@wix/himalaya-cli 0.969.0 → 0.971.0

package/dist/cli.mjs

@@ -18715,7 +18715,6 @@ function shouldRevealError(args) {
 var EMAIL_RE, URL_HOST_RE, INTEGER_RE, NUMBER_RE;
 var init_validation = __esm({
   "../../core/ts/src/validation.ts"() {
-    "use strict";
     EMAIL_RE = /^[A-Za-z0-9._%+-]+@[A-Za-z0-9-]+(\.[A-Za-z0-9-]+)*\.[A-Za-z]{2,}$/;
     URL_HOST_RE = /^[A-Za-z0-9-]+(\.[A-Za-z0-9-]+)*(:[0-9]+)?$/;
     INTEGER_RE = /^[+-]?[0-9]+$/;
@@ -22140,7 +22139,6 @@ function validateWorkerSubtree(raw, slotId, policy, actionCatalog) {
 var WORKER_SUBTREE_CEILINGS, ID_PART, ACTION_ID;
 var init_worker_subtree = __esm({
   "../../core/ts/src/worker-subtree.ts"() {
-    "use strict";
     init_worker_subtree_safe_types_generated();
     WORKER_SUBTREE_CEILINGS = Object.freeze({
       maxEncodedBytes: 65536,
@@ -43594,19 +43592,19 @@ var init_preview_assets_generated = __esm({
   "../../packages/serve/src/preview-assets.generated.ts"() {
     init_preview_assets_format();
     PREVIEW_ASSET_MANIFEST = [
-      { key: "assets/index-Dlirkows.js", contentType: "application/javascript; charset=utf-8", offset: 8, length: 985462, sha256: "b9aba518df2120a652af435c0f5f6d6b3770c54e2807220aa96b617953d08427" },
-      { key: "fonts/WixMadeforDisplay-Bold.ttf", contentType: "font/ttf", offset: 985470, length: 90924, sha256: "ec4c7d63772d980d6e147b2df6215fd2737e4b04cebe0cf7e11dc695fb63cdcf" },
-      { key: "fonts/WixMadeforDisplay-ExtraBold.ttf", contentType: "font/ttf", offset: 1076394, length: 90984, sha256: "bf4c16a2774edd38a921edf3099469866cd74c094fd596f3fa4e81f54a04dfaa" },
-      { key: "fonts/WixMadeforDisplay-Medium.ttf", contentType: "font/ttf", offset: 1167378, length: 90980, sha256: "368faca44fb9f7207e4af784e94750b1ee59c1098b8689e0f4a918926f244fb5" },
-      { key: "fonts/WixMadeforDisplay-Regular.ttf", contentType: "font/ttf", offset: 1258358, length: 90872, sha256: "97ed8f1a6772abe26e3d8af5cecfc4b02faa94497d585b0398b5053b739a70c1" },
-      { key: "fonts/WixMadeforDisplay-SemiBold.ttf", contentType: "font/ttf", offset: 1349230, length: 90980, sha256: "642feab8a48ddf6c7a89d7c2a7c0edfa0e6e773f671287e460e222703563191e" },
-      { key: "fonts/WixMadeforText-Bold.ttf", contentType: "font/ttf", offset: 1440210, length: 108636, sha256: "37c179b4fefb63ea9637322b84583a2df53aa226c150294eea1675c14b1b8e29" },
-      { key: "fonts/WixMadeforText-ExtraBold.ttf", contentType: "font/ttf", offset: 1548846, length: 109084, sha256: "62e2fe4718129f36ecdb0ae4de385bd6b81ecc876146447167c6c140fad699a9" },
-      { key: "fonts/WixMadeforText-Medium.ttf", contentType: "font/ttf", offset: 1657930, length: 109048, sha256: "4ecf270136af928612c76fe4ebade91d8156975e5ea4c0cf9225501dd1788e02" },
-      { key: "fonts/WixMadeforText-Regular.ttf", contentType: "font/ttf", offset: 1766978, length: 107700, sha256: "dee56f09fd3efc127c1ea95557edc74110c1460a46287da36e0af25efd341ef5" },
-      { key: "fonts/WixMadeforText-SemiBold.ttf", contentType: "font/ttf", offset: 1874678, length: 88108, sha256: "dced97a77624bc5f8b1ae65850360908297f4588e09feb6f22792d29dc7e765b" },
-      { key: "index.html", contentType: "text/html; charset=utf-8", offset: 1962786, length: 4448, sha256: "c41d62befc7517ad7b5ce19a8a3fb7673842e3a8f1b0e62b5db653676a333bfc" },
-      { key: "t5-frame.html", contentType: "text/html; charset=utf-8", offset: 1967234, length: 13784, sha256: "cfb9465254fab84f0e084bb4542c282758ea29774b5f172840cc0b9e4194ef89" }
+      { key: "assets/index-CRa9DnKn.js", contentType: "application/javascript; charset=utf-8", offset: 8, length: 985527, sha256: "1c58488280b45b11e8bbe7fa084de9f7413518465af6e7c9fea5c200befef90b" },
+      { key: "fonts/WixMadeforDisplay-Bold.ttf", contentType: "font/ttf", offset: 985535, length: 90924, sha256: "ec4c7d63772d980d6e147b2df6215fd2737e4b04cebe0cf7e11dc695fb63cdcf" },
+      { key: "fonts/WixMadeforDisplay-ExtraBold.ttf", contentType: "font/ttf", offset: 1076459, length: 90984, sha256: "bf4c16a2774edd38a921edf3099469866cd74c094fd596f3fa4e81f54a04dfaa" },
+      { key: "fonts/WixMadeforDisplay-Medium.ttf", contentType: "font/ttf", offset: 1167443, length: 90980, sha256: "368faca44fb9f7207e4af784e94750b1ee59c1098b8689e0f4a918926f244fb5" },
+      { key: "fonts/WixMadeforDisplay-Regular.ttf", contentType: "font/ttf", offset: 1258423, length: 90872, sha256: "97ed8f1a6772abe26e3d8af5cecfc4b02faa94497d585b0398b5053b739a70c1" },
+      { key: "fonts/WixMadeforDisplay-SemiBold.ttf", contentType: "font/ttf", offset: 1349295, length: 90980, sha256: "642feab8a48ddf6c7a89d7c2a7c0edfa0e6e773f671287e460e222703563191e" },
+      { key: "fonts/WixMadeforText-Bold.ttf", contentType: "font/ttf", offset: 1440275, length: 108636, sha256: "37c179b4fefb63ea9637322b84583a2df53aa226c150294eea1675c14b1b8e29" },
+      { key: "fonts/WixMadeforText-ExtraBold.ttf", contentType: "font/ttf", offset: 1548911, length: 109084, sha256: "62e2fe4718129f36ecdb0ae4de385bd6b81ecc876146447167c6c140fad699a9" },
+      { key: "fonts/WixMadeforText-Medium.ttf", contentType: "font/ttf", offset: 1657995, length: 109048, sha256: "4ecf270136af928612c76fe4ebade91d8156975e5ea4c0cf9225501dd1788e02" },
+      { key: "fonts/WixMadeforText-Regular.ttf", contentType: "font/ttf", offset: 1767043, length: 107700, sha256: "dee56f09fd3efc127c1ea95557edc74110c1460a46287da36e0af25efd341ef5" },
+      { key: "fonts/WixMadeforText-SemiBold.ttf", contentType: "font/ttf", offset: 1874743, length: 88108, sha256: "dced97a77624bc5f8b1ae65850360908297f4588e09feb6f22792d29dc7e765b" },
+      { key: "index.html", contentType: "text/html; charset=utf-8", offset: 1962851, length: 4448, sha256: "4cb74dd5b24622561a40f778caca44cb69451235a60d393f210d026f27bd51f6" },
+      { key: "t5-frame.html", contentType: "text/html; charset=utf-8", offset: 1967299, length: 13784, sha256: "cfb9465254fab84f0e084bb4542c282758ea29774b5f172840cc0b9e4194ef89" }
     ];
   }
 });
@@ -44152,7 +44150,7 @@ async function runStore(pos, flags, io, deps) {
   }
   let findings;
   try {
-    findings = await deps.preflightApp(app);
+    findings = await deps.preflightApp(app, { profileFlag: str2(flags.profile) });
   } catch (e) {
     return fail2(e.message);
   }
@@ -44425,6 +44423,125 @@ var init_preflight = __esm({
   }
 });
 
