@shopify/hydrogen 2026.10.0-preview.4 → 2026.10.0

package/dist/customer-account/client.mjs

@@ -15,16 +15,12 @@ const LOCAL_ORIGIN_HOSTS = new Set([
 	"::1",
 	"[::1]"
 ]);
-const USER_AGENT = `Hydrogen 2026.10.0-preview.4`;
+const USER_AGENT = `Hydrogen 2026.10.0`;
 const CUSTOMER_ACCOUNT_GRAPHQL_PERSONALIZATION_REASON = "customer-account-graphql";
 /**
-* Creates a server-only {@link CustomerAccountClient} for the Shopify Customer
-* Account API.
+* Creates a client that sends Customer Account API requests from your server. Create the client with the current request's context.
 *
-* Validates `shopId`, `customerApiVersion`, and `defaultTimeoutInMs` at
-* construction time. The returned client auto-injects the `language` variable
-* from `requestContext.i18n.language` when applicable, composes abort signals,
-* and marks responses as personalized (sets `private, no-store` cache headers).
+* The function throws when the shop ID, API version, or timeout is invalid, when the request context has no HTTPS URL, when no fetch implementation is available, and when the function runs in a browser.
 *
 * @example
 * ```ts
@@ -41,7 +37,10 @@ const CUSTOMER_ACCOUNT_GRAPHQL_PERSONALIZATION_REASON = "customer-account-graphq
 * );
 * ```
 *
-* @throws {Error} When called in a browser context, when `shopId`, `customerApiVersion`, or `defaultTimeoutInMs` is invalid, when no `fetch` is available, or when `requestContext.url` is missing or not HTTPS.
+* @param options - The shop ID, the API version, the request context, a custom fetch, and the request timeout.
+* @returns A client with the GraphQL endpoint URL and a `graphql()` method for Customer Account API requests.
+* @throws {Error} When called in a browser, when the shop ID, API version, or timeout is invalid, when no fetch is available, or when the request context URL is missing or not HTTPS.
+* @publicDocs
 */
 function createCustomerAccountClient({ shopId, customerApiVersion = CUSTOMER_ACCOUNT_API_VERSION, requestContext, fetch: customFetch, defaultTimeoutInMs = DEFAULT_TIMEOUT_IN_MS }) {
 	if (typeof document !== "undefined") throw new Error("Customer Account API tokens cannot be used in a browser context. Use this client from server or edge routes only.");

package/dist/customer-account/client.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"client.mjs","names":[],"sources":["../../src/customer-account/client.ts"],"sourcesContent":["import type { GraphQLFormattedError } from \"../client/types\";\nimport { CUSTOMER_ACCOUNT_API_VERSION, DEFAULT_TIMEOUT_IN_MS } from \"../core/constants\";\nimport type { ShopifyRequestContext } from \"../core/request-context\";\nimport { isObjectRecord } from \"../core/utils/record\";\nimport {\n  CustomerAccountApiError,\n  CustomerAccountAuthenticationError,\n  CustomerAccountTimeoutError,\n} from \"./errors\";\nimport {\n  assertCustomerAccountDocument,\n  type AnyCustomerAccountDocument,\n  type CustomerAccountDocument,\n} from \"./graphql\";\n\nconst SHOP_ID_RE = /^\\d+$/;\nconst CUSTOMER_API_VERSION_RE = /^\\d{4}-\\d{2}$/;\nconst MAX_ASCII_CONTROL_CODE_POINT = 31;\nconst ASCII_DELETE_CODE_POINT = 127;\nconst MAX_SET_TIMEOUT_IN_MS = 2_147_483_647;\nconst LOCAL_ORIGIN_HOSTS = new Set([\"localhost\", \"127.0.0.1\", \"::1\", \"[::1]\"]);\nconst USER_AGENT = `Hydrogen ${__HYDROGEN_VERSION__}`;\nconst CUSTOMER_ACCOUNT_GRAPHQL_PERSONALIZATION_REASON = \"customer-account-graphql\";\n\ntype AccessToken = string | null | undefined;\ntype FetchCustomerAccountGraphqlParams = {\n  fetch: typeof globalThis.fetch;\n  apiUrl: string;\n  accessToken: string;\n  origin: string;\n  query: string;\n  variables: Record<string, unknown>;\n  signal: AbortSignal;\n  timeoutSignal: AbortSignal;\n  timeoutInMs: number;\n};\n\n/**\n * Options for {@link createCustomerAccountClient}.\n *\n * The client validates `shopId`, `customerApiVersion`, and `defaultTimeoutInMs`\n * at construction time and throws synchronously on invalid values.\n */\nexport type CreateCustomerAccountClientOptions = {\n  /** Numeric Shopify shop ID as a string (e.g. `\"12345\"`). Validated against `/^\\d+$/`. */\n  shopId: string;\n  /**\n   * Customer Account API version in `YYYY-MM` format.\n   * Defaults to {@link CUSTOMER_ACCOUNT_API_VERSION}.\n   */\n  customerApiVersion?: string;\n  /**\n   * Request-scoped context created by `createShopifyRequestContext`. Must\n   * have a `url` property (throws at construction when missing or non-HTTPS;\n   * `http://localhost`, `127.0.0.1` and `::1` are accepted and sent as\n   * HTTPS). Supplies the i18n language for automatic `$language` variable\n   * injection, an abort signal that propagates request cancellation, and a\n   * personalization marker (sets `private, no-store` and removes CDN cache\n   * headers).\n   */\n  requestContext: ShopifyRequestContext;\n  /** Custom `fetch` implementation. Falls back to `globalThis.fetch`. */\n  fetch?: typeof globalThis.fetch;\n  /**\n   * Per-request timeout in milliseconds. Must be a positive safe integer no\n   * greater than 2,147,483,647. Defaults to 30,000 ms.\n   */\n  defaultTimeoutInMs?: number;\n};\n\n/**\n * Per-call options passed to {@link CustomerAccountClient.graphql}.\n * See `variables` for automatic `$language` injection.\n */\nexport type CustomerAccountGraphqlOptions<Variables = Record<string, unknown>> = {\n  /** Customer Account API access token, e.g. from `CustomerSession.getAccessToken()` or `getOrRefreshAccessToken()`. */\n  accessToken: string;\n  /**\n   * Query variables. When the GraphQL document declares a `$language` variable\n   * and you omit it here, the client injects it automatically from\n   * `requestContext.i18n.language`.\n   */\n  variables?: Variables;\n  /**\n   * Optional abort signal. Combined with the request context signal and the\n   * per-request timeout signal via `AbortSignal.any`, so cancellation from any\n   * source stops the request.\n   */\n  signal?: AbortSignal;\n};\n\ntype ResultOfDoc<Doc> =\n  Doc extends CustomerAccountDocument<infer Result, never, string> ? Result : never;\ntype VariablesOfDoc<Doc> =\n  Doc extends CustomerAccountDocument<unknown, infer Variables, string> ? Variables : never;\ntype OptionalAutoVariables<Variables> = \"language\" extends keyof Variables\n  ? { language?: Variables[\"language\"] }\n  : {};\ntype UserVariables<Doc> = Omit<VariablesOfDoc<Doc>, \"language\"> &\n  OptionalAutoVariables<VariablesOfDoc<Doc>>;\ntype HasNoRequiredKeys<T> = Record<string, never> extends T ? true : false;\n\n/**\n * Discriminated union returned by {@link CustomerAccountClient.graphql}.\n *\n * Discriminate on the presence of `errors`, not via `Partial`:\n *\n * - **Success:** `data` is always present, `errors` is `undefined`.\n * - **Partial or error:** `errors` is a non-empty array of\n *   {@link GraphQLFormattedError}, and `data` may be `null`.\n *\n * Both arms expose the raw response `headers` for inspecting\n * `x-request-id` or rate-limit metadata.\n */\nexport type CustomerAccountGraphqlResult<Result = unknown> =\n  | { data: Result; errors?: undefined; headers: Headers }\n  | { data: Result | null; errors: GraphQLFormattedError[]; headers: Headers };\n\n/**\n * Conditional rest parameter for {@link CustomerAccountClient.graphql}.\n *\n * When the document has no required user variables (after `language` is\n * excluded from the requirement), `options.variables` is optional. When the\n * document declares required variables, the type forces the caller to supply\n * them, turning a missing-variables bug into a compile error.\n */\nexport type CustomerAccountGqlRestParam<Doc extends AnyCustomerAccountDocument> =\n  HasNoRequiredKeys<UserVariables<Doc>> extends true\n    ? [options: CustomerAccountGraphqlOptions<UserVariables<Doc>>]\n    : [\n        options: CustomerAccountGraphqlOptions<UserVariables<Doc>> & {\n          variables: UserVariables<Doc>;\n        },\n      ];\n\n/**\n * A server-side GraphQL client for the Shopify Customer Account API.\n *\n * Created by {@link createCustomerAccountClient}. Each call to `graphql()`\n * validates that the document was produced by `gql()` (runtime branded with a\n * private Symbol), validates the access token, auto-injects the `language`\n * variable from i18n context when applicable, and marks the response as\n * personalized so the app response is sent with private, no-store cache headers.\n */\nexport type CustomerAccountClient = {\n  /** Constructed endpoint: `https://shopify.com/{shopId}/account/customer/api/{version}/graphql`. */\n  readonly apiUrl: string;\n  /**\n   * Send a GraphQL request to the Customer Account API.\n   *\n   * The document must be created by `gql()`. At call time the client:\n   * 1. Validates the document brand and options object.\n   * 2. Marks the response as personalized (sets `private, no-store`).\n   * 3. Validates the access token.\n   * 4. Throws if a signal is already aborted.\n   * 5. Combines the request context signal, the caller's signal, and a timeout\n   *    signal via `AbortSignal.any`.\n   * 6. Auto-injects the `language` variable from `requestContext.i18n.language`\n   *    when the document declares `$language` and the caller omits it.\n   *\n   * @throws {TypeError} When the document is not a branded `gql()` result.\n   * @throws {CustomerAccountAuthenticationError} When the access token fails pre-flight validation.\n   * @throws {CustomerAccountTimeoutError} When the request exceeds `defaultTimeoutInMs`.\n   * @throws {CustomerAccountApiError} On non-OK HTTP status, unparseable JSON, or missing `data`.\n   *\n   * @example\n   * ```ts\n   * const result = await client.graphql(\n   *   gql(`query { customer { firstName lastName } }`),\n   *   { accessToken },\n   * );\n   *\n   * if (result.errors) {\n   *   console.error(result.errors);\n   * } else {\n   *   console.log(result.data.customer.firstName);\n   * }\n   * ```\n   */\n  graphql: <const Doc extends AnyCustomerAccountDocument>(\n    document: Doc,\n    ...options: CustomerAccountGqlRestParam<Doc>\n  ) => Promise<CustomerAccountGraphqlResult<ResultOfDoc<Doc>>>;\n};\n\n/**\n * Creates a server-only {@link CustomerAccountClient} for the Shopify Customer\n * Account API.\n *\n * Validates `shopId`, `customerApiVersion`, and `defaultTimeoutInMs` at\n * construction time. The returned client auto-injects the `language` variable\n * from `requestContext.i18n.language` when applicable, composes abort signals,\n * and marks responses as personalized (sets `private, no-store` cache headers).\n *\n * @example\n * ```ts\n * import { createCustomerAccountClient, gql } from \"@shopify/hydrogen/customer-account\";\n *\n * const customerAccount = createCustomerAccountClient({\n *   shopId: \"12345\",\n *   requestContext,\n * });\n *\n * const { data } = await customerAccount.graphql(\n *   gql(`query { customer { firstName } }`),\n *   { accessToken },\n * );\n * ```\n *\n * @throws {Error} When called in a browser context, when `shopId`, `customerApiVersion`, or `defaultTimeoutInMs` is invalid, when no `fetch` is available, or when `requestContext.url` is missing or not HTTPS.\n */\nexport function createCustomerAccountClient({\n  shopId,\n  customerApiVersion = CUSTOMER_ACCOUNT_API_VERSION,\n  requestContext,\n  fetch: customFetch,\n  defaultTimeoutInMs = DEFAULT_TIMEOUT_IN_MS,\n}: CreateCustomerAccountClientOptions): CustomerAccountClient {\n  if (typeof document !