@wix/himalaya-cli 0.1396.0 → 0.1398.0

package/dist/authoring-runtime/node_modules/@wix/himalaya/dist/core/validation.mjs

@@ -197,7 +197,7 @@ function errorMessageFor(args) {
   return defaultMessage(failure, args.catalog);
 }
 function shouldRevealError(args) {
-  if (args.hasWorkerError) return true;
+  if (args.hasWorkerError || args.feedbackShown) return true;
   if (args.submitAttempted) return true;
   switch (resolveMode(args.rule)) {
     case "live":

package/dist/authoring-runtime/node_modules/@wix/himalaya/dist/core.mjs

@@ -9373,7 +9373,7 @@ function errorMessageFor(args) {
   return defaultMessage(failure, args.catalog);
 }
 function shouldRevealError(args) {
-  if (args.hasWorkerError) return true;
+  if (args.hasWorkerError || args.feedbackShown) return true;
   if (args.submitAttempted) return true;
   switch (resolveMode(args.rule)) {
     case "live":
@@ -11149,6 +11149,27 @@ var ICON_CATALOG = {
     "license": "Apache-2.0",
     "libVersion": "0.45.9"
   },
+  "concealed": {
+    "category": "status",
+    "path": [
+      "M15.725 13.525L14.625 12.425C15.058 11.242 14.833 10.258 13.95 9.475C13.067 8.692 12.108 8.492 11.075 8.875L9.975 7.775C10.258 7.592 10.575 7.458 10.925 7.375C11.275 7.292 11.633 7.25 12 7.25C13.183 7.25 14.188 7.663 15.013 8.488C15.838 9.313 16.25 10.317 16.25 11.5C16.25 11.867 16.204 12.229 16.113 12.588C16.021 12.946 15.892 13.258 15.725 13.525ZM18.95 16.75L17.95 15.75C18.767 15.15 19.479 14.479 20.088 13.738C20.696 12.996 21.142 12.25 21.425 11.5C20.592 9.65 19.342 8.188 17.675 7.113C16.008 6.038 14.2 5.5 12.25 5.5C11.55 5.5 10.833 5.567 10.1 5.7C9.367 5.833 8.792 5.992 8.375 6.175L7.225 5C7.808 4.733 8.554 4.5 9.463 4.3C10.371 4.1 11.258 4 12.125 4C14.508 4 16.688 4.679 18.663 6.038C20.638 7.396 22.083 9.217 23 11.5C22.567 12.567 22.008 13.542 21.325 14.425C20.642 15.308 19.85 16.083 18.95 16.75ZM20.4 22.4L16.2 18.275C15.617 18.508 14.958 18.688 14.225 18.813C13.492 18.938 12.75 19 12 19C9.567 19 7.358 18.321 5.375 16.963C3.392 15.604 1.933 13.783 1 11.5C1.333 10.633 1.796 9.788 2.388 8.963C2.979 8.138 3.7 7.35 4.55 6.6L1.4 3.45L2.45 2.375L21.375 21.3L20.4 22.4ZM5.575 7.65C4.958 8.1 4.362 8.692 3.788 9.425C3.213 10.158 2.8 10.85 2.55 11.5C3.4 13.35 4.679 14.813 6.388 15.888C8.096 16.963 10.033 17.5 12.2 17.5C12.75 17.5 13.292 17.467 13.825 17.4C14.358 17.333 14.758 17.233 15.025 17.1L13.425 15.5C13.242 15.583 13.017 15.646 12.75 15.688C12.483 15.729 12.233 15.75 12 15.75C10.833 15.75 9.833 15.342 9 14.525C8.167 13.708 7.75 12.7 7.75 11.5C7.75 11.25 7.771 11 7.813 10.75C7.854 10.5 7.917 10.275 8 10.075L5.575 7.65ZM13.2 11.2ZM10.3 12.65Z"
+    ],
+    "style": "filled",
+    "ios": {
+      "sf": "eye.slash",
+      "match": "exact"
+    },
+    "android": {
+      "material": "VisibilityOff",
+      "match": "exact"
+    },
+    "aliases": [
+      "eye_slash"
+    ],
+    "source": "material-symbols/visibility_off",
+    "license": "Apache-2.0",
+    "libVersion": "0.45.9"
+  },
   "cookie": {
     "category": "commerce",
     "path": [
@@ -12614,6 +12635,9 @@ var ICON_CATALOG = {
       "material": "Visibility",
       "match": "exact"
     },
+    "aliases": [
+      "eye"
+    ],
     "source": "material-symbols/visibility",
     "license": "Apache-2.0",
     "libVersion": "0.45.9"
@@ -12725,6 +12749,8 @@ var ICON_NORMALIZED_INDEX = {
