@shaykec/app-agent 1.0.5 → 1.0.6

package/templates/shared/android/WixMemberBackend/strings.xml

@@ -0,0 +1,111 @@
+<?xml version="1.0" encoding="utf-8"?>
+<resources>
+    <!-- Wix Member Backend Module -->
+    
+    <!-- Login Screen -->
+    <string name="wix_login_title">Sign in to continue</string>
+    <string name="wix_login_subtitle">Sign in to access your account and make purchases</string>
+    <string name="wix_login_button">Sign in with Wix</string>
+    <string name="wix_login_loading">Signing in…</string>
+    <string name="wix_login_error">Sign in failed. Please try again.</string>
+    <string name="wix_login_canceled">Sign in was canceled</string>
+    <string name="wix_login_network_error">Network error. Please check your connection.</string>
+    
+    <!-- Store Screen -->
+    <string name="wix_store_title">Products</string>
+    <string name="wix_store_search_hint">Search products…</string>
+    <string name="wix_store_buy_button">Buy</string>
+    <string name="wix_store_add_to_cart">Add to Cart</string>
+    <string name="wix_store_checkout">Checkout</string>
+    <string name="wix_store_cart_empty">Your cart is empty</string>
+    <string name="wix_store_cart_items">%d items</string>
+    <string name="wix_store_out_of_stock">Out of stock</string>
+    <string name="wix_store_in_stock">In stock</string>
+    <string name="wix_store_price_free">Free</string>
+    <string name="wix_store_quantity">Quantity: %d</string>
+    <string name="wix_store_total">Total</string>
+    
+    <!-- Bookings Screen -->
+    <string name="wix_bookings_title">Services</string>
+    <string name="wix_bookings_book_button">Book</string>
+    <string name="wix_bookings_select_slot">Select a time slot</string>
+    <string name="wix_bookings_no_slots">No available slots</string>
+    <string name="wix_bookings_booking_form_title">Booking Details</string>
+    <string name="wix_bookings_contact_name">Name</string>
+    <string name="wix_bookings_contact_email">Email</string>
+    <string name="wix_bookings_contact_phone">Phone (optional)</string>
+    <string name="wix_bookings_contact_notes">Notes (optional)</string>
+    <string name="wix_bookings_confirm_button">Confirm Booking</string>
+    <string name="wix_bookings_confirmation_title">Booking Confirmed</string>
+    <string name="wix_bookings_confirmation_message">Your booking has been confirmed. You will receive a confirmation email shortly.</string>
+    <string name="wix_bookings_duration">Duration: %d minutes</string>
+    <string name="wix_bookings_category">Category: %s</string>
+    
+    <!-- Events Screen -->
+    <string name="wix_events_title">Events</string>
+    <string name="wix_events_rsvp_button">RSVP</string>
+    <string name="wix_events_buy_tickets">Buy Tickets</string>
+    <string name="wix_events_tickets_available">Tickets available</string>
+    <string name="wix_events_tickets_sold_out">Sold out</string>
+    <string name="wix_events_event_details">Event Details</string>
+    <string name="wix_events_location">Location: %s</string>
+    <string name="wix_events_start_date">Starts: %s</string>
+    <string name="wix_events_end_date">Ends: %s</string>
+    <string name="wix_events_registration_open">Registration open</string>
+    <string name="wix_events_registration_closed">Registration closed</string>
+    <string name="wix_events_rsvp_confirmation">RSVP Confirmed</string>
+    <string name="wix_events_rsvp_message">Your RSVP has been confirmed. We look forward to seeing you!</string>
+    <string name="wix_events_ticket_limit">Limit: %d per order</string>
+    
+    <!-- Blog Screen -->
+    <string name="wix_blog_title">Blog</string>
+    <string name="wix_blog_posts">Posts</string>
+    <string name="wix_blog_categories">Categories</string>
+    <string name="wix_blog_comments">Comments</string>
