@wix/himalaya-cli 0.1571.0 → 0.1572.0

package/guides/index.json

@@ -296,6 +296,12 @@
       "category": "Wix SDK",
       "file": "one-app-to-himi-app.md"
     },
+    {
+      "id": "recipe-one-app-coverage-mapping",
+      "title": "Recipe: map One App coverage decisions",
+      "category": "Recipes",
+      "file": "recipe-one-app-coverage-mapping.md"
+    },
     {
       "id": "one-app-reference",
       "title": "One App reconstruction references and provenance",
@@ -441,6 +447,7 @@
     "showcaseFile": "stocks-dashboard.descriptor.json"
   },
   "examples": [
+    "map-one-app-coverage.js",
     "counter.service.ts",
     "counter-t5.descriptor.json",
     "stocks-dashboard.descriptor.json",

package/guides/map-one-app-coverage.js

@@ -0,0 +1,117 @@
+// Local reference recipe, not a readiness check. See himi docs recipe-one-app-coverage-mapping.
+import { execFileSync } from "node:child_process";
+import { lstatSync, readFileSync, realpathSync, writeFileSync } from "node:fs";
+import { dirname, resolve } from "node:path";
+import { fileURLToPath } from "node:url";
+
+const object = value => value !== null && typeof value === "object" && !Array.isArray(value);
+const sameTarget = (a, b) => a?.screenId === b?.screenId && a?.controlId === b?.controlId;
+const needsControl = row => row.kind === "interaction" || row.kind === "top-bar";
+
+function idsIn(value, ids = new Set()) {
+  if (Array.isArray(value)) value.forEach(item => idsIn(item, ids));
+  else if (object(value)) {
+    const component = typeof value.body?.type === "string" || (typeof value.type === "string" && object(value.props));
+    if (component && typeof value.id === "string" && !value.id.includes("$")) ids.add(value.id);
+    for (const [key, item] of Object.entries(value)) if (key !== "params" && key !== "metadata") idsIn(item, ids);
+  }
+  return ids;
+}
+
+function controlIds(screen) {
+  const ids = idsIn([screen.payload, screen.stickyHeader, screen.stickyFooter]);
+  for (const action of screen.topBar?.actions ?? []) {
+    if (typeof action.id === "string" && !action.id.includes("$")) ids.add(action.id);
+  }
+  return ids;
+}
+
+/** Inputs are explicit decisions and the full authored descriptor map, with effective top bars. */
+export function mapCoverage(ledger, decisions, screens) {
+  if (ledger?.version !== 1 || ledger.workflow !== "one-app-to-himi-app" || !Array.isArray(ledger.requirements)
+    || !Array.isArray(decisions) || !object(screens)) throw new Error("Expected a coverage ledger, decision array and authored screen map.");
+  const coverage = structuredClone(ledger);
+  const rows = coverage.requirements;
+  if (new Set(rows.map(row => row.id)).size !== rows.length) throw new Error("Duplicate ledger row IDs; run coverage check.");
+  const issues = [];
+  const selected = new Map();
+  const invalidate = row => {
+    row.status = "unresolved";
+    delete row.target;
+    delete row.verification;
+    delete row.adaptation;
+  };
+  const targetProblem = (row, target) => {
+    if (!object(target) || Object.keys(target).some(key => !["screenId", "controlId"].includes(key))) return "Expected only screenId and optional controlId.";
+    if (typeof target.screenId !== "string" || !target.screenId.trim()) return "An explicit target screenId is required.";
+    const screen = Object.hasOwn(screens, target.screenId) && screens[target.screenId];
+    if (!object(screen) || screen.screenId !== target.screenId) return "Target screen is absent from the authored descriptor map.";
+    if (needsControl(row) && (typeof target.controlId !== "string" || !target.controlId.trim())) return "This row requires an explicit controlId.";
+    if (target.controlId !== undefined && !controlIds(screen).has(target.controlId)) return "Target control ID is absent from that screen, including its effective top bar.";
+  };
+  // A removed target cannot retain a passing record merely because no decision mentions it.
+  for (const row of rows) if (row.kind !== "design" && targetProblem(row, row.target)) invalidate(row);
