@wix/himalaya-cli 0.996.0 → 0.998.0

package/dist/cli.mjs

@@ -5307,7 +5307,6 @@ function walk(node, registry, path, out) {
 var SYSTEM_FONT_FAMILY;
 var init_tokens = __esm({
   "../../core/ts/src/tokens.ts"() {
-    "use strict";
     SYSTEM_FONT_FAMILY = "$system";
   }
 });
@@ -5333,7 +5332,6 @@ function resolveTranslation(value, catalog, sourceCatalog) {
 var BINDING_SIGILS, BINDING_SIGIL_RE, TRANSLATION_PREFIX, TRANSLATION_KEY_RE;
 var init_bindings = __esm({
   "../../core/ts/src/bindings.ts"() {
-    "use strict";
     BINDING_SIGILS = ["service", "flag", "item", "t"];
     BINDING_SIGIL_RE = new RegExp(
       `^\\$(?:${BINDING_SIGILS.filter((s) => s !== "t").join("|")})\\b|^\\$t:`
@@ -6607,8 +6605,10 @@ __export(validate_descriptor_core_exports, {
   isOpaqueAuthorJson: () => isOpaqueAuthorJson,
   loadBundleServicesLive: () => loadBundleServicesLive,
   nativeRequiredFindings: () => nativeRequiredFindings,
+  nondeterministicServices: () => nondeterministicServices,
   pathCrossesOpaqueAuthorJson: () => pathCrossesOpaqueAuthorJson,
   pathValue: () => pathValue,
+  pinnedIntrinsicsSource: () => pinnedIntrinsicsSource,
   resolveActionEvaluator: () => resolveActionEvaluator,
   resolveBootEvaluator: () => resolveBootEvaluator,
   resolveEvaluator: () => resolveEvaluator,
@@ -6704,12 +6704,17 @@ function runBundleSandbox(bundleJs, opts) {
     TextEncoder,
     TextDecoder,
     AbortController
+    // NO `Date` / `Math` here, pinned or not: a pinned pair built on this side would be the host's
+    // intrinsics wearing a sandbox name. The realm builds them from its own (`pinnedIntrinsicsSource`).
   };
   try {
     resolveBootEvaluator(opts.evaluator).run(bundleJs, sandbox, {
       timeoutMs: opts.timeoutMs ?? BOOT_EVAL_TIMEOUT_MS,
       filename: "himi-bundle.js",
-      captureConsole: Boolean(opts.captureConsole)
+      captureConsole: Boolean(opts.captureConsole),
+      ...opts.clock === void 0 ? {} : { clock: opts.clock },
+      ...opts.seed === void 0 ? {} : { seed: opts.seed },
+      ...opts.mirrorRandom ? { mirrorRandom: true } : {}
     });
     return { services, actions, console: consoleLines, threw: null };
   } catch (err) {
@@ -6735,6 +6740,59 @@ function dryRunBundle(bundleJs, opts = {}) {
   const r = runBundleSandbox(bundleJs, { rethrow: false, captureConsole: true, ...opts });
   return { services: Object.keys(r.services), console: r.console, threw: r.threw };
 }
+function pinnedIntrinsicsSource(pins) {
+  const clock = pins.clock === void 0 ? void 0 : Number(pins.clock);
+  const seed2 = pins.seed === void 0 ? void 0 : Math.trunc(Number(pins.seed)) >>> 0 || 1;
+  if (clock === void 0 && seed2 === void 0) return null;
+  const date = clock === void 0 ? "" : `
+    var pinned = ${clock};
+    // Captured NOW, before any bundle code runs: resolved per call, a worker that deletes or
+    // overwrites \`globalThis.Reflect\` would make every pinned \`new Date()\` throw, both drift probes
+    // would fail, and the drift check would stay silent about a worker the real build boots fine.
+    var construct = Reflect.construct;
+    // \`new Date()\` \u2192 the pinned instant; \`new Date(<args>)\` keeps its meaning; \`Date()\` called as a
+    // function returns the pinned instant's string, as it would the current one.
+    var PinnedDate = function Date() {
+      if (new.target === undefined) return new RealDate(pinned).toString();
+      return arguments.length ? construct(RealDate, arguments, new.target) : construct(RealDate, [pinned], new.target);
+    };
+    PinnedDate.prototype = Object.create(RealDate.prototype, { constructor: { value: PinnedDate, writable: true, configurable: true } });
+    PinnedDate.now = function now() { return pinned; };
+    PinnedDate.parse = RealDate.parse;
+    PinnedDate.UTC = RealDate.UTC;
+    out.Date = PinnedDate;`;
+  const math = seed2 === void 0 ? "" : `
+    var s = ${seed2};
+    var imul = RealMath.imul;
+    var M = Object.create(Object.getPrototypeOf(RealMath));
+    Object.getOwnPropertyNames(RealMath).forEach(function (k) { Object.defineProperty(M, k, Object.getOwnPropertyDescriptor(RealMath, k)); });
+    Object.getOwnPropertySymbols(RealMath).forEach(function (k) { Object.defineProperty(M, k, Object.getOwnPropertyDescriptor(RealMath, k)); });
+    // Non-writable, so a bundle cannot put an unseeded PRNG back and make a seeded run vary.
+    Object.defineProperty(M, "random", {
+      value: function random() {
+        s = (s + 0x6d2b79f5) >>> 0;
+        var t = imul(s ^ (s >>> 15), 1 | s);
+        t = (t + imul(t ^ (t >>> 7), 61 | t)) ^ t;
+        var u = (t ^ (t >>> 14)) >>> 0;
+        return ${pins.mirrorRandom ? "(~u >>> 0)" : "u"} / 4294967296;
+      },
+      writable: false, enumerable: false, configurable: false,
+    });
+    out.Math = M;`;
+  return `(function (RealDate, RealMath) {
+    var out = {};${date}${math}
+    return out;
+  })`;
+}
+function nondeterministicServices(bundleJs, opts = {}) {
+  const boots = DRIFT_PROBES.map((probe) => runBundleSandbox(bundleJs, { rethrow: false, ...opts, ...probe }));
+  const threw = boots.filter((b2) => b2.threw !== null).length;
+  if (threw === boots.length) return [];
+  const [a, b] = boots.map((boot) => boot.services);
+  const names = [.../* @__PURE__ */ new Set([...Object.keys(a), ...Object.keys(b)])];
+  if (threw > 0) return names.sort();
+  return names.filter((name) => safeStringify(a[name]) !== safeStringify(b[name])).sort();
+}
 function setDefaultEvaluator(evaluator) {
   defaultEvaluator = evaluator;
 }
@@ -6875,26 +6933,10 @@ async function bootBundleWorker(bundleJs, opts) {
       timers.delete(t);
     }
   };
-  const frozenDate = opts.clock === void 0 ? void 0 : new Proxy(Date, {
-    get: (t, p) => p === "now" ? () => opts.clock : Reflect.get(t, p),
-    // `new Date()` → the pinned instant; `new Date(<args>)` keeps its normal meaning.
-    construct: (t, args) => args.length ? new t(...args) : new t(opts.clock),
-    apply: () => new Date(opts.clock).toString()
-  });
-  const seededMath = opts.seed === void 0 ? void 0 : (() => {
-    let s = opts.seed >>> 0 || 1;
-    const m = Object.create(Math);
-    Object.defineProperty(m, "random", {
-      value: () => {
-        s = s + 1831565813 >>> 0;
-        let t = Math.imul(s ^ s >>> 15, 1 | s);
-        t = t + Math.imul(t ^ t >>> 7, 61 | t) ^ t;
-        return ((t ^ t >>> 14) >>> 0) / 4294967296;
-      },
-      enumerable: true
-    });
-    return m;
-  })();
+  const pins = {
+    ...opts.clock === void 0 ? {} : { clock: opts.clock },
+    ...opts.seed === void 0 ? {} : { seed: opts.seed }
+  };
   const sandbox = {
     himalaya,
     globalThis: void 0,
@@ -6922,8 +6964,6 @@ async function bootBundleWorker(bundleJs, opts) {
       clearInterval: () => {
       }
     },
-    ...frozenDate ? { Date: frozenDate } : {},
-    ...seededMath ? { Math: seededMath } : {},
     // HOST globals, not ECMAScript built-ins: a bare vm context has Object/Array/Date/Intl/JSON
     // but NOT these. Injecting them unconditionally — INCLUDING under deviceParity — rested on
     // "every real worker runtime (JSC, Hermes, the web-host Worker) does" have them. **A bare
@@ -6974,7 +7014,7 @@ async function bootBundleWorker(bundleJs, opts) {
         errors.push({ service: "(boot)", message: ran.error });
       }
     } else {
-      realm.run(bundleJs, sandbox, { timeoutMs: 2e3, filename: "himi-bundle.js", hide });
+      realm.run(bundleJs, sandbox, { timeoutMs: 2e3, filename: "himi-bundle.js", hide, ...pins });
     }
   } catch (err) {
     errors.push({ service: "(boot)", message: err?.message ?? String(err), ...err?.stack ? { stack: err.stack } : {} });
@@ -8376,7 +8416,7 @@ function validateScreenDescriptor(screenId, descriptor, opts = {}) {
     services: Object.keys(services)
   };
 }
-var CRAWL_BLOCKING_PASSES, BOOT_EVAL_TIMEOUT_MS, DEVICE_PARITY_WITHHELD, defaultEvaluator, bootEvaluator, actionEvaluator, NATIVE_PROP_ENUMS, KNOWN_PROPS, IN_ARRAY_BINDING_PROPS, SERVICE_SIGIL, INTEGER_PROPS, NATIVE_REQUIRED_PROPS, bareNestedClass, NATIVE_NESTED_CLASSES, NATIVE_MODIFIERS_CLASS, NATIVE_DESCRIPTOR_CLASS, NATIVE_DESCRIPTOR_NESTED, NATIVE_NESTED_PROPS, MODIFIER_KEYS, INTEGER_MODIFIERS, MODIFIER_KINDS, SCHEMA_SCORED_NODES, CORE_PACKAGES, LEGACY_UNSCORED_KEYS, DYNAMIC_PLACEHOLDER, LITERAL_ONLY_PROPS, SERVICE_ONLY_BINDING_PROPS, WHOLE_VALUE_BINDING, EMBEDDED_BINDING, OPTIONS_BINDING_PROPS;
+var CRAWL_BLOCKING_PASSES, BOOT_EVAL_TIMEOUT_MS, DRIFT_PROBES, DEVICE_PARITY_WITHHELD, defaultEvaluator, bootEvaluator, actionEvaluator, NATIVE_PROP_ENUMS, KNOWN_PROPS, IN_ARRAY_BINDING_PROPS, SERVICE_SIGIL, INTEGER_PROPS, NATIVE_REQUIRED_PROPS, bareNestedClass, NATIVE_NESTED_CLASSES, NATIVE_MODIFIERS_CLASS, NATIVE_DESCRIPTOR_CLASS, NATIVE_DESCRIPTOR_NESTED, NATIVE_NESTED_PROPS, MODIFIER_KEYS, INTEGER_MODIFIERS, MODIFIER_KINDS, SCHEMA_SCORED_NODES, CORE_PACKAGES, LEGACY_UNSCORED_KEYS, DYNAMIC_PLACEHOLDER, LITERAL_ONLY_PROPS, SERVICE_ONLY_BINDING_PROPS, WHOLE_VALUE_BINDING, EMBEDDED_BINDING, OPTIONS_BINDING_PROPS;
 var init_validate_descriptor_core = __esm({
   "../../core/dev-server/src/validate-descriptor.core.ts"() {
     init_validator();
@@ -8395,6 +8435,12 @@ var init_validate_descriptor_core = __esm({
       "strict-enum"
     ]);
     BOOT_EVAL_TIMEOUT_MS = 2e3;
+    DRIFT_PROBES = [
+      { clock: Date.UTC(2020, 0, 1, 12, 0, 0, 0), seed: 1 },
+      // a Wednesday, the 1st/2nd, everywhere in -11h…+14h
+      { clock: Date.UTC(2021, 7, 28, 19, 35, 57, 789), seed: 1, mirrorRandom: true }
+      // a Saturday or Sunday, the 28th/29th
+    ];
     DEVICE_PARITY_WITHHELD = [
       "setTimeout",
       "clearTimeout",
@@ -9388,25 +9434,10 @@ function preludeFor(opts) {
   var consoleJson = "";
   var stringify = JSON.stringify;
 ${GUEST_NONFINITE_CODEC}${opts.seed === void 0 ? "" : `
-  // mulberry32, bit-identical to the host's seeded Math in validate-descriptor.core.ts. Math.imul
-  // and the >>> 0 coercions are what keep it identical: the algorithm is defined over 32-bit
-  // integers, and float arithmetic would drift apart after a handful of draws. Installed
-  // non-writable so a bundle cannot put the engine's PRNG back and make a seeded run vary.
-  (function () {
-    var s = (${Math.trunc(opts.seed) >>> 0}) || 1;
-    var $imul = Math.imul;
-    Object.defineProperty(Math, "random", {
-      value: function () {
-        s = (s + 0x6d2b79f5) >>> 0;
-        var t = $imul(s ^ (s >>> 15), 1 | s);
-        t = (t + $imul(t ^ (t >>> 7), 61 | t)) ^ t;
-        return ((t ^ (t >>> 14)) >>> 0) / 4294967296;
-      },
-      enumerable: true,
-      configurable: false,
-      writable: false,
-    });
-  })();
+  // A seeded Math \u2014 a copy of this realm's own, whose \`random\` is mulberry32, non-writable so a
+  // bundle cannot put the engine's PRNG back and make a seeded run vary. The same source every
+  // realm evaluates, so the stream is bit-identical to node:vm's by construction.
+  globalThis.Math = (${pinnedIntrinsicsSource({ seed: opts.seed, ...opts.mirrorRandom ? { mirrorRandom: true } : {} })})(Date, Math).Math;
 `}
   var parse = JSON.parse;
   var stringValue = String;
@@ -9733,7 +9764,7 @@ ${opts.liveTransport ? `      var handle = { getState: function () { return def
   // GREEN on exactly the floor gate this realm exists to enforce. The URL family is never
   // installed here at all, which is why only these four need the guard.
 ${timerGlobals(opts.hide, opts.liveTransport === true)}
-${opts.clock !== void 0 ? `  globalThis.Date.now = function () { return ${opts.clock}; };` : ""}${opts.liveTransport ? `
+${opts.clock === void 0 ? "" : opts.freezeDate ? `  globalThis.Date = (${pinnedIntrinsicsSource({ clock: opts.clock })})(globalThis.Date, Math).Date;` : `  globalThis.Date.now = function () { return ${opts.clock}; };`}${opts.liveTransport ? `
   // THE LOAD SWEEP, INSIDE THE GUEST. It has to live here: the service definitions are
   // closure-held and deliberately unnameable from guest code, so the host cannot reach the action
   // FUNCTIONS at all \u2014 which is precisely why the sync realm could not run them and silently
@@ -9877,7 +9908,17 @@ async function createQuickJsEvaluator(options = {}) {
       let readback = null;
       try {
         const pre = ctx.evalCode(
-          preludeFor({ input: himalaya?.input ?? {}, captureConsole, clock: options.clock, hide: opts.hide }),
+          // A per-run clock/seed (#3049's drift probe) wins over the realm-wide pinned clock. Built
+          // in the guest from the guest's own intrinsics, like every realm's (`pinnedIntrinsicsSource`).
+          preludeFor({
+            input: himalaya?.input ?? {},
+            captureConsole,
+            clock: opts.clock ?? options.clock,
+            freezeDate: opts.clock !== void 0,
+            hide: opts.hide,
+            ...opts.seed === void 0 ? {} : { seed: opts.seed },
+            ...opts.mirrorRandom ? { mirrorRandom: true } : {}
+          }),
           "himi-sandbox.js"
         );
         if (pre.error) {
@@ -19358,7 +19399,6 @@ function shouldRevealError(args) {
 var EMAIL_RE, URL_HOST_RE, INTEGER_RE, NUMBER_RE;
 var init_validation = __esm({
   "../../core/ts/src/validation.ts"() {
-    "use strict";
     EMAIL_RE = /^[A-Za-z0-9._%+-]+@[A-Za-z0-9-]+(\.[A-Za-z0-9-]+)*\.[A-Za-z]{2,}$/;
     URL_HOST_RE = /^[A-Za-z0-9-]+(\.[A-Za-z0-9-]+)*(:[0-9]+)?$/;
     INTEGER_RE = /^[+-]?[0-9]+$/;
@@ -22783,7 +22823,6 @@ function validateWorkerSubtree(raw, slotId, policy, actionCatalog) {
 var WORKER_SUBTREE_CEILINGS, ID_PART, ACTION_ID;
 var init_worker_subtree = __esm({
   "../../core/ts/src/worker-subtree.ts"() {
-    "use strict";
     init_worker_subtree_safe_types_generated();
     WORKER_SUBTREE_CEILINGS = Object.freeze({
       maxEncodedBytes: 65536,
@@ -22901,7 +22940,7 @@ function ensureHListStyles() {
   if (hListStylesInjected || typeof document === "undefined") return;
   hListStylesInjected = true;
   const el = document.createElement("style");
-  el.textContent = "[data-himalaya-hlist]>*{flex:0 0 auto}";
+  el.textContent = HLIST_CHILD_CSS;
   document.head.appendChild(el);
 }
 function ensureListAnimateRuntime() {
@@ -24134,10 +24173,16 @@ function renderNode(node, ctx) {
 function renderInner(node, ctx) {
   if (!node || typeof node !== "object") return null;
   const { type, props, modifiers } = normalize(node);
+  const hListItem = ctx.hListItem === true;
   if (modifiers?.theme) ctx = withTheme(ctx, modifiers.theme);
+  if (ctx.hListItem) ctx = { ...ctx, hListItem: false };
   const pkg = node.body?.package;
   const C = ctx.color;
   const wrap = ctx.modStyle(resolveModBindings(modifiers, ctx));
+  const rowItemHold = hListItem && wrap.flex == null && wrap.flexShrink == null;
+  if (rowItemHold) wrap.flexShrink = 0;
+  const rowItem = rowItemHold ? { flexShrink: 0 } : {};
+  const itemCtx = hListItem ? { ...ctx, hListItem: true } : ctx;
   {
     const m = modifiers;
     const hp = boundModNumber(m?.heightPath ?? m?.height_path, ctx);
@@ -24194,25 +24239,25 @@ function renderInner(node, ctx) {
     if (spec) {
       ensureTransitionKeyframes();
       ensureRevealRuntime();
-      const inner = renderNode({ ...node, modifiers: { ...modifiers, transition: void 0, revealOnScroll: void 0 } }, ctx);
-      const style = { opacity: 0 };
+      const inner = renderNode({ ...node, modifiers: { ...modifiers, transition: void 0, revealOnScroll: void 0 } }, itemCtx);
+      const style = { opacity: 0, ...rowItem };
       if (spec.distance != null) style["--hm-d"] = `${spec.distance}px`;
       return /* @__PURE__ */ jsx6("div", { "data-himalaya-reveal": spec.animation, style, children: inner });
     }
   }
   if (typeof modifiers?.parallax === "number" && modifiers.parallax !== 0 && !ctx.reduceMotion()) {
     ensureParallaxRuntime();
-    const inner = renderNode({ ...node, modifiers: { ...modifiers, parallax: void 0 } }, ctx);
-    return /* @__PURE__ */ jsx6("div", { "data-himalaya-parallax": String(modifiers.parallax), children: inner });
+    const inner = renderNode({ ...node, modifiers: { ...modifiers, parallax: void 0 } }, itemCtx);
+    return /* @__PURE__ */ jsx6("div", { "data-himalaya-parallax": String(modifiers.parallax), style: rowItemHold ? rowItem : void 0, children: inner });
   }
   if (modifiers?.scrollProgress) {
     ensureScrollProgressRuntime();
     const sticky = !!modifiers.sticky;
     const inner = renderNode(
       { ...node, modifiers: { ...modifiers, scrollProgress: void 0, sticky: void 0 } },
-      ctx
+      itemCtx
     );
-    const barStyle = { transformOrigin: "left", transform: "scaleX(0)", alignSelf: "stretch" };
+    const barStyle = { transformOrigin: "left", transform: "scaleX(0)", alignSelf: "stretch", ...rowItem };
     if (sticky) {
       barStyle.position = "sticky";
       barStyle.top = 0;
@@ -24224,16 +24269,16 @@ function renderInner(node, ctx) {
     ensureVectorAnimStyles();
     const name = modifiers.vectorAnim;
     const col = C(resolveScalarStatic(modifiers.color, ctx) ?? "accentPrimary", "#116DFF");
-    const inner = renderNode({ ...node, modifiers: { ...modifiers, vectorAnim: void 0 } }, ctx);
-    return /* @__PURE__ */ jsxs3("div", { "data-himalaya-vectoranim": name, style: { position: "relative", display: "inline-flex", alignItems: "center", justifyContent: "center" }, children: [
+    const inner = renderNode({ ...node, modifiers: { ...modifiers, vectorAnim: void 0 } }, itemCtx);
+    return /* @__PURE__ */ jsxs3("div", { "data-himalaya-vectoranim": name, style: { position: "relative", display: "inline-flex", alignItems: "center", justifyContent: "center", ...rowItem }, children: [
       inner,
       vectorAnimSvg(name, col, 36, !ctx.reduceMotion())
     ] });
   }
   if (modifiers?.confetti && !ctx.reduceMotion()) {
     ensureConfettiRuntime();
-    const inner = renderNode({ ...node, modifiers: { ...modifiers, confetti: void 0 } }, ctx);
-    return /* @__PURE__ */ jsxs3("div", { style: { position: "relative" }, children: [
+    const inner = renderNode({ ...node, modifiers: { ...modifiers, confetti: void 0 } }, itemCtx);
+    return /* @__PURE__ */ jsxs3("div", { style: { position: "relative", ...rowItem }, children: [
       inner,
       /* @__PURE__ */ jsx6("div", { "data-himalaya-confetti": true, style: { position: "absolute", inset: 0, pointerEvents: "none", overflow: "hidden" } })
     ] });
@@ -24255,7 +24300,8 @@ function renderInner(node, ctx) {
       const hasW = modifiers?.width != null || modifiers?.fillMaxWidth === true;
       const hasH = modifiers?.height != null;
       const justifyItems = zJustifyItems(props.alignment);
-      return /* @__PURE__ */ jsx6("div", { style: { position: "relative", display: "grid", justifyItems, alignItems: "center", ...hasW ? {} : { width: "100%" }, ...hasH ? {} : { minHeight: 40 }, ...wrap }, children: (props.children ?? []).map((c, i) => /* @__PURE__ */ jsx6("div", { style: { gridArea: "1 / 1", display: "grid", justifyItems, alignItems: "center", width: "100%" }, children: renderNode(c, ctx) }, c?.id ?? i)) });
+      const fillsWidth = !hasW && !hListItem;
