@wix/himalaya-cli 0.1584.0 → 0.1586.0

package/dist/authoring-runtime/node_modules/@wix/himalaya/dist/_types/core/dev-server/src/app-module.d.ts

@@ -186,6 +186,11 @@ export interface DerivedAppMeta {
     /** `provisioning.json` `installedVerticals` — the site's verticals, which decide which Wix
      *  notification destinations a derived route table covers. Read from disk at load time. */
     installedVerticals?: string[];
+    /** `provisioning.json` `siteId` when it is a real metaSiteId (`himi site create
+     *  --write-provisioning` / `himi site analyze --apply` write one; the dev placeholder
+     *  `development-site` is not). Resolves a frog `mobileAppId` template such as Branded Lite's
+     *  `brandedLite_{msid}`: the binary is bound by its Headless clientId and holds no msid. */
+    provisionedMsid?: string;
     /** Forwarded from AppConfig.control for the OTA app-config channel. */
     control?: import("@wix/himalaya/core").AppControl;
     /** Forwarded from AppConfig.appLinkHosts for the OTA app-config channel. */
@@ -287,8 +292,6 @@ export interface DerivedAppMeta {
     /** Android App-Links identity for /.well-known/assetlinks.json. */
     androidAssetLinks?: import("@wix/himalaya/core").AndroidAssetLinks;
 }
-/** `platforms` is the app's parsed `platforms.json` (RFC 0051 surface envelope), and
- *  `provisioning` the facts read from its `provisioning.json`. Both are passed IN rather than
- *  read here because this module is types-only by design — the readers live in loader.ts and
- *  provisioning-facts.ts, which already touch the filesystem. */
+/** A Wix metaSiteId is a UUID; anything else in `provisioning.json` is a placeholder. */
+export declare function isMetaSiteId(v: unknown): v is string;
 export declare function deriveAppMeta(name: string, m: AppDevModule, platforms?: Record<string, boolean>, provisioning?: import("./provisioning-facts.js").ProvisioningFacts): DerivedAppMeta;

package/dist/authoring-runtime/node_modules/@wix/himalaya/dist/_types/core/sdk/ui/src/index.d.ts

@@ -44,11 +44,32 @@ export interface SnackbarOptions {
     tone?: SnackbarTone;
     /** Auto-dismiss delay in ms, on every host. Default 3000; 0 or less also means 3000. */
     durationMs?: number;
+    /** One action button ("Undo", "View"). Tapping it runs `actionId` with `args`, then dismisses the
+     *  snackbar. The id must be a worker action:
+     *  - one of this bundle's own `tier5.<svc>.<action>` ids — run on THIS worker, never another
+     *    screen's or the app-level worker's;
+     *  - an app service's `app.<svc>.<action>` — needs `app_services` and an exported action (an app
+     *    service's own id needs neither). The web host refuses it until it hosts app services.
+     *  Any other id (`capability.*`, `himi.*`, a registered handler) is refused when the snackbar is
+     *  requested: the call rejects and nothing is shown. A host that cannot tell which worker asked
+     *  (React Native, an embedded web region) refuses every `action` the same way. */
+    action?: SnackbarAction;
+}
+export interface SnackbarAction {
+    /** The button's text — also its VoiceOver / TalkBack / screen-reader label. */
+    label: string;
+    /** What the tap runs: one of this bundle's own `tier5.<svc>.<action>` ids, or `app.<svc>.<action>`. */
+    actionId: string;
+    /** The action's arguments, which the reducer receives as typed JSON. */
+    args?: Record<string, unknown>;
 }
 /** Show a transient snackbar toast: it floats above the tab bar, slides and fades in and out
  *  (fades only under reduced motion), queues behind one that is already showing, and is read
  *  by VoiceOver / TalkBack. Resolves once it is PRESENTED (not after it auto-dismisses).
- *  Rejects with `no_ui_host` if no presenter is attached. */
+ *  Rejects with `no_ui_host` if no presenter is attached; with an `action`, also with
+ *  `invalid_action` (empty label or id), `action_not_allowed` (not one of this bundle's
+ *  actions), or, for an `app.*` id, `undeclared` (no `app_services`), `not_exported`, `no_service`,
+ *  `no_action`, `not_booted` or `unavailable`. */
 export declare function snackbar(options: SnackbarOptions): Promise<void>;
 /** Capability version, for bundles that gate on min binary version. */
 export declare const version = 1;

package/dist/authoring-runtime/node_modules/@wix/himalaya/dist/_types/core/ts/src/bindings.d.ts

