@wix/himalaya-cli 0.1322.0 → 0.1324.0

package/guides/sdk-reference.json

@@ -11284,7 +11284,7 @@
         "name": "WixBlogCommentRow",
         "kind": "type",
         "jsdoc": "",
-        "decl": "export type WixBlogCommentRow = {\n  id: string;\n  authorName: string;\n  /** The comment's plain text (every text run, space-joined). */\n  text: string;\n  createdDate: string;\n  /** [rico] #3372 — the comment's Ricos document (`content.richContent`) as the API returned it, for a\n   *  RichContent row; undefined when the comment has none. */\n  richContent?: unknown;\n};"
+        "decl": "export type WixBlogCommentRow = {\n  id: string;\n  authorName: string;\n  /** The comment's plain text (every text run, space-joined). */\n  text: string;\n  createdDate: string;\n  /** [rico] #3372 — the comment's Ricos document (`content.richContent`) as the API returned it, for a\n   *  RichContent row; undefined when the comment has none. */\n  richContent?: unknown;\n  /** Set only on a reply row `listGroupPostComments` flattens in from `commentReplies` —\n   *  absent on a top-level comment. */\n  parentCommentId?: string;\n  /** Set only on a TOP-LEVEL comment row, true when its reply thread had more replies than\n   *  `repliesLimit` returned. There is no confirmed endpoint in this SDK to fetch the rest —\n   *  `WixRepliesListResponse`'s own `pagingMetadata` carries a cursor, but nothing in the\n   *  ingested spec calls it by itself — so this is a signal to show \"N more replies\" rather\n   *  than silently truncating, not something a caller can page past yet. */\n  hasMoreReplies?: boolean;\n};"
       },
       {
         "name": "blogCommentRow",
@@ -11305,6 +11305,41 @@
         "decl": "export async function listBlogComments(postId: string): Promise<WixBlogCommentRow[]>;",
         "http": "GET /comments/v1/comments/list-by-resource?{…}"
       },
+      {
+        "name": "GROUPS_COMMENTS_APP_ID",
+        "kind": "const",
+        "jsdoc": "/** The appId Wix Groups registers as its comments provider. Same value as\n *  GROUPS_APP_ID/GROUPS_APP_DEF_ID used elsewhere in this repo (social-feed's\n *  reactions/create-post calls) — Groups is one of the apps where the comments\n *  provider id and the app-def-id coincide. Source: comments-ng's own CONSUMERS.md. */",
+        "decl": "export const GROUPS_COMMENTS_APP_ID = \"148c2287-c669-d849-d153-463c7486a694\";"
+      },
+      {
+        "name": "createGroupPostComment",
+        "kind": "function",
+        "jsdoc": "/**\n * Posts a comment (or a reply, when `parentCommentId` is given) on a group feed post —\n * POST /comments/v1/comments, body { comment: { appId, contextId: groupId, resourceId:\n * feedItemId, content, parentComment? } }. Same underlying RPC as the generated\n * `createComment`, scoped to a group feed item by the appId/contextId/resourceId\n * convention in comments-ng's own CONSUMERS.md (source-verified; see the file header).\n *\n * verify-live: no round-trip against a real group post yet — the scoping comes from the\n * comments-ng consumer table, not a live create+list.\n *\n * @scope member — requires a signed-in site member.\n */",
+        "decl": "export async function createGroupPostComment(\n  groupId: string,\n  feedItemId: string,\n  text: string,\n  parentCommentId?: string,\n): Promise<WixBlogCommentRow>;",
+        "scope": "member",
+        "verified": false
+      },
+      {
+        "name": "WixListGroupPostCommentsResult",
+        "kind": "interface",
+        "jsdoc": "",
+        "decl": "export interface WixListGroupPostCommentsResult {\n  comments: WixBlogCommentRow[];\n  /** `undefined` when the response carried none — a thread with more pages has one. */\n  pagingMetadata?: { count?: number; hasNext?: boolean; cursors?: { next?: string; prev?: string } };\n}"
+      },
+      {
+        "name": "WixListGroupPostCommentsOptions",
+        "kind": "interface",
+        "jsdoc": "",
+        "decl": "export interface WixListGroupPostCommentsOptions {\n  /** From a prior call's `pagingMetadata.cursors.next` — fetches the next page. */\n  cursor?: string;\n  /** Top-level comments per page. Defaults to the server's own default (unset). */\n  limit?: number;\n  /** Replies to include inline PER parent comment. Defaults to 20 — unset, the\n   *  server's documented default is to include none at all (see below). */\n  repliesLimit?: number;\n}"
+      },
+      {
+        "name": "listGroupPostComments",
+        "kind": "function",