+      return /* @__PURE__ */ jsx6("div", { style: { position: "relative", display: "grid", justifyItems, alignItems: "center", ...fillsWidth ? { width: "100%" } : {}, ...hasH ? {} : { minHeight: 40 }, ...wrap }, children: (props.children ?? []).map((c, i) => /* @__PURE__ */ jsx6("div", { style: { gridArea: "1 / 1", display: "grid", justifyItems, alignItems: "center", width: "100%" }, children: renderNode(c, ctx) }, c?.id ?? i)) });
     }
     case "LazyList": {
       const itemsPath = props.itemsPath ?? props.items_path;
@@ -24281,6 +24327,7 @@ function renderInner(node, ctx) {
       };
       if (props.horizontal) ensureHListStyles();
       const hListAttr = props.horizontal ? { "data-himalaya-hlist": "1" } : {};
+      const asItem = (c) => props.horizontal ? { ...c, hListItem: true } : c;
       if (itemsPath && items[0] && ctx.provider) {
         const boundSwipe = props.rowSwipeActions ?? props.row_swipe_actions;
         const boundRefresh = props.onPullToRefresh ?? props.on_pull_to_refresh;
@@ -24293,7 +24340,7 @@ function renderInner(node, ctx) {
             itemsPath,
             template: items[0],
             renderRow: (t, ic) => {
-              let row = renderNode(t, ic);
+              let row = renderNode(t, asItem(ic));
               if (boundStagger > 0 && React5.isValidElement(row)) {
                 const i = Number(ic.itemScope?.__index ?? 0);
                 const prev = row.props.style ?? {};
@@ -24350,7 +24397,7 @@ function renderInner(node, ctx) {
         if (animateItems) ensureListAnimateRuntime();
         const stickyHeader = props.stickyHeader ?? props.sticky_header;
         const stickyEl = stickyHeader && !props.horizontal ? /* @__PURE__ */ jsx6("div", { style: { position: "sticky", top: 0, zIndex: 2, background: C("surfacePrimary", "#fff") }, children: renderNode(stickyHeader, ctx) }) : null;
-        const rendered = staggerMs > 0 ? staggeredKids(items, ctx, staggerMs) : kids(items, ctx);
+        const rendered = staggerMs > 0 ? staggeredKids(items, asItem(ctx), staggerMs) : kids(items, asItem(ctx));
         let body = rendered;
         if (swipe && ctx.onAction && !props.horizontal) {
           const leading = swipe.leading ?? [];
@@ -24422,7 +24469,7 @@ function renderInner(node, ctx) {
       return /* @__PURE__ */ jsxs3("div", { style: { textAlign: "center", width: "100%", padding: 12, boxSizing: "border-box", ...wrap }, children: [
         /* @__PURE__ */ jsx6("div", { style: { width: 46, height: 46, borderRadius: 13, background: C("surfaceTertiary", "#eee"), display: "grid", placeItems: "center", margin: "0 auto 12px", color: C("textSecondary", "#9aa2ad") }, children: iconSvg(props.icon, { size: 24 }) }),
         /* @__PURE__ */ jsx6("div", { style: { fontFamily: bodyFont(ctx), fontWeight: 600, fontSize: 16, color: C("textPrimary", "#111") }, children: asBoundText(props.title, ctx) || "Empty" }),
-        props.subtitle && /* @__PURE__ */ jsx6("div", { style: { fontSize: 13, color: C("textSecondary", "#888"), marginTop: 3 }, children: txt(props.subtitle, ctx) }),
+        props.subtitle && /* @__PURE__ */ jsx6("div", { style: { fontFamily: bodyFont(ctx), fontSize: 13, color: C("textSecondary", "#888"), marginTop: 3 }, children: txt(props.subtitle, ctx) }),
         actionTextButton(ctx, props.action, asBoundText(props.actionLabel, ctx) || "Take action", C("accentPrimary", "#116DFF"), { margin: "12px auto 0", textAlign: "center" })
       ] });
     // ───────────── atoms ─────────────
@@ -24767,7 +24814,7 @@ function renderInner(node, ctx) {
         /* @__PURE__ */ jsx6("div", { style: { width: 3, borderRadius: 3, background: accent, flex: "none" } }),
         /* @__PURE__ */ jsxs3("div", { children: [
           /* @__PURE__ */ jsx6("div", { style: { fontFamily: bodyFont(ctx), fontWeight: 600, fontSize: 14, color: C("textPrimary", "#111") }, children: txt(props.title, ctx) }),
-          props.message && /* @__PURE__ */ jsx6("div", { style: { fontSize: 13, lineHeight: 1.4, color: C("textSecondary", "#666"), marginTop: 2 }, children: txt(props.message, ctx) }),
+          props.message && /* @__PURE__ */ jsx6("div", { style: { fontFamily: bodyFont(ctx), fontSize: 13, lineHeight: 1.4, color: C("textSecondary", "#666"), marginTop: 2 }, children: txt(props.message, ctx) }),
           actionTextButton(ctx, props.action, asBoundText(props.actionLabel, ctx) || "Take action", C("textPrimary", "#111"), { marginTop: 7, textDecoration: "underline" })
         ] })
       ] });
@@ -24783,7 +24830,7 @@ function renderInner(node, ctx) {
     case "AlertDialog":
       return /* @__PURE__ */ jsxs3("div", { role: "alertdialog", "aria-modal": "true", "aria-label": props.title != null ? asBoundText(props.title, ctx) : "Alert", style: { background: C("surfacePrimary", "#fff"), borderRadius: ctx.radius("lg", 14), padding: 18, width: "100%", boxSizing: "border-box", border: `1px solid ${C("border", "#e3e3e3")}`, boxShadow: "0 12px 30px -12px rgba(0,0,0,.4)", ...wrap }, children: [
         /* @__PURE__ */ jsx6("div", { style: { fontFamily: bodyFont(ctx), fontWeight: 700, fontSize: 17, color: C("textPrimary", "#111") }, children: txt(props.title, ctx) }),
-        /* @__PURE__ */ jsx6("div", { style: { fontSize: 14, lineHeight: 1.45, color: C("textSecondary", "#666"), margin: "6px 0 16px" }, children: txt(props.message, ctx) }),
+        /* @__PURE__ */ jsx6("div", { style: { fontFamily: bodyFont(ctx), fontSize: 14, lineHeight: 1.45, color: C("textSecondary", "#666"), margin: "6px 0 16px" }, children: txt(props.message, ctx) }),
         /* @__PURE__ */ jsxs3("div", { style: { display: "flex", gap: 10 }, children: [
           props.cancelAction != null && /* @__PURE__ */ jsx6("button", { type: "button", onClick: actionClick(ctx, props.cancelAction), style: { flex: 1, textAlign: "center", padding: 11, borderRadius: ctx.radius("md", 8), appearance: "none", WebkitAppearance: "none", border: "none", fontFamily: bodyFont(ctx), fontWeight: 600, fontSize: 15, background: C("surfaceTertiary", "#eee"), color: C("textPrimary", "#111"), cursor: ctx.onAction ? "pointer" : "default" }, children: asBoundText(props.cancelLabel, ctx) || "Cancel" }),
           props.confirmAction != null && /* @__PURE__ */ jsx6("button", { type: "button", onClick: actionClick(ctx, props.confirmAction), style: { flex: 1, textAlign: "center", padding: 11, borderRadius: ctx.radius("md", 8), appearance: "none", WebkitAppearance: "none", border: "none", fontFamily: bodyFont(ctx), fontWeight: 600, fontSize: 15, background: props.destructive ? C("danger", "#E62214") : C("accentPrimary", "#116DFF"), color: "#fff", cursor: ctx.onAction ? "pointer" : "default" }, children: asBoundText(props.confirmLabel, ctx) || (props.destructive ? "Delete" : "Confirm") })
@@ -24804,7 +24851,7 @@ function renderInner(node, ctx) {
     }
   }
 }
-var useIsomorphicLayoutEffect, ResponsiveGrid, SPLIT_EXPANDED_MIN_WIDTH, SPLIT_COLUMN_GAP, ResponsiveSplitView, ABSOLUTE_URL_RE, appearKeyframesInjected, pressStylesInjected, FOCUS_RING_CSS, focusStylesInjected, hListStylesInjected, listAnimateRuntimeInstalled, transitionKeyframesInjected, countUpRuntimeInjected, MEASURE_PREFIX, measureRuntimeInjected, revealRuntimeInjected, vectorAnimStylesInjected, scrollProgressRuntimeInjected, confettiRuntimeInjected, lottieRuntimeInjected, riveRuntimeInjected, gradientKeyframesInjected, parallaxRuntimeInjected, spinKeyframesInjected, marqueeKeyframesInjected, alignItems, zJustifyItems, hAlignItems, bodyFont, kids, rowKids, staggeredKids, asTextL10n, asBoundText, useBoundString, InterpolatedTextView, txt, selectFragmentCase, fragmentValueHash, fragmentSlotContent, FragmentSlotNode, WorkerSubtreeNode, resolveItemDeep2, resolveSwipeActions, resolveModBindings, resolvedComponentId, directServiceBindings, ReactiveDirectScalars, HiddenGate, KEYBOARD_INPUT_MODES, AUTOCAPITALIZE_VALUES, ENTER_KEY_HINTS, AUTOGROW_CEILING, EditableField, MenuNode, LoadMoreSentinel, FieldErrorNode, FormView, MediaSlotProvider, MEDIA_ITEM_BINDABLE, MediaPlayerView, VideoNode, PdfViewNode, WebViewNode, InteractivePicker, InteractiveDatePicker, InteractiveSearchField, InteractiveStepper, INTERACTIVE_ROLES, ALWAYS_INTERACTIVE_COMPONENT_TYPES, controlNode, ToggleNode, SliderNode, SelectionControlNode, TabsNode, SegmentedControlNode, DisclosureGroupNode, GridNode, SplitViewNode, TextNode, ImageNode, AvatarNode, IconNode, ButtonNode, OtpInputNode, ProgressBarNode, ActivityIndicatorNode, BottomSheetNode, ChipsInputNode, ChipNode, TableNode, GaugeRing, GaugeNode, RatingNode, AvatarStripNode, CHART_STROKE_CYCLE, chartStrokeAt, chartBarCenter, ChartNode, donutSliceOpacity, DonutChartNode, LegendMarker, LegendNode, cellAlign, DataTableNode, voiceNoteState, voiceNoteDelivery, VOICE_NOTE_DEFAULT_BARS, clampBarCount, VoiceNoteNode, TimelineNode, WheelPickerNode, ColorPickerNode, FilterChipsNode, TILE_PX, MAX_MERCATOR_LAT, DEFAULT_TILE_MAX_ZOOM, CIRCLE_SEGMENTS, METRES_PER_DEG_LAT, MARKER_HIT_RADIUS, SHAPE_HIT_RADIUS, MapNode, CollapsingHeaderNode, UnsupportedOnSurface, CALENDAR_DATE_ONLY_RE, CAL_DEFAULT_MAX_DOTS, CAL_AGENDA_INITIAL_DAYS, CAL_AGENDA_PAGE_DAYS, CAL_DEFAULT_SNAP_MINUTES, CAL_UNASSIGNED_LANE_ID, MonthCalendarNode, TimeGridNode, AgendaNode, WebRenderer;
+var useIsomorphicLayoutEffect, ResponsiveGrid, SPLIT_EXPANDED_MIN_WIDTH, SPLIT_COLUMN_GAP, ResponsiveSplitView, ABSOLUTE_URL_RE, appearKeyframesInjected, pressStylesInjected, FOCUS_RING_CSS, focusStylesInjected, HLIST_CHILD_CSS, hListStylesInjected, listAnimateRuntimeInstalled, transitionKeyframesInjected, countUpRuntimeInjected, MEASURE_PREFIX, measureRuntimeInjected, revealRuntimeInjected, vectorAnimStylesInjected, scrollProgressRuntimeInjected, confettiRuntimeInjected, lottieRuntimeInjected, riveRuntimeInjected, gradientKeyframesInjected, parallaxRuntimeInjected, spinKeyframesInjected, marqueeKeyframesInjected, alignItems, zJustifyItems, hAlignItems, bodyFont, kids, rowKids, staggeredKids, asTextL10n, asBoundText, useBoundString, InterpolatedTextView, txt, selectFragmentCase, fragmentValueHash, fragmentSlotContent, FragmentSlotNode, WorkerSubtreeNode, resolveItemDeep2, resolveSwipeActions, resolveModBindings, resolvedComponentId, directServiceBindings, ReactiveDirectScalars, HiddenGate, KEYBOARD_INPUT_MODES, AUTOCAPITALIZE_VALUES, ENTER_KEY_HINTS, AUTOGROW_CEILING, EditableField, MenuNode, LoadMoreSentinel, FieldErrorNode, FormView, MediaSlotProvider, MEDIA_ITEM_BINDABLE, MediaPlayerView, VideoNode, PdfViewNode, WebViewNode, InteractivePicker, InteractiveDatePicker, InteractiveSearchField, InteractiveStepper, INTERACTIVE_ROLES, ALWAYS_INTERACTIVE_COMPONENT_TYPES, controlNode, ToggleNode, SliderNode, SelectionControlNode, TabsNode, SegmentedControlNode, DisclosureGroupNode, GridNode, SplitViewNode, TextNode, ImageNode, AvatarNode, IconNode, ButtonNode, OtpInputNode, ProgressBarNode, ActivityIndicatorNode, BottomSheetNode, ChipsInputNode, ChipNode, TableNode, GaugeRing, GaugeNode, RatingNode, AvatarStripNode, CHART_STROKE_CYCLE, chartStrokeAt, chartBarCenter, ChartNode, donutSliceOpacity, DonutChartNode, LegendMarker, LegendNode, cellAlign, DataTableNode, voiceNoteState, voiceNoteDelivery, VOICE_NOTE_DEFAULT_BARS, clampBarCount, VoiceNoteNode, TimelineNode, WheelPickerNode, ColorPickerNode, FilterChipsNode, TILE_PX, MAX_MERCATOR_LAT, DEFAULT_TILE_MAX_ZOOM, CIRCLE_SEGMENTS, METRES_PER_DEG_LAT, MARKER_HIT_RADIUS, SHAPE_HIT_RADIUS, MapNode, CollapsingHeaderNode, UnsupportedOnSurface, CALENDAR_DATE_ONLY_RE, CAL_DEFAULT_MAX_DOTS, CAL_AGENDA_INITIAL_DAYS, CAL_AGENDA_PAGE_DAYS, CAL_DEFAULT_SNAP_MINUTES, CAL_UNASSIGNED_LANE_ID, MonthCalendarNode, TimeGridNode, AgendaNode, WebRenderer;
 var init_renderNode = __esm({
   "../../core/web-renderer/src/renderNode.tsx"() {
     "use strict";
@@ -24890,6 +24937,7 @@ var init_renderNode = __esm({
     pressStylesInjected = false;
     FOCUS_RING_CSS = ':where(button,a,[href],input,select,textarea,[role="button"],[tabindex]):focus-visible{outline:2px solid var(--himi-accent,#116DFF);outline-offset:2px;border-radius:4px}';
     focusStylesInjected = false;
+    HLIST_CHILD_CSS = "[data-himalaya-hlist]>*{flex:0 0 auto}";
     hListStylesInjected = false;
     listAnimateRuntimeInstalled = false;
     transitionKeyframesInjected = false;
@@ -28279,13 +28327,16 @@ var init_src3 = __esm({
 // ../../core/dev-server/src/render-descriptor.ts
 var render_descriptor_exports = {};
 __export(render_descriptor_exports, {
+  HOST_PAGE_FONT: () => HOST_PAGE_FONT,
   buildRenderTree: () => buildRenderTree,
   clientEnvFor: () => clientEnvFor,
   collectNativeOnly: () => collectNativeOnly,
   isMissingPlaywrightExecutable: () => isMissingPlaywrightExecutable,
   pngAvailable: () => pngAvailable,
+  pngPageHtml: () => pngPageHtml,
   renderDescriptorWeb: () => renderDescriptorWeb,
   renderPngBatch: () => renderPngBatch,
+  setPngFontCss: () => setPngFontCss,
   stabilizePngPage: () => stabilizePngPage,
   withRetry: () => withRetry2
 });
@@ -28518,7 +28569,7 @@ async function renderDescriptorWeb(descriptor, tokens, scheme, wantPng, services
   const nativeOnly = collectNativeOnly(renderTree);
   if (nativeOnly.length) result.nativeOnly = nativeOnly;
   if (wantPng) {
-    const png = await renderPng(html, scheme, width, isRTL);
+    const png = await renderPng(html, scheme, width, isRTL, tokens);
     if (png) result.pngBase64 = png;
     else result.pngUnavailable = true;
   }
@@ -28535,10 +28586,24 @@ async function withRetry2(op, attempts = 2) {
   }
   throw lastErr;
 }
-async function renderPng(html, scheme, width, isRTL) {
-  const out = await renderPngBatch([{ html, scheme, width, isRTL }]);
+async function renderPng(html, scheme, width, isRTL, tokens) {
+  const out = await renderPngBatch([{ html, scheme, width, isRTL, tokens }]);
   return out?.[0] ?? null;
 }
+function setPngFontCss(source) {
+  const previous = pngFontCss;
+  pngFontCss = source;
+  return previous;
+}
+async function pngPageHtml(item) {
+  let faces = "";
+  try {
+    faces = await pngFontCss?.(item.tokens ?? null) ?? "";
+  } catch {
+    faces = "";
+  }
+  return `<!doctype html><html${item.isRTL ? ' dir="rtl"' : ""}><head><meta charset="utf-8"><style>${faces}body{font-family:${HOST_PAGE_FONT}}</style></head><body style="margin:0">${item.html}</body></html>`;
+}
 function isMissingPlaywrightExecutable(error) {
   const message = error?.message ?? "";
   return /Executable doesn't exist at/.test(message) && /playwright install/.test(message);
@@ -28598,10 +28663,7 @@ async function renderPngBatch(items) {
       try {
         const page = await browser.newPage({ colorScheme: it.scheme, ...it.width && it.width > 0 ? { viewport: { width: Math.round(it.width), height: 900 } } : {} });
         try {
-          await page.setContent(
-            `<!doctype html><html${it.isRTL ? ' dir="rtl"' : ""}><head><meta charset="utf-8"></head><body style="margin:0">${it.html}</body></html>`,
-            { waitUntil: "load" }
-          );
+          await page.setContent(await pngPageHtml(it), { waitUntil: "load" });
           await stabilizePngPage(page, it.scheme);
           const buf = await page.screenshot({ fullPage: true });
           out.push(Buffer.from(buf).toString("base64"));
@@ -28619,7 +28681,7 @@ async function renderPngBatch(items) {
     });
   }
 }
-var TREE_TEXT_VALUE_PROPS, asStringOrNumber, asStringOnly, asOtpCode, VALUE_PATH_TEXT, MEDIA_PLAYER_QUEUE_PROPERTIES, NATIVE_ONLY_TYPES;
+var TREE_TEXT_VALUE_PROPS, asStringOrNumber, asStringOnly, asOtpCode, VALUE_PATH_TEXT, MEDIA_PLAYER_QUEUE_PROPERTIES, NATIVE_ONLY_TYPES, HOST_PAGE_FONT, pngFontCss;
 var init_render_descriptor = __esm({
   "../../core/dev-server/src/render-descriptor.ts"() {
     init_FakeServiceProvider();
@@ -28642,6 +28704,111 @@ var init_render_descriptor = __esm({
     ]);
     MEDIA_PLAYER_QUEUE_PROPERTIES = /* @__PURE__ */ new Set(["items", "itemsPath", "items_path"]);
     NATIVE_ONLY_TYPES = /* @__PURE__ */ new Set(["Map", "Video", "Lottie", "Rive", "WebView"]);
+    HOST_PAGE_FONT = '"Wix Madefor Text", system-ui, sans-serif';
+  }
+});
+
+// ../../core/dev-server/src/render-fonts.ts
+import { existsSync as existsSync34, readFileSync as readFileSync34 } from "node:fs";
+import { extname, join as join31 } from "node:path";
+function servedFontFaces(appDir2, tokens) {
+  try {
+    const policyPath = join31(appDir2, "fonts.json");
+    const policy = existsSync34(policyPath) ? JSON.parse(readFileSync34(policyPath, "utf8")) : {};
+    let plan = planFonts(tokens, policy);
+    if (!hasVendoredFloor()) plan = { ...plan, families: plan.families.filter((f) => !isHostProvided(f.name)) };
+    if (plan.families.length === 0) return void 0;
+    return servedProjection(plan);
+  } catch {
+    return void 0;
+  }
+}
+function withServedFontFaces(tokens, appDir2) {
+  const fontFaces = servedFontFaces(appDir2, tokens);
+  return fontFaces ? { ...tokens, fontFaces } : tokens;
+}
+function declaredFamilies(tokens) {
+  const decl = tokens?.fontFaces;
+  return decl && typeof decl === "object" && !Array.isArray(decl) ? Object.keys(decl) : [];
+}
+async function faceBytes(face, catalog, opts) {
+  try {
+    if (opts.source) {
+      const path = opts.source(face.file, face.sha256);
+      return path ? readFileSync34(path) : null;
+    }
+    const bytes2 = await catalogFaceBytes(face.sha256, { catalog, ...opts.fetchFace ? { fetchFace: opts.fetchFace } : {} });
+    return bytes2 ?? null;
+  } catch {
+    return null;
+  }
+}
+async function pngFontFaceCss(tokens, opts = {}) {
+  const cache = opts.source || opts.fetchFace ? void 0 : encoded;
+  let catalog;
+  try {
+    catalog = opts.catalog ?? loadCatalog();
+  } catch {
+    return "";
+  }
+  const wanted = [];
+  const seen = /* @__PURE__ */ new Set();
+  const want = (family, face, variable) => {
+    const key2 = `${family}\0${face.sha256}`;
+    if (seen.has(key2)) return;
+    seen.add(key2);
+    wanted.push({ family, face, variable });
+  };
+  for (const [name, family] of Object.entries(catalog.bundled)) {
+    for (const face of family.faces) want(name, face, family.variable);
+  }
+  let planned = [];
+  try {
+    planned = planFonts(tokens ?? {}, { families: declaredFamilies(tokens) }, catalog).families;
+  } catch {
+    planned = [];
+  }
+  for (const family of planned) {
+    if (family.builtin) continue;
+    for (const face of family.faces) want(family.name, face, family.variable);
+  }
+  const data = await Promise.all(
+    wanted.map(async ({ face }) => {
+      const hit = cache?.get(face.sha256);
+      if (hit !== void 0) return hit;
+      const bytes2 = await faceBytes(face, catalog, opts);
+      if (!bytes2) return null;
+      const b64 = bytes2.toString("base64");
+      cache?.set(face.sha256, b64);
+      return b64;
+    })
+  );
+  const rules = [];
+  wanted.forEach(({ family, face, variable }, i) => {
+    const b64 = data[i];
+    if (b64 == null) return;
+    const [mime, format] = FORMATS[extname(face.file).toLowerCase()] ?? ["font/ttf", "truetype"];
+    const wght = variable?.axes?.["wght"];
+    const weight = wght ? `${wght.min} ${wght.max}` : String(face.weight);
+    rules.push(
+      `@font-face{font-family:${cssString(family)};font-weight:${weight};font-style:${face.style ?? "normal"};font-display:block;src:url(data:${mime};base64,${b64}) format("${format}")}`
+    );
+  });
