@wix/himalaya-cli 0.1151.0 → 0.1153.0

package/dist/authoring-runtime/node_modules/@wix/himalaya/dist/_types/stdlib/wix-sdk/bookings-v2/src/extensions.d.ts

@@ -21,6 +21,8 @@ export interface WixServicePayment {
 }
 export interface WixService {
     id: string;
+    /** Optimistic-concurrency token — required by every v2 write (updateService reads it if omitted). */
+    revision?: string;
     name?: string;
     description?: string;
     /** Session length in minutes. */
@@ -84,13 +86,34 @@ export interface WixGetServiceResponse {
 /** Fetch a single service by id — GET /bookings/v2/services/{id}. Visitor-readable
  *  (public GA route, not the owner `_api/` gateway). The detail/edit-prefill source. */
 export declare function getService(serviceId: string): Promise<WixGetServiceResponse>;
-/** Writable service fields for create/update. `name` + `duration` are required on create. */
+/** Writable service fields for create/update, in the ERGONOMIC shape a form has. The helpers
+ *  below encode it onto the Bookings v2 entity — they never send these flat fields as-is,
+ *  because v2 silently ignores a flat `price`/`duration` (HTTP 200, revision bumps, nothing
+ *  written: #3605, verified live 2026-10-01).
+ *  - `price` → `payment.fixed.price.{value,currency}` (value is a decimal STRING), merged
+ *    with the service's existing `payment` so `payment.options` (mandatory: online and/or
+ *    in-person) and the currency carry over.
+ *  - `duration` (minutes) → `schedule.availabilityConstraints.{durations,sessionDurations}`. */
 export interface WixServiceWrite {
     name?: string;
     description?: string;
     /** Session length in minutes; required, > 0 on create. */
     duration?: number;
+    /** Fixed price as a number (e.g. 120). Encoded onto `payment.fixed.price`. */
     price?: number;
+    /** ISO currency for `price`. Defaults to the service's current currency on update; required on create with a price. */
+    currency?: string;
+    /** Resource ids of the staff who deliver it (`queryStaff()` → `id`). An APPOINTMENT service needs ≥1;
+     *  createService defaults to the site's `defaultStaff` resource when omitted. NOT staff-member ids. */
+    staffMemberIds?: string[];
+    /** v2 service type; createService defaults to "APPOINTMENT". */
+    type?: "APPOINTMENT" | "CLASS" | "COURSE";
+    onlineBooking?: {
+        enabled?: boolean;
+    };
+    /** Raw v2 payment object — wins over `price`/`currency` when both are given. */
+    payment?: Record<string, unknown>;
+    /** @deprecated v1 only — v2 services carry `category.id`; ignored by create/update. */
     category?: string;
 }
 export interface WixCreateServiceRequest {
@@ -107,7 +130,15 @@ export interface WixUpdateServiceResponse {
 }
 export interface WixDeleteServiceResponse {
 }
-/** Create a service — POST /bookings/v1/services. `name`, `duration` are required. */
+/** Encode an ergonomic write onto the v2 service entity. `existing` (the current service, for
+ *  an update) supplies the currency and `payment.options` a price change must carry. Exported
+ *  for tests; throws instead of sending a payload Bookings would accept and then ignore. */
+export declare function encodeServiceWrite(write: WixServiceWrite, existing?: WixService): Record<string, unknown>;
+/** Create a service — POST /bookings/v2/services (the v1 route 400s for a v2 site: #3605).
+ *  `name` + `duration` are required. Defaults: type APPOINTMENT, online booking on, and the
+ *  site's `defaultStaff` resource when `staffMemberIds` is omitted (an APPOINTMENT service
+ *  400s MISSING_APPOINTMENT_RESOURCES without one), and — for a `price` without `currency` —
+ *  the currency the site's existing services use. */
 export declare function createService(service: WixServiceWrite): Promise<WixCreateServiceResponse>;
 export declare function updateService(serviceId: string, service: WixServiceWrite & {
     revision?: string;

package/dist/authoring-runtime/node_modules/@wix/himalaya/dist/_types/stdlib/wix-sdk/wix-data/src/index.d.ts

@@ -15,12 +15,17 @@ export interface WixDataPaging {
     limit?: number;
     offset?: number;
 }
+/** One sort key — `{ fieldName: "postedDate", order: "DESC" }`. Keys apply in array order. */
+export interface WixDataSort {
+    fieldName: string;
+    order?: "ASC" | "DESC";
+}
 export interface WixQueryDataItemsRequest {
     dataCollectionId: string;
     query?: {
         filter?: Record<string, unknown>;
         paging?: WixDataPaging;
-        sort?: unknown[];
+        sort?: WixDataSort[];
     };
     /** When true, `pagingMetadata.total` is filled (offset paging only). Default omitted. */
     returnTotalCount?: boolean;
@@ -72,9 +77,16 @@ export interface WixUpdateDataItemRequest {
  *  const rest  = await queryDataItems("Listings", 50, undefined, false, 50);
  *  ```
  *
+ *  `sort` orders server-side, so "newest first" is one call instead of fetching every row
+ *  and sorting on the client (which also breaks once the collection outgrows `limit`):
+ *
+ *  ```ts
+ *  await queryDataItems("Jobs", 1, undefined, false, 0, [{ fieldName: "postedDate", order: "DESC" }]);
+ *  ```
+ *
  *  To read ONE row, use `getDataItem` rather than a page plus a client-side
  *  `.find()` — that pattern breaks silently once the collection outgrows `limit`. */
-export declare function queryDataItems(dataCollectionId: string, limit?: number, filter?: Record<string, unknown>, returnTotalCount?: boolean, offset?: number): Promise<WixQueryDataItemsResponse>;
+export declare function queryDataItems(dataCollectionId: string, limit?: number, filter?: Record<string, unknown>, returnTotalCount?: boolean, offset?: number, sort?: WixDataSort[]): Promise<WixQueryDataItemsResponse>;
 /** Read ONE item by id — GET /wix-data/v2/items/{dataItemId}?dataCollectionId=…
  *
  *  Reach for this on a detail screen. Before it existed the only read this package

package/dist/authoring-runtime/node_modules/@wix/himalaya/dist/wix-bookings.mjs

@@ -23,12 +23,77 @@ async function getService(serviceId) {
   const res = await wixCall("GET", `/bookings/v2/services/${serviceId}`);
   return { ...res, service: decodeService(res.service) };
 }
-function createService(service) {
-  return wixCall("POST", "/bookings/v1/services", { service });
+function encodeServiceWrite(write, existing) {
+  const { price, currency, duration, payment, category: _legacyCategory, ...rest } = write;
+  const out = { ...rest };
+  if (payment) {
+    out.payment = payment;
+  } else if (price != null) {
+    if (!Number.isFinite(price) || price < 0) throw new Error(`Bookings service price must be a number >= 0 (got ${price})`);
+    const prior = existing?.payment ?? {};
+    const cur = currency ?? prior.fixed?.price?.currency ?? prior.rateLabel?.currency ?? prior.currency;
+    if (!cur) throw new Error('Bookings service price needs a currency: pass `currency` (e.g. "USD") \u2014 the service has none to inherit');
+    const options = prior.options;
+    const { price: _flat, currency: _flatCur, ...priorRest } = prior;
+    out.payment = {
+      ...priorRest,
+      rateType: "FIXED",
+      fixed: { price: { value: String(price), currency: cur } },
+      // v2 400s unless online or inPerson is true; keep the service's own choice when it has one.
