@wix/himalaya-cli 0.1633.0 → 0.1635.0

package/templates/branded-lite/himalaya.content.json

@@ -142,6 +142,9 @@
     "himi_groups": {
       "displayName": "Groups"
     },
+    "himi_inbox": {
+      "displayName": "Conversations"
+    },
     "himi_invoice": {
       "displayName": "Invoice"
     },

package/templates/branded-lite/l10n/en.json

@@ -1,6 +1,6 @@
 {
   "$source": "en",
-  "$generated": "2026-11-09T18:25:39.914Z",
+  "$generated": "2026-11-10T10:43:25.380Z",
   "messages": {
     "h_042c862e4467": {
       "source": "Try again",
@@ -27,7 +27,7 @@
         "himi_member_programs#payload.body.props.children[5].body.props.children[2].body.props.title",
         "himi_plans#payload.body.props.children[4].body.props.children[2].body.props.title",
         "himi_feed#payload.body.props.children[8].body.props.children[2].body.props.title",
-        "himi_members#payload.body.props.children[5].body.props.children[1].body.props.title",
+        "himi_members#payload.body.props.children[6].body.props.children[1].body.props.title",
         "himi_coupons#payload.body.props.children[4].body.props.children[8].body.props.children[2].body.props.title",
         "himi_notifications#payload.body.props.children[6].body.props.children[8].body.props.children[2].body.props.title",
         "himi_loyalty#payload.body.props.children[5].body.props.children[1].body.props.title",
@@ -47,7 +47,6 @@
         "himi_my_groups#payload.body.props.children[2].body.props.children[2].body.props.title",
         "himi_faq#payload.body.props.children[6].body.props.children[2].body.props.title",
         "himi_steps#payload.body.props.children[4].body.props.children[2].body.props.title",
-        "himi_cms#payload.body.props.children[3].body.props.children[7].body.props.children[2].body.props.title",
         "himi_donations#payload.body.props.children[4].body.props.children[8].body.props.children[2].body.props.title",
         "himi_gift_cards#payload.body.props.children[4].body.props.children[8].body.props.children[2].body.props.title",
         "himi_videos#payload.body.props.children[7].body.props.children[8].body.props.children[2].body.props.title",
@@ -57,6 +56,7 @@
         "himi_form#payload.body.props.children[6].body.props.ctaLabel",
         "himi_galleries#payload.body.props.children[4].body.props.children[8].body.props.children[2].body.props.title",
         "himi_business_chat#payload.body.props.children[1].body.props.children[3].body.props.title",
+        "himi_inbox#payload.body.props.children[7].body.props.children[1].body.props.title",
         "himi_food_orders#payload.body.props.children[3].body.props.children[2].body.props.title",
         "himi_order#payload.body.props.children[2].body.props.ctaLabel",
         "himi_product#payload.body.props.children[0].body.props.children[2].body.props.title",
@@ -163,7 +163,7 @@
       "kind": "modifier.accessibilityLabel",
       "occurrences": [
         "himi_chat_thread#stickyFooter.body.props.children[0].body.props.children[0].modifiers.accessibilityLabel",
-        "himi_business_chat#stickyFooter.body.props.children[1].body.props.children[0].modifiers.accessibilityLabel"
+        "himi_business_chat#stickyFooter.body.props.children[1].body.props.children[0].body.props.children[1].modifiers.accessibilityLabel"
       ],
       "translation": "",
       "key": "chatThread.composerLabel"
@@ -297,7 +297,7 @@
       "kind": "TextField.placeholder",
       "occurrences": [
         "himi_chat_thread#stickyFooter.body.props.children[0].body.props.children[0].body.props.placeholder",
-        "himi_business_chat#stickyFooter.body.props.children[1].body.props.children[0].body.props.placeholder"
+        "himi_business_chat#stickyFooter.body.props.children[1].body.props.children[0].body.props.children[1].body.props.placeholder"
       ],
       "translation": "",
       "key": "chatThread.composerPlaceholder"
@@ -424,7 +424,6 @@
         "himi_forum_post#payload.body.props.children[3].body.props.title",
         "himi_my_events#payload.body.props.children[1].body.props.children[3].body.props.title",
         "himi_my_groups#payload.body.props.children[6].body.props.children[3].body.props.title",
-        "himi_cms#payload.body.props.children[3].body.props.children[7].body.props.children[3].body.props.title",
         "himi_donations#payload.body.props.children[4].body.props.children[8].body.props.children[3].body.props.title",
         "himi_gift_cards#payload.body.props.children[4].body.props.children[8].body.props.children[3].body.props.title",
         "himi_videos#payload.body.props.children[7].body.props.children[8].body.props.children[3].body.props.title",
@@ -434,6 +433,7 @@
         "himi_forms#payload.body.props.children[7].body.props.ctaLabel",
         "himi_galleries#payload.body.props.children[4].body.props.children[8].body.props.children[3].body.props.title",
         "himi_business_chat#payload.body.props.children[1].body.props.children[2].body.props.title",
+        "himi_inbox#payload.body.props.children[7].body.props.children[2].body.props.title",
         "himi_food_orders#payload.body.props.children[11].body.props.children[1].body.props.children[3].body.props.title",
         "himi_order#payload.body.props.children[6].body.props.ctaLabel",
         "himi_time#payload.body.props.children[5].body.props.children[4].body.props.children[0].body.props.children[5].body.props.title",

