@wix/agent-skills 1.21.0 → 1.22.0

package/skills/wix-headless-fast/references/members/app/hooks/members/useMember.ts

@@ -1,66 +0,0 @@
-// React binding for the member store. Works in any React root — Astro islands (several on
-// one page share the same session) and SPAs alike. SSR-friendly: pass a server-resolved
-// member as `initialMember` (Astro island props) and no client re-fetch happens.
-import { useRef, useSyncExternalStore } from "react";
-import {
-  getMemberState,
-  hydrateMember,
-  login,
-  register,
-  logout,
-  refreshMember,
-  subscribeMember,
-  verifyEmail,
-  type MemberState,
-} from "../../wix/members/member-store";
-import type { LoginResult } from "../../wix/members/auth";
-import type { CurrentMember } from "../../wix/members/types";
-
-export interface UseMemberOptions {
-  /** Server-resolved member (null = a known-anonymous visitor); omit to resolve client-side. */
-  initialMember?: CurrentMember | null;
-}
-
-export interface UseMember extends MemberState {
-  /** Submit the shipped in-app credential form. */
-  login: (email: string, password: string) => Promise<LoginResult>;
-  register: (
-    email: string,
-    password: string,
-    profile?: { firstName?: string; lastName?: string },
-  ) => Promise<LoginResult>;
-  verifyEmail: (code: string) => Promise<LoginResult>;
-  /** Log out through the Wix logout flow; navigates away. */
-  logout: (returnTo?: string) => Promise<void>;
-  refresh: () => Promise<void>;
-}
-
-export function useMember({ initialMember }: UseMemberOptions = {}): UseMember {
-  // Adopt SSR props into the shared store before the first subscription (a no-op once any
-  // island has settled the session).
-  if (typeof window !== "undefined" && initialMember !== undefined)
-    hydrateMember(initialMember);
-  const server = useRef<MemberState | null>(null);
-  server.current ??=
-    initialMember !== undefined
-      ? {
-          member: initialMember,
-          loggedIn: initialMember !== null,
-          loading: false,
-          error: null,
-        }
-      : getMemberState();
-  const state = useSyncExternalStore(
-    subscribeMember,
-    getMemberState,
-    () => server.current as MemberState,
-  );
-  return {
-    ...state,
-    login,
-    register,
-    verifyEmail,
-    logout,
-    refresh: refreshMember,
-  };
-}

