@wix/himalaya-cli 0.1086.0 → 0.1088.0

package/dist/authoring-runtime/node_modules/@wix/himalaya/dist/_types/core/dev-server/src/app-config.d.ts

@@ -58,6 +58,7 @@ export interface NavigationConfig {
     sidebar?: SidebarConfig;
     navLogicBundle?: import("@wix/himalaya/core").LogicBundleRef;
     appIconBadgeSources?: string[];
+    site?: import("@wix/himalaya/core").SiteNavConfig;
     /** Signed release allowlist for contained browser Tier-5 `_stream` requests. */
     streamPolicy?: StreamPolicy;
     splash?: SplashConfig;

package/dist/authoring-runtime/node_modules/@wix/himalaya/dist/_types/core/dev-server/src/app-module.d.ts

@@ -211,6 +211,9 @@ export interface DerivedAppMeta {
     /** Forwarded from AppConfig.navigation.appIconBadgeSources — RFC 0010 (app-icon
      *  amendment). Which nav badges also drive the OS app-icon badge. */
     appIconBadgeSources?: string[];
+    /** Forwarded from AppConfig.navigation.site — RFC 0062 site routing: which incoming URLs
+     *  are the site's own pages, and the screen each one opens in. */
+    site?: import("@wix/himalaya/core").SiteNavConfig;
     /** Forwarded from AppConfig.navigation.streamPolicy — the signed browser stream allowlist. */
     streamPolicy?: import("@wix/himalaya/core").StreamPolicy;
     /** Forwarded from AppConfig.`splash` — the in-app splash surface. NOTE the

package/dist/authoring-runtime/node_modules/@wix/himalaya/dist/_types/core/ts/src/schema.d.ts

@@ -2503,10 +2503,35 @@ export interface NavigationConfig {
     appIconBadgeSources?: string[];
     /** Signed release allowlist for contained browser Tier-5 `_stream` requests. */
     streamPolicy?: StreamPolicy;
+    /** RFC 0062 (site routing) — a site shell's URL space. A push tap, app link or
+     *  custom-scheme link whose URL is an https page on one of `site.origins` opens the
+     *  screen owning its path, and that screen's WebView loads the full URL. Absent ⇒
+     *  links resolve as before. Build it with `siteNavConfig()` from
+     *  `@himalaya/core/site-shell`; resolution is `resolveSiteLink()`. */
+    site?: SiteNavConfig;
     scheme: string;
     deepLinkPatterns: DeepLinkPattern[];
     linkableScreens: LinkableScreen[];
 }
+/** RFC 0062 — how an incoming site URL finds its screen. */
+export interface SiteNavConfig {
+    /** https PATH BOUNDARIES (`https://owner.wixsite.com/my-shop/`), the same form as the
+     *  site's WebView `allowedOrigins`: exact host, and the path is the boundary or under it. */
+    origins: string[];
+    /** Longest path-segment prefix wins, on the path RELATIVE to the matched origin.
+     *  `/` matches the home page only. */
+    routes: SiteRoute[];
+    /** The screen an on-site URL no route owns opens in. `""`/absent ⇒ the `/` route's
+     *  screen; no `/` route either ⇒ the link does not resolve. */
+    fallbackScreenId?: string;
+}
+/** One entry of {@link SiteNavConfig.routes}. */
+export interface SiteRoute {
+    /** Site-relative path prefix: `"/"`, `"/shop"`, `"/blog"`. */
+    path: string;
+    /** The screen whose WebView loads the URL. */
+    screenId: string;
+}
 /** RFC 0051 — one surface's nav projection. Every field is optional-by-emptiness,
  *  so a partial override (only `navKind`, say) inherits the rest. */
 export interface SurfaceNavConfig {

package/dist/authoring-runtime/node_modules/@wix/himalaya/dist/_types/core/ts/src/site-shell.d.ts

