@wix/himalaya-cli 0.1585.0 → 0.1587.0

package/dist/authoring-runtime/node_modules/@wix/himalaya/dist/_types/core/sdk/app-info/src/index.d.ts

@@ -31,6 +31,27 @@ export interface AppInfo {
      * False on older binaries and web. Does not grant member access or guarantee
      * the site's invitation permission; the server still authorizes each request. */
     oneAppInviteAvailable?: boolean;
+    /** Hardware model id — iOS `utsname` machine (e.g. "iPhone16,2"; a simulator reports the
+     *  simulated model), Android `Build.MANUFACTURER Build.MODEL` (e.g. "Google Pixel 8"), web the
+     *  user-agent's platform. "" when unknown. Never a device identifier. */
+    deviceModel: string;
+    /** Marketing name where the host knows it cheaply (e.g. "iPhone 15 Pro", "Pixel 8"), else "". */
+    deviceName: string;
+    /** OS version (e.g. "18.2", "14"). "" when unknown. */
+    osVersion: string;
+    /** The app's EFFECTIVE locale — the tag its LocaleStore renders in (which an in-app
+     *  `locale.set` or a pinned app default can make differ from the system's). "" when unknown. */
+    locale: string;
+    /** Screen size in points (iOS/macOS) / dp (Android) / CSS px (web), and the pixel ratio.
+     *  Zeros when unknown. */
+    screen: {
+        width: number;
+        height: number;
+        scale: number;
+    };
+    /** True when the signed-in user matches the app's configured internal rule
+     *  (`appInfo.internal.emailDomains`). False when signed out or unconfigured. */
+    isInternal: boolean;
 }
 /**
  * Read this app's build + OTA metadata from the host.

package/dist/authoring-runtime/node_modules/@wix/himalaya/dist/_types/core/sdk/ui/src/index.d.ts

@@ -44,11 +44,32 @@ export interface SnackbarOptions {
     tone?: SnackbarTone;
     /** Auto-dismiss delay in ms, on every host. Default 3000; 0 or less also means 3000. */
     durationMs?: number;
+    /** One action button ("Undo", "View"). Tapping it runs `actionId` with `args`, then dismisses the
+     *  snackbar. The id must be a worker action:
+     *  - one of this bundle's own `tier5.<svc>.<action>` ids — run on THIS worker, never another
+     *    screen's or the app-level worker's;
+     *  - an app service's `app.<svc>.<action>` — needs `app_services` and an exported action (an app
+     *    service's own id needs neither). The web host refuses it until it hosts app services.
+     *  Any other id (`capability.*`, `himi.*`, a registered handler) is refused when the snackbar is
+     *  requested: the call rejects and nothing is shown. A host that cannot tell which worker asked
+     *  (React Native, an embedded web region) refuses every `action` the same way. */
+    action?: SnackbarAction;
+}
+export interface SnackbarAction {
+    /** The button's text — also its VoiceOver / TalkBack / screen-reader label. */
+    label: string;
+    /** What the tap runs: one of this bundle's own `tier5.<svc>.<action>` ids, or `app.<svc>.<action>`. */
+    actionId: string;
+    /** The action's arguments, which the reducer receives as typed JSON. */
+    args?: Record<string, unknown>;
 }
 /** Show a transient snackbar toast: it floats above the tab bar, slides and fades in and out
  *  (fades only under reduced motion), queues behind one that is already showing, and is read
  *  by VoiceOver / TalkBack. Resolves once it is PRESENTED (not after it auto-dismisses).
- *  Rejects with `no_ui_host` if no presenter is attached. */
+ *  Rejects with `no_ui_host` if no presenter is attached; with an `action`, also with
+ *  `invalid_action` (empty label or id), `action_not_allowed` (not one of this bundle's
+ *  actions), or, for an `app.*` id, `undeclared` (no `app_services`), `not_exported`, `no_service`,
+ *  `no_action`, `not_booted` or `unavailable`. */
 export declare function snackbar(options: SnackbarOptions): Promise<void>;
 /** Capability version, for bundles that gate on min binary version. */
 export declare const version = 1;

package/dist/authoring-runtime/node_modules/@wix/himalaya/dist/_types/core/ts/src/define-app.d.ts

