@wix/himalaya-cli 0.1419.0 → 0.1421.0

package/dist/authoring-runtime/node_modules/@wix/himalaya/dist/_types/core/ts/src/define-app.d.ts

@@ -824,7 +824,7 @@ export interface TelemetrySink {
  * integration; Phase A reserves the names so apps configuring telemetry sinks
  * before the engine lands can prepare matching schemas without later churn.
  */
-export type KnownTelemetryEventType = "screen_view" | "action_dispatched" | "action_completed" | "action_failed" | "cache_layer_miss" | "toggles_applied" | "unknown_component_fallback" | "bridge_call_denied" | "bridge_dispatch" | "bridge_wix_call" | "worker_boot_started" | "worker_boot_completed" | "worker_crashed" | "worker_console" | "bundle_load_failed" | "bundle_load_revoked" | "app_launched" | "app_foreground" | "app_background" | "launch_time" | "screen_load" | "network_request" | "app_crashed" | "error_logged" | "experiment_exposed" | "flag_evaluated";
+export type KnownTelemetryEventType = "screen_view" | "action_dispatched" | "action_completed" | "action_failed" | "cache_layer_miss" | "toggles_applied" | "unknown_component_fallback" | "bridge_call_denied" | "bridge_dispatch" | "bridge_wix_call" | "worker_boot_started" | "worker_boot_completed" | "worker_crashed" | "worker_console" | "bundle_load_failed" | "bundle_load_revoked" | "descriptor_decode_failed" | "descriptor_decode_degraded" | "app_launched" | "app_foreground" | "app_background" | "launch_time" | "screen_load" | "network_request" | "app_crashed" | "error_logged" | "experiment_exposed" | "flag_evaluated";
 export interface TelemetryEvent {
     /**
      * Platform-mandated taxonomy, per invariant 23. Use [KnownTelemetryEventType]

package/dist/cli.mjs

@@ -9002,6 +9002,81 @@ var init_token_suggest = __esm({
   }
 });
 
+// ../worker-globals/allowlist.ts
+var ES2020_GLOBALS, IMPLICIT_BINDINGS, WORKER_SURFACE, WORKER_ALLOWLIST;
+var init_allowlist = __esm({
+  "../worker-globals/allowlist.ts"() {
+    ES2020_GLOBALS = [
+      // value properties
+      "globalThis",
+      "undefined",
+      "NaN",
+      "Infinity",
+      // function properties
+      "parseInt",
+      "parseFloat",
+      "isNaN",
+      "isFinite",
+      "encodeURI",
+      "encodeURIComponent",
+      "decodeURI",
+      "decodeURIComponent",
+      // fundamental objects
+      "Object",
+      "Function",
+      "Boolean",
+      "Symbol",
+      // errors
+      "Error",
+      "EvalError",
+      "RangeError",
+      "ReferenceError",
+      "SyntaxError",
+      "TypeError",
+      "URIError",
+      // numbers, dates, text
+      "Number",
+      "BigInt",
+      "Math",
+      "Date",
+      "String",
+      "RegExp",
+      // indexed / keyed collections
+      "Array",
+      "Map",
+      "Set",
+      "WeakMap",
+      "WeakSet",
+      // binary data
+      "ArrayBuffer",
+      "DataView",
+      "Int8Array",
+      "Uint8Array",
+      "Uint8ClampedArray",
+      "Int16Array",
+      "Uint16Array",
+      "Int32Array",
+      "Uint32Array",
+      "Float32Array",
+      "Float64Array",
+      "BigInt64Array",
+      "BigUint64Array",
+      // structured data, control abstraction, reflection
+      "JSON",
+      "Promise",
+      "Reflect",
+      "Proxy"
+    ];
+    IMPLICIT_BINDINGS = ["arguments"];
+    WORKER_SURFACE = ["himalaya", "console"];
+    WORKER_ALLOWLIST = /* @__PURE__ */ new Set([
+      ...ES2020_GLOBALS,
+      ...IMPLICIT_BINDINGS,
+      ...WORKER_SURFACE
+    ]);
+  }
+});
+
 // ../../core/dev-server/src/l10n-strings.ts
