@wix/himalaya-cli 0.957.0 → 0.958.0

package/dist/cli.mjs

@@ -18547,6 +18547,7 @@ function shouldRevealError(args) {
 var EMAIL_RE, URL_HOST_RE, INTEGER_RE, NUMBER_RE;
 var init_validation = __esm({
   "../../core/ts/src/validation.ts"() {
+    "use strict";
     EMAIL_RE = /^[A-Za-z0-9._%+-]+@[A-Za-z0-9-]+(\.[A-Za-z0-9-]+)*\.[A-Za-z]{2,}$/;
     URL_HOST_RE = /^[A-Za-z0-9-]+(\.[A-Za-z0-9-]+)*(:[0-9]+)?$/;
     INTEGER_RE = /^[+-]?[0-9]+$/;
@@ -21971,6 +21972,7 @@ function validateWorkerSubtree(raw, slotId, policy, actionCatalog) {
 var WORKER_SUBTREE_CEILINGS, ID_PART, ACTION_ID;
 var init_worker_subtree = __esm({
   "../../core/ts/src/worker-subtree.ts"() {
+    "use strict";
     init_worker_subtree_safe_types_generated();
     WORKER_SUBTREE_CEILINGS = Object.freeze({
       maxEncodedBytes: 65536,
@@ -39199,7 +39201,7 @@ var init_preview_token = __esm({
     SUBTLE_ALGO = { name: "HMAC", hash: "SHA-256" };
     PREVIEW_TOKEN_VERSION = 1;
     DEFAULT_PREVIEW_TOKEN_TTL_SECONDS = 5 * 60;
-    WEB_PREVIEW_TOKEN_TTL_SECONDS = 15 * 60;
+    WEB_PREVIEW_TOKEN_TTL_SECONDS = 45 * 60;
   }
 });
 

package/guides/headless-loop.md

@@ -252,10 +252,18 @@ The push JSON includes:
 - `next` — suggested `himi context` / `himi screens` follow-ups
 
 The browser-preview token embedded in `previewWeb` is scoped to this app + draft release and
-expires after **15 minutes**. The JSON also includes `previewTokenExpiresAt`. If review takes
-longer, run `himi preview --app my-app --release <id> --target wix`: it renews the browser token
-without promoting the draft. For header-only function calls against the same draft, pass the
-separately issued short-lived function token as `--preview-token <token>`.
+expires after **45 minutes**. The JSON also includes `previewTokenExpiresAt` — read that rather
+than this number when you are talking to a plane you did not start. If review takes longer, run
+`himi preview --app my-app --release <id> --target wix`: it renews the browser token without
+promoting the draft. For header-only function calls against the same draft, pass the separately
+issued short-lived function token as `--preview-token <token>`.
+
+**When you hand `previewWeb` to a person, the expiry is theirs, not yours.** Renewing it needs
+this CLI and your credentials, so a link handed over near the end of a session leaves the
+recipient with a deadline and no way to extend it. Re-mint immediately before handing it over
+rather than passing on a link minted earlier, and say the expiry in their timezone. If they sign
+in to the Wix account that owns the app, its own owner page previews it for them
+without this CLI and without you — that, not the link, is the durable way back in.
 
 ## 5b. Agent preview (machine-readable, no browser scrape)
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@wix/himalaya-cli",
-  "version": "0.957.0",
+  "version": "0.958.0",
   "type": "module",
   "description": "himi — the Himalaya authoring CLI. Build a Tier-5 content package on your own machine, push it to the production serve as a draft, preview it on web + Himi Player, and read worker logs back — the remote dev loop. Wraps @himalaya/serve-cli for transport.",
   "keywords": [
@@ -64,5 +64,5 @@
       "artifactId": "himalaya-cli"
     }
   },
-  "falconPackageHash": "a7db2f8e9c09e46f2cb60d150cf40484b1d2db3b2df744e87b20634d"
+  "falconPackageHash": "d7801908694db877e53dbcdb28836a858399f835aec0a43b73c80bec"
 }