@vtex/faststore 0.0.4 → 0.0.6

package/dist/matter/access-code-sign-in/access-code-sign-in.js

@@ -5,6 +5,7 @@ import { AccessCodeField } from "../../particles/access-code-field/access-code-f
 import { EmailField, isValidEmail } from "../../particles/email-field/email-field.js";
 import { useActionsOverride } from "../../sdk/actions/actions-override-context.js";
 import { useDataOverride } from "../../sdk/data/data-override-context.js";
+import { resolveAuthoredCopy } from "../../utils/resolve-authored-copy.js";
 import { useSession } from "../session/session.js";
 import { createContext, useCallback, useContext, useEffect, useMemo, useState } from "react";
 import { jsx, jsxs } from "react/jsx-runtime";
@@ -35,18 +36,18 @@ function useAccessCodeSignIn() {
 }
 function requestErrorMessage(error, props) {
 	switch (error.code) {
-		case "ACCESS_CODE_SEND_LIMIT": return props.sendLimitMessage ?? error.message;
-		case "BLOCKED": return props.blockedMessage ?? error.message;
-		case "NETWORK_ERROR": return props.networkErrorMessage ?? error.message;
+		case "ACCESS_CODE_SEND_LIMIT": return resolveAuthoredCopy(props.sendLimitMessage, error.message);
+		case "BLOCKED": return resolveAuthoredCopy(props.blockedMessage, error.message);
+		case "NETWORK_ERROR": return resolveAuthoredCopy(props.networkErrorMessage, error.message);
 		default: return error.message;
 	}
 }
 function validateErrorMessage(error, props) {
 	switch (error.code) {
-		case "INVALID_ACCESS_CODE": return props.invalidCodeMessage ?? error.message;
-		case "BLOCKED": return props.blockedMessage ?? error.message;
-		case "MISSING_AUTH_CONTEXT": return props.missingAuthContextMessage ?? error.message;
-		case "NETWORK_ERROR": return props.networkErrorMessage ?? error.message;
+		case "INVALID_ACCESS_CODE": return resolveAuthoredCopy(props.invalidCodeMessage, error.message);
+		case "BLOCKED": return resolveAuthoredCopy(props.blockedMessage, error.message);
+		case "MISSING_AUTH_CONTEXT": return resolveAuthoredCopy(props.missingAuthContextMessage, error.message);
+		case "NETWORK_ERROR": return resolveAuthoredCopy(props.networkErrorMessage, error.message);
 		default: return error.message;
 	}
 }
@@ -295,7 +296,7 @@ function AccessCodeRequestControl({ label, pendingLabel, sendLimitMessage, block
 			"aria-busy": pending || void 0,
 			"data-fs-access-code-request-submit": "",
 			"data-fs-button": "",
-			children: pending ? pendingLabel ?? label : label
+			children: pending ? resolveAuthoredCopy(pendingLabel, label ?? "") : label
 		}), message ? /* @__PURE__ */ jsx("div", {
 			role: "alert",
 			"data-fs-access-code-request-error": "",

package/dist/matter/access-code-sign-in/access-code-sign-in.js.map

@@ -1 +1 @@
-{"version":3,"file":"access-code-sign-in.js","names":[],"sources":["../../../src/matter/access-code-sign-in/access-code-sign-in.tsx"],"sourcesContent":["'use client';\n\nimport { defineComponent } from '@vtex/fs-core';\nimport type { ComponentPropsWithRef, FormEvent } from 'react';\nimport { createContext, useCallback, useContext, useEffect, useMemo, useState } from 'react';\nimport { AccessCodeField } from '../../particles/access-code-field/access-code-field.js';\nimport { EmailField, isValidEmail } from '../../particles/email-field/email-field.js';\nimport { useActionsOverride } from '../../sdk/actions/actions-override-context.js';\nimport type { ComponentActions } from '../../sdk/actions/types.js';\nimport { useDataOverride } from '../../sdk/data/data-override-context.js';\nimport type { SessionUserError } from '../../sdk/session/auth-operations.js';\nimport { useSession } from '../session/session.js';\n\n// ---------------------------------------------------------------------------\n// GraphQL Fragment (colocated, ADR-0011) — clientProfile.email seeds the draft email as a\n// convenience pre-fill for an already-identified shopper; sessionAuthProviders.accessKeyAuthentication\n// is the account gate. Authored as a raw string, mirroring EmailIdentificationControl/ShippingSimulator.