@wix/himalaya-cli 0.1576.0 → 0.1578.0

package/fixtures/wix-canned.json

@@ -528,6 +528,59 @@
       "total": 0
     }
   },
+  "POST /online-programs/v3/participants/query": {
+    "participants": [
+      {
+        "id": "part-0001",
+        "programId": "prog-0001",
+        "memberId": "mem-0001",
+        "enrollmentStatus": "JOINED",
+        "progressStatus": "IN_PROGRESS",
+        "createdDate": "2026-10-01T09:00:00.000Z",
+        "progress": {
+          "totalStepsCompleted": 12,
+          "totalStepsAvailable": 30,
+          "completionPercentage": 40
+        }
+      }
+    ],
+    "pagingMetadata": {
+      "count": 1,
+      "cursors": {
+        "next": null
+      }
+    }
+  },
+  "POST /online-programs/v3/participants/stats": {
+    "participationStats": [
+      {
+        "programId": "prog-0001",
+        "participantsCount": 18
+      },
+      {
+        "programId": "prog-0002",
+        "participantsCount": 7
+      }
+    ]
+  },
+  "GET /_api/program-categories-service/v3/categories": {
+    "categories": [
+      {
+        "id": "cat-0001",
+        "label": "Brewing",
+        "assignedTo": [
+          "prog-0001"
+        ]
+      },
+      {
+        "id": "cat-0002",
+        "label": "Roasting",
+        "assignedTo": [
+          "prog-0002"
+        ]
+      }
+    ]
+  },
   "POST /online-programs/v3/programs/query": {
     "programs": [
       {
@@ -954,17 +1007,17 @@
       "total": 2
     }
   },
-  "GET /loyalty/v1/program": {
+  "GET /loyalty-programs/v1/program": {
     "loyaltyProgram": {
       "name": "Roastery Rewards",
       "status": "ACTIVE",
       "pointDefinition": {
         "customName": "beans",
-        "icon": "STAR"
+        "icon": { "url": "fixture-star.svg" }
       }
     }
   },
-  "GET /loyalty/v1/rewards": {
+  "GET /loyalty-rewards/v1/rewards": {
     "rewards": [
       {
         "id": "rw-0001",

package/guides/one-app-section-mappings.md

@@ -47,7 +47,7 @@ The **Himalaya implementation** cell is blank for every unassigned row. Notes on
 
 | Source sectionDefinitionId | Source viewer component | Himalaya implementation | Placement / reuse | Class | Settings, actions and gaps |
 | --- | --- | --- | --- | --- | --- |
-| `achievements_list_section` | `wix-one-app-achievements.SectionMemberChallengesScreen` | [Programs list/detail](https://github.com/wix-private/himalaya/blob/97f1542f2f7d6e8cb7a902b912c87dcaa37e5a67/apps/himi-branded-lite/dev/index.ts) + [programs worker](https://github.com/wix-private/himalaya/blob/97f1542f2f7d6e8cb7a902b912c87dcaa37e5a67/core/dev-server/tier5-bundles-src/himi-branded-lite-programs/index.ts "audience-lint-ok: optional pinned upstream evidence, not a local authoring dependency") | Existing base; adaptation needed | Partial | Reuse Online Programs catalog/enrolment logic; the program-detail worker explicitly identifies the legacy CHALLENGES app ID. Translate the section selection and source extraProps.limit=2; inline composition is still required. |
+| `achievements_list_section` | `wix-one-app-achievements.SectionMemberChallengesScreen` | [Programs list/detail](https://github.com/wix-private/himalaya/blob/97f1542f2f7d6e8cb7a902b912c87dcaa37e5a67/apps/himi-branded-lite/dev/index.ts) + [programs worker](https://github.com/wix-private/himalaya/blob/97f1542f2f7d6e8cb7a902b912c87dcaa37e5a67/core/dev-server/tier5-bundles-src/himi-branded-lite-programs/index.ts "audience-lint-ok: optional pinned upstream evidence, not a local authoring dependency") | Existing base; member list added | Partial | `himi_member_programs` (worker `himi-branded-lite-member-programs`) is the member list: each card carries the signed-in member's standing from Participants v3 / Join Applications v3 (Joined, Program complete, Program ended, Pending request, Request approved, Invited, Participation suspended), a progress bar once started, the price before joining, the "All programs / Programs I joined" and category filters, cursor paging and pull-to-refresh; an ended program the member never joined is dropped. Still open: the 2-card section mode with "See all" (`extraProps.limit=2`, inline composition), join / cancel-request actions on the card itself (the card opens the program, which owns them), and Pricing Plans benefits ("Included in your plan"). |
 | `achievements_carousel_section` | `wix-one-app-achievements.MemberChallengesCarousel` | [Programs data/detail](https://github.com/wix-private/himalaya/blob/97f1542f2f7d6e8cb7a902b912c87dcaa37e5a67/core/dev-server/tier5-bundles-src/himi-branded-lite-programs/index.ts "audience-lint-ok: optional pinned upstream evidence, not a local authoring dependency") + [Core Carousel](https://github.com/wix-private/himalaya/blob/97f1542f2f7d6e8cb7a902b912c87dcaa37e5a67/core/dev-server/src/builder.ts "audience-lint-ok: optional pinned upstream evidence, not a local authoring dependency") | Existing base; adaptation needed | Partial | Reuse the Programs feature and compose a carousel; preserve source extraProps.limit=5 and selected programs. No ready-made legacy Challenges carousel adapter is claimed. |
 | `achievements_participant_carousel_section` | `wix-one-app-achievements.ParticipantChallengesCarousel` |  |  | Empty | The public Programs catalog is not a member-participating-programs carousel. No verified consumer participant/progress list implementation was found. |
 

