@wix/himalaya-cli 0.1597.0 → 0.1599.0

package/dist/authoring-runtime/node_modules/@wix/himalaya/dist/_types/core/sdk/legacy-import/src/index.d.ts

@@ -0,0 +1,30 @@
+export interface LegacyImportSourceReport {
+    id: string;
+    /** `done` | `empty` | `incomplete` | `failed` | `unregistered_kind` | `invalid_options` */
+    status: string;
+    /** Item counts — `items`, plus one per sink the source's items went to. */
+    counts: Record<string, number>;
+    error?: string;
+}
+export interface LegacyImportReportItem {
+    key: string;
+    /** The item's value — UTF-8 text, or base64 when `meta.encoding === "base64"`. */
+    value: string;
+    meta?: Record<string, string>;
+}
+export interface LegacyImportReport {
+    /** The `legacyImport.id` that produced it. */
+    id: string;
+    /** Epoch ms the import ran. */
+    extractedAt: number;
+    sources: LegacyImportSourceReport[];
+    /** Only the `report` sink's items. */
+    items: LegacyImportReportItem[];
+}
+/** The import report for the signed-in principal, or null — none ran, it was acknowledged, it
+ *  belongs to another account, or this host has nothing to import (web). */
+export declare function read(): Promise<LegacyImportReport | null>;
+/** Delete the report. Idempotent: acknowledging twice (or with nothing to acknowledge) is fine. */
+export declare function ack(): Promise<void>;
+/** Capability version, for bundles that gate on min binary version. */
+export declare const version = 1;

package/dist/authoring-runtime/node_modules/@wix/himalaya/dist/_types/core/sdk/sdk-types/src/capabilities.generated.d.ts

@@ -18,6 +18,7 @@ export declare const CAPABILITY_REGISTRY: {
     readonly himi_apps: readonly ["canOpen", "current", "hostInfo", "open"];
     readonly iap: readonly ["appBinding", "consume", "entitlements", "finishTransaction", "getPaywallConfig", "getProducts", "getUnfinishedTransactions", "purchase", "purchaseForVerification", "restore"];
     readonly keyboard: readonly ["dismiss"];
+    readonly legacy_import: readonly ["ack", "read"];
     readonly live_activity: readonly ["end", "start", "update"];
     readonly local_database: readonly ["availability", "count", "get", "getAll", "purge", "query", "queueDepth", "queueDrain", "queueEnqueue", "remove", "upsert"];
     readonly location: readonly ["backgroundStart", "backgroundStop", "getCurrent", "getPermissionStatus", "regionAdd", "regionClear", "regionList", "regionNext", "regionRemove", "regionSupport", "requestPermission", "watchNext", "watchStart", "watchStop"];
@@ -44,7 +45,7 @@ export declare const CAPABILITY_REGISTRY: {
     readonly wix_chat: readonly ["getRealtimeStatus", "subscribeRealtime", "unsubscribeRealtime"];
 };
 /** A capability id backed by an @himalaya/* SDK binding. */
-export type SdkCapability = "app_info" | "audio_record" | "base44" | "biometrics" | "browser_auth" | "calendar" | "calls" | "camera" | "clipboard" | "contacts" | "file_picker" | "files" | "godot" | "haptic" | "health" | "himi_apps" | "iap" | "keyboard" | "live_activity" | "local_database" | "location" | "media_playback" | "motion" | "network" | "on_device_ai" | "open_url" | "pdf" | "photos" | "presigned_upload" | "push" | "release_control" | "secure_storage" | "share" | "speaker_diarization" | "speech" | "system_intents" | "tasks" | "theme" | "torch" | "ui" | "wix_cashier" | "wix_chat";
+export type SdkCapability = "app_info" | "audio_record" | "base44" | "biometrics" | "browser_auth" | "calendar" | "calls" | "camera" | "clipboard" | "contacts" | "file_picker" | "files" | "godot" | "haptic" | "health" | "himi_apps" | "iap" | "keyboard" | "legacy_import" | "live_activity" | "local_database" | "location" | "media_playback" | "motion" | "network" | "on_device_ai" | "open_url" | "pdf" | "photos" | "presigned_upload" | "push" | "release_control" | "secure_storage" | "share" | "speaker_diarization" | "speech" | "system_intents" | "tasks" | "theme" | "torch" | "ui" | "wix_cashier" | "wix_chat";
 /** All `capability.<id>.<verb>` action ids, flattened (the worker-bridge wire vocabulary). */
 export declare const CAPABILITY_ACTION_IDS: readonly string[];
 /** Capability id → the @himalaya/* package(s) a worker imports to reach it — every dispatch

package/dist/authoring-runtime/node_modules/@wix/himalaya/dist/_types/core/sdk/webview-page/src/capabilities.generated.d.ts

@@ -16,6 +16,7 @@ import type * as HealthSdk from "@wix/himalaya/health";
 import type * as HimiAppsSdk from "@wix/himalaya/himi-apps";
 import type * as IapSdk from "@wix/himalaya/iap";
 import type * as KeyboardSdk from "@wix/himalaya/keyboard";
+import type * as LegacyImportSdk from "@wix/himalaya/legacy-import";
 import type * as LiveActivitySdk from "@wix/himalaya/live-activity";
 import type * as LocalDatabaseSdk from "@wix/himalaya/local-db";
 import type * as LocationSdk from "@wix/himalaya/location";
@@ -70,6 +71,7 @@ export interface HimalayaPageCapabilities {
     readonly "himi_apps": PageModule<typeof HimiAppsSdk> & PageEvents;
     readonly "iap": PageModule<typeof IapSdk> & PageEvents;
     readonly "keyboard": PageModule<typeof KeyboardSdk> & PageEvents;
+    readonly "legacy_import": PageModule<typeof LegacyImportSdk> & PageEvents;
     readonly "live_activity": PageModule<typeof LiveActivitySdk> & PageEvents;
     readonly "local_database": PageModule<typeof LocalDatabaseSdk> & PageEvents;
     readonly "location": PageModule<typeof LocationSdk> & PageEvents;

package/dist/authoring-runtime/node_modules/@wix/himalaya/dist/_types/core/ts/src/define-app.d.ts

