@wix/himalaya-cli 0.1545.0 → 0.1547.0

package/dist/cli.mjs

@@ -694,8 +694,8 @@ function mobileUxDocumentBody(mobile) {
   }
   return out2 + mobile.slice(last);
 }
-function mobileUxSection(text11, heading) {
-  const match = new RegExp(`(?:^|\\n)##[ \\t]+${heading}\\b[^\\n]*([\\s\\S]*?)(?=\\n##[ \\t]|$)`, "i").exec(text11);
+function mobileUxSection(text12, heading) {
+  const match = new RegExp(`(?:^|\\n)##[ \\t]+${heading}\\b[^\\n]*([\\s\\S]*?)(?=\\n##[ \\t]|$)`, "i").exec(text12);
   return match ? match[1] : null;
 }
 function sectionTables(markdown) {
@@ -724,8 +724,8 @@ function namesOneCta(cell2) {
   if (!cell2) return false;
   return !/[,;]|\s\/\s/.test(cell2);
 }
-function declaredStates(text11) {
-  const contract = section(text11, "Screen contract");
+function declaredStates(text12) {
+  const contract = section(text12, "Screen contract");
   if (!contract) return [];
   const states = [];
   for (const bullet of contract.matchAll(/^[ \t]*[-*][ \t]*[^:\n]*\bstates?[ \t]*:[ \t]*(\S.*)$/gim)) {
@@ -735,8 +735,8 @@ function declaredStates(text11) {
   }
   return [...new Set(states.map((state) => state.toLowerCase()))];
 }
-function primaryCtaStructureGap(text11) {
-  const acceptance = section(text11, "Implementation acceptance");
+function primaryCtaStructureGap(text12) {
+  const acceptance = section(text12, "Implementation acceptance");
   if (acceptance === null) return "There is no `## Implementation acceptance` section to read it from.";
   const tables = sectionTables(acceptance).filter((table) => table.data.length > 0);
   if (!tables.length) return "Its acceptance table has no rows.";
@@ -749,7 +749,7 @@ function primaryCtaStructureGap(text11) {
   const data = ctaTables.flatMap(({ table }) => table.data);
   const flat = (value2) => value2.toLowerCase().replace(/[^a-z0-9]+/g, " ").trim();
   const rowText = data.map((row2) => flat(row2.join(" ")));
-  const missing3 = declaredStates(text11).filter((state) => !rowText.some((row2) => row2.includes(flat(state))));
+  const missing3 = declaredStates(text12).filter((state) => !rowText.some((row2) => row2.includes(flat(state))));
   if (missing3.length) return `The acceptance table has no row for the declared state(s): ${missing3.join(", ")}.`;
   return null;
 }
@@ -764,16 +764,16 @@ function hasUnterminatedComment(mobile) {
   }
 }
 function mobileUxMarkerFindings(mobile, renderedWidths = []) {
-  const text11 = mobileUxDocumentBody(mobile);
+  const text12 = mobileUxDocumentBody(mobile);
   const findings = [];
-  if (!/^## Implementation acceptance\b/im.test(text11)) {
+  if (!/^## Implementation acceptance\b/im.test(text12)) {
     findings.push({ code: "missing-acceptance-matrix", message: "MOBILE-UX.md must contain the heading `## Implementation acceptance` at the start of a line. Case is not checked, but use this spelling: other tooling addresses the document by it." });
   }
-  if (!/^## Evidence\b/im.test(text11)) {
+  if (!/^## Evidence\b/im.test(text12)) {
     findings.push({ code: "missing-evidence-section", message: "MOBILE-UX.md must contain the heading `## Evidence` at the start of a line. Case is not checked, but use this spelling: other tooling addresses the document by it." });
   }
-  if (!/one primary CTA per state/i.test(text11)) {
-    const gap = primaryCtaStructureGap(text11);
+  if (!/one primary CTA per state/i.test(text12)) {
+    const gap = primaryCtaStructureGap(text12);
     if (gap) {
       findings.push({
         code: "missing-primary-cta-rule",
@@ -781,8 +781,8 @@ function mobileUxMarkerFindings(mobile, renderedWidths = []) {
       });
     }
   }
-  if (!hasWidthEvidence(text11, renderedWidths)) {
-    findings.push({ code: "missing-width-evidence", message: widthEvidenceMessage(text11, renderedWidths) });
+  if (!hasWidthEvidence(text12, renderedWidths)) {
+    findings.push({ code: "missing-width-evidence", message: widthEvidenceMessage(text12, renderedWidths) });
   }
   if (findings.length && hasUnterminatedComment(mobile)) {
     return [{
@@ -792,15 +792,15 @@ function mobileUxMarkerFindings(mobile, renderedWidths = []) {
   }
   return findings;
 }
-function widthMentions(text11) {
+function widthMentions(text12) {
   const mentions = [];
-  for (const match of text11.matchAll(/\d+/g)) {
+  for (const match of text12.matchAll(/\d+/g)) {
     const value2 = Number(match[0]);
     const start = match.index ?? 0;
     if (!inRange(value2)) continue;
     const end = start + match[0].length;
-    const after = text11.slice(end, end + EDGE_WINDOW);
-    const before = text11.slice(Math.max(0, start - EDGE_WINDOW), start);
+    const after = text12.slice(end, end + EDGE_WINDOW);
+    const before = text12.slice(Math.max(0, start - EDGE_WINDOW), start);
     if (looksLikeYear(value2) && !(UNIT_ATTACHED.test(after) || UNIT_WORD_ATTACHED.test(after))) continue;
     const spelledAsWidth = UNIT_ATTACHED.test(after) || UNIT_WORD_ATTACHED.test(after) || FILENAME_AFTER.test(after);
     const vetoed = spelledAsWidth && (ANTI_CUE_BEFORE.test(before) || PAIR_HEIGHT_BEFORE.test(before) || ANTI_CUE_AFTER.test(after));
@@ -2741,15 +2741,15 @@ var init_dist_jobs = __esm({
             scope: scope2
           })
         });
-        const text11 = await res.text();
+        const text12 = await res.text();
         if (!res.ok) {
-          throw new JobServiceError(`oauth failed for scope ${scope2}`, res.status, truncate(text11));
+          throw new JobServiceError(`oauth failed for scope ${scope2}`, res.status, truncate(text12));
         }
         let token;
         try {
-          token = JSON.parse(text11).access_token;
+          token = JSON.parse(text12).access_token;
         } catch {
-          throw new JobServiceError(`oauth returned non-JSON for scope ${scope2}`, res.status, truncate(text11));
+          throw new JobServiceError(`oauth returned non-JSON for scope ${scope2}`, res.status, truncate(text12));
         }
         if (!token) throw new JobServiceError(`oauth returned no access_token for scope ${scope2}`, res.status);
         this.tokens.set(scope2, { token, expiresAt: this.now() + TOKEN_TTL_MS });
@@ -2763,15 +2763,15 @@ var init_dist_jobs = __esm({
           headers: { Authorization: token, ...body ? { "content-type": "application/json" } : {} },
           ...body ? { body: JSON.stringify(body) } : {}
         });
-        const text11 = await res.text();
+        const text12 = await res.text();
         if (!res.ok) {
-          throw new JobServiceError(`job service ${method} ${path2} failed`, res.status, truncate(text11));
+          throw new JobServiceError(`job service ${method} ${path2} failed`, res.status, truncate(text12));
         }
-        if (!text11) return {};
+        if (!text12) return {};
         try {
-          return JSON.parse(text11);
+          return JSON.parse(text12);
         } catch {
-          throw new JobServiceError(`job service ${method} ${path2} returned non-JSON`, res.status, truncate(text11));
+          throw new JobServiceError(`job service ${method} ${path2} returned non-JSON`, res.status, truncate(text12));
         }
       }
       /**
@@ -3564,15 +3564,15 @@ function summarizeLint(app, bres, outcome, strict, extraIssues = []) {
     }
   };
   const record3 = (value2) => value2 && typeof value2 === "object" && !Array.isArray(value2) ? value2 : {};
-  const text11 = (value2) => typeof value2 === "string" && value2 ? value2 : void 0;
+  const text12 = (value2) => typeof value2 === "string" && value2 ? value2 : void 0;
   const message2 = (value2) => {
     const item = record3(value2);
-    if (text11(item.message)) return text11(item.message);
-    if (text11(item.error)) return text11(item.error);
+    if (text12(item.message)) return text12(item.message);
+    if (text12(item.error)) return text12(item.error);
     if (Array.isArray(item.errors)) {
       const diagnostics = item.errors.map((entry) => {
         const diagnostic = record3(entry);
-        return text11(diagnostic.text) ?? text11(diagnostic.message);
+        return text12(diagnostic.text) ?? text12(diagnostic.message);
       }).filter((entry) => !!entry);
       if (diagnostics.length) return diagnostics.join("; ");
     }
@@ -3585,29 +3585,29 @@ function summarizeLint(app, bres, outcome, strict, extraIssues = []) {
       ...issues,
       ...bres.compileErrors.map((value2) => ({
         pass: "compile",
-        path: text11(record3(value2).bundle),
+        path: text12(record3(value2).bundle),
         ruleCode: "compile-error",
         severity: "error",
         message: message2(value2)
       })),
       ...outcome.failedToBuild.map((value2) => ({
         pass: "build",
-        screen: text11(record3(value2).screenId),
+        screen: text12(record3(value2).screenId),
         ruleCode: "failed-to-build",
         severity: "error",
         message: message2(value2)
       })),
       ...outcome.missingBundles.map((value2) => ({
         pass: "build",
-        screen: text11(record3(value2).screen),
-        path: text11(record3(value2).bundle),
+        screen: text12(record3(value2).screen),
+        path: text12(record3(value2).bundle),
         ruleCode: "missing-bundle",
         severity: "error",
         message: message2(value2)
       })),
       ...workerThrows.map((value2) => ({
         pass: "worker",
-        path: text11(record3(value2).bundle),
+        path: text12(record3(value2).bundle),
         ruleCode: "worker-threw",
         severity: "error",
         message: message2(value2.threw)
@@ -4148,8 +4148,8 @@ var init_catalog_cache = __esm({
         let prior;
         if (existsSync4(channelPath)) {
           try {
-            const text11 = readFileSync5(channelPath, "utf8");
-            if (Buffer.byteLength(text11) <= MAX_METADATA) prior = JSON.parse(text11);
+            const text12 = readFileSync5(channelPath, "utf8");
+            if (Buffer.byteLength(text12) <= MAX_METADATA) prior = JSON.parse(text12);
           } catch {
           }
         }
@@ -5253,8 +5253,8 @@ function parseStyles(source, file2, diagnostics, origin = { line: 1, column: 1 }
           declarations[decl.prop] = decl.value;
           locations[decl.prop] = declLoc;
         }
-        for (const text11 of node.selector.split(",")) {
-          const s2 = text11.trim();
+        for (const text12 of node.selector.split(",")) {
+          const s2 = text12.trim();
           if (!s2 || !selector.test(s2)) {
             diagnostics.push({ ...loc, code: "HHP-CSS-SELECTOR", severity: "error", message: `Unsupported selector ${s2}.`, hint: "Use static tag, id, class, or compound selectors." });
             continue;
@@ -6033,31 +6033,31 @@ function compileV2(html, profile, options) {
       return component;
     }
     const textNodes = element.contents().toArray().filter((n2) => n2.type === "text");
-    const text11 = textNodes.map((n2) => n2.data).join(" ").replace(/\s+/g, " ").trim();
+    const text12 = textNodes.map((n2) => n2.data).join(" ").replace(/\s+/g, " ").trim();
     if (["Text", "RichText"].includes(type)) {
-      const matches = [...text11.matchAll(/{{\s*([\w.$]+)\s*}}/g)];
-      if (/{{|}}/.test(text11.replace(/{{\s*[\w.$]+\s*}}/g, ""))) error(el2, "HHP-TEXT-EXPRESSION", "Text interpolation accepts state/item paths; compute expressions in the controller.");
+      const matches = [...text12.matchAll(/{{\s*([\w.$]+)\s*}}/g)];
+      if (/{{|}}/.test(text12.replace(/{{\s*[\w.$]+\s*}}/g, ""))) error(el2, "HHP-TEXT-EXPRESSION", "Text interpolation accepts state/item paths; compute expressions in the controller.");
       if (matches.length) {
-        if (matches.length === 1 && matches[0][0] === text11 && type === "Text") {
+        if (matches.length === 1 && matches[0][0] === text12 && type === "Text") {
           props.text = path2(el2, matches[0][1], row2);
         } else if (controller && type === "Text") {
           for (const match of matches) path2(el2, match[1], row2);
           const key3 = `t${textProjections.length}`;
-          const normalized = text11.replace(/{{\s*([\w.$]+)\s*}}/g, (_match, raw) => `{{${raw.startsWith("$item.") ? raw : statePath(raw)}}}`);
+          const normalized = text12.replace(/{{\s*([\w.$]+)\s*}}/g, (_match, raw) => `{{${raw.startsWith("$item.") ? raw : statePath(raw)}}}`);
           textProjections.push({ key: key3, text: normalized, ...row2 ? { collection: row2 } : {} });
           props.text = row2 ? `$item.__hhpText_${key3}` : `$service:${serviceName}.__hhpText.${key3}`;
         } else {
           if (profile.surfaces.some((surface) => surface === "ios" || surface === "android" || surface === "macos"))
             error(el2, "HHP-TEXT-TEMPLATE-SURFACE", "Text templates are not implemented by the enabled native renderers.", "Compute the complete string in controller state and bind it on a Text component with {{path}} or bind:content.");
           const params = {};
-          let template = text11;
+          let template = text12;
           matches.forEach((m2, i2) => {
             params[`v${i2}`] = path2(el2, m2[1], row2);
             template = template.replace(m2[0], `{v${i2}}`);
           });
           props.template = { template, params };
         }
-      } else if (text11) props.text = text11;
+      } else if (text12) props.text = text12;
       if (/^h[1-6]$/.test(tag) && props.style === void 0) {
         const candidates = tag === "h1" ? ["largeTitle", "title1", "body"] : tag === "h2" ? ["title1", "headline", "body"] : ["headline", "body"];
         const available = profile.tokens.typography ?? [];
@@ -6065,8 +6065,8 @@ function compileV2(html, profile, options) {
         if (heading) props.style = heading;
         else error(el2, "HHP-TOKEN", "Headings require a body, title1, headline, or largeTitle typography token.");
       }
-    } else if (type === "Button" && (text11 || attrs.title)) props.title = text11 || attrs.title;
-    else if (text11) error(el2, "HHP-TEXT", "Wrap container text in a paragraph or span.");
+    } else if (type === "Button" && (text12 || attrs.title)) props.title = text12 || attrs.title;
+    else if (text12) error(el2, "HHP-TEXT", "Wrap container text in a paragraph or span.");
     if (type === "Image" && attrs.src) {
       if (/^https:\/\//.test(attrs.src)) props.url = attrs.src;
       else {
@@ -8090,17 +8090,17 @@ ${BLOCK_END}`;
 ${block}
 `;
 }
-function markersIntact(text11) {
-  const begins = text11.split(BLOCK_BEGIN).length - 1;
-  const ends = text11.split(BLOCK_END).length - 1;
+function markersIntact(text12) {
+  const begins = text12.split(BLOCK_BEGIN).length - 1;
+  const ends = text12.split(BLOCK_END).length - 1;
   if (begins === 0 && ends === 0) return true;
-  return begins === 1 && ends === 1 && text11.indexOf(BLOCK_BEGIN) < text11.indexOf(BLOCK_END) && BLOCK_RE.test(text11);
+  return begins === 1 && ends === 1 && text12.indexOf(BLOCK_BEGIN) < text12.indexOf(BLOCK_END) && BLOCK_RE.test(text12);
 }
-function withoutBlock(text11) {
-  const m2 = BLOCK_RE.exec(text11);
-  if (!m2) return text11;
-  const before = text11.slice(0, m2.index).replace(/\n+$/, "");
-  const after = text11.slice(m2.index + m2[0].length).replace(/^\n+/, "");
+function withoutBlock(text12) {
+  const m2 = BLOCK_RE.exec(text12);
+  if (!m2) return text12;
+  const before = text12.slice(0, m2.index).replace(/\n+$/, "");
+  const after = text12.slice(m2.index + m2[0].length).replace(/^\n+/, "");
   if (!before) return after;
   if (!after) return `${before}
 `;
@@ -8108,8 +8108,8 @@ function withoutBlock(text11) {
 
 ${after}`;
 }
-function blockVersion(text11) {
-  return STAMP_RE.exec(text11)?.[1] ?? null;
+function blockVersion(text12) {
+  return STAMP_RE.exec(text12)?.[1] ?? null;
 }
 function agentsMdBody(appName2) {
   const gates = APPROVAL_GATES.map((g2) => `- \`${g2.id}\` \u2014 ${g2.label}`).join("\n");
@@ -8572,13 +8572,13 @@ function assertConfinedTsconfig(entry, contentRoot2, allows) {
       `refused to read ${p2}: ${why}. A tsconfig may extend a file from its own package or an installed dependency \u2014 nothing else.`
     );
   };
-  const stripJsonc = (text11) => {
-    if (text11.charCodeAt(0) === 65279) text11 = text11.slice(1);
+  const stripJsonc = (text12) => {
+    if (text12.charCodeAt(0) === 65279) text12 = text12.slice(1);
     let out2 = "";
     let inStr = false;
     let esc = false;
-    for (let i2 = 0; i2 < text11.length; i2++) {
-      const c2 = text11[i2];
+    for (let i2 = 0; i2 < text12.length; i2++) {
+      const c2 = text12[i2];
       if (inStr) {
         out2 += c2;
         if (esc) esc = false;
@@ -8591,13 +8591,13 @@ function assertConfinedTsconfig(entry, contentRoot2, allows) {
         out2 += c2;
         continue;
       }
-      if (c2 === "/" && text11[i2 + 1] === "/") {
-        while (i2 < text11.length && text11[i2] !== "\n") i2++;
+      if (c2 === "/" && text12[i2 + 1] === "/") {
+        while (i2 < text12.length && text12[i2] !== "\n") i2++;
         continue;
       }
-      if (c2 === "/" && text11[i2 + 1] === "*") {
+      if (c2 === "/" && text12[i2 + 1] === "*") {
         i2 += 2;
-        while (i2 < text11.length && !(text11[i2] === "*" && text11[i2 + 1] === "/")) i2++;
+        while (i2 < text12.length && !(text12[i2] === "*" && text12[i2 + 1] === "/")) i2++;
         i2++;
         continue;
       }
@@ -13207,8 +13207,8 @@ function pushSpan(out2, s2) {
   else out2.push(s2);
 }
 function spanOf(textNode) {
-  const text11 = str(at(textNode, "textData", "text"));
-  if (text11 === "") return null;
+  const text12 = str(at(textNode, "textData", "text"));
+  if (text12 === "") return null;
   let bold = false, italic = false, underline = false;
   let link;
   const decorations = at(textNode, "textData", "decorations");
@@ -13235,7 +13235,7 @@ function spanOf(textNode) {
       }
     }
   }
-  const span = { text: text11 };
+  const span = { text: text12 };
   if (bold) span.bold = true;
   if (italic) span.italic = true;
   if (underline) span.underline = true;
@@ -13457,8 +13457,8 @@ function blockOf(ids, n2, path2) {
         const { title, url } = cardFields(n2, type);
         return [card(ids.claim(n2, path2), type, title, url)];
       }
-      const text11 = plainText(n2);
-      return text11.trim() !== "" ? [{ kind: "paragraph", id: ids.claim(n2, path2), spans: [{ text: text11 }] }] : [];
+      const text12 = plainText(n2);
+      return text12.trim() !== "" ? [{ kind: "paragraph", id: ids.claim(n2, path2), spans: [{ text: text12 }] }] : [];
     }
   }
 }
@@ -14991,26 +14991,26 @@ function serviceOnlyBindingValues(props, key3) {
   });
   return out2;
 }
-function matchBraceSafe(text11, open) {
+function matchBraceSafe(text12, open) {
   let depth = 0;
-  for (let i2 = open; i2 < text11.length; i2++) {
-    const c2 = text11[i2];
+  for (let i2 = open; i2 < text12.length; i2++) {
+    const c2 = text12[i2];
     if (c2 === '"' || c2 === "'" || c2 === "`") {
       const q2 = c2;
       i2++;
-      while (i2 < text11.length && text11[i2] !== q2) {
-        if (text11[i2] === "\\") i2++;
+      while (i2 < text12.length && text12[i2] !== q2) {
+        if (text12[i2] === "\\") i2++;
         i2++;
       }
       continue;
     }
-    if (c2 === "/" && text11[i2 + 1] === "/") {
-      while (i2 < text11.length && text11[i2] !== "\n") i2++;
+    if (c2 === "/" && text12[i2 + 1] === "/") {
+      while (i2 < text12.length && text12[i2] !== "\n") i2++;
       continue;
     }
-    if (c2 === "/" && text11[i2 + 1] === "*") {
+    if (c2 === "/" && text12[i2 + 1] === "*") {
       i2 += 2;
-      while (i2 < text11.length && !(text11[i2] === "*" && text11[i2 + 1] === "/")) i2++;
+      while (i2 < text12.length && !(text12[i2] === "*" && text12[i2 + 1] === "/")) i2++;
       i2++;
       continue;
     }
@@ -18331,11 +18331,11 @@ function strip(line) {
 function scalar(v2) {
   return v2.trim().replace(/^["']|["']$/g, "");
 }
-function parseRolloutYaml(text11) {
+function parseRolloutYaml(text12) {
   const cfg = { app: "", rings: [] };
   let cur = null;
   let inRings = false;
-  for (const raw of text11.split("\n")) {
+  for (const raw of text12.split("\n")) {
     const line = strip(raw);
     if (!line.trim()) continue;
     const top = /^([a-zA-Z_]+):\s*(.*)$/.exec(line);
@@ -18366,10 +18366,10 @@ function assignRing(r3, key3, val) {
   else if (key3 === "percent") r3.percent = Number(v2);
   else if (key3 === "minBinaryVersion") r3.minBinaryVersion = v2;
 }
-function parseRevocationsYaml(text11) {
+function parseRevocationsYaml(text12) {
   const out2 = { app: "", revoked: [] };
   let inList = false;
-  for (const raw of text11.split("\n")) {
+  for (const raw of text12.split("\n")) {
     const line = strip(raw);
     if (!line.trim()) continue;
     const top = /^([a-zA-Z_]+):\s*(.*)$/.exec(line);
@@ -18748,14 +18748,14 @@ function discoverNativeActions(appDir3) {
   }
   const sources = roots2.flatMap(({ directory, extension, buildDirMaxDepth }) => nativeSourceFiles(resolve16(appDir3, directory), extension, buildDirMaxDepth));
   const registered = sources.flatMap((source) => {
-    let text11;
+    let text12;
     try {
-      text11 = readFileSync16(source, "utf8");
+      text12 = readFileSync16(source, "utf8");
     } catch (err) {
       if (!vanished(err)) throw err;
       return [];
     }
-    return registeredActions(text11);
+    return registeredActions(text12);
   });
   return {
     registered: new Set(registered),
@@ -22377,9 +22377,9 @@ var init_wix_cache_policy = __esm({
 });
 
 // ../../core/dev-server/src/l10n-catalog.ts
-function parseCatalog(text11) {
+function parseCatalog(text12) {
   try {
-    const c2 = JSON.parse(text11);
+    const c2 = JSON.parse(text12);
     return c2 && typeof c2 === "object" && c2.messages && typeof c2.messages === "object" ? c2 : void 0;
   } catch {
     return void 0;
@@ -27924,10 +27924,10 @@ async function mintAnonymousVisitor(clientId, fetchImpl = fetch) {
     headers: { "Content-Type": "application/json" },
     body: JSON.stringify({ clientId, grantType: "anonymous" })
   });
-  const text11 = await res.text();
+  const text12 = await res.text();
   let j2 = {};
   try {
-    j2 = text11 ? JSON.parse(text11) : {};
+    j2 = text12 ? JSON.parse(text12) : {};
   } catch {
   }
   if (res.status !== 200 || !j2.access_token) throw new Error(`visitor mint failed (${res.status})`);
@@ -27942,10 +27942,10 @@ async function mintOneAppVisitor(msid, fetchImpl = fetch, timeoutMs = ONE_APP_VI
     redirect: "error",
     signal: AbortSignal.timeout(timeoutMs)
   });
-  const text11 = await res.text();
+  const text12 = await res.text();
   let j2 = {};
   try {
-    j2 = text11 ? JSON.parse(text11) : {};
+    j2 = text12 ? JSON.parse(text12) : {};
   } catch {
   }
   const expiresAt = typeof j2.validUntil === "string" ? Date.parse(j2.validUntil) : NaN;
@@ -28307,10 +28307,10 @@ ${session}`);
             }),
             timedOut
           ]);
-          const text11 = await Promise.race([res.text(), timedOut]);
+          const text12 = await Promise.race([res.text(), timedOut]);
           let j2 = {};
           try {
-            j2 = text11 ? JSON.parse(text11) : {};
+            j2 = text12 ? JSON.parse(text12) : {};
           } catch {
           }
           if (res.status < 200 || res.status >= 300 || !j2.signedInstance)
@@ -28496,7 +28496,7 @@ ${session}`);
         });
         const xsrf = /(?:^|;\s*)XSRF-TOKEN=([^;]+)/.exec(sessionCookie)?.[1];
         let status;
-        let text11;
+        let text12;
         try {
           const res = await Promise.race([
             this.fetchImpl(`${ONE_APP_SESSION}/${msid}/signed-instance?signed_instance_type=Member`, {
@@ -28508,7 +28508,7 @@ ${session}`);
             timedOut
           ]);
           status = res.status;
-          text11 = await Promise.race([res.text(), timedOut]);
+          text12 = await Promise.race([res.text(), timedOut]);
         } catch (e2) {
           return refuse7(new SiteInstanceUnavailable(msid, `mint failed: ${e2?.message ?? e2}`), MEMBER_TRANSIENT_TTL_MS);
         } finally {
@@ -28518,7 +28518,7 @@ ${session}`);
         if (status === 401) return refuse7(new AccountSessionExpired(msid, `mint refused (${status})`), MEMBER_TRANSIENT_TTL_MS);
         let instance;
         try {
-          instance = JSON.parse(text11).signedInstance;
+          instance = JSON.parse(text12).signedInstance;
         } catch {
         }
         if (status < 200 || status >= 300 || typeof instance !== "string" || !instance) {
@@ -28597,8 +28597,8 @@ async function postJson(path2, body, auth) {
     headers: { "Content-Type": "application/json", ...auth ? { Authorization: auth } : {} },
     body: JSON.stringify(body)
   });
-  const text11 = await res.text();
-  return { status: res.status, json: text11 ? JSON.parse(text11) : {} };
+  const text12 = await res.text();
+  return { status: res.status, json: text12 ? JSON.parse(text12) : {} };
 }
 async function mintVisitor(clientId) {
   const r3 = await postJson("/oauth2/token", { clientId, grantType: "anonymous" });
@@ -28871,13 +28871,13 @@ function recordWixTraffic(gw, app, adminUrl, ev) {
   full.respBody = truncate2(redactBodyString(full.respBody));
   gw.traffic.push(full);
   if (gw.traffic.length > TRAFFIC_CAP) gw.traffic.splice(0, gw.traffic.length - TRAFFIC_CAP);
-  const text11 = `event: wix.traffic
+  const text12 = `event: wix.traffic
 data: ${JSON.stringify(full)}
 
 `;
   for (const res of [...gw.clients]) {
     try {
-      res.write(text11);
+      res.write(text12);
     } catch {
       gw.clients.delete(res);
     }
@@ -29380,13 +29380,13 @@ async function resolveWixAccounts(cookieHeader, fetchImpl = fetch, authorization
   if (res.status === 428 || res.status === 401 || res.status === 403) {
     return { ok: false, reason: "no_session" };
   }
-  const text11 = await res.text();
+  const text12 = await res.text();
   if (!res.ok) {
-    return { ok: false, reason: "upstream_failed", status: res.status, detail: text11.slice(0, 200) };
+    return { ok: false, reason: "upstream_failed", status: res.status, detail: text12.slice(0, 200) };
   }
   let parsed;
   try {
-    parsed = JSON.parse(text11);
+    parsed = JSON.parse(text12);
   } catch {
     return { ok: false, reason: "upstream_failed", status: res.status, detail: "unparseable_body" };
   }
@@ -29427,13 +29427,13 @@ async function resolveAccountCredential(auth, fetchImpl) {
   if (res.status === 428 || res.status === 401 || res.status === 403 || res.status === 404) {
     return { ok: false, reason: "no_session" };
   }
-  const text11 = await res.text();
+  const text12 = await res.text();
   if (!res.ok) {
-    return { ok: false, reason: "upstream_failed", status: res.status, detail: text11.slice(0, 200) };
+    return { ok: false, reason: "upstream_failed", status: res.status, detail: text12.slice(0, 200) };
   }
   let parsed;
   try {
-    parsed = JSON.parse(text11);
+    parsed = JSON.parse(text12);
   } catch {
     return { ok: false, reason: "upstream_failed", status: res.status, detail: "unparseable_body" };
   }
@@ -30085,9 +30085,9 @@ async function getAndroidPixelDims(serial) {
   try {
     const args = serial ? ["-s", serial, "shell", "wm", "size"] : ["shell", "wm", "size"];
     const out2 = await runner.capture(ADB_BIN, args);
-    const text11 = out2.toString("utf8");
-    const override = /Override size:\s*(\d+)x(\d+)/.exec(text11);
-    const physical = /Physical size:\s*(\d+)x(\d+)/.exec(text11);
+    const text12 = out2.toString("utf8");
+    const override = /Override size:\s*(\d+)x(\d+)/.exec(text12);
+    const physical = /Physical size:\s*(\d+)x(\d+)/.exec(text12);
     const m2 = override ?? physical;
     if (!m2) throw new Error("could not parse wm size");
     const dims = { width: parseInt(m2[1], 10), height: parseInt(m2[2], 10) };
@@ -32051,9 +32051,9 @@ function mdScan(src, linkStyle = "") {
   }
   return out2 + mdEsc(src.slice(last));
 }
-function mdInline(text11, linkColor) {
+function mdInline(text12, linkColor) {
   const safe = typeof linkColor === "string" && /^[#a-zA-Z0-9(),.%\s-]+$/.test(linkColor) ? linkColor : "";
-  return { __html: mdScan(text11, safe ? ` style="color:${safe}"` : "") };
+  return { __html: mdScan(text12, safe ? ` style="color:${safe}"` : "") };
 }
 function sevColor(ctx, sev) {
   switch (sev) {
@@ -32895,7 +32895,7 @@ function PickerLeadingVisual({ option, ctx, size = 20 }) {
       return null;
   }
 }
-function PickerFieldBox({ look, ctx, option, text: text11, isPlaceholder, font, style }) {
+function PickerFieldBox({ look, ctx, option, text: text12, isPlaceholder, font, style }) {
   const C2 = ctx.color;
   return /* @__PURE__ */ jsxs2(
     "div",
@@ -32919,7 +32919,7 @@ function PickerFieldBox({ look, ctx, option, text: text11, isPlaceholder, font,
       },
       children: [
         !isPlaceholder && /* @__PURE__ */ jsx5(PickerLeadingVisual, { option, ctx }),
-        /* @__PURE__ */ jsx5("span", { style: { flex: 1, minWidth: 0, overflow: "hidden", textOverflow: "ellipsis", whiteSpace: "nowrap", color: isPlaceholder ? C2(look.placeholderColor, "#888") : C2("textPrimary", "#111") }, children: text11 }),
+        /* @__PURE__ */ jsx5("span", { style: { flex: 1, minWidth: 0, overflow: "hidden", textOverflow: "ellipsis", whiteSpace: "nowrap", color: isPlaceholder ? C2(look.placeholderColor, "#888") : C2("textPrimary", "#111") }, children: text12 }),
         look.chevronIcon && /* @__PURE__ */ jsx5("span", { "data-picker-chevron": "", style: { flex: "none", display: "inline-grid", placeItems: "center" }, children: iconSvg(look.chevronIcon, { size: 16, color: C2("textSecondary", "#636b78") }) })
       ]
     }
@@ -33364,9 +33364,9 @@ function createRicosHostSession(o2) {
       if (!state.ready || state.unavailable) return;
       o2.send({ v: 1, type: "command", name, ...arg?.level ? { level: arg.level } : {}, ...arg?.value ? { value: arg.value } : {} });
     },
-    insertLink(url, text11) {
+    insertLink(url, text12) {
       if (!state.ready || state.unavailable || !isSafeEditorLink(url)) return false;
-      o2.send({ v: 1, type: "insertLink", url: url.trim(), ...text11 ? { text: text11 } : {} });
+      o2.send({ v: 1, type: "insertLink", url: url.trim(), ...text12 ? { text: text12 } : {} });
       return true;
     },
     removeLink() {
@@ -35848,8 +35848,8 @@ var init_esm = __esm({
 
