@vtex/faststore 0.0.3 → 0.0.5

package/dist/matter/account-access-gate/account-access-gate.js

@@ -0,0 +1,283 @@
+"use client";
+import { defineComponent } from "../../core/dist/define-component.js";
+import { defineContentType } from "../../core/dist/define-content-type.js";
+import "../../core/dist/index.js";
+import { useSession } from "../session/session.js";
+import { resolveSignInHref } from "../../utils/safe-href.js";
+import { NavigationLink } from "../../particles/navigation-link/navigation-link.js";
+import { useSessionRevalidation } from "../../sdk/session/use-session-revalidation.js";
+import { useSignOutIntent, withdrawSignOutIntent } from "./sign-out-intent.js";
+import { useEffect, useRef, useState } from "react";
+import { Fragment, jsx, jsxs } from "react/jsx-runtime";
+import { usePathname, useRouter } from "next/navigation";
+import { flushSync } from "react-dom";
+//#region src/matter/account-access-gate/account-access-gate.tsx
+const AccountAccessGateContent = defineContentType({
+	id: "account-access-gate",
+	title: "Account Access Gate",
+	description: "What the shopper is told while the account resolves and when it will not open for them.",
+	schema: {
+		type: "object",
+		additionalProperties: false,
+		properties: {
+			loadingLabel: {
+				type: "string",
+				minLength: 1,
+				title: "Loading announcement"
+			},
+			expiredMessage: {
+				type: "string",
+				minLength: 1,
+				title: "Session ended message"
+			},
+			signInIncompleteMessage: {
+				type: "string",
+				minLength: 1,
+				title: "Sign-in did not complete message"
+			},
+			signInLabel: {
+				type: "string",
+				minLength: 1,
+				title: "Sign-in link label"
+			}
+		}
+	}
+});
+const AccountAccessGateDefinition = defineComponent({
+	name: "AccountAccessGate",
+	importPath: "@vtex/faststore/components",
+	component: AccountAccessGate,
+	content: AccountAccessGateContent,
+	editor: {
+		label: "Account Access Gate",
+		category: "identity"
+	},
+	requiresContext: "session",
+	schema: {
+		loadingLabel: {
+			type: "string",
+			label: "Loading Announcement"
+		},
+		expiredMessage: {
+			type: "string",
+			label: "Session Ended Message"
+		},
+		signInIncompleteMessage: {
+			type: "string",
+			label: "Sign-in Did Not Complete Message"
+		},
+		signInLabel: {
+			type: "string",
+			label: "Sign-in Link Label"
+		}
+	},
+	guideline: "The account's single access decision: place it once in the account layout, wrapping the body, and every page that declares that layout inherits it — never restate it per section. It renders its children only for a logged-in shopper; it shows a composed loading look while the session resolves, replaces the current history entry with the sign-in destination for a visitor who arrived signed out (identified counts as signed out), tells a shopper whose session ended mid-visit rather than bouncing them, and stands down while AccountMenuSignOut navigates. It redirects at most once per visit: a shopper who comes back from sign-in still signed out gets a message and a link rather than a second hop. Must be inside SessionRoot, which the same layout hosts. Never place the /login route under it — the gate redirects there, and a gated /login would redirect to itself."
+});
+/** The one automatic hop the gate has already spent, surviving the full document load out to the
+*  platform and back, and no further than this tab. */
+const SIGN_IN_ATTEMPT_KEY = "fs::account-access-gate::sign-in-attempt";
+function AccountAccessGate({ loadingLabel, expiredMessage, signInIncompleteMessage, signInLabel, $content, children }) {
+	const { state, loading } = useSession();
+	const signingOut = useSignOutIntent();
+	const pathname = usePathname();
+	const router = useRouter();
+	const revalidate = useSessionRevalidation();
+	const [wasSignedIn, setWasSignedIn] = useState(false);
+	const [unconfirmed, setUnconfirmed] = useState(false);
+	const [revalidating, setRevalidating] = useState(false);
+	const restoreGeneration = useRef(0);
+	const [hopSpent, setHopSpent] = useState(null);
+	const [search, setSearch] = useState(null);
+	useEffect(() => {
+		setSearch(globalThis.location.search);
+	});
+	const returnPath = pathname === null ? null : `${pathname}${search ?? ""}`;
+	const outcome = resolveOutcome({
+		signingOut,
+		unconfirmed,
+		revalidating,
+		loading,
+		state,
+		wasSignedIn,
+		hopSpent
+	});
+	useEffect(() => {
+		switch (outcome) {
+			case "account":
+				setWasSignedIn(true);
+				setUnconfirmed(false);
+				clearSignInAttempt();
+				return;
+			case "expired":
+			case "sign-in-incomplete":
+				clearSignInAttempt();
+				return;
+			case "signing-in": {
+				if (hopSpent !== null || search === null) return;
+				if (readSignInAttempt() !== null) {
+					setHopSpent(true);
+					return;
+				}
+				const destination = resolveSignInHref(returnPath);
+				recordSignInAttempt(destination);
+				setHopSpent(false);
+				router.replace(destination);
+				return;
+			}
+			case "stand-down":
+			case "loading": return;
+			default: assertUnreachable(outcome);
+		}
+	}, [
+		outcome,
+		hopSpent,
+		search,
+		returnPath,
+		router
+	]);
+	useEffect(() => {
+		function handlePageHide(event) {
+			if (!event.persisted) return;
+			flushSync(() => {
+				setRevalidating(true);
+			});
+		}
+		function handlePageShow(event) {
+			if (!event.persisted) return;
+			const generation = restoreGeneration.current + 1;
+			restoreGeneration.current = generation;
+			withdrawSignOutIntent();
+			setUnconfirmed(false);
+			setRevalidating(true);
+			revalidate().then((result) => {
+				if (generation !== restoreGeneration.current) return;
+				setRevalidating(false);
+				switch (result) {
+					case "failed":
+						setUnconfirmed(true);
+						return;
+					case "revalidated":
+					case "unavailable": return;
+					default: assertUnreachable(result);
+				}
+			});
+		}
+		globalThis.addEventListener("pagehide", handlePageHide);
+		globalThis.addEventListener("pageshow", handlePageShow);
+		return () => {
+			globalThis.removeEventListener("pagehide", handlePageHide);
+			globalThis.removeEventListener("pageshow", handlePageShow);
+		};
+	}, [revalidate]);
+	useEffect(() => withdrawSignOutIntent, []);
+	const entryLoadingLabel = $content?.loadingLabel?.trim() ? $content.loadingLabel : loadingLabel;
+	const entryExpiredMessage = $content?.expiredMessage?.trim() ? $content.expiredMessage : expiredMessage;
+	const entryIncompleteMessage = $content?.signInIncompleteMessage?.trim() ? $content.signInIncompleteMessage : signInIncompleteMessage;
+	const entrySignInLabel = $content?.signInLabel?.trim() ? $content.signInLabel : signInLabel;
+	switch (outcome) {
+		case "stand-down":
+		case "signing-in": return null;
+		case "loading": return /* @__PURE__ */ jsx(AccountAccessGateLoading, {
+			"data-fs-account-access-gate": "",
+			children: entryLoadingLabel
+		});
+		case "account": return /* @__PURE__ */ jsx(Fragment, { children });
+		case "expired":
+		case "sign-in-incomplete": return /* @__PURE__ */ jsx(AccountAccessGateNotice, {
+			"data-fs-account-access-gate": "",
+			reason: outcome === "expired" ? "expired" : "sign-in-incomplete",
+			message: outcome === "expired" ? entryExpiredMessage : entryIncompleteMessage,
+			signInHref: resolveSignInHref(returnPath),
+			signInLabel: entrySignInLabel
+		});
+		default: return assertUnreachable(outcome);
+	}
+}
+/**
+* The whole decision, as one ordered read of the gate's inputs.
+*
+* `signingOut` outranks everything, including a session still reading `loggedIn`: the sign-out records
+* its intent before it awaits the mutation, and the frame between the payload landing and the document
+* load starting is exactly the one this ordering protects.
+*
+* `loading` outranks the tri-state for the reason `AccountEntryPoint` gives: an unresolved session
+* reports `anonymous`, so reading the state first would bounce a shopper who is signed in. A re-read
+* in flight reads as the same wait: the session it is checking is one the gate has stopped believing.
+*/
+function resolveOutcome({ signingOut, unconfirmed, revalidating, loading, state, wasSignedIn, hopSpent }) {
+	if (signingOut) return "stand-down";
+	if (unconfirmed) return wasSignedIn ? "expired" : "sign-in-incomplete";
+	if (revalidating || loading) return "loading";
+	if (state === "loggedIn") return "account";
+	if (wasSignedIn) return "expired";
+	return hopSpent === true ? "sign-in-incomplete" : "signing-in";
+}
+function assertUnreachable(outcome) {
+	throw new Error(`[AccountAccessGate] unhandled outcome: ${String(outcome)}`);
+}
+/**
+* The look of a session that has not answered yet. A real part with its own hook rather than an ad hoc
+* spinner, so a store can style it and a story can render it.
+*/
+function AccountAccessGateLoading({ className, children, ...props }) {
+	return /* @__PURE__ */ jsx("output", {
+		...props,
+		"aria-live": "polite",
+		className,
+		"data-fs-account-access-gate-loading": "",
+		children
+	});
+}
+/**
+* What renders in the account's place when it will not open: the message for this reason, and a link
+* the shopper may take back into sign-in.
+*
+* The link is the whole of the escape from a sign-in loop. The gate stops redirecting after one
+* automatic hop, so the next attempt is a click rather than a bounce — and a shopper who keeps landing
+* here at least lands on a page that says so.
