@wix/himalaya-cli 0.1210.0 → 0.1212.0

package/templates/owner-lite/tier5-src/himi-owner-lite-manage/index.ts

@@ -39,6 +39,8 @@ interface State {
   noEmpty: boolean;
   hasRecents: boolean;
   noRecents: boolean;
+  /** True while `sections` is empty — gates the list so an empty one costs no gap. */
+  noSections: boolean;
   isLoading: boolean;
   notLoading: boolean;
   summaryNote: string;
@@ -200,7 +202,7 @@ function derive(state: State, areas = state.areas): State {
   // areas arrive — or when this app provisions none at all — there is nothing a
   // filter could have excluded, so "Clear filters" would be a lie.
   const noEmpty = next.noEmpty || state.status !== 'ready' || areas.length === 0;
-  return { ...state, ...next, noEmpty, recents, hasRecents: recents.length > 0, noRecents: recents.length === 0, businessName: currentBusinessName };
+  return { ...state, ...next, noEmpty, recents, hasRecents: recents.length > 0, noRecents: recents.length === 0, noSections: next.sections.length === 0, businessName: currentBusinessName };
 }
 
 // Loads are not serialized: on a warm reappearance the host's bare refresh and
@@ -276,7 +278,7 @@ const svc = defineService<State, {
     // 'All' is always a valid filter, so the chip row paints from the first frame
     // instead of appearing (and shifting the layout) when the areas arrive.
     groups: [{ id: 'all', label: allLabel() }], summary: '', noEmpty: true,
-    hasRecents: false, noRecents: true, isLoading: true, notLoading: false, summaryNote: '', handoffError: '',
+    hasRecents: false, noRecents: true, noSections: true, isLoading: true, notLoading: false, summaryNote: '', handoffError: '',
   },
   actions: {
     load: async (state, arg) => {

package/templates/owner-lite/tier5-src/himi-owner-lite-post/index.ts

@@ -80,6 +80,9 @@ interface PostState {
   /** Non-empty when showing owner-preview-demo sample data (web preview, no owner bridge). */
   demoNote: string;
   notDemo: boolean;
+  /** #3158 — Delete ARMS a confirmation; only confirmDelete reaches the API. */
+  deletePending: boolean;
+  noDeleteConfirmation: boolean;
 }
 
 /* eslint-disable @typescript-eslint/no-explicit-any */
@@ -159,6 +162,9 @@ function shape(s: Partial<PostState>): PostState {
     hideUnpublish: !published || status !== "ready",
     demoNote: s.demoNote ?? "",
     notDemo: !s.demoNote,
+    // Only a loaded entity can be pending deletion; every other action disarms it (`disarm`).
+    deletePending: !!s.deletePending && hasEntity,
+    noDeleteConfirmation: !(s.deletePending && hasEntity),
   };
 }
 
@@ -276,18 +282,35 @@ async function refresh(prev: PostState, id: string, actionMessage = ""): Promise
   });
 }
 
