@wix/himalaya-cli 0.1320.0 → 0.1322.0

package/dist/authoring-runtime/node_modules/@wix/himalaya/dist/_types/core/dev-server/src/app-config.d.ts

@@ -84,6 +84,7 @@ export interface NavigationConfig {
     iapConfig?: import("@wix/himalaya/core").IapConfig;
     cashierConfig?: import("@wix/himalaya/core").CashierConfig;
     base44Config?: import("@wix/himalaya/core").Base44Config;
+    wixIapConfig?: import("@wix/himalaya/core").WixIapConfig;
     wixPlatformConfig?: WixPlatformConfig;
     devGatewayConfig?: DevGatewayConfig;
     dataSchema?: import("@wix/himalaya/core").DataSchemaConfig;

package/dist/authoring-runtime/node_modules/@wix/himalaya/dist/_types/core/dev-server/src/app-module.d.ts

@@ -258,6 +258,9 @@ export interface DerivedAppMeta {
      *  `@himalaya/base44` talks to; the web host reads it, native boots install it). Public ids
      *  only — the access token never leaves the device. */
     base44?: import("@wix/himalaya/core").Base44Config;
+    /** Forwarded from AppConfig.wixIap — feeds the served `wixIapConfig`, which serve-control
+     *  projects into the dist contract's `native.iapBinding` (baked at build time, never OTA-read). */
+    wixIap?: import("@wix/himalaya/core").WixIapConfig;
     /** Forwarded from AppConfig.wixPlatform — feeds the OTA `wixPlatformConfig`
      *  block (RFC 0042 Phase 2 per-member productionization; read natively by
      *  WixPlatformCapability at boot, like iapConfig). */

package/dist/authoring-runtime/node_modules/@wix/himalaya/dist/_types/core/sdk/biometrics/src/index.d.ts

@@ -7,7 +7,17 @@ export interface ConfirmOptions {
     /** Optional fallback button label (e.g. "Use passcode"). */
     fallbackLabel?: string;
 }
-export type BiometricKind = "face" | "fingerprint" | "iris" | "none";
+/**
+ * The enrolled biometric, as far as the platform can tell:
+ * - `"face"` / `"fingerprint"` / `"iris"` — that modality.
+ * - `"biometric"` — a biometric is enrolled but the platform can't say which
+ *   (Android phones with both face and fingerprint hardware; the web). Label
+ *   the unlock neutrally ("Use biometrics") rather than guessing a modality.
+ * - `"none"` — nothing enrolled, or no hardware.
+ *
+ * Additive: treat any value you don't recognise like `"biometric"`.
+ */
+export type BiometricKind = "face" | "fingerprint" | "iris" | "biometric" | "none";
 /** Returns the kind of biometric the device supports. `"none"` if the user
  *  has not enrolled or hardware is missing. */
 export declare function available(): Promise<BiometricKind>;

package/dist/authoring-runtime/node_modules/@wix/himalaya/dist/_types/core/sdk/iap/src/catalog-pricing-contract.d.ts

@@ -49,6 +49,10 @@ export interface IapCheckoutDecision {
 /** A deployed Wix→Apple mapping backend. Never supplied by a screen. */
 export interface IapMappingSource {
     mapping: PricingMappingProvider;
+    /** Whether this app sells through the App Store at all — the binary carries a purchases-app binding.
+     *  When it answers false, every item reads `disabled` with no lookup, exactly as with no source, so the
+     *  screen's own commerce applies; asked again on every load. Absent means always active. */
+    active?(): Promise<boolean>;
     /** The site this backend serves, used when the caller passes no site. */
     siteId?: string;
 }

package/dist/authoring-runtime/node_modules/@wix/himalaya/dist/_types/core/sdk/iap/src/host-session.d.ts