@@ -1,5 +1,5 @@
 /** Every sigil the platform understands, without the leading `$`. */
-export declare const BINDING_SIGILS: readonly ["service", "flag", "item", "t"];
+export declare const BINDING_SIGILS: readonly ["service", "flag", "item", "t", "app"];
 export type BindingSigil = (typeof BINDING_SIGILS)[number];
 /**
  * Matches any binding expression by its leading sigil.
@@ -12,11 +12,12 @@ export type BindingSigil = (typeof BINDING_SIGILS)[number];
  * are long enough for that collision to be implausible; one letter is not, and the
  * token grammar is always `$t:<key>` anyway.
  *
- * RFC 0074's `$app:` is deliberately NOT in this list yet. Every renderer gates on it (web
- * `isBinding`, RN), and none resolves `$app:` until the runtime arms land (S3/S5/S7): adding it here
- * alone made web/RN blank a field's literal sibling while iOS/Android printed it. It joins with the
- * resolvers, all surfaces at once. Until then `isAppBinding` / `parseAppBinding` below are the
- * validator's grammar, and the per-app gate keeps `$app:` out of served content.
+ * RFC 0074's `$app:` joined with S7 (#4640), the last runtime resolver arm: iOS/Android
+ * learned it in S3/S5 and the web renderer resolves it now, so every surface treats it as a
+ * binding at once. It needs its COLON for the same reason `t` does — the grammar is always
+ * `$app:<svc>.<path>`, and `\b` after `app` would capture a literal `"$app store"` and blank
+ * it. React Native deliberately has no `$app:` resolver (RFC 0074 §12): there the binding
+ * fails open to the field's literal sibling, exactly like an unbooted worker.
  */
 export declare const BINDING_SIGIL_RE: RegExp;
 /** Is this value a binding rather than a literal? */

package/dist/authoring-runtime/node_modules/@wix/himalaya/dist/_types/core/ts/src/define-app.d.ts

@@ -5,6 +5,7 @@ import type { NavigationConfig, SplashConfig } from "./schema.js";
 import { type AppServicesConfig } from "./app-services-gate.js";
 import { type LocaleConfig } from "./locale.js";
 import { type DistributionConfig } from "./distribution.js";
+import { type StoreConfig } from "./store-adopt.js";
 import type { CmsConfig } from "./cms.js";
 import { type DataResourcesConfig } from "@wix/himalaya/data-resources";
 import { type Base44EntitySpec, type Base44FunctionSpec } from "./base44-entities.js";
@@ -517,6 +518,13 @@ export interface AppConfig {
      * `GET /.well-known/assetlinks.json`. Pure app identity.
      */
     androidAssetLinks?: AndroidAssetLinks;
+    /**
+     * Store identity (#4647). `store.adopt` declares that this app IS an existing store app: the
+     * store build ships under its bundle id, team, App Groups, URL schemes and associated domains
+     * instead of a derived identity. Dev, device and QA builds keep `bundleId` / `applicationId`.
+     * Read only through `adoptedIdentity()` (./store-adopt.ts).
+     */
+    store?: StoreConfig;
 }
 /** Which registrar the native push facade hands its device token to. */
 export type PushRegistrar = "generic" | "wix-ping";
@@ -791,7 +799,7 @@ export interface OrientationEnvelope {
 export declare const DEFAULT_ORIENTATION_ENVELOPE: Required<OrientationEnvelope>;
 /** Fill in the absent families. Total, so callers never branch on `undefined`. */
 export declare function resolveOrientationEnvelope(env?: OrientationEnvelope): Required<OrientationEnvelope>;
-export type Capability = "camera" | "barcode_scanner" | "biometrics" | "secure_storage" | "share" | "push" | "file_picker" | "files" | "open_url" | "pdf" | "clipboard" | "theme" | "photos" | "presigned_upload" | "ui" | "calendar" | "contacts" | "tasks" | "audio_record" | "audio_record_background" | "calls" | "location" | "location_background" | "motion" | "health" | "media_playback" | "webview" | "browser_auth" | "haptic" | "himi_apps" | "iap" | "keyboard" | "network" | "wix_cashier" | "wix_chat" | "live_activity" | "local_database" | "speech" | "speaker_diarization" | "system_intents" | "on_device_ai" | "app_info" | "release_control" | "godot" | "base44" | "animation";
+export type Capability = "camera" | "barcode_scanner" | "biometrics" | "secure_storage" | "share" | "push" | "file_picker" | "files" | "open_url" | "pdf" | "clipboard" | "theme" | "l10n" | "photos" | "presigned_upload" | "ui" | "calendar" | "contacts" | "tasks" | "audio_record" | "audio_record_background" | "calls" | "location" | "location_background" | "motion" | "health" | "media_playback" | "webview" | "browser_auth" | "haptic" | "himi_apps" | "iap" | "keyboard" | "network" | "wix_cashier" | "wix_chat" | "live_activity" | "local_database" | "speech" | "speaker_diarization" | "system_intents" | "on_device_ai" | "app_info" | "release_control" | "godot" | "base44" | "animation";
 /** `defineApp({ wixIap })` — the purchases-service app a build binds this app to. */
 export interface WixIapConfig {
     /** The purchases service's app UUID, registered on the app's own auth site. Not a secret. */

package/dist/authoring-runtime/node_modules/@wix/himalaya/dist/_types/core/ts/src/index.d.ts

