@wix/himalaya-cli 0.1392.0 → 0.1394.0

package/dist/authoring-runtime/node_modules/@wix/himalaya/dist/_types/stdlib/wix-sdk/bookings-v2/src/extensions.d.ts

@@ -1,4 +1,4 @@
-import type { WixBooking, WixBookingsPagingMetadata } from "./index.js";
+import type { WixBooking, WixBookingsPagingMetadata, WixCallOptions } from "./index.js";
 export interface WixServiceMoney {
     /** Decimal string returned by Bookings v2, e.g. "50.00". */
     value?: string;
@@ -165,10 +165,12 @@ export interface WixParticipantNotification {
     notifyParticipants?: boolean;
     message?: string;
 }
-/** Confirm a pending booking — POST /bookings/v2/bookings/{id}/confirm. */
-export declare function confirmBooking(bookingId: string, revision: string): Promise<WixUpdateBookingResponse>;
-/** Decline a pending booking — POST /bookings/v2/bookings/{id}/decline. */
-export declare function declineBooking(bookingId: string, revision: string, notify?: boolean): Promise<WixUpdateBookingResponse>;
+/** Confirm a pending booking — POST /bookings/v2/bookings/{id}/confirm. `opts.site` addresses
+ *  the write at that business (`wix-site-id`) instead of the active one. */
+export declare function confirmBooking(bookingId: string, revision: string, opts?: WixCallOptions): Promise<WixUpdateBookingResponse>;
+/** Decline a pending booking — POST /bookings/v2/bookings/{id}/decline. `opts.site` as for
+ *  `confirmBooking`. */
+export declare function declineBooking(bookingId: string, revision: string, notify?: boolean, opts?: WixCallOptions): Promise<WixUpdateBookingResponse>;
 /** Cancel a confirmed booking as the OWNER — POST /bookings/v2/bookings/{id}/cancel.
  *  Sends `ignoreCancellationPolicy`, so it cancels outside the customer window too.
  *  NEVER call this from a member-facing screen: it would let any member cancel past

package/dist/authoring-runtime/node_modules/@wix/himalaya/dist/wix-bookings.mjs

@@ -95,14 +95,14 @@ async function updateService(serviceId, service) {
   });
   return { ...res, service: decodeService(res.service) };
 }
-function confirmBooking(bookingId, revision) {
+function confirmBooking(bookingId, revision, opts) {
   if (!bookingId || !revision) throw new Error("confirmBooking: bookingId + revision required");
-  return wixCall("POST", `/bookings/v2/bookings/${bookingId}/confirm`, { revision });
+  return wixCall("POST", `/bookings/v2/bookings/${bookingId}/confirm`, { revision }, opts);
 }
 var OWNER_FLOW = { flowControlSettings: { ignoreCancellationPolicy: true } };
-function declineBooking(bookingId, revision, notify = false) {
+function declineBooking(bookingId, revision, notify = false, opts) {
   if (!bookingId || !revision) throw new Error("declineBooking: bookingId + revision required");
-  return wixCall("POST", `/bookings/v2/bookings/${bookingId}/decline`, { revision, participantNotification: { notifyParticipants: notify }, ...OWNER_FLOW });
+  return wixCall("POST", `/bookings/v2/bookings/${bookingId}/decline`, { revision, participantNotification: { notifyParticipants: notify }, ...OWNER_FLOW }, opts);
 }
 function cancelBooking(bookingId, revision, notify = false) {
   if (!bookingId || !revision) throw new Error("cancelBooking: bookingId + revision required");