+/** #3158 — a confirmed delete in flight. Synchronous and module-level on purpose: two
+ *  confirmDelete dispatches (a double tap) both start from a state that says "armed", and only a
+ *  flag set BEFORE the first await stops the second from issuing its own DELETE — whose late 404
+ *  would otherwise land after, and overwrite, the first one's "deleted". */
+let deleteInFlight = false;
+
+/** #3158 — the confirmation describes THIS visit. Never take it from a persisted snapshot, or a
+ *  reopened record comes back with "Delete this …?" already armed. */
+const DELETE_RUN_KEYS = ["deletePending", "noDeleteConfirmation"] as const;
+
+/** #3158 — clear an armed delete confirmation. */
+const disarm = <T extends { deletePending: boolean }>(s: T): T => ({ ...s, deletePending: false });
+
 const svc = defineService<PostState, {
   load: (s: PostState, arg?: unknown) => Promise<PostState>;
   retry: (s: PostState) => Promise<PostState>;
   publish: (s: PostState) => Promise<PostState>;
   unpublish: (s: PostState) => Promise<PostState>;
   delete: (s: PostState) => Promise<PostState>;
+  cancelDelete: (s: PostState) => Promise<PostState>;
+  confirmDelete: (s: PostState) => Promise<PostState | undefined>;
   /** [rico] #3370 — RichContent's on_link: `{ url }` of the tapped link. */
   openLink: (s: PostState, arg?: unknown) => Promise<PostState>;
 }>("himiOwnerLitePost", {
   state: shape({ status: "loading" }),
+  notHydrated: [...DELETE_RUN_KEYS],
   actions: {
-    load: async (s, arg) => {
+    load: async (s0, arg) => {
+      const s = disarm(s0);
       stashCopy(arg); // absorb the descriptor's onAppear copy-pack param
       const id = idFrom(arg, s.id) || inputId();
       if (!id) return shape({ ...s, status: "error", error: copyParam("ownerPost.errorNoId", "no post id") });
@@ -312,7 +335,8 @@ const svc = defineService<PostState, {
         return shape({ ...s, id, status: "error", error: ownerLoadError(e) });
       }
     },
-    retry: async (s) => {
+    retry: async (s0) => {
+      const s = disarm(s0);
       if (!s.id) return shape({ ...s, status: "error", error: copyParam("ownerPost.errorNoId", "no post id") });
       if (isOwnerPreviewDemo()) {
           const demo = demoDetail(s, s.id);
@@ -334,7 +358,8 @@ const svc = defineService<PostState, {
         return shape({ ...s, status: "error", error: ownerLoadError(e) });
       }
     },
-    publish: async (s) => {
+    publish: async (s0) => {
+      const s = disarm(s0);
       if (isOwnerPreviewDemo() || s.demoNote) return shape({ ...s, actionMessage: copyParam("ownerCommon.demoSaveNote", DEMO_SAVE_NOTE) });
       if (!s.id) return shape({ ...s, actionMessage: copyParam("ownerPost.noIdMessage", "No post id.") });
       if (s.postStatusRaw === "PUBLISHED") return shape({ ...s, actionMessage: copyParam("ownerPost.alreadyPublished", "Post is already published.") });
@@ -352,7 +377,8 @@ const svc = defineService<PostState, {
         return shape({ ...s, actionMessage: ownerLoadError(e) });
       }
     },
-    unpublish: async (s) => {
+    unpublish: async (s0) => {
+      const s = disarm(s0);
       if (isOwnerPreviewDemo() || s.demoNote) return shape({ ...s, actionMessage: copyParam("ownerCommon.demoSaveNote", DEMO_SAVE_NOTE) });
       if (!s.id) return shape({ ...s, actionMessage: copyParam("ownerPost.noIdMessage", "No post id.") });
       if (s.postStatusRaw !== "PUBLISHED" && s.postStatusRaw !== "SCHEDULED") {
@@ -372,20 +398,35 @@ const svc = defineService<PostState, {
         return shape({ ...s, actionMessage: ownerLoadError(e) });
       }
     },
-    delete: async (s) => {
-      if (isOwnerPreviewDemo() || s.demoNote) return shape({ ...s, actionMessage: copyParam("ownerCommon.demoSaveNote", DEMO_SAVE_NOTE) });
-      if (!s.id) return shape({ ...s, actionMessage: copyParam("ownerPost.noIdMessage", "No post id.") });
-      // Optimistic local delete — the list drops the row immediately.
-      await cacheDrop(s.id);
+    // #3158 — destructive, so two steps. `delete` (the Manage card's Delete button)
+    // only ARMS the inline confirmation, which names the record and says it cannot
+    // be undone; `cancelDelete` disarms it; only `confirmDelete` deletes. Anything
+    // that dispatches `delete` directly therefore still asks first.
+    delete: async (s) => shape({ ...s, deletePending: true, actionMessage: "" }),
+    cancelDelete: async (s) => shape({ ...s, deletePending: false }),
+    confirmDelete: async (s0) => {
+      // Nothing armed (a stray dispatch, a rehydrated snapshot) or a delete already running
+      // (a second tap): ignore it — `undefined` leaves the state exactly as it is.
+      if (!s0.deletePending || deleteInFlight) return undefined;
+      deleteInFlight = true;
       try {
-        await deleteDraftPost(s.id);
-        return shape({ ...s, status: "deleted", title: "", emptyText: copyParam("ownerPost.deletedEmpty", "Post deleted."), actionMessage: "" });
-      } catch (e) {
-        if (shouldQueueOwnerWrite(e)) {
-          await queueWrite("tier5.himiOwnerLitePost.delete", { id: s.id });
-          return shape({ ...s, status: "deleted", title: "", emptyText: copyParam("ownerPost.deletedEmpty", "Post deleted."), actionMessage: copyParam("ownerCommon.demoSaveNote", DEMO_SAVE_NOTE) });
+        const s = disarm(s0);
+        if (isOwnerPreviewDemo() || s.demoNote) return shape({ ...s, actionMessage: copyParam("ownerCommon.demoSaveNote", DEMO_SAVE_NOTE) });
+        if (!s.id) return shape({ ...s, actionMessage: copyParam("ownerPost.noIdMessage", "No post id.") });
+        // Optimistic local delete — the list drops the row immediately.
+        await cacheDrop(s.id);
+        try {
+          await deleteDraftPost(s.id);
+          return shape({ ...s, status: "deleted", title: "", emptyText: copyParam("ownerPost.deletedEmpty", "Post deleted."), actionMessage: "" });
+        } catch (e) {
+          if (shouldQueueOwnerWrite(e)) {
+            await queueWrite("tier5.himiOwnerLitePost.delete", { id: s.id });
+            return shape({ ...s, status: "deleted", title: "", emptyText: copyParam("ownerPost.deletedEmpty", "Post deleted."), actionMessage: copyParam("ownerCommon.demoSaveNote", DEMO_SAVE_NOTE) });
+          }
+          return shape({ ...s, actionMessage: ownerLoadError(e) });
         }
-        return shape({ ...s, actionMessage: ownerLoadError(e) });
+      } finally {
+        deleteInFlight = false;
       }
     },
     // Only http(s), mailto and tel links reach open_url; a refused link, or one nothing opened, says so, and
@@ -397,4 +438,10 @@ const svc = defineService<PostState, {
   },
 });
 