+      options: options && (options.online || options.inPerson) ? options : { ...options ?? {}, online: true }
+    };
+  }
+  if (duration != null) {
+    if (!Number.isFinite(duration) || duration <= 0) throw new Error(`Bookings service duration must be > 0 minutes (got ${duration})`);
+    out.schedule = { availabilityConstraints: { durations: [{ minutes: duration }], sessionDurations: [duration] } };
+  }
+  return out;
+}
+async function siteServiceCurrency() {
+  const PAGE = 100;
+  for (let offset = 0; offset < 500; offset += PAGE) {
+    const { services, pagingMetadata } = await queryServices({ query: { paging: { limit: PAGE, offset } } });
+    for (const x of services) {
+      const p = x.payment;
+      const cur = p?.fixed?.price?.currency ?? p?.varied?.defaultPrice?.currency ?? p?.varied?.minPrice?.currency ?? p?.varied?.maxPrice?.currency ?? p?.subscription?.amountPerBillingCycle?.currency ?? p?.subscription?.enrollmentFeeAmount?.currency ?? p?.rateLabel?.currency ?? p?.currency;
+      if (cur) return cur;
+    }
+    const meta = pagingMetadata;
+    if (services.length < PAGE || meta?.hasNext === false) return void 0;
+  }
+  return void 0;
 }
-function updateService(serviceId, service) {
+async function createService(service) {
+  if (!service?.name) throw new Error("createService: name is required");
+  if (service.duration == null) throw new Error("createService: duration (minutes) is required");
+  const type = service.type ?? "APPOINTMENT";
+  let staffMemberIds = service.staffMemberIds;
+  if (type === "APPOINTMENT" && !staffMemberIds?.length) {
+    const staff = await queryStaff();
+    const pick = staff.find((r) => (r.tags ?? []).includes("defaultStaff")) ?? staff[0];
+    if (!pick?.id) throw new Error("createService: an APPOINTMENT service needs a staff member, and this site has none \u2014 add staff in Bookings, or pass staffMemberIds (resource ids from queryStaff())");
+    staffMemberIds = [pick.id];
+  }
+  let currency = service.currency;
+  if (service.price != null && !service.payment && !currency) currency = await siteServiceCurrency();
+  const body = encodeServiceWrite({ ...service, type, ...currency ? { currency } : {}, ...staffMemberIds ? { staffMemberIds } : {} });
+  if (!body.payment) body.payment = { rateType: "NO_FEE", options: { inPerson: true } };
+  const res = await wixCall("POST", "/bookings/v2/services", {
+    service: { onlineBooking: { enabled: true }, ...body }
+  });
+  return { ...res, service: decodeService(res.service) };
+}
+async function updateService(serviceId, service) {
   if (!serviceId) throw new Error("updateService: serviceId is required");
-  return wixCall("PATCH", `/bookings/v2/services/${serviceId}`, { service: { id: serviceId, ...service } });
+  const { revision, ...write } = service;
+  const needsCurrent = !revision || write.price != null && !write.payment;
+  const current = needsCurrent ? (await getService(serviceId)).service : void 0;
+  const rev = revision ?? current?.revision;
+  if (!rev) throw new Error(`updateService: could not read the current revision of service ${serviceId}`);
+  const res = await wixCall("PATCH", `/bookings/v2/services/${serviceId}`, {
+    service: { id: serviceId, revision: rev, ...encodeServiceWrite(write, current) }
+  });
+  return { ...res, service: decodeService(res.service) };
 }
 function confirmBooking(bookingId, revision) {
   if (!bookingId || !revision) throw new Error("confirmBooking: bookingId + revision required");
@@ -198,7 +263,7 @@ function deleteService(serviceId, opts) {
   if (!serviceId) throw new Error("deleteService: serviceId is required");
   return wixCall(
     "DELETE",
-    `/bookings/v1/services/${encodeURIComponent(serviceId)}`,
+    `/bookings/v2/services/${encodeURIComponent(serviceId)}`,
     void 0,
     opts
   );
@@ -213,6 +278,7 @@ export {
   declineBooking,
   decodeService,
   deleteService,
+  encodeServiceWrite,
   getBooking,
   getBookingFull,
   getService,

package/dist/authoring-runtime/node_modules/@wix/himalaya/dist/wix-data.mjs

@@ -7,7 +7,7 @@ function wixCall(method, path, body) {
   }
   return globalThis.himalaya.wixApi.call(method, path, body);
 }
-function queryDataItems(dataCollectionId, limit = 50, filter, returnTotalCount = false, offset = 0) {
+function queryDataItems(dataCollectionId, limit = 50, filter, returnTotalCount = false, offset = 0, sort) {
   if (!dataCollectionId) throw new Error("queryDataItems: dataCollectionId is required");
   const body = {
     dataCollectionId,
@@ -15,7 +15,8 @@ function queryDataItems(dataCollectionId, limit = 50, filter, returnTotalCount =
       // `offset` is omitted when 0 so a caller that does not page sends the byte-identical
       // body it sent before this parameter existed.
