@wix/himalaya-cli 0.1308.0 → 0.1310.0

package/dist/authoring-runtime/node_modules/@wix/himalaya/dist/_types/core/dev-server/src/builder.d.ts

@@ -50,6 +50,9 @@ export interface ScreenDescriptor {
      *  ScreenDescriptor.sticky_header / sticky_footer in core.proto. */
     stickyHeader?: Component;
     stickyFooter?: Component;
+    /** RFC 0069 — the chat transcript scroll policy. Mirror of
+     *  ScreenDescriptor.transcript_scroll in core.proto. */
+    transcriptScroll?: import("@wix/himalaya/core").TranscriptScroll;
 }
 /** Tier 3/4 + embeddable WebView behavior. Mirror of WebViewConfig in core.proto
  *  (RFC 0038). All fields optional; zero values reproduce legacy behavior. */
@@ -148,8 +151,12 @@ export declare function vstack(props: {
 }, opts?: {
     id?: string;
 }): Component;
+/** `alignment` is the HStack's CROSS axis — vertical — and is worth setting whenever the
+ *  children differ in height: unset is centre on iOS but TOP on Android
+ *  (`toComposeVertical`), which put the Aria header's History label above its pencil. */
 export declare function hstack(props: {
     spacing?: number;
+    alignment?: "leading" | "center" | "trailing";
     children: Component[];
 }, opts?: {
     id?: string;

package/dist/authoring-runtime/node_modules/@wix/himalaya/dist/_types/core/sdk/iap/src/delivery-contract.d.ts

@@ -15,14 +15,14 @@ export interface SessionProvider {
 /** A catalog item resolved by the backend for the captured member. */
 export interface PurchaseContext {
     productId: string;
-    /** Canonical UUID the backend associates with this site/member. */
+    /** Canonical UUID for this one sale (D61: a per-payment purchase intent, not the member). */
     appAccountToken: string;
     /** Opaque site/member scope the acknowledgement must echo. */
     scopeKey: string;
 }
-/** The current member's association, used to recover purchases without a catalog item. */
+/** The current member's scope, used to recover purchases without a catalog item. It names no
+ *  token: each payment has its own, and the backend decides whose a transaction is. */
 export interface MemberContext {
-    appAccountToken: string;
     scopeKey: string;
 }
 export type ContextResult<T> = {

package/dist/authoring-runtime/node_modules/@wix/himalaya/dist/_types/core/sdk/iap/src/delivery.d.ts

@@ -8,6 +8,9 @@ export interface PurchaseCoordinatorDependencies {
     jitter?: (baseDelayMs: number) => number;
     /** Receives a fresh safe snapshot after every change. */
     onState?: (state: DeliveryState) => void;
+    /** Called inside the purchase job when StoreKit defers for Ask to Buy, after the unfinished
+     *  queue has been listed and before the job returns. The next queued purchase has not started. */
+    onAwaitingApproval?: (productId: string) => void;
 }
 export interface PurchaseCoordinator {
     /** Reconciles unfinished purchases now and again after every later session change. */

package/dist/authoring-runtime/node_modules/@wix/himalaya/dist/_types/core/sdk/iap/src/host-session.d.ts

@@ -0,0 +1,31 @@
+import type { SessionProvider, SessionSnapshot } from "./delivery-contract.js";
+import type { HostCallExpectation, MemberIdentitySource } from "./wix-payments-contract.js";
+export interface HostSessionView extends SessionSnapshot {
+    memberId: string | null;
+    siteId: string | null;
+    appId: string | null;
+    ready: boolean;
+    epoch: number;
+}
+/** A session provider that can also name the principal captured for one generation. */
+export interface HostIdentitySource {
+    readonly identityBound: boolean;
+    identity(session: SessionSnapshot): HostCallExpectation | null;
+}
+export interface HostSessionProvider extends SessionProvider, HostIdentitySource {
+}
+/** Wraps a host session clock as the session provider the delivery coordinator and the wix-iap
+ *  client share. Ignores a generation older than the last one read, and keeps the first member
+ *  expectation captured for each generation for `identity()`. */
+export declare function createHostSession(source: {
+    identityBound: boolean;
+    current(): unknown;
+    subscribe(listener: () => void): () => void;
+}): HostSessionProvider;
+/** The session on `globalThis.himalaya`. Web publishes `identityBound: false`. */
+export declare function hostSessionFromGlobal(): HostSessionProvider;
+/** The member a host session names for a captured generation, as the identity port the Apple-IAP
+ *  checkout and the wix-iap client take: null when that generation has no signed-in member. */
+export declare function memberIdentityOf(source: HostIdentitySource): MemberIdentitySource;
+/** Whether the host fences protected calls to the captured member (`identityBound`). Web does not. */
+export declare function readIdentityBound(): boolean;

package/dist/authoring-runtime/node_modules/@wix/himalaya/dist/_types/core/sdk/iap/src/index.d.ts

