@shopify/hydrogen 2026.4.5 → 2026.10.0-preview.2

package/dist/customer-account/client.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"client.mjs","names":[],"sources":["../../src/customer-account/client.ts"],"sourcesContent":["import type { GraphQLFormattedError } from \"../client/types\";\nimport { CUSTOMER_ACCOUNT_API_VERSION, DEFAULT_TIMEOUT_IN_MS } from \"../core/constants\";\nimport type { ShopifyRequestContext } from \"../core/request-context\";\nimport { isObjectRecord } from \"../core/utils/record\";\nimport {\n  CustomerAccountApiError,\n  CustomerAccountAuthenticationError,\n  CustomerAccountTimeoutError,\n} from \"./errors\";\nimport {\n  assertCustomerAccountDocument,\n  type AnyCustomerAccountDocument,\n  type CustomerAccountDocument,\n} from \"./graphql\";\n\nconst SHOP_ID_RE = /^\\d+$/;\nconst CUSTOMER_API_VERSION_RE = /^\\d{4}-\\d{2}$/;\nconst MAX_ASCII_CONTROL_CODE_POINT = 31;\nconst ASCII_DELETE_CODE_POINT = 127;\nconst MAX_SET_TIMEOUT_IN_MS = 2_147_483_647;\nconst LOCAL_ORIGIN_HOSTS = new Set([\"localhost\", \"127.0.0.1\", \"::1\", \"[::1]\"]);\nconst USER_AGENT = `Hydrogen ${__HYDROGEN_VERSION__}`;\nconst CUSTOMER_ACCOUNT_GRAPHQL_PERSONALIZATION_REASON = \"customer-account-graphql\";\n\ntype AccessToken = string | null | undefined;\ntype FetchCustomerAccountGraphqlParams = {\n  fetch: typeof globalThis.fetch;\n  apiUrl: string;\n  accessToken: string;\n  origin: string;\n  query: string;\n  variables: Record<string, unknown>;\n  signal: AbortSignal;\n  timeoutSignal: AbortSignal;\n  timeoutInMs: number;\n};\n\nexport type CreateCustomerAccountClientOptions = {\n  shopId: string;\n  customerApiVersion?: string;\n  requestContext: ShopifyRequestContext;\n  fetch?: typeof globalThis.fetch;\n  defaultTimeoutInMs?: number;\n};\n\nexport type CustomerAccountGraphqlOptions<Variables = Record<string, unknown>> = {\n  accessToken: string;\n  variables?: Variables;\n  signal?: AbortSignal;\n};\n\ntype ResultOfDoc<Doc> =\n  Doc extends CustomerAccountDocument<infer Result, never, string> ? Result : never;\ntype VariablesOfDoc<Doc> =\n  Doc extends CustomerAccountDocument<unknown, infer Variables, string> ? Variables : never;\ntype OptionalAutoVariables<Variables> = \"language\" extends keyof Variables\n  ? { language?: Variables[\"language\"] }\n  : {};\ntype UserVariables<Doc> = Omit<VariablesOfDoc<Doc>, \"language\"> &\n  OptionalAutoVariables<VariablesOfDoc<Doc>>;\ntype HasNoRequiredKeys<T> = Record<string, never> extends T ? true : false;\n\nexport type CustomerAccountGraphqlResult<Result = unknown> =\n  | { data: Result; errors?: undefined; headers: Headers }\n  | { data: Result | null; errors: GraphQLFormattedError[]; headers: Headers };\n\nexport type CustomerAccountGqlRestParam<Doc extends AnyCustomerAccountDocument> =\n  HasNoRequiredKeys<UserVariables<Doc>> extends true\n    ? [options: CustomerAccountGraphqlOptions<UserVariables<Doc>>]\n    : [\n        options: CustomerAccountGraphqlOptions<UserVariables<Doc>> & {\n          variables: UserVariables<Doc>;\n        },\n      ];\n\nexport type CustomerAccountClient = {\n  readonly apiUrl: string;\n  graphql: <const Doc extends AnyCustomerAccountDocument>(\n    document: Doc,\n    ...options: CustomerAccountGqlRestParam<Doc>\n  ) => Promise<CustomerAccountGraphqlResult<ResultOfDoc<Doc>>>;\n};\n\nexport function createCustomerAccountClient({\n  shopId,\n  customerApiVersion = CUSTOMER_ACCOUNT_API_VERSION,\n  requestContext,\n  fetch: customFetch,\n  defaultTimeoutInMs = DEFAULT_TIMEOUT_IN_MS,\n}: CreateCustomerAccountClientOptions): CustomerAccountClient {\n  if (typeof document !== \"undefined\") {\n    throw new Error(\n      \"Customer Account API tokens cannot be used in a browser context. Use this client from server or edge routes only.\",\n    );\n  }\n\n  validateShopId(shopId);\n  validateCustomerApiVersion(customerApiVersion);\n  validateTimeout(defaultTimeoutInMs);\n\n  const resolvedFetch = customFetch ?? globalThis.fetch;\n  if (typeof resolvedFetch !== \"function\") {\n    throw new Error(\n      \"No fetch function available. Pass a fetch option or ensure globalThis.fetch exists.\",\n    );\n  }\n\n  const origin = getOrigin(requestContext.url);\n  const apiUrl = `https://shopify.com/${shopId}/account/customer/api/${customerApiVersion}/graphql`;\n\n  async function graphql<const Doc extends AnyCustomerAccountDocument>(\n    document: Doc,\n    ...rest: CustomerAccountGqlRestParam<Doc>\n  ): Promise<CustomerAccountGraphqlResult<ResultOfDoc<Doc>>>;\n  async function graphql(\n    document: AnyCustomerAccountDocument,\n    ...rest: [options?: CustomerAccountGraphqlOptions<unknown>]\n  ): Promise<CustomerAccountGraphqlResult<unknown>> {\n    assertCustomerAccountDocument(document);\n    const options = validateGraphqlOptions(rest[0]);\n    requestContext.markResponseAsPersonalized(CUSTOMER_ACCOUNT_GRAPHQL_PERSONALIZATION_REASON);\n    