\n// ---------------------------------------------------------------------------\n\nconst fragment = /* GraphQL */ `\n  fragment AccessCodeSignInData on Query {\n    clientProfile {\n      __typename\n      id\n      email\n    }\n    sessionAuthProviders {\n      accessKeyAuthentication\n    }\n  }\n`;\n\n// ---------------------------------------------------------------------------\n// Types\n// ---------------------------------------------------------------------------\n\n/** Colocated fragment slice forwarded by the reactive runtime — `null` until both fields resolve. */\nexport type AccessCodeSignInSlice = {\n  clientProfile: { email: string | null } | null;\n  sessionAuthProviders: { accessKeyAuthentication: boolean } | null;\n};\n\nexport type AccessCodeSignInStep = 'request' | 'validate';\n\nexport type AccessCodeSignInContextValue = Readonly<{\n  /** The shopper's locally-typed draft email — never written to the cart; only ever an argument to\n   * requestAccessCode/validateAccessCode. Pre-fills from `clientProfile.email` when known, but a\n   * shopper edit is never persisted anywhere by this family. */\n  email: string;\n  /** Updates the draft email; marks it as shopper-touched so pre-fill no longer overwrites it. */\n  setEmail: (email: string) => void;\n  step: AccessCodeSignInStep;\n  /** Opaque token round-tripped from requestAccessCode into validateAccessCode. */\n  authenticationToken: string | null;\n  /** Called by AccessCodeRequestControl on a successful requestAccessCode. */\n  startValidation: (authenticationToken: string) => void;\n}>;\n\nexport type AccessCodeSignInRootProps = ComponentPropsWithRef<'div'> & {\n  $data?: AccessCodeSignInSlice | null;\n};\n\nexport type AccessCodeEmailControlProps = ComponentPropsWithRef<'div'> & {\n  label?: string;\n  placeholder?: string;\n  invalidEmailMessage?: string;\n};\n\nexport type AccessCodeRequestControlProps = ComponentPropsWithRef<'div'> & {\n  label?: string;\n  pendingLabel?: string;\n  sendLimitMessage?: string;\n  blockedMessage?: string;\n  networkErrorMessage?: string;\n  onRequested?: (authenticationToken: string) => void;\n  $actions?: ComponentActions;\n};\n\nexport type AccessCodeValidateControlProps = ComponentPropsWithRef<'div'> & {\n  label?: string;\n  placeholder?: string;\n  submitLabel?: string;\n  codeLength?: number;\n  invalidCodeMessage?: string;\n  blockedMessage?: string;\n  missingAuthContextMessage?: string;\n  networkErrorMessage?: string;\n  onValidated?: () => void;\n  $actions?: ComponentActions;\n};\n\n// ---------------------------------------------------------------------------\n// Context\n// ---------------------------------------------------------------------------\n\nconst ACCESS_CODE_SIGN_IN_CONTEXT_UNSET = Symbol('AccessCodeSignInContextUnset');\n\nconst AccessCodeSignInContext = createContext<AccessCodeSignInContextValue | typeof ACCESS_CODE_SIGN_IN_CONTEXT_UNSET>(\n  ACCESS_CODE_SIGN_IN_CONTEXT_UNSET,\n);\n\n/**\n * Read the stepper state (email, step, authenticationToken) from the nearest `AccessCodeSignInRoot`.\n * Throws when called outside that subtree — a misplaced control is a composition bug that should\n * surface immediately, mirroring `useShippingSimulator()`/`useSession()`.\n */\nfunction useAccessCodeSignIn(): AccessCodeSignInContextValue {\n  const ctx = useContext(AccessCodeSignInContext);\n  if (ctx === ACCESS_CODE_SIGN_IN_CONTEXT_UNSET) {\n    throw new Error('AccessCodeSignIn components must be used inside AccessCodeSignInRoot.');\n  }\n  return ctx;\n}\n\n// ---------------------------------------------------------------------------\n// Error-code → message mapping — every failure surfaces inline, at the control that produced it;\n// an unmapped code falls back to the server-supplied message rather than being silent.