@shopify/hydrogen 2026.4.4 → 2026.10.0-preview.1

package/dist/customer-account/graphql.d.mts

@@ -0,0 +1,29 @@
+import { CustomerAccountScalars } from "../graphql/scalars.mjs";
+import { introspection } from "../graphql/generated/customer-account-graphql-env.mjs";
+import { InferResult, InferVariables } from "./type-resolver.mjs";
+import { DocumentDecoration, initGraphQLTada } from "gql.tada";
+
+//#region src/customer-account/graphql.d.ts
+type CustomerAccountTadaGql = initGraphQLTada<{
+  introspection: introspection;
+  scalars: CustomerAccountScalars;
+}>;
+declare const CUSTOMER_ACCOUNT_DOCUMENT: unique symbol;
+type CustomerAccountDocument<Result = unknown, Variables = never, Source extends string = string> = DocumentDecoration<Result, Variables> & {
+  readonly [CUSTOMER_ACCOUNT_DOCUMENT]: true;
+  readonly source: Source;
+};
+type AnyCustomerAccountDocument = CustomerAccountDocument<unknown, never, string>;
+type SourceOf<Doc> = Doc extends {
+  readonly source: infer Source extends string;
+} ? Source : never;
+type FragmentSources<Fragments extends readonly AnyCustomerAccountDocument[]> = Fragments extends readonly [] ? "" : Fragments extends readonly [infer Only extends AnyCustomerAccountDocument] ? SourceOf<Only> : Fragments extends readonly [infer First extends AnyCustomerAccountDocument, ...infer Rest extends readonly AnyCustomerAccountDocument[]] ? `${SourceOf<First>}\n${FragmentSources<Rest>}` : string;
+type ComposedSource<Source extends string, Fragments extends readonly AnyCustomerAccountDocument[]> = FragmentSources<Fragments> extends "" ? Source : `${Source}\n${FragmentSources<Fragments>}`;
+type CustomerAccountGql = {
+  <const Source extends string>(source: Source): CustomerAccountDocument<InferResult<Source>, InferVariables<Source>, Source>;
+  <const Source extends string, const Fragments extends readonly AnyCustomerAccountDocument[], const DocumentSource extends string = ComposedSource<Source, Fragments>>(source: Source, fragments: Fragments): CustomerAccountDocument<InferResult<DocumentSource>, InferVariables<DocumentSource>, DocumentSource>;
+} & CustomerAccountTadaGql;
+declare const gql: CustomerAccountGql;
+//#endregion
+export { AnyCustomerAccountDocument, ComposedSource, CustomerAccountDocument, FragmentSources, SourceOf, gql };
+//# sourceMappingURL=graphql.d.mts.map

package/dist/customer-account/graphql.mjs

@@ -0,0 +1,39 @@
+import { isObjectRecord } from "../core/utils/record.mjs";
+
+//#region src/customer-account/graphql.ts
+const CUSTOMER_ACCOUNT_DOCUMENT = Symbol("CustomerAccountDocument");
+const VARIABLE_DEFINITION_RE = /\$([_A-Za-z][_0-9A-Za-z]*)\s*:/g;
+const gql = ((source, fragments) => {
+	let query = source;
+	if (fragments) {
+		const seen = /* @__PURE__ */ new Set();
+		for (const fragment of fragments) {
+			assertCustomerAccountDocument(fragment);
+			if (!seen.has(fragment.source)) {
+				seen.add(fragment.source);
+				query += "\n" + fragment.source;
+			}
+		}
+	}
+	return {
+		[CUSTOMER_ACCOUNT_DOCUMENT]: true,
+		source: query,
+		variableNames: getVariableNames(query)
+	};
+});
+function isCustomerAccountDocument(value) {
+	if (!isObjectRecord(value)) return false;
+	return value[CUSTOMER_ACCOUNT_DOCUMENT] === true && typeof value.source === "string";
+}
+function assertCustomerAccountDocument(value) {
+	if (!isCustomerAccountDocument(value)) throw new TypeError("Expected a Customer Account API document returned by CAAPI.gql().");
+}
+function getVariableNames(source) {
+	const names = /* @__PURE__ */ new Set();
+	for (const match of source.matchAll(VARIABLE_DEFINITION_RE)) names.add(match[1]);
+	return names;
+}
+
+//#endregion
+export { assertCustomerAccountDocument, gql };
+//# sourceMappingURL=graphql.mjs.map

