@wix/himalaya-cli 0.1635.0 → 0.1636.0

package/dist/cli.mjs

@@ -15892,6 +15892,7 @@ function webViewOriginAllowed(url, origins) {
 }
 var init_webview_origin = __esm({
   "../../core/ts/src/webview-origin.ts"() {
+    "use strict";
     init_define_HHP_CATALOG();
   }
 });
@@ -36082,7 +36083,7 @@ async function resolveAccountCredential(auth, fetchImpl) {
   }
   const account = toWixAccount(parsed && typeof parsed === "object" ? parsed.account : void 0);
   if (!account) return { ok: false, reason: "upstream_failed", status: res.status, detail: "no_account" };
-  return { ok: true, accounts: [account] };
+  return { ok: true, accounts: [account], accountCredential: true };
 }
 var ACCOUNT_SERVER;
 var init_wix_account = __esm({
@@ -177100,6 +177101,14 @@ async function appDir2(args, deps) {
 function loginResult(s2) {
   switch (s2.state) {
     case "pending":
+      if (s2.via === "wix") {
+        return json4({
+          ok: true,
+          state: "pending",
+          via: "wix",
+          message: "Signing in with the Wix token held in WIX_TOKEN \u2014 no browser. Call himi_login again to confirm, or just retry the push."
+        });
+      }
       return json4({
         ok: true,
         state: "pending",
@@ -177107,9 +177116,9 @@ function loginResult(s2) {
         message: "A browser window opened for the user to sign in to Wix. If it did not open, give them `loginUrl`. Once they have signed in, call himi_login again to confirm, or just retry the push."
       });
     case "signed_in":
-      return json4({ ok: true, state: "signed_in", account: s2.account, scope: s2.scope, expiresAt: s2.expiresAt });
+      return json4({ ok: true, state: "signed_in", account: s2.account, scope: s2.scope, expiresAt: s2.expiresAt, ...s2.via ? { via: s2.via } : {} });
     case "failed":
-      return { ...json4({ ok: false, state: "failed", error: s2.error, hint: "Call himi_login again to retry, or ask the user to run `himi login --browser` in a terminal." }), isError: true };
+      return { ...json4({ ok: false, state: "failed", error: s2.error, hint: `Call himi_login again to retry, or ask the user to run \`himi login --browser\` in a terminal. ${HELD_TOKEN_ROUTE}` }), isError: true };
     default:
       return json4({ ok: true, state: "idle" });
   }
@@ -177349,7 +177358,7 @@ ${log}` : ""}`, true);
     {
       name: "himi_login",
       title: "Sign in to Wix",
-      description: "Open a browser window where the USER signs in to Wix, so himi_push and himi_share can publish. Returns at once with the sign-in link; call again to see whether the sign-in finished. Already signed in: says who, and opens nothing unless `switchAccount` is true. This server never sees the credential \u2014 the sign-in stores a scoped token on this machine.",
+      description: "Open a browser window where the USER signs in to Wix, so himi_push and himi_share can publish. Returns at once with the sign-in link; call again to see whether the sign-in finished. Already signed in: says who, and opens nothing unless `switchAccount` is true. This server never sees the credential \u2014 the sign-in stores a scoped token on this machine. When the server was started with WIX_TOKEN (the owner's Wix token, held by the agent platform), it signs in with that instead and opens no browser.",
       annotations: { readOnlyHint: false, destructiveHint: false, idempotentHint: false, openWorldHint: true },
       inputSchema: z4.object({
         target: z4.string().optional().describe("Serve target. Default: the CLI's default."),
@@ -177496,7 +177505,7 @@ ${log}` : ""}`, true);
     }
   ];
 }
-var MAX_TEXT2, clip2, text7, json4, opt, sw, DIR2, LEARN, CHECK, LOCAL_WRITE, PUBLISH, READ_PLANE, APP_ID, RELEASE_ID, LOG_LEVEL, SINCE, LIMIT, PREVIEW_HINT, LOGIN_HINT, PATH_ARGS;
+var MAX_TEXT2, clip2, text7, json4, opt, sw, DIR2, LEARN, CHECK, LOCAL_WRITE, PUBLISH, READ_PLANE, APP_ID, RELEASE_ID, LOG_LEVEL, SINCE, LIMIT, PREVIEW_HINT, LOGIN_HINT, HELD_TOKEN_ROUTE, PATH_ARGS;
 var init_tools = __esm({
   "src/mcp/tools.ts"() {
     init_define_HHP_CATALOG();
@@ -177522,6 +177531,7 @@ var init_tools = __esm({
     LIMIT = z4.number().int().min(1).max(2e3).optional().describe("At most this many rows.");
     PREVIEW_HINT = "The preview is already running: open `url` in your built-in browser \u2014 Claude Code desktop's browser pane, Cursor's Browser tool, the Browser in Codex inside the ChatGPT desktop app, VS Code's integrated browser. Do not also start the `himi-preview` launch configuration: it serves the same port, and is the way to start a preview only when none is running. A terminal-only agent should show the owner `himi_render` PNGs instead. `board` (when present) is the build board on the same origin.";
     LOGIN_HINT = "Not signed in to the himi serve plane. Call himi_login: it opens a browser window where the user signs in to Wix (this server never sees the credential). A user with a terminal can run `himi login --browser` instead. Then retry.";
+    HELD_TOKEN_ROUTE = "No browser on this machine (a sandbox, a cloud session)? An agent that holds the owner's Wix token signs in without one: run `printf '%s' \"$TOKEN\" | himi login --wix --wix-token-stdin` in a shell, or restart this MCP server with WIX_TOKEN set and call himi_login again. Never pass the token as a tool argument.";
     PATH_ARGS = ["dir", "parentDir", "file", "out", "manifest", "plan", "merge", "report", "outDir", "plist"];
   }
 });
@@ -177540,8 +177550,10 @@ function createLoginSession(deps) {
     start(target) {
       if (current.state === "pending") return Promise.resolve(current);
       const self2 = deps.selfCommand();
-      const args = [...self2.args, "login", "--browser", "--skip-version-check", ...target ? ["--target", target] : []];
-      const pending = { state: "pending", startedAt: deps.now() };
+      const env = deps.env ?? process.env;
+      const held = heldWixToken(env) !== void 0;
+      const args = [...self2.args, "login", held ? "--wix" : "--browser", "--skip-version-check", ...target ? ["--target", target] : []];
+      const pending = { state: "pending", startedAt: deps.now(), ...held ? { via: "wix" } : {} };
       current = pending;
       const out2 = [];
       const err = [];
@@ -177554,7 +177566,7 @@ function createLoginSession(deps) {
         };
         let child;
         try {
-          child = deps.spawn(self2.cmd, args, { stdio: ["ignore", "pipe", "pipe"], env: { ...process.env, HIMI_NO_UPDATE_CHECK: "1" } });
+          child = deps.spawn(self2.cmd, args, { stdio: ["ignore", "pipe", "pipe"], env: { ...env, HIMI_NO_UPDATE_CHECK: "1" } });
         } catch (e2) {
           current = { state: "failed", error: `could not start himi login: ${e2.message}` };
           answer();
@@ -177576,7 +177588,7 @@ function createLoginSession(deps) {
         child.once("exit", (code) => {
           if (code === 0) {
             const r3 = lastJson([out2.join("")]) ?? {};
-            current = { state: "signed_in", account: r3.sub, scope: r3.scope, expiresAt: r3.exp };
+            current = { state: "signed_in", account: r3.sub, scope: r3.scope, expiresAt: r3.exp, ...held ? { via: "wix" } : {} };
             signedInTarget = target;
           } else {
             const e2 = lastJson(err.join("").split("\n"));
@@ -177594,6 +177606,7 @@ var init_login = __esm({
   "src/mcp/login.ts"() {
     init_define_HHP_CATALOG();
     init_cli_bridge();
+    init_wix_owner();
     defaultLoginDeps = {
       spawn: (cmd, args, opts) => nodeSpawn2(cmd, args, opts),
       now: () => Date.now()