+*/
+function AccountAccessGateNotice({ reason, message, signInHref, signInLabel, className, ...props }) {
+	return /* @__PURE__ */ jsxs("output", {
+		...props,
+		"aria-live": "polite",
+		className,
+		"data-fs-account-access-gate-notice": "",
+		"data-fs-account-access-gate-notice-reason": reason,
+		children: [message ? /* @__PURE__ */ jsx("span", {
+			"data-fs-account-access-gate-notice-message": "",
+			children: message
+		}) : null, signInLabel?.trim() ? /* @__PURE__ */ jsx(NavigationLink, {
+			href: signInHref,
+			prefetch: false,
+			"data-fs-account-access-gate-notice-action": "",
+			children: signInLabel
+		}) : null]
+	});
+}
+/**
+* Session storage, guarded at every access. A browser that refuses it — a shopper blocking site data —
+* throws rather than returning null, and a gate that cannot read its own record still has a shopper to
+* get to sign-in. A refusal therefore reads as "no record", which spends the hop; the cost is that the
+* loop protection is absent in that browser, which is the lesser of the two failures.
+*/
+function readSignInAttempt() {
+	try {
+		return globalThis.sessionStorage.getItem(SIGN_IN_ATTEMPT_KEY);
+	} catch {
+		return null;
+	}
+}
+function recordSignInAttempt(destination) {
+	try {
+		globalThis.sessionStorage.setItem(SIGN_IN_ATTEMPT_KEY, destination);
+	} catch {}
+}
+function clearSignInAttempt() {
+	try {
+		globalThis.sessionStorage.removeItem(SIGN_IN_ATTEMPT_KEY);
+	} catch {}
+}
+//#endregion
+export { AccountAccessGate, AccountAccessGateContent, AccountAccessGateDefinition, AccountAccessGateLoading, AccountAccessGateNotice };
+
+//# sourceMappingURL=account-access-gate.js.map

package/dist/matter/account-access-gate/account-access-gate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"account-access-gate.js","names":[],"sources":["../../../src/matter/account-access-gate/account-access-gate.tsx"],"sourcesContent":["'use client';\n\nimport { type ContentValue, defineComponent, defineContentType } from '@vtex/fs-core';\nimport { usePathname, useRouter } from 'next/navigation';\nimport { type ComponentPropsWithRef, type ReactNode, useEffect, useRef, useState } from 'react';\nimport { flushSync } from 'react-dom';\nimport { NavigationLink } from '../../particles/navigation-link/navigation-link.js';\nimport { useSessionRevalidation } from '../../sdk/session/use-session-revalidation.js';\nimport { resolveSignInHref } from '../../utils/safe-href.js';\nimport { type SessionState, useSession } from '../session/session.js';\nimport { useSignOutIntent, withdrawSignOutIntent } from './sign-out-intent.js';\n\n// Nothing is required, following the shipped identity components: an entry may author any subset, and\n// a slice missing a required property is shape-invalid, which drops the whole element rather than the\n// one field.\nexport const AccountAccessGateContent = defineContentType({\n  id: 'account-access-gate',\n  title: 'Account Access Gate',\n  description: 'What the shopper is told while the account resolves and when it will not open for them.',\n  schema: {\n    type: 'object',\n    additionalProperties: false,\n    properties: {\n      loadingLabel: { type: 'string', minLength: 1, title: 'Loading announcement' },\n      expiredMessage: { type: 'string', minLength: 1, title: 'Session ended message' },\n      signInIncompleteMessage: { type: 'string', minLength: 1, title: 'Sign-in did not complete message' },\n      signInLabel: { type: 'string', minLength: 1, title: 'Sign-in link label' },\n    },\n  },\n});\n\n/** Why the account will not open, as a bounded value: a style target and the choice of message. */\nexport type AccountAccessGateNoticeReason = 'expired' | 'sign-in-incomplete';\n\n/** Props for {@link AccountAccessGate}. It renders a different element per outcome and forwards no\n *  element props of its own; each rendered part carries its own. */\nexport type AccountAccessGateProps = {\n  /** Text announced while the session resolves. */\n  loadingLabel?: string;\n  /** What a shopper whose session ended mid-visit is told. */\n  expiredMessage?: string;\n  /** What a shopper who came back from sign-in still signed out is told. */\n  signInIncompleteMessage?: string;\n  /** Label of the link out of either notice. Without it no link renders — a focusable link a screen\n   *  reader announces as its bare URL is worse than no control at all. */\n  signInLabel?: string;\n  /** Merchant-authored fields, sliced from the layout content entry; win over the props field by field\n   *  when present. Absent in a non-CMS store — the props are the fallback. */\n  $content?: ContentValue<typeof AccountAccessGateContent>;\n  /** The account. Rendered only for a signed-in shopper. */\n  children?: ReactNode;\n};\n\n/** Props for {@link AccountAccessGateLoading}. Extends native `<output>` attributes. */\nexport type AccountAccessGateLoadingProps = ComponentPropsWithRef<'output'>;\n\n/** Props for {@link AccountAccessGateNotice}. Extends native `<output>` attributes. */\nexport type AccountAccessGateNoticeProps = Omit<ComponentPropsWithRef<'output'>, 'children'> & {\n  reason: AccountAccessGateNoticeReason;\n  /** The message for this reason. Nothing renders in its place when unauthored. */\n  message?: string;\n  /** Where the link out leads, built by the gate from the page the shopper is on. */\n  signInHref: string;\n  /** Label of the link out. No label, no link. */\n  signInLabel?: string;\n};\n\nexport const AccountAccessGateDefinition = defineComponent<AccountAccessGateProps>({\n  name: 'AccountAccessGate',\n  importPath: '@vtex/faststore/components',\n  component: AccountAccessGate,\n  content: AccountAccessGateContent,\n  editor: { label: 'Account Access Gate', category: 'identity' },\n  requiresContext: 'session',\n  schema: {\n    // Mirrored from the content model on purpose, as every content-bearing component in the library\n    // does: the entry wins when published, and this is what a store without a CMS authors.\n    loadingLabel: { type: 'string', label: 'Loading Announcement' },\n    expiredMessage: { type: 'string', label: 'Session Ended Message' },\n    signInIncompleteMessage: { type: 'string', label: 'Sign-in Did Not Complete Message' },\n    signInLabel: { type: 'string', label: 'Sign-in Link Label' },\n  },\n  guideline:\n    \"The account's single access decision: place it once in the account layout, wrapping the body, and every page that declares that layout inherits it — never restate it per section. It renders its children only for a logged-in shopper; it shows a composed loading look while the session resolves, replaces the current history entry with the sign-in destination for a visitor who arrived signed out (identified counts as signed out), tells a shopper whose session ended mid-visit rather than bouncing them, and stands down while AccountMenuSignOut navigates. It redirects at most once per visit: a shopper who comes back from sign-in still signed out gets a message and a link rather than a second hop. Must be inside SessionRoot, which the same layout hosts. Never place the /login route under it — the gate redirects there, and a gated /login would redirect to itself.\",\n});\n\n/** The one automatic hop the gate has already spent, surviving the full document load out to the\n *  platform and back, and no further than this tab. */\nconst SIGN_IN_ATTEMPT_KEY = 'fs::account-access-gate::sign-in-attempt';\n\n/**\n * What the gate renders, in precedence order. `signing-in` covers both the frame that decides whether\n * the hop is still available and the frame after the replace is issued: they render the same nothing,\n * and only the effect tells them apart.\n */\ntype AccountAccessGateOutcome = 'stand-down' | 'expired' | 'loading' | 'account' | 'sign-in-incomplete' | 'signing-in';\n\nexport function AccountAccessGate({\n  loadingLabel,\n  expiredMessage,\n  signInIncompleteMessage,\n  signInLabel,\n  $content,\n  children,\n}: Readonly<AccountAccessGateProps>) {\n  const { state, loading } = useSession();\n  const signingOut = useSignOutIntent();\n  const pathname = usePathname();\n  const router = useRouter();\n  const revalidate = useSessionRevalidation();\n\n  // Whether this gate has ever resolved to a signed-in shopper. It is what separates a session that\n  // ended from a visitor who arrived signed out — the tri-state spells both `anonymous`.\n  const [wasSignedIn, setWasSignedIn] = useState(false);\n  // A revalidation that could not answer. It outranks `loading` because the discard that preceded it\n  // is what leaves the session unresolved, so nothing else is coming to end that wait.