@@ -5,6 +5,7 @@ import type { NavigationConfig, SplashConfig } from "./schema.js";
 import { type AppServicesConfig } from "./app-services-gate.js";
 import { type LocaleConfig } from "./locale.js";
 import { type DistributionConfig } from "./distribution.js";
+import { type StoreConfig } from "./store-adopt.js";
 import type { CmsConfig } from "./cms.js";
 import { type DataResourcesConfig } from "@wix/himalaya/data-resources";
 import { type Base44EntitySpec, type Base44FunctionSpec } from "./base44-entities.js";
@@ -517,7 +518,52 @@ export interface AppConfig {
      * `GET /.well-known/assetlinks.json`. Pure app identity.
      */
     androidAssetLinks?: AndroidAssetLinks;
+    /**
+     * `@himalaya/app-info` (#4693). `internal` is the rule that decides `AppInfo.isInternal` —
+     * whether the signed-in user is one of the app's own people (to show debug tools, tag
+     * analytics). It is CONFIGURED here, never guessed: the platform hard-codes no company domain.
+     * The host evaluates it against the signed-in identity's email and sends the worker only the
+     * boolean. Omit it ⇒ `isInternal` is always false.
+     *
+     * WIRING (read before relying on it). Nothing generates this into a binary yet: the shell
+     * hands the same list to its host arms at boot — `AppInfoCapability.configure(internalEmailDomains:)`
+     * (iOS/macOS), `AppInfoCapability.configureInternalEmailDomains(...)` (Android),
+     * `registerWebAppInfoRule(appId, rule)` (web entry) — and binds `AppInfoCapability.signedInEmail`
+     * (web: `WebAppInfo.signedInEmail`) to a VERIFIED member email, which core cannot know
+     * (`AuthUser` has no email). Never a login / registration email the user typed (e.g. the Wix
+     * consumer `registerDirect` input or the webwix identity): on an open-signup site anyone could
+     * register `x@<internal-domain>` and grant themselves `isInternal`. Until a shell does both,
+     * `isInternal` stays false — it fails closed, never open. apps/demo-app is the
+     * worked example, with a test pinning its shells to this value.
+     */
+    appInfo?: AppInfoConfig;
+    /**
+     * Store identity (#4647). `store.adopt` declares that this app IS an existing store app: the
+     * store build ships under its bundle id, team, App Groups, URL schemes and associated domains
+     * instead of a derived identity. Dev, device and QA builds keep `bundleId` / `applicationId`.
+     * Read only through `adoptedIdentity()` (./store-adopt.ts).
+     */
+    store?: StoreConfig;
 }
+/** `defineApp({ appInfo })` — see `AppConfig.appInfo`. */
+export interface AppInfoConfig {
+    internal?: AppInfoInternalRule;
+}
+/** Provider-agnostic internal-user rule. Every listed condition is OR-ed. */
+export interface AppInfoInternalRule {
+    /** Email domains whose signed-in users are internal, e.g. `["wix.com"]`. Exact domain match,
+     *  case-insensitive — `wix.com` does not match `notwix.com` or `wix.com.evil.io`; list a
+     *  subdomain explicitly to include it. */
+    emailDomains?: readonly string[];
+}
+/** Normalize one configured domain: trimmed, lowercased, a leading "@" tolerated. */
+export declare function normalizeInternalEmailDomain(domain: string): string;
+/**
+ * The pure `isInternal` rule every host arm applies (Swift/Kotlin mirror it). False for an empty
+ * or malformed email and for an absent rule — the safe default for a flag that unlocks debug
+ * tools is off.
+ */
+export declare function isInternalEmail(email: string | null | undefined, rule: AppInfoInternalRule | undefined): boolean;
 /** Which registrar the native push facade hands its device token to. */
 export type PushRegistrar = "generic" | "wix-ping";
 /** Android notification channel (Android O+). `id` is required; the rest are
@@ -791,7 +837,7 @@ export interface OrientationEnvelope {
 export declare const DEFAULT_ORIENTATION_ENVELOPE: Required<OrientationEnvelope>;
 /** Fill in the absent families. Total, so callers never branch on `undefined`. */
 export declare function resolveOrientationEnvelope(env?: OrientationEnvelope): Required<OrientationEnvelope>;
-export type Capability = "camera" | "barcode_scanner" | "biometrics" | "secure_storage" | "share" | "push" | "file_picker" | "files" | "open_url" | "pdf" | "clipboard" | "theme" | "photos" | "presigned_upload" | "ui" | "calendar" | "contacts" | "tasks" | "audio_record" | "audio_record_background" | "calls" | "location" | "location_background" | "motion" | "health" | "media_playback" | "webview" | "browser_auth" | "haptic" | "himi_apps" | "iap" | "keyboard" | "network" | "wix_cashier" | "wix_chat" | "live_activity" | "local_database" | "speech" | "speaker_diarization" | "system_intents" | "on_device_ai" | "app_info" | "release_control" | "godot" | "base44" | "animation";
+export type Capability = "camera" | "barcode_scanner" | "biometrics" | "secure_storage" | "share" | "push" | "file_picker" | "files" | "open_url" | "pdf" | "clipboard" | "theme" | "l10n" | "photos" | "presigned_upload" | "ui" | "calendar" | "contacts" | "tasks" | "audio_record" | "audio_record_background" | "calls" | "location" | "location_background" | "motion" | "health" | "media_playback" | "webview" | "browser_auth" | "haptic" | "himi_apps" | "iap" | "keyboard" | "network" | "wix_cashier" | "wix_chat" | "live_activity" | "local_database" | "speech" | "speaker_diarization" | "system_intents" | "on_device_ai" | "app_info" | "release_control" | "godot" | "base44" | "animation";
 /** `defineApp({ wixIap })` — the purchases-service app a build binds this app to. */
 export interface WixIapConfig {
     /** The purchases service's app UUID, registered on the app's own auth site. Not a secret. */