+// The same reset on a runtime from before `notHydrated` (an older binary on a new bundle).
+if ((globalThis as { himalaya?: { hydrationOptOut?: unknown } }).himalaya?.hydrationOptOut !== true) {
+  const booted = svc.getState?.() as unknown as Record<string, unknown> | undefined;
+  if (booted && typeof booted === "object") Object.assign(booted, { deletePending: false, noDeleteConfirmation: true });
+}
+
 export { svc };

package/templates/owner-lite/tier5-src/himi-owner-lite-product/index.ts

@@ -59,6 +59,9 @@ interface ProductState {
   /** Non-empty when showing owner-preview-demo sample data (web preview, no owner bridge). */
   demoNote: string;
   notDemo: boolean;
+  /** #3158 — Delete ARMS a confirmation; only confirmDelete reaches the API. */
+  deletePending: boolean;
+  noDeleteConfirmation: boolean;
 }
 
 /* eslint-disable @typescript-eslint/no-explicit-any */
@@ -143,6 +146,9 @@ function shape(s: Partial<ProductState>): ProductState {
     hideHide: !visible || status !== "ready",
     demoNote: s.demoNote ?? "",
     notDemo: !s.demoNote,
+    // Only a loaded entity can be pending deletion; every other action disarms it (`disarm`).
+    deletePending: !!s.deletePending && hasEntity,
+    noDeleteConfirmation: !(s.deletePending && hasEntity),
   };
 }
 
@@ -265,16 +271,33 @@ async function setVisibility(s: ProductState, visible: boolean, msg: string): Pr
   }
 }
 