+// ../store-release/credential-profile.ts
+var credential_profile_exports = {};
+__export(credential_profile_exports, {
+  credentialEnv: () => credentialEnv,
+  credentialsDir: () => credentialsDir,
+  maskIssuer: () => maskIssuer,
+  namedProfile: () => namedProfile,
+  parseProfile: () => parseProfile,
+  profilePath: () => profilePath,
+  resolveStoreCredentials: () => resolveStoreCredentials
+});
+import { existsSync as existsSync50, readFileSync as readFileSync57 } from "node:fs";
+import { homedir as homedir6 } from "node:os";
+import { join as join47 } from "node:path";
+function credentialsDir(home = homedir6()) {
+  return join47(home, ".himalaya", "store-credentials");
+}
+function profilePath(name, home = homedir6()) {
+  if (!PROFILE_NAME.test(name)) {
+    throw new Error(
+      `credential profile ${JSON.stringify(name)} is not a profile name \u2014 use letters, digits, ".", "_" or "-" starting with a letter or digit. It names ${join47(credentialsDir(home), "<name>.json")}; it is never a path.`
+    );
+  }
+  return join47(credentialsDir(home), `${name}.json`);
+}
+function parseProfile(text2, label2) {
+  let doc;
+  try {
+    doc = JSON.parse(text2);
+  } catch (e) {
+    throw new Error(`${label2} is not valid JSON: ${e.message}`);
+  }
+  if (!doc || typeof doc !== "object" || Array.isArray(doc)) {
+    throw new Error(`${label2} must be a JSON object with ${FIELDS.join(", ")}.`);
+  }
+  const rec = doc;
+  const out = {};
+  for (const f of FIELDS) {
+    const v = rec[f];
+    if (typeof v !== "string" || !v.trim() || /^TODO/i.test(v.trim())) {
+      throw new Error(`${label2} is missing a usable "${f}" (got ${JSON.stringify(v)}).`);
+    }
+    out[f] = v.trim();
+  }
+  return out;
+}
+function namedProfile(cfg, profileFlag) {
+  const ios = cfg.ios ?? {};
+  return profileFlag?.trim() || ios.credentialProfile?.trim() || void 0;
+}
+function resolveStoreCredentials(opts) {
+  const { app, cfg } = opts;
+  const env = opts.env ?? process.env;
+  const home = opts.home ?? homedir6();
+  const read = opts.readProfile ?? ((p) => readFileSync57(p, "utf8"));
+  const exists = opts.profileExists ?? existsSync50;
+  const ios = cfg.ios ?? {};
+  const flagName = opts.profileFlag?.trim();
+  const named = namedProfile(cfg, opts.profileFlag);
+  if (named) {
+    const source = flagName ? "flag" : "config";
+    const p = profilePath(named, home);
+    assertCredentialOutsideRepo(`credential profile "${named}"`, p);
+    if (!exists(p)) {
+      throw new Error(
+        `credential profile "${named}" not found at ${p}. Create it with the App Store Connect identifiers for that account: { "team": \u2026, "ascKeyId": \u2026, "ascIssuerId": \u2026, "ascKeyPath": \u2026 }. The .p8 itself stays outside the repo and is never committed.`
+      );
+    }
+    const doc = parseProfile(read(p), `credential profile "${named}" (${p})`);
+    assertCredentialOutsideRepo(`credential profile "${named}" ascKeyPath`, doc.ascKeyPath);
+    if (ios.team && !/^TODO/i.test(ios.team) && ios.team !== doc.team) {
+      throw new Error(
+        `apps/${app}/store/store.config.yaml declares ios.team "${ios.team}" but credential profile "${named}" is for team "${doc.team}". Fix whichever is stale \u2014 never upload to a team the app config does not name.`
+      );
+    }
+    return { ...doc, source, profile: named };
+  }
+  const missing = ["ASC_KEY_ID", "ASC_ISSUER_ID", "ASC_KEY_PATH"].filter((n) => !env[n]);
+  if (missing.length) {
+    throw new Error(
+      `no App Store Connect account resolved for "${app}": ${missing.join(", ")} unset and no credential profile declared. Either export the ASC_* vars, or set ios.credentialProfile in apps/${app}/store/store.config.yaml (see /setup-store-signing).`
+    );
+  }
+  const ascKeyPath = env.ASC_KEY_PATH;
+  assertCredentialOutsideRepo("ASC_KEY_PATH", ascKeyPath);
+  const team = env.HIMALAYA_APPLE_TEAM_ID || ios.team;
+  if (!team || /^TODO/i.test(team)) {
+    throw new Error(
+      `no Apple team for "${app}": set ios.team in apps/${app}/store/store.config.yaml or export HIMALAYA_APPLE_TEAM_ID.`
+    );
+  }
+  return {
+    team,
+    ascKeyId: env.ASC_KEY_ID,
+    ascIssuerId: env.ASC_ISSUER_ID,
+    ascKeyPath,
+    source: "env"
+  };
+}
+function credentialEnv(c) {
+  return {
+    ASC_KEY_ID: c.ascKeyId,
+    ASC_ISSUER_ID: c.ascIssuerId,
+    ASC_KEY_PATH: c.ascKeyPath,
+    HIMALAYA_APPLE_TEAM_ID: c.team
+  };
+}
+function maskIssuer(issuer) {
+  return issuer.length <= 8 ? issuer : `${issuer.slice(0, 8)}\u2026`;
+}
+var PROFILE_NAME, FIELDS;
+var init_credential_profile = __esm({
+  "../store-release/credential-profile.ts"() {
+    init_preflight();
+    PROFILE_NAME = /^[A-Za-z0-9][A-Za-z0-9._-]*$/;
+    FIELDS = ["team", "ascKeyId", "ascIssuerId", "ascKeyPath"];
