@wix/himalaya-cli 0.1323.0 → 0.1325.0

package/fixtures/wix-canned.json

@@ -21,7 +21,8 @@
             "formattedAmount": "$38.00"
           }
         },
-        "plainDescription": "Hand-thrown stoneware, 500ml."
+        "plainDescription": "Hand-thrown stoneware, 500ml.",
+        "productType": "physical"
       },
       {
         "id": "prod-0002",
@@ -39,7 +40,8 @@
             "formattedAmount": "$129.00"
           }
         },
-        "plainDescription": "40 stepped settings."
+        "plainDescription": "40 stepped settings.",
+        "productType": "physical"
       },
       {
         "id": "prod-0003",
@@ -57,7 +59,8 @@
             "formattedAmount": "$18.50"
           }
         },
-        "plainDescription": "Ethiopia Yirgacheffe, 250g."
+        "plainDescription": "Ethiopia Yirgacheffe, 250g.",
+        "productType": "physical"
       }
     ],
     "pagingMetadata": {
@@ -88,7 +91,8 @@
             "formattedAmount": "$38.00"
           },
           "catalogReference": {
-            "catalogItemId": "prod-0001"
+            "catalogItemId": "prod-0001",
+            "appId": "215238eb-22a5-4c36-9e7b-e7c08025e04e"
           }
         },
         {
@@ -110,7 +114,8 @@
             "formattedAmount": "$18.50"
           },
           "catalogReference": {
-            "catalogItemId": "prod-0003"
+            "catalogItemId": "prod-0003",
+            "appId": "215238eb-22a5-4c36-9e7b-e7c08025e04e"
           }
         }
       ],
@@ -1563,7 +1568,8 @@
           "formattedAmount": "$38.00"
         }
       },
-      "plainDescription": "Hand-thrown stoneware, 500ml."
+      "plainDescription": "Hand-thrown stoneware, 500ml.",
+      "productType": "physical"
     }
   },
   "GET /bookings/v2/services/svc-0001": {
@@ -2015,5 +2021,54 @@
         "description": "Browse products by category from the shop header."
       }
     ]
+  },
+  "GET /stores/v3/products/prod-0002": {
+    "product": {
+      "id": "prod-0002",
+      "name": "Burr Grinder",
+      "slug": "burr-grinder",
+      "visible": true,
+      "media": {
+        "main": {
+          "image": "https://static.wixstatic.com/media/example-grinder.jpg"
+        }
+      },
+      "actualPriceRange": {
+        "minValue": {
+          "amount": "129.00",
+          "formattedAmount": "$129.00"
+        }
+      },
+      "plainDescription": "40 stepped settings.",
+      "productType": "physical"
+    }
+  },
+  "GET /stores/v3/products/prod-0003": {
+    "product": {
+      "id": "prod-0003",
+      "name": "Single-Origin Beans",
+      "slug": "single-origin-beans",
+      "visible": true,
+      "media": {
+        "main": {
+          "image": "https://static.wixstatic.com/media/example-beans.jpg"
+        }
+      },
+      "actualPriceRange": {
+        "minValue": {
+          "amount": "18.50",
+          "formattedAmount": "$18.50"
+        }
+      },
+      "plainDescription": "Ethiopia Yirgacheffe, 250g.",
+      "productType": "physical"
+    }
+  },
+  "GET /pricing-plans/v2/member/orders": {
+    "orders": []
+  },
+  "POST /ecom/v1/checkouts/chk-0001/create-order": {
+    "orderId": "order-0001",
+    "paymentGatewayOrderId": "payment-0001"
   }
 }

package/guides/iap-pricing.md

@@ -190,3 +190,12 @@ Register your digital products with `himi store iap` (see `himi docs iap-product
 connects the mapping service those registrations feed, screens that use this layer start showing
 App Store prices on their next build — in an app that grants the `iap` capability in `config.ts`.
 Screens that do not use the layer are unaffected.
+
+## Remaining purchase screens
+
+The Plans list, read-only Plan detail and shared paywall now display the same localized
+Apple offer; their existing Join action uses the shared Plans adapter only for supported
+one-time unlimited Plans. Store detail/catalog/saved/home/cart offers also use shared pricing.
+Their digital purchase actions stay blocked until a verified member-readable fulfillment
+contract exists. See [screen coverage and migration](iap-screen-adoption.md) before copying
+these workers or claiming a live purchase. Existing app copies do not update automatically.