== \"undefined\") {\n    throw new Error(\n      \"Customer Account API tokens cannot be used in a browser context. Use this client from server or edge routes only.\",\n    );\n  }\n\n  validateShopId(shopId);\n  validateCustomerApiVersion(customerApiVersion);\n  validateTimeout(defaultTimeoutInMs);\n\n  const resolvedFetch = customFetch ?? globalThis.fetch;\n  if (typeof resolvedFetch !== \"function\") {\n    throw new Error(\n      \"No fetch function available. Pass a fetch option or ensure globalThis.fetch exists.\",\n    );\n  }\n\n  const origin = getOrigin(requestContext.url);\n  const apiUrl = `https://shopify.com/${shopId}/account/customer/api/${customerApiVersion}/graphql`;\n\n  async function graphql<const Doc extends AnyCustomerAccountDocument>(\n    document: Doc,\n    ...rest: CustomerAccountGqlRestParam<Doc>\n  ): Promise<CustomerAccountGraphqlResult<ResultOfDoc<Doc>>>;\n  async function graphql(\n    document: AnyCustomerAccountDocument,\n    ...rest: [options?: CustomerAccountGraphqlOptions<unknown>]\n  ): Promise<CustomerAccountGraphqlResult<unknown>> {\n    assertCustomerAccountDocument(document);\n    const options = validateGraphqlOptions(rest[0]);\n    requestContext.markResponseAsPersonalized(CUSTOMER_ACCOUNT_GRAPHQL_PERSONALIZATION_REASON);\n    const accessToken = validateAccessToken(options.accessToken);\n    const externalSignals = [requestContext.signal, options.signal].filter(\n      (signal): signal is AbortSignal => Boolean(signal),\n    );\n    throwIfAlreadyAborted(externalSignals);\n\n    const { signal: timeoutSignal, cleanup: cleanupTimeout } =\n      createCustomerAccountTimeoutSignal(defaultTimeoutInMs);\n    externalSignals.push(timeoutSignal);\n    const signal = AbortSignal.any(externalSignals);\n\n    try {\n      const variables = getVariables(\n        document,\n        getOptionalVariables(options.variables),\n        requestContext.i18n.language,\n      );\n      const response = await fetchCustomerAccountGraphql({\n        fetch: resolvedFetch,\n        apiUrl,\n        accessToken,\n        origin,\n        query: document.source,\n        variables,\n        signal,\n        timeoutSignal,\n        timeoutInMs: defaultTimeoutInMs,\n      });\n\n      return await readCustomerAccountGraphqlResponse(\n        response,\n        signal,\n        timeoutSignal,\n        defaultTimeoutInMs,\n      );\n    } finally {\n      cleanupTimeout();\n    }\n  }\n\n  return { apiUrl, graphql };\n}\n\nasync function fetchCustomerAccountGraphql({\n  fetch,\n  apiUrl,\n  accessToken,\n  origin,\n  query,\n  variables,\n  signal,\n  timeoutSignal,\n  timeoutInMs,\n}: FetchCustomerAccountGraphqlParams): Promise<Response> {\n  try {\n    return await withAbort(\n      fetch(apiUrl, {\n        method: \"POST\",\n        headers: new Headers({\n          Authorization: accessToken,\n          \"Content-Type\": \"application/json\",\n          Origin: origin,\n          \"User-Agent\": USER_AGENT,\n        }),\n        body: JSON.stringify({ query, variables }),\n        cache: \"no-store\",\n        redirect: \"manual\",\n        signal,\n      }),\n      signal,\n    );\n  } catch (cause) {\n    throwIfCustomerAccountSignalAborted(signal, timeoutSignal, timeoutInMs);\n    if (isAbortError(cause)) throw cause;\n    throw new CustomerAccountApiError(\"Customer Account API request failed\", { cause });\n  }\n}\n\nasync function readCustomerAccountGraphqlResponse(\n  response: Response,\n  signal: AbortSignal,\n  timeoutSignal: AbortSignal,\n  timeoutInMs: number,\n): Promise<CustomerAccountGraphqlResult<unknown>> {\n  const requestId = response.headers.get(\"x-request-id\") ?? undefined;\n  if (!response.ok) {\n    cancelResponseBody(response);\n    throw new CustomerAccountApiError(`Customer Account API responded with ${response.status}`, {\n      status: response.status,\n      requestId,\n      retryAfter: response.headers.get(\"retry-after\") ?? undefined,\n    });\n  }\n\n  let body: { data?: unknown; errors?: GraphQLFormattedError[] };\n  try {\n    body = parseGraphqlResponse(await withAbort(response.json(), signal));\n  } catch (cause) {\n    cancelResponseBody(response);\n\n    throwIfCustomerAccountSignalAborted(signal, timeoutSignal, timeoutInMs);\n    if (isAbortError(cause)) throw cause;\n    throw new CustomerAccountApiError(\"Failed to parse Customer Account API response as JSON\", {\n      status: response.status,\n      requestId,\n      cause,\n    });\n  }\n\n  if (body.errors) {\n    return { data: body.data ?? null, errors: body.errors, headers: response.headers };\n  }\n\n  if (body.data == null) {\n    throw new CustomerAccountApiError(\"Customer Account API response did not include data\", {\n      status: response.status,\n      requestId,\n    });\n  }\n\n  return { data: body.data, headers: response.headers };\n}\n\nfunction cancelResponseBody(response: Response): void {\n  try {\n    void response.body?.cancel().catch(() => undefined);\n  } catch {}\n}\n\nfunction validateTimeout(timeoutInMs: number): void {\n  if (\n    !Number.isSafeInteger(timeoutInMs) ||\n    timeoutInMs <= 0 ||\n    timeoutInMs > MAX_SET_TIMEOUT_IN_MS\n  ) {\n    throw new Error(\n      `defaultTimeoutInMs must be a positive safe integer no greater than ${MAX_SET_TIMEOUT_IN_MS}`,\n    );\n  }\n}\n\nfunction createCustomerAccountTimeoutSignal(timeoutInMs: number): {\n  signal: AbortSignal;\n  cleanup: () => void;\n} {\n  const controller = new AbortController();\n  const timeoutId = setTimeout(() => {\n    controller.abort(new CustomerAccountTimeoutError(timeoutInMs));\n  }, timeoutInMs);\n\n  return { signal: controller.signal, cleanup: () => clearTimeout(timeoutId) };\n}\n\nfunction withAbort<T>(promise: T | Promise<T>, signal: AbortSignal | undefined): Promise<T> {\n  if (!signal) return Promise.resolve(promise);\n  if (signal.aborted) {\n    return Promise.reject(\n      signal.reason ?? new DOMException(\"signal is aborted without reason\", \"AbortError\"),\n    );\n  }\n\n  return new Promise<T>((resolve, reject) => {\n    const abort = () => {\n      signal.removeEventListener(\"abort\", abort);\n      const reason =\n        signal.reason ?? new DOMException(\"signal is aborted without reason\", \"AbortError\");\n      reject(reason);\n    };\n    signal.addEventListener(\"abort\", abort, { once: true });\n    Promise.resolve(promise).then(\n      (value) => {\n        signal.removeEventListener(\"abort\", abort);\n        resolve(value);\n      },\n      (error) => {\n        signal.removeEventListener(\"abort\", abort);\n        reject(error);\n      },\n    );\n  });\n}\n\nfunction getVariables(\n  document: { variableNames: ReadonlySet<string> },\n  variables: Record<string, unknown>,\n  language: ShopifyRequestContext[\"i18n\"][\"language\"],\n): Record<string, unknown> {\n  if (!document.variableNames.has(\"language\")) return variables;\n  if (\"language\" in variables) return variables;\n  return { ...variables, language };\n}\n\nfunction throwIfAlreadyAborted(signals: AbortSignal[]): void {\n  const abortedSignal = signals.find((signal) => signal.aborted);\n  if (!abortedSignal) return;\n  throw abortedSignal.reason ?? new DOMException(\"signal is aborted without reason\", \"AbortError\");\n}\n\nfunction throwIfCustomerAccountSignalAborted(\n  signal: AbortSignal,\n  timeoutSignal: AbortSignal,\n  timeoutInMs: number,\n): void {\n  if (!signal.aborted) return;\n  if (timeoutSignal.aborted && signal.reason === timeoutSignal.reason) {\n    const reason = timeoutSignal.reason;\n    throw reason instanceof CustomerAccountTimeoutError\n      ? reason\n      : new CustomerAccountTimeoutError(timeoutInMs);\n  }\n  throw signal.reason ?? new DOMException(\"signal is aborted without reason\", \"AbortError\");\n}\n\nfunction isAbortError(cause: unknown): cause is DOMException {\n  return cause instanceof DOMException && cause.name === \"AbortError\";\n}\n\nfunction parseGraphqlResponse(json: unknown): {\n  data?: unknown;\n  errors?: GraphQLFormattedError[];\n} {\n  if (!isObjectRecord(json)) {\n    throw new Error(\"Customer Account API returned unexpected JSON type\");\n  }\n\n  if (!(\"data\" in json) && !(\"errors\" in json)) {\n    throw new Error(\"Customer Account API response must include data or errors\");\n  }\n  const errors = json.errors;\n  if (errors !== undefined && !isGraphqlErrorArray(errors)) {\n    throw new Error(\"Customer Account API returned invalid GraphQL errors\");\n  }\n  return { data: json.data, errors };\n}\n\nfunction isGraphqlErrorArray(value: unknown): value is GraphQLFormattedError[] {\n  if (!Array.isArray(value)) return false;\n  return value.every((error) => {\n    return typeof error === \"object\" && error !== null && typeof error.message === \"string\";\n  });\n}\n\nfunction validateShopId(shopId: string): void {\n  if (!SHOP_ID_RE.test(shopId)) {\n    throw new Error(\"shopId must be a numeric Shopify shop ID string\");\n  }\n}\n\nfunction validateCustomerApiVersion(customerApiVersion: string): void {\n  if (!CUSTOMER_API_VERSION_RE.test(customerApiVersion)) {\n    throw new Error(\"customerApiVersion must use YYYY-MM format\");\n  }\n}\n\nfunction validateAccessToken(accessToken: AccessToken): string {\n  if (\n    typeof accessToken !== \"string\" ||\n    accessToken === \"\" ||\n    accessToken.trim() !== accessToken ||\n    hasAsciiControlCharacter(accessToken)\n  ) {\n    throw new CustomerAccountAuthenticationError();\n  }\n  return accessToken;\n}\n\nfunction validateGraphqlOptions(\n  options: CustomerAccountGraphqlOptions<unknown> | undefined,\n): CustomerAccountGraphqlOptions<unknown> {\n  if (typeof options !== \"object\" || options === null) {\n    throw new CustomerAccountAuthenticationError();\n  }\n  return options;\n}\n\nfunction getOptionalVariables(variables: unknown): Record<string, unknown> {\n  if (variables === undefined) return {};\n  if (!isObjectRecord(variables)) {\n    throw new TypeError(\"Customer Account API variables must be an object\");\n  }\n  return variables;\n}\n\nfunction hasAsciiControlCharacter(value: string): boolean {\n  for (let index = 0; index < value.length; index++) {\n    const codePoint = value.charCodeAt(index);\n    if (codePoint <= MAX_ASCII_CONTROL_CODE_POINT || codePoint === ASCII_DELETE_CODE_POINT) {\n      return true;\n    }\n  }\n  return false;\n}\n\n/**\n * Customer Account API requires an HTTPS Origin, but local dev frameworks often\n * receive `http://localhost` requests. Keep that local-only exception without\n * weakening origin validation for non-local requests.