@wix/himalaya-cli 0.1036.0 → 0.1037.0

package/fixtures/wix-canned.json

@@ -1057,20 +1057,69 @@
         "title": "Roastery Rebuild",
         "description": "A 12-week fit-out, start to finish.",
         "slug": "roastery-rebuild",
-        "coverImage": "https://static.wixstatic.com/media/example-rebuild.jpg"
+        "coverImage": {
+          "type": "WIX_MEDIA",
+          "imageInfo": {
+            "id": "example-rebuild.jpg",
+            "url": "https://static.wixstatic.com/media/example-rebuild.jpg",
+            "width": 2752,
+            "height": 1536
+          },
+          "secure": false
+        }
       },
       {
         "id": "proj-0002",
         "title": "Harvest Field Notes",
         "description": "Photography from the 2026 trip.",
         "slug": "harvest-field-notes",
-        "coverImage": "https://static.wixstatic.com/media/example-fieldnotes.jpg"
+        "coverImage": {
+          "type": "WIX_MEDIA",
+          "imageInfo": {
+            "id": "example-fieldnotes.jpg",
+            "url": "https://static.wixstatic.com/media/example-fieldnotes.jpg",
+            "width": 1024,
+            "height": 1024
+          },
+          "secure": false
+        }
       }
     ],
     "pagingMetadata": {
       "count": 2
     }
   },
+  "POST /portfolio/v1/items/query": {
+    "items": [
+      {
+        "id": "item-0001",
+        "projectId": "proj-0001",
+        "sortOrder": 1,
+        "type": "IMAGE",
+        "title": "The finished bar",
+        "image": {
+          "type": "WIX_MEDIA",
+          "imageInfo": {
+            "id": "example-rebuild-bar.jpg",
+            "url": "https://static.wixstatic.com/media/example-rebuild-bar.jpg",
+            "width": 1600,
+            "height": 1067
+          }
+        }
+      },
+      {
+        "id": "item-0002",
+        "projectId": "proj-0001",
+        "sortOrder": 2,
+        "type": "TEXT",
+        "title": "Twelve weeks",
+        "description": "Stripped to the brick, rebuilt around the roaster."
+      }
+    ],
+    "metadata": {
+      "count": 2
+    }
+  },
   "POST /badges/v4/badges/query": {
     "badges": [
       {

package/guides/sdk-reference.json

@@ -19564,11 +19564,23 @@
     "source": "stdlib/wix-sdk/portfolio/src/index.ts",
     "description": "Portfolio — projects and collections",
     "api": [
+      {
+        "name": "WixMediaImage",
+        "kind": "interface",
+        "jsdoc": "/** A Wix Portfolio media image — a project / collection cover or a project item's image. */",
+        "decl": "export interface WixMediaImage {\n  type?: string;\n  imageInfo?: { id?: string; url?: string; width?: number; height?: number };\n}"
+      },
+      {
+        "name": "portfolioCoverRef",
+        "kind": "function",
+        "jsdoc": "/**\n * The Wix media reference of a Portfolio cover or item image — its `imageInfo.url`, else\n * its `imageInfo.id` — for `wixMediaUrl` to resolve and size. `\"\"` when there is none.\n * A bare string is still accepted, so a cover stored as a url string keeps rendering.\n *\n * @example\n * const image = wixMediaUrl(portfolioCoverRef(project.coverImage));\n */",
+        "decl": "export function portfolioCoverRef(cover: WixMediaImage | string | null | undefined): string;"
+      },
       {
         "name": "WixPortfolioProject",
         "kind": "interface",
         "jsdoc": "",
-        "decl": "export interface WixPortfolioProject {\n  id: string;\n  title?: string;\n  description?: string;\n  /** Project cover. coverImage is a Wix media url/id. */\n  coverImage?: string;\n  slug?: string;\n  hidden?: boolean;\n  createdDate?: string;\n  updatedDate?: string;\n}"
+        "decl": "export interface WixPortfolioProject {\n  id: string;\n  title?: string;\n  description?: string;\n  /**\n   * Project cover. The live wire shape is a media OBJECT\n   * (`{type:\"WIX_MEDIA\", imageInfo:{id,url,width,height}}`), not a url string —\n   * read it with {@link portfolioCoverRef}; `wixMediaUrl` returns `\"\"` for the object.\n   * A url string is still accepted, for projects constructed by hand.\n   */\n  coverImage?: WixMediaImage | string;\n  slug?: string;\n  hidden?: boolean;\n  createdDate?: string;\n  updatedDate?: string;\n}"
       },
       {
         "name": "WixListProjectsResponse",
@@ -19583,12 +19595,6 @@
         "decl": "export function listProjects(limit = 100, cursor?: string): Promise<WixListProjectsResponse>;",
         "http": "GET /portfolio/v1/projects?{…}"
       },
-      {
-        "name": "WixMediaImage",
-        "kind": "interface",
-        "jsdoc": "",
-        "decl": "export interface WixMediaImage { imageInfo?: { id?: string; url?: string } }"
-      },
       {
         "name": "WixPortfolioCollection",
         "kind": "interface",
@@ -19618,14 +19624,14 @@
         "name": "WixListProjectItemsResponse",
         "kind": "interface",
         "jsdoc": "",
-        "decl": "export interface WixListProjectItemsResponse {\n  items?: WixPortfolioProjectItem[];\n  pagingMetadata?: { count?: number; cursors?: { next?: string }; hasNext?: boolean };\n}"
+        "decl": "export interface WixListProjectItemsResponse {\n  items?: WixPortfolioProjectItem[];\n  /**\n   * Paging, under the name this function always documented. A Wix query reports it as\n   * `metadata`; {@link listProjectItems} copies that here when `pagingMetadata` is absent.\n   */\n  pagingMetadata?: { count?: number; cursors?: { next?: string }; hasNext?: boolean };\n  /** The query endpoint's own name for the paging block. */\n  metadata?: { count?: number; cursors?: { next?: string }; hasNext?: boolean };\n}"
       },
       {
         "name": "listProjectItems",
         "kind": "function",
-        "jsdoc": "/** GET /portfolio/v1/projects/{projectId}/items — list a project's items. */",
+        "jsdoc": "/**\n * POST /portfolio/v1/items/query — list a project's items.\n *\n * A first page filters on `projectId` with `paging.limit`. Passing a `cursor` (a previous\n * page's `pagingMetadata.cursors.next`) switches to `cursorPaging` and drops the filter,\n * because a Wix query cursor already carries it. Items come back in the order Wix returns\n * them — sort on `sortOrder` for the author's order.\n */",
         "decl": "export function listProjectItems(projectId: string, limit = 100, cursor?: string): Promise<WixListProjectItemsResponse>;",
-        "http": "GET /portfolio/v1/projects/{…}/items?{…}"
+        "http": "POST /portfolio/v1/items/query"
       }
     ]
   },

