Generated banner for Rp Target Wix
Generated logo for Rp Target Wix

Rp Target Wix

WixOfficialPublished by Wix

  • Skill
  • Tool integration
  • Software development
  • MIT
  • Medium risk
  • Has scripts

From the author

Wix target adapter with verified write primitives, shared execution runtimes, and contract tests. Use when vendoring Wix writers, validating API shapes, or Wix provisioning mechanics.
— the description by Wix

AutoGineer summary

Written by AutoGineer from the skill’s own files, not by the author

The rp-target-wix skill serves as the authoritative Wix-side write surface for migration projects. It centralizes verified request builders, shared execution logic, and contract testing to ensure consistency across different source platforms. By decoupling the Wix API plumbing from project-specific migration logic, it prevents redundant implementation and reduces the risk of breaking changes. The skill manages critical runtime behaviors such as retries, throttling, checkpointing, and audit logging, while providing a structured approach to domain entity suitability and dependency management.

What it does

  • Provides verified request builders and execution primitives for Wix API interactions.
  • Implements shared runtime logic for retries, throttling, and checkpointing.
  • Manages crosswalk helpers and URL preservation for data integrity.
  • Defines domain entity suitability and dependency wiring via structured domain files.
  • Includes contract tests to ensure stable request and runtime behavior.
  • Supports bulk operations and normalization for efficient data ingestion.

When to use it

  • When building or maintaining migration pipelines that target Wix as the destination platform.
  • When you need to perform verified writes to Wix entities like products, orders, or contacts.
  • When implementing shared migration infrastructure that requires consistent throttling and retry policies.
  • When validating API shapes or provisioning mechanics against live Wix environments.

Advantages

  • Reduces code duplication by centralizing Wix API plumbing and runtime logic.
  • Ensures high reliability through verified request builders and contract tests.
  • Simplifies the addition of new source platforms by maintaining a platform-agnostic write surface.
  • Provides robust error handling and rate-limiting strategies out of the box.
  • Facilitates auditability through standardized execution reports and logging.

Usage examples

“How do I ensure my migration handles Wix Stores product bulk creation correctly?”
The skill provides a bulk creation primitive that handles normalization and correlation. You should use the exported BULK_PRODUCT_LIMITS and storesProductBulkCost to batch records via the ndjson stream, ensuring you correlate results by itemMetadata.originalIndex rather than HTTP status.
“How should I handle Wix site notifications during a large import?”
Use the site notifications mute primitives to mute all site notifications during the import window. Ensure you pass a project-identifying reason string to the mute call for auditability and use the idempotent re-mute pattern during preflight checks.

Install

  1. Download the skill as a ZIP:

    https://autogineer.com/agent-skills/wix/rp-target-wix-nymy/download
  2. Unzip it into the cross-client skills folder of your project:

    mkdir -p .agents/skills && unzip rp-target-wix.zip -d .agents/skills

Documentation by Wix

rp-target-wix

Wix target adapter. Owns the Wix-side write surface and shared execution runtime that every migration shares — verified once here so the platform-agnostic stages and per-project codegen never re-derive (and re-break) it. This is the symmetric counterpart to rp-source-wordpress: that adapter owns reading a source platform; this one owns writing to Wix.

When this skill is used

Not a stage in the flow — a reference + shared library consulted by:

  • rp-import-codegen vendors lib/wix-writers.js into the project (like the wp-http transport) plus the shared write/setup runtime modules, and generates thin project-specific write specs/transforms that call these primitives/runtime APIs. Codegen does not re-emit Wix API plumbing.

  • rp-setup-discovery / rp-execute-setup consult the "Verified endpoints" and "Provisioning" notes for app-install / Wix-Data / collection mechanics.

Because the Wix surface is identical across source platforms, adding a new source (rp-source-shopify, …) requires no change here.

Shared runtime boundary

This adapter owns the shared Wix layer written once for all migrations.

It should own:

  • verified request builders and endpoint primitives

  • shared Wix client/auth handling

  • shared retry and throttling policy

  • generic write execution runtime

  • generic setup execution/runtime behavior

  • checkpoint helpers

  • local crosswalk helpers (state/crosswalk/crosswalk.ndjson authority, append-only attempt journal, optional CMS mirror seed/upload adapters)

  • URL preservation helpers (state/url-preservation/ base paths, ledger, planned redirects, and unresolved route rows)

  • NDJSON record-stream I/O (lib/ndjson.js): streaming read/write, batching by count and by cost, cursoring, and append-only producers. Migration data files are record streams, so the scan/batch/cursor primitives live here once instead of being re-derived by codegen.

  • audit log emission

  • compact execution report generation

  • contract tests for stable request/runtime behavior

Per-migration code generation should own only:

  • field maps

  • transforms

  • write specs

  • setup-plan renderings

  • entity ordering

  • dependency wiring — populate WriteSpec.dependencyRefs from each in-scope entity's domain-knowledge dependsOn field (spec 0041), not re-derived per project

Write contract (the verified Wix surface)

lib/wix-writers.js exposes pure request builders (build*Request) + executors. Shapes marked VERIFIED were validated by a real call against a live site, not just read from docs. Shapes marked UNVERIFIED are docs-schema/MCP-derived bootstrap primitives that must be surfaced in execution plans until a live contract call promotes them. It also exports sendDirectRest and notifyMissingWriter for generated native REST paths when Wix has a native entity but this adapter does not yet ship a dedicated primitive.

This resource should also expose shared execution-runtime modules above those primitives, so generated migrations use one common path for retries, throttling, checkpointing, reporting, and audit logging.

Read/return contract for query* executors. Every query* executor (queryStoresProducts, queryStoresCategories, queryContacts, queryCoupons, queryOrders) unwraps the response to the entity array and returns one page, discarding pagingMetadata. Two failure modes follow, both of which have shipped:

  • The return value IS the array. Reading .products / .categories off it a second time gives undefined → []. A dedupe index or existing-entity safety net then comes back empty without erroring, which is indistinguishable from a fresh site — so the import duplicates what is already there, and a setup verification reports 0 categories on a site with 25.

  • These executors cannot be cursor-paged, because the cursor is in the metadata they discarded. Use a queryAll* primitive where one exists — queryAllStoresCategories, queryAllStoresProducts, queryAllDataItems — otherwise send wix.send(build<X>Request(body)) and read pagingMetadata.cursors.next off the raw response.

Every sweep used for dedupe must throw on a partial result rather than return it. "Empty net" and "empty store" look identical to the caller, and the caller assumes the second.

Domain entity suitability knowledge

Target entity suitability lives in domains/, not in a large prose table in this skill. Use the deterministic reader as the normal access path:

node scripts/domain-knowledge.js list-domains
node scripts/domain-knowledge.js list-entities --domain stores
node scripts/domain-knowledge.js read-entity --ref stores/product
node scripts/domain-knowledge.js resolve-source --source-system woocommerce --source-entity product
node scripts/domain-knowledge.js resolve-source --route /wc/v3/products
node scripts/domain-knowledge.js list-flagged --flag IMPORT_UNRELIABLE
node scripts/domain-knowledge.js summarize-entities --refs stores/product,ecom/order

domains/index.json is generated from domain/entity files and checked in. After editing domain knowledge, run:

node scripts/domain-knowledge-validate.js --write-index

Authoring or editing any entity file also requires the spec 0041 dependency check, both directions: (1) what does this entity need to already exist and be crosswalked — record it in dependsOn: string[] (a domain/entity ref array; empty is a real, reviewed answer, not the same as the field being absent); (2) does this entity change what an already-written entity's dependsOn should say (e.g. authoring gift-cards/gift-card should have prompted revisiting ecom/order.json — it hadn't, until spec 0042 caught it by hand). domain-knowledge-validate.js checks dependsOn refs resolve and the whole graph stays acyclic whenever the field is present, but it is not yet required on every entity — node scripts/domain-knowledge-validate.js --list-missing-deps prints the live backlog of entities that have never had it authored at all; that command is the source of truth, not a hand-maintained list.

writerId values in entity files must match exported functions from lib/wix-writers.js; use null for direct REST plans, setup/manual work, or unsupported native gaps.

Entity files may also expose fieldContracts[] for verified nested write paths. These are machine-readable contracts for codegen and dry-run validators, not replacements for the human notes below. For Stores products, domains/stores/entities/product.json records the verified Catalog V3 create contract for product.subscriptionDetails, including required nested paths, allowed recurrence values, read-back behavior, and the live-validated subscriptions[].description <= 60 constraint. Generated transforms should consume that metadata through the vendored wix-writers.js exports instead of copying limits into project-local code.

Live verification helpers must not edit domains/ directly. When a probe changes a target write assumption, emit a proposal artifact and let the orchestrator promote it deliberately:

node skills/wix-replatform/resources/rp-target-wix/scripts/verify-stores.js stores subscription-create \
  --artifact migrations/<project>/setup/stores-subscription-verification.json \
  --proposal-artifact migrations/<project>/setup/contract-ledger-proposal.json

Use lib/contract-ledger.js to validate the handoff: a passed verification without a proposal is incomplete, and a proposal that is neither promoted into fieldContracts[] nor explicitly deferred is stale product knowledge. Codegen should consume fieldContracts[] through scripts/domain-knowledge.js summarize-entities, which includes promoted contracts.