       paging: { limit, ...offset ? { offset } : {} },
-      ...filter ? { filter } : {}
+      ...filter ? { filter } : {},
+      ...sort?.length ? { sort: sort.map((k) => ({ fieldName: k.fieldName, order: k.order ?? "ASC" })) } : {}
     },
     ...returnTotalCount ? { returnTotalCount: true } : {}
   };

package/dist/cli.mjs

@@ -6765,7 +6765,6 @@ function walk(node, registry, path2, out2) {
 var SYSTEM_FONT_FAMILY, TONAL_ELEVATION_ALPHA;
 var init_tokens = __esm({
   "../../core/ts/src/tokens.ts"() {
-    "use strict";
     SYSTEM_FONT_FAMILY = "$system";
     TONAL_ELEVATION_ALPHA = [0, 0.05, 0.08, 0.11, 0.12, 0.14];
   }
@@ -6792,7 +6791,6 @@ function resolveTranslation(value, catalog, sourceCatalog) {
 var BINDING_SIGILS, BINDING_SIGIL_RE, TRANSLATION_PREFIX, TRANSLATION_KEY_RE;
 var init_bindings = __esm({
   "../../core/ts/src/bindings.ts"() {
-    "use strict";
     BINDING_SIGILS = ["service", "flag", "item", "t"];
     BINDING_SIGIL_RE = new RegExp(
       `^\\$(?:${BINDING_SIGILS.filter((s) => s !== "t").join("|")})\\b|^\\$t:`
@@ -21566,6 +21564,7 @@ __export(template_adopt_exports, {
   ADOPT_MATRIX_FILE: () => ADOPT_MATRIX_FILE,
   JOURNEY_STUB_FILE: () => JOURNEY_STUB_FILE,
   PLACEHOLDER: () => PLACEHOLDER,
+  addScreen: () => addScreen,
   classifyAction: () => classifyAction,
   copyHits: () => copyHits,
   droppedPrimaryTaps: () => droppedPrimaryTaps,
@@ -21832,7 +21831,7 @@ function inventorySummary(inv) {
 function writeNoFollow(dir, rel, body) {
   const p = join34(dir, rel);
   const parent = dirname20(p);
-  if (existsSync32(parent) && lstatSync8(parent).isSymbolicLink()) throw new TrimRefusal(`${dirname20(rel)} is a symlink \u2014 refusing to write the adoption inventory through it`);
+  if (existsSync32(parent) && lstatSync8(parent).isSymbolicLink()) throw new TrimRefusal(`${dirname20(rel)} is a symlink \u2014 refusing to write through it`);
   mkdirSync17(parent, { recursive: true });
   if (existsSync32(p) && lstatSync8(p).isSymbolicLink()) throw new TrimRefusal(`${rel} is a symlink \u2014 refusing to write through it`);
   const tmp = `${p}.${process.pid}.${Date.now()}.tmp`;
@@ -21890,6 +21889,50 @@ function replaceScreen(dir, id, entry) {
   writeFileSync15(devPath, next);
   return { ok: true, screen: id, bytes: body.length };
 }
+function addScreen(dir, id, entry, opts = {}) {
+  if (!/^[a-z][a-z0-9_]*$/.test(id)) throw new TrimRefusal(`screen id "${id}" must be lowercase snake_case (e.g. himi_sellers)`);
+  const src = readAppSources(dir);
+  const app = parseApp(src.dev, src.config);
+  if (findRoute(app, id)) throw new TrimRefusal(`"${id}" already exists \u2014 edit it with \`himi template screens --write ${id} --from <file>\``);
+  const lastScreen = [...app.routes].filter((r) => r.kind === "screen").sort((a, b) => b.end - a.end)[0];
+  if (!lastScreen) throw new TrimRefusal("dev/index.ts has no SCREENS entry to add after");
+  const body = entry.endsWith("\n") ? entry : `${entry}
+`;
+  const dev = src.dev.slice(0, lastScreen.end) + body + src.dev.slice(lastScreen.end);
+  const nav = JSON.parse(JSON.stringify(app.nav.value));
+  if (nav.linkableScreens === void 0) nav.linkableScreens = [];
+  if (!Array.isArray(nav.linkableScreens)) throw new TrimRefusal("config.ts navigation.linkableScreens is not an array \u2014 fix it before adding a screen");
+  const linkable = true;
+  if (!nav.linkableScreens.some((l) => l.screenId === id)) {
+    const parent = opts.parent ? nav.linkableScreens.find((l) => l.screenId === opts.parent) : void 0;
+    if (opts.parent && !parent) throw new TrimRefusal(`--parent "${opts.parent}" is not a linkable screen in config.ts`);
+    nav.linkableScreens.push({
+      screenId: id,
+      isPublic: true,
+      paramKeys: [],
+      parentScreenId: opts.parent ?? "",
+      tabId: opts.tab ?? (typeof parent?.tabId === "string" ? parent.tabId : "")
+    });
+  }
+  const config = linkable ? src.config.slice(0, app.nav.open) + serializeAt(nav, src.config, app.nav.open) + src.config.slice(app.nav.close) : src.config;
+  let reparsed;
+  try {
+    reparsed = parseApp(dev, config);
+  } catch (e) {
+    throw new TrimRefusal(`the new entry does not parse, nothing written: ${e.message}`);
+  }
+  if (!findRoute(reparsed, id)) throw new TrimRefusal(`the entry does not declare "${id}" (its key and "screenId" must both be "${id}") \u2014 nothing written`);
+  if (reparsed.routes.length !== app.routes.length + 1) {
+    throw new TrimRefusal(`the entry changed the screen count by ${reparsed.routes.length - app.routes.length}, not 1; add one screen at a time \u2014 nothing written`);
+  }
+  for (const rel of ["dev", "dev/index.ts", ...config !== src.config ? ["config.ts"] : []]) {
+    const p = join34(dir, rel);
+    if (existsSync32(p) && lstatSync8(p).isSymbolicLink()) throw new TrimRefusal(`${rel} is a symlink \u2014 refusing to write through it (nothing written)`);
+  }
+  writeNoFollow(dir, "dev/index.ts", dev);
+  if (config !== src.config) writeNoFollow(dir, "config.ts", config);
+  return { ok: true, screen: id, bytes: body.length, linkable };
+}
 function specScreens(spec) {
   const body = spec.replace(/<!--[\s\S]*?(?:-->|$)/g, "");
   const m = /(?:^|\n)##[ \t]+Screen catalogue\b[^\n]*([\s\S]*?)(?=\n##[ \t]|$)/i.exec(body);
@@ -21930,6 +21973,7 @@ var ADOPT_FILE, JOURNEY_STUB_FILE, ADOPT_MATRIX_FILE, WIX_MODULE, RELATIVE_IMPOR
 var init_template_adopt = __esm({
   "src/template-adopt.ts"() {
     init_template_trim();
+    init_home_descriptor();
     ADOPT_FILE = ".himi/adopt.json";
     JOURNEY_STUB_FILE = ".himi/himi-test.stub.json";
     ADOPT_MATRIX_FILE = ".himi/adopt-matrix.md";
@@ -23592,7 +23636,6 @@ function shouldRevealError(args) {
 var EMAIL_RE, URL_HOST_RE, INTEGER_RE, NUMBER_RE;
 var init_validation = __esm({
   "../../core/ts/src/validation.ts"() {
-    "use strict";
     EMAIL_RE = /^[A-Za-z0-9._%+-]+@[A-Za-z0-9-]+(\.[A-Za-z0-9-]+)*\.[A-Za-z]{2,}$/;
     URL_HOST_RE = /^[A-Za-z0-9-]+(\.[A-Za-z0-9-]+)*(:[0-9]+)?$/;
     INTEGER_RE = /^[+-]?[0-9]+$/;
@@ -24252,7 +24295,6 @@ function validateWorkerSubtree(raw, slotId, policy, actionCatalog) {
 var WORKER_SUBTREE_CEILINGS, ID_PART, ACTION_ID;
 var init_worker_subtree = __esm({
   "../../core/ts/src/worker-subtree.ts"() {
-    "use strict";
     init_worker_subtree_safe_types_generated();