+  return rules.join("");
+}
+var encoded, cssString, FORMATS;
+var init_render_fonts = __esm({
+  "../../core/dev-server/src/render-fonts.ts"() {
+    init_catalog();
+    init_plan_fonts();
+    init_face_source();
+    encoded = /* @__PURE__ */ new Map();
+    cssString = (s) => `"${s.replace(/\\/g, "\\\\").replace(/"/g, '\\"').replace(/</g, "\\3c ").replace(/\n/g, "\\a ")}"`;
+    FORMATS = {
+      ".woff2": ["font/woff2", "woff2"],
+      ".woff": ["font/woff", "woff"],
+      ".otf": ["font/otf", "opentype"]
+    };
   }
 });
 
@@ -29518,7 +29685,7 @@ var init_src5 = __esm({
 });
 
 // ../../core/dev-server/src/flags/index.ts
-import { readFileSync as readFileSync34 } from "node:fs";
+import { readFileSync as readFileSync35 } from "node:fs";
 import { resolve as resolve26 } from "node:path";
 function selectProvider(config, store) {
   const local = new LocalFlagProvider(store, () => config?.overrides);
@@ -29614,7 +29781,7 @@ var init_flags2 = __esm({
         if (now - this.lastFetch < this.ttlMs) return;
         this.lastFetch = now;
         try {
-          const defs = JSON.parse(readFileSync34(resolve26(appDir2, "flags.json"), "utf8"));
+          const defs = JSON.parse(readFileSync35(resolve26(appDir2, "flags.json"), "utf8"));
           if (Array.isArray(defs) && defs.length > 0) store.replaceAll(defs);
         } catch {
         }
@@ -29664,19 +29831,19 @@ var init_motion_flags = __esm({
 });
 
 // ../../core/dev-server/src/kits.ts
-import { readdirSync as readdirSync17, readFileSync as readFileSync35 } from "node:fs";
-import { resolve as resolve27, join as join31 } from "node:path";
+import { readdirSync as readdirSync17, readFileSync as readFileSync36 } from "node:fs";
+import { resolve as resolve27, join as join32 } from "node:path";
 import { fileURLToPath as fileURLToPath16 } from "node:url";
 function listKits() {
   return readdirSync17(CATALOG).filter((f) => f.endsWith(".json")).map((f) => {
-    const { tokens, ...meta } = JSON.parse(readFileSync35(join31(CATALOG, f), "utf8"));
+    const { tokens, ...meta } = JSON.parse(readFileSync36(join32(CATALOG, f), "utf8"));
     return meta;
   });
 }
 function readKit(id) {
   if (!/^[a-z0-9-]+$/.test(id)) return null;
   try {
-    return JSON.parse(readFileSync35(join31(CATALOG, `${id}.json`), "utf8"));
+    return JSON.parse(readFileSync36(join32(CATALOG, `${id}.json`), "utf8"));
   } catch {
     return null;
   }
@@ -29685,7 +29852,7 @@ var ROOT5, CATALOG;
 var init_kits = __esm({
   "../../core/dev-server/src/kits.ts"() {
     ROOT5 = resolve27(fileURLToPath16(new URL("../../..", import.meta.url)));
-    CATALOG = join31(ROOT5, "stdlib/design-kits");
+    CATALOG = join32(ROOT5, "stdlib/design-kits");
   }
 });
 
@@ -30414,8 +30581,10 @@ __export(validate_descriptor_exports, {
   nativeRequiredFindings: () => nativeRequiredFindings,
   navLogicBundleUrl: () => navLogicBundleUrl,
   nodeVmEvaluator: () => nodeVmEvaluator,
+  nondeterministicServices: () => nondeterministicServices,
   pathCrossesOpaqueAuthorJson: () => pathCrossesOpaqueAuthorJson,
   pathValue: () => pathValue,
+  pinnedIntrinsicsSource: () => pinnedIntrinsicsSource,
   readBuiltBundle: () => readBuiltBundle,
   readBuiltBundleMap: () => readBuiltBundleMap,
   resolveActionEvaluator: () => resolveActionEvaluator,
@@ -30428,12 +30597,12 @@ __export(validate_descriptor_exports, {
   validateScreenDescriptor: () => validateScreenDescriptor,
   workerSubtreeAllowed: () => workerSubtreeAllowed
 });
-import { readFileSync as readFileSync36, existsSync as existsSync34, readdirSync as readdirSync18 } from "node:fs";
+import { readFileSync as readFileSync37, existsSync as existsSync35, readdirSync as readdirSync18 } from "node:fs";
 import { resolve as resolve28 } from "node:path";
-import { runInNewContext } from "node:vm";
+import { createContext, runInContext } from "node:vm";
 async function loadAllowedComponents(appDir2) {
   const modPath = resolve28(appDir2, "components.ts");
-  if (!existsSync34(modPath)) return void 0;
+  if (!existsSync35(modPath)) return void 0;
   try {
     const { pathToFileURL: pathToFileURL8 } = await import("node:url");
     const mod = await import(pathToFileURL8(modPath).href);
@@ -30446,7 +30615,7 @@ async function loadAllowedComponents(appDir2) {
 }
 function readBuiltBundle(tier5Root, bundleName) {
   const p = resolve28(tier5Root, `${bundleName}.bundle.js`);
-  return existsSync34(p) ? readFileSync36(p, "utf8") : void 0;
+  return existsSync35(p) ? readFileSync37(p, "utf8") : void 0;
 }
 function bundleNameFromUrl(url) {
   if (typeof url !== "string") return null;
@@ -30474,10 +30643,10 @@ function appWorkerActionsFor(config, tier5Root) {
 }
 function readBuiltBundleMap(tier5Root, bundleName) {
   const p = resolve28(tier5Root, `${bundleName}.bundle.js.map`);
-  return existsSync34(p) ? readFileSync36(p, "utf8") : void 0;
+  return existsSync35(p) ? readFileSync37(p, "utf8") : void 0;
 }
 function nativeSourceFiles(directory, extension, buildDirMaxDepth, depth = 1) {
-  if (!existsSync34(directory)) return [];
+  if (!existsSync35(directory)) return [];
   let entries;
   try {
     entries = readdirSync18(directory, { withFileTypes: true });
@@ -30497,12 +30666,12 @@ function registeredActions(source) {
   return [...source.matchAll(/ActionDispatcher(?:\.shared)?\s*\.\s*register\s*\(\s*"([A-Za-z0-9_.]+)"/g)].map((match) => match[1]);
 }
 function discoverNativeActions(appDir2) {
-  const roots = NATIVE_SOURCE_ROOTS.filter(({ directory }) => existsSync34(resolve28(appDir2, directory)));
+  const roots = NATIVE_SOURCE_ROOTS.filter(({ directory }) => existsSync35(resolve28(appDir2, directory)));
   const sources = roots.flatMap(({ directory, extension, buildDirMaxDepth }) => nativeSourceFiles(resolve28(appDir2, directory), extension, buildDirMaxDepth));
   const registered = sources.flatMap((source) => {
     let text4;
     try {
-      text4 = readFileSync36(source, "utf8");
+      text4 = readFileSync37(source, "utf8");
     } catch (err) {
       if (!vanished(err)) throw err;
       return [];
@@ -30521,7 +30690,14 @@ var init_validate_descriptor = __esm({
     init_validate_descriptor_core();
     nodeVmEvaluator = {
       run(code, sandbox, opts) {
-        runInNewContext(code, sandbox, { timeout: opts.timeoutMs, filename: opts.filename });
+        const context = createContext(sandbox);
+        const pins = pinnedIntrinsicsSource(opts);
+        if (pins) {
+          const pinned = runInContext(`(${pins})(Date, Math)`, context, { timeout: opts.timeoutMs, filename: "himi-pins.js" });
+          if (pinned.Date) sandbox.Date = pinned.Date;
+          if (pinned.Math) sandbox.Math = pinned.Math;
+        }
+        runInContext(code, context, { timeout: opts.timeoutMs, filename: opts.filename });
       }
     };
     setDefaultEvaluator(nodeVmEvaluator);
@@ -30619,8 +30795,8 @@ __export(config_exports2, {
   serializeRolloutYaml: () => serializeRolloutYaml,
   validateOverlayPatch: () => validateOverlayPatch
 });
-import { mkdirSync as mkdirSync15, readFileSync as readFileSync37, writeFileSync as writeFileSync12 } from "node:fs";
-import { dirname as dirname20, join as join32, resolve as resolve29 } from "node:path";
+import { mkdirSync as mkdirSync15, readFileSync as readFileSync38, writeFileSync as writeFileSync12 } from "node:fs";
+import { dirname as dirname20, join as join33, resolve as resolve29 } from "node:path";
 import { fileURLToPath as fileURLToPath17 } from "node:url";
 function strip(line) {
   const h = line.indexOf("#");
@@ -30685,14 +30861,14 @@ function parseRevocationsYaml(text4) {
 function appConfigPath(app, file, root = REPO_ROOT6) {
   assertAppId(app, "appConfigPath");
   for (const base of ["apps", "test-apps"]) {
-    const p = join32(root, base, app, file);
+    const p = join33(root, base, app, file);
     try {
-      readFileSync37(p);
+      readFileSync38(p);
       return p;
     } catch {
     }
   }
-  return join32(root, "apps", app, file);
+  return join33(root, "apps", app, file);
 }
 function serializeRolloutYaml(cfg) {
   const lines = [`app: ${cfg.app}`, "rings:"];
@@ -30740,7 +30916,7 @@ function validateOverlayPatch(patch) {
 }
 function readJsonAt(app, file, root) {
   try {
-    return JSON.parse(readFileSync37(appConfigPath(app, file, root), "utf8"));
+    return JSON.parse(readFileSync38(appConfigPath(app, file, root), "utf8"));
   } catch {
     return null;
   }
@@ -30778,14 +30954,14 @@ function saveLocalFlags(app, defs, root = REPO_ROOT6) {
 }
 function loadRollout(app) {
   try {
-    return parseRolloutYaml(readFileSync37(appConfigPath(app, "rollout.yaml"), "utf8"));
+    return parseRolloutYaml(readFileSync38(appConfigPath(app, "rollout.yaml"), "utf8"));
   } catch {
     return null;
   }
 }
 function loadRevocations(app) {
   try {
-    return parseRevocationsYaml(readFileSync37(appConfigPath(app, "revocations.yaml"), "utf8")).revoked;
+    return parseRevocationsYaml(readFileSync38(appConfigPath(app, "revocations.yaml"), "utf8")).revoked;
   } catch {
     return [];
   }
@@ -30863,8 +31039,8 @@ var init_config2 = __esm({
 // ../../core/dev-server/src/index.ts
 import { createServer as createServer2 } from "node:http";
 import { readFile, stat } from "node:fs/promises";
-import { readFileSync as readFileSync38, existsSync as existsSync35, watch, mkdirSync as mkdirSync16, rmSync as rmSync5 } from "node:fs";
-import { extname, resolve as resolve30, normalize as normalize3, sep as sep7, join as join33 } from "node:path";
+import { readFileSync as readFileSync39, existsSync as existsSync36, watch, mkdirSync as mkdirSync16, rmSync as rmSync5 } from "node:fs";
+import { extname as extname2, resolve as resolve30, normalize as normalize3, sep as sep7 } from "node:path";
 import { createHash as createHash15, randomUUID } from "node:crypto";
 import { fileURLToPath as fileURLToPath18, pathToFileURL as pathToFileURL6 } from "node:url";
 function deepMerge3(base, patch) {
@@ -30914,7 +31090,7 @@ function readAppTokens(state) {
   if (!state.app) return null;
   try {
     const tokenPath = state.app.module.designTokensPath ?? resolve30(state.app.dir, state.app.module.config.designTokensPath ?? "tokens.json");
-    const parsed = JSON.parse(readFileSync38(tokenPath, "utf8"));
+    const parsed = JSON.parse(readFileSync39(tokenPath, "utf8"));
     delete parsed._meta;
     return parsed;
   } catch {
@@ -30926,7 +31102,7 @@ function effectiveAppConfigOverride(state) {
   if (state.app) {
     try {
       gitOverlay = JSON.parse(
-        readFileSync38(resolve30(state.app.dir, "app-config.overlay.json"), "utf8")
+        readFileSync39(resolve30(state.app.dir, "app-config.overlay.json"), "utf8")
       );
     } catch {
     }
@@ -30986,7 +31162,7 @@ function handleL10nRequest(req, res, state) {
     return sendJson(res, 404, { error: "unknown_app", app }, cors);
   }
   const path = resolve30(state.app.dir, "l10n", `${tag}.json`);
-  if (!existsSync35(path)) {
+  if (!existsSync36(path)) {
     res.writeHead(204, cors);
     res.end();
     return;
@@ -30995,7 +31171,7 @@ function handleL10nRequest(req, res, state) {
   let messages;
   try {
     messages = Object.fromEntries(
-      keyMap(parseCatalog(readFileSync38(path, "utf8")), { sourceFallback: tag === sourceLocale })
+      keyMap(parseCatalog(readFileSync39(path, "utf8")), { sourceFallback: tag === sourceLocale })
     );
   } catch {
     return sendJson(res, 500, { error: "catalog_unreadable", app, tag }, cors);
@@ -31040,18 +31216,6 @@ async function runScreenDiagnostics(state, screenId, descriptor) {
     evidence: { runId: `dev:${state.startedAt}:${screenId}`, ts: (/* @__PURE__ */ new Date()).toISOString() }
   });
 }
-function servedFontFaces(appDir2, tokens) {
-  try {
-    const policyPath = join33(appDir2, "fonts.json");
-    const policy = existsSync35(policyPath) ? JSON.parse(readFileSync38(policyPath, "utf8")) : {};
-    let plan = planFonts(tokens, policy);
-    if (!hasVendoredFloor()) plan = { ...plan, families: plan.families.filter((f) => !isHostProvided(f.name)) };
-    if (plan.families.length === 0) return void 0;
-    return servedProjection(plan);
-  } catch {
-    return void 0;
-  }
-}
 async function fontFaceBytesBySha(_appDir, sha) {
   try {
     return await catalogFaceBytes(sha);
@@ -31399,7 +31563,7 @@ async function buildDescriptorForScreenId(state, screenId, query = new URLSearch
 function bundleIntegritySync(name, dir) {
   for (const root of dir ? [dir, TIER5_ROOT2] : [TIER5_ROOT2]) {
     try {
-      const bytes2 = readFileSync38(resolve30(root, `${name}.bundle.js`));
+      const bytes2 = readFileSync39(resolve30(root, `${name}.bundle.js`));
       return "sha256-" + createHash15("sha256").update(bytes2).digest("base64");
     } catch {
     }
@@ -32174,9 +32338,10 @@ async function handleDev(req, res, state) {
     }
     const screenId = descriptor.screenId ?? body.screenId ?? "render";
     const diagnostics = await runScreenDiagnostics(state, screenId, descriptor);
+    const appTokens = readAppTokens(state);
     const render = await renderDescriptorWeb(
       descriptor,
-      readAppTokens(state),
+      appTokens && state.app ? withServedFontFaces(appTokens, state.app.dir) : appTokens,
       scheme,
       body.png === true,
       body.services ?? null,
@@ -32980,8 +33145,8 @@ function readActionHandlerManifest(app) {
   let decls;
   let bytes2;
   try {
-    decls = JSON.parse(readFileSync38(manifestPath, "utf8"));
-    bytes2 = readFileSync38(bundlePath);
+    decls = JSON.parse(readFileSync39(manifestPath, "utf8"));
+    bytes2 = readFileSync39(bundlePath);
   } catch {
     return { handlers: [] };
   }
@@ -33021,7 +33186,7 @@ async function serveStatic(req, res, root, prefix) {
     const s = await stat(fullPath);
     if (s.isDirectory()) return send(res, 404, "directory");
     const data = await readFile(fullPath);
-    const ext = extname(fullPath).toLowerCase();
+    const ext = extname2(fullPath).toLowerCase();
     res.setHeader("content-type", MIME[ext] ?? "application/octet-stream");
     res.setHeader("cache-control", "max-age=60");
     if (req.url?.startsWith("/tier4/")) {
@@ -33284,7 +33449,7 @@ function createDevServer(opts = {}) {
           const q = new URLSearchParams(url.split("?")[1] ?? "");
           const assetApp = q.get("app") ?? state.appName;
           const assetDir = state.app && assetApp === state.app.name ? state.app.dir : resolveAppDir(assetApp);
-          const hit = assetDir ? collectAssets(assetDir).find((a) => assetSha256(readFileSync38(a.path)) === sha) : void 0;
+          const hit = assetDir ? collectAssets(assetDir).find((a) => assetSha256(readFileSync39(a.path)) === sha) : void 0;
           if (!hit && assetDir) {
             const fontBytes = await fontFaceBytesBySha(assetDir, sha);
             if (fontBytes) {
@@ -33307,7 +33472,7 @@ function createDevServer(opts = {}) {
             res.end(JSON.stringify({ error: "asset_not_found", app: assetApp, sha }));
             return;
           }
-          const bytes2 = readFileSync38(hit.path);
+          const bytes2 = readFileSync39(hit.path);
           res.writeHead(200, {
             "content-type": hit.contentType,
             "content-length": String(bytes2.length),
@@ -33394,7 +33559,7 @@ function createDevServer(opts = {}) {
         if (url === "/v1/schema/screen-descriptor.json" && req.method === "GET") {
           try {
             const schemaPath = resolve30(ROOT6, "core/schema/generated/screen-descriptor.schema.json");
-            const body = readFileSync38(schemaPath, "utf8");
+            const body = readFileSync39(schemaPath, "utf8");
             return send(res, 200, body, {
               "content-type": "application/schema+json; charset=utf-8",
               "cache-control": "no-store",
@@ -33428,7 +33593,7 @@ function createDevServer(opts = {}) {
             try {
               const { parseRevocationsYaml: parseRevocationsYaml2 } = await Promise.resolve().then(() => (init_config2(), config_exports2));
               revoked = parseRevocationsYaml2(
-                readFileSync38(resolve30(state.app.dir, "revocations.yaml"), "utf8")
+                readFileSync39(resolve30(state.app.dir, "revocations.yaml"), "utf8")
               ).revoked;
             } catch {
             }
@@ -33636,7 +33801,6 @@ var ROOT6, TIER3_ROOT, TIER4_ROOT, tier4Verifier, TIER5_ROOT2, ACTION_HANDLERS_R
 var init_src6 = __esm({
   "../../core/dev-server/src/index.ts"() {
     init_inject();
-    init_plan_fonts();
     init_face_source();
     init_himi_report();
     init_store2();
@@ -33662,6 +33826,7 @@ var init_src6 = __esm({
     init_check();
     init_openapi();
     init_render_descriptor();
+    init_render_fonts();
     init_app_config();
     init_tier();
     init_flags2();
@@ -33670,6 +33835,7 @@ var init_src6 = __esm({
     init_kits();
     init_widgets();
     ROOT6 = resolve30(fileURLToPath18(new URL("../../..", import.meta.url)));
+    setPngFontCss((tokens) => pngFontFaceCss(tokens));
     TIER3_ROOT = resolve30(ROOT6, "core/dev-server/web");
     TIER4_ROOT = resolve30(ROOT6, "core/dev-server/tier4-bundles");
     tier4Verifier = new TierFourVerifier(TIER4_ROOT);
@@ -36353,7 +36519,7 @@ __export(build_exports2, {
   withStoreNavBundle: () => withStoreNavBundle
 });
 import { createHash as createHash18 } from "node:crypto";
-import { readFileSync as readFileSync39, readdirSync as readdirSync19, existsSync as existsSync36 } from "node:fs";
+import { readFileSync as readFileSync40, readdirSync as readdirSync19, existsSync as existsSync37 } from "node:fs";
 import { dirname as dirname21, join as join34, resolve as resolve31 } from "node:path";
 import { fileURLToPath as fileURLToPath19 } from "node:url";
 import { createRequire as createRequire2 } from "node:module";
@@ -36393,9 +36559,9 @@ function l10nLintOptions(locale, appDir2) {
   const catalog = /* @__PURE__ */ new Set();
   for (const tag of tags) {
     const path = join34(appDir2, "l10n", `${tag}.json`);
-    if (!existsSync36(path)) continue;
+    if (!existsSync37(path)) continue;
     try {
-      const parsed = JSON.parse(readFileSync39(path, "utf8"));
+      const parsed = JSON.parse(readFileSync40(path, "utf8"));
       for (const m of Object.values(parsed.messages ?? {})) {
         if (typeof m?.source === "string" && typeof m.translation === "string" && m.translation.length > 0) {
           catalog.add(m.source);
@@ -36560,7 +36726,7 @@ function shellSha(root = REPO_ROOT7) {
 function isMonorepoCheckout(dir) {
   try {
     const top = execFileSync4("git", ["rev-parse", "--show-toplevel"], { cwd: dir, stdio: ["ignore", "pipe", "ignore"] }).toString().trim();
-    return top.length > 0 && existsSync36(join34(top, "core", "schema", "core.proto"));
+    return top.length > 0 && existsSync37(join34(top, "core", "schema", "core.proto"));
   } catch {
     return false;
   }
@@ -36697,7 +36863,7 @@ async function buildReleaseFromContent(contentDir2, dest, opts = {}) {
 function readTokensForLint(preloaded) {
   try {
     const tokenPath = preloaded.module.designTokensPath ?? resolve31(preloaded.dir, preloaded.module.config.designTokensPath ?? "tokens.json");
-    const parsed = JSON.parse(readFileSync39(tokenPath, "utf8"));