 // ../../core/ts/src/rich-text-field.ts
 function richTextHtmlToPlainText(html) {
-  const text11 = decodeHTML(html.replace(/<(script|style)\b[^>]*>[\s\S]*?<\/\1\s*>/gi, "").replace(/<li\b[^>]*>/gi, "\u2022 ").replace(/<br\s*\/?>|<\/(?:p|div|li|h[1-6]|blockquote|pre|tr)\s*>/gi, "\n").replace(/<[^>]*>/g, ""));
-  return text11.replace(/\r\n?/g, "\n").replace(/\n{3,}/g, "\n\n").trim();
+  const text12 = decodeHTML(html.replace(/<(script|style)\b[^>]*>[\s\S]*?<\/\1\s*>/gi, "").replace(/<li\b[^>]*>/gi, "\u2022 ").replace(/<br\s*\/?>|<\/(?:p|div|li|h[1-6]|blockquote|pre|tr)\s*>/gi, "\n").replace(/<[^>]*>/g, ""));
+  return text12.replace(/\r\n?/g, "\n").replace(/\n{3,}/g, "\n\n").trim();
 }
 function richTextPlainTextToHtml(value2) {
   if (value2 === "") return "";
@@ -35872,9 +35872,9 @@ function richTextEditedHtml(originalHtml, originalText, nextText) {
   if (/<(script|style)\b/i.test(source)) return richTextPlainTextToHtml(nextText);
   const spans = [];
   let visible = "";
-  const append = (text11, start, end, structural = false) => {
-    visible += text11;
-    for (let i2 = 0; i2 < text11.length; i2++) spans.push({ start, end, structural });
+  const append = (text12, start, end, structural = false) => {
+    visible += text12;
+    for (let i2 = 0; i2 < text12.length; i2++) spans.push({ start, end, structural });
   };
   const token = /<[^>]*>|&(?:#\d+|#x[\da-f]+|[a-z][\da-z]+);?|[^<&]+/gi;
   for (const match of source.matchAll(token)) {
@@ -35928,7 +35928,7 @@ function richTextEditedHtml(originalHtml, originalText, nextText) {
   let edited = source;
   for (const span of removed.slice().reverse()) edited = edited.slice(0, span.start) + edited.slice(span.end);
   const insertionAfterDelete = insertionAt - removed.filter((span) => span.end <= insertionAt).reduce((n2, span) => n2 + span.end - span.start, 0);
-  const escape3 = (text11) => text11.replace(/&/g, "&amp;").replace(/</g, "&lt;").replace(/>/g, "&gt;").replace(/\"/g, "&quot;").replace(/'/g, "&#39;").replace(/\n/g, "<br>");
+  const escape3 = (text12) => text12.replace(/&/g, "&amp;").replace(/</g, "&lt;").replace(/>/g, "&gt;").replace(/\"/g, "&quot;").replace(/'/g, "&#39;").replace(/\n/g, "<br>");
   const replacement = escape3(nextText.slice(prefix, newEnd));
   return edited.slice(0, insertionAfterDelete) + replacement + edited.slice(insertionAfterDelete);
 }
@@ -36033,13 +36033,13 @@ function NamedImage({ node, alt, env }) {
 }
 function Block({ b: b2, env, depth }) {
   const { ctx } = env;
-  const text11 = ctx.color("textPrimary", "#13171e");
+  const text12 = ctx.color("textPrimary", "#13171e");
   const secondary = ctx.color("textSecondary", "#5c6370");
   const border = ctx.color("border", "#e5e5e5");
   switch (b2.kind) {
     case "paragraph":
       return /* @__PURE__ */ jsx9("p", { ...tid(env, b2.id, b2.kind), style: {
-        ...textStyle(ctx, "body", text11),
+        ...textStyle(ctx, "body", text12),
         textAlign: b2.align,
         paddingInlineStart: b2.indent ? Math.min(b2.indent, 8) * 16 : void 0,
         minHeight: b2.spans.length ? void 0 : "1.5em"
@@ -36047,7 +36047,7 @@ function Block({ b: b2, env, depth }) {
     case "heading":
       return React10.createElement(
         `h${b2.level}`,
-        { ...tid(env, b2.id, b2.kind), style: textStyle(ctx, RICH_CONTENT_HEADING_TOKENS[b2.level - 1], text11) },
+        { ...tid(env, b2.id, b2.kind), style: textStyle(ctx, RICH_CONTENT_HEADING_TOKENS[b2.level - 1], text12) },
         /* @__PURE__ */ jsx9(Spans, { spans: b2.spans, env })
       );
     case "list": {
@@ -36057,7 +36057,7 @@ function Block({ b: b2, env, depth }) {
         {
           ...tid(env, b2.id, b2.kind),
           start: b2.ordered ? b2.start : void 0,
-          style: { ...textStyle(ctx, "body", text11), paddingInlineStart: 24, listStyleType: b2.ordered ? "decimal" : depth % 2 ? "circle" : "disc" },
+          style: { ...textStyle(ctx, "body", text12), paddingInlineStart: 24, listStyleType: b2.ordered ? "decimal" : depth % 2 ? "circle" : "disc" },
           children: b2.items.map((item, i2) => /* @__PURE__ */ jsx9("li", { "data-component-id": `${env.componentId}/${item.id}`, id: `${env.componentId}/${item.id}`, style: { marginBottom: 6 }, children: /* @__PURE__ */ jsx9("div", { style: { display: "flex", flexDirection: "column", gap: 6 }, children: item.blocks.map((child, j2) => /* @__PURE__ */ jsx9(Block, { b: child, env, depth: depth + 1 }, `${j2}:${child.id}`)) }) }, `${i2}:${item.id}`))
         }
       );
@@ -36071,7 +36071,7 @@ function Block({ b: b2, env, depth }) {
         overflowWrap: "anywhere",
         fontFamily: "ui-monospace, SFMono-Regular, Menlo, monospace",
         fontSize: "0.9em",
-        color: text11,
+        color: text12,
         background: ctx.color("surfaceSecondary", "#f5f5f7"),
         padding: 10,
         borderRadius: 6
@@ -36090,11 +36090,11 @@ function Block({ b: b2, env, depth }) {
     case "button":
       return /* @__PURE__ */ jsx9(LinkButton, { label: b2.label, url: b2.url, env, testId: `${env.componentId}/${b2.id}` });
     case "table":
-      return /* @__PURE__ */ jsx9("table", { ...tid(env, b2.id, b2.kind), style: { width: "100%", borderCollapse: "collapse", ...textStyle(ctx, "body", text11) }, children: /* @__PURE__ */ jsx9("tbody", { children: b2.rows.map((row2, r3) => /* @__PURE__ */ jsx9("tr", { children: row2.map((cell2, c2) => /* @__PURE__ */ jsx9("td", { style: { border: `1px solid ${border}`, padding: 6, whiteSpace: "pre-wrap", verticalAlign: "top" }, children: cell2 }, c2)) }, r3)) }) });
+      return /* @__PURE__ */ jsx9("table", { ...tid(env, b2.id, b2.kind), style: { width: "100%", borderCollapse: "collapse", ...textStyle(ctx, "body", text12) }, children: /* @__PURE__ */ jsx9("tbody", { children: b2.rows.map((row2, r3) => /* @__PURE__ */ jsx9("tr", { children: row2.map((cell2, c2) => /* @__PURE__ */ jsx9("td", { style: { border: `1px solid ${border}`, padding: 6, whiteSpace: "pre-wrap", verticalAlign: "top" }, children: cell2 }, c2)) }, r3)) }) });
     case "card": {
       const title = richContentCardTitle(b2);
       return /* @__PURE__ */ jsxs6("div", { ...tid(env, b2.id, b2.kind), role: "group", "aria-label": title, style: { border: `1px solid ${border}`, borderRadius: 8, padding: 12, display: "flex", flexDirection: "column", gap: 6 }, children: [
-        /* @__PURE__ */ jsx9("div", { style: textStyle(ctx, "bodyEmphasis", text11), children: title }),
+        /* @__PURE__ */ jsx9("div", { style: textStyle(ctx, "bodyEmphasis", text12), children: title }),
         b2.url ? /* @__PURE__ */ jsxs6(Fragment3, { children: [
           /* @__PURE__ */ jsx9("div", { style: textStyle(ctx, "caption", secondary), children: richContentHost(b2.url) }),
           /* @__PURE__ */ jsx9(LinkButton, { label: RICH_CONTENT_OPEN_LABEL, url: b2.url, env, testId: `${env.componentId}/${b2.id}/open` })
@@ -36123,10 +36123,10 @@ var init_richContent = __esm({
 
 // ../../core/web-renderer/src/pdfPageCount.ts
 function pdfPageCount(bytes2) {
-  const text11 = pdfObjectSyntax(new TextDecoder("latin1").decode(bytes2));
-  const rooted = pdfRootPageCount(text11);
+  const text12 = pdfObjectSyntax(new TextDecoder("latin1").decode(bytes2));
+  const rooted = pdfRootPageCount(text12);
   let scanned = null;
-  for (const m2 of text11.matchAll(/<<((?:(?!<<|>>)[\s\S])*)>>/g)) {
+  for (const m2 of text12.matchAll(/<<((?:(?!<<|>>)[\s\S])*)>>/g)) {
     const dict = m2[1];
     if (!/\/Type\s*\/Pages(?![A-Za-z])/.test(dict)) continue;
     const c2 = /\/Count\s+(\d+)/.exec(dict);
@@ -36138,24 +36138,24 @@ function pdfPageCount(bytes2) {
   if (rooted !== null && scanned !== null && rooted !== scanned) return null;
   return count2 <= PDF_MAX_PLAUSIBLE_PAGES ? count2 : null;
 }
-function pdfObjectSyntax(text11) {
-  const out2 = text11.split("");
+function pdfObjectSyntax(text12) {
+  const out2 = text12.split("");
   const blank = (from, to2) => {
     for (let k2 = from; k2 < to2; k2++) out2[k2] = " ";
   };
   let i2 = 0;
-  while (i2 < text11.length) {
-    const c2 = text11[i2];
+  while (i2 < text12.length) {
+    const c2 = text12[i2];
     if (c2 === "%") {
-      const eol = text11.slice(i2).search(/[\r\n]/);
-      const end = eol < 0 ? text11.length : i2 + eol;
+      const eol = text12.slice(i2).search(/[\r\n]/);
+      const end = eol < 0 ? text12.length : i2 + eol;
       blank(i2, end);
       i2 = end;
     } else if (c2 === "(") {
       let depth = 0;
       let j2 = i2;
-      for (; j2 < text11.length; j2++) {
-        const d2 = text11[j2];
+      for (; j2 < text12.length; j2++) {
+        const d2 = text12[j2];
         if (d2 === "\\") {
           j2++;
           continue;
@@ -36165,21 +36165,21 @@ function pdfObjectSyntax(text11) {
       }
       blank(i2, j2 + 1);
       i2 = j2 + 1;
-    } else if (c2 === "<" && text11[i2 + 1] !== "<") {
-      const end = text11.indexOf(">", i2);
-      const stop = end < 0 ? text11.length : end + 1;
+    } else if (c2 === "<" && text12[i2 + 1] !== "<") {
+      const end = text12.indexOf(">", i2);
+      const stop = end < 0 ? text12.length : end + 1;
       blank(i2, stop);
       i2 = stop;
-    } else if (c2 === "<" && text11[i2 + 1] === "<") {
+    } else if (c2 === "<" && text12[i2 + 1] === "<") {
       i2 += 2;
     } else if (
       // The `stream` KEYWORD, not the tail of a name (`/my-stream`) or of `endstream`: preceded by
       // whitespace or the `>>` that closes its dictionary, and followed by CRLF or LF (PDF 32000
       // §7.3.8.1 — a CR alone is not allowed there).
-      text11.startsWith("stream", i2) && /[\s>]/.test(text11[i2 - 1] ?? "") && (text11[i2 + 6] === "\n" || text11.startsWith("\r\n", i2 + 6))
+      text12.startsWith("stream", i2) && /[\s>]/.test(text12[i2 - 1] ?? "") && (text12[i2 + 6] === "\n" || text12.startsWith("\r\n", i2 + 6))
     ) {
-      const end = text11.indexOf("endstream", i2 + 6);
-      const stop = end < 0 ? text11.length : end;
+      const end = text12.indexOf("endstream", i2 + 6);
+      const stop = end < 0 ? text12.length : end;
       blank(i2 + 6, stop);
       i2 = stop + "endstream".length;
     } else {
@@ -38063,19 +38063,19 @@ function getFilenameFromContentDispositionHeader(contentDisposition) {
     if (!value2.startsWith("=?") || /[\x00-\x19\x80-\xff]/.test(value2)) {
       return value2;
     }
-    return value2.replaceAll(/=\?([\w-]*)\?([QB])\?((?:[^?]|\?(?!=))*)\?=/gi, function(matches, charset, encoding, text11) {
+    return value2.replaceAll(/=\?([\w-]*)\?([QB])\?((?:[^?]|\?(?!=))*)\?=/gi, function(matches, charset, encoding, text12) {
       if (encoding === "q" || encoding === "Q") {
-        text11 = text11.replaceAll("_", " ");
-        text11 = text11.replaceAll(/=([0-9a-f]{2})/gi, function(match, hex2) {
+        text12 = text12.replaceAll("_", " ");
+        text12 = text12.replaceAll(/=([0-9a-f]{2})/gi, function(match, hex2) {
           return String.fromCharCode(parseInt(hex2, 16));
         });
-        return textdecode(charset, text11);
+        return textdecode(charset, text12);
       }
       try {
-        text11 = atob(text11);
+        text12 = atob(text12);
       } catch {
       }
-      return textdecode(charset, text11);
+      return textdecode(charset, text12);
     });
   }
   return "";
@@ -41867,8 +41867,8 @@ var init_pdf = __esm({
           return 1 / nativeParse("-0 	") !== -Infinity;
         });
         $2({ target: "JSON", stat: true, forced: NO_SOURCE_SUPPORT }, {
-          parse: function parse4(text11, reviver) {
-            return PROPER_BASE_PARSE && !isCallable(reviver) ? nativeParse(text11) : $parse(text11, reviver);
+          parse: function parse4(text12, reviver) {
+            return PROPER_BASE_PARSE && !isCallable(reviver) ? nativeParse(text12) : $parse(text12, reviver);
           }
         });
       },
@@ -42006,7 +42006,7 @@ var init_pdf = __esm({
           return ordered;
         };
         if ($stringify) $2({ target: "JSON", stat: true, arity: 3, forced: WRONG_SYMBOLS_CONVERSION || ILL_FORMED_UNICODE || !NATIVE_RAW_JSON }, {
-          stringify: function stringify(text11, replacer, space) {
+          stringify: function stringify(text12, replacer, space) {
             var replacerFunction = isCallable(replacer) ? replacer : void 0;
             var propertyList = replacerFunction ? void 0 : getPropertyList(replacer);
             var keyPrefix = propertyList && getKeyPrefix(propertyList);
@@ -42016,7 +42016,7 @@ var init_pdf = __esm({
             var currentOrdered;
             var marked = false;
             var root = true;
-            var json8 = stringifyWithProperSymbolsConversion(text11, function(key3, value2) {
+            var json8 = stringifyWithProperSymbolsConversion(text12, function(key3, value2) {
               key3 = $String(key3);
               if (propertyList) {
                 if (key3 === END_MARK) {
@@ -45088,7 +45088,7 @@ var init_pdf = __esm({
           focusNode,
           focusOffset
         } = selection;
-        const text11 = selection.toString();
+        const text12 = selection.toString();
         const anchorElement = this.#getAnchorElementForSelection(selection);
         const textLayer = anchorElement.closest(".textLayer");
         const boxes = this.getSelectionBoxes(textLayer);
@@ -45109,7 +45109,7 @@ var init_pdf = __esm({
             anchorOffset,
             focusNode,
             focusOffset,
-            text: text11
+            text: text12
           });
           if (isNoneMode) {
             this.showAllEditors("highlight", true, true);
@@ -46815,32 +46815,32 @@ var init_pdf = __esm({
           deleted: this.isDeleted()
         };
       }
-      set data(text11) {
-        if (text11 !== this.#text) {
+      set data(text12) {
+        if (text12 !== this.#text) {
           this.#richText = null;
         }
-        if (text11 === null) {
+        if (text12 === null) {
           this.#text = "";
           this.#deleted = true;
           return;
         }
-        this.#text = text11;
+        this.#text = text12;
         this.#date = /* @__PURE__ */ new Date();
         this.#deleted = false;
       }
       restoreData({
-        text: text11,
+        text: text12,
         richText,
         date
       }) {
-        this.#text = text11;
+        this.#text = text12;
         this.#richText = richText;
         this.#date = date;
         this.#deleted = false;
       }
-      setInitialText(text11, richText = null) {
-        this.#initialText = text11;
-        this.data = text11;
+      setInitialText(text12, richText = null) {
+        this.#initialText = text12;
+        this.data = text12;
         this.#date = null;
         this.#richText = richText;
       }
@@ -47891,8 +47891,8 @@ var init_pdf = __esm({
       get guessedAltText() {
         return this.#altText?.guessedText;
       }
-      async setGuessedAltText(text11) {
-        await this.#altText?.setGuessedText(text11);
+      async setGuessedAltText(text12) {
+        await this.#altText?.setGuessedText(text12);
       }
       serializeAltText(isForCopying) {
         return this.#altText?.serialize(isForCopying);
@@ -47939,13 +47939,13 @@ var init_pdf = __esm({
         const {
           data: {
             richText,
-            text: text11,
+            text: text12,
             date,
             deleted
           }
         } = this.#comment;
         return {
-          text: text11,
+          text: text12,
           richText,
           date,
           deleted,
@@ -58739,13 +58739,13 @@ fn fs_main(in : VertexOutput) -> @location(0) vec4<f32> {
         } = this;
         return this.annotationStorage.getRawValue(`${AnnotationEditorPrefix}${data.id}`)?.popup?.contents || data.contentsObj?.str || "";
       }
-      set commentText(text11) {
+      set commentText(text12) {
         const {
           data
         } = this;
         const popup = {
-          deleted: !text11,
-          contents: text11 || ""
+          deleted: !text12,
+          contents: text12 || ""
         };
         if (!this.annotationStorage.updateEditor(data.id, {
           popup
@@ -58759,7 +58759,7 @@ fn fs_main(in : VertexOutput) -> @location(0) vec4<f32> {
             modificationDate: /* @__PURE__ */ new Date()
           });
         }
-        if (!text11) {
+        if (!text12) {
           this.removePopup();
         }
       }
@@ -59311,9 +59311,9 @@ fn fs_main(in : VertexOutput) -> @location(0) vec4<f32> {
       get commentText() {
         return this.editor.comment.text;
       }
-      set commentText(text11) {
-        this.editor.comment = text11;
-        if (!text11) {
+      set commentText(text12) {
+        this.editor.comment = text12;
+        if (!text12) {
           this.removePopup();
         }
       }
@@ -60771,11 +60771,11 @@ fn fs_main(in : VertexOutput) -> @location(0) vec4<f32> {
         this.#commentText ||= this.#firstElement.commentText;
         return this.#commentText;
       }
-      set comment(text11) {
-        if (text11 === this.comment) {
+      set comment(text12) {
+        if (text12 === this.comment) {
           return;
         }
-        this.#firstElement.commentText = this.#commentText = text11;
+        this.#firstElement.commentText = this.#commentText = text12;
       }
       focus() {
         this.#firstElement.container?.focus();
@@ -60892,10 +60892,10 @@ fn fs_main(in : VertexOutput) -> @location(0) vec4<f32> {
       get #fontColor() {
         return this.#html?.attributes?.style?.color || null;
       }
-      #makePopupContent(text11) {
+      #makePopupContent(text12) {
         const popupLines = [];
         const popupContent = {
-          str: text11,
+          str: text12,
           html: {
             name: "div",
             attributes: {
@@ -60913,7 +60913,7 @@ fn fs_main(in : VertexOutput) -> @location(0) vec4<f32> {
             fontSize: this.#fontSize ? `calc(${this.#fontSize}px * var(--total-scale-factor))` : ""
           }
         };
-        for (const line of text11.split("\n")) {
+        for (const line of text12.split("\n")) {
           popupLines.push({
             name: "span",
             value: line,
@@ -62422,9 +62422,9 @@ fn fs_main(in : VertexOutput) -> @location(0) vec4<f32> {
         if (savedText === newText) {
           return;
         }
-        const setText = (text11) => {
-          this.#content = text11;
-          if (!text11) {
+        const setText = (text12) => {
+          this.#content = text12;
+          if (!text12) {
             this.remove();
             return;
           }
@@ -66239,7 +66239,7 @@ fn fs_main(in : VertexOutput) -> @location(0) vec4<f32> {
         const uint8Buf = this.#toUint8(grayImage);
         return [uint8Buf, newWidth, newHeight];
       }
-      static extractContoursFromText(text11, {
+      static extractContoursFromText(text12, {
         fontFamily,
         fontStyle,
         fontWeight
@@ -66258,7 +66258,7 @@ fn fs_main(in : VertexOutput) -> @location(0) vec4<f32> {
           fontBoundingBoxAscent,
           fontBoundingBoxDescent,
           width
-        } = ctx.measureText(text11);
+        } = ctx.measureText(text12);
         const SCALE = 1.5;
         const canvasWidth = Math.ceil(Math.max(Math.abs(actualBoundingBoxLeft) + Math.abs(actualBoundingBoxRight) || 0, width) * SCALE);
         const canvasHeight = Math.ceil(Math.max(Math.abs(actualBoundingBoxAscent) + Math.abs(actualBoundingBoxDescent) || fontSize, Math.abs(fontBoundingBoxAscent) + Math.abs(fontBoundingBoxDescent) || fontSize) * SCALE);
@@ -66272,7 +66272,7 @@ fn fs_main(in : VertexOutput) -> @location(0) vec4<f32> {
         ctx.fillStyle = "white";
         ctx.fillRect(0, 0, canvasWidth, canvasHeight);
         ctx.fillStyle = "black";
-        ctx.fillText(text11, canvasWidth * (SCALE - 1) / 2, canvasHeight * (3 - SCALE) / 2);
+        ctx.fillText(text12, canvasWidth * (SCALE - 1) / 2, canvasHeight * (3 - SCALE) / 2);
         const uint8Buf = this.#toUint8(ctx.getImageData(0, 0, canvasWidth, canvasHeight).data);
         const histogram = this.#getHistogram(uint8Buf);
         const threshold = this.#guessThreshold(histogram);
@@ -66774,7 +66774,7 @@ fn fs_main(in : VertexOutput) -> @location(0) vec4<f32> {
         } = this.parent.viewport;
         return SignatureExtractor.process(bitmap, pageWidth, pageHeight, rotation, _SignatureEditor._INNER_MARGIN);
       }
-      getFromText(text11, fontInfo) {
+      getFromText(text12, fontInfo) {
         const {
           rawDims: {
             pageWidth,
@@ -66782,7 +66782,7 @@ fn fs_main(in : VertexOutput) -> @location(0) vec4<f32> {
           },
           rotation
         } = this.parent.viewport;
-        return SignatureExtractor.extractContoursFromText(text11, fontInfo, pageWidth, pageHeight, rotation, _SignatureEditor._INNER_MARGIN);
+        return SignatureExtractor.extractContoursFromText(text12, fontInfo, pageWidth, pageHeight, rotation, _SignatureEditor._INNER_MARGIN);
       }
       getDrawnSignature(curves) {
         const {
@@ -118793,9 +118793,9 @@ function withExtras(name, render) {
   Wrapped.displayName = name;
   return Wrapped;
 }
-function rememberReveal(text11, n2) {
+function rememberReveal(text12, n2) {
   if (revealProgress.size > 500) revealProgress.clear();
-  revealProgress.set(text11, n2);
+  revealProgress.set(text12, n2);
 }
 function revealHtml(html, shown2, fade) {
   let w2 = 0;
@@ -119639,8 +119639,8 @@ function applyA11ySemantics(node, ctx, extra) {
       extra["aria-live"] = str11(announce.politeness) === "assertive" ? "assertive" : "polite";
       extra["aria-atomic"] = "true";
       extra["aria-relevant"] = trigger === "on_appear" ? "additions" : trigger === "both" ? "additions text" : "text";
-      const text11 = str11(announce.text);
-      if (text11 && extra["aria-label"] == null) extra["aria-label"] = text11;
+      const text12 = str11(announce.text);
+      if (text12 && extra["aria-label"] == null) extra["aria-label"] = text12;
     }
   }
   return hint;
@@ -121999,13 +121999,13 @@ var init_renderNode = __esm({
       const C2 = ctx.color;
       const isBoundText = typeof props.textPath === "string" && isBinding(props.textPath);
       const bound2 = useResolvedScalar(isBoundText ? props.textPath : void 0, ctx);
-      const text11 = isBoundText ? typeof bound2 === "string" || typeof bound2 === "number" ? String(bound2) : "" : literalErrorText;
+      const text12 = isBoundText ? typeof bound2 === "string" || typeof bound2 === "number" ? String(bound2) : "" : literalErrorText;
       if (props.visible === false) return null;
-      if (isBoundText && !text11) return null;
+      if (isBoundText && !text12) return null;
       const c2 = (props.severity ?? "error") === "warning" ? C2("warning", "#E89F00") : C2("danger", "#E62214");
       return /* @__PURE__ */ jsxs8("div", { role: "alert", style: { display: "flex", gap: 6, alignItems: "center", color: c2, fontSize: pxToRem(13), fontFamily: bodyFont(ctx), ...wrap }, children: [
         /* @__PURE__ */ jsx11("span", { "aria-hidden": "true", children: "\u26A0" }),
-        text11
+        text12
       ] });
     });
     FormView = withExtras("FormView", ({ props, ctx, wrap }) => {
@@ -122809,8 +122809,8 @@ var init_renderNode = __esm({
         const look = pickerFieldLook(props.field, ctx);
         const shownSel = ctx.onAction ? sel : ctx.empty ? null : selectedId;
         const picked = opts.find((o2) => o2 != null && String(o2.id) === String(shownSel ?? ""));
-        const text11 = picked ? labelOf(picked) : String(placeholderText || "Select");
-        const box = /* @__PURE__ */ jsx11(PickerFieldBox, { look, ctx, option: picked, text: text11, isPlaceholder: !picked, font: bodyFont(ctx) });
+        const text12 = picked ? labelOf(picked) : String(placeholderText || "Select");
+        const box = /* @__PURE__ */ jsx11(PickerFieldBox, { look, ctx, option: picked, text: text12, isPlaceholder: !picked, font: bodyFont(ctx) });
         if (!ctx.onAction) return /* @__PURE__ */ jsx11("div", { style: { width: "100%", ...wrap }, children: box });
         return /* @__PURE__ */ jsxs8("div", { ...{ [A11Y_PART]: "root" }, "data-hm-picker-focus": "", style: { position: "relative", width: "100%", ...wrap }, children: [
           box,
@@ -122829,7 +122829,7 @@ var init_renderNode = __esm({
               ...pickerA11yProps,
               style: { position: "absolute", inset: 0, width: "100%", height: "100%", opacity: 0, cursor: "pointer", margin: 0, border: 0, fontSize: pxToRem(15) },
               children: [
-                !picked && /* @__PURE__ */ jsx11("option", { value: "", disabled: true, children: text11 }),
+                !picked && /* @__PURE__ */ jsx11("option", { value: "", disabled: true, children: text12 }),
                 opts.map((o2, i2) => /* @__PURE__ */ jsx11("option", { value: o2?.id, disabled: !pickerOptionPickable(o2), children: labelOf(o2) }, o2?.id ?? i2))
               ]
             }
@@ -123328,37 +123328,37 @@ var init_renderNode = __esm({
     REVEAL_BUFFER = 12;
     revealProgress = /* @__PURE__ */ new Map();
     countWords = (s2) => s2.split(/\s+/).filter((t2) => t2 !== "").length;
-    RevealText = ({ text: text11, reduce, markdownHtml }) => {
-      const tokens2 = React13.useMemo(() => text11.split(/(\s+)/).filter((t2) => t2 !== ""), [text11]);
+    RevealText = ({ text: text12, reduce, markdownHtml }) => {
+      const tokens2 = React13.useMemo(() => text12.split(/(\s+)/).filter((t2) => t2 !== ""), [text12]);
       const total = React13.useMemo(
-        () => markdownHtml != null ? revealHtml(markdownHtml, 0, void 0).total : countWords(text11),
-        [text11, markdownHtml]
+        () => markdownHtml != null ? revealHtml(markdownHtml, 0, void 0).total : countWords(text12),
+        [text12, markdownHtml]
       );
       const [shown2, setShown] = React13.useState(total);
       const prevRef = React13.useRef(null);
       useIsomorphicLayoutEffect(() => {
         const prev = prevRef.current;
-        prevRef.current = text11;
+        prevRef.current = text12;
         if (reduce) {
-          rememberReveal(text11, total);
+          rememberReveal(text12, total);
           setShown(total);
           return;
         }
-        let start = revealProgress.get(text11);
-        if (start == null) start = prev != null && text11.startsWith(prev) ? revealProgress.get(prev) ?? countWords(prev) : 0;
+        let start = revealProgress.get(text12);
+        if (start == null) start = prev != null && text12.startsWith(prev) ? revealProgress.get(prev) ?? countWords(prev) : 0;
         start = Math.max(start, total - REVEAL_BUFFER);
-        rememberReveal(text11, start);
+        rememberReveal(text12, start);
         setShown(start);
         if (start >= total) return;
         let n2 = start;
         const id = setInterval(() => {
           n2 += 1;
-          rememberReveal(text11, n2);
+          rememberReveal(text12, n2);
           setShown(n2);
           if (n2 >= total) clearInterval(id);
         }, REVEAL_RELEASE_MS);
         return () => clearInterval(id);
-      }, [text11, reduce, total]);
+      }, [text12, reduce, total]);
       const fade = reduce ? void 0 : `opacity ${REVEAL_FADE_MS}ms ease-out`;
       if (markdownHtml != null) {
         return /* @__PURE__ */ jsx11(
@@ -124456,7 +124456,7 @@ var init_renderNode = __esm({
     TooltipNode = withExtras("TooltipNode", ({ props, ctx, wrap }) => {
       const C2 = ctx.color;
       const title = useBoundString(props.title, ctx);
-      const text11 = useBoundString(props.text, ctx);
+      const text12 = useBoundString(props.text, ctx);
       const rich = title !== "";
       const trigger = resolveTooltipTrigger(props.trigger, "pointer");
       const edge = resolveOverlayEdge("Tooltip", props.edge);
@@ -124546,7 +124546,7 @@ var init_renderNode = __esm({
         // A held press would otherwise open the browser's own context menu over the bubble.
         onContextMenu: (e2) => e2.preventDefault()
       };
-      const hint = [title, text11].filter((s2) => s2 !== "").join(". ");
+      const hint = [title, text12].filter((s2) => s2 !== "").join(". ");
       const anchor = props.anchor ? renderNode(props.anchor, ctx) : null;
       const wrapperHintId = `hm-tip-hint${React13.useId()}`;
       useIsomorphicLayoutEffect(() => {
@@ -124579,7 +124579,7 @@ var init_renderNode = __esm({
         ] }) }),
         open && /* @__PURE__ */ jsxs8("div", { ref: bubbleRef, role: "tooltip", "data-hm-tooltip-edge": placed, style: { position: "absolute", zIndex: 45, maxWidth: Math.min(240, placement.maxWidth), overflowWrap: placement.maxWidth < 240 ? "anywhere" : void 0, width: "max-content", background: C2("textPrimary", "#13171e"), color: C2("textOnAccent", "#fff"), borderRadius: 8, padding: rich ? "10px 12px" : "6px 10px", fontFamily: bodyFont(ctx), fontSize: pxToRem(13), lineHeight: 1.35, boxShadow: "0 4px 14px rgba(0,0,0,.18)", ...overlayEdgeStyle(placed, TOOLTIP_GAP), translate: `${placement.x}px ${placement.y}px` }, children: [
           rich && /* @__PURE__ */ jsx11("div", { style: { fontWeight: 700, marginBottom: 3 }, children: title }),
-          text11
+          text12
         ] })
       ] });
     });
@@ -127256,8 +127256,8 @@ function buildRenderTree(node, path2 = "$", provider = null, itemScope = void 0,
     const asText3 = VALUE_PATH_TEXT.get(type);
     if (typeof valuePath === "string" && asText3 && (valuePath.startsWith("$service:") || /^\$item\.[^.]/.test(valuePath))) {
       const r3 = resolveTreeScalar(valuePath, provider, itemScope);
-      const text11 = asText3(r3, props);
-      if (text11 !== void 0) values.value = text11;
+      const text12 = asText3(r3, props);
+      if (text12 !== void 0) values.value = text12;
       else if (r3 !== void 0 && r3 !== null) {
         delete values.value;
       }
@@ -129208,11 +129208,11 @@ async function handleOwnerChatRequest(req, res) {
       return sendJson(res, 400, { error: "invalid_json" }, cors);
     }
     const chatroomId = (parsed.chatroomId ?? "").trim();
-    const text11 = (parsed.text ?? "").trim();
-    if (!chatroomId || !text11) return sendJson(res, 400, { error: "chatroomId_and_text_required" }, cors);
+    const text12 = (parsed.text ?? "").trim();
+    if (!chatroomId || !text12) return sendJson(res, 400, { error: "chatroomId_and_text_required" }, cors);
     const metaSiteId = (parsed.metaSiteId ?? "").trim() || await resolveMetaSiteId();
     if (!metaSiteId) return sendJson(res, 400, { error: "no_meta_site" }, cors);
-    const result = await sendChatMessageLive(metaSiteId, chatroomId, text11);
+    const result = await sendChatMessageLive(metaSiteId, chatroomId, text12);
     if (result.ok) return sendJson(res, 200, { ok: true, message: result.message }, cors);
     return sendJson(res, result.status >= 400 && result.status < 600 ? result.status : 502, { ok: false, status: result.status, error: result.error }, cors);
   }
@@ -129506,13 +129506,13 @@ function invalidate(state, ...screenIds) {
   publishSSE(state, "screen.invalidated", { screenIds });
 }
 function publishSSE(state, type, payload) {
-  const text11 = `event: ${type}
+  const text12 = `event: ${type}
 data: ${JSON.stringify(payload)}
 