const accessToken = validateAccessToken(options.accessToken);\n    const externalSignals = [requestContext.signal, options.signal].filter(\n      (signal): signal is AbortSignal => Boolean(signal),\n    );\n    throwIfAlreadyAborted(externalSignals);\n\n    const { signal: timeoutSignal, cleanup: cleanupTimeout } =\n      createCustomerAccountTimeoutSignal(defaultTimeoutInMs);\n    externalSignals.push(timeoutSignal);\n    const signal = AbortSignal.any(externalSignals);\n\n    try {\n      const variables = getVariables(\n        document,\n        getOptionalVariables(options.variables),\n        requestContext.i18n.language,\n      );\n      const response = await fetchCustomerAccountGraphql({\n        fetch: resolvedFetch,\n        apiUrl,\n        accessToken,\n        origin,\n        query: document.source,\n        variables,\n        signal,\n        timeoutSignal,\n        timeoutInMs: defaultTimeoutInMs,\n      });\n\n      return await readCustomerAccountGraphqlResponse(\n        response,\n        signal,\n        timeoutSignal,\n        defaultTimeoutInMs,\n      );\n    } finally {\n      cleanupTimeout();\n    }\n  }\n\n  return { apiUrl, graphql };\n}\n\nasync function fetchCustomerAccountGraphql({\n  fetch,\n  apiUrl,\n  accessToken,\n  origin,\n  query,\n  variables,\n  signal,\n  timeoutSignal,\n  timeoutInMs,\n}: FetchCustomerAccountGraphqlParams): Promise<Response> {\n  try {\n    return await withAbort(\n      fetch(apiUrl, {\n        method: \"POST\",\n        headers: new Headers({\n          Authorization: accessToken,\n          \"Content-Type\": \"application/json\",\n          Origin: origin,\n          \"User-Agent\": USER_AGENT,\n        }),\n        body: JSON.stringify({ query, variables }),\n        cache: \"no-store\",\n        redirect: \"manual\",\n        signal,\n      }),\n      signal,\n    );\n  } catch (cause) {\n    throwIfCustomerAccountSignalAborted(signal, timeoutSignal, timeoutInMs);\n    if (isAbortError(cause)) throw cause;\n    throw new CustomerAccountApiError(\"Customer Account API request failed\", { cause });\n  }\n}\n\nasync function readCustomerAccountGraphqlResponse(\n  response: Response,\n  signal: AbortSignal,\n  timeoutSignal: AbortSignal,\n  timeoutInMs: number,\n): Promise<CustomerAccountGraphqlResult<unknown>> {\n  const requestId = response.headers.get(\"x-request-id\") ?? undefined;\n  if (!response.ok) {\n    cancelResponseBody(response);\n    throw new CustomerAccountApiError(`Customer Account API responded with ${response.status}`, {\n      status: response.status,\n      requestId,\n      retryAfter: response.headers.get(\"retry-after\") ?? undefined,\n    });\n  }\n\n  let body: { data?: unknown; errors?: GraphQLFormattedError[] };\n  try {\n    body = parseGraphqlResponse(await withAbort(response.json(), signal));\n  } catch (cause) {\n    cancelResponseBody(response);\n\n    throwIfCustomerAccountSignalAborted(signal, timeoutSignal, timeoutInMs);\n    if (isAbortError(cause)) throw cause;\n    throw new CustomerAccountApiError(\"Failed to parse Customer Account API response as JSON\", {\n      status: response.status,\n      requestId,\n      cause,\n    });\n  }\n\n  if (body.errors) {\n    return { data: body.data ?? null, errors: body.errors, headers: response.headers };\n  }\n\n  if (body.data == null) {\n    throw new CustomerAccountApiError(\"Customer Account API response did not include data\", {\n      status: response.status,\n      requestId,\n    });\n  }\n\n  return { data: body.data, headers: response.headers };\n}\n\nfunction cancelResponseBody(response: Response): void {\n  try {\n    void response.body?.cancel().catch(() => undefined);\n  } catch {}\n}\n\nfunction validateTimeout(timeoutInMs: number): void {\n  if (\n    !Number.isSafeInteger(timeoutInMs) ||\n    timeoutInMs <= 0 ||\n    timeoutInMs > MAX_SET_TIMEOUT_IN_MS\n  ) {\n    throw new Error(\n      `defaultTimeoutInMs must be a positive safe integer no greater than ${MAX_SET_TIMEOUT_IN_MS}`,\n    );\n  }\n}\n\nfunction createCustomerAccountTimeoutSignal(timeoutInMs: number): {\n  signal: AbortSignal;\n  cleanup: () => void;\n} {\n  const controller = new AbortController();\n  const timeoutId = setTimeout(() => {\n    controller.abort(new CustomerAccountTimeoutError(timeoutInMs));\n  }, timeoutInMs);\n\n  return { signal: controller.signal, cleanup: () => clearTimeout(timeoutId) };\n}\n\nfunction withAbort<T>(promise: T | Promise<T>, signal: AbortSignal | undefined): Promise<T> {\n  if (!signal) return Promise.resolve(promise);\n  if (signal.aborted) {\n    return Promise.reject(\n      signal.reason ?? new DOMException(\"signal is aborted without reason\", \"AbortError\"),\n    );\n  }\n\n  return new Promise<T>((resolve, reject) => {\n    const abort = () => {\n      signal.removeEventListener(\"abort\", abort);\n      const reason =\n        