package/templates/branded-lite/tier5-src/_shared/branded-lite-hosted.ts

@@ -97,6 +97,7 @@ export const HOSTED_SCREEN_VERTICALS: Readonly<Record<string, readonly BrandedLi
   himi_gift_card: ["giftCards"],
   himi_gift_cards: ["giftCards"],
   himi_groups: ["groups"],
+  himi_inbox: ["inbox"],
   himi_group_about: ["groups"],
   himi_my_groups: ["groups"],
   himi_invoice: ["invoices"],

package/templates/branded-lite/tier5-src/_shared/business-chat-history.ts

@@ -27,7 +27,10 @@ export function smartChatHistory(aiMessages: unknown[], memberPage: unknown[], p
     const mine = sender === 'SITE_VISITOR' && VISITOR_TYPES.has(kind);
     if (!mine && !(sender === 'ASSISTANT' && ASSISTANT_TYPES.has(kind)) && !(sender === 'USER' && STAFF_TYPES.has(kind))) continue;
     const body = object(message.body);
-    const bodyText = [text(body.mainText), text(body.footerText)].filter(Boolean).join('\n');
+    const selectedAction = kind === 'VISITOR_OPTION_SELECTED' && Array.isArray(body.additionalData)
+      ? body.additionalData.map(object).find(part => part.type === 'select_option' && text(part.action).trim())?.action
+      : '';
+    const bodyText = [text(body.mainText) || text(selectedAction), text(body.footerText)].filter(Boolean).join('\n');
     const rich = memberRows.get(text(message.inboxId));
     // A quick-reply-only metadata answer is not an empty bubble (the options are shown by the composer).
     if (!bodyText && !rich) continue;

package/templates/branded-lite/tier5-src/_shared/business-chat-presenter.ts

@@ -1,3 +1,4 @@
+import { isBusinessRoom } from "./inbox-rooms.js";
 import { businessChatCopy } from "./business-chat-copy.js";
 import { formatMonthDay } from "./engine-intl.js";
 type RecordValue = Record<string, unknown>;
@@ -78,13 +79,7 @@ const object = (value: unknown): RecordValue =>
 /** Return a sole existing two-party business room, or a unique business-name match among several;
  * never create a room or guess among remaining matches. */
 export function selectExistingBusinessRoom(rooms: unknown[], businessName?: string, requireUnambiguous = false): { id: string; participantId: string } | undefined {
-  let candidates = rooms.filter((value) => {
-    const room = object(value);
-    return typeof room.id === "string" && !!room.id &&
-      typeof room.participantId === "string" && !!room.participantId &&
-      room.participantCount === 2 && room.clientReferenceType === "contactId" &&
-      Object.keys(object(room.businessContext)).length > 0;
-  });
+  let candidates = rooms.filter(isBusinessRoom);
   const candidateCount = candidates.length;
   if (candidateCount > 1 && businessName?.trim()) {
     // Keep case significant so differently named businesses are not conflated.

