@wix/himalaya-cli 0.1432.0 → 0.1433.0

package/dist/cli.mjs

@@ -842,37 +842,37 @@ var init_file_store = __esm({
         mkdirSync2(this.appDir(app), { recursive: true });
         writeFileSync2(join2(this.appDir(app), "release-manifest.json"), JSON.stringify(manifest, null, 2));
       }
-      async putScreen(app, screenId, json7) {
+      async putScreen(app, screenId, json8) {
         const dir = join2(this.appDir(app), "screens");
         mkdirSync2(dir, { recursive: true });
-        writeFileSync2(join2(dir, `${this.safe(screenId)}.json`), json7);
+        writeFileSync2(join2(dir, `${this.safe(screenId)}.json`), json8);
       }
-      async putBundle(app, sha2566, bytes2) {
+      async putBundle(app, sha2567, bytes2) {
         const dir = join2(this.appDir(app), "bundles");
         mkdirSync2(dir, { recursive: true });
-        writeFileSync2(join2(dir, `${this.safe(sha2566)}.bundle.js`), bytes2);
+        writeFileSync2(join2(dir, `${this.safe(sha2567)}.bundle.js`), bytes2);
       }
-      async putTokens(app, json7) {
+      async putTokens(app, json8) {
         mkdirSync2(this.appDir(app), { recursive: true });
-        writeFileSync2(join2(this.appDir(app), "tokens.json"), json7);
+        writeFileSync2(join2(this.appDir(app), "tokens.json"), json8);
       }
-      async putDoc(app, sha2566, json7) {
+      async putDoc(app, sha2567, json8) {
         const dir = join2(this.appDir(app), "docs");
         mkdirSync2(dir, { recursive: true });
-        writeFileSync2(join2(dir, `${this.safe(sha2566)}.json`), json7);
+        writeFileSync2(join2(dir, `${this.safe(sha2567)}.json`), json8);
       }
-      async putAppConfig(app, json7) {
+      async putAppConfig(app, json8) {
         mkdirSync2(this.appDir(app), { recursive: true });
-        writeFileSync2(join2(this.appDir(app), "app-config.json"), json7);
+        writeFileSync2(join2(this.appDir(app), "app-config.json"), json8);
       }
       async putIcon(app, bytes2) {
         mkdirSync2(this.appDir(app), { recursive: true });
         writeFileSync2(join2(this.appDir(app), "icon.png"), bytes2);
       }
-      async putWidget(app, widgetId, json7) {
+      async putWidget(app, widgetId, json8) {
         const dir = join2(this.appDir(app), "widgets");
         mkdirSync2(dir, { recursive: true });
-        writeFileSync2(join2(dir, `${this.safe(widgetId)}.json`), json7);
+        writeFileSync2(join2(dir, `${this.safe(widgetId)}.json`), json8);
       }
       // Per-app settings (registry visibility) — release-independent, so it lives beside the
       // manifest, not inside it. NOTE: listApps() keys on release-manifest.json/ledger presence,
@@ -883,16 +883,16 @@ var init_file_store = __esm({
       }
       // Template scaffold source archive — a content-addressed JSON doc, so it rides the same
       // docs/ slot as putDoc (retention via retainedReleaseRefs.docs, which includes sourceHash).
-      async putSource(app, sha2566, json7) {
-        return this.putDoc(app, sha2566, json7);
+      async putSource(app, sha2567, json8) {
+        return this.putDoc(app, sha2567, json8);
       }
       // App-owned resources. Stored EXTENSIONLESS under assets/<sha> — the content-type lives
       // on the manifest record, so the bytes on disk carry no format assumption (unlike
       // bundles/<sha>.bundle.js, which bakes ".bundle.js" into the filename).
-      async putAsset(app, sha2566, bytes2) {
+      async putAsset(app, sha2567, bytes2) {
         const dir = join2(this.appDir(app), "assets");
         mkdirSync2(dir, { recursive: true });
-        writeFileSync2(join2(dir, this.safe(sha2566)), bytes2);
+        writeFileSync2(join2(dir, this.safe(sha2567)), bytes2);
       }
       async getManifest(app) {
         try {
@@ -911,8 +911,8 @@ var init_file_store = __esm({
       async getScreen(app, screenId) {
         return this.read(app, "screens", `${this.safe(screenId)}.json`);
       }
-      async getBundle(app, sha2566) {
-        return this.read(app, "bundles", `${this.safe(sha2566)}.bundle.js`);
+      async getBundle(app, sha2567) {
+        return this.read(app, "bundles", `${this.safe(sha2567)}.bundle.js`);
       }
       async getTokens(app) {
         return this.read(app, "tokens.json");
@@ -923,8 +923,8 @@ var init_file_store = __esm({
       async getIcon(app) {
         return this.read(app, "icon.png");
       }
-      async getDoc(app, sha2566) {
-        return this.read(app, "docs", `${this.safe(sha2566)}.json`);
+      async getDoc(app, sha2567) {
+        return this.read(app, "docs", `${this.safe(sha2567)}.json`);
       }
       async getWidget(app, widgetId) {
         return this.read(app, "widgets", `${this.safe(widgetId)}.json`);
@@ -938,11 +938,11 @@ var init_file_store = __esm({
           return null;
         }
       }
-      async getSource(app, sha2566) {
-        return this.getDoc(app, sha2566);
+      async getSource(app, sha2567) {
+        return this.getDoc(app, sha2567);
       }
-      async getAsset(app, sha2566) {
-        return this.read(app, "assets", this.safe(sha2566));
+      async getAsset(app, sha2567) {
+        return this.read(app, "assets", this.safe(sha2567));
       }
       async listApps() {
         try {
@@ -1010,11 +1010,11 @@ var init_file_store = __esm({
         writeFileSync2(join2(this.appDir(app), "_wip.json"), JSON.stringify(next, null, 2));
         return true;
       }
-      bundleUrl(_app, sha2566) {
-        return `/v1/bundles/${sha2566}.bundle.js`;
+      bundleUrl(_app, sha2567) {
+        return `/v1/bundles/${sha2567}.bundle.js`;
       }
-      assetUrl(_app, sha2566) {
-        return `/v1/asset/${sha2566}`;
+      assetUrl(_app, sha2567) {
+        return `/v1/asset/${sha2567}`;
       }
       async prune(app, keepReleaseIds) {
         const manifest = await this.getManifest(app);
@@ -3135,10 +3135,10 @@ function writeAttestation(input, opts = {}) {
   };
   const attestation = { ...unsigned, selfHash: "" };
   attestation.selfHash = selfHashFor(attestation);
-  const json7 = JSON.stringify(attestation, null, 2) + "\n";
+  const json8 = JSON.stringify(attestation, null, 2) + "\n";
   const runFile = `${runId.replace(/:/g, "-")}.json`;
-  writeFileSync5(join6(dir, runFile), json7);
-  writeFileSync5(join6(dir, "latest.json"), json7);
+  writeFileSync5(join6(dir, runFile), json8);
+  writeFileSync5(join6(dir, "latest.json"), json8);
   const keep = Math.max(1, opts.maxRuns ?? DEFAULT_MAX_RUNS);
   const allPriorRuns = readdirSync3(dir).filter((name) => name.endsWith(".json") && name !== "latest.json").filter((name) => name !== runFile).sort().reverse();
   const priorRuns = allPriorRuns.filter((name) => {
@@ -5893,10 +5893,10 @@ function decodeCatalogEnvelope(value) {
   const envelope = value;
   if (!envelope || envelope.encoding !== "gzip-base64" || typeof envelope.data !== "string" || typeof envelope.sha256 !== "string")
     throw new Error("Unsupported HHP catalog encoding; regenerate the catalog.");
-  const json7 = gunzipSync(Buffer.from(envelope.data, "base64"), { maxOutputLength: 2 * 1024 * 1024 }).toString("utf8");
-  if (createHash5("sha256").update(json7).digest("hex") !== envelope.sha256)
+  const json8 = gunzipSync(Buffer.from(envelope.data, "base64"), { maxOutputLength: 2 * 1024 * 1024 }).toString("utf8");
+  if (createHash5("sha256").update(json8).digest("hex") !== envelope.sha256)
     throw new Error("HHP catalog integrity check failed; regenerate the catalog.");
-  return JSON.parse(json7);
+  return JSON.parse(json8);
 }
 var init_catalog_envelope = __esm({
   "../html-to-t5/src/v2/catalog-envelope.ts"() {
@@ -10359,16 +10359,16 @@ function utf8Length(s2, cap) {
   }
   return n2;
 }
-function repairLoneSurrogateEscapes(json7) {
-  if (!json7.includes("\\u")) return json7;
+function repairLoneSurrogateEscapes(json8) {
+  if (!json8.includes("\\u")) return json8;
   const hexAt = (i2) => {
-    const h2 = json7.slice(i2, i2 + 4);
+    const h2 = json8.slice(i2, i2 + 4);
     return /^[0-9A-Fa-f]{4}$/.test(h2) ? parseInt(h2, 16) : -1;
   };
   let out2 = "";
   let inString = false;
-  for (let i2 = 0; i2 < json7.length; i2++) {
-    const c2 = json7[i2];
+  for (let i2 = 0; i2 < json8.length; i2++) {
+    const c2 = json8[i2];
     if (!inString) {
       if (c2 === '"') inString = true;
       out2 += c2;
@@ -10379,11 +10379,11 @@ function repairLoneSurrogateEscapes(json7) {
       out2 += c2;
       continue;
     }
-    if (c2 !== "\\" || i2 + 1 >= json7.length) {
+    if (c2 !== "\\" || i2 + 1 >= json8.length) {
       out2 += c2;
       continue;
     }
-    const e2 = json7[i2 + 1];
+    const e2 = json8[i2 + 1];
     const v2 = e2 === "u" ? hexAt(i2 + 2) : -1;
     if (v2 < 0) {
       out2 += c2 + e2;
@@ -10391,9 +10391,9 @@ function repairLoneSurrogateEscapes(json7) {
       continue;
     }
     if (v2 >= 55296 && v2 <= 56319) {
-      const low = json7[i2 + 6] === "\\" && json7[i2 + 7] === "u" ? hexAt(i2 + 8) : -1;
+      const low = json8[i2 + 6] === "\\" && json8[i2 + 7] === "u" ? hexAt(i2 + 8) : -1;
       if (low >= 56320 && low <= 57343) {
-        out2 += json7.slice(i2, i2 + 12);
+        out2 += json8.slice(i2, i2 + 12);
         i2 += 11;
         continue;
       }
@@ -10406,7 +10406,7 @@ function repairLoneSurrogateEscapes(json7) {
       i2 += 5;
       continue;
     }
-    out2 += json7.slice(i2, i2 + 6);
+    out2 += json8.slice(i2, i2 + 6);
     i2 += 5;
   }
   return out2;
@@ -10425,12 +10425,12 @@ function measure(nodes, limits) {
   }
   return count2 > limits.maxNodes ? "too_many_nodes" : null;
 }
-function layoutRichContent(json7, limits = RICH_CONTENT_LIMITS2) {
-  if (json7 === "") return { blocks: [] };
-  if (utf8Length(json7, limits.maxBytes) > limits.maxBytes) return { rejected: "too_large" };
+function layoutRichContent(json8, limits = RICH_CONTENT_LIMITS2) {
+  if (json8 === "") return { blocks: [] };
+  if (utf8Length(json8, limits.maxBytes) > limits.maxBytes) return { rejected: "too_large" };
   let parsed;
   try {
-    parsed = JSON.parse(repairLoneSurrogateEscapes(json7));
+    parsed = JSON.parse(repairLoneSurrogateEscapes(json8));
   } catch {
     return { rejected: "invalid_json" };
   }
@@ -11051,14 +11051,14 @@ function resolveActionEvaluator(explicit) {
 }
 function responseBytes(value) {
   try {
-    const json7 = JSON.stringify(value);
-    if (typeof json7 !== "string") return 0;
+    const json8 = JSON.stringify(value);
+    if (typeof json8 !== "string") return 0;
     const envelope = JSON.stringify({
       protocol: "himi.t5.frame/1",
       type: "bridge",
-      payload: { op: "wix_result", id: "k000000", ok: true, payload: json7 }
+      payload: { op: "wix_result", id: "k000000", ok: true, payload: json8 }
     });
-    return typeof envelope === "string" ? utf8Budget(envelope) : utf8Budget(json7);
+    return typeof envelope === "string" ? utf8Budget(envelope) : utf8Budget(json8);
   } catch {
     return 0;
   }
@@ -16474,8 +16474,8 @@ __export(quickjs_evaluator_exports, {
   uninstallQuickJsBootEvaluator: () => uninstallQuickJsBootEvaluator
 });
 function inputJson(input) {
-  const json7 = JSON.stringify(input ?? {});
-  return json7 === void 0 ? "{}" : json7;
+  const json8 = JSON.stringify(input ?? {});
+  return json8 === void 0 ? "{}" : json8;
 }
 function timerGlobals(hide, live3) {
   const hidden = new Set(hide ?? []);
@@ -19721,22 +19721,22 @@ import { fileURLToPath as fileURLToPath11 } from "node:url";
 function hasVendoredFloor() {
   return existsSync24(VENDORED_DIR);
 }
-function faceSource(file2, sha2566) {
+function faceSource(file2, sha2567) {
   const vendored = join24(VENDORED_DIR, basename8(file2));
-  if (existsSync24(vendored) && createHash9("sha256").update(readFileSync23(vendored)).digest("hex") === sha2566) {
+  if (existsSync24(vendored) && createHash9("sha256").update(readFileSync23(vendored)).digest("hex") === sha2567) {
     return vendored;
   }
-  const cached3 = join24(CACHE_DIR, sha2566);
+  const cached3 = join24(CACHE_DIR, sha2567);
   if (existsSync24(cached3)) return cached3;
   return null;
 }
 function upstreamFaceUrl(ref, dir, file2) {
   return `${RAW}/google/fonts/${ref}/${dir}/${encodeURIComponent(file2)}`;
 }
-function faceUpstream(sha2566, catalog3 = loadCatalog()) {
+function faceUpstream(sha2567, catalog3 = loadCatalog()) {
   for (const [name, fam] of Object.entries(catalog3.families)) {
     if (!fam.dir || !UPSTREAM_DIR.test(fam.dir)) continue;
-    const face = fam.faces.find((f2) => f2.sha256 === sha2566);
+    const face = fam.faces.find((f2) => f2.sha256 === sha2567);
     if (face) return { family: name, url: upstreamFaceUrl(catalog3.source.ref, fam.dir, face.file) };
   }
   return null;
@@ -19783,7 +19783,7 @@ async function ensureFaceBytes(face, opts = {}) {
   });
   return result;
 }
-async function fetchVerifyAndCache(url, sha2566, fetcher) {
+async function fetchVerifyAndCache(url, sha2567, fetcher) {
   let bytes2;
   try {
     bytes2 = Buffer.from(await fetcher(url));
@@ -19791,10 +19791,10 @@ async function fetchVerifyAndCache(url, sha2566, fetcher) {
     return { ok: false, reason: `fetching ${url} failed: ${err.message}` };
   }
   const got = sha256Hex3(bytes2);
-  if (got !== sha2566) {
+  if (got !== sha2567) {
     return {
       ok: false,
-      reason: `${url} returned bytes hashing to ${got.slice(0, 12)}\u2026, but the catalog pins ${sha2566.slice(0, 12)}\u2026 \u2014 refused`
+      reason: `${url} returned bytes hashing to ${got.slice(0, 12)}\u2026, but the catalog pins ${sha2567.slice(0, 12)}\u2026 \u2014 refused`
     };
   }
   try {
@@ -19836,10 +19836,10 @@ async function offRepoFontBytes(plan, opts = {}) {
   }
   return out2;
 }
-async function catalogFaceBytes(sha2566, opts = {}) {
+async function catalogFaceBytes(sha2567, opts = {}) {
   const catalog3 = opts.catalog ?? loadCatalog();
   for (const family of [...Object.values(catalog3.families), ...Object.values(catalog3.bundled)]) {
-    const face = family.faces.find((f2) => f2.sha256 === sha2566);
+    const face = family.faces.find((f2) => f2.sha256 === sha2567);
     if (!face) continue;
     if (hasVendoredFloor()) {
       const local = faceSource(face.file, face.sha256);
@@ -25408,14 +25408,14 @@ function isSymlink(file2) {
 function archiveBytes(dir, bytes2) {
   const ext = imageExtension(bytes2);
   if (!ext) return null;
-  const sha2566 = createHash12("sha256").update(bytes2).digest("hex");
-  const rel = join36(HISTORY_DIR, `${sha2566}.${ext}`);
+  const sha2567 = createHash12("sha256").update(bytes2).digest("hex");
+  const rel = join36(HISTORY_DIR, `${sha2567}.${ext}`);
   const dest = join36(dir, rel);
   if (!realDirIn(dir, HISTORY_DIR)) throw new UnsafeHimiDirError(HISTORY_DIR);
   if (!existsSync35(dest)) {
     writeFileAtomic(dest, bytes2);
   }
-  return { sha256: sha2566, ext, file: toPosix(rel) };
+  return { sha256: sha2567, ext, file: toPosix(rel) };
 }
 function appendProgress(dir, input) {
   const message = input.message.trim();
@@ -26241,15 +26241,15 @@ function himiPluginManifest() {
   };
 }
 function himiPluginFiles(skillMd) {
-  const json7 = (o2) => `${JSON.stringify(o2, null, 2)}
+  const json8 = (o2) => `${JSON.stringify(o2, null, 2)}
 `;
   return [
-    { path: ".claude-plugin/plugin.json", text: json7(himiPluginManifest()) },
-    { path: ".mcp.json", text: json7({ mcpServers: { [HIMI_PLUGIN_NAME]: { command: HIMI_MCP_SERVER.command, args: [...HIMI_MCP_SERVER.args] } } }) },
+    { path: ".claude-plugin/plugin.json", text: json8(himiPluginManifest()) },
+    { path: ".mcp.json", text: json8({ mcpServers: { [HIMI_PLUGIN_NAME]: { command: HIMI_MCP_SERVER.command, args: [...HIMI_MCP_SERVER.args] } } }) },
     { path: "skills/himalaya/SKILL.md", text: skillMd }
   ];
 }
-function himiMarketplace(archiveUrl, sha2566) {
+function himiMarketplace(archiveUrl, sha2567) {
   return {
     name: HIMI_MARKETPLACE_NAME,
     description: "Wix native app building for Claude Code",
@@ -26258,7 +26258,7 @@ function himiMarketplace(archiveUrl, sha2566) {
       {
         name: HIMI_PLUGIN_NAME,
         description: HIMI_PLUGIN_DESCRIPTION,
-        source: { source: "archive", url: archiveUrl, ...sha2566 ? { sha256: sha2566 } : {} }
+        source: { source: "archive", url: archiveUrl, ...sha2567 ? { sha256: sha2567 } : {} }
       }
     ]
   };
@@ -26273,19 +26273,19 @@ function connectorPluginManifest() {
   };
 }
 function connectorPluginFiles(mcpUrl, skillMd) {
-  const json7 = (o2) => `${JSON.stringify(o2, null, 2)}
+  const json8 = (o2) => `${JSON.stringify(o2, null, 2)}
 `;
   return [
-    { path: ".claude-plugin/plugin.json", text: json7(connectorPluginManifest()) },
-    { path: ".mcp.json", text: json7({ mcpServers: { [CONNECTOR_PLUGIN_NAME]: { type: "http", url: mcpUrl } } }) },
+    { path: ".claude-plugin/plugin.json", text: json8(connectorPluginManifest()) },
+    { path: ".mcp.json", text: json8({ mcpServers: { [CONNECTOR_PLUGIN_NAME]: { type: "http", url: mcpUrl } } }) },
     { path: `skills/${CONNECTOR_PLUGIN_NAME}/SKILL.md`, text: skillMd }
   ];
 }
-function connectorMarketplaceEntry(archiveUrl, sha2566) {
+function connectorMarketplaceEntry(archiveUrl, sha2567) {
   return {
     name: CONNECTOR_PLUGIN_NAME,
     description: CONNECTOR_PLUGIN_DESCRIPTION,
-    source: { source: "archive", url: archiveUrl, ...sha2566 ? { sha256: sha2566 } : {} }
+    source: { source: "archive", url: archiveUrl, ...sha2567 ? { sha256: sha2567 } : {} }
   };
 }
 function storeZip(files) {
@@ -27173,9 +27173,9 @@ function inferScreenDisplayName(screenId) {
   const words = (opaque ? id.slice(0, opaque.index) : id).replace(/([a-z0-9])([A-Z])/g, "$1 $2").split(/[_\/\s-]+/).filter(Boolean).map((word) => /^(cms|faq|api|ai|id|url)$/i.test(word) ? word.toUpperCase() : word.charAt(0).toUpperCase() + word.slice(1)).join(" ");
   return `${words || screenId}${opaque ? ` (${opaque[1]})` : ""}`;
 }
-function screenDisplayName(screenId, displayName2, title, navigationLabel) {
+function screenDisplayName(screenId, displayName3, title, navigationLabel) {
   const literal = (value) => typeof value === "string" && !!value.trim() && !value.trim().startsWith("$") && !/^__[A-Z0-9_]+__$/.test(value.trim());
-  if (literal(displayName2)) return displayName2.trim();
+  if (literal(displayName3)) return displayName3.trim();
   if (literal(title) && title.trim() !== screenId) return title.trim();
   if (literal(navigationLabel)) return navigationLabel.trim();