@@ -11,6 +11,10 @@ export interface HostSessionView extends SessionSnapshot {
 export interface HostIdentitySource {
     readonly identityBound: boolean;
     identity(session: SessionSnapshot): HostCallExpectation | null;
+    /** The site the native bridge fences protected calls to, from the latest ready snapshot. Null
+     *  when the host installed no session source: iOS publishes the bridge (`identityBound`) to
+     *  every worker that has `wix_api`, with or without one. */
+    site(): string | null;
 }
 export interface HostSessionProvider extends SessionProvider, HostIdentitySource {
 }

package/dist/authoring-runtime/node_modules/@wix/himalaya/dist/_types/core/sdk/iap/src/index.d.ts

@@ -1,4 +1,5 @@
 import type { TransactionStore } from "./delivery-contract.js";
+import type { AppBindingSource } from "./wix-payments-contract.js";
 export * from "./delivery-contract.js";
 export * from "./delivery.js";
 export * from "./pricing-contract.js";
@@ -146,3 +147,15 @@ export declare function finishTransaction(input: {
 }): Promise<FinishTransactionResult>;
 /** The managed native verbs as the delivery coordinator's store. */
 export declare const appleManagedStore: TransactionStore;
+/** The purchases-service binding the host baked into this binary at build time (the app's build
+ *  contract → Info.plist), checked natively against the running bundle, app and site. Never read
+ *  from a screen, OTA config or navigation param: a worker cannot choose which purchases app it
+ *  sells through. Null means not provisioned: an unbound build, an older binary without the verb,
+ *  or a platform with no managed App Store purchasing. A host that has the verb and fails to answer
+ *  proves neither, so that read rejects and is not kept: the caller must not fall back to the
+ *  unbound app's commerce. The binding cannot change while the process runs, so a source asks the
+ *  host once. */
+export declare function hostAppBindingSource(): AppBindingSource;
+/** One binding source per worker, shared by pricing and checkout, so one screen never acts on two
+ *  different answers to the same question. */
+export declare function sharedHostAppBindingSource(): AppBindingSource;

package/dist/authoring-runtime/node_modules/@wix/himalaya/dist/_types/core/sdk/iap/src/mapping-source.d.ts

@@ -1,5 +1,10 @@
 import type { IapMappingSource } from "./catalog-pricing-contract.js";
-/** The single activation switch for catalog pricing. No Wix→Apple mapping backend is deployed,
- *  so every screen stays on its existing commerce flow. Only automated tests substitute this module
- *  (at bundle-build time); the backend adapter replaces it when it exists. */
+import { type AppBindingSource } from "./wix-payments-contract.js";
+export type WixBridgeCall = (method: string, path: string, body: unknown, headers?: Record<string, string>) => Promise<unknown>;
+export interface WixIapMappingSourceDependencies {
+    binding: AppBindingSource;
+    call: WixBridgeCall;
+}
+/** The connected source. Tests substitute this module at bundle-build time (`mappingSourceSeam`). */
 export declare function iapMappingSource(): IapMappingSource | undefined;
+export declare function createWixIapMappingSource(deps: WixIapMappingSourceDependencies): IapMappingSource;

package/dist/authoring-runtime/node_modules/@wix/himalaya/dist/_types/core/sdk/iap/src/wix-payments.d.ts

@@ -30,15 +30,16 @@ export interface WixIapClient {
  * Creates a client for Wix's in-app-purchase payments service (`mobile-apps-wix-iap`), which pays
  * a Wix order with a store purchase the member makes in the app.
  *
- * NOT ENABLED and not production-ready. No app wires it, and no call reaches the service: it has
- * no public gateway route yet, so `route` must be supplied and there is no default. It calls
+ * The shared checkout (`createIapCommerce`) builds it with Serve's IAP route for an app whose binary
+ * carries a purchases-app binding; `route` stays a parameter with no default. It calls
  * StartPayment (`POST …/payments/start`), CompletePayment (`POST …/payments/complete`)
  * and GetPayment (`GET …/payments/{id}`) through the
  * `wix_api` bridge. A matched or approved Payment is not durable access and never finishes the
  * store transaction.
  *
- * Production use stays blocked: there is no public route or member authorization on the service,
- * no trusted app-binding source, and checkout stays disabled. When this client uses the host
+ * A sale needs the binding baked into the binary and an active mapping for the item; without them
+ * nothing is offered, and before a production Serve release carries the IAP routes the mapping read
+ * fails, so nothing is offered either. When this client uses the host
  * bridge, it also requires the host's identity clock and passes that captured expectation
  * through the bridge. An injected transport keeps the previous call shape unless the session
  * itself exposes an identity.