package/guides/one-app-to-himi-app.md

@@ -255,7 +255,10 @@ Apply these interpretation rules:
   bar that cannot be inspected is reported as unverified. The maintained `inviteAction`
   builder is recognized; its conditional ID and hidden binding must also appear in
   `topBarDefault.actions` with a configured `navLogicBundle`, even when the screen
-  overrides its bar. A screen-only binding is not subscribed. Platform definitions establish
+  overrides its bar. Observer/listener badges require live count bindings with
+  matching action IDs/value paths in the nav default and an accessible label.
+  Static counts cannot stand in for unavailable source data. A screen-only
+  binding is not subscribed. Platform definitions establish
   a feature to account for; they do not alone prove visibility or access for every
   visitor or member. Resolve those rules separately. This check is specific to this
   migration workflow; it does not change the behavior of `himi validate`.
@@ -446,6 +449,52 @@ Apply these interpretation rules:
   shared. No invitation is created while migrating or just loading the screen.
   Source Invite produces an `interaction` coverage row requiring behavioral proof;
   unresolved transport or permissions remain gaps, never silent omission.
+- **Preserve source badge behavior.** Collected button definitions retain
+  `badgeObserverId`, `badgeListenerId` and `showBadgeOnVisitorMode`. Keep the
+  counter's actual site/member/shopper scope and visitor policy; the source's
+  ordinary observer/listener button defaults to member-only observation when the
+  visitor flag is absent. Coverage inventories these counters as separate
+  behavioral obligations for raw, iOS and Android definitions. It also inventories
+  custom-component behavior: a custom component can own a counter internally,
+  without observer/listener fields. Do not infer a count badge for every custom
+  component. Inspect its implementation and retain unknown behavior as unresolved.
+
+  Use a live `badge: { kind: "count", valuePath: "$service:sourceBadges.count" }`
+  only after implementing the actual source counter. Preserve the source button
+  ID, or map its current `top-bar` coverage row to the target `screenId` and
+  `controlId` when renaming it. A sibling action's badge cannot satisfy that row;
+  changed source definitions invalidate the mapping. Declare the same action ID
+  and value path in `navigation.topBarDefault.actions` and any complete screen
+  override, with `navLogicBundle`. Action IDs must be unique in each bar; distinct
+  source counters need distinct target actions within each source platform. Both
+  actions need their own tap handler and accessible label. Do not supply a static
+  `value` as a fallback. The top-bar check establishes inspectable wiring, not
+  the counter's data source, availability, refresh, permission or accessibility
+  behavior. A configured worker URL alone proves none of those.
+
+  Keep a successful zero as `0` and unavailable as `null`; verify positive, zero,
+  failed/missing reads and source/site/account replacement, including a delayed
+  response from the previous identity. Verify badge visibility and screen-reader
+  output against the source. A persistent nav worker needs a supported refresh
+  path; a screen-only load, page-row count or foreground push receipt count is
+  insufficient. The source Member notification aggregate is MOBILE/UNSEEN, capped
+  at100. `countUnseenNotifications({ site: boundMetaSiteId })` reads that aggregate
+  through the source Member route. It requires the updated native core, rebuilt
+  consuming binaries and published SDK; default web and old binaries remain
+  unavailable for this reader. Never replace that refusal with zero.
+  Chat counts unread rooms, while legacy cart counters can include unsynced local
+  quantities; a different shopper's or headless cart's zero is not a substitute.
+  If the source reader/refresh path is unverified, leave that badge unresolved.
+  Changing a button definition or its visitor policy invalidates its previous
+  coverage mapping and requires new behavioral evidence. `coverage sync` replaces
+  changed or moved header rows for the same source button within its bar with
+  unmapped rows. A one-to-one change between an observer/listener badge and a
+  custom component is a replacement. A different button at an old index, or a
+  remaining custom behavior after its explicit badge is removed, cannot hide a
+  removal. Older ledger rows without stable `sourceButtonId` metadata require
+  explicit reconciliation when changed; syncing unchanged evidence adds that
+  metadata. Removing a button or behavior without a replacement still requires
+  explicit ledger reconciliation.
 - Verify the migrated app's native top bar, bottom tabs, back navigation and
   configured actions on the affected devices, including RTL. A web screenshot
   alone does not prove native navigation or control availability. Record any