package/dist/customer-account/graphql.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"graphql.mjs","names":[],"sources":["../../src/customer-account/graphql.ts"],"sourcesContent":["import type { DocumentDecoration, initGraphQLTada as InitGraphQLTada } from \"gql.tada\";\n\nimport { isObjectRecord } from \"../core/utils/record\";\nimport type { introspection } from \"../graphql/generated/customer-account-graphql-env\";\nimport type { CustomerAccountScalars } from \"../graphql/scalars\";\nimport type { InferResult, InferVariables } from \"./type-resolver\";\n\ntype CustomerAccountTadaGql = InitGraphQLTada<{\n  introspection: introspection;\n  scalars: CustomerAccountScalars;\n}>;\n\nconst CUSTOMER_ACCOUNT_DOCUMENT = Symbol(\"CustomerAccountDocument\");\nconst VARIABLE_DEFINITION_RE = /\\$([_A-Za-z][_0-9A-Za-z]*)\\s*:/g;\n\nexport type CustomerAccountDocument<\n  Result = unknown,\n  Variables = never,\n  Source extends string = string,\n> = DocumentDecoration<Result, Variables> & {\n  readonly [CUSTOMER_ACCOUNT_DOCUMENT]: true;\n  readonly source: Source;\n};\n\nexport type AnyCustomerAccountDocument = CustomerAccountDocument<unknown, never, string>;\n\nexport type SourceOf<Doc> = Doc extends { readonly source: infer Source extends string }\n  ? Source\n  : never;\n\nexport type FragmentSources<Fragments extends readonly AnyCustomerAccountDocument[]> =\n  Fragments extends readonly []\n    ? \"\"\n    : Fragments extends readonly [infer Only extends AnyCustomerAccountDocument]\n      ? SourceOf<Only>\n      : Fragments extends readonly [\n            infer First extends AnyCustomerAccountDocument,\n            ...infer Rest extends readonly AnyCustomerAccountDocument[],\n          ]\n        ? `${SourceOf<First>}\\n${FragmentSources<Rest>}`\n        : string;\n\nexport type ComposedSource<\n  Source extends string,\n  Fragments extends readonly AnyCustomerAccountDocument[],\n> = FragmentSources<Fragments> extends \"\" ? Source : `${Source}\\n${FragmentSources<Fragments>}`;\n\ntype CustomerAccountDocumentValue = AnyCustomerAccountDocument & {\n  readonly variableNames: ReadonlySet<string>;\n};\n\ntype CustomerAccountGql = {\n  <const Source extends string>(\n    source: Source,\n  ): CustomerAccountDocument<InferResult<Source>, InferVariables<Source>, Source>;\n  <\n    const Source extends string,\n    const Fragments extends readonly AnyCustomerAccountDocument[],\n    const DocumentSource extends string = ComposedSource<Source, Fragments>,\n  >(\n    source: Source,\n    fragments: Fragments,\n  ): CustomerAccountDocument<\n    InferResult<DocumentSource>,\n    InferVariables<DocumentSource>,\n    DocumentSource\n  >;\n} & CustomerAccountTadaGql;\n\n// oxlint-disable-next-line typescript-eslint/consistent-type-assertions -- gql.tada adds phantom helper properties to the function type that are not used at runtime.\nexport const gql = ((source: string, fragments?: readonly CustomerAccountDocument[]) => {\n  let query = source;\n\n  if (fragments) {\n    const seen = new Set<string>();\n    for (const fragment of fragments) {\n      assertCustomerAccountDocument(fragment);\n      if (!seen.has(fragment.source)) {\n        seen.add(fragment.source);\n        query += \"\\n\" + fragment.source;\n      }\n    }\n  }\n\n  const document = {\n    [CUSTOMER_ACCOUNT_DOCUMENT]: true,\n    source: query,\n    variableNames: getVariableNames(query),\n  } satisfies CustomerAccountDocumentValue;\n  return document;\n}) as unknown as CustomerAccountGql;\n\nexport function isCustomerAccountDocument(value: unknown): value is CustomerAccountDocumentValue {\n  if (!isObjectRecord(value)) return false;\n  return value[CUSTOMER_ACCOUNT_DOCUMENT] === true && typeof value.source === \"string\";\n}\n\nexport function assertCustomerAccountDocument(\n  value: unknown,\n): asserts value is CustomerAccountDocumentValue {\n  if (!isCustomerAccountDocument(value)) {\n    throw new TypeError(\"Expected a Customer Account API document returned by CAAPI.gql().\");\n  }\n}\n\nfunction getVariableNames(source: string): ReadonlySet<string> {\n  const names = new Set<string>();\n  for (const match of source.matchAll(VARIABLE_DEFINITION_RE)) {\n    names.add(match[1]);\n  }\n  return names;\n}\n"],"mappings":";;;AAYA,MAAM,4BAA4B,OAAO,0BAA0B;AACnE,MAAM,yBAAyB;AAyD/B,MAAa,QAAQ,QAAgB,cAAmD;CACtF,IAAI,QAAQ;AAEZ,KAAI,WAAW;EACb,MAAM,uBAAO,IAAI,KAAa;AAC9B,OAAK,MAAM,YAAY,WAAW;AAChC,iCAA8B,SAAS;AACvC,OAAI,CAAC,KAAK,IAAI,SAAS,OAAO,EAAE;AAC9B,SAAK,IAAI,SAAS,OAAO;AACzB,aAAS,OAAO,SAAS;;;;AAU/B,QAAO;GAJJ,4BAA4B;EAC7B,QAAQ;EACR,eAAe,iBAAiB,MAAM;EAEzB;;AAGjB,SAAgB,0BAA0B,OAAuD;AAC/F,KAAI,CAAC,eAAe,MAAM,CAAE,QAAO;AACnC,QAAO,MAAM,+BAA+B,QAAQ,OAAO,MAAM,WAAW;;AAG9E,SAAgB,8BACd,OAC+C;AAC/C,KAAI,CAAC,0BAA0B,MAAM,CACnC,OAAM,IAAI,UAAU,oEAAoE;;AAI5F,SAAS,iBAAiB,QAAqC;CAC7D,MAAM,wBAAQ,IAAI,KAAa;AAC/B,MAAK,MAAM,SAAS,OAAO,SAAS,uBAAuB,CACzD,OAAM,IAAI,MAAM,GAAG;AAErB,QAAO"}

