@shopify/hydrogen-react 2026.4.3 → 2026.4.5

package/dist/node-dev/load-script.mjs

@@ -8,6 +8,10 @@ function loadScript(src, options) {
 		const script = document.createElement("script");
 		if (options?.module) script.type = "module";
 		else script.type = "text/javascript";
+		const attributes = options?.attributes;
+		if (attributes) Object.keys(attributes).forEach((key) => {
+			script.setAttribute(key, attributes[key]);
+		});
 		script.src = src;
 		script.onload = () => {
 			resolve(true);
@@ -17,10 +21,6 @@ function loadScript(src, options) {
 		};
 		if (options?.in === "head") document.head.appendChild(script);
 		else document.body.appendChild(script);
-		const attributes = options?.attributes;
-		if (attributes) Object.keys(attributes).forEach((key) => {
-			script.setAttribute(key, attributes[key]);
-		});
 	});
 	SCRIPTS_LOADED[src] = promise;
 	return promise;
@@ -37,6 +37,6 @@ function useLoadScript(url, options) {
 	return status;
 }
 //#endregion
-export { useLoadScript };
+export { loadScript, useLoadScript };
 
 //# sourceMappingURL=load-script.mjs.map

package/dist/node-dev/load-script.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"load-script.mjs","names":[],"sources":["../../src/load-script.tsx"],"sourcesContent":["import {useState, useEffect} from 'react';\n\nconst SCRIPTS_LOADED: Record<string, Promise<boolean>> = {};\n\ntype LoadScriptOptions = {\n  module?: boolean;\n  in?: 'head' | 'body';\n  attributes?: Record<string, string>;\n};\n\nexport function loadScript(\n  src: string,\n  options?: LoadScriptOptions,\n): Promise<boolean> {\n  const isScriptLoaded = SCRIPTS_LOADED[src];\n\n  // eslint-disable-next-line @typescript-eslint/no-misused-promises\n  if (isScriptLoaded) {\n    return isScriptLoaded;\n  }\n\n  const promise = new Promise<boolean>((resolve, reject) => {\n    const script = document.createElement('script');\n    if (options?.module) {\n      script.type = 'module';\n    } else {\n      script.type = 'text/javascript';\n    }\n    script.src = src;\n    script.onload = (): void => {\n      resolve(true);\n    };\n    script.onerror = (): void => {\n      reject(false);\n    };\n    if (options?.in === 'head') {\n      document.head.appendChild(script);\n    } else {\n      document.body.appendChild(script);\n    }\n\n    const attributes = options?.attributes;\n    if (attributes) {\n      Object.keys(attributes).forEach((key) => {\n        script.setAttribute(key, attributes[key]);\n      });\n    }\n  });\n\n  SCRIPTS_LOADED[src] = promise;\n\n  return promise;\n}\n\n/** @publicDocs */\nexport type LoadScriptParams = Parameters<typeof loadScript>;\n\n/**\n * The `useLoadScript` hook loads an external script tag in the browser. It allows React components to lazy-load large third-party dependencies.\n * @publicDocs\n */\nexport function useLoadScript(\n  url: LoadScriptParams[0],\n  options?: LoadScriptParams[1],\n): ScriptState {\n  const [status, setStatus] = useState<ScriptState>('loading');\n\n  useEffect(\n    () => {\n      loadScript(url, options)\n        .then(() => setStatus('done'))\n        .catch(() => setStatus('error'));\n    },\n    // Ignore options changes since it won't trigger a new load.\n    // eslint-disable-next-line react-hooks/exhaustive-deps\n    [url],\n  );\n\n  return status;\n}\n\ntype ScriptState = 'loading' | 'done' | 'error';\n"],"mappings":";;AAEA,IAAM,iBAAmD,EAAE;AAQ3D,SAAgB,WACd,KACA,SACkB;CAClB,MAAM,iBAAiB,eAAe;AAGtC,KAAI,eACF,QAAO;CAGT,MAAM,UAAU,IAAI,SAAkB,SAAS,WAAW;EACxD,MAAM,SAAS,SAAS,cAAc,SAAS;AAC/C,MAAI,SAAS,OACX,QAAO,OAAO;MAEd,QAAO,OAAO;AAEhB,SAAO,MAAM;AACb,SAAO,eAAqB;AAC1B,WAAQ,KAAK;;AAEf,SAAO,gBAAsB;AAC3B,UAAO,MAAM;;AAEf,MAAI,SAAS,OAAO,OAClB,UAAS,KAAK,YAAY,OAAO;MAEjC,UAAS,KAAK,YAAY,OAAO;EAGnC,MAAM,aAAa,SAAS;AAC5B,MAAI,WACF,QAAO,KAAK,WAAW,CAAC,SAAS,QAAQ;AACvC,UAAO,aAAa,KAAK,WAAW,KAAK;IACzC;GAEJ;AAEF,gBAAe,OAAO;AAEtB,QAAO;;;;;;AAUT,SAAgB,cACd,KACA,SACa;CACb,MAAM,CAAC,QAAQ,aAAa,SAAsB,UAAU;AAE5D,iBACQ;AACJ,aAAW,KAAK,QAAQ,CACrB,WAAW,UAAU,OAAO,CAAC,CAC7B,YAAY,UAAU,QAAQ,CAAC;IAIpC,CAAC,IAAI,CACN;AAED,QAAO"}
+{"version":3,"file":"load-script.mjs","names":[],"sources":["../../src/load-script.tsx"],"sourcesContent":["import {useState, useEffect} from 'react';\n\nconst SCRIPTS_LOADED: Record<string, Promise<boolean>> = {};\n\ntype LoadScriptOptions = {\n  module?: boolean;\n  in?: 'head' | 'body';\n  attributes?: Record<string, string>;\n};\n\nexport function loadScript(\n  src: string,\n  options?: LoadScriptOptions,\n): Promise<boolean> {\n  const isScriptLoaded = SCRIPTS_LOADED[src];\n\n  // eslint-disable-next-line @typescript-eslint/no-misused-promises\n  if (isScriptLoaded) {\n    return isScriptLoaded;\n  }\n\n  const promise = new Promise<boolean>((resolve, reject) => {\n    const script = document.createElement('script');\n    if (options?.module) {\n      script.type = 'module';\n    } else {\n      script.type = 'text/javascript';\n    }\n    const attributes = options?.attributes;\n    if (attributes) {\n      Object.keys(attributes).forEach((key) => {\n        script.setAttribute(key, attributes[key]);\n      });\n    }\n\n    script.src = src;\n    script.onload = (): void => {\n      resolve(true);\n    };\n    script.onerror = (): void => {\n      reject(false);\n    };\n    if (options?.in === 'head') {\n      document.head.appendChild(script);\n    } else {\n      document.body.appendChild(script);\n    }\n  });\n\n  SCRIPTS_LOADED[src] = promise;\n\n  return promise;\n}\n\n/** @publicDocs */\nexport type LoadScriptParams = Parameters<typeof loadScript>;\n\n/**\n * The `useLoadScript` hook loads an external script tag in the browser. It allows React components to lazy-load large third-party dependencies.\n * @publicDocs\n */\nexport function useLoadScript(\n  url: LoadScriptParams[0],\n  options?: LoadScriptParams[1],\n): ScriptState {\n  const [status, setStatus] = useState<ScriptState>('loading');\n\n  useEffect(\n    () => {\n      loadScript(url, options)\n        .then(() => setStatus('done'))\n        .catch(() => setStatus('error'));\n    },\n    // Ignore options changes since it won't trigger a new load.\n    // eslint-disable-next-line react-hooks/exhaustive-deps\n    [url],\n  );\n\n  return status;\n}\n\ntype ScriptState = 'loading' | 'done' | 'error';\n"],"mappings":";;AAEA,IAAM,iBAAmD,EAAE;AAQ3D,SAAgB,WACd,KACA,SACkB;CAClB,MAAM,iBAAiB,eAAe;AAGtC,KAAI,eACF,QAAO;CAGT,MAAM,UAAU,IAAI,SAAkB,SAAS,WAAW;EACxD,MAAM,SAAS,SAAS,cAAc,SAAS;AAC/C,MAAI,SAAS,OACX,QAAO,OAAO;MAEd,QAAO,OAAO;EAEhB,MAAM,aAAa,SAAS;AAC5B,MAAI,WACF,QAAO,KAAK,WAAW,CAAC,SAAS,QAAQ;AACvC,UAAO,aAAa,KAAK,WAAW,KAAK;IACzC;AAGJ,SAAO,MAAM;AACb,SAAO,eAAqB;AAC1B,WAAQ,KAAK;;AAEf,SAAO,gBAAsB;AAC3B,UAAO,MAAM;;AAEf,MAAI,SAAS,OAAO,OAClB,UAAS,KAAK,YAAY,OAAO;MAEjC,UAAS,KAAK,YAAY,OAAO;GAEnC;AAEF,gBAAe,OAAO;AAEtB,QAAO;;;;;;AAUT,SAAgB,cACd,KACA,SACa;CACb,MAAM,CAAC,QAAQ,aAAa,SAAsB,UAAU;AAE5D,iBACQ;AACJ,aAAW,KAAK,QAAQ,CACrB,WAAW,UAAU,OAAO,CAAC,CAC7B,YAAY,UAAU,QAAQ,CAAC;IAIpC,CAAC,IAAI,CACN;AAED,QAAO"}

package/dist/node-dev/packages/hydrogen-react/package.js

@@ -1,5 +1,5 @@
 //#region package.json
-var version = "2026.4.3";
+var version = "2026.4.5";
 //#endregion
 exports.version = version;
 