+        "jsdoc": "/**\n * Lists a group feed post's comment thread — GET /comments/v1/comments/list-by-resource,\n * scoped by appId/contextId=groupId/resourceId=feedItemId (query string, never a GET\n * body — see the comment above). Same underlying RPC as the generated\n * `listCommentsByResource`.\n *\n * Replies ride the SAME response, under `commentReplies` — keyed by parent comment id —\n * but ONLY when the request's `cursorPaging.repliesLimit` asks for them; the field exists\n * precisely because the server does not include replies by default. This function sends\n * `cursorPaging.repliesLimit=20` unless `opts.repliesLimit` overrides it, and forwards\n * `opts.cursor`/`opts.limit` into `cursorPaging.cursor`/`cursorPaging.limit` so a caller\n * can actually page past `pagingMetadata.hasNext` instead of being stuck on page one. The\n * generator could not resolve a precise shape for the `commentReplies` map\n * (`Record<string, unknown>`), so its value is read as `{ replies?, pagingMetadata? }` here —\n * inferred from the already-typed, structurally identical `WixRepliesListResponse`, not\n * live-verified against a real multi-reply thread. Each reply is flattened into the SAME\n * row list, tagged with `parentCommentId`, directly after its parent, oldest reply first.\n * Top-level comments keep the SERVER's order: the request sends no sort (none is confirmed\n * for this provider), so re-sorting a page on the client would break chronology at a page\n * boundary whenever the server pages newest-first. Kept as-is, consecutive pages append\n * consistently, whatever order the server uses. A thread with more replies than `repliesLimit` sets its PARENT row's\n * `hasMoreReplies: true` instead of silently dropping them — there is no confirmed endpoint\n * in this SDK to page a single thread's replies, so this is a signal, not a cursor.\n *\n * verify-live: no round-trip against a real group post yet — the appId/contextId/resourceId\n * shape comes from the comments-ng consumer table, not a live call.\n *\n * @scope member — a signed-in site member reading a group they can see; whether an\n * anonymous visitor can read a PUBLIC group's comments is unconfirmed — needsLiveProbe.\n */",
+        "decl": "export async function listGroupPostComments(\n  groupId: string,\n  feedItemId: string,\n  opts: WixListGroupPostCommentsOptions = {},\n): Promise<WixListGroupPostCommentsResult>;",
+        "http": "GET /comments/v1/comments/list-by-resource?{…}",
+        "scope": "member",
+        "verified": false
+      },
       {
         "name": "categories.createCategory",
         "kind": "function",
@@ -20001,16 +20036,18 @@
       {
         "name": "queryGroups",
         "kind": "function",
-        "jsdoc": "",
+        "jsdoc": "/**\n * List/search groups — POST /social-groups-proxy/groups/v2/groups/query.\n *\n * @scope visitor — browsing public groups needs no sign-in; this is an\n * already-working consumer-app feature (group discovery). Whether a\n * private/secret group's existence is visible to a non-member is unconfirmed\n * — needsLiveProbe.\n */",
         "decl": "export function queryGroups(\n  req: WixGroupsQueryRequest = {} as WixGroupsQueryRequest,\n  opts?: WixCallOptions,\n): Promise<WixQueryGroupsResponse>;",
-        "http": "POST /social-groups-proxy/groups/v2/groups/query"
+        "http": "POST /social-groups-proxy/groups/v2/groups/query",
+        "scope": "visitor"
       },
       {
         "name": "getGroup",
         "kind": "function",
-        "jsdoc": "",
+        "jsdoc": "/**\n * Get a single group by id — GET /social-groups-proxy/groups/v2/groups/{id}.\n *\n * @scope visitor — same reasoning as `queryGroups`: reading a group's detail is\n * an already-working consumer-app feature with no sign-in required for a\n * public group.\n */",
         "decl": "export function getGroup(id: string, opts?: WixCallOptions): Promise<WixGroup>;",
-        "http": "GET /social-groups-proxy/groups/v2/groups/{…}"
+        "http": "GET /social-groups-proxy/groups/v2/groups/{…}",
+        "scope": "visitor"
       },
       {
         "name": "WixGroupCoverImage",
@@ -20025,16 +20062,22 @@
         "decl": "export interface WixGroupAccessRestriction {\n  /** UNKNOWN | ADMIN_APPROVAL | PAID_PLANS | EVENTS */\n  type?: string;\n}"
       },
       {
-        "name": "WixGroupWrite",
+        "name": "WixGroupSettings",
+        "kind": "interface",
+        "jsdoc": "/** The real `GroupSettings` shape, ingested from `@wix/auto_sdk_groups_groups`\n *  (codegen/wix/auto/specs/groups_groups/types.d.ts) at its latest published version as of\n *  2026-10-06 — re-ingestion confirmed no additional fields exist upstream. Do NOT add\n *  fields beyond this list without re-ingesting or a live probe first. */",
+        "decl": "export interface WixGroupSettings {\n  membersCanInvite?: boolean;\n  membersCanApprove?: boolean;\n  welcomeMemberPostEnabled?: boolean;\n  groupDetailsChangedPostEnabled?: boolean;\n  showMemberList?: boolean;\n  /** No enum is pinned anywhere in the ingested spec — needsLiveProbe. */\n  allowedToInviteMembers?: string;\n  /** No enum is pinned anywhere in the ingested spec — needsLiveProbe. */\n  allowedToApproveJoinRequests?: string;\n  aiSpamProtectionEnabled?: boolean;\n}"
+      },
+      {
