@wix/himalaya-cli 0.1598.0 → 0.1600.0

package/guides/app-config.md

@@ -137,7 +137,7 @@ does not include answers `module_not_linked` on device. Some components need one
 and `himi validate` errors on a screen that uses one the app does not declare.
 `presigned_upload.putFile` also requires `files` on the calling screen.
 
-App-level capability vocabulary: `camera`, `barcode_scanner`, `biometrics`, `secure_storage`, `share`, `push`, `file_picker`, `files`, `open_url`, `pdf`, `clipboard`, `theme`, `l10n`, `photos`, `presigned_upload`, `ui`, `calendar`, `contacts`, `tasks`, `audio_record`, `audio_record_background`, `calls`, `location`, `location_background`, `motion`, `health`, `media_playback`, `webview`, `browser_auth`, `haptic`, `himi_apps`, `iap`, `keyboard`, `torch`, `network`, `wix_cashier`, `wix_chat`, `live_activity`, `local_database`, `speech`, `speaker_diarization`, `system_intents`, `on_device_ai`, `app_info`, `release_control`, `godot`, `base44`, `animation`.
+App-level capability vocabulary: `camera`, `barcode_scanner`, `biometrics`, `secure_storage`, `share`, `push`, `file_picker`, `files`, `open_url`, `pdf`, `clipboard`, `theme`, `l10n`, `photos`, `presigned_upload`, `ui`, `calendar`, `contacts`, `tasks`, `audio_record`, `audio_record_background`, `calls`, `location`, `location_background`, `motion`, `health`, `media_playback`, `webview`, `browser_auth`, `haptic`, `himi_apps`, `iap`, `keyboard`, `torch`, `network`, `wix_cashier`, `wix_chat`, `live_activity`, `local_database`, `speech`, `speaker_diarization`, `system_intents`, `on_device_ai`, `app_info`, `release_control`, `legacy_import`, `godot`, `base44`, `animation`.
 
 ## What `himi validate` checks (7 passes)
 

package/guides/capabilities.md

@@ -278,6 +278,7 @@ prompt.
   | `app_info` | the shell's boot has to configure it with the app id it reports |
   | `system_intents` | the shell has to wire the system-intents host (app identity, deep-link routing, refresh) |
   | `release_control` | the shell's boot has to configure it with the app id whose releases it switches |
+  | `legacy_import` | the shell's boot has to run the legacy importer before auth and feed it the signed-in principal |
   | `base44` | the shell's boot has to bind the Base44 app it talks to; the module links, the binding is the shell's |
   | `godot` | needs the shell's game surface view and, on Android, the shell's pick of the engine's C++ runtime |
 

package/guides/himi-json-output.md

@@ -406,7 +406,31 @@ unresolved migration finding.
 - `config_uninspectable`: the target `config.ts` cannot be read or the relevant
   `navigation.topBarDefault.actions` cannot be inspected (exit 1).
 - `topbar_coverage_failed`: a source top-bar control has no matching action
-  with a non-empty `onTap.actionId` (exit 1).
+  with a non-empty `onTap.actionId`, or a source badge's action is not a complete
+  live count. When the app's `navLogicBundle` is a Branded Lite badge worker, the
+  badge's `valuePath` must also be a count that worker holds
+  (`$service:brandedLiteNav.chatBadge`, `.notificationsBadge`, `.cartBadge`) and sit on
+  the matching button (exit 1).
+
+## `himi one-app header-badges` codes
+
+Binds the source header's bell, chat and cart counts in `config.ts`. Success prints
+`ok: true` and a `status`: `written`, `unchanged`, `would_write` (`--dry-run`),
+`no_badges` or `nothing_to_bind`; `unmapped` lists badge buttons that are not clearly
+a bell, chat or cart button and are never guessed. Failures print `ok: false` and a
+top-level `code` on stderr.
+
+- `invalid_usage`: required options are missing, duplicated, or unknown (exit 2).
+- `evidence_invalid`: the evidence manifest or a collected file is missing, invalid,
+  fails its recorded hash, or a platform's runtime context was unavailable (exit 1).
+- `config_uninspectable`: `config.ts` or `himalaya.content.json` cannot be read, so
+  the app's screens and navigation cannot be inspected, or `config.ts` cannot be
+  written; in that case the coverage ledger is put back as it was (exit 1).
+- `worker_missing`: the app has no `tier5-src/himi-branded-lite-header-badges`, so a
+  config naming that worker would 404; re-scaffold from the current template (exit 1).
+- `config_needs_manual_merge`: `config.ts` already has a `topBarDefault` or
+  `navLogicBundle` that differs, or its `navigation` cannot be edited safely; the
+  literal to merge is returned in `snippet` and nothing is written (exit 1).
 
