@wix/himalaya-cli 0.1117.0 → 0.1119.0

package/guides/himi-mcp.md

@@ -90,7 +90,9 @@ without following links. They judge the deny-list in every spelling, because mac
 write or delete anything the source deny-list keeps off the machine: `.env` files, the `.himi/`
 secret store, MCP host configs with their keys, key files, and `node_modules`, `dist` and `.git`
 at any depth. When the host names
-no workspace, `HIMI_WORKSPACE` sets the folder. Coding agents edit files themselves, so the flag is
+no workspace, `HIMI_WORKSPACE` sets the folder. It is then a hard boundary for EVERY tool: a
+`dir`, `parentDir` or `file` argument outside it, or through a symlink, is refused. That covers the
+publish and share tools, not only the file tools. Coding agents edit files themselves, so the flag is
 off by default.
 
 **What the tools will not do:** make a release live, build store binaries, touch secrets, write to a

package/guides/push-cli-onboarding.md

@@ -141,6 +141,39 @@ Before anything is sent, the server checks:
 `--dry-run` runs every check and sends nothing. The link is forwarded exactly as given, query
 string included. A private screen is allowed; the app's login gate still applies when tapped.
 
+To notify **every approved member** of the site, use `--all-members` in place of
+`--member-email`:
+
+```sh
+himi notify send --provider ping --target wix --content ./liftgear \
+  --all-members --title 'New in the app' \
+  --link 'himalaya-LiftGear://screen/himi_product?id=<itemId>' --dry-run
+himi notify send --provider ping --target wix --content ./liftgear \
+  --all-members --title 'New in the app' \
+  --link 'himalaya-LiftGear://screen/himi_product?id=<itemId>' --yes
+```
+
+Before reading any members, the CLI calls Himi Serve's owner-authorized setup status GET
+to verify app/site ownership and ready setup. It also verifies that the site token is active,
+USER-scoped, and belongs to the same owner account and site. These checks run even for an empty
+roster. The CLI then pages through the site's Members roster twice and includes only approved members. It
+stops before sending if the two reads differ, an approved member lacks a login email or contact
+ID, or the roster is ambiguous. A dry run reports the recipient count and asks the server to
+validate the first member, the app, site, link and setup; with no approved members, there is no
+member to validate.
+The live command requires `--yes`, then sends one request per member through the existing
+owner-authorized Ping endpoint. Each request repeats the server's ownership, member, readiness
+and link checks. Calls are spaced for the owner's 10-per-minute test-send limit, so 1,000 members
+take at least about 102 minutes. It prints progress after every 10 members. The result counts
+requests Ping accepted; it cannot count devices that displayed the notification.
+
+The command prints a campaign ID when it starts. If it stops partway through, rerun the **same**
+command with `--request-id <campaignId>` within Ping's 24-hour deduplication window. It derives
+the same request ID for each member, so members whose earlier requests succeeded are not sent
+a second notification. Keep the title, body, link, app and site unchanged when resuming.
+After 24 hours, or if the site's membership changed during the run, verify whom to target
+before repeating it; the CLI has no durable campaign ledger.
+
 **Acceptance is not delivery.** Ping does not report which devices it reached. The notification
 goes to the member's subscribed devices for this site's Branded-family app, which can be more
 than one device. It does not go to their other Wix apps. Confirm receipt and the tap on the

