@shopify/hydrogen 2026.4.4 → 2026.10.0-preview.1

package/dist/core/standard-routes/types.d.mts

@@ -0,0 +1,95 @@
+//#region src/core/standard-routes/types.d.ts
+type StandardRouteTemplateWithParam<Param extends string> = `/${string}:${Param}` | `/${string}:${Param}/${string}`;
+type StandardRouteTemplate = `/${string}`;
+type ShopifyRouteTemplates = {
+  /**
+   * Redirects Shopify article routes, for example
+   * `/blogs/news/snowboard-guide`, to the app's custom article route.
+   *
+   * @example "/journal/:blogHandle/:articleHandle"
+   */
+  article?: StandardRouteTemplateWithParam<"blogHandle"> & StandardRouteTemplateWithParam<"articleHandle">;
+  /**
+   * Redirects Shopify blog routes, for example `/blogs/news`, to the app's
+   * custom blog route.
+   *
+   * @example "/journal/:blogHandle"
+   */
+  blog?: StandardRouteTemplateWithParam<"blogHandle">;
+  /**
+   * Redirects Shopify's `/cart` route to the app's custom cart route.
+   *
+   * @example "/basket"
+   */
+  cart?: StandardRouteTemplate;
+  /**
+   * Redirects Shopify collection routes, for example `/collections/winter`,
+   * to the app's custom collection route.
+   *
+   * @example "/c/:collectionHandle"
+   */
+  collection?: StandardRouteTemplateWithParam<"collectionHandle">;
+  /**
+   * Redirects Shopify's collection-listing routes, `/collections` and the
+   * legacy `/products`, to the app's custom collection-listing route.
+   *
+   * @example "/catalog"
+   */
+  collectionList?: StandardRouteTemplate;
+  /**
+   * Redirects Shopify page routes, for example `/pages/about-us`, to the app's
+   * custom page route.
+   *
+   * @example "/content/:pageHandle"
+   */
+  page?: StandardRouteTemplateWithParam<"pageHandle">;
+  /**
+   * Redirects Shopify policy routes, for example `/policies/privacy-policy`,
+   * to the app's custom policy route.
+   *
+   * @example "/legal/:policyHandle"
+   */
+  policy?: StandardRouteTemplateWithParam<"policyHandle">;
+  /**
+   * Redirects Shopify product routes, for example `/products/snowboard`,
+   * to the app's custom product route.
+   *
+   * @example "/p/:productHandle"
+   */
+  product?: StandardRouteTemplateWithParam<"productHandle">;
+  /**
+   * Redirects Shopify collection-scoped product routes, for example
+   * `/collections/winter/products/snowboard`, to the app's custom product route.
+   *
+   * Must include `:productHandle`. May include `:collectionHandle` when the
+   * app's custom product route is also collection-scoped.
+   *
+   * @example "/p/:productHandle"
+   * @example "/c/:collectionHandle/p/:productHandle"
+   */
+  productInCollection?: StandardRouteTemplateWithParam<"productHandle">;
+  /**
+   * Redirects Shopify's `/search` route to the app's custom search route.
+   *
+   * @example "/find"
+   */
+  search?: StandardRouteTemplate;
+};
+type StandardRouteName = keyof ShopifyRouteTemplates;
+type ShopifyStandardRouteName = StandardRouteName | "index";
+type ShopifyPageTemplateName<TRoute extends ShopifyStandardRouteName = ShopifyStandardRouteName> = TRoute extends "productInCollection" ? "product" : TRoute extends "collectionList" ? "list-collections" : TRoute;
+type StandardRouteParamName = "articleHandle" | "blogHandle" | "collectionHandle" | "pageHandle" | "policyHandle" | "productHandle";
+type StandardRouteParams = Partial<Record<StandardRouteParamName, string>>;
+type ShopifyStandardRouteMatch<TRoute extends ShopifyStandardRouteName = ShopifyStandardRouteName> = {
+  standardPathname: string;
+  params: StandardRouteParams;
+  route: TRoute;
+  pageTemplateName: ShopifyPageTemplateName<TRoute>;
+  templates: {
+    standard: string;
+    custom: string;
+  };
+};
+//#endregion
+export { ShopifyRouteTemplates, ShopifyStandardRouteMatch };
+//# sourceMappingURL=types.d.mts.map

package/dist/core/url.mjs

@@ -0,0 +1,35 @@
+//#region src/core/url.ts
+const SFAPI_RE = /^\/api\/(unstable|2\d{3}-\d{2})\/graphql\.json$/;
+const SHOPIFY_API_PROXY_PREFIX = "/__shopify";
+const SHOPIFY_API_PROXY_RE = /^\/__shopify(?:\/|$)/;
+const MCP_RE = /^\/api\/mcp$/;
+const CHECKOUT_RE = /^\/checkout$/;
+const CART_PERMALINK_RE = /^\/cart\/\d+:\d+(?:,\d+:\d+)*$/;
+const CUSTOMER_ACCOUNT_PATHS = {
+	authorize: "/account/authorize",
+	login: "/account/login",
+	logout: "/account/logout",
+	refresh: "/account/refresh"
+};
+const CUSTOMER_ACCOUNT_HANDOFF_PATHS = new Set(Object.values(CUSTOMER_ACCOUNT_PATHS));
+/**
+* Returns whether the pathname conventionally represents a Hydrogen document-level server handoff.
+*
+* Keep this aligned with the routes intercepted before framework routing. API and protocol
+* interceptors are intentionally excluded because they are not browser navigation destinations.
+*/
+function isHydrogenServerHandoffPath(pathname) {
+	return CHECKOUT_RE.test(pathname) || CART_PERMALINK_RE.test(pathname) || CUSTOMER_ACCOUNT_HANDOFF_PATHS.has(pathname);
+}
+const AGENT_BUYER_CLAIMS_RE = /^(?:\/[a-z]{2}(?:-[a-z]{2})?)?\/agent\/(?:handoff|buyer-claims)(?:\.[^/.]+)?\/?$/i;
+const WELL_KNOWN_RE = /^\/\.well-known\/(?:apple-developer-merchantid-domain-association)$/;
+const AJAX_CART_RE = /^(?:\/[a-z]{2}(?:-[a-z]{2})?)?\/cart(?:\.(?:js|json)|\/(?:add|update|change|clear)(?:\.(?:js|json))?)$/i;
+function normalizeStoreDomain(domain) {
+	if (!domain) throw new Error("Storefront `storeDomain` is required.");
+	if (domain.startsWith("http://") || domain.startsWith("https://")) return domain.replace(/\/+$/, "");
+	return `https://${domain}`.replace(/\/+$/, "");
+}
+
+//#endregion
+export { AGENT_BUYER_CLAIMS_RE, AJAX_CART_RE, CHECKOUT_RE, CUSTOMER_ACCOUNT_PATHS, MCP_RE, SFAPI_RE, SHOPIFY_API_PROXY_PREFIX, SHOPIFY_API_PROXY_RE, WELL_KNOWN_RE, isHydrogenServerHandoffPath, normalizeStoreDomain };
+//# sourceMappingURL=url.mjs.map