+/** #3158 — a confirmed delete in flight. Synchronous and module-level on purpose: two
+ *  confirmDelete dispatches (a double tap) both start from a state that says "armed", and only a
+ *  flag set BEFORE the first await stops the second from issuing its own DELETE — whose late 404
+ *  would otherwise land after, and overwrite, the first one's "deleted". */
+let deleteInFlight = false;
+
+/** #3158 — the confirmation describes THIS visit. Never take it from a persisted snapshot, or a
+ *  reopened record comes back with "Delete this …?" already armed. */
+const DELETE_RUN_KEYS = ["deletePending", "noDeleteConfirmation"] as const;
+
+/** #3158 — clear an armed delete confirmation. */
+const disarm = <T extends { deletePending: boolean }>(s: T): T => ({ ...s, deletePending: false });
+
 const svc = defineService<ProductState, {
   load: (s: ProductState, arg?: unknown) => Promise<ProductState>;
   retry: (s: ProductState) => Promise<ProductState>;
   show: (s: ProductState) => Promise<ProductState>;
   hide: (s: ProductState) => Promise<ProductState>;
   delete: (s: ProductState) => Promise<ProductState>;
+  cancelDelete: (s: ProductState) => Promise<ProductState>;
+  confirmDelete: (s: ProductState) => Promise<ProductState | undefined>;
 }>("himiOwnerLiteProduct", {
   state: shape({ status: "loading" }),
+  notHydrated: [...DELETE_RUN_KEYS],
   actions: {
-    load: async (s, arg) => {
+    load: async (s0, arg) => {
+      const s = disarm(s0);
       stashCopy(arg); // absorb the descriptor's onAppear copy-pack param
       const id = idFrom(arg, s.id) || inputId();
       if (!id) return shape({ ...s, status: "error", error: copyParam("ownerProduct.errorNoId", "no product id") });
@@ -297,7 +320,8 @@ const svc = defineService<ProductState, {
         return shape({ ...s, id, status: "error", error: ownerLoadError(e) });
       }
     },
-    retry: async (s) => {
+    retry: async (s0) => {
+      const s = disarm(s0);
       if (!s.id) return shape({ ...s, status: "error", error: copyParam("ownerProduct.errorNoId", "no product id") });
       if (isOwnerPreviewDemo()) {
           const demo = demoDetail(s, s.id);
@@ -317,25 +341,46 @@ const svc = defineService<ProductState, {
         return shape({ ...s, status: "error", error: ownerLoadError(e) });
       }
     },
-    show: async (s) => setVisibility(s, true, copyParam("ownerProduct.shownMessage", "Product is now visible in your store.")),
-    hide: async (s) => setVisibility(s, false, copyParam("ownerProduct.hiddenMessage", "Product hidden from your store.")),
-    delete: async (s) => {
-      if (isOwnerPreviewDemo() || s.demoNote) return shape({ ...s, actionMessage: copyParam("ownerCommon.demoSaveNote", DEMO_SAVE_NOTE) });
-      if (!s.id) return shape({ ...s, actionMessage: copyParam("ownerProduct.noIdMessage", "No product id.") });
-      // Optimistic local delete — the list drops the row immediately.
-      await cacheDrop(s.id);
+    show: async (s0) => { const s = disarm(s0); return setVisibility(s, true, copyParam("ownerProduct.shownMessage", "Product is now visible in your store.")); },
+    hide: async (s0) => { const s = disarm(s0); return setVisibility(s, false, copyParam("ownerProduct.hiddenMessage", "Product hidden from your store.")); },
+    // #3158 — destructive, so two steps. `delete` (the Manage card's Delete button)
+    // only ARMS the inline confirmation, which names the record and says it cannot
+    // be undone; `cancelDelete` disarms it; only `confirmDelete` deletes. Anything
+    // that dispatches `delete` directly therefore still asks first.
+    delete: async (s) => shape({ ...s, deletePending: true, actionMessage: "" }),
+    cancelDelete: async (s) => shape({ ...s, deletePending: false }),
+    confirmDelete: async (s0) => {
+      // Nothing armed (a stray dispatch, a rehydrated snapshot) or a delete already running
+      // (a second tap): ignore it — `undefined` leaves the state exactly as it is.
+      if (!s0.deletePending || deleteInFlight) return undefined;
+      deleteInFlight = true;
       try {
-        await deleteProduct(s.id);
-        return shape({ ...s, status: "deleted", title: "", emptyText: copyParam("ownerProduct.deletedEmpty", "Product deleted."), actionMessage: "" });
-      } catch (e) {
-        if (shouldQueueOwnerWrite(e)) {
-          await queueWrite("tier5.himiOwnerLiteProduct.delete", { id: s.id });
-          return shape({ ...s, status: "deleted", title: "", emptyText: copyParam("ownerProduct.deletedEmpty", "Product deleted."), actionMessage: copyParam("ownerCommon.demoSaveNote", DEMO_SAVE_NOTE) });
+        const s = disarm(s0);
+        if (isOwnerPreviewDemo() || s.demoNote) return shape({ ...s, actionMessage: copyParam("ownerCommon.demoSaveNote", DEMO_SAVE_NOTE) });
+        if (!s.id) return shape({ ...s, actionMessage: copyParam("ownerProduct.noIdMessage", "No product id.") });
+        // Optimistic local delete — the list drops the row immediately.
+        await cacheDrop(s.id);
+        try {
+          await deleteProduct(s.id);
+          return shape({ ...s, status: "deleted", title: "", emptyText: copyParam("ownerProduct.deletedEmpty", "Product deleted."), actionMessage: "" });
+        } catch (e) {
+          if (shouldQueueOwnerWrite(e)) {
+            await queueWrite("tier5.himiOwnerLiteProduct.delete", { id: s.id });
+            return shape({ ...s, status: "deleted", title: "", emptyText: copyParam("ownerProduct.deletedEmpty", "Product deleted."), actionMessage: copyParam("ownerCommon.demoSaveNote", DEMO_SAVE_NOTE) });
+          }
+          return shape({ ...s, actionMessage: ownerLoadError(e) });
         }
-        return shape({ ...s, actionMessage: ownerLoadError(e) });
+      } finally {
+        deleteInFlight = false;
       }
     },
   },
 });
 