+    const parsed = JSON.parse(readFileSync40(tokenPath, "utf8"));
     delete parsed._meta;
     return parsed;
   } catch {
@@ -36721,6 +36887,7 @@ async function buildFromLoaded(preloaded, dest, opts = {}) {
   const baked = [];
   const linkable = /* @__PURE__ */ new Set();
   const lintTokens = collect2?.lint || collect2?.render ? readTokensForLint(preloaded) : void 0;
+  const renderTokens = lintTokens && withServedFontFaces(lintTokens, preloaded.dir);
   const allowedComponents = await loadAllowedComponents(preloaded.dir);
   const nativeActions = discoverNativeActions(preloaded.dir);
   const appWorkerActions = appWorkerActionsFor(preloaded.module.config, tier5Dir);
@@ -36728,7 +36895,7 @@ async function buildFromLoaded(preloaded, dest, opts = {}) {
   const compareScheme = collect2?.render?.compareScheme;
   const renderCompare = async (descriptor, services) => {
     if (!compareScheme || compareScheme === renderScheme) return {};
-    const rr = await renderDescriptorWeb(descriptor, lintTokens, compareScheme, false, services, collect2?.render?.width, collect2?.render?.rtl === true);
+    const rr = await renderDescriptorWeb(descriptor, renderTokens, compareScheme, false, services, collect2?.render?.width, collect2?.render?.rtl === true);
     return { compare: { scheme: compareScheme, renderable: rr.renderable, ...rr.html ? { html: rr.html } : {}, ...rr.reason ? { reason: rr.reason } : {} } };
   };
   const LIVE_LOAD_BUDGET_MS = 3e4;
@@ -36834,7 +37001,7 @@ async function buildFromLoaded(preloaded, dest, opts = {}) {
     if (addrCache.has(name)) return addrCache.get(name);
     let bytes2;
     try {
-      bytes2 = readFileSync39(join34(tier5Dir, `${name}.bundle.js`));
+      bytes2 = readFileSync40(join34(tier5Dir, `${name}.bundle.js`));
     } catch {
       return null;
     }
@@ -36856,8 +37023,8 @@ async function buildFromLoaded(preloaded, dest, opts = {}) {
   if (store.putDoc) {
     for (const [name, file] of [["spec", "SPEC.md"], ["mobile-ux", "MOBILE-UX.md"]]) {
       const path = join34(preloaded.dir, file);
-      if (!existsSync36(path)) continue;
-      const bytes2 = readFileSync39(path);
+      if (!existsSync37(path)) continue;
+      const bytes2 = readFileSync40(path);
       if (bytes2.length === 0 || bytes2.length > MAX_AUTHORING_DOC_BYTES) {
         throw new Error(`${file} must be non-empty and at most ${MAX_AUTHORING_DOC_BYTES} bytes to ship with a release.`);
       }
@@ -36872,7 +37039,7 @@ async function buildFromLoaded(preloaded, dest, opts = {}) {
     const iconPath = resolveAppDirIcon(preloaded.dir);
     if (iconPath) {
       try {
-        const bytes2 = readFileSync39(iconPath);
+        const bytes2 = readFileSync40(iconPath);
         await store.putIcon(app, bytes2);
         iconHash = sha2564(bytes2);
       } catch {
@@ -36894,7 +37061,7 @@ async function buildFromLoaded(preloaded, dest, opts = {}) {
     }
     const seenAssetSha = /* @__PURE__ */ new Set();
     for (const a of collected) {
-      const bytes2 = readFileSync39(a.path);
+      const bytes2 = readFileSync40(a.path);
       const hash = sha2564(bytes2);
       if (!seenAssetSha.has(hash)) {
         await store.putAsset(app, hash, bytes2, a.contentType);
@@ -36916,7 +37083,7 @@ async function buildFromLoaded(preloaded, dest, opts = {}) {
   const fontWarnings = [];
   try {
     const appTokens = readTokensForLint(preloaded) ?? {};
-    const policy = existsSync36(join34(preloaded.dir, "fonts.json")) ? JSON.parse(readFileSync39(join34(preloaded.dir, "fonts.json"), "utf8")) : {};
+    const policy = existsSync37(join34(preloaded.dir, "fonts.json")) ? JSON.parse(readFileSync40(join34(preloaded.dir, "fonts.json"), "utf8")) : {};
     fontPlan = planFonts(appTokens, policy);
   } catch (err) {
     throw new Error(
@@ -36932,7 +37099,7 @@ async function buildFromLoaded(preloaded, dest, opts = {}) {
             `[release-build] ${family.name} face ${face.postScriptName} has no local bytes (sha ${face.sha256.slice(0, 12)}\u2026), so the release would declare a face the asset route cannot serve. Run \`npm run fonts:catalog\` to warm the cache before publishing.`
           );
         }
-        const bytes2 = readFileSync39(src);
+        const bytes2 = readFileSync40(src);
         const hash = sha2564(bytes2);
         if (hash !== face.sha256) {
           throw new Error(
@@ -36982,7 +37149,7 @@ async function buildFromLoaded(preloaded, dest, opts = {}) {
   if (store.putAsset) {
     for (const face of collectBrandFonts(preloaded.dir)) {
       try {
-        const bytes2 = readFileSync39(face.path);
+        const bytes2 = readFileSync40(face.path);
         if (bytes2.length === 0) continue;
         const hash = sha2564(bytes2);
         await store.putAsset(app, hash, bytes2, "font/ttf");
@@ -37078,7 +37245,7 @@ async function buildFromLoaded(preloaded, dest, opts = {}) {
       }
       if (collect2?.render && (!collect2.render.screenId || collect2.render.screenId === screenId)) {
         const { services, liveCalls, liveReturned, liveErrors } = await renderServicesFor(bundleName, descriptor);
-        const rr = await renderDescriptorWeb(descriptor, lintTokens, renderScheme, collect2.render.png === true, services, collect2.render.width, collect2.render.rtl === true);
+        const rr = await renderDescriptorWeb(descriptor, renderTokens, renderScheme, collect2.render.png === true, services, collect2.render.width, collect2.render.rtl === true);
         renders.push({ screenId, scheme: renderScheme, ...rr, ...await renderCompare(descriptor, services), ...collect2.render.dumpState && services ? { serviceState: services } : {}, ...liveCalls ? { liveCalls } : {}, ...liveReturned !== void 0 ? { liveReturned } : {}, ...liveErrors ? { liveErrors } : {} });
       }
     }
@@ -37105,7 +37272,7 @@ async function buildFromLoaded(preloaded, dest, opts = {}) {
           lint.push({ screenId: wantedRender, ok: report2.ok, issues: report2.issues });
         }
         const { services, liveCalls, liveReturned, liveErrors } = await renderServicesFor(bundleName, descriptor);
-        const rr = await renderDescriptorWeb(descriptor, lintTokens, renderScheme, collect2.render.png === true, services, collect2.render.width, collect2.render.rtl === true);
+        const rr = await renderDescriptorWeb(descriptor, renderTokens, renderScheme, collect2.render.png === true, services, collect2.render.width, collect2.render.rtl === true);
         renders.push({ screenId: wantedRender, scheme: renderScheme, ...rr, ...await renderCompare(descriptor, services), ...collect2.render.dumpState && services ? { serviceState: services } : {}, ...liveCalls ? { liveCalls } : {}, ...liveReturned !== void 0 ? { liveReturned } : {}, ...liveErrors ? { liveErrors } : {} });
       }
     }
@@ -37365,7 +37532,12 @@ async function buildFromLoaded(preloaded, dest, opts = {}) {
       const js = readBuiltBundle(tier5Dir, name);
       if (!js) continue;
       const input = bundleInputs.get(name);
-      workers.push({ bundle: name, ...dryRunBundle(js, input ? { input } : {}) });
+      const drifting = bundles[name]?.servicesHash ? nondeterministicServices(js, input ? { input } : {}) : [];
+      workers.push({
+        bundle: name,
+        ...dryRunBundle(js, input ? { input } : {}),
+        ...drifting.length ? { nondeterministicServices: drifting } : {}
+      });
     }
   }
   return {
@@ -37387,7 +37559,7 @@ async function buildFromLoaded(preloaded, dest, opts = {}) {
     ...collect2?.lint ? { lint, workers } : {},
     ...collect2?.render ? { renders } : {},
     ...collect2?.descriptors ? { descriptors: baked, linkableScreenIds: [...linkable] } : {},
-    ...lintTokens !== void 0 ? { tokens: lintTokens } : {},
+    ...renderTokens !== void 0 ? { tokens: renderTokens } : {},
     ...preloaded.meta.surfaces ? { surfaceNav: preloaded.meta.surfaces } : {},
     auth: (() => {
       const a = preloaded.module.config.auth;
@@ -37407,9 +37579,9 @@ async function buildFunctionsOnlyRelease(preloaded, dest) {
   const sources = {};
   for (const definition of config.functions.functions) {
     const candidates = [".ts", ".js", ".mts", ".mjs"].map((extension) => join34(preloaded.dir, "functions", `${definition.name}${extension}`));
-    const source = candidates.find((candidate) => existsSync36(candidate));
+    const source = candidates.find((candidate) => existsSync37(candidate));
     if (!source) throw new Error(`missing source for function ${definition.name}; expected functions/${definition.name}.ts`);
-    sources[definition.name] = readFileSync39(source, "utf8");
+    sources[definition.name] = readFileSync40(source, "utf8");
   }
   const built = await buildFunctions(config.functions.functions, sources);
   const bundles = {};
@@ -37459,6 +37631,7 @@ var init_build3 = __esm({
     init_wix_member_login();
     init_wix_placeholders();
     init_render_descriptor();
+    init_render_fonts();
     init_screen_crawl();
     init_icons();
     init_build2();
@@ -38089,11 +38262,11 @@ __export(captcha_exports, {
   captchaContentInput: () => captchaContentInput,
   runCaptcha: () => runCaptcha
 });
-import { readFileSync as readFileSync40 } from "node:fs";
+import { readFileSync as readFileSync41 } from "node:fs";
 import { resolve as resolve32 } from "node:path";
 function readObject(path) {
   try {
-    return JSON.parse(readFileSync40(path, "utf8"));
+    return JSON.parse(readFileSync41(path, "utf8"));
   } catch {
     return {};
   }
@@ -38237,11 +38410,11 @@ var init_push_setup_apple_credentials = __esm({
 });
 
 // src/push-onboarding.ts
-import { existsSync as existsSync37, mkdirSync as mkdirSync17, readFileSync as readFileSync41, statSync as statSync7, writeFileSync as writeFileSync13, chmodSync as chmodSync2 } from "node:fs";
+import { existsSync as existsSync38, mkdirSync as mkdirSync17, readFileSync as readFileSync42, statSync as statSync7, writeFileSync as writeFileSync13, chmodSync as chmodSync2 } from "node:fs";
 import { basename as basename9, dirname as dirname22, join as join35, resolve as resolve33 } from "node:path";
 function readJson2(path) {
   try {
-    const parsed = JSON.parse(readFileSync41(path, "utf8"));
+    const parsed = JSON.parse(readFileSync42(path, "utf8"));
     return parsed && typeof parsed === "object" && !Array.isArray(parsed) ? parsed : {};
   } catch {
     return {};
@@ -38249,7 +38422,7 @@ function readJson2(path) {
 }
 function pushInputsFromContent(dir) {
   const root = resolve33(dir);
-  if (!existsSync37(join35(root, "himalaya.content.json"))) return { initialized: false };
+  if (!existsSync38(join35(root, "himalaya.content.json"))) return { initialized: false };
   const content = readJson2(join35(root, "himalaya.content.json"));
   const provisioning = readJson2(join35(root, "provisioning.json"));
   const native = provisioning.native ?? {};
@@ -38326,7 +38499,7 @@ function readKeyFile(path) {
   }
   let body;
   try {
-    body = readFileSync41(path, "utf8");
+    body = readFileSync42(path, "utf8");
   } catch {
     return { ok: false, code: "key_file_unreadable", reason: "cannot read the selected key file; check its path and file permissions" };
   }
@@ -38381,7 +38554,7 @@ function buildPushSetupBody(i, keys) {
 }
 function readPushOnboarding(dir) {
   const path = join35(resolve33(dir), PUSH_ONBOARDING_PATH);
-  if (!existsSync37(path)) return { version: 1 };
+  if (!existsSync38(path)) return { version: 1 };
   const parsed = readJson2(path);
   return { version: 1, ...parsed };
 }
@@ -38416,7 +38589,7 @@ function recordPushDeferral(dir, d) {
 }
 function clearPushDeferral(dir) {
   const path = join35(resolve33(dir), PUSH_ONBOARDING_PATH);
-  if (!existsSync37(path)) return;
+  if (!existsSync38(path)) return;
   const { push: _dropped, ...rest } = readPushOnboarding(dir);
   writeFile(dir, { ...rest, version: 1 });
 }
@@ -39376,7 +39549,7 @@ __export(pack_exports, {
 });
 import { createHash as createHash19 } from "node:crypto";
 import { deflateRawSync, inflateRawSync } from "node:zlib";
-import { existsSync as existsSync38, mkdirSync as mkdirSync18, readFileSync as readFileSync42, readdirSync as readdirSync20, rmSync as rmSync6, statSync as statSync8, writeFileSync as writeFileSync14 } from "node:fs";
+import { existsSync as existsSync39, mkdirSync as mkdirSync18, readFileSync as readFileSync43, readdirSync as readdirSync20, rmSync as rmSync6, statSync as statSync8, writeFileSync as writeFileSync14 } from "node:fs";
 import { dirname as dirname23, join as join36, resolve as resolve35 } from "node:path";
 function writeZip(entries) {
   const sorted = entries.slice().sort((a, b) => a.path < b.path ? -1 : a.path > b.path ? 1 : 0);
@@ -39471,10 +39644,10 @@ function inflateEntry(buf, entry) {
   return bytes2;
 }
 function readIf(path) {
-  return existsSync38(path) && statSync8(path).isFile() ? readFileSync42(path) : null;
+  return existsSync39(path) && statSync8(path).isFile() ? readFileSync43(path) : null;
 }
 function listDir(dir) {
-  return existsSync38(dir) ? readdirSync20(dir).filter((f) => statSync8(join36(dir, f)).isFile()) : [];
+  return existsSync39(dir) ? readdirSync20(dir).filter((f) => statSync8(join36(dir, f)).isFile()) : [];
 }
 function gatherReleaseEntries(appDir2) {
   const manifestPath = join36(appDir2, HIMI_PACKAGE_MANIFEST_PATH);
@@ -39553,7 +39726,7 @@ function packRelease(releaseRoot, app, out, opts = {}) {
   const appDir2 = join36(resolve35(releaseRoot), app);
   const { all, header, skipped } = buildEntries(appDir2, app, opts);
   const buf = writeZip(all);
-  const isDir = existsSync38(out) && statSync8(out).isDirectory();
+  const isDir = existsSync39(out) && statSync8(out).isDirectory();
   const outFile = isDir ? join36(resolve35(out), packageFileName(app, header.releaseId)) : resolve35(out);
   mkdirSync18(dirname23(outFile), { recursive: true });
   writeFileSync14(outFile, buf);
@@ -39570,11 +39743,11 @@ function resolvePackageDirDest(outDir, app, releaseId) {
     }
   };
   const replaceable = (dir) => {
-    if (!existsSync38(dir)) return true;
+    if (!existsSync39(dir)) return true;
     if (!statSync8(dir).isDirectory()) return false;
     return readdirSync20(dir).length === 0 || packagedApp(dir) === app;
   };
-  if (existsSync38(outDir) && !statSync8(outDir).isDirectory()) {
+  if (existsSync39(outDir) && !statSync8(outDir).isDirectory()) {
     throw new Error(`refusing to write a package tree over ${outDir} \u2014 it is a file, not a directory`);
   }
   if (replaceable(outDir)) return outDir;
@@ -39621,7 +39794,7 @@ function openPackageBuffer(buf) {
   return openFromEntries(readZip(buf), { requireHeader: true });
 }
 function openPackageFile(file) {
-  return openPackageBuffer(readFileSync42(file));
+  return openPackageBuffer(readFileSync43(file));
 }
 function openPackageDir(dir) {
   const root = resolve35(dir);
@@ -39632,10 +39805,10 @@ function openPackageDir(dir) {
       const childRel = rel ? `${rel}/${name}` : name;
       const childAbs = join36(abs, name);
       if (statSync8(childAbs).isDirectory()) walk2(childRel);
-      else if (isSafeEntryName(childRel)) entries.set(childRel, readFileSync42(childAbs));
+      else if (isSafeEntryName(childRel)) entries.set(childRel, readFileSync43(childAbs));
     }
   };
-  if (!existsSync38(root)) throw new Error(`no such package directory: ${root}`);
+  if (!existsSync39(root)) throw new Error(`no such package directory: ${root}`);
   walk2("");
   const manifestBytes = entries.get(HIMI_PACKAGE_MANIFEST_PATH);
   if (manifestBytes) {
@@ -39716,7 +39889,7 @@ __export(app_source_exports, {
   writeConflicts: () => writeConflicts,
   zipAppSource: () => zipAppSource
 });
-import { readdirSync as readdirSync21, lstatSync as lstatSync5, readFileSync as readFileSync43, mkdirSync as mkdirSync19, writeFileSync as writeFileSync15, existsSync as existsSync39, rmSync as rmSync7, rmdirSync, unlinkSync as unlinkSync3 } from "node:fs";
+import { readdirSync as readdirSync21, lstatSync as lstatSync5, readFileSync as readFileSync44, mkdirSync as mkdirSync19, writeFileSync as writeFileSync15, existsSync as existsSync40, rmSync as rmSync7, rmdirSync, unlinkSync as unlinkSync3 } from "node:fs";
 import { join as join37, resolve as resolve36, sep as sep8 } from "node:path";
 import { deflateRawSync as deflateRawSync2 } from "node:zlib";
 function walkSourceTree(dir, file, skip) {
@@ -39729,7 +39902,7 @@ function walkSourceTree(dir, file, skip) {
         continue;
       }
       if (st.isDirectory()) {
-        if (isDeniedSourceDir(name, relDir) || existsSync39(join37(dir, rel, PACKAGE_DIR_MARKER))) skip(rel);
+        if (isDeniedSourceDir(name, relDir) || existsSync40(join37(dir, rel, PACKAGE_DIR_MARKER))) skip(rel);
         else walk2(rel);
         continue;
       }
@@ -39747,7 +39920,7 @@ function collectAppSource(dir) {
   const skipped = [];
   walkSourceTree(
     dir,
-    (archivePath, hostRel) => entries.push({ path: archivePath, bytes: readFileSync43(join37(dir, hostRel)) }),
+    (archivePath, hostRel) => entries.push({ path: archivePath, bytes: readFileSync44(join37(dir, hostRel)) }),
     (hostRel) => skipped.push(hostRel)
   );
   entries.sort((a, b) => a.path < b.path ? -1 : a.path > b.path ? 1 : 0);
@@ -39815,7 +39988,7 @@ function writeAppSource(entries, destDir) {
   return written;
 }
 function staleSourcePaths(entries, destDir) {
-  if (!existsSync39(destDir)) return [];
+  if (!existsSync40(destDir)) return [];
   const archived = new Set(entries.map((e) => e.path));
   const stale = [];
   walkSourceTree(destDir, (archivePath) => {
@@ -39871,7 +40044,7 @@ function removeStaleSource(entries, destDir) {
     const segments = entry.path.split("/");
     for (let i = 1; i < segments.length; i++) needed.add(segments.slice(0, i).join("/"));
   }
-  if (existsSync39(root)) pruneEmptyDirs(root, "", needed, removed);
+  if (existsSync40(root)) pruneEmptyDirs(root, "", needed, removed);
   return removed.sort();
 }
 function pruneEmptyDirs(root, rel, needed, removed) {
@@ -39944,13 +40117,13 @@ __export(eject_exports, {
   EJECTABLE: () => EJECTABLE,
   ejectModule: () => ejectModule
 });
-import { existsSync as existsSync40, mkdirSync as mkdirSync20, readFileSync as readFileSync44, writeFileSync as writeFileSync16 } from "node:fs";
+import { existsSync as existsSync41, mkdirSync as mkdirSync20, readFileSync as readFileSync45, writeFileSync as writeFileSync16 } from "node:fs";
 import { dirname as dirname24, join as join38, relative as relative5, resolve as resolve37, sep as sep9 } from "node:path";
 function locate(repoRootOrCwd, mod) {
   const inRepo = resolve37(repoRootOrCwd, `stdlib/flows/${mod}/src/index.ts`);
-  if (existsSync40(inRepo)) return { path: inRepo, form: "source" };
+  if (existsSync41(inRepo)) return { path: inRepo, form: "source" };
   const dist = resolve37(repoRootOrCwd, `node_modules/@wix/himalaya/dist/${mod}.mjs`);
-  if (existsSync40(dist)) return { path: dist, form: "bundle" };
+  if (existsSync41(dist)) return { path: dist, form: "bundle" };
   return null;
 }
 function specifiersFor(mod) {
@@ -39988,15 +40161,15 @@ function ejectModule(opts) {
 // gate still applies. Ejecting buys layout and flow, never the floor.