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@wix/himalaya-cli",
-  "version": "0.1117.0",
+  "version": "0.1119.0",
   "type": "module",
   "description": "himi — the Himalaya authoring CLI. Build a Tier-5 content package on your own machine, push it to the production serve as a draft, preview it on web + Himi Player, and read worker logs back — the remote dev loop. Wraps @himalaya/serve-cli for transport.",
   "keywords": [
@@ -67,5 +67,5 @@
       "artifactId": "himalaya-cli"
     }
   },
-  "falconPackageHash": "fc5b0cacba000b4c6e6a4a5002e19ab4d37d0560e6bd98aed8b49b13"
+  "falconPackageHash": "095801b2c05f44cecb7cf7c8b66b69b17736a05e43bf01dd8c72dde5"
 }

package/templates/beauty-salon/tier5-src/himi-store-product/index.ts

@@ -282,12 +282,18 @@ function derive(s: S): S {
   };
 }
 
+// Bumped by every add (queued, failed or landed): a cart count read BEFORE it — the load's badge
+// read answering late — must not replace the badge the add set (#3468 review).
+let cartBadgeEpoch = 0;
+
 const svc = defineService<S, {
   load: (s: S, arg?: unknown) => Promise<S>;
   setQuantity: (s: S, arg?: unknown) => S;
   selectOption: (s: S, arg?: unknown) => S;
   addToCart: (s: S) => Promise<S>;
   beginAdd: (s: S, arg?: unknown) => S;
+  paintCached: (s: S, arg?: unknown) => S;
+  setCartCount: (s: S, arg?: unknown) => S;
   share: (s: S) => Promise<S>;
   toggleSave: (s: S) => S;
 }>("himiStoreProduct", {
@@ -350,9 +356,46 @@ const svc = defineService<S, {
         lastLoadedId = undefined;
         return derive({ ...s, status: "ready", quantity: 1, optionGroups: [], selection: {}, optionsUnknown: false, emptyText: copyParam("product.notFoundText", "Product not found.") });
       }
-      try {
-        const r = await getStoreProduct(id);
-        const p = (r.product ?? (r as unknown as StoreProduct)) as StoreProduct;
+      // The cart count only feeds the top-bar badge: ask for it NOW, beside the product, instead
+      // of after it — it used to add a whole cart round trip before the page could paint.
+      const cartCount = cartItemCount();
+      // The badge must never hold the page: remember the count if it is already in, and
+      // publish it separately if it lands after the product (#3468 review).
+      let cartKnown: number | undefined;
+      void cartCount.then((n) => { cartKnown = n; }, () => {});
+      // The live product read goes out FIRST too — the local-db read below must never delay it.
+      // Settled into a value so a failure is handled where it is awaited, never unhandled.
+      const live = getStoreProduct(id).then(
+        (r) => ({ ok: true as const, r }),
+        () => ({ ok: false as const }),
+      );
+      // Paint at once from the row the list already synced (name, price, image) — the page used
+      // to sit on its skeleton for the product round trip even when the list had just shown it.
+      // The live read then fills in the description and gallery.
+      const synced = await readCachedProduct(id);
+      let painted = false;
+      if (synced && s.status === "loading") {
+        await svc.paintCached(synced);
+        painted = true;
+      }
+      const outcome = await live;
+      // Once painted the page is INTERACTIVE while the live read is on the wire: the visitor may
+      // save, change the quantity or add to cart. Build on the state as it is NOW, and keep what
+      // they did — overwriting it would untick a stored save, reset the quantity, and drop the
+      // in-flight add's `adding` guard (a second tap would add the line twice).