package/dist/node-dev/packages/hydrogen-react/package.js.map

@@ -1 +1 @@
-{"version":3,"file":"package.js","names":[],"sources":["../../../../package.json"],"sourcesContent":["{\n  \"name\": \"@shopify/hydrogen-react\",\n  \"version\": \"2026.4.3\",\n  \"description\": \"React components, hooks, and utilities for creating custom Shopify storefronts\",\n  \"homepage\": \"https://github.com/Shopify/hydrogen/tree/main/packages/hydrogen-react\",\n  \"license\": \"MIT\",\n  \"publishConfig\": {\n    \"access\": \"public\",\n    \"@shopify:registry\": \"https://registry.npmjs.org\"\n  },\n  \"files\": [\n    \"dist\",\n    \"storefront.schema.json\",\n    \"customer-account.schema.json\"\n  ],\n  \"type\": \"commonjs\",\n  \"exports\": {\n    \".\": {\n      \"node\": {\n        \"require\": {\n          \"types\": \"./dist/types/index.d.cts\",\n          \"development\": \"./dist/node-dev/index.js\",\n          \"default\": \"./dist/node-prod/index.js\"\n        },\n        \"import\": {\n          \"types\": \"./dist/types/index.d.ts\",\n          \"development\": \"./dist/node-dev/index.mjs\",\n          \"default\": \"./dist/node-prod/index.mjs\"\n        },\n        \"default\": \"./dist/node-prod/index.js\"\n      },\n      \"module\": {\n        \"types\": \"./dist/types/index.d.ts\",\n        \"development\": \"./dist/browser-dev/index.mjs\",\n        \"default\": \"./dist/browser-prod/index.mjs\"\n      },\n      \"import\": {\n        \"types\": \"./dist/types/index.d.ts\",\n        \"development\": \"./dist/browser-dev/index.mjs\",\n        \"default\": \"./dist/browser-prod/index.mjs\"\n      },\n      \"require\": {\n        \"types\": \"./dist/types/index.d.cts\",\n        \"development\": \"./dist/node-dev/index.js\",\n        \"default\": \"./dist/node-prod/index.js\"\n      },\n      \"default\": \"./dist/browser-prod/index.mjs\"\n    },\n    \"./storefront-api-types\": \"./dist/types/storefront-api-types.d.ts\",\n    \"./storefront.schema.json\": \"./storefront.schema.json\",\n    \"./customer-account.schema.json\": \"./customer-account.schema.json\",\n    \"./customer-account-api-types\": \"./dist/types/customer-account-api-types.d.ts\",\n    \"./package.json\": \"./package.json\",\n    \"./*\": {\n      \"node\": {\n        \"require\": {\n          \"types\": \"./dist/types/*.d.cts\",\n          \"development\": \"./dist/node-dev/*.js\",\n          \"default\": \"./dist/node-prod/*.js\"\n        },\n        \"import\": {\n          \"types\": \"./dist/types/*.d.ts\",\n          \"development\": \"./dist/node-dev/*.mjs\",\n          \"default\": \"./dist/node-prod/*.mjs\"\n        },\n        \"default\": \"./dist/node-prod/*.js\"\n      },\n      \"module\": {\n        \"types\": \"./dist/types/*.d.ts\",\n        \"development\": \"./dist/browser-dev/*.mjs\",\n        \"default\": \"./dist/browser-prod/*.mjs\"\n      },\n      \"import\": {\n        \"types\": \"./dist/types/*.d.ts\",\n        \"development\": \"./dist/browser-dev/*.mjs\",\n        \"default\": \"./dist/browser-prod/*.mjs\"\n      },\n      \"require\": {\n        \"types\": \"./dist/types/*.d.cts\",\n        \"development\": \"./dist/node-dev/*.js\",\n        \"default\": \"./dist/node-prod/*.js\"\n      },\n      \"default\": \"./dist/browser-prod/*.mjs\"\n    }\n  },\n  \"typesVersions\": {\n    \"*\": {\n      \"storefront-api-types\": [\n        \"./dist/types/storefront-api-types.d.ts\"\n      ]\n    }\n  },\n  \"main\": \"./dist/node-prod/index.js\",\n  \"module\": \"./dist/node-prod/index.mjs\",\n  \"browser\": \"./dist/browser-prod/index.mjs\",\n  \"types\": \"./dist/types/index.d.ts\",\n  \"unpkg\": \"./dist/umd/hydrogen-react.prod.js\",\n  \"jsdelivr\": \"./dist/umd/hydrogen-react.prod.js\",\n  \"sideEffects\": false,\n  \"scripts\": {\n    \"build-docs\": \"sh ./docs/build-docs.sh && pnpm run format\",\n    \"clean-dist\": \"rimraf ./dist\",\n    \"dev\": \"run-s dev:demo\",\n    \"dev:story\": \"ladle serve\",\n    \"dev:demo\": \"run-p dev:demo:* copy-api-types\",\n    \"dev:demo:browser-dev\": \"vite build --watch --emptyOutDir false --clearScreen false --mode devbuild\",\n    \"dev:demo:ts\": \"tsc --watch --emitDeclarationOnly\",\n    \"build\": \"npm-run-all --sequential clean-dist --parallel build:vite:* build:tsc:es --parallel build:tsc:cjs copy-api-types\",\n    \"build:vite:browser-dev\": \"vite build --mode devbuild\",\n    \"build:vite:browser-prod\": \"vite build\",\n    \"build:vite:node-dev\": \"vite build --mode devbuild --ssr\",\n    \"build:vite:node-prod\": \"vite build --ssr\",\n    \"build:vite:umddev\": \"vite build --mode umdbuilddev\",\n    \"build:vite:umdprod\": \"vite build --mode umdbuild\",\n    \"build:tsc:cjs\": \"cpy ./dist/types/index.d.ts ./dist/types/ --rename=index.d.cts --flat\",\n    \"build:tsc:es\": \"tsc --emitDeclarationOnly --project tsconfig.typeoutput.json\",\n    \"copy-api-types\": \"cpy ./src/storefront-api-types.d.ts ./src/customer-account-api-types.d.ts ./dist/types/ --flat\",\n    \"format\": \"prettier --write \\\"{src,docs}/**/*\\\" --ignore-unknown\",\n    \"graphql-types\": \"graphql-codegen --config codegen.ts && pnpm run format\",\n    \"test\": \"vitest run --coverage\",\n    \"test:watch\": \"vitest\",\n    \"typecheck\": \"run-p typecheck:*\",\n    \"typecheck:code\": \"tsc --noEmit\",\n    \"typecheck:examples\": \"tsc --noEmit --project tsconfig.examples.json\",\n    \"preview-docs\": \"pnpm --dir ../../docs/preview run dev\"\n  },\n  \"devDependencies\": {\n    \"@faker-js/faker\": \"^9.4.0\",\n    \"@graphql-codegen/add\": \"^5.0.3\",\n    \"@graphql-codegen/cli\": \"^5.0.4\",\n    \"@graphql-codegen/introspection\": \"^4.0.3\",\n    \"@graphql-codegen/typescript\": \"^4.1.3\",\n    \"@ladle/react\": \"^5.0.1\",\n    \"@shopify/generate-docs\": \"catalog:\",\n    \"@testing-library/jest-dom\": \"^6.6.3\",\n    \"@testing-library/react\": \"^14.0.0\",\n    \"@testing-library/user-event\": \"^14.6.1\",\n    \"@types/react\": \"catalog:\",\n    \"@types/react-dom\": \"catalog:\",\n    \"@vitejs/plugin-react\": \"^6.0.1\",\n    \"@vitest/coverage-v8\": \"^3.2.4\",\n    \"cpy-cli\": \"^5.0.0\",\n    \"eslint\": \"9.19.0\",\n    \"eslint-config-prettier\": \"10.0.1\",\n    \"eslint-import-resolver-typescript\": \"3.7.0\",\n    \"eslint-plugin-eslint-comments\": \"3.2.0\",\n    \"eslint-plugin-import\": \"2.31.0\",\n    \"eslint-plugin-jest\": \"28.11.0\",\n    \"eslint-plugin-jsx-a11y\": \"6.10.2\",\n    \"eslint-plugin-node\": \"11.1.0\",\n    \"eslint-plugin-prettier\": \"4.2.1\",\n    \"eslint-plugin-react\": \"7.37.4\",\n    \"eslint-plugin-react-hooks\": \"5.1.0\",\n    \"eslint-plugin-simple-import-sort\": \"12.1.1\",\n    \"eslint-plugin-tsdoc\": \"0.2.14\",\n    \"happy-dom\": \"^20.8.9\",\n    \"npm-run-all\": \"^4.1.5\",\n    \"react\": \"catalog:\",\n    \"react-dom\": \"catalog:\",\n    \"rimraf\": \"^6.0.1\",\n    \"ts-expect\": \"^1.3.0\",\n    \"typescript\": \"5.9.2\",\n    \"vite\": \"^8.0.1\",\n    \"vitest\": \"^3.2.4\"\n  },\n  \"peerDependencies\": {\n    \"react\": \"^18.3.1 || ~19.0.3 || ~19.1.4 || ^19.2.3\",\n    \"react-dom\": \"^18.3.1 || ~19.0.3 || ~19.1.4 || ^19.2.3\",\n    \"vite\": \"^5.1.0 || ^6.2.1 || ^7.0.0 || ^8.0.0\"\n  },\n  \"dependencies\": {\n    \"@google/model-viewer\": \"^4.0.0\",\n    \"@xstate/fsm\": \"2.0.0\",\n    \"ast-v8-to-istanbul\": \"^0.3.11\",\n    \"graphql\": \"^16.10.0\",\n    \"type-fest\": \"^4.33.0\",\n    \"worktop\": \"^0.7.3\"\n  },\n  \"repository\": {\n    \"type\": \"git\",\n    \"url\": \"https://github.com/Shopify/hydrogen.git\",\n    \"directory\": \"packages/hydrogen-react\"\n  },\n  \"bugs\": \"https://github.com/shopify/hydrogen/issues\"\n}\n"],"mappings":""}
+{"version":3,"file":"package.js","names":[],"sources":["../../../../package.json"],"sourcesContent":["{\n  \"name\": \"@shopify/hydrogen-react\",\n  \"version\": \"2026.4.5\",\n  \"description\": \"React components, hooks, and utilities for creating custom Shopify storefronts\",\n  \"homepage\": \"https://github.com/Shopify/hydrogen/tree/main/packages/hydrogen-react\",\n  \"license\": \"MIT\",\n  \"publishConfig\": {\n    \"access\": \"public\",\n    \"@shopify:registry\": \"https://registry.npmjs.org\"\n  },\n  \"files\": [\n    \"dist\",\n    \"storefront.schema.json\",\n    \"customer-account.schema.json\"\n  ],\n  \"type\": \"commonjs\",\n  \"exports\": {\n    \".\": {\n      \"node\": {\n        \"require\": {\n          \"types\": \"./dist/types/index.d.cts\",\n          \"development\": \"./dist/node-dev/index.js\",\n          \"default\": \"./dist/node-prod/index.js\"\n        },\n        \"import\": {\n          \"types\": \"./dist/types/index.d.ts\",\n          \"development\": \"./dist/node-dev/index.mjs\",\n          \"default\": \"./dist/node-prod/index.mjs\"\n        },\n        \"default\": \"./dist/node-prod/index.js\"\n      },\n      \"module\": {\n        \"types\": \"./dist/types/index.d.ts\",\n        \"development\": \"./dist/browser-dev/index.mjs\",\n        \"default\": \"./dist/browser-prod/index.mjs\"\n      },\n      \"import\": {\n        \"types\": \"./dist/types/index.d.ts\",\n        \"development\": \"./dist/browser-dev/index.mjs\",\n        \"default\": \"./dist/browser-prod/index.mjs\"\n      },\n      \"require\": {\n        \"types\": \"./dist/types/index.d.cts\",\n        \"development\": \"./dist/node-dev/index.js\",\n        \"default\": \"./dist/node-prod/index.js\"\n      },\n      \"default\": \"./dist/browser-prod/index.mjs\"\n    },\n    \"./storefront-api-types\": \"./dist/types/storefront-api-types.d.ts\",\n    \"./storefront.schema.json\": \"./storefront.schema.json\",\n    \"./customer-account.schema.json\": \"./customer-account.schema.json\",\n    \"./customer-account-api-types\": \"./dist/types/customer-account-api-types.d.ts\",\n    \"./package.json\": \"./package.json\",\n    \"./*\": {\n      \"node\": {\n        \"require\": {\n          \"types\": \"./dist/types/*.d.cts\",\n          \"development\": \"./dist/node-dev/*.js\",\n          \"default\": \"./dist/node-prod/*.js\"\n        },\n        \"import\": {\n          \"types\": \"./dist/types/*.d.ts\",\n          \"development\": \"./dist/node-dev/*.mjs\",\n          \"default\": \"./dist/node-prod/*.mjs\"\n        },\n        \"default\": \"./dist/node-prod/*.js\"\n      },\n      \"module\": {\n        \"types\": \"./dist/types/*.d.ts\",\n        \"development\": \"./dist/browser-dev/*.mjs\",\n        \"default\": \"./dist/browser-prod/*.mjs\"\n      },\n      \"import\": {\n        \"types\": \"./dist/types/*.d.ts\",\n        \"development\": \"./dist/browser-dev/*.mjs\",\n        \"default\": \"./dist/browser-prod/*.mjs\"\n      },\n      \"require\": {\n        \"types\": \"./dist/types/*.d.cts\",\n        \"development\": \"./dist/node-dev/*.js\",\n        \"default\": \"./dist/node-prod/*.js\"\n      },\n      \"default\": \"./dist/browser-prod/*.mjs\"\n    }\n  },\n  \"typesVersions\": {\n    \"*\": {\n      \"storefront-api-types\": [\n        \"./dist/types/storefront-api-types.d.ts\"\n      ]\n    }\n  },\n  \"main\": \"./dist/node-prod/index.js\",\n  \"module\": \"./dist/node-prod/index.mjs\",\n  \"browser\": \"./dist/browser-prod/index.mjs\",\n  \"types\": \"./dist/types/index.d.ts\",\n  \"unpkg\": \"./dist/umd/hydrogen-react.prod.js\",\n  \"jsdelivr\": \"./dist/umd/hydrogen-react.prod.js\",\n  \"sideEffects\": false,\n  \"scripts\": {\n    \"build-docs\": \"sh ./docs/build-docs.sh && pnpm run format\",\n    \"clean-dist\": \"rimraf ./dist\",\n    \"dev\": \"run-s dev:demo\",\n    \"dev:story\": \"ladle serve\",\n    \"dev:demo\": \"run-p dev:demo:* copy-api-types\",\n    \"dev:demo:browser-dev\": \"vite build --watch --emptyOutDir false --clearScreen false --mode devbuild\",\n    \"dev:demo:ts\": \"tsc --watch --emitDeclarationOnly\",\n    \"build\": \"npm-run-all --sequential clean-dist --parallel build:vite:* build:tsc:es --parallel build:tsc:cjs copy-api-types\",\n    \"build:vite:browser-dev\": \"vite build --mode devbuild\",\n    \"build:vite:browser-prod\": \"vite build\",\n    \"build:vite:node-dev\": \"vite build --mode devbuild --ssr\",\n    \"build:vite:node-prod\": \"vite build --ssr\",\n    \"build:vite:umddev\": \"vite build --mode umdbuilddev\",\n    \"build:vite:umdprod\": \"vite build --mode umdbuild\",\n    \"build:tsc:cjs\": \"cpy ./dist/types/index.d.ts ./dist/types/ --rename=index.d.cts --flat\",\n    \"build:tsc:es\": \"tsc --emitDeclarationOnly --project tsconfig.typeoutput.json\",\n    \"copy-api-types\": \"cpy ./src/storefront-api-types.d.ts ./src/customer-account-api-types.d.ts ./dist/types/ --flat\",\n    \"format\": \"prettier --write \\\"{src,docs}/**/*\\\" --ignore-unknown\",\n    \"graphql-types\": \"graphql-codegen --config codegen.ts && pnpm run format\",\n    \"test\": \"vitest run --coverage\",\n    \"test:watch\": \"vitest\",\n    \"typecheck\": \"run-p typecheck:*\",\n    \"typecheck:code\": \"tsc --noEmit\",\n    \"typecheck:examples\": \"tsc --noEmit --project tsconfig.examples.json\",\n    \"preview-docs\": \"pnpm --dir ../../docs/preview run dev\"\n  },\n  \"devDependencies\": {\n    \"@faker-js/faker\": \"^9.4.0\",\n    \"@graphql-codegen/add\": \"^5.0.3\",\n    \"@graphql-codegen/cli\": \"^5.0.4\",\n    \"@graphql-codegen/introspection\": \"^4.0.3\",\n    \"@graphql-codegen/typescript\": \"^4.1.3\",\n    \"@ladle/react\": \"^5.0.1\",\n    \"@shopify/generate-docs\": \"catalog:\",\n    \"@testing-library/jest-dom\": \"^6.6.3\",\n    \"@testing-library/react\": \"^14.0.0\",\n    \"@testing-library/user-event\": \"^14.6.1\",\n    \"@types/react\": \"catalog:\",\n    \"@types/react-dom\": \"catalog:\",\n    \"@vitejs/plugin-react\": \"^6.0.1\",\n    \"@vitest/coverage-v8\": \"^3.2.4\",\n    \"cpy-cli\": \"^5.0.0\",\n    \"eslint\": \"9.19.0\",\n    \"eslint-config-prettier\": \"10.0.1\",\n    \"eslint-import-resolver-typescript\": \"3.7.0\",\n    \"eslint-plugin-eslint-comments\": \"3.2.0\",\n    \"eslint-plugin-import\": \"2.31.0\",\n    \"eslint-plugin-jest\": \"28.11.0\",\n    \"eslint-plugin-jsx-a11y\": \"6.10.2\",\n    \"eslint-plugin-node\": \"11.1.0\",\n    \"eslint-plugin-prettier\": \"4.2.1\",\n    \"eslint-plugin-react\": \"7.37.4\",\n    \"eslint-plugin-react-hooks\": \"5.1.0\",\n    \"eslint-plugin-simple-import-sort\": \"12.1.1\",\n    \"eslint-plugin-tsdoc\": \"0.2.14\",\n    \"happy-dom\": \"^20.8.9\",\n    \"npm-run-all\": \"^4.1.5\",\n    \"react\": \"catalog:\",\n    \"react-dom\": \"catalog:\",\n    \"rimraf\": \"^6.0.1\",\n    \"ts-expect\": \"^1.3.0\",\n    \"typescript\": \"5.9.2\",\n    \"vite\": \"^8.0.1\",\n    \"vitest\": \"^3.2.4\"\n  },\n  \"peerDependencies\": {\n    \"react\": \"^18.3.1 || ~19.0.3 || ~19.1.4 || ^19.2.3\",\n    \"react-dom\": \"^18.3.1 || ~19.0.3 || ~19.1.4 || ^19.2.3\",\n    \"vite\": \"^5.1.0 || ^6.2.1 || ^7.0.0 || ^8.0.0\"\n  },\n  \"dependencies\": {\n    \"@google/model-viewer\": \"^4.0.0\",\n    \"@xstate/fsm\": \"2.0.0\",\n    \"ast-v8-to-istanbul\": \"^0.3.11\",\n    \"graphql\": \"^16.10.0\",\n    \"type-fest\": \"^4.33.0\",\n    \"worktop\": \"^0.7.3\"\n  },\n  \"repository\": {\n    \"type\": \"git\",\n    \"url\": \"https://github.com/Shopify/hydrogen.git\",\n    \"directory\": \"packages/hydrogen-react\"\n  },\n  \"bugs\": \"https://github.com/shopify/hydrogen/issues\"\n}\n"],"mappings":""}