\n  const [unconfirmed, setUnconfirmed] = useState(false);\n  // A re-read in flight. The gate withholds the account for itself rather than waiting to be told:\n  // discarding the cached session leaves the data layer unresolved, but it reaches the gate only once\n  // the watched query has re-read, and the account must be gone in the frame the restore arrives.\n  const [revalidating, setRevalidating] = useState(false);\n  // Which re-read the gate is still listening to. Two restores in a row put two answers in flight, and\n  // the older one may land last.\n  const restoreGeneration = useRef(0);\n  // `null` until the arrival path has read the record. Read from an effect rather than from the render\n  // body: session storage does not exist on the server, and a value that appeared between the server\n  // pass and hydration would change what renders underneath it.\n  const [hopSpent, setHopSpent] = useState<boolean | null>(null);\n  // `null` until the document has been read, for the same two reasons, and read from the document\n  // rather than through `useSearchParams()`, which would require a `Suspense` boundary the generator\n  // does not emit on a prerendered route — the reason `SignInRedirect` gives for reading it this way.\n  const [search, setSearch] = useState<string | null>(null);\n\n  // Deliberately on every commit rather than on mount: `usePathname()` re-renders the gate when the\n  // path changes but says nothing about the query, and a shopper who pages through their orders\n  // changes only the query. Setting the same string is a bail-out, so this does not loop.\n  useEffect(() => {\n    setSearch(globalThis.location.search);\n  });\n\n  // Where the shopper comes back to. `usePathname()` yields the path alone, so a gate that stopped\n  // there would return someone reading `/account/orders?page=2` to the first page of it.\n  const returnPath = pathname === null ? null : `${pathname}${search ?? ''}`;\n\n  const outcome = resolveOutcome({ signingOut, unconfirmed, revalidating, loading, state, wasSignedIn, hopSpent });\n\n  useEffect(() => {\n    switch (outcome) {\n      case 'account':\n        setWasSignedIn(true);\n        setUnconfirmed(false);\n        clearSignInAttempt();\n        return;\n      case 'expired':\n      case 'sign-in-incomplete':\n        // Every outcome that is not the hop returns it: a shopper who signs in, browses, and comes\n        // back later arrives fresh rather than carrying a spent attempt from an earlier one.\n        clearSignInAttempt();\n        return;\n      case 'signing-in': {\n        // One more frame before deciding, until the document has been read: a hop recorded against the\n        // bare path is the one the shopper comes back to, and there is no second chance at it.\n        if (hopSpent !== null || search === null) {\n          return;\n        }\n        if (readSignInAttempt() !== null) {\n          setHopSpent(true);\n          return;\n        }\n        const destination = resolveSignInHref(returnPath);\n        recordSignInAttempt(destination);\n        setHopSpent(false);\n        // Replace rather than push: back from the platform's login should reach the page the shopper\n        // came from, not the account that threw them at it.\n        // react-doctor-disable-next-line nextjs-no-client-side-redirect -- the session resolves on the client, so the server has nothing to decide with\n        router.replace(destination);\n        return;\n      }\n      case 'stand-down':\n      case 'loading':\n        return;\n      default:\n        assertUnreachable(outcome);\n    }\n  }, [outcome, hopSpent, search, returnPath, router]);\n\n  useEffect(() => {\n    function handlePageHide(event: PageTransitionEvent): void {\n      if (!event.persisted) {\n        return;\n      }\n      // What the browser freezes is the DOM, and a restore puts that same DOM back before any script\n      // runs. Standing the account down on the way out rather than on the way back is what keeps the\n      // restored document from showing it in the frames before `pageshow` can decide again.\n      flushSync(() => {\n        setRevalidating(true);\n      });\n    }\n\n    function handlePageShow(event: PageTransitionEvent): void {\n      // An ordinary load re-decides by mounting. Only a restore resumes a heap that already holds an\n      // answer, and `persisted` is the browser's own word for it.\n      if (!event.persisted) {\n        return;\n      }\n      const generation = restoreGeneration.current + 1;\n      restoreGeneration.current = generation;\n      // The navigation this authorized has already happened; a restored document holding it would\n      // stand down forever. Withdrawn before the re-read so the gate is deciding again by the time\n      // the answer lands.\n      withdrawSignOutIntent();\n      setUnconfirmed(false);\n      setRevalidating(true);\n      void revalidate().then((result) => {\n        // A later restore has already asked the same question, and its answer is the one that counts.\n        // This one describes a session the gate has since discarded a second time.\n        if (generation !== restoreGeneration.current) {\n          return;\n        }\n        setRevalidating(false);\n        switch (result) {\n          case 'failed':\n            setUnconfirmed(true);\n            return;\n          case 'revalidated':\n          case 'unavailable':\n            // Nothing left to distrust: either the session was re-read, or there was no cached\n            // session to discard in the first place and the one in the tree came from a prop.\n            return;\n          default:\n            assertUnreachable(result);\n        }\n      });\n    }\n\n    globalThis.addEventListener('pagehide', handlePageHide);\n    globalThis.addEventListener('pageshow', handlePageShow);\n    return () => {\n      globalThis.removeEventListener('pagehide', handlePageHide);\n      globalThis.removeEventListener('pageshow', handlePageShow);\n    };\n  }, [revalidate]);\n\n  // The intent authorizes one transition and this gate is its only reader, so it must not survive the\n  // gate. A sign-out that navigates client-side takes the account layout down without reloading the\n  // document, and nothing else would ever take the flag back: the next account page the shopper opens\n  // would mount into a standing intent and render nothing at all, with no error to explain it.\n  useEffect(() => withdrawSignOutIntent, []);\n\n  // Blank entry fields fall through, so clearing one in the Admin reads as unauthored.\n  const entryLoadingLabel = $content?.loadingLabel?.trim() ? $content.loadingLabel : loadingLabel;\n  const entryExpiredMessage = $content?.expiredMessage?.trim() ? $content.expiredMessage : expiredMessage;\n  const entryIncompleteMessage = $content?.signInIncompleteMessage?.trim()\n    ? $content.signInIncompleteMessage\n    : signInIncompleteMessage;\n  const entrySignInLabel = $content?.signInLabel?.trim() ? $content.signInLabel : signInLabel;\n\n  switch (outcome) {\n    case 'stand-down':\n    case 'signing-in':\n      return null;\n    case 'loading':\n      return (\n        // The part carries its own hook; the component's identity travels from here, which is how a\n        // store targets it by name the way every other component is targeted.\n        <AccountAccessGateLoading data-fs-account-access-gate=\"\">{entryLoadingLabel}</AccountAccessGateLoading>\n      );\n    case 'account':\n      return <>{children}</>;\n    case 'expired':\n    case 'sign-in-incomplete':\n      return (\n        <AccountAccessGateNotice\n          data-fs-account-access-gate=\"\"\n          reason={outcome === 'expired' ? 'expired' : 'sign-in-incomplete'}\n          message={outcome === 'expired' ? entryExpiredMessage : entryIncompleteMessage}\n          signInHref={resolveSignInHref(returnPath)}\n          signInLabel={entrySignInLabel}\n        />\n      );\n    default:\n      return assertUnreachable(outcome);\n  }\n}\n\n/**\n * The whole decision, as one ordered read of the gate's inputs.\n *\n * `signingOut` outranks everything, including a session still reading `loggedIn`: the sign-out records\n * its intent before it awaits the mutation, and the frame between the payload landing and the document\n * load starting is exactly the one this ordering protects.