 function isUserVisibleCopy(s2) {
   return isCopyShaped(s2) && /[A-Za-z֐-׿؀-ۿ]/.test(s2);
@@ -10091,13 +10166,30 @@ var init_rich_content = __esm({
   }
 });
 
+// ../../core/dev-server/src/realm-parity.ts
+function withheldGlobalsSource(hide) {
+  if (!hide?.length) return "";
+  return `${JSON.stringify(hide)}.forEach(function (n) { try { delete globalThis[n]; } catch (e) { /* non-configurable: leave it */ } });`;
+}
+function realmInstallsIntl(intl, hide) {
+  return intl === true && !(hide ?? []).includes("Intl");
+}
+var init_realm_parity = __esm({
+  "../../core/dev-server/src/realm-parity.ts"() {
+  }
+});
+
 // ../../core/dev-server/src/validate-descriptor.core.ts
 var validate_descriptor_core_exports = {};
 __export(validate_descriptor_core_exports, {
   CORE_PACKAGES: () => CORE_PACKAGES,
   CRAWL_BLOCKING_PASSES: () => CRAWL_BLOCKING_PASSES,
   DESCRIPTOR_DEPTH_BUDGETS: () => DESCRIPTOR_DEPTH_BUDGETS,
+  DEVICE_NETWORK_WITHHELD: () => DEVICE_NETWORK_WITHHELD,
+  DEVICE_PARITY_CANDIDATES: () => DEVICE_PARITY_CANDIDATES,
   DEVICE_PARITY_WITHHELD: () => DEVICE_PARITY_WITHHELD,
+  DEVICE_STRIPPED_HOST_GLOBALS: () => DEVICE_STRIPPED_HOST_GLOBALS,
+  DEVICE_WITHHELD: () => DEVICE_WITHHELD,
   EMBEDDED_BINDING: () => EMBEDDED_BINDING,
   INTEGER_MODIFIERS: () => INTEGER_MODIFIERS,
   INTEGER_PROPS: () => INTEGER_PROPS,
@@ -10121,6 +10213,7 @@ __export(validate_descriptor_core_exports, {
   componentPropFindings: () => componentPropFindings,
   depthBudgetFindings: () => depthBudgetFindings,
   depthBudgetIssues: () => depthBudgetIssues,
+  deviceParityWithheldFrom: () => deviceParityWithheldFrom,
   dryRunBundle: () => dryRunBundle,
   enumFieldNames: () => enumFieldNames,
   extractBundleContract: () => extractBundleContract,
@@ -10137,6 +10230,7 @@ __export(validate_descriptor_core_exports, {
   pathCrossesOpaqueAuthorJson: () => pathCrossesOpaqueAuthorJson,
   pathValue: () => pathValue,
   pinnedIntrinsicsSource: () => pinnedIntrinsicsSource,
+  realmInstallsIntl: () => realmInstallsIntl,
   resolveActionEvaluator: () => resolveActionEvaluator,
   resolveBootEvaluator: () => resolveBootEvaluator,
   resolveEvaluator: () => resolveEvaluator,
@@ -10146,6 +10240,7 @@ __export(validate_descriptor_core_exports, {
   setDefaultEvaluator: () => setDefaultEvaluator,
   topBarFindings: () => topBarFindings,
   validateScreenDescriptor: () => validateScreenDescriptor,
+  withheldGlobalsSource: () => withheldGlobalsSource,
   workerSubtreeAllowed: () => workerSubtreeAllowed
 });
 function makeInert() {
@@ -10322,6 +10417,15 @@ function nondeterministicServices(bundleJs, opts = {}) {
   if (threw > 0) return names.sort();
   return names.filter((name) => safeStringify(a2[name]) !== safeStringify(b2[name])).sort();
 }
+function deviceParityWithheldFrom(root) {
+  const names = new Set(DEVICE_PARITY_CANDIDATES);
+  for (let o2 = root; o2 && o2 !== Object.prototype; o2 = Object.getPrototypeOf(o2)) {
+    for (const name of Object.getOwnPropertyNames(o2)) names.add(name);
+  }
+  names.delete("constructor");
+  names.delete("__proto__");
+  return [...names].filter((name) => /^[A-Za-z_$][\w$]*$/.test(name) && !WORKER_ALLOWLIST.has(name)).sort();
+}
 function setDefaultEvaluator(evaluator) {
   defaultEvaluator = evaluator;
 }
@@ -10476,9 +10580,12 @@ async function bootBundleWorker(bundleJs, opts) {
     }, info() {
     }, debug() {
     } },
-    // A raw fetch is still a signal, not a silent hang (mirrors runBundleSandbox).