@@ -20,6 +20,7 @@ export * from "./worker-subtree-safe-types.generated.js";
 export * from "./icon-catalog.generated.js";
 export * from "./app-link.js";
 export * from "./app-identity.js";
+export * from "./store-adopt.js";
 export * from "./app-registry-client.js";
 export * from "./site-shell.js";
 export * from "./site-menu.js";

package/dist/authoring-runtime/node_modules/@wix/himalaya/dist/_types/core/ts/src/locale.d.ts

@@ -80,3 +80,42 @@ export declare function resolveAppLocale(opts: {
     app?: LocaleConfig | null;
     device?: string | null;
 }): SupportedLocale;
+/** `locale.set { tag: "system" }` — clear the user choice and follow the device language
+ *  (under the `shipsLocale` rule, so an English-only app stays English on a Hebrew phone). */
+export declare const LOCALE_SYSTEM = "system";
+/** Endonyms for the picker rows. Mirrored by `LocaleStore.nativeNames` (Swift / Kotlin);
+ *  a supported tag missing here falls back to the tag itself. */
+export declare const LOCALE_NATIVE_NAMES: Readonly<Record<string, string>>;
+/** Wire value of `locale.get`'s `source`. The store's internal `"app"` origin (the served
+ *  `default`, pinned or not) reads `"default"` on the wire. */
+export type LocaleChoiceSource = "user" | "device" | "default";
+export interface AvailableLocale {
+    tag: SupportedLocale;
+    nativeName: string;
+    dir: "ltr" | "rtl";
+}
+/** `locale.get`'s payload. */
+export interface LocaleGetResult {
+    tag: SupportedLocale;
+    source: LocaleChoiceSource;
+    available: AvailableLocale[];
+}
+export declare function localeChoiceSource(source: LocaleSource | string | null | undefined): LocaleChoiceSource;
+/**
+ * The locales the app ships, source locale first, then `translations` in declared order,
+ * de-duplicated and coerced (an unsupported or malformed entry is dropped, exactly as
+ * `shipsLocale` ignores it).
+ */
+export declare function availableLocales(app: LocaleConfig | null | undefined): AvailableLocale[];
+/**
+ * Validate a `locale.set` tag. A shipped locale (matched by primary subtag, so `he-IL`
+ * selects `he`) or `"system"`; anything else is `unsupported_locale` and the caller must
+ * change nothing.
+ */
+export declare function parseLocaleSetTag(app: LocaleConfig | null | undefined, tag: string | null | undefined): {
+    ok: true;
+    tag: SupportedLocale | typeof LOCALE_SYSTEM;
+} | {
+    ok: false;
+    error: "unsupported_locale";
+};

package/dist/authoring-runtime/node_modules/@wix/himalaya/dist/_types/core/ts/src/store-adopt.d.ts

@@ -0,0 +1,73 @@
+/** How the store build of the Android app is signed. Names a dist-plane keystore policy. */
+export type AdoptedAndroidSigning = "wix-keystore" | "upload-keystore";
+export declare const ADOPTED_ANDROID_SIGNING: readonly AdoptedAndroidSigning[];
+export interface StoreAdoptConfig {
+    /** The existing App Store app's bundle id. Must differ from the app's dev `bundleId`. */
+    iosBundleId: string;
+    /** The Apple Developer team that owns the existing app record (10 characters). */
+    appleTeamId: string;
+    /** App Store Connect numeric app id of the existing listing. */
+    appStoreId?: string;
+    /** The existing Play listing's applicationId (the release variant ships under it). */
+    androidApplicationId: string;
+    /** App Groups the existing binary uses — each `group.…`. Installed users' shared data lives there. */
+    iosAppGroups?: string[];
+    /** URL schemes the existing binary registers, BEYOND `navigation.scheme`. */
+    urlSchemes?: string[];
+    /** Universal-link / App-Link hosts (`app.example.com`, or `host/path` to claim a path). No scheme prefix. */
+    associatedDomains?: string[];
+    /** Embedded extension bundle ids, keyed by the extension's suffix in project.yml (`<host>.<suffix>`). */
+    iosExtensionBundleIds?: Record<string, string>;
+    /** Which keystore signs the Android store build; it must be the one the existing listing was signed with. */
+    androidSigning?: AdoptedAndroidSigning;
+    /** Extensions the old binary shipped and the new one deliberately does not. Generates nothing. */
+    dropExtensions?: string[];
+}
+export interface StoreConfig {
+    /** Adopt an existing store listing's identity for store builds. */
+    adopt?: StoreAdoptConfig;
+}
+/** One associated domain, split. `path` is absent for a whole-host claim. */
+export interface AdoptedDomain {
+    host: string;
+    path?: string;
+}
+/** The normalized adopted identity. Arrays are always present (possibly empty). */
+export interface AdoptedIdentity {
+    iosBundleId: string;
+    appleTeamId: string;
+    appStoreId?: string;
+    androidApplicationId: string;
+    androidSigning?: AdoptedAndroidSigning;
+    iosAppGroups: string[];
+    /** Extra schemes only (navigation.scheme is not repeated here), lowercased, in declared order. */
+    urlSchemes: string[];
+    associatedDomains: AdoptedDomain[];
+    /** Distinct hosts of `associatedDomains`, in declared order — one `applinks:` entitlement each. */
+    associatedDomainHosts: string[];
+    iosExtensionBundleIds: Record<string, string>;
+    dropExtensions: string[];
+}
+/** The config fields `adoptedIdentity` reads. Structural, so any app-config shape can be passed. */
+export interface StoreAdoptSource {
+    bundleId?: string;
+    applicationId?: string;
+    navigation?: {
+        scheme?: string;
+    };
+    store?: StoreConfig;
+}
+/** Parse one associated-domain entry (`host` or `host/path`), naming the field on failure. */
+export declare function parseAdoptedDomain(entry: string, field?: string): AdoptedDomain;
+/**
+ * The normalized adopted store identity of an app, or `undefined` when it adopts none.
+ *
+ * The single reader of `store.adopt`. Throws — naming the field — on any malformed value, so a
+ * config that would ship a wrong identity never builds. `defineApp` calls it, which is what makes
+ * every rejection surface at config load.
+ */
+export declare function adoptedIdentity(config: StoreAdoptSource): AdoptedIdentity | undefined;
+/** The `com.apple.developer.associated-domains` values for an adopted identity: one `applinks:<host>` per host. */
+export declare function adoptedApplinks(identity: AdoptedIdentity): string[];
+/** The iOS entitlement keys an adopted identity requires — what the signing step must request capabilities for. */
+export declare function adoptedEntitlementKeys(identity: AdoptedIdentity): string[];