package/skills/wix-headless-fast/references/members/app/wix/members/auth-core.ts

@@ -1,105 +0,0 @@
-// Authentication rules — transport-agnostic, imported by BOTH transports: ./auth.ts (the SDK's
-// OAuthStrategy) and the REST twin in references/members/rest/auth.ts (the IAM authentication API
-// over fetch). What a login/registration response MEANS — the four states, when a session token is
-// expected, which Wix error code is which failure — lives HERE, once. No imports: a strip to JS
-// emits a plain module.
-
-/** The four outcomes every credential operation resolves to; the shipped LoginForm renders each. */
-export type LoginState = "SUCCESS" | "EMAIL_VERIFICATION_REQUIRED" | "OWNER_APPROVAL_REQUIRED" | "FAILURE";
-
-export interface LoginResult {
-  state: LoginState;
-  /** Continues an EMAIL_VERIFICATION_REQUIRED flow (the transport keeps it too — verifyMemberEmail needs no argument). */
-  stateToken?: string;
-  /** A stable name for a FAILURE: invalidPassword, invalidEmail, emailAlreadyExists, resetPassword, missingCaptchaToken, invalidCaptchaToken. */
-  errorCode?: string;
-  /** Wix's message for a FAILURE — render it. */
-  error?: string;
-}
-
-/** A raw login/register/verify response as either transport returns it. */
-export type RawAuth = Record<string, any>;
-
-/** A LoginResult plus the one-shot session token a SUCCESS carries (5-minute life; exchanged, never shown). */
-export interface AuthOutcome extends LoginResult {
-  sessionToken: string | null;
-}
-
-// REST spells the states differently from the SDK; both map onto LoginState.
-const REST_STATES: Record<string, LoginState> = {
-  SUCCESS: "SUCCESS",
-  REQUIRE_EMAIL_VERIFICATION: "EMAIL_VERIFICATION_REQUIRED",
-  REQUIRE_OWNER_APPROVAL: "OWNER_APPROVAL_REQUIRED",
-};
-
-/**
- * Normalize either transport's response — SDK `{ loginState, data: { sessionToken | stateToken },
- * error?, errorCode? }` or REST `{ state, sessionToken?, stateToken? }`. Anything else is a FAILURE.
- */
-export function authOutcome(raw: RawAuth | null | undefined): AuthOutcome {
-  const state: LoginState = raw?.loginState ?? REST_STATES[raw?.state ?? ""] ?? "FAILURE";
-  const stateToken: string | undefined = raw?.stateToken ?? raw?.data?.stateToken;
-  return {
-    state,
-    sessionToken: raw?.data?.sessionToken ?? raw?.sessionToken ?? null,
-    ...(stateToken ? { stateToken } : {}),
-    ...(raw?.errorCode ? { errorCode: raw.errorCode } : {}),
-    ...(raw?.error ? { error: raw.error } : {}),
-  };
-}
-
-/** The outcome as callers see it — without the session token, which the transport has consumed. */
-export function toLoginResult({ sessionToken: _consumed, ...result }: AuthOutcome): LoginResult {
-  return result;
-}
-
-export function failure(error: string, errorCode?: string): LoginResult {
-  return { state: "FAILURE", error, ...(errorCode ? { errorCode } : {}) };
-}
-
-/** A SUCCESS without a session token — the exchange can't run; surfaced as a FAILURE with this text. */
-export const NO_SESSION_ERROR = "Wix did not return a member session.";
-
-// Wix IAM application-error codes, named as the SDK names them.
-export const AUTH_ERROR_CODES = {
-  MISSING_CAPTCHA: "-19971",
-  INVALID_CAPTCHA: "-19970",
-  EMAIL_EXISTS: "-19995",
-  INVALID_PASSWORD: "-19976",
-  RESET_PASSWORD: "-19973",
-} as const;
-
-/** A failed login's applicationError code → the SDK's errorCode name (anything unrecognized is `invalidEmail`, as the SDK does). */
-export function loginErrorCode(code: string | undefined): string {
-  switch (code) {
-    case AUTH_ERROR_CODES.MISSING_CAPTCHA:
-      return "missingCaptchaToken";
-    case AUTH_ERROR_CODES.INVALID_CAPTCHA:
-      return "invalidCaptchaToken";
-    case AUTH_ERROR_CODES.INVALID_PASSWORD:
-      return "invalidPassword";
-    case AUTH_ERROR_CODES.RESET_PASSWORD:
-      return "resetPassword";
-    default:
-      return "invalidEmail";
-  }
-}
-
-/**
- * A failed registration's applicationError code (+ the response `details`) → the SDK's errorCode
- * name; undefined when the SDK would name none. A validation error on the EMAIL field is `invalidEmail`.
- */
-export function registerErrorCode(code: string | undefined, details?: RawAuth): string | undefined {
-  const violations: RawAuth[] = details?.validationError?.fieldViolations ?? [];
-  if (violations.some((v) => v?.data?.type === "EMAIL")) return "invalidEmail";
-  switch (code) {
-    case AUTH_ERROR_CODES.MISSING_CAPTCHA:
-      return "missingCaptchaToken";
-    case AUTH_ERROR_CODES.EMAIL_EXISTS:
-      return "emailAlreadyExists";
-    case AUTH_ERROR_CODES.INVALID_CAPTCHA:
-      return "invalidCaptchaToken";
-    default:
-      return undefined;
-  }
-}

