@wix/himalaya-cli 0.1570.0 → 0.1572.0

package/templates/retail-store/tier5-src/_shared/branded-load-state.ts

@@ -0,0 +1,106 @@
+// Load-state honesty for the branded-lite vertical workers.
+//
+// These workers used to answer every failed or empty query with representative SAMPLE
+// rows — discount codes, gift-card balances, invoices, reservations, inbox messages —
+// under a "Sample content" banner. On a customer build that is invented data presented
+// as the customer's own: a code that does not exist, a balance in the wrong currency, an
+// "Overdue" invoice, a booking labelled "tap to cancel". The banner did not make it
+// honest; the rows were still the first thing a visitor read.
+//
+// The rule now:
+//   • query FAILED     → status "error" with a customer sentence, a Retry, and — when
+//                        Wix refused an anonymous visitor (401) — a Sign in path instead;
+//   • query was EMPTY  → status "ready", no rows, the vertical's own empty sentence;
+//   • sample rows      → ONLY when the host explicitly asked for sample data (the web
+//                        preview's sample data mode, `__himiOwnerPreview: "sample"`).
+//                        Never on a device, never as a fallback.
+//
+// Every field here is flat and boolean-gated because descriptors can only
+// `hiddenWhen(<path>)` on a TRUE value: `notErrored` hides the error card, `noSignIn`
+// hides the sign-in CTA, `signInRequired` hides Retry when retrying cannot help.
+import { copyParam } from "./himi-copy.js";
+
+export interface LoadFlags {
+  status: "loading" | "ready" | "error";
+  /** The customer-facing failure sentence; "" unless status is "error". */
+  error: string;
+  signInRequired: boolean;
+  notErrored: boolean;
+  /** hiddenWhen gate for a loading skeleton. */
+  notLoading: boolean;
+  /** Loading or failed — gates content that has nothing to say in either. */
+  busy: boolean;
+  noSignIn: boolean;
+  isMock: boolean;
+  notMock: boolean;
+  notMockEmpty: boolean;
+  notMockUnavailable: boolean;
+}
+
+export const LOADING: LoadFlags = {
+  status: "loading", error: "", signInRequired: false, notErrored: true, notLoading: false, busy: true, noSignIn: true,
+  isMock: false, notMock: true, notMockEmpty: true, notMockUnavailable: true,
+};
+
+const READY: LoadFlags = { ...LOADING, status: "ready", notLoading: true, busy: false };
+
+/** Did the HOST ask for sample data? Only the web preview's sample mode does; a native
+ *  build, a visitor preview and a live owner preview never carry it. */
+export function samplesRequested(): boolean {
+  const input = (globalThis as { himalaya?: { input?: Record<string, unknown> } }).himalaya?.input;
+  return input?.__himiOwnerPreview === "sample";
+}
+
+/** Wix refused an ANONYMOUS visitor: signing in is the fix, not retrying. A 403 is not
+ *  this — it also answers "feature not installed" and a signed-in member without the
+ *  permission, where a Sign in button leads nowhere — so it stays a Retry-able failure. */
+export function needsSignIn(err: unknown): boolean {
+  const msg = String((err as { message?: unknown })?.message ?? err ?? "");
+  return /\b401\b|unauthori[sz]ed|unauthenticated/i.test(msg);
+}
+
+export interface LoadCopy<T> {
+  /** The copy namespace (`giftCards`, `coupons`, …) — keys resolve through copyParam. */
+  prefix: string;
+  /** Shown when the site genuinely has none. */
+  empty: string;
+  /** Shown when the query failed. */
+  error: string;
+  /** Shown when Wix refused the visitor (member-only data). */
+  signIn: string;
+  /** Sample rows for the explicit sample preview ONLY. */
+  sample: () => T[];
+}
+
+type Rows<K extends string, T> = { [P in K]: T[] } & { emptyText: string } & LoadFlags;
+
+/** A query answered. Rows win; an empty answer is a real empty state. */
+export function loaded<K extends string, T>(key: K, rows: T[], copy: LoadCopy<T>): Rows<K, T> {
+  if (rows.length) return { ...READY, [key]: rows, emptyText: "" } as Rows<K, T>;
+  if (samplesRequested()) return sampleRows(key, copy, "empty");
+  return { ...READY, [key]: [], emptyText: copyParam(`${copy.prefix}.emptyText`, copy.empty) } as Rows<K, T>;
+}
+
+/** A query threw. Never rows the customer did not create. */
+export function loadFailed<K extends string, T>(key: K, err: unknown, copy: LoadCopy<T>): Rows<K, T> {
+  if (samplesRequested()) return sampleRows(key, copy, "unavailable");
+  const signIn = needsSignIn(err);
+  return {
+    ...READY,
+    status: "error",
+    [key]: [],
+    emptyText: "",
+    error: signIn ? copyParam(`${copy.prefix}.signInText`, copy.signIn) : copyParam(`${copy.prefix}.errorText`, copy.error),
+    signInRequired: signIn,
+    notErrored: false,
+    busy: true,
+    noSignIn: !signIn,
+  } as Rows<K, T>;
+}
+
+function sampleRows<K extends string, T>(key: K, copy: LoadCopy<T>, reason: "empty" | "unavailable"): Rows<K, T> {
+  return {
+    ...READY, [key]: copy.sample(), emptyText: "",
+    isMock: true, notMock: false, notMockEmpty: reason !== "empty", notMockUnavailable: reason !== "unavailable",
+  } as Rows<K, T>;
+}

