@wix/himalaya-cli 0.1459.0 → 0.1460.0

package/dist/cli.mjs

@@ -160097,9 +160097,14 @@ var init_pinned_read = __esm({
 });
 
 // ../../core/serve-runtime/src/member-exchange.ts
+function internalHost(host) {
+  const h2 = host.toLowerCase().replace(/^\[|\]$/g, "");
+  return h2 === "localhost" || h2.endsWith(".localhost") || h2.endsWith(".local") || h2.endsWith(".internal") || !h2.includes(".") || /^[0-9.]+$/.test(h2) || h2.includes(":");
+}
 function hopAllowed(url, firstHost) {
   if (url.protocol !== "https:" || url.port !== "" && url.port !== "443" || url.username || url.password) return false;
   const host = url.hostname.toLowerCase();
+  if (internalHost(host)) return false;
   return host === firstHost || host === "wix.com" || host.endsWith(".wix.com") || host.endsWith(".wixsite.com") || host === "wixapis.com" || host.endsWith(".wixapis.com");
 }
 async function exchangeMemberSession(input, fetchImpl = fetch, random = randomBytes6, now = Date.now, redirectUri = REGISTERED_REDIRECT_URI) {
@@ -160109,7 +160114,7 @@ async function exchangeMemberSession(input, fetchImpl = fetch, random = randomBy
   }
   const call = async (url2, init) => {
     try {
-      return await fetchImpl(url2, { ...init, signal: AbortSignal.timeout(STEP_TIMEOUT_MS) });
+      return await fetchImpl(url2, { ...init, redirect: "manual", signal: AbortSignal.timeout(STEP_TIMEOUT_MS) });
     } catch {
       return null;
     }
@@ -161056,7 +161061,15 @@ ${releaseId}`;
         if (!exchangePin || !resolvePreviewToken(request, url)) return json5(403, { error: "draft_preview_required" }, noStore);
         const exchangeCfg = await appConfigFor(request, url, exchangeApp);
         if (!exchangeCfg.ok) return exchangeCfg.response;
-        if ((await manifest(exchangeApp))?.releaseId === exchangePin || await isRingRelease(exchangeApp, exchangePin)) {
+        let ringPinned = false;
+        if (opts.ringReleases) {
+          try {
+            ringPinned = new Set(await opts.ringReleases(exchangeApp)).has(exchangePin);
+          } catch {
+            return json5(503, { error: "ring_lookup_unavailable" }, noStore);
+          }
+        }
+        if ((await manifest(exchangeApp))?.releaseId === exchangePin || ringPinned) {
           return json5(403, { error: "draft_preview_required" }, noStore);
         }
         const exchangeClient = wixClientIdOf(utf8Decode(exchangeCfg.bytes));

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@wix/himalaya-cli",
-  "version": "0.1459.0",
+  "version": "0.1460.0",
   "type": "module",
   "description": "himi — the Himalaya authoring CLI. Build a Tier-5 content package on your own machine, push it to the production serve as a draft, preview it on web + Himi Player, and read worker logs back — the remote dev loop. Wraps @himalaya/serve-cli for transport.",
   "keywords": [
@@ -71,5 +71,5 @@
       "artifactId": "himalaya-cli"
     }
   },
-  "falconPackageHash": "db96f8e1d9f3f0a55120ae97f89b4211fed249d7a3f98225dc9269b1"
+  "falconPackageHash": "671905888b8bae86b934860d075660df2589c4d9791b110e75cc5b8b"
 }