@wix/himalaya-cli 0.1603.0 → 0.1605.0

package/dist/authoring-runtime/node_modules/@wix/himalaya/dist/_types/core/ts/src/define-app.d.ts

@@ -624,6 +624,13 @@ export interface PushConfig {
      *  account-level app that is not about any single site. Only the "wix-ping"
      *  registrar reads it. */
     pingScope?: "site" | "user";
+    /** Extra link prefixes stripped before `routes` match (#4709), for an app inheriting a
+     *  legacy link space: e.g. `["legacyapp://", "https://legacy.example.com/app/"]` turns
+     *  `legacyapp://widget/42` into the residual `widget/42`. Tried after the "wix-ping"
+     *  rules; the longest matching prefix wins; scheme and host compare case-insensitively,
+     *  the path exactly, and a prefix ends at `/`, `?` or `#`. A relative link (`/widget/42`)
+     *  is a residual without any prefix. */
+    linkPrefixes?: string[];
     /** Token registrar. "generic" ⇒ POST the token to `registerUrl`; "wix-ping"
      *  ⇒ the native Wix Ping registrar. */
     registrar: PushRegistrar;

package/dist/authoring-runtime/node_modules/@wix/himalaya/dist/_types/core/ts/src/push-routes.d.ts

@@ -49,8 +49,13 @@ export interface AdaptedLink {
  * link through unchanged rather than failing, so an older binary served a config
  * naming an adapter it has never heard of degrades to today's behavior instead of
  * dropping every notification (invariants 6/8).
+ *
+ * #4709 — `linkPrefixes` (`PushConfig.linkPrefixes`). In order: the "wix-ping" rules
+ * (when that is the adapter); then the LONGEST configured prefix the link starts with
+ * is stripped; then a relative link (`/widget/7`) is a residual as is. Anything else
+ * passes through unchanged. Only a Wix link yields a `metaSiteId`.
  */
-export declare function adaptPayloadLink(link: string, adapter?: string): AdaptedLink;
+export declare function adaptPayloadLink(link: string, adapter?: string, linkPrefixes?: readonly string[]): AdaptedLink;
 /**
  * The himi link the first matching route produces, or null when nothing matches.
  *
@@ -67,6 +72,7 @@ export declare function matchPushRoute(residual: string, routes: readonly PushRo
 export declare function resolvePushRoute(link: string, config: {
     routes?: readonly PushRoute[];
     payloadAdapter?: string;
+    linkPrefixes?: readonly string[];
 } | undefined, payload?: PushPayloadContext): {
     link: string | null;
     params: Record<string, string>;

package/dist/authoring-runtime/node_modules/@wix/himalaya/dist/wix-bi.mjs

@@ -45,8 +45,17 @@ function redactFrogParam(value) {
   return value;
 }
 var BARE_ENDPOINT = /^[A-Za-z0-9][A-Za-z0-9._-]*$/;
+function onConfigOrigin(name, configEndpoint) {
+  if (!configEndpoint || !configEndpoint.includes("://")) return name;
+  try {
+    const url = new URL(configEndpoint);
+    return `${url.protocol}//${url.host}/${name}`;
+  } catch {
+    return name;
+  }
+}
 function eventEndpoint(eventEndpointValue, configEndpoint) {
-  return frogEndpointUrl(eventEndpointValue && BARE_ENDPOINT.test(eventEndpointValue) ? eventEndpointValue : configEndpoint);
+  return frogEndpointUrl(eventEndpointValue && BARE_ENDPOINT.test(eventEndpointValue) ? onConfigOrigin(eventEndpointValue, configEndpoint) : configEndpoint);
 }
 function frogEndpointUrl(endpoint) {
   const e = (endpoint ?? "").trim() || ONEAPP_DEFAULT_ENDPOINT;