@@ -9,6 +9,7 @@ export * from "./catalog-price-fields.js";
 export * from "./catalog-adapters/online-programs.js";
 export * from "./wix-payments-contract.js";
 export * from "./wix-payments.js";
+export * from "./host-session.js";
 /** The three store product categories. */
 export type ProductType = "subscription" | "nonConsumable" | "consumable";
 export interface Product {

package/dist/authoring-runtime/node_modules/@wix/himalaya/dist/_types/core/sdk/iap/src/wix-payments-contract.d.ts

@@ -25,11 +25,20 @@ export interface WixIapRoute {
      *  was in the generated gateway metadata on 2026-10-08, so there is deliberately no default. */
     prefix: string;
 }
+/** Captured when a protected call starts. The native bridge checks it and never puts it on
+ *  the HTTP request. */
+export interface HostCallExpectation {
+    generation: number;
+    kind: "member";
+    memberId: string;
+    siteId: string;
+    appId: string;
+}
 /** The host's Wix REST bridge (`himalaya.wixApi`). Resolves the parsed body of a 2xx and
  *  rejects with `HTTP <status> [<code>]: <message>` otherwise. Credentials are attached
- *  natively, never in TypeScript. */
+ *  natively, never in TypeScript. `expectation` is bridge metadata, not a header. */
 export interface WixTransport {
-    call(method: "GET" | "POST", path: string, body?: unknown, headers?: Record<string, string>): Promise<unknown>;
+    call(method: "GET" | "POST", path: string, body?: unknown, headers?: Record<string, string>, expectation?: HostCallExpectation): Promise<unknown>;
 }
 /** Optional, from a trusted host only: the Wix member id signed in for a captured session. Used to
  *  refuse an answer about someone else, never sent: the server derives the member itself. */
@@ -55,10 +64,9 @@ export interface WixIapPayment {
     canceledDate?: string;
     refundedDate?: string;
 }
-export type WixIapOperation = "startPayment" | "completePayment" | "getCustomerId" | "getPayment";
+export type WixIapOperation = "startPayment" | "completePayment" | "getPayment";
 export type StartPaymentErrorCode = "NOT_PENDING" | "WRONG_PAYMENT_METHOD" | "NOT_ORDER_BUYER" | "UNSUPPORTED_ORDER" | "PRODUCT_NOT_AVAILABLE" | "ALREADY_OWNED";
-export type CompletePaymentErrorCode = "INVALID_PURCHASE" | "OWNED_BY_ANOTHER_CUSTOMER" | "PURCHASE_REVOKED" | "NOT_PURCHASED" | "ZERO_PRICE" | "NO_MATCHING_PAYMENT" | "APP_NOT_CONFIGURED";
-export type GetCustomerIdErrorCode = "APP_NOT_CONFIGURED";
+export type CompletePaymentErrorCode = "INVALID_PURCHASE" | "OWNED_BY_ANOTHER_CUSTOMER" | "PURCHASE_REVOKED" | "NOT_PURCHASED" | "ZERO_PRICE" | "NO_MATCHING_PAYMENT" | "PAYMENT_NOT_PENDING" | "APP_NOT_CONFIGURED";
 export type GetPaymentErrorCode = "NOT_FOUND";
 /** Why a call gave no usable answer, other than a named application error.
  *  `unavailable` and `sessionChanged` say nothing about whether the request took effect.
@@ -80,24 +88,21 @@ export type WixIapFailure<Code extends string> = {
     kind: WixIapFailureKind;
     httpStatus?: number;
 };
-/** `customerId` goes to StoreKit as `appAccountToken` (the customer id is the token, D59). Keep it
- *  out of screen state. */
+/** `appAccountToken` goes to StoreKit with the purchase. It is minted for this one payment (a
+ *  purchase intent, D61), not the member: StartPayment for the same Wix transaction again returns
+ *  the same payment and the same token. Keep it out of screen state. */
 export type StartPaymentResult = {
     status: "started";
     payment: WixIapPayment;
     storeProductId: string;
-    customerId: string;
+    appAccountToken: string;
 } | WixIapFailure<StartPaymentErrorCode>;
-/** `matched`: the server verified the proof and matched it to `payment`, which may not be the one
- *  this device started. Its status may still be `approving`. */
+/** `matched`: the server verified the proof and paid the payment whose token the Apple transaction
+ *  carries. Its status may still be `approving`. */
 export type CompletePaymentResult = {
     status: "matched";
     payment: WixIapPayment;
 } | WixIapFailure<CompletePaymentErrorCode>;
-export type CustomerIdResult = {
-    status: "found";
-    customerId: string;
-} | WixIapFailure<GetCustomerIdErrorCode>;
 export type GetPaymentResult = {
     status: "found";
     payment: WixIapPayment;

