@wix/himalaya-cli 0.1215.0 → 0.1217.0

package/dist/cli.mjs

@@ -25393,6 +25393,7 @@ function shouldRevealError(args) {
 var EMAIL_RE, URL_HOST_RE, INTEGER_RE, NUMBER_RE;
 var init_validation = __esm({
   "../../core/ts/src/validation.ts"() {
+    "use strict";
     EMAIL_RE = /^[A-Za-z0-9._%+-]+@[A-Za-z0-9-]+(\.[A-Za-z0-9-]+)*\.[A-Za-z]{2,}$/;
     URL_HOST_RE = /^[A-Za-z0-9-]+(\.[A-Za-z0-9-]+)*(:[0-9]+)?$/;
     INTEGER_RE = /^[+-]?[0-9]+$/;
@@ -26052,6 +26053,7 @@ function validateWorkerSubtree(raw, slotId, policy, actionCatalog) {
 var WORKER_SUBTREE_CEILINGS, ID_PART, ACTION_ID;
 var init_worker_subtree = __esm({
   "../../core/ts/src/worker-subtree.ts"() {
+    "use strict";
     init_worker_subtree_safe_types_generated();
     WORKER_SUBTREE_CEILINGS = Object.freeze({
       maxEncodedBytes: 65536,
@@ -66909,10 +66911,17 @@ var init_push_send = __esm({
   }
 });
 
+// ../../core/ts/src/push-routes.ts
+var init_push_routes = __esm({
+  "../../core/ts/src/push-routes.ts"() {
+  }
+});
+
 // ../../core/serve-control/src/push-send-service.ts
 var PUSH_SEND_ERROR_CODES, PushSendError;
 var init_push_send_service = __esm({
   "../../core/serve-control/src/push-send-service.ts"() {
+    init_push_routes();
     PUSH_SEND_ERROR_CODES = [
       "unauthorized",
       "token_revoked",
@@ -67295,7 +67304,7 @@ var init_notify_ping = __esm({
       member_not_found: "Use the login email of an approved member of this site.",
       member_ambiguous: "More than one member has this login email; resolve it in the site's Members.",
       member_not_active: "The member must be approved before they can be notified.",
-      link_not_routable: "Link to a screen this app's published release ships, e.g. <scheme>://screen/<screenId>?id=\u2026.",
+      link_not_routable: "Link to a screen this app's published release ships, e.g. <scheme>://screen/<screenId>?id=\u2026, or a Wix link one of its push.routes translates.",
       forbidden_site: "The Wix account from wix login must own this site.",
       site_token_invalid: "Run wix login as the site owner; the site token must belong to the app owner's account.",
       ping_permission_denied: "Himi Serve is not permitted to send through Ping; this is a platform issue, not your setup."

package/guides/push-cli-onboarding.md

@@ -246,11 +246,22 @@ Before anything is sent, the server checks:
 - that push setup is `ready` for this app on this site;
 - that the link opens a screen the app's live release ships, using the app's exact scheme and
   either a linkable `screen/<id>` or a deep-link pattern (a device on a different rollout ring
-  may have a different set of screens);
+  may have a different set of screens). A **Wix link** (`wix:/…`, `https://www.wix.app/…`,
+  `https://manage.wix.app/…`, `https://m-<msid>.branded.wix.app/…`) passes when one of the app's
+  `push.routes` translates it to such a screen and it names no other site — the same translation
+  a tap runs on the device. A link a route conditioned on a Ping `templateId` or `topic` matches is
+  refused, because the device picks that route from payload fields the check cannot see. That is how to test a route with the link Wix itself would send;
 - that exactly one approved member has that login email.
 
 `--dry-run` runs every check and sends nothing. The link is forwarded exactly as given, query
-string included. A private screen is allowed; the app's login gate still applies when tapped.
+string included — a Wix link reaches the device as the Wix link, and the app translates it on tap:
+
+```sh
+himi notify send --provider ping --target wix --content ./liftgear \
+  --member-email member@example.com --title 'Your order shipped' \
+  --link 'wix:/my-account/<siteId>/stores/orders/<orderId>' --dry-run
+```
+ A private screen is allowed; the app's login gate still applies when tapped.
 
 To notify **every approved member** of the site, use `--all-members` in place of
 `--member-email`:
@@ -300,7 +311,7 @@ link, is a new notification.
 | --- | --- |
 | `push_not_ready` | Run `himi notify setup` for this app and site first. |
 | `member_not_found` / `member_ambiguous` / `member_not_active` | Use the login email of one approved site member. |
-| `link_not_routable` | The link's scheme or screen is not in the published release. |
+| `link_not_routable` | The link's scheme or screen is not in the published release, or a Wix link matches none of the app's `push.routes` (or names another site). |
 | `forbidden_site` / `site_token_invalid` | Both Wix logins must belong to the site owner. |
 | `rate_limited` | Wait `retry-after` seconds; test sends are limited per owner. |
 

package/guides/qa-builds.md

@@ -44,8 +44,9 @@ The Mac archive, provisioning request, and release notification use the same der
 Android keeps its normal, account-neutral application ID.
 
