@wix/himalaya-cli 0.1399.0 → 0.1401.0

package/dist/authoring-runtime/node_modules/@wix/himalaya/dist/wix-auth.mjs

@@ -35,12 +35,13 @@ function dualDomainAuthorizeUrls(clientIds, redirectUri, opts = {}, endpoint = O
 
 // ../../stdlib/auth-providers/wix/src/native-engine.ts
 var NativeAuthError = class extends Error {
-  constructor(kind, message, twoFAToken, twoFAMethod, twoFAMethods) {
+  constructor(kind, message, twoFAToken, twoFAMethod, twoFAMethods, verificationId) {
     super(message);
     this.kind = kind;
     this.twoFAToken = twoFAToken;
     this.twoFAMethod = twoFAMethod;
     this.twoFAMethods = twoFAMethods;
+    this.verificationId = verificationId;
     this.name = "NativeAuthError";
   }
 };
@@ -138,12 +139,15 @@ var WixNativeAuthEngine = class {
     if (payload.twoFAToken && json.success !== true) {
       const current = payload.currentTwoFAMethod ?? "sms";
       const methods = payload.enabledTwoFAMethods ?? [current];
+      const id = payload.verificationId;
+      const verificationId = (typeof id === "string" || typeof id === "number") && /^\d+$/.test(String(id)) ? String(id) : void 0;
       throw new NativeAuthError(
         "needsTwoFactor",
         "Two-factor verification required.",
         payload.twoFAToken,
         current,
-        methods
+        methods,
+        verificationId
       );
     }
     if (json.success !== true || !payload.guid) {
@@ -482,6 +486,15 @@ var WIX_SENSITIVE_KEYS = [
   "setcookie",
   // captcha / passwords
   "password",
+  "currentpassword",
+  "newpassword",
+  "confirmpassword",
+  "oldpassword",
+  // T5 account-settings state uses passwordCurrent/passwordNew/passwordConfirm;
+  // redact those camel-case state keys too if state snapshots reach the gateway.
+  "passwordcurrent",
+  "passwordnew",
+  "passwordconfirm",
   "recaptcha",
   "recaptcharesponsefield",
   "pxaccesstoken"
@@ -905,10 +918,12 @@ function classifyAuthErrorCode(code) {
 var WixAuthModalities = class {
   constructor(config = {}) {
     __publicField(this, "baseURL");
+    __publicField(this, "verificationBaseURL");
     __publicField(this, "fetchImpl");
     __publicField(this, "sleep");
     __publicField(this, "devMode");
     this.baseURL = config.baseURL ?? "https://users.wix.com";
+    this.verificationBaseURL = config.verificationBaseURL ?? "https://manage.wix.com";
     this.fetchImpl = config.fetchImpl ?? globalThis.fetch;
     this.sleep = config.sleep ?? engineSleep("WixAuthModalities");
     this.devMode = config.devMode ?? false;
@@ -933,25 +948,60 @@ var WixAuthModalities = class {
     return { userId: p.guid ?? "", email: p.email ?? "", accessToken: access, refreshToken: p.wixSession2 ?? "" };
   }
   /** Push-based 2FA: poll for the user's approval on their trusted device. Loops
-   *  until approved/denied/expired or `maxPolls` is hit. */
-  async pollPushApproval(twoFAToken, opts = {}) {
-    const interval = opts.intervalMs ?? 3e3;
-    const maxPolls = opts.maxPolls ?? 20;
+   *  until approved/denied/expired or `maxPolls` is hit (default 60 × 5s = 5 minutes).
+   *
+   *  #4309 — the wire Wix's own native client uses (mobile-native-core LegacyTwoFactor), and
+   *  the one the native WixNativeAuthEngine polls: Verification v1 GetChallenge,
+   *  `GET manage.wix.com/_api/verification-web/v1/challenges/get-challenge?verificationId=…`,
+   *  keyed by the 2FA payload's `verificationId` (digits; `NativeAuthError.verificationId` on the
