@wix/himalaya-cli 0.1509.0 → 0.1511.0

package/dist/cli.mjs

@@ -22176,7 +22176,6 @@ function resolveIdiom(tokens2, ctx = {}) {
 var IDIOM_CONTEXTS, UNSAFE_KEYS;
 var init_idiom = __esm({
   "../../core/ts/src/idiom.ts"() {
-    "use strict";
     IDIOM_CONTEXTS = {
       ios: { native: ["ios"] },
       android: { native: ["material"] },
@@ -30373,6 +30372,47 @@ var init_circleClipBorder = __esm({
   }
 });
 
+// ../../core/web-renderer/src/glassPreview.ts
+function isIOSPhoneGlassPreview(context) {
+  return context?.surface === "phone" && context.native?.includes("ios") === true;
+}
+var IOS_GLASS_PREVIEW_PALETTE, IOS_GLASS_PREVIEW_ACCESSIBILITY_DECLARATIONS;
+var init_glassPreview = __esm({
+  "../../core/web-renderer/src/glassPreview.ts"() {
+    IOS_GLASS_PREVIEW_PALETTE = {
+      light: {
+        "--himi-glass-fill": "rgba(250,250,254,.72)",
+        "--himi-glass-control": "rgba(255,255,255,.72)",
+        "--himi-glass-control-rim": "rgba(255,255,255,.72)",
+        "--himi-glass-selection": "rgba(218,222,232,.44)",
+        "--himi-glass-selection-rim": "rgba(255,255,255,.9)",
+        "--himi-glass-rim": "rgba(255,255,255,.84)",
+        "--himi-glass-highlight": "rgba(255,255,255,.82)",
+        "--himi-glass-shadow": "rgba(24,28,40,.11)"
+      },
+      dark: {
+        "--himi-glass-fill": "rgba(32,32,38,.76)",
+        "--himi-glass-control": "rgba(36,40,50,.65)",
+        "--himi-glass-control-rim": "rgba(255,255,255,.12)",
+        "--himi-glass-selection": "rgba(88,82,115,.30)",
+        "--himi-glass-selection-rim": "rgba(194,173,255,.48)",
+        "--himi-glass-rim": "rgba(176,150,255,.32)",
+        "--himi-glass-highlight": "rgba(255,255,255,.18)",
+        "--himi-glass-shadow": "rgba(0,0,0,.24)"
+      }
+    };
+    IOS_GLASS_PREVIEW_ACCESSIBILITY_DECLARATIONS = [
+      "-webkit-backdrop-filter:none!important",
+      "backdrop-filter:none!important",
+      "background:Canvas!important",
+      "background-image:none!important",
+      "color:CanvasText!important",
+      "border:1px solid CanvasText!important",
+      "box-shadow:none!important"
+    ].join(";");
+  }
+});
+
 // ../../core/web-renderer/src/shape.ts
 function normalizeShapeKind(kind) {
   return isKind(kind) ? kind : "rectangle";
@@ -30553,7 +30593,7 @@ function variantStyle(variant, tk, baseBackground) {
       return {};
   }
 }
-function makeModStyle(tk, isRTL = () => false) {
+function makeModStyle(tk, isRTL = () => false, glassPreview = false, scheme = "light") {
   return function modStyle(mods) {
     if (!mods) return {};
     if (mods.hidden === true) return { display: "none" };
@@ -30568,10 +30608,26 @@ function makeModStyle(tk, isRTL = () => false) {
     const inlineGradient = gradientCss(mods.gradient, tk);
     let hasSurface = false;
     if (mat) {
-      if (mat.background) s2.background = mat.background;
-      if (mat.backdropFilter) {
-        s2.backdropFilter = mat.backdropFilter;
-        s2.WebkitBackdropFilter = mat.backdropFilter;
+      if (glassPreview && mat.backdropFilter) {
+        s2["--himi-glass-material-filter"] = mat.backdropFilter;
+      }
+      if (glassPreview && mat.backdropFilter && scheme === "highContrast") {
+        s2.background = "Canvas";
+        s2.color = "CanvasText";
+        s2.border = "1px solid CanvasText";
+      } else {
+        if (glassPreview && mat.backdropFilter) {
+          s2.background = `linear-gradient(155deg, var(--himi-glass-highlight), transparent 42%), ${mat.background ?? "transparent"}`;
+        } else if (mat.background) s2.background = mat.background;
+        if (mat.backdropFilter) {
+          s2.backdropFilter = mat.backdropFilter;
+          s2.WebkitBackdropFilter = mat.backdropFilter;
+        }
+      }
+      if (glassPreview && mat.backdropFilter && scheme !== "highContrast") {
+        Object.assign(s2, IOS_GLASS_PREVIEW_PALETTE[scheme]);
+        s2.border = "1px solid var(--himi-glass-rim)";
+        s2.boxShadow = "inset 0 1px 0 var(--himi-glass-highlight), 0 5px 18px var(--himi-glass-shadow)";
       }
       hasSurface = true;
     } else if (gradient) {
@@ -30698,6 +30754,7 @@ var init_modifiers = __esm({
   "../../core/web-renderer/src/modifiers.ts"() {
     init_tokens2();
     init_shape();
+    init_glassPreview();
     pick = (...vals) => vals.find((v2) => v2 != null);
     CSS_SIDE = {
       top: "top",
@@ -33559,6 +33616,10 @@ function drawerTransition(entering, reduceMotion, dragging) {
   const [ms2, curve, fade] = entering ? [DRAWER_ENTER_MS, "cubic-bezier(.2,.8,.2,1)", "ease-out"] : [DRAWER_EXIT_MS, "cubic-bezier(.4,0,1,1)", "ease-in"];
   return `transform ${ms2}ms ${curve}, clip-path ${ms2}ms ${curve}, opacity ${ms2}ms ${fade}`;
 }
+function drawerDetentRegionPx(clientHeight, scale, regionTop, anchorBottom) {
+  if (![clientHeight, scale, regionTop, anchorBottom].every(Number.isFinite) || clientHeight <= 0 || scale <= 0) return null;
+  return Math.max(0, Math.min(clientHeight, (anchorBottom - regionTop) / scale));
+}
 function sheetIsNonModal(modal) {
   return modal === false;
 }
@@ -115537,7 +115598,7 @@ function makeCtx(tokens2, scheme = "light", opts = {}) {
     sizeClass: opts.sizeClass,
     isRTL: opts.isRTL,
     containerWidth: opts.containerWidth,
-    modStyle: makeModStyle(tk, () => ambientIsRTL(opts.isRTL)),