 
 `;
-  const normalized = readFileSync44(found.path, "utf8").replace(
+  const normalized = readFileSync45(found.path, "utf8").replace(
     /(["'])@himalaya\/([a-z0-9-]+(?:\/[a-z0-9-]+)?)\1/g,
     (_m, q, sub) => `${q}@wix/himalaya/${sub}${q}`
   );
   writeFileSync16(target, banner + normalized);
   const rewired = [];
   for (const f of files) {
-    if (!existsSync40(f)) continue;
-    const before = readFileSync44(f, "utf8");
+    if (!existsSync41(f)) continue;
+    const before = readFileSync45(f, "utf8");
     let after = before;
     let rel = relative5(dirname24(f), target).split(sep9).join("/").replace(/\.tsx?$/, ".js");
     if (!rel.startsWith(".")) rel = `./${rel}`;
@@ -40044,14 +40217,14 @@ __export(test_exports, {
   scopeDescriptors: () => scopeDescriptors,
   writeRecordedMocks: () => writeRecordedMocks
 });
-import { existsSync as existsSync41, mkdirSync as mkdirSync21, readFileSync as readFileSync45, writeFileSync as writeFileSync17 } from "node:fs";
+import { existsSync as existsSync42, mkdirSync as mkdirSync21, readFileSync as readFileSync46, writeFileSync as writeFileSync17 } from "node:fs";
 import { join as join39, resolve as resolve38 } from "node:path";
 function readTestConfig(dir) {
   const p = resolve38(dir, TEST_CONFIG_FILE);
-  if (!existsSync41(p)) return {};
+  if (!existsSync42(p)) return {};
   let parsed;
   try {
-    parsed = JSON.parse(readFileSync45(p, "utf8"));
+    parsed = JSON.parse(readFileSync46(p, "utf8"));
   } catch (e) {
     throw new Error(`${TEST_CONFIG_FILE} is not valid JSON \u2014 ${e.message}`);
   }
@@ -40094,7 +40267,7 @@ function readTestConfig(dir) {
 function readNetRules(path) {
   let parsed;
   try {
-    parsed = JSON.parse(readFileSync45(path, "utf8"));
+    parsed = JSON.parse(readFileSync46(path, "utf8"));
   } catch (e) {
     throw new Error(`--net ${path} could not be read as JSON \u2014 ${e.message}`);
   }
@@ -40115,7 +40288,7 @@ function readNetRules(path) {
 function defaultNetRules(dir) {
   for (const rel of ["dev/net-mocks.json", "tests/net-mocks.json"]) {
     const p = resolve38(dir, rel);
-    if (existsSync41(p)) {
+    if (existsSync42(p)) {
       const rules = readNetRules(p);
       if (rules.length) return { rules, from: rel };
     }
@@ -40131,7 +40304,7 @@ function readCannedResponses() {
   ];
   for (const url of candidates) {
     try {
-      const parsed = JSON.parse(readFileSync45(url, "utf8"));
+      const parsed = JSON.parse(readFileSync46(url, "utf8"));
       const byKey = {};
       for (const [k, v] of Object.entries(parsed)) {
         if (!k.startsWith("//")) byKey[k] = v;
@@ -40248,7 +40421,7 @@ async function runShotsPass(opts) {
     const rr = await opts.deps.renderDescriptorWeb(baked.descriptor, opts.tokens, scheme, false, state, opts.width);
     if (rr.renderable && rr.html) shots.push({ screenId: baked.screenId, html: rr.html });
   }
-  const pngs = await opts.deps.renderPngBatch(shots.map((x) => ({ html: x.html, scheme, ...opts.width ? { width: opts.width } : {} })));
+  const pngs = await opts.deps.renderPngBatch(shots.map((x) => ({ html: x.html, scheme, tokens: opts.tokens, ...opts.width ? { width: opts.width } : {} })));
   if (pngs === null) return { dir: opts.outDir, written: [], unavailable: true };
   if (opts.clearDir) opts.deps.clearDir?.(opts.outDir);
   const written = [];
@@ -40681,14 +40854,14 @@ var mobile_ux_lint_exports = {};
 __export(mobile_ux_lint_exports, {
   mobileUxIssues: () => mobileUxIssues
 });
-import { existsSync as existsSync42, readFileSync as readFileSync46 } from "node:fs";
+import { existsSync as existsSync43, readFileSync as readFileSync47 } from "node:fs";
 import { join as join40 } from "node:path";
 function mobileUxIssues(dir, strict) {
   const file = join40(dir, "MOBILE-UX.md");
-  if (!existsSync42(file)) return [];
+  if (!existsSync43(file)) return [];
   let text4;
   try {
-    text4 = readFileSync46(file, "utf8");
+    text4 = readFileSync47(file, "utf8");
   } catch {
     return [];
   }
@@ -41949,18 +42122,18 @@ function createFunctionDataCapability(options) {
           }));
         };
         const encodeQuery = (query) => {
-          const encoded = { ...query };
-          if (query.filter !== void 0) encoded.filter = mapFilter(query.filter);
-          if (Array.isArray(query.sort)) encoded.sort = query.sort.map((sort) => {
+          const encoded2 = { ...query };
+          if (query.filter !== void 0) encoded2.filter = mapFilter(query.filter);
+          if (Array.isArray(query.sort)) encoded2.sort = query.sort.map((sort) => {
             if (!sort || typeof sort !== "object") return sort;
             const record2 = sort;
             const logical = typeof record2.fieldName === "string" ? record2.fieldName : "";
             return { ...record2, fieldName: queryField(logical) };
           });
-          if (Array.isArray(query.fields)) encoded.fields = query.fields.map((logical) => {
+          if (Array.isArray(query.fields)) encoded2.fields = query.fields.map((logical) => {
             return queryField(String(logical));
           });
-          return encoded;
+          return encoded2;
         };
         const decode = (result) => {
           if (!result || typeof result !== "object") return result;
@@ -42352,7 +42525,7 @@ __export(functions_exports, {
   resolveFunctionsTarget: () => resolveFunctionsTarget,
   runRemoteFunctionOperation: () => runRemoteFunctionOperation
 });
-import { readFileSync as readFileSync47, existsSync as existsSync43 } from "node:fs";
+import { readFileSync as readFileSync48, existsSync as existsSync44 } from "node:fs";
 import { join as join41, resolve as resolve39 } from "node:path";
 function resolveFunctionsTarget(input) {
   const explicitUrl = input.functionsUrl?.trim();
@@ -42372,9 +42545,9 @@ async function loadFunctionsApp(dir) {
   }
   const sources = {};
   for (const definition of config.functions.functions) {
-    const source = [".ts", ".js", ".mts", ".mjs"].map((extension) => join41(loaded.dir, "functions", `${definition.name}${extension}`)).find(existsSync43);
+    const source = [".ts", ".js", ".mts", ".mjs"].map((extension) => join41(loaded.dir, "functions", `${definition.name}${extension}`)).find(existsSync44);
     if (!source) throw new Error(`missing source for function ${definition.name}; expected functions/${definition.name}.ts`);
-    sources[definition.name] = readFileSync47(source, "utf8");
+    sources[definition.name] = readFileSync48(source, "utf8");
   }
   const data = config.cms || config.data ? mergeDataResources(config) : void 0;
   const dataErrors = validateDataResources(data, loaded.name).filter((issue2) => issue2.severity === "error");
@@ -42529,7 +42702,7 @@ __export(native_decode_exports, {
   runNativeDecode: () => runNativeDecode
 });
 import { execFileSync as execFileSync5, spawnSync as spawnSync2 } from "node:child_process";
-import { existsSync as existsSync44, mkdtempSync as mkdtempSync2, readFileSync as readFileSync48, rmSync as rmSync8, writeFileSync as writeFileSync18 } from "node:fs";
+import { existsSync as existsSync45, mkdtempSync as mkdtempSync2, readFileSync as readFileSync49, rmSync as rmSync8, writeFileSync as writeFileSync18 } from "node:fs";
 import { tmpdir as tmpdir3 } from "node:os";
 import { join as join42 } from "node:path";
 import { fileURLToPath as fileURLToPath20 } from "node:url";
@@ -42541,8 +42714,8 @@ function nativeDecodeAndroidHarnessDir() {
 }
 function nativeOracleShipped() {
   return {
-    ios: existsSync44(join42(nativeDecodePackageDir(), "Package.swift")),
-    android: existsSync44(join42(nativeDecodeAndroidHarnessDir(), "gradlew"))
+    ios: existsSync45(join42(nativeDecodePackageDir(), "Package.swift")),
+    android: existsSync45(join42(nativeDecodeAndroidHarnessDir(), "gradlew"))
   };
 }
 function detectNativeDecode(options = {}) {
@@ -42553,7 +42726,7 @@ function detectNativeDecode(options = {}) {
     return { platform: "ios", available: false, reason: `the iOS decoder oracle requires macOS (darwin); this host is ${hostPlatform}` };
   }
   if (!swiftAvailable) return { platform: "ios", available: false, reason: "swift is not on PATH" };
-  const packageAvailable = options.packageAvailable ?? existsSync44(join42(packageDir, "Package.swift"));
+  const packageAvailable = options.packageAvailable ?? existsSync45(join42(packageDir, "Package.swift"));
   if (!packageAvailable) {
     return {
       platform: "ios",
@@ -42565,7 +42738,7 @@ function detectNativeDecode(options = {}) {
 }
 function localPropertiesSdk(harnessDir) {
   try {
-    const match = readFileSync48(join42(harnessDir, "local.properties"), "utf8").match(/^sdk\.dir\s*=\s*(.+)$/m);
+    const match = readFileSync49(join42(harnessDir, "local.properties"), "utf8").match(/^sdk\.dir\s*=\s*(.+)$/m);
     return match?.[1]?.trim().replace(/\\([ :\\])/g, "$1") ?? null;
   } catch {
     return null;
@@ -42574,7 +42747,7 @@ function localPropertiesSdk(harnessDir) {
 function detectAndroidNativeDecode(options = {}) {
   const harnessDir = options.harnessDir ?? nativeDecodeAndroidHarnessDir();
   const gradlew = join42(harnessDir, "gradlew");
-  const gradlewAvailable = options.gradlewAvailable ?? existsSync44(gradlew);
+  const gradlewAvailable = options.gradlewAvailable ?? existsSync45(gradlew);
   if (!gradlewAvailable) {
     return {
       platform: "android",
@@ -42584,7 +42757,7 @@ function detectAndroidNativeDecode(options = {}) {
   }
   const androidHome = options.androidHome ?? process.env.ANDROID_HOME ?? "";
   const sdk = androidHome.trim() || (options.localPropertiesSdk !== void 0 ? options.localPropertiesSdk : localPropertiesSdk(harnessDir));
-  const sdkAvailable = options.sdkAvailable ?? (typeof sdk === "string" && sdk.length > 0 && existsSync44(sdk));
+  const sdkAvailable = options.sdkAvailable ?? (typeof sdk === "string" && sdk.length > 0 && existsSync45(sdk));
   if (!sdkAvailable) {
     return {
       platform: "android",
@@ -42716,7 +42889,7 @@ function runAndroidNativeDecode(options) {
       stdio: ["ignore", "ignore", "pipe"],
       encoding: "utf8"
     });
-    const stdout = readFileSync48(outputPath, "utf8");
+    const stdout = readFileSync49(outputPath, "utf8");
     return {
       platform: "android",
       verdicts: parseNativeDecodeOutput(stdout, options.descriptors.map((descriptor) => descriptor.screenId), "android"),
@@ -42787,7 +42960,7 @@ __export(browser_authoring_exports, {
 import { createServer as createServer3 } from "node:http";
 import { createHash as createHash22, randomBytes as randomBytes4 } from "node:crypto";
 import { execFile as execFile2 } from "node:child_process";
-import { existsSync as existsSync45, readdirSync as readdirSync22, readFileSync as readFileSync49, realpathSync as realpathSync4, statSync as statSync9 } from "node:fs";
+import { existsSync as existsSync46, readdirSync as readdirSync22, readFileSync as readFileSync50, realpathSync as realpathSync4, statSync as statSync9 } from "node:fs";
 import { join as join43, posix, relative as relative6, sep as sep10 } from "node:path";
 function humanMs(ms) {
   return ms < 1e3 ? `${ms}ms` : `${Math.round(ms / 1e3)}s`;
@@ -42806,11 +42979,11 @@ function collectWorkerSources(tier5SrcDir, bundleName) {
       if (statSync9(childAbs).isDirectory()) {
         walk2(childAbs, childRel);
       } else if (/\.(ts|tsx|js|mjs|json)$/.test(name)) {
-        files[childRel] = readFileSync49(childAbs, "utf8");
+        files[childRel] = readFileSync50(childAbs, "utf8");
       }
     }
   };
-  if (!existsSync45(root)) return null;
+  if (!existsSync46(root)) return null;
   walk2(root, `/tier5-src/${bundleName}`);
   const entry = [`/tier5-src/${bundleName}/index.ts`, `/tier5-src/${bundleName}/index.js`].find((p) => p in files);
   if (!entry) return null;
@@ -42837,10 +43010,10 @@ function collectRelativeSiblings(files, tier5SrcDir) {
         join43(onDisk, "index.js")
       ];
       for (const abs of candidates) {
-        if (!existsSync45(abs) || statSync9(abs).isDirectory()) continue;
+        if (!existsSync46(abs) || statSync9(abs).isDirectory()) continue;
         const key2 = `/tier5-src/${relative6(tier5SrcDir, abs).split(sep10).join(posix.sep)}`;
         if (key2 in files) break;
-        files[key2] = readFileSync49(abs, "utf8");
+        files[key2] = readFileSync50(abs, "utf8");
         queue.push(key2);
         break;
       }
@@ -42875,7 +43048,7 @@ function collectSdkModules(files, resolveSubpath) {
 function sdkSubpathReader(resolve45) {
   return (sub) => {
     try {
-      return readFileSync49(resolve45(`@wix/himalaya/${sub}`), "utf8");
+      return readFileSync50(resolve45(`@wix/himalaya/${sub}`), "utf8");
     } catch {
       return null;
     }
@@ -43049,7 +43222,7 @@ __export(coverage_exports, {
   suppressedNativeKeys: () => suppressedNativeKeys,
   trendAndStore: () => trendAndStore
 });
-import { existsSync as existsSync46, mkdirSync as mkdirSync22, readFileSync as readFileSync50, writeFileSync as writeFileSync19 } from "node:fs";
+import { existsSync as existsSync47, mkdirSync as mkdirSync22, readFileSync as readFileSync51, writeFileSync as writeFileSync19 } from "node:fs";
 import { dirname as dirname25, join as join44 } from "node:path";
 function suppressedNativeKeys(oracle) {
   return [...oracle.ios ? [] : ["native-decode|ios"], ...oracle.android ? [] : ["native-decode|android"]];
@@ -43223,8 +43396,8 @@ function trendAndStore(dir, entries, suppressed) {
   const p = join44(dir, LEDGER_FILE);
   let previous = null;
   try {
-    if (existsSync46(p)) {
-      const parsed = JSON.parse(readFileSync50(p, "utf8"));
+    if (existsSync47(p)) {
+      const parsed = JSON.parse(readFileSync51(p, "utf8"));
       if (Array.isArray(parsed.keys)) previous = parsed.keys.filter((k) => typeof k === "string");
     }
   } catch {
@@ -43266,8 +43439,8 @@ function diffAndStoreObservations(dir, current) {
   const p = join44(dir, OBS_FILE);
   let previous = null;
   try {
-    if (existsSync46(p)) {
-      const parsed = JSON.parse(readFileSync50(p, "utf8"));
+    if (existsSync47(p)) {
+      const parsed = JSON.parse(readFileSync51(p, "utf8"));
       if (parsed.screens && typeof parsed.screens === "object" && !Array.isArray(parsed.screens) && Object.values(parsed.screens).every(
         (v) => Array.isArray(v) && v.every((l) => typeof l === "string")
       )) {
@@ -43328,11 +43501,11 @@ __export(design_kits_exports, {
   kitsDir: () => kitsDir,
   listKits: () => listKits2
 });
-import { existsSync as existsSync47, readFileSync as readFileSync51, readdirSync as readdirSync23 } from "node:fs";
+import { existsSync as existsSync48, readFileSync as readFileSync52, readdirSync as readdirSync23 } from "node:fs";
 import { join as join45, basename as basename10 } from "node:path";
 import { fileURLToPath as fileURLToPath21 } from "node:url";
 function kitsDir() {
-  return KIT_DIR_CANDIDATES.find((p) => existsSync47(p));
+  return KIT_DIR_CANDIDATES.find((p) => existsSync48(p));
 }
 function listKits2() {
   const dir = kitsDir();
@@ -43356,7 +43529,7 @@ In a published @wix/himalaya-cli this is a packaging bug \u2014 the kits should
   if (!kits.includes(name)) {
     return { ok: false, kit: name, kits, problems: [`no design kit named "${name}". Available: ${kits.join(", ")}`] };
   }
-  const raw = readFileSync51(join45(dir, `${name}.json`), "utf8");
+  const raw = readFileSync52(join45(dir, `${name}.json`), "utf8");
   let parsed;
   try {
     parsed = JSON.parse(raw);
@@ -43396,11 +43569,11 @@ __export(assets_exports, {
   removeAssetPayload: () => removeAssetPayload,
   verifyReport: () => verifyReport
 });
-import { readFileSync as readFileSync52 } from "node:fs";
+import { readFileSync as readFileSync53 } from "node:fs";
 import { basename as basename11 } from "node:path";
 function declaredAssets(dir) {
   return collectAssets(dir).map((a) => {
-    const bytes2 = readFileSync52(a.path);
+    const bytes2 = readFileSync53(a.path);
     return {
       name: a.name,
       sha256: assetSha256(bytes2),
@@ -43477,7 +43650,7 @@ function verifyReport(dir, app, manifest) {
   };
 }
 function addAssetPayload(manifest, filePath, opts) {
-  const bytes2 = readFileSync52(filePath);
+  const bytes2 = readFileSync53(filePath);
   const name = opts.name ?? basename11(filePath);
   const sha2565 = assetSha256(bytes2);
   const record2 = {
@@ -44944,19 +45117,19 @@ var init_preview_assets_generated = __esm({
   "../../packages/serve/src/preview-assets.generated.ts"() {
     init_preview_assets_format();
     PREVIEW_ASSET_MANIFEST = [
-      { key: "assets/index-D0JRTirJ.js", contentType: "application/javascript; charset=utf-8", offset: 8, length: 1004613, sha256: "7e32dc45ae043c4ec3176c5defcadbb434e6748aef2c6b6135aee97d5ef2c093" },
-      { key: "fonts/WixMadeforDisplay-Bold.ttf", contentType: "font/ttf", offset: 1004621, length: 90924, sha256: "ec4c7d63772d980d6e147b2df6215fd2737e4b04cebe0cf7e11dc695fb63cdcf" },
-      { key: "fonts/WixMadeforDisplay-ExtraBold.ttf", contentType: "font/ttf", offset: 1095545, length: 90984, sha256: "bf4c16a2774edd38a921edf3099469866cd74c094fd596f3fa4e81f54a04dfaa" },
-      { key: "fonts/WixMadeforDisplay-Medium.ttf", contentType: "font/ttf", offset: 1186529, length: 90980, sha256: "368faca44fb9f7207e4af784e94750b1ee59c1098b8689e0f4a918926f244fb5" },
-      { key: "fonts/WixMadeforDisplay-Regular.ttf", contentType: "font/ttf", offset: 1277509, length: 90872, sha256: "97ed8f1a6772abe26e3d8af5cecfc4b02faa94497d585b0398b5053b739a70c1" },
-      { key: "fonts/WixMadeforDisplay-SemiBold.ttf", contentType: "font/ttf", offset: 1368381, length: 90980, sha256: "642feab8a48ddf6c7a89d7c2a7c0edfa0e6e773f671287e460e222703563191e" },
-      { key: "fonts/WixMadeforText-Bold.ttf", contentType: "font/ttf", offset: 1459361, length: 108636, sha256: "37c179b4fefb63ea9637322b84583a2df53aa226c150294eea1675c14b1b8e29" },
-      { key: "fonts/WixMadeforText-ExtraBold.ttf", contentType: "font/ttf", offset: 1567997, length: 109084, sha256: "62e2fe4718129f36ecdb0ae4de385bd6b81ecc876146447167c6c140fad699a9" },
-      { key: "fonts/WixMadeforText-Medium.ttf", contentType: "font/ttf", offset: 1677081, length: 109048, sha256: "4ecf270136af928612c76fe4ebade91d8156975e5ea4c0cf9225501dd1788e02" },
-      { key: "fonts/WixMadeforText-Regular.ttf", contentType: "font/ttf", offset: 1786129, length: 107700, sha256: "dee56f09fd3efc127c1ea95557edc74110c1460a46287da36e0af25efd341ef5" },
-      { key: "fonts/WixMadeforText-SemiBold.ttf", contentType: "font/ttf", offset: 1893829, length: 88108, sha256: "dced97a77624bc5f8b1ae65850360908297f4588e09feb6f22792d29dc7e765b" },
-      { key: "index.html", contentType: "text/html; charset=utf-8", offset: 1981937, length: 4448, sha256: "d37ab02eeaf4e6de05cd6b1928427b05e2585a871df0821d7879894db5155a76" },
-      { key: "t5-frame.html", contentType: "text/html; charset=utf-8", offset: 1986385, length: 17209, sha256: "dffc9718e2faa63ae2cc919e0a842f585ed565aaaa7c53778e90379442c731b6" }
+      { key: "assets/index-CD7rJtUy.js", contentType: "application/javascript; charset=utf-8", offset: 8, length: 1006255, sha256: "1f775ada818f0f8d26665e3fb4eeff5ef99a4eb2d8dd493a0bf76e64569eef4a" },
+      { key: "fonts/WixMadeforDisplay-Bold.ttf", contentType: "font/ttf", offset: 1006263, length: 90924, sha256: "ec4c7d63772d980d6e147b2df6215fd2737e4b04cebe0cf7e11dc695fb63cdcf" },
+      { key: "fonts/WixMadeforDisplay-ExtraBold.ttf", contentType: "font/ttf", offset: 1097187, length: 90984, sha256: "bf4c16a2774edd38a921edf3099469866cd74c094fd596f3fa4e81f54a04dfaa" },
+      { key: "fonts/WixMadeforDisplay-Medium.ttf", contentType: "font/ttf", offset: 1188171, length: 90980, sha256: "368faca44fb9f7207e4af784e94750b1ee59c1098b8689e0f4a918926f244fb5" },
+      { key: "fonts/WixMadeforDisplay-Regular.ttf", contentType: "font/ttf", offset: 1279151, length: 90872, sha256: "97ed8f1a6772abe26e3d8af5cecfc4b02faa94497d585b0398b5053b739a70c1" },
+      { key: "fonts/WixMadeforDisplay-SemiBold.ttf", contentType: "font/ttf", offset: 1370023, length: 90980, sha256: "642feab8a48ddf6c7a89d7c2a7c0edfa0e6e773f671287e460e222703563191e" },
+      { key: "fonts/WixMadeforText-Bold.ttf", contentType: "font/ttf", offset: 1461003, length: 108636, sha256: "37c179b4fefb63ea9637322b84583a2df53aa226c150294eea1675c14b1b8e29" },
+      { key: "fonts/WixMadeforText-ExtraBold.ttf", contentType: "font/ttf", offset: 1569639, length: 109084, sha256: "62e2fe4718129f36ecdb0ae4de385bd6b81ecc876146447167c6c140fad699a9" },
+      { key: "fonts/WixMadeforText-Medium.ttf", contentType: "font/ttf", offset: 1678723, length: 109048, sha256: "4ecf270136af928612c76fe4ebade91d8156975e5ea4c0cf9225501dd1788e02" },
+      { key: "fonts/WixMadeforText-Regular.ttf", contentType: "font/ttf", offset: 1787771, length: 107700, sha256: "dee56f09fd3efc127c1ea95557edc74110c1460a46287da36e0af25efd341ef5" },
+      { key: "fonts/WixMadeforText-SemiBold.ttf", contentType: "font/ttf", offset: 1895471, length: 88108, sha256: "dced97a77624bc5f8b1ae65850360908297f4588e09feb6f22792d29dc7e765b" },