 This pipeline produces QA builds **on demand**, **without any GitHub secrets** —
-everything runs through the same Falcon → Job Service Mac-pool wiring the Argus run
-uses, with credentials from the Falcon databag and signing certs already on the pool
+the commit-triggered path folds into Falcon's Argus Job Service job: Mac for iOS,
+Linux for Android. Brokered `himi dist` jobs use Mac workers for iOS and Android.
+CI credentials come from the Falcon databag; iOS signing certs are already on the Mac
 machines. It's modeled on `wix-private/ai-scheduling-assistant` `native-apps/scripts/ci-ios.sh`
 + the `wix-private/mre` S3/distributer infra.
 
@@ -55,14 +56,16 @@ NATIVE delta: a new SDUI component, a newly declared capability or entitlement,
 bundle id, or a `minBinaryVersion` floor bump. If you are unsure which you need, you
 almost certainly want `himi push`.
 
-### If a Mac leg fails in under ~4 minutes, it is probably not your change
+### Legacy standalone Mac dispatch retries
 
 The pool bootstraps before it runs anything of ours (sandbox volume, home dir, then
 `npm i` of its own helpers from the internal registry). When that registry is degraded the
-job dies in 44s–150s, long before any compile. `run-native-mac.mjs` treats a failure that
-fast as infrastructure and **re-dispatches, up to 3 attempts**, logging the details each
+job dies in 44s–150s, long before any compile. For legacy standalone Apple commands,
+`run-native-mac.mjs` treats a failure that fast as infrastructure and **re-dispatches,
+up to 3 attempts**, logging the details each
 time. A failure slow enough to have reached real work is never retried — that one is
-yours, and it fails immediately at full speed.
+yours, and it fails immediately at full speed. Apple batch and Android dispatches run
+once, so this retry policy does not replay their work.
 
 ## Two ways to trigger one
 
@@ -76,9 +79,10 @@ There are two paths to the same artifact. Pick by whether you have the repo.
 | Result arrives | job id → poll → install link | PR comment / Slack DM / build log |
 | Good for | an off-repo developer or coding agent | a change you are already pushing |
 
-Both end up on the same Wix Job Service Mac pool running the same
-`tools/mobile-dist/run-dist.ts`. The brokered path just replaces "push a commit and wait
-for Falcon" with "ask the serve plane".
+Both run `tools/mobile-dist/run-dist.ts`. Brokered requests use the Wix Job Service
+Mac pool for either platform; tagged commits use the validation job's pool (Mac for iOS,
+Linux for Android). The brokered path replaces "push a commit and wait for Falcon"
+with "ask the serve plane".
 
 ## Path A — `himi dist` (no repo needed)
 
@@ -466,14 +470,15 @@ git commit --allow-empty -m "[dist] QA build"
 git push
 ```
 
-Falcon rebuilds, the Argus Mac-pool job sees the tag, and folds the QA build in
+Falcon rebuilds, the platform's Argus job sees the tag, and folds the QA build in
 (next section). The install link lands in the build log and, when a PR token is
 available, as a **PR comment**. The **`/dist-himalaya-app`** skill automates the
 whole loop (empty commit → PR → watch Falcon → hand back the link).
 
 ## How it runs: folded into the warm Argus job (build once)
 
-The QA build runs **inside the same Mac-pool job as the Argus run** (`native-ci`
+The QA build runs **inside the same Job Service job as the Argus run** (Mac for iOS,
+Linux for Android; `native-ci`
 `run-argus.mjs` → `tools/mobile-dist/run-dist.ts`), so it reuses that already-warm
 machine — no second dispatch, no cold checkout/SPM-resolve:
 
@@ -1230,5 +1235,6 @@ operator smoke: `himi dist --app <app> --platform android --release <id> --wait`
   manifest/link). Unit-tested in `dist-lib.test.ts`.
 - `tools/mobile-dist/run-dist.ts` — the orchestrator (creds → build/sign → S3 →
   presign → OTA link → PR comment). Non-fatal by contract.
-- `native-ci/scripts/run-argus.mjs` — folds `run-dist` into the Argus Mac-pool job.
+- `native-ci/scripts/run-argus.mjs` — folds `run-dist` into the Argus job (Mac for iOS,
+  Linux for Android).
 - `apps/<app>/ios/fastlane/Fastfile` — the env-driven `dist` lane (enterprise export).

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@wix/himalaya-cli",
-  "version": "0.1215.0",
+  "version": "0.1217.0",
   "type": "module",
   "description": "himi — the Himalaya authoring CLI. Build a Tier-5 content package on your own machine, push it to the production serve as a draft, preview it on web + Himi Player, and read worker logs back — the remote dev loop. Wraps @himalaya/serve-cli for transport.",
   "keywords": [
@@ -67,5 +67,5 @@
       "artifactId": "himalaya-cli"
     }
   },
-  "falconPackageHash": "ba6e51d93c561edb1aa2de10154bdd5848f7cb971441ea81f6876de7"
+  "falconPackageHash": "792d624fe9e25410a3d851724ce7ec7a347ca4b00f93c526e46095ef"
 }