@wix/himalaya-cli 0.1423.0 → 0.1425.0

package/dist/cli.mjs

@@ -7715,6 +7715,7 @@ function resolveTranslation(value, catalog3, sourceCatalog) {
 var BINDING_SIGILS, BINDING_SIGIL_RE, TRANSLATION_PREFIX, TRANSLATION_KEY_RE;
 var init_bindings = __esm({
   "../../core/ts/src/bindings.ts"() {
+    "use strict";
     BINDING_SIGILS = ["service", "flag", "item", "t"];
     BINDING_SIGIL_RE = new RegExp(
       `^\\$(?:${BINDING_SIGILS.filter((s2) => s2 !== "t").join("|")})\\b|^\\$t:`
@@ -10224,16 +10225,154 @@ var init_raw_json_depth = __esm({
   }
 });
 
+// ../../core/dev-server/src/depth-budget.ts
+function isOpaqueAuthorJson(key2, value, atRoot) {
+  if (value === null || typeof value !== "object") return false;
+  return key2 === "args" || atRoot && key2 === "input";
+}
+function depthBudgetFindings(descriptor) {
+  const out2 = [];
+  const templates = [];
+  const isComponent = (v2) => {
+    const body = v2?.body;
+    return !!body && typeof body === "object" && typeof body.type === "string" && typeof body.package === "string";
+  };
+  const hostedTemplates = (v2, path2) => {
+    const props = v2.body.props;
+    const found = [];
+    if (!props) return found;
+    const itemsPath = props.itemsPath ?? props.items_path;
+    const rowHost = v2.body.package === "himalaya" ? ROW_TEMPLATE_HOST_TYPES.has(v2.body.type) : true;
+    if (rowHost && typeof itemsPath === "string" && itemsPath !== "" && Array.isArray(props.items) && isComponent(props.items[0])) {
+      found.push({ node: props.items[0], path: `${path2}.body.props.items[0]`, host: `${v2.body.type} at ${path2}` });
+    }
+    if (isComponent(props.eventTemplate)) {
+      found.push({ node: props.eventTemplate, path: `${path2}.body.props.eventTemplate`, host: `${v2.body.type} at ${path2}` });
+    }
+    return found;
+  };
+  const measure2 = (root, rootPath, mode) => {
+    let depth = 0, nodes = 0, deepest = rootPath;
+    const skip = /* @__PURE__ */ new Set();
+    const stack = [
+      { v: root, path: rootPath, depth: 0, atRoot: mode === "screen" }
+    ];
+    while (stack.length) {
+      const { v: v2, path: path2, depth: parentDepth, atRoot } = stack.pop();
+      if (skip.has(v2)) continue;
+      if (Array.isArray(v2)) {
+        for (let i2 = v2.length - 1; i2 >= 0; i2--) stack.push({ v: v2[i2], path: `${path2}[${i2}]`, depth: parentDepth, atRoot: false });
+        continue;
+      }
+      if (!v2 || typeof v2 !== "object") continue;
+      let here = parentDepth;
+      if (isComponent(v2)) {
+        here = parentDepth + 1;
+        nodes += 1;
+        if (here > depth) {
+          depth = here;
+          deepest = path2;
+        }
+        for (const t2 of hostedTemplates(v2, path2)) {
+          if (mode === "screen") templates.push(t2);
+          else skip.add(t2.node);
+        }
+      }
+      const entries = Object.entries(v2);
+      for (let i2 = entries.length - 1; i2 >= 0; i2--) {
+        const [key2, child] = entries[i2];
+        if (!child || typeof child !== "object" || isOpaqueAuthorJson(key2, child, atRoot)) continue;
+        stack.push({ v: child, path: `${path2}.${key2}`, depth: here, atRoot: false });
+      }
+    }
+    return { depth, nodes, deepest };
+  };
+  const flatten = "flatten the layout \u2014 drop wrapper stacks, or move a section into its own screen";
+  const report3 = (what, m2, budget, rootPath) => {
+    if (m2.depth > budget.maxDepth) {
+      out2.push({
+        measure: "depth",
+        path: m2.deepest,
+        limit: budget.maxDepth,
+        actual: m2.depth,
+        message: `${what} nests ${m2.depth} component levels; the limit is ${budget.maxDepth} (deepest node at ${m2.deepest}) \u2014 ${flatten}`
+      });
+    }
+    if (m2.nodes > budget.maxNodes) {
+      out2.push({
+        measure: "nodes",
+        path: rootPath,
+        limit: budget.maxNodes,
+        actual: m2.nodes,
+        message: `${what} has ${m2.nodes} components; the limit is ${budget.maxNodes} \u2014 ${flatten}`
+      });
+    }
+  };
+  report3("screen", measure2(descriptor, "$", "screen"), DESCRIPTOR_DEPTH_BUDGETS.screen, "$");
+  for (const t2 of templates) {
+    report3(`row template of the ${t2.host}`, measure2(t2.node, t2.path, "template"), DESCRIPTOR_DEPTH_BUDGETS.rowTemplate, t2.path);
+  }
+  return out2;
+}
+function screenDepthFindings(descriptor) {
+  const raw = rawJsonDepthFinding(descriptor);
+  return raw ? [raw] : depthBudgetFindings(descriptor);
+}
+function depthBudgetIssue(f2) {
+  return { severity: "error", pass: "depth-budget", path: f2.path, message: f2.message, limit: f2.limit, actual: f2.actual };
+}
