@wix/himalaya-cli 0.1231.0 → 0.1233.0

package/dist/authoring-runtime/node_modules/@wix/himalaya/dist/_types/core/sdk/health/src/index.d.ts

@@ -0,0 +1,93 @@
+/** A readable health data type. */
+export type HealthType = "steps" | "heartRate" | "activeEnergy" | "distance" | "workouts";
+/** A writable health data type. v1 writes workouts only. */
+export type HealthWriteType = "workouts";
+export type HealthPermissionState = "granted" | "denied" | "notDetermined";
+/** Aggregation bucket for `query`. Omitted ⇒ one total (cumulative types) or raw samples. */
+export type HealthBucket = "hour" | "day";
+export type WorkoutActivity = "running" | "walking" | "cycling" | "strength" | "other";
+export type HealthErrorCode = "unavailable" | "not_authorized" | "invalid_argument" | "failed";
+export declare const HEALTH_TYPES: readonly HealthType[];
+export declare const WORKOUT_ACTIVITIES: readonly WorkoutActivity[];
+/** The fixed unit each type's `value` is reported in. */
+export declare const HEALTH_UNITS: Readonly<Record<HealthType, string>>;
+export interface HealthAvailability {
+    available: boolean;
+    /** Why not, when `available` is false — e.g. "web has no health store",
+     *  "Health Connect is not installed". */
+    reason?: string;
+}
+export interface HealthSample {
+    /** ISO-8601. */
+    start: string;
+    /** ISO-8601. */
+    end: string;
+    value: number;
+    unit: string;
+    /** Workouts only: the activity, mapped back onto the v1 set ("other" for anything else). */
+    activity?: WorkoutActivity;
+}
+export interface HealthQuery {
+    type: HealthType;
+    /** ISO-8601, inclusive. */
+    from: string;
+    /** ISO-8601, exclusive. */
+    to: string;
+    /** steps / activeEnergy / distance are SUMMED per bucket; heartRate is AVERAGED per bucket;
+     *  workouts ignore it (one sample per workout). */
+    bucket?: HealthBucket;
+}
+export interface Workout {
+    activity: WorkoutActivity;
+    /** ISO-8601. */
+    start: string;
+    /** ISO-8601, after `start`. */
+    end: string;
+    energyKcal?: number;
+    distanceM?: number;
+}
+/** The typed rejection every verb throws. A plain Error carrying `code` — worker bundles are
+ *  compiled to a target without class syntax, so this is a factory, not a subclass. */
+export interface HealthError extends Error {
+    name: "HealthError";
+    code: HealthErrorCode;
+}
+/** Build a [HealthError] — what the binding throws for every native `{ error }` reply. */
+export declare function healthError(code: HealthErrorCode, message: string): HealthError;
+/** Narrow a caught value: `catch (e) { if (isHealthError(e) && e.code === "unavailable") … }`. */
+export declare function isHealthError(e: unknown): e is HealthError;
+/** Whether this device has a health store the app can reach. Call it first and branch. */
+export declare function availability(): Promise<HealthAvailability>;
+/**
+ * Prompt for read (and optionally write) access. Resolves with the types the platform
+ * reports as granted — on iOS a read type counts as granted once asked (see header).
+ * Writing workouts also covers the energy + distance samples a saved workout carries.
+ */
+export declare function requestPermission(p: {
+    read: HealthType[];
+    write?: HealthWriteType[];
+}): Promise<{
+    granted: HealthType[];
+}>;
+/** Current READ permission per type, without prompting. iOS reads are always "notDetermined". */
+export declare function getPermissionStatus(p: {
+    types: HealthType[];
+}): Promise<Record<HealthType, HealthPermissionState>>;
+/** Read samples of one type over [from, to). */
+export declare function query(p: HealthQuery): Promise<{
+    samples: HealthSample[];
+}>;
+/** Save a completed workout (with its energy/distance, when given). Resolves with its store id. */
+export declare function saveWorkout(w: Workout): Promise<{
+    id: string;
+}>;
+export declare const version = 1;
+/** The whole surface as one namespace: `import { health } from "@wix/himalaya/health"`. */
+export declare const health: {
+    availability: typeof availability;
+    requestPermission: typeof requestPermission;
+    getPermissionStatus: typeof getPermissionStatus;
+    query: typeof query;
+    saveWorkout: typeof saveWorkout;
+    version: number;
+};

package/dist/authoring-runtime/node_modules/@wix/himalaya/dist/_types/core/sdk/sdk-types/src/capabilities.generated.d.ts

@@ -14,6 +14,7 @@ export declare const CAPABILITY_REGISTRY: {
     readonly files: readonly ["list", "readText", "remove", "stat", "write"];
     readonly godot: readonly ["loadPack", "release", "send"];
     readonly haptic: readonly ["play"];
+    readonly health: readonly ["availability", "getPermissionStatus", "query", "requestPermission", "saveWorkout"];
     readonly himi_apps: readonly ["canOpen", "current", "hostInfo", "open"];
     readonly iap: readonly ["consume", "entitlements", "finishTransaction", "getPaywallConfig", "getProducts", "getUnfinishedTransactions", "purchase", "purchaseForVerification", "restore"];
     readonly keyboard: readonly ["dismiss"];
@@ -39,7 +40,7 @@ export declare const CAPABILITY_REGISTRY: {
     readonly wix_cashier: readonly ["isAvailable", "proceedToPayment"];
 };
 /** A capability id backed by an @himalaya/* SDK binding. */
-export type SdkCapability = "app_info" | "audio_record" | "base44" | "biometrics" | "browser_auth" | "calendar" | "calls" | "camera" | "clipboard" | "contacts" | "file_picker" | "files" | "godot" | "haptic" | "himi_apps" | "iap" | "keyboard" | "live_activity" | "local_database" | "location" | "media_playback" | "motion" | "on_device_ai" | "open_url" | "pdf" | "photos" | "presigned_upload" | "push" | "release_control" | "secure_storage" | "share" | "speaker_diarization" | "speech" | "system_intents" | "tasks" | "ui" | "wix_cashier";
+export type SdkCapability = "app_info" | "audio_record" | "base44" | "biometrics" | "browser_auth" | "calendar" | "calls" | "camera" | "clipboard" | "contacts" | "file_picker" | "files" | "godot" | "haptic" | "health" | "himi_apps" | "iap" | "keyboard" | "live_activity" | "local_database" | "location" | "media_playback" | "motion" | "on_device_ai" | "open_url" | "pdf" | "photos" | "presigned_upload" | "push" | "release_control" | "secure_storage" | "share" | "speaker_diarization" | "speech" | "system_intents" | "tasks" | "ui" | "wix_cashier";
 /** All `capability.<id>.<verb>` action ids, flattened (the worker-bridge wire vocabulary). */
 export declare const CAPABILITY_ACTION_IDS: readonly string[];
 /** Capability id → the @himalaya/* package(s) a worker imports to reach it — every dispatch

package/dist/authoring-runtime/node_modules/@wix/himalaya/dist/_types/core/ts/src/define-app.d.ts