 ## `himi one-app validate-design` codes
 

package/guides/importable-sdks.md

@@ -40,6 +40,7 @@ package in one greppable file) or `GET /v1/sdk/<name>` over HTTP; in the CLI,
 - `@himalaya/keyboard` — Tier-5 typed binding for the platform's keyboard capability.
 - `@himalaya/kyber-api` — narrow Tier-5 binding for Kyber BO HTTP calls.
 - `@himalaya/l10n` — synchronous app-catalog copy (SDK foundation; requires host integration).
+- `@himalaya/legacy-import` — Tier-5 typed binding for the one-time legacy import report.
 - `@himalaya/live-activity` — Tier-5 typed binding to the platform's Live Activity capability.
 - `@himalaya/local-db` — Tier-5 typed binding to the platform's local-database capability: a per-entity on-device store (EntityStore) + an offline WriteQueue, so a worker bundle can persist and query real data on device.
 - `@himalaya/location` — Tier-5 typed binding for device location.

package/guides/one-app-to-himi-app.md

@@ -533,17 +533,39 @@ Apply these interpretation rules:
   without observer/listener fields. Do not infer a count badge for every custom
   component. Inspect its implementation and retain unknown behavior as unresolved.
 
-  Branded Lite's nav worker already counts the three source badges. Bind the bell to
-  `$service:brandedLiteNav.notificationsBadge` (the member's unseen notifications, read for the site the
-  native bridge is bound to), the chat button to `$service:brandedLiteNav.chatBadge` (the member's unread
-  business chatrooms, as the server counts them, capped at 100) and the cart button to
-  `$service:brandedLiteNav.cartBadge` (the shopper's cart item count, every line's quantity). Each is `null`
-  while unavailable (a Visitor's bell and chat, offline, a failed or stale read, an old binary or the web
-  for the bell) and the shell shows no badge for `null` or 0, so none is ever a fake zero. They refresh at
-  launch, whenever the signed-in identity changes (the previous identity's numbers go first), on every
-  foreground and on every notification receipt, and a read that finishes after the identity changed is
-  dropped. They do not poll: a screen that changes the cart (an add-to-cart, a checkout) must call
-  `tier5.brandedLiteNav.refreshBadges` itself, or the cart badge waits for the next trigger.
+  **Bell, chat and cart badges are bound by a command, not by hand.** `himi one-app migrate` writes
+  `header-badge-plan.json`: the counters the source header carries, found by each button's id, icon and
+  accessibility label (the observer or listener id only marks a button as carrying a badge; it does not
+  say which counter). A badge button that is not clearly a bell, chat or cart button is listed under
+  `unmapped`; its counter stays an open obligation, never guessed. After scaffolding from the Branded Lite
+  template and mapping each source screen to its Himi screen (the `route` rows of `ONE-APP-COVERAGE.json`), run
+
+  ```bash
+  himi one-app header-badges --evidence-dir .himi/one-app --content .
+  ```
+
+  It adds `navigation.topBarDefault` with one literal action per counter (ids `chat`, `notifications` and
+  `cart`, opening `himi_business_chat`, `himi_notifications` and `himi_cart`, each with
+  `badge: { kind: "count", valuePath: "$service:brandedLiteNav.<chatBadge|notificationsBadge|cartBadge>" }`)
+  and `navigation.navLogicBundle` for the badges-only worker the template already ships under
+  `tier5-src/himi-branded-lite-header-badges`, and it records each bound button's `target` in the coverage
+  ledger. A source with no badges changes nothing. It never overwrites: a config that already has a
+  `topBarDefault` or `navLogicBundle` (and a ledger target you set) is left alone and reported, with the
+  literal to merge (`config_needs_manual_merge`). Run it again after mapping routes if you ran it first:
+  the rows it wrote move to the mapped screen. Then run `validate-topbar`, which checks that each badge's
+  `valuePath` is a count the worker holds and sits on the right button. A screen with its own `topBar`
+  replaces `topBarDefault`, so `validate-topbar` still asks that screen to carry the action.
+
+  The counts: the bell is the member's unseen notifications (read for the site the native bridge is bound
+  to), chat is the member's unread business chatrooms (as the server counts them, capped at 100) and cart is
+  the shopper's item count (every line's quantity). Each is `null` while unavailable (a Visitor's bell and
+  chat, offline, a failed or stale read, an old binary or the web for the bell) and the shell shows no badge
+  for `null` or 0, so none is ever a fake zero. If the source shows the bell or chat badge to Visitors, the plan
+  warns: a Himi header shows them to signed-in members only. They refresh at launch, whenever the signed-in
+  identity changes (the previous identity's numbers go first), on every foreground and on every notification
+  receipt, and a read that finishes after the identity changed is dropped. They do not poll: a screen that
+  changes the cart (an add-to-cart, a checkout) must call `tier5.brandedLiteNav.refreshBadges` itself, or the
+  cart badge waits for the next trigger.
 