+    <string name="wix_blog_add_comment">Add Comment</string>
+    <string name="wix_blog_comment_hint">Write a comment…</string>
+    <string name="wix_blog_post_comment">Post Comment</string>
+    <string name="wix_blog_no_comments">No comments yet</string>
+    <string name="wix_blog_published_on">Published on %s</string>
+    <string name="wix_blog_read_more">Read more</string>
+    <string name="wix_blog_author">By %s</string>
+    
+    <!-- Profile Screen -->
+    <string name="wix_profile_title">Profile</string>
+    <string name="wix_profile_my_orders">My Orders</string>
+    <string name="wix_profile_my_bookings">My Bookings</string>
+    <string name="wix_profile_my_events">My Events</string>
+    <string name="wix_profile_sign_out">Sign Out</string>
+    <string name="wix_profile_not_signed_in">Not signed in</string>
+    <string name="wix_profile_email">Email: %s</string>
+    <string name="wix_profile_display_name">Name: %s</string>
+    <string name="wix_profile_no_orders">No orders yet</string>
+    <string name="wix_profile_no_bookings">No bookings yet</string>
+    <string name="wix_profile_no_events">No events yet</string>
+    
+    <!-- Common Errors -->
+    <string name="wix_error_network">Network error. Please check your connection.</string>
+    <string name="wix_error_auth">Authentication required. Please sign in.</string>
+    <string name="wix_error_not_found">Resource not found</string>
+    <string name="wix_error_unknown">An unknown error occurred</string>
+    <string name="wix_error_loading">Loading failed. Please try again.</string>
+    <string name="wix_error_empty_response">Empty response from server</string>
+    <string name="wix_error_parse">Failed to parse response</string>
+    <string name="wix_error_client">Client error: %s</string>
+    <string name="wix_error_server">Server error: %s</string>
+    
+    <!-- Loading States -->
+    <string name="wix_loading">Loading…</string>
+    <string name="wix_loading_products">Loading products…</string>
+    <string name="wix_loading_services">Loading services…</string>
+    <string name="wix_loading_events">Loading events…</string>
+    <string name="wix_loading_posts">Loading posts…</string>
+    <string name="wix_loading_comments">Loading comments…</string>
+    
+    <!-- Empty States -->
+    <string name="wix_empty_products">No products available</string>
+    <string name="wix_empty_services">No services available</string>
+    <string name="wix_empty_events">No events available</string>
+    <string name="wix_empty_posts">No blog posts available</string>
+    <string name="wix_empty_search">No results found</string>
+</resources>

package/templates/shared/android/WixOwnerBackend/INTEGRATION.md

@@ -0,0 +1,246 @@
+# WixOwnerBackend Module — Integration Guide (Android)
+
+## Prerequisites
+
+### SecretsConfig
+
+This module requires the `SecretsConfig` module. Ensure `secrets.properties` is configured with:
+
+```properties
+WIX_API_KEY=your-wix-api-key
+WIX_SITE_ID=your-wix-site-id    # Optional if using WixSiteSelector
+```
+
+**Important:** This module uses **API key authentication** (not OAuth). The API key provides site owner/admin access, allowing full CRUD operations on products, orders, bookings, events, and blog posts.
+
+**Note:** `WIX_SITE_ID` is optional when the **WixSiteSelector** module is integrated. If omitted, the app shows a site selector on first launch. If provided, it serves as the default.
+
+### WixSiteSelector (recommended for multi-site)
+
+The `WixSiteSelector` module enables runtime site switching. Pass a shared `WixSiteManager` to `WixAdminAuthManager` and the API client. Owner apps automatically fetch their sites from the Wix API.
+
+### No Deep Link Required
+
+Unlike `WixMemberBackend`, this module does not require OAuth redirect handling. API key authentication happens via HTTP headers.