+var DESCRIPTOR_DEPTH_BUDGETS, ROW_TEMPLATE_HOST_TYPES;
+var init_depth_budget = __esm({
+  "../../core/dev-server/src/depth-budget.ts"() {
+    init_worker_subtree();
+    init_raw_json_depth();
+    DESCRIPTOR_DEPTH_BUDGETS = Object.freeze({
+      screen: Object.freeze({ maxDepth: 40, maxNodes: 2e3 }),
+      rowTemplate: Object.freeze({ maxDepth: WORKER_SUBTREE_CEILINGS.maxDepth, maxNodes: WORKER_SUBTREE_CEILINGS.maxNodes })
+    });
+    ROW_TEMPLATE_HOST_TYPES = /* @__PURE__ */ new Set(["LazyList", "Grid", "Carousel", "Menu"]);
+  }
+});
+
 // ../../core/dev-server/src/realm-parity.ts
-function withheldGlobalsSource(hide) {
-  if (!hide?.length) return "";
-  return `${JSON.stringify(hide)}.forEach(function (n) { try { delete globalThis[n]; } catch (e) { /* non-configurable: leave it */ } });`;
+function allowlistSweepSource(keep = []) {
+  const key2 = [...keep].sort().join(",");
+  let source = sweepSources.get(key2);
+  if (source === void 0) {
+    source = buildSweepSource([.../* @__PURE__ */ new Set([...WORKER_ALLOWLIST, ...keep])].sort());
+    if (sweepSources.size >= 32) sweepSources.clear();
+    sweepSources.set(key2, source);
+  }
+  return source;
+}
+function buildSweepSource(allow) {
+  return `(function (allow) {
+  var keep = Object.create(null);
+  for (var i = 0; i < allow.length; i++) keep[allow[i]] = true;
+  for (var o = globalThis; o && o !== Object.prototype; o = Object.getPrototypeOf(o)) {
+    var names = Object.getOwnPropertyNames(o);
+    for (var j = 0; j < names.length; j++) {
+      var n = names[j];
+      if (keep[n] || n === "constructor" || n.indexOf("himi.quickjs.") === 0) continue;
+      try { delete o[n]; } catch (e) { /* non-configurable: leave it */ }
+    }
+  }
+})(${JSON.stringify(allow)});`;
+}
+function explainWithheldError(message, deviceParity) {
+  if (!deviceParity || message.includes(FETCH_ADVICE)) return message;
+  return BARE_FETCH_UNDEFINED.test(message) ? `${message} \u2014 ${FETCH_ADVICE}` : message;
 }
 function realmInstallsIntl(intl, hide) {
   return intl === true && !(hide ?? []).includes("Intl");
 }
+var sweepSources, FETCH_ADVICE, BARE_FETCH_UNDEFINED;
 var init_realm_parity = __esm({
   "../../core/dev-server/src/realm-parity.ts"() {
+    init_allowlist();
+    sweepSources = /* @__PURE__ */ new Map();
+    FETCH_ADVICE = "`fetch` is not available to a Tier-5 worker (no device has it: iOS's JSContext never did and the Android worker strips it, #4499) \u2014 load data through the sanctioned Wix transport (`@himalaya/wix-*` or `globalThis.himalaya.wixApi.call`).";
+    BARE_FETCH_UNDEFINED = /(?:^|[^.\w$'])'?fetch'? is not (?:defined|a function)\b/;
   }
 });
 
@@ -10266,15 +10405,18 @@ __export(validate_descriptor_core_exports, {
   RAW_JSON_MAX_DEPTH: () => RAW_JSON_MAX_DEPTH,
   SERVICE_ONLY_BINDING_PROPS: () => SERVICE_ONLY_BINDING_PROPS,
   WHOLE_VALUE_BINDING: () => WHOLE_VALUE_BINDING,
+  allowlistSweepSource: () => allowlistSweepSource,
   bareNestedClass: () => bareNestedClass,
   bootBundleWorker: () => bootBundleWorker,
   collectServiceBindings: () => collectServiceBindings,
   componentPropFindings: () => componentPropFindings,
   depthBudgetFindings: () => depthBudgetFindings,
+  depthBudgetIssue: () => depthBudgetIssue,
   depthBudgetIssues: () => depthBudgetIssues,
   deviceParityWithheldFrom: () => deviceParityWithheldFrom,
   dryRunBundle: () => dryRunBundle,
   enumFieldNames: () => enumFieldNames,
+  explainWithheldError: () => explainWithheldError,
   extractBundleContract: () => extractBundleContract,
   extractBundleServices: () => extractBundleServices,
   findSkipDerive: () => findSkipDerive,
@@ -10301,7 +10443,6 @@ __export(validate_descriptor_core_exports, {
   setDefaultEvaluator: () => setDefaultEvaluator,
   topBarFindings: () => topBarFindings,
   validateScreenDescriptor: () => validateScreenDescriptor,
-  withheldGlobalsSource: () => withheldGlobalsSource,
   workerSubtreeAllowed: () => workerSubtreeAllowed
 });
 function makeInert() {
@@ -10699,6 +10840,7 @@ async function bootBundleWorker(bundleJs, opts) {
         timeoutMs: 2e3 + budgetMs,
         filename: "himi-bundle.js",
         hide,
+        deviceParity: opts.deviceParity === true,
         wixCall: wixApi.call,
         dispatch: dispatchHost,
         skipLoad: opts.skipLoad === true,
@@ -10709,13 +10851,13 @@ async function bootBundleWorker(bundleJs, opts) {
       guestActions = ran.actions;
       guestSession = ran.session;
       if (ran.error) {
-        errors.push({ service: "(boot)", message: ran.error });
+        errors.push({ service: "(boot)", message: explainWithheldError(ran.error, opts.deviceParity === true) });
