@wix/himalaya-cli 0.1366.0 → 0.1368.0

package/dist/cli.mjs

@@ -7706,6 +7706,7 @@ function resolveTranslation(value, catalog3, sourceCatalog) {
 var BINDING_SIGILS, BINDING_SIGIL_RE, TRANSLATION_PREFIX, TRANSLATION_KEY_RE;
 var init_bindings = __esm({
   "../../core/ts/src/bindings.ts"() {
+    "use strict";
     BINDING_SIGILS = ["service", "flag", "item", "t"];
     BINDING_SIGIL_RE = new RegExp(
       `^\\$(?:${BINDING_SIGILS.filter((s2) => s2 !== "t").join("|")})\\b|^\\$t:`
@@ -35370,6 +35371,16 @@ function loadSupervisorRegistry() {
 function isPlayerHost(appName2) {
   return appName2 === PLAYER_APP_ID || process.env.HIMALAYA_DEV_MULTI_APP === "1";
 }
+function tenantsOf(hostApp) {
+  if (!Object.prototype.hasOwnProperty.call(HOSTED_TENANTS, hostApp)) return [];
+  const fixed = HOSTED_TENANTS[hostApp];
+  const extra = (process.env.HIMALAYA_DEV_HOSTED_TENANTS ?? "").split(",").map((a2) => a2.trim()).filter((a2) => /^[a-z0-9][a-z0-9._-]{0,127}$/i.test(a2) && a2 !== hostApp && a2 !== PLAYER_APP_ID);
+  return extra.length ? [...fixed, ...extra.filter((a2) => !fixed.includes(a2))] : fixed;
+}
+function optedInTenant(tenant) {
+  if (Object.values(HOSTED_TENANTS).some((t2) => t2.includes(tenant))) return false;
+  return (process.env.HIMALAYA_DEV_HOSTED_TENANTS ?? "").split(",").some((a2) => a2.trim() === tenant);
+}
 function isTenantHost(appName2) {
   return !!appName2 && Object.prototype.hasOwnProperty.call(HOSTED_TENANTS, appName2);
 }
@@ -35385,7 +35396,7 @@ function resolveTenantBase(tenant, registry2 = loadSupervisorRegistry) {
       if (running?.status === "running" && running.port) port = running.port;
     } catch {
     }
-    port ??= ledgerDevServerPort(tenant);
+    if (!optedInTenant(tenant)) port ??= ledgerDevServerPort(tenant);
     if (port) return `http://127.0.0.1:${port}`;
   }
   return resolveServeBase();
@@ -35410,7 +35421,7 @@ function tenantPrefixed(url, hostApp, method = "GET") {
     return null;
   }
   if (!normalized.startsWith("/v1/") || normalized !== path2 || isTenantAdminPath(normalized)) return null;
-  return HOSTED_TENANTS[hostApp].includes(tenant) ? { tenant, url: tenantUrl } : null;
+  return tenantsOf(hostApp).includes(tenant) ? { tenant, url: tenantUrl } : null;
 }
 function forwardedBaseUrl(req) {
   if (!LOOPBACK_PEERS.has(req.socket?.remoteAddress ?? "")) return null;
@@ -35492,7 +35503,9 @@ function tenantHostPlaneRead(url, headers2, hostApp, method = "GET") {
   if (path2 === "/v1/release/current") {
     const app = new URLSearchParams(query).get("app")?.trim();
     if (!app || app === hostApp || HOSTED_TENANTS[hostApp].includes(app)) return null;
-    if (targetTenant(url, headers2, hostApp) !== null) return null;
+    const hdr = headers2["x-himalaya-app"];
+    const headerApp = (Array.isArray(hdr) ? hdr[0] : hdr)?.trim();
+    if (headerApp && tenantsOf(hostApp).includes(headerApp)) return null;
     return resolveServeBase() || null;
   }
   return null;
@@ -35512,7 +35525,7 @@ function targetTenant(url, headers2, hostApp) {
   }
   if (!app) return null;
   if (app === hostApp || app === PLAYER_APP_ID) return null;
-  if (hostApp && isTenantHost(hostApp) && !HOSTED_TENANTS[hostApp].includes(app)) return null;
+  if (hostApp && isTenantHost(hostApp) && !tenantsOf(hostApp).includes(app)) return null;
   return app;
 }
 function shouldServeFromPlane(url, headers2, hostApp) {
@@ -132562,6 +132575,8 @@ function createDevServer(opts = {}) {
         await maybeReseedNetMocks(state);
         if (url.startsWith("/__dev/")) return await handleDev(req, res, state);
         if (isTenantHost(state.appName)) {
+          const planeRead = tenantHostPlaneRead(url, req.headers, state.appName, req.method);
+          if (planeRead) return await proxyToServe(planeRead, req, res);
           const prefixed = tenantPrefixed(url, state.appName, req.method);
           const tenant = prefixed?.tenant ?? (shouldServeFromPlane(url, req.headers, state.appName) && !isTenantAdminPath(url) ? targetTenant(url, req.headers, state.appName) : null);
