@wix/himalaya-cli 0.1323.0 → 0.1325.0

package/guides/sdk-reference.json

@@ -2263,6 +2263,259 @@
       }
     ]
   },
+  {
+    "name": "@himalaya/iap-checkout",
+    "source": "stdlib/flows/iap-checkout/src/index.ts",
+    "description": "@wix/himalaya/iap-checkout — the ONE shared flow that sells a digital Wix item through the App Store, for any screen: a vertical order, its `appleIAP` cashier charge, mobile-apps-wix-iap's payment, the managed StoreKit purchase and the vertical's own access read.",
+    "api": [
+      {
+        "name": "\"./commerce.js\"",
+        "kind": "reexport",
+        "jsdoc": "",
+        "decl": "export { createIapCommerce } from \"./commerce.js\";"
+      },
+      {
+        "name": "\"./purchase-fields.js\"",
+        "kind": "reexport",
+        "jsdoc": "",
+        "decl": "export { iapPurchaseFields } from \"./purchase-fields.js\";"
+      },
+      {
+        "name": "\"./apple-iap.js\"",
+        "kind": "reexport",
+        "jsdoc": "",
+        "decl": "export { createAppleIapCheckout } from \"./apple-iap.js\";"
+      },
+      {
+        "name": "\"./iap-verticals/index.js\"",
+        "kind": "reexport",
+        "jsdoc": "",
+        "decl": "export { onlineProgramOrders, pricingPlanOrders, storesProductOrders, classifyCart } from \"./iap-verticals/index.js\";"
+      },
+      {
+        "name": "\"./order-refs.js\"",
+        "kind": "reexport",
+        "jsdoc": "",
+        "decl": "export { createWorkerOrderRefStore } from \"./order-refs.js\";"
+      },
+      {
+        "name": "\"./apple-iap-contract.js\"",
+        "kind": "reexport",
+        "jsdoc": "",
+        "decl": "export type {\n  AccessRead, AppleIapCheckout, AppleIapCheckoutDependencies, AppleIapCheckoutPhase, AppleIapCheckoutState, BridgeOutcome,\n  BridgeRefusal, CashierRoute, IapEligibility, IapOrderAdapter, IapOrderItem, OrderAttempt, OrderFailureCode,\n  OrderPartitionKey, OrderRef, OrderRefPartition, OrderRefStage, OrderRefStore, PaymentAccess, PaymentProgress,\n  SessionBoundBridge, VerticalRef, WixBridge,\n} from \"./apple-iap-contract.js\";"
+      },
+      {
+        "name": "\"./commerce-contract.js\"",
+        "kind": "reexport",
+        "jsdoc": "",
+        "decl": "export type {\n  AppleIapCheckoutRoutes, IapCommerce, IapCommerceOptions, IapPurchaseCopy, IapPurchaseFields, IapPurchaseGap, IapPurchaseReadiness,\n} from \"./commerce-contract.js\";"
+      },
+      {
+        "name": "createIapCommerce",
+        "kind": "function",
+        "jsdoc": "/**\n * Creates this worker's App Store commerce: catalog pricing for the items the screen shows, and the\n * shared Apple-IAP checkout for the verticals it sells. Create it once at module scope, call\n * `start()` when the screen boots, `reconcile()` when it resumes, and `tick()` from a `_poll` at\n * `state().nextWakeAt`. Bind the action with `iapPurchaseFields`.\n */",
+        "decl": "export function createIapCommerce(options: IapCommerceOptions = {}): IapCommerce;"
+      },
+      {
+        "name": "iapPurchaseFields",
+        "kind": "function",
+        "jsdoc": "/** Projects a shared checkout into customer-facing action fields; a price alone never grants access. */",
+        "decl": "export function iapPurchaseFields(view: IapItemView, state: AppleIapCheckoutState, readiness: IapPurchaseReadiness, copy: IapPurchaseCopy): IapPurchaseFields;"
+      },
+      {
+        "name": "createAppleIapCheckout",
+        "kind": "function",
+        "jsdoc": "/**\n * Creates the shared Apple-IAP checkout for one worker: vertical order → `appleIAP` cashier\n * charge → wix-iap StartPayment → managed StoreKit purchase → CompletePayment → GetPayment →\n * the vertical's own access read. It reuses `createPurchaseCoordinator` for StoreKit, proof\n * delivery and finishing, and opens content only when the vertical confirms access.\n *\n * NOT ENABLED: it answers `notEnabled` and makes no call until the documented dependencies (a\n * wix-iap route, the cashier route, a real mapping source, a trusted binding, the native identity\n * fence and the finish-policy confirmation) are resolved.\n */",
+        "decl": "export function createAppleIapCheckout(deps: AppleIapCheckoutDependencies): AppleIapCheckout;"
+      },
+      {
+        "name": "createWorkerOrderRefStore",
+        "kind": "function",
+        "jsdoc": "/** Persists unfinished orders per app and member, using the host KV unless storage is supplied. */",
+        "decl": "export function createWorkerOrderRefStore(storage?: KeyValueStorage): OrderRefStore;"
+      },
+      {
+        "name": "WixBridge",
+        "kind": "interface",
+        "jsdoc": "/** The host's Wix REST bridge (`himalaya.wixApi`). Resolves a 2xx body; rejects with\n *  `HTTP <status> [<code>]: <message>` otherwise. Credentials are attached natively.\n *  Same positional shape as the runtime's `wixApiCall`: `expectation` is bridge metadata for a\n *  protected call, after `headers`, and never an HTTP header. */",
+        "decl": "export interface WixBridge {\n  call(\n    method: \"GET\" | \"POST\",\n    path: string,\n    body?: unknown,\n    headers?: Record<string, string>,\n    expectation?: HostCallExpectation,\n  ): Promise<unknown>;\n}"
+      },
+      {
+        "name": "BridgeRefusal",
+        "kind": "type",
+        "jsdoc": "/** Why a bridge call gave no body. `sessionChanged`: the captured session is no longer current,\n *  before the send or after the answer; nothing from it may be used or stored. */",
+        "decl": "export type BridgeRefusal =\n  | { status: \"sessionChanged\" }\n  | { status: \"notEnabled\" }\n  | { status: \"unavailable\" }\n  | { status: \"http\"; httpStatus: number; code: string };"
+      },
+      {
+        "name": "BridgeOutcome",
+        "kind": "type",
+        "jsdoc": "",
+        "decl": "export type BridgeOutcome = { status: \"ok\"; body: unknown } | BridgeRefusal;"
+      },
+      {
+        "name": "SessionBoundBridge",
+        "kind": "interface",
+        "jsdoc": "/** A bridge bound to one captured member session: it refuses to send, and drops the answer,\n *  once that session is no longer current. */",
+        "decl": "export interface SessionBoundBridge {\n  call(method: \"GET\" | \"POST\", path: string, body?: unknown): Promise<BridgeOutcome>;\n  isCurrent(): boolean;\n}"
+      },
+      {
+        "name": "CashierRoute",
+        "kind": "interface",
+        "jsdoc": "/** Cashier pay v2 (`wix.payment.api.pay.v2.PaymentService`). The member-accepted gateway path\n *  is unverified, so there is deliberately no default. */",
+        "decl": "export interface CashierRoute {\n  /** The gateway path that maps to `/api/payments/v2`, without a trailing slash. */\n  prefix: string;\n}"
+      },
+      {
+        "name": "IapOrderItem",
+        "kind": "interface",
+        "jsdoc": "/** One item a screen sells. `reference` is the same catalog reference its price came from. */",
+        "decl": "export interface IapOrderItem {\n  reference: CatalogReference;\n  /** eCom catalog reference, required for a Wix Stores item. */\n  catalogReference?: { appId: string; catalogItemId: string; options?: Record<string, unknown> };\n  /** Only 1 is supported. */\n  quantity?: number;\n}"
+      },
+      {
+        "name": "VerticalRef",
+        "kind": "type",
+        "jsdoc": "/** Ids an adapter needs to find its order and the member's access again. No member data. */",
+        "decl": "export type VerticalRef = Record<string, string>;"
+      },
+      {
+        "name": "IapEligibility",
+        "kind": "type",
+        "jsdoc": "",
+        "decl": "export type IapEligibility = { eligible: true } | { eligible: false; reason: OrderFailureCode };"
+      },
+      {
+        "name": "OrderAttempt",
+        "kind": "type",
+        "jsdoc": "/** `open`: a pending order the cashier can charge. `granted`: the vertical already gives the\n *  member access, so nothing is sold. */",
