@wix/himalaya-cli 0.1186.0 → 0.1188.0

package/guides/app-config.md

@@ -109,6 +109,12 @@ worker may use. Enforcement is **fail-closed** at two layers (SDK import + nativ
 undeclared `capability.*` call is blocked at runtime. A worker hitting the Wix transport must
 declare `wix_api`; the Wix Platform facade needs `wix_platform`.
 
+Every id a screen declares belongs in `config.ts` `capabilities` too: that app-level list is
+what a binary for the app is built with (usage strings, entitlements, permissions), and a capability
+with a native footprint only arrives with a new binary. `himi docs capabilities` walks the whole
+loop — discover, declare, validate, ship — and `himi capabilities <id>` shows the import and which
+shells' binaries serve it.
+
 App-level capability vocabulary: `camera`, `barcode_scanner`, `biometrics`, `secure_storage`, `share`, `push`, `file_picker`, `files`, `open_url`, `pdf`, `clipboard`, `photos`, `presigned_upload`, `ui`, `calendar`, `contacts`, `tasks`, `audio_record`, `audio_record_background`, `calls`, `location`, `location_background`, `motion`, `media_playback`, `webview`, `browser_auth`, `haptic`, `himi_apps`, `iap`, `keyboard`, `wix_cashier`, `live_activity`, `local_database`, `speech`, `speaker_diarization`, `system_intents`, `on_device_ai`, `app_info`, `release_control`, `godot`, `base44`.
 
 ## What `himi validate` checks (7 passes)
@@ -119,7 +125,11 @@ App-level capability vocabulary: `camera`, `barcode_scanner`, `biometrics`, `sec
 2. **bindings** — every `$service:<svc>.<path>` must resolve to a service the worker exports.
 3. **strict-enum** — a `$service`/`$flag`/`$item` placeholder in an enum-typed field is ALWAYS
    an error (native decode fails before substitution and kills the screen).
-4. **capabilities** — a worker using the Wix transport must declare `wix_api`.
+4. **capabilities** — a worker using the Wix transport must declare `wix_api`; an unknown id is an
+   error; a bundle calling a capability its screen does not declare, a screen-declared id missing
+   from `config.ts` `capabilities`, and (with `shell` in himalaya.content.json) an id that shell's
+   binary does not serve are warnings; `--strict` promotes only the undeclared call (the binary
+   checks stay warnings), and a mismatch with the shared Player binary is always an error.
 5. **dynamic-structure governance** — at most one `WorkerSubtree` per screen, and only when that
    screen is listed in `workerSubtreeScreens`; the component's policy/fallback validation remains
    fail-closed.