\n */\nfunction getOrigin(requestUrl: string | undefined): string {\n  if (!requestUrl) {\n    throw new Error(\"requestContext.url is required for Customer Account API requests\");\n  }\n\n  const url = new URL(requestUrl);\n  if (url.protocol === \"https:\") return url.origin;\n  if (url.protocol === \"http:\" && LOCAL_ORIGIN_HOSTS.has(url.hostname)) {\n    return `https://${url.host}`;\n  }\n  throw new Error(`Customer Account API origin must use HTTPS. Received: ${requestUrl}`);\n}\n"],"mappings":";;;;;;AAeA,MAAM,aAAa;AACnB,MAAM,0BAA0B;AAChC,MAAM,+BAA+B;AACrC,MAAM,0BAA0B;AAChC,MAAM,wBAAwB;AAC9B,MAAM,qBAAqB,IAAI,IAAI;CAAC;CAAa;CAAa;CAAO;CAAQ,CAAC;AAC9E,MAAM,aAAa;AACnB,MAAM,kDAAkD;;;;;;;;;;;;;;;;;;;;;;;;;;;AA6LxD,SAAgB,4BAA4B,EAC1C,QACA,qBAAqB,8BACrB,gBACA,OAAO,aACP,qBAAqB,yBACuC;AAC5D,KAAI,OAAO,aAAa,YACtB,OAAM,IAAI,MACR,oHACD;AAGH,gBAAe,OAAO;AACtB,4BAA2B,mBAAmB;AAC9C,iBAAgB,mBAAmB;CAEnC,MAAM,gBAAgB,eAAe,WAAW;AAChD,KAAI,OAAO,kBAAkB,WAC3B,OAAM,IAAI,MACR,sFACD;CAGH,MAAM,SAAS,UAAU,eAAe,IAAI;CAC5C,MAAM,SAAS,uBAAuB,OAAO,wBAAwB,mBAAmB;CAMxF,eAAe,QACb,UACA,GAAG,MAC6C;AAChD,gCAA8B,SAAS;EACvC,MAAM,UAAU,uBAAuB,KAAK,GAAG;AAC/C,iBAAe,2BAA2B,gDAAgD;EAC1F,MAAM,cAAc,oBAAoB,QAAQ,YAAY;EAC5D,MAAM,kBAAkB,CAAC,eAAe,QAAQ,QAAQ,OAAO,CAAC,QAC7D,WAAkC,QAAQ,OAAO,CACnD;AACD,wBAAsB,gBAAgB;EAEtC,MAAM,EAAE,QAAQ,eAAe,SAAS,mBACtC,mCAAmC,mBAAmB;AACxD,kBAAgB,KAAK,cAAc;EACnC,MAAM,SAAS,YAAY,IAAI,gBAAgB;AAE/C,MAAI;GACF,MAAM,YAAY,aAChB,UACA,qBAAqB,QAAQ,UAAU,EACvC,eAAe,KAAK,SACrB;AAaD,UAAO,MAAM,mCACX,MAbqB,4BAA4B;IACjD,OAAO;IACP;IACA;IACA;IACA,OAAO,SAAS;IAChB;IACA;IACA;IACA,aAAa;IACd,CAAC,EAIA,QACA,eACA,mBACD;YACO;AACR,mBAAgB;;;AAIpB,QAAO;EAAE;EAAQ;EAAS;;AAG5B,eAAe,4BAA4B,EACzC,OACA,QACA,aACA,QACA,OACA,WACA,QACA,eACA,eACuD;AACvD,KAAI;AACF,SAAO,MAAM,UACX,MAAM,QAAQ;GACZ,QAAQ;GACR,SAAS,IAAI,QAAQ;IACnB,eAAe;IACf,gBAAgB;IAChB,QAAQ;IACR,cAAc;IACf,CAAC;GACF,MAAM,KAAK,UAAU;IAAE;IAAO;IAAW,CAAC;GAC1C,OAAO;GACP,UAAU;GACV;GACD,CAAC,EACF,OACD;UACM,OAAO;AACd,sCAAoC,QAAQ,eAAe,YAAY;AACvE,MAAI,aAAa,MAAM,CAAE,OAAM;AAC/B,QAAM,IAAI,wBAAwB,uCAAuC,EAAE,OAAO,CAAC;;;AAIvF,eAAe,mCACb,UACA,QACA,eACA,aACgD;CAChD,MAAM,YAAY,SAAS,QAAQ,IAAI,eAAe,IAAI;AAC1D,KAAI,CAAC,SAAS,IAAI;AAChB,qBAAmB,SAAS;AAC5B,QAAM,IAAI,wBAAwB,uCAAuC,SAAS,UAAU;GAC1F,QAAQ,SAAS;GACjB;GACA,YAAY,SAAS,QAAQ,IAAI,cAAc,IAAI;GACpD,CAAC;;CAGJ,IAAI;AACJ,KAAI;AACF,SAAO,qBAAqB,MAAM,UAAU,SAAS,MAAM,EAAE,OAAO,CAAC;UAC9D,OAAO;AACd,qBAAmB,SAAS;AAE5B,sCAAoC,QAAQ,eAAe,YAAY;AACvE,MAAI,aAAa,MAAM,CAAE,OAAM;AAC/B,QAAM,IAAI,wBAAwB,yDAAyD;GACzF,QAAQ,SAAS;GACjB;GACA;GACD,CAAC;;AAGJ,KAAI,KAAK,OACP,QAAO;EAAE,MAAM,KAAK,QAAQ;EAAM,QAAQ,KAAK;EAAQ,SAAS,SAAS;EAAS;AAGpF,KAAI,KAAK,QAAQ,KACf,OAAM,IAAI,wBAAwB,sDAAsD;EACtF,QAAQ,SAAS;EACjB;EACD,CAAC;AAGJ,QAAO;EAAE,MAAM,KAAK;EAAM,SAAS,SAAS;EAAS;;AAGvD,SAAS,mBAAmB,UAA0B;AACpD,KAAI;AACF,EAAK,SAAS,MAAM,QAAQ,CAAC,YAAY,OAAU;SAC7C;;AAGV,SAAS,gBAAgB,aAA2B;AAClD,KACE,CAAC,OAAO,cAAc,YAAY,IAClC,eAAe,KACf,cAAc,sBAEd,OAAM,IAAI,MACR,sEAAsE,wBACvE;;AAIL,SAAS,mCAAmC,aAG1C;CACA,MAAM,aAAa,IAAI,iBAAiB;CACxC,MAAM,YAAY,iBAAiB;AACjC,aAAW,MAAM,IAAI,4BAA4B,YAAY,CAAC;IAC7D,YAAY;AAEf,QAAO;EAAE,QAAQ,WAAW;EAAQ,eAAe,aAAa,UAAU;EAAE;;AAG9E,SAAS,UAAa,SAAyB,QAA6C;AAC1F,KAAI,CAAC,OAAQ,QAAO,QAAQ,QAAQ,QAAQ;AAC5C,KAAI,OAAO,QACT,QAAO,QAAQ,OACb,OAAO,UAAU,IAAI,aAAa,oCAAoC,aAAa,CACpF;AAGH,QAAO,IAAI,SAAY,SAAS,WAAW;EACzC,MAAM,cAAc;AAClB,UAAO,oBAAoB,SAAS,MAAM;AAG1C,UADE,OAAO,UAAU,IAAI,aAAa,oCAAoC,aAAa,CACvE;;AAEhB,SAAO,iBAAiB,SAAS,OAAO,EAAE,MAAM,MAAM,CAAC;AACvD,UAAQ,QAAQ,QAAQ,CAAC,MACtB,UAAU;AACT,UAAO,oBAAoB,SAAS,MAAM;AAC1C,WAAQ,MAAM;MAEf,UAAU;AACT,UAAO,oBAAoB,SAAS,MAAM;AAC1C,UAAO,MAAM;IAEhB;GACD;;AAGJ,SAAS,aACP,UACA,WACA,UACyB;AACzB,KAAI,CAAC,SAAS,cAAc,IAAI,WAAW,CAAE,QAAO;AACpD,KAAI,cAAc,UAAW,QAAO;AACpC,QAAO;EAAE,GAAG;EAAW;EAAU;;AAGnC,SAAS,sBAAsB,SAA8B;CAC3D,MAAM,gBAAgB,QAAQ,MAAM,WAAW,OAAO,QAAQ;AAC9D,KAAI,CAAC,cAAe;AACpB,OAAM,cAAc,UAAU,IAAI,aAAa,oCAAoC,aAAa;;AAGlG,SAAS,oCACP,QACA,eACA,aACM;AACN,KAAI,CAAC,OAAO,QAAS;AACrB,KAAI,cAAc,WAAW,OAAO,WAAW,cAAc,QAAQ;EACnE,MAAM,SAAS,cAAc;AAC7B,QAAM,kBAAkB,8BACpB,SACA,IAAI,4BAA4B,YAAY;;AAElD,OAAM,OAAO,UAAU,IAAI,aAAa,oCAAoC,aAAa;;AAG3F,SAAS,aAAa,OAAuC;AAC3D,QAAO,iBAAiB,gBAAgB,MAAM,SAAS;;AAGzD,SAAS,qBAAqB,MAG5B;AACA,KAAI,CAAC,eAAe,KAAK,CACvB,OAAM,IAAI,MAAM,qDAAqD;AAGvE,KAAI,EAAE,UAAU,SAAS,EAAE,YAAY,MACrC,OAAM,IAAI,MAAM,4DAA4D;CAE9E,MAAM,SAAS,KAAK;AACpB,KAAI,WAAW,UAAa,CAAC,oBAAoB,OAAO,CACtD,OAAM,IAAI,MAAM,uDAAuD;AAEzE,QAAO;EAAE,MAAM,KAAK;EAAM;EAAQ;;AAGpC,SAAS,oBAAoB,OAAkD;AAC7E,KAAI,CAAC,MAAM,QAAQ,MAAM,CAAE,QAAO;AAClC,QAAO,MAAM,OAAO,UAAU;AAC5B,SAAO,OAAO,UAAU,YAAY,UAAU,QAAQ,OAAO,MAAM,YAAY;GAC/E;;AAGJ,SAAS,eAAe,QAAsB;AAC5C,KAAI,CAAC,WAAW,KAAK,OAAO,CAC1B,OAAM,IAAI,MAAM,kDAAkD;;AAItE,SAAS,2BAA2B,oBAAkC;AACpE,KAAI,CAAC,wBAAwB,KAAK,mBAAmB,CACnD,OAAM,IAAI,MAAM,6CAA6C;;AAIjE,SAAS,oBAAoB,aAAkC;AAC7D,KACE,OAAO,gBAAgB,YACvB,gBAAgB,MAChB,YAAY,MAAM,KAAK,eACvB,yBAAyB,YAAY,CAErC,OAAM,IAAI,oCAAoC;AAEhD,QAAO;;AAGT,SAAS,uBACP,SACwC;AACxC,KAAI,OAAO,YAAY,YAAY,YAAY,KAC7C,OAAM,IAAI,oCAAoC;AAEhD,QAAO;;AAGT,SAAS,qBAAqB,WAA6C;AACzE,KAAI,cAAc,OAAW,QAAO,EAAE;AACtC,KAAI,CAAC,eAAe,UAAU,CAC5B,OAAM,IAAI,UAAU,mDAAmD;AAEzE,QAAO;;AAGT,SAAS,yBAAyB,OAAwB;AACxD,MAAK,IAAI,QAAQ,GAAG,QAAQ,MAAM,QAAQ,SAAS;EACjD,MAAM,YAAY,MAAM,WAAW,MAAM;AACzC,MAAI,aAAa,gCAAgC,cAAc,wBAC7D,QAAO;;AAGX,QAAO;;;;;;;AAQT,SAAS,UAAU,YAAwC;AACzD,KAAI,CAAC,WACH,OAAM,IAAI,MAAM,mEAAmE;CAGrF,MAAM,MAAM,IAAI,IAAI,WAAW;AAC/B,KAAI,IAAI,aAAa,SAAU,QAAO,IAAI;AAC1C,KAAI,IAAI,aAAa,WAAW,mBAAmB,IAAI,IAAI,SAAS,CAClE,QAAO,WAAW,IAAI;AAExB,OAAM,IAAI,MAAM,yDAAyD,aAAa"}
+{"version":3,"file":"client.mjs","names":[],"sources":["../../src/customer-account/client.ts"],"sourcesContent":["import type { GraphQLFormattedError } from \"../client/types\";\nimport { CUSTOMER_ACCOUNT_API_VERSION, DEFAULT_TIMEOUT_IN_MS } from \"../core/constants\";\nimport type { ShopifyRequestContext } from \"../core/request-context\";\nimport { isObjectRecord } from \"../core/utils/record\";\nimport {\n  CustomerAccountApiError,\n  CustomerAccountAuthenticationError,\n  CustomerAccountTimeoutError,\n} from \"./errors\";\nimport {\n  assertCustomerAccountDocument,\n  type AnyCustomerAccountDocument,\n  type CustomerAccountDocument,\n} from \"./graphql\";\n\nconst SHOP_ID_RE = /^\\d+$/;\nconst CUSTOMER_API_VERSION_RE = /^\\d{4}-\\d{2}$/;\nconst MAX_ASCII_CONTROL_CODE_POINT = 31;\nconst ASCII_DELETE_CODE_POINT = 127;\nconst MAX_SET_TIMEOUT_IN_MS = 2_147_483_647;\nconst LOCAL_ORIGIN_HOSTS = new Set([\"localhost\", \"127.0.0.1\", \"::1\", \"[::1]\"]);\nconst USER_AGENT = `Hydrogen ${__HYDROGEN_VERSION__}`;\nconst CUSTOMER_ACCOUNT_GRAPHQL_PERSONALIZATION_REASON = \"customer-account-graphql\";\n\n/** A Customer Account API access token, or `null` or `undefined` when the customer has none. */\ntype AccessToken = string | null | undefined;\ntype FetchCustomerAccountGraphqlParams = {\n  fetch: typeof globalThis.fetch;\n  apiUrl: string;\n  accessToken: string;\n  origin: string;\n  query: string;\n  variables: Record<string, unknown>;\n  signal: AbortSignal;\n  timeoutSignal: AbortSignal;\n  timeoutInMs: number;\n};\n\n/**\n * Options for creating a Customer Account API client.\n */\nexport type CreateCustomerAccountClientOptions = {\n  /** Numeric Shopify shop ID as a string of digits, such as `12345`. */\n  shopId: string;\n  /**\n   * Customer Account API version in `YYYY-MM` format. Defaults to `2026-10`.\n   */\n  customerApiVersion?: string;\n  /**\n   * The context for the current request, from `createShopifyRequestContext`.\n   *\n   * The context's URL must use HTTPS, or creating the client throws. Local `http://` URLs on localhost, 127.0.0.1, and ::1 also work for development.\n   *\n   * The client fills `$language` from the context's language and stops requests when the context's signal aborts.\n   */\n  requestContext: ShopifyRequestContext;\n  /** Custom fetch implementation. Defaults to the global fetch. */\n  fetch?: typeof globalThis.fetch;\n  /**\n   * Timeout for each request in milliseconds. Must be a positive integer no greater than 2,147,483,647. Defaults to `30000`.\n   */\n  defaultTimeoutInMs?: number;\n};\n\n/**\n * Options for a single Customer Account API request.\n */\nexport type CustomerAccountGraphqlOptions<Variables = Record<string, unknown>> = {\n  /** The customer's access token, such as one from the customer session's `getOrRefreshAccessToken()` method. */\n  accessToken: string;\n  /**\n   * The document's variables. When the document declares `$language` and you omit it, the client fills the variable from the request context's language.\n   */\n  variables?: Variables;\n  /**\n   * Stops this request when the signal aborts. The request also stops when the request context's signal aborts or the timeout passes.\n   */\n  signal?: AbortSignal;\n};\n\ntype ResultOfDoc<Doc> =\n  Doc extends CustomerAccountDocument<infer Result, never, string> ? Result : never;\n/** The variables that a Customer Account document declares. */\ntype VariablesOfDoc<Doc> =\n  Doc extends CustomerAccountDocument<unknown, infer Variables, string> ? Variables : never;\n/** An optional `language` variable for a document that declares `$language`. The client fills a missing value from the request context. */\ntype OptionalAutoVariables<Variables> = \"language\" extends keyof Variables\n  ? { language?: Variables[\"language\"] }\n  : {};\ntype UserVariables<Doc> = Omit<VariablesOfDoc<Doc>, \"language\"> &\n  OptionalAutoVariables<VariablesOfDoc<Doc>>;\ntype HasNoRequiredKeys<T> = Record<string, never> extends T ? true : false;\n\n/**\n * Result of a Customer Account API request. Check `errors` to tell the outcomes apart.\n *\n * On success, `data` holds the result and `errors` is `undefined`. When the response has GraphQL errors, `errors` holds them and `data` can be `null`. Every result includes the raw response headers.\n */\nexport type CustomerAccountGraphqlResult<Result = unknown> =\n  | { data: Result; errors?: undefined; headers: Headers }\n  | { data: Result | null; errors: GraphQLFormattedError[]; headers: Headers };\n\n/**\n * The options argument for a Customer Account API request.\n *\n * Pass `variables` when the document declares a required variable other than `language`. TypeScript reports an error when a required variable is missing.\n */\nexport type CustomerAccountGqlRestParam<Doc extends AnyCustomerAccountDocument> =\n  HasNoRequiredKeys<UserVariables<Doc>> extends true\n    ? [options: CustomerAccountGraphqlOptions<UserVariables<Doc>>]\n    : [\n        options: CustomerAccountGraphqlOptions<UserVariables<Doc>> & {\n          variables: UserVariables<Doc>;\n        },\n      ];\n\n/**\n * A client that sends Customer Account API requests from your server for the current request.\n */\nexport type CustomerAccountClient = {\n  /** The GraphQL endpoint, `https://shopify.com/{shopId}/account/customer/api/{version}/graphql`. */\n  readonly apiUrl: string;\n  /**\n   * Sends a Customer Account API query or mutation with the customer's access token, and returns the data, any GraphQL errors, and the response headers. Pass a document from the Customer Account `gql` function.\n   *\n   * The request makes the final response private and uncacheable when you call `applyResponseHeaders()`. When the document declares `$language` and you omit it, the client fills the variable from the request context's language.\n   *\n   * The method throws a `TypeError` for a document from any other `gql` function, including the Storefront API `gql` function, and for variables that aren't an object. When a signal aborts, the method throws the signal's reason. A missing or malformed access token throws `CustomerAccountAuthenticationError`, a timeout throws `CustomerAccountTimeoutError`, and other request failures throw `CustomerAccountApiError`.\n   *\n   * @throws {TypeError} When another gql function created the document, or when the variables aren't an object.\n   * @throws {CustomerAccountAuthenticationError} When the options object is missing or the access token fails validation.