@wix/himalaya-cli 0.1130.0 → 0.1131.0

package/dist/cli.mjs

@@ -24749,6 +24749,7 @@ function shouldRevealError(args) {
 var EMAIL_RE, URL_HOST_RE, INTEGER_RE, NUMBER_RE;
 var init_validation = __esm({
   "../../core/ts/src/validation.ts"() {
+    "use strict";
     EMAIL_RE = /^[A-Za-z0-9._%+-]+@[A-Za-z0-9-]+(\.[A-Za-z0-9-]+)*\.[A-Za-z]{2,}$/;
     URL_HOST_RE = /^[A-Za-z0-9-]+(\.[A-Za-z0-9-]+)*(:[0-9]+)?$/;
     INTEGER_RE = /^[+-]?[0-9]+$/;
@@ -29149,6 +29150,7 @@ function validateWorkerSubtree(raw, slotId, policy, actionCatalog) {
 var WORKER_SUBTREE_CEILINGS, ID_PART, ACTION_ID;
 var init_worker_subtree = __esm({
   "../../core/ts/src/worker-subtree.ts"() {
+    "use strict";
     init_worker_subtree_safe_types_generated();
     WORKER_SUBTREE_CEILINGS = Object.freeze({
       maxEncodedBytes: 65536,
@@ -43143,7 +43145,7 @@ async function crawlScreenInner(opts) {
         severity: "error",
         ...source ? { source } : {},
         message: `${e.service}: ${e.message}`,
-        hint: isTransportReject(e.message) ? `the worker let the transport rejection escape instead of handling it \u2014 catch it and set an error state, or crawl with a net fixture (--net)` : /Cannot read properties of|is not a function|undefined is not/.test(e.message) ? `a TypeError on a property read is usually a WRONG REFERENCE, not a failed fetch \u2014 check the receiver first (classic: \`svc.actions.<x>(\u2026)\` \u2014 actions are DIRECT methods on the handle, \`.actions\` is undefined on device; or indexing into a possibly-empty list). Wrapping a wrong reference in try/catch silences the crash but leaves the control dead.` : `an uncaught throw here leaves the screen on whatever state it had \u2014 wrap the failing call and set an error state`
+        hint: isTransportReject(e.message) ? `the worker let the transport rejection escape instead of handling it \u2014 catch it and set an error state, or crawl with a net fixture (--net)` : e.argless && /Cannot destructure/.test(e.message) ? `the crawl dispatched this action with NO payload \u2014 it only types a value it can read off the app (docs/himi-test.md \u2192 Typed form journeys), so a field hook it cannot aim arrives with no argument. A device always sends the control's payload key, but a reducer should still tolerate a bare call: default the payload parameter (\`(s, { value } = {}) => \u2026\`), or add a himi-test.json journey that types a real value.` : /Cannot read properties of|is not a function|undefined is not/.test(e.message) ? `a TypeError on a property read is usually a WRONG REFERENCE, not a failed fetch \u2014 check the receiver first (classic: \`svc.actions.<x>(\u2026)\` \u2014 actions are DIRECT methods on the handle, \`.actions\` is undefined on device; or indexing into a possibly-empty list). Wrapping a wrong reference in try/catch silences the crash but leaves the control dead.` : `an uncaught throw here leaves the screen on whatever state it had \u2014 wrap the failing call and set an error state`
       });
     }
     for (const [svc, s] of Object.entries(state)) {
@@ -43357,7 +43359,7 @@ async function crawlScreenInner(opts) {
       try {
         await handle.dispatch(parsed.action, ...workerArgs(dispatched));
       } catch (e) {
-        errors.push({ service: parsed.service, message: `${parsed.action}: ${errText(e)}`, ...e.stack ? { stack: e.stack } : {} });
+        errors.push({ service: parsed.service, message: `${parsed.action}: ${errText(e)}`, ...e.stack ? { stack: e.stack } : {}, argless: workerArgs(dispatched).length === 0 });
       }
       exercised += 1;
       const { state, defects } = snapshot(w);
@@ -73095,6 +73097,35 @@ Transport: same targets/tokens as himi-serve \u2014 --target <local|prod|bo>, --
 --telemetry-url, --control-token/--telemetry-token, or HIMI_* env.
 Guides: ${DEVELOPER_PORTAL_URL}`;
 var ONLY_USAGE = "himi push --only <selector>[,<selector>\u2026] (--draft|--live) [--from-release <id>] [--accept-regressions] [--accept-partial]";
+var LOGIN_HELP = `himi login \u2014 get a scoped serve-control token and store it in
+             ~/.himalaya/serve-targets.json, so push / promote / preview need no pasted token.
+
+  himi login [--browser | --wix | --dpx] [--target <t>] [--no-open]
+
+MODES \u2014 pick by who is at the keyboard
+  --browser   YOUR OWN Wix account, in a browser. No VPN, no BO. The DEFAULT when the target
+              has no BO issuer, which is the \`wix\` target \u2014 and \`wix\` is the default target
+              off-repo, so a bare \`himi login\` there is this mode. --no-open prints the URL
+              instead of opening it (a headless shell).
+  --wix       HEADLESS. Uses the machine's EXISTING Wix CLI credential (\`wix login\`, or
+              \`wix login --api-key\` in a pod) \u2014 the mode a CI job or an agent container can
+              satisfy. It does not create a credential; log the Wix CLI in first.
+  --dpx       Wix EMPLOYEE. Reads the BO session at ~/.dpx/session/token (dpx 2.x:
+              \`dpx auth login\` then \`dpx auth token > ~/.dpx/session/token\`). Internal
+              targets only (--target bo); VPN-gated.
+
+TARGET
+  --target <t>   which serve plane the token is for. Resolved like every other command:
+                 --target, then HIMI_SERVE_TARGET, then serve-targets.json \`default\`, then
+                 \`wix\` off-repo. Log in to the SAME target you push to \u2014 a token is stored
+                 per target, and a push to another one will not find it.
+
+CHECK IT
+  himi doctor          which login modes would work on this machine, before you try one
+  himi whoami          what the stored token is scoped to
+
+OTHER
+  --issue-url <url>, --owner-issue-url <url>   override the issuer (advanced / tests)`;
 var PATCH_HELP = `himi patch \u2014 change ONE item of a published app, from a raw file, on a machine
              that does not have the content package.
 