@@ -734,7 +734,7 @@ export interface OrientationEnvelope {
 export declare const DEFAULT_ORIENTATION_ENVELOPE: Required<OrientationEnvelope>;
 /** Fill in the absent families. Total, so callers never branch on `undefined`. */
 export declare function resolveOrientationEnvelope(env?: OrientationEnvelope): Required<OrientationEnvelope>;
-export type Capability = "camera" | "barcode_scanner" | "biometrics" | "secure_storage" | "share" | "push" | "file_picker" | "files" | "open_url" | "pdf" | "clipboard" | "photos" | "presigned_upload" | "ui" | "calendar" | "contacts" | "tasks" | "audio_record" | "audio_record_background" | "calls" | "location" | "location_background" | "motion" | "media_playback" | "webview" | "browser_auth" | "haptic" | "himi_apps" | "iap" | "keyboard" | "wix_cashier" | "live_activity" | "local_database" | "speech" | "speaker_diarization" | "system_intents" | "on_device_ai" | "app_info" | "release_control" | "godot" | "base44";
+export type Capability = "camera" | "barcode_scanner" | "biometrics" | "secure_storage" | "share" | "push" | "file_picker" | "files" | "open_url" | "pdf" | "clipboard" | "photos" | "presigned_upload" | "ui" | "calendar" | "contacts" | "tasks" | "audio_record" | "audio_record_background" | "calls" | "location" | "location_background" | "motion" | "health" | "media_playback" | "webview" | "browser_auth" | "haptic" | "himi_apps" | "iap" | "keyboard" | "wix_cashier" | "live_activity" | "local_database" | "speech" | "speaker_diarization" | "system_intents" | "on_device_ai" | "app_info" | "release_control" | "godot" | "base44";
 /** `defineApp({ base44 })` — which Base44 app `@himalaya/base44` talks to. */
 export interface Base44Config {
     /** The Base44 app id (24 hex chars, e.g. `69725232345f461f64ad1623`). */

package/dist/authoring-runtime/node_modules/@wix/himalaya/dist/_types/core/ts/src/wix-push-links.d.ts

@@ -1,10 +1,15 @@
 import type { PushRoute } from "./push-routes.js";
 /**
- * The Ping app family a customer app's members register under. Ping treats it exactly as
- * `WixBrandedLite`: member recipients, the site's own credentials by `filterForMetaSite`,
- * the BRANDED link format. One constant, so a revert is a one-line change.
+ * The Ping app family a customer app's members register under: member recipients, the site's own
+ * credentials by `filterForMetaSite`, the BRANDED link format. Not `WixWebShell`, the family Ping
+ * renamed `WixBrandedWebApp` to: a send with `isForBrandedApp` (Ping automations addressed to a
+ * contact, and the hosted test send) targets `Branded` and keeps only registrations whose family
+ * starts with `WixBranded` (`RegistrationsFetcher.getMobileRegistrationsForTarget`). One constant,
+ * so a change of family is a one-line change.
  */
-export declare const DEFAULT_PING_APP_NAME = "WixBrandedWebApp";
+export declare const DEFAULT_PING_APP_NAME = "WixBrandedLite";
+/** The family to register under instead of `name`, or undefined when `name` is not retired. */
+export declare function replacementPingFamily(name: string): string | undefined;
 /** One place a member notification can open, and every Wix link shape that names it. */
 export interface WixPushDestination {
     /** `<vertical>.<thing>`, the key an author uses in `push.screens`. */

package/dist/authoring-runtime/node_modules/@wix/himalaya/dist/audio-record.mjs

@@ -29,6 +29,7 @@ var CAPABILITY_REGISTRY = {
   "files": ["list", "readText", "remove", "stat", "write"],
   "godot": ["loadPack", "release", "send"],
   "haptic": ["play"],
+  "health": ["availability", "getPermissionStatus", "query", "requestPermission", "saveWorkout"],
   "himi_apps": ["canOpen", "current", "hostInfo", "open"],
   "iap": ["consume", "entitlements", "finishTransaction", "getPaywallConfig", "getProducts", "getUnfinishedTransactions", "purchase", "purchaseForVerification", "restore"],
   "keyboard": ["dismiss"],

package/dist/authoring-runtime/node_modules/@wix/himalaya/dist/calendar.mjs

@@ -29,6 +29,7 @@ var CAPABILITY_REGISTRY = {
   "files": ["list", "readText", "remove", "stat", "write"],
   "godot": ["loadPack", "release", "send"],
   "haptic": ["play"],
+  "health": ["availability", "getPermissionStatus", "query", "requestPermission", "saveWorkout"],
   "himi_apps": ["canOpen", "current", "hostInfo", "open"],
   "iap": ["consume", "entitlements", "finishTransaction", "getPaywallConfig", "getProducts", "getUnfinishedTransactions", "purchase", "purchaseForVerification", "restore"],
   "keyboard": ["dismiss"],

package/dist/authoring-runtime/node_modules/@wix/himalaya/dist/calls.mjs

@@ -29,6 +29,7 @@ var CAPABILITY_REGISTRY = {
   "files": ["list", "readText", "remove", "stat", "write"],
   "godot": ["loadPack", "release", "send"],
   "haptic": ["play"],
+  "health": ["availability", "getPermissionStatus", "query", "requestPermission", "saveWorkout"],
   "himi_apps": ["canOpen", "current", "hostInfo", "open"],
   "iap": ["consume", "entitlements", "finishTransaction", "getPaywallConfig", "getProducts", "getUnfinishedTransactions", "purchase", "purchaseForVerification", "restore"],
   "keyboard": ["dismiss"],

package/dist/authoring-runtime/node_modules/@wix/himalaya/dist/contacts.mjs

@@ -29,6 +29,7 @@ var CAPABILITY_REGISTRY = {
   "files": ["list", "readText", "remove", "stat", "write"],
   "godot": ["loadPack", "release", "send"],
   "haptic": ["play"],
+  "health": ["availability", "getPermissionStatus", "query", "requestPermission", "saveWorkout"],
   "himi_apps": ["canOpen", "current", "hostInfo", "open"],
   "iap": ["consume", "entitlements", "finishTransaction", "getPaywallConfig", "getProducts", "getUnfinishedTransactions", "purchase", "purchaseForVerification", "restore"],
   "keyboard": ["dismiss"],