+  for (const [index, decision] of decisions.entries()) {
+    if (!object(decision)) { issues.push({ decision: index, reason: "Expected an explicit row/source decision." }); continue; }
+    const matches = rows.filter(row => typeof decision.id === "string" ? row.id === decision.id
+      : typeof decision.source === "string" && row.source === decision.source && row.kind === decision.kind && row.platform === decision.platform);
+    if (matches.length !== 1) { issues.push({ decision: index, reason: "Unknown or ambiguous row/source; use the exact row ID or kind/source/platform." }); continue; }
+    const row = matches[0];
+    if (row.kind === "design") { issues.push({ decision: index, id: row.id, reason: "Design rows belong to validate-design, not screen mapping." }); continue; }
+    const allowed = typeof decision.id === "string" ? ["id", "target"] : ["source", "kind", "platform", "target"];
+    const problem = Object.keys(decision).some(key => !allowed.includes(key)) ? "Decisions cannot set status, verification, adaptation or other row fields."
+      : targetProblem(row, decision.target);
+    if (selected.has(row.id)) {
+      selected.set(row.id, null);
+      invalidate(row);
+      issues.push({ decision: index, id: row.id, reason: "Duplicate decisions for this row; left unresolved." });
+    } else {
+      selected.set(row.id, problem ? null : decision.target);
+      if (problem) { invalidate(row); issues.push({ decision: index, id: row.id, reason: problem }); }
+    }
+  }
+  for (const [id, target] of selected) {
+    if (!target) continue;
+    const row = rows.find(row => row.id === id);
+    if (!sameTarget(row.target, target)) {
+      invalidate(row);
+      row.target = { ...target };
+    }
+  }
+  return {
+    coverage,
+    issues,
+    unmapped: rows.filter(row => row.kind !== "design" && !row.target).map(({ id, kind, source, platform }) => ({ id, kind, source, ...(platform ? { platform } : {}) })),
+    // Inventory checks cannot validate retained proof against the author's current built release.
+    needsVerification: rows.map(row => row.id),
+  };
+}
+
+export function main(args) {
+  const [content, evidence, decisionsFile, screensFile, ...flags] = args;
+  if (!screensFile || flags.some(flag => flag !== "--write") || flags.length > 1) throw new Error("Usage: node map-one-app-coverage.js <content> <evidence-dir> <decisions.json> <screens.json> [--write]");
+  // Reuse the installed CLI's actual source hashes, derived row IDs and schema checks. No sync/write.
+  execFileSync(process.env.HIMI_BIN ?? "himi", ["one-app", "coverage", "check", "--content", content, "--evidence-dir", evidence, "--json", "--skip-version-check"], { stdio: ["ignore", "pipe", "pipe"] });
+  const ledgerFile = resolve(content, "ONE-APP-COVERAGE.json");
+  if (!lstatSync(ledgerFile).isFile() || lstatSync(ledgerFile).isSymbolicLink()) throw new Error("The ledger must be a regular file.");
+  const read = file => JSON.parse(readFileSync(file, "utf8"));
+  const result = mapCoverage(read(ledgerFile), read(decisionsFile), read(screensFile));
+  if (flags.includes("--write")) {
+    for (let directory = resolve(content);; directory = dirname(directory)) {
+      const stat = lstatSync(directory);
+      if (stat.isSymbolicLink() || !stat.isDirectory()) throw new Error("Use a physical content directory without symlinked parents for --write.");
+      if (directory === dirname(directory)) break;
+    }
+    writeFileSync(ledgerFile, JSON.stringify(result.coverage, null, 2) + "\n");
+  }
+  console.log(JSON.stringify({ ...result, written: flags.includes("--write") }, null, 2));
+  return result.issues.length || result.unmapped.length ? 1 : 0;
+}
+
+if (process.argv[1] && realpathSync(fileURLToPath(import.meta.url)) === realpathSync(process.argv[1])) {
+  try { process.exitCode = main(process.argv.slice(2)); }
+  catch (error) {
+    console.error(JSON.stringify({ ok: false, code: "coverage_mapping_input_invalid", error: error.message }));
+    process.exitCode = 1;
+  }
+}