   "clock": "clock",
   "close": "close",
   "xmark": "close",
+  "concealed": "concealed",
+  "eyeslash": "concealed",
   "cookie": "cookie",
   "copy": "copy",
   "dashboard": "dashboard",
@@ -12815,6 +12841,7 @@ var ICON_NORMALIZED_INDEX = {
   "trash": "trash",
   "undo": "undo",
   "visible": "visible",
+  "eye": "visible",
   "volume": "volume",
   "warning": "warning",
   "wifi": "wifi",
@@ -12856,6 +12883,7 @@ var ICON_NAMES = [
   "circle_fill",
   "clock",
   "close",
+  "concealed",
   "cookie",
   "copy",
   "dashboard",
@@ -12867,6 +12895,8 @@ var ICON_NAMES = [
   "error",
   "expand",
   "external_link",
+  "eye",
+  "eye_slash",
   "filter",
   "folder",
   "forward",

package/dist/authoring-runtime/node_modules/@wix/himalaya/dist/screens.mjs

@@ -1,3 +1,117 @@
+// ../../core/ts/src/validation.ts
+var EMAIL_RE = /^[A-Za-z0-9._%+-]+@[A-Za-z0-9-]+(\.[A-Za-z0-9-]+)*\.[A-Za-z]{2,}$/;
+var URL_HOST_RE = /^[A-Za-z0-9-]+(\.[A-Za-z0-9-]+)*(:[0-9]+)?$/;
+var INTEGER_RE = /^[+-]?[0-9]+$/;
+var NUMBER_RE = /^[+-]?([0-9]+(\.[0-9]+)?|\.[0-9]+)$/;
+function isEmail(value) {
+  if (!EMAIL_RE.test(value)) return false;
+  if (value.includes("..")) return false;
+  const local = value.slice(0, value.indexOf("@"));
+  return !local.startsWith(".") && !local.endsWith(".");
+}
+function isPhone(value) {
+  let s2 = "";
+  for (const ch of value) {
+    if (" -().\xA0	".includes(ch)) continue;
+    s2 += ch;
+  }
+  if (s2.startsWith("+")) s2 = s2.slice(1);
+  if (s2.length < 7 || s2.length > 15) return false;
+  for (const ch of s2) if (ch < "0" || ch > "9") return false;
+  return true;
+}
+function isUrl(value) {
+  if (/\s/.test(value)) return false;
+  let rest = value;
+  const lower = value.toLowerCase();
+  if (lower.startsWith("http://")) rest = value.slice(7);
+  else if (lower.startsWith("https://")) rest = value.slice(8);
+  else if (value.includes("://")) return false;
+  if (rest.length === 0) return false;
+  let end = rest.length;
+  for (let i = 0; i < rest.length; i++) {
+    const c = rest[i];
+    if (c === "/" || c === "?" || c === "#") {
+      end = i;
+      break;
+    }
+  }
+  const hostPort = rest.slice(0, end);
+  if (!URL_HOST_RE.test(hostPort)) return false;
+  const host = hostPort.split(":")[0];
+  if (host === "localhost") return true;
+  const dot = host.lastIndexOf(".");
+  if (dot < 1) return false;
+  const tld = host.slice(dot + 1);
+  if (tld.length < 2) return false;
+  for (const ch of tld) {
+    const isAlpha = ch >= "A" && ch <= "Z" || ch >= "a" && ch <= "z";
+    if (!isAlpha) return false;
+  }
+  return true;
+}
+function parseNumeric(value) {
+  if (!NUMBER_RE.test(value)) return null;
+  const n = Number(value);
+  return Number.isFinite(n) ? n : null;
+}
+function matchesType(type, value) {
+  switch (type) {
+    case "email":
+      return isEmail(value);
+    case "phone":
+      return isPhone(value);
+    case "url":
+      return isUrl(value);
+    case "number":
+      return NUMBER_RE.test(value);
+    case "integer":
+      return INTEGER_RE.test(value);
+    // Additive decoding: an unknown type is NOT a failure. A renderer that has
+    // not shipped a new type yet must let the value through rather than block a
+    // form it cannot understand — the server still re-validates on submit.
