@wix/himalaya-cli 0.1441.0 → 0.1442.0

package/dist/cli.mjs

@@ -18091,6 +18091,64 @@ function configuredTokensPath(dir) {
   }
   return {};
 }
+function tokenNumericIssues(tokens2, tokensPath = "tokens.json") {
+  const issues = [];
+  const isRecord3 = (v2) => v2 !== null && typeof v2 === "object" && !Array.isArray(v2);
+  if (!isRecord3(tokens2)) return issues;
+  const shown2 = (v2) => typeof v2 === "string" ? JSON.stringify(v2) : JSON.stringify(v2) ?? String(v2);
+  const bad2 = (v2) => !(typeof v2 === "number" && Number.isInteger(v2));
+  const check = (layer, where) => {
+    if (!isRecord3(layer)) return;
+    const loses = where ? `the ${where.slice(0, -1)} overlay is dropped on device and the base look is used instead` : 'iOS and Android reject the WHOLE tokens.json otherwise ("Theme unavailable" on iOS, the default palette and fonts on Android)';
+    for (const { group, field, unit } of INTEGER_TOKEN_FIELDS) {
+      const entries = layer[group];
+      if (!isRecord3(entries)) continue;
+      for (const [name, token] of Object.entries(entries)) {
+        if (!isRecord3(token) || !(field in token)) continue;
+        const value = token[field];
+        if (!bad2(value)) continue;
+        const path2 = `${where}${group}.${name}.${field}`;
+        const fix = typeof value !== "number" || !Number.isFinite(value) ? "" : field === "duration" ? ` Durations are milliseconds (${value} \u2192 ${value < 10 ? Math.round(value * 1e3) : Math.round(value)}).` : ` Write ${Math.round(value)}.`;
+        issues.push({
+          screen: null,
+          pass: "tokens",
+          severity: "error",
+          message: `${tokensPath}: ${path2} is ${shown2(value)} \u2014 it must be an integer (${unit}); ${loses}.${fix}`,
+          path: path2
+        });
+      }
+    }
+    for (const group of INTEGER_TOKEN_MAPS) {
+      const entries = layer[group];
+      if (!isRecord3(entries)) continue;
+      for (const [name, value] of Object.entries(entries)) {
+        if (!bad2(value)) continue;
+        const fix = typeof value === "number" && Number.isFinite(value) ? ` Write ${Math.round(value)}.` : "";
+        issues.push({
+          screen: null,
+          pass: "tokens",
+          severity: "error",
+          message: `${tokensPath}: ${where}${group}.${name} is ${shown2(value)} \u2014 it must be an integer (points); ${loses}.${fix}`,
+          path: `${where}${group}.${name}`
+        });
+      }
+    }
+  };
+  check(tokens2, "");
+  const idiom = tokens2.idiom;
+  if (isRecord3(idiom)) {
+    for (const [overlay, layer] of Object.entries(idiom)) check(layer, `idiom.${overlay}.`);
+  }
+  return issues;
+}
+function tokenNumericIssuesFor(dir) {
+  const tokensPath = configuredTokensPath(dir).path ?? "tokens.json";
+  try {
+    return tokenNumericIssues(JSON.parse(readFileSync19(join19(dir, tokensPath), "utf8")), tokensPath);
+  } catch {
+    return [];
+  }
+}
 function tokenColorIssues(dir, tokensPathOverride) {
   const issues = [];
   const error = (message) => issues.push({ screen: null, pass: "tokens", severity: "error", message });
@@ -18120,6 +18178,7 @@ function tokenColorIssues(dir, tokensPathOverride) {
     error(`${tokensPath}: must be an object`);
     return issues;
   }
+  issues.push(...tokenNumericIssues(raw, tokensPath));
   const kitScheme = raw.kit?.colorScheme;
   if (kitScheme !== void 0 && kitScheme !== null && typeof kitScheme !== "string") {
     error(
@@ -18379,12 +18438,18 @@ function accentOnSurfacesFor(fgName, role, colors, declared, findings) {
     }
   }
 }
-var AA_TEXT, CONTRAST_PAIRS, SCHEMES, channels, toHex2, mixHex, onLightSide;
+var INTEGER_TOKEN_FIELDS, INTEGER_TOKEN_MAPS, AA_TEXT, CONTRAST_PAIRS, SCHEMES, channels, toHex2, mixHex, onLightSide;
 var init_token_lint = __esm({
   "src/token-lint.ts"() {
     init_token_colors();
     init_idiom();
     init_brand_color_math();
+    INTEGER_TOKEN_FIELDS = [
+      { group: "typography", field: "size", unit: "points" },
+      { group: "typography", field: "weight", unit: "a font weight such as 400 or 700" },
+      { group: "motions", field: "duration", unit: "milliseconds" }
+    ];
+    INTEGER_TOKEN_MAPS = ["spacing", "radius"];
     AA_TEXT = 4.5;
     CONTRAST_PAIRS = [
       {
@@ -29906,6 +29971,67 @@ var init_capabilities = __esm({
   }
 });
 
+// src/authoring-unavailable.ts
+var authoring_unavailable_exports = {};
+__export(authoring_unavailable_exports, {
+  AuthoringUnavailable: () => AuthoringUnavailable,
+  authoringUnavailableFields: () => authoringUnavailableFields,
+  isSourceCheckout: () => isSourceCheckout,
+  namedAuthoringImport: () => namedAuthoringImport
+});
+import { existsSync as existsSync41 } from "node:fs";
+import { fileURLToPath as fileURLToPath16 } from "node:url";
+function namedAuthoringImport(module, load3) {
+  return load3.catch((cause) => {
+    throw new AuthoringUnavailable({ cause, module });
+  });
+}
+function isSourceCheckout(env = process.env) {
+  if (env.HIMI_OFF_REPO === "1") return false;
+  return existsSync41(fileURLToPath16(new URL("../../../core/sdk/state/src/index.ts", import.meta.url)));
+}
+function causeMessage(cause) {
+  if (cause === void 0 || cause === null) return void 0;
+  if (cause instanceof Error) return cause.message;
+  return String(cause);
+}
+function authoringUnavailableFields(err, context) {
+  const cause = causeMessage(err.cause);
+  const what = `the himi authoring runtime failed to load (himi v${context.version})` + (err.module ? ` \u2014 importing ${err.module}` : "") + (cause ? `: ${cause}` : "");
+  const base = {
+    version: context.version,
+    portal: context.portal,
+    ...cause ? { cause } : {},
+    ...err.module ? { module: err.module } : {},
+    sourceCheckout: context.sourceCheckout
+  };
+  if (context.sourceCheckout) {
+    return {
+      error: `${what}. This is a source checkout, so the usual cause is out-of-date dependencies, not the CLI \u2014 run \`yarn install\` at the repo root and retry.`,
+      ...base,
+      fix: "yarn install"
+    };
+  }
+  return {
+    error: `${what}. Off-repo this almost always means an out-of-date CLI, NOT a platform limitation \u2014 upgrade: \`npm i -g @wix/himalaya-cli@latest\`. If you meant to run in-repo, run from a monorepo checkout.`,
+    ...base,
+    upgrade: "npm i -g @wix/himalaya-cli@latest"
+  };
+}
+var AuthoringUnavailable;
+var init_authoring_unavailable = __esm({
+  "src/authoring-unavailable.ts"() {
+    AuthoringUnavailable = class extends Error {
+      module;
+      constructor(options = {}) {
+        super(`the himi authoring runtime failed to load${options.module ? ` (${options.module})` : ""}`, { cause: options.cause });
+        this.name = "AuthoringUnavailable";
+        this.module = options.module;
+      }
+    };
+  }
+});
+
 // src/site-analyze/site-view-metadata.ts
 function pages(site) {
   if (!site || typeof site !== "object" || !("pages" in site)) return [];
@@ -30404,13 +30530,13 @@ var init_l10n_catalog = __esm({
 });
 
 // ../../core/dev-server/src/l10n.ts
-import { readFileSync as readFileSync42, existsSync as existsSync41 } from "node:fs";
+import { readFileSync as readFileSync42, existsSync as existsSync42 } from "node:fs";
 import { resolve as resolve31 } from "node:path";
-import { fileURLToPath as fileURLToPath16 } from "node:url";
+import { fileURLToPath as fileURLToPath17 } from "node:url";
 function loadCatalog2(tag) {
   if (catalogCache.has(tag)) return catalogCache.get(tag);
   const path2 = resolve31(ROOT3, `tools/l10n/catalog.${tag}.json`);
-  const map = existsSync41(path2) ? sourceMap(parseCatalog(readFileSync42(path2, "utf8"))) : /* @__PURE__ */ new Map();
+  const map = existsSync42(path2) ? sourceMap(parseCatalog(readFileSync42(path2, "utf8"))) : /* @__PURE__ */ new Map();
   catalogCache.set(tag, map);
   return map;
 }
@@ -30420,7 +30546,7 @@ function pickLocale(acceptLanguage) {
   for (const tag of tags) {
     if (tag === "en") continue;
     const path2 = resolve31(ROOT3, `tools/l10n/catalog.${tag}.json`);
-    if (existsSync41(path2)) return tag;
+    if (existsSync42(path2)) return tag;
   }
   return null;
 }
@@ -30476,7 +30602,7 @@ var init_l10n = __esm({
   "../../core/dev-server/src/l10n.ts"() {
     init_l10n_strings();
     init_l10n_catalog();
-    ROOT3 = resolve31(fileURLToPath16(new URL("../../..", import.meta.url)));
+    ROOT3 = resolve31(fileURLToPath17(new URL("../../..", import.meta.url)));
     catalogCache = /* @__PURE__ */ new Map();
   }
 });
@@ -30803,6 +30929,21 @@ function deriveNavigationConfig(app, bundleCtx) {
   if (app.dataSchema !== void 0) config.dataSchema = app.dataSchema;
   return config;
 }
+function withDevNetMocks(config, declared, fileMocks) {
+  const rules = fileMocks?.rules;
+  if (!Array.isArray(rules) || rules.length === 0 && fileMocks?.unmatched !== "fail") return config;
+  if (declared?.enabled === false) return config;
+  if (Array.isArray(declared?.rules) || declared?.scenarioRef !== void 0) return config;
+  return {
+    ...config,
+    devGatewayConfig: {
+      mode: fileMocks?.mode ?? "mock",
+      ...fileMocks?.unmatched !== void 0 ? { unmatched: fileMocks.unmatched } : {},
+      ...declared ?? {},
+      rules
+    }
+  };
+}
 function mergeConfig(base, patch) {
   if (patch === null || typeof patch !== "object" || Array.isArray(patch)) return patch;
   const out2 = { ...base };
@@ -30824,8 +30965,9 @@ function withCompleteLinkables(cfg) {
   const list = cfg.linkableScreens;
   return Array.isArray(list) ? { ...cfg, linkableScreens: completeLinkableScreens(list) } : cfg;
 }
-function buildAppConfigDocument(req, meta, override, bundleCtx) {
-  const merged = override ? withCompleteLinkables(mergeConfig(deriveNavigationConfig(meta, bundleCtx), override)) : deriveNavigationConfig(meta, bundleCtx);
+function buildAppConfigDocument(req, meta, override, bundleCtx, devNetMocks) {
+  const derived = withDevNetMocks(deriveNavigationConfig(meta, bundleCtx), meta.devGateway, devNetMocks);
+  const merged = override ? withCompleteLinkables(mergeConfig(derived, override)) : derived;
   const baseline = override ? { ...merged, wixCachePolicy: sanitizeServedOfflineQueue(merged.wixCachePolicy) } : merged;
   const acceptLanguage = req.headers["accept-language"];
   const locale = pickLocale(typeof acceptLanguage === "string" ? acceptLanguage : null);
@@ -30834,7 +30976,7 @@ function buildAppConfigDocument(req, meta, override, bundleCtx) {
   const etag = `"${createHash14("sha1").update(`${locale ?? "en"}:${body}`).digest("hex")}"`;
   return { config, body, etag, locale };
 }
-function handleAppConfigRequest(req, res, meta, override, bundleCtx) {
+function handleAppConfigRequest(req, res, meta, override, bundleCtx, devNetMocks) {
   const appName2 = decodeURIComponent(
     (req.url ?? "").replace(/^\/v1\/app-config\//, "").split("?")[0]
   );
@@ -30843,7 +30985,7 @@ function handleAppConfigRequest(req, res, meta, override, bundleCtx) {
     res.end(JSON.stringify({ error: "unknown_app", appName: appName2 }));
     return;
   }
-  const { body, etag, locale } = buildAppConfigDocument(req, meta, override, bundleCtx);
+  const { body, etag, locale } = buildAppConfigDocument(req, meta, override, bundleCtx, devNetMocks);
   if (req.headers["if-none-match"] === etag) {
     res.writeHead(304, { ETag: etag, "Cache-Control": "max-age=60, stale-while-revalidate=86400" });
     res.end();
@@ -31021,13 +31163,13 @@ var init_inject = __esm({
 // ../../core/dev-server/src/store.ts
 import { mkdirSync as mkdirSync21 } from "node:fs";
 import { dirname as dirname26, resolve as resolve32 } from "node:path";
-import { fileURLToPath as fileURLToPath17 } from "node:url";
+import { fileURLToPath as fileURLToPath18 } from "node:url";
 import { createRequire } from "node:module";
 var nodeRequire, ROOT4, Store;
 var init_store2 = __esm({
   "../../core/dev-server/src/store.ts"() {
     nodeRequire = createRequire(import.meta.url);
-    ROOT4 = resolve32(fileURLToPath17(new URL("../../..", import.meta.url)));
+    ROOT4 = resolve32(fileURLToPath18(new URL("../../..", import.meta.url)));
     Store = class {
       _db;
       dbPath;
@@ -35546,7 +35688,7 @@ var init_wix_member_login = __esm({
 });
 
 // ../../core/dev-server/src/wix-gateway.ts
-import { readFileSync as readFileSync44, existsSync as existsSync42 } from "node:fs";
+import { readFileSync as readFileSync44, existsSync as existsSync43 } from "node:fs";
 function isSensitiveBodyName(name) {
   const segments = name.split(/[^A-Za-z0-9]+/).filter(Boolean);
   for (let i2 = 0; i2 < segments.length; i2++) {
@@ -35613,7 +35755,7 @@ function resolveNetMocks(fileMocks, appDeclared) {
 }
 function readNetMocksFile(path2) {
   try {
-    if (!existsSync42(path2)) return null;
+    if (!existsSync43(path2)) return null;
     const raw = JSON.parse(readFileSync44(path2, "utf-8"));
     if (Array.isArray(raw)) return wixMockRuleErrors(raw).length ? null : { rules: raw };
     if (raw && typeof raw === "object") {
@@ -36574,13 +36716,13 @@ var init_stable_ids = __esm({
 // ../../core/dev-server/src/preview.ts
 import { spawn as spawn4 } from "node:child_process";
 import { createHash as createHash18 } from "node:crypto";
-import { existsSync as existsSync43, createReadStream, statSync as statSync11, readFileSync as readFileSync46, renameSync as renameSync9, unlinkSync as unlinkSync3 } from "node:fs";
+import { existsSync as existsSync44, createReadStream, statSync as statSync11, readFileSync as readFileSync46, renameSync as renameSync9, unlinkSync as unlinkSync3 } from "node:fs";
 import { homedir as homedir7, tmpdir as tmpdir2 } from "node:os";
 import { resolve as resolvePath, dirname as dirname27 } from "node:path";
-import { fileURLToPath as fileURLToPath18 } from "node:url";
+import { fileURLToPath as fileURLToPath19 } from "node:url";
 function firstExisting(paths) {
   for (const p2 of paths) {
-    if (p2 && existsSync43(p2)) return p2;
+    if (p2 && existsSync44(p2)) return p2;
   }
   return null;
 }
@@ -36619,7 +36761,7 @@ function isHimalayaAppWindow(w2) {
 }
 async function macosWinlistCommand() {
   const bin = macosWinlistBin();
-  if (existsSync43(bin)) return compiledWinlist(bin);
+  if (existsSync44(bin)) return compiledWinlist(bin);
   if (macosWinlistCompileFailed) return interpretWinlist();
   if (!macosWinlistInFlight) {
     macosWinlistInFlight = buildMacosWinlist(bin).finally(() => {
@@ -36647,7 +36789,7 @@ async function buildMacosWinlist(bin) {
       unlinkSync3(staging);
     } catch {
     }
-    return existsSync43(bin) ? compiledWinlist(bin) : interpretWinlist();
+    return existsSync44(bin) ? compiledWinlist(bin) : interpretWinlist();
   }
   return compiledWinlist(bin);
 }
@@ -37272,7 +37414,7 @@ function finalizeRecording(key3, rec) {
       } catch {
       }
     }
-    const sizeBytes = existsSync43(rec.localPath) ? statSync11(rec.localPath).size : 0;
+    const sizeBytes = existsSync44(rec.localPath) ? statSync11(rec.localPath).size : 0;
     clips.set(rec.id, { path: rec.localPath, mime: rec.mime });
     recordings.delete(key3);
     return { sizeBytes };
@@ -37344,7 +37486,7 @@ async function handlePreviewClip(res, url) {
   const q2 = new URLSearchParams(url.split("?")[1] ?? "");
   const id = q2.get("id") ?? "";
   const clip3 = clips.get(id);
-  if (!clip3 || !existsSync43(clip3.path)) {
+  if (!clip3 || !existsSync44(clip3.path)) {
     res.statusCode = 404;
     res.setHeader("content-type", "application/json");
     return void res.end(JSON.stringify({ error: "clip_not_found", id }));
@@ -37405,7 +37547,7 @@ var init_preview2 = __esm({
     SWIFT_BIN = process.env.HIMALAYA_SWIFT_PATH ?? "swift";
     SWIFTC_BIN = process.env.HIMALAYA_SWIFTC_PATH ?? "swiftc";
     SCREENCAPTURE_BIN = process.env.HIMALAYA_SCREENCAPTURE_PATH ?? "screencapture";
-    MACOS_WINLIST = resolvePath(dirname27(fileURLToPath18(import.meta.url)), "../scripts/macos-winshot.swift");
+    MACOS_WINLIST = resolvePath(dirname27(fileURLToPath19(import.meta.url)), "../scripts/macos-winshot.swift");
     MACOS_WINLIST_BUILD_TIMEOUT_MS = 12e4;
     MACOS_WINLIST_INTERPRET_TIMEOUT_MS = 3e4;
     HIMALAYA_MAC_BUNDLE_ID = /^(com\.himalaya\.|com\.wix\.himi\.|dev\.himalaya\.)/i;
@@ -37462,7 +37604,7 @@ var init_tier4_integrity = __esm({
 });
 
 // ../../core/dev-server/src/tier4-verifier.ts
-import { readFileSync as readFileSync47, existsSync as existsSync44 } from "node:fs";
+import { readFileSync as readFileSync47, existsSync as existsSync45 } from "node:fs";
 import { resolve as resolve34 } from "node:path";
 var TierFourVerifier;
 var init_tier4_verifier = __esm({
@@ -37480,7 +37622,7 @@ var init_tier4_verifier = __esm({
         const expected = this.expectedSri(bundleId, relPath);
         if (!expected) return { ok: true };
         const path2 = resolve34(this.tier4Root, bundleId, relPath);
-        const bytes2 = providedBytes ?? (existsSync44(path2) ? readFileSync47(path2) : null);
+        const bytes2 = providedBytes ?? (existsSync45(path2) ? readFileSync47(path2) : null);
         if (!bytes2) return { ok: false, reason: "file not found" };
         if (computeSri(bytes2) !== expected) return { ok: false, reason: "sri mismatch" };
         return { ok: true };
@@ -37489,7 +37631,7 @@ var init_tier4_verifier = __esm({
         let cached3 = this.cache.get(bundleId);
         if (cached3) return cached3;
         const manifestPath = resolve34(this.tier4Root, bundleId, "manifest.json");
-        if (!existsSync44(manifestPath)) return void 0;
+        if (!existsSync45(manifestPath)) return void 0;
         const manifest = JSON.parse(readFileSync47(manifestPath, "utf8"));
         cached3 = { integrity: parseManifestIntegrity(manifest) };
         this.cache.set(bundleId, cached3);
@@ -37557,7 +37699,7 @@ var init_net_mocks_rollover = __esm({
 import { readFileSync as readFileSync48 } from "node:fs";
 import { homedir as homedir8 } from "node:os";
 import { dirname as dirname28, join as join43 } from "node:path";
-import { fileURLToPath as fileURLToPath19 } from "node:url";
+import { fileURLToPath as fileURLToPath20 } from "node:url";
 function readJson2(path2) {
   try {
     return JSON.parse(readFileSync48(path2, "utf8"));
@@ -37566,7 +37708,7 @@ function readJson2(path2) {
   }
 }
 function ledgerDevServerPort(tenant) {
-  const here = dirname28(fileURLToPath19(import.meta.url));
+  const here = dirname28(fileURLToPath20(import.meta.url));
   const ledger = readJson2(join43(here, "..", "..", "..", "tools", "dev-cli", "ports.json"));
   const port = ledger?.apps?.[tenant]?.devServer;
   return typeof port === "number" ? port : void 0;
@@ -132088,12 +132230,12 @@ var init_png_egress = __esm({
 });
 