package/templates/branded-lite/tier5-src/_shared/collection-contract.ts

@@ -92,7 +92,6 @@ export const COLLECTIONS: Record<string, CollectionConfig> = {
     searchPlaceholder: 'Customer name, email or order #', sortLabels: { default: 'Newest', az: 'Customer A–Z', za: 'Customer Z–A' },
     filterValues: ['Recent 7 days', 'Paid', 'Unpaid', 'Partially paid', 'Pending', 'Refunded', 'Partly refunded'] },
   himiBrandedGroups: { rows: 'rows', title: 'name', subtitle: 'description', image: 'image', view: 'grid' },
-  himiBrandedCms: { rows: 'rows', title: 'name', subtitle: 'subtitle', view: 'grid' },
   himiBrandedCmsCollection: { instanceInput: 'collection', rows: 'rows', title: 'title', subtitle: 'subtitle', view: 'list' },
   himiBrandedOrders: { rows: 'rows', title: 'title', subtitle: 'subtitle', image: 'image', metadata: ['status', 'meta'], rowStyle: 'flat', view: 'list', backendQuery: true,
     searchPlaceholder: 'Search by order number', countNoun: ['order', 'orders'], filterValues: ['Not fulfilled', 'Partially fulfilled', 'Fulfilled'],

package/templates/branded-lite/tier5-src/_shared/header-badges.ts

@@ -70,7 +70,7 @@ export function headerBadges<S extends HeaderBadgeState>(update: Update<S>, self
   const actions: HeaderBadgeActionSignatures<S> = {
     refreshBadges: async (s) => {
       const mine = ++read;
-      const badges = await readSourceBadges(session.site());
+      const badges = await readSourceBadges(session.current().kind === "member");
       return update(s, async (current) => mine === read
         ? { ...current, notificationsBadge: badges.notifications, chatBadge: badges.chat, cartBadge: badges.cart, errorText: badges.failed.length ? `could not read: ${badges.failed.join(", ")}` : "" }
         : current);

package/templates/branded-lite/tier5-src/_shared/himi-cms.ts

@@ -1,5 +1,6 @@
 import {
   queryDataItems as queryWixDataItems,
+  countDataItems,
   insertDataItem,
   updateDataItem,
   removeDataItem,
@@ -8,7 +9,7 @@ import {
 } from "@himalaya/wix-data";
 
 export type { WixDataItem, WixQueryDataItemsResponse };
-export { insertDataItem, updateDataItem, removeDataItem };
+export { countDataItems, insertDataItem, updateDataItem, removeDataItem };
 
 export interface CmsFieldDefinition {
   key: string;

package/templates/branded-lite/tier5-src/_shared/inbox-rooms.ts

@@ -0,0 +1,68 @@
+// The member's Inbox rows: every chatroom the member-role chat list returns, business and member alike.
+// Pure, so the worker and its tests share one classification of what a room is.
+
+type RecordValue = Record<string, unknown>;
+const object = (value: unknown): RecordValue =>
+  value !== null && typeof value === "object" && !Array.isArray(value) ? value as RecordValue : {};
+
+/** The two-party room between the member and the business (the Smart Chat room). Another member's
+ *  room has no `businessContext`, and a contact-less room is not the business's. */
+export function isBusinessRoom(value: unknown): boolean {
+  const room = object(value);
+  return typeof room.id === "string" && !!room.id &&
+    typeof room.participantId === "string" && !!room.participantId &&
+    room.participantCount === 2 && room.clientReferenceType === "contactId" &&
+    Object.keys(object(room.businessContext)).length > 0;
+}
+
+export interface InboxRow {
+  id: string;
+  title: string;
+  subtitle: string;
+  /** The screen a tap opens: the business chat for the business room, a thread for any other. */
+  screenId: "himi_business_chat" | "himi_chat_thread";
+  /** `chatroom` makes the thread use `id` as the room instead of resolving it as a member id. */
+  kind: "chatroom" | "";
+  photo: string;
+  initial: string;
+  unread: boolean;
+  unreadDot: string;
+  /** Sort key only; not bound to the screen. */
+  at: number;
+}
+
+const text = (value: unknown): string => (typeof value === "string" ? value.trim() : "");
+
+function titleOf(room: RecordValue, business: boolean): string {
+  const display = text(object(room.displayData).name);
+  if (business) return text(object(room.businessContext).name) || display;
+  return display;
+}
+
+/** Newest conversation first; archived rooms and rooms without an id are dropped. `fallbackTitle` names a
+ *  room that carries no name (the caller passes the localised word, not a hard-coded English one). */
+export function inboxRows(rooms: unknown[], fallbackTitle: string): InboxRow[] {
+  const rows: InboxRow[] = [];
+  for (const value of rooms) {
+    const room = object(value);
+    const id = text(room.id);
+    if (!id || room.isArchived === true) continue;
+    const business = isBusinessRoom(room);
+    const title = titleOf(room, business) || fallbackTitle;
+    const last = object(room.lastMessage);
+    const unread = typeof room.unreadCount === "number" && room.unreadCount > 0;
+    rows.push({
+      id,
+      title,
+      subtitle: text(last.summary),
+      screenId: business ? "himi_business_chat" : "himi_chat_thread",
+      kind: business ? "" : "chatroom",
+      photo: text(object(object(room.displayData).image).url),
+      initial: (title[0] ?? "#").toUpperCase(),
+      unread,
+      unreadDot: unread ? "●" : "",
+      at: typeof last.createdAt === "number" ? last.createdAt : typeof room.createdAt === "number" ? room.createdAt : 0,
+    });
+  }
+  return rows.sort((a, b) => b.at - a.at);
+}