   return inferScreenDisplayName(screenId);
@@ -29010,9 +29010,9 @@ function addScreen(dir, id, entry, opts = {}) {
   if (content) {
     if (content.screens !== void 0) {
       const route = findRoute(reparsed, id);
-      const displayName2 = screenDisplayName(id, opts.displayName, route.block.title);
+      const displayName3 = screenDisplayName(id, opts.displayName, route.block.title);
       try {
-        const metadata2 = parseScreenMetadata({ ...parseScreenMetadata(content.screens), [id]: { displayName: displayName2 } });
+        const metadata2 = parseScreenMetadata({ ...parseScreenMetadata(content.screens), [id]: { displayName: displayName3 } });
         validateScreenMetadata(metadata2);
         content.screens = metadata2;
       } catch (error) {
@@ -29386,8 +29386,8 @@ function lastDistFromJob(job, now = /* @__PURE__ */ new Date()) {
   const capabilities = [...new Set(job.buildCapabilities.filter((x2) => typeof x2 === "string").map(catalogKey))].sort();
   return { app: job.app, jobId: job.jobId, shell: job.shell, capabilities, finishedAt: now.toISOString() };
 }
-function needsBinaryNotice(json7) {
-  const nb = json7?.needsBinary;
+function needsBinaryNotice(json8) {
+  const nb = json8?.needsBinary;
   if (!nb || !Array.isArray(nb.missing)) return null;
   const missing = nb.missing.filter((x2) => typeof x2 === "string");
   if (!missing.length) return null;
@@ -29729,12 +29729,12 @@ function updateSiteViewMetadata(existing, before, after) {
       const bounded2 = suffix2.length > 100 ? `${suffix2.slice(0, 99)})` : suffix2;
       return title.slice(0, 120 - bounded2.length).trimEnd() + bounded2;
     };
-    let displayName2 = fit2();
-    if (claimed.has(screenDisplayNameKey(displayName2))) displayName2 = fit2(` (${page.id})`);
+    let displayName3 = fit2();
+    if (claimed.has(screenDisplayNameKey(displayName3))) displayName3 = fit2(` (${page.id})`);
     let suffix = 2;
-    while (claimed.has(screenDisplayNameKey(displayName2))) displayName2 = fit2(` (${suffix++}, ${page.id})`);
-    updated[id] = { displayName: displayName2 };
-    claimed.add(screenDisplayNameKey(displayName2));
+    while (claimed.has(screenDisplayNameKey(displayName3))) displayName3 = fit2(` (${suffix++}, ${page.id})`);
+    updated[id] = { displayName: displayName3 };
+    claimed.add(screenDisplayNameKey(displayName3));
   }
   validateScreenMetadata(updated);
   return updated;
@@ -39399,10 +39399,10 @@ function createRicosHostSession(o2) {
     });
   };
   const writes = () => committed || state.dirty;
-  const moved = (json7) => {
-    if (json7 === lastContent) return false;
-    lastContent = json7;
-    if (json7 !== baseline) {
+  const moved = (json8) => {
+    if (json8 === lastContent) return false;
+    lastContent = json8;
+    if (json8 !== baseline) {
       state.dirty = true;
       if (dirtyTimer !== null) t2.clearTimeout(dirtyTimer);
       dirtyTimer = t2.setTimeout(() => {
@@ -39626,13 +39626,13 @@ async function runRicosImageUpload(o2) {
       return fail6("put");
     }
     if (!res.ok) return fail6("put");
-    let json7;
+    let json8;
     try {
-      json7 = await res.json();
+      json8 = await res.json();
     } catch {
       return fail6("bad_descriptor");
     }
-    const root = json7 && typeof json7 === "object" ? json7 : {};
+    const root = json8 && typeof json8 === "object" ? json8 : {};
     const d2 = root.file && typeof root.file === "object" ? root.file : root;
     const id = typeof d2.id === "string" ? d2.id : "";
     if (!id) return fail6("bad_descriptor");
@@ -39833,9 +39833,9 @@ function RichContentEditorView({ props, ctx, wrap, nodeId, renderChild, ...dom }
       locale: ctx.localeTag ?? "en",
       rtl: ctx.isRTL ?? document.documentElement.dir === "rtl",
       palette: { text: C2("textPrimary", "#13171E"), background: C2("surfacePrimary", "#FFFFFF"), accent: C2("accentPrimary", "#116DFF") },
-      onContent: (json7) => {
+      onContent: (json8) => {
         const b2 = bagRef.current, n2 = nameRef.current;
-        if (b2 && n2) b2.set(n2, json7);
+        if (b2 && n2) b2.set(n2, json8);
       },
       onToolbar: setToolbar,
       onFocusChange: setFocused,
@@ -40202,13 +40202,13 @@ async function runMediaFieldUpload(o2) {
       return { ok: false, reason: e2 instanceof Deadline || expired ? "timeout" : "put" };
     }
     if (!res.ok) return { ok: false, reason: "put" };
-    let json7;
+    let json8;
     try {
-      json7 = await bounded2(res.json());
+      json8 = await bounded2(res.json());
     } catch (e2) {
       return { ok: false, reason: e2 instanceof Deadline || expired ? "timeout" : "bad_descriptor" };
     }
-    const root = json7 && typeof json7 === "object" ? json7 : {};
+    const root = json8 && typeof json8 === "object" ? json8 : {};
     const d2 = root.file && typeof root.file === "object" ? root.file : root;
     const mediaId = typeof d2.id === "string" ? d2.id : "";
     if (!mediaId) return { ok: false, reason: "bad_descriptor" };
@@ -45273,7 +45273,7 @@ var init_pdf = __esm({
         var defineProperty = Object.defineProperty;
         var stringSlice = uncurryThis("".slice);
         var replace = uncurryThis("".replace);
-        var join91 = uncurryThis([].join);
+        var join92 = uncurryThis([].join);
         var CONFIGURABLE_LENGTH = DESCRIPTORS && !fails(function() {
           return defineProperty(function() {
           }, "length", { value: 8 }).length !== 8;
@@ -45300,7 +45300,7 @@ var init_pdf = __esm({
           }
           var state = enforceInternalState(value);
           if (!hasOwn(state, "source")) {
-            state.source = join91(TEMPLATE, typeof name == "string" ? name : "");
+            state.source = join92(TEMPLATE, typeof name == "string" ? name : "");
           }
           return value;
         };
@@ -47327,7 +47327,7 @@ var init_pdf = __esm({
             var currentOrdered;
             var marked = false;
             var root = true;
-            var json7 = stringifyWithProperSymbolsConversion(text9, function(key3, value) {
+            var json8 = stringifyWithProperSymbolsConversion(text9, function(key3, value) {
               key3 = $String(key3);
               if (propertyList) {
                 if (key3 === END_MARK) {
@@ -47354,16 +47354,16 @@ var init_pdf = __esm({
               }
               return value;
             }, space);
-            if (typeof json7 != "string") return json7;
-            if (ILL_FORMED_UNICODE) json7 = replace(json7, surrogates, fixIllFormedJSON);
-            if (!marked) return json7;
+            if (typeof json8 != "string") return json8;
+            if (ILL_FORMED_UNICODE) json8 = replace(json8, surrogates, fixIllFormedJSON);
+            if (!marked) return json8;
             var result = "";
-            var length = json7.length;
+            var length = json8.length;
             for (var i2 = 0; i2 < length; i2++) {
-              var chr = charAt(json7, i2);
+              var chr = charAt(json8, i2);
               if (chr === '"') {
-                var end = parseJSONString(json7, ++i2).end - 1;
-                var string5 = slice(json7, i2, end);
+                var end = parseJSONString(json8, ++i2).end - 1;
+                var string5 = slice(json8, i2, end);
                 if (slice(string5, 0, RAW_MARK_LENGTH) === RAW_MARK) result += rawStrings[slice(string5, RAW_MARK_LENGTH)];
                 else if (slice(string5, 0, KEY_MARK_LENGTH) === KEY_MARK) result += '"' + slice(string5, KEY_MARK_LENGTH) + '"';
                 else result += '"' + string5 + '"';
@@ -47823,7 +47823,7 @@ var init_pdf = __esm({
         var charAt = uncurryThis("".charAt);
         var Uint8Array2 = globalThis2.Uint8Array;
         var $Array = globalThis2.Array;
-        var join91 = uncurryThis([].join);
+        var join92 = uncurryThis([].join);
         var INCORRECT_BEHAVIOR_OR_DOESNT_EXISTS = !Uint8Array2 || !Uint8Array2.prototype.toBase64 || !(function() {
           try {
             var target = new Uint8Array2();
@@ -47869,7 +47869,7 @@ var init_pdf = __esm({
                 result[written++] = "=";
               }
             }
-            return join91(result, "");
+            return join92(result, "");
           }
         });
       },
@@ -47881,7 +47881,7 @@ var init_pdf = __esm({
         var anUint8Array = __webpack_require__3(4154);
         var notDetached = __webpack_require__3(5169);
         var numberToString2 = uncurryThis(1.1.toString);
-        var join91 = uncurryThis([].join);
+        var join92 = uncurryThis([].join);
         var $Array = Array;
         var Uint8Array2 = globalThis2.Uint8Array;
         var INCORRECT_BEHAVIOR_OR_DOESNT_EXISTS = !Uint8Array2 || !Uint8Array2.prototype.toHex || !(function() {
@@ -47901,7 +47901,7 @@ var init_pdf = __esm({
               var hex2 = numberToString2(this[i2], 16);
               result[i2] = hex2.length === 1 ? "0" + hex2 : hex2;
             }
-            return join91(result, "");
+            return join92(result, "");
           }
         });
       },
@@ -124985,9 +124985,9 @@ function renderInner(node, ctx) {
   }
   const transitionKey = typeof modifiers?.transitionId === "string" ? resolvedComponentId(modifiers.transitionId, ctx) : void 0;
   if (transitionKey && !ctx.reduceMotion()) {
-    let ident = transitionKey.replace(/[^a-zA-Z0-9_-]/g, "-");
-    if (/^[0-9-]/.test(ident)) ident = `h-${ident}`;
-    wrap.viewTransitionName = ident;
+    let ident2 = transitionKey.replace(/[^a-zA-Z0-9_-]/g, "-");
+    if (/^[0-9-]/.test(ident2)) ident2 = `h-${ident2}`;
+    wrap.viewTransitionName = ident2;
   }
   if (modifiers?.revealOnScroll && tr2 && !ctx.reduceMotion()) {
     const spec = enterAnimSpec(tr2, modifiers?.motion ?? ctx.kit?.motion, ctx);
@@ -139729,10 +139729,10 @@ async function bakeWidgets(fetchPath, putWidget, ownBundles) {
       }
       continue;
     }
-    const json7 = JSON.stringify(snap);
-    await putWidget(widgetId, json7);
+    const json8 = JSON.stringify(snap);
+    await putWidget(widgetId, json8);
     widgets[widgetId] = {
-      contentEtag: snap.contentEtag ?? sha2564(json7),
+      contentEtag: snap.contentEtag ?? sha2564(json8),
       ttlSeconds: snap.refresh?.ttlSeconds ?? 0
     };
   }
@@ -139756,10 +139756,10 @@ function tokensSnapshotMessage(app, base, status) {
   const why = status === 400 ? `the dev-server rejected the app id as malformed (400 bad_app). It must be lowercase letters, digits and hyphens, starting with a letter or digit, at most 63 characters, with at most one interior dot \u2014 so a leading underscore or an uppercase letter fails, on every build of that app. A single dot is FINE (an owner-namespaced slug), so do not remove one to get past this` : `${status} from the tokens route`;
   return `[release-build] tokens snapshot FAILED for "${app}" (${why}; ${base}/v1/tokens) \u2014 this release carries no tokensHash and the app will render with NO design tokens. On iOS an undefined colour token is invisible, not merely unstyled.` + (status === 400 ? ` Fix the app id (himalaya.content.json "name", or the package directory basename) to match that grammar \u2014 but do NOT drop an owner prefix's dot: \`himi push\` requires the manifest name to equal the composed <ownerPrefix>.<name>, so removing it trades this warning for a 400 "manifest.app must match app" and the app cannot publish at all.` : "");
 }
-function pinBakedServerBaseUrl(json7, base) {
+function pinBakedServerBaseUrl(json8, base) {
   const escaped = base.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
   const boundary = /:\d+$/.test(base) ? "(?!\\d)" : "(?![\\w.-])(?!:\\d)";
-  return json7.replace(new RegExp(`${escaped}${boundary}`, "g"), BAKED_SERVER_BASE_URL);
+  return json8.replace(new RegExp(`${escaped}${boundary}`, "g"), BAKED_SERVER_BASE_URL);
 }
 function stableStringify2(v2) {
   if (v2 === null || typeof v2 !== "object") return JSON.stringify(v2);
@@ -140500,15 +140500,15 @@ async function buildFromLoaded(preloaded, dest, opts = {}) {
       }
       tierScreens.push(summarize3({ ...descriptor, ...lb ? { logicBundle: lb } : {} }));
       delete descriptor.etag;
-      const json7 = pinBakedServerBaseUrl(JSON.stringify(descriptor), base);
-      await store.putScreen(app, screenId, json7);
-      screens[screenId] = { descriptorHash: sha2564(json7), bundle: bundleName, ...screenMetadataFor(screenMetadata, screenId) };
-      rememberInput(bundleName, JSON.parse(json7));
+      const json8 = pinBakedServerBaseUrl(JSON.stringify(descriptor), base);
+      await store.putScreen(app, screenId, json8);
+      screens[screenId] = { descriptorHash: sha2564(json8), bundle: bundleName, ...screenMetadataFor(screenMetadata, screenId) };
+      rememberInput(bundleName, JSON.parse(json8));
       if (collect2?.descriptors) {
         baked.push({
           screenId,
-          descriptor: JSON.parse(json7),
-          descriptorJson: json7,
+          descriptor: JSON.parse(json8),
+          descriptorJson: json8,
           bundleName,
           bundleJs: bundleName ? readBundle(bundleName) ?? null : null,
           ...bundleMapFor(tier5Dir, bundleName ?? void 0)
@@ -140662,14 +140662,14 @@ async function buildFromLoaded(preloaded, dest, opts = {}) {
               lint.push({ screenId, ok: false, issues: fresh });
             }
           }
-          const json7 = pinBakedServerBaseUrl(JSON.stringify(descriptor), base);
-          await store.putScreen(app, screenId, json7);
-          screens[screenId] = { descriptorHash: sha2564(json7), bundle: bundleName, ...screenMetadataFor(screenMetadata, screenId, canonical5) };
-          rememberInput(bundleName, JSON.parse(json7));
+          const json8 = pinBakedServerBaseUrl(JSON.stringify(descriptor), base);
+          await store.putScreen(app, screenId, json8);
+          screens[screenId] = { descriptorHash: sha2564(json8), bundle: bundleName, ...screenMetadataFor(screenMetadata, screenId, canonical5) };
+          rememberInput(bundleName, JSON.parse(json8));
           if (collect2?.descriptors) {
             baked.push({
               screenId,
-              descriptor: JSON.parse(json7),
+              descriptor: JSON.parse(json8),
               // The EXACT baked bytes, exactly as the exact-screen path hands
               // them over. Omitting them did not degrade the crawl quietly — it
               // took out the native-decode oracle for the whole app, which
@@ -140678,7 +140678,7 @@ async function buildFromLoaded(preloaded, dest, opts = {}) {
               // bytes") and throws rather than skipping. So one templated route
               // anywhere in an app meant `himi test --native` reported nothing
               // for ANY of its screens.
-              descriptorJson: json7,
+              descriptorJson: json8,
               bundleName,
               bundleJs: bundleName ? readBundle(bundleName) ?? null : null,
               ...bundleMapFor(tier5Dir, bundleName ?? void 0)
@@ -140771,7 +140771,7 @@ async function buildFromLoaded(preloaded, dest, opts = {}) {
     if (store.putWidget) {
       const bakedWidgets = await bakeWidgets(
         (path2) => devFetch(`${base}${path2}`, { headers: { "X-Himalaya-App": app } }),
-        (widgetId, json7) => store.putWidget(app, widgetId, json7),
+        (widgetId, json8) => store.putWidget(app, widgetId, json8),
         // `opts.tier5Dir`, NOT the `tier5Dir` local — that one falls back to the
         // repo-global dir, where this package's widgets cannot be told from anyone
         // else's and the filter would claim every app's rows as ours.
@@ -140790,9 +140790,9 @@ async function buildFromLoaded(preloaded, dest, opts = {}) {
       if (!js2) continue;
       try {
         const input = bundleInputs.get(name);
-        const json7 = JSON.stringify(extractBundleServices(js2, input ? { input } : {}));
-        const hash2 = sha2564(json7);
-        await store.putDoc(app, hash2, json7);
+        const json8 = JSON.stringify(extractBundleServices(js2, input ? { input } : {}));
+        const hash2 = sha2564(json8);
+        await store.putDoc(app, hash2, json8);
         meta.servicesHash = hash2;
       } catch {
       }
@@ -153273,7 +153273,7 @@ function recommendTemplates(input) {
   const text9 = input.text ?? "";
   const owner = OWNER_WORDS.test(text9);
   const want = new Set(tokens(text9));
-  const byName2 = /* @__PURE__ */ new Map();
+  const byName3 = /* @__PURE__ */ new Map();
   for (const row of input.catalog) {
     const reasons = [];
     let score = 0;
@@ -153294,24 +153294,24 @@ function recommendTemplates(input) {
         score -= 0.3;
       }
     }
-    byName2.set(row.name, { name: row.name, score, reasons, ...row.source ? { source: row.source } : {} });
+    byName3.set(row.name, { name: row.name, score, reasons, ...row.source ? { source: row.source } : {} });
   }
   if (input.verticals?.length) {
     for (const c2 of scoreOverlays(input.verticals, "")) {
-      const name = owner && byName2.has(`${c2.id}-owner`) ? `${c2.id}-owner` : c2.id;
-      const rec = byName2.get(name);
+      const name = owner && byName3.has(`${c2.id}-owner`) ? `${c2.id}-owner` : c2.id;
+      const rec = byName3.get(name);
       if (!rec || c2.score <= 0) continue;
       rec.score += c2.score;
       rec.reasons.push(`site verticals: ${c2.why}`);
     }
   }
   const fallback = owner ? "owner-lite" : "branded-lite";
-  const fb = byName2.get(fallback);
+  const fb = byName3.get(fallback);
   if (fb) {
     fb.score += 0.25;
     fb.reasons.push(owner ? "the default start for owner/operations apps" : "the default start for a customer app on a Wix site");
   }
-  const ranked = [...byName2.values()].map((r2) => ({ ...r2, score: Math.round(r2.score * 1e3) / 1e3 })).filter((r2) => r2.score > 0).sort((a2, b2) => b2.score - a2.score || a2.name.localeCompare(b2.name));
+  const ranked = [...byName3.values()].map((r2) => ({ ...r2, score: Math.round(r2.score * 1e3) / 1e3 })).filter((r2) => r2.score > 0).sort((a2, b2) => b2.score - a2.score || a2.name.localeCompare(b2.name));
   return { owner, ranked };
 }
 var OWNER_WORDS, STOP, tokens;
@@ -156823,8 +156823,8 @@ function memoryStore(manifest, built) {
     },
     // The two members the cast used to paper over. Serve-relative, as FileReleaseStore's is; and
     // nothing to prune, since this store only ever holds the one release it was built with.