 // ../../core/dev-server/src/render-fonts.ts
-import { existsSync as existsSync45, readFileSync as readFileSync49 } from "node:fs";
+import { existsSync as existsSync46, readFileSync as readFileSync49 } from "node:fs";
 import { extname, join as join44 } from "node:path";
 function servedFontFaces(appDir3, tokens2) {
   try {
     const policyPath = join44(appDir3, "fonts.json");
-    const policy = existsSync45(policyPath) ? JSON.parse(readFileSync49(policyPath, "utf8")) : {};
+    const policy = existsSync46(policyPath) ? JSON.parse(readFileSync49(policyPath, "utf8")) : {};
     let plan = planFonts(tokens2, policy);
     if (!hasVendoredFloor()) plan = { ...plan, families: plan.families.filter((f2) => !isHostProvided(f2.name)) };
     if (plan.families.length === 0) return void 0;
@@ -132371,7 +132513,7 @@ var init_motion_flags = __esm({
 // ../../core/dev-server/src/kits.ts
 import { readdirSync as readdirSync24, readFileSync as readFileSync51 } from "node:fs";
 import { resolve as resolve36, join as join45 } from "node:path";
-import { fileURLToPath as fileURLToPath20 } from "node:url";
+import { fileURLToPath as fileURLToPath21 } from "node:url";
 function listKits() {
   return readdirSync24(CATALOG).filter((f2) => f2.endsWith(".json")).map((f2) => {
     const { tokens: tokens2, ...meta } = JSON.parse(readFileSync51(join45(CATALOG, f2), "utf8"));
@@ -132389,7 +132531,7 @@ function readKit(id) {
 var ROOT5, CATALOG;
 var init_kits = __esm({
   "../../core/dev-server/src/kits.ts"() {
-    ROOT5 = resolve36(fileURLToPath20(new URL("../../..", import.meta.url)));
+    ROOT5 = resolve36(fileURLToPath21(new URL("../../..", import.meta.url)));
     CATALOG = join45(ROOT5, "stdlib/design-kits");
   }
 });
@@ -133118,7 +133260,7 @@ __export(config_exports2, {
 });
 import { mkdirSync as mkdirSync22, readFileSync as readFileSync52, writeFileSync as writeFileSync19 } from "node:fs";
 import { dirname as dirname29, join as join46, resolve as resolve37 } from "node:path";
-import { fileURLToPath as fileURLToPath21 } from "node:url";
+import { fileURLToPath as fileURLToPath22 } from "node:url";
 function strip(line) {
   const h2 = line.indexOf("#");
   return (h2 >= 0 ? line.slice(0, h2) : line).replace(/\s+$/, "");
@@ -133292,7 +133434,7 @@ var init_config2 = __esm({
   "../../core/serve-control/src/config.ts"() {
     init_errors();
     init_contract();
-    REPO_ROOT6 = resolve37(dirname29(fileURLToPath21(import.meta.url)), "../../..");
+    REPO_ROOT6 = resolve37(dirname29(fileURLToPath22(import.meta.url)), "../../..");
     OPERATIONAL_OVERLAY_KEYS = /* @__PURE__ */ new Set([
       "wixCachePolicy",
       "telemetryConfig",
@@ -133360,10 +133502,10 @@ var init_config2 = __esm({
 // ../../core/dev-server/src/index.ts
 import { createServer as createServer3 } from "node:http";
 import { readFile, stat } from "node:fs/promises";
-import { readFileSync as readFileSync53, existsSync as existsSync46, watch, mkdirSync as mkdirSync23, rmSync as rmSync11 } from "node:fs";
+import { readFileSync as readFileSync53, existsSync as existsSync47, watch, mkdirSync as mkdirSync23, rmSync as rmSync11 } from "node:fs";
 import { basename as basename10, dirname as dirname30, extname as extname2, join as join47, relative as relative8, resolve as resolve38, normalize as normalize3, sep as sep10 } from "node:path";
 import { createHash as createHash21, randomUUID as randomUUID5 } from "node:crypto";
-import { fileURLToPath as fileURLToPath22, pathToFileURL as pathToFileURL6 } from "node:url";
+import { fileURLToPath as fileURLToPath23, pathToFileURL as pathToFileURL6 } from "node:url";
 function readLogicBundle(read, tier5Dir, name) {
   return read(tier5Dir ?? TIER5_ROOT2, name) ?? (tier5Dir && tier5Dir !== TIER5_ROOT2 ? read(TIER5_ROOT2, name) : void 0);
 }
@@ -133423,6 +133565,9 @@ function readAppTokens(state) {
     return null;
   }
 }
+function deviceNetMocks(state) {
+  return state.deviceNetMocks ?? null;
+}
 function effectiveAppConfigOverride(state) {
   let gitOverlay;
   if (state.app) {
@@ -133488,7 +133633,7 @@ function handleL10nRequest(req, res, state) {
     return sendJson(res, 404, { error: "unknown_app", app }, cors);
   }
   const path2 = resolve38(state.app.dir, "l10n", `${tag}.json`);
-  if (!existsSync46(path2)) {
+  if (!existsSync47(path2)) {
     res.writeHead(204, cors);
     res.end();
     return;
@@ -133629,7 +133774,8 @@ async function handleBootRequest(req, res, state) {
     req,
     state.app.meta,
     effectiveAppConfigOverride(state),
-    bundleCtx
+    bundleCtx,
+    deviceNetMocks(state)
   );
   const tokenDocument = effectiveAppTokens(req, state);
   const homeScreenId = config.homeScreenId ?? state.app.meta.homeScreenId ?? null;
@@ -134415,7 +134561,7 @@ async function primeAppDependencyWatchers(state) {
   const current = state.app;
   if (!current) return;
   const entry = resolve38(current.dir, "dev/index.ts");
-  if (!existsSync46(entry)) return;
+  if (!existsSync47(entry)) return;
   mkdirSync23(HMR_TMP_DIR, { recursive: true });
   const outfile = resolve38(HMR_TMP_DIR, `${current.name}-deps-${++appReloadSeq}.mjs`);
   try {
@@ -136259,6 +136405,9 @@ function createDevServer(opts = {}) {
     const seeded = applyNetMocks(state.wix, resolved2.mocks);
     state.wixSeededOn = todayYmd();
     state.wixSeededFromApp = resolved2.source !== "file";
+    if (resolved2.source === "file" && state.app && existsSync47(resolve38(state.app.dir, "himalaya.content.json"))) {
+      state.deviceNetMocks = resolved2.mocks;
+    }
     const from = resolved2.source === "file" ? netMocksPath : `${state.appName} devGateway.rules`;
     console.error(`[himalaya-dev] net-mocks: seeded ${seeded.rules} rule(s), mode=${seeded.mode} from ${from}`);
   }
@@ -136517,7 +136666,7 @@ function createDevServer(opts = {}) {
             // Through a tenant host's proxy, the nav bundle routes back through that host, as screens do.
             serverBaseUrl: forwardedBaseUrl(req) ?? state.serverBaseUrl,
             bundleIntegrity: (name) => bundleIntegritySync(name, state.tier5Dir)
-          });
+          }, deviceNetMocks(state));
         }
         {
           const appRoutes = state.app?.module.dataRoutes;
@@ -136773,7 +136922,7 @@ var init_src6 = __esm({
     init_kits();
     init_widgets();
     init_descriptor_postprocess();
-    ROOT6 = resolve38(fileURLToPath22(new URL("../../..", import.meta.url)));
+    ROOT6 = resolve38(fileURLToPath23(new URL("../../..", import.meta.url)));
     setPngFontCss(async (tokens2, idiomContext) => await pngFontFaceCss(tokens2) + (idiomContext ? await idiomFontFaceCss(idiomContext) : ""));
     setPngEgress(startEgressProxy);
     TIER3_ROOT = resolve38(ROOT6, "core/dev-server/web");
@@ -140069,9 +140218,9 @@ __export(build_exports2, {
   withoutDevOnlyAppConfig: () => withoutDevOnlyAppConfig
 });
 import { createHash as createHash25 } from "node:crypto";
-import { readFileSync as readFileSync54, readdirSync as readdirSync25, existsSync as existsSync47 } from "node:fs";
+import { readFileSync as readFileSync54, readdirSync as readdirSync25, existsSync as existsSync48 } from "node:fs";
 import { dirname as dirname31, join as join48, resolve as resolve39 } from "node:path";
-import { fileURLToPath as fileURLToPath23 } from "node:url";
+import { fileURLToPath as fileURLToPath24 } from "node:url";
 import { createRequire as createRequire2 } from "node:module";
 import { execFileSync as execFileSync4 } from "node:child_process";
 import { gzipSync as gzipSync2 } from "node:zlib";
@@ -140113,7 +140262,7 @@ function l10nLintOptions(locale, appDir3) {
   const catalog3 = /* @__PURE__ */ new Set();
   for (const tag of tags) {
     const path2 = join48(appDir3, "l10n", `${tag}.json`);
-    if (!existsSync47(path2)) continue;
+    if (!existsSync48(path2)) continue;
     try {
       const parsed = JSON.parse(readFileSync54(path2, "utf8"));
       for (const m2 of Object.values(parsed.messages ?? {})) {
@@ -140295,7 +140444,7 @@ function shellSha(root = REPO_ROOT7) {
 function isMonorepoCheckout(dir) {
   try {
     const top = execFileSync4("git", ["rev-parse", "--show-toplevel"], { cwd: dir, stdio: ["ignore", "pipe", "ignore"] }).toString().trim();
-    return top.length > 0 && existsSync47(join48(top, "core", "schema", "core.proto"));
+    return top.length > 0 && existsSync48(join48(top, "core", "schema", "core.proto"));
   } catch {
     return false;
   }
@@ -140546,9 +140695,9 @@ async function buildFromLoaded(preloaded, dest, opts = {}) {
   const tier5Dir = opts.tier5Dir ?? TIER5_DIR;
   const bundlePath = (name) => {
     const own5 = join48(tier5Dir, `${name}.bundle.js`);
-    if (existsSync47(own5)) return own5;
+    if (existsSync48(own5)) return own5;
     const shared = join48(TIER5_DIR, `${name}.bundle.js`);
-    return resolve39(tier5Dir) !== TIER5_DIR && existsSync47(shared) ? shared : void 0;
+    return resolve39(tier5Dir) !== TIER5_DIR && existsSync48(shared) ? shared : void 0;
   };
   const bundleDirFor = (name) => {
     const path2 = name ? bundlePath(name) : void 0;
@@ -140709,11 +140858,11 @@ async function buildFromLoaded(preloaded, dest, opts = {}) {
   };
   checkRegistry(preloaded.module.actions);
   const contentManifestPath2 = join48(preloaded.dir, "himalaya.content.json");
-  const contentManifest = existsSync47(contentManifestPath2) ? JSON.parse(readFileSync54(contentManifestPath2, "utf8")) : void 0;
+  const contentManifest = existsSync48(contentManifestPath2) ? JSON.parse(readFileSync54(contentManifestPath2, "utf8")) : void 0;
   let screenMetadata = parseScreenMetadata(contentManifest?.screens);
   if (contentManifest?.shell === "brandy" && screenMetadata) {
     const provisioningPath2 = join48(preloaded.dir, "provisioning.json");
-    if (existsSync47(provisioningPath2)) screenMetadata = siteViewMetadataForBuild(screenMetadata, JSON.parse(readFileSync54(provisioningPath2, "utf8")).site);
+    if (existsSync48(provisioningPath2)) screenMetadata = siteViewMetadataForBuild(screenMetadata, JSON.parse(readFileSync54(provisioningPath2, "utf8")).site);
   }
   await store.reset(app);
   const bundles = {};
@@ -140773,7 +140922,7 @@ async function buildFromLoaded(preloaded, dest, opts = {}) {
   if (store.putDoc) {
     for (const [name, file2] of [["spec", "SPEC.md"], ["mobile-ux", "MOBILE-UX.md"]]) {
       const path2 = join48(preloaded.dir, file2);
-      if (!existsSync47(path2)) continue;
+      if (!existsSync48(path2)) continue;
       const bytes2 = readFileSync54(path2);
       if (bytes2.length === 0 || bytes2.length > MAX_AUTHORING_DOC_BYTES) {
         throw new Error(`${file2} must be non-empty and at most ${MAX_AUTHORING_DOC_BYTES} bytes to ship with a release.`);
@@ -140833,7 +140982,7 @@ async function buildFromLoaded(preloaded, dest, opts = {}) {
   const fontWarnings = [];
   try {
     const appTokens = readTokensForLint(preloaded) ?? {};
-    const policy = existsSync47(join48(preloaded.dir, "fonts.json")) ? JSON.parse(readFileSync54(join48(preloaded.dir, "fonts.json"), "utf8")) : {};
+    const policy = existsSync48(join48(preloaded.dir, "fonts.json")) ? JSON.parse(readFileSync54(join48(preloaded.dir, "fonts.json"), "utf8")) : {};
     fontPlan = planFonts(appTokens, policy);
   } catch (err) {
     throw new Error(
@@ -141405,7 +141554,7 @@ async function buildFunctionsOnlyRelease(preloaded, dest) {
   const sources = {};
   for (const definition of config.functions.functions) {
     const candidates = [".ts", ".js", ".mts", ".mjs"].map((extension) => join48(preloaded.dir, "functions", `${definition.name}${extension}`));
-    const source = candidates.find((candidate) => existsSync47(candidate));
+    const source = candidates.find((candidate) => existsSync48(candidate));
     if (!source) throw new Error(`missing source for function ${definition.name}; expected functions/${definition.name}.ts`);
     sources[definition.name] = readFileSync54(source, "utf8");
   }
@@ -141479,7 +141628,7 @@ var init_build3 = __esm({
     BAKE_OFFLINE_BASE = "http://himalaya-bake.invalid";
     KNOWN_ICON_NAMES = [...ICON_NAMES].sort();
     KNOWN_ICONS = new Set(KNOWN_ICON_NAMES);
-    REPO_ROOT7 = resolve39(dirname31(fileURLToPath23(import.meta.url)), "../..");
+    REPO_ROOT7 = resolve39(dirname31(fileURLToPath24(import.meta.url)), "../..");
     TIER5_DIR = join48(REPO_ROOT7, "core/dev-server/tier5-bundles");
     requireFromHere = createRequire2(import.meta.url);
     SOURCEMAP_ON_DEMAND_PATH = join48(REPO_ROOT7, "core/dev-server/tier5-bundles-src/sourcemap-on-demand.mjs");
@@ -142043,7 +142192,7 @@ __export(build_changes_exports, {
   diffTokens: () => diffTokens,
   headline: () => headline
 });
-import { existsSync as existsSync48, readdirSync as readdirSync26, readFileSync as readFileSync55 } from "node:fs";
+import { existsSync as existsSync49, readdirSync as readdirSync26, readFileSync as readFileSync55 } from "node:fs";
 import { join as join49 } from "node:path";
 function componentsOf(descriptor) {
   const out2 = /* @__PURE__ */ new Map();
@@ -142109,7 +142258,7 @@ function diffTokens(before, after) {
   return out2;
 }
 function describeChanges(oldTree, newTree, diff, opts = {}) {
-  if (!existsSync48(oldTree) || !existsSync48(newTree)) return { items: [], more: 0 };
+  if (!existsSync49(oldTree) || !existsSync49(newTree)) return { items: [], more: 0 };
   const all = [];
   const before = screensIn(oldTree);
   const after = screensIn(newTree);
@@ -142200,7 +142349,7 @@ var init_build_changes = __esm({
 });
 
 // src/studio-timeline.ts
-import { existsSync as existsSync49, readFileSync as readFileSync56 } from "node:fs";
+import { existsSync as existsSync50, readFileSync as readFileSync56 } from "node:fs";
 import { join as join50 } from "node:path";
 function stateOf(view) {
   const j2 = view.journal[0];
@@ -142269,7 +142418,7 @@ function validFrame(f2) {
 }
 function readTimeline(dir) {
   const file2 = join50(dir, TIMELINE_FILE);
-  if (!existsSync49(file2)) return [];
+  if (!existsSync50(file2)) return [];
   const out2 = [];
   for (const line of readFileSync56(file2, "utf8").split("\n")) {
     if (!line.trim()) continue;
@@ -142295,7 +142444,7 @@ function appendFrame(dir, view, reveal = null) {
   const frames = readTimeline(dir);
   const last = frames[frames.length - 1];
   if (last && last.v === view.v && !reveal) {
-    if (!existsSync49(join50(dir, TIMELINE_JS))) writeTimelineJs(dir, frames);
+    if (!existsSync50(join50(dir, TIMELINE_JS))) writeTimelineJs(dir, frames);
     return frames.length;
   }
   let prev = null;
@@ -142367,7 +142516,7 @@ __export(studio_exports, {
   writeStudioRecord: () => writeStudioRecord
 });
 import { createHash as createHash26 } from "node:crypto";
-import { existsSync as existsSync50, readdirSync as readdirSync27, readFileSync as readFileSync57, realpathSync as realpathSync8, statSync as statSync12 } from "node:fs";
+import { existsSync as existsSync51, readdirSync as readdirSync27, readFileSync as readFileSync57, realpathSync as realpathSync8, statSync as statSync12 } from "node:fs";
 import { basename as basename11, extname as extname3, join as join51, relative as relative9, resolve as resolve40, sep as sep11 } from "node:path";
 import { pathToFileURL as pathToFileURL7 } from "node:url";
 function realInside(dir, abs) {
@@ -142393,7 +142542,7 @@ function archiveFile(dir, memory, abs) {
   if (size === 0) return null;
   const key3 = relative9(dir, abs);
   const hit = memory.files?.[key3];
-  if (hit && hit.size === size && hit.mtimeMs === mtimeMs && hit.ino === ino && existsSync50(join51(dir, HISTORY_DIR, `${hit.sha}.${hit.ext}`))) {
+  if (hit && hit.size === size && hit.mtimeMs === mtimeMs && hit.ino === ino && existsSync51(join51(dir, HISTORY_DIR, `${hit.sha}.${hit.ext}`))) {
     return { sha: hit.sha, ext: hit.ext, file: `${hit.sha}.${hit.ext}` };
   }
   let archived;
@@ -142414,7 +142563,7 @@ function loadMemory(dir, now) {
 function observeShots(dir, memory, now) {
   const shotsDir = join51(dir, ".himi", "shots");
   const seen = /* @__PURE__ */ new Set();
-  const files = existsSync50(shotsDir) ? readdirSync27(shotsDir).filter((f2) => /\.(png|jpe?g)$/i.test(f2)).sort() : [];
+  const files = existsSync51(shotsDir) ? readdirSync27(shotsDir).filter((f2) => /\.(png|jpe?g)$/i.test(f2)).sort() : [];
   for (const f2 of files) {
     const id = basename11(f2, extname3(f2));
     const archived = archiveFile(dir, memory, join51(shotsDir, f2));
@@ -142432,7 +142581,7 @@ function observeShots(dir, memory, now) {
       memory.shots[id] = { ...prev, present: true };
     }
   }
-  if (existsSync50(shotsDir)) {
+  if (existsSync51(shotsDir)) {
     for (const [id, shot] of Object.entries(memory.shots)) if (!seen.has(id) && shot.present) memory.shots[id] = { ...shot, present: false };
   }
   if (memory.timeline.length > MAX_TIMELINE) memory.timeline = memory.timeline.slice(-MAX_TIMELINE);
@@ -142458,7 +142607,7 @@ function appIdentity(dir) {
 }
 function testRuns(dir) {
   const att = join51(dir, ".himi", "attestations");
-  if (!existsSync50(att)) return [];
+  if (!existsSync51(att)) return [];
   const runs = [];
   for (const f2 of readdirSync27(att)) {
     if (!f2.endsWith(".json") || f2 === "latest.json") continue;
@@ -142479,7 +142628,7 @@ function testRuns(dir) {
 }
 function siteHome(dir) {
   for (const pages2 of [join51(dir, ".himi", "business-book", "evidence", "pages"), join51(dir, "evidence", "pages")]) {
-    if (!existsSync50(pages2)) continue;
+    if (!existsSync51(pages2)) continue;
     const home = readdirSync27(pages2).filter((f2) => /^home.*\.(png|jpe?g)$/i.test(f2)).sort()[0];
     if (home) return join51(pages2, home);
   }
@@ -142685,7 +142834,7 @@ function writeBoard(dir, now) {
 }
 function refreshStudio(dir, now = /* @__PURE__ */ new Date()) {
   try {
-    if (!existsSync50(join51(dir, STUDIO_PAGE))) return { refreshed: false };
+    if (!existsSync51(join51(dir, STUDIO_PAGE))) return { refreshed: false };
     return { refreshed: true, view: writeBoard(dir, now.toISOString()) };
   } catch {
     return { refreshed: false };
@@ -143368,7 +143517,7 @@ __export(preflight_exports, {
   parseStoreConfig: () => parseStoreConfig,
   requireEnv: () => requireEnv
 });
-import { existsSync as existsSync51, readFileSync as readFileSync59 } from "node:fs";
+import { existsSync as existsSync52, readFileSync as readFileSync59 } from "node:fs";
 import { isAbsolute as isAbsolute4, relative as relative10, resolve as resolve42 } from "node:path";
 function isInsideRepo(p2) {
   const rel = relative10(REPO_ROOT3, resolve42(p2));
@@ -143425,7 +143574,7 @@ function parseStoreConfig(text9) {
 }
 function loadStoreConfig(app) {
   const p2 = storeConfigPath(app);
-  if (!existsSync51(p2)) {
+  if (!existsSync52(p2)) {
     throw new Error(`No store config at ${p2}. Create apps/${app}/store/store.config.yaml first (see /setup-store-signing).`);
   }
   return parseStoreConfig(readFileSync59(p2, "utf8"));
@@ -150157,7 +150306,7 @@ var init_customer_signing_inspect = __esm({
 });
 