       }
     } else {
-      realm.run(bundleJs, sandbox, { timeoutMs: 2e3, filename: "himi-bundle.js", hide, ...pins });
+      realm.run(bundleJs, sandbox, { timeoutMs: 2e3, filename: "himi-bundle.js", hide, deviceParity: opts.deviceParity === true, ...pins });
     }
   } catch (err) {
-    errors.push({ service: "(boot)", message: err?.message ?? String(err), ...err?.stack ? { stack: err.stack } : {} });
+    errors.push({ service: "(boot)", message: explainWithheldError(err?.message ?? String(err), opts.deviceParity === true), ...err?.stack ? { stack: err.stack } : {} });
   }
   const clone = (v2) => {
     try {
@@ -10788,6 +10930,17 @@ async function bootBundleWorker(bundleJs, opts) {
     delete state._error;
     return state;
   }
+  const explainActionError = (err) => {
+    if (!(err && typeof err === "object" && typeof err.message === "string")) return;
+    const e2 = err;
+    const explained = explainWithheldError(e2.message, opts.deviceParity === true);
+    if (explained !== e2.message) {
+      try {
+        e2.message = explained;
+      } catch {
+      }
+    }
+  };
   const commitActionFailure = (def, err) => {
     const prev = def.state;
     if (!prev || typeof prev !== "object" || Array.isArray(prev)) return;
@@ -10818,6 +10971,7 @@ async function bootBundleWorker(bundleJs, opts) {
       const next = await Promise.race([Promise.resolve(fn2(def.state, ...args)), timeout]);
       applyResult(def, next);
     } catch (err) {
+      explainActionError(err);
       commitActionFailure(def, err);
       throw err;
     } finally {
@@ -10833,6 +10987,7 @@ async function bootBundleWorker(bundleJs, opts) {
         def.state = entry.state;
       }
       if (entry.error !== void 0) {
+        entry.error = explainWithheldError(entry.error, opts.deviceParity === true);
         commitActionFailure(def, entry.error);
         if (recordErrors && entry.reportError) errors.push({ service: entry.name, message: entry.error });
         continue;
@@ -11049,10 +11204,6 @@ function ellipsis(value, max) {
 function own3(table, key2) {
   return Object.prototype.hasOwnProperty.call(table, key2) ? table[key2] : void 0;
 }
-function isOpaqueAuthorJson(key2, value, atRoot) {
-  if (value === null || typeof value !== "object") return false;
-  return key2 === "args" || atRoot && key2 === "input";
-}
 function pathCrossesOpaqueAuthorJson(path2) {
   if (typeof path2 !== "string") return false;
   return /^\$\.input(?:[.[]|$)/.test(path2) || /\.args(?:[.[]|$)/.test(path2);
@@ -11783,103 +11934,8 @@ function bottomSheetFindings(descriptor) {
   visit(descriptor, "", true);
   return out2;
 }
-function screenDepthFindings(descriptor) {
-  const raw = rawJsonDepthFinding(descriptor);
-  return raw ? [raw] : depthBudgetFindings(descriptor);
-}
 function depthBudgetIssues(findings) {
-  return findings.map((f2) => ({
-    severity: "error",
-    pass: "depth-budget",
-    path: f2.path,
-    message: f2.message,
-    limit: f2.limit,
-    actual: f2.actual
-  }));
-}
-function depthBudgetFindings(descriptor) {
-  const out2 = [];
-  const templates = [];
-  const isComponent = (v2) => {
-    const body = v2?.body;
-    return !!body && typeof body === "object" && typeof body.type === "string" && typeof body.package === "string";
-  };
-  const hostedTemplates = (v2, path2) => {
-    const props = v2.body.props;
-    const found = [];
-    if (!props) return found;
-    const itemsPath = props.itemsPath ?? props.items_path;
-    const rowHost = v2.body.package === "himalaya" ? ROW_TEMPLATE_HOST_TYPES.has(v2.body.type) : true;
-    if (rowHost && typeof itemsPath === "string" && itemsPath !== "" && Array.isArray(props.items) && isComponent(props.items[0])) {
-      found.push({ node: props.items[0], path: `${path2}.body.props.items[0]`, host: `${v2.body.type} at ${path2}` });
-    }
-    if (isComponent(props.eventTemplate)) {
-      found.push({ node: props.eventTemplate, path: `${path2}.body.props.eventTemplate`, host: `${v2.body.type} at ${path2}` });
-    }
-    return found;
-  };
-  const measure2 = (root, rootPath, mode) => {
-    let depth = 0, nodes = 0, deepest = rootPath;
-    const skip = /* @__PURE__ */ new Set();
-    const stack = [
-      { v: root, path: rootPath, depth: 0, atRoot: mode === "screen" }
-    ];
-    while (stack.length) {
-      const { v: v2, path: path2, depth: parentDepth, atRoot } = stack.pop();
-      if (skip.has(v2)) continue;
-      if (Array.isArray(v2)) {
-        for (let i2 = v2.length - 1; i2 >= 0; i2--) stack.push({ v: v2[i2], path: `${path2}[${i2}]`, depth: parentDepth, atRoot: false });