\n// ---------------------------------------------------------------------------\n\nfunction requestErrorMessage(\n  error: SessionUserError,\n  props: Pick<AccessCodeRequestControlProps, 'sendLimitMessage' | 'blockedMessage' | 'networkErrorMessage'>,\n): string {\n  switch (error.code) {\n    case 'ACCESS_CODE_SEND_LIMIT':\n      return props.sendLimitMessage ?? error.message;\n    case 'BLOCKED':\n      return props.blockedMessage ?? error.message;\n    case 'NETWORK_ERROR':\n      return props.networkErrorMessage ?? error.message;\n    default:\n      return error.message;\n  }\n}\n\nfunction validateErrorMessage(\n  error: SessionUserError,\n  props: Pick<\n    AccessCodeValidateControlProps,\n    'invalidCodeMessage' | 'blockedMessage' | 'missingAuthContextMessage' | 'networkErrorMessage'\n  >,\n): string {\n  switch (error.code) {\n    case 'INVALID_ACCESS_CODE':\n      return props.invalidCodeMessage ?? error.message;\n    case 'BLOCKED':\n      return props.blockedMessage ?? error.message;\n    case 'MISSING_AUTH_CONTEXT':\n      return props.missingAuthContextMessage ?? error.message;\n    case 'NETWORK_ERROR':\n      return props.networkErrorMessage ?? error.message;\n    default:\n      return error.message;\n  }\n}\n\n// ---------------------------------------------------------------------------\n// Definitions\n// ---------------------------------------------------------------------------\n\nexport const AccessCodeSignInRootDefinition = defineComponent<AccessCodeSignInRootProps>({\n  name: 'AccessCodeSignInRoot',\n  importPath: '@vtex/faststore/components',\n  component: AccessCodeSignInRoot,\n  fragment,\n  fetchStrategy: 'reactive',\n  requiresContext: 'session',\n  editor: { label: 'Access Code Sign-In', category: 'identity' },\n  schema: {},\n  guideline:\n    'Self-gating root of the anonymous-or-identified, email + access-code sign-in: renders nothing once loggedIn or when the account disables accessKeyAuthentication, but is available from the anonymous state onward. Owns a locally-typed draft email (never written to the cart) and the request/validate stepper. Must be inside SessionRoot. See access-code-sign-in.md.',\n});\n\nexport const AccessCodeEmailControlDefinition = defineComponent<AccessCodeEmailControlProps>({\n  name: 'AccessCodeEmailControl',\n  importPath: '@vtex/faststore/components',\n  component: AccessCodeEmailControl,\n  editor: { label: 'Access Code Email', category: 'identity' },\n  schema: {\n    label: { type: 'string', label: 'Label' },\n    placeholder: { type: 'string', label: 'Placeholder' },\n    invalidEmailMessage: { type: 'string', label: 'Invalid email message' },\n  },\n  guideline:\n    'The draft email input for the access-code flow: visible only at the request step, pre-fills from clientProfile.email when known but never persists an edit anywhere — it is purely the argument requestAccessCode/validateAccessCode dispatch with. Must be inside AccessCodeSignInRoot. See access-code-sign-in.md.',\n});\n\nexport const AccessCodeRequestControlDefinition = defineComponent<AccessCodeRequestControlProps>({\n  name: 'AccessCodeRequestControl',\n  importPath: '@vtex/faststore/components',\n  component: AccessCodeRequestControl,\n  actions: { session: ['requestAccessCode'] },\n  editor: { label: 'Access Code Request', category: 'identity' },\n  schema: {\n    label: { type: 'string', label: 'Label' },\n    sendLimitMessage: { type: 'string', label: 'Send-limit message' },\n    blockedMessage: { type: 'string', label: 'Blocked message' },\n    networkErrorMessage: { type: 'string', label: 'Network error message' },\n  },\n  guideline:\n    'Send-code step: disabled until the Root-owned draft email is a valid, non-empty address; dispatches $actions.session.requestAccessCode with it and advances the stepper on success. Failures render inline, never as a blocking error. Must be inside AccessCodeSignInRoot. See access-code-sign-in.md.',\n});\n\nexport const AccessCodeValidateControlDefinition = defineComponent<AccessCodeValidateControlProps>({\n  name: 'AccessCodeValidateControl',\n  importPath: '@vtex/faststore/components',\n  component: AccessCodeValidateControl,\n  