package/dist/node-dev/packages/hydrogen-react/package.mjs

@@ -1,5 +1,5 @@
 //#region package.json
-var version = "2026.4.3";
+var version = "2026.4.5";
 //#endregion
 export { version };
 

package/dist/node-dev/packages/hydrogen-react/package.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"package.mjs","names":[],"sources":["../../../../package.json"],"sourcesContent":["{\n  \"name\": \"@shopify/hydrogen-react\",\n  \"version\": \"2026.4.3\",\n  \"description\": \"React components, hooks, and utilities for creating custom Shopify storefronts\",\n  \"homepage\": \"https://github.com/Shopify/hydrogen/tree/main/packages/hydrogen-react\",\n  \"license\": \"MIT\",\n  \"publishConfig\": {\n    \"access\": \"public\",\n    \"@shopify:registry\": \"https://registry.npmjs.org\"\n  },\n  \"files\": [\n    \"dist\",\n    \"storefront.schema.json\",\n    \"customer-account.schema.json\"\n  ],\n  \"type\": \"commonjs\",\n  \"exports\": {\n    \".\": {\n      \"node\": {\n        \"require\": {\n          \"types\": \"./dist/types/index.d.cts\",\n          \"development\": \"./dist/node-dev/index.js\",\n          \"default\": \"./dist/node-prod/index.js\"\n        },\n        \"import\": {\n          \"types\": \"./dist/types/index.d.ts\",\n          \"development\": \"./dist/node-dev/index.mjs\",\n          \"default\": \"./dist/node-prod/index.mjs\"\n        },\n        \"default\": \"./dist/node-prod/index.js\"\n      },\n      \"module\": {\n        \"types\": \"./dist/types/index.d.ts\",\n        \"development\": \"./dist/browser-dev/index.mjs\",\n        \"default\": \"./dist/browser-prod/index.mjs\"\n      },\n      \"import\": {\n        \"types\": \"./dist/types/index.d.ts\",\n        \"development\": \"./dist/browser-dev/index.mjs\",\n        \"default\": \"./dist/browser-prod/index.mjs\"\n      },\n      \"require\": {\n        \"types\": \"./dist/types/index.d.cts\",\n        \"development\": \"./dist/node-dev/index.js\",\n        \"default\": \"./dist/node-prod/index.js\"\n      },\n      \"default\": \"./dist/browser-prod/index.mjs\"\n    },\n    \"./storefront-api-types\": \"./dist/types/storefront-api-types.d.ts\",\n    \"./storefront.schema.json\": \"./storefront.schema.json\",\n    \"./customer-account.schema.json\": \"./customer-account.schema.json\",\n    \"./customer-account-api-types\": \"./dist/types/customer-account-api-types.d.ts\",\n    \"./package.json\": \"./package.json\",\n    \"./*\": {\n      \"node\": {\n        \"require\": {\n          \"types\": \"./dist/types/*.d.cts\",\n          \"development\": \"./dist/node-dev/*.js\",\n          \"default\": \"./dist/node-prod/*.js\"\n        },\n        \"import\": {\n          \"types\": \"./dist/types/*.d.ts\",\n          \"development\": \"./dist/node-dev/*.mjs\",\n          \"default\": \"./dist/node-prod/*.mjs\"\n        },\n        \"default\": \"./dist/node-prod/*.js\"\n      },\n      \"module\": {\n        \"types\": \"./dist/types/*.d.ts\",\n        \"development\": \"./dist/browser-dev/*.mjs\",\n        \"default\": \"./dist/browser-prod/*.mjs\"\n      },\n      \"import\": {\n        \"types\": \"./dist/types/*.d.ts\",\n        \"development\": \"./dist/browser-dev/*.mjs\",\n        \"default\": \"./dist/browser-prod/*.mjs\"\n      },\n      \"require\": {\n        \"types\": \"./dist/types/*.d.cts\",\n        \"development\": \"./dist/node-dev/*.js\",\n        \"default\": \"./dist/node-prod/*.js\"\n      },\n      \"default\": \"./dist/browser-prod/*.mjs\"\n    }\n  },\n  \"typesVersions\": {\n    \"*\": {\n      \"storefront-api-types\": [\n        \"./dist/types/storefront-api-types.d.ts\"\n      ]\n    }\n  },\n  \"main\": \"./dist/node-prod/index.js\",\n  \"module\": \"./dist/node-prod/index.mjs\",\n  \"browser\": \"./dist/browser-prod/index.mjs\",\n  \"types\": \"./dist/types/index.d.ts\",\n  \"unpkg\": \"./dist/umd/hydrogen-react.prod.js\",\n  \"jsdelivr\": \"./dist/umd/hydrogen-react.prod.js\",\n  \"sideEffects\": false,\n  \"scripts\": {\n    \"build-docs\": \"sh ./docs/build-docs.sh && pnpm run format\",\n    \"clean-dist\": \"rimraf ./dist\",\n    \"dev\": \"run-s dev:demo\",\n    \"dev:story\": \"ladle serve\",\n    \"dev:demo\": \"run-p dev:demo:* copy-api-types\",\n    \"dev:demo:browser-dev\": \"vite build --watch --emptyOutDir false --clearScreen false --mode devbuild\",\n    \"dev:demo:ts\": \"tsc --watch --emitDeclarationOnly\",\n    \"build\": \"npm-run-all --sequential clean-dist --parallel build:vite:* build:tsc:es --parallel build:tsc:cjs copy-api-types\",\n    \"build:vite:browser-dev\": \"vite build --mode devbuild\",\n    \"build:vite:browser-prod\": \"vite build\",\n    \"build:vite:node-dev\": \"vite build --mode devbuild --ssr\",\n    \"build:vite:node-prod\": \"vite build --ssr\",\n    \"build:vite:umddev\": \"vite build --mode umdbuilddev\",\n    \"build:vite:umdprod\": \"vite build --mode umdbuild\",\n    \"build:tsc:cjs\": \"cpy ./dist/types/index.d.ts ./dist/types/ --rename=index.d.cts --flat\",\n    \"build:tsc:es\": \"tsc --emitDeclarationOnly --project tsconfig.typeoutput.json\",\n    \"copy-api-types\": \"cpy ./src/storefront-api-types.d.ts ./src/customer-account-api-types.d.ts ./dist/types/ --flat\",\n    \"format\": \"prettier --write \\\"{src,docs}/**/*\\\" --ignore-unknown\",\n    \"graphql-types\": \"graphql-codegen --config codegen.ts && pnpm run format\",\n    \"test\": \"vitest run --coverage\",\n    \"test:watch\": \"vitest\",\n    \"typecheck\": \"run-p typecheck:*\",\n    \"typecheck:code\": \"tsc --noEmit\",\n    \"typecheck:examples\": \"tsc --noEmit --project tsconfig.examples.json\",\n    \"preview-docs\": \"pnpm --dir ../../docs/preview run dev\"\n  },\n  \"devDependencies\": {\n    \"@faker-js/faker\": \"^9.4.0\",\n    \"@graphql-codegen/add\": \"^5.0.3\",\n    \"@graphql-codegen/cli\": \"^5.0.4\",\n    \"@graphql-codegen/introspection\": \"^4.0.3\",\n    \"@graphql-codegen/typescript\": \"^4.1.3\",\n    \"@ladle/react\": \"^5.0.1\",\n    \"@shopify/generate-docs\": \"catalog:\",\n    \"@testing-library/jest-dom\": \"^6.6.3\",\n    \"@testing-library/react\": \"^14.0.0\",\n    \"@testing-library/user-event\": \"^14.6.1\",\n    \"@types/react\": \"catalog:\",\n    \"@types/react-dom\": \"catalog:\",\n    \"@vitejs/plugin-react\": \"^6.0.1\",\n    \"@vitest/coverage-v8\": \"^3.2.4\",\n    \"cpy-cli\": \"^5.0.0\",\n    \"eslint\": \"9.19.0\",\n    \"eslint-config-prettier\": \"10.0.1\",\n    \"eslint-import-resolver-typescript\": \"3.7.0\",\n    \"eslint-plugin-eslint-comments\": \"3.2.0\",\n    \"eslint-plugin-import\": \"2.31.0\",\n    \"eslint-plugin-jest\": \"28.11.0\",\n    \"eslint-plugin-jsx-a11y\": \"6.10.2\",\n    \"eslint-plugin-node\": \"11.1.0\",\n    \"eslint-plugin-prettier\": \"4.2.1\",\n    \"eslint-plugin-react\": \"7.37.4\",\n    \"eslint-plugin-react-hooks\": \"5.1.0\",\n    \"eslint-plugin-simple-import-sort\": \"12.1.1\",\n    \"eslint-plugin-tsdoc\": \"0.2.14\",\n    \"happy-dom\": \"^20.8.9\",\n    \"npm-run-all\": \"^4.1.5\",\n    \"react\": \"catalog:\",\n    \"react-dom\": \"catalog:\",\n    \"rimraf\": \"^6.0.1\",\n    \"ts-expect\": \"^1.3.0\",\n    \"typescript\": \"5.9.2\",\n    \"vite\": \"^8.0.1\",\n    \"vitest\": \"^3.2.4\"\n  },\n  \"peerDependencies\": {\n    \"react\": \"^18.3.1 || ~19.0.3 || ~19.1.4 || ^19.2.3\",\n    \"react-dom\": \"^18.3.1 || ~19.0.3 || ~19.1.4 || ^19.2.3\",\n    \"vite\": \"^5.1.0 || ^6.2.1 || ^7.0.0 || ^8.0.0\"\n  },\n  \"dependencies\": {\n    \"@google/model-viewer\": \"^4.0.0\",\n    \"@xstate/fsm\": \"2.0.0\",\n    \"ast-v8-to-istanbul\": \"^0.3.11\",\n    \"graphql\": \"^16.10.0\",\n    \"type-fest\": \"^4.33.0\",\n    \"worktop\": \"^0.7.3\"\n  },\n  \"repository\": {\n    \"type\": \"git\",\n    \"url\": \"https://github.com/Shopify/hydrogen.git\",\n    \"directory\": \"packages/hydrogen-react\"\n  },\n  \"bugs\": \"https://github.com/shopify/hydrogen/issues\"\n}\n"],"mappings":""}
