@wix/himalaya-cli 0.1404.0 → 0.1405.0

package/templates/branded-lite/tier5-src/himi-branded-lite-account-settings/index.ts

@@ -0,0 +1,1091 @@
+// Branded-lite member Account Settings. Member profile data is read and updated
+// through the signed-in member's own Members Area record; account credentials
+// and unsupported account controls stay explicitly unavailable here.
+import { defineService } from "@himalaya/state";
+import { dispatch } from "@himalaya/dispatch";
+import { open as openUrl } from "@himalaya/open-url";
+import { getMyMember, updateMember, updateMySlug, deleteMemberPhones, joinCommunity, leaveCommunity } from "@himalaya/wix-members";
+import { generateMemberPhotoUploadUrl } from "@himalaya/wix-site-media";
+import { memberAccess } from "../_shared/member-access.js";
+import { memberAccountRoutes } from "../_shared/member-account-routes.js";
+import { copyParam, stashCopy } from "../_shared/himi-copy.js";
+import "./blocked-members.js";
+
+interface ProfileValues {
+  displayName: string;
+  title: string;
+  firstName: string;
+  lastName: string;
+  phone: string;
+  slug: string;
+  memberImage: string;
+  memberImageId: string;
+  memberInitials: string;
+}
+
+interface S extends ProfileValues {
+  status: "loading" | "loaded" | "error";
+  signedOut: boolean;
+  errorText: string;
+  error: string;
+  signInRequired: boolean;
+  message: string;
+  memberId: string;
+  memberEmail: string;
+  loginEmail: string;
+  original: ProfileValues;
+  dirty: boolean;
+  saving: boolean;
+  displayNameError: string;
+  titleError: string;
+  firstNameError: string;
+  lastNameError: string;
+  phoneError: string;
+  noError: boolean;
+  noMessage: boolean;
+  noMember: boolean;
+  notLoading: boolean;
+  notErrored: boolean;
+  loginControlsUnavailable: boolean;
+  privacyControlsUnavailable: boolean;
+  privacyStatus: string;
+  privacySupported: boolean;
+  privacyActionLabel: string;
+  isPrivate: boolean;
+  notPrivate: boolean;
+  hasMemberImage: boolean;
+  noMemberImage: boolean;
+  photoUploadAvailable: boolean;
+  noPhotoUploadAvailable: boolean;
+  photoUploadFunctionName: string;
+  photoUploadSupported: boolean;
+  photoDisplayUrl: string;
+  uploadUrl: string;
+  photoDraftUrl: string;
+  photoMediaId: string;
+  photoPendingMemberId: string;
+  photoPendingMemberEmail: string;
+  photoPendingMemberScope: string;
+  photoUploadError: string;
+  photoUploading: boolean;
+  notPhotoUploading: boolean;
+  noSignIn: boolean;
+  profileUrl: string;
+  siteUrl: string;
+  memberScope: string;
+  originalPhones: string[];
+  noSiteUrl: boolean;
+  siteHandoff: boolean;
+  noSiteHandoff: boolean;
+  slugEditing: boolean;
+  slugMessage: string;
+  noSlugMessage: boolean;
+  privacyConfirmVisible: boolean;
+  pendingPrivacyStatus: string;
+  noPrivacyConfirm: boolean;
+  privacyPrompt: string;
+  hasProfileUrl: boolean;
+  passwordPanelOpen: boolean;
+  passwordCredentialSupported: boolean;
+  noPasswordCredentialSupport: boolean;
+  passwordCurrent: string;
+  passwordNew: string;
+  passwordConfirm: string;
+  passwordSaving: boolean;
+  notPasswordSaving: boolean;
+  notPasswordChanging: boolean;
+  passwordResetSending: boolean;
+  notPasswordResetSending: boolean;
+  passwordRequestVersion: number;
+  passwordError: string;
+  passwordNoError: boolean;
+  passwordMessage: string;
+  passwordNoMessage: boolean;
+  emailPanelOpen: boolean;
+  emailUnavailable: string;
+  emailManageAvailable: boolean;
+  noEmailManage: boolean;
+  hasAddressesRoute: boolean;
+  noAddressesRoute: boolean;
+  hasWalletRoute: boolean;
+  noWalletRoute: boolean;
+}
+
+const BLANK: ProfileValues = { displayName: "", title: "", firstName: "", lastName: "", phone: "", slug: "", memberImage: "", memberImageId: "", memberInitials: "M" };
+const EMPTY: S = {
+  ...BLANK,
+  status: "loading",
+  signedOut: false,
+  errorText: "",
+  error: "",
+  signInRequired: false,
+  message: "",
+  memberId: "",
+  memberEmail: "",
+  loginEmail: "",
+  original: { ...BLANK },
+  dirty: false,
+  saving: false,
+  displayNameError: "",
+  titleError: "",
+  firstNameError: "",
+  lastNameError: "",
+  phoneError: "",
+  noError: true,
+  noMessage: true,
+  noMember: true,
+  notLoading: false,
+  notErrored: true,
+  loginControlsUnavailable: true,
+  privacyControlsUnavailable: true,
+  privacyStatus: "",
+  privacySupported: false,
+  privacyActionLabel: "",
+  isPrivate: false,
+  notPrivate: true,
+  hasMemberImage: false,
+  noMemberImage: true,
+  photoUploadAvailable: false,
+  noPhotoUploadAvailable: true,
+  photoUploadFunctionName: "",
+  photoUploadSupported: false,
+  photoDisplayUrl: "",
+  uploadUrl: "",
+  photoDraftUrl: "",
+  photoMediaId: "",
+  photoPendingMemberId: "",
+  photoPendingMemberEmail: "",
+  photoPendingMemberScope: "",
+  photoUploadError: "",
+  photoUploading: false,
+  notPhotoUploading: true,
+  noSignIn: true,
+  profileUrl: "",
+  siteUrl: "",
+  memberScope: "",
+  originalPhones: [],
+  noSiteUrl: true,
+  siteHandoff: false,
+  noSiteHandoff: true,
+  slugEditing: false,
+  slugMessage: "",
+  noSlugMessage: true,
+  privacyConfirmVisible: false,
+  pendingPrivacyStatus: "",
+  noPrivacyConfirm: true,
+  privacyPrompt: "",
+  hasProfileUrl: false,
+  passwordPanelOpen: false,
+  passwordCredentialSupported: false,
+  noPasswordCredentialSupport: true,
+  passwordCurrent: "",
+  passwordNew: "",
+  passwordConfirm: "",
+  passwordSaving: false,
+  notPasswordSaving: true,
+  notPasswordChanging: true,
+  passwordResetSending: false,
+  notPasswordResetSending: true,
+  passwordRequestVersion: 0,
+  passwordError: "",
+  passwordNoError: true,
+  passwordMessage: "",
+  passwordNoMessage: true,
+  emailPanelOpen: false,
+  emailUnavailable: "",
+  emailManageAvailable: false,
+  noEmailManage: true,
+  hasAddressesRoute: false,
+  noAddressesRoute: true,
+  hasWalletRoute: false,
+  noWalletRoute: true,
+};
+
+type WixMemberResponse = {
+  member?: {
+    id?: string;
+    loginEmail?: string;
+    contact?: { firstName?: string; lastName?: string; phones?: string[] };
+    profile?: { nickname?: string; title?: string; slug?: string; photo?: { id?: string; url?: string } };
+    privacyStatus?: string;
+  };
+};
+
+function rawText(value: unknown): string { return typeof value === "string" ? value : ""; }
+function clean(value: unknown): string { return rawText(value).trim(); }
+type ProfileField = "displayName" | "title" | "firstName" | "lastName" | "phone" | "photo";
+function fieldErrorKey(field: ProfileField): string { return field === "photo" ? "photoUploadError" : `${field}Error`; }
+function clearFieldErrors(): Pick<S, "displayNameError" | "titleError" | "firstNameError" | "lastNameError" | "phoneError"> {
+  return { displayNameError: "", titleError: "", firstNameError: "", lastNameError: "", phoneError: "" };
+}
+function validationBody(error: unknown): Record<string, unknown> | undefined {
+  const object = (value: unknown): Record<string, unknown> | undefined => value && typeof value === "object" ? value as Record<string, unknown> : undefined;
+  const err = object(error);
+  const message = typeof err?.message === "string" ? err.message : "";
+  const rawBody = /^HTTP 400:\s*([\s\S]+)$/.exec(message)?.[1];
+  let body: Record<string, unknown> | undefined;
+  if (rawBody) {
+    try { body = object(JSON.parse(rawBody)); } catch { /* Non-JSON HTTP errors are not field validation. */ }
+  }
+  return body;
+}
+function isDefiniteValidationFailure(error: unknown): boolean {
+  const message = typeof (error as { message?: unknown } | null)?.message === "string" ? (error as { message: string }).message : "";
+  if (/^HTTP 400 \[INVALID_ARGUMENT\]:/.test(message)) return true;