package/guides/qa-builds.md

@@ -1210,12 +1210,20 @@ himi dist --app <app> --platform android --aab --wait --target bo
   a bundle id saved in between is refused and stays changeable). The owner must already have the app
   in App Store Connect under that bundle id. The files
   and the key are never stored: the pool and the upload each fetch them again, the job keeps only
-  their hashes. The upload runs on the first status read after the pool validated the IPA; any read
-  the caller may make of the app moves it on, since the owner was proven when the build started (the
-  Containers server's reads carry a project token, not the owner's Wix login). So a caller keeps
-  reading the job until `customerAppStore.status` is `UPLOADED` or `FAILED`, not only until the job
-  is `SUCCESS`: a read that stops early, or gives up mid-upload, leaves the IPA waiting (a claimed
-  upload is retried by a read 15 minutes later).
+  their hashes. The upload starts on its own once the pool reports the validated IPA: the pool's
+  callback starts it in the background, and so does every list read of the app's builds (the owner
+  card's poll) while it can be claimed, which also picks up one a stopped serve pod left. A status
+  read still uploads too; any read the caller may make of the app moves it on, since the owner was
+  proven when the build started (the Containers server's reads carry a project token, not the
+  owner's Wix login). A caller reads the job until `customerAppStore.status` is `UPLOADED` or
+  `FAILED` to learn how it ended; it no longer has to read for the upload to happen. An attempt that
+  fails on a passing error (a 429 or 5xx from mobile-apps-containers-builder or Apple, a timeout, a
+  download that broke off) goes back to `READY_FOR_UPLOAD` with `failedAttempts`, `retryAt` and
+  `lastError`, and is tried again 1, 5 and 15 minutes later. The 4th failed attempt (an attempt
+  whose 15-minute lease ran out counts as one) and any error the owner must fix (no app in App Store
+  Connect, a refused key, a closed version) end `FAILED`, with `error`. When the IPA's 7-day link is
+  within an hour of lapsing, the upload signs a fresh one from the stored bucket and key (the plane's
+  `DIST_ARTIFACT_AWS_*` key pair; without it, the recorded link).
   Refusals, each with `code` equal to `error`: `store_build_ios_only`, `store_build_version_invalid`
   and `store_build_shell_unsupported` 400, `store_build_site_forbidden` 403, `store_id_missing`,
   `store_app_site_taken`, `release_predates_store_builds`, `apple_credentials_missing`,