package/skills/wix-headless-fast/references/members/app/wix/members/auth.ts

@@ -1,59 +0,0 @@
-// Custom, in-app member authentication over the SDK — the transport only. Credentials are
-// submitted from the branded LoginForm; there is no Wix-hosted login-page redirect or callback
-// route. What a response means lives in ./auth-core (shared with the REST twin in
-// references/members/rest/auth.ts); this file makes the OAuthStrategy calls and delegates.
-// docs: https://dev.wix.com/docs/go-headless/authentication/members/custom-login-page/build-a-custom-login-page-js-sdk.md
-import { membersAuth } from "./client";
-import {
-  NO_SESSION_ERROR,
-  authOutcome,
-  failure,
-  toLoginResult,
-  type LoginResult,
-  type LoginState,
-  type RawAuth,
-} from "./auth-core";
-
-export type { LoginResult, LoginState };
-
-/** True when the explicit members client holds member tokens (no network). */
-export function loggedInHint(): boolean {
-  return membersAuth.loggedIn();
-}
-
-// A SUCCESS carries a one-shot session token; the strategy exchanges it for member tokens
-// (getMemberTokensForDirectLogin) and setTokens writes them into Astro's wixSession cookie, so the
-// next server render and every island run as the member. Other states pass through.
-async function finish(raw: RawAuth): Promise<LoginResult> {
-  const outcome = authOutcome(raw);
-  if (outcome.state === "SUCCESS") {
-    if (!outcome.sessionToken) return failure(NO_SESSION_ERROR);
-    const tokens = await membersAuth.getMemberTokensForDirectLogin(outcome.sessionToken);
-    membersAuth.setTokens(tokens);
-    return { state: "SUCCESS" };
-  }
-  return toLoginResult(outcome);
-}
-
-export async function loginMember(email: string, password: string): Promise<LoginResult> {
-  return finish((await membersAuth.login({ email, password })) as RawAuth);
-}
-
-export async function registerMember(
-  email: string,
-  password: string,
-  profile?: { firstName?: string; lastName?: string },
-): Promise<LoginResult> {
-  return finish((await membersAuth.register({ email, password, ...(profile ? { profile } : {}) })) as RawAuth);
-}
-
-/** Continue an EMAIL_VERIFICATION_REQUIRED flow with the code from the email; the strategy holds the state token. */
-export async function verifyMemberEmail(verificationCode: string): Promise<LoginResult> {
-  return finish((await membersAuth.processVerification({ verificationCode })) as RawAuth);
-}
-
-/** Log out through Wix (clears the session cookie) and land on `returnTo` — navigates away. */
-export async function logoutMember(returnTo = "/"): Promise<void> {
-  const { logoutUrl } = await membersAuth.logout(new URL(returnTo, window.location.origin).href);
-  window.location.assign(logoutUrl);
-}

package/skills/wix-headless-fast/references/members/app/wix/members/client.ts

@@ -1,53 +0,0 @@
-// Explicit custom-login client for the Members vertical. Unlike the shared SDK seam,
-// this client is used in a browser island even on managed Astro: direct credential login
-// cannot use the Wix-hosted /api/auth redirect flow.
-import { createClient, EMPTY_TOKENS, OAuthStrategy } from "@wix/sdk";
-import type { TokenStorage, Tokens } from "@wix/sdk";
-import { members } from "@wix/members";
-import { WIX_MEMBERS_CLIENT_ID } from "../config";
-
-// `@wix/astro` uses this cookie as the session source for both browser islands
-// and the next server render. Direct login must write the exact same contract,
-// so the member identity becomes the managed Astro identity too.
-const SESSION_COOKIE_NAME = "wixSession";
-
-const tokenStorage: TokenStorage = {
-  getTokens(): Tokens {
-    try {
-      const raw = document.cookie
-        .split("; ")
-        .find((cookie) => cookie.startsWith(`${SESSION_COOKIE_NAME}=`));
-      if (!raw) return EMPTY_TOKENS;
-      const session = JSON.parse(
-        decodeURIComponent(raw.slice(SESSION_COOKIE_NAME.length + 1)),
-      ) as { clientId?: string; tokens?: Tokens };
-      return session.clientId === WIX_MEMBERS_CLIENT_ID && session.tokens
-        ? session.tokens
-        : EMPTY_TOKENS;
-    } catch {
-      return EMPTY_TOKENS;
-    }
-  },
-  setTokens(tokens: Tokens): void {
-    try {
-      const value = encodeURIComponent(
-        JSON.stringify({ clientId: WIX_MEMBERS_CLIENT_ID, tokens }),
-      );
-      document.cookie = `${SESSION_COOKIE_NAME}=${value}; path=/; secure; samesite=none`;
-    } catch {
-      // A blocked cookie only prevents the member session from surviving navigation.
-    }
-  },
-};
-
-if (!WIX_MEMBERS_CLIENT_ID) {
-  throw new Error("Custom member login needs WIX_MEMBERS_CLIENT_ID.");
-}
-
-const client = createClient({
-  modules: { members },
-  auth: OAuthStrategy({ clientId: WIX_MEMBERS_CLIENT_ID, tokenStorage }),
-});
-
-export const membersAuth = client.auth;
-export const membersApi = client.members;

package/skills/wix-headless-fast/references/members/app/wix/members/member-store.ts

