@wix/himalaya-cli 0.1328.0 → 0.1329.0

package/templates/nonprofit-cause/tier5-src/_shared/home-service.ts

@@ -6,7 +6,7 @@ type State = Record<string, unknown>;
 type Action = (s: State, ...args: unknown[]) => State | undefined | Promise<State | undefined>;
 const record = (x: unknown): State => x && typeof x === 'object' && !Array.isArray(x) ? x as State : {};
 
-export function decorateHome(def: { state: State; actions?: Record<string, Action> }) {
+export function decorateHome(def: { state: State; actions?: Record<string, Action>; notHydrated?: readonly string[] }) {
   let modules: HomeModule[] = [];
   const persisted = localPreferences<Partial<HomePreferences>>('home', value => {
     const v = record(value);
@@ -85,7 +85,8 @@ export function decorateHome(def: { state: State; actions?: Record<string, Actio
   actions.homePin = change(id => { if (modules.some(m => m.id === id)) { prefs.pinned = prefs.pinned.includes(id) ? prefs.pinned.filter(x => x !== id) : [...prefs.pinned, id]; prefs.hidden = prefs.hidden.filter(x => x !== id); } });
   actions.homeMoveUp = change(id => { const index = prefs.order.indexOf(id); if (index > 0) [prefs.order[index - 1], prefs.order[index]] = [prefs.order[index], prefs.order[index - 1]]; });
   actions.homeMoveDown = change(id => { const index = prefs.order.indexOf(id); if (index >= 0 && index < prefs.order.length - 1) [prefs.order[index], prefs.order[index + 1]] = [prefs.order[index + 1], prefs.order[index]]; });
-  return { state: derive(def.state), actions };
+  // Spread first: the rest of the definition (`notHydrated`) must reach the runtime too.
+  return { ...def, state: derive(def.state), actions };
 }
 export const defineService: typeof register = ((name: string, def: ServiceDefinition<unknown>) =>
   register(name, { ...def, ...decorateHome(def as unknown as { state: State; actions?: Record<string, Action> }) })) as typeof register;

package/templates/nonprofit-cause/tier5-src/himi-branded-lite-home/index.ts

@@ -1,4 +1,5 @@
 import { fetchMemberBookings, type MemberBookingRow } from "../_shared/member-bookings.js";
+import { hostSiteFromInput, hostedExploreCards, hostedHiddenFlags, type HostedExploreCard } from "../_shared/branded-lite-hosted.js";
 import { memberAccess, assertMemberAccess } from "../_shared/member-access.js";
 import { defineService as registerHome } from "../_shared/home-service.js";
 import { withIapPresentation } from "../_shared/iap-presentation.js";
@@ -191,6 +192,14 @@ interface GroupCard {
 }
 
 interface State {
+  /** Hosted mode (#4089 B2 Task 2c): per vertical (and drawer folder), whether it is hidden for
+   *  the site the host opened this app for. The hosted home binds it fail-closed; a single-site
+   *  build never reads it. */
+  hosted: Record<string, boolean>;
+  /** The host's site name, "" outside hosted mode. */
+  hostedName: string;
+  /** The hosted Home's Explore cards: the site's verticals only, [] without a host. */
+  hostedCards: HostedExploreCard[];
   nextBooking: MemberBookingRow[];
   hideNextBooking: boolean;
   memberProgressLabel: string;
@@ -864,8 +873,20 @@ function derive(state: State): State {
   };
 }
 