 `;
   for (const res of [...state.sseClients]) {
     try {
-      res.write(text11);
+      res.write(text12);
     } catch {
       state.sseClients.delete(res);
     }
@@ -129528,13 +129528,13 @@ function publishAdminSSE(state, type, payload) {
       state.lastDeviceScreen.set(key3, screenId);
     }
   }
-  const text11 = `event: ${type}
+  const text12 = `event: ${type}
 data: ${JSON.stringify(payload)}
 
 `;
   for (const res of [...state.adminClients]) {
     try {
-      res.write(text11);
+      res.write(text12);
     } catch {
       state.adminClients.delete(res);
     }
@@ -129555,12 +129555,12 @@ function publishDevReady(state, res, extra = {}) {
     hotReloadEnabled: state.hotReloadEnabled,
     ...extra
   };
-  const text11 = `event: dev.ready
+  const text12 = `event: dev.ready
 data: ${JSON.stringify(payload)}
 
 `;
   if (res) {
-    res.write(text11);
+    res.write(text12);
   } else {
     publishSSE(state, "dev.ready", payload);
   }
@@ -131625,9 +131625,9 @@ async function handleLiveSubscription(req, res, state) {
       },
       body: JSON.stringify({ ...body, app })
     });
-    const text11 = await upstream.text();
+    const text12 = await upstream.text();
     res.writeHead(upstream.status, { "Content-Type": "application/json", ...cors });
-    res.end(text11 || JSON.stringify({ ok: upstream.ok }));
+    res.end(text12 || JSON.stringify({ ok: upstream.ok }));
   } catch (error) {
     sendJson(res, 502, { error: "admin_server_unreachable", detail: String(error) }, cors);
   }
@@ -133930,10 +133930,10 @@ function componentModuleIds() {
 function usageStringCopyFor(permissionCopy) {
   const out2 = {};
   for (const [rawId, copy] of Object.entries(permissionCopy ?? {})) {
-    const text11 = typeof copy === "string" ? copy.trim() : "";
-    if (!text11) continue;
+    const text12 = typeof copy === "string" ? copy.trim() : "";
+    if (!text12) continue;
     const req = CAPABILITY_NATIVE[catalogKey(rawId)];
-    for (const u2 of [...req?.ios?.usageStrings ?? [], ...req?.macos?.usageStrings ?? []]) out2[u2.key] = text11;
+    for (const u2 of [...req?.ios?.usageStrings ?? [], ...req?.macos?.usageStrings ?? []]) out2[u2.key] = text12;
   }
   return out2;
 }
@@ -134861,10 +134861,10 @@ function netTransport(rules) {
     if (res.needsUpstream) {
       throw new Error(`net fixture rule ${res.ruleId} is a \`transform\` rule, which needs a real upstream \u2014 not usable in a hermetic crawl`);
     }
-    const { status, body: text11 } = res.resolved;
+    const { status, body: text12 } = res.resolved;
     if (status < 200 || status >= 300) throw new Error(`Wix ${status} for ${method} ${bare}`);
     try {
-      return text11 ? JSON.parse(text11) : {};
+      return text12 ? JSON.parse(text12) : {};
     } catch {
       return {};
     }
@@ -134908,10 +134908,10 @@ function layeredTransport(layers3) {
       });
       if (res.matched) {
         if (res.needsUpstream) throw new Error(`net fixture rule ${res.ruleId} is a \`transform\` rule, which needs a real upstream \u2014 not usable in a hermetic crawl`);
-        const { status, body: text11 } = res.resolved;
+        const { status, body: text12 } = res.resolved;
         if (status < 200 || status >= 300) throw new Error(`Wix ${status} for ${m2} ${bare}`);
         try {
-          return text11 ? JSON.parse(text11) : {};
+          return text12 ? JSON.parse(text12) : {};
         } catch {
           return {};
         }
@@ -137087,13 +137087,13 @@ var init_build2 = __esm({
 });
 
 // ../mobile-dist/release-pin.ts
-function withPinnedRelease(text11, releaseId) {
-  if (!releaseId) return text11;
+function withPinnedRelease(text12, releaseId) {
+  if (!releaseId) return text12;
   let cfg;
   try {
-    cfg = JSON.parse(text11);
+    cfg = JSON.parse(text12);
   } catch {
-    return text11;
+    return text12;
   }
   cfg.releaseId = releaseId;
   cfg.releasePinned = true;
@@ -137474,18 +137474,18 @@ async function bakeCatalogs(app, locale, fetchCatalog, putDoc) {
   const source = locale?.default ?? "en";
   const tags = [.../* @__PURE__ */ new Set([source, ...declared])];
   for (const tag of tags) {
-    const text11 = await fetchCatalog(tag);
-    if (!text11) continue;
-    if (!declared.length && !servesMessages(text11)) continue;
-    const hash2 = sha2563(text11);
-    await putDoc(app, hash2, text11);
+    const text12 = await fetchCatalog(tag);
+    if (!text12) continue;
+    if (!declared.length && !servesMessages(text12)) continue;
+    const hash2 = sha2563(text12);
+    await putDoc(app, hash2, text12);
     out2[tag] = hash2;
   }
   return out2;
 }
-function servesMessages(text11) {
+function servesMessages(text12) {
   try {
-    const m2 = JSON.parse(text11).messages;
+    const m2 = JSON.parse(text12).messages;
     return !!m2 && typeof m2 === "object" && Object.keys(m2).length > 0;
   } catch {
     return false;
@@ -137580,9 +137580,9 @@ async function snapshotTokens(app, base, fetchTokens, put) {
       }
     };
   }
-  const text11 = await res.text();
-  await put(text11);
-  return { hash: sha2563(text11) };
+  const text12 = await res.text();
+  await put(text12);
+  return { hash: sha2563(text12) };
 }
 function tokensSnapshotMessage(app, base, status) {
   const why = status === 400 ? `the dev-server rejected the app id as malformed (400 bad_app). It must be lowercase letters, digits and hyphens, starting with a letter or digit, at most 63 characters, with at most one interior dot \u2014 so a leading underscore or an uppercase letter fails, on every build of that app. A single dot is FINE (an owner-namespaced slug), so do not remove one to get past this` : `${status} from the tokens route`;
@@ -137683,23 +137683,23 @@ function maximumBinaryVersion(current, candidate) {
   }
   return current;
 }
-async function withStoreNavBundle(text11, address) {
+async function withStoreNavBundle(text12, address) {
   let cfg;
   try {
-    cfg = JSON.parse(text11);
+    cfg = JSON.parse(text12);
   } catch {
-    return text11;
+    return text12;
   }
   const refs = [cfg?.app?.logicBundle, cfg?.navigation?.navLogicBundle, cfg?.navLogicBundle].filter(
     (r3) => !!r3 && typeof r3 === "object" && typeof r3.url === "string"
   );
-  if (refs.length === 0) return text11;
+  if (refs.length === 0) return text12;
   const resolved2 = [];
   for (const ref of refs) {
     const name = bundleNameFromUrl(ref.url);
-    if (!name) return text11;
+    if (!name) return text12;
     const addressed = await address(name);
-    if (!addressed) return text11;
+    if (!addressed) return text12;
     resolved2.push({ ref, url: addressed.url, sri: addressed.sri });
   }
   for (const { ref, url, sri: integrity2 } of resolved2) {
@@ -137708,10 +137708,10 @@ async function withStoreNavBundle(text11, address) {
   }
   return JSON.stringify(cfg);
 }
-function linkableScreenIdsFrom(text11) {
+function linkableScreenIdsFrom(text12) {
   let cfg;
   try {
-    cfg = JSON.parse(text11);
+    cfg = JSON.parse(text12);
   } catch {
     return [];
   }
@@ -137723,24 +137723,24 @@ function linkableScreenIdsFrom(text11) {
   }
   return [...ids];
 }
-function withoutDevOnlyAppConfig(text11) {
+function withoutDevOnlyAppConfig(text12) {
   let cfg;
   try {
-    cfg = JSON.parse(text11);
+    cfg = JSON.parse(text12);
   } catch {
-    return text11;
+    return text12;
   }
-  if (!cfg || typeof cfg !== "object" || !("devGatewayConfig" in cfg)) return text11;
+  if (!cfg || typeof cfg !== "object" || !("devGatewayConfig" in cfg)) return text12;
   delete cfg.devGatewayConfig;
   return JSON.stringify(cfg);
 }
-function withProdServeAppConfig(text11, prod) {
-  if (!prod?.serve) return text11;
+function withProdServeAppConfig(text12, prod) {
+  if (!prod?.serve) return text12;
   let cfg;
   try {
-    cfg = JSON.parse(text11);
+    cfg = JSON.parse(text12);
   } catch {
-    return text11;
+    return text12;
   }
   cfg.useProdServe = true;
   cfg.prodServeBaseUrl = prod.serve;
@@ -138124,10 +138124,10 @@ async function buildFromLoaded(preloaded, dest, opts = {}) {
       if (bytes2.length === 0 || bytes2.length > MAX_AUTHORING_DOC_BYTES) {
         throw new Error(`${file2} must be non-empty and at most ${MAX_AUTHORING_DOC_BYTES} bytes to ship with a release.`);
       }
-      const text11 = bytes2.toString("utf8");
-      if (!Buffer.from(text11, "utf8").equals(bytes2)) throw new Error(`${file2} must be canonical UTF-8 Markdown.`);
+      const text12 = bytes2.toString("utf8");
+      if (!Buffer.from(text12, "utf8").equals(bytes2)) throw new Error(`${file2} must be canonical UTF-8 Markdown.`);
       const hash2 = sha2563(bytes2);
-      await store.putDoc(app, hash2, text11);
+      await store.putDoc(app, hash2, text12);
       authoringDocs[name] = { sha256: hash2, sri: sri2(bytes2), bytes: bytes2.length, contentType: "text/markdown; charset=utf-8" };
     }
   }
@@ -138280,10 +138280,10 @@ async function buildFromLoaded(preloaded, dest, opts = {}) {
     base = BAKE_OFFLINE_BASE;
   }
   const devFetch = (url, init) => dev.inject(new Request(url, init));
-  const depthRefusalFromText = (status, text11) => {
+  const depthRefusalFromText = (status, text12) => {
     if (status !== 422) return null;
     try {
-      const body = JSON.parse(text11);
+      const body = JSON.parse(text12);
       return body?.error === "depth_budget_exceeded" && body.finding ? body.finding : null;
     } catch {
       return null;
@@ -138291,8 +138291,8 @@ async function buildFromLoaded(preloaded, dest, opts = {}) {
   };
   const depthRefusalOf = async (res) => depthRefusalFromText(res.status, await res.text());
   const recordUnbuilt = async (screenId, res) => {
-    const text11 = await res.text();
-    const finding2 = depthRefusalFromText(res.status, text11);
+    const text12 = await res.text();
+    const finding2 = depthRefusalFromText(res.status, text12);
     if (finding2) {
       failedToBuild.push({ screenId, status: res.status, error: finding2.message });
       if (!depthRefusals.some((r3) => r3.screenId === screenId)) depthRefusals.push({ screenId, finding: finding2 });
@@ -138301,7 +138301,7 @@ async function buildFromLoaded(preloaded, dest, opts = {}) {
       }
       return;
     }
-    failedToBuild.push({ screenId, status: res.status, error: text11.slice(0, 2e3) });
+    failedToBuild.push({ screenId, status: res.status, error: text12.slice(0, 2e3) });
   };
   try {
     for (const screenId of screenIds) {
@@ -138547,11 +138547,11 @@ async function buildFromLoaded(preloaded, dest, opts = {}) {
           ok: res.ok,
           status: res.status,
           text: async () => {
-            const text11 = await res.text();
+            const text12 = await res.text();
             try {
-              const doc = JSON.parse(text11);
+              const doc = JSON.parse(text12);
               if (!publishedFontPlan) {
-                if (!("fontFaces" in doc)) return text11;
+                if (!("fontFaces" in doc)) return text12;
                 const kept = publishableFontFaces(doc.fontFaces);
                 if (kept) doc.fontFaces = kept;
                 else delete doc.fontFaces;
@@ -138560,12 +138560,12 @@ async function buildFromLoaded(preloaded, dest, opts = {}) {
               doc.fontFaces = servedProjection(publishedFontPlan);
               return JSON.stringify(doc);
             } catch {
-              return text11;
+              return text12;
             }
           }
         };
       },
-      (text11) => store.putTokens(app, text11)
+      (text12) => store.putTokens(app, text12)
     );
     if (snapshot3.hash) tokensHash = snapshot3.hash;
     if (snapshot3.failure) {
@@ -138595,14 +138595,14 @@ async function buildFromLoaded(preloaded, dest, opts = {}) {
       if (streamPolicyErrors.length) {
         throw new Error(`invalid streamPolicy for release ${app}: ${streamPolicyErrors.join("; ")}`);
       }
-      const text11 = await withStoreNavBundle(prodText, async (name) => {
+      const text12 = await withStoreNavBundle(prodText, async (name) => {
         const hash2 = await addressBundle(name) ?? null;
         const entry = hash2 ? bundles[name] : void 0;
         return entry ? { url: store.bundleUrl(app, entry.sha256), sri: entry.sri } : null;
       });
-      await store.putAppConfig(app, text11);
-      appConfigHash = sha2563(text11);
-      if (collect2?.descriptors) for (const id of linkableScreenIdsFrom(text11)) linkable.add(id);
+      await store.putAppConfig(app, text12);
+      appConfigHash = sha2563(text12);
+      if (collect2?.descriptors) for (const id of linkableScreenIdsFrom(text12)) linkable.add(id);
     }
     const ahRes = await devFetch(`${base}/v1/action-handlers/${encodeURIComponent(app)}`, { headers: { "X-Himalaya-App": app } });
     if (ahRes.ok) {
@@ -139537,8 +139537,8 @@ function penalty(m2, size) {
   score += Math.floor(Math.abs(dark * 20 - total * 10) / total) * 10;
   return score;
 }
-function encodeQr(text11) {
-  const bytes2 = [...new TextEncoder().encode(text11)];
+function encodeQr(text12) {
+  const bytes2 = [...new TextEncoder().encode(text12)];
   const version5 = fitVersion(bytes2.length);
   if (!version5) {
     throw new RangeError(`QR payload too long: ${bytes2.length} bytes exceeds version ${QR_MAX_VERSION} at EC level L`);
@@ -139778,14 +139778,14 @@ function headline(changes) {
 function boardLines(changes) {
   const lines = [];
   for (const c2 of changes.items) {
-    const text11 = lineOf(c2);
-    const same3 = lines.find((l2) => l2.text === text11);
+    const text12 = lineOf(c2);
+    const same3 = lines.find((l2) => l2.text === text12);
     if (same3) {
       same3.n++;
       continue;
     }
     lines.push({
-      text: text11,
+      text: text12,
       n: 1,
       ...c2.kind === "token" && c2.from && HEX.test(c2.from) ? { from: c2.from } : {},
       ...c2.kind === "token" && c2.to && HEX.test(c2.to) ? { to: c2.to } : {}
@@ -140634,14 +140634,14 @@ function contentDir(flags) {
   return resolve33(str3(flags.content) ?? process.cwd());
 }
 function renameRestoredSource(restored, declaredApp, renamed) {
-  const text11 = {};
+  const text12 = {};
   for (const entry of restored) {
     const decoded = entry.bytes.toString("utf8");
-    if (Buffer.from(decoded, "utf8").equals(entry.bytes)) text11[entry.path] = decoded;
+    if (Buffer.from(decoded, "utf8").equals(entry.bytes)) text12[entry.path] = decoded;
   }
-  const sentineled = sentinelizeArchive(text11, declaredApp);
+  const sentineled = sentinelizeArchive(text12, declaredApp);
   for (const entry of restored) {
-    if (!(entry.path in text11)) continue;
+    if (!(entry.path in text12)) continue;
     const body = sentineled[entry.path];
     if (body !== void 0) entry.bytes = Buffer.from(substituteIdentity(body, renamed), "utf8");
   }
@@ -140721,8 +140721,8 @@ function materializeForPreview(appDir3, slug, displayName3) {
 }
 async function appId(dir) {
   try {
-    const { readFileSync: readFileSync127 } = await import("node:fs");
-    const m2 = JSON.parse(readFileSync127(join31(dir, "himalaya.content.json"), "utf8"));
+    const { readFileSync: readFileSync128 } = await import("node:fs");
+    const m2 = JSON.parse(readFileSync128(join31(dir, "himalaya.content.json"), "utf8"));
     if (m2.name) return m2.name;
   } catch {
   }
@@ -141137,10 +141137,10 @@ function ownerTransport(msid, fetchImpl = fetch, timeoutMs = DEFAULT_TIMEOUT_MS,
       }
       throw new Error(`${method} ${path2} failed: ${err?.message ?? String(e2)}`);
     }
-    const text11 = await res.text();
-    let parsed = text11;
+    const text12 = await res.text();
+    let parsed = text12;
     try {
-      parsed = text11 ? JSON.parse(text11) : null;
+      parsed = text12 ? JSON.parse(text12) : null;
     } catch {
     }
     if (!res.ok) throw new WixApiError(res.status, method, path2, parsed);
@@ -141310,10 +141310,10 @@ function makeTransport(fetchImpl, auth, timeoutMs = DEFAULT_TIMEOUT_MS2) {
       body: body === void 0 ? void 0 : JSON.stringify(body),
       signal: AbortSignal.timeout(timeoutMs)
     });
-    const text11 = await res.text();
-    let parsed = text11;
+    const text12 = await res.text();
+    let parsed = text12;
     try {
-      parsed = text11 ? JSON.parse(text11) : null;
+      parsed = text12 ? JSON.parse(text12) : null;
     } catch {
     }
     if (!res.ok) throw new WixApiError2(res.status, method, path2, parsed);
@@ -141414,10 +141414,10 @@ async function mintVisitorToken(fetchImpl, clientId) {
     body: JSON.stringify({ clientId, grantType: "anonymous" }),
     signal: AbortSignal.timeout(8e3)
   });
-  const text11 = await res.text();
-  let parsed = text11;
+  const text12 = await res.text();
+  let parsed = text12;
   try {
-    parsed = text11 ? JSON.parse(text11) : null;
+    parsed = text12 ? JSON.parse(text12) : null;
   } catch {
   }
   if (!res.ok) throw new WixApiError2(res.status, "POST", "/oauth2/token", parsed);
@@ -141615,10 +141615,10 @@ function scalar3(v2) {
   }
   return t2;
 }
-function parseStoreConfig(text11) {
+function parseStoreConfig(text12) {
   const cfg = {};
   let section3 = null;
-  for (const raw of text11.split("\n")) {
+  for (const raw of text12.split("\n")) {
     const line = strip2(raw);
     if (!line.trim()) continue;
     const indented = /^\s+/.test(raw);
@@ -146776,7 +146776,7 @@ function prettify(node, options, matcher, readonlyMatcher) {
   return compress(node, options, matcher, readonlyMatcher);
 }
 function compress(arr2, options, matcher, readonlyMatcher) {
-  let text11;
+  let text12;
   const compressedObj = {};
   for (let i2 = 0; i2 < arr2.length; i2++) {
     const tagObj = arr2[i2];
@@ -146789,8 +146789,8 @@ function compress(arr2, options, matcher, readonlyMatcher) {
       matcher.push(property2, rawAttrs);
     }
     if (property2 === options.textNodeName) {
-      if (text11 === void 0) text11 = tagObj[property2];
-      else text11 += "" + tagObj[property2];
+      if (text12 === void 0) text12 = tagObj[property2];
+      else text12 += "" + tagObj[property2];
     } else if (property2 === void 0) {
       continue;
     } else if (tagObj[property2]) {
@@ -146828,9 +146828,9 @@ function compress(arr2, options, matcher, readonlyMatcher) {
       }
     }
   }
-  if (typeof text11 === "string") {
-    if (text11.length > 0) compressedObj[options.textNodeName] = text11;
-  } else if (text11 !== void 0) compressedObj[options.textNodeName] = text11;
+  if (typeof text12 === "string") {
+    if (text12.length > 0) compressedObj[options.textNodeName] = text12;
+  } else if (text12 !== void 0) compressedObj[options.textNodeName] = text12;
   return compressedObj;
 }
 function propName2(obj7) {
@@ -147008,9 +147008,9 @@ function arrToStr(arr2, options, indentation, matcher, stopNodeExpressions, xmlV
   }
   if (!Array.isArray(arr2)) {
     if (arr2 !== void 0 && arr2 !== null) {
-      let text11 = arr2.toString();
-      text11 = replaceEntitiesValue2(text11, options);
-      return text11;
+      let text12 = arr2.toString();
+      text12 = replaceEntitiesValue2(text12, options);
+      return text12;
     }
     return "";
   }
@@ -149315,9 +149315,9 @@ function bundlesOf(block) {
   walk2(block);
   return [...out2];
 }
-function parseJson2(text11, what) {
+function parseJson2(text12, what) {
   try {
-    const value2 = JSON.parse(text11);
+    const value2 = JSON.parse(text12);
     if (!value2 || typeof value2 !== "object" || Array.isArray(value2)) throw new Error("not an object");
     return value2;
   } catch (e2) {
@@ -149902,9 +149902,9 @@ function planTrim(src, keepIds, links) {
   for (const r3 of keptRoutes) for (const b2 of r3.bundles) keptWorkers.add(b2);
   const importsOf2 = (dir) => {
     const out2 = [];
-    for (const [rel, text11] of Object.entries(src.workerFiles)) {
+    for (const [rel, text12] of Object.entries(src.workerFiles)) {
       if (!rel.startsWith(`tier5-src/${dir}/`)) continue;
-      for (const m2 of text11.matchAll(/(?:\bfrom\s*|\bimport\s*\(?\s*|\brequire\s*\(\s*)["']\.\.\/([A-Za-z0-9_.-]+)(?:\/|["'])/g)) out2.push(m2[1]);
+      for (const m2 of text12.matchAll(/(?:\bfrom\s*|\bimport\s*\(?\s*|\brequire\s*\(\s*)["']\.\.\/([A-Za-z0-9_.-]+)(?:\/|["'])/g)) out2.push(m2[1]);
     }
     return out2;
   };
@@ -149950,9 +149950,9 @@ function planTrim(src, keepIds, links) {
       continue;
     }
     const block = edited.get(r3);
-    let text11 = block ? serializeAt(block, app.dev, r3.open) : void 0;
-    if (r3 === app.home && homeModules?.text !== void 0) text11 = homeModules.text;
-    if (text11 !== void 0) cut2(r3.open, r3.close, text11);
+    let text12 = block ? serializeAt(block, app.dev, r3.open) : void 0;
+    if (r3 === app.home && homeModules?.text !== void 0) text12 = homeModules.text;
+    if (text12 !== void 0) cut2(r3.open, r3.close, text12);
   }
   if (templatedEmptied) cut2(templatedEmptied[0], templatedEmptied[1], "\n");
   dev += app.dev.slice(cursor);
@@ -150005,9 +150005,9 @@ function homeModulesPass(app, kept, edited) {
   const removedVertical = verticals.some(([, card2]) => !kept.has(app.exact.get(card2.screenId)));
   if (!removedVertical) return { dropped: [] };
   const block = edited.get(app.home);
-  const text11 = block ? serializeAt(block, app.dev, app.home.open) : app.dev.slice(app.home.open, app.home.close);
+  const text12 = block ? serializeAt(block, app.dev, app.home.open) : app.dev.slice(app.home.open, app.home.close);
   const installed = verticals.filter(([, card2]) => kept.has(app.exact.get(card2.screenId))).map(([v2]) => v2);
-  const patched = patchHomeModules(text11, installed);
+  const patched = patchHomeModules(text12, installed);
   if (!patched.droppedModules.length) return { dropped: [] };
   return { text: patched.src, dropped: patched.droppedModules };
 }
@@ -150497,8 +150497,8 @@ function workerReach(src) {
       const f2 = queue.shift();
       if (seen.has(f2)) continue;
       seen.add(f2);
-      const text11 = all.get(f2) ?? "";
-      for (const m2 of text11.matchAll(RELATIVE_IMPORT)) {
+      const text12 = all.get(f2) ?? "";
+      for (const m2 of text12.matchAll(RELATIVE_IMPORT)) {
         const r3 = resolveImport(f2, m2[1], all);
         if (r3 && !seen.has(r3)) queue.push(r3);
       }
@@ -150508,11 +150508,11 @@ function workerReach(src) {
     let fetchCall = false;
     const hits = [];
     for (const f2 of [...seen].sort()) {
-      const text11 = all.get(f2) ?? "";
+      const text12 = all.get(f2) ?? "";
       const before = wix.size;
-      for (const m2 of text11.matchAll(WIX_MODULE)) wix.add(m2[1].replace(/^@wix\/himalaya\//, "@himalaya/"));
-      const r3 = /\bwixApi\b/.test(text11);
-      const fe2 = /(?<![.\w])fetch\s*\(/.test(text11);
+      for (const m2 of text12.matchAll(WIX_MODULE)) wix.add(m2[1].replace(/^@wix\/himalaya\//, "@himalaya/"));
+      const r3 = /\bwixApi\b/.test(text12);
+      const fe2 = /(?<![.\w])fetch\s*\(/.test(text12);
       if (wix.size > before || r3 || fe2) hits.push(f2);
       raw ||= r3;
       fetchCall ||= fe2;
@@ -150961,10 +150961,10 @@ async function pushSetupRequest(options) {
       signal: AbortSignal.timeout(options.timeoutMs ?? (setup ? 12e4 : 3e4)),
       ...setup ? { body: JSON.stringify(options.body) } : {}
     });
-    const text11 = await response.text();
+    const text12 = await response.text();
     let parsed = null;
     try {
-      const value2 = text11 ? JSON.parse(text11) : null;
+      const value2 = text12 ? JSON.parse(text12) : null;
       parsed = value2 && typeof value2 === "object" && !Array.isArray(value2) ? value2 : null;
     } catch {
       parsed = null;
@@ -151108,8 +151108,8 @@ function appendProperties(literal, file2, lines) {
   const at2 = trailing ? literal.properties.end : last.end;
   const lead = trailing ? "" : ",";
   if (onOneLine(literal, file2)) {
-    const text11 = inline();
-    return { at: at2, end: at2, text: `${lead} ${trailing ? text11 : text11.replace(/,$/, "")}` };
+    const text12 = inline();
+    return { at: at2, end: at2, text: `${lead} ${trailing ? text12 : text12.replace(/,$/, "")}` };
   }
   const indent = lineIndent2(file2.text, last.getStart(file2));
   return { at: at2, end: at2, text: lead + lines.map((line) => `
@@ -151119,9 +151119,9 @@ function onOneLine(node, file2) {
   const line = (position) => file2.getLineAndCharacterOfPosition(position).line;
   return line(node.getStart(file2)) === line(node.getEnd());
 }
-function lineIndent2(text11, position) {
-  const lineStart = text11.lastIndexOf("\n", position - 1) + 1;
-  return /^[ \t]*/.exec(text11.slice(lineStart))[0];
+function lineIndent2(text12, position) {
+  const lineStart = text12.lastIndexOf("\n", position - 1) + 1;
+  return /^[ \t]*/.exec(text12.slice(lineStart))[0];
 }
 function applySplices(source, splices) {
   return [...splices].sort((a2, b2) => b2.at - a2.at).reduce((out2, s2) => out2.slice(0, s2.at) + s2.text + out2.slice(s2.end), source);
@@ -152630,9 +152630,9 @@ __export(screen_state_exports, {
 import { createHash as createHash26 } from "node:crypto";
 import { lstatSync as lstatSync16, readFileSync as readFileSync52 } from "node:fs";
 import { join as join41 } from "node:path";
-function quotableLine(text11) {
-  if (!text11) return void 0;
-  const first = text11.split(/\r?\n/).map((l2) => l2.trim()).find(Boolean);
+function quotableLine(text12) {
+  if (!text12) return void 0;
+  const first = text12.split(/\r?\n/).map((l2) => l2.trim()).find(Boolean);
   if (!first) return void 0;
   let line = first.replace(/\s+/g, " ");
   if (line.length > LINE_MAX) {
@@ -152645,9 +152645,9 @@ function quotableLine(text11) {
 function visibleText(html) {
   return html.replace(/<(script|style)\b[\s\S]*?<\/\1>/gi, " ").replace(/<[^>]*>/g, " ").replace(/&#x([0-9a-f]+);/gi, (_2, h2) => String.fromCodePoint(parseInt(h2, 16))).replace(/&#(\d+);/g, (_2, d2) => String.fromCodePoint(Number(d2))).replace(/&quot;/g, '"').replace(/&apos;/g, "'").replace(/&lt;/g, "<").replace(/&gt;/g, ">").replace(/&nbsp;/g, " ").replace(/&amp;/g, "&").replace(/\s+/g, " ");
 }
-function painted(text11, page) {
+function painted(text12, page) {
   if (page === void 0) return true;
-  const probe2 = text11.replace(/\s+/g, " ").trim().slice(0, 60);
+  const probe2 = text12.replace(/\s+/g, " ").trim().slice(0, 60);
   return !!probe2 && page.includes(probe2);
 }
 function errorMessageOf(s2) {
@@ -153926,8 +153926,8 @@ var init_cms_schema = __esm({
 