+    modStyle: makeModStyle(tk, () => ambientIsRTL(opts.isRTL), isIOSPhoneGlassPreview(opts.idiomContext), scheme),
     catalog: opts.catalog,
     localeTag: opts.localeTag,
     provider,
@@ -115583,7 +115644,7 @@ function withTheme(ctx, theme) {
     spacing: { ...base.spacing ?? {}, ...theme.spacing ?? {} }
   };
   const tk = makeTokenResolvers(merged, ctx.scheme, ctx.idiomContext);
-  return { ...ctx, ...tk, modStyle: makeModStyle(tk, () => layoutIsRTL(ctx)) };
+  return { ...ctx, ...tk, modStyle: makeModStyle(tk, () => layoutIsRTL(ctx), isIOSPhoneGlassPreview(ctx.idiomContext), ctx.scheme) };
 }
 function ensureValueSwapKeyframes() {
   ensureTransitionKeyframes();
@@ -117661,6 +117722,11 @@ function renderNodeInner(node, ctx) {
   const el2 = renderInner(node, ctx);
   if (!React11.isValidElement(el2)) return el2;
   const extra = {};
+  const material = node?.modifiers?.material;
+  const materialName = typeof material === "string" ? material : material?.token ?? material?.name;
+  if (isIOSPhoneGlassPreview(ctx.idiomContext) && ctx.material(materialName)?.backdropFilter) {
+    extra["data-himi-glass-material"] = "";
+  }
   const componentId = resolvedComponentId(node?.id, ctx);
   if (componentId) {
     extra["data-component-id"] = componentId;
@@ -117873,7 +117939,7 @@ function renderInner(node, ctx) {
   const ld = modifiers?.layoutDirection ?? modifiers?.layout_direction;
   if ((ld === "ltr" || ld === "rtl") && layoutIsRTL(ctx) !== (ld === "rtl")) {
     const pinnedRTL = ld === "rtl";
-    ctx = { ...ctx, layoutRTL: pinnedRTL, modStyle: makeModStyle(ctx, () => pinnedRTL) };
+    ctx = { ...ctx, layoutRTL: pinnedRTL, modStyle: makeModStyle(ctx, () => pinnedRTL, isIOSPhoneGlassPreview(ctx.idiomContext), ctx.scheme) };
   }
   const pkg = node.body?.package;
   const C2 = ctx.color;
@@ -118625,6 +118691,7 @@ var init_renderNode = __esm({
     init_circleClipBorder();
     init_tokens2();
     init_idiom_controls();
+    init_glassPreview();
     init_modifiers();
     init_shape();
     init_helpers();
@@ -121477,6 +121544,7 @@ var init_renderNode = __esm({
       const resolvedTrailingIcon = isBinding(props.trailingIcon) ? boundTrailingIcon : props.trailingIcon;
       const buttonStyle = props.style ?? "primary";
       const variant = buttonVariant(buttonStyle);
+      const glassPreview = variant === "glass" && isIOSPhoneGlassPreview(ctx.idiomContext);
       const destructive = buttonStyle === "destructive" || props.role === "destructive";
       const primary = variant === "filled";
       const bt2 = resolveButtonTokens(ctx.tokens, props.size, buttonStyle);
@@ -121518,6 +121586,7 @@ var init_renderNode = __esm({
           "aria-label": accessibleLabel,
           "aria-busy": props.loading === true ? true : void 0,
           "data-button-variant": variant,
+          "data-himi-glass-material": glassPreview ? "button" : void 0,
           "data-button-role": props.role,
           "data-himalaya-idiom-press": idiomPress(ctx, "button"),
           onClick,
@@ -121570,11 +121639,24 @@ var init_renderNode = __esm({
             // An authored `text` token paints its own line height too — the one the hit area estimates with.
             ...bt2.text != null && f2.line != null ? { lineHeight: f2.line } : {},
             ...bt2.text != null && f2.letterSpacing != null ? { letterSpacing: f2.letterSpacing } : {},
-            background: filled ? accent : "transparent",
-            color: fg,
+            background: variant === "glass" && glassPreview && ctx.scheme === "highContrast" ? "Canvas" : filled ? accent : "transparent",
+            color: variant === "glass" && glassPreview && ctx.scheme === "highContrast" ? "CanvasText" : fg,
+            ...variant === "glass" && glassPreview && ctx.scheme !== "highContrast" ? IOS_GLASS_PREVIEW_PALETTE[ctx.scheme] : {},
             ...slop > 0 ? { border: "none", borderTop: `${slop}px solid transparent`, borderBottom: `${slop}px solid transparent`, backgroundClip: "padding-box", marginTop: -slop, marginBottom: -slop, ...outlined ? { boxShadow: `inset 0 0 0 ${borderWidth}px ${outlineColor}` } : {} } : { border: outlined ? `${borderWidth}px solid ${outlineColor}` : "none" },
             ...variant === "elevated" ? { boxShadow: `${slop > 0 && outlined ? `inset 0 0 0 ${borderWidth}px ${outlineColor}, ` : ""}0 2px 4px rgba(0,0,0,0.2)` } : {},
-            ...variant === "glass" ? { backdropFilter: "blur(12px)", WebkitBackdropFilter: "blur(12px)" } : {},
+            ...glassPreview && ctx.scheme !== "highContrast" ? { "--himi-glass-material-filter": "saturate(180%) blur(18px)" } : {},
+            ...variant === "glass" && glassPreview ? ctx.scheme === "highContrast" ? {
+              backdropFilter: "none",
+              WebkitBackdropFilter: "none",
+              ...bt2.border == null ? slop > 0 ? { borderLeft: "1px solid CanvasText", borderRight: "1px solid CanvasText", borderTop: `${slop}px solid transparent`, borderBottom: `${slop}px solid transparent` } : { border: "1px solid CanvasText" } : {},
+              boxShadow: "none"
+            } : {
+              backdropFilter: "saturate(180%) blur(18px)",
+              WebkitBackdropFilter: "saturate(180%) blur(18px)",
+              ...bt2.border == null && borderWidth === 0 ? slop > 0 ? { borderLeft: "1px solid var(--himi-glass-rim)", borderRight: "1px solid var(--himi-glass-rim)", borderTop: `${slop}px solid transparent`, borderBottom: `${slop}px solid transparent` } : { border: "1px solid var(--himi-glass-rim)" } : {},