+  }
+});
+
 // ../store-release/preflight-app.ts
 var preflight_app_exports = {};
 __export(preflight_app_exports, {
@@ -44438,12 +44555,13 @@ __export(preflight_app_exports, {
   jpegSize: () => jpegSize,
   playListingAssets: () => playListingAssets,
   pngSize: () => pngSize,
-  preflightApp: () => preflightApp
+  preflightApp: () => preflightApp,
+  profileAccount: () => profileAccount
 });
-import { readFileSync as readFileSync57, existsSync as existsSync50, readdirSync as readdirSync24, statSync as statSync10 } from "node:fs";
+import { readFileSync as readFileSync58, existsSync as existsSync51, readdirSync as readdirSync24, statSync as statSync10 } from "node:fs";
 import { createHash as createHash23 } from "node:crypto";
-import { join as join47 } from "node:path";
-function analyze(projectYml, storeConfig, icon) {
+import { join as join48 } from "node:path";
+function analyze(projectYml, storeConfig, icon, account) {
   const f = [];
   const has = (re, s) => re.test(s);
   const iconNameSet = has(/ASSETCATALOG_COMPILER_APPICON_NAME:\s*\S+/, projectYml);
@@ -44482,18 +44600,39 @@ function analyze(projectYml, storeConfig, icon) {
     f.push({ level: "warn", message: "Declares associated-domains \u2192 requires ASSOCIATED_DOMAINS enabled on the App ID (and a real applinks host, not localhost) or signing/AASA breaks. Enable + set the host, or remove the entitlement." });
   }
   const todo = (key2) => new RegExp(`${key2}:\\s*TODO`).test(storeConfig) || !new RegExp(`${key2}:`).test(storeConfig);
-  if (!/team:\s*\S+/.test(storeConfig) || /team:\s*TODO/.test(storeConfig)) f.push({ level: "error", message: "store.config.yaml ios.team is unset/TODO." });
-  for (const k of ["ascKeyId", "ascIssuerId"]) {
-    if (todo(k)) f.push({ level: "error", message: `store.config.yaml ios.${k} is unset/TODO (needed to sign + upload).` });
+  if (account) {
+    if (account.error) f.push({ level: "error", message: account.error });
+  } else {
+    if (!/team:\s*\S+/.test(storeConfig) || /team:\s*TODO/.test(storeConfig)) f.push({ level: "error", message: "store.config.yaml ios.team is unset/TODO." });
+    for (const k of ["ascKeyId", "ascIssuerId"]) {
+      if (todo(k)) f.push({ level: "error", message: `store.config.yaml ios.${k} is unset/TODO (needed to sign + upload).` });
+    }
   }
   if (todo("appStoreId")) f.push({ level: "warn", message: "store.config.yaml ios.appStoreId is unset/TODO \u2014 create the App Store Connect app record first (the API can't), then fill it." });
   return f;
 }
-async function preflightApp(app) {
-  const projectYml = existsSync50(iosProjectYml(app)) ? readFileSync57(iosProjectYml(app), "utf8") : "";
-  const storeConfig = existsSync50(storeConfigPath(app)) ? readFileSync57(storeConfigPath(app), "utf8") : "";
+function profileAccount(app, storeConfig, opts = {}) {
+  const cfg = parseStoreConfig(storeConfig);
+  const profile = namedProfile(cfg, opts.profileFlag);
+  if (!profile) return void 0;
+  try {
+    resolveStoreCredentials({ app, cfg, ...opts });
+    return { profile };
+  } catch (e) {
+    const why = e instanceof Error ? e.message : String(e ?? "");
+    return { profile, error: why.trim() || `credential profile "${profile}" could not be resolved.` };
+  }
+}
+async function preflightApp(app, opts = {}) {
+  const projectYml = existsSync51(iosProjectYml(app)) ? readFileSync58(iosProjectYml(app), "utf8") : "";
+  const storeConfig = existsSync51(storeConfigPath(app)) ? readFileSync58(storeConfigPath(app), "utf8") : "";
   if (!storeConfig) return [{ level: "error", message: `no apps/${app}/store/store.config.yaml \u2014 run /setup-store-signing first.` }];
-  const findings = analyze(projectYml, storeConfig, await appIconState(join47(appDir(app), "ios")));
+  const findings = analyze(
+    projectYml,
+    storeConfig,
+    await appIconState(join48(appDir(app), "ios")),
+    profileAccount(app, storeConfig, opts)
+  );
   findings.push(...analyzeListing(metadataFilesPresent(app), listScreenshots(app)));
   findings.push(
     ...analyzePlayListing(playListingAssets(app)).map((finding) => ({ ...finding, level: "warn" }))
@@ -44520,17 +44659,17 @@ function analyzeSubmissionRecord(appLevel, review, opts) {
   return f;
 }
 function appLevelMetadataFiles(app, locale = "en-US") {
-  const root = join47(storeDir(app), "metadata");
+  const root = join48(storeDir(app), "metadata");
   const out = /* @__PURE__ */ new Set();
-  if (existsSync50(root)) {
+  if (existsSync51(root)) {
     for (const n of readdirSync24(root)) if (n.endsWith(".txt")) out.add(n);
   }
-  if (existsSync50(join47(root, locale, "privacy_url.txt"))) out.add("privacy_url.txt");
+  if (existsSync51(join48(root, locale, "privacy_url.txt"))) out.add("privacy_url.txt");