package/dist/authoring-runtime/node_modules/@wix/himalaya/dist/_types/core/sdk/sdk-types/src/capabilities.generated.d.ts

@@ -16,7 +16,7 @@ export declare const CAPABILITY_REGISTRY: {
     readonly haptic: readonly ["play"];
     readonly health: readonly ["availability", "getPermissionStatus", "query", "requestPermission", "saveWorkout"];
     readonly himi_apps: readonly ["canOpen", "current", "hostInfo", "open"];
-    readonly iap: readonly ["consume", "entitlements", "finishTransaction", "getPaywallConfig", "getProducts", "getUnfinishedTransactions", "purchase", "purchaseForVerification", "restore"];
+    readonly iap: readonly ["appBinding", "consume", "entitlements", "finishTransaction", "getPaywallConfig", "getProducts", "getUnfinishedTransactions", "purchase", "purchaseForVerification", "restore"];
     readonly keyboard: readonly ["dismiss"];
     readonly live_activity: readonly ["end", "start", "update"];
     readonly local_database: readonly ["availability", "count", "get", "getAll", "purge", "query", "queueDepth", "queueDrain", "queueEnqueue", "remove", "upsert"];

package/dist/authoring-runtime/node_modules/@wix/himalaya/dist/_types/core/sdk/webview/src/index.d.ts

@@ -28,6 +28,10 @@ export interface PageCapabilityResponse {
         code?: string;
     };
 }
+/** `call("himalaya", "capabilities")` answers `{ v: 1, capabilities: { <id>: [<method>…] } }`:
+ *  exactly the allowlist this worker was given. Reserved, so no real capability can take it. */
+export declare const PAGE_HANDSHAKE_CAPABILITY = "himalaya";
+export declare const PAGE_HANDSHAKE_METHOD = "capabilities";
 export interface ExposedPageCapability {
     module: Record<string, unknown>;
     methods: readonly string[];

package/dist/authoring-runtime/node_modules/@wix/himalaya/dist/_types/core/sdk/webview-page/src/index.d.ts

@@ -18,8 +18,23 @@ export interface WebViewPageResponse {
     result?: unknown;
     error?: WebViewPageError;
 }
-/** Invoke one method through the companion worker. Primarily useful to generated bindings. */
+/** Invoke one method through the companion worker. Primarily useful to generated bindings.
+ *  A call that shows native UI (a permission prompt, the share sheet) answers only when the user
+ *  is done with it: pass a long `timeoutMs` (e.g. 120_000) rather than the 30-second default. */
 export declare function call<T>(capability: string, method: string, args?: unknown[], timeoutMs?: number): Promise<T>;
+/**
+ * The capabilities and methods this page's companion worker answers, as `{ <id>: [<method>…] }`;
+ * `null` outside the app, when the app is older than the handshake, or nothing answered in
+ * `timeoutMs`. A list is remembered (and returned at once, whatever `timeoutMs`); a miss is not,
+ * because a worker that is still booting drops the first messages.
+ */
+export declare function enabledCapabilities(timeoutMs?: number): Promise<Record<string, string[]> | null>;
+/** Whether the companion worker lets this page call `capability.method`, read from
+ *  enabledCapabilities() — nothing is called. `false` when there is no list. */
+export declare function isEnabled(capability: string, method: string, timeoutMs?: number): Promise<boolean>;
+/** For an app older than the handshake: CALL `capability.method` and report whether it answered
+ *  (even with an error). It runs the method, so pass only a read-only one. */
+export declare function probe(capability: string, method: string, args?: unknown[], timeoutMs?: number): Promise<boolean>;
 /**
  * Typed SDK proxy for every request/response capability in CAPABILITY_REGISTRY.
  * A namespace is usable only when this screen's companion worker explicitly imported and

package/dist/authoring-runtime/node_modules/@wix/himalaya/dist/_types/core/ts/src/tokens.d.ts