+{"version":3,"file":"package.mjs","names":[],"sources":["../../../../package.json"],"sourcesContent":["{\n  \"name\": \"@shopify/hydrogen-react\",\n  \"version\": \"2026.4.5\",\n  \"description\": \"React components, hooks, and utilities for creating custom Shopify storefronts\",\n  \"homepage\": \"https://github.com/Shopify/hydrogen/tree/main/packages/hydrogen-react\",\n  \"license\": \"MIT\",\n  \"publishConfig\": {\n    \"access\": \"public\",\n    \"@shopify:registry\": \"https://registry.npmjs.org\"\n  },\n  \"files\": [\n    \"dist\",\n    \"storefront.schema.json\",\n    \"customer-account.schema.json\"\n  ],\n  \"type\": \"commonjs\",\n  \"exports\": {\n    \".\": {\n      \"node\": {\n        \"require\": {\n          \"types\": \"./dist/types/index.d.cts\",\n          \"development\": \"./dist/node-dev/index.js\",\n          \"default\": \"./dist/node-prod/index.js\"\n        },\n        \"import\": {\n          \"types\": \"./dist/types/index.d.ts\",\n          \"development\": \"./dist/node-dev/index.mjs\",\n          \"default\": \"./dist/node-prod/index.mjs\"\n        },\n        \"default\": \"./dist/node-prod/index.js\"\n      },\n      \"module\": {\n        \"types\": \"./dist/types/index.d.ts\",\n        \"development\": \"./dist/browser-dev/index.mjs\",\n        \"default\": \"./dist/browser-prod/index.mjs\"\n      },\n      \"import\": {\n        \"types\": \"./dist/types/index.d.ts\",\n        \"development\": \"./dist/browser-dev/index.mjs\",\n        \"default\": \"./dist/browser-prod/index.mjs\"\n      },\n      \"require\": {\n        \"types\": \"./dist/types/index.d.cts\",\n        \"development\": \"./dist/node-dev/index.js\",\n        \"default\": \"./dist/node-prod/index.js\"\n      },\n      \"default\": \"./dist/browser-prod/index.mjs\"\n    },\n    \"./storefront-api-types\": \"./dist/types/storefront-api-types.d.ts\",\n    \"./storefront.schema.json\": \"./storefront.schema.json\",\n    \"./customer-account.schema.json\": \"./customer-account.schema.json\",\n    \"./customer-account-api-types\": \"./dist/types/customer-account-api-types.d.ts\",\n    \"./package.json\": \"./package.json\",\n    \"./*\": {\n      \"node\": {\n        \"require\": {\n          \"types\": \"./dist/types/*.d.cts\",\n          \"development\": \"./dist/node-dev/*.js\",\n          \"default\": \"./dist/node-prod/*.js\"\n        },\n        \"import\": {\n          \"types\": \"./dist/types/*.d.ts\",\n          \"development\": \"./dist/node-dev/*.mjs\",\n          \"default\": \"./dist/node-prod/*.mjs\"\n        },\n        \"default\": \"./dist/node-prod/*.js\"\n      },\n      \"module\": {\n        \"types\": \"./dist/types/*.d.ts\",\n        \"development\": \"./dist/browser-dev/*.mjs\",\n        \"default\": \"./dist/browser-prod/*.mjs\"\n      },\n      \"import\": {\n        \"types\": \"./dist/types/*.d.ts\",\n        \"development\": \"./dist/browser-dev/*.mjs\",\n        \"default\": \"./dist/browser-prod/*.mjs\"\n      },\n      \"require\": {\n        \"types\": \"./dist/types/*.d.cts\",\n        \"development\": \"./dist/node-dev/*.js\",\n        \"default\": \"./dist/node-prod/*.js\"\n      },\n      \"default\": \"./dist/browser-prod/*.mjs\"\n    }\n  },\n  \"typesVersions\": {\n    \"*\": {\n      \"storefront-api-types\": [\n        \"./dist/types/storefront-api-types.d.ts\"\n      ]\n    }\n  },\n  \"main\": \"./dist/node-prod/index.js\",\n  \"module\": \"./dist/node-prod/index.mjs\",\n  \"browser\": \"./dist/browser-prod/index.mjs\",\n  \"types\": \"./dist/types/index.d.ts\",\n  \"unpkg\": \"./dist/umd/hydrogen-react.prod.js\",\n  \"jsdelivr\": \"./dist/umd/hydrogen-react.prod.js\",\n  \"sideEffects\": false,\n  \"scripts\": {\n    \"build-docs\": \"sh ./docs/build-docs.sh && pnpm run format\",\n    \"clean-dist\": \"rimraf ./dist\",\n    \"dev\": \"run-s dev:demo\",\n    \"dev:story\": \"ladle serve\",\n    \"dev:demo\": \"run-p dev:demo:* copy-api-types\",\n    \"dev:demo:browser-dev\": \"vite build --watch --emptyOutDir false --clearScreen false --mode devbuild\",\n    \"dev:demo:ts\": \"tsc --watch --emitDeclarationOnly\",\n    \"build\": \"npm-run-all --sequential clean-dist --parallel build:vite:* build:tsc:es --parallel build:tsc:cjs copy-api-types\",\n    \"build:vite:browser-dev\": \"vite build --mode devbuild\",\n    \"build:vite:browser-prod\": \"vite build\",\n    \"build:vite:node-dev\": \"vite build --mode devbuild --ssr\",\n    \"build:vite:node-prod\": \"vite build --ssr\",\n    \"build:vite:umddev\": \"vite build --mode umdbuilddev\",\n    \"build:vite:umdprod\": \"vite build --mode umdbuild\",\n    \"build:tsc:cjs\": \"cpy ./dist/types/index.d.ts ./dist/types/ --rename=index.d.cts --flat\",\n    \"build:tsc:es\": \"tsc --emitDeclarationOnly --project tsconfig.typeoutput.json\",\n    \"copy-api-types\": \"cpy ./src/storefront-api-types.d.ts ./src/customer-account-api-types.d.ts ./dist/types/ --flat\",\n    \"format\": \"prettier --write \\\"{src,docs}/**/*\\\" --ignore-unknown\",\n    \"graphql-types\": \"graphql-codegen --config codegen.ts && pnpm run format\",\n    \"test\": \"vitest run --coverage\",\n    \"test:watch\": \"vitest\",\n    \"typecheck\": \"run-p typecheck:*\",\n    \"typecheck:code\": \"tsc --noEmit\",\n    \"typecheck:examples\": \"tsc --noEmit --project tsconfig.examples.json\",\n    \"preview-docs\": \"pnpm --dir ../../docs/preview run dev\"\n  },\n  \"devDependencies\": {\n    \"@faker-js/faker\": \"^9.4.0\",\n    \"@graphql-codegen/add\": \"^5.0.3\",\n    \"@graphql-codegen/cli\": \"^5.0.4\",\n    \"@graphql-codegen/introspection\": \"^4.0.3\",\n    \"@graphql-codegen/typescript\": \"^4.1.3\",\n    \"@ladle/react\": \"^5.0.1\",\n    \"@shopify/generate-docs\": \"catalog:\",\n    \"@testing-library/jest-dom\": \"^6.6.3\",\n    \"@testing-library/react\": \"^14.0.0\",\n    \"@testing-library/user-event\": \"^14.6.1\",\n    \"@types/react\": \"catalog:\",\n    \"@types/react-dom\": \"catalog:\",\n    \"@vitejs/plugin-react\": \"^6.0.1\",\n    \"@vitest/coverage-v8\": \"^3.2.4\",\n    \"cpy-cli\": \"^5.0.0\",\n    \"eslint\": \"9.19.0\",\n    \"eslint-config-prettier\": \"10.0.1\",\n    \"eslint-import-resolver-typescript\": \"3.7.0\",\n    \"eslint-plugin-eslint-comments\": \"3.2.0\",\n    \"eslint-plugin-import\": \"2.31.0\",\n    \"eslint-plugin-jest\": \"28.11.0\",\n    \"eslint-plugin-jsx-a11y\": \"6.10.2\",\n    \"eslint-plugin-node\": \"11.1.0\",\n    \"eslint-plugin-prettier\": \"4.2.1\",\n    \"eslint-plugin-react\": \"7.37.4\",\n    \"eslint-plugin-react-hooks\": \"5.1.0\",\n    \"eslint-plugin-simple-import-sort\": \"12.1.1\",\n    \"eslint-plugin-tsdoc\": \"0.2.14\",\n    \"happy-dom\": \"^20.8.9\",\n    \"npm-run-all\": \"^4.1.5\",\n    \"react\": \"catalog:\",\n    \"react-dom\": \"catalog:\",\n    \"rimraf\": \"^6.0.1\",\n    \"ts-expect\": \"^1.3.0\",\n    \"typescript\": \"5.9.2\",\n    \"vite\": \"^8.0.1\",\n    \"vitest\": \"^3.2.4\"\n  },\n  \"peerDependencies\": {\n    \"react\": \"^18.3.1 || ~19.0.3 || ~19.1.4 || ^19.2.3\",\n    \"react-dom\": \"^18.3.1 || ~19.0.3 || ~19.1.4 || ^19.2.3\",\n    \"vite\": \"^5.1.0 || ^6.2.1 || ^7.0.0 || ^8.0.0\"\n  },\n  \"dependencies\": {\n    \"@google/model-viewer\": \"^4.0.0\",\n    \"@xstate/fsm\": \"2.0.0\",\n    \"ast-v8-to-istanbul\": \"^0.3.11\",\n    \"graphql\": \"^16.10.0\",\n    \"type-fest\": \"^4.33.0\",\n    \"worktop\": \"^0.7.3\"\n  },\n  \"repository\": {\n    \"type\": \"git\",\n    \"url\": \"https://github.com/Shopify/hydrogen.git\",\n    \"directory\": \"packages/hydrogen-react\"\n  },\n  \"bugs\": \"https://github.com/shopify/hydrogen/issues\"\n}\n"],"mappings":""}