package/dist/cli.mjs

@@ -1187,14 +1187,14 @@ var init_start_prompt = __esm({
 // src/source-deny.ts
 import { sep } from "node:path";
 function isDeniedSourcePath(relPath) {
-  const segments = relPath.split(/[\\/]/).filter(Boolean);
-  if (segments.length === 0) return false;
-  const dirs = segments.slice(0, -1);
+  const segments2 = relPath.split(/[\\/]/).filter(Boolean);
+  if (segments2.length === 0) return false;
+  const dirs = segments2.slice(0, -1);
   if (dirs.some((seg2) => DENY_DIRS.has(seg2))) return true;
   if (dirs.length > 0 && DENY_ROOT_DIRS.has(dirs[0])) return true;
-  if (segments.length === 1 && segments[0] === "HIMALAYA.md") return true;
-  if (MCP_HOST_CONFIG_FILES.includes(segments.join("/"))) return true;
-  return DENY_FILES.some((re2) => re2.test(segments[segments.length - 1]));
+  if (segments2.length === 1 && segments2[0] === "HIMALAYA.md") return true;
+  if (MCP_HOST_CONFIG_FILES.includes(segments2.join("/"))) return true;
+  return DENY_FILES.some((re2) => re2.test(segments2[segments2.length - 1]));
 }
 function isDeniedSourceDir(name, parentRel) {
   const base = name.split(sep).pop() ?? name;
@@ -17190,8 +17190,8 @@ function wireKind(value2) {
 }
 function jsonPointer(dotted) {
   if (dotted === "") return "";
-  const segments = dotted.replace(/\[(\d+)\]/g, ".$1").split(".").filter(Boolean).map((s2) => s2.replace(/~/g, "~0").replace(/\//g, "~1"));
-  return `/${segments.join("/")}`;
+  const segments2 = dotted.replace(/\[(\d+)\]/g, ".$1").split(".").filter(Boolean).map((s2) => s2.replace(/~/g, "~0").replace(/\//g, "~1"));
+  return `/${segments2.join("/")}`;
 }
 function componentPropFindings(descriptor) {
   const out2 = [];
@@ -18126,10 +18126,10 @@ function validateScreenDescriptor(screenId, descriptor, opts = {}) {
   const lbIntegrity = descriptor?.logicBundle?.integrity;
   const schemaIssuesAt = /* @__PURE__ */ new Map();
   const dottedCandidates = (pointer3) => {
-    const segments = pointer3.split("/").filter(Boolean).map((s2) => s2.replace(/~1/g, "/").replace(/~0/g, "~"));
-    if (segments.filter((s2) => /^\d+$/.test(s2)).length > 3) return [];
+    const segments2 = pointer3.split("/").filter(Boolean).map((s2) => s2.replace(/~1/g, "/").replace(/~0/g, "~"));
+    if (segments2.filter((s2) => /^\d+$/.test(s2)).length > 3) return [];
     let out2 = [""];
-    for (const seg2 of segments) {
+    for (const seg2 of segments2) {
       const spellings = /^\d+$/.test(seg2) ? [`[${seg2}]`, `.${seg2}`] : [`.${seg2}`];
       out2 = out2.flatMap((acc) => spellings.map((s2) => acc === "" && s2.startsWith(".") ? s2.slice(1) : acc + s2));
     }
@@ -21785,7 +21785,7 @@ function ensureTemplates({
   root = REPO2,
   env = process.env,
   log = (m2) => console.error(m2),
-  spawn: spawn10 = spawnSync3,
+  spawn: spawn11 = spawnSync3,
   generator = GENERATOR,
   waitMs = 10 * 6e4
 } = {}) {
@@ -21801,7 +21801,7 @@ function ensureTemplates({
     if (!refresh) log(`ensure-templates: generating ${TEMPLATES_REL} (gitignored; ~10s) \u2026`);
     rmSync5(stampPath(out2), { force: true });
     const { HIMI_TEMPLATES_OUT: _scratch, ...childEnv } = env;
-    const r3 = spawn10(process.execPath, ["--import", "tsx", generator], {
+    const r3 = spawn11(process.execPath, ["--import", "tsx", generator], {
       cwd: root,
       env: childEnv,
       encoding: "utf8",
@@ -21866,7 +21866,7 @@ function ensureBundles({
   root = REPO3,
   env = process.env,
   log = (m2) => console.error(m2),
-  spawn: spawn10 = spawnSync4,
+  spawn: spawn11 = spawnSync4,
   waitMs = 10 * 6e4
 } = {}) {
   if (env[BUNDLES_FRESH]) return false;
@@ -21880,7 +21880,7 @@ function ensureBundles({
     if (waited && bundlesReady(root)) return false;
     if (!refresh) log(`ensure-bundles: building ${BUNDLES_REL} (gitignored; a few seconds) \u2026`);
     rmSync6(stampPath(out2), { force: true });
-    const r3 = spawn10(process.execPath, [GENERATOR2], {
+    const r3 = spawn11(process.execPath, [GENERATOR2], {
       cwd: root,
       env: { ...env, [BUNDLES_LOCK_HELD]: "1" },
       encoding: "utf8",
@@ -33273,9 +33273,9 @@ var init_wix_member_login = __esm({
 // ../../core/dev-server/src/wix-gateway.ts
 import { readFileSync as readFileSync29, existsSync as existsSync29 } from "node:fs";
 function isSensitiveBodyName(name) {
-  const segments = name.split(/[^A-Za-z0-9]+/).filter(Boolean);
-  for (let i2 = 0; i2 < segments.length; i2++) {
-    const tail = normKey(segments.slice(i2).join(""));
+  const segments2 = name.split(/[^A-Za-z0-9]+/).filter(Boolean);
+  for (let i2 = 0; i2 < segments2.length; i2++) {
+    const tail = normKey(segments2.slice(i2).join(""));
     for (const k2 of SECRET_BODY_KEYS) if (tail.startsWith(k2)) return true;
   }
   return false;
@@ -45382,7 +45382,7 @@ var init_pdf = __esm({
         var defineProperty = Object.defineProperty;
         var stringSlice = uncurryThis("".slice);
         var replace = uncurryThis("".replace);
-        var join136 = uncurryThis([].join);
+        var join137 = uncurryThis([].join);
         var CONFIGURABLE_LENGTH = DESCRIPTORS && !fails(function() {
           return defineProperty(function() {
           }, "length", { value: 8 }).length !== 8;
@@ -45409,7 +45409,7 @@ var init_pdf = __esm({
           }
           var state = enforceInternalState(value2);
           if (!hasOwn(state, "source")) {
-            state.source = join136(TEMPLATE, typeof name == "string" ? name : "");
+            state.source = join137(TEMPLATE, typeof name == "string" ? name : "");
           }
           return value2;
         };
@@ -46449,10 +46449,10 @@ var init_pdf = __esm({
           if (stringLength % 2 !== 0) throw new SyntaxError2("String should be an even number of characters");
           var maxLength = into ? min(into.length, stringLength / 2) : stringLength / 2;
           var bytes2 = into || new Uint8Array2(maxLength);
-          var segments = stringMatch(string7, /[\S\s]{2}/g);
+          var segments2 = stringMatch(string7, /[\S\s]{2}/g);
           var written = 0;
           for (; written < maxLength; written++) {
-            var result = +("0x" + segments[written] + "0");
+            var result = +("0x" + segments2[written] + "0");
             if (result !== result) {
               throw new SyntaxError2("String should only contain hex characters");
             }
@@ -47932,7 +47932,7 @@ var init_pdf = __esm({
         var charAt = uncurryThis("".charAt);
         var Uint8Array2 = globalThis2.Uint8Array;
         var $Array = globalThis2.Array;
-        var join136 = uncurryThis([].join);
+        var join137 = uncurryThis([].join);
         var INCORRECT_BEHAVIOR_OR_DOESNT_EXISTS = !Uint8Array2 || !Uint8Array2.prototype.toBase64 || !(function() {
           try {
             var target = new Uint8Array2();
@@ -47978,7 +47978,7 @@ var init_pdf = __esm({
                 result[written++] = "=";
               }
             }
-            return join136(result, "");
+            return join137(result, "");
           }
         });
       },
@@ -47990,7 +47990,7 @@ var init_pdf = __esm({
         var anUint8Array = __webpack_require__3(4154);
         var notDetached = __webpack_require__3(5169);
         var numberToString2 = uncurryThis(1.1.toString);
-        var join136 = uncurryThis([].join);
+        var join137 = uncurryThis([].join);
         var $Array = Array;
         var Uint8Array2 = globalThis2.Uint8Array;
         var INCORRECT_BEHAVIOR_OR_DOESNT_EXISTS = !Uint8Array2 || !Uint8Array2.prototype.toHex || !(function() {
@@ -48010,7 +48010,7 @@ var init_pdf = __esm({
               var hex2 = numberToString2(this[i2], 16);
               result[i2] = hex2.length === 1 ? "0" + hex2 : hex2;
             }
-            return join136(result, "");
+            return join137(result, "");
           }
         });
       },
@@ -124646,12 +124646,12 @@ function parseShapeKind(raw) {
   if (k2 === "polygon" || k2 === "circle") return k2;
   return "unknown";
 }
-function circleRing(centreLat, centreLng, radiusM, segments = CIRCLE_SEGMENTS) {
-  if (!(radiusM > 0) || segments < 3) return [];
+function circleRing(centreLat, centreLng, radiusM, segments2 = CIRCLE_SEGMENTS) {
+  if (!(radiusM > 0) || segments2 < 3) return [];
   const dLat = radiusM / METRES_PER_DEG_LAT;
   const dLng = radiusM / (METRES_PER_DEG_LAT * Math.max(0.01, Math.abs(Math.cos(centreLat * Math.PI / 180))));
-  return Array.from({ length: segments }, (_2, i2) => {
-    const theta = 2 * Math.PI * i2 / segments;
+  return Array.from({ length: segments2 }, (_2, i2) => {
+    const theta = 2 * Math.PI * i2 / segments2;
     return { latitude: centreLat + dLat * Math.sin(theta), longitude: centreLng + dLng * Math.cos(theta) };
   });
 }
@@ -145351,8 +145351,8 @@ function materializeForPreview(appDir3, slug, displayName3) {
 }
 async function appId(dir) {
   try {
-    const { readFileSync: readFileSync141 } = await import("node:fs");
-    const m2 = JSON.parse(readFileSync141(join34(dir, "himalaya.content.json"), "utf8"));
+    const { readFileSync: readFileSync142 } = await import("node:fs");
+    const m2 = JSON.parse(readFileSync142(join34(dir, "himalaya.content.json"), "utf8"));
     if (m2.name) return m2.name;
   } catch {
   }
@@ -145814,12 +145814,12 @@ function npmInstallArgs(registry2, version5) {
   const pinned = `${normalizeRegistry(registry2) ?? registry2}/`;
   return ["i", "-g", `${CLI_PACKAGE}@${version5}`, `--registry=${pinned}`, `--@wix:registry=${pinned}`];
 }
-function createUpdateRunner(spawn10 = spawnSync6) {
+function createUpdateRunner(spawn11 = spawnSync6) {
   return {
     install: async (registry2, version5) => {
       if (!isTrustedRegistry(registry2)) return { ok: false, detail: `refusing untrusted registry ${registry2}` };
       if (!INSTALLABLE_SPEC.test(version5)) return { ok: false, detail: `refusing install spec ${JSON.stringify(version5)}` };
-      const result = spawn10("npm", npmInstallArgs(registry2, version5), {
+      const result = spawn11("npm", npmInstallArgs(registry2, version5), {
         // npm's stdout goes to OUR stderr: in `himi <cmd> --json | jq` (and `himi upgrade --json`) its
         // "added 212 packages" would otherwise land in stdout ahead of the envelope and break the
         // parse — the agent case this whole feature exists for (#2985 review). And no stdin: an
@@ -150245,21 +150245,21 @@ var init_Expression = __esm({
        * @returns {Array} Array of segment objects
        */
       _parse(pattern) {
-        const segments = [];
+        const segments2 = [];
         let i2 = 0;
         let currentPart = "";
         while (i2 < pattern.length) {
           if (pattern[i2] === this.separator) {
             if (i2 + 1 < pattern.length && pattern[i2 + 1] === this.separator) {
               if (currentPart.trim()) {
-                segments.push(this._parseSegment(currentPart.trim()));
+                segments2.push(this._parseSegment(currentPart.trim()));
                 currentPart = "";
               }
-              segments.push({ type: "deep-wildcard" });
+              segments2.push({ type: "deep-wildcard" });
               i2 += 2;
             } else {
               if (currentPart.trim()) {
-                segments.push(this._parseSegment(currentPart.trim()));
+                segments2.push(this._parseSegment(currentPart.trim()));
               }
               currentPart = "";
               i2++;
@@ -150270,9 +150270,9 @@ var init_Expression = __esm({
           }
         }
         if (currentPart.trim()) {
-          segments.push(this._parseSegment(currentPart.trim()));
+          segments2.push(this._parseSegment(currentPart.trim()));
         }
-        return segments;
+        return segments2;
       }
       /**
        * Parse a single segment
@@ -150853,24 +150853,24 @@ var init_Matcher = __esm({
        * @returns {boolean}
        */
       matches(expression) {
-        const segments = expression.segments;
-        if (segments.length === 0) {
+        const segments2 = expression.segments;
+        if (segments2.length === 0) {
           return false;
         }
         if (expression.hasDeepWildcard()) {
-          return this._matchWithDeepWildcard(segments);
+          return this._matchWithDeepWildcard(segments2);
         }
-        return this._matchSimple(segments);
+        return this._matchSimple(segments2);
       }
       /**
        * @private
        */
-      _matchSimple(segments) {
-        if (this.path.length !== segments.length) {
+      _matchSimple(segments2) {
+        if (this.path.length !== segments2.length) {
           return false;
         }
-        for (let i2 = 0; i2 < segments.length; i2++) {
-          if (!this._matchSegment(segments[i2], this.path[i2], i2 === this.path.length - 1)) {
+        for (let i2 = 0; i2 < segments2.length; i2++) {
+          if (!this._matchSegment(segments2[i2], this.path[i2], i2 === this.path.length - 1)) {
             return false;
           }
         }
@@ -150879,17 +150879,17 @@ var init_Matcher = __esm({
       /**
        * @private
        */
-      _matchWithDeepWildcard(segments) {
+      _matchWithDeepWildcard(segments2) {
         let pathIdx = this.path.length - 1;
-        let segIdx = segments.length - 1;
+        let segIdx = segments2.length - 1;
         while (segIdx >= 0 && pathIdx >= 0) {
-          const segment = segments[segIdx];
+          const segment = segments2[segIdx];
           if (segment.type === "deep-wildcard") {
             segIdx--;
             if (segIdx < 0) {
               return true;
             }
-            const nextSeg = segments[segIdx];
+            const nextSeg = segments2[segIdx];
             let found = false;
             for (let i2 = pathIdx; i2 >= 0; i2--) {
               if (this._matchSegment(nextSeg, this.path[i2], i2 === this.path.length - 1)) {
@@ -158149,16 +158149,16 @@ function writeAppSource(entries, destDir) {
   const written = [];
   for (const entry of entries) {
     if (isDeniedSourcePath(entry.path)) continue;
-    const segments = entry.path.split("/");
+    const segments2 = entry.path.split("/");
     let dir = root;
-    for (const segment of segments.slice(0, -1)) {
+    for (const segment of segments2.slice(0, -1)) {
       dir = join42(dir, segment);
       const kind = pathKind(dir);
       if (kind?.isSymbolicLink()) unlinkSync3(dir);
       else if (kind) continue;
       mkdirSync27(dir);
     }
-    const target = join42(root, ...segments);
+    const target = join42(root, ...segments2);
     if (pathKind(target)?.isSymbolicLink()) unlinkSync3(target);
     writeFileSync21(target, entry.bytes);
     written.push(entry.path);
@@ -158189,10 +158189,10 @@ function writeConflicts(entries, destDir) {
   };
   for (const entry of entries) {
     if (isDeniedSourcePath(entry.path)) continue;
-    const segments = entry.path.split("/");
+    const segments2 = entry.path.split("/");
     let dir = root;
     let stop = false;
-    for (const [i2, segment] of segments.slice(0, -1).entries()) {
+    for (const [i2, segment] of segments2.slice(0, -1).entries()) {
       dir = join42(dir, segment);
       const kind2 = pathKind(dir);
       if (!kind2 || kind2.isSymbolicLink()) {
@@ -158200,12 +158200,12 @@ function writeConflicts(entries, destDir) {
         break;
       }
       if (kind2.isDirectory()) continue;
-      say(segments.slice(0, i2 + 1).join("/"), "is a file here, but the release has a directory at that path");
+      say(segments2.slice(0, i2 + 1).join("/"), "is a file here, but the release has a directory at that path");
       stop = true;
       break;
     }
     if (stop) continue;
-    const kind = pathKind(join42(root, ...segments));
+    const kind = pathKind(join42(root, ...segments2));
     if (kind && !kind.isSymbolicLink() && kind.isDirectory()) {
       say(entry.path, "is a directory here, but the release has a file at that path");
     }
@@ -158219,8 +158219,8 @@ function removeStaleSource(entries, destDir) {
   const needed = /* @__PURE__ */ new Set();
   for (const entry of entries) {
     if (isDeniedSourcePath(entry.path)) continue;
-    const segments = entry.path.split("/");
-    for (let i2 = 1; i2 < segments.length; i2++) needed.add(segments.slice(0, i2).join("/"));
+    const segments2 = entry.path.split("/");
+    for (let i2 = 1; i2 < segments2.length; i2++) needed.add(segments2.slice(0, i2).join("/"));
   }
   if (existsSync49(root)) pruneEmptyDirs(root, "", needed, removed);
   return removed.sort();
@@ -161316,14 +161316,14 @@ function scoreOverlays(verticals, layout) {
 function pagePathForRole(url) {
   try {
     const u2 = new URL(url);
-    const segments = u2.pathname.split("/").filter(Boolean);
+    const segments2 = u2.pathname.split("/").filter(Boolean);
     const wixHost = /(^|\.)(wixsite\.com|wixstudio\.com)$/i.test(u2.hostname);
     if (wixHost) {
-      const page = segments.slice(1);
+      const page = segments2.slice(1);
       return { path: "/" + page.join("/"), isHome: page.length === 0 };
     }
-    const leaf = segments[segments.length - 1] ?? "";
-    const isHome = segments.length === 0 || /^(home|index)$/i.test(leaf);
+    const leaf = segments2[segments2.length - 1] ?? "";
+    const isHome = segments2.length === 0 || /^(home|index)$/i.test(leaf);
     return { path: u2.pathname.replace(/\/+$/, "") || "/", isHome };
   } catch {
     return { path: url, isHome: false };
@@ -168171,6 +168171,119 @@ var init_nav_slots = __esm({
   }
 });
 