\n *\n * `loading` outranks the tri-state for the reason `AccountEntryPoint` gives: an unresolved session\n * reports `anonymous`, so reading the state first would bounce a shopper who is signed in. A re-read\n * in flight reads as the same wait: the session it is checking is one the gate has stopped believing.\n */\nfunction resolveOutcome({\n  signingOut,\n  unconfirmed,\n  revalidating,\n  loading,\n  state,\n  wasSignedIn,\n  hopSpent,\n}: {\n  signingOut: boolean;\n  unconfirmed: boolean;\n  revalidating: boolean;\n  loading: boolean;\n  state: SessionState;\n  wasSignedIn: boolean;\n  hopSpent: boolean | null;\n}): AccountAccessGateOutcome {\n  if (signingOut) {\n    return 'stand-down';\n  }\n  // A re-read that could not answer says nothing about how the shopper got here, so the notice keeps\n  // the history the gate already has. Telling someone who never reached the account that their session\n  // ended names an event that never happened; the incomplete sign-in is the one they actually had.\n  if (unconfirmed) {\n    return wasSignedIn ? 'expired' : 'sign-in-incomplete';\n  }\n  if (revalidating || loading) {\n    return 'loading';\n  }\n  if (state === 'loggedIn') {\n    return 'account';\n  }\n  if (wasSignedIn) {\n    return 'expired';\n  }\n  return hopSpent === true ? 'sign-in-incomplete' : 'signing-in';\n}\n\nfunction assertUnreachable(outcome: never): never {\n  throw new Error(`[AccountAccessGate] unhandled outcome: ${String(outcome)}`);\n}\n\n/**\n * The look of a session that has not answered yet. A real part with its own hook rather than an ad hoc\n * spinner, so a store can style it and a story can render it.\n */\nexport function AccountAccessGateLoading({ className, children, ...props }: AccountAccessGateLoadingProps) {\n  return (\n    <output {...props} aria-live=\"polite\" className={className} data-fs-account-access-gate-loading=\"\">\n      {children}\n    </output>\n  );\n}\n\n/**\n * What renders in the account's place when it will not open: the message for this reason, and a link\n * the shopper may take back into sign-in.\n *\n * The link is the whole of the escape from a sign-in loop. The gate stops redirecting after one\n * automatic hop, so the next attempt is a click rather than a bounce — and a shopper who keeps landing\n * here at least lands on a page that says so.\n */\nexport function AccountAccessGateNotice({\n  reason,\n  message,\n  signInHref,\n  signInLabel,\n  className,\n  ...props\n}: AccountAccessGateNoticeProps) {\n  return (\n    <output\n      {...props}\n      aria-live=\"polite\"\n      className={className}\n      data-fs-account-access-gate-notice=\"\"\n      data-fs-account-access-gate-notice-reason={reason}\n    >\n      {message ? <span data-fs-account-access-gate-notice-message=\"\">{message}</span> : null}\n      {signInLabel?.trim() ? (\n        <NavigationLink\n          href={signInHref}\n          // The destination is a trampoline that redirects on mount, so the default prefetch would\n          // fire that GET from a page the shopper may never leave.\n          prefetch={false}\n          data-fs-account-access-gate-notice-action=\"\"\n        >\n          {signInLabel}\n        </NavigationLink>\n      ) : null}\n    </output>\n  );\n}\n\n/**\n * Session storage, guarded at every access. A browser that refuses it — a shopper blocking site data —\n * throws rather than returning null, and a gate that cannot read its own record still has a shopper to\n * get to sign-in. A refusal therefore reads as \"no record\", which spends the hop; the cost is that the\n * loop protection is absent in that browser, which is the lesser of the two failures.\n */\nfunction readSignInAttempt(): string | null {\n  try {\n    return globalThis.sessionStorage.getItem(SIGN_IN_ATTEMPT_KEY);\n  } catch {\n    return null;\n  }\n}\n\nfunction recordSignInAttempt(destination: string): void {\n  try {\n    globalThis.sessionStorage.setItem(SIGN_IN_ATTEMPT_KEY, destination);\n  } catch {\n    // Nothing to fall back to: the record is the only thing that outlives the hop.\n  }\n}\n\nfunction clearSignInAttempt(): void {\n  try {\n    globalThis.sessionStorage.removeItem(SIGN_IN_ATTEMPT_KEY);\n  } catch {\n    // Nothing was written either, so there is nothing to undo.\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;AAeA,MAAa,2BAA2B,kBAAkB;CACxD,IAAI;CACJ,OAAO;CACP,aAAa;CACb,QAAQ;EACN,MAAM;EACN,sBAAsB;EACtB,YAAY;GACV,cAAc;IAAE,MAAM;IAAU,WAAW;IAAG,OAAO;GAAuB;GAC5E,gBAAgB;IAAE,MAAM;IAAU,WAAW;IAAG,OAAO;GAAwB;GAC/E,yBAAyB;IAAE,MAAM;IAAU,WAAW;IAAG,OAAO;GAAmC;GACnG,aAAa;IAAE,MAAM;IAAU,WAAW;IAAG,OAAO;GAAqB;EAC3E;CACF;AACF,CAAC;AAsCD,MAAa,8BAA8B,gBAAwC;CACjF,MAAM;CACN,YAAY;CACZ,WAAW;CACX,SAAS;CACT,QAAQ;EAAE,OAAO;EAAuB,UAAU;CAAW;CAC7D,iBAAiB;CACjB,QAAQ;EAGN,cAAc;GAAE,MAAM;GAAU,OAAO;EAAuB;EAC9D,gBAAgB;GAAE,MAAM;GAAU,OAAO;EAAwB;EACjE,yBAAyB;GAAE,MAAM;GAAU,OAAO;EAAmC;EACrF,aAAa;GAAE,MAAM;GAAU,OAAO;EAAqB;CAC7D;CACA,WACE;AACJ,CAAC;;;AAID,MAAM,sBAAsB;AAS5B,SAAgB,kBAAkB,EAChC,cACA,gBACA,yBACA,aACA,UACA,YACmC;CACnC,MAAM,EAAE,OAAO,YAAY,WAAW;CACtC,MAAM,aAAa,iBAAiB;CACpC,MAAM,WAAW,YAAY;CAC7B,MAAM,SAAS,UAAU;CACzB,MAAM,aAAa,uBAAuB;CAI1C,MAAM,CAAC,aAAa,kBAAkB,SAAS,KAAK;CAGpD,MAAM,CAAC,aAAa,kBAAkB,SAAS,KAAK;CAIpD,MAAM,CAAC,cAAc,mBAAmB,SAAS,KAAK;CAGtD,MAAM,oBAAoB,OAAO,CAAC;CAIlC,MAAM,CAAC,UAAU,eAAe,SAAyB,IAAI;CAI7D,MAAM,CAAC,QAAQ,aAAa,SAAwB,IAAI;CAKxD,gBAAgB;EACd,UAAU,WAAW,SAAS,MAAM;CACtC,CAAC;CAID,MAAM,aAAa,aAAa,OAAO,OAAO,GAAG,WAAW,UAAU;CAEtE,MAAM,UAAU,eAAe;EAAE;EAAY;EAAa;EAAc;EAAS;EAAO;EAAa;CAAS,CAAC;CAE/G,gBAAgB;EACd,QAAQ,SAAR;GACE,KAAK;IACH,eAAe,IAAI;IACnB,eAAe,KAAK;IACpB,mBAAmB;IACnB;GACF,KAAK;GACL,KAAK;IAGH,mBAAmB;IACnB;GACF,KAAK,cAAc;IAGjB,IAAI,aAAa,QAAQ,WAAW,MAClC;IAEF,IAAI,kBAAkB,MAAM,MAAM;KAChC,YAAY,IAAI;KAChB;IACF;IACA,MAAM,cAAc,kBAAkB,UAAU;IAChD,oBAAoB,WAAW;IAC/B,YAAY,KAAK;IAIjB,OAAO,QAAQ,WAAW;IAC1B;GACF;GACA,KAAK;GACL,KAAK,WACH;GACF,SACE,kBAAkB,OAAO;EAC7B;CACF,GAAG;EAAC;EAAS;EAAU;EAAQ;EAAY;CAAM,CAAC;CAElD,gBAAgB;EACd,SAAS,eAAe,OAAkC;GACxD,IAAI,CAAC,MAAM,WACT;GAKF,gBAAgB;IACd,gBAAgB,IAAI;GACtB,CAAC;EACH;EAEA,SAAS,eAAe,OAAkC;GAGxD,IAAI,CAAC,MAAM,WACT;GAEF,MAAM,aAAa,kBAAkB,UAAU;GAC/C,kBAAkB,UAAU;GAI5B,sBAAsB;GACtB,eAAe,KAAK;GACpB,gBAAgB,IAAI;GACpB,WAAgB,CAAC,CAAC,MAAM,WAAW;IAGjC,IAAI,eAAe,kBAAkB,SACnC;IAEF,gBAAgB,KAAK;IACrB,QAAQ,QAAR;KACE,KAAK;MACH,eAAe,IAAI;MACnB;KACF,KAAK;KACL,KAAK,eAGH;KACF,SACE,kBAAkB,MAAM;IAC5B;GACF,CAAC;EACH;EAEA,WAAW,iBAAiB,YAAY,cAAc;EACtD,WAAW,iBAAiB,YAAY,cAAc;EACtD,aAAa;GACX,WAAW,oBAAoB,YAAY,cAAc;GACzD,WAAW,oBAAoB,YAAY,cAAc;EAC3D;CACF,GAAG,CAAC,UAAU,CAAC;CAMf,gBAAgB,uBAAuB,CAAC,CAAC;CAGzC,MAAM,oBAAoB,UAAU,cAAc,KAAK,IAAI,SAAS,eAAe;CACnF,MAAM,sBAAsB,UAAU,gBAAgB,KAAK,IAAI,SAAS,iBAAiB;CACzF,MAAM,yBAAyB,UAAU,yBAAyB,KAAK,IACnE,SAAS,0BACT;CACJ,MAAM,mBAAmB,UAAU,aAAa,KAAK,IAAI,SAAS,cAAc;CAEhF,QAAQ,SAAR;EACE,KAAK;EACL,KAAK,cACH,OAAO;EACT,KAAK,WACH,OAGE,oBAAC,0BAAD;GAA0B,+BAA4B;GAAI,UAAA;EAA4C,CAAA;EAE1G,KAAK,WACH,OAAO,oBAAA,UAAA,EAAG,SAAW,CAAA;EACvB,KAAK;EACL,KAAK,sBACH,OACE,oBAAC,yBAAD;GACE,+BAA4B;GAC5B,QAAQ,YAAY,YAAY,YAAY;GAC5C,SAAS,YAAY,YAAY,sBAAsB;GACvD,YAAY,kBAAkB,UAAU;GACxC,aAAa;EACd,CAAA;EAEL,SACE,OAAO,kBAAkB,OAAO;CACpC;AACF;;;;;;;;;;;;AAaA,SAAS,eAAe,EACtB,YACA,aACA,cACA,SACA,OACA,aACA,YAS2B;CAC3B,IAAI,YACF,OAAO;CAKT,IAAI,aACF,OAAO,cAAc,YAAY;CAEnC,IAAI,gBAAgB,SAClB,OAAO;CAET,IAAI,UAAU,YACZ,OAAO;CAET,IAAI,aACF,OAAO;CAET,OAAO,aAAa,OAAO,uBAAuB;AACpD;AAEA,SAAS,kBAAkB,SAAuB;CAChD,MAAM,IAAI,MAAM,0CAA0C,OAAO,OAAO,GAAG;AAC7E;;;;;AAMA,SAAgB,yBAAyB,EAAE,WAAW,UAAU,GAAG,SAAwC;CACzG,OACE,oBAAC,UAAD;EAAQ,GAAI;EAAO,aAAU;EAAoB;EAAW,uCAAoC;EAC7F;CACK,CAAA;AAEZ;;;;;;;;;AAUA,SAAgB,wBAAwB,EACtC,QACA,SACA,YACA,aACA,WACA,GAAG,SAC4B;CAC/B,OACE,qBAAC,UAAD;EACE,GAAI;EACJ,aAAU;EACC;EACX,sCAAmC;EACnC,6CAA2C;EAL7C,UAAA,CAOG,UAAU,oBAAC,QAAD;GAAM,8CAA2C;GAAI,UAAA;EAAc,CAAA,IAAI,MACjF,aAAa,KAAK,IACjB,oBAAC,gBAAD;GACE,MAAM;GAGN,UAAU;GACV,6CAA0C;GAEzC,UAAA;EACa,CAAA,IACd,IACE;;AAEZ;;;;;;;AAQA,SAAS,oBAAmC;CAC1C,IAAI;EACF,OAAO,WAAW,eAAe,QAAQ,mBAAmB;CAC9D,QAAQ;EACN,OAAO;CACT;AACF;AAEA,SAAS,oBAAoB,aAA2B;CACtD,IAAI;EACF,WAAW,eAAe,QAAQ,qBAAqB,WAAW;CACpE,QAAQ,CAER;AACF;AAEA,SAAS,qBAA2B;CAClC,IAAI;EACF,WAAW,eAAe,WAAW,mBAAmB;CAC1D,QAAQ,CAER;AACF"}

package/dist/matter/account-access-gate/sign-out-intent.d.ts

@@ -0,0 +1,17 @@
+//#region src/matter/account-access-gate/sign-out-intent.d.ts
+/**
+ * Records that a sign-out is under way. Declared **before** the logout is awaited: the payload
+ * refreshes the session in place, and a gate that got its turn between the response landing and the
+ * navigation starting would redirect out from under the sign-out.