package/guides/sdk-reference.json

@@ -1017,6 +1017,12 @@
     "source": "core/sdk/clipboard/src/index.ts",
     "description": "Tier-5 typed binding for the system clipboard.",
     "api": [
+      {
+        "name": "\"@himalaya/sdk-types\"",
+        "kind": "reexport",
+        "jsdoc": "",
+        "decl": "export type { FileHandle } from \"@himalaya/sdk-types\";"
+      },
       {
         "name": "writeText",
         "kind": "function",
@@ -1035,11 +1041,59 @@
         "jsdoc": "/** Whether the clipboard holds text — no content access, no iOS paste banner. On\n *  web this can't be known without reading, so it returns true pessimistically;\n *  treat it as a hint, not a guarantee. */",
         "decl": "export async function hasText(): Promise<boolean>;"
       },
+      {
+        "name": "MAX_IMAGE_BYTES",
+        "kind": "const",
+        "jsdoc": "/** Largest image writeImage accepts (20 MB). Hosts enforce it too. */",
+        "decl": "export const MAX_IMAGE_BYTES = 20 * 1024 * 1024;"
+      },
+      {
+        "name": "IMAGE_MIME_TYPES",
+        "kind": "const",
+        "jsdoc": "/** Image MIME types writeImage copies. HEIC is iOS/macOS only (Android and web\n *  reject it `unsupported_type`); web accepts PNG only. The host sniffs the file's\n *  bytes, so a handle is judged by its content, not its `mimeType` — the binding only\n *  refuses up front a handle whose type is plainly not an image (e.g. application/pdf). */",
+        "decl": "export const IMAGE_MIME_TYPES: readonly string[] = [\"image/png\", \"image/jpeg\", \"image/webp\", \"image/heic\"];"
+      },
+      {
+        "name": "ClipboardImageErrorCode",
+        "kind": "type",
+        "jsdoc": "/** Why writeImage rejected. */",
+        "decl": "export type ClipboardImageErrorCode = \"unsupported_type\" | \"too_large\" | \"not_allowed\" | \"not_found\" | \"unavailable\";"
+      },
+      {
+        "name": "ClipboardImageError",
+        "kind": "interface",
+        "jsdoc": "/** A writeImage rejection: an `Error` named \"ClipboardImageError\" carrying a stable\n *  `code`. (A plain Error, not a subclass — Tier-5 bundles target an engine without\n *  class syntax.) Branch on `isClipboardImageError(e) && e.code === \"too_large\"`. */",
+        "decl": "export interface ClipboardImageError extends Error {\n  name: \"ClipboardImageError\";\n  code: ClipboardImageErrorCode;\n}"
+      },
+      {
+        "name": "clipboardImageError",
+        "kind": "function",
+        "jsdoc": "/** Build a coded writeImage rejection. */",
+        "decl": "export function clipboardImageError(code: ClipboardImageErrorCode, message?: string): ClipboardImageError;"
+      },
+      {
+        "name": "isClipboardImageError",
+        "kind": "function",
+        "jsdoc": "/** Whether `e` is a coded writeImage rejection. */",
+        "decl": "export function isClipboardImageError(e: unknown): e is ClipboardImageError;"
+      },
+      {
+        "name": "writeImage",
+        "kind": "function",
+        "jsdoc": "/** Copy an image file the worker already holds to the clipboard. Accepts a\n *  `FileHandle` (from files / camera / photos) or its substrate `uri`. Rejects with a\n *  `ClipboardImageError` (see `isClipboardImageError`) whose `code` is `unsupported_type` (not PNG/JPEG/WebP/HEIC, or\n *  not supported on this host), `too_large` (over 20 MB), `not_allowed` (outside the\n *  app's files substrate), `not_found`, or `unavailable` (no image clipboard here). */",
+        "decl": "export async function writeImage(file: FileHandle | string): Promise<void>;"
+      },
+      {
+        "name": "hasImage",
+        "kind": "function",
+        "jsdoc": "/** Whether the clipboard currently holds an image — without reading it (no iOS paste\n *  banner). Web cannot know without a permission-gated read, so it answers false. */",
+        "decl": "export async function hasImage(): Promise<boolean>;"
+      },
       {
         "name": "version",
         "kind": "const",
         "jsdoc": "/** Capability version, for bundles that gate on min binary version. */",
-        "decl": "export const version = 1;"
+        "decl": "export const version = 2;"
       }
     ]
   },
@@ -1550,20 +1604,68 @@
       {
         "name": "HapticPattern",
         "kind": "type",
-        "jsdoc": "/** Maps to a native impact/notification/selection generator. */",
-        "decl": "export type HapticPattern =\n  | \"selection\"\n  | \"light\"\n  | \"medium\"\n  | \"heavy\"\n  | \"success\"\n  | \"warning\"\n  | \"error\";"
+        "jsdoc": "/**\n * Maps to a native impact/notification/selection generator.\n *\n * - `rigid` / `soft` — iOS `UIImpactFeedbackGenerator.FeedbackStyle.rigid` / `.soft`.\n *   Android: `rigid` is a short full-amplitude click (`VibrationEffect.EFFECT_CLICK`-like),\n *   `soft` a longer low-amplitude tick (`PRIMITIVE_LOW_TICK`-like); on a device without\n *   amplitude control both are plain one-shots of different length.\n */",
+        "decl": "export type HapticPattern =\n  | \"selection\"\n  | \"light\"\n  | \"medium\"\n  | \"heavy\"\n  | \"rigid\"\n  | \"soft\"\n  | \"success\"\n  | \"warning\"\n  | \"error\";"
+      },
+      {
+        "name": "PlayOptions",
+        "kind": "interface",
+        "jsdoc": "",
+        "decl": "export interface PlayOptions {\n  /**\n   * 0..1, clamped. Scales the strength of an IMPACT style (`light`, `medium`, `heavy`,\n   * `rigid`, `soft`): iOS `impactOccurred(intensity:)`, Android amplitude where the\n   * vibrator has amplitude control. Ignored for `selection` and the notification styles\n   * (`success`, `warning`, `error`) — those have a fixed system strength — and on web.\n   */\n  intensity?: number;\n}"
+      },
+      {
+        "name": "HapticStep",
+        "kind": "interface",
+        "jsdoc": "",
+        "decl": "export interface HapticStep {\n  pattern: HapticPattern;\n  /** Milliseconds to wait BEFORE this step plays (≥ 0). */\n  delayMs: number;\n  /** Same meaning as {@link PlayOptions.intensity}. */\n  intensity?: number;\n}"
+      },
+      {
+        "name": "HapticResult",
+        "kind": "type",
+        "jsdoc": "/**\n * What a verb reports. `ok: false` is honest: `unavailable` (this surface has no haptic\n * hardware/API — web without `navigator.vibrate`, macOS) or `unsupported_binary` (the\n * native app predates the verb; nothing played, nothing broke).\n */",