package/guides/wix-business-context.md

@@ -122,9 +122,21 @@ never change. If nothing is reachable, keep the default kit.
 RFC 0048 refused a **content dump** on the runtime facade. The dump lives here, at **build time**:
 
 ```bash
-himi site analyze --client-id <id> --site <msid> --url https://… --out .himi/business-book [--apply]
+himi site analyze --url https://… --out .himi/business-book                                  # visitor-only pass
+himi site analyze --url https://… --client-id <id> [--site <msid>] --out .himi/business-book [--apply]
 ```
 
+`--url` alone is the **visitor-only pass**: the published pages, their look (screenshots,
+`--wst-*`), the Copy chapter and the Placeholders chapter (template phone/email, Wix editor text, a
+second business name, repeated images). It needs no OAuth client, so no anonymous token is minted
+and every vertical probe reports `visitor skipped` — the Catalog has no counts. `--client-id` (the
+site's Headless client) adds those counts, each Bookings service's price and payment mode
+(`pay online only`, `pay in person only`, `free`, …), and the `wix` binding `--apply` writes;
+`--apply` without it exits 2. `--site` adds the owner-only chapters (CMS, media, roles); an
+ambient `WIX_SITE_ID` does so only beside an explicit `--client-id` flag (an exported
+`WIX_CLIENT_ID` does not count), so a URL-only pass is never silently upgraded to an owner read
+of whichever site that variable names.
+
 Same collector, three doors:
 
 | Door | Artifact |

package/guides/wix-site-to-himi-app.md

@@ -59,14 +59,23 @@ banner. Keep **only the first ASCII line** (`head -1`) or HTTP headers throw
 ### 1. Analyze — do not re-fetch Wix
 
 ```sh
+# Visitor-only pass — the URL is all it needs (published pages, look, copy, template leftovers):
+himi site analyze --url https://customer.wixsite.com/site --out .himi/business-book
+
+# Full pass — --client-id adds catalog counts, service payment modes and the --apply binding;
+# --site adds the owner chapters (CMS, media, roles):
 himi site analyze \
-  --client-id <headless-oauth-client-id> \
   --url https://customer.wixsite.com/site \
+  --client-id <headless-oauth-client-id> \
   --site <msid> \
   --out .himi/business-book
 # screenshots + --wst-*: npx playwright install chromium
 ```
 
+Check `book.md` → **Placeholders** before reusing any copy: a template phone (`123-456-7890`),
+Wix editor text, a second business name or one photo repeated across a gallery is the
+template's, not the customer's.
+
 Read `book.json`, `book.md`, `evidence/pages/`, `media/`, `velo/` (via
 `book.velo.files[].localPath`). Write `.himi/business-book/look.notes.md` for mood,
 overlay tie-break, language. **Never rewrite `book.json`.** Never log