CapabilityEndpointNotes / traps
HTML → rich contentPOST /ricos/v1/ricos-document/convert/to-ricosVERIFIED. options.plugins enum is UPPERCASE — the docs example shows lowercase and 400s.
Import media from URLPOST /site-media/v1/files/importVERIFIED. Async: response is PENDING; poll GET /site-media/v1/files/{id} for READY before referencing.
Blog categoryPOST /blog/v3/categoriesVERIFIED. body { category: { label, slug, description } }.
Blog tagPOST /blog/v3/tagsVERIFIED. Body is top-level { label, language } — NOT { tag: { label, slug } }; slug is derived.
Blog postPOST /blog/v3/draft-posts → …/{id}/publishVERIFIED. memberId required (3rd-party). VERIFIED (2026-08-02): the site owner's auto-created user-member satisfies it — it was already present on our API-provisioned test site with zero Members-area interaction (single-site observation), so attribute-to-owner needs no member provisioning. Resolve it via listMembers + loginEmail match — never derive it from the account/user GUID (the observed id equality is n=1 on a solo account, undocumented). Also VERIFIED (2026-08-02): author is re-assignable after publish — PATCH /blog/v3/draft-posts/{id} { draftPost: { memberId } } then republish updates the published post's author (post id == draft id; republish fires non-suppressed events — do author-upgrade passes inside the notification-mute window). Visible custom cover media requires both heroImage.id and media: { displayed:true, custom:true, wixMedia:{ image:{ id }}}. heroImage.id alone leaves the cover hidden.
Blog posts (bulk)POST /blog/v3/bulk/draft-posts/createUNVERIFIED bootstrap (public docs + wix/skills wix-manage recipe, 2026-07-21). Max 20 posts/call; bulkCreateDraftPosts chunks larger inputs. Prefer over per-post creates for N ≥ 2 (single create runs ~25–30s/call per the recipe). Publish is still per-post — a bulk publish flag is unverified. Surface in the execution plan until the live contract call promotes it.
CMS itemPOST /wix-data/v2/itemsVERIFIED. { dataCollectionId, dataItem: { data } }. Requires Wix Data enabled (else WDE0110).
MembersGET/POST /members/v1/membersVERIFIED. dedup by loginEmail (gated PII; use a fallback member when absent). VERIFIED (2026-08-02, single-site observation): the target-site member list can already contain auto-created user-members for the owner/contributing Wix users (status: APPROVED; resolve by loginEmail, never by deriving from the account GUID — the observed id equality is undocumented) — never dedupe or count these against source-site members; DELETE /members/v1/members/{id} works for cleaning up importer-created members. Throughput: no bulk create; documented ≥1s spacing (10k ≈ 3h serial floor — plan + resume via crosswalk). Create sends no email and does not fire the signup automations trigger (source-confirmed) — silent by default. Activation policy (decided 2026-08-03): passwords are never imported, and passwordless members complete the standard forgot-password flow (confirmed). Delivery = post-import label-wave automation: owner creates one dashboard automation (trigger label added, e.g. migrated-2026 → owner-branded email: "Log in → Forgot password"); importer applies the label via API in batches for rate control/re-targeting; enable only after the import window (AUTO-02 pause). Never mass-send send-set-password-email (3h single-use link), and never fetch/store per-member reset links — they are credential-equivalent secrets and the no-link flow needs none.
Stores product (BULK — the scale path)POST /stores/v3/bulk/products-with-inventory/createUNVERIFIED bootstrap. Use this, not per-product creates, for any catalog above a handful — 1000 products is 11 calls instead of 1000. Creates up to 100 products with inline options, inline brand/ribbon/infoSections, all variants AND per-variant inventory items in one request. Five caps apply simultaneously and exceeding ANY ONE rejects the whole request: products ≤100, variantsInfo.variants ≤1000 total, options ≤100 total, modifiers ≤100 total, infoSections ≤100 total. With 2 options per product the options cap binds at 50 products, not 100 — so batch with lib/ndjson.js → readBatchesByLimits using the exported BULK_PRODUCT_LIMITS + storesProductBulkCost, never on record count alone. TRAP: bulk is NOT atomic — a 200 can carry per-item failures in results[].itemMetadata.success; never infer success from the HTTP status. TRAP: correlate results by itemMetadata.originalIndex, not response position. TRAP: bulkActionMetadata.undetailedFailures counts failures whose detail the server dropped; ignoring it silently loses records. returnEntity:false (default) still returns itemMetadata.id, which is all a crosswalk needs — pass true only for a contract probe that must inspect the created entity. bulkCreateStoresProductsWithInventory handles normalization, correlation and the unaccounted-item check, returning { results, succeeded, failed, undetailedFailures, unaccounted }. Normalization is purely local — HTML descriptions travel as plainDescription for Wix to convert server-side — so a batch is one HTTP call. It used to convert one description per product first, which made a 100-product batch 101 calls and reliably tripped the Ricos endpoint's 403 throttle.
Stores productPOST /stores/v3/products, POST /stores/v3/products/query, PATCH /stores/v3/products/{id}, GET /stores/v3/products/{id}, GET /stores/v3/products/slug/{slug}VERIFIED (2026-07-05; media patch verified in migration-20260715-01). buildCreateStoresProductRequest runs normalizeStoresProductV3, which bakes in the create traps: PHYSICAL requires physicalProperties:{}; simple/V1-ish top-level price, sku, and physical properties are moved into a single V3 variant; option/variant choice names clamped to 50 (identical truncation both places); variant optionChoiceNames.renderType defaulted to TEXT_CHOICES; compareAtPrice dropped unless strictly > actualPrice; variant price must be a money object ({ actualPrice: { amount: "14.95" } }) — a bare string/number 400s "Expected an object" (verified 2026-07-19), so the normalizer coerces scalar prices. Descriptions: a string description is HTML and is moved to plainDescription by normalizeStoresProductV3; Wix converts that to rich content server-side, so the product path never calls the Ricos endpoint (description proper is a Ricos document object — HTML there is a type error). TRAP: plainDescription is silently ignored when description is also set — a 200 with an empty description — so the normalizer throws when both are present. TRAP: hard cap of 16,000 characters (the old Ricos path chunked at 28k and merged, so it was effectively unbounded); over-long bodies throw rather than truncate, and need an info section or an explicit mapping-gaps.json entry. For product media, prefer media.itemsInfo.items[] with external url values when the source URLs are publicly reachable: the Stores product API ingests them in the background, avoiding the slower, heavily-throttled Media Manager pre-import path. Use pre-imported Wix media ids only when the target flow requires them. Upsert lookups: getStoresProduct(wix, id) and getStoresProductBySlug(wix, slug) return the product or throw 404 — callers should catch and treat as null for "not found". Catalog sweeps: queryStoresProducts returns one page unwrapped to the array with the cursor discarded, so a crosswalk-recovery or name-match safety net must use queryAllStoresProducts(wix), which follows the cursor and throws rather than returning a partial index. Slugs: sanitizing is owned by lib/wix-build.js (toWixSlug, applied automatically via the coerce: 'slug' rule on product.slug), not by this module and deliberately not by normalizeStoresProductV3 — the writer passes the caller's slug through unchanged so URL preservation can record the original next to the derived plannedTargetSlug. It matters because Wix rejects anything outside [a-z0-9-] and slug validation precedes application, so one bad slug (Shopify mints ph-5_5 from a "pH 5.5" title) 400s the entire bulk batch rather than just that product. General patch: patchStoresProduct(wix, { productId, revision, ...fields }) applies normalizeStoresProductV3, so a string description moves to plainDescription here too; revision from the existing product is required. UNVERIFIED for get-by-id, get-by-slug, and general-field patch (endpoint VERIFIED; arbitrary-field patching and slug lookup not yet live-tested). Variable products / variant matrices: Wix Stores V3 requires server-assigned optionChoiceId GUIDs before a variant matrix can be built — those IDs do not exist until after the initial createStoresProduct call returns. A single-pass import therefore cannot create a full variant matrix in one call. The two-pass approach: (1) create the product with options declared (but no variants), (2) create each option choice via POST /stores/v3/products/{id}/options/{optionId}/choices to obtain server-assigned choice IDs, (3) create variants via POST /stores/v3/products/{id}/variants. When the two-pass flow is out of scope (e.g. public-data single-pass run), import as a single-variant product at the base price, record the fidelity loss in mapping-gaps.json, surface it in the execution-plan report, and ensure the generated product detail page renders productOptions when non-empty so the storefront is ready once options are added.
Stores categoryPOST /categories/v1/categories, POST /categories/v1/categories/queryVERIFIED (2026-07-05) for create. Body { category, treeReference } — treeReference is top-level (sibling of category, {appNamespace:"@wix/stores"}); nesting it 400s "treeReference must not be empty". Empty optional strings such as description: "" are omitted. Query: same top-level treeReference trap applies. queryStoresCategories(wix) returns one page (100 max) unwrapped to the array — it does not return all categories, and the unwrap discards the cursor so it cannot be paged. Any dedupe/upsert index must use queryAllStoresCategories(wix), which follows pagingMetadata.cursors.next and throws rather than returning a partial index. Observed 2026-07-29: a site with 119 categories read back as 100 through the single-page call, which would have duplicated the missing 19. UNVERIFIED for query (not yet live-tested).
Wix Tag (global)POST /tags/v1/tagsUNVERIFIED bootstrap. Body { tag: { name, fqdn } }. FQDN for Stores V3 products: "wix.stores.catalog.v3.product". Max 100 tags per FQDN. Create tags before products; crosswalk tag IDs into product tags.publicTags.tagIds[] at create time. Tags are a native Wix entity — do not route product tags to CMS.
Stores inventory itemPOST /stores/v3/inventory-itemsUNVERIFIED bootstrap. { inventoryItem: { variantId, productId, inStock: true } } marks a variant as in-stock at the default location (omit locationId). Inventory items are not auto-created on product create — call this for each variant after createStoresProduct. For quantity-tracked stock use { quantity, trackQuantity: true } instead of inStock. setProductVariantsInStock(wix, { productId, variantIds }) is a convenience wrapper that calls createInventoryItem for each variant. Requires permission scope SCOPE.STORES.INVENTORY_ITEM_WRITE.
Stores category membershipPOST /categories/v1/bulk/categories/add-itemVERIFIED (2026-07-05). { item:{ catalogItemId, appId }, categoryIds[], treeReference }; appId = Wix Stores 215238eb-…, catalogItemId = Wix product id.
ContactsPOST /contacts/v5/contacts, POST /contacts/v5/bulk/contacts/upsert, POST /contacts/v5/contacts/query, GET /contacts/v5/contacts/{id}, PATCH /contacts/v5/contacts/{id}GA (docs verified 2026-08-04 — was Developer Preview when selected on 2026-07-26). Do not fall back to V4 unless a migration explicitly chooses a legacy compatibility path. The GA contact shape is FLAT — no info wrapper, no emails.items/phones.items list wrappers: one main email/phone (contact matching + subscription status live on these) plus additionalEmails/additionalPhones arrays; addresses[] keeps postal fields nested under address; company is { name, jobTitle }. Create and update both take { contact, allowDuplicates }; update requires the current revision and has no fieldMask. Phone tags: OTHER/MAIN/HOME/MOBILE/WORK/FAX (no UNTAGGED). buildCreateContactRequest/buildUpdateContactRequest accept the flat GA contact (legacy info payloads convert strictly — non-mechanical keys like extendedFields/labelKeys throw). Live create/query/update verification is still pending a token with Contacts permissions (2026-07-26 probe got 403) — keep V5 writers surfaced as UNVERIFIED in execution reports until a live contract test promotes them. Custom fields (GA): the V5 contact carries extendedFields.namespaces.<ns>; per the V5 contact-object docs, definitions go through the Data Extension Schema API with FQDN wix.contacts.*.contact (user-defined values under _user_fields). The V4 Contacts Extended Fields API (POST /contacts/v4/extended-fields, values under info.extendedFields) pairs with the V4 surface only — do not mix. CAVEAT: the Data Extension Schema intro's supported-objects table does not list contacts yet (docs inconsistency at GA cutover); verify the DES path live during setup before relying on it. Labels → tags: V5 exposes tags.privateTags.tagIds[] managed via the Tags API (same FQDN); V4 label APIs and the labels_added automation trigger are a V4-surface concept — resolve the tag/label story during setup before planning post-import label waves through V5 writers.
CouponsPOST /stores/v2/coupons, POST /stores/v2/coupons/queryUNVERIFIED bootstrap. Prefer native Wix coupons because Wix has a native coupon entity; do not special-case coupons into CMS merely for caution or because scoping must be mapped. Fallback is only for source semantics with no native representation.
eCom orderPOST /ecom/v1/orders/import (historical orders), POST /ecom/v1/orders/query, POST /ecom/v1/orders/{orderId}/activities/addVERIFIED LIVE (2026-08-12 reference-store run; re-verified 2026-08-16 with applied discounts, line-item description lines and merchant notes). Import Order is the only import-safe path — see ecom/order.json. POST /ecom/v1/orders (createOrder) remains BLOCKED for migration: it decrements inventory, emails the buyer and auto-creates contacts. TRAP: order.number must be numeric — a prefixed source number fails the whole call with a bare 400 {"message":"Not a numeric value"} and no field path.
Site notifications mutePOST /notification-preferences/v1/site-mute/mute, POST /notification-preferences/v1/site-mute/unmute, GET /notification-preferences/v1/site-muteVERIFIED (2026-08-04, full cycle live on a test target: mute → state read → idempotent re-mute → unmute → state restored, all 200). Spec 0012. Mutes all notifications of the site in context — all recipients, all channels; sendability denied regardless of recipient-level preferences. All three calls return { siteMuteState: { muted, reason?, mutedBy: { wixUserId } } }; executors unwrap to siteMuteState. Mute body { reason?: string } (≤500, clamped by the builder) — always pass a project-identifying reason (RePlatform migration — <project>) so the mute is auditable. TRAP: re-mute overwrites reason (last caller wins) — the import preflight's idempotent re-call must pass the same reason as setup. AUTH TRAP: user tokens only — the CLI-minted OauthNG site token (WIX_AUTH_TOKEN from config/wix.env) works; an account API key gets a uniform empty-body 403 on all three endpoints. Hard invariant: when mute is in effect (always for WIX_SITE_STRATEGY=new; explicit opt-in for existing sites), a failed mute halts the run before any import write — no degraded mode. unmuteSiteNotifications is never called by the flow itself — explicit owner request only; after an on-request unmute, confirm muted: false via getSiteMuteState.
Direct native RESTany Wix REST path derived by codegenUNVERIFIED generated path for native Wix entities missing a dedicated adapter writer. Must log, call notifyMissingWriter, and be shown in the execution plan.

