@wix/himalaya-cli 0.1419.0 → 0.1420.0

package/dist/cli.mjs

@@ -10097,7 +10097,9 @@ __export(validate_descriptor_core_exports, {
   CORE_PACKAGES: () => CORE_PACKAGES,
   CRAWL_BLOCKING_PASSES: () => CRAWL_BLOCKING_PASSES,
   DESCRIPTOR_DEPTH_BUDGETS: () => DESCRIPTOR_DEPTH_BUDGETS,
+  DEVICE_NETWORK_WITHHELD: () => DEVICE_NETWORK_WITHHELD,
   DEVICE_PARITY_WITHHELD: () => DEVICE_PARITY_WITHHELD,
+  DEVICE_WITHHELD: () => DEVICE_WITHHELD,
   EMBEDDED_BINDING: () => EMBEDDED_BINDING,
   INTEGER_MODIFIERS: () => INTEGER_MODIFIERS,
   INTEGER_PROPS: () => INTEGER_PROPS,
@@ -10476,9 +10478,12 @@ async function bootBundleWorker(bundleJs, opts) {
     }, info() {
     }, debug() {
     } },
-    // A raw fetch is still a signal, not a silent hang (mirrors runBundleSandbox).
-    fetch: () => {
-      throw new Error("`fetch` is not available \u2014 workers load data via the sanctioned Wix transport (`@himalaya/wix-*` or `globalThis.himalaya.wixApi.call`), not raw `fetch`.");
+    // A raw fetch is still a signal, not a silent hang (mirrors runBundleSandbox). Under
+    // deviceParity it is ABSENT instead, as on every device (#4499 — DEVICE_NETWORK_WITHHELD).
+    ...opts.deviceParity ? {} : {
+      fetch: () => {
+        throw new Error("`fetch` is not available \u2014 workers load data via the sanctioned Wix transport (`@himalaya/wix-*` or `globalThis.himalaya.wixApi.call`), not raw `fetch`.");
+      }
     },
     // Under deviceParity these are ABSENT so a bundle touching one throws here exactly as it
     // would on the FLOOR. Measured, not assumed (engine-parity runners, #1367): JSC and the
@@ -10525,7 +10530,7 @@ async function bootBundleWorker(bundleJs, opts) {
   let guestActions;
   let guestSession;
   try {
-    const hide = opts.deviceParity ? DEVICE_PARITY_WITHHELD : void 0;
+    const hide = opts.deviceParity ? DEVICE_WITHHELD : void 0;
     if (realm.runWithActions) {
       const ran = await realm.runWithActions(bundleJs, sandbox, {
         timeoutMs: 2e3 + budgetMs,
@@ -12468,7 +12473,7 @@ function validateScreenDescriptor(screenId, descriptor, opts = {}) {
     services: Object.keys(services)
   };
 }
-var CRAWL_BLOCKING_PASSES, BOOT_EVAL_TIMEOUT_MS, DRIFT_PROBES, DEVICE_PARITY_WITHHELD, defaultEvaluator, bootEvaluator, actionEvaluator, NATIVE_PROP_ENUMS, KNOWN_PROPS, IN_ARRAY_BINDING_PROPS, SERVICE_SIGIL, INTEGER_PROPS, NATIVE_REQUIRED_PROPS, bareNestedClass, NATIVE_NESTED_CLASSES, NATIVE_MODIFIERS_CLASS, NATIVE_DESCRIPTOR_CLASS, NATIVE_DESCRIPTOR_NESTED, NATIVE_NESTED_PROPS, LENIENT_TOP_BAR_BLOCKS, MODIFIER_KEYS, INTEGER_MODIFIERS, MODIFIER_KINDS, SCHEMA_SCORED_NODES, CORE_PACKAGES, LEGACY_UNSCORED_KEYS, DYNAMIC_PLACEHOLDER, LITERAL_ONLY_PROPS, SERVICE_ONLY_BINDING_PROPS, WHOLE_VALUE_BINDING, EMBEDDED_BINDING, OPTIONS_BINDING_PROPS, EDITOR_SERVICE_NAME, SHEET_PLACEMENTS, DESCRIPTOR_DEPTH_BUDGETS, UNSAFE_TO_RECURSE_DEPTH, ROW_TEMPLATE_HOST_TYPES, TOP_BAR_TRAILING_LIMIT, TOP_BAR_NON_TRAILING, BUTTON_STYLES, EMPTY_STATE_ACTION_STYLES, EMPTY_STATE_ACTION_SIZES;