+    default:
+      return true;
+  }
+}
+function validate(rule, rawValue) {
+  if (!rule) return null;
+  const value = rawValue ?? "";
+  if (value.length === 0) {
+    return rule.required === true ? { rule: "required" } : null;
+  }
+  if (rule.type && !matchesType(rule.type, value)) {
+    return { rule: "type", type: rule.type };
+  }
+  if (rule.regex) {
+    let ok;
+    try {
+      ok = new RegExp(`^(?:${rule.regex})$`).test(value);
+    } catch {
+      ok = true;
+    }
+    if (!ok) return { rule: "regex" };
+  }
+  if (typeof rule.minLength === "number" && rule.minLength > 0 && value.length < rule.minLength) {
+    return { rule: "minLength", limit: rule.minLength };
+  }
+  if (typeof rule.maxLength === "number" && rule.maxLength > 0 && value.length > rule.maxLength) {
+    return { rule: "maxLength", limit: rule.maxLength };
+  }
+  if (typeof rule.minValue === "number" || typeof rule.maxValue === "number") {
+    const n = parseNumeric(value);
+    if (n !== null) {
+      if (typeof rule.minValue === "number" && n < rule.minValue) {
+        return { rule: "minValue", limit: rule.minValue };
+      }
+      if (typeof rule.maxValue === "number" && n > rule.maxValue) {
+        return { rule: "maxValue", limit: rule.maxValue };
+      }
+    }
+  }
+  return null;
+}
+
 // ../../core/sdk/state/src/index.ts
 function defineService(name, def) {
   const himalaya = globalThis.himalaya;
@@ -9,6 +123,179 @@ function defineService(name, def) {
   return himalaya.defineService(name, def);
 }
 
+// ../../stdlib/flows/auth/src/copy.generated.ts
+var copy_generated_default = {
+  "auth.gate.title": "Welcome",
+  "auth.gate.subtitle": "Sign in to continue",
+  "auth.gate.signIn": "Sign In",
+  "auth.gate.createAccount": "Create account",
+  "auth.gate.resetPassword": "Reset password",
+  "auth.gate.verifyTitle": "Verify it's you",
+  "auth.gate.sendResetLink": "Send reset link",
+  "auth.gate.verify": "Verify",
+  "auth.gate.continue": "Continue",
+  "auth.gate.forgotPassword": "Forgot password?",
+  "auth.gate.backToSignIn": "Back to sign in",
+  "auth.gate.continueWith": "Continue with {provider}",
+  "auth.gate.sendCodeVia": "Send code via",
+  "auth.gate.resendCode": "Didn't get it? Resend code",
+  "auth.gate.field.code": "Verification code",
+  "auth.gate.field.email": "Email",
+  "auth.gate.field.name": "Name",
+  "auth.gate.field.password": "Password",
+  "auth.gate.field.captcha": "reCAPTCHA token (account only)",
+  "auth.gate.password.show": "Show password",
+  "auth.gate.password.hide": "Hide password",
+  "auth.gate.notice.codeResent": "A new code was sent.",
+  "auth.gate.notice.codeSentVia": "Code sent via {method}.",
+  "auth.gate.notice.resetSent": "If that email is registered, a reset link is on its way.",
+  "auth.biometric.unlockWith": "Unlock with {method}",
+  "auth.biometric.orPassword": "or sign in with your password",
+  "auth.biometric.label.faceId": "Face ID",
+  "auth.biometric.label.touchId": "Touch ID",
+  "auth.biometric.label.faceUnlock": "Face Unlock",
+  "auth.biometric.label.fingerprint": "Fingerprint",
+  "auth.biometric.label.generic": "biometrics",
+  "auth.biometric.prompt.usePassword": "Use password",
+  "auth.biometric.error.unavailable": "Biometric unlock isn't available on this device.",
+  "auth.biometric.error.cancelled": "Biometric unlock was cancelled.",
+  "auth.biometric.error.notEnrolled": "No Face ID / Touch ID is enrolled.",
+  "auth.biometric.error.failed": "Biometric unlock failed.",
+  "auth.biometric.error.invalidated": "Biometrics changed; sign in again.",
+  "auth.biometric.prompt.unlock": "Unlock your account",
+  "auth.biometric.prompt.disable": "Confirm to turn off biometric unlock",
+  "auth.biometric.enrollTitle": "Unlock with {method}?",
+  "auth.biometric.enrollMessage": "Use {method} instead of your password the next time you open the app.",
+  "auth.biometric.enrollAccept": "Use {method}",