package/dist/authoring-runtime/node_modules/@wix/himalaya/dist/health.mjs

@@ -0,0 +1,127 @@
+// ../../core/sdk/dispatch/src/index.ts
+function dispatch(handlerId, params, _options) {
+  const himalaya = globalThis.himalaya;
+  if (!himalaya) {
+    return Promise.reject(
+      new Error("@himalaya/dispatch: called outside a Himalaya runtime. This bundle must run inside a JSWorker (Tier 5).")
+    );
+  }
+  const stringParams = {};
+  if (params) {
+    for (const [k, v] of Object.entries(params)) stringParams[k] = String(v);
+  }
+  return himalaya.dispatch(handlerId, stringParams);
+}
+
+// ../../core/sdk/health/src/index.ts
+var HEALTH_TYPES = ["steps", "heartRate", "activeEnergy", "distance", "workouts"];
+var WORKOUT_ACTIVITIES = ["running", "walking", "cycling", "strength", "other"];
+var HEALTH_UNITS = {
+  steps: "count",
+  heartRate: "bpm",
+  activeEnergy: "kcal",
+  distance: "m",
+  workouts: "s"
+};
+function healthError(code, message) {
+  const e = new Error(message);
+  e.name = "HealthError";
+  e.code = code;
+  return e;
+}
+function isHealthError(e) {
+  return e instanceof Error && e.name === "HealthError" && typeof e.code === "string";
+}
+var ERROR_CODES = ["unavailable", "not_authorized", "invalid_argument", "failed"];
+function unwrap(r) {
+  const err = r?.error;
+  if (err) {
+    const code = ERROR_CODES.includes(err.code ?? "") ? err.code : "failed";
+    throw healthError(code, err.message ?? code);
+  }
+  return r ?? {};
+}
+function assertTypes(types, allowed, what) {
+  for (const t of types) {
+    if (!allowed.includes(t)) throw healthError("invalid_argument", `health: unknown ${what} "${t}"`);
+  }
+}
+function assertRange(from, to) {
+  const a = Date.parse(from), b = Date.parse(to);
+  if (Number.isNaN(a) || Number.isNaN(b)) throw healthError("invalid_argument", "health: from/to must be ISO-8601");
+  if (b <= a) throw healthError("invalid_argument", "health: `to` must be after `from`");
+}
+async function availability() {
+  const r = await dispatch("capability.health.availability");
+  const out = { available: r?.available === true };
+  if (typeof r?.reason === "string" && r.reason) out.reason = r.reason;
+  return out;
+}
+async function requestPermission(p) {
+  const read = p.read ?? [];
+  const write = p.write ?? [];
+  assertTypes(read, HEALTH_TYPES, "read type");
+  assertTypes(write, ["workouts"], "write type");
+  const r = unwrap(
+    await dispatch("capability.health.requestPermission", { read: read.join(","), write: write.join(",") })
+  );
+  const granted = Array.isArray(r.granted) ? r.granted : [];
+  return { granted: granted.filter((t) => HEALTH_TYPES.includes(t)) };
+}
+async function getPermissionStatus(p) {
+  const types = p.types ?? [];
+  assertTypes(types, HEALTH_TYPES, "type");
+  const r = unwrap(
+    await dispatch("capability.health.getPermissionStatus", { types: types.join(",") })
+  );
+  const out = {};
+  for (const t of types) {
+    const s = r.statuses?.[t];
+    out[t] = s === "granted" || s === "denied" ? s : "notDetermined";
+  }
+  return out;
+}
+async function query(p) {
+  assertTypes([p.type], HEALTH_TYPES, "type");
+  assertRange(p.from, p.to);
+  if (p.bucket !== void 0 && p.bucket !== "hour" && p.bucket !== "day") {
+    throw healthError("invalid_argument", `health: unknown bucket "${String(p.bucket)}"`);
+  }
+  const params = { type: p.type, from: p.from, to: p.to };
+  if (p.bucket) params.bucket = p.bucket;
+  const r = unwrap(await dispatch("capability.health.query", params));
+  return { samples: Array.isArray(r.samples) ? r.samples : [] };
+}
+async function saveWorkout(w) {
+  assertTypes([w.activity], WORKOUT_ACTIVITIES, "activity");
+  assertRange(w.start, w.end);
+  const params = { activity: w.activity, start: w.start, end: w.end };
+  if (typeof w.energyKcal === "number") {
+    if (!Number.isFinite(w.energyKcal) || w.energyKcal < 0) throw healthError("invalid_argument", "health: energyKcal must be a finite number >= 0");
+    params.energyKcal = w.energyKcal;
+  }
+  if (typeof w.distanceM === "number") {
+    if (!Number.isFinite(w.distanceM) || w.distanceM < 0) throw healthError("invalid_argument", "health: distanceM must be a finite number >= 0");
+    params.distanceM = w.distanceM;
+  }
+  const r = unwrap(await dispatch("capability.health.saveWorkout", params));
+  if (!r.id) throw healthError("failed", "health.saveWorkout: native returned no id");
+  return { id: r.id };
+}
+var version = 1;
+var health = { availability, requestPermission, getPermissionStatus, query, saveWorkout, version };
+export {
+  HEALTH_TYPES,
+  HEALTH_UNITS,
+  WORKOUT_ACTIVITIES,
+  availability,
+  getPermissionStatus,
+  health,
+  healthError,
+  isHealthError,
+  query,
+  requestPermission,
+  saveWorkout,
+  version
+};
+//# sourceMappingURL=health.mjs.map

package/dist/authoring-runtime/node_modules/@wix/himalaya/dist/location.mjs

@@ -29,6 +29,7 @@ var CAPABILITY_REGISTRY = {
   "files": ["list", "readText", "remove", "stat", "write"],
   "godot": ["loadPack", "release", "send"],
   "haptic": ["play"],
+  "health": ["availability", "getPermissionStatus", "query", "requestPermission", "saveWorkout"],
   "himi_apps": ["canOpen", "current", "hostInfo", "open"],
   "iap": ["consume", "entitlements", "finishTransaction", "getPaywallConfig", "getProducts", "getUnfinishedTransactions", "purchase", "purchaseForVerification", "restore"],
   "keyboard": ["dismiss"],

package/dist/authoring-runtime/node_modules/@wix/himalaya/dist/motion.mjs

@@ -29,6 +29,7 @@ var CAPABILITY_REGISTRY = {
   "files": ["list", "readText", "remove", "stat", "write"],
   "godot": ["loadPack", "release", "send"],
   "haptic": ["play"],
+  "health": ["availability", "getPermissionStatus", "query", "requestPermission", "saveWorkout"],
   "himi_apps": ["canOpen", "current", "hostInfo", "open"],
   "iap": ["consume", "entitlements", "finishTransaction", "getPaywallConfig", "getProducts", "getUnfinishedTransactions", "purchase", "purchaseForVerification", "restore"],
   "keyboard": ["dismiss"],

package/dist/authoring-runtime/node_modules/@wix/himalaya/dist/photos.mjs

@@ -29,6 +29,7 @@ var CAPABILITY_REGISTRY = {
   "files": ["list", "readText", "remove", "stat", "write"],
   "godot": ["loadPack", "release", "send"],
   "haptic": ["play"],
+  "health": ["availability", "getPermissionStatus", "query", "requestPermission", "saveWorkout"],
   "himi_apps": ["canOpen", "current", "hostInfo", "open"],
   "iap": ["consume", "entitlements", "finishTransaction", "getPaywallConfig", "getProducts", "getUnfinishedTransactions", "purchase", "purchaseForVerification", "restore"],
   "keyboard": ["dismiss"],

package/dist/authoring-runtime/node_modules/@wix/himalaya/dist/sdk-types.mjs

@@ -14,6 +14,7 @@ var CAPABILITY_REGISTRY = {
   "files": ["list", "readText", "remove", "stat", "write"],
   "godot": ["loadPack", "release", "send"],
   "haptic": ["play"],
+  "health": ["availability", "getPermissionStatus", "query", "requestPermission", "saveWorkout"],
   "himi_apps": ["canOpen", "current", "hostInfo", "open"],
   "iap": ["consume", "entitlements", "finishTransaction", "getPaywallConfig", "getProducts", "getUnfinishedTransactions", "purchase", "purchaseForVerification", "restore"],
   "keyboard": ["dismiss"],

package/dist/authoring-runtime/node_modules/@wix/himalaya/dist/tasks.mjs

@@ -29,6 +29,7 @@ var CAPABILITY_REGISTRY = {
   "files": ["list", "readText", "remove", "stat", "write"],
   "godot": ["loadPack", "release", "send"],
   "haptic": ["play"],
+  "health": ["availability", "getPermissionStatus", "query", "requestPermission", "saveWorkout"],
   "himi_apps": ["canOpen", "current", "hostInfo", "open"],
   "iap": ["consume", "entitlements", "finishTransaction", "getPaywallConfig", "getProducts", "getUnfinishedTransactions", "purchase", "purchaseForVerification", "restore"],
   "keyboard": ["dismiss"],

package/dist/authoring-runtime/node_modules/@wix/himalaya/package.json

@@ -114,6 +114,10 @@
       "types": "./dist/_types/core/sdk/haptic/src/index.d.ts",
       "import": "./dist/haptic.mjs"
     },
+    "./health": {
+      "types": "./dist/_types/core/sdk/health/src/index.d.ts",
+      "import": "./dist/health.mjs"
+    },
     "./himi-apps": {
       "types": "./dist/_types/core/sdk/himi-apps/src/index.d.ts",
       "import": "./dist/himi-apps.mjs"