-        continue;
-      }
-      if (!v2 || typeof v2 !== "object") continue;
-      let here = parentDepth;
-      if (isComponent(v2)) {
-        here = parentDepth + 1;
-        nodes += 1;
-        if (here > depth) {
-          depth = here;
-          deepest = path2;
-        }
-        for (const t2 of hostedTemplates(v2, path2)) {
-          if (mode === "screen") templates.push(t2);
-          else skip.add(t2.node);
-        }
-      }
-      const entries = Object.entries(v2);
-      for (let i2 = entries.length - 1; i2 >= 0; i2--) {
-        const [key2, child] = entries[i2];
-        if (!child || typeof child !== "object" || isOpaqueAuthorJson(key2, child, atRoot)) continue;
-        stack.push({ v: child, path: `${path2}.${key2}`, depth: here, atRoot: false });
-      }
-    }
-    return { depth, nodes, deepest };
-  };
-  const flatten = "flatten the layout \u2014 drop wrapper stacks, or move a section into its own screen";
-  const report3 = (what, m2, budget, rootPath) => {
-    if (m2.depth > budget.maxDepth) {
-      out2.push({
-        measure: "depth",
-        path: m2.deepest,
-        limit: budget.maxDepth,
-        actual: m2.depth,
-        message: `${what} nests ${m2.depth} component levels; the limit is ${budget.maxDepth} (deepest node at ${m2.deepest}) \u2014 ${flatten}`
-      });
-    }
-    if (m2.nodes > budget.maxNodes) {
-      out2.push({
-        measure: "nodes",
-        path: rootPath,
-        limit: budget.maxNodes,
-        actual: m2.nodes,
-        message: `${what} has ${m2.nodes} components; the limit is ${budget.maxNodes} \u2014 ${flatten}`
-      });
-    }
-  };
-  report3("screen", measure2(descriptor, "$", "screen"), DESCRIPTOR_DEPTH_BUDGETS.screen, "$");
-  for (const t2 of templates) {
-    report3(`row template of the ${t2.host}`, measure2(t2.node, t2.path, "template"), DESCRIPTOR_DEPTH_BUDGETS.rowTemplate, t2.path);
-  }
-  return out2;
+  return findings.map(depthBudgetIssue);
 }
 function topBarFindings(descriptor) {
   const out2 = [];
@@ -12640,7 +12696,7 @@ function validateScreenDescriptor(screenId, descriptor, opts = {}) {
     services: Object.keys(services)
   };
 }
-var CRAWL_BLOCKING_PASSES, BOOT_EVAL_TIMEOUT_MS, DRIFT_PROBES, DEVICE_NETWORK_WITHHELD, DEVICE_STRIPPED_HOST_GLOBALS, DEVICE_WITHHELD, DEVICE_PARITY_CANDIDATES, DEVICE_PARITY_WITHHELD, defaultEvaluator, bootEvaluator, actionEvaluator, NATIVE_PROP_ENUMS, KNOWN_PROPS, IN_ARRAY_BINDING_PROPS, SERVICE_SIGIL, INTEGER_PROPS, NATIVE_REQUIRED_PROPS, bareNestedClass, NATIVE_NESTED_CLASSES, NATIVE_MODIFIERS_CLASS, NATIVE_DESCRIPTOR_CLASS, NATIVE_DESCRIPTOR_NESTED, NATIVE_NESTED_PROPS, LENIENT_TOP_BAR_BLOCKS, MODIFIER_KEYS, INTEGER_MODIFIERS, MODIFIER_KINDS, SCHEMA_SCORED_NODES, CORE_PACKAGES, LEGACY_UNSCORED_KEYS, DYNAMIC_PLACEHOLDER, LITERAL_ONLY_PROPS, SERVICE_ONLY_BINDING_PROPS, WHOLE_VALUE_BINDING, EMBEDDED_BINDING, OPTIONS_BINDING_PROPS, EDITOR_SERVICE_NAME, SHEET_PLACEMENTS, DESCRIPTOR_DEPTH_BUDGETS, UNSAFE_TO_RECURSE_DEPTH, ROW_TEMPLATE_HOST_TYPES, TOP_BAR_TRAILING_LIMIT, TOP_BAR_NON_TRAILING, BUTTON_STYLES, EMPTY_STATE_ACTION_STYLES, EMPTY_STATE_ACTION_SIZES;
+var CRAWL_BLOCKING_PASSES, BOOT_EVAL_TIMEOUT_MS, DRIFT_PROBES, DEVICE_NETWORK_WITHHELD, DEVICE_STRIPPED_HOST_GLOBALS, DEVICE_WITHHELD, DEVICE_PARITY_CANDIDATES, DEVICE_PARITY_WITHHELD, defaultEvaluator, bootEvaluator, actionEvaluator, NATIVE_PROP_ENUMS, KNOWN_PROPS, IN_ARRAY_BINDING_PROPS, SERVICE_SIGIL, INTEGER_PROPS, NATIVE_REQUIRED_PROPS, bareNestedClass, NATIVE_NESTED_CLASSES, NATIVE_MODIFIERS_CLASS, NATIVE_DESCRIPTOR_CLASS, NATIVE_DESCRIPTOR_NESTED, NATIVE_NESTED_PROPS, LENIENT_TOP_BAR_BLOCKS, MODIFIER_KEYS, INTEGER_MODIFIERS, MODIFIER_KINDS, SCHEMA_SCORED_NODES, CORE_PACKAGES, LEGACY_UNSCORED_KEYS, DYNAMIC_PLACEHOLDER, LITERAL_ONLY_PROPS, SERVICE_ONLY_BINDING_PROPS, WHOLE_VALUE_BINDING, EMBEDDED_BINDING, OPTIONS_BINDING_PROPS, EDITOR_SERVICE_NAME, SHEET_PLACEMENTS, UNSAFE_TO_RECURSE_DEPTH, TOP_BAR_TRAILING_LIMIT, TOP_BAR_NON_TRAILING, BUTTON_STYLES, EMPTY_STATE_ACTION_STYLES, EMPTY_STATE_ACTION_SIZES;
 var init_validate_descriptor_core = __esm({
   "../../core/dev-server/src/validate-descriptor.core.ts"() {
     init_validator();
@@ -12655,9 +12711,10 @@ var init_validate_descriptor_core = __esm({
     init_media_value();
     init_frame_limits();
     init_rich_content();
-    init_worker_subtree();
+    init_depth_budget();
     init_raw_json_depth();
     init_realm_parity();
+    init_realm_parity();
     CRAWL_BLOCKING_PASSES = /* @__PURE__ */ new Set([
       // A screen whose bindings do not resolve has no state to crawl.