package/templates/branded-lite/tier5-src/_shared/member-activity.ts

@@ -0,0 +1,34 @@
+// The One App's "Active 11h ago" / "Last seen Apr 5, 2023" line for a member, from the same inputs and by
+// the same rule as its member list (wix-one-app-members-area getActiveSinceText).
+import type { WixMemberActivity } from "@himalaya/wix-members";
+import { copyParam, copyTemplate } from "./himi-copy.js";
+import { appLocale } from "./app-locale.js";
+import { formatDateMedium } from "./engine-intl.js";
+
+/** Less than this many days reads as "Active Nd ago"; from here the One App prints the date instead. */
+const DAYS_AS_COUNT = 30;
+
+/** "" when there is nothing to say: a member who never opened the app shows no line. */
+export function activityText(activity: Pick<WixMemberActivity, "online" | "lastOpenApp"> | undefined): string {
+  if (!activity) return "";
+  const activeNow = () => copyParam("members.activeNow", "Active now");
+  if (activity.online) return activeNow();
+  const last = activity.lastOpenApp;
+  if (!last) return "";
+  const amount = typeof last.amount === "number" ? last.amount : 0;
+  switch (last.unit) {
+    case "min":
+      return amount === 0 ? activeNow() : copyTemplate("members.activeMinutesAgo", "Active {amount}m ago", { amount });
+    case "hour":
+      return copyTemplate("members.activeHoursAgo", "Active {amount}h ago", { amount });
+    case "day": {
+      const daysAgo = () => copyTemplate("members.activeDaysAgo", "Active {amount}d ago", { amount });
+      if ((amount && amount < DAYS_AS_COUNT) || !last.ts) return daysAgo();
+      const at = Number(last.ts);
+      if (!Number.isFinite(at)) return daysAgo();
+      return copyTemplate("members.lastSeen", "Last seen {date}", { date: formatDateMedium(new Date(at), appLocale()) });
+    }
+    default:
+      return "";
+  }
+}