           if (tenant) {
@@ -132579,8 +132594,6 @@ function createDevServer(opts = {}) {
               forwardAs: clientHost ? { host: clientHost, prefix: `${TENANT_PREFIX}${encodeURIComponent(tenant)}` } : void 0
             });
           }
-          const planeRead = tenantHostPlaneRead(url, req.headers, state.appName, req.method);
-          if (planeRead) return await proxyToServe(planeRead, req, res);
         }
         if (url.split("?")[0] === "/v1/app-icon" && req.method === "GET") {
           const iconApp = new URLSearchParams(url.split("?")[1] ?? "").get("app") ?? "";
@@ -170121,19 +170134,42 @@ function decideSiteApp(input) {
     ...input.installedVersion ? { installedVersion: input.installedVersion } : {}
   });
   if (!verdict.ok) return fallback(picked, verdict.reason);
-  if (!(input.hostable ?? NATIVELY_HOSTABLE_APPS).includes(picked)) {
+  const ungranted = req.requirements.capabilities.filter((c2) => !HOSTED_APP_CAPABILITIES.includes(c2));
+  if ((input.hostable ?? NATIVELY_HOSTABLE_APPS) === "any" && ungranted.length) {
+    return fallback(picked, `This Spaces build does not grant a member app ${ungranted.join(", ")} yet (${picked} declares it)`);
+  }
+  const hostable = input.hostable ?? NATIVELY_HOSTABLE_APPS;
+  if (hostable !== "any" && !hostable.includes(picked)) {
     return fallback(picked, `This Spaces build cannot host a custom member app yet (${picked} is compatible)`);
   }
   return { appId: picked, source: "picked" };
 }
-var DEFAULT_SITE_APP, NATIVELY_HOSTABLE_APPS, APP_ID3;
+var DEFAULT_SITE_APP, NATIVELY_HOSTABLE_APPS, HOSTED_APP_CAPABILITIES, APP_ID3;
 var init_site_app = __esm({
   "../../apps/himi-spaces-lite/site-app.ts"() {
     init_host_compatibility();
     init_registry_app_normalize();
     init_site_open();
     DEFAULT_SITE_APP = HOSTED_MEMBER_APP;
-    NATIVELY_HOSTABLE_APPS = [DEFAULT_SITE_APP];
+    NATIVELY_HOSTABLE_APPS = "any";
+    HOSTED_APP_CAPABILITIES = [
+      "animation",
+      "app_info",
+      "clipboard",
+      "file_picker",
+      "haptics",
+      "keyboard",
+      "media_playback",
+      "motion",
+      "on_device_ai",
+      "open_url",
+      "pdf",
+      "share",
+      "stream",
+      "theme",
+      "ui",
+      "wix_api"
+    ];
     APP_ID3 = /^[a-z0-9][a-z0-9._-]{0,127}$/i;
   }
 });
@@ -174440,7 +174476,7 @@ var ServeCliClient = class {
     const headers2 = { ...this.ctrlHeaders(), ...gzip ? { "content-encoding": "gzip" } : {} };
     const res = await this.request("control", "POST", "/v1/admin/release", { rawBody: bytes2, headers: headers2 });
     if (gzip && res.status === 400 && res.json?.error === "bad_json") {
-      const json6 = { error: "compressed_publish_unsupported", hint: "this body is over the plain publish cap, and this serve plane does not accept a compressed one yet; it takes a serve deploy carrying gzip publish bodies" };
+      const json6 = { code: "compressed_publish_unsupported", error: "compressed_publish_unsupported", hint: "this body is over the plain publish cap, and the plane did not accept it compressed: either the plane predates gzip publish bodies (it needs a serve deploy), or this is a self-serve credential, which keeps the plain 8 MB cap" };
       return { ...res, json: json6, text: JSON.stringify(json6) };
     }
     return res;
@@ -179820,7 +179856,8 @@ ${doNow.map((l2) => `  ${l2}`).join("\n")}`);
             }
             if (!r2.ok) {
               const hint = releaseIdExistsHint(r2.status, r2.json);
-              print({ ok: false, status: r2.status, body: r2.json ?? r2.text, ...hint ? { hint } : {} });
+              const code = r2.json?.code === "compressed_publish_unsupported" ? "compressed_publish_unsupported" : void 0;
+              print({ ok: false, ...code ? { code } : {}, status: r2.status, body: r2.json ?? r2.text, ...hint ? { hint } : {} });
               return 1;
             }
             if (sendPayload.sourceGz && r2.json?.template !== true) {