signal.reason ?? new DOMException(\"signal is aborted without reason\", \"AbortError\");\n      reject(reason);\n    };\n    signal.addEventListener(\"abort\", abort, { once: true });\n    Promise.resolve(promise).then(\n      (value) => {\n        signal.removeEventListener(\"abort\", abort);\n        resolve(value);\n      },\n      (error) => {\n        signal.removeEventListener(\"abort\", abort);\n        reject(error);\n      },\n    );\n  });\n}\n\nfunction getVariables(\n  document: { variableNames: ReadonlySet<string> },\n  variables: Record<string, unknown>,\n  language: ShopifyRequestContext[\"i18n\"][\"language\"],\n): Record<string, unknown> {\n  if (!document.variableNames.has(\"language\")) return variables;\n  if (\"language\" in variables) return variables;\n  return { ...variables, language };\n}\n\nfunction throwIfAlreadyAborted(signals: AbortSignal[]): void {\n  const abortedSignal = signals.find((signal) => signal.aborted);\n  if (!abortedSignal) return;\n  throw abortedSignal.reason ?? new DOMException(\"signal is aborted without reason\", \"AbortError\");\n}\n\nfunction throwIfCustomerAccountSignalAborted(\n  signal: AbortSignal,\n  timeoutSignal: AbortSignal,\n  timeoutInMs: number,\n): void {\n  if (!signal.aborted) return;\n  if (timeoutSignal.aborted && signal.reason === timeoutSignal.reason) {\n    const reason = timeoutSignal.reason;\n    throw reason instanceof CustomerAccountTimeoutError\n      ? reason\n      : new CustomerAccountTimeoutError(timeoutInMs);\n  }\n  throw signal.reason ?? new DOMException(\"signal is aborted without reason\", \"AbortError\");\n}\n\nfunction isAbortError(cause: unknown): cause is DOMException {\n  return cause instanceof DOMException && cause.name === \"AbortError\";\n}\n\nfunction parseGraphqlResponse(json: unknown): {\n  data?: unknown;\n  errors?: GraphQLFormattedError[];\n} {\n  if (!isObjectRecord(json)) {\n    throw new Error(\"Customer Account API returned unexpected JSON type\");\n  }\n\n  if (!(\"data\" in json) && !(\"errors\" in json)) {\n    throw new Error(\"Customer Account API response must include data or errors\");\n  }\n  const errors = json.errors;\n  if (errors !== undefined && !isGraphqlErrorArray(errors)) {\n    throw new Error(\"Customer Account API returned invalid GraphQL errors\");\n  }\n  return { data: json.data, errors };\n}\n\nfunction isGraphqlErrorArray(value: unknown): value is GraphQLFormattedError[] {\n  if (!Array.isArray(value)) return false;\n  return value.every((error) => {\n    return typeof error === \"object\" && error !== null && typeof error.message === \"string\";\n  });\n}\n\nfunction validateShopId(shopId: string): void {\n  if (!SHOP_ID_RE.test(shopId)) {\n    throw new Error(\"shopId must be a numeric Shopify shop ID string\");\n  }\n}\n\nfunction validateCustomerApiVersion(customerApiVersion: string): void {\n  if (!CUSTOMER_API_VERSION_RE.test(customerApiVersion)) {\n    throw new Error(\"customerApiVersion must use YYYY-MM format\");\n  }\n}\n\nfunction validateAccessToken(accessToken: AccessToken): string {\n  if (\n    typeof accessToken !== \"string\" ||\n    accessToken === \"\" ||\n    accessToken.trim() !== accessToken ||\n    hasAsciiControlCharacter(accessToken)\n  ) {\n    throw new CustomerAccountAuthenticationError();\n  }\n  return accessToken;\n}\n\nfunction validateGraphqlOptions(\n  options: CustomerAccountGraphqlOptions<unknown> | undefined,\n): CustomerAccountGraphqlOptions<unknown> {\n  if (typeof options !== \"object\" || options === null) {\n    throw new CustomerAccountAuthenticationError();\n  }\n  return options;\n}\n\nfunction getOptionalVariables(variables: unknown): Record<string, unknown> {\n  if (variables === undefined) return {};\n  if (!isObjectRecord(variables)) {\n    throw new TypeError(\"Customer Account API variables must be an object\");\n  }\n  return variables;\n}\n\nfunction hasAsciiControlCharacter(value: string): boolean {\n  for (let index = 0; index < value.length; index++) {\n    const codePoint = value.charCodeAt(index);\n    if (codePoint <= MAX_ASCII_CONTROL_CODE_POINT || codePoint === ASCII_DELETE_CODE_POINT) {\n      return true;\n    }\n  }\n  return false;\n}\n\n/**\n * Customer Account API requires an HTTPS Origin, but local dev frameworks often\n * receive `http://localhost` requests. Keep that local-only exception without\n * weakening origin validation for non-local requests.