+        "name": "WixGroupWriteInput",
         "kind": "interface",
         "jsdoc": "/** Writable group fields for create/update. */",
-        "decl": "export interface WixGroupWrite {\n  /** Required on create. */\n  name?: string;\n  /** UNKNOWN | PUBLIC | PRIVATE | SECRET */\n  privacyStatus?: string;\n  /** Plain-text group description. Social Groups v2 models this as a plain string\n   *  (public schema social-groups-v2-group-groups.schemas.ts → `description: z.string()`),\n   *  NOT a Ricos doc, so create/update accept it directly in `{ group }`. */\n  description?: string;\n  coverImage?: WixGroupCoverImage | null;\n  accessRestriction?: WixGroupAccessRestriction;\n}"
+        "decl": "export interface WixGroupWriteInput {\n  /** Required on create. */\n  name?: string;\n  /** UNKNOWN | PUBLIC | PRIVATE | SECRET */\n  privacyStatus?: string;\n  /** Plain-text group description. Social Groups v2 models this as a plain string\n   *  (public schema social-groups-v2-group-groups.schemas.ts → `description: z.string()`),\n   *  NOT a Ricos doc, so create/update accept it directly in `{ group }`. */\n  description?: string;\n  coverImage?: WixGroupCoverImage | null;\n  accessRestriction?: WixGroupAccessRestriction;\n  settings?: WixGroupSettings;\n}"
       },
       {
         "name": "WixCreateGroupRequest",
         "kind": "interface",
         "jsdoc": "",
-        "decl": "export interface WixCreateGroupRequest {\n  group: WixGroupWrite;\n}"
+        "decl": "export interface WixCreateGroupRequest {\n  group: WixGroupWriteInput;\n}"
       },
       {
         "name": "WixCreateGroupResponse",
@@ -20046,7 +20089,7 @@
         "name": "WixUpdateGroupRequest",
         "kind": "interface",
         "jsdoc": "",
-        "decl": "export interface WixUpdateGroupRequest {\n  group: WixGroupWrite & { id: string };\n}"
+        "decl": "export interface WixUpdateGroupRequest {\n  group: WixGroupWriteInput & { id: string };\n}"
       },
       {
         "name": "WixUpdateGroupResponse",
@@ -20063,23 +20106,26 @@
       {
         "name": "createGroup",
         "kind": "function",
-        "jsdoc": "/** Create a group — POST /social-groups-proxy/groups/v2/groups. `name` is required; the entity is wrapped as `{ group }`. */",
-        "decl": "export function createGroup(group: WixGroupWrite): Promise<WixCreateGroupResponse>;",
-        "http": "POST /social-groups-proxy/groups/v2/groups"
+        "jsdoc": "/**\n * Create a group — POST /social-groups-proxy/groups/v2/groups. `name` is required;\n * the entity is wrapped as `{ group }`.\n *\n * @scope owner — CONFIRMED: requires a true owner/admin-scoped API token. Returns\n * HTTP 403 for every member session, including the site owner's own account signed\n * in via a normal member-login flow. There is NO member-side workaround — do not\n * wire this to a consumer-facing \"create group\" action. See the section note above\n * for the reproduction.\n */",
+        "decl": "export function createGroup(group: WixGroupWriteInput): Promise<WixCreateGroupResponse>;",
+        "http": "POST /social-groups-proxy/groups/v2/groups",
+        "scope": "owner"
       },
       {
         "name": "updateGroup",
         "kind": "function",
-        "jsdoc": "/** Update a group — PATCH /social-groups-proxy/groups/v2/groups/{id} (field-mask style). Only the supplied fields change; the request carries `{ group: { id, ... } }`. */",
-        "decl": "export function updateGroup(groupId: string, group: WixGroupWrite): Promise<WixUpdateGroupResponse>;",
-        "http": "PATCH /social-groups-proxy/groups/v2/groups/{…}"
+        "jsdoc": "/**\n * Update a group — PATCH /social-groups-proxy/groups/v2/groups/{id} (field-mask style).\n * Only the supplied fields change; the request carries `{ group: { id, ... } }`.\n *\n * @scope owner — VERY LIKELY the same owner/admin-scoped-token requirement as\n * `createGroup` (same entity, same write-class, originally verified together via\n * \"the real Owner Create/Edit-Group flow\") — but NOT independently re-tested\n * against a member session this round. needsLiveProbe to confirm directly rather\n * than by inference.\n */",
+        "decl": "export function updateGroup(groupId: string, group: WixGroupWriteInput): Promise<WixUpdateGroupResponse>;",
+        "http": "PATCH /social-groups-proxy/groups/v2/groups/{…}",
+        "scope": "owner"
       },
       {
         "name": "deleteGroup",
         "kind": "function",
-        "jsdoc": "/** Delete a group — DELETE /social-groups-proxy/groups/v2/groups/{id}. */",
+        "jsdoc": "/**\n * Delete a group — DELETE /social-groups-proxy/groups/v2/groups/{id}.\n *\n * @scope owner — VERY LIKELY the same owner/admin-scoped-token requirement as\n * `createGroup` (same reasoning as `updateGroup` above) — not independently\n * re-tested against a member session this round. needsLiveProbe.\n */",
