@wix/himalaya-cli 0.1574.0 → 0.1575.0

package/templates/gym-fitness/tier5-src/_shared/exclusive-writes.ts

@@ -0,0 +1,66 @@
+import { defineService as register, type ServiceDefinition } from '@himalaya/state';
+
+/** Reject repeated taps until the accepted write's result is committed. A promise
+ * queue alone releases before the host applies the reducer result, so the next
+ * write can still read an old revision/id. The private synchronous reducer below
+ * publishes busy and commits completion through the ordinary service handle;
+ * awaiting that handle guarantees the host has stored the result before unlock.
+ * Skipped actions return undefined, so they cannot roll back the accepted write.
+ */
+export function withExclusiveWrites<S extends object = Record<string, unknown>>(
+  registerService: typeof register, names: readonly string[],
+  options: { prepare?: (action: string, args: readonly unknown[]) => void; coalesce?: readonly string[]; settle?: (before: S, next: S, live: S) => S } = {},
+): typeof register {
+  return ((name: string, definition: ServiceDefinition<Record<string, unknown>>) => {
+    let busy = false;
+    let activeAction = "";
+    let completion = Promise.resolve();
+    let complete = () => {};
+    let handle: { getState(): Record<string, unknown>; exclusiveWriteState(next: Record<string, unknown>): Promise<unknown> };
+    const wrapped: ServiceDefinition<Record<string, unknown>> = {
+      ...definition,
+      state: { ...definition.state, writeBusy: false },
+      notHydrated: [...(definition.notHydrated ?? []), 'writeBusy'],
+      actions: {
+        ...Object.fromEntries(Object.entries(definition.actions ?? {}).map(([action, reduce]) => [action,
+          names.includes(action) ? async (state: Record<string, unknown>, ...args: never[]) => {
+            // Intake request metadata even when its state replacement is skipped.
+            options.prepare?.(action, args);
+            if (busy) {
+              // Repeated initial loads must await the accepted load, so callers
+              // observe its committed rows rather than the initial skeleton.
+              if (activeAction === action && options.coalesce?.includes(action)) await completion;
+              return;
+            }
+            busy = true;
+            activeAction = action;
+            completion = new Promise<void>(resolve => { complete = resolve; });
+            try {
+              await handle.exclusiveWriteState({ ...handle.getState(), writeBusy: true });
+              const next = await reduce(state, ...args);
+              const live = handle.getState();
+              // Non-write actions (for example editing a draft field) can still run
+              // during I/O. Let the owning service preserve those newer edits.
+              const settled = options.settle ? options.settle(state as S, (next ?? live) as S, live as S) : next ?? live;
+              await handle.exclusiveWriteState({ ...settled, writeBusy: false });
+            } catch (error) {
+              await handle.exclusiveWriteState({ ...handle.getState(), writeBusy: false });
+              throw error;
+            } finally {
+              busy = false;
+              complete();
+            }
+          } : reduce,
+        ])),
+        exclusiveWriteState: (_state, next: Record<string, unknown>) => next,
+      },
+    };
+    const registered = registerService(name, wrapped);
+    // Registration preserves this private action, but the dynamic action map
+    // cannot express its payload to the generic service handle.
+    handle = registered as unknown as typeof handle;
+    // Older hosts ignore notHydrated. A fresh worker has no pending write.
+    handle.getState().writeBusy = false;
+    return registered;
+  }) as typeof register;
+}

package/templates/gym-fitness/tier5-src/himi-branded-lite-cart/index.ts

@@ -115,6 +115,7 @@ interface State {
   checkoutHint: string;
   itemCount: number;
   promoCode: string;
+  promoEditRevision: number;
   appliedCode: string;
   appliedLabel: string;
   couponId: string;
@@ -380,11 +381,24 @@ function couponDetails(result: unknown): { id: string; code: string } {
   return { id: coupon?.coupon?.id ?? coupon?.id ?? "", code: coupon?.coupon?.code ?? coupon?.code ?? "" };
 }
 