-    bundleUrl(_app, sha2566) {
-      return `/v1/bundles/${sha2566}.bundle.js`;
+    bundleUrl(_app, sha2567) {
+      return `/v1/bundles/${sha2567}.bundle.js`;
     },
     async prune() {
       return 0;
@@ -158801,9 +158801,9 @@ function verifyReport(dir, app, manifest) {
 function addAssetPayload(manifest, filePath, opts) {
   const bytes2 = readFileSync84(filePath);
   const name = opts.name ?? basename17(filePath);
-  const sha2566 = assetSha256(bytes2);
+  const sha2567 = assetSha256(bytes2);
   const record2 = {
-    sha256: sha2566,
+    sha256: sha2567,
     sri: assetSri(bytes2),
     bytes: bytes2.length,
     contentType: opts.contentType ?? contentTypeFor(name),
@@ -158816,7 +158816,7 @@ function addAssetPayload(manifest, filePath, opts) {
   const assets = { ...manifest.assets ?? {}, [name]: record2 };
   const next = { ...manifest, assets, releaseId: opts.mintReleaseId({ ...manifest, assets, releaseId: void 0 }) };
   return {
-    payload: { app: manifest.app, manifest: next, screens: {}, bundles: {}, assets: { [sha2566]: bytes2.toString("base64") } },
+    payload: { app: manifest.app, manifest: next, screens: {}, bundles: {}, assets: { [sha2567]: bytes2.toString("base64") } },
     record: record2,
     name
   };
@@ -165461,9 +165461,9 @@ var init_store_iap = __esm({
     UsageError = class extends Error {
     };
     CommandOutput = class {
-      constructor(io2, json7) {
+      constructor(io2, json8) {
         this.io = io2;
-        this.json = json7;
+        this.json = json8;
       }
       secrets = [];
       get interactive() {
@@ -165634,7 +165634,7 @@ async function runStore(pos, flags, io2, deps) {
   const invokedAs = pos[0];
   const sub = invokedAs === "testflight" ? "upload" : pos[1];
   const app = invokedAs === "testflight" ? pos[1] : pos[2];
-  const json7 = on3(flags.json);
+  const json8 = on3(flags.json);
   const print = (o2) => io2.log(JSON.stringify(o2, null, 2));
   const fail6 = (error, extra = {}) => {
     io2.error(JSON.stringify({ error, ...extra }));
@@ -165672,7 +165672,7 @@ async function runStore(pos, flags, io2, deps) {
     }
     try {
       const s2 = await deps.ascStatus(app, credsToEnv(creds2));
-      if (json7) print({ ok: true, app, team: creds2.team, ...s2 });
+      if (json8) print({ ok: true, app, team: creds2.team, ...s2 });
       else {
         io2.log(`  ${pad2("app")}${app}   team ${creds2.team}   appStoreId ${s2.appStoreId}`);
         for (const b2 of s2.builds.slice(0, 5)) io2.log(`  ${pad2("build")}${b2.version}  ${b2.processingState}`);
@@ -165692,7 +165692,7 @@ async function runStore(pos, flags, io2, deps) {
   }
   const { errors, warnings } = partitionFindings(findings);
   if (sub === "preflight") {
-    if (json7) print({ ok: errors.length === 0, app, findings });
+    if (json8) print({ ok: errors.length === 0, app, findings });
     else {
       for (const f2 of findings) io2.log(`  ${f2.level === "error" ? "\u2717" : "!"} ${f2.message}`);
       io2.log(errors.length === 0 ? `
@@ -165730,7 +165730,7 @@ async function runStore(pos, flags, io2, deps) {
   const reuseExisting = on3(flags["skip-build"]);
   const nextBuild = reuseExisting ? version4.build : version4.build + 1;
   const plannedSteps = UPLOAD_STEPS.filter((s2) => !(reuseExisting && BUILD_STEPS.has(s2)));
-  if (!json7) {
+  if (!json8) {
     io2.log("");
     for (const line of accountHeader({ app, bundleId, version: version4, nextBuild, creds, track })) io2.log(line);
     io2.log("");
@@ -165758,7 +165758,7 @@ async function runStore(pos, flags, io2, deps) {
       steps: [...plannedSteps],
       warnings: warnings.map((w2) => w2.message)
     };
-    if (json7) print(plan);
+    if (json8) print(plan);
     else {
       io2.log(`
   dry run \u2014 nothing was built, uploaded or bumped.`);
@@ -165811,11 +165811,11 @@ async function runStore(pos, flags, io2, deps) {
         stderr: r2.stderr.split("\n").slice(-20).join("\n")
       });
     }
-    if (!json7) io2.log(`  \u2713 ${pad2(step)}ok`);
+    if (!json8) io2.log(`  \u2713 ${pad2(step)}ok`);
   }
   if (on3(flags["no-wait"])) {
     const out2 = { ok: true, app, build: uploaded.build, uploaded: true, processed: null, note: "upload accepted; processing not awaited. `himi store status " + app + "` tells you whether it landed." };
-    if (json7) print(out2);
+    if (json8) print(out2);
     else io2.log(`
   \u2713 uploaded build ${uploaded.build} \u2014 processing not awaited.`);
     return 0;
@@ -165836,7 +165836,7 @@ async function runStore(pos, flags, io2, deps) {
     const mine = findBuild(s2.builds, uploaded.build);
     if (mine && mine.processingState === "VALID") {
       const url = `https://appstoreconnect.apple.com/apps/${s2.appStoreId}/testflight/ios`;
-      if (json7) print({ ok: true, app, build: uploaded.build, processingState: mine.processingState, url });
+      if (json8) print({ ok: true, app, build: uploaded.build, processingState: mine.processingState, url });
       else io2.log(`
   \u2713 TestFlight   ${uploaded.marketing} (${uploaded.build}) \u2014 Processing complete
                  ${url}`);
@@ -165856,7 +165856,7 @@ async function runStore(pos, flags, io2, deps) {
         { app, build: uploaded.build, uploaded: true, processed: false }
       );
     }
-    if (!json7) io2.log(`  \u2026 processing (${Math.round(waited / 1e3)}s)`);
+    if (!json8) io2.log(`  \u2026 processing (${Math.round(waited / 1e3)}s)`);
     await deps.sleep(PROCESSING_POLL_MS);
     waited += PROCESSING_POLL_MS;
   }
@@ -167284,7 +167284,7 @@ function parseDataFlag(raw) {
 async function runNotify(pos, flags, io2, deps = {}) {
   const doFetch = deps.fetchImpl ?? fetch;
   const str11 = (v2) => typeof v2 === "string" ? v2 : void 0;
-  const json7 = flags.json === true;
+  const json8 = flags.json === true;
   const print = (v2) => io2.log(JSON.stringify(v2, null, 2));
   const sub = pos[1];
   const USAGE2 = "himi notify send --app <app> (--token <t> | --device <id> | --all) --title <s> [--body <s>] [--link <url>]\n                 [--platform ios|android] [--category <c>] [--badge <n>] [--channel <id>] [--silent] [--dry-run] [--json]\n                 [--data k=v ...]\nhimi notify tokens --app <app> [--platform ios|android] [--include-disabled] [--json]\nhimi notify doctor [--json]";
@@ -167329,7 +167329,7 @@ async function runNotify(pos, flags, io2, deps = {}) {
       ...session ? {} : { hint: "no admin session \u2014 pass --admin-session or set HIMALAYA_ADMIN_SESSION" },
       ...reachable && authed && !senders ? { hint: "this admin-server predates /v1/admin/push-doctor \u2014 upgrade it to see sender readiness" } : {}
     };
-    if (json7) {
+    if (json8) {
       print(report3);
       return report3.ok ? 0 : 1;
     }
@@ -167377,7 +167377,7 @@ async function runNotify(pos, flags, io2, deps = {}) {
       return 1;
     }
     const body = await res2.json();
-    if (json7) {
+    if (json8) {
       print({ ok: true, app, count: body.tokens.length, tokens: body.tokens });
       return 0;
     }
@@ -167467,7 +167467,7 @@ async function runNotify(pos, flags, io2, deps = {}) {
     io2.error(JSON.stringify({ error: out2.error ?? `send failed: ${res.status}` }));
     return 1;
   }
-  if (json7) {
+  if (json8) {
     print(out2);
     return out2.ok ? 0 : 1;
   }
@@ -167679,7 +167679,7 @@ function adoptFromBook(book, opts = {}) {
   return { entities, functions, skipped };
 }
 function renderAdoptModule(r2, source = ".himi/base44-book/book.json") {
-  const json7 = (v2) => JSON.stringify(v2, null, 2);
+  const json8 = (v2) => JSON.stringify(v2, null, 2);
   return [
     `// Generated by \`himi base44 adopt\` from ${source}. Every entry is ADOPTED: the Base44 app's`,
     `// own entity or function, read-only to himi. Review it, then wire it into config.ts:`,
@@ -167687,9 +167687,9 @@ function renderAdoptModule(r2, source = ".himi/base44-book/book.json") {
     `// See docs/base44-entities.md.`,
     `import type { Base44EntitySpec, Base44FunctionSpec } from "@wix/himalaya/core";`,
     ``,
-    `export const base44Entities = ${json7(r2.entities)} satisfies Base44EntitySpec[];`,
+    `export const base44Entities = ${json8(r2.entities)} satisfies Base44EntitySpec[];`,
     ``,
-    `export const base44Functions = ${json7(r2.functions)} satisfies Base44FunctionSpec[];`,
+    `export const base44Functions = ${json8(r2.functions)} satisfies Base44FunctionSpec[];`,
     ``
   ].join("\n");
 }
@@ -167738,6 +167738,380 @@ var init_base44_adopt = __esm({
   }
 });
 
+// src/base44-screens/plan.ts
+var plan_exports = {};
+__export(plan_exports, {
+  ENTITY_TAB_SLOTS: () => ENTITY_TAB_SLOTS,
+  MORE_SCREEN_ID: () => MORE_SCREEN_ID,
+  PlanError: () => PlanError,
+  RESERVED_SCREEN_IDS: () => RESERVED_SCREEN_IDS,
+  displayName: () => displayName2,
+  gateFor: () => gateFor,
+  humanize: () => humanize,
+  planEntity: () => planEntity,
+  planEntityScreens: () => planEntityScreens,
+  pluralize: () => pluralize,
+  rowTitleField: () => rowTitleField,
+  snake: () => snake
+});
+function ownerKeyOf(rule) {
+  if (!rule || typeof rule !== "object" || Array.isArray(rule)) return void 0;
+  const entries = Object.entries(rule);
+  if (entries.length !== 1) return void 0;
+  const [k2, v2] = entries[0];
+  return OWNER_RULES.find(([key3, tpl]) => key3 === k2 && v2 === tpl)?.[0];
+}
+function gateFor(rule) {
+  if (rule === void 0 || rule === null || rule === false) return "never";
+  if (rule === true) return "always";
+  return ownerKeyOf(rule) ? "owner" : "signed-in";
+}
+function pluralize(word) {
+  if (/[^aeiou]y$/i.test(word)) return `${word.slice(0, -1)}ies`;
+  if (/(s|x|z|ch|sh)$/i.test(word)) return `${word}es`;
+  return `${word}s`;
+}
+function snake(name) {
+  return name.replace(/([a-z0-9])([A-Z])/g, "$1_$2").replace(/([A-Z]+)([A-Z][a-z])/g, "$1_$2").replace(/[^A-Za-z0-9]+/g, "_").replace(/^_+|_+$/g, "").toLowerCase();
+}
+function humanize(key3) {
+  const words = snake(key3).replace(/_/g, " ").trim();
+  return words ? words.charAt(0).toUpperCase() + words.slice(1) : key3;
+}
+function displayName2(name) {
+  const words = name.match(/[A-Z]+(?![a-z])|[A-Z][a-z0-9]*|[a-z0-9]+/g) ?? [name];
+  return words.map((w2, i2) => w2.length > 1 && w2 === w2.toUpperCase() ? w2 : i2 === 0 ? w2.charAt(0).toUpperCase() + w2.slice(1).toLowerCase() : w2.toLowerCase()).join(" ");
+}
+function rowTitleField(spec) {
+  const fields = Array.isArray(spec.fields) ? spec.fields : [];
+  if (spec.displayField) return spec.displayField;
+  const strings = fields.filter((f2) => isPlainString(f2) && !isLongText(f2) && !isImage(f2));
+  const required3 = new Set(spec.required ?? []);
+  const req = strings.filter((f2) => required3.has(f2.key));
+  const preferred = (pool2) => PREFERRED_TITLES.map((k2) => pool2.find((f2) => f2.key === k2)).find(Boolean);
+  return (preferred(req) ?? req[0] ?? preferred(strings) ?? strings[0])?.key ?? "id";
+}
+function rowSubtitle(spec, title) {
+  const short = (f2) => f2.key !== title && (isEnum(f2) || isDate(f2) || f2.type === "number" || f2.type === "integer");
+  return (spec.fields ?? []).filter(short).slice(0, 2).map((f2) => f2.key);
+}
+function detailShow(f2) {
+  if (f2.type === "object" || f2.type === "array" && f2.items?.type !== "string") return "section";
+  if (f2.type === "array") return "chips";
+  if (f2.type === "boolean") return "badge";
+  if (isEnum(f2)) return "badge";
+  if (isDate(f2)) return "date";
+  if (isImage(f2)) return "image";
+  if (f2.type === "string" && (f2.format === "email" || f2.format === "uri")) return "link";
+  if (isLongText(f2)) return "longText";
+  return "text";
+}
+function formControl(f2) {
+  if (f2.type === "object" || f2.type === "array" && f2.items?.type !== "string") return null;
+  if (f2.type === "array") return { control: "ChipsInput" };
+  if (f2.type === "boolean") return { control: "Toggle" };
+  if (isEnum(f2)) {
+    const options = (f2.enum ?? []).map(String);
+    return { control: options.length <= SEGMENTED_MAX ? "SegmentedControl" : "Picker", options, optionLabels: options.map(humanize) };
+  }
+  if (f2.type === "number" || f2.type === "integer") return { control: "NumberField", keyboard: "number" };
+  if (isDate(f2)) return { control: "DatePicker" };
+  if (isImage(f2)) return { control: "TextField", keyboard: "url", forcedReadOnly: true };
+  if (f2.type === "string" && f2.format === "email") return { control: "TextField", keyboard: "email" };
+  if (f2.type === "string" && f2.format === "uri") return { control: "TextField", keyboard: "url" };
+  if (isLongText(f2)) return { control: "MultilineTextField" };
+  return { control: "TextField" };
+}
+function fieldReadOnly(f2) {
+  const rls = f2.rls;
+  return !!rls && typeof rls === "object" && "write" in rls && rls.write !== true;
+}
+function ruleFor(spec, op) {
+  const rls = spec.rls;
+  if (!rls || typeof rls !== "object") return void 0;
+  return op in rls ? rls[op] : rls.write;
+}
+function planEntity(spec, app = "") {
+  const name = String(isAdoptedEntity(spec) ? spec.base44Name : spec.name);
+  const singularSlug = snake(name);
+  const pluralSlug = pluralize(singularSlug);
+  const kebab2 = singularSlug.replace(/_/g, "-");
+  const title = spec.title?.trim() || displayName2(name);
+  const listTitle = pluralize(title);
+  const titleField = rowTitleField(spec);
+  const fields = (spec.fields ?? []).filter((f2) => f2 && typeof f2.key === "string");
+  const titleSpec = fields.find((f2) => f2.key === titleField);
+  const composable = !!titleSpec && isPlainString(titleSpec) && !fieldReadOnly(titleSpec);
+  const gates = { create: composable ? gateFor(ruleFor(spec, "create")) : "never", update: gateFor(ruleFor(spec, "update")), delete: gateFor(ruleFor(spec, "delete")) };
+  const owner = {};
+  for (const op of ["update", "delete"]) {
+    if (gates[op] === "owner") owner[op] = ownerKeyOf(ruleFor(spec, op));
+  }
+  const createDefaults = {};
+  for (const f2 of fields) if (f2.default !== void 0) createDefaults[f2.key] = f2.default;
+  return {
+    entity: physicalEntityName(spec, app),
+    name,
+    service: { list: `b44${pascal(pluralSlug)}`, detail: `b44${pascal(singularSlug)}` },
+    ids: { list: `b44_${pluralSlug}`, detail: `b44_${singularSlug}`, bundleList: `b44-${kebab2}-list`, bundleDetail: `b44-${kebab2}` },
+    title,
+    listTitle,
+    countNoun: [nounOf(title), nounOf(listTitle)],
+    row: { title: titleField, subtitle: rowSubtitle(spec, titleField) },
+    detail: fields.filter((f2) => f2.key !== titleField).map((f2) => ({
+      key: f2.key,
+      label: humanize(f2.key),
+      show: detailShow(f2),
+      type: f2.type,
+      ...f2.format ? { format: f2.format } : {}
+    })),
+    form: fields.flatMap((f2) => {
+      const c2 = formControl(f2);
+      if (!c2) return [];
+      const { forcedReadOnly, ...control } = c2;
+      return [{
+        key: f2.key,
+        label: humanize(f2.key),
+        type: f2.type,
+        ...f2.format ? { format: f2.format } : {},
+        ...control,
+        readOnly: forcedReadOnly === true || fieldReadOnly(f2)
+      }];
+    }),
+    gates,
+    owner,
+    createDefaults
+  };
+}
+function planEntityScreens(specs, app = "") {
+  const plans = specs.map((s2) => planEntity(s2, app));
+  const owners = new Map(RESERVED_SCREEN_IDS.map((id) => [`screen id "${id}"`, "the base44-starter template"]));
+  for (const p2 of plans) {
+    const claims = [
+      ...[p2.ids.list, p2.ids.detail].map((id) => [`screen id "${id}"`, id]),
+      ...[p2.ids.bundleList, p2.ids.bundleDetail].map((b2) => [`worker bundle "${b2}"`, b2]),
+      ...[p2.service.list, p2.service.detail].map((svc) => [`service "${svc}"`, svc])
+    ];
+    for (const [what, id] of claims) {
+      const other = owners.get(what);
+      if (other !== void 0) {
+        throw new PlanError("entity_id_collision", `entity "${p2.name}" would generate ${what}, which ${other} already uses \u2014 rename one of them`, { entity: p2.name, screenId: id, with: other });
+      }
+      owners.set(what, `entity "${p2.name}"`);
+    }
+  }
+  const names = plans.map((p2) => p2.name);
+  if (names.length <= ENTITY_TAB_SLOTS) return { plans, tabs: names, more: [] };
+  return { plans, tabs: names.slice(0, ENTITY_TAB_SLOTS - 1), more: names.slice(ENTITY_TAB_SLOTS - 1) };
+}
+var PlanError, RESERVED_SCREEN_IDS, MORE_SCREEN_ID, ENTITY_TAB_SLOTS, OWNER_RULES, pascal, PREFERRED_TITLES, LONG_TEXT, IMAGE_KEY, SEGMENTED_MAX, isPlainString, isEnum, isDate, isImage, isLongText, nounOf;
+var init_plan4 = __esm({
+  "src/base44-screens/plan.ts"() {
+    init_base44_schema();
+    PlanError = class extends Error {
+      constructor(code, message, extra = {}) {
+        super(message);
+        this.code = code;
+        this.extra = extra;
+        this.name = "PlanError";
+      }
+    };
+    RESERVED_SCREEN_IDS = ["b44_functions", "b44_account", "b44_more"];
+    MORE_SCREEN_ID = "b44_more";
+    ENTITY_TAB_SLOTS = 3;
+    OWNER_RULES = [["created_by", "{{user.email}}"], ["created_by_id", "{{user.id}}"]];
+    pascal = (slug) => slug.split("_").filter(Boolean).map((p2) => p2.charAt(0).toUpperCase() + p2.slice(1)).join("");
+    PREFERRED_TITLES = ["title", "name", "label"];
+    LONG_TEXT = /^(description|notes?|body|content|summary|details?|bio|comments?|message|text)$|_(description|notes?|body|summary)$/i;
+    IMAGE_KEY = /^(image|photo|avatar|picture|thumbnail|logo|cover)$|_url$/i;
+    SEGMENTED_MAX = 4;
+    isPlainString = (f2) => f2.type === "string" && !f2.enum && (f2.format === void 0 || f2.format === "richtext");
+    isEnum = (f2) => Array.isArray(f2.enum) && f2.enum.length > 0;
+    isDate = (f2) => f2.type === "string" && (f2.format === "date" || f2.format === "date-time");
+    isImage = (f2) => f2.type === "string" && !isEnum(f2) && (f2.format === "file" || IMAGE_KEY.test(f2.key));
+    isLongText = (f2) => f2.type === "string" && !isEnum(f2) && (f2.format === "richtext" || LONG_TEXT.test(f2.key));
+    nounOf = (display) => display.split(" ").map((w2) => /^[A-Z]{2,}s?$/.test(w2) ? w2 : w2.toLowerCase()).join(" ");
+  }
+});
+
+// src/base44-screens/generate.ts
+var generate_exports = {};
+__export(generate_exports, {
+  ENGINE_FILES: () => ENGINE_FILES,
+  GENERATED_HEADER: () => GENERATED_HEADER,
+  isEdited: () => isEdited,
+  orphanedFiles: () => orphanedFiles,
+  renderAll: () => renderAll,
+  renderDetailEntry: () => renderDetailEntry,
+  renderDevRegistrations: () => renderDevRegistrations,
+  renderListEntry: () => renderListEntry,
+  renderNav: () => renderNav,
+  renderPlanModule: () => renderPlanModule,
+  withHeader: () => withHeader,
+  writeGenerated: () => writeGenerated
+});
+import { createHash as createHash43 } from "node:crypto";
+import { existsSync as existsSync79, mkdirSync as mkdirSync37, readdirSync as readdirSync35, readFileSync as readFileSync100, writeFileSync as writeFileSync34 } from "node:fs";
+import { dirname as dirname46, join as join84 } from "node:path";
+function withHeader(body) {
+  return `${GENERATED_HEADER}${sha2566(body)}
+${body}`;
+}
+function isEdited(content) {
+  const m2 = HEADER_RE.exec(content);
+  return !m2 || sha2566(content.slice(m2[0].length)) !== m2[1];
+}
+function renderPlanModule(p2) {
+  return `// The ${p2.name} screens' plan, derived from config.ts \`base44.entities\` by \`himi base44 screens\`
+// (himi docs base44-app-to-himi-app): the list (../${p2.ids.bundleList}), the detail
+// (../${p2.ids.bundleDetail}) and dev/entities.generated.ts all read it. Edit it to customise the
+// screens \u2014 the generator then leaves this file alone (skipped-edited) unless --force.
+import type { EntityScreenPlan } from "./entity-plan.js";
+
+export const PLAN: EntityScreenPlan = ${json7(p2)};
+`;
+}
+function renderListEntry(p2) {
+  return `// The ${p2.name} list (${p2.ids.list}) \u2014 generated by \`himi base44 screens\`. The behaviour lives in the
+// shared engine (../_shared/entity-list.ts); this file only names the entity's plan.
+import { defineEntityList } from "../_shared/entity-list.js";
+import { PLAN } from "../_shared/${planFile(p2)}.js";
+
+export default defineEntityList(PLAN);
+`;
+}
+function renderDetailEntry(p2) {
+  return `// One ${p2.name} (${p2.ids.detail}), pushed from ${p2.ids.list} with its id \u2014 generated by \`himi base44 screens\`.
+// The behaviour lives in the shared engine (../_shared/entity-detail.ts); this file only names the
+// entity's plan.
+import { defineEntityDetail } from "../_shared/entity-detail.js";
+import { PLAN } from "../_shared/${planFile(p2)}.js";
+
+export default defineEntityDetail(PLAN);
+`;
+}
+function renderDevRegistrations(sp) {
+  const plans = byName2(sp);
+  const imports = sp.plans.map((p2) => `import { PLAN as ${ident(p2)} } from "../tier5-src/_shared/${planFile(p2)}.ts";`);
+  const exact = sp.plans.flatMap((p2) => [
+    `  ${p2.ids.list}: (c?: BuildCtx) => entityListScreen(${ident(p2)}, c),`,
+    `  ${p2.ids.detail}: (c?: BuildCtx) => entityDetailScreen(${ident(p2)}, c),`
+  ]);
+  const more = sp.more.map((n2) => ident(plans.get(n2)));
+  if (more.length) exact.push(`  ${MORE_SCREEN_ID}: () => entityMoreScreen([${more.join(", ")}]),`);
+  const seed2 = sp.tabs.map((n2) => `  ${plans.get(n2).ids.list}: entityListScreen(${ident(plans.get(n2))}),`);
+  if (more.length) seed2.push(`  ${MORE_SCREEN_ID}: entityMoreScreen([${more.join(", ")}]),`);
+  const home = sp.tabs.length ? JSON.stringify(plans.get(sp.tabs[0]).ids.list) : "undefined";
+  return `// The generated entity screens' registrations \u2014 written by \`himi base44 screens\` from config.ts
+// \`base44.entities\`; dev/index.ts spreads them into screens.exact and seed.screens. The builders
+// are dev/entity-screens.ts.
+import type { BuildCtx } from "./dsl.ts";
+import { ${more.length ? "entityDetailScreen, entityListScreen, entityMoreScreen" : "entityDetailScreen, entityListScreen"} } from "./entity-screens.ts";
+${imports.join("\n")}${imports.length ? "\n" : ""}
+/** Every generated screen, by id. */
+export const entityScreens = {
+${exact.join("\n")}${exact.length ? "\n" : ""}};
+
+/** The entity tab roots, seeded so the tab bar paints on a cold offline start. */
+export const entitySeedScreens = () => ({
+${seed2.join("\n")}${seed2.length ? "\n" : ""}});
+
+/** The first entity tab \u2014 the app's home \u2014 or undefined when no entity is declared. */
+export const entityHomeScreenId: string | undefined = ${home};
+`;
+}
+function renderNav(sp) {
+  const plans = byName2(sp);
+  const tabbed = new Set(sp.tabs);
+  const linkable = [];
+  const tabs = [];
+  for (const p2 of sp.plans) {
+    const tabId = tabbed.has(p2.name) ? p2.ids.list.replace(/^b44_/, "") : "more";
+    linkable.push({ screenId: p2.ids.list, isPublic: true, paramKeys: [], parentScreenId: tabbed.has(p2.name) ? "" : MORE_SCREEN_ID, tabId });
+    linkable.push({ screenId: p2.ids.detail, isPublic: true, paramKeys: ["id"], parentScreenId: p2.ids.list, tabId });
+  }
+  for (const n2 of sp.tabs) {
+    const p2 = plans.get(n2);
+    tabs.push({ id: p2.ids.list.replace(/^b44_/, ""), screenId: p2.ids.list, label: p2.listTitle, icon: "list", selectedIcon: "list" });
+  }
+  if (sp.more.length) {
+    linkable.push({ screenId: MORE_SCREEN_ID, isPublic: true, paramKeys: [], parentScreenId: "", tabId: "more" });
+    tabs.push({ id: "more", screenId: MORE_SCREEN_ID, label: "More", icon: "grid", selectedIcon: "grid" });
+  }
+  const lines = (items) => items.map((i2) => `  ${JSON.stringify(i2)},`).join("\n");
+  return `// The generated entity screens' navigation \u2014 written by \`himi base44 screens\` from config.ts
+// \`base44.entities\`. config.ts spreads these in front of the Functions and Account entries; tab
+// labels go through its copyOf("tab.<id>", \u2026) there, so copy overrides keep working.