package/dist/cli.mjs

@@ -5002,6 +5002,7 @@ var init_build_lib = __esm({
       // module comments — so the committed artifact differed per machine (a clone whose
       // node_modules points elsewhere emitted /Users/<name>/... into a tracked file).
       "@himalaya/motion": resolve8(REPO_ROOT4, "core/sdk/motion/src/index.ts"),
+      "@himalaya/health": resolve8(REPO_ROOT4, "core/sdk/health/src/index.ts"),
       // Pure TypeScript (GPX parse/serialize + track stats) — no dispatch, so no capability
       // grant, same class as @himalaya/state.
       "@himalaya/gpx": resolve8(REPO_ROOT4, "core/sdk/gpx/src/index.ts"),
@@ -6826,7 +6827,6 @@ function walk(node, registry, path2, out2) {
 var SYSTEM_FONT_FAMILY, TONAL_ELEVATION_ALPHA, COLOR_TOKEN_PROPS, TYPOGRAPHY_TOKEN_PROPS;
 var init_tokens = __esm({
   "../../core/ts/src/tokens.ts"() {
-    "use strict";
     SYSTEM_FONT_FAMILY = "$system";
     TONAL_ELEVATION_ALPHA = [0, 0.05, 0.08, 0.11, 0.12, 0.14];
     COLOR_TOKEN_PROPS = {
@@ -6877,7 +6877,6 @@ function resolveTranslation(value, catalog, sourceCatalog) {
 var BINDING_SIGILS, BINDING_SIGIL_RE, TRANSLATION_PREFIX, TRANSLATION_KEY_RE;
 var init_bindings = __esm({
   "../../core/ts/src/bindings.ts"() {
-    "use strict";
     BINDING_SIGILS = ["service", "flag", "item", "t"];
     BINDING_SIGIL_RE = new RegExp(
       `^\\$(?:${BINDING_SIGILS.filter((s2) => s2 !== "t").join("|")})\\b|^\\$t:`
@@ -17165,6 +17164,86 @@ var init_native_requirements = __esm({
           ]
         }
       },
+      health: {
+        // Apple Health (HealthKit) / Health Connect (@himalaya/health): read steps, heart rate,
+        // active energy, distance and workouts; write a completed workout back. A different
+        // privacy class from `motion` (the platform HEALTH store, not raw sensors), so its own row.
+        ios: {
+          // HealthKit throws (and App Review rejects) when either key is missing for the
+          // direction the app uses. Both are declared because the surface is read + write.
+          usageStrings: [
+            { key: "NSHealthShareUsageDescription", suggested: "Read your steps, heart rate, energy and workouts from Apple Health to show your activity." },
+            { key: "NSHealthUpdateUsageDescription", suggested: "Save the workouts you complete to Apple Health." }
+          ],
+          // The App ID must have the HealthKit capability enabled for a DEVICE / TestFlight
+          // build to sign with this — see docs/capability-native-config.md. Simulator builds
+          // do not need the App ID step.
+          entitlements: { "com.apple.developer.healthkit": true }
+        },
+        // macOS has no Health store (HKHealthStore.isHealthDataAvailable() is false on Mac), so
+        // the capability answers `available: false` there and contributes no config.
+        android: {
+          // Health Connect permissions are runtime-granted through Health Connect's own dialog,
+          // but the dialog only offers a permission the manifest declares.
+          permissions: [
+            "android.permission.health.READ_ACTIVE_CALORIES_BURNED",
+            "android.permission.health.READ_DISTANCE",
+            "android.permission.health.READ_EXERCISE",
+            "android.permission.health.READ_HEART_RATE",
+            "android.permission.health.READ_STEPS",
+            // A saved workout carries its energy + distance as their OWN records alongside the
+            // ExerciseSessionRecord, so writing them needs their write permissions too.
+            "android.permission.health.WRITE_ACTIVE_CALORIES_BURNED",
+            "android.permission.health.WRITE_DISTANCE",
+            "android.permission.health.WRITE_EXERCISE"
+          ],
+          // Health Connect will not show its permission dialog to an app with no privacy-
+          // rationale screen. Android ≤13 finds it by the ACTION_SHOW_PERMISSIONS_RATIONALE
+          // intent-filter; Android 14+ by a VIEW_PERMISSION_USAGE alias that only the system's
+          // permission controller may start (START_VIEW_PERMISSION_USAGE).
+          activities: [
+            {
+              name: "io.himalaya.health.HealthPermissionsRationaleActivity",
+              exported: true,
+              intentFilters: [{ actions: ["androidx.health.ACTION_SHOW_PERMISSIONS_RATIONALE"] }]
+            },
+            {
+              name: "io.himalaya.health.HealthViewPermissionUsageActivity",
+              targetActivity: "io.himalaya.health.HealthPermissionsRationaleActivity",
+              exported: true,
+              permission: "android.permission.START_VIEW_PERMISSION_USAGE",
+              intentFilters: [
+                {
+                  actions: ["android.intent.action.VIEW_PERMISSION_USAGE"],
+                  categories: ["android.intent.category.HEALTH_PERMISSIONS"]
+                }
+              ]
+            }
+          ],
+          // On Android ≤13 Health Connect is a separate APK; without package visibility the
+          // client reports it as not installed even when it is.
+          queries: ["com.google.android.apps.healthdata"]
+        },
+        privacy: {
+          // Health = heart rate; Fitness = steps / energy / distance / workouts. NOT linked and
+          // NOT tracking: read on device for the app's own display. An app that syncs these to
+          // a server must mark them linked in its native-config overrides.
+          collectedDataTypes: [
+            { type: "NSPrivacyCollectedDataTypeHealth", linked: false, tracking: false, purposes: [APP_FUNCTIONALITY] },
+            { type: "NSPrivacyCollectedDataTypeFitness", linked: false, tracking: false, purposes: [APP_FUNCTIONALITY] }
+          ],
+          dataSafety: [
+            { category: "Health and fitness", dataType: "Health info", purpose: "App functionality" },
+            { category: "Health and fitness", dataType: "Fitness info", purpose: "App functionality" }
+          ],
+          reviewNotes: [
+            "health: HealthKit (iOS) / Health Connect (Android). Apple Guideline 5.1.3 and Google Play's Health Connect policy both forbid using health data for advertising or selling it, and both require a privacy policy that names the health data read.",
+            "Google Play requires a Health Connect declaration form in the Play Console for every android.permission.health.* permission requested; an app that ships these permissions without it is rejected.",
+            "iOS hides READ denials: HealthKit never reports whether read access was refused, so `getPermissionStatus` answers `notDetermined` for reads and a denied read simply returns no samples.",
+            "The HealthKit entitlement requires the HealthKit capability on the App ID for device and TestFlight builds."
+          ]
+        }
+      },
       media_playback: {
         ios: {
           // Background audio for SDUI MediaPlayer sessions that opt into background playback.
@@ -17403,17 +17482,27 @@ function androidPlanFor(ids, ov = {}) {
   const perms = /* @__PURE__ */ new Set();
   const feats = /* @__PURE__ */ new Map();
   const svcs = /* @__PURE__ */ new Map();
+  const acts = /* @__PURE__ */ new Map();
+  const queries = /* @__PURE__ */ new Set();
   const add = (req) => {
     for (const p2 of req?.permissions ?? []) perms.add(p2);
     for (const f2 of req?.features ?? []) feats.set(f2.name, (feats.get(f2.name) ?? false) || f2.required);
     for (const s2 of req?.services ?? []) svcs.set(s2.name, s2);
+    for (const a2 of req?.activities ?? []) acts.set(a2.name, a2);
+    for (const q2 of req?.queries ?? []) queries.add(q2);
   };
   for (const id of ids) add(nativeRequirementsFor(id)?.android);
   add(ov);
   return {
     permissions: [...perms].sort(),
     features: [...feats.entries()].sort((a2, b2) => a2[0].localeCompare(b2[0])).map(([name, required3]) => ({ name, required: required3 })),
-    services: [...svcs.values()].sort((a2, b2) => a2.name.localeCompare(b2.name))
+    services: [...svcs.values()].sort((a2, b2) => a2.name.localeCompare(b2.name)),
+    // An <activity-alias> must come AFTER the activity it targets, or the manifest merger
+    // rejects it — so aliases sort after plain activities, then by name.
+    activities: [...acts.values()].sort(
+      (a2, b2) => Number(!!a2.targetActivity) - Number(!!b2.targetActivity) || a2.name.localeCompare(b2.name)
+    ),
+    queries: [...queries].sort()
   };
 }
 var init_plan = __esm({
@@ -17448,6 +17537,9 @@ var init_builtins = __esm({
       "files",
       "godot",
       "haptic",
+      // Registered on every arm. Web (and the macOS build of the iOS arm) answer
+      // `availability → { available: false }` and refuse the rest with `unavailable`.
+      "health",
       "himi_apps",
       "iap",
       "keyboard",
@@ -17561,6 +17653,7 @@ var init_known = __esm({
       local_database: "registering it without the app's dataSchema writes declared-encrypted entities in plaintext (#1896) \u2014 the shell has to install the schema first",
       live_activity: "needs a WidgetKit extension target in the shell's project, which a build cannot add",
       base44: "needs the opt-in HimalayaCoreBase44 / :core-runtime-base44 SDK linked into the shell",
+      health: "needs the opt-in HimalayaCoreHealth / :core-runtime-health store linked into the shell (unlinked, every verb answers `unavailable`)",
       godot: "needs the opt-in Godot SPM product linked into the shell",
       wix_platform: "needs the shell's boot to configure it with a Wix API client and launch services",
       himi_apps: "is a multi-app host surface (Himi Player), not something one app's binary serves",
@@ -18356,12 +18449,34 @@ function renderAndroidXml(plan, indent) {
   const lines = [];
   for (const p2 of plan.permissions) lines.push(`${indent}<uses-permission android:name="${p2}" />`);
   for (const f2 of plan.features) lines.push(`${indent}<uses-feature android:name="${f2.name}" android:required="${f2.required}" />`);
+  const queries = plan.queries ?? [];
+  if (queries.length > 0) {
+    lines.push(`${indent}<queries>`);
+    for (const q2 of queries) lines.push(`${indent}    <package android:name="${q2}" />`);
+    lines.push(`${indent}</queries>`);
+  }
   return lines;
 }
 function renderAndroidServicesXml(plan, indent) {
-  return plan.services.map(
+  const lines = plan.services.map(
     (s2) => `${indent}<service android:name="${s2.name}" android:exported="false" android:foregroundServiceType="${s2.foregroundServiceType}" />`
   );
+  for (const a2 of plan.activities ?? []) {
+    const tag = a2.targetActivity ? "activity-alias" : "activity";
+    const attrs = [`android:name="${a2.name}"`];
+    if (a2.targetActivity) attrs.push(`android:targetActivity="${a2.targetActivity}"`);
+    attrs.push(`android:exported="${a2.exported}"`);
+    if (a2.permission) attrs.push(`android:permission="${a2.permission}"`);
+    lines.push(`${indent}<${tag} ${attrs.join(" ")}>`);
+    for (const f2 of a2.intentFilters) {
+      lines.push(`${indent}    <intent-filter>`);
+      for (const act of f2.actions) lines.push(`${indent}        <action android:name="${act}" />`);
+      for (const c2 of f2.categories ?? []) lines.push(`${indent}        <category android:name="${c2}" />`);
+      lines.push(`${indent}    </intent-filter>`);
+    }
+    lines.push(`${indent}</${tag}>`);
+  }
+  return lines;
 }
 function isBegin(line, kind, label2) {
   const s2 = line.trim();
@@ -22504,6 +22619,7 @@ var init_capabilities_generated = __esm({
       "files": ["list", "readText", "remove", "stat", "write"],
       "godot": ["loadPack", "release", "send"],
       "haptic": ["play"],
+      "health": ["availability", "getPermissionStatus", "query", "requestPermission", "saveWorkout"],
       "himi_apps": ["canOpen", "current", "hostInfo", "open"],
       "iap": ["consume", "entitlements", "finishTransaction", "getPaywallConfig", "getProducts", "getUnfinishedTransactions", "purchase", "purchaseForVerification", "restore"],
       "keyboard": ["dismiss"],
@@ -22546,6 +22662,7 @@ var init_capabilities_generated = __esm({
       "files": ["@himalaya/files"],
       "godot": ["@himalaya/godot"],
       "haptic": ["@himalaya/haptic"],
+      "health": ["@himalaya/health"],
       "himi_apps": ["@himalaya/himi-apps"],
       "iap": ["@himalaya/iap"],
       "keyboard": ["@himalaya/keyboard"],
@@ -22605,8 +22722,8 @@ var init_shell_capabilities_generated = __esm({
         appDir: "apps/demo-app",
         shared: false,
         extensible: false,
-        built: ["base44", "biometrics", "calendar", "calls", "contacts", "haptic", "keyboard", "live_activity", "location", "media_playback", "on_device_ai", "photos", "push", "speech", "tasks", "ui"],
-        serves: ["base44", "biometrics", "calendar", "calls", "contacts", "haptic", "keyboard", "live_activity", "location", "media_playback", "on_device_ai", "photos", "push", "speech", "tasks", "ui"]
+        built: ["base44", "biometrics", "calendar", "calls", "contacts", "haptic", "health", "keyboard", "live_activity", "location", "media_playback", "on_device_ai", "photos", "push", "speech", "tasks", "ui"],
+        serves: ["base44", "biometrics", "calendar", "calls", "contacts", "haptic", "health", "keyboard", "live_activity", "location", "media_playback", "on_device_ai", "photos", "push", "speech", "tasks", "ui"]
       },
       "owner-lite": {
         appDir: "apps/himi-owner-lite",
@@ -24054,6 +24171,9 @@ var init_l10n = __esm({
 });
 