package/guides/capabilities.md

@@ -0,0 +1,141 @@
+# Native capabilities — camera, location, push, and the rest
+
+A worker reaches the device through **capabilities**: `@himalaya/camera` takes a photo,
+`@himalaya/location` reads a position, `@himalaya/push` asks for notification permission. Each
+capability has two halves, and only one of them ships over the air:
+
+| Half | Lives in | Changes with |
+|---|---|---|
+| The **worker** half — the import and the call | your content package | `himi push` (seconds) |
+| The **binary** half — the native handler, plus the OS usage strings, entitlements and permissions | the installed app | a new binary (`himi dist`) |
+
+So adding a capability is three questions: what do I import, where do I declare it, and was the
+binary this app runs in built for it? `himi capabilities` answers all three.
+
+## 1. Discover
+
+```bash
+himi capabilities                      # every id: import, native footprint, which shells serve it
+himi capabilities camera               # one id in full
+himi capabilities --shell branded-lite # what that one binary serves
+```
+
+```
+camera  —  import from @himalaya/camera
+  exports:  capturePhoto, pickDocument, scanQR
+  declare:  config.ts `capabilities` AND each calling screen's `logicBundle.declaredCapabilities`
+  binary:   needs a NATIVE build — iOS NSCameraUsageDescription; Android android.permission.CAMERA …
+  shells:   served by owner-lite, player; `himi dist` adds it to base44, branded-lite, brandy; NOT in the demo-app binary
+```
+
+Agents: the same data is the `himi_capabilities` MCP tool. `himi sdk <name>` also prints the
+capability a package dispatches.
+
+A capability marked **native** (camera, location, photos, contacts, calendar, push, …) puts a
+usage string, entitlement or permission into the binary. No over-the-air push can add one — only
+a new binary can. A capability with no native footprint (share, clipboard, open_url,
+local_database, …) works in any binary that registers its handler.
+
+## 2. Declare — in two places
+
+```ts
+// tier5-src/notes/index.ts
+import { capturePhoto } from "@himalaya/camera";
+import { getCurrent } from "@himalaya/location";
+```
+
+```ts
+// config.ts — the app-level list: what a binary for this app is built with
+capabilities: ["push", "camera", "location"],
+```
+
+```jsonc
+// the screen that runs the bundle — the runtime gate
+"logicBundle": { "url": "…/v1/bundles/notes", "declaredCapabilities": ["camera", "location"] }
+```
+
+The screen list is enforced at runtime: a call the screen did not declare is **denied**, and a
+`try/catch` in the worker hides the denial. The app-level list is what the binary is built with,
+so it must name every capability the app uses. A background variant (`location_background`,
+`audio_record_background`) is declared instead of — and grants — its foreground capability.
+
+## 3. Check
+
+```bash
+himi validate
+```
+
+The `capabilities` pass reports:
+
+- an **unknown id** (a typo such as `camara`) — an error, with a suggestion;
+- a bundle that **calls a capability its screen does not declare**;
+- a capability a screen declares that **`config.ts` `capabilities` is missing**;
+- when the app names its shell, a capability **that shell's binary does not serve**.
+
+An undeclared call is a warning, and an error under `--strict`. The last two describe the binary
+rather than your content, so they stay warnings — except a mismatch with the shared Himi Player
+binary, which is always an error: one binary hosts every app, and no content change can add to it.
+
+Name the shell your app ships in once, in `himalaya.content.json`, and both `himi validate` and
+`himi dist` use it:
+
+```json
+{ "name": "field-notes", "shell": "branded-lite" }
+```
+
+(`--shell <name>` on either command overrides it for one run.)
+
+## 4. Test and preview
+
+`himi test` boots every screen's real worker and dispatches its actions. A declared capability
+answers with its "unavailable" result there, so the crawl checks that your worker handles a
+declined camera or a missing position without breaking; a second pass then answers the modelled
+ones (camera, location, photos, speech, …) with a SUCCESS result, so the code behind a granted
+permission runs too. Two things in the `--json` report are about capabilities:
+
+- a **`capability-undeclared`** finding for every call the screen's gate denied — even one your
+  worker caught, which on device looks like a dead button rather than an error;
+- **`capabilityCoverage`**: each `capability.<id>.<verb>` your workers call, and what the crawl
+  answers it with — `success` (modelled), `store` (a real session store: `local_database`,
+  `secure_storage`), `unavailable-only` (no model yet, so only the declined path runs), or `denied`.
+  See [himi-test → Capabilities](himi-test.md#capabilities).
+
+The bundle scan only ever **reports**: it never adds a capability to a screen's declaration. The
+per-screen list is the authorization boundary, so a worker shared by two screens cannot widen the
+one that never makes the call.
+
+In the web preview, camera capture and geolocation use the browser's own file picker and location
+prompt.
+
+## 5. Ship it
+
+- **Worker-side changes** — a new call to a capability the installed binary already serves — go
+  out with `himi push`.
+- **A capability the binary does not serve** needs a new binary, and on most shells `himi dist`
+  builds it for you. The per-app shells — `branded-lite`, `owner-lite`, `brandy`, `base44` — are
+  **extensible**: the build reads what your release declares (`config.ts` `capabilities` plus every
+  screen's `declaredCapabilities`), bakes their native config into the shell (iOS usage strings /
+  entitlements, Android permissions / features) and registers their handlers at boot.
+  `himi capabilities --shell <s>` shows such an id as `yes → dist`, and `himi validate` warns that
+  it "needs a new `himi dist`" — the installed binary cannot call it until you rebuild.
+- **"needs a new binary".** A successful `himi dist` remembers what its binary was built with —
+  on the job (`buildCapabilities`) and in your package (`.himi/last-dist.json`). From then on
+  `himi push` prints `needs a new binary: <ids> — run himi dist` when the release declares an id
+  that build lacks, a following device's draft offer says the same, and `himi validate` compares
+  against that build rather than the committed shell.
+- **Never a silent strip.** On iOS, a capability whose entitlement the signing profile cannot grant
+  fails the dist job, naming the capability — the binary would otherwise build green and fail on
+  the first call. The minted profile's Apple capabilities are derived from the build's own set.
+- **Preview before you build:** `himi dist --plan` prints what the release declares, what the shell
+  already serves, what the build would add and the exact native delta. No job is started.
+- **Write the permission prompt.** The OS shows a sentence when the app asks for camera, location,
+  photos, … Set it per capability in `config.ts` — `permissionCopy: { camera: "Scan a receipt to
+  attach it to an expense." }` — or the build uses a generic one, which App Review often rejects.
+- **What a build cannot add.** `player` (Himi Player — one binary for every app) and `demo-app` are
+  fixed: a release declaring an id they do not serve is refused with `shell_capability_mismatch`,
+  naming shells that can carry it. On an extensible shell, an id with no core handler, or one that
+  needs wiring a build cannot do (`local_database` needs the app's data schema installed first,
+  `live_activity` a widget extension target, `base44` / `godot` an opt-in SDK, `wix_platform` boot
+  configuration), is refused with `unsupported_capability` and the reason. A shell that does not
+  carry a capability's usage string can crash the app at the permission prompt, which is why both
+  the build and `himi validate` check before you ship.