package/dist/authoring-runtime/node_modules/@wix/himalaya/dist/core.mjs

@@ -7030,6 +7030,35 @@ function resolveAppLocale(opts) {
   if (appDefault) return appDefault;
   return "en";
 }
+var LOCALE_SYSTEM = "system";
+var LOCALE_NATIVE_NAMES = {
+  en: "English",
+  he: "\u05E2\u05D1\u05E8\u05D9\u05EA",
+  es: "Espa\xF1ol"
+};
+function localeChoiceSource(source) {
+  if (source === "user") return "user";
+  if (source === "app") return "default";
+  return "device";
+}
+function availableLocales(app) {
+  const tags = [coerceSupportedLocale(app?.default) ?? "en"];
+  const list = app?.translations;
+  if (Array.isArray(list) && list.every((x) => typeof x === "string")) {
+    for (const raw of list) {
+      const t = coerceSupportedLocale(raw);
+      if (t && !tags.includes(t)) tags.push(t);
+    }
+  }
+  return tags.map((tag) => ({ tag, nativeName: LOCALE_NATIVE_NAMES[tag] ?? tag, dir: layoutDirection(tag) }));
+}
+function parseLocaleSetTag(app, tag) {
+  const raw = (tag ?? "").trim();
+  if (raw.toLowerCase() === LOCALE_SYSTEM) return { ok: true, tag: LOCALE_SYSTEM };
+  const t = coerceSupportedLocale(raw);
+  if (t && shipsLocale(app, t)) return { ok: true, tag: t };
+  return { ok: false, error: "unsupported_locale" };
+}
 
 // ../../core/ts/src/media.ts
 var SAFE_MEDIA_SCHEMES = /* @__PURE__ */ new Set(["http:", "https:", "file:"]);
@@ -7247,6 +7276,166 @@ function validateDistribution(d, where = "distribution") {
   }
 }
 