@@ -65,8 +65,12 @@ export type DeepPartial<T> = T extends readonly (infer U)[] ? readonly DeepParti
  * Not overlayable: `contentMaxWidth` (a Projection concern that RFC 0041 size classes own),
  * `fontFaces` (the served font declaration, derived rather than authored) and `idiom` itself.
  * Nor a brand colour (`BRAND_COLOR_TOKENS`, #2932): one brand reads as one brand everywhere.
+ * Nor the owner's `kit.colorScheme` light/dark pin: every runtime reads it from the base `kit`
+ * only, so an overlay pin would compile and do nothing (`himi validate` warns on one too).
  */
-export type IdiomOverlay = DeepPartial<Omit<DesignTokens, "idiom" | "idiomPolicy" | "contentMaxWidth" | "fontFaces">>;
+export type IdiomOverlay = DeepPartial<Omit<DesignTokens, "idiom" | "idiomPolicy" | "contentMaxWidth" | "fontFaces" | "kit"> & {
+    kit?: Omit<KitBlock, "colorScheme">;
+}>;
 /**
  * One face in a font declaration.
  *
@@ -122,6 +126,10 @@ export interface KitBlock {
     variant?: string;
     density?: string;
     motion?: string;
+    /** The owner's light/dark pin, shipped OTA. "system" (or absent) follows the device; a host
+     *  override and the OS high-contrast setting still win over it. Read from this top-level
+     *  block only — an idiom overlay cannot set it. Mirror of iOS/Android `KitBlock.colorScheme`. */
+    colorScheme?: "system" | "light" | "dark";
 }
 /** RFC 0021 (bottom-nav extension) — kit-driven tab bar styling. All fields
  *  optional; a kit omitting `tabBar` falls back to the flat default bar. */

package/dist/authoring-runtime/node_modules/@wix/himalaya/dist/_types/stdlib/flows/iap-checkout/src/apple-iap-contract.d.ts

@@ -87,6 +87,9 @@ export interface IapOrderAdapter {
     }, bridge: SessionBoundBridge): Promise<OrderAttempt>;
     /** The vertical's authoritative answer for the order's item and the signed-in member. */
     readAccess(verticalRef: VerticalRef, bridge: SessionBoundBridge): Promise<AccessRead>;
+    /** The member's access to an item before any order exists (bought through Wix, say). Read-only:
+     *  never opens or prepares an order. An adapter without it shows Get access until a sale says otherwise. */
+    currentAccess?(item: IapOrderItem, bridge: SessionBoundBridge): Promise<AccessRead>;
 }
 /** Durable, member-partitioned purchase references. Ids only: never a proof or a credential, and
  *  the member id is stored only as a one-way hash in the key. */
@@ -178,6 +181,8 @@ export interface AppleIapCheckout {
     /** Recovers held purchases and resumes tracking payments already handed over. */
     start(): Promise<AppleIapCheckoutState>;
     buy(item: IapOrderItem): Promise<AppleIapCheckoutState>;
+    /** Marks the items the signed-in member already has access to, read from each vertical without an order. */
+    checkAccess(items: readonly IapOrderItem[]): Promise<AppleIapCheckoutState>;
     reconcile(): Promise<AppleIapCheckoutState>;
     retry(): Promise<AppleIapCheckoutState>;
     tick(): Promise<AppleIapCheckoutState>;

package/dist/authoring-runtime/node_modules/@wix/himalaya/dist/_types/stdlib/flows/iap-checkout/src/apple-iap-core.d.ts