       "bindings",
@@ -13687,12 +13744,7 @@ var init_validate_descriptor_core = __esm({
     OPTIONS_BINDING_PROPS = /* @__PURE__ */ new Set(["optionsPath"]);
     EDITOR_SERVICE_NAME = /^[A-Za-z][A-Za-z0-9_-]{0,63}$/;
     SHEET_PLACEMENTS = /* @__PURE__ */ new Set(["overlay", "inline"]);
-    DESCRIPTOR_DEPTH_BUDGETS = Object.freeze({
-      screen: Object.freeze({ maxDepth: 40, maxNodes: 2e3 }),
-      rowTemplate: Object.freeze({ maxDepth: WORKER_SUBTREE_CEILINGS.maxDepth, maxNodes: WORKER_SUBTREE_CEILINGS.maxNodes })
-    });
     UNSAFE_TO_RECURSE_DEPTH = 128;
-    ROW_TEMPLATE_HOST_TYPES = /* @__PURE__ */ new Set(["LazyList", "Grid", "Carousel", "Menu"]);
     TOP_BAR_TRAILING_LIMIT = 2;
     TOP_BAR_NON_TRAILING = /* @__PURE__ */ new Set(["leading", "principal", "bottom", "keyboard", "overflow"]);
     BUTTON_STYLES = /* @__PURE__ */ new Set(["filled", "tonal", "outlined", "text", "elevated", "bordered", "prominent", "plain", "glass", "primary", "secondary", "tertiary", "link", "destructive"]);
@@ -14241,6 +14293,7 @@ __export(validate_descriptor_exports, {
   RAW_JSON_MAX_DEPTH: () => RAW_JSON_MAX_DEPTH,
   SERVICE_ONLY_BINDING_PROPS: () => SERVICE_ONLY_BINDING_PROPS,
   WHOLE_VALUE_BINDING: () => WHOLE_VALUE_BINDING,
+  allowlistSweepSource: () => allowlistSweepSource,
   appWorkerActionsFor: () => appWorkerActionsFor,
   bareNestedClass: () => bareNestedClass,
   bootBundleWorker: () => bootBundleWorker,
@@ -14248,11 +14301,13 @@ __export(validate_descriptor_exports, {
   collectServiceBindings: () => collectServiceBindings,
   componentPropFindings: () => componentPropFindings,
   depthBudgetFindings: () => depthBudgetFindings,
+  depthBudgetIssue: () => depthBudgetIssue,
   depthBudgetIssues: () => depthBudgetIssues,
   deviceParityWithheldFrom: () => deviceParityWithheldFrom,
   discoverNativeActions: () => discoverNativeActions,
   dryRunBundle: () => dryRunBundle,
   enumFieldNames: () => enumFieldNames,
+  explainWithheldError: () => explainWithheldError,
   extractBundleContract: () => extractBundleContract,
   extractBundleServices: () => extractBundleServices,
   findSkipDerive: () => findSkipDerive,
@@ -14285,7 +14340,6 @@ __export(validate_descriptor_exports, {
   setDefaultEvaluator: () => setDefaultEvaluator,
   topBarFindings: () => topBarFindings,
   validateScreenDescriptor: () => validateScreenDescriptor,
-  withheldGlobalsSource: () => withheldGlobalsSource,
   workerSubtreeAllowed: () => workerSubtreeAllowed
 });
 import { readFileSync as readFileSync15, existsSync as existsSync13, readdirSync as readdirSync11 } from "node:fs";
@@ -14387,8 +14441,9 @@ var init_validate_descriptor = __esm({
     nodeVmEvaluator = {
       run(code, sandbox, opts) {
         const context = createContext(sandbox);
-        const hideSource = withheldGlobalsSource((opts.hide ?? []).filter((name) => !(name in sandbox)));
-        if (hideSource) runInContext(hideSource, context, { filename: "himi-hide.js" });
+        if (opts.deviceParity) {
+          runInContext(allowlistSweepSource(Object.keys(sandbox)), context, { filename: "himi-sweep.js" });
+        }
         const pins = pinnedIntrinsicsSource(opts);
         if (pins) {
           const pinned = runInContext(`(${pins})(Date, Math)`, context, { timeout: opts.timeoutMs, filename: "himi-pins.js" });
@@ -16127,6 +16182,10 @@ ${opts.liveTransport ? `  // Every action completion crosses as a RAW, ordered r
   // minimum local overlay needed for the worker's own subsequent reads; the host replays these
   // records through applyResult, which remains the authoritative merge/directive dialect.
   var actionBody = "";
+  // The host bridges, captured into this closure: under deviceParity the closing sweep deletes
+  // them from globalThis, so a bundle cannot call a bridge that exists on no device (#4537).