\n */\nfunction getOrigin(requestUrl: string | undefined): string {\n  if (!requestUrl) {\n    throw new Error(\"requestContext.url is required for Customer Account API requests\");\n  }\n\n  const url = new URL(requestUrl);\n  if (url.protocol === \"https:\") return url.origin;\n  if (url.protocol === \"http:\" && LOCAL_ORIGIN_HOSTS.has(url.hostname)) {\n    return `https://${url.host}`;\n  }\n  throw new Error(`Customer Account API origin must use HTTPS. Received: ${requestUrl}`);\n}\n"],"mappings":";;;;;;AAeA,MAAM,aAAa;AACnB,MAAM,0BAA0B;AAChC,MAAM,+BAA+B;AACrC,MAAM,0BAA0B;AAChC,MAAM,wBAAwB;AAC9B,MAAM,qBAAqB,IAAI,IAAI;CAAC;CAAa;CAAa;CAAO;CAAQ,CAAC;AAC9E,MAAM,aAAa;AACnB,MAAM,kDAAkD;AA6DxD,SAAgB,4BAA4B,EAC1C,QACA,qBAAqB,8BACrB,gBACA,OAAO,aACP,qBAAqB,yBACuC;AAC5D,KAAI,OAAO,aAAa,YACtB,OAAM,IAAI,MACR,oHACD;AAGH,gBAAe,OAAO;AACtB,4BAA2B,mBAAmB;AAC9C,iBAAgB,mBAAmB;CAEnC,MAAM,gBAAgB,eAAe,WAAW;AAChD,KAAI,OAAO,kBAAkB,WAC3B,OAAM,IAAI,MACR,sFACD;CAGH,MAAM,SAAS,UAAU,eAAe,IAAI;CAC5C,MAAM,SAAS,uBAAuB,OAAO,wBAAwB,mBAAmB;CAMxF,eAAe,QACb,UACA,GAAG,MAC6C;AAChD,gCAA8B,SAAS;EACvC,MAAM,UAAU,uBAAuB,KAAK,GAAG;AAC/C,iBAAe,2BAA2B,gDAAgD;EAC1F,MAAM,cAAc,oBAAoB,QAAQ,YAAY;EAC5D,MAAM,kBAAkB,CAAC,eAAe,QAAQ,QAAQ,OAAO,CAAC,QAC7D,WAAkC,QAAQ,OAAO,CACnD;AACD,wBAAsB,gBAAgB;EAEtC,MAAM,EAAE,QAAQ,eAAe,SAAS,mBACtC,mCAAmC,mBAAmB;AACxD,kBAAgB,KAAK,cAAc;EACnC,MAAM,SAAS,YAAY,IAAI,gBAAgB;AAE/C,MAAI;GACF,MAAM,YAAY,aAChB,UACA,qBAAqB,QAAQ,UAAU,EACvC,eAAe,KAAK,SACrB;AAaD,UAAO,MAAM,mCACX,MAbqB,4BAA4B;IACjD,OAAO;IACP;IACA;IACA;IACA,OAAO,SAAS;IAChB;IACA;IACA;IACA,aAAa;IACd,CAAC,EAIA,QACA,eACA,mBACD;YACO;AACR,mBAAgB;;;AAIpB,QAAO;EAAE;EAAQ;EAAS;;AAG5B,eAAe,4BAA4B,EACzC,OACA,QACA,aACA,QACA,OACA,WACA,QACA,eACA,eACuD;AACvD,KAAI;AACF,SAAO,MAAM,UACX,MAAM,QAAQ;GACZ,QAAQ;GACR,SAAS,IAAI,QAAQ;IACnB,eAAe;IACf,gBAAgB;IAChB,QAAQ;IACR,cAAc;IACf,CAAC;GACF,MAAM,KAAK,UAAU;IAAE;IAAO;IAAW,CAAC;GAC1C,OAAO;GACP,UAAU;GACV;GACD,CAAC,EACF,OACD;UACM,OAAO;AACd,sCAAoC,QAAQ,eAAe,YAAY;AACvE,MAAI,aAAa,MAAM,CAAE,OAAM;AAC/B,QAAM,IAAI,wBAAwB,uCAAuC,EAAE,OAAO,CAAC;;;AAIvF,eAAe,mCACb,UACA,QACA,eACA,aACgD;CAChD,MAAM,YAAY,SAAS,QAAQ,IAAI,eAAe,IAAI;AAC1D,KAAI,CAAC,SAAS,IAAI;AAChB,qBAAmB,SAAS;AAC5B,QAAM,IAAI,wBAAwB,uCAAuC,SAAS,UAAU;GAC1F,QAAQ,SAAS;GACjB;GACA,YAAY,SAAS,QAAQ,IAAI,cAAc,IAAI;GACpD,CAAC;;CAGJ,IAAI;AACJ,KAAI;AACF,SAAO,qBAAqB,MAAM,UAAU,SAAS,MAAM,EAAE,OAAO,CAAC;UAC9D,OAAO;AACd,qBAAmB,SAAS;AAE5B,sCAAoC,QAAQ,eAAe,YAAY;AACvE,MAAI,aAAa,MAAM,CAAE,OAAM;AAC/B,QAAM,IAAI,wBAAwB,yDAAyD;GACzF,QAAQ,SAAS;GACjB;GACA;GACD,CAAC;;AAGJ,KAAI,KAAK,OACP,QAAO;EAAE,MAAM,KAAK,QAAQ;EAAM,QAAQ,KAAK;EAAQ,SAAS,SAAS;EAAS;AAGpF,KAAI,KAAK,QAAQ,KACf,OAAM,IAAI,wBAAwB,sDAAsD;EACtF,QAAQ,SAAS;EACjB;EACD,CAAC;AAGJ,QAAO;EAAE,MAAM,KAAK;EAAM,SAAS,SAAS;EAAS;;AAGvD,SAAS,mBAAmB,UAA0B;AACpD,KAAI;AACF,EAAK,SAAS,MAAM,QAAQ,CAAC,YAAY,OAAU;SAC7C;;AAGV,SAAS,gBAAgB,aAA2B;AAClD,KACE,CAAC,OAAO,cAAc,YAAY,IAClC,eAAe,KACf,cAAc,sBAEd,OAAM,IAAI,MACR,sEAAsE,wBACvE;;AAIL,SAAS,mCAAmC,aAG1C;CACA,MAAM,aAAa,IAAI,iBAAiB;CACxC,MAAM,YAAY,iBAAiB;AACjC,aAAW,MAAM,IAAI,4BAA4B,YAAY,CAAC;IAC7D,YAAY;AAEf,QAAO;EAAE,QAAQ,WAAW;EAAQ,eAAe,aAAa,UAAU;EAAE;;AAG9E,SAAS,UAAa,SAAyB,QAA6C;AAC1F,KAAI,CAAC,OAAQ,QAAO,QAAQ,QAAQ,QAAQ;AAC5C,KAAI,OAAO,QACT,QAAO,QAAQ,OACb,OAAO,UAAU,IAAI,aAAa,oCAAoC,aAAa,CACpF;AAGH,QAAO,IAAI,SAAY,SAAS,WAAW;EACzC,MAAM,cAAc;AAClB,UAAO,oBAAoB,SAAS,MAAM;AAG1C,UADE,OAAO,UAAU,IAAI,aAAa,oCAAoC,aAAa,CACvE;;AAEhB,SAAO,iBAAiB,SAAS,OAAO,EAAE,MAAM,MAAM,CAAC;AACvD,UAAQ,QAAQ,QAAQ,CAAC,MACtB,UAAU;AACT,UAAO,oBAAoB,SAAS,MAAM;AAC1C,WAAQ,MAAM;MAEf,UAAU;AACT,UAAO,oBAAoB,SAAS,MAAM;AAC1C,UAAO,MAAM;IAEhB;GACD;;AAGJ,SAAS,aACP,UACA,WACA,UACyB;AACzB,KAAI,CAAC,SAAS,cAAc,IAAI,WAAW,CAAE,QAAO;AACpD,KAAI,cAAc,UAAW,QAAO;AACpC,QAAO;EAAE,GAAG;EAAW;EAAU;;AAGnC,SAAS,sBAAsB,SAA8B;CAC3D,MAAM,gBAAgB,QAAQ,MAAM,WAAW,OAAO,QAAQ;AAC9D,KAAI,CAAC,cAAe;AACpB,OAAM,cAAc,UAAU,IAAI,aAAa,oCAAoC,aAAa;;AAGlG,SAAS,oCACP,QACA,eACA,aACM;AACN,KAAI,CAAC,OAAO,QAAS;AACrB,KAAI,cAAc,WAAW,OAAO,WAAW,cAAc,QAAQ;EACnE,MAAM,SAAS,cAAc;AAC7B,QAAM,kBAAkB,8BACpB,SACA,IAAI,4BAA4B,YAAY;;AAElD,OAAM,OAAO,UAAU,IAAI,aAAa,oCAAoC,aAAa;;AAG3F,SAAS,aAAa,OAAuC;AAC3D,QAAO,iBAAiB,gBAAgB,MAAM,SAAS;;AAGzD,SAAS,qBAAqB,MAG5B;AACA,KAAI,CAAC,eAAe,KAAK,CACvB,OAAM,IAAI,MAAM,qDAAqD;AAGvE,KAAI,EAAE,UAAU,SAAS,EAAE,YAAY,MACrC,OAAM,IAAI,MAAM,4DAA4D;CAE9E,MAAM,SAAS,KAAK;AACpB,KAAI,WAAW,UAAa,CAAC,oBAAoB,OAAO,CACtD,OAAM,IAAI,MAAM,uDAAuD;AAEzE,QAAO;EAAE,MAAM,KAAK;EAAM;EAAQ;;AAGpC,SAAS,oBAAoB,OAAkD;AAC7E,KAAI,CAAC,MAAM,QAAQ,MAAM,CAAE,QAAO;AAClC,QAAO,MAAM,OAAO,UAAU;AAC5B,SAAO,OAAO,UAAU,YAAY,UAAU,QAAQ,OAAO,MAAM,YAAY;GAC/E;;AAGJ,SAAS,eAAe,QAAsB;AAC5C,KAAI,CAAC,WAAW,KAAK,OAAO,CAC1B,OAAM,IAAI,MAAM,kDAAkD;;AAItE,SAAS,2BAA2B,oBAAkC;AACpE,KAAI,CAAC,wBAAwB,KAAK,mBAAmB,CACnD,OAAM,IAAI,MAAM,6CAA6C;;AAIjE,SAAS,oBAAoB,aAAkC;AAC7D,KACE,OAAO,gBAAgB,YACvB,gBAAgB,MAChB,YAAY,MAAM,KAAK,eACvB,yBAAyB,YAAY,CAErC,OAAM,IAAI,oCAAoC;AAEhD,QAAO;;AAGT,SAAS,uBACP,SACwC;AACxC,KAAI,OAAO,YAAY,YAAY,YAAY,KAC7C,OAAM,IAAI,oCAAoC;AAEhD,QAAO;;AAGT,SAAS,qBAAqB,WAA6C;AACzE,KAAI,cAAc,OAAW,QAAO,EAAE;AACtC,KAAI,CAAC,eAAe,UAAU,CAC5B,OAAM,IAAI,UAAU,mDAAmD;AAEzE,QAAO;;AAGT,SAAS,yBAAyB,OAAwB;AACxD,MAAK,IAAI,QAAQ,GAAG,QAAQ,MAAM,QAAQ,SAAS;EACjD,MAAM,YAAY,MAAM,WAAW,MAAM;AACzC,MAAI,aAAa,gCAAgC,cAAc,wBAC7D,QAAO;;AAGX,QAAO;;;;;;;AAQT,SAAS,UAAU,YAAwC;AACzD,KAAI,CAAC,WACH,OAAM,IAAI,MAAM,mEAAmE;CAGrF,MAAM,MAAM,IAAI,IAAI,WAAW;AAC/B,KAAI,IAAI,aAAa,SAAU,QAAO,IAAI;AAC1C,KAAI,IAAI,aAAa,WAAW,mBAAmB,IAAI,IAAI,SAAS,CAClE,QAAO,WAAW,IAAI;AAExB,OAAM,IAAI,MAAM,yDAAyD,aAAa"}