package/templates/branded-lite/tier5-src/_shared/member-row-extras.ts

@@ -0,0 +1,167 @@
+// What a members-directory row shows beyond name and photo: the role line, the member's badges and the
+// Follow control. One call per page for each source, and none of it may fail the directory: a refused or
+// failed read leaves that row element out (no chip, a plain Follow), never an error in place of the list.
+import { query as queryBadges, queryBadgeAssignments, type WixBadge } from "@himalaya/wix-badges";
+import { getMyMember, listFollowedMembers, queryMemberActivity } from "@himalaya/wix-members";
+import { compareIso } from "./engine-intl.js";
+import { copyParam } from "./himi-copy.js";
+import { activityText } from "./member-activity.js";
+import type { ReadAccess } from "./member-read.js";
+
+/** The One App row draws ONE badge chip and a "+N" chip for the rest. */
+const MAX_BADGE_CHIPS = 1;
+const PAGE_LIMIT = 100;
+const CATALOG_PAGES = 5;
+const ASSIGNMENT_PAGES = 10;
+/** The chip's text is white (`textOnAccent`); this is the least contrast it may have against the badge colour. */
+const MIN_CONTRAST = 3;
+
+export interface MemberRowExtras {
+  /** Role line, then the last-active line when there is one. The role line reads "Member" for everyone: the activity route
+   *  also answers a role (an admin's is "ADMIN"), but the One App's wording for the other roles is not recorded here,
+   *  so none is guessed. */
+  subtitle: string;
+  badgeTitle: string; badgeColor: string; noBadge: boolean;
+  badgeMore: string; noBadgeMore: boolean;
+  followLabel: string; isFollowing: boolean;
+  /** Hidden for a Visitor (who gets the sign-in variant) and on the signed-in member's own row. */
+  hideFollow: boolean;
+  /** Only a Visitor sees this one: Follow needs a member, so the tap opens sign-in. */
+  hideSignInFollow: boolean;
+}
+
+export function followLabel(isFollowing: boolean): string {
+  return copyParam(isFollowing ? "members.followingCta" : "members.followCta", isFollowing ? "Following" : "Follow");
+}
+
+interface BadgeInfo { title: string; color: string; rank: number }
+
+function hexRgb(value: string | undefined): [number, number, number] | undefined {
+  const m = /^#?([0-9a-f]{3}|[0-9a-f]{6})$/i.exec((value ?? "").trim());
+  if (!m) return undefined;
+  const h = m[1].length === 3 ? m[1].split("").map(c => c + c).join("") : m[1];
+  return [0, 2, 4].map(i => parseInt(h.slice(i, i + 2), 16)) as [number, number, number];
+}
+function luminance([r, g, b]: [number, number, number]): number {
+  const lin = (v: number) => { const c = v / 255; return c <= 0.03928 ? c / 12.92 : Math.pow((c + 0.055) / 1.055, 2.4); };
+  return 0.2126 * lin(r) + 0.7152 * lin(g) + 0.0722 * lin(b);
+}
+/** The badge colour as `#rrggbb`, darkened until white text on it reads (a pastel chip would otherwise
+ *  lose its label in one of the two themes). "" when the badge carries no usable colour, so the row's
+ *  token background shows instead. */
+export function chipColor(value: string | undefined): string {
+  let rgb = hexRgb(value);
+  if (!rgb) return "";
+  while ((1.05 / (luminance(rgb) + 0.05)) < MIN_CONTRAST && (rgb[0] || rgb[1] || rgb[2])) {
+    rgb = rgb.map(c => Math.floor(c * 0.9)) as [number, number, number];
+  }
+  return "#" + rgb.map(c => c.toString(16).padStart(2, "0")).join("");
+}
+
+let catalogTenant = "";
+let catalog: Map<string, BadgeInfo> | undefined;
+
+/** The site's badges, newest first: that is the order the One App picks a member's first chip in. */
+async function badgeCatalog(tenant: string): Promise<Map<string, BadgeInfo>> {
+  if (catalog && catalogTenant === tenant) return catalog;
+  const badges: WixBadge[] = [];
+  let cursor: string | undefined;
+  for (let page = 0; page < CATALOG_PAGES; page++) {
+    const res = await queryBadges({ query: { cursorPaging: cursor ? { cursor } : { limit: PAGE_LIMIT } } });
+    badges.push(...(res.badges ?? []));
+    cursor = res.pagingMetadata?.hasNext ? res.pagingMetadata.cursors?.next : undefined;
+    if (!cursor) break;
+  }
+  if (cursor) throw new Error("Badge catalog is longer than the pages read");
+  const newestFirst = badges.filter(b => b.id && b.title?.trim())
+    .sort((a, b) => compareIso(String(b.createdDate ?? ""), String(a.createdDate ?? "")));
+  catalogTenant = tenant;