Safe-mode contact replacement

lib/wix-writers.js exports the shared safe-mode runtime:

createSafeModeConfig(env)
mockEmailForEntity(entityType, entityId)
sanitizeContactFieldsForSafeMode(value, options)
sanitizeWixRequestBody(body, options)

Generated imports must pass safeModeOptions to writer builders/executors when SAFE_MODE is enabled. Request builders sanitize a copied request body before returning it and throw SafeModeBlockedError before any send when suspicious non-replaced email values remain.

Safe-mode replacement paths use deterministic request-body paths with object fields, array wildcards, and Wix wrapper arrays, for example:

contact.email.email
contact.additionalEmails[].email
contact.phone.phone
order.billingInfo.email
dataItem.data.submissions[].email

Replacement only touches primitive leaf values — a generic path that lands on an object (such as the GA Contacts V5 email object) is skipped rather than clobbered, and any raw email left inside a skipped object still trips the suspicious-value block.

Target domain entity files may define safeModeContactFields[] with { kind, targetPath, source, notes } entries. Mapper/codegen must merge those target hints with source-side contact evidence and user mappings, then pass resolved request-body paths to the shared writers.

Stores subscription validation

lib/wix-writers.js exports the Stores subscription contract and deterministic helpers:

  • STORES_SUBSCRIPTION_CONTRACT

  • normalizeStoresProductSubscriptions

  • validateStoresProductSubscriptionDetails

Generated import code should call the normalizer from product transforms and the validator during dry-run and immediately before live create. Validation failures are record-level preflight failures/deferred outcomes; do not send known-invalid subscription payloads to Wix to discover field errors live.

Catalog V3 subscriptions are a native Stores target, not an automatic CMS fallback or semantic loss. Product create with subscriptionDetails.allowOneTimePurchases and subscriptions[] entries containing title, description, frequency, interval, and autoRenewal was verified live on 2026-07-26 in the nopong migration; Wix returned server-assigned subscription option ids. Mapping/codegen should emit native recurring product creates when the source cadence is known. General subscription patching remains unverified.

Stores live verification helpers

Use the shared Stores verification CLI for live target checks that would otherwise become migration-local snippets:

node skills/wix-replatform/resources/rp-target-wix/scripts/verify-stores.js stores subscription-create \
  --artifact migrations/<project>/setup/stores-subscription-verification.json \
  --proposal-artifact migrations/<project>/setup/contract-ledger-proposal.json
node skills/wix-replatform/resources/rp-target-wix/scripts/verify-stores.js stores product-count \
  --artifact migrations/<project>/execution/stores-product-count-verification.json
node skills/wix-replatform/resources/rp-target-wix/scripts/verify-stores.js stores product-by-source-marker \
  --marker-path customFields.sourceId --marker-value <source-id> \
  --artifact migrations/<project>/execution/stores-product-marker-verification.json
node skills/wix-replatform/resources/rp-target-wix/scripts/verify-stores.js stores delete-probe \
  --product-id <probe-product-id> \
  --artifact migrations/<project>/setup/stores-probe-cleanup.json

The CLI reads WIX_AUTH_TOKEN and WIX_SITE_ID from the environment or config/wix.env under the current project root, creates the shared Wix client, and sends requests through wix.send(...). It writes machine-readable artifacts with the target site id, endpoint, method, verified nested paths, discovered constraints, probe id, cleanup status, warnings, recovery instructions, and timestamp. Failed probe cleanup is not hidden: the artifact must remain with an explicit warning and a delete-probe recovery command.

Routed URL preservation behavior

URL preservation is a mapping and execution-state concern. This adapter owns only the Wix-side facts that generated code may rely on when deciding whether a final target URL is known.

Current import-only phase rules:

  • Do not configure Wix redirects or site routing.

  • Do not guess a destination relative URL from a slug when Wix route behavior has not been verified for that entity and delivery mode.

  • When the destination base path or final URL is unknown, write URL ledger rows with urlStatus: "pending_target_route" or target_url_missing and record unresolved rows for the future website-builder phase.

  • When a Wix create/update response or a safe declared lookup returns a final slug or relative path, generated code may record it as actualTargetSlug or actualTargetRelativeUrl and write a redirect plan if it differs from the source URL.

Known routed entity status:

EntityURL behavior contract
Blog postsCreate/publish is verified for content writes. Final public route exposure after publish is not verified here; generated code must treat the target route as pending_target_route unless a safe lookup in the generated write spec proves the final relative URL.
Blog categoriesCategory create is verified. Final public category route exposure is not verified here; default to pending_target_route.
Stores productsProduct create and slug-bearing product operations are verified, but arbitrary route/base-path configuration is not part of this phase. Generated code may record actual target slugs only when returned or safely looked up; target relative URLs remain pending_target_route unless the route pattern is explicitly verified in the project.
Stores categories/collectionsCategory create is verified. Final collection/category route exposure is not verified here; default to pending_target_route.
CMS items with dynamic pagesCMS item writes are verified. Dynamic page route patterns are site-builder configuration, not native item import output; default to pending_target_route unless website-builder artifacts define the route.