+  var hostWixCall = globalThis.__himiWixCall;
+  var hostDispatch = globalThis.__himiDispatch;
   var isArray = Array.isArray;
   var promiseResolve = Promise.resolve.bind(Promise);
   var promiseReject = Promise.reject.bind(Promise);
@@ -16375,7 +16434,7 @@ ${opts.liveTransport ? `      var handle = { getState: function () { return def
       call: function (method, path, body, headers) {
         var raw;
         try {
-          raw = __himiWixCall(
+          raw = hostWixCall(
             String(method),
             String(path),
             stringify(body === undefined ? null : body),
@@ -16397,7 +16456,7 @@ ${opts.liveTransport ? `      var handle = { getState: function () { return def
     dispatch: function (action, params) {
       var raw;
       try {
-        raw = __himiDispatch(stringValue(action), stringify(params === undefined ? null : params));
+        raw = hostDispatch(stringValue(action), stringify(params === undefined ? null : params));
       } catch (e) {
         return promiseReject(e instanceof Error ? e : new Error(stringValue(e)));
       }
@@ -16526,9 +16585,11 @@ ${opts.clock === void 0 ? "" : opts.freezeDate ? `  globalThis.Date = (${pinnedI
       return sweepPromise;
     },
   });` : ""}
-  // LAST, so nothing the prelude installed (the \`fetch\` stub) or the engine carries natively
-  // (QuickJS-ng 0.15's \`performance\`, \`queueMicrotask\`) survives deviceParity (#4511).
-  ${withheldGlobalsSource(opts.hide)}
+  // LAST, under deviceParity: the realm sweeps its OWN globals against the worker allow-list
+  // (#4537), so nothing the prelude installed (the \`fetch\` stub), nothing the engine carries
+  // natively (QuickJS-ng 0.15's \`performance\`, \`queueMicrotask\`) and none of the host bridges
+  // (\`__himiWixCall\`, \`__himiDispatch\` \u2014 captured into this closure above) survives.
+  ${opts.deviceParity ? allowlistSweepSource() : ""}
   return ${opts.liveTransport ? "{ readback: readback, dispatch: dispatchAction, actions: readActions }" : "readback"};
 })();
 `;
@@ -16597,6 +16658,7 @@ async function createQuickJsEvaluator(options = {}) {
             clock: opts.clock ?? options.clock,
             freezeDate: opts.clock !== void 0,
             hide: opts.hide,
+            deviceParity: opts.deviceParity === true,
             ...opts.seed === void 0 ? {} : { seed: opts.seed },
             ...opts.mirrorRandom ? { mirrorRandom: true } : {}
           }),
@@ -132826,6 +132888,28 @@ function refuseTooDeep(screenId, descriptor) {
   if (finding) throw new DescriptorDepthRefusal(screenId, finding);
   return descriptor;
 }
+async function liveDescriptorFor(state, screenId) {
+  try {
+    const override = state.localOverrides.get(screenId);
+    return {
+      descriptor: override !== void 0 ? refuseTooDeep(screenId, override) : await buildDescriptorForScreenId(state, screenId, new URLSearchParams(), { skipOverride: true })
+    };
+  } catch (err) {
+    if (err instanceof DescriptorDepthRefusal) return { refusal: err };
+    throw err;
+  }
+}
+function depthRefusalReport(refusal, strict = false) {
+  return { screenId: refusal.screenId, ok: false, strict, issues: [depthBudgetIssue(refusal.finding)], services: [] };
+}
+function depthRefusalDiagnostics(state, refusal) {
+  const legacy = { ...depthRefusalReport(refusal), bundle: null, telemetry: [], lastError: null };
+  return foldLegacyReport(legacy, {
+    source: "diagnostics",
+    screenId: refusal.screenId,
+    evidence: { runId: `dev:${state.startedAt}:${refusal.screenId}`, ts: (/* @__PURE__ */ new Date()).toISOString() }
+  });
+}
 async function buildDescriptorForScreenId(state, screenId, query = new URLSearchParams(), options = {}) {
   if (!options.skipOverride) {
     const preview = state.localOverrides.get(screenId);
@@ -132855,13 +132939,13 @@ async function buildDescriptorForScreenId(state, screenId, query = new URLSearch
       }
       return null;
     })();
-    return built ? postprocessDescriptor(refuseTooDeep(screenId, built), {
+    return built ? refuseTooDeep(screenId, postprocessDescriptor(refuseTooDeep(screenId, built), {
       config: uiConfig(state.app.module.config),
       flagDefinitions: state.flagStore.list(),
       evalContext: evalCtx,
       flagOverrides: cfg?.overrides,
       readBundle: tier5BundleReader(state.tier5Dir ?? TIER5_ROOT2)
-    }) : null;
+    })) : null;
   }
   return null;
 }
@@ -134101,7 +134185,21 @@ async function handleDev(req, res, state) {
     }
     let descriptor = body.descriptor;
     if (!descriptor && body.screenId) {
-      descriptor = state.localOverrides.get(body.screenId) ?? await buildDescriptorForScreenId(state, body.screenId, new URLSearchParams(), { skipOverride: true });
+      const live3 = await liveDescriptorFor(state, body.screenId);
+      if ("refusal" in live3) {
+        const diagnostics2 = depthRefusalDiagnostics(state, live3.refusal);
+        const legacy2 = { screenId: body.screenId, scheme, renderable: false, reason: `depth_budget_exceeded: ${live3.refusal.finding.message}`, diagnostics: diagnostics2 };
