@wix/himalaya-cli 0.1399.0 → 0.1401.0

package/guides/sdk-reference.json

@@ -4964,6 +4964,61 @@
       }
     ]
   },
+  {
+    "name": "@himalaya/wix-chat",
+    "source": "core/sdk/wix-chat/src/index.ts",
+    "description": "host-owned realtime Chat event subscriptions.",
+    "api": [
+      {
+        "name": "RealtimeState",
+        "kind": "type",
+        "jsdoc": "",
+        "decl": "export type RealtimeState = \"connected\" | \"connecting\" | \"reconnecting\" | \"disconnected\" | \"error\" | \"unavailable\";"
+      },
+      {
+        "name": "RealtimeReason",
+        "kind": "type",
+        "jsdoc": "",
+        "decl": "export type RealtimeReason =\n  | \"chat_setup_scope_unavailable\"\n  | \"runtime_unavailable\"\n  | \"invalid_setup_response\"\n  | \"firebase_auth_failed\"\n  | \"firebase_connection_failed\"\n  | \"invalid_event\"\n  | \"event_overflow\";"
+      },
+      {
+        "name": "RealtimeStatus",
+        "kind": "interface",
+        "jsdoc": "",
+        "decl": "export interface RealtimeStatus {\n  state: RealtimeState;\n  reason?: RealtimeReason;\n}"
+      },
+      {
+        "name": "RealtimeSubscription",
+        "kind": "interface",
+        "jsdoc": "",
+        "decl": "export interface RealtimeSubscription extends RealtimeStatus {\n  subscriptionId: string;\n}"
+      },
+      {
+        "name": "RealtimeEventEnvelope",
+        "kind": "interface",
+        "jsdoc": "",
+        "decl": "export interface RealtimeEventEnvelope {\n  /** A normalized Wix Chat server event from Firebase. */\n  event: Record<string, unknown>;\n  /** Firebase server timestamp sampled when the subscription was established. */\n  connectionEstablishedTimestamp: number;\n}"
+      },
+      {
+        "name": "subscribeRealtime",
+        "kind": "function",
+        "jsdoc": "/** Subscribe this worker to Wix Chat realtime events. Reducers receive one\n *  {@link RealtimeEventEnvelope}; status reducers receive {@link RealtimeStatus}.\n *  A new subscription replaces the worker's prior subscription, and worker disposal\n *  always closes the host stream. The returned identifier is opaque and worker-local. */",
+        "decl": "export async function subscribeRealtime(opts: {\n  onEvent: string;\n  onStatus?: string;\n}): Promise<RealtimeSubscription>;"
+      },
+      {
+        "name": "unsubscribeRealtime",
+        "kind": "function",
+        "jsdoc": "/** Stop this worker's subscription. Returns `ok: false` for an unknown or stale ID. */",
+        "decl": "export async function unsubscribeRealtime(opts: { subscriptionId: string }): Promise<{ ok: boolean }>;"
+      },
+      {
+        "name": "getRealtimeStatus",
+        "kind": "function",
+        "jsdoc": "/** Read the latest host connection status for a worker-local subscription ID. */",
+        "decl": "export async function getRealtimeStatus(opts: { subscriptionId: string }): Promise<RealtimeStatus>;"
+      }
+    ]
+  },
   {
     "name": "@himalaya/wix-llm",
     "source": "core/sdk/wix-llm/src/index.ts",
@@ -21995,6 +22050,42 @@
         "jsdoc": "",
         "decl": "export interface WixGetMemberResponse {\n  member: WixMember;\n}"
       },
+      {
+        "name": "WixGetMyMemberResponse",
+        "kind": "interface",
+        "jsdoc": "",
+        "decl": "export interface WixGetMyMemberResponse {\n  member: WixMember;\n}"
+      },
+      {
+        "name": "WixUpdateMemberRequest",
+        "kind": "interface",
+        "jsdoc": "",
+        "decl": "export interface WixUpdateMemberRequest {\n  member: Partial<WixMember>;\n}"
+      },
+      {
+        "name": "WixUpdateMemberResponse",
+        "kind": "interface",
+        "jsdoc": "",
+        "decl": "export interface WixUpdateMemberResponse {\n  member: WixMember;\n}"
+      },
+      {
+        "name": "WixDeleteMemberPhonesResponse",
+        "kind": "interface",
+        "jsdoc": "",
+        "decl": "export interface WixDeleteMemberPhonesResponse {\n  member?: WixMember;\n}"
+      },
+      {
+        "name": "WixListCurrentMemberBlockingRequest",
+        "kind": "interface",
+        "jsdoc": "",
+        "decl": "export interface WixListCurrentMemberBlockingRequest {\n  cursorPaging?: { limit?: number; cursor?: string };\n}"
+      },
+      {
+        "name": "WixListCurrentMemberBlockingResponse",
+        "kind": "interface",
+        "jsdoc": "",
+        "decl": "export interface WixListCurrentMemberBlockingResponse {\n  blockedMemberIds?: string[];\n  pagingMetadata?: { cursors?: { next?: string; prev?: string }; count?: number; total?: number; tooManyToCount?: boolean };\n}"
+      },
       {
         "name": "queryMembers",
         "kind": "function",
@@ -22009,6 +22100,70 @@
         "decl": "export function getMember(id: string): Promise<WixGetMemberResponse>;",
         "http": "GET /members/v1/members/{…}?fieldsets=FULL"
       },
+      {
+        "name": "getMyMember",
+        "kind": "function",
+        "jsdoc": "/** Fetch the currently authenticated member — member-scoped, unlike the owner roster query.\n * @scope member — requires the signed-in site-member identity; an anonymous visitor cannot read this record.\n */",