package/dist/node-dev/tracking-utils.js

@@ -3,68 +3,27 @@
 var SHOPIFY_VISIT_TOKEN_HEADER = "X-Shopify-VisitToken";
 /** Storefront API header for UniqueToken */
 var SHOPIFY_UNIQUE_TOKEN_HEADER = "X-Shopify-UniqueToken";
-var cachedTrackingValues = { current: null };
 /**
-* Retrieves user session tracking values for analytics and marketing from the browser environment.
+* Retrieves user session tracking values for analytics and marketing from the
+* browser environment. Customer Privacy API token readers are authoritative
+* when available, including when consent denies tracking. Deprecated
+* `_shopify_y`/`_shopify_s` cookies are read only without an API token reader.
+* Consent comes from CTA's cache or the legacy `_tracking_consent` cookie.
 * @publicDocs
 */
 function getTrackingValues() {
-	let trackingValues;
-	if (typeof window !== "undefined" && typeof window.performance !== "undefined") try {
-		const resourceRE = /^https?:\/\/([^/]+)(\/api\/(?:unstable|2\d{3}-\d{2})\/graphql\.json(?=$|\?))?/;
-		const entries = performance.getEntriesByType("resource");
-		let matchedValues;
-		for (let i = entries.length - 1; i >= 0; i--) {
-			const entry = entries[i];
-			if (entry.initiatorType !== "fetch") continue;
-			const currentHost = window.location.host;
-			const match = entry.name.match(resourceRE);
-			if (!match) continue;
-			const [, matchedHost, sfapiPath] = match;
-			if (matchedHost === currentHost || sfapiPath && matchedHost?.endsWith(`.${currentHost}`)) {
-				const values = extractFromPerformanceEntry(entry);
-				if (values) {
-					matchedValues = values;
-					break;
-				}
-			}
-		}
-		if (matchedValues) trackingValues = matchedValues;
-		if (trackingValues) cachedTrackingValues.current = trackingValues;
-		else if (cachedTrackingValues.current) trackingValues = cachedTrackingValues.current;
-		if (!trackingValues) {
-			const navigationEntries = performance.getEntriesByType("navigation")[0];
-			trackingValues = extractFromPerformanceEntry(navigationEntries, false);
-		}
-	} catch {}
-	if (!trackingValues) {
-		const cookie = typeof arguments[0] === "string" ? arguments[0] : typeof document !== "undefined" ? document.cookie : "";
-		trackingValues = {
-			uniqueToken: cookie.match(/\b_shopify_y=([^;]+)/)?.[1] || "",
-			visitToken: cookie.match(/\b_shopify_s=([^;]+)/)?.[1] || "",
-			consent: cookie.match(/\b_tracking_consent=([^;]+)/)?.[1] || ""
-		};
-	}
-	return trackingValues;
-}
-function extractFromPerformanceEntry(entry, isConsentRequired = true) {
-	let uniqueToken = "";
-	let visitToken = "";
-	let consent = "";
-	const serverTiming = entry.serverTiming;
-	if (serverTiming && serverTiming.length >= 3) for (let i = serverTiming.length - 1; i >= 0; i--) {
-		const { name, description } = serverTiming[i];
-		if (!name || !description) continue;
-		if (name === "_y") uniqueToken = description;
-		else if (name === "_s") visitToken = description;
-		else if (name === "_cmp") consent = description;
-		if (uniqueToken && visitToken && consent) break;
-	}
-	return uniqueToken && visitToken && (isConsentRequired ? consent : true) ? {
-		uniqueToken,
-		visitToken,
-		consent
-	} : void 0;
+	const cookie = typeof arguments[0] === "string" ? arguments[0] : typeof document !== "undefined" ? document.cookie : "";
+	const customerPrivacy = typeof window === "undefined" ? void 0 : window.Shopify?.customerPrivacy;
+	const internal = customerPrivacy?.__internal;
+	const tokenOptions = {
+		generateFallback: customerPrivacy?.config?.asyncConsent === true,
+		tag: "hydrogen:classic"
+	};
+	return {
+		uniqueToken: internal?.uniqueToken ? internal.uniqueToken(tokenOptions) ?? "" : cookie.match(/\b_shopify_y=([^;]+)/)?.[1] ?? "",
+		visitToken: internal?.visitToken ? internal.visitToken(tokenOptions) ?? "" : cookie.match(/\b_shopify_s=([^;]+)/)?.[1] ?? "",
+		consent: customerPrivacy?.cachedConsent ?? cookie.match(/\b_tracking_consent=([^;]+)/)?.[1] ?? ""
+	};
 }
 //#endregion
 exports.SHOPIFY_UNIQUE_TOKEN_HEADER = SHOPIFY_UNIQUE_TOKEN_HEADER;