 // ../native-config/car.ts
 function parseCarConfig(configTs) {
-  const { text: text11, inString } = scanConfig(configTs);
-  for (const m2 of text11.matchAll(/\bcar\s*[:=]\s*\{([^}]*)\}/g)) {
+  const { text: text12, inString } = scanConfig(configTs);
+  for (const m2 of text12.matchAll(/\bcar\s*[:=]\s*\{([^}]*)\}/g)) {
     if (inString[m2.index]) continue;
     return { category: /category\s*:\s*["']([^"']+)["']/.exec(m2[1])?.[1] };
   }
@@ -154458,10 +154458,10 @@ function tokenColorIssues(dir, tokensPathOverride) {
     if (controlButton === void 0 || controlButton === null || typeof controlButton !== "object" || Array.isArray(controlButton)) return;
     const btn = controlButton;
     for (const size of ["sm", "md", "lg"]) {
-      const text11 = btn[size]?.text;
-      if (text11 === void 0 || typeof text11 === "string" && typo.has(text11)) continue;
+      const text12 = btn[size]?.text;
+      if (text12 === void 0 || typeof text12 === "string" && typo.has(text12)) continue;
       error(
-        `${tokensPath}: ${where}controls.button.${size}.text is ${JSON.stringify(text11)}, which names no \`typography\` token \u2014 every renderer would keep the built-in Button label. Name one that exists.`
+        `${tokensPath}: ${where}controls.button.${size}.text is ${JSON.stringify(text12)}, which names no \`typography\` token \u2014 every renderer would keep the built-in Button label. Name one that exists.`
       );
     }
     const variants = btn.variants;
@@ -154948,16 +154948,16 @@ function encode(value2, quote) {
   if (quote === "'") return `'${value2.replace(/[\\']/g, "\\$&").replace(/\n/g, "\\n")}'`;
   return `\`${value2.replace(/[\\`]|\$(?=\{)/g, "\\$&")}\``;
 }
-function syntaxErrors(file2, text11) {
+function syntaxErrors(file2, text12) {
   if (file2.endsWith(".json")) {
     try {
-      JSON.parse(text11);
+      JSON.parse(text12);
       return [];
     } catch (e2) {
       return [e2.message];
     }
   }
-  const out2 = ts8.transpileModule(text11, { fileName: file2, reportDiagnostics: true, compilerOptions: { target: ts8.ScriptTarget.ES2022 } });
+  const out2 = ts8.transpileModule(text12, { fileName: file2, reportDiagnostics: true, compilerOptions: { target: ts8.ScriptTarget.ES2022 } });
   return (out2.diagnostics ?? []).map((d2) => ts8.flattenDiagnosticMessageText(d2.messageText, "\n"));
 }
 function parses(dev, config) {
@@ -154978,10 +154978,10 @@ function sweepCopy(dir, pairs, dryRun) {
   const next = /* @__PURE__ */ new Map();
   const replaced = pairs.map(([from, to2]) => ({ from, to: to2, files: {} }));
   for (const f2 of files) {
-    const text11 = readFileSync60(join50(dir, f2), "utf8");
-    if (!pairs.some(([from]) => text11.includes(from) || text11.includes(JSON.stringify(from).slice(1, -1)))) continue;
+    const text12 = readFileSync60(join50(dir, f2), "utf8");
+    if (!pairs.some(([from]) => text12.includes(from) || text12.includes(JSON.stringify(from).slice(1, -1)))) continue;
     const kind = f2.endsWith(".json") ? ts8.ScriptKind.JSON : f2.endsWith("x") ? ts8.ScriptKind.TSX : ts8.ScriptKind.TS;
-    const sf2 = ts8.createSourceFile(f2, text11, ts8.ScriptTarget.Latest, true, kind);
+    const sf2 = ts8.createSourceFile(f2, text12, ts8.ScriptTarget.Latest, true, kind);
     const edits = [];
     const visit = (node) => {
       if ((ts8.isStringLiteral(node) || ts8.isNoSubstitutionTemplateLiteral(node)) && isCopy(node, f2)) {
@@ -154994,14 +154994,14 @@ function sweepCopy(dir, pairs, dryRun) {
         });
         if (value2 !== node.text) {
           const start = node.getStart(sf2);
-          edits.push({ start, end: node.end, text: encode(value2, text11[start]) });
+          edits.push({ start, end: node.end, text: encode(value2, text12[start]) });
         }
       }
       ts8.forEachChild(node, visit);
     };
     visit(sf2);
     if (!edits.length) continue;
-    let out2 = text11;
+    let out2 = text12;
     for (const e2 of edits.sort((a2, b2) => b2.start - a2.start)) out2 = out2.slice(0, e2.start) + e2.text + out2.slice(e2.end);
     if (f2.startsWith("tier5-src/_shared/") && f2.endsWith(".ts") && !out2.includes(SHARED_FORK_MARKER)) {
       out2 = `${SHARED_FORK_MARKER} \u2014 copy rewritten by \`himi template sweep\`
@@ -155302,9 +155302,9 @@ function verticalsFromBook(path2) {
   throw new Error(`no book.json / provisioning.overlay.json under ${path2} \u2014 run \`himi site analyze\` first, or pass --verticals`);
 }
 function recommendTemplates(input) {
-  const text11 = input.text ?? "";
-  const owner = OWNER_WORDS.test(text11);
-  const want = new Set(tokens(text11));
+  const text12 = input.text ?? "";
+  const owner = OWNER_WORDS.test(text12);
+  const want = new Set(tokens(text12));
   const byName3 = /* @__PURE__ */ new Map();
   for (const row2 of input.catalog) {
     const reasons = [];
@@ -155318,7 +155318,7 @@ function recommendTemplates(input) {
         reasons.push(`matches ${hit.map((h2) => `"${h2}"`).join(", ")}`);
       }
     }
-    if (text11) {
+    if (text12) {
       if (owner === isOwner) {
         score += 0.3;
         reasons.push(owner ? "owner/operations app, and this is an owner template" : "customer-facing app, and this is a customer template");
@@ -156926,9 +156926,9 @@ function xmlAttr(value2) {
   return value2.replace(/&/g, "&amp;").replace(/"/g, "&quot;").replace(/</g, "&lt;").replace(/>/g, "&gt;");
 }
 function renderHealthPermissionCopyXml(copy, indent) {
-  const text11 = copy?.trim();
-  if (!text11) return [];
-  return [`${indent}<meta-data android:name="${HEALTH_PERMISSION_COPY_META}" android:value="${xmlAttr(text11)}" />`];
+  const text12 = copy?.trim();
+  if (!text12) return [];
+  return [`${indent}<meta-data android:name="${HEALTH_PERMISSION_COPY_META}" android:value="${xmlAttr(text12)}" />`];
 }
 function renderModulesIosPackage(products, indent) {
   return products.flatMap((p2) => {
@@ -157095,8 +157095,8 @@ function swiftFilesWithModuleMarkers(app) {
       if (entry.isDirectory()) {
         if (!entry.name.endsWith(".xcodeproj")) stack.push(path2);
       } else if (entry.isFile() && entry.name.endsWith(".swift")) {
-        const text11 = readFileSync65(path2, "utf8");
-        if (hasMarkers(text11, "slash", LABEL_MODULES_SWIFT_IMPORT) || hasMarkers(text11, "slash", LABEL_MODULES_SWIFT_INSTALL)) out2.push(path2);
+        const text12 = readFileSync65(path2, "utf8");
+        if (hasMarkers(text12, "slash", LABEL_MODULES_SWIFT_IMPORT) || hasMarkers(text12, "slash", LABEL_MODULES_SWIFT_INSTALL)) out2.push(path2);
       }
     }
   }
@@ -157131,8 +157131,8 @@ function kotlinBootSourcesUnder(root) {
   }
   return out2.sort();
 }
-function stripComments2(text11) {
-  return text11.replace(/\/\*[\s\S]*?\*\//g, (c2) => c2.replace(/[^\n]/g, " ")).replace(/\/\/[^\n]*/g, "");
+function stripComments2(text12) {
+  return text12.replace(/\/\*[\s\S]*?\*\//g, (c2) => c2.replace(/[^\n]/g, " ")).replace(/\/\/[^\n]*/g, "");
 }
 function duplicateModuleInstalls(...texts) {
   const calls = ["installLinkedModules", ...NATIVE_MODULES.flatMap((m2) => m2.ios ? [`${m2.ios.product}.install`] : [])];
@@ -157194,19 +157194,19 @@ function hostAppliesDeferredWidgetActions(app) {
   }
   return false;
 }
-function countBeginMarkers(text11, kind, label3) {
-  return text11.split("\n").filter((l2) => isBegin(l2, kind, label3)).length;
+function countBeginMarkers(text12, kind, label3) {
+  return text12.split("\n").filter((l2) => isBegin(l2, kind, label3)).length;
 }
-function countEndMarkers(text11, kind, label3) {
-  return text11.split("\n").filter((l2) => isEnd(l2, kind, label3)).length;
+function countEndMarkers(text12, kind, label3) {
+  return text12.split("\n").filter((l2) => isEnd(l2, kind, label3)).length;
 }
-function hasMarkers(text11, kind, label3) {
-  const lines = text11.split("\n");
+function hasMarkers(text12, kind, label3) {
+  const lines = text12.split("\n");
   return lines.some((l2) => isBegin(l2, kind, label3)) && lines.some((l2) => isEnd(l2, kind, label3));
 }
-function assertSingleMarkerPair(text11, kind, label3, where = "the file") {
-  const opens = countBeginMarkers(text11, kind, label3);
-  const closes = countEndMarkers(text11, kind, label3);
+function assertSingleMarkerPair(text12, kind, label3, where = "the file") {
+  const opens = countBeginMarkers(text12, kind, label3);
+  const closes = countEndMarkers(text12, kind, label3);
   if (opens > 1 || closes > 1) {
     const which = opens > 1 ? `">>> ${label3}" opens ${opens} times` : `"<<< ${label3}" closes ${closes} times`;
     throw new Error(
@@ -157214,9 +157214,9 @@ function assertSingleMarkerPair(text11, kind, label3, where = "the file") {
     );
   }
 }
-function injectBlock(text11, kind, label3, render, where = "the file") {
-  assertSingleMarkerPair(text11, kind, label3, where);
-  const lines = text11.split("\n");
+function injectBlock(text12, kind, label3, render, where = "the file") {
+  assertSingleMarkerPair(text12, kind, label3, where);
+  const lines = text12.split("\n");
   const beginIdx = lines.findIndex((l2) => isBegin(l2, kind, label3));
   const endIdx = lines.findIndex((l2) => isEnd(l2, kind, label3));
   if (beginIdx === -1 || endIdx === -1 || endIdx < beginIdx) {
@@ -157256,8 +157256,8 @@ function applyToFile(path2, kind, label3, render, check) {
 function assertModuleFlagsMarkers(paths2) {
   for (const path2 of paths2) {
     if (!existsSync56(path2)) continue;
-    const text11 = readFileSync65(path2, "utf8");
-    if (hasMarkers(text11, "yaml", LABEL_MODULES_IOS_LINK) && !hasMarkers(text11, "yaml", LABEL_MODULES_IOS_FLAGS)) {
+    const text12 = readFileSync65(path2, "utf8");
+    if (hasMarkers(text12, "yaml", LABEL_MODULES_IOS_LINK) && !hasMarkers(text12, "yaml", LABEL_MODULES_IOS_FLAGS)) {
       throw new Error(`${path2} links modules (${LABEL_MODULES_IOS_LINK}) but has no ${LABEL_MODULES_IOS_FLAGS} block under its project-level settings:, so no module would install. Add the markers (see apps/_template).`);
     }
   }
@@ -157493,8 +157493,8 @@ function genNativeConfig(app, opts = {}) {
     }
   }
   for (const swift of swiftFilesWithModuleMarkers(app)) {
-    const text11 = readFileSync65(swift, "utf8");
-    if (!hasMarkers(text11, "slash", LABEL_MODULES_SWIFT_IMPORT) || !hasMarkers(text11, "slash", LABEL_MODULES_SWIFT_INSTALL)) {
+    const text12 = readFileSync65(swift, "utf8");
+    if (!hasMarkers(text12, "slash", LABEL_MODULES_SWIFT_IMPORT) || !hasMarkers(text12, "slash", LABEL_MODULES_SWIFT_INSTALL)) {
       throw new Error(`${app}: ${swift} must carry both ${LABEL_MODULES_SWIFT_IMPORT} and ${LABEL_MODULES_SWIFT_INSTALL} markers`);
     }
     files.push(applyToFile(swift, "slash", LABEL_MODULES_SWIFT_IMPORT, renderModulesSwiftImport, check));
@@ -157503,8 +157503,8 @@ function genNativeConfig(app, opts = {}) {
   files.push(...genCapabilityRegistrations(appDir(app), ids, check));
   const rce = declaresRichContentEditor(configTs);
   for (const yml of [iosYml, macosProjectYml(app)]) {
-    const text11 = existsSync56(yml) ? readFileSync65(yml, "utf8") : "";
-    const r3 = applyToFile(yml, "yaml", LABEL_LOCALWEB, renderLocalWebYaml(resourcesDirOf(text11), rce), check);
+    const text12 = existsSync56(yml) ? readFileSync65(yml, "utf8") : "";
+    const r3 = applyToFile(yml, "yaml", LABEL_LOCALWEB, renderLocalWebYaml(resourcesDirOf(text12), rce), check);
     if (existsSync56(yml)) assertLocalWebBlockLanded(app, rce, yml, r3.outcome);
     files.push(r3);
   }
@@ -158518,8 +158518,8 @@ function renderBase44Types(entities, app) {
     for (const f2 of fields) body.push(`  ${key2(f2.key)}${required3.has(f2.key) ? "" : "?"}: ${fieldType(f2)};`);
     body.push("};", `export const ${name} = entities<${name}Row>(${JSON.stringify(physicalEntityName(e2, app))});`);
   }
-  const text11 = body.join("\n");
-  const types = ["Json", "JsonObject"].filter((t2) => new RegExp(`\\b${t2}\\b`).test(text11)).map((t2) => `type ${t2}`);
+  const text12 = body.join("\n");
+  const types = ["Json", "JsonObject"].filter((t2) => new RegExp(`\\b${t2}\\b`).test(text12)).map((t2) => `type ${t2}`);
   if (usable.length) L2.push(`import { ${["entities", ...types].join(", ")} } from "@himalaya/base44";`);
   return [...L2, ...body].join("\n") + "\n";
 }
@@ -158531,14 +158531,14 @@ async function declaredEntities(dir) {
 async function writeBase44Types(dir, app) {
   const list2 = await declaredEntities(dir);
   if (!list2?.length) throw new Base44TypesError("no_base44_entities", "config.ts declares no base44.entities \u2014 nothing to type. Declare them (or run `himi base44 adopt`) first.");
-  const text11 = renderBase44Types(list2, app);
+  const text12 = renderBase44Types(list2, app);
   const path2 = join57(dir, BASE44_TYPES_PATH);
-  const changed = !existsSync58(path2) || readFileSync67(path2, "utf8") !== text11;
+  const changed = !existsSync58(path2) || readFileSync67(path2, "utf8") !== text12;
   if (changed) {
     mkdirSync26(dirname33(path2), { recursive: true });
-    writeFileSync22(path2, text11);
+    writeFileSync22(path2, text12);
   }
-  return { path: path2, changed, entities: text11.split("\nexport const ").length - 1 };
+  return { path: path2, changed, entities: text12.split("\nexport const ").length - 1 };
 }
 async function base44TypesIssues(dir, app, strict) {
   const path2 = join57(dir, BASE44_TYPES_PATH);
@@ -159505,8 +159505,8 @@ function isNoneEntry(entry) {
   const head = entryHead(entry);
   return NONE.test(entry) || head !== "" && NONE.test(head);
 }
-function parseDataAccess(text11, from) {
-  const body = text11.replace(/<!--[\s\S]*?(?:-->|$)/g, "");
+function parseDataAccess(text12, from) {
+  const body = text12.replace(/<!--[\s\S]*?(?:-->|$)/g, "");
   const heading = new RegExp(`(?:^|\\n)##[ \\t]+${DATA_ACCESS_HEADING}\\b[^\\n]*([\\s\\S]*?)(?=\\n##[ \\t]|$)`, "i").exec(body);
   if (!heading) return null;
   const lines = heading[1].split("\n").map((l2) => l2.trim()).filter((l2) => l2.startsWith("|"));
@@ -159533,13 +159533,13 @@ function readDataAccess(dir) {
   for (const name of ["SPEC.md", "MOBILE-UX.md"]) {
     const p2 = join63(dir, name);
     if (!existsSync63(p2)) continue;
-    let text11;
+    let text12;
     try {
-      text11 = readFileSync72(p2, "utf8");
+      text12 = readFileSync72(p2, "utf8");
     } catch {
       continue;
     }
-    const plan = parseDataAccess(text11, name);
+    const plan = parseDataAccess(text12, name);
     if (plan) return plan;
   }
   return null;
@@ -159695,7 +159695,7 @@ function readTestConfig(dir) {
       if (input !== void 0 && (!input || typeof input !== "object" || Array.isArray(input) || Object.values(input).some((v2) => typeof v2 !== "string"))) {
         throw new Error(`${TEST_CONFIG_FILE}: journeys[${i2}].input must be an object of string values \u2014 the screen input a nav edge would send, e.g. { "id": "svc-0001" }`);
       }
-      if (!Array.isArray(journey.expectText) || !journey.expectText.length || journey.expectText.some((text11) => typeof text11 !== "string" || !text11.trim())) {
+      if (!Array.isArray(journey.expectText) || !journey.expectText.length || journey.expectText.some((text12) => typeof text12 !== "string" || !text12.trim())) {
         throw new Error(`${TEST_CONFIG_FILE}: journeys[${i2}] needs non-empty expectText values that prove a visible result`);
       }
     });
@@ -161385,14 +161385,14 @@ import { join as join69 } from "node:path";
 function mobileUxIssues(dir, strict) {
   const file2 = join69(dir, "MOBILE-UX.md");
   if (!existsSync67(file2)) return [];
-  let text11;
+  let text12;
   try {
-    text11 = readFileSync77(file2, "utf8");
+    text12 = readFileSync77(file2, "utf8");
   } catch {
     return [];
   }
-  if (!text11) return [];
-  return mobileUxMarkerFindings(text11, recordedRenderWidths(dir)).map((finding2) => {
+  if (!text12) return [];
+  return mobileUxMarkerFindings(text12, recordedRenderWidths(dir)).map((finding2) => {
     const scaffoldAdvisory = finding2.code === "missing-width-evidence";
     return {
       screen: null,
@@ -163216,12 +163216,12 @@ async function runRemoteFunctionOperation(input) {
   if (input.boCookie) headers2.cookie = input.boCookie;
   if (input.previewToken) headers2["x-himalaya-preview-token"] = input.previewToken;
   const response = await (input.fetchImpl ?? fetch)(url, { method, headers: headers2 });
-  const text11 = await response.text();
+  const text12 = await response.text();
   let body;
   try {
-    body = JSON.parse(text11);
+    body = JSON.parse(text12);
   } catch {
-    body = text11;
+    body = text12;
   }
   return { ok: response.ok, status: response.status, body };
 }
@@ -164325,18 +164325,18 @@ function walkSource(dir, root = dir) {
     const ext = entry.name.slice(entry.name.lastIndexOf("."));
     if (!SOURCE_EXTENSIONS.has(ext)) continue;
     const absolute = join77(dir, entry.name);
-    const text11 = readText2(absolute);
-    if (text11 !== null) found.push({ path: relative15(root, absolute), text: text11 });
+    const text12 = readText2(absolute);
+    if (text12 !== null) found.push({ path: relative15(root, absolute), text: text12 });
   }
   return found;
 }
-function blankMatrixRows(text11) {
-  const acceptance = mobileUxSection(mobileUxDocumentBody(text11), "Implementation acceptance") ?? "";
+function blankMatrixRows(text12) {
+  const acceptance = mobileUxSection(mobileUxDocumentBody(text12), "Implementation acceptance") ?? "";
   return /\|\s*(?:Ready|Empty|Add\s*\/\s*edit|Saved\s*\/\s*completed|Error\s*\/\s*recovery)\s*\|\s*\|\s*\|\s*\|\s*\|/i.test(acceptance);
 }
 function usesAppNetwork(source) {
-  const code = (text11) => text11.replace(/\/\*[\s\S]*?\*\//g, "").replace(/\/\/[^\n]*/g, "");
-  return source.some(({ text: text11 }) => /\bwixApi\b|(?:from|import)\s*["']@(?:himalaya|wix\/himalaya)\/wix-[^"']+["']/.test(code(text11)));
+  const code = (text12) => text12.replace(/\/\*[\s\S]*?\*\//g, "").replace(/\/\/[^\n]*/g, "");
+  return source.some(({ text: text12 }) => /\bwixApi\b|(?:from|import)\s*["']@(?:himalaya|wix\/himalaya)\/wix-[^"']+["']/.test(code(text12)));
 }
 function auditUx(content, strict = false) {
   const dir = resolve62(content);
@@ -168019,24 +168019,24 @@ async function readCapped(res, maxChars) {
     return null;
   }
   if (!res.body) {
-    const text12 = await res.text();
-    return text12.length > maxChars ? null : text12;
+    const text13 = await res.text();
+    return text13.length > maxChars ? null : text13;
   }
   const reader = res.body.getReader();
   const decoder = new TextDecoder();
-  let text11 = "";
+  let text12 = "";
   for (; ; ) {
     const { done, value: value2 } = await reader.read();
     if (done) break;
-    text11 += decoder.decode(value2, { stream: true });
-    if (text11.length > maxChars) {
+    text12 += decoder.decode(value2, { stream: true });
+    if (text12.length > maxChars) {
       await reader.cancel().catch(() => {
       });
       return null;
     }
   }
-  text11 += decoder.decode();
-  return text11.length > maxChars ? null : text11;
+  text12 += decoder.decode();
+  return text12.length > maxChars ? null : text12;
 }
 async function memberForwardCall(match, body, memberToken, fetchImpl = fetch, extraHeaders = {}) {
   const headers2 = { Accept: "application/json", ...extraHeaders };
@@ -168051,9 +168051,9 @@ async function memberForwardCall(match, body, memberToken, fetchImpl = fetch, ex
       credentials: "omit",
       signal: AbortSignal.timeout(FORWARD_TIMEOUT_MS)
     });
-    const text11 = await readCapped(res, MAX_RESPONSE_CHARS);
-    if (text11 === null) return { ok: false, code: "forward_too_large" };
-    return { ok: true, status: res.status, body: text11 };
+    const text12 = await readCapped(res, MAX_RESPONSE_CHARS);
+    if (text12 === null) return { ok: false, code: "forward_too_large" };
+    return { ok: true, status: res.status, body: text12 };
   } catch {
     return { ok: false, code: "forward_failed" };
   }
@@ -168276,10 +168276,10 @@ async function hostedAuthUrl(req, visitorToken, fetchImpl = fetch) {
       }
     })
   });
-  const text11 = await res.text();
+  const text12 = await res.text();
   let parsed = {};
   try {
-    parsed = text11 ? JSON.parse(text11) : {};
+    parsed = text12 ? JSON.parse(text12) : {};
   } catch {
   }
   const fullUrl = parsed.redirectSession?.fullUrl;
@@ -168299,10 +168299,10 @@ async function exchangeAuthCode(cfg, code, verifier, fetchImpl = fetch) {
       redirectUri: cfg.redirectUri
     })
   });
-  const text11 = await res.text();
+  const text12 = await res.text();
   let parsed = {};
   try {
-    parsed = text11 ? JSON.parse(text11) : {};
+    parsed = text12 ? JSON.parse(text12) : {};
   } catch {
   }
   if (res.status !== 200 || !parsed.access_token) throw new Error(`token exchange failed (${res.status})`);
@@ -169923,11 +169923,11 @@ async function localizeConfigResponse(res, kind, header) {
       header
     )
   };
-  const text11 = JSON.stringify(next);
+  const text12 = JSON.stringify(next);
   const headers2 = new Headers(res.headers);
   headers2.delete("etag");
-  headers2.set("content-length", String(new TextEncoder().encode(text11).length));
-  return new Response(text11, { status: 200, headers: headers2 });
+  headers2.set("content-length", String(new TextEncoder().encode(text12).length));
+  return new Response(text12, { status: 200, headers: headers2 });
 }
 function makeRunHandler(opts) {
   const mount = opts.chrome === "app" ? "/app" : "/preview";
@@ -170136,8 +170136,8 @@ var init_node_adapter = __esm({
 function authConfigOf(appConfig) {
   if (!appConfig) return void 0;
   try {
-    const text11 = typeof appConfig === "string" ? appConfig : new TextDecoder().decode(appConfig);
-    return JSON.parse(text11)?.authConfig ?? void 0;
+    const text12 = typeof appConfig === "string" ? appConfig : new TextDecoder().decode(appConfig);
+    return JSON.parse(text12)?.authConfig ?? void 0;
   } catch {
     return void 0;
   }
@@ -170514,16 +170514,16 @@ async function releasePayloadFromDir(root, app, header) {
   const manifest2 = await store.getManifest(app);
   if (!manifest2) throw new Error(`no release manifest for ${app} under ${root}`);
   const b64 = (b2) => b2 ? Buffer.from(b2).toString("base64") : void 0;
-  const text11 = (b2) => b2 ? new TextDecoder().decode(b2) : void 0;
+  const text12 = (b2) => b2 ? new TextDecoder().decode(b2) : void 0;
   const screens = {};
   const docs = {};
   const addDoc = async (hash2) => {
     if (!hash2 || docs[hash2] !== void 0) return;
-    const d2 = text11(await store.getDoc?.(app, hash2) ?? null);
+    const d2 = text12(await store.getDoc?.(app, hash2) ?? null);
     if (d2 !== void 0) docs[hash2] = d2;
   };
   for (const [id, meta] of Object.entries(manifest2.screens ?? {})) {
-    const s2 = text11(await store.getScreen(app, id));
+    const s2 = text12(await store.getScreen(app, id));
     if (s2 !== void 0) screens[id] = s2;
     await addDoc(meta.descriptorHash);
   }
@@ -170544,10 +170544,10 @@ async function releasePayloadFromDir(root, app, header) {
   }
   const widgets = {};
   for (const id of Object.keys(manifest2.widgets ?? {})) {
-    const w2 = text11(await store.getWidget?.(app, id) ?? null);
+    const w2 = text12(await store.getWidget?.(app, id) ?? null);
     if (w2 !== void 0) widgets[id] = w2;
   }
-  const appConfig = text11(await store.getAppConfig(app));
+  const appConfig = text12(await store.getAppConfig(app));
   const wixClientId = appConfigWixClientId(appConfig);
   return {
     app,
@@ -170557,7 +170557,7 @@ async function releasePayloadFromDir(root, app, header) {
     docs,
     assets,
     widgets,
-    tokens: text11(await store.getTokens(app)),
+    tokens: text12(await store.getTokens(app)),
     appConfig,
     icon: b64(await store.getIcon?.(app) ?? null),
     header,
@@ -170778,6 +170778,164 @@ var init_store_iap_purchases = __esm({
   }
 });
 
+// src/apple-keys.ts
+var apple_keys_exports = {};
+__export(apple_keys_exports, {
+  runAppleKeys: () => runAppleKeys
+});
+import { createPublicKey as createPublicKey2 } from "node:crypto";
+import { readFileSync as readFileSync102, realpathSync as realpathSync13, statSync as statSync25 } from "node:fs";
+function readKey(flags, kind) {
+  const names2 = kind === "asc" ? ["asc-key-file", "asc-key-id", "asc-issuer-id"] : ["iap-key", "iap-key-id", "iap-issuer-id"];
+  if (names2.every((name) => flags[name] === void 0)) return void 0;
+  const [file2, keyId, issuerId] = names2.map((name) => text8(flags[name]));
+  if (!file2 || !keyId || !issuerId) throw new UsageError(`Supply --${names2.join(" --")} together.`);
+  try {
+    const path2 = realpathSync13(file2);
+    assertCredentialOutsideRepo(names2[0], path2);
+    if (statSync25(path2).size > 16384) throw new Error("oversized");
+    const key3 = { keyId, issuerId, key: readFileSync102(path2, "utf8") };
+    if (!isAppStoreConnectKey(key3)) throw new Error("invalid key");
+    return key3;
+  } catch {
+    throw new UsageError(`Invalid ${kind.toUpperCase()} key: use a P-256 PKCS#8 .p8 file outside the repository, a 10-character key ID, and a UUID issuer ID.`);
+  }
+}
+function publicKeyBytes(key3) {
+  return createPublicKey2(key3).export({ type: "spki", format: "der" });
+}
+async function ascRequest(session, input, fetchImpl) {
+  if (credentialHostRefusal(session.target.control)) throw new Error("insecure target");
+  const base = session.target.control.replace(/\/$/, "");
+  const query = new URLSearchParams({ app: input.app, site: input.site });
+  const response = await fetchImpl(`${base}/v1/admin/store/asc-key${input.key ? "" : `?${query}`}`, {
+    method: input.key ? "POST" : "GET",
+    redirect: "error",
+    signal: AbortSignal.timeout(6e4),
+    headers: {
+      Authorization: session.wixToken,
+      "x-control-token": session.controlToken,
+      ...session.previewTag ? { "x-wix-route-serve": session.previewTag } : {},
+      ...input.key ? { "content-type": "application/json" } : {}
+    },
+    ...input.key ? { body: JSON.stringify({ app: input.app, site: input.site, appStoreConnect: input.key }) } : {}
+  });
+  if (!response.ok) throw new Error("ASC request failed");
+  const body = await response.json();
+  if (body.ok !== true || typeof body.asc?.present !== "boolean") throw new Error("invalid status");
+  return {
+    present: body.asc.present,
+    ...typeof body.asc.keyId === "string" ? { keyId: body.asc.keyId } : {},
+    ...typeof body.asc.issuerId === "string" ? { issuerId: body.asc.issuerId } : {}
+  };
+}
+async function runAppleKeys(pos, flags, io2, deps = {}) {
+  const completed = [];
+  try {
+    const operation = pos[2];
+    if (operation !== "setup" && operation !== "status") throw new UsageError("Use himi store apple-keys setup|status.");
+    const app = text8(flags.app), site = text8(flags.site)?.toLowerCase(), bundleId = text8(flags["bundle-id"]);
+    if (!app || !site || !bundleId) throw new UsageError("Supply --app <slug> --site <metaSiteId> --bundle-id <id>.");
+    if (!isValidAppId(app) || !/^[0-9a-f]{8}(-[0-9a-f]{4}){3}-[0-9a-f]{12}$/i.test(site) || !/^[A-Za-z0-9-]+(\.[A-Za-z0-9-]+)+$/.test(bundleId)) throw new UsageError("Invalid app, site or bundle ID.");
+    for (const name of ["yes", "dry-run", "json"]) if (flags[name] !== void 0 && typeof flags[name] !== "boolean") throw new UsageError(`--${name} is a boolean flag.`);
+    const setup = operation === "setup", dryRun = flags["dry-run"] === true;
+    if (setup && !dryRun && flags.yes !== true) throw new UsageError("Key setup writes to Wix; pass --yes or preview with --dry-run.");
+    const owner = await (deps.session ?? hostedOwnerSession)(flags);
+    if (!owner.ok) {
+      io2.error(JSON.stringify({ ok: false, code: "owner_session_unavailable", error: owner.error, ...owner.hint ? { hint: owner.hint } : {} }));
+      return owner.exit;
+    }
+    const ascKey = setup ? readKey(flags, "asc") : void 0;
+    const iapKey = setup ? readKey(flags, "iap") : void 0;
+    if (setup && !ascKey && !iapKey) throw new UsageError("Supply an ASC key, an In-App Purchase key, or both. Each needs its own key ID and issuer ID.");
+    if (!setup && Object.keys(flags).some((name) => /^(asc|iap)-(key|issuer)/.test(name))) throw new UsageError("Upload keys with setup, not status.");
+    if (ascKey && iapKey && publicKeyBytes(ascKey.key).equals(publicKeyBytes(iapKey.key))) throw new UsageError("ASC and In-App Purchase require separate keys.");
+    let asc = { present: null, state: "not_checked" };
+    let iap = { present: null, state: "not_checked" };
+    let failed3 = false;
+    if (ascKey || !setup) {
+      try {
+        asc = await ascRequest(owner.session, { app, site, ...ascKey && !dryRun ? { key: ascKey } : {} }, deps.fetchImpl ?? fetch);
+        if (ascKey && !dryRun) {
+          completed.push("asc");
+          if (!asc.present || asc.keyId !== ascKey.keyId || asc.issuerId !== ascKey.issuerId) throw new Error("ASC key not confirmed");
+        }
+      } catch {
+        asc = { present: null, state: "unavailable" };
+        failed3 = true;
+      }
+    }
+    let purchasesAppId = null;
+    if (iapKey || !setup) {
+      try {
+        const api2 = createPurchasesOwnerApi((deps.purchases ?? ((id) => ownerTransport(id, (url, init) => (deps.fetchImpl ?? fetch)(url, { ...init, redirect: "error" }), void 0, userSiteToken)))(site));
+        let purchasesApp = (await api2.listApps()).find((candidate) => candidate.bundleId === bundleId);
+        if (iapKey && !dryRun) {
+          if (!purchasesApp) {
+            try {
+              purchasesApp = await api2.registerApp({ name: text8(flags["display-name"]) ?? app, bundleId });
+              completed.push("purchases_app");
+            } catch (error) {
+              if (refusalCode(error) !== "ALREADY_EXISTS") throw error;
+              purchasesApp = (await api2.listApps()).find((candidate) => candidate.bundleId === bundleId);
+              if (!purchasesApp) throw error;
+            }
+          }
+          purchasesAppId = purchasesApp.id;
+          await api2.setAppleCredentials(purchasesApp.id, { keyId: iapKey.keyId, issuerId: iapKey.issuerId, privateKey: iapKey.key });
+          completed.push("iap");
+          purchasesApp = (await api2.listApps()).find((candidate) => candidate.bundleId === bundleId);
+          if (!purchasesApp?.privateKeyStored) throw new Error("IAP key not confirmed");
+        }
+        iap = { present: purchasesApp?.privateKeyStored === true };
+        purchasesAppId = purchasesApp?.id ?? null;
+      } catch {
+        iap = { present: null, state: "unavailable" };
+        failed3 = true;
+      }
+    }
+    const result = {
+      ok: !failed3,
+      app,
+      site,
+      bundleId,
+      asc,
+      iap,
+      ready: asc.present === true && iap.present === true,
+      purchasesAppId,
+      ...failed3 ? { code: "apple_keys_failed", hint: "Read apple-keys status before retrying; completed writes remain stored." } : {},
+      ...dryRun ? { dryRun: true, planned: [...ascKey ? ["asc"] : [], ...iapKey ? ["iap"] : []] } : {},
+      completed
+    };
+    (failed3 ? io2.error : io2.log)(JSON.stringify(result));
+    return failed3 ? 1 : 0;
+  } catch (error) {
+    const usage = error instanceof UsageError;
+    io2.error(JSON.stringify({
+      ok: false,
+      code: usage ? "invalid_usage" : "apple_keys_failed",
+      completed,
+      ...usage ? { error: error.message } : { hint: "Read apple-keys status before retrying; completed writes remain stored. Check Wix login, site ownership and service availability." }
+    }));
+    return usage ? 2 : 1;
+  }
+}
+var text8, UsageError;
+var init_apple_keys = __esm({
+  "src/apple-keys.ts"() {
+    init_hosted_owner();
+    init_store_iap_purchases();
+    init_wix_owner();
+    init_preflight();
+    init_push_setup_apple_credentials();
+    init_contract();
+    init_credential_hosts();
+    text8 = (value2) => typeof value2 === "string" && value2.trim() ? value2.trim() : void 0;
+    UsageError = class extends Error {
+    };
+  }
+});
+
 // src/iap-catalog-client.ts
 function createIapCatalogClient(call, route) {
   if (!/^\/(?!\/)[^\s?#]+$/.test(route.prefix)) throw new IapCatalogError("catalog_route_unavailable", "IAP Catalog requires an explicit gateway path");
@@ -171067,7 +171225,7 @@ var init_embedded_bundles = __esm({
 });
 
