@wix/himalaya-cli 0.1081.0 → 0.1083.0

package/dist/cli.mjs

@@ -50205,7 +50205,12 @@ async function signature(body, secret) {
 function isClaims(value) {
   if (!value || typeof value !== "object") return false;
   const c = value;
-  return c.v === PREVIEW_TOKEN_VERSION && typeof c.sub === "string" && !!c.sub && typeof c.app === "string" && !!c.app && typeof c.releaseId === "string" && !!c.releaseId && (c.screenId === void 0 || typeof c.screenId === "string") && typeof c.source === "string" && typeof c.iat === "number" && Number.isInteger(c.iat) && typeof c.exp === "number" && Number.isInteger(c.exp);
+  return c.v === PREVIEW_TOKEN_VERSION && typeof c.sub === "string" && !!c.sub && typeof c.app === "string" && !!c.app && typeof c.releaseId === "string" && !!c.releaseId && (c.screenId === void 0 || typeof c.screenId === "string") && typeof c.source === "string" && typeof c.iat === "number" && Number.isInteger(c.iat) && typeof c.exp === "number" && Number.isInteger(c.exp) && // A follow token carries BOTH claims or neither. Half of one is malformed — never a plain
+  // preview token, which is what dropping the unrecognised half would turn it into.
+  (c.grant === void 0 && c.gen === void 0 || isFollowClaimPair(c.grant, c.gen));
+}
+function isFollowClaimPair(grant, gen) {
+  return typeof grant === "string" && FOLLOW_GRANT_ID_RE.test(grant) && typeof gen === "number" && Number.isInteger(gen) && gen >= 1;
 }
 async function verifyPreviewToken(input) {
   const [body, sig, extra] = input.token.split(".");
@@ -50225,7 +50230,7 @@ async function verifyPreviewToken(input) {
   }
   return { ok: true, claims };
 }
-var SUBTLE_ALGO, PREVIEW_TOKEN_VERSION, DEFAULT_PREVIEW_TOKEN_TTL_SECONDS, WEB_PREVIEW_TOKEN_TTL_SECONDS;
+var SUBTLE_ALGO, PREVIEW_TOKEN_VERSION, DEFAULT_PREVIEW_TOKEN_TTL_SECONDS, WEB_PREVIEW_TOKEN_TTL_SECONDS, FOLLOW_GRANT_ID_RE;
 var init_preview_token = __esm({
   "../../core/serve-runtime/src/preview-token.ts"() {
     init_site_lease();
@@ -50234,6 +50239,7 @@ var init_preview_token = __esm({
     PREVIEW_TOKEN_VERSION = 1;
     DEFAULT_PREVIEW_TOKEN_TTL_SECONDS = 5 * 60;
     WEB_PREVIEW_TOKEN_TTL_SECONDS = 45 * 60;
+    FOLLOW_GRANT_ID_RE = /^[A-Za-z0-9_-]{22}$/;
   }
 });
 
@@ -53664,14 +53670,21 @@ var init_assets = __esm({
 
 // ../../core/serve-runtime/src/pinned-read.ts
 async function checkPinnedRead(input) {
-  const { secret, token, app, releaseId, screenId, authorizePreview } = input;
+  const { secret, token, app, releaseId, screenId, authorizePreview, authorizeFollow } = input;
   if (!secret) return authorizePreview ? { status: 503, body: { error: "preview_token_unavailable" } } : null;
   if (!token) return await input.isPublic() ? null : { status: 401, body: { error: "preview_token_required", app, releaseId } };
-  const verified = await verifyPreviewToken({ token, secret, app, releaseId, screenId });
+  const verified = await verifyPreviewToken({ token, secret, app, releaseId, screenId, nowSeconds: input.nowSeconds });
   if (verified.ok) {
     if (authorizePreview ? !await authorizePreview(verified.claims) : !!verified.claims.siteLease) {
       return { status: 403, body: { error: "site_preview_forbidden" } };
     }
+    if (verified.claims.grant !== void 0) {
+      if (!authorizeFollow) return { status: 503, body: { error: "follow_token_unverifiable", app, releaseId } };
+      const decision = await authorizeFollow(verified.claims);
+      if (!decision.ok) {
+        return { status: decision.status, body: { error: decision.error, ...decision.reason ? { reason: decision.reason } : {}, app, releaseId } };
+      }
+    }
     return null;
   }
   return {
@@ -54056,7 +54069,8 @@ ${releaseId}`;
       releaseId,
       screenId,
       isPublic: async () => (await manifest(app))?.releaseId === releaseId || await isRingRelease(app, releaseId),
-      authorizePreview: opts.authorizePreview
+      authorizePreview: opts.authorizePreview,
+      authorizeFollow: opts.authorizeFollow
     });
     return denied && json4(denied.status, denied.body);
   }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@wix/himalaya-cli",
-  "version": "0.1081.0",
+  "version": "0.1083.0",
   "type": "module",
   "description": "himi — the Himalaya authoring CLI. Build a Tier-5 content package on your own machine, push it to the production serve as a draft, preview it on web + Himi Player, and read worker logs back — the remote dev loop. Wraps @himalaya/serve-cli for transport.",
   "keywords": [
@@ -67,5 +67,5 @@
       "artifactId": "himalaya-cli"
     }
   },
-  "falconPackageHash": "fabad058e08298bebcb3bacb89f82255ed6b92c6ee395d7b444c7fd3"
+  "falconPackageHash": "b9cfb5bf9ce91e18a8e397fefd9657af6a1089dbcd95913b0cd47a28"
 }