@@ -1,5 +1,5 @@
 import type { IconName } from "./icon-catalog.generated.js";
-import type { DrawerItem, NavTabItem, ScreenDescriptor, WebViewConfig } from "./schema.js";
+import type { DrawerItem, LinkableScreen, NavTabItem, ScreenDescriptor, SiteNavConfig, WebViewConfig } from "./schema.js";
 /** Which hosting platform the site runs on. Selects origin allow-lists (and, once
  *  RFC 0062 phase 2 lands, the binary-shipped page adapter). */
 export type SiteKind = "wix" | "base44";
@@ -53,6 +53,10 @@ export interface SiteShellConfig {
 export declare const SITE_SHELL_MAX_TABS = 4;
 /** Screen-id prefix for every site page (`site_<page.id>`). */
 export declare const SITE_SCREEN_PREFIX = "site_";
+/** The screen an on-site link no page owns opens in (a product page, a blog post): one
+ *  WebView pushed over the Home tab that loads the link's URL. Deliberately not `site_<id>`
+ *  — `page` is a legal page id, so the prefix alone would collide; `assertSitePage` reserves it. */
+export declare const SITE_PAGE_SCREEN_ID = "site_page";
 /** Identity-provider origins a hosted site's OAuth hops need to stay in-WebView.
  *  Moved here from `apps/demo-app/dev/live.ts` so every shell shares one list. */
 export declare const OAUTH_IDP_ORIGINS: readonly string[];
@@ -99,8 +103,42 @@ export declare function resolveSiteChrome(chrome: SiteChrome | undefined): Requi
 export declare function siteWebViewPreset(site: Pick<SiteShellConfig, "origin" | "kind" | "chrome">): WebViewConfig;
 /** The Tier-3 descriptor for one site page. */
 export declare function defineSiteTab(site: SiteShellConfig, page: SitePage): ScreenDescriptor;
-/** Every site page's descriptor, keyed by screen id. */
+/** The {@link SITE_PAGE_SCREEN_ID} descriptor. Its `url` is the site's home page — what it
+ *  shows if it is ever opened with no link; a routed link replaces it natively (RFC 0062 site
+ *  routing). Not kept alive: each routed link mounts it fresh, so it never shows the previous
+ *  link's page while the new one loads. */
+export declare function defineSitePageScreen(site: SiteShellConfig): ScreenDescriptor;
+/** Every site page's descriptor plus the {@link SITE_PAGE_SCREEN_ID} fallback, keyed by
+ *  screen id. */
 export declare function siteScreens(site: SiteShellConfig): Record<string, ScreenDescriptor>;
+/** `NavigationConfig.site` for a site shell (RFC 0062 site routing): the site's origins, one
+ *  route per page, and {@link SITE_PAGE_SCREEN_ID} as the fallback. Feed it to
+ *  `defineApp({ navigation: { site } })`; every platform resolves links against it. */
+export declare function siteNavConfig(site: SiteShellConfig): SiteNavConfig;
+/** `navigation.linkableScreens` for a site shell: every page (tab pages carry their `tabId`, so
+ *  a link selects the tab) plus the fallback screen, which lands on the Home tab. */
+export declare function siteLinkableScreens(site: SiteShellConfig): LinkableScreen[];
+/** Where an incoming site link goes. `url` is the link itself, normalized — the page the
+ *  screen's WebView loads. */
+export interface SiteLinkTarget {
+    screenId: string;
+    url: string;
+}
+/**
+ * Resolve an incoming URL against `NavigationConfig.site` — the TS reference for the native
+ * `SiteRouting.resolve` on iOS and Android; all three run core/schema/fixtures/site-route-cases.json.
+ *
+ *  1. https only, no credentials, and on one of `site.origins` (exact host, case-insensitive; an
+ *     explicit `:443` is the default port; the path is the origin's boundary or under it).
+ *     Anything else is not a site link → `null`.
+ *  2. The path relative to that origin picks the route with the LONGEST segment prefix, compared
+ *     segment by segment after percent-decoding. `/` matches the home page only.
+ *  3. No route → `fallbackScreenId`, else the `/` route, else `null`.
+ *
+ * A path carrying a `.`/`..` segment is refused: a WebView resolves it, and on a free
+ * `<user>.wixsite.com` host `/my-site/../other` is somebody else's site.
+ */
+export declare function resolveSiteLink(url: string, site: SiteNavConfig | undefined): SiteLinkTarget | null;
 /** Tab-bar and drawer items for a site. Pages beyond {@link SITE_SHELL_MAX_TABS} that
  *  asked for a tab fall into the drawer rather than disappearing. */
 export declare function siteNav(site: SiteShellConfig): {

