@wix/himalaya-cli 0.1509.0 → 0.1510.0

package/dist/cli.mjs

@@ -22176,7 +22176,6 @@ function resolveIdiom(tokens2, ctx = {}) {
 var IDIOM_CONTEXTS, UNSAFE_KEYS;
 var init_idiom = __esm({
   "../../core/ts/src/idiom.ts"() {
-    "use strict";
     IDIOM_CONTEXTS = {
       ios: { native: ["ios"] },
       android: { native: ["material"] },
@@ -163184,6 +163183,134 @@ var init_member_exchange = __esm({
   }
 });
 
+// ../../core/serve-runtime/src/member-forward.ts
+function matchMemberForward(method, raw, rules = MEMBER_FORWARD_ALLOWLIST) {
+  if (typeof method !== "string" || typeof raw !== "string" || raw.length === 0 || raw.length > 8192) return null;
+  const verb = method.toUpperCase();
+  let url;
+  try {
+    url = new URL(raw);
+  } catch {
+    return null;
+  }
+  if (url.protocol !== "https:" || url.port !== "" || url.username || url.password || url.hash) return null;
+  const rawPath = raw.replace(/^https:\/\/[^/?#]*/i, "").split(/[?#]/, 1)[0];
+  if (rawPath !== url.pathname || /[%\\]|\/\/|\.\./.test(rawPath)) return null;
+  const host = url.hostname.toLowerCase();
+  const rule = rules.find((r3) => r3.method === verb && r3.host === host && r3.path.test(url.pathname));
+  if (!rule) return null;
+  const seen = /* @__PURE__ */ new Set();
+  for (const [key3, value] of url.searchParams) {
+    const allowed2 = Object.hasOwn(rule.query, key3) ? rule.query[key3] : void 0;
+    if (!(allowed2 instanceof RegExp) || seen.has(key3) || !allowed2.test(value)) return null;
+    seen.add(key3);
+  }
+  if ((rule.required ?? []).some((key3) => !seen.has(key3))) return null;
+  return { rule, url };
+}
+function matchForwardHeaders(rule, raw) {
+  const allowed2 = rule.headers ?? {};
+  const out2 = {};
+  if (raw !== void 0 && raw !== null) {
+    if (typeof raw !== "object" || Array.isArray(raw)) return null;
+    for (const [name, value] of Object.entries(raw)) {
+      const canonical7 = Object.keys(allowed2).find((k2) => k2.toLowerCase() === name.toLowerCase());
+      if (!canonical7 || typeof value !== "string" || !allowed2[canonical7].test(value) || Object.hasOwn(out2, canonical7)) return null;
+      out2[canonical7] = value;
+    }
+  }
+  if ((rule.requiredHeaders ?? []).some((name) => !Object.hasOwn(out2, name))) return null;
+  return out2;
+}
+async function readCapped(res, maxChars) {
+  const declared = Number(res.headers.get("content-length"));
+  if (Number.isFinite(declared) && declared > maxChars * 4) {
+    await res.body?.cancel().catch(() => {
+    });
+    return null;
+  }
+  if (!res.body) {
+    const text12 = await res.text();
+    return text12.length > maxChars ? null : text12;
+  }
+  const reader = res.body.getReader();
+  const decoder = new TextDecoder();
+  let text11 = "";
+  for (; ; ) {
+    const { done, value } = await reader.read();
+    if (done) break;
+    text11 += decoder.decode(value, { stream: true });
+    if (text11.length > maxChars) {
+      await reader.cancel().catch(() => {
+      });
+      return null;
+    }
+  }
+  text11 += decoder.decode();
+  return text11.length > maxChars ? null : text11;
+}
+async function memberForwardCall(match, body, memberToken, fetchImpl = fetch, extraHeaders = {}) {
+  const headers2 = { Accept: "application/json", ...extraHeaders };
+  if (body !== void 0) headers2["Content-Type"] = "application/json";
+  if (match.rule.auth === "member") headers2.Authorization = memberToken;
+  try {
+    const res = await fetchImpl(match.url.toString(), {
+      method: match.rule.method,
+      headers: headers2,
+      body,
+      redirect: "manual",
+      credentials: "omit",
+      signal: AbortSignal.timeout(FORWARD_TIMEOUT_MS)
+    });
+    const text11 = await readCapped(res, MAX_RESPONSE_CHARS);
+    if (text11 === null) return { ok: false, code: "forward_too_large" };
+    return { ok: true, status: res.status, body: text11 };
+  } catch {
+    return { ok: false, code: "forward_failed" };
+  }
+}
+var BOOL, SMALL_INT, TOKENISH, CURSOR, ROOM, LIST_QUERY, MEMBER_FORWARD_ALLOWLIST, FORWARD_TIMEOUT_MS, MAX_RESPONSE_CHARS;
+var init_member_forward = __esm({
+  "../../core/serve-runtime/src/member-forward.ts"() {
+    BOOL = /^(true|false)$/;
+    SMALL_INT = /^\d{1,6}$/;
+    TOKENISH = /^[A-Za-z0-9._~-]{1,4096}$/;
+    CURSOR = /^[A-Za-z0-9._~:=+/,-]{1,2048}$/;
+    ROOM = "[A-Za-z0-9-]{1,64}";
+    LIST_QUERY = { chatToken: TOKENISH, nextPointer: CURSOR, pageSize: SMALL_INT, archived: BOOL, onlyUnread: BOOL, lastMessageLimit: SMALL_INT, unreadChatroomLimit: SMALL_INT };
+    MEMBER_FORWARD_ALLOWLIST = [
+      // Chat: mint the chat token with the member token alone.