Shared execution runtime contract

In addition to endpoint primitives, this adapter should define the reusable runtime API that generated migrations call.

Conceptual contracts:

executeWriteSpec({
  spec,
  items,
  client,
  dryRun,
  runContext,
}): Promise<WriteExecutionReport>

executeSetupPlan({
  plan,
  client,
  dryRun,
  runContext,
}): Promise<SetupExecutionReport>

The exact filenames are implementation details, but the shared runtime should be the single place that owns generic Wix execution mechanics.

WriteSpec contract

Generated migrations should pass a declarative WriteSpec into the shared runtime.

Each spec should define, as applicable:

  • entity

  • mode: create | update | upsert | bulk_create | bulk_upsert

  • create

  • update

  • lookup

  • bulk

  • batchSize

  • concurrency

  • retryPolicy

  • throttlePolicy

  • auditKeys

  • crosswalkAuthority: "local"

  • cmsMirror

  • crosswalkStrategy

  • reconciliationStrategy

  • dependencyRefs

  • verificationLevel: verified | unverified

This resource should document how each field is interpreted by the runtime.

WriteExecutionReport contract

The shared runtime should return a compact, token-aware report suitable for the agent.

It should include:

  • run ID

  • entity

  • counts: input, attempted, created, updated, skipped, failed, retried, throttled

  • grouped error buckets

  • references to fuller on-disk logs

The runtime should prefer grouped summaries over raw per-record detail.

These per-entity or per-phase reports are intermediate runtime outputs. They are inputs to the final completion artifact, not replacements for it.

Completion artifact contract

The shared runtime should support deterministic emission of a final machine-readable completion artifact for the whole run.

Preferred output:

  • execution/completion-report.json

This artifact should be the authoritative source for:

  • final run status

  • final imported/updated/skipped/failed counts

  • separate dry-run counts when dryRun: true: requests built, Wix calls skipped, would-create/update/delete, would require live lookup, and local validation failures

  • grouped skipped/deferred outcomes

  • grouped failure outcomes

  • dashboard/editor/preview destinations

  • artifact references for audit/error/execution logs

The shared runtime should also support deterministic rendering inputs for:

  • execution/review/completion-summary.md

The rendered summary should be derived from completion-report.json, not independently invented by the agent.

Audit log contract

The shared runtime should emit append-only machine-readable audit events.

Preferred format: NDJSON.

Each event should capture, at minimum:

  • timestamp

  • run ID

  • phase: setup | import

  • entity

  • operation

  • source ID when applicable

  • target ID when known

  • endpoint or primitive used

  • attempt number

  • result status

  • HTTP status or platform error code when applicable

  • latency

The run ID is required because audit files are append-only across dry-runs, retries, and recovery passes. Completion reports should be generated from runtime counters for the current run and may use audit aggregation only when filtered by run ID. The shared lib/audit-summary.js helper enforces this filter for fallback/verification summaries.

Dry-run runtime contract

The shared Wix runtime exports createDryRunConfig, normalizeDryRunValue, createWixClient, and createWixSetupExecutor.

Dry-run is enabled by DRY_RUN=true or by the generated entrypoint's --dry-run flag. It is disabled by default. true, 1, yes, and on enable it; false, 0, no, and off disable it.

When createWixClient({ dryRun: true }) is used:

  • authToken and siteId may be blank unless the generated project requires the site ID for a local artifact namespace;

  • send() must not call fetch, SDK, MCP, or CLI transports;

  • send() must capture the would-send request under state/attempts/wix-request-captures.ndjson when projectDir or requestCapturePath is supplied;

  • captured headers must omit Authorization and redact secret-like header/body keys;

  • captured bodies must be after SAFE_MODE contact-value sanitization;

  • response payloads must preserve the live shape expected by writer helpers, for example { contact }, { product }, { dataItem }, { file }, or an expected collection field such as { contacts: [] } for skipped queries.

Dry-run placeholder target IDs are not live authority. If downstream local execution needs them, write them only to state/crosswalk/dry-run-crosswalk.ndjson or keep them in memory. Never append simulated target IDs to state/crosswalk/crosswalk.ndjson and never upload them to a CMS crosswalk mirror.

When createWixSetupExecutor({ dryRun: true }) is used, each setup step must first be reduced to a structured intent, then captured as planned_dry_run without invoking MCP, CLI, SDK, or REST transports that access or mutate Wix account/site state.

Artifact authority at run completion

The shared runtime contract should preserve explicit artifact authority:

  1. execution-log.md for chronology and operator/debug context only

  2. completion-report.json for final outcome

  3. completion-summary.md for deterministic user-facing rendering

The runtime should not force downstream consumers to reconstruct final outcome by reading raw audit logs or chronological execution logs.

Retry and throttling policy

This adapter should define one shared retry/throttling contract rather than letting each migration invent its own.

It should classify, at minimum:

  • retryable transport/network failures

  • retryable 429 responses

  • retryable 5xx responses

  • non-retryable 4xx validation failures unless explicitly listed otherwise

When the server provides backoff hints such as Retry-After, the shared runtime should honor them.

Bulk and fallback policy

The shared runtime should know:

  • when a native bulk primitive exists and is preferred

  • when to fall back from bulk to per-record writes

  • when an upsert requires lookup + create/update orchestration

  • when an unverified native path must be surfaced before execution rather than used silently

Media policy by target

Do not treat all media the same. The target domain decides whether media must exist in Wix first or can be ingested through the entity API itself.

  • Wix Stores products: prefer external URLs on media.itemsInfo.items[] and let the product API ingest them in the background. This is the default path when the URLs are publicly reachable.

  • Wix Blog cover images and other surfaces that require a Wix media id at create/update time: import media first, then pass the Wix media id into the entity payload.

  • Generic Media Manager import is a fallback/shared primitive, not the default for every entity carrying media.

Media import source URL reachability

The media primitive imports by URL: Wix servers fetch the provided sourceUrl. Public HTTPS URLs are expected; localhost, 127.0.0.1, Docker-only hosts, and other private-only URLs are not reachable by Wix during a live import. This is optional source preparation and, as far as we know today, affects media import only.

If the source system is local, the migration should either:

  • expose the source through a public HTTPS tunnel, then pass/rewire media URLs to that public base URL; or

  • skip/defer media import and clearly state which media-dependent references will be missing until media is imported.

Ngrok quick setup for macOS:

brew install ngrok
ngrok config add-authtoken "<YOUR_AUTHTOKEN>"
ngrok http 8090
export WP_BASE_URL=https://<id>.ngrok-free.app

Validate by real call — do not trust doc examples

Codegen-time MCP doc checks confirm an endpoint exists; they do not confirm the request shape works. The live wporg-news import proved doc examples can be wrong (lowercase Ricos plugins → 400) or incomplete (featured image field, tag body). The rule for this adapter:

  • Treat a shape as verified only after a real call succeeds — encode the working shape here with a // VERIFIED: (or // VERIFIED-TRAP:) note and a date.

  • A // UNVERIFIED: primitive is allowed as a bootstrap point for generated code, but it is not a silent live-write permission. The execution plan must call it out, and setup verification must either promote it with a sandbox/live validation or route to fallback.

  • Keep tests/target-wix/contract-test.js current: it issues one real call per primitive against a sandbox site and is the single place schema drift surfaces. Tests live in the repo's tests/ tree rather than in this bundle, so the published product carries no test harnesses. Run from the repo root:

    bash tests/run-all.sh target-wix
    WIX_AUTH_TOKEN=... WIX_SITE_ID=... bash tests/run-all.sh target-wix

    Without credentials the shape checks still run and the live calls are skipped. tests/target-wix/ndjson-contract-test.js covers lib/ndjson.js and never needs credentials.

    For live verification runs, pass --progress-log <path> and poll it per CONVENTIONS.md#progress-log-polling.

    Run on a cadence and after any Wix API change. A failing contract test — not a stranger's broken import — is how we learn the surface moved.

Stores catalog is Catalog V3 only — Catalog V1 is not supported

A migration only ever writes to a V3_CATALOG site. Catalog V1 is not a supported destination: there is no V1 write primitive here, no V1 fallback, and none should be added (a former V1 fallback was removed — it only masked real V3 errors as spurious 428s). A V1 site is a blocker the run halts on, not a variant the adapter, the mapper, or codegen accommodates. The V3 create traps are handled in lib/wix-writers.js (normalizeStoresProductV3 + the top-level treeReference builder), so callers never re-hit them.

On a site this run created, a Stores install is guaranteed Catalog V3. This section used to require verifying that live, after a 2026-07-30 incident where a site scaffolded from the blank headless template, with Stores installed afterwards through the App Installation API, came up V1_CATALOG — Catalog version is fixed at provisioning, so every V3 write on that site failed and the site had to be abandoned. The Wix platform has since changed: Catalog V3 is now guaranteed at provisioning regardless of scaffold template, so that failure mode can no longer occur for a newly-created site, and neither the --site-template commerce requirement nor the pre-write version gate apply anymore — see 0079-catalog-v3-guaranteed-retire-v1-gate.md.

This does not extend to an existing site this run did not create — rp-execute-setup ("A V1_CATALOG verdict is terminal here") still treats that case as a live risk and halts on it, since a pre-existing site's catalog version predates this guarantee.

What stays in codegen (not here)

Per-project field maps and ordering (which source field → which data key, the media/author/taxonomy ref maps, upsert-by-key) live in the generated transforms/write specs. This adapter holds the invariant Wix request shapes, transport, and shared execution mechanics. Collection names and schemas (PodcastEpisodes, …) are project-specific and come from the mapping plan.