package/guides/himi-test.md

@@ -125,6 +125,7 @@ Only **unambiguous** defects, so a green run stays worth trusting:
 | `poll-action-missing` | error | A `_poll` directive every host will silently ignore — an action the bundle never declares, a malformed `action`, a missing `id`, or a non-positive `intervalMs`. Each ends the same way: a screen that never refreshes, with nothing saying why. Nothing in the descriptor names the polled action, so no static check can see it. (A merely too-small interval is legal — the host clamps it.) |
 | `no-request-issued` | **warning** | A worker that uses the Wix transport but never fetches — "the screen loaded with sample data." A warning: a conditional or tap-triggered fetch is legitimate. |
 | `native-decode-failed` | error | Under `--native`, the real Swift/Kotlin decoder rejected the baked descriptor bytes (one bad enum blanks the whole screen on device). |
+| `capability-undeclared` | error | A `capability.<id>.<verb>` call the screen's gate denied — reported from the gate itself, so it is raised **even when the worker catches the rejection** (which on device leaves a control that silently does nothing). Fix: declare the id on that screen's `logicBundle.declaredCapabilities` and in `config.ts` `capabilities`. One per capability per screen. See [Capabilities](#capabilities). |
 | `journey-failed` | error | A `himi-test.json` journey named an action the screen lacks, threw, or never rendered its `expectText`. |
 | `inverse-pair-diverges` | **warning** | An action and the action that undoes it do not return to the state the boot settled on — `add` then `remove` leaving a different list, or a counter it forgot to put back. |
 | `refresh-not-idempotent` | **warning** | `refresh` from a fresh boot settles somewhere other than the boot did, on identical data — usually a refresh that appends instead of replacing. |
@@ -267,6 +268,36 @@ went unproven, it names the gap and pairs it with a himi command or a source edi
 derived from what actually ran, never homework. Assembly:
 `tools/himi-cli/src/coverage.ts`.
 