package/dist/authoring-runtime/node_modules/@wix/himalaya/dist/_types/core/sdk/iap/src/wix-payments-wire.d.ts

@@ -12,7 +12,6 @@ export interface CallScope {
 export declare function startPaymentCall(scope: CallScope, wixTransactionId: string): WixIapCall;
 /** The JWS goes byte-for-byte: the server derives the member, and the proof names the product. */
 export declare function completePaymentCall(scope: CallScope, signedTransaction: string): WixIapCall;
-export declare function customerIdCall(scope: CallScope): WixIapCall;
 export declare function paymentCall(scope: CallScope, paymentId: string): WixIapCall;
 /** A gateway path such as `/_api/<service>/v1`: absolute, no trailing slash, query or scheme. */
 export declare function isRoutePrefix(prefix: string): boolean;
@@ -26,13 +25,12 @@ export interface PaymentExpectation {
 export interface StartedPayment {
     payment: WixIapPayment;
     storeProductId: string;
-    customerId: string;
+    appAccountToken: string;
 }
+/** D61: the token is this payment's purchase intent; no other field may stand in for it. */
 export declare function decodeStarted(raw: unknown, expected: PaymentExpectation): StartedPayment | null;
 /** CompletePayment's and GetPayment's answer: `{payment}`. */
 export declare function decodePaymentAnswer(raw: unknown, expected: PaymentExpectation): WixIapPayment | null;
-/** D59: the customer's id is the StoreKit `appAccountToken`; no other field may stand in for it. */
-export declare function decodeCustomerId(raw: unknown): string | null;
 /** Maps a bridge rejection to a failure. The message itself is never kept: the bridge copies up
  *  to 300 characters of the response, which can echo the request. */
 export declare function classifyFailure<Code extends string>(error: unknown, operation: WixIapOperation, codes: readonly Code[]): WixIapFailure<Code>;

package/dist/authoring-runtime/node_modules/@wix/himalaya/dist/_types/core/sdk/iap/src/wix-payments.d.ts