+      { key: "index.html", contentType: "text/html; charset=utf-8", offset: 1983579, length: 4448, sha256: "c1e9a6eea6af68bc7e7ae1044a9f46f5938c69b8a5998ea02c3fed7c7db5523a" },
+      { key: "t5-frame.html", contentType: "text/html; charset=utf-8", offset: 1988027, length: 17209, sha256: "dffc9718e2faa63ae2cc919e0a842f585ed565aaaa7c53778e90379442c731b6" }
     ];
   }
 });
@@ -44972,7 +45145,7 @@ __export(run_exports, {
   runPackage: () => runPackage,
   withoutProdServe: () => withoutProdServe
 });
-import { cpSync, existsSync as existsSync48, mkdirSync as mkdirSync23, mkdtempSync as mkdtempSync3, readFileSync as readFileSync53, rmSync as rmSync9, statSync as statSync10 } from "node:fs";
+import { cpSync, existsSync as existsSync49, mkdirSync as mkdirSync23, mkdtempSync as mkdtempSync3, readFileSync as readFileSync54, rmSync as rmSync9, statSync as statSync10 } from "node:fs";
 import { tmpdir as tmpdir4 } from "node:os";
 import { dirname as dirname26, join as join46 } from "node:path";
 import { fileURLToPath as fileURLToPath22 } from "node:url";
@@ -44993,9 +45166,9 @@ async function fetchBytes(url) {
 }
 async function resolvePackage(source, workDir) {
   const isUrl2 = /^https?:\/\//i.test(source);
-  if (!isUrl2 && existsSync48(source) && statSync10(source).isDirectory()) {
+  if (!isUrl2 && existsSync49(source) && statSync10(source).isDirectory()) {
     const appDirManifest = join46(source, "release-manifest.json");
-    if (existsSync48(appDirManifest)) {
+    if (existsSync49(appDirManifest)) {
       const opened2 = openPackageDir(source);
       if (!opened2.validation.ok) {
         throw new Error(`package is not valid:
@@ -45023,7 +45196,7 @@ async function resolvePackage(source, workDir) {
     }
     throw new Error(`${source} is a directory but has no release-manifest.json \u2014 is it a package?`);
   }
-  const bytes2 = isUrl2 ? await fetchBytes(source) : readFileSync53(source);
+  const bytes2 = isUrl2 ? await fetchBytes(source) : readFileSync54(source);
   const root = workDir ?? mkdtempSync3(join46(tmpdir4(), "himi-run-"));
   const { app, appDir: appDir2 } = unpackTo(bytes2, root);
   const opened = openPackageDir(appDir2);
@@ -45053,8 +45226,8 @@ async function loadPreviewAssets() {
       // in-repo checkout
     ];
     for (const path of candidates) {
-      if (!existsSync48(path)) continue;
-      const blob = readFileSync53(path);
+      if (!existsSync49(path)) continue;
+      const blob = readFileSync54(path);
       return mod.assemblePreviewAssetsFromBlob(new Uint8Array(blob.buffer, blob.byteOffset, blob.byteLength));
     }
     return /* @__PURE__ */ new Map();
@@ -45136,7 +45309,7 @@ __export(run_browser_exports, {
   runInBrowser: () => runInBrowser
 });
 import { createServer as createServer5 } from "node:http";
-import { existsSync as existsSync49, readFileSync as readFileSync54 } from "node:fs";
+import { existsSync as existsSync50, readFileSync as readFileSync55 } from "node:fs";
 import { spawnSync as spawnSync3, execFile as execFile3 } from "node:child_process";
 import { dirname as dirname27, resolve as resolve40 } from "node:path";
 import { fileURLToPath as fileURLToPath23 } from "node:url";
@@ -45144,7 +45317,7 @@ function stagedDir() {
   return process.env.HIMI_BROWSER_PLANE_OUT ? resolve40(process.env.HIMI_BROWSER_PLANE_OUT) : resolve40(REPO, "packages", "serve", "dist", "browser-plane");
 }
 function missingStaged() {
-  return [...SERVED].filter((f) => !existsSync49(resolve40(stagedDir(), f))).sort();
+  return [...SERVED].filter((f) => !existsSync50(resolve40(stagedDir(), f))).sort();
 }
 function ensureBrowserPlaneStaged() {
   if (missingStaged().length === 0) return { ok: true, detail: "already staged" };
@@ -45234,7 +45407,7 @@ async function runInBrowser(releaseRoot, app, header, opts = {}) {
     }
     const name = path === "/" || path === "/index.html" ? "host.html" : path.slice(1);
     if (SERVED.has(name)) {
-      if (!existsSync49(resolve40(stagedDir(), name))) {
+      if (!existsSync50(resolve40(stagedDir(), name))) {
         const restaged = ensureBrowserPlaneStaged();
         if (!restaged.ok) {
           res.writeHead(503, { "content-type": "application/json" });
@@ -45244,7 +45417,7 @@ async function runInBrowser(releaseRoot, app, header, opts = {}) {
       }
       let bytes2;
       try {
-        bytes2 = readFileSync54(resolve40(stagedDir(), name));
+        bytes2 = readFileSync55(resolve40(stagedDir(), name));
       } catch (e) {
         res.writeHead(503, { "content-type": "application/json" });
         res.end(JSON.stringify({ error: "browser_plane_unstaged", file: name, detail: String(e) }));
@@ -45707,7 +45880,7 @@ __export(preflight_exports, {
   parseStoreConfig: () => parseStoreConfig,
   requireEnv: () => requireEnv
 });
-import { existsSync as existsSync50, readFileSync as readFileSync55 } from "node:fs";
+import { existsSync as existsSync51, readFileSync as readFileSync56 } from "node:fs";
 import { isAbsolute as isAbsolute3, relative as relative7, resolve as resolve41 } from "node:path";
 function isInsideRepo(p) {
   const rel = relative7(REPO_ROOT3, resolve41(p));
@@ -45764,10 +45937,10 @@ function parseStoreConfig(text4) {
 }
 function loadStoreConfig(app) {
   const p = storeConfigPath(app);
-  if (!existsSync50(p)) {
+  if (!existsSync51(p)) {
     throw new Error(`No store config at ${p}. Create apps/${app}/store/store.config.yaml first (see /setup-store-signing).`);
   }
-  return parseStoreConfig(readFileSync55(p, "utf8"));
+  return parseStoreConfig(readFileSync56(p, "utf8"));
 }
 var init_preflight = __esm({
   "../store-release/preflight.ts"() {
@@ -45786,7 +45959,7 @@ __export(credential_profile_exports, {
   profilePath: () => profilePath,
   resolveStoreCredentials: () => resolveStoreCredentials
 });
-import { existsSync as existsSync51, readFileSync as readFileSync56 } from "node:fs";
+import { existsSync as existsSync52, readFileSync as readFileSync57 } from "node:fs";
 import { homedir as homedir5 } from "node:os";
 import { join as join47 } from "node:path";
 function credentialsDir(home = homedir5()) {
@@ -45829,8 +46002,8 @@ function resolveStoreCredentials(opts) {
   const { app, cfg } = opts;
   const env = opts.env ?? process.env;
   const home = opts.home ?? homedir5();
-  const read = opts.readProfile ?? ((p) => readFileSync56(p, "utf8"));
-  const exists = opts.profileExists ?? existsSync51;
+  const read = opts.readProfile ?? ((p) => readFileSync57(p, "utf8"));
+  const exists = opts.profileExists ?? existsSync52;
   const ios = cfg.ios ?? {};
   const flagName = opts.profileFlag?.trim();
   const named = namedProfile(cfg, opts.profileFlag);
@@ -45910,7 +46083,7 @@ __export(preflight_app_exports, {
   preflightApp: () => preflightApp,
   profileAccount: () => profileAccount
 });
-import { readFileSync as readFileSync57, existsSync as existsSync52, readdirSync as readdirSync24, statSync as statSync11 } from "node:fs";
+import { readFileSync as readFileSync58, existsSync as existsSync53, readdirSync as readdirSync24, statSync as statSync11 } from "node:fs";
 import { createHash as createHash23 } from "node:crypto";
 import { join as join48 } from "node:path";
 function analyze(projectYml, storeConfig, icon, account) {
@@ -45976,8 +46149,8 @@ function profileAccount(app, storeConfig, opts = {}) {
   }
 }
 async function preflightApp(app, opts = {}) {
-  const projectYml = existsSync52(iosProjectYml(app)) ? readFileSync57(iosProjectYml(app), "utf8") : "";
-  const storeConfig = existsSync52(storeConfigPath(app)) ? readFileSync57(storeConfigPath(app), "utf8") : "";
+  const projectYml = existsSync53(iosProjectYml(app)) ? readFileSync58(iosProjectYml(app), "utf8") : "";
+  const storeConfig = existsSync53(storeConfigPath(app)) ? readFileSync58(storeConfigPath(app), "utf8") : "";
   if (!storeConfig) return [{ level: "error", message: `no apps/${app}/store/store.config.yaml \u2014 run /setup-store-signing first.` }];
   const findings = analyze(
     projectYml,
@@ -46013,15 +46186,15 @@ function analyzeSubmissionRecord(appLevel, review, opts) {
 function appLevelMetadataFiles(app, locale = "en-US") {
   const root = join48(storeDir(app), "metadata");
   const out = /* @__PURE__ */ new Set();
-  if (existsSync52(root)) {
+  if (existsSync53(root)) {
     for (const n of readdirSync24(root)) if (n.endsWith(".txt")) out.add(n);
   }
-  if (existsSync52(join48(root, locale, "privacy_url.txt"))) out.add("privacy_url.txt");
+  if (existsSync53(join48(root, locale, "privacy_url.txt"))) out.add("privacy_url.txt");
   return out;
 }
 function reviewInfoFiles(app) {
   const dir = join48(storeDir(app), "review_information");
-  if (!existsSync52(dir)) return /* @__PURE__ */ new Set();
+  if (!existsSync53(dir)) return /* @__PURE__ */ new Set();
   return new Set(readdirSync24(dir).filter((n) => n.endsWith(".txt")));
 }
 function isValidAppStoreSize(w, h) {
@@ -46136,7 +46309,7 @@ function playListingAssets(app, locale = "en-US") {
     for (const name of names) {
       const p = join48(dir, name);
       try {
-        if (statSync11(p).isFile()) return { name, bytes: readFileSync57(p) };
+        if (statSync11(p).isFile()) return { name, bytes: readFileSync58(p) };
       } catch {
       }
     }
@@ -46168,25 +46341,25 @@ function analyzeListing(metaFiles, shots) {
 }
 function metadataFilesPresent(app, locale = "en-US") {
   const dir = join48(storeDir(app), "metadata", locale);
-  if (!existsSync52(dir)) return /* @__PURE__ */ new Set();
+  if (!existsSync53(dir)) return /* @__PURE__ */ new Set();
   return new Set(readdirSync24(dir).filter((n) => n.endsWith(".txt")));
 }
 function listScreenshots(app, locale = "en-US") {
   const out = [];
   const flat = join48(storeDir(app), "screenshots", locale);
-  if (existsSync52(flat)) {
+  if (existsSync53(flat)) {
     for (const png of readdirSync24(flat).filter((n) => n.endsWith(".png"))) {
-      const sz = pngSize(readFileSync57(join48(flat, png)));
+      const sz = pngSize(readFileSync58(join48(flat, png)));
       if (sz) out.push({ name: png, w: sz.w, h: sz.h });
     }
   }
   const legacy = join48(storeDir(app), "metadata", locale, "screenshots");
-  if (existsSync52(legacy)) {
+  if (existsSync53(legacy)) {
     for (const deviceDir of readdirSync24(legacy)) {
       const d = join48(legacy, deviceDir);
       if (!statSync11(d).isDirectory()) continue;
       for (const png of readdirSync24(d).filter((n) => n.endsWith(".png"))) {
-        const sz = pngSize(readFileSync57(join48(d, png)));
+        const sz = pngSize(readFileSync58(join48(d, png)));
         if (sz) out.push({ name: `${deviceDir}/${png}`, w: sz.w, h: sz.h });
       }
     }
@@ -46195,12 +46368,12 @@ function listScreenshots(app, locale = "en-US") {
 }
 function placeholderHashes2() {
   const templateIos = join48(appDir("_template"), "ios");
-  if (!existsSync52(templateIos)) return [LEGACY_PLACEHOLDER_SHA2562];
+  if (!existsSync53(templateIos)) return [LEGACY_PLACEHOLDER_SHA2562];
   for (const target of readdirSync24(templateIos)) {
     const p = join48(templateIos, target, "Assets.xcassets", "AppIcon.appiconset", "icon_1024.png");
     try {
       if (!statSync11(p).isFile()) continue;
-      return [LEGACY_PLACEHOLDER_SHA2562, createHash23("sha256").update(readFileSync57(p)).digest("hex")];
+      return [LEGACY_PLACEHOLDER_SHA2562, createHash23("sha256").update(readFileSync58(p)).digest("hex")];
     } catch {
     }
   }
@@ -46231,12 +46404,12 @@ async function pixelIssues(bytes2) {
   }
 }
 async function appIconState(iosDir) {
-  if (!existsSync52(iosDir)) return { exists: false, isPlaceholder: false, storeIssues: [] };
+  if (!existsSync53(iosDir)) return { exists: false, isPlaceholder: false, storeIssues: [] };
   for (const target of readdirSync24(iosDir)) {
     const p = join48(iosDir, target, "Assets.xcassets", "AppIcon.appiconset", "icon_1024.png");
     try {
       if (!statSync11(p).isFile()) continue;
-      const bytes2 = readFileSync57(p);
+      const bytes2 = readFileSync58(p);
       const hash = createHash23("sha256").update(bytes2).digest("hex");
       const pixels = await pixelIssues(bytes2);
       return {
@@ -46308,7 +46481,7 @@ __export(version_exports, {
   setAndroidVersion: () => setAndroidVersion,
   setIosVersion: () => setIosVersion
 });
-import { readFileSync as readFileSync58, writeFileSync as writeFileSync20 } from "node:fs";
+import { readFileSync as readFileSync59, writeFileSync as writeFileSync20 } from "node:fs";
 function readIosVersion(projectYml) {
   const marketing = matchScalar(projectYml, "CFBundleShortVersionString");
   const build2 = matchScalar(projectYml, "CFBundleVersion");
@@ -46366,8 +46539,8 @@ function setAndroidVersion(gradle, v) {
 function bumpVersion(app, opts) {
   const iosPath = iosProjectYml(app);
   const gradlePath = androidGradle(app);
-  const iosYml = readFileSync58(iosPath, "utf8");
-  const gradle = readFileSync58(gradlePath, "utf8");
+  const iosYml = readFileSync59(iosPath, "utf8");
+  const gradle = readFileSync59(gradlePath, "utf8");
   const current = readIosVersion(iosYml);
   const next = {
     marketing: opts.marketing ?? current.marketing,
@@ -46384,7 +46557,7 @@ var init_version = __esm({
 });
 
 // ../store-release/register-bundle.ts
-import { readFileSync as readFileSync59 } from "node:fs";
+import { readFileSync as readFileSync60 } from "node:fs";
 import { createPrivateKey as createPrivateKey2, sign } from "node:crypto";
 function b64url2(b) {
   return Buffer.from(b).toString("base64").replace(/\+/g, "-").replace(/\//g, "_").replace(/=+$/, "");
@@ -46402,7 +46575,7 @@ function bundleIdBody(identifier, name, platform = "IOS") {
 async function registerBundleId(opts) {
   const env = requireEnv(["ASC_KEY_ID", "ASC_ISSUER_ID", "ASC_KEY_PATH"]);
   assertCredentialOutsideRepo("ASC_KEY_PATH", env.ASC_KEY_PATH);
-  const jwt = ascJwt(env.ASC_KEY_ID, env.ASC_ISSUER_ID, readFileSync59(env.ASC_KEY_PATH, "utf8"), Math.floor(Date.now() / 1e3));
+  const jwt = ascJwt(env.ASC_KEY_ID, env.ASC_ISSUER_ID, readFileSync60(env.ASC_KEY_PATH, "utf8"), Math.floor(Date.now() / 1e3));
   const res = await fetch(`${ASC_API}/v1/bundleIds`, {
     method: "POST",
     headers: { Authorization: `Bearer ${jwt}`, "Content-Type": "application/json" },
@@ -46456,7 +46629,7 @@ __export(asc_status_exports, {
   ascStatus: () => ascStatus,
   buildVerdict: () => buildVerdict
 });
-import { readFileSync as readFileSync60 } from "node:fs";
+import { readFileSync as readFileSync61 } from "node:fs";
 function buildVerdict(builds) {
   if (!builds.length) {
     return "NO builds registered \u2014 if you uploaded recently and it's been >15 min, the binary was REJECTED IN PROCESSING (reason is email-only; run validate-binary.ts / scan-purpose-strings.ts to reproduce it).";
@@ -46470,7 +46643,7 @@ function buildVerdict(builds) {
 function client(creds) {
   const env = creds ?? requireEnv(["ASC_KEY_ID", "ASC_ISSUER_ID", "ASC_KEY_PATH"]);
   assertCredentialOutsideRepo("ASC_KEY_PATH", env.ASC_KEY_PATH);
-  const jwt = ascJwt(env.ASC_KEY_ID, env.ASC_ISSUER_ID, readFileSync60(env.ASC_KEY_PATH, "utf8"), Math.floor(Date.now() / 1e3));
+  const jwt = ascJwt(env.ASC_KEY_ID, env.ASC_ISSUER_ID, readFileSync61(env.ASC_KEY_PATH, "utf8"), Math.floor(Date.now() / 1e3));
   return async (path) => {
     const r = await fetch(`${ASC}${path}`, { headers: { Authorization: `Bearer ${jwt}` } });
     return { status: r.status, json: await r.json().catch(() => ({})) };
@@ -46630,7 +46803,7 @@ __export(secrets_exports, {
   runRemoteSecretsCommand: () => runRemoteSecretsCommand,
   runSecretsCommand: () => runSecretsCommand
 });
-import { readFileSync as readFileSync61 } from "node:fs";
+import { readFileSync as readFileSync62 } from "node:fs";
 function environment(value) {
   if (value === "preview" || value === "production") return value;
   throw new Error("--environment must be preview or production");
@@ -46640,9 +46813,9 @@ function required(value, flag) {
   return value;
 }
 function masterKey() {
-  const encoded = process.env.HIMI_SECRET_MASTER_KEY;
-  if (!encoded) throw new Error("HIMI_SECRET_MASTER_KEY is required (base64url-encoded 32-byte key)");
-  const key2 = Buffer.from(encoded, "base64url");
+  const encoded2 = process.env.HIMI_SECRET_MASTER_KEY;
+  if (!encoded2) throw new Error("HIMI_SECRET_MASTER_KEY is required (base64url-encoded 32-byte key)");
+  const key2 = Buffer.from(encoded2, "base64url");
   if (key2.byteLength !== 32) throw new Error("HIMI_SECRET_MASTER_KEY must decode to exactly 32 bytes");
   return key2;
 }
@@ -46661,7 +46834,7 @@ async function runSecretsCommand(operation, flags, io, options = {}) {
       io.log(JSON.stringify(await vault.list({ app, environment: env })));
       return 0;
     }
-    const value = options.readValue ? options.readValue() : readFileSync61(0, "utf8").replace(/\r?\n$/, "");
+    const value = options.readValue ? options.readValue() : readFileSync62(0, "utf8").replace(/\r?\n$/, "");
     if (operation === "set") await vault.set({ app, environment: env, name, value });
     else if (operation === "rotate") await vault.rotate({ app, environment: env, name, value });
     else throw new Error(`unknown secrets operation ${operation}`);
@@ -46690,7 +46863,7 @@ async function runRemoteSecretsCommand(operation, flags, io, options) {
     }
     let body;
     if (operation !== "list") {
-      const value = options.readValue ? options.readValue() : readFileSync61(0, "utf8").replace(/\r?\n$/, "");
+      const value = options.readValue ? options.readValue() : readFileSync62(0, "utf8").replace(/\r?\n$/, "");
       body = JSON.stringify({ value });
     }
     const response = await (options.fetchImpl ?? fetch)(url, { method: operation === "list" ? "GET" : operation === "set" ? "PUT" : "POST", headers: headers2, body });
@@ -46726,7 +46899,7 @@ __export(notify_exports, {
   runNotify: () => runNotify,
   saveAdminSession: () => saveAdminSession
 });
-import { chmodSync as chmodSync3, mkdirSync as mkdirSync24, readFileSync as readFileSync62, writeFileSync as writeFileSync21 } from "node:fs";
+import { chmodSync as chmodSync3, mkdirSync as mkdirSync24, readFileSync as readFileSync63, writeFileSync as writeFileSync21 } from "node:fs";
 import { homedir as homedir6 } from "node:os";
 import { dirname as dirname29, join as join49 } from "node:path";
 function defaultSessionsPath() {
@@ -46734,7 +46907,7 @@ function defaultSessionsPath() {
 }
 function loadSessionsFile(path = defaultSessionsPath()) {
   try {
-    return JSON.parse(readFileSync62(path, "utf8"));
+    return JSON.parse(readFileSync63(path, "utf8"));
   } catch {
     return {};
   }
@@ -50710,10 +50883,10 @@ function patchGrids(src, installed, patch) {
   return out + src.slice(cursor);
 }
 function patchModules(src, installed, patch) {
-  return src.replace(/"homeModules": "((?:[^"\\]|\\.)*)"/g, (whole, encoded) => {
+  return src.replace(/"homeModules": "((?:[^"\\]|\\.)*)"/g, (whole, encoded2) => {
     let modules;
     try {
-      const parsed = JSON.parse(JSON.parse(`"${encoded}"`));
+      const parsed = JSON.parse(JSON.parse(`"${encoded2}"`));
       if (!Array.isArray(parsed)) return whole;
       modules = parsed;
     } catch {
@@ -50901,7 +51074,7 @@ var init_home_descriptor = __esm({
 });
 
 // src/site-analyze/apply.ts
-import { existsSync as existsSync53, readFileSync as readFileSync63, writeFileSync as writeFileSync23, copyFileSync as copyFileSync3, mkdirSync as mkdirSync26, realpathSync as realpathSync5, statSync as statSync12 } from "node:fs";
+import { existsSync as existsSync54, readFileSync as readFileSync64, writeFileSync as writeFileSync23, copyFileSync as copyFileSync3, mkdirSync as mkdirSync26, realpathSync as realpathSync5, statSync as statSync12 } from "node:fs";
 import { dirname as dirname30, isAbsolute as isAbsolute4, join as join51, resolve as resolve42, sep as sep11 } from "node:path";
 import { spawnSync as spawnSync4 } from "node:child_process";
 function unpairedRedirectNote(overlay) {
@@ -50917,7 +51090,7 @@ function committedShellProvisioning(path) {
 function findRepoRoot(cwd) {
   let dir = cwd;
   for (let i = 0; i < 8; i++) {
-    if (SHELL_NAMES2.some((name) => existsSync53(join51(dir, shellAppDir(name), "package.json")))) return dir;
+    if (SHELL_NAMES2.some((name) => existsSync54(join51(dir, shellAppDir(name), "package.json")))) return dir;
     const next = dirname30(dir);
     if (next === dir) break;
     dir = next;
@@ -50986,10 +51159,10 @@ function mergeCustomerOwned(committed, overlay) {
 function buildMergedContract(options) {
   const { appDir: appDir2, packageDir, overlay } = options;
   const committedPath = join51(appDir2, "provisioning.json");
-  if (!existsSync53(committedPath)) {
+  if (!existsSync54(committedPath)) {
     throw new Error(`shell has no committed provisioning.json at ${committedPath} to build a contract from`);
   }
-  const committed = JSON.parse(readFileSync63(committedPath, "utf8"));
+  const committed = JSON.parse(readFileSync64(committedPath, "utf8"));
   const merged = mergeCustomerOwned(committed, overlay);
   const overlayFontFamily = (overlay.branding ?? {}).fontFamily;
   const branding = merged.branding ?? {};
