@wix/himalaya-cli 0.1588.0 → 0.1590.0

package/fixtures/wix-canned.json

@@ -1884,6 +1884,22 @@
     "comments": [],
     "commentCount": 0
   },
+  "GET /social-groups-proxy/members/v2/members/mem-0001/memberships": {
+    "memberships": [
+      {
+        "groupId": "grp-0001",
+        "status": "JOINED",
+        "role": {
+          "value": "MEMBER"
+        }
+      }
+    ],
+    "metadata": {
+      "count": 1,
+      "offset": 0,
+      "total": 1
+    }
+  },
   "GET /social-groups-proxy/groups/v2/groups/grp-0001": {
     "group": {
       "id": "grp-0001",

package/guides/app-config.md

@@ -137,7 +137,7 @@ does not include answers `module_not_linked` on device. Some components need one
 and `himi validate` errors on a screen that uses one the app does not declare.
 `presigned_upload.putFile` also requires `files` on the calling screen.
 
-App-level capability vocabulary: `camera`, `barcode_scanner`, `biometrics`, `secure_storage`, `share`, `push`, `file_picker`, `files`, `open_url`, `pdf`, `clipboard`, `theme`, `l10n`, `photos`, `presigned_upload`, `ui`, `calendar`, `contacts`, `tasks`, `audio_record`, `audio_record_background`, `calls`, `location`, `location_background`, `motion`, `health`, `media_playback`, `webview`, `browser_auth`, `haptic`, `himi_apps`, `iap`, `keyboard`, `network`, `wix_cashier`, `wix_chat`, `live_activity`, `local_database`, `speech`, `speaker_diarization`, `system_intents`, `on_device_ai`, `app_info`, `release_control`, `godot`, `base44`, `animation`.
+App-level capability vocabulary: `camera`, `barcode_scanner`, `biometrics`, `secure_storage`, `share`, `push`, `file_picker`, `files`, `open_url`, `pdf`, `clipboard`, `theme`, `l10n`, `photos`, `presigned_upload`, `ui`, `calendar`, `contacts`, `tasks`, `audio_record`, `audio_record_background`, `calls`, `location`, `location_background`, `motion`, `health`, `media_playback`, `webview`, `browser_auth`, `haptic`, `himi_apps`, `iap`, `keyboard`, `torch`, `network`, `wix_cashier`, `wix_chat`, `live_activity`, `local_database`, `speech`, `speaker_diarization`, `system_intents`, `on_device_ai`, `app_info`, `release_control`, `godot`, `base44`, `animation`.
 
 ## What `himi validate` checks (7 passes)
 

package/guides/importable-sdks.md

@@ -63,6 +63,7 @@ package in one greppable file) or `GET /v1/sdk/<name>` over HTTP; in the CLI,
 - `@himalaya/tasks` — Tier-5 typed binding for reminders / to-dos.
 - `@himalaya/theme` — Tier-5 typed binding for the runtime brand overlay.
 - `@himalaya/time` — Tier-5 temporal helpers.
+- `@himalaya/torch` — Tier-5 typed binding for the platform's torch (the camera flashlight).
 - `@himalaya/ui` — Tier-5 typed binding to the platform's imperative popup capability.
 - `@himalaya/webview` — Tier-5 typed binding for the page ↔ worker message channel of a worker-backed webview screen (Part 2 / RFC 0025 composition).
 - `@himalaya/webview-page` — browser-side SDK for a trusted page hosted by a worker-backed Himalaya WebView.

package/guides/one-app-to-himi-app.md

@@ -232,10 +232,14 @@ private/all-members total.
 Member-profile follower/following totals are separate runtime reads, not the
 directory total or this collected snapshot. The shared member-detail worker keeps
 the public profile readable when its activity counters are forbidden, missing or
-invalid, and hides the count line. `getFollowCounts` accepts only explicit
-nonnegative safe integers from the requested member's Followers-app entry,
-reading the source's keyed counter array (and compatible older map responses);
-unavailable totals reject rather than becoming zero. A real zero remains visible.
+invalid, and hides the count line. Wix keeps one counter per direction and creates
+it on the first change, so a member can have only `followerCount` or only
+`followingCount`: `getFollowCounts` reports each direction on its own, as an
+explicit nonnegative safe integer from the requested member's Followers-app entry
+or `null` when Wix returned none, reading the source's keyed counter array (and
+compatible older map responses). A missing counter is hidden and never becomes
+zero; a real zero remains visible; a malformed counter, an entry with neither
+counter or a permission failure rejects and hides the line.
 Following a member does not turn an unknown aggregate into a fabricated total.
 Late Follow results cannot restore counters from an earlier load, identity or site.
 Directory search metadata, activity and viewed-member program progress require
@@ -394,6 +398,16 @@ Apply these interpretation rules:
   conversion details; locale, device settings and permission failures are not currency
   evidence. Require recorded live Visitor catalog and signed-in own-account responses
   for acceptance; mocked member balances prove implementation behavior only.
+- **Bookings: bake the business time zone.** A course's session times (`firstSessionStart`,
+  `lastSessionEnd`) may arrive without an offset, and only the business's own zone places them
+  (the "Ended" label). A `bookings_services_list_section` collection reads the same public,
+  site-bound Visitor properties and allowlists `businessContext.timeZone`, kept only when it is an
+  IANA zone ("Asia/Jerusalem"). When verified, bake it into Branded provisioning
+  `businessTimeZone` (the source value, never an example, a locale guess or the device zone). The
+  worker cannot read it itself: `site-properties/v4` is owner-scoped. Omit an unverified zone: the
+  list then shows no Ended label for a time without an offset, which is correct, and a
+  `business_time_zone_unavailable` warning says so. A re-apply keeps the zone for the same site and
+  drops it for another.
 - **Native navigation is the migration target.** Use the shell's native top bar
   and, for bottom-tab navigation, `navigation.tabBar.presentation: "native"`.
   Do not recreate the source Detailed header, call `detailedHeader`, or insert a