@@ -1,4 +1,6 @@
-import type { AppleIapCheckout, AppleIapCheckoutDependencies } from "./apple-iap-contract.js";
+import type { AppleIapCheckout, AppleIapCheckoutDependencies, AppleIapCheckoutState } from "./apple-iap-contract.js";
 export declare function createAppleIapCheckoutWith(deps: AppleIapCheckoutDependencies & {
     enabled: boolean;
 }): AppleIapCheckout;
+/** What a checkout that is not enabled answers: nothing sold, nothing tracked. */
+export declare function notEnabledState(): AppleIapCheckoutState;

package/dist/authoring-runtime/node_modules/@wix/himalaya/dist/_types/stdlib/flows/iap-checkout/src/checkout-source.d.ts

@@ -1 +1,5 @@
+import type { AppleIapCheckoutRoutes } from "./commerce-contract.js";
+export declare const HIMALAYA_SERVE_CHECKOUT_ROUTES: AppleIapCheckoutRoutes;
+export declare function appleIapCheckoutRoutes(): AppleIapCheckoutRoutes | null;
+/** The low-level factory's switch: on whenever the production routes exist. */
 export declare function appleIapCheckoutEnabled(): boolean;

package/dist/authoring-runtime/node_modules/@wix/himalaya/dist/_types/stdlib/flows/iap-checkout/src/commerce-contract.d.ts

@@ -0,0 +1,83 @@
+import type { CatalogReference, IapCatalogItem, IapCatalogPricing, IapPollDirective, WixIapRoute } from "@wix/himalaya/iap";
+import type { AppleIapCheckoutState, CashierRoute, IapOrderAdapter, IapOrderItem } from "./apple-iap-contract.js";
+/** Where the checkout reaches Wix: mobile-apps-wix-iap's Payments service and cashier pay v2, both
+ *  as gateway paths the member credential is accepted on. Platform configuration, never a screen's. */
+export interface AppleIapCheckoutRoutes {
+    wixIap: WixIapRoute;
+    cashier: CashierRoute;
+}
+/** A dependency purchasing needs that this app or host does not have yet. Internal diagnostics:
+ *  never customer copy.
+ *  - `routes`: no member-callable wix-iap or cashier route is configured.
+ *  - `mapping`: no Wix→Apple mapping source is connected.
+ *  - `binding`: the binary carries no purchases-app binding for this app.
+ *  - `nativeIdentity`: the host cannot bind a request to the signed-in member.
+ *  - `managedStore`: managed StoreKit is not enabled on this host (or not iOS).
+ *  - `storage`: purchase references cannot be stored durably. */
+export type IapPurchaseGap = "routes" | "mapping" | "binding" | "nativeIdentity" | "managedStore" | "storage";
+export type IapPurchaseReadiness = {
+    status: "checking";
+} | {
+    status: "ready";
+} | {
+    status: "unavailable";
+    gaps: readonly IapPurchaseGap[];
+};
+export interface IapCommerceOptions {
+    /** The verticals this screen sells. A screen that only shows prices passes none. */
+    adapters?: readonly IapOrderAdapter[];
+    /** After any price, readiness or checkout change; a worker republishes its state here. */
+    onChange?(): void;
+}
+export interface IapCommerce {
+    /** Routes, display prices, regular-checkout guards and the visible-refresh poll. */
+    readonly pricing: IapCatalogPricing;
+    /** Prices the items the screen shows, scoped to this app by the host. `scopeComplete` is false
+     *  when the host's own identity could not be read, so the screen offers Retry itself. */
+    loadPrices(items: IapCatalogItem[]): Promise<{
+        scopeComplete: boolean;
+    }>;
+    readiness(): IapPurchaseReadiness;
+    /** Whether the latest price load (the screen's or the poll's) had the host's own identity; when
+     *  false the screen offers Retry itself. */
+    scopeComplete(): boolean;
+    state(): AppleIapCheckoutState;
+    /** The item's App Store action, from its price route (the settled one while a refresh resolves),
+     *  purchase readiness and the checkout state. */
+    purchaseFields(reference: CatalogReference, copy: IapPurchaseCopy): IapPurchaseFields;
+    /** Checks readiness, then recovers held purchases and resumes payments already handed over. */
+    start(): Promise<AppleIapCheckoutState>;
+    buy(item: IapOrderItem): Promise<AppleIapCheckoutState>;
+    /** On resume: re-reads Apple's unfinished queue and the payments being tracked. */
+    reconcile(): Promise<AppleIapCheckoutState>;
+    tick(): Promise<AppleIapCheckoutState>;
+    /** The screen's one `_poll` for prices and purchase, or undefined when the cadence it already
+     *  armed still holds (or there is nothing to poll). Emit it from every publish. */
+    pollDirective(action: string): IapPollDirective | undefined;
+    /** The polled action's body: due purchase work — a full reconcile when the host had suspended
+     *  the poll (background, a pooled screen) — and the price refresh at its own cadence. */
+    poll(): Promise<void>;
+    dispose(): void;
+}
+/** Labels from the screen's copy pack; the shared layer only chooses between them. */
+export interface IapPurchaseCopy {
+    buy: string;
+    processing: string;
+    awaitingApproval: string;
+    unavailable: string;
+    signInRequired: string;
+    retry: string;
+    priceChanged: string;
+    support: string;
+}
+/** What a screen binds for an item's App Store purchase action. */
+export interface IapPurchaseFields {
+    /** The item sells through the App Store: show this action instead of the regular one. */
+    appleRoute: boolean;
+    /** The vertical confirmed the member's access: open the content instead of selling it. */
+    accessReady: boolean;
+    buyLabel: string;
+    buyDisabled: boolean;
+    buyBusy: boolean;
+    buyNote: string;
+}