+ */
+export declare function declareSignOutIntent(): void;
+/**
+ * Takes the intent back. Called when the logout resolves with user errors — the shopper is still
+ * signed in and stays on the account page with the failure surfaced — and by the gate on a restored
+ * document, where the navigation the intent authorized has already happened.
+ */
+export declare function withdrawSignOutIntent(): void;
+/** Whether a sign-out is under way, re-rendering the caller when that changes. */
+export declare function useSignOutIntent(): boolean;
+//#endregion
+//# sourceMappingURL=sign-out-intent.d.ts.map

package/dist/matter/account-access-gate/sign-out-intent.js

@@ -0,0 +1,62 @@
+"use client";
+import { useSyncExternalStore } from "react";
+//#region src/matter/account-access-gate/sign-out-intent.ts
+/**
+* The signal that tells `AccountAccessGate` a signed-out session is the shopper's own doing.
+*
+* Without it the two fight each other: `$actions.session.logout` resolves with the refreshed session
+* in its payload, so the tri-state flips to anonymous *in place*, while the shopper is still standing
+* on an account page. The gate would read that as any other signed-out shopper and redirect to
+* sign-in, carrying a return to the account they just left — racing the sign-out's own navigation.
+*
+* Deliberately not persisted. The intent authorizes exactly one transition and dies with the document
+* that authorized it, which is why the full load to `/` needs no cleanup. The one case where the
+* document comes back with the flag still standing is a back-forward cache restore, and the gate
+* withdraws it there.
+*/
+let intended = false;
+const subscribers = /* @__PURE__ */ new Set();
+function notify() {
+	for (const subscriber of subscribers) subscriber();
+}
+/**
+* Records that a sign-out is under way. Declared **before** the logout is awaited: the payload
+* refreshes the session in place, and a gate that got its turn between the response landing and the
+* navigation starting would redirect out from under the sign-out.
+*/
+function declareSignOutIntent() {
+	if (intended) return;
+	intended = true;
+	notify();
+}
+/**
+* Takes the intent back. Called when the logout resolves with user errors — the shopper is still
+* signed in and stays on the account page with the failure surfaced — and by the gate on a restored
+* document, where the navigation the intent authorized has already happened.
+*/
+function withdrawSignOutIntent() {
+	if (!intended) return;
+	intended = false;
+	notify();
+}
+function subscribe(onStoreChange) {
+	subscribers.add(onStoreChange);
+	return () => {
+		subscribers.delete(onStoreChange);
+	};
+}
+function getSnapshot() {
+	return intended;
+}
+/** Server renders never carry an intent: nothing has been able to click sign out yet. */
+function getServerSnapshot() {
+	return false;
+}
+/** Whether a sign-out is under way, re-rendering the caller when that changes. */
+function useSignOutIntent() {
+	return useSyncExternalStore(subscribe, getSnapshot, getServerSnapshot);
+}
+//#endregion
+export { declareSignOutIntent, useSignOutIntent, withdrawSignOutIntent };
+
+//# sourceMappingURL=sign-out-intent.js.map

package/dist/matter/account-access-gate/sign-out-intent.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sign-out-intent.js","names":[],"sources":["../../../src/matter/account-access-gate/sign-out-intent.ts"],"sourcesContent":["'use client';\n\nimport { useSyncExternalStore } from 'react';\n\n/**\n * The signal that tells `AccountAccessGate` a signed-out session is the shopper's own doing.\n *\n * Without it the two fight each other: `$actions.session.logout` resolves with the refreshed session\n * in its payload, so the tri-state flips to anonymous *in place*, while the shopper is still standing\n * on an account page. The gate would read that as any other signed-out shopper and redirect to\n * sign-in, carrying a return to the account they just left — racing the sign-out's own navigation.\n *\n * Deliberately not persisted. The intent authorizes exactly one transition and dies with the document\n * that authorized it, which is why the full load to `/` needs no cleanup. The one case where the\n * document comes back with the flag still standing is a back-forward cache restore, and the gate\n * withdraws it there.\n */\nlet intended = false;\n\nconst subscribers = new Set<() => void>();\n\nfunction notify(): void {\n  for (const subscriber of subscribers) {\n    subscriber();\n  }\n}\n\n/**\n * Records that a sign-out is under way. Declared **before** the logout is awaited: the payload\n * refreshes the session in place, and a gate that got its turn between the response landing and the\n * navigation starting would redirect out from under the sign-out.\n */\nexport function declareSignOutIntent(): void {\n  if (intended) {\n    return;\n  }\n  intended = true;\n  notify();\n}\n\n/**\n * Takes the intent back. Called when the logout resolves with user errors — the shopper is still\n * signed in and stays on the account page with the failure surfaced — and by the gate on a restored\n * document, where the navigation the intent authorized has already happened.\n */\nexport function withdrawSignOutIntent(): void {\n  if (!intended) {\n    return;\n  }\n  intended = false;\n  notify();\n}\n\nfunction subscribe(onStoreChange: () => void): () => void {\n  subscribers.add(onStoreChange);\n  return () => {\n    subscribers.delete(onStoreChange);\n  };\n}\n\nfunction getSnapshot(): boolean {\n  return intended;\n}\n\n/** Server renders never carry an intent: nothing has been able to click sign out yet. */\nfunction getServerSnapshot(): boolean {\n  return false;\n}\n\n/** Whether a sign-out is under way, re-rendering the caller when that changes. */\nexport function useSignOutIntent(): boolean {\n  return useSyncExternalStore(subscribe, getSnapshot, getServerSnapshot);\n}\n"],"mappings":";;;;;;;;;;;;;;;;AAiBA,IAAI,WAAW;AAEf,MAAM,8BAAc,IAAI,IAAgB;AAExC,SAAS,SAAe;CACtB,KAAK,MAAM,cAAc,aACvB,WAAW;AAEf;;;;;;AAOA,SAAgB,uBAA6B;CAC3C,IAAI,UACF;CAEF,WAAW;CACX,OAAO;AACT;;;;;;AAOA,SAAgB,wBAA8B;CAC5C,IAAI,CAAC,UACH;CAEF,WAAW;CACX,OAAO;AACT;AAEA,SAAS,UAAU,eAAuC;CACxD,YAAY,IAAI,aAAa;CAC7B,aAAa;EACX,YAAY,OAAO,aAAa;CAClC;AACF;AAEA,SAAS,cAAuB;CAC9B,OAAO;AACT;;AAGA,SAAS,oBAA6B;CACpC,OAAO;AACT;;AAGA,SAAgB,mBAA4B;CAC1C,OAAO,qBAAqB,WAAW,aAAa,iBAAiB;AACvE"}

package/dist/matter/account-entry-point/account-entry-point.js

@@ -3,9 +3,9 @@ import { defineComponent } from "../../core/dist/define-component.js";
 import { defineContentType } from "../../core/dist/define-content-type.js";
 import "../../core/dist/index.js";
 import { useSession } from "../session/session.js";
-import { Icon } from "../../particles/icon/icon.js";
 import { resolveSignInHref } from "../../utils/safe-href.js";
 import { NavigationLink } from "../../particles/navigation-link/navigation-link.js";
+import { Icon } from "../../particles/icon/icon.js";
 import { useEffect, useState } from "react";
 import { Fragment, jsx, jsxs } from "react/jsx-runtime";
 import { usePathname } from "next/navigation";
@@ -72,7 +72,7 @@ const AccountEntryPointDefinition = defineComponent({
 			label: "Loading Announcement"
 		}
 	},
-	guideline: "Session-aware header control rendering one link: the signed-out label toward /login for anonymous and identified shoppers, the signed-in label toward the account route for logged-in ones, and a politely announced placeholder while the session resolves. Both destinations are fixed conventions, not props, so no authored value can misroute the auth flow. Must be inside a SessionRoot, normally the one hosted by the shared layout — a page-hosted provider resolves the session server-side without the shopper cookie and sticks on the signed-out label. Author the label for a state or that state renders nothing; the labels are optional in the type only because a CMS entry may supply them, and an entry overrides all four fields at runtime. Style it through data-fs-account-entry-point and switch on data-fs-account-entry-point-state."
+	guideline: "Session-aware header control rendering one link: the signed-out label toward /login for anonymous and identified shoppers, the signed-in label toward the account route for logged-in ones, and a politely announced placeholder while the session resolves. Both destinations are fixed conventions, not props, so no authored value can misroute the auth flow. Must be inside a SessionRoot, normally the one hosted by the shared layout; a page-hosted provider also works, since the server-side session fetch forwards the shopper cookie. Author the label for a state or that state renders nothing; the labels are optional in the type only because a CMS entry may supply them, and an entry overrides all four fields at runtime. Style it through data-fs-account-entry-point and switch on data-fs-account-entry-point-state."