 // ../store-release/register-bundle.ts
-import { readFileSync as readFileSync102 } from "node:fs";
+import { readFileSync as readFileSync103 } from "node:fs";
 import { createPrivateKey as createPrivateKey4, sign as sign2 } from "node:crypto";
 function b64url3(b2) {
   return Buffer.from(b2).toString("base64").replace(/\+/g, "-").replace(/\//g, "_").replace(/=+$/, "");
@@ -171085,7 +171243,7 @@ function bundleIdBody(identifier, name, platform = "IOS") {
 async function registerBundleId(opts) {
   const env = requireEnv(["ASC_KEY_ID", "ASC_ISSUER_ID", "ASC_KEY_PATH"]);
   assertCredentialOutsideRepo("ASC_KEY_PATH", env.ASC_KEY_PATH);
-  const jwt = ascJwt(env.ASC_KEY_ID, env.ASC_ISSUER_ID, readFileSync102(env.ASC_KEY_PATH, "utf8"), Math.floor(Date.now() / 1e3));
+  const jwt = ascJwt(env.ASC_KEY_ID, env.ASC_ISSUER_ID, readFileSync103(env.ASC_KEY_PATH, "utf8"), Math.floor(Date.now() / 1e3));
   const res = await fetch(`${ASC_API}/v1/bundleIds`, {
     method: "POST",
     headers: { Authorization: `Bearer ${jwt}`, "Content-Type": "application/json" },
@@ -171095,11 +171253,11 @@ async function registerBundleId(opts) {
     const j2 = await res.json();
     return { status: "created", id: j2.data?.id };
   }
-  const text11 = await res.text();
-  if (res.status === 409 || /already (exists|in use)|duplicate|ENTITY_ERROR.*identifier/i.test(text11)) {
+  const text12 = await res.text();
+  if (res.status === 409 || /already (exists|in use)|duplicate|ENTITY_ERROR.*identifier/i.test(text12)) {
     return { status: "exists" };
   }
-  throw new Error(`POST /v1/bundleIds \u2192 ${res.status}: ${text11.slice(0, 300)}`);
+  throw new Error(`POST /v1/bundleIds \u2192 ${res.status}: ${text12.slice(0, 300)}`);
 }
 async function main() {
   const [app, ...rest] = process.argv.slice(2);
@@ -171115,7 +171273,7 @@ async function main() {
   }
   const ni2 = rest.indexOf("--name");
   const name = ni2 >= 0 ? rest[ni2 + 1] : cfg.app ?? app;
-  const yml = readFileSync102(iosProjectYml(app), "utf8");
+  const yml = readFileSync103(iosProjectYml(app), "utf8");
   for (const { id, label: label3 } of [{ id: identifier, label: name }, ...embeddedBundles(yml).map((b2) => ({
     id: embeddedBundleId(identifier, b2),
     label: `${name} ${embeddedAppIdLabel(b2)}`
@@ -171352,9 +171510,9 @@ var init_iap_client = __esm({
           retryAfterMs(response.headers.get("retry-after"), this.now())
         );
       }
-      scrub(text11) {
+      scrub(text12) {
         const { keyId, issuerId, privateKeyPem } = this.options.key;
-        let out2 = text11;
+        let out2 = text12;
         for (const literal of [this.token?.value, privateKeyPem, issuerId, keyId]) {
           if (literal) out2 = out2.split(literal).join("[redacted]");
         }
@@ -171524,19 +171682,19 @@ var init_iap_api = __esm({
         });
         return toVersion(requireSingle(doc, "in-app purchase version"));
       }
-      async createLocalization(versionId, text11) {
+      async createLocalization(versionId, text12) {
         const doc = await this.client.post("/v2/inAppPurchaseLocalizations", {
           data: {
             type: "inAppPurchaseLocalizations",
-            attributes: { locale: text11.locale, name: text11.name, description: text11.description },
+            attributes: { locale: text12.locale, name: text12.name, description: text12.description },
             relationships: { version: related("inAppPurchaseVersions", versionId) }
           }
         });
         return toLocalization(requireSingle(doc, "localization"));
       }
-      async updateLocalization(localizationId, text11) {
+      async updateLocalization(localizationId, text12) {
         const doc = await this.client.patch(`/v2/inAppPurchaseLocalizations/${enc(localizationId)}`, {
-          data: { type: "inAppPurchaseLocalizations", id: localizationId, attributes: { name: text11.name, description: text11.description } }
+          data: { type: "inAppPurchaseLocalizations", id: localizationId, attributes: { name: text12.name, description: text12.description } }
         });
         return toLocalization(requireSingle(doc, "localization"));
       }
@@ -171769,9 +171927,9 @@ function createCatalogIapApi(client2, appId2) {
   const checkedApp = async (appleAppId) => {
     const reply = await client2.readAppleApp(appId2);
     if (reply.appleAppId !== appleAppId || reply.resource.id !== appleAppId) throw new Error("Catalog's verified Apple app differs from the manifest");
-    return { id: reply.resource.id, bundleId: text8(reply.resource, "bundleId") };
+    return { id: reply.resource.id, bundleId: text9(reply.resource, "bundleId") };
   };
-  const points = async (id, territory) => (await client2.listResources(appId2, "PRICE_POINT", { inAppPurchaseId: id, territory })).resources.map((point) => ({ id: point.id, customerPrice: text8(point, "customerPrice") }));
+  const points = async (id, territory) => (await client2.listResources(appId2, "PRICE_POINT", { inAppPurchaseId: id, territory })).resources.map((point) => ({ id: point.id, customerPrice: text9(point, "customerPrice") }));
   const desired = (item) => ({ localizations: item.localizations, price: selection(item.price), territories: item.territories });
   const mapping = async (item) => {
     const rule = item.wix && !item.unlocks?.length ? APPLE_PROVISIONING_RULES[item.wix.entityType] : void 0;
@@ -171850,7 +172008,7 @@ function createCatalogIapApi(client2, appId2) {
     },
     readApp: checkedApp,
     findBundles: async () => missing2("bundle-verification (performed on the server)"),
-    listTerritories: async () => (await client2.listResources(appId2, "TERRITORY")).resources.map((r3) => ({ id: r3.id, currency: text8(r3, "currency") })),
+    listTerritories: async () => (await client2.listResources(appId2, "TERRITORY")).resources.map((r3) => ({ id: r3.id, currency: text9(r3, "currency") })),
     listProducts: async (appleAppId) => {
       const reply = await client2.listInAppPurchases(appId2);
       if (reply.appleAppId !== appleAppId) throw new Error("Catalog returned products for another Apple app");
@@ -171908,17 +172066,17 @@ function createCatalogIapApi(client2, appId2) {
     deleteReviewScreenshot: async () => missing2("review-screenshot/delete")
   };
 }
-var text8, product, version3, localization;
+var text9, product, version3, localization;
 var init_iap_catalog_api = __esm({
   "../store-release/iap-catalog-api.ts"() {
     init_wix_payments_contract();
     init_iap_catalog_client();
     init_store_iap_purchases();
     init_iap_api();
-    text8 = (resource, key3) => typeof resource.attributes[key3] === "string" ? resource.attributes[key3] : "";
-    product = (resource) => ({ id: resource.id, productId: text8(resource, "productId"), referenceName: text8(resource, "name"), type: text8(resource, "inAppPurchaseType"), state: text8(resource, "state") });
-    version3 = (resource) => ({ id: resource.id, state: text8(resource, "state"), ...typeof resource.attributes.version === "number" ? { version: resource.attributes.version } : {} });
-    localization = (resource) => ({ id: resource.id, locale: text8(resource, "locale"), name: text8(resource, "name"), description: text8(resource, "description") });
+    text9 = (resource, key3) => typeof resource.attributes[key3] === "string" ? resource.attributes[key3] : "";
+    product = (resource) => ({ id: resource.id, productId: text9(resource, "productId"), referenceName: text9(resource, "name"), type: text9(resource, "inAppPurchaseType"), state: text9(resource, "state") });
+    version3 = (resource) => ({ id: resource.id, state: text9(resource, "state"), ...typeof resource.attributes.version === "number" ? { version: resource.attributes.version } : {} });
+    localization = (resource) => ({ id: resource.id, locale: text9(resource, "locale"), name: text9(resource, "name"), description: text9(resource, "description") });
   }
 });
 
@@ -172026,8 +172184,8 @@ function reportDuplicateMappings(reader, items) {
   reader.duplicates(items.flatMap((i2) => [i2.entitlement, ...(i2.unlocks ?? []).map((u2) => u2.entitlement)]), "items", "entitlement");
   reader.duplicates(items.map((i2) => i2.referenceName), "items", "referenceName");
 }
-function looksLikeCredential(text11) {
-  return CREDENTIAL_SHAPES.some((shape) => shape.test(text11));
+function looksLikeCredential(text12) {
+  return CREDENTIAL_SHAPES.some((shape) => shape.test(text12));
 }
 function reportCredentialMaterial(reader, value2, path2) {
   if (typeof value2 === "string") {
@@ -172040,15 +172198,15 @@ function reportCredentialMaterial(reader, value2, path2) {
     for (const [key3, v2] of Object.entries(value2)) reportCredentialMaterial(reader, v2, childPath(path2, key3));
   }
 }
-function parseJson3(text11, label3) {
+function parseJson3(text12, label3) {
   try {
-    return JSON.parse(text11);
+    return JSON.parse(text12);
   } catch (e2) {
     throw new Error(`${label3} is not valid JSON: ${e2.message}`);
   }
 }
-function parseIapManifest(text11, label3) {
-  const doc = parseJson3(text11, label3);
+function parseIapManifest(text12, label3) {
+  const doc = parseJson3(text12, label3);
   const reader = new ManifestReader();
   const obj7 = reader.object(doc, "", MANIFEST_KEYS);
   if (obj7.manifestVersion !== 1) reader.problems.push("manifestVersion must be 1");
@@ -172996,9 +173154,9 @@ async function ensure(spec, sleep) {
   }
 }
 function textFor(item, locale) {
-  const text11 = item.localizations.find((l2) => l2.locale === locale);
-  if (!text11) throw new Error(`no ${locale} localization in the manifest for ${item.productId}`);
-  return text11;
+  const text12 = item.localizations.find((l2) => l2.locale === locale);
+  if (!text12) throw new Error(`no ${locale} localization in the manifest for ${item.productId}`);
+  return text12;
 }
 async function findProduct(api2, appId2, productId) {
   return (await api2.listProducts(appId2)).find((p2) => p2.productId === productId);
@@ -173057,14 +173215,14 @@ async function deleteLeftoverScreenshot(context, resourceId) {
 }
 async function upsertManagedLocalization(run2, locale, context) {
   const resourceId = required(run2.resourceId, "the product id");
-  const text11 = textFor(run2.item, locale);
+  const text12 = textFor(run2.item, locale);
   const { api: api2, sleep } = context;
   const find2 = async () => {
     const version5 = await findDraft(api2, resourceId);
-    const localization2 = version5 && await findLocalization(api2, version5.id, locale, text11);
+    const localization2 = version5 && await findLocalization(api2, version5.id, locale, text12);
     return version5 && localization2 ? { version: version5, localization: localization2, outcome: "ALREADY_APPLIED" } : void 0;
   };
-  const { value: value2, state } = await ensure({ write: () => api2.managed.upsertLocalization(resourceId, text11), find: find2 }, sleep);
+  const { value: value2, state } = await ensure({ write: () => api2.managed.upsertLocalization(resourceId, text12), find: find2 }, sleep);
   run2.versionId = value2.version.id;
   return { state: value2.outcome === "ALREADY_APPLIED" ? "reconciled" : state, resourceId: value2.localization.id };
 }
@@ -173089,16 +173247,16 @@ function operationRunners(context, manifest2) {
     createLocalization: async (run2, op) => {
       if (api2.managed) return upsertManagedLocalization(run2, op.locale, context);
       const versionId = required(run2.versionId, "the draft version");
-      const text11 = textFor(run2.item, op.locale);
-      const { value: value2, state } = await ensure({ write: () => api2.createLocalization(versionId, text11), find: () => findLocalization(api2, versionId, text11.locale) }, sleep);
+      const text12 = textFor(run2.item, op.locale);
+      const { value: value2, state } = await ensure({ write: () => api2.createLocalization(versionId, text12), find: () => findLocalization(api2, versionId, text12.locale) }, sleep);
       return { state, resourceId: value2.id };
     },
     updateLocalization: async (run2, op) => {
       if (api2.managed) return upsertManagedLocalization(run2, op.locale, context);
       const versionId = required(run2.versionId, "the draft version");
-      const text11 = textFor(run2.item, op.locale);
-      const localizationId = required(run2.localizations.find((l2) => l2.locale === text11.locale)?.id, `the ${text11.locale} localization`);
-      const { value: value2, state } = await ensure({ write: () => api2.updateLocalization(localizationId, text11), find: () => findLocalization(api2, versionId, text11.locale, text11) }, sleep);
+      const text12 = textFor(run2.item, op.locale);
+      const localizationId = required(run2.localizations.find((l2) => l2.locale === text12.locale)?.id, `the ${text12.locale} localization`);
+      const { value: value2, state } = await ensure({ write: () => api2.updateLocalization(localizationId, text12), find: () => findLocalization(api2, versionId, text12.locale, text12) }, sleep);
       return { state, resourceId: value2.id };
     },
     setPrice: async (run2) => {
@@ -173351,7 +173509,7 @@ __export(credential_profile_exports, {
   profilePath: () => profilePath,
   resolveStoreCredentials: () => resolveStoreCredentials
 });
-import { existsSync as existsSync90, readFileSync as readFileSync103 } from "node:fs";
+import { existsSync as existsSync90, readFileSync as readFileSync104 } from "node:fs";
 import { homedir as homedir11 } from "node:os";
 import { join as join95 } from "node:path";
 function credentialsDir(home = homedir11()) {
@@ -173365,10 +173523,10 @@ function profilePath(name, home = homedir11()) {
   }
   return join95(credentialsDir(home), `${name}.json`);
 }
-function parseProfile(text11, label3) {
+function parseProfile(text12, label3) {
   let doc;
   try {
-    doc = JSON.parse(text11);
+    doc = JSON.parse(text12);
   } catch (e2) {
     throw new Error(`${label3} is not valid JSON: ${e2.message}`);
   }
@@ -173394,7 +173552,7 @@ function resolveStoreCredentials(opts) {
   const { app, cfg } = opts;
   const env = opts.env ?? process.env;
   const home = opts.home ?? homedir11();
-  const read = opts.readProfile ?? ((p2) => readFileSync103(p2, "utf8"));
+  const read = opts.readProfile ?? ((p2) => readFileSync104(p2, "utf8"));
   const exists = opts.profileExists ?? existsSync90;
   const ios = cfg.ios ?? {};
   const flagName = opts.profileFlag?.trim();
@@ -173461,7 +173619,7 @@ var init_credential_profile = __esm({
 
 // ../store-release/iap-credentials.ts
 import { createHash as createHash45 } from "node:crypto";
-import { existsSync as existsSync91, readFileSync as readFileSync104, realpathSync as realpathSync13 } from "node:fs";
+import { existsSync as existsSync91, readFileSync as readFileSync105, realpathSync as realpathSync14 } from "node:fs";
 import { homedir as homedir12 } from "node:os";
 function accountFingerprint(keyId, issuerId) {
   return `sha256:${createHash45("sha256").update(`${issuerId}:${keyId}`).digest("hex").slice(0, 16)}`;
@@ -173481,7 +173639,7 @@ function requireExplicitProfile(profileFlag, target) {
   }
   return profile;
 }
-function readKey(path2, profile, readFile3) {
+function readKey2(path2, profile, readFile3) {
   try {
     return readFile3(path2);
   } catch {
@@ -173498,8 +173656,8 @@ function canonicalKeyPath(path2, profile, realpath) {
 function resolveIapCredentials(options) {
   const { target } = options;
   const home = options.home ?? homedir12();
-  const readFile3 = options.readFile ?? ((p2) => readFileSync104(p2, "utf8"));
-  const realpath = options.realpath ?? realpathSync13;
+  const readFile3 = options.readFile ?? ((p2) => readFileSync105(p2, "utf8"));
+  const realpath = options.realpath ?? realpathSync14;
   const profile = requireExplicitProfile(options.profileFlag, target);
   const creds = resolveStoreCredentials({
     app: target.himiApp,
@@ -173516,7 +173674,7 @@ function resolveIapCredentials(options) {
     throw new Error(`credential profile "${profile}" is for team "${creds.team}" but the manifest targets team "${target.teamId}".`);
   }
   return {
-    key: { keyId: creds.ascKeyId, issuerId: creds.ascIssuerId, privateKeyPem: readKey(creds.ascKeyPath, profile, readFile3) },
+    key: { keyId: creds.ascKeyId, issuerId: creds.ascIssuerId, privateKeyPem: readKey2(creds.ascKeyPath, profile, readFile3) },
     team: creds.team,
     profile,
     fingerprint: accountFingerprint(creds.ascKeyId, creds.ascIssuerId)
@@ -173536,9 +173694,9 @@ var init_iap_credentials = __esm({
 
 // ../store-release/iap-draft.ts
 import { createHash as createHash46 } from "node:crypto";
-function fit(text11, max) {
-  const chars = [...text11];
-  return chars.length <= max ? text11 : `${chars.slice(0, max - 1).join("").trimEnd()}${ELLIPSIS}`;
+function fit(text12, max) {
+  const chars = [...text12];
+  return chars.length <= max ? text12 : `${chars.slice(0, max - 1).join("").trimEnd()}${ELLIPSIS}`;
 }
 function plainText2(html) {
   return html.replace(/<[^>]*>/g, " ").replace(/&(amp|nbsp|lt|gt|quot|#39);/g, (entity) => ENTITIES[entity]).replace(/\s+/g, " ").trim();
@@ -173688,7 +173846,7 @@ var init_iap_draft = __esm({
     TIER_DESCRIPTION = "Unlocks one item in the app";
     ELLIPSIS = "\u2026";
     entityKey = (entityType, entityId) => `${entityType}:${entityId}`;
-    sha2 = (text11) => createHash46("sha256").update(text11).digest("hex");
+    sha2 = (text12) => createHash46("sha256").update(text12).digest("hex");
     ENTITIES = { "&amp;": "&", "&nbsp;": " ", "&lt;": "<", "&gt;": ">", "&quot;": '"', "&#39;": "'" };
     MAX_SUFFIX = 24;
     ReferenceNames = class {
@@ -173826,7 +173984,7 @@ __export(version_exports, {
   stampTargetVersion: () => stampTargetVersion,
   stampVersionKeys: () => stampVersionKeys
 });
-import { readFileSync as readFileSync105, writeFileSync as writeFileSync35 } from "node:fs";
+import { readFileSync as readFileSync106, writeFileSync as writeFileSync35 } from "node:fs";
 function readIosVersion(projectYml) {
   const marketing = matchScalar(projectYml, "CFBundleShortVersionString");
   const build3 = matchScalar(projectYml, "CFBundleVersion");
@@ -173973,8 +174131,8 @@ function setAndroidVersion(gradle, v2) {
 function bumpVersion(app, opts) {
   const iosPath = iosProjectYml(app);
   const gradlePath = androidGradle(app);
-  const iosYml = readFileSync105(iosPath, "utf8");
-  const gradle = readFileSync105(gradlePath, "utf8");
+  const iosYml = readFileSync106(iosPath, "utf8");
+  const gradle = readFileSync106(gradlePath, "utf8");
   const current = readIosVersion(iosYml);
   const next = {
     marketing: opts.marketing ?? current.marketing,
@@ -174007,13 +174165,14 @@ var init_store_spec = __esm({
   "../store-release/store-spec.ts"() {
     init_paths();
     init_version();
+    init_binary_core();
     init_embedded_bundles();
     init_embedded_bundles();
   }
 });
 
 // src/iap-config-edit.ts
-import { existsSync as existsSync92, readFileSync as readFileSync106 } from "node:fs";
+import { existsSync as existsSync92, readFileSync as readFileSync107 } from "node:fs";
 import { basename as basename25, join as join96 } from "node:path";
 import ts11 from "typescript";
 function bindPurchasesAppInConfig(source, options) {
@@ -174095,14 +174254,14 @@ function withStoreBundle(dir, options) {
   if (options.storeBundleId) return options;
   const path2 = join96(dir, "store", "store.config.yaml");
   if (!existsSync92(path2)) return options;
-  const storeBundleId = parseStoreConfig(readFileSync106(path2, "utf8")).ios?.bundleId;
+  const storeBundleId = parseStoreConfig(readFileSync107(path2, "utf8")).ios?.bundleId;
   return storeBundleId ? { ...options, storeBundleId } : options;
 }
 function previewIapConfigEdit(dir, options) {
   const path2 = configEntry(dir);
   if (!path2) return void 0;
   if (isSymlink2(path2)) return { path: path2, changed: false, applied: [], conflicts: [], instructions: [`${basename25(path2)} is a symlink, so it would not be edited: add the purchases app in the file it points to.`] };
-  const { changed, applied, conflicts, instructions } = bindPurchasesAppInConfig(readFileSync106(path2, "utf8"), { ...withStoreBundle(dir, options), fileName: basename25(path2) });
+  const { changed, applied, conflicts, instructions } = bindPurchasesAppInConfig(readFileSync107(path2, "utf8"), { ...withStoreBundle(dir, options), fileName: basename25(path2) });
   return { path: path2, changed, applied, conflicts, instructions };
 }
 async function applyIapConfigEdit(dir, options, validate5) {
@@ -174111,7 +174270,7 @@ async function applyIapConfigEdit(dir, options, validate5) {
   const fileName = basename25(path2);
   const refuse7 = (why) => ({ path: path2, changed: false, applied: [], conflicts: [], instructions: [why] });
   if (isSymlink2(path2)) return refuse7(`${fileName} is a symlink, so it was not edited: add the purchases app in the file it points to.`);
-  const original = readFileSync106(path2, "utf8");
+  const original = readFileSync107(path2, "utf8");
   const edit = bindPurchasesAppInConfig(original, { ...withStoreBundle(dir, options), fileName });
   const { applied, conflicts, instructions } = edit;
   if (!edit.changed) return { path: path2, changed: false, applied, conflicts, instructions };
@@ -174181,7 +174340,7 @@ function bookingAttendanceOf(raw) {
   const policy = object8(object8(s2.bookingPolicy).participantsPolicy);
   return {
     kind: "bookingsService",
-    type: text9(s2.type),
+    type: text10(s2.type),
     capacity: numeric(s2.defaultCapacity),
     maxParticipantsPerBooking: policy.enabled === true ? numeric(policy.maxParticipantsPerBooking) : void 0,
     hidden: boolean3(s2.hidden),
@@ -174190,21 +174349,21 @@ function bookingAttendanceOf(raw) {
     onlineBooking: boolean3(object8(s2.onlineBooking).enabled),
     onlinePayment: boolean3(options.online),
     deposit: options.deposit === true || fixed.deposit !== void 0,
-    priceType: text9(payment.rateType),
-    amount: text9(price.value),
-    currency: text9(price.currency)
+    priceType: text10(payment.rateType),
+    amount: text10(price.value),
+    currency: text10(price.currency)
   };
 }
 function locationType(raw) {
   const location = object8(raw);
-  const type = text9(location.type) ?? "UNKNOWN";
+  const type = text10(location.type) ?? "UNKNOWN";
   const addresses = [object8(location.custom).address, location.calculatedAddress].map(object8);
   return type === "CUSTOM" && addresses.every(describesNoPlace) ? ADDRESSLESS_CUSTOM : type;
 }
 function describesNoPlace(address) {
   const parts = ["country", "subdivision", "city", "postalCode", "addressLine", "addressLine2", "streetAddress", "location"];
   if (parts.some((key3) => address[key3] !== void 0 && address[key3] !== "")) return false;
-  const description = text9(address.formattedAddress)?.trim() ?? "";
+  const description = text10(address.formattedAddress)?.trim() ?? "";
   return description === "" || ONLINE_LABEL.test(description);
 }
 function ticketAttendanceOf(event, definition) {
@@ -174213,31 +174372,31 @@ function ticketAttendanceOf(event, definition) {
   const pricing = object8(t2.pricingMethod);
   const price = object8(pricing.fixedPrice);
   const registration = object8(e2.registration);
-  const type = text9(registration.type) ?? text9(registration.initialType) ?? text9(e2.eventType);
-  const status = text9(e2.status) ?? text9(e2.eventStatus);
+  const type = text10(registration.type) ?? text10(registration.initialType) ?? text10(e2.eventType);
+  const status = text10(e2.status) ?? text10(e2.eventStatus);
   return {
     kind: "eventsTicket",
-    location: text9(object8(e2.location).type),
+    location: text10(object8(e2.location).type),
     registration: type === "TICKETS" || type === "RSVP_AND_TICKETS" ? "TICKETING" : type,
     eventStatus: status === "SCHEDULED" ? "UPCOMING" : status,
-    saleStatus: text9(t2.saleStatus),
+    saleStatus: text10(t2.saleStatus),
     hidden: boolean3(t2.hidden),
-    priceType: text9(pricing.pricingType),
-    amount: text9(price.value),
-    currency: text9(price.currency)
+    priceType: text10(pricing.pricingType),
+    amount: text10(price.value),
+    currency: text10(price.currency)
   };
 }
 function object8(value2) {
   return value2 !== null && typeof value2 === "object" && !Array.isArray(value2) ? value2 : {};
 }
-var ADDRESSLESS_CUSTOM, PHYSICAL_LOCATIONS, ONLINE_LABEL, text9, numeric, boolean3, zeroPrice;
+var ADDRESSLESS_CUSTOM, PHYSICAL_LOCATIONS, ONLINE_LABEL, text10, numeric, boolean3, zeroPrice;
 var init_attendance_classifier = __esm({
   "../../core/sdk/iap/src/attendance-classifier.ts"() {
     init_wix_payments_contract();
     ADDRESSLESS_CUSTOM = "CUSTOM_WITHOUT_ADDRESS";
     PHYSICAL_LOCATIONS = ["BUSINESS", "CUSTOMER", "CUSTOM", ADDRESSLESS_CUSTOM];
     ONLINE_LABEL = /^(online|virtual)(\s+(class|classes|classroom|course|session|sessions|meeting|lesson|training|workshop|event))?$/i;
-    text9 = (value2) => typeof value2 === "string" ? value2 : void 0;
+    text10 = (value2) => typeof value2 === "string" ? value2 : void 0;
     numeric = (value2) => typeof value2 === "number" ? value2 : void 0;
     boolean3 = (value2) => typeof value2 === "boolean" ? value2 : void 0;
     zeroPrice = (value2) => typeof value2 === "string" && /^0+(?:\.0+)?$/.test(value2);
@@ -174250,8 +174409,8 @@ function amountText(value2) {
   return typeof value2 === "string" && value2.trim() ? value2.trim() : void 0;
 }
 function priceOf(amount, currency) {
-  const text11 = amountText(amount);
-  return text11 && typeof currency === "string" && currency ? { amount: text11, currency } : void 0;
+  const text12 = amountText(amount);
+  return text12 && typeof currency === "string" && currency ? { amount: text12, currency } : void 0;
 }
 function catalogItem(fields) {
   return Object.fromEntries(Object.entries(fields).filter(([, v2]) => v2 !== void 0 && v2 !== "" && v2 !== false));
@@ -174536,12 +174695,12 @@ function credentialsPlan(deps) {
   if (!deps.appleKey && deps.serverKeyOnly) return {
     state: "blocked",
     code: "apple_key_missing",
-    detail: "The server has no In-App Purchase key. Complete owner-driven server key onboarding before managed connect; the Branded key bridge is not yet available. An App Store Connect API key cannot replace this credential."
+    detail: "The purchases app has no In-App Purchase key. Run himi store apple-keys setup --app <slug> --site <metaSiteId> --bundle-id <id> --iap-key <AuthKey.p8> --iap-key-id <id> --iap-issuer-id <issuer> --yes, then rerun connect. An App Store Connect API key cannot replace this credential."
   };
   return deps.appleKey ? { state: "planned", detail: "store the In-App Purchase key" } : {
     state: "blocked",
     code: "apple_key_missing",
-    detail: "no In-App Purchase key: create one in App Store Connect \u2192 Users and Access \u2192 Integrations \u2192 In-App Purchase, then rerun with --iap-key <AuthKey.p8> --iap-key-id <key id> (an App Store Connect API key is rejected)."
+    detail: "no In-App Purchase key: create one in App Store Connect \u2192 Users and Access \u2192 Integrations \u2192 In-App Purchase, then run himi store apple-keys setup with --iap-key <AuthKey.p8> --iap-key-id <key id> --iap-issuer-id <issuer>, or rerun legacy connect with its key flags (an App Store Connect API key is rejected)."
   };
 }
 async function connectProvider(provider, appId2, apply) {
@@ -174826,8 +174985,8 @@ async function shoot(selected, run2, outDir) {
 function visibleText2(html) {
   return html.replace(/&nbsp;|&#160;|&#xa0;/gi, "\xA0").replace(/&amp;/g, "&");
 }
-function manifestWithScreenshots(text11, shot) {
-  const doc = JSON.parse(text11);
+function manifestWithScreenshots(text12, shot) {
+  const doc = JSON.parse(text12);
   for (const [index, path2] of shot) doc.items[index].reviewScreenshot = path2;
   return `${JSON.stringify(doc, null, 2)}
 `;
@@ -174870,7 +175029,7 @@ var init_store_iap_screenshots = __esm({
 });
 