package/dist/core/url.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"url.mjs","names":[],"sources":["../../src/core/url.ts"],"sourcesContent":["export const SFAPI_RE = /^\\/api\\/(unstable|2\\d{3}-\\d{2})\\/graphql\\.json$/;\nexport const SHOPIFY_API_PROXY_PREFIX = \"/__shopify\";\nexport const SHOPIFY_API_PROXY_RE = /^\\/__shopify(?:\\/|$)/;\nexport const MCP_RE = /^\\/api\\/mcp$/;\nexport const CHECKOUT_RE = /^\\/checkout$/;\nexport const CART_PERMALINK_RE = /^\\/cart\\/\\d+:\\d+(?:,\\d+:\\d+)*$/;\nexport const CUSTOMER_ACCOUNT_PATHS = {\n  authorize: \"/account/authorize\",\n  login: \"/account/login\",\n  logout: \"/account/logout\",\n  refresh: \"/account/refresh\",\n} as const;\n\nconst CUSTOMER_ACCOUNT_HANDOFF_PATHS: ReadonlySet<string> = new Set(\n  Object.values(CUSTOMER_ACCOUNT_PATHS),\n);\n\n/**\n * Returns whether the pathname conventionally represents a Hydrogen document-level server handoff.\n *\n * Keep this aligned with the routes intercepted before framework routing. API and protocol\n * interceptors are intentionally excluded because they are not browser navigation destinations.\n */\nexport function isHydrogenServerHandoffPath(pathname: string): boolean {\n  return (\n    CHECKOUT_RE.test(pathname) ||\n    CART_PERMALINK_RE.test(pathname) ||\n    CUSTOMER_ACCOUNT_HANDOFF_PATHS.has(pathname)\n  );\n}\n\nexport const AGENT_BUYER_CLAIMS_RE =\n  /^(?:\\/[a-z]{2}(?:-[a-z]{2})?)?\\/agent\\/(?:handoff|buyer-claims)(?:\\.[^/.]+)?\\/?$/i;\nexport const WELL_KNOWN_RE = /^\\/\\.well-known\\/(?:apple-developer-merchantid-domain-association)$/;\nexport const AJAX_CART_RE =\n  /^(?:\\/[a-z]{2}(?:-[a-z]{2})?)?\\/cart(?:\\.(?:js|json)|\\/(?:add|update|change|clear)(?:\\.(?:js|json))?)$/i;\n\nexport function normalizeStoreDomain(domain: string): string {\n  if (!domain) {\n    throw new Error(\"Storefront `storeDomain` is required.\");\n  }\n\n  if (domain.startsWith(\"http://\") || domain.startsWith(\"https://\")) {\n    return domain.replace(/\\/+$/, \"\");\n  }\n  return `https://${domain}`.replace(/\\/+$/, \"\");\n}\n"],"mappings":";AAAA,MAAa,WAAW;AACxB,MAAa,2BAA2B;AACxC,MAAa,uBAAuB;AACpC,MAAa,SAAS;AACtB,MAAa,cAAc;AAC3B,MAAa,oBAAoB;AACjC,MAAa,yBAAyB;CACpC,WAAW;CACX,OAAO;CACP,QAAQ;CACR,SAAS;CACV;AAED,MAAM,iCAAsD,IAAI,IAC9D,OAAO,OAAO,uBAAuB,CACtC;;;;;;;AAQD,SAAgB,4BAA4B,UAA2B;AACrE,QACE,YAAY,KAAK,SAAS,IAC1B,kBAAkB,KAAK,SAAS,IAChC,+BAA+B,IAAI,SAAS;;AAIhD,MAAa,wBACX;AACF,MAAa,gBAAgB;AAC7B,MAAa,eACX;AAEF,SAAgB,qBAAqB,QAAwB;AAC3D,KAAI,CAAC,OACH,OAAM,IAAI,MAAM,wCAAwC;AAG1D,KAAI,OAAO,WAAW,UAAU,IAAI,OAAO,WAAW,WAAW,CAC/D,QAAO,OAAO,QAAQ,QAAQ,GAAG;AAEnC,QAAO,WAAW,SAAS,QAAQ,QAAQ,GAAG"}

package/dist/core/utils/load-script.mjs

@@ -0,0 +1,34 @@
+//#region src/core/utils/load-script.ts
+/**
+* Inlined from @shopify/hydrogen-react/load-script.
+* Pure DOM script loader with no framework dependency.
+*/
+const SCRIPTS_LOADED = {};
+function loadScript(src, options) {
+	const isScriptLoaded = SCRIPTS_LOADED[src];
+	if (isScriptLoaded) return isScriptLoaded;
+	const promise = new Promise((resolve, reject) => {
+		const script = document.createElement("script");
+		script.type = options?.module ? "module" : "text/javascript";
+		script.src = src;
+		script.addEventListener("load", () => resolve(true));
+		script.addEventListener("error", () => {
+			delete SCRIPTS_LOADED[src];
+			reject(false);
+		});
+		if (options?.in === "head") document.head.appendChild(script);
+		else document.body.appendChild(script);
+		if (options?.attributes) {
+			const { attributes } = options;
+			Object.keys(attributes).forEach((key) => {
+				script.setAttribute(key, attributes[key]);
+			});
+		}
+	});
+	SCRIPTS_LOADED[src] = promise;
+	return promise;
+}
+
+//#endregion
+export { loadScript };
+//# sourceMappingURL=load-script.mjs.map

package/dist/core/utils/load-script.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"load-script.mjs","names":[],"sources":["../../../src/core/utils/load-script.ts"],"sourcesContent":["/**\n * Inlined from @shopify/hydrogen-react/load-script.\n * Pure DOM script loader with no framework dependency.\n */\n\nconst SCRIPTS_LOADED: Record<string, Promise<boolean>> = {};\n\ntype LoadScriptOptions = {\n  module?: boolean;\n  in?: \"head\" | \"body\";\n  attributes?: Record<string, string>;\n};\n\nexport function loadScript(src: string, options?: LoadScriptOptions): Promise<boolean> {\n  const isScriptLoaded = SCRIPTS_LOADED[src];\n  if (isScriptLoaded) return isScriptLoaded;\n\n  const promise = new Promise<boolean>((resolve, reject) => {\n    const script = document.createElement(\"script\");\n    script.type = options?.module ? \"module\" : \"text/javascript\";\n    script.src = src;\n    script.addEventListener(\"load\", () => resolve(true));\n    script.addEventListener(\"error\", () => {\n      delete SCRIPTS_LOADED[src];\n      reject(false);\n    });\n\n    if (options?.in === \"head\") {\n      document.head.appendChild(script);\n    } else {\n      document.body.appendChild(script);\n    }\n\n    if (options?.attributes) {\n      const { attributes } = options;\n      Object.keys(attributes).forEach((key) => {\n        script.setAttribute(key, attributes[key]);\n      });\n    }\n  });\n\n  SCRIPTS_LOADED[src] = promise;\n  return promise;\n}\n"],"mappings":";;;;;AAKA,MAAM,iBAAmD,EAAE;AAQ3D,SAAgB,WAAW,KAAa,SAA+C;CACrF,MAAM,iBAAiB,eAAe;AACtC,KAAI,eAAgB,QAAO;CAE3B,MAAM,UAAU,IAAI,SAAkB,SAAS,WAAW;EACxD,MAAM,SAAS,SAAS,cAAc,SAAS;AAC/C,SAAO,OAAO,SAAS,SAAS,WAAW;AAC3C,SAAO,MAAM;AACb,SAAO,iBAAiB,cAAc,QAAQ,KAAK,CAAC;AACpD,SAAO,iBAAiB,eAAe;AACrC,UAAO,eAAe;AACtB,UAAO,MAAM;IACb;AAEF,MAAI,SAAS,OAAO,OAClB,UAAS,KAAK,YAAY,OAAO;MAEjC,UAAS,KAAK,YAAY,OAAO;AAGnC,MAAI,SAAS,YAAY;GACvB,MAAM,EAAE,eAAe;AACvB,UAAO,KAAK,WAAW,CAAC,SAAS,QAAQ;AACvC,WAAO,aAAa,KAAK,WAAW,KAAK;KACzC;;GAEJ;AAEF,gBAAe,OAAO;AACtB,QAAO"}

package/dist/core/utils/parse-gid.mjs

@@ -0,0 +1,33 @@
+//#region src/core/utils/parse-gid.ts
+function parseGid(gid) {
+	const defaultReturn = {
+		id: "",
+		resource: null,
+		resourceId: null,
+		search: "",
+		searchParams: new URLSearchParams(),
+		hash: ""
+	};
+	if (typeof gid !== "string") return defaultReturn;
+	try {
+		const { search, searchParams, pathname, hash } = new URL(gid);
+		const pathnameParts = pathname.split("/");
+		const lastPathnamePart = pathnameParts[pathnameParts.length - 1];
+		const resourcePart = pathnameParts[pathnameParts.length - 2];
+		if (!lastPathnamePart || !resourcePart) return defaultReturn;
+		return {
+			id: `${lastPathnamePart}${search}${hash}` || "",
+			resource: resourcePart ?? null,
+			resourceId: lastPathnamePart || null,
+			search,
+			searchParams,
+			hash
+		};
+	} catch {
+		return defaultReturn;
+	}
+}
+
+//#endregion
+export { parseGid };
+//# sourceMappingURL=parse-gid.mjs.map