   Use a live `badge: { kind: "count", valuePath: "$service:sourceBadges.count" }`
   only after implementing the actual source counter. Preserve the source button

package/guides/sdk-reference.json

@@ -3198,6 +3198,49 @@
       }
     ]
   },
+  {
+    "name": "@himalaya/legacy-import",
+    "source": "core/sdk/legacy-import/src/index.ts",
+    "description": "Tier-5 typed binding for the one-time legacy import report.",
+    "api": [
+      {
+        "name": "LegacyImportSourceReport",
+        "kind": "interface",
+        "jsdoc": "",
+        "decl": "export interface LegacyImportSourceReport {\n  id: string;\n  /** `done` | `empty` | `incomplete` | `failed` | `unregistered_kind` | `invalid_options` */\n  status: string;\n  /** Item counts — `items`, plus one per sink the source's items went to. */\n  counts: Record<string, number>;\n  error?: string;\n}"
+      },
+      {
+        "name": "LegacyImportReportItem",
+        "kind": "interface",
+        "jsdoc": "",
+        "decl": "export interface LegacyImportReportItem {\n  key: string;\n  /** The item's value — UTF-8 text, or base64 when `meta.encoding === \"base64\"`. */\n  value: string;\n  meta?: Record<string, string>;\n}"
+      },
+      {
+        "name": "LegacyImportReport",
+        "kind": "interface",
+        "jsdoc": "",
+        "decl": "export interface LegacyImportReport {\n  /** The `legacyImport.id` that produced it. */\n  id: string;\n  /** Epoch ms the import ran. */\n  extractedAt: number;\n  sources: LegacyImportSourceReport[];\n  /** Only the `report` sink's items. */\n  items: LegacyImportReportItem[];\n}"
+      },
+      {
+        "name": "read",
+        "kind": "function",
+        "jsdoc": "/** The import report for the signed-in principal, or null — none ran, it was acknowledged, it\n *  belongs to another account, or this host has nothing to import (web). */",
+        "decl": "export async function read(): Promise<LegacyImportReport | null>;"
+      },
+      {
+        "name": "ack",
+        "kind": "function",
+        "jsdoc": "/** Delete the report. Idempotent: acknowledging twice (or with nothing to acknowledge) is fine. */",
+        "decl": "export async function ack(): Promise<void>;"
+      },
+      {
+        "name": "version",
+        "kind": "const",
+        "jsdoc": "/** Capability version, for bundles that gate on min binary version. */",
+        "decl": "export const version = 1;"
+      }
+    ]
+  },
   {
     "name": "@himalaya/live-activity",
     "source": "core/sdk/live-activity/src/index.ts",