     WORKER_SUBTREE_CEILINGS = Object.freeze({
       maxEncodedBytes: 65536,
@@ -38729,7 +38771,6 @@ var init_wix_cache_defaults_generated = __esm({
       { method: "DELETE", pathPrefix: "/blog/v3/posts", cacheable: false, ttl: 0, swr: 0, tag: "blog" },
       { method: "PATCH", pathPrefix: "/blog/v3/posts", cacheable: false, ttl: 0, swr: 0, tag: "blog" },
       { method: "POST", pathPrefix: "/blog/v3/posts", cacheable: false, ttl: 0, swr: 0, tag: "blog" },
-      { method: "DELETE", pathPrefix: "/bookings/v1/services", cacheable: false, ttl: 0, swr: 0, tag: "bookings/services" },
       { method: "POST", pathPrefix: "/bookings/v1/services", cacheable: false, ttl: 0, swr: 0, tag: "bookings/services" },
       { method: "PUT", pathPrefix: "/bookings/v1/services", cacheable: false, ttl: 0, swr: 0, tag: "bookings/services" },
       { method: "DELETE", pathPrefix: "/bookings/v2/services", cacheable: false, ttl: 0, swr: 0, tag: "bookings/services" },
@@ -46605,7 +46646,37 @@ function countingWixCall(base) {
 }
 async function liveRenderServices(bundleJs, opts) {
   const bus = hostDispatch(opts.localDbSchema, declaredCapabilitiesOf(opts.descriptor));
-  return loadBundleServicesLive(bundleJs, {
+  const appear = rootOnAppear(opts.descriptor);
+  const fired = appear ? parseWorkerAction(appear.actionId) : null;
+  if (fired) {
+    const w = await bootBundleWorker(bundleJs, { ...liveBootOptions(opts, bus), skipLoad: true });
+    try {
+      const handle = w.handles[fired.service];
+      if (handle && handle.actionNames().includes(fired.action)) {
+        try {
+          await handle.dispatch(fired.action, ...workerArgs(appear));
+        } catch (e) {
+          w.errors.push({ service: fired.service, message: `onAppear ${fired.action}: ${e?.message ?? String(e)}` });
+        }
+      } else {
+        for (const [service, h] of Object.entries(w.handles)) {
+          if (!h.actionNames().includes("load")) continue;
+          try {
+            await h.dispatch("load");
+          } catch (e) {
+            w.errors.push({ service, message: e?.message ?? String(e) });
+          }
+        }
+      }
+      return { services: snapshot(w).state, calls: w.calls, errors: w.errors };
+    } finally {
+      w.dispose();
+    }
+  }
+  return loadBundleServicesLive(bundleJs, liveBootOptions(opts, bus));
+}
+function liveBootOptions(opts, bus) {
+  return {
     wixCall: opts.wixCall,
     input: opts.input,
     budgetMs: opts.budgetMs,
@@ -46619,7 +46690,7 @@ async function liveRenderServices(bundleJs, opts) {
     // holding this ONE verb on `null` keeps the previous behaviour while the capability bus
     // joins. Caught in pre-PR review; revisit when --live can mint a member token.
     dispatch: (action, params) => MEMBER_IDENTITY_ACTION.test(action) ? null : bus(action, params)
-  });
+  };
 }
 async function buildReleaseFromContent(contentDir2, dest, opts = {}) {
   const { freshModule, ...rest } = opts;
@@ -59116,21 +59187,21 @@ var init_preview_assets_generated = __esm({
   "../../packages/serve/src/preview-assets.generated.ts"() {
     init_preview_assets_format();
     PREVIEW_ASSET_MANIFEST = [
-      { key: "assets/index-DHaDddKI.js", contentType: "application/javascript; charset=utf-8", offset: 8, length: 1118974, sha256: "126f946f40d25539e528fd40423974a6dab7231f6ccc0159108c5b7d4f2cdecb" },
-      { key: "fonts/Roboto-LICENSE.txt", contentType: "application/octet-stream", offset: 1118982, length: 4610, sha256: "994062dd7af4186a739de55dd9e151c63b6301f8e2cbafc608d35c2e87da0cd2" },
-      { key: "fonts/Roboto-Variable.ttf", contentType: "font/ttf", offset: 1123592, length: 488584, sha256: "d7598e12c5dbef095ff8272cfc55da0250bd07fbdecbac8a530b9b277872a134" },
-      { key: "fonts/WixMadeforDisplay-Bold.ttf", contentType: "font/ttf", offset: 1612176, length: 90924, sha256: "ec4c7d63772d980d6e147b2df6215fd2737e4b04cebe0cf7e11dc695fb63cdcf" },
-      { key: "fonts/WixMadeforDisplay-ExtraBold.ttf", contentType: "font/ttf", offset: 1703100, length: 90984, sha256: "bf4c16a2774edd38a921edf3099469866cd74c094fd596f3fa4e81f54a04dfaa" },
-      { key: "fonts/WixMadeforDisplay-Medium.ttf", contentType: "font/ttf", offset: 1794084, length: 90980, sha256: "368faca44fb9f7207e4af784e94750b1ee59c1098b8689e0f4a918926f244fb5" },
-      { key: "fonts/WixMadeforDisplay-Regular.ttf", contentType: "font/ttf", offset: 1885064, length: 90872, sha256: "97ed8f1a6772abe26e3d8af5cecfc4b02faa94497d585b0398b5053b739a70c1" },
-      { key: "fonts/WixMadeforDisplay-SemiBold.ttf", contentType: "font/ttf", offset: 1975936, length: 90980, sha256: "642feab8a48ddf6c7a89d7c2a7c0edfa0e6e773f671287e460e222703563191e" },
-      { key: "fonts/WixMadeforText-Bold.ttf", contentType: "font/ttf", offset: 2066916, length: 108636, sha256: "37c179b4fefb63ea9637322b84583a2df53aa226c150294eea1675c14b1b8e29" },
-      { key: "fonts/WixMadeforText-ExtraBold.ttf", contentType: "font/ttf", offset: 2175552, length: 109084, sha256: "62e2fe4718129f36ecdb0ae4de385bd6b81ecc876146447167c6c140fad699a9" },
-      { key: "fonts/WixMadeforText-Medium.ttf", contentType: "font/ttf", offset: 2284636, length: 109048, sha256: "4ecf270136af928612c76fe4ebade91d8156975e5ea4c0cf9225501dd1788e02" },
-      { key: "fonts/WixMadeforText-Regular.ttf", contentType: "font/ttf", offset: 2393684, length: 107700, sha256: "dee56f09fd3efc127c1ea95557edc74110c1460a46287da36e0af25efd341ef5" },
-      { key: "fonts/WixMadeforText-SemiBold.ttf", contentType: "font/ttf", offset: 2501384, length: 88108, sha256: "dced97a77624bc5f8b1ae65850360908297f4588e09feb6f22792d29dc7e765b" },
-      { key: "index.html", contentType: "text/html; charset=utf-8", offset: 2589492, length: 4947, sha256: "89671c9093bca734f83172536bbf14aed6f119a28cd677e45c09195058c78264" },
-      { key: "t5-frame.html", contentType: "text/html; charset=utf-8", offset: 2594439, length: 17344, sha256: "d057298d75e7373e5e2c4d11b7d1bcbea88e03af555ba63d97641c78509c58e4" }
+      { key: "assets/index-DHO0WElX.js", contentType: "application/javascript; charset=utf-8", offset: 8, length: 1127482, sha256: "9a198f7af12c683263ba55641ec1802d4ca9addb9b8d38170e6b4f60387c61c3" },
+      { key: "fonts/Roboto-LICENSE.txt", contentType: "application/octet-stream", offset: 1127490, length: 4610, sha256: "994062dd7af4186a739de55dd9e151c63b6301f8e2cbafc608d35c2e87da0cd2" },