package/guides/qa-builds.md

@@ -643,6 +643,18 @@ the log rather than silently replaced. The sha↔build mapping lands in `artifac
 the install page, and the QA summary — the number itself is a clock reading, so it is only traceable
 because those write it down.
 
+### Build number
+
+A store-bound build can also carry a **store floor**: **`DIST_BUILD_FLOOR_IOS`** /
+**`DIST_BUILD_FLOOR_ANDROID`**, the lowest build number the store will accept for the listing (its
+highest uploaded build + 1). The build machine never reads a store or holds store credentials: the
+floor is an input the job carries. Nothing sets it automatically yet; the store lanes that will read
+the store once per job and pass it are tracked in #4650. When the floor is set, the build number is
+`max(derived, floor)`, and the log says which won (`build 58 (floor: DIST_BUILD_FLOOR_ANDROID 58)` or
+`(derived)`). An explicit `DIST_BUILD_NUMBER` **below** the floor is refused before anything is
+archived, with a message naming the floor; a floor that is not an integer in `1..2100000000` fails
+the job rather than being ignored. A QA (`link`) build gets no floor and is unchanged.
+
 ## Where an artifact lives, and when it is deleted
 
 Each build owns a directory, keyed by the app, the shell, the platform, the shell commit and a

package/guides/sdk-reference.json

@@ -5039,6 +5039,79 @@
       }
     ]
   },
+  {
+    "name": "@himalaya/torch",
+    "source": "core/sdk/torch/src/index.ts",
+    "description": "Tier-5 typed binding for the platform's torch (the camera flashlight).",
+    "api": [
+      {
+        "name": "TorchStatus",
+        "kind": "interface",
+        "jsdoc": "/** The torch right now. `level` is 0..1 while lit, `null` while off or when unknown. */",
+        "decl": "export interface TorchStatus {\n  /** Does this device have a torch the app can drive? */\n  available: boolean;\n  /** Is the torch lit? */\n  on: boolean;\n  /** Brightness 0..1 while lit (1 = the brightest the device allows), else `null`. */\n  level: number | null;\n  /** Why the torch is unavailable, when it is. */\n  reason?: string;\n}"
+      },
+      {
+        "name": "TorchOnOptions",
+        "kind": "interface",
+        "jsdoc": "",
+        "decl": "export interface TorchOnOptions {\n  /** Brightness in 0..1 (default 1). Values outside the range are clamped; 0 turns the torch off.\n   *  A device without adjustable strength (Android below API 33, or a single-level flash) lights at\n   *  full brightness and reports `level: 1`. */\n  level?: number;\n}"
+      },
+      {
+        "name": "TorchErrorCode",
+        "kind": "type",
+        "jsdoc": "",
+        "decl": "export type TorchErrorCode = \"unavailable\" | \"invalid_argument\" | \"failed\";"
+      },
+      {
+        "name": "TorchError",
+        "kind": "interface",
+        "jsdoc": "/** What every torch verb throws when the native/web arm reports a typed error. */",
+        "decl": "export interface TorchError extends Error {\n  code: TorchErrorCode;\n}"
+      },
+      {
+        "name": "torchError",
+        "kind": "function",
+        "jsdoc": "/** Build a [TorchError]. */",
+        "decl": "export function torchError(code: TorchErrorCode, message: string): TorchError;"
+      },
+      {
+        "name": "isTorchError",
+        "kind": "function",
+        "jsdoc": "/** Narrow a caught value: `catch (e) { if (isTorchError(e) && e.code === \"unavailable\") … }`. */",
+        "decl": "export function isTorchError(e: unknown): e is TorchError;"
+      },
+      {
+        "name": "on",
+        "kind": "function",
+        "jsdoc": "/**\n * Turn the torch on, at `level` (0..1, default 1). Resolves with the resulting status.\n * Rejects `unavailable` on a device with no torch, `invalid_argument` for a non-numeric level.\n */",
+        "decl": "export async function on(opts: TorchOnOptions = {}): Promise<TorchStatus>;"
+      },
+      {
+        "name": "off",
+        "kind": "function",
+        "jsdoc": "/** Turn the torch off. Idempotent — resolves (never rejects `unavailable`) when there is no torch. */",
+        "decl": "export async function off(): Promise<TorchStatus>;"
+      },
+      {
+        "name": "toggle",
+        "kind": "function",