package/dist/cli.mjs

@@ -30379,7 +30379,6 @@ function shouldRevealError(args) {
 var EMAIL_RE, URL_HOST_RE, INTEGER_RE, NUMBER_RE;
 var init_validation = __esm({
   "../../core/ts/src/validation.ts"() {
-    "use strict";
     EMAIL_RE = /^[A-Za-z0-9._%+-]+@[A-Za-z0-9-]+(\.[A-Za-z0-9-]+)*\.[A-Za-z]{2,}$/;
     URL_HOST_RE = /^[A-Za-z0-9-]+(\.[A-Za-z0-9-]+)*(:[0-9]+)?$/;
     INTEGER_RE = /^[+-]?[0-9]+$/;
@@ -126222,14 +126221,16 @@ var init_renderNode = __esm({
       const ph = props.placeholder ? C2(props.placeholder, "#e6e6e6") : void 0;
       const imgUrl = props.url != null && isBinding(props.url) ? boundUrl : props.url;
       const imgInitials = props.initials != null && isBinding(props.initials) ? boundInitials : props.initials;
-      if (imgUrl && typeof imgUrl === "string") {
-        const src = resolveAssetUrl(imgUrl, ctx.assetBaseUrl);
+      const [failedSrc, setFailedSrc] = React9.useState(null);
+      const resolvedSrc = imgUrl && typeof imgUrl === "string" ? resolveAssetUrl(imgUrl, ctx.assetBaseUrl) : null;
+      if (resolvedSrc && resolvedSrc !== failedSrc) {
+        const src = resolvedSrc;
         const tplTint = props.tint != null && renderingMode !== "original" ? C2(props.tint, "#000") : null;
         if (tplTint != null) {
           const mSize = objectFit === "cover" ? "cover" : "contain";
-          return /* @__PURE__ */ jsx10("div", { role: "img", "aria-label": asText2(boundAlt), style: { width: w2, height: boxHeight, aspectRatio: ar2, borderRadius: r2, display: "block", flex: "none", background: tplTint, WebkitMaskImage: `url("${src}")`, maskImage: `url("${src}")`, WebkitMaskSize: mSize, maskSize: mSize, WebkitMaskRepeat: "no-repeat", maskRepeat: "no-repeat", WebkitMaskPosition: "center", maskPosition: "center", ...wrap } });
+          return /* @__PURE__ */ jsx10("div", { role: "img", "aria-label": asText2(boundAlt), style: { width: w2, height: boxHeight, aspectRatio: ar2, borderRadius: r2, display: "block", flex: "none", background: tplTint, WebkitMaskImage: `url("${src}")`, maskImage: `url("${src}")`, WebkitMaskSize: mSize, maskSize: mSize, WebkitMaskRepeat: "no-repeat", maskRepeat: "no-repeat", WebkitMaskPosition: "center", maskPosition: "center", ...wrap }, children: /* @__PURE__ */ jsx10("img", { src, alt: "", "aria-hidden": "true", "data-mask-probe": "", onError: () => setFailedSrc(src), style: { display: "none" } }) });
         }
-        return /* @__PURE__ */ jsx10("img", { src, alt: asText2(boundAlt), style: { width: w2, height: boxHeight, aspectRatio: ar2, objectFit, borderRadius: r2, display: "block", flex: "none", background: ph, ...wrap } });
+        return /* @__PURE__ */ jsx10("img", { src, alt: asText2(boundAlt), onError: () => setFailedSrc(src), style: { width: w2, height: boxHeight, aspectRatio: ar2, objectFit, borderRadius: r2, display: "block", flex: "none", background: ph, ...wrap } });
       }
       if (imgInitials && typeof imgInitials === "string") {
         const alt = asText2(boundAlt).trim();
@@ -158002,25 +158003,30 @@ var init_preview_assets_generated = __esm({
   "../../packages/serve/src/preview-assets.generated.ts"() {
     init_preview_assets_format();
     PREVIEW_ASSET_MANIFEST = [
-      { key: "assets/index-BaElPehu.js", contentType: "application/javascript; charset=utf-8", offset: 8, length: 1315970, sha256: "bad192eba9b802134c6f4c16e8d5f05adc14d0c2cb9e9eafa3c2c375f38d0eed" },
-      { key: "assets/pdf-BaEiM9oG.js", contentType: "application/javascript; charset=utf-8", offset: 1315978, length: 488199, sha256: "4a9299f94b20012ffd46afac363adec9365f7f220e58477cb0714da58d250226" },
-      { key: "assets/pdf.worker.min-BQa_JDET.js", contentType: "application/javascript; charset=utf-8", offset: 1804177, length: 73, sha256: "41bcfda4f3c8c0a81c785ea87c69afc8e7d0ed8c333324aee94c273d881bb6aa" },
-      { key: "assets/pdf.worker.min-BmVo14Nb.mjs", contentType: "application/javascript; charset=utf-8", offset: 1804250, length: 1317034, sha256: "a33cfe728c584fdba4fcc1fd54bcdc2f9f2f13889ddbb5b2bd1d0f8cbe49b84e" },
-      { key: "assets/pdfDocument-XRkeVCt3.js", contentType: "application/javascript; charset=utf-8", offset: 3121284, length: 2858, sha256: "b87645d5c6618544b8004b7f060614a5e46c3d90af75e8903d518691ac2f72be" },
-      { key: "fonts/Roboto-LICENSE.txt", contentType: "application/octet-stream", offset: 3124142, length: 4610, sha256: "994062dd7af4186a739de55dd9e151c63b6301f8e2cbafc608d35c2e87da0cd2" },
-      { key: "fonts/Roboto-Variable.ttf", contentType: "font/ttf", offset: 3128752, length: 488584, sha256: "d7598e12c5dbef095ff8272cfc55da0250bd07fbdecbac8a530b9b277872a134" },