package/guides/web-page-native-sdk.md

@@ -39,7 +39,7 @@ Your page can only use capabilities the **app owner** turned on for your site. I
   `capabilities`, allowing **every** method the capability's page lists — except
   `presigned_upload.putFile`, which reads a device file and is allowed only when `files` is enabled
   too. So enabling a capability is enough; the owner does not list methods.
-- **What a Brandy app cannot enable:** `app_info`, `godot`, `himi_apps`, `live_activity`,
+- **What a Brandy app cannot enable:** `app_info`, `godot`, `himi_apps`, `legacy_import`, `live_activity`,
   `local_database`, `release_control`, `system_intents`, `ui` and `wix_platform` — most need wiring
   a website app's shell does not have, so plan your page without them. `base44` works only when the
   app also has a Base44 binding. Every other capability in the reference can be enabled; other Himi

package/guides/web-page-sdk-reference.md

@@ -32,6 +32,7 @@ the SDK sources, so it matches the shipped SDKs.
 - [`himi_apps`](https://apps.wix.com/_api/himi-serve/authoring/resource/web-sdk%2Fhimi_apps?format=md) — Cross-app open / host queries. 4 methods · not in Brandy.
 - [`iap`](https://apps.wix.com/_api/himi-serve/authoring/resource/web-sdk%2Fiap?format=md) — In-app-purchase capability. 9 methods.
 - [`keyboard`](https://apps.wix.com/_api/himi-serve/authoring/resource/web-sdk%2Fkeyboard?format=md) — Keyboard capability. 1 method.
+- [`legacy_import`](https://apps.wix.com/_api/himi-serve/authoring/resource/web-sdk%2Flegacy_import?format=md) — One-time legacy import report. 2 methods · not in Brandy.
 - [`live_activity`](https://apps.wix.com/_api/himi-serve/authoring/resource/web-sdk%2Flive_activity?format=md) — Live Activity capability. 3 methods · not in Brandy.
 - [`local_database`](https://apps.wix.com/_api/himi-serve/authoring/resource/web-sdk%2Flocal_database?format=md) — Local-database capability: a per-entity on-device store (EntityStore) + an offline WriteQueue, so a worker bundle can persist and query real data on device. 11 methods · not in Brandy.
 - [`location`](https://apps.wix.com/_api/himi-serve/authoring/resource/web-sdk%2Flocation?format=md) — Device location. 10 methods.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@wix/himalaya-cli",
-  "version": "0.1598.0",
+  "version": "0.1600.0",
   "type": "module",
   "description": "himi — the Himalaya authoring CLI. Build a Tier-5 content package on your own machine, push it to the production serve as a draft, preview it on web + Himi Player, and read worker logs back — the remote dev loop. Wraps @himalaya/serve-cli for transport.",
   "keywords": [
@@ -72,5 +72,5 @@
       "artifactId": "himalaya-cli"
     }
   },
-  "falconPackageHash": "96e1d99eb8f2d094da98bb99d996d441c41fcfa91bedade74520607a"
+  "falconPackageHash": "345b024a67019de4aeafb2b81fa91e65d43675b03bb58533eefb85a7"
 }