 });
 function AccountEntryPoint({ signedOutLabel, signedInLabel, icon, loadingLabel, $content, className, ref, ...props }) {
 	const { state, loading } = useSession();

package/dist/matter/account-entry-point/account-entry-point.js.map

@@ -1 +1 @@
-{"version":3,"file":"account-entry-point.js","names":[],"sources":["../../../src/matter/account-entry-point/account-entry-point.tsx"],"sourcesContent":["'use client';\n\nimport { type ContentValue, defineComponent, defineContentType } from '@vtex/fs-core';\nimport { usePathname } from 'next/navigation';\nimport { type ComponentPropsWithRef, useEffect, useState } from 'react';\nimport { Icon } from '../../particles/icon/icon.js';\nimport { NavigationLink } from '../../particles/navigation-link/navigation-link.js';\nimport { resolveSignInHref } from '../../utils/safe-href.js';\nimport { useSession } from '../session/session.js';\n\n/** The account's root. A fixed convention, never an authored value: an authored destination could\n *  misroute the entry into the account. */\nconst ACCOUNT_ROUTE = '/account';\n\n// Nothing is required: an entry may author any subset, and a slice missing a required property is\n// shape-invalid, which drops the whole element rather than the one field.\nexport const AccountEntryPointContent = defineContentType({\n  id: 'account-entry-point',\n  title: 'Account Entry Point',\n  description: 'Labels and icon for the header sign-in / account control.',\n  schema: {\n    type: 'object',\n    additionalProperties: false,\n    properties: {\n      signedOutLabel: { type: 'string', minLength: 1, title: 'Signed-out label' },\n      signedInLabel: { type: 'string', minLength: 1, title: 'Signed-in label' },\n      icon: { type: 'string', minLength: 1, title: 'Icon' },\n      loadingLabel: { type: 'string', minLength: 1, title: 'Loading announcement' },\n    },\n  },\n});\n\n/** Props for {@link AccountEntryPoint}. Extends native `<a>` attributes (the rendered root). */\nexport type AccountEntryPointProps = Omit<ComponentPropsWithRef<'a'>, 'href' | 'children'> & {\n  /** Label for anonymous and identified shoppers. Optional: the render gate, not the type,\n   *  requires a resolved value. */\n  signedOutLabel?: string;\n  /** Label for logged-in shoppers. Same gate. */\n  signedInLabel?: string;\n  /** Icon reference for the glyph. Never gated: a control with no glyph is a valid configuration. */\n  icon?: string;\n  /** Text the live region announces while the session resolves. */\n  loadingLabel?: string;\n  /** Merchant-authored fields, sliced from the page/layout content entry; win over the props field\n   *  by field when present. Absent in a non-CMS store — the props are the fallback. */\n  $content?: ContentValue<typeof AccountEntryPointContent>;\n};\n\n/** Props for {@link AccountEntryPointLoading}. Extends native `<span>` attributes. */\nexport type AccountEntryPointLoadingProps = Omit<ComponentPropsWithRef<'span'>, 'children'>;\n\nexport const AccountEntryPointDefinition = defineComponent<AccountEntryPointProps>({\n  name: 'AccountEntryPoint',\n  importPath: '@vtex/faststore/components',\n  component: AccountEntryPoint,\n  content: AccountEntryPointContent,\n  editor: { label: 'Account Entry Point', category: 'identity' },\n  requiresContext: 'session',\n  schema: {\n    signedOutLabel: { type: 'string', label: 'Signed-out Label' },\n    signedInLabel: { type: 'string', label: 'Signed-in Label' },\n    icon: { type: 'icon', label: 'Icon' },\n    loadingLabel: { type: 'string', label: 'Loading Announcement' },\n  },\n  guideline:\n    'Session-aware header control rendering one link: the signed-out label toward /login for anonymous and identified shoppers, the signed-in label toward the account route for logged-in ones, and a politely announced placeholder while the session resolves. Both destinations are fixed conventions, not props, so no authored value can misroute the auth flow. Must be inside a SessionRoot, normally the one hosted by the shared layout — a page-hosted provider resolves the session server-side without the shopper cookie and sticks on the signed-out label. Author the label for a state or that state renders nothing; the labels are optional in the type only because a CMS entry may supply them, and an entry overrides all four fields at runtime. Style it through data-fs-account-entry-point and switch on data-fs-account-entry-point-state.',\n});\n\nexport function AccountEntryPoint({\n  signedOutLabel,\n  signedInLabel,\n  icon,\n  loadingLabel,\n  $content,\n  className,\n  ref,\n  ...props\n}: AccountEntryPointProps) {\n  const { state, loading } = useSession();\n  const pathname = usePathname();\n\n  // Blank entry fields fall through, so clearing one in the Admin reads as unauthored.\n  const entrySignedOutLabel = $content?.signedOutLabel?.trim() ? $content.signedOutLabel : signedOutLabel;\n  const entrySignedInLabel = $content?.signedInLabel?.trim() ? $content.signedInLabel : signedInLabel;\n  const entryIcon = $content?.icon?.trim() ? $content.icon : icon;\n  const entryLoadingLabel = $content?.loadingLabel?.trim() ? $content.loadingLabel : loadingLabel;\n\n  // Assistive technology only reports a change inside a region that was already in the tree, so a\n  // region mounted together with its text announces nothing. The region therefore holds the same\n  // position in both branches — React keeps it mounted across the swap — and starts empty, with the\n  // label written on the pass after mount and cleared again once the session resolves.\n  //\n  // It trails the branch content rather than leading it so the authored swatch, which lands on\n  // whichever element leads, can still reach the region through a following-sibling selector.\n  const [announcement, setAnnouncement] = useState('');\n  const resolvingLabel = loading ? entryLoadingLabel : undefined;\n  useEffect(() => {\n    setAnnouncement(resolvingLabel ?? '');\n  }, [resolvingLabel]);\n\n  // Gate on `loading` before `state`: an unresolved session reports `anonymous`, so reading the\n  // tri-state first would flash \"Sign In\" at a shopper who is already signed in.\n  if (loading) {\n    return (\n      <>\n        <AccountEntryPointLoading {...props} className={className} />\n        <AccountEntryPointAnnouncement>{announcement}</AccountEntryPointAnnouncement>\n      </>\n    );\n  }\n\n  // `identified` stays on the signed-out link: an identified but unauthenticated shopper cannot\n  // reach their account yet.\n  const signedIn = state === 'loggedIn';\n  const label = signedIn ? entrySignedInLabel : entrySignedOutLabel;\n\n  // A focusable link a screen reader announces as its bare URL is worse than no control at all.\n  if (!label?.trim()) {\n    return null;\n  }\n\n  return (\n    <>\n      <NavigationLink\n        {...props}\n        ref={ref}\n        href={signedIn ? ACCOUNT_ROUTE : resolveSignInHref(pathname)}\n        // The signed-out destination is a deferred auth proxy that may set a cookie or redirect, and\n        // a header control is always in the viewport — the default prefetch would fire that GET on\n        // every page view. The account route is an ordinary page, so it keeps the default.\n        prefetch={signedIn ? undefined : false}\n        className={className}\n        data-fs-account-entry-point=\"\"\n        data-fs-account-entry-point-state={signedIn ? 'signed-in' : 'signed-out'}\n      >\n        {entryIcon ? <Icon name={entryIcon} /> : null}\n        <span data-fs-account-entry-point-label=\"\">{label}</span>\n      </NavigationLink>\n      <AccountEntryPointAnnouncement>{announcement}</AccountEntryPointAnnouncement>\n    </>\n  );\n}\n\n/**\n * The live region that carries the control across the wait. Separate from the visual placeholder\n * because it has to outlive it: the placeholder is only in the tree while the session resolves,\n * while the region has to be there before the text lands for the text to be announced at all.\n */\nfunction AccountEntryPointAnnouncement({ children }: { children: string }) {\n  return (\n    <output aria-live=\"polite\" data-fs-account-entry-point-announcement=\"\">\n      {children}\n    </output>\n  );\n}\n\n/**\n * The visual stand-in occupying the control's slot while the session resolves. Purely visual: the\n * wait is spoken by the sibling live region, so this is hidden from assistive technology rather\n * than announced twice. Named for the state it represents, as `ShippingSimulatorLoading` is, not\n * for the bar it draws.