+// ../../core/ts/src/store-adopt.ts
+var ADOPTED_ANDROID_SIGNING = ["wix-keystore", "upload-keystore"];
+var ADOPT_KEYS = /* @__PURE__ */ new Set([
+  "iosBundleId",
+  "appleTeamId",
+  "appStoreId",
+  "androidApplicationId",
+  "iosAppGroups",
+  "urlSchemes",
+  "associatedDomains",
+  "iosExtensionBundleIds",
+  "androidSigning",
+  "dropExtensions"
+]);
+var IOS_BUNDLE_ID = /^[A-Za-z0-9-]+(?:\.[A-Za-z0-9-]+)+$/;
+var ANDROID_APPLICATION_ID = /^[A-Za-z][A-Za-z0-9_]*(?:\.[A-Za-z][A-Za-z0-9_]*)+$/;
+var APPLE_TEAM_ID = /^[A-Z0-9]{10}$/;
+var APP_STORE_ID = /^[0-9]+$/;
+var URL_SCHEME = /^[A-Za-z][A-Za-z0-9+.-]*$/;
+var HOST = /^(?:[a-z0-9](?:[a-z0-9-]*[a-z0-9])?\.)+[a-z0-9](?:[a-z0-9-]*[a-z0-9])?$/;
+var PATH = /^(?:\/[A-Za-z0-9._~!$&'()*+,;=:@%-]+)+\/?$/;
+function fail(field, message) {
+  throw new Error(`defineApp: store.adopt.${field} ${message}`);
+}
+function stringList(adopt, field) {
+  const v = adopt[field];
+  if (v === void 0) return [];
+  if (!Array.isArray(v) || v.some((x) => typeof x !== "string")) fail(field, "must be an array of strings.");
+  return v;
+}
+function requiredString(adopt, field) {
+  const v = adopt[field];
+  if (typeof v !== "string" || !v) fail(field, "is required.");
+  return v;
+}
+function parseAdoptedDomain(entry, field = "associatedDomains") {
+  if (/^[A-Za-z][A-Za-z0-9+.-]*:/.test(entry)) {
+    fail(field, `entry "${entry}" must not carry a scheme prefix (no "applinks:" / "https://"): give the host, e.g. "app.example.com".`);
+  }
+  const slash = entry.indexOf("/");
+  const host = (slash < 0 ? entry : entry.slice(0, slash)).toLowerCase();
+  const path = slash < 0 ? void 0 : entry.slice(slash).replace(/\/$/, "");
+  if (!HOST.test(host)) fail(field, `entry "${entry}" is not a valid host.`);
+  if (path !== void 0 && (path === "" || !PATH.test(path))) fail(field, `entry "${entry}" has an invalid path.`);
+  return path ? { host, path } : { host };
+}
+function adoptedIdentity(config) {
+  const store = config.store;
+  if (store === void 0) return void 0;
+  if (store === null || typeof store !== "object" || Array.isArray(store)) {
+    throw new Error("defineApp: store must be an object.");
+  }
+  for (const key of Object.keys(store)) {
+    if (key !== "adopt") throw new Error(`defineApp: store.${key} is not a known field (expected "adopt").`);
+  }
+  const raw = store.adopt;
+  if (raw === void 0) return void 0;
+  if (raw === null || typeof raw !== "object" || Array.isArray(raw)) throw new Error("defineApp: store.adopt must be an object.");
+  const adopt = raw;
+  for (const key of Object.keys(adopt)) {
+    if (!ADOPT_KEYS.has(key)) fail(key, "is not a known field.");
+  }
+  const iosBundleId = requiredString(adopt, "iosBundleId");
+  if (!IOS_BUNDLE_ID.test(iosBundleId)) fail("iosBundleId", `"${iosBundleId}" is not a valid iOS bundle id.`);
+  if (config.bundleId !== void 0 && iosBundleId === config.bundleId) {
+    fail(
+      "iosBundleId",
+      `"${iosBundleId}" equals the app's dev bundleId. The dev build must keep its own id, or a dev install replaces the store app on a device.`
+    );
+  }
+  const appleTeamId = requiredString(adopt, "appleTeamId");
+  if (!APPLE_TEAM_ID.test(appleTeamId)) fail("appleTeamId", `"${appleTeamId}" must be a 10-character Apple team id (A-Z, 0-9).`);
+  let appStoreId;
+  if (adopt.appStoreId !== void 0) {
+    if (typeof adopt.appStoreId !== "string" || !APP_STORE_ID.test(adopt.appStoreId)) {
+      fail("appStoreId", `"${String(adopt.appStoreId)}" must be the numeric App Store Connect app id, as a string.`);
+    }
+    appStoreId = adopt.appStoreId;
+  }
+  const androidApplicationId = requiredString(adopt, "androidApplicationId");
+  if (!ANDROID_APPLICATION_ID.test(androidApplicationId)) {
+    fail("androidApplicationId", `"${androidApplicationId}" is not a valid Android applicationId.`);
+  }
+  let androidSigning;
+  if (adopt.androidSigning !== void 0) {
+    if (!ADOPTED_ANDROID_SIGNING.includes(adopt.androidSigning)) {
+      fail("androidSigning", `"${String(adopt.androidSigning)}" must be one of ${ADOPTED_ANDROID_SIGNING.map((s) => `"${s}"`).join(", ")}.`);
+    }
+    androidSigning = adopt.androidSigning;
+  }
+  const iosAppGroups = stringList(adopt, "iosAppGroups");
+  const seenGroups = /* @__PURE__ */ new Set();
+  for (const g of iosAppGroups) {
+    if (!g.startsWith("group.") || !IOS_BUNDLE_ID.test(g)) fail("iosAppGroups", `entry "${g}" must be an App Group id starting with "group.".`);
+    if (seenGroups.has(g)) fail("iosAppGroups", `entry "${g}" is declared twice.`);
+    seenGroups.add(g);
+  }
+  const urlSchemes = [];
+  const devScheme = config.navigation?.scheme?.toLowerCase();
+  for (const s of stringList(adopt, "urlSchemes")) {
+    if (!URL_SCHEME.test(s)) fail("urlSchemes", `entry "${s}" is not an RFC 3986 scheme (a letter, then letters, digits, "+", "-" or ".").`);
+    const lower = s.toLowerCase();
+    if (urlSchemes.includes(lower)) fail("urlSchemes", `entry "${s}" is declared twice.`);
+    if (lower === devScheme) fail("urlSchemes", `entry "${s}" duplicates navigation.scheme; list only the extra schemes.`);
+    urlSchemes.push(lower);
+  }
+  const associatedDomains = [];
+  const seenDomains = /* @__PURE__ */ new Set();
+  for (const entry of stringList(adopt, "associatedDomains")) {
+    const d = parseAdoptedDomain(entry);
+    const key = d.host + (d.path ?? "");
+    if (seenDomains.has(key)) fail("associatedDomains", `entry "${entry}" is declared twice.`);
+    seenDomains.add(key);
+    associatedDomains.push(d);
+  }
+  const associatedDomainHosts = [...new Set(associatedDomains.map((d) => d.host))];
+  const iosExtensionBundleIds = {};
+  const ext = adopt.iosExtensionBundleIds;
+  if (ext !== void 0) {
+    if (ext === null || typeof ext !== "object" || Array.isArray(ext)) fail("iosExtensionBundleIds", "must be an object of suffix \u2192 bundle id.");
+    for (const [suffix, id] of Object.entries(ext)) {
+      if (!suffix || !/^[A-Za-z0-9-]+(?:\.[A-Za-z0-9-]+)*$/.test(suffix)) fail("iosExtensionBundleIds", `key "${suffix}" is not a bundle id suffix.`);
+      if (typeof id !== "string" || !IOS_BUNDLE_ID.test(id)) fail("iosExtensionBundleIds", `"${suffix}" \u2192 "${String(id)}" is not a valid iOS bundle id.`);
+      if (!id.startsWith(iosBundleId + ".")) {
+        fail("iosExtensionBundleIds", `"${suffix}" \u2192 "${id}" must start with "${iosBundleId}." \u2014 Apple requires an embedded bundle's id to extend its app's.`);
+      }
+      iosExtensionBundleIds[suffix] = id;
+    }
+  }
+  const dropExtensions = stringList(adopt, "dropExtensions");
+  for (const id of dropExtensions) {
+    if (!IOS_BUNDLE_ID.test(id)) fail("dropExtensions", `entry "${id}" is not a valid bundle id.`);
+    if (Object.values(iosExtensionBundleIds).includes(id)) {
+      fail("dropExtensions", `entry "${id}" is also mapped in iosExtensionBundleIds \u2014 an extension is either shipped or dropped.`);
+    }
+  }
+  return {
+    iosBundleId,
+    appleTeamId,
+    ...appStoreId !== void 0 ? { appStoreId } : {},
+    androidApplicationId,