package/guides/one-app-to-himi-app.md

@@ -136,6 +136,50 @@ Missing or virtual map points stay absent; an address alone is not coordinates.
 If a transient failure makes this read unavailable, the manifest records
 `business_contact_unavailable`. Keep contact coverage unresolved until the data is
 verified, rather than inventing an address or silently omitting the section.
+
+### Native widget defaults
+
+Empty settings do not mean an empty native widget. Coverage derives separate
+`native-widget` obligations for each placement from the runtime checklist below,
+including repeated sections, detached pages and Business Profile placements.
+These are behaviors to compare, not claims that the target implements them.
+The CLI's versioned native-widget inventory supplies these rows automatically.
+
+| Source section type | Effective behavior to verify |
+| --- | --- |
+| `bookings_services_list_section` | Search, category and location filters. |
+| `single_group_feed_section`, `groups_feed_section` | Post actions, attachments, comments/post destination, topic filter and the group's Members / Library / Rules / Media destinations. |
+| `platform_general_contact_section`, `platform_general_contact_section_bp` | Business address and map, respecting authored visibility and available coordinates. |
+| `achievements_list_section` | Category filter, including All Categories with no categories; actual visitor/member login, access/join/payment/Continue states; participants line; default limit 2 and See All when applicable. |
+| `achievements_carousel_section` | The same Program state/display rules, default limit 5 and page dots. |
+| `newBlog_postlist_vertical_section` | See All Posts when a limited list has more results, preserving its scope. |
+| `events_list_section` | Date badge, Share and the appropriate RSVP/ticket action. |
+| `platform_general_members_section`, `platform_general_members_section_bp` | Effective member strip and directory journey: totals/search, alphabetical sections, Follow, activity/privacy. Distinguish badge chips from actual viewed-member program progress. |
+
+This initial checklist comes from reported native source-device observations
+on 2026-11-02 across two migrations, not editor demo records.
+Program settings are also backed by the pinned
+[Program section implementation](https://github.com/wix-private/wix-one-app-achievements/tree/f844eee1fe7cc7732531c3deaa7dca777e53c548/sections "audience-lint-ok: optional pinned upstream evidence, not a local authoring dependency").
+Its absent category selection means All/future categories; explicit empty selection
+means none. MANUAL order prioritizes selected IDs without excluding other records.
+Use current collected settings and source-device behavior to resolve each instance.
+An explicit disable/override is source evidence: faithfully preserving it requires
+no adaptation waiver, and this checklist must not force the disabled control on.
+Data/access-dependent controls need the relevant source state; never fabricate
+participants or derive program completion from a badge title.
+
+The table is not exhaustive. Other section types get an explicit unverified-defaults
+obligation; inventory their effective source behavior rather than assuming there
+are no defaults. Changing the behavior contract creates new requirement identities.
+Recollection invalidates status/check evidence while preserving unchanged mappings.
+
+Compare every tab in the actual Player or Branded Lite host with the source app
+on device and live data under the same site and visitor/member identity. The editor
+can show demo members/badges or blank verticals; editor-only observations remain
+unverified. Until missing behavior is implemented, retain an honest unresolved,
+conditional or explicitly authorized adapted row. Do not mark it supported merely
+because its placement exists.
+
 `business-context.json.memberCount` preserves a valid Business aggregate
 `members.count` when available. For source `platform_general_members_section` or
 `platform_general_members_section_bp` widgets, collection instead reads the
@@ -235,10 +279,30 @@ Apply these interpretation rules:
   because a missing scheme falls back to the light value. Rebuild after `--fix`.
   For Branded apps, known source typography IDs (for example `lato`) become family
   names (`Lato`); tokens whose names contain title/heading/headline/display/hero use the heading family; other
-  typography tokens use the body family. Numeric metrics stay unchanged. Unknown IDs,
-  families outside the Himi font catalog, and missing target typography roles remain unresolved; resolve them before recording
-  a pass, even when the coverage ledger cites an adaptation. A deliberate difference
-  between resolved font roles can still be adapted. Build/font validation still has
+  typography tokens use the body family. Numeric metrics stay unchanged. Read each
+  source heading/body family and check `himi fonts list`; use `himi fonts add <Family>`
+  when it is available. A known source family that Himi does not ship (for example
+  `spaceGrotesk` → Space Grotesk) is still compared with the actual target family.
+  Choose an available replacement, such as `$system`, only with the owner's explicit
+  instruction; this is an adaptation, never a font match. Sync the coverage ledger
+  against the current source evidence, then mark the corresponding `design` requirement
+  `adapted` with `adaptation.instruction` citing that instruction and
+  `adaptation.explanation` naming the source, replacement and reason. Bind a base font decision
+  to the exact reported `target` string in `adaptation.target` (for example,
+  `"body: $system, caption: $system"`); a later replacement requires a new decision.
+  When an active idiom changes the font, name it in `adaptation.idioms` and copy its
+  reported target into `adaptation.idiomTargets[idiom]`. An overlay that keeps the base
+  fonts needs no separate font approval. When the base already matches, an idiom-only
+  decision needs only `idioms` and `idiomTargets`, without a base `target`.
+  Rerun `himi one-app validate-design` to produce
+  the source-to-target report; without that adaptation the difference fails the check.
+  `--fix` imports supported source families but never chooses a fallback or writes
+  an unavailable family. Unknown source IDs, unsupported target families and missing
+  or invalid target typography metrics remain unresolved even with an adaptation.
+  Omitted families also remain unresolved: renderer defaults differ across surfaces;
+  author `$system` explicitly when that is the approved replacement. `--fix` may fill
+  omitted families from a supported source while preserving valid numeric metrics.
+  Build/font validation still has
   to prove the font bytes are available. Unresolved fonts and contrast also fail
   the plain check used by push, not only `--record`.
   Branded accent text must reach 4.5:1: `textOnAccent` against the fill, and `accentText` against the target page and declared neutral
@@ -578,9 +642,10 @@ Run `himi one-app coverage init --evidence-dir .himi/one-app --content .` to
 create `ONE-APP-COVERAGE.json` from the verified source graph. After edits or a
 CLI upgrade, run `coverage sync` and review new rows; `coverage check` fails when
 the file is absent or source requirements have appeared, disappeared or changed.
-Rows cover source graph warnings and app-wide design values as well as routes and
+Rows cover native widget behavior, source graph warnings and app-wide design values as well as routes and
 controls. This is an inventory of migration obligations, not proof that their target
-actions work.
+actions work. For explicit batch target decisions without inventing verification, use the
+[executable ledger mapping recipe](https://apps.wix.com/_api/himi-serve/docs/recipe-one-app-coverage-mapping.md).
 