@@ -7,6 +7,7 @@ import { type LocaleConfig } from "./locale.js";
 import { type DistributionConfig } from "./distribution.js";
 import { type StoreConfig } from "./store-adopt.js";
 import type { CmsConfig } from "./cms.js";
+import { type LegacyImportConfig } from "./legacy-import.js";
 import { type DataResourcesConfig } from "@wix/himalaya/data-resources";
 import { type Base44EntitySpec, type Base44FunctionSpec } from "./base44-entities.js";
 import type { FunctionDefinition, FunctionScheduleRecord } from "@himalaya/functions";
@@ -14,6 +15,8 @@ export type { CmsConfig, CmsCollectionSpec, CmsFieldSpec, WixFieldType } from ".
 export type { PushRoute, PushPayloadAdapter, PushScreenMapEntry };
 export type { DataResourcesConfig, KvSpec, ResourceEnvironment, ResourceScope } from "@wix/himalaya/data-resources";
 export { WIX_FIELD_TYPES } from "./cms.js";
+export type { BakedLegacyImport, LegacyImportConfig, LegacyImportFileRoot, LegacyImportFilesSource, LegacyImportIdFrom, LegacyImportMapRule, LegacyImportPrincipal, LegacyImportSink, LegacyImportSinkName, LegacyImportSourceConfig, LegacyImportSourceKind, } from "./legacy-import.js";
+export { LEGACY_IMPORT_SINKS, LEGACY_IMPORT_SOURCE_KINDS, bakeLegacyImport, legacyImportProblems } from "./legacy-import.js";
 export type { Base44EntitySpec, Base44FieldSpec, Base44FieldType, Base44FunctionSpec, Base44Issue, Base44RuleCode, Base44StringFormat } from "./base44-entities.js";
 export { BASE44_BUILTIN_FIELDS, BASE44_FIELD_TYPES, BASE44_STRING_FORMATS, physicalEntityName, validateBase44Entities } from "./base44-entities.js";
 /** Wix site/environment binding used by the server-function surface. */
@@ -288,6 +291,14 @@ export interface AppConfig {
      * Absent ⇒ the app uses no CMS collections. See docs/cms-collections.md.
      */
     cms?: CmsConfig;
+    /**
+     * #4653 — a one-time, first-launch import of the data a PREVIOUS store app (same bundle id /
+     * applicationId) left on the device: declared sources (`files`, …) mapped item by item to
+     * sinks (`localDatabase`, `state`, `files`, `report`, `installationId`, `drop`). Baked into the
+     * binary as `legacy-import.json` and run natively before auth bootstrap; never served OTA — a
+     * release cannot change what a binary imports. See docs/legacy-import.md.
+     */
+    legacyImport?: LegacyImportConfig;
     /**
      * The Base44 app this app's Tier-5 workers talk to through `@himalaya/base44`
      * (requires the `base44` capability). Workers never pass the app id: the web host
@@ -848,7 +859,7 @@ export interface OrientationEnvelope {
 export declare const DEFAULT_ORIENTATION_ENVELOPE: Required<OrientationEnvelope>;
 /** Fill in the absent families. Total, so callers never branch on `undefined`. */
 export declare function resolveOrientationEnvelope(env?: OrientationEnvelope): Required<OrientationEnvelope>;
-export type Capability = "camera" | "barcode_scanner" | "biometrics" | "secure_storage" | "share" | "push" | "file_picker" | "files" | "open_url" | "pdf" | "clipboard" | "theme" | "l10n" | "photos" | "presigned_upload" | "ui" | "calendar" | "contacts" | "tasks" | "audio_record" | "audio_record_background" | "calls" | "location" | "location_background" | "motion" | "health" | "media_playback" | "webview" | "browser_auth" | "haptic" | "himi_apps" | "iap" | "keyboard" | "torch" | "network" | "wix_cashier" | "wix_chat" | "live_activity" | "local_database" | "speech" | "speaker_diarization" | "system_intents" | "on_device_ai" | "app_info" | "release_control" | "godot" | "base44" | "animation";
+export type Capability = "camera" | "barcode_scanner" | "biometrics" | "secure_storage" | "share" | "push" | "file_picker" | "files" | "open_url" | "pdf" | "clipboard" | "theme" | "l10n" | "photos" | "presigned_upload" | "ui" | "calendar" | "contacts" | "tasks" | "audio_record" | "audio_record_background" | "calls" | "location" | "location_background" | "motion" | "health" | "media_playback" | "webview" | "browser_auth" | "haptic" | "himi_apps" | "iap" | "keyboard" | "torch" | "network" | "wix_cashier" | "wix_chat" | "live_activity" | "local_database" | "speech" | "speaker_diarization" | "system_intents" | "on_device_ai" | "app_info" | "release_control" | "legacy_import" | "godot" | "base44" | "animation";
 /** `defineApp({ wixIap })` — the purchases-service app a build binds this app to. */
 export interface WixIapConfig {
     /** The purchases service's app UUID, registered on the app's own auth site. Not a secret. */

package/dist/authoring-runtime/node_modules/@wix/himalaya/dist/_types/core/ts/src/legacy-import.d.ts

