@wix/himalaya-cli 0.880.0 → 0.881.0

package/dist/authoring-runtime/node_modules/@wix/himalaya/dist/_types/stdlib/wix-sdk/blog-v3/src/extensions.d.ts

@@ -39,8 +39,8 @@ export interface WixGetPostRequest {
  * request type has no `fieldsets` field, so that fallback path cannot carry the
  * body.
  *
- * When that fallback ALSO finds nothing (#2658) — a deleted post, or one this
- * visitor may not see — we reject rather than resolve. `WixGetPostResponse.post`
+ * When that fallback ALSO finds nothing — a deleted post, or one this visitor
+ * may not see — we reject rather than resolve. `WixGetPostResponse.post`
  * is non-optional, so returning `{ post: resp.posts?.[0] }` would hand callers an
  * `undefined` the type promises is present, and the `post.title` access that type
  * licenses throws a `TypeError` deep inside the caller — the exact hard error

package/dist/cli.mjs

@@ -22773,7 +22773,7 @@ var init_app_module = __esm({
 
 // ../../core/dev-server/src/app-assets.ts
 import { createHash as createHash8 } from "node:crypto";
-import { existsSync as existsSync27, lstatSync as lstatSync3, readFileSync as readFileSync29, readdirSync as readdirSync14, realpathSync as realpathSync3, statSync as statSync5 } from "node:fs";
+import { existsSync as existsSync27, lstatSync as lstatSync4, readFileSync as readFileSync29, readdirSync as readdirSync14, realpathSync as realpathSync3, statSync as statSync5 } from "node:fs";
 import { join as join31, resolve as resolve19, sep as sep5 } from "node:path";
 function contentTypeFor(name) {
   const ext = name.includes(".") ? name.slice(name.lastIndexOf(".") + 1).toLowerCase() : "";
@@ -22851,7 +22851,7 @@ function collectBrandFonts(appDir2) {
     if (rel.startsWith("/") || rel.split("/").includes("..")) continue;
     const path = join31(appDir2, rel);
     try {
-      if (!lstatSync3(path).isFile()) continue;
+      if (!lstatSync4(path).isFile()) continue;
       const root = realpathSync3(appDir2);
       if (!realpathSync3(path).startsWith(root + sep5)) continue;
     } catch {
@@ -46910,13 +46910,13 @@ __export(app_source_exports, {
   writeConflicts: () => writeConflicts,
   zipAppSource: () => zipAppSource
 });
-import { readdirSync as readdirSync21, lstatSync as lstatSync4, readFileSync as readFileSync44, mkdirSync as mkdirSync18, writeFileSync as writeFileSync14, existsSync as existsSync38, rmSync as rmSync6, rmdirSync, unlinkSync as unlinkSync3 } from "node:fs";
+import { readdirSync as readdirSync21, lstatSync as lstatSync5, readFileSync as readFileSync44, mkdirSync as mkdirSync18, writeFileSync as writeFileSync14, existsSync as existsSync38, rmSync as rmSync6, rmdirSync, unlinkSync as unlinkSync3 } from "node:fs";
 import { join as join37, resolve as resolve34, sep as sep7 } from "node:path";
 function walkSourceTree(dir, file, skip) {
   const walk2 = (relDir) => {
     for (const name of readdirSync21(join37(dir, relDir))) {
       const rel = relDir ? join37(relDir, name) : name;
-      const st = lstatSync4(join37(dir, rel));
+      const st = lstatSync5(join37(dir, rel));
       if (st.isSymbolicLink()) {
         skip(rel);
         continue;
@@ -46964,7 +46964,7 @@ function readAppSource(zip) {
 }
 function pathKind(p) {
   try {
-    return lstatSync4(p);
+    return lstatSync5(p);
   } catch {
     return null;
   }
@@ -47061,7 +47061,7 @@ function pruneEmptyDirs(root, rel, needed, removed) {
   for (const name of readdirSync21(rel ? join37(root, rel) : root)) {
     const childRel = rel ? join37(rel, name) : name;
     const posix3 = childRel.split(sep7).join("/");
-    const kind = lstatSync4(join37(root, childRel));
+    const kind = lstatSync5(join37(root, childRel));
     if (kind.isSymbolicLink() || !kind.isDirectory() || isDeniedSourceDir(name)) {
       empty = false;
       continue;
@@ -51239,8 +51239,9 @@ ${releaseId}`;
       if (packageShare) {
         const shareId = packageShare[1];
         const wantsMetadata = url.searchParams.get("metadata") === "1";
+        const wantsDownload = url.searchParams.get("download") === "1";
         const wantsHtml = (request.headers.get("accept") ?? "").includes("text/html");
-        if (wantsMetadata || wantsHtml) {
+        if (wantsMetadata || wantsHtml && !wantsDownload) {
           const share = await resolvePackageShareMetadata(await getStore(), shareId);
           if (!share) return json3(404, { error: "package_share_not_found" });
           if (wantsMetadata) return json3(200, share, { "cache-control": "no-store" });
@@ -59411,7 +59412,7 @@ var init_site_oauth_client = __esm({
 });
 