 Preserve the existing app mark after scaffolding: run `himi icon from-one-app
 --content . --evidence-dir .himi/one-app`. This reads the hash-verified collected
@@ -602,7 +667,7 @@ satisfied by the design check instead. Set its `status` to `supported`, `adapted
 `unresolved`. For an adaptation, cite the user's instruction and explain the
 change. Each resolved row needs a `verification` record using the required check
 ID for its kind (`route-walkthrough`, `visual-comparison`, `behavior-crawl`,
-`topbar-control`, `access-state`, `design-token`, or `source-resolution`), a safe relative path to
+`topbar-control`, `access-state`, `design-token`, `source-resolution`, or `native-widget-behavior`), a safe relative path to
 a JSON check record, and the exact release payload SHA-256 in `releaseHash`.
 The JSON file's `checks[]` must contain a passed record with that requirement ID,
 check ID, release hash, target mapping, and a relative `artifact` path to the
@@ -638,6 +703,21 @@ For example, one entry in the referenced JSON file is:
 The artifact must exist. Review the actual route and state shown in it before
 recording a pass; a valid record is an index to the check, not a substitute for it.
 
+For a `native-widget` row use `check: "native-widget-behavior"` and include
+`sourceBaseline` and `targetContext` in that check record. For example:
+
+```json
+{"checks":[{"requirementId":"<widget-row-id>","check":"native-widget-behavior","releaseHash":"<64-hex-sha256>","status":"passed","target":{"screenId":"home"},"artifact":".himi/one-app/device/target.png","sourceBaseline":{"kind":"native-device","artifact":".himi/one-app/device/source.png","siteId":"<same-site-id>","identityContext":"visitor-session-1"},"targetContext":{"siteId":"<same-site-id>","identityContext":"visitor-session-1"}}]}
+```
+
+`identityContext` is a private, opaque label for the compared identity, never a
+credential, email address or session token. Both artifacts must be local safe
+relative paths. The check rejects editor baselines and mismatched site/identity
+labels. It checks record consistency; it cannot establish that screenshots are
+authentic or that the observed behavior matches them. Review the artifacts and
+exercise each effective control, including authored overrides and access states.
+This comparison does not replace the QA APK/native proof below.
+
 After publishing a draft, build a QA APK pinned to that draft release with
 `himi dist --platform android --release <draft-id> --allow-draft`. Install
 and walk through every requirement on the device. Save