package/dist/core/utils/parse-gid.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"parse-gid.mjs","names":[],"sources":["../../../src/core/utils/parse-gid.ts"],"sourcesContent":["/**\n * Inlined from @shopify/hydrogen-react/analytics-utils.\n * Parses Shopify Global IDs (GIDs) into their component parts.\n */\n\ntype ShopifyGid = Pick<URL, \"search\" | \"searchParams\" | \"hash\"> & {\n  id: string;\n  resource: string | null;\n  resourceId: string | null;\n};\n\nexport function parseGid(gid: string | undefined): ShopifyGid {\n  const defaultReturn: ShopifyGid = {\n    id: \"\",\n    resource: null,\n    resourceId: null,\n    search: \"\",\n    searchParams: new URLSearchParams(),\n    hash: \"\",\n  };\n\n  if (typeof gid !== \"string\") return defaultReturn;\n\n  try {\n    const { search, searchParams, pathname, hash } = new URL(gid);\n    const pathnameParts = pathname.split(\"/\");\n    const lastPathnamePart = pathnameParts[pathnameParts.length - 1];\n    const resourcePart = pathnameParts[pathnameParts.length - 2];\n\n    if (!lastPathnamePart || !resourcePart) return defaultReturn;\n\n    const id = `${lastPathnamePart}${search}${hash}` || \"\";\n    const resourceId = lastPathnamePart || null;\n    const resource = resourcePart ?? null;\n\n    return { id, resource, resourceId, search, searchParams, hash };\n  } catch {\n    return defaultReturn;\n  }\n}\n"],"mappings":";AAWA,SAAgB,SAAS,KAAqC;CAC5D,MAAM,gBAA4B;EAChC,IAAI;EACJ,UAAU;EACV,YAAY;EACZ,QAAQ;EACR,cAAc,IAAI,iBAAiB;EACnC,MAAM;EACP;AAED,KAAI,OAAO,QAAQ,SAAU,QAAO;AAEpC,KAAI;EACF,MAAM,EAAE,QAAQ,cAAc,UAAU,SAAS,IAAI,IAAI,IAAI;EAC7D,MAAM,gBAAgB,SAAS,MAAM,IAAI;EACzC,MAAM,mBAAmB,cAAc,cAAc,SAAS;EAC9D,MAAM,eAAe,cAAc,cAAc,SAAS;AAE1D,MAAI,CAAC,oBAAoB,CAAC,aAAc,QAAO;AAM/C,SAAO;GAAE,IAJE,GAAG,mBAAmB,SAAS,UAAU;GAIvC,UAFI,gBAAgB;GAEV,YAHJ,oBAAoB;GAGJ;GAAQ;GAAc;GAAM;SACzD;AACN,SAAO"}

package/dist/core/utils/record.mjs

@@ -0,0 +1,8 @@
+//#region src/core/utils/record.ts
+function isObjectRecord(value) {
+	return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+
+//#endregion
+export { isObjectRecord };
+//# sourceMappingURL=record.mjs.map

package/dist/core/utils/record.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"record.mjs","names":[],"sources":["../../../src/core/utils/record.ts"],"sourcesContent":["export function isObjectRecord(value: unknown): value is Record<PropertyKey, unknown> {\n  return typeof value === \"object\" && value !== null && !Array.isArray(value);\n}\n"],"mappings":";AAAA,SAAgB,eAAe,OAAuD;AACpF,QAAO,OAAO,UAAU,YAAY,UAAU,QAAQ,CAAC,MAAM,QAAQ,MAAM"}

package/dist/customer-account/client.d.mts

@@ -0,0 +1,50 @@
+import { ShopifyRequestContext } from "../core/request-context.mjs";
+import { GraphQLFormattedError } from "../client/types.mjs";
+import { AnyCustomerAccountDocument, CustomerAccountDocument } from "./graphql.mjs";
+
+//#region src/customer-account/client.d.ts
+type CreateCustomerAccountClientOptions = {
+  shopId: string;
+  customerApiVersion?: string;
+  requestContext: ShopifyRequestContext;
+  fetch?: typeof globalThis.fetch;
+  defaultTimeoutInMs?: number;
+};
+type CustomerAccountGraphqlOptions<Variables = Record<string, unknown>> = {
+  accessToken: string;
+  variables?: Variables;
+  signal?: AbortSignal;
+};
+type ResultOfDoc<Doc> = Doc extends CustomerAccountDocument<infer Result, never, string> ? Result : never;
+type VariablesOfDoc<Doc> = Doc extends CustomerAccountDocument<unknown, infer Variables, string> ? Variables : never;
+type OptionalAutoVariables<Variables> = "language" extends keyof Variables ? {
+  language?: Variables["language"];
+} : {};
+type UserVariables<Doc> = Omit<VariablesOfDoc<Doc>, "language"> & OptionalAutoVariables<VariablesOfDoc<Doc>>;
+type HasNoRequiredKeys<T> = Record<string, never> extends T ? true : false;
+type CustomerAccountGraphqlResult<Result = unknown> = {
+  data: Result;
+  errors?: undefined;
+  headers: Headers;
+} | {
+  data: Result | null;
+  errors: GraphQLFormattedError[];
+  headers: Headers;
+};
+type CustomerAccountGqlRestParam<Doc extends AnyCustomerAccountDocument> = HasNoRequiredKeys<UserVariables<Doc>> extends true ? [options: CustomerAccountGraphqlOptions<UserVariables<Doc>>] : [options: CustomerAccountGraphqlOptions<UserVariables<Doc>> & {
+  variables: UserVariables<Doc>;
+}];
+type CustomerAccountClient = {
+  readonly apiUrl: string;
+  graphql: <const Doc extends AnyCustomerAccountDocument>(document: Doc, ...options: CustomerAccountGqlRestParam<Doc>) => Promise<CustomerAccountGraphqlResult<ResultOfDoc<Doc>>>;
+};
+declare function createCustomerAccountClient({
+  shopId,
+  customerApiVersion,
+  requestContext,
+  fetch: customFetch,
+  defaultTimeoutInMs
+}: CreateCustomerAccountClientOptions): CustomerAccountClient;
+//#endregion
+export { CreateCustomerAccountClientOptions, CustomerAccountClient, CustomerAccountGqlRestParam, CustomerAccountGraphqlOptions, CustomerAccountGraphqlResult, createCustomerAccountClient };
+//# sourceMappingURL=client.d.mts.map