@@ -1,122 +0,0 @@
-// Member session state — a module-scope store, deliberately NOT a React context.
-// A context can't span Astro islands (each island is its own React root); a module
-// singleton is shared by every island in the page bundle, and works identically in a
-// single-root SPA. Consume it through useMember() (hooks/), or subscribe directly.
-import { fetchCurrentMember } from "./members";
-import {
-  loggedInHint,
-  loginMember,
-  logoutMember,
-  registerMember,
-  verifyMemberEmail,
-  type LoginResult,
-} from "./auth";
-import type { CurrentMember } from "./types";
-
-export interface MemberState {
-  member: CurrentMember | null;
-  /** True for a logged-in member — can be true with `member` null when the Members Area app is absent. */
-  loggedIn: boolean;
-  /** True until the first session read settles — render skeletons, not the logged-out state. */
-  loading: boolean;
-  /** Last failed operation's message — render it; a new operation clears it. */
-  error: string | null;
-}
-
-const EMPTY: MemberState = {
-  member: null,
-  loggedIn: false,
-  loading: true,
-  error: null,
-};
-
-let state: MemberState = EMPTY;
-const listeners = new Set<() => void>();
-let started = false;
-
-function setState(patch: Partial<MemberState>): void {
-  state = { ...state, ...patch };
-  for (const l of listeners) l();
-}
-
-export function getMemberState(): MemberState {
-  return state;
-}
-
-/** Adopt an SSR-resolved member (Astro island props) so no client re-fetch happens. */
-export function hydrateMember(member: CurrentMember | null): void {
-  if (started) return;
-  started = true;
-  state = { member, loggedIn: member !== null, loading: false, error: null };
-}
-
-export function subscribeMember(listener: () => void): () => void {
-  listeners.add(listener);
-  // First subscriber triggers the initial session read (browser only — SSR renders `loading`).
-  if (!started && typeof window !== "undefined") {
-    started = true;
-    void refreshMember();
-  }
-  return () => listeners.delete(listener);
-}
-
-/** Re-read the session — call after anything that may have changed it. */
-export async function refreshMember(): Promise<void> {
-  setState({ loading: true, error: null });
-  const hint = loggedInHint();
-  if (hint === false) {
-    setState({ member: null, loggedIn: false, loading: false });
-    return;
-  }
-  // hint true → read the profile (null = profile data missing, still logged in).
-  // hint null (ambient) → the member read IS the session check: null = anonymous.
-  const member = await fetchCurrentMember();
-  setState({ member, loggedIn: hint ?? member !== null, loading: false });
-}
-
-async function runLogin(
-  action: () => Promise<LoginResult>,
-): Promise<LoginResult> {
-  try {
-    const result = await action();
-    if (result.state === "SUCCESS") await refreshMember();
-    if (result.state === "FAILURE")
-      setState({
-        error: result.error ?? result.errorCode ?? "Could not log in.",
-      });
-    return result;
-  } catch (e) {
-    setState({ error: e instanceof Error ? e.message : String(e) });
-    throw e;
-  }
-}
-
-/** Submit the branded in-app sign-in form. No Wix-hosted login redirect is used. */
-export function login(email: string, password: string): Promise<LoginResult> {
-  return runLogin(() => loginMember(email, password));
-}
-
-/** Submit the branded in-app sign-up form. */
-export function register(
-  email: string,
-  password: string,
-  profile?: { firstName?: string; lastName?: string },
-): Promise<LoginResult> {
-  return runLogin(() => registerMember(email, password, profile));
-}
-
-/** Finish an email-verification branch from the same in-app form. */
-export function verifyEmail(code: string): Promise<LoginResult> {
-  return runLogin(() => verifyMemberEmail(code));
-}
-
-/** Log out (navigates away); local state resets for the instant before the redirect lands. */
-export async function logout(returnTo?: string): Promise<void> {
-  setState({ member: null, loggedIn: false });
-  try {
-    await logoutMember(returnTo);
-  } catch (e) {
-    setState({ error: e instanceof Error ? e.message : String(e) });
-    throw e;
-  }
-}

package/skills/wix-headless-fast/references/members/app/wix/members/members-core.ts