+import { withExclusiveWrites } from "../_shared/exclusive-writes.js";
+
 let cartPricing: IapCommerce;
 const defineService = withIapPresentation<State>({
-  register: withOnlineWrites(registerState, ["remove", "increment", "decrement", "checkout", "beginPromo", "applyPromo", "removePromo"], { derive, messageFields: action => action.includes("Promo") ? ["promoError"] : ["checkoutHint"] }),
+  register: withExclusiveWrites<State>(withOnlineWrites(registerState, ["remove", "increment", "decrement", "checkout", "beginPromo", "applyPromo", "removePromo"], { derive, messageFields: action => action.includes("Promo") ? ["promoError"] : ["checkoutHint"] }), ["load", "remove", "increment", "decrement", "checkout", "applyPromo", "removePromo", "save"], {
+    prepare: (action, args) => { if (action === "load") stashCopy(args[0]); },
+    coalesce: ["load"],
+    // Full cart reloads share the transaction, since they also replace rows and
+    // reset promo fields. Only setPromo increments the edit revision: beginPromo's internal error reset
+    // must not masquerade as a user edit when a rejected code is retried.
+    settle: (before, next, live) => {
+      if ((before.promoEditRevision ?? 0) === (live.promoEditRevision ?? 0)) return next;
+      return derive({ ...next, promoEditRevision: live.promoEditRevision,
+        ...(next.items.length ? { promoCode: live.promoCode, promoError: live.promoError } : {}) });
+    },
+  }),
   onCreate: commerce => { cartPricing = commerce; },
-  prefix: "cart", transientKeys: ["items", "subtotal", "promoBusy"], contentActions: ["load", "remove", "increment", "decrement"],
+  prefix: "cart", transientKeys: ["items", "subtotal", "promoBusy", "promoEditRevision"], contentActions: ["load", "remove", "increment", "decrement"],
   items: state => state.items.flatMap(row => row.catalogReference?.catalogItemId ? [{ reference: { kind: "storesProduct", id: row.catalogReference.catalogItemId }, commerceDisplayPrice: row.commerceTotal ?? row.total }] : []),
   present: (state, price, allowed) => ({ ...state,
     items: state.items.map(row => ({ ...row, total: row.catalogReference?.catalogItemId ? price(row.catalogReference.catalogItemId, row.commerceTotal ?? row.total) : row.total })),
@@ -404,10 +418,9 @@ const svc = defineService<State, {
   decrement: (state: State, arg?: unknown) => Promise<State>;
   checkout: (state: State) => Promise<State>;
 }>("himiStoreCart", {
-  state: derive({ status: "loading", errorKind: "", items: [], subtotal: "", subtotalLabel: "", emptyText: "", checkoutHint: "", showPaidToast: false, noPaidToast: true, itemCount: 0, promoCode: "", appliedCode: "", appliedLabel: "", couponId: "", promoError: "", promoBusy: false, noPromoError: true, hasCoupon: false, discount: "", noDiscount: true, noCheckoutHint: true, noCoupon: true, isLoading: true, notLoading: false, isErrored: false, notErrored: true, noOfflineError: true, noServerError: true, hideContent: true, noEmpty: true, noItems: true }),
+  state: derive({ status: "loading", errorKind: "", items: [], subtotal: "", subtotalLabel: "", emptyText: "", checkoutHint: "", showPaidToast: false, noPaidToast: true, itemCount: 0, promoCode: "", promoEditRevision: 0, appliedCode: "", appliedLabel: "", couponId: "", promoError: "", promoBusy: false, noPromoError: true, hasCoupon: false, discount: "", noDiscount: true, noCheckoutHint: true, noCoupon: true, isLoading: true, notLoading: false, isErrored: false, notErrored: true, noOfflineError: true, noServerError: true, hideContent: true, noEmpty: true, noItems: true }),
   actions: {
     load: async (state, arg) => {
-      stashCopy(arg);
       // 1) Instant paint from the on-device cache (offline-safe; empty on first-ever run).
       const cached = await readCachedItems();
       const base = cached.length
@@ -423,7 +436,7 @@ const svc = defineService<State, {
           : derive({ ...state, status: "error", errorKind: isOfflineFailure(error) ? "offline" : "server", items: [], subtotal: "", emptyText: copyParam("cart.loadErrorText", "Cart could not load."), checkoutHint: "" });
       }
     },
-    setPromo: (state, arg) => derive({ ...state, promoCode: (typeof arg === "string" ? arg : String((arg as { value?: unknown } | undefined)?.value ?? "")).slice(0, 100), promoError: "" }),
+    setPromo: (state, arg) => derive({ ...state, promoEditRevision: (state.promoEditRevision ?? 0) + 1, promoCode: (typeof arg === "string" ? arg : String((arg as { value?: unknown } | undefined)?.value ?? "")).slice(0, 100), promoError: "" }),
     beginPromo: state => derive({ ...state, promoBusy: true, promoError: "" }),
     applyPromo: async (state): Promise<State> => {
       const code = state.promoCode.trim();