+// ../../core/ts/src/push-routes.ts
+function adaptPayloadLink(link, adapter, linkPrefixes) {
+  const raw = (link ?? "").trim();
+  if (!raw) return { residual: raw, adapted: false };
+  if (adapter === "wix-ping") {
+    const wix = adaptWixLink(raw);
+    if (wix) return wix;
+  }
+  const rest = stripLinkPrefix(raw, linkPrefixes);
+  if (rest !== void 0) return { residual: stripLeadingSlashes(rest), adapted: true };
+  if (raw.startsWith("/")) return { residual: stripLeadingSlashes(raw), adapted: true };
+  return { residual: raw, adapted: false };
+}
+function stripLinkPrefix(raw, prefixes) {
+  let best;
+  let bestLength = -1;
+  for (const entry of Array.isArray(prefixes) ? prefixes : []) {
+    const prefix = typeof entry === "string" ? entry.trim() : "";
+    if (!prefix || prefix.length <= bestLength || !startsWithLinkPrefix(raw, prefix)) continue;
+    best = raw.slice(prefix.length);
+    bestLength = prefix.length;
+  }
+  return best;
+}
+function startsWithLinkPrefix(raw, prefix) {
+  if (raw.length < prefix.length) return false;
+  const head3 = caseInsensitiveHeadLength(prefix);
+  if (raw.slice(0, head3).toLowerCase() !== prefix.slice(0, head3).toLowerCase()) return false;
+  if (raw.slice(head3, prefix.length) !== prefix.slice(head3)) return false;
+  if (prefix.endsWith("/") || linkPrefixSchemeLength(prefix) === prefix.length || raw.length === prefix.length) return true;
+  return "/?#".includes(raw.charAt(prefix.length));
+}
+function caseInsensitiveHeadLength(prefix) {
+  const scheme = linkPrefixSchemeLength(prefix);
+  if (scheme === 0 || !prefix.startsWith("//", scheme)) return scheme;
+  const slash = prefix.indexOf("/", scheme + 2);
+  return slash < 0 ? prefix.length : slash;
+}
+function linkPrefixSchemeLength(prefix) {
+  for (let i2 = 0; i2 < prefix.length; i2++) {
+    const c2 = prefix.charAt(i2);
+    if (c2 === ":") return i2 > 0 ? i2 + 1 : 0;
+    const letter = c2 >= "a" && c2 <= "z" || c2 >= "A" && c2 <= "Z";
+    const later2 = c2 >= "0" && c2 <= "9" || c2 === "+" || c2 === "-" || c2 === ".";
+    if (!letter && !(i2 > 0 && later2)) return 0;
+  }
+  return 0;
+}
+function adaptWixLink(raw) {
+  let rest;
+  if (raw.toLowerCase().startsWith(WIX_SCHEME_PREFIX)) {
+    rest = raw.slice(WIX_SCHEME_PREFIX.length);
+  } else {
+    const host = hostOf(raw);
+    if (!host || !WIX_UNIVERSAL_HOST.test(host)) return void 0;
+    rest = raw.slice(raw.toLowerCase().indexOf(host) + host.length);
+  }
+  const [pathPart, queryPart = ""] = splitOnce(stripLeadingSlashes(rest), "?");
+  const kept = [];
+  let metaSiteId;
+  for (const pair of queryPart.split("&")) {
+    if (!pair) continue;
+    const [key3, value2 = ""] = splitOnce(pair, "=");
+    if (key3 === "metaSiteId") metaSiteId = decodeMaybe(value2);
+    if (PING_BOOKKEEPING_KEYS.has(key3)) continue;
+    kept.push(pair);
+  }
+  const residual = kept.length ? `${pathPart}?${kept.join("&")}` : pathPart;
+  return { residual, metaSiteId: metaSiteId ?? siteFromPath(pathPart), adapted: true };
+}
+function siteFromPath(pathPart) {
+  const site = siteSegment(segments(pathPart));
+  return site ? decodeMaybe(site, false) : void 0;
+}
+function siteSegment(segs) {
+  if (segs[0] === "my-account" && segs[1] && segs[1] !== "app") return segs[1];
+  if (segs[0] === "shared-gallery" && segs[1]) return segs[1];
+  if (segs[0] === "lists" && segs[1]) return segs[1];
+  if (segs[0] === "spaces" && segs[1] === "lists" && segs[2]) return segs[2];
+  if (segs[0] === "notifications" && segs[1] === "list" && segs[2]) return segs[2];
+  return void 0;
+}
+function hostOf(url) {
+  const m2 = /^[A-Za-z][A-Za-z0-9+.-]*:\/\/([^/?#]+)/.exec(url);
+  return m2 ? m2[1].toLowerCase() : null;
+}
+function splitOnce(s2, sep26) {
+  const i2 = s2.indexOf(sep26);
+  return i2 < 0 ? [s2, void 0] : [s2.slice(0, i2), s2.slice(i2 + sep26.length)];
+}
+function stripLeadingSlashes(s2) {
+  return s2.replace(/^\/+/, "");
+}
+function segments(path2) {
+  return path2.split("/").filter((s2) => s2.length > 0);
+}
+function decodeMaybe(value2, plusAsSpace = true) {
+  try {
+    return decodeURIComponent(plusAsSpace ? value2.replace(/\+/g, " ") : value2);
+  } catch {
+    return value2;
+  }
+}
+var WIX_UNIVERSAL_HOST, WIX_SCHEME_PREFIX, PING_BOOKKEEPING_KEYS;
+var init_push_routes = __esm({
+  "../../core/ts/src/push-routes.ts"() {
+    init_define_HHP_CATALOG();
+    WIX_UNIVERSAL_HOST = /^(?:manage\.wix\.app|www\.wix\.app|m-[A-Za-z0-9-]+\.branded\.wix\.app)$/;
+    WIX_SCHEME_PREFIX = "wix:/";
+    PING_BOOKKEEPING_KEYS = /* @__PURE__ */ new Set(["metaSiteId", "d"]);
+  }
+});
+
 // src/nav-lint.ts
 var nav_lint_exports = {};
 __export(nav_lint_exports, {
@@ -168209,6 +168322,7 @@ async function navIssues(dir, strict) {
   pushScreenMapIssues(cfg.push, provisioning, warn3);
   pushAuthIssues(cfg.push, cfg.auth, provisioning, warn3);
   pushFamilyIssues(cfg.push, warn3);
+  pushLinkPrefixIssues(cfg.push, provisioning, warn3);
   const captcha = provisioning.siteId && !placeholderLogin(cfg.auth) ? captchaAuthFinding(cfg.auth, provisioning.siteId) : void 0;
   if (captcha && captcha.code !== "captcha_auth_site_case" && !issues.some((i2) => i2.ruleCode === "push-auth-site"))
     push("warning", "auth-captcha-site", captcha.message);
@@ -168375,6 +168489,51 @@ function pushRouteIssues(push, nav, provisioning, warn3) {
     }
   }
 }
+function pushLinkPrefixIssues(push, provisioning, warn3) {
+  if (!isPlainObject2(push) || push.linkPrefixes === void 0) return;
+  if (!Array.isArray(push.linkPrefixes)) {
+    warn3(
+      "push-link-prefixes-invalid",
+      `push.linkPrefixes must be a list of non-empty strings, e.g. ["legacyapp://", "https://legacy.example.com/app/"]; the device reads anything else as no prefixes.`
+    );
+    return;
+  }
+  const prefixes = push.linkPrefixes.filter((p2) => typeof p2 === "string" && !!p2.trim());
+  const skipped = push.linkPrefixes.length - prefixes.length;
+  if (skipped > 0) {
+    warn3(
+      "push-link-prefixes-invalid",
+      `push.linkPrefixes must hold non-empty strings only; the device skips ${skipped === 1 ? "the 1 entry" : `the ${skipped} entries`} that ${skipped === 1 ? "is" : "are"} not one and keeps the other prefixes.`
+    );
+  }
+  for (const raw of prefixes) {
+    const prefix = raw.trim();
+    if (push.payloadAdapter === "wix-ping" && wixLinkSpacePrefix(prefix)) {
+      warn3(
+        "push-link-prefix-shadowed",
+        `push.linkPrefixes: "${prefix}" is in the Wix link space, which the "wix-ping" adapter already strips first, so this prefix never applies. Remove it.`
+      );
+    }
+  }
+  const authored2 = Array.isArray(push.routes) && push.routes.length > 0;
+  if (prefixes.length > 0 && !authored2 && derivesWixPushRoutes(push, provisioning.installedVerticals)) {
+    warn3(
+      "push-link-prefixes-derived-routes",
+      `push.linkPrefixes is set, but the only push routes are the ones derived from the site's verticals, so a stripped link is matched against the Wix notification paths alone (e.g. "my-account/:site/stores/orders/:orderId"). If your legacy links use paths of their own, declare push.routes for them \u2014 a declared table replaces the derived one, so list the Wix routes you still need there too.`
+    );
+    return;
+  }
+  if (prefixes.length > 0 && !authored2 && push.payloadAdapter !== "wix-ping") {
+    warn3(
+      "push-link-prefixes-unrouted",
+      `push.linkPrefixes is set but push.routes is empty, so a stripped link matches nothing and still opens the home screen. Declare a route for each destination, e.g. { match: "widget/:id", link: "<scheme>://screen/<screen>?id={id}" }.`
+    );
+  }
+}
+function wixLinkSpacePrefix(prefix) {
+  const probe2 = `${prefix}/x`;
+  return adaptPayloadLink(probe2, "wix-ping").adapted && !adaptPayloadLink(probe2, "").adapted;
+}
 function pushScreenMapIssues(push, provisioning, warn3) {
   if (!isPlainObject2(push) || !isPlainObject2(push.screens)) return;
   const destinations = WIX_MEMBER_PUSH_DESTINATIONS.map((d2) => d2.id);
@@ -168468,6 +168627,7 @@ var init_nav_lint = __esm({
     init_nav_slots();
     init_home_screen_id();
     init_wix_push_links();
+    init_push_routes();
     init_captcha_auth();
     init_wix_placeholders();
     init_preview_surfaces();
@@ -183640,44 +183800,44 @@ var init_preview_assets_generated = __esm({
     init_define_HHP_CATALOG();
     init_preview_assets_format();
     PREVIEW_ASSET_MANIFEST = [
-      { key: "assets/DashboardHost--Wo75MEb.js", contentType: "application/javascript; charset=utf-8", offset: 8, length: 2971, sha256: "9f16ff8813c75250b296c2f7fd5904148408ec882daade74dfd7256ab841116f" },
-      { key: "assets/DevDrawer-CUUhA_4k.js", contentType: "application/javascript; charset=utf-8", offset: 2979, length: 16783, sha256: "d7379d5435e1f42d653f1dbc15f5584f9aa3cae7eabf8d5779342ab59af8f064" },
-      { key: "assets/IdiomCompare-BQ8xaS9X.js", contentType: "application/javascript; charset=utf-8", offset: 19762, length: 1926, sha256: "3c3ad7cb21733554a1029f317f5d17498648aa5bbe4d9ad654128299bda12985" },
-      { key: "assets/LightboxViewer-DXIIycZi.js", contentType: "application/javascript; charset=utf-8", offset: 21688, length: 8171, sha256: "f97499f47911dcf2f19f6199c12236559e32df337994b61edb72cd9f0f73743d" },
-      { key: "assets/OfflineReadingBar-DaSjhw5H.js", contentType: "application/javascript; charset=utf-8", offset: 29859, length: 1707, sha256: "cc0ced6ae7a34d34c90dbd765a9018880aa9657f1de7e38f4839ef494b68aaf8" },
-      { key: "assets/PhonePreviewControl-D8MpZ148.js", contentType: "application/javascript; charset=utf-8", offset: 31566, length: 37768, sha256: "d6837187711fb89cb762beccb1f23289a45b7c0adf56023c623893b82d5c64db" },
-      { key: "assets/SchemeCompare-C08F_1NC.js", contentType: "application/javascript; charset=utf-8", offset: 69334, length: 1858, sha256: "d24db4000236629dfe6191f91dab56421421477e2dda5a423d3766065a1107d9" },
-      { key: "assets/WixFrogTelemetrySink-D2Lk2X2m.js", contentType: "application/javascript; charset=utf-8", offset: 71192, length: 3165, sha256: "7a8b798af6b0900a8e925bfdb9ec62b378380975cf5c00af25d0cf33b39ba12f" },
+      { key: "assets/DashboardHost-9DNxqqDG.js", contentType: "application/javascript; charset=utf-8", offset: 8, length: 2971, sha256: "bbf3367d0bf795b6fb7f04af299fc0f2d2dfd84094b6ab4c539c0736abd7bdd8" },
+      { key: "assets/DevDrawer-Cmh2ysMu.js", contentType: "application/javascript; charset=utf-8", offset: 2979, length: 16783, sha256: "fb1652e4b957a01ded1022dc0a02f81c2faec1606656de9b57297d4e5bdebfaa" },
+      { key: "assets/IdiomCompare-BHtvykNO.js", contentType: "application/javascript; charset=utf-8", offset: 19762, length: 1926, sha256: "17d6259fb33c335533cbd8ea94bd0e01d6dc374e2f5454d9beee6d5b23ad17b2" },
+      { key: "assets/LightboxViewer-Cmoy48tR.js", contentType: "application/javascript; charset=utf-8", offset: 21688, length: 8171, sha256: "695647ddc5fb3608d85a4bf6b5e5acbc8de30f42f120a9c40edaec0e0053a8c8" },
+      { key: "assets/OfflineReadingBar-Bw5bdmJt.js", contentType: "application/javascript; charset=utf-8", offset: 29859, length: 1707, sha256: "da3d456b2baa48201ea6167f0a50d88c01a6c9d25204e6863f7070626a7e1291" },
+      { key: "assets/PhonePreviewControl-BkrZTlvl.js", contentType: "application/javascript; charset=utf-8", offset: 31566, length: 37768, sha256: "6165cb9fcdde37ee2fb87db56138723942c699e11bd2939224c49ba21f599e3f" },
+      { key: "assets/SchemeCompare-XfjOTAcV.js", contentType: "application/javascript; charset=utf-8", offset: 69334, length: 1858, sha256: "01af835c94531703c0b6ebd2db65fe3bfe4d3bdf690224886f44db50a6248e7f" },
+      { key: "assets/WixFrogTelemetrySink-CApx41Xu.js", contentType: "application/javascript; charset=utf-8", offset: 71192, length: 3165, sha256: "498d0d2204dde31676c08ceb8d861795054e08c312a45b693cb32bcffe8e43ea" },
       { key: "assets/calendar-ics-BvfIYWjG.js", contentType: "application/javascript; charset=utf-8", offset: 74357, length: 2192, sha256: "1636167041e9829ceccd3544297b86b8475c38bd2f759c4dbc17c813dc6e9254" },
-      { key: "assets/files-transfer-DJkAGGn4.js", contentType: "application/javascript; charset=utf-8", offset: 76549, length: 6446, sha256: "d2d71e724ad7e8cc0f2511625a605232762cc613e14a328b5192ac4163b902f8" },
+      { key: "assets/files-transfer-B16povVM.js", contentType: "application/javascript; charset=utf-8", offset: 76549, length: 6446, sha256: "58c3a02040a2839394dfa54d986e02a388f88c561a7b083ddf6fffbd886f5667" },
       { key: "assets/glassPreviewBrowser-DONaOehd.js", contentType: "application/javascript; charset=utf-8", offset: 82995, length: 6578, sha256: "4402c4cddd2a564e7466cdf1e12a0e0277c0400b288e1e5eda1d23e797599d31" },
       { key: "assets/image-preparation-Cj4gldm6.js", contentType: "application/javascript; charset=utf-8", offset: 89573, length: 2704, sha256: "32944ea587c2f3b84389b66b50a850437560238f1c8d33b6275973ee04eee865" },
-      { key: "assets/index-BoMtgO1j.js", contentType: "application/javascript; charset=utf-8", offset: 92277, length: 1494558, sha256: "eb0deba70b04f12f7a35e248bbe05e7adab4f655f596f2eb4bf501b2ff49f201" },
-      { key: "assets/jsx-runtime-CY_jTiqj.js", contentType: "application/javascript; charset=utf-8", offset: 1586835, length: 7624, sha256: "29dfba5b56f79a0b84d6b04d84d87617454baeba03c225f682ab2ab7ae2d5016" },
-      { key: "assets/pdf-TmaMTLyU.js", contentType: "application/javascript; charset=utf-8", offset: 1594459, length: 488199, sha256: "41a8a6ab79e3465a7b955a596951fac14aed11cd2108b294ae1028aa25cd9ea5" },
-      { key: "assets/pdf.worker.min-BQa_JDET.js", contentType: "application/javascript; charset=utf-8", offset: 2082658, length: 73, sha256: "41bcfda4f3c8c0a81c785ea87c69afc8e7d0ed8c333324aee94c273d881bb6aa" },
-      { key: "assets/pdf.worker.min-BmVo14Nb.mjs", contentType: "application/javascript; charset=utf-8", offset: 2082731, length: 1317034, sha256: "a33cfe728c584fdba4fcc1fd54bcdc2f9f2f13889ddbb5b2bd1d0f8cbe49b84e" },
-      { key: "assets/pdfDocument-BzqLjXka.js", contentType: "application/javascript; charset=utf-8", offset: 3399765, length: 3453, sha256: "8c22a0d303cdc014532f5c98c74d9e16ad688c9c04b7b3c597205810311d8968" },
-      { key: "assets/pdfFetch-Cc8i1I1h.js", contentType: "application/javascript; charset=utf-8", offset: 3403218, length: 2266, sha256: "1d21ad008921942217c9eac0c35b1713773b9d89c71e3ab4412781f7bb88f463" },
-      { key: "assets/webviewBridgeHost-BmEurjBq.js", contentType: "application/javascript; charset=utf-8", offset: 3405484, length: 9888, sha256: "b8e03f5a683914103f1084c9e03038167716065647b2280a57a99d548cad9d1f" },
-      { key: "fonts/Roboto-LICENSE.txt", contentType: "application/octet-stream", offset: 3415372, length: 4610, sha256: "994062dd7af4186a739de55dd9e151c63b6301f8e2cbafc608d35c2e87da0cd2" },
-      { key: "fonts/Roboto-Variable.ttf", contentType: "font/ttf", offset: 3419982, length: 488584, sha256: "d7598e12c5dbef095ff8272cfc55da0250bd07fbdecbac8a530b9b277872a134" },
-      { key: "fonts/WixMadeforDisplay-Bold.ttf", contentType: "font/ttf", offset: 3908566, length: 90924, sha256: "ec4c7d63772d980d6e147b2df6215fd2737e4b04cebe0cf7e11dc695fb63cdcf" },
-      { key: "fonts/WixMadeforDisplay-ExtraBold.ttf", contentType: "font/ttf", offset: 3999490, length: 90984, sha256: "bf4c16a2774edd38a921edf3099469866cd74c094fd596f3fa4e81f54a04dfaa" },
-      { key: "fonts/WixMadeforDisplay-Medium.ttf", contentType: "font/ttf", offset: 4090474, length: 90980, sha256: "368faca44fb9f7207e4af784e94750b1ee59c1098b8689e0f4a918926f244fb5" },
-      { key: "fonts/WixMadeforDisplay-Regular.ttf", contentType: "font/ttf", offset: 4181454, length: 90872, sha256: "97ed8f1a6772abe26e3d8af5cecfc4b02faa94497d585b0398b5053b739a70c1" },
-      { key: "fonts/WixMadeforDisplay-SemiBold.ttf", contentType: "font/ttf", offset: 4272326, length: 90980, sha256: "642feab8a48ddf6c7a89d7c2a7c0edfa0e6e773f671287e460e222703563191e" },
-      { key: "fonts/WixMadeforText-Bold.ttf", contentType: "font/ttf", offset: 4363306, length: 108636, sha256: "37c179b4fefb63ea9637322b84583a2df53aa226c150294eea1675c14b1b8e29" },
-      { key: "fonts/WixMadeforText-ExtraBold.ttf", contentType: "font/ttf", offset: 4471942, length: 109084, sha256: "62e2fe4718129f36ecdb0ae4de385bd6b81ecc876146447167c6c140fad699a9" },
-      { key: "fonts/WixMadeforText-Medium.ttf", contentType: "font/ttf", offset: 4581026, length: 109048, sha256: "4ecf270136af928612c76fe4ebade91d8156975e5ea4c0cf9225501dd1788e02" },
-      { key: "fonts/WixMadeforText-Regular.ttf", contentType: "font/ttf", offset: 4690074, length: 107700, sha256: "dee56f09fd3efc127c1ea95557edc74110c1460a46287da36e0af25efd341ef5" },
-      { key: "fonts/WixMadeforText-SemiBold.ttf", contentType: "font/ttf", offset: 4797774, length: 88108, sha256: "dced97a77624bc5f8b1ae65850360908297f4588e09feb6f22792d29dc7e765b" },
-      { key: "himi-sw.js", contentType: "application/javascript; charset=utf-8", offset: 4885882, length: 6818, sha256: "835250c3d8004f27c2b67f9b471984351ba6df07b916d97e33b43c691200a18c" },
-      { key: "index.html", contentType: "text/html; charset=utf-8", offset: 4892700, length: 5037, sha256: "d3bd185a4b68f1301c35db67d6b2020c0cf1eaa67b335a1269c34babf3c46f6f" },
-      { key: "ios-glass-preview.css", contentType: "text/css; charset=utf-8", offset: 4897737, length: 11457, sha256: "6cb2b75264fa5fa2b4d28851878a5eab0712900e8b3a6c2370cc661d6d820805" },
-      { key: "kit-tab-bar.css", contentType: "text/css; charset=utf-8", offset: 4909194, length: 1171, sha256: "9e2c3a0faaf05d5471badf167a4d3bdf1c4e6dd65c432eea6d254158bfd99585" },
-      { key: "t5-frame.html", contentType: "text/html; charset=utf-8", offset: 4910365, length: 23047, sha256: "20d1459e3f896f344e478e613d0c979a0de02e81a929a45d3a0ef6a53af36441" },
-      { key: "t5-worker-frame.html", contentType: "text/html; charset=utf-8", offset: 4933412, length: 23064, sha256: "8655cfe9c74212ec5dafecb49d2fdeb48b19f1bd8a710091e3e55631f9b4ab06" }
+      { key: "assets/index-CBa0lcxE.js", contentType: "application/javascript; charset=utf-8", offset: 92277, length: 1494927, sha256: "ecfa1358d3abde5ba96556d4ea67c2f2ace4a1ffb31e1a3bafd087f315c88c5b" },
+      { key: "assets/jsx-runtime-CY_jTiqj.js", contentType: "application/javascript; charset=utf-8", offset: 1587204, length: 7624, sha256: "29dfba5b56f79a0b84d6b04d84d87617454baeba03c225f682ab2ab7ae2d5016" },
+      { key: "assets/pdf-B5S5rA7m.js", contentType: "application/javascript; charset=utf-8", offset: 1594828, length: 488199, sha256: "57205a426b281c8b74d84aee045430ebe8260850f1a05e30b426d690fcf14283" },
+      { key: "assets/pdf.worker.min-BQa_JDET.js", contentType: "application/javascript; charset=utf-8", offset: 2083027, length: 73, sha256: "41bcfda4f3c8c0a81c785ea87c69afc8e7d0ed8c333324aee94c273d881bb6aa" },
+      { key: "assets/pdf.worker.min-BmVo14Nb.mjs", contentType: "application/javascript; charset=utf-8", offset: 2083100, length: 1317034, sha256: "a33cfe728c584fdba4fcc1fd54bcdc2f9f2f13889ddbb5b2bd1d0f8cbe49b84e" },
+      { key: "assets/pdfDocument-CPQ1aH4D.js", contentType: "application/javascript; charset=utf-8", offset: 3400134, length: 3453, sha256: "864e6d5df5d41a73ffdf0e676596b6e45c687d156ae3796bd98052784c2743ab" },
+      { key: "assets/pdfFetch-Cc8i1I1h.js", contentType: "application/javascript; charset=utf-8", offset: 3403587, length: 2266, sha256: "1d21ad008921942217c9eac0c35b1713773b9d89c71e3ab4412781f7bb88f463" },
+      { key: "assets/webviewBridgeHost-C4Tz75W3.js", contentType: "application/javascript; charset=utf-8", offset: 3405853, length: 9888, sha256: "0949bca7def30f0f3604493df6f4dc25df2d63bc827fb629f1662cbd31c7a6b8" },
+      { key: "fonts/Roboto-LICENSE.txt", contentType: "application/octet-stream", offset: 3415741, length: 4610, sha256: "994062dd7af4186a739de55dd9e151c63b6301f8e2cbafc608d35c2e87da0cd2" },
+      { key: "fonts/Roboto-Variable.ttf", contentType: "font/ttf", offset: 3420351, length: 488584, sha256: "d7598e12c5dbef095ff8272cfc55da0250bd07fbdecbac8a530b9b277872a134" },
+      { key: "fonts/WixMadeforDisplay-Bold.ttf", contentType: "font/ttf", offset: 3908935, length: 90924, sha256: "ec4c7d63772d980d6e147b2df6215fd2737e4b04cebe0cf7e11dc695fb63cdcf" },
+      { key: "fonts/WixMadeforDisplay-ExtraBold.ttf", contentType: "font/ttf", offset: 3999859, length: 90984, sha256: "bf4c16a2774edd38a921edf3099469866cd74c094fd596f3fa4e81f54a04dfaa" },
+      { key: "fonts/WixMadeforDisplay-Medium.ttf", contentType: "font/ttf", offset: 4090843, length: 90980, sha256: "368faca44fb9f7207e4af784e94750b1ee59c1098b8689e0f4a918926f244fb5" },
+      { key: "fonts/WixMadeforDisplay-Regular.ttf", contentType: "font/ttf", offset: 4181823, length: 90872, sha256: "97ed8f1a6772abe26e3d8af5cecfc4b02faa94497d585b0398b5053b739a70c1" },
+      { key: "fonts/WixMadeforDisplay-SemiBold.ttf", contentType: "font/ttf", offset: 4272695, length: 90980, sha256: "642feab8a48ddf6c7a89d7c2a7c0edfa0e6e773f671287e460e222703563191e" },
+      { key: "fonts/WixMadeforText-Bold.ttf", contentType: "font/ttf", offset: 4363675, length: 108636, sha256: "37c179b4fefb63ea9637322b84583a2df53aa226c150294eea1675c14b1b8e29" },
+      { key: "fonts/WixMadeforText-ExtraBold.ttf", contentType: "font/ttf", offset: 4472311, length: 109084, sha256: "62e2fe4718129f36ecdb0ae4de385bd6b81ecc876146447167c6c140fad699a9" },
+      { key: "fonts/WixMadeforText-Medium.ttf", contentType: "font/ttf", offset: 4581395, length: 109048, sha256: "4ecf270136af928612c76fe4ebade91d8156975e5ea4c0cf9225501dd1788e02" },
+      { key: "fonts/WixMadeforText-Regular.ttf", contentType: "font/ttf", offset: 4690443, length: 107700, sha256: "dee56f09fd3efc127c1ea95557edc74110c1460a46287da36e0af25efd341ef5" },
+      { key: "fonts/WixMadeforText-SemiBold.ttf", contentType: "font/ttf", offset: 4798143, length: 88108, sha256: "dced97a77624bc5f8b1ae65850360908297f4588e09feb6f22792d29dc7e765b" },
+      { key: "himi-sw.js", contentType: "application/javascript; charset=utf-8", offset: 4886251, length: 6818, sha256: "835250c3d8004f27c2b67f9b471984351ba6df07b916d97e33b43c691200a18c" },
+      { key: "index.html", contentType: "text/html; charset=utf-8", offset: 4893069, length: 5037, sha256: "933eef2941ba1a0dd6fda31c92e24e68ac50bbeb35a95419311b18032f30f59a" },
+      { key: "ios-glass-preview.css", contentType: "text/css; charset=utf-8", offset: 4898106, length: 11457, sha256: "6cb2b75264fa5fa2b4d28851878a5eab0712900e8b3a6c2370cc661d6d820805" },
+      { key: "kit-tab-bar.css", contentType: "text/css; charset=utf-8", offset: 4909563, length: 1171, sha256: "9e2c3a0faaf05d5471badf167a4d3bdf1c4e6dd65c432eea6d254158bfd99585" },
+      { key: "t5-frame.html", contentType: "text/html; charset=utf-8", offset: 4910734, length: 23047, sha256: "20d1459e3f896f344e478e613d0c979a0de02e81a929a45d3a0ef6a53af36441" },
+      { key: "t5-worker-frame.html", contentType: "text/html; charset=utf-8", offset: 4933781, length: 23064, sha256: "8655cfe9c74212ec5dafecb49d2fdeb48b19f1bd8a710091e3e55631f9b4ab06" }
     ];
   }
 });
@@ -189678,7 +189838,7 @@ function expandVars(value2, vars) {
   }
   return out2;
 }
-function hostOf(entry) {
+function hostOf2(entry) {
   const h2 = entry.split("?")[0].toLowerCase();
   const bracketed = /^\[([^\]]*)\]/.exec(h2);
   if (bracketed) return bracketed[1];
@@ -190088,7 +190248,7 @@ var init_preflight_app = __esm({
     init_credential_profile();
     init_app_icon_rules();
     LOOPBACK_HOST = /^(?:localhost|127(?:\.\d{1,3}){3}|0\.0\.0\.0|\[?::1\]?)$/i;
-    isLoopback2 = (entry) => LOOPBACK_HOST.test(hostOf(entry));
+    isLoopback2 = (entry) => LOOPBACK_HOST.test(hostOf2(entry));
     unquote3 = (v2) => v2.trim().replace(/^["']|["']$/g, "");
     APP_STORE_SIZES = [
       [1320, 2868],
@@ -190676,13 +190836,6 @@ var init_push_send = __esm({
   }
 });
 