actions: { session: ['validateAccessCode'] },\n  editor: { label: 'Access Code Validate', category: 'identity' },\n  schema: {\n    label: { type: 'string', label: 'Label' },\n    placeholder: { type: 'string', label: 'Placeholder' },\n    submitLabel: { type: 'string', label: 'Submit label' },\n    codeLength: { type: 'number', default: 6, label: 'Code length' },\n    invalidCodeMessage: { type: 'string', label: 'Invalid code message' },\n    blockedMessage: { type: 'string', label: 'Blocked message' },\n    networkErrorMessage: { type: 'string', label: 'Network error message' },\n  },\n  guideline:\n    'Code-entry step: composes AccessCodeField and dispatches $actions.session.validateAccessCode with the Root-owned email and authenticationToken; a successful validate flips the session reactively and hides the Root. Must be inside AccessCodeSignInRoot. See access-code-sign-in.md.',\n});\n\n// ---------------------------------------------------------------------------\n// Implementations\n// ---------------------------------------------------------------------------\n\n/**\n * Data-owning root of the access-code sign-in flow. Self-gates on two signals:\n * `useSession().state !== 'loggedIn'` (available from anonymous through identified; hides once\n * signed in) and `sessionAuthProviders.accessKeyAuthentication === true`. An unresolved fragment\n * read (`$data` still `null`) is treated as \"provider not enabled\" — the flow stays hidden rather\n * than flashing. Owns the `step`/`authenticationToken` stepper plus a locally-typed draft `email`\n * as local state, broadcasting all of it through context to its children. The draft email pre-fills\n * from `clientProfile.email` once (for an already-identified shopper) but a shopper edit is never\n * persisted anywhere by this family — it is purely the requestAccessCode/validateAccessCode\n * argument; the server sets clientProfileData.email as a side effect of a successful validate.\n * Reacts automatically once `useSession()` flips to `loggedIn` — no manual unmount call anywhere in\n * this family.\n */\nexport function AccessCodeSignInRoot({ $data: $dataProp, className, children, ...props }: AccessCodeSignInRootProps) {\n  const $data = useDataOverride($dataProp);\n  const { state } = useSession();\n\n  const [step, setStep] = useState<AccessCodeSignInStep>('request');\n  const [authenticationToken, setAuthenticationToken] = useState<string | null>(null);\n\n  const startValidation = useCallback((token: string) => {\n    setAuthenticationToken(token);\n    setStep('validate');\n  }, []);\n\n  const savedEmail = $data?.clientProfile?.email ?? '';\n  const [email, setEmailState] = useState('');\n  const [touched, setTouched] = useState(false);\n\n  // Pre-fill from the resolving/known profile email, but only while still at the request step and\n  // until the shopper edits the draft — mirrors ClientProfileForm's untouched-field re-seed, never\n  // clobbering an in-progress edit. Freezing the re-seed once the flow leaves 'request' keeps a\n  // mid-flow profile-cache change from diverging the email between requestAccessCode and\n  // validateAccessCode (the server rejects a validate whose email differs from the request).\n  useEffect(() => {\n    if (step === 'request' && !touched) setEmailState(savedEmail);\n  }, [savedEmail, touched, step]);\n\n  const setEmail = useCallback((next: string) => {\n    setTouched(true);\n    setEmailState(next);\n  }, []);\n\n  const providerEnabled = $data?.sessionAuthProviders?.accessKeyAuthentication ?? false;\n\n  const contextValue = useMemo<AccessCodeSignInContextValue>(\n    () => ({ email, setEmail, step, authenticationToken, startValidation }),\n    [email, setEmail, step, authenticationToken, startValidation],\n  );\n\n  const gated = state !