-      { key: "fonts/WixMadeforDisplay-Bold.ttf", contentType: "font/ttf", offset: 3617336, length: 90924, sha256: "ec4c7d63772d980d6e147b2df6215fd2737e4b04cebe0cf7e11dc695fb63cdcf" },
-      { key: "fonts/WixMadeforDisplay-ExtraBold.ttf", contentType: "font/ttf", offset: 3708260, length: 90984, sha256: "bf4c16a2774edd38a921edf3099469866cd74c094fd596f3fa4e81f54a04dfaa" },
-      { key: "fonts/WixMadeforDisplay-Medium.ttf", contentType: "font/ttf", offset: 3799244, length: 90980, sha256: "368faca44fb9f7207e4af784e94750b1ee59c1098b8689e0f4a918926f244fb5" },
-      { key: "fonts/WixMadeforDisplay-Regular.ttf", contentType: "font/ttf", offset: 3890224, length: 90872, sha256: "97ed8f1a6772abe26e3d8af5cecfc4b02faa94497d585b0398b5053b739a70c1" },
-      { key: "fonts/WixMadeforDisplay-SemiBold.ttf", contentType: "font/ttf", offset: 3981096, length: 90980, sha256: "642feab8a48ddf6c7a89d7c2a7c0edfa0e6e773f671287e460e222703563191e" },
-      { key: "fonts/WixMadeforText-Bold.ttf", contentType: "font/ttf", offset: 4072076, length: 108636, sha256: "37c179b4fefb63ea9637322b84583a2df53aa226c150294eea1675c14b1b8e29" },
-      { key: "fonts/WixMadeforText-ExtraBold.ttf", contentType: "font/ttf", offset: 4180712, length: 109084, sha256: "62e2fe4718129f36ecdb0ae4de385bd6b81ecc876146447167c6c140fad699a9" },
-      { key: "fonts/WixMadeforText-Medium.ttf", contentType: "font/ttf", offset: 4289796, length: 109048, sha256: "4ecf270136af928612c76fe4ebade91d8156975e5ea4c0cf9225501dd1788e02" },
-      { key: "fonts/WixMadeforText-Regular.ttf", contentType: "font/ttf", offset: 4398844, length: 107700, sha256: "dee56f09fd3efc127c1ea95557edc74110c1460a46287da36e0af25efd341ef5" },
-      { key: "fonts/WixMadeforText-SemiBold.ttf", contentType: "font/ttf", offset: 4506544, length: 88108, sha256: "dced97a77624bc5f8b1ae65850360908297f4588e09feb6f22792d29dc7e765b" },
-      { key: "index.html", contentType: "text/html; charset=utf-8", offset: 4594652, length: 4947, sha256: "b5796703c39e46805e975d091b66a859568b31199996160a1b51e23ca0f8916d" },
-      { key: "t5-frame.html", contentType: "text/html; charset=utf-8", offset: 4599599, length: 17512, sha256: "c5c8612a8b3f5a1828d0c6593106036a180eea11da80232f5181548a50679137" }
+      { key: "assets/DashboardHost-BwwFh1Rh.js", contentType: "application/javascript; charset=utf-8", offset: 8, length: 2916, sha256: "1b810b02f8f16f0624cc2dff760ce22a0e77eafa1c12fcf25d52a166d26771f3" },
+      { key: "assets/DevDrawer-BsBxQHqr.js", contentType: "application/javascript; charset=utf-8", offset: 2924, length: 16744, sha256: "42693fa13183ef56c085240b9677dceb1b989fc8046850e97384639c151b8f8a" },
+      { key: "assets/IdiomCompare-5INe6klB.js", contentType: "application/javascript; charset=utf-8", offset: 19668, length: 1892, sha256: "687a823bbb5b9f51c7282da9fa5d4483d1d3b31e29ca0b449043aabcd45fd401" },
+      { key: "assets/SchemeCompare-B09MhOJd.js", contentType: "application/javascript; charset=utf-8", offset: 21560, length: 1824, sha256: "11cb98c36223ba2569915aeee0f57861bdd2be373aa7b6836488efd0dffafc24" },
+      { key: "assets/index-Bsr_oPhO.js", contentType: "application/javascript; charset=utf-8", offset: 23384, length: 1307250, sha256: "cf4bfdad0d9559d0aa83b7921cfc66260618bae7d8326797839a19b548d7f9b0" },
+      { key: "assets/pdf-TMIc1ird.js", contentType: "application/javascript; charset=utf-8", offset: 1330634, length: 488199, sha256: "6acc4c51260700faed89a337f0704de2674842a2b85adc685b6e38ddfb64da7c" },
+      { key: "assets/pdf.worker.min-BQa_JDET.js", contentType: "application/javascript; charset=utf-8", offset: 1818833, length: 73, sha256: "41bcfda4f3c8c0a81c785ea87c69afc8e7d0ed8c333324aee94c273d881bb6aa" },
+      { key: "assets/pdf.worker.min-BmVo14Nb.mjs", contentType: "application/javascript; charset=utf-8", offset: 1818906, length: 1317034, sha256: "a33cfe728c584fdba4fcc1fd54bcdc2f9f2f13889ddbb5b2bd1d0f8cbe49b84e" },
+      { key: "assets/pdfDocument-v-EQVeu6.js", contentType: "application/javascript; charset=utf-8", offset: 3135940, length: 2868, sha256: "e0059d7d414f25dcf4a63da3936aa02d97448e75990edb2e247c1b118b0d69b3" },
+      { key: "fonts/Roboto-LICENSE.txt", contentType: "application/octet-stream", offset: 3138808, length: 4610, sha256: "994062dd7af4186a739de55dd9e151c63b6301f8e2cbafc608d35c2e87da0cd2" },
+      { key: "fonts/Roboto-Variable.ttf", contentType: "font/ttf", offset: 3143418, length: 488584, sha256: "d7598e12c5dbef095ff8272cfc55da0250bd07fbdecbac8a530b9b277872a134" },
+      { key: "fonts/WixMadeforDisplay-Bold.ttf", contentType: "font/ttf", offset: 3632002, length: 90924, sha256: "ec4c7d63772d980d6e147b2df6215fd2737e4b04cebe0cf7e11dc695fb63cdcf" },