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@wix/himalaya-cli",
-  "version": "0.1036.0",
+  "version": "0.1037.0",
   "type": "module",
   "description": "himi — the Himalaya authoring CLI. Build a Tier-5 content package on your own machine, push it to the production serve as a draft, preview it on web + Himi Player, and read worker logs back — the remote dev loop. Wraps @himalaya/serve-cli for transport.",
   "keywords": [
@@ -65,5 +65,5 @@
       "artifactId": "himalaya-cli"
     }
   },
-  "falconPackageHash": "4823bad3388426fd2f4488b8d0571503d30ba55aafb5a033ecbdfac6"
+  "falconPackageHash": "e35236017e826d4e25212e7448f29f8004d84cec687b348a8231366e"
 }

package/templates/beauty-salon/tier5-src/himi-booking-bookings/index.ts

@@ -11,9 +11,14 @@ const input = (globalThis as { himalaya?: { input?: Record<string, unknown> } })
 const validDate = (value: unknown): value is string => typeof value === "string" && /^\d{4}-\d{2}-\d{2}$/.test(value) && dayKey(new Date(`${value}T12:00:00`)) === value;
 const views = localPreferences("booking.schedule", value => ["agenda", "day", "month"].includes(String(value)) ? String(value) : "agenda");
 let mode = validDate(input?.date) ? "day" : views.read();
-let selectedDate = validDate(input?.date) ? input.date : dayKey(new Date());
+// "" until the schedule is first shown, NOT today's date: the release build hashes this worker's
+// initial state, so a date read off the build machine's clock made every build of unchanged
+// source a different release (#3268, the `nondeterministic-initial-state` lint). `derive()` fills
+// in today the first time the schedule is visible, which is never at build time (no member).
+let selectedDate = validDate(input?.date) ? input.date : "";
+const today = () => dayKey(new Date());
 let pageMember: MemberAccess | undefined;
-let queryNow = new Date().toISOString();
+let queryNow = ""; // set by the first-page fetch, never at boot (see selectedDate)
 let cancelTarget: { row: MemberBookingRow; member: MemberAccess } | undefined;
 let cancelling = false;
 interface S {
@@ -26,11 +31,12 @@ interface S {
   nextCursor?: string; complete?: boolean; loadingMore?: boolean; pageError?: boolean; total?: number;
 }
 function derive(s: S): S {
-  const dayRows = s.rows.filter(row => row.day === selectedDate);
+  const hideSchedule = !s.isMember || s.isLoading;
+  if (!selectedDate && !hideSchedule) selectedDate = today();
+  const dayRows = selectedDate ? s.rows.filter(row => row.day === selectedDate) : [];
   const counts = new Map<string, number>();
   for (const row of s.rows) if (row.day) counts.set(row.day, (counts.get(row.day) ?? 0) + 1);
-  const hideSchedule = !s.isMember || s.isLoading;
-  return { ...s, scheduleMode: mode, selectedDate, dayRows, dayHeading: dayLabel(selectedDate), hideSchedule,
+  return { ...s, scheduleMode: mode, selectedDate, dayRows, dayHeading: selectedDate ? dayLabel(selectedDate) : "", hideSchedule,
     hideAgenda: hideSchedule || mode !== "agenda", hideCalendar: hideSchedule || mode === "agenda", hideMonth: mode !== "month",
     decorations: [...counts].map(([date, n]) => ({ date, dotCount: Math.min(n, 3), dotColorToken: "accentPrimary" })),
     dayEmptyText: dayRows.length ? "" : s.complete ? copyParam("bookings.emptyDay", "No bookings on this day.") : copyParam("bookings.emptyLoadedDay", "No bookings on this day in loaded results. Load more to check later pages."),
@@ -48,7 +54,7 @@ const svc = defineBackendCollection<S, MemberBookingRow>("himiBookingBookings",
     async fetch(criteria, cursor) {
       const member = await memberAccess();
       if (cursor && (!pageMember || pageMember.email !== member.email || pageMember.scope !== member.scope)) throw memberAccessChanged();
-      if (!cursor) queryNow = new Date().toISOString();
+      if (!cursor || !queryNow) queryNow = new Date().toISOString();
       return fetchMemberBookings(criteria, cursor, queryNow, member);
     },
   },
@@ -65,8 +71,8 @@ const svc = defineBackendCollection<S, MemberBookingRow>("himiBookingBookings",
   actions: {
     scheduleView(s, arg) { const value = (arg as { selectedId?: string })?.selectedId; if (["agenda", "day", "month"].includes(value || "")) { mode = value!; views.write(mode); } return derive(s); },
     selectDate(s, arg) { const date = (arg as { date?: unknown })?.date; if (validDate(date)) selectedDate = date; return derive(s); },
-    previousDay(s) { const date = new Date(`${selectedDate}T12:00:00`); date.setDate(date.getDate() - 1); selectedDate = dayKey(date); return derive(s); },
-    nextDay(s) { const date = new Date(`${selectedDate}T12:00:00`); date.setDate(date.getDate() + 1); selectedDate = dayKey(date); return derive(s); },
+    previousDay(s) { const date = new Date(`${selectedDate || today()}T12:00:00`); date.setDate(date.getDate() - 1); selectedDate = dayKey(date); return derive(s); },
+    nextDay(s) { const date = new Date(`${selectedDate || today()}T12:00:00`); date.setDate(date.getDate() + 1); selectedDate = dayKey(date); return derive(s); },
     async rebook(s, arg) {
       const member = pageMember, row = s.rows.find(row => row.id === (arg as { id?: string })?.id);
       if (!member || !row?.serviceId) return s;

package/templates/beauty-salon/tier5-src/himi-branded-lite-home/index.ts

@@ -388,6 +388,10 @@ function resolveEffectiveLayout(arg: unknown, productCount: number): LayoutId {
   });
 }
 