\n   * @throws {CustomerAccountTimeoutError} When the request exceeds the client's timeout.\n   * @throws {CustomerAccountApiError} On a non-OK HTTP status, unparseable JSON, a response without data, or a network failure.\n   *\n   * @example\n   * ```ts\n   * const result = await client.graphql(\n   *   gql(`query { customer { firstName lastName } }`),\n   *   { accessToken },\n   * );\n   *\n   * if (result.errors) {\n   *   console.error(result.errors);\n   * } else {\n   *   console.log(result.data.customer.firstName);\n   * }\n   * ```\n   */\n  graphql: <const Doc extends AnyCustomerAccountDocument>(\n    document: Doc,\n    ...options: CustomerAccountGqlRestParam<Doc>\n  ) => Promise<CustomerAccountGraphqlResult<ResultOfDoc<Doc>>>;\n};\n\n/**\n * Creates a client that sends Customer Account API requests from your server. Create the client with the current request's context.\n *\n * The function throws when the shop ID, API version, or timeout is invalid, when the request context has no HTTPS URL, when no fetch implementation is available, and when the function runs in a browser.\n *\n * @example\n * ```ts\n * import { createCustomerAccountClient, gql } from \"@shopify/hydrogen/customer-account\";\n *\n * const customerAccount = createCustomerAccountClient({\n *   shopId: \"12345\",\n *   requestContext,\n * });\n *\n * const { data } = await customerAccount.graphql(\n *   gql(`query { customer { firstName } }`),\n *   { accessToken },\n * );\n * ```\n *\n * @param options - The shop ID, the API version, the request context, a custom fetch, and the request timeout.\n * @returns A client with the GraphQL endpoint URL and a `graphql()` method for Customer Account API requests.\n * @throws {Error} When called in a browser, when the shop ID, API version, or timeout is invalid, when no fetch is available, or when the request context URL is missing or not HTTPS.\n * @publicDocs\n */\nexport function createCustomerAccountClient({\n  shopId,\n  customerApiVersion = CUSTOMER_ACCOUNT_API_VERSION,\n  requestContext,\n  fetch: customFetch,\n  defaultTimeoutInMs = DEFAULT_TIMEOUT_IN_MS,\n}: CreateCustomerAccountClientOptions): CustomerAccountClient {\n  if (typeof document !== \"undefined\") {\n    throw new Error(\n      \"Customer Account API tokens cannot be used in a browser context. Use this client from server or edge routes only.\",\n    );\n  }\n\n  validateShopId(shopId);\n  validateCustomerApiVersion(customerApiVersion);\n  validateTimeout(defaultTimeoutInMs);\n\n  const resolvedFetch = customFetch ?? globalThis.fetch;\n  if (typeof resolvedFetch !== \"function\") {\n    throw new Error(\n      \"No fetch function available. Pass a fetch option or ensure globalThis.fetch exists.\",\n    );\n  }\n\n  const origin = getOrigin(requestContext.url);\n  const apiUrl = `https://shopify.com/${shopId}/account/customer/api/${customerApiVersion}/graphql`;\n\n  async function graphql<const Doc extends AnyCustomerAccountDocument>(\n    document: Doc,\n    ...rest: CustomerAccountGqlRestParam<Doc>\n  ): Promise<CustomerAccountGraphqlResult<ResultOfDoc<Doc>>>;\n  async function graphql(\n    document: AnyCustomerAccountDocument,\n    ...rest: [options?: CustomerAccountGraphqlOptions<unknown>]\n  ): Promise<CustomerAccountGraphqlResult<unknown>> {\n    assertCustomerAccountDocument(document);\n    const options = validateGraphqlOptions(rest[0]);\n    requestContext.markResponseAsPersonalized(CUSTOMER_ACCOUNT_GRAPHQL_PERSONALIZATION_REASON);\n    const accessToken = validateAccessToken(options.accessToken);\n    const externalSignals = [requestContext.signal, options.signal].filter(\n      (signal): signal is AbortSignal => Boolean(signal),\n    );\n    throwIfAlreadyAborted(externalSignals);\n\n    const { signal: timeoutSignal, cleanup: cleanupTimeout } =\n      createCustomerAccountTimeoutSignal(defaultTimeoutInMs);\n    externalSignals.push(timeoutSignal);\n    const signal = AbortSignal.any(externalSignals);\n\n    try {\n      const variables = getVariables(\n        document,\n        getOptionalVariables(options.variables),\n        requestContext.i18n.language,\n      );\n      const response = await fetchCustomerAccountGraphql({\n        fetch: resolvedFetch,\n        apiUrl,\n        accessToken,\n        origin,\n        query: document.source,\n        variables,\n        signal,\n        timeoutSignal,\n        timeoutInMs: defaultTimeoutInMs,\n      });\n\n      return await readCustomerAccountGraphqlResponse(\n        response,\n        signal,\n        timeoutSignal,\n        defaultTimeoutInMs,\n      );\n    } finally {\n      cleanupTimeout();\n    }\n  }\n\n  return { apiUrl, graphql };\n}\n\nasync function fetchCustomerAccountGraphql({\n  fetch,\n  apiUrl,\n  accessToken,\n  origin,\n  query,\n  variables,\n  signal,\n  timeoutSignal,\n  timeoutInMs,\n}: FetchCustomerAccountGraphqlParams): Promise<Response> {\n  try {\n    return await withAbort(\n      fetch(apiUrl, {\n        method: \"POST\",\n        headers: new Headers({\n          Authorization: accessToken,\n          \"Content-Type\": \"application/json\",\n          Origin: origin,\n          \"User-Agent\": USER_AGENT,\n        }),\n        body: JSON.stringify({ query, variables }),\n        cache: \"no-store\",\n        redirect: \"manual\",\n        signal,\n      }),\n      signal,\n    );\n  } catch (cause) {\n    throwIfCustomerAccountSignalAborted(signal, timeoutSignal, timeoutInMs);\n    if (isAbortError(cause)) throw cause;\n    throw new CustomerAccountApiError(\"Customer Account API request failed\", { cause });\n  }\n}\n\nasync function readCustomerAccountGraphqlResponse(\n  response: Response,\n  signal: AbortSignal,\n  timeoutSignal: AbortSignal,\n  timeoutInMs: number,\n): Promise<CustomerAccountGraphqlResult<unknown>> {\n  const requestId = response.headers.get(\"x-request-id\") ?? undefined;\n  if (!response.ok) {\n    cancelResponseBody(response);\n    throw new CustomerAccountApiError(`Customer Account API responded with ${response.status}`, {\n      status: response.status,\n      requestId,\n      retryAfter: response.headers.get(\"retry-after\") ?? undefined,\n    });\n  }\n\n  let body: { data?: unknown; errors?: GraphQLFormattedError[] };\n  try {\n    body = parseGraphqlResponse(await withAbort(response.json(), signal));\n  } catch (cause) {\n    cancelResponseBody(response);\n\n    throwIfCustomerAccountSignalAborted(signal, timeoutSignal, timeoutInMs);\n    if (isAbortError(cause)) throw cause;\n    throw new CustomerAccountApiError(\"Failed to parse Customer Account API response as JSON\", {\n      status: response.status,\n      requestId,\n      cause,\n    });\n  }\n\n  if (body.errors) {\n    return { data: body.data ?? null, errors: body.errors, headers: response.headers };\n  }\n\n  if (body.data == null) {\n    throw new CustomerAccountApiError(\"Customer Account API response did not include data\", {\n      status: response.status,\n      requestId,\n    });\n  }\n\n  return { data: body.data, headers: response.headers };\n}\n\nfunction cancelResponseBody(response: Response): void {\n  try {\n    void response.body?.cancel().catch(() => undefined);\n  } catch {}\n}\n\nfunction validateTimeout(timeoutInMs: number): void {\n  if (\n    !Number.isSafeInteger(timeoutInMs) ||\n    timeoutInMs <= 0 ||\n    timeoutInMs > MAX_SET_TIMEOUT_IN_MS\n  ) {\n    throw new Error(\n      `defaultTimeoutInMs must be a positive safe integer no greater than ${MAX_SET_TIMEOUT_IN_MS}`,\n    );\n  }\n}\n\nfunction createCustomerAccountTimeoutSignal(timeoutInMs: number): {\n  signal: AbortSignal;\n  cleanup: () => void;\n} {\n  const controller = new AbortController();\n  const timeoutId = setTimeout(() => {\n    controller.abort(new CustomerAccountTimeoutError(timeoutInMs));\n  }, timeoutInMs);\n\n  return { signal: controller.signal, cleanup: () => clearTimeout(timeoutId) };\n}\n\nfunction withAbort<T>(promise: T | Promise<T>, signal: AbortSignal | undefined): Promise<T> {\n  if (!signal) return Promise.resolve(promise);\n  if (signal.aborted) {\n    return Promise.reject(\n      signal.reason ?? new DOMException(\"signal is aborted without reason\", \"AbortError\"),\n    );\n  }\n\n  return new Promise<T>((resolve, reject) => {\n    const abort = () => {\n      signal.removeEventListener(\"abort\", abort);\n      const reason =\n        signal.reason ?? new DOMException(\"signal is aborted without reason\", \"AbortError\");\n      reject(reason);\n    };\n    signal.addEventListener(\"abort\", abort, { once: true });\n    Promise.resolve(promise).then(\n      (value) => {\n        signal.removeEventListener(\"abort\", abort);\n        resolve(value);\n      },\n      (error) => {\n        signal.removeEventListener(\"abort\", abort);\n        reject(error);\n      },\n    );\n  });\n}\n\nfunction getVariables(\n  document: { variableNames: ReadonlySet<string> },\n  variables: Record<string, unknown>,\n  language: ShopifyRequestContext[\"i18n\"][\"language\"],\n): Record<string, unknown> {\n  if (!document.variableNames.has(\"language\")) return variables;\n  if (\"language\" in variables) return variables;\n  return { ...variables, language };\n}\n\nfunction throwIfAlreadyAborted(signals: AbortSignal[]): void {\n  const abortedSignal = signals.find((signal) => signal.aborted);\n  if (!abortedSignal) return;\n  throw abortedSignal.reason ?? new DOMException(\"signal is aborted without reason\", \"AbortError\");\n}\n\nfunction throwIfCustomerAccountSignalAborted(\n  signal: AbortSignal,\n  timeoutSignal: AbortSignal,\n  timeoutInMs: number,\n): void {\n  if (!signal.aborted) return;\n  if (timeoutSignal.aborted && signal.reason === timeoutSignal.reason) {\n    const reason = timeoutSignal.reason;\n    throw reason instanceof CustomerAccountTimeoutError\n      ? reason\n      : new CustomerAccountTimeoutError(timeoutInMs);\n  }\n  throw signal.reason ?? new DOMException(\"signal is aborted without reason\", \"AbortError\");\n}\n\nfunction isAbortError(cause: unknown): cause is DOMException {\n  return cause instanceof DOMException && cause.name === \"AbortError\";\n}\n\nfunction parseGraphqlResponse(json: unknown): {\n  data?: unknown;\n  errors?: GraphQLFormattedError[];\n} {\n  if (!isObjectRecord(json)) {\n    throw new Error(\"Customer Account API returned unexpected JSON type\");\n  }\n\n  if (!(\"data\" in json) && !(\"errors\" in json)) {\n    throw new Error(\"Customer Account API response must include data or errors\");\n  }\n  const errors = json.errors;\n  if (errors !== undefined && !isGraphqlErrorArray(errors)) {\n    throw new Error(\"Customer Account API returned invalid GraphQL errors\");\n  }\n  return { data: json.data, errors };\n}\n\nfunction isGraphqlErrorArray(value: unknown): value is GraphQLFormattedError[] {\n  if (!Array.isArray(value)) return false;\n  return value.every((error) => {\n    return typeof error === \"object\" && error !== null && typeof error.message === \"string\";\n  });\n}\n\nfunction validateShopId(shopId: string): void {\n  if (!SHOP_ID_RE.test(shopId)) {\n    throw new Error(\"shopId must be a numeric Shopify shop ID string\");\n  }\n}\n\nfunction validateCustomerApiVersion(customerApiVersion: string): void {\n  if (!CUSTOMER_API_VERSION_RE.test(customerApiVersion)) {\n    throw new Error(\"customerApiVersion must use YYYY-MM format\");\n  }\n}\n\nfunction validateAccessToken(accessToken: AccessToken): string {\n  if (\n    typeof accessToken !