+        "decl": "export type OrderAttempt =\n  | { status: \"open\"; cashierOrderId: string; verticalRef: VerticalRef }\n  | { status: \"granted\" }\n  | { status: \"refused\"; reason: OrderFailureCode }\n  | { status: \"unavailable\" }\n  | { status: \"sessionChanged\" };"
+      },
+      {
+        "name": "AccessRead",
+        "kind": "type",
+        "jsdoc": "",
+        "decl": "export type AccessRead = \"granted\" | \"pending\" | \"none\" | \"unavailable\" | \"sessionChanged\";"
+      },
+      {
+        "name": "IapOrderAdapter",
+        "kind": "interface",
+        "jsdoc": "/** The only per-vertical code. Every call goes through the session-bound bridge it is given. */",
+        "decl": "export interface IapOrderAdapter {\n  /** The catalog kind it sells (`onlineProgram`, `pricingPlan`, `storesProduct`, or a custom one). */\n  readonly kind: string;\n  /** Structural check before any call: one item, quantity 1, a supported shape. */\n  eligibility(item: IapOrderItem): IapEligibility;\n  /** Opens, or reuses the vertical's own open, order for the signed-in member. */\n  openOrder(item: IapOrderItem, bridge: SessionBoundBridge): Promise<OrderAttempt>;\n  /** Re-reads an order opened earlier; `open` only while it can still be paid. */\n  reopenOrder(order: { cashierOrderId: string; verticalRef: VerticalRef }, bridge: SessionBoundBridge): Promise<OrderAttempt>;\n  /** The vertical's authoritative answer for the order's item and the signed-in member. */\n  readAccess(verticalRef: VerticalRef, bridge: SessionBoundBridge): Promise<AccessRead>;\n  /** The member's access to an item before any order exists (bought through Wix, say). Read-only:\n   *  never opens or prepares an order. An adapter without it shows Get access until a sale says otherwise. */\n  currentAccess?(item: IapOrderItem, bridge: SessionBoundBridge): Promise<AccessRead>;\n}"
+      },
+      {
+        "name": "OrderPartitionKey",
+        "kind": "interface",
+        "jsdoc": "/** Durable, member-partitioned purchase references. Ids only: never a proof or a credential, and\n *  the member id is stored only as a one-way hash in the key. */",
+        "decl": "export interface OrderPartitionKey {\n  purchasesAppId: string;\n  siteId: string;\n  /** The signed-in member's Wix id, from the host session (wix-iap records purchases against it). */\n  memberId: string;\n}"
+      },
+      {
+        "name": "OrderRefStage",
+        "kind": "type",
+        "jsdoc": "/** `held`: Apple charged, and CompletePayment refused the proof without recording it, so the\n *  transaction stays unfinished and is retried. `needsSupport`: recorded and refused for good. */",
+        "decl": "export type OrderRefStage = \"ordered\" | \"charged\" | \"started\" | \"submitted\" | \"held\" | \"needsSupport\";"
+      },
+      {
+        "name": "OrderRef",
+        "kind": "interface",
+        "jsdoc": "",
+        "decl": "export interface OrderRef {\n  /** `<kind>:<id>` of the item, or `payment:<paymentId>` for a payment with no local order. */\n  key: string;\n  stage: OrderRefStage;\n  kind?: string;\n  verticalRef?: VerticalRef;\n  cashierOrderId?: string;\n  wixTransactionId?: string;\n  paymentId?: string;\n  storeProductId?: string;\n  appProductId?: string;\n  appleTransactionId?: string;\n  /** The StoreKit token StartPayment minted for this payment (D61): recovery finds the order by it. */\n  appAccountToken?: string;\n  updatedAt: number;\n}"
+      },
+      {
+        "name": "OrderRefPartition",
+        "kind": "interface",
+        "jsdoc": "",
+        "decl": "export interface OrderRefPartition {\n  refs(): readonly OrderRef[];\n  /** False when the write could not be verified as durable; the caller must not proceed. */\n  put(ref: OrderRef): boolean;\n  remove(key: string): boolean;\n}"
+      },
+      {
+        "name": "OrderRefStore",
+        "kind": "interface",
+        "jsdoc": "",
+        "decl": "export interface OrderRefStore {\n  /** Null when this partition cannot be stored durably: no storage bridge, unreadable or\n   *  unknown-version data. Never an empty stand-in. */\n  open(key: OrderPartitionKey): OrderRefPartition | null;\n  /** Whether any member holds references for this app and site; null when unreadable. Lets a\n   *  start-up skip reading the member and tracking when nothing was ever handed over. */\n  hasRefs(app: { purchasesAppId: string; siteId: string }): boolean | null;\n}"
+      },
+      {
+        "name": "OrderFailureCode",
+        "kind": "type",
+        "jsdoc": "",
+        "decl": "export type OrderFailureCode =\n  | \"notEnabled\" | \"notConfigured\" | \"signInRequired\" | \"unsupportedItem\" | \"notAppleRoute\"\n  | \"storageUnavailable\" | \"approvalRequired\" | \"orderClosed\" | \"orderRefused\" | \"chargeFailed\"\n  | \"paymentRefused\" | \"paymentHeld\" | \"alreadyOwned\" | \"paymentInProgress\" | \"productChanged\"\n  | \"invalidAssociation\" | \"needsSupport\" | \"unavailable\" | \"sessionChanged\";"
+      },
+      {
+        "name": "PaymentAccess",
+        "kind": "type",
+        "jsdoc": "/** Progress of a payment this device handed to wix-iap, tracked from its durable reference. */",
+        "decl": "export type PaymentAccess = \"processing\" | \"granted\" | \"accessUnknown\" | \"needsSupport\";"
+      },
+      {
+        "name": "PaymentProgress",
+        "kind": "interface",
+        "jsdoc": "",
+        "decl": "export interface PaymentProgress {\n  /** `<kind>:<id>` of the item, or `payment` when no local order is known. */\n  item: string;\n  access: PaymentAccess;\n  nextAttemptAt: number | null;\n}"
+      },
+      {
+        "name": "AppleIapCheckoutPhase",
+        "kind": "type",
+        "jsdoc": "",
+        "decl": "export type AppleIapCheckoutPhase =\n  | \"notEnabled\" | \"idle\" | \"preparing\" | \"purchasing\" | \"awaitingApproval\" | \"processing\"\n  | \"accessReady\" | \"cancelled\" | \"signInRequired\" | \"unavailable\" | \"refused\";"
+      },
+      {
+        "name": "AppleIapCheckoutState",
+        "kind": "interface",
+        "jsdoc": "/** Safe to render: no proof, account token, member, order or payment id. */",
+        "decl": "export interface AppleIapCheckoutState {\n  enabled: boolean;\n  phase: AppleIapCheckoutPhase;\n  /** The item the last `buy` was for, as `<kind>:<id>`. */\n  item: string | null;\n  failure: OrderFailureCode | null;\n  purchase: DeliveryState;\n  payments: PaymentProgress[];\n  nextWakeAt: number | null;\n}"
+      },
+      {
+        "name": "AppleIapCheckoutDependencies",
+        "kind": "interface",
+        "jsdoc": "",
+        "decl": "export interface AppleIapCheckoutDependencies {\n  wixIap: WixIapClient;\n  /** The member signed in for a captured session, from the trusted host (`memberIdentityOf` over the\n   *  host session). It partitions the references and scopes acknowledgements: wix-iap has no\n   *  customer ids any more (D61). */\n  identity: MemberIdentitySource;\n  /** The same trusted binding the wix-iap client uses; it partitions the stored references. */\n  binding: AppBindingSource;\n  /** The same host provider the wix-iap client was given: every step compares generations. */\n  session: SessionProvider;\n  clock: Clock;\n  cashier: CashierRoute;\n  adapters: readonly IapOrderAdapter[];\n  /** The screen's catalog pricing: the route and the App Store product a sale must match. */\n  pricing: Pick<IapCatalogPricing, \"view\" | \"appleProduct\">;\n  store?: TransactionStore;\n  refs?: OrderRefStore;\n  bridge?: WixBridge;\n  jitter?: (baseDelayMs: number) => number;\n  onState?: (state: AppleIapCheckoutState) => void;\n}"
+      },
+      {
+        "name": "AppleIapCheckout",
+        "kind": "interface",
+        "jsdoc": "",