-// ../../core/ts/src/push-routes.ts
-var init_push_routes = __esm({
-  "../../core/ts/src/push-routes.ts"() {
-    init_define_HHP_CATALOG();
-  }
-});
-
 // ../../core/serve-control/src/push-send-service.ts
 var PUSH_SEND_ERROR_CODES, PushSendError;
 var init_push_send_service = __esm({
@@ -198491,10 +198644,10 @@ function ricosVideoUrl(src) {
   const { url, id } = src;
   if (typeof url === "string" && url.trim() !== "") {
     const link = cleanLink(url);
-    const linkHost = link === void 0 ? void 0 : hostOf2(link);
+    const linkHost = link === void 0 ? void 0 : hostOf3(link);
     if (link !== void 0 && linkHost !== void 0 && VIDEO_CARD_HOST.test(linkHost)) return link;
     const media = normalizeMediaRef(url);
-    const mediaHost = hostOf2(media);
+    const mediaHost = hostOf3(media);
     return HTTPS.test(media) && !(mediaHost !== void 0 && VIDEO_CARD_HOST.test(mediaHost)) ? media : "";
   }
   const ref = typeof id === "string" ? id.trim().replace(/^video\//, "") : "";
@@ -198502,7 +198655,7 @@ function ricosVideoUrl(src) {
   if (/^\w[\w~.-]*\/[\w~./-]+$/.test(ref)) return `https://video.wixstatic.com/video/${ref}`;
   return "";
 }
-var HTTPS, LINK3, HTTP_HOST, VIDEO_CARD_HOST, hostOf2;
+var HTTPS, LINK3, HTTP_HOST, VIDEO_CARD_HOST, hostOf3;
 var init_display = __esm({
   "../../stdlib/wix-sdk/rich-content/src/display.ts"() {
     init_define_HHP_CATALOG();
@@ -198511,7 +198664,7 @@ var init_display = __esm({
     LINK3 = /^(https?:\/\/[^\s/?#]\S*|mailto:\S+|tel:\S+)$/i;
     HTTP_HOST = /^https?:\/\/([^\s/?#]+)/i;
     VIDEO_CARD_HOST = /^(?:(?:www\.|m\.)?youtube\.com|youtu\.be|(?:www\.|player\.)?vimeo\.com)$/;
-    hostOf2 = (url) => HTTP_HOST.exec(url)?.[1]?.toLowerCase().replace(/:\d+$/, "");
+    hostOf3 = (url) => HTTP_HOST.exec(url)?.[1]?.toLowerCase().replace(/:\d+$/, "");
   }
 });
 