+  const body = validationBody(error);
+  if (!body) return false;
+  const object = (value: unknown): Record<string, unknown> | undefined => value && typeof value === "object" ? value as Record<string, unknown> : undefined;
+  const details = object(body.details);
+  const validation = object(details?.validationError) ?? object(body.validationError);
+  return !!validation || Array.isArray(details?.fieldViolations) || Array.isArray(body.fieldViolations);
+}
+function fieldViolations(error: unknown): Set<ProfileField> {
+  const result = new Set<ProfileField>();
+  const body = validationBody(error);
+  if (!body) return result;
+  const object = (value: unknown): Record<string, unknown> | undefined => value && typeof value === "object" ? value as Record<string, unknown> : undefined;
+  const details = object(body.details);
+  const validation = object(details?.validationError) ?? object(body.validationError);
+  const violations = validation?.fieldViolations ?? details?.fieldViolations ?? body.fieldViolations;
+  if (!Array.isArray(violations)) return result;
+  const paths: Record<string, ProfileField> = {
+    nickname: "displayName", "profile.nickname": "displayName", "member.profile.nickname": "displayName",
+    title: "title", "profile.title": "title", "member.profile.title": "title",
+    "contact.firstname": "firstName", firstname: "firstName", "member.contact.firstname": "firstName",
+    "contact.lastname": "lastName", lastname: "lastName", "member.contact.lastname": "lastName",
+    phone: "phone", phones: "phone", "contact.phone": "phone", "contact.phones": "phone", "member.contact.phones": "phone",
+    photo: "photo", "profile.photo": "photo", "member.profile.photo": "photo",
+  };
+  for (const violation of violations) {
+    const item = object(violation);
+    const path = [item?.field, item?.fieldName, item?.path, item?.property].find((value) => typeof value === "string");
+    if (typeof path !== "string") continue;
+    const normalized = path.toLowerCase().replace(/\[\d+\]/g, "").replace(/_/g, "");
+    const field = paths[normalized];
+    if (field) result.add(field);
+  }
+  return result;
+}
+function changedProfileFields(s: S): Set<ProfileField> {
+  const fields = new Set<ProfileField>();
+  if (s.displayName.trim() !== s.original.displayName.trim()) fields.add("displayName");
+  if (s.title.trim() !== s.original.title.trim()) fields.add("title");
+  if (s.firstName.trim() !== s.original.firstName.trim()) fields.add("firstName");
+  if (s.lastName.trim() !== s.original.lastName.trim()) fields.add("lastName");
+  if (s.phone.trim() !== (s.originalPhones[0] ?? "").trim()) fields.add("phone");
+  if (s.photoMediaId && s.photoDraftUrl) fields.add("photo");
+  return fields;
+}
+function memberPatch(s: S, fields: Set<ProfileField>): { profile?: Record<string, unknown>; contact?: Record<string, unknown> } {
+  const profile: Record<string, unknown> = {};
+  const contact: Record<string, unknown> = {};
+  if (fields.has("displayName")) profile.nickname = s.displayName.trim();
+  if (fields.has("title")) profile.title = s.title.trim();
+  if (fields.has("photo") && s.photoMediaId && s.photoDraftUrl) profile.photo = { id: s.photoMediaId, url: s.photoDraftUrl };
+  if (fields.has("firstName")) contact.firstName = s.firstName.trim();
+  if (fields.has("lastName")) contact.lastName = s.lastName.trim();
+  if (fields.has("phone")) {
+    const nextPhones = s.phone.trim() ? [s.phone.trim(), ...s.originalPhones.slice(1)] : s.originalPhones.slice(1);
+    if (nextPhones.length) contact.phones = nextPhones;
+  }
+  return { ...(Object.keys(profile).length ? { profile } : {}), ...(Object.keys(contact).length ? { contact } : {}) };
+}
+function photoUploadFunctionName(value: unknown): string {
+  const name = clean(value);
+  return /^[A-Za-z][A-Za-z0-9_]{0,63}$/.test(name) ? name : "";
+}
+function validUploadUrl(value: unknown): string {
+  if (typeof value !== "string") return "";
+  // Hand-parsed: JSC (iOS) has no `URL` global. Host is plain letters/digits/dots, so userinfo and ports never match.
+  const m = /^https:\/\/([A-Za-z0-9.-]+)(?:[/?][^#\s\\]*)?$/.exec(value);
+  const host = m ? m[1].toLowerCase() : "";
+  return host === "wixmp.com" || host.endsWith(".wixmp.com") ? value : "";
+}
+function validPhotoUrl(value: unknown): string {
+  if (typeof value !== "string") return "";
+  // Members v1 documents profile photo URLs as protocol-relative even though
+  // upload responses use absolute HTTPS URLs.
+  const normalized = value.startsWith("//") ? `https:${value}` : value;
+  const m = /^https:\/\/([A-Za-z0-9.-]+)(\/media\/[^?#\s\\]*)(?:\?[^#\s\\]*)?$/.exec(normalized);
+  return m && m[1].toLowerCase() === "static.wixstatic.com" && !/\/\.\.?(\/|$)/.test(m[2]) ? normalized : "";
+}
+function memberPhotoDisplayUrl(value: unknown): string {
+  const photoUrl = clean(value);
+  return photoUrl.startsWith("//") ? `https:${photoUrl}` : photoUrl;
+}
+function canonicalPhotoMediaId(value: unknown): string {
+  const mediaId = clean(value);
+  try { return decodeURIComponent(mediaId); }
+  catch { return mediaId; }
+}
+const SITE_HANDOFF_URL = /^https?:\/\/([^\s/?#\\@:]+)(?::\d+)?[^\s\\]*$/i;
+/** A website handoff needs a real http(s) site: the documented placeholder (example.com) never counts. */
+function siteHandoffAvailable(siteUrl: string): boolean {
+  const match = SITE_HANDOFF_URL.exec(siteUrl);
+  if (!match) return false;
+  const host = match[1].toLowerCase();
+  return host !== "example.com" && !host.endsWith(".example.com");
+}
+function profileUrl(siteUrl: string, slug: string): string {
+  if (!siteUrl || !slug) return "";
+  const m = /^(https?):\/\/([^\s/?#\\@]+)((?:\/[^\s?#\\]*)?)(?:[?#].*)?$/i.exec(siteUrl);
+  if (!m) return "";
+  return `${m[1].toLowerCase()}://${m[2].toLowerCase()}${m[3].replace(/\/$/, "")}/profile/${encodeURIComponent(slug)}/profile`;
+}
+
+function memberValues(member: NonNullable<WixMemberResponse["member"]>): ProfileValues {
+  const firstName = clean(member.contact?.firstName);
+  const lastName = clean(member.contact?.lastName);
+  return {
+    displayName: clean(member.profile?.nickname) || [firstName, lastName].filter(Boolean).join(" ") || clean(member.loginEmail),
+    title: clean(member.profile?.title),
+    firstName,
+    lastName,
+    phone: clean(member.contact?.phones?.[0]),
+    slug: clean(member.profile?.slug),
+    memberImage: memberPhotoDisplayUrl(member.profile?.photo?.url),
+    memberImageId: clean(member.profile?.photo?.id),
+    memberInitials: ([firstName[0], lastName[0]].filter(Boolean).join("") || clean(member.profile?.nickname).slice(0, 1) || "M").toUpperCase(),
+  };
+}
+
+async function fetchMember(siteUrlInput: unknown): Promise<{ email: string; scope: string; siteUrl: string; member: NonNullable<WixMemberResponse["member"]> }> {
+  const access = await memberAccess();
+  if (!access.email) throw Object.assign(new Error("signed_out"), { code: "signed_out" });
+  const response = await getMyMember({ fieldsets: ["FULL"] }) as WixMemberResponse;
+  if (!response.member?.id) throw new Error("The signed-in member profile is unavailable.");
+  const siteUrl = clean(siteUrlInput).replace(/\/$/, "");
+  return { email: access.email, scope: access.scope, siteUrl, member: response.member };
+}
+
+function fromMember(member: NonNullable<WixMemberResponse["member"]>, email: string, scope: string, siteUrl: string, prior?: S, routes?: { addresses: boolean; wallet: boolean; passwordCredentials: boolean }): S {
+  const values = memberValues(member);
+  const privacyStatus = clean(member.privacyStatus).toUpperCase();
+  const privacySupported = privacyStatus === "PUBLIC" || privacyStatus === "PRIVATE";
+  const currentProfileUrl = profileUrl(siteUrl, values.slug);