 // src/push-onboarding.ts
-import { existsSync as existsSync52, mkdirSync as mkdirSync24, readFileSync as readFileSync60, statSync as statSync13, writeFileSync as writeFileSync20, chmodSync as chmodSync2 } from "node:fs";
+import { existsSync as existsSync53, mkdirSync as mkdirSync24, readFileSync as readFileSync60, statSync as statSync13, writeFileSync as writeFileSync20, chmodSync as chmodSync2 } from "node:fs";
 import { basename as basename12, dirname as dirname32, join as join52, resolve as resolve43 } from "node:path";
 function readJson5(path2) {
   try {
@@ -150169,7 +150318,7 @@ function readJson5(path2) {
 }
 function pushInputsFromContent(dir) {
   const root = resolve43(dir);
-  if (!existsSync52(join52(root, "himalaya.content.json"))) return { initialized: false };
+  if (!existsSync53(join52(root, "himalaya.content.json"))) return { initialized: false };
   const content = readJson5(join52(root, "himalaya.content.json"));
   const provisioning = readJson5(join52(root, "provisioning.json"));
   const native = provisioning.native ?? {};
@@ -150301,7 +150450,7 @@ function buildPushSetupBody(i2, keys) {
 }
 function readPushOnboarding(dir) {
   const path2 = join52(resolve43(dir), PUSH_ONBOARDING_PATH);
-  if (!existsSync52(path2)) return { version: 1 };
+  if (!existsSync53(path2)) return { version: 1 };
   const parsed = readJson5(path2);
   return { version: 1, ...parsed };
 }
@@ -150336,7 +150485,7 @@ function recordPushDeferral(dir, d2) {
 }
 function clearPushDeferral(dir) {
   const path2 = join52(resolve43(dir), PUSH_ONBOARDING_PATH);
-  if (!existsSync52(path2)) return;
+  if (!existsSync53(path2)) return;
   const { push: _dropped, ...rest } = readPushOnboarding(dir);
   writeFile(dir, { ...rest, version: 1 });
 }
@@ -150404,7 +150553,7 @@ var signing_inspect_exports = {};
 __export(signing_inspect_exports, {
   runSigningInspect: () => runSigningInspect
 });
-import { existsSync as existsSync53, readFileSync as readFileSync61, statSync as statSync14 } from "node:fs";
+import { existsSync as existsSync54, readFileSync as readFileSync61, statSync as statSync14 } from "node:fs";
 import { isAbsolute as isAbsolute5, resolve as resolve44 } from "node:path";
 function fail4(io2, code, fields = {}) {
   io2.error(JSON.stringify({ ok: false, code, ...fields }));
@@ -150494,7 +150643,7 @@ async function runSigningInspect(pos, flags, io2, deps = {}) {
     } catch (error) {
       return fail4(io2, "signing_inspect_key_inside_repo", { error: error.message });
     }
-    if (!existsSync53(certPath) || !existsSync53(profilePath2)) {
+    if (!existsSync54(certPath) || !existsSync54(profilePath2)) {
       return fail4(io2, "signing_inspect_local_assets_unreadable", { error: "cannot read --cert-file or --profile-file" });
     }
     if (statSync14(certPath).size > 1048576 || statSync14(profilePath2).size > 1048576) {
@@ -151237,7 +151386,7 @@ __export(pack_exports, {
 });
 import { createHash as createHash29 } from "node:crypto";
 import { deflateRawSync, inflateRawSync } from "node:zlib";
-import { existsSync as existsSync54, mkdirSync as mkdirSync25, readFileSync as readFileSync63, readdirSync as readdirSync28, rmSync as rmSync12, statSync as statSync15, writeFileSync as writeFileSync21 } from "node:fs";
+import { existsSync as existsSync55, mkdirSync as mkdirSync25, readFileSync as readFileSync63, readdirSync as readdirSync28, rmSync as rmSync12, statSync as statSync15, writeFileSync as writeFileSync21 } from "node:fs";
 import { dirname as dirname33, join as join54, resolve as resolve46 } from "node:path";
 function writeZip(entries) {
   const sorted2 = entries.slice().sort((a2, b2) => a2.path < b2.path ? -1 : a2.path > b2.path ? 1 : 0);
@@ -151332,10 +151481,10 @@ function inflateEntry(buf, entry) {
   return bytes2;
 }
 function readIf(path2) {
-  return existsSync54(path2) && statSync15(path2).isFile() ? readFileSync63(path2) : null;
+  return existsSync55(path2) && statSync15(path2).isFile() ? readFileSync63(path2) : null;
 }
 function listDir(dir) {
-  return existsSync54(dir) ? readdirSync28(dir).filter((f2) => statSync15(join54(dir, f2)).isFile()) : [];
+  return existsSync55(dir) ? readdirSync28(dir).filter((f2) => statSync15(join54(dir, f2)).isFile()) : [];
 }
 function gatherReleaseEntries(appDir3) {
   const manifestPath = join54(appDir3, HIMI_PACKAGE_MANIFEST_PATH);
@@ -151414,7 +151563,7 @@ function packRelease(releaseRoot, app, out2, opts = {}) {
   const appDir3 = join54(resolve46(releaseRoot), app);
   const { all, header, skipped } = buildEntries(appDir3, app, opts);
   const buf = writeZip(all);
-  const isDir2 = existsSync54(out2) && statSync15(out2).isDirectory();
+  const isDir2 = existsSync55(out2) && statSync15(out2).isDirectory();
   const outFile = isDir2 ? join54(resolve46(out2), packageFileName(app, header.releaseId)) : resolve46(out2);
   mkdirSync25(dirname33(outFile), { recursive: true });
   writeFileSync21(outFile, buf);
@@ -151431,11 +151580,11 @@ function resolvePackageDirDest(outDir, app, releaseId) {
     }
   };
   const replaceable = (dir) => {
-    if (!existsSync54(dir)) return true;
+    if (!existsSync55(dir)) return true;
     if (!statSync15(dir).isDirectory()) return false;
     return readdirSync28(dir).length === 0 || packagedApp(dir) === app;
   };
-  if (existsSync54(outDir) && !statSync15(outDir).isDirectory()) {
+  if (existsSync55(outDir) && !statSync15(outDir).isDirectory()) {
     throw new Error(`refusing to write a package tree over ${outDir} \u2014 it is a file, not a directory`);
   }
   if (replaceable(outDir)) return outDir;
@@ -151496,7 +151645,7 @@ function openPackageDir(dir) {
       else if (isSafeEntryName(childRel)) entries.set(childRel, readFileSync63(childAbs));
     }
   };
-  if (!existsSync54(root)) throw new Error(`no such package directory: ${root}`);
+  if (!existsSync55(root)) throw new Error(`no such package directory: ${root}`);
   walk2("");
   const manifestBytes = entries.get(HIMI_PACKAGE_MANIFEST_PATH);
   if (manifestBytes) {
@@ -151581,7 +151730,7 @@ __export(app_source_exports, {
   zipAppSource: () => zipAppSource
 });
 import { createHash as createHash30 } from "node:crypto";
-import { readdirSync as readdirSync29, lstatSync as lstatSync15, readFileSync as readFileSync64, mkdirSync as mkdirSync26, writeFileSync as writeFileSync22, existsSync as existsSync55, rmSync as rmSync13, rmdirSync as rmdirSync2, unlinkSync as unlinkSync4 } from "node:fs";
+import { readdirSync as readdirSync29, lstatSync as lstatSync15, readFileSync as readFileSync64, mkdirSync as mkdirSync26, writeFileSync as writeFileSync22, existsSync as existsSync56, rmSync as rmSync13, rmdirSync as rmdirSync2, unlinkSync as unlinkSync4 } from "node:fs";
 import { join as join55, resolve as resolve47, sep as sep13 } from "node:path";
 import { createRequire as createRequire3 } from "node:module";
 import { deflateRawSync as deflateRawSync2 } from "node:zlib";
@@ -151597,7 +151746,7 @@ function walkSourceTree(dir, file2, skip, enter = () => {
         continue;
       }
       if (st2.isDirectory()) {
-        if (isDeniedSourceDir(name, relDir) || existsSync55(join55(dir, rel, PACKAGE_DIR_MARKER))) skip(rel);
+        if (isDeniedSourceDir(name, relDir) || existsSync56(join55(dir, rel, PACKAGE_DIR_MARKER))) skip(rel);
         else walk2(rel);
         continue;
       }
@@ -151765,7 +151914,7 @@ function writeAppSource(entries, destDir) {
   return written;
 }
 function staleSourcePaths(entries, destDir) {
-  if (!existsSync55(destDir)) return [];
+  if (!existsSync56(destDir)) return [];
   const archived = new Set(entries.map((e2) => e2.path));
   const stale = [];
   walkSourceTree(destDir, (archivePath) => {
@@ -151821,7 +151970,7 @@ function removeStaleSource(entries, destDir) {
     const segments = entry.path.split("/");
     for (let i2 = 1; i2 < segments.length; i2++) needed.add(segments.slice(0, i2).join("/"));
   }
-  if (existsSync55(root)) pruneEmptyDirs(root, "", needed, removed);
+  if (existsSync56(root)) pruneEmptyDirs(root, "", needed, removed);
   return removed.sort();
 }
 function pruneEmptyDirs(root, rel, needed, removed) {
@@ -151909,7 +152058,7 @@ __export(run_watch_exports, {
   watchedContentDir: () => watchedContentDir,
   writeRunRecord: () => writeRunRecord
 });
-import { closeSync as closeSync4, constants as constants2, existsSync as existsSync56, fstatSync, lstatSync as lstatSync16, statSync as statSync16, readdirSync as readdirSync30, mkdirSync as mkdirSync27, openSync as openSync4, readFileSync as readFileSync65, realpathSync as realpathSync9, renameSync as renameSync10, rmSync as rmSync14, writeFileSync as writeFileSync23, watch as fsWatch } from "node:fs";
+import { closeSync as closeSync4, constants as constants2, existsSync as existsSync57, fstatSync, lstatSync as lstatSync16, statSync as statSync16, readdirSync as readdirSync30, mkdirSync as mkdirSync27, openSync as openSync4, readFileSync as readFileSync65, realpathSync as realpathSync9, renameSync as renameSync10, rmSync as rmSync14, writeFileSync as writeFileSync23, watch as fsWatch } from "node:fs";
 import { randomUUID as randomUUID6 } from "node:crypto";
 import { extname as extname4, join as join56, resolve as resolve48, sep as sep14 } from "node:path";
 function diffReleases(prev, next) {
@@ -152016,7 +152165,7 @@ function watchedContentDir(source) {
   if (!source || /^https?:\/\//i.test(source)) return null;
   const dir = resolve48(source);
   try {
-    return statSync16(dir).isDirectory() && existsSync56(join56(dir, "himalaya.content.json")) ? dir : null;
+    return statSync16(dir).isDirectory() && existsSync57(join56(dir, "himalaya.content.json")) ? dir : null;
   } catch {
     return null;
   }
@@ -152671,7 +152820,7 @@ __export(milestones_exports, {
 });
 import { createHash as createHash33, randomUUID as randomUUID7 } from "node:crypto";
 import { spawn as spawn5 } from "node:child_process";
-import { closeSync as closeSync5, existsSync as existsSync57, lstatSync as lstatSync19, readFileSync as readFileSync69, statSync as statSync17 } from "node:fs";
+import { closeSync as closeSync5, existsSync as existsSync58, lstatSync as lstatSync19, readFileSync as readFileSync69, statSync as statSync17 } from "node:fs";
 import { createServer as createServer4 } from "node:net";
 import { basename as basename15, dirname as dirname34, isAbsolute as isAbsolute6, join as join60, relative as relative11, resolve as resolve49, sep as sep15 } from "node:path";
 function homeShotPath(dir, home) {
@@ -152784,7 +152933,7 @@ function autoPictureGate(dir) {
 }
 async function homePictureAtValidate(dir, opts) {
   if (!opts.ok) return { skipped: "validate found errors, so the picture was left as it is" };
-  if (!existsSync57(join60(dir, "himalaya.content.json"))) return { skipped: "not a content package" };
+  if (!existsSync58(join60(dir, "himalaya.content.json"))) return { skipped: "not a content package" };
   const env = opts.env ?? process.env;
   if (ciSet(env)) return { skipped: "the CI environment variable is set" };
   if (env.NODE_TEST_CONTEXT) return { skipped: "running under `node --test`" };
@@ -152854,7 +153003,7 @@ function stillBuilding(dir, image, now) {
   }
 }
 function firstLookBeforeOwnPostcard(dir, image, now) {
-  if (!image || !existsSync57(image) || initDivergence(dir).state !== "diverged") return void 0;
+  if (!image || !existsSync58(image) || initDivergence(dir).state !== "diverged") return void 0;
   return journal(dir, "first-look", withHomeCaveat(yourFirstLookMessage(dir), homeCaveat(dir, image)), { image, ...now ? { now } : {} });
 }
 function afterRenderPng(dir, input) {
@@ -152919,13 +153068,13 @@ function testChangeNote(headline2, change) {
 }
 function afterTestRun(dir, input) {
   const firstLook = firstLookBeforeOwnPostcard(dir, input.homeShot, input.now);
-  const shot = input.homeShot && existsSync57(input.homeShot) ? input.homeShot : void 0;
+  const shot = input.homeShot && existsSync58(input.homeShot) ? input.homeShot : void 0;
   const caveat = shot ? homeCaveat(dir, shot) : void 0;
   const counts = testPostcardMessage(input);
   const headline2 = caveat ? `${counts} But ${caveat}.` : counts;
   const postcard = journal(dir, "test", headline2, {
     ref: input.runId,
-    ...input.homeShot && existsSync57(input.homeShot) ? { image: input.homeShot } : {},
+    ...input.homeShot && existsSync58(input.homeShot) ? { image: input.homeShot } : {},
     ...input.now ? { now: input.now } : {},
     unlessUnchanged: true,
     changeNote: (change) => testChangeNote(headline2, change)
@@ -152968,7 +153117,7 @@ function draftPictureGap(input) {
   if (!input.home) return { reason: "the app's dev/index.ts names no literal homeScreenId, so there is no home screen to picture" };
   if (!input.homeShot) return { reason: "the homeScreenId does not name a file under .himi/shots" };
   const render = `himi render ${shellQuote(input.home)} --png${contentArg(input.content)}`;
-  if (!existsSync57(input.homeShot)) return { reason: "there is no home shot yet", render };
+  if (!existsSync58(input.homeShot)) return { reason: "there is no home shot yet", render };
   if (input.sourceChangedAtMs === void 0) return { reason: "the source's last change could not be read, so the home shot cannot be shown to be current", render };
   if (!shotIsCurrent(input.homeShot, input.sourceChangedAtMs)) return { reason: "the home shot is older than the last source edit, so it is not a picture of this draft", render };
   return null;
@@ -153046,7 +153195,7 @@ function draftChangeNote(dir, input) {
       if (!previous) return void 0;
       const shaOf = (i2) => i2 && typeof i2 === "object" && typeof i2.sha256 === "string" ? i2.sha256 : void 0;
       const had = Array.isArray(previous.images) ? previous.images.map(shaOf).find(Boolean) : void 0;
-      const has = input.picture && existsSync57(input.picture) ? sha256Of2(input.picture) : void 0;
+      const has = input.picture && existsSync58(input.picture) ? sha256Of2(input.picture) : void 0;
       if (had && has) parts.push(had === has ? "the home screen looks the same" : "the home screen changed");
       else if (has) parts.push("a home picture this time");
       else return void 0;
@@ -153112,7 +153261,7 @@ function homeShotForPostcard(dir, opts = {}) {
   const shot = homeShotPath(dir, home);
   if (!shot) return { skipped: "the homeScreenId does not name a file under .himi/shots" };
   const render = `\`himi render ${shellQuote(home)} --png\``;
-  if (!existsSync57(shot)) return { skipped: `no home shot yet \u2014 ${render} makes one, and the next postcard carries it` };
+  if (!existsSync58(shot)) return { skipped: `no home shot yet \u2014 ${render} makes one, and the next postcard carries it` };
   let changed;
   try {
     changed = newestSourceChangeMs(dir);
@@ -153192,7 +153341,7 @@ function liveWatchRunning(dir, isAlive = pidAlive, now) {
 }
 function watchReminder(dir, opts = {}) {
   try {
-    if (!existsSync57(join60(dir, "himalaya.content.json"))) return void 0;
+    if (!existsSync58(join60(dir, "himalaya.content.json"))) return void 0;
     const nowDate = opts.now ?? /* @__PURE__ */ new Date();
     const live3 = liveWatch(dir, opts.isAlive, nowDate);
     const now = nowDate.getTime();
@@ -153748,17 +153897,17 @@ __export(template_recommend_exports, {
   recommendTemplates: () => recommendTemplates,
   verticalsFromBook: () => verticalsFromBook
 });
-import { existsSync as existsSync58, readFileSync as readFileSync71 } from "node:fs";
+import { existsSync as existsSync59, readFileSync as readFileSync71 } from "node:fs";
 import { join as join62 } from "node:path";
 function verticalsFromBook(path2) {
-  const dir = existsSync58(join62(path2, "book.json")) || existsSync58(join62(path2, "provisioning.overlay.json")) ? path2 : join62(path2, ".himi", "business-book");
+  const dir = existsSync59(join62(path2, "book.json")) || existsSync59(join62(path2, "provisioning.overlay.json")) ? path2 : join62(path2, ".himi", "business-book");
   const overlay = join62(dir, "provisioning.overlay.json");
-  if (existsSync58(overlay)) {
+  if (existsSync59(overlay)) {
     const v2 = JSON.parse(readFileSync71(overlay, "utf8")).installedVerticals;
     if (Array.isArray(v2) && v2.length) return v2.filter((x2) => typeof x2 === "string");
   }
   const book = join62(dir, "book.json");
-  if (existsSync58(book)) {
+  if (existsSync59(book)) {
     const probes = JSON.parse(readFileSync71(book, "utf8")).probes;
     if (Array.isArray(probes)) return installedFromProbes(probes);
   }
@@ -154176,7 +154325,7 @@ __export(base44_types_exports, {
   renderBase44Types: () => renderBase44Types,
   writeBase44Types: () => writeBase44Types
 });
-import { existsSync as existsSync59, mkdirSync as mkdirSync28, readFileSync as readFileSync72, writeFileSync as writeFileSync25 } from "node:fs";
+import { existsSync as existsSync60, mkdirSync as mkdirSync28, readFileSync as readFileSync72, writeFileSync as writeFileSync25 } from "node:fs";
 import { dirname as dirname35, join as join63 } from "node:path";
 function logicalName(spec) {
   return (isAdoptedEntity(spec) ? spec.base44Name : spec.name) ?? "";
@@ -154256,7 +154405,7 @@ async function writeBase44Types(dir, app) {
   if (!list?.length) throw new Base44TypesError("no_base44_entities", "config.ts declares no base44.entities \u2014 nothing to type. Declare them (or run `himi base44 adopt`) first.");
   const text9 = renderBase44Types(list, app);
   const path2 = join63(dir, BASE44_TYPES_PATH);
-  const changed = !existsSync59(path2) || readFileSync72(path2, "utf8") !== text9;
+  const changed = !existsSync60(path2) || readFileSync72(path2, "utf8") !== text9;
   if (changed) {
     mkdirSync28(dirname35(path2), { recursive: true });
     writeFileSync25(path2, text9);
@@ -154265,7 +154414,7 @@ async function writeBase44Types(dir, app) {
 }
 async function base44TypesIssues(dir, app, strict) {
   const path2 = join63(dir, BASE44_TYPES_PATH);
-  if (!existsSync59(path2)) return [];
+  if (!existsSync60(path2)) return [];
   let list;
   try {
     list = await declaredEntities(dir);
@@ -154408,13 +154557,13 @@ __export(eject_exports, {
   EJECTABLE: () => EJECTABLE,
   ejectModule: () => ejectModule
 });
-import { existsSync as existsSync60, mkdirSync as mkdirSync29, readFileSync as readFileSync73, writeFileSync as writeFileSync26 } from "node:fs";
+import { existsSync as existsSync61, mkdirSync as mkdirSync29, readFileSync as readFileSync73, writeFileSync as writeFileSync26 } from "node:fs";
 import { dirname as dirname36, join as join64, relative as relative12, resolve as resolve50, sep as sep16 } from "node:path";
 function locate(repoRootOrCwd, mod) {
   const inRepo = resolve50(repoRootOrCwd, `stdlib/flows/${mod}/src/index.ts`);
-  if (existsSync60(inRepo)) return { path: inRepo, form: "source" };
+  if (existsSync61(inRepo)) return { path: inRepo, form: "source" };
   const dist = resolve50(repoRootOrCwd, `node_modules/@wix/himalaya/dist/${mod}.mjs`);
-  if (existsSync60(dist)) return { path: dist, form: "bundle" };
+  if (existsSync61(dist)) return { path: dist, form: "bundle" };
   return null;
 }
 function specifiersFor(mod) {
@@ -154459,7 +154608,7 @@ function ejectModule(opts) {
   writeFileSync26(target, banner + normalized);
   const rewired = [];
   for (const f2 of files) {
-    if (!existsSync60(f2)) continue;
+    if (!existsSync61(f2)) continue;
     const before = readFileSync73(f2, "utf8");
     let after = before;
     let rel = relative12(dirname36(f2), target).split(sep16).join("/").replace(/\.tsx?$/, ".js");
@@ -154580,7 +154729,7 @@ var init_app_map = __esm({
 });
 
 // src/wix-writes.ts
-import { existsSync as existsSync61, readFileSync as readFileSync74 } from "node:fs";
+import { existsSync as existsSync62, readFileSync as readFileSync74 } from "node:fs";
 import { join as join65 } from "node:path";
 function isProvenRead(method, path2) {
   if (/[#\x00-\x1F\x7F]/.test(path2)) return false;
@@ -154700,7 +154849,7 @@ function parseDataAccess(text9, from) {
 function readDataAccess(dir) {
   for (const name of ["SPEC.md", "MOBILE-UX.md"]) {
     const p2 = join65(dir, name);
-    if (!existsSync61(p2)) continue;
+    if (!existsSync62(p2)) continue;
     let text9;
     try {
       text9 = readFileSync74(p2, "utf8");
@@ -154819,11 +154968,11 @@ __export(test_exports, {
   scopeDescriptors: () => scopeDescriptors,
   writeRecordedMocks: () => writeRecordedMocks
 });
-import { existsSync as existsSync62, mkdirSync as mkdirSync30, readFileSync as readFileSync75, writeFileSync as writeFileSync27 } from "node:fs";
+import { existsSync as existsSync63, mkdirSync as mkdirSync30, readFileSync as readFileSync75, writeFileSync as writeFileSync27 } from "node:fs";
 import { join as join66, resolve as resolve51 } from "node:path";
 function readTestConfig(dir) {
   const p2 = resolve51(dir, TEST_CONFIG_FILE);
-  if (!existsSync62(p2)) return {};
+  if (!existsSync63(p2)) return {};
   let parsed;
   try {
     parsed = JSON.parse(readFileSync75(p2, "utf8"));
@@ -154894,7 +155043,7 @@ function readNetRules(path2) {
 function defaultNetRules(dir) {
   for (const rel of ["dev/net-mocks.json", "tests/net-mocks.json"]) {
     const p2 = resolve51(dir, rel);
-    if (existsSync62(p2)) {
+    if (existsSync63(p2)) {
       const rules = readNetRules(p2);
       if (rules.length) return { rules, from: rel };
     }
@@ -155328,7 +155477,17 @@ async function runCrawl(opts) {
   const unreachedWrites = targets.flatMap((d2) => unreachedNativeWrites(d2.screenId, d2.bundleJs, inventory));
   const plan = readDataAccess(opts.dir);
   const writeFindings = unapprovedWriteFindings([...inventory, ...unreachedWrites], plan);
-  const all = [...results.flatMap((r2) => r2.findings), ...hostileFindings, ...deepFindings, ...journeyFindings, ...edgeFindings, ...relationFindings, ...writeFindings].filter((f2) => {
+  const tokenFindings = tokenNumericIssuesFor(opts.dir).map((issue2) => ({
+    screen: TOKENS_FINDING_SCREEN,
+    trigger: "boot",
+    invariant: "token-type-invalid",
+    severity: "error",
+    // The token path keeps each finding's stable id distinct (findingId hashes `at`).
+    ...issue2.path ? { at: issue2.path } : {},
+    message: issue2.message,
+    hint: "Fix the value in the tokens file; `himi validate` reports the same finding."
+  }));
+  const all = [...results.flatMap((r2) => r2.findings), ...hostileFindings, ...deepFindings, ...journeyFindings, ...edgeFindings, ...relationFindings, ...writeFindings, ...tokenFindings].filter((f2) => {
     if (f2.invariant === "no-request-issued" && !f2.axis && fetchProven.has(f2.screen)) {
       const by = fetchProven.get(f2.screen);
       if (!retired.some((x2) => x2.screen === f2.screen)) retired.push({ screen: f2.screen, from: by.from, params: by.params });
@@ -155338,7 +155497,7 @@ async function runCrawl(opts) {
   }).filter(keep);
   const failures = all.filter((f2) => f2.severity === "error");
   const warnings = all.filter((f2) => f2.severity === "warning");
-  const failedScreens = new Set(failures.map((f2) => f2.screen));
+  const failedScreens = new Set(failures.map((f2) => f2.screen).filter((screen) => screen !== TOKENS_FINDING_SCREEN));
   const blockedReasons = [];
   if (unknownScreens.length) blockedReasons.push(`not in this release: ${unknownScreens.join(", ")}`);
   if (notCrawled.length) blockedReasons.push(`${notCrawled.length} screen(s) skipped because they fail \`himi validate\` \u2014 fix those first`);
@@ -155412,9 +155571,12 @@ function formatReport(r2) {
     for (const platform of ["ios", "android"]) {
       const summary2 = r2.nativeDecode[platform];
       if (!summary2) continue;
-      out2.push("unavailable" in summary2 ? `native decode ${platform}: unavailable \u2014 ${summary2.reason}` : `native decode ${platform}: ${summary2.checked} checked, ${summary2.failed} failed in ${r2.nativeDecode.wallMs}ms`);
+      out2.push("unavailable" in summary2 ? `native decode ${platform}: unavailable \u2014 ${summary2.reason}` : `native decode ${platform}: ${summary2.checked} checked, ${summary2.failed} failed${summary2.tokens ? `, tokens.json ${summary2.tokens}` : ""} in ${r2.nativeDecode.wallMs}ms`);
     }
   }
+  if (r2.skippedPlatforms?.length) {
+    out2.push(`SKIPPED native platforms (NOT checked, not passing): ${r2.skippedPlatforms.map((skip) => skip.platform).join(", ")}`);
+  }
   out2.push("");
   const grouped = /* @__PURE__ */ new Map();
   const rest = [];
@@ -155532,17 +155694,19 @@ function formatReport(r2) {
   }
   return out2.join("\n");
 }
-var TEST_CONFIG_FILE, mapResult, triggerLabel;
+var TEST_CONFIG_FILE, mapResult, TOKENS_FINDING_SCREEN, triggerLabel;
 var init_test = __esm({
   "src/test.ts"() {
     init_app_map();
     init_screen_crawl();
     init_wix_gateway_rules();
     init_crawl_layers();
+    init_token_lint();
     init_screen_state();
     init_wix_writes();
     TEST_CONFIG_FILE = "himi-test.json";
     mapResult = (r2) => ({ screen: r2.screen, navEdges: r2.navEdges ?? [], navUnfollowed: r2.navUnfollowed ?? 0, failed: (r2.findings ?? []).some((x2) => x2.severity === "error") });
+    TOKENS_FINDING_SCREEN = "tokens.json";
     triggerLabel = (f2) => (f2.trigger === "boot" ? "on appear" : `${f2.trigger.key} ${f2.trigger.tap ?? "(no id)"} \u2192 ${f2.trigger.action}`) + (f2.axis ? `  [${f2.axis}]` : "");
   }
 });
@@ -155552,11 +155716,11 @@ var mobile_ux_lint_exports = {};
 __export(mobile_ux_lint_exports, {
   mobileUxIssues: () => mobileUxIssues
 });
-import { existsSync as existsSync63, readFileSync as readFileSync76 } from "node:fs";
+import { existsSync as existsSync64, readFileSync as readFileSync76 } from "node:fs";
 import { join as join67 } from "node:path";
 function mobileUxIssues(dir, strict) {
   const file2 = join67(dir, "MOBILE-UX.md");
-  if (!existsSync63(file2)) return [];
+  if (!existsSync64(file2)) return [];
   let text9;
   try {
     text9 = readFileSync76(file2, "utf8");
@@ -157240,7 +157404,7 @@ __export(functions_exports, {
   resolveFunctionsTarget: () => resolveFunctionsTarget,
   runRemoteFunctionOperation: () => runRemoteFunctionOperation
 });
-import { readFileSync as readFileSync77, existsSync as existsSync64 } from "node:fs";
+import { readFileSync as readFileSync77, existsSync as existsSync65 } from "node:fs";
 import { join as join68, resolve as resolve52 } from "node:path";
 function resolveFunctionsTarget(input) {
   const explicitUrl = input.functionsUrl?.trim();
@@ -157260,7 +157424,7 @@ async function loadFunctionsApp(dir) {
   }
   const sources = {};
   for (const definition of config.functions.functions) {
-    const source = [".ts", ".js", ".mts", ".mjs"].map((extension) => join68(loaded.dir, "functions", `${definition.name}${extension}`)).find(existsSync64);
+    const source = [".ts", ".js", ".mts", ".mjs"].map((extension) => join68(loaded.dir, "functions", `${definition.name}${extension}`)).find(existsSync65);
     if (!source) throw new Error(`missing source for function ${definition.name}; expected functions/${definition.name}.ts`);
     sources[definition.name] = readFileSync77(source, "utf8");
   }
@@ -157450,7 +157614,7 @@ var init_cli_bridge = __esm({
 });
 