+    ...androidSigning !== void 0 ? { androidSigning } : {},
+    iosAppGroups,
+    urlSchemes,
+    associatedDomains,
+    associatedDomainHosts,
+    iosExtensionBundleIds,
+    dropExtensions
+  };
+}
+function adoptedApplinks(identity) {
+  return identity.associatedDomainHosts.map((h) => `applinks:${h}`);
+}
+function adoptedEntitlementKeys(identity) {
+  const keys = [];
+  if (identity.iosAppGroups.length) keys.push("com.apple.security.application-groups");
+  if (identity.associatedDomainHosts.length) keys.push("com.apple.developer.associated-domains");
+  return keys;
+}
+
 // ../../core/ts/src/auth-gate-screen.ts
 function gateScreenIdShapeProblem(id) {
   if (id === void 0) return null;
@@ -7471,48 +7660,48 @@ var FUNCTION_LIMITS_MAX = {
   maxRequestBytes: 10 * 1048576,
   maxResponseBytes: 10 * 1048576
 };
-function fail(message) {
+function fail2(message) {
   throw new Error(`defineFunction: ${message}`);
 }
 function validateName(name) {
-  if (typeof name !== "string") fail("name must be a string");
-  if (!/^[a-z][a-z0-9]*(?:[-_.][a-z0-9]+)*$/.test(name)) fail(`name must be lowercase kebab-case: "${name}"`);
+  if (typeof name !== "string") fail2("name must be a string");
+  if (!/^[a-z][a-z0-9]*(?:[-_.][a-z0-9]+)*$/.test(name)) fail2(`name must be lowercase kebab-case: "${name}"`);
 }
 function validateFunctionRoute(method, path) {
-  if (!HTTP_METHODS.includes(method)) fail(`method must be one of ${HTTP_METHODS.join(", ")}`);
+  if (!HTTP_METHODS.includes(method)) fail2(`method must be one of ${HTTP_METHODS.join(", ")}`);
   if (path !== "/" && (!/^\/[A-Za-z0-9._~!$&'()*+,;=:@%/-]+$/.test(path) || path.includes("//") || path.endsWith("/"))) {
-    fail(`path must be an absolute, normalized route without query syntax: "${path}"`);
+    fail2(`path must be an absolute, normalized route without query syntax: "${path}"`);
   }
   const params = [...path.matchAll(/:([A-Za-z][A-Za-z0-9_]*)/g)].map((match) => match[1]);
-  if (new Set(params).size !== params.length) fail(`path contains duplicate parameter names: "${path}"`);
+  if (new Set(params).size !== params.length) fail2(`path contains duplicate parameter names: "${path}"`);
 }
 function validateFunctionDefinition(definition) {
   validateName(definition.name);
   validateFunctionRoute(definition.method, definition.path);
   if (!FUNCTION_AUTHS.includes(definition.auth)) {
-    fail(`auth must be one of ${FUNCTION_AUTHS.join(", ")}`);
+    fail2(`auth must be one of ${FUNCTION_AUTHS.join(", ")}`);
   }
   if (definition.wixIdentity !== null && !WIX_IDENTITIES.includes(definition.wixIdentity)) {
-    fail(`wixIdentity must be one of ${WIX_IDENTITIES.join(", ")}`);
+    fail2(`wixIdentity must be one of ${WIX_IDENTITIES.join(", ")}`);
   }
   validateStringList("Wix permissions", definition.wixPermissions);
   validateStringList("capabilities", definition.capabilities);
   if (definition.auth === "public" && definition.wixIdentity !== null) {
-    fail("public functions cannot request a Wix identity");
+    fail2("public functions cannot request a Wix identity");
   }
   if (definition.wixIdentity === "installation" && definition.wixPermissions.length === 0) {
-    fail("installation identity requires wixPermissions");
+    fail2("installation identity requires wixPermissions");
   }
   if (definition.capabilities.includes("resource_admin") && (!(definition.auth === "user" || definition.internal) || definition.wixIdentity !== "installation" || !definition.wixPermissions.includes("wix.data.manage"))) {
-    fail("resource_admin requires auth:user or internal, installation identity, and wix.data.manage permission");
+    fail2("resource_admin requires auth:user or internal, installation identity, and wix.data.manage permission");
   }
-  if (typeof definition.handler !== "function") fail("handler is required");
-  if (typeof definition.internal !== "boolean") fail("internal must be a boolean");
+  if (typeof definition.handler !== "function") fail2("handler is required");
+  if (typeof definition.internal !== "boolean") fail2("internal must be a boolean");
   if (!Array.isArray(definition.secrets) || !Array.isArray(definition.outboundHosts)) {
-    fail("secret and host declarations must be arrays");
+    fail2("secret and host declarations must be arrays");
   }
   if (!definition.limits || typeof definition.limits !== "object" || !Object.keys(FUNCTION_LIMITS_MAX).every((key) => Object.prototype.hasOwnProperty.call(definition.limits, key))) {
-    fail("limits must include every limit field");
+    fail2("limits must include every limit field");
   }
   validateLimits(definition.limits);
   validateNames("secret", definition.secrets);
@@ -7520,30 +7709,30 @@ function validateFunctionDefinition(definition) {
 }
 function validateLimits(input) {
   if (input !== void 0 && (typeof input !== "object" || input === null || Array.isArray(input))) {
-    fail("limits must be an object");
+    fail2("limits must be an object");
   }
   const limits = { ...DEFAULT_FUNCTION_LIMITS, ...input };
   for (const key of Object.keys(FUNCTION_LIMITS_MAX)) {
     const value = limits[key];
     const minimum = key === "memoryMb" ? 8 : 1;
     if (!Number.isInteger(value) || value < minimum || value > FUNCTION_LIMITS_MAX[key]) {
-      fail(`limits.${key} must be an integer in [${minimum}, ${FUNCTION_LIMITS_MAX[key]}]`);
+      fail2(`limits.${key} must be an integer in [${minimum}, ${FUNCTION_LIMITS_MAX[key]}]`);
     }
   }
   return limits;
 }
 function validateStringList(kind, values) {
   if (!Array.isArray(values) || values.some((value) => typeof value !== "string")) {
-    fail(`${kind} must be an array of strings`);
+    fail2(`${kind} must be an array of strings`);
   }
   return [...values].sort();
 }
 function validateNames(kind, names) {
   const result = validateStringList(`${kind} names`, names);
-  if (new Set(result).size !== result.length) fail(`${kind} names must not contain duplicates`);
+  if (new Set(result).size !== result.length) fail2(`${kind} names must not contain duplicates`);
   for (const name of result) {
-    if (kind === "secret" && !/^[A-Z][A-Z0-9_]{0,63}$/.test(name)) fail(`secret name must be uppercase: "${name}"`);
-    if (kind === "host" && !/^(?:\*\.)?[a-z0-9](?:[a-z0-9.-]*[a-z0-9])?(?::[0-9]{1,5})?$/.test(name)) fail(`outbound host is not a hostname: "${name}"`);
+    if (kind === "secret" && !/^[A-Z][A-Z0-9_]{0,63}$/.test(name)) fail2(`secret name must be uppercase: "${name}"`);
+    if (kind === "host" && !/^(?:\*\.)?[a-z0-9](?:[a-z0-9.-]*[a-z0-9])?(?::[0-9]{1,5})?$/.test(name)) fail2(`outbound host is not a hostname: "${name}"`);
   }
   return result.sort();
 }
@@ -7818,6 +8007,7 @@ function validateConfigShape(config) {
   if (config.distribution) {
     validateDistribution(config.distribution, "defineApp: distribution");
   }
+  adoptedIdentity(config);
   validateLadderConfig(config);
   validateAuthGateScreen(config.auth);
   const appBundleConflict = appLogicBundleConflict(config);
@@ -8378,8 +8568,8 @@ function isComponentAllowedForFamily(key, family) {
 }
 
