@wix/himalaya-cli 0.1045.0 → 0.1046.0

package/dist/authoring-runtime/node_modules/@wix/himalaya/dist/_types/core/sdk/wix-platform/src/index.d.ts

@@ -19,7 +19,7 @@ export interface ExperimentResult {
     variant: string;
 }
 export declare const experiments: {
-    /** Conduct a Petri experiment; returns the resolved variant (or `fallback`). */
+    /** The app's served variant for `spec` (`himi flags`), or `fallback` when none is assigned. */
     conduct(spec: string, fallback?: string): Promise<ExperimentResult>;
     /** Boolean convenience — true when the variant is exactly "true". */
     isEnabled(spec: string): Promise<boolean>;
@@ -32,7 +32,7 @@ export declare const experiments: {
     }>;
 };
 export declare const flags: {
-    /** Whether a Petri feature-toggle spec is ON. */
+    /** Whether the app's served flag `spec` is ON (variant `on`/`true`/`new`), else `fallback`. */
     isEnabled(spec: string, fallback?: boolean): Promise<boolean>;
     /** A toggle's raw value (variant string) for non-boolean specs. */
     value(spec: string, fallback?: string): Promise<string>;

package/dist/authoring-runtime/node_modules/@wix/himalaya/dist/wix-platform.mjs

@@ -62,40 +62,15 @@ function flights() {
 function dropConductFlights() {
   flights()?.inflight.clear();
 }
-var conductedReal = (value) => ({ value, cacheable: true });
-var conductedSeam = (value) => ({ value, cacheable: false });
-async function l2Get(ns, spec) {
-  try {
-    const r = await call("conductedGet", { door: ns, spec });
-    return {
-      value: r?.hit && typeof r.value === "string" && r.value.length > 0 ? r.value : null,
-      scope: typeof r?.scope === "string" && r.scope.length > 0 ? r.scope : null
-    };
-  } catch {
-    return { value: null, scope: null };
-  }
-}
-async function l2Put(ns, spec, value, scope) {
-  try {
-    await call("conductedPut", { door: ns, spec, value, scope });
-  } catch {
-  }
-}
 async function conductCached(ns, spec, fallback, resolve) {
   const f = flights();
-  if (!f) return (await resolve()).value;
+  if (!f) return resolve();
   const flightKey = JSON.stringify([ns, spec, fallback]);
   const pending = f.inflight.get(flightKey);
   if (pending) return pending;
   const task = (async () => {
     try {
-      const { value: cached, scope } = await l2Get(ns, spec);
-      if (cached !== null) return cached;
-      const { value, cacheable } = await resolve();
-      if (cacheable && value !== null && value.length > 0 && scope !== null) {
-        await l2Put(ns, spec, value, scope);
-      }
-      return value;
+      return await resolve();
     } finally {
       f.inflight.delete(flightKey);
     }
@@ -103,31 +78,16 @@ async function conductCached(ns, spec, fallback, resolve) {
   f.inflight.set(flightKey, task);
   return task;
 }
-var PETRI_CONDUCT = "/_api/wix-petri-webapp/v1/conductExperiment";
 async function resolveExperiment(spec, fallback) {
-  if (isMemberReal("experiments")) {
-    try {
-      const r2 = await realWix("POST", PETRI_CONDUCT, { key: spec, fallbackValue: fallback });
-      if (typeof r2?.value === "string") return conductedReal(r2.value);
-    } catch {
-    }
-  }
   const r = await call("experimentsConduct", { spec, fallback });
-  return conductedSeam(typeof r?.variant === "string" ? r.variant : null);
+  return typeof r?.variant === "string" ? r.variant : null;
 }
 async function resolveFlag(spec, fallback) {
-  if (isMemberReal("flags")) {
-    try {
-      const r2 = await realWix("POST", PETRI_CONDUCT, { key: spec, fallbackValue: String(fallback) });
-      if (typeof r2?.value === "string") return conductedReal(r2.value);
-    } catch {
-    }
-  }
   const r = await call("flagsIsEnabled", { spec, fallback });
-  return conductedSeam(typeof r?.enabled === "boolean" ? String(r.enabled) : null);
+  return typeof r?.enabled === "boolean" ? String(r.enabled) : null;
 }
 var experiments = {
-  /** Conduct a Petri experiment; returns the resolved variant (or `fallback`). */
+  /** The app's served variant for `spec` (`himi flags`), or `fallback` when none is assigned. */
   async conduct(spec, fallback = "false") {
     const resolved = await conductCached("experiments", spec, fallback, () => resolveExperiment(spec, fallback));
     return { spec, variant: resolved ?? fallback };
@@ -146,7 +106,7 @@ var experiments = {
   }
 };
 var flags = {
-  /** Whether a Petri feature-toggle spec is ON. */
+  /** Whether the app's served flag `spec` is ON (variant `on`/`true`/`new`), else `fallback`. */
   async isEnabled(spec, fallback = false) {
     const resolved = await conductCached("flags", spec, String(fallback), () => resolveFlag(spec, fallback));
     if (resolved === null) return fallback;
@@ -186,25 +146,11 @@ var i18n = {
 var ping = {
   /** Register the device's push token with Wix Ping. */
   async register() {
-    if (isMemberReal("ping")) {
-      try {
-        const r2 = await realWix("POST", "/_api/ping-webapp/v1/registrations", {});
-        if (r2 && typeof r2.registered === "boolean") return { registered: r2.registered, token: r2.token ?? "" };
-      } catch {
-      }
-    }
     const r = await call("pingRegister");
     return { registered: r?.registered ?? false, token: r?.token ?? "" };
   },
   /** Current Ping registration status (no network). */
   async status() {
-    if (isMemberReal("ping")) {
-      try {
-        const r2 = await realWix("GET", "/_api/ping-webapp/v1/registrations");
-        if (r2 && typeof r2.registered === "boolean") return { registered: r2.registered, token: r2.token ?? "" };
-      } catch {
-      }
-    }
     const r = await call("pingStatus");
     return { registered: r?.registered ?? false, token: r?.token ?? "" };
   }
@@ -212,13 +158,6 @@ var ping = {
 var deeplink = {
   /** Resolve a deferred (post-install) deep link via Wix Jot. Null when none. */
   async resolveDeferred() {
-    if (isMemberReal("deeplink")) {
-      try {
-        const r2 = await realWix("GET", "/_api/app-link-server/v1/deferred-deep-link");
-        if (r2) return { link: r2.link && r2.link.length > 0 ? r2.link : null };
-      } catch {
-      }
-    }
     const r = await call("deeplinkResolveDeferred");
     return { link: r?.link && r.link.length > 0 ? r.link : null };
   }