package/templates/beauty-salon/dev/index.ts

@@ -42270,6 +42270,72 @@ const TEMPLATED: { pattern: string; display: string; liveSeed?: LiveSeed; static
                                   }
                                 }
                               }
+                            },
+                            {
+                              "id": "",
+                              "body": {
+                                "package": "himalaya",
+                                "type": "HStack",
+                                "props": {
+                                  "spacing": 8,
+                                  "children": [
+                                    {
+                                      "id": "himi_blog_post.report",
+                                      "body": {
+                                        "package": "himalaya",
+                                        "type": "Button",
+                                        "props": {
+                                          "title": "Report",
+                                          "style": "secondary",
+                                          "fullWidth": true,
+                                          "action": {
+                                            "actionId": "tier5.himiBlogPost.report"
+                                          }
+                                        }
+                                      },
+                                      "modifiers": {
+                                        "hiddenPath": "$service:himiBlogPost.reported"
+                                      }
+                                    },
+                                    {
+                                      "id": "himi_blog_post.hide",
+                                      "body": {
+                                        "package": "himalaya",
+                                        "type": "Button",
+                                        "props": {
+                                          "title": "Hide post",
+                                          "style": "secondary",
+                                          "fullWidth": true,
+                                          "action": {
+                                            "actionId": "tier5.himiBlogPost.openHide"
+                                          }
+                                        }
+                                      },
+                                      "modifiers": {
+                                        "hiddenPath": "$service:himiBlogPost.hidden"
+                                      }
+                                    },
+                                    {
+                                      "id": "himi_blog_post.unhide",
+                                      "body": {
+                                        "package": "himalaya",
+                                        "type": "Button",
+                                        "props": {
+                                          "title": "Undo hide",
+                                          "style": "secondary",
+                                          "fullWidth": true,
+                                          "action": {
+                                            "actionId": "tier5.himiBlogPost.unhide"
+                                          }
+                                        }
+                                      },
+                                      "modifiers": {
+                                        "hiddenPath": "$service:himiBlogPost.notHidden"
+                                      }
+                                    }
+                                  ]
+                                }
+                              }
                             }
                           ]
                         }
@@ -42528,6 +42594,122 @@ const TEMPLATED: { pattern: string; display: string; liveSeed?: LiveSeed; static
                 "hiddenPath": "$service:himiBlogPost.noPost"
               }
             },
+            {
+              "id": "himi_blog_post.hide_sheet",
+              "body": {
+                "package": "himalaya",
+                "type": "BottomSheet",
+                "props": {
+                  "presentedPath": "$service:himiBlogPost.hideSheetOpen",
+                  "dismissible": true,
+                  "showGrabber": true,
+                  "onDismiss": {
+                    "actionId": "tier5.himiBlogPost.closeHide"
+                  },
+                  "content": {
+                    "id": "",
+                    "body": {
+                      "package": "himalaya",
+                      "type": "VStack",
+                      "props": {
+                        "spacing": 12,
+                        "alignment": "leading",
+                        "children": [
+                          {
+                            "id": "",
+                            "body": {
+                              "package": "himalaya",
+                              "type": "Text",
+                              "props": {
+                                "text": "Why are you hiding this post?",
+                                "style": "title3"
+                              }
+                            }
+                          },
+                          {
+                            "id": "himi_blog_post.hide_offensive",
+                            "body": {
+                              "package": "himalaya",
+                              "type": "Button",
+                              "props": {
+                                "title": "It is offensive",
+                                "style": "secondary",
+                                "fullWidth": true,
+                                "action": {
+                                  "actionId": "tier5.himiBlogPost.hide",
+                                  "params": {
+                                    "reason": "offensive"
+                                  }
+                                }
+                              }
+                            }
+                          },
+                          {
+                            "id": "himi_blog_post.hide_misleading",
+                            "body": {
+                              "package": "himalaya",
+                              "type": "Button",
+                              "props": {
+                                "title": "It is misleading",
+                                "style": "secondary",
+                                "fullWidth": true,
+                                "action": {
+                                  "actionId": "tier5.himiBlogPost.hide",
+                                  "params": {
+                                    "reason": "misleading"
+                                  }
+                                }
+                              }
+                            }
+                          },
+                          {
+                            "id": "himi_blog_post.hide_other",
+                            "body": {
+                              "package": "himalaya",
+                              "type": "Button",
+                              "props": {
+                                "title": "Something else",
+                                "style": "secondary",
+                                "fullWidth": true,
+                                "action": {
+                                  "actionId": "tier5.himiBlogPost.hide",
+                                  "params": {
+                                    "reason": "other"
+                                  }
+                                }
+                              }
+                            }
+                          },
+                          {
+                            "id": "himi_blog_post.hide_cancel",
+                            "body": {
+                              "package": "himalaya",
+                              "type": "Button",
+                              "props": {
+                                "title": "Cancel",
+                                "style": "secondary",
+                                "fullWidth": true,
+                                "action": {
+                                  "actionId": "tier5.himiBlogPost.closeHide"
+                                }
+                              }
+                            }
+                          }
+                        ]
+                      }
+                    },
+                    "modifiers": {
+                      "padding": {
+                        "leading": 20,
+                        "trailing": 20,
+                        "top": 16,
+                        "bottom": 24
+                      }
+                    }
+                  }
+                }
+              }
+            },
             {
               "id": "",
               "body": {