 // src/cli.ts
-import { mkdtempSync as mkdtempSync4, readFileSync as readFileSync64, mkdirSync as mkdirSync25, writeFileSync as writeFileSync23, existsSync as existsSync53, rmSync as rmSync9, readdirSync as readdirSync24, statSync as statSync12, lstatSync as lstatSync5 } from "node:fs";
+import { mkdtempSync as mkdtempSync4, readFileSync as readFileSync64, mkdirSync as mkdirSync25, writeFileSync as writeFileSync23, existsSync as existsSync53, rmSync as rmSync9, readdirSync as readdirSync24, statSync as statSync12, lstatSync as lstatSync6 } from "node:fs";
 import { execFileSync as execFileSync7 } from "node:child_process";
 import { createHash as createHash24 } from "node:crypto";
 import { tmpdir as tmpdir5 } from "node:os";
@@ -59872,6 +59873,7 @@ import { execFileSync as execFileSync2 } from "node:child_process";
 import { createHash as createHash3, randomBytes } from "node:crypto";
 import {
   existsSync as existsSync3,
+  lstatSync as lstatSync3,
   mkdirSync as mkdirSync5,
   realpathSync,
   readlinkSync as readlinkSync2,
@@ -60230,6 +60232,24 @@ if (process.argv[1] && basename(process.argv[1]) === "diff-hash.mjs" && import.m
 