== 'loggedIn' && providerEnabled;\n  if (!gated) return null;\n\n  return (\n    <AccessCodeSignInContext value={contextValue}>\n      <div {...props} className={className} data-fs-access-code-sign-in-root=\"\">\n        {children}\n      </div>\n    </AccessCodeSignInContext>\n  );\n}\n\n/**\n * The draft email input for the access-code flow. Renders only at the request step. Bound to the\n * Root's local `email`/`setEmail` — never a fragment, never a mutation of its own; typing here\n * never touches the cart. Format validation is `EmailField`'s own blur-triggered check (never\n * per-keystroke); `invalidEmailMessage` is only its fallback text, mirroring how\n * `EmailIdentificationControl` defers to the same particle for the same reason.\n */\nexport function AccessCodeEmailControl({\n  label,\n  placeholder,\n  invalidEmailMessage,\n  className,\n  ...props\n}: AccessCodeEmailControlProps) {\n  const { step, email, setEmail } = useAccessCodeSignIn();\n\n  if (step !== 'request') return null;\n\n  return (\n    <div {...props} className={className} data-fs-access-code-email-control=\"\">\n      <EmailField\n        label={label}\n        placeholder={placeholder}\n        value={email}\n        onValueChange={setEmail}\n        errorMessage={invalidEmailMessage}\n      />\n    </div>\n  );\n}\n\n/**\n * Renders only while the Root's stepper is at `step === 'request'`. Reads the draft email from\n * context and dispatches `$actions.session.requestAccessCode({ email })` once it is a valid,\n * non-empty address (no account-existence pre-check beyond that format gate). On a result with a\n * non-null token and no `userErrors`, advances the Root's stepper. Every `userErrors` entry renders\n * inline via a host-supplied, per-code message; the step never changes on error, so the shopper can\n * retry or abandon the method and continue as a guest.\n */\nexport function AccessCodeRequestControl({\n  label,\n  pendingLabel,\n  sendLimitMessage,\n  blockedMessage,\n  networkErrorMessage,\n  onRequested,\n  $actions: $actionsProp,\n  className,\n  ...props\n}: AccessCodeRequestControlProps) {\n  const $actions = useActionsOverride($actionsProp);\n  const { step, email, startValidation } = useAccessCodeSignIn();\n  const [pending, setPending] = useState(false);\n  const [error, setError] = useState<SessionUserError | null>(null);\n\n  if (step !== 'request') return null;\n\n  const canSubmit = !pending && isValidEmail(email);\n\n  async function handleClick() {\n    if (!canSubmit) return;\n    setPending(true);\n    setError(null);\n\n    try {\n      const result = (await $actions?.session?.requestAccessCode?.({ email })) ?? {\n        authenticationToken: null,\n        userErrors: [],\n      };\n\n      if (result.authenticationToken && result.userErrors.length === 0) {\n        startValidation(result.authenticationToken);\n        onRequested?.(result.authenticationToken);\n        return;\n      }\n\n      const [firstError] = result.userErrors;\n      if (firstError) setError(firstError);\n    } finally {\n      setPending(false);\n    }\n  }\n\n  const message = error ? requestErrorMessage(error, { sendLimitMessage, blockedMessage, networkErrorMessage }) : null;\n\n  return (\n    <div\n      {...props}\n      className={className}\n      data-fs-access-code-request-control=\"\"\n      {...(pending ? { 'data-fs-access-code-request-pending': '' } : {})}\n    >\n      <button\n        type=\"button\"\n        onClick={handleClick}\n        disabled={!canSubmit}\n        aria-busy={pending || undefined}\n        data-fs-access-code-request-submit=\"\"\n        data-fs-button=\"\"\n      >\n        {pending ? (pendingLabel ?? label) : label}\n      </button>\n      {message ? (\n        <div role=\"alert\" data-fs-access-code-request-error=\"\">\n          {message}\n        </div>\n      ) : null}\n    </div>\n  );\n}\n\n/**\n * Renders only while the Root's stepper is at `step === 'validate'`. Composes `AccessCodeField` for\n * the code value and a submit control, disabled below `codeLength` (a UX courtesy, never a\n * validity claim). Dispatches `$actions.session.validateAccessCode` with the email and\n * `authenticationToken` read from context. On a non-empty `userErrors` result, sets the field's\n * `invalid`/`errorMessage` from a host-supplied per-code message and retains the code/token so the\n * shopper can retry without re-requesting. On success it calls the optional `onValidated` and renders\n * no local \"success\" UI — `useSession()` flipping to `loggedIn` is what makes the whole Root\n * disappear.