+/** The site the host opened this app for, or null (single-site build, or no host). */
+const workerInput = (globalThis as { himalaya?: { input?: { hostedExplore?: unknown } } }).himalaya?.input;
+const hostedSite = hostSiteFromInput(workerInput);
+
+/** This boot's hosted fields — never a snapshot's (see `notHydrated` and the reset below). */
+const hostedBoot = {
+  hosted: hostedHiddenFlags(hostedSite),
+  hostedName: hostedSite?.name ?? "",
+  hostedCards: hostedExploreCards(workerInput?.hostedExplore, hostedSite),
+};
+
 function baseState(): State {
   return derive({
+    ...hostedBoot,
     nextBooking: [], hideNextBooking: true, memberProgressLabel: "", memberProgressFraction: 0, hideMemberProgress: true,
     personalError: false, hidePersonalError: true,
     savedProducts: [], noSavedProducts: true, savedPosts: [], noSavedPosts: true, noSavedContent: true,
@@ -1136,6 +1157,9 @@ const svc = defineService<State, {
   personalLoaded: (state: State, arg: { generation: number; rows: MemberBookingRow[]; progress: { label: string; fraction: number }; error: boolean; weekly: { count: number; fraction: number; label: string } | null }) => State;
 }>("himiBrandedHome", {
   state: baseState(),
+  // The host's site is read fresh at every boot: a snapshot of the last session's site must not
+  // decide this one's verticals or name (an owner installs or removes one; another site opens).
+  notHydrated: ["hosted", "hostedName", "hostedCards"],
   actions: {
     clearPersonal: state => derive({ ...state, nextBooking: [], hideNextBooking: true, memberProgressLabel: "", memberProgressFraction: 0, hideMemberProgress: true, personalError: false, hidePersonalError: true,
       weeklyClassCount: 0, weeklyClassGoalFraction: 0, weeklyGoalLabel: "" }),
@@ -1154,5 +1178,13 @@ const svc = defineService<State, {
   },
 });
 
+// A runtime that predates `notHydrated` has already laid the snapshot over the state: put this boot's
+// hosted fields back in place before any action runs, so site B never opens with site A's verticals or
+// name. In place, because on those runtimes getState() IS the stored state (as himi-player-home does).
+if ((globalThis as { himalaya?: { hydrationOptOut?: unknown } }).himalaya?.hydrationOptOut !== true) {
+  const live = (svc as { getState?: () => State | undefined }).getState?.();
+  if (live && typeof live === "object") Object.assign(live, hostedBoot);
+}
+
 svc.refresh();
 export { svc };

package/templates/nonprofit-cause-owner/tier5-src/_shared/home-service.ts

@@ -6,7 +6,7 @@ type State = Record<string, unknown>;
 type Action = (s: State, ...args: unknown[]) => State | undefined | Promise<State | undefined>;
 const record = (x: unknown): State => x && typeof x === 'object' && !Array.isArray(x) ? x as State : {};
 
-export function decorateHome(def: { state: State; actions?: Record<string, Action> }) {
+export function decorateHome(def: { state: State; actions?: Record<string, Action>; notHydrated?: readonly string[] }) {
   let modules: HomeModule[] = [];
   const persisted = localPreferences<Partial<HomePreferences>>('home', value => {
     const v = record(value);
@@ -85,7 +85,8 @@ export function decorateHome(def: { state: State; actions?: Record<string, Actio
   actions.homePin = change(id => { if (modules.some(m => m.id === id)) { prefs.pinned = prefs.pinned.includes(id) ? prefs.pinned.filter(x => x !== id) : [...prefs.pinned, id]; prefs.hidden = prefs.hidden.filter(x => x !== id); } });
   actions.homeMoveUp = change(id => { const index = prefs.order.indexOf(id); if (index > 0) [prefs.order[index - 1], prefs.order[index]] = [prefs.order[index], prefs.order[index - 1]]; });
   actions.homeMoveDown = change(id => { const index = prefs.order.indexOf(id); if (index >= 0 && index < prefs.order.length - 1) [prefs.order[index], prefs.order[index + 1]] = [prefs.order[index + 1], prefs.order[index]]; });
-  return { state: derive(def.state), actions };
+  // Spread first: the rest of the definition (`notHydrated`) must reach the runtime too.
+  return { ...def, state: derive(def.state), actions };
 }
 export const defineService: typeof register = ((name: string, def: ServiceDefinition<unknown>) =>
   register(name, { ...def, ...decorateHome(def as unknown as { state: State; actions?: Record<string, Action> }) })) as typeof register;

package/templates/owner-lite/tier5-src/_shared/home-service.ts

@@ -6,7 +6,7 @@ type State = Record<string, unknown>;
 type Action = (s: State, ...args: unknown[]) => State | undefined | Promise<State | undefined>;
 const record = (x: unknown): State => x && typeof x === 'object' && !Array.isArray(x) ? x as State : {};
 