+
+## Dependencies
+
+Add to `app/build.gradle.kts`:
+
+```kotlin
+dependencies {
+    // OkHttp for HTTP client
+    implementation("com.squareup.okhttp3:okhttp:4.12.0")
+    
+    // Kotlinx Serialization
+    implementation("org.jetbrains.kotlinx:kotlinx-serialization-json:1.6.0")
+    
+    // Compose (if not already included)
+    implementation(platform("androidx.compose:compose-bom:2024.02.00"))
+    implementation("androidx.compose.ui:ui")
+    implementation("androidx.compose.material3:material3")
+}
+```
+
+## Service Initialization
+
+```kotlin
+// Option 1: With WixSiteManager (recommended — enables runtime site switching)
+val siteManager = WixSiteManager(applicationContext)  // shared instance
+val authManager = WixAdminAuthManager(siteManager = siteManager)
+val apiClient = WixApiClient(authManager, siteManager = siteManager)
+
+// Option 2: With static site ID (legacy, single-site apps)
+val authManager = WixAdminAuthManager()
+val apiClient = WixApiClient(authManager)
+
+// Initialize domain managers (same for both options)
+val siteAdminManager = WixSiteAdminManager(apiClient, authManager)
+val storeManager = WixStoreAdminManager(apiClient, authManager)
+val bookingManager = WixBookingAdminManager(apiClient, authManager)
+val eventManager = WixEventAdminManager(apiClient, authManager)
+val blogManager = WixBlogAdminManager(apiClient, authManager)
+```
+
+## Navigation Wiring
+
+### Tab-based (recommended)
+
+```kotlin
+@Composable
+fun AdminTabs() {
+    val authManager = remember { WixAdminAuthManager() }
+    val apiClient = remember { WixApiClient(authManager) }
+    val siteManager = remember { WixSiteAdminManager(apiClient, authManager) }
+    val storeManager = remember { WixStoreAdminManager(apiClient, authManager) }
+    val bookingManager = remember { WixBookingAdminManager(apiClient, authManager) }
+    val eventManager = remember { WixEventAdminManager(apiClient, authManager) }
+    val blogManager = remember { WixBlogAdminManager(apiClient, authManager) }
+    
+    Scaffold { padding ->
+        NavigationBar {
+            NavigationBarItem(
+                selected = true,
+                onClick = { },
+                icon = { Icon(Icons.Default.Dashboard, contentDescription = null) },
+                label = { Text("Dashboard") }
+            )
+            // ... more tabs
+        }
+    }
+}
+```
+
+### Site Selector Flow
+
+If your app supports multiple sites, use `WixSiteSelectorScreen` from the `WixSiteSelector` module:
+
+```kotlin
+WixSiteSelectorScreen(
+    siteManager = siteManager,
+    mode = WixSiteSelectionMode.OWNER,
+    onSiteSelected = { site ->
+        // Navigate to dashboard
+    }
+)
+```
+
+Alternatively, use the legacy `WixConnectSiteScreen`:
+
+```kotlin
+WixConnectSiteScreen(
+    siteManager = siteAdminManager,
+    authManager = authManager,
+    onSiteConnected = { site ->
+        // Navigate to dashboard
+    }
+)
+```
+
+## String Merge
+
+Copy all strings from `strings.xml` into your app's `res/values/strings.xml`. All strings are prefixed with `wix_owner_*`.
