@wix/himalaya-cli 0.1483.0 → 0.1485.0

package/dist/cli.mjs

@@ -22144,7 +22144,6 @@ function resolveIdiom(tokens2, ctx = {}) {
 var IDIOM_CONTEXTS, UNSAFE_KEYS;
 var init_idiom = __esm({
   "../../core/ts/src/idiom.ts"() {
-    "use strict";
     IDIOM_CONTEXTS = {
       ios: { native: ["ios"] },
       android: { native: ["material"] },
@@ -164028,33 +164027,33 @@ var init_preview_assets_generated = __esm({
   "../../packages/serve/src/preview-assets.generated.ts"() {
     init_preview_assets_format();
     PREVIEW_ASSET_MANIFEST = [
-      { key: "assets/DashboardHost-CMpBN2DL.js", contentType: "application/javascript; charset=utf-8", offset: 8, length: 2916, sha256: "5c0331e3d3cdf54108b73c36420d5236e42e8625cb42742b1e6a64fc23f12bb5" },
-      { key: "assets/DevDrawer-CrMMyRpX.js", contentType: "application/javascript; charset=utf-8", offset: 2924, length: 16744, sha256: "a16d65afa044e258dddb96b84442dd119b5cee42a0d3547d87802cd4a0297748" },
-      { key: "assets/IdiomCompare-CPfRA-EW.js", contentType: "application/javascript; charset=utf-8", offset: 19668, length: 1892, sha256: "2fe146b2d340c2fd4627c3f7493878c4663ac318beaf4210a86ba26588fa681d" },
-      { key: "assets/LightboxViewer-C034HypG.js", contentType: "application/javascript; charset=utf-8", offset: 21560, length: 8132, sha256: "98524154bd29c20d232371cd8e810dfc278636100b6e356beab42ecc4ac5532e" },
-      { key: "assets/PhonePreviewControl-DMVxA2w-.js", contentType: "application/javascript; charset=utf-8", offset: 29692, length: 37729, sha256: "a09c50f514938272e9fedccc56353446e43da13f3c3cca836e753c76efca6972" },
-      { key: "assets/SchemeCompare-CW0HRGJP.js", contentType: "application/javascript; charset=utf-8", offset: 67421, length: 1824, sha256: "6f55ead19a7c196d4b98527659181a62d78aa30e94296f18314d8f0aee9c52f2" },
-      { key: "assets/index-CHRDBBf7.js", contentType: "application/javascript; charset=utf-8", offset: 69245, length: 1305472, sha256: "a971f51872f28721fb28ebef801f5bbc90f23c4108c5fbf2b3eb203a963c6e67" },
-      { key: "assets/pdf-DD6bApHl.js", contentType: "application/javascript; charset=utf-8", offset: 1374717, length: 488199, sha256: "3abbdfca4339574fb33f4d3ef721a91d7a446124f1c60234628f4213863b3852" },
-      { key: "assets/pdf.worker.min-BQa_JDET.js", contentType: "application/javascript; charset=utf-8", offset: 1862916, length: 73, sha256: "41bcfda4f3c8c0a81c785ea87c69afc8e7d0ed8c333324aee94c273d881bb6aa" },
-      { key: "assets/pdf.worker.min-BmVo14Nb.mjs", contentType: "application/javascript; charset=utf-8", offset: 1862989, length: 1317034, sha256: "a33cfe728c584fdba4fcc1fd54bcdc2f9f2f13889ddbb5b2bd1d0f8cbe49b84e" },
-      { key: "assets/pdfDocument-D-UJzOK4.js", contentType: "application/javascript; charset=utf-8", offset: 3180023, length: 3379, sha256: "a5694b300f8729c630e658de93420aa2c671f9d60bc99293db04775d036e593e" },
-      { key: "assets/pdfFetch-Cc8i1I1h.js", contentType: "application/javascript; charset=utf-8", offset: 3183402, length: 2266, sha256: "1d21ad008921942217c9eac0c35b1713773b9d89c71e3ab4412781f7bb88f463" },
-      { key: "fonts/Roboto-LICENSE.txt", contentType: "application/octet-stream", offset: 3185668, length: 4610, sha256: "994062dd7af4186a739de55dd9e151c63b6301f8e2cbafc608d35c2e87da0cd2" },
-      { key: "fonts/Roboto-Variable.ttf", contentType: "font/ttf", offset: 3190278, length: 488584, sha256: "d7598e12c5dbef095ff8272cfc55da0250bd07fbdecbac8a530b9b277872a134" },
-      { key: "fonts/WixMadeforDisplay-Bold.ttf", contentType: "font/ttf", offset: 3678862, length: 90924, sha256: "ec4c7d63772d980d6e147b2df6215fd2737e4b04cebe0cf7e11dc695fb63cdcf" },
-      { key: "fonts/WixMadeforDisplay-ExtraBold.ttf", contentType: "font/ttf", offset: 3769786, length: 90984, sha256: "bf4c16a2774edd38a921edf3099469866cd74c094fd596f3fa4e81f54a04dfaa" },
-      { key: "fonts/WixMadeforDisplay-Medium.ttf", contentType: "font/ttf", offset: 3860770, length: 90980, sha256: "368faca44fb9f7207e4af784e94750b1ee59c1098b8689e0f4a918926f244fb5" },
-      { key: "fonts/WixMadeforDisplay-Regular.ttf", contentType: "font/ttf", offset: 3951750, length: 90872, sha256: "97ed8f1a6772abe26e3d8af5cecfc4b02faa94497d585b0398b5053b739a70c1" },
-      { key: "fonts/WixMadeforDisplay-SemiBold.ttf", contentType: "font/ttf", offset: 4042622, length: 90980, sha256: "642feab8a48ddf6c7a89d7c2a7c0edfa0e6e773f671287e460e222703563191e" },
-      { key: "fonts/WixMadeforText-Bold.ttf", contentType: "font/ttf", offset: 4133602, length: 108636, sha256: "37c179b4fefb63ea9637322b84583a2df53aa226c150294eea1675c14b1b8e29" },
-      { key: "fonts/WixMadeforText-ExtraBold.ttf", contentType: "font/ttf", offset: 4242238, length: 109084, sha256: "62e2fe4718129f36ecdb0ae4de385bd6b81ecc876146447167c6c140fad699a9" },
-      { key: "fonts/WixMadeforText-Medium.ttf", contentType: "font/ttf", offset: 4351322, length: 109048, sha256: "4ecf270136af928612c76fe4ebade91d8156975e5ea4c0cf9225501dd1788e02" },
-      { key: "fonts/WixMadeforText-Regular.ttf", contentType: "font/ttf", offset: 4460370, length: 107700, sha256: "dee56f09fd3efc127c1ea95557edc74110c1460a46287da36e0af25efd341ef5" },
-      { key: "fonts/WixMadeforText-SemiBold.ttf", contentType: "font/ttf", offset: 4568070, length: 88108, sha256: "dced97a77624bc5f8b1ae65850360908297f4588e09feb6f22792d29dc7e765b" },
-      { key: "himi-sw.js", contentType: "application/javascript; charset=utf-8", offset: 4656178, length: 6748, sha256: "4a92459977d7cefa1a6a7e020c3a63509737f083b3f2773557c1a5771665811a" },
-      { key: "index.html", contentType: "text/html; charset=utf-8", offset: 4662926, length: 4947, sha256: "fe81699892cc538d7861396082de4787d7055ee17fcef2939be6aa25f2e34cea" },