+   *  needsTwoFactor challenge — not its `twoFAToken`). After "approved" the caller completes
+   *  the login with ONE `/auth/m/verifycodeandlogin` carrying an empty code. The old
+   *  `/auth/m/push2fa/status` route was never Wix's. */
+  async pollPushApproval(verificationId, opts = {}) {
+    const interval = opts.intervalMs ?? 5e3;
+    const maxPolls = opts.maxPolls ?? 60;
+    if (!this.devMode && !/^\d+$/.test(verificationId)) {
+      throw new NativeAuthError("unknown", "Push approval isn't available. Choose another method.");
+    }
     for (let i = 0; i < maxPolls; i++) {
-      const state = await this.pushStatusOnce(twoFAToken, i);
+      const state = await this.pushStatusOnce(verificationId, i);
       if (state !== "pending") return state;
       await this.sleep(interval);
     }
     return "expired";
   }
-  async pushStatusOnce(twoFAToken, poll) {
+  async pushStatusOnce(verificationId, poll) {
     if (this.devMode) {
-      if (twoFAToken === "deny") return "denied";
+      if (verificationId === "deny") return "denied";
       return poll >= 1 ? "approved" : "pending";
     }
-    const j = await this.post("/auth/m/push2fa/status", { twoFAToken });
-    const s = j.status ?? "pending";
-    return ["approved", "pending", "denied", "expired"].includes(s) ? s : "pending";
+    let res;
+    try {
+      res = await this.fetchImpl(
+        `${this.verificationBaseURL}/_api/verification-web/v1/challenges/get-challenge?verificationId=${verificationId}`,
+        { method: "GET", headers: { Accept: "application/json" } }
+      );
+    } catch {
+      return "pending";
+    }
+    if (res.status === 404) return "expired";
+    if (!res.ok) return "pending";
+    let j = {};
+    try {
+      j = JSON.parse(await res.text());
+    } catch {
+      return "pending";
+    }
+    switch (j.challenge?.approvalChallenge?.status) {
+      case "APPROVED":
+        return "approved";
+      case "DECLINED":
+        return "denied";
+      case "EXPIRED":
+        return "expired";
+      default:
+        return "pending";
+    }
   }
   /** Device-login: approve a login started on another device (confirm-on-device). */
   async confirmDeviceLogin(userCode, authToken) {
@@ -1185,6 +1235,12 @@ function WixAuthProvider(config) {
     authorizationEndpoint: config.authorizationEndpoint
   });
 }
+function googleClientIds(google) {
+  const out = {};
+  if (google?.iosClientId) out.iosClientId = google.iosClientId;
+  if (google?.serverClientId) out.serverClientId = google.serverClientId;
+  return Object.keys(out).length ? out : void 0;
+}
 function WixNativeAuthProvider(config) {
   if (config.mode !== "owner" && config.mode !== "consumer" && config.mode !== "account") {
     throw new Error('WixNativeAuthProvider: mode must be "owner", "consumer" or "account".');
@@ -1196,6 +1252,7 @@ function WixNativeAuthProvider(config) {
       ...config.clientId ? { clientId: config.clientId } : {},
       ...config.redirectUri ? { redirectUri: config.redirectUri } : {},
       ...config.social ? { social: config.social } : {},
+      ...googleClientIds(config.google) ? { google: googleClientIds(config.google) } : {},
       ...config.apiBase ? { apiBase: config.apiBase } : {},
       ...config.pxToken ? { pxToken: config.pxToken } : {},
       ...config.petriOverrides ? { petriOverrides: config.petriOverrides } : {},