+      { key: "fonts/WixMadeforDisplay-ExtraBold.ttf", contentType: "font/ttf", offset: 3722926, length: 90984, sha256: "bf4c16a2774edd38a921edf3099469866cd74c094fd596f3fa4e81f54a04dfaa" },
+      { key: "fonts/WixMadeforDisplay-Medium.ttf", contentType: "font/ttf", offset: 3813910, length: 90980, sha256: "368faca44fb9f7207e4af784e94750b1ee59c1098b8689e0f4a918926f244fb5" },
+      { key: "fonts/WixMadeforDisplay-Regular.ttf", contentType: "font/ttf", offset: 3904890, length: 90872, sha256: "97ed8f1a6772abe26e3d8af5cecfc4b02faa94497d585b0398b5053b739a70c1" },
+      { key: "fonts/WixMadeforDisplay-SemiBold.ttf", contentType: "font/ttf", offset: 3995762, length: 90980, sha256: "642feab8a48ddf6c7a89d7c2a7c0edfa0e6e773f671287e460e222703563191e" },
+      { key: "fonts/WixMadeforText-Bold.ttf", contentType: "font/ttf", offset: 4086742, length: 108636, sha256: "37c179b4fefb63ea9637322b84583a2df53aa226c150294eea1675c14b1b8e29" },
+      { key: "fonts/WixMadeforText-ExtraBold.ttf", contentType: "font/ttf", offset: 4195378, length: 109084, sha256: "62e2fe4718129f36ecdb0ae4de385bd6b81ecc876146447167c6c140fad699a9" },
+      { key: "fonts/WixMadeforText-Medium.ttf", contentType: "font/ttf", offset: 4304462, length: 109048, sha256: "4ecf270136af928612c76fe4ebade91d8156975e5ea4c0cf9225501dd1788e02" },
+      { key: "fonts/WixMadeforText-Regular.ttf", contentType: "font/ttf", offset: 4413510, length: 107700, sha256: "dee56f09fd3efc127c1ea95557edc74110c1460a46287da36e0af25efd341ef5" },
+      { key: "fonts/WixMadeforText-SemiBold.ttf", contentType: "font/ttf", offset: 4521210, length: 88108, sha256: "dced97a77624bc5f8b1ae65850360908297f4588e09feb6f22792d29dc7e765b" },
+      { key: "himi-sw.js", contentType: "application/javascript; charset=utf-8", offset: 4609318, length: 6748, sha256: "4a92459977d7cefa1a6a7e020c3a63509737f083b3f2773557c1a5771665811a" },
+      { key: "index.html", contentType: "text/html; charset=utf-8", offset: 4616066, length: 4947, sha256: "1713847734a2aa3d28352c73b80cce03da3d4cee8ed5c1ea156eeafa893231b5" },
+      { key: "t5-frame.html", contentType: "text/html; charset=utf-8", offset: 4621013, length: 17768, sha256: "a47dec8623a0f58def7d8785ee74d08483626e75d07c9328bfc9ecb2172c2e0d" }
     ];
   }
 });
@@ -161955,6 +161961,10 @@ function createReviewScreenRenderer() {
         });
       }
     },
+    async ready() {
+      const { pngAvailable: pngAvailable2 } = await Promise.resolve().then(() => (init_render_descriptor(), render_descriptor_exports));
+      return pngAvailable2();
+    },
     async close() {
       if (browser) await (await browser.catch(() => void 0))?.close().catch(() => {
       });
@@ -162508,11 +162518,14 @@ async function screenshotsCommand(flags, deps, out2) {
   const contentDir2 = requireFlag(flags, "content", "screenshots");
   const manifestText = readInput(deps, manifestPath, "manifest");
   const manifest = parseIapManifest(manifestText, manifestPath);
-  const facts = await appleFacts(flags, deps, out2, manifest);
   const renderer = (deps.reviewScreenRenderer ?? createReviewScreenRenderer)();
+  const dryRun = flags["dry-run"] === true;
+  if (!dryRun && renderer.ready && !await renderer.ready()) {
+    return out2.fail("taking screenshots needs a headless Chromium, installed once with `npx playwright install chromium` (~170MB) \u2014 nothing was rendered or written", { ok: false, code: "browser_unavailable" });
+  }
+  const facts = await appleFacts(flags, deps, out2, manifest);
   const only = textFlag(flags, "only");
   const outDir = textFlag(flags, "out-dir");
-  const dryRun = flags["dry-run"] === true;
   let report3;
   try {
     report3 = await takeReviewScreenshots({
@@ -179614,7 +179627,8 @@ var USAGE = `himi \u2014 the Himalaya authoring CLI (remote dev loop)
                                            signed-in member sees it on a bound iPhone (Apple price, buy
                                            button), save it at 1290\xD72796 and name it as the item's
                                            reviewScreenshot. --profile reads Apple's price (read-only)
-                                           and skips live products. Guide: himi docs iap-products
+                                           and skips live products. Needs Chromium, once:
+                                           npx playwright install chromium. Guide: himi docs iap-products
   himi logout [--target <t>]               clear the stored control token for a target
   himi notify setup --content <dir> [--target wix] [--yes] [--no-push-setup]
       Optional Branded/Ping setup. Prompts for site, native IDs and APNs key file.