-export function decorateHome(def: { state: State; actions?: Record<string, Action> }) {
+export function decorateHome(def: { state: State; actions?: Record<string, Action>; notHydrated?: readonly string[] }) {
   let modules: HomeModule[] = [];
   const persisted = localPreferences<Partial<HomePreferences>>('home', value => {
     const v = record(value);
@@ -85,7 +85,8 @@ export function decorateHome(def: { state: State; actions?: Record<string, Actio
   actions.homePin = change(id => { if (modules.some(m => m.id === id)) { prefs.pinned = prefs.pinned.includes(id) ? prefs.pinned.filter(x => x !== id) : [...prefs.pinned, id]; prefs.hidden = prefs.hidden.filter(x => x !== id); } });
   actions.homeMoveUp = change(id => { const index = prefs.order.indexOf(id); if (index > 0) [prefs.order[index - 1], prefs.order[index]] = [prefs.order[index], prefs.order[index - 1]]; });
   actions.homeMoveDown = change(id => { const index = prefs.order.indexOf(id); if (index >= 0 && index < prefs.order.length - 1) [prefs.order[index], prefs.order[index + 1]] = [prefs.order[index + 1], prefs.order[index]]; });
-  return { state: derive(def.state), actions };
+  // Spread first: the rest of the definition (`notHydrated`) must reach the runtime too.
+  return { ...def, state: derive(def.state), actions };
 }
 export const defineService: typeof register = ((name: string, def: ServiceDefinition<unknown>) =>
   register(name, { ...def, ...decorateHome(def as unknown as { state: State; actions?: Record<string, Action> }) })) as typeof register;

package/templates/podcast-creator/config.ts

@@ -37,7 +37,7 @@ export default defineApp({
     actions: "http://localhost:8190/v1/actions",
     sync: "http://localhost:8190/v1/sync",
   },
-  capabilities: ["live_activity","push","share","secure_storage","open_url","calendar","local_database","media_playback","wix_api","wix_platform","app_info","iap","release_control","clipboard"],
+  capabilities: ["live_activity","push","share","secure_storage","open_url","calendar","local_database","media_playback","wix_api","wix_platform","app_info","iap","release_control","clipboard","theme"],
   designTokensPath: "./tokens.json",
   navigation: {
     "navKind": "responsive",