+// The same reset on a runtime from before `notHydrated` (an older binary on a new bundle).
+if ((globalThis as { himalaya?: { hydrationOptOut?: unknown } }).himalaya?.hydrationOptOut !== true) {
+  const booted = svc.getState?.() as unknown as Record<string, unknown> | undefined;
+  if (booted && typeof booted === "object") Object.assign(booted, { deletePending: false, noDeleteConfirmation: true });
+}
+
 export { svc };

package/templates/podcast-creator/tier5-src/_shared/engine-intl.ts

@@ -48,6 +48,36 @@ const MONTHS_LONG = [
   "July", "August", "September", "October", "November", "December",
 ] as const;
 
+/**
+ * A DateTimeFormat for `timeZone` when one is given and this engine knows it. An unknown or
+ * malformed IANA id is a RangeError in ECMA-402; these helpers never throw, so it degrades to
+ * the device zone rather than killing the screen. Without Intl there is no zone database at all,
+ * and the fallbacks below render in the device zone for the same reason.
+ *
+ * Formatters are memoised per (locale, zone, options): a management page formats several dates
+ * per row, and building a DateTimeFormat (or throwing on a bad zone) each time is not free on
+ * JSC or QuickJS. Only call it where `hasIntl()` holds — every caller does.
+ */
+const FORMATTERS = new Map<string, Intl.DateTimeFormat>();
+function dateFormat(locale: string, options: Intl.DateTimeFormatOptions, timeZone?: string): Intl.DateTimeFormat {
+  const key = `${locale}|${timeZone ?? ""}|${JSON.stringify(options)}`;
+  let formatter = FORMATTERS.get(key);
+  if (!formatter) {
+    if (hasIntl()) {
+      if (timeZone) {
+        try {
+          formatter = new Intl.DateTimeFormat(locale, { ...options, timeZone });
+        } catch {
+          /* unknown zone: device zone below, remembered under this key */
+        }
+      }
+      formatter ??= new Intl.DateTimeFormat(locale, options);
+      FORMATTERS.set(key, formatter);
+    }
+  }
+  return formatter as Intl.DateTimeFormat;
+}
+
 // The four shapes below are not invented — they are the option bags this corpus actually uses,
 // counted across every bundle: "Jan 5, 2026" (33 sites), "Jan 5" (11), "Mon, Jan 5, 3:07 PM" (8)
 // and "Jan 5, 3:07 PM" (4). Naming them means a conversion is a one-line swap rather than a
@@ -55,46 +85,46 @@ const MONTHS_LONG = [
 // ECMA-402 in engine-intl-fallback.test.ts.
 
 /** `{ month: "short", day: "numeric", year: "numeric" }` — "Jan 5, 2026". */
-export function formatDateMedium(date: Date, locale = "en-US"): string {
+export function formatDateMedium(date: Date, locale = "en-US", timeZone?: string): string {
   if (hasIntl()) {
-    return new Intl.DateTimeFormat(locale, { month: "short", day: "numeric", year: "numeric" }).format(date);
+    return dateFormat(locale, { month: "short", day: "numeric", year: "numeric" }, timeZone).format(date);
   }
   return `${MONTHS_SHORT[date.getMonth()]} ${date.getDate()}, ${date.getFullYear()}`;
 }
 
 /** `{ month: "short", day: "numeric" }` — "Jan 5". */
-export function formatMonthDay(date: Date, locale = "en-US"): string {
+export function formatMonthDay(date: Date, locale = "en-US", timeZone?: string): string {
   if (hasIntl()) {
-    return new Intl.DateTimeFormat(locale, { month: "short", day: "numeric" }).format(date);
+    return dateFormat(locale, { month: "short", day: "numeric" }, timeZone).format(date);
   }
   return `${MONTHS_SHORT[date.getMonth()]} ${date.getDate()}`;
 }
 