package/dist/node-dev/tracking-utils.js.map

@@ -1 +1 @@
-{"version":3,"file":"tracking-utils.js","names":[],"sources":["../../src/tracking-utils.ts"],"sourcesContent":["/** Storefront API header for VisitToken */\nexport const SHOPIFY_VISIT_TOKEN_HEADER = 'X-Shopify-VisitToken';\n/** Storefront API header for UniqueToken */\nexport const SHOPIFY_UNIQUE_TOKEN_HEADER = 'X-Shopify-UniqueToken';\n\ntype TrackingValues = {\n  /** Identifier for the unique user. Equivalent to the deprecated _shopify_y cookie */\n  uniqueToken: string;\n  /** Identifier for the current visit. Equivalent to the deprecated _shopify_s cookie */\n  visitToken: string;\n  /** Represents the consent given by the user or the default region consent configured in Admin */\n  consent: string;\n};\n\n// Cache values to avoid losing them when performance\n// entries are cleared from the buffer over time.\nexport const cachedTrackingValues: {\n  current: null | TrackingValues;\n} = {current: null};\n\n/**\n * Retrieves user session tracking values for analytics and marketing from the browser environment.\n * @publicDocs\n */\nexport function getTrackingValues(): TrackingValues {\n  // Overall behavior: Tracking values are returned in Server-Timing headers from\n  // Storefront API responses, and we want to find and return these tracking values.\n  //\n  // Search recent fetches for SFAPI requests matching either: same origin (proxy case)\n  // or a subdomain of the current host (eg: checkout subdomain, if there is no proxy).\n  // We consider SF API-like endpoints (/api/.../graphql.json) on subdomains, as well as\n  // any same-origin request. The reason for the latter is that Hydrogen server collects\n  // tracking values and returns them in any non-cached response, not just direct SF API\n  // responses. For example, a cart mutation in a server action could return tracking values.\n  //\n  // If we didn't find tracking values in fetch requests, we fall back to checking cached values,\n  // then the initial page navigation entry, and finally the deprecated `_shopify_s` and `_shopify_y`.\n\n  let trackingValues: TrackingValues | undefined;\n\n  if (\n    typeof window !== 'undefined' &&\n    typeof window.performance !== 'undefined'\n  ) {\n    try {\n      // RE to extract host and optionally match SFAPI pathname.\n      // Group 1: host (e.g. \"checkout.mystore.com\")\n      // Group 2: SFAPI path if present (e.g. \"/api/2024-01/graphql.json\")\n      const resourceRE =\n        /^https?:\\/\\/([^/]+)(\\/api\\/(?:unstable|2\\d{3}-\\d{2})\\/graphql\\.json(?=$|\\?))?/;\n\n      // Search backwards through resource entries to find the most recent match.\n      // Match criteria (first one with _y and _s values wins):\n      // - Same origin (exact host match) with tracking values, OR\n      // - Subdomain + SFAPI pathname with tracking values\n      const entries = performance.getEntriesByType(\n        'resource',\n      ) as PerformanceResourceTiming[];\n\n      let matchedValues: ReturnType<typeof extractFromPerformanceEntry>;\n\n      for (let i = entries.length - 1; i >= 0; i--) {\n        const entry = entries[i];\n\n        if (entry.initiatorType !== 'fetch') continue;\n\n        const currentHost = window.location.host;\n        const match = entry.name.match(resourceRE);\n        if (!match) continue;\n\n        const [, matchedHost, sfapiPath] = match;\n\n        const isMatch =\n          // Same origin (exact host match)\n          matchedHost === currentHost ||\n          // Subdomain with SFAPI path\n          (sfapiPath && matchedHost?.endsWith(`.${currentHost}`));\n\n        if (isMatch) {\n          const values = extractFromPerformanceEntry(entry);\n          if (values) {\n            matchedValues = values;\n            break;\n          }\n        }\n      }\n\n      if (matchedValues) {\n        trackingValues = matchedValues;\n      }\n\n      // Resource entries have a limited buffer and are removed over time.\n      // Cache the latest values for future calls if we find them.\n      // A cached resource entry is always newer than a navigation entry.\n      if (trackingValues) {\n        cachedTrackingValues.current = trackingValues;\n      } else if (cachedTrackingValues.current) {\n        // Fallback to cached values from previous calls:\n        trackingValues = cachedTrackingValues.current;\n      }\n\n      if (!trackingValues) {\n        // Fallback to navigation entry from full page rendering load:\n        const navigationEntries = performance.getEntriesByType(\n          'navigation',\n        )[0] as PerformanceNavigationTiming;\n\n        // Navigation entries might omit consent when the Hydrogen server generates it.\n        // In this case, we skip consent requirement and only extract _y and _s values.\n        trackingValues = extractFromPerformanceEntry(navigationEntries, false);\n      }\n    } catch {}\n  }\n\n  // Fallback to deprecated cookies to support transitioning:\n  if (!trackingValues) {\n    const cookie =\n      // Read from arguments to avoid declaring parameters in this function signature.\n      // This logic is only used internally from `getShopifyCookies` and will be deprecated.\n      typeof arguments[0] === 'string'\n        ? arguments[0]\n        : typeof document !== 'undefined'\n          ? document.cookie\n          : '';\n\n    trackingValues = {\n      uniqueToken: cookie.match(/\\b_shopify_y=([^;]+)/)?.[1] || '',\n      visitToken: cookie.match(/\\b_shopify_s=([^;]+)/)?.[1] || '',\n      consent: cookie.match(/\\b_tracking_consent=([^;]+)/)?.[1] || '',\n    };\n  }\n\n  return trackingValues;\n}\n\nfunction extractFromPerformanceEntry(\n  entry: PerformanceNavigationTiming | PerformanceResourceTiming,\n  isConsentRequired = true,\n): TrackingValues | undefined {\n  let uniqueToken = '';\n  let visitToken = '';\n  let consent = '';\n\n  const serverTiming = entry.serverTiming;\n  // Quick check: we need at least 3 entries (_y, _s, _cmp)\n  if (serverTiming && serverTiming.length >= 3) {\n    // Iterate backwards since our headers are typically at the end\n    for (let i = serverTiming.length - 1; i >= 0; i--) {\n      const {name, description} = serverTiming[i];\n      if (!name || !description) continue;\n\n      if (name === '_y') {\n        uniqueToken = description;\n      } else if (name === '_s') {\n        visitToken = description;\n      } else if (name === '_cmp') {\n        // _cmp (consent management platform) holds the consent value\n        // used by consent-tracking-api and privacy-banner scripts.\n        consent = description;\n      }\n\n      if (uniqueToken && visitToken && consent) break;\n    }\n  }\n\n  return uniqueToken && visitToken && (isConsentRequired ? consent : true)\n    ? {uniqueToken, visitToken, consent}\n    : undefined;\n}\n"],"mappings":";;AACA,IAAa,6BAA6B;;AAE1C,IAAa,8BAA8B;AAa3C,IAAa,uBAET,EAAC,SAAS,MAAK;;;;;AAMnB,SAAgB,oBAAoC;CAclD,IAAI;AAEJ,KACE,OAAO,WAAW,eAClB,OAAO,OAAO,gBAAgB,YAE9B,KAAI;EAIF,MAAM,aACJ;EAMF,MAAM,UAAU,YAAY,iBAC1B,WACD;EAED,IAAI;AAEJ,OAAK,IAAI,IAAI,QAAQ,SAAS,GAAG,KAAK,GAAG,KAAK;GAC5C,MAAM,QAAQ,QAAQ;AAEtB,OAAI,MAAM,kBAAkB,QAAS;GAErC,MAAM,cAAc,OAAO,SAAS;GACpC,MAAM,QAAQ,MAAM,KAAK,MAAM,WAAW;AAC1C,OAAI,CAAC,MAAO;GAEZ,MAAM,GAAG,aAAa,aAAa;AAQnC,OAJE,gBAAgB,eAEf,aAAa,aAAa,SAAS,IAAI,cAAc,EAE3C;IACX,MAAM,SAAS,4BAA4B,MAAM;AACjD,QAAI,QAAQ;AACV,qBAAgB;AAChB;;;;AAKN,MAAI,cACF,kBAAiB;AAMnB,MAAI,eACF,sBAAqB,UAAU;WACtB,qBAAqB,QAE9B,kBAAiB,qBAAqB;AAGxC,MAAI,CAAC,gBAAgB;GAEnB,MAAM,oBAAoB,YAAY,iBACpC,aACD,CAAC;AAIF,oBAAiB,4BAA4B,mBAAmB,MAAM;;SAElE;AAIV,KAAI,CAAC,gBAAgB;EACnB,MAAM,SAGJ,OAAO,UAAU,OAAO,WACpB,UAAU,KACV,OAAO,aAAa,cAClB,SAAS,SACT;AAER,mBAAiB;GACf,aAAa,OAAO,MAAM,uBAAuB,GAAG,MAAM;GAC1D,YAAY,OAAO,MAAM,uBAAuB,GAAG,MAAM;GACzD,SAAS,OAAO,MAAM,8BAA8B,GAAG,MAAM;GAC9D;;AAGH,QAAO;;AAGT,SAAS,4BACP,OACA,oBAAoB,MACQ;CAC5B,IAAI,cAAc;CAClB,IAAI,aAAa;CACjB,IAAI,UAAU;CAEd,MAAM,eAAe,MAAM;AAE3B,KAAI,gBAAgB,aAAa,UAAU,EAEzC,MAAK,IAAI,IAAI,aAAa,SAAS,GAAG,KAAK,GAAG,KAAK;EACjD,MAAM,EAAC,MAAM,gBAAe,aAAa;AACzC,MAAI,CAAC,QAAQ,CAAC,YAAa;AAE3B,MAAI,SAAS,KACX,eAAc;WACL,SAAS,KAClB,cAAa;WACJ,SAAS,OAGlB,WAAU;AAGZ,MAAI,eAAe,cAAc,QAAS;;AAI9C,QAAO,eAAe,eAAe,oBAAoB,UAAU,QAC/D;EAAC;EAAa;EAAY;EAAQ,GAClC,KAAA"}
+{"version":3,"file":"tracking-utils.js","names":[],"sources":["../../src/tracking-utils.ts"],"sourcesContent":["/** Storefront API header for VisitToken */\nexport const SHOPIFY_VISIT_TOKEN_HEADER = 'X-Shopify-VisitToken';\n/** Storefront API header for UniqueToken */\nexport const SHOPIFY_UNIQUE_TOKEN_HEADER = 'X-Shopify-UniqueToken';\n\ntype TrackingValues = {\n  /** Identifier for the unique user. Equivalent to the deprecated _shopify_y cookie */\n  uniqueToken: string;\n  /** Identifier for the current visit. Equivalent to the deprecated _shopify_s cookie */\n  visitToken: string;\n  /** Represents the consent given by the user or the default region consent configured in Admin */\n  consent: string;\n};\n\n// Keep the consent-tracking-api token interface out of Hydrogen's public\n// global types since it could change in the future.\ntype CustomerPrivacyWithTracking = {\n  config?: {asyncConsent?: boolean};\n  cachedConsent?: string;\n  __internal?: {\n    uniqueToken?: (options?: {\n      generateFallback?: boolean;\n      tag?: string;\n    }) => string | undefined;\n    visitToken?: (options?: {\n      generateFallback?: boolean;\n      tag?: string;\n    }) => string | undefined;\n  };\n};\n\n/**\n * Retrieves user session tracking values for analytics and marketing from the\n * browser environment. Customer Privacy API token readers are authoritative\n * when available, including when consent denies tracking. Deprecated\n * `_shopify_y`/`_shopify_s` cookies are read only without an API token reader.\n * Consent comes from CTA's cache or the legacy `_tracking_consent` cookie.\n * @publicDocs\n */\nexport function getTrackingValues(): TrackingValues {\n  const cookie =\n    // Read from arguments to avoid declaring parameters in this function signature.\n    // This logic is only used internally from `getShopifyCookies` and will be deprecated.\n    typeof arguments[0] === 'string'\n      ? arguments[0]\n      : typeof document !== 'undefined'\n        ? document.cookie\n        : '';\n\n  const customerPrivacy =\n    typeof window === 'undefined'\n      ? undefined\n      : (window as {Shopify?: {customerPrivacy?: CustomerPrivacyWithTracking}})\n          .Shopify?.customerPrivacy;\n\n  const internal = customerPrivacy?.__internal;\n  // Async consent owns initialization and suppresses fallback generation until\n  // it is loaded. Afterwards CTA can refresh expired tokens, as in preview.\n  // Standalone hydrogen-react's explicit consent fetch keeps its previous policy.\n  const tokenOptions = {\n    generateFallback: customerPrivacy?.config?.asyncConsent === true,\n    tag: 'hydrogen:classic',\n  };\n\n  return {\n    // An installed CTA reader is authoritative, including undefined on denial.\n    // Falling through to a legacy cookie could restore a disallowed token.\n    uniqueToken: internal?.uniqueToken\n      ? (internal.uniqueToken(tokenOptions) ?? '')\n      : (cookie.match(/\\b_shopify_y=([^;]+)/)?.[1] ?? ''),\n    visitToken: internal?.visitToken\n      ? (internal.visitToken(tokenOptions) ?? '')\n      : (cookie.match(/\\b_shopify_s=([^;]+)/)?.[1] ?? ''),\n    consent:\n      customerPrivacy?.cachedConsent ??\n      cookie.match(/\\b_tracking_consent=([^;]+)/)?.[1] ??\n      '',\n  };\n}\n"],"mappings":";;AACA,IAAa,6BAA6B;;AAE1C,IAAa,8BAA8B;;;;;;;;;AAoC3C,SAAgB,oBAAoC;CAClD,MAAM,SAGJ,OAAO,UAAU,OAAO,WACpB,UAAU,KACV,OAAO,aAAa,cAClB,SAAS,SACT;CAER,MAAM,kBACJ,OAAO,WAAW,cACd,KAAA,IACC,OACE,SAAS;CAElB,MAAM,WAAW,iBAAiB;CAIlC,MAAM,eAAe;EACnB,kBAAkB,iBAAiB,QAAQ,iBAAiB;EAC5D,KAAK;EACN;AAED,QAAO;EAGL,aAAa,UAAU,cAClB,SAAS,YAAY,aAAa,IAAI,KACtC,OAAO,MAAM,uBAAuB,GAAG,MAAM;EAClD,YAAY,UAAU,aACjB,SAAS,WAAW,aAAa,IAAI,KACrC,OAAO,MAAM,uBAAuB,GAAG,MAAM;EAClD,SACE,iBAAiB,iBACjB,OAAO,MAAM,8BAA8B,GAAG,MAC9C;EACH"}

package/dist/node-dev/tracking-utils.mjs

@@ -3,68 +3,27 @@
 var SHOPIFY_VISIT_TOKEN_HEADER = "X-Shopify-VisitToken";
 /** Storefront API header for UniqueToken */
 var SHOPIFY_UNIQUE_TOKEN_HEADER = "X-Shopify-UniqueToken";
-var cachedTrackingValues = { current: null };
 /**
-* Retrieves user session tracking values for analytics and marketing from the browser environment.
+* Retrieves user session tracking values for analytics and marketing from the
+* browser environment. Customer Privacy API token readers are authoritative
+* when available, including when consent denies tracking. Deprecated
+* `_shopify_y`/`_shopify_s` cookies are read only without an API token reader.
+* Consent comes from CTA's cache or the legacy `_tracking_consent` cookie.
 * @publicDocs
 */
 function getTrackingValues() {
-	let trackingValues;
-	if (typeof window !== "undefined" && typeof window.performance !== "undefined") try {
-		const resourceRE = /^https?:\/\/([^/]+)(\/api\/(?:unstable|2\d{3}-\d{2})\/graphql\.json(?=$|\?))?/;
-		const entries = performance.getEntriesByType("resource");
-		let matchedValues;
-		for (let i = entries.length - 1; i >= 0; i--) {
-			const entry = entries[i];
-			if (entry.initiatorType !== "fetch") continue;
-			const currentHost = window.location.host;
-			const match = entry.name.match(resourceRE);
-			if (!match) continue;
-			const [, matchedHost, sfapiPath] = match;
-			if (matchedHost === currentHost || sfapiPath && matchedHost?.endsWith(`.${currentHost}`)) {
-				const values = extractFromPerformanceEntry(entry);
-				if (values) {
-					matchedValues = values;
-					break;
-				}
-			}
-		}
-		if (matchedValues) trackingValues = matchedValues;
-		if (trackingValues) cachedTrackingValues.current = trackingValues;
-		else if (cachedTrackingValues.current) trackingValues = cachedTrackingValues.current;
-		if (!trackingValues) {
-			const navigationEntries = performance.getEntriesByType("navigation")[0];
-			trackingValues = extractFromPerformanceEntry(navigationEntries, false);
-		}
-	} catch {}
-	if (!trackingValues) {
-		const cookie = typeof arguments[0] === "string" ? arguments[0] : typeof document !== "undefined" ? document.cookie : "";
-		trackingValues = {
-			uniqueToken: cookie.match(/\b_shopify_y=([^;]+)/)?.[1] || "",
-			visitToken: cookie.match(/\b_shopify_s=([^;]+)/)?.[1] || "",
-			consent: cookie.match(/\b_tracking_consent=([^;]+)/)?.[1] || ""
-		};
-	}
-	return trackingValues;
-}
-function extractFromPerformanceEntry(entry, isConsentRequired = true) {
-	let uniqueToken = "";
-	let visitToken = "";
-	let consent = "";
-	const serverTiming = entry.serverTiming;
-	if (serverTiming && serverTiming.length >= 3) for (let i = serverTiming.length - 1; i >= 0; i--) {
-		const { name, description } = serverTiming[i];
-		if (!name || !description) continue;
-		if (name === "_y") uniqueToken = description;
-		else if (name === "_s") visitToken = description;
-		else if (name === "_cmp") consent = description;
-		if (uniqueToken && visitToken && consent) break;
-	}
-	return uniqueToken && visitToken && (isConsentRequired ? consent : true) ? {
-		uniqueToken,
-		visitToken,
-		consent
-	} : void 0;
+	const cookie = typeof arguments[0] === "string" ? arguments[0] : typeof document !== "undefined" ? document.cookie : "";
+	const customerPrivacy = typeof window === "undefined" ? void 0 : window.Shopify?.customerPrivacy;
+	const internal = customerPrivacy?.__internal;
+	const tokenOptions = {
+		generateFallback: customerPrivacy?.config?.asyncConsent === true,
+		tag: "hydrogen:classic"
+	};
+	return {
+		uniqueToken: internal?.uniqueToken ? internal.uniqueToken(tokenOptions) ?? "" : cookie.match(/\b_shopify_y=([^;]+)/)?.[1] ?? "",
+		visitToken: internal?.visitToken ? internal.visitToken(tokenOptions) ?? "" : cookie.match(/\b_shopify_s=([^;]+)/)?.[1] ?? "",
+		consent: customerPrivacy?.cachedConsent ?? cookie.match(/\b_tracking_consent=([^;]+)/)?.[1] ?? ""
+	};
 }
 //#endregion
 export { SHOPIFY_UNIQUE_TOKEN_HEADER, SHOPIFY_VISIT_TOKEN_HEADER, getTrackingValues };