package/templates/podcast-creator/tier5-src/_shared/branded-lite-hosted.ts

@@ -0,0 +1,271 @@
+// Hosted mode: ONE served Branded Lite that opens any site at runtime, inside a host app such as
+// Spaces Lite, instead of one build per customer.
+//
+// A single-site build decides its verticals at build time from `provisioning.json`. A hosted build
+// declares every vertical and decides at RUNTIME from the site the host opened it for: each
+// vertical's nav row carries a fail-closed `hiddenPath` (`hiddenUntilResolved`: hidden until it resolves), and
+// the app-level nav worker resolves it from the site the host hands over.
+//
+// WHERE THE SITE COMES FROM: the host. A hosted app's Wix capability is pinned to its site and only
+// reaches www.wixapis.com, so it cannot read its own provisioning (the Member View
+// lives on apps.wix.com, the display options on manage.wix.com). The host resolves it with its own
+// account session (the site provisioning mapper) and core injects it into every worker's input under the
+// reserved key `HOST_SITE_INPUT_KEY`, after the nav params are merged — so a deep link's query can
+// never supply or replace it (WorkerPreferenceContext.inject, iOS + Android).
+//
+// PURE and import-free, so the nav and home workers (and the CLI templates that copy them) can
+// bundle it. The app's hosted-mode module re-exports it with the app's types.
+
+/** A Branded Lite vertical id (the app contract's `BrandedLiteVertical`). A plain
+ *  string here: this module is copied into CLI templates, which only allow `_shared` imports. */
+export type BrandedLiteVertical = string;
+
+export type BrandedLiteMode = "single-site" | "hosted";
+
+/** The worker-input key the host's site arrives under. Core owns it: it is set (or blanked) after
+ *  every other input source, so nothing but the host can put a site there. */
+export const HOST_SITE_INPUT_KEY = "__himiHostSite";
+
+/** The host's site from a worker's `himalaya.input`, or null. */
+export function hostSiteFromInput(input: unknown): HostedSite | null {
+  const raw = input && typeof input === "object" ? (input as Record<string, unknown>)[HOST_SITE_INPUT_KEY] : undefined;
+  return readHostedSite(raw);
+}
+
+/** What the host hands a hosted Branded Lite about the site it opened (`himalaya.input[HOST_SITE_INPUT_KEY]`). */
+export interface HostedSite {
+  metaSiteId: string;
+  name: string;
+  installedVerticals: BrandedLiteVertical[];
+  /** #RRGGBB, or "" when the site has none (the build's own brand stays). */
+  primaryColor: string;
+  logoUrl: string;
+}
+
+/** Verticals a hosted build always shows: every member area has a member list, whatever the
+ *  owner installed. (Home, its About section and Profile are not verticals — always there.) */
+export const HOSTED_ALWAYS: readonly BrandedLiteVertical[] = ["members"];
+
+/** The screen each vertical's nav rows open, so a route to an uninstalled vertical can be answered. */
+export const VERTICAL_ROOT_SCREENS: Readonly<Record<string, readonly string[]>> = {
+  store: ["himi_shop"], bookings: ["himi_services"], restaurants: ["himi_menu", "himi_reserve"],
+  programs: ["himi_programs"], plans: ["himi_plans"], feed: ["himi_feed"], members: ["himi_members"],
+  forum: ["himi_forum"], coupons: ["himi_coupons"], notifications: ["himi_notifications"],
+  loyalty: ["himi_loyalty"], reviews: ["himi_reviews"], portfolio: ["himi_portfolio"],
+  reservations: ["himi_reservations"], invoices: ["himi_invoices"], badges: ["himi_badges"],
+  notifsettings: ["himi_notif_settings"], events: ["himi_events"], blog: ["himi_blog"],
+  groups: ["himi_groups"], cms: ["himi_cms"], donations: ["himi_donations"], giftCards: ["himi_gift_cards"],
+  videos: ["himi_videos"], podcasts: ["himi_podcasts"], forms: ["himi_forms"], galleries: ["himi_galleries"],
+  inbox: ["himi_inbox"], faq: ["himi_faq"],
+};
+
+/** Every screen a vertical owns, so a route to ANY of them (a child or action screen as much as the
+ *  root) lands on `NOT_AVAILABLE_SCREEN` when the site does not have it. A screen several verticals
+ *  share opens when any of them is shown. Pinned against the app's screen registry
+ *  (`brandedLiteScreenOwners`, checked by the app's hosted-mode tests), so a screen added
+ *  to a vertical without being listed here fails the build. */
+export const HOSTED_SCREEN_VERTICALS: Readonly<Record<string, readonly BrandedLiteVertical[]>> = {
+  himi_badge: ["badges"],