package/dist/authoring-runtime/node_modules/@wix/himalaya/dist/_types/stdlib/flows/iap-checkout/src/commerce-core.d.ts

@@ -0,0 +1,36 @@
+import type { MemberIdentitySource, AppBindingSource, Clock, HostIdentitySource, IapAppHost, IapCatalogPricing, SessionProvider, TransactionStore, WixIapClient, WixIapRoute } from "@wix/himalaya/iap";
+import type { IapOrderAdapter, OrderRefStore, WixBridge } from "./apple-iap-contract.js";
+import type { AppleIapCheckoutRoutes, IapCommerce } from "./commerce-contract.js";
+export interface HostIdentity {
+    appId: string;
+    bundleId: string;
+    platform: string;
+}
+export interface CommerceHost {
+    /** The running app's identity and platform; null when the host could not say. */
+    identity(): Promise<HostIdentity | null>;
+    /** The host's preference business, the price scope of an app with no binding. */
+    preferenceSite(): string;
+}
+export interface IapCommerceDependencies {
+    routes: AppleIapCheckoutRoutes | null;
+    pricing: IapCatalogPricing;
+    binding: AppBindingSource;
+    /** One provider for the wix-iap client and the checkout: every step compares its generations. */
+    session: SessionProvider & Partial<HostIdentitySource>;
+    /** The member a captured session names (D61: wix-iap records purchases against the member id). */
+    identity: MemberIdentitySource;
+    host: CommerceHost;
+    store: TransactionStore;
+    refs: OrderRefStore;
+    clock: Clock;
+    adapters: readonly IapOrderAdapter[];
+    bridge?: WixBridge;
+    wixIapClient(config: {
+        host: IapAppHost;
+        route: WixIapRoute;
+    }): WixIapClient;
+    jitter?: (baseDelayMs: number) => number;
+    onChange?(): void;
+}
+export declare function createIapCommerceWith(deps: IapCommerceDependencies): IapCommerce;

package/dist/authoring-runtime/node_modules/@wix/himalaya/dist/_types/stdlib/flows/iap-checkout/src/commerce.d.ts

@@ -0,0 +1,8 @@
+import type { IapCommerce, IapCommerceOptions } from "./commerce-contract.js";
+/**
+ * Creates this worker's App Store commerce: catalog pricing for the items the screen shows, and the
+ * shared Apple-IAP checkout for the verticals it sells. Create it once at module scope, call
+ * `start()` when the screen boots, `reconcile()` when it resumes, and `tick()` from a `_poll` at
+ * `state().nextWakeAt`. Bind the action with `iapPurchaseFields`.
+ */
+export declare function createIapCommerce(options?: IapCommerceOptions): IapCommerce;

package/dist/authoring-runtime/node_modules/@wix/himalaya/dist/_types/stdlib/flows/iap-checkout/src/index.d.ts