package/dist/node-dev/tracking-utils.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"tracking-utils.mjs","names":[],"sources":["../../src/tracking-utils.ts"],"sourcesContent":["/** Storefront API header for VisitToken */\nexport const SHOPIFY_VISIT_TOKEN_HEADER = 'X-Shopify-VisitToken';\n/** Storefront API header for UniqueToken */\nexport const SHOPIFY_UNIQUE_TOKEN_HEADER = 'X-Shopify-UniqueToken';\n\ntype TrackingValues = {\n  /** Identifier for the unique user. Equivalent to the deprecated _shopify_y cookie */\n  uniqueToken: string;\n  /** Identifier for the current visit. Equivalent to the deprecated _shopify_s cookie */\n  visitToken: string;\n  /** Represents the consent given by the user or the default region consent configured in Admin */\n  consent: string;\n};\n\n// Cache values to avoid losing them when performance\n// entries are cleared from the buffer over time.\nexport const cachedTrackingValues: {\n  current: null | TrackingValues;\n} = {current: null};\n\n/**\n * Retrieves user session tracking values for analytics and marketing from the browser environment.\n * @publicDocs\n */\nexport function getTrackingValues(): TrackingValues {\n  // Overall behavior: Tracking values are returned in Server-Timing headers from\n  // Storefront API responses, and we want to find and return these tracking values.\n  //\n  // Search recent fetches for SFAPI requests matching either: same origin (proxy case)\n  // or a subdomain of the current host (eg: checkout subdomain, if there is no proxy).\n  // We consider SF API-like endpoints (/api/.../graphql.json) on subdomains, as well as\n  // any same-origin request. The reason for the latter is that Hydrogen server collects\n  // tracking values and returns them in any non-cached response, not just direct SF API\n  // responses. For example, a cart mutation in a server action could return tracking values.\n  //\n  // If we didn't find tracking values in fetch requests, we fall back to checking cached values,\n  // then the initial page navigation entry, and finally the deprecated `_shopify_s` and `_shopify_y`.\n\n  let trackingValues: TrackingValues | undefined;\n\n  if (\n    typeof window !== 'undefined' &&\n    typeof window.performance !== 'undefined'\n  ) {\n    try {\n      // RE to extract host and optionally match SFAPI pathname.\n      // Group 1: host (e.g. \"checkout.mystore.com\")\n      // Group 2: SFAPI path if present (e.g. \"/api/2024-01/graphql.json\")\n      const resourceRE =\n        /^https?:\\/\\/([^/]+)(\\/api\\/(?:unstable|2\\d{3}-\\d{2})\\/graphql\\.json(?=$|\\?))?/;\n\n      // Search backwards through resource entries to find the most recent match.\n      // Match criteria (first one with _y and _s values wins):\n      // - Same origin (exact host match) with tracking values, OR\n      // - Subdomain + SFAPI pathname with tracking values\n      const entries = performance.getEntriesByType(\n        'resource',\n      ) as PerformanceResourceTiming[];\n\n      let matchedValues: ReturnType<typeof extractFromPerformanceEntry>;\n\n      for (let i = entries.length - 1; i >= 0; i--) {\n        const entry = entries[i];\n\n        if (entry.initiatorType !== 'fetch') continue;\n\n        const currentHost = window.location.host;\n        const match = entry.name.match(resourceRE);\n        if (!match) continue;\n\n        const [, matchedHost, sfapiPath] = match;\n\n        const isMatch =\n          // Same origin (exact host match)\n          matchedHost === currentHost ||\n          // Subdomain with SFAPI path\n          (sfapiPath && matchedHost?.endsWith(`.${currentHost}`));\n\n        if (isMatch) {\n          const values = extractFromPerformanceEntry(entry);\n          if (values) {\n            matchedValues = values;\n            break;\n          }\n        }\n      }\n\n      if (matchedValues) {\n        trackingValues = matchedValues;\n      }\n\n      // Resource entries have a limited buffer and are removed over time.\n      // Cache the latest values for future calls if we find them.\n      // A cached resource entry is always newer than a navigation entry.\n      if (trackingValues) {\n        cachedTrackingValues.current = trackingValues;\n      } else if (cachedTrackingValues.current) {\n        // Fallback to cached values from previous calls:\n        trackingValues = cachedTrackingValues.current;\n      }\n\n      if (!trackingValues) {\n        // Fallback to navigation entry from full page rendering load:\n        const navigationEntries = performance.getEntriesByType(\n          'navigation',\n        )[0] as PerformanceNavigationTiming;\n\n        // Navigation entries might omit consent when the Hydrogen server generates it.\n        // In this case, we skip consent requirement and only extract _y and _s values.\n        trackingValues = extractFromPerformanceEntry(navigationEntries, false);\n      }\n    } catch {}\n  }\n\n  // Fallback to deprecated cookies to support transitioning:\n  if (!trackingValues) {\n    const cookie =\n      // Read from arguments to avoid declaring parameters in this function signature.\n      // This logic is only used internally from `getShopifyCookies` and will be deprecated.\n      typeof arguments[0] === 'string'\n        ? arguments[0]\n        : typeof document !== 'undefined'\n          ? document.cookie\n          : '';\n\n    trackingValues = {\n      uniqueToken: cookie.match(/\\b_shopify_y=([^;]+)/)?.[1] || '',\n      visitToken: cookie.match(/\\b_shopify_s=([^;]+)/)?.[1] || '',\n      consent: cookie.match(/\\b_tracking_consent=([^;]+)/)?.[1] || '',\n    };\n  }\n\n  return trackingValues;\n}\n\nfunction extractFromPerformanceEntry(\n  entry: PerformanceNavigationTiming | PerformanceResourceTiming,\n  isConsentRequired = true,\n): TrackingValues | undefined {\n  let uniqueToken = '';\n  let visitToken = '';\n  let consent = '';\n\n  const serverTiming = entry.serverTiming;\n  // Quick check: we need at least 3 entries (_y, _s, _cmp)\n  if (serverTiming && serverTiming.length >= 3) {\n    // Iterate backwards since our headers are typically at the end\n    for (let i = serverTiming.length - 1; i >= 0; i--) {\n      const {name, description} = serverTiming[i];\n      if (!name || !description) continue;\n\n      if (name === '_y') {\n        uniqueToken = description;\n      } else if (name === '_s') {\n        visitToken = description;\n      } else if (name === '_cmp') {\n        // _cmp (consent management platform) holds the consent value\n        // used by consent-tracking-api and privacy-banner scripts.\n        consent = description;\n      }\n\n      if (uniqueToken && visitToken && consent) break;\n    }\n  }\n\n  return uniqueToken && visitToken && (isConsentRequired ? consent : true)\n    ? {uniqueToken, visitToken, consent}\n    : undefined;\n}\n"],"mappings":";;AACA,IAAa,6BAA6B;;AAE1C,IAAa,8BAA8B;AAa3C,IAAa,uBAET,EAAC,SAAS,MAAK;;;;;AAMnB,SAAgB,oBAAoC;CAclD,IAAI;AAEJ,KACE,OAAO,WAAW,eAClB,OAAO,OAAO,gBAAgB,YAE9B,KAAI;EAIF,MAAM,aACJ;EAMF,MAAM,UAAU,YAAY,iBAC1B,WACD;EAED,IAAI;AAEJ,OAAK,IAAI,IAAI,QAAQ,SAAS,GAAG,KAAK,GAAG,KAAK;GAC5C,MAAM,QAAQ,QAAQ;AAEtB,OAAI,MAAM,kBAAkB,QAAS;GAErC,MAAM,cAAc,OAAO,SAAS;GACpC,MAAM,QAAQ,MAAM,KAAK,MAAM,WAAW;AAC1C,OAAI,CAAC,MAAO;GAEZ,MAAM,GAAG,aAAa,aAAa;AAQnC,OAJE,gBAAgB,eAEf,aAAa,aAAa,SAAS,IAAI,cAAc,EAE3C;IACX,MAAM,SAAS,4BAA4B,MAAM;AACjD,QAAI,QAAQ;AACV,qBAAgB;AAChB;;;;AAKN,MAAI,cACF,kBAAiB;AAMnB,MAAI,eACF,sBAAqB,UAAU;WACtB,qBAAqB,QAE9B,kBAAiB,qBAAqB;AAGxC,MAAI,CAAC,gBAAgB;GAEnB,MAAM,oBAAoB,YAAY,iBACpC,aACD,CAAC;AAIF,oBAAiB,4BAA4B,mBAAmB,MAAM;;SAElE;AAIV,KAAI,CAAC,gBAAgB;EACnB,MAAM,SAGJ,OAAO,UAAU,OAAO,WACpB,UAAU,KACV,OAAO,aAAa,cAClB,SAAS,SACT;AAER,mBAAiB;GACf,aAAa,OAAO,MAAM,uBAAuB,GAAG,MAAM;GAC1D,YAAY,OAAO,MAAM,uBAAuB,GAAG,MAAM;GACzD,SAAS,OAAO,MAAM,8BAA8B,GAAG,MAAM;GAC9D;;AAGH,QAAO;;AAGT,SAAS,4BACP,OACA,oBAAoB,MACQ;CAC5B,IAAI,cAAc;CAClB,IAAI,aAAa;CACjB,IAAI,UAAU;CAEd,MAAM,eAAe,MAAM;AAE3B,KAAI,gBAAgB,aAAa,UAAU,EAEzC,MAAK,IAAI,IAAI,aAAa,SAAS,GAAG,KAAK,GAAG,KAAK;EACjD,MAAM,EAAC,MAAM,gBAAe,aAAa;AACzC,MAAI,CAAC,QAAQ,CAAC,YAAa;AAE3B,MAAI,SAAS,KACX,eAAc;WACL,SAAS,KAClB,cAAa;WACJ,SAAS,OAGlB,WAAU;AAGZ,MAAI,eAAe,cAAc,QAAS;;AAI9C,QAAO,eAAe,eAAe,oBAAoB,UAAU,QAC/D;EAAC;EAAa;EAAY;EAAQ,GAClC,KAAA"}
+{"version":3,"file":"tracking-utils.mjs","names":[],"sources":["../../src/tracking-utils.ts"],"sourcesContent":["/** Storefront API header for VisitToken */\nexport const SHOPIFY_VISIT_TOKEN_HEADER = 'X-Shopify-VisitToken';\n/** Storefront API header for UniqueToken */\nexport const SHOPIFY_UNIQUE_TOKEN_HEADER = 'X-Shopify-UniqueToken';\n\ntype TrackingValues = {\n  /** Identifier for the unique user. Equivalent to the deprecated _shopify_y cookie */\n  uniqueToken: string;\n  /** Identifier for the current visit. Equivalent to the deprecated _shopify_s cookie */\n  visitToken: string;\n  /** Represents the consent given by the user or the default region consent configured in Admin */\n  consent: string;\n};\n\n// Keep the consent-tracking-api token interface out of Hydrogen's public\n// global types since it could change in the future.\ntype CustomerPrivacyWithTracking = {\n  config?: {asyncConsent?: boolean};\n  cachedConsent?: string;\n  __internal?: {\n    uniqueToken?: (options?: {\n      generateFallback?: boolean;\n      tag?: string;\n    }) => string | undefined;\n    visitToken?: (options?: {\n      generateFallback?: boolean;\n      tag?: string;\n    }) => string | undefined;\n  };\n};\n\n/**\n * Retrieves user session tracking values for analytics and marketing from the\n * browser environment. Customer Privacy API token readers are authoritative\n * when available, including when consent denies tracking. Deprecated\n * `_shopify_y`/`_shopify_s` cookies are read only without an API token reader.\n * Consent comes from CTA's cache or the legacy `_tracking_consent` cookie.\n * @publicDocs\n */\nexport function getTrackingValues(): TrackingValues {\n  const cookie =\n    // Read from arguments to avoid declaring parameters in this function signature.\n    // This logic is only used internally from `getShopifyCookies` and will be deprecated.\n    typeof arguments[0] === 'string'\n      ? arguments[0]\n      : typeof document !== 'undefined'\n        ? document.cookie\n        : '';\n\n  const customerPrivacy =\n    typeof window === 'undefined'\n      ? undefined\n      : (window as {Shopify?: {customerPrivacy?: CustomerPrivacyWithTracking}})\n          .Shopify?.customerPrivacy;\n\n  const internal = customerPrivacy?.__internal;\n  // Async consent owns initialization and suppresses fallback generation until\n  // it is loaded. Afterwards CTA can refresh expired tokens, as in preview.\n  // Standalone hydrogen-react's explicit consent fetch keeps its previous policy.\n  const tokenOptions = {\n    generateFallback: customerPrivacy?.config?.asyncConsent === true,\n    tag: 'hydrogen:classic',\n  };\n\n  return {\n    // An installed CTA reader is authoritative, including undefined on denial.\n    // Falling through to a legacy cookie could restore a disallowed token.\n    uniqueToken: internal?.uniqueToken\n      ? (internal.uniqueToken(tokenOptions) ?? '')\n      : (cookie.match(/\\b_shopify_y=([^;]+)/)?.[1] ?? ''),\n    visitToken: internal?.visitToken\n      ? (internal.visitToken(tokenOptions) ?? '')\n      : (cookie.match(/\\b_shopify_s=([^;]+)/)?.[1] ?? ''),\n    consent:\n      customerPrivacy?.cachedConsent ??\n      cookie.match(/\\b_tracking_consent=([^;]+)/)?.[1] ??\n      '',\n  };\n}\n"],"mappings":";;AACA,IAAa,6BAA6B;;AAE1C,IAAa,8BAA8B;;;;;;;;;AAoC3C,SAAgB,oBAAoC;CAClD,MAAM,SAGJ,OAAO,UAAU,OAAO,WACpB,UAAU,KACV,OAAO,aAAa,cAClB,SAAS,SACT;CAER,MAAM,kBACJ,OAAO,WAAW,cACd,KAAA,IACC,OACE,SAAS;CAElB,MAAM,WAAW,iBAAiB;CAIlC,MAAM,eAAe;EACnB,kBAAkB,iBAAiB,QAAQ,iBAAiB;EAC5D,KAAK;EACN;AAED,QAAO;EAGL,aAAa,UAAU,cAClB,SAAS,YAAY,aAAa,IAAI,KACtC,OAAO,MAAM,uBAAuB,GAAG,MAAM;EAClD,YAAY,UAAU,aACjB,SAAS,WAAW,aAAa,IAAI,KACrC,OAAO,MAAM,uBAAuB,GAAG,MAAM;EAClD,SACE,iBAAiB,iBACjB,OAAO,MAAM,8BAA8B,GAAG,MAC9C;EACH"}