 // src/store-iap-screenshot-render.ts
-import { existsSync as existsSync93, mkdtempSync as mkdtempSync9, readFileSync as readFileSync107, rmSync as rmSync25 } from "node:fs";
+import { existsSync as existsSync93, mkdtempSync as mkdtempSync9, readFileSync as readFileSync108, rmSync as rmSync25 } from "node:fs";
 import { tmpdir as tmpdir10 } from "node:os";
 import { join as join98 } from "node:path";
 function renderProblems(render, entityId) {
@@ -174933,7 +175092,7 @@ function createReviewScreenRenderer() {
     async capture(html, contentDir2) {
       const { pngPageHtml: pngPageHtml2, stabilizePngPage: stabilizePngPage2 } = await Promise.resolve().then(() => (init_render_descriptor(), render_descriptor_exports));
       const tokensPath = join98(contentDir2, "tokens.json");
-      const tokens2 = existsSync93(tokensPath) ? JSON.parse(readFileSync107(tokensPath, "utf8")) : null;
+      const tokens2 = existsSync93(tokensPath) ? JSON.parse(readFileSync108(tokensPath, "utf8")) : null;
       const { width, height, scale } = REVIEW_SCREENSHOT_FRAME;
       const page = await (await (browser ??= launch())).newPage({ viewport: { width, height }, deviceScaleFactor: scale, colorScheme: "light" });
       try {
@@ -175015,7 +175174,7 @@ __export(store_iap_exports, {
 });
 import { execFileSync as execFileSync8 } from "node:child_process";
 import { randomUUID as randomUUID9 } from "node:crypto";
-import { appendFileSync as appendFileSync2, mkdirSync as mkdirSync40, readFileSync as readFileSync108, realpathSync as realpathSync14, renameSync as renameSync14, rmSync as rmSync26, writeFileSync as writeFileSync36 } from "node:fs";
+import { appendFileSync as appendFileSync2, mkdirSync as mkdirSync40, readFileSync as readFileSync109, realpathSync as realpathSync15, renameSync as renameSync14, rmSync as rmSync26, writeFileSync as writeFileSync36 } from "node:fs";
 import { homedir as homedir13, hostname as hostname2 } from "node:os";
 import { dirname as dirname49, join as join99, resolve as resolve73 } from "node:path";
 function scrubDeep(value2, scrub) {
@@ -175038,7 +175197,7 @@ function textFlag(flags, name) {
 }
 function requireFlag(flags, name, command) {
   const value2 = textFlag(flags, name);
-  if (!value2) throw new UsageError(`store iap ${command} needs --${name} <value>`);
+  if (!value2) throw new UsageError2(`store iap ${command} needs --${name} <value>`);
   return value2;
 }
 function readInput(deps, path2, what) {
@@ -175055,9 +175214,9 @@ function manifestDirOf(manifestPath) {
   return dirname49(resolve73(manifestPath));
 }
 function readPlan(deps, path2) {
-  const text11 = readInput(deps, path2, "plan");
+  const text12 = readInput(deps, path2, "plan");
   try {
-    return verifyPlan2(JSON.parse(text11));
+    return verifyPlan2(JSON.parse(text12));
   } catch (e2) {
     if (e2 instanceof SyntaxError) throw new Error(`${path2} is not valid JSON: ${e2.message}`);
     throw e2;
@@ -175068,10 +175227,10 @@ function writeJson(deps, out2, path2, value2) {
 `);
 }
 function writePlan(deps, out2, path2, plan) {
-  const text11 = `${JSON.stringify(plan, null, 2)}
+  const text12 = `${JSON.stringify(plan, null, 2)}
 `;
-  if (out2.carriesSecret(text11)) throw new Error("refusing to write a plan that contains this run's App Store Connect credentials");
-  deps.writeFileAtomic(path2, text11);
+  if (out2.carriesSecret(text12)) throw new Error("refusing to write a plan that contains this run's App Store Connect credentials");
+  deps.writeFileAtomic(path2, text12);
 }
 function catalogRoutePrefix(flags, deps) {
   if (flags["catalog-route"] !== void 0 && !textFlag(flags, "catalog-route")) throw new IapCatalogError("catalog_route_unavailable", "--catalog-route needs an explicit gateway path");
@@ -175087,7 +175246,7 @@ function catalogClient(flags, deps, site) {
 }
 function openSession(deps, out2, target, profile, flags = {}) {
   if (flags.managed === true) {
-    if (profile) throw new UsageError("--managed cannot be combined with --profile; no profile fallback is supported");
+    if (profile) throw new UsageError2("--managed cannot be combined with --profile; no profile fallback is supported");
     const purchasesAppId = requireFlag(flags, "purchases-app", "managed");
     const identity2 = { mode: "managed", siteId: target.wixSiteId, purchasesAppId };
     const catalogRoute = catalogRoutePrefix(flags, deps);
@@ -175213,7 +175372,7 @@ async function planCommand(flags, deps, out2) {
 function createLimit(flags) {
   const value2 = textFlag(flags, "limit");
   if (value2 === void 0) return void 0;
-  if (!/^[1-9]\d*$/.test(value2)) throw new UsageError(`--limit must be a positive whole number (got ${JSON.stringify(value2)})`);
+  if (!/^[1-9]\d*$/.test(value2)) throw new UsageError2(`--limit must be a positive whole number (got ${JSON.stringify(value2)})`);
   return Number(value2);
 }
 async function applyWithLock(deps, plan, session, limit, submitForReview = true) {
@@ -175275,26 +175434,26 @@ async function statusCommand(flags, deps, out2) {
 function draftMode(flags) {
   const value2 = textFlag(flags, "mode") ?? "per-item";
   const mode = DRAFT_MODES[value2];
-  if (!mode) throw new UsageError(`--mode must be per-item or tiers (got ${JSON.stringify(value2)})`);
+  if (!mode) throw new UsageError2(`--mode must be per-item or tiers (got ${JSON.stringify(value2)})`);
   return mode;
 }
 function territoriesFlag(flags, base) {
   const territories = (textFlag(flags, "territories") ?? base).split(",").map((t2) => t2.trim().toUpperCase()).filter(Boolean);
   const bad2 = territories.find((t2) => !TERRITORY_CODE.test(t2));
-  if (bad2) throw new UsageError(`--territories must be ISO 3166-1 alpha-3 codes such as USA (got ${JSON.stringify(bad2)})`);
+  if (bad2) throw new UsageError2(`--territories must be ISO 3166-1 alpha-3 codes such as USA (got ${JSON.stringify(bad2)})`);
   const duplicate = territories.find((t2, i2) => territories.indexOf(t2) !== i2);
-  if (duplicate) throw new UsageError(`--territories: duplicate territory ${duplicate}`);
-  if (!territories.includes(base)) throw new UsageError(`--territories must include the base territory ${base}`);
+  if (duplicate) throw new UsageError2(`--territories: duplicate territory ${duplicate}`);
+  if (!territories.includes(base)) throw new UsageError2(`--territories must include the base territory ${base}`);
   return territories;
 }
 function localeFlag(flags) {
   const locale = textFlag(flags, "locale") ?? "en-US";
-  if (!LOCALE_CODE.test(locale)) throw new UsageError(`--locale must be a locale such as en-US (got ${JSON.stringify(locale)})`);
+  if (!LOCALE_CODE.test(locale)) throw new UsageError2(`--locale must be a locale such as en-US (got ${JSON.stringify(locale)})`);
   return locale;
 }
 function baseTerritoryFlag(flags) {
   const base = requireFlag(flags, "base-territory", "draft").toUpperCase();
-  if (!TERRITORY_CODE.test(base)) throw new UsageError(`--base-territory must be an ISO 3166-1 alpha-3 code such as USA (got ${JSON.stringify(base)})`);
+  if (!TERRITORY_CODE.test(base)) throw new UsageError2(`--base-territory must be an ISO 3166-1 alpha-3 code such as USA (got ${JSON.stringify(base)})`);
   return base;
 }
 async function applePriceGrid(session, target, baseTerritory) {
@@ -175374,11 +175533,11 @@ function readInAppPurchaseKey(flags, deps, creds) {
   const path2 = textFlag(flags, "iap-key");
   const keyId = textFlag(flags, "iap-key-id");
   if (!path2 && !keyId) return null;
-  if (!path2 || !keyId) throw new UsageError("store iap connect needs --iap-key <AuthKey.p8> and --iap-key-id <id> together");
-  if (!/^[A-Z0-9]{10}$/.test(keyId)) throw new UsageError(`--iap-key-id must be the 10-character key id App Store Connect shows, got "${keyId}"`);
+  if (!path2 || !keyId) throw new UsageError2("store iap connect needs --iap-key <AuthKey.p8> and --iap-key-id <id> together");
+  if (!/^[A-Z0-9]{10}$/.test(keyId)) throw new UsageError2(`--iap-key-id must be the 10-character key id App Store Connect shows, got "${keyId}"`);
   let privateKey;
   try {
-    assertCredentialOutsideRepo("--iap-key", (deps.realpath ?? realpathSync14)(path2));
+    assertCredentialOutsideRepo("--iap-key", (deps.realpath ?? realpathSync15)(path2));
     privateKey = readInput(deps, path2, "In-App Purchase key");
   } catch (error) {
     throw new KeyError(error.message);
@@ -175429,7 +175588,7 @@ async function connectCommand(flags, deps, out2) {
     return await connectWith(flags, deps, out2);
   } catch (error) {
     if (error instanceof IapCatalogError) return failFrom(error, out2);
-    if (error instanceof UsageError) return out2.fail(error.message, { ok: false, code: "invalid_usage", usage: STORE_IAP_USAGE });
+    if (error instanceof UsageError2) return out2.fail(error.message, { ok: false, code: "invalid_usage", usage: STORE_IAP_USAGE });
     if (error instanceof IapManifestError) {
       return out2.fail(`${error.label} is not a valid IAP manifest`, { ok: false, code: "manifest_invalid", problems: error.problems });
     }
@@ -175445,7 +175604,7 @@ async function connectWith(flags, deps, out2) {
   try {
     previewTag = parsePreviewTag(textFlag(flags, "preview-tag") ?? process.env.HIMI_SERVE_PREVIEW_TAG);
   } catch (error) {
-    throw new UsageError(error.message);
+    throw new UsageError2(error.message);
   }
   const manifest2 = readManifest2(deps, manifestPath);
   const catalog4 = catalogClient(flags, deps, manifest2.target.wixSiteId);
@@ -175484,7 +175643,7 @@ async function connectWith(flags, deps, out2) {
     return out2.fail(error instanceof Error ? error.message : String(error), { ok: false, code: "request_failed" });
   }
   const expectedApp = textFlag(flags, "purchases-app");
-  if (expectedApp && plan.purchasesAppId !== expectedApp) throw new UsageError("--purchases-app differs from the registration for the manifest's bundle on this site");
+  if (expectedApp && plan.purchasesAppId !== expectedApp) throw new UsageError2("--purchases-app differs from the registration for the manifest's bundle on this site");
   let report3 = plan;
   if (!dryRun && writesPlanned(plan)) {
     const confirmed = flags.yes === true;
@@ -175560,8 +175719,8 @@ async function mappingsCommand(flags, deps, out2) {
   const appId2 = requireFlag(flags, "purchases-app", "mappings");
   const productId = textFlag(flags, "product");
   const active = textFlag(flags, "active");
-  if (flags.active !== void 0 && active !== "true" && active !== "false") throw new UsageError("--active must be true or false");
-  if (productId === void 0 !== (active === void 0)) throw new UsageError("mapping changes require both --product <mapping-id> and --active true|false");
+  if (flags.active !== void 0 && active !== "true" && active !== "false") throw new UsageError2("--active must be true or false");
+  if (productId === void 0 !== (active === void 0)) throw new UsageError2("mapping changes require both --product <mapping-id> and --active true|false");
   const client2 = catalogClient(flags, deps, site);
   if (!productId) {
     out2.print({ ok: true, products: await client2.listProducts(appId2) });
@@ -175604,7 +175763,7 @@ function printScreenshots(out2, report3, manifestPath, dryRun) {
   else if (report3.items.some((i2) => i2.screenshot)) out2.line(`  manifest updated: ${manifestPath} \u2014 next: himi store iap plan --manifest ${manifestPath} \u2026 uploads them.`);
 }
 async function screenshotsCommand(flags, deps, out2) {
-  if (flags.managed === true) throw new UsageError("Catalog generates review screenshots during apply; local screenshots require explicit legacy --profile mode");
+  if (flags.managed === true) throw new UsageError2("Catalog generates review screenshots during apply; local screenshots require explicit legacy --profile mode");
   const manifestPath = requireFlag(flags, "manifest", "screenshots");
   const contentDir2 = requireFlag(flags, "content", "screenshots");
   const manifestText = readInput(deps, manifestPath, "manifest");
@@ -175630,7 +175789,7 @@ async function screenshotsCommand(flags, deps, out2) {
       appleLocked: (item) => facts.get(item.productId)?.locked,
       appleRead: textFlag(flags, "profile") !== void 0,
       writeBytes: deps.writeBytes ?? writeBinaryFile,
-      writeText: (path2, text11) => deps.writeFileAtomic(path2, text11),
+      writeText: (path2, text12) => deps.writeFileAtomic(path2, text12),
       ...only ? { only: new Set(only.split(",").map((id) => id.trim()).filter(Boolean)) } : {},
       ...outDir ? { outDir: resolve73(outDir) } : {},
       force: flags.force === true,
@@ -175666,7 +175825,7 @@ async function runStoreIap(pos, flags, io2, deps) {
   try {
     return await command(flags, deps, out2);
   } catch (e2) {
-    if (e2 instanceof UsageError) return out2.fail(e2.message, { usage: STORE_IAP_USAGE, ...flags.managed === true ? { ok: false, code: "invalid_usage" } : {} });
+    if (e2 instanceof UsageError2) return out2.fail(e2.message, { usage: STORE_IAP_USAGE, ...flags.managed === true ? { ok: false, code: "invalid_usage" } : {} });
     return failFrom(e2, out2, flags.managed === true);
   }
 }
@@ -175678,7 +175837,7 @@ function fileJournal(path2) {
 }
 function readLockSummary(path2) {
   try {
-    const { pid, host, at: at2 } = JSON.parse(readFileSync108(path2, "utf8"));
+    const { pid, host, at: at2 } = JSON.parse(readFileSync109(path2, "utf8"));
     return `pid ${pid} on ${host} since ${at2}`;
   } catch {
     return "unreadable lock";
@@ -175698,7 +175857,7 @@ function acquireApplyLock(dir, appleAppId) {
   return () => {
     let current = "";
     try {
-      current = readFileSync108(path2, "utf8");
+      current = readFileSync109(path2, "utf8");
     } catch {
       return;
     }
@@ -175722,8 +175881,8 @@ async function confirmOnTerminal(question) {
 }
 function defaultStoreIapDeps() {
   return {
-    readFile: (path2) => readFileSync108(path2, "utf8"),
-    readBytes: (path2) => readFileSync108(path2),
+    readFile: (path2) => readFileSync109(path2, "utf8"),
+    readBytes: (path2) => readFileSync109(path2),
     readBuildIapBinding: (path2) => JSON.parse(execFileSync8("plutil", ["-convert", "json", "-o", "-", resolve73(path2)], { encoding: "utf8" })),
     visitorTransport: async (clientId, siteId) => {
       const [{ mintVisitorToken: mintVisitorToken2 }, { visitorTransportFrom: visitorTransportFrom2 }] = await Promise.all([Promise.resolve().then(() => (init_visitor_auth(), visitor_auth_exports)), Promise.resolve().then(() => (init_rest(), rest_exports))]);
@@ -175747,7 +175906,7 @@ function defaultStoreIapDeps() {
     sleep: (ms2) => new Promise((resolve85) => setTimeout(resolve85, ms2))
   };
 }
-var STORE_IAP_USAGE, SUMMARY_THRESHOLD, SUMMARY_DETAIL_LIMIT, UsageError, CommandOutput, pad, DECISION_ORDER, OUTCOME_ORDER, COMPLETE, DRAFT_MODES, TERRITORY_CODE, LOCALE_CODE, GRID_UNAVAILABLE_NOTE, KeyError, CredentialsError, writesPlanned, COMMANDS2;
+var STORE_IAP_USAGE, SUMMARY_THRESHOLD, SUMMARY_DETAIL_LIMIT, UsageError2, CommandOutput, pad, DECISION_ORDER, OUTCOME_ORDER, COMPLETE, DRAFT_MODES, TERRITORY_CODE, LOCALE_CODE, GRID_UNAVAILABLE_NOTE, KeyError, CredentialsError, writesPlanned, COMMANDS2;
 var init_store_iap = __esm({
   "src/store-iap.ts"() {
     init_iap_catalog_client();
@@ -175777,7 +175936,7 @@ var init_store_iap = __esm({
     STORE_IAP_USAGE = "himi store iap draft|plan|apply|status|connect|screenshots|check|mappings \u2014 draft --site <msid> (--profile <name> | --purchases-app <id> --catalog-route <path>) --apple-app <id> --bundle <id> --base-territory <ISO3> --out <manifest.json> [--territories <a,b>] [--locale <l>] [--mode per-item|tiers] [--merge <manifest.json>] [--report <file>] \xB7 plan --manifest <file> (--profile <name> | --purchases-app <id> --catalog-route <path>) --out <plan.json> \xB7 apply --plan <plan.json> (--profile <name> | --purchases-app <id> --catalog-route <path>) --out <result.json> [--yes] [--limit <n>] [--no-submit] \xB7 status --manifest <file> (--profile <name> | --purchases-app <id> --catalog-route <path>) [--out <file>] [--refresh-wix] \xB7 connect --manifest <file> [--profile <name>] --catalog-route <path> [--iap-key <AuthKey.p8> --iap-key-id <id>] [--content <dir>] [--preview-tag dp-<tag>] [--dry-run] [--yes] [--out <report.json>] \xB7 screenshots --manifest <file> --content <app dir> --profile <name> [--out-dir <dir>] [--only <productId,\u2026>] [--force] [--dry-run] \xB7 check --manifest <file> --catalog-route <path> [--purchases-app <id>] [--content <dir>] [--plist <built Info.plist>] [--visitor-client <id>] \xB7 mappings --site <msid> --purchases-app <id> --catalog-route <path> [--product <mapping-id> --active true|false --yes] \xB7 Catalog is the default: --purchases-app <id> --catalog-route <path> for Apple reads; --managed is optional. --profile selects direct Apple mode.";
     SUMMARY_THRESHOLD = 50;
     SUMMARY_DETAIL_LIMIT = 20;
-    UsageError = class extends Error {
+    UsageError2 = class extends Error {
     };
     CommandOutput = class {
       constructor(io2, json8) {
@@ -175794,8 +175953,8 @@ var init_store_iap = __esm({
       protectKey(key3) {
         this.secrets.push(key3.privateKey, key3.keyId);
       }
-      line(text11 = "") {
-        this.io.log(this.scrub(text11));
+      line(text12 = "") {
+        this.io.log(this.scrub(text12));
       }
       print(value2) {
         this.io.log(this.serialize(value2));
@@ -175808,11 +175967,11 @@ var init_store_iap = __esm({
         return JSON.stringify(scrubDeep(value2, (t2) => this.scrub(t2)), null, 2);
       }
       /** This run's own key material, raw or JSON-escaped, anywhere in `text`. */
-      carriesSecret(text11) {
-        return this.secrets.some((secret) => secret && (text11.includes(secret) || text11.includes(JSON.stringify(secret).slice(1, -1))));
+      carriesSecret(text12) {
+        return this.secrets.some((secret) => secret && (text12.includes(secret) || text12.includes(JSON.stringify(secret).slice(1, -1))));
       }
-      scrub(text11) {
-        let out2 = text11;
+      scrub(text12) {
+        let out2 = text12;
         for (const secret of this.secrets) if (secret) out2 = out2.split(secret).join("[redacted]");
         return scrubString(out2);
       }
@@ -176221,7 +176380,7 @@ __export(preflight_app_exports, {
   profileAccount: () => profileAccount,
   readXcconfigVars: () => readXcconfigVars
 });
-import { readFileSync as readFileSync109, existsSync as existsSync94, readdirSync as readdirSync39, statSync as statSync25 } from "node:fs";
+import { readFileSync as readFileSync110, existsSync as existsSync94, readdirSync as readdirSync39, statSync as statSync26 } from "node:fs";
 import { createHash as createHash47 } from "node:crypto";
 import { dirname as dirname50, join as join100 } from "node:path";
 function analyze(projectYml, storeConfig, icon, account) {
@@ -176350,7 +176509,7 @@ function readXcconfigVars(iosDir, projectYml) {
   const read = (path2) => {
     if (seen.has(path2) || !existsSync94(path2)) return;
     seen.add(path2);
-    for (const raw of readFileSync109(path2, "utf8").split("\n")) {
+    for (const raw of readFileSync110(path2, "utf8").split("\n")) {
       const inc = /^\s*#include\??\s+"([^"]+)"/.exec(raw);
       if (inc) {
         read(join100(dirname50(path2), inc[1]));
@@ -176377,8 +176536,8 @@ function profileAccount(app, storeConfig, opts = {}) {
   }
 }
 async function preflightApp(app, opts = {}) {
-  const projectYml = existsSync94(iosProjectYml(app)) ? readFileSync109(iosProjectYml(app), "utf8") : "";
-  const storeConfig = existsSync94(storeConfigPath(app)) ? readFileSync109(storeConfigPath(app), "utf8") : "";
+  const projectYml = existsSync94(iosProjectYml(app)) ? readFileSync110(iosProjectYml(app), "utf8") : "";
+  const storeConfig = existsSync94(storeConfigPath(app)) ? readFileSync110(storeConfigPath(app), "utf8") : "";
   const identity = projectYml ? analyzeStoreIdentity(projectYml, storeConfig, readXcconfigVars(join100(appDir(app), "ios"), projectYml)) : [];
   if (!storeConfig) return [{ level: "error", message: `no apps/${app}/store/store.config.yaml \u2014 run /setup-store-signing first.` }, ...identity];
   const findings = analyze(
@@ -176539,7 +176698,7 @@ function playListingAssets(app, locale = "en-US") {
     for (const name of names2) {
       const p2 = join100(dir, name);
       try {
-        if (statSync25(p2).isFile()) return { name, bytes: readFileSync109(p2) };
+        if (statSync26(p2).isFile()) return { name, bytes: readFileSync110(p2) };
       } catch {
       }
     }
@@ -176579,7 +176738,7 @@ function listScreenshots(app, locale = "en-US") {
   const flat = join100(storeDir(app), "screenshots", locale);
   if (existsSync94(flat)) {
     for (const png of readdirSync39(flat).filter((n2) => n2.endsWith(".png"))) {
-      const sz = pngSize2(readFileSync109(join100(flat, png)));
+      const sz = pngSize2(readFileSync110(join100(flat, png)));
       if (sz) out2.push({ name: png, w: sz.w, h: sz.h });
     }
   }
@@ -176587,9 +176746,9 @@ function listScreenshots(app, locale = "en-US") {
   if (existsSync94(legacy)) {
     for (const deviceDir of readdirSync39(legacy)) {
       const d2 = join100(legacy, deviceDir);
-      if (!statSync25(d2).isDirectory()) continue;
+      if (!statSync26(d2).isDirectory()) continue;
       for (const png of readdirSync39(d2).filter((n2) => n2.endsWith(".png"))) {
-        const sz = pngSize2(readFileSync109(join100(d2, png)));
+        const sz = pngSize2(readFileSync110(join100(d2, png)));
         if (sz) out2.push({ name: `${deviceDir}/${png}`, w: sz.w, h: sz.h });
       }
     }
@@ -176602,8 +176761,8 @@ function placeholderHashes2() {
   for (const target of readdirSync39(templateIos)) {
     const p2 = join100(templateIos, target, "Assets.xcassets", "AppIcon.appiconset", "icon_1024.png");
     try {
-      if (!statSync25(p2).isFile()) continue;
-      return [LEGACY_PLACEHOLDER_SHA2562, createHash47("sha256").update(readFileSync109(p2)).digest("hex")];
+      if (!statSync26(p2).isFile()) continue;
+      return [LEGACY_PLACEHOLDER_SHA2562, createHash47("sha256").update(readFileSync110(p2)).digest("hex")];
     } catch {
     }
   }
@@ -176638,8 +176797,8 @@ async function appIconState(iosDir) {
   for (const target of readdirSync39(iosDir)) {
     const p2 = join100(iosDir, target, "Assets.xcassets", "AppIcon.appiconset", "icon_1024.png");
     try {
-      if (!statSync25(p2).isFile()) continue;
-      const bytes2 = readFileSync109(p2);
+      if (!statSync26(p2).isFile()) continue;
+      const bytes2 = readFileSync110(p2);
       const hash2 = createHash47("sha256").update(bytes2).digest("hex");
       const pixels = await pixelIssues(bytes2);
       return {
@@ -176710,7 +176869,7 @@ __export(asc_status_exports, {
   ascStatus: () => ascStatus,
   buildVerdict: () => buildVerdict
 });
-import { readFileSync as readFileSync110 } from "node:fs";
+import { readFileSync as readFileSync111 } from "node:fs";
 function buildVerdict(builds) {
   if (!builds.length) {
     return "NO builds registered \u2014 if you uploaded recently and it's been >15 min, the binary was REJECTED IN PROCESSING (reason is email-only; run validate-binary.ts / scan-purpose-strings.ts to reproduce it).";
@@ -176724,7 +176883,7 @@ function buildVerdict(builds) {
 function client(creds) {
   const env = creds ?? requireEnv(["ASC_KEY_ID", "ASC_ISSUER_ID", "ASC_KEY_PATH"]);
   assertCredentialOutsideRepo("ASC_KEY_PATH", env.ASC_KEY_PATH);
-  const jwt = ascJwt(env.ASC_KEY_ID, env.ASC_ISSUER_ID, readFileSync110(env.ASC_KEY_PATH, "utf8"), Math.floor(Date.now() / 1e3));
+  const jwt = ascJwt(env.ASC_KEY_ID, env.ASC_ISSUER_ID, readFileSync111(env.ASC_KEY_PATH, "utf8"), Math.floor(Date.now() / 1e3));
   return async (path2) => {
     const r3 = await fetch(`${ASC}${path2}`, { headers: { Authorization: `Bearer ${jwt}` } });
     return { status: r3.status, json: await r3.json().catch(() => ({})) };
@@ -177117,7 +177276,7 @@ __export(secrets_exports, {
   runRemoteSecretsCommand: () => runRemoteSecretsCommand,
   runSecretsCommand: () => runSecretsCommand
 });
-import { readFileSync as readFileSync112 } from "node:fs";
+import { readFileSync as readFileSync113 } from "node:fs";
 function environment(value2) {
   if (value2 === "preview" || value2 === "production") return value2;
   throw new Error("--environment must be preview or production");
@@ -177148,7 +177307,7 @@ async function runSecretsCommand(operation, flags, io2, options = {}) {
       io2.log(JSON.stringify(await vault.list({ app, environment: env })));
       return 0;
     }
-    const value2 = options.readValue ? options.readValue() : readFileSync112(0, "utf8").replace(/\r?\n$/, "");
+    const value2 = options.readValue ? options.readValue() : readFileSync113(0, "utf8").replace(/\r?\n$/, "");
     if (operation === "set") await vault.set({ app, environment: env, name, value: value2 });
     else if (operation === "rotate") await vault.rotate({ app, environment: env, name, value: value2 });
     else throw new Error(`unknown secrets operation ${operation}`);
@@ -177177,16 +177336,16 @@ async function runRemoteSecretsCommand(operation, flags, io2, options) {
     }
     let body;
     if (operation !== "list") {
-      const value2 = options.readValue ? options.readValue() : readFileSync112(0, "utf8").replace(/\r?\n$/, "");
+      const value2 = options.readValue ? options.readValue() : readFileSync113(0, "utf8").replace(/\r?\n$/, "");
       body = JSON.stringify({ value: value2 });
     }
     const response = await (options.fetchImpl ?? fetch)(url, { method: operation === "list" ? "GET" : operation === "set" ? "PUT" : "POST", headers: headers2, body });
-    const text11 = await response.text();
+    const text12 = await response.text();
     let output;
     try {
-      output = JSON.parse(text11);
+      output = JSON.parse(text12);
     } catch {
-      output = text11;
+      output = text12;
     }
     if (!response.ok) throw new Error(typeof output === "string" ? output : JSON.stringify(output));
     io2.log(JSON.stringify(output));
@@ -177244,9 +177403,9 @@ function headersFor(options) {
     ...options.previewTag ? { "x-wix-route-serve": options.previewTag } : {}
   };
 }
-function objectFrom(text11) {
+function objectFrom(text12) {
   try {
-    const value2 = text11 ? JSON.parse(text11) : null;
+    const value2 = text12 ? JSON.parse(text12) : null;
     return value2 && typeof value2 === "object" && !Array.isArray(value2) ? value2 : null;
   } catch {
     return null;
@@ -177484,12 +177643,12 @@ async function runNotifyPing(flags, io2, deps = {}) {
   const flagError = flagRefusal(flags);
   if (flagError) return refuse6(io2, flagError);
   const allMembers = flags["all-members"] === true;
-  if (allMembers && text10(flags["member-email"])) return refuse6(io2, "recipient_conflict", "Choose --all-members or --member-email.");
+  if (allMembers && text11(flags["member-email"])) return refuse6(io2, "recipient_conflict", "Choose --all-members or --member-email.");
   if (allMembers && flags["dry-run"] !== true && flags.yes !== true) return refuse6(io2, "confirmation_required", "Preview with --dry-run, then add --yes to send to every approved member.");
-  const input = mergePushInputs(pushInputsFromContent(resolve75(text10(flags.content) ?? process.cwd())), flags);
-  const missing3 = [...input.app ? [] : ["app"], ...input.site ? [] : ["site"], ...REQUIRED_FLAGS.filter((f2) => !(allMembers && f2 === "member-email") && !text10(flags[f2]))];
+  const input = mergePushInputs(pushInputsFromContent(resolve75(text11(flags.content) ?? process.cwd())), flags);
+  const missing3 = [...input.app ? [] : ["app"], ...input.site ? [] : ["site"], ...REQUIRED_FLAGS.filter((f2) => !(allMembers && f2 === "member-email") && !text11(flags[f2]))];
   if (missing3.length) return refuse6(io2, "needs_input", "Name the app and site (or --content), the member's login email, a title and a link.", 2, { missing: missing3 });
-  const requestId2 = text10(flags["request-id"]) ?? (deps.newRequestId ?? randomUUID10)();
+  const requestId2 = text11(flags["request-id"]) ?? (deps.newRequestId ?? randomUUID10)();
   if (!UUID_RE.test(requestId2)) return refuse6(io2, "invalid_request_id", "Reuse the requestId a previous send printed.");
   const owner = await hostedOwnerSession(flags, deps);
   if (!owner.ok) return refuse6(io2, owner.error, owner.hint, owner.exit);
@@ -177506,10 +177665,10 @@ async function runNotifyPing(flags, io2, deps = {}) {
   const body = {
     app: ownership.slug,
     site: input.site,
-    memberEmail: text10(flags["member-email"]),
-    title: text10(flags.title),
-    ...text10(flags.body) ? { body: text10(flags.body) } : {},
-    link: text10(flags.link),
+    memberEmail: text11(flags["member-email"]),
+    title: text11(flags.title),
+    ...text11(flags.body) ? { body: text11(flags.body) } : {},
+    link: text11(flags.link),
     requestId: requestId2,
     ...flags["dry-run"] === true ? { dryRun: true } : {}
   };
@@ -177549,7 +177708,7 @@ async function runAllMembers(args) {
     const code = error instanceof PushSendError ? error.code : error instanceof Error && ROSTER_CODES.has(error.message) ? error.message : "member_lookup_unavailable";
     return refuse6(io2, code, void 0, 1);
   }
-  const base = { app: input.app, site: input.site, title: text10(flags.title), ...text10(flags.body) ? { body: text10(flags.body) } : {}, link: text10(flags.link) };
+  const base = { app: input.app, site: input.site, title: text11(flags.title), ...text11(flags.body) ? { body: text11(flags.body) } : {}, link: text11(flags.link) };
   const send2 = (recipient, memberRequestId, dryRun = false) => pushSendRequest({
     target: session.target,
     wixToken: session.wixToken,
@@ -177632,7 +177791,7 @@ function summary(result, sent) {
   }
   return `Ping accepted request ${sent.requestId} for ${sent.memberEmail}. Ping does not confirm delivery: it reaches the member's signed-in devices with notifications allowed.`;
 }
-var LOCAL_SENDER_FLAGS, SWITCHES, REQUIRED_FLAGS, UUID_RE, KNOWN_CODES, ROSTER_CODES, HINTS, text10;
+var LOCAL_SENDER_FLAGS, SWITCHES, REQUIRED_FLAGS, UUID_RE, KNOWN_CODES, ROSTER_CODES, HINTS, text11;
 var init_notify_ping = __esm({
   "src/notify-ping.ts"() {
     init_push_send();
@@ -177660,7 +177819,7 @@ var init_notify_ping = __esm({
       site_token_invalid: "Run wix login as the site owner; the site token must belong to the app owner's account.",
       ping_permission_denied: "Himi Serve is not permitted to send through Ping; this is a platform issue, not your setup."
     };
-    text10 = (v2) => typeof v2 === "string" && v2.length > 0 ? v2 : void 0;
+    text11 = (v2) => typeof v2 === "string" && v2.length > 0 ? v2 : void 0;
   }
 });
 