@@ -1,6 +1,6 @@
 import type { AppleTransaction } from "./index.js";
 import type { SessionProvider } from "./delivery-contract.js";
-import type { AppBindingSource, CompletePaymentResult, CustomerIdResult, GetPaymentResult, IapAppHost, MemberIdentitySource, StartPaymentResult, WixIapRoute, WixTransport } from "./wix-payments-contract.js";
+import type { AppBindingSource, CompletePaymentResult, GetPaymentResult, IapAppHost, MemberIdentitySource, StartPaymentResult, WixIapRoute, WixTransport } from "./wix-payments-contract.js";
 export interface WixIapClientDependencies {
     /** The trusted host session; each call is bound to the generation current when it starts. */
     session: SessionProvider;
@@ -14,15 +14,13 @@ export interface WixIapClientDependencies {
 }
 export interface WixIapClient {
     /** StartPayment for a pending `appleIAP` Wix Payments transaction the member placed. Returns the
-     *  store product to sell and the customer id to pass to StoreKit as `appAccountToken`. */
+     *  store product to sell and this payment's `appAccountToken` to pass to StoreKit. */
     startPayment(input: {
         wixTransactionId: string;
     }): Promise<StartPaymentResult>;
-    /** CompletePayment with held Apple proof, sent unchanged. Success can still be `approving`. */
+    /** CompletePayment with held Apple proof, sent unchanged: the service pays the payment whose
+     *  token the transaction carries. Success can still be `approving`. */
     completePayment(transaction: AppleTransaction): Promise<CompletePaymentResult>;
-    /** GetCustomerId: the member's customer id, for recovering held purchases. Creates the customer
-     *  when there is none. */
-    getCustomerId(): Promise<CustomerIdResult>;
     /** GetPayment: one of the member's own Payments. */
     getPayment(input: {
         paymentId: string;
@@ -34,14 +32,15 @@ export interface WixIapClient {
  *
  * NOT ENABLED and not production-ready. No app wires it, and no call reaches the service: it has
  * no public gateway route yet, so `route` must be supplied and there is no default. It calls
- * StartPayment (`POST …/payments/start`), CompletePayment (`POST …/payments/complete`),
- * GetCustomerId (`GET …/customer-id`) and GetPayment (`GET …/payments/{id}`) through the
+ * StartPayment (`POST …/payments/start`), CompletePayment (`POST …/payments/complete`)
+ * and GetPayment (`GET …/payments/{id}`) through the
  * `wix_api` bridge. A matched or approved Payment is not durable access and never finishes the
  * store transaction.
  *
- * Production use is blocked on pending prerequisites: a public route and member authorization on
- * the service, the service's own app identity and permissions, a trusted provisioning flow for the
- * app binding, and a native bridge that binds each request to the session generation across
- * authorization, send and retry. Its checks here protect only this client's own flow.
+ * Production use stays blocked: there is no public route or member authorization on the service,
+ * no trusted app-binding source, and checkout stays disabled. When this client uses the host
+ * bridge, it also requires the host's identity clock and passes that captured expectation
+ * through the bridge. An injected transport keeps the previous call shape unless the session
+ * itself exposes an identity.
  */
 export declare function createWixIapClient(deps: WixIapClientDependencies): WixIapClient;

package/dist/authoring-runtime/node_modules/@wix/himalaya/dist/_types/core/ts/src/schema.d.ts

@@ -364,6 +364,21 @@ export interface Modifiers {
      *  The generalization of `FragmentSlotCase.accessibilityAnnouncement`, which only ever
      *  fired on a fragment-slot case swap. */
     announce?: LiveRegion;
+    /** RFC 0069 — a recurring, finite, transform-only motion on a decorative node: a
+     *  living character's idle `hop`, a `blink`, a working `breathe`. Never changes the
+     *  node's layout footprint. Stopped by reduced motion unless `respectReducedMotion`
+     *  is false. */
+    ambientMotion?: AmbientMotion;
+}
+/** RFC 0069 — `Modifiers.ambientMotion`. */
+export interface AmbientMotion {
+    /** `"hop"` | `"blink"` | `"breathe"`; anything else renders no motion. */
+    kind?: string;
+    /** hop/blink: the shortest rest between two reactions (defaults 3000 / 2200);
+     *  breathe: the half-period (default 550). */
+    minGapMs?: number;
+    /** hop/blink: the longest rest (defaults 7000 / 5500). Ignored by breathe. */
+    maxGapMs?: number;
 }
 /** RFC 0058 §4 — a screen-change / state-change announcement. `text` EMPTY means
  *  "announce this node's own resolved name + value", which is what makes a status line
@@ -3176,6 +3191,18 @@ export interface WebViewProps {
     config?: WebViewConfig;
     capabilitiesRequired?: string[];
 }
+/** RFC 0069 — `ScreenDescriptor.transcriptScroll`. */
+export interface TranscriptScroll {
+    /** `$service:` path to a SEND TOKEN. Each new non-empty value is a send; an
+     *  empty one resets the policy (a new conversation rests at the top). */
+    sendPath: string;
+    /** `$service:` path to the id of the component to pin. It may change while
+     *  the pin is held (an optimistic row replaced by the server's copy) without
+     *  starting a new pin. Empty = follow the tail with nothing pinned. */
+    anchorPath?: string;
+    /** Accessible name of the jump-to-latest control. Default "Jump to latest". */
+    jumpLabel?: string;
+}
 export interface ScreenDescriptor {
     screenId: string;
     renderer: RendererKind;
@@ -3194,6 +3221,11 @@ export interface ScreenDescriptor {
      *  up (a chat transcript). Tapping it animates back to the bottom. Absent/false =
      *  a normal top-anchored scroll. Honored by the app host (Router). */
     scrollToBottom?: boolean;
+    /** RFC 0069 — the chat transcript scroll policy. On a send the host pins the
+     *  named component near the top and reserves the space the reply grows into;
+     *  when the reply outgrows it the host follows the tail. A drag pauses
+     *  following, and only then is a jump-to-latest control shown. */
+    transcriptScroll?: TranscriptScroll;
     /** Present when `renderer` is `webview_native_bridge` or `webview_ds`. */
     url?: string;
     capabilitiesRequired?: string[];