== \"string\" ||\n    accessToken === \"\" ||\n    accessToken.trim() !== accessToken ||\n    hasAsciiControlCharacter(accessToken)\n  ) {\n    throw new CustomerAccountAuthenticationError();\n  }\n  return accessToken;\n}\n\nfunction validateGraphqlOptions(\n  options: CustomerAccountGraphqlOptions<unknown> | undefined,\n): CustomerAccountGraphqlOptions<unknown> {\n  if (typeof options !== \"object\" || options === null) {\n    throw new CustomerAccountAuthenticationError();\n  }\n  return options;\n}\n\nfunction getOptionalVariables(variables: unknown): Record<string, unknown> {\n  if (variables === undefined) return {};\n  if (!isObjectRecord(variables)) {\n    throw new TypeError(\"Customer Account API variables must be an object\");\n  }\n  return variables;\n}\n\nfunction hasAsciiControlCharacter(value: string): boolean {\n  for (let index = 0; index < value.length; index++) {\n    const codePoint = value.charCodeAt(index);\n    if (codePoint <= MAX_ASCII_CONTROL_CODE_POINT || codePoint === ASCII_DELETE_CODE_POINT) {\n      return true;\n    }\n  }\n  return false;\n}\n\n/**\n * Customer Account API requires an HTTPS Origin, but local dev frameworks often\n * receive `http://localhost` requests. Keep that local-only exception without\n * weakening origin validation for non-local requests.\n */\nfunction getOrigin(requestUrl: string | undefined): string {\n  if (!requestUrl) {\n    throw new Error(\"requestContext.url is required for Customer Account API requests\");\n  }\n\n  const url = new URL(requestUrl);\n  if (url.protocol === \"https:\") return url.origin;\n  if (url.protocol === \"http:\" && LOCAL_ORIGIN_HOSTS.has(url.hostname)) {\n    return `https://${url.host}`;\n  }\n  throw new Error(`Customer Account API origin must use HTTPS. Received: ${requestUrl}`);\n}\n"],"mappings":";;;;;;AAeA,MAAM,aAAa;AACnB,MAAM,0BAA0B;AAChC,MAAM,+BAA+B;AACrC,MAAM,0BAA0B;AAChC,MAAM,wBAAwB;AAC9B,MAAM,qBAAqB,IAAI,IAAI;CAAC;CAAa;CAAa;CAAO;CAAQ,CAAC;AAC9E,MAAM,aAAa;AACnB,MAAM,kDAAkD;;;;;;;;;;;;;;;;;;;;;;;;;;AA6JxD,SAAgB,4BAA4B,EAC1C,QACA,qBAAqB,8BACrB,gBACA,OAAO,aACP,qBAAqB,yBACuC;AAC5D,KAAI,OAAO,aAAa,YACtB,OAAM,IAAI,MACR,oHACD;AAGH,gBAAe,OAAO;AACtB,4BAA2B,mBAAmB;AAC9C,iBAAgB,mBAAmB;CAEnC,MAAM,gBAAgB,eAAe,WAAW;AAChD,KAAI,OAAO,kBAAkB,WAC3B,OAAM,IAAI,MACR,sFACD;CAGH,MAAM,SAAS,UAAU,eAAe,IAAI;CAC5C,MAAM,SAAS,uBAAuB,OAAO,wBAAwB,mBAAmB;CAMxF,eAAe,QACb,UACA,GAAG,MAC6C;AAChD,gCAA8B,SAAS;EACvC,MAAM,UAAU,uBAAuB,KAAK,GAAG;AAC/C,iBAAe,2BAA2B,gDAAgD;EAC1F,MAAM,cAAc,oBAAoB,QAAQ,YAAY;EAC5D,MAAM,kBAAkB,CAAC,eAAe,QAAQ,QAAQ,OAAO,CAAC,QAC7D,WAAkC,QAAQ,OAAO,CACnD;AACD,wBAAsB,gBAAgB;EAEtC,MAAM,EAAE,QAAQ,eAAe,SAAS,mBACtC,mCAAmC,mBAAmB;AACxD,kBAAgB,KAAK,cAAc;EACnC,MAAM,SAAS,YAAY,IAAI,gBAAgB;AAE/C,MAAI;GACF,MAAM,YAAY,aAChB,UACA,qBAAqB,QAAQ,UAAU,EACvC,eAAe,KAAK,SACrB;AAaD,UAAO,MAAM,mCACX,MAbqB,4BAA4B;IACjD,OAAO;IACP;IACA;IACA;IACA,OAAO,SAAS;IAChB;IACA;IACA;IACA,aAAa;IACd,CAAC,EAIA,QACA,eACA,mBACD;YACO;AACR,mBAAgB;;;AAIpB,QAAO;EAAE;EAAQ;EAAS;;AAG5B,eAAe,4BAA4B,EACzC,OACA,QACA,aACA,QACA,OACA,WACA,QACA,eACA,eACuD;AACvD,KAAI;AACF,SAAO,MAAM,UACX,MAAM,QAAQ;GACZ,QAAQ;GACR,SAAS,IAAI,QAAQ;IACnB,eAAe;IACf,gBAAgB;IAChB,QAAQ;IACR,cAAc;IACf,CAAC;GACF,MAAM,KAAK,UAAU;IAAE;IAAO;IAAW,CAAC;GAC1C,OAAO;GACP,UAAU;GACV;GACD,CAAC,EACF,OACD;UACM,OAAO;AACd,sCAAoC,QAAQ,eAAe,YAAY;AACvE,MAAI,aAAa,MAAM,CAAE,OAAM;AAC/B,QAAM,IAAI,wBAAwB,uCAAuC,EAAE,OAAO,CAAC;;;AAIvF,eAAe,mCACb,UACA,QACA,eACA,aACgD;CAChD,MAAM,YAAY,SAAS,QAAQ,IAAI,eAAe,IAAI;AAC1D,KAAI,CAAC,SAAS,IAAI;AAChB,qBAAmB,SAAS;AAC5B,QAAM,IAAI,wBAAwB,uCAAuC,SAAS,UAAU;GAC1F,QAAQ,SAAS;GACjB;GACA,YAAY,SAAS,QAAQ,IAAI,cAAc,IAAI;GACpD,CAAC;;CAGJ,IAAI;AACJ,KAAI;AACF,SAAO,qBAAqB,MAAM,UAAU,SAAS,MAAM,EAAE,OAAO,CAAC;UAC9D,OAAO;AACd,qBAAmB,SAAS;AAE5B,sCAAoC,QAAQ,eAAe,YAAY;AACvE,MAAI,aAAa,MAAM,CAAE,OAAM;AAC/B,QAAM,IAAI,wBAAwB,yDAAyD;GACzF,QAAQ,SAAS;GACjB;GACA;GACD,CAAC;;AAGJ,KAAI,KAAK,OACP,QAAO;EAAE,MAAM,KAAK,QAAQ;EAAM,QAAQ,KAAK;EAAQ,SAAS,SAAS;EAAS;AAGpF,KAAI,KAAK,QAAQ,KACf,OAAM,IAAI,wBAAwB,sDAAsD;EACtF,QAAQ,SAAS;EACjB;EACD,CAAC;AAGJ,QAAO;EAAE,MAAM,KAAK;EAAM,SAAS,SAAS;EAAS;;AAGvD,SAAS,mBAAmB,UAA0B;AACpD,KAAI;AACF,EAAK,SAAS,MAAM,QAAQ,CAAC,YAAY,OAAU;SAC7C;;AAGV,SAAS,gBAAgB,aAA2B;AAClD,KACE,CAAC,OAAO,cAAc,YAAY,IAClC,eAAe,KACf,cAAc,sBAEd,OAAM,IAAI,MACR,sEAAsE,wBACvE;;AAIL,SAAS,mCAAmC,aAG1C;CACA,MAAM,aAAa,IAAI,iBAAiB;CACxC,MAAM,YAAY,iBAAiB;AACjC,aAAW,MAAM,IAAI,4BAA4B,YAAY,CAAC;IAC7D,YAAY;AAEf,QAAO;EAAE,QAAQ,WAAW;EAAQ,eAAe,aAAa,UAAU;EAAE;;AAG9E,SAAS,UAAa,SAAyB,QAA6C;AAC1F,KAAI,CAAC,OAAQ,QAAO,QAAQ,QAAQ,QAAQ;AAC5C,KAAI,OAAO,QACT,QAAO,QAAQ,OACb,OAAO,UAAU,IAAI,aAAa,oCAAoC,aAAa,CACpF;AAGH,QAAO,IAAI,SAAY,SAAS,WAAW;EACzC,MAAM,cAAc;AAClB,UAAO,oBAAoB,SAAS,MAAM;AAG1C,UADE,OAAO,UAAU,IAAI,aAAa,oCAAoC,aAAa,CACvE;;AAEhB,SAAO,iBAAiB,SAAS,OAAO,EAAE,MAAM,MAAM,CAAC;AACvD,UAAQ,QAAQ,QAAQ,CAAC,MACtB,UAAU;AACT,UAAO,oBAAoB,SAAS,MAAM;AAC1C,WAAQ,MAAM;MAEf,UAAU;AACT,UAAO,oBAAoB,SAAS,MAAM;AAC1C,UAAO,MAAM;IAEhB;GACD;;AAGJ,SAAS,aACP,UACA,WACA,UACyB;AACzB,KAAI,CAAC,SAAS,cAAc,IAAI,WAAW,CAAE,QAAO;AACpD,KAAI,cAAc,UAAW,QAAO;AACpC,QAAO;EAAE,GAAG;EAAW;EAAU;;AAGnC,SAAS,sBAAsB,SAA8B;CAC3D,MAAM,gBAAgB,QAAQ,MAAM,WAAW,OAAO,QAAQ;AAC9D,KAAI,CAAC,cAAe;AACpB,OAAM,cAAc,UAAU,IAAI,aAAa,oCAAoC,aAAa;;AAGlG,SAAS,oCACP,QACA,eACA,aACM;AACN,KAAI,CAAC,OAAO,QAAS;AACrB,KAAI,cAAc,WAAW,OAAO,WAAW,cAAc,QAAQ;EACnE,MAAM,SAAS,cAAc;AAC7B,QAAM,kBAAkB,8BACpB,SACA,IAAI,4BAA4B,YAAY;;AAElD,OAAM,OAAO,UAAU,IAAI,aAAa,oCAAoC,aAAa;;AAG3F,SAAS,aAAa,OAAuC;AAC3D,QAAO,iBAAiB,gBAAgB,MAAM,SAAS;;AAGzD,SAAS,qBAAqB,MAG5B;AACA,KAAI,CAAC,eAAe,KAAK,CACvB,OAAM,IAAI,MAAM,qDAAqD;AAGvE,KAAI,EAAE,UAAU,SAAS,EAAE,YAAY,MACrC,OAAM,IAAI,MAAM,4DAA4D;CAE9E,MAAM,SAAS,KAAK;AACpB,KAAI,WAAW,UAAa,CAAC,oBAAoB,OAAO,CACtD,OAAM,IAAI,MAAM,uDAAuD;AAEzE,QAAO;EAAE,MAAM,KAAK;EAAM;EAAQ;;AAGpC,SAAS,oBAAoB,OAAkD;AAC7E,KAAI,CAAC,MAAM,QAAQ,MAAM,CAAE,QAAO;AAClC,QAAO,MAAM,OAAO,UAAU;AAC5B,SAAO,OAAO,UAAU,YAAY,UAAU,QAAQ,OAAO,MAAM,YAAY;GAC/E;;AAGJ,SAAS,eAAe,QAAsB;AAC5C,KAAI,CAAC,WAAW,KAAK,OAAO,CAC1B,OAAM,IAAI,MAAM,kDAAkD;;AAItE,SAAS,2BAA2B,oBAAkC;AACpE,KAAI,CAAC,wBAAwB,KAAK,mBAAmB,CACnD,OAAM,IAAI,MAAM,6CAA6C;;AAIjE,SAAS,oBAAoB,aAAkC;AAC7D,KACE,OAAO,gBAAgB,YACvB,gBAAgB,MAChB,YAAY,MAAM,KAAK,eACvB,yBAAyB,YAAY,CAErC,OAAM,IAAI,oCAAoC;AAEhD,QAAO;;AAGT,SAAS,uBACP,SACwC;AACxC,KAAI,OAAO,YAAY,YAAY,YAAY,KAC7C,OAAM,IAAI,oCAAoC;AAEhD,QAAO;;AAGT,SAAS,qBAAqB,WAA6C;AACzE,KAAI,cAAc,OAAW,QAAO,EAAE;AACtC,KAAI,CAAC,eAAe,UAAU,CAC5B,OAAM,IAAI,UAAU,mDAAmD;AAEzE,QAAO;;AAGT,SAAS,yBAAyB,OAAwB;AACxD,MAAK,IAAI,QAAQ,GAAG,QAAQ,MAAM,QAAQ,SAAS;EACjD,MAAM,YAAY,MAAM,WAAW,MAAM;AACzC,MAAI,aAAa,gCAAgC,cAAc,wBAC7D,QAAO;;AAGX,QAAO;;;;;;;AAQT,SAAS,UAAU,YAAwC;AACzD,KAAI,CAAC,WACH,OAAM,IAAI,MAAM,mEAAmE;CAGrF,MAAM,MAAM,IAAI,IAAI,WAAW;AAC/B,KAAI,IAAI,aAAa,SAAU,QAAO,IAAI;AAC1C,KAAI,IAAI,aAAa,WAAW,mBAAmB,IAAI,IAAI,SAAS,CAClE,QAAO,WAAW,IAAI;AAExB,OAAM,IAAI,MAAM,yDAAyD,aAAa"}

package/dist/customer-account/errors.d.mts

@@ -1,24 +1,24 @@
 //#region src/customer-account/errors.d.ts
 /**
- * Base error for Customer Account API failures. Thrown by
- * `CustomerAccountClient.graphql()` when the API responds with a non-OK
- * HTTP status, when the response body cannot be parsed as JSON, or when the
- * parsed response is missing `data`. Also thrown (without subclassing) for
- * OAuth token-request timeouts and network failures.
+ * The error that a Customer Account API request throws when the request fails. The client throws this error for a non-OK HTTP status, a response that isn't valid GraphQL, a response without data, or a network failure. The OAuth callback also throws this error when its token request times out.
  *
- * Not all fields are populated on every instance. `status` is present
- * whenever an HTTP response was received. `requestId` is set when the
- * `x-request-id` response header exists. Both are absent on network
- * failures where no response arrived. `retryAfter` is populated only on
- * non-OK responses.
+ * Catch this class to handle every Customer Account API failure, including authentication and timeout errors. Read `status`, `requestId`, and `retryAfter` to handle the failure. Network failures have no status or request ID, and only non-OK responses include a retry-after value.
+ *
+ * @publicDocs
  */
 declare class CustomerAccountApiError extends Error {
-  /** HTTP status code from the API response. Present whenever an HTTP response was received (including parse failures), absent on network failures where no response arrived. */
+  /** The HTTP status of the response, including a response that Hydrogen can't parse. */
   readonly status?: number;
-  /** Value of the `x-request-id` response header, when the API returned one. Useful for Shopify support requests. */
+  /** The response's `x-request-id` header. Include the ID in Shopify support requests. */
   readonly requestId?: string;
-  /** Value of the `retry-after` response header, when present. Indicates when the client should retry a rate-limited request. */
+  /** The `retry-after` header on a non-OK response. Use the value to schedule a retry of a rate-limited request. */
   readonly retryAfter?: string;
+  /** `CustomerAccountApiError`. Each subclass sets its own class name. */
+  name: string;
+  /** Describes the failure, such as the HTTP status that the API returned. */
+  message: string;
+  /** The stack trace, when the JavaScript runtime records one. */
+  stack?: string;
   constructor(message: string, options?: {
     status?: number;
     requestId?: string;
@@ -27,44 +27,53 @@ declare class CustomerAccountApiError extends Error {
   });
 }
 /**
- * Client-side pre-flight check. Thrown when the access token is missing,
- * empty, has leading or trailing whitespace, or contains ASCII control
- * characters (including DEL). Also thrown when the options object is
- * missing. A token the server rejects (e.g. expired or revoked) produces
- * the base {@link CustomerAccountApiError} with `status: 401` instead.
+ * The error that a Customer Account API request throws when the access token is missing or malformed. The client throws this error before it sends the request when the token is empty, has leading or trailing whitespace, or contains control characters. The client also throws this error when you omit the options argument.
+ *
+ * When the API rejects a token, the client throws `CustomerAccountApiError` with the response status.
+ *
+ * @publicDocs
  */
 declare class CustomerAccountAuthenticationError extends CustomerAccountApiError {
+  /** Always `CustomerAccountAuthenticationError`. */
+  name: string;
+  /** Always `"Customer Account API access token is required"`. */
+  message: string;
+  /** The stack trace, when the JavaScript runtime records one. */
+  stack?: string;
   constructor(message?: string);
 }
 /**
- * Thrown when a `CustomerAccountClient.graphql()` request exceeds
- * `defaultTimeoutInMs`. (OAuth token-request timeouts throw the base
- * {@link CustomerAccountApiError} instead.) Extends
- * {@link CustomerAccountApiError}.
+ * The error that a Customer Account API request throws when the request takes longer than the client's timeout. The timeout covers the whole request, including reading the response body.