+      { key: "fonts/Roboto-Variable.ttf", contentType: "font/ttf", offset: 1132100, length: 488584, sha256: "d7598e12c5dbef095ff8272cfc55da0250bd07fbdecbac8a530b9b277872a134" },
+      { key: "fonts/WixMadeforDisplay-Bold.ttf", contentType: "font/ttf", offset: 1620684, length: 90924, sha256: "ec4c7d63772d980d6e147b2df6215fd2737e4b04cebe0cf7e11dc695fb63cdcf" },
+      { key: "fonts/WixMadeforDisplay-ExtraBold.ttf", contentType: "font/ttf", offset: 1711608, length: 90984, sha256: "bf4c16a2774edd38a921edf3099469866cd74c094fd596f3fa4e81f54a04dfaa" },
+      { key: "fonts/WixMadeforDisplay-Medium.ttf", contentType: "font/ttf", offset: 1802592, length: 90980, sha256: "368faca44fb9f7207e4af784e94750b1ee59c1098b8689e0f4a918926f244fb5" },
+      { key: "fonts/WixMadeforDisplay-Regular.ttf", contentType: "font/ttf", offset: 1893572, length: 90872, sha256: "97ed8f1a6772abe26e3d8af5cecfc4b02faa94497d585b0398b5053b739a70c1" },
+      { key: "fonts/WixMadeforDisplay-SemiBold.ttf", contentType: "font/ttf", offset: 1984444, length: 90980, sha256: "642feab8a48ddf6c7a89d7c2a7c0edfa0e6e773f671287e460e222703563191e" },
+      { key: "fonts/WixMadeforText-Bold.ttf", contentType: "font/ttf", offset: 2075424, length: 108636, sha256: "37c179b4fefb63ea9637322b84583a2df53aa226c150294eea1675c14b1b8e29" },
+      { key: "fonts/WixMadeforText-ExtraBold.ttf", contentType: "font/ttf", offset: 2184060, length: 109084, sha256: "62e2fe4718129f36ecdb0ae4de385bd6b81ecc876146447167c6c140fad699a9" },
+      { key: "fonts/WixMadeforText-Medium.ttf", contentType: "font/ttf", offset: 2293144, length: 109048, sha256: "4ecf270136af928612c76fe4ebade91d8156975e5ea4c0cf9225501dd1788e02" },
+      { key: "fonts/WixMadeforText-Regular.ttf", contentType: "font/ttf", offset: 2402192, length: 107700, sha256: "dee56f09fd3efc127c1ea95557edc74110c1460a46287da36e0af25efd341ef5" },
+      { key: "fonts/WixMadeforText-SemiBold.ttf", contentType: "font/ttf", offset: 2509892, length: 88108, sha256: "dced97a77624bc5f8b1ae65850360908297f4588e09feb6f22792d29dc7e765b" },
+      { key: "index.html", contentType: "text/html; charset=utf-8", offset: 2598e3, length: 4947, sha256: "72e531f20412d0f07433cb52fac32ff7f5be87a4ef435c2d919cd5e21ec84ad3" },
+      { key: "t5-frame.html", contentType: "text/html; charset=utf-8", offset: 2602947, length: 17344, sha256: "d057298d75e7373e5e2c4d11b7d1bcbea88e03af555ba63d97641c78509c58e4" }
     ];
   }
 });
@@ -75883,7 +75954,7 @@ function auditUx(content, strict = false) {
   if (usesAppNetwork(source)) {
     const mocksPath = join25(dir, "dev", "net-mocks.json");
     if (!existsSync22(mocksPath)) {
-      issue(issues, strict, "missing-app-mocks", "This package uses a Wix/network client but has no app-specific dev/net-mocks.json. Add fixtures for dynamic, entitlement, or recovery flows.", "dev/net-mocks.json");
+      issue(issues, strict, "missing-app-mocks", "This package uses a Wix/network client but has no app-specific dev/net-mocks.json. `himi test --record` writes one from the live responses it sees; then add fixtures for dynamic, entitlement, or recovery flows.", "dev/net-mocks.json");
     } else {
       try {
         const parsed2 = JSON.parse(readFileSync22(mocksPath, "utf8"));
@@ -76117,10 +76188,11 @@ var USAGE = `himi \u2014 the Himalaya authoring CLI (remote dev loop)
                                            before data consent), placeholder + sample copy, the proposed Data access rows
                                            and typed-journey stubs. Writes .himi/adopt.json, .himi/adopt-matrix.md and
                                            .himi/himi-test.stub.json (--dry-run writes nothing)
-  himi template screens [--show <id>] [--write <id> --from <file>] [--content <dir>]
+  himi template screens [--show <id>] [--write <id> --from <file>] [--add <id> --from <file> [--parent <id>] [--tab <id>]] [--content <dir>]
                                            list dev/index.ts screens (size, workers, onAppear); --show prints ONE entry so
                                            nobody reads the whole file; --write puts an edited entry back (re-parsed, refused
                                            if it breaks the file or changes the screen count)
+                                           --add appends a NEW screen entry and registers it in linkableScreens (--parent/--tab)
   himi template sweep --set "Old=>New" [--set \u2026] | --map <file.json> [--content <dir>] [--dry-run]
                                            replace the template's sample identity/copy inside string literals only (never
                                            identifiers) across dev/index.ts, config.ts, tokens.json and tier5-src; re-parses
@@ -76801,7 +76873,7 @@ WHAT A PATCH DOES NOT CARRY \u2014 all reported in the output, never silent
 var COMMANDS2 = [
   { name: "captcha", summary: "create and store native CAPTCHA keys in Serve, or inspect setup status; customer setup verifies Wix site ownership; does not enable member CAPTCHA SDKs", required: "setup|status --app <app> [--content <dir>] [--site <msid>] [--ios-bundle-id <id>] [--android-package-name <id>] [--target <t>]" },
   { name: "init", summary: "scaffold a starter content package (OTA-only; no native shells). --template <t> starts from a full reference app (branded-lite = consumer storefront over a Wix site; owner-lite = owner CRUD/management) instead of the minimal counter; --templates lists bundled ones; --remote fetches the template off the serve plane (falls back to the bundled copy offline). The new app also gets its agent files (the same set `himi agent-init` writes: AGENTS.md, CLAUDE.md, the himalaya skill, HIMALAYA.md, a SessionStart hook) so the next session started inside it picks the work up; --no-agent skips them. It also makes the build board (.himi/studio/, exactly as `himi studio --no-open` does \u2014 it never opens a browser), so every later render, test, validate, push and progress entry refreshes it; and, for a template bundled with this CLI, it makes the FIRST PICTURE itself (never for a --remote one: that is its publisher's code, and a render runs it on this machine, so next[] leaves the render to the agent after it has read the code): exactly `himi render <homeScreenId> --png --mocks --device iphone` (offline \u2014 no request; never --live; --mocks loads the app's recorded data