+
+## Test IDs
+
+| Test ID | Element |
+|---------|---------|
+| `wix_owner_site_url_input` | Site URL input field |
+| `wix_owner_connect_button` | Connect button |
+| `wix_owner_current_site` | Current site card |
+| `wix_owner_not_configured` | Not configured warning |
+| `wix_owner_dashboard_grid` | Dashboard stat cards grid |
+| `wix_owner_dashboard_card_*` | Individual stat cards |
+| `wix_owner_products_list` | Products list |
+| `wix_owner_products_fab` | Create product FAB |
+| `wix_owner_product_*` | Product row (per product ID) |
+| `wix_owner_product_edit_*` | Edit product button |
+| `wix_owner_product_delete_*` | Delete product button |
+| `wix_owner_product_form` | Product form dialog |
+| `wix_owner_product_save` | Save product button |
+| `wix_owner_orders_list` | Orders list |
+| `wix_owner_order_*` | Order row (per order ID) |
+| `wix_owner_order_fulfill_*` | Fulfill order button |
+| `wix_owner_bookings_list` | Bookings list |
+| `wix_owner_booking_*` | Booking row (per booking ID) |
+| `wix_owner_booking_confirm_*` | Confirm booking button |
+| `wix_owner_booking_cancel_*` | Cancel booking button |
+| `wix_owner_booking_decline_*` | Decline booking button |
+| `wix_owner_events_list` | Events list |
+| `wix_owner_events_fab` | Create event FAB |
+| `wix_owner_event_*` | Event row (per event ID) |
+| `wix_owner_event_edit_*` | Edit event button |
+| `wix_owner_event_delete_*` | Delete event button |
+| `wix_owner_event_form` | Event form dialog |
+| `wix_owner_event_save` | Save event button |
+| `wix_owner_rsvps_list_*` | RSVPs list (per event ID) |
+| `wix_owner_rsvp_*` | RSVP row (per RSVP ID) |
+| `wix_owner_rsvp_checkin_*` | Check-in RSVP button |
+| `wix_owner_blog_list` | Blog posts list |
+| `wix_owner_blog_fab` | Create post FAB |
+| `wix_owner_post_*` | Post row (per post ID) |
+| `wix_owner_post_edit_*` | Edit post button |
+| `wix_owner_post_delete_*` | Delete post button |
+| `wix_owner_post_form` | Post form dialog |
+| `wix_owner_post_save` | Save post button |
+| `wix_owner_post_publish_*` | Publish post button |
+| `wix_owner_post_unpublish_*` | Unpublish post button |
+| `wix_owner_comments_list_*` | Comments list (per post ID) |
+| `wix_owner_comment_*` | Comment row (per comment ID) |
+| `wix_owner_comment_approve_*` | Approve comment button |
+| `wix_owner_comment_reject_*` | Reject comment button |
+
+## Module Dependencies
+
+- **SecretsConfig** — for API key management
+- **WixSiteSelector** (optional) — for runtime site switching
+- **OkHttp** — for HTTP client
+- **Kotlinx Serialization** — for JSON encoding/decoding
+- **Jetpack Compose** — for UI screens
+
+## Usage Notes
+
+### API Key Authentication
+
+The module uses API key authentication via HTTP headers:
+- `Authorization: {apiKey}` (not Bearer token)
+- `wix-site-id: {siteId}`
+
+No token refresh is needed — API keys are long-lived credentials.
+
+### Owner vs Member Access
+
+- **WixMemberBackend**: Visitor-first auth, OAuth for transactions, read-only browsing
+- **WixOwnerBackend**: API key auth, full CRUD operations, admin/owner access
+
+These modules can coexist in the same app if you need both member-facing and admin features.
+
+### Error Handling
+
+All managers expose `error: StateFlow<WixApiError?>`. Observe errors in your UI:
+
+```kotlin
+val error by storeManager.error.collectAsState()
+
+error?.let { apiError ->
+    // Show error message
+    Text(apiError.message)
+}
+```
+
+### StateFlow Pattern
+
+All managers use `StateFlow` for reactive state:
+- `products: StateFlow<List<WixProduct>>`
+- `orders: StateFlow<List<WixOrder>>`
+- `isLoading: StateFlow<Boolean>`
+- `error: StateFlow<WixApiError?>`
+
+Use `collectAsState()` in Compose:
+
+```kotlin
+val products by storeManager.products.collectAsState()
+val isLoading by storeManager.isLoading.collectAsState()
+```
+
+### Customization Points
+
+1. **Styling**: All screens use `MaterialTheme` tokens — update your theme to match your brand
+2. **Navigation**: Screens can be used in tabs, navigation stack, or modal sheets
+3. **Strings**: Override any string in `strings.xml` for custom copy
+4. **Error handling**: Customize error display in each screen
+
+## API Endpoints Used
+
+- `/site/v1/sites` — Site management
+- `/stores/v1/products` — Product CRUD
+- `/stores/v1/orders` — Order management
+- `/bookings/v1/services` — Service CRUD
+- `/bookings/v1/bookings` — Booking management
+- `/events/v1/events` — Event CRUD
+- `/events/v1/events/{id}/rsvps` — RSVP listing
+- `/events/v1/events/{id}/rsvps/{rsvpId}/checkin` — RSVP check-in
+- `/blog/v1/posts` — Post CRUD
+- `/blog/v1/posts/{id}/comments` — Comment moderation
+
+All endpoints require API key authentication and site ID header.