+              backgroundImage: "linear-gradient(155deg, var(--himi-glass-highlight), transparent 42%)",
+              boxShadow: `${slop > 0 && outlined ? `inset 0 0 0 ${borderWidth}px ${outlineColor}, ` : ""}inset 0 1px 0 var(--himi-glass-highlight), 0 5px 18px var(--himi-glass-shadow)`
+            } : variant === "glass" ? { backdropFilter: "blur(12px)", WebkitBackdropFilter: "blur(12px)" } : {},
             cursor: disabled ? "default" : "pointer",
             opacity: disabled ? 0.55 : 1,
             boxSizing: "border-box",
@@ -122006,11 +122088,28 @@ var init_renderNode = __esm({
       useIsomorphicLayoutEffect(() => {
         if (!detents.length || !mounted) return;
         const region = host ? overHost ? host.parentElement : host.previousElementSibling : null;
-        const measure2 = () => setRegionPx(region?.clientHeight || (typeof window !== "undefined" ? window.innerHeight : 0));
+        const measure2 = () => {
+          const fallback = typeof window !== "undefined" ? window.innerHeight : 0;
+          if (!region) {
+            setRegionPx(fallback);
+            return;
+          }
+          const regionRect = region.getBoundingClientRect();
+          const anchorBottom = host?.getBoundingClientRect().bottom ?? regionRect.bottom;
+          const scale = region.offsetHeight > 0 && regionRect.height > 0 ? regionRect.height / region.offsetHeight : 1;
+          const available = drawerDetentRegionPx(region.clientHeight, scale, regionRect.top, anchorBottom);
+          setRegionPx(available ?? (region.clientHeight || fallback));
+        };
         measure2();
         if (typeof window === "undefined") return;
         window.addEventListener("resize", measure2);
-        return () => window.removeEventListener("resize", measure2);
+        const resizeObserver = typeof ResizeObserver !== "undefined" ? new ResizeObserver(measure2) : null;
+        if (resizeObserver && region) resizeObserver.observe(region);
+        if (resizeObserver && host) resizeObserver.observe(host);
+        return () => {
+          window.removeEventListener("resize", measure2);
+          resizeObserver?.disconnect();
+        };
       }, [host, overHost, mounted, detents.length]);
       const latest = React11.useRef({ ctx, onDismiss: props.onDismiss });
       latest.current = { ctx, onDismiss: props.onDismiss };
@@ -124578,12 +124677,29 @@ function renderDescriptorToHtml(payload, tokens2, scheme = "light", provider = n
     ...opts?.assetBaseUrl ? { assetBaseUrl: opts.assetBaseUrl } : {}
   });
   const FOCUS_STYLE_MARKUP = `<style data-himalaya-focus-ring>${FOCUS_RING_CSS}</style>`;
-  const withFocusRing = (markup) => markup ? FOCUS_STYLE_MARKUP + markup : markup;
+  const glassPreview = isIOSPhoneGlassPreview(opts?.idiomContext);
+  const glassStyleMarkup = `<style data-himalaya-glass-preview>@media (prefers-reduced-transparency:reduce),(forced-colors:active),(prefers-contrast:more){.himi-ios-glass-preview [data-himi-glass-material]{${IOS_GLASS_PREVIEW_ACCESSIBILITY_DECLARATIONS}}}</style>`;
+  const glassPalette = IOS_GLASS_PREVIEW_PALETTE[scheme === "dark" ? "dark" : "light"];
+  const withRenderStyles = (markup) => {
+    if (!markup) return markup;
+    if (!glassPreview) return FOCUS_STYLE_MARKUP + markup;
+    const scoped = renderToStaticMarkup(React12.createElement(
+      "div",
+      {
+        className: "himi-ios-glass-preview",
+        "data-glass-scheme": scheme,
+        "data-glass-quality": "blur",
+        style: { display: "contents", ...glassPalette },
+        dangerouslySetInnerHTML: { __html: markup }
+      }
+    ));
+    return FOCUS_STYLE_MARKUP + glassStyleMarkup + scoped;
+  };
   const header = chrome?.stickyHeader;
   const footer = chrome?.stickyFooter;
   const dir = rtl ? { dir: "rtl" } : {};
   if (header || footer) {
-    return withFocusRing(renderToStaticMarkup(
+    return withRenderStyles(renderToStaticMarkup(
       React12.createElement(
         "div",
         // F-22 — same footer pin as ScreenHost: a full-height flex column + margin-top:auto
@@ -124604,11 +124720,11 @@ function renderDescriptorToHtml(payload, tokens2, scheme = "light", provider = n
     ));
   }
   if (rtl) {
-    return withFocusRing(renderToStaticMarkup(
+    return withRenderStyles(renderToStaticMarkup(
       React12.createElement("div", dir, renderNode(payload, ctx))
     ));
   }
-  return withFocusRing(renderToStaticMarkup(
+  return withRenderStyles(renderToStaticMarkup(
     React12.createElement(React12.Fragment, null, renderNode(payload, ctx))
   ));
 }
@@ -124617,6 +124733,7 @@ var init_renderToHtml = __esm({
     "use strict";
     init_renderNode();
     init_env();
+    init_glassPreview();
   }
 });
 
@@ -163184,6 +163301,134 @@ var init_member_exchange = __esm({
   }
 });
 
+// ../../core/serve-runtime/src/member-forward.ts
+function matchMemberForward(method, raw, rules = MEMBER_FORWARD_ALLOWLIST) {
+  if (typeof method !== "string" || typeof raw !== "string" || raw.length === 0 || raw.length > 8192) return null;
+  const verb = method.toUpperCase();
+  let url;
+  try {
+    url = new URL(raw);
+  } catch {
+    return null;
+  }
+  if (url.protocol !== "https:" || url.port !== "" || url.username || url.password || url.hash) return null;