package/guides/recipe-one-app-coverage-mapping.md

@@ -0,0 +1,74 @@
+# Recipe: map a One App coverage ledger
+
+Use explicit reconstruction decisions to map a large `ONE-APP-COVERAGE.json` without
+rewriting its source-derived IDs. This recipe only assigns targets. It never records a
+passed check, chooses a customer route, or makes an unresolved requirement supported.
+
+Run the existing coverage commands first:
+
+```sh
+himi one-app coverage init --evidence-dir .himi/one-app --content .
+# After source recollection or a CLI upgrade, use coverage sync and review its changes.
+himi one-app coverage check --evidence-dir .himi/one-app --content .
+```
+
+The runnable example is installed by `himi init` and refreshed by `himi agent-init` at
+`.agents/skills/himalaya/examples/map-one-app-coverage.js`. It uses the installed
+`himi one-app coverage check` before reading the ledger, so stale hashes, invented rows
+and changed source requirements refuse the operation. It does not execute app workers
+or call Wix. Keep decisions, descriptors and reports under `.himi/`.
+
+Write `.himi/one-app/mapping-decisions.json` as an array. Select each row by its exact
+`id`, or by exact `kind`, JSON-pointer `source`, and `platform` when present:
+
+```json
+[
+  { "kind": "route", "source": "/screens/source_home", "target": { "screenId": "home" } },
+  { "id": "<interaction-row-id-from-the-ledger>", "target": { "screenId": "home", "controlId": "view_products" } }
+]
+```
+
+Copy source pointers and IDs from the ledger; do not derive them from labels, row
+positions, or guessed routes. An ambiguous source selector requires the row ID. Each
+decision may set only its target, never status, adaptation or verification. A `design`
+row is app-wide and belongs to `validate-design`; leave it out of mapping decisions.
+
+Generate `.himi/one-app/mapping-screens.json` from the **same authored descriptor data**
+used by the app generator: `{ "home": { "screenId": "home", "payload": { … } }, … }`.
+Include every authored screen and each screen's effective top bar (its override or the
+actual `navigation.topBarDefault`). Serialize builders at generation time. Do not
+invent a screen/control inventory to make a decision pass. Missing or dynamically
+unresolved IDs stay unmapped. Control-ID presence is only an identity check; a real
+interaction or top-bar check must still prove the behavior.
+
+Inspect a dry run first, then write the reviewed mappings:
+
+```sh
+node .agents/skills/himalaya/examples/map-one-app-coverage.js \
+  . .himi/one-app .himi/one-app/mapping-decisions.json .himi/one-app/mapping-screens.json \
+  > .himi/one-app/mapping-review.json
+# Review coverage, issues, unmapped and needsVerification in that JSON.
+node .agents/skills/himalaya/examples/map-one-app-coverage.js \
+  . .himi/one-app .himi/one-app/mapping-decisions.json .himi/one-app/mapping-screens.json --write
+himi one-app coverage check --evidence-dir .himi/one-app --content .
+himi one-app validate-topbar --evidence-dir .himi/one-app --content .
+```
+
+For `--write`, use the physical app directory, without symlinked parent directories;
+the ledger itself must also be a regular file. Running the installed script through a
+symlink is supported. Without `--write` the ledger is unchanged. Exit 1 means there are invalid decisions or
+unmapped rows; the JSON lists them. With `--write`, valid decisions are retained while
+unknown targets, missing controls and duplicate decisions leave their rows unresolved.
+An unknown source/row creates no requirement and is reported in `issues`.
+
+A changed mapping loses its old verification and adaptation and becomes `unresolved`.
+An unchanged mapping retains its existing evidence; unrelated valid rows, IDs and source
+hashes are preserved. A target removed from the authored map also loses its old evidence.
+`needsVerification` lists every row: this recipe cannot validate retained proof against
+the current built release. Use `coverage verify --release-hash <sha256>` with the real
+release hash to check it, including unchanged mappings and previously saved records.
+Mapping output is not a readiness verdict. Decide supported/adapted/conditional status
+only after implementing and testing the corresponding behavior, with the required
+artifact and exact release hash. Run `validate-design --fix`, rebuild, then record the
+final design/UX/coverage evidence before pushing; repeat affected records after content
+changes. The main migration guide defines those checks and their limitations.