\n */\nexport function AccessCodeValidateControl({\n  label,\n  placeholder,\n  submitLabel,\n  codeLength = 6,\n  invalidCodeMessage,\n  blockedMessage,\n  missingAuthContextMessage,\n  networkErrorMessage,\n  onValidated,\n  $actions: $actionsProp,\n  className,\n  ...props\n}: AccessCodeValidateControlProps) {\n  const $actions = useActionsOverride($actionsProp);\n  const { step, email, authenticationToken } = useAccessCodeSignIn();\n  const [code, setCode] = useState('');\n  const [pending, setPending] = useState(false);\n  const [error, setError] = useState<SessionUserError | null>(null);\n\n  if (step !== 'validate') return null;\n\n  const canSubmit = !pending && code.length >= codeLength && authenticationToken != null;\n\n  async function handleSubmit(event: FormEvent<HTMLFormElement>) {\n    event.preventDefault();\n    if (!canSubmit || authenticationToken == null) return;\n\n    setPending(true);\n    setError(null);\n\n    try {\n      const errors =\n        (await $actions?.session?.validateAccessCode?.({ email, accessCode: code, authenticationToken })) ?? [];\n\n      const [firstError] = errors;\n      if (firstError) {\n        setError(firstError);\n        return;\n      }\n    } finally {\n      setPending(false);\n    }\n\n    onValidated?.();\n  }\n\n  function handleCodeChange(next: string) {\n    setCode(next);\n    if (error) setError(null);\n  }\n\n  const errorMessage = error\n    ? validateErrorMessage(error, {\n        invalidCodeMessage,\n        blockedMessage,\n        missingAuthContextMessage,\n        networkErrorMessage,\n      })\n    : undefined;\n\n  return (\n    <div\n      {...props}\n      className={className}\n      data-fs-access-code-validate-control=\"\"\n      {...(pending ? { 'data-fs-access-code-validate-pending': '' } : {})}\n    >\n      <form onSubmit={handleSubmit}>\n        <AccessCodeField\n          label={label}\n          placeholder={placeholder}\n          value={code}\n          maxLength={codeLength}\n          onValueChange={handleCodeChange}\n          disabled={pending}\n          invalid={error != null}\n          errorMessage={errorMessage}\n        />\n        <button\n          type=\"submit\"\n          disabled={!canSubmit}\n          aria-busy={pending || undefined}\n          data-fs-access-code-validate-submit=\"\"\n          data-fs-button=\"\"\n        >\n          {submitLabel}\n        </button>\n      </form>\n    </div>\n  );\n}\n\n// ---------------------------------------------------------------------------\n// Namespace export\n// ---------------------------------------------------------------------------\n\nexport const AccessCodeSignIn = {\n  Root: AccessCodeSignInRoot,\n  Email: AccessCodeEmailControl,\n  Request: AccessCodeRequestControl,\n  Validate: AccessCodeValidateControl,\n};\n"],"mappings":";;;;;;;;;;;AAmBA,MAAM,WAAyB;;;;;;;;;;;;AA4E/B,MAAM,oCAAoC,OAAO,8BAA8B;AAE/E,MAAM,0BAA0B,cAC9B,iCACF;;;;;;AAOA,SAAS,sBAAoD;CAC3D,MAAM,MAAM,WAAW,uBAAuB;CAC9C,IAAI,QAAQ,mCACV,MAAM,IAAI,MAAM,uEAAuE;CAEzF,OAAO;AACT;AAOA,SAAS,oBACP,OACA,OACQ;CACR,QAAQ,MAAM,MAAd;EACE,KAAK,0BACH,OAAO,MAAM,oBAAoB,MAAM;EACzC,KAAK,WACH,OAAO,MAAM,kBAAkB,MAAM;EACvC,KAAK,iBACH,OAAO,MAAM,uBAAuB,MAAM;EAC5C,SACE,OAAO,MAAM;CACjB;AACF;AAEA,SAAS,qBACP,OACA,OAIQ;CACR,QAAQ,MAAM,MAAd;EACE,KAAK,uBACH,OAAO,MAAM,sBAAsB,MAAM;EAC3C,KAAK,WACH,OAAO,MAAM,kBAAkB,MAAM;EACvC,KAAK,wBACH,OAAO,MAAM,6BAA6B,MAAM;EAClD,KAAK,iBACH,OAAO,MAAM,uBAAuB,MAAM;EAC5C,SACE,OAAO,MAAM;CACjB;AACF;AAMA,MAAa,iCAAiC,gBAA2C;CACvF,MAAM;CACN,YAAY;CACZ,WAAW;CACX;CACA,eAAe;CACf,iBAAiB;CACjB,QAAQ;EAAE,OAAO;EAAuB,UAAU;CAAW;CAC7D,QAAQ,CAAC;CACT,WACE;AACJ,CAAC;AAED,MAAa,mCAAmC,gBAA6C;CAC3F,MAAM;CACN,YAAY;CACZ,WAAW;CACX,QAAQ;EAAE,OAAO;EAAqB,UAAU;CAAW;CAC3D,QAAQ;EACN,OAAO;GAAE,MAAM;GAAU,OAAO;EAAQ;EACxC,aAAa;GAAE,MAAM;GAAU,OAAO;EAAc;EACpD,qBAAqB;GAAE,MAAM;GAAU,OAAO;EAAwB;CACxE;CACA,WACE;AACJ,CAAC;AAED,MAAa,qCAAqC,gBAA+C;CAC/F,MAAM;CACN,YAAY;CACZ,WAAW;CACX,SAAS,EAAE,SAAS,CAAC,mBAAmB,EAAE;CAC1C,QAAQ;EAAE,OAAO;EAAuB,UAAU;CAAW;CAC7D,QAAQ;EACN,OAAO;GAAE,MAAM;GAAU,OAAO;EAAQ;EACxC,kBAAkB;GAAE,MAAM;GAAU,OAAO;EAAqB;EAChE,gBAAgB;GAAE,MAAM;GAAU,OAAO;EAAkB;EAC3D,qBAAqB;GAAE,MAAM;GAAU,OAAO;EAAwB;CACxE;CACA,WACE;AACJ,CAAC;AAED,MAAa,sCAAsC,gBAAgD;CACjG,MAAM;CACN,YAAY;CACZ,WAAW;CACX,SAAS,EAAE,SAAS,CAAC,oBAAoB,EAAE;CAC3C,QAAQ;EAAE,OAAO;EAAwB,UAAU;CAAW;CAC9D,QAAQ;EACN,OAAO;GAAE,MAAM;GAAU,OAAO;EAAQ;EACxC,aAAa;GAAE,MAAM;GAAU,OAAO;EAAc;EACpD,aAAa;GAAE,MAAM;GAAU,OAAO;EAAe;EACrD,YAAY;GAAE,MAAM;GAAU,SAAS;GAAG,OAAO;EAAc;EAC/D,oBAAoB;GAAE,MAAM;GAAU,OAAO;EAAuB;EACpE,gBAAgB;GAAE,MAAM;GAAU,OAAO;EAAkB;EAC3D,qBAAqB;GAAE,MAAM;GAAU,OAAO;EAAwB;CACxE;CACA,WACE;AACJ,CAAC;;;;;;;;;;;;;;AAmBD,SAAgB,qBAAqB,EAAE,OAAO,WAAW,WAAW,UAAU,GAAG,SAAoC;CACnH,MAAM,QAAQ,gBAAgB,SAAS;CACvC,MAAM,EAAE,UAAU,WAAW;CAE7B,MAAM,CAAC,MAAM,WAAW,SAA+B,SAAS;CAChE,MAAM,CAAC,qBAAqB,0BAA0B,SAAwB,IAAI;CAElF,MAAM,kBAAkB,aAAa,UAAkB;EACrD,uBAAuB,KAAK;EAC5B,QAAQ,UAAU;CACpB,GAAG,CAAC,CAAC;CAEL,MAAM,aAAa,OAAO,eAAe,SAAS;CAClD,MAAM,CAAC,OAAO,iBAAiB,SAAS,EAAE;CAC1C,MAAM,CAAC,SAAS,cAAc,SAAS,KAAK;CAO5C,gBAAgB;EACd,IAAI,SAAS,aAAa,CAAC,SAAS,cAAc,UAAU;CAC9D,GAAG;EAAC;EAAY;EAAS;CAAI,CAAC;CAE9B,MAAM,WAAW,aAAa,SAAiB;EAC7C,WAAW,IAAI;EACf,cAAc,IAAI;CACpB,GAAG,CAAC,CAAC;CAEL,MAAM,kBAAkB,OAAO,sBAAsB,2BAA2B;CAEhF,MAAM,eAAe,eACZ;EAAE;EAAO;EAAU;EAAM;EAAqB;CAAgB,IACrE;EAAC;EAAO;EAAU;EAAM;EAAqB;CAAe,CAC9D;CAGA,IAAI,EADU,UAAU,cAAc,kBAC1B,OAAO;CAEnB,OACE,oBAAC,yBAAD;EAAyB,OAAO;EAC9B,UAAA,oBAAC,OAAD;GAAK,GAAI;GAAkB;GAAW,oCAAiC;GACpE;EACE,CAAA;CACkB,CAAA;AAE7B;;;;;;;;AASA,SAAgB,uBAAuB,EACrC,OACA,aACA,qBACA,WACA,GAAG,SAC2B;CAC9B,MAAM,EAAE,MAAM,OAAO,aAAa,oBAAoB;CAEtD,IAAI,SAAS,WAAW,OAAO;CAE/B,OACE,oBAAC,OAAD;EAAK,GAAI;EAAkB;EAAW,qCAAkC;EACtE,UAAA,oBAAC,YAAD;GACS;GACM;GACb,OAAO;GACP,eAAe;GACf,cAAc;EACf,CAAA;CACE,CAAA;AAET;;;;;;;;;AAUA,SAAgB,yBAAyB,EACvC,OACA,cACA,kBACA,gBACA,qBACA,aACA,UAAU,cACV,WACA,GAAG,SAC6B;CAChC,MAAM,WAAW,mBAAmB,YAAY;CAChD,MAAM,EAAE,MAAM,OAAO,oBAAoB,oBAAoB;CAC7D,MAAM,CAAC,SAAS,cAAc,SAAS,KAAK;CAC5C,MAAM,CAAC,OAAO,YAAY,SAAkC,IAAI;CAEhE,IAAI,SAAS,WAAW,OAAO;CAE/B,MAAM,YAAY,CAAC,WAAW,aAAa,KAAK;CAEhD,eAAe,cAAc;EAC3B,IAAI,CAAC,WAAW;EAChB,WAAW,IAAI;EACf,SAAS,IAAI;EAEb,IAAI;GACF,MAAM,SAAU,MAAM,UAAU,SAAS,oBAAoB,EAAE,MAAM,CAAC,KAAM;IAC1E,qBAAqB;IACrB,YAAY,CAAC;GACf;GAEA,IAAI,OAAO,uBAAuB,OAAO,WAAW,WAAW,GAAG;IAChE,gBAAgB,OAAO,mBAAmB;IAC1C,cAAc,OAAO,mBAAmB;IACxC;GACF;GAEA,MAAM,CAAC,cAAc,OAAO;GAC5B,IAAI,YAAY,SAAS,UAAU;EACrC,UAAU;GACR,WAAW,KAAK;EAClB;CACF;CAEA,MAAM,UAAU,QAAQ,oBAAoB,OAAO;EAAE;EAAkB;EAAgB;CAAoB,CAAC,IAAI;CAEhH,OACE,qBAAC,OAAD;EACE,GAAI;EACO;EACX,uCAAoC;EACpC,GAAK,UAAU,EAAE,uCAAuC,GAAG,IAAI,CAAC;EAJlE,UAAA,CAME,oBAAC,UAAD;GACE,MAAK;GACL,SAAS;GACT,UAAU,CAAC;GACX,aAAW,WAAW,KAAA;GACtB,sCAAmC;GACnC,kBAAe;GAEd,UAAA,UAAW,gBAAgB,QAAS;EAC/B,CAAA,GACP,UACC,oBAAC,OAAD;GAAK,MAAK;GAAQ,qCAAkC;GACjD,UAAA;EACE,CAAA,IACH,IACD;;AAET;;;;;;;;;;;AAYA,SAAgB,0BAA0B,EACxC,OACA,aACA,aACA,aAAa,GACb,oBACA,gBACA,2BACA,qBACA,aACA,UAAU,cACV,WACA,GAAG,SAC8B;CACjC,MAAM,WAAW,mBAAmB,YAAY;CAChD,MAAM,EAAE,MAAM,OAAO,wBAAwB,oBAAoB;CACjE,MAAM,CAAC,MAAM,WAAW,SAAS,EAAE;CACnC,MAAM,CAAC,SAAS,cAAc,SAAS,KAAK;CAC5C,MAAM,CAAC,OAAO,YAAY,SAAkC,IAAI;CAEhE,IAAI,SAAS,YAAY,OAAO;CAEhC,MAAM,YAAY,CAAC,WAAW,KAAK,UAAU,cAAc,uBAAuB;CAElF,eAAe,aAAa,OAAmC;EAC7D,MAAM,eAAe;EACrB,IAAI,CAAC,aAAa,uBAAuB,MAAM;EAE/C,WAAW,IAAI;EACf,SAAS,IAAI;EAEb,IAAI;GAIF,MAAM,CAAC,cAFJ,MAAM,UAAU,SAAS,qBAAqB;IAAE;IAAO,YAAY;IAAM;GAAoB,CAAC,KAAM,CAAC;GAGxG,IAAI,YAAY;IACd,SAAS,UAAU;IACnB;GACF;EACF,UAAU;GACR,WAAW,KAAK;EAClB;EAEA,cAAc;CAChB;CAEA,SAAS,iBAAiB,MAAc;EACtC,QAAQ,IAAI;EACZ,IAAI,OAAO,SAAS,IAAI;CAC1B;CAEA,MAAM,eAAe,QACjB,qBAAqB,OAAO;EAC1B;EACA;EACA;EACA;CACF,CAAC,IACD,KAAA;CAEJ,OACE,oBAAC,OAAD;EACE,GAAI;EACO;EACX,wCAAqC;EACrC,GAAK,UAAU,EAAE,wCAAwC,GAAG,IAAI,CAAC;EAEjE,UAAA,qBAAC,QAAD;GAAM,UAAU;GAAhB,UAAA,CACE,oBAAC,iBAAD;IACS;IACM;IACb,OAAO;IACP,WAAW;IACX,eAAe;IACf,UAAU;IACV,SAAS,SAAS;IACJ;GACf,CAAA,GACD,oBAAC,UAAD;IACE,MAAK;IACL,UAAU,CAAC;IACX,aAAW,WAAW,KAAA;IACtB,uCAAoC;IACpC,kBAAe;IAEd,UAAA;GACK,CAAA,CACJ;;CACH,CAAA;AAET;AAMA,MAAa,mBAAmB;CAC9B,MAAM;CACN,OAAO;CACP,SAAS;CACT,UAAU;AACZ"}