package/dist/cli.mjs

@@ -18830,6 +18830,204 @@ ${cookieHeader}`);
   }
 });
 
+// ../../core/ts/src/flags-engine.ts
+function bucket(key2) {
+  const digest2 = sha1(key2);
+  const n = (digest2[0] << 24 | digest2[1] << 16 | digest2[2] << 8 | digest2[3]) >>> 0;
+  return n % 1e4;
+}
+function attrValue(ctx, attribute) {
+  switch (attribute) {
+    case "platform":
+      return ctx.platform;
+    case "appVersion":
+      return ctx.appVersion;
+    case "locale":
+      return ctx.locale;
+    case "appId":
+      return ctx.appId;
+    case "userId":
+      return ctx.userId;
+    default:
+      return ctx.custom?.[attribute];
+  }
+}
+function clauseMatches(ctx, c) {
+  const v = attrValue(ctx, c.attribute);
+  switch (c.op) {
+    case "eq":
+      return v !== void 0 && c.values.includes(v);
+    case "neq":
+      return v === void 0 || !c.values.includes(v);
+    case "in":
+      return v !== void 0 && c.values.includes(v);
+    case "contains":
+      return v !== void 0 && c.values.some((needle) => v.includes(needle));
+    default:
+      return false;
+  }
+}
+function ruleMatches(ctx, rule) {
+  return rule.clauses.length > 0 && rule.clauses.every((c) => clauseMatches(ctx, c));
+}
+function variantForBucket(def, b) {
+  const total = def.variants.reduce((s, v) => s + Math.max(0, v.weight), 0);
+  if (total <= 0) return def.defaultVariant;
+  const target = b / 1e4 * total;
+  let acc = 0;
+  for (const v of def.variants) {
+    acc += Math.max(0, v.weight);
+    if (target < acc) return v.key;
+  }
+  return def.variants[def.variants.length - 1].key;
+}
+function evaluate(def, ctx, override) {
+  const base = { key: def.key, experimentId: def.experiment?.id };
+  if (override) return { ...base, variant: override, reason: "override" };
+  if (!def.enabled) return { ...base, variant: def.defaultVariant, reason: "disabled" };
+  for (const rule of def.targeting ?? []) {
+    if (ruleMatches(ctx, rule)) return { ...base, variant: rule.variant, reason: "targeting" };
+  }
+  const id = ctx.userId ?? ctx.sessionId;
+  const seed2 = def.seed ?? def.key;
+  const rollout = def.rolloutPercentage ?? 100;
+  if (rollout < 100) {
+    const gate = bucket(`${id}:${seed2}:rollout`);
+    if (gate >= rollout * 100) return { ...base, variant: def.defaultVariant, reason: "default" };
+  }
+  const variant = variantForBucket(def, bucket(`${id}:${seed2}`));
+  return { ...base, variant, reason: "rollout" };
+}
+function evaluateAll(defs, ctx, overrides) {
+  const out = {};
+  for (const def of defs) out[def.key] = evaluate(def, ctx, overrides?.[def.key]);
+  return out;
+}
+function utf8(input) {
+  return new TextEncoder().encode(input);
+}
+function sha1(input) {
+  const bytes2 = typeof input === "string" ? utf8(input) : input;
+  const bitLen = bytes2.length * 8;
+  const padded = new Uint8Array(((bytes2.length + 9 + 63) / 64 | 0) * 64);
+  padded.set(bytes2);
+  padded[bytes2.length] = 128;
+  const view = new DataView(padded.buffer);
+  view.setUint32(padded.length - 8, Math.floor(bitLen / 4294967296));
+  view.setUint32(padded.length - 4, bitLen >>> 0);
+  let h0 = 1732584193, h1 = 4023233417, h2 = 2562383102, h3 = 271733878, h4 = 3285377520;
+  const w = new Uint32Array(80);
+  for (let off = 0; off < padded.length; off += 64) {
+    for (let i = 0; i < 16; i++) w[i] = view.getUint32(off + i * 4);
+    for (let i = 16; i < 80; i++) {
+      const v = w[i - 3] ^ w[i - 8] ^ w[i - 14] ^ w[i - 16];
+      w[i] = (v << 1 | v >>> 31) >>> 0;
+    }
+    let a = h0, b = h1, c = h2, d = h3, e = h4;
+    for (let i = 0; i < 80; i++) {
+      let f;
+      let k;
+      if (i < 20) {
+        f = b & c | ~b & d;
+        k = 1518500249;
+      } else if (i < 40) {
+        f = b ^ c ^ d;
+        k = 1859775393;