+  himi_badges: ["badges"],
+  himi_blog: ["blog"],
+  himi_bookings: ["bookings"],
+  himi_cart: ["store"],
+  himi_chat_thread: ["inbox", "members"],
+  himi_cms: ["cms"],
+  himi_collection: ["store"],
+  himi_collections: ["store"],
+  himi_coupon: ["coupons"],
+  himi_coupons: ["coupons"],
+  himi_create_post: ["blog", "forum"],
+  himi_donation: ["donations"],
+  himi_donations: ["donations"],
+  himi_events: ["events"],
+  himi_faq: ["faq"],
+  himi_feed: ["feed"],
+  himi_food_order: ["restaurants"],
+  himi_food_orders: ["restaurants"],
+  himi_form: ["forms"],
+  himi_forms: ["forms"],
+  himi_forum: ["forum"],
+  himi_forum_post: ["forum"],
+  himi_galleries: ["galleries"],
+  himi_gallery: ["galleries"],
+  himi_gift_card: ["giftCards"],
+  himi_gift_cards: ["giftCards"],
+  himi_groups: ["groups"],
+  himi_inbox: ["inbox"],
+  himi_invoice: ["invoices"],
+  himi_invoices: ["invoices"],
+  himi_loyalty: ["loyalty"],
+  himi_loyalty_reward: ["loyalty"],
+  himi_member: ["members"],
+  himi_members: ["members"],
+  himi_menu: ["restaurants"],
+  himi_my_events: ["events"],
+  himi_my_subscriptions: ["plans"],
+  himi_new_message: ["inbox", "members"],
+  himi_notif_settings: ["notifsettings"],
+  himi_notifications: ["notifications"],
+  himi_orders: ["store"],
+  himi_photo_album: ["galleries"],
+  himi_plan: ["plans"],
+  himi_plans: ["plans"],
+  himi_podcast: ["podcasts"],
+  himi_podcasts: ["podcasts"],
+  himi_portfolio: ["portfolio"],
+  himi_portfolio_project: ["portfolio"],
+  himi_programs: ["programs"],
+  himi_reservations: ["reservations"],
+  himi_reserve: ["restaurants"],
+  himi_review: ["reviews"],
+  himi_reviews: ["reviews"],
+  himi_saved: ["blog"],
+  himi_saved_products: ["store"],
+  himi_services: ["bookings"],
+  himi_shop: ["store"],
+  himi_subscription: ["plans"],
+  himi_video: ["videos"],
+  himi_video_channel: ["videos"],
+  himi_videos: ["videos"],
+};
+
+/** The templated (`<prefix>[_/]<id>`) detail routes each vertical owns, pinned the same way. */
+export const HOSTED_ROUTE_PREFIXES: Readonly<Record<string, readonly BrandedLiteVertical[]>> = {
+  himi_order: ["store"],
+  himi_product: ["store"],
+  himi_service: ["bookings"],
+  himi_time: ["bookings"],
+  himi_menu_item: ["restaurants"],
+  himi_program: ["programs"],
+  himi_event: ["events"],
+  himi_rsvp: ["events"],
+  himi_blog_post: ["blog"],
+  himi_group: ["groups"],
+  himi_cms_collection: ["cms"],
+};
+
+/** The verticals that own [screenId], or undefined for a screen every site has (Home, Profile…). */
+export function screenVerticals(screenId: string): readonly BrandedLiteVertical[] | undefined {
+  const exact = HOSTED_SCREEN_VERTICALS[screenId];
+  if (exact) return exact;
+  // The registry's `^<prefix>(?:[_/](.+))?$`: the bare prefix, or the prefix, a separator and an id.
+  for (const [prefix, verticals] of Object.entries(HOSTED_ROUTE_PREFIXES)) {
+    if (screenId === prefix) return verticals;
+    const sep = screenId.charAt(prefix.length);
+    if (screenId.startsWith(prefix) && (sep === "_" || sep === "/") && screenId.length > prefix.length + 1) return verticals;
+  }
+  return undefined;
+}
+
+/** The drawer's collapsible folders and the verticals in each (config.ts builds them from this).
+ *  A folder header is hidden when none of its verticals shows, so a site never sees an empty one. */
+export const HOSTED_DRAWER_FOLDERS: Readonly<Record<string, readonly BrandedLiteVertical[]>> = {
+  drawer_sec_community: ["feed", "forum", "groups", "members", "reviews", "badges", "blog"],
+  drawer_sec_media: ["videos", "podcasts", "portfolio", "cms", "galleries", "faq"],
+  drawer_sec_offers: ["coupons", "giftCards", "donations", "loyalty"],
+  drawer_sec_activity: ["inbox", "reservations", "invoices", "forms", "notifications", "notifsettings"],
+};
+
+/** The vertical a nav row's screen belongs to, or undefined (Home, Profile, Steps…). */
+export function verticalOfScreen(screenId: string | undefined): BrandedLiteVertical | undefined {
+  if (!screenId) return undefined;
+  for (const [vertical, roots] of Object.entries(VERTICAL_ROOT_SCREENS) as [string, readonly string[]][]) {
+    if (roots.includes(screenId)) return vertical;
+  }
+  return undefined;
+}
+
+/** The screen a route to an uninstalled vertical lands on. */
+export const NOT_AVAILABLE_SCREEN = "himi_not_available";
+
+const HEX = /^#[0-9A-Fa-f]{6}$/;
+const VERTICALS = new Set(Object.keys(VERTICAL_ROOT_SCREENS));