+      { method: "POST", host: "manage.wix.com", path: /^\/_api\/wix-chat-tokens-server\/v1\/chat-tokens$/, auth: "member", query: { isForUnifiedList: BOOL } },
+      // Chat: the member's conversation list (all, or one participant type), authorised by the chat token in the query.
+      { method: "POST", host: "manage.wix.com", path: /^\/_api\/chat-web\/v1\/chatrooms-for-list-view(?:\/(?:business|siteMember))?$/, auth: "none", query: LIST_QUERY, required: ["chatToken"] },
+      { method: "GET", host: "manage.wix.com", path: /^\/_api\/chat-web\/v2\/chatrooms$/, auth: "none", query: { chatToken: TOKENISH, nextPointer: CURSOR, pageSize: SMALL_INT }, required: ["chatToken"] },
+      // Chat: a conversation's history.
+      {
+        method: "GET",
+        host: "manage.wix.com",
+        path: new RegExp(`^/_api/chat-web/v1/chatrooms/${ROOM}/messages$`),
+        auth: "none",
+        query: { chatToken: TOKENISH, pageSize: SMALL_INT, ordering: /^(?:Asc|Desc)$/, nextPointer: CURSOR },
+        required: ["chatToken"]
+      },
+      // Chat: send a message. The chat token rides the `ChatToken` HEADER here (the query is rejected: probed).
+      {
+        method: "POST",
+        host: "manage.wix.com",
+        path: new RegExp(`^/_api/chat-web/v2/chatrooms/${ROOM}/messages$`),
+        auth: "none",
+        query: {},
+        headers: { ChatToken: TOKENISH },
+        requiredHeaders: ["ChatToken"]
+      },
+      // Chat: the live-update (realtime) token. The answer carries a credential for a third party; it is returned to the caller only.