package/dist/customer-account/client.mjs

@@ -0,0 +1,239 @@
+import { CUSTOMER_ACCOUNT_API_VERSION, DEFAULT_TIMEOUT_IN_MS } from "../core/constants.mjs";
+import { CustomerAccountApiError, CustomerAccountAuthenticationError, CustomerAccountTimeoutError } from "./errors.mjs";
+import { isObjectRecord } from "../core/utils/record.mjs";
+import { assertCustomerAccountDocument } from "./graphql.mjs";
+
+//#region src/customer-account/client.ts
+const SHOP_ID_RE = /^\d+$/;
+const CUSTOMER_API_VERSION_RE = /^\d{4}-\d{2}$/;
+const MAX_ASCII_CONTROL_CODE_POINT = 31;
+const ASCII_DELETE_CODE_POINT = 127;
+const MAX_SET_TIMEOUT_IN_MS = 2147483647;
+const LOCAL_ORIGIN_HOSTS = new Set([
+	"localhost",
+	"127.0.0.1",
+	"::1",
+	"[::1]"
+]);
+const USER_AGENT = `Hydrogen 2026.10.0-preview.1`;
+const CUSTOMER_ACCOUNT_GRAPHQL_PERSONALIZATION_REASON = "customer-account-graphql";
+function createCustomerAccountClient({ shopId, customerApiVersion = CUSTOMER_ACCOUNT_API_VERSION, requestContext, fetch: customFetch, defaultTimeoutInMs = DEFAULT_TIMEOUT_IN_MS }) {
+	if (typeof document !== "undefined") throw new Error("Customer Account API tokens cannot be used in a browser context. Use this client from server or edge routes only.");
+	validateShopId(shopId);
+	validateCustomerApiVersion(customerApiVersion);
+	validateTimeout(defaultTimeoutInMs);
+	const resolvedFetch = customFetch ?? globalThis.fetch;
+	if (typeof resolvedFetch !== "function") throw new Error("No fetch function available. Pass a fetch option or ensure globalThis.fetch exists.");
+	const origin = getOrigin(requestContext.url);
+	const apiUrl = `https://shopify.com/${shopId}/account/customer/api/${customerApiVersion}/graphql`;
+	async function graphql(document, ...rest) {
+		assertCustomerAccountDocument(document);
+		const options = validateGraphqlOptions(rest[0]);
+		requestContext.markResponseAsPersonalized(CUSTOMER_ACCOUNT_GRAPHQL_PERSONALIZATION_REASON);
+		const accessToken = validateAccessToken(options.accessToken);
+		const externalSignals = [requestContext.signal, options.signal].filter((signal) => Boolean(signal));
+		throwIfAlreadyAborted(externalSignals);
+		const { signal: timeoutSignal, cleanup: cleanupTimeout } = createCustomerAccountTimeoutSignal(defaultTimeoutInMs);
+		externalSignals.push(timeoutSignal);
+		const signal = AbortSignal.any(externalSignals);
+		try {
+			const variables = getVariables(document, getOptionalVariables(options.variables), requestContext.i18n.language);
+			return await readCustomerAccountGraphqlResponse(await fetchCustomerAccountGraphql({
+				fetch: resolvedFetch,
+				apiUrl,
+				accessToken,
+				origin,
+				query: document.source,
+				variables,
+				signal,
+				timeoutSignal,
+				timeoutInMs: defaultTimeoutInMs
+			}), signal, timeoutSignal, defaultTimeoutInMs);
+		} finally {
+			cleanupTimeout();
+		}
+	}
+	return {
+		apiUrl,
+		graphql
+	};
+}
+async function fetchCustomerAccountGraphql({ fetch, apiUrl, accessToken, origin, query, variables, signal, timeoutSignal, timeoutInMs }) {
+	try {
+		return await withAbort(fetch(apiUrl, {
+			method: "POST",
+			headers: new Headers({
+				Authorization: accessToken,
+				"Content-Type": "application/json",
+				Origin: origin,
+				"User-Agent": USER_AGENT
+			}),
+			body: JSON.stringify({
+				query,
+				variables
+			}),
+			cache: "no-store",
+			redirect: "manual",
+			signal
+		}), signal);
+	} catch (cause) {
+		throwIfCustomerAccountSignalAborted(signal, timeoutSignal, timeoutInMs);
+		if (isAbortError(cause)) throw cause;
+		throw new CustomerAccountApiError("Customer Account API request failed", { cause });
+	}
+}
+async function readCustomerAccountGraphqlResponse(response, signal, timeoutSignal, timeoutInMs) {
+	const requestId = response.headers.get("x-request-id") ?? void 0;
+	if (!response.ok) {
+		cancelResponseBody(response);
+		throw new CustomerAccountApiError(`Customer Account API responded with ${response.status}`, {
+			status: response.status,
+			requestId,
+			retryAfter: response.headers.get("retry-after") ?? void 0
+		});
+	}
+	let body;
+	try {
+		body = parseGraphqlResponse(await withAbort(response.json(), signal));
+	} catch (cause) {
+		cancelResponseBody(response);
+		throwIfCustomerAccountSignalAborted(signal, timeoutSignal, timeoutInMs);
+		if (isAbortError(cause)) throw cause;
+		throw new CustomerAccountApiError("Failed to parse Customer Account API response as JSON", {
+			status: response.status,
+			requestId,
+			cause
+		});
+	}
+	if (body.errors) return {
+		data: body.data ?? null,
+		errors: body.errors,
+		headers: response.headers
+	};
+	if (body.data == null) throw new CustomerAccountApiError("Customer Account API response did not include data", {
+		status: response.status,
+		requestId
+	});
+	return {
+		data: body.data,
+		headers: response.headers
+	};
+}
+function cancelResponseBody(response) {
+	try {
+		response.body?.cancel().catch(() => void 0);
+	} catch {}
+}
+function validateTimeout(timeoutInMs) {
+	if (!Number.isSafeInteger(timeoutInMs) || timeoutInMs <= 0 || timeoutInMs > MAX_SET_TIMEOUT_IN_MS) throw new Error(`defaultTimeoutInMs must be a positive safe integer no greater than ${MAX_SET_TIMEOUT_IN_MS}`);
+}
+function createCustomerAccountTimeoutSignal(timeoutInMs) {
+	const controller = new AbortController();
+	const timeoutId = setTimeout(() => {
+		controller.abort(new CustomerAccountTimeoutError(timeoutInMs));
+	}, timeoutInMs);
+	return {
+		signal: controller.signal,
+		cleanup: () => clearTimeout(timeoutId)
+	};
+}
+function withAbort(promise, signal) {
+	if (!signal) return Promise.resolve(promise);
+	if (signal.aborted) return Promise.reject(signal.reason ?? new DOMException("signal is aborted without reason", "AbortError"));
+	return new Promise((resolve, reject) => {
+		const abort = () => {
+			signal.removeEventListener("abort", abort);
+			reject(signal.reason ?? new DOMException("signal is aborted without reason", "AbortError"));
+		};
+		signal.addEventListener("abort", abort, { once: true });
+		Promise.resolve(promise).then((value) => {
+			signal.removeEventListener("abort", abort);
+			resolve(value);
+		}, (error) => {
+			signal.removeEventListener("abort", abort);
+			reject(error);
+		});
+	});
+}
+function getVariables(document, variables, language) {
+	if (!document.variableNames.has("language")) return variables;
+	if ("language" in variables) return variables;
+	return {
+		...variables,
+		language
+	};
+}
+function throwIfAlreadyAborted(signals) {
+	const abortedSignal = signals.find((signal) => signal.aborted);
+	if (!abortedSignal) return;
+	throw abortedSignal.reason ?? new DOMException("signal is aborted without reason", "AbortError");
+}
+function throwIfCustomerAccountSignalAborted(signal, timeoutSignal, timeoutInMs) {
+	if (!signal.aborted) return;
+	if (timeoutSignal.aborted && signal.reason === timeoutSignal.reason) {
+		const reason = timeoutSignal.reason;
+		throw reason instanceof CustomerAccountTimeoutError ? reason : new CustomerAccountTimeoutError(timeoutInMs);
+	}
+	throw signal.reason ?? new DOMException("signal is aborted without reason", "AbortError");
+}
+function isAbortError(cause) {
+	return cause instanceof DOMException && cause.name === "AbortError";
+}
+function parseGraphqlResponse(json) {
+	if (!isObjectRecord(json)) throw new Error("Customer Account API returned unexpected JSON type");
+	if (!("data" in json) && !("errors" in json)) throw new Error("Customer Account API response must include data or errors");
+	const errors = json.errors;
+	if (errors !== void 0 && !isGraphqlErrorArray(errors)) throw new Error("Customer Account API returned invalid GraphQL errors");
+	return {
+		data: json.data,
+		errors
+	};
+}
+function isGraphqlErrorArray(value) {
+	if (!Array.isArray(value)) return false;
+	return value.every((error) => {
+		return typeof error === "object" && error !== null && typeof error.message === "string";
+	});
+}
+function validateShopId(shopId) {
+	if (!SHOP_ID_RE.test(shopId)) throw new Error("shopId must be a numeric Shopify shop ID string");
+}
+function validateCustomerApiVersion(customerApiVersion) {
+	if (!CUSTOMER_API_VERSION_RE.test(customerApiVersion)) throw new Error("customerApiVersion must use YYYY-MM format");
+}
+function validateAccessToken(accessToken) {
+	if (typeof accessToken !== "string" || accessToken === "" || accessToken.trim() !== accessToken || hasAsciiControlCharacter(accessToken)) throw new CustomerAccountAuthenticationError();
+	return accessToken;
+}
+function validateGraphqlOptions(options) {
+	if (typeof options !== "object" || options === null) throw new CustomerAccountAuthenticationError();
+	return options;
+}
+function getOptionalVariables(variables) {
+	if (variables === void 0) return {};
+	if (!isObjectRecord(variables)) throw new TypeError("Customer Account API variables must be an object");
+	return variables;
+}
+function hasAsciiControlCharacter(value) {
+	for (let index = 0; index < value.length; index++) {
+		const codePoint = value.charCodeAt(index);
+		if (codePoint <= MAX_ASCII_CONTROL_CODE_POINT || codePoint === ASCII_DELETE_CODE_POINT) return true;
+	}
+	return false;
+}
+/**
+* Customer Account API requires an HTTPS Origin, but local dev frameworks often
+* receive `http://localhost` requests. Keep that local-only exception without
+* weakening origin validation for non-local requests.
+*/
+function getOrigin(requestUrl) {
+	if (!requestUrl) throw new Error("requestContext.url is required for Customer Account API requests");
+	const url = new URL(requestUrl);
+	if (url.protocol === "https:") return url.origin;
+	if (url.protocol === "http:" && LOCAL_ORIGIN_HOSTS.has(url.hostname)) return `https://${url.host}`;
+	throw new Error(`Customer Account API origin must use HTTPS. Received: ${requestUrl}`);
+}
+
+//#endregion
+export { createCustomerAccountClient };
+//# sourceMappingURL=client.mjs.map