+      } else if (i < 60) {
+        f = b & c | b & d | c & d;
+        k = 2400959708;
+      } else {
+        f = b ^ c ^ d;
+        k = 3395469782;
+      }
+      const t = ((a << 5 | a >>> 27) >>> 0) + (f >>> 0) + e + k + w[i] >>> 0;
+      e = d;
+      d = c;
+      c = (b << 30 | b >>> 2) >>> 0;
+      b = a;
+      a = t;
+    }
+    h0 = h0 + a >>> 0;
+    h1 = h1 + b >>> 0;
+    h2 = h2 + c >>> 0;
+    h3 = h3 + d >>> 0;
+    h4 = h4 + e >>> 0;
+  }
+  const out = new Uint8Array(20);
+  const outView = new DataView(out.buffer);
+  outView.setUint32(0, h0);
+  outView.setUint32(4, h1);
+  outView.setUint32(8, h2);
+  outView.setUint32(12, h3);
+  outView.setUint32(16, h4);
+  return out;
+}
+var init_flags_engine = __esm({
+  "../../core/ts/src/flags-engine.ts"() {
+  }
+});
+
+// ../../core/serve-runtime/src/flag-assignments.ts
+function bad(error) {
+  return new Response(JSON.stringify({ error }), { status: 400, headers: { "content-type": JSON_CT, "cache-control": "no-store" } });
+}
+function flagAssignmentsBody(app, defs, ctx, overrides, ttlSeconds = FLAG_ASSIGNMENTS_TTL_SECONDS) {
+  const evalCtx = {
+    sessionId: ctx.id,
+    appId: app,
+    ...ctx.platform ? { platform: ctx.platform } : {},
+    ...ctx.appVersion ? { appVersion: ctx.appVersion } : {},
+    ...ctx.locale ? { locale: ctx.locale } : {}
+  };
+  const byKey = new Map(defs.map((d) => [d.key, d]));
+  const assignments = {};
+  for (const [key2, a] of Object.entries(evaluateAll(defs, evalCtx, overrides))) {
+    const value = byKey.get(key2)?.variants.find((v) => v.key === a.variant)?.value;
+    assignments[key2] = {
+      variant: a.variant,
+      reason: a.reason,
+      ...a.experimentId ? { experimentId: a.experimentId } : {},
+      ...value !== void 0 ? { value } : {}
+    };
+  }
+  return { app, id: ctx.id, assignments, ttlSeconds };
+}
+function flagAssignmentsResponse(request, app, defs, overrides, ttlSeconds = FLAG_ASSIGNMENTS_TTL_SECONDS) {
+  if (request.method !== "GET" && request.method !== "HEAD") {
+    return new Response(JSON.stringify({ error: "method_not_allowed" }), { status: 405, headers: { "content-type": JSON_CT } });
+  }
+  const url = new URL(request.url);
+  const id = url.searchParams.get("id") ?? "";
+  if (!id) return bad("missing_id");
+  if (id.length > MAX_ID_LENGTH) return bad("id_too_long");
+  const q = (k) => url.searchParams.get(k) || void 0;
+  const body = JSON.stringify(flagAssignmentsBody(app, defs.filter(isEvaluable), {
+    id,
+    platform: q("platform"),
+    appVersion: q("appVersion"),
+    locale: q("locale")
+  }, overrides, ttlSeconds));
+  const etag = strongEtag(body);
+  const headers2 = { "content-type": JSON_CT, etag, "cache-control": `private, max-age=${Math.min(ttlSeconds, 60)}` };
+  if (request.headers.get("if-none-match") === etag) return new Response(null, { status: 304, headers: headers2 });
+  return new Response(request.method === "HEAD" ? null : body, { status: 200, headers: headers2 });
+}
+function isEvaluable(d) {
+  const x = d;
+  return !!x && typeof x.key === "string" && Array.isArray(x.variants) && typeof x.defaultVariant === "string";
+}
+var FLAG_ASSIGNMENTS_PATH, FLAG_ASSIGNMENTS_TTL_SECONDS, MAX_ID_LENGTH, JSON_CT;
+var init_flag_assignments = __esm({
+  "../../core/serve-runtime/src/flag-assignments.ts"() {
+    init_flags_engine();
+    init_contract();
+    FLAG_ASSIGNMENTS_PATH = /^\/v1\/flags\/([^/]+)\/assignments$/;
+    FLAG_ASSIGNMENTS_TTL_SECONDS = 300;
+    MAX_ID_LENGTH = 256;
+    JSON_CT = "application/json; charset=utf-8";
+  }
+});
+
 // ../../core/dev-server/src/images.ts
 import { createHash as createHash11 } from "node:crypto";
 function svgFor(productId, title, sku) {
@@ -32031,143 +32229,6 @@ var init_flags = __esm({
   }
 });
 