-      { key: "t5-frame.html", contentType: "text/html; charset=utf-8", offset: 4667873, length: 17786, sha256: "084107ca997628c248f1b0ba3a7494744850df39fad813546ab8bdb82a6058da" }
+      { key: "assets/DashboardHost-BfevkfEz.js", contentType: "application/javascript; charset=utf-8", offset: 8, length: 2916, sha256: "3135cfb42f0e017ea81ac5af459e6ddcd7d7acdf1a9252728753236da4b3e1ab" },
+      { key: "assets/DevDrawer-DqyYJOb7.js", contentType: "application/javascript; charset=utf-8", offset: 2924, length: 16744, sha256: "9376e38332ec3295aee67daaf6ece7db9374f551f67066ad34748f6ec783c10d" },
+      { key: "assets/IdiomCompare-CpSHyXxC.js", contentType: "application/javascript; charset=utf-8", offset: 19668, length: 1892, sha256: "1dd97adb953b1ce57ebd61c2ce925ef4a218897da3e795b469f667c4278b44c9" },
+      { key: "assets/LightboxViewer-C6ZoGE02.js", contentType: "application/javascript; charset=utf-8", offset: 21560, length: 8132, sha256: "c11138b57bf2636daf98529d47875b59ed5accb8e22515fb12bc30c6ba891aa8" },
+      { key: "assets/PhonePreviewControl-DPGmBrY5.js", contentType: "application/javascript; charset=utf-8", offset: 29692, length: 37729, sha256: "97447fd0ef1a22bfd03d222f41e9bf7ff8fc60ea9261af2839a94ec35ad80f1e" },
+      { key: "assets/SchemeCompare-AHp-TFH2.js", contentType: "application/javascript; charset=utf-8", offset: 67421, length: 1824, sha256: "a62ddf48c0aa0ae42fea27f843d07309cf0bb3c44577e9e587dcae44056f7e9a" },
+      { key: "assets/index-B3HKN-kN.js", contentType: "application/javascript; charset=utf-8", offset: 69245, length: 1306186, sha256: "95f0ef9be576d2d31acccdfe85ec4edd60a8cf16cb36c1b7036655f0fafc1c6a" },
+      { key: "assets/pdf-CG4Vrwhx.js", contentType: "application/javascript; charset=utf-8", offset: 1375431, length: 488199, sha256: "d6149c33d78779cd89c8d71390bd46411e0dbe890514d82014d11724c3ebd8e6" },
+      { key: "assets/pdf.worker.min-BQa_JDET.js", contentType: "application/javascript; charset=utf-8", offset: 1863630, length: 73, sha256: "41bcfda4f3c8c0a81c785ea87c69afc8e7d0ed8c333324aee94c273d881bb6aa" },
+      { key: "assets/pdf.worker.min-BmVo14Nb.mjs", contentType: "application/javascript; charset=utf-8", offset: 1863703, length: 1317034, sha256: "a33cfe728c584fdba4fcc1fd54bcdc2f9f2f13889ddbb5b2bd1d0f8cbe49b84e" },
+      { key: "assets/pdfDocument-CCd9DiA-.js", contentType: "application/javascript; charset=utf-8", offset: 3180737, length: 3379, sha256: "eb252efa4427144dec62e092acfee92390ef0d895d60a283bcc892e52822de75" },
+      { key: "assets/pdfFetch-Cc8i1I1h.js", contentType: "application/javascript; charset=utf-8", offset: 3184116, length: 2266, sha256: "1d21ad008921942217c9eac0c35b1713773b9d89c71e3ab4412781f7bb88f463" },
+      { key: "fonts/Roboto-LICENSE.txt", contentType: "application/octet-stream", offset: 3186382, length: 4610, sha256: "994062dd7af4186a739de55dd9e151c63b6301f8e2cbafc608d35c2e87da0cd2" },
+      { key: "fonts/Roboto-Variable.ttf", contentType: "font/ttf", offset: 3190992, length: 488584, sha256: "d7598e12c5dbef095ff8272cfc55da0250bd07fbdecbac8a530b9b277872a134" },
+      { key: "fonts/WixMadeforDisplay-Bold.ttf", contentType: "font/ttf", offset: 3679576, length: 90924, sha256: "ec4c7d63772d980d6e147b2df6215fd2737e4b04cebe0cf7e11dc695fb63cdcf" },
+      { key: "fonts/WixMadeforDisplay-ExtraBold.ttf", contentType: "font/ttf", offset: 3770500, length: 90984, sha256: "bf4c16a2774edd38a921edf3099469866cd74c094fd596f3fa4e81f54a04dfaa" },
+      { key: "fonts/WixMadeforDisplay-Medium.ttf", contentType: "font/ttf", offset: 3861484, length: 90980, sha256: "368faca44fb9f7207e4af784e94750b1ee59c1098b8689e0f4a918926f244fb5" },
+      { key: "fonts/WixMadeforDisplay-Regular.ttf", contentType: "font/ttf", offset: 3952464, length: 90872, sha256: "97ed8f1a6772abe26e3d8af5cecfc4b02faa94497d585b0398b5053b739a70c1" },
+      { key: "fonts/WixMadeforDisplay-SemiBold.ttf", contentType: "font/ttf", offset: 4043336, length: 90980, sha256: "642feab8a48ddf6c7a89d7c2a7c0edfa0e6e773f671287e460e222703563191e" },
+      { key: "fonts/WixMadeforText-Bold.ttf", contentType: "font/ttf", offset: 4134316, length: 108636, sha256: "37c179b4fefb63ea9637322b84583a2df53aa226c150294eea1675c14b1b8e29" },
+      { key: "fonts/WixMadeforText-ExtraBold.ttf", contentType: "font/ttf", offset: 4242952, length: 109084, sha256: "62e2fe4718129f36ecdb0ae4de385bd6b81ecc876146447167c6c140fad699a9" },
+      { key: "fonts/WixMadeforText-Medium.ttf", contentType: "font/ttf", offset: 4352036, length: 109048, sha256: "4ecf270136af928612c76fe4ebade91d8156975e5ea4c0cf9225501dd1788e02" },
+      { key: "fonts/WixMadeforText-Regular.ttf", contentType: "font/ttf", offset: 4461084, length: 107700, sha256: "dee56f09fd3efc127c1ea95557edc74110c1460a46287da36e0af25efd341ef5" },
+      { key: "fonts/WixMadeforText-SemiBold.ttf", contentType: "font/ttf", offset: 4568784, length: 88108, sha256: "dced97a77624bc5f8b1ae65850360908297f4588e09feb6f22792d29dc7e765b" },
+      { key: "himi-sw.js", contentType: "application/javascript; charset=utf-8", offset: 4656892, length: 6748, sha256: "4a92459977d7cefa1a6a7e020c3a63509737f083b3f2773557c1a5771665811a" },
+      { key: "index.html", contentType: "text/html; charset=utf-8", offset: 4663640, length: 4947, sha256: "6805e797b2310186da4e8e2a785fe72899be298d586bda3165b2ff1ce5adcba8" },
+      { key: "t5-frame.html", contentType: "text/html; charset=utf-8", offset: 4668587, length: 17786, sha256: "084107ca997628c248f1b0ba3a7494744850df39fad813546ab8bdb82a6058da" }
     ];
   }
 });