package/guides/iap-screen-adoption.md

@@ -0,0 +1,77 @@
+# IAP screen adoption and remaining acceptance
+
+This screen pass builds on the shared commerce composition and Serve contracts in
+[iap-wix-checkout.md](iap-wix-checkout.md). It changes screen consumers, not product
+registration, app binding, native purchase coordination or deployment.
+
+## Entry-point coverage
+
+The inventory searched worker sources, `apps/*/dev`, `packages/*/dev`, retired `fixtures/*/dev`, the root `members-library` example, shared factories
+and generated templates. Historical receipts retain their recorded amounts.
+
+| Entry point | Identity and displayed offer | Result |
+|---|---|---|
+| `himi-branded-lite-plans` | Pricing Plan ID; `priceLine` | Shared Apple pricing and existing Join action through `pricingPlanOrders`; only one-time unlimited Plans can start Apple checkout |
+| `wix-spaces-plan-detail` | Pricing Plan ID; `price` | Shared pricing; remains read-only |
+| `createCheckoutService` / `checkoutScreen` | Pricing Plan ID; `priceLine` | Same shared Plans pricing and purchase; existing options, copy, login destination and factory shape retained |
+| `himi-store-product` | Stores product ID; `price` | Shared pricing; physical options/add/save retained; digital checkout blocked pending a verified fulfillment contract |
+| `himi-store-shop` | Stores product ID; price in `subtitle` | Batched visible pricing, including paged results; saved/cache metadata retains the commerce price rather than an Apple offer |
+| `himi-store-saved` | Stored product ID; `price` | Reprices saved rows through the shared source when shown; no added purchase action |
+| `himi-branded-lite-home` | Stores product IDs; hero and rail prices | Shared pricing on visible product offers; navigation-only Program cards remain unchanged |
+| `himi-branded-lite-cart` | Full catalog app/item/options reference and quantity; line `total` | Refreshes the current cart and routes before payment; only verified physical regular carts keep checkout; Apple, mixed, multiple-digital, unknown and unverified digital carts are blocked |
+| `himi-store-cart` | Full catalog reference; line `total` | Consistent shared prices and suppressed Wix subtotal when routes are unsettled or Apple; remains read-only |
+| `himi-branded-lite-order` | Original catalog app/item/options and quantity | Preserves references; checks current routing and catalog facts before re-adding physical items; never reprices the paid receipt |
+| `video-courses-preview` / Atlas | `storeProductId`, plus course-specific member access mirror | Deferred: deployment and usable course access are unverified. Existing native digital-checkout guard remains; this pass does not introduce a Videos adapter |
+| `wix-spaces-product-detail`, `wix-spaces-shop`, `wix-spaces-saved`, `wix-spaces-cart` | Legacy worker sources | Retired `fixtures/wix-spaces-clone/dev` descriptors still reference these workers; no active app or generated template consumer. Legacy pricing/checkout is not migrated or certified for managed Apple IAP |
+| `hip-shop-product`, `hip-shop-home`, `hip-shop-explore`, `hip-shop-saved`, `hip-shop-cart` | Legacy worker sources | Retired `fixtures/hip-shop/dev` descriptors reference these workers; no active app or generated template consumer. Legacy pricing/checkout is not migrated or certified for managed Apple IAP |
+| `family-cart` (Family Cart and Himi Game) | Demo household/game economy | Not a Wix purchase path; unchanged |
+| LiftGear | Customer-owned off-repo copy | No source location supplied to this workspace. Requires explicit worker migration; template regeneration cannot update it |
+
+The generated templates are discovered from the affected source workers, not a maintained
+count. Plans workers are executed from every generated copy in the regression suite.
+`fixtures/plans-checkout/paywall-worker.ts` is an executable non-template consumer of the
+real public factory; it uses the existing checkout world and worker runtime harness.
+The example is a root content package rather than a registered native app. The committed root `members-library/` content example uses the public factory and now declares `iap` and `app_info`; its copied SDK must be updated before publishing. Retired fixture checkout workers retain their legacy behavior and require explicit migration before being used in a managed Apple-IAP app.
+
+## Access and blocked purchases
+
+Plans read the current member's selected Plan through
+`GET /pricing-plans/v2/member/orders`, using status filters and offset paging. Only
+`ACTIVE` grants usable access. A paid future-start order remains pending. Session changes
+withdraw the shared checkout's access state; reading existing access never creates an order.
+
+The existing Stores adapter reads `paymentStatus: PAID` as granted. That proves payment,
+not usable delivery of a download or course. It also lacks a verified member-scoped
+existing-ownership read. These screens therefore do **not** install `storesProductOrders`
+for sales. No Apple charge, hosted checkout or optimistic cart mutation is used to work
+around missing fulfillment. A confirmed physical product retains its regular checkout.
+Unknown product facts, unsupported catalog apps and missing routing fail closed.
+
+Stores fulfillment, post-success removal of the original digital cart line, and Atlas
+course purchasing remain deferred until the relevant member-access contract is verified.
+No live Pricing Plans or Stores purchase has been proved by the hermetic tests or UI
+fixtures. Sandbox purchase, backend approval and vertical access require separate acceptance
+with authorized test data. Production purchases and restore/refund claims are outside this pass.
+
+## Migrating an existing app copy
+
+1. Update the SDK to the shared `createIapCommerce` export. Follow the existing
+   [binding/setup instructions](iap-wix-checkout.md#using-it-from-a-screen); a rebuild
+   does not register products or configure a provider.
+2. Copy the adopted worker and its `_shared` dependencies from the regenerated template,
+   or explicitly call the exported composition in a custom worker. Keep one composition
+   per worker. Price lists pass no adapters; supported Plans sellers pass
+   `adapters: [pricingPlanOrders]`.
+3. Pass real `{ kind, id }` references and commerce display prices to `loadPrices` in one
+   batch. Bind `iapPriceFields` and `purchaseFields` rather than calling StoreKit or the
+   payment client directly. Call `start` on entry, `reconcile` on resume and the shared
+   `poll` through the worker's `_poll` directive.
+4. Bind the worker's CTA label, disabled state and customer status, and declare `iap`,
+   `app_info`, `wix_api` plus its existing capabilities. Declare them in the app envelope
+   too; an older binary may need rebuilding. Keep offers and access out of hydration.
+5. Retain the full catalog reference through saved/cart/reorder paths. Keep historical
+   amounts intact. Keep unsupported digital items blocked, and validate the copied app
+   independently on its supported surfaces.
+
+The Store presentation decorator is display glue over the exported composition: it does
+not add a mapping cache, payment engine, timer, entitlement API or native purchase call.