+ *
+ * @publicDocs
  */
 declare class CustomerAccountTimeoutError extends CustomerAccountApiError {
-  /** The timeout threshold (in milliseconds) that was exceeded. */
+  /** The timeout that the request exceeded, in milliseconds. */
   readonly timeoutInMs: number;
+  /** Always `CustomerAccountTimeoutError`. */
+  name: string;
+  /** States the timeout, such as `"Customer Account API request timed out after 30000ms"`. */
+  message: string;
+  /** The stack trace, when the JavaScript runtime records one. */
+  stack?: string;
   constructor(timeoutInMs: number);
 }
 /**
- * Thrown during the Customer Account OAuth authorization code exchange
- * or id_token validation in `handleOAuthCallback`. Refresh failures never
- * surface this error (they are caught internally and returned as
- * `undefined`). Extends `Error` directly, **not**
- * {@link CustomerAccountApiError}. A `catch` block for
- * `CustomerAccountApiError` will not catch this error.
+ * The error that the OAuth callback throws when customer sign-in fails. Sign-in fails when the callback doesn't match the sign-in that `prepareLoginUrl()` started, when that sign-in started more than 10 minutes earlier, when the code exchange fails, or when Shopify's tokens fail validation. The authorize route catches this error and redirects the customer to the failed-login path. Token refreshes never throw this error, and a failed refresh returns `undefined`.
+ *
+ * Read `code` to handle each failure. The codes are `missing_callback_params`, `state_mismatch`, `missing_pending_login`, `token_exchange_rejected`, `token_exchange_failed`, `invalid_token_response`, `nonce_mismatch`, `issuer_mismatch`, `audience_mismatch`, `expired_id_token`, and `invalid_id_token`.
  *
- * Use the `code` field for programmatic handling. Known codes:
- * `"missing_callback_params"`, `"state_mismatch"`,
- * `"token_exchange_rejected"`, `"token_exchange_failed"`,
- * `"invalid_token_response"`, `"nonce_mismatch"`, `"issuer_mismatch"`,
- * `"audience_mismatch"`, `"expired_id_token"`, `"invalid_id_token"`,
- * `"missing_pending_login"`.
+ * @publicDocs
  */
 declare class CustomerAccountOAuthError extends Error {
-  /** Machine-readable error identifier for programmatic handling. */
+  /** The failure code, one of the codes in the class description. */
   readonly code: string;
+  /** Always `CustomerAccountOAuthError`. */
+  name: string;
+  /** Describes the sign-in failure. Read `code` to handle the failure. */
+  message: string;
+  /** The stack trace, when the JavaScript runtime records one. */
+  stack?: string;
   constructor(code: string, message: string, options?: {
     cause?: unknown;
   });

package/dist/customer-account/errors.mjs

@@ -1,23 +1,17 @@
 //#region src/customer-account/errors.ts
 /**
-* Base error for Customer Account API failures. Thrown by
-* `CustomerAccountClient.graphql()` when the API responds with a non-OK
-* HTTP status, when the response body cannot be parsed as JSON, or when the
-* parsed response is missing `data`. Also thrown (without subclassing) for
-* OAuth token-request timeouts and network failures.
+* The error that a Customer Account API request throws when the request fails. The client throws this error for a non-OK HTTP status, a response that isn't valid GraphQL, a response without data, or a network failure. The OAuth callback also throws this error when its token request times out.
 *
-* Not all fields are populated on every instance. `status` is present
-* whenever an HTTP response was received. `requestId` is set when the
-* `x-request-id` response header exists. Both are absent on network
-* failures where no response arrived. `retryAfter` is populated only on
-* non-OK responses.
+* Catch this class to handle every Customer Account API failure, including authentication and timeout errors. Read `status`, `requestId`, and `retryAfter` to handle the failure. Network failures have no status or request ID, and only non-OK responses include a retry-after value.
+*
+* @publicDocs
 */
 var CustomerAccountApiError = class extends Error {
-	/** HTTP status code from the API response. Present whenever an HTTP response was received (including parse failures), absent on network failures where no response arrived. */
+	/** The HTTP status of the response, including a response that Hydrogen can't parse. */
 	status;
-	/** Value of the `x-request-id` response header, when the API returned one. Useful for Shopify support requests. */
+	/** The response's `x-request-id` header. Include the ID in Shopify support requests. */
 	requestId;
-	/** Value of the `retry-after` response header, when present. Indicates when the client should retry a rate-limited request. */
+	/** The `retry-after` header on a non-OK response. Use the value to schedule a retry of a rate-limited request. */
 	retryAfter;
 	constructor(message, options) {
 		super(message, options?.cause ? { cause: options.cause } : void 0);
@@ -28,11 +22,11 @@ var CustomerAccountApiError = class extends Error {
 	}
 };
 /**
-* Client-side pre-flight check. Thrown when the access token is missing,
-* empty, has leading or trailing whitespace, or contains ASCII control
-* characters (including DEL). Also thrown when the options object is
-* missing. A token the server rejects (e.g. expired or revoked) produces
-* the base {@link CustomerAccountApiError} with `status: 401` instead.
+* The error that a Customer Account API request throws when the access token is missing or malformed. The client throws this error before it sends the request when the token is empty, has leading or trailing whitespace, or contains control characters. The client also throws this error when you omit the options argument.
+*
+* When the API rejects a token, the client throws `CustomerAccountApiError` with the response status.
+*
+* @publicDocs
 */
 var CustomerAccountAuthenticationError = class extends CustomerAccountApiError {
 	constructor(message = "Customer Account API access token is required") {
@@ -41,13 +35,12 @@ var CustomerAccountAuthenticationError = class extends CustomerAccountApiError {
 	}
 };
 /**
-* Thrown when a `CustomerAccountClient.graphql()` request exceeds
-* `defaultTimeoutInMs`. (OAuth token-request timeouts throw the base
-* {@link CustomerAccountApiError} instead.) Extends
-* {@link CustomerAccountApiError}.
+* The error that a Customer Account API request throws when the request takes longer than the client's timeout. The timeout covers the whole request, including reading the response body.
+*
+* @publicDocs
 */
 var CustomerAccountTimeoutError = class extends CustomerAccountApiError {
-	/** The timeout threshold (in milliseconds) that was exceeded. */
+	/** The timeout that the request exceeded, in milliseconds. */
 	timeoutInMs;
 	constructor(timeoutInMs) {
 		super(`Customer Account API request timed out after ${timeoutInMs}ms`);
@@ -56,22 +49,14 @@ var CustomerAccountTimeoutError = class extends CustomerAccountApiError {
 	}
 };
 /**
-* Thrown during the Customer Account OAuth authorization code exchange
-* or id_token validation in `handleOAuthCallback`. Refresh failures never
-* surface this error (they are caught internally and returned as
-* `undefined`). Extends `Error` directly, **not**
-* {@link CustomerAccountApiError}. A `catch` block for
-* `CustomerAccountApiError` will not catch this error.
+* The error that the OAuth callback throws when customer sign-in fails. Sign-in fails when the callback doesn't match the sign-in that `prepareLoginUrl()` started, when that sign-in started more than 10 minutes earlier, when the code exchange fails, or when Shopify's tokens fail validation. The authorize route catches this error and redirects the customer to the failed-login path. Token refreshes never throw this error, and a failed refresh returns `undefined`.
+*
+* Read `code` to handle each failure. The codes are `missing_callback_params`, `state_mismatch`, `missing_pending_login`, `token_exchange_rejected`, `token_exchange_failed`, `invalid_token_response`, `nonce_mismatch`, `issuer_mismatch`, `audience_mismatch`, `expired_id_token`, and `invalid_id_token`.
 *
-* Use the `code` field for programmatic handling. Known codes:
-* `"missing_callback_params"`, `"state_mismatch"`,
-* `"token_exchange_rejected"`, `"token_exchange_failed"`,
-* `"invalid_token_response"`, `"nonce_mismatch"`, `"issuer_mismatch"`,
-* `"audience_mismatch"`, `"expired_id_token"`, `"invalid_id_token"`,
-* `"missing_pending_login"`.
+* @publicDocs
 */
 var CustomerAccountOAuthError = class extends Error {
-	/** Machine-readable error identifier for programmatic handling. */
+	/** The failure code, one of the codes in the class description. */
 	code;
 	constructor(code, message, options) {
 		super(message, options?.cause ? { cause: options.cause } : void 0);

package/dist/customer-account/errors.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"errors.mjs","names":[],"sources":["../../src/customer-account/errors.ts"],"sourcesContent":["/**\n * Base error for Customer Account API failures. Thrown by\n * `CustomerAccountClient.graphql()` when the API responds with a non-OK\n * HTTP status, when the response body cannot be parsed as JSON, or when the\n * parsed response is missing `data`. Also thrown (without subclassing) for\n * OAuth token-request timeouts and network failures.\n *\n * Not all fields are populated on every instance. `status` is present\n * whenever an HTTP response was received. `requestId` is set when the\n * `x-request-id` response header exists. Both are absent on network\n * failures where no response arrived. `retryAfter` is populated only on\n * non-OK responses.\n */\nexport class CustomerAccountApiError extends Error {\n  /** HTTP status code from the API response. Present whenever an HTTP response was received (including parse failures), absent on network failures where no response arrived. */\n  readonly status?: number;\n  /** Value of the `x-request-id` response header, when the API returned one. Useful for Shopify support requests. */\n  readonly requestId?: string;\n  /** Value of the `retry-after` response header, when present. Indicates when the client should retry a rate-limited request. */\n  readonly retryAfter?: string;\n\n  constructor(\n    message: string,\n    options?: { status?: number; requestId?: string; retryAfter?: string; cause?: unknown },\n  ) {\n    super(message, options?.cause ? { cause: options.cause } : undefined);\n    this.name = \"CustomerAccountApiError\";\n    this.status = options?.status;\n    this.requestId = options?.requestId;\n    this.retryAfter = options?.retryAfter;\n  }\n}\n\n/**\n * Client-side pre-flight check. Thrown when the access token is missing,\n * empty, has leading or trailing whitespace, or contains ASCII control\n * characters (including DEL). Also thrown when the options object is\n * missing. A token the server rejects (e.g. expired or revoked) produces\n * the base {@link CustomerAccountApiError} with `status: 401` instead.\n */\nexport class CustomerAccountAuthenticationError extends CustomerAccountApiError {\n  constructor(message = \"Customer Account API access token is required\") {\n    super(message);\n    this.name = \"CustomerAccountAuthenticationError\";\n  }\n}\n\n/**\n * Thrown when a `CustomerAccountClient.graphql()` request exceeds\n * `defaultTimeoutInMs`. (OAuth token-request timeouts throw the base\n * {@link CustomerAccountApiError} instead.) Extends\n * {@link CustomerAccountApiError}.\n */\nexport class CustomerAccountTimeoutError extends CustomerAccountApiError {\n  /** The timeout threshold (in milliseconds) that was exceeded. */\n  readonly timeoutInMs: number;\n\n  constructor(timeoutInMs: number) {\n    super(`Customer Account API request timed out after ${timeoutInMs}ms`);\n    this.name = \"CustomerAccountTimeoutError\";\n    this.timeoutInMs = timeoutInMs;\n  }\n}\n\n/**\n * Thrown during the Customer Account OAuth authorization code exchange\n * or id_token validation in `handleOAuthCallback`. Refresh failures never\n * surface this error (they are caught internally and returned as\n * `undefined`). Extends `Error` directly, **not**\n * {@link CustomerAccountApiError}. A `catch` block for\n * `CustomerAccountApiError` will not catch this error.\n *\n * Use the `code` field for programmatic handling. Known codes:\n * `\"missing_callback_params\"`, `\"state_mismatch\"`,\n * `\"token_exchange_rejected\"`, `\"token_exchange_failed\"`,\n * `\"invalid_token_response\"`, `\"nonce_mismatch\"`, `\"issuer_mismatch\"`,\n * `\"audience_mismatch\"`, `\"expired_id_token\"`, `\"invalid_id_token\"`,\n * `\"missing_pending_login\"`.\n */\nexport class CustomerAccountOAuthError extends Error {\n  /** Machine-readable error identifier for programmatic handling. */\n  readonly code: string;\n\n  constructor(code: string, message: string, options?: { cause?: unknown }) {\n    super(message, options?.cause ? { cause: options.cause } : undefined);\n    this.name = \"CustomerAccountOAuthError\";\n    this.code = code;\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;AAaA,IAAa,0BAAb,cAA6C,MAAM;;CAEjD,AAAS;;CAET,AAAS;;CAET,AAAS;CAET,YACE,SACA,SACA;AACA,QAAM,SAAS,SAAS,QAAQ,EAAE,OAAO,QAAQ,OAAO,GAAG,OAAU;AACrE,OAAK,OAAO;AACZ,OAAK,SAAS,SAAS;AACvB,OAAK,YAAY,SAAS;AAC1B,OAAK,aAAa,SAAS;;;;;;;;;;AAW/B,IAAa,qCAAb,cAAwD,wBAAwB;CAC9E,YAAY,UAAU,iDAAiD;AACrE,QAAM,QAAQ;AACd,OAAK,OAAO;;;;;;;;;AAUhB,IAAa,8BAAb,cAAiD,wBAAwB;;CAEvE,AAAS;CAET,YAAY,aAAqB;AAC/B,QAAM,gDAAgD,YAAY,IAAI;AACtE,OAAK,OAAO;AACZ,OAAK,cAAc;;;;;;;;;;;;;;;;;;AAmBvB,IAAa,4BAAb,cAA+C,MAAM;;CAEnD,AAAS;CAET,YAAY,MAAc,SAAiB,SAA+B;AACxE,QAAM,SAAS,SAAS,QAAQ,EAAE,OAAO,QAAQ,OAAO,GAAG,OAAU;AACrE,OAAK,OAAO;AACZ,OAAK,OAAO"}