+        "decl": "export interface AppleIapCheckout {\n  /** Recovers held purchases and resumes tracking payments already handed over. */\n  start(): Promise<AppleIapCheckoutState>;\n  buy(item: IapOrderItem): Promise<AppleIapCheckoutState>;\n  /** Marks the items the signed-in member already has access to, read from each vertical without an order. */\n  checkAccess(items: readonly IapOrderItem[]): Promise<AppleIapCheckoutState>;\n  reconcile(): Promise<AppleIapCheckoutState>;\n  retry(): Promise<AppleIapCheckoutState>;\n  tick(): Promise<AppleIapCheckoutState>;\n  state(): AppleIapCheckoutState;\n  dispose(): void;\n}"
+      },
+      {
+        "name": "AppleIapCheckoutRoutes",
+        "kind": "interface",
+        "jsdoc": "/** Where the checkout reaches Wix: mobile-apps-wix-iap's Payments service and cashier pay v2, both\n *  as gateway paths the member credential is accepted on. Platform configuration, never a screen's. */",
+        "decl": "export interface AppleIapCheckoutRoutes {\n  wixIap: WixIapRoute;\n  cashier: CashierRoute;\n}"
+      },
+      {
+        "name": "IapPurchaseGap",
+        "kind": "type",
+        "jsdoc": "/** A dependency purchasing needs that this app or host does not have yet. Internal diagnostics:\n *  never customer copy.\n *  - `routes`: no member-callable wix-iap or cashier route is configured.\n *  - `mapping`: no Wix→Apple mapping source is connected.\n *  - `binding`: the binary carries no purchases-app binding for this app.\n *  - `nativeIdentity`: the host cannot bind a request to the signed-in member.\n *  - `managedStore`: managed StoreKit is not enabled on this host (or not iOS).\n *  - `storage`: purchase references cannot be stored durably. */",
+        "decl": "export type IapPurchaseGap = \"routes\" | \"mapping\" | \"binding\" | \"nativeIdentity\" | \"managedStore\" | \"storage\";"
+      },
+      {
+        "name": "IapPurchaseReadiness",
+        "kind": "type",
+        "jsdoc": "",
+        "decl": "export type IapPurchaseReadiness =\n  | { status: \"checking\" }\n  | { status: \"ready\" }\n  | { status: \"unavailable\"; gaps: readonly IapPurchaseGap[] };"
+      },
+      {
+        "name": "IapCommerceOptions",
+        "kind": "interface",
+        "jsdoc": "",
+        "decl": "export interface IapCommerceOptions {\n  /** The verticals this screen sells. A screen that only shows prices passes none. */\n  adapters?: readonly IapOrderAdapter[];\n  /** After any price, readiness or checkout change; a worker republishes its state here. */\n  onChange?(): void;\n}"
+      },
+      {
+        "name": "IapCommerce",
+        "kind": "interface",
+        "jsdoc": "",
+        "decl": "export interface IapCommerce {\n  /** Routes, display prices, regular-checkout guards and the visible-refresh poll. */\n  readonly pricing: IapCatalogPricing;\n  /** Prices the items the screen shows, scoped to this app by the host. `scopeComplete` is false\n   *  when the host's own identity could not be read, so the screen offers Retry itself. */\n  loadPrices(items: IapCatalogItem[]): Promise<{ scopeComplete: boolean }>;\n  readiness(): IapPurchaseReadiness;\n  /** Whether the latest price load (the screen's or the poll's) had the host's own identity; when\n   *  false the screen offers Retry itself. */\n  scopeComplete(): boolean;\n  state(): AppleIapCheckoutState;\n  /** The item's App Store action, from its price route (the settled one while a refresh resolves),\n   *  purchase readiness and the checkout state. */\n  purchaseFields(reference: CatalogReference, copy: IapPurchaseCopy): IapPurchaseFields;\n  /** Checks readiness, then recovers held purchases and resumes payments already handed over. */\n  start(): Promise<AppleIapCheckoutState>;\n  buy(item: IapOrderItem): Promise<AppleIapCheckoutState>;\n  /** On resume: re-reads Apple's unfinished queue and the payments being tracked. */\n  reconcile(): Promise<AppleIapCheckoutState>;\n  tick(): Promise<AppleIapCheckoutState>;\n  /** The screen's one `_poll` for prices and purchase, or undefined when the cadence it already\n   *  armed still holds (or there is nothing to poll). Emit it from every publish. */\n  pollDirective(action: string): IapPollDirective | undefined;\n  /** The polled action's body: due purchase work — a full reconcile w\n/* … */"
+      },
+      {
+        "name": "IapPurchaseCopy",
+        "kind": "interface",
+        "jsdoc": "/** Labels from the screen's copy pack; the shared layer only chooses between them. */",
+        "decl": "export interface IapPurchaseCopy {\n  buy: string;\n  processing: string;\n  awaitingApproval: string;\n  unavailable: string;\n  signInRequired: string;\n  retry: string;\n  priceChanged: string;\n  support: string;\n}"
+      },
+      {
+        "name": "IapPurchaseFields",
+        "kind": "interface",
+        "jsdoc": "/** What a screen binds for an item's App Store purchase action. */",
+        "decl": "export interface IapPurchaseFields {\n  /** The item sells through the App Store: show this action instead of the regular one. */\n  appleRoute: boolean;\n  /** The vertical confirmed the member's access: open the content instead of selling it. */\n  accessReady: boolean;\n  buyLabel: string;\n  buyDisabled: boolean;\n  buyBusy: boolean;\n  buyNote: string;\n}"
+      }
+    ]
+  },
   {
     "name": "@himalaya/keyboard",
     "source": "core/sdk/keyboard/src/index.ts",
@@ -3495,6 +3748,91 @@
       }
     ]
   },
+  {
+    "name": "@himalaya/screens",
+    "source": "stdlib/flows/screens/src/index.ts",
+    "description": "@wix/himalaya/screens — ready-made sign-in and paywall screens.",
+    "api": [
+      {
+        "name": "ScreenEnvelope",
+        "kind": "interface",
+        "jsdoc": "",
+        "decl": "export interface ScreenEnvelope {\n  screenId: string;\n  renderer: string;\n  title: string;\n  schemaVersion: number;\n  cacheControl: { maxAge: number; staleWhileRevalidate: number };\n  logicBundle?: { url: string; integrity: string; declaredCapabilities: string[] };\n  payload: { id: string; body: unknown };\n}"
+      },
+      {
+        "name": "AuthCopy",
+        "kind": "interface",
+        "jsdoc": "/** Every user-facing string on the auth screen. Override any subset. */",
+        "decl": "export interface AuthCopy {\n  signInTitle?: string;\n  registerTitle?: string;\n  subhead?: string;\n  emailLabel?: string;\n  passwordLabel?: string;\n  signInCta?: string;\n  registerCta?: string;\n  toRegisterCta?: string;\n  toSignInCta?: string;\n  signOutCta?: string;\n  signedInTitle?: string;\n}"
+      },
+      {
+        "name": "AuthScreenOptions",
+        "kind": "interface",
+        "jsdoc": "",
+        "decl": "export interface AuthScreenOptions {\n  /** Where the built worker bundle is served from. */\n  bundleUrl: string;\n  screenId?: string;\n  /** Service name — must match `createAuthService({ service })`. */\n  service?: string;\n  title?: string;\n  /** Offer \"create an account\" alongside sign-in. Default true. */\n  register?: boolean;\n  copy?: AuthCopy;\n  /** Buttons shown once signed in, as { label, screenId } — e.g. back to the library. */\n  next?: Array<{ label: string; screenId: string }>;\n}"
+      },
+      {
+        "name": "authScreen",
+        "kind": "function",
+        "jsdoc": "/**\n * The sign-in / create-account screen.\n *\n * Static descriptor, worker-driven layout: every conditional binds a negative\n * flag the service emits, so the descriptor never computes anything.\n */",
+        "decl": "export function authScreen(opts: AuthScreenOptions): ScreenEnvelope;"
+      },
+      {
+        "name": "AuthServiceOptions",
+        "kind": "interface",
+        "jsdoc": "",
+        "decl": "export interface AuthServiceOptions {\n  /** Must match `authScreen({ service })`. */\n  service?: string;\n  register?: boolean;\n  copy?: AuthCopy;\n}"
+      },
+      {
+        "name": "createAuthService",
+        "kind": "function",
+        "jsdoc": "/**\n * The worker behind `authScreen`. An app's whole worker file is:\n *\n *     import { createAuthService } from \"@wix/himalaya/screens\";\n *     const svc = createAuthService();\n *     export default svc; export { svc };\n *\n * The first load is kicked here, at module scope, so the app cannot forget it.\n */",