package/templates/retail-store/tier5-src/_shared/member-read.ts

@@ -0,0 +1,52 @@
+import { memberAccess, memberAccessChanged, memberAccessDenied, type MemberAccess } from "./member-access.js";
+import { needsSignIn } from "./branded-load-state.js";
+
+/** Public reads stay public. Capture their reader only to reject a result that
+ * belongs to the identity/site which was active before the request. */
+export interface ReadAccess { member: MemberAccess; tenant: string; }
+export async function readAccess(): Promise<ReadAccess> {
+  const member = await memberAccess();
+  const input = (globalThis as { himalaya?: { input?: Record<string, unknown> } }).himalaya?.input;
+  return { member, tenant: JSON.stringify([input?.__himiPreferenceAccount ?? "", input?.__himiPreferenceBusiness ?? ""]) };
+}
+
+export async function assertReadAccess(access: ReadAccess): Promise<void> {
+  const current = await readAccess();
+  if (current.member.email !== access.member.email || current.member.scope !== access.member.scope || current.tenant !== access.tenant) throw memberAccessChanged();
+}
+
+/** Bridge errors put the actual status first; codes quoted inside the body are data. */
+function httpStatus(error: unknown): string | undefined {
+  return /^HTTP\s*(\d{3})\b/i.exec(String((error as { message?: unknown })?.message ?? error))?.[1];
+}
+
+export const NO_READ_SIGN_IN = { signInRequired: false, noSignIn: true };
+
+/** An authorization refusal must not fall back to a previously cached article. */
+export function readAccessDenied(error: unknown): boolean {
+  let cause = error;
+  for (let depth = 0; cause && depth < 4; depth++) {
+    const status = httpStatus(cause);
+    if (status ? status === "401" || status === "403" : memberAccessDenied(cause) || needsSignIn(cause)) return true;
+    cause = (cause as { cause?: unknown }).cause;
+  }
+  return false;
+}
+
+/** A permission failure alone says nothing about whether signing in can help.
+ * In particular, a private member profile can be unavailable to members too.
+ * Only an authentication refusal for a current visitor offers Sign in. Follow
+ * SDK wrapper causes (blog getPost preserves its original read error there). */
+export async function readSignInFlags(error: unknown): Promise<typeof NO_READ_SIGN_IN> {
+  let authenticationRequired = false;
+  let permissionRefused = false;
+  let cause = error;
+  for (let depth = 0; cause && depth < 4; depth++) {
+    const status = httpStatus(cause);
+    permissionRefused ||= status === "403";
+    authenticationRequired ||= status ? status === "401" : needsSignIn(cause);
+    cause = (cause as { cause?: unknown }).cause;
+  }
+  const signInRequired = !permissionRefused && authenticationRequired && !(await memberAccess()).email;
+  return { signInRequired, noSignIn: !signInRequired };
+}