+/** The time-of-day greeting. Read at REFRESH time only, never at boot: the release build hashes
+ *  the initial state, so a greeting read off the build machine's clock made every build of an
+ *  unchanged template a different release (#3268, the `nondeterministic-initial-state` lint).
+ *  The initial state carries `neutralWelcome()` instead, and the first refresh swaps this in. */
 function welcome(): string {
   const hour = new Date().getHours();
   if (hour < 12) return copyParam("home.greetingMorning", "Good morning");
@@ -395,6 +399,11 @@ function welcome(): string {
   return copyParam("home.greetingEvening", "Good evening");
 }
 
+/** The boot-time greeting: clock-free, so the baked initial state is the same on every build. */
+function neutralWelcome(): string {
+  return copyParam("home.greetingNeutral", "Welcome");
+}
+
 function feature(p: StoreProduct): ProductFeature {
   const name = cleanTitle(p.name) || copyParam("home.productFallbackName", "Featured item");
   const image = productImage(p);
@@ -871,7 +880,9 @@ function baseState(): State {
     hideHeroInitial: true,
     hideHeroFallback: true,
     hideFeaturedSkeleton: false,
-    welcome: welcome(),
+    // Not welcome(): that reads the clock, and this state is baked into the release. A neutral
+    // greeting keeps the hero pill painted (same size, no reflow) until the first refresh.
+    welcome: neutralWelcome(),
     refreshedAt: "",
     effectiveLayout: resolveEffectiveLayout(undefined, 0),
     accentColor: resolveAccent(undefined),

package/templates/beauty-salon-owner/tier5-src/_shared/owner-module-data.ts

@@ -8,7 +8,7 @@ import { queryPrograms, getProgram } from '@himalaya/wix-online-programs';
 import { queryReviews, getReview } from '@himalaya/wix-reviews';
 import { queryReservations, getReservation } from '@himalaya/wix-table-reservations';
 import { queryForms, getForm } from '@himalaya/wix-forms';
-import { listProjects, listProjectItems } from '@himalaya/wix-portfolio';
+import { listProjects, listProjectItems, portfolioCoverRef, type WixMediaImage } from '@himalaya/wix-portfolio';
 import { queryGiftCards, getGiftCard } from '@himalaya/wix-gift-cards';
 import { queryDonationCampaigns, getDonationCampaign } from '@himalaya/wix-donations';
 import { query as queryBadges, get as getBadge } from '@himalaya/wix-badges';
@@ -208,7 +208,7 @@ export function ownerRecord(module: OwnerModuleId, raw: unknown): OwnerRecord {
       details = [['Namespace', subtitle]];
       break;
     case 'portfolio':
-      title = field(raw, 'title'); subtitle = field(raw, 'description'); image = field(raw, 'coverImage');
+      title = field(raw, 'title'); subtitle = field(raw, 'description'); image = portfolioCoverRef(at(raw, 'coverImage') as WixMediaImage | string | undefined);
       statusLabel = typeof at(raw, 'hidden') === 'boolean' ? at(raw, 'hidden') ? 'Hidden' : 'Visible' : '';
       break;
     case 'donationCampaigns':

package/templates/beauty-salon-owner/tier5-src/himi-owner-lite-appointments/index.ts

@@ -311,7 +311,10 @@ function shape(s: Partial<AppointmentsState>): AppointmentsState {
   // Until the owner picks a day, follow the soonest booked one, so a freshly
   // loaded month never opens on an empty day list.
   const soonest = all.find((r) => r._day)?._day ?? "";
-  const focus = (s._picked ? s.selectedDate : "") || soonest || dayKey(new Date());
+  // Today only once the list is READY (the month is hidden until then): the initial state is baked
+  // into the release, and a day read off the build machine's clock made every build of unchanged
+  // source a different release (#3268, the `nondeterministic-initial-state` lint).
+  const focus = (s._picked ? s.selectedDate : "") || soonest || (status === "ready" ? dayKey(new Date()) : "");
   const dayAppointments = all.filter((r) => r._day === focus);
   const dayEvents = eventsOf(dayAppointments);
   const ready = status === "ready";