@@ -0,0 +1,134 @@
+/** Source kinds a baked config may name. A kind a binary does not register is skipped and
+ *  reported at runtime, never a crash — but `defineApp` only accepts kinds the contract knows. */
+export declare const LEGACY_IMPORT_SOURCE_KINDS: readonly ["files"];
+export type LegacyImportSourceKind = (typeof LEGACY_IMPORT_SOURCE_KINDS)[number];
+/** Sinks an item can be mapped to. */
+export declare const LEGACY_IMPORT_SINKS: readonly ["localDatabase", "state", "files", "report", "installationId", "drop"];
+export type LegacyImportSinkName = (typeof LEGACY_IMPORT_SINKS)[number];
+/** The container roots a `files` source may read under (the OLD app's container, which an
+ *  update shares). */
+export declare const LEGACY_IMPORT_FILE_ROOTS: readonly ["documents", "library", "caches"];
+export type LegacyImportFileRoot = (typeof LEGACY_IMPORT_FILE_ROOTS)[number];
+/** Every file under `<root>/<path>`. An item's key is its path relative to that directory,
+ *  with `/` separators (e.g. `notes/a.json`); its value is the file. */
+export interface LegacyImportFilesSource {
+    id: string;
+    kind: "files";
+    root: LegacyImportFileRoot;
+    /** Relative directory under `root` — no leading `/`, no `..`. */
+    path: string;
+}
+export type LegacyImportSourceConfig = LegacyImportFilesSource;
+/** How a `localDatabase` row gets its `id`:
+ *  - `key` — the item key;
+ *  - `keySuffix` — the key minus the rule's literal prefix (the text before the first `*` of
+ *    `match`; the whole key for an exact `key` rule), with a trailing file extension removed;
+ *  - `jsonPath:<p>` — a dotted path into the item's JSON value; a numeric segment indexes an array
+ *    (`rows.0.id`). */
+export type LegacyImportIdFrom = "key" | "keySuffix" | `jsonPath:${string}`;
+export type LegacyImportSink = 
+/** Rows written through the local-database store (the item value must be a JSON object). */
+{
+    sink: "localDatabase";
+    entity: string;
+    idFrom: LegacyImportIdFrom;
+}
+/** Merged into an app service's / worker's state snapshot at `path` (dotted) before hydration. */
+ | {
+    sink: "state";
+    service: string;
+    path: string;
+}
+/** Moved into the files capability's own root, under `dir` (relative). */
+ | {
+    sink: "files";
+    dir: string;
+}
+/** Kept for the worker to read once through `@himalaya/legacy-import`. */
+ | {
+    sink: "report";
+}
+/** The device-scoped push installation id override (the value push registration sends
+ *  instead of a fresh id). The only sink that is NOT principal-scoped. */
+ | {
+    sink: "installationId";
+}
+/** Read (so the source can be deleted) and discarded. */
+ | {
+    sink: "drop";
+};
+/** One mapping rule: items of source `from` whose key equals `key`, or matches the simple `*`
+ *  glob `match` (`*` matches any run of characters, `/` included), go to `to`. Exactly one of
+ *  `key` / `match`. The FIRST rule that matches an item wins. */
+export interface LegacyImportMapRule {
+    from: string;
+    match?: string;
+    key?: string;
+    to: LegacyImportSink;
+}
+/** Where the legacy principal (the account the old app was signed in as) is read from: the
+ *  item `key` of source `from`, optionally a dotted `jsonPath` into its JSON value. */
+export interface LegacyImportPrincipal {
+    from: string;
+    key: string;
+    jsonPath?: string;
+}
+export interface LegacyImportConfig {
+    /** Stable id of this import — names the run-once marker `legacy-import.<id>`. Changing it
+     *  makes a new binary run a NEW import. */
+    id: string;
+    sources: LegacyImportSourceConfig[];
+    map: LegacyImportMapRule[];
+    /** What happens to an item no rule maps: kept for the worker (`report`) or discarded. */
+    unmapped: "report" | "drop";
+    /** Absent ⇒ the principal of a session the auth provider reports as adopted from the legacy
+     *  store (H12d); with neither, principal-scoped data is held and purged after `retainDays`. */
+    principal?: LegacyImportPrincipal;
+    /** Days unapplied staging is kept before it is purged (default 30). */
+    retainDays?: number;
+}
+/** The normalised shape written to `legacy-import.json` — defaults filled, version stamped. */
+export interface BakedLegacyImport {
+    version: 1;
+    id: string;
+    sources: LegacyImportSourceConfig[];
+    map: LegacyImportMapRule[];
+    unmapped: "report" | "drop";
+    principal?: LegacyImportPrincipal;
+    retainDays: number;
+    /** Run budget the native runner gets, in ms. */
+    budgetMs: number;
+    /** Attempts before the runner records `gave_up`. */
+    maxAttempts: number;
+}
+export declare const LEGACY_IMPORT_DEFAULT_RETAIN_DAYS = 30;
+export declare const LEGACY_IMPORT_BUDGET_MS = 3000;
+export declare const LEGACY_IMPORT_MAX_ATTEMPTS = 3;
+/** A simple `*` glob: any characters except the glob metacharacters `? [ ] { } !`, no `**`,
+ *  and not empty. */
+export declare function isSimpleGlob(pattern: string): boolean;
+/** Whether `key` matches the simple glob `pattern` (`*` = any run of characters, `/` included). */
+export declare function matchesSimpleGlob(pattern: string, key: string): boolean;
+/** Names the native importer uses for its own entries beside each import's staging directory
+ *  (`<Application Support>/himalaya-legacy-import/<id>/`): the state-seed store and the carried-over
+ *  push installation id. An import with one of these ids would overwrite or delete them. */
+export declare const LEGACY_IMPORT_RESERVED_IDS: readonly string[];
+/** May a files source read `<root>/<path>`? A retry re-reads its source, so one covering Himi's
+ *  storage would delete what Himi wrote since. `library` holds Himi's and the system's own stores
+ *  (WebKit, Preferences, Caches, …), so a source there is a folder of the old app's under
+ *  `Application Support`; that folder, and a `caches` source's first folder, is never a Himi-owned
+ *  one, never bundle-id shaped (`Caches/<bundleId>` is this bundle's URL cache), and never a system
+ *  cache folder. Mirror of `FilesLegacyImportSource.mayRead` on iOS. */
+export declare function mayReadLegacyFiles(root: string, path: string): boolean;
+/** Every problem with a `legacyImport` block, each prefixed with its field path. Empty ⇒ valid. */
+export declare function legacyImportProblems(cfg: unknown, at?: string): string[];
+/** Throw on the first problems (all of them, joined) — what `defineApp` calls. */
+export declare function validateLegacyImport(cfg: unknown, at?: string): asserts cfg is LegacyImportConfig;
+/** The normalised `legacy-import.json` body for a VALID block (validates first). */
+export declare function bakeLegacyImport(cfg: LegacyImportConfig): BakedLegacyImport;
+/** The first rule that maps `key` of source `sourceId`, or null (the item is `unmapped`). The
+ *  native runners implement the same rule; this is the reference the shared fixture pins. */
+export declare function ruleFor(cfg: Pick<LegacyImportConfig, "map">, sourceId: string, key: string): LegacyImportMapRule | null;
+/** The `keySuffix` of `key` under `rule`: the key minus the literal text before the first `*`
+ *  (the whole key for a `key` rule), with a trailing `.ext` removed. */
+export declare function keySuffix(rule: LegacyImportMapRule, key: string): string;