+        "decl": "export type HapticResult = { ok: true } | { ok: false; reason: \"unavailable\" | \"unsupported_binary\" };"
+      },
+      {
+        "name": "MAX_SEQUENCE_STEPS",
+        "kind": "const",
+        "jsdoc": "/** Most steps one {@link sequence} may carry. */",
+        "decl": "export const MAX_SEQUENCE_STEPS = 32;"
+      },
+      {
+        "name": "MAX_DURATION_MS",
+        "kind": "const",
+        "jsdoc": "/** Longest a {@link sequence} or {@link vibrate} pattern may run, in milliseconds. */",
+        "decl": "export const MAX_DURATION_MS = 10_000;"
+      },
+      {
+        "name": "clampIntensity",
+        "kind": "function",
+        "jsdoc": "/** Clamp an intensity into 0..1; `undefined` / non-finite → `undefined` (system default). */",
+        "decl": "export function clampIntensity(intensity: number | undefined): number | undefined;"
       },
       {
         "name": "play",
         "kind": "function",
-        "jsdoc": "/**\n * Play a haptic feedback pattern. Fire-and-forget; resolves once handed to the\n * platform. A no-op on web and for unknown patterns.\n */",
-        "decl": "export async function play(pattern: HapticPattern = \"light\"): Promise<void>;"
+        "jsdoc": "/**\n * Play a haptic feedback pattern. Fire-and-forget; resolves once handed to the\n * platform. Unknown pattern names keep their historical behaviour (the platform's\n * default tap). `intensity` applies to impact styles only — see {@link PlayOptions}.\n */",
+        "decl": "export async function play(pattern: HapticPattern = \"light\", options: PlayOptions = {}): Promise<HapticResult>;"
+      },
+      {
+        "name": "sequence",
+        "kind": "function",
+        "jsdoc": "/**\n * Play `steps` in order, waiting each step's `delayMs` before it plays. Runs natively\n * as ONE bridge call (the timing does not depend on the worker), so a drum roll or a\n * countdown keeps its rhythm. A new `sequence` cancels one still running. Resolves once\n * the sequence has been scheduled.\n *\n * Rejects (`RangeError`) with more than {@link MAX_SEQUENCE_STEPS} steps, a negative or\n * non-finite delay, or delays totalling over {@link MAX_DURATION_MS}. An empty list just\n * cancels a running sequence.\n */",
+        "decl": "export async function sequence(steps: HapticStep[]): Promise<HapticResult>;"
+      },
+      {
+        "name": "vibrate",
+        "kind": "function",
+        "jsdoc": "/**\n * Raw vibration: `patternMs` alternates OFF / ON durations in milliseconds, starting\n * with an off gap (`[0, 200, 100, 400]` = buzz 200, pause 100, buzz 400).\n *\n * Android plays it as `VibrationEffect.createWaveform`. iOS approximates: with Core\n * Haptics each ON span is a continuous event (a transient one under 30 ms); without it,\n * each ON span becomes one `heavy` impact at its start. Web uses `navigator.vibrate`.\n *\n * Rejects (`RangeError`) on an empty list, a negative or non-finite duration, or a\n * pattern totalling over {@link MAX_DURATION_MS}.\n */",
+        "decl": "export async function vibrate(patternMs: number[]): Promise<HapticResult>;"
       },
       {
         "name": "version",
         "kind": "const",
         "jsdoc": "/** Capability version, for bundles that gate on a min binary version. */",
-        "decl": "export const version = 1;"
+        "decl": "export const version = 2;"
       }
     ]
   },
@@ -4867,7 +4969,13 @@
         "name": "AlertOptions",
         "kind": "interface",
         "jsdoc": "",
-        "decl": "export interface AlertOptions {\n  /** Required — the native presenters drop alerts with an empty title. */\n  title: string;\n  message?: string;\n  /** Confirm button label. Default \"Confirm\". */\n  confirmLabel?: string;\n  /** Cancel button label. OMIT for a single-button alert (no cancel button). */\n  cancelLabel?: string;\n  /** Style the confirm button with the `danger` token. */\n  destructive?: boolean;\n}"
+        "decl": "export interface AlertOptions {\n  /** Required — the native presenters drop alerts with an empty title. */\n  title: string;\n  message?: string;\n  /** Confirm button label. Default \"Confirm\". */\n  confirmLabel?: string;\n  /** Cancel button label. OMIT for a single-button alert (no cancel button). */\n  cancelLabel?: string;\n  /** Style the confirm button with the `danger` token. A destructive confirm is not the\n   *  affirmative button: its `confirm.actionId` still runs, but without gesture credit. */\n  destructive?: boolean;\n  /** The affirmative button's ACTION. Pressing it runs `actionId` as a NEW invocation\n   *  with user-gesture origin (so an app service's `app.<svc>.<action>` may return `_nav` and\n   *  navigate — the \"Ready — View\" alert). `label` replaces `confirmLabel`. The id is checked when\n   *  you set it, against this worker: a `capability.<id>.*` needs `<id>` allowed, an `app.*` from a\n   *  screen worker needs `app_services` and an exported action, a `tier5.*` must be this worker's\n   *  own; anything else rejects (`action_not_allowed`). Cancel and dismissal run nothing. */\n  confirm?: AlertConfirm;\n}"
+      },
+      {
+        "name": "AlertConfirm",
+        "kind": "interface",
+        "jsdoc": "/** The affirmative button of an `alert()`: its label and the action its press runs. */",
+        "decl": "export interface AlertConfirm {\n  label: string;\n  actionId: string;\n  /** Passed to the action (JSON types kept). */\n  args?: Record<string, unknown>;\n}"
       },
       {
         "name": "AlertResult",
@@ -4878,7 +4986,7 @@
       {
         "name": "alert",
         "kind": "function",
-        "jsdoc": "/** Present a modal alert on the current screen. Resolves when the user picks a\n *  button. Rejects with `ui_busy` while another alert() is pending, and with\n *  `no_ui_host` if the app has no presenter attached. */",
+        "jsdoc": "/** Present a modal alert on the current screen. Resolves when the user picks a\n *  button. Rejects with `ui_busy` while another alert() is pending, and with\n *  `no_ui_host` if the app has no presenter attached — or, from an APP SERVICE, when no\n *  shell is in the foreground (re-show it from `onForeground`). An app service's alert shows on\n *  whatever screen is open. */",
         "decl": "export async function alert(options: AlertOptions): Promise<AlertResult>;"