-    fetch: () => {
-      throw new Error("`fetch` is not available \u2014 workers load data via the sanctioned Wix transport (`@himalaya/wix-*` or `globalThis.himalaya.wixApi.call`), not raw `fetch`.");
+    // A raw fetch is still a signal, not a silent hang (mirrors runBundleSandbox). Under
+    // deviceParity it is ABSENT instead, as on every device (#4499 — DEVICE_NETWORK_WITHHELD).
+    ...opts.deviceParity ? {} : {
+      fetch: () => {
+        throw new Error("`fetch` is not available \u2014 workers load data via the sanctioned Wix transport (`@himalaya/wix-*` or `globalThis.himalaya.wixApi.call`), not raw `fetch`.");
+      }
     },
     // Under deviceParity these are ABSENT so a bundle touching one throws here exactly as it
     // would on the FLOOR. Measured, not assumed (engine-parity runners, #1367): JSC and the
@@ -12468,13 +12575,14 @@ function validateScreenDescriptor(screenId, descriptor, opts = {}) {
     services: Object.keys(services)
   };
 }
-var CRAWL_BLOCKING_PASSES, BOOT_EVAL_TIMEOUT_MS, DRIFT_PROBES, DEVICE_PARITY_WITHHELD, defaultEvaluator, bootEvaluator, actionEvaluator, NATIVE_PROP_ENUMS, KNOWN_PROPS, IN_ARRAY_BINDING_PROPS, SERVICE_SIGIL, INTEGER_PROPS, NATIVE_REQUIRED_PROPS, bareNestedClass, NATIVE_NESTED_CLASSES, NATIVE_MODIFIERS_CLASS, NATIVE_DESCRIPTOR_CLASS, NATIVE_DESCRIPTOR_NESTED, NATIVE_NESTED_PROPS, LENIENT_TOP_BAR_BLOCKS, MODIFIER_KEYS, INTEGER_MODIFIERS, MODIFIER_KINDS, SCHEMA_SCORED_NODES, CORE_PACKAGES, LEGACY_UNSCORED_KEYS, DYNAMIC_PLACEHOLDER, LITERAL_ONLY_PROPS, SERVICE_ONLY_BINDING_PROPS, WHOLE_VALUE_BINDING, EMBEDDED_BINDING, OPTIONS_BINDING_PROPS, EDITOR_SERVICE_NAME, SHEET_PLACEMENTS, DESCRIPTOR_DEPTH_BUDGETS, UNSAFE_TO_RECURSE_DEPTH, ROW_TEMPLATE_HOST_TYPES, TOP_BAR_TRAILING_LIMIT, TOP_BAR_NON_TRAILING, BUTTON_STYLES, EMPTY_STATE_ACTION_STYLES, EMPTY_STATE_ACTION_SIZES;
+var CRAWL_BLOCKING_PASSES, BOOT_EVAL_TIMEOUT_MS, DRIFT_PROBES, DEVICE_NETWORK_WITHHELD, DEVICE_STRIPPED_HOST_GLOBALS, DEVICE_WITHHELD, DEVICE_PARITY_CANDIDATES, DEVICE_PARITY_WITHHELD, defaultEvaluator, bootEvaluator, actionEvaluator, NATIVE_PROP_ENUMS, KNOWN_PROPS, IN_ARRAY_BINDING_PROPS, SERVICE_SIGIL, INTEGER_PROPS, NATIVE_REQUIRED_PROPS, bareNestedClass, NATIVE_NESTED_CLASSES, NATIVE_MODIFIERS_CLASS, NATIVE_DESCRIPTOR_CLASS, NATIVE_DESCRIPTOR_NESTED, NATIVE_NESTED