package/guides/dynamic-list-t5.descriptor.json

@@ -83,6 +83,20 @@
               "hiddenPath": "$service:products.hideServerError"
             }
           },
+          {
+            "id": "error.membership",
+            "body": {
+              "package": "himalaya",
+              "type": "EmptyState",
+              "props": {
+                "title": "Join this site to view products",
+                "subtitle": "Ask the owner of this store to add you as a member."
+              }
+            },
+            "modifiers": {
+              "hiddenPath": "$service:products.hideMembershipError"
+            }
+          },
           {
             "id": "error.permission",
             "body": {

package/guides/dynamic-list.service.ts

@@ -24,19 +24,21 @@ interface ProductRow {
   initial: string; // derived presentation field (avatar letter)
 }
 
-// A public catalog has no sign-in flow, so a 401 reads as "permission" here — every
-// class this worker can return has a node in the descriptor.
-type ErrorKind = "" | "offline" | "server" | "permission";
+// Every class the recipe's classifier returns …
+type ErrorKind = "" | "offline" | "server" | "signIn" | "membership" | "permission";
+// … and the ones this screen shows: it has no sign-in flow (see shownKind()).
+type ShownKind = Exclude<ErrorKind, "" | "signIn">;
 
 interface ProductsState {
   status: "loading" | "ready" | "error";
   items: ProductRow[]; // ← itemsPath binds here; MUST initialize as an array
-  errorKind: ErrorKind; // why the last load failed; "" unless status is "error"
+  errorKind: "" | ShownKind; // why the last load failed; "" unless status is "error"
   // hiddenPath hides a node when its flag is TRUE.
   hideLoading: boolean;         // skeleton: first load, nothing on screen
   notEmpty: boolean;            // EmptyState: ready with zero rows
   hideOfflineError: boolean;    // one EmptyState per error class …
   hideServerError: boolean;
+  hideMembershipError: boolean;
   hidePermissionError: boolean;
   hideRefreshError: boolean;    // … and a Banner when a refresh fails over kept rows
   selectedId: string;  // row identity from onTap params — drive a detail view from it
@@ -62,7 +64,7 @@ function normalize(raw: StoreProduct): ProductRow {
 function shape(s: Partial<ProductsState>): ProductsState {
   const status = s.status ?? "ready";
   const items = s.items ?? [];
-  const errorKind: ErrorKind = status === "error" ? (s.errorKind || "server") : "";
+  const errorKind: "" | ShownKind = status === "error" ? (s.errorKind || "server") : "";
   const blank = items.length === 0; // nothing on screen to keep
   return {
     status,
@@ -72,14 +74,17 @@ function shape(s: Partial<ProductsState>): ProductsState {
     notEmpty: !(status === "ready" && blank),
     hideOfflineError: !(blank && errorKind === "offline"),
     hideServerError: !(blank && errorKind === "server"),
+    hideMembershipError: !(blank && errorKind === "membership"),
     hidePermissionError: !(blank && errorKind === "permission"),
     hideRefreshError: !(!blank && (errorKind === "offline" || errorKind === "server")),
     selectedId: s.selectedId ?? "",
   };
 }
 