package/dist/authoring-runtime/node_modules/@wix/himalaya/dist/core.mjs

@@ -7579,6 +7579,7 @@ function validateConfigShape(config) {
         );
       }
     }
+    if (nav.site !== void 0) validateSiteNav(nav.site);
   }
   if (config.splash) {
     validateSplash(config.splash, config.designTokens?.colors, config.designTokensPath);
@@ -7603,6 +7604,33 @@ function validateConfigShape(config) {
     }
   }
 }
+function validateSiteNav(site) {
+  if (!site || typeof site !== "object" || !Array.isArray(site.origins) || !Array.isArray(site.routes)) {
+    throw new Error("defineApp: navigation.site must be { origins: string[], routes: SiteRoute[] } \u2014 build it with siteNavConfig().");
+  }
+  if (site.origins.length === 0) throw new Error("defineApp: navigation.site.origins must name at least one origin.");
+  for (const origin of site.origins) {
+    let url = null;
+    try {
+      url = new URL(origin);
+    } catch {
+      url = null;
+    }
+    if (!url || url.protocol !== "https:" || !origin.endsWith("/") || url.search || url.hash || url.username || url.port) {
+      throw new Error(
+        `defineApp: navigation.site origin "${origin}" must be an https path boundary like "https://owner.wixsite.com/my-site/".`
+      );
+    }
+  }
+  for (const route of site.routes) {
+    if (typeof route?.path !== "string" || typeof route.screenId !== "string" || !route.screenId) {
+      throw new Error('defineApp: every navigation.site route needs a string "path" and a non-empty "screenId".');
+    }
+  }
+  if (site.fallbackScreenId !== void 0 && typeof site.fallbackScreenId !== "string") {
+    throw new Error("defineApp: navigation.site.fallbackScreenId must be a string.");
+  }
+}
 var SPLASH_MIN_VISIBLE_MS_MAX = 2e3;
 var SPLASH_MAX_HOLD_MS_MAX = 8e3;
 var SPLASH_LAYOUTS = ["centered", "centeredStacked", "logoOnly"];
@@ -12987,6 +13015,7 @@ var AppRegistryClient = class {
 // ../../core/ts/src/site-shell.ts
 var SITE_SHELL_MAX_TABS = 4;
 var SITE_SCREEN_PREFIX = "site_";
+var SITE_PAGE_SCREEN_ID = "site_page";
 var OAUTH_IDP_ORIGINS = [
   "accounts.google.com",
   "*.google.com",
@@ -13099,9 +13128,98 @@ function defineSiteTab(site, page) {
     webViewConfig: { ...preset, ...page.webView ?? {} }
   };
 }
+function defineSitePageScreen(site) {
+  const preset = siteWebViewPreset(site);
+  return {
+    screenId: SITE_PAGE_SCREEN_ID,
+    renderer: "webview_native_bridge",
+    title: "",
+    url: normalizeSiteOrigin(site.origin),
+    capabilitiesRequired: [],
+    schemaVersion: 1,
+    cacheControl: { maxAge: 600, staleWhileRevalidate: 86400 },
+    webViewConfig: { ...preset, keepAlive: false }
+  };
+}
 function siteScreens(site) {
   assertSiteShellConfig(site);
-  return Object.fromEntries(site.pages.map((page) => [siteScreenId(page), defineSiteTab(site, page)]));
+  return {
+    ...Object.fromEntries(site.pages.map((page) => [siteScreenId(page), defineSiteTab(site, page)])),
+    [SITE_PAGE_SCREEN_ID]: defineSitePageScreen(site)
+  };
+}
+function siteRoutePath(path) {
+  const bare = path.trim().split(/[?#]/, 1)[0] ?? "";
+  const segs = bare.split("/").filter(Boolean);
+  return `/${segs.join("/")}`;
+}
+function siteNavConfig(site) {
+  assertSiteShellConfig(site);
+  return {
+    origins: siteAllowedOrigins(site.origin, site.kind),
+    routes: site.pages.map((page) => ({ path: siteRoutePath(page.path), screenId: siteScreenId(page) })),
+    fallbackScreenId: SITE_PAGE_SCREEN_ID
+  };
+}
+function siteLinkableScreens(site) {
+  const tabIds = new Set(siteNav(site).tabs.map((tab) => tab.id));