@@ -1,43 +0,0 @@
-// Member rules and DTO mapping — transport-agnostic, imported by BOTH transports: ./members.ts (the
-// SDK, managed Astro and React) and the REST twin in references/members/rest/members.ts (fetch, a
-// static site or a port to another language). The one rule about who a member "is" on screen lives
-// HERE, once. A raw member comes from the SDK (`_id`, `_createdDate`) or from REST (`id`,
-// `createdDate`); the mapper accepts both. Imports are type-only so a strip to JS emits no imports.
-import type { CurrentMember } from "./types";
-
-/** A raw Members V1 member as either transport returns it. */
-export type Raw = Record<string, any>;
-/** Media value + size → https URL. Injected: the SDK transport scales through @wix/sdk, REST through the URL form. */
-export type ImgSrc = (value: any, width: number, height: number) => string;
-
-// Requested on the current-member read. FULL → loginEmail, status, the contact's names, the profile
-// (nickname, photo), and the dates; the default PUBLIC fieldset has no login email and no names.
-export const MEMBER_FIELDSETS = ["FULL"] as const;
-
-/** The member's id on either transport; "" when the raw object isn't a member. */
-export const memberId = (raw: Raw | undefined): string => raw?._id ?? raw?.id ?? "";
-
-/**
- * Raw member → CurrentMember. displayName is the first non-empty of nickname, "first last", the
- * login email's local part, "Member". photoUrl is "" without a profile photo. memberSince is the
- * creation date as "YYYY-MM-DD" ("" when unknown).
- */
-export function toCurrentMember(raw: Raw, imgSrc: ImgSrc): CurrentMember {
-  const nickname: string = raw.profile?.nickname ?? "";
-  const firstName: string = raw.contact?.firstName ?? "";
-  const lastName: string = raw.contact?.lastName ?? "";
-  const loginEmail: string = raw.loginEmail ?? "";
-  const fullName = [firstName, lastName].filter(Boolean).join(" ");
-  const created = raw._createdDate ?? raw.createdDate;
-  return {
-    id: memberId(raw),
-    loginEmail,
-    displayName: nickname || fullName || loginEmail.split("@")[0] || "Member",
-    firstName,
-    lastName,
-    nickname,
-    photoUrl: imgSrc(raw.profile?.photo, 200, 200),
-    contactId: raw.contactId ?? "",
-    memberSince: created ? new Date(created).toISOString().slice(0, 10) : "",
-  };
-}

package/skills/wix-headless-fast/references/members/app/wix/members/members.ts

@@ -1,29 +0,0 @@
-// Current-member read (Wix Members) over the SDK — the only file that touches raw member entities
-// on this transport. The DTO mapper lives in ./members-core (shared with the REST twin in
-// references/members/rest/members.ts); this file is the transport only. Identity vs. profile are
-// different layers: "is this caller logged in?" needs no app install, but getCurrentMember returns
-// profile DATA only once the Wix Members Area app is installed (the seed installs it). Copy as-is;
-// extend by adding functions, not by editing these.
-// docs: https://dev.wix.com/docs/api-reference/crm/members-contacts/members/member-management/members/get-my-member.md
-import { membersApi } from "./client";
-import { imgSrc } from "../media";
-import { MEMBER_FIELDSETS, memberId, toCurrentMember, type Raw } from "./members-core";
-import type { CurrentMember } from "./types";
-
-/**
- * The current member, or null for an anonymous visitor — and null for a LOGGED-IN member
- * when the Members Area app isn't installed (setup, not a code bug; the seed installs it).
- * Never throws: anonymous is a normal state for the client-side custom-login gate.
- * The SDK export is getCurrentMember — the REST name "Get My Member" does not exist on
- * the module; getMyMember(...) throws `is not a function`, and only once a real member
- * loads the page.
- */
-export async function fetchCurrentMember(): Promise<CurrentMember | null> {
-  try {
-    const res = await membersApi.getCurrentMember({ fieldsets: [...MEMBER_FIELDSETS] as any });
-    const raw = res.member as Raw | undefined;
-    return raw && memberId(raw) ? toCurrentMember(raw, imgSrc) : null;
-  } catch {
-    return null;
-  }
-}