+// The classifier below is `himi docs recipe-four-state`'s, VERBATIM — a test holds
+// the two byte-identical, so the rules an agent copies from here are the documented ones.
 // The HTTP status rides in the message: `HTTP 503: …` on a device, `Wix 503 for …`
-// under `himi test` / `himi render`. Only a transport failure is "offline".
+// under `himi test` / `himi render`.
 const STATUS = /\b(?:HTTP|Wix) (\d{3})\b/;
 // No answer at all — what a dropped connection says on every platform.
 const TRANSPORT = /NSURLErrorDomain|(?:UnknownHost|Connect|SocketTimeout|NoRouteToHost|SSLHandshake)Exception|Failed to connect|Unable to resolve host|Connection (?:refused|reset)|Network is unreachable|Software caused connection abort|ECONNRESET|ETIMEDOUT|EPIPE|Broken pipe|stream was reset|unexpected end of stream|timed out|^timeout$|Failed to fetch|NetworkError|^(?:TypeError: )?Load failed$|net::ERR_|^[a-z0-9-]+(?:\.[a-z0-9-]+)+$/i;
@@ -88,21 +93,45 @@ const TRANSPORT = /NSURLErrorDomain|(?:UnknownHost|Connect|SocketTimeout|NoRoute
 // A pinned site with no member session: iOS `siteNotPermitted(requested: "account", …)`,
 // Android `site account is not the bound site …`; the web host `HTTP 501: {"error":"webwix_owner_no_session"}`.
 const SIGNED_OUT = /wixApi not enabled|session unavailable|PRINCIPAL_CHANGED|not signed in|siteNotPermitted\(requested: "account"|site account is not the bound site|webwix_owner_no_session/i;
+// The account is not a member of this site: iOS `NotSiteMember(metaSiteId: …)`,
+// Android `not a member of site …`. NOT `WDE0027` — that is Wix Data's generic
+// permission refusal, which a signed-in member and a visitor both get.
+const NOT_MEMBER = /\bNotSiteMember\b|\bnot a member of site\b/i;
 
-// The same classifier as `himi docs recipe-four-state`, except that a public screen with no sign-in flow shows the permission state for a sign-in failure.
-function classifyError(e: unknown): ErrorKind {
+function classifyError(e: unknown, authState: "signedIn" | "signedOut" | "unknown" = "unknown"): ErrorKind {
   const msg = String((e as Error)?.message ?? e ?? "");
-  const code = String((e as { code?: unknown })?.code ?? "");
+  // Some bridges put the Wix code in the response body rather than Error.code.
+  const code = String((e as { code?: unknown })?.code ?? /"(?:code|error)"\s*:\s*"([^"]+)"/.exec(msg)?.[1] ?? "");
   const status = Number(STATUS.exec(msg)?.[1] ?? 0);
-  if (status === 401) return "permission";
-  if (status === 403) return "permission";
-  if (SIGNED_OUT.test(msg)) return "permission";
-  if (code === "offline_write_blocked") return "offline"; // a write refused before it left
+  if (code === "AccountSessionExpired" || code === "webwix_account_signed_out" || SIGNED_OUT.test(msg)) return "signIn";
+  if (code === "NotSiteMember" || NOT_MEMBER.test(msg)) return "membership";
+  // A 401 is a missing or expired session — unless the host knows the user is signed
+  // in, when it is a policy refusal. Never "server": a retry sends the same 401 back.
+  if (status === 401) return authState === "signedIn" ? "permission" : "signIn";
+  // A 403 is a missing permission — but a visitor the host knows is signed out gets
+  // `403 WDE0027` on member-only data too, and signing in is what fixes that.
+  if (status === 403) return authState === "signedOut" ? "signIn" : "permission";
+  if (code === "offline_write_blocked") return "offline";   // a write refused before it left
   // A web call that never reached Wix arrives as
   // `HTTP 502: {"error":"webwix_direct_failed","detail":"Failed to fetch"}` — judge its detail.
-  if (status && !msg.includes("webwix_direct_failed")) return "server";
-  if (TRANSPORT.test(msg)) return "offline";
-  return "server"; // a bug or a malformed row is not the user's connection
+  // The top-level 502 is the bridge wrapper, not the underlying transport result.
+  const detail = msg.includes("webwix_direct_failed")
+    ? /"detail"\s*:\s*"([^"]+)"/.exec(msg)?.[1] ?? msg
+    : msg;
+  if (status && detail === msg) return "server";
+  if (TRANSPORT.test(detail)) return "offline";
+  return "server";   // anything else — a bug, a malformed row — is not the user's connection
+}
+
+// App-specific host integration. If the host does not expose auth state here, keep
+// "unknown": a 401 then reads as a session that ended.
+function currentAuthState(): "signedIn" | "signedOut" | "unknown" { return "unknown"; }
+
+// This screen has no sign-in flow, so a sign-in failure shows the permission state —
+// every class it can show has a node in the descriptor.
+function shownKind(e: unknown): ShownKind {
+  const kind = classifyError(e, currentAuthState());
+  return kind === "signIn" ? "permission" : kind || "server";
 }
 
 async function loadList(s: Partial<ProductsState>): Promise<ProductsState> {
@@ -111,9 +140,10 @@ async function loadList(s: Partial<ProductsState>): Promise<ProductsState> {
     const items = (res.products ?? []).filter((p) => p?.id).map(normalize);
     return shape({ status: "ready", items, selectedId: s.selectedId });
   } catch (e) {
-    const errorKind = classifyError(e);
+    const errorKind = shownKind(e);
     // Keep the rows on a refresh failure; clear them when access is gone.
-    const items = errorKind === "permission" ? [] : s.items ?? [];
+    const lostAccess = errorKind === "membership" || errorKind === "permission";
+    const items = lostAccess ? [] : s.items ?? [];
     return shape({ ...s, status: "error", items, errorKind });
   }
 }