 // src/attestation.ts
 var DEFAULT_MAX_RUNS = 20;
+var ATTESTATION_VERSION = 2;
+function attestationVersionOf(value) {
+  if (!value || typeof value !== "object" || Array.isArray(value)) return null;
+  const version = value.attestation;
+  return typeof version === "number" && Number.isInteger(version) && version > 0 ? version : null;
+}
+function classifyRetainedRun(dir, name) {
+  let value;
+  try {
+    value = JSON.parse(readFileSync5(join6(dir, name), "utf8"));
+  } catch {
+    return { kind: "unreadable" };
+  }
+  if (isAttestationV2(value)) return { kind: "current", run: value };
+  const version = attestationVersionOf(value);
+  if (version === null || version === ATTESTATION_VERSION) return { kind: "malformed" };
+  return { kind: version < ATTESTATION_VERSION ? "legacy" : "future" };
+}
 function screenshotArtifactPath(contentDir2, hash) {
   return join6(resolve6(contentDir2), ".himi", "attestations", "artifacts", `${hash}.png`);
 }
@@ -60297,7 +60317,15 @@ function currentGitUntrackedHash(contentDir2) {
   for (const path of listed.split("\0").filter(Boolean).sort()) {
     const local = relative(absolute, join6(root, path));
     if (local.split(/[\\/]/)[0] === ".himi") continue;
-    hash.update(path).update("\0").update(readFileSync5(join6(root, path))).update("\0");
+    const full = join6(root, path);
+    const stats = lstatSync3(full, { throwIfNoEntry: false });
+    if (!stats) continue;
+    const kind = stats.isSymbolicLink() ? "link" : stats.isDirectory() ? "dir" : stats.isFile() ? "file" : null;
+    if (!kind) continue;
+    const payload = kind === "link" ? Buffer.from(readlinkSync2(full)) : kind === "file" ? readFileSync5(full) : Buffer.alloc(0);
+    const pathBytes = Buffer.from(path);
+    hash.update(`${kind} ${pathBytes.length} ${payload.length}
+`).update(pathBytes).update(payload);
   }
   return hash.digest("hex");
 }
@@ -60317,17 +60345,17 @@ function sourceTreeHash(root) {
   return hash.digest("hex");
 }
 var stringRecord = (value) => !!value && typeof value === "object" && !Array.isArray(value) && Object.values(value).every((item) => typeof item === "string");
-function isAttestationV1(value) {
+function isAttestationV2(value) {
   if (!value || typeof value !== "object" || Array.isArray(value)) return false;
   const a = value;
   const coverage = a.coverage;
   const report = a.report;
-  return a.attestation === 1 && typeof a.runId === "string" && ["himi-test", "himi-render", "himi-shots"].includes(a.tool) && [a.app, a.contentDir, a.gitDiffHash, a.gitUntrackedHash, a.releaseId, a.releaseHash, a.selfHash].every((item) => typeof item === "string" && item.length > 0) && stringRecord(a.descriptorHashes) && stringRecord(a.screenshots) && !!coverage && [coverage.screens, coverage.actionsDispatched, coverage.uncoveredFns, coverage.gaps].every((count) => typeof count === "number" && Number.isFinite(count) && count >= 0) && typeof report?.ok === "boolean" && !!report.counts && [report.counts.errors, report.counts.warnings, report.counts.gaps].every((count) => typeof count === "number" && Number.isFinite(count) && count >= 0) && (a.prev === null || typeof a.prev === "string");
+  return a.attestation === 2 && typeof a.runId === "string" && ["himi-test", "himi-render", "himi-shots"].includes(a.tool) && [a.app, a.contentDir, a.gitDiffHash, a.gitUntrackedHash, a.releaseId, a.releaseHash, a.selfHash].every((item) => typeof item === "string" && item.length > 0) && stringRecord(a.descriptorHashes) && stringRecord(a.screenshots) && !!coverage && [coverage.screens, coverage.actionsDispatched, coverage.uncoveredFns, coverage.gaps].every((count) => typeof count === "number" && Number.isFinite(count) && count >= 0) && typeof report?.ok === "boolean" && !!report.counts && [report.counts.errors, report.counts.warnings, report.counts.gaps].every((count) => typeof count === "number" && Number.isFinite(count) && count >= 0) && (a.prev === null || typeof a.prev === "string");
 }
 function readLatestAttestation(contentDir2) {
   try {
     const parsed = JSON.parse(readFileSync5(join6(resolve6(contentDir2), ".himi", "attestations", "latest.json"), "utf8"));
-    return isAttestationV1(parsed) ? parsed : null;
+    return isAttestationV2(parsed) ? parsed : null;
   } catch {
     return null;
   }
@@ -60340,13 +60368,15 @@ function readRetainedAttestations(contentDir2) {