+  return {
+    ...(prior ?? EMPTY),
+    ...values,
+    status: "loaded",
+    signedOut: false,
+    errorText: "",
+    error: "",
+    signInRequired: false,
+    message: "",
+    memberId: clean(member.id),
+    memberEmail: email,
+    loginEmail: clean(member.loginEmail) || email,
+    privacyStatus,
+    privacySupported,
+    privacyActionLabel: privacySupported
+      ? copyParam(privacyStatus === "PRIVATE" ? "accountSettings.makePublicCta" : "accountSettings.makePrivateCta", privacyStatus === "PRIVATE" ? "Make profile public" : "Make profile private")
+      : "",
+    isPrivate: privacyStatus === "PRIVATE",
+    notPrivate: privacyStatus !== "PRIVATE",
+    hasMemberImage: !!values.memberImage,
+    noMemberImage: !values.memberImage,
+    photoDisplayUrl: values.memberImage,
+    uploadUrl: "",
+    photoDraftUrl: "",
+    photoMediaId: "",
+    photoPendingMemberId: "",
+    photoPendingMemberEmail: "",
+    photoPendingMemberScope: "",
+    photoUploadError: "",
+    photoUploading: false,
+    notPhotoUploading: true,
+    privacyControlsUnavailable: !privacySupported,
+    siteUrl,
+    siteHandoff: siteHandoffAvailable(siteUrl),
+    noSiteHandoff: !siteHandoffAvailable(siteUrl),
+    profileUrl: currentProfileUrl,
+    noSiteUrl: !currentProfileUrl,
+    hasProfileUrl: !!currentProfileUrl,
+    memberScope: scope,
+    originalPhones: [...(member.contact?.phones ?? [])],
+    original: { ...values },
+    dirty: false,
+    saving: false,
+    displayNameError: "",
+    titleError: "",
+    firstNameError: "",
+    lastNameError: "",
+    phoneError: "",
+    noError: true,
+    noMessage: true,
+    noMember: false,
+    notLoading: true,
+    notErrored: true,
+    loginControlsUnavailable: true,
+    noSignIn: false,
+    hasAddressesRoute: routes?.addresses ?? prior?.hasAddressesRoute ?? false,
+    noAddressesRoute: !(routes?.addresses ?? prior?.hasAddressesRoute ?? false),
+    hasWalletRoute: routes?.wallet ?? prior?.hasWalletRoute ?? false,
+    noWalletRoute: !(routes?.wallet ?? prior?.hasWalletRoute ?? false),
+    passwordCredentialSupported: routes?.passwordCredentials ?? prior?.passwordCredentialSupported ?? false,
+    noPasswordCredentialSupport: !(routes?.passwordCredentials ?? prior?.passwordCredentialSupported ?? false),
+    slugEditing: false,
+    slugMessage: "",
+    noSlugMessage: true,
+    privacyConfirmVisible: false,
+    pendingPrivacyStatus: "",
+    noPrivacyConfirm: true,
+    privacyPrompt: "",
+  };
+}
+
+function failed(s: S, error: unknown): S {
+  const signedOut = (error as { code?: string } | null)?.code === "signed_out";
+  return {
+    ...s,
+    ...(signedOut ? {
+      ...BLANK,
+      memberId: "",
+      memberEmail: "",
+      loginEmail: "",
+      original: { ...BLANK },
+      originalPhones: [],
+      memberScope: "",
+      siteUrl: "",
+      siteHandoff: false,
+      noSiteHandoff: true,
+      profileUrl: "",
+      noSiteUrl: true,
+      hasProfileUrl: false,
+      hasMemberImage: false,
+      noMemberImage: true,
+      privacySupported: false,
+      privacyStatus: "",
+      isPrivate: false,
+      photoUploadAvailable: false,
+      noPhotoUploadAvailable: true,
+      photoUploadFunctionName: "",
+      photoUploadSupported: false,
+      photoDisplayUrl: "",
+      uploadUrl: "",
+      photoDraftUrl: "",
+      photoMediaId: "",
+      photoPendingMemberId: "",
+      photoPendingMemberEmail: "",
+      photoPendingMemberScope: "",
+      photoUploadError: "",
+      photoUploading: false,
+      notPhotoUploading: true,
+      dirty: false,
+    } : {}),
+    status: "error",
+    signedOut,
+    errorText: signedOut
+      ? copyParam("accountSettings.signedOut", "Sign in to view your account details.")
+      : copyParam("accountSettings.loadError", "Your account details could not be loaded. Try again."),
+    error: signedOut
+      ? copyParam("accountSettings.signedOut", "Sign in to view your account details.")
+      : copyParam("accountSettings.loadError", "Your account details could not be loaded. Try again."),
+    signInRequired: signedOut,
+    noError: false,
+    noMember: true,
+    notLoading: true,
+    notErrored: false,
+    saving: false,
+    noSignIn: !signedOut,
+  };
+}
+
+let profileMutationInFlight = false;
+let slugMutationInFlight = false;
+let privacyMutationInFlight = false;
+let passwordMutationInFlight = false;
+let passwordResetInFlight = false;
+let passwordMutationVersion = 0;
+let photoUploadMintInFlight = false;
+let photoUploadVersion = 0;
+let accountLoadVersion = 0;
+// The native picker uploads the file itself and never reports a failed PUT back to the worker, so a minted
+// upload URL counts as "upload in progress" only for a bounded window. Save waits inside it, then recovers.
+const PHOTO_UPLOAD_WAIT_MS = 60_000;
+let photoMintedAt = 0;
+function photoUploadPending(s: S): boolean {
+  return !!s.uploadUrl && !!s.photoPendingMemberId && Date.now() - photoMintedAt < PHOTO_UPLOAD_WAIT_MS;
+}
+
+function clearPassword(s: S): S {
+  return { ...s, passwordCurrent: "", passwordNew: "", passwordConfirm: "" };
+}
+
+function clearPhotoDraft(s: S): S {
+  photoUploadVersion += 1;
+  return {
+    ...s,
+    uploadUrl: "",
+    photoDraftUrl: "",
+    photoDisplayUrl: s.memberImage,
+    photoMediaId: "",
+    photoPendingMemberId: "",
+    photoPendingMemberEmail: "",
+    photoPendingMemberScope: "",
+    photoUploadError: "",
+    photoUploading: false,
+    notPhotoUploading: true,
+  };
+}
+
+function clearPhotoUploadAttempt(s: S, message = ""): S {
+  photoUploadVersion += 1;
+  return {
+    ...s,
+    uploadUrl: "",
+    photoPendingMemberId: "",
+    photoPendingMemberEmail: "",
+    photoPendingMemberScope: "",
+    photoUploadError: message,
+    photoUploading: false,
+    notPhotoUploading: true,
+  };
+}
+
+async function currentMemberMatches(s: S): Promise<boolean> {
+  return currentMemberRecordMatches(s.memberEmail, s.memberScope, s.memberId);
+}
+
+async function currentMemberRecordMatches(email: string, scope: string, memberId: string): Promise<boolean> {
+  const before = await memberAccess();
+  if (!before.email || before.email !== email || before.scope !== scope) return false;
+  const response = await getMyMember({ fieldsets: ["FULL"] }) as WixMemberResponse;
+  const after = await memberAccess();
+  return response.member?.id === memberId && after.email === email && after.scope === scope;
+}
+
+type PasswordResult = { status?: string; code?: string; payload?: { status?: string; code?: string; payload?: { code?: string } } } | null;
+
+async function performPasswordChange(version: number, memberId: string, memberEmail: string, memberScope: string, currentPassword: string, newPassword: string): Promise<void> {
+  try {
+    const before = await memberAccess();
+    if (!before.email || before.email !== memberEmail || before.scope !== memberScope) {
+      await svc.resolvePasswordChange({ version, status: "error", code: "account_changed" });
+      return;
+    }
+    const result = await dispatch("himi.wix.changePassword", { currentPassword, newPassword, expectedMemberId: memberId }) as PasswordResult;
+    const current = await memberAccess();
+    if (!current.email || current.email !== memberEmail || current.scope !== memberScope) {
+      await svc.resolvePasswordChange({ version, status: "error", code: "account_changed" });
+      return;
+    }
+    await svc.resolvePasswordChange({ version, status: result?.status === "ok" || result?.payload?.status === "ok" ? "ok" : "error", code: result?.code ?? result?.payload?.code ?? result?.payload?.payload?.code });
+  } catch {
+    // A binary without the native handler fails closed here; never report success.