+        "jsdoc": "/** Flip the torch: off → on at full brightness, on → off. Rejects `unavailable` with no torch. */",
+        "decl": "export async function toggle(): Promise<TorchStatus>;"
+      },
+      {
+        "name": "status",
+        "kind": "function",
+        "jsdoc": "/** Read the torch's availability and state. Never rejects for a missing torch. */",
+        "decl": "export async function status(): Promise<TorchStatus>;"
+      },
+      {
+        "name": "version",
+        "kind": "const",
+        "jsdoc": "/** Capability version, for bundles that gate on a min binary version. */",
+        "decl": "export const version = 1;"
+      }
+    ]
+  },
   {
     "name": "@himalaya/ui",
     "source": "core/sdk/ui/src/index.ts",
@@ -22598,6 +22671,32 @@
         "http": "GET /social-groups/v2/rules/{…}",
         "scope": "visitor"
       },
+      {
+        "name": "WixGroupMembershipStatus",
+        "kind": "type",
+        "jsdoc": "",
+        "decl": "export type WixGroupMembershipStatus = \"UNKNOWN_STATUS\" | \"JOINED\" | \"PENDING\";"
+      },
+      {
+        "name": "WixGroupMembership",
+        "kind": "interface",
+        "jsdoc": "",
+        "decl": "export interface WixGroupMembership {\n  groupId?: string;\n  status?: WixGroupMembershipStatus | string;\n  /** Empty unless the membership is JOINED. */\n  role?: { value?: \"MEMBER\" | \"ADMIN\" | string };\n}"
+      },
+      {
+        "name": "WixListMembershipsResponse",
+        "kind": "interface",
+        "jsdoc": "",
+        "decl": "export interface WixListMembershipsResponse {\n  memberships?: WixGroupMembership[];\n  metadata?: { count?: number; offset?: number; total?: number; tooManyToCount?: boolean };\n}"
+      },
+      {
+        "name": "listMemberships",
+        "kind": "function",
+        "jsdoc": "/**\n * List a member's group memberships — GET /social-groups-proxy/members/v2/members/{memberId}/memberships.\n *\n * @scope member — a signed-in member lists their own memberships only; an owner-scoped token lists\n * anyone's. Sorted by `groupId` descending by default. `limit` is at most 100.\n */",
+        "decl": "export function listMemberships(\n  memberId: string,\n  paging: { limit?: number; offset?: number } = {},\n  opts?: WixCallOptions,\n): Promise<WixListMembershipsResponse>;",
+        "http": "GET /social-groups-proxy/members/v2/members/{…}/memberships${params ?",
+        "scope": "member"
+      },
       {
         "name": "WixGroupCoverImage",
         "kind": "interface",
@@ -23812,7 +23911,7 @@
         "name": "WixFollowCounts",
         "kind": "interface",
         "jsdoc": "",
-        "decl": "export interface WixFollowCounts {\n  followers: number;\n  following: number;\n}"
+        "decl": "export interface WixFollowCounts {\n  /** `null` when Wix returned no total for this direction: unavailable, never an assumed 0. */\n  followers: number | null;\n  following: number | null;\n}"
       },
       {
         "name": "WixMemberConnection",
@@ -23829,7 +23928,7 @@
       {
         "name": "getFollowCounts",
         "kind": "function",
-        "jsdoc": "/** Followers / following totals for a member — POST\n *  /members/v1/activity-counters/query. Requires explicit nonnegative safe integer\n *  totals for this member's Followers-app entry. Missing/invalid totals reject,\n *  as do permission failures; callers should hide unavailable counts, never invent zero. */",
+        "jsdoc": "/** Followers / following totals for a member — POST\n *  /members/v1/activity-counters/query. Wix keeps ONE counter per direction and creates it on the\n *  first change (live, amit1: a followed member's entry holds only `followerCount`, the follower's\n *  only `followingCount`), so each direction is reported on its own: an explicit nonnegative safe\n *  integer, or `null` when Wix returned none. A counter that is present but malformed makes the\n *  whole answer untrusted and rejects, as does an entry with neither counter or a permission\n *  failure. Callers hide an unavailable counter; a missing one is never shown as zero. */",
         "decl": "export async function getFollowCounts(memberId: string, options?: WixCallOptions): Promise<WixFollowCounts>;",
         "http": "POST /members/v1/activity-counters/query"
       },