+  const pages = site.pages.map((page) => ({
+    screenId: siteScreenId(page),
+    isPublic: true,
+    paramKeys: [],
+    parentScreenId: "",
+    tabId: tabIds.has(page.id) ? page.id : ""
+  }));
+  return [...pages, { screenId: SITE_PAGE_SCREEN_ID, isPublic: true, paramKeys: [], parentScreenId: "", tabId: "" }];
+}
+function pathSegments(path) {
+  return path.split("/").filter(Boolean);
+}
+function decodeSegment(segment) {
+  try {
+    return decodeURIComponent(segment);
+  } catch {
+    return segment;
+  }
+}
+function resolveSiteLink(url, site) {
+  if (!site || typeof url !== "string") return null;
+  const rawPath = url.replace(/^[a-z][a-z0-9+.-]*:\/\/[^/?#]*/i, "").split(/[?#]/, 1)[0] ?? "";
+  if (rawPath.split("/").some((seg) => /^(\.|%2e){1,2}$/i.test(seg))) return null;
+  let parsed;
+  try {
+    parsed = new URL(url);
+  } catch {
+    return null;
+  }
+  if (parsed.protocol !== "https:" || parsed.username || parsed.password) return null;
+  let rel = null;
+  for (const origin of site.origins ?? []) {
+    let o;
+    try {
+      o = new URL(origin);
+    } catch {
+      continue;
+    }
+    if (o.protocol !== "https:" || o.host !== parsed.host) continue;
+    const base = o.pathname.replace(/\/+$/, "");
+    const path = parsed.pathname;
+    if (path === base || path === `${base}/` || path.startsWith(`${base}/`)) {
+      rel = path.slice(base.length) || "/";
+      break;
+    }
+  }
+  if (rel === null) return null;
+  const relSegs = pathSegments(rel).map(decodeSegment);
+  let best = null;
+  for (const route of site.routes ?? []) {
+    if (!route?.screenId) continue;
+    const segs = pathSegments(siteRoutePath(route.path ?? "")).map(decodeSegment);
+    const matches = segs.length === 0 ? relSegs.length === 0 : segs.length <= relSegs.length && segs.every((seg, i) => seg === relSegs[i]);
+    if (matches && (best === null || segs.length > best.len)) best = { screenId: route.screenId, len: segs.length };
+  }
+  const screenId = best?.screenId || site.fallbackScreenId || (site.routes ?? []).find((route) => route?.screenId && pathSegments(siteRoutePath(route.path ?? "")).length === 0)?.screenId;
+  return screenId ? { screenId, url: url.trim() } : null;
 }
 function siteNav(site) {
   assertSiteShellConfig(site);
@@ -13123,6 +13241,9 @@ function assertSitePage(page) {
   if (!page || typeof page.id !== "string" || !PAGE_ID.test(page.id)) {
     throw new Error(`site page id ${JSON.stringify(page?.id)} must match ${PAGE_ID}`);
   }
+  if (siteScreenId(page) === SITE_PAGE_SCREEN_ID) {
+    throw new Error(`site page id "page" is reserved for the ${SITE_PAGE_SCREEN_ID} fallback screen`);
+  }
   if (typeof page.title !== "string" || !page.title.trim()) {
     throw new Error(`site page ${page.id} needs a title`);
   }
@@ -13179,6 +13300,7 @@ export {
   PREVIEW_SURFACES,
   PROJECTION_SNAPSHOT_SIZE,
   RTL_LOCALES,
+  SITE_PAGE_SCREEN_ID,
   SITE_SCREEN_PREFIX,
   SITE_SHELL_MAX_TABS,
   SIZE_CLASS_BREAKPOINTS,
@@ -13216,6 +13338,7 @@ export {
   decodeLaunchParams,
   defaultMessage,
   defineApp,
+  defineSitePageScreen,
   defineSiteTab,
   effectiveFieldRule,
   errorMessageFor,
@@ -13253,6 +13376,7 @@ export {
   resolveOrientationEnvelope,
   resolveResponsiveSize,
   resolveSiteChrome,
+  resolveSiteLink,
   resolveSizeClass,
   resolveSurfaceEnvelope,
   resolveSurfaceNav,
@@ -13263,7 +13387,9 @@ export {
   shouldRevealError,
   siteAllowedOrigins,
   siteHost,
+  siteLinkableScreens,
   siteNav,
+  siteNavConfig,
   sitePageUrl,
   siteScreenId,
   siteScreens,