         "decl": "export function deleteGroup(groupId: string): Promise<WixDeleteGroupResponse>;",
-        "http": "DELETE /social-groups-proxy/groups/v2/groups/{…}"
+        "http": "DELETE /social-groups-proxy/groups/v2/groups/{…}",
+        "scope": "owner"
       },
       {
         "name": "WixGroupJoinResponse",
@@ -20090,16 +20136,18 @@
       {
         "name": "joinGroup",
         "kind": "function",
-        "jsdoc": "/** Join a group as the signed-in member — POST /social-groups/v2/groups/{id}/join. */",
+        "jsdoc": "/**\n * Join a group as the signed-in member — POST /social-groups/v2/groups/{id}/join.\n *\n * @scope member — a self-service action any signed-in member session can reach\n * (distinct REST base from group CRUD above, which is owner-only). Verified live.\n */",
         "decl": "export function joinGroup(groupId: string): Promise<WixGroupJoinResponse>;",
-        "http": "POST /social-groups/v2/groups/{…}/join"
+        "http": "POST /social-groups/v2/groups/{…}/join",
+        "scope": "member"
       },
       {
         "name": "leaveGroup",
         "kind": "function",
-        "jsdoc": "/** Leave a group as the signed-in member — POST /social-groups/v2/groups/{id}/leave. */",
+        "jsdoc": "/**\n * Leave a group as the signed-in member — POST /social-groups/v2/groups/{id}/leave.\n *\n * @scope member — same reasoning as `joinGroup`. Verified live.\n */",
         "decl": "export function leaveGroup(groupId: string): Promise<Record<string, never>>;",
-        "http": "POST /social-groups/v2/groups/{…}/leave"
+        "http": "POST /social-groups/v2/groups/{…}/leave",
+        "scope": "member"
       },
       {
         "name": "WixGroupMember",
@@ -20116,9 +20164,126 @@
       {
         "name": "queryMembers",
         "kind": "function",
-        "jsdoc": "/** Query a group's members — POST /social-groups-proxy/members/v2/groups/{groupId}/members/query.\n *  The members service lives behind the `members` proxy base (NOT `groups`);\n *  live-verified 2026-06-19 (the `groups` base 404s, this base returns 200). */",
+        "jsdoc": "/**\n * Query a group's members — POST /social-groups-proxy/members/v2/groups/{groupId}/members/query.\n * The members service lives behind the `members` proxy base (NOT `groups`);\n * live-verified 2026-06-19 (the `groups` base 404s, this base returns 200).\n *\n * @scope member — reachable by a signed-in member session (listing a group's\n * members is an already-working consumer-app feature); visitor/anonymous\n * readability for a public group is unconfirmed — needsLiveProbe.\n */",
         "decl": "export function queryMembers(groupId: string, limit = 30): Promise<WixQueryGroupMembersResponse>;",
-        "http": "POST /social-groups-proxy/members/v2/groups/{…}/members/query"
+        "http": "POST /social-groups-proxy/members/v2/groups/{…}/members/query",
+        "scope": "member"
+      },
+      {
+        "name": "WixJoinGroupRequest",
+        "kind": "interface",
+        "jsdoc": "",
+        "decl": "export interface WixJoinGroupRequest {\n  siteMemberId?: string;\n  contactId?: string;\n  /** No enum is pinned anywhere in the ingested spec — needsLiveProbe. */\n  status?: string;\n  requestDetails?: { rejectionReason?: string };\n}"
+      },
+      {
+        "name": "WixListJoinGroupRequestsResponse",
+        "kind": "interface",
+        "jsdoc": "",
+        "decl": "export interface WixListJoinGroupRequestsResponse {\n  joinGroupRequests?: WixJoinGroupRequest[];\n  metadata?: { count?: number; offset?: number; total?: number; tooManyToCount?: boolean };\n}"
+      },
+      {
+        "name": "listJoinGroupRequests",
+        "kind": "function",
+        "jsdoc": "/**\n * List a group's pending join requests — GET /social-groups-proxy/join/v2/groups/{groupId}/join-requests.\n *\n * verify-live: not yet called against a real group — path and shape come from the\n * ingested Social Groups spec.\n *\n * @scope member — documented as reachable by a signed-in member whose in-group\n * role is admin/manager (not an owner-scoped API token — see the section's \"OPEN\n * QUESTION\" note); a regular member gets 403. Not independently live-probed.\n */",
+        "decl": "export function listJoinGroupRequests(groupId: string, limit = 30, offset = 0): Promise<WixListJoinGroupRequestsResponse>;",
+        "http": "GET /social-groups-proxy/join/v2/groups/{…}/join-requests?limit={…}&offset={…}",
+        "scope": "member",
+        "verified": false
+      },
+      {
+        "name": "WixApproveJoinGroupRequestsResponse",
+        "kind": "interface",
+        "jsdoc": "",
+        "decl": "export interface WixApproveJoinGroupRequestsResponse {\n  joinGroupRequests?: WixJoinGroupRequest[];\n}"
+      },
+      {
+        "name": "approveJoinGroupRequests",
+        "kind": "function",