 // src/mcp/file-tools.ts
-import { closeSync as closeSync6, constants as constants3, lstatSync as lstatSync20, mkdirSync as mkdirSync31, openSync as openSync5, readdirSync as readdirSync31, readFileSync as readFileSync78, realpathSync as realpathSync10, renameSync as renameSync11, rmSync as rmSync15, statSync as statSync18, writeSync, existsSync as existsSync65 } from "node:fs";
+import { closeSync as closeSync6, constants as constants3, lstatSync as lstatSync20, mkdirSync as mkdirSync31, openSync as openSync5, readdirSync as readdirSync31, readFileSync as readFileSync78, realpathSync as realpathSync10, renameSync as renameSync11, rmSync as rmSync15, statSync as statSync18, writeSync, existsSync as existsSync66 } from "node:fs";
 import { randomBytes as randomBytes4 } from "node:crypto";
 import { dirname as dirname37, isAbsolute as isAbsolute7, join as join69, relative as relative13, resolve as resolve53, sep as sep17 } from "node:path";
 import * as z2 from "zod";
@@ -157460,7 +157624,7 @@ function within(root, p2) {
 function realish(p2) {
   let cur = p2;
   const tail = [];
-  while (!existsSync65(cur)) {
+  while (!existsSync66(cur)) {
     const up = dirname37(cur);
     if (up === cur) break;
     tail.unshift(cur.slice(up.length + (up.endsWith(sep17) ? 0 : 1)));
@@ -157483,7 +157647,7 @@ function symlinkComponent(base, abs) {
 function workspaceRefusal(root, target) {
   const r2 = resolve53(root);
   const t2 = resolve53(r2, target);
-  if (!existsSync65(r2)) return `the workspace folder ${r2} does not exist`;
+  if (!existsSync66(r2)) return `the workspace folder ${r2} does not exist`;
   if (!within(r2, t2) || !within(realpathSync10(r2), realish(t2))) return `"${target}" is outside the workspace folder ${r2}`;
   const link = symlinkComponent(r2, t2);
   if (link) return `"${link}" is a symlink \u2014 paths must stay in real folders inside the workspace`;
@@ -157492,13 +157656,13 @@ function workspaceRefusal(root, target) {
 async function confinedAppDir(args, deps) {
   const root = resolve53(await deps.defaultDir());
   const dir = typeof args.dir === "string" && args.dir ? resolve53(root, args.dir) : root;
-  if (!existsSync65(root)) return refuse5("no_workspace", `the workspace folder ${root} does not exist`);
+  if (!existsSync66(root)) return refuse5("no_workspace", `the workspace folder ${root} does not exist`);
   if (!within(root, dir) || !within(realpathSync10(root), realish(dir))) return refuse5("outside_workspace", `"${String(args.dir)}" is outside the workspace folder`);
   const link = symlinkComponent(root, dir);
   if (link) return refuse5("outside_workspace", `"${link}" is a symlink \u2014 the app folder must be a real folder in the workspace`);
   const rel = relative13(root, dir);
   if (rel && (isDeniedSourcePath(`${rel}/x`) || isDeniedSourcePath(`${rel.toLowerCase()}/x`))) return refuse5("denied", `"${rel}" is a folder this tool does not touch`);
-  if (!existsSync65(join69(dir, CONTENT_MARKER))) {
+  if (!existsSync66(join69(dir, CONTENT_MARKER))) {
     return refuse5("not_an_app", `"${rel || "."}" is not an app folder (no ${CONTENT_MARKER}) \u2014 see himi_list_apps, or create one with himi_init`);
   }
   return dir;
@@ -157506,7 +157670,7 @@ async function confinedAppDir(args, deps) {
 function onDiskSpelling(abs) {
   let cur = abs;
   const tail = [];
-  while (!existsSync65(cur)) {
+  while (!existsSync66(cur)) {
     const up = dirname37(cur);
     if (up === cur) break;
     tail.unshift(cur.slice(up.length + (up.endsWith(sep17) ? 0 : 1)));
@@ -157530,7 +157694,7 @@ function confinedPath(appDir3, rel) {
   const abs = resolve53(appDir3, rel);
   if (!within(appDir3, abs) || abs === appDir3) return { error: `"${rel}" is outside the app folder` };
   const real = realish(abs);
-  const base = existsSync65(appDir3) ? realpathSync10(appDir3) : realish(appDir3);
+  const base = existsSync66(appDir3) ? realpathSync10(appDir3) : realish(appDir3);
   if (!within(base, real) || real === base) return { error: `"${rel}" is outside the app folder` };
   const link = symlinkComponent(appDir3, abs);
   if (link) return { error: `"${link}" is a symlink, which this tool does not follow` };
@@ -157587,11 +157751,11 @@ function fileTools() {
       inputSchema: z2.object({}),
       handler: async (_a3, d2) => {
         const root = resolve53(await d2.defaultDir());
-        if (!existsSync65(root)) return ok({ ok: true, workspace: root, apps: [] });
+        if (!existsSync66(root)) return ok({ ok: true, workspace: root, apps: [] });
         const apps = [];
-        if (existsSync65(join69(root, CONTENT_MARKER))) apps.push(".");
+        if (existsSync66(join69(root, CONTENT_MARKER))) apps.push(".");
         for (const e2 of readdirSync31(root, { withFileTypes: true })) {
-          if (e2.isDirectory() && !e2.name.startsWith(".") && existsSync65(join69(root, e2.name, CONTENT_MARKER))) apps.push(e2.name);
+          if (e2.isDirectory() && !e2.name.startsWith(".") && existsSync66(join69(root, e2.name, CONTENT_MARKER))) apps.push(e2.name);
         }
         return ok({ ok: true, workspace: root, apps: apps.sort() });
       }
@@ -157605,7 +157769,7 @@ function fileTools() {
       handler: async (a2, d2) => {
         const app = await confinedAppDir(a2, d2);
         if (typeof app !== "string") return app;
-        if (!existsSync65(app) || !statSync18(app).isDirectory()) return refuse5("no_app", `no folder at ${app}`);
+        if (!existsSync66(app) || !statSync18(app).isDirectory()) return refuse5("no_app", `no folder at ${app}`);
         return ok({ ok: true, dir: app, ...listFiles(app) });
       }
     },
@@ -157620,7 +157784,7 @@ function fileTools() {
         if (typeof app !== "string") return app;
         const p2 = confinedPath(app, a2.path);
         if (typeof p2 !== "string") return refuse5("bad_path", p2.error);
-        if (!existsSync65(p2) || !lstatSync20(p2).isFile()) return refuse5("not_found", `no file "${String(a2.path)}"`);
+        if (!existsSync66(p2) || !lstatSync20(p2).isFile()) return refuse5("not_found", `no file "${String(a2.path)}"`);
         const size = statSync18(p2).size;
         if (size > MAX_FILE_BYTES) return refuse5("too_large", `"${String(a2.path)}" is ${size} bytes \u2014 over the ${MAX_FILE_BYTES}-byte read limit`);
         return ok({ ok: true, path: a2.path, bytes: size, content: readFileSync78(p2, "utf8") });
@@ -157647,7 +157811,7 @@ function fileTools() {
           if (typeof p2 !== "string") refused2.push({ path: f2.path, error: p2.error });
           else if (typeof f2.content !== "string") refused2.push({ path: f2.path, error: "content must be text" });
           else if (Buffer.byteLength(f2.content) > MAX_FILE_BYTES) refused2.push({ path: f2.path, error: `over the ${MAX_FILE_BYTES}-byte limit` });
-          else if (existsSync65(p2) && !lstatSync20(p2).isFile()) refused2.push({ path: f2.path, error: "not a regular file" });
+          else if (existsSync66(p2) && !lstatSync20(p2).isFile()) refused2.push({ path: f2.path, error: "not a regular file" });
           else if (planned2.some((q2) => q2.abs === p2)) refused2.push({ path: f2.path, error: "the same file twice in one call" });
           else planned2.push({ abs: p2, rel: String(f2.path), content: f2.content });
         }
@@ -157680,7 +157844,7 @@ function fileTools() {
         for (const rel of paths) {
           const p2 = confinedPath(app, rel);
           if (typeof p2 !== "string") refused2.push({ path: rel, error: p2.error });
-          else if (!existsSync65(p2)) refused2.push({ path: rel, error: "no such file" });
+          else if (!existsSync66(p2)) refused2.push({ path: rel, error: "no such file" });
           else if (!lstatSync20(p2).isFile()) refused2.push({ path: rel, error: "not a regular file" });
           else if (!planned2.includes(p2)) {
             planned2.push(p2);
@@ -158236,7 +158400,7 @@ __export(server_exports, {
   startMcpServer: () => startMcpServer
 });
 import { mkdirSync as mkdirSync32, readFileSync as readFileSync79 } from "node:fs";
-import { fileURLToPath as fileURLToPath24 } from "node:url";
+import { fileURLToPath as fileURLToPath25 } from "node:url";
 import { McpServer } from "@modelcontextprotocol/server";
 import { serveStdio, StdioServerTransport } from "@modelcontextprotocol/server/stdio";
 function protectStdout() {
@@ -158261,7 +158425,7 @@ async function firstRoot(server) {
     if (!server.server.getClientCapabilities()?.roots) return void 0;
     const { roots } = await server.server.listRoots();
     const uri = roots.find((r2) => r2.uri.startsWith("file://"))?.uri;
-    return uri ? fileURLToPath24(uri) : void 0;
+    return uri ? fileURLToPath25(uri) : void 0;
   } catch {
     return void 0;
   }
@@ -158327,32 +158491,36 @@ var init_server = __esm({
 // src/native-decode.ts
 var native_decode_exports = {};
 __export(native_decode_exports, {
+  NATIVE_TOKENS_DOCUMENT: () => NATIVE_TOKENS_DOCUMENT,
+  defaultAndroidSdkDir: () => defaultAndroidSdkDir,
   detectAndroidNativeDecode: () => detectAndroidNativeDecode,
   detectNativeDecode: () => detectNativeDecode,
+  markNativeSkipped: () => markNativeSkipped,
   mergeNativeDecode: () => mergeNativeDecode,
   nativeDecodeAndroidHarnessDir: () => nativeDecodeAndroidHarnessDir,
   nativeDecodePackageDir: () => nativeDecodePackageDir,
   nativeDecodePlatforms: () => nativeDecodePlatforms,
   nativeOracleShipped: () => nativeOracleShipped,
   parseNativeDecodeOutput: () => parseNativeDecodeOutput,
+  parseNativeDecodeRun: () => parseNativeDecodeRun,
   runAndroidNativeDecode: () => runAndroidNativeDecode,
   runNativeDecode: () => runNativeDecode
 });
 import { execFileSync as execFileSync5, spawnSync as spawnSync2 } from "node:child_process";
-import { existsSync as existsSync66, mkdtempSync as mkdtempSync2, readFileSync as readFileSync80, rmSync as rmSync16, writeFileSync as writeFileSync28 } from "node:fs";
-import { tmpdir as tmpdir3 } from "node:os";
+import { existsSync as existsSync67, mkdirSync as mkdirSync33, mkdtempSync as mkdtempSync2, readFileSync as readFileSync80, rmSync as rmSync16, writeFileSync as writeFileSync28 } from "node:fs";
+import { homedir as homedir9, tmpdir as tmpdir3 } from "node:os";
 import { join as join70 } from "node:path";
-import { fileURLToPath as fileURLToPath25 } from "node:url";
+import { fileURLToPath as fileURLToPath26 } from "node:url";
 function nativeDecodePackageDir() {
-  return fileURLToPath25(new URL("../../../core/runtime/ios/HimalayaCore/", import.meta.url));
+  return fileURLToPath26(new URL("../../../core/runtime/ios/HimalayaCore/", import.meta.url));
 }
 function nativeDecodeAndroidHarnessDir() {
-  return fileURLToPath25(new URL("../../../tools/wix-sdk-android-tests/", import.meta.url));
+  return fileURLToPath26(new URL("../../../tools/wix-sdk-android-tests/", import.meta.url));
 }
 function nativeOracleShipped() {
   return {
-    ios: existsSync66(join70(nativeDecodePackageDir(), "Package.swift")),
-    android: existsSync66(join70(nativeDecodeAndroidHarnessDir(), "gradlew"))
+    ios: existsSync67(join70(nativeDecodePackageDir(), "Package.swift")),
+    android: existsSync67(join70(nativeDecodeAndroidHarnessDir(), "gradlew"))
   };
 }
 function detectNativeDecode(options = {}) {
@@ -158363,7 +158531,7 @@ function detectNativeDecode(options = {}) {
     return { platform: "ios", available: false, reason: `the iOS decoder oracle requires macOS (darwin); this host is ${hostPlatform}` };
   }
   if (!swiftAvailable) return { platform: "ios", available: false, reason: "swift is not on PATH" };
-  const packageAvailable = options.packageAvailable ?? existsSync66(join70(packageDir, "Package.swift"));
+  const packageAvailable = options.packageAvailable ?? existsSync67(join70(packageDir, "Package.swift"));
   if (!packageAvailable) {
     return {
       platform: "ios",
@@ -158381,10 +158549,15 @@ function localPropertiesSdk(harnessDir) {
     return null;
   }
 }
+function defaultAndroidSdkDir(hostPlatform, home) {
+  if (hostPlatform === "darwin") return join70(home, "Library", "Android", "sdk");
+  if (hostPlatform === "linux") return join70(home, "Android", "Sdk");
+  return null;
+}
 function detectAndroidNativeDecode(options = {}) {
   const harnessDir = options.harnessDir ?? nativeDecodeAndroidHarnessDir();
   const gradlew = join70(harnessDir, "gradlew");
-  const gradlewAvailable = options.gradlewAvailable ?? existsSync66(gradlew);
+  const gradlewAvailable = options.gradlewAvailable ?? existsSync67(gradlew);
   if (!gradlewAvailable) {
     return {
       platform: "android",
@@ -158392,17 +158565,23 @@ function detectAndroidNativeDecode(options = {}) {
       reason: "the in-repo Android Gradle harness is unavailable (off-repo installs do not ship the decoder oracle)"
     };
   }
-  const androidHome = options.androidHome ?? process.env.ANDROID_HOME ?? "";
-  const sdk = androidHome.trim() || (options.localPropertiesSdk !== void 0 ? options.localPropertiesSdk : localPropertiesSdk(harnessDir));
-  const sdkAvailable = options.sdkAvailable ?? (typeof sdk === "string" && sdk.length > 0 && existsSync66(sdk));
-  if (!sdkAvailable) {
+  const exists = typeof options.sdkAvailable === "function" ? options.sdkAvailable : typeof options.sdkAvailable === "boolean" ? /* @__PURE__ */ ((answer) => () => answer)(options.sdkAvailable) : existsSync67;
+  const defaultDir = defaultAndroidSdkDir(options.hostPlatform ?? process.platform, options.homeDir ?? homedir9());
+  const candidates = [
+    options.androidHome ?? process.env.ANDROID_HOME,
+    options.androidSdkRoot ?? process.env.ANDROID_SDK_ROOT,
+    options.localPropertiesSdk !== void 0 ? options.localPropertiesSdk : localPropertiesSdk(harnessDir),
+    defaultDir
+  ].map((candidate) => candidate?.trim() ?? "").filter((candidate) => candidate.length > 0);
+  const sdkDir = candidates.find((candidate) => exists(candidate));
+  if (sdkDir === void 0) {
     return {
       platform: "android",
       available: false,
-      reason: "the Android SDK is unavailable (set ANDROID_HOME or sdk.dir in tools/wix-sdk-android-tests/local.properties)"
+      reason: `the Android SDK is unavailable (set ANDROID_HOME or ANDROID_SDK_ROOT, sdk.dir in tools/wix-sdk-android-tests/local.properties, or install it at the default path${defaultDir ? ` ${defaultDir}` : ""})`
     };
   }
-  return { platform: "android", available: true, harnessDir, gradlew };
+  return { platform: "android", available: true, harnessDir, gradlew, sdkDir };
 }
 function nativeDecodePlatforms(value) {
   if (value === true) return ["ios", "android"];
@@ -158436,10 +158615,14 @@ function parseError(value, line, platform) {
   };
 }
 function parseNativeDecodeOutput(stdout, expectedScreenIds, platform = "ios") {
+  return parseNativeDecodeRun(stdout, expectedScreenIds, platform, false).verdicts;
+}
+function parseNativeDecodeRun(stdout, expectedScreenIds, platform, expectTokens) {
   const platformLabel = platform === "ios" ? "iOS" : "Android";
   const expected = new Set(expectedScreenIds);
   if (expected.size !== expectedScreenIds.length) throw new Error("native decode input contains duplicate screen ids");
   const verdicts = [];
+  let tokens2;
   const seen = /* @__PURE__ */ new Set();
   const lines = stdout.split(/\r?\n/).filter((line) => line.trim() !== "");
   for (let index = 0; index < lines.length; index++) {
@@ -158449,6 +158632,19 @@ function parseNativeDecodeOutput(stdout, expectedScreenIds, platform = "ios") {
     } catch (error) {
       throw new Error(`malformed NDJSON from ${platformLabel} decoder oracle at line ${index + 1}: ${error.message}`);
     }
+    if (record(value) && "document" in value) {
+      if (value.document !== "tokens" || value.platform !== platform || typeof value.ok !== "boolean" || !Array.isArray(value.errors)) {
+        throw new Error(`malformed NDJSON from ${platformLabel} decoder oracle at line ${index + 1}: document verdict must be { document:"tokens", platform:"${platform}", ok, errors }`);
+      }
+      rejectUnknownKeys(value, DOCUMENT_VERDICT_KEYS, "document verdict", index + 1, platformLabel);
+      if (!expectTokens) throw new Error(`${platformLabel} decoder oracle returned a tokens verdict it was not asked for`);
+      if (tokens2) throw new Error(`${platformLabel} decoder oracle returned a duplicate tokens verdict`);
+      const errors2 = value.errors.map((item) => parseError(item, index + 1, platform));
+      if (value.ok && errors2.length) throw new Error(`malformed NDJSON from ${platformLabel} decoder oracle at line ${index + 1}: ok=true must have no errors`);
+      if (!value.ok && !errors2.length) throw new Error(`malformed NDJSON from ${platformLabel} decoder oracle at line ${index + 1}: ok=false must have at least one error`);
+      tokens2 = { platform, ok: value.ok, errors: errors2 };
+      continue;
+    }
     if (!record(value) || typeof value.screenId !== "string" || value.platform !== platform || typeof value.ok !== "boolean" || !Array.isArray(value.errors)) {
       throw new Error(`malformed NDJSON from ${platformLabel} decoder oracle at line ${index + 1}: verdict must be { screenId, platform:"${platform}", ok, errors }`);
     }
@@ -158463,18 +158659,27 @@ function parseNativeDecodeOutput(stdout, expectedScreenIds, platform = "ios") {
   }
   const missing = expectedScreenIds.filter((screenId) => !seen.has(screenId));
   if (missing.length) throw new Error(`${platformLabel} decoder oracle output is missing verdict${missing.length === 1 ? "" : "s"} for: ${missing.join(", ")}`);
-  return verdicts;
+  if (expectTokens && !tokens2) throw new Error(`${platformLabel} decoder oracle output is missing the tokens verdict`);
+  return tokens2 ? { verdicts, tokens: tokens2 } : { verdicts };
+}
+function writeDecodeInputs(descriptorDir, descriptors, tokensJson) {
+  for (const descriptor of descriptors) {
+    if (typeof descriptor.descriptorJson !== "string") {
+      throw new Error(`native decode cannot judge ${descriptor.screenId}: the release builder did not return its exact baked JSON bytes`);
+    }
+    writeFileSync28(join70(descriptorDir, `${encodeURIComponent(descriptor.screenId)}.json`), descriptor.descriptorJson);
+  }
+  if (tokensJson === void 0) return void 0;
+  mkdirSync33(join70(descriptorDir, "tokens"));
+  const tokensPath = join70(descriptorDir, "tokens", NATIVE_TOKENS_DOCUMENT);
+  writeFileSync28(tokensPath, tokensJson);
+  return tokensPath;
 }
 function runNativeDecode(options) {
   const descriptorDir = mkdtempSync2(join70(tmpdir3(), "himi-native-decode-"));
   const startedAt = Date.now();
   try {
-    for (const descriptor of options.descriptors) {
-      if (typeof descriptor.descriptorJson !== "string") {
-        throw new Error(`native decode cannot judge ${descriptor.screenId}: the release builder did not return its exact baked JSON bytes`);
-      }
-      writeFileSync28(join70(descriptorDir, `${encodeURIComponent(descriptor.screenId)}.json`), descriptor.descriptorJson);
-    }
+    const tokensPath = writeDecodeInputs(descriptorDir, options.descriptors, options.tokensJson);
     options.progress?.("building cached Swift oracle");
     execFileSync5("swift", ["build", "--package-path", options.packageDir, "--product", "himi-decode-oracle"], {
       stdio: ["ignore", "ignore", "pipe"],
@@ -158485,13 +158690,13 @@ function runNativeDecode(options) {
       encoding: "utf8"
     }).trim();
     options.progress?.(`running real Swift decoder over ${options.descriptors.length} screen${options.descriptors.length === 1 ? "" : "s"}`);
-    const stdout = execFileSync5(join70(binPath, "himi-decode-oracle"), ["--dir", descriptorDir], {
+    const stdout = execFileSync5(join70(binPath, "himi-decode-oracle"), ["--dir", descriptorDir, ...tokensPath ? ["--tokens", tokensPath] : []], {
       stdio: ["ignore", "pipe", "pipe"],
       encoding: "utf8"
     });
     return {
       platform: "ios",
-      verdicts: parseNativeDecodeOutput(stdout, options.descriptors.map((descriptor) => descriptor.screenId)),
+      ...parseNativeDecodeRun(stdout, options.descriptors.map((descriptor) => descriptor.screenId), "ios", tokensPath !== void 0),
       wallMs: Date.now() - startedAt
     };
   } catch (error) {
@@ -158507,12 +158712,7 @@ function runAndroidNativeDecode(options) {
   const outputPath = join70(descriptorDir, "verdicts.ndjson");
   const startedAt = Date.now();
   try {
-    for (const descriptor of options.descriptors) {
-      if (typeof descriptor.descriptorJson !== "string") {
-        throw new Error(`native decode cannot judge ${descriptor.screenId}: the release builder did not return its exact baked JSON bytes`);
-      }
-      writeFileSync28(join70(descriptorDir, `${encodeURIComponent(descriptor.screenId)}.json`), descriptor.descriptorJson);
-    }
+    const tokensPath = writeDecodeInputs(descriptorDir, options.descriptors, options.tokensJson);
     options.progress?.(`running real Kotlin decoder over ${options.descriptors.length} screen${options.descriptors.length === 1 ? "" : "s"}`);
     execFileSync5(options.gradlew, [
       "-p",
@@ -158521,15 +158721,17 @@ function runAndroidNativeDecode(options) {
       "--tests",
       "io.himalaya.core.NativeDecodeOracleRunner",
       `-PhimiDecodeDir=${descriptorDir}`,
-      `-PhimiDecodeOut=${outputPath}`
+      `-PhimiDecodeOut=${outputPath}`,
+      ...tokensPath ? [`-PhimiDecodeTokens=${tokensPath}`] : []
     ], {
       stdio: ["ignore", "ignore", "pipe"],
-      encoding: "utf8"
+      encoding: "utf8",
+      ...options.sdkDir ? { env: { ...process.env, ANDROID_HOME: options.sdkDir, ANDROID_SDK_ROOT: options.sdkDir } } : {}
     });
     const stdout = readFileSync80(outputPath, "utf8");
     return {
       platform: "android",
-      verdicts: parseNativeDecodeOutput(stdout, options.descriptors.map((descriptor) => descriptor.screenId), "android"),
+      ...parseNativeDecodeRun(stdout, options.descriptors.map((descriptor) => descriptor.screenId), "android", tokensPath !== void 0),
       wallMs: Date.now() - startedAt
     };
   } catch (error) {
@@ -158540,6 +158742,17 @@ function runAndroidNativeDecode(options) {
     rmSync16(descriptorDir, { recursive: true, force: true });
   }
 }
+function markNativeSkipped(report3, skipped) {
+  return {
+    ...report3,
+    nativeDecode: {
+      ...report3.nativeDecode,
+      [skipped.platform]: { unavailable: true, reason: skipped.reason },
+      wallMs: report3.nativeDecode?.wallMs ?? 0
+    },
+    skippedPlatforms: [...report3.skippedPlatforms ?? [], { platform: skipped.platform, reason: skipped.reason }]
+  };
+}
 function fieldAt(path2) {
   if (path2 === null) return void 0;
   return path2.match(/\.([^.[\]]+)$/)?.[1];
@@ -158557,8 +158770,20 @@ function mergeNativeDecode(report3, run2) {
     ...error.actual ? { actual: error.actual } : {},
     hint: `This descriptor ships as a full-screen \u201CCouldn't load\u201D; fix the typed field and rerun \`himi test --native ${run2.platform}\`.`
   })));
+  const tokenFailures = (run2.tokens?.errors ?? []).map((error) => ({
+    screen: NATIVE_TOKENS_DOCUMENT,
+    trigger: "boot",
+    invariant: "native-decode-failed",
+    severity: "error",
+    message: `${platformLabel} ${error.kind} decoding ${NATIVE_TOKENS_DOCUMENT}: ${error.message}${error.expected ? ` (expected ${error.expected})` : ""}`,
+    ...error.path ? { at: error.path } : {},
+    ...fieldAt(error.path) ? { field: fieldAt(error.path) } : {},
+    ...error.actual ? { actual: error.actual } : {},
+    hint: `${platformLabel} decodes tokens.json in one strict pass, so this one value drops the WHOLE theme on device (iOS shows \u201CTheme unavailable\u201D; Android falls back to its default palette and fonts). Typography \`size\`, spacing, radius and motion \`duration\` (milliseconds: 0.3 \u2192 300) are integers. Fix it and rerun \`himi test --native ${run2.platform}\`.`
+  }));
+  nativeFailures.push(...tokenFailures);
   const failures = [...report3.failures, ...nativeFailures];
-  const failedScreens = new Set(failures.map((finding) => finding.screen));
+  const failedScreens = new Set(failures.map((finding) => finding.screen).filter((screen) => screen !== NATIVE_TOKENS_DOCUMENT));
   return {
     ...report3,
     ok: report3.ok && nativeFailures.length === 0,
@@ -158567,17 +158792,23 @@ function mergeNativeDecode(report3, run2) {
     screens: { ...report3.screens, clean: report3.screens.total - failedScreens.size, failed: failedScreens.size },
     nativeDecode: {
       ...report3.nativeDecode,
-      [run2.platform]: { checked: run2.verdicts.length, failed: run2.verdicts.filter((verdict) => !verdict.ok).length },
+      [run2.platform]: {
+        checked: run2.verdicts.length,
+        failed: run2.verdicts.filter((verdict) => !verdict.ok).length,
+        ...run2.tokens ? { tokens: run2.tokens.ok ? "ok" : "rejected" } : {}
+      },
       wallMs: (report3.nativeDecode?.wallMs ?? 0) + run2.wallMs
     }
   };
 }
-var KINDS, record, VERDICT_KEYS, ERROR_KEYS;
+var NATIVE_TOKENS_DOCUMENT, KINDS, record, VERDICT_KEYS, DOCUMENT_VERDICT_KEYS, ERROR_KEYS;
 var init_native_decode = __esm({
   "src/native-decode.ts"() {
+    NATIVE_TOKENS_DOCUMENT = "tokens.json";
     KINDS = /* @__PURE__ */ new Set(["typeMismatch", "valueNotFound", "keyNotFound", "dataCorrupted"]);
     record = (value) => typeof value === "object" && value !== null && !Array.isArray(value);
     VERDICT_KEYS = /* @__PURE__ */ new Set(["screenId", "platform", "ok", "errors"]);
+    DOCUMENT_VERDICT_KEYS = /* @__PURE__ */ new Set(["document", "platform", "ok", "errors"]);
     ERROR_KEYS = /* @__PURE__ */ new Set(["kind", "path", "message", "expected", "actual"]);
   }
 });
@@ -158596,7 +158827,7 @@ __export(browser_authoring_exports, {
 });
 import { createServer as createServer5 } from "node:http";
 import { createHash as createHash36, randomBytes as randomBytes5 } from "node:crypto";
-import { existsSync as existsSync67, readdirSync as readdirSync32, readFileSync as readFileSync81, realpathSync as realpathSync11, statSync as statSync19 } from "node:fs";
+import { existsSync as existsSync68, readdirSync as readdirSync32, readFileSync as readFileSync81, realpathSync as realpathSync11, statSync as statSync19 } from "node:fs";
 import { join as join71, posix as posix3, relative as relative14, sep as sep18 } from "node:path";
 function humanMs(ms2) {
   return ms2 < 1e3 ? `${ms2}ms` : `${Math.round(ms2 / 1e3)}s`;
@@ -158619,7 +158850,7 @@ function collectWorkerSources(tier5SrcDir, bundleName) {
       }
     }
   };
-  if (!existsSync67(root)) return null;
+  if (!existsSync68(root)) return null;
   walk2(root, `/tier5-src/${bundleName}`);
   const entry = [`/tier5-src/${bundleName}/index.ts`, `/tier5-src/${bundleName}/index.js`].find((p2) => p2 in files);
   if (!entry) return null;
@@ -158646,7 +158877,7 @@ function collectRelativeSiblings(files, tier5SrcDir) {
         join71(onDisk, "index.js")
       ];
       for (const abs of candidates) {
-        if (!existsSync67(abs) || statSync19(abs).isDirectory()) continue;
+        if (!existsSync68(abs) || statSync19(abs).isDirectory()) continue;
         const key3 = `/tier5-src/${relative14(tier5SrcDir, abs).split(sep18).join(posix3.sep)}`;
         if (key3 in files) break;
         files[key3] = readFileSync81(abs, "utf8");
@@ -158856,7 +159087,7 @@ __export(coverage_exports, {
   suppressedNativeKeys: () => suppressedNativeKeys,
   trendAndStore: () => trendAndStore
 });
-import { existsSync as existsSync68, mkdirSync as mkdirSync33, readFileSync as readFileSync82, writeFileSync as writeFileSync29 } from "node:fs";
+import { existsSync as existsSync69, mkdirSync as mkdirSync34, readFileSync as readFileSync82, writeFileSync as writeFileSync29 } from "node:fs";
 import { dirname as dirname38, join as join72 } from "node:path";
 function suppressedNativeKeys(oracle) {
   return [...oracle.ios ? [] : ["native-decode|ios"], ...oracle.android ? [] : ["native-decode|android"]];
@@ -159040,7 +159271,7 @@ function trendAndStore(dir, entries, suppressed) {
   const p2 = join72(dir, LEDGER_FILE);
   let previous = null;
   try {
-    if (existsSync68(p2)) {
+    if (existsSync69(p2)) {
       const parsed = JSON.parse(readFileSync82(p2, "utf8"));
       if (Array.isArray(parsed.keys)) previous = parsed.keys.filter((k2) => typeof k2 === "string");
     }
@@ -159049,7 +159280,7 @@ function trendAndStore(dir, entries, suppressed) {
   const current = entries.map((e2) => e2.key);
   const stored = [.../* @__PURE__ */ new Set([...current, ...(previous ?? []).filter((key3) => (suppressed ?? []).includes(key3))])];
   try {
-    mkdirSync33(dirname38(p2), { recursive: true });
+    mkdirSync34(dirname38(p2), { recursive: true });
     writeFileSync29(p2, JSON.stringify({ keys: stored, ts: (/* @__PURE__ */ new Date()).toISOString() }, null, 2));
   } catch {
     return null;
@@ -159083,7 +159314,7 @@ function diffAndStoreObservations(dir, current) {
   const p2 = join72(dir, OBS_FILE);
   let previous = null;
   try {
-    if (existsSync68(p2)) {
+    if (existsSync69(p2)) {
       const parsed = JSON.parse(readFileSync82(p2, "utf8"));
       if (parsed.screens && typeof parsed.screens === "object" && !Array.isArray(parsed.screens) && Object.values(parsed.screens).every(
         (v2) => Array.isArray(v2) && v2.every((l2) => typeof l2 === "string")
@@ -159094,7 +159325,7 @@ function diffAndStoreObservations(dir, current) {
   } catch {
   }
   try {
-    mkdirSync33(dirname38(p2), { recursive: true });
+    mkdirSync34(dirname38(p2), { recursive: true });
     writeFileSync29(p2, JSON.stringify({ screens: current, ts: (/* @__PURE__ */ new Date()).toISOString() }, null, 2));
   } catch {
     return null;
@@ -159145,11 +159376,11 @@ __export(design_kits_exports, {
   kitsDir: () => kitsDir,
   listKits: () => listKits2
 });
-import { existsSync as existsSync69, readFileSync as readFileSync83, readdirSync as readdirSync33 } from "node:fs";
+import { existsSync as existsSync70, readFileSync as readFileSync83, readdirSync as readdirSync33 } from "node:fs";
 import { join as join73, basename as basename16 } from "node:path";
-import { fileURLToPath as fileURLToPath26 } from "node:url";
+import { fileURLToPath as fileURLToPath27 } from "node:url";
 function kitsDir() {
-  return KIT_DIR_CANDIDATES.find((p2) => existsSync69(p2));
+  return KIT_DIR_CANDIDATES.find((p2) => existsSync70(p2));
 }
 function listKits2() {
   const dir = kitsDir();
@@ -159197,9 +159428,9 @@ var init_design_kits = __esm({
   "src/design-kits.ts"() {
     KIT_DIR_CANDIDATES = [
       // in-repo: tools/himi-cli/src/design-kits.ts → <repo>/stdlib/design-kits/
-      join73(fileURLToPath26(new URL("../../..", import.meta.url)), "stdlib", "design-kits"),
+      join73(fileURLToPath27(new URL("../../..", import.meta.url)), "stdlib", "design-kits"),
       // published CLI: <pkg>/dist/cli.mjs → <pkg>/stdlib/design-kits/
-      join73(fileURLToPath26(new URL("..", import.meta.url)), "stdlib", "design-kits")
+      join73(fileURLToPath27(new URL("..", import.meta.url)), "stdlib", "design-kits")
     ];
   }
 });
@@ -161309,6 +161540,7 @@ var init_preview_assets_generated = __esm({
 var run_exports = {};
 __export(run_exports, {
   NO_SPA_MESSAGE: () => NO_SPA_MESSAGE,
+  RUN_CONTENT_BUILD: () => RUN_CONTENT_BUILD,
   lanAddress: () => lanAddress,
   lanFlagConflict: () => lanFlagConflict,
   loadPreviewAssets: () => loadPreviewAssets,
@@ -161318,10 +161550,10 @@ __export(run_exports, {
   runPackage: () => runPackage,
   withoutProdServe: () => withoutProdServe
 });
-import { cpSync as cpSync2, existsSync as existsSync70, mkdirSync as mkdirSync34, mkdtempSync as mkdtempSync3, readFileSync as readFileSync85, rmSync as rmSync17, statSync as statSync20 } from "node:fs";
+import { cpSync as cpSync2, existsSync as existsSync71, mkdirSync as mkdirSync35, mkdtempSync as mkdtempSync3, readFileSync as readFileSync85, rmSync as rmSync17, statSync as statSync20 } from "node:fs";
 import { networkInterfaces as osNetworkInterfaces, tmpdir as tmpdir4 } from "node:os";
 import { dirname as dirname39, join as join74 } from "node:path";
-import { fileURLToPath as fileURLToPath27 } from "node:url";
+import { fileURLToPath as fileURLToPath28 } from "node:url";
 function makePackageRunHandler(opts) {
   const store = new FileReleaseStore(opts.releaseRoot);
   const webwixDirect = async () => {
@@ -161348,9 +161580,9 @@ async function fetchBytes(url) {
 }
 async function resolvePackage(source, workDir) {
   const isUrl2 = /^https?:\/\//i.test(source);
-  if (!isUrl2 && existsSync70(source) && statSync20(source).isDirectory()) {
+  if (!isUrl2 && existsSync71(source) && statSync20(source).isDirectory()) {
     const appDirManifest = join74(source, "release-manifest.json");
-    if (existsSync70(appDirManifest)) {
+    if (existsSync71(appDirManifest)) {
       const opened2 = openPackageDir(source);
       if (!opened2.validation.ok) {
         throw new Error(`package is not valid:
@@ -161362,7 +161594,7 @@ async function resolvePackage(source, workDir) {
       const root2 = workDir ?? mkdtempSync3(join74(tmpdir4(), "himi-run-"));
       const target = join74(root2, app2);
       if (join74(source) !== target) {
-        mkdirSync34(root2, { recursive: true });
+        mkdirSync35(root2, { recursive: true });
         rmSync17(target, { recursive: true, force: true });
         cpSync2(source, target, { recursive: true });
       }
@@ -161400,7 +161632,7 @@ async function resolvePackage(source, workDir) {
 async function loadPreviewAssets() {
   try {
     const mod = await Promise.resolve().then(() => (init_preview_assets_generated(), preview_assets_generated_exports));
-    const here = dirname39(fileURLToPath27(import.meta.url));
+    const here = dirname39(fileURLToPath28(import.meta.url));
     const candidates = [
       join74(here, "preview-assets.generated.bin"),
       // published: copied next to the bundled CLI
@@ -161408,7 +161640,7 @@ async function loadPreviewAssets() {
       // in-repo checkout
     ];
     for (const path2 of candidates) {
-      if (!existsSync70(path2)) continue;
+      if (!existsSync71(path2)) continue;
       const blob = readFileSync85(path2);
       return mod.assemblePreviewAssetsFromBlob(new Uint8Array(blob.buffer, blob.byteOffset, blob.byteLength));
     }
@@ -161521,7 +161753,7 @@ async function runPackage(source, opts = {}) {
     }
   };
 }
-var NO_SPA_MESSAGE, UNREACHABLE_IFACE, LIKELY_LAN_IFACE;
+var RUN_CONTENT_BUILD, NO_SPA_MESSAGE, UNREACHABLE_IFACE, LIKELY_LAN_IFACE;
 var init_run = __esm({
   "src/run.ts"() {
     init_open_url();
@@ -161532,6 +161764,7 @@ var init_run = __esm({
     init_pack();
     init_himi_package();
     init_himi_package();
+    RUN_CONTENT_BUILD = { keepDevOnlyAppConfig: true };
     NO_SPA_MESSAGE = "the web-host SPA is not embedded in this build \u2014 run `node packages/serve/scripts/embed-preview-assets.mjs` (in a monorepo checkout), or pass --spa <url> to use a hosted preview host instead";
     UNREACHABLE_IFACE = /^(utun|tun|tap|ppp|ipsec|wg|gif|stf|bridge|vmnet|vboxnet|virbr|docker|br-|veth|awdl|llw|anpi|tailscale|zt|zerotier|nordlynx)|vpn/i;
     LIKELY_LAN_IFACE = /^(en|eth|wlan|wl|wifi)/i;
@@ -161546,15 +161779,15 @@ __export(run_browser_exports, {
   runInBrowser: () => runInBrowser
 });
 import { createServer as createServer7 } from "node:http";
-import { existsSync as existsSync71, readFileSync as readFileSync86 } from "node:fs";
+import { existsSync as existsSync72, readFileSync as readFileSync86 } from "node:fs";
 import { spawnSync as spawnSync3 } from "node:child_process";
 import { dirname as dirname40, resolve as resolve55 } from "node:path";
-import { fileURLToPath as fileURLToPath28 } from "node:url";
+import { fileURLToPath as fileURLToPath29 } from "node:url";
 function stagedDir() {
   return process.env.HIMI_BROWSER_PLANE_OUT ? resolve55(process.env.HIMI_BROWSER_PLANE_OUT) : resolve55(REPO2, "packages", "serve", "dist", "browser-plane");
 }
 function missingStaged() {
-  return [...SERVED].filter((f2) => !existsSync71(resolve55(stagedDir(), f2))).sort();
+  return [...SERVED].filter((f2) => !existsSync72(resolve55(stagedDir(), f2))).sort();
 }
 function ensureBrowserPlaneStaged() {
   if (missingStaged().length === 0) return { ok: true, detail: "already staged" };
@@ -161644,7 +161877,7 @@ async function runInBrowser(releaseRoot, app, header, opts = {}) {
     }
     const name = path2 === "/" || path2 === "/index.html" ? "host.html" : path2.slice(1);
     if (SERVED.has(name)) {
-      if (!existsSync71(resolve55(stagedDir(), name))) {
+      if (!existsSync72(resolve55(stagedDir(), name))) {
         const restaged = ensureBrowserPlaneStaged();
         if (!restaged.ok) {
           res.writeHead(503, { "content-type": "application/json" });
@@ -161696,7 +161929,7 @@ var init_run_browser = __esm({
     init_open_url();
     init_file_store();
     init_wix_client_id();
-    HERE2 = dirname40(fileURLToPath28(import.meta.url));
+    HERE2 = dirname40(fileURLToPath29(import.meta.url));
     REPO2 = resolve55(HERE2, "..", "..", "..");
     SERVED = /* @__PURE__ */ new Set(["host.html", "sw.js", "package-reader.js"]);
   }
@@ -161707,14 +161940,14 @@ var hhp_preview_exports = {};
 __export(hhp_preview_exports, {
   hhpPreviewResponse: () => hhpPreviewResponse
 });
-import { existsSync as existsSync72, readFileSync as readFileSync87 } from "node:fs";
+import { existsSync as existsSync73, readFileSync as readFileSync87 } from "node:fs";
 import { join as join75 } from "node:path";
 function hhpPreviewResponse(root, request) {
-  if (new URL(request.url).pathname !== "/__himi/hhp-preview" || !existsSync72(join75(root, "hhp.json"))) return null;
+  if (new URL(request.url).pathname !== "/__himi/hhp-preview" || !existsSync73(join75(root, "hhp.json"))) return null;
   if (request.method !== "GET") return new Response(null, { status: 405 });
   try {
     const file2 = localPath(root, ".himi/hhp-preview.json");
-    const authored2 = existsSync72(file2) ? JSON.parse(readFileSync87(file2, "utf8")) : {};
+    const authored2 = existsSync73(file2) ? JSON.parse(readFileSync87(file2, "utf8")) : {};
     if (authored2.mockCapabilities && (!Array.isArray(authored2.mockCapabilities) || authored2.mockCapabilities.some((v2) => typeof v2 !== "string"))) throw new Error("mockCapabilities must be a string array.");
     const fixtures = authored2.fixtures ?? {};
     if (typeof fixtures !== "object" || Array.isArray(fixtures) || fixtures === null) throw new Error("fixtures must be an object.");
@@ -163762,13 +163995,13 @@ __export(credential_profile_exports, {
   profilePath: () => profilePath,
   resolveStoreCredentials: () => resolveStoreCredentials
 });
-import { existsSync as existsSync73, readFileSync as readFileSync89 } from "node:fs";
-import { homedir as homedir9 } from "node:os";
+import { existsSync as existsSync74, readFileSync as readFileSync89 } from "node:fs";
+import { homedir as homedir10 } from "node:os";
 import { join as join76 } from "node:path";
-function credentialsDir(home = homedir9()) {
+function credentialsDir(home = homedir10()) {
   return join76(home, ".himalaya", "store-credentials");
 }
-function profilePath(name, home = homedir9()) {
+function profilePath(name, home = homedir10()) {
   if (!PROFILE_NAME.test(name)) {
     throw new Error(
       `credential profile ${JSON.stringify(name)} is not a profile name \u2014 use letters, digits, ".", "_" or "-" starting with a letter or digit. It names ${join76(credentialsDir(home), "<name>.json")}; it is never a path.`
@@ -163804,9 +164037,9 @@ function namedProfile(cfg, profileFlag) {
 function resolveStoreCredentials(opts) {
   const { app, cfg } = opts;
   const env = opts.env ?? process.env;
-  const home = opts.home ?? homedir9();
+  const home = opts.home ?? homedir10();
   const read = opts.readProfile ?? ((p2) => readFileSync89(p2, "utf8"));
-  const exists = opts.profileExists ?? existsSync73;
+  const exists = opts.profileExists ?? existsSync74;
   const ios = cfg.ios ?? {};
   const flagName = opts.profileFlag?.trim();
   const named = namedProfile(cfg, opts.profileFlag);
@@ -163872,8 +164105,8 @@ var init_credential_profile = __esm({
 