+        const report4 = foldLegacyReport(legacy2, {
+          source: "render",
+          screenId: body.screenId,
+          ok: false,
+          findings: diagnostics2.findings ?? [],
+          artifacts: [],
+          evidence: { runId: `dev:${state.startedAt}:${body.screenId}`, ts: (/* @__PURE__ */ new Date()).toISOString() }
+        });
+        return sendJson(res, body.envelope === 1 ? 422 : 200, report4);
+      }
+      descriptor = live3.descriptor;
     }
     if (!descriptor || typeof descriptor !== "object") {
       return sendJson(res, 404, { error: "screen_not_found", screenId: body.screenId ?? null });
@@ -134148,7 +134246,9 @@ async function handleDev(req, res, state) {
     const diagMatch = /^\/__dev\/screen\/(.+?)\/diagnostics(?:\?|$)/.exec(url);
     if (diagMatch && req.method === "GET") {
       const screenId = decodeURIComponent(diagMatch[1]);
-      const descriptor = state.localOverrides.get(screenId) ?? await buildDescriptorForScreenId(state, screenId, new URLSearchParams(), { skipOverride: true });
+      const live3 = await liveDescriptorFor(state, screenId);
+      if ("refusal" in live3) return sendJson(res, 422, depthRefusalDiagnostics(state, live3.refusal));
+      const descriptor = live3.descriptor;
       if (!descriptor) return sendJson(res, 404, { error: "screen_not_found", screenId });
       const diag = await runScreenDiagnostics(state, screenId, descriptor);
       return sendJson(res, diag.ok ? 200 : 422, diag);
@@ -134590,7 +134690,9 @@ async function handleAdminPlayground(req, res, state) {
   if (validateMatch && req.method === "GET") {
     const screenId = decodeURIComponent(validateMatch[1]);
     const strict = /[?&]strict=1(?:&|$)/.test(url);
-    const descriptor = state.localOverrides.get(screenId) ?? await buildDescriptorForScreenId(state, screenId, new URLSearchParams(), { skipOverride: true });
+    const live3 = await liveDescriptorFor(state, screenId);
+    if ("refusal" in live3) return sendJson(res, 422, depthRefusalReport(live3.refusal, strict));
+    const descriptor = live3.descriptor;
     if (!descriptor) return sendJson(res, 404, { error: "screen_not_found", screenId });
     const { validateScreenDescriptor: validateScreenDescriptor2, loadAllowedComponents: loadAllowedComponents2, readBuiltBundle: readBuiltBundle2, appWorkerActionsFor: appWorkerActionsFor2 } = await Promise.resolve().then(() => (init_validate_descriptor(), validate_descriptor_exports));
     const tokens2 = readAppTokens(state) ?? void 0;
@@ -134622,7 +134724,7 @@ async function handleAdminPlayground(req, res, state) {
     if (!wantBuilt) {
       const override = state.localOverrides.get(screenId);
       if (override) {
-        return sendJson(res, 200, { screenId, source: "override", descriptor: { ...override, screenId } });
+        return sendJson(res, 200, { screenId, source: "override", descriptor: refuseTooDeep(screenId, { ...override, screenId }) });
       }
     }
     const built = await buildDescriptorForScreenId(state, screenId, new URLSearchParams(), { skipOverride: true });
@@ -134640,6 +134742,7 @@ async function handleAdminPlayground(req, res, state) {
     if (!payload.descriptor || typeof payload.descriptor !== "object") {
       return sendJson(res, 400, { error: "descriptor_required" });
     }
+    refuseTooDeep(screenId, payload.descriptor);
     state.localOverrides.set(screenId, payload.descriptor);
     recordOverrideHistory(state, screenId, "put", payload.descriptor, payload.notes ?? null);
     invalidate(state, screenId);
@@ -135660,6 +135763,7 @@ var init_src6 = __esm({
     init_app_icon();
     init_app_assets();
     init_raw_json_depth();
+    init_depth_budget();
     init_app_module();
     init_provisioning_facts();
     init_validate();
@@ -139365,6 +139469,7 @@ async function buildFromLoaded(preloaded, dest, opts = {}) {
   const store = typeof dest === "string" ? new FileReleaseStore(dest) : dest;
   const screenIds = Object.keys(preloaded.module.screens.exact);
   const failedToBuild = [];
+  const depthRefusals = [];
   const missingBundles = [];
   const widgetBakeFailures = [];
   const lint = [];
@@ -139746,6 +139851,7 @@ async function buildFromLoaded(preloaded, dest, opts = {}) {
     const finding = depthRefusalFromText(res.status, text9);
     if (finding) {
       failedToBuild.push({ screenId, status: res.status, error: finding.message });
+      if (!depthRefusals.some((r2) => r2.screenId === screenId)) depthRefusals.push({ screenId, finding });
       if (collect2?.lint && !lint.some((l2) => l2.screenId === screenId)) {
         lint.push({ screenId, ok: false, issues: depthBudgetIssues([finding]) });
       }
@@ -139850,10 +139956,11 @@ async function buildFromLoaded(preloaded, dest, opts = {}) {
         const { services, liveCalls, liveReturned, liveErrors, mockCalls, mockUnserved, mockBootFailed, liveFailed } = await renderServicesFor(bundleName, descriptor, wantedRender);