package/dist/authoring-runtime/node_modules/@wix/himalaya/dist/audio-record.mjs

@@ -33,6 +33,7 @@ var CAPABILITY_REGISTRY = {
   "himi_apps": ["canOpen", "current", "hostInfo", "open"],
   "iap": ["appBinding", "consume", "entitlements", "finishTransaction", "getPaywallConfig", "getProducts", "getUnfinishedTransactions", "purchase", "purchaseForVerification", "restore"],
   "keyboard": ["dismiss"],
+  "legacy_import": ["ack", "read"],
   "live_activity": ["end", "start", "update"],
   "local_database": ["availability", "count", "get", "getAll", "purge", "query", "queueDepth", "queueDrain", "queueEnqueue", "remove", "upsert"],
   "location": ["backgroundStart", "backgroundStop", "getCurrent", "getPermissionStatus", "regionAdd", "regionClear", "regionList", "regionNext", "regionRemove", "regionSupport", "requestPermission", "watchNext", "watchStart", "watchStop"],

package/dist/authoring-runtime/node_modules/@wix/himalaya/dist/calendar.mjs

@@ -33,6 +33,7 @@ var CAPABILITY_REGISTRY = {
   "himi_apps": ["canOpen", "current", "hostInfo", "open"],
   "iap": ["appBinding", "consume", "entitlements", "finishTransaction", "getPaywallConfig", "getProducts", "getUnfinishedTransactions", "purchase", "purchaseForVerification", "restore"],
   "keyboard": ["dismiss"],
+  "legacy_import": ["ack", "read"],
   "live_activity": ["end", "start", "update"],
   "local_database": ["availability", "count", "get", "getAll", "purge", "query", "queueDepth", "queueDrain", "queueEnqueue", "remove", "upsert"],
   "location": ["backgroundStart", "backgroundStop", "getCurrent", "getPermissionStatus", "regionAdd", "regionClear", "regionList", "regionNext", "regionRemove", "regionSupport", "requestPermission", "watchNext", "watchStart", "watchStop"],

package/dist/authoring-runtime/node_modules/@wix/himalaya/dist/calls.mjs

@@ -33,6 +33,7 @@ var CAPABILITY_REGISTRY = {
   "himi_apps": ["canOpen", "current", "hostInfo", "open"],
   "iap": ["appBinding", "consume", "entitlements", "finishTransaction", "getPaywallConfig", "getProducts", "getUnfinishedTransactions", "purchase", "purchaseForVerification", "restore"],
   "keyboard": ["dismiss"],
+  "legacy_import": ["ack", "read"],
   "live_activity": ["end", "start", "update"],
   "local_database": ["availability", "count", "get", "getAll", "purge", "query", "queueDepth", "queueDrain", "queueEnqueue", "remove", "upsert"],
   "location": ["backgroundStart", "backgroundStop", "getCurrent", "getPermissionStatus", "regionAdd", "regionClear", "regionList", "regionNext", "regionRemove", "regionSupport", "requestPermission", "watchNext", "watchStart", "watchStop"],

package/dist/authoring-runtime/node_modules/@wix/himalaya/dist/contacts.mjs

@@ -33,6 +33,7 @@ var CAPABILITY_REGISTRY = {
   "himi_apps": ["canOpen", "current", "hostInfo", "open"],
   "iap": ["appBinding", "consume", "entitlements", "finishTransaction", "getPaywallConfig", "getProducts", "getUnfinishedTransactions", "purchase", "purchaseForVerification", "restore"],
   "keyboard": ["dismiss"],
+  "legacy_import": ["ack", "read"],
   "live_activity": ["end", "start", "update"],
   "local_database": ["availability", "count", "get", "getAll", "purge", "query", "queueDepth", "queueDrain", "queueEnqueue", "remove", "upsert"],
   "location": ["backgroundStart", "backgroundStop", "getCurrent", "getPermissionStatus", "regionAdd", "regionClear", "regionList", "regionNext", "regionRemove", "regionSupport", "requestPermission", "watchNext", "watchStart", "watchStop"],

package/dist/authoring-runtime/node_modules/@wix/himalaya/dist/core.mjs

@@ -7443,6 +7443,149 @@ function gateScreenIdShapeProblem(id) {
   return null;
 }
 