+{"version":3,"file":"errors.mjs","names":[],"sources":["../../src/customer-account/errors.ts"],"sourcesContent":["/**\n * The error that a Customer Account API request throws when the request fails. The client throws this error for a non-OK HTTP status, a response that isn't valid GraphQL, a response without data, or a network failure. The OAuth callback also throws this error when its token request times out.\n *\n * Catch this class to handle every Customer Account API failure, including authentication and timeout errors. Read `status`, `requestId`, and `retryAfter` to handle the failure. Network failures have no status or request ID, and only non-OK responses include a retry-after value.\n *\n * @publicDocs\n */\nexport class CustomerAccountApiError extends Error {\n  /** The HTTP status of the response, including a response that Hydrogen can't parse. */\n  readonly status?: number;\n  /** The response's `x-request-id` header. Include the ID in Shopify support requests. */\n  readonly requestId?: string;\n  /** The `retry-after` header on a non-OK response. Use the value to schedule a retry of a rate-limited request. */\n  readonly retryAfter?: string;\n\n  /** `CustomerAccountApiError`. Each subclass sets its own class name. */\n  declare name: string;\n  /** Describes the failure, such as the HTTP status that the API returned. */\n  declare message: string;\n  /** The stack trace, when the JavaScript runtime records one. */\n  declare stack?: string;\n\n  constructor(\n    message: string,\n    options?: { status?: number; requestId?: string; retryAfter?: string; cause?: unknown },\n  ) {\n    super(message, options?.cause ? { cause: options.cause } : undefined);\n    this.name = \"CustomerAccountApiError\";\n    this.status = options?.status;\n    this.requestId = options?.requestId;\n    this.retryAfter = options?.retryAfter;\n  }\n}\n\n/**\n * The error that a Customer Account API request throws when the access token is missing or malformed. The client throws this error before it sends the request when the token is empty, has leading or trailing whitespace, or contains control characters. The client also throws this error when you omit the options argument.\n *\n * When the API rejects a token, the client throws `CustomerAccountApiError` with the response status.\n *\n * @publicDocs\n */\nexport class CustomerAccountAuthenticationError extends CustomerAccountApiError {\n  /** Always `CustomerAccountAuthenticationError`. */\n  declare name: string;\n  /** Always `\"Customer Account API access token is required\"`. */\n  declare message: string;\n  /** The stack trace, when the JavaScript runtime records one. */\n  declare stack?: string;\n\n  constructor(message = \"Customer Account API access token is required\") {\n    super(message);\n    this.name = \"CustomerAccountAuthenticationError\";\n  }\n}\n\n/**\n * The error that a Customer Account API request throws when the request takes longer than the client's timeout. The timeout covers the whole request, including reading the response body.\n *\n * @publicDocs\n */\nexport class CustomerAccountTimeoutError extends CustomerAccountApiError {\n  /** The timeout that the request exceeded, in milliseconds. */\n  readonly timeoutInMs: number;\n\n  /** Always `CustomerAccountTimeoutError`. */\n  declare name: string;\n  /** States the timeout, such as `\"Customer Account API request timed out after 30000ms\"`. */\n  declare message: string;\n  /** The stack trace, when the JavaScript runtime records one. */\n  declare stack?: string;\n\n  constructor(timeoutInMs: number) {\n    super(`Customer Account API request timed out after ${timeoutInMs}ms`);\n    this.name = \"CustomerAccountTimeoutError\";\n    this.timeoutInMs = timeoutInMs;\n  }\n}\n\n/**\n * The error that the OAuth callback throws when customer sign-in fails. Sign-in fails when the callback doesn't match the sign-in that `prepareLoginUrl()` started, when that sign-in started more than 10 minutes earlier, when the code exchange fails, or when Shopify's tokens fail validation. The authorize route catches this error and redirects the customer to the failed-login path. Token refreshes never throw this error, and a failed refresh returns `undefined`.\n *\n * Read `code` to handle each failure. The codes are `missing_callback_params`, `state_mismatch`, `missing_pending_login`, `token_exchange_rejected`, `token_exchange_failed`, `invalid_token_response`, `nonce_mismatch`, `issuer_mismatch`, `audience_mismatch`, `expired_id_token`, and `invalid_id_token`.\n *\n * @publicDocs\n */\nexport class CustomerAccountOAuthError extends Error {\n  /** The failure code, one of the codes in the class description. */\n  readonly code: string;\n\n  /** Always `CustomerAccountOAuthError`. */\n  declare name: string;\n  /** Describes the sign-in failure. Read `code` to handle the failure. */\n  declare message: string;\n  /** The stack trace, when the JavaScript runtime records one. */\n  declare stack?: string;\n\n  constructor(code: string, message: string, options?: { cause?: unknown }) {\n    super(message, options?.cause ? { cause: options.cause } : undefined);\n    this.name = \"CustomerAccountOAuthError\";\n    this.code = code;\n  }\n}\n"],"mappings":";;;;;;;;AAOA,IAAa,0BAAb,cAA6C,MAAM;;CAEjD,AAAS;;CAET,AAAS;;CAET,AAAS;CAST,YACE,SACA,SACA;AACA,QAAM,SAAS,SAAS,QAAQ,EAAE,OAAO,QAAQ,OAAO,GAAG,OAAU;AACrE,OAAK,OAAO;AACZ,OAAK,SAAS,SAAS;AACvB,OAAK,YAAY,SAAS;AAC1B,OAAK,aAAa,SAAS;;;;;;;;;;AAW/B,IAAa,qCAAb,cAAwD,wBAAwB;CAQ9E,YAAY,UAAU,iDAAiD;AACrE,QAAM,QAAQ;AACd,OAAK,OAAO;;;;;;;;AAShB,IAAa,8BAAb,cAAiD,wBAAwB;;CAEvE,AAAS;CAST,YAAY,aAAqB;AAC/B,QAAM,gDAAgD,YAAY,IAAI;AACtE,OAAK,OAAO;AACZ,OAAK,cAAc;;;;;;;;;;AAWvB,IAAa,4BAAb,cAA+C,MAAM;;CAEnD,AAAS;CAST,YAAY,MAAc,SAAiB,SAA+B;AACxE,QAAM,SAAS,SAAS,QAAQ,EAAE,OAAO,QAAQ,OAAO,GAAG,OAAU;AACrE,OAAK,OAAO;AACZ,OAAK,OAAO"}

package/dist/customer-account/graphql.d.mts

@@ -10,34 +10,28 @@ type CustomerAccountTadaGql = initGraphQLTada<{
 }>;
 declare const CUSTOMER_ACCOUNT_DOCUMENT: unique symbol;
 /**
- * Branded document type returned by {@link gql}.
+ * A Customer Account API query or mutation that `gql` from `@shopify/hydrogen/customer-account` returns. TypeScript infers the result and variables types from the document's GraphQL source.
  *
- * Carries the GraphQL source as a type-level string literal so that
- * `InferResult` and `InferVariables` can derive typed responses. The
- * `[CUSTOMER_ACCOUNT_DOCUMENT]` brand is private and cannot be constructed
- * externally — only `gql()` produces valid instances. Passing a plain object
- * with a `source` property to `CustomerAccountClient.graphql()` will throw
- * a `TypeError` at runtime.
+ * Create documents only with the Customer Account `gql` function. The client throws a `TypeError` for any other object.
  */
 type CustomerAccountDocument<Result = unknown, Variables = never, Source extends string = string> = DocumentDecoration<Result, Variables> & {
   readonly [CUSTOMER_ACCOUNT_DOCUMENT]: true;
   readonly source: Source;
 };
-/** Widened alias for {@link CustomerAccountDocument}. Use as a constraint when accepting any Customer Account document. */
+/** Any Customer Account API document. Use the type as a constraint when a function accepts any document. */
 type AnyCustomerAccountDocument = CustomerAccountDocument<unknown, never, string>;
-/** Extracts the source string literal type from a {@link CustomerAccountDocument}. */
+/** Extracts the source string literal type from a Customer Account document. */
 type SourceOf<Doc> = Doc extends {
   readonly source: infer Source extends string;
 } ? Source : never;
 /**
- * Recursively concatenates the source strings of an array of fragment
- * documents at the type level, joining each with a newline. An empty
- * tuple produces `""`.
+ * Joins the source strings of a tuple of fragment documents with newlines at the type level. An empty tuple produces `""`.
  */
 type FragmentSources<Fragments extends readonly AnyCustomerAccountDocument[]> = Fragments extends readonly [] ? "" : Fragments extends readonly [infer Only extends AnyCustomerAccountDocument] ? SourceOf<Only> : Fragments extends readonly [infer First extends AnyCustomerAccountDocument, ...infer Rest extends readonly AnyCustomerAccountDocument[]] ? `${SourceOf<First>}\n${FragmentSources<Rest>}` : string;
 /**
- * Combines an operation source with its {@link FragmentSources} at the type
- * level. When `Fragments` is empty the result is just `Source`.
+ * Combines an operation source with the sources of its fragments at the type level. With no fragments, the result is the operation source.
+ *
+ * @publicDocs
  */
 type ComposedSource<Source extends string, Fragments extends readonly AnyCustomerAccountDocument[]> = FragmentSources<Fragments> extends "" ? Source : `${Source}\n${FragmentSources<Fragments>}`;
 type CustomerAccountGql = {
@@ -45,16 +39,9 @@ type CustomerAccountGql = {
   <const Source extends string, const Fragments extends readonly AnyCustomerAccountDocument[], const DocumentSource extends string = ComposedSource<Source, Fragments>>(source: Source, fragments: Fragments): CustomerAccountDocument<InferResult<DocumentSource>, InferVariables<DocumentSource>, DocumentSource>;
 } & CustomerAccountTadaGql;
 /**
- * Creates a branded {@link CustomerAccountDocument} from a GraphQL source
- * string. This is a regular function call, not a tagged template literal.
- *
- * The returned document is branded with a private Symbol that
- * `CustomerAccountClient.graphql()` validates at runtime — passing a plain
- * object with a `source` property will throw a `TypeError`.
+ * Creates a typed Customer Account API query or mutation from a GraphQL source string. Pass the document to the Customer Account API client. Call `gql` as a regular function. Tagged template syntax doesn't work.
  *
- * An optional second argument accepts an array of fragment documents. Fragments
- * are deduplicated by source string identity (`Set` check, not by fragment
- * name) and appended to the operation source.
+ * Pass an array of fragment documents as the second argument to append the fragments to the operation. Each fragment must come from this `gql` function, or the call throws a `TypeError`.
  *
  * @example
  * ```ts
@@ -90,6 +77,7 @@ type CustomerAccountGql = {
  *   }
  * `, [ORDER_FIELDS]);
  * ```
+ * @publicDocs
  */
 declare const gql: CustomerAccountGql;
 //#endregion

package/dist/customer-account/graphql.mjs

@@ -4,16 +4,9 @@ import { isObjectRecord } from "../core/utils/record.mjs";
 const CUSTOMER_ACCOUNT_DOCUMENT = Symbol("CustomerAccountDocument");
 const VARIABLE_DEFINITION_RE = /\$([_A-Za-z][_0-9A-Za-z]*)\s*:/g;
 /**
-* Creates a branded {@link CustomerAccountDocument} from a GraphQL source
-* string. This is a regular function call, not a tagged template literal.
+* Creates a typed Customer Account API query or mutation from a GraphQL source string. Pass the document to the Customer Account API client. Call `gql` as a regular function. Tagged template syntax doesn't work.
 *
-* The returned document is branded with a private Symbol that
-* `CustomerAccountClient.graphql()` validates at runtime — passing a plain
-* object with a `source` property will throw a `TypeError`.
-*
-* An optional second argument accepts an array of fragment documents. Fragments
-* are deduplicated by source string identity (`Set` check, not by fragment
-* name) and appended to the operation source.
+* Pass an array of fragment documents as the second argument to append the fragments to the operation. Each fragment must come from this `gql` function, or the call throws a `TypeError`.