package/guides/form-submit-t5.descriptor.json

@@ -78,8 +78,7 @@
                       "title": "Create post",
                       "style": "primary",
                       "fullWidth": true,
-                      "action": { "actionId": "tier5.postForm.submit" },
-                      "disabledPath": "$service:postForm.cannotSave"
+                      "action": { "actionId": "tier5.postForm.submit" }
                     }
                   }
                 }

package/guides/form-submit.service.ts

@@ -25,7 +25,6 @@ interface PostFormState {
   savedMessage: string;  // "" unless saved           → collapseWhenEmpty
   hideSavedLink: boolean; // gates the "Open post" button via hiddenPath
   savedScreenId: string;  // deep-link target for the created entity
-  cannotSave: boolean;    // true after a permission failure → the submit's disabledPath
 }
 
 function shape(s: Partial<PostFormState>): PostFormState {
@@ -39,22 +38,26 @@ function shape(s: Partial<PostFormState>): PostFormState {
     savedMessage: s.savedMessage ?? "",
     savedScreenId,
     hideSavedLink: status !== "saved" || !savedScreenId,
-    cannotSave: s.cannotSave ?? false,
   };
 }
 
 // A failed save is an ACTION error: one user-facing sentence per class, shown next to
 // the submit button, which is the retry (`himi docs recipe-four-state`). Never e.message.
-type ErrorKind = "offline" | "server" | "signIn" | "permission";
-const SAVE_FAILED: Record<ErrorKind, string> = {
+// Submit stays available after every class: the user retries once they reconnect,
+// sign in, join the site or are granted access — without restarting the form.
+type ErrorKind = "" | "offline" | "server" | "signIn" | "membership" | "permission";
+const SAVE_FAILED: Record<Exclude<ErrorKind, "">, string> = {
   offline: "You're offline, so nothing was saved. Try again when you reconnect.",
   server: "Couldn't save your changes. Try again.",
   signIn: "Your session has ended. Sign in, then save again.",
+  membership: "Join this site before saving.",
   permission: "You don't have permission to save this.",
 };
 
+// The classifier below is `himi docs recipe-four-state`'s, VERBATIM — a test holds
+// the two byte-identical, so the rules an agent copies from here are the documented ones.
 // The HTTP status rides in the message: `HTTP 503: …` on a device, `Wix 503 for …`
-// under `himi test` / `himi render`. Only a transport failure is "offline".
+// under `himi test` / `himi render`.
 const STATUS = /\b(?:HTTP|Wix) (\d{3})\b/;
 // No answer at all — what a dropped connection says on every platform.
 const TRANSPORT = /NSURLErrorDomain|(?:UnknownHost|Connect|SocketTimeout|NoRouteToHost|SSLHandshake)Exception|Failed to connect|Unable to resolve host|Connection (?:refused|reset)|Network is unreachable|Software caused connection abort|ECONNRESET|ETIMEDOUT|EPIPE|Broken pipe|stream was reset|unexpected end of stream|timed out|^timeout$|Failed to fetch|NetworkError|^(?:TypeError: )?Load failed$|net::ERR_|^[a-z0-9-]+(?:\.[a-z0-9-]+)+$/i;
@@ -63,37 +66,54 @@ const TRANSPORT = /NSURLErrorDomain|(?:UnknownHost|Connect|SocketTimeout|NoRoute
 // A pinned site with no member session: iOS `siteNotPermitted(requested: "account", …)`,
 // Android `site account is not the bound site …`; the web host `HTTP 501: {"error":"webwix_owner_no_session"}`.
 const SIGNED_OUT = /wixApi not enabled|session unavailable|PRINCIPAL_CHANGED|not signed in|siteNotPermitted\(requested: "account"|site account is not the bound site|webwix_owner_no_session/i;
+// The account is not a member of this site: iOS `NotSiteMember(metaSiteId: …)`,
+// Android `not a member of site …`. NOT `WDE0027` — that is Wix Data's generic
+// permission refusal, which a signed-in member and a visitor both get.
+const NOT_MEMBER = /\bNotSiteMember\b|\bnot a member of site\b/i;
 
-// The same classifier as `himi docs recipe-four-state`.
-function classifyError(e: unknown): ErrorKind {
+function classifyError(e: unknown, authState: "signedIn" | "signedOut" | "unknown" = "unknown"): ErrorKind {
   const msg = String((e as Error)?.message ?? e ?? "");
-  const code = String((e as { code?: unknown })?.code ?? "");
+  // Some bridges put the Wix code in the response body rather than Error.code.
+  const code = String((e as { code?: unknown })?.code ?? /"(?:code|error)"\s*:\s*"([^"]+)"/.exec(msg)?.[1] ?? "");
   const status = Number(STATUS.exec(msg)?.[1] ?? 0);
-  if (status === 401) return "signIn";
-  if (status === 403) return "permission";
-  if (SIGNED_OUT.test(msg)) return "signIn";
-  if (code === "offline_write_blocked") return "offline"; // a write refused before it left
+  if (code === "AccountSessionExpired" || code === "webwix_account_signed_out" || SIGNED_OUT.test(msg)) return "signIn";
+  if (code === "NotSiteMember" || NOT_MEMBER.test(msg)) return "membership";
+  // A 401 is a missing or expired session — unless the host knows the user is signed
+  // in, when it is a policy refusal. Never "server": a retry sends the same 401 back.
+  if (status === 401) return authState === "signedIn" ? "permission" : "signIn";
+  // A 403 is a missing permission — but a visitor the host knows is signed out gets
+  // `403 WDE0027` on member-only data too, and signing in is what fixes that.
+  if (status === 403) return authState === "signedOut" ? "signIn" : "permission";
+  if (code === "offline_write_blocked") return "offline";   // a write refused before it left
   // A web call that never reached Wix arrives as
   // `HTTP 502: {"error":"webwix_direct_failed","detail":"Failed to fetch"}` — judge its detail.
-  if (status && !msg.includes("webwix_direct_failed")) return "server";
-  if (TRANSPORT.test(msg)) return "offline";
-  return "server"; // a bug or a malformed row is not the user's connection
+  // The top-level 502 is the bridge wrapper, not the underlying transport result.
+  const detail = msg.includes("webwix_direct_failed")
+    ? /"detail"\s*:\s*"([^"]+)"/.exec(msg)?.[1] ?? msg
+    : msg;
+  if (status && detail === msg) return "server";
+  if (TRANSPORT.test(detail)) return "offline";
+  return "server";   // anything else — a bug, a malformed row — is not the user's connection
 }
 