\n */\nexport function AccountEntryPointLoading({ className, ...props }: AccountEntryPointLoadingProps) {\n  return <span {...props} aria-hidden=\"true\" className={className} data-fs-account-entry-point-loading=\"\" />;\n}\n"],"mappings":";;;;;;;;;;;;;;AAYA,MAAM,gBAAgB;AAItB,MAAa,2BAA2B,kBAAkB;CACxD,IAAI;CACJ,OAAO;CACP,aAAa;CACb,QAAQ;EACN,MAAM;EACN,sBAAsB;EACtB,YAAY;GACV,gBAAgB;IAAE,MAAM;IAAU,WAAW;IAAG,OAAO;GAAmB;GAC1E,eAAe;IAAE,MAAM;IAAU,WAAW;IAAG,OAAO;GAAkB;GACxE,MAAM;IAAE,MAAM;IAAU,WAAW;IAAG,OAAO;GAAO;GACpD,cAAc;IAAE,MAAM;IAAU,WAAW;IAAG,OAAO;GAAuB;EAC9E;CACF;AACF,CAAC;AAqBD,MAAa,8BAA8B,gBAAwC;CACjF,MAAM;CACN,YAAY;CACZ,WAAW;CACX,SAAS;CACT,QAAQ;EAAE,OAAO;EAAuB,UAAU;CAAW;CAC7D,iBAAiB;CACjB,QAAQ;EACN,gBAAgB;GAAE,MAAM;GAAU,OAAO;EAAmB;EAC5D,eAAe;GAAE,MAAM;GAAU,OAAO;EAAkB;EAC1D,MAAM;GAAE,MAAM;GAAQ,OAAO;EAAO;EACpC,cAAc;GAAE,MAAM;GAAU,OAAO;EAAuB;CAChE;CACA,WACE;AACJ,CAAC;AAED,SAAgB,kBAAkB,EAChC,gBACA,eACA,MACA,cACA,UACA,WACA,KACA,GAAG,SACsB;CACzB,MAAM,EAAE,OAAO,YAAY,WAAW;CACtC,MAAM,WAAW,YAAY;CAG7B,MAAM,sBAAsB,UAAU,gBAAgB,KAAK,IAAI,SAAS,iBAAiB;CACzF,MAAM,qBAAqB,UAAU,eAAe,KAAK,IAAI,SAAS,gBAAgB;CACtF,MAAM,YAAY,UAAU,MAAM,KAAK,IAAI,SAAS,OAAO;CAC3D,MAAM,oBAAoB,UAAU,cAAc,KAAK,IAAI,SAAS,eAAe;CASnF,MAAM,CAAC,cAAc,mBAAmB,SAAS,EAAE;CACnD,MAAM,iBAAiB,UAAU,oBAAoB,KAAA;CACrD,gBAAgB;EACd,gBAAgB,kBAAkB,EAAE;CACtC,GAAG,CAAC,cAAc,CAAC;CAInB,IAAI,SACF,OACE,qBAAA,UAAA,EAAA,UAAA,CACE,oBAAC,0BAAD;EAA0B,GAAI;EAAkB;CAAY,CAAA,GAC5D,oBAAC,+BAAD,EAAA,UAAgC,aAA4C,CAAA,CAC5E,EAAA,CAAA;CAMN,MAAM,WAAW,UAAU;CAC3B,MAAM,QAAQ,WAAW,qBAAqB;CAG9C,IAAI,CAAC,OAAO,KAAK,GACf,OAAO;CAGT,OACE,qBAAA,UAAA,EAAA,UAAA,CACE,qBAAC,gBAAD;EACE,GAAI;EACC;EACL,MAAM,WAAW,gBAAgB,kBAAkB,QAAQ;EAI3D,UAAU,WAAW,KAAA,IAAY;EACtB;EACX,+BAA4B;EAC5B,qCAAmC,WAAW,cAAc;EAV9D,UAAA,CAYG,YAAY,oBAAC,MAAD,EAAM,MAAM,UAAY,CAAA,IAAI,MACzC,oBAAC,QAAD;GAAM,qCAAkC;GAAI,UAAA;EAAY,CAAA,CAC1C;CAChB,CAAA,GAAA,oBAAC,+BAAD,EAAA,UAAgC,aAA4C,CAAA,CAC5E,EAAA,CAAA;AAEN;;;;;;AAOA,SAAS,8BAA8B,EAAE,YAAkC;CACzE,OACE,oBAAC,UAAD;EAAQ,aAAU;EAAS,4CAAyC;EACjE;CACK,CAAA;AAEZ;;;;;;;AAQA,SAAgB,yBAAyB,EAAE,WAAW,GAAG,SAAwC;CAC/F,OAAO,oBAAC,QAAD;EAAM,GAAI;EAAO,eAAY;EAAkB;EAAW,uCAAoC;CAAI,CAAA;AAC3G"}
+{"version":3,"file":"account-entry-point.js","names":[],"sources":["../../../src/matter/account-entry-point/account-entry-point.tsx"],"sourcesContent":["'use client';\n\nimport { type ContentValue, defineComponent, defineContentType } from '@vtex/fs-core';\nimport { usePathname } from 'next/navigation';\nimport { type ComponentPropsWithRef, useEffect, useState } from 'react';\nimport { Icon } from '../../particles/icon/icon.js';\nimport { NavigationLink } from '../../particles/navigation-link/navigation-link.js';\nimport { resolveSignInHref } from '../../utils/safe-href.js';\nimport { useSession } from '../session/session.js';\n\n/** The account's root. A fixed convention, never an authored value: an authored destination could\n *  misroute the entry into the account. */\nconst ACCOUNT_ROUTE = '/account';\n\n// Nothing is required: an entry may author any subset, and a slice missing a required property is\n// shape-invalid, which drops the whole element rather than the one field.\nexport const AccountEntryPointContent = defineContentType({\n  id: 'account-entry-point',\n  title: 'Account Entry Point',\n  description: 'Labels and icon for the header sign-in / account control.',\n  schema: {\n    type: 'object',\n    additionalProperties: false,\n    properties: {\n      signedOutLabel: { type: 'string', minLength: 1, title: 'Signed-out label' },\n      signedInLabel: { type: 'string', minLength: 1, title: 'Signed-in label' },\n      icon: { type: 'string', minLength: 1, title: 'Icon' },\n      loadingLabel: { type: 'string', minLength: 1, title: 'Loading announcement' },\n    },\n  },\n});\n\n/** Props for {@link AccountEntryPoint}. Extends native `<a>` attributes (the rendered root). */\nexport type AccountEntryPointProps = Omit<ComponentPropsWithRef<'a'>, 'href' | 'children'> & {\n  /** Label for anonymous and identified shoppers. Optional: the render gate, not the type,\n   *  requires a resolved value. */\n  signedOutLabel?: string;\n  /** Label for logged-in shoppers. Same gate. */\n  signedInLabel?: string;\n  /** Icon reference for the glyph. Never gated: a control with no glyph is a valid configuration. */\n  icon?: string;\n  /** Text the live region announces while the session resolves. */\n  loadingLabel?: string;\n  /** Merchant-authored fields, sliced from the page/layout content entry; win over the props field\n   *  by field when present. Absent in a non-CMS store — the props are the fallback. */\n  $content?: ContentValue<typeof AccountEntryPointContent>;\n};\n\n/** Props for {@link AccountEntryPointLoading}. Extends native `<span>` attributes. */\nexport type AccountEntryPointLoadingProps = Omit<ComponentPropsWithRef<'span'>, 'children'>;\n\nexport const AccountEntryPointDefinition = defineComponent<AccountEntryPointProps>({\n  name: 'AccountEntryPoint',\n  importPath: '@vtex/faststore/components',\n  component: AccountEntryPoint,\n  content: AccountEntryPointContent,\n  editor: { label: 'Account Entry Point', category: 'identity' },\n  requiresContext: 'session',\n  schema: {\n    signedOutLabel: { type: 'string', label: 'Signed-out Label' },\n    signedInLabel: { type: 'string', label: 'Signed-in Label' },\n    icon: { type: 'icon', label: 'Icon' },\n    loadingLabel: { type: 'string', label: 'Loading Announcement' },\n  },\n  guideline:\n    'Session-aware header control rendering one link: the signed-out label toward /login for anonymous and identified shoppers, the signed-in label toward the account route for logged-in ones, and a politely announced placeholder while the session resolves. Both destinations are fixed conventions, not props, so no authored value can misroute the auth flow. Must be inside a SessionRoot, normally the one hosted by the shared layout; a page-hosted provider also works, since the server-side session fetch forwards the shopper cookie. Author the label for a state or that state renders nothing; the labels are optional in the type only because a CMS entry may supply them, and an entry overrides all four fields at runtime. Style it through data-fs-account-entry-point and switch on data-fs-account-entry-point-state.',\n});\n\nexport function AccountEntryPoint({\n  signedOutLabel,\n  signedInLabel,\n  icon,\n  loadingLabel,\n  $content,\n  className,\n  ref,\n  ...props\n}: AccountEntryPointProps) {\n  const { state, loading } = useSession();\n  const pathname = usePathname();\n\n  // Blank entry fields fall through, so clearing one in the Admin reads as unauthored.\n  const entrySignedOutLabel = $content?.signedOutLabel?.trim() ? $content.signedOutLabel : signedOutLabel;\n  const entrySignedInLabel = $content?.signedInLabel?.trim() ? $content.signedInLabel : signedInLabel;\n  const entryIcon = $content?.icon?.trim() ? $content.icon : icon;\n  const entryLoadingLabel = $content?.loadingLabel?.trim() ? $content.loadingLabel : loadingLabel;\n\n  // Assistive technology only reports a change inside a region that was already in the tree, so a\n  // region mounted together with its text announces nothing. The region therefore holds the same\n  // position in both branches — React keeps it mounted across the swap — and starts empty, with the\n  // label written on the pass after mount and cleared again once the session resolves.\n  //\n  // It trails the branch content rather than leading it so the authored swatch, which lands on\n  // whichever element leads, can still reach the region through a following-sibling selector.\n  const [announcement, setAnnouncement] = useState('');\n  const resolvingLabel = loading ? entryLoadingLabel : undefined;\n  useEffect(() => {\n    setAnnouncement(resolvingLabel ?? '');\n  }, [resolvingLabel]);\n\n  // Gate on `loading` before `state`: an unresolved session reports `anonymous`, so reading the\n  // tri-state first would flash \"Sign In\" at a shopper who is already signed in.