+export const entityLinkableScreens = [
+${lines(linkable)}${linkable.length ? "\n" : ""}];
+
+export const entityTabItems = [
+${lines(tabs)}${tabs.length ? "\n" : ""}];
+`;
+}
+function renderAll(sp) {
+  const files = [];
+  for (const p2 of sp.plans) {
+    files.push({ path: `tier5-src/_shared/${planFile(p2)}.ts`, body: renderPlanModule(p2) });
+    files.push({ path: `tier5-src/${p2.ids.bundleList}/index.ts`, body: renderListEntry(p2) });
+    files.push({ path: `tier5-src/${p2.ids.bundleDetail}/index.ts`, body: renderDetailEntry(p2) });
+  }
+  files.push({ path: "dev/entities.generated.ts", body: renderDevRegistrations(sp) });
+  files.push({ path: "config.entities.generated.ts", body: renderNav(sp) });
+  return files;
+}
+function writeGenerated(dir, files, opts = {}) {
+  const out2 = [];
+  for (const f2 of files) {
+    const abs = join84(dir, f2.path);
+    const next = withHeader(f2.body);
+    let outcome;
+    if (!existsSync79(abs)) outcome = "written";
+    else {
+      const cur = readFileSync100(abs, "utf8");
+      if (cur === next) outcome = "unchanged";
+      else if (isEdited(cur) && !opts.force) outcome = "skipped-edited";
+      else outcome = "written";
+    }
+    if (outcome === "written" && !opts.dryRun) {
+      mkdirSync37(dirname46(abs), { recursive: true });
+      writeFileSync34(abs, next);
+    }
+    out2.push({ path: f2.path, outcome });
+  }
+  return { files: out2 };
+}
+function orphanedFiles(dir, current) {
+  const keep = new Set(current.map((f2) => f2.path));
+  const found = [];
+  const t5 = join84(dir, "tier5-src");
+  if (!existsSync79(t5)) return found;
+  const candidates = readdirSync35(t5).filter((d2) => d2.startsWith("b44-")).map((d2) => `tier5-src/${d2}/index.ts`);
+  const shared = join84(t5, "_shared");
+  if (existsSync79(shared)) {
+    for (const f2 of readdirSync35(shared)) if (/^b44-.*-plan\.ts$/.test(f2)) candidates.push(`tier5-src/_shared/${f2}`);
+  }
+  for (const rel of candidates.sort()) {
+    if (keep.has(rel) || !existsSync79(join84(dir, rel))) continue;
+    if (readFileSync100(join84(dir, rel), "utf8").startsWith(GENERATED_HEADER)) found.push(rel);
+  }
+  return found;
+}
+var GENERATED_HEADER, HEADER_RE, ENGINE_FILES, sha2566, planFile, ident, json7, byName2;
+var init_generate = __esm({
+  "src/base44-screens/generate.ts"() {
+    init_plan4();
+    GENERATED_HEADER = "// @generated by himi base44 screens \u2014 sha256:";
+    HEADER_RE = /^\/\/ @generated by himi base44 screens — sha256:([0-9a-f]{64})\n/;
+    ENGINE_FILES = ["tier5-src/_shared/entity-list.ts", "tier5-src/_shared/entity-detail.ts", "tier5-src/_shared/entity-plan.ts", "dev/entity-screens.ts"];
+    sha2566 = (s2) => createHash43("sha256").update(s2).digest("hex");
+    planFile = (p2) => `${p2.ids.bundleDetail}-plan`;
+    ident = (p2) => `plan_${p2.ids.detail.replace(/^b44_/, "")}`;
+    json7 = (v2) => JSON.stringify(v2, null, 2);
+    byName2 = (sp) => new Map(sp.plans.map((p2) => [p2.name, p2]));
+  }
+});
+
 // src/base44-auth.ts
 var base44_auth_exports = {};
 __export(base44_auth_exports, {
@@ -167755,20 +168129,20 @@ __export(base44_auth_exports, {
   usableBase44Auth: () => usableBase44Auth,
   writeBase44Session: () => writeBase44Session
 });
-import { chmodSync as chmodSync4, existsSync as existsSync79, mkdirSync as mkdirSync37, readFileSync as readFileSync100, rmSync as rmSync20, writeFileSync as writeFileSync34 } from "node:fs";
+import { chmodSync as chmodSync4, existsSync as existsSync80, mkdirSync as mkdirSync38, readFileSync as readFileSync101, rmSync as rmSync20, writeFileSync as writeFileSync35 } from "node:fs";
 import { homedir as homedir13 } from "node:os";
-import { dirname as dirname46, join as join84 } from "node:path";
+import { dirname as dirname47, join as join85 } from "node:path";
 function base44ApiBase(env = process.env) {
   return (env.BASE44_API_URL?.trim() || "https://app.base44.com").replace(/\/+$/, "");
 }
 function base44SessionPath(home = homedir13()) {
-  return join84(home, ".himi", "base44", "session.json");
+  return join85(home, ".himi", "base44", "session.json");
 }
 function readBase44Session(home) {
   const p2 = base44SessionPath(home);
-  if (!existsSync79(p2)) return void 0;
+  if (!existsSync80(p2)) return void 0;
   try {
-    const s2 = JSON.parse(readFileSync100(p2, "utf8"));
+    const s2 = JSON.parse(readFileSync101(p2, "utf8"));
     return typeof s2.accessToken === "string" && s2.accessToken ? s2 : void 0;
   } catch {
     return void 0;
@@ -167776,15 +168150,15 @@ function readBase44Session(home) {
 }
 function writeBase44Session(session, home) {
   const p2 = base44SessionPath(home);
-  mkdirSync37(dirname46(p2), { recursive: true, mode: 448 });
-  writeFileSync34(p2, `${JSON.stringify(session, null, 2)}
+  mkdirSync38(dirname47(p2), { recursive: true, mode: 448 });
+  writeFileSync35(p2, `${JSON.stringify(session, null, 2)}
 `, { mode: 384 });
   chmodSync4(p2, 384);
   return p2;
 }
 function deleteBase44Session(home) {
   const p2 = base44SessionPath(home);
-  if (!existsSync79(p2)) return false;
+  if (!existsSync80(p2)) return false;
   rmSync20(p2, { force: true });
   return true;
 }
@@ -167879,9 +168253,9 @@ async function base44DeviceLogin(opts) {
   throw new Error("the Base44 sign-in code expired before it was approved \u2014 run `himi base44 login` again");
 }
 function importBase44CliSession(home = homedir13(), env = process.env) {
-  const src = join84(home, ".base44", "auth", "auth.json");
-  if (!existsSync79(src)) throw new Error(`no Base44 CLI session at ${src} \u2014 run \`npx base44 login\` first, or use \`himi base44 login\``);
-  const a2 = JSON.parse(readFileSync100(src, "utf8"));
+  const src = join85(home, ".base44", "auth", "auth.json");
+  if (!existsSync80(src)) throw new Error(`no Base44 CLI session at ${src} \u2014 run \`npx base44 login\` first, or use \`himi base44 login\``);
+  const a2 = JSON.parse(readFileSync101(src, "utf8"));
   if (typeof a2.accessToken !== "string" || !a2.accessToken) throw new Error(`${src} holds no access token`);
   const session = {
     accessToken: a2.accessToken,
@@ -168671,9 +169045,9 @@ function asObj(x2) {
   return x2 && typeof x2 === "object" && !Array.isArray(x2) ? x2 : void 0;
 }
 function invokeFlag(identities, key3) {
-  const ident = asObj(asObj(identities)?.[key3]);
-  if (!ident || typeof ident.invoke !== "boolean") return void 0;
-  return ident.invoke;
+  const ident2 = asObj(asObj(identities)?.[key3]);
+  if (!ident2 || typeof ident2.invoke !== "boolean") return void 0;
+  return ident2.invoke;
 }
 function methodStar(entry) {
   return asObj(asObj(entry)?.["*"]);
@@ -170174,8 +170548,8 @@ var init_brand_font = __esm({
 });
 
 // src/site-analyze/write-artifacts.ts
-import { mkdirSync as mkdirSync38, rmSync as rmSync21, writeFileSync as writeFileSync35 } from "node:fs";
-import { join as join85 } from "node:path";
+import { mkdirSync as mkdirSync39, rmSync as rmSync21, writeFileSync as writeFileSync36 } from "node:fs";
+import { join as join86 } from "node:path";
 function attachVeloSources(book, sources, put) {
   const byPath = new Map((sources ?? []).map((s2) => [s2.path, s2.text]));
   for (const f2 of book.velo.files) {
@@ -170330,13 +170704,13 @@ async function downloadMedia(book, fetchImpl, put) {
 }
 async function writeBusinessBook(result, opts) {
   const out2 = opts.outDir;
-  mkdirSync38(join85(out2, "evidence/pages"), { recursive: true });
-  mkdirSync38(join85(out2, "media/catalog"), { recursive: true });
+  mkdirSync39(join86(out2, "evidence/pages"), { recursive: true });
+  mkdirSync39(join86(out2, "media/catalog"), { recursive: true });
   const files = [];
   const put = (rel, body) => {
-    const p2 = join85(out2, rel);
-    mkdirSync38(join85(p2, ".."), { recursive: true });
-    writeFileSync35(p2, body);
+    const p2 = join86(out2, rel);
+    mkdirSync39(join86(p2, ".."), { recursive: true });
+    writeFileSync36(p2, body);
     files.push(rel);
   };
   const book = result.book;
@@ -170378,7 +170752,7 @@ async function writeBusinessBook(result, opts) {
   const allGated = shots.length > 0 && gatedPages.length > 0 && usablePages.length === 0;
   put("README.md", folderReadme(shots.length > 0 && !allGated, book.look.unavailable, allGated));
   put("evidence/probes.json", JSON.stringify(book.probes, null, 2) + "\n");
-  rmSync21(join85(out2, "evidence/mobile-app"), { recursive: true, force: true });
+  rmSync21(join86(out2, "evidence/mobile-app"), { recursive: true, force: true });
   for (const [name, value] of Object.entries(result.mobileAppEvidence ?? {})) {
     if (/^[a-z-]+\.json$/.test(name)) put(`evidence/mobile-app/${name}`, JSON.stringify(value, null, 2) + "\n");
   }
@@ -170609,7 +170983,7 @@ function readConnectors(files, dirs) {
   return out2;
 }
 function providersOf(cfg) {
-  const on4 = (camel2, snake) => cfg[camel2] === true || cfg[snake] === true;
+  const on4 = (camel2, snake2) => cfg[camel2] === true || cfg[snake2] === true;
   const out2 = [];
   if (on4("enableUsernamePassword", "enable_username_password")) out2.push("email-password");
   if (on4("enableGoogleLogin", "enable_google_login")) out2.push("google");
@@ -171243,11 +171617,11 @@ var init_analyze = __esm({
 });
 
 // src/base44-analyze/write-artifacts.ts
-import { existsSync as existsSync80, mkdirSync as mkdirSync39, readFileSync as readFileSync101, rmSync as rmSync22, writeFileSync as writeFileSync36 } from "node:fs";
-import { dirname as dirname47, join as join86, resolve as resolve60, sep as sep19 } from "node:path";
+import { existsSync as existsSync81, mkdirSync as mkdirSync40, readFileSync as readFileSync102, rmSync as rmSync22, writeFileSync as writeFileSync37 } from "node:fs";
+import { dirname as dirname48, join as join87, resolve as resolve60, sep as sep19 } from "node:path";
 function isBookFolder(dir) {
   try {
-    return JSON.parse(readFileSync101(join86(dir, "book.json"), "utf8")).kind === "base44-app-book";
+    return JSON.parse(readFileSync102(join87(dir, "book.json"), "utf8")).kind === "base44-app-book";
   } catch {
     return false;
   }
@@ -171329,32 +171703,32 @@ function writeBase44Book(result, outDir, opts = {}) {
     const shot = shots.find((s2) => page.screenshotLocal?.endsWith(s2.filename));
     if (shot) page.screenshotLocal = `screenshots/${shot.filename}`;
   }
-  const json7 = `${JSON.stringify(book, null, 2)}
+  const json8 = `${JSON.stringify(book, null, 2)}
 `;
   const md = renderBookMd(book);
-  assertNoSecrets(json7);
+  assertNoSecrets(json8);
   assertNoSecrets(md);
-  const owned = ["book.json", "BOOK.md", "source", "screenshots"].filter((n2) => existsSync80(join86(out2, n2)));
+  const owned = ["book.json", "BOOK.md", "source", "screenshots"].filter((n2) => existsSync81(join87(out2, n2)));
   if (owned.length) {
     if (!isBookFolder(out2)) throw new Error(`refusing to write the app book into ${out2}: it already has ${owned.join(", ")} that ${owned.length === 1 ? "is" : "are"} not from an app book \u2014 pick an empty --out`);
-    for (const d2 of ["source", "screenshots"]) rmSync22(join86(out2, d2), { recursive: true, force: true });
+    for (const d2 of ["source", "screenshots"]) rmSync22(join87(out2, d2), { recursive: true, force: true });
   }
-  mkdirSync39(out2, { recursive: true });
-  writeFileSync36(join86(out2, "book.json"), json7);
-  writeFileSync36(join86(out2, "BOOK.md"), md);
+  mkdirSync40(out2, { recursive: true });
+  writeFileSync37(join87(out2, "book.json"), json8);
+  writeFileSync37(join87(out2, "BOOK.md"), md);
   files.push("book.json", "BOOK.md");
   for (const s2 of shots) {
-    mkdirSync39(join86(out2, "screenshots"), { recursive: true });
-    writeFileSync36(join86(out2, "screenshots", s2.filename), s2.bytes);
+    mkdirSync40(join87(out2, "screenshots"), { recursive: true });
+    writeFileSync37(join87(out2, "screenshots", s2.filename), s2.bytes);
     files.push(`screenshots/${s2.filename}`);
   }
-  const sourceRoot = join86(out2, "source");
+  const sourceRoot = join87(out2, "source");
   for (const f2 of result.sourceFiles) {
     if (!safeRel(f2.path)) continue;
-    const dest = join86(sourceRoot, ...f2.path.split("/"));
+    const dest = join87(sourceRoot, ...f2.path.split("/"));
     if (!dest.startsWith(sourceRoot + sep19)) continue;
-    mkdirSync39(dirname47(dest), { recursive: true });
-    writeFileSync36(dest, f2.bytes);
+    mkdirSync40(dirname48(dest), { recursive: true });
+    writeFileSync37(dest, f2.bytes);
   }
   if (result.sourceFiles.length) files.push(`source/ (${result.sourceFiles.length} files)`);
   return { outDir: out2, files };
@@ -174895,9 +175269,9 @@ __export(cli_exports, {
   systemTar: () => systemTar
 });
 import { execFile } from "node:child_process";
-import { mkdirSync as mkdirSync40, mkdtempSync as mkdtempSync5, rmSync as rmSync23, writeFileSync as writeFileSync37 } from "node:fs";
+import { mkdirSync as mkdirSync41, mkdtempSync as mkdtempSync5, rmSync as rmSync23, writeFileSync as writeFileSync38 } from "node:fs";
 import { tmpdir as tmpdir6 } from "node:os";
-import { join as join87, resolve as resolve61 } from "node:path";
+import { join as join88, resolve as resolve61 } from "node:path";
 import { promisify } from "node:util";
 function projectDownloader(apiFetch, apiBase, token, extract = systemTar) {
   return async (appId2) => {
@@ -174910,13 +175284,13 @@ function projectDownloader(apiFetch, apiBase, token, extract = systemTar) {
     }
     const bytes2 = await readCapped(res, MAX_TARBALL_BYTES);
     if (!bytes2) throw new Error(`project download is over the ${MAX_TARBALL_BYTES}-byte cap`);
-    const root = mkdtempSync5(join87(tmpdir6(), "himi-base44-"));
+    const root = mkdtempSync5(join88(tmpdir6(), "himi-base44-"));
     const cleanup = () => rmSync23(root, { recursive: true, force: true });
     try {
-      const archive = join87(root, "project.tar");
-      const dir = join87(root, "project");
-      writeFileSync37(archive, bytes2);
-      mkdirSync40(dir);
+      const archive = join88(root, "project.tar");
+      const dir = join88(root, "project");
+      writeFileSync38(archive, bytes2);
+      mkdirSync41(dir);
       await extract(archive, dir);
       return { dir, cleanup };
     } catch (e2) {
@@ -175135,7 +175509,7 @@ var init_errors2 = __esm({
 });
 
 // src/one-app/collect.ts
-import { createHash as createHash43 } from "node:crypto";
+import { createHash as createHash44 } from "node:crypto";
 function isObject2(value) {
   return value !== null && typeof value === "object" && !Array.isArray(value);
 }
@@ -175207,7 +175581,7 @@ function semanticFingerprint(structure) {
     }
     return JSON.stringify(value);
   };
-  return createHash43("sha256").update(canonical5(structure, true)).digest("hex");
+  return createHash44("sha256").update(canonical5(structure, true)).digest("hex");
 }
 async function collectOneApp(input, deps = {}) {
   if (typeof input.metaSiteId !== "string" || !UUID.test(input.metaSiteId)) {
@@ -175831,9 +176205,9 @@ __export(cli_exports2, {
   ONE_APP_WORKFLOW: () => ONE_APP_WORKFLOW,
   runOneAppCommand: () => runOneAppCommand
 });
-import { closeSync as closeSync7, constants as constants4, lstatSync as lstatSync21, mkdirSync as mkdirSync41, openSync as openSync6, readFileSync as readFileSync102, realpathSync as realpathSync14, writeFileSync as writeFileSync38 } from "node:fs";
-import { createHash as createHash44 } from "node:crypto";
-import { dirname as dirname48, join as join88, parse as parse3, resolve as resolve62 } from "node:path";
+import { closeSync as closeSync7, constants as constants4, lstatSync as lstatSync21, mkdirSync as mkdirSync42, openSync as openSync6, readFileSync as readFileSync103, realpathSync as realpathSync14, writeFileSync as writeFileSync39 } from "node:fs";
+import { createHash as createHash45 } from "node:crypto";
+import { dirname as dirname49, join as join89, parse as parse3, resolve as resolve62 } from "node:path";
 function readOptions(argv, cwd, commandIncluded) {
   let cursor = 0;
   const skipGlobalSwitches = () => {
@@ -175881,7 +176255,7 @@ function readOptions(argv, cwd, commandIncluded) {
       const file2 = resolve62(cwd, flags["prompt-file"]);
       const stat2 = lstatSync21(file2);
       if (!stat2.isFile() || stat2.size > MAX_PROMPT_BYTES) throw new Error("invalid prompt file");
-      prompt = readFileSync102(file2, "utf8");
+      prompt = readFileSync103(file2, "utf8");
     } catch {
       throw new OneAppError("invalid_prompt", "Use a readable text file of at most 64 KiB for --prompt-file.");
     }
@@ -175897,7 +176271,7 @@ function readOptions(argv, cwd, commandIncluded) {
     throw new OneAppError("invalid_output_path", "Pass a parent directory with --dir.");
   }
   const parentDir = resolve62(cwd, flags.dir ?? ".");
-  const workspace = join88(parentDir, name);
+  const workspace = join89(parentDir, name);
   assertSafeParents(parentDir);
   if (pathExists(workspace)) throw new OneAppError("output_exists", "The destination already exists. Choose a new --name or --dir.");
   return { metaSiteId, appInstance, prompt, name, parentDir, workspace, target, topTabs };
@@ -175926,13 +176300,13 @@ function assertSafeParents(path2) {
         throw new OneAppError("invalid_output_path", "The output parent cannot be inspected.");
       }
     }
-    current = dirname48(current);
+    current = dirname49(current);
   }
 }
 function writePrivate(path2, contents, append) {
   const fd = openSync6(path2, constants4.O_WRONLY | constants4.O_CREAT | constants4.O_NOFOLLOW | (append ? constants4.O_APPEND : constants4.O_EXCL), 384);
   try {
-    writeFileSync38(fd, contents, { encoding: "utf8" });
+    writeFileSync39(fd, contents, { encoding: "utf8" });
   } finally {
     closeSync7(fd);
   }
@@ -175954,7 +176328,7 @@ Collect the source mobile app and hand it to the current coding agent. The agent
   const hashes = {};
   const diskWrite = deps.writeFile ?? writePrivate;
   const put = (name, content) => {
-    const path2 = join88(evidenceDir, name);
+    const path2 = join89(evidenceDir, name);
     try {
       assertSafeParents(evidenceDir);
       diskWrite(path2, content, false);
@@ -175962,7 +176336,7 @@ Collect the source mobile app and hand it to the current coding agent. The agent
       throw new OneAppError("artifact_write_failed", "Could not save the migration evidence. Existing files were kept.", { stage });
     }
     artifacts[name] = path2;
-    hashes[name] = createHash44("sha256").update(content).digest("hex");
+    hashes[name] = createHash45("sha256").update(content).digest("hex");
     return path2;
   };
   const progress = (nextStage) => {
@@ -175970,7 +176344,7 @@ Collect the source mobile app and hand it to the current coding agent. The agent
     if (!evidenceDir) return;
     try {
       assertSafeParents(evidenceDir);
-      diskWrite(join88(evidenceDir, "progress.jsonl"), JSON.stringify({ stage, at: now() }) + "\n", true);
+      diskWrite(join89(evidenceDir, "progress.jsonl"), JSON.stringify({ stage, at: now() }) + "\n", true);
     } catch {
       throw new OneAppError("artifact_write_failed", "Could not record migration progress. Existing files were kept.", { stage });
     }
@@ -175982,12 +176356,12 @@ Collect the source mobile app and hand it to the current coding agent. The agent
   try {
     options = readOptions(argv, deps.cwd ?? process.cwd(), commandIncluded);
     try {
-      mkdirSync41(options.parentDir, { recursive: true, mode: 448 });
+      mkdirSync42(options.parentDir, { recursive: true, mode: 448 });
       assertSafeParents(options.parentDir);
-      mkdirSync41(options.workspace, { mode: 448 });
+      mkdirSync42(options.workspace, { mode: 448 });
       if (realpathSync14(options.workspace) !== options.workspace) throw new Error("destination changed");
-      evidenceDir = join88(options.workspace, ".himi", "one-app");
-      mkdirSync41(evidenceDir, { recursive: true, mode: 448 });
+      evidenceDir = join89(options.workspace, ".himi", "one-app");
+      mkdirSync42(evidenceDir, { recursive: true, mode: 448 });
     } catch (error) {
       if (error.code === "EEXIST") {
         throw new OneAppError("output_exists", "The destination already exists. Choose a new --name or --dir.");
@@ -177715,7 +178089,7 @@ var init_mobile_app = __esm({
       return s2 || void 0;
     };
     strs2 = (v2) => arr(v2).filter((x2) => typeof x2 === "string");
-    pick2 = (o2, camel2, snake) => o2[camel2] ?? o2[snake];
+    pick2 = (o2, camel2, snake2) => o2[camel2] ?? o2[snake2];
     outOfScope = (definitionId) => !!definitionId?.startsWith("ntt.");
     empty = () => ({
       tabs: [],
@@ -178123,8 +178497,8 @@ var init_customer_build = __esm({
 });
 
 // src/site-analyze/apply.ts
-import { existsSync as existsSync81, readFileSync as readFileSync103, writeFileSync as writeFileSync39, copyFileSync as copyFileSync2, mkdirSync as mkdirSync42, realpathSync as realpathSync15, statSync as statSync22 } from "node:fs";
-import { dirname as dirname49, isAbsolute as isAbsolute8, join as join89, resolve as resolve63, sep as sep20 } from "node:path";
+import { existsSync as existsSync82, readFileSync as readFileSync104, writeFileSync as writeFileSync40, copyFileSync as copyFileSync2, mkdirSync as mkdirSync43, realpathSync as realpathSync15, statSync as statSync22 } from "node:fs";
+import { dirname as dirname50, isAbsolute as isAbsolute8, join as join90, resolve as resolve63, sep as sep20 } from "node:path";
 import { spawnSync as spawnSync4 } from "node:child_process";
 function unpairedRedirectNote(overlay) {
   if (!overlay.wix?.clientId || overlay.wix.redirectUri) return void 0;
@@ -178139,8 +178513,8 @@ function committedShellProvisioning(path2) {
 function findRepoRoot(cwd) {
   let dir = cwd;
   for (let i2 = 0; i2 < 8; i2++) {
-    if (SHELL_NAMES2.some((name) => existsSync81(join89(dir, shellAppDir(name), "package.json")))) return dir;
-    const next = dirname49(dir);
+    if (SHELL_NAMES2.some((name) => existsSync82(join90(dir, shellAppDir(name), "package.json")))) return dir;
+    const next = dirname50(dir);
     if (next === dir) break;
     dir = next;
   }
@@ -178242,11 +178616,11 @@ function sameKnownSite(previous, next) {
 }
 function buildMergedContract(options) {
   const { appDir: appDir3, packageDir, overlay } = options;
-  const committedPath = join89(appDir3, "provisioning.json");
-  if (!existsSync81(committedPath)) {
+  const committedPath = join90(appDir3, "provisioning.json");
+  if (!existsSync82(committedPath)) {