package/dist/customer-account/errors.d.mts

@@ -0,0 +1,28 @@
+//#region src/customer-account/errors.d.ts
+declare class CustomerAccountApiError extends Error {
+  readonly status?: number;
+  readonly requestId?: string;
+  readonly retryAfter?: string;
+  constructor(message: string, options?: {
+    status?: number;
+    requestId?: string;
+    retryAfter?: string;
+    cause?: unknown;
+  });
+}
+declare class CustomerAccountAuthenticationError extends CustomerAccountApiError {
+  constructor(message?: string);
+}
+declare class CustomerAccountTimeoutError extends CustomerAccountApiError {
+  readonly timeoutInMs: number;
+  constructor(timeoutInMs: number);
+}
+declare class CustomerAccountOAuthError extends Error {
+  readonly code: string;
+  constructor(code: string, message: string, options?: {
+    cause?: unknown;
+  });
+}
+//#endregion
+export { CustomerAccountApiError, CustomerAccountAuthenticationError, CustomerAccountOAuthError, CustomerAccountTimeoutError };
+//# sourceMappingURL=errors.d.mts.map

package/dist/customer-account/errors.mjs

@@ -0,0 +1,39 @@
+//#region src/customer-account/errors.ts
+var CustomerAccountApiError = class extends Error {
+	status;
+	requestId;
+	retryAfter;
+	constructor(message, options) {
+		super(message, options?.cause ? { cause: options.cause } : void 0);
+		this.name = "CustomerAccountApiError";
+		this.status = options?.status;
+		this.requestId = options?.requestId;
+		this.retryAfter = options?.retryAfter;
+	}
+};
+var CustomerAccountAuthenticationError = class extends CustomerAccountApiError {
+	constructor(message = "Customer Account API access token is required") {
+		super(message);
+		this.name = "CustomerAccountAuthenticationError";
+	}
+};
+var CustomerAccountTimeoutError = class extends CustomerAccountApiError {
+	timeoutInMs;
+	constructor(timeoutInMs) {
+		super(`Customer Account API request timed out after ${timeoutInMs}ms`);
+		this.name = "CustomerAccountTimeoutError";
+		this.timeoutInMs = timeoutInMs;
+	}
+};
+var CustomerAccountOAuthError = class extends Error {
+	code;
+	constructor(code, message, options) {
+		super(message, options?.cause ? { cause: options.cause } : void 0);
+		this.name = "CustomerAccountOAuthError";
+		this.code = code;
+	}
+};
+
+//#endregion
+export { CustomerAccountApiError, CustomerAccountAuthenticationError, CustomerAccountOAuthError, CustomerAccountTimeoutError };
+//# sourceMappingURL=errors.mjs.map

package/dist/customer-account/errors.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.mjs","names":[],"sources":["../../src/customer-account/errors.ts"],"sourcesContent":["export class CustomerAccountApiError extends Error {\n  readonly status?: number;\n  readonly requestId?: string;\n  readonly retryAfter?: string;\n\n  constructor(\n    message: string,\n    options?: { status?: number; requestId?: string; retryAfter?: string; cause?: unknown },\n  ) {\n    super(message, options?.cause ? { cause: options.cause } : undefined);\n    this.name = \"CustomerAccountApiError\";\n    this.status = options?.status;\n    this.requestId = options?.requestId;\n    this.retryAfter = options?.retryAfter;\n  }\n}\n\nexport class CustomerAccountAuthenticationError extends CustomerAccountApiError {\n  constructor(message = \"Customer Account API access token is required\") {\n    super(message);\n    this.name = \"CustomerAccountAuthenticationError\";\n  }\n}\n\nexport class CustomerAccountTimeoutError extends CustomerAccountApiError {\n  readonly timeoutInMs: number;\n\n  constructor(timeoutInMs: number) {\n    super(`Customer Account API request timed out after ${timeoutInMs}ms`);\n    this.name = \"CustomerAccountTimeoutError\";\n    this.timeoutInMs = timeoutInMs;\n  }\n}\n\nexport class CustomerAccountOAuthError extends Error {\n  readonly code: string;\n\n  constructor(code: string, message: string, options?: { cause?: unknown }) {\n    super(message, options?.cause ? { cause: options.cause } : undefined);\n    this.name = \"CustomerAccountOAuthError\";\n    this.code = code;\n  }\n}\n"],"mappings":";AAAA,IAAa,0BAAb,cAA6C,MAAM;CACjD,AAAS;CACT,AAAS;CACT,AAAS;CAET,YACE,SACA,SACA;AACA,QAAM,SAAS,SAAS,QAAQ,EAAE,OAAO,QAAQ,OAAO,GAAG,OAAU;AACrE,OAAK,OAAO;AACZ,OAAK,SAAS,SAAS;AACvB,OAAK,YAAY,SAAS;AAC1B,OAAK,aAAa,SAAS;;;AAI/B,IAAa,qCAAb,cAAwD,wBAAwB;CAC9E,YAAY,UAAU,iDAAiD;AACrE,QAAM,QAAQ;AACd,OAAK,OAAO;;;AAIhB,IAAa,8BAAb,cAAiD,wBAAwB;CACvE,AAAS;CAET,YAAY,aAAqB;AAC/B,QAAM,gDAAgD,YAAY,IAAI;AACtE,OAAK,OAAO;AACZ,OAAK,cAAc;;;AAIvB,IAAa,4BAAb,cAA+C,MAAM;CACnD,AAAS;CAET,YAAY,MAAc,SAAiB,SAA+B;AACxE,QAAM,SAAS,SAAS,QAAQ,EAAE,OAAO,QAAQ,OAAO,GAAG,OAAU;AACrE,OAAK,OAAO;AACZ,OAAK,OAAO"}

package/dist/customer-account/graphql.d.mts

@@ -0,0 +1,29 @@
+import { CustomerAccountScalars } from "../graphql/scalars.mjs";
+import { introspection } from "../graphql/generated/customer-account-graphql-env.mjs";
+import { InferResult, InferVariables } from "./type-resolver.mjs";
+import { DocumentDecoration, initGraphQLTada } from "gql.tada";
+
+//#region src/customer-account/graphql.d.ts
+type CustomerAccountTadaGql = initGraphQLTada<{
+  introspection: introspection;
+  scalars: CustomerAccountScalars;
+}>;
+declare const CUSTOMER_ACCOUNT_DOCUMENT: unique symbol;
+type CustomerAccountDocument<Result = unknown, Variables = never, Source extends string = string> = DocumentDecoration<Result, Variables> & {
+  readonly [CUSTOMER_ACCOUNT_DOCUMENT]: true;
+  readonly source: Source;
+};
+type AnyCustomerAccountDocument = CustomerAccountDocument<unknown, never, string>;
+type SourceOf<Doc> = Doc extends {
+  readonly source: infer Source extends string;
+} ? Source : never;
+type FragmentSources<Fragments extends readonly AnyCustomerAccountDocument[]> = Fragments extends readonly [] ? "" : Fragments extends readonly [infer Only extends AnyCustomerAccountDocument] ? SourceOf<Only> : Fragments extends readonly [infer First extends AnyCustomerAccountDocument, ...infer Rest extends readonly AnyCustomerAccountDocument[]] ? `${SourceOf<First>}\n${FragmentSources<Rest>}` : string;
+type ComposedSource<Source extends string, Fragments extends readonly AnyCustomerAccountDocument[]> = FragmentSources<Fragments> extends "" ? Source : `${Source}\n${FragmentSources<Fragments>}`;
+type CustomerAccountGql = {
+  <const Source extends string>(source: Source): CustomerAccountDocument<InferResult<Source>, InferVariables<Source>, Source>;
+  <const Source extends string, const Fragments extends readonly AnyCustomerAccountDocument[], const DocumentSource extends string = ComposedSource<Source, Fragments>>(source: Source, fragments: Fragments): CustomerAccountDocument<InferResult<DocumentSource>, InferVariables<DocumentSource>, DocumentSource>;
+} & CustomerAccountTadaGql;
+declare const gql: CustomerAccountGql;
+//#endregion
+export { AnyCustomerAccountDocument, ComposedSource, CustomerAccountDocument, FragmentSources, SourceOf, gql };
+//# sourceMappingURL=graphql.d.mts.map