+        "decl": "export function createAuthService(opts: AuthServiceOptions = {});"
+      },
+      {
+        "name": "PlanRow",
+        "kind": "interface",
+        "jsdoc": "/** One plan, flattened to the scalar fields an SDUI row template can bind.\n *\n *  Flattened on purpose: a row template binds `$item.<field>` and cannot iterate\n *  a nested list, so the perks arrive as three slots plus their `no…` flags\n *  rather than an array. Three is a deliberate cap — it is what a plan card can\n *  show without becoming a wall of text. */",
+        "decl": "export interface PlanRow {\n  id: string;\n  name: string;\n  description: string;\n  priceLine: string;\n  periodLine: string;\n  perk1: string; perk2: string; perk3: string;\n  noPerk1: boolean; noPerk2: boolean; noPerk3: boolean;\n  badge: string;\n  noBadge: boolean;\n  hasBadge: boolean;\n  /** True when this is the plan the signed-in member currently holds. */\n  joined: boolean;\n  notJoined: boolean;\n  /** \"Current plan\" / \"\" — the label a joined row shows instead of a Join button. */\n  joinedLabel: string;\n  /** Per-row CTA, so the template needs no conditional of its own. */\n  cta: string;\n  appleSupported: boolean;\n  joinDisabled: boolean;\n  joinNote: string;\n}"
+      },
+      {
+        "name": "CheckoutCopy",
+        "kind": "interface",
+        "jsdoc": "/** Every user-facing string on the paywall. Override any subset. */",
+        "decl": "export interface CheckoutCopy {\n  headline?: string;\n  subhead?: string;\n  joinCta?: string;\n  joinedLabel?: string;\n  badgeLabel?: string;\n  /** Shown while the catalog is loading. */\n  loadingText?: string;\n  /** Shown when the site has no plans to sell. */\n  emptyText?: string;\n  loadError?: string;\n  signInFirst?: string;\n  joinedNotice?: string;\n  pendingNotice?: string;\n  handoffNotice?: string;\n  cancelledNotice?: string;\n  failedNotice?: string;\n  goneNotice?: string;\n}"
+      },
+      {
+        "name": "CheckoutServiceOptions",
+        "kind": "interface",
+        "jsdoc": "",
+        "decl": "export interface CheckoutServiceOptions {\n  /** Must match `checkoutScreen({ service })`. */\n  service?: string;\n  copy?: CheckoutCopy;\n  /** Deep link the cashier returns to, e.g. \"myapp://screen/library\". Without it\n   *  the member completes payment and lands nowhere. */\n  returnTo?: string;\n  /** Plan id to mark with the badge (\"Most popular\"). */\n  featuredPlanId?: string;\n  /** Ask whether the member already holds a plan, so rows can say so. Default\n   *  true. Costs one extra call on load; turn it off only for a pure price list. */\n  showJoined?: boolean;\n}"
+      },
+      {
+        "name": "createCheckoutService",
+        "kind": "function",
+        "jsdoc": "/**\n * The worker behind `checkoutScreen`. An app's whole worker file is:\n *\n *     import { createCheckoutService } from \"@wix/himalaya/screens\";\n *     const svc = createCheckoutService({ returnTo: \"myapp://screen/library\" });\n *     export default svc; export { svc };\n */",
+        "decl": "export function createCheckoutService(opts: CheckoutServiceOptions = {});"
+      },
+      {
+        "name": "CheckoutScreenOptions",
+        "kind": "interface",
+        "jsdoc": "",
+        "decl": "export interface CheckoutScreenOptions {\n  /** Where the built worker bundle is served from. */\n  bundleUrl: string;\n  screenId?: string;\n  /** Service name — must match `createCheckoutService({ service })`. */\n  service?: string;\n  title?: string;\n  copy?: CheckoutCopy;\n  /** Screen the \"Sign in to continue\" button opens. Omit to drop the button —\n   *  but only if the app genuinely has no sign-in, because the notice it pairs\n   *  with is usually \"sign in to join a plan\" and would otherwise dead-end. */\n  signInScreenId?: string;\n}"
+      },
+      {
+        "name": "checkoutScreen",
+        "kind": "function",
+        "jsdoc": "/**\n * The paywall: browse plans, join one.\n *\n * Every conditional binds a NEGATIVE flag the service emits, so the descriptor\n * computes nothing — `hiddenPath` gates HIDING, and it sits on the\n * NODE as a sibling of `body`, never inside it.\n *\n * The row is a template: `$item.<field>` resolves per row against what\n * `createCheckoutService` puts in `rows`. Every binding used here is a field\n * that service emits — the two halves are pinned together by a test, because a\n * binding no service satisfies renders as nothing and the screen still LOOKS\n * structurally right.\n */",
+        "decl": "export function checkoutScreen(opts: CheckoutScreenOptions): ScreenEnvelope;"
+      },
+      {
+        "name": "(reexport)",
+        "kind": "reexport",
+        "jsdoc": "/** Re-exported so a gated screen can ask the entitlement question without also\n *  importing @wix/himalaya/checkout directly. Same fail-closed door. */",
+        "decl": "export { entitlement };"
+      }
+    ]
+  },
   {
     "name": "@himalaya/sdk-types",
     "source": "core/sdk/sdk-types/src/index.ts",
@@ -11284,7 +11622,7 @@
         "name": "WixBlogCommentRow",
         "kind": "type",
         "jsdoc": "",
-        "decl": "export type WixBlogCommentRow = {\n  id: string;\n  authorName: string;\n  /** The comment's plain text (every text run, space-joined). */\n  text: string;\n  createdDate: string;\n  /** [rico] #3372 — the comment's Ricos document (`content.richContent`) as the API returned it, for a\n   *  RichContent row; undefined when the comment has none. */\n  richContent?: unknown;\n};"
+        "decl": "export type WixBlogCommentRow = {\n  id: string;\n  authorName: string;\n  /** The comment's plain text (every text run, space-joined). */\n  text: string;\n  createdDate: string;\n  /** [rico] #3372 — the comment's Ricos document (`content.richContent`) as the API returned it, for a\n   *  RichContent row; undefined when the comment has none. */\n  richContent?: unknown;\n  /** Set only on a reply row `listGroupPostComments` flattens in from `commentReplies` —\n   *  absent on a top-level comment. */\n  parentCommentId?: string;\n  /** Set only on a TOP-LEVEL comment row, true when its reply thread had more replies than\n   *  `repliesLimit` returned. There is no confirmed endpoint in this SDK to fetch the rest —\n   *  `WixRepliesListResponse`'s own `pagingMetadata` carries a cursor, but nothing in the\n   *  ingested spec calls it by itself — so this is a signal to show \"N more replies\" rather\n   *  than silently truncating, not something a caller can page past yet. */\n  hasMoreReplies?: boolean;\n};"
       },
       {
         "name": "blogCommentRow",
@@ -11305,6 +11643,41 @@
         "decl": "export async function listBlogComments(postId: string): Promise<WixBlogCommentRow[]>;",
         "http": "GET /comments/v1/comments/list-by-resource?{…}"
       },
+      {
+        "name": "GROUPS_COMMENTS_APP_ID",
+        "kind": "const",
+        "jsdoc": "/** The appId Wix Groups registers as its comments provider. Same value as\n *  GROUPS_APP_ID/GROUPS_APP_DEF_ID used elsewhere in this repo (social-feed's\n *  reactions/create-post calls) — Groups is one of the apps where the comments\n *  provider id and the app-def-id coincide. Source: comments-ng's own CONSUMERS.md. */",
+        "decl": "export const GROUPS_COMMENTS_APP_ID = \"148c2287-c669-d849-d153-463c7486a694\";"
+      },
+      {
+        "name": "createGroupPostComment",
+        "kind": "function",
+        "jsdoc": "/**\n * Posts a comment (or a reply, when `parentCommentId` is given) on a group feed post —\n * POST /comments/v1/comments, body { comment: { appId, contextId: groupId, resourceId:\n * feedItemId, content, parentComment? } }. Same underlying RPC as the generated\n * `createComment`, scoped to a group feed item by the appId/contextId/resourceId\n * convention in comments-ng's own CONSUMERS.md (source-verified; see the file header).\n *\n * verify-live: no round-trip against a real group post yet — the scoping comes from the\n * comments-ng consumer table, not a live create+list.\n *\n * @scope member — requires a signed-in site member.\n */",