     throw new Error(`shell has no committed provisioning.json at ${committedPath} to build a contract from`);
   }
-  const committed = JSON.parse(readFileSync103(committedPath, "utf8"));
+  const committed = JSON.parse(readFileSync104(committedPath, "utf8"));
   const merged = mergeCustomerOwned(committed, overlay);
   const overlayFontFamily = (overlay.branding ?? {}).fontFamily;
   const branding = merged.branding ?? {};
@@ -178258,8 +178632,8 @@ function buildMergedContract(options) {
   };
   const stage = (fromRel, toRel) => {
     const from = contained(packageDir, fromRel);
-    const to2 = contained(join89(appDir3, STAGED), toRel.slice(STAGED.length + 1));
-    if (!from || !to2 || !existsSync81(from)) return void 0;
+    const to2 = contained(join90(appDir3, STAGED), toRel.slice(STAGED.length + 1));
+    if (!from || !to2 || !existsSync82(from)) return void 0;
     let real;
     let realRoot;
     try {
@@ -178271,7 +178645,7 @@ function buildMergedContract(options) {
     if (!real.startsWith(realRoot + sep20)) return void 0;
     try {
       if (!statSync22(real).isFile()) return void 0;
-      mkdirSync42(dirname49(to2), { recursive: true });
+      mkdirSync43(dirname50(to2), { recursive: true });
       copyFileSync2(real, to2);
     } catch {
       return void 0;
@@ -178281,11 +178655,11 @@ function buildMergedContract(options) {
   };
   const icon = stage("media/icon.png", `${STAGED}/icon.png`);
   if (icon) branding.appIconPath = icon;
-  const facesPath = join89(packageDir, "media/fonts/faces.json");
-  if (existsSync81(facesPath)) {
+  const facesPath = join90(packageDir, "media/fonts/faces.json");
+  if (existsSync82(facesPath)) {
     let faces = [];
     try {
-      const parsed = JSON.parse(readFileSync103(facesPath, "utf8"));
+      const parsed = JSON.parse(readFileSync104(facesPath, "utf8"));
       faces = Array.isArray(parsed) ? parsed : [];
     } catch {
       faces = [];
@@ -178306,11 +178680,11 @@ function buildMergedContract(options) {
   merged.branding = branding;
   const body = `${JSON.stringify(merged, null, 2)}
 `;
-  const path2 = join89(packageDir, "provisioning.contract.json");
-  writeFileSync39(path2, body);
-  const localPath2 = join89(appDir3, LOCAL_CONTRACT_REL);
-  mkdirSync42(dirname49(localPath2), { recursive: true });
-  writeFileSync39(localPath2, body);
+  const path2 = join90(packageDir, "provisioning.contract.json");
+  writeFileSync40(path2, body);
+  const localPath2 = join90(appDir3, LOCAL_CONTRACT_REL);
+  mkdirSync43(dirname50(localPath2), { recursive: true });
+  writeFileSync40(localPath2, body);
   staged.push(localPath2);
   return { path: path2, staged };
 }
@@ -178343,10 +178717,10 @@ function catalogTypography(overlay, template) {
 function staticFaqFor(overlay, overlayPath) {
   const own5 = overlay.faq;
   if (own5 !== void 0) return deriveStaticFaq(own5);
-  const bookPath = join89(dirname49(resolve63(overlayPath)), "book.json");
-  if (!existsSync81(bookPath)) return void 0;
+  const bookPath = join90(dirname50(resolve63(overlayPath)), "book.json");
+  if (!existsSync82(bookPath)) return void 0;
   try {
-    const book = JSON.parse(readFileSync103(bookPath, "utf8"));
+    const book = JSON.parse(readFileSync104(bookPath, "utf8"));
     const copy = book?.copy;
     if (!copy || typeof copy !== "object" || copy.unavailable) return void 0;
     const pairs = deriveStaticFaq(copy.faq);
@@ -178360,10 +178734,10 @@ function staticGalleriesFor(overlay, overlayPath) {
   if (overlay.galleries !== void 0) return deriveStaticGalleries(
     overlay.galleries.map((gallery) => ({ role: "gallery", title: gallery.title, galleryImageUrls: gallery.photos }))
   );
-  const bookPath = join89(dirname49(resolve63(overlayPath)), "book.json");
-  if (!existsSync81(bookPath)) return void 0;
+  const bookPath = join90(dirname50(resolve63(overlayPath)), "book.json");
+  if (!existsSync82(bookPath)) return void 0;
   try {
-    const book = JSON.parse(readFileSync103(bookPath, "utf8"));
+    const book = JSON.parse(readFileSync104(bookPath, "utf8"));
     if (!book.look || book.look.unavailable || !Array.isArray(book.look.pages)) return void 0;
     const galleries = deriveStaticGalleries(book.look.pages);
     return galleries.length || book.look.complete === true ? galleries : void 0;
@@ -178375,8 +178749,8 @@ async function applyOverlays(input) {
   const cwd = resolve63(input.cwd);
   const shell = input.shell ?? DEFAULT_BRANDABLE_SHELL;
   assertKnownShell(shell);
-  const overlay = JSON.parse(readFileSync103(input.overlayPath, "utf8"));
-  const tokens2 = JSON.parse(readFileSync103(input.tokensPath, "utf8"));
+  const overlay = JSON.parse(readFileSync104(input.overlayPath, "utf8"));
+  const tokens2 = JSON.parse(readFileSync104(input.tokensPath, "utf8"));
   const faq = staticFaqFor(overlay, input.overlayPath);
   if (faq !== void 0) overlay.faq = faq;
   const galleries = staticGalleriesFor(overlay, input.overlayPath);
@@ -178393,15 +178767,15 @@ async function applyOverlays(input) {
         `shell "${shell}" cannot bake a customer brand \u2014 it ships no prepare:customer script`
       );
     }
-    const appDir3 = join89(repoRoot2, shellAppDir(shell));
-    const committedPath = join89(appDir3, "provisioning.json");
-    const committedSite = existsSync81(committedPath) ? JSON.parse(readFileSync103(committedPath, "utf8")).site : void 0;
+    const appDir3 = join90(repoRoot2, shellAppDir(shell));
+    const committedPath = join90(appDir3, "provisioning.json");
+    const committedSite = existsSync82(committedPath) ? JSON.parse(readFileSync104(committedPath, "utf8")).site : void 0;
     if (committedSite !== void 0 && overlay.site === void 0) {
       throw new Error(
         `shell "${shell}" is a site shell: its contract names the customer's website (a \`site\` block), and this overlay has none. Re-run \`himi site analyze --url <site> --shell ${shell}\` to derive the site's page map (edit \`site.pages\` in provisioning.overlay.json if needed), then --apply.`
       );
     }
-    const packageDir = dirname49(resolve63(input.overlayPath));
+    const packageDir = dirname50(resolve63(input.overlayPath));
     const { path: contract, staged } = buildMergedContract({ appDir: appDir3, packageDir, overlay });
     wrote.push(...staged);
     const r2 = spawnSync4("npm", ["run", "prepare:customer", "--", "--contract", contract], {
@@ -178422,9 +178796,9 @@ async function applyOverlays(input) {
       note: `prepare:customer --contract with a merged contract (committed provisioning.json untouched)${unpairedInRepo ? ` \xB7 ${unpairedInRepo}` : ""}`
     };
   }
-  const pkgProv = join89(cwd, "provisioning.json");
+  const pkgProv = join90(cwd, "provisioning.json");
   assertNotCommitted(pkgProv, input.forbiddenProvisioning);
-  const contentPath = join89(cwd, "himalaya.content.json");
+  const contentPath = join90(cwd, "himalaya.content.json");
   const syncViewNames = (before, after) => {
     const content = readContentManifest(cwd);
     if (!content) return;
@@ -178436,26 +178810,26 @@ async function applyOverlays(input) {
   };
   let packageFaq = faq;
   let packageGalleries = galleries;
-  if (existsSync81(pkgProv)) {
-    const cur = JSON.parse(readFileSync103(pkgProv, "utf8"));
+  if (existsSync82(pkgProv)) {
+    const cur = JSON.parse(readFileSync104(pkgProv, "utf8"));
     if (galleries === void 0 && !sameKnownSite(cur, overlay)) overlay.galleries = [];
     const merged = deepMerge4(cur, overlay);
     packageFaq = merged.faq;
     packageGalleries = merged.galleries;
     syncViewNames(cur.site, merged.site);
-    writeFileSync39(pkgProv, JSON.stringify(merged, null, 2) + "\n");
+    writeFileSync40(pkgProv, JSON.stringify(merged, null, 2) + "\n");
     wrote.push(pkgProv);
   } else {
     syncViewNames(void 0, overlay.site);
-    writeFileSync39(pkgProv, JSON.stringify(overlay, null, 2) + "\n");
+    writeFileSync40(pkgProv, JSON.stringify(overlay, null, 2) + "\n");
     wrote.push(pkgProv);
   }
   if (Array.isArray(packageGalleries) && packageGalleries.length && !overlay.installedVerticals.includes("galleries")) {
     overlay.installedVerticals.push("galleries");
   }
-  const pkgTokens = join89(cwd, "tokens.json");
-  if (existsSync81(pkgTokens) && (tokens2.colors || tokens2.typography)) {
-    const cur = JSON.parse(readFileSync103(pkgTokens, "utf8"));
+  const pkgTokens = join90(cwd, "tokens.json");
+  if (existsSync82(pkgTokens) && (tokens2.colors || tokens2.typography)) {
+    const cur = JSON.parse(readFileSync104(pkgTokens, "utf8"));
     let tokensIn = tokens2;
     if (tokens2.typography) {
       const fonts = catalogTypography(tokens2.typography, cur.typography);
@@ -178476,13 +178850,13 @@ async function applyOverlays(input) {
       if (primary && glow && typeof glow.color === "string") glow.color = primary;
       stripBrandFromIdiom(merged);
     }
-    writeFileSync39(pkgTokens, JSON.stringify(merged, null, 2) + "\n");
+    writeFileSync40(pkgTokens, JSON.stringify(merged, null, 2) + "\n");
     wrote.push(pkgTokens);
   }
   const homeAction = homeRefreshActionId(shell);
-  const homeSrc = join89(cwd, "dev/index.ts");
-  if (homeAction && existsSync81(homeSrc)) {
-    const prev = readFileSync103(homeSrc, "utf8");
+  const homeSrc = join90(cwd, "dev/index.ts");
+  if (homeAction && existsSync82(homeSrc)) {
+    const prev = readFileSync104(homeSrc, "utf8");
     const patched = patchBrandParams(prev, overlay, homeAction);
     let next = patched.src;
     if (!patched.foreign && faq?.length && prev.includes('"tier5.himiBrandedFaq.load"') && !prev.includes('"staticFaq"')) {
@@ -178510,20 +178884,20 @@ async function applyOverlays(input) {
       }
     }
     if (next !== prev) {
-      writeFileSync39(homeSrc, next);
+      writeFileSync40(homeSrc, next);
       wrote.push(homeSrc);
     }
     if (patched.unparsed) {
       notes.push(`${patched.unparsed} onAppear params block(s) in ${homeSrc} could not be read \u2014 any brand values inside them were not applied`);
     }
   }
-  if (!input.iconPath || !existsSync81(input.iconPath)) {
-    const book = input.iconPath ? dirname49(dirname49(resolve63(input.iconPath))) : void 0;
+  if (!input.iconPath || !existsSync82(input.iconPath)) {
+    const book = input.iconPath ? dirname50(dirname50(resolve63(input.iconPath))) : void 0;
     notes.push(
       book ? `no icon installed \u2014 ${siteLogoAbsence(book).hint}` : "no icon installed and no business book to say why \u2014 `himi icon generate` draws one from the accent, or `himi icon set <file.png>` installs the customer's own mark"
     );
   }
-  if (input.iconPath && existsSync81(input.iconPath)) {
+  if (input.iconPath && existsSync82(input.iconPath)) {
     try {
       const installed = await installIcon(cwd, input.iconPath, { derivePlay: true });
       wrote.push(...installed.wrote);
@@ -178886,13 +179260,13 @@ function parseMethod(raw) {
   return m2;
 }
 function jsonFunctionSource(method, name, body) {
-  const json7 = JSON.stringify(body, null, 2).replace(/\n/g, "\n    ");
+  const json8 = JSON.stringify(body, null, 2).replace(/\n/g, "\n    ");
   return `import { ok } from 'wix-http-functions';
 
 export function ${methodPrefix(method)}_${name}(request) {
   return ok({
     headers: { 'Content-Type': 'application/json' },
-    body: ${json7},
+    body: ${json8},
   });
 }
 `;
@@ -179218,12 +179592,12 @@ async function veloCall(fetchImpl, method, url, opts = {}) {
     signal: AbortSignal.timeout(opts.timeoutMs ?? 3e4)
   });
   const text9 = await res.text();
-  let json7 = text9;
+  let json8 = text9;
   try {
-    json7 = text9 ? JSON.parse(text9) : null;
+    json8 = text9 ? JSON.parse(text9) : null;
   } catch {
   }
-  return { status: res.status, json: json7, text: text9 };
+  return { status: res.status, json: json8, text: text9 };
 }
 function snippet2(x2, cap = 180) {
   const s2 = typeof x2 === "string" ? x2 : JSON.stringify(x2) ?? "";
@@ -179274,15 +179648,15 @@ async function patchHttpFunctionsFile(fetchImpl, token, msid, gridAppId, layout,
   else body.filesToUpdate = [{ path: filePath, content }];
   return veloCall(fetchImpl, "PATCH", veloUpdateFilesPath(gridAppId), { token, msid, body });
 }
-function revisionFrom(json7) {
-  if (!json7 || typeof json7 !== "object") return void 0;
-  const r2 = json7;
+function revisionFrom(json8) {
+  if (!json8 || typeof json8 !== "object") return void 0;
+  const r2 = json8;
   const v2 = r2.siteRevision?.revision ?? r2.revision;
   return v2 == null ? void 0 : String(v2);
 }
-function codeAppIdFromRevision(json7) {
-  if (!json7 || typeof json7 !== "object") return void 0;
-  const actions = json7.actions;
+function codeAppIdFromRevision(json8) {
+  if (!json8 || typeof json8 !== "object") return void 0;
+  const actions = json8.actions;
   if (!Array.isArray(actions)) return void 0;
   for (const a2 of actions) {
     if (!a2 || typeof a2 !== "object") continue;
@@ -179482,7 +179856,7 @@ __export(cli_exports3, {
   runSiteAnalyze: () => runSiteAnalyze,
   runSiteFunctionCli: () => runSiteFunctionCli
 });
-import { existsSync as existsSync82, readFileSync as readFileSync104 } from "node:fs";
+import { existsSync as existsSync83, readFileSync as readFileSync105 } from "node:fs";
 import { resolve as resolve64 } from "node:path";
 function applyNeedsClient(shell) {
   if (shell === void 0 || !SHELL_NAMES2.includes(shell)) return true;
@@ -179550,9 +179924,9 @@ async function runSiteAnalyze(opts) {
       if (book?.skipped) result.warnings = [...result.warnings ?? [], book.skipped];
       const derived = deriveSiteShell({ siteUrl: result.book.input.siteUrl, look: result.book.look, kind, routes });
       const prevOverlayPath = resolve64(outDir, "provisioning.overlay.json");
-      const prevSite = existsSync82(prevOverlayPath) ? (() => {
+      const prevSite = existsSync83(prevOverlayPath) ? (() => {
         try {
-          return JSON.parse(readFileSync104(prevOverlayPath, "utf8")).site;
+          return JSON.parse(readFileSync105(prevOverlayPath, "utf8")).site;
         } catch {
           return void 0;
         }
@@ -179571,7 +179945,7 @@ async function runSiteAnalyze(opts) {
   }
   const previousOverlay = resolve64(outDir, "provisioning.overlay.json");
   carryOverGoals(
-    existsSync82(previousOverlay) ? readFileSync104(previousOverlay, "utf8") : void 0,
+    existsSync83(previousOverlay) ? readFileSync105(previousOverlay, "utf8") : void 0,
     result.provisioningOverlay
   );
   const ownerCall = ownerAuth ? ownerTransportFrom(fetchImpl, ownerAuth) : void 0;
@@ -179629,7 +180003,7 @@ async function runSiteFunctionCli(opts) {
   let source;
   if (opts.sourcePath) {
     const p2 = resolve64(opts.cwd ?? process.cwd(), opts.sourcePath);
-    source = readFileSync104(p2, "utf8");
+    source = readFileSync105(p2, "utf8");
   }
   let body;
   if (opts.bodyRaw != null) {
@@ -179657,9 +180031,9 @@ async function runSiteFunctionCli(opts) {
   });
 }
 function base44BookRoutes(bookPath, siteUrl) {
-  if (!existsSync82(bookPath)) return void 0;
+  if (!existsSync83(bookPath)) return void 0;
   try {
-    const book = JSON.parse(readFileSync104(bookPath, "utf8"));
+    const book = JSON.parse(readFileSync105(bookPath, "utf8"));
     if (book.kind !== "base44-app-book" || !Array.isArray(book.routes)) return void 0;
     const host = (u2) => {
       try {
@@ -179914,7 +180288,7 @@ __export(site_create_exports, {
   runSiteList: () => runSiteList,
   writeProvisioningBinding: () => writeProvisioningBinding
 });
-import { existsSync as existsSync83, readFileSync as readFileSync105, writeFileSync as writeFileSync40 } from "node:fs";
+import { existsSync as existsSync84, readFileSync as readFileSync106, writeFileSync as writeFileSync41 } from "node:fs";
 import { resolve as resolvePath2 } from "node:path";
 function oauthClientName(projectName) {
   return `${projectName} client`;
@@ -180063,7 +180437,7 @@ async function runSiteCreate(opts) {
   if (!wantOauthApp) return { ...base, nextSteps: nextSteps(metaSiteId) };
   return { ...base, clientId, redirectUri, nextSteps: nextSteps(metaSiteId, clientId) };
 }
-function writeProvisioningBinding(target, binding2, fs2 = { existsSync: existsSync83, readFileSync: readFileSync105, writeFileSync: writeFileSync40 }) {
+function writeProvisioningBinding(target, binding2, fs2 = { existsSync: existsSync84, readFileSync: readFileSync106, writeFileSync: writeFileSync41 }) {
   const msid = binding2.siteId;
   const path2 = resolvePath2(target);
   const committed = committedShellProvisioning(path2);
@@ -180760,12 +181134,12 @@ var init_context = __esm({
 });
 
 // src/cli.ts
-import { mkdtempSync as mkdtempSync6, readFileSync as readFileSync106, mkdirSync as mkdirSync43, writeFileSync as writeFileSync41, existsSync as existsSync84, rmSync as rmSync24, readdirSync as readdirSync35, statSync as statSync23, lstatSync as lstatSync22, accessSync, constants as constants5, renameSync as renameSync13, cpSync as cpSync3 } from "node:fs";
+import { mkdtempSync as mkdtempSync6, readFileSync as readFileSync107, mkdirSync as mkdirSync44, writeFileSync as writeFileSync42, existsSync as existsSync85, rmSync as rmSync24, readdirSync as readdirSync36, statSync as statSync23, lstatSync as lstatSync22, accessSync, constants as constants5, renameSync as renameSync13, cpSync as cpSync3 } from "node:fs";
 import { execFile as execFile2, execFileSync as execFileSync7, spawnSync as spawnSync5, spawn as spawn7 } from "node:child_process";
 import { AsyncLocalStorage as AsyncLocalStorage2 } from "node:async_hooks";
-import { createHash as createHash45, randomUUID as randomUUID11 } from "node:crypto";
+import { createHash as createHash46, randomUUID as randomUUID11 } from "node:crypto";
 import { tmpdir as tmpdir7, homedir as homedir14, hostname as hostname2 } from "node:os";
-import { join as join90, resolve as resolve65, relative as relative16, basename as basename21, dirname as dirname50 } from "node:path";
+import { join as join91, resolve as resolve65, relative as relative16, basename as basename21, dirname as dirname51 } from "node:path";
 import { fileURLToPath as fileURLToPath29 } from "node:url";
 
 // ../serve-cli/src/client.ts
@@ -180819,17 +181193,17 @@ var ServeCliClient = class {
       body: opts.rawBody !== void 0 ? new Uint8Array(opts.rawBody) : opts.body !== void 0 ? JSON.stringify(opts.body) : void 0
     });
     const text9 = await res.text();
-    let json7 = null;
+    let json8 = null;
     try {
-      json7 = text9 ? JSON.parse(text9) : null;
+      json8 = text9 ? JSON.parse(text9) : null;
     } catch {
-      json7 = null;
+      json8 = null;
     }
     const h2 = {};
     res.headers.forEach((v2, k2) => {
       h2[k2] = v2;
     });
-    return { status: res.status, ok: res.ok, json: json7, text: text9, headers: h2 };
+    return { status: res.status, ok: res.ok, json: json8, text: text9, headers: h2 };
   }
   // ---- serve (device-facing reads) ----
   health(plane) {
@@ -181065,14 +181439,14 @@ var ServeCliClient = class {
     const refusal = res.json;
     const decodedOverPlainCap = res.status === 413 && refusal?.error === "payload_too_large" && refusal.limit === MAX_PUBLISH_BODY_BYTES && bytes2.byteLength <= MAX_PUBLISH_BODY_BYTES;
     if (gzip && (res.status === 400 && refusal?.error === "bad_json" || decodedOverPlainCap)) {
-      const json7 = {
+      const json8 = {
         code: "compressed_publish_unsupported",
         error: "compressed_publish_unsupported",
         hint: "this body is over the plain publish cap, and the plane did not accept it compressed: either the plane predates compressed publish bodies (it needs a serve deploy), or this is a self-serve credential, which keeps the plain 8 MB cap",
         sentBytes: bytes2.byteLength,
         ...typeof refusal?.bytes === "number" ? { planeCountedBytes: refusal.bytes } : {}
       };
-      return { ...res, json: json7, text: JSON.stringify(json7) };
+      return { ...res, json: json8, text: JSON.stringify(json8) };
     }
     return res;
   }
@@ -181451,8 +181825,8 @@ var BO_WEWIX_COOKIE = "WixBoAuthentication-wewix";
 function dpxCookieHeader(raw) {
   const trimmed = raw.trim();
   try {
-    const json7 = Buffer.from(trimmed, "base64url").toString("utf8");
-    const obj4 = JSON.parse(json7);
+    const json8 = Buffer.from(trimmed, "base64url").toString("utf8");
+    const obj4 = JSON.parse(json8);
     if (obj4 && typeof obj4 === "object") {
       const pairs = [
         typeof obj4.wewix === "string" ? `${BO_WEWIX_COOKIE}=${obj4.wewix}` : void 0,
@@ -182851,8 +183225,8 @@ var str10 = (v2) => typeof v2 === "string" ? v2 : void 0;
 var num3 = (v2) => typeof v2 === "string" && v2 !== "" && Number.isFinite(Number(v2)) ? Number(v2) : void 0;
 function embeddedTemplateCatalog() {
   return availableTemplates().map((name) => {
-    const path2 = join90(templateSourceDir(name), TEMPLATE_META_FILE);
-    const meta = JSON.parse(readFileSync106(path2, "utf8"));
+    const path2 = join91(templateSourceDir(name), TEMPLATE_META_FILE);
+    const meta = JSON.parse(readFileSync107(path2, "utf8"));
     if (!meta || typeof meta.title !== "string" || typeof meta.description !== "string" || !Array.isArray(meta.tags)) {
       throw new Error(`${path2} must be { title: string, description: string, tags: string[], category?: string }`);
     }
@@ -183572,6 +183946,12 @@ var USAGE = `himi \u2014 the Himalaya authoring CLI (remote dev loop)
                                            write tier5-src/_shared/base44-entities.ts: a row type and
                                            a typed entities<Row>() handle per declared entity.
                                            himi validate flags it base44-types-stale when stale.
+  himi base44 screens [--content <dir>] [--force] [--dry-run] [--json]
+                                           generate one list + detail screen per declared
+                                           base44.entities entity (base44-starter packages), write
+                                           controls gated by each entity's rls. Re-running is a
+                                           no-op; a hand-edited generated file is skipped-edited
+                                           unless --force. Never calls Base44.
   himi base44 login [--from-base44-cli] | whoami | logout
                                            the Base44 session, in ~/.himi/base44/ (never the repo).
                                            BASE44_ACCESS_TOKEN wins, for CI.