+// ../../core/ts/src/legacy-import.ts
+var LEGACY_IMPORT_SOURCE_KINDS = ["files"];
+var LEGACY_IMPORT_SINKS = ["localDatabase", "state", "files", "report", "installationId", "drop"];
+var LEGACY_IMPORT_FILE_ROOTS = ["documents", "library", "caches"];
+var LEGACY_IMPORT_DEFAULT_RETAIN_DAYS = 30;
+var LEGACY_IMPORT_BUDGET_MS = 3e3;
+var LEGACY_IMPORT_MAX_ATTEMPTS = 3;
+var ID_RE = /^[a-z0-9][a-z0-9_.-]{0,63}$/;
+var DOTTED_RE = /^[A-Za-z0-9_$-]+(\.[A-Za-z0-9_$-]+)*$/;
+function isSimpleGlob(pattern) {
+  return typeof pattern === "string" && pattern.length > 0 && !/[?[\]{}!]/.test(pattern) && !pattern.includes("**");
+}
+function isSafeRelativePath(p) {
+  if (typeof p !== "string" || p.length === 0 || p.startsWith("/") || p.includes("\\")) return false;
+  return p.split("/").every((s) => s.length > 0 && s !== "." && s !== "..");
+}
+var isObj = (v) => typeof v === "object" && v !== null && !Array.isArray(v);
+var nonEmpty = (v) => typeof v === "string" && v.trim().length > 0;
+var LEGACY_IMPORT_RESERVED_IDS = ["state-seeds", "installation-id"];
+var isHimiOwned = (segment) => /^(himalaya|himi|io\.himalaya)/i.test(segment);
+var SYSTEM_CACHE_FOLDERS = /* @__PURE__ */ new Set(["WebKit", "Snapshots", "fsCachedData"]);
+function mayReadLegacyFiles(root, path) {
+  const segs = path.split("/");
+  const appFolder = (s) => !isHimiOwned(s) && !s.includes(".") && !SYSTEM_CACHE_FOLDERS.has(s);
+  if (root === "library") return segs.length >= 2 && segs[0] === "Application Support" && appFolder(segs[1]);
+  if (root === "caches") return appFolder(segs[0]);
+  return true;
+}
+function legacyImportProblems(cfg, at = "legacyImport") {
+  const out = [];
+  if (!isObj(cfg)) return [`${at}: must be an object`];
+  if (typeof cfg.id !== "string" || !ID_RE.test(cfg.id)) out.push(`${at}.id: must match ${ID_RE} (got ${JSON.stringify(cfg.id)})`);
+  else if (LEGACY_IMPORT_RESERVED_IDS.includes(cfg.id)) out.push(`${at}.id: "${cfg.id}" is reserved (the importer's own storage uses it)`);
+  const sourceIds = /* @__PURE__ */ new Set();
+  if (!Array.isArray(cfg.sources) || cfg.sources.length === 0) {
+    out.push(`${at}.sources: must be a non-empty array`);
+  } else {
+    cfg.sources.forEach((s, i) => {
+      const p = `${at}.sources[${i}]`;
+      if (!isObj(s)) {
+        out.push(`${p}: must be an object`);
+        return;
+      }
+      if (typeof s.id !== "string" || !ID_RE.test(s.id)) out.push(`${p}.id: must match ${ID_RE} (got ${JSON.stringify(s.id)})`);
+      else if (sourceIds.has(s.id)) out.push(`${p}.id: duplicate source id "${s.id}"`);
+      else sourceIds.add(s.id);
+      if (!LEGACY_IMPORT_SOURCE_KINDS.includes(s.kind)) {
+        out.push(`${p}.kind: unknown source kind ${JSON.stringify(s.kind)} (known: ${LEGACY_IMPORT_SOURCE_KINDS.join(", ")})`);
+        return;
+      }
+      if (s.kind === "files") {
+        if (!LEGACY_IMPORT_FILE_ROOTS.includes(s.root)) {
+          out.push(`${p}.root: must be one of ${LEGACY_IMPORT_FILE_ROOTS.join(", ")} (got ${JSON.stringify(s.root)})`);
+        }
+        if (!isSafeRelativePath(s.path)) out.push(`${p}.path: must be a relative path with no "..", "." or empty segment (got ${JSON.stringify(s.path)})`);
+        else if (!mayReadLegacyFiles(s.root, s.path)) {
+          out.push(`${p}.path: ${JSON.stringify(s.path)} could cover Himi's own storage under ${JSON.stringify(s.root)} \u2014 under "library" name the old app's folder under "Application Support" (e.g. "Application Support/OldApp"); that folder, and a "caches" source's first folder, may not be a himalaya/himi folder, contain a "." (a bundle id's) or be WebKit / Snapshots / fsCachedData`);
+        }
+      }
+    });
+  }
+  if (!Array.isArray(cfg.map)) {
+    out.push(`${at}.map: must be an array`);
+  } else {
+    cfg.map.forEach((r, i) => {
+      const p = `${at}.map[${i}]`;
+      if (!isObj(r)) {
+        out.push(`${p}: must be an object`);
+        return;
+      }
+      if (typeof r.from !== "string" || !sourceIds.has(r.from)) out.push(`${p}.from: names no declared source (got ${JSON.stringify(r.from)})`);
+      const hasMatch = r.match !== void 0;
+      const hasKey = r.key !== void 0;
+      if (hasMatch === hasKey) out.push(`${p}: exactly one of "match" or "key" is required`);
+      if (hasMatch && (typeof r.match !== "string" || !isSimpleGlob(r.match))) {
+        out.push(`${p}.match: must be a simple "*" glob (no ? [ ] { } ! or **) (got ${JSON.stringify(r.match)})`);
+      }
+      if (hasKey && !nonEmpty(r.key)) out.push(`${p}.key: must be a non-empty string`);
+      out.push(...sinkProblems(r.to, `${p}.to`));
+    });
+  }
+  if (cfg.unmapped !== "report" && cfg.unmapped !== "drop") out.push(`${at}.unmapped: must be "report" or "drop" (got ${JSON.stringify(cfg.unmapped)})`);