   return out;
 }
 function reviewInfoFiles(app) {
-  const dir = join47(storeDir(app), "review_information");
-  if (!existsSync50(dir)) return /* @__PURE__ */ new Set();
+  const dir = join48(storeDir(app), "review_information");
+  if (!existsSync51(dir)) return /* @__PURE__ */ new Set();
   return new Set(readdirSync24(dir).filter((n) => n.endsWith(".txt")));
 }
 function isValidAppStoreSize(w, h) {
@@ -44640,12 +44779,12 @@ function analyzePlayListing(assets) {
   return f;
 }
 function playListingAssets(app, locale = "en-US") {
-  const dir = join47(storeDir(app), "play", locale, "images");
+  const dir = join48(storeDir(app), "play", locale, "images");
   const read = (names) => {
     for (const name of names) {
-      const p = join47(dir, name);
+      const p = join48(dir, name);
       try {
-        if (statSync10(p).isFile()) return { name, bytes: readFileSync57(p) };
+        if (statSync10(p).isFile()) return { name, bytes: readFileSync58(p) };
       } catch {
       }
     }
@@ -44676,26 +44815,26 @@ function analyzeListing(metaFiles, shots) {
   return f;
 }
 function metadataFilesPresent(app, locale = "en-US") {
-  const dir = join47(storeDir(app), "metadata", locale);
-  if (!existsSync50(dir)) return /* @__PURE__ */ new Set();
+  const dir = join48(storeDir(app), "metadata", locale);
+  if (!existsSync51(dir)) return /* @__PURE__ */ new Set();
   return new Set(readdirSync24(dir).filter((n) => n.endsWith(".txt")));
 }
 function listScreenshots(app, locale = "en-US") {
   const out = [];
-  const flat = join47(storeDir(app), "screenshots", locale);
-  if (existsSync50(flat)) {
+  const flat = join48(storeDir(app), "screenshots", locale);
+  if (existsSync51(flat)) {
     for (const png of readdirSync24(flat).filter((n) => n.endsWith(".png"))) {
-      const sz = pngSize(readFileSync57(join47(flat, png)));
+      const sz = pngSize(readFileSync58(join48(flat, png)));
       if (sz) out.push({ name: png, w: sz.w, h: sz.h });
     }
   }
-  const legacy = join47(storeDir(app), "metadata", locale, "screenshots");
-  if (existsSync50(legacy)) {
+  const legacy = join48(storeDir(app), "metadata", locale, "screenshots");
+  if (existsSync51(legacy)) {
     for (const deviceDir of readdirSync24(legacy)) {
-      const d = join47(legacy, deviceDir);
+      const d = join48(legacy, deviceDir);
       if (!statSync10(d).isDirectory()) continue;
       for (const png of readdirSync24(d).filter((n) => n.endsWith(".png"))) {
-        const sz = pngSize(readFileSync57(join47(d, png)));
+        const sz = pngSize(readFileSync58(join48(d, png)));
         if (sz) out.push({ name: `${deviceDir}/${png}`, w: sz.w, h: sz.h });
       }
     }
@@ -44703,13 +44842,13 @@ function listScreenshots(app, locale = "en-US") {
   return out;
 }
 function placeholderHashes2() {
-  const templateIos = join47(appDir("_template"), "ios");
-  if (!existsSync50(templateIos)) return [LEGACY_PLACEHOLDER_SHA2562];
+  const templateIos = join48(appDir("_template"), "ios");
+  if (!existsSync51(templateIos)) return [LEGACY_PLACEHOLDER_SHA2562];
   for (const target of readdirSync24(templateIos)) {
-    const p = join47(templateIos, target, "Assets.xcassets", "AppIcon.appiconset", "icon_1024.png");
+    const p = join48(templateIos, target, "Assets.xcassets", "AppIcon.appiconset", "icon_1024.png");
     try {
       if (!statSync10(p).isFile()) continue;
-      return [LEGACY_PLACEHOLDER_SHA2562, createHash23("sha256").update(readFileSync57(p)).digest("hex")];
+      return [LEGACY_PLACEHOLDER_SHA2562, createHash23("sha256").update(readFileSync58(p)).digest("hex")];
     } catch {
     }
   }
@@ -44740,12 +44879,12 @@ async function pixelIssues(bytes2) {
   }
 }
 async function appIconState(iosDir) {
-  if (!existsSync50(iosDir)) return { exists: false, isPlaceholder: false, storeIssues: [] };
+  if (!existsSync51(iosDir)) return { exists: false, isPlaceholder: false, storeIssues: [] };
   for (const target of readdirSync24(iosDir)) {
-    const p = join47(iosDir, target, "Assets.xcassets", "AppIcon.appiconset", "icon_1024.png");
+    const p = join48(iosDir, target, "Assets.xcassets", "AppIcon.appiconset", "icon_1024.png");
     try {
       if (!statSync10(p).isFile()) continue;
-      const bytes2 = readFileSync57(p);
+      const bytes2 = readFileSync58(p);
       const hash = createHash23("sha256").update(bytes2).digest("hex");
       const pixels = await pixelIssues(bytes2);
       return {
@@ -44783,6 +44922,7 @@ var init_preflight_app = __esm({
   "../store-release/preflight-app.ts"() {
     init_paths();
     init_preflight();
+    init_credential_profile();
     init_app_icon_rules();
     APP_STORE_SIZES = [
       [1320, 2868],
@@ -44805,114 +44945,6 @@ var init_preflight_app = __esm({
   }
 });
 