package/guides/web-page-sdk-reference.md

@@ -52,6 +52,7 @@ the SDK sources, so it matches the shipped SDKs.
 - [`system_intents`](https://apps.wix.com/_api/himi-serve/authoring/resource/web-sdk%2Fsystem_intents?format=md) — System-intents capability. 2 methods · not in Brandy.
 - [`tasks`](https://apps.wix.com/_api/himi-serve/authoring/resource/web-sdk%2Ftasks?format=md) — Reminders / to-dos. 7 methods.
 - [`theme`](https://apps.wix.com/_api/himi-serve/authoring/resource/web-sdk%2Ftheme?format=md) — Runtime brand overlay. 2 methods.
+- [`torch`](https://apps.wix.com/_api/himi-serve/authoring/resource/web-sdk%2Ftorch?format=md) — Torch (the camera flashlight). 4 methods.
 - [`ui`](https://apps.wix.com/_api/himi-serve/authoring/resource/web-sdk%2Fui?format=md) — Imperative popup capability. 2 methods · not in Brandy.
 - [`wix_cashier`](https://apps.wix.com/_api/himi-serve/authoring/resource/web-sdk%2Fwix_cashier?format=md) — Native cashier. 2 methods.
 - [`wix_chat`](https://apps.wix.com/_api/himi-serve/authoring/resource/web-sdk%2Fwix_chat?format=md) — Host-owned realtime Chat event subscriptions. 2 methods.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@wix/himalaya-cli",
-  "version": "0.1588.0",
+  "version": "0.1590.0",
   "type": "module",
   "description": "himi — the Himalaya authoring CLI. Build a Tier-5 content package on your own machine, push it to the production serve as a draft, preview it on web + Himi Player, and read worker logs back — the remote dev loop. Wraps @himalaya/serve-cli for transport.",
   "keywords": [
@@ -72,5 +72,5 @@
       "artifactId": "himalaya-cli"
     }
   },
-  "falconPackageHash": "a3bed80b2a4e25688568c64abde4f20cb215bf09a39585660bc2c2d1"
+  "falconPackageHash": "0c09c9f148ea94e2a39a974ed0254bee503aa232427deadb20e27979"
 }

package/templates/beauty-salon/tier5-src/_shared/app-locale.ts

@@ -0,0 +1,61 @@
+// The language a worker formats numbers, money and plurals in, and the business's time zone. A worker has no host locale to read,
+// so the screen's `onAppear` hands it over: `appear()` adds `locale` to the load params when the app
+// pins its language, and `stashCopy` stores it here. Absent, every formatter stays on "en" — the
+// house pattern every English app was approved with — so an unpinned app is unchanged.
+//
+// The business time zone comes the same way, from the app's provisioning (`businessTimeZone`, collected
+// at migration time while the site's properties are readable): a worker cannot read it itself, because
+// the site-properties route is owner-scoped. Absent, it is "" and no worker guesses one.
+//
+// Pure, no host globals: bundled into every worker that formats, copied into generated templates.
+
+const TAG = /^[A-Za-z]{2,3}(?:-[A-Za-z0-9]{2,8})*$/;
+let tag = "en";
+
+/** Set from a load argument's `locale`; anything that is not a language tag resets to "en". */
+export function setAppLocale(value: unknown): void {
+  tag = typeof value === "string" && TAG.test(value) ? value : "en";
+}
+
+export function appLocale(): string {
+  return tag;
+}
+
+/** An IANA zone such as "Asia/Jerusalem" (or "UTC") that this engine knows. A bare offset, a lowercase
+ *  alias or an engine without ECMA-402 is not one: a zone is never guessed. */
+export function isIanaTimeZone(value: unknown): value is string {
+  if (typeof value !== "string" || !/^(?:UTC|[A-Za-z]+(?:\/[A-Za-z0-9_+-]+)+)$/.test(value)) return false;
+  // An engine without ECMA-402 has no zone database: nothing it holds is a zone it knows.
+  if (typeof Intl === "object" && typeof Intl.DateTimeFormat === "function") {
+    try {
+      new Intl.DateTimeFormat("en-US", { timeZone: value });
+      return true;
+    } catch {
+      return false;
+    }
+  }
+  return false;
+}
+
+let zone = "";
+
+/** Set from a load argument's `businessTimeZone`; anything that is not an IANA zone clears it. */
+export function setBusinessTimeZone(value: unknown): void {
+  zone = isIanaTimeZone(value) ? value : "";
+}
+
+/** The business's IANA zone, or "" when the app has none provisioned. */
+export function businessTimeZone(): string {
+  return zone;
+}
+
+/** Does `count` take the singular form in the app language? CLDR plural rules, so French "0 point"
+ *  and "1,5 point" are singular and Hebrew "2" is not. An engine without PluralRules keeps the
+ *  English rule (exactly one). */
+export function isSingular(count: number, locale = appLocale()): boolean {
+  try {
+    // An engine without ECMA-402 has no `Intl` at all: it keeps the English rule.
+    if (typeof Intl === "object" && typeof Intl.PluralRules === "function") return new Intl.PluralRules(locale).select(count) === "one";
+  } catch { /* malformed tag — use the English rule */ }
+  return count === 1;
+}