+  return catalog = new Map(newestFirst.map((b, rank) => [b.id as string, { title: (b.title as string).trim(), color: chipColor(b.backgroundColor), rank }]));
+}
+
+/** memberId → badge ids, for the page's members. A cursor request carries the cursor alone: the service
+ *  refuses (400) a follow-up page that repeats the filter or the limit. A page the pages cap cuts short is refused whole: a
+ *  partial list would show the wrong first chip and a wrong "+N". */
+async function badgesByMember(ids: string[]): Promise<Map<string, string[]>> {
+  const byMember = new Map<string, string[]>();
+  let cursor: string | undefined;
+  for (let page = 0; page < ASSIGNMENT_PAGES; page++) {
+    const res = await queryBadgeAssignments({ query: cursor ? { cursorPaging: { cursor } } : { filter: { memberId: { $in: ids } }, cursorPaging: { limit: PAGE_LIMIT } } });
+    for (const a of res.badgeAssignments ?? []) {
+      if (!a.memberId || !a.badgeId) continue;
+      const held = byMember.get(a.memberId) ?? [];
+      held.push(a.badgeId); byMember.set(a.memberId, held);
+    }
+    cursor = res.pagingMetadata?.hasNext ? res.pagingMetadata.cursors?.next : undefined;
+    if (!cursor) return byMember;
+  }
+  throw new Error("Badge assignments are longer than the pages read");
+}
+
+async function readBadges(ids: string[], tenant: string): Promise<Map<string, BadgeInfo[]>> {
+  const [known, held] = await Promise.all([badgeCatalog(tenant), badgesByMember(ids)]);
+  const result = new Map<string, BadgeInfo[]>();
+  for (const [memberId, badgeIds] of held) {
+    const badges = badgeIds.map(id => known.get(id)).filter((b): b is BadgeInfo => !!b).sort((a, b) => a.rank - b.rank);
+    if (badges.length) result.set(memberId, badges);
+  }
+  return result;
+}
+
+/** memberId → "Active 11h ago" etc., for the members the One App service knows and has something to say about.
+ *  An older native build refuses the route; that leaves the activity line out and nothing else. */
+async function readActivity(ids: string[]): Promise<Map<string, string>> {
+  const texts = new Map<string, string>();
+  for (const activity of await queryMemberActivity(ids)) {
+    const text = activityText(activity);
+    if (text) texts.set(activity.id, text);
+  }
+  return texts;
+}
+
+async function readFollowed(ids: string[], access: ReadAccess): Promise<Set<string>> {
+  // Follow state is the signed-in member's own; a Visitor has none to read.
+  return access.member.email ? new Set(await listFollowedMembers(ids)) : new Set();
+}
+
+let selfScope = "";
+let selfId = "";
+async function ownMemberId(access: ReadAccess): Promise<string> {
+  if (!access.member.email) return "";
+  const scope = JSON.stringify([access.tenant, access.member.email]);
+  if (selfScope !== scope) {
+    const id = (await getMyMember({ fieldsets: ["PUBLIC"] })).member?.id ?? "";
+    // An answer without a member is not a lookup to remember: the next page asks again, so the member's own row
+    // does not keep a Follow button for the rest of the session.
+    if (!id) return "";
+    selfId = id;
+    selfScope = scope;
+  }
+  return selfId;
+}
+
+const attempt = async <T>(read: Promise<T>, fallback: T): Promise<T> => { try { return await read; } catch { return fallback; } };
+
+/** The per-row extras for one page of members. Each source fails on its own. */
+export async function memberRowExtras(ids: string[], access: ReadAccess): Promise<(id: string) => MemberRowExtras> {
+  const [badges, activity, followed, self] = await Promise.all([
+    attempt(readBadges(ids, access.tenant), new Map<string, BadgeInfo[]>()),
+    attempt(readActivity(ids), new Map<string, string>()),
+    attempt(readFollowed(ids, access), new Set<string>()),
+    attempt(ownMemberId(access), ""),
+  ]);
+  const visitor = !access.member.email;
+  const role = copyParam("members.roleMember", "Member");
+  return (id) => {
+    const held = badges.get(id) ?? [];
+    const more = held.length - MAX_BADGE_CHIPS;
+    const isFollowing = followed.has(id);
+    return {
+      subtitle: [role, activity.get(id)].filter(Boolean).join(" · "),
+      badgeTitle: held[0]?.title ?? "", badgeColor: held[0]?.color ?? "", noBadge: !held.length,
+      badgeMore: more > 0 ? `+${more}` : "", noBadgeMore: more <= 0,
+      followLabel: followLabel(isFollowing), isFollowing,
+      hideFollow: visitor || id === self, hideSignInFollow: !visitor,
+    };
+  };
+}