package/dist/authoring-runtime/node_modules/@wix/himalaya/dist/wix-chat.mjs

@@ -0,0 +1,56 @@
+// ../../core/sdk/dispatch/src/index.ts
+function dispatch(handlerId, params, _options) {
+  const himalaya = globalThis.himalaya;
+  if (!himalaya) {
+    return Promise.reject(
+      new Error("@himalaya/dispatch: called outside a Himalaya runtime. This bundle must run inside a JSWorker (Tier 5).")
+    );
+  }
+  const stringParams = {};
+  if (params) {
+    for (const [k, v] of Object.entries(params)) stringParams[k] = String(v);
+  }
+  return himalaya.dispatch(handlerId, stringParams);
+}
+
+// ../../core/sdk/wix-chat/src/index.ts
+function validateActionRef(value, name) {
+  if (!/^[A-Za-z_$][\w$]*\.[A-Za-z_$][\w$]*$/.test(value)) {
+    throw new Error(`wix-chat.${name}: expected "<service>.<action>"`);
+  }
+  return value;
+}
+async function subscribeRealtime(opts) {
+  const onEvent = validateActionRef(opts.onEvent, "subscribeRealtime onEvent");
+  const onStatus = opts.onStatus ? validateActionRef(opts.onStatus, "subscribeRealtime onStatus") : "";
+  const result = await dispatch("capability.wix_chat.subscribeRealtime", { onEvent, onStatus });
+  return {
+    subscriptionId: typeof result?.subscriptionId === "string" ? result.subscriptionId : "",
+    state: normalizeState(result?.state),
+    ...!result ? { reason: "runtime_unavailable" } : {},
+    ...normalizeReason(result?.reason) ? { reason: normalizeReason(result?.reason) } : {}
+  };
+}
+async function unsubscribeRealtime(opts) {
+  if (!opts.subscriptionId.trim()) return { ok: false };
+  const result = await dispatch("capability.wix_chat.unsubscribeRealtime", { subscriptionId: opts.subscriptionId });
+  return { ok: result?.ok === true };
+}
+async function getRealtimeStatus(opts) {
+  if (!opts.subscriptionId.trim()) return { state: "unavailable", reason: "runtime_unavailable" };
+  const result = await dispatch("capability.wix_chat.getRealtimeStatus", { subscriptionId: opts.subscriptionId });
+  const reason = normalizeReason(result?.reason);
+  return { state: result ? normalizeState(result.state) : "unavailable", ...!result ? { reason: "runtime_unavailable" } : {}, ...reason ? { reason } : {} };
+}
+function normalizeState(value) {
+  return value === "connected" || value === "connecting" || value === "reconnecting" || value === "disconnected" || value === "error" ? value : "unavailable";
+}
+function normalizeReason(value) {
+  return value === "chat_setup_scope_unavailable" || value === "runtime_unavailable" || value === "invalid_setup_response" || value === "firebase_auth_failed" || value === "firebase_connection_failed" || value === "invalid_event" || value === "event_overflow" ? value : void 0;
+}
+export {
+  getRealtimeStatus,
+  subscribeRealtime,
+  unsubscribeRealtime
+};
+//# sourceMappingURL=wix-chat.mjs.map