-// ../store-release/credential-profile.ts
-var credential_profile_exports = {};
-__export(credential_profile_exports, {
-  credentialEnv: () => credentialEnv,
-  credentialsDir: () => credentialsDir,
-  maskIssuer: () => maskIssuer,
-  parseProfile: () => parseProfile,
-  profilePath: () => profilePath,
-  resolveStoreCredentials: () => resolveStoreCredentials
-});
-import { existsSync as existsSync51, readFileSync as readFileSync58 } from "node:fs";
-import { homedir as homedir6 } from "node:os";
-import { join as join48 } from "node:path";
-function credentialsDir(home = homedir6()) {
-  return join48(home, ".himalaya", "store-credentials");
-}
-function profilePath(name, home = homedir6()) {
-  return join48(credentialsDir(home), `${name}.json`);
-}
-function parseProfile(text2, label2) {
-  let doc;
-  try {
-    doc = JSON.parse(text2);
-  } catch (e) {
-    throw new Error(`${label2} is not valid JSON: ${e.message}`);
-  }
-  if (!doc || typeof doc !== "object" || Array.isArray(doc)) {
-    throw new Error(`${label2} must be a JSON object with ${FIELDS.join(", ")}.`);
-  }
-  const rec = doc;
-  const out = {};
-  for (const f of FIELDS) {
-    const v = rec[f];
-    if (typeof v !== "string" || !v.trim() || /^TODO/i.test(v.trim())) {
-      throw new Error(`${label2} is missing a usable "${f}" (got ${JSON.stringify(v)}).`);
-    }
-    out[f] = v.trim();
-  }
-  return out;
-}
-function resolveStoreCredentials(opts) {
-  const { app, cfg } = opts;
-  const env = opts.env ?? process.env;
-  const home = opts.home ?? homedir6();
-  const read = opts.readProfile ?? ((p) => readFileSync58(p, "utf8"));
-  const exists = opts.profileExists ?? existsSync51;
-  const ios = cfg.ios ?? {};
-  const flagName = opts.profileFlag?.trim();
-  const named = flagName || ios.credentialProfile?.trim();
-  if (named) {
-    const source = flagName ? "flag" : "config";
-    const p = profilePath(named, home);
-    assertCredentialOutsideRepo(`credential profile "${named}"`, p);
-    if (!exists(p)) {
-      throw new Error(
-        `credential profile "${named}" not found at ${p}. Create it with the App Store Connect identifiers for that account: { "team": \u2026, "ascKeyId": \u2026, "ascIssuerId": \u2026, "ascKeyPath": \u2026 }. The .p8 itself stays outside the repo and is never committed.`
-      );
-    }
-    const doc = parseProfile(read(p), `credential profile "${named}" (${p})`);
-    assertCredentialOutsideRepo(`credential profile "${named}" ascKeyPath`, doc.ascKeyPath);
-    if (ios.team && !/^TODO/i.test(ios.team) && ios.team !== doc.team) {
-      throw new Error(
-        `apps/${app}/store/store.config.yaml declares ios.team "${ios.team}" but credential profile "${named}" is for team "${doc.team}". Fix whichever is stale \u2014 never upload to a team the app config does not name.`
-      );
-    }
-    return { ...doc, source, profile: named };
-  }
-  const missing = ["ASC_KEY_ID", "ASC_ISSUER_ID", "ASC_KEY_PATH"].filter((n) => !env[n]);
-  if (missing.length) {
-    throw new Error(
-      `no App Store Connect account resolved for "${app}": ${missing.join(", ")} unset and no credential profile declared. Either export the ASC_* vars, or set ios.credentialProfile in apps/${app}/store/store.config.yaml (see /setup-store-signing).`
-    );
-  }
-  const ascKeyPath = env.ASC_KEY_PATH;
-  assertCredentialOutsideRepo("ASC_KEY_PATH", ascKeyPath);
-  const team = env.HIMALAYA_APPLE_TEAM_ID || ios.team;
-  if (!team || /^TODO/i.test(team)) {
-    throw new Error(
-      `no Apple team for "${app}": set ios.team in apps/${app}/store/store.config.yaml or export HIMALAYA_APPLE_TEAM_ID.`
-    );
-  }
-  return {
-    team,
-    ascKeyId: env.ASC_KEY_ID,
-    ascIssuerId: env.ASC_ISSUER_ID,
-    ascKeyPath,
-    source: "env"
-  };
-}
-function credentialEnv(c) {
-  return {
-    ASC_KEY_ID: c.ascKeyId,
-    ASC_ISSUER_ID: c.ascIssuerId,
-    ASC_KEY_PATH: c.ascKeyPath,
-    HIMALAYA_APPLE_TEAM_ID: c.team
-  };
-}
-function maskIssuer(issuer) {
-  return issuer.length <= 8 ? issuer : `${issuer.slice(0, 8)}\u2026`;
-}
-var FIELDS;
-var init_credential_profile = __esm({
-  "../store-release/credential-profile.ts"() {
-    init_preflight();
-    FIELDS = ["team", "ascKeyId", "ascIssuerId", "ascKeyPath"];
-  }
-});
-
 // ../store-release/version.ts
 var version_exports = {};
 __export(version_exports, {
@@ -55195,8 +55227,10 @@ var USAGE = `himi \u2014 the Himalaya authoring CLI (remote dev loop)
                                            --release <published-release-id> --version <x.y.z> --yes --target bo.
                                            Job Service builds the IPA; deployed serve validates it, then
                                            invokes MRE with its service identity. This is separate from QA himi dist.
-  himi store preflight <app> [--json]      readiness only \u2014 icon, entitlements, encryption flag,
-                                           version, store.config ids, listing + review record.
+  himi store preflight <app> [--profile <name>] [--json]
+                                           readiness only \u2014 icon, entitlements, encryption flag,
+                                           version, store.config ids (or the --profile /
+                                           ios.credentialProfile account), listing + review record.
                                            No network, nothing built.
   himi store upload <app> [--track <t>] [--profile <name>] [--yes] [--dry-run]
                                            the same upload himi testflight runs.
@@ -55408,7 +55442,7 @@ var COMMANDS = [
   { name: "visibility", summary: "read (no value) or set whether the public registry (/v1/apps + the Himi Player picker) LISTS the app. `public` lists it for everyone; `unlisted` hides it from listings while direct reads by app id \u2014 deep links, previews \u2014 keep working. App from --app or the content dir. Setting it needs no republish.", required: "[public|unlisted] [--app <a>] [--content <dir>] (--control-token)" },