@@ -177675,7 +177834,7 @@ __export(notify_exports, {
   runNotify: () => runNotify,
   saveAdminSession: () => saveAdminSession
 });
-import { chmodSync as chmodSync3, mkdirSync as mkdirSync41, readFileSync as readFileSync115, writeFileSync as writeFileSync38 } from "node:fs";
+import { chmodSync as chmodSync3, mkdirSync as mkdirSync41, readFileSync as readFileSync116, writeFileSync as writeFileSync38 } from "node:fs";
 import { homedir as homedir14 } from "node:os";
 import { dirname as dirname52, join as join105 } from "node:path";
 function defaultSessionsPath() {
@@ -177683,7 +177842,7 @@ function defaultSessionsPath() {
 }
 function loadSessionsFile(path2 = defaultSessionsPath()) {
   try {
-    return JSON.parse(readFileSync115(path2, "utf8"));
+    return JSON.parse(readFileSync116(path2, "utf8"));
   } catch {
     return {};
   }
@@ -178052,7 +178211,7 @@ __export(base44_adopt_exports, {
   renderAdoptModule: () => renderAdoptModule,
   runBase44Adopt: () => runBase44Adopt
 });
-import { existsSync as existsSync98, readFileSync as readFileSync116, writeFileSync as writeFileSync39 } from "node:fs";
+import { existsSync as existsSync98, readFileSync as readFileSync117, writeFileSync as writeFileSync39 } from "node:fs";
 import { join as join106, resolve as resolve76 } from "node:path";
 function prop(entity, key3) {
   const props = entity.schema?.properties;
@@ -178147,7 +178306,7 @@ function runBase44Adopt(opts) {
   const bookPath = join106(bookDir, "book.json");
   let book;
   try {
-    book = JSON.parse(readFileSync116(bookPath, "utf8"));
+    book = JSON.parse(readFileSync117(bookPath, "utf8"));
     if (!book || typeof book !== "object" || !Array.isArray(book.entities)) throw new Error("not a Base44 app book (no entities[])");
   } catch (e2) {
     throw new AdoptError("book_unreadable", `could not read ${bookPath}: ${e2.message}. Run \`himi base44 analyze --app-id <id>\` first.`);
@@ -178410,7 +178569,7 @@ __export(generate_exports, {
   writeGenerated: () => writeGenerated
 });
 import { createHash as createHash50 } from "node:crypto";
-import { existsSync as existsSync99, mkdirSync as mkdirSync42, readdirSync as readdirSync40, readFileSync as readFileSync117, writeFileSync as writeFileSync40 } from "node:fs";
+import { existsSync as existsSync99, mkdirSync as mkdirSync42, readdirSync as readdirSync40, readFileSync as readFileSync118, writeFileSync as writeFileSync40 } from "node:fs";
 import { dirname as dirname53, join as join107 } from "node:path";
 function withHeader(body) {
   return `${GENERATED_HEADER}${sha2566(body)}
@@ -178539,7 +178698,7 @@ function writeGenerated(dir, files, opts = {}) {
     let outcome;
     if (!existsSync99(abs)) outcome = "written";
     else {
-      const cur = readFileSync117(abs, "utf8");
+      const cur = readFileSync118(abs, "utf8");
       if (cur === next) outcome = "unchanged";
       else if (isEdited(cur) && !opts.force) outcome = "skipped-edited";
       else outcome = "written";
@@ -178564,7 +178723,7 @@ function orphanedFiles(dir, current) {
   }
   for (const rel of candidates.sort()) {
     if (keep.has(rel) || !existsSync99(join107(dir, rel))) continue;
-    if (readFileSync117(join107(dir, rel), "utf8").startsWith(GENERATED_HEADER)) found.push(rel);
+    if (readFileSync118(join107(dir, rel), "utf8").startsWith(GENERATED_HEADER)) found.push(rel);
   }
   return found;
 }
@@ -178602,7 +178761,7 @@ __export(base44_auth_exports, {
   usableBase44Auth: () => usableBase44Auth,
   writeBase44Session: () => writeBase44Session
 });
-import { chmodSync as chmodSync4, existsSync as existsSync100, mkdirSync as mkdirSync43, readFileSync as readFileSync118, rmSync as rmSync27, writeFileSync as writeFileSync41 } from "node:fs";
+import { chmodSync as chmodSync4, existsSync as existsSync100, mkdirSync as mkdirSync43, readFileSync as readFileSync119, rmSync as rmSync27, writeFileSync as writeFileSync41 } from "node:fs";
 import { homedir as homedir15 } from "node:os";
 import { dirname as dirname54, join as join108 } from "node:path";
 function base44ApiBase(env = process.env) {
@@ -178615,7 +178774,7 @@ function readBase44Session(home) {
   const p2 = base44SessionPath(home);
   if (!existsSync100(p2)) return void 0;
   try {
-    const s2 = JSON.parse(readFileSync118(p2, "utf8"));
+    const s2 = JSON.parse(readFileSync119(p2, "utf8"));
     return typeof s2.accessToken === "string" && s2.accessToken ? s2 : void 0;
   } catch {
     return void 0;
@@ -178735,7 +178894,7 @@ function hasBase44WriteScope(auth) {
 function importBase44CliSession(home = homedir15(), env = process.env) {
   const src = join108(home, ".base44", "auth", "auth.json");
   if (!existsSync100(src)) throw new Error(`no Base44 CLI session at ${src} \u2014 run \`npx base44 login\` first, or use \`himi base44 login\``);
-  const a2 = JSON.parse(readFileSync118(src, "utf8"));
+  const a2 = JSON.parse(readFileSync119(src, "utf8"));
   if (typeof a2.accessToken !== "string" || !a2.accessToken) throw new Error(`${src} holds no access token`);
   const session = {
     accessToken: a2.accessToken,
@@ -178785,14 +178944,14 @@ async function callJson(t2, appId2, method, path2, what, body) {
     ...body !== void 0 ? { body: JSON.stringify(body) } : {}
   });
   if (!res.ok) {
-    const text12 = await res.text().catch(() => "");
-    throw new Base44RequestError(res.status, text12.slice(0, 500), what);
+    const text13 = await res.text().catch(() => "");
+    throw new Base44RequestError(res.status, text13.slice(0, 500), what);
   }
-  const text11 = await res.text();
+  const text12 = await res.text();
   try {
-    return JSON.parse(text11);
+    return JSON.parse(text12);
   } catch {
-    throw new Base44RequestError(res.status, `unreadable response: ${text11.slice(0, 200)}`, what);
+    throw new Base44RequestError(res.status, `unreadable response: ${text12.slice(0, 200)}`, what);
   }
 }
 function requestFailure(e2) {
@@ -178832,14 +178991,14 @@ __export(seed_exports, {
   seedBase44Entities: () => seedBase44Entities,
   writeBase44SeedRows: () => writeBase44SeedRows
 });
-import { existsSync as existsSync101, readFileSync as readFileSync119, writeFileSync as writeFileSync42 } from "node:fs";
+import { existsSync as existsSync101, readFileSync as readFileSync120, writeFileSync as writeFileSync42 } from "node:fs";
 import { join as join109 } from "node:path";
 function readBase44SeedFile(dir) {
   const file2 = join109(dir, BASE44_SEED_FILE);
   if (!existsSync101(file2)) return {};
   let parsed;
   try {
-    parsed = JSON.parse(readFileSync119(file2, "utf8"));
+    parsed = JSON.parse(readFileSync120(file2, "utf8"));
   } catch (e2) {
     throw new SeedFileError(`${BASE44_SEED_FILE} is not valid JSON (${e2.message}). Fix or delete it.`);
   }
@@ -178999,7 +179158,7 @@ function writeBase44SeedRows(opts) {
   if (existsSync101(path2)) {
     let parsed;
     try {
-      parsed = JSON.parse(readFileSync119(path2, "utf8"));
+      parsed = JSON.parse(readFileSync120(path2, "utf8"));
     } catch (e2) {
       throw new SeedFileError(`${BASE44_SEED_FILE} is not valid JSON (${e2.message}). Refusing to regenerate, because overwriting it would discard the rows already in it.`);
     }
@@ -179060,16 +179219,16 @@ var init_seed = __esm({
 });
 
 // src/base44-analyze/project.ts
-function parseJsonc(text11) {
+function parseJsonc(text12) {
   let out2 = "";
   let i2 = 0;
   let inStr = false;
-  while (i2 < text11.length) {
-    const c2 = text11[i2];
+  while (i2 < text12.length) {
+    const c2 = text12[i2];
     if (inStr) {
       out2 += c2;
       if (c2 === "\\") {
-        out2 += text11[i2 + 1] ?? "";
+        out2 += text12[i2 + 1] ?? "";
         i2 += 2;
         continue;
       }
@@ -179081,11 +179240,11 @@ function parseJsonc(text11) {
       inStr = true;
       out2 += c2;
       i2++;
-    } else if (c2 === "/" && text11[i2 + 1] === "/") {
-      while (i2 < text11.length && text11[i2] !== "\n") i2++;
-    } else if (c2 === "/" && text11[i2 + 1] === "*") {
+    } else if (c2 === "/" && text12[i2 + 1] === "/") {
+      while (i2 < text12.length && text12[i2] !== "\n") i2++;
+    } else if (c2 === "/" && text12[i2 + 1] === "*") {
       i2 += 2;
-      while (i2 < text11.length && !(text11[i2] === "*" && text11[i2 + 1] === "/")) i2++;
+      while (i2 < text12.length && !(text12[i2] === "*" && text12[i2 + 1] === "/")) i2++;
       i2 += 2;
     } else {
       out2 += c2;
@@ -179094,32 +179253,32 @@ function parseJsonc(text11) {
   }
   return JSON.parse(dropTrailingCommas(out2));
 }
-function dropTrailingCommas(text11) {
+function dropTrailingCommas(text12) {
   let out2 = "";
   let inStr = false;
-  for (let i2 = 0; i2 < text11.length; i2++) {
-    const c2 = text11[i2];
+  for (let i2 = 0; i2 < text12.length; i2++) {
+    const c2 = text12[i2];
     if (inStr) {
       out2 += c2;
-      if (c2 === "\\") out2 += text11[++i2] ?? "";
+      if (c2 === "\\") out2 += text12[++i2] ?? "";
       else if (c2 === '"') inStr = false;
       continue;
     }
     if (c2 === '"') inStr = true;
     if (c2 === ",") {
       let j2 = i2 + 1;
-      while (j2 < text11.length && /\s/.test(text11[j2])) j2++;
-      if (text11[j2] === "}" || text11[j2] === "]") continue;
+      while (j2 < text12.length && /\s/.test(text12[j2])) j2++;
+      if (text12[j2] === "}" || text12[j2] === "]") continue;
     }
     out2 += c2;
   }
   return out2;
 }
 function readJson9(files, path2) {
-  const text11 = files.get(path2);
-  if (text11 === void 0) return void 0;
+  const text12 = files.get(path2);
+  if (text12 === void 0) return void 0;
   try {
-    const v2 = parseJsonc(text11);
+    const v2 = parseJsonc(text12);
     return v2 && typeof v2 === "object" && !Array.isArray(v2) ? v2 : void 0;
   } catch {
     return void 0;
@@ -179649,11 +179808,11 @@ async function readEntitySnapshot(appId2, deps) {
     const { entries, skipped } = collectAppSource(dl2.dir);
     const files = new Map(entries.map((e2) => [e2.path, e2.bytes.toString("utf8")]));
     for (const cfgPath of ["base44/config.jsonc", "base44/config.json"]) {
-      const text11 = files.get(cfgPath);
-      if (text11 === void 0) continue;
+      const text12 = files.get(cfgPath);
+      if (text12 === void 0) continue;
       let cfg;
       try {
-        cfg = parseJsonc(text11);
+        cfg = parseJsonc(text12);
       } catch (e2) {
         throw new Error(`${cfgPath} does not parse (${e2.message}) \u2014 the entity directory it names cannot be trusted, so the snapshot may be incomplete`);
       }
@@ -179666,11 +179825,11 @@ async function readEntitySnapshot(appId2, deps) {
     const isEntityFile = (p2) => entityDirs.some((d2) => p2.startsWith(d2) && !p2.slice(d2.length).includes("/") && JSON_FILE2.test(p2));
     const dropped = skipped.map((p2) => p2.split(/[\\/]/).join("/")).filter((p2) => entityDirs.some((d2) => p2.startsWith(d2) || d2.startsWith(`${p2}/`)));
     if (dropped.length) throw new Error(`the download's entity files include ones himi will not read (${dropped.join(", ")}) \u2014 a sync without them would delete those entities`);
-    for (const [path2, text11] of files) {
+    for (const [path2, text12] of files) {
       if (!isEntityFile(path2)) continue;
       let v2;
       try {
-        v2 = parseJsonc(text11);
+        v2 = parseJsonc(text12);
       } catch (e2) {
         throw new Error(`entity file ${path2} does not parse (${e2.message}) \u2014 a sync without it would delete that entity`);
       }
@@ -179698,7 +179857,7 @@ __export(apply_exports, {
   createBase44Entities: () => createBase44Entities,
   fileLedger: () => fileLedger
 });
-import { existsSync as existsSync103, readFileSync as readFileSync120, writeFileSync as writeFileSync43 } from "node:fs";
+import { existsSync as existsSync103, readFileSync as readFileSync121, writeFileSync as writeFileSync43 } from "node:fs";
 import { join as join111 } from "node:path";
 function fileLedger(dir, appId2) {
   const path2 = join111(dir, LEDGER_FILE2);
@@ -179706,7 +179865,7 @@ function fileLedger(dir, appId2) {
     if (!existsSync103(path2)) return {};
     let v2;
     try {
-      v2 = JSON.parse(readFileSync120(path2, "utf8"));
+      v2 = JSON.parse(readFileSync121(path2, "utf8"));
     } catch (e2) {
       throw new LedgerError(`${LEDGER_FILE2} is not valid JSON (${e2.message}) \u2014 fix it (a merge conflict?) rather than let himi rewrite it`);
     }
@@ -179863,16 +180022,16 @@ function isPrivateV4([a2, b2, c2]) {
   return a2 >= 224;
 }
 function v6Groups(host) {
-  let text11 = host;
-  const dotted = /:((?:\d{1,3}\.){3}\d{1,3})$/.exec(text11);
+  let text12 = host;
+  const dotted = /:((?:\d{1,3}\.){3}\d{1,3})$/.exec(text12);
   if (dotted) {
     const octets = ipv4Octets(dotted[1]);
     if (!octets) return null;
     const hi2 = (octets[0] << 8 | octets[1]).toString(16);
     const lo2 = (octets[2] << 8 | octets[3]).toString(16);
-    text11 = `${text11.slice(0, dotted.index)}:${hi2}:${lo2}`;
+    text12 = `${text12.slice(0, dotted.index)}:${hi2}:${lo2}`;
   }
-  const halves = text11.split("::");
+  const halves = text12.split("::");
   if (halves.length > 2) return null;
   const parts = (part3) => part3 ? part3.split(":") : [];
   const head = parts(halves[0]);
@@ -180152,28 +180311,28 @@ var init_net_guard = __esm({
 });
 
 // src/site-analyze/copy-clean.ts
-function isTemplatePlaceholder(text11) {
-  return PLACEHOLDER_RE.test(text11);
+function isTemplatePlaceholder(text12) {
+  return PLACEHOLDER_RE.test(text12);
 }
 function cleanText(raw, cap) {
   const s2 = String(raw ?? "").replace(/[\u0000-\u001F\u007F]/g, " ").replace(/\s+/g, " ").trim();
   return s2.length > cap ? `${s2.slice(0, cap - 1).trimEnd()}\u2026` : s2;
 }
-function stripPii(text11) {
-  return text11.replace(EMAIL_RE2, "").replace(PHONE_SHAPE_RE, (m2) => {
+function stripPii(text12) {
+  return text12.replace(EMAIL_RE2, "").replace(PHONE_SHAPE_RE, (m2) => {
     const digits2 = (m2.match(ANY_DIGIT_RE) ?? []).length;
     return digits2 >= PHONE_MIN_DIGITS && PHONE_DIGIT_RUN_RE.test(m2) ? "" : m2;
   }).replace(/\s+/g, " ").trim();
 }
-function isBoilerplate(text11) {
-  return BOILERPLATE_RE.test(text11) || PLACEHOLDER_RE.test(text11);
+function isBoilerplate(text12) {
+  return BOILERPLATE_RE.test(text12) || PLACEHOLDER_RE.test(text12);
 }
 function copyOrDrop(raw, cap) {
-  const text11 = stripPii(cleanText(raw, cap));
-  if (text11.length < 2) return "";
-  if (isBoilerplate(text11)) return "";
-  if (!/[A-Za-zͰ-῿぀-힯]/.test(text11)) return "";
-  return text11;
+  const text12 = stripPii(cleanText(raw, cap));
+  if (text12.length < 2) return "";
+  if (isBoilerplate(text12)) return "";
+  if (!/[A-Za-zͰ-῿぀-힯]/.test(text12)) return "";
+  return text12;
 }
 function dedupe2(values, cap) {
   const out2 = [];
@@ -180269,8 +180428,8 @@ function parsePublishedHtml(html) {
   const rawHeadings = [];
   HEADING_RE.lastIndex = 0;
   while (m2 = HEADING_RE.exec(html)) {
-    const text11 = copyOrDrop(textFromHtml(m2[1] ?? ""), 120);
-    if (text11) rawHeadings.push(text11);
+    const text12 = copyOrDrop(textFromHtml(m2[1] ?? ""), 120);
+    if (text12) rawHeadings.push(text12);
     if (rawHeadings.length >= 40) break;
   }
   const headings = dedupe2(rawHeadings, 20);
@@ -180362,14 +180521,14 @@ async function readPublishedHtml(fetchImpl, siteUrl, opts) {
         const chunk = await reader.read();
         if (chunk.done) break;
         bytes2 += chunk.value.byteLength;
-        const text11 = decoder.decode(chunk.value, { stream: true });
-        html += text11;
-        if (CODE_APP_ID_DONE_RE.test(overlap + text11) || bytes2 >= maxBytes) {
+        const text12 = decoder.decode(chunk.value, { stream: true });
+        html += text12;
+        if (CODE_APP_ID_DONE_RE.test(overlap + text12) || bytes2 >= maxBytes) {
           await reader.cancel().catch(() => {
           });
           break;
         }
-        overlap = (overlap + text11).slice(-80);
+        overlap = (overlap + text12).slice(-80);
       }
     } catch (e2) {
       if (!opts.signal?.aborted) throw e2;
@@ -180594,9 +180753,9 @@ var init_permissions = __esm({
 function genericDescription(it2) {
   for (const field of DESCRIPTION_FIELDS) {
     const raw = it2[field];
-    const text11 = typeof raw === "string" ? raw : str8(raw?.text);
-    if (!text11) continue;
-    const plain2 = text11.replace(/<[^>]*>/g, " ").replace(/&nbsp;/g, " ");
+    const text12 = typeof raw === "string" ? raw : str8(raw?.text);
+    if (!text12) continue;
+    const plain2 = text12.replace(/<[^>]*>/g, " ").replace(/&nbsp;/g, " ");
     if (plain2.trim()) return plain2;
   }
   return void 0;
@@ -181077,8 +181236,8 @@ function cmsStatusNote(taxonomy) {
 function yn2(v2) {
   return v2 == null || v2 === "" ? "\u2014" : String(v2);
 }
-function isAuthPhrase(text11) {
-  const t2 = text11.trim();
+function isAuthPhrase(text12) {
+  const t2 = text12.trim();
   return AUTH_ONLY_ASCII.test(t2) || LOGIN_HE.includes(t2);
 }
 function looksGated(page) {
@@ -181877,12 +182036,12 @@ function mergeWst(pages2) {
   return acc;
 }
 function fontSlug(value2) {
-  let text11 = value2;
+  let text12 = value2;
   try {
-    text11 = decodeURIComponent(value2);
+    text12 = decodeURIComponent(value2);
   } catch {
   }
-  return text11.toLowerCase().replace(/[^a-z0-9]+/g, "");
+  return text12.toLowerCase().replace(/[^a-z0-9]+/g, "");
 }
 function fontUrlSlug(url) {
   const last = url.split("?")[0].split("#")[0].split("/").pop() ?? "";
@@ -181970,9 +182129,9 @@ function attachVeloSources(book, sources, put) {
     if (isSecretVeloPath(f2.path)) continue;
     const rel = veloArtifactRelPath(f2.path);
     if (!rel) continue;
-    const text11 = byPath.get(f2.path) ?? f2.excerpt;
-    if (!text11) continue;
-    put(rel, text11);
+    const text12 = byPath.get(f2.path) ?? f2.excerpt;
+    if (!text12) continue;
+    put(rel, text12);
     f2.localPath = rel;
   }
 }
@@ -182363,7 +182522,7 @@ function appIdFromUrl(raw) {
     return void 0;
   }
 }
-function appIdFromText(text11) {
+function appIdFromText(text12) {
   const shapes = [
     // The published shell's own badge tag: `<script data-app-id="<id>" src="/static/js/badge.js">`.
     /\bdata-app-id\s*=\s*["']([a-f0-9]{24})["']/,
@@ -182374,7 +182533,7 @@ function appIdFromText(text11) {
     /\/apps\/([a-f0-9]{24})\b/
   ];
   for (const re2 of shapes) {
-    const m2 = re2.exec(text11);
+    const m2 = re2.exec(text12);
     if (m2) return m2[1];
   }
   return void 0;
@@ -182748,11 +182907,11 @@ var init_analyze = __esm({
 });
 
 // src/base44-analyze/write-artifacts.ts
-import { existsSync as existsSync104, mkdirSync as mkdirSync45, readFileSync as readFileSync121, rmSync as rmSync29, writeFileSync as writeFileSync45 } from "node:fs";
+import { existsSync as existsSync104, mkdirSync as mkdirSync45, readFileSync as readFileSync122, rmSync as rmSync29, writeFileSync as writeFileSync45 } from "node:fs";
 import { dirname as dirname55, join as join113, resolve as resolve77, sep as sep21 } from "node:path";
 function isBookFolder(dir) {
   try {
-    return JSON.parse(readFileSync121(join113(dir, "book.json"), "utf8")).kind === "base44-app-book";
+    return JSON.parse(readFileSync122(join113(dir, "book.json"), "utf8")).kind === "base44-app-book";
   } catch {
     return false;
   }
@@ -185822,8 +185981,8 @@ function copyFromEval(evaled) {
       evaled.meta?.ogTitle,
       evaled.meta?.ogDescription
     ].map((raw) => {
-      const text11 = cleanText(raw, 400);
-      return text11 && isTemplatePlaceholder(text11) ? stripPii(cleanText(text11, 90)) : "";
+      const text12 = cleanText(raw, 400);
+      return text12 && isTemplatePlaceholder(text12) ? stripPii(cleanText(text12, 90)) : "";
     }),
     8
   );
@@ -187093,7 +187252,7 @@ __export(cli_exports2, {
   ONE_APP_WORKFLOW: () => ONE_APP_WORKFLOW,
   runOneAppCommand: () => runOneAppCommand
 });
-import { closeSync as closeSync8, constants as constants7, lstatSync as lstatSync25, mkdirSync as mkdirSync47, openSync as openSync7, readFileSync as readFileSync122, realpathSync as realpathSync15, writeFileSync as writeFileSync47 } from "node:fs";
+import { closeSync as closeSync8, constants as constants7, lstatSync as lstatSync25, mkdirSync as mkdirSync47, openSync as openSync7, readFileSync as readFileSync123, realpathSync as realpathSync16, writeFileSync as writeFileSync47 } from "node:fs";
 import { createHash as createHash52 } from "node:crypto";
 import { dirname as dirname56, join as join116, parse as parse3, resolve as resolve80 } from "node:path";
 function readOptions(argv, cwd, commandIncluded) {
@@ -187143,7 +187302,7 @@ function readOptions(argv, cwd, commandIncluded) {
       const file2 = resolve80(cwd, flags["prompt-file"]);
       const stat2 = lstatSync25(file2);
       if (!stat2.isFile() || stat2.size > MAX_PROMPT_BYTES) throw new Error("invalid prompt file");
-      prompt = readFileSync122(file2, "utf8");
+      prompt = readFileSync123(file2, "utf8");
     } catch {
       throw new OneAppError("invalid_prompt", "Use a readable text file of at most 64 KiB for --prompt-file.");
     }
@@ -187290,7 +187449,7 @@ validate-topbar checks authored source top-bar controls against the migrated con
       mkdirSync47(options.parentDir, { recursive: true, mode: 448 });
       assertSafeParents(options.parentDir);
       mkdirSync47(options.workspace, { mode: 448 });
-      if (realpathSync15(options.workspace) !== options.workspace) throw new Error("destination changed");
+      if (realpathSync16(options.workspace) !== options.workspace) throw new Error("destination changed");
       evidenceDir = join116(options.workspace, ".himi", "one-app");
       mkdirSync47(evidenceDir, { recursive: true, mode: 448 });
     } catch (error) {
@@ -188501,8 +188660,8 @@ var init_copy = __esm({
 function textFields(look) {
   if (look.unavailable) return [];
   const out2 = [];
-  const add = (text11, where, narrative = false) => {
-    if (text11 && text11.trim()) out2.push({ text: text11, where, narrative });
+  const add = (text12, where, narrative = false) => {
+    if (text12 && text12.trim()) out2.push({ text: text12, where, narrative });
   };
   for (const label3 of look.navLabels) add(label3, "nav");
   for (const p2 of look.pages) {
@@ -189191,8 +189350,8 @@ async function analyzeSite(input, ports) {
   if (locale) plan.provisioning.locale = locale;
   const velo = buildVeloChapter({ look, owner: ownerVelo });
   const veloFiles = ownerVelo.files.flatMap((f2) => {
-    const text11 = f2.content ?? f2.excerpt;
-    return text11 ? [{ path: f2.path, text: text11 }] : [];
+    const text12 = f2.content ?? f2.excerpt;
+    return text12 ? [{ path: f2.path, text: text12 }] : [];
   }).slice(0, 80);
   const permissions = buildPermissionsChapter({
     cms,
@@ -189404,7 +189563,7 @@ var init_customer_build = __esm({
 });
 