package/templates/gym-fitness-owner/dev/index.ts

@@ -82378,6 +82378,7 @@ const SCREENS = runtimeSetting({
                         "title": "Create product",
                         "style": "primary",
                         "fullWidth": true,
+                        "disabledPath": "$service:himiOwnerLiteProductForm.writeBusy",
                         "action": {
                           "actionId": "tier5.himiOwnerLiteProductForm.submit"
                         }
@@ -82697,6 +82698,7 @@ const SCREENS = runtimeSetting({
                         "title": "Create post",
                         "style": "primary",
                         "fullWidth": true,
+                        "disabledPath": "$service:himiOwnerLitePostForm.writeBusy",
                         "action": {
                           "actionId": "tier5.himiOwnerLitePostForm.submit"
                         }
@@ -83212,6 +83214,7 @@ const TEMPLATED: { pattern: string; display: string; liveSeed?: LiveSeed; static
                         "title": "Save changes",
                         "style": "primary",
                         "fullWidth": true,
+                        "disabledPath": "$service:himiOwnerLiteProductForm.writeBusy",
                         "action": {
                           "actionId": "tier5.himiOwnerLiteProductForm.submit"
                         }
@@ -83459,6 +83462,7 @@ const TEMPLATED: { pattern: string; display: string; liveSeed?: LiveSeed; static
                         "title": "Save changes",
                         "style": "primary",
                         "fullWidth": true,
+                        "disabledPath": "$service:himiOwnerLiteServiceForm.writeBusy",
                         "action": {
                           "actionId": "tier5.himiOwnerLiteServiceForm.submit"
                         }
@@ -83821,6 +83825,7 @@ const TEMPLATED: { pattern: string; display: string; liveSeed?: LiveSeed; static
                         "title": "Save changes",
                         "style": "primary",
                         "fullWidth": true,
+                        "disabledPath": "$service:himiOwnerLiteEventForm.writeBusy",
                         "action": {
                           "actionId": "tier5.himiOwnerLiteEventForm.submit"
                         }
@@ -84144,6 +84149,7 @@ const TEMPLATED: { pattern: string; display: string; liveSeed?: LiveSeed; static
                         "title": "Save changes",
                         "style": "primary",
                         "fullWidth": true,
+                        "disabledPath": "$service:himiOwnerLitePostForm.writeBusy",
                         "action": {
                           "actionId": "tier5.himiOwnerLitePostForm.submit"
                         }

package/templates/gym-fitness-owner/tier5-src/_shared/exclusive-writes.ts

@@ -0,0 +1,66 @@
+import { defineService as register, type ServiceDefinition } from '@himalaya/state';
+
+/** Reject repeated taps until the accepted write's result is committed. A promise
+ * queue alone releases before the host applies the reducer result, so the next
+ * write can still read an old revision/id. The private synchronous reducer below
+ * publishes busy and commits completion through the ordinary service handle;
+ * awaiting that handle guarantees the host has stored the result before unlock.
+ * Skipped actions return undefined, so they cannot roll back the accepted write.
+ */
+export function withExclusiveWrites<S extends object = Record<string, unknown>>(
+  registerService: typeof register, names: readonly string[],
+  options: { prepare?: (action: string, args: readonly unknown[]) => void; coalesce?: readonly string[]; settle?: (before: S, next: S, live: S) => S } = {},
+): typeof register {
+  return ((name: string, definition: ServiceDefinition<Record<string, unknown>>) => {
+    let busy = false;
+    let activeAction = "";
+    let completion = Promise.resolve();
+    let complete = () => {};
+    let handle: { getState(): Record<string, unknown>; exclusiveWriteState(next: Record<string, unknown>): Promise<unknown> };
+    const wrapped: ServiceDefinition<Record<string, unknown>> = {
+      ...definition,
+      state: { ...definition.state, writeBusy: false },
+      notHydrated: [...(definition.notHydrated ?? []), 'writeBusy'],
+      actions: {
+        ...Object.fromEntries(Object.entries(definition.actions ?? {}).map(([action, reduce]) => [action,
+          names.includes(action) ? async (state: Record<string, unknown>, ...args: never[]) => {
+            // Intake request metadata even when its state replacement is skipped.
+            options.prepare?.(action, args);
+            if (busy) {
+              // Repeated initial loads must await the accepted load, so callers
+              // observe its committed rows rather than the initial skeleton.
+              if (activeAction === action && options.coalesce?.includes(action)) await completion;
+              return;
+            }
+            busy = true;
+            activeAction = action;
+            completion = new Promise<void>(resolve => { complete = resolve; });
+            try {
+              await handle.exclusiveWriteState({ ...handle.getState(), writeBusy: true });
+              const next = await reduce(state, ...args);
+              const live = handle.getState();
+              // Non-write actions (for example editing a draft field) can still run
+              // during I/O. Let the owning service preserve those newer edits.
+              const settled = options.settle ? options.settle(state as S, (next ?? live) as S, live as S) : next ?? live;
+              await handle.exclusiveWriteState({ ...settled, writeBusy: false });
+            } catch (error) {
+              await handle.exclusiveWriteState({ ...handle.getState(), writeBusy: false });
+              throw error;
+            } finally {
+              busy = false;
+              complete();
+            }
+          } : reduce,
+        ])),
+        exclusiveWriteState: (_state, next: Record<string, unknown>) => next,
+      },
+    };
+    const registered = registerService(name, wrapped);
+    // Registration preserves this private action, but the dynamic action map
+    // cannot express its payload to the generic service handle.
+    handle = registered as unknown as typeof handle;
+    // Older hosts ignore notHydrated. A fresh worker has no pending write.
+    handle.getState().writeBusy = false;
+    return registered;
+  }) as typeof register;
+}