+    await svc.resolvePasswordChange({ version, status: "error", code: "unavailable" });
+  } finally {
+    passwordMutationInFlight = false;
+  }
+}
+
+async function performPasswordReset(version: number, memberId: string, memberEmail: string, memberScope: string): Promise<void> {
+  let result: PasswordResult;
+  let code = "";
+  try {
+    const before = await memberAccess();
+    const beforeMember = await getMyMember({ fieldsets: ["FULL"] }) as WixMemberResponse;
+    const afterRead = await memberAccess();
+    const resetEmail = clean(beforeMember.member?.loginEmail);
+    if (!before.email || before.email !== memberEmail || before.scope !== memberScope || afterRead.email !== memberEmail || afterRead.scope !== memberScope || beforeMember.member?.id !== memberId || !resetEmail) {
+      code = "account_changed";
+    } else {
+      result = await dispatch("himi.wix.resetPassword", { email: resetEmail }) as PasswordResult;
+      const current = await memberAccess();
+      const afterMember = await getMyMember({ fieldsets: ["FULL"] }) as WixMemberResponse;
+      const finalAccess = await memberAccess();
+      if (current.email !== memberEmail || current.scope !== memberScope || finalAccess.email !== memberEmail || finalAccess.scope !== memberScope || afterMember.member?.id !== memberId) code = "account_changed";
+      else if (result?.status !== "ok" && result?.payload?.status !== "ok") code = "reset_failed";
+    }
+  } catch {
+    code = "reset_failed";
+  } finally {
+    passwordResetInFlight = false;
+  }
+  await svc.resolvePasswordReset({ version, code });
+}
+
+const svc = defineService<S, {
+  load: (s: S, arg?: unknown) => Promise<S>;
+  setDisplayName: (s: S, arg?: unknown) => S;
+  setTitle: (s: S, arg?: unknown) => S;
+  setFirstName: (s: S, arg?: unknown) => S;
+  setLastName: (s: S, arg?: unknown) => S;
+  setPhone: (s: S, arg?: unknown) => S;
+  setSlug: (s: S, arg?: unknown) => S;
+  discard: (s: S) => S;
+  genUpload: (s: S, arg?: { fileName?: unknown; mimeType?: unknown }) => Promise<S>;
+  setMedia: (s: S, arg?: { mediaId?: unknown; imageUrl?: unknown }) => Promise<S>;
+  save: (s: S) => Promise<S | undefined>;
+  saveSlug: (s: S) => Promise<S | undefined>;
+  setPrivate: (s: S, arg?: unknown) => Promise<S | undefined>;
+  requestPrivacyChange: (s: S, arg?: unknown) => S;
+  cancelPrivacyChange: (s: S) => S;
+  setPasswordCurrent: (s: S, arg?: unknown) => S;
+  setPasswordNew: (s: S, arg?: unknown) => S;
+  setPasswordConfirm: (s: S, arg?: unknown) => S;
+  openPasswordPanel: (s: S) => S;
+  closePasswordPanel: (s: S) => S;
+  openEmailPanel: (s: S) => S;
+  closeEmailPanel: (s: S) => S;
+  changePassword: (s: S) => S;
+  resolvePasswordChange: (s: S, arg?: unknown) => S;
+  resolvePasswordReset: (s: S, arg?: unknown) => S;
+  resetPassword: (s: S) => S;
+  openSite: (s: S) => Promise<S | undefined>;
+}> ("himiBrandedAccountSettings", {
+  state: { ...EMPTY },
+  notHydrated: ["status", "signedOut", "errorText", "error", "message", "memberId", "memberEmail", "loginEmail", "original", "originalPhones", "memberScope", "siteHandoff", "noSiteHandoff", "dirty", "saving", "displayNameError", "titleError", "firstNameError", "lastNameError", "phoneError", "noError", "noMessage", "noMember", "notLoading", "notErrored", "noSignIn", "slugEditing", "slugMessage", "noSlugMessage", "siteUrl", "profileUrl", "noSiteUrl", "privacyConfirmVisible", "noPrivacyConfirm", "pendingPrivacyStatus", "privacyPrompt", "passwordPanelOpen", "passwordCredentialSupported", "noPasswordCredentialSupport", "passwordCurrent", "passwordNew", "passwordConfirm", "passwordSaving", "notPasswordSaving", "notPasswordChanging", "passwordResetSending", "notPasswordResetSending", "passwordRequestVersion", "passwordError", "passwordNoError", "passwordMessage", "passwordNoMessage", "emailPanelOpen", "hasAddressesRoute", "noAddressesRoute", "hasWalletRoute", "noWalletRoute", "photoUploadAvailable", "noPhotoUploadAvailable", "photoUploadFunctionName", "photoUploadSupported", "photoDisplayUrl", "uploadUrl", "photoDraftUrl", "photoMediaId", "photoPendingMemberId", "photoPendingMemberEmail", "photoPendingMemberScope", "photoUploadError", "photoUploading", "notPhotoUploading"],
+  actions: {
+    load: async (_s, arg): Promise<S> => {
+      const version = ++accountLoadVersion;
+      photoUploadVersion += 1;
+      stashCopy(arg);
+      try {
+        const { email, scope, siteUrl, member } = await fetchMember((arg as { siteUrl?: unknown } | undefined)?.siteUrl);
+        const current = await memberAccess();
+        if (!current.email || current.email !== email || current.scope !== scope) {
+          if (version !== accountLoadVersion) return svc.getState() as S;
+          return failed({ ...EMPTY, notLoading: true }, Object.assign(new Error("signed_out"), { code: "signed_out" }));
+        }
+        const routes = await memberAccountRoutes();
+        if (version !== accountLoadVersion) return svc.getState() as S;
+        if (!(await currentMemberRecordMatches(email, scope, clean(member.id)))) {
+          if (version !== accountLoadVersion) return svc.getState() as S;
+          return failed({ ...EMPTY, notLoading: true }, Object.assign(new Error("signed_out"), { code: "signed_out" }));
+        }
+        if (version !== accountLoadVersion) return svc.getState() as S;
+        const loaded = fromMember(member, email, scope, siteUrl, undefined, routes);
+        const configuredFunctionName = photoUploadFunctionName((arg as { photoUploadFunctionName?: unknown } | undefined)?.photoUploadFunctionName);
+        const available = !!configuredFunctionName && routes.mediaField;
+        return { ...loaded, photoUploadFunctionName: configuredFunctionName, photoUploadSupported: routes.mediaField, photoUploadAvailable: available, noPhotoUploadAvailable: !available };
+      } catch (error) {
+        if (version !== accountLoadVersion) return svc.getState() as S;
+        return failed({ ...EMPTY, notLoading: true }, error);
+      }
+    },
+    setDisplayName: (s, arg) => ({ ...s, displayName: rawText((arg as { value?: unknown } | undefined)?.value), dirty: true, displayNameError: "", message: "", noMessage: true, noError: true }),
+    setTitle: (s, arg) => ({ ...s, title: rawText((arg as { value?: unknown } | undefined)?.value), dirty: true, titleError: "", message: "", noMessage: true }),
+    setFirstName: (s, arg) => ({ ...s, firstName: rawText((arg as { value?: unknown } | undefined)?.value), dirty: true, firstNameError: "", message: "", noMessage: true }),
+    setLastName: (s, arg) => ({ ...s, lastName: rawText((arg as { value?: unknown } | undefined)?.value), dirty: true, lastNameError: "", message: "", noMessage: true }),
+    setPhone: (s, arg) => ({ ...s, phone: rawText((arg as { value?: unknown } | undefined)?.value), dirty: true, phoneError: "", message: "", noMessage: true }),
+    setSlug: (s, arg) => ({ ...s, slug: rawText((arg as { value?: unknown } | undefined)?.value), dirty: true, slugMessage: "", noSlugMessage: true }),
+    genUpload: async (s, arg): Promise<S> => {
+      if (photoUploadMintInFlight || s.status !== "loaded" || !s.memberId || !s.photoUploadAvailable || !s.photoUploadFunctionName) {
+        return { ...s, uploadUrl: "", photoUploadError: copyParam("accountSettings.profilePhotoUnavailable", "Profile photo changes are not available in this session."), photoUploading: false, notPhotoUploading: true };
+      }
+      photoUploadMintInFlight = true;
+      const version = ++photoUploadVersion;
+      try {
+        if (!(await currentMemberMatches(s))) {
+          if (version !== photoUploadVersion) return svc.getState() as S;