@@ -1,4 +1,7 @@
+export { createIapCommerce } from "./commerce.js";
+export { iapPurchaseFields } from "./purchase-fields.js";
 export { createAppleIapCheckout } from "./apple-iap.js";
 export { onlineProgramOrders, pricingPlanOrders, storesProductOrders, classifyCart } from "./iap-verticals/index.js";
 export { createWorkerOrderRefStore } from "./order-refs.js";
 export type { AccessRead, AppleIapCheckout, AppleIapCheckoutDependencies, AppleIapCheckoutPhase, AppleIapCheckoutState, BridgeOutcome, BridgeRefusal, CashierRoute, IapEligibility, IapOrderAdapter, IapOrderItem, OrderAttempt, OrderFailureCode, OrderPartitionKey, OrderRef, OrderRefPartition, OrderRefStage, OrderRefStore, PaymentAccess, PaymentProgress, SessionBoundBridge, VerticalRef, WixBridge, } from "./apple-iap-contract.js";
+export type { AppleIapCheckoutRoutes, IapCommerce, IapCommerceOptions, IapPurchaseCopy, IapPurchaseFields, IapPurchaseGap, IapPurchaseReadiness, } from "./commerce-contract.js";

package/dist/authoring-runtime/node_modules/@wix/himalaya/dist/_types/stdlib/flows/iap-checkout/src/purchase-fields.d.ts

@@ -0,0 +1,4 @@
+import type { IapItemView } from "@wix/himalaya/iap";
+import type { AppleIapCheckoutState } from "./apple-iap-contract.js";
+import type { IapPurchaseCopy, IapPurchaseFields, IapPurchaseReadiness } from "./commerce-contract.js";
+export declare function iapPurchaseFields(view: IapItemView, state: AppleIapCheckoutState, readiness: IapPurchaseReadiness, copy: IapPurchaseCopy): IapPurchaseFields;

package/dist/authoring-runtime/node_modules/@wix/himalaya/dist/_types/stdlib/wix-sdk/stores-v1/src/display.d.ts

@@ -106,11 +106,32 @@ export interface StoreProductSearch {
     query?: string;
     sort?: 'default' | 'az' | 'za';
     ids?: string[];
+    /**
+     * Only products in this category (V3) / collection (V1) — a category screen's
+     * "products in X". ANDed with `ids` when both are given.
+     *
+     * V3 matches `allCategoriesInfo.categories`, so a parent category also lists its
+     * subcategories' products, as the site does. Only Search Products can filter by
+     * category — Query Products answers `not declared as filterable` — so a
+     * `categoryId` always routes the V3 read to `/products/search`. V1 matches
+     * `collections.id`.
+     */
+    categoryId?: string;
     limit?: number;
     cursor?: string;
     /** Extra v3 fieldsets. Additive — widens the default, never replaces it. */
     fields?: readonly string[];
 }
+/**
+ * Search, sort, and filter products on whichever catalog this site runs — the read
+ * behind a shop list, a saved-products list, and a category screen.
+ *
+ * `categoryId` narrows to one category's products (V3 `allCategoriesInfo`, so a parent
+ * category includes its subcategories; V1 `collections.id`), ANDed with `ids`. An
+ * empty `ids` array resolves to an empty page WITHOUT a request. Paging is one
+ * contract on both catalogs: pass back `pagingMetadata.cursors.next` as `cursor`.
+ * A non-catalog failure (401/403, offline) rejects; it is never retried on V1.
+ */
 export declare function searchStoreProducts(options?: StoreProductSearch): Promise<StoreProductsResponse>;
 /** Read one product from whichever catalog this site runs. `fields` is additive —
  *  it WIDENS the default v3 display fieldset rather than replacing it. */