when it has any), run as a child it kills after a time budget, writing .himi/shots/<home>.png and journaling it (by: himi) as the STARTING POINT (\"Starting point: the <template> template, before any of your changes\") so the board and the journal hold a picture when init returns. init also records the source it wrote (.himi/init-source.json: a content fingerprint, Markdown left out), and the first home PNG render after the source diverges from it is journaled once as \"First look at your app\" \u2014 reported as `firstLook: {image}` or `{skipped: <reason>}`, never a failed init; `--no-first-look` skips it (for scripts and CI that render themselves). For a bundled template (never a --remote one \u2014 the preview would build and serve its publisher's code) init also STARTS the live preview itself: `himi run --watch --content <dir> --port <p> --no-open --idle-exit 30`, detached in its own process group with its output in .himi/watch.log, never waited for (the url is chosen before it builds), recorded in .himi/watch.json, and reported as `watch: {started, pid, url, board, log}` \u2014 or `{skipped: <reason>}` for a `CI` environment, a test runner, a watch already running, or a start that failed (never a failed init). Nothing else skips it: outside CI it is started, and `watch.note` says an opt-out was ignored. The envelope LEADS with `doNow`: three lines to run now (the consent preflight, the live preview \u2014 its url and board when init started it, else `himi run --watch --content <dir> &` with the board's path \u2014 and the postcard line), and ENDS with the same lines as `doNowAgain`, so an agent that reads only the head or only the tail (`| tail`) gets them; at a terminal they are also printed as plain text on stderr, before the JSON and again after it. Its `next[]` LEADS with the steps for THIS session, in this order for every app \u2014 the offline first render and that picture's `himi progress` postcard (only when init could not make the picture), the skill's consent preflight (authorize or mock any Wix or external startup request; with none, go straight on), and only then the live preview (the running one's url, or `himi run --watch &` when init did not start it) \u2014 ahead of the next-session guidance", required: "<name> [--dir] [--template <t>] [--remote] [--no-agent] [--no-first-look] | --templates" },
-  { name: "template", summary: "starter-template catalog + publishing. Every template is a SHOWCASE APP \u2014 a real published release you can open running before you start from it. `list` prints available templates with metadata (title/description/tags) plus each one's start prompt \u2014 pass --remote to include the serve-plane catalog so an agent can pick one; `prompt <name>` prints just that sentence for one template (the skill URL is the public door, or the plane named by --target/--serve-url); `publish` publishes an app AS a `himi init --template` (needs a himalaya.template.json; builds a previewable release + attaches the scaffold source; --source-dir overrides which tree becomes the source, --name sets the template name; bakes a launcher icon \u2014 --icon <png>, or the committed template-icons/<name>.png \u2014 and extracts accent/palette gallery meta from the scaffold's tokens.json; --visibility unlisted keeps it out of the /v1/templates catalog \u2014 templates default to public); `trim --keep <ids>` cuts an app scaffolded from a template down to those screens (the home, and any screen the navigation pins such as a drawer body, always stays) \u2014 it deletes the other SCREENS/TEMPLATED entries whole, prunes navigation (linkableScreens, tabBar, drawer, deep links, surfaces) and drops tier5-src workers no kept screen uses, then runs validate --strict and rolls everything back if it fails (--force keeps it, --dry-run writes nothing). A kept screen that links to a removed one is refused unless --links follow (keep those too) or --links drop (remove the taps). Adopting one: `inspect` writes the adoption inventory (.himi/adopt.json: screens, workers, which screens can call Wix/network on appear \u2014 bootsOffline \u2014 placeholder and sample copy, proposed Data access rows, typed-journey stubs); `screens` lists, shows or rewrites ONE dev/index.ts entry; `sweep` replaces sample identity/copy inside string literals; `recommend` ranks the catalog for a business description or a site's verticals; `trim --from-spec` takes the kept screens from SPEC.md's Screen catalogue", required: "list [--remote] | prompt <name> | publish [--dir <app>] [--source-dir <dir>] [--name <n>] [--icon <png>] [--visibility public|unlisted] [--target <t>] | trim --keep <id,id,\u2026>|--from-spec [SPEC.md] [--content <dir>] [--links follow|drop] [--dry-run] [--force] | inspect [--content <dir>] [--dry-run] | screens [--show <id>] [--write <id> --from <file>] | sweep --set 'Old=>New' | --map <file> [--dry-run] | recommend [--text <t>] [--verticals a,b] [--book <dir>] [--remote]" },
+  { name: "template", summary: "starter-template catalog + publishing. Every template is a SHOWCASE APP \u2014 a real published release you can open running before you start from it. `list` prints available templates with metadata (title/description/tags) plus each one's start prompt \u2014 pass --remote to include the serve-plane catalog so an agent can pick one; `prompt <name>` prints just that sentence for one template (the skill URL is the public door, or the plane named by --target/--serve-url); `publish` publishes an app AS a `himi init --template` (needs a himalaya.template.json; builds a previewable release + attaches the scaffold source; --source-dir overrides which tree becomes the source, --name sets the template name; bakes a launcher icon \u2014 --icon <png>, or the committed template-icons/<name>.png \u2014 and extracts accent/palette gallery meta from the scaffold's tokens.json; --visibility unlisted keeps it out of the /v1/templates catalog \u2014 templates default to public); `trim --keep <ids>` cuts an app scaffolded from a template down to those screens (the home, and any screen the navigation pins such as a drawer body, always stays) \u2014 it deletes the other SCREENS/TEMPLATED entries whole, prunes navigation (linkableScreens, tabBar, drawer, deep links, surfaces) and drops tier5-src workers no kept screen uses, then runs validate --strict and