Provisioning pointers (see rp-execute-setup)

  • Apps (Blog, Members) install via the App Installation API; ground appDefId from the official "Apps Created by Wix" table.

  • Wix Data enablement (WDE0110): install the Wix Data app appDefId e593b0bd-b783-45b8-97c2-873d42aacaf4 via the App Installation API; afterward POST /wix-data/v2/collections creates NATIVE collections with no WDE0110 (verified live). Fallback: a custom app with a data-collections extension (declares collections at install time, but can't express REFERENCE fields).

Scope & coverage

Wix has many apps/entities (Stores, Bookings, Events, Restaurants, Pricing Plans, CRM, …). This adapter does not pre-build all of them. Coverage is demand-driven and grows through reviewed releases. A migration may still target a native Wix entity before a dedicated primitive exists; in that case codegen emits a native REST path using sendDirectRest, logs the missing primitive, and calls notifyMissingWriter so the RePlatform team can add the writer later.

Native target ladder when no dedicated writer exists:

  1. Use the dedicated rp-target-wix primitive when one exists.

  2. If Wix has a native entity but no dedicated primitive, generate a native REST call from Wix MCP/docs-schema, mark it UNVERIFIED, log it, call notifyMissingWriter, and surface it in the execution plan before any write. This is not a silent live write.

  3. Use CMS only when there is no suitable native Wix entity, or when the native entity is explicitly rejected for fidelity/side-effect reasons. CMS is not a fallback for a missing adapter writer.

  4. Halt if neither a native path nor an acceptable CMS/custom target exists.

The invariant: anything not backed by a verified primitive is surfaced to the user for consent before execution — never written silently.

Setup runtime expectations

This adapter should also define the shared setup-side runtime used by setup execution.

It should cover reusable mechanics for:

  • app installation and verification

  • Wix Data enablement verification

  • CMS collection and field provisioning when supported

  • setup step ordering/checkpointing

  • setup audit logging

  • setup execution reporting

rp-execute-setup should consume setup artifacts through this runtime rather than re-implementing setup mechanics in skill-local prose or one-off scripts.

Contract-test expectations

Contract tests should validate not only request builders, but also the most important shared runtime invariants.

Examples:

  • verified request shapes still serialize correctly

  • retry policy classifies common Wix failures correctly

  • throttle/backoff handling honors server hints

  • compact reports preserve stable top-level fields

  • completion reports preserve stable top-level fields

  • audit events preserve the agreed machine-readable shape

Files

lib/gift-card-build.js

'use strict';

const { isBlank } = require('./value-utils.js');

// rp-target-wix — the DETERMINISTIC "PW WooCommerce Gift Cards" issuance line item -> Wix
// gift-cards/v1 Create Gift Card payload builder. Companion to discount-rule-build.js / tax-build.js;
// implements domains/gift-cards/entities/gift-card.json's mappingGuidance/pitfalls as code.
//
// Input is one WooCommerce order (as returned by GET /wc/v3/orders/{id}) plus the specific
// line_item on it that carries pw_gift_card_number in its meta_data (see
// plugins/pw-woocommerce-gift-cards.json's gift-card entity for how that meta gets there and why
// it only exists once the order has reached processing/completed).
//
// LIVE-VERIFIED 2026-08-17 against poratus (source: WooCommerce REST API + a headless storefront
// checkout; target: msid fd0ad9fb-d439-406f-8a00-b6c6ad0d95ab). 3 real orders were completed via
// the WooCommerce REST API (not the storefront) with pw_gift_card_amount/to/from/message set on
// the line item exactly as the plugin's own checkout hook would set them; each produced a real
// pw_gift_card_number on completion. A 4th order redeemed one of those cards through a headless
// storefront checkout. See tests/fixtures/wordpress/pw-gift-card-orders.json for the (trimmed)
// real payloads this was built against, and tests/target-wix/gift-card-build-test.js for the
// pinned contract. The Wix side was exercised too: this builder's output was POSTed to a real
// POST /gift-cards/v1/gift-cards on that site (after installing the Wix Gift Cards app,
// appDefId d80111c5-a0f4-47a8-b63a-65b54d774a27 — see domains/gift-cards/domain.json's
// gift-card-app-required pitfall) and read back successfully.
//
// CORRECTED 2026-08-18 (PR review): `pw_gift_card_number` is a REPEATED meta key, not a single
// value — for line-item quantity N, the plugin's own add_gift_cards_to_order() calls
// wc_add_order_item_meta(..., $unique = false) once per card, so the same key appears N times with
// N different codes. The main entry point below (buildGiftCardsFromOrderLineItem) always returns
// an ARRAY, one entry per issued card, never just the first. See spec 0042 Decision 3 for the full
// cardinality/recipient-correlation analysis this implements.
//
// What this module deliberately does NOT do: resolve a redeemed/partial balance on its own.
// Redemption is a custom order-item type ('pw_gift_card') that the stock WooCommerce REST Orders
// controller never serializes (verified live — see plugins/pw-woocommerce-gift-cards.json's
// gift-card-activity entity, redemption-invisible-even-in-order-rest-data pitfall) — there is no
// source signal this builder could read to know a card was later spent. Every card is built at its
// original face value (spec 0042 Decision 5, Policy A) unless the caller supplies a validated
// `remainingBalance` from some out-of-band reconciliation (Policy B — spec 0040's bridge plugin, or
// a merchant-supplied list). The two policies are mutually exclusive per card; this module does not
// enforce that across calls, only validates a single call's input (see validateRemainingBalance).

const ORDER_STATUSES_WITH_ISSUED_CARDS = new Set(['processing', 'completed']);
const CODE_MIN_LENGTH = 8;
const CODE_MAX_LENGTH = 20;
// VERIFIED LIVE 2026-08-17: Wix rejects any non-alphanumeric character in giftCard.code outright
// (428 INVALID_CODE), independent of length — see gift-card.json's code-alphanumeric-only pitfall.
const CODE_ALLOWED_CHARS = /^[A-Za-z0-9]+$/;
// Wix money amounts are decimal strings with at most 2 decimal places (gift-card.json
// mappingGuidance) — enforced on any caller-supplied remainingBalance override.
const MAX_MONEY_DECIMALS = 2;
// WooCommerce order.currency is always a 3-letter ISO 4217 code; Wix giftCard.currency rejects
// anything else with a 400. Checked here so a missing/malformed order.currency surfaces as a
// named gap instead of a payload that only fails later against the live endpoint.
const CURRENCY_CODE_PATTERN = /^[A-Z]{3}$/;
// The Wix Gift Cards app's own appDefId — VERIFIED LIVE 2026-08-17 via Get Gift Card, which
// returns the CREATING app's id for a card built by this module (source: 'MANUAL'), not an
// external provider's (see domains/gift-cards/domain.json's gift-card-app-required pitfall).
// Create Gift Card itself has no explicit appId field (this constant isn't used above) — it's
// exported here because gift-card-redemption-build.js's Redeem Gift Card call needs it, and this
// is the one place that constant is already live-verified.
const WIX_GIFT_CARDS_APP_ID = 'd80111c5-a0f4-47a8-b63a-65b54d774a27';

// Every value stored under `key`, in meta_data array order — WooCommerce/WordPress's own meta
// retrieval is ORDER BY meta_id ASC, and the plugin appends one pw_gift_card_number row per card
// in creation order, so this order is the plugin's own creation order, not an arbitrary one.
function metaValues(metaData, key) {
  return (metaData || []).filter((m) => m.key === key).map((m) => m.value);
}

function metaValue(metaData, key) {
  return metaValues(metaData, key)[0];
}

// Mirrors add_gift_cards_to_order()'s own fallback in pw-gift-cards-purchasing.php: when
// pw_gift_card_amount is missing/non-numeric, the plugin itself falls back to
// subtotal / quantity. A reader has to apply the same fallback or it will under-read older orders.
// This amount is per-card (the plugin sets it from the unit price), shared by every card issued
// from the same line item — there is no per-card amount variant to resolve separately.
function resolveFaceValue(lineItem, metaData) {
  const metaAmount = metaValue(metaData, 'pw_gift_card_amount');
  if (!isBlank(metaAmount) && Number.isFinite(Number(metaAmount))) {
    const numeric = Number(metaAmount);
    if (numeric < 0) {
      return {
        amount: null,
        source: null,
        gap: {
          code: 'invalid-gift-card-amount',
          summary: `pw_gift_card_amount (${numeric}) on line item ${lineItem.id} is negative — a gift card face value cannot be negative.`,
        },
      };
    }
    // A zero meta value is treated the same as missing/blank, not a real $0.00 face value: PHP's
    // own empty() (which the plugin's meta checks are built on) is true for "0"/0, so
    // pw_gift_card_amount = "0" falls through to the SAME subtotal/quantity fallback as a
    // genuinely missing value would, rather than minting a $0.00 card for a real purchase.
    if (numeric !== 0) {
      return { amount: numeric, source: 'pw_gift_card_amount meta' };
    }
  }
  const subtotal = Number(lineItem.subtotal);
  const quantity = Number(lineItem.quantity);
  if (Number.isFinite(subtotal) && Number.isFinite(quantity) && quantity > 0) {
    return { amount: Math.round((subtotal / quantity) * 100) / 100, source: 'subtotal / quantity fallback (pw_gift_card_amount was missing or zero)' };
  }
  return { amount: null, source: null };
}