_PROPS, LENIENT_TOP_BAR_BLOCKS, MODIFIER_KEYS, INTEGER_MODIFIERS, MODIFIER_KINDS, SCHEMA_SCORED_NODES, CORE_PACKAGES, LEGACY_UNSCORED_KEYS, DYNAMIC_PLACEHOLDER, LITERAL_ONLY_PROPS, SERVICE_ONLY_BINDING_PROPS, WHOLE_VALUE_BINDING, EMBEDDED_BINDING, OPTIONS_BINDING_PROPS, EDITOR_SERVICE_NAME, SHEET_PLACEMENTS, DESCRIPTOR_DEPTH_BUDGETS, UNSAFE_TO_RECURSE_DEPTH, ROW_TEMPLATE_HOST_TYPES, TOP_BAR_TRAILING_LIMIT, TOP_BAR_NON_TRAILING, BUTTON_STYLES, EMPTY_STATE_ACTION_STYLES, EMPTY_STATE_ACTION_SIZES;
 var init_validate_descriptor_core = __esm({
   "../../core/dev-server/src/validate-descriptor.core.ts"() {
     init_validator();
     init_validator();
     init_tokens();
     init_token_suggest();
+    init_allowlist();
     init_l10n_strings();
     init_a11y_contract();
     init_bindings();
@@ -12483,6 +12591,7 @@ var init_validate_descriptor_core = __esm({
     init_frame_limits();
     init_rich_content();
     init_worker_subtree();
+    init_realm_parity();
     CRAWL_BLOCKING_PASSES = /* @__PURE__ */ new Set([
       // A screen whose bindings do not resolve has no state to crawl.
       "bindings",
@@ -12503,7 +12612,25 @@ var init_validate_descriptor_core = __esm({
       { clock: Date.UTC(2021, 7, 28, 19, 35, 57, 789), seed: 1, mirrorRandom: true }
       // a Saturday or Sunday, the 28th/29th
     ];
-    DEVICE_PARITY_WITHHELD = [
+    DEVICE_NETWORK_WITHHELD = [
+      "fetch",
+      "XMLHttpRequest",
+      "WebSocket",
+      "EventSource",
+      "importScripts",
+      "WebTransport",
+      "RTCPeerConnection",
+      "webkitRTCPeerConnection",
+      "Worker",
+      "SharedWorker",
+      "Image",
+      "Audio",
+      "open",
+      "Request",
+      "Response",
+      "Headers"
+    ];
+    DEVICE_STRIPPED_HOST_GLOBALS = [
       "setTimeout",
       "clearTimeout",
       "setInterval",
@@ -12514,6 +12641,33 @@ var init_validate_descriptor_core = __esm({
       "TextDecoder",
       "AbortController"
     ];
+    DEVICE_WITHHELD = [...DEVICE_NETWORK_WITHHELD, ...DEVICE_STRIPPED_HOST_GLOBALS];
+    DEVICE_PARITY_CANDIDATES = [
+      ...DEVICE_WITHHELD,
+      // Host APIs and post-ES2020 / non-portable intrinsics an engine may carry natively (QuickJS-ng 0.15
+      // installs `performance` and `queueMicrotask`), named so a host realm without them still withholds them.