package/dist/authoring-runtime/node_modules/@wix/himalaya/dist/_types/core/ts/src/validator.d.ts

@@ -6,6 +6,14 @@ export declare const screenDescriptorSchema: {
     readonly type: "object";
     readonly additionalProperties: false;
     readonly required: readonly ["screenId", "renderer", "schemaVersion"];
+    readonly not: {
+        readonly required: readonly ["transcriptScroll", "scrollToBottom"];
+        readonly properties: {
+            readonly scrollToBottom: {
+                readonly const: true;
+            };
+        };
+    };
     readonly properties: {
         readonly screenId: {
             readonly type: "string";
@@ -30,6 +38,24 @@ export declare const screenDescriptorSchema: {
         readonly scrollToBottom: {
             readonly type: "boolean";
         };
+        readonly transcriptScroll: {
+            readonly type: "object";
+            readonly additionalProperties: false;
+            readonly required: readonly ["sendPath"];
+            readonly properties: {
+                readonly sendPath: {
+                    readonly type: "string";
+                    readonly pattern: "^\\$service:";
+                };
+                readonly anchorPath: {
+                    readonly type: "string";
+                    readonly pattern: "^$|^\\$service:";
+                };
+                readonly jumpLabel: {
+                    readonly type: "string";
+                };
+            };
+        };
         readonly url: {
             readonly type: "string";
             readonly format: "uri";
@@ -650,6 +676,23 @@ export declare const screenDescriptorSchema: {
                         };
                     };
                 };
+                readonly ambientMotion: {
+                    readonly type: "object";
+                    readonly additionalProperties: false;
+                    readonly properties: {
+                        readonly kind: {
+                            readonly type: "string";
+                        };
+                        readonly minGapMs: {
+                            readonly type: "integer";
+                            readonly minimum: 0;
+                        };
+                        readonly maxGapMs: {
+                            readonly type: "integer";
+                            readonly minimum: 0;
+                        };
+                    };
+                };
                 readonly boxShadow: {
                     readonly type: "object";
                     readonly additionalProperties: false;
@@ -1621,6 +1664,23 @@ export declare const widgetSnapshotSchema: {
                         };
                     };
                 };
+                readonly ambientMotion: {
+                    readonly type: "object";
+                    readonly additionalProperties: false;
+                    readonly properties: {
+                        readonly kind: {
+                            readonly type: "string";
+                        };
+                        readonly minGapMs: {
+                            readonly type: "integer";
+                            readonly minimum: 0;
+                        };
+                        readonly maxGapMs: {
+                            readonly type: "integer";
+                            readonly minimum: 0;
+                        };
+                    };
+                };
                 readonly boxShadow: {
                     readonly type: "object";
                     readonly additionalProperties: false;

package/dist/authoring-runtime/node_modules/@wix/himalaya/dist/_types/stdlib/flows/iap-checkout/src/apple-iap-contract.d.ts