 // ../../core/ts/src/bindings.ts
-var BINDING_SIGILS = ["service", "flag", "item", "t"];
-var COLON_SIGILS = /* @__PURE__ */ new Set(["t"]);
+var BINDING_SIGILS = ["service", "flag", "item", "t", "app"];
+var COLON_SIGILS = /* @__PURE__ */ new Set(["t", "app"]);
 var BINDING_SIGIL_RE = new RegExp(
   `^\\$(?:${BINDING_SIGILS.filter((s) => !COLON_SIGILS.has(s)).join("|")})\\b|^\\$(?:${[...COLON_SIGILS].join("|")}):`
 );
@@ -14740,6 +14930,7 @@ function webViewEmbeddedAppFindings(screens) {
   return out;
 }
 export {
+  ADOPTED_ANDROID_SIGNING,
   ALL_ORIENTATIONS,
   APP_ID_PATTERN,
   APP_SERVICES_BRIDGE_MARKERS,
@@ -14774,6 +14965,8 @@ export {
   LAUNCH_MANIFEST_SCHEMA,
   LAUNCH_NAMESPACE,
   LINK_MOUNT_PATHS,
+  LOCALE_NATIVE_NAMES,
+  LOCALE_SYSTEM,
   MAX_SIMULTANEOUS_BRIDGED_WEBVIEWS,
   OAUTH_IDP_ORIGINS,
   ORIGIN_PARAM_KEYS,
@@ -14823,10 +15016,14 @@ export {
   WORKER_SUBTREE_COMMON_ACTION_PATHS,
   WORKER_SUBTREE_SAFE_TYPE_RULES,
   activeMediaItem,
+  adoptedApplinks,
+  adoptedEntitlementKeys,
+  adoptedIdentity,
   appLogicBundleConflict,
   appLogicBundleRef,
   appServicesAllowed,
   assertSiteShellConfig,
+  availableLocales,
   baselineMediaCapabilities,
   bucket,
   buildHimiPreviewUrl,
@@ -14879,12 +15076,15 @@ export {
   isWidgetFamilySurface,
   isWixAbsoluteCachePrefix,
   layoutDirection,
+  localeChoiceSource,
   mergeIdiomOverlay,
   mergeSiteMenu,
   normalizeServeApp,
   normalizeSiteMenu,
   normalizeSiteOrigin,
+  parseAdoptedDomain,
   parseAppActionId,
+  parseLocaleSetTag,
   parseNumeric,
   physicalEntityName,
   primarySubtag,