package/dist/customer-account/graphql.mjs

@@ -0,0 +1,39 @@
+import { isObjectRecord } from "../core/utils/record.mjs";
+
+//#region src/customer-account/graphql.ts
+const CUSTOMER_ACCOUNT_DOCUMENT = Symbol("CustomerAccountDocument");
+const VARIABLE_DEFINITION_RE = /\$([_A-Za-z][_0-9A-Za-z]*)\s*:/g;
+const gql = ((source, fragments) => {
+	let query = source;
+	if (fragments) {
+		const seen = /* @__PURE__ */ new Set();
+		for (const fragment of fragments) {
+			assertCustomerAccountDocument(fragment);
+			if (!seen.has(fragment.source)) {
+				seen.add(fragment.source);
+				query += "\n" + fragment.source;
+			}
+		}
+	}
+	return {
+		[CUSTOMER_ACCOUNT_DOCUMENT]: true,
+		source: query,
+		variableNames: getVariableNames(query)
+	};
+});
+function isCustomerAccountDocument(value) {
+	if (!isObjectRecord(value)) return false;
+	return value[CUSTOMER_ACCOUNT_DOCUMENT] === true && typeof value.source === "string";
+}
+function assertCustomerAccountDocument(value) {
+	if (!isCustomerAccountDocument(value)) throw new TypeError("Expected a Customer Account API document returned by CAAPI.gql().");
+}
+function getVariableNames(source) {
+	const names = /* @__PURE__ */ new Set();
+	for (const match of source.matchAll(VARIABLE_DEFINITION_RE)) names.add(match[1]);
+	return names;
+}
+
+//#endregion
+export { assertCustomerAccountDocument, gql };
+//# sourceMappingURL=graphql.mjs.map

package/dist/customer-account/graphql.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"graphql.mjs","names":[],"sources":["../../src/customer-account/graphql.ts"],"sourcesContent":["import type { DocumentDecoration, initGraphQLTada as InitGraphQLTada } from \"gql.tada\";\n\nimport { isObjectRecord } from \"../core/utils/record\";\nimport type { introspection } from \"../graphql/generated/customer-account-graphql-env\";\nimport type { CustomerAccountScalars } from \"../graphql/scalars\";\nimport type { InferResult, InferVariables } from \"./type-resolver\";\n\ntype CustomerAccountTadaGql = InitGraphQLTada<{\n  introspection: introspection;\n  scalars: CustomerAccountScalars;\n}>;\n\nconst CUSTOMER_ACCOUNT_DOCUMENT = Symbol(\"CustomerAccountDocument\");\nconst VARIABLE_DEFINITION_RE = /\\$([_A-Za-z][_0-9A-Za-z]*)\\s*:/g;\n\nexport type CustomerAccountDocument<\n  Result = unknown,\n  Variables = never,\n  Source extends string = string,\n> = DocumentDecoration<Result, Variables> & {\n  readonly [CUSTOMER_ACCOUNT_DOCUMENT]: true;\n  readonly source: Source;\n};\n\nexport type AnyCustomerAccountDocument = CustomerAccountDocument<unknown, never, string>;\n\nexport type SourceOf<Doc> = Doc extends { readonly source: infer Source extends string }\n  ? Source\n  : never;\n\nexport type FragmentSources<Fragments extends readonly AnyCustomerAccountDocument[]> =\n  Fragments extends readonly []\n    ? \"\"\n    : Fragments extends readonly [infer Only extends AnyCustomerAccountDocument]\n      ? SourceOf<Only>\n      : Fragments extends readonly [\n            infer First extends AnyCustomerAccountDocument,\n            ...infer Rest extends readonly AnyCustomerAccountDocument[],\n          ]\n        ? `${SourceOf<First>}\\n${FragmentSources<Rest>}`\n        : string;\n\nexport type ComposedSource<\n  Source extends string,\n  Fragments extends readonly AnyCustomerAccountDocument[],\n> = FragmentSources<Fragments> extends \"\" ? Source : `${Source}\\n${FragmentSources<Fragments>}`;\n\ntype CustomerAccountDocumentValue = AnyCustomerAccountDocument & {\n  readonly variableNames: ReadonlySet<string>;\n};\n\ntype CustomerAccountGql = {\n  <const Source extends string>(\n    source: Source,\n  ): CustomerAccountDocument<InferResult<Source>, InferVariables<Source>, Source>;\n  <\n    const Source extends string,\n    const Fragments extends readonly AnyCustomerAccountDocument[],\n    const DocumentSource extends string = ComposedSource<Source, Fragments>,\n  >(\n    source: Source,\n    fragments: Fragments,\n  ): CustomerAccountDocument<\n    InferResult<DocumentSource>,\n    InferVariables<DocumentSource>,\n    DocumentSource\n  >;\n} & CustomerAccountTadaGql;\n\n// oxlint-disable-next-line typescript-eslint/consistent-type-assertions -- gql.tada adds phantom helper properties to the function type that are not used at runtime.\nexport const gql = ((source: string, fragments?: readonly CustomerAccountDocument[]) => {\n  let query = source;\n\n  if (fragments) {\n    const seen = new Set<string>();\n    for (const fragment of fragments) {\n      assertCustomerAccountDocument(fragment);\n      if (!seen.has(fragment.source)) {\n        seen.add(fragment.source);\n        query += \"\\n\" + fragment.source;\n      }\n    }\n  }\n\n  const document = {\n    [CUSTOMER_ACCOUNT_DOCUMENT]: true,\n    source: query,\n    variableNames: getVariableNames(query),\n  } satisfies CustomerAccountDocumentValue;\n  return document;\n}) as unknown as CustomerAccountGql;\n\nexport function isCustomerAccountDocument(value: unknown): value is CustomerAccountDocumentValue {\n  if (!isObjectRecord(value)) return false;\n  return value[CUSTOMER_ACCOUNT_DOCUMENT] === true && typeof value.source === \"string\";\n}\n\nexport function assertCustomerAccountDocument(\n  value: unknown,\n): asserts value is CustomerAccountDocumentValue {\n  if (!isCustomerAccountDocument(value)) {\n    throw new TypeError(\"Expected a Customer Account API document returned by CAAPI.gql().\");\n  }\n}\n\nfunction getVariableNames(source: string): ReadonlySet<string> {\n  const names = new Set<string>();\n  for (const match of source.matchAll(VARIABLE_DEFINITION_RE)) {\n    names.add(match[1]);\n  }\n  return names;\n}\n"],"mappings":";;;AAYA,MAAM,4BAA4B,OAAO,0BAA0B;AACnE,MAAM,yBAAyB;AAyD/B,MAAa,QAAQ,QAAgB,cAAmD;CACtF,IAAI,QAAQ;AAEZ,KAAI,WAAW;EACb,MAAM,uBAAO,IAAI,KAAa;AAC9B,OAAK,MAAM,YAAY,WAAW;AAChC,iCAA8B,SAAS;AACvC,OAAI,CAAC,KAAK,IAAI,SAAS,OAAO,EAAE;AAC9B,SAAK,IAAI,SAAS,OAAO;AACzB,aAAS,OAAO,SAAS;;;;AAU/B,QAAO;GAJJ,4BAA4B;EAC7B,QAAQ;EACR,eAAe,iBAAiB,MAAM;EAEzB;;AAGjB,SAAgB,0BAA0B,OAAuD;AAC/F,KAAI,CAAC,eAAe,MAAM,CAAE,QAAO;AACnC,QAAO,MAAM,+BAA+B,QAAQ,OAAO,MAAM,WAAW;;AAG9E,SAAgB,8BACd,OAC+C;AAC/C,KAAI,CAAC,0BAA0B,MAAM,CACnC,OAAM,IAAI,UAAU,oEAAoE;;AAI5F,SAAS,iBAAiB,QAAqC;CAC7D,MAAM,wBAAQ,IAAI,KAAa;AAC/B,MAAK,MAAM,SAAS,OAAO,SAAS,uBAAuB,CACzD,OAAM,IAAI,MAAM,GAAG;AAErB,QAAO"}