+  const rawPath = raw.replace(/^https:\/\/[^/?#]*/i, "").split(/[?#]/, 1)[0];
+  if (rawPath !== url.pathname || /[%\\]|\/\/|\.\./.test(rawPath)) return null;
+  const host = url.hostname.toLowerCase();
+  const rule = rules.find((r3) => r3.method === verb && r3.host === host && r3.path.test(url.pathname));
+  if (!rule) return null;
+  const seen = /* @__PURE__ */ new Set();
+  for (const [key3, value] of url.searchParams) {
+    const allowed2 = Object.hasOwn(rule.query, key3) ? rule.query[key3] : void 0;
+    if (!(allowed2 instanceof RegExp) || seen.has(key3) || !allowed2.test(value)) return null;
+    seen.add(key3);
+  }
+  if ((rule.required ?? []).some((key3) => !seen.has(key3))) return null;
+  return { rule, url };
+}
+function matchForwardHeaders(rule, raw) {
+  const allowed2 = rule.headers ?? {};
+  const out2 = {};
+  if (raw !== void 0 && raw !== null) {
+    if (typeof raw !== "object" || Array.isArray(raw)) return null;
+    for (const [name, value] of Object.entries(raw)) {
+      const canonical7 = Object.keys(allowed2).find((k2) => k2.toLowerCase() === name.toLowerCase());
+      if (!canonical7 || typeof value !== "string" || !allowed2[canonical7].test(value) || Object.hasOwn(out2, canonical7)) return null;
+      out2[canonical7] = value;
+    }
+  }
+  if ((rule.requiredHeaders ?? []).some((name) => !Object.hasOwn(out2, name))) return null;
+  return out2;
+}
+async function readCapped(res, maxChars) {
+  const declared = Number(res.headers.get("content-length"));
+  if (Number.isFinite(declared) && declared > maxChars * 4) {
+    await res.body?.cancel().catch(() => {
+    });
+    return null;
+  }
+  if (!res.body) {
+    const text12 = await res.text();
+    return text12.length > maxChars ? null : text12;
+  }
+  const reader = res.body.getReader();
+  const decoder = new TextDecoder();
+  let text11 = "";
+  for (; ; ) {
+    const { done, value } = await reader.read();
+    if (done) break;
+    text11 += decoder.decode(value, { stream: true });
+    if (text11.length > maxChars) {
+      await reader.cancel().catch(() => {
+      });
+      return null;
+    }
+  }
+  text11 += decoder.decode();
+  return text11.length > maxChars ? null : text11;
+}
+async function memberForwardCall(match, body, memberToken, fetchImpl = fetch, extraHeaders = {}) {
+  const headers2 = { Accept: "application/json", ...extraHeaders };
+  if (body !== void 0) headers2["Content-Type"] = "application/json";
+  if (match.rule.auth === "member") headers2.Authorization = memberToken;
+  try {
+    const res = await fetchImpl(match.url.toString(), {
+      method: match.rule.method,
+      headers: headers2,
+      body,
+      redirect: "manual",
+      credentials: "omit",
+      signal: AbortSignal.timeout(FORWARD_TIMEOUT_MS)
+    });
+    const text11 = await readCapped(res, MAX_RESPONSE_CHARS);
+    if (text11 === null) return { ok: false, code: "forward_too_large" };
+    return { ok: true, status: res.status, body: text11 };
+  } catch {
+    return { ok: false, code: "forward_failed" };
+  }
+}
+var BOOL, SMALL_INT, TOKENISH, CURSOR, ROOM, LIST_QUERY, MEMBER_FORWARD_ALLOWLIST, FORWARD_TIMEOUT_MS, MAX_RESPONSE_CHARS;
+var init_member_forward = __esm({
+  "../../core/serve-runtime/src/member-forward.ts"() {
+    BOOL = /^(true|false)$/;
+    SMALL_INT = /^\d{1,6}$/;
+    TOKENISH = /^[A-Za-z0-9._~-]{1,4096}$/;
+    CURSOR = /^[A-Za-z0-9._~:=+/,-]{1,2048}$/;
+    ROOM = "[A-Za-z0-9-]{1,64}";
+    LIST_QUERY = { chatToken: TOKENISH, nextPointer: CURSOR, pageSize: SMALL_INT, archived: BOOL, onlyUnread: BOOL, lastMessageLimit: SMALL_INT, unreadChatroomLimit: SMALL_INT };
+    MEMBER_FORWARD_ALLOWLIST = [
+      // Chat: mint the chat token with the member token alone.
+      { method: "POST", host: "manage.wix.com", path: /^\/_api\/wix-chat-tokens-server\/v1\/chat-tokens$/, auth: "member", query: { isForUnifiedList: BOOL } },
+      // Chat: the member's conversation list (all, or one participant type), authorised by the chat token in the query.
+      { method: "POST", host: "manage.wix.com", path: /^\/_api\/chat-web\/v1\/chatrooms-for-list-view(?:\/(?:business|siteMember))?$/, auth: "none", query: LIST_QUERY, required: ["chatToken"] },
+      { method: "GET", host: "manage.wix.com", path: /^\/_api\/chat-web\/v2\/chatrooms$/, auth: "none", query: { chatToken: TOKENISH, nextPointer: CURSOR, pageSize: SMALL_INT }, required: ["chatToken"] },
+      // Chat: a conversation's history.
+      {
+        method: "GET",
+        host: "manage.wix.com",
+        path: new RegExp(`^/_api/chat-web/v1/chatrooms/${ROOM}/messages$`),
+        auth: "none",
+        query: { chatToken: TOKENISH, pageSize: SMALL_INT, ordering: /^(?:Asc|Desc)$/, nextPointer: CURSOR },
+        required: ["chatToken"]
+      },
+      // Chat: send a message. The chat token rides the `ChatToken` HEADER here (the query is rejected: probed).
+      {
+        method: "POST",
+        host: "manage.wix.com",
+        path: new RegExp(`^/_api/chat-web/v2/chatrooms/${ROOM}/messages$`),
+        auth: "none",
+        query: {},
+        headers: { ChatToken: TOKENISH },
+        requiredHeaders: ["ChatToken"]
+      },
+      // Chat: the live-update (realtime) token. The answer carries a credential for a third party; it is returned to the caller only.