 // ../../core/ts/src/wix-push-links.ts
+function replacementPingFamily(name) {
+  return RETIRED_PING_FAMILIES.has(name) ? DEFAULT_PING_APP_NAME : void 0;
+}
 function derivesWixPushRoutes(push, installedVerticals) {
   return push?.payloadAdapter === "wix-ping" && push.routes === void 0 && installedVerticals !== void 0;
 }
@@ -24097,10 +24217,14 @@ function itemParamKey(paramKeys) {
   if (paramKeys.includes("id")) return "id";
   return paramKeys.length === 1 ? paramKeys[0] : void 0;
 }
-var DEFAULT_PING_APP_NAME, EVENTS_APP_ID, WIX_MEMBER_PUSH_DESTINATIONS;
+var DEFAULT_PING_APP_NAME, RETIRED_PING_FAMILIES, EVENTS_APP_ID, WIX_MEMBER_PUSH_DESTINATIONS;
 var init_wix_push_links = __esm({
   "../../core/ts/src/wix-push-links.ts"() {
-    DEFAULT_PING_APP_NAME = "WixBrandedWebApp";
+    DEFAULT_PING_APP_NAME = "WixBrandedLite";
+    RETIRED_PING_FAMILIES = /* @__PURE__ */ new Set([
+      // Renamed to WixWebShell by wix-private/wixos #22625, 2026-10-04.
+      "WixBrandedWebApp"
+    ]);
     EVENTS_APP_ID = "140603ad-af8d-84a5-2c80-a0f60cb47351";
     WIX_MEMBER_PUSH_DESTINATIONS = [
       {
@@ -133446,7 +133570,7 @@ import { lstatSync as lstatSync11, readFileSync as readFileSync53 } from "node:f
 import { basename as basename13, join as join46 } from "node:path";
 import ts2 from "typescript";
 function enablePushInConfig(source, options) {
-  const pingAppName = options.pingAppName ?? DEFAULT_PING_APP_NAME;
+  const pingAppName = DEFAULT_PING_APP_NAME;
   const fileName = options.fileName ?? "config.ts";
   const kind = fileName.endsWith(".ts") ? ts2.ScriptKind.TS : ts2.ScriptKind.JS;
   const file = ts2.createSourceFile(fileName, source, ts2.ScriptTarget.Latest, true, kind);
@@ -133487,6 +133611,7 @@ function planPush(app, pingAppName, plan) {
   }
   const block = push.kind === "written" ? push.node.initializer : void 0;
   plan.pushOn = !!block && stringValue(block, "registrar") === "wix-ping" && stringValue(block, "payloadAdapter") === "wix-ping";
+  if (block && stringValue(block, "registrar") === "wix-ping") planRetiredFamily(block, plan);
   const lacking = [
     ...block && stringValue(block, "registrar") === "wix-ping" ? [] : ['registrar: "wix-ping"'],
     ...block && stringValue(block, "pingAppName") ? [] : [`pingAppName: ${JSON.stringify(pingAppName)}`],
@@ -133498,6 +133623,15 @@ function planPush(app, pingAppName, plan) {
     );
   }
 }
+function planRetiredFamily(block, plan) {
+  const literal = unwrap(block);
+  const found = ts2.isObjectLiteralExpression(literal) ? lookup2(literal, "pingAppName") : void 0;
+  const value = found?.kind === "written" ? unwrap(found.node.initializer) : void 0;
+  const replacement = value && ts2.isStringLiteralLike(value) ? replacementPingFamily(value.text) : void 0;
+  if (!value || !replacement) return;
+  plan.splices.push({ at: value.getStart(), end: value.end, text: JSON.stringify(replacement) });
+  plan.applied.push(`pingAppName ${JSON.stringify(replacement)} in place of ${value.getText()}`);
+}
 function planCapability(app, plan) {
   const capabilities = lookup2(app, "capabilities");
   if (capabilities.kind === "absent") {
@@ -136556,6 +136690,7 @@ async function navIssues(dir, strict) {
   pushRouteIssues(cfg.push, nav, provisioning, warn3);
   pushScreenMapIssues(cfg.push, provisioning, warn3);
   pushAuthIssues(cfg.push, cfg.auth, provisioning, warn3);
+  pushFamilyIssues(cfg.push, warn3);
   if (nav === void 0 || nav === null) return issues;
   if (!isPlainObject2(nav)) {
     error("nav-not-an-object", `navigation must be an object (got ${Array.isArray(nav) ? "array" : typeof nav}).`);
@@ -136676,6 +136811,15 @@ function pushAuthIssues(push, auth, provisioning, warn3) {
     `push.registrar is "wix-ping", which registers a signed-in member's device with Wix Ping, but ${problem}. Use auth: WixConsumerAuthProvider({ siteId: "${provisioning.siteId ?? "<metaSiteId>"}", \u2026 }).`
   );
 }
+function pushFamilyIssues(push, warn3) {
+  if (!isPlainObject2(push) || push.registrar !== "wix-ping" || typeof push.pingAppName !== "string") return;
+  const replacement = replacementPingFamily(push.pingAppName);
+  if (!replacement) return;
+  warn3(
+    "push-ping-family-retired",
+    `push.pingAppName "${push.pingAppName}" is a family Ping no longer has, and it kept no alias: a device registering under it gets no notifications. Use pingAppName: "${replacement}".`
+  );
+}
 function pushRouteAdvisories(pushRoutes) {
   if (!pushRoutes) return [];
   const linked = new Set(WIX_MEMBER_PUSH_DESTINATIONS.map((d2) => d2.vertical));
@@ -143329,23 +143473,23 @@ var init_preview_assets_generated = __esm({
   "../../packages/serve/src/preview-assets.generated.ts"() {
     init_preview_assets_format();
     PREVIEW_ASSET_MANIFEST = [
-      { key: "assets/index-DiC0HNa3.js", contentType: "application/javascript; charset=utf-8", offset: 8, length: 1187655, sha256: "08fb74d8752e2f7ae5dcffd520eb03d2eb3def8db9d8fa4b9d5de1a7ae293100" },
-      { key: "assets/pdf.worker.min-BmVo14Nb.mjs", contentType: "application/octet-stream", offset: 1187663, length: 1317034, sha256: "a33cfe728c584fdba4fcc1fd54bcdc2f9f2f13889ddbb5b2bd1d0f8cbe49b84e" },
-      { key: "assets/pdfDocument-CXSifjpc.js", contentType: "application/javascript; charset=utf-8", offset: 2504697, length: 489166, sha256: "7dd04afebfbeeede2222a8beb5d87e58391ed36493b57a190a3e2eed4da35356" },
-      { key: "fonts/Roboto-LICENSE.txt", contentType: "application/octet-stream", offset: 2993863, length: 4610, sha256: "994062dd7af4186a739de55dd9e151c63b6301f8e2cbafc608d35c2e87da0cd2" },