+        "jsdoc": "/**\n * Approve pending join requests — POST /social-groups-proxy/join/v2/groups/{groupId}/join-requests/approve,\n * body { groupId, memberIds }.\n *\n * verify-live: not yet called against a real group — path and shape come from the\n * ingested Social Groups spec.\n *\n * @scope member — same documented-but-unverified basis as `listJoinGroupRequests`\n * (see the section's \"OPEN QUESTION\" note) — a regular member gets 403.\n */",
+        "decl": "export function approveJoinGroupRequests(groupId: string, memberIds: string[]): Promise<WixApproveJoinGroupRequestsResponse>;",
+        "http": "POST /social-groups-proxy/join/v2/groups/{…}/join-requests/approve",
+        "scope": "member",
+        "verified": false
+      },
+      {
+        "name": "WixJoinGroupRequestRejection",
+        "kind": "interface",
+        "jsdoc": "",
+        "decl": "export interface WixJoinGroupRequestRejection {\n  memberId: string;\n  reason?: string;\n}"
+      },
+      {
+        "name": "WixRejectJoinGroupRequestsResponse",
+        "kind": "interface",
+        "jsdoc": "",
+        "decl": "export interface WixRejectJoinGroupRequestsResponse {\n  joinGroupRequests?: WixJoinGroupRequest[];\n}"
+      },
+      {
+        "name": "rejectJoinGroupRequests",
+        "kind": "function",
+        "jsdoc": "/**\n * Reject pending join requests — POST /social-groups-proxy/join/v2/groups/{groupId}/join-requests/reject,\n * body { groupId, rejections }.\n *\n * verify-live: not yet called against a real group — path and shape come from the\n * ingested Social Groups spec.\n *\n * @scope member — same documented-but-unverified basis as `listJoinGroupRequests`\n * (see the section's \"OPEN QUESTION\" note) — a regular member gets 403.\n */",
+        "decl": "export function rejectJoinGroupRequests(groupId: string, rejections: WixJoinGroupRequestRejection[]): Promise<WixRejectJoinGroupRequestsResponse>;",
+        "http": "POST /social-groups-proxy/join/v2/groups/{…}/join-requests/reject",
+        "scope": "member",
+        "verified": false
+      },
+      {
+        "name": "WixGroupRole",
+        "kind": "interface",
+        "jsdoc": "",
+        "decl": "export interface WixGroupRole {\n  value?: string;\n}"
+      },
+      {
+        "name": "WixAssignRoleResponse",
+        "kind": "interface",
+        "jsdoc": "",
+        "decl": "export interface WixAssignRoleResponse {\n  groupId?: string;\n  memberIds?: string[];\n  role?: WixGroupRole;\n}"
+      },
+      {
+        "name": "assignRole",
+        "kind": "function",
+        "jsdoc": "/**\n * Assign a role to group members — POST /social-groups-proxy/roles/v2/groups/{groupId}/roles/assign,\n * body { groupId, memberIds, role: { value } }. `role` is a loose string, not a union: no\n * literal role value (e.g. \"ADMIN\"/\"MEMBER\") is pinned anywhere in the ingested spec —\n * needsLiveProbe.\n *\n * verify-live: not yet called against a real group — path and shape come from the\n * ingested Social Groups spec.\n *\n * @scope member — documented as reachable by a signed-in member whose in-group\n * role is admin/manager, not an owner-scoped API token (see the join-request\n * moderation section's \"OPEN QUESTION\" note above) — a regular member gets 403.\n * Not independently live-probed.\n */",
+        "decl": "export function assignRole(groupId: string, memberIds: string[], role: string): Promise<WixAssignRoleResponse>;",
+        "http": "POST /social-groups-proxy/roles/v2/groups/{…}/roles/assign",
+        "scope": "member",
+        "verified": false
+      },
+      {
+        "name": "WixUnassignRoleResponse",
+        "kind": "interface",
+        "jsdoc": "",
+        "decl": "export interface WixUnassignRoleResponse {\n  groupId?: string;\n  siteMemberIds?: string[];\n  memberIds?: string[];\n  role?: WixGroupRole;\n}"
+      },
+      {
+        "name": "unassignRole",
+        "kind": "function",
+        "jsdoc": "/**\n * Remove a role from group members — POST /social-groups-proxy/roles/v2/groups/{groupId}/roles/unassign,\n * body { groupId, memberIds, role: { value } }. Same unconfirmed-enum caveat as `assignRole`.\n *\n * verify-live: not yet called against a real group — path and shape come from the\n * ingested Social Groups spec.\n *\n * @scope member — same documented-but-unverified basis as `assignRole` — a regular\n * member gets 403.\n */",
+        "decl": "export function unassignRole(groupId: string, memberIds: string[], role: string): Promise<WixUnassignRoleResponse>;",
+        "http": "POST /social-groups-proxy/roles/v2/groups/{…}/roles/unassign",
+        "scope": "member",
+        "verified": false
+      },
+      {
+        "name": "WixRemoveGroupMembersResponse",
+        "kind": "interface",
+        "jsdoc": "",
+        "decl": "export interface WixRemoveGroupMembersResponse {}"
+      },
+      {
+        "name": "removeGroupMembers",
+        "kind": "function",