+        "decl": "export function getMyMember(req: { fieldsets?: string[] } = {}): Promise<WixGetMyMemberResponse>;",
+        "http": "GET /members/v1/members/my?{…}",
+        "scope": "member"
+      },
+      {
+        "name": "updateMember",
+        "kind": "function",
+        "jsdoc": "/** Update a member record. Callers that serve members must pass the authenticated member's id.\n * @scope member — the id must identify the signed-in member; mismatches are rejected by Wix authorization.\n */",
+        "decl": "export function updateMember(id: string, req: WixUpdateMemberRequest): Promise<WixUpdateMemberResponse>;",
+        "http": "PATCH /members/v1/members/{…}",
+        "scope": "member"
+      },
+      {
+        "name": "updateMySlug",
+        "kind": "function",
+        "jsdoc": "/** Change the signed-in member's own public profile slug.\n * @scope member — requires a signed-in site member; the operation applies only to that member's slug.\n */",
+        "decl": "export function updateMySlug(req: { slug: string }): Promise<WixUpdateMemberResponse>;",
+        "http": "POST /members/v1/members/my/slug",
+        "scope": "member"
+      },
+      {
+        "name": "listCurrentMemberBlocking",
+        "kind": "function",
+        "jsdoc": "/** List IDs blocked by the authenticated member — member-owned social blocks, not site moderation.\n * @scope member — requires a signed-in site member; an empty list means the member has no blocked members.\n */",
+        "decl": "export function listCurrentMemberBlocking(req: WixListCurrentMemberBlockingRequest = {}): Promise<WixListCurrentMemberBlockingResponse>;",
+        "http": "GET /members/v1/member-to-member-blocks/members/my{…}",
+        "scope": "member"
+      },
+      {
+        "name": "unblockCurrentMember",
+        "kind": "function",
+        "jsdoc": "/** Remove one member from the authenticated member's own block list.\n * @scope member — requires a signed-in site member; Wix applies the change to that member's block list.\n */",
+        "decl": "export function unblockCurrentMember(memberId: string): Promise<Record<string, never>>;",
+        "http": "DELETE /members/v1/member-to-member-blocks/members/my/{…}",
+        "scope": "member"
+      },
+      {
+        "name": "deleteMemberPhones",
+        "kind": "function",
+        "jsdoc": "/** Delete every stored contact phone from a member's own profile. The API has no per-phone delete.\n * @scope member — id must be the signed-in member; this endpoint clears all phone numbers on that profile.\n */",
+        "decl": "export function deleteMemberPhones(id: string): Promise<WixDeleteMemberPhonesResponse>;",
+        "http": "DELETE /members/v1/members/{…}/phones",
+        "scope": "member"
+      },
+      {
+        "name": "leaveCommunity",
+        "kind": "function",
+        "jsdoc": "/** Leave the Wix Members Area community. Wix changes the member to PRIVATE.\n * @scope member — requires a signed-in member; this removes that member from the public Members Area community.\n */",
+        "decl": "export function leaveCommunity(): Promise<WixUpdateMemberResponse>;",
+        "http": "POST /members/v1/members/leave-community",
+        "scope": "member"
+      },
+      {
+        "name": "joinCommunity",
+        "kind": "function",
+        "jsdoc": "/** Join the Wix Members Area community. Wix changes the member to PUBLIC.\n * @scope member — requires a signed-in member; this makes that member's Members Area profile public.\n */",
+        "decl": "export function joinCommunity(): Promise<WixUpdateMemberResponse>;",
+        "http": "POST /members/v1/members/join-community",
+        "scope": "member"
+      },
       {
         "name": "approveMember",
         "kind": "function",
@@ -23918,6 +24073,14 @@
         "decl": "export function generateUploadUrl(\n  mimeType: string,\n  fileName: string,\n  parentFolderId?: string,\n): Promise<GenerateUploadUrlResponse>;",
         "http": "POST /site-media/v1/files/generate-upload-url"
       },
+      {
+        "name": "generateMemberPhotoUploadUrl",
+        "kind": "function",
+        "jsdoc": "/** Ask a site-owned Velo HTTP function for a member-authorized photo upload URL.\n * The backend function must independently bind the request to its authenticated\n * member and return `{ uploadUrl }`; this helper does not add credentials or\n * bypass the host's current Wix identity.\n * @scope member — requires a signed-in member and a configured site function that verifies the current member;\n * the returned URL is for upload only and does not itself update the member profile.\n */",
+        "decl": "export function generateMemberPhotoUploadUrl(\n  functionName: string,\n  mimeType: string,\n  fileName: string,\n): Promise<GenerateUploadUrlResponse>;",
+        "http": "POST /velo/v1/http/invoke/{…}",
+        "scope": "member"
+      },
       {
         "name": "(reexport)",
         "kind": "reexport",