@@ -51002,7 +51175,7 @@ function buildMergedContract(options) {
   const stage = (fromRel, toRel) => {
     const from = contained(packageDir, fromRel);
     const to = contained(join51(appDir2, STAGED), toRel.slice(STAGED.length + 1));
-    if (!from || !to || !existsSync53(from)) return void 0;
+    if (!from || !to || !existsSync54(from)) return void 0;
     let real;
     let realRoot;
     try {
@@ -51025,10 +51198,10 @@ function buildMergedContract(options) {
   const icon = stage("media/icon.png", `${STAGED}/icon.png`);
   if (icon) branding.appIconPath = icon;
   const facesPath = join51(packageDir, "media/fonts/faces.json");
-  if (existsSync53(facesPath)) {
+  if (existsSync54(facesPath)) {
     let faces = [];
     try {
-      const parsed = JSON.parse(readFileSync63(facesPath, "utf8"));
+      const parsed = JSON.parse(readFileSync64(facesPath, "utf8"));
       faces = Array.isArray(parsed) ? parsed : [];
     } catch {
       faces = [];
@@ -51061,8 +51234,8 @@ async function applyOverlays(input) {
   const cwd = resolve42(input.cwd);
   const shell = input.shell ?? DEFAULT_BRANDABLE_SHELL;
   assertKnownShell(shell);
-  const overlay = JSON.parse(readFileSync63(input.overlayPath, "utf8"));
-  const tokens = JSON.parse(readFileSync63(input.tokensPath, "utf8"));
+  const overlay = JSON.parse(readFileSync64(input.overlayPath, "utf8"));
+  const tokens = JSON.parse(readFileSync64(input.tokensPath, "utf8"));
   const wrote = [];
   const notes = [];
   const repoRoot2 = findRepoRoot(cwd);
@@ -51096,8 +51269,8 @@ async function applyOverlays(input) {
   }
   const pkgProv = join51(cwd, "provisioning.json");
   assertNotCommitted(pkgProv, input.forbiddenProvisioning);
-  if (existsSync53(pkgProv)) {
-    const cur = JSON.parse(readFileSync63(pkgProv, "utf8"));
+  if (existsSync54(pkgProv)) {
+    const cur = JSON.parse(readFileSync64(pkgProv, "utf8"));
     const merged = deepMerge4(cur, overlay);
     writeFileSync23(pkgProv, JSON.stringify(merged, null, 2) + "\n");
     wrote.push(pkgProv);
@@ -51106,8 +51279,8 @@ async function applyOverlays(input) {
     wrote.push(pkgProv);
   }
   const pkgTokens = join51(cwd, "tokens.json");
-  if (existsSync53(pkgTokens) && (tokens.colors || tokens.typography)) {
-    const cur = JSON.parse(readFileSync63(pkgTokens, "utf8"));
+  if (existsSync54(pkgTokens) && (tokens.colors || tokens.typography)) {
+    const cur = JSON.parse(readFileSync64(pkgTokens, "utf8"));
     const merged = deepMerge4(cur, tokens);
     const mergedColors = merged.colors;
     if (mergedColors && typeof mergedColors === "object" && !Array.isArray(mergedColors)) {
@@ -51118,8 +51291,8 @@ async function applyOverlays(input) {
   }
   const homeAction = homeRefreshActionId(shell);
   const homeSrc = join51(cwd, "dev/index.ts");
-  if (homeAction && existsSync53(homeSrc)) {
-    const prev = readFileSync63(homeSrc, "utf8");
+  if (homeAction && existsSync54(homeSrc)) {
+    const prev = readFileSync64(homeSrc, "utf8");
     const patched = patchBrandParams(prev, overlay, homeAction);
     let next = patched.src;
     if (!patched.foreign && overlay.installedVerticals?.length) {
@@ -51142,13 +51315,13 @@ async function applyOverlays(input) {
       notes.push(`${patched.unparsed} onAppear params block(s) in ${homeSrc} could not be read \u2014 any brand values inside them were not applied`);
     }
   }
-  if (!input.iconPath || !existsSync53(input.iconPath)) {
+  if (!input.iconPath || !existsSync54(input.iconPath)) {
     const book = input.iconPath ? dirname30(dirname30(resolve42(input.iconPath))) : void 0;
     notes.push(
       book ? `no icon installed \u2014 ${siteLogoAbsence(book).hint}` : "no icon installed and no business book to say why \u2014 `himi icon generate` draws one from the accent, or `himi icon set <file.png>` installs the customer's own mark"
     );
   }
-  if (input.iconPath && existsSync53(input.iconPath)) {
+  if (input.iconPath && existsSync54(input.iconPath)) {
     try {
       const installed = await installIcon(cwd, input.iconPath, { derivePlay: true });
       wrote.push(...installed.wrote);
@@ -55302,7 +55475,7 @@ __export(cli_exports, {
   runSiteAnalyze: () => runSiteAnalyze,
   runSiteFunctionCli: () => runSiteFunctionCli
 });
-import { readFileSync as readFileSync64 } from "node:fs";
+import { readFileSync as readFileSync65 } from "node:fs";
 import { resolve as resolve43 } from "node:path";
 function assetFetchFor(_opts) {
   return pinnedFetch2;
@@ -55389,7 +55562,7 @@ async function runSiteFunctionCli(opts) {
   let source;
   if (opts.sourcePath) {
     const p = resolve43(opts.cwd ?? process.cwd(), opts.sourcePath);
-    source = readFileSync64(p, "utf8");
+    source = readFileSync65(p, "utf8");
   }
   let body;
   if (opts.bodyRaw != null) {
@@ -55646,7 +55819,7 @@ __export(site_create_exports, {
   runSiteList: () => runSiteList,
   writeProvisioningBinding: () => writeProvisioningBinding
 });
-import { existsSync as existsSync54, readFileSync as readFileSync65, writeFileSync as writeFileSync24 } from "node:fs";
+import { existsSync as existsSync55, readFileSync as readFileSync66, writeFileSync as writeFileSync24 } from "node:fs";
 import { resolve as resolvePath2 } from "node:path";
 function oauthClientName(projectName) {
   return `${projectName} client`;
@@ -55795,7 +55968,7 @@ async function runSiteCreate(opts) {
   if (!wantOauthApp) return { ...base, nextSteps: nextSteps(metaSiteId) };
   return { ...base, clientId, redirectUri, nextSteps: nextSteps(metaSiteId, clientId) };
 }
-function writeProvisioningBinding(target, binding2, fs = { existsSync: existsSync54, readFileSync: readFileSync65, writeFileSync: writeFileSync24 }) {
+function writeProvisioningBinding(target, binding2, fs = { existsSync: existsSync55, readFileSync: readFileSync66, writeFileSync: writeFileSync24 }) {
   const msid = binding2.siteId;
   const path = resolvePath2(target);
   const committed = committedShellProvisioning(path);
@@ -56127,7 +56300,7 @@ var init_site_oauth_client = __esm({
 });
 
 // src/cli.ts
-import { mkdtempSync as mkdtempSync4, readFileSync as readFileSync66, mkdirSync as mkdirSync27, writeFileSync as writeFileSync25, existsSync as existsSync55, rmSync as rmSync10, readdirSync as readdirSync25, statSync as statSync13, lstatSync as lstatSync6, accessSync, constants } from "node:fs";
+import { mkdtempSync as mkdtempSync4, readFileSync as readFileSync67, mkdirSync as mkdirSync27, writeFileSync as writeFileSync25, existsSync as existsSync56, rmSync as rmSync10, readdirSync as readdirSync25, statSync as statSync13, lstatSync as lstatSync6, accessSync, constants } from "node:fs";
 import { execFileSync as execFileSync7, spawnSync as spawnSync5, spawn as spawn5 } from "node:child_process";
 import { createHash as createHash24, randomUUID as randomUUID3 } from "node:crypto";
 import { tmpdir as tmpdir5, homedir as homedir7, hostname } from "node:os";
@@ -58574,6 +58747,14 @@ init_splash();
 
 // src/lint-report.ts
 init_himi_report();
+function nondeterministicWorkers(workers) {
+  return (workers ?? []).filter((w) => w.nondeterministicServices?.length).map((w) => ({ bundle: w.bundle ?? "(unnamed)", services: [...w.nondeterministicServices] }));
+}
+function describeNondeterministicWorkers(workers) {
+  const one = (w) => `worker "${w.bundle}" (${w.services.length === 1 ? "service" : "services"} ${w.services.join(", ")})`;
+  return workers.length <= 1 ? workers.map(one).join("") : `${workers.slice(0, -1).map(one).join(", ")} and ${one(workers[workers.length - 1])}`;
+}
+var NONDETERMINISTIC_FIX = "move those clock or random values out of the service's initial state and compute them in an action instead (for example one the screen's onAppear dispatches)";
 function summarizeLint(app, bres, outcome, strict, extraIssues = []) {
   const issues = (outcome.lint ?? []).flatMap((s) => s.issues.map((i) => ({ screen: s.screenId, ...i })));
   issues.push(...extraIssues);
@@ -58622,8 +58803,20 @@ function summarizeLint(app, bres, outcome, strict, extraIssues = []) {
       message: failure.message
     });
   }
+  for (const w of nondeterministicWorkers(outcome.workers)) {
+    issues.push({
+      screen: null,
+      pass: "initial-state",
+      severity: "warning",
+      ruleCode: "nondeterministic-initial-state",
+      bundle: w.bundle,
+      path: w.bundle,
+      services: w.services,
+      message: `${describeNondeterministicWorkers([w])} builds a different initial state depending on when it is built \u2014 it reads the clock or Math.random() while it boots, and that state is hashed into the release. So builds of this unchanged source produce different releases (a new releaseId off-repo; new content under the same id in-repo), and a mobile-UX drive or attestation recorded against one build will not match the release a later push builds. To fix it, ${NONDETERMINISTIC_FIX}.`
+    });
+  }
   const errorIssues = issues.filter((i) => i.severity === "error");
-  const workers = (outcome.workers ?? []).filter((w) => w.threw || w.console.length);
+  const workers = (outcome.workers ?? []).filter((w) => w.threw || w.console.length || w.nondeterministicServices?.length);
   const workerThrows = workers.filter((w) => w.threw);
   const hasErrors = bres.compileErrors.length > 0 || outcome.failedToBuild.length > 0 || outcome.missingBundles.length > 0 || errorIssues.length > 0 || workerThrows.length > 0;
   const legacy = {
@@ -59389,7 +59582,7 @@ var num = (v) => typeof v === "string" && v !== "" && Number.isFinite(Number(v))
 function embeddedTemplateCatalog() {
   return availableTemplates().map((name) => {
     const path = join52(templateSourceDir(name), TEMPLATE_META_FILE);
-    const meta = JSON.parse(readFileSync66(path, "utf8"));
+    const meta = JSON.parse(readFileSync67(path, "utf8"));
     if (!meta || typeof meta.title !== "string" || typeof meta.description !== "string" || !Array.isArray(meta.tags)) {
       throw new Error(`${path} must be { title: string, description: string, tags: string[], category?: string }`);
     }
@@ -60031,7 +60224,7 @@ var COMMANDS = [
 ];
 function cliVersion() {
   try {
-    return JSON.parse(readFileSync66(new URL("../package.json", import.meta.url), "utf8")).version ?? "unknown";
+    return JSON.parse(readFileSync67(new URL("../package.json", import.meta.url), "utf8")).version ?? "unknown";
   } catch {
     return "unknown";
   }
@@ -60126,7 +60319,7 @@ function ageInDays(publishedAt, now = Date.now()) {
 }
 function packageVersion(path) {
   try {
-    const version2 = JSON.parse(readFileSync66(path, "utf8")).version;
+    const version2 = JSON.parse(readFileSync67(path, "utf8")).version;
     return typeof version2 === "string" && version2 ? version2 : void 0;
   } catch {
     return void 0;
@@ -60196,7 +60389,7 @@ function updateCachePath(env = process.env) {
 }
 function readUpdateCache(path) {
   try {
-    const parsed = JSON.parse(readFileSync66(path, "utf8"));
+    const parsed = JSON.parse(readFileSync67(path, "utf8"));
     return parsed && typeof parsed === "object" ? parsed : {};
   } catch {
     return {};
@@ -60269,7 +60462,7 @@ function createUpdateRunner(spawn6 = spawnSync5) {
     reexec: (argv) => {
       const root = globalNodeModulesRoot();
       const entry = root ? join52(root, "@wix", "himalaya-cli", "dist", "cli.mjs") : void 0;
-      if (!entry || !existsSync55(entry)) return void 0;
+      if (!entry || !existsSync56(entry)) return void 0;
       const result = spawnSync5(process.execPath, [entry, ...argv], {
         // inherit keeps PIPED STDIN working — commands that read stdin must survive a re-exec.
         stdio: "inherit",
@@ -60316,7 +60509,7 @@ function staleUpdateLockFile(cachePath, now) {
   for (const path of [`${cachePath}.lock.break`, `${cachePath}.lock`]) {
     let content;
     try {
-      content = readFileSync66(path, "utf8");
+      content = readFileSync67(path, "utf8");
     } catch {
       continue;
     }
@@ -60339,7 +60532,7 @@ function acquireUpdateLock(cachePath, now, hooks = {}) {
   const mine = lockStamp(now);
   const readLock = (path) => {
     try {
-      return readFileSync66(path, "utf8");
+      return readFileSync67(path, "utf8");
     } catch {
       return void 0;
     }
@@ -60979,7 +61172,7 @@ async function nativeConfigAdvisories(app, configSource) {
     const { iosProjectYml: iosProjectYml2 } = await Promise.resolve().then(() => (init_paths(), paths_exports));
     const { androidOptedIn: androidOptedIn3, LABEL_IOS_SPLASH: LABEL_IOS_SPLASH2 } = await Promise.resolve().then(() => (init_splash(), splash_exports));
     const iosYmlPath = iosProjectYml2(app);
-    const iosYml = existsSync55(iosYmlPath) ? readFileSync66(iosYmlPath, "utf8") : "";
+    const iosYml = existsSync56(iosYmlPath) ? readFileSync67(iosYmlPath, "utf8") : "";
     let optedIn = iosYml.includes(LABEL_IOS_SPLASH2);
     if (!optedIn) {
       const { androidManifestPath: androidManifestPath3 } = await Promise.resolve().then(() => (init_gen_native_config(), gen_native_config_exports));
@@ -60993,7 +61186,7 @@ async function nativeConfigAdvisories(app, configSource) {
 }
 function readConfigSource(dir) {
   try {
-    return readFileSync66(join52(dir, "config.ts"), "utf8");
+    return readFileSync67(join52(dir, "config.ts"), "utf8");
   } catch {
     return null;
   }
@@ -61005,7 +61198,7 @@ function writePngFile(path, base64) {
 }
 async function initFromRemoteTemplate(name, parentDir, template, c) {
   const dir = resolve44(parentDir, name);
-  if (existsSync55(join52(dir, "himalaya.content.json"))) {
+  if (existsSync56(join52(dir, "himalaya.content.json"))) {
     throw new Error(`content package already exists at ${dir}`);
   }
   const r = await c.fetchTemplateSource(TEMPLATE_APP_PREFIX + template);
@@ -61048,7 +61241,7 @@ function symlinkDestinationIssue(dest) {
 function restoreDestinationIssue(dest, force) {
   const link = symlinkDestinationIssue(dest);
   if (link) return link;
-  if (!existsSync55(dest)) return null;
+  if (!existsSync56(dest)) return null;
   if (!statSync13(dest).isDirectory()) {
     return { error: `${dest} exists and is not a directory`, hint: "pass --out/--name to land somewhere else, or remove the file" };
   }
@@ -61063,7 +61256,7 @@ function restoreDestinationIssue(dest, force) {
 function isHimalayaMonorepoCheckout(start) {
   let dir = resolve44(start);
   for (; ; ) {
-    if (existsSync55(join52(dir, "tools", "himi-cli", "src", "cli.ts")) && existsSync55(join52(dir, "core", "serve", "src", "server.ts"))) return true;
+    if (existsSync56(join52(dir, "tools", "himi-cli", "src", "cli.ts")) && existsSync56(join52(dir, "core", "serve", "src", "server.ts"))) return true;
     const parent = dirname31(dir);
     if (parent === dir) return false;
     dir = parent;
@@ -61133,8 +61326,8 @@ function materializeForPreview(appDir2, slug, displayName) {
 }
 async function appId(dir) {
   try {
-    const { readFileSync: readFileSync67 } = await import("node:fs");
-    const m = JSON.parse(readFileSync67(join52(dir, "himalaya.content.json"), "utf8"));
+    const { readFileSync: readFileSync68 } = await import("node:fs");
+    const m = JSON.parse(readFileSync68(join52(dir, "himalaya.content.json"), "utf8"));
     if (m.name) return m.name;
   } catch {
   }
@@ -61142,8 +61335,8 @@ async function appId(dir) {
 }
 async function contentVisibility(dir) {
   try {
-    const { readFileSync: readFileSync67 } = await import("node:fs");
-    const m = JSON.parse(readFileSync67(join52(dir, "himalaya.content.json"), "utf8"));
+    const { readFileSync: readFileSync68 } = await import("node:fs");
+    const m = JSON.parse(readFileSync68(join52(dir, "himalaya.content.json"), "utf8"));
     if (m.visibility === "public" || m.visibility === "unlisted") return m.visibility;
   } catch {
   }
@@ -61362,16 +61555,18 @@ function resolutionFlag(flags) {
   if (flags.source === true) return "source";
   return void 0;
 }
-async function recordedReleaseForContentQuietly(dir, resolution) {
+async function recordedReleaseForContentQuietly(dir, resolution, onDrift) {
   let out;
   try {
     const { buildContentForValidation: buildContentForValidation2, buildReleaseFromContent: buildReleaseFromContent2, bundleOutDir: bundleOutDir2 } = await loadAuthoring();
     const bres = await buildContentForValidation2(dir, { resolution });
     out = mkdtempSync4(join52(tmpdir5(), "himi-ux-record-"));
     const hasWorkers = bres.built.length > 0 || bres.compileErrors.length > 0;
-    const outcome = await buildReleaseFromContent2(dir, out, { ...hasWorkers ? { tier5Dir: bundleOutDir2(dir) } : {} });
+    const outcome = await buildReleaseFromContent2(dir, out, { ...hasWorkers ? { tier5Dir: bundleOutDir2(dir) } : {}, collect: { lint: true } });
     const releaseId = outcome.manifest.releaseId;
     if (!releaseId) return null;
+    const drifting = nondeterministicWorkers(outcome.workers);
+    if (drifting.length) onDrift?.(drifting);
     const payload = await loadReleaseFromDir(await appId(dir), out);
     return { releaseId, releaseHash: releasePayloadHash(payload) };
   } catch {
@@ -61400,6 +61595,10 @@ function handoverUxEvidence(dir, release) {
   }
   return evidence;
 }
+function releaseDriftCause(workers, redo, evidence) {
+  const one = workers.length === 1;
+  return `${redo} alone cannot reliably clear this: ${describeNondeterministicWorkers(workers)} ${one ? "builds" : "build"} a different initial state depending on when ${one ? "it is" : "they are"} built \u2014 ${one ? "it reads" : "they read"} the clock or Math.random() while booting, and that state is hashed into the release \u2014 so this unchanged package builds a different release from one run to the next, and ${evidence} recorded now cannot be relied on to match the release the next push builds. First ${NONDETERMINISTIC_FIX}`;
+}
 function uxRecordCommands(contentPath) {
   return `\`himi ux audit --content ${contentPath} --strict\`, then \`himi ux record --content ${contentPath} --platform ios --status unavailable --reason "<why you could not drive it>"\``;
 }
@@ -61421,7 +61620,11 @@ function uxHandoverHint(uxEvidence, ctx) {
   if (uxEvidence.state === "failed") {
     return `a mobile-UX drive for ${releaseId} IS recorded, and it FAILED on ${uxEvidence.failedPlatforms.join(", ")} (see ${uxEvidence.path}). A published draft is the owner-private preview a customer is handed, so fix what the drive found and re-record it \u2014 re-running \`himi ux record\` over a failure without changing the app just writes the same failure down again. Only if you intend to hand a customer a preview whose UX you already know is broken, \`${door} --force\`.`;
   }
-  const why = uxEvidence.state === "absent" ? `nothing has recorded a mobile-UX drive for this package \u2014 ${uxEvidence.path} does not exist` : uxEvidence.state === "unrecorded" ? uxEvidence.malformed.length ? `${uxEvidence.path} has no iOS or Android drive this gate can read \u2014 ${uxEvidence.malformed.join("; ")}` : `${uxEvidence.path} exists but carries no iOS or Android drive (\`himi render\` writes its rendered widths there too, so the file alone proves nothing)` : uxEvidence.state === "unreadable" ? `${ctx.quote(`${ctx.contentDir}/${uxEvidence.path}`)} ${uxEvidence.error} \u2014 delete it and record again, because re-recording over a malformed store does not repair it` : uxEvidence.state === "outdated" ? `a mobile-UX drive for ${releaseId} is recorded, but the package has CHANGED since \u2014 in-repo a release id is the git HEAD sha, so editing a screen, a token or a worker without committing keeps the id while replacing everything it identifies (a record written before this check also lands here, carrying no content hash)` : `the recorded mobile-UX drive is about ${uxEvidence.otherReleases.length ? `release ${uxEvidence.otherReleases.join(", ")}` : "no release at all"}, not ${releaseId}${uxEvidence.unstamped ? ` (${uxEvidence.unstamped} drive(s) name no release)` : ""}`;
+  const why = uxEvidence.state === "absent" ? `nothing has recorded a mobile-UX drive for this package \u2014 ${uxEvidence.path} does not exist` : uxEvidence.state === "unrecorded" ? uxEvidence.malformed.length ? `${uxEvidence.path} has no iOS or Android drive this gate can read \u2014 ${uxEvidence.malformed.join("; ")}` : `${uxEvidence.path} exists but carries no iOS or Android drive (\`himi render\` writes its rendered widths there too, so the file alone proves nothing)` : uxEvidence.state === "unreadable" ? `${ctx.quote(`${ctx.contentDir}/${uxEvidence.path}`)} ${uxEvidence.error} \u2014 delete it and record again, because re-recording over a malformed store does not repair it` : uxEvidence.state === "outdated" && ctx.nondeterministicWorkers?.length ? `a mobile-UX drive for ${releaseId} is recorded, but it describes different content from the release this push just built \u2014 an uncommitted edit since the record would do that, and so does the worker named below` : uxEvidence.state === "outdated" ? `a mobile-UX drive for ${releaseId} is recorded, but the package has CHANGED since \u2014 in-repo a release id is the git HEAD sha, so editing a screen, a token or a worker without committing keeps the id while replacing everything it identifies (a record written before this check also lands here, carrying no content hash)` : `the recorded mobile-UX drive is about ${uxEvidence.otherReleases.length ? `release ${uxEvidence.otherReleases.join(", ")}` : "no release at all"}, not ${releaseId}${uxEvidence.unstamped ? ` (${uxEvidence.unstamped} drive(s) name no release)` : ""}`;