package/dist/customer-account/client.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"client.mjs","names":[],"sources":["../../src/customer-account/client.ts"],"sourcesContent":["import type { GraphQLFormattedError } from \"../client/types\";\nimport { CUSTOMER_ACCOUNT_API_VERSION, DEFAULT_TIMEOUT_IN_MS } from \"../core/constants\";\nimport type { ShopifyRequestContext } from \"../core/request-context\";\nimport { isObjectRecord } from \"../core/utils/record\";\nimport {\n  CustomerAccountApiError,\n  CustomerAccountAuthenticationError,\n  CustomerAccountTimeoutError,\n} from \"./errors\";\nimport {\n  assertCustomerAccountDocument,\n  type AnyCustomerAccountDocument,\n  type CustomerAccountDocument,\n} from \"./graphql\";\n\nconst SHOP_ID_RE = /^\\d+$/;\nconst CUSTOMER_API_VERSION_RE = /^\\d{4}-\\d{2}$/;\nconst MAX_ASCII_CONTROL_CODE_POINT = 31;\nconst ASCII_DELETE_CODE_POINT = 127;\nconst MAX_SET_TIMEOUT_IN_MS = 2_147_483_647;\nconst LOCAL_ORIGIN_HOSTS = new Set([\"localhost\", \"127.0.0.1\", \"::1\", \"[::1]\"]);\nconst USER_AGENT = `Hydrogen ${__HYDROGEN_VERSION__}`;\nconst CUSTOMER_ACCOUNT_GRAPHQL_PERSONALIZATION_REASON = \"customer-account-graphql\";\n\ntype AccessToken = string | null | undefined;\ntype FetchCustomerAccountGraphqlParams = {\n  fetch: typeof globalThis.fetch;\n  apiUrl: string;\n  accessToken: string;\n  origin: string;\n  query: string;\n  variables: Record<string, unknown>;\n  signal: AbortSignal;\n  timeoutSignal: AbortSignal;\n  timeoutInMs: number;\n};\n\nexport type CreateCustomerAccountClientOptions = {\n  shopId: string;\n  customerApiVersion?: string;\n  requestContext: ShopifyRequestContext;\n  fetch?: typeof globalThis.fetch;\n  defaultTimeoutInMs?: number;\n};\n\nexport type CustomerAccountGraphqlOptions<Variables = Record<string, unknown>> = {\n  accessToken: string;\n  variables?: Variables;\n  signal?: AbortSignal;\n};\n\ntype ResultOfDoc<Doc> =\n  Doc extends CustomerAccountDocument<infer Result, never, string> ? Result : never;\ntype VariablesOfDoc<Doc> =\n  Doc extends CustomerAccountDocument<unknown, infer Variables, string> ? Variables : never;\ntype OptionalAutoVariables<Variables> = \"language\" extends keyof Variables\n  ? { language?: Variables[\"language\"] }\n  : {};\ntype UserVariables<Doc> = Omit<VariablesOfDoc<Doc>, \"language\"> &\n  OptionalAutoVariables<VariablesOfDoc<Doc>>;\ntype HasNoRequiredKeys<T> = Record<string, never> extends T ? true : false;\n\nexport type CustomerAccountGraphqlResult<Result = unknown> =\n  | { data: Result; errors?: undefined; headers: Headers }\n  | { data: Result | null; errors: GraphQLFormattedError[]; headers: Headers };\n\nexport type CustomerAccountGqlRestParam<Doc extends AnyCustomerAccountDocument> =\n  HasNoRequiredKeys<UserVariables<Doc>> extends true\n    ? [options: CustomerAccountGraphqlOptions<UserVariables<Doc>>]\n    : [\n        options: CustomerAccountGraphqlOptions<UserVariables<Doc>> & {\n          variables: UserVariables<Doc>;\n        },\n      ];\n\nexport type CustomerAccountClient = {\n  readonly apiUrl: string;\n  graphql: <const Doc extends AnyCustomerAccountDocument>(\n    document: Doc,\n    ...options: CustomerAccountGqlRestParam<Doc>\n  ) => Promise<CustomerAccountGraphqlResult<ResultOfDoc<Doc>>>;\n};\n\nexport function createCustomerAccountClient({\n  shopId,\n  customerApiVersion = CUSTOMER_ACCOUNT_API_VERSION,\n  requestContext,\n  fetch: customFetch,\n  defaultTimeoutInMs = DEFAULT_TIMEOUT_IN_MS,\n}: CreateCustomerAccountClientOptions): CustomerAccountClient {\n  if (typeof document !== \"undefined\") {\n    throw new Error(\n      \"Customer Account API tokens cannot be used in a browser context. Use this client from server or edge routes only.\",\n    );\n  }\n\n  validateShopId(shopId);\n  validateCustomerApiVersion(customerApiVersion);\n  validateTimeout(defaultTimeoutInMs);\n\n  const resolvedFetch = customFetch ?? globalThis.fetch;\n  if (typeof resolvedFetch !== \"function\") {\n    throw new Error(\n      \"No fetch function available. Pass a fetch option or ensure globalThis.fetch exists.\",\n    );\n  }\n\n  const origin = getOrigin(requestContext.url);\n  const apiUrl = `https://shopify.com/${shopId}/account/customer/api/${customerApiVersion}/graphql`;\n\n  async function graphql<const Doc extends AnyCustomerAccountDocument>(\n    document: Doc,\n    ...rest: CustomerAccountGqlRestParam<Doc>\n  ): Promise<CustomerAccountGraphqlResult<ResultOfDoc<Doc>>>;\n  async function graphql(\n    document: AnyCustomerAccountDocument,\n    ...rest: [options?: CustomerAccountGraphqlOptions<unknown>]\n  ): Promise<CustomerAccountGraphqlResult<unknown>> {\n    assertCustomerAccountDocument(document);\n    const options = validateGraphqlOptions(rest[0]);\n    requestContext.markResponseAsPersonalized(CUSTOMER_ACCOUNT_GRAPHQL_PERSONALIZATION_REASON);\n    const accessToken = validateAccessToken(options.accessToken);\n    const externalSignals = [requestContext.signal, options.signal].filter(\n      (signal): signal is AbortSignal => Boolean(signal),\n    );\n    throwIfAlreadyAborted(externalSignals);\n\n    const { signal: timeoutSignal, cleanup: cleanupTimeout } =\n      createCustomerAccountTimeoutSignal(defaultTimeoutInMs);\n    externalSignals.push(timeoutSignal);\n    const signal = AbortSignal.any(externalSignals);\n\n    try {\n      const variables = getVariables(\n        document,\n        getOptionalVariables(options.variables),\n        requestContext.i18n.language,\n      );\n      const response = await fetchCustomerAccountGraphql({\n        fetch: resolvedFetch,\n        apiUrl,\n        accessToken,\n        origin,\n        query: document.source,\n        variables,\n        signal,\n        timeoutSignal,\n        timeoutInMs: defaultTimeoutInMs,\n      });\n\n      return await readCustomerAccountGraphqlResponse(\n        response,\n        signal,\n        timeoutSignal,\n        defaultTimeoutInMs,\n      );\n    } finally {\n      cleanupTimeout();\n    }\n  }\n\n  return { apiUrl, graphql };\n}\n\nasync function fetchCustomerAccountGraphql({\n  fetch,\n  apiUrl,\n  accessToken,\n  origin,\n  query,\n  variables,\n  signal,\n  timeoutSignal,\n  timeoutInMs,\n}: FetchCustomerAccountGraphqlParams): Promise<Response> {\n  try {\n    return await withAbort(\n      fetch(apiUrl, {\n        method: \"POST\",\n        headers: new Headers({\n          Authorization: accessToken,\n          \"Content-Type\": \"application/json\",\n          Origin: origin,\n          \"User-Agent\": USER_AGENT,\n        }),\n        body: JSON.stringify({ query, variables }),\n        cache: \"no-store\",\n        redirect: \"manual\",\n        signal,\n      }),\n      signal,\n    );\n  } catch (cause) {\n    throwIfCustomerAccountSignalAborted(signal, timeoutSignal, timeoutInMs);\n    if (isAbortError(cause)) throw cause;\n    throw new CustomerAccountApiError(\"Customer Account API request failed\", { cause });\n  }\n}\n\nasync function readCustomerAccountGraphqlResponse(\n  response: Response,\n  signal: AbortSignal,\n  timeoutSignal: AbortSignal,\n  timeoutInMs: number,\n): Promise<CustomerAccountGraphqlResult<unknown>> {\n  const requestId = response.headers.get(\"x-request-id\") ?? undefined;\n  if (!response.ok) {\n    cancelResponseBody(response);\n    throw new CustomerAccountApiError(`Customer Account API responded with ${response.status}`, {\n      status: response.status,\n      requestId,\n      retryAfter: response.headers.get(\"retry-after\") ?? undefined,\n    });\n  }\n\n  let body: { data?: unknown; errors?: GraphQLFormattedError[] };\n  try {\n    body = parseGraphqlResponse(await withAbort(response.json(), signal));\n  } catch (cause) {\n    cancelResponseBody(response);\n\n    throwIfCustomerAccountSignalAborted(signal, timeoutSignal, timeoutInMs);\n    if (isAbortError(cause)) throw cause;\n    throw new CustomerAccountApiError(\"Failed to parse Customer Account API response as JSON\", {\n      status: response.status,\n      requestId,\n      cause,\n    });\n  }\n\n  if (body.errors) {\n    return { data: body.data ?? null, errors: body.errors, headers: response.headers };\n  }\n\n  if (body.data == null) {\n    throw new CustomerAccountApiError(\"Customer Account API response did not include data\", {\n      status: response.status,\n      requestId,\n    });\n  }\n\n  return { data: body.data, headers: response.headers };\n}\n\nfunction cancelResponseBody(response: Response): void {\n  try {\n    void response.body?.cancel().catch(() => undefined);\n  } catch {}\n}\n\nfunction validateTimeout(timeoutInMs: number): void {\n  if (\n    !Number.isSafeInteger(timeoutInMs) ||\n    timeoutInMs <= 0 ||\n    timeoutInMs > MAX_SET_TIMEOUT_IN_MS\n  ) {\n    throw new Error(\n      `defaultTimeoutInMs must be a positive safe integer no greater than ${MAX_SET_TIMEOUT_IN_MS}`,\n    );\n  }\n}\n\nfunction createCustomerAccountTimeoutSignal(timeoutInMs: number): {\n  signal: AbortSignal;\n  cleanup: () => void;\n} {\n  const controller = new AbortController();\n  const timeoutId = setTimeout(() => {\n    controller.abort(new CustomerAccountTimeoutError(timeoutInMs));\n  }, timeoutInMs);\n\n  return { signal: controller.signal, cleanup: () => clearTimeout(timeoutId) };\n}\n\nfunction withAbort<T>(promise: T | Promise<T>, signal: AbortSignal | undefined): Promise<T> {\n  if (!signal) return Promise.resolve(promise);\n  if (signal.aborted) {\n    return Promise.reject(\n      signal.reason ?? new DOMException(\"signal is aborted without reason\", \"AbortError\"),\n    );\n  }\n\n  return new Promise<T>((resolve, reject) => {\n    const abort = () => {\n      signal.removeEventListener(\"abort\", abort);\n      const reason =\n        signal.reason ?? new DOMException(\"signal is aborted without reason\", \"AbortError\");\n      reject(reason);\n    };\n    signal.addEventListener(\"abort\", abort, { once: true });\n    Promise.resolve(promise).then(\n      (value) => {\n        signal.removeEventListener(\"abort\", abort);\n        resolve(value);\n      },\n      (error) => {\n        signal.removeEventListener(\"abort\", abort);\n        reject(error);\n      },\n    );\n  });\n}\n\nfunction getVariables(\n  document: { variableNames: ReadonlySet<string> },\n  variables: Record<string, unknown>,\n  language: ShopifyRequestContext[\"i18n\"][\"language\"],\n): Record<string, unknown> {\n  if (!document.variableNames.has(\"language\")) return variables;\n  if (\"language\" in variables) return variables;\n  return { ...variables, language };\n}\n\nfunction throwIfAlreadyAborted(signals: AbortSignal[]): void {\n  const abortedSignal = signals.find((signal) => signal.aborted);\n  if (!abortedSignal) return;\n  throw abortedSignal.reason ?? new DOMException(\"signal is aborted without reason\", \"AbortError\");\n}\n\nfunction throwIfCustomerAccountSignalAborted(\n  signal: AbortSignal,\n  timeoutSignal: AbortSignal,\n  timeoutInMs: number,\n): void {\n  if (!signal.aborted) return;\n  if (timeoutSignal.aborted && signal.reason === timeoutSignal.reason) {\n    const reason = timeoutSignal.reason;\n    throw reason instanceof CustomerAccountTimeoutError\n      ? reason\n      : new CustomerAccountTimeoutError(timeoutInMs);\n  }\n  throw signal.reason ?? new DOMException(\"signal is aborted without reason\", \"AbortError\");\n}\n\nfunction isAbortError(cause: unknown): cause is DOMException {\n  return cause instanceof DOMException && cause.name === \"AbortError\";\n}\n\nfunction parseGraphqlResponse(json: unknown): {\n  data?: unknown;\n  errors?: GraphQLFormattedError[];\n} {\n  if (!isObjectRecord(json)) {\n    throw new Error(\"Customer Account API returned unexpected JSON type\");\n  }\n\n  if (!(\"data\" in json) && !(\"errors\" in json)) {\n    throw new Error(\"Customer Account API response must include data or errors\");\n  }\n  const errors = json.errors;\n  if (errors !== undefined && !isGraphqlErrorArray(errors)) {\n    throw new Error(\"Customer Account API returned invalid GraphQL errors\");\n  }\n  return { data: json.data, errors };\n}\n\nfunction isGraphqlErrorArray(value: unknown): value is GraphQLFormattedError[] {\n  if (!Array.isArray(value)) return false;\n  return value.every((error) => {\n    return typeof error === \"object\" && error !== null && typeof error.message === \"string\";\n  });\n}\n\nfunction validateShopId(shopId: string): void {\n  if (!SHOP_ID_RE.test(shopId)) {\n    throw new Error(\"shopId must be a numeric Shopify shop ID string\");\n  }\n}\n\nfunction validateCustomerApiVersion(customerApiVersion: string): void {\n  if (!CUSTOMER_API_VERSION_RE.test(customerApiVersion)) {\n    throw new Error(\"customerApiVersion must use YYYY-MM format\");\n  }\n}\n\nfunction validateAccessToken(accessToken: AccessToken): string {\n  if (\n    typeof accessToken !== \"string\" ||\n    accessToken === \"\" ||\n    accessToken.trim() !