@wix/himalaya-cli 0.816.0 → 0.817.0

package/dist/cli.mjs

@@ -25084,7 +25084,6 @@ function shouldRevealError(args) {
 var EMAIL_RE, URL_HOST_RE, INTEGER_RE, NUMBER_RE;
 var init_validation = __esm({
   "../../core/ts/src/validation.ts"() {
-    "use strict";
     EMAIL_RE = /^[A-Za-z0-9._%+-]+@[A-Za-z0-9-]+(\.[A-Za-z0-9-]+)*\.[A-Za-z]{2,}$/;
     URL_HOST_RE = /^[A-Za-z0-9-]+(\.[A-Za-z0-9-]+)*(:[0-9]+)?$/;
     INTEGER_RE = /^[+-]?[0-9]+$/;
@@ -28430,7 +28429,6 @@ function validateWorkerSubtree(raw, slotId, policy, actionCatalog) {
 var WORKER_SUBTREE_CEILINGS, ID_PART, ACTION_ID;
 var init_worker_subtree = __esm({
   "../../core/ts/src/worker-subtree.ts"() {
-    "use strict";
     init_worker_subtree_safe_types_generated();
     WORKER_SUBTREE_CEILINGS = Object.freeze({
       maxEncodedBytes: 65536,
@@ -54327,6 +54325,13 @@ import { join as join49, resolve as resolve40, basename as basename9, dirname as
 import { fileURLToPath as fileURLToPath21 } from "node:url";
 
 // ../serve-cli/src/client.ts
+var MAX_PUBLISH_BODY_BYTES = 8 * 1024 * 1024;
+function publishReleaseBody(payload, meta, draft = false) {
+  return { ...payload, ...meta ?? {}, ...draft ? { draft: true } : {} };
+}
+function publishReleaseBodyBytes(payload, meta, draft = false) {
+  return Buffer.byteLength(JSON.stringify(publishReleaseBody(payload, meta, draft)), "utf8");
+}
 var ServeCliClient = class {
   constructor(target, fetchImpl = fetch) {
     this.target = target;
@@ -54532,7 +54537,7 @@ var ServeCliClient = class {
   /** Publish a built release into the store (POST /v1/admin/release), with optional label/notes/gitSha.
    *  `draft: true` stores it fully servable (pinned reads) WITHOUT moving the live release. */
   publishRelease(payload, meta, draft = false) {
-    return this.request("control", "POST", "/v1/admin/release", { body: { ...payload, ...meta ?? {}, ...draft ? { draft: true } : {} }, headers: this.ctrlHeaders() });
+    return this.request("control", "POST", "/v1/admin/release", { body: publishReleaseBody(payload, meta, draft), headers: this.ctrlHeaders() });
   }
   /** The app's own source archive for one release (GET /v1/owner/source) — what `himi pull`
    *  restores from.
@@ -60381,6 +60386,29 @@ default (no --glyph): ${DEFAULT_GLYPH2} \u2014 a mark that claims nothing, so th
           ...attestation ? { attestation } : {},
           ...forcedPastErrors ? { forcedPastErrors: true } : {}
         };
+        const publishBodyFor = (slug) => ({
+          ...payload,
+          ...appSourceB64 ? { appSource: appSourceB64 } : {},
+          app: slug,
+          manifest: { ...payload.manifest, app: slug }
+        });
+        const publishBodyBytesFor = (slug) => publishReleaseBodyBytes(publishBodyFor(slug), meta, draft);
+        const refuseOversizedBody = (slug, bodyBytes) => {
+          const withoutSource = appSourceB64 ? bodyBytes - appSourceB64.length : bodyBytes;
+          io.error(JSON.stringify({
+            ok: false,
+            app: slug,
+            pushed: false,
+            error: "publish_body_too_large",
+            bodyBytes,
+            limit: MAX_PUBLISH_BODY_BYTES,
+            ...appSourceB64 ? { appSourceBytes: appSourceB64.length } : {},
+            hint: appSourceB64 && withoutSource <= MAX_PUBLISH_BODY_BYTES ? "push with --no-source to publish without the source archive (this release then cannot be restored with `himi pull`), or trim the app's assets and bundles" : "trim the app's assets and bundles \u2014 this release is over the limit even without the source archive, so --no-source would not help"
+          }));
+          return 1;
+        };
+        const composedBodyBytes = publishBodyBytesFor(app);
+        if (composedBodyBytes > MAX_PUBLISH_BODY_BYTES) return refuseOversizedBody(app, composedBodyBytes);
         let autoClaimed = false;
         let adoptedSlug;
         if (flags["no-claim"] !== true) {
@@ -60404,13 +60432,14 @@ default (no --glyph): ${DEFAULT_GLYPH2} \u2014 a mark that claims nothing, so th
             }
           }
         }
+        if (adoptedSlug) {
+          const adoptedBodyBytes = publishBodyBytesFor(app);
+          if (adoptedBodyBytes > MAX_PUBLISH_BODY_BYTES) return refuseOversizedBody(app, adoptedBodyBytes);
+        }
+        const publishPayload = publishBodyFor(app);
         let r;
         try {
-          r = await client3().publishRelease(
-            { ...payload, ...appSourceB64 ? { appSource: appSourceB64 } : {}, app, manifest: { ...payload.manifest, app } },
-            meta,
-            draft
-          );
+          r = await client3().publishRelease(publishPayload, meta, draft);
         } catch (e) {
           const target = targetName();
           io.error(JSON.stringify({

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@wix/himalaya-cli",
-  "version": "0.816.0",
+  "version": "0.817.0",
   "type": "module",
   "description": "himi — the Himalaya authoring CLI. Build a Tier-5 content package on your own machine, push it to the production serve as a draft, preview it on web + Himi Player, and read worker logs back — the remote dev loop. Wraps @himalaya/serve-cli for transport.",
   "keywords": [
@@ -63,5 +63,5 @@
       "artifactId": "himalaya-cli"
     }
   },
-  "falconPackageHash": "34aa32350d84ef30c9554bc14e8a83ed1ad3564dd645010a87e1aada"
+  "falconPackageHash": "3430293fac4a0ff201e5e98c94a4b4b9a36b7579a8ad6b2d225bc424"
 }