package/templates/gym-fitness-owner/tier5-src/himi-owner-lite-event-form/index.ts

@@ -6,7 +6,9 @@
 // form can't safely collect — so this form only edits an existing event's text
 // (title + description). Bound by buildForm ($service:himiOwnerLiteEventForm.*).
 
-import { defineService } from "@himalaya/state";
+import { defineService as registerService } from "@himalaya/state";
+import { withExclusiveWrites } from "../_shared/exclusive-writes.js";
+const defineService = withExclusiveWrites(registerService, ["submit"]);
 import { getEvent, updateEvent, type WixEvent } from "@himalaya/wix-events";
 import { normalizeEvent } from "../_shared/himi-events.js";
 import { postBodyText, plainPostBody } from "../_shared/owner-post-content.js";
@@ -66,6 +68,7 @@ interface EventFormState {
   when: string;
   location: string;
   status: "idle" | "loading" | "saving" | "saved" | "error";
+  writeBusy: boolean;
   error: string;
   savedMessage: string;
   /** WS-C — canonical detail target (`himi_owner_lite_event`); `savedId` rides
@@ -140,6 +143,7 @@ function shape(s: Partial<EventFormState>): EventFormState {
     when: s.when ?? "—",
     location: s.location ?? "—",
     status: s.status ?? "idle",
+    writeBusy: s.writeBusy ?? false,
     error: s.error ?? "",
     savedMessage: s.savedMessage ?? "",
     // WS-C — canonical detail target + the saved entity's id as a separate nav

package/templates/gym-fitness-owner/tier5-src/himi-owner-lite-post-form/index.ts

@@ -8,7 +8,9 @@ import { editorSubmitValue, queuedDocument, editorChanged, editorRunKeys, resetH
 import { ricosUploadService } from "@himalaya/wix-rich-content-editor";
 import { wixCall } from "@himalaya/wix-site-media";
 import { wixMediaUrl, WIX_DETAIL_IMAGE } from "../_shared/himi-store.js";
-import { defineService } from "@himalaya/state";
+import { defineService as registerService } from "@himalaya/state";
+import { withExclusiveWrites } from "../_shared/exclusive-writes.js";
+const defineService = withExclusiveWrites(registerService, ["submit"]);
 import { getDraftPost, createDraftPost, updateDraftPost, type WixDraftPostWrite, type WixRichContent } from "@himalaya/wix-blog";
 import { ownerLoadError, isOwnerPreviewDemo, ownerDemoFallback, ownerWriteError } from "../_shared/owner-load-error.js";
 import { DEMO_POSTS, DEMO_NOTE, DEMO_SAVE_NOTE, demoRefusalPatch } from "../_shared/owner-preview-demo.js";
@@ -53,6 +55,7 @@ interface PostFormState {
   noCover: boolean;
   isFeatured: string;
   status: "idle" | "loading" | "saving" | "saved" | "error";
+  writeBusy: boolean;
   error: string;
   savedMessage: string;
   /** WS-C — canonical detail target (`himi_owner_lite_post`); `savedId` rides
@@ -128,6 +131,7 @@ function shape(s: Partial<PostFormState>): PostFormState {
     noCover: !s.coverUrl,
     isFeatured: s.isFeatured ?? "false",
     status: s.status ?? "idle",
+    writeBusy: s.writeBusy ?? false,
     error: s.error ?? "",
     savedMessage: s.savedMessage ?? "",
     // WS-C — canonical detail target + the saved entity's id as a separate nav

package/templates/gym-fitness-owner/tier5-src/himi-owner-lite-product-form/index.ts

@@ -6,7 +6,9 @@
 // the WRITE shape needs `priceData: { price: <number>, currency }`. Bound by the
 // generic buildForm descriptor ($service:himiOwnerLiteProductForm.*).
 