@@ -201022,21 +201175,21 @@ function siteNameFromTitle(title, pageName) {
   if (!full || !page) return full;
   const parts = full.split(TITLE_SEPARATOR);
   if (parts.length < 3) return full;
-  const segments = [];
+  const segments2 = [];
   const separators = [];
   for (let i2 = 0; i2 < parts.length; i2++) {
-    (i2 % 2 === 0 ? segments : separators).push(parts[i2]);
+    (i2 % 2 === 0 ? segments2 : separators).push(parts[i2]);
   }
-  const last = segments.length - 1;
-  const head3 = norm(segments[0]) === page;
-  const tail = norm(segments[last]) === page;
+  const last = segments2.length - 1;
+  const head3 = norm(segments2[0]) === page;
+  const tail = norm(segments2[last]) === page;
   if (head3 && tail) return full;
   const drop2 = head3 ? 0 : tail ? last : -1;
   if (drop2 === -1) return full;
-  const kept = segments.map((_2, i2) => i2).filter((i2) => i2 !== drop2);
+  const kept = segments2.map((_2, i2) => i2).filter((i2) => i2 !== drop2);
   if (kept.length === 0) return full;
-  let out2 = segments[kept[0]];
-  for (const i2 of kept.slice(1)) out2 += `${separators[i2 - 1]}${segments[i2]}`;
+  let out2 = segments2[kept[0]];
+  for (const i2 of kept.slice(1)) out2 += `${separators[i2 - 1]}${segments2[i2]}`;
   return out2.trim() || full;
 }
 function identityFromCrawl(siteUrl, title, description, pageName) {
@@ -205744,6 +205897,7 @@ async function runFidelity(root, opts = {}) {
     }
   } finally {
     await session?.close();
+    await native?.restore?.();
   }
   const report4 = { app: basename30(root), run: run2, dir, rows, status: worst(rows) };
   writeFileSync58(join134(dir, "report.json"), JSON.stringify(report4, null, 2) + "\n");
@@ -205786,6 +205940,186 @@ var init_run2 = __esm({
   }
 });
 