+var CRAWL_BLOCKING_PASSES, BOOT_EVAL_TIMEOUT_MS, DRIFT_PROBES, DEVICE_PARITY_WITHHELD, DEVICE_NETWORK_WITHHELD, DEVICE_WITHHELD, defaultEvaluator, bootEvaluator, actionEvaluator, NATIVE_PROP_ENUMS, KNOWN_PROPS, IN_ARRAY_BINDING_PROPS, SERVICE_SIGIL, INTEGER_PROPS, NATIVE_REQUIRED_PROPS, bareNestedClass, NATIVE_NESTED_CLASSES, NATIVE_MODIFIERS_CLASS, NATIVE_DESCRIPTOR_CLASS, NATIVE_DESCRIPTOR_NESTED, NATIVE_NESTED_PROPS, LENIENT_TOP_BAR_BLOCKS, MODIFIER_KEYS, INTEGER_MODIFIERS, MODIFIER_KINDS, SCHEMA_SCORED_NODES, CORE_PACKAGES, LEGACY_UNSCORED_KEYS, DYNAMIC_PLACEHOLDER, LITERAL_ONLY_PROPS, SERVICE_ONLY_BINDING_PROPS, WHOLE_VALUE_BINDING, EMBEDDED_BINDING, OPTIONS_BINDING_PROPS, EDITOR_SERVICE_NAME, SHEET_PLACEMENTS, DESCRIPTOR_DEPTH_BUDGETS, UNSAFE_TO_RECURSE_DEPTH, ROW_TEMPLATE_HOST_TYPES, TOP_BAR_TRAILING_LIMIT, TOP_BAR_NON_TRAILING, BUTTON_STYLES, EMPTY_STATE_ACTION_STYLES, EMPTY_STATE_ACTION_SIZES;
 var init_validate_descriptor_core = __esm({
   "../../core/dev-server/src/validate-descriptor.core.ts"() {
     init_validator();
@@ -12514,6 +12519,25 @@ var init_validate_descriptor_core = __esm({
       "TextDecoder",
       "AbortController"
     ];
+    DEVICE_NETWORK_WITHHELD = [
+      "fetch",
+      "XMLHttpRequest",
+      "WebSocket",
+      "EventSource",
+      "importScripts",
+      "WebTransport",
+      "RTCPeerConnection",
+      "webkitRTCPeerConnection",
+      "Worker",
+      "SharedWorker",
+      "Image",
+      "Audio",
+      "open",
+      "Request",
+      "Response",
+      "Headers"
+    ];
+    DEVICE_WITHHELD = [...DEVICE_NETWORK_WITHHELD, ...DEVICE_PARITY_WITHHELD];
     defaultEvaluator = null;
     bootEvaluator = null;
     actionEvaluator = null;
@@ -13997,7 +14021,9 @@ __export(validate_descriptor_exports, {
   CORE_PACKAGES: () => CORE_PACKAGES,
   CRAWL_BLOCKING_PASSES: () => CRAWL_BLOCKING_PASSES,
   DESCRIPTOR_DEPTH_BUDGETS: () => DESCRIPTOR_DEPTH_BUDGETS,
+  DEVICE_NETWORK_WITHHELD: () => DEVICE_NETWORK_WITHHELD,
   DEVICE_PARITY_WITHHELD: () => DEVICE_PARITY_WITHHELD,
+  DEVICE_WITHHELD: () => DEVICE_WITHHELD,
   EMBEDDED_BINDING: () => EMBEDDED_BINDING,
   INTEGER_MODIFIERS: () => INTEGER_MODIFIERS,
   INTEGER_PROPS: () => INTEGER_PROPS,
@@ -16200,6 +16226,9 @@ ${opts.liveTransport ? `      var handle = { getState: function () { return def
   globalThis.fetch = function () {
     throw new Error("\`fetch\` is not available in the author-time sandbox \u2014 workers load data via the sanctioned Wix transport (\`@himalaya/wix-*\` or \`globalThis.himalaya.wixApi.call\`), not raw \`fetch\`.");
   };
+  // ...unless \`hide\` withholds it (deviceParity, #4499): every device has NO \`fetch\`, so a
+  // stub here would let a \`typeof fetch === "function"\` branch pass and fail on the device.
+${(opts.hide ?? []).includes("fetch") ? "  delete globalThis.fetch;" : ""}
   // Timers honour \`hide\`. Installing them unconditionally made \`deviceParity\` report
   // \`typeof setTimeout === "function"\` where node:vm correctly reported "undefined" \u2014 a FALSE
   // GREEN on exactly the floor gate this realm exists to enforce. The URL family is never

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@wix/himalaya-cli",
-  "version": "0.1419.0",
+  "version": "0.1420.0",
   "type": "module",
   "description": "himi — the Himalaya authoring CLI. Build a Tier-5 content package on your own machine, push it to the production serve as a draft, preview it on web + Himi Player, and read worker logs back — the remote dev loop. Wraps @himalaya/serve-cli for transport.",
   "keywords": [
@@ -71,5 +71,5 @@
       "artifactId": "himalaya-cli"
     }
   },
-  "falconPackageHash": "ee7c2063084b2cc9cfe97bd9969ad339ad9ea61d026dcfcbe7b4f9e5"
+  "falconPackageHash": "d2a780fce1a8d60a36a6f5cf4f8860d5d454764049e49a0fa39c2885"
 }