+      const base: S = painted ? (svc.getState() as S) : s;
+      const keep = painted
+        ? { saved: base.saved, saveHint: base.saveHint, quantity: base.quantity, adding: base.adding, added: base.added, cartHint: base.cartHint }
+        : { cartHint: "", quantity: 1 };
+      const badge = (): number => {
+        if (painted && (base.adding || base.added)) return base.cartCount;
+        if (cartKnown !== undefined) return cartKnown;
+        const epoch = cartBadgeEpoch;
+        void cartCount.then((n) => { void svc.setCartCount({ count: n, epoch }); }, () => {});
+        return base.cartCount;
+      };
+      if (outcome.ok) {
+        const p = (outcome.r.product ?? (outcome.r as unknown as StoreProduct)) as StoreProduct;
         const name = cleanTitle(p.name) || "Product";
         const image = productImage(p, WIX_DETAIL_IMAGE);
         lastProduct = p;
@@ -373,7 +416,8 @@ const svc = defineService<S, {
         }
         lastLoadedId = id;
         return derive({
-          ...s,
+          ...base,
+          ...keep,
           status: "ready",
           optionGroups,
           selection: { ...defaultSelection(optionGroups), ...carried },
@@ -385,46 +429,42 @@ const svc = defineService<S, {
           gallery: productGallery(p),
           initial: (name[0] || "#").toUpperCase(),
           shareUrl: productShareUrl(p),
-          cartHint: "",
-          cartCount: await cartItemCount(),
+          cartCount: badge(),
           emptyText: "",
-          quantity: 1,
         });
-      } catch {
-        // Offline: fall back to the last-synced cached product row before the error state.
-        const cached = await readCachedProduct(id);
-        if (cached) {
-          const name = String(cached.name ?? "") || "Product";
-          const image = String(cached.image ?? "");
-          // The cached list row carries no options, and guessing "none" would offer
-          // a one-tap Add to cart for a product that needs a colour and a size. So
-          // the offline detail shows no picker AND marks the options UNKNOWN, which
-          // keeps `optionsIncomplete` true: the CTA stays disabled and `addToCart`
-          // refuses. `cartHint` carries the reason, because the options card is hidden
-          // on `noOptions` and would otherwise leave a dead button unexplained.
-          lastProduct = undefined;
-          lastLoadedId = undefined;
-          return derive({
-            ...s,
-            status: "ready",
-            optionGroups: [],
-            selection: {},
-            optionsUnknown: true,
-            name,
-            price: String(cached.subtitle ?? ""),
-            description: "",
-            image,
-            initial: String(cached.initial ?? "") || (name[0] || "#").toUpperCase(),
-            cartHint: copyParam("product.cartHintOffline", "Reconnect to choose options and add this to your cart."),
-            cartCount: await cartItemCount(),
-            emptyText: "",
-            quantity: 1,
-          });
-        }
+      }
+      // Offline: fall back to the last-synced cached product row before the error state.
+      if (synced) {
+        const name = String(synced.name ?? "") || "Product";
+        const image = String(synced.image ?? "");
+        // The cached list row carries no options, and guessing "none" would offer
+        // a one-tap Add to cart for a product that needs a colour and a size. So
+        // the offline detail shows no picker AND marks the options UNKNOWN, which