package/dist/authoring-runtime/node_modules/@wix/himalaya/dist/sdui.mjs

@@ -6950,8 +6950,8 @@ var WIDGET_VOCABULARY = {
 var WIDGET_COMPONENTS = new Set(Object.keys(WIDGET_VOCABULARY));
 
 // ../../core/ts/src/bindings.ts
-var BINDING_SIGILS = ["service", "flag", "item", "t"];
-var COLON_SIGILS = /* @__PURE__ */ new Set(["t"]);
+var BINDING_SIGILS = ["service", "flag", "item", "t", "app"];
+var COLON_SIGILS = /* @__PURE__ */ new Set(["t", "app"]);
 var BINDING_SIGIL_RE = new RegExp(
   `^\\$(?:${BINDING_SIGILS.filter((s) => !COLON_SIGILS.has(s)).join("|")})\\b|^\\$(?:${[...COLON_SIGILS].join("|")}):`
 );
@@ -9353,6 +9353,10 @@ function isFunctionsOnlyConfig(config) {
 function uiConfig(config) {
   return config ?? {};
 }
+var META_SITE_ID = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;
+function isMetaSiteId(v) {
+  return typeof v === "string" && META_SITE_ID.test(v);
+}
 function deriveAppMeta(name, m, platforms = {}, provisioning = {}) {
   const config = m.config;
   return {
@@ -9367,6 +9371,7 @@ function deriveAppMeta(name, m, platforms = {}, provisioning = {}) {
     push: servedPush(config.push),
     ...config.push?.screens ? { pushScreens: config.push.screens } : {},
     ...provisioning.installedVerticals ? { installedVerticals: provisioning.installedVerticals } : {},
+    ...isMetaSiteId(provisioning.siteId) ? { provisionedMsid: provisioning.siteId } : {},
     control: config.control,
     appLinkHosts: config.appLinkHosts,
     permissionCopy: config.permissionCopy,
@@ -9486,6 +9491,7 @@ export {
   iconButton,
   image,
   isFunctionsOnlyConfig,
+  isMetaSiteId,
   label,
   labeledContent,
   lazyList,