-import { defineService } from "@himalaya/state";
+import { defineService as registerService } from "@himalaya/state";
+import { withExclusiveWrites } from "../_shared/exclusive-writes.js";
+const defineService = withExclusiveWrites(registerService, ["submit"]);
 import {
   getProduct,
   createProduct,
@@ -76,6 +78,7 @@ interface ProductFormState {
   descriptionNote: string;
   visible: string;
   status: "idle" | "loading" | "saving" | "saved" | "error";
+  writeBusy: boolean;
   error: string;
   savedMessage: string;
   /** WS-C — canonical detail target (`himi_owner_lite_product`); `savedId` rides
@@ -161,6 +164,7 @@ function shape(s: Partial<ProductFormState>): ProductFormState {
     descriptionNote: dMode === "locked" ? copyParam("ownerProductForm.richDescriptionNote", "This description has formatting or media. Edit it in your site dashboard to keep that content intact; name, price and SKU can be changed here.") : "",
     visible: s.visible ?? "true",
     status: s.status ?? "idle",
+    writeBusy: s.writeBusy ?? false,
     error: s.error ?? "",
     savedMessage: s.savedMessage ?? "",
     // WS-C — canonical detail target + the saved entity's id as a separate nav

package/templates/gym-fitness-owner/tier5-src/himi-owner-lite-service-form/index.ts

@@ -5,7 +5,9 @@
 // updateService. Bound by buildForm ($service:himiOwnerLiteServiceForm.*).
 
 import { landsOnLive } from "../_shared/owner-editor-value.js";
-import { defineService } from "@himalaya/state";
+import { defineService as registerService } from "@himalaya/state";
+import { withExclusiveWrites } from "../_shared/exclusive-writes.js";
+const defineService = withExclusiveWrites(registerService, ["submit"]);
 import { getService, updateService, type WixService } from "@himalaya/wix-bookings";
 import { ownerLoadError, isOwnerPreviewDemo, ownerDemoFallback, ownerWriteError } from "../_shared/owner-load-error.js";
 import { DEMO_SERVICES, DEMO_NOTE, DEMO_SAVE_NOTE, demoRefusalPatch } from "../_shared/owner-preview-demo.js";
@@ -31,6 +33,7 @@ interface ServiceFormState {
   description: string;
   category: string;
   status: "idle" | "loading" | "saving" | "saved" | "error";
+  writeBusy: boolean;
   error: string;
   savedMessage: string;
   /** WS-C — canonical detail target (`himi_owner_lite_service`); `savedId` rides
@@ -88,6 +91,7 @@ function shape(s: Partial<ServiceFormState>): ServiceFormState {
     description: s.description ?? "",
     category: s.category ?? "",
     status: s.status ?? "idle",
+    writeBusy: s.writeBusy ?? false,
     error: s.error ?? "",
     savedMessage: s.savedMessage ?? "",
     // WS-C — canonical detail target + the saved entity's id as a separate nav

package/templates/nonprofit-cause-owner/dev/index.ts

@@ -76564,6 +76564,7 @@ const SCREENS = runtimeSetting({
                         "title": "Create post",
                         "style": "primary",
                         "fullWidth": true,
+                        "disabledPath": "$service:himiOwnerLitePostForm.writeBusy",
                         "action": {
                           "actionId": "tier5.himiOwnerLitePostForm.submit"
                         }
@@ -76923,6 +76924,7 @@ const TEMPLATED: { pattern: string; display: string; liveSeed?: LiveSeed; static
                         "title": "Save changes",
                         "style": "primary",
                         "fullWidth": true,
+                        "disabledPath": "$service:himiOwnerLiteServiceForm.writeBusy",
                         "action": {
                           "actionId": "tier5.himiOwnerLiteServiceForm.submit"
                         }
@@ -77285,6 +77287,7 @@ const TEMPLATED: { pattern: string; display: string; liveSeed?: LiveSeed; static
                         "title": "Save changes",
                         "style": "primary",
                         "fullWidth": true,
+                        "disabledPath": "$service:himiOwnerLiteEventForm.writeBusy",
                         "action": {
                           "actionId": "tier5.himiOwnerLiteEventForm.submit"
                         }
@@ -77608,6 +77611,7 @@ const TEMPLATED: { pattern: string; display: string; liveSeed?: LiveSeed; static
                         "title": "Save changes",
                         "style": "primary",
                         "fullWidth": true,
+                        "disabledPath": "$service:himiOwnerLitePostForm.writeBusy",
                         "action": {
                           "actionId": "tier5.himiOwnerLitePostForm.submit"
                         }