+## Capabilities
+
+A `capability.*` call is answered twice. The main pass answers every granted one with `null` — the
+device's "unavailable" arm — so a screen's declined-camera / no-position path is checked. The
+capability-success pass then re-crawls each screen whose bundle calls a **modelled** capability
+(audio-record, speech, on-device-ai, calls, media-playback, calendar, files, photos, pdf, share,
+open-url, camera, location) with a success answer shaped exactly like the one its SDK binding
+destructures, so the code behind a granted permission runs too. `local_database` and
+`secure_storage` are served from a real session store on both passes.
+
+`--json` carries what each call got as `capabilityCoverage`:
+
+```jsonc
+"capabilityCoverage": {
+  "counts": { "success": 2, "store": 1, "unavailable-only": 1, "denied": 0 },
+  "calls": {
+    "capability.camera.capture":          { "arm": "success",          "screens": ["notes"] },
+    "capability.local_database.getAll":   { "arm": "store",            "screens": ["notes"] },
+    "capability.location.getCurrent":     { "arm": "success",          "screens": ["notes"] },
+    "capability.haptic.play":             { "arm": "unavailable-only", "screens": ["notes"] }
+  }
+}
+```
+
+`unavailable-only` means no model exists yet, so only the declined path of that call has run;
+`denied` means no screen running the call grants its id (each denial is also a
+`capability-undeclared` finding), and `deniedOn` lists screens that deny a call others allow. The
+map is static — it says what a call would be answered with, not that a tap reached it; the gap
+ledger says that.
+
 ## Writes to Wix
 
 Every run lists what the app **writes** to the Wix site, per screen and action — the inventory an

package/guides/index.json

@@ -23,7 +23,7 @@
     "Keep structure descriptor-authored: use FragmentSlot for enumerable variants and bound list/grid templates for repetition. Use WorkerSubtree only for runtime-unknowable structure, with an explicit screen allowlist, policy budgets, and shipped fallback.",
     "Bindings ($service:<svc>.<path>, $item.<field>, $flag:<key>) are plain strings in ANY prop — INCLUDING Modifiers token refs (background, color, tint), so a worker can drive per-item theming, not just text. They CANNOT target strict-enum fields (style, size, alignment, severity, presentation, …) — those fail at render, not validation.",
     "Workers are sandboxed: no DOM, no timers, no raw fetch. Produce state synchronously in actions; do not rely on an ambient refresh tick.",
-    "Declare every capability a worker uses in logicBundle.declaredCapabilities (wix_platform, stream, camera, location, …) — undeclared calls are blocked. EXCEPTION: the Wix REST bridge (wix_api — the @himalaya/wix-* clients / wixApi.call) is ungated today (installed unconditionally), so it works WITHOUT a declaration; declaring wix_api is still recommended — it is where the platform is heading, and it documents what your worker touches.",
+    "Declare every capability a worker uses in TWO places: the calling screen's logicBundle.declaredCapabilities (wix_platform, stream, camera, location, …) — undeclared calls are blocked — AND config.ts `capabilities`, the app-level list a binary is built with. The `capabilities` guide shows each id's import, what the binary needs and which shells serve it; validate flags an unknown id, an undeclared call, and (with `shell` in himalaya.content.json) an id that shell's binary does not serve. A capability with a native footprint (camera, location, push, …) only arrives with a new binary — an over-the-air push cannot add it. EXCEPTION: the Wix REST bridge (wix_api — the @himalaya/wix-* clients / wixApi.call) is ungated today (installed unconditionally), so it works WITHOUT a declaration; declaring wix_api is still recommended — it is where the platform is heading, and it documents what your worker touches.",
     "`validate`/`render` prove a screen is WELL-FORMED and, by default, paint its INITIAL state — NOT that the app's LOGIC is correct. A wrong reducer (a game that never ends, a bad total) passes both with ok:true. Run `himi test`: it needs NO test files — it boots each screen's real worker and dispatches every action your descriptor already declares, then reports anything that threw, stayed stuck on `loading`, or leaked a NaN/undefined/`$service:` token into visible text. It crawls on HERMETIC DATA by default (zero network): your `dev/net-mocks.json` first, then your config's CMS `seed:` rows, then a canned fixture of frozen real vertical responses shipped with the CLI — so the fetch-SUCCESS mapping path runs too, where data-shape bugs actually live (canned data exercises code paths, not API-contract truth). Two boot-only HOSTILE passes (every list empty; every request 500) then check the empty/outage day — their findings are errors, not warnings. It also runs the worker in a DEVICE-PARITY sandbox (no setTimeout/setInterval, as on JSC/WebView), so a bundle that would only die on the device fails locally instead — e.g. `svc.actions.load(…)` (actions are DIRECT methods; `.actions` is undefined on device). (You are NOT limited to the crawled states either: rendering with `--live` runs the worker's REAL fetches against live Wix — a minted anonymous visitor token from the app's clientId — so a render CAN prove real-data binding locally with no VPN/push; and injecting `state` (`{\"<svc>\":{…}}`) renders a specific mid-flow state without the network.)",
     "User-facing copy is CONFIGURATION, never hardcoded in a descriptor: route every string through a copy key with a stock fallback — `copyOf(key, fallback)` — and feed worker-emitted strings in as descriptor params, so any app/template consumer can retheme ALL copy without touching descriptors. Wire the seam yourself: declare a local `const COPY: Record<string,string> = {…}` in your content package plus `export const copyOf = (k, fallback) => COPY[k] ?? fallback;`, keyed `<screen>.<element>` so a later template publish is mechanical. Either way the rule is the same: no user-facing string baked into a descriptor literal."
   ],
@@ -172,6 +172,12 @@
       "category": "App Config",
       "file": "app-config.md"
     },
+    {
+      "id": "capabilities",
+      "title": "Native capabilities (camera, location, push, …)",
+      "category": "Workers & SDKs",
+      "file": "capabilities.md"
+    },
     {
       "id": "wix-api-usage",
       "title": "Call Wix APIs from a worker",