-// ../../core/ts/src/flags-engine.ts
-function bucket(key2) {
-  const digest2 = sha1(key2);
-  const n = (digest2[0] << 24 | digest2[1] << 16 | digest2[2] << 8 | digest2[3]) >>> 0;
-  return n % 1e4;
-}
-function attrValue(ctx, attribute) {
-  switch (attribute) {
-    case "platform":
-      return ctx.platform;
-    case "appVersion":
-      return ctx.appVersion;
-    case "locale":
-      return ctx.locale;
-    case "appId":
-      return ctx.appId;
-    case "userId":
-      return ctx.userId;
-    default:
-      return ctx.custom?.[attribute];
-  }
-}
-function clauseMatches(ctx, c) {
-  const v = attrValue(ctx, c.attribute);
-  switch (c.op) {
-    case "eq":
-      return v !== void 0 && c.values.includes(v);
-    case "neq":
-      return v === void 0 || !c.values.includes(v);
-    case "in":
-      return v !== void 0 && c.values.includes(v);
-    case "contains":
-      return v !== void 0 && c.values.some((needle) => v.includes(needle));
-    default:
-      return false;
-  }
-}
-function ruleMatches(ctx, rule) {
-  return rule.clauses.length > 0 && rule.clauses.every((c) => clauseMatches(ctx, c));
-}
-function variantForBucket(def, b) {
-  const total = def.variants.reduce((s, v) => s + Math.max(0, v.weight), 0);
-  if (total <= 0) return def.defaultVariant;
-  const target = b / 1e4 * total;
-  let acc = 0;
-  for (const v of def.variants) {
-    acc += Math.max(0, v.weight);
-    if (target < acc) return v.key;
-  }
-  return def.variants[def.variants.length - 1].key;
-}
-function evaluate(def, ctx, override) {
-  const base = { key: def.key, experimentId: def.experiment?.id };
-  if (override) return { ...base, variant: override, reason: "override" };
-  if (!def.enabled) return { ...base, variant: def.defaultVariant, reason: "disabled" };
-  for (const rule of def.targeting ?? []) {
-    if (ruleMatches(ctx, rule)) return { ...base, variant: rule.variant, reason: "targeting" };
-  }
-  const id = ctx.userId ?? ctx.sessionId;
-  const seed2 = def.seed ?? def.key;
-  const rollout = def.rolloutPercentage ?? 100;
-  if (rollout < 100) {
-    const gate = bucket(`${id}:${seed2}:rollout`);
-    if (gate >= rollout * 100) return { ...base, variant: def.defaultVariant, reason: "default" };
-  }
-  const variant = variantForBucket(def, bucket(`${id}:${seed2}`));
-  return { ...base, variant, reason: "rollout" };
-}
-function evaluateAll(defs, ctx, overrides) {
-  const out = {};
-  for (const def of defs) out[def.key] = evaluate(def, ctx, overrides?.[def.key]);
-  return out;
-}
-function utf8(input) {
-  return new TextEncoder().encode(input);
-}
-function sha1(input) {
-  const bytes2 = typeof input === "string" ? utf8(input) : input;
-  const bitLen = bytes2.length * 8;
-  const padded = new Uint8Array(((bytes2.length + 9 + 63) / 64 | 0) * 64);
-  padded.set(bytes2);
-  padded[bytes2.length] = 128;
-  const view = new DataView(padded.buffer);
-  view.setUint32(padded.length - 8, Math.floor(bitLen / 4294967296));
-  view.setUint32(padded.length - 4, bitLen >>> 0);
-  let h0 = 1732584193, h1 = 4023233417, h2 = 2562383102, h3 = 271733878, h4 = 3285377520;
-  const w = new Uint32Array(80);
-  for (let off = 0; off < padded.length; off += 64) {
-    for (let i = 0; i < 16; i++) w[i] = view.getUint32(off + i * 4);
-    for (let i = 16; i < 80; i++) {
-      const v = w[i - 3] ^ w[i - 8] ^ w[i - 14] ^ w[i - 16];
-      w[i] = (v << 1 | v >>> 31) >>> 0;
-    }
-    let a = h0, b = h1, c = h2, d = h3, e = h4;
-    for (let i = 0; i < 80; i++) {
-      let f;
-      let k;
-      if (i < 20) {
-        f = b & c | ~b & d;
-        k = 1518500249;
-      } else if (i < 40) {
-        f = b ^ c ^ d;
-        k = 1859775393;
-      } else if (i < 60) {
-        f = b & c | b & d | c & d;
-        k = 2400959708;
-      } else {
-        f = b ^ c ^ d;
-        k = 3395469782;
-      }
-      const t = ((a << 5 | a >>> 27) >>> 0) + (f >>> 0) + e + k + w[i] >>> 0;
-      e = d;
-      d = c;
-      c = (b << 30 | b >>> 2) >>> 0;
-      b = a;
-      a = t;
-    }
-    h0 = h0 + a >>> 0;
-    h1 = h1 + b >>> 0;
-    h2 = h2 + c >>> 0;
-    h3 = h3 + d >>> 0;
-    h4 = h4 + e >>> 0;
-  }
-  const out = new Uint8Array(20);
-  const outView = new DataView(out.buffer);
-  outView.setUint32(0, h0);
-  outView.setUint32(4, h1);
-  outView.setUint32(8, h2);
-  outView.setUint32(12, h3);
-  outView.setUint32(16, h4);
-  return out;
-}
-var init_flags_engine = __esm({
-  "../../core/ts/src/flags-engine.ts"() {
-  }
-});
-
 // ../../core/ts/src/launch-manifest.ts
 import Ajv2 from "ajv";
 var directiveObject, LAUNCH_MANIFEST_SCHEMA;
@@ -36233,6 +36294,23 @@ function createDevServer(opts = {}) {
           const k = readKit(kitM[1]);
           return k ? sendJson(res, 200, k, { "access-control-allow-origin": "*" }) : sendJson(res, 404, { error: "unknown_kit", id: kitM[1] }, { "access-control-allow-origin": "*" });
         }
+        const flagAssignM = /^\/v1\/flags\/([^/?]+)\/assignments(?:\?|$)/.exec(url);
+        if (flagAssignM && (req.method === "GET" || req.method === "HEAD")) {
+          await state.flagSync.refresh(state.app?.dir, state.flagStore, Date.now());
+          const ours = flagAssignM[1] === state.appName;
+          const answer = flagAssignmentsResponse(
+            new Request(`http://dev-server${url}`, {
+              method: req.method,
+              headers: typeof req.headers["if-none-match"] === "string" ? { "if-none-match": req.headers["if-none-match"] } : {}
+            }),
+            flagAssignM[1],
+            ours ? state.flagStore.list() : [],
+            ours ? currentFlagConfig(state)?.overrides : void 0
+          );
+          res.writeHead(answer.status, { ...Object.fromEntries(answer.headers), "access-control-allow-origin": "*" });
+          res.end(answer.status === 200 && req.method === "GET" ? await answer.text() : void 0);
+          return;
+        }
         if (url.startsWith("/v1/revocations") && req.method === "GET") {
           let revoked = [];
           if (state.app) {
@@ -36455,6 +36533,7 @@ var init_src6 = __esm({
     init_wix_gateway();
     init_wix_member_login();
     init_wix_bridge();
+    init_flag_assignments();
     init_images();
     init_l10n();
     init_l10n_catalog();
@@ -49467,7 +49546,7 @@ var init_wix_member_auth = __esm({
 