+      "atob",
+      "btoa",
+      "structuredClone",
+      "queueMicrotask",
+      "crypto",
+      "performance",
+      "navigator",
+      "self",
+      "window",
+      "Intl",
+      "WeakRef",
+      "FinalizationRegistry",
+      "AggregateError",
+      "InternalError",
+      "SharedArrayBuffer",
+      "Atomics",
+      "WebAssembly",
+      "eval",
+      "escape",
+      "unescape"
+    ];
+    DEVICE_PARITY_WITHHELD = deviceParityWithheldFrom(globalThis);
     defaultEvaluator = null;
     bootEvaluator = null;
     actionEvaluator = null;
@@ -13997,7 +14151,11 @@ __export(validate_descriptor_exports, {
   CORE_PACKAGES: () => CORE_PACKAGES,
   CRAWL_BLOCKING_PASSES: () => CRAWL_BLOCKING_PASSES,
   DESCRIPTOR_DEPTH_BUDGETS: () => DESCRIPTOR_DEPTH_BUDGETS,
+  DEVICE_NETWORK_WITHHELD: () => DEVICE_NETWORK_WITHHELD,
+  DEVICE_PARITY_CANDIDATES: () => DEVICE_PARITY_CANDIDATES,
   DEVICE_PARITY_WITHHELD: () => DEVICE_PARITY_WITHHELD,
+  DEVICE_STRIPPED_HOST_GLOBALS: () => DEVICE_STRIPPED_HOST_GLOBALS,
+  DEVICE_WITHHELD: () => DEVICE_WITHHELD,
   EMBEDDED_BINDING: () => EMBEDDED_BINDING,
   INTEGER_MODIFIERS: () => INTEGER_MODIFIERS,
   INTEGER_PROPS: () => INTEGER_PROPS,
@@ -14023,6 +14181,7 @@ __export(validate_descriptor_exports, {
   componentPropFindings: () => componentPropFindings,
   depthBudgetFindings: () => depthBudgetFindings,
   depthBudgetIssues: () => depthBudgetIssues,
+  deviceParityWithheldFrom: () => deviceParityWithheldFrom,
   discoverNativeActions: () => discoverNativeActions,
   dryRunBundle: () => dryRunBundle,
   enumFieldNames: () => enumFieldNames,
@@ -14045,6 +14204,7 @@ __export(validate_descriptor_exports, {
   pinnedIntrinsicsSource: () => pinnedIntrinsicsSource,
   readBuiltBundle: () => readBuiltBundle,
   readBuiltBundleMap: () => readBuiltBundleMap,
+  realmInstallsIntl: () => realmInstallsIntl,
   registeredActions: () => registeredActions,
   resolveActionEvaluator: () => resolveActionEvaluator,
   resolveBootEvaluator: () => resolveBootEvaluator,
@@ -14055,6 +14215,7 @@ __export(validate_descriptor_exports, {
   setDefaultEvaluator: () => setDefaultEvaluator,
   topBarFindings: () => topBarFindings,
   validateScreenDescriptor: () => validateScreenDescriptor,
+  withheldGlobalsSource: () => withheldGlobalsSource,
   workerSubtreeAllowed: () => workerSubtreeAllowed
 });
 import { readFileSync as readFileSync15, existsSync as existsSync13, readdirSync as readdirSync11 } from "node:fs";
@@ -14151,10 +14312,13 @@ var init_validate_descriptor = __esm({
   "../../core/dev-server/src/validate-descriptor.ts"() {
     init_player_host_manifest();
     init_validate_descriptor_core();
+    init_realm_parity();
     init_validate_descriptor_core();
     nodeVmEvaluator = {
       run(code, sandbox, opts) {
         const context = createContext(sandbox);
+        const hideSource = withheldGlobalsSource((opts.hide ?? []).filter((name) => !(name in sandbox)));
+        if (hideSource) runInContext(hideSource, context, { filename: "himi-hide.js" });
         const pins = pinnedIntrinsicsSource(opts);
         if (pins) {
           const pinned = runInContext(`(${pins})(Date, Math)`, context, { timeout: opts.timeoutMs, filename: "himi-pins.js" });
@@ -16200,6 +16364,9 @@ ${opts.liveTransport ? `      var handle = { getState: function () { return def
   globalThis.fetch = function () {
     throw new Error("\`fetch\` is not available in the author-time sandbox \u2014 workers load data via the sanctioned Wix transport (\`@himalaya/wix-*\` or \`globalThis.himalaya.wixApi.call\`), not raw \`fetch\`.");
   };
+  // ...unless \`hide\` withholds it (deviceParity, #4499): every device has NO \`fetch\`, so a
+  // stub here would let a \`typeof fetch === "function"\` branch pass and fail on the device.
