MEMBERS-DIRECTORY-001O — Preserve visibility-toggle focus after authoritative settlement

[daliu]

Closes #647

Officer impact: No live officer workflow changes. In the preserved future My Account interface, a keyboard or screen-reader user who changes the officer-finder checkbox can return to that same checkbox after the current save and authoritative readback settle, instead of being stranded when native pending disablement evicts focus. Any other connected control deliberately focused while the request is pending keeps focus. The connected interface remains unavailable on production.

Officer documentation: SYSTEM_DESIGN.md, IMPLEMENTATION_PLAN.md, SECURITY.md, and docs/officers/EVENTS_SHOP_MEMBERS.md (one current-source boundary/ledger addition and one no-terminal source-evidence procedure; Mermaid unchanged).

Deployment evidence: Source and synthetic tests only. The exact six-file candidate is commit c930dcd88aa46d654305cc9aec1ad743fe4fa95f, tree f5f598aab4efb8a4ad7d8668be2ad2e4b6a9ad7f, with binary diff SHA-256 1d06e5f300c3e5362009881d6bfd28dce0e029cee510ec93f8eee283244ce961. Node 20 verification passed: named tests 21/21, full profile 152/152, full frontend 1,237/1,237, TypeScript, scoped lint, lint baseline, repository Node tests 105/105, diagnostic build, and diff-check. Exact-head CI run 31763516255 passed all five jobs. Netlify deploy preview 6a7e7bd690347c0008f4aac7 is ready on the exact head, remains unpublished, passed header and redirect checks, changed no Pages-owned files, and deployed no Netlify or Edge Functions. memberDirectoryAvailability.ts remains literal false; no website, Firebase, provider, account/sign-in, production-data, or connected-live action is authorized or claimed. Live #623 remains inert, and #507 retains all connection and release gates.

Outcome

• records only the mounted lifetime and exact visibility operation after request-ID creation, admitted pending state, and exact focused checkbox;
• transfers only after confirmed success or definitive rejection plus a current successful authoritative read;
• consumes once, targets only the same connected and enabled checkbox, and leaves already-retained focus alone;
• restores only otherwise-lost body/document-root/absent/disconnected focus;
• preserves every other connected focus deliberately selected during mutation or readback;
• consumes a returned disabled/name-ineligible result without delayed focus;
• keeps unknown/readback failures on existing Reload recovery and fences stale application, account, unmount, mutation, and readback completions;
• adds no request, read, mutation, retry, payload, revision, photo byte, data URL, logging, provider, or data action.

Trustworthy unchanged-runtime RED was 5 failed exact restoration cases with 14 containment controls already passing. Final independent focus/race, security/privacy, frontend/accessibility, and backup-officer reviews all returned GO. #637 Reload recovery, #643 rejected-removal focus, #645 confirmed-photo focus, native checkbox markup, error association, confirmations, and exact service behavior are preserved.

[netlify]

✅ Deploy Preview for luminous-fox-7c393f ready!

Name	Link
🔨 Latest commit	c930dcd
🔍 Latest deploy log	https://app.netlify.com/projects/luminous-fox-7c393f/deploys/6a7e7bd690347c0008f4aac7
😎 Deploy Preview	https://deploy-preview-648--luminous-fox-7c393f.netlify.app
📱 Preview on mobile	Toggle QR Code... Use your smartphone camera to open QR code link.
🤖 Make changes	Run an agent on this branch

---

To edit notification comments on pull requests, go to your Netlify project configuration.