package/guides/qa-builds.md

@@ -326,7 +326,7 @@ one never blocks a rollout — the dist routes just `501` with the reason.
 | `HIMI_DIST_ALLOWED_XCODE_VERSIONS` | comma-separated Xcode versions a caller may pin (`xcodeVersion` in the request body); unset ⇒ the built-in list. Nothing upstream constrains this field — the Job Service client validates it as `z.string().max(50)` — so without the allow-list it is caller-supplied text choosing a toolchain on a shared pool. A blank value reads as unset (the built-in list), never as "allow anything". |
 | `HIMI_DIST_APPLE_SIGNING` | **Minted iOS signing is ON by default** — set `0`/`false`/`off` to disable it and go back to scavenging a profile off the pool. Rarely what you want: minting ships the profile and the certificate with the job, so nothing has to pre-exist on the machine. (Earlier text here cited `0 profile(s) available` on four machines as a reason to keep minting on — that reading came from a TRUNCATED survey and is retracted below; build 992367 logged 352 profiles. The recommendation is unchanged, the evidence for it was wrong.) |
 | `HIMI_DIST_APPLE_API_KEY_NAME` | Apple account the identity is minted under; unset ⇒ `wix-enterprise` |
-| `HIMI_DIST_APPLE_CAPABILITIES` | COMPLETE capability set for a minted id (the sync call replaces rather than merges); unset ⇒ push + associated domains |
+| `HIMI_DIST_APPLE_CAPABILITIES` | Apple capability types to ADD to every minted id. The set itself is derived per job: push + associated domains (the template baseline) plus the Apple capability of every entitlement in the iOS plan of the job's `buildCapabilities` (`appleCapabilitiesForBuild`). This variable only **widens** that derived set (e.g. `APP_GROUPS` for a widget) — it can never remove a derived capability, because the sync call replaces rather than merges and a narrower list would switch off what the content asked for. Unset ⇒ the derived set alone |
 | `QA_DIST_SLACK_CHANNEL` | Post QA build results to a channel instead of DMing the requester. Worth setting: a DM is unreadable by anything but that person, so a channel is what makes build results scriptable (and visible to the team). |
 
 Both per-credential caps are **clamped into the range that can be enforced**, and the two ranges