+// src/fidelity/native.ts
+var native_exports = {};
+__export(native_exports, {
+  defaultRunner: () => defaultRunner3,
+  deviceFor: () => deviceFor,
+  nativeCapture: () => nativeCapture,
+  parseAppLocales: () => parseAppLocales,
+  parseNightMode: () => parseNightMode,
+  parsePlistArray: () => parsePlistArray,
+  screenLink: () => screenLink
+});
+import { spawn as spawn9 } from "node:child_process";
+import { readFileSync as readFileSync141, writeFileSync as writeFileSync59 } from "node:fs";
+import { join as join135 } from "node:path";
+function deviceFor(devices, platform, variant) {
+  if (variant === "tablet") return platform === "ios" ? devices.iosTablet : devices.androidTablet;
+  return platform === "ios" ? devices.ios : devices.android;
+}
+function screenLink(appId2, screen, entry, release2) {
+  const query = new URLSearchParams();
+  for (const [key3, value2] of Object.entries(entry.params ?? {})) {
+    query.set(key3, typeof value2 === "string" ? value2 : JSON.stringify(value2));
+  }
+  if (release2) query.set("release", release2);
+  const qs2 = query.toString();
+  return `himi://app/${encodeURIComponent(appId2)}/screen/${encodeURIComponent(screen)}${qs2 ? `?${qs2}` : ""}`;
+}
+function nativeCapture(devices, opts) {
+  const run2 = opts.run ?? defaultRunner3;
+  const read = opts.readFile ?? ((p2) => readFileSync141(p2));
+  const sleep = opts.sleep ?? ((ms2) => new Promise((r3) => setTimeout(r3, ms2)));
+  const settleMs = opts.settleMs ?? 1e3;
+  const maxWaitMs = opts.maxWaitMs ?? 3e4;
+  const iosBundle = opts.iosBundleId ?? "dev.himalaya.player.dev";
+  const androidPackage = opts.androidPackage ?? "dev.himalaya.player.dev";
+  const rtl = opts.rtlLanguage ?? "he";
+  const picker = opts.pickerAppId ?? "himi-player";
+  const blackFraction = opts.blackFraction ?? (async (file2) => {
+    const r3 = await run2("magick", [file2, "-colorspace", "Gray", "-threshold", "5%", "-format", "%[fx:1-mean]", "info:"]);
+    return r3.code === 0 ? Number(r3.stdout.toString().trim()) || 0 : 0;
+  });
+  const saved = /* @__PURE__ */ new Map();
+  const applied = /* @__PURE__ */ new Map();
+  const ok3 = async (cmd, args) => {
+    const r3 = await run2(cmd, args);
+    if (r3.code !== 0) throw new Error(`${cmd} ${args.join(" ")} exited ${r3.code}`);
+    return r3.stdout.toString().trim();
+  };
+  async function remember(platform, id) {
+    const key3 = `${platform}:${id}`;
+    if (saved.has(key3)) return;
+    if (platform === "ios") {
+      const appearance = await ok3("xcrun", ["simctl", "ui", id, "appearance"]);
+      const languages = await run2("xcrun", ["simctl", "spawn", id, "defaults", "read", "-g", "AppleLanguages"]);
+      saved.set(key3, { appearance, language: languages.code === 0 ? languages.stdout.toString().trim() : void 0 });
+    } else {
+      const night = await ok3("adb", ["-s", id, "shell", "cmd", "uimode", "night"]);
+      const locales = await run2("adb", ["-s", id, "shell", "cmd", "locale", "get-app-locales", androidPackage]);
+      saved.set(key3, { appearance: parseNightMode(night), language: locales.code === 0 ? parseAppLocales(locales.stdout.toString()) : void 0 });
+    }
+  }
+  async function apply(platform, id, variant) {
+    const key3 = `${platform}:${id}`;
+    const want = variant === "dark" ? "dark" : variant === "rtl" ? "rtl" : "light";
+    if (applied.get(key3) === want) return;
+    await remember(platform, id);
+    const dark = want === "dark", right = want === "rtl";
+    if (platform === "ios") {
+      await ok3("xcrun", ["simctl", "ui", id, "appearance", dark ? "dark" : "light"]);
+      await ok3("xcrun", ["simctl", "spawn", id, "defaults", "write", "-g", "AppleLanguages", "-array", right ? rtl : "en"]);
+      await run2("xcrun", ["simctl", "terminate", id, iosBundle]);
+    } else {
+      await ok3("adb", ["-s", id, "shell", "cmd", "uimode", "night", dark ? "yes" : "no"]);
+      const wasRtl = applied.get(key3) === "rtl";
+      if (right || wasRtl) await ok3("adb", ["-s", id, "shell", "cmd", "locale", "set-app-locales", androidPackage, "--locales", right ? rtl : ""]);
+    }
+    applied.set(key3, want);
+  }
+  async function screenshot(platform, id, file2) {
+    if (platform === "ios") {
+      await ok3("xcrun", ["simctl", "io", id, "screenshot", file2]);
+      return read(file2);
+    }
+    const r3 = await run2("adb", ["-s", id, "exec-out", "screencap", "-p"]);
+    if (r3.code !== 0) throw new Error(`adb -s ${id} exec-out screencap -p exited ${r3.code}`);
+    writeFileSync59(file2, r3.stdout);
+    return r3.stdout;
+  }
+  async function settle2(platform, id, file2, notFrame) {
+    let previous;
+    for (let waited = 0; ; waited += settleMs) {
+      const frame = await screenshot(platform, id, file2);
+      if (previous && frame.equals(previous) && !(notFrame && frame.equals(notFrame))) return frame;
+      if (waited >= maxWaitMs) return frame;
+      previous = frame;
+      await sleep(settleMs);
+    }
+  }
+  async function open(platform, id, link) {
+    if (platform === "ios") await ok3("xcrun", ["simctl", "openurl", id, link]);
+    else await ok3("adb", ["-s", id, "shell", "am", "start", "-W", "-a", "android.intent.action.VIEW", "-d", `'${link.replace(/'/g, "%27")}'`]);
+  }
+  const capture = (async (screen, entry, variant, outDir) => {
+    const frames = [];
+    for (const platform of ["ios", "android"]) {
+      const id = deviceFor(devices, platform, variant);
+      if (!id) {
+        const flag = variant === "tablet" ? `--${platform}-tablet` : `--${platform}`;
+        frames.push({ surface: platform, screen, variant, skipped: { reason: `no ${platform}${variant === "tablet" ? " tablet" : ""} device passed (${flag})` } });
+        continue;
+      }
+      if (Object.keys(entry.params ?? {}).length) {
+        frames.push({ surface: platform, screen, variant, skipped: { reason: "screen params are not carried by the Player's deep link yet (#5377)" } });
+        continue;
+      }
+      try {
+        await apply(platform, id, variant);
+        await open(platform, id, `himi://app/${encodeURIComponent(picker)}`);
+        const file2 = join135(outDir, `${screen}.${variant}.${platform}.png`);
+        const pickerFrame = await settle2(platform, id, file2);
+        await open(platform, id, screenLink(opts.appId, screen, entry, opts.release));
+        await settle2(platform, id, file2, pickerFrame);
+        if (platform === "android" && await blackFraction(file2) > 0.95) {
+          await settle2(platform, id, file2);
+          if (await blackFraction(file2) > 0.95) {
+            frames.push({ surface: platform, screen, variant, skipped: { reason: "black frame" } });
+            continue;
+          }
+        }
+        frames.push({ surface: platform, screen, variant, file: file2 });
+      } catch (e2) {
+        frames.push({ surface: platform, screen, variant, skipped: { reason: `capture failed: ${e2.message}` } });
+      }
+    }
+    return frames;
+  });
+  capture.restore = async () => {
+    for (const [key3, was] of saved) {
+      const [platform, id] = [key3.slice(0, key3.indexOf(":")), key3.slice(key3.indexOf(":") + 1)];
+      try {
+        if (platform === "ios") {
+          if (was.appearance) await run2("xcrun", ["simctl", "ui", id, "appearance", was.appearance]);
+          if (was.language) await run2("xcrun", ["simctl", "spawn", id, "defaults", "write", "-g", "AppleLanguages", "-array", ...parsePlistArray(was.language)]);
+          else await run2("xcrun", ["simctl", "spawn", id, "defaults", "delete", "-g", "AppleLanguages"]);
+          await run2("xcrun", ["simctl", "terminate", id, iosBundle]);
+        } else {
+          if (was.appearance) await run2("adb", ["-s", id, "shell", "cmd", "uimode", "night", was.appearance]);
+          await run2("adb", ["-s", id, "shell", "cmd", "locale", "set-app-locales", androidPackage, "--locales", was.language ?? ""]);
+        }
+      } catch {
+      }
+    }
+    saved.clear();
+    applied.clear();
+  };
+  return capture;
+}
+function parseNightMode(out2) {
+  return out2.match(/Night mode:\s*([a-z_]+)/i)?.[1]?.toLowerCase() ?? (/yes/i.test(out2) ? "yes" : "no");
+}
+function parseAppLocales(out2) {
+  return out2.match(/\[([^\]]*)\]/)?.[1]?.trim() ?? "";
+}
+function parsePlistArray(out2) {
+  return out2.replace(/^\s*\(|\)\s*$/g, "").split(",").map((s2) => s2.trim().replace(/^"|"$/g, "")).filter(Boolean);
+}
+var defaultRunner3;
+var init_native = __esm({
+  "src/fidelity/native.ts"() {
+    init_define_HHP_CATALOG();
+    defaultRunner3 = (cmd, args) => new Promise((resolve94) => {
+      const child = spawn9(cmd, args, { stdio: ["ignore", "pipe", "ignore"] });
+      const chunks = [];
+      child.stdout.on("data", (c2) => chunks.push(c2));
+      child.on("error", () => resolve94({ code: 127, stdout: Buffer.alloc(0) }));
+      child.on("close", (code) => resolve94({ code: code ?? 1, stdout: Buffer.concat(chunks) }));
+    });
+  }
+});
+
 // src/fidelity/post.ts
 var post_exports = {};
 __export(post_exports, {
@@ -205819,7 +206153,7 @@ __export(fidelity_exports, {
 });
 import { execFileSync as execFileSync10 } from "node:child_process";
 import { existsSync as existsSync122, realpathSync as realpathSync19 } from "node:fs";
-import { join as join135, relative as relative26, sep as sep25 } from "node:path";
+import { join as join136, relative as relative26, sep as sep25 } from "node:path";
 function himalayaRepoRoot(dir) {
   let top;
   try {
@@ -205827,7 +206161,7 @@ function himalayaRepoRoot(dir) {
   } catch {
     return null;
   }
-  if (!existsSync122(join135(top, "tools/judges/fidelity/JUDGE.md"))) return null;
+  if (!existsSync122(join136(top, "tools/judges/fidelity/JUDGE.md"))) return null;
   const rel = relative26(realpathSync19(top), realpathSync19(dir));
   return rel.startsWith(`..${sep25}`) || rel === ".." ? null : top;
 }
@@ -205860,10 +206194,41 @@ async function fidelityCommand(ctx) {
     return 2;
   }
   const { runFidelity: runFidelity2, prCommentBody: prCommentBody2 } = await Promise.resolve().then(() => (init_run2(), run_exports2));
-  const judgeDir = join135(repo, "tools/judges/fidelity");
+  const judgeDir = join136(repo, "tools/judges/fidelity");
+  const deviceFlags = { ios: "ios", android: "android", iosTablet: "ios-tablet", androidTablet: "android-tablet" };
+  const bare = Object.values(deviceFlags).filter((f2) => flags[f2] !== void 0 && !str3(flags[f2]));
+  if (bare.length) {
+    io2.error(failure2("fidelity_bad_flag", `a device flag needs a UDID or serial: --${bare.join(", --")}`));
+    return 2;
+  }
+  const bareValue = ["release", "app-id"].filter((f2) => flags[f2] !== void 0 && !str3(flags[f2]));
+  if (bareValue.length) {
+    io2.error(failure2("fidelity_bad_flag", `--${bareValue.join(", --")} needs a value`));
+    return 2;
+  }
+  const devices = Object.fromEntries(Object.entries(deviceFlags).map(([k2, f2]) => [k2, flags[f2] === void 0 ? void 0 : str3(flags[f2])]));
+  const named = Object.entries(devices).filter(([, id]) => id !== void 0);
+  if (named.length && flags["no-native"] === true) {
+    io2.error(failure2("fidelity_bad_flag", "--no-native cannot be combined with a device flag"));
+    return 2;
+  }
+  let native;
+  if (flags["no-native"] === true) native = false;
+  else if (named.length) {
+    const { nativeCapture: nativeCapture2 } = await Promise.resolve().then(() => (init_native(), native_exports));
+    const app = (flags["app-id"] === void 0 ? void 0 : str3(flags["app-id"])) || await appId(dir);
+    const release2 = flags.release === void 0 ? void 0 : str3(flags.release);
+    const capture = nativeCapture2(devices, { appId: app, ...release2 ? { release: release2 } : {} });
+    native = capture;
+    const onSignal = () => {
+      void capture.restore().finally(() => process.exit(130));
+    };
+    process.once("SIGINT", onSignal);
+    process.once("SIGTERM", onSignal);
+  }
   let report4;
   try {
-    report4 = await runFidelity2(dir, { judgeDir, screens: list(flags.screen), variants, ...flags["no-native"] === true ? { native: false } : {} });
+    report4 = await runFidelity2(dir, { judgeDir, screens: list(flags.screen), variants, ...native !== void 0 ? { native } : {} });
   } catch (e2) {
     const code = e2.code;
     if (code === "fidelity_not_hhp" || code === "fidelity_unknown_screen") {
@@ -205887,7 +206252,7 @@ async function fidelityCommand(ctx) {
   else {
     for (const r3 of report4.rows) io2.log(`${r3.status.padEnd(4)}  ${r3.screen}/${r3.variant}  design=${r3.judge.design} parity=${r3.judge.parity}${r3.reasons.length ? `  \u2014 ${r3.reasons[0]}` : ""}`);
     io2.log(`
-${report4.status.toUpperCase()} \u2014 report: ${join135(report4.dir, "report.json")}`);
+${report4.status.toUpperCase()} \u2014 report: ${join136(report4.dir, "report.json")}`);
   }
   return report4.status === "fail" ? 1 : 0;
 }
@@ -205977,8 +206342,8 @@ async function publishSizeCommand(ctx) {
     }
     const dir = contentDir2(flags);
     const { existsSync: existsSync123 } = await import("node:fs");
-    const { join: join136 } = await import("node:path");
-    if (!existsSync123(join136(dir, "dev", "index.ts"))) return fail7("build_failed", "expected a content package with dev/index.ts; pass --content <dir>");
+    const { join: join137 } = await import("node:path");
+    if (!existsSync123(join137(dir, "dev", "index.ts"))) return fail7("build_failed", "expected a content package with dev/index.ts; pass --content <dir>");
     const declared = await appId2(dir);
     const app = typeof flags.app === "string" ? flags.app : declared;
     if (!isValidAppId(app)) return fail7("invalid_usage", "declared app is not a valid publish ID; pass --app <valid-slug>", { app }, 2);
@@ -206065,7 +206430,7 @@ init_define_HHP_CATALOG();
 init_client();
 init_config();
 import { rmSync as rmSync42 } from "node:fs";
-import { spawn as spawn9 } from "node:child_process";
+import { spawn as spawn10 } from "node:child_process";
 import { homedir as homedir16 } from "node:os";
 import { resolve as resolve93 } from "node:path";
 import { fileURLToPath as fileURLToPath39 } from "node:url";
@@ -206423,7 +206788,7 @@ var USAGE = `himi \u2014 the Himalaya authoring CLI (remote dev loop)
                                              at its catalog viewport width (himi surfaces lists them);
                                              a widget family is NOT a device \u2014 fetch /v1/widget/<widgetId>;
                                            --rtl sets ambient direction (dir=rtl + $env:isRTL)
-  himi fidelity [--content <dir>] [--screen <id,\u2026>] [--variant <light,dark,rtl,tablet>] [--no-native] [--json] [--post-pr <n>]
+  himi fidelity [--content <dir>] [--screen <id,\u2026>] [--variant <light,dark,rtl,tablet>] [--ios <udid>] [--android <serial>] [--ios-tablet <udid>] [--android-tablet <serial>] [--app-id <id>] [--release <id>] [--no-native] [--json] [--post-pr <n>]
                                            does each HHP screen look like its mockup? judge + SSIM per screen \xD7 variant (repo-only)
   himi icons [--json]                      the valid Icon.name vocabulary (offline)