 /** `{ month: "long", day: "numeric" }` — "January 5". */
-export function formatMonthDayLong(date: Date, locale = "en-US"): string {
+export function formatMonthDayLong(date: Date, locale = "en-US", timeZone?: string): string {
   if (hasIntl()) {
-    return new Intl.DateTimeFormat(locale, { month: "long", day: "numeric" }).format(date);
+    return dateFormat(locale, { month: "long", day: "numeric" }, timeZone).format(date);
   }
   return `${MONTHS_LONG[date.getMonth()]} ${date.getDate()}`;
 }
 
 /** `{ weekday: "short", month: "short", day: "numeric", hour: "numeric", minute: "2-digit" }`
  *  — "Mon, Jan 5, 3:07 PM". */
-export function formatWeekdayDateTime(date: Date, locale = "en-US"): string {
+export function formatWeekdayDateTime(date: Date, locale = "en-US", timeZone?: string): string {
   if (hasIntl()) {
-    return new Intl.DateTimeFormat(locale, {
+    return dateFormat(locale, {
       weekday: "short", month: "short", day: "numeric", hour: "numeric", minute: "2-digit",
-    }).format(date);
+    }, timeZone).format(date);
   }
   return `${WEEKDAYS_SHORT[date.getDay()]}, ${MONTHS_SHORT[date.getMonth()]} ${date.getDate()}, ${clock12(date)}`;
 }
 
 /** `{ month: "short", day: "numeric", hour: "numeric", minute: "2-digit" }` — "Jan 5, 3:07 PM". */
-export function formatMonthDayTime(date: Date, locale = "en-US"): string {
+export function formatMonthDayTime(date: Date, locale = "en-US", timeZone?: string): string {
   if (hasIntl()) {
-    return new Intl.DateTimeFormat(locale, {
+    return dateFormat(locale, {
       month: "short", day: "numeric", hour: "numeric", minute: "2-digit",
-    }).format(date);
+    }, timeZone).format(date);
   }
   return `${MONTHS_SHORT[date.getMonth()]} ${date.getDate()}, ${clock12(date)}`;
 }
@@ -380,9 +410,9 @@ export function normalizeFormattedPrice(formatted: string): string {
   return `${m[1]}${m[3]}${m[2]}`;
 }
 
-function clockParts(d: Date, locale: string): { time: string; meridiem: string } {
+function clockParts(d: Date, locale: string, timeZone?: string): { time: string; meridiem: string } {
   const full = hasIntl()
-    ? new Intl.DateTimeFormat(locale, { hour: "numeric", minute: "2-digit", hour12: true }).format(d)
+    ? dateFormat(locale, { hour: "numeric", minute: "2-digit", hour12: true }, timeZone).format(d)
     : clock12(d);
   // ICU puts a narrow no-break space before the meridiem; normalize so callers can split on it.
   const clean = full.replace(/[  ]/g, " ");
@@ -391,8 +421,8 @@ function clockParts(d: Date, locale: string): { time: string; meridiem: string }
 }
 
 /** "8:00 PM" — the one clock every customer screen uses (12-hour, en-US shape). */
-export function formatClock(date: Date, locale = "en-US"): string {
-  const { time, meridiem } = clockParts(date, locale);
+export function formatClock(date: Date, locale = "en-US", timeZone?: string): string {
+  const { time, meridiem } = clockParts(date, locale, timeZone);
   return meridiem ? `${time} ${meridiem}` : time;
 }
 
@@ -403,3 +433,14 @@ export function isPastDate(iso: string | undefined | null, now: number = Date.no
   const t = Date.parse(iso);
   return !Number.isNaN(t) && t < now;
 }
+
+/** The calendar day `date` falls on in `timeZone` (device zone when absent, unknown, or when
+ *  the engine has no Intl), as `YYYY-MM-DD`. For "is this today / this year" comparisons. */
+export function calendarDay(date: Date, timeZone?: string): string {
+  if (hasIntl()) {
+    const parts = dateFormat("en-CA", { year: "numeric", month: "2-digit", day: "2-digit" }, timeZone).formatToParts(date);
+    const get = (type: string) => parts.find((p) => p.type === type)?.value ?? "";
+    return `${get("year")}-${get("month")}-${get("day")}`;
+  }
+  return `${date.getFullYear()}-${pad2(date.getMonth() + 1)}-${pad2(date.getDate())}`;
+}