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@wix/himalaya-cli",
-  "version": "0.1186.0",
+  "version": "0.1188.0",
   "type": "module",
   "description": "himi — the Himalaya authoring CLI. Build a Tier-5 content package on your own machine, push it to the production serve as a draft, preview it on web + Himi Player, and read worker logs back — the remote dev loop. Wraps @himalaya/serve-cli for transport.",
   "keywords": [
@@ -67,5 +67,5 @@
       "artifactId": "himalaya-cli"
     }
   },
-  "falconPackageHash": "2aaa1abf6cad136550ece952d740ab0c8ae91df8a9668c15ecfa739e"
+  "falconPackageHash": "67d96922cd1adeed2becc3bef5c4d027397fd441f83346cd018cb252"
 }

package/templates/beauty-salon/dev/index.ts

@@ -9732,7 +9732,8 @@ const SCREENS = runtimeSetting({
         "wix_api",
         "wix_cashier",
         "open_url",
-        "local_database"
+        "local_database",
+        "wix_platform"
       ],
       "minBinaryVersion": "0.1.0",
       "bundleVersion": "0.0.1"
@@ -20494,7 +20495,8 @@ const SCREENS = runtimeSetting({
       "declaredCapabilities": [
         "wix_api",
         "wix_cashier",
-        "open_url"
+        "open_url",
+        "wix_platform"
       ],
       "minBinaryVersion": "0.1.0",
       "bundleVersion": "0.0.1"
@@ -28197,7 +28199,8 @@ const TEMPLATED: { pattern: string; display: string; liveSeed?: LiveSeed; static
         "wix_api",
         "local_database",
         "wix_cashier",
-        "open_url"
+        "open_url",
+        "wix_platform"
       ],
       "minBinaryVersion": "0.1.0",
       "bundleVersion": "0.0.1"

package/templates/beauty-salon/himalaya.content.json

@@ -1,5 +1,6 @@
 {
   "name": "__HIMI_APP_NAME__",
   "icon": "icon.png",
-  "target": "prod"
+  "target": "prod",
+  "shell": "branded-lite"
 }

package/templates/beauty-salon-owner/dev/index.ts

@@ -61946,7 +61946,8 @@ const SCREENS = runtimeSetting({
       "contentType": "application/javascript+ts-bundle",
       "declaredCapabilities": [
         "wix_api",
-        "wix_platform"
+        "wix_platform",
+        "local_database"
       ],
       "minBinaryVersion": "0.1.0",
       "bundleVersion": "0.0.1"

package/templates/beauty-salon-owner/himalaya.content.json

@@ -1,5 +1,6 @@
 {
   "name": "__HIMI_APP_NAME__",
   "icon": "icon.png",
-  "target": "prod"
+  "target": "prod",
+  "shell": "owner-lite"
 }

package/templates/branded-lite/dev/index.ts

@@ -10753,7 +10753,8 @@ const SCREENS = runtimeSetting({
         "wix_api",
         "wix_cashier",
         "open_url",
-        "local_database"
+        "local_database",
+        "wix_platform"
       ],
       "minBinaryVersion": "0.1.0",
       "bundleVersion": "0.0.1"
@@ -26984,7 +26985,8 @@ const SCREENS = runtimeSetting({
       "declaredCapabilities": [
         "wix_api",
         "wix_cashier",
-        "open_url"
+        "open_url",
+        "wix_platform"
       ],
       "minBinaryVersion": "0.1.0",
       "bundleVersion": "0.0.1"
@@ -82982,7 +82984,8 @@ const TEMPLATED: { pattern: string; display: string; liveSeed?: LiveSeed; static
         "wix_api",
         "local_database",
         "wix_cashier",
-        "open_url"
+        "open_url",
+        "wix_platform"
       ],
       "minBinaryVersion": "0.1.0",
       "bundleVersion": "0.0.1"
@@ -84102,7 +84105,8 @@ const TEMPLATED: { pattern: string; display: string; liveSeed?: LiveSeed; static
       "declaredCapabilities": [
         "wix_api",
         "wix_cashier",
-        "open_url"
+        "open_url",
+        "wix_platform"
       ],
       "minBinaryVersion": "0.1.0",
       "bundleVersion": "0.0.1"
@@ -85051,7 +85055,8 @@ const TEMPLATED: { pattern: string; display: string; liveSeed?: LiveSeed; static
         "calendar",
         "share",
         "wix_cashier",
-        "local_database"
+        "local_database",
+        "wix_platform"
       ],
       "minBinaryVersion": "0.1.0",
       "bundleVersion": "0.0.1"