package/templates/beauty-salon/tier5-src/_shared/himi-blog-hidden.ts

@@ -0,0 +1,66 @@
+// The posts this device's reader chose to hide, as the One App blog does: a client-side list of post ids that the
+// blog feed, the Home cards and Saved leave out. Nothing is sent to the site, and another device or account does not
+// share it. It is the saved-posts store's twin (see himi-blog-saved.ts) and reads storage the same way: native workers
+// have only the sync `himalaya.storage` KV, a browser has `localStorage`, and each screen runs its own worker, so
+// the durable arm is what lets a Hide on the post screen reach the feed's worker.
+const KEY = "himi-blog:hidden-posts:v1";
+
+type StorageLike = {
+  getItem: (key: string) => string | null;
+  setItem: (key: string, value: string) => void;
+};
+
+type HiddenHost = typeof globalThis & {
+  himalaya?: { storage?: StorageLike };
+  localStorage?: StorageLike;
+  __himiBlogHiddenIds?: string[];
+};
+
+const host = globalThis as HiddenHost;
+
+function storage(): StorageLike | undefined {
+  return host.himalaya?.storage ?? host.localStorage;
+}
+
+const unique = (ids: string[]): string[] => Array.from(new Set(ids.map((id) => id.trim()).filter(Boolean)));
+
+export function readHiddenIds(): string[] {
+  try {
+    const raw = storage()?.getItem(KEY);
+    if (raw) {
+      const parsed = JSON.parse(raw);
+      if (Array.isArray(parsed)) return unique(parsed.filter((id): id is string => typeof id === "string"));
+    }
+  } catch {
+    // Unreadable storage: fall back to what this worker context holds in memory.
+  }
+  return unique(host.__himiBlogHiddenIds ?? []);
+}
+
+function writeHiddenIds(ids: string[]): void {
+  const next = unique(ids);
+  host.__himiBlogHiddenIds = next;
+  try {
+    storage()?.setItem(KEY, JSON.stringify(next));
+  } catch {
+    // Storage-less hosts keep the in-memory arm only.
+  }
+}
+
+export function isHiddenId(id: string): boolean {
+  return readHiddenIds().includes(id);
+}
+
+export function hideId(id: string): void {
+  writeHiddenIds([id, ...readHiddenIds()]);
+}
+
+export function unhideId(id: string): void {
+  writeHiddenIds(readHiddenIds().filter((hiddenId) => hiddenId !== id));
+}
+
+/** The items a list may show: every one whose `id` this device has not hidden. */
+export function withoutHidden<T extends { id?: string | null }>(items: T[]): T[] {
+  const hidden = new Set(readHiddenIds());
+  return hidden.size ? items.filter((item) => !item.id || !hidden.has(item.id)) : items;
+}

package/templates/beauty-salon/tier5-src/himi-blog-feed/index.ts

@@ -4,6 +4,7 @@ import { queryCategories, queryPosts, type WixPost } from "@himalaya/wix-blog";
 import { stashCopy, copyParam } from "../_shared/himi-copy.js";
 import { getAll, upsert, type DbEntity } from "@himalaya/local-db";
 import { formatDateMedium } from "../_shared/engine-intl.js";
+import { withoutHidden } from "../_shared/himi-blog-hidden.js";
 
 const PAGE_SIZE = 20;
 