     const parsedRuns = [];
     const errors = [];
     for (const name of names) {
-      try {
-        const value = JSON.parse(readFileSync5(join6(dir, name), "utf8"));
-        if (isAttestationV1(value)) parsedRuns.push(value);
-        else errors.push(`attestation history contains malformed retained run ${name}`);
-      } catch {
+      const classified = classifyRetainedRun(dir, name);
+      if (classified.kind === "current") parsedRuns.push(classified.run);
+      else if (classified.kind === "legacy") {
+        errors.push(`attestation history contains retained run ${name} from an older attestation version \u2014 re-run himi test/render to start a v${ATTESTATION_VERSION} chain`);
+      } else if (classified.kind === "future") {
+        errors.push(`attestation history contains retained run ${name} from a newer attestation version \u2014 upgrade himi rather than deleting it`);
+      } else if (classified.kind === "unreadable") {
         errors.push(`attestation history contains unreadable retained run ${name}`);
-      }
+      } else errors.push(`attestation history contains malformed retained run ${name}`);
     }
     const latest = readLatestAttestation(contentDir2);
     if (existsSync3(join6(dir, "latest.json")) && !latest) errors.push("attestation history has no valid latest.json");
@@ -60430,7 +60460,7 @@ function writeAttestation(input, opts = {}) {
     if (!existsSync3(artifact)) writeFileSync5(artifact, bytes2);
   }
   const unsigned = {
-    attestation: 1,
+    attestation: 2,
     runId,
     tool: input.tool,
     app: input.app,
@@ -60452,16 +60482,20 @@ function writeAttestation(input, opts = {}) {
   writeFileSync5(join6(dir, runFile), json5);
   writeFileSync5(join6(dir, "latest.json"), json5);
   const keep = Math.max(1, opts.maxRuns ?? DEFAULT_MAX_RUNS);
-  const priorRuns = readdirSync3(dir).filter((name) => name.endsWith(".json") && name !== "latest.json").filter((name) => name !== runFile).sort().reverse();
+  const allPriorRuns = readdirSync3(dir).filter((name) => name.endsWith(".json") && name !== "latest.json").filter((name) => name !== runFile).sort().reverse();
+  const priorRuns = allPriorRuns.filter((name) => {
+    const kind = classifyRetainedRun(dir, name).kind;
+    if (kind === "legacy") {
+      unlinkSync(join6(dir, name));
+      return false;
+    }
+    return kind !== "future";
+  });
   for (const name of priorRuns.slice(Math.max(0, keep - 1))) unlinkSync(join6(dir, name));
   const retainedFiles = readdirSync3(dir).filter((name) => name.endsWith(".json") && name !== "latest.json");
   const retainedRuns = retainedFiles.map((name) => {
-    try {
-      const value = JSON.parse(readFileSync5(join6(dir, name), "utf8"));
-      return isAttestationV1(value) ? value : null;
-    } catch {
-      return null;
-    }
+    const classified = classifyRetainedRun(dir, name);
+    return classified.kind === "current" ? classified.run : null;
   });
   if (retainedRuns.every((run2) => run2 !== null)) {
     const retainedScreenshotHashes = new Set(
@@ -60485,14 +60519,8 @@ function verifyAttestation(attestation, contentDir2, descriptors, expectedApp, r
     if (!latest || opts.requireLatest !== false && latest.selfHash !== attestation.selfHash) {
       errors.push("attestation does not match latest.json");
     } else {
-      const retained = readdirSync3(dir).filter((name) => name.endsWith(".json") && name !== "latest.json").map((name) => {
-        try {
-          const value = JSON.parse(readFileSync5(join6(dir, name), "utf8"));
-          return isAttestationV1(value) ? value : null;
-        } catch {
-          return null;
-        }
-      });
+      const classified = readdirSync3(dir).filter((name) => name.endsWith(".json") && name !== "latest.json").map((name) => classifyRetainedRun(dir, name)).filter((entry) => entry.kind !== "future");
+      const retained = classified.map((entry) => entry.kind === "current" ? entry.run : null);
       if (retained.some((run2) => run2 === null)) {
         errors.push("attestation history contains a malformed retained run");
       } else {
@@ -63966,7 +63994,7 @@ function renameRestoredSource(restored, declaredApp, renamed) {
 function symlinkDestinationIssue(dest) {
   let kind;
   try {
-    kind = lstatSync5(dest);
+    kind = lstatSync6(dest);
   } catch {
     return null;
   }