package/templates/shared/android/WixOwnerBackend/SETUP.md

@@ -0,0 +1,141 @@
+# WixOwnerBackend — Setup Guide
+
+This guide walks you through setting up API key authentication for Wix Owner/Admin apps.
+
+## Quick Start
+
+1. **Get your Wix API key** (see below)
+2. **Add to secrets.properties**:
+   ```properties
+   WIX_API_KEY=your-api-key-here
+   WIX_SITE_ID=your-site-id-here
+   ```
+3. **Verify configuration** — build and run, check Logcat for warnings
+
+## Where to Get Your API Key
+
+### Step 1: Access Wix Site Dashboard
+
+1. Log in to your Wix site at [https://www.wix.com](https://www.wix.com)
+2. Go to your site's **Dashboard**
+3. Navigate to **Settings > API Keys** (or **Developer Tools > API Keys**)
+
+### Step 2: Generate API Key
+
+1. Click **Generate API Key** or **Create API Key**
+2. Give it a name (e.g., "Mobile Admin App")
+3. Select the permissions you need:
+   - **Stores** — manage products and orders
+   - **Bookings** — manage services and bookings
+   - **Events** — manage events and RSVPs
+   - **Blog** — manage posts and comments
+   - **Site Management** — view site information
+4. Click **Generate** or **Create**
+5. **Copy the API key immediately** — you won't be able to see it again!
+
+### Step 3: Get Your Site ID
+
+Your Site ID is found in several places:
+
+1. **From the API Keys page** — it's usually displayed near your API key
+2. **From your site URL** — if your site is `https://mysite.wixsite.com/mysite`, the site ID is often part of the URL structure
+3. **From Wix Dev Center** — go to [https://dev.wix.com](https://dev.wix.com), select your site, and find the Site ID in the project settings
+
+### Step 4: Add to secrets.properties
+
+```properties
+# Wix Owner API (for admin/owner apps)
+WIX_API_KEY=your-api-key-from-step-2
+WIX_SITE_ID=your-site-id-from-step-3
+```
+
+## Verify Your Setup
+
+After adding the keys, build and run your app. Check Logcat for:
+
+- ✅ **No warnings** = configuration is correct
+- ⚠️ **`SecretsConfig: 'WIX_API_KEY' is not configured`** = key is missing or has placeholder value
+- ⚠️ **`SecretsConfig: 'WIX_SITE_ID' is not configured`** = site ID is missing or has placeholder value
+
+## Testing the Connection
+
+Use the `WixConnectSiteScreen` to test your connection:
+
+```kotlin
+WixConnectSiteScreen(
+    siteManager = siteManager,
+    authManager = authManager,
+    onSiteConnected = { site ->
+        Log.d("Wix", "Connected to site: ${site.name}")
+    }
+)
+```
+
+If the connection succeeds, you'll see your site name and URL. If it fails, check:
+1. API key is correct (no extra spaces, copied fully)
+2. Site ID is correct
+3. API key has the required permissions
+4. Your site is published (some APIs require published sites)
+
+## Security Notes
+
+### API Key Safety
+
+- **API keys are long-lived** — they don't expire unless you revoke them
+- **Store securely** — never commit `secrets.properties` to git (it's in `.gitignore`)
+- **Rotate if compromised** — if your key is exposed, revoke it in Wix Dashboard and generate a new one
+- **Limit permissions** — only grant the permissions your app actually needs
+
+### Client-Side vs Server-Side
+
+- **WixOwnerBackend** uses API keys in the mobile app (client-side)
+- This is safe because:
+  - API keys are tied to your site (not user accounts)
+  - Permissions are scoped to what you grant
+  - Wix APIs validate requests server-side
+- **For production apps**, consider:
+  - Using a backend proxy to hide the API key
+  - Implementing additional authentication (e.g., user login before accessing admin features)
+  - Using OAuth for user-specific admin access (see WixMemberBackend)
+
+## Troubleshooting
+
+### "Unauthorized" errors