+          const latest = svc.getState() as S;
+          if (latest.memberId !== s.memberId || latest.memberEmail !== s.memberEmail || latest.memberScope !== s.memberScope) return latest;
+          return clearPhotoUploadAttempt(latest, copyParam("accountSettings.profilePhotoAccountChanged", "Your account changed. Reload before choosing a profile photo."));
+        }
+        const metadata = arg ?? {};
+        const mimeType = clean(metadata.mimeType);
+        const fileName = clean(metadata.fileName);
+        if (!/^image\/(jpeg|png|webp)$/i.test(mimeType) || !/^[A-Za-z0-9._-]{1,128}$/.test(fileName)) {
+          const latest = svc.getState() as S;
+          if (version !== photoUploadVersion) return latest;
+          return clearPhotoUploadAttempt(latest, copyParam("accountSettings.profilePhotoUploadError", "The photo could not be prepared. Choose another image."));
+        }
+        const minted = await generateMemberPhotoUploadUrl(s.photoUploadFunctionName, mimeType, fileName);
+        if (version !== photoUploadVersion) return svc.getState() as S;
+        if (!(await currentMemberMatches(s))) {
+          if (version !== photoUploadVersion) return svc.getState() as S;
+          const latest = svc.getState() as S;
+          if (latest.memberId !== s.memberId || latest.memberEmail !== s.memberEmail || latest.memberScope !== s.memberScope) return latest;
+          return clearPhotoUploadAttempt(latest, copyParam("accountSettings.profilePhotoAccountChanged", "Your account changed. Reload before choosing a profile photo."));
+        }
+        if (version !== photoUploadVersion) return svc.getState() as S;
+        const uploadUrl = validUploadUrl(minted.uploadUrl);
+        if (!uploadUrl) return clearPhotoUploadAttempt(svc.getState() as S, copyParam("accountSettings.profilePhotoUploadError", "The photo could not be prepared. Choose another image."));
+        const latest = svc.getState() as S;
+        if (latest.memberId !== s.memberId || latest.memberEmail !== s.memberEmail || latest.memberScope !== s.memberScope) return latest;
+        photoMintedAt = Date.now();
+        return {
+          ...latest,
+          uploadUrl: uploadUrl,
+          photoPendingMemberId: latest.memberId,
+          photoPendingMemberEmail: latest.memberEmail,
+          photoPendingMemberScope: latest.memberScope,
+          photoUploadError: "",
+          photoUploading: false,
+          notPhotoUploading: true,
+        };
+      } catch {
+        const latest = svc.getState() as S;
+        if (version !== photoUploadVersion || latest.memberId !== s.memberId || latest.memberEmail !== s.memberEmail || latest.memberScope !== s.memberScope) return latest;
+        return clearPhotoUploadAttempt(latest, copyParam("accountSettings.profilePhotoUploadError", "The photo could not be uploaded. Try again."));
+      } finally { photoUploadMintInFlight = false; }
+    },
+    setMedia: async (s, arg): Promise<S> => {
+      const mediaId = clean(arg?.mediaId);
+      const imageUrl = validPhotoUrl(arg?.imageUrl);
+      if (!s.uploadUrl || !s.photoPendingMemberId || s.photoPendingMemberId !== s.memberId || !/^[A-Za-z0-9._~:/+-]{1,512}$/.test(mediaId) || !imageUrl) {
+        return { ...s, uploadUrl: "", photoPendingMemberId: "", photoPendingMemberEmail: "", photoPendingMemberScope: "", photoUploadError: copyParam("accountSettings.profilePhotoUploadError", "The photo could not be uploaded. Try again.") };
+      }
+      const version = photoUploadVersion;
+      try {
+        const matches = await currentMemberMatches(s);
+        // The identity check awaits the network: merge onto the CURRENT state, never the entry snapshot,
+        // and drop the result if the upload attempt was superseded (new pick, discard, member change).
+        const latest = svc.getState() as S;
+        if (version !== photoUploadVersion || latest.memberId !== s.memberId || latest.memberEmail !== s.memberEmail || latest.memberScope !== s.memberScope) return latest;
+        if (!matches || s.photoPendingMemberEmail !== latest.memberEmail || s.photoPendingMemberScope !== latest.memberScope) {
+          return clearPhotoUploadAttempt(latest, copyParam("accountSettings.profilePhotoAccountChanged", "Your account changed. Reload before choosing a profile photo."));
+        }
+        photoMintedAt = 0;
+        return {
+          ...latest,
+          uploadUrl: "",
+          photoDraftUrl: imageUrl,
+          photoDisplayUrl: imageUrl,
+          photoMediaId: mediaId,
+          photoPendingMemberId: "",
+          photoPendingMemberEmail: "",
+          photoPendingMemberScope: "",
+          photoUploadError: "",
+          dirty: true,
+        };
+      } catch {
+        const latest = svc.getState() as S;
+        if (version !== photoUploadVersion || latest.memberId !== s.memberId || latest.memberEmail !== s.memberEmail || latest.memberScope !== s.memberScope) return latest;
+        return clearPhotoUploadAttempt(latest, copyParam("accountSettings.profilePhotoAccountChanged", "Your account changed. Reload before choosing a profile photo."));
+      }
+    },
+    discard: (s) => ({ ...clearPhotoDraft(s), ...s.original, ...clearFieldErrors(), dirty: false, message: "", noMessage: true, noError: true }),
+    save: async (s): Promise<S | undefined> => {
+      if (profileMutationInFlight || photoUploadMintInFlight || s.photoUploading || photoUploadPending(s) || !s.memberId || s.status !== "loaded") return undefined;
+      profileMutationInFlight = true;
+      const acceptedFields = new Set<ProfileField>();
+      try {
+        if (!(await currentMemberMatches(s))) {
+          return failed(s, Object.assign(new Error("signed_out"), { code: "signed_out" }));
+        }
+        const attemptedFields = changedProfileFields(s);
+        const fields = new Set(attemptedFields);
+        const rejected = new Set<ProfileField>();
+        if (!s.displayName.trim()) {
+          fields.delete("displayName");
+          rejected.add("displayName");
+        }
+        const savingPhotoId = s.photoMediaId;
+        const savingPhotoUrl = s.photoDraftUrl;
+        const submitFields = async (submitted: Set<ProfileField>): Promise<WixMemberResponse | undefined> => {
+          const patch = memberPatch(s, submitted);
+          if (!patch.profile && !patch.contact) return undefined;
+          if (!(await currentMemberMatches(s))) throw Object.assign(new Error("signed_out"), { code: "signed_out" });
+          const response = await updateMember(s.memberId, { member: patch }) as WixMemberResponse;
+          if (response.member?.id !== s.memberId) throw new Error("The profile update was not confirmed for this member.");
+          for (const field of submitted) acceptedFields.add(field);
+          return response;
+        };
+        let response: WixMemberResponse | undefined;
+        let pendingFields = new Set(fields);
+        while (pendingFields.size) {
+          try {
+            response = await submitFields(pendingFields);
+            break;
+          } catch (error) {
+            if (!isDefiniteValidationFailure(error)) throw error;
+            const violations = fieldViolations(error);
+            const rejectedByResponse = new Set([...violations].filter((field) => pendingFields.has(field)));
+            if (rejectedByResponse.size) {
+              for (const field of rejectedByResponse) rejected.add(field);
+              pendingFields = new Set([...pendingFields].filter((field) => !rejectedByResponse.has(field)));
+              // A later validation response may identify another field. Keep
+              // filtering the known failures from this changed-field subset.