// spec 0042 Decision 3's recipient-correlation rule. pw_gift_card_to is ONE string that may list
// several whitespace/comma-separated recipients; the plugin sets cart quantity = recipient count
// ONLY when that count is greater than 1, so:
//   - recipients.length === cardCount: zip 1:1 by position (both are creation-order lists).
//   - recipients.length is 0 or 1: that single recipient (or none) applies to every card.
//   - anything else is not a shape the plugin's own code produces under normal use — a gap, not a
//     guessed pairing.
function resolveRecipients(metaData, cardCount) {
  const raw = metaValue(metaData, 'pw_gift_card_to');
  if (isBlank(raw)) return { recipients: new Array(cardCount).fill(undefined) };
  const split = String(raw).split(/[\s,]+/).filter(Boolean);
  if (split.length === cardCount) return { recipients: split };
  if (split.length <= 1) return { recipients: new Array(cardCount).fill(split[0]) };
  return {
    recipients: null,
    gap: {
      code: 'recipient-card-count-mismatch',
      summary: `pw_gift_card_to lists ${split.length} recipient(s) but ${cardCount} card(s) were issued on this line item — cannot safely pair recipients to cards (spec 0042 Decision 3). This is not a shape the plugin's own code produces under normal use; treat it as a data-integrity gap, not something to guess a pairing for.`,
    },
  };
}

// spec 0042 Decision 5's validation for one already-resolved balance override value (Policy B).
// Never throws, never silently coerces an invalid value into a number — returns a named gap
// instead.
function validateRemainingBalance(remainingBalance, faceValue) {
  if (typeof remainingBalance === 'string' && remainingBalance.trim() === '') {
    return { gap: { code: 'invalid-remaining-balance', summary: 'the resolved remainingBalance was an empty/whitespace string.' } };
  }
  const numeric = Number(remainingBalance);
  if (!Number.isFinite(numeric)) {
    return { gap: { code: 'invalid-remaining-balance', summary: `the resolved remainingBalance "${remainingBalance}" is not a finite number (NaN/Infinity/non-numeric text are all rejected) — see spec 0042 Decision 5.` } };
  }
  if (numeric < 0) {
    return { gap: { code: 'invalid-remaining-balance', summary: `the resolved remainingBalance (${numeric}) is negative — a gift card balance cannot be negative.` } };
  }
  const scaled = numeric * 10 ** MAX_MONEY_DECIMALS;
  if (Math.abs(scaled - Math.round(scaled)) > 1e-9) {
    return { gap: { code: 'invalid-remaining-balance', summary: `the resolved remainingBalance (${numeric}) has more than ${MAX_MONEY_DECIMALS} decimal places — Wix money amounts are decimal strings with at most 2 decimal places.` } };
  }
  if (faceValue != null && numeric > faceValue) {
    return {
      gap: {
        code: 'remaining-balance-exceeds-face-value',
        summary: `the resolved remainingBalance (${numeric}) is greater than the card's face value (${faceValue}) — a stored-value card's balance cannot legitimately exceed what it was issued for in this migration's model (spec 0042 Decision 5). This indicates a source data-quality problem needing its own investigation, not a value to pass through.`,
      },
    };
  }
  return { amount: numeric };
}

// spec 0042 Decision 5, per card, fixed 2026-08-18 (PR review): the balance-policy signal is now
// EXPLICIT (`options.balancePolicy`) instead of inferred from whether `remainingBalance` happens
// to be set — a Policy B lookup that came back empty must fail closed as its own gap, never fall
// through to Policy A's face-value path undetected (both used to look identical: an omitted
// value). The override itself is resolved PER SOURCE CARD (`options.remainingBalanceByCard`,
// keyed by the raw `pw_gift_card_number`), not one scalar shared across every card on a
// multi-quantity line — two cards from the same line can have been independently, differently
// spent, and sharing one balance would silently misprice one of them.
// Shared by every per-card lookup map this module accepts (remainingBalanceByCard,
// lifecycleByCard, ...): both a plain object and a Map are accepted, keyed by the raw
// `pw_gift_card_number`. `has` is distinct from `value` so a map that explicitly sets an entry to
// `null`/`undefined` (a lookup that ran and found nothing) is still visible as "present but
// empty," not indistinguishable from "never looked up."
function lookupByCard(map, sourceNumber) {
  if (map instanceof Map) return { has: map.has(sourceNumber), value: map.get(sourceNumber) };
  const has = map != null && Object.prototype.hasOwnProperty.call(map, sourceNumber);
  return { has, value: has ? map[sourceNumber] : undefined };
}

function hasOwn(object, field) {
  return object != null && Object.prototype.hasOwnProperty.call(object, field);
}

// Fixed 2026-08-18 (PR review, third pass): Policy A ("face value, no replay" — spec 0042
// Decision 5) and Policy B ("verified remaining balance at creation") are the only two policies
// gift-card-build.js itself needs to know about — both simply decide whether THIS create call
// uses face value or an override. Policy C ("face value now, then bring it down to the correct
// balance by replaying each real order-linked redemption via gift-card-redemption-build.js") is
// declared here too, in the same enum, purely so a caller can record the decision — but its
// resolveCardBalance() behavior is IDENTICAL to Policy A's (face value at creation; the
// correction happens later, via a separate redeem call, not here). The corresponding safety rule
// lives in gift-card-redemption-build.js: it accepts a redemption ONLY for a card explicitly
// declared Policy C, and rejects A (contradicts "no replay") and B (would double-decrement a
// card already created at its correct balance) outright.
function resolveCardBalance(sourceNumber, faceValue, options) {
  const { balancePolicy, remainingBalanceByCard } = options || {};
  const { has: hasOverrideEntry, value: rawValue } = lookupByCard(remainingBalanceByCard, sourceNumber);

  if (balancePolicy == null || balancePolicy === 'A' || balancePolicy === 'C') {
    if (hasOverrideEntry) {
      return {
        amount: null,
        note: `options.remainingBalanceByCard has an entry for card ${sourceNumber}, but options.balancePolicy is not "B" — it was IGNORED; set balancePolicy: 'B' to actually apply it (spec 0042 Decision 5).`,
      };
    }
    return { amount: null };
  }

  if (balancePolicy !== 'B') {
    return { gap: { code: 'invalid-balance-policy', summary: `options.balancePolicy must be "A", "B", or "C" (spec 0042 Decision 5) — got ${JSON.stringify(balancePolicy)}.` } };
  }

  if (!hasOverrideEntry) {
    return {
      gap: {
        code: 'unavailable-remaining-balance',
        summary: `options.balancePolicy is "B" but options.remainingBalanceByCard has no entry for card ${sourceNumber} (spec 0042 Decision 5) — a failed/missing balance lookup must never fall back to face value silently; the caller must explicitly decide to skip this card, supply its verified balance, or halt the run.`,
      },
    };
  }

  if (isBlank(rawValue)) {
    return {
      gap: {
        code: 'unavailable-remaining-balance',
        summary: `options.balancePolicy is "B" but the resolved remainingBalance for card ${sourceNumber} is blank/null (spec 0042 Decision 5) — a failed lookup must be reported as unavailable, never treated as "use face value".`,
      },
    };
  }

  return validateRemainingBalance(rawValue, faceValue);
}

// A Wix date-time field, per the documented Gift Card Object (RFC 3339, e.g.
// "2026-11-11T00:00:00Z") — NOT the bare "YYYY-MM-DD" shape spec 0040's bridge plugin's
// expiration_date column returns. Requires an explicit time-of-day and zone designator so a
// caller can never forward the raw MySQL DATE value unconverted.
const EXPIRATION_DATE_TIME_PATTERN = /^\d{4}-\d{2}-\d{2}T\d{2}:\d{2}:\d{2}(\.\d+)?(Z|[+-]\d{2}:\d{2})$/;
const REQUIRED_VERIFIED_LIFECYCLE_FIELDS = ['active', 'expirationDate', 'expirationDateConversionError'];

// Fixed 2026-08-18 (PR review): the source card's own lifecycle facts (`active`, `expiration_date`
// — only reachable via spec 0040's bridge plugin, never from order/line-item data this module
// otherwise reads) were previously dropped entirely, silently recreating an expired or
// admin-disabled source card as a normal, active, non-expiring Wix card — resurrecting unusable
// customer value.
//
// Fixed 2026-08-18 (PR review, third pass) — two more gaps in this same fix:
//
// 1. **A missing per-card lookup entry was itself indistinguishable from "verified active, no
//    expiration"** — the exact same silent-fallback shape already fixed for Policy B balances.
//    `options.lifecyclePolicy` now makes the caller's intent explicit, mirroring `balancePolicy`.
// 2. **A resolved `expirationDate` was forwarded to the create payload without validating its
//    shape.** Wix's Gift Card Object documents `expirationDate` as an RFC 3339 date-time (e.g.
//    `"2026-11-11T00:00:00Z"`), not the bare `"2027-01-01"` date spec 0040's bridge plugin's
//    `expiration_date` column returns. `EXPIRATION_DATE_TIME_PATTERN` now rejects anything that
//    isn't already a real date-time with a zone designator.
//
// Fixed 2026-08-18 (PR review, fifth pass): `options.expirationDateByCard`/`options.activeByCard`
// used to be TWO SEPARATE per-card maps. Spec 0040's bridge exposes `expiration_date_gmt` and
// `expiration_date_conversion_error` as a PAIR — `expiration_date_gmt` is `null` both for a
// genuine "no expiration" AND for a failed conversion, distinguished only by the sibling flag —
// but nothing forced a caller assembling two independent maps to actually carry that flag through
// at all. A caller who copied `expiration_date_gmt` into `expirationDateByCard` while dropping
// `expiration_date_conversion_error` would have a failed conversion silently accepted as a
// verified "no expiration" under `lifecyclePolicy: 'verified'` — the exact same class of bug this
// whole fix exists to prevent, just moved one level up. There is now ONE per-card map,
// `options.lifecycleByCard` (see `lookupByCard`), each entry a single record: `{ active,
// expirationDate, expirationDateConversionError }`. A follow-up review closed the remaining hole
// in that shape: under `lifecyclePolicy: 'verified'`, all three fields are required and the
// conversion status must be present; whenever active or conversion status is supplied under any
// policy it must be boolean, so malformed safety signals cannot silently become active/no-error.
//
// `active: false` has no direct create-time equivalent: Wix's Create Gift Card has no
// "create disabled" option (see spec 0042's no-credit-API-adjacent capability list — create, send
// email, query/search, disable, find-by-email), and this repo has not live-verified a Disable
// Gift Card request shape to build a real follow-up call from. Rather than guess one, or silently
// create the card active anyway, an inactive source card fails closed as a named gap by default —
// the caller must explicitly opt in (`options.allowInactiveCardCreation`) to accept creating it
// active with a manual Disable Gift Card follow-up still owed, or exclude the card instead.
function resolveCardLifecycle(sourceNumber, options) {
  const { lifecycleByCard, allowInactiveCardCreation = false, lifecyclePolicy } = options || {};

  if (lifecyclePolicy != null && lifecyclePolicy !== 'not-tracked' && lifecyclePolicy !== 'verified') {
    return { gap: { code: 'invalid-lifecycle-policy', summary: `options.lifecyclePolicy must be "not-tracked" or "verified" — got ${JSON.stringify(lifecyclePolicy)}.` } };
  }