+  "auth.biometric.enrollDecline": "Not now",
+  "auth.error.invalidCredentials": "Wrong email or password.",
+  "auth.error.accountNotFound": "We couldn't find an account for that email.",
+  "auth.error.emailInUse": "That email is already registered.",
+  "auth.error.verificationRequired": "Additional verification is required.",
+  "auth.error.verifyEmail": "Check your email to verify your account, then sign in.",
+  "auth.error.incorrectCode": "Incorrect code.",
+  "auth.error.network": "Network error.",
+  "auth.error.visitorToken": "Could not obtain a visitor token.",
+  "auth.error.noSessionToken": "Login succeeded but no session token.",
+  "auth.error.authSession": "Could not create an auth session.",
+  "auth.error.signInIncomplete": "Sign-in did not complete.",
+  "auth.error.tokenExchange": "Token exchange failed.",
+  "auth.error.noRedirect": "No auth redirect.",
+  "auth.error.registrationFailed": "Registration failed ({code}).",
+  "auth.error.twoFactorRequired": "Two-factor verification required.",
+  "auth.error.noPendingVerification": "No pending verification.",
+  "auth.error.verificationCancelled": "Verification cancelled.",
+  "auth.error.biometricSignInFirst": "Sign in before enabling biometric unlock.",
+  "auth.error.noSessionToProtect": "No session to protect.",
+  "auth.error.biometricEnableFailed": "Couldn't enable biometric unlock.",
+  "auth.error.biometricUnlockFailed": "Couldn't unlock. Sign in with your password.",
+  "auth.error.biometricsUnavailable": "Biometrics unavailable.",
+  "auth.error.noBiometricsEnrolled": "No biometrics enrolled.",
+  "auth.error.biometricNotEnabled": "Biometric unlock not enabled.",
+  "auth.error.unsupported": "Unsupported.",
+  "auth.error.methodUnavailable": "This sign-in method isn't available.",
+  "auth.error.verificationRequiredRetry": "Additional verification is required. Please try again.",
+  "auth.error.networkRetry": "Network error. Please try again.",
+  "auth.error.signInCancelled": "Sign-in was cancelled.",
+  "auth.error.genericRetry": "Something went wrong. Please try again.",
+  "auth.error.biometricLocked": "Locked: unlock with biometrics first.",
+  "auth.error.googleNoPresenter": "No presenter for Google sign-in.",
+  "auth.error.googleNoToken": "Google sign-in returned no id_token.",
+  "auth.error.appleNoToken": "Apple sign-in returned no token.",
+  "auth.error.memberSettingsUnreadable": "Could not read the site's member settings.",
+  "auth.error.memberSettingsMalformed": "Member settings response was not a JSON object.",
+  "auth.biometric.error.noCipher": "No cipher.",
+  "auth.error.unlockOvertaken": "Unlock overtaken by a sign-in or sign-out.",
+  "auth.gate.code.show": "Show code",
+  "auth.gate.code.hide": "Hide code",
+  "auth.feedback.invalid_input": "Check the highlighted fields and try again.",
+  "auth.feedback.invalid_credentials": "The email or password is incorrect. Check your details or reset your password.",
+  "auth.feedback.registration_failed": "We could not create an account. Check your details, or try signing in or resetting your password.",
+  "auth.feedback.invalid_code": "That code is invalid or has expired. Check the code or request a new one.",
+  "auth.feedback.expired_code": "That code has expired. Request a new code and try again.",
+  "auth.feedback.totp": "That code did not work. Enter the current code from your authenticator app.",
+  "auth.feedback.network": "We could not connect. Check your connection and try again.",
+  "auth.feedback.rate_limited": "Too many attempts. Wait a few minutes and try again.",
+  "auth.feedback.unavailable": "This action is not available here. Use a supported sign-in method or open the app.",
+  "auth.feedback.cancelled": "Sign-in was cancelled. Try again when you are ready.",
+  "auth.feedback.verification_required": "Complete verification to continue, then try again.",
+  "auth.feedback.unknown": "We could not complete this action. Please try again.",