package/templates/branded-lite/himalaya.content.json

@@ -1,5 +1,6 @@
 {
   "name": "__HIMI_APP_NAME__",
   "icon": "icon.png",
-  "target": "prod"
+  "target": "prod",
+  "shell": "branded-lite"
 }

package/templates/brandy/himalaya.content.json

@@ -1,5 +1,6 @@
 {
   "name": "__HIMI_APP_NAME__",
   "icon": "icon.png",
-  "target": "prod"
+  "target": "prod",
+  "shell": "brandy"
 }

package/templates/community-club/dev/index.ts

@@ -18065,7 +18065,8 @@ const TEMPLATED: { pattern: string; display: string; liveSeed?: LiveSeed; static
         "calendar",
         "share",
         "wix_cashier",
-        "local_database"
+        "local_database",
+        "wix_platform"
       ],
       "minBinaryVersion": "0.1.0",
       "bundleVersion": "0.0.1"

package/templates/community-club/himalaya.content.json

@@ -1,5 +1,6 @@
 {
   "name": "__HIMI_APP_NAME__",
   "icon": "icon.png",
-  "target": "prod"
+  "target": "prod",
+  "shell": "branded-lite"
 }

package/templates/community-club-owner/dev/index.ts

@@ -61946,7 +61946,8 @@ const SCREENS = runtimeSetting({
       "contentType": "application/javascript+ts-bundle",
       "declaredCapabilities": [
         "wix_api",
-        "wix_platform"
+        "wix_platform",
+        "local_database"
       ],
       "minBinaryVersion": "0.1.0",
       "bundleVersion": "0.0.1"

package/templates/community-club-owner/himalaya.content.json

@@ -1,5 +1,6 @@
 {
   "name": "__HIMI_APP_NAME__",
   "icon": "icon.png",
-  "target": "prod"
+  "target": "prod",
+  "shell": "owner-lite"
 }

package/templates/events-meetups/dev/index.ts

@@ -16063,7 +16063,8 @@ const TEMPLATED: { pattern: string; display: string; liveSeed?: LiveSeed; static
         "calendar",
         "share",
         "wix_cashier",
-        "local_database"
+        "local_database",
+        "wix_platform"
       ],
       "minBinaryVersion": "0.1.0",
       "bundleVersion": "0.0.1"

package/templates/events-meetups/himalaya.content.json

@@ -1,5 +1,6 @@
 {
   "name": "__HIMI_APP_NAME__",
   "icon": "icon.png",
-  "target": "prod"
+  "target": "prod",
+  "shell": "branded-lite"
 }

package/templates/events-meetups-owner/dev/index.ts

@@ -61578,7 +61578,8 @@ const SCREENS = runtimeSetting({
       "contentType": "application/javascript+ts-bundle",
       "declaredCapabilities": [
         "wix_api",
-        "wix_platform"
+        "wix_platform",
+        "local_database"
       ],
       "minBinaryVersion": "0.1.0",
       "bundleVersion": "0.0.1"

package/templates/events-meetups-owner/himalaya.content.json

@@ -1,5 +1,6 @@
 {
   "name": "__HIMI_APP_NAME__",
   "icon": "icon.png",
-  "target": "prod"
+  "target": "prod",
+  "shell": "owner-lite"
 }