package/dist/authoring-runtime/node_modules/@wix/himalaya/dist/sdui.mjs

@@ -9042,6 +9042,7 @@ function deriveAppMeta(name, m, platforms = {}) {
     sidebar: config.navigation?.sidebar,
     navLogicBundle: config.navigation?.navLogicBundle,
     appIconBadgeSources: config.navigation?.appIconBadgeSources,
+    site: config.navigation?.site,
     streamPolicy: config.navigation?.streamPolicy,
     splash: config.splash,
     locale: config.locale,

package/dist/cli.mjs

@@ -19811,6 +19811,7 @@ function deriveAppMeta(name, m, platforms = {}) {
     sidebar: config.navigation?.sidebar,
     navLogicBundle: config.navigation?.navLogicBundle,
     appIconBadgeSources: config.navigation?.appIconBadgeSources,
+    site: config.navigation?.site,
     streamPolicy: config.navigation?.streamPolicy,
     splash: config.splash,
     locale: config.locale,
@@ -35361,6 +35362,7 @@ function deriveNavigationConfig(app, bundleCtx) {
     config.navLogicBundle = bundleCtx ? expandNavBundle(app.navLogicBundle, bundleCtx) : app.navLogicBundle;
   }
   if (app.appIconBadgeSources !== void 0) config.appIconBadgeSources = app.appIconBadgeSources;
+  if (app.site !== void 0) config.site = app.site;
   if (app.streamPolicy !== void 0) config.streamPolicy = app.streamPolicy;
   if (app.splash !== void 0) config.splash = app.splash;
   if (app.locale !== void 0) config.locale = app.locale;
@@ -37231,7 +37233,7 @@ var init_config2 = __esm({
       // coerce unknown `default` tags rather than failing the envelope.
       "locale"
     ]);
-    STRUCTURAL_KEYS = /* @__PURE__ */ new Set(["scheme", "deepLinkPatterns", "linkableScreens", "appLinkHosts", "streamPolicy"]);
+    STRUCTURAL_KEYS = /* @__PURE__ */ new Set(["scheme", "deepLinkPatterns", "linkableScreens", "appLinkHosts", "streamPolicy", "site"]);
     OPERATOR_ONLY_OVERLAY_KEYS = /* @__PURE__ */ new Set([
       "useProdServe",
       "prodServeBaseUrl",
@@ -48526,6 +48528,7 @@ var init_nav_lint = __esm({
       "navLogicBundle",
       "appIconBadgeSources",
       "streamPolicy",
+      "site",
       "scheme",
       "deepLinkPatterns",
       "linkableScreens"
@@ -48550,6 +48553,7 @@ var init_nav_lint = __esm({
       "navLogicBundle",
       "appIconBadgeSources",
       "streamPolicy",
+      "site",
       "scheme",
       "deepLinkPatterns",
       "linkableScreens"