 // ../../core/serve/src/server.ts
 function json3(status, body, headers2 = {}) {
-  return new Response(JSON.stringify(body), { status, headers: { "content-type": JSON_CT, ...headers2 } });
+  return new Response(JSON.stringify(body), { status, headers: { "content-type": JSON_CT2, ...headers2 } });
 }
 function isCookieAuthorizedPath(path2) {
   return path2 === "/v1/__webwix/call" || path2 === "/v1/owner" || path2.startsWith("/v1/owner/") || path2 === "/v1/__webwix/identity" || path2 === "/v1/__webwix/login" || path2 === "/v1/__webwix/register" || path2 === "/v1/__webwix/logout" || path2 === MEMBER_CALLBACK_PATH;
@@ -49627,7 +49706,7 @@ ${releaseId}`;
     if (request.headers.get("if-none-match") === etag) {
       return new Response(null, { status: 304, headers: { etag, "cache-control": cache, ...vary } });
     }
-    return new Response(body, { status: 200, headers: { "content-type": JSON_CT, etag, "cache-control": cache, ...vary } });
+    return new Response(body, { status: 200, headers: { "content-type": JSON_CT2, etag, "cache-control": cache, ...vary } });
   }
   async function authorizePinnedRead(request, url, app, releaseId, screenId) {
     const denied = await checkPinnedRead({
@@ -49822,7 +49901,7 @@ ${releaseId}`;
         });
       }
       if ((request.method === "GET" || request.method === "HEAD") && path2 === "/v1/__webwix/identity") {
-        const headers2 = { "content-type": JSON_CT, "cache-control": "no-store" };
+        const headers2 = { "content-type": JSON_CT2, "cache-control": "no-store" };
         if (request.method === "HEAD") return new Response(null, { status: 200, headers: headers2 });
         const webwixDirect = opts.webwixDirect ? await opts.webwixDirect() === true : opts.webwixBridge !== false;
         if (memberAuthOn()) {
@@ -50050,7 +50129,7 @@ ${releaseId}`;
         }
         return new Response(listBody, {
           status: 200,
-          headers: { "content-type": JSON_CT, ...listHeaders }
+          headers: { "content-type": JSON_CT2, ...listHeaders }
         });
       }
       if (path2 === "/v1/templates") {
@@ -50107,7 +50186,7 @@ ${releaseId}`;
         }
         return new Response(bytes2, {
           status: 200,
-          headers: { "content-type": JSON_CT, etag, ...cache, "x-himalaya-app": app }
+          headers: { "content-type": JSON_CT2, etag, ...cache, "x-himalaya-app": app }
         });
       }
       if (path2 === "/v1/authoring-docs" || /^\/v1\/authoring-docs\/(spec|mobile-ux)$/.test(path2)) {
@@ -50372,7 +50451,7 @@ ${releaseId}`;
           if (request.headers.get("if-none-match") === etag2) return new Response(null, { status: 304, headers: headers2 });
           const body2 = await pinnedBody(app, meta2.descriptorHash, () => store.getScreen(app, screenId));
           if (!body2) return json3(404, { error: "screen_not_found", screenId });
-          return new Response(body2, { status: 200, headers: { "content-type": JSON_CT, ...headers2, "x-himalaya-app": app } });
+          return new Response(body2, { status: 200, headers: { "content-type": JSON_CT2, ...headers2, "x-himalaya-app": app } });
         }
         const m = await manifest(app);
         const meta = m?.screens[screenId];
@@ -50385,7 +50464,7 @@ ${releaseId}`;
         if (!body) return json3(404, { error: "screen_not_found", screenId });
         return new Response(body, {
           status: 200,
-          headers: { "content-type": JSON_CT, etag, "cache-control": DOC_CACHE_CONTROL, "x-himalaya-app": app }
+          headers: { "content-type": JSON_CT2, etag, "cache-control": DOC_CACHE_CONTROL, "x-himalaya-app": app }
         });
       }
       if (path2 === "/v1/widgets") {
@@ -50413,7 +50492,7 @@ ${releaseId}`;
         if (!body) return json3(404, { error: "widget_not_found", widgetId });
         return new Response(body, {
           status: 200,
-          headers: { "content-type": JSON_CT, etag, "cache-control": cache, ...vary, "x-himalaya-app": app }
+          headers: { "content-type": JSON_CT2, etag, "cache-control": cache, ...vary, "x-himalaya-app": app }
         });
       }
       return json3(404, { error: "not_found" });
@@ -50440,7 +50519,7 @@ ${releaseId}`;
     return withCors(request, response);
   };
 }
-var JSON_CT;
+var JSON_CT2;
 var init_server = __esm({
   "../../core/serve/src/server.ts"() {
     init_sha256();
@@ -50451,7 +50530,7 @@ var init_server = __esm({
     init_package_share();
     init_wix_bridge();
     init_wix_member_auth();
-    JSON_CT = "application/json; charset=utf-8";
+    JSON_CT2 = "application/json; charset=utf-8";
   }
 });
 