rolls everything back if it fails (--force keeps it, --dry-run writes nothing). A kept screen that links to a removed one is refused unless --links follow (keep those too) or --links drop (remove the taps). Adopting one: `inspect` writes the adoption inventory (.himi/adopt.json: screens, workers, which screens can call Wix/network on appear \u2014 bootsOffline \u2014 placeholder and sample copy, proposed Data access rows, typed-journey stubs); `screens` lists, shows, rewrites or adds ONE dev/index.ts entry; `sweep` replaces sample identity/copy inside string literals; `recommend` ranks the catalog for a business description or a site's verticals; `trim --from-spec` takes the kept screens from SPEC.md's Screen catalogue", required: "list [--remote] | prompt <name> | publish [--dir <app>] [--source-dir <dir>] [--name <n>] [--icon <png>] [--visibility public|unlisted] [--target <t>] | trim --keep <id,id,\u2026>|--from-spec [SPEC.md] [--content <dir>] [--links follow|drop] [--dry-run] [--force] | inspect [--content <dir>] [--dry-run] | screens [--show <id>] [--write <id> --from <file>] [--add <id> --from <file>] | sweep --set 'Old=>New' | --map <file> [--dry-run] | recommend [--text <t>] [--verticals a,b] [--book <dir>] [--remote]" },
   { name: "build", summary: "compile tier5-src/<name>/index.ts -> dist/bundles/<name>.bundle.js with esbuild (--binary = resolve published @himalaya/*); semantic TypeScript checking belongs to himi validate", required: "[--content <dir>] [--binary]" },
   { name: "functions", summary: "inspect/invoke server functions and operate durable jobs or schedules", required: "list|describe|openapi|invoke | jobs list|get|cancel|retry|dlq | schedule describe|invoke [--app <a>] [--environment preview|production] [--release <id>]" },
   { name: "eject", summary: "take ownership of a shared flow module (auth|checkout|screens): copies its source into tier5-src/_ejected/ and repoints this package's imports at the copy. The ladder's escape hatch \u2014 for when the factory options cannot express what you need. AFTER EJECTING, CENTRAL FIXES NO LONGER REACH THIS APP, including future corrections to the fail-closed entitlement and confirm-the-session rules. The floor is unaffected: credentials still go only through the native auth actions and money only through the cashier rail.", required: "<auth|checkout|screens> [--content <dir>]" },
@@ -77944,7 +78016,13 @@ async function adoptAtInit(dir) {
     writeInventory2(dir, inv);
     return { adopt: inventorySummary2(inv) };
   } catch (e) {
-    return { adopt: { skipped: e.message } };
+    const msg = e.message;
+    const layout = /SCREENS = runtimeSetting/.test(msg);
+    return {
+      adopt: {
+        skipped: layout ? "no adoption inventory for this template: its dev/index.ts is not in the generated SCREENS layout, so `himi template inspect | screens | trim` do not apply to it \u2014 edit its source directly" : `no adoption inventory: ${msg}`
+      }
+    };
   }
 }
 function keptPlan(kept) {
@@ -79035,6 +79113,13 @@ ${doNow.map((l) => `  ${l}`).join("\n")}`);
               const app = parseApp2(src.dev, src.config);
               const show = str9(flags.show);
               const target = str9(flags.write);
+              const adding = str9(flags.add);
+              if (adding) {
+                const from = str9(flags.from);
+                if (!from) throw new TrimRefusal2('--add <id> needs --from <file> holding the whole new SCREENS entry (`  "<id>": { "screenId": "<id>", \u2026 },`)');
+                print(adopt.addScreen(dir, adding, readFileSync88(from, "utf8"), { parent: str9(flags.parent), tab: str9(flags.tab) }));
+                return 0;
+              }
               if (target) {
                 const from = str9(flags.from);
                 if (!from) throw new TrimRefusal2("--write <id> needs --from <file> holding the whole entry, as --show prints it");
@@ -83468,6 +83553,10 @@ ${label2}`);
         const deadline = Date.now() + timeoutMs;
         const pending = new Map(jobs.map((j) => [String(j.jobId), String(j.platform)]));
         const done = [];
+        const statusCmd = (id) => `himi dist status ${id}${str9(flags.target) ? ` --target ${str9(flags.target)}` : ""}`;
+        for (const j of jobs) (flags.json === true ? io.error : io.log)(`  ${j.platform}  dispatched as ${j.jobId}`);
+        const MAX_POLL_ERRORS = 3;
+        const pollErrors = /* @__PURE__ */ new Map();
         while (pending.size > 0) {
           if (Date.now() >= deadline) {
             await printDistQrsForJobs(done);
@@ -83483,9 +83572,32 @@ ${label2}`);
           }
           await new Promise((res) => setTimeout(res, intervalMs));
           for (const jobId of [...pending.keys()]) {
-            const s = await c.distStatus(jobId);
+            let s;
+            let why = "";
+            try {
+              s = await c.distStatus(jobId);
+              if (!s.ok) why = `HTTP ${s.status}`;
+            } catch (e) {
+              why = e.message;
+            }
+            if (why) {
+              const n = (pollErrors.get(jobId) ?? 0) + 1;
+              pollErrors.set(jobId, n);
+              if (n < MAX_POLL_ERRORS) continue;
+              await printDistQrsForJobs(done);
+              print({
+                ok: false,
+                error: "dist_poll_failed",
+                message: `could not read the status of ${pending.get(jobId)} job ${jobId} ${MAX_POLL_ERRORS} times in a row (${why}) \u2014 the build${pending.size > 1 ? "s were" : " was"} dispatched and may still finish`,
+                pending: [...pending].map(([id, platform2]) => ({ platform: platform2, jobId: id, check: statusCmd(id) })),
+                finished: flags.json === true ? done : done.map(humanDistJob),
+                ...failures.length ? { failures } : {}
+              });
+              return 1;
+            }
+            pollErrors.delete(jobId);
             const rec = s.json ?? {};
-            if (!s.ok || !TERMINAL_DIST_STATUSES.has(String(rec.status))) continue;
+            if (!TERMINAL_DIST_STATUSES.has(String(rec.status))) continue;
             pending.delete(jobId);
             done.push(rec);
             if (!flags.json) {

package/guides/cms-collections.md

@@ -25,7 +25,10 @@ must be impossible for it to touch something it didn't create.