+      { method: "POST", host: "manage.wix.com", path: /^\/_api\/chat-web\/v1\/real-time-tokens$/, auth: "none", query: { chatToken: TOKENISH }, required: ["chatToken"] }
+    ];
+    FORWARD_TIMEOUT_MS = 15e3;
+    MAX_RESPONSE_CHARS = 1e6;
+  }
+});
+
 // ../../core/serve-runtime/package-share.ts
 function parseStored(bytes2, id) {
   if (!bytes2) return null;
@@ -163740,6 +163985,27 @@ ${releaseId}`;
     }
     return new Response(body, { status: 200, headers: { "content-type": JSON_CT3, etag, "cache-control": cache, ...vary } });
   }
+  async function draftPreviewOnly(request, url, noStore) {
+    const refuse7 = (status, error) => ({ ok: false, response: json5(status, { error }, noStore) });
+    if (opts.webwixBridge === false) return refuse7(503, "webwix_bridge_disabled");
+    if (!opts.previewTokenSecret) return refuse7(503, "preview_token_unavailable");
+    const app = resolveApp(request, url);
+    if (!app) return refuse7(400, "app_required");
+    const pin = resolvePin(request, url);
+    if (!pin || !resolvePreviewToken(request, url)) return refuse7(403, "draft_preview_required");
+    const cfg = await appConfigFor(request, url, app);
+    if (!cfg.ok) return { ok: false, response: cfg.response };
+    let ringPinned = false;
+    if (opts.ringReleases) {
+      try {
+        ringPinned = new Set(await opts.ringReleases(app)).has(pin);
+      } catch {
+        return refuse7(503, "ring_lookup_unavailable");
+      }
+    }
+    if ((await manifest(app))?.releaseId === pin || ringPinned) return refuse7(403, "draft_preview_required");
+    return { ok: true, app, pin, cfgBytes: cfg.bytes };
+  }
   async function authorizePinnedRead(request, url, app, releaseId, screenId) {
     const denied2 = await checkPinnedRead({
       secret: opts.previewTokenSecret,
@@ -164020,26 +164286,9 @@ ${releaseId}`;
       }
       if (request.method === "POST" && path2 === "/v1/__webwix/member-exchange") {
         const noStore = { "cache-control": "no-store" };
-        if (opts.webwixBridge === false) return json5(503, { error: "webwix_bridge_disabled" }, noStore);
-        if (!opts.previewTokenSecret) return json5(503, { error: "preview_token_unavailable" }, noStore);
-        const exchangeApp = resolveApp(request, url);
-        if (!exchangeApp) return json5(400, { error: "app_required" }, noStore);
-        const exchangePin = resolvePin(request, url);
-        if (!exchangePin || !resolvePreviewToken(request, url)) return json5(403, { error: "draft_preview_required" }, noStore);
-        const exchangeCfg = await appConfigFor(request, url, exchangeApp);
-        if (!exchangeCfg.ok) return exchangeCfg.response;
-        let ringPinned = false;
-        if (opts.ringReleases) {
-          try {
-            ringPinned = new Set(await opts.ringReleases(exchangeApp)).has(exchangePin);
-          } catch {
-            return json5(503, { error: "ring_lookup_unavailable" }, noStore);
-          }
-        }
-        if ((await manifest(exchangeApp))?.releaseId === exchangePin || ringPinned) {
-          return json5(403, { error: "draft_preview_required" }, noStore);
-        }
-        const exchangeClient = wixClientIdOf(utf8Decode(exchangeCfg.bytes));
+        const gate = await draftPreviewOnly(request, url, noStore);
+        if (!gate.ok) return gate.response;
+        const exchangeClient = wixClientIdOf(utf8Decode(gate.cfgBytes));
         if ("error" in exchangeClient) return json5(501, { error: `member_exchange_${exchangeClient.error}` }, noStore);
         const headerToken = request.headers.get("x-himalaya-member-session");
         let sessionToken = headerToken ?? void 0;
@@ -164068,6 +164317,40 @@ ${releaseId}`;
         if (exchanged.code === "bad_request") return json5(400, { error: "invalid_session_token", received }, noStore);
         return json5(502, { error: exchanged.code, ...exchanged.status !== void 0 ? { status: exchanged.status } : {} }, noStore);
       }
+      if (request.method === "POST" && path2 === "/v1/__webwix/member-forward") {
+        const noStore = { "cache-control": "no-store" };
+        const gate = await draftPreviewOnly(request, url, noStore);
+        if (!gate.ok) return gate.response;
+        let raw;
+        try {
+          raw = await request.text();
+        } catch {
+          return json5(400, { error: "body_unreadable" }, noStore);
+        }
+        if (!raw) return json5(400, { error: "empty_body" }, noStore);
+        if (raw.length > 256e3) return json5(413, { error: "body_too_large" }, noStore);
+        let parsed;
+        try {
+          parsed = JSON.parse(raw);
+        } catch {
+          return json5(400, { error: "invalid_json" }, noStore);
+        }
+        if (!parsed || typeof parsed !== "object" || Array.isArray(parsed)) return json5(400, { error: "invalid_body" }, noStore);
+        if (typeof parsed.memberToken !== "string" || !parsed.memberToken || parsed.memberToken.length > 4096) return json5(400, { error: "member_token_required" }, noStore);
+        const match = matchMemberForward(parsed.method, parsed.url);
+        if (!match) return json5(403, { error: "forward_target_refused" }, noStore);