package/templates/retail-store/tier5-src/_shared/program-description.ts

@@ -0,0 +1,11 @@
+import type { WixProgram } from "@himalaya/wix-online-programs";
+
+/** v3 nests the body in description.details; older responses use settings or a
+ * flat description. The body itself may be a Ricos document or serialized text. */
+export function programDescription(program: WixProgram): unknown {
+  const raw = (program as { description?: unknown }).description;
+  const nested = raw && typeof raw === "object" ? raw as { details?: unknown; nodes?: unknown } : undefined;
+  return program.settings?.description ?? nested?.details
+    ?? (typeof raw === "string" || Array.isArray(nested?.nodes) ? raw : undefined)
+    ?? program.details?.description;
+}

package/templates/retail-store/tier5-src/himi-blog-post/index.ts

@@ -9,6 +9,7 @@ import { stashCopy, copyParam, copyTemplate } from "../_shared/himi-copy.js";
 import { formatDateMedium, formatMonthDay } from "../_shared/engine-intl.js";
 import { openRichLink } from "../_shared/rich-content-link.js";
 import { richBody, ROW_IMAGE_WIDTH } from "../_shared/rich-body.js";
+import { readAccess, assertReadAccess, readAccessDenied, readSignInFlags, NO_READ_SIGN_IN } from "../_shared/member-read.js";
 
 // Offline-first (data-offline): the post body is a public read-through — when the
 // live fetch fails (offline) fall back to the last-synced row the feed cached under
@@ -34,6 +35,7 @@ interface CommentRow {
 }
 
 interface S {
+  signInRequired: boolean; noSignIn: boolean; signInScreenId: string;
   status: "loading" | "ready" | "error";
   id: string;
   title: string;
@@ -214,6 +216,7 @@ function derive(s: S): S {
 }
 
 const baseState: S = derive({
+  ...NO_READ_SIGN_IN, signInScreenId: "himi_account",
   status: "loading",
   id: "",
   title: "",
@@ -280,23 +283,28 @@ async function cachedPostState(s: S, id: string): Promise<S> {
   });
 }
 
-async function loadPostState(s: S): Promise<S> {
+let loadVersion = 0;
+async function loadPostState(s: S): Promise<S | undefined> {
+  const version = ++loadVersion;
+  await svc.prepare();
+  const clean = { ...baseState, signInScreenId: s.signInScreenId };
   const id = inputId();
   if (!id) {
-    return derive({ ...s, status: "ready", emptyText: copyParam("blogPost.notFoundText", "Post not found.") });
+    return derive({ ...clean, status: "ready", emptyText: copyParam("blogPost.notFoundText", "Post not found.") });
   }
   try {
-    const [postResult, commentsResult] = await Promise.allSettled([getPost(id), listBlogComments(id)]);
-    if (postResult.status === "rejected") {
-      return cachedPostState(s, id);
-    }
+    const access = await readAccess();
+    const [postResult, commentsResult] = await Promise.allSettled([getPost(id, {}, { preserveAccessErrors: true }), listBlogComments(id)]);
+    if (postResult.status === "rejected") throw postResult.reason;
+    await assertReadAccess(access);
+    if (version !== loadVersion) return undefined;
     const post = (((postResult.value as unknown as { post?: WixPost }).post) ?? postResult.value) as PostWithExtras;
     const commentsUnavailable = commentsResult.status === "rejected";
     const comments = commentsResult.status === "fulfilled" ? commentsResult.value.map(toCommentRow) : [];
     const cover = imageUrl(post);
     const title = post.title || "Untitled post";
     return derive({
-      ...s,
+      ...clean,
       status: "ready",
       id,
       title,
@@ -319,14 +327,23 @@ async function loadPostState(s: S): Promise<S> {
       errorText: "",
       emptyText: "",
     });
-  } catch {
-    return cachedPostState(s, id);
+  } catch (error) {
+    const flags = await readSignInFlags(error);
+    const failed = derive({ ...clean, ...flags, status: "error", id, errorText: copyParam("blogPost.errorText", "This post could not load.") });
+    if (version !== loadVersion) return undefined;
+    if (readAccessDenied(error)) return failed;
+    const access = await readAccess();
+    const cached = await cachedPostState(clean, id);
+    try { await assertReadAccess(access); }
+    catch { return version === loadVersion ? failed : undefined; }
+    return version === loadVersion ? cached : undefined;
   }
 }
 