+              continue;
+            }
+            // Typed INVALID_ARGUMENT responses contain no field details in the
+            // native bridge. Isolate only this failed batch's changed fields.
+            for (const field of pendingFields) {
+              try {
+                const one = await submitFields(new Set([field]));
+                if (one) response = one;
+              } catch (fieldError) {
+                if (!isDefiniteValidationFailure(fieldError)) throw fieldError;
+                const details = fieldViolations(fieldError);
+                if (details.size && !details.has(field)) throw fieldError;
+                rejected.add(field);
+              }
+            }
+            pendingFields = new Set();
+          }
+        }
+        // Wix ignores an empty phones array, so clear the primary number only
+        // after the other accepted fields have been patched. Secondary numbers
+        // remain in place. Validation failure here belongs only to the phone.
+        const nextPhones = s.phone.trim() ? [s.phone.trim(), ...s.originalPhones.slice(1)] : s.originalPhones.slice(1);
+        if (fields.has("phone") && !rejected.has("phone") && !nextPhones.length && s.originalPhones.length) {
+          try {
+            if (!(await currentMemberMatches(s))) throw Object.assign(new Error("signed_out"), { code: "signed_out" });
+            await deleteMemberPhones(s.memberId);
+            acceptedFields.add("phone");
+          }
+          catch (error) {
+            if (!isDefiniteValidationFailure(error)) throw error;
+            rejected.add("phone");
+          }
+        }
+        if (response) {
+          const afterUpdate = await memberAccess();
+          if (!afterUpdate.email || afterUpdate.email !== s.memberEmail || afterUpdate.scope !== s.memberScope) {
+            return failed(s, Object.assign(new Error("signed_out"), { code: "signed_out" }));
+          }
+        }
+        const after = await memberAccess();
+        if (!after.email || after.email !== s.memberEmail || after.scope !== s.memberScope) {
+          return failed(s, Object.assign(new Error("signed_out"), { code: "signed_out" }));
+        }
+        const refreshed = await getMyMember({ fieldsets: ["FULL"] }) as WixMemberResponse;
+        const afterRefresh = await memberAccess();
+        if (refreshed.member?.id !== s.memberId || !afterRefresh.email || afterRefresh.email !== s.memberEmail || afterRefresh.scope !== s.memberScope) {
+          return failed(s, Object.assign(new Error("signed_out"), { code: "signed_out" }));
+        }
+        const latestState = svc.getState() as S;
+        const readbackValues = memberValues(refreshed.member);
+        const expectedPhones = s.phone.trim() ? [s.phone.trim(), ...s.originalPhones.slice(1)] : s.originalPhones.slice(1);
+        const actualPhones = refreshed.member.contact?.phones ?? [];
+        const phonesMatch = expectedPhones.length === actualPhones.length && expectedPhones.every((phone, index) =>
+          phone.trim().replace(/[\s().-]/g, "") === clean(actualPhones[index]).replace(/[\s().-]/g, ""));
+        const fieldReadbackMatches: Record<Exclude<ProfileField, "photo">, boolean> = {
+          displayName: readbackValues.displayName === s.displayName.trim(),
+          title: readbackValues.title === s.title.trim(),
+          firstName: readbackValues.firstName === s.firstName.trim(),
+          lastName: readbackValues.lastName === s.lastName.trim(),
+          phone: phonesMatch,
+        };
+        for (const field of attemptedFields) {
+          if (field === "photo") continue;
+          if (rejected.has(field) || latestState[field] !== s[field]) continue;
+          if (!fieldReadbackMatches[field]) rejected.add(field);
+        }
+        const editsSinceSubmit: Partial<ProfileValues> = {};
+        for (const key of ["displayName", "title", "firstName", "lastName", "phone"] as const) {
+          if (latestState[key] !== s[key]) editsSinceSubmit[key] = latestState[key];
+          else if (rejected.has(key)) editsSinceSubmit[key] = s[key];
+        }
+        const photoChangedDuringSave = latestState.photoMediaId !== s.photoMediaId || latestState.photoDraftUrl !== s.photoDraftUrl;
+        const fieldErrors = clearFieldErrors();
+        for (const field of rejected) {
+          if (field === "photo") continue;
+          if (latestState[field] !== s[field]) continue;
+          const value = field === "displayName" && !s.displayName.trim()
+            ? copyParam("accountSettings.displayNameRequired", "Enter a display name.")
+            : copyParam("accountSettings.fieldSaveError", "This field could not be saved. Check it and try again.");
+          (fieldErrors as Record<string, string>)[fieldErrorKey(field)] = value;
+        }
+        const makeDirtyState = (next: S): S => ({ ...next, dirty: changedProfileFields(next).size > 0 });
+        const refreshedPhotoId = clean(refreshed.member.profile?.photo?.id);
+        const refreshedPhotoUrl = memberPhotoDisplayUrl(refreshed.member.profile?.photo?.url);
+        if (savingPhotoId && (rejected.has("photo") || canonicalPhotoMediaId(refreshedPhotoId) !== canonicalPhotoMediaId(savingPhotoId) || !validPhotoUrl(refreshedPhotoUrl))) {
+          const keepPhotoDraft = photoChangedDuringSave ? latestState.photoDraftUrl : savingPhotoUrl;
+          const keepPhotoId = photoChangedDuringSave ? latestState.photoMediaId : savingPhotoId;
+          return makeDirtyState({
+            ...fromMember(refreshed.member, s.memberEmail, s.memberScope, s.siteUrl, latestState),
+            ...editsSinceSubmit,
+            ...fieldErrors,
+            photoDraftUrl: keepPhotoDraft,
+            photoDisplayUrl: keepPhotoDraft || refreshedPhotoUrl,
+            photoMediaId: keepPhotoId,
+            uploadUrl: latestState.uploadUrl,
+            photoPendingMemberId: latestState.photoPendingMemberId,
+            photoPendingMemberEmail: latestState.photoPendingMemberEmail,
+            photoPendingMemberScope: latestState.photoPendingMemberScope,
+            photoUploadError: rejected.has("photo")
+              ? copyParam("accountSettings.fieldSaveError", "This field could not be saved. Check it and try again.")
+              : copyParam("accountSettings.profilePhotoSaveError", "Your new profile photo was not confirmed as saved. Try saving it again."),
+            message: rejected.size && [...attemptedFields].some((field) => !rejected.has(field)) ? copyParam("accountSettings.partialSave", "Other changes were saved. Fix the highlighted field and try again.") : "",
+            noMessage: !(rejected.size && [...attemptedFields].some((field) => !rejected.has(field))),
+          });
+        }
+        const next = makeDirtyState({
+          ...fromMember(refreshed.member, s.memberEmail, s.memberScope, s.siteUrl, latestState),
+          ...editsSinceSubmit,
+          ...fieldErrors,
+          ...(photoChangedDuringSave ? { photoDraftUrl: latestState.photoDraftUrl, photoMediaId: latestState.photoMediaId, uploadUrl: latestState.uploadUrl, photoPendingMemberId: latestState.photoPendingMemberId, photoPendingMemberEmail: latestState.photoPendingMemberEmail, photoPendingMemberScope: latestState.photoPendingMemberScope } : {}),
+          photoDisplayUrl: photoChangedDuringSave ? latestState.photoDraftUrl || refreshedPhotoUrl : refreshedPhotoUrl,
+          photoUploadError: rejected.has("photo")
+            ? copyParam("accountSettings.fieldSaveError", "This field could not be saved. Check it and try again.")