+        "decl": "export async function createGroupPostComment(\n  groupId: string,\n  feedItemId: string,\n  text: string,\n  parentCommentId?: string,\n): Promise<WixBlogCommentRow>;",
+        "scope": "member",
+        "verified": false
+      },
+      {
+        "name": "WixListGroupPostCommentsResult",
+        "kind": "interface",
+        "jsdoc": "",
+        "decl": "export interface WixListGroupPostCommentsResult {\n  comments: WixBlogCommentRow[];\n  /** `undefined` when the response carried none — a thread with more pages has one. */\n  pagingMetadata?: { count?: number; hasNext?: boolean; cursors?: { next?: string; prev?: string } };\n}"
+      },
+      {
+        "name": "WixListGroupPostCommentsOptions",
+        "kind": "interface",
+        "jsdoc": "",
+        "decl": "export interface WixListGroupPostCommentsOptions {\n  /** From a prior call's `pagingMetadata.cursors.next` — fetches the next page. */\n  cursor?: string;\n  /** Top-level comments per page. Defaults to the server's own default (unset). */\n  limit?: number;\n  /** Replies to include inline PER parent comment. Defaults to 20 — unset, the\n   *  server's documented default is to include none at all (see below). */\n  repliesLimit?: number;\n}"
+      },
+      {
+        "name": "listGroupPostComments",
+        "kind": "function",
+        "jsdoc": "/**\n * Lists a group feed post's comment thread — GET /comments/v1/comments/list-by-resource,\n * scoped by appId/contextId=groupId/resourceId=feedItemId (query string, never a GET\n * body — see the comment above). Same underlying RPC as the generated\n * `listCommentsByResource`.\n *\n * Replies ride the SAME response, under `commentReplies` — keyed by parent comment id —\n * but ONLY when the request's `cursorPaging.repliesLimit` asks for them; the field exists\n * precisely because the server does not include replies by default. This function sends\n * `cursorPaging.repliesLimit=20` unless `opts.repliesLimit` overrides it, and forwards\n * `opts.cursor`/`opts.limit` into `cursorPaging.cursor`/`cursorPaging.limit` so a caller\n * can actually page past `pagingMetadata.hasNext` instead of being stuck on page one. The\n * generator could not resolve a precise shape for the `commentReplies` map\n * (`Record<string, unknown>`), so its value is read as `{ replies?, pagingMetadata? }` here —\n * inferred from the already-typed, structurally identical `WixRepliesListResponse`, not\n * live-verified against a real multi-reply thread. Each reply is flattened into the SAME\n * row list, tagged with `parentCommentId`, directly after its parent, oldest reply first.\n * Top-level comments keep the SERVER's order: the request sends no sort (none is confirmed\n * for this provider), so re-sorting a page on the client would break chronology at a page\n * boundary whenever the server pages newest-first. Kept as-is, consecutive pages append\n * consistently, whatever order the server uses. A thread with more replies than `repliesLimit` sets its PARENT row's\n * `hasMoreReplies: true` instead of silently dropping them — there is no confirmed endpoint\n * in this SDK to page a single thread's replies, so this is a signal, not a cursor.\n *\n * verify-live: no round-trip against a real group post yet — the appId/contextId/resourceId\n * shape comes from the comments-ng consumer table, not a live call.\n *\n * @scope member — a signed-in site member reading a group they can see; whether an\n * anonymous visitor can read a PUBLIC group's comments is unconfirmed — needsLiveProbe.\n */",
+        "decl": "export async function listGroupPostComments(\n  groupId: string,\n  feedItemId: string,\n  opts: WixListGroupPostCommentsOptions = {},\n): Promise<WixListGroupPostCommentsResult>;",
+        "http": "GET /comments/v1/comments/list-by-resource?{…}",
+        "scope": "member",
+        "verified": false
+      },
       {
         "name": "categories.createCategory",
         "kind": "function",
@@ -20001,16 +20374,18 @@
       {
         "name": "queryGroups",
         "kind": "function",
-        "jsdoc": "",
+        "jsdoc": "/**\n * List/search groups — POST /social-groups-proxy/groups/v2/groups/query.\n *\n * @scope visitor — browsing public groups needs no sign-in; this is an\n * already-working consumer-app feature (group discovery). Whether a\n * private/secret group's existence is visible to a non-member is unconfirmed\n * — needsLiveProbe.\n */",
         "decl": "export function queryGroups(\n  req: WixGroupsQueryRequest = {} as WixGroupsQueryRequest,\n  opts?: WixCallOptions,\n): Promise<WixQueryGroupsResponse>;",
-        "http": "POST /social-groups-proxy/groups/v2/groups/query"
+        "http": "POST /social-groups-proxy/groups/v2/groups/query",
+        "scope": "visitor"
       },
       {
         "name": "getGroup",
         "kind": "function",
-        "jsdoc": "",
+        "jsdoc": "/**\n * Get a single group by id — GET /social-groups-proxy/groups/v2/groups/{id}.\n *\n * @scope visitor — same reasoning as `queryGroups`: reading a group's detail is\n * an already-working consumer-app feature with no sign-in required for a\n * public group.\n */",
         "decl": "export function getGroup(id: string, opts?: WixCallOptions): Promise<WixGroup>;",
-        "http": "GET /social-groups-proxy/groups/v2/groups/{…}"
+        "http": "GET /social-groups-proxy/groups/v2/groups/{…}",
+        "scope": "visitor"
       },
       {
         "name": "WixGroupCoverImage",
@@ -20025,16 +20400,22 @@
         "decl": "export interface WixGroupAccessRestriction {\n  /** UNKNOWN | ADMIN_APPROVAL | PAID_PLANS | EVENTS */\n  type?: string;\n}"
       },
       {
-        "name": "WixGroupWrite",
+        "name": "WixGroupSettings",
+        "kind": "interface",
+        "jsdoc": "/** The real `GroupSettings` shape, ingested from `@wix/auto_sdk_groups_groups`\n *  (codegen/wix/auto/specs/groups_groups/types.d.ts) at its latest published version as of\n *  2026-10-06 — re-ingestion confirmed no additional fields exist upstream. Do NOT add\n *  fields beyond this list without re-ingesting or a live probe first. */",
+        "decl": "export interface WixGroupSettings {\n  membersCanInvite?: boolean;\n  membersCanApprove?: boolean;\n  welcomeMemberPostEnabled?: boolean;\n  groupDetailsChangedPostEnabled?: boolean;\n  showMemberList?: boolean;\n  /** No enum is pinned anywhere in the ingested spec — needsLiveProbe. */\n  allowedToInviteMembers?: string;\n  /** No enum is pinned anywhere in the ingested spec — needsLiveProbe. */\n  allowedToApproveJoinRequests?: string;\n  aiSpamProtectionEnabled?: boolean;\n}"
+      },
+      {
+        "name": "WixGroupWriteInput",
         "kind": "interface",
         "jsdoc": "/** Writable group fields for create/update. */",
-        "decl": "export interface WixGroupWrite {\n  /** Required on create. */\n  name?: string;\n  /** UNKNOWN | PUBLIC | PRIVATE | SECRET */\n  privacyStatus?: string;\n  /** Plain-text group description. Social Groups v2 models this as a plain string\n   *  (public schema social-groups-v2-group-groups.schemas.ts → `description: z.string()`),\n   *  NOT a Ricos doc, so create/update accept it directly in `{ group }`. */\n  description?: string;\n  coverImage?: WixGroupCoverImage | null;\n  accessRestriction?: WixGroupAccessRestriction;\n}"
+        "decl": "export interface WixGroupWriteInput {\n  /** Required on create. */\n  name?: string;\n  /** UNKNOWN | PUBLIC | PRIVATE | SECRET */\n  privacyStatus?: string;\n  /** Plain-text group description. Social Groups v2 models this as a plain string\n   *  (public schema social-groups-v2-group-groups.schemas.ts → `description: z.string()`),\n   *  NOT a Ricos doc, so create/update accept it directly in `{ group }`. */\n  description?: string;\n  coverImage?: WixGroupCoverImage | null;\n  accessRestriction?: WixGroupAccessRestriction;\n  settings?: WixGroupSettings;\n}"
