@wix/himalaya-cli 0.1345.0 → 0.1348.0

package/dist/authoring-runtime/node_modules/@wix/himalaya/dist/_types/core/sdk/presigned-upload/src/index.d.ts

@@ -54,18 +54,11 @@ export declare function put(url: string, bytes: {
  * `@himalaya/files` substrate — the bytes never cross the worker bridge, so this is
  * the path for photos and voice notes.
  *
- * DECLARE "files" TOO. This verb reads the app's document substrate, so a bundle that
- * uses it is doing file access and its declared list should say so — the privacy
- * manifest and the generated native config are built from that list.
- *
- * Be aware of what is and is not enforced. The runtime gate keys on the capability id in
- * the action name, so `capability.presigned_upload.putFile` is admitted by declaring
- * `presigned_upload` alone: today a bundle can reach a substrate path without declaring
- * `files`. That is a gap in the gate, not a licence — and it is deliberately NOT closed
- * by adding `presigned_upload → files` to CAPABILITY_IMPLIES, because that table grants
- * supersets, and granting the WHOLE files capability (write, remove, list) to anything
- * that can upload would be a wider hole than the one it patched. Closing it properly
- * needs a requires-relation the gate does not have yet.
+ * DECLARE "files" TOO — it is REQUIRED. This verb reads the app's document substrate, so
+ * the worker gate on every runtime (iOS, macOS, Android, web) refuses
+ * `capability.presigned_upload.putFile` to a bundle that does not also declare `files`.
+ * Deliberately a requirement and NOT a `presigned_upload → files` implication:
+ * declaring `presigned_upload` grants none of the files surface (write, remove, list).
  */
 export declare function putFile(url: string, ref: FileHandle | string, opts?: UploadOptions): Promise<UploadResult>;
 /** Capability version, for bundles that gate on min binary version. */

package/dist/authoring-runtime/node_modules/@wix/himalaya/dist/_types/stdlib/flows/checkout/src/index.d.ts

@@ -62,6 +62,13 @@ export interface PayRequest {
     currency?: string;
     /** Mints the in-app cashier URL. Called ONLY when the wallet rail cannot settle. */
     cashierUrl?: () => Promise<string | undefined>;
+    /** Opens the cashier ITSELF, in place of `cashierUrl` + an in-app browser: a host that must sign
+     *  the member in on the site first (a hosted app's checkout, RFC 0071 §4 Step 4b) owns the URL,
+     *  which carries a session token no worker may see. Resolves whether the cashier opened, or
+     *  "withdrawn" when [stillMayCharge] — the caller's `mayCharge`, re-read — said no once the host had
+     *  prepared it: preparing takes network round trips, during which the caller's route can change, so
+     *  the host asks again right before it opens. */
+    openCashier?: (stillMayCharge: () => Promise<boolean>) => Promise<boolean | "withdrawn">;
     /** Re-read immediately before money moves (the wallet charge, the cashier opening). The caller's
      *  own route can change while a rail is being chosen; false stops the flow with nothing charged. */
     mayCharge?: () => boolean | Promise<boolean>;

package/dist/authoring-runtime/node_modules/@wix/himalaya/dist/checkout.mjs

@@ -140,7 +140,7 @@ async function isEntitled() {
 }
 var WITHDRAWN = { kind: "failed", reason: "the caller withdrew the charge" };
 async function payOrder(req) {
-  if (!req.snapshotId && !req.cashierUrl) {
+  if (!req.snapshotId && !req.cashierUrl && !req.openCashier) {
     return { kind: "failed", reason: "no order to settle" };
   }
   const availability = await isAvailable().catch(() => "unavailable");
@@ -163,7 +163,12 @@ async function payOrder(req) {
     }
     if (r.status === "cancelled") return { kind: "cancelled" };
   }
-  if (req.cashierUrl) {
+  if (req.openCashier) {
+    if (await req.mayCharge?.() === false) return WITHDRAWN;
+    const opened = await req.openCashier(async () => await req.mayCharge?.() !== false).catch(() => false);
+    if (opened === "withdrawn") return WITHDRAWN;
+    if (opened === true) return { kind: "handoff" };
+  } else if (req.cashierUrl) {
     const url = await req.cashierUrl().catch(() => void 0);
     if (url) {
       if (await req.mayCharge?.() === false) return WITHDRAWN;

package/dist/authoring-runtime/node_modules/@wix/himalaya/dist/screens.mjs

@@ -224,7 +224,7 @@ async function entitlement(planId) {
 }
 var WITHDRAWN = { kind: "failed", reason: "the caller withdrew the charge" };
 async function payOrder(req) {
-  if (!req.snapshotId && !req.cashierUrl) {
+  if (!req.snapshotId && !req.cashierUrl && !req.openCashier) {
     return { kind: "failed", reason: "no order to settle" };
   }
   const availability = await isAvailable().catch(() => "unavailable");
@@ -247,7 +247,12 @@ async function payOrder(req) {
     }
     if (r.status === "cancelled") return { kind: "cancelled" };
   }
-  if (req.cashierUrl) {
+  if (req.openCashier) {
+    if (await req.mayCharge?.() === false) return WITHDRAWN;
+    const opened = await req.openCashier(async () => await req.mayCharge?.() !== false).catch(() => false);
+    if (opened === "withdrawn") return WITHDRAWN;
+    if (opened === true) return { kind: "handoff" };
+  } else if (req.cashierUrl) {
     const url = await req.cashierUrl().catch(() => void 0);
     if (url) {
       if (await req.mayCharge?.() === false) return WITHDRAWN;