+${(opts.hide ?? []).includes("fetch") ? "  delete globalThis.fetch;" : ""}
   // Timers honour \`hide\`. Installing them unconditionally made \`deviceParity\` report
   // \`typeof setTimeout === "function"\` where node:vm correctly reported "undefined" \u2014 a FALSE
   // GREEN on exactly the floor gate this realm exists to enforce. The URL family is never
@@ -16289,6 +16456,9 @@ ${opts.clock === void 0 ? "" : opts.freezeDate ? `  globalThis.Date = (${pinnedI
       return sweepPromise;
     },
   });` : ""}
+  // LAST, so nothing the prelude installed (the \`fetch\` stub) or the engine carries natively
+  // (QuickJS-ng 0.15's \`performance\`, \`queueMicrotask\`) survives deviceParity (#4511).
+  ${withheldGlobalsSource(opts.hide)}
   return ${opts.liveTransport ? "{ readback: readback, dispatch: dispatchAction, actions: readActions }" : "readback"};
 })();
 `;
@@ -16369,14 +16539,7 @@ async function createQuickJsEvaluator(options = {}) {
         }
         readback = pre.value;
         if ((options.webGlobals ?? options.intl) && !opts.hide?.length) installWebGlobals(ctx);
-        if (options.intl) {
-          if (opts.hide?.length) {
-            throw new Error(
-              "quickjs: `intl: true` and deviceParity are contradictory realms \u2014 deviceParity models the wrist (no timers, no Intl) and `intl` models the host. Pick one: an evaluator without `intl` for the device-floor crawl, or one with it for containment."
-            );
-          }
-          installIntl(ctx);
-        }
+        if (realmInstallsIntl(options.intl, opts.hide)) installIntl(ctx);
         const res = ctx.evalCode(code, opts.filename);
         if (res.error) {
           const detail = ctx.dump(res.error);
@@ -16459,6 +16622,7 @@ var init_quickjs_evaluator = __esm({
     init_quickjs_intl();
     init_quickjs_state_codec();
     init_quickjs_web_globals();
+    init_realm_parity();
     init_validate_descriptor_core();
     RECYCLE_AFTER_BLOWUPS = 1;
     DEFAULT_MEMORY_LIMIT_BYTES = 128 * 1024 * 1024;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@wix/himalaya-cli",
-  "version": "0.1419.0",
+  "version": "0.1421.0",
   "type": "module",
   "description": "himi — the Himalaya authoring CLI. Build a Tier-5 content package on your own machine, push it to the production serve as a draft, preview it on web + Himi Player, and read worker logs back — the remote dev loop. Wraps @himalaya/serve-cli for transport.",
   "keywords": [
@@ -71,5 +71,5 @@
       "artifactId": "himalaya-cli"
     }
   },
-  "falconPackageHash": "ee7c2063084b2cc9cfe97bd9969ad339ad9ea61d026dcfcbe7b4f9e5"
+  "falconPackageHash": "4d89203d9e66955e734a0bf6b57b933b45cfceb3d80c598aff230922"
 }