@@ -50632,6 +50711,8 @@ function makeRunHandler(opts) {
         { "cache-control": "max-age=30" }
       );
     }
+    const flagAssign = FLAG_ASSIGNMENTS_PATH.exec(path2);
+    if (flagAssign) return flagAssignmentsResponse(request, flagAssign[1], []);
     if (path2.startsWith("/v1/flags/")) {
       return json4(200, { app: opts.app, definitions: {} }, { "cache-control": "no-store" });
     }
@@ -50703,6 +50784,7 @@ var json4;
 var init_run_handler = __esm({
   "../../core/serve/src/run-handler.ts"() {
     init_server();
+    init_flag_assignments();
     init_preview2();
     init_himi_package();
     json4 = (status, body, headers2 = {}) => new Response(JSON.stringify(body), {
@@ -50841,21 +50923,21 @@ var init_preview_assets_generated = __esm({
   "../../packages/serve/src/preview-assets.generated.ts"() {
     init_preview_assets_format();
     PREVIEW_ASSET_MANIFEST = [
-      { key: "assets/index-C8FaHVmV.js", contentType: "application/javascript; charset=utf-8", offset: 8, length: 1052014, sha256: "607f0eff78c1f286d1d94f6d6c08868e2deec8d39ace8176b374f0117026998a" },
-      { key: "fonts/Roboto-LICENSE.txt", contentType: "application/octet-stream", offset: 1052022, length: 4610, sha256: "994062dd7af4186a739de55dd9e151c63b6301f8e2cbafc608d35c2e87da0cd2" },
-      { key: "fonts/Roboto-Variable.ttf", contentType: "font/ttf", offset: 1056632, length: 488584, sha256: "d7598e12c5dbef095ff8272cfc55da0250bd07fbdecbac8a530b9b277872a134" },
-      { key: "fonts/WixMadeforDisplay-Bold.ttf", contentType: "font/ttf", offset: 1545216, length: 90924, sha256: "ec4c7d63772d980d6e147b2df6215fd2737e4b04cebe0cf7e11dc695fb63cdcf" },
-      { key: "fonts/WixMadeforDisplay-ExtraBold.ttf", contentType: "font/ttf", offset: 1636140, length: 90984, sha256: "bf4c16a2774edd38a921edf3099469866cd74c094fd596f3fa4e81f54a04dfaa" },
-      { key: "fonts/WixMadeforDisplay-Medium.ttf", contentType: "font/ttf", offset: 1727124, length: 90980, sha256: "368faca44fb9f7207e4af784e94750b1ee59c1098b8689e0f4a918926f244fb5" },
-      { key: "fonts/WixMadeforDisplay-Regular.ttf", contentType: "font/ttf", offset: 1818104, length: 90872, sha256: "97ed8f1a6772abe26e3d8af5cecfc4b02faa94497d585b0398b5053b739a70c1" },
-      { key: "fonts/WixMadeforDisplay-SemiBold.ttf", contentType: "font/ttf", offset: 1908976, length: 90980, sha256: "642feab8a48ddf6c7a89d7c2a7c0edfa0e6e773f671287e460e222703563191e" },
-      { key: "fonts/WixMadeforText-Bold.ttf", contentType: "font/ttf", offset: 1999956, length: 108636, sha256: "37c179b4fefb63ea9637322b84583a2df53aa226c150294eea1675c14b1b8e29" },
-      { key: "fonts/WixMadeforText-ExtraBold.ttf", contentType: "font/ttf", offset: 2108592, length: 109084, sha256: "62e2fe4718129f36ecdb0ae4de385bd6b81ecc876146447167c6c140fad699a9" },
-      { key: "fonts/WixMadeforText-Medium.ttf", contentType: "font/ttf", offset: 2217676, length: 109048, sha256: "4ecf270136af928612c76fe4ebade91d8156975e5ea4c0cf9225501dd1788e02" },
-      { key: "fonts/WixMadeforText-Regular.ttf", contentType: "font/ttf", offset: 2326724, length: 107700, sha256: "dee56f09fd3efc127c1ea95557edc74110c1460a46287da36e0af25efd341ef5" },
-      { key: "fonts/WixMadeforText-SemiBold.ttf", contentType: "font/ttf", offset: 2434424, length: 88108, sha256: "dced97a77624bc5f8b1ae65850360908297f4588e09feb6f22792d29dc7e765b" },
-      { key: "index.html", contentType: "text/html; charset=utf-8", offset: 2522532, length: 4947, sha256: "3fd26f396a5b472e603185fb99d5b905f37b98615b2bf95456e4e9b03ae05429" },
-      { key: "t5-frame.html", contentType: "text/html; charset=utf-8", offset: 2527479, length: 17209, sha256: "dffc9718e2faa63ae2cc919e0a842f585ed565aaaa7c53778e90379442c731b6" }
+      { key: "assets/index-DT6bRpY_.js", contentType: "application/javascript; charset=utf-8", offset: 8, length: 1055972, sha256: "3a52c8395a6509cfe2cae8036024b987cd3361095ff5450bfd7a9efa0123850b" },
+      { key: "fonts/Roboto-LICENSE.txt", contentType: "application/octet-stream", offset: 1055980, length: 4610, sha256: "994062dd7af4186a739de55dd9e151c63b6301f8e2cbafc608d35c2e87da0cd2" },
+      { key: "fonts/Roboto-Variable.ttf", contentType: "font/ttf", offset: 1060590, length: 488584, sha256: "d7598e12c5dbef095ff8272cfc55da0250bd07fbdecbac8a530b9b277872a134" },
+      { key: "fonts/WixMadeforDisplay-Bold.ttf", contentType: "font/ttf", offset: 1549174, length: 90924, sha256: "ec4c7d63772d980d6e147b2df6215fd2737e4b04cebe0cf7e11dc695fb63cdcf" },
+      { key: "fonts/WixMadeforDisplay-ExtraBold.ttf", contentType: "font/ttf", offset: 1640098, length: 90984, sha256: "bf4c16a2774edd38a921edf3099469866cd74c094fd596f3fa4e81f54a04dfaa" },
+      { key: "fonts/WixMadeforDisplay-Medium.ttf", contentType: "font/ttf", offset: 1731082, length: 90980, sha256: "368faca44fb9f7207e4af784e94750b1ee59c1098b8689e0f4a918926f244fb5" },
+      { key: "fonts/WixMadeforDisplay-Regular.ttf", contentType: "font/ttf", offset: 1822062, length: 90872, sha256: "97ed8f1a6772abe26e3d8af5cecfc4b02faa94497d585b0398b5053b739a70c1" },
+      { key: "fonts/WixMadeforDisplay-SemiBold.ttf", contentType: "font/ttf", offset: 1912934, length: 90980, sha256: "642feab8a48ddf6c7a89d7c2a7c0edfa0e6e773f671287e460e222703563191e" },
+      { key: "fonts/WixMadeforText-Bold.ttf", contentType: "font/ttf", offset: 2003914, length: 108636, sha256: "37c179b4fefb63ea9637322b84583a2df53aa226c150294eea1675c14b1b8e29" },
+      { key: "fonts/WixMadeforText-ExtraBold.ttf", contentType: "font/ttf", offset: 2112550, length: 109084, sha256: "62e2fe4718129f36ecdb0ae4de385bd6b81ecc876146447167c6c140fad699a9" },
+      { key: "fonts/WixMadeforText-Medium.ttf", contentType: "font/ttf", offset: 2221634, length: 109048, sha256: "4ecf270136af928612c76fe4ebade91d8156975e5ea4c0cf9225501dd1788e02" },
+      { key: "fonts/WixMadeforText-Regular.ttf", contentType: "font/ttf", offset: 2330682, length: 107700, sha256: "dee56f09fd3efc127c1ea95557edc74110c1460a46287da36e0af25efd341ef5" },
+      { key: "fonts/WixMadeforText-SemiBold.ttf", contentType: "font/ttf", offset: 2438382, length: 88108, sha256: "dced97a77624bc5f8b1ae65850360908297f4588e09feb6f22792d29dc7e765b" },
+      { key: "index.html", contentType: "text/html; charset=utf-8", offset: 2526490, length: 4947, sha256: "a9dcd2ec33b7ea5cee46b0a1f37f926678dd6939b442e3d50bff0101f0fe63ba" },
+      { key: "t5-frame.html", contentType: "text/html; charset=utf-8", offset: 2531437, length: 17209, sha256: "dffc9718e2faa63ae2cc919e0a842f585ed565aaaa7c53778e90379442c731b6" }
     ];
   }
 });