+  if (cfg.principal !== void 0) {
+    const pr = cfg.principal;
+    if (!isObj(pr)) out.push(`${at}.principal: must be an object`);
+    else {
+      if (typeof pr.from !== "string" || !sourceIds.has(pr.from)) out.push(`${at}.principal.from: names no declared source (got ${JSON.stringify(pr.from)})`);
+      if (!nonEmpty(pr.key)) out.push(`${at}.principal.key: must be a non-empty string`);
+      if (pr.jsonPath !== void 0 && (typeof pr.jsonPath !== "string" || !DOTTED_RE.test(pr.jsonPath))) {
+        out.push(`${at}.principal.jsonPath: must be a dotted path (got ${JSON.stringify(pr.jsonPath)})`);
+      }
+    }
+  }
+  if (cfg.retainDays !== void 0 && (!Number.isInteger(cfg.retainDays) || cfg.retainDays < 1 || cfg.retainDays > 365)) {
+    out.push(`${at}.retainDays: must be an integer in [1, 365] (got ${JSON.stringify(cfg.retainDays)})`);
+  }
+  return out;
+}
+function sinkProblems(to, p) {
+  if (!isObj(to)) return [`${p}: must be an object with a "sink"`];
+  if (!LEGACY_IMPORT_SINKS.includes(to.sink)) {
+    return [`${p}.sink: unknown sink ${JSON.stringify(to.sink)} (known: ${LEGACY_IMPORT_SINKS.join(", ")})`];
+  }
+  const out = [];
+  switch (to.sink) {
+    case "localDatabase": {
+      out.push(`${p}.sink: "localDatabase" is not supported yet \u2014 no shell pins the importing account (import rows as "files" or "report" for now)`);
+      if (!nonEmpty(to.entity)) out.push(`${p}.entity: must be a non-empty string`);
+      const idFrom = to.idFrom;
+      const ok = idFrom === "key" || idFrom === "keySuffix" || typeof idFrom === "string" && idFrom.startsWith("jsonPath:") && DOTTED_RE.test(idFrom.slice("jsonPath:".length));
+      if (!ok) out.push(`${p}.idFrom: must be "key", "keySuffix" or "jsonPath:<dotted.path>" (got ${JSON.stringify(idFrom)})`);
+      break;
+    }
+    case "state":
+      if (!nonEmpty(to.service)) out.push(`${p}.service: must be a non-empty string`);
+      if (typeof to.path !== "string" || !DOTTED_RE.test(to.path)) out.push(`${p}.path: must be a dotted path (got ${JSON.stringify(to.path)})`);
+      break;
+    case "files":
+      if (!isSafeRelativePath(to.dir)) out.push(`${p}.dir: must be a relative path with no "..", "." or empty segment (got ${JSON.stringify(to.dir)})`);
+      break;
+  }
+  return out;
+}
+function validateLegacyImport(cfg, at = "legacyImport") {
+  const problems = legacyImportProblems(cfg, at);
+  if (problems.length > 0) throw new Error(`defineApp: ${problems.join("; ")}`);
+}
+function bakeLegacyImport(cfg) {
+  validateLegacyImport(cfg);
+  const baked = {
+    version: 1,
+    id: cfg.id,
+    sources: cfg.sources.map((s) => ({ ...s })),
+    map: cfg.map.map((r) => ({ ...r, to: { ...r.to } })),
+    unmapped: cfg.unmapped,
+    retainDays: cfg.retainDays ?? LEGACY_IMPORT_DEFAULT_RETAIN_DAYS,
+    budgetMs: LEGACY_IMPORT_BUDGET_MS,
+    maxAttempts: LEGACY_IMPORT_MAX_ATTEMPTS
+  };
+  if (cfg.principal) baked.principal = { ...cfg.principal };
+  return baked;
+}
+
 // ../../core/data-resources/src/base44/schema.ts
 var BASE44_FIELD_TYPES = ["string", "number", "integer", "boolean", "array", "object"];
 var BASE44_STRING_FORMATS = ["date", "date-time", "time", "email", "uri", "uuid", "file", "richtext"];
@@ -7453,21 +7596,21 @@ function base44Prefix(app) {
   const runs = app.match(/[A-Za-z0-9]+/g) ?? [];
   return `Himi${runs.map((r) => r.charAt(0).toUpperCase() + r.slice(1)).join("")}`;
 }
-function nonEmpty(value) {
+function nonEmpty2(value) {
   return typeof value === "string" && value.trim() !== "";
 }
 function isAdoptedEntity(spec) {
-  return nonEmpty(spec.base44Name);
+  return nonEmpty2(spec.base44Name);
 }
 function physicalEntityName(spec, app) {
   if (isAdoptedEntity(spec)) return spec.base44Name;
-  return nonEmpty(spec.name) ? `${base44Prefix(app)}${spec.name}` : "";
+  return nonEmpty2(spec.name) ? `${base44Prefix(app)}${spec.name}` : "";
 }
 var ENTITY_NAME = /^[A-Za-z][A-Za-z0-9]*$/;
 var FUNCTION_NAME = /^[A-Za-z0-9][A-Za-z0-9_-]*$/;
 function label(spec) {
-  if (nonEmpty(spec.base44Name)) return spec.base44Name;
-  if (nonEmpty(spec.name)) return spec.name;
+  if (nonEmpty2(spec.base44Name)) return spec.base44Name;
+  if (nonEmpty2(spec.name)) return spec.name;
   return "<unnamed>";
 }
 function userScoped(rule) {
@@ -8035,6 +8178,27 @@ function validateConfigShape(config) {
   validateLadderConfig(config);
   validateAuthGateScreen(config.auth);
   validateAppInfoConfig(config.appInfo);
+  if (config.legacyImport !== void 0) {
+    validateLegacyImport(config.legacyImport);
+    const providerId = config.auth?.providerId?.trim() ?? "";
+    if (providerId === "" || providerId === "none") {