@@ -137,7 +138,8 @@ function normalize(post: WixPost, categoryMap: Map<string, string>): PostRow {
 
 function applyFilters(s: S): S {
   const needle = s.query.trim().toLowerCase();
-  const posts = s.allPosts.filter((post) => {
+  // Posts this device's reader hid (on the post screen) never show, whatever the cache or the live page holds.
+  const posts = withoutHidden(s.allPosts).filter((post) => {
     const categoryOk = !s.selectedCategoryId || post.categoryId === s.selectedCategoryId;
     const queryOk =
       !needle ||

package/templates/beauty-salon/tier5-src/himi-blog-post/index.ts

@@ -5,6 +5,7 @@ import { getPost, likePost, unlikePost, type WixPost, type WixPostWithContent }
 import { comments, BLOG_COMMENTS_APP_ID, blogCommentRow, listBlogComments, type WixBlogCommentRow } from "@himalaya/wix-comments";
 import { get, type DbEntity } from "@himalaya/local-db";
 import { isSavedId, toggleSavedId } from "../_shared/himi-blog-saved";
+import { hideId, isHiddenId, unhideId } from "../_shared/himi-blog-hidden";
 import { stashCopy, copyParam, copyTemplate } from "../_shared/himi-copy.js";
 import { formatDateMedium, formatMonthDay } from "../_shared/engine-intl.js";
 import { openRichLink } from "../_shared/rich-content-link.js";
@@ -64,6 +65,14 @@ interface S {
   notLiked: boolean;
   saved: boolean;
   notSaved: boolean;
+  /** This device's reader hid the post: the feed, Home and Saved leave it out, and this screen offers Undo. */
+  hidden: boolean;
+  notHidden: boolean;
+  /** The reason sheet (offensive / misleading / other) is open. */
+  hideSheetOpen: boolean;
+  /** The reader reported the post this visit; the report button then says so and stops sending. */
+  reported: boolean;
+  notReported: boolean;
   commentDraft: string;
   comments: CommentRow[];
   commentsUnavailable: boolean;
@@ -212,6 +221,8 @@ function derive(s: S): S {
     hasBodyJson: s.bodyJson !== "",
     notLiked: !s.liked,
     notSaved: !s.saved,
+    notHidden: !s.hidden,
+    notReported: !s.reported,
     commentsAvailable: !s.commentsUnavailable,
   };
 }
@@ -238,6 +249,11 @@ const baseState: S = derive({
   notLiked: true,
   saved: false,
   notSaved: true,
+  hidden: false,
+  notHidden: true,
+  hideSheetOpen: false,
+  reported: false,
+  notReported: true,
   commentDraft: "",
   comments: [],
   commentsUnavailable: false,
@@ -278,6 +294,7 @@ async function cachedPostState(s: S, id: string): Promise<S> {
     initial: String(cached.initial ?? "") || (title[0] || "#").toUpperCase(),
     liked: false,
     saved: isSavedId(id),
+    hidden: isHiddenId(id),
     comments: [],
     commentsUnavailable: true,
     commentStatusText: copyParam("blogPost.commentsUnavailable", "Comments are unavailable right now."),
@@ -331,6 +348,7 @@ async function loadPostState(s: S): Promise<S | undefined> {
       initial: (title[0] || "#").toUpperCase(),
       liked: Boolean(post.memberInteraction?.liked),
       saved: isSavedId(id),
+      hidden: isHiddenId(id),
       comments,
       commentsUnavailable,
       commentStatusText: commentsUnavailable
@@ -359,6 +377,14 @@ const svc = defineService<S, {
   like: (s: S) => Promise<S>;
   unlike: (s: S) => Promise<S>;
   toggleSave: (s: S) => S;
+  /** Report the post: no site API takes a member's report, so the reader is thanked and the tap is the signal. */
+  report: (s: S) => S;
+  openHide: (s: S) => S;
+  closeHide: (s: S) => S;
+  /** Hide the post on this device. The sheet's three reasons (offensive, misleading, other) are asked for as the One
+   *  App asks them, but the list keeps only the id and the site is told nothing, so the worker does not read the reason. */
+  hide: (s: S) => S;
+  unhide: (s: S) => S;
   share: (s: S) => Promise<S>;
   setComment: (s: S, arg?: unknown) => S;
   submitComment: (s: S) => Promise<S>;
@@ -397,6 +423,22 @@ const svc = defineService<S, {
       const saved = toggleSavedId(s.id);
       return derive({ ...s, saved, actionMessage: saved ? copyParam("blogPost.savedMessage", "Saved for later") : copyParam("blogPost.unsavedMessage", "Removed from saved") });
     },
+    report: (s) => {
+      if (!s.id || s.reported) return s;
+      return derive({ ...s, reported: true, actionMessage: copyParam("blogPost.reportedMessage", "Post reported") });
+    },
+    openHide: (s) => s.id ? derive({ ...s, hideSheetOpen: true }) : s,
+    closeHide: (s) => derive({ ...s, hideSheetOpen: false }),
+    hide: (s) => {
+      if (!s.id) return s;
+      hideId(s.id);
+      return derive({ ...s, hidden: true, hideSheetOpen: false, actionMessage: copyParam("blogPost.hiddenMessage", "Post hidden. It will not show in your feeds.") });
+    },
+    unhide: (s) => {
+      if (!s.id) return s;
+      unhideId(s.id);
+      return derive({ ...s, hidden: false, actionMessage: copyParam("blogPost.unhiddenMessage", "Post is visible again") });
+    },
     share: async (s) => {
       if (!s.title) return s;
       try {