package/dist/node-dev/useShopifyCookies.js

@@ -1,85 +1,50 @@
 require("./_virtual/_rolldown/runtime.js");
-const require_cart_constants = require("./cart-constants.js");
 const require_tracking_utils = require("./tracking-utils.js");
-const require_cookies_utils = require("./cookies-utils.js");
 let react = require("react");
-let worktop_cookie = require("worktop/cookie");
 //#region src/useShopifyCookies.tsx
-var longTermLength = 3600 * 24 * 360 * 1;
-var shortTermLength = 1800;
+var CONSENT_MANAGEMENT_MARKER_HEADER = "Shopify-Storefront-Consent-Management";
 /**
-* Sets the `shopify_y` and `shopify_s` cookies in the browser based on user consent
-* for backward compatibility support.
+* Optionally refreshes backend-managed cookies for standalone integrations.
+* The Customer Privacy API owns tracking values and legacy cookie expiration.
 *
-* If `fetchTrackingValues` is true, it makes a request to Storefront API
-* to fetch or refresh Shopiy analytics and marketing cookies and tracking values.
-* Generally speaking, this should only be needed if you're not using Hydrogen's
-* built-in analytics components and hooks that already handle this automatically.
-* For example, set it to `true` if you are using `hydrogen-react` only with
-* a different framework and still need to make a same-domain request to
-* Storefront API to set cookies.
+* If `fetchTrackingValues` is true, this sends a consent request through the
+* Storefront API proxy, retrying against `checkoutDomain` if provided. Hydrogen's
+* built-in analytics already delegates consent initialization to the Customer
+* Privacy API and does not use this hook.
 *
-* If `ignoreDeprecatedCookies` is true, it skips setting the deprecated cookies entirely.
-* Useful when you only want to use the newer tracking values and not rely on the deprecated ones.
-*
-* @returns `true` when cookies are set and ready.
+* @returns `true` when the consent request has settled and cookies are ready.
 * @publicDocs
 */
 function useShopifyCookies(options) {
-	const { hasUserConsent, domain = "", checkoutDomain = "", storefrontAccessToken, fetchTrackingValues, ignoreDeprecatedCookies = false } = options || {};
-	const coreCookiesReady = useCoreShopifyCookies({
-		storefrontAccessToken,
-		fetchTrackingValues,
-		checkoutDomain
-	});
+	const { checkoutDomain, storefrontAccessToken, fetchTrackingValues = false } = options ?? {};
+	const [cookiesReady, setCookiesReady] = (0, react.useState)(!fetchTrackingValues);
+	const hasFetchedTrackingValues = (0, react.useRef)(false);
 	(0, react.useEffect)(() => {
-		if (ignoreDeprecatedCookies || !coreCookiesReady) return;
-		/**
-		* Setting cookie with domain
-		*
-		* If no domain is provided, the cookie will be set for the current host.
-		* For Shopify, we need to ensure this domain is set with a leading dot.
-		*/
-		let currentDomain = domain || window.location.host;
-		if (checkoutDomain) {
-			const checkoutDomainParts = checkoutDomain.split(".").reverse();
-			const currentDomainParts = currentDomain.split(".").reverse();
-			const sameDomainParts = [];
-			checkoutDomainParts.forEach((part, index) => {
-				if (part === currentDomainParts[index]) sameDomainParts.push(part);
-			});
-			currentDomain = sameDomainParts.reverse().join(".");
-		}
-		if (/^localhost/.test(currentDomain)) currentDomain = "";
-		const domainWithLeadingDot = currentDomain ? /^\./.test(currentDomain) ? currentDomain : `.${currentDomain}` : "";
-		/**
-		* Set user and session cookies and refresh the expiry time
-		*/
-		if (hasUserConsent) {
-			const trackingValues = require_tracking_utils.getTrackingValues();
-			if ((trackingValues.uniqueToken || trackingValues.visitToken || "").startsWith("00000000-")) return;
-			setCookie(require_cart_constants.SHOPIFY_Y, trackingValues.uniqueToken || require_cookies_utils.buildUUID(), longTermLength, domainWithLeadingDot);
-			setCookie(require_cart_constants.SHOPIFY_S, trackingValues.visitToken || require_cookies_utils.buildUUID(), shortTermLength, domainWithLeadingDot);
-		} else {
-			setCookie(require_cart_constants.SHOPIFY_Y, "", 0, domainWithLeadingDot);
-			setCookie(require_cart_constants.SHOPIFY_S, "", 0, domainWithLeadingDot);
+		if (!fetchTrackingValues) {
+			setCookiesReady(true);
+			return;
 		}
+		if (hasFetchedTrackingValues.current) return;
+		hasFetchedTrackingValues.current = true;
+		const fetchConsentValues = async () => {
+			try {
+				return await fetchTrackingValuesFromBrowser(storefrontAccessToken);
+			} catch (sameOriginError) {
+				if (!checkoutDomain) throw sameOriginError;
+				return fetchTrackingValuesFromBrowser(storefrontAccessToken, checkoutDomain);
+			}
+		};
+		fetchConsentValues().catch((error) => {
+			console.warn("[h2:warn:useShopifyCookies] Failed to fetch tracking values from browser: " + (error instanceof Error ? error.message : String(error)));
+		}).finally(() => {
+			setCookiesReady(true);
+		});
 	}, [
-		coreCookiesReady,
-		hasUserConsent,
-		domain,
 		checkoutDomain,
-		ignoreDeprecatedCookies
+		fetchTrackingValues,
+		storefrontAccessToken
 	]);
-	return coreCookiesReady;
-}
-function setCookie(name, value, maxage, domain) {
-	document.cookie = (0, worktop_cookie.stringify)(name, value, {
-		maxage,
-		domain,
-		samesite: "Lax",
-		path: "/"
-	});
+	return cookiesReady;
 }
 async function fetchTrackingValuesFromBrowser(storefrontAccessToken, storefrontApiDomain = "") {
 	const { uniqueToken, visitToken } = require_tracking_utils.getTrackingValues();
@@ -88,43 +53,15 @@ async function fetchTrackingValuesFromBrowser(storefrontAccessToken, storefrontA
 		headers: {
 			"Content-Type": "application/json",
 			...storefrontAccessToken && { "X-Shopify-Storefront-Access-Token": storefrontAccessToken },
+			...storefrontApiDomain ? void 0 : { [CONSENT_MANAGEMENT_MARKER_HEADER]: "1" },
 			...visitToken || uniqueToken ? {
 				[require_tracking_utils.SHOPIFY_VISIT_TOKEN_HEADER]: visitToken,
 				[require_tracking_utils.SHOPIFY_UNIQUE_TOKEN_HEADER]: uniqueToken
 			} : void 0
 		},
-		body: JSON.stringify({ query: "query ensureCookies { consentManagement { cookies(visitorConsent:{}) { cookieDomain } } }" })
+		body: JSON.stringify({ query: "query ensureCookies { consentManagement { cookies(visitorConsent:{}) { trackingConsentCookie cookieDomain shopifyUnique shopifyVisit } } }" })
 	});
 	if (!response.ok) throw new Error(`Failed to fetch consent from browser: ${response.status} ${response.statusText}`);
-	await response.json();
-	require_tracking_utils.getTrackingValues();
-}
-/**
-* Gets http-only cookies from Storefront API via same-origin fetch request.
-* Falls back to checkout domain if provided to at least obtain the tracking
-* values via server-timing headers.
-*/
-function useCoreShopifyCookies({ checkoutDomain, storefrontAccessToken, fetchTrackingValues = false }) {
-	const [cookiesReady, setCookiesReady] = (0, react.useState)(!fetchTrackingValues);
-	const hasFetchedTrackingValues = (0, react.useRef)(false);
-	(0, react.useEffect)(() => {
-		if (!fetchTrackingValues) {
-			setCookiesReady(true);
-			return;
-		}
-		if (hasFetchedTrackingValues.current) return;
-		hasFetchedTrackingValues.current = true;
-		fetchTrackingValuesFromBrowser(storefrontAccessToken).catch((error) => checkoutDomain ? fetchTrackingValuesFromBrowser(storefrontAccessToken, checkoutDomain) : Promise.reject(error)).catch((error) => {
-			console.warn("[h2:warn:useShopifyCookies] Failed to fetch tracking values from browser: " + (error instanceof Error ? error.message : String(error)));
-		}).finally(() => {
-			setCookiesReady(true);
-		});
-	}, [
-		checkoutDomain,
-		fetchTrackingValues,
-		storefrontAccessToken
-	]);
-	return cookiesReady;
 }
 //#endregion
 exports.useShopifyCookies = useShopifyCookies;