package/templates/beauty-salon/tier5-src/_shared/branded-lite-hosted.ts

@@ -98,6 +98,7 @@ export const HOSTED_SCREEN_VERTICALS: Readonly<Record<string, readonly BrandedLi
   himi_gift_cards: ["giftCards"],
   himi_groups: ["groups"],
   himi_group_about: ["groups"],
+  himi_my_groups: ["groups"],
   himi_invoice: ["invoices"],
   himi_invoices: ["invoices"],
   himi_loyalty: ["loyalty"],

package/templates/beauty-salon/tier5-src/_shared/engine-intl.ts

@@ -20,6 +20,8 @@
 // These helpers are the sanctioned way to format across the whole fleet: real ECMA-402 where it
 // exists, a deterministic en-US-shaped fallback where it does not, and never a throw.
 
+import { appLocale } from "./app-locale.js";
+
 /** Is ECMA-402 actually present in THIS engine? Cheap, and safe in a realm without `Intl`. */
 export function hasIntl(): boolean {
   return typeof Intl !== "undefined";
@@ -189,7 +191,7 @@ const CURRENCY_DIGITS: Record<string, number> = {
 export function formatCurrency(
   amount: number,
   currency = "USD",
-  locale = "en",
+  locale = appLocale(),
   /** Omit for the currency's natural digits. Pass 0 to render a whole amount as "$25" rather
    *  than "$25.00" — Intl clamps the minimum down to match, so max<min does not throw here. */
   maximumFractionDigits?: number,
@@ -258,7 +260,7 @@ function groupThousands(fixed: string): string {
  *     inserted commas into the exponent — `1e21` came out as "1e,+21" and `1e-7` as "1,e-7".
  *     Garbage, and silently so, because nothing in the corpus's tidy test numbers reached it.
  */
-export function formatNumber(value: number, locale = "en"): string {
+export function formatNumber(value: number, locale = appLocale()): string {
   if (!Number.isFinite(value)) return "";
   if (hasIntl()) return new Intl.NumberFormat(locale).format(value);
   // `toFixed` itself returns exponential notation at >=1e21, so anything that big keeps the
@@ -409,7 +411,7 @@ export function compareDateDesc(a: string, b: string): number {
 // Customers read that as sloppiness, and a whole "₪70" beside "₪69.50" reads as a different
 // kind of number. So: one money pattern, one clock, one range.
 
-// Money uses `formatCurrency(amount, currency, "en")` — the currency's NATURAL decimals
+// Money uses `formatCurrency(amount, currency)` — English unless the app pins another language, see app-locale — the currency's NATURAL decimals
 // ("₪70.00", "¥500") — for Shop, Menu and every other price. The one exception is a Bookings
 // SERVICE price (`_shared/wix-service-price.ts`): it drops the cents of a whole amount ("₪70",
 // "₪69.50"), the format the redesigned service screen and services list were approved with. It

package/templates/beauty-salon/tier5-src/_shared/group-member-count.ts

@@ -0,0 +1,15 @@
+import { copyPlural } from "./himi-copy.js";
+
+/** "840 members" / "1 member" for a group, through the copy pack so a translated app reads its own
+ *  language. One key for every worker that shows the count: a screen that renders it must list the
+ *  `groups.` prefix in its `appear()` so the pack carries the key. */
+export function groupMemberCount(count: number): string {
+  return copyPlural("groups.memberCount", "{n, plural, one {# member} other {# members}}", count);
+}
+
+/** The label for a group read back from the offline cache. A cached row keeps the raw `count`, never
+ *  the formatted label, so a pinned app reads it in its own language. A row written before that (label
+ *  only) has no count and shows none, instead of a label in the wrong language. */
+export function cachedMemberCount(count: unknown): string {
+  return typeof count === "number" && Number.isFinite(count) ? groupMemberCount(count) : "";
+}

package/templates/beauty-salon/tier5-src/_shared/himi-bookings.ts

@@ -17,6 +17,7 @@ export function categoryName(value: unknown): string {
   return typeof name === "string" ? name.trim() : "";
 }
 
+import { businessTimeZone } from "./app-locale.js";
 import { formatDateMedium, formatMonthDay, zoneOffsetAt } from "./engine-intl.js";
 import { formatServiceMoney, formatServicePrice, serviceCurrency } from "./wix-service-price.js";
 
@@ -72,7 +73,8 @@ export function slotIdAt(slots: Iterable<[string, { startDate?: string; timezone
 // the button never offers a course that the booking step then refuses.
 