   himi tokens kit [<name>]                 list the shipped design kits, or print one. himi docs
@@ -207086,7 +207451,7 @@ var COMMANDS = [
   { name: "progress", summary: 'the build JOURNAL an agent keeps for the owner while it works. `himi progress "<what changed>" --step <1-8|name> --image <png>` appends one postcard to .himi/progress.jsonl \u2014 the step is one of the customer journey\'s eight (discover, classify, plan, implement, brand, validate, review, download) \u2014 and COPIES each image, content-addressed, into .himi/history/, because .himi/shots/ is overwritten by every render and cleared by every full `himi test`, so a path into it would later show a different picture than the one the owner was sent. --image repeats. With NO --image, the home screen\'s current shot is attached automatically, only when it is no older than the last source change and not the picture the latest journaled postcard already shows \u2014 and never a shot that landed on loading placeholders, an empty or an error state (.himi/shot-states.json): then the newest home picture of the current source that shows content goes on instead (its .himi/history copy, `imageNote` saying so), or none \u2014 except on the HANDOVER card (`--step review`), where a repeat is the point and it attaches anyway; that card\'s output also names the making-of (`makingOf`, .himi/making-of.html, rebuilt when missing or older than the journal so it ends on this card) and its `next` says to hand it to the owner beside the preview link; `imageAttached` in the output says whether the postcard carries a picture (with `imageNote` saying why not, or which picture went on instead), and `--no-image` sends a text-only postcard. --notify also raises a best-effort desktop notification for an owner who stepped away. A bare `himi progress` prints the journal with the current step and elapsed time \u2014 also how an agent recovers its place after its context was compacted. APPROVALS: `--approve <gate> "<what>"` records one the customer just gave (gates: site-create, connect, private-data, draft, promote, push-signing, qa-build) in .himi/approvals.jsonl, and `--done <gate>` / `--drop <gate>` closes it \u2014 an approval is owed until then, and the chat that held it does not survive a new session. `--brief` prints plain text for a session start: the current step, the last postcard, every open approval, and whether this app\'s agent files are stale \u2014 the SessionStart hook `himi agent-init` installs runs exactly this. The CLI also journals milestones by itself \u2014 the first PNG render of the home screen (for an app a current `himi init` started: once as the template\'s "Starting point" while the source is what init wrote, then once as "First look at your app" after it diverges, Markdown edits not counting; once per app otherwise), a `himi test` crawl whose outcome changed since the last one (its counts or its home picture; an identical re-run writes none, and a repeat names what changed: "The home screen changed since the last crawl." or the changed counts, was \u2192 now), every draft push (with the home picture only when that shot is newer than the last source edit \u2014 otherwise the postcard says why and names `himi render <home> --png`), and ONE rule for a long silence: a successful home `render --png` more than ten minutes after the newest postcard of any kind, with a picture the latest postcard does not show, journals "Still building: here\'s the home screen now." with it (never twice within the window). When a crawl\'s or a draft\'s home picture is the first of an app whose source diverged, "First look at your app" is journaled first, from that shot, once. All are marked `"by": "himi"`; they never move the journey step, carry no link or credential, and step aside (folded out of every reader) when the agent journals the same step or picture within five minutes. Local only: nothing is sent anywhere.', required: '["<message>" [--step <1-8|name>] [--image <png>]\u2026 [--no-image] [--notify]] [--content <dir>] | --approve|--done|--drop <gate> ["<note>"] | --brief' },
   { name: "studio", summary: "open the BUILD BOARD \u2014 one local page the owner can leave open while an agent builds their app, which fills itself in: every screen as it renders (NEW/CHANGED badges, and each earlier version kept for a filmstrip), the journey stepper and the latest postcard from `himi progress`, the validate/test/UX/draft checks as they run, the site next to the app's home screen with its palette, and the navigation the test crawl followed. Writes .himi/studio/index.html and opens it; the page re-reads its state every two seconds, so nothing needs to be served. OPT-IN BY EXISTENCE: until this command (or `himi init`, which makes the board for every app it creates, without opening a browser) has run, no other command touches .himi/studio/ \u2014 after it, render/test/validate/push/icon/site/ux/progress each refresh the board as they finish (best-effort; never fails a command). Every image is a content-addressed copy in .himi/history/, never a live path into .himi/shots/. Local only, no secrets: it never reads a preview token, handover code or control token. --no-open prints the path instead (SSH, CI). `himi studio reel` writes the MAKING-OF: one self-contained HTML file (every image inlined, nothing fetched) with a flipbook of the home screen version by version, captioned by the postcard in effect at the time, the final screens, and every postcard \u2014 sized to stay attachable, thinning frames first. Defaults to .himi/making-of.html (never archived by push), which every successful `himi push --draft` also rebuilds and names as `reel` in its output; --out to put it elsewhere. The output names that file as the one to hand the owner (`handover: {file, hint}` in JSON; two plain lines at a terminal) \u2014 beside the preview link, never instead of it.", required: "[--content <dir>] [--no-open] | reel [--out <file>] [--no-open]" },
   { name: "render", summary: "headless-render a screen with the web renderer: render-tree + diagnostics, optional --png [<file>] (bare: .himi/shots/<id>.png, what the build board shows), --scheme dark, --tree. Local by default (content dir). Pass --remote --app --release to hit GET /v1/preview/\u2026/render on the serve plane after a push. Boots the worker so $service bindings resolve; --static raw bindings; --live real Wix fetches; --mocks (the DEFAULT whenever the app has recorded data; --no-mocks for the offline initial state) runs load() against the app's own recorded data (dev/net-mocks.json from `himi test --record`, then the config's cms seed rows, and the Base44 layer `himi test` uses \u2014 base44.entities seed rows and the analyze book's sample rows \u2014 hermetic, never a request; with neither it paints the initial state, and `mocks: {used: false}` says why), which is what the automatic pictures use, so they show the app's content instead of its offline placeholders; --state injects worker state; --input supplies pre-boot navigation params; --width/--device for PNG viewport; --rtl for dir=rtl + $env:isRTL.", required: "<screenId> [--content <dir>] [--scheme dark] [--png [<file>]] [--tree] [--static] [--live] [--mocks | --no-mocks] [--state <json|file>] [--input <json|file>] [--width <px> | --device <name>] [--rtl] [--remote --app --release]" },
-  { name: "fidelity", summary: "does each HHP screen look like the mockup it was designed from? Per screen and variant (light, dark, rtl, tablet) it captures the free-HTML mockup (hhp.json `mockup`) and the web render with the app's recorded data, scores mockup\u2194web (ImageMagick SSIM, global + worst tile), and asks a fresh model (tools/judges/fidelity) two questions: design (web vs mockup) and parity (native vs web, once native capture lands, #4935). pass/warn/fail per row; exit 1 if any row fails. Writes .himi/fidelity/<run>/report.json and a strip PNG per row. --post-pr <n> keeps one plain PR comment up to date. Advisory, not a merge gate; repo-only for now (refuses with code fidelity_outside_repo elsewhere).", required: "[--content <dir>] [--screen <id,\u2026>] [--variant <light,dark,rtl,tablet>] [--no-native] [--json] [--post-pr <n>]" },
+  { name: "fidelity", summary: "does each HHP screen look like the mockup it was designed from? Per screen and variant (light, dark, rtl, tablet) it captures the free-HTML mockup (hhp.json `mockup`) and the web render with the app's recorded data, scores mockup\u2194web (ImageMagick SSIM, global + worst tile), and asks a fresh model (tools/judges/fidelity) two questions: design (web vs mockup) and parity (native vs web). Native frames come from Himi Player on the devices passed with --ios/--android (and --ios-tablet/--android-tablet for the tablet variant), opened by `himi://app/<app-id>/screen/<screen>`; only those devices are touched, their appearance and language are restored afterwards, and a variant with no device is reported skipped. pass/warn/fail per row; exit 1 if any row fails. Writes .himi/fidelity/<run>/report.json and a strip PNG per row. --post-pr <n> keeps one plain PR comment up to date. Advisory, not a merge gate; repo-only for now (refuses with code fidelity_outside_repo elsewhere).", required: "[--content <dir>] [--screen <id,\u2026>] [--variant <light,dark,rtl,tablet>] [--ios <udid>] [--android <serial>] [--ios-tablet <udid>] [--android-tablet <serial>] [--app-id <id>] [--release <id>] [--no-native] [--json] [--post-pr <n>]" },
   { name: "l10n", summary: "import translations into per-app RFC 0054 catalogs (`apps/<app>/l10n/<tag>.json`). `import --format oneapp <dir>` converts OneApp `messages_<locale>.json` files (flat OneApp key \u2192 ICU MessageFormat string): the OneApp key becomes the catalog row's `key` (what a descriptor references as `$t:<KEY>`), the row id is the extractor's content hash of the source-locale string, and `{{x}}` placeholders become ICU `{x}`. Messages using constructs outside the supported ICU subset (selectordinal, number/date skeletons, plural offset, HTML tags) are kept VERBATIM and listed in the report with key and locale. Merges with an existing catalog \u2014 manual translations and keys survive unless --overwrite; rows the import does not touch survive always. Default locales: every messages_<tag>.json found; --source (default en) names the locale supplying each row's `source` string. Warns when the app's `locale` config does not declare an imported tag, printing the config line to add. Deterministic output: re-running over the same inputs produces no diff.", required: "import --format oneapp <dir> (--app <slug> | --content <app dir>) [--locales en,he] [--source en] [--overwrite] [--json]" },
   { name: "cms", summary: "inspect, provision, and seed the app's CMS (Wix Data) collections, declared as a `cms` block in config.ts. `query` is READ-ONLY \u2014 by default it fetches ONLY the physical ids `config.ts` declares (item counts + schema drift) and reports `siteScanned: false`; it never lists the site, so an UNDECLARED `himi_<app>_` collection this app owns is not reached without `--all`. `--all` SCANS the site \u2014 every collection it lists is labeled `owned`/`adopted`/`foreign`, and it describes every foreign one \u2014 id, non-system field keys + types, and the site's read role \u2014 so an app with no `cms` block at all can DISCOVER a collection to adopt (`--all` is the one case where a missing `cms` block is not 'nothing to do'). Foreign collections are described up to a cap and are never item-counted (`itemCount: null`), because a row count is one query each; `foreign.count` is how many the scan LISTED \u2014 it follows the list endpoint's pages, and `listingIncomplete: true` says when the walk stopped short of the end, with `unlistedCollections` counting what it left out when Wix gave a paging total \u2014 and `foreign.truncated` says how many of those went undescribed, each still NAMED in `foreign.others` (id + displayName), so a collection the site already has is never hidden behind the cap. The scan is OWNER-scoped \u2014 it needs --site <msid> (or WIX_SITE_ID) plus owner auth via `wix token`; a visitor token can read a public collection's ITEMS but can never enumerate collections, so there is no tokenless discovery path. `create` reconciles declared collections additively and idempotently, and REFUSES any id outside the app's `himi_<app>_` namespace, so it is safe against a production site. It reports declared-vs-site `permissionDrift` but never writes permissions unless asked with --apply-permissions, so a field reconcile can't silently revert access control changed in the dashboard. `seed` inserts the git-tracked `seed:` rows into EMPTY owned collections (--force to add to a non-empty one; --ai writes placeholder rows plus a refinement prompt for you to review). Adopted collections (declared by `wixId`) are read-only and never created, updated, or seeded. Site from --site <msid> or WIX_SITE_ID; owner auth via `wix token`.", required: "query|create|seed [--site <msid>] [--content <dir>] [--all] [--dry-run] [--force] [--allow-destructive] [--apply-permissions] [--only <id>] [--ai] [--count <n>]" },
   { name: "data", summary: "read-only plan or explicitly provision/seed declared KV and Wix Data resources. Preview and production are separate scopes. KV administration uses the operator data plane from --data-url/HIMI_DATA_ADMIN_URL and HIMI_DATA_ADMIN_TOKEN; draft push never calls it.", required: "plan|create|seed [--site <msid>] [--environment preview|production] [--content <dir>] [--data-url <url>] [--dry-run] [--force]" },
@@ -209715,8 +210080,8 @@ function pushAuthHint(status, token, target, hasOwnerIssuer = true) {
 }
 async function contentVisibility(dir) {
   try {
-    const { readFileSync: readFileSync141 } = await import("node:fs");
-    const m2 = JSON.parse(readFileSync141(join96(dir, "himalaya.content.json"), "utf8"));
+    const { readFileSync: readFileSync142 } = await import("node:fs");
+    const m2 = JSON.parse(readFileSync142(join96(dir, "himalaya.content.json"), "utf8"));
     if (m2.visibility === "public" || m2.visibility === "unlisted") return m2.visibility;
   } catch {
   }
@@ -215835,7 +216200,7 @@ init_owner_claim();
 init_wix_placeholders();
 var defaultIO = { log: (l2) => console.log(l2), error: (l2) => console.error(l2), isTTY: process.stdout.isTTY === true };
 var CLI_ENTRY = fileURLToPath39(import.meta.url);
-function createUpdateRefreshSpawner(spawnFn = spawn9, execArgv = process.execArgv) {
+function createUpdateRefreshSpawner(spawnFn = spawn10, execArgv = process.execArgv) {
   return () => {
     try {
       const child = spawnFn(process.execPath, [...loaderArgs(execArgv), fileURLToPath39(import.meta.url), UPDATE_REFRESH_COMMAND], {
@@ -215852,7 +216217,7 @@ function createUpdateRefreshSpawner(spawnFn = spawn9, execArgv = process.execArg
   };
 }
 var spawnUpdateRefresh = createUpdateRefreshSpawner();
-function createTrimValidator(deps = {}, spawnFn = spawn9) {
+function createTrimValidator(deps = {}, spawnFn = spawn10) {
   const outcome = (code, report4, said) => {
     let counts;
     let errors;