 // ../store-release/iap-credentials.ts
 import { createHash as createHash39 } from "node:crypto";
-import { existsSync as existsSync74, readFileSync as readFileSync90, realpathSync as realpathSync12 } from "node:fs";
-import { homedir as homedir10 } from "node:os";
+import { existsSync as existsSync75, readFileSync as readFileSync90, realpathSync as realpathSync12 } from "node:fs";
+import { homedir as homedir11 } from "node:os";
 function accountFingerprint(keyId, issuerId) {
   return `sha256:${createHash39("sha256").update(`${issuerId}:${keyId}`).digest("hex").slice(0, 16)}`;
 }
@@ -163905,7 +164138,7 @@ function canonicalKeyPath(path2, profile, realpath) {
 }
 function resolveIapCredentials(options) {
   const { target } = options;
-  const home = options.home ?? homedir10();
+  const home = options.home ?? homedir11();
   const readFile3 = options.readFile ?? ((p2) => readFileSync90(p2, "utf8"));
   const realpath = options.realpath ?? realpathSync12;
   const profile = requireExplicitProfile(options.profileFlag, target);
@@ -163916,7 +164149,7 @@ function resolveIapCredentials(options) {
     env: {},
     home,
     readProfile: readFile3,
-    profileExists: options.exists ?? existsSync74
+    profileExists: options.exists ?? existsSync75
   });
   assertCredentialOutsideRepo(`credential profile "${profile}"`, realpath(profilePath(profile, home)));
   assertCredentialOutsideRepo(`credential profile "${profile}" ascKeyPath`, canonicalKeyPath(creds.ascKeyPath, profile, realpath));
@@ -164437,7 +164670,7 @@ var init_store_spec = __esm({
 });
 
 // src/iap-config-edit.ts
-import { existsSync as existsSync75, readFileSync as readFileSync92 } from "node:fs";
+import { existsSync as existsSync76, readFileSync as readFileSync92 } from "node:fs";
 import { basename as basename20, join as join77 } from "node:path";
 import ts8 from "typescript";
 function bindPurchasesAppInConfig(source, options) {
@@ -164518,7 +164751,7 @@ function capabilityFinding(app, fileName) {
 function withStoreBundle(dir, options) {
   if (options.storeBundleId) return options;
   const path2 = join77(dir, "store", "store.config.yaml");
-  if (!existsSync75(path2)) return options;
+  if (!existsSync76(path2)) return options;
   const storeBundleId = parseStoreConfig(readFileSync92(path2, "utf8")).ios?.bundleId;
   return storeBundleId ? { ...options, storeBundleId } : options;
 }
@@ -165169,7 +165402,7 @@ var init_store_iap_screenshots = __esm({
 });
 