@@ -74985,7 +75016,7 @@ async function runCommand(argv, io, deps) {
     io.log(flags.json ? JSON.stringify({ himi: v }, null, 2) : `himi v${v}`);
     return 0;
   }
-  const VERB_HELP = /* @__PURE__ */ new Set(["patch"]);
+  const VERB_HELP = /* @__PURE__ */ new Set(["patch", "login"]);
   if (!command || command === "help" || flags.help === true && !VERB_HELP.has(command)) {
     const footer = `
 
@@ -79681,6 +79712,10 @@ ${label2}`);
         return allOk ? 0 : 1;
       }
       case "login": {
+        if (flags.help === true) {
+          io.log(LOGIN_HELP);
+          return 0;
+        }
         const target = targetName();
         const prevControlToken = loadTargetsFile().targets?.[target]?.controlToken;
         let issue2;

package/guides/counter.service.ts

@@ -10,7 +10,7 @@
 // examples/counter-t5.descriptor.json (its logicBundle.integrity is the SRI of the
 // built bundle). Authoritative bundle-authoring doc: docs/tier-5-add-a-screen.md.
 
-import { defineService } from "@himalaya/state";
+import { defineService } from "@wix/himalaya/state";
 
 interface CounterState {
   value: number;

package/guides/designing-himi-screens.md

@@ -183,8 +183,10 @@ cells inside a `Card([VStack(spacing: 0)])`.
 > horizontal rail) where its own virtualized scroll is what you want.
 
 **Text** — `Text` for a single styled string (`maxLines` to truncate); `RichText` for inline mixed
-marks (bold/italic/link within one paragraph); `Label` for an icon+text pair; `Marquee` only for
-genuinely scrolling text. *Reach for `RichText`, not concatenated `Text`, when marks vary mid-line.*
+marks (bold/italic/link within one paragraph); `RichContent` for a Wix Ricos document with blocks,
+media, lists, or tables; `Label` for an icon+text pair; `Marquee` only for genuinely scrolling text.
+*Reach for `RichText`, not concatenated `Text`, when marks vary mid-line; use `RichContent` for
+long-form Ricos content rather than flattening it into text rows.*
 
 **Inputs & forms** — field controls: `TextField` (with `keyboard`/`autoCapitalization`/`secure`),
 `SearchField`, `Toggle`, `Stepper`, `Slider`, `SelectionControl` (checkbox/radio),
@@ -279,7 +281,7 @@ Concrete patterns lifted from real usage:
 - **Cell list** — `card([ vstack({ spacing: 0, alignment: "leading", children: [ …ListItem cells… ] }) ])`. `spacing: 0` because the cells own their own dividers/padding.
 - **Overlay** — `zstack({ alignment: "center", children: [ backdropImage(cornerRadius 12), withModifiers(label, { padding, background: { token: "accentPrimary" }, cornerRadius: 10 }) ] })`.
 - **Responsive** — `grid({ columns: 1, columnsMedium: 2, spacing: 12 })` for 1-up on phone / 2-up on tablet; `splitView({ primary, detail, primaryMaxWidth: 280 })` for master/detail that stacks on a phone; set `contentMaxWidth` in tokens so wide surfaces keep a readable column instead of running edge-to-edge.
-- **Centered separator, not a flanked divider** — the classic "—— or ——" needs each `divider()` to take equal remaining width, and the HStack row-share only kicks in for controls with an intrinsic fill (a bare `divider()` inside an HStack collapses to a tick). Use a **centered caption** instead: `hstack({ children: [spacer(), text("or continue with", "caption", { color: "textSecondary" }), spacer()] })`, optionally over a single full-width `divider()`.
+- **Centered separator, not a flanked divider** — the classic "—— or ——" needs each `divider()` to take equal remaining width, and the HStack row-share only kicks in for controls with an intrinsic fill. **Never put a bare `divider()` inside an HStack**: it is a horizontal rule on every surface, and on web and Android it claims the row's full width and squeezes its siblings (a stat row's `12` wraps to `1`/`2`); only iOS draws a thin vertical line. For a stats row, separate the columns with `spacer()`s or spacing instead. Use a **centered caption** instead: `hstack({ children: [spacer(), text("or continue with", "caption", { color: "textSecondary" }), spacer()] })`, optionally over a single full-width `divider()`.
 