-      { key: "fonts/Roboto-Variable.ttf", contentType: "font/ttf", offset: 2998473, length: 488584, sha256: "d7598e12c5dbef095ff8272cfc55da0250bd07fbdecbac8a530b9b277872a134" },
-      { key: "fonts/WixMadeforDisplay-Bold.ttf", contentType: "font/ttf", offset: 3487057, length: 90924, sha256: "ec4c7d63772d980d6e147b2df6215fd2737e4b04cebe0cf7e11dc695fb63cdcf" },
-      { key: "fonts/WixMadeforDisplay-ExtraBold.ttf", contentType: "font/ttf", offset: 3577981, length: 90984, sha256: "bf4c16a2774edd38a921edf3099469866cd74c094fd596f3fa4e81f54a04dfaa" },
-      { key: "fonts/WixMadeforDisplay-Medium.ttf", contentType: "font/ttf", offset: 3668965, length: 90980, sha256: "368faca44fb9f7207e4af784e94750b1ee59c1098b8689e0f4a918926f244fb5" },
-      { key: "fonts/WixMadeforDisplay-Regular.ttf", contentType: "font/ttf", offset: 3759945, length: 90872, sha256: "97ed8f1a6772abe26e3d8af5cecfc4b02faa94497d585b0398b5053b739a70c1" },
-      { key: "fonts/WixMadeforDisplay-SemiBold.ttf", contentType: "font/ttf", offset: 3850817, length: 90980, sha256: "642feab8a48ddf6c7a89d7c2a7c0edfa0e6e773f671287e460e222703563191e" },
-      { key: "fonts/WixMadeforText-Bold.ttf", contentType: "font/ttf", offset: 3941797, length: 108636, sha256: "37c179b4fefb63ea9637322b84583a2df53aa226c150294eea1675c14b1b8e29" },
-      { key: "fonts/WixMadeforText-ExtraBold.ttf", contentType: "font/ttf", offset: 4050433, length: 109084, sha256: "62e2fe4718129f36ecdb0ae4de385bd6b81ecc876146447167c6c140fad699a9" },
-      { key: "fonts/WixMadeforText-Medium.ttf", contentType: "font/ttf", offset: 4159517, length: 109048, sha256: "4ecf270136af928612c76fe4ebade91d8156975e5ea4c0cf9225501dd1788e02" },
-      { key: "fonts/WixMadeforText-Regular.ttf", contentType: "font/ttf", offset: 4268565, length: 107700, sha256: "dee56f09fd3efc127c1ea95557edc74110c1460a46287da36e0af25efd341ef5" },
-      { key: "fonts/WixMadeforText-SemiBold.ttf", contentType: "font/ttf", offset: 4376265, length: 88108, sha256: "dced97a77624bc5f8b1ae65850360908297f4588e09feb6f22792d29dc7e765b" },
-      { key: "index.html", contentType: "text/html; charset=utf-8", offset: 4464373, length: 4947, sha256: "e46144d08f1a73203c2313ca0ed8b607fd383f4889a82701d6c37f00e4720c95" },
-      { key: "t5-frame.html", contentType: "text/html; charset=utf-8", offset: 4469320, length: 17344, sha256: "d057298d75e7373e5e2c4d11b7d1bcbea88e03af555ba63d97641c78509c58e4" }
+      { key: "assets/index-DcqakqyW.js", contentType: "application/javascript; charset=utf-8", offset: 8, length: 1191096, sha256: "83e1d51efc75dc63a19cd5bd9072d50e8b831d6c39152922cdc491225f43d696" },
+      { key: "assets/pdf.worker.min-BmVo14Nb.mjs", contentType: "application/octet-stream", offset: 1191104, length: 1317034, sha256: "a33cfe728c584fdba4fcc1fd54bcdc2f9f2f13889ddbb5b2bd1d0f8cbe49b84e" },
+      { key: "assets/pdfDocument-CITrNgUQ.js", contentType: "application/javascript; charset=utf-8", offset: 2508138, length: 489166, sha256: "202328a260c149a8bdf211a58a04cb74114e40510a4c0dd0511045b3a6279b47" },
+      { key: "fonts/Roboto-LICENSE.txt", contentType: "application/octet-stream", offset: 2997304, length: 4610, sha256: "994062dd7af4186a739de55dd9e151c63b6301f8e2cbafc608d35c2e87da0cd2" },
+      { key: "fonts/Roboto-Variable.ttf", contentType: "font/ttf", offset: 3001914, length: 488584, sha256: "d7598e12c5dbef095ff8272cfc55da0250bd07fbdecbac8a530b9b277872a134" },
+      { key: "fonts/WixMadeforDisplay-Bold.ttf", contentType: "font/ttf", offset: 3490498, length: 90924, sha256: "ec4c7d63772d980d6e147b2df6215fd2737e4b04cebe0cf7e11dc695fb63cdcf" },
+      { key: "fonts/WixMadeforDisplay-ExtraBold.ttf", contentType: "font/ttf", offset: 3581422, length: 90984, sha256: "bf4c16a2774edd38a921edf3099469866cd74c094fd596f3fa4e81f54a04dfaa" },
+      { key: "fonts/WixMadeforDisplay-Medium.ttf", contentType: "font/ttf", offset: 3672406, length: 90980, sha256: "368faca44fb9f7207e4af784e94750b1ee59c1098b8689e0f4a918926f244fb5" },
+      { key: "fonts/WixMadeforDisplay-Regular.ttf", contentType: "font/ttf", offset: 3763386, length: 90872, sha256: "97ed8f1a6772abe26e3d8af5cecfc4b02faa94497d585b0398b5053b739a70c1" },
+      { key: "fonts/WixMadeforDisplay-SemiBold.ttf", contentType: "font/ttf", offset: 3854258, length: 90980, sha256: "642feab8a48ddf6c7a89d7c2a7c0edfa0e6e773f671287e460e222703563191e" },
+      { key: "fonts/WixMadeforText-Bold.ttf", contentType: "font/ttf", offset: 3945238, length: 108636, sha256: "37c179b4fefb63ea9637322b84583a2df53aa226c150294eea1675c14b1b8e29" },
+      { key: "fonts/WixMadeforText-ExtraBold.ttf", contentType: "font/ttf", offset: 4053874, length: 109084, sha256: "62e2fe4718129f36ecdb0ae4de385bd6b81ecc876146447167c6c140fad699a9" },
+      { key: "fonts/WixMadeforText-Medium.ttf", contentType: "font/ttf", offset: 4162958, length: 109048, sha256: "4ecf270136af928612c76fe4ebade91d8156975e5ea4c0cf9225501dd1788e02" },
+      { key: "fonts/WixMadeforText-Regular.ttf", contentType: "font/ttf", offset: 4272006, length: 107700, sha256: "dee56f09fd3efc127c1ea95557edc74110c1460a46287da36e0af25efd341ef5" },
+      { key: "fonts/WixMadeforText-SemiBold.ttf", contentType: "font/ttf", offset: 4379706, length: 88108, sha256: "dced97a77624bc5f8b1ae65850360908297f4588e09feb6f22792d29dc7e765b" },
+      { key: "index.html", contentType: "text/html; charset=utf-8", offset: 4467814, length: 4947, sha256: "2189ce1438ed15f3a041d5e9950c92b27a18d288103ac04249b184c369137721" },
+      { key: "t5-frame.html", contentType: "text/html; charset=utf-8", offset: 4472761, length: 17344, sha256: "d057298d75e7373e5e2c4d11b7d1bcbea88e03af555ba63d97641c78509c58e4" }
     ];
   }
 });