package/templates/branded-lite/tier5-src/himi-booking-bookings/index.ts

@@ -11,9 +11,14 @@ const input = (globalThis as { himalaya?: { input?: Record<string, unknown> } })
 const validDate = (value: unknown): value is string => typeof value === "string" && /^\d{4}-\d{2}-\d{2}$/.test(value) && dayKey(new Date(`${value}T12:00:00`)) === value;
 const views = localPreferences("booking.schedule", value => ["agenda", "day", "month"].includes(String(value)) ? String(value) : "agenda");
 let mode = validDate(input?.date) ? "day" : views.read();
-let selectedDate = validDate(input?.date) ? input.date : dayKey(new Date());
+// "" until the schedule is first shown, NOT today's date: the release build hashes this worker's
+// initial state, so a date read off the build machine's clock made every build of unchanged
+// source a different release (#3268, the `nondeterministic-initial-state` lint). `derive()` fills
+// in today the first time the schedule is visible, which is never at build time (no member).
+let selectedDate = validDate(input?.date) ? input.date : "";
+const today = () => dayKey(new Date());
 let pageMember: MemberAccess | undefined;
-let queryNow = new Date().toISOString();
+let queryNow = ""; // set by the first-page fetch, never at boot (see selectedDate)
 let cancelTarget: { row: MemberBookingRow; member: MemberAccess } | undefined;
 let cancelling = false;
 interface S {
@@ -26,11 +31,12 @@ interface S {
   nextCursor?: string; complete?: boolean; loadingMore?: boolean; pageError?: boolean; total?: number;
 }
 function derive(s: S): S {
-  const dayRows = s.rows.filter(row => row.day === selectedDate);
+  const hideSchedule = !s.isMember || s.isLoading;
+  if (!selectedDate && !hideSchedule) selectedDate = today();
+  const dayRows = selectedDate ? s.rows.filter(row => row.day === selectedDate) : [];
   const counts = new Map<string, number>();
   for (const row of s.rows) if (row.day) counts.set(row.day, (counts.get(row.day) ?? 0) + 1);
-  const hideSchedule = !s.isMember || s.isLoading;
-  return { ...s, scheduleMode: mode, selectedDate, dayRows, dayHeading: dayLabel(selectedDate), hideSchedule,
+  return { ...s, scheduleMode: mode, selectedDate, dayRows, dayHeading: selectedDate ? dayLabel(selectedDate) : "", hideSchedule,
     hideAgenda: hideSchedule || mode !== "agenda", hideCalendar: hideSchedule || mode === "agenda", hideMonth: mode !== "month",
     decorations: [...counts].map(([date, n]) => ({ date, dotCount: Math.min(n, 3), dotColorToken: "accentPrimary" })),
     dayEmptyText: dayRows.length ? "" : s.complete ? copyParam("bookings.emptyDay", "No bookings on this day.") : copyParam("bookings.emptyLoadedDay", "No bookings on this day in loaded results. Load more to check later pages."),
@@ -48,7 +54,7 @@ const svc = defineBackendCollection<S, MemberBookingRow>("himiBookingBookings",
     async fetch(criteria, cursor) {
       const member = await memberAccess();
       if (cursor && (!pageMember || pageMember.email !== member.email || pageMember.scope !== member.scope)) throw memberAccessChanged();
-      if (!cursor) queryNow = new Date().toISOString();
+      if (!cursor || !queryNow) queryNow = new Date().toISOString();
       return fetchMemberBookings(criteria, cursor, queryNow, member);
     },
   },
@@ -65,8 +71,8 @@ const svc = defineBackendCollection<S, MemberBookingRow>("himiBookingBookings",
   actions: {
     scheduleView(s, arg) { const value = (arg as { selectedId?: string })?.selectedId; if (["agenda", "day", "month"].includes(value || "")) { mode = value!; views.write(mode); } return derive(s); },
     selectDate(s, arg) { const date = (arg as { date?: unknown })?.date; if (validDate(date)) selectedDate = date; return derive(s); },
-    previousDay(s) { const date = new Date(`${selectedDate}T12:00:00`); date.setDate(date.getDate() - 1); selectedDate = dayKey(date); return derive(s); },
-    nextDay(s) { const date = new Date(`${selectedDate}T12:00:00`); date.setDate(date.getDate() + 1); selectedDate = dayKey(date); return derive(s); },
+    previousDay(s) { const date = new Date(`${selectedDate || today()}T12:00:00`); date.setDate(date.getDate() - 1); selectedDate = dayKey(date); return derive(s); },
+    nextDay(s) { const date = new Date(`${selectedDate || today()}T12:00:00`); date.setDate(date.getDate() + 1); selectedDate = dayKey(date); return derive(s); },
     async rebook(s, arg) {
       const member = pageMember, row = s.rows.find(row => row.id === (arg as { id?: string })?.id);
       if (!member || !row?.serviceId) return s;

package/templates/branded-lite/tier5-src/himi-branded-lite-home/index.ts

@@ -388,6 +388,10 @@ function resolveEffectiveLayout(arg: unknown, productCount: number): LayoutId {
   });
 }
 
+/** The time-of-day greeting. Read at REFRESH time only, never at boot: the release build hashes
+ *  the initial state, so a greeting read off the build machine's clock made every build of an
+ *  unchanged template a different release (#3268, the `nondeterministic-initial-state` lint).
+ *  The initial state carries `neutralWelcome()` instead, and the first refresh swaps this in. */
 function welcome(): string {
   const hour = new Date().getHours();
   if (hour < 12) return copyParam("home.greetingMorning", "Good morning");
@@ -395,6 +399,11 @@ function welcome(): string {
   return copyParam("home.greetingEvening", "Good evening");
 }
 