package/guides/himi-json-output.md

@@ -107,6 +107,7 @@ existing `problems` list.
 | Code | Meaning |
 |---|---|
 | `screenshots_incomplete` | At least one selected item has no screenshot. Each one in `items` carries a `skipped` reason: no purchase screen, no Apple price yet, an existing screenshot kept without `--force`, a screen that did not show the Apple price, or a failed read of the item. The screenshots that were made are saved and named in the manifest. Exit 1. |
+| `browser_unavailable` | The headless Chromium the screenshots are taken in is not installed. Run `npx playwright install chromium` once. Nothing was rendered or written. Exit 2. |
 
 An invalid manifest fails with `manifest_invalid`, like the other `store iap` commands.
 

package/guides/iap-products.md

@@ -239,6 +239,11 @@ hosts only ever get the file's bytes, never the API key's token.
 `himi store iap screenshots --manifest <file> --content <app dir> [--profile <name>]` makes each
 product's review screenshot from the app's own purchase screen, so nobody has to take them on a phone:
 
+**One-time setup.** The screenshots are taken in a headless Chromium on your machine, so no phone,
+simulator or Xcode is needed. The Playwright library comes with himi; the browser is a separate
+download (~170MB) that you run once: `npx playwright install chromium`. Without it the command stops
+before rendering anything and says so (`browser_unavailable`). A `--dry-run` doesn't need it.
+
 1. **It renders the screen.** For each item it opens that Wix item's detail screen: `himi_product_<id>`,
    `himi_program_<id>` or `himi_plan_<id>`, or the plain screen given the `id` when the app has no such
    route. For a plan it falls back to the plans list (`himi_plans`), where older apps sell plans. The

package/guides/sdk-reference.json

@@ -9022,15 +9022,15 @@
       {
         "name": "confirmBooking",
         "kind": "function",
-        "jsdoc": "/** Confirm a pending booking — POST /bookings/v2/bookings/{id}/confirm. */",
-        "decl": "export function confirmBooking(bookingId: string, revision: string): Promise<WixUpdateBookingResponse>;",
+        "jsdoc": "/** Confirm a pending booking — POST /bookings/v2/bookings/{id}/confirm. `opts.site` addresses\n *  the write at that business (`wix-site-id`) instead of the active one. */",
+        "decl": "export function confirmBooking(bookingId: string, revision: string, opts?: WixCallOptions): Promise<WixUpdateBookingResponse>;",
         "http": "POST /bookings/v2/bookings/{…}/confirm"
       },
       {
         "name": "declineBooking",
         "kind": "function",
-        "jsdoc": "/** Decline a pending booking — POST /bookings/v2/bookings/{id}/decline. */",
-        "decl": "export function declineBooking(bookingId: string, revision: string, notify = false): Promise<WixUpdateBookingResponse>;",
+        "jsdoc": "/** Decline a pending booking — POST /bookings/v2/bookings/{id}/decline. `opts.site` as for\n *  `confirmBooking`. */",
+        "decl": "export function declineBooking(bookingId: string, revision: string, notify = false, opts?: WixCallOptions): Promise<WixUpdateBookingResponse>;",
         "http": "POST /bookings/v2/bookings/{…}/decline"
       },
       {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@wix/himalaya-cli",
-  "version": "0.1392.0",
+  "version": "0.1394.0",
   "type": "module",
   "description": "himi — the Himalaya authoring CLI. Build a Tier-5 content package on your own machine, push it to the production serve as a draft, preview it on web + Himi Player, and read worker logs back — the remote dev loop. Wraps @himalaya/serve-cli for transport.",
   "keywords": [
@@ -71,5 +71,5 @@
       "artifactId": "himalaya-cli"
     }
   },
-  "falconPackageHash": "791fcbd84b1bc44b065367bdf898a077e86fa8d083c7d201eb09837f"
+  "falconPackageHash": "1554f1e7d7c70e78f8d9d6f9c96640b7b624bec6b4aa9ae454345280"
 }

package/templates/beauty-salon/tier5-src/_shared/owner-load-error.ts

@@ -20,10 +20,9 @@ export function isOwnerPreviewLive(): boolean {
  *
  * `isBridgeUnavailable` cannot answer this: it reads "not live" as "preview",
  * and on NATIVE there is no input at all, so `undefined` satisfies it. That is
- * harmless for the callers that use it to pick a demo fallback or to queue a
- * write, and it is deliberately left alone for them — native write-behind
- * depends on it. It is NOT harmless for choosing COPY: native workers format
- * their failures the same way (`"HTTP \(code): \(body)"`, JSWorker.swift;
+ * left alone for the other apps that use it to pick a demo fallback or to queue
+ * a write. Owner-lite reads ask `ownerDemoFallback` instead. It is NOT
+ * harmless for choosing COPY: native workers format their failures the same way (`"HTTP \(code): \(body)"`, JSWorker.swift;
  * `"HTTP ${e.code}: ..."`, WebViewJSWorker.kt), so a transient `HTTP 503` on a
  * phone would otherwise be answered with "open this app on a device" — on the
  * device. Callers that pick a SENTENCE ask this instead.
@@ -43,11 +42,89 @@ export function isBridgeUnavailable(e: unknown): boolean {
   return /HTTP (405|501|502|503)\b/.test(String((e as Error)?.message ?? e));
 }
 