+
+- Check API key is correct (no typos, fully copied)
+- Verify site ID matches your site
+- Ensure API key hasn't been revoked in Wix Dashboard
+- Check API key has the required permissions for the endpoint you're calling
+
+### "Site not found" errors
+
+- Verify site ID is correct
+- Ensure site is published (some APIs require published sites)
+- Check you're using the correct site ID for the API key (keys are site-specific)
+
+### "Permission denied" errors
+
+- Check API key has the required permission for the operation
+- Some operations require specific permissions (e.g., deleting requires write permission)
+- Regenerate API key with broader permissions if needed
+
+### Build errors
+
+- Ensure `buildConfig = true` is set in `build.gradle.kts`
+- Verify `secrets.properties` exists (copy from `.template` if missing)
+- Check BuildConfig fields are added correctly (see `SecretsConfig/INTEGRATION.md`)
+
+## Next Steps
+
+After setup is complete:
+
+1. **Initialize services** — see `INTEGRATION.md` for service initialization
+2. **Wire navigation** — add screens to your app navigation
+3. **Test CRUD operations** — try creating/updating/deleting resources
+4. **Customize UI** — adjust theme and strings to match your brand
+
+## Additional Resources
+
+- [Wix API Documentation](https://dev.wix.com/api/rest)
+- [Wix API Keys Guide](https://dev.wix.com/docs/rest/api-reference/wix-api-keys)
+- [SecretsConfig Setup](../SecretsConfig/SETUP.md) — general secrets configuration

package/templates/shared/android/WixOwnerBackend/WixAdminAuthManager.kt

@@ -0,0 +1,71 @@
+package com.appship.shared.wix.owner
+
+import com.appship.shared.secrets.SecretsConfig
+import com.appship.shared.wix.siteselector.WixSiteManager
+import kotlinx.coroutines.Dispatchers
+import kotlinx.coroutines.withContext
+import kotlinx.serialization.json.Json
+import okhttp3.*
+import java.io.IOException
+
+/**
+ * Simple authentication manager for Wix Owner API.
+ * Uses API key authentication (no OAuth flow).
+ * Supports dynamic site ID via [WixSiteManager] when available.
+ */
+class WixAdminAuthManager(
+    private val siteManager: WixSiteManager? = null
+) {
+    
+    private val json = Json {
+        ignoreUnknownKeys = true
+        isLenient = true
+    }
+    
+    private val client = OkHttpClient()
+    
+    /**
+     * Check if API credentials are configured
+     */
+    val isConfigured: Boolean
+        get() = SecretsConfig.isWixOwnerConfigured
+    
+    /**
+     * Get API key from SecretsConfig
+     */
+    val apiKey: String
+        get() = SecretsConfig.wixApiKey
+    
+    /**
+     * Get site ID: from WixSiteManager if available, otherwise from SecretsConfig.
+     */
+    val siteId: String
+        get() = siteManager?.currentSiteId?.value?.takeIf { it.isNotEmpty() }
+            ?: SecretsConfig.wixSiteId
+    
+    /**
+     * Verify that the current API key has owner/admin access to the given site.
+     * Makes a test API call to verify permissions.
+     */
+    suspend fun isCurrentUserOwner(siteId: String): Boolean = withContext(Dispatchers.IO) {
+        if (!isConfigured) {
+            return@withContext false
+        }
+        
+        try {
+            val request = Request.Builder()
+                .url("https://www.wixapis.com/site/v1/sites/$siteId")
+                .get()
+                .addHeader("Authorization", apiKey)
+                .addHeader("wix-site-id", siteId)
+                .build()
+            
+            val response = client.newCall(request).execute()
+            response.isSuccessful
+        } catch (e: IOException) {
+            false
+        } catch (e: Exception) {
+            false
+        }
+    }
+}