@wix/himalaya-cli 0.1361.0 → 0.1363.0

package/dist/cli.mjs

@@ -7706,7 +7706,6 @@ function resolveTranslation(value, catalog3, sourceCatalog) {
 var BINDING_SIGILS, BINDING_SIGIL_RE, TRANSLATION_PREFIX, TRANSLATION_KEY_RE;
 var init_bindings = __esm({
   "../../core/ts/src/bindings.ts"() {
-    "use strict";
     BINDING_SIGILS = ["service", "flag", "item", "t"];
     BINDING_SIGIL_RE = new RegExp(
       `^\\$(?:${BINDING_SIGILS.filter((s2) => s2 !== "t").join("|")})\\b|^\\$t:`
@@ -13546,12 +13545,10 @@ var init_player_host_manifest = __esm({
       ],
       "unlinked": {
         "ios": [
-          "base44",
           "godot"
         ],
         "macos": [
           "audio_record_background",
-          "base44",
           "browser_auth",
           "godot",
           "iap",
@@ -13562,7 +13559,6 @@ var init_player_host_manifest = __esm({
           "wix_cashier"
         ],
         "android": [
-          "base44",
           "godot"
         ],
         "web": []
@@ -24886,7 +24882,7 @@ function assessPackage(header, host) {
     if (caps.length) out2.push({ reason: "missing_capabilities", missing: caps });
     const comps = missing(req.nativeComponents ?? [], host.nativeComponents);
     if (comps.length) out2.push({ reason: "missing_components", missing: comps });
-    const auth = missing(req.authProviders ?? [], host.authProviders);
+    const auth = missing((req.authProviders ?? []).filter((id) => id !== "none"), host.authProviders);
     if (auth.length) out2.push({ reason: "missing_auth_providers", missing: auth });
   }
   return out2;
@@ -28039,8 +28035,8 @@ var init_shell_capabilities_generated = __esm({
         appDir: "apps/himi-player",
         shared: true,
         extensible: false,
-        built: ["animation", "audio_record_background", "biometrics", "calendar", "calls", "camera", "clipboard", "contacts", "haptic", "iap", "location", "media_playback", "motion", "on_device_ai", "photos", "push", "speech"],
-        serves: ["animation", "app_info", "audio_record", "audio_record_background", "biometrics", "browser_auth", "calendar", "calls", "camera", "clipboard", "contacts", "file_picker", "files", "haptic", "himi_apps", "iap", "keyboard", "local_database", "location", "media_playback", "motion", "on_device_ai", "open_url", "pdf", "photos", "presigned_upload", "push", "release_control", "secure_storage", "share", "speaker_diarization", "speech", "stream", "theme", "ui", "wix_api", "wix_cashier", "wix_platform"]
+        built: ["animation", "audio_record_background", "base44", "biometrics", "calendar", "calls", "camera", "clipboard", "contacts", "haptic", "iap", "location", "media_playback", "motion", "on_device_ai", "photos", "push", "speech"],
+        serves: ["animation", "app_info", "audio_record", "audio_record_background", "base44", "biometrics", "browser_auth", "calendar", "calls", "camera", "clipboard", "contacts", "file_picker", "files", "haptic", "himi_apps", "iap", "keyboard", "local_database", "location", "media_playback", "motion", "on_device_ai", "open_url", "pdf", "photos", "presigned_upload", "push", "release_control", "secure_storage", "share", "speaker_diarization", "speech", "stream", "theme", "ui", "wix_api", "wix_cashier", "wix_platform"]
       }
     };
   }
@@ -137341,7 +137337,9 @@ async function buildFromLoaded(preloaded, dest, opts = {}) {
     playerRequirements: {
       capabilities: [...requiredCapabilities].sort(),
       nativeComponents: [...requiredNativeComponents].sort(),
-      authProviders: [config.auth.providerId].filter(Boolean).sort()
+      // `none` is the scaffold's spelling of "no auth" (`new-app --auth=none`), not a provider a
+      // host must carry — recording it blocked every such app in the Player picker (#3695).
+      authProviders: [config.auth.providerId].filter((id) => id && id !== "none").sort()
     },
     // #4091 — the app takes its Wix identity from a HOST (Spaces Lite) instead of signing in
     // itself (#4088 `hostProvided` on its auth provider). A host that lends its identity only
@@ -169976,7 +169974,8 @@ function missingClaims(requirements, offered) {
   const out2 = {};
   for (const kind of HOST_CLAIM_KINDS) {
     const has = new Set(offered[kind]);
-    out2[kind] = [...new Set(requirements[kind].filter((id) => !has.has(id)))];
+    const required3 = kind === "authProviders" ? requirements[kind].filter((id) => id !== "none") : requirements[kind];
+    out2[kind] = [...new Set(required3.filter((id) => !has.has(id)))];
   }
   return out2;
 }