+        // keeps `optionsIncomplete` true: the CTA stays disabled and `addToCart`
+        // refuses. `cartHint` carries the reason, because the options card is hidden
+        // on `noOptions` and would otherwise leave a dead button unexplained.
         lastProduct = undefined;
         lastLoadedId = undefined;
-        return derive({ ...s, status: "error", optionGroups: [], selection: {}, optionsUnknown: false, emptyText: copyParam("product.errorText", "Product could not load.") });
+        return derive({
+          ...base,
+          ...keep,
+          status: "ready",
+          optionGroups: [],
+          selection: {},
+          optionsUnknown: true,
+          name,
+          price: String(synced.subtitle ?? ""),
+          description: "",
+          image,
+          initial: String(synced.initial ?? "") || (name[0] || "#").toUpperCase(),
+          cartHint: copyParam("product.cartHintOffline", "Reconnect to choose options and add this to your cart."),
+          cartCount: badge(),
+          emptyText: "",
+        });
       }
+      lastProduct = undefined;
+      lastLoadedId = undefined;
+      return derive({ ...s, status: "error", optionGroups: [], selection: {}, optionsUnknown: false, emptyText: copyParam("product.errorText", "Product could not load.") });
     },
     // The stepper fires onChange with { value } on every tap; clamp 1–99 and
     // ignore unparsable/garbage args instead of silently zeroing the quantity.
@@ -456,8 +496,41 @@ const svc = defineService<S, {
     // settle. Called from addToCart, not from the descriptor.
     beginAdd: (s, arg) => {
       const quantity = parseQuantity(argValue(arg, "quantity")) ?? 1;
+      cartBadgeEpoch += 1;
       return derive({ ...s, adding: true, added: false, cartHint: "", cartCount: s.cartCount + quantity });
     },
+    // The first paint from the list's synced row (called from load, not from the descriptor):
+    // name, price and image are on screen while the live product — description, gallery — loads.
+    // The cart count answered after the product: only the top-bar badge changes.
+    setCartCount: (s, arg) => {
+      // An add since the count was asked for owns the badge — in flight, landed or QUEUED offline
+      // (which leaves adding/added false): a pre-add count must not undo it.
+      const { count, epoch } = (arg ?? {}) as { count?: unknown; epoch?: unknown };
+      if (epoch !== cartBadgeEpoch || s.adding || s.added) return s;
+      const n = Math.max(0, Math.floor(Number(count)));
+      return Number.isFinite(n) ? derive({ ...s, cartCount: n }) : s;
+    },
+    paintCached: (s, arg) => {
+      const row = (arg ?? {}) as DbEntity;
+      const name = String(row.name ?? "") || "Product";
+      return derive({
+        ...s,
+        status: "ready",
+        name,
+        price: String(row.subtitle ?? ""),
+        description: "",
+        image: String(row.image ?? ""),
+        gallery: [],
+        initial: String(row.initial ?? "") || (name[0] || "#").toUpperCase(),
+        // The synced list row carries no options: until the live read says what they are,
+        // they are UNKNOWN, which keeps the CTA disabled — never a one-tap Add to cart for a
+        // product that needs a size. The live read replaces this a moment later.
+        optionGroups: [],
+        optionsUnknown: true,
+        emptyText: "",
+        quantity: 1,
+      });
+    },
     addToCart: async (s) => {
       const id = inputId();
       if (!id) return derive({ ...s, cartHint: copyParam("product.cartHintNoProduct", "No product to add.") });