package/templates/nonprofit-cause-owner/tier5-src/_shared/exclusive-writes.ts

@@ -0,0 +1,66 @@
+import { defineService as register, type ServiceDefinition } from '@himalaya/state';
+
+/** Reject repeated taps until the accepted write's result is committed. A promise
+ * queue alone releases before the host applies the reducer result, so the next
+ * write can still read an old revision/id. The private synchronous reducer below
+ * publishes busy and commits completion through the ordinary service handle;
+ * awaiting that handle guarantees the host has stored the result before unlock.
+ * Skipped actions return undefined, so they cannot roll back the accepted write.
+ */
+export function withExclusiveWrites<S extends object = Record<string, unknown>>(
+  registerService: typeof register, names: readonly string[],
+  options: { prepare?: (action: string, args: readonly unknown[]) => void; coalesce?: readonly string[]; settle?: (before: S, next: S, live: S) => S } = {},
+): typeof register {
+  return ((name: string, definition: ServiceDefinition<Record<string, unknown>>) => {
+    let busy = false;
+    let activeAction = "";
+    let completion = Promise.resolve();
+    let complete = () => {};
+    let handle: { getState(): Record<string, unknown>; exclusiveWriteState(next: Record<string, unknown>): Promise<unknown> };
+    const wrapped: ServiceDefinition<Record<string, unknown>> = {
+      ...definition,
+      state: { ...definition.state, writeBusy: false },
+      notHydrated: [...(definition.notHydrated ?? []), 'writeBusy'],
+      actions: {
+        ...Object.fromEntries(Object.entries(definition.actions ?? {}).map(([action, reduce]) => [action,
+          names.includes(action) ? async (state: Record<string, unknown>, ...args: never[]) => {
+            // Intake request metadata even when its state replacement is skipped.
+            options.prepare?.(action, args);
+            if (busy) {
+              // Repeated initial loads must await the accepted load, so callers
+              // observe its committed rows rather than the initial skeleton.
+              if (activeAction === action && options.coalesce?.includes(action)) await completion;
+              return;
+            }
+            busy = true;
+            activeAction = action;
+            completion = new Promise<void>(resolve => { complete = resolve; });
+            try {
+              await handle.exclusiveWriteState({ ...handle.getState(), writeBusy: true });
+              const next = await reduce(state, ...args);
+              const live = handle.getState();
+              // Non-write actions (for example editing a draft field) can still run
+              // during I/O. Let the owning service preserve those newer edits.
+              const settled = options.settle ? options.settle(state as S, (next ?? live) as S, live as S) : next ?? live;
+              await handle.exclusiveWriteState({ ...settled, writeBusy: false });
+            } catch (error) {
+              await handle.exclusiveWriteState({ ...handle.getState(), writeBusy: false });
+              throw error;
+            } finally {
+              busy = false;
+              complete();
+            }
+          } : reduce,
+        ])),
+        exclusiveWriteState: (_state, next: Record<string, unknown>) => next,
+      },
+    };
+    const registered = registerService(name, wrapped);
+    // Registration preserves this private action, but the dynamic action map
+    // cannot express its payload to the generic service handle.
+    handle = registered as unknown as typeof handle;
+    // Older hosts ignore notHydrated. A fresh worker has no pending write.
+    handle.getState().writeBusy = false;
+    return registered;
+  }) as typeof register;
+}

package/templates/nonprofit-cause-owner/tier5-src/himi-owner-lite-event-form/index.ts

@@ -6,7 +6,9 @@
 // form can't safely collect — so this form only edits an existing event's text
 // (title + description). Bound by buildForm ($service:himiOwnerLiteEventForm.*).
 
-import { defineService } from "@himalaya/state";
+import { defineService as registerService } from "@himalaya/state";
+import { withExclusiveWrites } from "../_shared/exclusive-writes.js";
+const defineService = withExclusiveWrites(registerService, ["submit"]);
 import { getEvent, updateEvent, type WixEvent } from "@himalaya/wix-events";
 import { normalizeEvent } from "../_shared/himi-events.js";
 import { postBodyText, plainPostBody } from "../_shared/owner-post-content.js";
@@ -66,6 +68,7 @@ interface EventFormState {
   when: string;
   location: string;
   status: "idle" | "loading" | "saving" | "saved" | "error";
+  writeBusy: boolean;
   error: string;
   savedMessage: string;
   /** WS-C — canonical detail target (`himi_owner_lite_event`); `savedId` rides
@@ -140,6 +143,7 @@ function shape(s: Partial<EventFormState>): EventFormState {
     when: s.when ?? "—",
     location: s.location ?? "—",
     status: s.status ?? "idle",
+    writeBusy: s.writeBusy ?? false,
     error: s.error ?? "",
     savedMessage: s.savedMessage ?? "",
     // WS-C — canonical detail target + the saved entity's id as a separate nav

package/templates/nonprofit-cause-owner/tier5-src/himi-owner-lite-post-form/index.ts