package/guides/sdk-reference.json

@@ -859,7 +859,7 @@
         "name": "NavigationConfig",
         "kind": "interface",
         "jsdoc": "/** Per-app navigation/deep-link config, served OTA at GET /v1/app-config/:appName. */",
-        "decl": "export interface NavigationConfig {\n  /** Tab-bar structure (which tabs; their icons/labels/badges). */\n  tabBar?: TabBarConfig;\n  /** Slide-in drawer / hamburger-menu destinations. */\n  drawer?: DrawerConfig;\n  /** Navigation chrome the shell draws.\n   *  Omitted ⇒ \"bottomTabs\". The shell (not the descriptor) reads this. */\n  navKind?: NavKind;\n  /** Destinations for \"sidebar\" mode.\n   *  Absent ⇒ the shell derives the rail from `tabBar.items`. */\n  sidebar?: SidebarConfig;\n  /** App-level default top bar; a per-screen\n   *  `ScreenDescriptor.topBar` fully replaces it (override, not merge). */\n  topBarDefault?: TopBarConfig;\n  /** The post-OS-splash brand surface (see `SplashConfig`). Absent / not enabled\n   * ⇒ today's behavior. Operational per (live-flippable). */\n  splash?: SplashConfig;\n  /** App-level default locale. Operational per so a Hebrew (or Spanish)\n   *  branded app can pin RTL/l10n OTA without a launch flag. `default` is a\n   *  BCP-47 primary subtag; clients coerce unknown tags rather than failing the\n   *  envelope. `pin: true` skips the device/browser language; in-app `locale.set`\n   *  still wins. Absent ⇒ today's device-then-en behavior. */\n  locale?: LocaleConfig;\n  /** Effective orientations, resolved INSIDE\n   *  the binary's build-time envelope (config.ts `orientationEnvelope`). The\n   *  envelope is the ceiling and can never be OTA (iOS reads the plist before\n   *  any app code runs); this narrows within it. Always intersected with the\n   *  envelope — it can never widen it. Absent/empty ⇒ the envelope itself. */\n  orientation?: OrientationConfig;\n  /** Per-surface nav projection, keyed by catalog\n   *  surface id (`phone` | `tablet` | `desktop` | `mac` | `watch` | `wear` | `rn`).\n   *  Keyed the way `orientation` is keyed by device family and narrowed the same\n   *  way: a key outside the app's `platforms.json` envelope is DROPPED, never\n   *  honored (see `resolveSurfaceNav`). Absent key ⇒ that surface uses the default\n   *  projection, so an app that never thinks about surfaces is unaffected. */\n  surfaces?: Record<string, SurfaceNavConfig>;\n  /** The APP-LEVEL nav worker\n   *  that feeds every `*Path` binding on `NavTabItem` / `DrawerItem` /\n   *  `TopBarAction`. App-level, not a screen's worker, because chrome outlives\n   *  every screen: a cart badge must survive leaving the cart, and a flag-hidden\n   *  tab must stay hidden three pushes deep in another stack. Absent ⇒ paths stay\n   *  unresolved and the literals render — the worker enriches, it never gates. */\n  navLogicBundle?: LogicBundleRef;\n  /** Which nav badges ALSO drive the OS app-icon\n   *  badge. Each entry is `\"<kind>:<id>\"` (`tab` | `drawer` | `topBarAction`, the\n   *  spelling `navKey` uses); the icon shows the SUM of those slots' resolved counts.\n   *  Empty/absent ⇒ no mirroring. An entry naming a slot this build does not have is\n   *  ignored, never a blanked badge. Requires the `push` capability — `defineApp`\n   *  rejects the combination, because the badge would be set and never shown. */\n  appIconBadgeSources?: string[];\n  /** Signed release allowlist for contained browser Tier-5 `_stream` requests. */\n  streamPolicy?: StreamPolicy;\n  scheme: string;\n  deepLinkPatterns: DeepLinkPattern[];\n  linkableScreens: LinkableScreen[];\n}"
+        "decl": "export interface NavigationConfig {\n  /** Tab-bar structure (which tabs; their icons/labels/badges). */\n  tabBar?: TabBarConfig;\n  /** Slide-in drawer / hamburger-menu destinations. */\n  drawer?: DrawerConfig;\n  /** Navigation chrome the shell draws.\n   *  Omitted ⇒ \"bottomTabs\". The shell (not the descriptor) reads this. */\n  navKind?: NavKind;\n  /** Destinations for \"sidebar\" mode.\n   *  Absent ⇒ the shell derives the rail from `tabBar.items`. */\n  sidebar?: SidebarConfig;\n  /** App-level default top bar; a per-screen\n   *  `ScreenDescriptor.topBar` fully replaces it (override, not merge). */\n  topBarDefault?: TopBarConfig;\n  /** The post-OS-splash brand surface (see `SplashConfig`). Absent / not enabled\n   * ⇒ today's behavior. Operational per (live-flippable). */\n  splash?: SplashConfig;\n  /** App-level default locale. Operational per so a Hebrew (or Spanish)\n   *  branded app can pin RTL/l10n OTA without a launch flag. `default` is a\n   *  BCP-47 primary subtag; clients coerce unknown tags rather than failing the\n   *  envelope. `pin: true` skips the device/browser language; in-app `locale.set`\n   *  still wins. Absent ⇒ today's device-then-en behavior. */\n  locale?: LocaleConfig;\n  /** Effective orientations, resolved INSIDE\n   *  the binary's build-time envelope (config.ts `orientationEnvelope`). The\n   *  envelope is the ceiling and can never be OTA (iOS reads the plist before\n   *  any app code runs); this narrows within it. Always intersected with the\n   *  envelope — it can never widen it. Absent/empty ⇒ the envelope itself. */\n  orientation?: OrientationConfig;\n  /** Per-surface nav projection, keyed by catalog\n   *  surface id (`phone` | `tablet` | `desktop` | `mac` | `watch` | `wear` | `rn`).