+            : savingPhotoId && !photoChangedDuringSave && latestState.photoUploadError === s.photoUploadError ? "" : latestState.photoUploadError,
+          message: rejected.size
+            ? [...attemptedFields].some((field) => !rejected.has(field))
+              ? copyParam("accountSettings.partialSave", "Other changes were saved. Fix the highlighted field and try again.")
+              : ""
+            : copyParam("accountSettings.saved", "Your account details were updated."),
+          noMessage: rejected.size > 0 && ![...attemptedFields].some((field) => !rejected.has(field)),
+        });
+        return next;
+      } catch {
+        const latest = svc.getState() as S;
+        if (latest.memberId !== s.memberId || latest.memberEmail !== s.memberEmail || latest.memberScope !== s.memberScope) {
+          return failed(latest, Object.assign(new Error("signed_out"), { code: "signed_out" }));
+        }
+        try {
+          if (!(await currentMemberMatches(s))) return failed(latest, Object.assign(new Error("signed_out"), { code: "signed_out" }));
+        } catch {
+          const current = await memberAccess().catch(() => undefined);
+          if (!current?.email || current.email !== s.memberEmail || current.scope !== s.memberScope) return failed(latest, Object.assign(new Error("signed_out"), { code: "signed_out" }));
+        }
+        return {
+          ...latest,
+          saving: false,
+          message: acceptedFields.size
+            ? copyParam("accountSettings.savePartialError", "Some updates were accepted, but we could not confirm the rest. Reload before trying again.")
+            : copyParam("accountSettings.saveError", "We could not confirm the update. Your edits are still here; reload before trying again."),
+          noMessage: false,
+        };
+      } finally {
+        profileMutationInFlight = false;
+      }
+    },
+    saveSlug: async (s): Promise<S | undefined> => {
+      if (slugMutationInFlight || !s.memberId || s.status !== "loaded") return undefined;
+      const slug = s.slug.trim().replace(/^\/+|\/+$/g, "");
+      if (!/^[a-zA-Z0-9_-]{1,80}$/.test(slug)) return { ...s, slugMessage: copyParam("accountSettings.slugInvalid", "Use letters, numbers, hyphens, or underscores for your profile URL."), noSlugMessage: false };
+      slugMutationInFlight = true;
+      try {
+        const current = await memberAccess();
+        if (!current.email || current.email !== s.memberEmail || current.scope !== s.memberScope) return failed(s, Object.assign(new Error("signed_out"), { code: "signed_out" }));
+        const response = await updateMySlug({ slug }) as WixMemberResponse;
+        const after = await memberAccess();
+        if (!after.email || after.email !== s.memberEmail || after.scope !== s.memberScope) return failed(s, Object.assign(new Error("signed_out"), { code: "signed_out" }));
+        const saved = response.member;
+        if (saved?.id !== s.memberId) throw new Error("The profile URL update was not confirmed for this member.");
+        const refreshed = await getMyMember({ fieldsets: ["FULL"] }) as WixMemberResponse;
+        const afterRefresh = await memberAccess();
+        if (refreshed.member?.id !== s.memberId || !afterRefresh.email || afterRefresh.email !== s.memberEmail || afterRefresh.scope !== s.memberScope) return failed(s, Object.assign(new Error("signed_out"), { code: "signed_out" }));
+        const latest = svc.getState() as S;
+        if (latest.memberId !== s.memberId || latest.memberEmail !== s.memberEmail || latest.memberScope !== s.memberScope) return latest;
+        const savedSlug = clean(refreshed.member.profile?.slug);
+        const savedProfileUrl = profileUrl(latest.siteUrl, savedSlug);
+        const keepNewerSlugDraft = latest.slug !== s.slug;
+        return {
+          ...latest,
+          slug: keepNewerSlugDraft ? latest.slug : savedSlug,
+          slugEditing: keepNewerSlugDraft ? latest.slugEditing : false,
+          original: { ...latest.original, slug: savedSlug },
+          profileUrl: savedProfileUrl,
+          hasProfileUrl: !!savedProfileUrl,
+          noSiteUrl: !savedProfileUrl,
+          dirty: changedProfileFields(latest).size > 0 || (keepNewerSlugDraft ? latest.slug : savedSlug) !== savedSlug,
+          slugMessage: copyParam("accountSettings.slugSaved", "Your profile URL was updated."),
+          noSlugMessage: false,
+        };
+      } catch {
+        const latest = svc.getState() as S;
+        if (latest.memberId !== s.memberId || latest.memberEmail !== s.memberEmail || latest.memberScope !== s.memberScope) return latest;
+        return { ...latest, slugMessage: copyParam("accountSettings.slugSaveError", "Your profile URL was not updated."), noSlugMessage: false };
+      } finally { slugMutationInFlight = false; }
+    },
+    setPrivate: async (s, arg): Promise<S | undefined> => {
+      if (privacyMutationInFlight || !s.memberId || !s.privacySupported || s.status !== "loaded") return undefined;
+      const supplied = arg as { status?: unknown; value?: unknown } | undefined;
+      const value = supplied?.value;
+      const nextStatus = supplied?.status === "PRIVATE" || supplied?.status === "PUBLIC"
+        ? supplied.status
+        : value === true ? "PRIVATE" : value === false ? "PUBLIC" : s.pendingPrivacyStatus;
+      if (!nextStatus) return undefined;
+      privacyMutationInFlight = true;
+      try {
+        const current = await memberAccess();
+        if (!current.email || current.email !== s.memberEmail || current.scope !== s.memberScope) return failed(s, Object.assign(new Error("signed_out"), { code: "signed_out" }));
+        const response = nextStatus === "PRIVATE" ? await leaveCommunity() : await joinCommunity();
+        const after = await memberAccess();
+        if (!after.email || after.email !== s.memberEmail || after.scope !== s.memberScope) return failed(s, Object.assign(new Error("signed_out"), { code: "signed_out" }));
+        if (response.member?.id !== s.memberId || !response.member.privacyStatus) throw new Error("The profile privacy update was not confirmed for this member.");
+        const refreshed = await getMyMember({ fieldsets: ["FULL"] }) as WixMemberResponse;
+        const afterRefresh = await memberAccess();
+        if (refreshed.member?.id !== s.memberId || !afterRefresh.email || afterRefresh.email !== s.memberEmail || afterRefresh.scope !== s.memberScope || !refreshed.member.privacyStatus) return failed(s, Object.assign(new Error("signed_out"), { code: "signed_out" }));
+        // A stale read or a rejected write leaves the OLD status in the readback: that is not a success.
+        if (refreshed.member.privacyStatus.toUpperCase() !== nextStatus) throw new Error("The profile privacy update was not confirmed by the readback.");
+        const isPrivate = refreshed.member.privacyStatus.toUpperCase() === "PRIVATE";
+        // The awaits above can outlast edits and a member change: apply the result to the CURRENT state.
+        const latest = svc.getState() as S;
+        if (latest.memberId !== s.memberId || latest.memberEmail !== s.memberEmail || latest.memberScope !== s.memberScope) return latest;
+        return { ...latest, privacyStatus: refreshed.member.privacyStatus, isPrivate, notPrivate: !isPrivate, privacyActionLabel: copyParam(isPrivate ? "accountSettings.makePublicCta" : "accountSettings.makePrivateCta", isPrivate ? "Make profile public" : "Make profile private"), privacyConfirmVisible: false, noPrivacyConfirm: true, pendingPrivacyStatus: "", privacyPrompt: "", message: copyParam("accountSettings.privacySaved", "Your profile privacy was updated."), noMessage: false };
+      } catch {
+        const latest = svc.getState() as S;
+        if (latest.memberId !== s.memberId || latest.memberEmail !== s.memberEmail || latest.memberScope !== s.memberScope) return latest;
+        return { ...latest, message: copyParam("accountSettings.privacyError", "Your privacy setting was not updated."), noMessage: false };
+      } finally { privacyMutationInFlight = false; }
+    },
+    requestPrivacyChange: (s) => {
+      if (!s.privacySupported || s.status !== "loaded") return { ...s, privacyConfirmVisible: false, noPrivacyConfirm: true, pendingPrivacyStatus: "", privacyPrompt: "" };
+      const pendingPrivacyStatus = s.isPrivate ? "PUBLIC" : "PRIVATE";
+      return { ...s, privacyConfirmVisible: true, noPrivacyConfirm: false, pendingPrivacyStatus, privacyPrompt: pendingPrivacyStatus === "PRIVATE"
+        ? copyParam("accountSettings.privacyConfirmPrivate", "Making your profile private removes you from the Wix Members Area community. Continue?")