package/dist/customer-account/index.d.mts

@@ -0,0 +1,7 @@
+import { Awaitable, CUSTOMER_ACCOUNT_AUTHORIZE_PATH, CUSTOMER_ACCOUNT_LOGIN_PATH, CUSTOMER_ACCOUNT_LOGOUT_PATH, CUSTOMER_ACCOUNT_REFRESH_PATH, CreateCustomerAccountServerHandlersOptions, CreateCustomerSessionOptions, CustomerAccountServerHandlers, CustomerAccountServerHandlersWithCartSync, CustomerSession, LogoutOptions, PrepareLoginUrlOptions, ReadonlyCustomerSessionManager, RequestOriginOptions, WritableCustomerSessionManager, createCustomerAccountServerHandlers, createCustomerSession } from "./session.mjs";
+import { CUSTOMER_ACCOUNT_API_VERSION } from "../core/constants.mjs";
+import { InferResult, InferVariables } from "./type-resolver.mjs";
+import { AnyCustomerAccountDocument, ComposedSource, CustomerAccountDocument, FragmentSources, SourceOf, gql } from "./graphql.mjs";
+import { CreateCustomerAccountClientOptions, CustomerAccountClient, CustomerAccountGqlRestParam, CustomerAccountGraphqlOptions, CustomerAccountGraphqlResult, createCustomerAccountClient } from "./client.mjs";
+import { CustomerAccountApiError, CustomerAccountAuthenticationError, CustomerAccountOAuthError, CustomerAccountTimeoutError } from "./errors.mjs";
+export { type AnyCustomerAccountDocument, type Awaitable, CUSTOMER_ACCOUNT_API_VERSION, CUSTOMER_ACCOUNT_AUTHORIZE_PATH, CUSTOMER_ACCOUNT_LOGIN_PATH, CUSTOMER_ACCOUNT_LOGOUT_PATH, CUSTOMER_ACCOUNT_REFRESH_PATH, type ComposedSource, type CreateCustomerAccountClientOptions, type CreateCustomerAccountServerHandlersOptions, type CreateCustomerSessionOptions, CustomerAccountApiError, CustomerAccountAuthenticationError, type CustomerAccountClient, type CustomerAccountDocument, type CustomerAccountGqlRestParam, type CustomerAccountGraphqlOptions, type CustomerAccountGraphqlResult, CustomerAccountOAuthError, type CustomerAccountServerHandlers, type CustomerAccountServerHandlersWithCartSync, CustomerAccountTimeoutError, type CustomerSession, type FragmentSources, type InferResult, type InferVariables, type LogoutOptions, type PrepareLoginUrlOptions, type ReadonlyCustomerSessionManager, type RequestOriginOptions, type SourceOf, type WritableCustomerSessionManager, createCustomerAccountClient, createCustomerAccountServerHandlers, createCustomerSession, gql };

package/dist/customer-account/index.mjs

@@ -0,0 +1,7 @@
+import { CUSTOMER_ACCOUNT_API_VERSION } from "../core/constants.mjs";
+import { CustomerAccountApiError, CustomerAccountAuthenticationError, CustomerAccountOAuthError, CustomerAccountTimeoutError } from "./errors.mjs";
+import { CUSTOMER_ACCOUNT_AUTHORIZE_PATH, CUSTOMER_ACCOUNT_LOGIN_PATH, CUSTOMER_ACCOUNT_LOGOUT_PATH, CUSTOMER_ACCOUNT_REFRESH_PATH, createCustomerAccountServerHandlers, createCustomerSession } from "./session.mjs";
+import { gql } from "./graphql.mjs";
+import { createCustomerAccountClient } from "./client.mjs";
+
+export { CUSTOMER_ACCOUNT_API_VERSION, CUSTOMER_ACCOUNT_AUTHORIZE_PATH, CUSTOMER_ACCOUNT_LOGIN_PATH, CUSTOMER_ACCOUNT_LOGOUT_PATH, CUSTOMER_ACCOUNT_REFRESH_PATH, CustomerAccountApiError, CustomerAccountAuthenticationError, CustomerAccountOAuthError, CustomerAccountTimeoutError, createCustomerAccountClient, createCustomerAccountServerHandlers, createCustomerSession, gql };