@@ -183719,7 +184099,7 @@ var COMMANDS2 = [
   { name: "notify", summary: "Hosted --all-members requires --yes for a live send; --dry-run checks ownership/readiness and counts approved recipients without sending. `setup` optionally configures Branded/Ping from local customer key files; `status --refresh` reads live backend readiness. Setup may be deferred while building. These use serve-control and require owner plus Wix account authentication. `send`, `tokens`, `doctor`: send a REAL push notification to registered devices (RFC 0036 WS5) \u2014 APNs .p8 over HTTP/2 for iOS, FCM v1 for Android. `send` targets one device (--token / --device <registry id>) or fans out to the whole app (--all), reporting a per-device result; a token the provider says is uninstalled (APNs 410 Unregistered / FCM UNREGISTERED) is auto-disabled, while a merely wrong one (BadDeviceToken \u2014 usually a sandbox/production mismatch) is recorded and left enabled. `tokens` lists the registry. `doctor` reports which credentials resolve and which sender each platform picks. Talks to the admin-server via --admin-url/HIMALAYA_ADMIN_URL, authenticated with --admin-session/HIMALAYA_ADMIN_SESSION. `send --provider ping` is the hosted alternative: the serve plane sends to one site member (--member-email) or all approved members (--all-members) through Ping as Himalaya, with owner login instead of provider keys, and reports acceptance, never delivery. NOT `himi push`, which publishes a release.", required: "setup|status [--content <dir>] [--target <t>] [--refresh] [--yes] [--no-push-setup] | send --provider ping [--content <dir>] [--app <a>] [--site <msid>] (--member-email <email> | --all-members (--dry-run | --yes)) --title <s> [--body <s>] --link <url> [--request-id <uuid>] [--dry-run] [--json] | send|tokens|doctor [--app <a>] [--token <t> | --device <id> | --all] [--title <s>] [--body <s>] [--link <url>] [--platform ios|android] [--badge <n>] [--channel <id>] [--silent] [--dry-run] [--json]" },
   { name: "signing", summary: "READ-ONLY App Store Connect inventory for customer BYO TestFlight readiness. `inspect` lists whether the bundle id, distribution certificate, IOS_APP_STORE profile, and ASC app record exist for --bundle-id / --team-id using a local ASC .p8 (flags or ASC_KEY_* env). Never uploads or mutates Apple resources. Optional --cert-file/--profile-file classify on-disk material.", required: "inspect --bundle-id <id> --team-id <id> --asc-key-file <path> --asc-key-id <id> --asc-issuer-id <id> [--cert-file <p12> --cert-password <pw> --profile-file <mobileprovision>] [--json]" },
   { name: "site", summary: "PROVISION a Wix project, then analyze or extend it. `create` is the one door that makes a site instead of adopting one: POST /funnel/projects/v1/create (a WIX site, a HEADLESS backend, a BRANDED_APP, or a VIBE site), and for headless it also mints the OAuth app whose id IS the `WIX_CLIENT_ID` \u2014 with --redirect-uri already registered, because an unregistered redirect makes native signInDirect fail at redirect-session. `--verticals` REQUIRES `--template` and reports only what Wix confirmed: measured, installing onto a project created from the BLANK template returns 200 while the vertical's API answers 428 forever, because there is no site for it to attach to (the install asks for CREATE_SITE). A real template ships its verticals installed and populated, and installing further ones onto it then works. It MUTATES your Wix account and needs --yes; without it you get the payload and nothing is sent. `list` is the read-only site inventory (with each site's premium flag, which is what explains an installed-but-428 vertical). Auth is the account-scoped `wix token` (no --site), falling back to WIX_API_KEY + WIX_ACCOUNT_ID. `client` is the same OAuth step for a site that ALREADY exists \u2014 the one himi adopts rather than makes \u2014 so a clientId no longer means a manual trip to the dashboard: `client ensure` reconciles rather than mints, because a site can already carry a client with NO registered redirect and shipping that one fails signInDirect at runtime; it reuses a client that carries --redirect-uri, PATCHes one that matches --name but lacks it (unioning, so another app's redirect survives), and creates only when there is nothing to reuse (--new forces a fresh one). --name IS the idempotency key. `client` auth is SITE-scoped (`wix token --site <msid>`) because minting is owner-of-that-site, and --yes gates every mutation: a site that already has a usable client resolves WITHOUT it, but --write-provisioning needs --yes even then because it rewrites a manifest on disk (the dry run's planned.provisioning names the file). That query endpoint IGNORES paging (measured: query.paging, cursorPaging and a top-level paging all return the full set at offset 0), so when pagingMetadata reports more clients than came back, `ensure` REFUSES EVERY outcome \u2014 create, patch AND reuse. Reuse is refused too because pickClient breaks ties on the OLDEST createdDate, so an omitted older same-named MOBILE client with the same redirect would win a later complete read and the resolved clientId would MOVE between runs \u2014 and it gets written into provisioning.json; convergence is what makes a stray duplicate untidy rather than harmful. --name cannot narrow the query (no filter is sent; the name is applied to the rows after they arrive), so the recovery is the dashboard; --new skips the query entirely. A `patched` result is verified against what Wix STORED \u2014 the redirect list is read off the PATCH response, and re-read via GET when the response omits it, because falling back to the list himi just sent would make the guard pass vacuously on exactly the silent no-op it exists to catch. `client list` is the read-only inventory of a site's clients: act on its `shippable` column rather than `hasRedirect`, because shippable ALSO requires a MOBILE applicationType and `ensure` refuses a WEB client \u2014 a WEB one carrying your redirect looks right and is not a candidate \u2014 and it sets truncated:true rather than presenting a partial inventory as the whole one. `analyze --read-only` returns API-only generation context as JSON (identity, access probes, CMS permissions and selected redacted Velo source); it needs no browser and never uploads or applies anything. A URL is optional there: `--url` lets it read the published page's Velo code-app ids (credential-free, pinned transport) so the backend source is found on sites where the owner code-app probe 404s. `analyze` reads a site into a business-book folder (REST + Playwright, GET-only); `--url` alone is the visitor-only pass over the published pages, and `--client-id` adds the vertical probes and the app binding `--apply` requires; `site function` list/get/put/publish/invokes that site's Velo HTTP functions and is not `himi functions` (serve-plane jobs). `--apply` bakes into a brandable shell (a site shell needs no `--client-id`: it is visitor-only and binds no client); `--shell` takes the same names `himi dist --shell` does and defaults to branded-lite, and a shell that ships no prepare:customer is refused by name rather than half-built. `--shell brandy` (the site shell, RFC 0062) also derives the site's page map from its published pages and header menu \u2014 Home first, up to four tabs for the pages a visitor returns to, the rest in the drawer \u2014 into the overlay's `site` block, so it can be edited before `--apply`; only a site shell ever receives that block. It never overwrites any shell's committed apps/<shell>/provisioning.json. `member-app set|clear|show <msid>` is the site's member app in Spaces (#4091): the himi app the site's members open in Spaces Lite instead of Branded Lite. `set --app <id>` takes the site's own app or one your account owns (an owned app not yet tied to the site is linked first; another account's app is refused, 403); `clear` returns the site to Branded Lite; `show` prints the pick plus the COMPUTED verdict \u2014 the picked release's requirements judged against the Spaces host manifest (checkHostCompatibility, `--platform` to judge one phone platform) \u2014 and `reason` when it falls back to Branded Lite. Auth is your `himi login` control token plus the account `wix token`, which the plane uses to verify you own the site.", required: "create <name> [--type wix|headless|branded-app|vibe] [--template <guid>] [--verticals stores,bookings,\u2026] [--folder <guid>] [--redirect-uri <uri>] [--no-oauth-app] [--write-provisioning [path]] [--site-url <url>] [--json] --yes | list | client ensure|list --site <msid> [--name <name>] [--redirect-uri <uri>] [--new] [--write-provisioning [path]] [--site-url <url>] [--json] --yes | analyze --read-only [--site <msid>] [--client-id <id>] [--url <https>] [--json] | analyze --url <https> [--client-id <id>] [--site <msid>] [--out <dir>] [--redirect-uri <uri>] [--apply] [--shell " + SHELL_ENUM + "] | function list|get|put|publish|invoke [--site <msid>] [--url <https>] [--method GET|POST|PUT|DELETE] [--source <file>] [--body <json>] [--publish] [--invoke] | member-app set|clear|show <msid> [--app <id>] [--platform ios|android]" },
-  { name: "base44", summary: "read a BASE44 app into an app book (book.json + BOOK.md) for the agent building a Himi app from it \u2014 the Base44 counterpart of `site analyze`, READ-ONLY. `analyze --url <published app>` is the VISITOR pass: the app id, name, favicon and colours from the published SPA, its router paths, and screenshots + look tokens from the Playwright crawl. `analyze --app-id <id>` adds the OWNER pass and needs a session: the project source under <out>/source/ (the read half of `base44 eject` \u2014 GET api/apps/<id>/eject \u2014 through the same deny-list and secret scan `himi push` uses, widened by the book's token shapes; `eject` itself is never run because it CREATES a copy of the app), every entity's JSON schema, required fields and RLS rules with up to --sample redacted rows (default 5, 0 = off), backend functions, agents, connectors (names and scopes only, never tokens), secret NAMES (never values), auth visibility + providers, and the route \u2192 component \u2192 entities map from the source router. Every chapter it could not read is listed in `gaps` rather than failing the run. `login` runs Base44's device sign-in and stores the session in ~/.himi/base44/session.json (never the repo; --from-base44-cli imports `npx base44 login`'s session instead); BASE44_ACCESS_TOKEN in the environment wins, for CI. `whoami` prints who is signed in (never the token); `logout` removes the stored session. `auth-check --url <tenant> --ios-app-id <PREFIX.bundle.id>` and/or `--android-package <package> --android-sha256 <fingerprint>` checks public native-login associations and prints missing entries; it never reads an owner token. --json prints the book itself. himi docs base44-app-context. `adopt` turns the book into a reviewable base44-entities.ts of ADOPTED entity + function declarations for config.ts (never edits config.ts, never overwrites); `entities query` is READ-ONLY and reports, per declared entity, ownership, row count and schema drift against the live app, plus foreign entities. `types` writes tier5-src/_shared/base44-entities.ts \u2014 a row type and a typed `entities<Row>()` handle per declared entity, byte-stable \u2014 and `himi validate` reports base44-types-stale when that file falls behind the block (nothing when it is absent). himi docs base44-entities", required: "analyze (--url <https://\u2026> | --app-id <id>) [--out .himi/base44-book] [--sample <n>] [--json] | adopt [--book .himi/base44-book] [--entities A,B] [--write [path]] [--json] | entities query [--content <dir>] [--all] [--json] | types [--content <dir>] [--json] | login [--from-base44-cli] | whoami | logout | auth-check --url <https://tenant> [--ios-app-id <PREFIX.bundle.id>] [--android-package <package> --android-sha256 <fingerprint>]" },
+  { name: "base44", summary: "read a BASE44 app into an app book (book.json + BOOK.md) for the agent building a Himi app from it \u2014 the Base44 counterpart of `site analyze`, READ-ONLY. `analyze --url <published app>` is the VISITOR pass: the app id, name, favicon and colours from the published SPA, its router paths, and screenshots + look tokens from the Playwright crawl. `analyze --app-id <id>` adds the OWNER pass and needs a session: the project source under <out>/source/ (the read half of `base44 eject` \u2014 GET api/apps/<id>/eject \u2014 through the same deny-list and secret scan `himi push` uses, widened by the book's token shapes; `eject` itself is never run because it CREATES a copy of the app), every entity's JSON schema, required fields and RLS rules with up to --sample redacted rows (default 5, 0 = off), backend functions, agents, connectors (names and scopes only, never tokens), secret NAMES (never values), auth visibility + providers, and the route \u2192 component \u2192 entities map from the source router. Every chapter it could not read is listed in `gaps` rather than failing the run. `login` runs Base44's device sign-in and stores the session in ~/.himi/base44/session.json (never the repo; --from-base44-cli imports `npx base44 login`'s session instead); BASE44_ACCESS_TOKEN in the environment wins, for CI. `whoami` prints who is signed in (never the token); `logout` removes the stored session. `auth-check --url <tenant> --ios-app-id <PREFIX.bundle.id>` and/or `--android-package <package> --android-sha256 <fingerprint>` checks public native-login associations and prints missing entries; it never reads an owner token. --json prints the book itself. himi docs base44-app-context. `adopt` turns the book into a reviewable base44-entities.ts of ADOPTED entity + function declarations for config.ts (never edits config.ts, never overwrites); `entities query` is READ-ONLY and reports, per declared entity, ownership, row count and schema drift against the live app, plus foreign entities. `types` writes tier5-src/_shared/base44-entities.ts \u2014 a row type and a typed `entities<Row>()` handle per declared entity, byte-stable \u2014 and `himi validate` reports base44-types-stale when that file falls behind the block (nothing when it is absent). himi docs base44-entities. `screens` (base44-starter packages) writes one generated list + detail screen per declared entity over the template's shared engine, with write controls gated by the entity's rls; an unchanged config reports every file `unchanged`, a hand-edited generated file is `skipped-edited` unless --force; never calls Base44. himi docs base44-app-to-himi-app", required: "analyze (--url <https://\u2026> | --app-id <id>) [--out .himi/base44-book] [--sample <n>] [--json] | adopt [--book .himi/base44-book] [--entities A,B] [--write [path]] [--json] | entities query [--content <dir>] [--all] [--json] | types [--content <dir>] [--json] | screens [--content <dir>] [--force] [--dry-run] [--json] | login [--from-base44-cli] | whoami | logout | auth-check --url <https://tenant> [--ios-app-id <PREFIX.bundle.id>] [--android-package <package> --android-sha256 <fingerprint>]" },
   { name: "doctor", summary: 'off-VPN preflight in one shot: probe the PUBLIC data plane (www.wixapis.com \u2014 reachable off-VPN), the INTERNAL serve/control plane for the selected target (VPN-gated), and report auth state (dpx session on disk + stored control token). --dpx additionally runs a live, EADDRINUSE-safe `dpx whoami`. Machine-readable with --json (an unreachable internal plane carries a stable code:"needs_vpn" so an agent branches on the code, not the prose); human-readable otherwise. Never loads the authoring runtime \u2014 works off-repo.', required: "[--target <t>] [--dpx] [--json] [--data-url <url>] [--timeout <ms>]" },
   { name: "upgrade", summary: "install the newest published CLI (`npm i -g @wix/himalaya-cli@latest`) and report what moved. This is the explicit door: himi also updates itself when the running build is more than a week old \u2014 unattended it just does it and re-runs your command, at a terminal it asks first \u2014 and `HIMI_NO_UPDATE_CHECK=1` turns that off, leaving this command as the way to catch up. Reports `unchanged` rather than claiming success when npm exits 0 without moving the version, which is what a registry mirror serving its own pinned copy looks like.", required: "[--json]" },
   { name: "push", summary: "lint + build + publish a release (default --draft: servable via ?release= but NOT live). REFUSES to publish on any error unless --force; --strict promotes warnings. Prints preview + agent-context links. A successful draft push also rebuilds the making-of (.himi/making-of.html, local and offline) and names it as `reel` \u2014 the file to hand the owner beside the preview link. Its postcard carries the home shot only when that shot is newer than the last source edit; a repeat draft's postcard adds what changed since the last one (\"Since the last draft: the home screen changed.\", from the release manifests' screen hashes, remembered in .himi/last-draft.json); otherwise the postcard says why and names `himi render <home> --png`, and the envelope's `postcardPicture: {skipped, render}` leads next[] with that render (the push never renders it itself). The published slug is NAMESPACED per owner \u2014 `<ownerPrefix>.<name>`, composed offline from the control token's ownerPrefix claim, so the CLI and the server derive the identical string and himalaya.content.json is NOT rewritten (a legacy token with no ownerPrefix publishes the declared name unchanged). An app claimed BEFORE namespacing is stored under its FLAT slug, so the claim route answers `alreadyYours` naming that slug and the push adopts it \u2014 reported as `adoptedSlug`, since it is the one case where the published `app` differs from what the declared name composes to. `--no-claim` skips the route that knows this, so a pre-namespacing app pushed with it still fails 403. --visibility public|unlisted decides whether /v1/apps + the Himi Player picker LIST the app (also declarable as `visibility` in himalaya.content.json; omitted, a brand-new app defaults to unlisted \u2014 share by link \u2014 and an existing setting is kept). --account-id names which account owns the app when your Wix session resolves to several (the auto-claim of a brand-new slug cannot guess \u2014 without it a multi-account caller is told to name one). An unforced push of a release that carries SCREENS also refuses when `.himi/ux-audit.json` holds no mobile-UX drive recorded against that release id, or holds one that FAILED (#2955) \u2014 a published draft IS the owner-private preview a customer is handed; `himi ux record` clears it and `--force` overrides it, which the success envelope then says out loud. `--only <selector>` publishes ONLY the named items as a release derived from the app's live release (or `--from-release <id>`), running the identical build + lint gate and simply publishing less; it requires an explicit `--draft` or `--live` because a partial publish has no safe default, never claims a slug, and carries neither attestation nor a source archive (both named in the output). Selectors are comma-separated in ONE `--only`: `changed` (every item whose bytes differ from the base), `screen:<id|glob>`, `bundle:<name>`, `tokens`, `app-config` \u2014 a selected screen drags its logic bundle and a selected bundle drags the screens that reference it, or the bytes land under a key nothing reads. The plane REFUSES (409 binary_capability_gap) a release declaring a PERMISSION-BEARING capability (iOS usage string or entitlement, Android permission \u2014 camera, location, push, \u2026) that the app's last successful `himi dist` was not built with: an OTA push cannot add an OS permission, and on iOS asking for one whose purpose string is missing kills the app. Run `himi dist` first, or pass `--allow-binary-gap` when every installed binary already carries it \u2014 recorded on the release as `allowedBinaryGap`. A gap in a permission-free capability (share, clipboard, \u2026) stays the `needsBinary` advice.", required: "[--content <dir>] [--draft] [--live] [--force] [--strict] [--label] [--notes] [--visibility public|unlisted] [--allow-binary-gap] [--no-claim] [--account-id <id>] [--only <selector>] [--from-release <id>] [--accept-regressions] [--accept-partial] [--app <slug>] (--control-token)" },
@@ -183761,7 +184141,7 @@ var COMMANDS2 = [
 ];
 function cliVersion() {
   try {
-    return JSON.parse(readFileSync106(new URL("../package.json", import.meta.url), "utf8")).version ?? "unknown";
+    return JSON.parse(readFileSync107(new URL("../package.json", import.meta.url), "utf8")).version ?? "unknown";
   } catch {
     return "unknown";
   }
@@ -183852,10 +184232,10 @@ async function fetchPackumentFrom(registry2, fetchImpl, timeoutMs) {
       signal: controller.signal
     });
     if (!response.ok) return void 0;
-    const json7 = await response.json();
-    const latest = typeof json7?.["dist-tags"]?.latest === "string" ? json7["dist-tags"].latest : void 0;
+    const json8 = await response.json();
+    const latest = typeof json8?.["dist-tags"]?.latest === "string" ? json8["dist-tags"].latest : void 0;
     const time = {};
-    for (const [version4, when] of Object.entries(json7?.time ?? {})) if (typeof when === "string") time[version4] = when;
+    for (const [version4, when] of Object.entries(json8?.time ?? {})) if (typeof when === "string") time[version4] = when;
     return latest ? { latest, time, registry: normalizeRegistry(registry2) ?? registry2 } : void 0;
   } catch {
     return void 0;
@@ -183886,7 +184266,7 @@ function ageInDays(publishedAt, now = Date.now()) {
 }
 function packageVersion(path2) {
   try {
-    const version4 = JSON.parse(readFileSync106(path2, "utf8")).version;
+    const version4 = JSON.parse(readFileSync107(path2, "utf8")).version;
     return typeof version4 === "string" && version4 ? version4 : void 0;
   } catch {
     return void 0;
@@ -183895,9 +184275,9 @@ function packageVersion(path2) {
 function resolvedSdkVersion(fromDir = process.cwd(), bundledManifest = new URL("./authoring-runtime/node_modules/@wix/himalaya/package.json", import.meta.url)) {
   let dir = resolve65(fromDir);
   for (; ; ) {
-    const version4 = packageVersion(join90(dir, "node_modules", "@wix", "himalaya", "package.json"));
+    const version4 = packageVersion(join91(dir, "node_modules", "@wix", "himalaya", "package.json"));
     if (version4) return { version: version4, source: "local" };
-    const parent = dirname50(dir);
+    const parent = dirname51(dir);
     if (parent === dir) break;
     dir = parent;
   }
@@ -183905,7 +184285,7 @@ function resolvedSdkVersion(fromDir = process.cwd(), bundledManifest = new URL("
   if (bundled) return { version: bundled, source: "bundled" };
   try {
     const root = execFileSync7("npm", ["root", "-g"], { stdio: ["ignore", "pipe", "ignore"] }).toString().trim();
-    const version4 = root ? packageVersion(join90(root, "@wix", "himalaya", "package.json")) : void 0;
+    const version4 = root ? packageVersion(join91(root, "@wix", "himalaya", "package.json")) : void 0;
     return version4 ? { version: version4, source: "global" } : {};
   } catch {
     return {};
@@ -183952,11 +184332,11 @@ var UPDATE_RETRY_AFTER_FAILURE_MS = 60 * 60 * 1e3;
 var UPDATE_SNOOZE_MS = 24 * 60 * 60 * 1e3;
 var UPDATE_REEXEC_ENV = "HIMI_UPDATED_ONCE";
 function updateCachePath(env = process.env) {
-  return env.HIMI_UPDATE_CACHE_FILE ?? join90(homedir14(), ".himalaya", "update-check.json");
+  return env.HIMI_UPDATE_CACHE_FILE ?? join91(homedir14(), ".himalaya", "update-check.json");
 }
 function readUpdateCache(path2) {
   try {
-    const parsed = JSON.parse(readFileSync106(path2, "utf8"));
+    const parsed = JSON.parse(readFileSync107(path2, "utf8"));
     return parsed && typeof parsed === "object" ? parsed : {};
   } catch {
     return {};
@@ -183964,8 +184344,8 @@ function readUpdateCache(path2) {
 }
 function writeUpdateCache(path2, cache) {
   try {
-    mkdirSync43(dirname50(path2), { recursive: true, mode: 448 });
-    writeFileSync41(path2, JSON.stringify(cache, null, 2) + "\n", { mode: 384 });
+    mkdirSync44(dirname51(path2), { recursive: true, mode: 448 });
+    writeFileSync42(path2, JSON.stringify(cache, null, 2) + "\n", { mode: 384 });
   } catch {
   }
 }
@@ -184025,12 +184405,12 @@ function createUpdateRunner(spawn8 = spawnSync5) {
     },
     installedVersion: () => {
       const root = globalNodeModulesRoot();
-      return root ? packageVersion(join90(root, "@wix", "himalaya-cli", "package.json")) : void 0;
+      return root ? packageVersion(join91(root, "@wix", "himalaya-cli", "package.json")) : void 0;
     },
     reexec: (argv) => {
       const root = globalNodeModulesRoot();
-      const entry = root ? join90(root, "@wix", "himalaya-cli", "dist", "cli.mjs") : void 0;
-      if (!entry || !existsSync84(entry)) return void 0;
+      const entry = root ? join91(root, "@wix", "himalaya-cli", "dist", "cli.mjs") : void 0;
+      if (!entry || !existsSync85(entry)) return void 0;
       const result = spawnSync5(process.execPath, [entry, ...argv], {
         // inherit keeps PIPED STDIN working — commands that read stdin must survive a re-exec.