+        const forwardHeaders = matchForwardHeaders(match.rule, parsed.headers);
+        if (!forwardHeaders) return json5(403, { error: "forward_header_refused" }, noStore);
+        let forwardBody;
+        if (parsed.body !== void 0) {
+          if (match.rule.method === "GET" || match.rule.method === "DELETE") return json5(400, { error: "body_not_allowed" }, noStore);
+          forwardBody = typeof parsed.body === "string" ? parsed.body : JSON.stringify(parsed.body);
+          if (forwardBody.length > 64e3) return json5(413, { error: "body_too_large" }, noStore);
+        }
+        const forwarded = await memberForwardCall(match, forwardBody, parsed.memberToken, webwixFetch, forwardHeaders);
+        if (!forwarded.ok) return json5(502, { error: forwarded.code }, noStore);
+        return json5(200, { status: forwarded.status, body: forwarded.body }, noStore);
+      }
       if (request.method === "POST" && path2 === "/v1/__webwix/call") {
         const served = { rung: "none" };
         let status = 500;
@@ -164693,6 +164976,7 @@ var init_server2 = __esm({
     init_contract();
     init_pinned_read();
     init_member_exchange();
+    init_member_forward();
     init_package_share();
     init_wix_bridge();
     init_account_rung();
@@ -165152,33 +165436,36 @@ var init_preview_assets_generated = __esm({
   "../../packages/serve/src/preview-assets.generated.ts"() {
     init_preview_assets_format();
     PREVIEW_ASSET_MANIFEST = [
-      { key: "assets/DashboardHost-lyHYXHuD.js", contentType: "application/javascript; charset=utf-8", offset: 8, length: 2916, sha256: "d714aaba06f8832b04b089fba6db6a70218f08a5ea412486af05e7ae6be4f3bf" },
-      { key: "assets/DevDrawer-DFjJakFH.js", contentType: "application/javascript; charset=utf-8", offset: 2924, length: 16744, sha256: "451195288ed7538b5837eb2728db9e238b79994bada3c0da2d68cc724180c309" },
-      { key: "assets/IdiomCompare-BS8D62MN.js", contentType: "application/javascript; charset=utf-8", offset: 19668, length: 1892, sha256: "2733ff1ba2fb1a7db4acbf792d658aa5351b97b7f66d76d05bc0636d2ae5b9a6" },
-      { key: "assets/LightboxViewer-BA8NnNMt.js", contentType: "application/javascript; charset=utf-8", offset: 21560, length: 8132, sha256: "a6d325a705486aeec5b75074b105f4c96f247b6c658831d0ee9931eb9850394a" },
-      { key: "assets/PhonePreviewControl-IcIGz4PD.js", contentType: "application/javascript; charset=utf-8", offset: 29692, length: 37729, sha256: "b19a2f60077f23fa575957ef829eaf6025a310401afed4993903e15ec73eabfb" },
-      { key: "assets/SchemeCompare-DV8FUeO3.js", contentType: "application/javascript; charset=utf-8", offset: 67421, length: 1824, sha256: "66b0b48bbe708ff7c09734cf74ab537292b812b0fecb5b0dc7d326bde35575df" },
-      { key: "assets/index-CVbkvo-O.js", contentType: "application/javascript; charset=utf-8", offset: 69245, length: 1311557, sha256: "63f6534405cc00ea45d6dd48fee69bffba89d343493a3169ef75055f4f8e5e77" },
-      { key: "assets/pdf-D7kp5epP.js", contentType: "application/javascript; charset=utf-8", offset: 1380802, length: 488199, sha256: "3cf5f09fe2432fdc0cfe85bfc66956c8abac0862cf17d942caeeba19111b2c33" },
-      { key: "assets/pdf.worker.min-BQa_JDET.js", contentType: "application/javascript; charset=utf-8", offset: 1869001, length: 73, sha256: "41bcfda4f3c8c0a81c785ea87c69afc8e7d0ed8c333324aee94c273d881bb6aa" },
-      { key: "assets/pdf.worker.min-BmVo14Nb.mjs", contentType: "application/javascript; charset=utf-8", offset: 1869074, length: 1317034, sha256: "a33cfe728c584fdba4fcc1fd54bcdc2f9f2f13889ddbb5b2bd1d0f8cbe49b84e" },
-      { key: "assets/pdfDocument-C_peMth9.js", contentType: "application/javascript; charset=utf-8", offset: 3186108, length: 3379, sha256: "e7525980a1a991d29caba74a158a21fcd926bacbab64ce5bd2d177ffa199df1c" },
-      { key: "assets/pdfFetch-Cc8i1I1h.js", contentType: "application/javascript; charset=utf-8", offset: 3189487, length: 2266, sha256: "1d21ad008921942217c9eac0c35b1713773b9d89c71e3ab4412781f7bb88f463" },
-      { key: "fonts/Roboto-LICENSE.txt", contentType: "application/octet-stream", offset: 3191753, length: 4610, sha256: "994062dd7af4186a739de55dd9e151c63b6301f8e2cbafc608d35c2e87da0cd2" },
-      { key: "fonts/Roboto-Variable.ttf", contentType: "font/ttf", offset: 3196363, length: 488584, sha256: "d7598e12c5dbef095ff8272cfc55da0250bd07fbdecbac8a530b9b277872a134" },
-      { key: "fonts/WixMadeforDisplay-Bold.ttf", contentType: "font/ttf", offset: 3684947, length: 90924, sha256: "ec4c7d63772d980d6e147b2df6215fd2737e4b04cebe0cf7e11dc695fb63cdcf" },
-      { key: "fonts/WixMadeforDisplay-ExtraBold.ttf", contentType: "font/ttf", offset: 3775871, length: 90984, sha256: "bf4c16a2774edd38a921edf3099469866cd74c094fd596f3fa4e81f54a04dfaa" },
-      { key: "fonts/WixMadeforDisplay-Medium.ttf", contentType: "font/ttf", offset: 3866855, length: 90980, sha256: "368faca44fb9f7207e4af784e94750b1ee59c1098b8689e0f4a918926f244fb5" },
-      { key: "fonts/WixMadeforDisplay-Regular.ttf", contentType: "font/ttf", offset: 3957835, length: 90872, sha256: "97ed8f1a6772abe26e3d8af5cecfc4b02faa94497d585b0398b5053b739a70c1" },
-      { key: "fonts/WixMadeforDisplay-SemiBold.ttf", contentType: "font/ttf", offset: 4048707, length: 90980, sha256: "642feab8a48ddf6c7a89d7c2a7c0edfa0e6e773f671287e460e222703563191e" },