@@ -1,8 +1,10 @@
-import type { AppBindingSource, CatalogReference, Clock, DeliveryState, IapCatalogPricing, SessionProvider, TransactionStore, WixIapClient } from "@wix/himalaya/iap";
+import type { AppBindingSource, CatalogReference, Clock, DeliveryState, HostCallExpectation, IapCatalogPricing, MemberIdentitySource, SessionProvider, TransactionStore, WixIapClient } from "@wix/himalaya/iap";
 /** The host's Wix REST bridge (`himalaya.wixApi`). Resolves a 2xx body; rejects with
- *  `HTTP <status> [<code>]: <message>` otherwise. Credentials are attached natively. */
+ *  `HTTP <status> [<code>]: <message>` otherwise. Credentials are attached natively.
+ *  Same positional shape as the runtime's `wixApiCall`: `expectation` is bridge metadata for a
+ *  protected call, after `headers`, and never an HTTP header. */
 export interface WixBridge {
-    call(method: "GET" | "POST", path: string, body?: unknown): Promise<unknown>;
+    call(method: "GET" | "POST", path: string, body?: unknown, headers?: Record<string, string>, expectation?: HostCallExpectation): Promise<unknown>;
 }
 /** Why a bridge call gave no body. `sessionChanged`: the captured session is no longer current,
  *  before the send or after the answer; nothing from it may be used or stored. */
@@ -86,13 +88,13 @@ export interface IapOrderAdapter {
     /** The vertical's authoritative answer for the order's item and the signed-in member. */
     readAccess(verticalRef: VerticalRef, bridge: SessionBoundBridge): Promise<AccessRead>;
 }
-/** Durable, member-partitioned purchase references. Ids only: never a proof, an account token
- *  (the customer id is stored only as a one-way hash in the key), or a credential. */
+/** Durable, member-partitioned purchase references. Ids only: never a proof or a credential, and
+ *  the member id is stored only as a one-way hash in the key. */
 export interface OrderPartitionKey {
     purchasesAppId: string;
     siteId: string;
-    /** The member's wix-iap customer id: server-derived per member per app. */
-    customerId: string;
+    /** The signed-in member's Wix id, from the host session (wix-iap records purchases against it). */
+    memberId: string;
 }
 /** `held`: Apple charged, and CompletePayment refused the proof without recording it, so the
  *  transaction stays unfinished and is retried. `needsSupport`: recorded and refused for good. */
@@ -109,6 +111,8 @@ export interface OrderRef {
     storeProductId?: string;
     appProductId?: string;
     appleTransactionId?: string;
+    /** The StoreKit token StartPayment minted for this payment (D61): recovery finds the order by it. */
+    appAccountToken?: string;
     updatedAt: number;
 }
 export interface OrderRefPartition {
@@ -122,13 +126,13 @@ export interface OrderRefStore {
      *  unknown-version data. Never an empty stand-in. */
     open(key: OrderPartitionKey): OrderRefPartition | null;
     /** Whether any member holds references for this app and site; null when unreadable. Lets a
-     *  start-up skip GetCustomerId (which creates a customer) when nothing was ever handed over. */
+     *  start-up skip reading the member and tracking when nothing was ever handed over. */
     hasRefs(app: {
         purchasesAppId: string;
         siteId: string;
     }): boolean | null;
 }
-export type OrderFailureCode = "notEnabled" | "notConfigured" | "signInRequired" | "unsupportedItem" | "notAppleRoute" | "storageUnavailable" | "approvalRequired" | "orderClosed" | "orderRefused" | "chargeFailed" | "paymentRefused" | "paymentHeld" | "alreadyOwned" | "paymentInProgress" | "productChanged" | "matchedOtherOrder" | "invalidAssociation" | "needsSupport" | "unavailable" | "sessionChanged";
+export type OrderFailureCode = "notEnabled" | "notConfigured" | "signInRequired" | "unsupportedItem" | "notAppleRoute" | "storageUnavailable" | "approvalRequired" | "orderClosed" | "orderRefused" | "chargeFailed" | "paymentRefused" | "paymentHeld" | "alreadyOwned" | "paymentInProgress" | "productChanged" | "invalidAssociation" | "needsSupport" | "unavailable" | "sessionChanged";
 /** Progress of a payment this device handed to wix-iap, tracked from its durable reference. */
 export type PaymentAccess = "processing" | "granted" | "accessUnknown" | "needsSupport";
 export interface PaymentProgress {
@@ -151,6 +155,10 @@ export interface AppleIapCheckoutState {
 }
 export interface AppleIapCheckoutDependencies {
     wixIap: WixIapClient;
+    /** The member signed in for a captured session, from the trusted host (`memberIdentityOf` over the
+     *  host session). It partitions the references and scopes acknowledgements: wix-iap has no
+     *  customer ids any more (D61). */
+    identity: MemberIdentitySource;
     /** The same trusted binding the wix-iap client uses; it partitions the stored references. */
     binding: AppBindingSource;
     /** The same host provider the wix-iap client was given: every step compares generations. */

package/dist/authoring-runtime/node_modules/@wix/himalaya/dist/_types/stdlib/flows/iap-checkout/src/iap-order-backend.d.ts