 type CoursePolicyShape = {
-  schedule?: { id?: string; firstSessionStart?: string; lastSessionEnd?: string };
+  /** `timeZone`: the business's IANA zone, for a session time Wix lists as a bare local wall time. */
+  schedule?: { id?: string; firstSessionStart?: string; lastSessionEnd?: string; timeZone?: string };
   bookingPolicy?: {
     bookAfterStartPolicy?: { enabled?: boolean };
     limitEarlyBookingPolicy?: { enabled?: boolean; earliestBookingInMinutes?: number };
@@ -80,25 +82,63 @@ type CoursePolicyShape = {
   };
 };
 
+/** A bare local wall time placed in `timeZone`, as an instant (ms). NaN when the value is not a bare local
+ *  time, has an impossible calendar day, or the engine does not know the zone. */
+function placedInstant(value: string, timeZone: string | undefined): number {
+  const local = LOCAL_TIME.exec(value);
+  if (HAS_OFFSET.test(value) || !local || !timeZone || !validDate(value)) return NaN;
+  const wall = Date.UTC(+local[1], +local[2] - 1, +local[3], +local[4], +local[5], +(local[6] ?? 0));
+  const offset = zoneOffsetAt(wall, timeZone);
+  if (!Number.isFinite(offset)) return NaN;
+  // Once more at the corrected instant, so a wall time beside a DST change lands on the right side.
+  const again = zoneOffsetAt(wall - offset, timeZone);
+  return wall - (Number.isFinite(again) ? again : offset);
+}
+
+/** The zone that places a course's bare local session times: the schedule's own, else the app's
+ *  provisioned business zone. "" when there is none: a zone is never guessed. */
+const courseZone = (schedule: { timeZone?: string } | undefined): string => schedule?.timeZone || businessTimeZone();
+
+/** The instant (ms) of a course session time, for the "Ended" label. A time with an offset is exact. A
+ *  bare local wall time is the BUSINESS's wall time, so it is placed in its zone — never in the device's,
+ *  which would present another zone's clock as a confirmed instant. No zone, a date-only value, an
+ *  impossible calendar day or an engine that does not know the zone: unknown (NaN). */
+function sessionInstant(value: string, timeZone: string | undefined): number {
+  return HAS_OFFSET.test(value) ? validDate(value)?.getTime() ?? NaN : placedInstant(value, timeZone);
+}
+
+/** The same instant for the booking rules (window, read range): a bare local time the business zone can
+ *  place is placed there, so the list label, the service screen and the time screen agree. Everything else
+ *  keeps the read they always had (`Date.parse`), so an app with no provisioned zone is unchanged. */
+function courseInstant(value: string | undefined, timeZone: string | undefined): number {
+  const text = value ?? "";
+  const placed = placedInstant(text, timeZone);
+  return Number.isFinite(placed) ? placed : Date.parse(text);
+}
+
 /** A completed course, independent of whether bookings are currently allowed. Missing,
- *  invalid or reversed dates are unknown, never evidence that a course has ended. */
+ *  invalid or reversed dates are unknown, never evidence that a course has ended. A session time
+ *  without an offset counts only when the schedule names the business's `timeZone`. */
 export function courseHasEnded(service: CoursePolicyShape, now: number): boolean {
-  const start = service.schedule?.firstSessionStart ?? "";
-  const end = service.schedule?.lastSessionEnd ?? "";
-  // The schedule has no zone beside these fields. A local wall time must not be interpreted
-  // in the device's zone and presented as a confirmed business end instant.
-  if (!HAS_OFFSET.test(start) || !HAS_OFFSET.test(end)) return false;
-  const first = validDate(start)?.getTime() ?? NaN;
-  const last = validDate(end)?.getTime() ?? NaN;
+  const zone = courseZone(service.schedule);
+  const first = sessionInstant(service.schedule?.firstSessionStart ?? "", zone);
+  const last = sessionInstant(service.schedule?.lastSessionEnd ?? "", zone);
   return Number.isFinite(now) && Number.isFinite(first) && Number.isFinite(last) && first <= last && last <= now;
 }
 