package/templates/branded-lite/tier5-src/_shared/notification-target.ts

@@ -0,0 +1,141 @@
+// Where a tap on a member notification goes. The route table is DERIVED from the Wix member-link catalog
+// (via the pinned copy in ./wix-member-links.ts), the one an app's push taps use, so a
+// notification in the inbox opens exactly what the same notification opens as a push: each destination's canonical
+// Himi screen, with the item id under `id` (branded-lite's `push.routes` is built the same way).
+//
+// Beyond the catalog there are a few links the One App registry and the Business Manager send that a member can
+// receive, listed in EXTRA_ROUTES with where each was read (wix-private/mobile-modules at 7cdefdc557fb):
+//   blog      wix-one-app-new-blog/src/services/get-deep-links.ts  (the multi-site form of a post link)
+//   inbox     mobile-apps-inbox/src/module/deepLinks.ts            (a chatroom)
+//   stores, bookings, club
+//             hybrid-mobile-platform/src/pushNotifications/deepLinks.ts (links sent by the Business Manager,
+//             Ping automations and the owner app to a branded app's members)
+// Loyalty, coupons and FAQ links are NOT here: the catalog records that no push reaches them, and a route for a
+// link nothing sends is dead config that nobody notices.
+//
+// A link that matches no row is NOT guessed at: it falls back to the notification's web link (https only) or to
+// a visible "can't open", never to a made-up screen. A screen the app does not have opens nothing, exactly as the
+// same push tap would. Programs have no catalog entry and so fall back; add a row, and a test, when a real payload
+// names one.
+
+import { MEMBER_LINK_DESTINATIONS } from "./wix-member-links.js";
+
+/** The notification's own link, as the Members Feed Viewer returns it. */
+export interface NotificationLink {
+  webUrlData?: { webUrl?: string };
+  mobileData?: { data?: string };
+}
+
+export interface NotificationTarget {
+  screenId: string;
+  /** Screen arguments. Nav params are strings. */
+  args: Record<string, string>;
+}
+
+export type NotificationOpen =
+  | { kind: "screen"; target: NotificationTarget }
+  | { kind: "url"; url: string }
+  | { kind: "none" };
+
+export interface Route {
+  /** `a/:name/b` — `:name` captures one segment; every other segment must match exactly. */
+  pattern: string;
+  screenId: string;
+  /** Capture name → screen argument name. `kind` and the like are fixed arguments. */
+  args?: Record<string, string>;
+  fixed?: Record<string, string>;
+}
+
+/** The catalog's links, each opening its destination's canonical screen with the item under `id`. The inbox
+ *  itself is left out: a notification that points at the list has nowhere further to go. */
+const CATALOG_ROUTES: readonly Route[] = MEMBER_LINK_DESTINATIONS
+  .filter((destination) => destination.id !== "notifications.list")
+  .flatMap((destination) => destination.matches.map((pattern): Route => ({
+    pattern,
+    screenId: destination.canonicalScreen,
+    ...(destination.screenParam ? { args: { [destination.screenParam]: "id" } } : {}),
+  })));
+
+const CHATROOM = { screenId: "himi_chat_thread", args: { chatroomId: "id" }, fixed: { kind: "chatroom" } };
+
+const EXTRA_ROUTES: readonly Route[] = [
+  { pattern: "blog/post/:metaSiteId/:postId", screenId: "himi_blog_post", args: { postId: "id" } },
+  { pattern: "inbox/chatroom-by-id/:chatroomId", ...CHATROOM },
+  { pattern: "inbox/conversation-by-chatroom-id/:chatroomId", ...CHATROOM },
+  { pattern: "stores/:metaSiteId/catalog-for-inbox/:productId", screenId: "himi_product", args: { productId: "id" } },
+  { pattern: "bookings/:metaSiteId/service/:serviceId/details", screenId: "himi_service", args: { serviceId: "id" } },
+  { pattern: "platform/club/:tabId/:metaSiteId", screenId: "himi_branded_home" },
+];
+
+export const NOTIFICATION_ROUTES: readonly Route[] = [...CATALOG_ROUTES, ...EXTRA_ROUTES];
+
+/** Every screen a notification link can open: what an app is asked about when it says which of them it serves. */
+export const NOTIFICATION_SCREEN_IDS: readonly string[] = [...new Set(NOTIFICATION_ROUTES.map((route) => route.screenId))];
+
+/** A captured id: a GUID, a slug or a short token. Anything else (an encoded separator, a space, an empty
+ *  segment, a segment of only dots such as `..`) means the link is not one of ours, so it opens nothing. */
+const SAFE_SEGMENT = /^(?!\.+$)[A-Za-z0-9._~-]{1,128}$/;
+
+/** The path of a `<scheme>://<path>` link, without query or fragment. null when it is not one. */
+function pathOf(link: string): string | null {
+  const body = link.trim().replace(/^[a-z][a-z0-9+.-]*:\/\//i, "").split(/[?#]/, 1)[0].replace(/^\/+|\/+$/g, "");
+  return body ? body : null;
+}
+
+function match(route: Route, segments: string[]): NotificationTarget | null {
+  const parts = route.pattern.split("/");
+  if (parts.length !== segments.length) return null;
+  const captured: Record<string, string> = {};
+  for (let i = 0; i < parts.length; i++) {
+    if (parts[i].startsWith(":")) {
+      if (!SAFE_SEGMENT.test(segments[i])) return null;
+      captured[parts[i].slice(1)] = segments[i];
+    } else if (parts[i] !== segments[i]) {
+      return null;
+    }
+  }
+  const args: Record<string, string> = { ...route.fixed };
+  for (const [capture, name] of Object.entries(route.args ?? {})) args[name] = captured[capture];
+  return { screenId: route.screenId, args };
+}
+
+/** The screen a `wix://` link opens, or null when no row of the table claims it. */
+export function screenForLink(link: string | undefined): NotificationTarget | null {
+  const path = link ? pathOf(link) : null;
+  if (!path) return null;
+  const segments = path.split("/");
+  for (const route of NOTIFICATION_ROUTES) {
+    const target = match(route, segments);
+    if (target) return target;
+  }
+  return null;
+}
+
+/** Not every Tier-5 JS engine has `URL`, so a link is read by hand: `https://<host>[:port][/…]`, where the host
+ *  is a dotted name of letters, digits and hyphens. Credentials (`user@`), a backslash, whitespace or any
+ *  control character, and every other scheme (http, javascript:, data:, a custom scheme) are refused: a
+ *  notification's web link is written by the site, so it is not trusted to run anything. */
+const HTTPS_LINK = /^https:\/\/([A-Za-z0-9](?:[A-Za-z0-9-]*[A-Za-z0-9])?(?:\.[A-Za-z0-9](?:[A-Za-z0-9-]*[A-Za-z0-9])?)+)(?::\d{1,5})?(?:[/?#][^\s\\\u0000-\u001f\u007f]*)?$/;
+
+/** An https link, or null. */
+export function safeWebUrl(raw: string | undefined): string | null {
+  const url = raw?.trim() ?? "";
+  // The cap keeps the match cheap on a hostile, site-written value.
+  return url.length <= 2048 && HTTPS_LINK.test(url) ? url : null;
+}
+
+/** The host of a link `safeWebUrl` accepted, for showing the member where a tap goes. */
+export function urlHost(url: string): string {
+  return HTTPS_LINK.exec(url)?.[1] ?? "";
+}
+
+/** What a tap on this notification does. A recognised app link wins over the web link: a native screen is the
+ *  intent, and the web link is only the way out for a notification that names no screen of ours. */
+export function notificationOpen(link: NotificationLink | undefined, served?: ReadonlySet<string>): NotificationOpen {
+  const target = screenForLink(link?.mobileData?.data);
+  // `served` is the screens this app actually has: a link to one it lacks (an order link in an app without the Store) is
+  // not opened, and falls to the web link or the visible "can't open", exactly like a link no row claims.
+  if (target && (!served || served.has(target.screenId))) return { kind: "screen", target };
+  const url = safeWebUrl(link?.webUrlData?.webUrl);
+  return url ? { kind: "url", url } : { kind: "none" };
+}