package/dist/customer-account/index.d.mts

@@ -0,0 +1,7 @@
+import { Awaitable, CUSTOMER_ACCOUNT_AUTHORIZE_PATH, CUSTOMER_ACCOUNT_LOGIN_PATH, CUSTOMER_ACCOUNT_LOGOUT_PATH, CUSTOMER_ACCOUNT_REFRESH_PATH, CreateCustomerAccountServerHandlersOptions, CreateCustomerSessionOptions, CustomerAccountServerHandlers, CustomerAccountServerHandlersWithCartSync, CustomerSession, LogoutOptions, PrepareLoginUrlOptions, ReadonlyCustomerSessionManager, RequestOriginOptions, WritableCustomerSessionManager, createCustomerAccountServerHandlers, createCustomerSession } from "./session.mjs";
+import { CUSTOMER_ACCOUNT_API_VERSION } from "../core/constants.mjs";
+import { InferResult, InferVariables } from "./type-resolver.mjs";
+import { AnyCustomerAccountDocument, ComposedSource, CustomerAccountDocument, FragmentSources, SourceOf, gql } from "./graphql.mjs";
+import { CreateCustomerAccountClientOptions, CustomerAccountClient, CustomerAccountGqlRestParam, CustomerAccountGraphqlOptions, CustomerAccountGraphqlResult, createCustomerAccountClient } from "./client.mjs";
+import { CustomerAccountApiError, CustomerAccountAuthenticationError, CustomerAccountOAuthError, CustomerAccountTimeoutError } from "./errors.mjs";
+export { type AnyCustomerAccountDocument, type Awaitable, CUSTOMER_ACCOUNT_API_VERSION, CUSTOMER_ACCOUNT_AUTHORIZE_PATH, CUSTOMER_ACCOUNT_LOGIN_PATH, CUSTOMER_ACCOUNT_LOGOUT_PATH, CUSTOMER_ACCOUNT_REFRESH_PATH, type ComposedSource, type CreateCustomerAccountClientOptions, type CreateCustomerAccountServerHandlersOptions, type CreateCustomerSessionOptions, CustomerAccountApiError, CustomerAccountAuthenticationError, type CustomerAccountClient, type CustomerAccountDocument, type CustomerAccountGqlRestParam, type CustomerAccountGraphqlOptions, type CustomerAccountGraphqlResult, CustomerAccountOAuthError, type CustomerAccountServerHandlers, type CustomerAccountServerHandlersWithCartSync, CustomerAccountTimeoutError, type CustomerSession, type FragmentSources, type InferResult, type InferVariables, type LogoutOptions, type PrepareLoginUrlOptions, type ReadonlyCustomerSessionManager, type RequestOriginOptions, type SourceOf, type WritableCustomerSessionManager, createCustomerAccountClient, createCustomerAccountServerHandlers, createCustomerSession, gql };

package/dist/customer-account/index.mjs

@@ -0,0 +1,7 @@
+import { CUSTOMER_ACCOUNT_API_VERSION } from "../core/constants.mjs";
+import { CustomerAccountApiError, CustomerAccountAuthenticationError, CustomerAccountOAuthError, CustomerAccountTimeoutError } from "./errors.mjs";
+import { CUSTOMER_ACCOUNT_AUTHORIZE_PATH, CUSTOMER_ACCOUNT_LOGIN_PATH, CUSTOMER_ACCOUNT_LOGOUT_PATH, CUSTOMER_ACCOUNT_REFRESH_PATH, createCustomerAccountServerHandlers, createCustomerSession } from "./session.mjs";
+import { gql } from "./graphql.mjs";
+import { createCustomerAccountClient } from "./client.mjs";
+
+export { CUSTOMER_ACCOUNT_API_VERSION, CUSTOMER_ACCOUNT_AUTHORIZE_PATH, CUSTOMER_ACCOUNT_LOGIN_PATH, CUSTOMER_ACCOUNT_LOGOUT_PATH, CUSTOMER_ACCOUNT_REFRESH_PATH, CustomerAccountApiError, CustomerAccountAuthenticationError, CustomerAccountOAuthError, CustomerAccountTimeoutError, createCustomerAccountClient, createCustomerAccountServerHandlers, createCustomerSession, gql };