package/guides/sdk-reference.json

@@ -23606,6 +23606,12 @@
         "jsdoc": "/** List the signed-in member's notifications, newest first. MOBILE channel. */",
         "decl": "export async function queryNotifications(limit = 25, options?: WixCallOptions): Promise<MfvNotification[]>;"
       },
+      {
+        "name": "countUnseenNotifications",
+        "kind": "function",
+        "jsdoc": "/** Source member-app MOBILE/UNSEEN aggregate, capped at 100. Requires a bound\n * single-site Member transport; old native binaries and web reject. A missing,\n * malformed or failed result is unavailable, never an authoritative zero. */",
+        "decl": "export async function countUnseenNotifications(options: { site: string }): Promise<number>;"
+      },
       {
         "name": "markRead",
         "kind": "function",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@wix/himalaya-cli",
-  "version": "0.1571.0",
+  "version": "0.1572.0",
   "type": "module",
   "description": "himi — the Himalaya authoring CLI. Build a Tier-5 content package on your own machine, push it to the production serve as a draft, preview it on web + Himi Player, and read worker logs back — the remote dev loop. Wraps @himalaya/serve-cli for transport.",
   "keywords": [
@@ -71,5 +71,5 @@
       "artifactId": "himalaya-cli"
     }
   },
-  "falconPackageHash": "fec01235dfeb9ac45a855684328263dcff0fa8e5ecf05db7d6e9b9da"
+  "falconPackageHash": "20229381643935ec0f9390addc404f459d7040e7dfd5b634ab41385c"
 }

package/templates/beauty-salon-owner/dev/index.ts

@@ -52829,8 +52829,7 @@ const SCREENS = runtimeSetting({
                   "params": {
                     "screenId": "himi_owner_lite_search",
                     "title": "Search records",
-                    "subtitle": "Across your business areas",
-                    "search": "drawer"
+                    "subtitle": "Across your business areas"
                   }
                 },
                 "pressFeedback": "scale",
@@ -54349,7 +54348,7 @@ const SCREENS = runtimeSetting({
           "actionId": "tier5.himiOwnerLiteSearch.search"
         },
         "debounceMs": 200,
-        "placement": "drawer"
+        "loadingPath": "$service:himiOwnerLiteSearch.anyLoading"
       }
     }
   },

package/templates/branded-lite/tier5-src/himi-branded-lite-programs/index.ts

@@ -112,13 +112,10 @@ function programFields(p: WixProgram): Omit<ProgramRow, "priceLine"> {
     initial: initials(name),
     hasImage: !!image,
     noImage: !image,
-    // The row also binds `id` as a nav param, which `currentInputId` prefers — but no
-    // shell threads that param into worker `input.id` yet, so a param-less target left
-    // the detail worker with no id and its Enrol CTA dead on arrival. Same fix (and same
-    // reasoning) as the events row: bake the id, which the app's own
-    // liveSeedRoute({ prefix: "himi_program_" }) already seeds and `currentInputId`
-    // resolves through its prefix path.
-    detailScreenId: `himi_program_${id}`,
+    // The canonical route is baked even offline. Hosts pass the row's `id` as
+    // worker input (WS-C); suffixed routes only exist for the preview seed's
+    // first 50 records and cannot open a complete live catalog in production.
+    detailScreenId: "himi_program",
   };
 }
 