package/guides/importable-sdks.md

@@ -35,6 +35,7 @@ package in one greppable file) or `GET /v1/sdk/<name>` over HTTP; in the CLI,
 - `@himalaya/hhp` — —
 - `@himalaya/himi-apps` — Tier-5 typed binding for cross-app open / host queries.
 - `@himalaya/iap` — Tier-5 typed binding to the platform's in-app-purchase capability.
+- `@himalaya/iap-checkout` — @wix/himalaya/iap-checkout — the ONE shared flow that sells a digital Wix item through the App Store, for any screen: a vertical order, its `appleIAP` cashier charge, mobile-apps-wix-iap's payment, the managed StoreKit purchase and the vertical's own access read.
 - `@himalaya/keyboard` — Tier-5 typed binding for the platform's keyboard capability.
 - `@himalaya/kyber-api` — narrow Tier-5 binding for Kyber BO HTTP calls.
 - `@himalaya/live-activity` — Tier-5 typed binding to the platform's Live Activity capability.
@@ -49,6 +50,7 @@ package in one greppable file) or `GET /v1/sdk/<name>` over HTTP; in the CLI,
 - `@himalaya/presigned-upload` — Tier-5 typed binding for a RAW binary upload to a pre-signed, self-authorizing URL.
 - `@himalaya/push` — Tier-5 typed binding to the platform's push capability.
 - `@himalaya/release-control` — Tier-5 typed binding for the on-device OTA release picker.
+- `@himalaya/screens` — @wix/himalaya/screens — ready-made sign-in and paywall screens.
 - `@himalaya/sdk-types` — shared types for the Tier-5 SDK capability surface.
 - `@himalaya/secure-storage` — Tier-5 typed binding to the platform's secure-storage capability.
 - `@himalaya/share` — Tier-5 typed binding for the system share sheet.

package/guides/index.json

@@ -354,6 +354,12 @@
       "category": "CLI & Loop",
       "file": "iap-products.md"
     },
+    {
+      "id": "iap-screen-adoption",
+      "title": "IAP screen coverage and migration",
+      "category": "Workers & SDKs",
+      "file": "iap-screen-adoption.md"
+    },
     {
       "id": "iap-pricing",
       "title": "Showing App Store prices on any screen",

package/guides/release-notes.md

@@ -14,6 +14,31 @@ areas, always in the same order, so you can skim for the one you care about.
 
 ---
 
+## 2026-10-11
+
+### Logic, data & SDKs
+
+- **`@himalaya/wix-groups` gains admin/moderation coverage**: list + approve/reject a
+  group's pending join requests, assign/unassign a member's role, remove a member, and
+  `updateGroupSettings` for the group's `settings` block. **`@himalaya/wix-comments`
+  gains `createGroupPostComment`/`listGroupPostComments`**, wiring a group feed post's
+  comment thread with the real two-level `contextId=groupId`/`resourceId=feedItemId`
+  scoping, including reply threads and pagination.
+- **Every `@himalaya/wix-groups` and `@himalaya/wix-social-feed` function now states its
+  real auth scope in its JSDoc** (`@scope visitor|member|owner`), audited after a confirmed
+  finding: `createGroup` requires a true owner/admin-scoped API token and 403s for every
+  member session — including the site owner's own account signed in via the app's normal
+  member-login flow. There is no member-side workaround. `updateGroup`/`deleteGroup` write
+  the same entity through the same write-class and are very likely gated the same way, but
+  were not independently re-tested this round. (#4033)
+
+### Branded Lite & Owner Lite
+
+- **Removed "Create Group" from Branded Lite, Community Club, Events & Meetups, and
+  Nonprofit & Cause** (template default nav + the live Branded Lite app) — it
+  called `createGroup`, which cannot succeed from any consumer member session (see above).
+  No member-reachable alternative exists today. (#4033)
+
 ## 2026-09-28
 
 ### Logic, data & SDKs