   { name: "dist", summary: "build an INSTALLABLE QA binary (signed IPA / APK) on the Wix Job Service Mac pool and return an install link \u2014 the serve plane brokers the job, the pool builds it. WAITS for the build by default (~4 min) and prints the install link; `--no-wait` returns a jobId immediately instead. Omitting `--release` builds whatever is LIVE for the app. A named draft is refused unless `--allow-draft` makes that exceptional build explicit. `status <jobId>` / `watch <jobId>` / `list --app <a>` / `cancel <jobId>` inspect and stop builds (`watch` reports up front whether the job mints its own signing identity or borrows one, so a doomed iOS build is cancellable in seconds rather than after the archive). Off-repo, name a target \u2014 `--target wix` for a self-serve Wix login or `--target bo` for the internal employee path (the in-repo default is a local dev plane that isn't reachable off-repo); self-serve callers may build their OWN apps under a tighter budget (2 in flight / 5 per 24h), while a manage-only owner-role credential is refused. `--shell` picks the native host to sign into (branded-lite | owner-lite | player | demo-app). `--signing` defaults to `wix-managed` \u2014 the Wix Apple account mints a per-app signing identity for the build, so the caller provisions no Apple credentials of their own; `--signing byo` (sign with your own Apple account) is reserved and 501s. `--android-signing` is the Android counterpart and a SEPARATE axis (a keystore, not an Apple account): `qa-keystore` (default \u2014 the repo's committed QA key, identical on every pool machine, so a build installs over the previous one), `wix-keystore` (the Wix key the pool machine carries; the build FAILS naming the paths searched if it carries none, rather than quietly signing with something else), or `debug` (the old per-machine key \u2014 QA must uninstall any previous build first). NOT the normal way to ship: screens, Tier-5 bundles, tokens and app-config all go over the air with `himi push` in seconds \u2014 a binary trip is only needed for a NATIVE delta (a new SDUI component, a new declared capability/entitlement, a new bundle id, or a minBinaryVersion floor bump). Refuses to build an app whose launcher icon is missing, a placeholder, or one a store would reject \u2014 the one thing a binary carries that no later OTA push can fix; `--force` builds anyway", required: "[--app <a>] [--platform ios,android] [--release <id>] [--allow-draft] [--target <t>] [--shell branded-lite|owner-lite|player|demo-app] [--signing wix-managed|byo] [--android-signing qa-keystore|wix-keystore|debug] [--borrow-ios-id <bundleId>] [--no-wait] [--force] | status <jobId> [--target <t>] | watch <jobId> [--target <t>] [--interval <ms>] | list --app <a> [--target <t>] | cancel <jobId> [--target <t>]" },
   { name: "testflight", summary: 'build, sign and upload an app to TestFlight (internal testers \u2014 no Beta App Review), then WAIT until App Store Connect finishes processing it. Sugar for `store upload --track testflight`. Prompts first: a build number is consumed permanently on a real Apple account and cannot be reused \u2014 `--yes` for CI, `--dry-run` to see the plan without touching anything. The wait is the real check, not a nicety: fastlane prints "Successfully uploaded" for a binary App Store Connect then rejects in processing, and a rejected binary leaves NO build record at all (the reason is emailed). Public App Store review is deliberately NOT automatable here \u2014 `--track appstore` is refused; use /submit-ios-app when you mean to go public', required: "<app> [--track testflight|internal] [--profile <name>] [--yes] [--dry-run] [--skip-build] [--no-wait] [--json]" },
-  { name: "store", summary: "the App Store Connect group behind `testflight`. `preflight <app>` checks readiness offline (icon, entitlements, encryption flag, version, store.config ids, listing + review record); `upload <app>` is what `testflight` runs; `status <app>` reads live build + processing state. `--profile` selects WHICH App Store Connect account: an app built for a Wix customer ships under the CUSTOMER's Apple team (Apple guideline 4.2.6 forbids an app-generation service submitting on a client's behalf), declared per-app as ios.credentialProfile in store.config.yaml and resolved from ~/.himalaya/store-credentials/<name>.json \u2014 the .p8 itself never enters the repo", required: "preflight <app> | upload <app> [--track <t>] [--profile <n>] [--yes] [--dry-run] | status <app> [--profile <n>]" },
+  { name: "store", summary: "the App Store Connect group behind `testflight`. `preflight <app>` checks readiness offline (icon, entitlements, encryption flag, version, store.config ids, listing + review record); `upload <app>` is what `testflight` runs; `status <app>` reads live build + processing state. `--profile` selects WHICH App Store Connect account: an app built for a Wix customer ships under the CUSTOMER's Apple team (Apple guideline 4.2.6 forbids an app-generation service submitting on a client's behalf), declared per-app as ios.credentialProfile in store.config.yaml and resolved from ~/.himalaya/store-credentials/<name>.json \u2014 the .p8 itself never enters the repo", required: "preflight <app> [--profile <n>] | upload <app> [--track <t>] [--profile <n>] [--yes] [--dry-run] | status <app> [--profile <n>]" },
   { name: "guide", summary: "print the Himalaya overview + headless dev loop + available topics (offline)", required: "[--json]" },
   { name: "docs", summary: "print an authoring guide; no topic = list them (offline)", required: "[<topic>] [--json]" },
   { name: "components", summary: "print the SDUI component vocabulary + props; a name = that component (offline)", required: "[<Name>] [--json]" },

