@wix/himalaya-cli 0.1309.0 → 0.1310.0

package/guides/sdk-reference.json

@@ -1638,13 +1638,13 @@
         "name": "PurchaseContext",
         "kind": "interface",
         "jsdoc": "/** A catalog item resolved by the backend for the captured member. */",
-        "decl": "export interface PurchaseContext {\n  productId: string;\n  /** Canonical UUID the backend associates with this site/member. */\n  appAccountToken: string;\n  /** Opaque site/member scope the acknowledgement must echo. */\n  scopeKey: string;\n}"
+        "decl": "export interface PurchaseContext {\n  productId: string;\n  /** Canonical UUID for this one sale (D61: a per-payment purchase intent, not the member). */\n  appAccountToken: string;\n  /** Opaque site/member scope the acknowledgement must echo. */\n  scopeKey: string;\n}"
       },
       {
         "name": "MemberContext",
         "kind": "interface",
-        "jsdoc": "/** The current member's association, used to recover purchases without a catalog item. */",
-        "decl": "export interface MemberContext {\n  appAccountToken: string;\n  scopeKey: string;\n}"
+        "jsdoc": "/** The current member's scope, used to recover purchases without a catalog item. It names no\n *  token: each payment has its own, and the backend decides whose a transaction is. */",
+        "decl": "export interface MemberContext {\n  scopeKey: string;\n}"
       },
       {
         "name": "ContextResult",
@@ -1722,7 +1722,7 @@
         "name": "PurchaseCoordinatorDependencies",
         "kind": "interface",
         "jsdoc": "",
-        "decl": "export interface PurchaseCoordinatorDependencies {\n  store: TransactionStore;\n  backend: DeliveryBackend;\n  session: SessionProvider;\n  clock: Clock;\n  /** Extra milliseconds added to a backoff step; inject for deterministic tests. */\n  jitter?: (baseDelayMs: number) => number;\n  /** Receives a fresh safe snapshot after every change. */\n  onState?: (state: DeliveryState) => void;\n}"
+        "decl": "export interface PurchaseCoordinatorDependencies {\n  store: TransactionStore;\n  backend: DeliveryBackend;\n  session: SessionProvider;\n  clock: Clock;\n  /** Extra milliseconds added to a backoff step; inject for deterministic tests. */\n  jitter?: (baseDelayMs: number) => number;\n  /** Receives a fresh safe snapshot after every change. */\n  onState?: (state: DeliveryState) => void;\n  /** Called inside the purchase job when StoreKit defers for Ask to Buy, after the unfinished\n   *  queue has been listed and before the job returns. The next queued purchase has not started. */\n  onAwaitingApproval?: (productId: string) => void;\n}"
       },
       {
         "name": "PurchaseCoordinator",
@@ -1946,11 +1946,17 @@
         "jsdoc": "/** Where the Payments service is reachable through the Wix gateway. */",
         "decl": "export interface WixIapRoute {\n  /** The gateway path that maps to the service's `/v1`, without a trailing slash. No public route\n   *  was in the generated gateway metadata on 2026-10-08, so there is deliberately no default. */\n  prefix: string;\n}"
       },
+      {
+        "name": "HostCallExpectation",
+        "kind": "interface",
+        "jsdoc": "/** Captured when a protected call starts. The native bridge checks it and never puts it on\n *  the HTTP request. */",
+        "decl": "export interface HostCallExpectation {\n  generation: number;\n  kind: \"member\";\n  memberId: string;\n  siteId: string;\n  appId: string;\n}"
+      },
       {
         "name": "WixTransport",
         "kind": "interface",
-        "jsdoc": "/** The host's Wix REST bridge (`himalaya.wixApi`). Resolves the parsed body of a 2xx and\n *  rejects with `HTTP <status> [<code>]: <message>` otherwise. Credentials are attached\n *  natively, never in TypeScript. */",
-        "decl": "export interface WixTransport {\n  call(method: \"GET\" | \"POST\", path: string, body?: unknown, headers?: Record<string, string>): Promise<unknown>;\n}"
+        "jsdoc": "/** The host's Wix REST bridge (`himalaya.wixApi`). Resolves the parsed body of a 2xx and\n *  rejects with `HTTP <status> [<code>]: <message>` otherwise. Credentials are attached\n *  natively, never in TypeScript. `expectation` is bridge metadata, not a header. */",
+        "decl": "export interface WixTransport {\n  call(\n    method: \"GET\" | \"POST\",\n    path: string,\n    body?: unknown,\n    headers?: Record<string, string>,\n    expectation?: HostCallExpectation,\n  ): Promise<unknown>;\n}"
       },
       {
         "name": "MemberIdentitySource",
@@ -1974,7 +1980,7 @@
         "name": "WixIapOperation",
         "kind": "type",
         "jsdoc": "",
-        "decl": "export type WixIapOperation = \"startPayment\" | \"completePayment\" | \"getCustomerId\" | \"getPayment\";"
+        "decl": "export type WixIapOperation = \"startPayment\" | \"completePayment\" | \"getPayment\";"
       },
       {