+  const drifting = ctx.nondeterministicWorkers ?? [];
+  if (drifting.length > 0) {
+    return `${why}. ${releaseDriftCause(drifting, "Re-recording", "a drive")}; then record the drive: ${uxRemedy}, and re-run \`${door}\`. Only if you intend to hand over a preview WITHOUT that evidence, \`${door} --force\`.`;
+  }
   return `${why}. A published draft is the owner-private preview a customer is handed, so record the drive first: ${uxRemedy}, then re-run \`${door}\`. Only if you intend to hand over a preview WITHOUT that evidence, \`${door} --force\`.`;
 }
 var SECRET_FLAG_NAME = /token|secret|password|cookie|auth/i;
@@ -61448,10 +61651,18 @@ function uxHandoverNote(uxEvidence, ctx) {
   if (uxEvidence.state === "failed") {
     return `published over a FAILED mobile-UX drive for ${ctx.releaseId} on ${uxEvidence.failedPlatforms.join(", ")}. The preview link below is the owner-private handover \u2014 fix what the drive found and publish again before a customer reviews it.`;
   }
+  const drifting = ctx.nondeterministicWorkers ?? [];
+  const driftCause = drifting.length > 0 ? releaseDriftCause(drifting, "Re-recording", "a drive") : null;
   if (uxEvidence.state === "unreadable") {
     const why = uxEvidence.error ? ` \u2014 ${uxEvidence.path} ${uxEvidence.error}` : ` \u2014 ${uxEvidence.path} could not be read`;
+    if (driftCause) {
+      return `published with no mobile-UX drive this gate accepts for ${ctx.releaseId} (unreadable)${why}. The preview link below is the owner-private handover \u2014 DELETE ${ctx.quote(`${ctx.contentDir}/${uxEvidence.path}`)}, because re-recording over a malformed store does not repair it. ${driftCause}; then record the drive again with \`himi ux record --content ${ctx.contentArg} \u2026\`, and publish again before a customer reviews it.`;
+    }
     return `published with no mobile-UX drive this gate accepts for ${ctx.releaseId} (unreadable)${why}. The preview link below is the owner-private handover \u2014 DELETE ${ctx.quote(`${ctx.contentDir}/${uxEvidence.path}`)} and record the drive again with \`himi ux record --content ${ctx.contentArg} \u2026\`, because re-recording over a malformed store does not repair it, then publish again before a customer reviews it.`;
   }
+  if (driftCause) {
+    return `published with no mobile-UX drive this gate accepts for ${ctx.releaseId} (${uxEvidence.state}). The preview link below is the owner-private handover. ${driftCause}; then record the drive with \`himi ux record --content ${ctx.contentArg} \u2026\` and publish again before a customer reviews it.`;
+  }
   return `published with no mobile-UX drive this gate accepts for ${ctx.releaseId} (${uxEvidence.state}). The preview link below is the owner-private handover \u2014 record the drive with \`himi ux record --content ${ctx.contentArg} \u2026\` and publish again before a customer reviews it.`;
 }
 function uxHandoverOverride(uxEvidence, ctx) {
@@ -61527,7 +61738,7 @@ async function producedWidgetFamilies(dir) {
     let js;
     for (const candidate of [`${name}.bundle.js`, `${name}.js`, name]) {
       try {
-        js = readFileSync66(join52(outDir, candidate), "utf8");
+        js = readFileSync67(join52(outDir, candidate), "utf8");
         break;
       } catch {
       }
@@ -61902,7 +62113,7 @@ himi v${cliVersion()} \u2014 run \`himi --version\`. If authoring commands fail
           const sourceDir = resolve44(str5(flags["source-dir"]) ?? appDir2);
           let meta;
           try {
-            meta = JSON.parse(readFileSync66(join52(sourceDir, TEMPLATE_META_FILE), "utf8"));
+            meta = JSON.parse(readFileSync67(join52(sourceDir, TEMPLATE_META_FILE), "utf8"));
           } catch {
             io.error(JSON.stringify({ error: `no ${TEMPLATE_META_FILE} in ${sourceDir} \u2014 a template must declare { title, description, tags } to be published`, hint: `add ${TEMPLATE_META_FILE} next to himalaya.content.json (or pass --source-dir <dir>)` }));
             return 2;
@@ -61912,7 +62123,7 @@ himi v${cliVersion()} \u2014 run \`himi --version\`. If authoring commands fail
             return 2;
           }
           try {
-            const appearance = extractTemplateAppearance(JSON.parse(readFileSync66(join52(sourceDir, "tokens.json"), "utf8")));
+            const appearance = extractTemplateAppearance(JSON.parse(readFileSync67(join52(sourceDir, "tokens.json"), "utf8")));
             meta = { ...appearance, ...meta };
           } catch {
           }
@@ -61977,7 +62188,7 @@ himi v${cliVersion()} \u2014 run \`himi --version\`. If authoring commands fail
           let iconHash;
           if (iconPath) {
             try {
-              const bytes2 = readFileSync66(iconPath);
+              const bytes2 = readFileSync67(iconPath);
               payload.icon = bytes2.toString("base64");
               iconHash = createHash24("sha256").update(bytes2).digest("hex");
             } catch {
@@ -62247,7 +62458,7 @@ himi v${cliVersion()} \u2014 run \`himi --version\`. If authoring commands fail
           const path = dpxSessionTokenPath();
           let raw;
           try {
-            raw = readFileSync66(path, "utf8");
+            raw = readFileSync67(path, "utf8");
           } catch {
             throw new Error(`no DPX BO session at ${path}; run dpx auth login, write dpx auth token to that path, then himi login --dpx --target bo`);
           }
@@ -62387,7 +62598,10 @@ himi v${cliVersion()} \u2014 run \`himi --version\`. If authoring commands fail
           io.error(JSON.stringify({ error: `ux record needs --status ${NATIVE_AUDIT_STATUSES.join("|")}` }));
           return 2;
         }
-        const uxRelease = await recordedReleaseForContentQuietly(dir, resolutionFlag(flags));
+        let drifting = [];
+        const uxRelease = await recordedReleaseForContentQuietly(dir, resolutionFlag(flags), (workers) => {
+          drifting = workers;
+        });
         try {
           const evidence = recordNativeAudit(dir, platform, status, checks, str5(flags.reason), uxRelease ?? void 0);
           print({
@@ -62398,6 +62612,11 @@ himi v${cliVersion()} \u2014 run \`himi --version\`. If authoring commands fail
             ...uxRelease ? {} : {
               releaseIdNote: "this package could not be built, so the record names no release \u2014 `himi push` will not accept it as evidence for the release it publishes. Fix the build and re-run this command."
             },
+            // #3049 — still written (it is honest about what was driven), but said NOW: the push is
+            // the next step, and without this line it is where the author would find out.
+            ...drifting.length ? {
+              releaseIdWarning: `this record will not reliably match the release \`himi push\` builds: ${describeNondeterministicWorkers(drifting)} ${drifting.length === 1 ? "builds" : "build"} a different initial state depending on when ${drifting.length === 1 ? "it is" : "they are"} built, and that state is hashed into the release. First ${NONDETERMINISTIC_FIX}; then record again, immediately before the push.`
+            } : {},
             evidence
           });
           return 0;
@@ -62409,7 +62628,7 @@ himi v${cliVersion()} \u2014 run \`himi --version\`. If authoring commands fail
       case "test": {
         const dir = contentDir(flags);
         const structuredOutput = flags.json === true || io.isTTY !== true;
-        if (existsSync55(join52(dir, "functions"))) {
+        if (existsSync56(join52(dir, "functions"))) {
           const { invokeLocalFunction: invokeLocalFunction2, loadFunctionsApp: loadFunctionsApp2 } = await Promise.resolve().then(() => (init_functions(), functions_exports));
           const loaded = await loadFunctionsApp2(dir);
           const results = [];
@@ -62829,7 +63048,7 @@ himi v${cliVersion()} \u2014 run \`himi --version\`. If authoring commands fail
             return 2;
           }
           try {
-            const raw = stateArg.trim().startsWith("{") ? stateArg : readFileSync66(stateArg.replace(/^@/, ""), "utf8");
+            const raw = stateArg.trim().startsWith("{") ? stateArg : readFileSync67(stateArg.replace(/^@/, ""), "utf8");
             injectedState = JSON.parse(raw);
           } catch (e) {
             io.error(JSON.stringify({ error: `--state must be inline JSON or a path to a .json file \u2014 ${e.message}` }));
@@ -62844,7 +63063,7 @@ himi v${cliVersion()} \u2014 run \`himi --version\`. If authoring commands fail
             return 2;
           }
           try {
-            const raw = inputArg.trim().startsWith("{") ? inputArg : readFileSync66(inputArg.replace(/^@/, ""), "utf8");
+            const raw = inputArg.trim().startsWith("{") ? inputArg : readFileSync67(inputArg.replace(/^@/, ""), "utf8");
             const parsed = JSON.parse(raw);
             if (!parsed || typeof parsed !== "object" || Array.isArray(parsed)) throw new Error("must be a JSON object");
             injectedInput = parsed;
@@ -63241,7 +63460,7 @@ default (no --glyph): ${DEFAULT_GLYPH2} \u2014 a mark that claims nothing, so th
           io.error(JSON.stringify(linked));
           return 1;
         }
-        if (existsSync55(dest)) {
+        if (existsSync56(dest)) {
           if (!statSync13(dest).isDirectory()) {
             io.error(JSON.stringify({
               error: `${dest} exists and is not a directory`,
@@ -63254,7 +63473,7 @@ default (no --glyph): ${DEFAULT_GLYPH2} \u2014 a mark that claims nothing, so th
             io.error(JSON.stringify({ error: `${dest} already exists and is not empty`, hint: "pass --force to write into it anyway (merging, and naming what it keeps), --replace to restore exactly what was archived, or --out/--name to land somewhere else" }));
             return 1;
           }
-          if (replace && occupied && !existsSync55(join52(dest, "himalaya.content.json"))) {
+          if (replace && occupied && !existsSync56(join52(dest, "himalaya.content.json"))) {
             io.error(JSON.stringify({
               error: `${dest} is not a content package \u2014 refusing to --replace it`,
               hint: "--replace only clears a directory that holds himalaya.content.json. Check --out/--name, or pass --force to merge into it instead."
@@ -63473,7 +63692,10 @@ default (no --glyph): ${DEFAULT_GLYPH2} \u2014 a mark that claims nothing, so th
             // bytes to drive.
             baseReleaseId: baseForPlan.manifest.releaseId,
             quote: shellQuote2,
-            planeArgs: planeArguments(flags, shellQuote2)
+            planeArgs: planeArguments(flags, shellQuote2),
+            // The patch door reads the same build, so a drifting worker makes its record just as
+            // unmatchable — the partial publish is not exempt from the loop (#3049).
+            nondeterministicWorkers: nondeterministicWorkers(outcome.workers)
           };
           let localSourceHash;
           try {
@@ -63528,15 +63750,15 @@ default (no --glyph): ${DEFAULT_GLYPH2} \u2014 a mark that claims nothing, so th
             return 1;
           }
           const zip = zipAppSource2(collected.entries);
-          const encoded = zip.toString("base64");
-          if (encoded.length > MAX_APP_SOURCE_BYTES2) {
+          const encoded2 = zip.toString("base64");
+          if (encoded2.length > MAX_APP_SOURCE_BYTES2) {
             const largest = largestEntries2(collected.entries);
             io.error(JSON.stringify({
               ok: false,
               pushed: false,
               error: "app_source_too_large",
               archivedBytes: zip.length,
-              encodedBytes: encoded.length,
+              encodedBytes: encoded2.length,
               limit: MAX_APP_SOURCE_BYTES2,
               files: collected.entries.length,
               largest,
@@ -63544,7 +63766,7 @@ default (no --glyph): ${DEFAULT_GLYPH2} \u2014 a mark that claims nothing, so th
             }));
             return 1;
           }
-          appSourceB64 = encoded;
+          appSourceB64 = encoded2;
           sourceSummary = {
             files: collected.entries.length,
             compressed: zip.length,
@@ -63552,6 +63774,7 @@ default (no --glyph): ${DEFAULT_GLYPH2} \u2014 a mark that claims nothing, so th
           };
         }
         const evidence = pushEvidence(dir, manifest.releaseId, (candidate) => verifyAttestation(candidate, dir, payload.screens, declared, payload, { requireLatest: false }).ok);
+        const drifting = nondeterministicWorkers(outcome.workers);
         const staleEvidence = evidence.staleRuns > 0 ? `${evidence.staleRuns} retained attestation(s) carry this release id, but none describes the content being published` : null;
         const attestationErrors = [...evidence.historyErrors, ...staleEvidence ? [staleEvidence] : []];
         if (attestationErrors.length > 0 && !force) {
@@ -63561,7 +63784,7 @@ default (no --glyph): ${DEFAULT_GLYPH2} \u2014 a mark that claims nothing, so th
             ok: false,
             pushed: false,
             errors: attestationErrors,
-            hint: corrupted ? `attestation history in .himi/attestations/ is corrupt, so the retained runs cannot be trusted \u2014 a fresh run does not remove the bad entry. Delete .himi/attestations/, re-attest with ${remedy}, then re-run \`himi push\`. Only if you intend to publish WITHOUT that evidence, \`himi push --force\`.` : `no retained attestation for this release passed live verification \u2014 a release id is the HEAD sha, so runs recorded before your latest edits still carry it while describing a tree that no longer exists. Re-attest the CURRENT release with ${remedy}, then re-run \`himi push\`. Only if you intend to publish WITHOUT that evidence, \`himi push --force\`.`
+            hint: corrupted ? `attestation history in .himi/attestations/ is corrupt, so the retained runs cannot be trusted \u2014 a fresh run does not remove the bad entry. Delete .himi/attestations/, re-attest with ${remedy}, then re-run \`himi push\`. Only if you intend to publish WITHOUT that evidence, \`himi push --force\`.` : `no retained attestation for this release passed live verification${drifting.length ? `. ${releaseDriftCause(drifting, "Re-attesting", "an attestation")}, then re-attest` : " \u2014 a release id is the HEAD sha, so runs recorded before your latest edits still carry it while describing a tree that no longer exists. Re-attest"} the CURRENT release with ${remedy}, then re-run \`himi push\`. Only if you intend to publish WITHOUT that evidence, \`himi push --force\`.`
           });
           return 1;
         }
@@ -63597,9 +63820,10 @@ default (no --glyph): ${DEFAULT_GLYPH2} \u2014 a mark that claims nothing, so th
               contentDir: contentRel,
               app,
               door: echoedInvocation("himi push", flags, shellQuote2),
-              quote: shellQuote2
+              quote: shellQuote2,
               // No `baseReleaseId`: a full push derives from nothing, so it can never produce
               // `inherited-screens` and has no base to restore.
+              nondeterministicWorkers: drifting
             })
           });
           return 1;
@@ -63758,7 +63982,10 @@ default (no --glyph): ${DEFAULT_GLYPH2} \u2014 a mark that claims nothing, so th
             contentDir: contentRel,
             app,
             door: echoedInvocation("himi push", flags, shellQuote2),
-            quote: shellQuote2
+            quote: shellQuote2,
+            // #3049 — the same workers the refusal above was told about, so the forced note does
+            // not answer "record it and publish again" to a build that moves the release itself.
+            nondeterministicWorkers: drifting
           }),
           ...loopbackWarning ? { warning: loopbackWarning } : {},
           ...report2.issues ? { issues: report2.issues } : {},
@@ -64108,7 +64335,7 @@ default (no --glyph): ${DEFAULT_GLYPH2} \u2014 a mark that claims nothing, so th
             }));
             return 1;
           }
-          const archive = readFileSync66(resolve44(file));
+          const archive = readFileSync67(resolve44(file));
           const result = await client2().createPackageShare({
             app: opened.header.app,
             releaseId: opened.header.releaseId,
@@ -64752,7 +64979,7 @@ default (no --glyph): ${DEFAULT_GLYPH2} \u2014 a mark that claims nothing, so th
           io.error(JSON.stringify({ error: `patch ${kind} needs --file`, usage: PATCH_USAGE }));
           return 2;
         }
-        if (!existsSync55(file)) {
+        if (!existsSync56(file)) {
           io.error(JSON.stringify({ error: `no such file: ${file}` }));
           return 2;
         }
@@ -64808,7 +65035,7 @@ default (no --glyph): ${DEFAULT_GLYPH2} \u2014 a mark that claims nothing, so th
           lintNote: "`himi patch` sends a raw file. Nothing here built or linted your app \u2014 `himi push --only <selector>` is the same edit with the full lint gate in front of it."
         };
         if (kind === "tokens" || kind === "app-config") {
-          const body = readFileSync66(file, "utf8");
+          const body = readFileSync67(file, "utf8");
           const patch2 = kind === "tokens" ? { tokens: body } : { appConfig: body };
           return runReleasePatch({
             ...common,
@@ -64823,7 +65050,7 @@ default (no --glyph): ${DEFAULT_GLYPH2} \u2014 a mark that claims nothing, so th
             io.error(JSON.stringify({ error: "patch screen needs a <screenId>", usage: PATCH_USAGE }));
             return 2;
           }
-          const descriptor = readFileSync66(file, "utf8");
+          const descriptor = readFileSync67(file, "utf8");
           try {
             JSON.parse(descriptor);
           } catch (e) {
@@ -64863,7 +65090,7 @@ default (no --glyph): ${DEFAULT_GLYPH2} \u2014 a mark that claims nothing, so th
             extra: { kind, screen: id, file: { path: file, bytes: Buffer.byteLength(descriptor, "utf8") } }
           });
         }
-        const bytes2 = readFileSync66(file);
+        const bytes2 = readFileSync67(file);
         const sha = createHash24("sha256").update(bytes2).digest("hex");
         const forScreens = (str5(flags["for-screen"]) ?? "").split(",").map((s) => s.trim()).filter(Boolean);
         if (flags["no-rebind"] !== void 0 && flags["no-rebind"] !== true) {
@@ -65007,7 +65234,7 @@ default (no --glyph): ${DEFAULT_GLYPH2} \u2014 a mark that claims nothing, so th
           }
           let def;
           try {
-            const parsed = JSON.parse(arg.startsWith("@") ? readFileSync66(arg.slice(1), "utf8") : arg);
+            const parsed = JSON.parse(arg.startsWith("@") ? readFileSync67(arg.slice(1), "utf8") : arg);
             if (parsed === null || typeof parsed !== "object" || Array.isArray(parsed)) {
               io.error(JSON.stringify({ error: "invalid_definition", problems: [`--definition must be a JSON object, got ${Array.isArray(parsed) ? "an array" : parsed === null ? "null" : typeof parsed}`] }));
               return 2;
@@ -65471,7 +65698,7 @@ ${label2}`);
         const platform = str5(flags.platform)?.split(",").map((p) => p.trim()).filter(Boolean);
         {
           const distDir = contentDir(flags);
-          if (existsSync55(join52(distDir, "himalaya.content.json"))) {
+          if (existsSync56(join52(distDir, "himalaya.content.json"))) {
             const issues = await iconIssues(distDir, flags.strict === true, { requireDeclared: true, requireVerified: true });
             const errors = issues.filter((i) => i.severity === "error");
             for (const i of issues.filter((i2) => i2.severity === "warning")) {
@@ -65740,7 +65967,7 @@ ${label2}`);
           const dpxPath = dpxSessionTokenPath();
           let dpx;
           try {
-            dpx = readFileSync66(dpxPath, "utf8").trim();
+            dpx = readFileSync67(dpxPath, "utf8").trim();
           } catch {
             io.error(JSON.stringify({ error: `no dpx session at ${dpxPath} \u2014 run \`dpx auth login\` then \`dpx auth token > ${dpxPath}\` (dpx 2.x keeps its own state in ~/.dpx/auth.json and does NOT write the legacy session file), or omit --dpx` }));
             return 1;
@@ -66141,7 +66368,7 @@ ${report2.ok ? "OK \u2014 data + serve plane reachable." : typeof report2.hint =
           const path = dpxSessionTokenPath();
           let raw;
           try {
-            raw = readFileSync66(path, "utf8");
+            raw = readFileSync67(path, "utf8");
           } catch {
             io.error(JSON.stringify({ error: `no DPX BO session at ${path}` }));
             return 1;
@@ -66553,6 +66780,7 @@ export {
   readUpdateCache,
   refreshUpdateCache,
   registryCandidates,
+  releaseDriftCause,
   renderDataSource,
   renderDeviceWidths,
   resolveAppSlug,