+  "auth.validation.emailRequired": "Enter your email address.",
+  "auth.validation.emailInvalid": "Enter a valid email address.",
+  "auth.validation.passwordMinimum": "Use at least 8 characters for your new password.",
+  "auth.validation.passwordRequired": "Enter your password.",
+  "auth.validation.codeRequired": "Enter your verification code.",
+  "auth.validation.nameRequired": "Enter your name.",
+  "auth.feedback.busy": "Please wait\u2026",
+  "auth.gate.verify.title": "Verify your email",
+  "auth.gate.verify.body": "Enter the confirmation code sent to your email to finish signing in.",
+  "auth.gate.cancel": "Cancel",
+  "auth.gate.codePlaceholder": "Confirmation code"
+};
+
+// ../../stdlib/flows/auth/src/feedback.ts
+var failureKeys = {
+  invalid_input: "auth.feedback.invalid_input",
+  invalid_credentials: "auth.feedback.invalid_credentials",
+  registration_failed: "auth.feedback.registration_failed",
+  invalid_code: "auth.feedback.invalid_code",
+  expired_code: "auth.feedback.expired_code",
+  network: "auth.feedback.network",
+  rate_limited: "auth.feedback.rate_limited",
+  unavailable: "auth.feedback.unavailable",
+  cancelled: "auth.feedback.cancelled",
+  verification_required: "auth.feedback.verification_required",
+  unknown: "auth.feedback.unknown"
+};
+var codes = new Set(Object.keys(failureKeys));
+var aliases = {
+  invalidCredentials: "invalid_credentials",
+  emailInUse: "registration_failed",
+  unsupported: "unavailable",
+  recaptchaRequired: "verification_required",
+  needsTwoFactor: "verification_required",
+  INVALID_CREDENTIALS: "invalid_credentials",
+  EMAIL_IN_USE: "registration_failed",
+  UNSUPPORTED: "unavailable",
+  NETWORK: "network",
+  CANCELLED: "cancelled",
+  RECAPTCHA_REQUIRED: "verification_required",
+  INVALID_CODE: "invalid_code",
+  EXPIRED_CODE: "expired_code",
+  TOO_MANY_REQUESTS: "rate_limited"
+};
+function authMessage(key, translate) {
+  const translated = translate?.(key);
+  return translated && translated !== key ? translated : copy_generated_default[key] ?? copy_generated_default["auth.feedback.unknown"];
+}
+function authFailure(raw, operation = "signIn", translate) {
+  const value = raw && typeof raw === "object" ? raw : {};
+  const payload = value.payload && typeof value.payload === "object" ? value.payload : value;
+  const named = payload.code ?? value.code ?? value.kind;
+  const status = value.statusCode ?? value.status;
+  let code = codes.has(named) ? named : aliases[named] ?? "unknown";
+  if (status === 429) code = "rate_limited";
+  else if ([404, 405, 501].includes(status)) code = "unavailable";
+  else if ([401, 403].includes(status) && operation === "signIn") code = "invalid_credentials";
+  else if (status === 0 || status >= 500 || value.name === "TypeError" || value.name === "TimeoutError") code = "network";
+  if (operation === "verify" && code === "invalid_credentials") code = "invalid_code";
+  if (operation === "register" && code === "invalid_credentials") code = "registration_failed";
+  return { code, reason: authMessage(failureKeys[code], translate) };
+}
+function identityErrors(input, operation, requireName = false) {
+  const errors = {};
+  if (operation === "verify") {
+    if (!input.code?.trim()) errors.code = "auth.validation.codeRequired";
+    return errors;
+  }
+  const email = input.email?.trim() ?? "";
+  if (!email) errors.email = "auth.validation.emailRequired";
+  else if (validate({ type: "email" }, email)) errors.email = "auth.validation.emailInvalid";
+  if ((operation === "signIn" || operation === "register") && !input.password?.length) errors.password = "auth.validation.passwordRequired";
+  if (operation === "register" && requireName && !input.name?.trim()) errors.name = "auth.validation.nameRequired";
+  return errors;
+}
+
 // ../../stdlib/flows/auth/src/index.ts
 async function dispatch(handlerId, params) {
   const fn = globalThis.himalaya?.dispatch;