+
+/** The host's site, or null when it is missing or malformed — a hosted build then shows no
+ *  vertical at all (fail closed), never every one. */
+export function readHostedSite(raw: unknown): HostedSite | null {
+  let value = raw;
+  if (typeof value === "string") {
+    try { value = JSON.parse(value); } catch { return null; }
+  }
+  if (!value || typeof value !== "object") return null;
+  const v = value as Record<string, unknown>;
+  const metaSiteId = typeof v.metaSiteId === "string" ? v.metaSiteId.trim() : "";
+  if (!metaSiteId || !Array.isArray(v.installedVerticals)) return null;
+  const installed = v.installedVerticals.filter((x): x is BrandedLiteVertical => typeof x === "string" && VERTICALS.has(x));
+  const color = typeof v.primaryColor === "string" && HEX.test(v.primaryColor) ? v.primaryColor : "";
+  return {
+    metaSiteId,
+    name: typeof v.name === "string" ? v.name : "",
+    installedVerticals: [...new Set(installed)],
+    primaryColor: color,
+    logoUrl: typeof v.logoUrl === "string" && /^https:\/\//.test(v.logoUrl) ? v.logoUrl : "",
+  };
+}
+
+/** The verticals a hosted build shows for [site]: its installed ones plus the always-on ones.
+ *  None at all without a site. */
+export function hostedVerticals(site: HostedSite | null): Set<BrandedLiteVertical> {
+  if (!site) return new Set();
+  return new Set<BrandedLiteVertical>([...site.installedVerticals, ...HOSTED_ALWAYS]);
+}
+
+/** `hiddenPath` flags (true hides the row), for the nav worker to publish: one per vertical, and
+ *  one per drawer folder (hidden when none of its verticals shows). */
+export function hostedHiddenFlags(site: HostedSite | null): Record<string, boolean> {
+  const shown = hostedVerticals(site);
+  const out: Record<string, boolean> = {};
+  for (const v of Object.keys(VERTICAL_ROOT_SCREENS) as BrandedLiteVertical[]) out[v] = !shown.has(v);
+  for (const [folder, verticals] of Object.entries(HOSTED_DRAWER_FOLDERS)) out[folder] = !verticals.some((v) => shown.has(v));
+  return out;
+}
+
+/** Where a route to [screenId] lands for [site]: itself, or the "not available on this site" screen
+ *  when every vertical that owns it is missing from the site. A screen no vertical owns (Home,
+ *  Profile, settings) is on every site and passes through. */
+export function hostedRoute(screenId: string, site: HostedSite | null): string {
+  const owners = screenVerticals(screenId);
+  if (!owners) return screenId;
+  const shown = hostedVerticals(site);
+  return owners.some((v) => shown.has(v)) ? screenId : NOT_AVAILABLE_SCREEN;
+}
+
+/** One hosted Home "Explore" card. The descriptor hands the worker the whole catalog (its copy is
+ *  build-time localized) as `himalaya.input.hostedExplore`; the worker publishes only the site's. */
+export interface HostedExploreCard {
+  vertical: BrandedLiteVertical;
+  icon: string;
+  title: string;
+  body: string;
+  /** Always the vertical's own root screen — never taken from the input. */
+  screenId: string;
+}
+
+/** The Explore cards to show for [site], in catalog order: one per catalog entry whose vertical the
+ *  site shows. Empty without a site or a catalog, so a worker that never boots shows no card at all
+ *  (the grid binds this list — fail closed, unlike a per-card `hiddenPath`, which native renderers
+ *  treat as visible until it resolves). */
+export function hostedExploreCards(catalog: unknown, site: HostedSite | null): HostedExploreCard[] {
+  if (!Array.isArray(catalog)) return [];
+  const shown = hostedVerticals(site);
+  const out: HostedExploreCard[] = [];
+  const seen = new Set<string>();
+  for (const entry of catalog) {
+    if (!entry || typeof entry !== "object") continue;
+    const e = entry as Record<string, unknown>;
+    const vertical = typeof e.vertical === "string" ? e.vertical : "";
+    const screenId = VERTICAL_ROOT_SCREENS[vertical]?.[0];
+    if (!screenId || !shown.has(vertical) || seen.has(vertical)) continue;
+    seen.add(vertical);
+    out.push({
+      vertical, screenId,
+      icon: typeof e.icon === "string" ? e.icon : "grid",
+      title: typeof e.title === "string" ? e.title : "",
+      body: typeof e.body === "string" ? e.body : "",
+    });
+  }
+  return out;
+}
+
+/** The `$service` path a hosted nav row's visibility binds to (a vertical, or a drawer folder id). */
+export const hostedHiddenPath = (key: string): string => `$service:brandedLiteNav.hosted.${key}`;