       },
       {
         "name": "WixCreateGroupRequest",
         "kind": "interface",
         "jsdoc": "",
-        "decl": "export interface WixCreateGroupRequest {\n  group: WixGroupWrite;\n}"
+        "decl": "export interface WixCreateGroupRequest {\n  group: WixGroupWriteInput;\n}"
       },
       {
         "name": "WixCreateGroupResponse",
@@ -20046,7 +20427,7 @@
         "name": "WixUpdateGroupRequest",
         "kind": "interface",
         "jsdoc": "",
-        "decl": "export interface WixUpdateGroupRequest {\n  group: WixGroupWrite & { id: string };\n}"
+        "decl": "export interface WixUpdateGroupRequest {\n  group: WixGroupWriteInput & { id: string };\n}"
       },
       {
         "name": "WixUpdateGroupResponse",
@@ -20063,23 +20444,26 @@
       {
         "name": "createGroup",
         "kind": "function",
-        "jsdoc": "/** Create a group — POST /social-groups-proxy/groups/v2/groups. `name` is required; the entity is wrapped as `{ group }`. */",
-        "decl": "export function createGroup(group: WixGroupWrite): Promise<WixCreateGroupResponse>;",
-        "http": "POST /social-groups-proxy/groups/v2/groups"
+        "jsdoc": "/**\n * Create a group — POST /social-groups-proxy/groups/v2/groups. `name` is required;\n * the entity is wrapped as `{ group }`.\n *\n * @scope owner — CONFIRMED: requires a true owner/admin-scoped API token. Returns\n * HTTP 403 for every member session, including the site owner's own account signed\n * in via a normal member-login flow. There is NO member-side workaround — do not\n * wire this to a consumer-facing \"create group\" action. See the section note above\n * for the reproduction.\n */",
+        "decl": "export function createGroup(group: WixGroupWriteInput): Promise<WixCreateGroupResponse>;",
+        "http": "POST /social-groups-proxy/groups/v2/groups",
+        "scope": "owner"
       },
       {
         "name": "updateGroup",
         "kind": "function",
-        "jsdoc": "/** Update a group — PATCH /social-groups-proxy/groups/v2/groups/{id} (field-mask style). Only the supplied fields change; the request carries `{ group: { id, ... } }`. */",
-        "decl": "export function updateGroup(groupId: string, group: WixGroupWrite): Promise<WixUpdateGroupResponse>;",
-        "http": "PATCH /social-groups-proxy/groups/v2/groups/{…}"
+        "jsdoc": "/**\n * Update a group — PATCH /social-groups-proxy/groups/v2/groups/{id} (field-mask style).\n * Only the supplied fields change; the request carries `{ group: { id, ... } }`.\n *\n * @scope owner — VERY LIKELY the same owner/admin-scoped-token requirement as\n * `createGroup` (same entity, same write-class, originally verified together via\n * \"the real Owner Create/Edit-Group flow\") — but NOT independently re-tested\n * against a member session this round. needsLiveProbe to confirm directly rather\n * than by inference.\n */",
+        "decl": "export function updateGroup(groupId: string, group: WixGroupWriteInput): Promise<WixUpdateGroupResponse>;",
+        "http": "PATCH /social-groups-proxy/groups/v2/groups/{…}",
+        "scope": "owner"
       },
       {
         "name": "deleteGroup",
         "kind": "function",
-        "jsdoc": "/** Delete a group — DELETE /social-groups-proxy/groups/v2/groups/{id}. */",
+        "jsdoc": "/**\n * Delete a group — DELETE /social-groups-proxy/groups/v2/groups/{id}.\n *\n * @scope owner — VERY LIKELY the same owner/admin-scoped-token requirement as\n * `createGroup` (same reasoning as `updateGroup` above) — not independently\n * re-tested against a member session this round. needsLiveProbe.\n */",
         "decl": "export function deleteGroup(groupId: string): Promise<WixDeleteGroupResponse>;",
-        "http": "DELETE /social-groups-proxy/groups/v2/groups/{…}"
+        "http": "DELETE /social-groups-proxy/groups/v2/groups/{…}",
+        "scope": "owner"
       },
       {
         "name": "WixGroupJoinResponse",
@@ -20090,16 +20474,18 @@
       {
         "name": "joinGroup",
         "kind": "function",
-        "jsdoc": "/** Join a group as the signed-in member — POST /social-groups/v2/groups/{id}/join. */",
+        "jsdoc": "/**\n * Join a group as the signed-in member — POST /social-groups/v2/groups/{id}/join.\n *\n * @scope member — a self-service action any signed-in member session can reach\n * (distinct REST base from group CRUD above, which is owner-only). Verified live.\n */",
         "decl": "export function joinGroup(groupId: string): Promise<WixGroupJoinResponse>;",
-        "http": "POST /social-groups/v2/groups/{…}/join"
+        "http": "POST /social-groups/v2/groups/{…}/join",
+        "scope": "member"
       },
       {
         "name": "leaveGroup",
         "kind": "function",
-        "jsdoc": "/** Leave a group as the signed-in member — POST /social-groups/v2/groups/{id}/leave. */",
+        "jsdoc": "/**\n * Leave a group as the signed-in member — POST /social-groups/v2/groups/{id}/leave.\n *\n * @scope member — same reasoning as `joinGroup`. Verified live.\n */",
         "decl": "export function leaveGroup(groupId: string): Promise<Record<string, never>>;",
-        "http": "POST /social-groups/v2/groups/{…}/leave"
+        "http": "POST /social-groups/v2/groups/{…}/leave",
+        "scope": "member"
       },
       {
         "name": "WixGroupMember",
@@ -20116,9 +20502,126 @@
       {
         "name": "queryMembers",
         "kind": "function",
-        "jsdoc": "/** Query a group's members — POST /social-groups-proxy/members/v2/groups/{groupId}/members/query.\n *  The members service lives behind the `members` proxy base (NOT `groups`);\n *  live-verified 2026-06-19 (the `groups` base 404s, this base returns 200). */",
+        "jsdoc": "/**\n * Query a group's members — POST /social-groups-proxy/members/v2/groups/{groupId}/members/query.\n * The members service lives behind the `members` proxy base (NOT `groups`);\n * live-verified 2026-06-19 (the `groups` base 404s, this base returns 200).\n *\n * @scope member — reachable by a signed-in member session (listing a group's\n * members is an already-working consumer-app feature); visitor/anonymous\n * readability for a public group is unconfirmed — needsLiveProbe.\n */",
         "decl": "export function queryMembers(groupId: string, limit = 30): Promise<WixQueryGroupMembersResponse>;",
-        "http": "POST /social-groups-proxy/members/v2/groups/{…}/members/query"
+        "http": "POST /social-groups-proxy/members/v2/groups/{…}/members/query",
+        "scope": "member"
+      },
+      {
+        "name": "WixJoinGroupRequest",
+        "kind": "interface",
+        "jsdoc": "",
+        "decl": "export interface WixJoinGroupRequest {\n  siteMemberId?: string;\n  contactId?: string;\n  /** No enum is pinned anywhere in the ingested spec — needsLiveProbe. */\n  status?: string;\n  requestDetails?: { rejectionReason?: string };\n}"
+      },
+      {
+        "name": "WixListJoinGroupRequestsResponse",
+        "kind": "interface",
+        "jsdoc": "",
+        "decl": "export interface WixListJoinGroupRequestsResponse {\n  joinGroupRequests?: WixJoinGroupRequest[];\n  metadata?: { count?: number; offset?: number; total?: number; tooManyToCount?: boolean };\n}"
+      },
+      {
+        "name": "listJoinGroupRequests",
+        "kind": "function",
+        "jsdoc": "/**\n * List a group's pending join requests — GET /social-groups-proxy/join/v2/groups/{groupId}/join-requests.\n *\n * verify-live: not yet called against a real group — path and shape come from the\n * ingested Social Groups spec.\n *\n * @scope member — documented as reachable by a signed-in member whose in-group\n * role is admin/manager (not an owner-scoped API token — see the section's \"OPEN\n * QUESTION\" note); a regular member gets 403. Not independently live-probed.\n */",