package/templates/branded-lite/tier5-src/_shared/source-badges.ts

@@ -40,11 +40,13 @@ async function unavailable<T>(read: () => Promise<T>): Promise<T | null> {
 const SHOPPER_CHANGED = new Error("shopper changed");
 
 /** One refresh. Notifications and chat are a Member's: a Visitor has neither inbox, so both read null without
- *  a request. Notifications also need `site`, the site the native bridge is bound to (the host session's own,
- *  never a caller's choice); without one that counter stays unavailable. Cart is the current shopper's.
+ *  a request. Notifications also need `hostMember`, the host's own session clock saying it is a signed-in member
+ *  (a host with no clock, web and older binaries, stays unavailable). The worker names no site: native sends
+ *  the bridge's bound site, or none in the multi-tenant Player, where the member credential fixes the business.
+ *  Cart is the current shopper's.
  *  Offline reads nothing. A count that finishes after the signed-in identity changed is dropped, so one
  *  member's number never lands on the next member's header. */
-export async function readSourceBadges(site: string | null): Promise<SourceBadges> {
+export async function readSourceBadges(hostMember: boolean): Promise<SourceBadges> {
   // Whatever goes wrong, the answer is "unavailable": this runs fire-and-forget at launch.
   const read = unavailable(async (): Promise<SourceBadges> => {
     if (!connectivity().online) return NO_SOURCE_BADGES;
@@ -60,7 +62,7 @@ export async function readSourceBadges(site: string | null): Promise<SourceBadge
       try { return await run(); } catch (error) { if (error !== SHOPPER_CHANGED) failed.push(key); return null; }
     };
     const [notifications, chat, cart] = await Promise.all([
-      member && site ? attempt("notifications", () => stillHere(countUnseenNotifications({ site }))) : null,
+      member && hostMember ? attempt("notifications", () => stillHere(countUnseenNotifications())) : null,
       member ? attempt("chat", () => unreadRoomCount(identity)) : null,
       attempt("cart", () => stillHere(cartItemCount())),
     ]);