package/guides/sdk-reference.json

@@ -3463,13 +3463,13 @@
         "name": "experiments",
         "kind": "const",
         "jsdoc": "",
-        "decl": "export const experiments = {\n  /** Conduct a Petri experiment; returns the resolved variant (or `fallback`). */\n  async conduct(spec: string, fallback = \"false\"): Promise<ExperimentResult> {\n    const resolved = await conductCached(\"experiments\", spec, fallback, () => resolveExperiment(spec, fallback));\n    return { spec, variant: resolved ?? fallback };\n  },\n  /** Boolean convenience — true when the variant is exactly \"true\". */\n  async isEnabled(spec: string): Promise<boolean> {\n    return (await experiments.conduct(spec, \"false\")).variant === \"true\";\n  },\n  /** Report A/B exposure for `spec`/`variant` — emits the platform's\n   *  `experiment_exposed` telemetry so outcome events attribute to the variant.\n   *  (Symphony relies on server-side conduction; this is the generalized app-side\n   *  exposure hook.) */\n  async exposure(spec: string, variant: string): Promise<{ ok: boolean }> {\n    const r = await call<{ ok?: boolean }>(\"experimentsExposure\", { spec, variant });\n    return { ok: r?.ok ?? false };\n  },\n};"
+        "decl": "export const experiments = {\n  /** The app's served variant for `spec` (`himi flags`), or `fallback` when none is assigned. */\n  async conduct(spec: string, fallback = \"false\"): Promise<ExperimentResult> {\n    const resolved = await conductCached(\"experiments\", spec, fallback, () => resolveExperiment(spec, fallback));\n    return { spec, variant: resolved ?? fallback };\n  },\n  /** Boolean convenience — true when the variant is exactly \"true\". */\n  async isEnabled(spec: string): Promise<boolean> {\n    return (await experiments.conduct(spec, \"false\")).variant === \"true\";\n  },\n  /** Report A/B exposure for `spec`/`variant` — emits the platform's\n   *  `experiment_exposed` telemetry so outcome events attribute to the variant.\n   *  (Symphony relies on server-side conduction; this is the generalized app-side\n   *  exposure hook.) */\n  async exposure(spec: string, variant: string): Promise<{ ok: boolean }> {\n    const r = await call<{ ok?: boolean }>(\"experimentsExposure\", { spec, variant });\n    return { ok: r?.ok ?? false };\n  },\n};"
       },
       {
         "name": "flags",
         "kind": "const",
         "jsdoc": "",
-        "decl": "export const flags = {\n  /** Whether a Petri feature-toggle spec is ON. */\n  async isEnabled(spec: string, fallback = false): Promise<boolean> {\n    const resolved = await conductCached(\"flags\", spec, String(fallback), () => resolveFlag(spec, fallback));\n    if (resolved === null) return fallback;\n    return resolved === \"true\" || resolved === \"new\";\n  },\n  /** A toggle's raw value (variant string) for non-boolean specs. */\n  async value(spec: string, fallback = \"\"): Promise<string> {\n    const r = await call<{ value?: string }>(\"flagsValue\", { spec, fallback });\n    return r?.value ?? fallback;\n  },\n  /** All known toggle states (dev/diagnostic). */\n  async all(): Promise<Record<string, string>> {\n    const r = await call<{ flags?: Record<string, string> }>(\"flagsAll\");\n    return r?.flags && typeof r.flags === \"object\" ? r.flags : {};\n  },\n};"
+        "decl": "export const flags = {\n  /** Whether the app's served flag `spec` is ON (variant `on`/`true`/`new`), else `fallback`. */\n  async isEnabled(spec: string, fallback = false): Promise<boolean> {\n    const resolved = await conductCached(\"flags\", spec, String(fallback), () => resolveFlag(spec, fallback));\n    if (resolved === null) return fallback;\n    return resolved === \"true\" || resolved === \"new\";\n  },\n  /** A toggle's raw value (variant string) for non-boolean specs. */\n  async value(spec: string, fallback = \"\"): Promise<string> {\n    const r = await call<{ value?: string }>(\"flagsValue\", { spec, fallback });\n    return r?.value ?? fallback;\n  },\n  /** All known toggle states (dev/diagnostic). */\n  async all(): Promise<Record<string, string>> {\n    const r = await call<{ flags?: Record<string, string> }>(\"flagsAll\");\n    return r?.flags && typeof r.flags === \"object\" ? r.flags : {};\n  },\n};"
       },
       {