package/templates/beauty-salon/tier5-src/himi-blog-saved/index.ts

@@ -3,6 +3,7 @@ import { defineService } from "@himalaya/state";
 import { getPost, type WixPost } from "@himalaya/wix-blog";
 import { get, type DbEntity } from "@himalaya/local-db";
 import { readSavedIds, writeSavedIds } from "../_shared/himi-blog-saved";
+import { readHiddenIds } from "../_shared/himi-blog-hidden";
 import { stashCopy, copyParam } from "../_shared/himi-copy.js";
 import { formatDateMedium } from "../_shared/engine-intl.js";
 
@@ -144,7 +145,9 @@ const baseState: S = derive({
 });
 
 async function loadSavedState(s: S): Promise<S> {
-  const ids = readSavedIds();
+  // A saved post this device's reader also hid stays in the saved list (Undo brings it back) but is not shown.
+  const hidden = new Set(readHiddenIds());
+  const ids = readSavedIds().filter((id) => !hidden.has(id));
   if (!ids.length) {
     return derive({ ...s, status: "ready", posts: [], emptyText: copyParam("saved.emptyText", "No saved posts yet.") });
   }

package/templates/beauty-salon/tier5-src/himi-branded-lite-home/index.ts

@@ -26,6 +26,7 @@ import { formatDateMedium } from "../_shared/engine-intl.js";
 import { readSavedProducts, type SavedProduct } from "../_shared/himi-store-saved.js";
 import { loadStoreCategories, type StoreCategoryCard } from "../_shared/himi-store-categories.js";
 import { readSavedIds } from "../_shared/himi-blog-saved.js";
+import { withoutHidden } from "../_shared/himi-blog-hidden.js";
 import { wixMediaUrl } from "@himalaya/wix-media";
 import { groupImage, programImage } from "../_shared/himi-media.js";
 import { isWixVideoWebRefusal, listLatestVideos, videoCard, type WixVideoCard } from "@himalaya/wix-video";
@@ -770,8 +771,10 @@ async function fetchExtrasSignal(arg: unknown): Promise<ExtrasSignal> {
     // read used to make; a failure collapses both blocks silently.
     jobs.push(queryPosts({ query: { paging: { limit: 8 }, sort: [{ fieldName: "firstPublishedDate", order: "DESC" }] } })
       .then((response) => {
-        extras.announcementTitle = cleanTitle(response.posts?.[0]?.title);
-        extras.postCards = (response.posts ?? []).filter((post) => post.id).slice(0, 6).map(postCard);
+        // Posts this device's reader hid on the post screen are left out of both blocks.
+        const posts = withoutHidden(response.posts ?? []);
+        extras.announcementTitle = cleanTitle(posts[0]?.title);
+        extras.postCards = posts.filter((post) => post.id).slice(0, 6).map(postCard);
       })
       .catch(() => { /* collapse silently */ }));
   }