package/guides/web-page-sdk-reference.md

@@ -53,4 +53,5 @@ the SDK sources, so it matches the shipped SDKs.
 - [`theme`](https://apps.wix.com/_api/himi-serve/authoring/resource/web-sdk%2Ftheme?format=md) — Runtime brand overlay. 2 methods.
 - [`ui`](https://apps.wix.com/_api/himi-serve/authoring/resource/web-sdk%2Fui?format=md) — Imperative popup capability. 2 methods · not in Brandy.
 - [`wix_cashier`](https://apps.wix.com/_api/himi-serve/authoring/resource/web-sdk%2Fwix_cashier?format=md) — Native cashier. 2 methods.
+- [`wix_chat`](https://apps.wix.com/_api/himi-serve/authoring/resource/web-sdk%2Fwix_chat?format=md) — Host-owned realtime Chat event subscriptions. 2 methods.
 - [`wix_platform`](https://apps.wix.com/_api/himi-serve/authoring/resource/web-sdk%2Fwix_platform?format=md) — Wix Platform SDK, worker-facing bindings. 30 methods · not in Brandy.

package/guides/wix-login-integration.md

@@ -112,6 +112,48 @@ browser-direct to wixapis instead). See `core/web-host/src/App.tsx`. There is no
 > **rejects with `sign_in_unavailable`** unless the `__webwix` bridge already holds a member. Catch that and
 > show a real error state — it is the difference between "sign-in isn't available here" and a dead button.
 