+// App-specific host integration. If the host does not expose auth state here, keep
+// "unknown": a 401 then reads as a session that ended.
+function currentAuthState(): "signedIn" | "signedOut" | "unknown" { return "unknown"; }
+
 // Blog draft bodies are rich content — wrap the plain text minimally.
 function toRichContent(text: string): WixRichContent {
   return { nodes: [{ type: "PARAGRAPH", nodes: [{ type: "TEXT", textData: { text, decorations: [] } }] }] };
 }
 
 // Every key that describes the LAST attempt, not this run: a cold boot starts from the declared values.
-const OUTCOME_KEYS = ["status", "error", "savedMessage", "savedScreenId", "hideSavedLink", "cannotSave"] as const;
+const OUTCOME_KEYS = ["status", "error", "savedMessage", "savedScreenId", "hideSavedLink"] as const;
 
 const svc = defineService<PostFormState, {
   submit: (s: PostFormState, values?: Record<string, unknown>) => Promise<PostFormState>;
 }>("postForm", {
   state: shape({}),
-  // Outcome keys are per-attempt: a cold boot must not restore a stale error, or a submit
-  // disabled by a 403 the user has since been granted past.
+  // Outcome keys are per-attempt: a cold boot must not restore a stale error or a
+  // "Draft created." line from an earlier run.
   notHydrated: OUTCOME_KEYS,
   actions: {
     // `values` is the ONLY channel for what the user typed — keyed by FormField id.
@@ -115,18 +135,18 @@ const svc = defineService<PostFormState, {
           savedScreenId: id ? `my_post_${id}` : "", // wire a templated detail route per the tier-5 guide
         });
       } catch (e) {
-        const kind = classifyError(e);
+        const kind = classifyError(e, currentAuthState()) || "server";
         // Echo what the user typed back into the prefill, so a failed save loses nothing.
         // Clear the last success line: a failed attempt must not also read "Draft created.".
-        return shape({ ...s, title, body, status: "error", error: SAVE_FAILED[kind], savedMessage: "", cannotSave: kind === "permission" });
+        return shape({ ...s, title, body, status: "error", error: SAVE_FAILED[kind], savedMessage: "" });
       }
     },
   },
 });
 
 // An older runtime ignores `notHydrated` (it does not set `himalaya.hydrationOptOut`) and restores the
-// whole snapshot: reset the outcome keys in place before any action runs, or a 403's disabled submit
-// would come back on every launch with no way to clear it.
+// whole snapshot: reset the outcome keys in place before any action runs, or last run's error line
+// would come back on every launch.
 if ((globalThis as { himalaya?: { hydrationOptOut?: unknown } }).himalaya?.hydrationOptOut !== true) {
   const booted = (svc as unknown as { getState?: () => Record<string, unknown> | undefined }).getState?.();
   const fresh = shape({}) as unknown as Record<string, unknown>;

package/guides/recipe-four-state.md

@@ -67,8 +67,8 @@ const TRANSPORT = /NSURLErrorDomain|(?:UnknownHost|Connect|SocketTimeout|NoRoute
 // Android reports an unknown host as the bare hostname (`users.wix.com`) — hence the last form.
 // No session on the device: the native bridge refuses before any request leaves.
 // A pinned site with no member session: iOS `siteNotPermitted(requested: "account", …)`,
-// Android `site account is not the bound site …`.
-const SIGNED_OUT = /wixApi not enabled|session unavailable|PRINCIPAL_CHANGED|not signed in|siteNotPermitted\(requested: "account"|site account is not the bound site/i;
+// Android `site account is not the bound site …`; the web host `HTTP 501: {"error":"webwix_owner_no_session"}`.
+const SIGNED_OUT = /wixApi not enabled|session unavailable|PRINCIPAL_CHANGED|not signed in|siteNotPermitted\(requested: "account"|site account is not the bound site|webwix_owner_no_session/i;
 // The account is not a member of this site: iOS `NotSiteMember(metaSiteId: …)`,
 // Android `not a member of site …`. NOT `WDE0027` — that is Wix Data's generic
 // permission refusal, which a signed-in member and a visitor both get.

package/guides/search-list-t5.descriptor.json

@@ -110,6 +110,20 @@
               "hiddenPath": "$service:posts.hideServerError"
             }
           },
+          {
+            "id": "error.membership",
+            "body": {
+              "package": "himalaya",
+              "type": "EmptyState",
+              "props": {
+                "title": "Join this site to view posts",
+                "subtitle": "Ask the owner of this blog to add you as a member."
+              }
+            },
+            "modifiers": {
+              "hiddenPath": "$service:posts.hideMembershipError"
+            }
+          },
           {
             "id": "error.permission",
             "body": {

package/guides/search-list.service.ts

@@ -21,15 +21,17 @@ interface PostRow {
   categoryIds: string[];
 }
 
-// A public blog has no sign-in flow, so a 401 reads as "permission" here.
-type ErrorKind = "" | "offline" | "server" | "permission";
+// Every class the recipe's classifier returns …
+type ErrorKind = "" | "offline" | "server" | "signIn" | "membership" | "permission";
+// … and the ones this screen shows: it has no sign-in flow (see shownKind()).
+type ShownKind = Exclude<ErrorKind, "" | "signIn">;
 