 // src/site-analyze/apply.ts
-import { existsSync as existsSync106, readFileSync as readFileSync123, writeFileSync as writeFileSync48, copyFileSync as copyFileSync2, mkdirSync as mkdirSync48, realpathSync as realpathSync16, statSync as statSync27 } from "node:fs";
+import { existsSync as existsSync106, readFileSync as readFileSync124, writeFileSync as writeFileSync48, copyFileSync as copyFileSync2, mkdirSync as mkdirSync48, realpathSync as realpathSync17, statSync as statSync28 } from "node:fs";
 import { dirname as dirname57, isAbsolute as isAbsolute10, join as join117, resolve as resolve81, sep as sep22 } from "node:path";
 import { spawnSync as spawnSync7 } from "node:child_process";
 function unpairedRedirectNote(overlay) {
@@ -189527,7 +189686,7 @@ function buildMergedContract(options) {
   if (!existsSync106(committedPath)) {
     throw new Error(`shell has no committed provisioning.json at ${committedPath} to build a contract from`);
   }
-  const committed = JSON.parse(readFileSync123(committedPath, "utf8"));
+  const committed = JSON.parse(readFileSync124(committedPath, "utf8"));
   const merged = mergeCustomerOwned(committed, overlay);
   const overlayFontFamily = (overlay.branding ?? {}).fontFamily;
   const branding = merged.branding ?? {};
@@ -189544,14 +189703,14 @@ function buildMergedContract(options) {
     let real;
     let realRoot;
     try {
-      real = realpathSync16(from);
-      realRoot = realpathSync16(packageDir);
+      real = realpathSync17(from);
+      realRoot = realpathSync17(packageDir);
     } catch {
       return void 0;
     }
     if (!real.startsWith(realRoot + sep22)) return void 0;
     try {
-      if (!statSync27(real).isFile()) return void 0;
+      if (!statSync28(real).isFile()) return void 0;
       mkdirSync48(dirname57(to2), { recursive: true });
       copyFileSync2(real, to2);
     } catch {
@@ -189566,7 +189725,7 @@ function buildMergedContract(options) {
   if (existsSync106(facesPath)) {
     let faces = [];
     try {
-      const parsed = JSON.parse(readFileSync123(facesPath, "utf8"));
+      const parsed = JSON.parse(readFileSync124(facesPath, "utf8"));
       faces = Array.isArray(parsed) ? parsed : [];
     } catch {
       faces = [];
@@ -189627,7 +189786,7 @@ function staticFaqFor(overlay, overlayPath) {
   const bookPath = join117(dirname57(resolve81(overlayPath)), "book.json");
   if (!existsSync106(bookPath)) return void 0;
   try {
-    const book = JSON.parse(readFileSync123(bookPath, "utf8"));
+    const book = JSON.parse(readFileSync124(bookPath, "utf8"));
     const copy = book?.copy;
     if (!copy || typeof copy !== "object" || copy.unavailable) return void 0;
     const pairs = deriveStaticFaq(copy.faq);
@@ -189644,7 +189803,7 @@ function staticGalleriesFor(overlay, overlayPath) {
   const bookPath = join117(dirname57(resolve81(overlayPath)), "book.json");
   if (!existsSync106(bookPath)) return void 0;
   try {
-    const book = JSON.parse(readFileSync123(bookPath, "utf8"));
+    const book = JSON.parse(readFileSync124(bookPath, "utf8"));
     if (!book.look || book.look.unavailable || !Array.isArray(book.look.pages)) return void 0;
     const galleries = deriveStaticGalleries(book.look.pages);
     return galleries.length || book.look.complete === true ? galleries : void 0;
@@ -189656,8 +189815,8 @@ async function applyOverlays(input) {
   const cwd = resolve81(input.cwd);
   const shell = input.shell ?? DEFAULT_BRANDABLE_SHELL;
   assertKnownShell(shell);
-  const overlay = JSON.parse(readFileSync123(input.overlayPath, "utf8"));
-  const tokens2 = JSON.parse(readFileSync123(input.tokensPath, "utf8"));
+  const overlay = JSON.parse(readFileSync124(input.overlayPath, "utf8"));
+  const tokens2 = JSON.parse(readFileSync124(input.tokensPath, "utf8"));
   const faq = staticFaqFor(overlay, input.overlayPath);
   if (faq !== void 0) overlay.faq = faq;
   const galleries = staticGalleriesFor(overlay, input.overlayPath);
@@ -189676,7 +189835,7 @@ async function applyOverlays(input) {
     }
     const appDir3 = join117(repoRoot2, shellAppDir(shell));
     const committedPath = join117(appDir3, "provisioning.json");
-    const committedSite = existsSync106(committedPath) ? JSON.parse(readFileSync123(committedPath, "utf8")).site : void 0;
+    const committedSite = existsSync106(committedPath) ? JSON.parse(readFileSync124(committedPath, "utf8")).site : void 0;
     if (committedSite !== void 0 && overlay.site === void 0) {
       throw new Error(
         `shell "${shell}" is a site shell: its contract names the customer's website (a \`site\` block), and this overlay has none. Re-run \`himi site analyze --url <site> --shell ${shell}\` to derive the site's page map (edit \`site.pages\` in provisioning.overlay.json if needed), then --apply.`
@@ -189718,7 +189877,7 @@ async function applyOverlays(input) {
   let packageFaq = faq;
   let packageGalleries = galleries;
   if (existsSync106(pkgProv)) {
-    const cur = JSON.parse(readFileSync123(pkgProv, "utf8"));
+    const cur = JSON.parse(readFileSync124(pkgProv, "utf8"));
     if (galleries === void 0 && !sameKnownSite(cur, overlay)) overlay.galleries = [];
     const merged = deepMerge4(cur, overlay);
     packageFaq = merged.faq;
@@ -189736,7 +189895,7 @@ async function applyOverlays(input) {
   }
   const pkgTokens = join117(cwd, "tokens.json");
   if (existsSync106(pkgTokens) && (tokens2.colors || tokens2.typography)) {
-    const cur = JSON.parse(readFileSync123(pkgTokens, "utf8"));
+    const cur = JSON.parse(readFileSync124(pkgTokens, "utf8"));
     let tokensIn = tokens2;
     if (tokens2.typography) {
       const fonts = catalogTypography(tokens2.typography, cur.typography);
@@ -189763,7 +189922,7 @@ async function applyOverlays(input) {
   const homeAction = homeRefreshActionId(shell);
   const homeSrc = join117(cwd, "dev/index.ts");
   if (homeAction && existsSync106(homeSrc)) {
-    const prev = readFileSync123(homeSrc, "utf8");
+    const prev = readFileSync124(homeSrc, "utf8");
     const patched = patchBrandParams(prev, overlay, homeAction);
     let next = patched.src;
     if (!patched.foreign && faq?.length && prev.includes('"tier5.himiBrandedFaq.load"') && !prev.includes('"staticFaq"')) {
@@ -190498,13 +190657,13 @@ async function veloCall(fetchImpl, method, url, opts = {}) {
     body: opts.body === void 0 ? void 0 : JSON.stringify(opts.body),
     signal: AbortSignal.timeout(opts.timeoutMs ?? 3e4)
   });
-  const text11 = await res.text();
-  let json8 = text11;
+  const text12 = await res.text();
+  let json8 = text12;
   try {
-    json8 = text11 ? JSON.parse(text11) : null;
+    json8 = text12 ? JSON.parse(text12) : null;
   } catch {
   }
-  return { status: res.status, json: json8, text: text11 };
+  return { status: res.status, json: json8, text: text12 };
 }
 function snippet2(x2, cap = 180) {
   const s2 = typeof x2 === "string" ? x2 : JSON.stringify(x2) ?? "";
@@ -190763,7 +190922,7 @@ __export(cli_exports3, {
   runSiteAnalyze: () => runSiteAnalyze,
   runSiteFunctionCli: () => runSiteFunctionCli
 });
-import { existsSync as existsSync107, readFileSync as readFileSync124 } from "node:fs";
+import { existsSync as existsSync107, readFileSync as readFileSync125 } from "node:fs";
 import { resolve as resolve82 } from "node:path";
 function applyNeedsClient(shell) {
   if (shell === void 0 || !SHELL_NAMES.includes(shell)) return true;
@@ -190833,7 +190992,7 @@ async function runSiteAnalyze(opts) {
       const prevOverlayPath = resolve82(outDir, "provisioning.overlay.json");
       const prevSite = existsSync107(prevOverlayPath) ? (() => {
         try {
-          return JSON.parse(readFileSync124(prevOverlayPath, "utf8")).site;
+          return JSON.parse(readFileSync125(prevOverlayPath, "utf8")).site;
         } catch {
           return void 0;
         }
@@ -190852,7 +191011,7 @@ async function runSiteAnalyze(opts) {
   }
   const previousOverlay = resolve82(outDir, "provisioning.overlay.json");
   carryOverGoals(
-    existsSync107(previousOverlay) ? readFileSync124(previousOverlay, "utf8") : void 0,
+    existsSync107(previousOverlay) ? readFileSync125(previousOverlay, "utf8") : void 0,
     result.provisioningOverlay
   );
   const ownerCall = ownerAuth ? ownerTransportFrom(fetchImpl, ownerAuth) : void 0;
@@ -190910,7 +191069,7 @@ async function runSiteFunctionCli(opts) {
   let source;
   if (opts.sourcePath) {
     const p2 = resolve82(opts.cwd ?? process.cwd(), opts.sourcePath);
-    source = readFileSync124(p2, "utf8");
+    source = readFileSync125(p2, "utf8");
   }
   let body;
   if (opts.bodyRaw != null) {
@@ -190940,7 +191099,7 @@ async function runSiteFunctionCli(opts) {
 function base44BookRoutes(bookPath, siteUrl) {
   if (!existsSync107(bookPath)) return void 0;
   try {
-    const book = JSON.parse(readFileSync124(bookPath, "utf8"));
+    const book = JSON.parse(readFileSync125(bookPath, "utf8"));
     if (book.kind !== "base44-app-book" || !Array.isArray(book.routes)) return void 0;
     const host = (u2) => {
       try {
@@ -191061,10 +191220,10 @@ function accountTransport(fetchImpl = fetch, timeoutMs = DEFAULT_TIMEOUT_MS5, sp
       }
       throw new Error(`${method} ${path2} failed: ${err?.message ?? String(e2)}`);
     }
-    const text11 = await res.text();
-    let parsed = text11;
+    const text12 = await res.text();
+    let parsed = text12;
     try {
-      parsed = text11 ? JSON.parse(text11) : null;
+      parsed = text12 ? JSON.parse(text12) : null;
     } catch {
     }
     if (!res.ok) throw new WixApiError(res.status, method, path2, parsed);
@@ -191125,16 +191284,16 @@ async function installVerticals(msid, wanted, token, fetchImpl = fetch, timeoutM
     body: JSON.stringify({ apps: wanted.map((w2) => ({ id: w2.appDefId })) }),
     signal: AbortSignal.timeout(timeoutMs)
   });
-  const text11 = await res.text();
+  const text12 = await res.text();
   if (!res.ok) {
     return {
       ...empty2,
-      errors: wanted.map((w2) => ({ ...w2, message: `bulk-install -> ${res.status}: ${text11.slice(0, 200)}` }))
+      errors: wanted.map((w2) => ({ ...w2, message: `bulk-install -> ${res.status}: ${text12.slice(0, 200)}` }))
     };
   }
   let body = {};
   try {
-    body = text11 ? JSON.parse(text11) : {};
+    body = text12 ? JSON.parse(text12) : {};
   } catch {
   }
   const nameOf2 = (appDefId) => wanted.find((w2) => w2.appDefId === appDefId)?.vertical ?? appDefId;
@@ -191195,7 +191354,7 @@ __export(site_create_exports, {
   runSiteList: () => runSiteList,
   writeProvisioningBinding: () => writeProvisioningBinding
 });
-import { existsSync as existsSync108, readFileSync as readFileSync125, writeFileSync as writeFileSync49 } from "node:fs";
+import { existsSync as existsSync108, readFileSync as readFileSync126, writeFileSync as writeFileSync49 } from "node:fs";
 import { resolve as resolvePath2 } from "node:path";
 function oauthClientName(projectName) {
   return `${projectName} client`;
@@ -191344,7 +191503,7 @@ async function runSiteCreate(opts) {
   if (!wantOauthApp) return { ...base, nextSteps: nextSteps(metaSiteId) };
   return { ...base, clientId, redirectUri, nextSteps: nextSteps(metaSiteId, clientId) };
 }
-function writeProvisioningBinding(target, binding2, fs2 = { existsSync: existsSync108, readFileSync: readFileSync125, writeFileSync: writeFileSync49 }) {
+function writeProvisioningBinding(target, binding2, fs2 = { existsSync: existsSync108, readFileSync: readFileSync126, writeFileSync: writeFileSync49 }) {
   const msid = binding2.siteId;
   const path2 = resolvePath2(target);
   const committed = committedShellProvisioning(path2);
@@ -191740,9 +191899,9 @@ function redactVeloSource(source, knownSecrets = []) {
   const visitLiterals = (node) => {
     if (ts12.isStringLiteral(node) || ts12.isNoSubstitutionTemplateLiteral(node) || ts12.isTemplateExpression(node)) {
       const start = node.getStart(clean2);
-      const text11 = source.slice(start, node.end);
-      const redacted = redactLiteral(text11, start);
-      if (redacted !== text11) {
+      const text12 = source.slice(start, node.end);
+      const redacted = redactLiteral(text12, start);
+      if (redacted !== text12) {
         edits.push({ start, end: node.end, text: redacted });
         return;
       }
@@ -192273,7 +192432,7 @@ var init_capture = __esm({
 
 // src/fidelity/judge.ts
 import { spawn as spawn7 } from "node:child_process";
-import { copyFileSync as copyFileSync3, mkdtempSync as mkdtempSync11, readFileSync as readFileSync126, rmSync as rmSync32 } from "node:fs";
+import { copyFileSync as copyFileSync3, mkdtempSync as mkdtempSync11, readFileSync as readFileSync127, rmSync as rmSync32 } from "node:fs";
 import { tmpdir as tmpdir12 } from "node:os";
 import { basename as basename26, dirname as dirname58, join as join119, resolve as resolve83 } from "node:path";
 import { fileURLToPath as fileURLToPath32 } from "node:url";
@@ -192309,8 +192468,8 @@ async function judgeStrip(strip3, screen, variant, opts = {}) {
   const judgeDir = opts.judgeDir ?? SOURCE_JUDGE_DIR;
   let prompt, schema;
   try {
-    prompt = readFileSync126(resolve83(judgeDir, "JUDGE.md"), "utf8");
-    schema = readFileSync126(resolve83(judgeDir, "verdict.schema.json"), "utf8");
+    prompt = readFileSync127(resolve83(judgeDir, "JUDGE.md"), "utf8");
+    schema = readFileSync127(resolve83(judgeDir, "verdict.schema.json"), "utf8");
   } catch (e2) {
     return cannotTell(`the judge prompt could not be read from ${judgeDir}: ${e2.message}`);
   }
@@ -192698,7 +192857,7 @@ __export(fidelity_exports, {
   himalayaRepoRoot: () => himalayaRepoRoot
 });
 import { execFileSync as execFileSync10 } from "node:child_process";
-import { existsSync as existsSync111, realpathSync as realpathSync17 } from "node:fs";
+import { existsSync as existsSync111, realpathSync as realpathSync18 } from "node:fs";
 import { join as join123, relative as relative20, sep as sep23 } from "node:path";
 function himalayaRepoRoot(dir) {
   let top;
@@ -192708,7 +192867,7 @@ function himalayaRepoRoot(dir) {
     return null;
   }
   if (!existsSync111(join123(top, "tools/judges/fidelity/JUDGE.md"))) return null;
-  const rel = relative20(realpathSync17(top), realpathSync17(dir));
+  const rel = relative20(realpathSync18(top), realpathSync18(dir));
   return rel.startsWith(`..${sep23}`) || rel === ".." ? null : top;
 }
 function fidelityEnvelope(report3) {
@@ -192837,10 +192996,10 @@ var ServeCliClient = class {
       ...carriesCredential ? { redirect: "error" } : {},
       body: opts.rawBody !== void 0 ? new Uint8Array(opts.rawBody) : opts.body !== void 0 ? JSON.stringify(opts.body) : void 0
     });
-    const text11 = await res.text();
+    const text12 = await res.text();
     let json8 = null;
     try {
-      json8 = text11 ? JSON.parse(text11) : null;
+      json8 = text12 ? JSON.parse(text12) : null;
     } catch {
       json8 = null;
     }
@@ -192848,7 +193007,7 @@ var ServeCliClient = class {
     res.headers.forEach((v2, k2) => {
       h2[k2] = v2;
     });
-    return { status: res.status, ok: res.ok, json: json8, text: text11, headers: h2 };
+    return { status: res.status, ok: res.ok, json: json8, text: text12, headers: h2 };
   }
   // ---- serve (device-facing reads) ----
   health(plane) {
@@ -194349,7 +194508,7 @@ var COMMANDS = [
   { name: "visibility", summary: "read (no value) or set whether the public registry (/v1/apps + the Himi Player picker) LISTS the app. `public` lists it for everyone; `unlisted` hides it from listings while direct reads by app id \u2014 deep links, previews \u2014 keep working. App from --app or the content dir. Setting it needs no republish.", required: "[public|unlisted] [--app <a>] [--content <dir>] (--control-token)" },
   { name: "dist", summary: "build an INSTALLABLE QA binary (signed IPA / APK) on the Wix Job Service Mac pool and return an install link \u2014 the serve plane brokers the job, the pool builds it. WAITS for the build by default (~4 min) and prints the install link; `--no-wait` returns a jobId immediately instead. Omitting `--release` builds whatever is LIVE for the app. A named draft is refused unless `--allow-draft` makes that exceptional build explicit. `status <jobId>` / `watch <jobId>` / `list --app <a>` / `cancel <jobId>` inspect and stop builds (`watch` reports up front whether the job mints its own signing identity or borrows one, so a doomed iOS build is cancellable in seconds rather than after the archive). Off-repo, name a target \u2014 `--target wix` for a self-serve Wix login or `--target bo` for the internal employee path (the in-repo default is a local dev plane that isn't reachable off-repo); self-serve callers may build their OWN apps under a tighter budget (2 in flight / 5 per 24h), while a manage-only owner-role credential is refused. `--shell` picks the native host to sign into (branded-lite | owner-lite | brandy | base44 | player | demo-app) and defaults to the content package's himalaya.content.json `shell` (templates carry the one they were written for), else branded-lite. The per-app shells ADD the release's declared capabilities to the binary, while Himi Player and demo-app refuse a release declaring one they lack; `--plan` previews it without building; `brandy` is the site shell \u2014 the customer's own website as native-framed tabs. `--signing` defaults to `wix-managed` \u2014 the Wix Apple account mints a per-app signing identity for the build, so the caller provisions no Apple credentials of their own; `--signing byo --site <id>` reuses an existing customer ad-hoc profile and certificate for iOS; requires an owned site and a completed personal signing binding. `--android-signing` is the Android counterpart and a SEPARATE axis (a keystore, not an Apple account): `qa-keystore` (default \u2014 the repo's committed QA key, identical on every pool machine, so a build installs over the previous one), `wix-keystore` (the Wix key the pool machine carries; the build FAILS naming the paths searched if it carries none, rather than quietly signing with something else), or `debug` (the old per-machine key \u2014 QA must uninstall any previous build first). `--aab` builds an Android App Bundle (.aab) for the owner to upload to Google Play AND an APK from the same build \u2014 a download link for the .aab, an install link and QR for the APK; Android only; the bundle is signed with the Wix production key (`wix-keystore`, the upload key Branded apps use) \u2014 any other `--android-signing` is refused \u2014 and the APK with the committed QA key; a self-serve caller gets one only as the store build of its own Containers app (it must own the app's site, and `--aab` sends your Wix login); any other self-serve `--aab` gets 403 android_format_not_allowed. NOT the normal way to ship: screens, Tier-5 bundles, tokens and app-config all go over the air with `himi push` in seconds \u2014 a binary trip is only needed for a NATIVE delta (a new SDUI component, a new declared capability/entitlement, a new bundle id, or a minBinaryVersion floor bump). Refuses to build an app whose launcher icon is missing, a placeholder, or one a store would reject \u2014 the one thing a binary carries that no later OTA push can fix; `--force` builds anyway. Also refuses a release whose member login (WixConsumerAuthProvider) names no siteId, or not in lower case, when Wix says its site requires a member CAPTCHA \u2014 such a binary ships without the CAPTCHA key and every member sign-in fails; whatever it cannot read (the release, the site's setting) only warns and builds; `--skip-captcha-check` builds anyway", required: "[--app <a>] [--platform ios,android] [--release <id>] [--allow-draft] [--target <t>] [--shell branded-lite|owner-lite|brandy|base44|player|demo-app] [--signing wix-managed|byo] [--site <id>] [--android-signing qa-keystore|wix-keystore|debug] [--aab] [--borrow-ios-id <bundleId>] [--no-wait] [--force] [--skip-captcha-check] [--plan] | status <jobId> [--target <t>] | watch <jobId> [--target <t>] [--interval <ms>] | list --app <a> [--target <t>] | cancel <jobId> [--target <t>]" },
   { name: "testflight", summary: 'build, sign and upload an app to TestFlight (internal testers \u2014 no Beta App Review), then WAIT until App Store Connect finishes processing it. Sugar for `store upload --track testflight`. Prompts first: a build number is consumed permanently on a real Apple account and cannot be reused \u2014 `--yes` for CI, `--dry-run` to see the plan without touching anything. The wait is the real check, not a nicety: fastlane prints "Successfully uploaded" for a binary App Store Connect then rejects in processing, and a rejected binary leaves NO build record at all (the reason is emailed). Public App Store review is deliberately NOT automatable here \u2014 `--track appstore` is refused; use /submit-ios-app when you mean to go public', required: "<app> [--track testflight|internal] [--profile <name>] [--yes] [--dry-run] [--skip-build] [--no-wait] [--json]" },
-  { name: "store", summary: "the App Store Connect group behind `testflight`. `preflight <app>` checks readiness offline (icon, entitlements, encryption flag, version, store.config ids, listing + review record); `upload <app>` is what `testflight` runs; `status <app>` reads live build + processing state. `--profile` selects WHICH App Store Connect account: an app built for a Wix customer ships under the CUSTOMER's Apple team (Apple guideline 4.2.6 forbids an app-generation service submitting on a client's behalf), declared per-app as ios.credentialProfile in store.config.yaml and resolved from ~/.himalaya/store-credentials/<name>.json \u2014 the .p8 itself never enters the repo. `iap draft|plan|apply|status|connect|screenshots|check|mappings` registers an app owner's digital products as in-app purchases (non-consumables, or consumable price tiers): draft reads the Wix catalog and writes the manifest, plan and status only read, apply is the one App Store mutation boundary, connect readies the Wix site to sell them (purchases app, In-App Purchase key, appleIAP provider, product mappings; --preview-tag routes only its Serve calls to a deploy preview), legacy screenshots --profile renders each product's purchase screen from the app (--content) as a bound iPhone shows it to a signed-in member and names the 1290\xD72796 PNG as the item's App Review screenshot, and none of them builds, signs or needs a checkout (`himi docs iap-products`) IAP provisioning defaults to Catalog; managed apply generates screenshots on the server with no local .p8 or profile fallback; --managed is optional and --profile selects legacy mode; --catalog-route or HIMI_IAP_CATALOG_ROUTE has no default.", required: "preflight <app> [--profile <n>] | upload <app> [--track <t>] [--profile <n>] [--yes] [--dry-run] | status <app> [--profile <n>] | iap draft --site <msid> " + IAP_CREDENTIAL_OPTIONS + " --apple-app <id> --bundle <id> --base-territory <t> --out <f> [--territories <a,b>] [--locale <l>] [--mode per-item|tiers] [--merge <f>] [--report <f>] [--json] | iap plan --manifest <f> " + IAP_CREDENTIAL_OPTIONS + " --out <f> [--json] | iap apply --plan <f> " + IAP_CREDENTIAL_OPTIONS + " --out <f> [--yes] [--limit <n>] [--no-submit] [--json] | iap status --manifest <f> " + IAP_CREDENTIAL_OPTIONS + " [--out <f>] [--json] | iap connect --manifest <f> [--profile <n>] [--catalog-route <prefix>] [--iap-key <AuthKey.p8> --iap-key-id <id>] [--content <dir>] [--preview-tag dp-<tag>] [--dry-run] [--yes] [--out <f>] [--json] | iap screenshots --manifest <f> --content <dir> --profile <n> [--out-dir <d>] [--only <id,\u2026>] [--force] [--dry-run] [--json] | iap check --manifest <f> --catalog-route <prefix> [--purchases-app <id>] [--content <dir>] [--plist <file>] [--visitor-client <id>] [--json] | iap mappings --site <msid> --purchases-app <id> --catalog-route <prefix> [--product <id> --active true|false --yes] [--json]" },
+  { name: "store", summary: "`apple-keys setup|status` onboards the owner\u2019s ASC and In-App Purchase keys independently of push and signing profiles. The App Store Connect group behind `testflight`. `preflight <app>` checks readiness offline (icon, entitlements, encryption flag, version, store.config ids, listing + review record); `upload <app>` is what `testflight` runs; `status <app>` reads live build + processing state. `--profile` selects WHICH App Store Connect account: an app built for a Wix customer ships under the CUSTOMER's Apple team (Apple guideline 4.2.6 forbids an app-generation service submitting on a client's behalf), declared per-app as ios.credentialProfile in store.config.yaml and resolved from ~/.himalaya/store-credentials/<name>.json \u2014 the .p8 itself never enters the repo. `iap draft|plan|apply|status|connect|screenshots|check|mappings` registers an app owner's digital products as in-app purchases (non-consumables, or consumable price tiers): draft reads the Wix catalog and writes the manifest, plan and status only read, apply is the one App Store mutation boundary, connect readies the Wix site to sell them (purchases app, In-App Purchase key, appleIAP provider, product mappings; --preview-tag routes only its Serve calls to a deploy preview), legacy screenshots --profile renders each product's purchase screen from the app (--content) as a bound iPhone shows it to a signed-in member and names the 1290\xD72796 PNG as the item's App Review screenshot, and none of them builds, signs or needs a checkout (`himi docs iap-products`) IAP provisioning defaults to Catalog; managed apply generates screenshots on the server with no local .p8 or profile fallback; --managed is optional and --profile selects legacy mode; --catalog-route or HIMI_IAP_CATALOG_ROUTE has no default.", required: "apple-keys setup|status --app <slug> --site <metaSiteId> --bundle-id <id> [--asc-key-file <p8> --asc-key-id <id> --asc-issuer-id <issuer>] [--iap-key <p8> --iap-key-id <id> --iap-issuer-id <issuer>] [--yes|--dry-run] [--json] | preflight <app> [--profile <n>] | upload <app> [--track <t>] [--profile <n>] [--yes] [--dry-run] | status <app> [--profile <n>] | iap draft --site <msid> " + IAP_CREDENTIAL_OPTIONS + " --apple-app <id> --bundle <id> --base-territory <t> --out <f> [--territories <a,b>] [--locale <l>] [--mode per-item|tiers] [--merge <f>] [--report <f>] [--json] | iap plan --manifest <f> " + IAP_CREDENTIAL_OPTIONS + " --out <f> [--json] | iap apply --plan <f> " + IAP_CREDENTIAL_OPTIONS + " --out <f> [--yes] [--limit <n>] [--no-submit] [--json] | iap status --manifest <f> " + IAP_CREDENTIAL_OPTIONS + " [--out <f>] [--json] | iap connect --manifest <f> [--profile <n>] [--catalog-route <prefix>] [--iap-key <AuthKey.p8> --iap-key-id <id>] [--content <dir>] [--preview-tag dp-<tag>] [--dry-run] [--yes] [--out <f>] [--json] | iap screenshots --manifest <f> --content <dir> --profile <n> [--out-dir <d>] [--only <id,\u2026>] [--force] [--dry-run] [--json] | iap check --manifest <f> --catalog-route <prefix> [--purchases-app <id>] [--content <dir>] [--plist <file>] [--visitor-client <id>] [--json] | iap mappings --site <msid> --purchases-app <id> --catalog-route <prefix> [--product <id> --active true|false --yes] [--json]" },
   { name: "guide", summary: "print the Himalaya overview + headless dev loop + available topics (offline)", required: "[--json]" },
   { name: "docs", summary: "print bundled/verified cached guides offline; status reports kit identity; refresh downloads compatible reference content independently of CLI without changing app source", required: "[<topic>|catalog [kind]|status|refresh] [--pin <version|digest>] [--unpin] [--no-network] [--json]" },
   { name: "components", summary: "print the SDUI component vocabulary + props; a name = that component (offline)", required: "[<Name>] [--json]" },
@@ -195494,8 +195653,8 @@ async function templateCommand(ctx) {
       io2.error(JSON.stringify({ ok: false, error: e2.message }));
       return 2;
     }
-    const text11 = str3(flags.text) ?? (pos.slice(2).join(" ") || void 0);
-    if (!text11 && !verticals?.length) {
+    const text12 = str3(flags.text) ?? (pos.slice(2).join(" ") || void 0);
+    if (!text12 && !verticals?.length) {
       io2.error(JSON.stringify({
         ok: false,
         error: 'nothing to match \u2014 pass a business description (--text "\u2026"), --verticals stores,bookings, or --book <site analyze dir>',
@@ -195516,7 +195675,7 @@ async function templateCommand(ctx) {
         note = `remote catalog unreachable (${e2.message}); ranked the embedded templates only`;
       }
     }
-    const res = recommendTemplates2({ catalog: catalog4, verticals, text: text11 });
+    const res = recommendTemplates2({ catalog: catalog4, verticals, text: text12 });
     print({
       ok: true,
       ...verticals?.length ? { verticals } : {},
@@ -196157,9 +196316,9 @@ function dpxSessionPresent(path2 = dpxSessionTokenPath()) {
     return false;
   }
 }
-function isPortInUseError(text11) {
-  if (!text11) return false;
-  return /EADDRINUSE/i.test(text11) || new RegExp(`(:::|:)${DPX_SESSION_PORT}\\b`).test(text11);
+function isPortInUseError(text12) {
+  if (!text12) return false;
+  return /EADDRINUSE/i.test(text12) || new RegExp(`(:::|:)${DPX_SESSION_PORT}\\b`).test(text12);
 }
 function parseDpxAuthStatusIdentity(stdout) {
   if (!stdout) return void 0;
@@ -196312,23 +196471,23 @@ async function functionsCommand(ctx) {
     const app = str3(flags.app) ?? loaded.app;
     const invoked2 = await invokeRemoteFunction2({ baseUrl: target.baseUrl, app, definition, body: input, params, releaseId: remoteRelease, previewToken: str3(flags["preview-token"]), boCookie: boCookie() });
     const response = invoked2.response;
-    const text12 = await response.text();
+    const text13 = await response.text();
     let body2;
     try {
-      body2 = JSON.parse(text12);
+      body2 = JSON.parse(text13);
     } catch {
-      body2 = text12;
+      body2 = text13;
     }
     print({ ok: response.ok, app, releaseId: remoteRelease ?? null, url: invoked2.url, status: response.status, body: body2 });
     return response.ok ? 0 : 1;
   }
   const invoked = await invokeLocalFunction2(loaded, name, input, params);
-  const text11 = await invoked.response.text();
+  const text12 = await invoked.response.text();
   let body;
   try {
-    body = JSON.parse(text11);
+    body = JSON.parse(text12);
   } catch {
-    body = text11;
+    body = text12;
   }
   print({ ok: invoked.response.ok, app: loaded.app, releaseId: invoked.releaseId, status: invoked.response.status, body });
   return invoked.response.ok ? 0 : 1;
@@ -197495,8 +197654,8 @@ function pushAuthHint(status, token, target, hasOwnerIssuer = true) {
 }
 async function contentVisibility(dir) {
   try {
-    const { readFileSync: readFileSync127 } = await import("node:fs");
-    const m2 = JSON.parse(readFileSync127(join89(dir, "himalaya.content.json"), "utf8"));
+    const { readFileSync: readFileSync128 } = await import("node:fs");
+    const m2 = JSON.parse(readFileSync128(join89(dir, "himalaya.content.json"), "utf8"));
     if (m2.visibility === "public" || m2.visibility === "unlisted") return m2.visibility;
   } catch {
   }
@@ -198464,8 +198623,8 @@ import { resolve as resolve70 } from "node:path";
 
 // ../../core/admin-web/src/utils/qr-terminal.ts
 init_qr();
-function qrTerminal(text11, opts = {}) {
-  const { modules, size } = encodeQr(text11);
+function qrTerminal(text12, opts = {}) {
+  const { modules, size } = encodeQr(text12);
   const quietZone = opts.quietZone ?? 4;
   const dim = size + quietZone * 2;
   const dark = (x2, y2) => x2 >= quietZone && x2 < quietZone + size && y2 >= quietZone && y2 < quietZone + size ? modules[y2 - quietZone][x2 - quietZone] : false;
@@ -200036,6 +200195,10 @@ function wixPlayerTestflightTarget(requested) {
 }
 async function testflightCommand(ctx) {
   const { io: io2, deps, pos, flags, command } = ctx;
+  if (command === "store" && pos[1] === "apple-keys") {
+    const { runAppleKeys: runAppleKeys2 } = await Promise.resolve().then(() => (init_apple_keys(), apple_keys_exports));
+    return runAppleKeys2(pos, flags, io2);
+  }
   if (command === "store" && pos[1] === "iap") {
     const { runStoreIap: runStoreIap2, defaultStoreIapDeps: defaultStoreIapDeps2 } = await Promise.resolve().then(() => (init_store_iap(), store_iap_exports));
     return runStoreIap2(pos, flags, io2, { ...defaultStoreIapDeps2(), validateConfig: createTrimValidator(deps) });
@@ -200665,7 +200828,7 @@ ${label3}`);
 
 // src/commands/login.ts
 init_config();
-import { readFileSync as readFileSync111 } from "node:fs";
+import { readFileSync as readFileSync112 } from "node:fs";
 init_browser_login();
 init_wix_owner();
 init_owner_claim();
@@ -200886,7 +201049,7 @@ async function loginCommand(ctx) {
     const dpxPath = dpxSessionTokenPath();
     let dpx;
     try {
-      dpx = readFileSync111(dpxPath, "utf8").trim();
+      dpx = readFileSync112(dpxPath, "utf8").trim();
     } catch {
       io2.error(JSON.stringify({ error: `no dpx session at ${dpxPath} \u2014 run \`dpx auth login\` then \`dpx auth token > ${dpxPath}\` (dpx 2.x keeps its own state in ~/.dpx/auth.json and does NOT write the legacy session file), or omit --dpx` }));
       return 1;
@@ -201253,7 +201416,7 @@ async function upgradeCommand(ctx) {
 
 // src/commands/doctor.ts
 init_config();
-import { statSync as statSync26, accessSync as accessSync2, constants as constants6 } from "node:fs";
+import { statSync as statSync27, accessSync as accessSync2, constants as constants6 } from "node:fs";
 import { join as join102 } from "node:path";
 init_wix_owner();
 init_owner_claim();
@@ -201301,7 +201464,7 @@ function executableOnPath(name, env = process.env) {
     for (const suffix of suffixes) {
       const candidate = join102(dir, `${name}${suffix}`);
       try {
-        if (!statSync26(candidate).isFile()) continue;
+        if (!statSync27(candidate).isFile()) continue;
         if (process.platform !== "win32") accessSync2(candidate, constants6.X_OK);
         return true;
       } catch {
@@ -201744,7 +201907,7 @@ async function guideCommand(ctx) {
 }
 
 // src/commands/secrets.ts
-import { readFileSync as readFileSync113 } from "node:fs";
+import { readFileSync as readFileSync114 } from "node:fs";
 init_cli_shared();
 async function secretsCommand(ctx) {
   const { io: io2, pos, flags } = ctx;
@@ -201765,7 +201928,7 @@ async function secretsCommand(ctx) {
     const path2 = dpxSessionTokenPath();
     let raw;
     try {
-      raw = readFileSync113(path2, "utf8");
+      raw = readFileSync114(path2, "utf8");
     } catch {
       io2.error(JSON.stringify({ error: `no DPX BO session at ${path2}` }));
       return 1;
@@ -201783,7 +201946,7 @@ init_schema2();
 // src/cms.ts
 init_cms_schema();
 init_wix_owner();
-import { existsSync as existsSync97, readFileSync as readFileSync114, writeFileSync as writeFileSync37 } from "node:fs";
+import { existsSync as existsSync97, readFileSync as readFileSync115, writeFileSync as writeFileSync37 } from "node:fs";
 import { join as join104 } from "node:path";
 var FOREIGN_DETAIL_LIMIT = 25;
 var MAX_COLLECTION_PAGES = 40;
@@ -202308,7 +202471,7 @@ function readSeedFile(dir) {
   if (!existsSync97(file2)) return {};
   let parsed;
   try {
-    parsed = JSON.parse(readFileSync114(file2, "utf8"));
+    parsed = JSON.parse(readFileSync115(file2, "utf8"));
   } catch (e2) {
     throw new Error(`cms-seed.json is not valid JSON (${e2.message}). Fix or delete it.`);
   }
@@ -202370,7 +202533,7 @@ async function writeSeedRows(opts) {
   if (existsSync97(file2)) {
     let parsed;
     try {
-      parsed = JSON.parse(readFileSync114(file2, "utf8"));
+      parsed = JSON.parse(readFileSync115(file2, "utf8"));
     } catch (e2) {
       throw new Error(
         `cms-seed.json is not valid JSON (${e2.message}). Refusing to regenerate, because overwriting it would discard the rows already in it. Fix the JSON, or delete the file if you want a fresh set.`
@@ -203268,14 +203431,14 @@ function createTrimValidator(deps = {}, spawnFn = spawn9) {
       const parsed = JSON.parse(report3);
       counts = parsed.counts;
       if (Array.isArray(parsed.findings)) {
-        const text11 = (v2) => typeof v2 === "string" && v2 ? v2 : void 0;
+        const text12 = (v2) => typeof v2 === "string" && v2 ? v2 : void 0;
         errors = parsed.findings.filter((f2) => f2 && f2.severity === "error" && typeof f2.id === "string").map((f2) => ({
           id: f2.id,
-          message: text11(f2.message) ?? "",
-          ...text11(f2.pass) ? { pass: text11(f2.pass) } : {},
-          ...text11(f2.screen) ? { screen: text11(f2.screen) } : {},
-          ...text11(f2.path) ? { path: text11(f2.path) } : {},
-          ...text11(f2.ruleCode) ? { ruleCode: text11(f2.ruleCode) } : {}
+          message: text12(f2.message) ?? "",
+          ...text12(f2.pass) ? { pass: text12(f2.pass) } : {},
+          ...text12(f2.screen) ? { screen: text12(f2.screen) } : {},
+          ...text12(f2.path) ? { path: text12(f2.path) } : {},
+          ...text12(f2.ruleCode) ? { ruleCode: text12(f2.ruleCode) } : {}
         }));
       }
     } catch {