 // src/store-iap-screenshot-render.ts
-import { existsSync as existsSync76, mkdtempSync as mkdtempSync4, readFileSync as readFileSync93, rmSync as rmSync18 } from "node:fs";
+import { existsSync as existsSync77, mkdtempSync as mkdtempSync4, readFileSync as readFileSync93, rmSync as rmSync18 } from "node:fs";
 import { tmpdir as tmpdir5 } from "node:os";
 import { join as join79 } from "node:path";
 function renderProblems(render, entityId) {
@@ -165232,7 +165465,7 @@ function createReviewScreenRenderer() {
     async capture(html, contentDir2) {
       const { pngPageHtml: pngPageHtml2, stabilizePngPage: stabilizePngPage2 } = await Promise.resolve().then(() => (init_render_descriptor(), render_descriptor_exports));
       const tokensPath = join79(contentDir2, "tokens.json");
-      const tokens2 = existsSync76(tokensPath) ? JSON.parse(readFileSync93(tokensPath, "utf8")) : null;
+      const tokens2 = existsSync77(tokensPath) ? JSON.parse(readFileSync93(tokensPath, "utf8")) : null;
       const { width, height, scale } = REVIEW_SCREENSHOT_FRAME;
       const page = await (await (browser ??= launch())).newPage({ viewport: { width, height }, deviceScaleFactor: scale, colorScheme: "light" });
       try {
@@ -165313,8 +165546,8 @@ __export(store_iap_exports, {
   runStoreIap: () => runStoreIap
 });
 import { randomUUID as randomUUID8 } from "node:crypto";
-import { appendFileSync as appendFileSync2, mkdirSync as mkdirSync35, readFileSync as readFileSync94, realpathSync as realpathSync13, renameSync as renameSync12, rmSync as rmSync19, writeFileSync as writeFileSync31 } from "node:fs";
-import { homedir as homedir11, hostname } from "node:os";
+import { appendFileSync as appendFileSync2, mkdirSync as mkdirSync36, readFileSync as readFileSync94, realpathSync as realpathSync13, renameSync as renameSync12, rmSync as rmSync19, writeFileSync as writeFileSync31 } from "node:fs";
+import { homedir as homedir12, hostname } from "node:os";
 import { dirname as dirname42, join as join80, resolve as resolve57 } from "node:path";
 function scrubDeep(value, scrub) {
   if (typeof value === "string") return scrub(value);
@@ -165838,7 +166071,7 @@ async function screenshotsCommand(flags, deps, out2) {
   return report3.complete ? 0 : 1;
 }
 function writeBinaryFile(path2, bytes2) {
-  mkdirSync35(dirname42(path2), { recursive: true });
+  mkdirSync36(dirname42(path2), { recursive: true });
   const partial = `${path2}.${process.pid}.partial`;
   writeFileSync31(partial, bytes2);
   renameSync12(partial, path2);
@@ -165891,8 +166124,8 @@ function acquireApplyLock(dir, appleAppId) {
   };
 }
 function stateDir(appleAppId) {
-  const dir = join80(homedir11(), ".himalaya", "store-iap", appleAppId);
-  mkdirSync35(dir, { recursive: true, mode: 448 });
+  const dir = join80(homedir12(), ".himalaya", "store-iap", appleAppId);
+  mkdirSync36(dir, { recursive: true, mode: 448 });
   return dir;
 }
 async function confirmOnTerminal(question) {
@@ -166395,7 +166628,7 @@ __export(preflight_app_exports, {
   profileAccount: () => profileAccount,
   readXcconfigVars: () => readXcconfigVars
 });
-import { readFileSync as readFileSync95, existsSync as existsSync77, readdirSync as readdirSync34, statSync as statSync21 } from "node:fs";
+import { readFileSync as readFileSync95, existsSync as existsSync78, readdirSync as readdirSync34, statSync as statSync21 } from "node:fs";
 import { createHash as createHash41 } from "node:crypto";
 import { dirname as dirname43, join as join81 } from "node:path";
 function analyze(projectYml, storeConfig, icon, account) {
@@ -166522,7 +166755,7 @@ function readXcconfigVars(iosDir, projectYml) {
   const vars = {};
   const seen = /* @__PURE__ */ new Set();
   const read = (path2) => {
-    if (seen.has(path2) || !existsSync77(path2)) return;
+    if (seen.has(path2) || !existsSync78(path2)) return;
     seen.add(path2);
     for (const raw of readFileSync95(path2, "utf8").split("\n")) {
       const inc = /^\s*#include\??\s+"([^"]+)"/.exec(raw);
@@ -166551,8 +166784,8 @@ function profileAccount(app, storeConfig, opts = {}) {
   }
 }
 async function preflightApp(app, opts = {}) {
-  const projectYml = existsSync77(iosProjectYml(app)) ? readFileSync95(iosProjectYml(app), "utf8") : "";
-  const storeConfig = existsSync77(storeConfigPath(app)) ? readFileSync95(storeConfigPath(app), "utf8") : "";
+  const projectYml = existsSync78(iosProjectYml(app)) ? readFileSync95(iosProjectYml(app), "utf8") : "";
+  const storeConfig = existsSync78(storeConfigPath(app)) ? readFileSync95(storeConfigPath(app), "utf8") : "";
   const identity = projectYml ? analyzeStoreIdentity(projectYml, storeConfig, readXcconfigVars(join81(appDir(app), "ios"), projectYml)) : [];
   if (!storeConfig) return [{ level: "error", message: `no apps/${app}/store/store.config.yaml \u2014 run /setup-store-signing first.` }, ...identity];
   const findings = analyze(
@@ -166590,15 +166823,15 @@ function analyzeSubmissionRecord(appLevel, review, opts) {
 function appLevelMetadataFiles(app, locale = "en-US") {
   const root = join81(storeDir(app), "metadata");
   const out2 = /* @__PURE__ */ new Set();
-  if (existsSync77(root)) {
+  if (existsSync78(root)) {
     for (const n2 of readdirSync34(root)) if (n2.endsWith(".txt")) out2.add(n2);
   }
-  if (existsSync77(join81(root, locale, "privacy_url.txt"))) out2.add("privacy_url.txt");
+  if (existsSync78(join81(root, locale, "privacy_url.txt"))) out2.add("privacy_url.txt");
   return out2;
 }
 function reviewInfoFiles(app) {
   const dir = join81(storeDir(app), "review_information");
-  if (!existsSync77(dir)) return /* @__PURE__ */ new Set();
+  if (!existsSync78(dir)) return /* @__PURE__ */ new Set();
   return new Set(readdirSync34(dir).filter((n2) => n2.endsWith(".txt")));
 }
 function isValidAppStoreSize(w2, h2) {
@@ -166745,20 +166978,20 @@ function analyzeListing(metaFiles, shots) {
 }
 function metadataFilesPresent(app, locale = "en-US") {
   const dir = join81(storeDir(app), "metadata", locale);
-  if (!existsSync77(dir)) return /* @__PURE__ */ new Set();
+  if (!existsSync78(dir)) return /* @__PURE__ */ new Set();
   return new Set(readdirSync34(dir).filter((n2) => n2.endsWith(".txt")));
 }
 function listScreenshots(app, locale = "en-US") {
   const out2 = [];
   const flat = join81(storeDir(app), "screenshots", locale);
-  if (existsSync77(flat)) {
+  if (existsSync78(flat)) {
     for (const png of readdirSync34(flat).filter((n2) => n2.endsWith(".png"))) {
       const sz = pngSize2(readFileSync95(join81(flat, png)));
       if (sz) out2.push({ name: png, w: sz.w, h: sz.h });
     }
   }
   const legacy = join81(storeDir(app), "metadata", locale, "screenshots");
-  if (existsSync77(legacy)) {
+  if (existsSync78(legacy)) {
     for (const deviceDir of readdirSync34(legacy)) {
       const d2 = join81(legacy, deviceDir);
       if (!statSync21(d2).isDirectory()) continue;
@@ -166772,7 +167005,7 @@ function listScreenshots(app, locale = "en-US") {
 }
 function placeholderHashes2() {
   const templateIos = join81(appDir("_template"), "ios");
-  if (!existsSync77(templateIos)) return [LEGACY_PLACEHOLDER_SHA2562];
+  if (!existsSync78(templateIos)) return [LEGACY_PLACEHOLDER_SHA2562];
   for (const target of readdirSync34(templateIos)) {
     const p2 = join81(templateIos, target, "Assets.xcassets", "AppIcon.appiconset", "icon_1024.png");
     try {
@@ -166808,7 +167041,7 @@ async function pixelIssues(bytes2) {
   }
 }
 async function appIconState(iosDir) {
-  if (!existsSync77(iosDir)) return { exists: false, isPlaceholder: false, storeIssues: [] };
+  if (!existsSync78(iosDir)) return { exists: false, isPlaceholder: false, storeIssues: [] };
   for (const target of readdirSync34(iosDir)) {
     const p2 = join81(iosDir, target, "Assets.xcassets", "AppIcon.appiconset", "icon_1024.png");
     try {
@@ -167721,11 +167954,11 @@ __export(notify_exports, {
   runNotify: () => runNotify,
   saveAdminSession: () => saveAdminSession
 });
-import { chmodSync as chmodSync3, mkdirSync as mkdirSync36, readFileSync as readFileSync98, writeFileSync as writeFileSync32 } from "node:fs";
-import { homedir as homedir12 } from "node:os";
+import { chmodSync as chmodSync3, mkdirSync as mkdirSync37, readFileSync as readFileSync98, writeFileSync as writeFileSync32 } from "node:fs";
+import { homedir as homedir13 } from "node:os";
 import { dirname as dirname45, join as join82 } from "node:path";
 function defaultSessionsPath() {
-  return process.env.HIMI_ADMIN_SESSIONS_FILE ?? join82(homedir12(), ".himalaya", "admin-sessions.json");
+  return process.env.HIMI_ADMIN_SESSIONS_FILE ?? join82(homedir13(), ".himalaya", "admin-sessions.json");
 }
 function loadSessionsFile(path2 = defaultSessionsPath()) {
   try {
@@ -167737,7 +167970,7 @@ function loadSessionsFile(path2 = defaultSessionsPath()) {
 function saveAdminSession(adminUrl, session, path2 = defaultSessionsPath()) {
   const file2 = loadSessionsFile(path2);
   file2.sessions = { ...file2.sessions, [adminUrl]: session };
-  mkdirSync36(dirname45(path2), { recursive: true, mode: 448 });
+  mkdirSync37(dirname45(path2), { recursive: true, mode: 448 });
   writeFileSync32(path2, JSON.stringify(file2, null, 2) + "\n", { mode: 384 });
   try {
     chmodSync3(dirname45(path2), 448);
@@ -168098,7 +168331,7 @@ __export(base44_adopt_exports, {
   renderAdoptModule: () => renderAdoptModule,
   runBase44Adopt: () => runBase44Adopt
 });
-import { existsSync as existsSync78, readFileSync as readFileSync99, writeFileSync as writeFileSync33 } from "node:fs";
+import { existsSync as existsSync79, readFileSync as readFileSync99, writeFileSync as writeFileSync33 } from "node:fs";
 import { join as join83, resolve as resolve59 } from "node:path";
 function prop(entity, key3) {
   const props = entity.schema?.properties;
@@ -168207,7 +168440,7 @@ function runBase44Adopt(opts) {
   const issues = validateBase44Entities({ entities: result.entities, functions: result.functions }, opts.app);
   if (opts.write === void 0 || opts.write === false || issues.some((i2) => i2.severity === "error")) return { result, module, issues };
   const target = typeof opts.write === "string" ? resolve59(opts.cwd, opts.write) : join83(opts.cwd, ADOPT_MODULE_FILENAME);
-  if (existsSync78(target)) {
+  if (existsSync79(target)) {
     throw new AdoptError("adopt_target_exists", `${target} already exists \u2014 adopt never overwrites. Delete or rename it, or pass --write <other path>.`, 1, { path: target });
   }
   writeFileSync33(target, module);
@@ -168456,7 +168689,7 @@ __export(generate_exports, {
   writeGenerated: () => writeGenerated
 });
 import { createHash as createHash43 } from "node:crypto";
-import { existsSync as existsSync79, mkdirSync as mkdirSync37, readdirSync as readdirSync35, readFileSync as readFileSync100, writeFileSync as writeFileSync34 } from "node:fs";
+import { existsSync as existsSync80, mkdirSync as mkdirSync38, readdirSync as readdirSync35, readFileSync as readFileSync100, writeFileSync as writeFileSync34 } from "node:fs";
 import { dirname as dirname46, join as join84 } from "node:path";
 function withHeader(body) {
   return `${GENERATED_HEADER}${sha2566(body)}
@@ -168583,7 +168816,7 @@ function writeGenerated(dir, files, opts = {}) {
     const abs = join84(dir, f2.path);
     const next = withHeader(f2.body);
     let outcome;
-    if (!existsSync79(abs)) outcome = "written";
+    if (!existsSync80(abs)) outcome = "written";
     else {
       const cur = readFileSync100(abs, "utf8");
       if (cur === next) outcome = "unchanged";
@@ -168591,7 +168824,7 @@ function writeGenerated(dir, files, opts = {}) {
       else outcome = "written";
     }
     if (outcome === "written" && !opts.dryRun) {
-      mkdirSync37(dirname46(abs), { recursive: true });
+      mkdirSync38(dirname46(abs), { recursive: true });
       writeFileSync34(abs, next);
     }
     out2.push({ path: f2.path, outcome });
@@ -168602,14 +168835,14 @@ function orphanedFiles(dir, current) {
   const keep = new Set(current.map((f2) => f2.path));
   const found = [];
   const t5 = join84(dir, "tier5-src");
-  if (!existsSync79(t5)) return found;
+  if (!existsSync80(t5)) return found;
   const candidates = readdirSync35(t5).filter((d2) => d2.startsWith("b44-")).map((d2) => `tier5-src/${d2}/index.ts`);
   const shared = join84(t5, "_shared");
-  if (existsSync79(shared)) {
+  if (existsSync80(shared)) {
     for (const f2 of readdirSync35(shared)) if (/^b44-.*-plan\.ts$/.test(f2)) candidates.push(`tier5-src/_shared/${f2}`);
   }
   for (const rel of candidates.sort()) {
-    if (keep.has(rel) || !existsSync79(join84(dir, rel))) continue;
+    if (keep.has(rel) || !existsSync80(join84(dir, rel))) continue;
     if (readFileSync100(join84(dir, rel), "utf8").startsWith(GENERATED_HEADER)) found.push(rel);
   }
   return found;
@@ -168648,18 +168881,18 @@ __export(base44_auth_exports, {
   usableBase44Auth: () => usableBase44Auth,
   writeBase44Session: () => writeBase44Session
 });
-import { chmodSync as chmodSync4, existsSync as existsSync80, mkdirSync as mkdirSync38, readFileSync as readFileSync101, rmSync as rmSync20, writeFileSync as writeFileSync35 } from "node:fs";
-import { homedir as homedir13 } from "node:os";
+import { chmodSync as chmodSync4, existsSync as existsSync81, mkdirSync as mkdirSync39, readFileSync as readFileSync101, rmSync as rmSync20, writeFileSync as writeFileSync35 } from "node:fs";
+import { homedir as homedir14 } from "node:os";
 import { dirname as dirname47, join as join85 } from "node:path";
 function base44ApiBase(env = process.env) {
   return (env.BASE44_API_URL?.trim() || "https://app.base44.com").replace(/\/+$/, "");
 }
-function base44SessionPath(home = homedir13()) {
+function base44SessionPath(home = homedir14()) {
   return join85(home, ".himi", "base44", "session.json");
 }
 function readBase44Session(home) {
   const p2 = base44SessionPath(home);
-  if (!existsSync80(p2)) return void 0;
+  if (!existsSync81(p2)) return void 0;
   try {
     const s2 = JSON.parse(readFileSync101(p2, "utf8"));
     return typeof s2.accessToken === "string" && s2.accessToken ? s2 : void 0;
@@ -168669,7 +168902,7 @@ function readBase44Session(home) {
 }
 function writeBase44Session(session, home) {
   const p2 = base44SessionPath(home);
-  mkdirSync38(dirname47(p2), { recursive: true, mode: 448 });
+  mkdirSync39(dirname47(p2), { recursive: true, mode: 448 });
   writeFileSync35(p2, `${JSON.stringify(session, null, 2)}
 `, { mode: 384 });
   chmodSync4(p2, 384);
@@ -168677,7 +168910,7 @@ function writeBase44Session(session, home) {
 }
 function deleteBase44Session(home) {
   const p2 = base44SessionPath(home);
-  if (!existsSync80(p2)) return false;
+  if (!existsSync81(p2)) return false;
   rmSync20(p2, { force: true });
   return true;
 }
@@ -168778,9 +169011,9 @@ function hasBase44WriteScope(auth) {
   if (!scopes) return "unknown";
   return scopes.includes("apps:write");
 }
-function importBase44CliSession(home = homedir13(), env = process.env) {
+function importBase44CliSession(home = homedir14(), env = process.env) {
   const src = join85(home, ".base44", "auth", "auth.json");
-  if (!existsSync80(src)) throw new Error(`no Base44 CLI session at ${src} \u2014 run \`npx base44 login\` first, or use \`himi base44 login\``);
+  if (!existsSync81(src)) throw new Error(`no Base44 CLI session at ${src} \u2014 run \`npx base44 login\` first, or use \`himi base44 login\``);
   const a2 = JSON.parse(readFileSync101(src, "utf8"));
   if (typeof a2.accessToken !== "string" || !a2.accessToken) throw new Error(`${src} holds no access token`);
   const session = {
@@ -168878,11 +169111,11 @@ __export(seed_exports, {
   seedBase44Entities: () => seedBase44Entities,
   writeBase44SeedRows: () => writeBase44SeedRows
 });
-import { existsSync as existsSync81, readFileSync as readFileSync102, writeFileSync as writeFileSync36 } from "node:fs";
+import { existsSync as existsSync82, readFileSync as readFileSync102, writeFileSync as writeFileSync36 } from "node:fs";
 import { join as join86 } from "node:path";
 function readBase44SeedFile(dir) {
   const file2 = join86(dir, BASE44_SEED_FILE);
-  if (!existsSync81(file2)) return {};
+  if (!existsSync82(file2)) return {};
   let parsed;
   try {
     parsed = JSON.parse(readFileSync102(file2, "utf8"));
@@ -169042,7 +169275,7 @@ function writeBase44SeedRows(opts) {
     return { ok: false, path: path2, entities: {}, agentPrompt: "", next: [], note: opts.only ? `--only ${opts.only.join(",")} matched no owned entity` : `no owned Base44 entities declared \u2014 add one with \`name\` (physically ${base44Prefix(app)}<Name>). Adopted entities are never seeded.` };
   }
   let existing = {};
-  if (existsSync81(path2)) {
+  if (existsSync82(path2)) {
     let parsed;
     try {
       parsed = JSON.parse(readFileSync102(path2, "utf8"));
@@ -169397,7 +169630,7 @@ __export(functions_exports2, {
   markerContent: () => markerContent,
   readFunctionSource: () => readFunctionSource
 });
-import { existsSync as existsSync82, lstatSync as lstatSync21 } from "node:fs";
+import { existsSync as existsSync83, lstatSync as lstatSync21 } from "node:fs";
 import { join as join87 } from "node:path";
 function markerContent(app) {
   return `${JSON.stringify({ app, by: "himi" })}
@@ -169406,7 +169639,7 @@ function markerContent(app) {
 function readFunctionSource(appDir3, name, app) {
   const rel = `base44/functions/${name}/`;
   const folder = join87(appDir3, "base44", "functions", name);
-  if (!existsSync82(folder) || !lstatSync21(folder).isDirectory()) throw new FunctionSourceError("function_source_missing", `no source folder at ${rel}`);
+  if (!existsSync83(folder) || !lstatSync21(folder).isDirectory()) throw new FunctionSourceError("function_source_missing", `no source folder at ${rel}`);
   const { entries, skipped } = collectAppSource(folder);
   if (skipped.length) throw new FunctionSourceError("function_source_unsafe", `${rel} holds paths himi will not upload (symlinks or denied names): ${skipped.join(", ")} \u2014 remove them`);
   const secrets = secretFindings(entries);
@@ -169744,12 +169977,12 @@ __export(apply_exports, {
   createBase44Entities: () => createBase44Entities,
   fileLedger: () => fileLedger
 });
-import { existsSync as existsSync83, readFileSync as readFileSync103, writeFileSync as writeFileSync37 } from "node:fs";
+import { existsSync as existsSync84, readFileSync as readFileSync103, writeFileSync as writeFileSync37 } from "node:fs";
 import { join as join88 } from "node:path";
 function fileLedger(dir, appId2) {
   const path2 = join88(dir, LEDGER_FILE2);
   const load3 = () => {
-    if (!existsSync83(path2)) return {};
+    if (!existsSync84(path2)) return {};
     let v2;
     try {
       v2 = JSON.parse(readFileSync103(path2, "utf8"));
@@ -172122,7 +172355,7 @@ var init_brand_font = __esm({
 });
 
 // src/site-analyze/write-artifacts.ts
-import { mkdirSync as mkdirSync39, rmSync as rmSync21, writeFileSync as writeFileSync38 } from "node:fs";
+import { mkdirSync as mkdirSync40, rmSync as rmSync21, writeFileSync as writeFileSync38 } from "node:fs";
 import { join as join89 } from "node:path";
 function attachVeloSources(book, sources, put) {
   const byPath = new Map((sources ?? []).map((s2) => [s2.path, s2.text]));
@@ -172278,12 +172511,12 @@ async function downloadMedia(book, fetchImpl, put) {
 }
 async function writeBusinessBook(result, opts) {
   const out2 = opts.outDir;
-  mkdirSync39(join89(out2, "evidence/pages"), { recursive: true });
-  mkdirSync39(join89(out2, "media/catalog"), { recursive: true });
+  mkdirSync40(join89(out2, "evidence/pages"), { recursive: true });
+  mkdirSync40(join89(out2, "media/catalog"), { recursive: true });
   const files = [];
   const put = (rel, body) => {
     const p2 = join89(out2, rel);
-    mkdirSync39(join89(p2, ".."), { recursive: true });
+    mkdirSync40(join89(p2, ".."), { recursive: true });
     writeFileSync38(p2, body);
     files.push(rel);
   };
@@ -172909,7 +173142,7 @@ var init_analyze = __esm({
 });
 
 // src/base44-analyze/write-artifacts.ts
-import { existsSync as existsSync84, mkdirSync as mkdirSync40, readFileSync as readFileSync104, rmSync as rmSync22, writeFileSync as writeFileSync39 } from "node:fs";
+import { existsSync as existsSync85, mkdirSync as mkdirSync41, readFileSync as readFileSync104, rmSync as rmSync22, writeFileSync as writeFileSync39 } from "node:fs";
 import { dirname as dirname48, join as join90, resolve as resolve60, sep as sep19 } from "node:path";
 function isBookFolder(dir) {
   try {
@@ -173000,17 +173233,17 @@ function writeBase44Book(result, outDir, opts = {}) {
   const md = renderBookMd(book);
   assertNoSecrets(json8);
   assertNoSecrets(md);
-  const owned = ["book.json", "BOOK.md", "source", "screenshots"].filter((n2) => existsSync84(join90(out2, n2)));
+  const owned = ["book.json", "BOOK.md", "source", "screenshots"].filter((n2) => existsSync85(join90(out2, n2)));
   if (owned.length) {
     if (!isBookFolder(out2)) throw new Error(`refusing to write the app book into ${out2}: it already has ${owned.join(", ")} that ${owned.length === 1 ? "is" : "are"} not from an app book \u2014 pick an empty --out`);
     for (const d2 of ["source", "screenshots"]) rmSync22(join90(out2, d2), { recursive: true, force: true });
   }
-  mkdirSync40(out2, { recursive: true });
+  mkdirSync41(out2, { recursive: true });
   writeFileSync39(join90(out2, "book.json"), json8);
   writeFileSync39(join90(out2, "BOOK.md"), md);
   files.push("book.json", "BOOK.md");
   for (const s2 of shots) {
-    mkdirSync40(join90(out2, "screenshots"), { recursive: true });
+    mkdirSync41(join90(out2, "screenshots"), { recursive: true });
     writeFileSync39(join90(out2, "screenshots", s2.filename), s2.bytes);
     files.push(`screenshots/${s2.filename}`);
   }
@@ -173019,7 +173252,7 @@ function writeBase44Book(result, outDir, opts = {}) {
     if (!safeRel(f2.path)) continue;
     const dest = join90(sourceRoot, ...f2.path.split("/"));
     if (!dest.startsWith(sourceRoot + sep19)) continue;
-    mkdirSync40(dirname48(dest), { recursive: true });
+    mkdirSync41(dirname48(dest), { recursive: true });
     writeFileSync39(dest, f2.bytes);
   }
   if (result.sourceFiles.length) files.push(`source/ (${result.sourceFiles.length} files)`);
@@ -176561,7 +176794,7 @@ __export(cli_exports, {
   systemTar: () => systemTar
 });
 import { execFile } from "node:child_process";
-import { mkdirSync as mkdirSync41, mkdtempSync as mkdtempSync5, rmSync as rmSync23, writeFileSync as writeFileSync40 } from "node:fs";
+import { mkdirSync as mkdirSync42, mkdtempSync as mkdtempSync5, rmSync as rmSync23, writeFileSync as writeFileSync40 } from "node:fs";
 import { tmpdir as tmpdir6 } from "node:os";
 import { join as join91, resolve as resolve61 } from "node:path";
 import { promisify } from "node:util";
@@ -176582,7 +176815,7 @@ function projectDownloader(apiFetch, apiBase, token, extract = systemTar) {
       const archive = join91(root, "project.tar");
       const dir = join91(root, "project");
       writeFileSync40(archive, bytes2);
-      mkdirSync41(dir);
+      mkdirSync42(dir);
       await extract(archive, dir);
       return { dir, cleanup };
     } catch (e2) {
@@ -177497,7 +177730,7 @@ __export(cli_exports2, {
   ONE_APP_WORKFLOW: () => ONE_APP_WORKFLOW,
   runOneAppCommand: () => runOneAppCommand
 });
-import { closeSync as closeSync7, constants as constants4, lstatSync as lstatSync22, mkdirSync as mkdirSync42, openSync as openSync6, readFileSync as readFileSync105, realpathSync as realpathSync14, writeFileSync as writeFileSync41 } from "node:fs";
+import { closeSync as closeSync7, constants as constants4, lstatSync as lstatSync22, mkdirSync as mkdirSync43, openSync as openSync6, readFileSync as readFileSync105, realpathSync as realpathSync14, writeFileSync as writeFileSync41 } from "node:fs";
 import { createHash as createHash45 } from "node:crypto";
 import { dirname as dirname49, join as join92, parse as parse3, resolve as resolve62 } from "node:path";
 function readOptions(argv, cwd, commandIncluded) {
@@ -177648,12 +177881,12 @@ Collect the source mobile app and hand it to the current coding agent. The agent
   try {
     options = readOptions(argv, deps.cwd ?? process.cwd(), commandIncluded);
     try {
-      mkdirSync42(options.parentDir, { recursive: true, mode: 448 });
+      mkdirSync43(options.parentDir, { recursive: true, mode: 448 });
       assertSafeParents(options.parentDir);
-      mkdirSync42(options.workspace, { mode: 448 });
+      mkdirSync43(options.workspace, { mode: 448 });
       if (realpathSync14(options.workspace) !== options.workspace) throw new Error("destination changed");
       evidenceDir = join92(options.workspace, ".himi", "one-app");
-      mkdirSync42(evidenceDir, { recursive: true, mode: 448 });
+      mkdirSync43(evidenceDir, { recursive: true, mode: 448 });
     } catch (error) {
       if (error.code === "EEXIST") {
         throw new OneAppError("output_exists", "The destination already exists. Choose a new --name or --dir.");
@@ -179789,7 +180022,7 @@ var init_customer_build = __esm({
 });
 