+      const scoped = config.legacyImport.map.findIndex((r) => r.to.sink !== "installationId" && r.to.sink !== "drop");
+      if (scoped >= 0) throw new Error(`defineApp: legacyImport.map[${scoped}].to.sink: "${config.legacyImport.map[scoped].to.sink}" is applied only to a signed-in principal, and this app has no auth provider (auth.providerId "${providerId || "(none)"}")`);
+      if (config.legacyImport.unmapped === "report") throw new Error(`defineApp: legacyImport.unmapped: "report" is applied only to a signed-in principal, and this app has no auth provider \u2014 use "drop"`);
+    }
+    const principalScoped = config.legacyImport.map.some((r) => r.to.sink !== "installationId" && r.to.sink !== "drop") || config.legacyImport.unmapped === "report";
+    if (principalScoped && config.legacyImport.principal === void 0) {
+      throw new Error(`defineApp: legacyImport.principal: required while the import has principal-scoped sinks \u2014 no auth provider adopts a legacy session yet (#4655), so without it nothing would ever be applied`);
+    }
+    if (config.dataSchema) {
+      const declared = new Set(config.dataSchema.entities.map((e) => e.name));
+      config.legacyImport.map.forEach((r, i) => {
+        if (r.to.sink === "localDatabase" && !declared.has(r.to.entity)) {
+          throw new Error(`defineApp: legacyImport.map[${i}].to.entity: "${r.to.entity}" is not declared in dataSchema.entities (${[...declared].map((n) => JSON.stringify(n)).join(", ") || "none"})`);
+        }
+      });
+    }
+  }
   const appBundleConflict = appLogicBundleConflict(config);
   if (appBundleConflict) throw new Error(`defineApp: ${appBundleConflict}`);
   if (config.tier5Cap) {
@@ -8403,7 +8567,7 @@ function tonalElevationAlpha(level) {
 var BUTTON_SIZES = ["sm", "md", "lg"];
 var BUTTON_MIN_HIT_TARGET = 44;
 var nonNegative = (v) => typeof v === "number" && Number.isFinite(v) && v >= 0 ? v : void 0;
-var nonEmpty2 = (v) => typeof v === "string" && v !== "" ? v : void 0;
+var nonEmpty3 = (v) => typeof v === "string" && v !== "" ? v : void 0;
 var own = (o, k) => o && typeof o === "object" && Object.prototype.hasOwnProperty.call(o, k) ? o[k] : void 0;
 function resolveButtonTokens(tokens, size, style) {
   const button = own(own(tokens, "controls"), "button");
@@ -8417,12 +8581,12 @@ function resolveButtonTokens(tokens, size, style) {
   set("height", nonNegative(own(s, "height")));
   set("paddingH", nonNegative(own(s, "paddingH")));
   set("paddingV", nonNegative(own(s, "paddingV")));
-  set("text", nonEmpty2(own(s, "text")));
+  set("text", nonEmpty3(own(s, "text")));
   set("icon", nonNegative(own(s, "icon")));
   set("radius", nonNegative(own(v, "radius")) ?? nonNegative(own(s, "radius")));
-  set("fill", nonEmpty2(own(v, "fill")));
-  set("label", nonEmpty2(own(v, "label")));
-  set("border", nonEmpty2(own(v, "border")));
+  set("fill", nonEmpty3(own(v, "fill")));
+  set("label", nonEmpty3(own(v, "label")));
+  set("border", nonEmpty3(own(v, "border")));
   set("borderWidth", nonNegative(own(v, "borderWidth")));
   return out;
 }
@@ -10153,16 +10317,16 @@ function shouldRevealError(args) {
       return args.touched && !args.focused;
   }
 }
-var nonEmpty3 = (type) => (v) => typeof v === "string" && v.length > 0 && isValid({ type }, v);
+var nonEmpty4 = (type) => (v) => typeof v === "string" && v.length > 0 && isValid({ type }, v);
 var validators = {
   // validates: these are top-level CALLS, which esbuild otherwise has to assume
   // might have side effects — and keeping them retained `validate` and every
   // predicate behind it, DOUBLING a Tier-5 bundle that does no validation at all.
-  email: /* @__PURE__ */ nonEmpty3("email"),
-  phone: /* @__PURE__ */ nonEmpty3("phone"),
-  url: /* @__PURE__ */ nonEmpty3("url"),
-  number: /* @__PURE__ */ nonEmpty3("number"),
-  integer: /* @__PURE__ */ nonEmpty3("integer")
+  email: /* @__PURE__ */ nonEmpty4("email"),
+  phone: /* @__PURE__ */ nonEmpty4("phone"),
+  url: /* @__PURE__ */ nonEmpty4("url"),
+  number: /* @__PURE__ */ nonEmpty4("number"),
+  integer: /* @__PURE__ */ nonEmpty4("integer")
 };
 function validateAll(rules, values, catalog) {
   const errors = {};
@@ -14989,6 +15153,8 @@ export {
   IDIOM_CONTEXTS,
   LAUNCH_MANIFEST_SCHEMA,
   LAUNCH_NAMESPACE,
+  LEGACY_IMPORT_SINKS,
+  LEGACY_IMPORT_SOURCE_KINDS,
   LINK_MOUNT_PATHS,
   LOCALE_NATIVE_NAMES,
   LOCALE_SYSTEM,
@@ -15049,6 +15215,7 @@ export {
   appServicesAllowed,
   assertSiteShellConfig,
   availableLocales,
+  bakeLegacyImport,
   baselineMediaCapabilities,
   bucket,
   buildHimiPreviewUrl,
@@ -15102,6 +15269,7 @@ export {
   isWidgetFamilySurface,
   isWixAbsoluteCachePrefix,
   layoutDirection,
+  legacyImportProblems,
   localeChoiceSource,
   mergeIdiomOverlay,
   mergeSiteMenu,