  // Fixed 2026-08-18 (PR review, fourth pass): an OMITTED lifecyclePolicy still defaults to
  // 'not-tracked' (breaking every existing caller to force an explicit value was judged too
  // disruptive), but that default is no longer silent — every card built this way carries a
  // prominent note recording the decision, instead of the fidelity loss being invisible unless a
  // reader already knows to go looking for it.
  const notes = [];
  if (lifecyclePolicy == null) {
    notes.push(`options.lifecyclePolicy was not set for card ${sourceNumber} — defaulting to "not-tracked": this card's active/expiration state was NOT verified against the source (spec 0042). Pass lifecyclePolicy: "verified" with a real lifecycleByCard record if source lifecycle fidelity matters for this migration.`);
  }

  const { has: hasRecord, value: record } = lookupByCard(lifecycleByCard, sourceNumber);
  const missingRequiredFields = REQUIRED_VERIFIED_LIFECYCLE_FIELDS.filter((field) => !hasOwn(record, field));
  const active = hasOwn(record, 'active') ? record.active : undefined;
  const expirationDate = hasOwn(record, 'expirationDate') ? record.expirationDate : undefined;
  const conversionError = hasOwn(record, 'expirationDateConversionError') ? record.expirationDateConversionError : undefined;

  if (lifecyclePolicy === 'verified' && (!hasRecord || missingRequiredFields.length > 0)) {
    return {
      gap: {
        code: 'unavailable-lifecycle-data',
        summary: `options.lifecyclePolicy is "verified" but card ${sourceNumber} is missing required lifecycleByCard data (${missingRequiredFields.join(', ') || 'record'}) — a missing/failed lifecycle lookup must never be treated as "active, no expiration"; supply "active", "expirationDate", and "expirationDateConversionError" (expirationDate may be explicitly null only when expirationDateConversionError is explicitly false), or use lifecyclePolicy: "not-tracked" as an explicit, visible decision to accept the fidelity loss for this card.`,
      },
    };
  }

  // Unlike expiration shape/status, inactive state is honored regardless of lifecyclePolicy (see
  // the active===false gate below). Therefore a supplied active value must always be a boolean:
  // accepting "false" or 0 would silently recreate an inactive source card as active.
  if (hasOwn(record, 'active') && typeof active !== 'boolean') {
    return {
      gap: {
        code: 'invalid-lifecycle-data',
        summary: `card ${sourceNumber}'s lifecycleByCard record has active ${JSON.stringify(active)} — this field must be an explicit boolean so an inactive source card can never be recreated as active through coercion.`,
      },
    };
  }

  if (hasOwn(record, 'expirationDateConversionError') && typeof conversionError !== 'boolean') {
    return {
      gap: {
        code: 'invalid-lifecycle-data',
        summary: `card ${sourceNumber}'s lifecycleByCard record has expirationDateConversionError ${JSON.stringify(conversionError)} — this field must be an explicit boolean so conversion failure cannot be confused with a "no expiration" value.`,
      },
    };
  }

  if (lifecyclePolicy === 'verified' && expirationDate !== null && (typeof expirationDate !== 'string' || isBlank(expirationDate))) {
    return {
      gap: {
        code: 'invalid-lifecycle-data',
        summary: `card ${sourceNumber}'s verified lifecycleByCard record has expirationDate ${JSON.stringify(expirationDate)} — this field must be either an explicit null (verified no expiration) or a nonblank RFC 3339 date-time string.`,
      },
    };
  }

  // Checked regardless of lifecyclePolicy, same as the active===false check below: if the
  // caller's own data says the conversion failed, that is real signal to honor, not something a
  // policy setting should be able to suppress. This is exactly the case the bridge's
  // expiration_date_conversion_error field exists to report (spec 0040 Case 2) — a non-null
  // source expiration_date that could not be converted must never be treated as "no expiration."
  if (conversionError === true) {
    return {
      gap: {
        code: 'expiration-date-conversion-failed',
        summary: `card ${sourceNumber}'s lifecycleByCard record has expirationDateConversionError: true — the source's expiration date failed to convert to a usable value and must never be treated as "no expiration" or silently dropped. Investigate the source data (see spec 0040's expiration_date_conversion_error) before proceeding with this card.`,
      },
    };
  }

  if (!isBlank(expirationDate) && !EXPIRATION_DATE_TIME_PATTERN.test(expirationDate)) {
    return {
      gap: {
        code: 'invalid-expiration-date-shape',
        summary: `options.lifecycleByCard's record for card ${sourceNumber} has expirationDate "${expirationDate}", which is not an RFC 3339 date-time (e.g. "2026-11-11T00:00:00Z") — Wix's Gift Card Object requires a date-time, not a bare date. Never forward spec 0040's bridge plugin's raw expiration_date (a MySQL DATE) directly; use its expiration_date_gmt (preserving end-of-day/site-timezone semantics) instead.`,
      },
    };
  }

  if (active === false) {
    if (!allowInactiveCardCreation) {
      return {
        gap: {
          code: 'inactive-source-card',
          summary: `card ${sourceNumber} is inactive at the source (active: false) — Wix's Create Gift Card has no "create disabled" option, so creating it normally would resurrect deactivated customer value as a live, spendable card. Set options.allowInactiveCardCreation to explicitly accept creating it active anyway (with a manual Disable Gift Card follow-up still owed), or exclude this card from the migration.`,
        },
      };
    }
    notes.push(`card ${sourceNumber} is inactive at the source but was created anyway per options.allowInactiveCardCreation — it now exists as an ACTIVE Wix gift card; a manual Disable Gift Card follow-up is required to match the source state (no verified Disable Gift Card request shape is recorded in this repo yet).`);
    return { expirationDate, note: notes.join(' ') };
  }

  return { expirationDate, note: notes.length ? notes.join(' ') : undefined };
}

// Main entry: one WooCommerce order + one of its pw-gift-card line items -> an ARRAY of Wix
// POST /gift-cards/v1/gift-cards create results, one per issued card (a line item at quantity N
// issues N cards — see the cardinality note above). Each array entry is
// { sourceNumber, payload, gaps, notes }; `payload` is null when `gaps` is non-empty.
//
// `options.balancePolicy` — 'A', 'B', or 'C' (spec 0042 Decision 5), chosen once per migration run
// per card, never inferred. 'A' and 'C' both create at face value here (identical behavior in
// THIS builder); they differ only in what happens next: 'A' accepts the resulting overstatement
// as a known consequence (manual disable-and-replace to correct it), while 'C' declares that the
// correct balance will be reached afterward by replaying real order-linked redemptions via
// gift-card-redemption-build.js (which only accepts a redemption for a card declared 'C' — 'A'
// and 'B' are both rejected there, for different reasons: 'A' contradicts its own "no replay"
// rule, and 'B' would double-decrement a card already created at its correct balance). Under 'B',
// `options.remainingBalanceByCard` (a plain object or Map keyed by the raw `pw_gift_card_number`)
// must carry a verified current balance for EACH card being built here — a missing entry is a
// named gap, never a silent fall-through to face value, and a scalar override is never broadcast
// across every card on a multi-quantity line (two cards from the same line can have been spent
// by different amounts).
//
// `options.lifecyclePolicy` — 'not-tracked' (default/omitted) or 'verified', mirroring
// `balancePolicy`'s explicit-signal shape. `options.lifecycleByCard` (a plain object or Map keyed
// by the raw `pw_gift_card_number`) carries ONE combined record per card — `{ active,
// expirationDate, expirationDateConversionError }` — never split across separate maps (see
// resolveCardLifecycle's own comment). Under 'not-tracked', a card with no `lifecycleByCard`
// record is simply created active/non-expiring (today's behavior, now an explicit, visible
// decision rather than an implicit default). Under 'verified', EVERY card must carry a record with
// `active`, `expirationDate`, and boolean `expirationDateConversionError` fields present (an
// explicit `null` expiration is a valid, verified "no expiration" only alongside an explicit
// `false` conversion status) — a missing record or field fails closed as a named gap rather than
// silently assuming active/non-expiring. A record with `expirationDateConversionError: true` is
// always a hard gap, regardless of `lifecyclePolicy`. See resolveCardLifecycle for the inactive-
// card and expiration-date-shape rules this also enforces.
//
// `options.normalizeCode` — set true to strip non-alphanumeric characters from a source code that
// Wix would otherwise reject (see CODE_ALLOWED_CHARS above). Off by default: this changes the code
// a customer may already hold printed/emailed, so it must be an explicit, visible decision (a
// `notes` entry records exactly what changed), never a silent default — same principle as
// `balancePolicy`/`lifecyclePolicy`.
function buildGiftCardsFromOrderLineItem(order, lineItem, options) {
  const opts = options || {};
  const { normalizeCode = false } = opts;