package/skills/wix-headless-fast/references/members/app/wix/members/types.ts

@@ -1,21 +0,0 @@
-// Members DTOs — the serializable shapes every hook, component, and page consumes.
-// Plain JSON: safe as Astro island props or across server/client boundaries. The photo is a
-// resolved https URL.
-
-/** The logged-in member as the header/account surfaces need it. */
-export interface CurrentMember {
-  id: string;
-  /** Email the member logs in with ("" when the fieldset hides it). */
-  loginEmail: string;
-  /** Best display name: nickname → first+last → the login email's local part. */
-  displayName: string;
-  firstName: string;
-  lastName: string;
-  nickname: string;
-  /** Resolved https URL ("" when the member has no photo). */
-  photoUrl: string;
-  /** Contact-list id — the key for member-owned CMS/content lookups. */
-  contactId: string;
-  /** "YYYY-MM-DD" the membership was created ("" when unknown). */
-  memberSince: string;
-}

package/skills/wix-headless-fast/references/members/app-astro/layouts/SiteLayout.astro

@@ -1,42 +0,0 @@
----
-// The site chrome for every members page — THIS file (header/footer/nav) plus the @theme
-// token block in src/styles/global.css are what you brand. Keep the <slot name="seo-tags" />
-// in <head>, the global.css import, and one <MemberMenu client:only="react"> in the header
-// (it reads browser session state and must not server-render). (If another vertical is also
-// deployed, its SiteLayout won — mount MemberMenu in that header instead.)
-import MemberMenu from "../components/members/MemberMenu";
-import "../styles/global.css";
-
-interface Props {
-  title: string;
-  description?: string;
-}
-const { title, description } = Astro.props;
----
-
-<!doctype html>
-<html lang="en">
-  <head>
-    <meta charset="UTF-8" />
-    <meta name="viewport" content="width=device-width, initial-scale=1.0" />
-    <title>{title}</title>
-    {description && <meta name="description" content={description} />}
-    <slot name="seo-tags" />
-  </head>
-  <body>
-    <header class="sticky top-0 z-40 border-b border-border bg-background/80 backdrop-blur">
-      <div class="mx-auto flex h-16 max-w-6xl items-center justify-between px-6">
-        <a href="/" class="text-base font-bold tracking-tight text-foreground no-underline">Brand Name</a>
-        <nav class="flex items-center gap-6 text-sm">
-          <MemberMenu client:only="react" />
-        </nav>
-      </div>
-    </header>
-    <main class="mx-auto max-w-6xl px-6 pb-24 pt-10">
-      <slot />
-    </main>
-    <footer class="border-t border-border px-6 py-10 text-center text-sm text-muted-foreground">
-      © Brand Name
-    </footer>
-  </body>
-</html>

package/skills/wix-headless-fast/references/members/app-astro/pages/account.astro

@@ -1,10 +0,0 @@
----
-import SiteLayout from "../layouts/SiteLayout.astro";
-import AccountView from "../components/members/AccountView";
-import RequireAuth from "../components/members/RequireAuth";
----
-
-<SiteLayout title="My account">
-  <h1 class="mb-8 text-2xl font-semibold tracking-tight">My account</h1>
-  <RequireAuth client:only="react"><AccountView /></RequireAuth>
-</SiteLayout>

package/skills/wix-headless-fast/references/members/app-astro/pages/login.astro

@@ -1,11 +0,0 @@
----
-import SiteLayout from "../layouts/SiteLayout.astro";
-import LoginForm from "../components/members/LoginForm";
----
-
-<SiteLayout title="Log in">
-  <section class="mx-auto max-w-md">
-    <h1 class="mb-6 text-2xl font-semibold">Welcome</h1>
-    <LoginForm client:only="react" />
-  </section>
-</SiteLayout>