@@ -8,7 +8,9 @@ import { editorSubmitValue, queuedDocument, editorChanged, editorRunKeys, resetH
 import { ricosUploadService } from "@himalaya/wix-rich-content-editor";
 import { wixCall } from "@himalaya/wix-site-media";
 import { wixMediaUrl, WIX_DETAIL_IMAGE } from "../_shared/himi-store.js";
-import { defineService } from "@himalaya/state";
+import { defineService as registerService } from "@himalaya/state";
+import { withExclusiveWrites } from "../_shared/exclusive-writes.js";
+const defineService = withExclusiveWrites(registerService, ["submit"]);
 import { getDraftPost, createDraftPost, updateDraftPost, type WixDraftPostWrite, type WixRichContent } from "@himalaya/wix-blog";
 import { ownerLoadError, isOwnerPreviewDemo, ownerDemoFallback, ownerWriteError } from "../_shared/owner-load-error.js";
 import { DEMO_POSTS, DEMO_NOTE, DEMO_SAVE_NOTE, demoRefusalPatch } from "../_shared/owner-preview-demo.js";
@@ -53,6 +55,7 @@ interface PostFormState {
   noCover: boolean;
   isFeatured: string;
   status: "idle" | "loading" | "saving" | "saved" | "error";
+  writeBusy: boolean;
   error: string;
   savedMessage: string;
   /** WS-C — canonical detail target (`himi_owner_lite_post`); `savedId` rides
@@ -128,6 +131,7 @@ function shape(s: Partial<PostFormState>): PostFormState {
     noCover: !s.coverUrl,
     isFeatured: s.isFeatured ?? "false",
     status: s.status ?? "idle",
+    writeBusy: s.writeBusy ?? false,
     error: s.error ?? "",
     savedMessage: s.savedMessage ?? "",
     // WS-C — canonical detail target + the saved entity's id as a separate nav

package/templates/nonprofit-cause-owner/tier5-src/himi-owner-lite-service-form/index.ts

@@ -5,7 +5,9 @@
 // updateService. Bound by buildForm ($service:himiOwnerLiteServiceForm.*).
 
 import { landsOnLive } from "../_shared/owner-editor-value.js";
-import { defineService } from "@himalaya/state";
+import { defineService as registerService } from "@himalaya/state";
+import { withExclusiveWrites } from "../_shared/exclusive-writes.js";
+const defineService = withExclusiveWrites(registerService, ["submit"]);
 import { getService, updateService, type WixService } from "@himalaya/wix-bookings";
 import { ownerLoadError, isOwnerPreviewDemo, ownerDemoFallback, ownerWriteError } from "../_shared/owner-load-error.js";
 import { DEMO_SERVICES, DEMO_NOTE, DEMO_SAVE_NOTE, demoRefusalPatch } from "../_shared/owner-preview-demo.js";
@@ -31,6 +33,7 @@ interface ServiceFormState {
   description: string;
   category: string;
   status: "idle" | "loading" | "saving" | "saved" | "error";
+  writeBusy: boolean;
   error: string;
   savedMessage: string;
   /** WS-C — canonical detail target (`himi_owner_lite_service`); `savedId` rides
@@ -88,6 +91,7 @@ function shape(s: Partial<ServiceFormState>): ServiceFormState {
     description: s.description ?? "",
     category: s.category ?? "",
     status: s.status ?? "idle",
+    writeBusy: s.writeBusy ?? false,
     error: s.error ?? "",
     savedMessage: s.savedMessage ?? "",
     // WS-C — canonical detail target + the saved entity's id as a separate nav