package/guides/tier-5-add-a-screen.md

@@ -515,14 +515,18 @@ What the host guarantees, on every surface:
   window stays visible while unfocused), and a **React Native** host must pass
   `installPollLifecycle: makeAppStatePollLifecycle(AppState)` or it never suspends there
   either. See the RFC's per-surface table.
-- **Screen teardown cancels it.** The timer starts with the worker and dies with it.
+- **Worker teardown cancels it; leaving a pooled screen pauses it.** The timer starts with
+  the worker and dies with it. A host that keeps a navigated-away screen's worker warm in
+  a keep-alive pool suspends its poll while it sits there — it fires immediately when the
+  screen reappears, then resumes cadence. The poll ends only when the worker itself is
+  torn down: evicted from the pool, or the pool reset.
 
 Two things to know before you reach for it:
 
 - **`_poll` has no stop form.** The directive can start and replace a poll, not end one.
-  Screen teardown is the only stop — and with keep-alive worker pools that is later than
-  you think (a screen you navigated away from may still be polling). Pick a cadence you
-  would be comfortable running on several screens at once.
+  Worker teardown is the only stop; navigating away from a pooled screen pauses the poll
+  rather than ending it. Pick a cadence you would be comfortable running on several
+  screens at once.
 - **Emit it from the action that runs on every entry**, not only from a first-open path.
   Restored worker state re-paints data but arms no timer, so a poll armed only by `open`
   restores into a screen that *looks* live and never refreshes.

package/guides/wix-business-context.md

@@ -137,6 +137,16 @@ The plane has no headless browser (`look.unavailable: no_browser_on_plane`). Own
 
 `--apply` writes `appearance.homeLayout` + `navigation.navKind` plus identity/colors. It never silently overwrites committed Amit1 `apps/himi-branded-lite/provisioning.json`.
 