package/dist/authoring-runtime/node_modules/@wix/himalaya/dist/audio-record.mjs

@@ -31,7 +31,7 @@ var CAPABILITY_REGISTRY = {
   "haptic": ["play"],
   "health": ["availability", "getPermissionStatus", "query", "requestPermission", "saveWorkout"],
   "himi_apps": ["canOpen", "current", "hostInfo", "open"],
-  "iap": ["consume", "entitlements", "finishTransaction", "getPaywallConfig", "getProducts", "getUnfinishedTransactions", "purchase", "purchaseForVerification", "restore"],
+  "iap": ["appBinding", "consume", "entitlements", "finishTransaction", "getPaywallConfig", "getProducts", "getUnfinishedTransactions", "purchase", "purchaseForVerification", "restore"],
   "keyboard": ["dismiss"],
   "live_activity": ["end", "start", "update"],
   "local_database": ["availability", "count", "get", "getAll", "purge", "query", "queueDepth", "queueDrain", "queueEnqueue", "remove", "upsert"],

package/dist/authoring-runtime/node_modules/@wix/himalaya/dist/calendar.mjs

@@ -31,7 +31,7 @@ var CAPABILITY_REGISTRY = {
   "haptic": ["play"],
   "health": ["availability", "getPermissionStatus", "query", "requestPermission", "saveWorkout"],
   "himi_apps": ["canOpen", "current", "hostInfo", "open"],
-  "iap": ["consume", "entitlements", "finishTransaction", "getPaywallConfig", "getProducts", "getUnfinishedTransactions", "purchase", "purchaseForVerification", "restore"],
+  "iap": ["appBinding", "consume", "entitlements", "finishTransaction", "getPaywallConfig", "getProducts", "getUnfinishedTransactions", "purchase", "purchaseForVerification", "restore"],
   "keyboard": ["dismiss"],
   "live_activity": ["end", "start", "update"],
   "local_database": ["availability", "count", "get", "getAll", "purge", "query", "queueDepth", "queueDrain", "queueEnqueue", "remove", "upsert"],

package/dist/authoring-runtime/node_modules/@wix/himalaya/dist/calls.mjs

@@ -31,7 +31,7 @@ var CAPABILITY_REGISTRY = {
   "haptic": ["play"],
   "health": ["availability", "getPermissionStatus", "query", "requestPermission", "saveWorkout"],
   "himi_apps": ["canOpen", "current", "hostInfo", "open"],
-  "iap": ["consume", "entitlements", "finishTransaction", "getPaywallConfig", "getProducts", "getUnfinishedTransactions", "purchase", "purchaseForVerification", "restore"],
+  "iap": ["appBinding", "consume", "entitlements", "finishTransaction", "getPaywallConfig", "getProducts", "getUnfinishedTransactions", "purchase", "purchaseForVerification", "restore"],
   "keyboard": ["dismiss"],
   "live_activity": ["end", "start", "update"],
   "local_database": ["availability", "count", "get", "getAll", "purge", "query", "queueDepth", "queueDrain", "queueEnqueue", "remove", "upsert"],

package/dist/authoring-runtime/node_modules/@wix/himalaya/dist/contacts.mjs

@@ -31,7 +31,7 @@ var CAPABILITY_REGISTRY = {
   "haptic": ["play"],
   "health": ["availability", "getPermissionStatus", "query", "requestPermission", "saveWorkout"],
   "himi_apps": ["canOpen", "current", "hostInfo", "open"],
-  "iap": ["consume", "entitlements", "finishTransaction", "getPaywallConfig", "getProducts", "getUnfinishedTransactions", "purchase", "purchaseForVerification", "restore"],
+  "iap": ["appBinding", "consume", "entitlements", "finishTransaction", "getPaywallConfig", "getProducts", "getUnfinishedTransactions", "purchase", "purchaseForVerification", "restore"],
   "keyboard": ["dismiss"],
   "live_activity": ["end", "start", "update"],
   "local_database": ["availability", "count", "get", "getAll", "purge", "query", "queueDepth", "queueDrain", "queueEnqueue", "remove", "upsert"],