 > **Intrinsic-fill controls grab the row.** `Button` and `TextField` have an intrinsic FILL, so the next four idioms are about NOT letting that surprise you (they were the papercuts every off-repo app hit):
 

package/guides/dynamic-list.service.ts

@@ -10,8 +10,8 @@
 // Because this worker rides the Wix transport (globalThis.himalaya.wixApi), the
 // descriptor's logicBundle.declaredCapabilities MUST include "wix_api" (RFC 0043 D4).
 
-import { defineService } from "@himalaya/state";
-import { productPrice, queryStoreProducts, type StoreProduct } from "@himalaya/wix-stores";
+import { defineService } from "@wix/himalaya/state";
+import { productPrice, queryStoreProducts, type StoreProduct } from "@wix/himalaya/wix-stores";
 
 // FLAT strings only — the row template binds `$item.name`, never `$item.priceData.…`.
 // All shaping happens here in normalize(), not at the binding site.

package/guides/form-submit.service.ts

@@ -11,8 +11,8 @@
 // The write rides the Wix transport → the descriptor's logicBundle MUST declare
 // "wix_api" (RFC 0043 D4).
 
-import { defineService } from "@himalaya/state";
-import { createDraftPost, type WixDraftPostWrite, type WixRichContent } from "@himalaya/wix-blog";
+import { defineService } from "@wix/himalaya/state";
+import { createDraftPost, type WixDraftPostWrite, type WixRichContent } from "@wix/himalaya/wix-blog";
 
 interface PostFormState {
   // Prefill values — what the fields SHOW (edit mode / echo after save). The

package/guides/himi-test.md

@@ -73,6 +73,14 @@ the payload contract names. A `Slider`, `Stepper`, `Toggle` or `DatePicker` has
 those still dispatch with the descriptor's default (often empty) value, and the gap ledger says so
 per screen.
 
+**An argless dispatch carries no payload at all.** When the descriptor's own `params`/`args` are
+empty and the crawl has nothing to type, it calls the reducer with **no argument** — the same
+calling convention the host uses for an empty payload. A device always sends the control's payload
+key (`value` for a field's `onChange`), but a reducer written `(s, { value }) => …` throws
+`Cannot destructure property 'value' of 'undefined'` under the crawl. That `worker-threw` is a real
+catch, not a crawl bug, and its hint says so: default the parameter (`(s, { value } = {}) => …`,
+or read `p?.value`), or add a journey below that types a real value.
+
 For a flow where the real proof is **typed value → submit → visible completion** — several fields,
 in order, ending in a rendered result — add a short screen-local journey to `himi-test.json`:
 

package/guides/onboarding.service.ts

@@ -9,7 +9,7 @@
 // hosts expose globalThis.himalaya.storage, web falls back to localStorage,
 // and a missing/failing store just means the card shows again next launch.
 
-import { defineService } from "@himalaya/state";
+import { defineService } from "@wix/himalaya/state";
 
 const ONBOARDING_KEY = "myapp.onboarded";
 

package/guides/search-list.service.ts

@@ -9,8 +9,8 @@
 // Builds on the dynamic-list recipe (worker owns the array, four-state display
 // strings) — see examples/dynamic-list.* for that base. Declares "wix_api".
 
-import { defineService } from "@himalaya/state";
-import { queryPosts, type WixPost } from "@himalaya/wix-blog";
+import { defineService } from "@wix/himalaya/state";
+import { queryPosts, type WixPost } from "@wix/himalaya/wix-blog";
 
 interface PostRow {
   id: string;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@wix/himalaya-cli",
-  "version": "0.1130.0",
+  "version": "0.1131.0",
   "type": "module",
   "description": "himi — the Himalaya authoring CLI. Build a Tier-5 content package on your own machine, push it to the production serve as a draft, preview it on web + Himi Player, and read worker logs back — the remote dev loop. Wraps @himalaya/serve-cli for transport.",
   "keywords": [
@@ -67,5 +67,5 @@
       "artifactId": "himalaya-cli"
     }
   },
-  "falconPackageHash": "8340fceb4deeef12cc58c6969904b2b33ae4c90a5923c20cef72d267"
+  "falconPackageHash": "4920f7f92ed5d3cccc334bbc8ff870b7299ebb01377a75b9829788cd"
 }