 const svc = defineService<S, {
-  load: (s: S, arg?: unknown) => Promise<S>;
-  retry: (s: S) => Promise<S>;
+  prepare: (s: S) => S;
+  load: (s: S, arg?: unknown) => Promise<S | undefined>;
+  retry: (s: S) => Promise<S | undefined>;
   like: (s: S) => Promise<S>;
   unlike: (s: S) => Promise<S>;
   toggleSave: (s: S) => S;
@@ -338,7 +355,12 @@ const svc = defineService<S, {
 }>("himiBlogPost", {
   state: baseState,
   actions: {
-    load: (s, arg) => { stashCopy(arg); return loadPostState(s); },
+    prepare: (s) => ({ ...s, ...baseState }),
+    load: (s, arg) => {
+      stashCopy(arg);
+      const target = (arg as { signInScreenId?: unknown })?.signInScreenId;
+      return loadPostState({ ...s, signInScreenId: target === "himi_sign_in" ? target : s.signInScreenId });
+    },
     retry: (s) => loadPostState({ ...s, status: "loading", errorText: "" }),
     like: async (s) => {
       if (!s.id) return derive({ ...s, actionMessage: copyParam("blogPost.noPostMessage", "No post selected.") });
@@ -409,5 +431,6 @@ const svc = defineService<S, {
   },
 });
 
+svc.prepare();
 svc.load();
 export { svc };

package/templates/retail-store/tier5-src/himi-branded-lite-home/index.ts

@@ -1,3 +1,5 @@
+import { descriptionBody } from "../_shared/rich-body.js";
+import { programDescription } from "../_shared/program-description.js";
 import { fetchMemberBookings, type MemberBookingRow } from "../_shared/member-bookings.js";
 import { hostSiteFromInput, hostedExploreCards, hostedHiddenFlags, type HostedExploreCard } from "../_shared/branded-lite-hosted.js";
 import { memberAccess, assertMemberAccess } from "../_shared/member-access.js";
@@ -675,11 +677,9 @@ async function fetchHomePrograms(): Promise<ProgramCard[]> {
       .map((p: WixProgram) => {
         const desc = (p as { description?: unknown }).description;
         const nestedTitle = desc && typeof desc === "object" ? (desc as { title?: string }).title : undefined;
-        const nestedDetails = desc && typeof desc === "object" ? (desc as { details?: string }).details : undefined;
         const name = cleanTitle(p.settings?.title ?? nestedTitle ?? p.title) || copyParam("home.programFallbackName", "Program");
         const image = programImage(p);
-        const details = (p.settings?.description ?? nestedDetails ?? (typeof desc === "string" ? desc : "") ?? "")
-          .replace(/<[^>]+>/g, " ").replace(/\s+/g, " ").trim();
+        const details = descriptionBody(programDescription(p)).bodyText.replace(/\s+/g, " ").trim();
         return {
           id: p.id || name,
           name,

package/templates/retail-store/tier5-src/himi-store-product/index.ts

@@ -19,7 +19,7 @@ import { stashCopy, copyParam, copyTemplate } from "../_shared/himi-copy.js";
 import { isBridgeUnavailable } from "../_shared/owner-load-error.js";
 import { isProductSaved, toggleSavedProduct } from "../_shared/himi-store-saved.js";
 import { openRichLink } from "../_shared/rich-content-link.js";
-import { richBody } from "../_shared/rich-body.js";
+import { descriptionBody } from "../_shared/rich-body.js";
 