       },
       {
@@ -22898,44 +23006,70 @@
         "jsdoc": "/** The per-call header map for `opts`, or undefined when there is nothing to add — so\n *  the no-options path calls the bridge with exactly the 3 arguments it always did. */",
         "decl": "export function wixCall<T>(method: string, path: string, body?: unknown, readOptions?: WixCallOptions): Promise<T>;"
       },
+      {
+        "name": "WixLoyaltyImage",
+        "kind": "interface",
+        "jsdoc": "",
+        "decl": "export interface WixLoyaltyImage {\n  id?: string;\n  url?: string;\n  height?: number;\n  width?: number;\n  altText?: string;\n  filename?: string;\n}"
+      },
+      {
+        "name": "WixLoyaltyRewardConfig",
+        "kind": "interface",
+        "jsdoc": "",
+        "decl": "export interface WixLoyaltyRewardConfig {\n  tierId?: string;\n  costInPoints?: number;\n  amount?: number;\n  percentage?: number;\n}"
+      },
       {
         "name": "WixLoyaltyProgram",
         "kind": "interface",
         "jsdoc": "",
-        "decl": "export interface WixLoyaltyProgram {\n  id?: string;\n  name?: string;\n  /** ACTIVE | DRAFT | PAUSED */\n  status?: string;\n  pointDefinition?: { customName?: string; icon?: string };\n}"
+        "decl": "export interface WixLoyaltyProgram {\n  id?: string;\n  name?: string;\n  /** ACTIVE | DRAFT | PAUSED */\n  status?: string;\n  pointDefinition?: { customName?: string; icon?: WixLoyaltyImage };\n}"
       },
       {
         "name": "WixLoyaltyReward",
         "kind": "interface",
         "jsdoc": "",
-        "decl": "export interface WixLoyaltyReward {\n  id: string;\n  name?: string;\n  type?: string;\n  requiredPoints?: number;\n  active?: boolean;\n}"
+        "decl": "export interface WixLoyaltyReward {\n  id: string;\n  name?: string;\n  type?: string;\n  /** Legacy adapter field. REST costs live in the reward's tier configurations. */\n  requiredPoints?: number;\n  discountAmount?: { configsByTier?: { tierId?: string; costInPoints?: number; amount?: string }[] };\n  couponReward?: {\n    fixedAmount?: { configsByTier?: WixLoyaltyRewardConfig[] };\n    percentage?: { configsByTier?: WixLoyaltyRewardConfig[] };\n    freeShipping?: { configsByTier?: WixLoyaltyRewardConfig[] };\n  };\n  active?: boolean;\n}"
       },
       {
         "name": "WixLoyaltyTier",
         "kind": "interface",
         "jsdoc": "",
-        "decl": "export interface WixLoyaltyTier {\n  /** REST returns `id` (proto `_id`). */\n  id?: string;\n  tierDefinition?: { name?: string; icon?: string };\n  requiredPoints?: number;\n}"
+        "decl": "export interface WixLoyaltyTier {\n  /** REST returns `id` (proto `_id`). */\n  id?: string;\n  tierDefinition?: { name?: string; icon?: WixLoyaltyImage };\n  requiredPoints?: number;\n}"
+      },
+      {
+        "name": "WixLoyaltyEarningRule",
+        "kind": "interface",
+        "jsdoc": "",
+        "decl": "export interface WixLoyaltyEarningRule {\n  id?: string;\n  title?: string;\n  status?: string;\n  triggerActivityType?: string;\n  fixedAmount?: { configs?: { tierId?: string; points?: number }[] };\n  conversionRate?: { field?: string; configs?: { tierId?: string; moneyAmount?: number; points?: number }[] };\n}"
       },
       {
         "name": "getLoyaltyProgram",
         "kind": "function",
-        "jsdoc": "/** GET /loyalty/v1/program → { loyaltyProgram }. */",
+        "jsdoc": "/** GET /loyalty-programs/v1/program → { loyaltyProgram }. */",
         "decl": "export function getLoyaltyProgram(readOptions?: WixCallOptions): Promise<{ loyaltyProgram?: WixLoyaltyProgram; program?: WixLoyaltyProgram }>;",
-        "http": "GET /loyalty/v1/program"
+        "http": "GET /loyalty-programs/v1/program"
       },
       {
         "name": "listLoyaltyRewards",
         "kind": "function",
-        "jsdoc": "/** GET /loyalty/v1/rewards → { rewards }. */",
+        "jsdoc": "/** GET /loyalty-rewards/v1/rewards → { rewards }. */",
         "decl": "export function listLoyaltyRewards(readOptions?: WixCallOptions): Promise<{ rewards?: WixLoyaltyReward[] }>;",
-        "http": "GET /loyalty/v1/rewards"
+        "http": "GET /loyalty-rewards/v1/rewards"
       },
       {
         "name": "listLoyaltyTiers",
         "kind": "function",
-        "jsdoc": "/** GET /loyalty/v1/tiers → { tiers }. The PUBLIC program tier ladder\n * (wix.loyalty.v1.tier) — NOT the private per-customer tiers-program dashboard. */",
+        "jsdoc": "/** GET /loyalty-tiers/v1/tiers → { tiers }. The program tier ladder. */",
         "decl": "export function listLoyaltyTiers(readOptions?: WixCallOptions): Promise<{ tiers?: WixLoyaltyTier[] }>;",
-        "http": "GET /loyalty/v1/tiers"
+        "http": "GET /loyalty-tiers/v1/tiers"
+      },
+      {
+        "name": "listLoyaltyEarningRules",
+        "kind": "function",
+        "jsdoc": "/** Active and inactive earning rules in their raw REST shape; callers choose visibility.\n * @scope visitor\n */",
+        "decl": "export function listLoyaltyEarningRules(readOptions?: WixCallOptions): Promise<{ earningRules?: WixLoyaltyEarningRule[] }>;",
+        "http": "GET /_api/loyalty-earning-rules/v1/earning-rules/rules",
+        "scope": "visitor"
       },
       {
         "name": "LoyaltyOverview",
@@ -24094,6 +24228,104 @@
         "kind": "function",
         "jsdoc": "/** The cashier handle to settle, or \"\" when no payable order is available. */",
         "decl": "export function payableIdOf(participant?: WixJoinedParticipant): string;"
+      },
+      {
+        "name": "MEMBER_ENROLLMENT_STATUSES",
+        "kind": "const",
+        "jsdoc": "/** `Participant.enrollmentStatus` values the member list filters on. */",
+        "decl": "export const MEMBER_ENROLLMENT_STATUSES = {\n  joined: \"JOINED\",\n  suspended: \"SUSPENDED\",\n  unknown: \"UNKNOWN_ENROLLMENT_STATUS\",\n} as const;"
+      },
+      {
+        "name": "MEMBER_FINISHED_PROGRESS_STATUSES",
+        "kind": "const",
+        "jsdoc": "/** `Participant.progressStatus` values that still count as a membership once the enrollment is over. */",
+        "decl": "export const MEMBER_FINISHED_PROGRESS_STATUSES = [\"COMPLETED\", \"FAILED\"] as const;"
+      },
+      {
+        "name": "WixMemberParticipantsQuery",
+        "kind": "interface",
+        "jsdoc": "",