\n  if (loading) {\n    return (\n      <>\n        <AccountEntryPointLoading {...props} className={className} />\n        <AccountEntryPointAnnouncement>{announcement}</AccountEntryPointAnnouncement>\n      </>\n    );\n  }\n\n  // `identified` stays on the signed-out link: an identified but unauthenticated shopper cannot\n  // reach their account yet.\n  const signedIn = state === 'loggedIn';\n  const label = signedIn ? entrySignedInLabel : entrySignedOutLabel;\n\n  // A focusable link a screen reader announces as its bare URL is worse than no control at all.\n  if (!label?.trim()) {\n    return null;\n  }\n\n  return (\n    <>\n      <NavigationLink\n        {...props}\n        ref={ref}\n        href={signedIn ? ACCOUNT_ROUTE : resolveSignInHref(pathname)}\n        // The signed-out destination is a deferred auth proxy that may set a cookie or redirect, and\n        // a header control is always in the viewport — the default prefetch would fire that GET on\n        // every page view. The account route is an ordinary page, so it keeps the default.\n        prefetch={signedIn ? undefined : false}\n        className={className}\n        data-fs-account-entry-point=\"\"\n        data-fs-account-entry-point-state={signedIn ? 'signed-in' : 'signed-out'}\n      >\n        {entryIcon ? <Icon name={entryIcon} /> : null}\n        <span data-fs-account-entry-point-label=\"\">{label}</span>\n      </NavigationLink>\n      <AccountEntryPointAnnouncement>{announcement}</AccountEntryPointAnnouncement>\n    </>\n  );\n}\n\n/**\n * The live region that carries the control across the wait. Separate from the visual placeholder\n * because it has to outlive it: the placeholder is only in the tree while the session resolves,\n * while the region has to be there before the text lands for the text to be announced at all.\n */\nfunction AccountEntryPointAnnouncement({ children }: { children: string }) {\n  return (\n    <output aria-live=\"polite\" data-fs-account-entry-point-announcement=\"\">\n      {children}\n    </output>\n  );\n}\n\n/**\n * The visual stand-in occupying the control's slot while the session resolves. Purely visual: the\n * wait is spoken by the sibling live region, so this is hidden from assistive technology rather\n * than announced twice. Named for the state it represents, as `ShippingSimulatorLoading` is, not\n * for the bar it draws.\n */\nexport function AccountEntryPointLoading({ className, ...props }: AccountEntryPointLoadingProps) {\n  return <span {...props} aria-hidden=\"true\" className={className} data-fs-account-entry-point-loading=\"\" />;\n}\n"],"mappings":";;;;;;;;;;;;;;AAYA,MAAM,gBAAgB;AAItB,MAAa,2BAA2B,kBAAkB;CACxD,IAAI;CACJ,OAAO;CACP,aAAa;CACb,QAAQ;EACN,MAAM;EACN,sBAAsB;EACtB,YAAY;GACV,gBAAgB;IAAE,MAAM;IAAU,WAAW;IAAG,OAAO;GAAmB;GAC1E,eAAe;IAAE,MAAM;IAAU,WAAW;IAAG,OAAO;GAAkB;GACxE,MAAM;IAAE,MAAM;IAAU,WAAW;IAAG,OAAO;GAAO;GACpD,cAAc;IAAE,MAAM;IAAU,WAAW;IAAG,OAAO;GAAuB;EAC9E;CACF;AACF,CAAC;AAqBD,MAAa,8BAA8B,gBAAwC;CACjF,MAAM;CACN,YAAY;CACZ,WAAW;CACX,SAAS;CACT,QAAQ;EAAE,OAAO;EAAuB,UAAU;CAAW;CAC7D,iBAAiB;CACjB,QAAQ;EACN,gBAAgB;GAAE,MAAM;GAAU,OAAO;EAAmB;EAC5D,eAAe;GAAE,MAAM;GAAU,OAAO;EAAkB;EAC1D,MAAM;GAAE,MAAM;GAAQ,OAAO;EAAO;EACpC,cAAc;GAAE,MAAM;GAAU,OAAO;EAAuB;CAChE;CACA,WACE;AACJ,CAAC;AAED,SAAgB,kBAAkB,EAChC,gBACA,eACA,MACA,cACA,UACA,WACA,KACA,GAAG,SACsB;CACzB,MAAM,EAAE,OAAO,YAAY,WAAW;CACtC,MAAM,WAAW,YAAY;CAG7B,MAAM,sBAAsB,UAAU,gBAAgB,KAAK,IAAI,SAAS,iBAAiB;CACzF,MAAM,qBAAqB,UAAU,eAAe,KAAK,IAAI,SAAS,gBAAgB;CACtF,MAAM,YAAY,UAAU,MAAM,KAAK,IAAI,SAAS,OAAO;CAC3D,MAAM,oBAAoB,UAAU,cAAc,KAAK,IAAI,SAAS,eAAe;CASnF,MAAM,CAAC,cAAc,mBAAmB,SAAS,EAAE;CACnD,MAAM,iBAAiB,UAAU,oBAAoB,KAAA;CACrD,gBAAgB;EACd,gBAAgB,kBAAkB,EAAE;CACtC,GAAG,CAAC,cAAc,CAAC;CAInB,IAAI,SACF,OACE,qBAAA,UAAA,EAAA,UAAA,CACE,oBAAC,0BAAD;EAA0B,GAAI;EAAkB;CAAY,CAAA,GAC5D,oBAAC,+BAAD,EAAA,UAAgC,aAA4C,CAAA,CAC5E,EAAA,CAAA;CAMN,MAAM,WAAW,UAAU;CAC3B,MAAM,QAAQ,WAAW,qBAAqB;CAG9C,IAAI,CAAC,OAAO,KAAK,GACf,OAAO;CAGT,OACE,qBAAA,UAAA,EAAA,UAAA,CACE,qBAAC,gBAAD;EACE,GAAI;EACC;EACL,MAAM,WAAW,gBAAgB,kBAAkB,QAAQ;EAI3D,UAAU,WAAW,KAAA,IAAY;EACtB;EACX,+BAA4B;EAC5B,qCAAmC,WAAW,cAAc;EAV9D,UAAA,CAYG,YAAY,oBAAC,MAAD,EAAM,MAAM,UAAY,CAAA,IAAI,MACzC,oBAAC,QAAD;GAAM,qCAAkC;GAAI,UAAA;EAAY,CAAA,CAC1C;CAChB,CAAA,GAAA,oBAAC,+BAAD,EAAA,UAAgC,aAA4C,CAAA,CAC5E,EAAA,CAAA;AAEN;;;;;;AAOA,SAAS,8BAA8B,EAAE,YAAkC;CACzE,OACE,oBAAC,UAAD;EAAQ,aAAU;EAAS,4CAAyC;EACjE;CACK,CAAA;AAEZ;;;;;;;AAQA,SAAgB,yBAAyB,EAAE,WAAW,GAAG,SAAwC;CAC/F,OAAO,oBAAC,QAAD;EAAM,GAAI;EAAO,eAAY;EAAkB;EAAW,uCAAoC;CAAI,CAAA;AAC3G"}

package/dist/matter/account-menu/account-menu.d.ts

@@ -0,0 +1,88 @@
+import { ContentValue } from "../../core/dist/define-content-type.js";
+import { ComponentDefinition } from "../../core/dist/define-component.js";
+import "../../core/dist/index.js";
+import { ComponentPropsWithRef } from "react";
+//#region src/matter/account-menu/account-menu.d.ts
+export declare const AccountMenuContent: {
+  readonly id: "account-menu";
+  readonly title: "Account Menu";
+  readonly description: "The ordered list of the account's sections, editable without a deployment.";
+  readonly schema: {
+    readonly type: "object";
+    readonly additionalProperties: false;
+    readonly properties: {
+      readonly items: {
+        readonly type: "array";
+        readonly title: "Sections";
+        readonly minItems: 1;
+        readonly items: {
+          readonly type: "object";
+          readonly additionalProperties: false;
+          readonly required: readonly ["label", "href"];
+          readonly properties: {
+            readonly label: {
+              readonly type: "string";
+              readonly minLength: 1;
+              readonly title: "Label";
+            };
+            readonly href: {
+              readonly type: "string";
+              readonly minLength: 1;
+              readonly title: "URL";
+              readonly format: "uri-reference";
+              readonly pattern: "^(?:https?://.*|mailto:.+|tel:.+|/(?:[^/].*)?)$";
+            };
+            readonly external: {
+              readonly type: "boolean";
+              readonly title: "Leaves the account";
+            };
+          };
+        };
+      };
+    };
+  };
+};
+type AccountMenuContentValue = ContentValue<typeof AccountMenuContent>;
+/** One authored section. Derived from the model so the prop and content channels cannot drift. */
+export type AccountMenuSection = NonNullable<AccountMenuContentValue['items']>[number];
+/** A section resolved for render. A null `href` is a destination the allowlist refused. */
+export type AccountMenuResolvedSection = {
+  label: string;
+  href: string | null;
+  external: boolean;
+};
+export type AccountMenuCurrent = {
+  /** Index into the resolved list. */
+  index: number;
+  /** `exact` when the path is the section; `ancestor` when the shopper is inside it. */
+  match: 'exact' | 'ancestor';
+};
+export type AccountMenuContextValue = {
+  /** Resolved, in the merchant's order, with blank-label sections dropped. */
+  items: readonly AccountMenuResolvedSection[];
+  /** The current section, or null when the path matches none. */
+  current: AccountMenuCurrent | null;
+};
+export type AccountMenuRootProps = ComponentPropsWithRef<'div'> & {
+  /** Authored fallback for the section list, used when no CMS entry supplies one. */
+  items?: readonly AccountMenuSection[];
+  /** Injected by the compiler, sliced from the page's or layout's composite content entry. */
+  $content?: AccountMenuContentValue;
+};
+/** The landmark renders one item per section, so it takes no children. */
+export type AccountMenuListProps = Omit<ComponentPropsWithRef<'nav'>, 'children'> & {
+  /** Accessible name of the navigation landmark. */
+  label?: string;
+};
+export declare const AccountMenuRootDefinition: ComponentDefinition<AccountMenuRootProps>;
+export declare const AccountMenuListDefinition: ComponentDefinition<AccountMenuListProps>;
+/** The resolved section list and the current section. */
+export declare function useAccountMenu(): AccountMenuContextValue;
+export declare function AccountMenuRoot({ items, $content, className, children, ...props }: AccountMenuRootProps): import("react/jsx-runtime").JSX.Element;
+export declare function AccountMenuList({ label, className, ...props }: AccountMenuListProps): import("react/jsx-runtime").JSX.Element | null;
+export declare const AccountMenu: {
+  Root: typeof AccountMenuRoot;
+  List: typeof AccountMenuList;
+};
+//#endregion
+//# sourceMappingURL=account-menu.d.ts.map