+        "jsdoc": "/**\n * Remove members from a group — DELETE /social-groups-proxy/members/v2/groups/{groupId}/members,\n * `memberIds` repeated in the QUERY STRING (`?memberIds=a&memberIds=b`), no body — every\n * no-path-param DELETE this repo has confirmed against Wix's own generated clients sends its\n * request that way (codegen/wix/tests/delete-query-string.test.ts); unlike a GET/HEAD body,\n * which the gateway drops unconditionally, a DELETE body is NOT dropped — this is a convention\n * match with Wix's own generated clients, not a gateway constraint. Same `members` proxy base\n * `queryMembers` already live-verified (2026-06-19) uses; this specific verb+path combination\n * is not yet live-probed.\n *\n * verify-live: not yet called against a real group — path and shape come from the\n * ingested Social Groups spec.\n *\n * @scope member — same documented-but-unverified basis as `assignRole` — a regular\n * member gets 403.\n */",
+        "decl": "export function removeGroupMembers(groupId: string, memberIds: string[]): Promise<WixRemoveGroupMembersResponse>;",
+        "http": "DELETE /social-groups-proxy/members/v2/groups/{…}/members?{…}",
+        "scope": "member",
+        "verified": false
+      },
+      {
+        "name": "updateGroupSettings",
+        "kind": "function",
+        "jsdoc": "/**\n * Update a group's settings — PATCH /social-groups-proxy/groups/v2/groups/{id} (field-mask),\n * via the existing `updateGroup` RPC, body { group: { id, settings } }. No separate settings\n * endpoint exists.\n *\n * verify-live: not yet called against a real group — path and shape come from the\n * ingested Social Groups spec.\n *\n * @scope owner — rides the SAME `updateGroup` RPC that is very likely owner-token-only\n * (see `updateGroup`'s own doc above) — reclassified from an earlier \"group-admin\n * member\" assumption once `createGroup`'s owner-only finding showed group CRUD writes\n * are gated by API-token tier, not in-group role. Not independently live-probed.\n */",
+        "decl": "export function updateGroupSettings(groupId: string, settings: WixGroupSettings): Promise<WixUpdateGroupResponse>;",
+        "scope": "owner",
+        "verified": false
       }
     ]
   },
@@ -22808,14 +22973,16 @@
       {
         "name": "listFeedItems",
         "kind": "function",
-        "jsdoc": "/** List a group's activity feed — GET\n *  https://social.wix.com/serverless/mobile/feed/v4/feedPosts (the ENRICHED read the\n *  real mobile app uses). Each item carries content (Ricos blocks), commentsCount, and\n *  reactionsList (count = length); the response's top-level `profiles[]` resolves each\n *  item's author.id → userName + profileImage. Verified live (200). Replaces the lean\n *  GET /api/v1/feed/items read, which omitted counts + author. */",
-        "decl": "export function listFeedItems(groupId: string, limit = 20): Promise<WixListFeedItemsResponse>;"
+        "jsdoc": "/**\n * List a group's activity feed — GET\n * https://social.wix.com/serverless/mobile/feed/v4/feedPosts (the ENRICHED read the\n * real mobile app uses). Each item carries content (Ricos blocks), commentsCount, and\n * reactionsList (count = length); the response's top-level `profiles[]` resolves each\n * item's author.id → userName + profileImage. Verified live (200). Replaces the lean\n * GET /api/v1/feed/items read, which omitted counts + author.\n *\n * @scope member — verified live with a signed-in member session; visitor/anonymous\n * readability of a public group's feed is unconfirmed.\n */",
+        "decl": "export function listFeedItems(groupId: string, limit = 20): Promise<WixListFeedItemsResponse>;",
+        "scope": "member"
       },
       {
         "name": "createFeedItem",
         "kind": "function",
-        "jsdoc": "/** Create a feed post in a group as the signed-in member — POST\n *  https://social.wix.com/api/v1/feed/items. `content` is the post text (modern\n *  posts are Ricos rich-content serialized to a string; plain text also works with\n *  contentType PLAIN_TEXT). Verified live (returns the created FeedItem). */",
-        "decl": "export function createFeedItem(groupId: string, content: string): Promise<WixFeedItem>;"
+        "jsdoc": "/**\n * Create a feed post in a group as the signed-in member — POST\n * https://social.wix.com/api/v1/feed/items. `content` is the post text (modern\n * posts are Ricos rich-content serialized to a string; plain text also works with\n * contentType PLAIN_TEXT). Verified live (returns the created FeedItem).\n *\n * @scope member — requires a signed-in site member. Verified live.\n */",
+        "decl": "export function createFeedItem(groupId: string, content: string): Promise<WixFeedItem>;",
+        "scope": "member"
       },
       {
         "name": "WixReactionsSummary",
@@ -22832,14 +22999,16 @@
       {
         "name": "reactToFeedItem",
         "kind": "function",