+        "decl": "export interface WixMemberParticipantsQuery {\n  /** The signed-in member's id (`getMyMember().member.id`). Required: without it the query is the roster of everyone. */\n  memberId: string;\n  /** The `pagingMetadata.cursors.next` of the previous page; omit for the first page. */\n  cursor?: string;\n  /** Page size, default 100 (the upstream page cap for this query). */\n  limit?: number;\n}"
+      },
+      {
+        "name": "WixQueryMemberParticipantsResponse",
+        "kind": "interface",
+        "jsdoc": "",
+        "decl": "export interface WixQueryMemberParticipantsResponse extends WixQueryParticipantsResponse {\n  pagingMetadata?: WixQueryParticipantsResponse[\"pagingMetadata\"] & { cursors?: { next?: string | null } };\n}"
+      },
+      {
+        "name": "queryMemberParticipants",
+        "kind": "function",
+        "jsdoc": "/**\n * POST /online-programs/v3/participants/query — the MEMBER'S participations, cursor-paged, with\n * progress. Joined and suspended enrollments, plus completed/failed ones whose enrollment has\n * ended, so a finished program still shows its outcome; left, removed and auto-removed\n * memberships are excluded. The query language has no `programId: {$in}` on this\n * endpoint, so callers match memberships to displayed programs locally.\n *\n * @scope member — requires the signed-in site member; `memberId` must be that member's own id\n * (`getMyMember().member.id`). An empty `participants` list means the member has no such\n * membership, never that the read failed: a failure rejects.\n */",
+        "decl": "export function queryMemberParticipants(opts: WixMemberParticipantsQuery): Promise<WixQueryMemberParticipantsResponse>;",
+        "http": "POST /online-programs/v3/participants/query",
+        "scope": "member"
+      },
+      {
+        "name": "WixProgramParticipationStats",
+        "kind": "interface",
+        "jsdoc": "",
+        "decl": "export interface WixProgramParticipationStats {\n  programId?: string;\n  participantsCount?: number;\n  autoRemovedCount?: number;\n}"
+      },
+      {
+        "name": "WixGetParticipationStatsResponse",
+        "kind": "interface",
+        "jsdoc": "",
+        "decl": "export interface WixGetParticipationStatsResponse { participationStats?: WixProgramParticipationStats[] }"
+      },
+      {
+        "name": "getParticipationStats",
+        "kind": "function",
+        "jsdoc": "/** POST /online-programs/v3/participants/stats — participant counts for a batch of programs (one call per page).\n *  `programIds` must be non-empty (an empty batch returns `{ participationStats: [] }` without a call);\n *  a program missing from the answer has no count, not zero.\n *  @scope visitor — counts are public; an anonymous visitor session is enough. */",
+        "decl": "export function getParticipationStats(programIds: string[]): Promise<WixGetParticipationStatsResponse>;",
+        "http": "POST /online-programs/v3/participants/stats",
+        "scope": "visitor"
+      },
+      {
+        "name": "WixJoinApplicationStatus",
+        "kind": "type",
+        "jsdoc": "/** `JoinApplication.status` — the member's standing BEFORE a participant exists (a private or paid program). */",
+        "decl": "export type WixJoinApplicationStatus =\n  | \"INVITED\"\n  | \"APPROVAL_PENDING\"\n  | \"APPROVED\"\n  | \"PAYMENT_PENDING\"\n  | \"SUSPENDED\"\n  | \"DECLINED\"\n  | \"CANCELLED\"\n  | string;"
+      },
+      {
+        "name": "WixJoinApplication",
+        "kind": "interface",
+        "jsdoc": "",
+        "decl": "export interface WixJoinApplication {\n  id?: string;\n  programId?: string;\n  memberId?: string;\n  status?: WixJoinApplicationStatus;\n  paymentStatus?: string;\n  /** Set once the application became a participant. */\n  participantId?: string;\n  createdDate?: string;\n  updatedDate?: string;\n}"
+      },
+      {
+        "name": "WixGetCurrentJoinApplicationResponse",
+        "kind": "interface",
+        "jsdoc": "",
+        "decl": "export interface WixGetCurrentJoinApplicationResponse { joinApplication?: WixJoinApplication }"
+      },
+      {
+        "name": "getCurrentJoinApplication",
+        "kind": "function",
+        "jsdoc": "/** GET /online-programs/participants/v3/join-applications/current/{programId} — the signed-in member's\n *  own application to ONE program, or none. Used per card only where an application can exist\n *  (a private or a priced program the member has not joined). An answer with no `joinApplication`\n *  means the member never applied.\n *  @scope member — requires the signed-in site member; a visitor session has no application to read. */",
+        "decl": "export function getCurrentJoinApplication(programId: string): Promise<WixGetCurrentJoinApplicationResponse>;",
+        "http": "GET /online-programs/participants/v3/join-applications/current/{…}",
+        "scope": "member"
+      },
+      {
+        "name": "WixProgramCategory",
+        "kind": "interface",
+        "jsdoc": "",
+        "decl": "export interface WixProgramCategory {\n  id?: string;\n  label?: string;\n  /** Program ids the category is assigned to. */\n  assignedTo?: string[];\n}"
+      },
+      {
+        "name": "WixListProgramCategoriesResponse",
+        "kind": "interface",
+        "jsdoc": "",
+        "decl": "export interface WixListProgramCategoriesResponse { categories?: WixProgramCategory[] }"
+      },
+      {
+        "name": "listProgramCategories",
+        "kind": "function",
+        "jsdoc": "/** GET /_api/program-categories-service/v3/categories — every program category of the site (the\n *  category filter's options). `/_api/…` paths ride the same bridge as the public ones (forms,\n *  bookings-v2 and ecom already do). An empty `categories` list means the site has none.\n *  @scope member — the One App member programs list calls it with the member's identity. NOT verified\n *  live here: codegen/wix/auto/lock.json lists only the APP identity (ONLINE_PROGRAMS.CATEGORY_READ), so a\n *  visitor or member token can get 403. A caller must treat a rejection as \"no category filter\", never\n *  as an error screen. */",
+        "decl": "export function listProgramCategories(): Promise<WixListProgramCategoriesResponse>;",
+        "http": "GET /_api/program-categories-service/v3/categories",
+        "scope": "member"
       }
     ]
   },