@@ -157,9 +154,29 @@ function errored(state: State): State {
   };
 }
 
-async function fetchPrograms(): Promise<WixProgram[]> {
-  const response = await queryPrograms({ cursorPaging: { limit: 50 } });
-  return (response.programs ?? []).filter((p) => !isDraft(p));
+async function fetchPrograms(isCurrent: () => boolean): Promise<WixProgram[] | undefined> {
+  const programs = new Map<string, WixProgram>();
+  const seen = new Set<string>();
+  let cursor = "";
+  do {
+    // Wix cursors carry the initial sort/filter. Repeating either on a continuation
+    // is rejected with INVALID_CURSOR, even when their values have not changed.
+    const response = await queryPrograms(cursor
+      ? { cursorPaging: { limit: 50, cursor } }
+      : { cursorPaging: { limit: 50 }, sort: [{ fieldName: "createdDate", order: "DESC" }] });
+    if (!isCurrent()) return undefined;
+    for (const program of response.programs ?? []) {
+      if (program.id && !isDraft(program)) programs.set(program.id, program);
+    }
+    const paging = response.pagingMetadata;
+    const next = paging?.hasNext === false ? "" : paging?.cursors?.next ?? "";
+    if ((paging?.hasNext && !next) || (next && seen.has(next))) {
+      throw new Error("Invalid program catalog cursor");
+    }
+    if (next) seen.add(next);
+    cursor = next;
+  } while (cursor);
+  return [...programs.values()];
 }
 
 // ── Content and App Store prices ─────
@@ -180,7 +197,7 @@ let loadSeq = 0;
 async function load(_state: State, arg?: unknown): Promise<undefined> {
   stashCopy(arg);
   const seq = ++loadSeq;
-  const programs = await fetchPrograms().catch(() => undefined);
+  const programs = await fetchPrograms(() => seq === loadSeq).catch(() => undefined);
   if (seq !== loadSeq) return undefined;
   content = programs ? { status: "ready", programs: programs.map(programContent) } : { ...content, status: "error" };
   void svc.pricingPublish();

package/templates/community-club-owner/dev/index.ts

@@ -52829,8 +52829,7 @@ const SCREENS = runtimeSetting({
                   "params": {
                     "screenId": "himi_owner_lite_search",
                     "title": "Search records",
-                    "subtitle": "Across your business areas",
-                    "search": "drawer"
+                    "subtitle": "Across your business areas"
                   }
                 },
                 "pressFeedback": "scale",
@@ -54349,7 +54348,7 @@ const SCREENS = runtimeSetting({
           "actionId": "tier5.himiOwnerLiteSearch.search"
         },
         "debounceMs": 200,
-        "placement": "drawer"
+        "loadingPath": "$service:himiOwnerLiteSearch.anyLoading"
       }
     }
   },

package/templates/events-meetups-owner/dev/index.ts

@@ -52446,8 +52446,7 @@ const SCREENS = runtimeSetting({
                   "params": {
                     "screenId": "himi_owner_lite_search",
                     "title": "Search records",
-                    "subtitle": "Across your business areas",
-                    "search": "drawer"
+                    "subtitle": "Across your business areas"
                   }
                 },
                 "pressFeedback": "scale",
@@ -53966,7 +53965,7 @@ const SCREENS = runtimeSetting({
           "actionId": "tier5.himiOwnerLiteSearch.search"
         },
         "debounceMs": 200,
-        "placement": "drawer"
+        "loadingPath": "$service:himiOwnerLiteSearch.anyLoading"
       }
     }
   },

package/templates/gym-fitness-owner/dev/index.ts

@@ -52905,8 +52905,7 @@ const SCREENS = runtimeSetting({
                   "params": {
                     "screenId": "himi_owner_lite_search",
                     "title": "Search records",
-                    "subtitle": "Across your business areas",
-                    "search": "drawer"
+                    "subtitle": "Across your business areas"
                   }
                 },
                 "pressFeedback": "scale",
@@ -54425,7 +54424,7 @@ const SCREENS = runtimeSetting({
           "actionId": "tier5.himiOwnerLiteSearch.search"
         },
         "debounceMs": 200,
-        "placement": "drawer"
+        "loadingPath": "$service:himiOwnerLiteSearch.anyLoading"
       }
     }
   },