package/dist/customer-account/session.d.mts

@@ -0,0 +1,117 @@
+import { ShopifyRequestContext } from "../core/request-context.mjs";
+import { CallableRouteHandler, ShopifyRouteErrorResult, ShopifyRouteHandlerContext, ShopifyRouteRedirectResult, ShopifyRouteSessionManager } from "../core/request-routing/route-types.mjs";
+import { CartBuyerIdentitySyncSource } from "../core/cart/buyer-identity-sync.mjs";
+
+//#region src/customer-account/session.d.ts
+declare const CUSTOMER_ACCOUNT_AUTHORIZE_PATH: "/account/authorize";
+declare const CUSTOMER_ACCOUNT_LOGIN_PATH: "/account/login";
+declare const CUSTOMER_ACCOUNT_LOGOUT_PATH: "/account/logout";
+declare const CUSTOMER_ACCOUNT_REFRESH_PATH: "/account/refresh";
+declare const CUSTOMER_SESSION_INTERNAL_BRAND: unique symbol;
+type Awaitable<T> = T | Promise<T>;
+/** Read-only Customer Account session storage for UI state and strict access-token reads. */
+type ReadonlyCustomerSessionManager = {
+  getSessionItem(key: string): Awaitable<unknown>;
+};
+/** Writable Customer Account session storage for OAuth, refresh, and logout response boundaries. */
+type WritableCustomerSessionManager = ShopifyRouteSessionManager;
+type CreateCustomerSessionOptions = {
+  shopId: string;
+  customerAccountApiClientId: string;
+  customerAccountApiUrl?: string;
+  fetch?: typeof globalThis.fetch;
+  defaultTimeoutInMs?: number;
+};
+type PrepareLoginUrlOptions = {
+  origin?: string;
+  returnTo?: string;
+  locale?: string;
+  countryCode?: string;
+  loginHint?: string;
+  loginHintMode?: string;
+  acrValues?: string;
+};
+type RequestOriginOptions = {
+  origin?: string;
+};
+type LogoutOptions = RequestOriginOptions & {
+  postLogoutRedirectUri?: string;
+};
+type CustomerSession = {
+  /**
+   * Read-only signed-in check for UI state. Returns true for a usable access token
+   * or a refresh token that can attempt to restore one later. Not an authorization
+   * check for private Customer Account data.
+   */
+  isLoggedIn(sessionManager: ReadonlyCustomerSessionManager, requestContext: ShopifyRequestContext): Promise<boolean>; /** Returns only a currently usable access token. Does not refresh or mutate session state. */
+  getAccessToken(sessionManager: ReadonlyCustomerSessionManager, requestContext: ShopifyRequestContext): Promise<string | undefined>;
+  /**
+   * Returns a usable access token, writing updated session state through the
+   * supplied writable session manager when no usable access token is stored. Use
+   * only where the eventual response commits the session manager.
+   */
+  getOrRefreshAccessToken(sessionManager: WritableCustomerSessionManager, requestContext: ShopifyRequestContext, options?: RequestOriginOptions): Promise<string | undefined>;
+  prepareLoginUrl(sessionManager: WritableCustomerSessionManager, requestContext: ShopifyRequestContext, options: PrepareLoginUrlOptions): Promise<string>;
+  handleOAuthCallback(sessionManager: WritableCustomerSessionManager, requestContext: ShopifyRequestContext, request: Request): Promise<string>;
+  logout(sessionManager: WritableCustomerSessionManager, requestContext: ShopifyRequestContext, options?: LogoutOptions): Promise<string>;
+};
+type CustomerAccountServerHandlers<TContext extends CustomerAccountRouteHandlerContext = CustomerAccountRouteHandlerContext> = {
+  authorize: CallableRouteHandler<TContext, CustomerAccountRouteResult, typeof CUSTOMER_ACCOUNT_AUTHORIZE_PATH, "GET">;
+  login: CallableRouteHandler<TContext, CustomerAccountRouteResult, typeof CUSTOMER_ACCOUNT_LOGIN_PATH, "GET">;