         stdio: "inherit",
@@ -184077,7 +184457,7 @@ function staleUpdateLockFile(cachePath, now) {
   for (const path2 of [`${cachePath}.lock.break`, `${cachePath}.lock`]) {
     let content;
     try {
-      content = readFileSync106(path2, "utf8");
+      content = readFileSync107(path2, "utf8");
     } catch {
       continue;
     }
@@ -184100,14 +184480,14 @@ function acquireUpdateLock(cachePath, now, hooks = {}) {
   const mine = lockStamp(now);
   const readLock = (path2) => {
     try {
-      return readFileSync106(path2, "utf8");
+      return readFileSync107(path2, "utf8");
     } catch {
       return void 0;
     }
   };
   const tryCreate = (path2) => {
     try {
-      writeFileSync41(path2, mine, { flag: "wx", mode: 384 });
+      writeFileSync42(path2, mine, { flag: "wx", mode: 384 });
       return true;
     } catch {
       return false;
@@ -184121,7 +184501,7 @@ function acquireUpdateLock(cachePath, now, hooks = {}) {
   };
   const release2 = () => removeIfMine(lockPath);
   try {
-    mkdirSync43(dirname50(lockPath), { recursive: true, mode: 448 });
+    mkdirSync44(dirname51(lockPath), { recursive: true, mode: 448 });
   } catch {
     return () => {
     };
@@ -184692,7 +185072,7 @@ function executableOnPath(name, env = process.env) {
   const suffixes = process.platform === "win32" ? (env.PATHEXT ?? ".COM;.EXE;.BAT;.CMD").split(";").filter(Boolean) : [""];
   for (const dir of entries) {
     for (const suffix of suffixes) {
-      const candidate = join90(dir, `${name}${suffix}`);
+      const candidate = join91(dir, `${name}${suffix}`);
       try {
         if (!statSync23(candidate).isFile()) continue;
         if (process.platform !== "win32") accessSync(candidate, constants5.X_OK);
@@ -184801,7 +185181,7 @@ async function nativeConfigAdvisories(app, configSource) {
     const { iosProjectYml: iosProjectYml2 } = await Promise.resolve().then(() => (init_paths2(), paths_exports));
     const { androidOptedIn: androidOptedIn3, LABEL_IOS_SPLASH: LABEL_IOS_SPLASH2 } = await Promise.resolve().then(() => (init_splash(), splash_exports));
     const iosYmlPath = iosProjectYml2(app);
-    const iosYml = existsSync84(iosYmlPath) ? readFileSync106(iosYmlPath, "utf8") : "";
+    const iosYml = existsSync85(iosYmlPath) ? readFileSync107(iosYmlPath, "utf8") : "";
     let optedIn = iosYml.includes(LABEL_IOS_SPLASH2);
     if (!optedIn) {
       const { androidManifestPath: androidManifestPath3 } = await Promise.resolve().then(() => (init_gen_native_config(), gen_native_config_exports));
@@ -184815,14 +185195,14 @@ async function nativeConfigAdvisories(app, configSource) {
 }
 function readConfigSource(dir) {
   try {
-    return readFileSync106(join90(dir, "config.ts"), "utf8");
+    return readFileSync107(join91(dir, "config.ts"), "utf8");
   } catch {
     return null;
   }
 }
 function writePngFile(path2, base64) {
-  mkdirSync43(dirname50(path2), { recursive: true });
-  writeFileSync41(path2, Buffer.from(base64, "base64"));
+  mkdirSync44(dirname51(path2), { recursive: true });
+  writeFileSync42(path2, Buffer.from(base64, "base64"));
   return path2;
 }
 async function seedAgentFilesFor(dir, flags, mode = "init") {
@@ -184869,7 +185249,7 @@ var NoBase44SlotError = class extends Error {
 };
 async function initFromRemoteTemplate(name, parentDir, template, c2, opts = {}) {
   const dir = resolve65(parentDir, name);
-  if (existsSync84(join90(dir, "himalaya.content.json"))) {
+  if (existsSync85(join91(dir, "himalaya.content.json"))) {
     throw new Error(`content package already exists at ${dir}`);
   }
   const r2 = await c2.fetchTemplateSource(TEMPLATE_APP_PREFIX + template);
@@ -184915,11 +185295,11 @@ function symlinkDestinationIssue(dest) {
 function restoreDestinationIssue(dest, force) {
   const link = symlinkDestinationIssue(dest);
   if (link) return link;
-  if (!existsSync84(dest)) return null;
+  if (!existsSync85(dest)) return null;
   if (!statSync23(dest).isDirectory()) {
     return { error: `${dest} exists and is not a directory`, hint: "pass --out/--name to land somewhere else, or remove the file" };
   }
-  if (readdirSync35(dest).length > 0 && !force) {
+  if (readdirSync36(dest).length > 0 && !force) {
     return {
       error: `${dest} already exists and is not empty`,
       hint: "pass --force to write into it anyway, or --out/--name to land somewhere else"
@@ -184930,8 +185310,8 @@ function restoreDestinationIssue(dest, force) {
 function isHimalayaMonorepoCheckout(start) {
   let dir = resolve65(start);
   for (; ; ) {
-    if (existsSync84(join90(dir, "tools", "himi-cli", "src", "cli.ts")) && existsSync84(join90(dir, "core", "serve", "src", "server.ts"))) return true;
-    const parent = dirname50(dir);
+    if (existsSync85(join91(dir, "tools", "himi-cli", "src", "cli.ts")) && existsSync85(join91(dir, "core", "serve", "src", "server.ts"))) return true;
+    const parent = dirname51(dir);
     if (parent === dir) return false;
     dir = parent;
   }
@@ -184982,7 +185362,7 @@ function templateNameError(name, from) {
   const composed2 = TEMPLATE_APP_PREFIX + name;
   return isValidAppId(composed2) ? null : `template name "${name}" (${from}) makes app id "${composed2}", which is over the serve plane's app-id length limit; pass a shorter --name`;
 }
-function materializeForPreview(appDir3, slug, displayName2) {
+function materializeForPreview(appDir3, slug, displayName3) {
   if (!isTemplateSourceTree(appDir3)) return appDir3;
   const slugError = templateNameError(slug, "preview slug");
   if (slugError) throw Object.assign(new Error(slugError), { exitCode: 2 });
@@ -184991,7 +185371,7 @@ function materializeForPreview(appDir3, slug, displayName2) {
     Object.entries(files).map(([rel, body]) => [rel, rel === "himalaya.content.json" ? substituteIdentity(body, slug) : body])
   );
   const repoRoot2 = resolve65(fileURLToPath29(new URL("../../..", import.meta.url)));
-  const root = join90(repoRoot2, "node_modules", ".cache", "himi-template-preview");
+  const root = join91(repoRoot2, "node_modules", ".cache", "himi-template-preview");
   const stillRunning = (pid) => {
     try {
       process.kill(pid, 0);
@@ -185001,20 +185381,20 @@ function materializeForPreview(appDir3, slug, displayName2) {
     }
   };
   try {
-    for (const entry of readdirSync35(root, { withFileTypes: true })) {
+    for (const entry of readdirSync36(root, { withFileTypes: true })) {
       if (!entry.isDirectory()) continue;
       const pid = Number(entry.name.startsWith(`${slug}-`) ? entry.name.slice(slug.length + 1) : NaN);
       if (Number.isInteger(pid) && pid > 0 && pid !== process.pid && !stillRunning(pid)) {
-        rmSync24(join90(root, entry.name), { recursive: true, force: true });
+        rmSync24(join91(root, entry.name), { recursive: true, force: true });
       }
     }
   } catch {
   }
-  const dest = join90(root, `${slug}-${process.pid}`);
+  const dest = join91(root, `${slug}-${process.pid}`);
   rmSync24(dest, { recursive: true, force: true });
-  mkdirSync43(dest, { recursive: true });
+  mkdirSync44(dest, { recursive: true });
   try {
-    materializeSource(forBuild, displayName2, dest, slug);
+    materializeSource(forBuild, displayName3, dest, slug);
   } catch (e2) {
     rmSync24(dest, { recursive: true, force: true });
     throw e2;
@@ -185023,8 +185403,8 @@ function materializeForPreview(appDir3, slug, displayName2) {
 }
 async function appId(dir) {
   try {
-    const { readFileSync: readFileSync107 } = await import("node:fs");
-    const m2 = JSON.parse(readFileSync107(join90(dir, "himalaya.content.json"), "utf8"));
+    const { readFileSync: readFileSync108 } = await import("node:fs");
+    const m2 = JSON.parse(readFileSync108(join91(dir, "himalaya.content.json"), "utf8"));
     if (m2.name) return m2.name;
   } catch {
   }
@@ -185032,8 +185412,8 @@ async function appId(dir) {
 }
 async function contentVisibility(dir) {
   try {
-    const { readFileSync: readFileSync107 } = await import("node:fs");
-    const m2 = JSON.parse(readFileSync107(join90(dir, "himalaya.content.json"), "utf8"));
+    const { readFileSync: readFileSync108 } = await import("node:fs");
+    const m2 = JSON.parse(readFileSync108(join91(dir, "himalaya.content.json"), "utf8"));
     if (m2.visibility === "public" || m2.visibility === "unlisted") return m2.visibility;
   } catch {
   }
@@ -185325,7 +185705,7 @@ Seed your coding agent with \`himi agent-init\`. Guides: ${idx.portalUrl}`);
         ...res.removed.length ? { removed: res.removed, note: "older copies at the app root, moved to .himi/legacy-agent-files/ (a backup, in case one became app code) \u2014 the current ones live in .agents/skills/himalaya/" } : {},
         // In a git repo the refresh moves the diff identity an earlier `himi test` attested (that
         // hash is shared with the repo gates and deliberately exempts nothing but its own metadata).
-        ...existsSync84(join90(dir, ".himi", "attestations", "latest.json")) ? { next: "if `himi push` then refuses the attestation as stale, re-run `himi test` \u2014 in a git checkout this refresh changed the tree it covered" } : {},
+        ...existsSync85(join91(dir, ".himi", "attestations", "latest.json")) ? { next: "if `himi push` then refuses the attestation as stale, re-run `himi test` \u2014 in a git checkout this refresh changed the tree it covered" } : {},
         ...res.skipped.length ? { skipped: res.skipped } : {},
         portalUrl: idx.portalUrl
       });
@@ -185348,7 +185728,7 @@ async function recordedReleaseForContentQuietly(dir, resolution, onDrift) {
   try {
     const { buildContentForValidation: buildContentForValidation2, buildReleaseFromContent: buildReleaseFromContent2, bundleOutDir: bundleOutDir2 } = await loadAuthoring();
     const bres = await buildContentForValidation2(dir, { resolution });
-    out2 = mkdtempSync6(join90(tmpdir7(), "himi-ux-record-"));
+    out2 = mkdtempSync6(join91(tmpdir7(), "himi-ux-record-"));
     const hasWorkers = bres.built.length > 0 || bres.compileErrors.length > 0;
     const outcome = await buildReleaseFromContent2(dir, out2, { ...hasWorkers ? { tier5Dir: bundleOutDir2(dir) } : {}, collect: { lint: true } });
     const releaseId = outcome.manifest.releaseId;
@@ -185516,7 +185896,7 @@ async function producedWidgetFamilies(dir) {
   }
   const outDir = tier5Dir.bundleOutDir(dir);
   try {
-    readdirSync35(outDir);
+    readdirSync36(outDir);
   } catch {
     return { families: void 0, source: "unbuilt" };
   }
@@ -185527,7 +185907,7 @@ async function producedWidgetFamilies(dir) {
     let js2;
     for (const candidate of [`${name}.bundle.js`, `${name}.js`, name]) {
       try {
-        js2 = readFileSync106(join90(outDir, candidate), "utf8");
+        js2 = readFileSync107(join91(outDir, candidate), "utf8");
         break;
       } catch {
       }
@@ -185558,7 +185938,7 @@ async function producedWidgetFamilies(dir) {
   }
   return { families, source: "dist/bundles" };
 }
-var boardOpen = (dir) => existsSync84(join90(dir, ".himi", "studio", "index.html"));
+var boardOpen = (dir) => existsSync85(join91(dir, ".himi", "studio", "index.html"));
 var BOARD_REFRESHERS = /* @__PURE__ */ new Set(["render", "test", "validate", "build", "push", "icon", "site", "ux", "progress"]);
 async function leaveForBoard(dir, record2, value) {
   if (!boardOpen(dir)) return;
@@ -185582,7 +185962,7 @@ async function liveMapFor(dir) {
 }
 var commandScratch = new AsyncLocalStorage2();
 function commandScratchDir(prefix) {
-  const dir = mkdtempSync6(join90(tmpdir7(), prefix));
+  const dir = mkdtempSync6(join91(tmpdir7(), prefix));
   commandScratch.getStore()?.push(dir);
   return dir;
 }
@@ -185936,7 +186316,7 @@ himi v${cliVersion()} \u2014 run \`himi --version\`. If authoring commands fail
             const owed = openApprovals2(readApprovals2(dir).events).length;
             next.push(`carried the planning journal into the app (${carried.join(", ")}${owed ? `; ${owed} approval${owed === 1 ? "" : "s"} still owed` : ""}) \u2014 \`himi progress --brief\` there shows it`);
           }
-          const planInParent = ["SPEC.md", "MOBILE-UX.md"].filter((f2) => existsSync84(join90(parentDir, f2)));
+          const planInParent = ["SPEC.md", "MOBILE-UX.md"].filter((f2) => existsSync85(join91(parentDir, f2)));
           if (planInParent.length) {
             next.push(`${planInParent.join(" and ")} in ${parentDir} ${planInParent.length > 1 ? "are" : "is"} not the app's \u2014 if that is the approved plan, move it over the template's boilerplate in ${dir}`);
           }
@@ -186097,13 +186477,13 @@ ${doNow.map((l2) => `  ${l2}`).join("\n")}`);
               if (adding) {
                 const from = str10(flags.from);
                 if (!from) throw new TrimRefusal2('--add <id> needs --from <file> holding the whole new SCREENS entry (`  "<id>": { "screenId": "<id>", \u2026 },`)');
-                print(adopt.addScreen(dir, adding, readFileSync106(from, "utf8"), { parent: str10(flags.parent), tab: str10(flags.tab), displayName: str10(flags["display-name"]) }));
+                print(adopt.addScreen(dir, adding, readFileSync107(from, "utf8"), { parent: str10(flags.parent), tab: str10(flags.tab), displayName: str10(flags["display-name"]) }));
                 return 0;
               }
               if (target) {
                 const from = str10(flags.from);
                 if (!from) throw new TrimRefusal2("--write <id> needs --from <file> holding the whole entry, as --show prints it");
-                print(adopt.replaceScreen(dir, target, readFileSync106(from, "utf8")));
+                print(adopt.replaceScreen(dir, target, readFileSync107(from, "utf8")));
                 return 0;
               }
               if (show) {
@@ -186158,9 +186538,9 @@ ${doNow.map((l2) => `  ${l2}`).join("\n")}`);
             try {
               const r2 = await client2().templates();
               const remote = (r2.json?.templates ?? []).filter((t2) => typeof t2.name === "string").map((t2) => ({ ...t2, source: "remote" }));
-              const byName2 = new Map(catalog3.map((c2) => [c2.name, c2]));
-              for (const t2 of remote) byName2.set(t2.name, t2);
-              catalog3 = [...byName2.values()];
+              const byName3 = new Map(catalog3.map((c2) => [c2.name, c2]));
+              for (const t2 of remote) byName3.set(t2.name, t2);
+              catalog3 = [...byName3.values()];
             } catch (e2) {
               note = `remote catalog unreachable (${e2.message}); ranked the embedded templates only`;
             }
@@ -186185,7 +186565,7 @@ ${doNow.map((l2) => `  ${l2}`).join("\n")}`);
             const { keepFromSpec: keepFromSpec2 } = await Promise.resolve().then(() => (init_template_adopt(), template_adopt_exports));
             const dir = contentDir(flags);
             try {
-              const spec = keepFromSpec2(dir, str10(flags["from-spec"]) ?? join90(dir, "SPEC.md"));
+              const spec = keepFromSpec2(dir, str10(flags["from-spec"]) ?? join91(dir, "SPEC.md"));
               const own5 = typeof keep === "string" ? keep.split(",").map((k2) => k2.trim()).filter(Boolean) : [];
               keep = [.../* @__PURE__ */ new Set([...spec.keep, ...own5])].join(",");
               fromSpec = { fromSpec: {
@@ -186226,7 +186606,7 @@ ${doNow.map((l2) => `  ${l2}`).join("\n")}`);
           const result = { ...outcome.result, ...fromSpec };
           const adoptDir = contentDir(flags);
           const kept = flags["dry-run"] !== true && (outcome.code === 0 || outcome.result.forcedKeep === true);
-          if (kept && existsSync84(join90(adoptDir, adoptBits.ADOPT_FILE))) {
+          if (kept && existsSync85(join91(adoptDir, adoptBits.ADOPT_FILE))) {
             try {
               const inv = adoptBits.inspectApp(adoptDir);
               adoptBits.writeInventory(adoptDir, inv, { companions: "if-missing" });
@@ -186255,7 +186635,7 @@ ${doNow.map((l2) => `  ${l2}`).join("\n")}`);
             const sourceDir = resolve65(str10(flags["source-dir"]) ?? appDir3);
             let meta;
             try {
-              meta = JSON.parse(readFileSync106(join90(sourceDir, TEMPLATE_META_FILE), "utf8"));
+              meta = JSON.parse(readFileSync107(join91(sourceDir, TEMPLATE_META_FILE), "utf8"));
             } catch {
               io2.error(JSON.stringify({ error: `no ${TEMPLATE_META_FILE} in ${sourceDir} \u2014 a template must declare { title, description, tags } to be published`, hint: `add ${TEMPLATE_META_FILE} next to himalaya.content.json (or pass --source-dir <dir>)` }));
               return 2;
@@ -186265,7 +186645,7 @@ ${doNow.map((l2) => `  ${l2}`).join("\n")}`);
               return 2;
             }
             try {
-              const appearance = extractTemplateAppearance(JSON.parse(readFileSync106(join90(sourceDir, "tokens.json"), "utf8")));
+              const appearance = extractTemplateAppearance(JSON.parse(readFileSync107(join91(sourceDir, "tokens.json"), "utf8")));
               meta = { ...appearance, ...meta };
             } catch {
             }
@@ -186287,7 +186667,7 @@ ${doNow.map((l2) => `  ${l2}`).join("\n")}`);
             const force = flags.force === true;
             const { buildContentForValidation: buildContentForValidation2, buildReleaseFromContent: buildReleaseFromContent2, bundleOutDir: bundleOutDir2 } = await loadAuthoring();
             const bres = await buildContentForValidation2(buildDir, { resolution: resolutionFlag(flags) });
-            const out2 = mkdtempSync6(join90(tmpdir7(), "himi-template-"));
+            const out2 = mkdtempSync6(join91(tmpdir7(), "himi-template-"));
             publishScratch.push(out2);
             const hasWorkers = bres.built.length > 0 || bres.compileErrors.length > 0;
             const outcome = await buildReleaseFromContent2(buildDir, out2, {
@@ -186349,9 +186729,9 @@ ${doNow.map((l2) => `  ${l2}`).join("\n")}`);
             let iconHash;
             if (iconPath) {
               try {
-                const bytes2 = readFileSync106(iconPath);
+                const bytes2 = readFileSync107(iconPath);
                 payload.icon = bytes2.toString("base64");
-                iconHash = createHash45("sha256").update(bytes2).digest("hex");
+                iconHash = createHash46("sha256").update(bytes2).digest("hex");
               } catch {
               }
             }
@@ -186561,12 +186941,12 @@ ${doNow.map((l2) => `  ${l2}`).join("\n")}`);
           print({ ok: false, error: "eject needs a module", hint: `one of: ${EJECTABLE2.join(", ")}` });
           return 2;
         }
-        const { readdirSync: readdirSync36, existsSync: fileExists } = await import("node:fs");
+        const { readdirSync: readdirSync37, existsSync: fileExists } = await import("node:fs");
         const { join: pathJoin3 } = await import("node:path");
         const targets = [];
         const t5 = pathJoin3(dir, "tier5-src");
         if (fileExists(t5)) {
-          for (const d2 of readdirSync36(t5, { withFileTypes: true })) {
+          for (const d2 of readdirSync37(t5, { withFileTypes: true })) {
             if (d2.isDirectory()) targets.push(pathJoin3(t5, d2.name, "index.ts"));
           }
         }
@@ -186654,7 +187034,7 @@ ${doNow.map((l2) => `  ${l2}`).join("\n")}`);
           const path2 = dpxSessionTokenPath();
           let raw;
           try {
-            raw = readFileSync106(path2, "utf8");
+            raw = readFileSync107(path2, "utf8");
           } catch {
             throw new Error(`no DPX BO session at ${path2}; run dpx auth login, write dpx auth token to that path, then himi login --dpx --target bo`);
           }
@@ -186788,8 +187168,8 @@ ${doNow.map((l2) => `  ${l2}`).join("\n")}`);
           const dir = resolve65(out2);
           const files = himiPluginFiles2(skills.skillMd);
           for (const f2 of files) {
-            mkdirSync43(dirname50(join90(dir, f2.path)), { recursive: true });
-            writeFileSync41(join90(dir, f2.path), f2.text);
+            mkdirSync44(dirname51(join91(dir, f2.path)), { recursive: true });
+            writeFileSync42(join91(dir, f2.path), f2.text);
           }
           print({ ok: true, dir, files: files.map((f2) => f2.path), next: [`claude plugin validate ${dir}`, `claude --plugin-dir ${dir}`] });
           return 0;
@@ -186806,16 +187186,16 @@ ${doNow.map((l2) => `  ${l2}`).join("\n")}`);
       case "studio": {
         const { openStudio: openStudio2 } = await Promise.resolve().then(() => (init_studio(), studio_exports));
         const dir = contentDir(flags);
-        if (!existsSync84(join90(dir, "himalaya.content.json"))) {
+        if (!existsSync85(join91(dir, "himalaya.content.json"))) {
           io2.error(JSON.stringify({ ok: false, error: "not_a_content_package", dir, hint: "run from the app directory (or pass --content <dir>) \u2014 the board reads that package's .himi/" }));
           return 2;
         }
         if (pos[1] === "reel") {
           const { buildReel: buildReel2 } = await Promise.resolve().then(() => (init_studio_reel(), studio_reel_exports));
-          const out2 = resolve65(str10(flags.out) ?? join90(dir, ".himi", "making-of.html"));
+          const out2 = resolve65(str10(flags.out) ?? join91(dir, ".himi", "making-of.html"));
           const { html, plan } = buildReel2(dir);
-          mkdirSync43(dirname50(out2), { recursive: true });
-          writeFileSync41(out2, html);
+          mkdirSync44(dirname51(out2), { recursive: true });
+          writeFileSync42(out2, html);
           const { pathToFileURL: pathToFileURL9 } = await import("node:url");
           const url2 = pathToFileURL9(out2).href;
           const open2 = flags["no-open"] !== true;
@@ -186884,7 +187264,7 @@ ${handover.hint[0].toUpperCase()}${handover.hint.slice(1)}.`);
         } = await Promise.resolve().then(() => (init_progress(), progress_exports));
         const dir = contentDir(flags);
         const journal2 = journalPath2(dir);
-        const isContentPackage = existsSync84(join90(dir, "himalaya.content.json"));
+        const isContentPackage = existsSync85(join91(dir, "himalaya.content.json"));
         const hint = isContentPackage ? {} : { hint: "no himalaya.content.json here \u2014 run from the app directory (or pass --content <dir>) so the build board finds this journal" };
         const message = pos.slice(1).join(" ").trim();
         const approvalFlags = ["approve", "done", "drop"].filter((f2) => flags[f2] !== void 0);
@@ -187036,7 +187416,7 @@ ${handover.hint[0].toUpperCase()}${handover.hint.slice(1)}.`);
       case "test": {
         const dir = contentDir(flags);
         const structuredOutput = flags.json === true || io2.isTTY !== true;
-        if (existsSync84(join90(dir, "functions"))) {
+        if (existsSync85(join91(dir, "functions"))) {
           const { invokeLocalFunction: invokeLocalFunction2, loadFunctionsApp: loadFunctionsApp2 } = await Promise.resolve().then(() => (init_functions(), functions_exports));
           const loaded = await loadFunctionsApp2(dir);
           const results = [];
@@ -187168,7 +187548,7 @@ ${handover.hint[0].toUpperCase()}${handover.hint.slice(1)}.`);
             io2.error(JSON.stringify({ error: `screen "${screen.screenId}" has no Tier-5 worker, so there is nothing for the browser loop to build` }));
             return 2;
           }
-          const sources = collectWorkerSources2(join90(dir, "tier5-src"), screen.bundleName);
+          const sources = collectWorkerSources2(join91(dir, "tier5-src"), screen.bundleName);
           if (!sources) {
             io2.error(JSON.stringify({ error: `no worker source found at tier5-src/${screen.bundleName} \u2014 the browser loop compiles SOURCE, not the built bundle` }));
             return 2;
@@ -187348,7 +187728,7 @@ ${handover.hint[0].toUpperCase()}${handover.hint.slice(1)}.`);
             const sp = await runShotsPass2({
               descriptors: scopeDescriptors2(outcome.descriptors ?? [], pos.slice(1), invalidScreens),
               tokens: outcome.tokens,
-              outDir: join90(dir, ".himi", "shots"),
+              outDir: join91(dir, ".himi", "shots"),
               width: 390,
               layers: { rules: shotRules, ...cmsSeed ? { cmsSeed } : {}, ...canned ? { canned: canned.byKey } : {}, ...base44Data ? { base44Data } : {} },
               ...budgetMs ? { budgetMs } : {},
@@ -187388,7 +187768,7 @@ ${handover.hint[0].toUpperCase()}${handover.hint.slice(1)}.`);
           releaseId: result.releaseId,
           releasePayload: release2,
           descriptors: attestedDescriptors,
-          screenshots: Object.fromEntries(writtenShots.filter((name) => crawledScreens.has(name.replace(/\.png$/, ""))).map((name) => [name.replace(/\.png$/, ""), join90(dir, ".himi", "shots", name)])),
+          screenshots: Object.fromEntries(writtenShots.filter((name) => crawledScreens.has(name.replace(/\.png$/, ""))).map((name) => [name.replace(/\.png$/, ""), join91(dir, ".himi", "shots", name)])),
           coverage: {
             screens: crawledScreens.size,
             actionsDispatched: result.actions.exercised,
@@ -187513,7 +187893,7 @@ ${[...afterRun.next, ...testReminder ? [testReminder] : []].join("\n")}`);
             return 2;
           }
           try {
-            const raw = stateArg.trim().startsWith("{") ? stateArg : readFileSync106(stateArg.replace(/^@/, ""), "utf8");
+            const raw = stateArg.trim().startsWith("{") ? stateArg : readFileSync107(stateArg.replace(/^@/, ""), "utf8");
             injectedState = JSON.parse(raw);
           } catch (e2) {
             io2.error(JSON.stringify({ error: `--state must be inline JSON or a path to a .json file \u2014 ${e2.message}` }));
@@ -187528,7 +187908,7 @@ ${[...afterRun.next, ...testReminder ? [testReminder] : []].join("\n")}`);
             return 2;
           }
           try {
-            const raw = inputArg.trim().startsWith("{") ? inputArg : readFileSync106(inputArg.replace(/^@/, ""), "utf8");
+            const raw = inputArg.trim().startsWith("{") ? inputArg : readFileSync107(inputArg.replace(/^@/, ""), "utf8");
             const parsed = JSON.parse(raw);
             if (!parsed || typeof parsed !== "object" || Array.isArray(parsed)) throw new Error("must be a JSON object");
             injectedInput = parsed;
@@ -187611,7 +187991,7 @@ ${[...afterRun.next, ...testReminder ? [testReminder] : []].join("\n")}`);
         const diagnostics = (outcome.lint ?? []).find((s2) => s2.screenId === screenId)?.issues ?? [];
         let pngFile;
         let attestationPngFile;
-        const shotPath = join90(dir, ".himi", "shots", `${screenId}.png`);
+        const shotPath = join91(dir, ".himi", "shots", `${screenId}.png`);
         const pngTarget = typeof flags.png === "string" ? str10(flags.png) : flags.png === true ? shotPath : void 0;
         if (pngTarget && r2.pngBase64) {
           pngFile = writePngFile(pngTarget, r2.pngBase64);
@@ -187970,7 +188350,7 @@ default (no --glyph): ${DEFAULT_GLYPH2} \u2014 a mark that claims nothing, so th
           io2.error(JSON.stringify(linked));
           return 1;
         }
-        if (existsSync84(dest)) {
+        if (existsSync85(dest)) {
           if (!statSync23(dest).isDirectory()) {
             io2.error(JSON.stringify({
               error: `${dest} exists and is not a directory`,
@@ -187978,12 +188358,12 @@ default (no --glyph): ${DEFAULT_GLYPH2} \u2014 a mark that claims nothing, so th
             }));
             return 1;
           }
-          const occupied = readdirSync35(dest).length > 0;
+          const occupied = readdirSync36(dest).length > 0;
           if (occupied && !force) {
             io2.error(JSON.stringify({ error: `${dest} already exists and is not empty`, hint: "pass --force to write into it anyway (merging, and naming what it keeps), --replace to restore exactly what was archived, or --out/--name to land somewhere else" }));
             return 1;
           }
-          if (replace && occupied && !existsSync84(join90(dest, "himalaya.content.json"))) {
+          if (replace && occupied && !existsSync85(join91(dest, "himalaya.content.json"))) {
             io2.error(JSON.stringify({
               error: `${dest} is not a content package \u2014 refusing to --replace it`,
               hint: "--replace only clears a directory that holds himalaya.content.json. Check --out/--name, or pass --force to merge into it instead."