package/guides/sdk-reference.json

@@ -6590,7 +6590,7 @@
       {
         "name": "getPost",
         "kind": "function",
-        "jsdoc": "/** Fetch a single PUBLISHED post by id — GET /blog/v3/posts/{id}. The list\n * (queryPosts) returns published posts, so the detail reads them here (draft\n * ids are a different space — getDraftPost is for the edit/create flow).\n *\n * Body fieldsets (#826): Blog v3 `GET /posts/{id}` returns 200 but only the\n * LIST projection (title / excerpt / meta) unless the caller asks for the body —\n * the bare GET has NO `richContent` / `contentText`. So we request\n * RICH_CONTENT + CONTENT_TEXT by default and the article body loads on the happy\n * path; callers can override via `req.fieldsets`. (Supersedes the old #507 note:\n * the 502 this GET once returned for anonymous visitors is gone — it 200s now —\n * but a body-less 200 was never the \"body preserved whenever the backend is\n * healthy\" the earlier comment claimed; the body was simply never requested.)\n *\n * On any rejection (network / backend error) we still fall back to a queryPosts\n * filter-by-id — a graceful degrade to the LIST projection (no body) that keeps\n * blog detail + saved screens rendering instead of erroring out. `queryPosts`'s\n * request type has no `fieldsets` field, so that fallback path cannot carry the\n * body.\n *\n * When that fallback ALSO finds nothing (#2658) — a deleted post, or one this\n * visitor may not see — we reject rather than resolve. `WixGetPostResponse.post`\n * is non-optional, so returning `{ post: resp.posts?.[0] }` would hand callers an\n * `undefined` the type promises is present, and the `post.title` access that type\n * licenses throws a `TypeError` deep inside the caller — the exact hard error\n * this fallback exists to prevent, and harder to diagnose than a clean rejection.\n * Every call site rides its own rejection path (cached-post state, draft-only\n * `catch`, or an `allSettled` filter), so rejecting is what routes them into the\n * graceful degrade they already implement. The originating failure travels as\n * `cause`, so the 404-vs-network distinction is not lost. */",
+        "jsdoc": "/** Fetch a single PUBLISHED post by id — GET /blog/v3/posts/{id}. The list\n * (queryPosts) returns published posts, so the detail reads them here (draft\n * ids are a different space — getDraftPost is for the edit/create flow).\n *\n * Body fieldsets (#826): Blog v3 `GET /posts/{id}` returns 200 but only the\n * LIST projection (title / excerpt / meta) unless the caller asks for the body —\n * the bare GET has NO `richContent` / `contentText`. So we request\n * RICH_CONTENT + CONTENT_TEXT by default and the article body loads on the happy\n * path; callers can override via `req.fieldsets`. (Supersedes the old #507 note:\n * the 502 this GET once returned for anonymous visitors is gone — it 200s now —\n * but a body-less 200 was never the \"body preserved whenever the backend is\n * healthy\" the earlier comment claimed; the body was simply never requested.)\n *\n * On any rejection (network / backend error) we still fall back to a queryPosts\n * filter-by-id — a graceful degrade to the LIST projection (no body) that keeps\n * blog detail + saved screens rendering instead of erroring out. `queryPosts`'s\n * request type has no `fieldsets` field, so that fallback path cannot carry the\n * body.\n *\n * When that fallback ALSO finds nothing — a deleted post, or one this visitor\n * may not see — we reject rather than resolve. `WixGetPostResponse.post`\n * is non-optional, so returning `{ post: resp.posts?.[0] }` would hand callers an\n * `undefined` the type promises is present, and the `post.title` access that type\n * licenses throws a `TypeError` deep inside the caller — the exact hard error\n * this fallback exists to prevent, and harder to diagnose than a clean rejection.\n * Every call site rides its own rejection path (cached-post state, draft-only\n * `catch`, or an `allSettled` filter), so rejecting is what routes them into the\n * graceful degrade they already implement. The originating failure travels as\n * `cause`, so the 404-vs-network distinction is not lost. */",
         "decl": "export function getPost(\n  postId: string,\n  req: WixGetPostRequest = {},\n): Promise<WixGetPostResponse>;",
         "http": "GET /blog/v3/posts/{…}"
       },

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@wix/himalaya-cli",
-  "version": "0.880.0",
+  "version": "0.881.0",
   "type": "module",
   "description": "himi — the Himalaya authoring CLI. Build a Tier-5 content package on your own machine, push it to the production serve as a draft, preview it on web + Himi Player, and read worker logs back — the remote dev loop. Wraps @himalaya/serve-cli for transport.",
   "keywords": [
@@ -63,5 +63,5 @@
       "artifactId": "himalaya-cli"
     }
   },
-  "falconPackageHash": "ef087e28bd7651f75f109ba701d8602c5b59ee6fe462bb2616c6802a"
+  "falconPackageHash": "c4de152d9d84b5fc2a1b6adaa22daab7e0b5e8f4fff6ccc83c1e72a3"
 }