package/templates/branded-lite/tier5-src/himi-store-product/index.ts

@@ -282,12 +282,18 @@ function derive(s: S): S {
   };
 }
 
+// Bumped by every add (queued, failed or landed): a cart count read BEFORE it — the load's badge
+// read answering late — must not replace the badge the add set (#3468 review).
+let cartBadgeEpoch = 0;
+
 const svc = defineService<S, {
   load: (s: S, arg?: unknown) => Promise<S>;
   setQuantity: (s: S, arg?: unknown) => S;
   selectOption: (s: S, arg?: unknown) => S;
   addToCart: (s: S) => Promise<S>;
   beginAdd: (s: S, arg?: unknown) => S;
+  paintCached: (s: S, arg?: unknown) => S;
+  setCartCount: (s: S, arg?: unknown) => S;
   share: (s: S) => Promise<S>;
   toggleSave: (s: S) => S;
 }>("himiStoreProduct", {
@@ -350,9 +356,46 @@ const svc = defineService<S, {
         lastLoadedId = undefined;
         return derive({ ...s, status: "ready", quantity: 1, optionGroups: [], selection: {}, optionsUnknown: false, emptyText: copyParam("product.notFoundText", "Product not found.") });
       }
-      try {
-        const r = await getStoreProduct(id);
-        const p = (r.product ?? (r as unknown as StoreProduct)) as StoreProduct;
+      // The cart count only feeds the top-bar badge: ask for it NOW, beside the product, instead
+      // of after it — it used to add a whole cart round trip before the page could paint.
+      const cartCount = cartItemCount();
+      // The badge must never hold the page: remember the count if it is already in, and
+      // publish it separately if it lands after the product (#3468 review).
+      let cartKnown: number | undefined;
+      void cartCount.then((n) => { cartKnown = n; }, () => {});
+      // The live product read goes out FIRST too — the local-db read below must never delay it.
+      // Settled into a value so a failure is handled where it is awaited, never unhandled.
+      const live = getStoreProduct(id).then(
+        (r) => ({ ok: true as const, r }),
+        () => ({ ok: false as const }),
+      );
+      // Paint at once from the row the list already synced (name, price, image) — the page used
+      // to sit on its skeleton for the product round trip even when the list had just shown it.
+      // The live read then fills in the description and gallery.
+      const synced = await readCachedProduct(id);
+      let painted = false;
+      if (synced && s.status === "loading") {
+        await svc.paintCached(synced);
+        painted = true;
+      }
+      const outcome = await live;
+      // Once painted the page is INTERACTIVE while the live read is on the wire: the visitor may
+      // save, change the quantity or add to cart. Build on the state as it is NOW, and keep what
+      // they did — overwriting it would untick a stored save, reset the quantity, and drop the
+      // in-flight add's `adding` guard (a second tap would add the line twice).
+      const base: S = painted ? (svc.getState() as S) : s;
+      const keep = painted
+        ? { saved: base.saved, saveHint: base.saveHint, quantity: base.quantity, adding: base.adding, added: base.added, cartHint: base.cartHint }
+        : { cartHint: "", quantity: 1 };
+      const badge = (): number => {
+        if (painted && (base.adding || base.added)) return base.cartCount;
+        if (cartKnown !== undefined) return cartKnown;
+        const epoch = cartBadgeEpoch;
+        void cartCount.then((n) => { void svc.setCartCount({ count: n, epoch }); }, () => {});
+        return base.cartCount;
+      };
+      if (outcome.ok) {
+        const p = (outcome.r.product ?? (outcome.r as unknown as StoreProduct)) as StoreProduct;
         const name = cleanTitle(p.name) || "Product";
         const image = productImage(p, WIX_DETAIL_IMAGE);
         lastProduct = p;
@@ -373,7 +416,8 @@ const svc = defineService<S, {
         }
         lastLoadedId = id;
         return derive({
-          ...s,
+          ...base,
+          ...keep,
           status: "ready",
           optionGroups,
           selection: { ...defaultSelection(optionGroups), ...carried },
@@ -385,46 +429,42 @@ const svc = defineService<S, {
           gallery: productGallery(p),
           initial: (name[0] || "#").toUpperCase(),
           shareUrl: productShareUrl(p),
-          cartHint: "",
-          cartCount: await cartItemCount(),
+          cartCount: badge(),
           emptyText: "",
-          quantity: 1,
         });
-      } catch {
-        // Offline: fall back to the last-synced cached product row before the error state.
-        const cached = await readCachedProduct(id);
-        if (cached) {
-          const name = String(cached.name ?? "") || "Product";
-          const image = String(cached.image ?? "");
-          // The cached list row carries no options, and guessing "none" would offer
-          // a one-tap Add to cart for a product that needs a colour and a size. So
-          // the offline detail shows no picker AND marks the options UNKNOWN, which