package/templates/nonprofit-cause-owner/dev/index.ts

@@ -52522,8 +52522,7 @@ const SCREENS = runtimeSetting({
                   "params": {
                     "screenId": "himi_owner_lite_search",
                     "title": "Search records",
-                    "subtitle": "Across your business areas",
-                    "search": "drawer"
+                    "subtitle": "Across your business areas"
                   }
                 },
                 "pressFeedback": "scale",
@@ -54042,7 +54041,7 @@ const SCREENS = runtimeSetting({
           "actionId": "tier5.himiOwnerLiteSearch.search"
         },
         "debounceMs": 200,
-        "placement": "drawer"
+        "loadingPath": "$service:himiOwnerLiteSearch.anyLoading"
       }
     }
   },

package/templates/owner-lite/dev/index.ts

@@ -52904,8 +52904,7 @@ const SCREENS = runtimeSetting({
                   "params": {
                     "screenId": "himi_owner_lite_search",
                     "title": "Search records",
-                    "subtitle": "Across your business areas",
-                    "search": "drawer"
+                    "subtitle": "Across your business areas"
                   }
                 },
                 "pressFeedback": "scale",
@@ -54422,7 +54421,7 @@ const SCREENS = runtimeSetting({
           "actionId": "tier5.himiOwnerLiteSearch.search"
         },
         "debounceMs": 200,
-        "placement": "drawer"
+        "loadingPath": "$service:himiOwnerLiteSearch.anyLoading"
       }
     }
   },

package/templates/podcast-creator-owner/dev/index.ts

@@ -52829,8 +52829,7 @@ const SCREENS = runtimeSetting({
                   "params": {
                     "screenId": "himi_owner_lite_search",
                     "title": "Search records",
-                    "subtitle": "Across your business areas",
-                    "search": "drawer"
+                    "subtitle": "Across your business areas"
                   }
                 },
                 "pressFeedback": "scale",
@@ -54349,7 +54348,7 @@ const SCREENS = runtimeSetting({
           "actionId": "tier5.himiOwnerLiteSearch.search"
         },
         "debounceMs": 200,
-        "placement": "drawer"
+        "loadingPath": "$service:himiOwnerLiteSearch.anyLoading"
       }
     }
   },

package/templates/portfolio-creative-owner/dev/index.ts

@@ -52829,8 +52829,7 @@ const SCREENS = runtimeSetting({
                   "params": {
                     "screenId": "himi_owner_lite_search",
                     "title": "Search records",
-                    "subtitle": "Across your business areas",
-                    "search": "drawer"
+                    "subtitle": "Across your business areas"
                   }
                 },
                 "pressFeedback": "scale",
@@ -54349,7 +54348,7 @@ const SCREENS = runtimeSetting({
           "actionId": "tier5.himiOwnerLiteSearch.search"
         },
         "debounceMs": 200,
-        "placement": "drawer"
+        "loadingPath": "$service:himiOwnerLiteSearch.anyLoading"
       }
     }
   },

package/templates/restaurant-owner/dev/index.ts

@@ -52905,8 +52905,7 @@ const SCREENS = runtimeSetting({
                   "params": {
                     "screenId": "himi_owner_lite_search",
                     "title": "Search records",
-                    "subtitle": "Across your business areas",
-                    "search": "drawer"
+                    "subtitle": "Across your business areas"
                   }
                 },
                 "pressFeedback": "scale",
@@ -54425,7 +54424,7 @@ const SCREENS = runtimeSetting({
           "actionId": "tier5.himiOwnerLiteSearch.search"
         },
         "debounceMs": 200,
-        "placement": "drawer"
+        "loadingPath": "$service:himiOwnerLiteSearch.anyLoading"
       }
     }
   },

package/templates/retail-store-owner/dev/index.ts

@@ -52741,8 +52741,7 @@ const SCREENS = runtimeSetting({
                   "params": {
                     "screenId": "himi_owner_lite_search",
                     "title": "Search records",
-                    "subtitle": "Across your business areas",
-                    "search": "drawer"
+                    "subtitle": "Across your business areas"
                   }
                 },
                 "pressFeedback": "scale",
@@ -54261,7 +54260,7 @@ const SCREENS = runtimeSetting({
           "actionId": "tier5.himiOwnerLiteSearch.search"
         },
         "debounceMs": 200,
-        "placement": "drawer"
+        "loadingPath": "$service:himiOwnerLiteSearch.anyLoading"
       }
     }
   },