 | **Adopted** | `wixId: "<existing id>"` | **read only** — never create, never alter schema, never seed | CMS data the site already has |
 
 An owned id must be exactly **`himi_<appSlug>_<name>`**, where `appSlug` is the
-content-package app id with `-` folded to `_` and lowercased (`my-app` → `himi_my_app_`),
+content package's **`name` in `himalaya.content.json`** — the name you passed to `himi init`,
+or the folder's name when there is no manifest; **not** the dotted `id` in `config.ts` — with
+`-` folded to `_` and lowercased (`my-app` → `himi_my_app_`). `himi cms create --dry-run`
+prints the resolved prefix before anything is written,
 and **`<name>` is alphanumeric — no underscores** (`menuItems`, not `menu_items`). This is
 checked by `himi validate` and re-checked by every mutating verb. It is deliberately **not**
 auto-prefixed: what you declare is what lands on the site, and an unprefixed id is

package/guides/getting-started.md

@@ -77,7 +77,9 @@ worker layer — trim it or mine it (`himi docs trim-a-template`): **trim** to t
 `tier5-src/_shared/` helpers and Wix worker chains and write your own screens. Do not delete
 `tier5-src/` + `dev/` and start from blank. Never read that file whole: `himi template screens`
 lists its screens (size, workers, `onAppear`), `--show <id>` prints one entry, and
-`--write <id> --from <file>` puts an edited entry back (refused if it breaks the file). Not sure
+`--write <id> --from <file>` puts an edited entry back (refused if it breaks the file), and
+`--add <id> --from <file>` appends a NEW screen and registers it as linkable — the authoring half
+of mining a template. Not sure
 which template fits? `himi template recommend --text "<the business>"` (or `--book <site analyze
 dir>` for a site's verticals) ranks the catalog with reasons. For a small **non-Wix** pattern, `himi init --template chat-bot --remote`. `himi template
 list --remote` shows the full catalog (title/description/tags) — including templates published

package/guides/himi-skill.md

@@ -106,7 +106,9 @@ worker layer — trim it or mine it (`himi docs trim-a-template`): **trim** to t
 `tier5-src/_shared/` helpers and Wix worker chains and write your own screens. Do not delete
 `tier5-src/` + `dev/` and start from blank. Never read that file whole: `himi template screens`
 lists its screens (size, workers, `onAppear`), `--show <id>` prints one entry, and
-`--write <id> --from <file>` puts an edited entry back (refused if it breaks the file). Not sure
+`--write <id> --from <file>` puts an edited entry back (refused if it breaks the file), and
+`--add <id> --from <file>` appends a NEW screen and registers it as linkable — the authoring half
+of mining a template. Not sure
 which template fits? `himi template recommend --text "<the business>"` (or `--book <site analyze
 dir>` for a site's verticals) ranks the catalog with reasons. For a small **non-Wix** pattern, `himi init --template chat-bot --remote`. `himi template
 list --remote` shows the full catalog (title/description/tags) — including templates published

package/guides/owner-lite-site-binding.md

@@ -112,6 +112,32 @@ grep -oE 'package="[^"]*"|android:label="[^"]*"' \
   himi-owner-lite-app/build/intermediates/merged_manifest/debug/*/AndroidManifest.xml
 ```
 
+## Off-repo: an app made with `himi init --template owner-lite`
+
+Everything above describes Owner Lite as Wix builds it, with its per-customer binary. An
+off-repo content package made with `himi init --template owner-lite` (or one of the `*-owner`
+templates) has no `provisioning.json` and no `prepare:customer` step. What it does have is the
+same split between the **owner** and **visitor** scopes, and that split decides what you can see:
+
+- **The web preview is visitor-scope.** `himi run`, `himi render --live` and a pushed draft
+  preview all run with an anonymous visitor session. A visitor can read public catalog data
+  (Bookings services, Stores products, published posts), so those screens render real data
+  there. Anything owner-scoped cannot: a business's appointments and orders, its drafts, and
+  every management write (create or edit a service, product or post) answer 401/403. The
+  owner-only screens therefore show their empty or error state on the web, which is not a bug.
+- **Owner flows are proven on a native build.** The owner signs in through the native owner
+  login (`himi dist` → install the APK/IPA). That build is the surface for "today's
+  appointments" and for the write round trips; the web preview cannot stand in for it.
+- **Before that build exists**, prove a write with the site owner's own token against the same
+  REST endpoint the worker calls, then re-read it independently. That proves the payload, not
+  the app's sign-in. Record each native surface you could not drive as unavailable, with the
+  reason, rather than calling it passed:
+  `himi ux record --content . --platform ios --status unavailable --reason "owner flows need a native build; not driven yet"`
+  (and the same with `--platform android`).
+- **An app that must render something to a visitor** (a public menu next to the owner tools)
+  binds the visitor-readable surfaces with a consumer provider and keeps the owner screens
+  behind the owner gate. The owner gate fails closed in a visitor session; that is its job.
+
 ## See also
 
 - [owner-lite-publish-binary.md](owner-lite-publish-binary.md) — pointing that binary at a serve app.