-      { key: "fonts/WixMadeforText-Bold.ttf", contentType: "font/ttf", offset: 4139687, length: 108636, sha256: "37c179b4fefb63ea9637322b84583a2df53aa226c150294eea1675c14b1b8e29" },
-      { key: "fonts/WixMadeforText-ExtraBold.ttf", contentType: "font/ttf", offset: 4248323, length: 109084, sha256: "62e2fe4718129f36ecdb0ae4de385bd6b81ecc876146447167c6c140fad699a9" },
-      { key: "fonts/WixMadeforText-Medium.ttf", contentType: "font/ttf", offset: 4357407, length: 109048, sha256: "4ecf270136af928612c76fe4ebade91d8156975e5ea4c0cf9225501dd1788e02" },
-      { key: "fonts/WixMadeforText-Regular.ttf", contentType: "font/ttf", offset: 4466455, length: 107700, sha256: "dee56f09fd3efc127c1ea95557edc74110c1460a46287da36e0af25efd341ef5" },
-      { key: "fonts/WixMadeforText-SemiBold.ttf", contentType: "font/ttf", offset: 4574155, length: 88108, sha256: "dced97a77624bc5f8b1ae65850360908297f4588e09feb6f22792d29dc7e765b" },
-      { key: "himi-sw.js", contentType: "application/javascript; charset=utf-8", offset: 4662263, length: 6748, sha256: "4a92459977d7cefa1a6a7e020c3a63509737f083b3f2773557c1a5771665811a" },
-      { key: "index.html", contentType: "text/html; charset=utf-8", offset: 4669011, length: 4947, sha256: "dbe3e83a81c236caac3350f4e59823c980a304e29e51f8866c562d3ee7ceddad" },
-      { key: "t5-frame.html", contentType: "text/html; charset=utf-8", offset: 4673958, length: 18080, sha256: "937286e50af2fc4e44f7fb35b277f35254e5eb24a3d364a70cfa914d4286d0d9" }
+      { key: "assets/DashboardHost-bmDS1KPX.js", contentType: "application/javascript; charset=utf-8", offset: 8, length: 2916, sha256: "f1b70aebc8859dc6e90e551d70440f9ff93eba6d8de35a9915bf21ada3426ae4" },
+      { key: "assets/DevDrawer-b9bmp6x0.js", contentType: "application/javascript; charset=utf-8", offset: 2924, length: 16744, sha256: "f9c38bf7b1049e603dbeddad6e3f6ab64ba5ce1c8f78f065263cf3eba295936c" },
+      { key: "assets/IdiomCompare-CjXABUxk.js", contentType: "application/javascript; charset=utf-8", offset: 19668, length: 1892, sha256: "2a2d75e8805c6d4a90913c7b686930d520236a74a175ecd62e171046f14ee6dd" },
+      { key: "assets/LightboxViewer-CJY1_bay.js", contentType: "application/javascript; charset=utf-8", offset: 21560, length: 8132, sha256: "a68afa4ef72c3f2539acf9f40e98c4cf4535a6ff04382e064de3aa4c952fac2c" },
+      { key: "assets/PhonePreviewControl-BEQjOu5h.js", contentType: "application/javascript; charset=utf-8", offset: 29692, length: 37729, sha256: "27e70a7515e2984a21750afa75ad849ea48dd7d77ce3c2faec14140de501071c" },
+      { key: "assets/SchemeCompare-BL1UfDvL.js", contentType: "application/javascript; charset=utf-8", offset: 67421, length: 1824, sha256: "7fb41df81f63c1c28b6b7bf5d0d61ee70090d599810e6de38783151a682ce423" },
+      { key: "assets/glassPreviewBrowser-Bt5ZFmG4.js", contentType: "application/javascript; charset=utf-8", offset: 69245, length: 342, sha256: "20d73f97d38f6d9a0b79e68e24954cd6bbfe66833a6e6aecae00a9102e64cab3" },
+      { key: "assets/index-WPQ7BYkV.js", contentType: "application/javascript; charset=utf-8", offset: 69587, length: 1317118, sha256: "b7c6f295c05790084440f9ef8c94c86c358167199b9a424f26f04befdab9a166" },
+      { key: "assets/pdf-DHWUOjfi.js", contentType: "application/javascript; charset=utf-8", offset: 1386705, length: 488199, sha256: "a6df8c0d4c8b79fd3ba3c0ad5b27d872a58c18d8d99f9fa7ff2d867b14d20d88" },
+      { key: "assets/pdf.worker.min-BQa_JDET.js", contentType: "application/javascript; charset=utf-8", offset: 1874904, length: 73, sha256: "41bcfda4f3c8c0a81c785ea87c69afc8e7d0ed8c333324aee94c273d881bb6aa" },
+      { key: "assets/pdf.worker.min-BmVo14Nb.mjs", contentType: "application/javascript; charset=utf-8", offset: 1874977, length: 1317034, sha256: "a33cfe728c584fdba4fcc1fd54bcdc2f9f2f13889ddbb5b2bd1d0f8cbe49b84e" },
+      { key: "assets/pdfDocument-DxJ9CjyL.js", contentType: "application/javascript; charset=utf-8", offset: 3192011, length: 3379, sha256: "c25a50345b3a778e6c26ee39a9edb0d4dbf13f26ff0cc713fd8b57bb359d36ab" },
+      { key: "assets/pdfFetch-Cc8i1I1h.js", contentType: "application/javascript; charset=utf-8", offset: 3195390, length: 2266, sha256: "1d21ad008921942217c9eac0c35b1713773b9d89c71e3ab4412781f7bb88f463" },
+      { key: "fonts/Roboto-LICENSE.txt", contentType: "application/octet-stream", offset: 3197656, length: 4610, sha256: "994062dd7af4186a739de55dd9e151c63b6301f8e2cbafc608d35c2e87da0cd2" },
+      { key: "fonts/Roboto-Variable.ttf", contentType: "font/ttf", offset: 3202266, length: 488584, sha256: "d7598e12c5dbef095ff8272cfc55da0250bd07fbdecbac8a530b9b277872a134" },
+      { key: "fonts/WixMadeforDisplay-Bold.ttf", contentType: "font/ttf", offset: 3690850, length: 90924, sha256: "ec4c7d63772d980d6e147b2df6215fd2737e4b04cebe0cf7e11dc695fb63cdcf" },
+      { key: "fonts/WixMadeforDisplay-ExtraBold.ttf", contentType: "font/ttf", offset: 3781774, length: 90984, sha256: "bf4c16a2774edd38a921edf3099469866cd74c094fd596f3fa4e81f54a04dfaa" },
+      { key: "fonts/WixMadeforDisplay-Medium.ttf", contentType: "font/ttf", offset: 3872758, length: 90980, sha256: "368faca44fb9f7207e4af784e94750b1ee59c1098b8689e0f4a918926f244fb5" },