package/guides/himi-mcp.md

@@ -146,9 +146,11 @@ see, so they stay commands a person runs. Publishing needs a sign-in first: `him
 browser sign-in for the user, or run `himi login --browser` in a terminal. Either way the server
 never asks for or sees a credential — the browser hands a scoped token to a separate `himi login`
 process, which stores it on this machine. On a server with no browser, `himi login --wix` is the
-exception to that guarantee: the CLI reads a Wix account API key from `WIX_API_KEY` in its own
-environment and sends it to the owner plane to mint the token, so keep that key a secret of the
-job, not of the MCP client. A tool input that starts with `-` is refused, so nothing
+exception to that guarantee: the CLI reads the owner's held Wix token from `WIX_TOKEN`, or a Wix
+account API key from `WIX_API_KEY`, in its own environment and sends it to the owner plane to mint
+the token, so keep it a secret of the job, not of the MCP client. Started with `WIX_TOKEN` set,
+`himi_login` runs that `himi login --wix` itself instead of opening a browser; the token still
+never passes through a tool input or result. A tool input that starts with `-` is refused, so nothing
 can be passed through to a flag no tool offers.
 
 ## See the app inside your IDE

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@wix/himalaya-cli",
-  "version": "0.1635.0",
+  "version": "0.1636.0",
   "type": "module",
   "description": "himi — the Himalaya authoring CLI. Build a Tier-5 content package on your own machine, push it to the production serve as a draft, preview it on web + Himi Player, and read worker logs back — the remote dev loop. Wraps @himalaya/serve-cli for transport.",
   "keywords": [
@@ -72,5 +72,5 @@
       "artifactId": "himalaya-cli"
     }
   },
-  "falconPackageHash": "2eb0ec4acfa6663413f592cc6ba30c8888d6a7e736cb32e119b1f8ca"
+  "falconPackageHash": "d6d901ed70b37adf6921bdd9925f1f9318912a9268e2a25230e73f95"
 }