package/dist/authoring-runtime/node_modules/@wix/himalaya/dist/legacy-import.mjs

@@ -0,0 +1,40 @@
+// ../../core/sdk/dispatch/src/index.ts
+function dispatch(handlerId, params, _options) {
+  const himalaya = globalThis.himalaya;
+  if (!himalaya) {
+    return Promise.reject(
+      new Error("@himalaya/dispatch: called outside a Himalaya runtime. This bundle must run inside a JSWorker (Tier 5).")
+    );
+  }
+  const stringParams = {};
+  if (params) {
+    for (const [k, v] of Object.entries(params)) stringParams[k] = String(v);
+  }
+  return himalaya.dispatch(handlerId, stringParams);
+}
+
+// ../../core/sdk/legacy-import/src/index.ts
+function asReport(v) {
+  if (!v || typeof v !== "object") return null;
+  const r = v;
+  if (typeof r.id !== "string" || !Array.isArray(r.items) || !Array.isArray(r.sources)) return null;
+  return {
+    id: r.id,
+    extractedAt: typeof r.extractedAt === "number" ? r.extractedAt : 0,
+    sources: r.sources.filter((s) => !!s && typeof s === "object" && typeof s.id === "string"),
+    items: r.items.filter((i) => !!i && typeof i === "object" && typeof i.key === "string")
+  };
+}
+async function read() {
+  return asReport(await dispatch("capability.legacy_import.read"));
+}
+async function ack() {
+  await dispatch("capability.legacy_import.ack");
+}
+var version = 1;
+export {
+  ack,
+  read,
+  version
+};
+//# sourceMappingURL=legacy-import.mjs.map

package/dist/authoring-runtime/node_modules/@wix/himalaya/dist/location.mjs

@@ -33,6 +33,7 @@ var CAPABILITY_REGISTRY = {
   "himi_apps": ["canOpen", "current", "hostInfo", "open"],
   "iap": ["appBinding", "consume", "entitlements", "finishTransaction", "getPaywallConfig", "getProducts", "getUnfinishedTransactions", "purchase", "purchaseForVerification", "restore"],
   "keyboard": ["dismiss"],
+  "legacy_import": ["ack", "read"],
   "live_activity": ["end", "start", "update"],
   "local_database": ["availability", "count", "get", "getAll", "purge", "query", "queueDepth", "queueDrain", "queueEnqueue", "remove", "upsert"],
   "location": ["backgroundStart", "backgroundStop", "getCurrent", "getPermissionStatus", "regionAdd", "regionClear", "regionList", "regionNext", "regionRemove", "regionSupport", "requestPermission", "watchNext", "watchStart", "watchStop"],

package/dist/authoring-runtime/node_modules/@wix/himalaya/dist/motion.mjs

@@ -33,6 +33,7 @@ var CAPABILITY_REGISTRY = {
   "himi_apps": ["canOpen", "current", "hostInfo", "open"],
   "iap": ["appBinding", "consume", "entitlements", "finishTransaction", "getPaywallConfig", "getProducts", "getUnfinishedTransactions", "purchase", "purchaseForVerification", "restore"],
   "keyboard": ["dismiss"],
+  "legacy_import": ["ack", "read"],
   "live_activity": ["end", "start", "update"],
   "local_database": ["availability", "count", "get", "getAll", "purge", "query", "queueDepth", "queueDrain", "queueEnqueue", "remove", "upsert"],
   "location": ["backgroundStart", "backgroundStop", "getCurrent", "getPermissionStatus", "regionAdd", "regionClear", "regionList", "regionNext", "regionRemove", "regionSupport", "requestPermission", "watchNext", "watchStart", "watchStop"],

package/dist/authoring-runtime/node_modules/@wix/himalaya/dist/photos.mjs

@@ -33,6 +33,7 @@ var CAPABILITY_REGISTRY = {
   "himi_apps": ["canOpen", "current", "hostInfo", "open"],
   "iap": ["appBinding", "consume", "entitlements", "finishTransaction", "getPaywallConfig", "getProducts", "getUnfinishedTransactions", "purchase", "purchaseForVerification", "restore"],
   "keyboard": ["dismiss"],
+  "legacy_import": ["ack", "read"],
   "live_activity": ["end", "start", "update"],
   "local_database": ["availability", "count", "get", "getAll", "purge", "query", "queueDepth", "queueDrain", "queueEnqueue", "remove", "upsert"],
   "location": ["backgroundStart", "backgroundStop", "getCurrent", "getPermissionStatus", "regionAdd", "regionClear", "regionList", "regionNext", "regionRemove", "regionSupport", "requestPermission", "watchNext", "watchStart", "watchStop"],