package/guides/web-page-sdk-reference.md

@@ -22,12 +22,12 @@ the SDK sources, so it matches the shipped SDKs.
 - [`calendar`](https://apps.wix.com/_api/himi-serve/authoring/resource/web-sdk%2Fcalendar?format=md) — Device calendar. 6 methods.
 - [`calls`](https://apps.wix.com/_api/himi-serve/authoring/resource/web-sdk%2Fcalls?format=md) — Real-time 1:1 audio calls (Stage 1). 16 methods.
 - [`camera`](https://apps.wix.com/_api/himi-serve/authoring/resource/web-sdk%2Fcamera?format=md) — Camera capability. 4 methods · returns FileHandles.
-- [`clipboard`](https://apps.wix.com/_api/himi-serve/authoring/resource/web-sdk%2Fclipboard?format=md) — System clipboard. 3 methods.
+- [`clipboard`](https://apps.wix.com/_api/himi-serve/authoring/resource/web-sdk%2Fclipboard?format=md) — System clipboard. 5 methods.
 - [`contacts`](https://apps.wix.com/_api/himi-serve/authoring/resource/web-sdk%2Fcontacts?format=md) — Device address book. 4 methods.
 - [`file_picker`](https://apps.wix.com/_api/himi-serve/authoring/resource/web-sdk%2Ffile_picker?format=md) — User-mediated document access OUTSIDE the app sandbox. 3 methods · returns FileHandles.
 - [`files`](https://apps.wix.com/_api/himi-serve/authoring/resource/web-sdk%2Ffiles?format=md) — App-scoped document storage. 6 methods · returns FileHandles.
 - [`godot`](https://apps.wix.com/_api/himi-serve/authoring/resource/web-sdk%2Fgodot?format=md) — A Godot game surface. 3 methods · not in Brandy.
-- [`haptic`](https://apps.wix.com/_api/himi-serve/authoring/resource/web-sdk%2Fhaptic?format=md) — Haptic capability. 1 method.
+- [`haptic`](https://apps.wix.com/_api/himi-serve/authoring/resource/web-sdk%2Fhaptic?format=md) — Haptic capability. 3 methods.
 - [`health`](https://apps.wix.com/_api/himi-serve/authoring/resource/web-sdk%2Fhealth?format=md) — Platform HEALTH store. 5 methods.
 - [`himi_apps`](https://apps.wix.com/_api/himi-serve/authoring/resource/web-sdk%2Fhimi_apps?format=md) — Cross-app open / host queries. 4 methods · not in Brandy.
 - [`iap`](https://apps.wix.com/_api/himi-serve/authoring/resource/web-sdk%2Fiap?format=md) — In-app-purchase capability. 9 methods.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@wix/himalaya-cli",
-  "version": "0.1576.0",
+  "version": "0.1578.0",
   "type": "module",
   "description": "himi — the Himalaya authoring CLI. Build a Tier-5 content package on your own machine, push it to the production serve as a draft, preview it on web + Himi Player, and read worker logs back — the remote dev loop. Wraps @himalaya/serve-cli for transport.",
   "keywords": [
@@ -71,5 +71,5 @@
       "artifactId": "himalaya-cli"
     }
   },
-  "falconPackageHash": "b3770b71ba8570708ab97e43a149a8ee2880f9fea27a618d80902862"
+  "falconPackageHash": "0a206d4a3d13e9f1302334dcaeb9d70a507f8c916a8ac190fe8bfd8e"
 }

package/templates/beauty-salon/tier5-src/_shared/branded-lite-hosted.ts

@@ -119,6 +119,7 @@ export const HOSTED_SCREEN_VERTICALS: Readonly<Record<string, readonly BrandedLi
   himi_portfolio: ["portfolio"],
   himi_portfolio_project: ["portfolio"],
   himi_programs: ["programs"],
+  himi_member_programs: ["programs"],
   himi_reservations: ["reservations"],
   himi_reserve: ["restaurants"],
   himi_review: ["reviews"],

package/templates/beauty-salon/tier5-src/_shared/owner-load-error.ts

@@ -194,6 +194,14 @@ export function isTransportFailure(e: unknown): boolean {
   return TRANSPORT.some((re) => re.test(msg));
 }
 
+/** A failed READ says nothing about the record's existence when Wix is
+ * unreachable, overloaded or failing. Unlike the legacy bridge predicate this
+ * is independent of preview mode; a live preview's gateway failure is one too. */
+export function readWasUnreachable(e: unknown): boolean {
+  const msg = String((e as Error)?.message ?? e ?? "");
+  return isTransportFailure(e) || /HTTP (?:408|429|5\d{2})\b/.test(msg);
+}
+
 /** Transport failures that happen while CONNECTING — no connection, no route, no such host,
  *  connection refused — so the request provably never left the device. Every other
  *  transport failure (a timeout, a reset, a bad or truncated response, a browser's fetch