 interface PostsState {
   status: "loading" | "ready" | "error";
   all: PostRow[];   // the full fetched set — NOT bound by the descriptor
   items: PostRow[]; // ← itemsPath binds here; ALWAYS derived from all + query
   query: string;
-  errorKind: ErrorKind;
+  errorKind: "" | ShownKind;
   // hiddenPath flags (hide when TRUE) — see `himi docs recipe-four-state`
   hideLoading: boolean;
   hideNoPosts: boolean;   // EmptyState: the blog has no posts at all
@@ -37,6 +39,7 @@ interface PostsState {
   notEmpty: boolean;      // false while either EmptyState shows
   hideOfflineError: boolean;
   hideServerError: boolean;
+  hideMembershipError: boolean;
   hidePermissionError: boolean;
   hideRefreshError: boolean;
 }
@@ -64,7 +67,7 @@ function shape(s: Partial<PostsState>): PostsState {
   const all = s.all ?? [];
   const query = s.query ?? "";
   const items = s.items ?? visible(all, query);
-  const errorKind: ErrorKind = status === "error" ? (s.errorKind || "server") : "";
+  const errorKind: "" | ShownKind = status === "error" ? (s.errorKind || "server") : "";
   const blank = all.length === 0; // nothing loaded to keep
   return {
     status,
@@ -80,13 +83,16 @@ function shape(s: Partial<PostsState>): PostsState {
     hideLoading: !(status === "loading" && blank),
     hideOfflineError: !(blank && errorKind === "offline"),
     hideServerError: !(blank && errorKind === "server"),
+    hideMembershipError: !(blank && errorKind === "membership"),
     hidePermissionError: !(blank && errorKind === "permission"),
     hideRefreshError: !(!blank && (errorKind === "offline" || errorKind === "server")),
   };
 }
 
+// The classifier below is `himi docs recipe-four-state`'s, VERBATIM — a test holds
+// the two byte-identical, so the rules an agent copies from here are the documented ones.
 // The HTTP status rides in the message: `HTTP 503: …` on a device, `Wix 503 for …`
-// under `himi test` / `himi render`. Only a transport failure is "offline".
+// under `himi test` / `himi render`.
 const STATUS = /\b(?:HTTP|Wix) (\d{3})\b/;
 // No answer at all — what a dropped connection says on every platform.
 const TRANSPORT = /NSURLErrorDomain|(?:UnknownHost|Connect|SocketTimeout|NoRouteToHost|SSLHandshake)Exception|Failed to connect|Unable to resolve host|Connection (?:refused|reset)|Network is unreachable|Software caused connection abort|ECONNRESET|ETIMEDOUT|EPIPE|Broken pipe|stream was reset|unexpected end of stream|timed out|^timeout$|Failed to fetch|NetworkError|^(?:TypeError: )?Load failed$|net::ERR_|^[a-z0-9-]+(?:\.[a-z0-9-]+)+$/i;
@@ -95,21 +101,45 @@ const TRANSPORT = /NSURLErrorDomain|(?:UnknownHost|Connect|SocketTimeout|NoRoute
 // A pinned site with no member session: iOS `siteNotPermitted(requested: "account", …)`,
 // Android `site account is not the bound site …`; the web host `HTTP 501: {"error":"webwix_owner_no_session"}`.
 const SIGNED_OUT = /wixApi not enabled|session unavailable|PRINCIPAL_CHANGED|not signed in|siteNotPermitted\(requested: "account"|site account is not the bound site|webwix_owner_no_session/i;
+// The account is not a member of this site: iOS `NotSiteMember(metaSiteId: …)`,
+// Android `not a member of site …`. NOT `WDE0027` — that is Wix Data's generic
+// permission refusal, which a signed-in member and a visitor both get.
+const NOT_MEMBER = /\bNotSiteMember\b|\bnot a member of site\b/i;
 
-// The same classifier as `himi docs recipe-four-state`, except that a public screen with no sign-in flow shows the permission state for a sign-in failure.
-function classifyError(e: unknown): ErrorKind {
+function classifyError(e: unknown, authState: "signedIn" | "signedOut" | "unknown" = "unknown"): ErrorKind {
   const msg = String((e as Error)?.message ?? e ?? "");
-  const code = String((e as { code?: unknown })?.code ?? "");
+  // Some bridges put the Wix code in the response body rather than Error.code.
+  const code = String((e as { code?: unknown })?.code ?? /"(?:code|error)"\s*:\s*"([^"]+)"/.exec(msg)?.[1] ?? "");
   const status = Number(STATUS.exec(msg)?.[1] ?? 0);
-  if (status === 401) return "permission";
-  if (status === 403) return "permission";
-  if (SIGNED_OUT.test(msg)) return "permission";
-  if (code === "offline_write_blocked") return "offline"; // a write refused before it left
+  if (code === "AccountSessionExpired" || code === "webwix_account_signed_out" || SIGNED_OUT.test(msg)) return "signIn";
+  if (code === "NotSiteMember" || NOT_MEMBER.test(msg)) return "membership";
+  // A 401 is a missing or expired session — unless the host knows the user is signed
+  // in, when it is a policy refusal. Never "server": a retry sends the same 401 back.
+  if (status === 401) return authState === "signedIn" ? "permission" : "signIn";
+  // A 403 is a missing permission — but a visitor the host knows is signed out gets
+  // `403 WDE0027` on member-only data too, and signing in is what fixes that.
+  if (status === 403) return authState === "signedOut" ? "signIn" : "permission";
+  if (code === "offline_write_blocked") return "offline";   // a write refused before it left
   // A web call that never reached Wix arrives as
   // `HTTP 502: {"error":"webwix_direct_failed","detail":"Failed to fetch"}` — judge its detail.
-  if (status && !msg.includes("webwix_direct_failed")) return "server";
-  if (TRANSPORT.test(msg)) return "offline";
-  return "server"; // a bug or a malformed row is not the user's connection
+  // The top-level 502 is the bridge wrapper, not the underlying transport result.
+  const detail = msg.includes("webwix_direct_failed")
+    ? /"detail"\s*:\s*"([^"]+)"/.exec(msg)?.[1] ?? msg
+    : msg;
+  if (status && detail === msg) return "server";
+  if (TRANSPORT.test(detail)) return "offline";
+  return "server";   // anything else — a bug, a malformed row — is not the user's connection
+}
+
+// App-specific host integration. If the host does not expose auth state here, keep
+// "unknown": a 401 then reads as a session that ended.
+function currentAuthState(): "signedIn" | "signedOut" | "unknown" { return "unknown"; }
+
+// This screen has no sign-in flow, so a sign-in failure shows the permission state —
+// every class it can show has a node in the descriptor.
+function shownKind(e: unknown): ShownKind {
+  const kind = classifyError(e, currentAuthState());
+  return kind === "signIn" ? "permission" : kind || "server";
 }
 