package/guides/capabilities.md

@@ -22,10 +22,35 @@ himi capabilities --shell branded-lite # what that one binary serves
 
 ```
 camera  —  import from @himalaya/camera
-  exports:  capturePhoto, pickDocument, scanQR
-  declare:  config.ts `capabilities` AND each calling screen's `logicBundle.declaredCapabilities`
-  binary:   needs a NATIVE build — iOS NSCameraUsageDescription; Android android.permission.CAMERA …
-  shells:   served by owner-lite, player; `himi dist` adds it to base44, branded-lite, brandy; NOT in the demo-app binary
+  about:    Tier-5 typed binding to the platform's camera capability.
+  exports:  capturePhoto, pickDocument, scanQR, version
+  verbs:    capability.camera.capture, capability.camera.pickDocument, capability.camera.scanQR
+  declare:  config.ts `capabilities` (the app-level list a binary is built with) AND each calling screen's `logicBundle.declaredCapabilities` (the runtime gate)
+  binary:   needs a NATIVE build — iOS NSCameraUsageDescription, NSPhotoLibraryUsageDescription; Android android.permission.CAMERA, android.hardware.camera. An OTA push cannot add it.
+  module:   none — its native code is in the core runtime
+  dist:     a `himi dist` build can add it to an extensible shell
+  shells:   served by owner-lite, player; `himi dist` adds it to base44, branded-lite, brandy; NOT in the demo-app binary (a fixed binary — only a new demo-app build adds it; a content package cannot)
+  remedy:   a NEW binary (`himi dist`) — declare it in config.ts `capabilities`, or list it in `capabilityEnvelope` to build it in now and turn it on later over the air. An OTA push alone cannot add it.
+```
+
+The per-id output also answers three build questions (the JSON and MCP forms carry the same fields as
+`modules`, `components`, `distAddable` and `distAddRefusal`):
+
+- `module:` — the native module the capability links into a binary (its SwiftPM product and Gradle
+  project), and the SDUI components that need that module too (`animation` — also needed by the Lottie, Rive components).
+- `dist:` — whether a `himi dist` build can add the capability to an extensible shell, and if not,
+  why.
+- `remedy:` — what to do about it. It takes the shell you passed with `--shell` into account.
+
+A capability a build cannot add shows the refusal reason, for example (`himi capabilities live_activity`,
+abridged):
+
+```
+live_activity  —  import from @himalaya/live-activity
+  module:   live_activity (iOS HimalayaCoreLiveActivity, Android :core-runtime-live-update)
+  dist:     cannot be added at dist — live_activity needs a WidgetKit extension target in the shell's project, which a build cannot add
+  shells:   served by branded-lite, demo-app, owner-lite; NOT in the base44, brandy binary (a dist build cannot add it …); NOT in the player binary (one shared binary …)
+  remedy:   pick a shell whose binary already serves it (branded-lite, demo-app, owner-lite) — a dist build cannot add it (live_activity needs a WidgetKit extension target in the shell's project, which a build cannot add).
 ```
 
 Agents: the same data is the `himi_capabilities` MCP tool. `himi sdk <name>` also prints the

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@wix/himalaya-cli",
-  "version": "0.1361.0",
+  "version": "0.1363.0",
   "type": "module",
   "description": "himi — the Himalaya authoring CLI. Build a Tier-5 content package on your own machine, push it to the production serve as a draft, preview it on web + Himi Player, and read worker logs back — the remote dev loop. Wraps @himalaya/serve-cli for transport.",
   "keywords": [
@@ -71,5 +71,5 @@
       "artifactId": "himalaya-cli"
     }
   },
-  "falconPackageHash": "b5d19122c31f70fd18ec1b8a2e6d66e67ad3c2ffb5a4545a8bc432a1"
+  "falconPackageHash": "000d7f43b6f442daf4ff499fd016c52ee6a2b3bab69dd868db3b3d71"
 }