package/guides/app-config.md

@@ -115,7 +115,7 @@ with a native footprint only arrives with a new binary. `himi docs capabilities`
 loop — discover, declare, validate, ship — and `himi capabilities <id>` shows the import and which
 shells' binaries serve it.
 
-App-level capability vocabulary: `camera`, `barcode_scanner`, `biometrics`, `secure_storage`, `share`, `push`, `file_picker`, `files`, `open_url`, `pdf`, `clipboard`, `photos`, `presigned_upload`, `ui`, `calendar`, `contacts`, `tasks`, `audio_record`, `audio_record_background`, `calls`, `location`, `location_background`, `motion`, `media_playback`, `webview`, `browser_auth`, `haptic`, `himi_apps`, `iap`, `keyboard`, `wix_cashier`, `live_activity`, `local_database`, `speech`, `speaker_diarization`, `system_intents`, `on_device_ai`, `app_info`, `release_control`, `godot`, `base44`.
+App-level capability vocabulary: `camera`, `barcode_scanner`, `biometrics`, `secure_storage`, `share`, `push`, `file_picker`, `files`, `open_url`, `pdf`, `clipboard`, `photos`, `presigned_upload`, `ui`, `calendar`, `contacts`, `tasks`, `audio_record`, `audio_record_background`, `calls`, `location`, `location_background`, `motion`, `health`, `media_playback`, `webview`, `browser_auth`, `haptic`, `himi_apps`, `iap`, `keyboard`, `wix_cashier`, `live_activity`, `local_database`, `speech`, `speaker_diarization`, `system_intents`, `on_device_ai`, `app_info`, `release_control`, `godot`, `base44`.
 
 ## What `himi validate` checks (7 passes)
 

package/guides/importable-sdks.md

@@ -31,6 +31,7 @@ package in one greppable file) or `GET /v1/sdk/<name>` over HTTP; in the CLI,
 - `@himalaya/godot` — Tier-5 typed binding for a Godot game surface.
 - `@himalaya/gpx` — read and write GPX 1.1, and compute track statistics.
 - `@himalaya/haptic` — Tier-5 typed binding for the platform's haptic capability.
+- `@himalaya/health` — Tier-5 typed binding for the platform HEALTH store.
 - `@himalaya/himi-apps` — Tier-5 typed binding for cross-app open / host queries.
 - `@himalaya/iap` — Tier-5 typed binding to the platform's in-app-purchase capability.
 - `@himalaya/keyboard` — Tier-5 typed binding for the platform's keyboard capability.