package/dist/authoring-runtime/node_modules/@wix/himalaya/dist/_types/core/ts/src/index.d.ts

@@ -20,6 +20,7 @@ export * from "./worker-subtree-safe-types.generated.js";
 export * from "./icon-catalog.generated.js";
 export * from "./app-link.js";
 export * from "./app-identity.js";
+export * from "./store-adopt.js";
 export * from "./app-registry-client.js";
 export * from "./site-shell.js";
 export * from "./site-menu.js";

package/dist/authoring-runtime/node_modules/@wix/himalaya/dist/_types/core/ts/src/locale.d.ts

@@ -80,3 +80,42 @@ export declare function resolveAppLocale(opts: {
     app?: LocaleConfig | null;
     device?: string | null;
 }): SupportedLocale;
+/** `locale.set { tag: "system" }` — clear the user choice and follow the device language
+ *  (under the `shipsLocale` rule, so an English-only app stays English on a Hebrew phone). */
+export declare const LOCALE_SYSTEM = "system";
+/** Endonyms for the picker rows. Mirrored by `LocaleStore.nativeNames` (Swift / Kotlin);
+ *  a supported tag missing here falls back to the tag itself. */
+export declare const LOCALE_NATIVE_NAMES: Readonly<Record<string, string>>;
+/** Wire value of `locale.get`'s `source`. The store's internal `"app"` origin (the served
+ *  `default`, pinned or not) reads `"default"` on the wire. */
+export type LocaleChoiceSource = "user" | "device" | "default";
+export interface AvailableLocale {
+    tag: SupportedLocale;
+    nativeName: string;
+    dir: "ltr" | "rtl";
+}
+/** `locale.get`'s payload. */
+export interface LocaleGetResult {
+    tag: SupportedLocale;
+    source: LocaleChoiceSource;
+    available: AvailableLocale[];
+}
+export declare function localeChoiceSource(source: LocaleSource | string | null | undefined): LocaleChoiceSource;
+/**
+ * The locales the app ships, source locale first, then `translations` in declared order,
+ * de-duplicated and coerced (an unsupported or malformed entry is dropped, exactly as
+ * `shipsLocale` ignores it).
+ */
+export declare function availableLocales(app: LocaleConfig | null | undefined): AvailableLocale[];
+/**
+ * Validate a `locale.set` tag. A shipped locale (matched by primary subtag, so `he-IL`
+ * selects `he`) or `"system"`; anything else is `unsupported_locale` and the caller must
+ * change nothing.
+ */
+export declare function parseLocaleSetTag(app: LocaleConfig | null | undefined, tag: string | null | undefined): {
+    ok: true;
+    tag: SupportedLocale | typeof LOCALE_SYSTEM;
+} | {
+    ok: false;
+    error: "unsupported_locale";
+};

package/dist/authoring-runtime/node_modules/@wix/himalaya/dist/_types/core/ts/src/store-adopt.d.ts