+  logout: CallableRouteHandler<TContext, CustomerAccountRouteResult, typeof CUSTOMER_ACCOUNT_LOGOUT_PATH, "POST">;
+  refresh: CallableRouteHandler<TContext, CustomerAccountRouteResult, typeof CUSTOMER_ACCOUNT_REFRESH_PATH, "GET">;
+};
+/** Customer Account handlers that also synchronize cart buyer identity, so their context requires `storefrontClient`. */
+type CustomerAccountServerHandlersWithCartSync = CustomerAccountServerHandlers<ShopifyRouteHandlerContext>;
+type CustomerSessionWithInternals = CustomerSession & {
+  readonly [CUSTOMER_SESSION_INTERNAL_BRAND]: true;
+};
+type CreateCustomerAccountServerHandlersBaseOptions<TCustomerSession extends CustomerSession = CustomerSession> = {
+  customerSession: TCustomerSession;
+  defaultPostLoginRedirectPathname?: string;
+  loginFailedRedirectPath?: string;
+  origin?: string | ((request: Request) => string);
+  postLogoutRedirectUri?: string;
+};
+type CreateCustomerAccountServerHandlersOptions = (CreateCustomerAccountServerHandlersBaseOptions & {
+  cartServerHandlers?: undefined;
+}) | (CreateCustomerAccountServerHandlersBaseOptions<CustomerSessionWithInternals> & {
+  /**
+   * Cart server handlers created with `createCartServerHandlers({customerSession})`.
+   * When provided, the authorize, refresh, and logout routes keep the browser
+   * cart's buyer identity in step with the customer session: attach on login
+   * and refresh, detach on logout. Sync is best-effort — failures are logged
+   * and never block the route's redirect; a failed detach during logout
+   * expires the cart cookie instead.
+   */
+  cartServerHandlers: CartBuyerIdentitySyncSource;
+});
+type CustomerAccountRouteResult = ShopifyRouteRedirectResult | ShopifyRouteErrorResult;
+type CustomerAccountRouteHandlerContext = {
+  request: Request;
+  sessionManager: WritableCustomerSessionManager;
+  requestContext: ShopifyRequestContext;
+};
+type CustomerAccountServerHandlersForOptions<TOptions> = TOptions extends {
+  cartServerHandlers: CartBuyerIdentitySyncSource;
+} ? CustomerAccountServerHandlersWithCartSync : CustomerAccountServerHandlers;
+declare function createCustomerSession({
+  shopId,
+  customerAccountApiClientId,
+  customerAccountApiUrl,
+  fetch: customFetch,
+  defaultTimeoutInMs
+}: CreateCustomerSessionOptions): CustomerSessionWithInternals;
+/**
+ * Creates Customer Account server handlers (`/account/login`, `/account/authorize`,
+ * `/account/refresh`, `/account/logout`) for `handleShopifyRoutes`. The handlers
+ * return redirect results: `login` redirects to Shopify's OAuth, `logout` redirects
+ * to Shopify's logout endpoint when an `id_token` exists, and `authorize`/`refresh`
+ * redirect back to the app (same-origin `return_to`). Invoke these paths via
+ * full-page navigation (plain `<a>`/`<form>`), not a framework client-side
+ * navigation component — client-nav cannot follow these raw redirects.
+ */
+declare function createCustomerAccountServerHandlers<const TOptions extends CreateCustomerAccountServerHandlersOptions>(options: TOptions): CustomerAccountServerHandlersForOptions<TOptions>;
+//#endregion
+export { Awaitable, CUSTOMER_ACCOUNT_AUTHORIZE_PATH, CUSTOMER_ACCOUNT_LOGIN_PATH, CUSTOMER_ACCOUNT_LOGOUT_PATH, CUSTOMER_ACCOUNT_REFRESH_PATH, CreateCustomerAccountServerHandlersOptions, CreateCustomerSessionOptions, CustomerAccountServerHandlers, CustomerAccountServerHandlersWithCartSync, CustomerSession, LogoutOptions, PrepareLoginUrlOptions, ReadonlyCustomerSessionManager, RequestOriginOptions, WritableCustomerSessionManager, createCustomerAccountServerHandlers, createCustomerSession };
+//# sourceMappingURL=session.d.mts.map