 *
 * @example
 * ```ts
@@ -49,6 +42,7 @@ const VARIABLE_DEFINITION_RE = /\$([_A-Za-z][_0-9A-Za-z]*)\s*:/g;
 *   }
 * `, [ORDER_FIELDS]);
 * ```
+* @publicDocs
 */
 const gql = ((source, fragments) => {
 	let query = source;

package/dist/customer-account/graphql.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"graphql.mjs","names":[],"sources":["../../src/customer-account/graphql.ts"],"sourcesContent":["import type { DocumentDecoration, initGraphQLTada as InitGraphQLTada } from \"gql.tada\";\n\nimport { isObjectRecord } from \"../core/utils/record\";\nimport type { introspection } from \"../graphql/generated/customer-account-graphql-env\";\nimport type { CustomerAccountScalars } from \"../graphql/scalars\";\nimport type { InferResult, InferVariables } from \"./type-resolver\";\n\ntype CustomerAccountTadaGql = InitGraphQLTada<{\n  introspection: introspection;\n  scalars: CustomerAccountScalars;\n}>;\n\nconst CUSTOMER_ACCOUNT_DOCUMENT = Symbol(\"CustomerAccountDocument\");\nconst VARIABLE_DEFINITION_RE = /\\$([_A-Za-z][_0-9A-Za-z]*)\\s*:/g;\n\n/**\n * Branded document type returned by {@link gql}.\n *\n * Carries the GraphQL source as a type-level string literal so that\n * `InferResult` and `InferVariables` can derive typed responses. The\n * `[CUSTOMER_ACCOUNT_DOCUMENT]` brand is private and cannot be constructed\n * externally — only `gql()` produces valid instances. Passing a plain object\n * with a `source` property to `CustomerAccountClient.graphql()` will throw\n * a `TypeError` at runtime.\n */\nexport type CustomerAccountDocument<\n  Result = unknown,\n  Variables = never,\n  Source extends string = string,\n> = DocumentDecoration<Result, Variables> & {\n  readonly [CUSTOMER_ACCOUNT_DOCUMENT]: true;\n  readonly source: Source;\n};\n\n/** Widened alias for {@link CustomerAccountDocument}. Use as a constraint when accepting any Customer Account document. */\nexport type AnyCustomerAccountDocument = CustomerAccountDocument<unknown, never, string>;\n\n/** Extracts the source string literal type from a {@link CustomerAccountDocument}. */\nexport type SourceOf<Doc> = Doc extends { readonly source: infer Source extends string }\n  ? Source\n  : never;\n\n/**\n * Recursively concatenates the source strings of an array of fragment\n * documents at the type level, joining each with a newline. An empty\n * tuple produces `\"\"`.\n */\nexport type FragmentSources<Fragments extends readonly AnyCustomerAccountDocument[]> =\n  Fragments extends readonly []\n    ? \"\"\n    : Fragments extends readonly [infer Only extends AnyCustomerAccountDocument]\n      ? SourceOf<Only>\n      : Fragments extends readonly [\n            infer First extends AnyCustomerAccountDocument,\n            ...infer Rest extends readonly AnyCustomerAccountDocument[],\n          ]\n        ? `${SourceOf<First>}\\n${FragmentSources<Rest>}`\n        : string;\n\n/**\n * Combines an operation source with its {@link FragmentSources} at the type\n * level. When `Fragments` is empty the result is just `Source`.\n */\nexport type ComposedSource<\n  Source extends string,\n  Fragments extends readonly AnyCustomerAccountDocument[],\n> = FragmentSources<Fragments> extends \"\" ? Source : `${Source}\\n${FragmentSources<Fragments>}`;\n\ntype CustomerAccountDocumentValue = AnyCustomerAccountDocument & {\n  readonly variableNames: ReadonlySet<string>;\n};\n\ntype CustomerAccountGql = {\n  <const Source extends string>(\n    source: Source,\n  ): CustomerAccountDocument<InferResult<Source>, InferVariables<Source>, Source>;\n  <\n    const Source extends string,\n    const Fragments extends readonly AnyCustomerAccountDocument[],\n    const DocumentSource extends string = ComposedSource<Source, Fragments>,\n  >(\n    source: Source,\n    fragments: Fragments,\n  ): CustomerAccountDocument<\n    InferResult<DocumentSource>,\n    InferVariables<DocumentSource>,\n    DocumentSource\n  >;\n} & CustomerAccountTadaGql;\n\n/**\n * Creates a branded {@link CustomerAccountDocument} from a GraphQL source\n * string. This is a regular function call, not a tagged template literal.\n *\n * The returned document is branded with a private Symbol that\n * `CustomerAccountClient.graphql()` validates at runtime — passing a plain\n * object with a `source` property will throw a `TypeError`.\n *\n * An optional second argument accepts an array of fragment documents. Fragments\n * are deduplicated by source string identity (`Set` check, not by fragment\n * name) and appended to the operation source.\n *\n * @example\n * ```ts\n * import { gql } from \"@shopify/hydrogen/customer-account\";\n *\n * const CUSTOMER_QUERY = gql(`\n *   query CustomerDetails {\n *     customer {\n *       firstName\n *       lastName\n *       emailAddress { emailAddress }\n *     }\n *   }\n * `);\n * ```\n *\n * @example\n * ```ts\n * const ORDER_FIELDS = gql(`\n *   fragment OrderFields on Order {\n *     id\n *     totalPrice { amount currencyCode }\n *   }\n * `);\n *\n * const ORDERS_QUERY = gql(`\n *   query CustomerOrders {\n *     customer {\n *       orders(first: 10) {\n *         nodes { ...OrderFields }\n *       }\n *     }\n *   }\n * `, [ORDER_FIELDS]);\n * ```\n */\n// oxlint-disable-next-line typescript-eslint/consistent-type-assertions -- gql.tada adds phantom helper properties to the function type that are not used at runtime.\nexport const gql = ((source: string, fragments?: readonly CustomerAccountDocument[]) => {\n  let query = source;\n\n  if (fragments) {\n    const seen = new Set<string>();\n    for (const fragment of fragments) {\n      assertCustomerAccountDocument(fragment);\n      if (!seen.has(fragment.source)) {\n        seen.add(fragment.source);\n        query += \"\\n\" + fragment.source;\n      }\n    }\n  }\n\n  const document = {\n    [CUSTOMER_ACCOUNT_DOCUMENT]: true,\n    source: query,\n    variableNames: getVariableNames(query),\n  } satisfies CustomerAccountDocumentValue;\n  return document;\n}) as unknown as CustomerAccountGql;\n\nexport function isCustomerAccountDocument(value: unknown): value is CustomerAccountDocumentValue {\n  if (!isObjectRecord(value)) return false;\n  return value[CUSTOMER_ACCOUNT_DOCUMENT] === true && typeof value.source === \"string\";\n}\n\nexport function assertCustomerAccountDocument(\n  value: unknown,\n): asserts value is CustomerAccountDocumentValue {\n  if (!isCustomerAccountDocument(value)) {\n    throw new TypeError(\"Expected a Customer Account API document returned by CAAPI.gql().\");\n  }\n}\n\nfunction getVariableNames(source: string): ReadonlySet<string> {\n  const names = new Set<string>();\n  for (const match of source.matchAll(VARIABLE_DEFINITION_RE)) {\n    names.add(match[1]);\n  }\n  return names;\n}\n"],"mappings":";;;AAYA,MAAM,4BAA4B,OAAO,0BAA0B;AACnE,MAAM,yBAAyB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA6H/B,MAAa,QAAQ,QAAgB,cAAmD;CACtF,IAAI,QAAQ;AAEZ,KAAI,WAAW;EACb,MAAM,uBAAO,IAAI,KAAa;AAC9B,OAAK,MAAM,YAAY,WAAW;AAChC,iCAA8B,SAAS;AACvC,OAAI,CAAC,KAAK,IAAI,SAAS,OAAO,EAAE;AAC9B,SAAK,IAAI,SAAS,OAAO;AACzB,aAAS,OAAO,SAAS;;;;AAU/B,QAAO;GAJJ,4BAA4B;EAC7B,QAAQ;EACR,eAAe,iBAAiB,MAAM;EAEzB;;AAGjB,SAAgB,0BAA0B,OAAuD;AAC/F,KAAI,CAAC,eAAe,MAAM,CAAE,QAAO;AACnC,QAAO,MAAM,+BAA+B,QAAQ,OAAO,MAAM,WAAW;;AAG9E,SAAgB,8BACd,OAC+C;AAC/C,KAAI,CAAC,0BAA0B,MAAM,CACnC,OAAM,IAAI,UAAU,oEAAoE;;AAI5F,SAAS,iBAAiB,QAAqC;CAC7D,MAAM,wBAAQ,IAAI,KAAa;AAC/B,MAAK,MAAM,SAAS,OAAO,SAAS,uBAAuB,CACzD,OAAM,IAAI,MAAM,GAAG;AAErB,QAAO"}
+{"version":3,"file":"graphql.mjs","names":[],"sources":["../../src/customer-account/graphql.ts"],"sourcesContent":["import type { DocumentDecoration, initGraphQLTada as InitGraphQLTada } from \"gql.tada\";\n\nimport { isObjectRecord } from \"../core/utils/record\";\nimport type { introspection } from \"../graphql/generated/customer-account-graphql-env\";\nimport type { CustomerAccountScalars } from \"../graphql/scalars\";\nimport type { InferResult, InferVariables } from \"./type-resolver\";\n\ntype CustomerAccountTadaGql = InitGraphQLTada<{\n  introspection: introspection;\n  scalars: CustomerAccountScalars;\n}>;\n\nconst CUSTOMER_ACCOUNT_DOCUMENT = Symbol(\"CustomerAccountDocument\");\nconst VARIABLE_DEFINITION_RE = /\\$([_A-Za-z][_0-9A-Za-z]*)\\s*:/g;\n\n/**\n * A Customer Account API query or mutation that `gql` from `@shopify/hydrogen/customer-account` returns. TypeScript infers the result and variables types from the document's GraphQL source.\n *\n * Create documents only with the Customer Account `gql` function. The client throws a `TypeError` for any other object.\n */\nexport type CustomerAccountDocument<\n  Result = unknown,\n  Variables = never,\n  Source extends string = string,\n> = DocumentDecoration<Result, Variables> & {\n  readonly [CUSTOMER_ACCOUNT_DOCUMENT]: true;\n  readonly source: Source;\n};\n\n/** Any Customer Account API document. Use the type as a constraint when a function accepts any document. */\nexport type AnyCustomerAccountDocument = CustomerAccountDocument<unknown, never, string>;\n\n/** Extracts the source string literal type from a Customer Account document. */\nexport type SourceOf<Doc> = Doc extends { readonly source: infer Source extends string }\n  ? Source\n  : never;\n\n/**\n * Joins the source strings of a tuple of fragment documents with newlines at the type level. An empty tuple produces `\"\"`.\n */\nexport type FragmentSources<Fragments extends readonly AnyCustomerAccountDocument[]> =\n  Fragments extends readonly []\n    ? \"\"\n    : Fragments extends readonly [infer Only extends AnyCustomerAccountDocument]\n      ? SourceOf<Only>\n      : Fragments extends readonly [\n            infer First extends AnyCustomerAccountDocument,\n            ...infer Rest extends readonly AnyCustomerAccountDocument[],\n          ]\n        ? `${SourceOf<First>}\\n${FragmentSources<Rest>}`\n        : string;\n\n/**\n * Combines an operation source with the sources of its fragments at the type level. With no fragments, the result is the operation source.\n *\n * @publicDocs\n */\nexport type ComposedSource<\n  Source extends string,\n  Fragments extends readonly AnyCustomerAccountDocument[],\n> = FragmentSources<Fragments> extends \"\" ? Source : `${Source}\\n${FragmentSources<Fragments>}`;\n\ntype CustomerAccountDocumentValue = AnyCustomerAccountDocument & {\n  readonly variableNames: ReadonlySet<string>;\n};\n\ntype CustomerAccountGql = {\n  <const Source extends string>(\n    source: Source,\n  ): CustomerAccountDocument<InferResult<Source>, InferVariables<Source>, Source>;\n  <\n    const Source extends string,\n    const Fragments extends readonly AnyCustomerAccountDocument[],\n    const DocumentSource extends string = ComposedSource<Source, Fragments>,\n  >(\n    source: Source,\n    fragments: Fragments,\n  ): CustomerAccountDocument<\n    InferResult<DocumentSource>,\n    InferVariables<DocumentSource>,\n    DocumentSource\n  >;\n} & CustomerAccountTadaGql;\n\n/**\n * Creates a typed Customer Account API query or mutation from a GraphQL source string. Pass the document to the Customer Account API client. Call `gql` as a regular function. Tagged template syntax doesn't work.\n *\n * Pass an array of fragment documents as the second argument to append the fragments to the operation. Each fragment must come from this `gql` function, or the call throws a `TypeError`.\n *\n * @example\n * ```ts\n * import { gql } from \"@shopify/hydrogen/customer-account\";\n *\n * const CUSTOMER_QUERY = gql(`\n *   query CustomerDetails {\n *     customer {\n *       firstName\n *       lastName\n *       emailAddress { emailAddress }\n *     }\n *   }\n * `);\n * ```\n *\n * @example\n * ```ts\n * const ORDER_FIELDS = gql(`\n *   fragment OrderFields on Order {\n *     id\n *     totalPrice { amount currencyCode }\n *   }\n * `);\n *\n * const ORDERS_QUERY = gql(`\n *   query CustomerOrders {\n *     customer {\n *       orders(first: 10) {\n *         nodes { ...OrderFields }\n *       }\n *     }\n *   }\n * `, [ORDER_FIELDS]);\n * ```\n * @publicDocs\n */\n// oxlint-disable-next-line typescript-eslint/consistent-type-assertions -- gql.tada adds phantom helper properties to the function type that are not used at runtime.\nexport const gql = ((source: string, fragments?: readonly CustomerAccountDocument[]) => {\n  let query = source;\n\n  if (fragments) {\n    const seen = new Set<string>();\n    for (const fragment of fragments) {\n      assertCustomerAccountDocument(fragment);\n      if (!seen.has(fragment.source)) {\n        seen.add(fragment.source);\n        query += \"\\n\" + fragment.source;\n      }\n    }\n  }\n\n  const document = {\n    [CUSTOMER_ACCOUNT_DOCUMENT]: true,\n    source: query,\n    variableNames: getVariableNames(query),\n  } satisfies CustomerAccountDocumentValue;\n  return document;\n}) as unknown as CustomerAccountGql;\n\nexport function isCustomerAccountDocument(value: unknown): value is CustomerAccountDocumentValue {\n  if (!isObjectRecord(value)) return false;\n  return value[CUSTOMER_ACCOUNT_DOCUMENT] === true && typeof value.source === \"string\";\n}\n\nexport function assertCustomerAccountDocument(\n  value: unknown,\n): asserts value is CustomerAccountDocumentValue {\n  if (!isCustomerAccountDocument(value)) {\n    throw new TypeError(\"Expected a Customer Account API document returned by CAAPI.gql().\");\n  }\n}\n\nfunction getVariableNames(source: string): ReadonlySet<string> {\n  const names = new Set<string>();\n  for (const match of source.matchAll(VARIABLE_DEFINITION_RE)) {\n    names.add(match[1]);\n  }\n  return names;\n}\n\n/**\n * Creates a typed Customer Account API query or mutation from a GraphQL source string. Pass the document to the Customer Account API client. Call `gql` as a regular function.\n *\n * Pass an array of fragment documents as the second argument to append the fragments to the operation. Each fragment must come from this `gql` function, or the call throws a `TypeError`.\n *\n * To validate documents, run `hydrogen gql check` in your `typecheck` script with the `@shopify/hydrogen/ts-plugin` setup. Framework typecheck commands don't validate the documents.\n *\n * @publicDocs\n */\nexport type CustomerAccountGqlForDocs =\n  /**\n   * @param source - The GraphQL source of an operation or a fragment.\n   * @param fragments - The fragment documents that the operation uses.\n   * @returns A typed document to pass to the Customer Account API client.\n   */\n  (source: string, fragments?: readonly AnyCustomerAccountDocument[]) => AnyCustomerAccountDocument;\n"],"mappings":";;;AAYA,MAAM,4BAA4B,OAAO,0BAA0B;AACnE,MAAM,yBAAyB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAiH/B,MAAa,QAAQ,QAAgB,cAAmD;CACtF,IAAI,QAAQ;AAEZ,KAAI,WAAW;EACb,MAAM,uBAAO,IAAI,KAAa;AAC9B,OAAK,MAAM,YAAY,WAAW;AAChC,iCAA8B,SAAS;AACvC,OAAI,CAAC,KAAK,IAAI,SAAS,OAAO,EAAE;AAC9B,SAAK,IAAI,SAAS,OAAO;AACzB,aAAS,OAAO,SAAS;;;;AAU/B,QAAO;GAJJ,4BAA4B;EAC7B,QAAQ;EACR,eAAe,iBAAiB,MAAM;EAEzB;;AAGjB,SAAgB,0BAA0B,OAAuD;AAC/F,KAAI,CAAC,eAAe,MAAM,CAAE,QAAO;AACnC,QAAO,MAAM,+BAA+B,QAAQ,OAAO,MAAM,WAAW;;AAG9E,SAAgB,8BACd,OAC+C;AAC/C,KAAI,CAAC,0BAA0B,MAAM,CACnC,OAAM,IAAI,UAAU,oEAAoE;;AAI5F,SAAS,iBAAiB,QAAqC;CAC7D,MAAM,wBAAQ,IAAI,KAAa;AAC/B,MAAK,MAAM,SAAS,OAAO,SAAS,uBAAuB,CACzD,OAAM,IAAI,MAAM,GAAG;AAErB,QAAO"}