package/dist/authoring-runtime/node_modules/@wix/himalaya/dist/wix-members.mjs

@@ -14,6 +14,42 @@ function getMember(id) {
   if (!id) throw new Error("getMember: id is required");
   return wixCall("GET", `/members/v1/members/${encodeURIComponent(id)}?fieldsets=FULL`);
 }
+function getMyMember(req = {}) {
+  const fieldsets = req.fieldsets?.length ? req.fieldsets.map((fieldset) => `fieldsets=${encodeURIComponent(fieldset)}`).join("&") : "fieldsets=FULL";
+  return wixCall("GET", `/members/v1/members/my?${fieldsets}`);
+}
+function updateMember(id, req) {
+  if (!id) throw new Error("updateMember: id is required");
+  return wixCall("PATCH", `/members/v1/members/${encodeURIComponent(id)}`, req);
+}
+function updateMySlug(req) {
+  return wixCall("POST", "/members/v1/members/my/slug", req);
+}
+function listCurrentMemberBlocking(req = {}) {
+  const parts = [];
+  const paging = req.cursorPaging;
+  if (paging?.limit != null) parts.push(`cursorPaging.limit=${encodeURIComponent(String(paging.limit))}`);
+  if (paging?.cursor) parts.push(`cursorPaging.cursor=${encodeURIComponent(paging.cursor)}`);
+  const query = parts.length ? `?${parts.join("&")}` : "";
+  return wixCall("GET", `/members/v1/member-to-member-blocks/members/my${query}`);
+}
+function unblockCurrentMember(memberId) {
+  if (!memberId) throw new Error("unblockCurrentMember: memberId is required");
+  return wixCall(
+    "DELETE",
+    `/members/v1/member-to-member-blocks/members/my/${encodeURIComponent(memberId)}`
+  );
+}
+function deleteMemberPhones(id) {
+  if (!id) throw new Error("deleteMemberPhones: id is required");
+  return wixCall("DELETE", `/members/v1/members/${encodeURIComponent(id)}/phones`);
+}
+function leaveCommunity() {
+  return wixCall("POST", "/members/v1/members/leave-community", {});
+}
+function joinCommunity() {
+  return wixCall("POST", "/members/v1/members/join-community", {});
+}
 function approveMember(id) {
   return wixCall("POST", `/members/v1/members/${encodeURIComponent(id)}/approve`, {});
 }
@@ -58,11 +94,19 @@ export {
   approveMember,
   blockMember,
   deleteMember,
+  deleteMemberPhones,
   followMember,
   getFollowCounts,
   getMember,
+  getMyMember,
   isFollowingMember,
+  joinCommunity,
+  leaveCommunity,
+  listCurrentMemberBlocking,
   queryMembers,
-  unfollowMember
+  unblockCurrentMember,
+  unfollowMember,
+  updateMember,
+  updateMySlug
 };
 //# sourceMappingURL=wix-members.mjs.map

package/dist/authoring-runtime/node_modules/@wix/himalaya/dist/wix-site-media.mjs

@@ -14,7 +14,24 @@ function generateUploadUrl(mimeType, fileName, parentFolderId) {
   if (parentFolderId) body.parentFolderId = parentFolderId;
   return wixCall("POST", "/site-media/v1/files/generate-upload-url", body);
 }
+function generateMemberPhotoUploadUrl(functionName, mimeType, fileName) {
+  if (!/^[A-Za-z][A-Za-z0-9_]{0,63}$/.test(functionName)) {
+    throw new Error("generateMemberPhotoUploadUrl: invalid function name");
+  }
+  if (!mimeType || mimeType.length > 127 || /[\r\n]/.test(mimeType)) {
+    throw new Error("generateMemberPhotoUploadUrl: invalid MIME type");
+  }
+  if (!fileName || fileName.length > 255 || /[\u0000-\u001f\u007f]/.test(fileName)) {
+    throw new Error("generateMemberPhotoUploadUrl: invalid file name");
+  }
+  return wixCall(
+    "POST",
+    `/velo/v1/http/invoke/${encodeURIComponent(functionName)}`,
+    { mimeType, fileName }
+  );
+}
 export {
+  generateMemberPhotoUploadUrl,
   generateUploadUrl,
   wixCall
 };

package/dist/authoring-runtime/node_modules/@wix/himalaya/package.json

@@ -322,6 +322,10 @@
       "types": "./dist/_types/core/sdk/wix-cashier/src/index.d.ts",
       "import": "./dist/wix-cashier.mjs"
     },
+    "./wix-chat": {
+      "types": "./dist/_types/core/sdk/wix-chat/src/index.d.ts",
+      "import": "./dist/wix-chat.mjs"
+    },
     "./wix-chat-web": {
       "types": "./dist/_types/stdlib/wix-sdk/chat-web/src/index.d.ts",
       "import": "./dist/wix-chat-web.mjs"