-          // keeps `optionsIncomplete` true: the CTA stays disabled and `addToCart`
-          // refuses. `cartHint` carries the reason, because the options card is hidden
-          // on `noOptions` and would otherwise leave a dead button unexplained.
-          lastProduct = undefined;
-          lastLoadedId = undefined;
-          return derive({
-            ...s,
-            status: "ready",
-            optionGroups: [],
-            selection: {},
-            optionsUnknown: true,
-            name,
-            price: String(cached.subtitle ?? ""),
-            description: "",
-            image,
-            initial: String(cached.initial ?? "") || (name[0] || "#").toUpperCase(),
-            cartHint: copyParam("product.cartHintOffline", "Reconnect to choose options and add this to your cart."),
-            cartCount: await cartItemCount(),
-            emptyText: "",
-            quantity: 1,
-          });
-        }
+      }
+      // Offline: fall back to the last-synced cached product row before the error state.
+      if (synced) {
+        const name = String(synced.name ?? "") || "Product";
+        const image = String(synced.image ?? "");
+        // The cached list row carries no options, and guessing "none" would offer
+        // a one-tap Add to cart for a product that needs a colour and a size. So
+        // the offline detail shows no picker AND marks the options UNKNOWN, which
+        // keeps `optionsIncomplete` true: the CTA stays disabled and `addToCart`
+        // refuses. `cartHint` carries the reason, because the options card is hidden
+        // on `noOptions` and would otherwise leave a dead button unexplained.
         lastProduct = undefined;
         lastLoadedId = undefined;
-        return derive({ ...s, status: "error", optionGroups: [], selection: {}, optionsUnknown: false, emptyText: copyParam("product.errorText", "Product could not load.") });
+        return derive({
+          ...base,
+          ...keep,
+          status: "ready",
+          optionGroups: [],
+          selection: {},
+          optionsUnknown: true,
+          name,
+          price: String(synced.subtitle ?? ""),
+          description: "",
+          image,
+          initial: String(synced.initial ?? "") || (name[0] || "#").toUpperCase(),
+          cartHint: copyParam("product.cartHintOffline", "Reconnect to choose options and add this to your cart."),
+          cartCount: badge(),
+          emptyText: "",
+        });
       }
+      lastProduct = undefined;
+      lastLoadedId = undefined;
+      return derive({ ...s, status: "error", optionGroups: [], selection: {}, optionsUnknown: false, emptyText: copyParam("product.errorText", "Product could not load.") });
     },
     // The stepper fires onChange with { value } on every tap; clamp 1–99 and
     // ignore unparsable/garbage args instead of silently zeroing the quantity.
@@ -456,8 +496,41 @@ const svc = defineService<S, {
     // settle. Called from addToCart, not from the descriptor.
     beginAdd: (s, arg) => {
       const quantity = parseQuantity(argValue(arg, "quantity")) ?? 1;
+      cartBadgeEpoch += 1;
       return derive({ ...s, adding: true, added: false, cartHint: "", cartCount: s.cartCount + quantity });
     },
+    // The first paint from the list's synced row (called from load, not from the descriptor):
+    // name, price and image are on screen while the live product — description, gallery — loads.
+    // The cart count answered after the product: only the top-bar badge changes.
+    setCartCount: (s, arg) => {
+      // An add since the count was asked for owns the badge — in flight, landed or QUEUED offline
+      // (which leaves adding/added false): a pre-add count must not undo it.
+      const { count, epoch } = (arg ?? {}) as { count?: unknown; epoch?: unknown };
+      if (epoch !== cartBadgeEpoch || s.adding || s.added) return s;
+      const n = Math.max(0, Math.floor(Number(count)));
+      return Number.isFinite(n) ? derive({ ...s, cartCount: n }) : s;
+    },
+    paintCached: (s, arg) => {
+      const row = (arg ?? {}) as DbEntity;
+      const name = String(row.name ?? "") || "Product";
+      return derive({
+        ...s,
+        status: "ready",
+        name,
+        price: String(row.subtitle ?? ""),
+        description: "",
+        image: String(row.image ?? ""),
+        gallery: [],
+        initial: String(row.initial ?? "") || (name[0] || "#").toUpperCase(),
+        // The synced list row carries no options: until the live read says what they are,
+        // they are UNKNOWN, which keeps the CTA disabled — never a one-tap Add to cart for a
+        // product that needs a size. The live read replaces this a moment later.
+        optionGroups: [],
+        optionsUnknown: true,
+        emptyText: "",
+        quantity: 1,
+      });
+    },
     addToCart: async (s) => {
       const id = inputId();
       if (!id) return derive({ ...s, cartHint: copyParam("product.cartHintNoProduct", "No product to add.") });