+/** The boot-time greeting: clock-free, so the baked initial state is the same on every build. */
+function neutralWelcome(): string {
+  return copyParam("home.greetingNeutral", "Welcome");
+}
+
 function feature(p: StoreProduct): ProductFeature {
   const name = cleanTitle(p.name) || copyParam("home.productFallbackName", "Featured item");
   const image = productImage(p);
@@ -871,7 +880,9 @@ function baseState(): State {
     hideHeroInitial: true,
     hideHeroFallback: true,
     hideFeaturedSkeleton: false,
-    welcome: welcome(),
+    // Not welcome(): that reads the clock, and this state is baked into the release. A neutral
+    // greeting keeps the hero pill painted (same size, no reflow) until the first refresh.
+    welcome: neutralWelcome(),
     refreshedAt: "",
     effectiveLayout: resolveEffectiveLayout(undefined, 0),
     accentColor: resolveAccent(undefined),

package/templates/branded-lite/tier5-src/himi-branded-lite-portfolio/index.ts

@@ -1,7 +1,7 @@
 // himi-branded-lite-portfolio — real, public Wix Portfolio projects.
 // Empty and error states stay explicit; media IDs are normalized for every host.
 import { defineService } from "../_shared/collection-service.js";
-import { listProjects, type WixPortfolioProject } from "@himalaya/wix-portfolio";
+import { listProjects, portfolioCoverRef, type WixPortfolioProject } from "@himalaya/wix-portfolio";
 import { wixMediaUrl } from "@himalaya/wix-media";
 
 interface Row {
@@ -24,7 +24,7 @@ interface S {
 
 function norm(project: WixPortfolioProject): Row {
   const title = (project.title || "Project").trim() || "Project";
-  const image = wixMediaUrl(project.coverImage || "");
+  const image = wixMediaUrl(portfolioCoverRef(project.coverImage));
   return {
     id: project.id || project.slug || title,
     title,

package/templates/branded-lite/tier5-src/himi-branded-lite-portfolio-project/index.ts

@@ -2,7 +2,7 @@
 // The public project row is resolved again from Wix, then its ordered project
 // items supply the actual image/video/text story. No sample project is invented.
 import { defineService } from "@himalaya/state";
-import { listProjectItems, listProjects, type WixPortfolioProjectItem } from "@himalaya/wix-portfolio";
+import { listProjectItems, listProjects, portfolioCoverRef, type WixPortfolioProjectItem } from "@himalaya/wix-portfolio";
 import { wixMediaUrl, WIX_DETAIL_IMAGE } from "@himalaya/wix-media";
 import { copyParam, stashCopy } from "../_shared/himi-copy.js";
 import { presence, type PresenceFlags } from "../_shared/detail-presence.js";
@@ -48,7 +48,7 @@ function inputId(): string {
 }
 
 function imageOf(item: WixPortfolioProjectItem): string {
-  return wixMediaUrl(item.image?.imageInfo?.url ?? item.image?.imageInfo?.id, WIX_DETAIL_IMAGE);
+  return wixMediaUrl(portfolioCoverRef(item.image), WIX_DETAIL_IMAGE);
 }
 
 function row(item: WixPortfolioProjectItem, index: number): MediaRow {
@@ -133,7 +133,7 @@ const svc = defineService<State, { load: (state: State, arg?: unknown) => Promis
           title: (project.title || copyParam("portfolioProject.projectFallbackName", "Project")).trim(),
           initial: ((project.title || "P").trim()[0] || "P").toUpperCase(),
           description: (project.description ?? "").trim(),
-          coverImage: wixMediaUrl(project.coverImage || "", WIX_DETAIL_IMAGE),
+          coverImage: wixMediaUrl(portfolioCoverRef(project.coverImage), WIX_DETAIL_IMAGE),
           items,
           emptyText: items.length ? "" : copyParam("portfolioProject.noMediaText", "This project has no published media yet."),
           ...presence("found"),

package/templates/community-club/tier5-src/himi-branded-lite-home/index.ts

@@ -388,6 +388,10 @@ function resolveEffectiveLayout(arg: unknown, productCount: number): LayoutId {
   });
 }
 
+/** The time-of-day greeting. Read at REFRESH time only, never at boot: the release build hashes
+ *  the initial state, so a greeting read off the build machine's clock made every build of an
+ *  unchanged template a different release (#3268, the `nondeterministic-initial-state` lint).
+ *  The initial state carries `neutralWelcome()` instead, and the first refresh swaps this in. */
 function welcome(): string {
   const hour = new Date().getHours();
   if (hour < 12) return copyParam("home.greetingMorning", "Good morning");
@@ -395,6 +399,11 @@ function welcome(): string {
   return copyParam("home.greetingEvening", "Good evening");
 }
 