package/guides/himi-json-output.md

@@ -106,6 +106,15 @@ failure codes. A forced push still follows the existing override rules.
 | `config_not_applied` | `--content` was given, but the binding is not in its `config.ts` (no config file, a dynamic or symlinked config, an edit `himi validate` rolled back, or no validator); the `config` report or `note` says what to add by hand. |
 | `connect_failed` | An otherwise unclassified error stopped connect (for example an unreadable manifest, or a failed `--out` write). The original message is preserved. |
 
+## `himi template publish` codes
+
+`template publish` is still mostly legacy. It carries one code so far, on the path that sends the
+whole body gzip-encoded because it is over the plain 8 MB cap:
+
+| Code | Meaning |
+|---|---|
+| `compressed_publish_unsupported` | The publish body went out gzipped and the publishing service did not accept it compressed, so it read the bytes as malformed JSON. Either the service does not accept compressed bodies yet, or the credential is a self-serve one, which keeps the 8 MB uncompressed limit. Nothing was written. |
+
 ## `himi site member-app` codes
 
 `himi site member-app set|clear|show <site>` prints one envelope. A refusal from the publishing service
@@ -126,10 +135,12 @@ keeps the service's own `error` in `serverError` and its HTTP `status`; the CLI
 
 `show` succeeds with `opens` (what members get: the picked app or `himi-branded-lite`), `compatible`
 (whether the picked release fits the Spaces host manifest, judged with `checkHostCompatibility`), and —
-whenever members get Branded Lite instead of the pick — `reason`. `opens` is Spaces' own decision, so a
-compatible pick that this Spaces build cannot host yet reports `compatible: true` with `opens:
-"himi-branded-lite"` and that reason. An incompatible pick is not a failure: it is `ok: true` with
-`compatible: false`.
+whenever members get Branded Lite instead of the pick — `reason`. `opens` is Spaces' own decision: a
+compatible pick reports `compatible: true` with `opens` naming that app — except one that needs a
+capability the hosted-app sandbox does not grant (on-device stores such as `local_database`,
+`secure_storage` and `files`, or push, purchases, release control and the like), which reports
+`compatible: true` with `opens: "himi-branded-lite"` and that reason. Read `opens`, not `compatible`, for
+what members get. An incompatible pick is not a failure: it is `ok: true` with `compatible: false`.
 
 ## Follow-ups
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@wix/himalaya-cli",
-  "version": "0.1366.0",
+  "version": "0.1368.0",
   "type": "module",
   "description": "himi — the Himalaya authoring CLI. Build a Tier-5 content package on your own machine, push it to the production serve as a draft, preview it on web + Himi Player, and read worker logs back — the remote dev loop. Wraps @himalaya/serve-cli for transport.",
   "keywords": [
@@ -71,5 +71,5 @@
       "artifactId": "himalaya-cli"
     }
   },
-  "falconPackageHash": "2252ba70fda9f2dd25a520a0ec7d75a7d716dcdcb74564bf1f929780"
+  "falconPackageHash": "b0dba7f9b4c5184e704a739e1f459e4930cc9b446af7d0866d9038ae"
 }