+        "decl": "export function listJoinGroupRequests(groupId: string, limit = 30, offset = 0): Promise<WixListJoinGroupRequestsResponse>;",
+        "http": "GET /social-groups-proxy/join/v2/groups/{…}/join-requests?limit={…}&offset={…}",
+        "scope": "member",
+        "verified": false
+      },
+      {
+        "name": "WixApproveJoinGroupRequestsResponse",
+        "kind": "interface",
+        "jsdoc": "",
+        "decl": "export interface WixApproveJoinGroupRequestsResponse {\n  joinGroupRequests?: WixJoinGroupRequest[];\n}"
+      },
+      {
+        "name": "approveJoinGroupRequests",
+        "kind": "function",
+        "jsdoc": "/**\n * Approve pending join requests — POST /social-groups-proxy/join/v2/groups/{groupId}/join-requests/approve,\n * body { groupId, memberIds }.\n *\n * verify-live: not yet called against a real group — path and shape come from the\n * ingested Social Groups spec.\n *\n * @scope member — same documented-but-unverified basis as `listJoinGroupRequests`\n * (see the section's \"OPEN QUESTION\" note) — a regular member gets 403.\n */",
+        "decl": "export function approveJoinGroupRequests(groupId: string, memberIds: string[]): Promise<WixApproveJoinGroupRequestsResponse>;",
+        "http": "POST /social-groups-proxy/join/v2/groups/{…}/join-requests/approve",
+        "scope": "member",
+        "verified": false
+      },
+      {
+        "name": "WixJoinGroupRequestRejection",
+        "kind": "interface",
+        "jsdoc": "",
+        "decl": "export interface WixJoinGroupRequestRejection {\n  memberId: string;\n  reason?: string;\n}"
+      },
+      {
+        "name": "WixRejectJoinGroupRequestsResponse",
+        "kind": "interface",
+        "jsdoc": "",
+        "decl": "export interface WixRejectJoinGroupRequestsResponse {\n  joinGroupRequests?: WixJoinGroupRequest[];\n}"
+      },
+      {
+        "name": "rejectJoinGroupRequests",
+        "kind": "function",
+        "jsdoc": "/**\n * Reject pending join requests — POST /social-groups-proxy/join/v2/groups/{groupId}/join-requests/reject,\n * body { groupId, rejections }.\n *\n * verify-live: not yet called against a real group — path and shape come from the\n * ingested Social Groups spec.\n *\n * @scope member — same documented-but-unverified basis as `listJoinGroupRequests`\n * (see the section's \"OPEN QUESTION\" note) — a regular member gets 403.\n */",
+        "decl": "export function rejectJoinGroupRequests(groupId: string, rejections: WixJoinGroupRequestRejection[]): Promise<WixRejectJoinGroupRequestsResponse>;",
+        "http": "POST /social-groups-proxy/join/v2/groups/{…}/join-requests/reject",
+        "scope": "member",
+        "verified": false
+      },
+      {
+        "name": "WixGroupRole",
+        "kind": "interface",
+        "jsdoc": "",
+        "decl": "export interface WixGroupRole {\n  value?: string;\n}"
+      },
+      {
+        "name": "WixAssignRoleResponse",
+        "kind": "interface",
+        "jsdoc": "",
+        "decl": "export interface WixAssignRoleResponse {\n  groupId?: string;\n  memberIds?: string[];\n  role?: WixGroupRole;\n}"
+      },
+      {
+        "name": "assignRole",
+        "kind": "function",
+        "jsdoc": "/**\n * Assign a role to group members — POST /social-groups-proxy/roles/v2/groups/{groupId}/roles/assign,\n * body { groupId, memberIds, role: { value } }. `role` is a loose string, not a union: no\n * literal role value (e.g. \"ADMIN\"/\"MEMBER\") is pinned anywhere in the ingested spec —\n * needsLiveProbe.\n *\n * verify-live: not yet called against a real group — path and shape come from the\n * ingested Social Groups spec.\n *\n * @scope member — documented as reachable by a signed-in member whose in-group\n * role is admin/manager, not an owner-scoped API token (see the join-request\n * moderation section's \"OPEN QUESTION\" note above) — a regular member gets 403.\n * Not independently live-probed.\n */",
+        "decl": "export function assignRole(groupId: string, memberIds: string[], role: string): Promise<WixAssignRoleResponse>;",
+        "http": "POST /social-groups-proxy/roles/v2/groups/{…}/roles/assign",
+        "scope": "member",
+        "verified": false
+      },
+      {
+        "name": "WixUnassignRoleResponse",
+        "kind": "interface",
+        "jsdoc": "",
+        "decl": "export interface WixUnassignRoleResponse {\n  groupId?: string;\n  siteMemberIds?: string[];\n  memberIds?: string[];\n  role?: WixGroupRole;\n}"
+      },
+      {
+        "name": "unassignRole",
+        "kind": "function",
+        "jsdoc": "/**\n * Remove a role from group members — POST /social-groups-proxy/roles/v2/groups/{groupId}/roles/unassign,\n * body { groupId, memberIds, role: { value } }. Same unconfirmed-enum caveat as `assignRole`.\n *\n * verify-live: not yet called against a real group — path and shape come from the\n * ingested Social Groups spec.\n *\n * @scope member — same documented-but-unverified basis as `assignRole` — a regular\n * member gets 403.\n */",
+        "decl": "export function unassignRole(groupId: string, memberIds: string[], role: string): Promise<WixUnassignRoleResponse>;",
+        "http": "POST /social-groups-proxy/roles/v2/groups/{…}/roles/unassign",
+        "scope": "member",
+        "verified": false
+      },
+      {
+        "name": "WixRemoveGroupMembersResponse",
+        "kind": "interface",
+        "jsdoc": "",
+        "decl": "export interface WixRemoveGroupMembersResponse {}"
+      },
+      {
+        "name": "removeGroupMembers",
+        "kind": "function",
+        "jsdoc": "/**\n * Remove members from a group — DELETE /social-groups-proxy/members/v2/groups/{groupId}/members,\n * `memberIds` repeated in the QUERY STRING (`?memberIds=a&memberIds=b`), no body — every\n * no-path-param DELETE this repo has confirmed against Wix's own generated clients sends its\n * request that way (codegen/wix/tests/delete-query-string.test.ts); unlike a GET/HEAD body,\n * which the gateway drops unconditionally, a DELETE body is NOT dropped — this is a convention\n * match with Wix's own generated clients, not a gateway constraint. Same `members` proxy base\n * `queryMembers` already live-verified (2026-06-19) uses; this specific verb+path combination\n * is not yet live-probed.\n *\n * verify-live: not yet called against a real group — path and shape come from the\n * ingested Social Groups spec.\n *\n * @scope member — same documented-but-unverified basis as `assignRole` — a regular\n * member gets 403.\n */",
+        "decl": "export function removeGroupMembers(groupId: string, memberIds: string[]): Promise<WixRemoveGroupMembersResponse>;",
+        "http": "DELETE /social-groups-proxy/members/v2/groups/{…}/members?{…}",
+        "scope": "member",
+        "verified": false
+      },
+      {
+        "name": "updateGroupSettings",
+        "kind": "function",
+        "jsdoc": "/**\n * Update a group's settings — PATCH /social-groups-proxy/groups/v2/groups/{id} (field-mask),\n * via the existing `updateGroup` RPC, body { group: { id, settings } }. No separate settings\n * endpoint exists.\n *\n * verify-live: not yet called against a real group — path and shape come from the\n * ingested Social Groups spec.\n *\n * @scope owner — rides the SAME `updateGroup` RPC that is very likely owner-token-only\n * (see `updateGroup`'s own doc above) — reclassified from an earlier \"group-admin\n * member\" assumption once `createGroup`'s owner-only finding showed group CRUD writes\n * are gated by API-token tier, not in-group role. Not independently live-probed.\n */",
+        "decl": "export function updateGroupSettings(groupId: string, settings: WixGroupSettings): Promise<WixUpdateGroupResponse>;",
+        "scope": "owner",
+        "verified": false
       }
     ]
   },
@@ -22808,14 +23311,16 @@
       {
         "name": "listFeedItems",
         "kind": "function",