+/** Does this course schedule hold a session time that is a bare local wall time, which only the
+ *  business's zone can place? A caller reads the zone only when this is true. */
+export function courseNeedsZone(schedule: { firstSessionStart?: string; lastSessionEnd?: string } | undefined): boolean {
+  return [schedule?.firstSessionStart, schedule?.lastSessionEnd].some((value) => !!value && !HAS_OFFSET.test(value) && LOCAL_TIME.test(value));
+}
+
 /** Whether the business takes course bookings at `now` (ms): the course has not ended, has not
  *  started (unless the policy lets people join late), and `now` is inside its booking window —
  *  which the early and late limits count from the first session. */
 export function courseWindowOpen(service: CoursePolicyShape, now: number): boolean {
-  const first = Date.parse(service.schedule?.firstSessionStart ?? "");
-  const last = Date.parse(service.schedule?.lastSessionEnd ?? "");
+  const zone = courseZone(service.schedule);
+  const first = courseInstant(service.schedule?.firstSessionStart, zone);
+  const last = courseInstant(service.schedule?.lastSessionEnd, zone);
   if (!Number.isFinite(first) || !Number.isFinite(last) || last <= now) return false;
   const policy = service.bookingPolicy;
   if (first < now && policy?.bookAfterStartPolicy?.enabled !== true) return false;
@@ -119,8 +159,9 @@ const DAY = 86_400_000;
  *  its last session (`complete`) and start at its first (`fromFirst`, so a count is the whole
  *  course). Empty when the course has no usable dates or has ended. */
 export function courseReadWindows(service: CoursePolicyShape, now: number, chunkDays = 14): { windows: Array<[number, number]>; complete: boolean; fromFirst: boolean } {
-  const first = Date.parse(service.schedule?.firstSessionStart ?? "");
-  const last = Date.parse(service.schedule?.lastSessionEnd ?? "");
+  const zone = courseZone(service.schedule);
+  const first = courseInstant(service.schedule?.firstSessionStart, zone);
+  const last = courseInstant(service.schedule?.lastSessionEnd, zone);
   if (!Number.isFinite(first) || !Number.isFinite(last)) return { windows: [], complete: false, fromFirst: false };
   const from = Math.max(first, now);
   const courseEnd = last + DAY;

package/templates/beauty-salon/tier5-src/_shared/himi-copy.ts

@@ -12,10 +12,12 @@
 // and every read returns `fallback` verbatim — routing a worker string through
 // copyParam is byte-for-byte behavior-preserving.
 //
-// Pure + Hermes-safe (no host globals, no Node APIs, no imports): bundled into
+// Pure + Hermes-safe (no host globals, no Node APIs; its only import is the pure `app-locale` sibling): bundled into
 // every worker that emits user-facing copy, and copied verbatim into the
 // generated templates' tier5-src/_shared/.
 
+import { isSingular, setAppLocale, setBusinessTimeZone } from "./app-locale.js";
+
 /** Customer strings override every read; translated stock is valid only for its
  * original English fallback. Some existing keys serve more than one message. */
 export type CopyPackValue = string | { source: string; translation: string };
@@ -29,6 +31,12 @@ let copyReceived = false;
  *  stock fallbacks keep rendering. */
 export function stashCopy(arg: unknown): void {
   if (!arg || typeof arg !== "object") return;
+  // A param-carrying dispatch names the app language and business zone too (absent: the English house
+  // pattern, and no zone).
+  if ("copy" in arg || "locale" in arg || "businessTimeZone" in arg) {
+    setAppLocale((arg as Record<string, unknown>).locale);
+    setBusinessTimeZone((arg as Record<string, unknown>).businessTimeZone);
+  }
   const raw = (arg as Record<string, unknown>).copy;
   if (typeof raw !== "string" || !raw) return;
   try {
@@ -77,5 +85,5 @@ export function copyPlural(key: string, fallback: string, count: number): string
   const pattern = copyParam(key, fallback);
   const match = /^\{n, plural, one \{([^{}]*)\} other \{([^{}]*)\}\}$/.exec(pattern);
   if (!match) return copyTemplate(key, fallback, { n: count });
-  return (count === 1 ? match[1] : match[2])!.replace(/#/g, String(count));
+  return (isSingular(count) ? match[1] : match[2])!.replace(/#/g, String(count));
 }

package/templates/beauty-salon/tier5-src/_shared/himi-restaurants.ts

@@ -104,7 +104,7 @@ export function itemPriceLine(item: WixItem): string {
   const currency = typeof info?.currency === "string" ? info.currency : "";
   if (!currency) return `${price}`;
   try {
-    return formatCurrency(Number(price), currency, "en");
+    return formatCurrency(Number(price), currency);
   } catch {
     return `${price}`;
   }
@@ -153,7 +153,7 @@ export function itemPriceVariants(item: WixItem): Array<{ id: string; variantId:
     let priceLine = `${price}`;
     if (currency) {
       try {
-        priceLine = formatCurrency(Number(price), currency, "en");
+        priceLine = formatCurrency(Number(price), currency);
       } catch { /* keep the bare amount */ }
     }
     const formatted = typeof node.priceInfo?.formattedPrice === "string" ? node.priceInfo.formattedPrice.trim() : "";

package/templates/beauty-salon/tier5-src/_shared/restaurant-ordering.ts

@@ -74,7 +74,7 @@ export function decimal(value: unknown): number {
 
 /** Cart V2 money carries no formatted string: format the decimal with the cart's currency. */
 export function money(amount: unknown, currency: string | undefined): string {
-  return formatCurrency(decimal(amount), (currency ?? "").trim() || "USD", "en");
+  return formatCurrency(decimal(amount), (currency ?? "").trim() || "USD");
 }
 