 /** Live cart size (sum of line-item quantities) for the top-bar cart badge.
  *  Best-effort: a cart error just yields 0 (badge hidden), never fails the screen. */
@@ -74,9 +74,7 @@ function productPolicyBody(product: StoreProduct, kind: "returns" | "shipping"):
   });
   if (!section) return "";
   const html = "plainDescription" in section ? section.plainDescription : undefined;
-  if (html) return plainText(html.replace(/ /gi, " "));
-  if (typeof section.description === "string") return plainText(section.description.replace(/ /gi, " "));
-  return richBody(section.description).bodyText;
+  return descriptionBody(html || section.description).bodyText;
 }
 
 /** The product id `lastProduct` was read for. A pooled screen re-appearing calls
@@ -140,13 +138,12 @@ function optionsHint(groups: StoreOption[], selection: StoreOptionSelection): st
   return copyTemplate("product.optionsChoose", "Choose {options}", { options: missing.join(", ") });
 }
 
-/** The description pair. V3's `description` is a Ricos OBJECT (the HTML `plainText` would throw on it): it
- *  becomes the RichContent document, and `plainDescription` (or the document's own text) the plain copy. A V1
- *  `description` is an HTML string: stripped text, no document. */
+/** Catalog V3 returns Ricos objects or serialized documents; V1 returns HTML.
+ * Keep plainDescription as the independent fallback, never raw document JSON. */
 function productBody(p: StoreProduct): { description: string; descriptionJson: string } {
   const raw = (p as { description?: unknown }).description;
-  const html = plainText(p.plainDescription || (typeof raw === "string" ? raw : ""));
-  const { bodyJson, bodyText } = richBody(typeof raw === "string" ? null : raw, html);
+  const html = descriptionBody(p.plainDescription).bodyText;
+  const { bodyJson, bodyText } = descriptionBody(raw, html);
   return { description: html || bodyText, descriptionJson: bodyJson };
 }
 

package/templates/retail-store-owner/config.ts

@@ -37,7 +37,7 @@ export default defineApp({
     actions: "http://localhost:8190/v1/actions",
     sync: "http://localhost:8190/v1/sync",
   },
-  capabilities: ["live_activity","push","share","secure_storage","open_url","local_database","clipboard","ui","speech","camera","photos","file_picker","files","presigned_upload","app_info","biometrics","wix_platform","animation"],
+  capabilities: ["live_activity","push","share","secure_storage","open_url","local_database","clipboard","ui","speech","camera","photos","file_picker","files","presigned_upload","app_info","biometrics","wix_platform","stream","wix_api"],
   designTokensPath: "./tokens.json",
   // Native fallback; the T5 splash descriptor owns the editable launch appearance.
   splash: {

package/templates/retail-store-owner/dev/index.ts

@@ -52741,8 +52741,7 @@ const SCREENS = runtimeSetting({
                   "params": {
                     "screenId": "himi_owner_lite_search",
                     "title": "Search records",
-                    "subtitle": "Across your business areas",
-                    "search": "drawer"
+                    "subtitle": "Across your business areas"
                   }
                 },
                 "pressFeedback": "scale",
@@ -54261,7 +54260,7 @@ const SCREENS = runtimeSetting({
           "actionId": "tier5.himiOwnerLiteSearch.search"
         },
         "debounceMs": 200,
-        "placement": "drawer"
+        "loadingPath": "$service:himiOwnerLiteSearch.anyLoading"
       }
     }
   },

package/templates/yoga-studio/config.ts

@@ -37,7 +37,7 @@ export default defineApp({
     actions: "http://localhost:8190/v1/actions",
     sync: "http://localhost:8190/v1/sync",
   },
-  capabilities: ["live_activity","push","share","secure_storage","open_url","calendar","local_database","wix_api","wix_platform","app_info","iap","release_control","clipboard","theme"],
+  capabilities: ["push","share","secure_storage","open_url","calendar","local_database","wix_api","wix_platform","app_info","iap","release_control","clipboard","theme","wix_cashier"],
   cache: {
     "rules": [
       {