@@ -23,12 +310,6 @@ function emailOf(raw) {
   const email = direct?.email ?? wrapped?.payload?.email;
   return typeof email === "string" ? email : "";
 }
-function reasonOf(raw, fallback) {
-  const direct = raw;
-  const wrapped = raw;
-  const err = direct?.error ?? wrapped?.payload?.error;
-  return typeof err === "string" && err ? err : fallback;
-}
 function reportedOk(raw) {
   const status = raw?.status;
   if (typeof status !== "string") return true;
@@ -49,9 +330,9 @@ async function attempt(action2, params, failureText, opts) {
   try {
     raw = await dispatch(id(opts, action2), params);
   } catch (e) {
-    return { ok: false, reason: e?.message || failureText };
+    return { ok: false, ...authFailure(e, action2 === "registerDirect" ? "register" : "signIn") };
   }
-  if (!reportedOk(raw)) return { ok: false, reason: reasonOf(raw, failureText) };
+  if (!reportedOk(raw) || raw?.error || raw?.payload?.error) return { ok: false, ...authFailure(raw, action2 === "registerDirect" ? "register" : "signIn") };
   const state = await authState(opts);
   if (!state.signedIn) {
     return { ok: false, reason: failureText };
@@ -59,24 +340,24 @@ async function attempt(action2, params, failureText, opts) {
   return { ok: true, email: state.email };
 }
 function signInDirect(email, password, opts) {
-  if (!email || !password) {
-    return Promise.resolve({ ok: false, reason: "Enter your email and password." });
+  if (Object.keys(identityErrors({ email: email.trim(), password }, "signIn")).length) {
+    return Promise.resolve({ ok: false, code: "invalid_input", reason: authMessage("auth.feedback.invalid_input") });
   }
   return attempt(
     "signInDirect",
-    { email, password },
+    { email: email.trim(), password },
     "Sign-in did not complete. Please try again.",
     opts
   );
 }
 function registerMember(email, password, profile, opts) {
-  if (!email || !password) {
-    return Promise.resolve({ ok: false, reason: "Enter your email and password." });
+  if (Object.keys(identityErrors({ email: email.trim(), password }, "register")).length) {
+    return Promise.resolve({ ok: false, code: "invalid_input", reason: authMessage("auth.feedback.invalid_input") });
   }
   return attempt(
     "registerDirect",
     {
-      email,
+      email: email.trim(),
       password,
       ...profile?.firstName ? { firstName: profile.firstName } : {},
       ...profile?.lastName ? { lastName: profile.lastName } : {}
@@ -1357,21 +1638,21 @@ function toPayment(raw, status) {
   const ids = { paymentId: raw.id, appId: raw.appId, memberId: raw.memberId, wixTransactionId: raw.wixTransactionId };
   return { ...ids, status, ...withoutUndefined(optional) };
 }
-function classifyFailure(error, operation, codes) {
+function classifyFailure(error, operation, codes2) {
   const message = messageOf(error);
   if (BRIDGE_REFUSAL.test(message)) return failure(operation, "notEnabled");
   if (PRINCIPAL_CHANGED.test(message)) return failure(operation, "sessionChanged");
   const http = /^HTTP (\d{3})(?: \[([^\]]+)\])?:/.exec(message);
   if (!http) return failure(operation, "unavailable");
-  return classifyHttp({ operation, codes, httpStatus: Number(http[1]), code: http[2] ?? "" });
+  return classifyHttp({ operation, codes: codes2, httpStatus: Number(http[1]), code: http[2] ?? "" });
 }
 function failure(operation, kind) {
   return { status: "failed", operation, kind };
 }
 function classifyHttp(refusal) {
-  const { operation, codes, httpStatus, code } = refusal;
+  const { operation, codes: codes2, httpStatus, code } = refusal;
   if (code === "PRINCIPAL_CHANGED") return failure(operation, "sessionChanged");
-  if (isOneOf(codes, code)) return { status: "failed", operation, kind: "application", code, httpStatus };
+  if (isOneOf(codes2, code)) return { status: "failed", operation, kind: "application", code, httpStatus };
   return { status: "failed", operation, kind: kindForStatus(httpStatus, code), httpStatus };