 export function cartCurrency(cart: WixCartV2 | undefined): string {

package/templates/beauty-salon/tier5-src/_shared/wix-service-price.ts

@@ -111,7 +111,7 @@ export function formatServiceMoney(money: unknown, fallbackCurrency = "USD"): st
   if (amount == null) return "";
   const currency = stringOf(m.currency) || fallbackCurrency;
   try {
-    return formatCurrency(amount, currency, "en", Number.isInteger(amount) ? 0 : undefined);
+    return formatCurrency(amount, currency, undefined, Number.isInteger(amount) ? 0 : undefined);
   } catch {
     return `${amount}`;
   }
@@ -139,7 +139,7 @@ export function formatServicePrice(service: unknown): string {
   try {
     // A whole amount drops its cents ("₪70", not "₪70.00"), as formatServiceMoney and the service
     // screen show it, so the same service reads the same price on every screen.
-    return formatCurrency(amount, currency, "en", Number.isInteger(amount) ? 0 : undefined);
+    return formatCurrency(amount, currency, undefined, Number.isInteger(amount) ? 0 : undefined);
   } catch {
     return `${amount}`;
   }

package/templates/beauty-salon/tier5-src/himi-booking-services/index.ts

@@ -14,7 +14,8 @@ import { defineService } from "@himalaya/state";
 import { defineBackendCollection } from "../_shared/collection-service.js";
 import { COLLECTION_CHROME_MIN_ITEMS } from "../_shared/collection-contract.js";
 import { queryServiceCategories, queryServices, type WixService } from "@himalaya/wix-bookings";
-import { categoryName, courseDatesText, courseHasEnded, serviceDurationText, servicePriceLine, type BookingLabel } from "../_shared/himi-bookings.js";
+import { businessTimeZone } from "../_shared/app-locale.js";
+import { categoryName, courseDatesText, courseHasEnded, courseNeedsZone, serviceDurationText, servicePriceLine, type BookingLabel } from "../_shared/himi-bookings.js";
 import { formatServicePrice } from "../_shared/wix-service-price.js";
 import { getAll, upsert, type DbEntity } from "@himalaya/local-db";
 import { get as getAppInfo } from "@himalaya/app-info";
@@ -74,7 +75,7 @@ interface Row {
   noTypeTag: boolean;
   endedText: string;
   /** Retain course dates so a cached catalog can refresh its status after the course ends. */
-  courseSchedule?: { firstSessionStart?: string; lastSessionEnd?: string };
+  courseSchedule?: { firstSessionStart?: string; lastSessionEnd?: string; timeZone?: string };
   /** "1 hr · ₪70"; a course: "Nov 3 – Dec 15, 2026 · ₪1,200". "" when the record has neither. */
   meta: string;
   /** Online booking by time is possible: online booking is on and the service is not a course. */
@@ -269,11 +270,15 @@ function norm(service: WixService): Row {
   ].filter(Boolean);
   const image = imageUrl(service);
   const isCourse = service.type === "COURSE";
+  // A session time Wix lists without an offset is the business's wall time: the schedule carries the
+  // provisioned zone that places it (none provisioned: not Ended, never a guess), and the cached row
+  // keeps it so an offline list can still age out.
   const courseSchedule = isCourse ? {
     firstSessionStart: service.schedule?.firstSessionStart,
     lastSessionEnd: service.schedule?.lastSessionEnd,
+    ...(businessTimeZone() && courseNeedsZone(service.schedule) ? { timeZone: businessTimeZone() } : {}),
   } : undefined;
-  const endedText = isCourse && courseHasEnded(service, Date.now()) ? copyParam("services.ended", "Ended") : "";
+  const endedText = courseSchedule && courseHasEnded({ schedule: courseSchedule }, Date.now()) ? copyParam("services.ended", "Ended") : "";
   const price = servicePriceLine(service, listLabel).text;
   const meta = [isCourse ? courseDatesText(service) : serviceDurationText(service, listLabel), price].filter(Boolean).join(" · ");
   const typeTag = typeTagOf(service.type);

package/templates/beauty-salon/tier5-src/himi-branded-lite-cart/index.ts

@@ -364,7 +364,7 @@ function calculatedDiscount(result: unknown, currency: string): string {
   const discount = (result as { summary?: { priceSummary?: { discount?: { amount?: string; convertedAmount?: string } } } } | null)?.summary?.priceSummary?.discount;
   const amount = Number(discount?.amount);
   if (!Number.isFinite(amount) || amount === 0 || !currency) return "";
-  return formattedDiscount(formatCurrency(Math.abs(amount), currency, "en"));
+  return formattedDiscount(formatCurrency(Math.abs(amount), currency));
 }
 
 function invalidCouponFailure(error: unknown): boolean {