopt_exports));
+          const dir = contentDir(flags);
+          const only = str10(flags.entities)?.split(",").map((n2) => n2.trim()).filter(Boolean);
+          try {
+            const write2 = flags.write === true ? true : str10(flags.write);
+            const r2 = runBase44Adopt2({ cwd: dir, app: await appId(dir), book: str10(flags.book), only, write: write2 });
+            const errors = r2.issues.filter((i2) => i2.severity === "error");
+            const lint = errors.length ? { ok: false, code: "adopt_lint_errors" } : { ok: true };
+            if (r2.written) print({ ...lint, written: r2.written, entities: r2.result.entities.length, functions: r2.result.functions.length, skipped: r2.result.skipped, issues: r2.issues });
+            else if (flags.json === true) print({ ...lint, ...r2.result, issues: r2.issues, module: r2.module });
+            else {
+              io2.log(r2.module);
+              if (errors.length || r2.result.skipped.length) io2.error(JSON.stringify({ ...lint, skipped: r2.result.skipped, ...errors.length ? { issues: errors } : {} }));
+            }
+            return errors.length === 0 ? 0 : 1;
+          } catch (e2) {
+            if (e2 instanceof AdoptError2) {
+              io2.error(JSON.stringify({ ok: false, code: e2.code, error: e2.message, ...e2.extra, ...e2.exit === 2 ? { usage: b44Usage } : {} }));
+              return e2.exit;
+            }
+            throw e2;
+          }
+        }
+        if (sub === "entities") {
+          if (pos[2] !== "query") {
+            io2.error(JSON.stringify({ ok: false, code: "unknown_subcommand", error: pos[2] ? `unknown base44 entities subcommand "${pos[2]}" \u2014 use query` : "base44 entities needs a subcommand: query", usage: b44Usage }));
+            return 2;
+          }
+          const dir = contentDir(flags);
+          const app = await appId(dir);
+          let base44;
+          try {
+            const { loadAppConfigModule: loadAppConfigModule2 } = await Promise.resolve().then(() => (init_app_config_loader(), app_config_loader_exports));
+            base44 = (await loadAppConfigModule2(dir))?.base44;
+          } catch (e2) {
+            const finding = (await Promise.resolve().then(() => (init_base44_lint(), base44_lint_exports))).base44DefineAppFinding(e2);
+            if (finding) {
+              io2.error(JSON.stringify({ ok: false, code: "invalid_config", app, issues: [{ severity: "error", ...finding }], hint: '`himi validate` reports these with pass: "base44"' }));
+              return 1;
+            }
+            io2.error(JSON.stringify({ ok: false, code: "config_unloadable", app, error: e2.message, hint: "fix the config so it imports cleanly, then re-run. `himi validate` shows the underlying error." }));
+            return 1;
+          }
+          if (!base44 || typeof base44 !== "object") {
+            print({ ok: true, code: "no_base44_block", app, declared: 0, note: "no `base44` block in config.ts \u2014 nothing to query. `himi base44 adopt` writes declarations from a book. See `himi docs base44-entities`." });
+            return 0;
+          }
+          const { validateBase44Entities: validateBase44Entities2 } = await Promise.resolve().then(() => (init_base44_schema(), base44_schema_exports));
+          const errors = validateBase44Entities2(base44, app).filter((i2) => i2.severity === "error");
+          if (typeof base44.appId !== "string" || !base44.appId) errors.unshift({ severity: "error", ruleCode: "shape-invalid", message: "base44.appId is missing" });
+          if (errors.length) {
+            io2.error(JSON.stringify({ ok: false, code: "invalid_config", app, issues: errors, hint: '`himi validate` reports these with pass: "base44"' }));
+            return 1;
+          }
+          const auth2 = await (await Promise.resolve().then(() => (init_base44_auth(), base44_auth_exports))).usableBase44Auth();
+          if (!auth2) {
+            io2.error(JSON.stringify({ ok: false, code: "not_signed_in", app, error: "entities query needs a Base44 session: run `himi base44 login` (or set BASE44_ACCESS_TOKEN)" }));
+            return 2;
+          }
+          const { projectDownloader: projectDownloader2 } = await Promise.resolve().then(() => (init_cli(), cli_exports));
+          const { queryBase44Entities: queryBase44Entities2 } = await Promise.resolve().then(() => (init_base44_entities2(), base44_entities_exports));
+          const report3 = await queryBase44Entities2({
+            app,
+            appId: base44.appId,
+            base44,
+            all: flags.all === true,
+            ports: { apiFetch: fetch, apiBase: auth2.apiBase, token: auth2.token, downloadSource: projectDownloader2(fetch, auth2.apiBase, auth2.token) }
+          });
+          print(report3.sourceRead === "unavailable" ? { ...report3, code: "source_unavailable" } : report3);
+          return 0;
+        }
         const auth = await Promise.resolve().then(() => (init_base44_auth(), base44_auth_exports));
         if (sub === "whoami") {
           const w2 = auth.base44Whoami(auth.currentBase44Auth());