-        "jsdoc": "/** List a group's activity feed — GET\n *  https://social.wix.com/serverless/mobile/feed/v4/feedPosts (the ENRICHED read the\n *  real mobile app uses). Each item carries content (Ricos blocks), commentsCount, and\n *  reactionsList (count = length); the response's top-level `profiles[]` resolves each\n *  item's author.id → userName + profileImage. Verified live (200). Replaces the lean\n *  GET /api/v1/feed/items read, which omitted counts + author. */",
-        "decl": "export function listFeedItems(groupId: string, limit = 20): Promise<WixListFeedItemsResponse>;"
+        "jsdoc": "/**\n * List a group's activity feed — GET\n * https://social.wix.com/serverless/mobile/feed/v4/feedPosts (the ENRICHED read the\n * real mobile app uses). Each item carries content (Ricos blocks), commentsCount, and\n * reactionsList (count = length); the response's top-level `profiles[]` resolves each\n * item's author.id → userName + profileImage. Verified live (200). Replaces the lean\n * GET /api/v1/feed/items read, which omitted counts + author.\n *\n * @scope member — verified live with a signed-in member session; visitor/anonymous\n * readability of a public group's feed is unconfirmed.\n */",
+        "decl": "export function listFeedItems(groupId: string, limit = 20): Promise<WixListFeedItemsResponse>;",
+        "scope": "member"
       },
       {
         "name": "createFeedItem",
         "kind": "function",
-        "jsdoc": "/** Create a feed post in a group as the signed-in member — POST\n *  https://social.wix.com/api/v1/feed/items. `content` is the post text (modern\n *  posts are Ricos rich-content serialized to a string; plain text also works with\n *  contentType PLAIN_TEXT). Verified live (returns the created FeedItem). */",
-        "decl": "export function createFeedItem(groupId: string, content: string): Promise<WixFeedItem>;"
+        "jsdoc": "/**\n * Create a feed post in a group as the signed-in member — POST\n * https://social.wix.com/api/v1/feed/items. `content` is the post text (modern\n * posts are Ricos rich-content serialized to a string; plain text also works with\n * contentType PLAIN_TEXT). Verified live (returns the created FeedItem).\n *\n * @scope member — requires a signed-in site member. Verified live.\n */",
+        "decl": "export function createFeedItem(groupId: string, content: string): Promise<WixFeedItem>;",
+        "scope": "member"
       },
       {
         "name": "WixReactionsSummary",
@@ -22832,14 +23337,16 @@
       {
         "name": "reactToFeedItem",
         "kind": "function",
-        "jsdoc": "/** Like (react to) a feed item as the signed-in member. Verified live (200 →\n *  { total, reactionCodeCounts }). The real mobile app posts to the Groups\n *  mobile-serverless wrapper (NOT the raw /api/v1/reactions REST route, which\n *  404s for the member): POST /serverless/mobile/feed/v3/addReaction with\n *  { containerId=groupId, appDefId(Groups), reactionCode(emoji), resourceId=feedItemId, mode }.\n *  Auth is the signed instance (the wixApi bridge attaches it). `mode:\"APPEND\"`\n *  adds without clearing other reactions. (RE'd from wix-one-app-feed\n *  feed-api.reactionPress + groups-mobile-serverless addReaction.) */",
-        "decl": "export function reactToFeedItem(feedItemId: string, groupId: string, reactionCode: string = DEFAULT_REACTION): Promise<WixReactionsSummary>;"
+        "jsdoc": "/**\n * Like (react to) a feed item as the signed-in member. Verified live (200 →\n * { total, reactionCodeCounts }). The real mobile app posts to the Groups\n * mobile-serverless wrapper (NOT the raw /api/v1/reactions REST route, which\n * 404s for the member): POST /serverless/mobile/feed/v3/addReaction with\n * { containerId=groupId, appDefId(Groups), reactionCode(emoji), resourceId=feedItemId, mode }.\n * Auth is the signed instance (the wixApi bridge attaches it). `mode:\"APPEND\"`\n * adds without clearing other reactions. (RE'd from wix-one-app-feed\n * feed-api.reactionPress + groups-mobile-serverless addReaction.)\n *\n * @scope member — requires a signed-in site member. Verified live.\n */",
+        "decl": "export function reactToFeedItem(feedItemId: string, groupId: string, reactionCode: string = DEFAULT_REACTION): Promise<WixReactionsSummary>;",
+        "scope": "member"
       },
       {
         "name": "unreactFeedItem",
         "kind": "function",
-        "jsdoc": "/** Remove the member's reaction from a feed item — POST\n *  /serverless/mobile/feed/v2/removeReaction (same body minus `mode`).\n *  Verified live (200 → total decremented). */",
-        "decl": "export function unreactFeedItem(feedItemId: string, groupId: string, reactionCode: string = DEFAULT_REACTION): Promise<WixReactionsSummary>;"
+        "jsdoc": "/**\n * Remove the member's reaction from a feed item — POST\n * /serverless/mobile/feed/v2/removeReaction (same body minus `mode`).\n * Verified live (200 → total decremented).\n *\n * @scope member — requires a signed-in site member. Verified live.\n */",
+        "decl": "export function unreactFeedItem(feedItemId: string, groupId: string, reactionCode: string = DEFAULT_REACTION): Promise<WixReactionsSummary>;",
+        "scope": "member"
       }
     ]
   },
@@ -23120,7 +23627,7 @@
         "name": "StoreProduct",
         "kind": "interface",
         "jsdoc": "",
-        "decl": "export interface StoreProduct {\n  id?: string;\n  name?: string;\n  slug?: string;\n  description?: string;\n  plainDescription?: string;\n  /** Both gallery layouts: V1 `mainMedia`/`items`, V3 `main`/`itemsInfo.items`. */\n  media?: {\n    mainMedia?: WixMediaSlot;\n    main?: WixMediaSlot;\n    items?: WixMediaSlot[];\n    itemsInfo?: { items?: WixMediaSlot[] };\n  };\n  price?: { formatted?: { price?: string }; price?: number; currency?: string };\n  priceData?: { formatted?: { price?: string }; price?: number; currency?: string };\n  currency?: string;\n  actualPriceRange?: {\n    minValue?: { amount?: string; formattedAmount?: string; currency?: string };\n    maxValue?: { amount?: string; formattedAmount?: string; currency?: string };\n  };\n  /** Option groups, both spellings: V1 `productOptions`, V3 `options`. Declared\n   *  because the wire carries them on BOTH catalogs and this type denying them is\n   *  what let every template product screen drop the colour/size picker. Shapes\n   *  differ per catalog, so read them with `productOptions()` from ./options. */\n  productOptions?: unknown[];\n  options?: unknown[];\n  /** V3 purchasable variants. The cart addresses a V3 option choice by `variantId`,\n   *  which `cartOptionsPayload()` resolves out of this. */\n  variantsInfo?: { variants?: unknown[] };\n}"
+        "decl": "export interface StoreProduct {\n  id?: string;\n  productType?: string;\n  name?: string;\n  slug?: string;\n  description?: string;\n  plainDescription?: string;\n  /** Both gallery layouts: V1 `mainMedia`/`items`, V3 `main`/`itemsInfo.items`. */\n  media?: {\n    mainMedia?: WixMediaSlot;\n    main?: WixMediaSlot;\n    items?: WixMediaSlot[];\n    itemsInfo?: { items?: WixMediaSlot[] };\n  };\n  price?: { formatted?: { price?: string }; price?: number; currency?: string };\n  priceData?: { formatted?: { price?: string }; price?: number; currency?: string };\n  currency?: string;\n  actualPriceRange?: {\n    minValue?: { amount?: string; formattedAmount?: string; currency?: string };\n    maxValue?: { amount?: string; formattedAmount?: string; currency?: string };\n  };\n  /** Option groups, both spellings: V1 `productOptions`, V3 `options`. Declared\n   *  because the wire carries them on BOTH catalogs and this type denying them is\n   *  what let every template product screen drop the colour/size picker. Shapes\n   *  differ per catalog, so read them with `productOptions()` from ./options. */\n  productOptions?: unknown[];\n  options?: unknown[];\n  /** V3 purchasable variants. The cart addresses a V3 option choice by `variantId`,\n   *  which `cartOptionsPayload()` resolves out of this. */\n  variantsInfo?: { variants?: unknown[] };\n}"
       },
       {
         "name": "StoreProductsResponse",