+/** The boot-time greeting: clock-free, so the baked initial state is the same on every build. */
+function neutralWelcome(): string {
+  return copyParam("home.greetingNeutral", "Welcome");
+}
+
 function feature(p: StoreProduct): ProductFeature {
   const name = cleanTitle(p.name) || copyParam("home.productFallbackName", "Featured item");
   const image = productImage(p);
@@ -871,7 +880,9 @@ function baseState(): State {
     hideHeroInitial: true,
     hideHeroFallback: true,
     hideFeaturedSkeleton: false,
-    welcome: welcome(),
+    // Not welcome(): that reads the clock, and this state is baked into the release. A neutral
+    // greeting keeps the hero pill painted (same size, no reflow) until the first refresh.
+    welcome: neutralWelcome(),
     refreshedAt: "",
     effectiveLayout: resolveEffectiveLayout(undefined, 0),
     accentColor: resolveAccent(undefined),

package/templates/community-club-owner/tier5-src/_shared/owner-module-data.ts

@@ -8,7 +8,7 @@ import { queryPrograms, getProgram } from '@himalaya/wix-online-programs';
 import { queryReviews, getReview } from '@himalaya/wix-reviews';
 import { queryReservations, getReservation } from '@himalaya/wix-table-reservations';
 import { queryForms, getForm } from '@himalaya/wix-forms';
-import { listProjects, listProjectItems } from '@himalaya/wix-portfolio';
+import { listProjects, listProjectItems, portfolioCoverRef, type WixMediaImage } from '@himalaya/wix-portfolio';
 import { queryGiftCards, getGiftCard } from '@himalaya/wix-gift-cards';
 import { queryDonationCampaigns, getDonationCampaign } from '@himalaya/wix-donations';
 import { query as queryBadges, get as getBadge } from '@himalaya/wix-badges';
@@ -208,7 +208,7 @@ export function ownerRecord(module: OwnerModuleId, raw: unknown): OwnerRecord {
       details = [['Namespace', subtitle]];
       break;
     case 'portfolio':
-      title = field(raw, 'title'); subtitle = field(raw, 'description'); image = field(raw, 'coverImage');
+      title = field(raw, 'title'); subtitle = field(raw, 'description'); image = portfolioCoverRef(at(raw, 'coverImage') as WixMediaImage | string | undefined);
       statusLabel = typeof at(raw, 'hidden') === 'boolean' ? at(raw, 'hidden') ? 'Hidden' : 'Visible' : '';
       break;
     case 'donationCampaigns':

package/templates/events-meetups/tier5-src/himi-branded-lite-home/index.ts

@@ -388,6 +388,10 @@ function resolveEffectiveLayout(arg: unknown, productCount: number): LayoutId {
   });
 }
 
+/** The time-of-day greeting. Read at REFRESH time only, never at boot: the release build hashes
+ *  the initial state, so a greeting read off the build machine's clock made every build of an
+ *  unchanged template a different release (#3268, the `nondeterministic-initial-state` lint).
+ *  The initial state carries `neutralWelcome()` instead, and the first refresh swaps this in. */
 function welcome(): string {
   const hour = new Date().getHours();
   if (hour < 12) return copyParam("home.greetingMorning", "Good morning");
@@ -395,6 +399,11 @@ function welcome(): string {
   return copyParam("home.greetingEvening", "Good evening");
 }
 
+/** The boot-time greeting: clock-free, so the baked initial state is the same on every build. */
+function neutralWelcome(): string {
+  return copyParam("home.greetingNeutral", "Welcome");
+}
+
 function feature(p: StoreProduct): ProductFeature {
   const name = cleanTitle(p.name) || copyParam("home.productFallbackName", "Featured item");
   const image = productImage(p);
@@ -871,7 +880,9 @@ function baseState(): State {
     hideHeroInitial: true,
     hideHeroFallback: true,
     hideFeaturedSkeleton: false,
-    welcome: welcome(),
+    // Not welcome(): that reads the clock, and this state is baked into the release. A neutral
+    // greeting keeps the hero pill painted (same size, no reflow) until the first refresh.
+    welcome: neutralWelcome(),
     refreshedAt: "",
     effectiveLayout: resolveEffectiveLayout(undefined, 0),
     accentColor: resolveAccent(undefined),

package/templates/events-meetups-owner/tier5-src/_shared/owner-module-data.ts

@@ -8,7 +8,7 @@ import { queryPrograms, getProgram } from '@himalaya/wix-online-programs';
 import { queryReviews, getReview } from '@himalaya/wix-reviews';
 import { queryReservations, getReservation } from '@himalaya/wix-table-reservations';
 import { queryForms, getForm } from '@himalaya/wix-forms';
-import { listProjects, listProjectItems } from '@himalaya/wix-portfolio';
+import { listProjects, listProjectItems, portfolioCoverRef, type WixMediaImage } from '@himalaya/wix-portfolio';
 import { queryGiftCards, getGiftCard } from '@himalaya/wix-gift-cards';
 import { queryDonationCampaigns, getDonationCampaign } from '@himalaya/wix-donations';
 import { query as queryBadges, get as getBadge } from '@himalaya/wix-badges';
@@ -208,7 +208,7 @@ export function ownerRecord(module: OwnerModuleId, raw: unknown): OwnerRecord {
       details = [['Namespace', subtitle]];
       break;
     case 'portfolio':
-      title = field(raw, 'title'); subtitle = field(raw, 'description'); image = field(raw, 'coverImage');
+      title = field(raw, 'title'); subtitle = field(raw, 'description'); image = portfolioCoverRef(at(raw, 'coverImage') as WixMediaImage | string | undefined);
       statusLabel = typeof at(raw, 'hidden') === 'boolean' ? at(raw, 'hidden') ? 'Hidden' : 'Visible' : '';
       break;
     case 'donationCampaigns':