-/** Preserve native write-behind when the bridge is unavailable. This is a
- * queue decision, never permission to replace a failed live read with samples. */
-export function shouldQueueOwnerWrite(e: unknown): boolean {
-  if (ownerPreviewMode() === "live" || isOwnerPreviewDemo()) return false;
-  return /HTTP (405|501|502|503)\b/.test(String((e as Error)?.message ?? e));
+/**
+ * Whether a failed owner-lite READ may answer with the built-in demo records.
+ *
+ * Only where a demo was asked for: a web preview host that is not live. On a phone no
+ * mode is injected, so `isBridgeUnavailable` alone is `true` for a transient Wix
+ * `HTTP 503` — and the owner was shown sample appointments, orders and sites as if
+ * they were their business. Native falls through to the screen's error state.
+ * `isBridgeUnavailable` keeps its semantics: other apps' callers depend on it.
+ */
+export function ownerDemoFallback(e: unknown): boolean {
+  return isOwnerPreviewHost() && !isOwnerPreviewLive() && isBridgeUnavailable(e);
+}
+
+/**
+ * The sentence for an owner WRITE that failed because the device could not reach Wix at
+ * all (a transport failure). Nothing replays a queued write on any platform — every host's
+ * `drain` passes an empty closure — so the honest answer is that nothing was saved.
+ * Copy-as-configuration under `ownerCommon.`, which every owner screen forwards.
+ */
+export function ownerOfflineNotSaved(): string {
+  return copyParam(
+    "ownerCommon.offlineNotSaved",
+    "You’re offline — nothing was saved. Try again when you reconnect.",
+  );
+}
+
+/** The sentence for an owner WRITE that Wix answered with an unavailable status: the
+ *  device is online, so it is not "offline" — but nothing was saved all the same. */
+/**
+ * Whether a failed WRITE may have landed on Wix anyway, so the user must not be told it
+ * was not saved: a transport failure mid-request (timeout, reset, fetch rejection), the web
+ * host's after-send envelope (`HTTP 502 {…"sent":true}`), the serve bridge's mid-request
+ * `webwix_bridge_upstream_failed`, or a gateway status (502/503/504) that can arrive after
+ * the backend already ran. Only connect-time failures (`isOfflineFailure`) and the designed
+ * 405/501 bridge refusals prove nothing happened.
+ */
+export function writeMayHaveLanded(e: unknown): boolean {
+  if (isOfflineFailure(e)) return false;
+  if (isTransportFailure(e)) return true;
+  const msg = String((e as Error)?.message ?? e ?? "");
+  if (/"sent"\s*:\s*true/.test(msg)) return true;
+  // The web host's own envelope WITHOUT `sent: true` failed before the request left it, and
+  // a disabled owner rung / bridge refuses by design without sending anything.
+  if (/\bwebwix_(?:direct_failed|owner_disabled|bridge_disabled)\b/.test(msg)) return false;
+  // `webwix_bridge_upstream_failed` stays ambiguous: the same code covers a lookup that failed
+  // before sending and a serve-bridge failure mid-request, and nothing in it says which.
+  return /\bwebwix_bridge_upstream_failed\b/.test(msg) || /HTTP (502|503|504)\b/.test(msg);
+}
+
+/** Wix answered that the record does not exist (`HTTP 404`). A detail must not fall back to
+ *  its cached row then: that row is what a delete whose reply was lost leaves behind. */
+export function isNotFound(e: unknown): boolean {
+  if (/HTTP 404\b/.test(String((e as Error)?.message ?? e ?? ""))) return true;
+  // An SDK that answers a 404 with its own "not found" error keeps the HTTP one as `cause`
+  // (the blog SDK's getPost, after its query fallback also finds nothing).
+  const cause = (e as { cause?: unknown } | null | undefined)?.cause;
+  return cause !== undefined && cause !== e && /HTTP 404\b/.test(String((cause as Error)?.message ?? cause));
+}
+
+export function ownerUnavailableNotSaved(): string {
+  return copyParam(
+    "ownerCommon.unavailableNotSaved",
+    "Wix isn’t available right now — nothing was saved. Try again in a moment.",
+  );
+}
+
+/** The sentence for an owner WRITE that may have landed (`writeMayHaveLanded`): it can't
+ *  be called saved or not saved. */
+export function ownerWriteUnconfirmed(): string {
+  return copyParam(
+    "ownerCommon.writeUnconfirmed",
+    "Wix didn’t confirm this, so it may or may not have been saved. Check before trying again.",
+  );
+}
+
+/** Display copy for a failed owner write: `ownerOfflineNotSaved` when the request never
+ *  left the device, `ownerWriteUnconfirmed` when it may have landed, `ownerUnavailableNotSaved`
+ *  for the designed 405/501 bridge refusals outside a live preview, else `ownerLoadError`. */
+export function ownerWriteError(e: unknown): string {
+  if (isOfflineFailure(e)) return ownerOfflineNotSaved();
+  if (writeMayHaveLanded(e)) return ownerWriteUnconfirmed();
+  if (!isOwnerPreviewLive() && /HTTP (405|501)\b/.test(String((e as Error)?.message ?? e))) return ownerUnavailableNotSaved();
+  return ownerLoadError(e);
 }
 