+## Social sign-in (Google, Apple) and push-approval 2FA
+
+`social: ["google", "apple"]` on `WixNativeAuthProvider` lists the buttons the app *may* show. The
+native gate shows only the ones that can actually run on that platform, so a button never fails with
+"This sign-in method isn't available":
+
+| Provider | iOS | Android |
+|---|---|---|
+| Apple | always (Sign in with Apple, needs the entitlement) | never (no native path) |
+| Google | when `HimalayaWixAuthGoogle` is linked **and** an iOS client id is configured | when `:himalaya-wix-auth-google` is linked **and** a server client id is configured |
+
+Enable Google in four steps:
+
+1. Configure the client ids (from a Google Cloud project whose tokens Wix's
+   `/oneapp/social/sign-in/google` accepts):
+   ```ts
+   WixNativeAuthProvider({ mode: "owner", social: ["google", "apple"],
+     google: { iosClientId: "<ios>.apps.googleusercontent.com", serverClientId: "<web>.apps.googleusercontent.com" } })
+   ```
+   An id left out hides Google on that platform: `iosClientId` for iOS, `serverClientId` (the WEB
+   client) for Android.
+2. **iOS** — add the `HimalayaWixAuthGoogle` package to the app (it pulls GoogleSignIn-iOS), add the
+   reversed iOS client id as a URL scheme (`CFBundleURLTypes`), and call
+   `HimalayaWixAuthGoogle.register(clientId:serverClientId:)` at boot, before the gate's provider list
+   is built.
+3. **Android** — include `:himalaya-wix-auth-google` (androidx.credentials + Google identity) and call
+   `CredentialManagerGoogleAdapter.register(context, serverClientId)` at boot.
+4. Filter the baked `social` list before handing it to the gate:
+   `SocialSignInCoordinator.shared.availableProviders(requested, devMode:)` (iOS) /
+   `SocialSignInAdapters.available(requested, devMode)` (Android). The dev seam (`devMode`) shows every
+   provider and answers with a dev credential.
+
+Only a real cancel reads as "cancelled"; a misconfigured client id surfaces Google's own message.
+
+**Push-approval 2FA (owner/account).** When a Wix account's second factor is push approval, the gate
+shows "Approve the sign-in on your other device." instead of a code field and waits on its own: the
+provider polls Wix's Verification API with the challenge's `verificationId` (every 5s, at most 5
+minutes) and, once approved, completes the login with an empty code. Declined and expired requests show
+their own message; the primary button sends a new request, and the method picker switches to a code
+factor at any time. Dev seam accounts: `2fa-push@himalaya.dev` (approves) and
+`2fa-push-deny@himalaya.dev` (declines), password `Passw0rd!`.
+
 ## Fail-closed (`required: true`)
 
 If a required-auth app can't build its provider (unknown `providerId`, missing config key), boot sets a

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@wix/himalaya-cli",
-  "version": "0.1399.0",
+  "version": "0.1401.0",
   "type": "module",
   "description": "himi — the Himalaya authoring CLI. Build a Tier-5 content package on your own machine, push it to the production serve as a draft, preview it on web + Himi Player, and read worker logs back — the remote dev loop. Wraps @himalaya/serve-cli for transport.",
   "keywords": [
@@ -71,5 +71,5 @@
       "artifactId": "himalaya-cli"
     }
   },
-  "falconPackageHash": "5602cafea0f9e92feb51eb02932446cafa4658b6e7397be9ae1377cb"
+  "falconPackageHash": "bbec74b2d9de8eb6130af034add9f1970a354b15303a6d85d5ff7b6b"
 }