 // src/site-analyze/apply.ts
-import { existsSync as existsSync85, readFileSync as readFileSync106, writeFileSync as writeFileSync42, copyFileSync as copyFileSync2, mkdirSync as mkdirSync43, realpathSync as realpathSync15, statSync as statSync22 } from "node:fs";
+import { existsSync as existsSync86, readFileSync as readFileSync106, writeFileSync as writeFileSync42, copyFileSync as copyFileSync2, mkdirSync as mkdirSync44, realpathSync as realpathSync15, statSync as statSync22 } from "node:fs";
 import { dirname as dirname50, isAbsolute as isAbsolute8, join as join93, resolve as resolve63, sep as sep20 } from "node:path";
 import { spawnSync as spawnSync4 } from "node:child_process";
 function unpairedRedirectNote(overlay) {
@@ -179805,7 +180038,7 @@ function committedShellProvisioning(path2) {
 function findRepoRoot(cwd) {
   let dir = cwd;
   for (let i2 = 0; i2 < 8; i2++) {
-    if (SHELL_NAMES2.some((name) => existsSync85(join93(dir, shellAppDir(name), "package.json")))) return dir;
+    if (SHELL_NAMES2.some((name) => existsSync86(join93(dir, shellAppDir(name), "package.json")))) return dir;
     const next = dirname50(dir);
     if (next === dir) break;
     dir = next;
@@ -179909,7 +180142,7 @@ function sameKnownSite(previous, next) {
 function buildMergedContract(options) {
   const { appDir: appDir3, packageDir, overlay } = options;
   const committedPath = join93(appDir3, "provisioning.json");
-  if (!existsSync85(committedPath)) {
+  if (!existsSync86(committedPath)) {
     throw new Error(`shell has no committed provisioning.json at ${committedPath} to build a contract from`);
   }
   const committed = JSON.parse(readFileSync106(committedPath, "utf8"));
@@ -179925,7 +180158,7 @@ function buildMergedContract(options) {
   const stage = (fromRel, toRel) => {
     const from = contained(packageDir, fromRel);
     const to2 = contained(join93(appDir3, STAGED), toRel.slice(STAGED.length + 1));
-    if (!from || !to2 || !existsSync85(from)) return void 0;
+    if (!from || !to2 || !existsSync86(from)) return void 0;
     let real;
     let realRoot;
     try {
@@ -179937,7 +180170,7 @@ function buildMergedContract(options) {
     if (!real.startsWith(realRoot + sep20)) return void 0;
     try {
       if (!statSync22(real).isFile()) return void 0;
-      mkdirSync43(dirname50(to2), { recursive: true });
+      mkdirSync44(dirname50(to2), { recursive: true });
       copyFileSync2(real, to2);
     } catch {
       return void 0;
@@ -179948,7 +180181,7 @@ function buildMergedContract(options) {
   const icon = stage("media/icon.png", `${STAGED}/icon.png`);
   if (icon) branding.appIconPath = icon;
   const facesPath = join93(packageDir, "media/fonts/faces.json");
-  if (existsSync85(facesPath)) {
+  if (existsSync86(facesPath)) {
     let faces = [];
     try {
       const parsed = JSON.parse(readFileSync106(facesPath, "utf8"));
@@ -179975,7 +180208,7 @@ function buildMergedContract(options) {
   const path2 = join93(packageDir, "provisioning.contract.json");
   writeFileSync42(path2, body);
   const localPath2 = join93(appDir3, LOCAL_CONTRACT_REL);
-  mkdirSync43(dirname50(localPath2), { recursive: true });
+  mkdirSync44(dirname50(localPath2), { recursive: true });
   writeFileSync42(localPath2, body);
   staged.push(localPath2);
   return { path: path2, staged };
@@ -180010,7 +180243,7 @@ function staticFaqFor(overlay, overlayPath) {
   const own5 = overlay.faq;
   if (own5 !== void 0) return deriveStaticFaq(own5);
   const bookPath = join93(dirname50(resolve63(overlayPath)), "book.json");
-  if (!existsSync85(bookPath)) return void 0;
+  if (!existsSync86(bookPath)) return void 0;
   try {
     const book = JSON.parse(readFileSync106(bookPath, "utf8"));
     const copy = book?.copy;
@@ -180027,7 +180260,7 @@ function staticGalleriesFor(overlay, overlayPath) {
     overlay.galleries.map((gallery) => ({ role: "gallery", title: gallery.title, galleryImageUrls: gallery.photos }))
   );
   const bookPath = join93(dirname50(resolve63(overlayPath)), "book.json");
-  if (!existsSync85(bookPath)) return void 0;
+  if (!existsSync86(bookPath)) return void 0;
   try {
     const book = JSON.parse(readFileSync106(bookPath, "utf8"));
     if (!book.look || book.look.unavailable || !Array.isArray(book.look.pages)) return void 0;
@@ -180061,7 +180294,7 @@ async function applyOverlays(input) {
     }
     const appDir3 = join93(repoRoot2, shellAppDir(shell));
     const committedPath = join93(appDir3, "provisioning.json");
-    const committedSite = existsSync85(committedPath) ? JSON.parse(readFileSync106(committedPath, "utf8")).site : void 0;
+    const committedSite = existsSync86(committedPath) ? JSON.parse(readFileSync106(committedPath, "utf8")).site : void 0;
     if (committedSite !== void 0 && overlay.site === void 0) {
       throw new Error(
         `shell "${shell}" is a site shell: its contract names the customer's website (a \`site\` block), and this overlay has none. Re-run \`himi site analyze --url <site> --shell ${shell}\` to derive the site's page map (edit \`site.pages\` in provisioning.overlay.json if needed), then --apply.`
@@ -180102,7 +180335,7 @@ async function applyOverlays(input) {
   };
   let packageFaq = faq;
   let packageGalleries = galleries;
-  if (existsSync85(pkgProv)) {
+  if (existsSync86(pkgProv)) {
     const cur = JSON.parse(readFileSync106(pkgProv, "utf8"));
     if (galleries === void 0 && !sameKnownSite(cur, overlay)) overlay.galleries = [];
     const merged = deepMerge4(cur, overlay);
@@ -180120,7 +180353,7 @@ async function applyOverlays(input) {
     overlay.installedVerticals.push("galleries");
   }
   const pkgTokens = join93(cwd, "tokens.json");
-  if (existsSync85(pkgTokens) && (tokens2.colors || tokens2.typography)) {
+  if (existsSync86(pkgTokens) && (tokens2.colors || tokens2.typography)) {
     const cur = JSON.parse(readFileSync106(pkgTokens, "utf8"));
     let tokensIn = tokens2;
     if (tokens2.typography) {
@@ -180147,7 +180380,7 @@ async function applyOverlays(input) {
   }
   const homeAction = homeRefreshActionId(shell);
   const homeSrc = join93(cwd, "dev/index.ts");
-  if (homeAction && existsSync85(homeSrc)) {
+  if (homeAction && existsSync86(homeSrc)) {
     const prev = readFileSync106(homeSrc, "utf8");
     const patched = patchBrandParams(prev, overlay, homeAction);
     let next = patched.src;
@@ -180183,13 +180416,13 @@ async function applyOverlays(input) {
       notes.push(`${patched.unparsed} onAppear params block(s) in ${homeSrc} could not be read \u2014 any brand values inside them were not applied`);
     }
   }
-  if (!input.iconPath || !existsSync85(input.iconPath)) {
+  if (!input.iconPath || !existsSync86(input.iconPath)) {
     const book = input.iconPath ? dirname50(dirname50(resolve63(input.iconPath))) : void 0;
     notes.push(
       book ? `no icon installed \u2014 ${siteLogoAbsence(book).hint}` : "no icon installed and no business book to say why \u2014 `himi icon generate` draws one from the accent, or `himi icon set <file.png>` installs the customer's own mark"
     );
   }
-  if (input.iconPath && existsSync85(input.iconPath)) {
+  if (input.iconPath && existsSync86(input.iconPath)) {
     try {
       const installed = await installIcon(cwd, input.iconPath, { derivePlay: true });
       wrote.push(...installed.wrote);
@@ -181148,7 +181381,7 @@ __export(cli_exports3, {
   runSiteAnalyze: () => runSiteAnalyze,
   runSiteFunctionCli: () => runSiteFunctionCli
 });
-import { existsSync as existsSync86, readFileSync as readFileSync107 } from "node:fs";
+import { existsSync as existsSync87, readFileSync as readFileSync107 } from "node:fs";
 import { resolve as resolve64 } from "node:path";
 function applyNeedsClient(shell) {
   if (shell === void 0 || !SHELL_NAMES2.includes(shell)) return true;
@@ -181216,7 +181449,7 @@ async function runSiteAnalyze(opts) {
       if (book?.skipped) result.warnings = [...result.warnings ?? [], book.skipped];
       const derived = deriveSiteShell({ siteUrl: result.book.input.siteUrl, look: result.book.look, kind, routes });
       const prevOverlayPath = resolve64(outDir, "provisioning.overlay.json");
-      const prevSite = existsSync86(prevOverlayPath) ? (() => {
+      const prevSite = existsSync87(prevOverlayPath) ? (() => {
         try {
           return JSON.parse(readFileSync107(prevOverlayPath, "utf8")).site;
         } catch {
@@ -181237,7 +181470,7 @@ async function runSiteAnalyze(opts) {
   }
   const previousOverlay = resolve64(outDir, "provisioning.overlay.json");
   carryOverGoals(
-    existsSync86(previousOverlay) ? readFileSync107(previousOverlay, "utf8") : void 0,
+    existsSync87(previousOverlay) ? readFileSync107(previousOverlay, "utf8") : void 0,
     result.provisioningOverlay
   );
   const ownerCall = ownerAuth ? ownerTransportFrom(fetchImpl, ownerAuth) : void 0;
@@ -181323,7 +181556,7 @@ async function runSiteFunctionCli(opts) {
   });
 }
 function base44BookRoutes(bookPath, siteUrl) {
-  if (!existsSync86(bookPath)) return void 0;
+  if (!existsSync87(bookPath)) return void 0;
   try {
     const book = JSON.parse(readFileSync107(bookPath, "utf8"));
     if (book.kind !== "base44-app-book" || !Array.isArray(book.routes)) return void 0;
@@ -181580,7 +181813,7 @@ __export(site_create_exports, {
   runSiteList: () => runSiteList,
   writeProvisioningBinding: () => writeProvisioningBinding
 });
-import { existsSync as existsSync87, readFileSync as readFileSync108, writeFileSync as writeFileSync43 } from "node:fs";
+import { existsSync as existsSync88, readFileSync as readFileSync108, writeFileSync as writeFileSync43 } from "node:fs";
 import { resolve as resolvePath2 } from "node:path";
 function oauthClientName(projectName) {
   return `${projectName} client`;
@@ -181729,7 +181962,7 @@ async function runSiteCreate(opts) {
   if (!wantOauthApp) return { ...base, nextSteps: nextSteps(metaSiteId) };
   return { ...base, clientId, redirectUri, nextSteps: nextSteps(metaSiteId, clientId) };
 }
-function writeProvisioningBinding(target, binding2, fs2 = { existsSync: existsSync87, readFileSync: readFileSync108, writeFileSync: writeFileSync43 }) {
+function writeProvisioningBinding(target, binding2, fs2 = { existsSync: existsSync88, readFileSync: readFileSync108, writeFileSync: writeFileSync43 }) {
   const msid = binding2.siteId;
   const path2 = resolvePath2(target);
   const committed = committedShellProvisioning(path2);
@@ -182426,13 +182659,13 @@ var init_context = __esm({
 });
 
 // src/cli.ts
-import { mkdtempSync as mkdtempSync6, readFileSync as readFileSync109, mkdirSync as mkdirSync44, writeFileSync as writeFileSync44, existsSync as existsSync88, rmSync as rmSync24, readdirSync as readdirSync36, statSync as statSync23, lstatSync as lstatSync23, accessSync, constants as constants5, renameSync as renameSync13, cpSync as cpSync3 } from "node:fs";
+import { mkdtempSync as mkdtempSync6, readFileSync as readFileSync109, mkdirSync as mkdirSync45, writeFileSync as writeFileSync44, existsSync as existsSync89, rmSync as rmSync24, readdirSync as readdirSync36, statSync as statSync23, lstatSync as lstatSync23, accessSync, constants as constants5, renameSync as renameSync13, cpSync as cpSync3 } from "node:fs";
 import { execFile as execFile2, execFileSync as execFileSync7, spawnSync as spawnSync5, spawn as spawn7 } from "node:child_process";
 import { AsyncLocalStorage as AsyncLocalStorage2 } from "node:async_hooks";
 import { createHash as createHash46, randomUUID as randomUUID11 } from "node:crypto";
-import { tmpdir as tmpdir7, homedir as homedir14, hostname as hostname2 } from "node:os";
+import { tmpdir as tmpdir7, homedir as homedir15, hostname as hostname2 } from "node:os";
 import { join as join94, resolve as resolve65, relative as relative16, basename as basename21, dirname as dirname51 } from "node:path";
-import { fileURLToPath as fileURLToPath29 } from "node:url";
+import { fileURLToPath as fileURLToPath30 } from "node:url";
 