         "name": "StartPaymentErrorCode",
@@ -1986,13 +1992,7 @@
         "name": "CompletePaymentErrorCode",
         "kind": "type",
         "jsdoc": "",
-        "decl": "export type CompletePaymentErrorCode = \"INVALID_PURCHASE\" | \"OWNED_BY_ANOTHER_CUSTOMER\" | \"PURCHASE_REVOKED\"\n  | \"NOT_PURCHASED\" | \"ZERO_PRICE\" | \"NO_MATCHING_PAYMENT\" | \"APP_NOT_CONFIGURED\";"
-      },
-      {
-        "name": "GetCustomerIdErrorCode",
-        "kind": "type",
-        "jsdoc": "",
-        "decl": "export type GetCustomerIdErrorCode = \"APP_NOT_CONFIGURED\";"
+        "decl": "export type CompletePaymentErrorCode = \"INVALID_PURCHASE\" | \"OWNED_BY_ANOTHER_CUSTOMER\" | \"PURCHASE_REVOKED\"\n  | \"NOT_PURCHASED\" | \"ZERO_PRICE\" | \"NO_MATCHING_PAYMENT\" | \"PAYMENT_NOT_PENDING\" | \"APP_NOT_CONFIGURED\";"
       },
       {
         "name": "GetPaymentErrorCode",
@@ -2015,21 +2015,15 @@
       {
         "name": "StartPaymentResult",
         "kind": "type",
-        "jsdoc": "/** `customerId` goes to StoreKit as `appAccountToken` (the customer id is the token, D59). Keep it\n *  out of screen state. */",
-        "decl": "export type StartPaymentResult =\n  | { status: \"started\"; payment: WixIapPayment; storeProductId: string; customerId: string }\n  | WixIapFailure<StartPaymentErrorCode>;"
+        "jsdoc": "/** `appAccountToken` goes to StoreKit with the purchase. It is minted for this one payment (a\n *  purchase intent, D61), not the member: StartPayment for the same Wix transaction again returns\n *  the same payment and the same token. Keep it out of screen state. */",
+        "decl": "export type StartPaymentResult =\n  | { status: \"started\"; payment: WixIapPayment; storeProductId: string; appAccountToken: string }\n  | WixIapFailure<StartPaymentErrorCode>;"
       },
       {
         "name": "CompletePaymentResult",
         "kind": "type",
-        "jsdoc": "/** `matched`: the server verified the proof and matched it to `payment`, which may not be the one\n *  this device started. Its status may still be `approving`. */",
+        "jsdoc": "/** `matched`: the server verified the proof and paid the payment whose token the Apple transaction\n *  carries. Its status may still be `approving`. */",
         "decl": "export type CompletePaymentResult = { status: \"matched\"; payment: WixIapPayment } | WixIapFailure<CompletePaymentErrorCode>;"
       },
-      {
-        "name": "CustomerIdResult",
-        "kind": "type",
-        "jsdoc": "",
-        "decl": "export type CustomerIdResult = { status: \"found\"; customerId: string } | WixIapFailure<GetCustomerIdErrorCode>;"
-      },
       {
         "name": "GetPaymentResult",
         "kind": "type",
@@ -2047,16 +2041,58 @@
         "name": "WixIapClient",
         "kind": "interface",
         "jsdoc": "",
-        "decl": "export interface WixIapClient {\n  /** StartPayment for a pending `appleIAP` Wix Payments transaction the member placed. Returns the\n   *  store product to sell and the customer id to pass to StoreKit as `appAccountToken`. */\n  startPayment(input: { wixTransactionId: string }): Promise<StartPaymentResult>;\n  /** CompletePayment with held Apple proof, sent unchanged. Success can still be `approving`. */\n  completePayment(transaction: AppleTransaction): Promise<CompletePaymentResult>;\n  /** GetCustomerId: the member's customer id, for recovering held purchases. Creates the customer\n   *  when there is none. */\n  getCustomerId(): Promise<CustomerIdResult>;\n  /** GetPayment: one of the member's own Payments. */\n  getPayment(input: { paymentId: string }): Promise<GetPaymentResult>;\n}",
+        "decl": "export interface WixIapClient {\n  /** StartPayment for a pending `appleIAP` Wix Payments transaction the member placed. Returns the\n   *  store product to sell and this payment's `appAccountToken` to pass to StoreKit. */\n  startPayment(input: { wixTransactionId: string }): Promise<StartPaymentResult>;\n  /** CompletePayment with held Apple proof, sent unchanged: the service pays the payment whose\n   *  token the transaction carries. Success can still be `approving`. */\n  completePayment(transaction: AppleTransaction): Promise<CompletePaymentResult>;\n  /** GetPayment: one of the member's own Payments. */\n  getPayment(input: { paymentId: string }): Promise<GetPaymentResult>;\n}",
         "verified": false
       },
       {
         "name": "createWixIapClient",
         "kind": "function",