+      { key: "fonts/WixMadeforDisplay-Regular.ttf", contentType: "font/ttf", offset: 3963738, length: 90872, sha256: "97ed8f1a6772abe26e3d8af5cecfc4b02faa94497d585b0398b5053b739a70c1" },
+      { key: "fonts/WixMadeforDisplay-SemiBold.ttf", contentType: "font/ttf", offset: 4054610, length: 90980, sha256: "642feab8a48ddf6c7a89d7c2a7c0edfa0e6e773f671287e460e222703563191e" },
+      { key: "fonts/WixMadeforText-Bold.ttf", contentType: "font/ttf", offset: 4145590, length: 108636, sha256: "37c179b4fefb63ea9637322b84583a2df53aa226c150294eea1675c14b1b8e29" },
+      { key: "fonts/WixMadeforText-ExtraBold.ttf", contentType: "font/ttf", offset: 4254226, length: 109084, sha256: "62e2fe4718129f36ecdb0ae4de385bd6b81ecc876146447167c6c140fad699a9" },
+      { key: "fonts/WixMadeforText-Medium.ttf", contentType: "font/ttf", offset: 4363310, length: 109048, sha256: "4ecf270136af928612c76fe4ebade91d8156975e5ea4c0cf9225501dd1788e02" },
+      { key: "fonts/WixMadeforText-Regular.ttf", contentType: "font/ttf", offset: 4472358, length: 107700, sha256: "dee56f09fd3efc127c1ea95557edc74110c1460a46287da36e0af25efd341ef5" },
+      { key: "fonts/WixMadeforText-SemiBold.ttf", contentType: "font/ttf", offset: 4580058, length: 88108, sha256: "dced97a77624bc5f8b1ae65850360908297f4588e09feb6f22792d29dc7e765b" },
+      { key: "himi-sw.js", contentType: "application/javascript; charset=utf-8", offset: 4668166, length: 6748, sha256: "4a92459977d7cefa1a6a7e020c3a63509737f083b3f2773557c1a5771665811a" },
+      { key: "index.html", contentType: "text/html; charset=utf-8", offset: 4674914, length: 4947, sha256: "2ff61ed31d66505bbd1bf8d484c6515e240dbd84d2d15aeea52ca85d3cb849c0" },
+      { key: "ios-glass-preview.css", contentType: "text/css; charset=utf-8", offset: 4679861, length: 7193, sha256: "a482f4796147c2a3893942e10ab225bd3b6f749f7125fe0330680d4c20ea0212" },
+      { key: "ios-glass-preview.svg", contentType: "image/svg+xml", offset: 4687054, length: 423, sha256: "b9cd5989d31464a0422f260a332af6be5add0b04de2148944de35158f3b75efc" },
+      { key: "t5-frame.html", contentType: "text/html; charset=utf-8", offset: 4687477, length: 18080, sha256: "937286e50af2fc4e44f7fb35b277f35254e5eb24a3d364a70cfa914d4286d0d9" }
     ];
   }
 });
@@ -176770,7 +177057,7 @@ function extOf2(url) {
   if (/\.ico$/i.test(path2)) return "ico";
   return "jpg";
 }
-async function readCapped(res, cap) {
+async function readCapped2(res, cap) {
   const declared = Number(res.headers?.get?.("content-length"));
   if (Number.isFinite(declared) && declared > cap) {
     await discardBody(res);
@@ -176806,7 +177093,7 @@ async function fetchBrandFace(family, url, fetchImpl) {
       await discardBody(res);
       return void 0;
     }
-    const capped = await readCapped(res, MAX_FONT_BYTES);
+    const capped = await readCapped2(res, MAX_FONT_BYTES);
     if (!capped) return void 0;
     woff2 = capped;
   } catch {
@@ -177345,7 +177632,7 @@ function pagesFromRegistry(js2) {
   return [...m2[1].matchAll(/["']?([A-Z][A-Za-z0-9_]*)["']?\s*:/g)].map((x2) => x2[1]).slice(0, MAX_ROUTES);
 }
 async function readText3(res, cap) {
-  const buf = await readCapped(res, cap);
+  const buf = await readCapped2(res, cap);
   if (!buf) throw new Error(`body over the ${cap}-byte cap`);
   return buf.toString("utf8");
 }
@@ -180788,7 +181075,7 @@ async function createPlaywrightBrowser(load3 = () => import("playwright"), siteF
               await route.fulfill({ status: res.status, headers: { location }, body: Buffer.alloc(0) });
               return;
             }
-            const capped = await readCapped(res, MAX_DOCUMENT_BYTES);
+            const capped = await readCapped2(res, MAX_DOCUMENT_BYTES);
             if (!capped) {
               await route.abort();
               return;
@@ -181198,7 +181485,7 @@ function projectDownloader(apiFetch, apiBase, token, extract = systemTar) {
     if (!res.ok) {
       throw new Error(res.status === 401 || res.status === 403 ? `refused (${res.status}) \u2014 the signed-in user cannot download this app's code (editor role needed)` : `project download failed: HTTP ${res.status}`);
     }
-    const bytes2 = await readCapped(res, MAX_TARBALL_BYTES);
+    const bytes2 = await readCapped2(res, MAX_TARBALL_BYTES);
     if (!bytes2) throw new Error(`project download is over the ${MAX_TARBALL_BYTES}-byte cap`);
     const root = mkdtempSync10(join112(tmpdir11(), "himi-base44-"));
     const cleanup = () => rmSync30(root, { recursive: true, force: true });

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@wix/himalaya-cli",
-  "version": "0.1509.0",
+  "version": "0.1511.0",
   "type": "module",
   "description": "himi — the Himalaya authoring CLI. Build a Tier-5 content package on your own machine, push it to the production serve as a draft, preview it on web + Himi Player, and read worker logs back — the remote dev loop. Wraps @himalaya/serve-cli for transport.",
   "keywords": [
@@ -71,5 +71,5 @@
       "artifactId": "himalaya-cli"
     }
   },
-  "falconPackageHash": "e93a43678d27c6109e94db0df1cbc5d530447037d1ba12bc431c73cc"
+  "falconPackageHash": "9fac87f0f65ca13a47bd43f127ab2dbed75f6b66f2f0745a4530c065"
 }