== accessToken ||\n    hasAsciiControlCharacter(accessToken)\n  ) {\n    throw new CustomerAccountAuthenticationError();\n  }\n  return accessToken;\n}\n\nfunction validateGraphqlOptions(\n  options: CustomerAccountGraphqlOptions<unknown> | undefined,\n): CustomerAccountGraphqlOptions<unknown> {\n  if (typeof options !== \"object\" || options === null) {\n    throw new CustomerAccountAuthenticationError();\n  }\n  return options;\n}\n\nfunction getOptionalVariables(variables: unknown): Record<string, unknown> {\n  if (variables === undefined) return {};\n  if (!isObjectRecord(variables)) {\n    throw new TypeError(\"Customer Account API variables must be an object\");\n  }\n  return variables;\n}\n\nfunction hasAsciiControlCharacter(value: string): boolean {\n  for (let index = 0; index < value.length; index++) {\n    const codePoint = value.charCodeAt(index);\n    if (codePoint <= MAX_ASCII_CONTROL_CODE_POINT || codePoint === ASCII_DELETE_CODE_POINT) {\n      return true;\n    }\n  }\n  return false;\n}\n\n/**\n * Customer Account API requires an HTTPS Origin, but local dev frameworks often\n * receive `http://localhost` requests. Keep that local-only exception without\n * weakening origin validation for non-local requests.\n */\nfunction getOrigin(requestUrl: string | undefined): string {\n  if (!requestUrl) {\n    throw new Error(\"requestContext.url is required for Customer Account API requests\");\n  }\n\n  const url = new URL(requestUrl);\n  if (url.protocol === \"https:\") return url.origin;\n  if (url.protocol === \"http:\" && LOCAL_ORIGIN_HOSTS.has(url.hostname)) {\n    return `https://${url.host}`;\n  }\n  throw new Error(`Customer Account API origin must use HTTPS. Received: ${requestUrl}`);\n}\n"],"mappings":";;;;;;AAeA,MAAM,aAAa;AACnB,MAAM,0BAA0B;AAChC,MAAM,+BAA+B;AACrC,MAAM,0BAA0B;AAChC,MAAM,wBAAwB;AAC9B,MAAM,qBAAqB,IAAI,IAAI;CAAC;CAAa;CAAa;CAAO;CAAQ,CAAC;AAC9E,MAAM,aAAa;AACnB,MAAM,kDAAkD;AA6DxD,SAAgB,4BAA4B,EAC1C,QACA,qBAAqB,8BACrB,gBACA,OAAO,aACP,qBAAqB,yBACuC;AAC5D,KAAI,OAAO,aAAa,YACtB,OAAM,IAAI,MACR,oHACD;AAGH,gBAAe,OAAO;AACtB,4BAA2B,mBAAmB;AAC9C,iBAAgB,mBAAmB;CAEnC,MAAM,gBAAgB,eAAe,WAAW;AAChD,KAAI,OAAO,kBAAkB,WAC3B,OAAM,IAAI,MACR,sFACD;CAGH,MAAM,SAAS,UAAU,eAAe,IAAI;CAC5C,MAAM,SAAS,uBAAuB,OAAO,wBAAwB,mBAAmB;CAMxF,eAAe,QACb,UACA,GAAG,MAC6C;AAChD,gCAA8B,SAAS;EACvC,MAAM,UAAU,uBAAuB,KAAK,GAAG;AAC/C,iBAAe,2BAA2B,gDAAgD;EAC1F,MAAM,cAAc,oBAAoB,QAAQ,YAAY;EAC5D,MAAM,kBAAkB,CAAC,eAAe,QAAQ,QAAQ,OAAO,CAAC,QAC7D,WAAkC,QAAQ,OAAO,CACnD;AACD,wBAAsB,gBAAgB;EAEtC,MAAM,EAAE,QAAQ,eAAe,SAAS,mBACtC,mCAAmC,mBAAmB;AACxD,kBAAgB,KAAK,cAAc;EACnC,MAAM,SAAS,YAAY,IAAI,gBAAgB;AAE/C,MAAI;GACF,MAAM,YAAY,aAChB,UACA,qBAAqB,QAAQ,UAAU,EACvC,eAAe,KAAK,SACrB;AAaD,UAAO,MAAM,mCACX,MAbqB,4BAA4B;IACjD,OAAO;IACP;IACA;IACA;IACA,OAAO,SAAS;IAChB;IACA;IACA;IACA,aAAa;IACd,CAAC,EAIA,QACA,eACA,mBACD;YACO;AACR,mBAAgB;;;AAIpB,QAAO;EAAE;EAAQ;EAAS;;AAG5B,eAAe,4BAA4B,EACzC,OACA,QACA,aACA,QACA,OACA,WACA,QACA,eACA,eACuD;AACvD,KAAI;AACF,SAAO,MAAM,UACX,MAAM,QAAQ;GACZ,QAAQ;GACR,SAAS,IAAI,QAAQ;IACnB,eAAe;IACf,gBAAgB;IAChB,QAAQ;IACR,cAAc;IACf,CAAC;GACF,MAAM,KAAK,UAAU;IAAE;IAAO;IAAW,CAAC;GAC1C,OAAO;GACP,UAAU;GACV;GACD,CAAC,EACF,OACD;UACM,OAAO;AACd,sCAAoC,QAAQ,eAAe,YAAY;AACvE,MAAI,aAAa,MAAM,CAAE,OAAM;AAC/B,QAAM,IAAI,wBAAwB,uCAAuC,EAAE,OAAO,CAAC;;;AAIvF,eAAe,mCACb,UACA,QACA,eACA,aACgD;CAChD,MAAM,YAAY,SAAS,QAAQ,IAAI,eAAe,IAAI;AAC1D,KAAI,CAAC,SAAS,IAAI;AAChB,qBAAmB,SAAS;AAC5B,QAAM,IAAI,wBAAwB,uCAAuC,SAAS,UAAU;GAC1F,QAAQ,SAAS;GACjB;GACA,YAAY,SAAS,QAAQ,IAAI,cAAc,IAAI;GACpD,CAAC;;CAGJ,IAAI;AACJ,KAAI;AACF,SAAO,qBAAqB,MAAM,UAAU,SAAS,MAAM,EAAE,OAAO,CAAC;UAC9D,OAAO;AACd,qBAAmB,SAAS;AAE5B,sCAAoC,QAAQ,eAAe,YAAY;AACvE,MAAI,aAAa,MAAM,CAAE,OAAM;AAC/B,QAAM,IAAI,wBAAwB,yDAAyD;GACzF,QAAQ,SAAS;GACjB;GACA;GACD,CAAC;;AAGJ,KAAI,KAAK,OACP,QAAO;EAAE,MAAM,KAAK,QAAQ;EAAM,QAAQ,KAAK;EAAQ,SAAS,SAAS;EAAS;AAGpF,KAAI,KAAK,QAAQ,KACf,OAAM,IAAI,wBAAwB,sDAAsD;EACtF,QAAQ,SAAS;EACjB;EACD,CAAC;AAGJ,QAAO;EAAE,MAAM,KAAK;EAAM,SAAS,SAAS;EAAS;;AAGvD,SAAS,mBAAmB,UAA0B;AACpD,KAAI;AACF,EAAK,SAAS,MAAM,QAAQ,CAAC,YAAY,OAAU;SAC7C;;AAGV,SAAS,gBAAgB,aAA2B;AAClD,KACE,CAAC,OAAO,cAAc,YAAY,IAClC,eAAe,KACf,cAAc,sBAEd,OAAM,IAAI,MACR,sEAAsE,wBACvE;;AAIL,SAAS,mCAAmC,aAG1C;CACA,MAAM,aAAa,IAAI,iBAAiB;CACxC,MAAM,YAAY,iBAAiB;AACjC,aAAW,MAAM,IAAI,4BAA4B,YAAY,CAAC;IAC7D,YAAY;AAEf,QAAO;EAAE,QAAQ,WAAW;EAAQ,eAAe,aAAa,UAAU;EAAE;;AAG9E,SAAS,UAAa,SAAyB,QAA6C;AAC1F,KAAI,CAAC,OAAQ,QAAO,QAAQ,QAAQ,QAAQ;AAC5C,KAAI,OAAO,QACT,QAAO,QAAQ,OACb,OAAO,UAAU,IAAI,aAAa,oCAAoC,aAAa,CACpF;AAGH,QAAO,IAAI,SAAY,SAAS,WAAW;EACzC,MAAM,cAAc;AAClB,UAAO,oBAAoB,SAAS,MAAM;AAG1C,UADE,OAAO,UAAU,IAAI,aAAa,oCAAoC,aAAa,CACvE;;AAEhB,SAAO,iBAAiB,SAAS,OAAO,EAAE,MAAM,MAAM,CAAC;AACvD,UAAQ,QAAQ,QAAQ,CAAC,MACtB,UAAU;AACT,UAAO,oBAAoB,SAAS,MAAM;AAC1C,WAAQ,MAAM;MAEf,UAAU;AACT,UAAO,oBAAoB,SAAS,MAAM;AAC1C,UAAO,MAAM;IAEhB;GACD;;AAGJ,SAAS,aACP,UACA,WACA,UACyB;AACzB,KAAI,CAAC,SAAS,cAAc,IAAI,WAAW,CAAE,QAAO;AACpD,KAAI,cAAc,UAAW,QAAO;AACpC,QAAO;EAAE,GAAG;EAAW;EAAU;;AAGnC,SAAS,sBAAsB,SAA8B;CAC3D,MAAM,gBAAgB,QAAQ,MAAM,WAAW,OAAO,QAAQ;AAC9D,KAAI,CAAC,cAAe;AACpB,OAAM,cAAc,UAAU,IAAI,aAAa,oCAAoC,aAAa;;AAGlG,SAAS,oCACP,QACA,eACA,aACM;AACN,KAAI,CAAC,OAAO,QAAS;AACrB,KAAI,cAAc,WAAW,OAAO,WAAW,cAAc,QAAQ;EACnE,MAAM,SAAS,cAAc;AAC7B,QAAM,kBAAkB,8BACpB,SACA,IAAI,4BAA4B,YAAY;;AAElD,OAAM,OAAO,UAAU,IAAI,aAAa,oCAAoC,aAAa;;AAG3F,SAAS,aAAa,OAAuC;AAC3D,QAAO,iBAAiB,gBAAgB,MAAM,SAAS;;AAGzD,SAAS,qBAAqB,MAG5B;AACA,KAAI,CAAC,eAAe,KAAK,CACvB,OAAM,IAAI,MAAM,qDAAqD;AAGvE,KAAI,EAAE,UAAU,SAAS,EAAE,YAAY,MACrC,OAAM,IAAI,MAAM,4DAA4D;CAE9E,MAAM,SAAS,KAAK;AACpB,KAAI,WAAW,UAAa,CAAC,oBAAoB,OAAO,CACtD,OAAM,IAAI,MAAM,uDAAuD;AAEzE,QAAO;EAAE,MAAM,KAAK;EAAM;EAAQ;;AAGpC,SAAS,oBAAoB,OAAkD;AAC7E,KAAI,CAAC,MAAM,QAAQ,MAAM,CAAE,QAAO;AAClC,QAAO,MAAM,OAAO,UAAU;AAC5B,SAAO,OAAO,UAAU,YAAY,UAAU,QAAQ,OAAO,MAAM,YAAY;GAC/E;;AAGJ,SAAS,eAAe,QAAsB;AAC5C,KAAI,CAAC,WAAW,KAAK,OAAO,CAC1B,OAAM,IAAI,MAAM,kDAAkD;;AAItE,SAAS,2BAA2B,oBAAkC;AACpE,KAAI,CAAC,wBAAwB,KAAK,mBAAmB,CACnD,OAAM,IAAI,MAAM,6CAA6C;;AAIjE,SAAS,oBAAoB,aAAkC;AAC7D,KACE,OAAO,gBAAgB,YACvB,gBAAgB,MAChB,YAAY,MAAM,KAAK,eACvB,yBAAyB,YAAY,CAErC,OAAM,IAAI,oCAAoC;AAEhD,QAAO;;AAGT,SAAS,uBACP,SACwC;AACxC,KAAI,OAAO,YAAY,YAAY,YAAY,KAC7C,OAAM,IAAI,oCAAoC;AAEhD,QAAO;;AAGT,SAAS,qBAAqB,WAA6C;AACzE,KAAI,cAAc,OAAW,QAAO,EAAE;AACtC,KAAI,CAAC,eAAe,UAAU,CAC5B,OAAM,IAAI,UAAU,mDAAmD;AAEzE,QAAO;;AAGT,SAAS,yBAAyB,OAAwB;AACxD,MAAK,IAAI,QAAQ,GAAG,QAAQ,MAAM,QAAQ,SAAS;EACjD,MAAM,YAAY,MAAM,WAAW,MAAM;AACzC,MAAI,aAAa,gCAAgC,cAAc,wBAC7D,QAAO;;AAGX,QAAO;;;;;;;AAQT,SAAS,UAAU,YAAwC;AACzD,KAAI,CAAC,WACH,OAAM,IAAI,MAAM,mEAAmE;CAGrF,MAAM,MAAM,IAAI,IAAI,WAAW;AAC/B,KAAI,IAAI,aAAa,SAAU,QAAO,IAAI;AAC1C,KAAI,IAAI,aAAa,WAAW,mBAAmB,IAAI,IAAI,SAAS,CAClE,QAAO,WAAW,IAAI;AAExB,OAAM,IAAI,MAAM,yDAAyD,aAAa"}