package/templates/gym-fitness/tier5-src/himi-booking-bookings/index.ts

@@ -11,9 +11,14 @@ const input = (globalThis as { himalaya?: { input?: Record<string, unknown> } })
 const validDate = (value: unknown): value is string => typeof value === "string" && /^\d{4}-\d{2}-\d{2}$/.test(value) && dayKey(new Date(`${value}T12:00:00`)) === value;
 const views = localPreferences("booking.schedule", value => ["agenda", "day", "month"].includes(String(value)) ? String(value) : "agenda");
 let mode = validDate(input?.date) ? "day" : views.read();
-let selectedDate = validDate(input?.date) ? input.date : dayKey(new Date());
+// "" until the schedule is first shown, NOT today's date: the release build hashes this worker's
+// initial state, so a date read off the build machine's clock made every build of unchanged
+// source a different release (#3268, the `nondeterministic-initial-state` lint). `derive()` fills
+// in today the first time the schedule is visible, which is never at build time (no member).
+let selectedDate = validDate(input?.date) ? input.date : "";
+const today = () => dayKey(new Date());
 let pageMember: MemberAccess | undefined;
-let queryNow = new Date().toISOString();
+let queryNow = ""; // set by the first-page fetch, never at boot (see selectedDate)
 let cancelTarget: { row: MemberBookingRow; member: MemberAccess } | undefined;
 let cancelling = false;
 interface S {
@@ -26,11 +31,12 @@ interface S {
   nextCursor?: string; complete?: boolean; loadingMore?: boolean; pageError?: boolean; total?: number;
 }
 function derive(s: S): S {
-  const dayRows = s.rows.filter(row => row.day === selectedDate);
+  const hideSchedule = !s.isMember || s.isLoading;
+  if (!selectedDate && !hideSchedule) selectedDate = today();
+  const dayRows = selectedDate ? s.rows.filter(row => row.day === selectedDate) : [];
   const counts = new Map<string, number>();
   for (const row of s.rows) if (row.day) counts.set(row.day, (counts.get(row.day) ?? 0) + 1);
-  const hideSchedule = !s.isMember || s.isLoading;
-  return { ...s, scheduleMode: mode, selectedDate, dayRows, dayHeading: dayLabel(selectedDate), hideSchedule,
+  return { ...s, scheduleMode: mode, selectedDate, dayRows, dayHeading: selectedDate ? dayLabel(selectedDate) : "", hideSchedule,
     hideAgenda: hideSchedule || mode !== "agenda", hideCalendar: hideSchedule || mode === "agenda", hideMonth: mode !== "month",
     decorations: [...counts].map(([date, n]) => ({ date, dotCount: Math.min(n, 3), dotColorToken: "accentPrimary" })),
     dayEmptyText: dayRows.length ? "" : s.complete ? copyParam("bookings.emptyDay", "No bookings on this day.") : copyParam("bookings.emptyLoadedDay", "No bookings on this day in loaded results. Load more to check later pages."),
@@ -48,7 +54,7 @@ const svc = defineBackendCollection<S, MemberBookingRow>("himiBookingBookings",
     async fetch(criteria, cursor) {
       const member = await memberAccess();
       if (cursor && (!pageMember || pageMember.email !== member.email || pageMember.scope !== member.scope)) throw memberAccessChanged();
-      if (!cursor) queryNow = new Date().toISOString();
+      if (!cursor || !queryNow) queryNow = new Date().toISOString();
       return fetchMemberBookings(criteria, cursor, queryNow, member);
     },
   },
@@ -65,8 +71,8 @@ const svc = defineBackendCollection<S, MemberBookingRow>("himiBookingBookings",
   actions: {
     scheduleView(s, arg) { const value = (arg as { selectedId?: string })?.selectedId; if (["agenda", "day", "month"].includes(value || "")) { mode = value!; views.write(mode); } return derive(s); },
     selectDate(s, arg) { const date = (arg as { date?: unknown })?.date; if (validDate(date)) selectedDate = date; return derive(s); },
-    previousDay(s) { const date = new Date(`${selectedDate}T12:00:00`); date.setDate(date.getDate() - 1); selectedDate = dayKey(date); return derive(s); },
-    nextDay(s) { const date = new Date(`${selectedDate}T12:00:00`); date.setDate(date.getDate() + 1); selectedDate = dayKey(date); return derive(s); },
+    previousDay(s) { const date = new Date(`${selectedDate || today()}T12:00:00`); date.setDate(date.getDate() - 1); selectedDate = dayKey(date); return derive(s); },
+    nextDay(s) { const date = new Date(`${selectedDate || today()}T12:00:00`); date.setDate(date.getDate() + 1); selectedDate = dayKey(date); return derive(s); },
     async rebook(s, arg) {
       const member = pageMember, row = s.rows.find(row => row.id === (arg as { id?: string })?.id);
       if (!member || !row?.serviceId) return s;