@wix/himalaya-cli 0.825.0 → 0.826.0

package/dist/cli.mjs

@@ -59810,7 +59810,7 @@ himi v${cliVersion()} \u2014 run \`himi --version\`. If authoring commands fail
             return 1;
           }
           payload.source = { files, meta };
-          const { collectAppSource: collectAppSource2, secretFindings: secretFindings2, zipAppSource: zipAppSource2 } = await Promise.resolve().then(() => (init_app_source(), app_source_exports));
+          const { collectAppSource: collectAppSource2, secretFindings: secretFindings2, zipAppSource: zipAppSource2, MAX_APP_SOURCE_BYTES: MAX_APP_SOURCE_BYTES2 } = await Promise.resolve().then(() => (init_app_source(), app_source_exports));
           const templateArchive = collectAppSource2(sourceDir);
           const templateSecrets = secretFindings2(templateArchive.entries);
           if (templateSecrets.length > 0) {
@@ -59821,7 +59821,27 @@ himi v${cliVersion()} \u2014 run \`himi --version\`. If authoring commands fail
             }));
             return 1;
           }
-          payload.appSource = zipAppSource2(templateArchive.entries).toString("base64");
+          const templateZip = zipAppSource2(templateArchive.entries);
+          const templateSourceB64 = templateZip.toString("base64");
+          if (templateSourceB64.length > MAX_APP_SOURCE_BYTES2) {
+            io.error(JSON.stringify({
+              ok: false,
+              template: name,
+              app: templateAppId,
+              published: false,
+              error: "app_source_too_large",
+              archivedBytes: templateZip.length,
+              encodedBytes: templateSourceB64.length,
+              limit: MAX_APP_SOURCE_BYTES2,
+              files: templateArchive.entries.length,
+              // No `--no-source` here, deliberately: a template's archive is not optional the way
+              // a push's is. `himi pull` restores templates through it, so a flag that dropped it
+              // would publish a template nobody can restore — the failure #2423 exists to prevent.
+              hint: "trim the template's source tree (build output and dependencies are already excluded) \u2014 a template's archive is not optional, so there is no flag that publishes without it"
+            }));
+            return 1;
+          }
+          payload.appSource = templateSourceB64;
           const tplVis = visibilityFlag(flags, io);
           if (!tplVis) return 2;
           const publishMeta = {
@@ -59829,6 +59849,27 @@ himi v${cliVersion()} \u2014 run \`himi --version\`. If authoring commands fail
             ...str5(flags.notes) ? { notes: str5(flags.notes) } : {},
             ...tplVis.value ? { visibility: tplVis.value } : {}
           };
+          const templateBodyBytes = publishReleaseBodyBytes(payload, publishMeta);
+          if (templateBodyBytes > MAX_PUBLISH_BODY_BYTES) {
+            io.error(JSON.stringify({
+              ok: false,
+              template: name,
+              app: templateAppId,
+              published: false,
+              error: "publish_body_too_large",
+              bodyBytes: templateBodyBytes,
+              limit: MAX_PUBLISH_BODY_BYTES,
+              // Both halves, because "the body is too big" does not say which one to cut, and the
+              // two answer to different edits: `sourceChars` shrinks by removing FILES from the
+              // tree, `appSourceBytes` by removing bytes (an image, a fixture) that may not be
+              // text at all. They overlap by design — the same tree, twice — so they are reported
+              // separately rather than summed into a figure that double-counts it.
+              sourceChars: JSON.stringify(payload.source).length,
+              appSourceBytes: templateSourceB64.length,
+              hint: "trim the template's source tree \u2014 a template carries its tree twice (the public catalog view and the private archive), and neither is optional, so there is no flag that publishes without them"
+            }));
+            return 1;
+          }
           let r;
           try {
             r = await client3().publishRelease(payload, publishMeta);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@wix/himalaya-cli",
-  "version": "0.825.0",
+  "version": "0.826.0",
   "type": "module",
   "description": "himi — the Himalaya authoring CLI. Build a Tier-5 content package on your own machine, push it to the production serve as a draft, preview it on web + Himi Player, and read worker logs back — the remote dev loop. Wraps @himalaya/serve-cli for transport.",
   "keywords": [
@@ -63,5 +63,5 @@
       "artifactId": "himalaya-cli"
     }
   },
-  "falconPackageHash": "5e06eccfd54f4a4994881cefcb68da9d51e6dccb06e0b6b2fd095790"
+  "falconPackageHash": "b3bc4ec44896b4a76de319d7e7785fdec50e5682c47183f97304d771"
 }