package/templates/yoga-studio/dev/index.ts

@@ -23573,6 +23573,9 @@ const SCREENS = runtimeSetting({
                           "style": "body",
                           "color": "textSecondary"
                         }
+                      },
+                      "modifiers": {
+                        "hiddenPath": "$service:himiMyEvents.signInRequired"
                       }
                     },
                     {
@@ -23587,6 +23590,32 @@ const SCREENS = runtimeSetting({
                             "actionId": "tier5.himiMyEvents.load"
                           }
                         }
+                      },
+                      "modifiers": {
+                        "hiddenPath": "$service:himiMyEvents.signInRequired"
+                      }
+                    },
+                    {
+                      "id": "himi_my_events.retry.sign_in",
+                      "body": {
+                        "package": "himalaya",
+                        "type": "Button",
+                        "props": {
+                          "title": "Sign in",
+                          "style": "primary",
+                          "action": {
+                            "actionId": "himi.open",
+                            "params": {
+                              "screenId": "himi_sign_in",
+                              "mode": "signin",
+                              "modal": "1"
+                            },
+                            "presentation": "sheet"
+                          }
+                        }
+                      },
+                      "modifiers": {
+                        "hiddenPath": "$service:himiMyEvents.noSignIn"
                       }
                     }
                   ]
@@ -24017,7 +24046,11 @@ const SCREENS = runtimeSetting({
           "bottom": 24
         },
         "onAppear": {
-          "actionId": "tier5.himiMyEvents.load"
+          "actionId": "tier5.himiMyEvents.load",
+          "params": {
+            "signInScreenId": "himi_sign_in",
+            "memberOnly": "1"
+          }
         }
       }
     },
@@ -32759,6 +32792,31 @@ const TEMPLATED: { pattern: string; display: string; liveSeed?: LiveSeed; static
                         "hiddenPath": "$service:himiBrandedProgram.hidePriceRetry"
                       }
                     },
+                    {
+                      "id": "himi_program.description_rich",
+                      "body": {
+                        "package": "himalaya",
+                        "type": "RichContent",
+                        "props": {
+                          "documentJsonPath": "$service:himiBrandedProgram.descriptionJson",
+                          "onLink": {
+                            "actionId": "tier5.himiBrandedProgram.openLink"
+                          },
+                          "fallback": {
+                            "id": "",
+                            "body": {
+                              "package": "himalaya",
+                              "type": "Text",
+                              "props": {
+                                "text": "$service:himiBrandedProgram.description",
+                                "style": "body",
+                                "color": "textSecondary"
+                              }
+                            }
+                          }
+                        }
+                      }
+                    },
                     {
                       "id": "",
                       "body": {
@@ -32770,6 +32828,9 @@ const TEMPLATED: { pattern: string; display: string; liveSeed?: LiveSeed; static
                           "color": "textSecondary",
                           "collapseWhenEmpty": true
                         }
+                      },
+                      "modifiers": {
+                        "hiddenPath": "$service:himiBrandedProgram.hasDescriptionJson"
                       }
                     }
                   ]
@@ -36565,6 +36626,9 @@ const TEMPLATED: { pattern: string; display: string; liveSeed?: LiveSeed; static
                           "style": "body",
                           "color": "textSecondary"
                         }
+                      },
+                      "modifiers": {
+                        "hiddenPath": "$service:himiBlogPost.signInRequired"
                       }
                     },
                     {
@@ -36579,6 +36643,32 @@ const TEMPLATED: { pattern: string; display: string; liveSeed?: LiveSeed; static
                             "actionId": "tier5.himiBlogPost.retry"
                           }
                         }
+                      },
+                      "modifiers": {
+                        "hiddenPath": "$service:himiBlogPost.signInRequired"
+                      }
+                    },
+                    {
+                      "id": "himi_blog_post.retry.sign_in",
+                      "body": {
+                        "package": "himalaya",
+                        "type": "Button",
+                        "props": {
+                          "title": "Sign in",
+                          "style": "primary",
+                          "action": {
+                            "actionId": "himi.open",
+                            "params": {
+                              "screenId": "himi_sign_in",
+                              "mode": "signin",
+                              "modal": "1"
+                            },
+                            "presentation": "sheet"
+                          }
+                        }
+                      },
+                      "modifiers": {
+                        "hiddenPath": "$service:himiBlogPost.noSignIn"
                       }
                     }
                   ]
@@ -37283,7 +37373,8 @@ const TEMPLATED: { pattern: string; display: string; liveSeed?: LiveSeed; static
         "onAppear": {
           "actionId": "tier5.himiBlogPost.load",
           "params": {
-            "id": "__HIMI_ID__"
+            "id": "__HIMI_ID__",
+            "signInScreenId": "himi_sign_in"
           }
         }
       }