@@ -1,4 +1,4 @@
-import type { AppBindingSource, Clock, DeliveryBackend, IapAppleProduct, SessionProvider, WixIapClient } from "@wix/himalaya/iap";
+import type { AppBindingSource, Clock, DeliveryBackend, IapAppleProduct, MemberIdentitySource, SessionProvider, WixIapClient } from "@wix/himalaya/iap";
 import type { CashierRoute, IapOrderAdapter, IapOrderItem, OrderFailureCode, OrderRefStore, PaymentAccess, WixBridge } from "./apple-iap-contract.js";
 /** What the backend tells the checkout about an item: why it stopped, or how its payment is. */
 export interface OrderEvent {
@@ -15,6 +15,8 @@ export interface SaleItem {
 }
 export interface WixOrderBackendDependencies {
     wixIap: WixIapClient;
+    /** The member signed in for a captured session; it partitions references and scopes acks. */
+    identity: MemberIdentitySource;
     binding: AppBindingSource;
     session: SessionProvider;
     clock: Clock;
@@ -24,6 +26,9 @@ export interface WixOrderBackendDependencies {
     bridge: WixBridge;
     /** The item a `buy` asked for, by the catalog ref the coordinator carries. */
     itemFor(catalogRef: string): SaleItem | undefined;
+    /** Whether Apple may already be charging for this product: an unfinished transaction, or an Ask
+     *  to Buy request awaiting approval. Asked inside the purchase job, after any reconcile. */
+    productBusy?(productId: string): boolean;
     report(event: OrderEvent): void;
 }
 export declare function createWixOrderBackend(deps: WixOrderBackendDependencies): DeliveryBackend;

package/dist/authoring-runtime/node_modules/@wix/himalaya/dist/core.mjs

@@ -8082,6 +8082,12 @@ var screenDescriptorSchema = {
   type: "object",
   additionalProperties: false,
   required: ["screenId", "renderer", "schemaVersion"],
+  // RFC 0069 replaces the legacy policy; combining both selects different
+  // host implementations, so reject that ambiguous descriptor.
+  not: {
+    required: ["transcriptScroll", "scrollToBottom"],
+    properties: { scrollToBottom: { const: true } }
+  },
   properties: {
     screenId: { type: "string", minLength: 1 },
     renderer: {
@@ -8097,6 +8103,19 @@ var screenDescriptorSchema = {
     // Chat-transcript scroll: host pins the scroll to the bottom with a
     // floating "jump to latest" affordance. Absent/false = top-anchored.
     scrollToBottom: { type: "boolean" },
+    // RFC 0069 — the chat transcript scroll policy (pin the sent turn, follow the
+    // reply). Both paths are `$service:` sentinels: a literal token could never
+    // change, so the policy would never fire.
+    transcriptScroll: {
+      type: "object",
+      additionalProperties: false,
+      required: ["sendPath"],
+      properties: {
+        sendPath: { type: "string", pattern: "^\\$service:" },
+        anchorPath: { type: "string", pattern: "^$|^\\$service:" },
+        jumpLabel: { type: "string" }
+      }
+    },
     url: { type: "string", format: "uri" },
     capabilitiesRequired: {
       type: "array",
@@ -8511,6 +8530,18 @@ var screenDescriptorSchema = {
             trigger: { type: "string", enum: ["on_change", "on_appear", "both", "none"] }
           }
         },
+        // RFC 0069 — recurring, finite, transform-only motion on a decorative node. `kind`
+        // is an open string: an unknown kind renders no motion, so an older validator must
+        // not reject a newer one.
+        ambientMotion: {
+          type: "object",
+          additionalProperties: false,
+          properties: {
+            kind: { type: "string" },
+            minGapMs: { type: "integer", minimum: 0 },
+            maxGapMs: { type: "integer", minimum: 0 }
+          }
+        },
         // #1052 — explicit drop shadow (colour token + radius + offset), alongside the `shadow` token form.
         boxShadow: {
           type: "object",