 }
 function kindForStatus(httpStatus, code) {
@@ -1400,8 +1681,8 @@ function withoutUndefined(value) {
   }
   return kept;
 }
-function isOneOf(codes, code) {
-  return codes.includes(code);
+function isOneOf(codes2, code) {
+  return codes2.includes(code);
 }
 function ownValue(table, key) {
   return typeof key === "string" && Object.prototype.hasOwnProperty.call(table, key) ? table[key] : void 0;
@@ -3230,6 +3511,81 @@ var text = (id2, value, style = "body") => node(id2, "Text", { text: value, styl
 var vstack = (id2, children, spacing = 12, alignment = "leading") => node(id2, "VStack", { spacing, alignment, children });
 var button = (id2, title, action2, style = "primary") => node(id2, "Button", { title, style, fullWidth: true, action: action2 });
 var openScreen = (screenId) => ({ actionId: "himi.open", params: { screenId } });
+function detailedHeader(opts) {
+  const id2 = opts.id ?? "detailed_header";
+  const cardChildren = [];
+  if (opts.logoUrl || opts.locationLabel) {
+    const identity = [];
+    if (opts.logoUrl) {
+      identity.push(node(`${id2}.logo`, "Image", {
+        url: opts.logoUrl,
+        width: 56,
+        height: 56,
+        shape: "rounded",
+        contentMode: "fill",
+        contentDescription: opts.title
+      }));
+    }
+    if (opts.locationLabel) {
+      if (opts.locationAction) {
+        identity.push(node(`${id2}.locationGroup`, "HStack", {
+          spacing: 8,
+          alignment: "center",
+          children: [
+            text(`${id2}.location`, opts.locationLabel, "caption"),
+            node(`${id2}.location.action`, "Button", {
+              title: opts.locationAction.label,
+              style: opts.locationAction.style ?? "plain",
+              fullWidth: false,
+              action: opts.locationAction.action
+            })
+          ]
+        }));
+      } else {
+        identity.push(text(`${id2}.location`, opts.locationLabel, "caption"));
+      }
+    }
+    cardChildren.push(node(`${id2}.identity`, "HStack", { spacing: 12, alignment: "center", children: identity }));
+  }
+  if (opts.memberCaption || opts.memberAvatarsPath || opts.memberAvatars?.length) {
+    cardChildren.push(node(`${id2}.members`, "AvatarStrip", {
+      size: 36,
+      maxVisible: 5,
+      ...opts.memberCaption ? { caption: opts.memberCaption } : {},
+      ...opts.memberAvatarsPath ? { avatarsPath: opts.memberAvatarsPath } : {},
+      ...!opts.memberAvatarsPath && opts.memberAvatars ? { avatars: opts.memberAvatars } : {}
+    }));
+  }
+  for (const [key, action2] of [
+    ["invite", opts.inviteAction],
+    ["primary", opts.primaryAction],
+    ["about", opts.aboutAction]
+  ]) {
+    if (action2) cardChildren.push(button(`${id2}.${key}`, action2.label, action2.action, action2.style ?? (key === "primary" ? "primary" : "secondary")));
+  }
+  const card = node(`${id2}.card`, "VStack", {
+    spacing: 14,
+    alignment: "leading",
+    children: cardChildren
+  });
+  card.modifiers = {
+    background: { token: "surfacePrimary" },
+    cornerRadius: 24,
+    padding: { leading: 20, trailing: 20, top: 20, bottom: 20 },
+    offsetY: -20,
+    fillMaxWidth: true
+  };
+  const fixed = opts.collapsible === false;
+  return node(id2, "CollapsingHeader", {
+    ...opts.imageUrl ? { imageUrl: opts.imageUrl } : {},
+    title: opts.title,
+    ...opts.subtitle ? { subtitle: opts.subtitle } : {},
+    expandedHeight: fixed ? opts.expandedHeight ?? 240 : opts.expandedHeight ?? 280,
+    collapsedHeight: fixed ? opts.expandedHeight ?? 240 : opts.collapsedHeight ?? 68,
+    children: [...cardChildren.length ? [card] : [], ...opts.content ?? []],
+    parallaxFactor: 0.45
+  });
+}
 function envelope(screenId, title, root, logic) {
   return {
     screenId,
@@ -3807,6 +4163,7 @@ export {
   checkoutScreen,
   createAuthService,
   createCheckoutService,
+  detailedHeader,
   entitlement
 };
 //# sourceMappingURL=screens.mjs.map