 // The SearchField onChange arg shape varies by surface — read it defensively.
@@ -132,9 +162,10 @@ async function loadList(s: Partial<PostsState>): Promise<PostsState> {
       .filter((r) => r.id);
     return shape({ status: "ready", all, query: currentQuery });
   } catch (e) {
-    const errorKind = classifyError(e);
+    const errorKind = shownKind(e);
     // Keep what was loaded on a refresh failure; clear it when access is gone.
-    const all = errorKind === "permission" ? [] : s.all ?? [];
+    const lostAccess = errorKind === "membership" || errorKind === "permission";
+    const all = lostAccess ? [] : s.all ?? [];
     return shape({ status: "error", all, query: currentQuery, errorKind });
   }
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@wix/himalaya-cli",
-  "version": "0.1483.0",
+  "version": "0.1485.0",
   "type": "module",
   "description": "himi — the Himalaya authoring CLI. Build a Tier-5 content package on your own machine, push it to the production serve as a draft, preview it on web + Himi Player, and read worker logs back — the remote dev loop. Wraps @himalaya/serve-cli for transport.",
   "keywords": [
@@ -71,5 +71,5 @@
       "artifactId": "himalaya-cli"
     }
   },
-  "falconPackageHash": "e7f0dcc8dff51ebc6c4145c1a3a2fbb2346a063b5a972db85e258c8d"
+  "falconPackageHash": "b348966433fe41b3836cc5030d8aac7869b50966ab9ac20254d62046"
 }

package/templates/beauty-salon/tier5-src/_shared/collection-query.ts

@@ -84,14 +84,17 @@ export function createCollectionQuery<Row>(source: CollectionQuerySource<Row>, p
     }
     return result;
   };
-  const fetch = async (append: boolean): Promise<void> => {
+  /** [keepRows]: a search typed over the rows on screen leaves them there until its answer arrives (status stays
+   *  `loading`, and nothing pages under the old answer), so the list is not blanked on each keystroke. */
+  const fetch = async (append: boolean, keepRows = false): Promise<void> => {
     if (disposed || (append && (state.loadingMore || state.status === 'loading' || !state.nextCursor))) return;
     const revision = append ? generation : ++generation;
     const cursor = append ? state.nextCursor : '';
     const criteria = copyQuery(state.criteria);
     if (!append) loadedPages = 0;
     state = { ...state, status: append ? 'ready' : 'loading', loadingMore: append, pageError: false, error: '',
-      ...(append ? {} : { items: [], nextCursor: '', total: undefined, metadata: undefined, complete: false, provisional: false }) };
+      ...(append ? {} : keepRows ? { nextCursor: '', complete: false, provisional: false }
+        : { items: [], nextCursor: '', total: undefined, metadata: undefined, complete: false, provisional: false }) };
     emit();
     try {
       if (!append && source.cached) {
@@ -117,7 +120,9 @@ export function createCollectionQuery<Row>(source: CollectionQuerySource<Row>, p
       clearedByError = clear || /HTTP 40[13]\b/.test(String(error));
       if (clearedByError) lastShown = undefined;
       if (clear) loadedPages = 0;
-      state = { ...state, ...(clear ? { items: [], nextCursor: '', total: undefined, metadata: undefined } : {}),
+      // The rows a typed search kept on screen while it ran were never its answer: a failed one shows none of them.
+      const drop = clear || keepRows;
+      state = { ...state, ...(drop ? { items: [], nextCursor: '', total: undefined, metadata: undefined } : {}),
         status: append && !clear ? 'ready' : 'error', loadingMore: false, pageError: append && !clear, complete: false,
         provisional: false, error: source.errorMessage?.(error) ?? '' };
     }
@@ -134,9 +139,13 @@ export function createCollectionQuery<Row>(source: CollectionQuerySource<Row>, p
       const count = restorePages && same ? Math.max(loadedPages, restoringPages, 1) : 1;
       const showing = lastShown && sameCriteria(lastShown.state.criteria, next) ? lastShown : undefined;
       restoringPages = count;
+      // Only the search text changed: the user is typing over the rows on screen, also while the last keystroke's
+      // search is still out.
+      const typing = !same && (state.status === 'ready' || state.status === 'loading')
+        && sameCriteria({ ...state.criteria, query: '' }, { ...next, query: '' });
       state = { ...state, criteria: next };
       if (revalidate && showing) { revalidating = generation + 1; clearedByError = false; }
-      const pending = fetch(false);
+      const pending = fetch(false, typing);
       const revision = generation;
       await pending;
       // Re-appearance revalidates every previously opened page using fresh

package/templates/beauty-salon/tier5-src/_shared/collection-service.ts

@@ -194,7 +194,8 @@ export function decorateCollection(name: string, def: { state: State; actions?:
       noSignIn: !signInRequired,
       errorTitle: signInRequired ? copyParam('collection.signInTitle', 'Sign in to see this') : copyParam('collection.loadErrorTitle', 'This collection could not load'),
       errorMessage,
-      noLoading: !loading,
+      // A skeleton only with nothing to show: a search re-running over the rows on screen keeps them.
+      noLoading: !loading || rows.length > 0,
       // De-dup against a domain that paints its OWN empty block (screen-kit emptyBlock is
       // gated on the domain's top-level `noEmpty`): only one empty state ever shows.
       noEmptySource: !sourceEmpty || s.noEmpty === false,