  if (!ORDER_STATUSES_WITH_ISSUED_CARDS.has(order.status)) {
    return [{
      sourceNumber: null,
      payload: null,
      gaps: [{
        code: 'order-not-yet-completed',
        summary: `order ${order.id} has status "${order.status}" — PW WooCommerce Gift Cards only mints a card number once an order reaches processing/completed (see gift-card.json's issuance-is-core-meta-not-db-only pitfall). Re-check after the order progresses.`,
      }],
      notes: [],
    }];
  }

  const metaData = lineItem.meta_data || [];
  const sourceNumbers = metaValues(metaData, 'pw_gift_card_number');
  if (sourceNumbers.length === 0) {
    return [{
      sourceNumber: null,
      payload: null,
      gaps: [{ code: 'no-gift-card-number', summary: `line item ${lineItem.id} on order ${order.id} has no pw_gift_card_number meta — it is not a gift-card issuance line, or the order hasn't triggered issuance yet.` }],
      notes: [],
    }];
  }

  const { amount, source: amountSource, gap: faceValueGap } = resolveFaceValue(lineItem, metaData);
  if (faceValueGap) {
    return [{ sourceNumber: null, payload: null, gaps: [faceValueGap], notes: [] }];
  }
  if (amount == null) {
    return [{
      sourceNumber: null,
      payload: null,
      gaps: [{ code: 'unresolvable-amount', summary: `could not resolve a face value for line item ${lineItem.id} on order ${order.id} from either pw_gift_card_amount meta or subtotal/quantity.` }],
      notes: [],
    }];
  }

  const { recipients, gap: recipientGap } = resolveRecipients(metaData, sourceNumbers.length);
  const buyerEmail = order.billing && order.billing.email;
  const currencyGap = CURRENCY_CODE_PATTERN.test(order.currency)
    ? null
    : { code: 'invalid-currency', summary: `order ${order.id} has currency "${order.currency}" — expected a 3-letter ISO 4217 code (e.g. "USD"); Wix giftCard.currency rejects anything else.` };

  return sourceNumbers.map((sourceNumber, index) => {
    const notes = [];
    if (amountSource !== 'pw_gift_card_amount meta') notes.push(`face value for card ${sourceNumber} used the ${amountSource}.`);

    // Resolved PER CARD, not once for the whole line item — see resolveCardBalance's own comment.
    const { amount: overrideAmount, gap: balanceGap, note: balanceNote } = resolveCardBalance(sourceNumber, amount, opts);
    if (balanceNote) notes.push(balanceNote);
    const { expirationDate, gap: lifecycleGap, note: lifecycleNote } = resolveCardLifecycle(sourceNumber, opts);
    if (lifecycleNote) notes.push(lifecycleNote);

    if (recipientGap) return { sourceNumber, payload: null, gaps: [recipientGap], notes };
    if (balanceGap) return { sourceNumber, payload: null, gaps: [balanceGap], notes };
    if (currencyGap) return { sourceNumber, payload: null, gaps: [currencyGap], notes };
    if (lifecycleGap) return { sourceNumber, payload: null, gaps: [lifecycleGap], notes };

    let code = sourceNumber;
    if (isBlank(code)) {
      return { sourceNumber, payload: null, gaps: [{ code: 'no-gift-card-number', summary: `card #${index + 1} on line item ${lineItem.id} has a blank pw_gift_card_number value.` }], notes };
    }

    if (!CODE_ALLOWED_CHARS.test(code)) {
      if (!normalizeCode) {
        return {
          sourceNumber,
          payload: null,
          gaps: [{ code: 'code-contains-disallowed-characters', summary: `source code "${code}" contains characters Wix's giftCard.code rejects (letters/numbers only — see gift-card.json's code-alphanumeric-only pitfall). Pass options.normalizeCode to strip them, but that changes the code the customer already holds — get an explicit decision first.` }],
          notes,
        };
      }
      const stripped = code.replace(/[^A-Za-z0-9]/g, '');
      notes.push(`code normalized for Wix (stripped non-alphanumeric characters): source "${code}" -> "${stripped}" — this changes the code the customer already holds; only done because options.normalizeCode was explicitly set.`);
      code = stripped;
    }

    if (code.length < CODE_MIN_LENGTH || code.length > CODE_MAX_LENGTH) {
      return { sourceNumber, payload: null, gaps: [{ code: 'code-length-out-of-range', summary: `code "${code}" is ${code.length} characters; Wix giftCard.code must be 8-20 characters and is immutable. Report this card instead of rewriting a code the customer already holds.` }], notes };
    }

    let initialValueAmount = amount;
    if (overrideAmount != null) {
      initialValueAmount = overrideAmount;
      notes.push(`imported at the caller-resolved remainingBalanceByCard entry (${overrideAmount}) instead of face value (${amount}) — balance-policy decision made by the caller, not this builder (spec 0042 Decision 5, Policy B).`);
    } else {
      notes.push(`imported at face value (${amount}); redemption/balance history is not readable from source data (see plugins/pw-woocommerce-gift-cards.json's gift-card-activity redemption-invisible-even-in-order-rest-data pitfall) — if this card is known to have been partially spent, pass options.balancePolicy: 'B' with a verified remainingBalanceByCard entry (spec 0042 Decision 5).`);
    }

    const recipient = recipients[index];
    if (!isBlank(recipient) && recipient !== buyerEmail) {
      notes.push(`recipient ("${recipient}") differs from the buyer (billing.email "${buyerEmail}") — the Create Gift Card API has no documented recipient/contactId field, so this is carried as a note for a human CRM-linking step, not sent in the payload.`);
    }

    const payload = {
      code,
      // CORRECTED 2026-08-17 (live 400 on the real endpoint): `currency` is top-level on giftCard,
      // NOT nested inside `initialValue` — see gift-card.json's mappingGuidance.
      initialValue: { amount: initialValueAmount.toFixed(2) },
      currency: order.currency,
      // Required, and distinguishes an imported card from one bought through a Wix order — see
      // gift-cards/gift-card.json's mappingGuidance.
      source: 'MANUAL',
      // Stable per SOURCE CARD, not just per order+line-item — quantity > 1 issues multiple cards
      // from the same line item, which would otherwise collide on the same key (spec 0042
      // Decision 3).
      idempotencyKey: `pw-gift-card:order-${order.id}:item-${lineItem.id}:number-${sourceNumber}`,
    };

    // Only set when options.lifecycleByCard has a real record for this card (see
    // resolveCardLifecycle) — an absent record omits the field entirely rather than guessing
    // "no expiration," since this builder has no access to the source card's own expiration_date
    // without a caller-supplied lookup (spec 0040's bridge plugin).
    if (!isBlank(expirationDate)) payload.expirationDate = expirationDate;

    // Deliberately absent: `notificationInfo`. Including it emails the recipient immediately
    // (notificationDate empty) — a historical import would re-mail every card holder. See
    // gift-cards/gift-card.json's suppress-recipient-email-on-import pitfall.

    return { sourceNumber, payload, gaps: [], notes };
  });
}

// Convenience: fan out every pw-gift-card line item found on an order, and every card issued from
// each of them.
function buildGiftCardsFromOrder(order, options) {
  const giftCardLineItems = (order.line_items || []).filter(
    (li) => metaValues(li.meta_data, 'pw_gift_card_number').length > 0 || !isBlank(metaValue(li.meta_data, 'pw_gift_card_amount'))
  );
  return giftCardLineItems.flatMap((lineItem) =>
    buildGiftCardsFromOrderLineItem(order, lineItem, options).map((result) => ({ lineItemId: lineItem.id, ...result }))
  );
}

module.exports = {
  ORDER_STATUSES_WITH_ISSUED_CARDS,
  CODE_MIN_LENGTH,
  CODE_MAX_LENGTH,
  CODE_ALLOWED_CHARS,
  MAX_MONEY_DECIMALS,
  CURRENCY_CODE_PATTERN,
  WIX_GIFT_CARDS_APP_ID,
  resolveRecipients,
  validateRemainingBalance,
  resolveCardBalance,
  resolveCardLifecycle,
  buildGiftCardsFromOrderLineItem,
  buildGiftCardsFromOrder,
};

Requirements and compatibility

Works with: Claude Code, Claude apps, OpenAI Codex, GitHub Copilot, Cursor, Gemini CLI, Kiro, OpenCode, Goose, Amp, Roo Code, JetBrains Junie, Factory Droid, Devin (ex-Windsurf), Mistral Vibe, OpenHands, Letta

“Works with” means the tool reads the open Agent Skills format; a skill written for one tool may use features others lack.

Needs: Needs an API key, Needs a command-line tool, Needs Node.js

Security

What our scanner noticed· Medium risk

  • Possible data-exfiltration endpoints
  • Scripts that your agent may run

This skill includes scripts that your agent may run. Read them before you use it.

A static scan is not a guarantee. Skills are third-party content: review a skill before you let an agent use it.

Attribution and licence

Published by
Wix
Publisher
Wix (Official)
Source
wix/skills · wix-replatform/resources/rp-target-wix · commit d168bc2
Licence
MIT License (redistribution allowed)
  • LICENSE (added by AutoGineer from LICENSE)
  • ATTRIBUTION.md (written by AutoGineer)
Synced

AutoGineer is not affiliated with or endorsed by Wix or Wix.

Download ZIP

The ZIP holds the skill’s files, its licence files and an ATTRIBUTION.md. Download rp-target-wix.zip