package/templates/owner-lite/dev/index.ts

@@ -84172,6 +84172,7 @@ const SCREENS = runtimeSetting({
                         "title": "Create product",
                         "style": "primary",
                         "fullWidth": true,
+                        "disabledPath": "$service:himiOwnerLiteProductForm.writeBusy",
                         "action": {
                           "actionId": "tier5.himiOwnerLiteProductForm.submit"
                         }
@@ -84491,6 +84492,7 @@ const SCREENS = runtimeSetting({
                         "title": "Create post",
                         "style": "primary",
                         "fullWidth": true,
+                        "disabledPath": "$service:himiOwnerLitePostForm.writeBusy",
                         "action": {
                           "actionId": "tier5.himiOwnerLitePostForm.submit"
                         }
@@ -85006,6 +85008,7 @@ const TEMPLATED: { pattern: string; display: string; liveSeed?: LiveSeed; static
                         "title": "Save changes",
                         "style": "primary",
                         "fullWidth": true,
+                        "disabledPath": "$service:himiOwnerLiteProductForm.writeBusy",
                         "action": {
                           "actionId": "tier5.himiOwnerLiteProductForm.submit"
                         }
@@ -85253,6 +85256,7 @@ const TEMPLATED: { pattern: string; display: string; liveSeed?: LiveSeed; static
                         "title": "Save changes",
                         "style": "primary",
                         "fullWidth": true,
+                        "disabledPath": "$service:himiOwnerLiteServiceForm.writeBusy",
                         "action": {
                           "actionId": "tier5.himiOwnerLiteServiceForm.submit"
                         }
@@ -85615,6 +85619,7 @@ const TEMPLATED: { pattern: string; display: string; liveSeed?: LiveSeed; static
                         "title": "Save changes",
                         "style": "primary",
                         "fullWidth": true,
+                        "disabledPath": "$service:himiOwnerLiteEventForm.writeBusy",
                         "action": {
                           "actionId": "tier5.himiOwnerLiteEventForm.submit"
                         }
@@ -85938,6 +85943,7 @@ const TEMPLATED: { pattern: string; display: string; liveSeed?: LiveSeed; static
                         "title": "Save changes",
                         "style": "primary",
                         "fullWidth": true,
+                        "disabledPath": "$service:himiOwnerLitePostForm.writeBusy",
                         "action": {
                           "actionId": "tier5.himiOwnerLitePostForm.submit"
                         }

package/templates/owner-lite/tier5-src/_shared/exclusive-writes.ts

@@ -0,0 +1,66 @@
+import { defineService as register, type ServiceDefinition } from '@himalaya/state';
+
+/** Reject repeated taps until the accepted write's result is committed. A promise
+ * queue alone releases before the host applies the reducer result, so the next
+ * write can still read an old revision/id. The private synchronous reducer below
+ * publishes busy and commits completion through the ordinary service handle;
+ * awaiting that handle guarantees the host has stored the result before unlock.
+ * Skipped actions return undefined, so they cannot roll back the accepted write.
+ */
+export function withExclusiveWrites<S extends object = Record<string, unknown>>(
+  registerService: typeof register, names: readonly string[],
+  options: { prepare?: (action: string, args: readonly unknown[]) => void; coalesce?: readonly string[]; settle?: (before: S, next: S, live: S) => S } = {},
+): typeof register {
+  return ((name: string, definition: ServiceDefinition<Record<string, unknown>>) => {
+    let busy = false;
+    let activeAction = "";
+    let completion = Promise.resolve();
+    let complete = () => {};
+    let handle: { getState(): Record<string, unknown>; exclusiveWriteState(next: Record<string, unknown>): Promise<unknown> };
+    const wrapped: ServiceDefinition<Record<string, unknown>> = {
+      ...definition,
+      state: { ...definition.state, writeBusy: false },
+      notHydrated: [...(definition.notHydrated ?? []), 'writeBusy'],
+      actions: {
+        ...Object.fromEntries(Object.entries(definition.actions ?? {}).map(([action, reduce]) => [action,
+          names.includes(action) ? async (state: Record<string, unknown>, ...args: never[]) => {
+            // Intake request metadata even when its state replacement is skipped.
+            options.prepare?.(action, args);
+            if (busy) {
+              // Repeated initial loads must await the accepted load, so callers
+              // observe its committed rows rather than the initial skeleton.
+              if (activeAction === action && options.coalesce?.includes(action)) await completion;
+              return;
+            }
+            busy = true;
+            activeAction = action;
+            completion = new Promise<void>(resolve => { complete = resolve; });
+            try {
+              await handle.exclusiveWriteState({ ...handle.getState(), writeBusy: true });
+              const next = await reduce(state, ...args);
+              const live = handle.getState();
+              // Non-write actions (for example editing a draft field) can still run
+              // during I/O. Let the owning service preserve those newer edits.
+              const settled = options.settle ? options.settle(state as S, (next ?? live) as S, live as S) : next ?? live;
+              await handle.exclusiveWriteState({ ...settled, writeBusy: false });
+            } catch (error) {
+              await handle.exclusiveWriteState({ ...handle.getState(), writeBusy: false });
+              throw error;
+            } finally {
+              busy = false;
+              complete();
+            }
+          } : reduce,
+        ])),
+        exclusiveWriteState: (_state, next: Record<string, unknown>) => next,
+      },
+    };
+    const registered = registerService(name, wrapped);
+    // Registration preserves this private action, but the dynamic action map
+    // cannot express its payload to the generic service handle.
+    handle = registered as unknown as typeof handle;
+    // Older hosts ignore notHydrated. A fresh worker has no pending write.
+    handle.getState().writeBusy = false;
+    return registered;
+  }) as typeof register;
+}