\n   *  Keyed the way `orientation` is keyed by device family and narrowed the same\n   *  way: a key outside the app's `platforms.json` envelope is DROPPED, never\n   *  honored (see `resolveSurfaceNav`). Absent key ⇒ that surface uses the default\n   *  projection, so an app that never thinks about surfaces is unaffected. */\n  surfaces?: Record<string, SurfaceNavConfig>;\n  /** The APP-LEVEL nav worker\n   *  that feeds every `*Path` binding on `NavTabItem` / `DrawerItem` /\n   *  `TopBarAction`. App-level, not a screen's worker, because chrome outlives\n   *  every screen: a cart badge must survive leaving the cart, and a flag-hidden\n   *  tab must stay hidden three pushes deep in another stack. Absent ⇒ paths stay\n   *  unresolved and the literals render — the worker enriches, it never gates. */\n  navLogicBundle?: LogicBundleRef;\n  /** Which nav badges ALSO drive the OS app-icon\n   *  badge. Each entry is `\"<kind>:<id>\"` (`tab` | `drawer` | `topBarAction`, the\n   *  spelling `navKey` uses); the icon shows the SUM of those slots' resolved counts.\n   *  Empty/absent ⇒ no mirroring. An entry naming a slot this build does not have is\n   *  ignored, never a blanked badge. Requires the `push` capability — `defineApp`\n   *  rejects the combination, because the badge would be set and never shown. */\n  appIconBadgeSources?: string[];\n  /** Signed release allowlist for contained browser Tier-5 `_stream` requests. */\n  streamPolicy?: StreamPolicy;\n  /** A site shell's URL space. A push tap, app link or\n   *  custom-scheme link whose URL is an https page on one of `site.origins` opens the\n   *  screen owning its path, and that screen's WebView loads the full URL. Absent ⇒\n   *  links resolve as before. Build it with `siteNavConfig()` from\n   *  `@himalaya/core/site-shell`; resolution is `resolveSiteLink()`. */\n  site?: SiteNavConfig;\n  scheme: string;\n  deepLinkPatterns: DeepLinkPattern[];\n  linkableScreens: LinkableScreen[];\n}"
       },
       {
         "name": "NavKind",
@@ -945,6 +945,18 @@
         "jsdoc": "",
         "decl": "export interface LinkableScreen {\n  screenId: string;\n  /** generic <scheme>://screen/<id> route allowed externally? */\n  isPublic: boolean;\n  paramKeys: string[];\n  parentScreenId: string;\n  tabId: string;\n}"
       },
+      {
+        "name": "SiteNavConfig",
+        "kind": "interface",
+        "jsdoc": "/** How an incoming site URL finds its screen. */",
+        "decl": "export interface SiteNavConfig {\n  /** https PATH BOUNDARIES (`https://owner.wixsite.com/my-shop/`), the same form as the\n   *  site's WebView `allowedOrigins`: exact host, and the path is the boundary or under it. */\n  origins: string[];\n  /** Longest path-segment prefix wins, on the path RELATIVE to the matched origin.\n   *  `/` matches the home page only. */\n  routes: SiteRoute[];\n  /** The screen an on-site URL no route owns opens in. `\"\"`/absent ⇒ the `/` route's\n   *  screen; no `/` route either ⇒ the link does not resolve. */\n  fallbackScreenId?: string;\n}"
+      },
+      {
+        "name": "SiteRoute",
+        "kind": "interface",
+        "jsdoc": "/** One entry of {@link SiteNavConfig.routes}. */",
+        "decl": "export interface SiteRoute {\n  /** Site-relative path prefix: `\"/\"`, `\"/shop\"`, `\"/blog\"`. */\n  path: string;\n  /** The screen whose WebView loads the URL. */\n  screenId: string;\n}"
+      },
       {
         "name": "LocaleConfig",
         "kind": "interface",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@wix/himalaya-cli",
-  "version": "0.1086.0",
+  "version": "0.1088.0",
   "type": "module",
   "description": "himi — the Himalaya authoring CLI. Build a Tier-5 content package on your own machine, push it to the production serve as a draft, preview it on web + Himi Player, and read worker logs back — the remote dev loop. Wraps @himalaya/serve-cli for transport.",
   "keywords": [
@@ -67,5 +67,5 @@
       "artifactId": "himalaya-cli"
     }
   },
-  "falconPackageHash": "3f1e3c51227966381de40a69348d27b87c8af89431409b6f97de8442"
+  "falconPackageHash": "d108a27f6fbf093aa91664885454afd9abb1d89ccf5927bd127cfe93"
 }