package/guides/hhp.md

@@ -210,13 +210,13 @@ Declare the mockup each screen was designed from in `hhp.json`:
 A screen may also carry `params` (the navigation input a device opens it with, used by native capture, #4935) and `fidelity: { "warn": 80, "fail": 60 }`. Thresholds can also be set app-wide at the top level.
 
 ```bash
-himi fidelity --content <dir> [--screen a,b] [--variant light,dark,rtl,tablet] [--no-native] [--json] [--post-pr <n>]
+himi fidelity --content <dir> [--screen a,b] [--variant light,dark,rtl,tablet] [--ios <udid>] [--android <serial>] [--ios-tablet <udid>] [--android-tablet <serial>] [--app-id <id>] [--release <id>] [--no-native] [--json] [--post-pr <n>]
 ```
 
 For each screen and variant (`light`, `dark`, `rtl`, `tablet`), the command does four things:
 
 1. **Captures the mockup.** It draws the page in Chromium at the variant's width. Dark mode is drawn by emulating `prefers-color-scheme`. RTL is drawn by setting `dir=rtl` on the page.
-2. **Captures the web render** from the app's recorded data, as `himi render` does by default. Native frames come through a capture seam. Until #4935 lands, the seam reports iOS and Android as skipped.
+2. **Captures the web render** from the app's recorded data, as `himi render` does by default. Native frames come from Himi Player on the devices you pass: `--ios <udid>` and `--android <serial>`, plus `--ios-tablet` and `--android-tablet` for the tablet variant. Only those devices are touched. For each variant the command sets dark or light appearance and, for `rtl`, the Hebrew language (iOS `AppleLanguages`, Android per-app locale, API 33+). It opens `himi://app/<app>/screen/<screen>` and captures once two frames match. Every setting it changed is restored afterwards, also on Ctrl-C. A variant with no device is reported `skipped`, never passed. Without `--release <id>` the Player shows the app's **live** release, not your working copy. A screen that declares `params` is skipped natively for now, because the Player's deep link does not carry them yet. On a fresh iOS simulator, open one `himi://` link by hand first and accept iOS's "Open in Himi Player?" prompt: the command cannot answer it, and until it is accepted every iOS capture shows the prompt.
 3. **Scores mockup↔web** with ImageMagick SSIM, globally and per tile. The worst tile says where the screens differ most.
 4. **Asks a fresh model** two questions, using the repo's fidelity judge prompt. The model never ran in the session that wrote the app.
    - **Design:** does WEB look like the MOCKUP? This judges the port.

package/guides/push-cli-onboarding.md

@@ -203,6 +203,42 @@ routes: [
 A notification whose link matches no route opens the app without navigating. `himi validate`
 warns when a declared route names a screen the app does not declare.
 
+#### Links from a legacy link space
+
+An app that replaces an older one may still receive that app's links: its old custom scheme
+(`legacyapp://widget/42`) or an old web host (`https://legacy.example.com/app/widget/42`).
+Declare those prefixes and route the rest:
+
+```ts
+push: {
+  linkPrefixes: ["legacyapp://", "https://legacy.example.com/app/"],
+  routes: [{ match: "widget/:id", link: "<scheme>://screen/<widget-screen>?id={id}" }],
+},
+```
+
+Before matching, the device strips a configured prefix from the link, so `widget/42` is matched
+against the routes. It applies these rules in order:
+
+1. With `payloadAdapter: "wix-ping"`, a Wix link is handled first, so a prefix inside the Wix link
+   space never applies.
+2. Otherwise the **longest** matching prefix is stripped. When a prefix starts with a scheme
+   (`legacyapp://`, `https://…`), its scheme and host match in any case and the rest matches
+   exactly. A prefix with no scheme (`legacy.example.com/app/`, `/app/`) matches exactly.
+3. A prefix only matches up to a `/`, `?` or `#`, so `https://old.example.com/m` does not strip
+   `https://old.example.com/mobile/…`.
+4. A relative link (`/widget/42`) is matched as is, with no prefix needed.
+5. Any other link passes through unchanged.
+
+`himi validate` warns about a prefix that can never apply: one inside the Wix link space under
+`wix-ping`, or a prefix list with no routes. It does not judge a prefix by its shape. A schemeless
+prefix strips links written without a scheme, and a dotted custom scheme strips its own links.
+
+With `wix-ping` and no `routes`, the build derives the routes from the site's verticals. A
+stripped link is then matched against those Wix notification paths only
+(`my-account/:site/stores/orders/:orderId`, …). If your legacy links use paths of their own,
+declare `routes` for them. A declared table replaces the derived one, so list the Wix routes you
+still need there too. `himi validate` warns when prefixes meet only derived routes.
+
 ### Notification action buttons
 
 Declare actionable categories in the app's source `config.ts`. The native shells render one

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@wix/himalaya-cli",
-  "version": "0.1603.0",
+  "version": "0.1605.0",
   "type": "module",
   "description": "himi — the Himalaya authoring CLI. Build a Tier-5 content package on your own machine, push it to the production serve as a draft, preview it on web + Himi Player, and read worker logs back — the remote dev loop. Wraps @himalaya/serve-cli for transport.",
   "keywords": [
@@ -72,5 +72,5 @@
       "artifactId": "himalaya-cli"
     }
   },
-  "falconPackageHash": "3b93e9df5b17cf56b074bfe86e5cb5221719e281d1b61b77363bb6df"
+  "falconPackageHash": "7b39098c802108e32f8d425c56a0265a2f503b5e56f77b0b0dadff7b"
 }