         "name": "i18n",
@@ -3487,13 +3487,13 @@
         "name": "ping",
         "kind": "const",
         "jsdoc": "",
-        "decl": "export const ping = {\n  /** Register the device's push token with Wix Ping. */\n  async register(): Promise<PingRegistration> {\n    if (isMemberReal(\"ping\")) {\n      try {\n        const r = await realWix<{ registered?: boolean; token?: string }>(\"POST\", \"/_api/ping-webapp/v1/registrations\", {});\n        if (r && typeof r.registered === \"boolean\") return { registered: r.registered, token: r.token ?? \"\" };\n      } catch { /* fall through to the dev seam */ }\n    }\n    const r = await call<{ registered?: boolean; token?: string }>(\"pingRegister\");\n    return { registered: r?.registered ?? false, token: r?.token ?? \"\" };\n  },\n  /** Current Ping registration status (no network). */\n  async status(): Promise<PingRegistration> {\n    if (isMemberReal(\"ping\")) {\n      try {\n        const r = await realWix<{ registered?: boolean; token?: string }>(\"GET\", \"/_api/ping-webapp/v1/registrations\");\n        if (r && typeof r.registered === \"boolean\") return { registered: r.registered, token: r.token ?? \"\" };\n      } catch { /* fall through to the dev seam */ }\n    }\n    const r = await call<{ registered?: boolean; token?: string }>(\"pingStatus\");\n    return { registered: r?.registered ?? false, token: r?.token ?? \"\" };\n  },\n};"
+        "decl": "export const ping = {\n  /** Register the device's push token with Wix Ping. */\n  async register(): Promise<PingRegistration> {\n    const r = await call<{ registered?: boolean; token?: string }>(\"pingRegister\");\n    return { registered: r?.registered ?? false, token: r?.token ?? \"\" };\n  },\n  /** Current Ping registration status (no network). */\n  async status(): Promise<PingRegistration> {\n    const r = await call<{ registered?: boolean; token?: string }>(\"pingStatus\");\n    return { registered: r?.registered ?? false, token: r?.token ?? \"\" };\n  },\n};"
       },
       {
         "name": "deeplink",
         "kind": "const",
         "jsdoc": "",
-        "decl": "export const deeplink = {\n  /** Resolve a deferred (post-install) deep link via Wix Jot. Null when none. */\n  async resolveDeferred(): Promise<{ link: string | null }> {\n    if (isMemberReal(\"deeplink\")) {\n      try {\n        const r = await realWix<{ link?: string }>(\"GET\", \"/_api/app-link-server/v1/deferred-deep-link\");\n        if (r) return { link: r.link && r.link.length > 0 ? r.link : null };\n      } catch { /* fall through to the dev seam */ }\n    }\n    const r = await call<{ link?: string }>(\"deeplinkResolveDeferred\");\n    return { link: r?.link && r.link.length > 0 ? r.link : null };\n  },\n};"
+        "decl": "export const deeplink = {\n  /** Resolve a deferred (post-install) deep link via Wix Jot. Null when none. */\n  async resolveDeferred(): Promise<{ link: string | null }> {\n    const r = await call<{ link?: string }>(\"deeplinkResolveDeferred\");\n    return { link: r?.link && r.link.length > 0 ? r.link : null };\n  },\n};"
       },
       {
         "name": "SignedInstanceStatus",

package/guides/wix-platform-usage.md

@@ -26,7 +26,7 @@ import { bi, experiments, flags, i18n, auth, monitoring } from "@himalaya/wix-pl
 await bi.pageView("home");
 await bi.click("cta_start", "home");
 
-// experiments (Petri) / flags
+// experiments / flags — the app's served flags (`himi flags`), never Wix Petri
 const variant = await experiments.conduct("specs.ai", "false"); // → { spec, variant }
 if (await flags.isEnabled("specs.newCheckout")) { /* … */ }
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@wix/himalaya-cli",
-  "version": "0.1045.0",
+  "version": "0.1046.0",
   "type": "module",
   "description": "himi — the Himalaya authoring CLI. Build a Tier-5 content package on your own machine, push it to the production serve as a draft, preview it on web + Himi Player, and read worker logs back — the remote dev loop. Wraps @himalaya/serve-cli for transport.",
   "keywords": [
@@ -65,5 +65,5 @@
       "artifactId": "himalaya-cli"
     }
   },
-  "falconPackageHash": "0a575418cdf281d15de4e62af6654a6d47a91cf26467dad0a437484b"
+  "falconPackageHash": "920a07437cf238c0bf1e34b799a4fe38573b57c6da92541fc2836079"
 }