+      { method: "POST", host: "manage.wix.com", path: /^\/_api\/chat-web\/v1\/real-time-tokens$/, auth: "none", query: { chatToken: TOKENISH }, required: ["chatToken"] }
+    ];
+    FORWARD_TIMEOUT_MS = 15e3;
+    MAX_RESPONSE_CHARS = 1e6;
+  }
+});
+
 // ../../core/serve-runtime/package-share.ts
 function parseStored(bytes2, id) {
   if (!bytes2) return null;
@@ -163740,6 +163867,27 @@ ${releaseId}`;
     }
     return new Response(body, { status: 200, headers: { "content-type": JSON_CT3, etag, "cache-control": cache, ...vary } });
   }
+  async function draftPreviewOnly(request, url, noStore) {
+    const refuse7 = (status, error) => ({ ok: false, response: json5(status, { error }, noStore) });
+    if (opts.webwixBridge === false) return refuse7(503, "webwix_bridge_disabled");
+    if (!opts.previewTokenSecret) return refuse7(503, "preview_token_unavailable");
+    const app = resolveApp(request, url);
+    if (!app) return refuse7(400, "app_required");
+    const pin = resolvePin(request, url);
+    if (!pin || !resolvePreviewToken(request, url)) return refuse7(403, "draft_preview_required");
+    const cfg = await appConfigFor(request, url, app);
+    if (!cfg.ok) return { ok: false, response: cfg.response };
+    let ringPinned = false;
+    if (opts.ringReleases) {
+      try {
+        ringPinned = new Set(await opts.ringReleases(app)).has(pin);
+      } catch {
+        return refuse7(503, "ring_lookup_unavailable");
+      }
+    }
+    if ((await manifest(app))?.releaseId === pin || ringPinned) return refuse7(403, "draft_preview_required");
+    return { ok: true, app, pin, cfgBytes: cfg.bytes };
+  }
   async function authorizePinnedRead(request, url, app, releaseId, screenId) {
     const denied2 = await checkPinnedRead({
       secret: opts.previewTokenSecret,
@@ -164020,26 +164168,9 @@ ${releaseId}`;
       }
       if (request.method === "POST" && path2 === "/v1/__webwix/member-exchange") {
         const noStore = { "cache-control": "no-store" };
-        if (opts.webwixBridge === false) return json5(503, { error: "webwix_bridge_disabled" }, noStore);
-        if (!opts.previewTokenSecret) return json5(503, { error: "preview_token_unavailable" }, noStore);
-        const exchangeApp = resolveApp(request, url);
-        if (!exchangeApp) return json5(400, { error: "app_required" }, noStore);
-        const exchangePin = resolvePin(request, url);
-        if (!exchangePin || !resolvePreviewToken(request, url)) return json5(403, { error: "draft_preview_required" }, noStore);
-        const exchangeCfg = await appConfigFor(request, url, exchangeApp);
-        if (!exchangeCfg.ok) return exchangeCfg.response;
-        let ringPinned = false;
-        if (opts.ringReleases) {
-          try {
-            ringPinned = new Set(await opts.ringReleases(exchangeApp)).has(exchangePin);
-          } catch {
-            return json5(503, { error: "ring_lookup_unavailable" }, noStore);
-          }
-        }
-        if ((await manifest(exchangeApp))?.releaseId === exchangePin || ringPinned) {
-          return json5(403, { error: "draft_preview_required" }, noStore);
-        }
-        const exchangeClient = wixClientIdOf(utf8Decode(exchangeCfg.bytes));
+        const gate = await draftPreviewOnly(request, url, noStore);
+        if (!gate.ok) return gate.response;
+        const exchangeClient = wixClientIdOf(utf8Decode(gate.cfgBytes));
         if ("error" in exchangeClient) return json5(501, { error: `member_exchange_${exchangeClient.error}` }, noStore);
         const headerToken = request.headers.get("x-himalaya-member-session");
         let sessionToken = headerToken ?? void 0;
@@ -164068,6 +164199,40 @@ ${releaseId}`;
         if (exchanged.code === "bad_request") return json5(400, { error: "invalid_session_token", received }, noStore);
         return json5(502, { error: exchanged.code, ...exchanged.status !== void 0 ? { status: exchanged.status } : {} }, noStore);
       }
+      if (request.method === "POST" && path2 === "/v1/__webwix/member-forward") {
+        const noStore = { "cache-control": "no-store" };
+        const gate = await draftPreviewOnly(request, url, noStore);
+        if (!gate.ok) return gate.response;
+        let raw;
+        try {
+          raw = await request.text();
+        } catch {
+          return json5(400, { error: "body_unreadable" }, noStore);
+        }
+        if (!raw) return json5(400, { error: "empty_body" }, noStore);
+        if (raw.length > 256e3) return json5(413, { error: "body_too_large" }, noStore);
+        let parsed;
+        try {
+          parsed = JSON.parse(raw);
+        } catch {
+          return json5(400, { error: "invalid_json" }, noStore);