package/dist/customer-account/session.d.mts

@@ -0,0 +1,117 @@
+import { ShopifyRequestContext } from "../core/request-context.mjs";
+import { CallableRouteHandler, ShopifyRouteErrorResult, ShopifyRouteHandlerContext, ShopifyRouteRedirectResult, ShopifyRouteSessionManager } from "../core/request-routing/route-types.mjs";
+import { CartBuyerIdentitySyncSource } from "../core/cart/buyer-identity-sync.mjs";
+
+//#region src/customer-account/session.d.ts
+declare const CUSTOMER_ACCOUNT_AUTHORIZE_PATH: "/account/authorize";
+declare const CUSTOMER_ACCOUNT_LOGIN_PATH: "/account/login";
+declare const CUSTOMER_ACCOUNT_LOGOUT_PATH: "/account/logout";
+declare const CUSTOMER_ACCOUNT_REFRESH_PATH: "/account/refresh";
+declare const CUSTOMER_SESSION_INTERNAL_BRAND: unique symbol;
+type Awaitable<T> = T | Promise<T>;
+/** Read-only Customer Account session storage for UI state and strict access-token reads. */
+type ReadonlyCustomerSessionManager = {
+  getSessionItem(key: string): Awaitable<unknown>;
+};
+/** Writable Customer Account session storage for OAuth, refresh, and logout response boundaries. */
+type WritableCustomerSessionManager = ShopifyRouteSessionManager;
+type CreateCustomerSessionOptions = {
+  shopId: string;
+  customerAccountApiClientId: string;
+  customerAccountApiUrl?: string;
+  fetch?: typeof globalThis.fetch;
+  defaultTimeoutInMs?: number;
+};
+type PrepareLoginUrlOptions = {
+  origin?: string;
+  returnTo?: string;
+  locale?: string;
+  countryCode?: string;
+  loginHint?: string;
+  loginHintMode?: string;
+  acrValues?: string;
+};
+type RequestOriginOptions = {
+  origin?: string;
+};
+type LogoutOptions = RequestOriginOptions & {
+  postLogoutRedirectUri?: string;
+};
+type CustomerSession = {
+  /**
+   * Read-only signed-in check for UI state. Returns true for a usable access token
+   * or a refresh token that can attempt to restore one later. Not an authorization
+   * check for private Customer Account data.
+   */
+  isLoggedIn(sessionManager: ReadonlyCustomerSessionManager, requestContext: ShopifyRequestContext): Promise<boolean>; /** Returns only a currently usable access token. Does not refresh or mutate session state. */
+  getAccessToken(sessionManager: ReadonlyCustomerSessionManager, requestContext: ShopifyRequestContext): Promise<string | undefined>;
+  /**
+   * Returns a usable access token, writing updated session state through the
+   * supplied writable session manager when no usable access token is stored. Use
+   * only where the eventual response commits the session manager.
+   */
+  getOrRefreshAccessToken(sessionManager: WritableCustomerSessionManager, requestContext: ShopifyRequestContext, options?: RequestOriginOptions): Promise<string | undefined>;
+  prepareLoginUrl(sessionManager: WritableCustomerSessionManager, requestContext: ShopifyRequestContext, options: PrepareLoginUrlOptions): Promise<string>;
+  handleOAuthCallback(sessionManager: WritableCustomerSessionManager, requestContext: ShopifyRequestContext, request: Request): Promise<string>;
+  logout(sessionManager: WritableCustomerSessionManager, requestContext: ShopifyRequestContext, options?: LogoutOptions): Promise<string>;
+};
+type CustomerAccountServerHandlers<TContext extends CustomerAccountRouteHandlerContext = CustomerAccountRouteHandlerContext> = {
+  authorize: CallableRouteHandler<TContext, CustomerAccountRouteResult, typeof CUSTOMER_ACCOUNT_AUTHORIZE_PATH, "GET">;
+  login: CallableRouteHandler<TContext, CustomerAccountRouteResult, typeof CUSTOMER_ACCOUNT_LOGIN_PATH, "GET">;
+  logout: CallableRouteHandler<TContext, CustomerAccountRouteResult, typeof CUSTOMER_ACCOUNT_LOGOUT_PATH, "POST">;
+  refresh: CallableRouteHandler<TContext, CustomerAccountRouteResult, typeof CUSTOMER_ACCOUNT_REFRESH_PATH, "GET">;
+};
+/** Customer Account handlers that also synchronize cart buyer identity, so their context requires `storefrontClient`. */
+type CustomerAccountServerHandlersWithCartSync = CustomerAccountServerHandlers<ShopifyRouteHandlerContext>;
+type CustomerSessionWithInternals = CustomerSession & {
+  readonly [CUSTOMER_SESSION_INTERNAL_BRAND]: true;
+};
+type CreateCustomerAccountServerHandlersBaseOptions<TCustomerSession extends CustomerSession = CustomerSession> = {
+  customerSession: TCustomerSession;
+  defaultPostLoginRedirectPathname?: string;
+  loginFailedRedirectPath?: string;
+  origin?: string | ((request: Request) => string);
+  postLogoutRedirectUri?: string;
+};
+type CreateCustomerAccountServerHandlersOptions = (CreateCustomerAccountServerHandlersBaseOptions & {
+  cartServerHandlers?: undefined;
+}) | (CreateCustomerAccountServerHandlersBaseOptions<CustomerSessionWithInternals> & {
+  /**
+   * Cart server handlers created with `createCartServerHandlers({customerSession})`.
+   * When provided, the authorize, refresh, and logout routes keep the browser
+   * cart's buyer identity in step with the customer session: attach on login
+   * and refresh, detach on logout. Sync is best-effort — failures are logged
+   * and never block the route's redirect; a failed detach during logout
+   * expires the cart cookie instead.
+   */
+  cartServerHandlers: CartBuyerIdentitySyncSource;
+});
+type CustomerAccountRouteResult = ShopifyRouteRedirectResult | ShopifyRouteErrorResult;
+type CustomerAccountRouteHandlerContext = {
+  request: Request;
+  sessionManager: WritableCustomerSessionManager;
+  requestContext: ShopifyRequestContext;
+};
+type CustomerAccountServerHandlersForOptions<TOptions> = TOptions extends {
+  cartServerHandlers: CartBuyerIdentitySyncSource;
+} ? CustomerAccountServerHandlersWithCartSync : CustomerAccountServerHandlers;
+declare function createCustomerSession({
+  shopId,
+  customerAccountApiClientId,
+  customerAccountApiUrl,
+  fetch: customFetch,
+  defaultTimeoutInMs
+}: CreateCustomerSessionOptions): CustomerSessionWithInternals;
+/**
+ * Creates Customer Account server handlers (`/account/login`, `/account/authorize`,
+ * `/account/refresh`, `/account/logout`) for `handleShopifyRoutes`. The handlers
+ * return redirect results: `login` redirects to Shopify's OAuth, `logout` redirects
+ * to Shopify's logout endpoint when an `id_token` exists, and `authorize`/`refresh`
+ * redirect back to the app (same-origin `return_to`). Invoke these paths via
+ * full-page navigation (plain `<a>`/`<form>`), not a framework client-side
+ * navigation component — client-nav cannot follow these raw redirects.
+ */
+declare function createCustomerAccountServerHandlers<const TOptions extends CreateCustomerAccountServerHandlersOptions>(options: TOptions): CustomerAccountServerHandlersForOptions<TOptions>;
+//#endregion
+export { Awaitable, CUSTOMER_ACCOUNT_AUTHORIZE_PATH, CUSTOMER_ACCOUNT_LOGIN_PATH, CUSTOMER_ACCOUNT_LOGOUT_PATH, CUSTOMER_ACCOUNT_REFRESH_PATH, CreateCustomerAccountServerHandlersOptions, CreateCustomerSessionOptions, CustomerAccountServerHandlers, CustomerAccountServerHandlersWithCartSync, CustomerSession, LogoutOptions, PrepareLoginUrlOptions, ReadonlyCustomerSessionManager, RequestOriginOptions, WritableCustomerSessionManager, createCustomerAccountServerHandlers, createCustomerSession };
+//# sourceMappingURL=session.d.mts.map