-        "jsdoc": "/** Like (react to) a feed item as the signed-in member. Verified live (200 →\n *  { total, reactionCodeCounts }). The real mobile app posts to the Groups\n *  mobile-serverless wrapper (NOT the raw /api/v1/reactions REST route, which\n *  404s for the member): POST /serverless/mobile/feed/v3/addReaction with\n *  { containerId=groupId, appDefId(Groups), reactionCode(emoji), resourceId=feedItemId, mode }.\n *  Auth is the signed instance (the wixApi bridge attaches it). `mode:\"APPEND\"`\n *  adds without clearing other reactions. (RE'd from wix-one-app-feed\n *  feed-api.reactionPress + groups-mobile-serverless addReaction.) */",
-        "decl": "export function reactToFeedItem(feedItemId: string, groupId: string, reactionCode: string = DEFAULT_REACTION): Promise<WixReactionsSummary>;"
+        "jsdoc": "/**\n * Like (react to) a feed item as the signed-in member. Verified live (200 →\n * { total, reactionCodeCounts }). The real mobile app posts to the Groups\n * mobile-serverless wrapper (NOT the raw /api/v1/reactions REST route, which\n * 404s for the member): POST /serverless/mobile/feed/v3/addReaction with\n * { containerId=groupId, appDefId(Groups), reactionCode(emoji), resourceId=feedItemId, mode }.\n * Auth is the signed instance (the wixApi bridge attaches it). `mode:\"APPEND\"`\n * adds without clearing other reactions. (RE'd from wix-one-app-feed\n * feed-api.reactionPress + groups-mobile-serverless addReaction.)\n *\n * @scope member — requires a signed-in site member. Verified live.\n */",
+        "decl": "export function reactToFeedItem(feedItemId: string, groupId: string, reactionCode: string = DEFAULT_REACTION): Promise<WixReactionsSummary>;",
+        "scope": "member"
       },
       {
         "name": "unreactFeedItem",
         "kind": "function",
-        "jsdoc": "/** Remove the member's reaction from a feed item — POST\n *  /serverless/mobile/feed/v2/removeReaction (same body minus `mode`).\n *  Verified live (200 → total decremented). */",
-        "decl": "export function unreactFeedItem(feedItemId: string, groupId: string, reactionCode: string = DEFAULT_REACTION): Promise<WixReactionsSummary>;"
+        "jsdoc": "/**\n * Remove the member's reaction from a feed item — POST\n * /serverless/mobile/feed/v2/removeReaction (same body minus `mode`).\n * Verified live (200 → total decremented).\n *\n * @scope member — requires a signed-in site member. Verified live.\n */",
+        "decl": "export function unreactFeedItem(feedItemId: string, groupId: string, reactionCode: string = DEFAULT_REACTION): Promise<WixReactionsSummary>;",
+        "scope": "member"
       }
     ]
   },

package/guides/wix-api-usage.md

@@ -239,6 +239,11 @@ don't retry it):
 | Members Area profile of the *current* signed-in member | member only | — |
 | `site-properties/v4` — business name, address, logo, **display currency** | ❌ 403 | ✅ |
 | Site analytics totals, owner dashboards, CRM contacts | ❌ 403 | ✅ |
+| Social Groups browse/read (`queryGroups`, `getGroup`) (`@himalaya/wix-groups`) | ✅ visitor-readable, no sign-in needed | — |
+| Social Groups feed read (`listFeedItems`), member list (`queryMembers`), join/leave/post/react (`@himalaya/wix-groups`, `@himalaya/wix-social-feed`) | member session verified; whether a signed-out visitor can read a PUBLIC group's feed/member list is unconfirmed — needsLiveProbe | — |
+| Social Groups `createGroup` (`@himalaya/wix-groups`) — **CONFIRMED** (reproduced against a real site, 2026-10-07) | ❌ 403, even for the site owner's own member-login session | ✅ owner/admin-scoped API token only — no member-side workaround |
+| Social Groups `updateGroup`/`deleteGroup` (`@himalaya/wix-groups`) — same write-class as `createGroup`, VERY LIKELY the same gating, but not independently re-tested this round | ❌ 403 (unconfirmed — needsLiveProbe) | ✅ owner/admin-scoped API token (unconfirmed — needsLiveProbe) |
+| Social Groups moderation (join-request approve/reject, role assign/unassign, member removal) — documented as gated by in-group admin/manager ROLE, not independently confirmed | member session with the group's admin role (unverified) | — |
 
 When a value you need is owner-scoped, prefer a field the record already carries (e.g. price `amount` +
 `currency`, below) over an owner-only read that a visitor app can't make.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@wix/himalaya-cli",
-  "version": "0.1322.0",
+  "version": "0.1324.0",
   "type": "module",
   "description": "himi — the Himalaya authoring CLI. Build a Tier-5 content package on your own machine, push it to the production serve as a draft, preview it on web + Himi Player, and read worker logs back — the remote dev loop. Wraps @himalaya/serve-cli for transport.",
   "keywords": [
@@ -71,5 +71,5 @@
       "artifactId": "himalaya-cli"
     }
   },
-  "falconPackageHash": "bb7cc4c5d0d0841cd11950b890b11f51d812396f8f4a0649727b0501"