+        }
+        if (!parsed || typeof parsed !== "object" || Array.isArray(parsed)) return json5(400, { error: "invalid_body" }, noStore);
+        if (typeof parsed.memberToken !== "string" || !parsed.memberToken || parsed.memberToken.length > 4096) return json5(400, { error: "member_token_required" }, noStore);
+        const match = matchMemberForward(parsed.method, parsed.url);
+        if (!match) return json5(403, { error: "forward_target_refused" }, noStore);
+        const forwardHeaders = matchForwardHeaders(match.rule, parsed.headers);
+        if (!forwardHeaders) return json5(403, { error: "forward_header_refused" }, noStore);
+        let forwardBody;
+        if (parsed.body !== void 0) {
+          if (match.rule.method === "GET" || match.rule.method === "DELETE") return json5(400, { error: "body_not_allowed" }, noStore);
+          forwardBody = typeof parsed.body === "string" ? parsed.body : JSON.stringify(parsed.body);
+          if (forwardBody.length > 64e3) return json5(413, { error: "body_too_large" }, noStore);
+        }
+        const forwarded = await memberForwardCall(match, forwardBody, parsed.memberToken, webwixFetch, forwardHeaders);
+        if (!forwarded.ok) return json5(502, { error: forwarded.code }, noStore);
+        return json5(200, { status: forwarded.status, body: forwarded.body }, noStore);
+      }
       if (request.method === "POST" && path2 === "/v1/__webwix/call") {
         const served = { rung: "none" };
         let status = 500;
@@ -164693,6 +164858,7 @@ var init_server2 = __esm({
     init_contract();
     init_pinned_read();
     init_member_exchange();
+    init_member_forward();
     init_package_share();
     init_wix_bridge();
     init_account_rung();
@@ -176770,7 +176936,7 @@ function extOf2(url) {
   if (/\.ico$/i.test(path2)) return "ico";
   return "jpg";
 }
-async function readCapped(res, cap) {
+async function readCapped2(res, cap) {
   const declared = Number(res.headers?.get?.("content-length"));
   if (Number.isFinite(declared) && declared > cap) {
     await discardBody(res);
@@ -176806,7 +176972,7 @@ async function fetchBrandFace(family, url, fetchImpl) {
       await discardBody(res);
       return void 0;
     }
-    const capped = await readCapped(res, MAX_FONT_BYTES);
+    const capped = await readCapped2(res, MAX_FONT_BYTES);
     if (!capped) return void 0;
     woff2 = capped;
   } catch {
@@ -177345,7 +177511,7 @@ function pagesFromRegistry(js2) {
   return [...m2[1].matchAll(/["']?([A-Z][A-Za-z0-9_]*)["']?\s*:/g)].map((x2) => x2[1]).slice(0, MAX_ROUTES);
 }
 async function readText3(res, cap) {
-  const buf = await readCapped(res, cap);
+  const buf = await readCapped2(res, cap);
   if (!buf) throw new Error(`body over the ${cap}-byte cap`);
   return buf.toString("utf8");
 }
@@ -180788,7 +180954,7 @@ async function createPlaywrightBrowser(load3 = () => import("playwright"), siteF
               await route.fulfill({ status: res.status, headers: { location }, body: Buffer.alloc(0) });
               return;
             }
-            const capped = await readCapped(res, MAX_DOCUMENT_BYTES);
+            const capped = await readCapped2(res, MAX_DOCUMENT_BYTES);
             if (!capped) {
               await route.abort();
               return;
@@ -181198,7 +181364,7 @@ function projectDownloader(apiFetch, apiBase, token, extract = systemTar) {
     if (!res.ok) {
       throw new Error(res.status === 401 || res.status === 403 ? `refused (${res.status}) \u2014 the signed-in user cannot download this app's code (editor role needed)` : `project download failed: HTTP ${res.status}`);
     }
-    const bytes2 = await readCapped(res, MAX_TARBALL_BYTES);
+    const bytes2 = await readCapped2(res, MAX_TARBALL_BYTES);
     if (!bytes2) throw new Error(`project download is over the ${MAX_TARBALL_BYTES}-byte cap`);
     const root = mkdtempSync10(join112(tmpdir11(), "himi-base44-"));
     const cleanup = () => rmSync30(root, { recursive: true, force: true });

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@wix/himalaya-cli",
-  "version": "0.1509.0",
+  "version": "0.1510.0",
   "type": "module",
   "description": "himi — the Himalaya authoring CLI. Build a Tier-5 content package on your own machine, push it to the production serve as a draft, preview it on web + Himi Player, and read worker logs back — the remote dev loop. Wraps @himalaya/serve-cli for transport.",
   "keywords": [
@@ -71,5 +71,5 @@
       "artifactId": "himalaya-cli"
     }
   },
-  "falconPackageHash": "e93a43678d27c6109e94db0df1cbc5d530447037d1ba12bc431c73cc"
+  "falconPackageHash": "998b3b056eb19f8b72dbf9d3dfcd78c59ad50f7c4390a381ce6780d1"
 }