+When the analysis recognized at least one vertical, `--apply` also patches the shell's baked home
+(`dev/index.ts`) to what the site actually runs. The Explore grid keeps only the site's
+destinations (adding a card the template baked none for, and leaving off a vertical the template
+ships no screen for); home modules that no installed vertical can fill are dropped; and a site
+without `store` loses the home's Shop calls to action, including the one nested in the
+`retail-store` store-first layout. The store screens themselves are untouched — only the home
+stops linking to them. The apply notes name every removed call to action and every installed
+vertical left off Explore, so an intentional omission is distinguishable from a failed patch. An
+analysis with no recognized vertical leaves the home exactly as shipped.
+
 It also writes **`cmsCollections`** — the customer's own CMS collections, always present and possibly `[]`. The overlay used to carry no such key, and an absent key inherits the shell's, so an applied app advertised and **queried** the shell's demo collection: another tenant's data model under the customer's brand. `[]` is therefore a value, not an absence — it clears the shell's list and the CMS screen shows its own empty state.
 
 Only a collection a shipped app can read **as a visitor** is carried, because `readCms` lists with an **owner** token and the app has no such session. An `ADMIN` read is dropped (no session the app can hold will ever satisfy it), and so is a **member-gated** one — not because the app cannot read it, but because the CMS worker caches fetched rows in the unencrypted `cms_items` store, which outlives the member's session and would be served to the next visitor on the device ([cms-collections.md](cms-collections.md)). A Wix app's own collection (`ownerAppId`) is dropped too; its vertical already renders it. So are the four other ways a collection misses the app, because they need different remedies and are indistinguishable in the artifact: **no owner token** (nothing was looked at), the listing **failing** (any status but 404 — re-authenticate, widen the Wix Data grant, or retry a 429; a 404 means the app is not on the site, which is simply "no collections"), the listing **cap** of 24 counted against the server's `pagingMetadata.total` (the rest were never read), and an **id that cannot be carried unchanged** (surrounded by whitespace, carrying a control character, or over 256 chars — normalizing it would name a different collection in a manifest that still loads). A site that simply has none says nothing — that is the ordinary state, and `--apply` leads its note with warnings.

package/guides/wix-site-to-himi-app.md

@@ -167,11 +167,14 @@ book says which happened on the `cms collections:` line (`(skipped: no owner tok
 The `clientId`-is-the-binding rule above is about the **app's** runtime site binding, not this.
 
 `--apply` writes `provisioning.json` + token **values**, and patches the branded-lite
-home `onAppear` params (`ownerDefaultLayout`, `brandAccent`, `verticals`) in
-`dev/index.ts`. It does **not** rewrite `config.ts` tabBar — you still set 2–4
-Hebrew/RTL tabs to the site's jobs. If home still renders the English Shop/Book/Explore
-hub after `--apply`, the onAppear patch missed (no `dev/index.ts`, or a custom home
-screen) — set `ownerDefaultLayout` by hand.
+home in `dev/index.ts`: its `onAppear` params (`ownerDefaultLayout`, `brandAccent`,
+`verticals`) and, when the analysis recognized any vertical, the Explore grid, the home
+modules and — on a site without `store` — the Shop calls to action, naming what it
+removed in its notes (`himi docs wix-business-context`). It does **not** rewrite
+`config.ts` tabBar — you still set 2–4 Hebrew/RTL tabs to the site's jobs. If home still
+renders the English Shop/Book/Explore hub after `--apply`, the home patch missed (no
+`dev/index.ts`, a custom home screen, or an analysis with no recognized vertical) — set
+`ownerDefaultLayout` and the home content by hand.
 
 **Look:** merge `--wst-*` into `tokens.json` **values only** (`himi docs tokens`), and only into
 the **light** arm — a scraped website colour is never a dark-mode colour, so let the app's own

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@wix/himalaya-cli",
-  "version": "0.969.0",
+  "version": "0.971.0",
   "type": "module",
   "description": "himi — the Himalaya authoring CLI. Build a Tier-5 content package on your own machine, push it to the production serve as a draft, preview it on web + Himi Player, and read worker logs back — the remote dev loop. Wraps @himalaya/serve-cli for transport.",
   "keywords": [
@@ -64,5 +64,5 @@
       "artifactId": "himalaya-cli"
     }
   },
-  "falconPackageHash": "5fbb2ba85ad9db892370efbcc59a8ef6629609514feb06522e4ea1f2"
+  "falconPackageHash": "dc35d80213a50f83892eb491d6ec9afd8cf09def367013281612b0aa"
 }

package/templates/beauty-salon-owner/config.ts

@@ -37,7 +37,7 @@ export default defineApp({
     actions: "http://localhost:8190/v1/actions",
     sync: "http://localhost:8190/v1/sync",
   },
-  capabilities: ["live_activity","push","share","secure_storage","open_url","local_database"],
+  capabilities: ["live_activity","push","share","secure_storage","open_url","local_database","clipboard"],
   designTokensPath: "./tokens.json",
   navigation: {
     "navKind": "responsive",