 /** `HTTP 403: …` → "403", when the message carries a status at all. */
@@ -99,6 +176,10 @@ const TRANSPORT = [
   /^Failed to connect to \S/,
   /^Unable to resolve host\b/,
   /\b(?:Connection refused|Network is unreachable|Software caused connection abort)\b/,
+  // OkHttp / HttpURLConnection messages a dropped connection produces mid-request, which
+  // Android's bridge forwards without the exception class.
+  /\b(?:Connection reset|ECONNRESET|ETIMEDOUT|EPIPE|Broken pipe|stream was reset)\b/,
+  /^unexpected end of stream\b/i,
   /^(?:timeout|Read timed out|connect timed out)$/i,
   /\bFailed to fetch\b/,
   /\bNetworkError when attempting to fetch\b/,
@@ -113,6 +194,27 @@ export function isTransportFailure(e: unknown): boolean {
   return TRANSPORT.some((re) => re.test(msg));
 }
 
+/** Transport failures that happen while CONNECTING — no connection, no route, no such host,
+ *  connection refused — so the request provably never left the device. Every other
+ *  transport failure (a timeout, a reset, a bad or truncated response, a browser's fetch
+ *  rejection, which says nothing about when it failed) may come after Wix took the write. */
+const NEVER_SENT = [
+  /\bNSURLErrorDomain Code=-10(?:09|04|03|06|20|18)\b/,  // not connected / cannot connect / no host / DNS / data not allowed / roaming off
+  /\b(?:UnknownHost|Connect|NoRouteToHost)Exception\b/,
+  /^Failed to connect to \S/,
+  /^Unable to resolve host\b/,
+  /\b(?:Connection refused|Network is unreachable)\b/,
+  /\bnet::ERR_(?:INTERNET_DISCONNECTED|NAME_NOT_RESOLVED|CONNECTION_REFUSED|ADDRESS_UNREACHABLE|NETWORK_ACCESS_DENIED)\b/,
+];
+
+/** No HTTP answer, and the request provably never left the device: the user is offline, and
+ *  a write certainly did not happen. Anything else may have landed (see `NEVER_SENT`). */
+export function isOfflineFailure(e: unknown): boolean {
+  if (!isTransportFailure(e)) return false;
+  const msg = String((e as Error)?.message ?? e ?? "");
+  return NEVER_SENT.some((re) => re.test(msg));
+}
+
 /** The one sentence for a transport failure. Copy-as-configuration: the key is
  *  under `ownerCommon.`, which every owner screen (Aria included) forwards. */
 export function ownerTransportFailureText(): string {
@@ -194,8 +296,8 @@ export function ownerPreviewUnavailable(): string {
  * error says: this names the web preview when there IS one. `isBridgeUnavailable`
  * reads "not live" as "preview", and native injects no mode at all, so the
  * default would answer a device-side `HTTP 503` with "open this app on a device"
- * — on the device. That predicate is deliberately left alone: native
- * write-behind (`shouldQueueOwnerWrite`) depends on exactly it.
+ * — on the device. That predicate is deliberately left alone: other apps'
+ * demo and write-queue decisions depend on exactly it.
  *
  * The reductions this used to add are now in `humanWireError`, so every owner
  * screen gets them rather than the two that happened to call this.
@@ -232,6 +334,7 @@ export function ownerDisplayError(e: unknown): string {
  */
 export function ownerLoadError(e: unknown): string {
   const msg = String((e as Error)?.message ?? e);
-  if (isBridgeUnavailable(e)) return ownerPreviewUnavailable();
+  // Same host guard as `ownerDisplayError`: on a phone, "open this app on a device" is false.
+  if (isOwnerPreviewHost() && isBridgeUnavailable(e)) return ownerPreviewUnavailable();
   return humanWireError(msg);
 }

package/templates/beauty-salon/tier5-src/himi-branded-lite-cart/index.ts

@@ -24,25 +24,33 @@ async function resolveMsid(): Promise<string> {
   }
 }
 import { copyParam, copyTemplate, stashCopy } from "../_shared/himi-copy.js";
-import { getAll, upsert, remove as dbRemove, enqueue, type DbEntity } from "@himalaya/local-db";
-import { isBridgeUnavailable } from "../_shared/owner-load-error.js";
+import { getAll, upsert, remove as dbRemove, type DbEntity } from "@himalaya/local-db";
+import { isOfflineFailure, writeMayHaveLanded } from "../_shared/owner-load-error.js";
 
 // Offline-first (data-offline): the cart is READ-THROUGH — paint the last-synced line
 // items from the on-device `cart` entity first (instant, works offline), then
-// revalidate from Wix and refresh the cache. `remove` is WRITE-BEHIND — the line is
-// dropped from the cache OPTIMISTICALLY, then the Wix write is attempted; if it can't
-// reach the bridge/network the removal is ENQUEUED for replay on reconnect. The
-// checkout redirect path is unchanged. Every local-db call is wrapped so a build
+// revalidate from Wix and refresh the cache.
+// `remove` drops the line from the cache only AFTER Wix confirms it; a failed removal
+// keeps the line on screen and says nothing was removed (no host replays a
+// queued write, so the old "removed offline" promise was a removal that never happened).
+// The checkout redirect path is unchanged. Every local-db call is wrapped so a build
 // without the `local_database` grant behaves exactly as before (online-only).
 const ENTITY = "cart";
 async function readCachedItems(): Promise<Row[]> {
   try { return (await getAll(ENTITY)) as unknown as Row[]; } catch { return []; }
 }
+/** Mirror the cart Wix returned: upsert its lines and drop any cached line it no longer has
+ *  (one removed elsewhere, or a removal whose answer was lost), so the offline paint never
+ *  shows a line that is gone. */
 async function writeCachedItems(rows: Row[]): Promise<void> {
-  try { for (const r of rows) await upsert(ENTITY, r as unknown as DbEntity); } catch { /* capability not granted → online-only */ }
+  try {
+    const keep = new Set(rows.map((r) => r.id));
+    for (const old of (await getAll(ENTITY)) as unknown as Row[]) if (!keep.has(old.id)) await dbRemove(ENTITY, old.id);
+    for (const r of rows) await upsert(ENTITY, r as unknown as DbEntity);
+  } catch { /* capability not granted → online-only */ }
 }
+
 async function cacheDrop(id: string): Promise<void> { try { await dbRemove(ENTITY, id); } catch { /* capability not granted */ } }
-async function queueWrite(actionId: string, params: Record<string, string>): Promise<void> { try { await enqueue(actionId, params); } catch { /* capability not granted */ } }
 