+        : copyParam("accountSettings.privacyConfirmPublic", "Making your profile public rejoins the Wix Members Area community. Continue?") };
+    },
+    cancelPrivacyChange: (s) => ({ ...s, privacyConfirmVisible: false, noPrivacyConfirm: true, pendingPrivacyStatus: "", privacyPrompt: "" }),
+    setPasswordCurrent: (s, arg) => s.passwordCredentialSupported ? ({ ...s, passwordCurrent: rawText((arg as { value?: unknown } | undefined)?.value), passwordError: "", passwordNoError: true, passwordMessage: "", passwordNoMessage: true }) : s,
+    setPasswordNew: (s, arg) => s.passwordCredentialSupported ? ({ ...s, passwordNew: rawText((arg as { value?: unknown } | undefined)?.value), passwordError: "", passwordNoError: true, passwordMessage: "", passwordNoMessage: true }) : s,
+    setPasswordConfirm: (s, arg) => s.passwordCredentialSupported ? ({ ...s, passwordConfirm: rawText((arg as { value?: unknown } | undefined)?.value), passwordError: "", passwordNoError: true, passwordMessage: "", passwordNoMessage: true }) : s,
+    openPasswordPanel: (s) => !s.passwordCredentialSupported ? { ...clearPassword(s), passwordPanelOpen: false, emailPanelOpen: false } : ({ ...s, passwordPanelOpen: true, emailPanelOpen: false, passwordSaving: passwordMutationInFlight || passwordResetInFlight, notPasswordSaving: !(passwordMutationInFlight || passwordResetInFlight), notPasswordChanging: !passwordMutationInFlight, passwordResetSending: passwordResetInFlight, notPasswordResetSending: !passwordResetInFlight, passwordError: "", passwordNoError: true, passwordMessage: "", passwordNoMessage: true }),
+    closePasswordPanel: (s) => { passwordMutationVersion += 1; return { ...clearPassword(s), passwordPanelOpen: false, passwordSaving: false, notPasswordSaving: true, notPasswordChanging: true, passwordResetSending: false, notPasswordResetSending: true, passwordRequestVersion: passwordMutationVersion, passwordError: "", passwordNoError: true, passwordMessage: "", passwordNoMessage: true }; },
+    openEmailPanel: (s) => { passwordMutationVersion += 1; return { ...clearPassword(s), passwordPanelOpen: false, emailPanelOpen: true, passwordSaving: false, notPasswordSaving: true, notPasswordChanging: true, passwordResetSending: false, notPasswordResetSending: true, passwordRequestVersion: passwordMutationVersion, passwordError: "", passwordNoError: true, passwordMessage: "", passwordNoMessage: true }; },
+    closeEmailPanel: (s) => ({ ...clearPassword(s), emailPanelOpen: false }),
+    changePassword: (s) => {
+      if (!s.passwordCredentialSupported || passwordMutationInFlight || passwordResetInFlight || s.status !== "loaded" || !s.memberId || !s.passwordPanelOpen || s.passwordSaving) return s;
+      if (!s.passwordCurrent || !s.passwordNew || !s.passwordConfirm) return {
+        ...s, passwordError: copyParam("accountSettings.passwordRequired", "Enter your current password and choose a new password."), passwordNoError: false,
+      };
+      if (s.passwordNew !== s.passwordConfirm) return {
+        ...s, passwordError: copyParam("accountSettings.passwordMismatch", "The new passwords do not match."), passwordNoError: false,
+      };
+      passwordMutationInFlight = true;
+      const version = ++passwordMutationVersion;
+      void performPasswordChange(version, s.memberId, s.memberEmail, s.memberScope, s.passwordCurrent, s.passwordNew);
+      return { ...s, passwordSaving: true, notPasswordSaving: false, notPasswordChanging: false, passwordRequestVersion: version, passwordError: "", passwordNoError: true, passwordMessage: "", passwordNoMessage: true };
+    },
+    resolvePasswordChange: (s, arg) => {
+      const result = arg as { status?: unknown; code?: unknown; version?: unknown } | undefined;
+      if (result?.version !== passwordMutationVersion || result?.version !== s.passwordRequestVersion) return s.passwordSaving ? { ...s, passwordSaving: false, notPasswordSaving: true, notPasswordChanging: true } : s;
+      const ok = result?.status === "ok";
+      const code = clean(result?.code);
+      const message = ok
+        ? copyParam("accountSettings.passwordChanged", "Your password was changed.")
+        : code === "reauthentication_failed"
+          ? copyParam("accountSettings.passwordReauthenticationFailed", "We could not verify your current password.")
+          : code === "account_changed"
+            ? copyParam("accountSettings.passwordAccountChanged", "Your account changed. Sign in again before changing your password.")
+            : code === "unavailable"
+              ? copyParam("accountSettings.passwordUnavailable", "Password changes aren’t available in this session. Sign in again or use the website.")
+              : copyParam("accountSettings.passwordChangeFailed", "Your password was not changed. Try again.");
+      const cleanState = { ...clearPassword(s), passwordSaving: false, notPasswordSaving: true, notPasswordChanging: true, passwordError: ok ? "" : message, passwordNoError: ok, passwordMessage: ok ? message : "", passwordNoMessage: !ok };
+      return ok ? { ...cleanState, passwordPanelOpen: false } : cleanState;
+    },
+    resolvePasswordReset: (s, arg) => {
+      const result = arg as { version?: unknown; code?: unknown } | undefined;
+      if (result?.version !== passwordMutationVersion || result?.version !== s.passwordRequestVersion) return s;
+      const accountChanged = result?.code === "account_changed";
+      const ok = !result?.code;
+      const message = ok
+        ? copyParam("accountSettings.passwordResetSent", "If this login email is registered, a reset link is on its way.")
+        : accountChanged
+          ? copyParam("accountSettings.passwordAccountChanged", "Your account changed. Sign in again before changing your password.")
+          : copyParam("accountSettings.passwordResetFailed", "A reset link could not be sent. Try again.");
+      return { ...clearPassword(s), passwordSaving: false, notPasswordSaving: true, passwordResetSending: false, notPasswordResetSending: true, passwordError: ok ? "" : message, passwordNoError: ok, passwordMessage: ok ? message : "", passwordNoMessage: !ok };
+    },
+    resetPassword: (s) => {
+      if (!s.passwordCredentialSupported || passwordMutationInFlight || passwordResetInFlight || !s.loginEmail || s.status !== "loaded" || !s.passwordPanelOpen || s.passwordSaving) return s;
+      passwordResetInFlight = true;
+      const version = ++passwordMutationVersion;
+      void performPasswordReset(version, s.memberId, s.memberEmail, s.memberScope);
+      return { ...s, passwordSaving: true, notPasswordSaving: false, notPasswordChanging: true, passwordResetSending: true, notPasswordResetSending: false, passwordRequestVersion: version, passwordError: "", passwordNoError: true, passwordMessage: "", passwordNoMessage: true };
+    },
+    openSite: async (s): Promise<S | undefined> => {
+      // A missing, malformed or placeholder configured site has no website handoff.
+      if (!siteHandoffAvailable(s.siteUrl)) return s;
+      try { await openUrl(s.siteUrl, "in_app_browser"); } catch { /* the handoff is best-effort */ }
+      return s;
+    },
+  },
+});
+
+svc.load();
+export { svc };