+  "falconPackageHash": "bf9e4b60f45454490675830b87c19b099668fb282ba36c4e4842116d"
 }

package/templates/branded-lite/config.ts

@@ -508,13 +508,6 @@ export default defineApp({
         "parentScreenId": "himi_groups",
         "tabId": ""
       },
-      {
-        "screenId": "himi_create_group",
-        "isPublic": false,
-        "paramKeys": [],
-        "parentScreenId": "himi_groups",
-        "tabId": ""
-      },
       {
         "screenId": "himi_cms",
         "isPublic": true,

package/templates/branded-lite/dev/index.ts

@@ -55711,25 +55711,6 @@ const SCREENS = runtimeSetting({
                 }
               }
             },
-            {
-              "id": "himi_groups.new_group",
-              "body": {
-                "package": "himalaya",
-                "type": "Button",
-                "props": {
-                  "title": "New Group",
-                  "style": "secondary",
-                  "fullWidth": true,
-                  "leadingIcon": "plus",
-                  "action": {
-                    "actionId": "himi.open",
-                    "params": {
-                      "screenId": "himi_create_group"
-                    }
-                  }
-                }
-              }
-            },
             {
               "id": "himi_groups.search",
               "body": {
@@ -58110,103 +58091,6 @@ const SCREENS = runtimeSetting({
       "bundleVersion": "0.0.1"
     }
   },
-  "himi_create_group": {
-    "screenId": "himi_create_group",
-    "renderer": "sdui_intent",
-    "title": "",
-    "schemaVersion": 1,
-    "cacheControl": {
-      "maxAge": 0,
-      "staleWhileRevalidate": 0
-    },
-    "payload": {
-      "id": "himi_create_group.root",
-      "body": {
-        "package": "himalaya",
-        "type": "VStack",
-        "props": {
-          "spacing": 16,
-          "alignment": "leading",
-          "children": [
-            {
-              "id": "himi_create_group.title",
-              "body": {
-                "package": "himalaya",
-                "type": "Text",
-                "props": {
-                  "text": "New Group",
-                  "style": "title1"
-                }
-              }
-            },
-            {
-              "id": "",
-              "body": {
-                "package": "himalaya",
-                "type": "Text",
-                "props": {
-                  "text": "$service:spacesCreateGroup.hint",
-                  "style": "footnote",
-                  "color": "textSecondary",
-                  "collapseWhenEmpty": true
-                }
-              }
-            },
-            {
-              "id": "himi_create_group.name_field",
-              "body": {
-                "package": "himalaya",
-                "type": "TextField",
-                "props": {
-                  "placeholder": "Group name",
-                  "value": "",
-                  "onChange": {
-                    "actionId": "tier5.spacesCreateGroup.setName"
-                  }
-                }
-              }
-            },
-            {
-              "id": "himi_create_group.submit",
-              "body": {
-                "package": "himalaya",
-                "type": "Button",
-                "props": {
-                  "title": "Create",
-                  "style": "primary",
-                  "fullWidth": true,
-                  "action": {
-                    "actionId": "tier5.spacesCreateGroup.submit"
-                  }
-                }
-              }
-            }
-          ]
-        }
-      },
-      "modifiers": {
-        "background": {
-          "token": "surfacePrimary"
-        },
-        "padding": {
-          "leading": 16,
-          "trailing": 16,
-          "top": 18,
-          "bottom": 28
-        }
-      }
-    },
-    "logicBundle": {
-      "url": "http://localhost:8190/v1/bundles/wix-spaces-create-group?integrity=",
-      "integrity": "",
-      "contentType": "application/javascript+ts-bundle",
-      "declaredCapabilities": [
-        "wix_api"
-      ],
-      "minBinaryVersion": "0.1.0",
-      "bundleVersion": "0.0.1"
-    }
-  },
   "himi_faq": {
     "screenId": "himi_faq",
     "renderer": "sdui_intent",

package/templates/branded-lite/himalaya.content.json

@@ -58,9 +58,6 @@
     "himi_coupons": {
       "displayName": "Offers"
     },
-    "himi_create_group": {
-      "displayName": "Create Group"
-    },
     "himi_create_post": {
       "displayName": "Create Post"
     },

package/templates/community-club/config.ts

@@ -178,13 +178,6 @@ export default defineApp({
         "parentScreenId": "himi_groups",
         "tabId": "groups"
       },
-      {
-        "screenId": "himi_create_group",
-        "isPublic": false,
-        "paramKeys": [],
-        "parentScreenId": "himi_groups",
-        "tabId": "groups"
-      },
       {
         "screenId": "himi_cms",
         "isPublic": true,