 interface Row {
   catalogReference?: { appId: string; catalogItemId: string; options?: Record<string, unknown> };
@@ -164,6 +172,39 @@ function derive(state: State): State {
   };
 }
 
+/** Remove one line (the trash button, and "−" at quantity 1). The cache drops it only once
+ *  Wix confirms; a failure keeps it on screen and says why. */
+/** Remove one line (the trash button, and "−" at quantity 1). The cache drops it only once
+ *  Wix confirms; a failure keeps it on screen and says why. */
+async function removeLine(state: State, id: string): Promise<State> {
+  try {
+    await removeLineItemsFromCurrentCart([id]);
+  } catch (e) {
+    // The line stays visible (and cached) until a read says otherwise.
+    if (isOfflineFailure(e)) {
+      return derive({ ...state, checkoutHint: copyParam("cart.removeOfflineFailedMessage", "You’re offline — nothing was removed. Try again when you reconnect.") });
+    }
+    // It may have landed (mid-request drop, after-send envelope, gateway 5xx): say so,
+    // rather than "could not remove".
+    if (writeMayHaveLanded(e)) {
+      return derive({ ...state, checkoutHint: copyParam("cart.removeUnconfirmedMessage", "The connection dropped, so this item may already be removed. Refresh to check.") });
+    }
+    return derive({ ...state, checkoutHint: copyParam("cart.removeFailedMessage", "Could not remove this item.") });
+  }
+  // Wix confirmed it: only now does the line leave the cache, and it stays gone even
+  // if the re-fetch below fails.
+  await cacheDrop(id);
+  const removed = copyParam("cart.itemRemovedMessage", "Item removed.");
+  try {
+    return await refresh(state, removed);
+  } catch {
+    // The totals Wix last sent still count the removed line, and the new ones did not
+    // arrive: show none rather than a wrong one.
+    const items = state.items.filter((it) => it.id !== id);
+    return derive({ ...state, status: "ready", items, subtotal: "", commerceSubtotal: "", emptyText: items.length ? "" : copyParam("cart.emptyText", "Your cart is empty."), checkoutHint: removed });
+  }
+}
+
 async function refresh(state: State, checkoutHint = ""): Promise<State> {
   const cart = await getCurrentCart();
   const items = (cart.lineItems ?? []).map(row);
@@ -240,21 +281,7 @@ const svc = defineService<State, {
     remove: async (state, arg) => {
       const id = itemId(arg);
       if (!id) return state;
-      // Optimistic local delete — the cart drops the row immediately (offline or not).
-      await cacheDrop(id);
-      try {
-        await removeLineItemsFromCurrentCart([id]);
-        return await refresh(state, copyParam("cart.itemRemovedMessage", "Item removed."));
-      } catch (e) {
-        if (isBridgeUnavailable(e)) {
-          // Offline / no bridge: the optimistic cache drop already shows; queue the
-          // removal to replay (WriteQueue, idempotent) when connectivity returns.
-          await queueWrite("tier5.himiStoreCart.remove", { id });
-          const items = state.items.filter((it) => it.id !== id);
-          return derive({ ...state, status: "ready", items, emptyText: items.length ? "" : copyParam("cart.emptyText", "Your cart is empty."), checkoutHint: copyParam("cart.removedOfflineMessage", "Removed offline — will sync when you reconnect.") });
-        }
-        return derive({ ...state, checkoutHint: copyParam("cart.removeFailedMessage", "Could not remove this item.") });
-      }
+      return removeLine(state, id);
     },
     increment: async (state, arg) => {
       const id = itemId(arg);
@@ -272,12 +299,9 @@ const svc = defineService<State, {
       const id = itemId(arg);
       const line = state.items.find((candidate) => candidate.id === id);
       if (!line) return state;
+      // Qty 1 − ⇒ remove the line (the control never dead-ends), with remove's handling.
+      if (line.quantity <= 1) return removeLine(state, id);
       try {
-        if (line.quantity <= 1) {
-          // Qty 1 − ⇒ remove the line (the control never dead-ends).
-          await removeLineItemsFromCurrentCart([id]);
-          return await refresh(state, copyParam("cart.itemRemovedMessage", "Item removed."));
-        }
         const cartId = (await getCurrentCart()).id || "";
         await updateLineItemQuantity(cartId, id, line.quantity - 1);
         return await refresh(state);