 // ../serve-cli/src/client.ts
 import { gzipSync } from "node:zlib";
@@ -185491,7 +185724,7 @@ function createScopedRegistryResolver(exec = execNpmConfig) {
       const configured = async (key3) => {
         const timeout = deadline - Date.now();
         if (timeout <= 0) throw new Error("npm config: out of budget");
-        const raw = String(await exec("npm", ["config", "get", key3], { cwd: homedir14(), timeout })).trim();
+        const raw = String(await exec("npm", ["config", "get", key3], { cwd: homedir15(), timeout })).trim();
         return raw && raw !== "undefined" ? raw : void 0;
       };
       const effective = normalizeRegistry(await configured("@wix:registry") ?? await configured("registry"));
@@ -185644,7 +185877,7 @@ var UPDATE_RETRY_AFTER_FAILURE_MS = 60 * 60 * 1e3;
 var UPDATE_SNOOZE_MS = 24 * 60 * 60 * 1e3;
 var UPDATE_REEXEC_ENV = "HIMI_UPDATED_ONCE";
 function updateCachePath(env = process.env) {
-  return env.HIMI_UPDATE_CACHE_FILE ?? join94(homedir14(), ".himalaya", "update-check.json");
+  return env.HIMI_UPDATE_CACHE_FILE ?? join94(homedir15(), ".himalaya", "update-check.json");
 }
 function readUpdateCache(path2) {
   try {
@@ -185656,7 +185889,7 @@ function readUpdateCache(path2) {
 }
 function writeUpdateCache(path2, cache) {
   try {
-    mkdirSync44(dirname51(path2), { recursive: true, mode: 448 });
+    mkdirSync45(dirname51(path2), { recursive: true, mode: 448 });
     writeFileSync44(path2, JSON.stringify(cache, null, 2) + "\n", { mode: 384 });
   } catch {
   }
@@ -185710,7 +185943,7 @@ function createUpdateRunner(spawn8 = spawnSync5) {
         // parse — the agent case this whole feature exists for (#2985 review). And no stdin: an
         // install needs none, and must not consume input piped to the command we are about to re-run.
         stdio: ["ignore", 2, 2],
-        cwd: homedir14()
+        cwd: homedir15()
       });
       if (result.error) return { ok: false, detail: result.error.message };
       return result.status === 0 ? { ok: true } : { ok: false, detail: `npm exited ${result.status}` };
@@ -185722,7 +185955,7 @@ function createUpdateRunner(spawn8 = spawnSync5) {
     reexec: (argv) => {
       const root = globalNodeModulesRoot();
       const entry = root ? join94(root, "@wix", "himalaya-cli", "dist", "cli.mjs") : void 0;
-      if (!entry || !existsSync88(entry)) return void 0;
+      if (!entry || !existsSync89(entry)) return void 0;
       const result = spawnSync5(process.execPath, [entry, ...argv], {
         // inherit keeps PIPED STDIN working — commands that read stdin must survive a re-exec.
         stdio: "inherit",
@@ -185813,7 +186046,7 @@ function acquireUpdateLock(cachePath, now, hooks = {}) {
   };
   const release2 = () => removeIfMine(lockPath);
   try {
-    mkdirSync44(dirname51(lockPath), { recursive: true, mode: 448 });
+    mkdirSync45(dirname51(lockPath), { recursive: true, mode: 448 });
   } catch {
     return () => {
     };
@@ -185880,10 +186113,10 @@ function supersededInCache(current, latest, now) {
 function createUpdateRefreshSpawner(spawnFn = spawn7, execArgv = process.execArgv) {
   return () => {
     try {
-      const child = spawnFn(process.execPath, [...loaderArgs(execArgv), fileURLToPath29(import.meta.url), UPDATE_REFRESH_COMMAND], {
+      const child = spawnFn(process.execPath, [...loaderArgs(execArgv), fileURLToPath30(import.meta.url), UPDATE_REFRESH_COMMAND], {
         detached: true,
         stdio: "ignore",
-        cwd: homedir14(),
+        cwd: homedir15(),
         env: process.env
       });
       child.on("error", () => {
@@ -185935,7 +186168,7 @@ function createTrimValidator(deps = {}, spawnFn = spawn7) {
     }
     const { code, stdout, stderr } = await new Promise((done) => {
       const chunks = { out: [], err: [] };
-      const child = spawnFn(process.execPath, [...loaderArgs(process.execArgv), fileURLToPath29(import.meta.url), ...argv], {
+      const child = spawnFn(process.execPath, [...loaderArgs(process.execArgv), fileURLToPath30(import.meta.url), ...argv], {
         cwd: process.cwd(),
         env: process.env,
         stdio: ["ignore", "pipe", "pipe"]
@@ -186493,7 +186726,7 @@ async function nativeConfigAdvisories(app, configSource) {
     const { iosProjectYml: iosProjectYml2 } = await Promise.resolve().then(() => (init_paths2(), paths_exports));
     const { androidOptedIn: androidOptedIn3, LABEL_IOS_SPLASH: LABEL_IOS_SPLASH2 } = await Promise.resolve().then(() => (init_splash(), splash_exports));
     const iosYmlPath = iosProjectYml2(app);
-    const iosYml = existsSync88(iosYmlPath) ? readFileSync109(iosYmlPath, "utf8") : "";
+    const iosYml = existsSync89(iosYmlPath) ? readFileSync109(iosYmlPath, "utf8") : "";
     let optedIn = iosYml.includes(LABEL_IOS_SPLASH2);
     if (!optedIn) {
       const { androidManifestPath: androidManifestPath3 } = await Promise.resolve().then(() => (init_gen_native_config(), gen_native_config_exports));
@@ -186513,7 +186746,7 @@ function readConfigSource(dir) {
   }
 }
 function writePngFile(path2, base64) {
-  mkdirSync44(dirname51(path2), { recursive: true });
+  mkdirSync45(dirname51(path2), { recursive: true });
   writeFileSync44(path2, Buffer.from(base64, "base64"));
   return path2;
 }
@@ -186561,7 +186794,7 @@ var NoBase44SlotError = class extends Error {
 };
 async function initFromRemoteTemplate(name, parentDir, template, c2, opts = {}) {
   const dir = resolve65(parentDir, name);
-  if (existsSync88(join94(dir, "himalaya.content.json"))) {
+  if (existsSync89(join94(dir, "himalaya.content.json"))) {
     throw new Error(`content package already exists at ${dir}`);
   }
   const r2 = await c2.fetchTemplateSource(TEMPLATE_APP_PREFIX + template);
@@ -186607,7 +186840,7 @@ function symlinkDestinationIssue(dest) {
 function restoreDestinationIssue(dest, force) {
   const link = symlinkDestinationIssue(dest);
   if (link) return link;
-  if (!existsSync88(dest)) return null;
+  if (!existsSync89(dest)) return null;
   if (!statSync23(dest).isDirectory()) {
     return { error: `${dest} exists and is not a directory`, hint: "pass --out/--name to land somewhere else, or remove the file" };
   }
@@ -186622,7 +186855,7 @@ function restoreDestinationIssue(dest, force) {
 function isHimalayaMonorepoCheckout(start) {
   let dir = resolve65(start);
   for (; ; ) {
-    if (existsSync88(join94(dir, "tools", "himi-cli", "src", "cli.ts")) && existsSync88(join94(dir, "core", "serve", "src", "server.ts"))) return true;
+    if (existsSync89(join94(dir, "tools", "himi-cli", "src", "cli.ts")) && existsSync89(join94(dir, "core", "serve", "src", "server.ts"))) return true;
     const parent = dirname51(dir);
     if (parent === dir) return false;
     dir = parent;
@@ -186682,7 +186915,7 @@ function materializeForPreview(appDir3, slug, displayName3) {
   const forBuild = Object.fromEntries(
     Object.entries(files).map(([rel, body]) => [rel, rel === "himalaya.content.json" ? substituteIdentity(body, slug) : body])
   );
-  const repoRoot2 = resolve65(fileURLToPath29(new URL("../../..", import.meta.url)));
+  const repoRoot2 = resolve65(fileURLToPath30(new URL("../../..", import.meta.url)));
   const root = join94(repoRoot2, "node_modules", ".cache", "himi-template-preview");
   const stillRunning = (pid) => {
     try {
@@ -186704,7 +186937,7 @@ function materializeForPreview(appDir3, slug, displayName3) {
   }
   const dest = join94(root, `${slug}-${process.pid}`);
   rmSync24(dest, { recursive: true, force: true });
-  mkdirSync44(dest, { recursive: true });
+  mkdirSync45(dest, { recursive: true });
   try {
     materializeSource(forBuild, displayName3, dest, slug);
   } catch (e2) {
@@ -187017,7 +187250,7 @@ Seed your coding agent with \`himi agent-init\`. Guides: ${idx.portalUrl}`);
         ...res.removed.length ? { removed: res.removed, note: "older copies at the app root, moved to .himi/legacy-agent-files/ (a backup, in case one became app code) \u2014 the current ones live in .agents/skills/himalaya/" } : {},
         // In a git repo the refresh moves the diff identity an earlier `himi test` attested (that
         // hash is shared with the repo gates and deliberately exempts nothing but its own metadata).
-        ...existsSync88(join94(dir, ".himi", "attestations", "latest.json")) ? { next: "if `himi push` then refuses the attestation as stale, re-run `himi test` \u2014 in a git checkout this refresh changed the tree it covered" } : {},
+        ...existsSync89(join94(dir, ".himi", "attestations", "latest.json")) ? { next: "if `himi push` then refuses the attestation as stale, re-run `himi test` \u2014 in a git checkout this refresh changed the tree it covered" } : {},
         ...res.skipped.length ? { skipped: res.skipped } : {},
         portalUrl: idx.portalUrl
       });
@@ -187028,8 +187261,6 @@ Seed your coding agent with \`himi agent-init\`. Guides: ${idx.portalUrl}`);
       return 2;
   }
 }
-var AuthoringUnavailable = class extends Error {
-};
 function resolutionFlag(flags) {
   if (flags.binary === true) return "node_modules";
   if (flags.source === true) return "source";
@@ -187150,16 +187381,17 @@ function uxHandoverOverride(uxEvidence, ctx) {
   return { uxEvidence, uxEvidenceNote: uxHandoverNote(uxEvidence, ctx) };
 }
 async function loadAuthoring() {
+  const { AuthoringUnavailable: AuthoringUnavailable2, namedAuthoringImport: namedAuthoringImport2 } = await Promise.resolve().then(() => (init_authoring_unavailable(), authoring_unavailable_exports));
   try {
     const [b2, rb, crawl, vd, cov, wml, nf2, rd] = await Promise.all([
-      Promise.resolve().then(() => (init_build(), build_exports)),
-      Promise.resolve().then(() => (init_build3(), build_exports2)),
-      Promise.resolve().then(() => (init_screen_crawl(), screen_crawl_exports)),
-      Promise.resolve().then(() => (init_validate_descriptor(), validate_descriptor_exports)),
-      Promise.resolve().then(() => (init_vm_coverage(), vm_coverage_exports)),
-      Promise.resolve().then(() => (init_wix_member_login(), wix_member_login_exports)),
-      Promise.resolve().then(() => (init_net_freeze(), net_freeze_exports)),
-      Promise.resolve().then(() => (init_render_descriptor(), render_descriptor_exports))
+      namedAuthoringImport2("./build.js", Promise.resolve().then(() => (init_build(), build_exports))),
+      namedAuthoringImport2("../../release-build/build.js", Promise.resolve().then(() => (init_build3(), build_exports2))),
+      namedAuthoringImport2("../../../core/dev-server/src/screen-crawl.js", Promise.resolve().then(() => (init_screen_crawl(), screen_crawl_exports))),
+      namedAuthoringImport2("../../../core/dev-server/src/validate-descriptor.js", Promise.resolve().then(() => (init_validate_descriptor(), validate_descriptor_exports))),
+      namedAuthoringImport2("../../../core/dev-server/src/vm-coverage.js", Promise.resolve().then(() => (init_vm_coverage(), vm_coverage_exports))),
+      namedAuthoringImport2("../../../core/dev-server/src/wix-member-login.js", Promise.resolve().then(() => (init_wix_member_login(), wix_member_login_exports))),
+      namedAuthoringImport2("../../../core/dev-server/src/net-freeze.js", Promise.resolve().then(() => (init_net_freeze(), net_freeze_exports))),
+      namedAuthoringImport2("../../../core/dev-server/src/render-descriptor.js", Promise.resolve().then(() => (init_render_descriptor(), render_descriptor_exports)))
     ]);
     return {
       buildContentBundles: b2.buildContentBundles,
@@ -187189,8 +187421,9 @@ async function loadAuthoring() {
       readBuiltBundle: vd.readBuiltBundle,
       crawlBlockingPasses: vd.CRAWL_BLOCKING_PASSES
     };
-  } catch {
-    throw new AuthoringUnavailable();
+  } catch (cause) {
+    if (cause instanceof AuthoringUnavailable2) throw cause;
+    throw new AuthoringUnavailable2({ cause });
   }
 }
 async function producedWidgetFamilies(dir) {
@@ -187250,7 +187483,7 @@ async function producedWidgetFamilies(dir) {
   }
   return { families, source: "dist/bundles" };
 }
-var boardOpen = (dir) => existsSync88(join94(dir, ".himi", "studio", "index.html"));
+var boardOpen = (dir) => existsSync89(join94(dir, ".himi", "studio", "index.html"));
 var BOARD_REFRESHERS = /* @__PURE__ */ new Set(["render", "test", "validate", "build", "push", "icon", "site", "ux", "progress"]);
 async function leaveForBoard(dir, record2, value) {
   if (!boardOpen(dir)) return;
@@ -187628,7 +187861,7 @@ himi v${cliVersion()} \u2014 run \`himi --version\`. If authoring commands fail
             const owed = openApprovals2(readApprovals2(dir).events).length;
             next.push(`carried the planning journal into the app (${carried.join(", ")}${owed ? `; ${owed} approval${owed === 1 ? "" : "s"} still owed` : ""}) \u2014 \`himi progress --brief\` there shows it`);
           }
-          const planInParent = ["SPEC.md", "MOBILE-UX.md"].filter((f2) => existsSync88(join94(parentDir, f2)));
+          const planInParent = ["SPEC.md", "MOBILE-UX.md"].filter((f2) => existsSync89(join94(parentDir, f2)));
           if (planInParent.length) {
             next.push(`${planInParent.join(" and ")} in ${parentDir} ${planInParent.length > 1 ? "are" : "is"} not the app's \u2014 if that is the approved plan, move it over the template's boilerplate in ${dir}`);
           }
@@ -187639,12 +187872,12 @@ himi v${cliVersion()} \u2014 run \`himi --version\`. If authoring commands fail
           const board = await openBoardForSession2(dir);
           const home = homeScreenIdOf2(dir);
           recordInitSource2(dir, { template: template ?? null, source });
-          const firstLook = flags["no-first-look"] === true ? { skipped: "--no-first-look" } : await firstLookAtInit2(dir, { source, home, entry: fileURLToPath29(import.meta.url), loader: loaderArgs(process.execArgv) });
+          const firstLook = flags["no-first-look"] === true ? { skipped: "--no-first-look" } : await firstLookAtInit2(dir, { source, home, entry: fileURLToPath30(import.meta.url), loader: loaderArgs(process.execArgv) });
           const pictured = "image" in firstLook;
           const watch2 = await startWatchAtInit2(dir, {
             source,
             app: await appId(dir),
-            entry: fileURLToPath29(import.meta.url),
+            entry: fileURLToPath30(import.meta.url),
             loader: loaderArgs(process.execArgv),
             noWatch: flags["no-watch"] === true
           });
@@ -187918,7 +188151,7 @@ ${doNow.map((l2) => `  ${l2}`).join("\n")}`);
           const result = { ...outcome.result, ...fromSpec };
           const adoptDir = contentDir(flags);
           const kept = flags["dry-run"] !== true && (outcome.code === 0 || outcome.result.forcedKeep === true);
-          if (kept && existsSync88(join94(adoptDir, adoptBits.ADOPT_FILE))) {
+          if (kept && existsSync89(join94(adoptDir, adoptBits.ADOPT_FILE))) {
             try {
               const inv = adoptBits.inspectApp(adoptDir);
               adoptBits.writeInventory(adoptDir, inv, { companions: "if-missing" });
@@ -188331,7 +188564,7 @@ ${doNow.map((l2) => `  ${l2}`).join("\n")}`);
         const homePicture = await homePictureAtValidate2(dir, {
           ok: !hasErrors,
           home: outcome.homeScreenId,
-          entry: fileURLToPath29(import.meta.url),
+          entry: fileURLToPath30(import.meta.url),
           loader: loaderArgs(process.execArgv)
         });
         const { postcard: picturePostcard, ...picture } = homePicture;
@@ -188476,7 +188709,7 @@ ${doNow.map((l2) => `  ${l2}`).join("\n")}`);
             const dir2 = resolve65(out2);
             const files2 = himiStudioPluginFiles2();
             for (const f2 of files2) {
-              mkdirSync44(dirname51(join94(dir2, f2.path)), { recursive: true });
+              mkdirSync45(dirname51(join94(dir2, f2.path)), { recursive: true });
               writeFileSync44(join94(dir2, f2.path), f2.text);
             }
             print({ ok: true, dir: dir2, files: files2.map((f2) => f2.path), next: [`claude plugin validate ${dir2}`, `claude --plugin-dir ${dir2}`] });
@@ -188492,7 +188725,7 @@ ${doNow.map((l2) => `  ${l2}`).join("\n")}`);
           const dir = resolve65(out2);
           const files = himiPluginFiles2(skills.skillMd);
           for (const f2 of files) {
-            mkdirSync44(dirname51(join94(dir, f2.path)), { recursive: true });
+            mkdirSync45(dirname51(join94(dir, f2.path)), { recursive: true });
             writeFileSync44(join94(dir, f2.path), f2.text);
           }
           print({ ok: true, dir, files: files.map((f2) => f2.path), next: [`claude plugin validate ${dir}`, `claude --plugin-dir ${dir}`] });
@@ -188510,7 +188743,7 @@ ${doNow.map((l2) => `  ${l2}`).join("\n")}`);
       case "studio": {
         const { openStudio: openStudio2 } = await Promise.resolve().then(() => (init_studio(), studio_exports));
         const dir = contentDir(flags);
-        if (!existsSync88(join94(dir, "himalaya.content.json"))) {
+        if (!existsSync89(join94(dir, "himalaya.content.json"))) {
           io2.error(JSON.stringify({ ok: false, error: "not_a_content_package", dir, hint: "run from the app directory (or pass --content <dir>) \u2014 the board reads that package's .himi/" }));
           return 2;
         }
@@ -188518,7 +188751,7 @@ ${doNow.map((l2) => `  ${l2}`).join("\n")}`);
           const { buildReel: buildReel2 } = await Promise.resolve().then(() => (init_studio_reel(), studio_reel_exports));
           const out2 = resolve65(str10(flags.out) ?? join94(dir, ".himi", "making-of.html"));
           const { html, plan } = buildReel2(dir);
-          mkdirSync44(dirname51(out2), { recursive: true });
+          mkdirSync45(dirname51(out2), { recursive: true });
           writeFileSync44(out2, html);
           const { pathToFileURL: pathToFileURL9 } = await import("node:url");
           const url2 = pathToFileURL9(out2).href;
@@ -188588,7 +188821,7 @@ ${handover.hint[0].toUpperCase()}${handover.hint.slice(1)}.`);
         } = await Promise.resolve().then(() => (init_progress(), progress_exports));
         const dir = contentDir(flags);
         const journal2 = journalPath2(dir);
-        const isContentPackage = existsSync88(join94(dir, "himalaya.content.json"));
+        const isContentPackage = existsSync89(join94(dir, "himalaya.content.json"));
         const hint = isContentPackage ? {} : { hint: "no himalaya.content.json here \u2014 run from the app directory (or pass --content <dir>) so the build board finds this journal" };
         const message = pos.slice(1).join(" ").trim();
         const approvalFlags = ["approve", "done", "drop"].filter((f2) => flags[f2] !== void 0);
@@ -188740,7 +188973,7 @@ ${handover.hint[0].toUpperCase()}${handover.hint.slice(1)}.`);
       case "test": {
         const dir = contentDir(flags);
         const structuredOutput = flags.json === true || io2.isTTY !== true;
-        if (existsSync88(join94(dir, "functions"))) {
+        if (existsSync89(join94(dir, "functions"))) {
           const { invokeLocalFunction: invokeLocalFunction2, loadFunctionsApp: loadFunctionsApp2 } = await Promise.resolve().then(() => (init_functions(), functions_exports));
           const loaded = await loadFunctionsApp2(dir);
           const results = [];
@@ -188877,8 +189110,8 @@ ${handover.hint[0].toUpperCase()}${handover.hint.slice(1)}.`);
             io2.error(JSON.stringify({ error: `no worker source found at tier5-src/${screen.bundleName} \u2014 the browser loop compiles SOURCE, not the built bundle` }));
             return 2;
           }
-          const { fileURLToPath: fileURLToPath30 } = await import("node:url");
-          const sdk = collectSdkModules2(sources.files, sdkSubpathReader2((s2) => fileURLToPath30(import.meta.resolve(s2))));
+          const { fileURLToPath: fileURLToPath31 } = await import("node:url");
+          const sdk = collectSdkModules2(sources.files, sdkSubpathReader2((s2) => fileURLToPath31(import.meta.resolve(s2))));
           if (sdk.unsupported.length) {
             io2.error(JSON.stringify({
               error: `this worker imports ${sdk.unsupported.map((u2) => `@himalaya/${u2.sub}`).join(", ")}, which the browser loop cannot build: ${sdk.unsupported.map((u2) => `${u2.sub} needs ${u2.builtin}`).join("; ")}. The page compiles in a tab with no node builtins. Run \`himi test\` without --browser for this screen.`,
@@ -189020,21 +189253,20 @@ ${handover.hint[0].toUpperCase()}${handover.hint.slice(1)}.`);
           io2.error(JSON.stringify({ error: e2.message }));
           return 2;
         }
+        const release2 = await loadReleaseFromDir(app, out2);
         if (nativeAvailabilities.length > 0) {
-          const { runAndroidNativeDecode: runAndroidNativeDecode2, runNativeDecode: runNativeDecode2, mergeNativeDecode: mergeNativeDecode2 } = await Promise.resolve().then(() => (init_native_decode(), native_decode_exports));
+          const { runAndroidNativeDecode: runAndroidNativeDecode2, runNativeDecode: runNativeDecode2, mergeNativeDecode: mergeNativeDecode2, markNativeSkipped: markNativeSkipped2 } = await Promise.resolve().then(() => (init_native_decode(), native_decode_exports));
           const descriptors = scopeDescriptors2(outcome.descriptors ?? [], pos.slice(1), invalidScreens);
+          const tokensJson = release2.tokens;
           for (const availability of nativeAvailabilities) {
             if (!availability.available) {
-              result.nativeDecode = {
-                ...result.nativeDecode,
-                [availability.platform]: { unavailable: true, reason: availability.reason },
-                wallMs: result.nativeDecode?.wallMs ?? 0
-              };
+              result = markNativeSkipped2(result, availability);
+              io2.error(`[native ${availability.platform}] SKIPPED \u2014 not checked: ${availability.reason}`);
               continue;
             }
             try {
               const progress = (message) => io2.error(`[native ${availability.platform} ${(/* @__PURE__ */ new Date()).toISOString()}] ${message}`);
-              const nativeRun = availability.platform === "ios" ? runNativeDecode2({ descriptors, packageDir: availability.packageDir, progress }) : runAndroidNativeDecode2({ descriptors, harnessDir: availability.harnessDir, gradlew: availability.gradlew, progress });
+              const nativeRun = availability.platform === "ios" ? runNativeDecode2({ descriptors, tokensJson, packageDir: availability.packageDir, progress }) : runAndroidNativeDecode2({ descriptors, tokensJson, harnessDir: availability.harnessDir, gradlew: availability.gradlew, sdkDir: availability.sdkDir, progress });
               result = mergeNativeDecode2(result, nativeRun);
             } catch (error) {
               io2.error(JSON.stringify({ error: error.message }));
@@ -189078,7 +189310,6 @@ ${handover.hint[0].toUpperCase()}${handover.hint.slice(1)}.`);
         const trend = trendAndStore2(dir, ledger, suppressedNativeKeys2(nativeOracle));
         const delta = diffAndStoreObservations2(dir, result.observations ?? {});
         const legacy = { ...result, ledger, ...trend ? { trend } : {}, ...delta ? { delta } : {}, ...recorded ? { recorded } : {} };
-        const release2 = await loadReleaseFromDir(app, out2);
         const gitDiffHash = currentGitDiffHash(dir);
         const crawledScreens = new Set((result.crawled ?? []).map((screen) => screen.screen));
         const attestedDescriptors = Object.fromEntries(
@@ -189675,7 +189906,7 @@ default (no --glyph): ${DEFAULT_GLYPH2} \u2014 a mark that claims nothing, so th
           io2.error(JSON.stringify(linked));
           return 1;
         }
-        if (existsSync88(dest)) {
+        if (existsSync89(dest)) {
           if (!statSync23(dest).isDirectory()) {
             io2.error(JSON.stringify({
               error: `${dest} exists and is not a directory`,
@@ -189688,7 +189919,7 @@ default (no --glyph): ${DEFAULT_GLYPH2} \u2014 a mark that claims nothing, so th
             io2.error(JSON.stringify({ error: `${dest} already exists and is not empty`, hint: "pass --force to write into it anyway (merging, and naming what it keeps), --replace to restore exactly what was archived, or --out/--name to land somewhere else" }));
             return 1;
           }
-          if (replace && occupied && !existsSync88(join94(dest, "himalaya.content.json"))) {
+          if (replace && occupied && !existsSync89(join94(dest, "himalaya.content.json"))) {
             io2.error(JSON.stringify({
               error: `${dest} is not a content package \u2014 refusing to --replace it`,
               hint: "--replace only clears a directory that holds himalaya.content.json. Check --out/--name, or pass --force to merge into it instead."
@@ -190642,7 +190873,7 @@ default (no --glyph): ${DEFAULT_GLYPH2} \u2014 a mark that claims nothing, so th
       // ---- himi run — serve a package on localhost and open it in a browser ----
       // Blocks until interrupted, like any dev server.
       case "run": {
-        const { runPackage: runPackage2, lanFlagConflict: lanFlagConflict2 } = await Promise.resolve().then(() => (init_run(), run_exports));
+        const { runPackage: runPackage2, lanFlagConflict: lanFlagConflict2, RUN_CONTENT_BUILD: RUN_CONTENT_BUILD2 } = await Promise.resolve().then(() => (init_run(), run_exports));
         const spaFlag = flags.spa;
         const lanConflict = lanFlagConflict2({ lan: flags.lan === true, browser: flags.browser === true, spa: typeof spaFlag === "string" || Array.isArray(spaFlag) ? String(spaFlag) : void 0 });
         if (lanConflict) {
@@ -190713,7 +190944,7 @@ default (no --glyph): ${DEFAULT_GLYPH2} \u2014 a mark that claims nothing, so th
             const bres = await buildContentBundles2(dir2, { resolution: resolutionFlag(flags) });
             temp = mkdtempSync6(join94(tmpdir7(), "himi-run-build-"));
             const hasWorkers = bres.built.length > 0 || bres.compileErrors.length > 0;
-            const initial = await buildReleaseFromContent2(dir2, temp, { ...hasWorkers ? { tier5Dir: bundleOutDir2(dir2) } : {} });
+            const initial = await buildReleaseFromContent2(dir2, temp, { ...hasWorkers ? { tier5Dir: bundleOutDir2(dir2) } : {}, ...RUN_CONTENT_BUILD2 });
             servedMissing = initial.missingBundles;
             source = join94(temp, app);
           }
@@ -190841,7 +191072,7 @@ default (no --glyph): ${DEFAULT_GLYPH2} \u2014 a mark that claims nothing, so th
                     return;
                   }
                   const hasWorkers = bres.built.length > 0;
-                  const outcome = await buildReleaseFromContent2(dir, next, { ...hasWorkers ? { tier5Dir: bundleOutDir2(dir) } : {}, freshModule: true });
+                  const outcome = await buildReleaseFromContent2(dir, next, { ...hasWorkers ? { tier5Dir: bundleOutDir2(dir) } : {}, freshModule: true, ...RUN_CONTENT_BUILD2 });
                   const blocker = watchKit.rebuildBlocker(outcome, servedMissing);
                   if (blocker) {
                     await failed3(blocker);
@@ -191484,7 +191715,7 @@ default (no --glyph): ${DEFAULT_GLYPH2} \u2014 a mark that claims nothing, so th
           io2.error(JSON.stringify({ error: `patch ${kind} needs --file`, usage: PATCH_USAGE }));
           return 2;
         }
-        if (!existsSync88(file2)) {
+        if (!existsSync89(file2)) {
           io2.error(JSON.stringify({ error: `no such file: ${file2}` }));
           return 2;
         }
@@ -192038,7 +192269,7 @@ default (no --glyph): ${DEFAULT_GLYPH2} \u2014 a mark that claims nothing, so th
         const rememberLastDist = async (jobs2) => {
           try {
             const dir = contentDir(flags);
-            if (!existsSync88(join94(dir, "himalaya.content.json"))) return;
+            if (!existsSync89(join94(dir, "himalaya.content.json"))) return;
             const { lastDistFromJob: lastDistFromJob2, writeLastDist: writeLastDist2 } = await Promise.resolve().then(() => (init_capabilities(), capabilities_exports));
             const own5 = await appId(dir);
             for (const job of jobs2) {
@@ -192278,7 +192509,7 @@ ${label3}`);
         const platform = str10(flags.platform)?.split(",").map((p2) => p2.trim()).filter(Boolean);
         {
           const distDir = contentDir(flags);
-          if (existsSync88(join94(distDir, "himalaya.content.json"))) {
+          if (existsSync89(join94(distDir, "himalaya.content.json"))) {
             const issues = await iconIssues(distDir, flags.strict === true, { requireDeclared: true, requireVerified: true });
             const errors = issues.filter((i2) => i2.severity === "error");
             for (const i2 of issues.filter((i3) => i3.severity === "warning")) {
@@ -193329,7 +193560,7 @@ ${report3.ok ? "OK \u2014 data + serve plane reachable." : typeof report3.hint =
             return 1;
           };
           const gen = await Promise.resolve().then(() => (init_generate(), generate_exports));
-          const missing = gen.ENGINE_FILES.filter((f2) => !existsSync88(join94(dir, f2)));
+          const missing = gen.ENGINE_FILES.filter((f2) => !existsSync89(join94(dir, f2)));
           if (missing.length) {
             return fail6("content_dir_not_base44_starter", `${dir} is not a base44-starter content package: the generated screens import a shared engine it does not have (${missing.join(", ")})`, { missing, hint: "scaffold one with `himi init <name> --template base44-starter --base44-app-id <id>`" });
           }
@@ -193415,7 +193646,7 @@ ${report3.ok ? "OK \u2014 data + serve plane reachable." : typeof report3.hint =
           if (!provisioning || str10(flags.content) !== void 0 || !slug) return contentDir(flags);
           if (!/^[a-z0-9][a-z0-9-]*$/.test(slug)) return void 0;
           const dir = resolve65("apps", slug);
-          return existsSync88(join94(dir, "config.ts")) || existsSync88(join94(dir, "config.mjs")) ? dir : void 0;
+          return existsSync89(join94(dir, "config.ts")) || existsSync89(join94(dir, "config.mjs")) ? dir : void 0;
         };
         if (sub === "entities" || sub === "functions") {
           if (sub === "entities" && !["query", "create", "seed"].includes(pos[2] ?? "")) {
@@ -193804,13 +194035,13 @@ Code: ${userCode}`);
         return 2;
     }
   } catch (err) {
-    if (err instanceof AuthoringUnavailable) {
-      io2.error(JSON.stringify(pushFailure2("authoring_unavailable", {
-        error: `the himi authoring runtime failed to load (himi v${cliVersion()}). Off-repo this almost always means an out-of-date CLI, NOT a platform limitation \u2014 upgrade: \`npm i -g @wix/himalaya-cli@latest\`. If you meant to run in-repo, run from a monorepo checkout.`,
+    if (err instanceof Error && err.name === "AuthoringUnavailable") {
+      const { authoringUnavailableFields: authoringUnavailableFields2, isSourceCheckout: isSourceCheckout2 } = await Promise.resolve().then(() => (init_authoring_unavailable(), authoring_unavailable_exports));
+      io2.error(JSON.stringify(pushFailure2("authoring_unavailable", authoringUnavailableFields2(err, {
         version: cliVersion(),
-        upgrade: "npm i -g @wix/himalaya-cli@latest",
-        portal: DEVELOPER_PORTAL_URL
-      })));
+        portal: DEVELOPER_PORTAL_URL,
+        sourceCheckout: isSourceCheckout2()
+      }))));
       return 1;
     }
     io2.error(JSON.stringify(pushFailure2("push_failed", { error: err.message })));