package/templates/podcast-creator/tier5-src/_shared/home-service.ts

@@ -6,7 +6,7 @@ type State = Record<string, unknown>;
 type Action = (s: State, ...args: unknown[]) => State | undefined | Promise<State | undefined>;
 const record = (x: unknown): State => x && typeof x === 'object' && !Array.isArray(x) ? x as State : {};
 
-export function decorateHome(def: { state: State; actions?: Record<string, Action> }) {
+export function decorateHome(def: { state: State; actions?: Record<string, Action>; notHydrated?: readonly string[] }) {
   let modules: HomeModule[] = [];
   const persisted = localPreferences<Partial<HomePreferences>>('home', value => {
     const v = record(value);
@@ -85,7 +85,8 @@ export function decorateHome(def: { state: State; actions?: Record<string, Actio
   actions.homePin = change(id => { if (modules.some(m => m.id === id)) { prefs.pinned = prefs.pinned.includes(id) ? prefs.pinned.filter(x => x !== id) : [...prefs.pinned, id]; prefs.hidden = prefs.hidden.filter(x => x !== id); } });
   actions.homeMoveUp = change(id => { const index = prefs.order.indexOf(id); if (index > 0) [prefs.order[index - 1], prefs.order[index]] = [prefs.order[index], prefs.order[index - 1]]; });
   actions.homeMoveDown = change(id => { const index = prefs.order.indexOf(id); if (index >= 0 && index < prefs.order.length - 1) [prefs.order[index], prefs.order[index + 1]] = [prefs.order[index + 1], prefs.order[index]]; });
-  return { state: derive(def.state), actions };
+  // Spread first: the rest of the definition (`notHydrated`) must reach the runtime too.
+  return { ...def, state: derive(def.state), actions };
 }
 export const defineService: typeof register = ((name: string, def: ServiceDefinition<unknown>) =>
   register(name, { ...def, ...decorateHome(def as unknown as { state: State; actions?: Record<string, Action> }) })) as typeof register;

package/templates/podcast-creator/tier5-src/himi-branded-lite-home/index.ts

@@ -1,4 +1,5 @@
 import { fetchMemberBookings, type MemberBookingRow } from "../_shared/member-bookings.js";
+import { hostSiteFromInput, hostedExploreCards, hostedHiddenFlags, type HostedExploreCard } from "../_shared/branded-lite-hosted.js";
 import { memberAccess, assertMemberAccess } from "../_shared/member-access.js";
 import { defineService as registerHome } from "../_shared/home-service.js";
 import { withIapPresentation } from "../_shared/iap-presentation.js";
@@ -191,6 +192,14 @@ interface GroupCard {
 }
 
 interface State {
+  /** Hosted mode (#4089 B2 Task 2c): per vertical (and drawer folder), whether it is hidden for
+   *  the site the host opened this app for. The hosted home binds it fail-closed; a single-site
+   *  build never reads it. */
+  hosted: Record<string, boolean>;
+  /** The host's site name, "" outside hosted mode. */
+  hostedName: string;
+  /** The hosted Home's Explore cards: the site's verticals only, [] without a host. */
+  hostedCards: HostedExploreCard[];
   nextBooking: MemberBookingRow[];
   hideNextBooking: boolean;
   memberProgressLabel: string;
@@ -864,8 +873,20 @@ function derive(state: State): State {
   };
 }
 