package/guides/push-cli-onboarding.md

@@ -116,16 +116,18 @@ capabilities: ["push" /* , … */],
 // Routes are derived at build time from provisioning.json and your screens; see himi validate.
 push: {
   registrar: "wix-ping",
-  pingAppName: "WixBrandedWebApp",
+  pingAppName: "WixBrandedLite",
   requestPermissionOnLaunch: true,
   payloadAdapter: "wix-ping",
 },
 ```
 
-- `pingAppName` is the Ping app family the device registers under. Use `WixBrandedWebApp`:
-  Ping allows it for site members and uses the credentials `himi notify setup` stored for
-  the site. A build signed for the APNs development environment appends `.sandbox` itself;
-  do not add it.
+- `pingAppName` is the Ping app family the device registers under. Use `WixBrandedLite`:
+  Ping allows it for site members, uses the credentials `himi notify setup` stored for the
+  site, and delivers the site's member notifications to it. A build signed for the APNs
+  development environment appends `.sandbox` itself; do not add it. `WixBrandedWebApp` no
+  longer exists in Ping: `himi validate` reports it as `push-ping-family-retired`, and
+  re-running `himi notify setup` replaces it.
 - The device registers only after a member signs in; a visitor's device receives nothing.
   Keep `siteId` in `auth` on the site `himi notify setup` configured. A changed `siteId` or
   `clientId` ships with `himi push` like the rest of the config, and the app picks it up on

package/guides/sdk-reference.json

@@ -1368,6 +1368,151 @@
       }
     ]
   },
+  {
+    "name": "@himalaya/health",
+    "source": "core/sdk/health/src/index.ts",
+    "description": "Tier-5 typed binding for the platform HEALTH store.",
+    "api": [
+      {
+        "name": "HealthType",
+        "kind": "type",
+        "jsdoc": "/** A readable health data type. */",
+        "decl": "export type HealthType = \"steps\" | \"heartRate\" | \"activeEnergy\" | \"distance\" | \"workouts\";"
+      },
+      {
+        "name": "HealthWriteType",
+        "kind": "type",
+        "jsdoc": "/** A writable health data type. v1 writes workouts only. */",
+        "decl": "export type HealthWriteType = \"workouts\";"
+      },
+      {
+        "name": "HealthPermissionState",
+        "kind": "type",
+        "jsdoc": "",
+        "decl": "export type HealthPermissionState = \"granted\" | \"denied\" | \"notDetermined\";"
+      },
+      {
+        "name": "HealthBucket",
+        "kind": "type",
+        "jsdoc": "/** Aggregation bucket for `query`. Omitted ⇒ one total (cumulative types) or raw samples. */",
+        "decl": "export type HealthBucket = \"hour\" | \"day\";"
+      },
+      {
+        "name": "WorkoutActivity",
+        "kind": "type",
+        "jsdoc": "",
+        "decl": "export type WorkoutActivity = \"running\" | \"walking\" | \"cycling\" | \"strength\" | \"other\";"
+      },
+      {
+        "name": "HealthErrorCode",
+        "kind": "type",
+        "jsdoc": "",
+        "decl": "export type HealthErrorCode = \"unavailable\" | \"not_authorized\" | \"invalid_argument\" | \"failed\";"
+      },
+      {
+        "name": "HEALTH_TYPES",
+        "kind": "const",
+        "jsdoc": "",
+        "decl": "export const HEALTH_TYPES: readonly HealthType[] = [\"steps\", \"heartRate\", \"activeEnergy\", \"distance\", \"workouts\"];"
+      },
+      {
+        "name": "WORKOUT_ACTIVITIES",
+        "kind": "const",
+        "jsdoc": "",
+        "decl": "export const WORKOUT_ACTIVITIES: readonly WorkoutActivity[] = [\"running\", \"walking\", \"cycling\", \"strength\", \"other\"];"
+      },
+      {
+        "name": "HEALTH_UNITS",
+        "kind": "const",
+        "jsdoc": "/** The fixed unit each type's `value` is reported in. */",
+        "decl": "export const HEALTH_UNITS: Readonly<Record<HealthType, string>> = {\n  steps: \"count\",\n  heartRate: \"bpm\",\n  activeEnergy: \"kcal\",\n  distance: \"m\",\n  workouts: \"s\",\n};"
+      },
+      {
+        "name": "HealthAvailability",
+        "kind": "interface",
+        "jsdoc": "",
+        "decl": "export interface HealthAvailability {\n  available: boolean;\n  /** Why not, when `available` is false — e.g. \"web has no health store\",\n   *  \"Health Connect is not installed\". */\n  reason?: string;\n}"
+      },
+      {
+        "name": "HealthSample",
+        "kind": "interface",
+        "jsdoc": "",
+        "decl": "export interface HealthSample {\n  /** ISO-8601. */\n  start: string;\n  /** ISO-8601. */\n  end: string;\n  value: number;\n  unit: string;\n  /** Workouts only: the activity, mapped back onto the v1 set (\"other\" for anything else). */\n  activity?: WorkoutActivity;\n}"
+      },
+      {
+        "name": "HealthQuery",
+        "kind": "interface",
+        "jsdoc": "",
+        "decl": "export interface HealthQuery {\n  type: HealthType;\n  /** ISO-8601, inclusive. */\n  from: string;\n  /** ISO-8601, exclusive. */\n  to: string;\n  /** steps / activeEnergy / distance are SUMMED per bucket; heartRate is AVERAGED per bucket;\n   *  workouts ignore it (one sample per workout). */\n  bucket?: HealthBucket;\n}"
+      },
+      {
+        "name": "Workout",
+        "kind": "interface",
+        "jsdoc": "",
+        "decl": "export interface Workout {\n  activity: WorkoutActivity;\n  /** ISO-8601. */\n  start: string;\n  /** ISO-8601, after `start`. */\n  end: string;\n  energyKcal?: number;\n  distanceM?: number;\n}"
+      },
+      {
+        "name": "HealthError",
+        "kind": "interface",
+        "jsdoc": "/** The typed rejection every verb throws. A plain Error carrying `code` — worker bundles are\n *  compiled to a target without class syntax, so this is a factory, not a subclass. */",
+        "decl": "export interface HealthError extends Error {\n  name: \"HealthError\";\n  code: HealthErrorCode;\n}"
+      },
+      {
+        "name": "healthError",
+        "kind": "function",
+        "jsdoc": "/** Build a [HealthError] — what the binding throws for every native `{ error }` reply. */",
+        "decl": "export function healthError(code: HealthErrorCode, message: string): HealthError;"
+      },
+      {
+        "name": "isHealthError",
+        "kind": "function",
+        "jsdoc": "/** Narrow a caught value: `catch (e) { if (isHealthError(e) && e.code === \"unavailable\") … }`. */",
+        "decl": "export function isHealthError(e: unknown): e is HealthError;"
+      },
+      {
+        "name": "availability",
+        "kind": "function",
+        "jsdoc": "/** Whether this device has a health store the app can reach. Call it first and branch. */",
+        "decl": "export async function availability(): Promise<HealthAvailability>;"
+      },
+      {
+        "name": "requestPermission",
+        "kind": "function",
+        "jsdoc": "/**\n * Prompt for read (and optionally write) access. Resolves with the types the platform\n * reports as granted — on iOS a read type counts as granted once asked (see header).\n * Writing workouts also covers the energy + distance samples a saved workout carries.\n */",
+        "decl": "export async function requestPermission(p: { read: HealthType[]; write?: HealthWriteType[] }): Promise<{ granted: HealthType[] }>;"
+      },
+      {
+        "name": "getPermissionStatus",
+        "kind": "function",
+        "jsdoc": "/** Current READ permission per type, without prompting. iOS reads are always \"notDetermined\". */",
+        "decl": "export async function getPermissionStatus(p: { types: HealthType[] }): Promise<Record<HealthType, HealthPermissionState>>;"
+      },
+      {
+        "name": "query",
+        "kind": "function",
+        "jsdoc": "/** Read samples of one type over [from, to). */",
+        "decl": "export async function query(p: HealthQuery): Promise<{ samples: HealthSample[] }>;"
+      },
+      {
+        "name": "saveWorkout",
+        "kind": "function",
+        "jsdoc": "/** Save a completed workout (with its energy/distance, when given). Resolves with its store id. */",
+        "decl": "export async function saveWorkout(w: Workout): Promise<{ id: string }>;"
+      },
+      {
+        "name": "version",
+        "kind": "const",
+        "jsdoc": "",
+        "decl": "export const version = 1;"
+      },
+      {
+        "name": "health",
+        "kind": "const",
+        "jsdoc": "/** The whole surface as one namespace: `import { health } from \"@himalaya/health\"`. */",
+        "decl": "export const health = { availability, requestPermission, getPermissionStatus, query, saveWorkout, version };"
+      }
+    ]
+  },
   {
     "name": "@himalaya/himi-apps",
     "source": "core/sdk/himi-apps/src/index.ts",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@wix/himalaya-cli",
-  "version": "0.1231.0",
+  "version": "0.1233.0",
   "type": "module",
   "description": "himi — the Himalaya authoring CLI. Build a Tier-5 content package on your own machine, push it to the production serve as a draft, preview it on web + Himi Player, and read worker logs back — the remote dev loop. Wraps @himalaya/serve-cli for transport.",
   "keywords": [
@@ -67,5 +67,5 @@
       "artifactId": "himalaya-cli"
     }
   },
-  "falconPackageHash": "520a08a2a0a67dbaa3d551c2628049f08b1481f99918c3890592c9cf"
+  "falconPackageHash": "275f14082a30c282271a3f592ad642e90be8aa534e36c4920d763121"
 }