@@ -0,0 +1,73 @@
+/** How the store build of the Android app is signed. Names a dist-plane keystore policy. */
+export type AdoptedAndroidSigning = "wix-keystore" | "upload-keystore";
+export declare const ADOPTED_ANDROID_SIGNING: readonly AdoptedAndroidSigning[];
+export interface StoreAdoptConfig {
+    /** The existing App Store app's bundle id. Must differ from the app's dev `bundleId`. */
+    iosBundleId: string;
+    /** The Apple Developer team that owns the existing app record (10 characters). */
+    appleTeamId: string;
+    /** App Store Connect numeric app id of the existing listing. */
+    appStoreId?: string;
+    /** The existing Play listing's applicationId (the release variant ships under it). */
+    androidApplicationId: string;
+    /** App Groups the existing binary uses — each `group.…`. Installed users' shared data lives there. */
+    iosAppGroups?: string[];
+    /** URL schemes the existing binary registers, BEYOND `navigation.scheme`. */
+    urlSchemes?: string[];
+    /** Universal-link / App-Link hosts (`app.example.com`, or `host/path` to claim a path). No scheme prefix. */
+    associatedDomains?: string[];
+    /** Embedded extension bundle ids, keyed by the extension's suffix in project.yml (`<host>.<suffix>`). */
+    iosExtensionBundleIds?: Record<string, string>;
+    /** Which keystore signs the Android store build; it must be the one the existing listing was signed with. */
+    androidSigning?: AdoptedAndroidSigning;
+    /** Extensions the old binary shipped and the new one deliberately does not. Generates nothing. */
+    dropExtensions?: string[];
+}
+export interface StoreConfig {
+    /** Adopt an existing store listing's identity for store builds. */
+    adopt?: StoreAdoptConfig;
+}
+/** One associated domain, split. `path` is absent for a whole-host claim. */
+export interface AdoptedDomain {
+    host: string;
+    path?: string;
+}
+/** The normalized adopted identity. Arrays are always present (possibly empty). */
+export interface AdoptedIdentity {
+    iosBundleId: string;
+    appleTeamId: string;
+    appStoreId?: string;
+    androidApplicationId: string;
+    androidSigning?: AdoptedAndroidSigning;
+    iosAppGroups: string[];
+    /** Extra schemes only (navigation.scheme is not repeated here), lowercased, in declared order. */
+    urlSchemes: string[];
+    associatedDomains: AdoptedDomain[];
+    /** Distinct hosts of `associatedDomains`, in declared order — one `applinks:` entitlement each. */
+    associatedDomainHosts: string[];
+    iosExtensionBundleIds: Record<string, string>;
+    dropExtensions: string[];
+}
+/** The config fields `adoptedIdentity` reads. Structural, so any app-config shape can be passed. */
+export interface StoreAdoptSource {
+    bundleId?: string;
+    applicationId?: string;
+    navigation?: {
+        scheme?: string;
+    };
+    store?: StoreConfig;
+}
+/** Parse one associated-domain entry (`host` or `host/path`), naming the field on failure. */
+export declare function parseAdoptedDomain(entry: string, field?: string): AdoptedDomain;
+/**
+ * The normalized adopted store identity of an app, or `undefined` when it adopts none.
+ *
+ * The single reader of `store.adopt`. Throws — naming the field — on any malformed value, so a
+ * config that would ship a wrong identity never builds. `defineApp` calls it, which is what makes
+ * every rejection surface at config load.
+ */
+export declare function adoptedIdentity(config: StoreAdoptSource): AdoptedIdentity | undefined;
+/** The `com.apple.developer.associated-domains` values for an adopted identity: one `applinks:<host>` per host. */
+export declare function adoptedApplinks(identity: AdoptedIdentity): string[];
+/** The iOS entitlement keys an adopted identity requires — what the signing step must request capabilities for. */
+export declare function adoptedEntitlementKeys(identity: AdoptedIdentity): string[];

package/dist/authoring-runtime/node_modules/@wix/himalaya/dist/app-info.mjs

@@ -18,6 +18,14 @@ var PLATFORMS = ["ios", "android", "macos", "web", "react-native"];
 function str(v) {
   return typeof v === "string" ? v.trim() : "";
 }
+function num(v) {
+  const n = typeof v === "number" ? v : typeof v === "string" && v.trim() !== "" ? Number(v) : NaN;
+  return Number.isFinite(n) && n > 0 ? n : 0;
+}
+function screenOf(v) {
+  const s = v && typeof v === "object" ? v : {};
+  return { width: num(s.width), height: num(s.height), scale: num(s.scale) };
+}
 async function get() {
   const r = await dispatch("capability.app_info.get");
   const platform = str(r?.platform);
@@ -36,7 +44,15 @@ async function get() {
     serveBaseUrl: serveBaseUrl || null,
     platform: PLATFORMS.includes(platform) ? platform : "unknown",
     memberSiteBound: r?.memberSiteBound === true,
-    oneAppInviteAvailable: r?.oneAppInviteAvailable === true
+    oneAppInviteAvailable: r?.oneAppInviteAvailable === true,
+    deviceModel: str(r?.deviceModel),
+    deviceName: str(r?.deviceName),
+    osVersion: str(r?.osVersion),
+    locale: str(r?.locale),
+    screen: screenOf(r?.screen),
+    // Exactly `true` only: a string or a number is not the host's answer, and the safe default
+    // for a flag that unlocks debug tools is off.
+    isInternal: r?.isInternal === true
   };
 }
 async function displayVersion() {