package/dist/customer-account/errors.d.mts

@@ -0,0 +1,28 @@
+//#region src/customer-account/errors.d.ts
+declare class CustomerAccountApiError extends Error {
+  readonly status?: number;
+  readonly requestId?: string;
+  readonly retryAfter?: string;
+  constructor(message: string, options?: {
+    status?: number;
+    requestId?: string;
+    retryAfter?: string;
+    cause?: unknown;
+  });
+}
+declare class CustomerAccountAuthenticationError extends CustomerAccountApiError {
+  constructor(message?: string);
+}
+declare class CustomerAccountTimeoutError extends CustomerAccountApiError {
+  readonly timeoutInMs: number;
+  constructor(timeoutInMs: number);
+}
+declare class CustomerAccountOAuthError extends Error {
+  readonly code: string;
+  constructor(code: string, message: string, options?: {
+    cause?: unknown;
+  });
+}
+//#endregion
+export { CustomerAccountApiError, CustomerAccountAuthenticationError, CustomerAccountOAuthError, CustomerAccountTimeoutError };
+//# sourceMappingURL=errors.d.mts.map

package/dist/customer-account/errors.mjs

@@ -0,0 +1,39 @@
+//#region src/customer-account/errors.ts
+var CustomerAccountApiError = class extends Error {
+	status;
+	requestId;
+	retryAfter;
+	constructor(message, options) {
+		super(message, options?.cause ? { cause: options.cause } : void 0);
+		this.name = "CustomerAccountApiError";
+		this.status = options?.status;
+		this.requestId = options?.requestId;
+		this.retryAfter = options?.retryAfter;
+	}
+};
+var CustomerAccountAuthenticationError = class extends CustomerAccountApiError {
+	constructor(message = "Customer Account API access token is required") {
+		super(message);
+		this.name = "CustomerAccountAuthenticationError";
+	}
+};
+var CustomerAccountTimeoutError = class extends CustomerAccountApiError {
+	timeoutInMs;
+	constructor(timeoutInMs) {
+		super(`Customer Account API request timed out after ${timeoutInMs}ms`);
+		this.name = "CustomerAccountTimeoutError";
+		this.timeoutInMs = timeoutInMs;
+	}
+};
+var CustomerAccountOAuthError = class extends Error {
+	code;
+	constructor(code, message, options) {
+		super(message, options?.cause ? { cause: options.cause } : void 0);
+		this.name = "CustomerAccountOAuthError";
+		this.code = code;
+	}
+};
+
+//#endregion
+export { CustomerAccountApiError, CustomerAccountAuthenticationError, CustomerAccountOAuthError, CustomerAccountTimeoutError };
+//# sourceMappingURL=errors.mjs.map

package/dist/customer-account/errors.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.mjs","names":[],"sources":["../../src/customer-account/errors.ts"],"sourcesContent":["export class CustomerAccountApiError extends Error {\n  readonly status?: number;\n  readonly requestId?: string;\n  readonly retryAfter?: string;\n\n  constructor(\n    message: string,\n    options?: { status?: number; requestId?: string; retryAfter?: string; cause?: unknown },\n  ) {\n    super(message, options?.cause ? { cause: options.cause } : undefined);\n    this.name = \"CustomerAccountApiError\";\n    this.status = options?.status;\n    this.requestId = options?.requestId;\n    this.retryAfter = options?.retryAfter;\n  }\n}\n\nexport class CustomerAccountAuthenticationError extends CustomerAccountApiError {\n  constructor(message = \"Customer Account API access token is required\") {\n    super(message);\n    this.name = \"CustomerAccountAuthenticationError\";\n  }\n}\n\nexport class CustomerAccountTimeoutError extends CustomerAccountApiError {\n  readonly timeoutInMs: number;\n\n  constructor(timeoutInMs: number) {\n    super(`Customer Account API request timed out after ${timeoutInMs}ms`);\n    this.name = \"CustomerAccountTimeoutError\";\n    this.timeoutInMs = timeoutInMs;\n  }\n}\n\nexport class CustomerAccountOAuthError extends Error {\n  readonly code: string;\n\n  constructor(code: string, message: string, options?: { cause?: unknown }) {\n    super(message, options?.cause ? { cause: options.cause } : undefined);\n    this.name = \"CustomerAccountOAuthError\";\n    this.code = code;\n  }\n}\n"],"mappings":";AAAA,IAAa,0BAAb,cAA6C,MAAM;CACjD,AAAS;CACT,AAAS;CACT,AAAS;CAET,YACE,SACA,SACA;AACA,QAAM,SAAS,SAAS,QAAQ,EAAE,OAAO,QAAQ,OAAO,GAAG,OAAU;AACrE,OAAK,OAAO;AACZ,OAAK,SAAS,SAAS;AACvB,OAAK,YAAY,SAAS;AAC1B,OAAK,aAAa,SAAS;;;AAI/B,IAAa,qCAAb,cAAwD,wBAAwB;CAC9E,YAAY,UAAU,iDAAiD;AACrE,QAAM,QAAQ;AACd,OAAK,OAAO;;;AAIhB,IAAa,8BAAb,cAAiD,wBAAwB;CACvE,AAAS;CAET,YAAY,aAAqB;AAC/B,QAAM,gDAAgD,YAAY,IAAI;AACtE,OAAK,OAAO;AACZ,OAAK,cAAc;;;AAIvB,IAAa,4BAAb,cAA+C,MAAM;CACnD,AAAS;CAET,YAAY,MAAc,SAAiB,SAA+B;AACxE,QAAM,SAAS,SAAS,QAAQ,EAAE,OAAO,QAAQ,OAAO,GAAG,OAAU;AACrE,OAAK,OAAO;AACZ,OAAK,OAAO"}