package/templates/gym-fitness/dev/index.ts

@@ -9908,7 +9908,8 @@ const SCREENS = runtimeSetting({
         "wix_api",
         "wix_cashier",
         "open_url",
-        "local_database"
+        "local_database",
+        "wix_platform"
       ],
       "minBinaryVersion": "0.1.0",
       "bundleVersion": "0.0.1"
@@ -20670,7 +20671,8 @@ const SCREENS = runtimeSetting({
       "declaredCapabilities": [
         "wix_api",
         "wix_cashier",
-        "open_url"
+        "open_url",
+        "wix_platform"
       ],
       "minBinaryVersion": "0.1.0",
       "bundleVersion": "0.0.1"
@@ -31713,7 +31715,8 @@ const TEMPLATED: { pattern: string; display: string; liveSeed?: LiveSeed; static
         "wix_api",
         "local_database",
         "wix_cashier",
-        "open_url"
+        "open_url",
+        "wix_platform"
       ],
       "minBinaryVersion": "0.1.0",
       "bundleVersion": "0.0.1"
@@ -32662,7 +32665,8 @@ const TEMPLATED: { pattern: string; display: string; liveSeed?: LiveSeed; static
         "calendar",
         "share",
         "wix_cashier",
-        "local_database"
+        "local_database",
+        "wix_platform"
       ],
       "minBinaryVersion": "0.1.0",
       "bundleVersion": "0.0.1"

package/templates/gym-fitness/himalaya.content.json

@@ -1,5 +1,6 @@
 {
   "name": "__HIMI_APP_NAME__",
   "icon": "icon.png",
-  "target": "prod"
+  "target": "prod",
+  "shell": "branded-lite"
 }

package/templates/gym-fitness-owner/dev/index.ts

@@ -62017,7 +62017,8 @@ const SCREENS = runtimeSetting({
       "contentType": "application/javascript+ts-bundle",
       "declaredCapabilities": [
         "wix_api",
-        "wix_platform"
+        "wix_platform",
+        "local_database"
       ],
       "minBinaryVersion": "0.1.0",
       "bundleVersion": "0.0.1"

package/templates/gym-fitness-owner/himalaya.content.json

@@ -1,5 +1,6 @@
 {
   "name": "__HIMI_APP_NAME__",
   "icon": "icon.png",
-  "target": "prod"
+  "target": "prod",
+  "shell": "owner-lite"
 }

package/templates/nonprofit-cause/dev/index.ts

@@ -7700,7 +7700,8 @@ const SCREENS = runtimeSetting({
       "declaredCapabilities": [
         "wix_api",
         "wix_cashier",
-        "open_url"
+        "open_url",
+        "wix_platform"
       ],
       "minBinaryVersion": "0.1.0",
       "bundleVersion": "0.0.1"
@@ -19349,7 +19350,8 @@ const TEMPLATED: { pattern: string; display: string; liveSeed?: LiveSeed; static
         "calendar",
         "share",
         "wix_cashier",
-        "local_database"
+        "local_database",
+        "wix_platform"
       ],
       "minBinaryVersion": "0.1.0",
       "bundleVersion": "0.0.1"

package/templates/nonprofit-cause/himalaya.content.json

@@ -1,5 +1,6 @@
 {
   "name": "__HIMI_APP_NAME__",
   "icon": "icon.png",
-  "target": "prod"
+  "target": "prod",
+  "shell": "branded-lite"
 }

package/templates/nonprofit-cause-owner/dev/index.ts

@@ -61649,7 +61649,8 @@ const SCREENS = runtimeSetting({
       "contentType": "application/javascript+ts-bundle",
       "declaredCapabilities": [
         "wix_api",
-        "wix_platform"
+        "wix_platform",
+        "local_database"
       ],
       "minBinaryVersion": "0.1.0",
       "bundleVersion": "0.0.1"

package/templates/nonprofit-cause-owner/himalaya.content.json

@@ -1,5 +1,6 @@
 {
   "name": "__HIMI_APP_NAME__",
   "icon": "icon.png",
-  "target": "prod"
+  "target": "prod",
+  "shell": "owner-lite"
 }

package/templates/owner-lite/dev/index.ts

@@ -62011,7 +62011,8 @@ const SCREENS = runtimeSetting({
       "contentType": "application/javascript+ts-bundle",
       "declaredCapabilities": [
         "wix_api",
-        "wix_platform"
+        "wix_platform",
+        "local_database"
       ],
       "minBinaryVersion": "0.1.0",
       "bundleVersion": "0.0.1"

package/templates/owner-lite/himalaya.content.json

@@ -1,5 +1,6 @@
 {
   "name": "__HIMI_APP_NAME__",
   "icon": "icon.png",
-  "target": "prod"
+  "target": "prod",
+  "shell": "owner-lite"
 }