package/templates/yoga-studio/tier5-src/_shared/member-read.ts

@@ -0,0 +1,52 @@
+import { memberAccess, memberAccessChanged, memberAccessDenied, type MemberAccess } from "./member-access.js";
+import { needsSignIn } from "./branded-load-state.js";
+
+/** Public reads stay public. Capture their reader only to reject a result that
+ * belongs to the identity/site which was active before the request. */
+export interface ReadAccess { member: MemberAccess; tenant: string; }
+export async function readAccess(): Promise<ReadAccess> {
+  const member = await memberAccess();
+  const input = (globalThis as { himalaya?: { input?: Record<string, unknown> } }).himalaya?.input;
+  return { member, tenant: JSON.stringify([input?.__himiPreferenceAccount ?? "", input?.__himiPreferenceBusiness ?? ""]) };
+}
+
+export async function assertReadAccess(access: ReadAccess): Promise<void> {
+  const current = await readAccess();
+  if (current.member.email !== access.member.email || current.member.scope !== access.member.scope || current.tenant !== access.tenant) throw memberAccessChanged();
+}
+
+/** Bridge errors put the actual status first; codes quoted inside the body are data. */
+function httpStatus(error: unknown): string | undefined {
+  return /^HTTP\s*(\d{3})\b/i.exec(String((error as { message?: unknown })?.message ?? error))?.[1];
+}
+
+export const NO_READ_SIGN_IN = { signInRequired: false, noSignIn: true };
+
+/** An authorization refusal must not fall back to a previously cached article. */
+export function readAccessDenied(error: unknown): boolean {
+  let cause = error;
+  for (let depth = 0; cause && depth < 4; depth++) {
+    const status = httpStatus(cause);
+    if (status ? status === "401" || status === "403" : memberAccessDenied(cause) || needsSignIn(cause)) return true;
+    cause = (cause as { cause?: unknown }).cause;
+  }
+  return false;
+}
+
+/** A permission failure alone says nothing about whether signing in can help.
+ * In particular, a private member profile can be unavailable to members too.
+ * Only an authentication refusal for a current visitor offers Sign in. Follow
+ * SDK wrapper causes (blog getPost preserves its original read error there). */
+export async function readSignInFlags(error: unknown): Promise<typeof NO_READ_SIGN_IN> {
+  let authenticationRequired = false;
+  let permissionRefused = false;
+  let cause = error;
+  for (let depth = 0; cause && depth < 4; depth++) {
+    const status = httpStatus(cause);
+    permissionRefused ||= status === "403";
+    authenticationRequired ||= status ? status === "401" : needsSignIn(cause);
+    cause = (cause as { cause?: unknown }).cause;
+  }
+  const signInRequired = !permissionRefused && authenticationRequired && !(await memberAccess()).email;
+  return { signInRequired, noSignIn: !signInRequired };
+}

package/templates/yoga-studio/tier5-src/_shared/program-description.ts

@@ -0,0 +1,11 @@
+import type { WixProgram } from "@himalaya/wix-online-programs";
+
+/** v3 nests the body in description.details; older responses use settings or a
+ * flat description. The body itself may be a Ricos document or serialized text. */
+export function programDescription(program: WixProgram): unknown {
+  const raw = (program as { description?: unknown }).description;
+  const nested = raw && typeof raw === "object" ? raw as { details?: unknown; nodes?: unknown } : undefined;
+  return program.settings?.description ?? nested?.details
+    ?? (typeof raw === "string" || Array.isArray(nested?.nodes) ? raw : undefined)
+    ?? program.details?.description;
+}