+/** The site the host opened this app for, or null (single-site build, or no host). */
+const workerInput = (globalThis as { himalaya?: { input?: { hostedExplore?: unknown } } }).himalaya?.input;
+const hostedSite = hostSiteFromInput(workerInput);
+
+/** This boot's hosted fields — never a snapshot's (see `notHydrated` and the reset below). */
+const hostedBoot = {
+  hosted: hostedHiddenFlags(hostedSite),
+  hostedName: hostedSite?.name ?? "",
+  hostedCards: hostedExploreCards(workerInput?.hostedExplore, hostedSite),
+};
+
 function baseState(): State {
   return derive({
+    ...hostedBoot,
     nextBooking: [], hideNextBooking: true, memberProgressLabel: "", memberProgressFraction: 0, hideMemberProgress: true,
     personalError: false, hidePersonalError: true,
     savedProducts: [], noSavedProducts: true, savedPosts: [], noSavedPosts: true, noSavedContent: true,
@@ -1136,6 +1157,9 @@ const svc = defineService<State, {
   personalLoaded: (state: State, arg: { generation: number; rows: MemberBookingRow[]; progress: { label: string; fraction: number }; error: boolean; weekly: { count: number; fraction: number; label: string } | null }) => State;
 }>("himiBrandedHome", {
   state: baseState(),
+  // The host's site is read fresh at every boot: a snapshot of the last session's site must not
+  // decide this one's verticals or name (an owner installs or removes one; another site opens).
+  notHydrated: ["hosted", "hostedName", "hostedCards"],
   actions: {
     clearPersonal: state => derive({ ...state, nextBooking: [], hideNextBooking: true, memberProgressLabel: "", memberProgressFraction: 0, hideMemberProgress: true, personalError: false, hidePersonalError: true,
       weeklyClassCount: 0, weeklyClassGoalFraction: 0, weeklyGoalLabel: "" }),
@@ -1154,5 +1178,13 @@ const svc = defineService<State, {
   },
 });
 
+// A runtime that predates `notHydrated` has already laid the snapshot over the state: put this boot's
+// hosted fields back in place before any action runs, so site B never opens with site A's verticals or
+// name. In place, because on those runtimes getState() IS the stored state (as himi-player-home does).
+if ((globalThis as { himalaya?: { hydrationOptOut?: unknown } }).himalaya?.hydrationOptOut !== true) {
+  const live = (svc as { getState?: () => State | undefined }).getState?.();
+  if (live && typeof live === "object") Object.assign(live, hostedBoot);
+}
+
 svc.refresh();
 export { svc };

package/templates/podcast-creator-owner/tier5-src/_shared/home-service.ts

@@ -6,7 +6,7 @@ type State = Record<string, unknown>;
 type Action = (s: State, ...args: unknown[]) => State | undefined | Promise<State | undefined>;
 const record = (x: unknown): State => x && typeof x === 'object' && !Array.isArray(x) ? x as State : {};
 
-export function decorateHome(def: { state: State; actions?: Record<string, Action> }) {
+export function decorateHome(def: { state: State; actions?: Record<string, Action>; notHydrated?: readonly string[] }) {
   let modules: HomeModule[] = [];
   const persisted = localPreferences<Partial<HomePreferences>>('home', value => {
     const v = record(value);
@@ -85,7 +85,8 @@ export function decorateHome(def: { state: State; actions?: Record<string, Actio
   actions.homePin = change(id => { if (modules.some(m => m.id === id)) { prefs.pinned = prefs.pinned.includes(id) ? prefs.pinned.filter(x => x !== id) : [...prefs.pinned, id]; prefs.hidden = prefs.hidden.filter(x => x !== id); } });
   actions.homeMoveUp = change(id => { const index = prefs.order.indexOf(id); if (index > 0) [prefs.order[index - 1], prefs.order[index]] = [prefs.order[index], prefs.order[index - 1]]; });
   actions.homeMoveDown = change(id => { const index = prefs.order.indexOf(id); if (index >= 0 && index < prefs.order.length - 1) [prefs.order[index], prefs.order[index + 1]] = [prefs.order[index + 1], prefs.order[index]]; });
-  return { state: derive(def.state), actions };
+  // Spread first: the rest of the definition (`notHydrated`) must reach the runtime too.
+  return { ...def, state: derive(def.state), actions };
 }
 export const defineService: typeof register = ((name: string, def: ServiceDefinition<unknown>) =>
   register(name, { ...def, ...decorateHome(def as unknown as { state: State; actions?: Record<string, Action> }) })) as typeof register;

package/templates/portfolio-creative/config.ts

@@ -37,7 +37,7 @@ export default defineApp({
     actions: "http://localhost:8190/v1/actions",
     sync: "http://localhost:8190/v1/sync",
   },
-  capabilities: ["live_activity","push","share","secure_storage","open_url","calendar","local_database","wix_api","wix_platform","app_info","iap","release_control","clipboard"],
+  capabilities: ["live_activity","push","share","secure_storage","open_url","calendar","local_database","wix_api","wix_platform","app_info","iap","release_control","clipboard","theme"],
   designTokensPath: "./tokens.json",
   navigation: {
     "navKind": "responsive",