-        "jsdoc": "/**\n * Creates a client for Wix's in-app-purchase payments service (`mobile-apps-wix-iap`), which pays\n * a Wix order with a store purchase the member makes in the app.\n *\n * NOT ENABLED and not production-ready. No app wires it, and no call reaches the service: it has\n * no public gateway route yet, so `route` must be supplied and there is no default. It calls\n * StartPayment (`POST …/payments/start`), CompletePayment (`POST …/payments/complete`),\n * GetCustomerId (`GET …/customer-id`) and GetPayment (`GET …/payments/{id}`) through the\n * `wix_api` bridge. A matched or approved Payment is not durable access and never finishes the\n * store transaction.\n *\n * Production use is blocked on pending prerequisites: a public route and member authorization on\n * the service, the service's own app identity and permissions, a trusted provisioning flow for the\n * app binding, and a native bridge that binds each request to the session generation across\n * authorization, send and retry. Its checks here protect only this client's own flow.\n */",
+        "jsdoc": "/**\n * Creates a client for Wix's in-app-purchase payments service (`mobile-apps-wix-iap`), which pays\n * a Wix order with a store purchase the member makes in the app.\n *\n * NOT ENABLED and not production-ready. No app wires it, and no call reaches the service: it has\n * no public gateway route yet, so `route` must be supplied and there is no default. It calls\n * StartPayment (`POST …/payments/start`), CompletePayment (`POST …/payments/complete`)\n * and GetPayment (`GET …/payments/{id}`) through the\n * `wix_api` bridge. A matched or approved Payment is not durable access and never finishes the\n * store transaction.\n *\n * Production use stays blocked: there is no public route or member authorization on the service,\n * no trusted app-binding source, and checkout stays disabled. When this client uses the host\n * bridge, it also requires the host's identity clock and passes that captured expectation\n * through the bridge. An injected transport keeps the previous call shape unless the session\n * itself exposes an identity.\n */",
         "decl": "export function createWixIapClient(deps: WixIapClientDependencies): WixIapClient;",
         "verified": false
       },
+      {
+        "name": "HostSessionView",
+        "kind": "interface",
+        "jsdoc": "",
+        "decl": "export interface HostSessionView extends SessionSnapshot {\n  memberId: string | null;\n  siteId: string | null;\n  appId: string | null;\n  ready: boolean;\n  epoch: number;\n}"
+      },
+      {
+        "name": "HostIdentitySource",
+        "kind": "interface",
+        "jsdoc": "/** A session provider that can also name the principal captured for one generation. */",
+        "decl": "export interface HostIdentitySource {\n  readonly identityBound: boolean;\n  identity(session: SessionSnapshot): HostCallExpectation | null;\n}"
+      },
+      {
+        "name": "HostSessionProvider",
+        "kind": "interface",
+        "jsdoc": "",
+        "decl": "export interface HostSessionProvider extends SessionProvider, HostIdentitySource {}"
+      },
+      {
+        "name": "createHostSession",
+        "kind": "function",
+        "jsdoc": "/** Wraps a host session clock as the session provider the delivery coordinator and the wix-iap\n *  client share. Ignores a generation older than the last one read, and keeps the first member\n *  expectation captured for each generation for `identity()`. */",
+        "decl": "export function createHostSession(source: {\n  identityBound: boolean;\n  current(): unknown;\n  subscribe(listener: () => void): () => void;\n}): HostSessionProvider;"
+      },
+      {
+        "name": "hostSessionFromGlobal",
+        "kind": "function",
+        "jsdoc": "/** The session on `globalThis.himalaya`. Web publishes `identityBound: false`. */",
+        "decl": "export function hostSessionFromGlobal(): HostSessionProvider;"
+      },
+      {
+        "name": "memberIdentityOf",
+        "kind": "function",
+        "jsdoc": "/** The member a host session names for a captured generation, as the identity port the Apple-IAP\n *  checkout and the wix-iap client take: null when that generation has no signed-in member. */",
+        "decl": "export function memberIdentityOf(source: HostIdentitySource): MemberIdentitySource;"
+      },
+      {
+        "name": "readIdentityBound",
+        "kind": "function",
+        "jsdoc": "/** Whether the host fences protected calls to the captured member (`identityBound`). Web does not. */",
+        "decl": "export function readIdentityBound(): boolean;"
+      },
       {
         "name": "ProductType",
         "kind": "type",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@wix/himalaya-cli",
-  "version": "0.1309.0",
+  "version": "0.1310.0",
   "type": "module",
   "description": "himi — the Himalaya authoring CLI. Build a Tier-5 content package on your own machine, push it to the production serve as a draft, preview it on web + Himi Player, and read worker logs back — the remote dev loop. Wraps @himalaya/serve-cli for transport.",
   "keywords": [
@@ -71,5 +71,5 @@
       "artifactId": "himalaya-cli"
     }
   },
-  "falconPackageHash": "02386de50054fcafd66cc4c3c44d8c8a4e9cf5de47401215465be767"
+  "falconPackageHash": "aed0d12edf97361177bd9f7e6ba033b9cce8f83615824cd195882dbf"
 }