         const rr2 = await renderDescriptorWeb(descriptor, renderTokens, renderScheme, collect2.render.png === true, services, collect2.render.width, collect2.render.rtl === true);
         renders.push({ screenId: wantedRender, scheme: renderScheme, ...rr2, ...await renderCompare(descriptor, services), ...collect2.render.dumpState && services ? { serviceState: services } : {}, ...liveCalls ? { liveCalls } : {}, ...liveReturned !== void 0 ? { liveReturned } : {}, ...liveFailed ? { liveFailed } : {}, ...liveErrors ? { liveErrors } : {}, ...mockCalls ? { mockCalls, mockUnserved } : {}, ...mockBootFailed ? { mockBootFailed } : {} });
-      } else if (res.status === 422 && collect2?.lint) {
+      } else if (res.status === 422) {
         const finding = await depthRefusalOf(res);
+        if (finding && !depthRefusals.some((r2) => r2.screenId === wantedRender)) depthRefusals.push({ screenId: wantedRender, finding });
         const recorded = lint.some((l2) => l2.screenId === wantedRender) || failedToBuild.some((f2) => f2.screenId === wantedRender);
-        if (finding && !recorded) lint.push({ screenId: wantedRender, ok: false, issues: depthBudgetIssues([finding]) });
+        if (finding && collect2?.lint && !recorded) lint.push({ screenId: wantedRender, ok: false, issues: depthBudgetIssues([finding]) });
       }
     }
     for (const t2 of preloaded.module.screens.templated ?? []) {
@@ -139935,6 +140042,18 @@ async function buildFromLoaded(preloaded, dest, opts = {}) {
           }
           delete descriptor.etag;
           if (typeof descriptor.screenId === "string" && descriptor.screenId !== screenId) descriptor.screenId = screenId;
+          if (collect2?.lint) {
+            const depth = depthBudgetIssues(screenDepthFindings(descriptor));
+            const existing = lint.find((l2) => l2.screenId === screenId);
+            const seen = new Set((existing?.issues ?? []).filter((i2) => i2.pass === "depth-budget").map((i2) => `${i2.path}|${i2.limit}`));
+            const fresh = depth.filter((i2) => !seen.has(`${i2.path}|${i2.limit}`));
+            if (fresh.length && existing) {
+              existing.issues.push(...fresh);
+              existing.ok = false;
+            } else if (fresh.length) {
+              lint.push({ screenId, ok: false, issues: fresh });
+            }
+          }
           const json7 = pinBakedServerBaseUrl(JSON.stringify(descriptor), base);
           await store.putScreen(app, screenId, json7);
           screens[screenId] = { descriptorHash: sha2564(json7), bundle: bundleName, ...screenMetadataFor(screenMetadata, screenId, canonical4) };
@@ -140148,6 +140267,7 @@ async function buildFromLoaded(preloaded, dest, opts = {}) {
   return {
     manifest,
     failedToBuild,
+    depthRefusals,
     missingBundles,
     // Only bundles a screen actually referenced are weighed — `tierBundles` is filled by
     // addressBundle, which runs on reference, so an unreferenced file on disk never counts.
@@ -140214,7 +140334,7 @@ async function buildFunctionsOnlyRelease(preloaded, dest) {
   const sha2 = gitSha();
   const manifest = { releaseId: contentReleaseId(content), gitSha: sha2, ...content };
   await store.putManifest(app, manifest);
-  return { manifest, failedToBuild: [], missingBundles: [], auth: {}, tierCapViolations: [] };
+  return { manifest, failedToBuild: [], depthRefusals: [], missingBundles: [], auth: {}, tierCapViolations: [] };
 }
 function listBuildableApps() {
   const appsDir = join47(REPO_ROOT7, "apps");
@@ -163757,6 +163877,8 @@ function createReviewScreenRenderer() {
           collect: { render: { screenId, scheme: "light", png: false, hydrate: true, live: true, dumpState: true, width: REVIEW_SCREENSHOT_FRAME.width, host, ...input ? { input } : {} } }
         });
         const render = (outcome.renders ?? [])[0];
+        const refused2 = outcome.depthRefusals.find((r2) => r2.screenId === screenId);
+        if (!render && refused2) throw new Error(`${screenId} cannot be rendered: ${refused2.finding.message}`);
         if (!render) throw new MissingScreenError(screenId);
         if (!render.renderable || !render.html) throw new Error(render.reason ?? `${screenId} is not an SDUI screen`);
         return { html: render.html, problems: renderProblems(render, entityId), state: render.serviceState ?? {} };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@wix/himalaya-cli",
-  "version": "0.1423.0",
+  "version": "0.1425.0",
   "type": "module",
   "description": "himi — the Himalaya authoring CLI. Build a Tier-5 content package on your own machine, push it to the production serve as a draft, preview it on web + Himi Player, and read worker logs back — the remote dev loop. Wraps @himalaya/serve-cli for transport.",
   "keywords": [
@@ -71,5 +71,5 @@
       "artifactId": "himalaya-cli"
     }
   },
-  "falconPackageHash": "843d4fd1bc22694e9fd665efd8f59bb6fd4e4e9aa78612885a3ce661"
+  "falconPackageHash": "1ad8e9d41b385905df3fb24715044289df3fb2389c6b704c4d14e96d"
 }