@@ -188219,7 +188599,7 @@ default (no --glyph): ${DEFAULT_GLYPH2} \u2014 a mark that claims nothing, so th
           let localSourceHash;
           try {
             const { collectAppSource: collectAppSource2, zipAppSource: zipAppSource2 } = await Promise.resolve().then(() => (init_app_source(), app_source_exports));
-            localSourceHash = createHash45("sha256").update(zipAppSource2(collectAppSource2(dir).entries).toString("base64")).digest("hex");
+            localSourceHash = createHash46("sha256").update(zipAppSource2(collectAppSource2(dir).entries).toString("base64")).digest("hex");
           } catch {
           }
           return runReleasePatch({
@@ -188628,9 +189008,9 @@ default (no --glyph): ${DEFAULT_GLYPH2} \u2014 a mark that claims nothing, so th
           return 2;
         }
         const { packRelease: packRelease2, packReleaseToDir: packReleaseToDir2 } = await Promise.resolve().then(() => (init_pack(), pack_exports));
-        const displayName2 = str10(flags.name);
+        const displayName3 = str10(flags.name);
         const launchMode = flags.snapshot === true ? "snapshot" : "live";
-        const packOpts = { createdBy: `himi-cli ${cliVersion()}`, launchMode, ...displayName2 ? { displayName: displayName2 } : {} };
+        const packOpts = { createdBy: `himi-cli ${cliVersion()}`, launchMode, ...displayName3 ? { displayName: displayName3 } : {} };
         const writePack = (root, appName2, out2, source) => format === "dir" ? packReleaseToDir2(root, appName2, out2, packOpts) : packRelease2(root, appName2, out2, { ...packOpts, ...source ? { source } : {} });
         const releaseDir = str10(flags["release-dir"]);
         if (releaseDir) {
@@ -188696,7 +189076,7 @@ default (no --glyph): ${DEFAULT_GLYPH2} \u2014 a mark that claims nothing, so th
         }
         const { buildContentForValidation: buildContentForValidation2, buildReleaseFromContent: buildReleaseFromContent2, bundleOutDir: bundleOutDir2 } = await loadAuthoring();
         const bres = await buildContentForValidation2(dir, { resolution: resolutionFlag(flags) });
-        const built = mkdtempSync6(join90(tmpdir7(), "himi-pack-"));
+        const built = mkdtempSync6(join91(tmpdir7(), "himi-pack-"));
         const hasWorkers = bres.built.length > 0 || bres.compileErrors.length > 0;
         const outcome = await buildReleaseFromContent2(dir, built, {
           ...hasWorkers ? { tier5Dir: bundleOutDir2(dir) } : {},
@@ -188909,7 +189289,7 @@ default (no --glyph): ${DEFAULT_GLYPH2} \u2014 a mark that claims nothing, so th
             }));
             return 1;
           }
-          const archive = readFileSync106(resolve65(file2));
+          const archive = readFileSync107(resolve65(file2));
           const result = await client2().createPackageShare({
             app: opened.header.app,
             releaseId: opened.header.releaseId,
@@ -189006,11 +189386,11 @@ default (no --glyph): ${DEFAULT_GLYPH2} \u2014 a mark that claims nothing, so th
             const app = await appId(dir2);
             const { buildContentBundles: buildContentBundles2, buildReleaseFromContent: buildReleaseFromContent2, bundleOutDir: bundleOutDir2 } = await loadAuthoring();
             const bres = await buildContentBundles2(dir2, { resolution: resolutionFlag(flags) });
-            temp = mkdtempSync6(join90(tmpdir7(), "himi-run-build-"));
+            temp = mkdtempSync6(join91(tmpdir7(), "himi-run-build-"));
             const hasWorkers = bres.built.length > 0 || bres.compileErrors.length > 0;
             const initial = await buildReleaseFromContent2(dir2, temp, { ...hasWorkers ? { tier5Dir: bundleOutDir2(dir2) } : {} });
             servedMissing = initial.missingBundles;
-            source = join90(temp, app);
+            source = join91(temp, app);
           }
           const chromeArg = str10(flags.chrome) ?? "preview";
           if (chromeArg !== "preview" && chromeArg !== "app") {
@@ -189049,7 +189429,7 @@ default (no --glyph): ${DEFAULT_GLYPH2} \u2014 a mark that claims nothing, so th
             if (!recordKit) return;
             startedAt = (/* @__PURE__ */ new Date()).toISOString();
             const failure = record2(served2, { ok: true, at: startedAt });
-            if (!recorded) io2.error(JSON.stringify({ run: "run_record_skipped", message: `${failure ?? `${join90(dir, ".himi")} is not a real directory`}, so the build board will not frame this preview.` }));
+            if (!recorded) io2.error(JSON.stringify({ run: "run_record_skipped", message: `${failure ?? `${join91(dir, ".himi")} is not a real directory`}, so the build board will not frame this preview.` }));
             await refreshBoard();
           };
           const retract = async () => {
@@ -189085,7 +189465,7 @@ default (no --glyph): ${DEFAULT_GLYPH2} \u2014 a mark that claims nothing, so th
           const watchKit = watch2 ? await Promise.resolve().then(() => (init_run_watch(), run_watch_exports)) : null;
           const hhpPreviewRoute = watch2 ? (await Promise.resolve().then(() => (init_hhp_preview(), hhp_preview_exports))).hhpPreviewResponse : null;
           const bus = watchKit ? new watchKit.ReloadBus() : void 0;
-          if (watch2) served = mkdtempSync6(join90(tmpdir7(), "himi-run-served-"));
+          if (watch2) served = mkdtempSync6(join91(tmpdir7(), "himi-run-served-"));
           const running = await runPackage2(source, {
             port,
             chrome: chromeArg,
@@ -189114,8 +189494,8 @@ default (no --glyph): ${DEFAULT_GLYPH2} \u2014 a mark that claims nothing, so th
             await announce(running);
             if (watchKit && bus) {
               const { buildContentBundles: buildContentBundles2, buildReleaseFromContent: buildReleaseFromContent2, bundleOutDir: bundleOutDir2 } = await loadAuthoring();
-              const live3 = join90(running.releaseRoot, running.app);
-              const manifestOf = (tree) => JSON.parse(readFileSync106(join90(tree, "release-manifest.json"), "utf8"));
+              const live3 = join91(running.releaseRoot, running.app);
+              const manifestOf = (tree) => JSON.parse(readFileSync107(join91(tree, "release-manifest.json"), "utf8"));
               let current = manifestOf(live3);
               const failed3 = async (message) => {
                 if (stopping) return;
@@ -189126,7 +189506,7 @@ default (no --glyph): ${DEFAULT_GLYPH2} \u2014 a mark that claims nothing, so th
               };
               rebuild = watchKit.serialize(async () => {
                 const t0 = Date.now();
-                const next = mkdtempSync6(join90(tmpdir7(), "himi-run-build-"));
+                const next = mkdtempSync6(join91(tmpdir7(), "himi-run-build-"));
                 try {
                   const bres = await buildContentBundles2(dir, { resolution: resolutionFlag(flags) });
                   if (bres.compileErrors.length) {
@@ -189143,16 +189523,16 @@ default (no --glyph): ${DEFAULT_GLYPH2} \u2014 a mark that claims nothing, so th
                     return;
                   }
                   if (stopping) return;
-                  const fresh = manifestOf(join90(next, running.app));
+                  const fresh = manifestOf(join91(next, running.app));
                   const diff = watchKit.diffReleases(current, fresh);
                   const { describeChanges: describeChanges2, headline: headline2 } = await Promise.resolve().then(() => (init_build_changes(), build_changes_exports));
-                  const changes = describeChanges2(live3, join90(next, running.app), diff);
+                  const changes = describeChanges2(live3, join91(next, running.app), diff);
                   const retired = `${live3}.retired-${Date.now()}`;
                   renameSync13(live3, retired);
                   try {
-                    renameSync13(join90(next, running.app), live3);
+                    renameSync13(join91(next, running.app), live3);
                   } catch {
-                    cpSync3(join90(next, running.app), live3, { recursive: true });
+                    cpSync3(join91(next, running.app), live3, { recursive: true });
                   }
                   rmSync24(retired, { recursive: true, force: true });
                   current = fresh;
@@ -189779,7 +190159,7 @@ default (no --glyph): ${DEFAULT_GLYPH2} \u2014 a mark that claims nothing, so th
           io2.error(JSON.stringify({ error: `patch ${kind} needs --file`, usage: PATCH_USAGE }));
           return 2;
         }
-        if (!existsSync84(file2)) {
+        if (!existsSync85(file2)) {
           io2.error(JSON.stringify({ error: `no such file: ${file2}` }));
           return 2;
         }
@@ -189835,7 +190215,7 @@ default (no --glyph): ${DEFAULT_GLYPH2} \u2014 a mark that claims nothing, so th
           lintNote: "`himi patch` sends a raw file. Nothing here built or linted your app \u2014 `himi push --only <selector>` is the same edit with the full lint gate in front of it."
         };
         if (kind === "tokens" || kind === "app-config") {
-          const body = readFileSync106(file2, "utf8");
+          const body = readFileSync107(file2, "utf8");
           const patch2 = kind === "tokens" ? { tokens: body } : { appConfig: body };
           return runReleasePatch({
             ...common,
@@ -189850,7 +190230,7 @@ default (no --glyph): ${DEFAULT_GLYPH2} \u2014 a mark that claims nothing, so th
             io2.error(JSON.stringify({ error: "patch screen needs a <screenId>", usage: PATCH_USAGE }));
             return 2;
           }
-          const descriptor = readFileSync106(file2, "utf8");
+          const descriptor = readFileSync107(file2, "utf8");
           let parsed;
           try {
             parsed = JSON.parse(descriptor);
@@ -189907,8 +190287,8 @@ default (no --glyph): ${DEFAULT_GLYPH2} \u2014 a mark that claims nothing, so th
             extra: { kind, screen: id, file: { path: file2, bytes: Buffer.byteLength(descriptor, "utf8") } }
           });
         }
-        const bytes2 = readFileSync106(file2);
-        const sha2 = createHash45("sha256").update(bytes2).digest("hex");
+        const bytes2 = readFileSync107(file2);
+        const sha2 = createHash46("sha256").update(bytes2).digest("hex");
         const forScreens = (str10(flags["for-screen"]) ?? "").split(",").map((s2) => s2.trim()).filter(Boolean);
         if (flags["no-rebind"] !== void 0 && flags["no-rebind"] !== true) {
           io2.error(JSON.stringify({ ok: false, error: "no_rebind_takes_no_value", message: "--no-rebind is a switch and takes no value; pass it bare.", usage: PATCH_USAGE }));
@@ -190051,7 +190431,7 @@ default (no --glyph): ${DEFAULT_GLYPH2} \u2014 a mark that claims nothing, so th
           }
           let def;
           try {
-            const parsed = JSON.parse(arg.startsWith("@") ? readFileSync106(arg.slice(1), "utf8") : arg);
+            const parsed = JSON.parse(arg.startsWith("@") ? readFileSync107(arg.slice(1), "utf8") : arg);
             if (parsed === null || typeof parsed !== "object" || Array.isArray(parsed)) {
               io2.error(JSON.stringify({ error: "invalid_definition", problems: [`--definition must be a JSON object, got ${Array.isArray(parsed) ? "an array" : parsed === null ? "null" : typeof parsed}`] }));
               return 2;
@@ -190333,7 +190713,7 @@ default (no --glyph): ${DEFAULT_GLYPH2} \u2014 a mark that claims nothing, so th
         const rememberLastDist = async (jobs2) => {
           try {
             const dir = contentDir(flags);
-            if (!existsSync84(join90(dir, "himalaya.content.json"))) return;
+            if (!existsSync85(join91(dir, "himalaya.content.json"))) return;
             const { lastDistFromJob: lastDistFromJob2, writeLastDist: writeLastDist2 } = await Promise.resolve().then(() => (init_capabilities(), capabilities_exports));
             const own5 = await appId(dir);
             for (const job of jobs2) {
@@ -190573,7 +190953,7 @@ ${label3}`);
         const platform = str10(flags.platform)?.split(",").map((p2) => p2.trim()).filter(Boolean);
         {
           const distDir = contentDir(flags);
-          if (existsSync84(join90(distDir, "himalaya.content.json"))) {
+          if (existsSync85(join91(distDir, "himalaya.content.json"))) {
             const issues = await iconIssues(distDir, flags.strict === true, { requireDeclared: true, requireVerified: true });
             const errors = issues.filter((i2) => i2.severity === "error");
             for (const i2 of issues.filter((i3) => i3.severity === "warning")) {
@@ -190913,7 +191293,7 @@ ${label3}`);
           const dpxPath = dpxSessionTokenPath();
           let dpx;
           try {
-            dpx = readFileSync106(dpxPath, "utf8").trim();
+            dpx = readFileSync107(dpxPath, "utf8").trim();
           } catch {
             io2.error(JSON.stringify({ error: `no dpx session at ${dpxPath} \u2014 run \`dpx auth login\` then \`dpx auth token > ${dpxPath}\` (dpx 2.x keeps its own state in ~/.dpx/auth.json and does NOT write the legacy session file), or omit --dpx` }));
             return 1;
@@ -191376,7 +191756,7 @@ ${report3.ok ? "OK \u2014 data + serve plane reachable." : typeof report3.hint =
           const path2 = dpxSessionTokenPath();
           let raw;
           try {
-            raw = readFileSync106(path2, "utf8");
+            raw = readFileSync107(path2, "utf8");
           } catch {
             io2.error(JSON.stringify({ error: `no DPX BO session at ${path2}` }));
             return 1;
@@ -191570,7 +191950,7 @@ ${report3.ok ? "OK \u2014 data + serve plane reachable." : typeof report3.hint =
           }
         }
         const sub = pos[1];
-        const b44Usage = "himi base44 analyze (--url <https://\u2026> | --app-id <id>) [--out .himi/base44-book] [--sample <n>] [--json]  |  himi base44 adopt [--book .himi/base44-book] [--entities A,B] [--write [path]] [--json]  |  himi base44 entities query [--content <dir>] [--all] [--json]  |  himi base44 types [--content <dir>] [--json]  |  himi base44 login [--from-base44-cli]  |  himi base44 whoami  |  himi base44 logout";
+        const b44Usage = "himi base44 analyze (--url <https://\u2026> | --app-id <id>) [--out .himi/base44-book] [--sample <n>] [--json]  |  himi base44 adopt [--book .himi/base44-book] [--entities A,B] [--write [path]] [--json]  |  himi base44 entities query [--content <dir>] [--all] [--json]  |  himi base44 types [--content <dir>] [--json]  |  himi base44 screens [--content <dir>] [--force] [--dry-run] [--json]  |  himi base44 login [--from-base44-cli]  |  himi base44 whoami  |  himi base44 logout";
         if (sub === "adopt") {
           const { runBase44Adopt: runBase44Adopt2, AdoptError: AdoptError2 } = await Promise.resolve().then(() => (init_base44_adopt(), base44_adopt_exports));
           const dir = contentDir(flags);
@@ -191617,6 +191997,65 @@ ${report3.ok ? "OK \u2014 data + serve plane reachable." : typeof report3.hint =
             return 1;
           }
         }
+        if (sub === "screens") {
+          const dir = contentDir(flags);
+          const fail6 = (code, error, extra = {}) => {
+            io2.error(JSON.stringify({ ok: false, code, error, ...extra }));
+            return 1;
+          };
+          const gen = await Promise.resolve().then(() => (init_generate(), generate_exports));
+          const missing = gen.ENGINE_FILES.filter((f2) => !existsSync85(join91(dir, f2)));
+          if (missing.length) {
+            return fail6("content_dir_not_base44_starter", `${dir} is not a base44-starter content package: the generated screens import a shared engine it does not have (${missing.join(", ")})`, { missing, hint: "scaffold one with `himi init <name> --template base44-starter --base44-app-id <id>`" });
+          }
+          const app = await appId(dir);
+          let base44;
+          try {
+            const { loadAppConfigModule: loadAppConfigModule2 } = await Promise.resolve().then(() => (init_app_config_loader(), app_config_loader_exports));
+            base44 = (await loadAppConfigModule2(dir))?.base44;
+          } catch (e2) {
+            const finding = (await Promise.resolve().then(() => (init_base44_lint(), base44_lint_exports))).base44DefineAppFinding(e2);
+            if (finding) {
+              io2.error(JSON.stringify({ ok: false, code: "invalid_config", app, issues: [{ severity: "error", ...finding }], hint: '`himi validate` reports these with pass: "base44"' }));
+              return 1;
+            }
+            return fail6("config_unloadable", e2.message, { app, hint: "fix the config so it imports cleanly, then re-run. `himi validate` shows the underlying error." });
+          }
+          const specs = base44 && typeof base44 === "object" && Array.isArray(base44.entities) ? base44.entities : [];
+          if (!specs.length) {
+            return fail6("no_entities_block", "config.ts declares no `base44.entities` \u2014 nothing to generate", { app, hint: "declare the entities first (`himi base44 adopt --write`, himi docs base44-entities), then re-run" });
+          }
+          const { validateBase44Entities: validateBase44Entities2 } = await Promise.resolve().then(() => (init_base44_schema(), base44_schema_exports));
+          const errors = validateBase44Entities2(base44, app).filter((i2) => i2.severity === "error");
+          if (errors.length) {
+            io2.error(JSON.stringify({ ok: false, code: "invalid_config", app, issues: errors, hint: '`himi validate` reports these with pass: "base44"' }));
+            return 1;
+          }
+          const { planEntityScreens: planEntityScreens2, PlanError: PlanError2 } = await Promise.resolve().then(() => (init_plan4(), plan_exports));
+          let sp;
+          try {
+            sp = planEntityScreens2(specs, app);
+          } catch (e2) {
+            if (e2 instanceof PlanError2) return fail6(e2.code, e2.message, { app, ...e2.extra });
+            throw e2;
+          }
+          const rendered = gen.renderAll(sp);
+          const dryRun = flags["dry-run"] === true;
+          const { files } = gen.writeGenerated(dir, rendered, { force: flags.force === true, dryRun });
+          const orphaned = gen.orphanedFiles(dir, rendered);
+          print({
+            ok: true,
+            app,
+            ...dryRun ? { dryRun: true } : {},
+            files,
+            plans: sp.plans.map((p2) => ({ entity: p2.name, physical: p2.entity, list: p2.ids.list, detail: p2.ids.detail, gates: p2.gates })),
+            tabs: sp.tabs,
+            more: sp.more,
+            ...orphaned.length ? { orphaned, note: "generated files for entities no longer declared \u2014 never deleted; remove them by hand if the screens should go" } : {},
+            ...files.some((f2) => f2.outcome === "skipped-edited") ? { hint: "skipped-edited files were changed by hand and are left alone; --force overwrites them" } : {}
+          });
+          return 0;
+        }
         if (sub === "entities") {
           if (pos[2] !== "query") {
             io2.error(JSON.stringify({ ok: false, code: "unknown_subcommand", error: pos[2] ? `unknown base44 entities subcommand "${pos[2]}" \u2014 use query` : "base44 entities needs a subcommand: query", usage: b44Usage }));