+{"version":3,"file":"access-code-sign-in.js","names":[],"sources":["../../../src/matter/access-code-sign-in/access-code-sign-in.tsx"],"sourcesContent":["'use client';\n\nimport { defineComponent } from '@vtex/fs-core';\nimport type { ComponentPropsWithRef, FormEvent } from 'react';\nimport { createContext, useCallback, useContext, useEffect, useMemo, useState } from 'react';\nimport { AccessCodeField } from '../../particles/access-code-field/access-code-field.js';\nimport { EmailField, isValidEmail } from '../../particles/email-field/email-field.js';\nimport { useActionsOverride } from '../../sdk/actions/actions-override-context.js';\nimport type { ComponentActions } from '../../sdk/actions/types.js';\nimport { useDataOverride } from '../../sdk/data/data-override-context.js';\nimport type { SessionUserError } from '../../sdk/session/auth-operations.js';\nimport { resolveAuthoredCopy } from '../../utils/resolve-authored-copy.js';\nimport { useSession } from '../session/session.js';\n\n// ---------------------------------------------------------------------------\n// GraphQL Fragment (colocated, ADR-0011) — clientProfile.email seeds the draft email as a\n// convenience pre-fill for an already-identified shopper; sessionAuthProviders.accessKeyAuthentication\n// is the account gate. Authored as a raw string, mirroring EmailIdentificationControl/ShippingSimulator.\n// ---------------------------------------------------------------------------\n\nconst fragment = /* GraphQL */ `\n  fragment AccessCodeSignInData on Query {\n    clientProfile {\n      __typename\n      id\n      email\n    }\n    sessionAuthProviders {\n      accessKeyAuthentication\n    }\n  }\n`;\n\n// ---------------------------------------------------------------------------\n// Types\n// ---------------------------------------------------------------------------\n\n/** Colocated fragment slice forwarded by the reactive runtime — `null` until both fields resolve. */\nexport type AccessCodeSignInSlice = {\n  clientProfile: { email: string | null } | null;\n  sessionAuthProviders: { accessKeyAuthentication: boolean } | null;\n};\n\nexport type AccessCodeSignInStep = 'request' | 'validate';\n\nexport type AccessCodeSignInContextValue = Readonly<{\n  /** The shopper's locally-typed draft email — never written to the cart; only ever an argument to\n   * requestAccessCode/validateAccessCode. Pre-fills from `clientProfile.email` when known, but a\n   * shopper edit is never persisted anywhere by this family. */\n  email: string;\n  /** Updates the draft email; marks it as shopper-touched so pre-fill no longer overwrites it. */\n  setEmail: (email: string) => void;\n  step: AccessCodeSignInStep;\n  /** Opaque token round-tripped from requestAccessCode into validateAccessCode. */\n  authenticationToken: string | null;\n  /** Called by AccessCodeRequestControl on a successful requestAccessCode. */\n  startValidation: (authenticationToken: string) => void;\n}>;\n\nexport type AccessCodeSignInRootProps = ComponentPropsWithRef<'div'> & {\n  $data?: AccessCodeSignInSlice | null;\n};\n\nexport type AccessCodeEmailControlProps = ComponentPropsWithRef<'div'> & {\n  label?: string;\n  placeholder?: string;\n  invalidEmailMessage?: string;\n};\n\nexport type AccessCodeRequestControlProps = ComponentPropsWithRef<'div'> & {\n  label?: string;\n  pendingLabel?: string;\n  sendLimitMessage?: string;\n  blockedMessage?: string;\n  networkErrorMessage?: string;\n  onRequested?: (authenticationToken: string) => void;\n  $actions?: ComponentActions;\n};\n\nexport type AccessCodeValidateControlProps = ComponentPropsWithRef<'div'> & {\n  label?: string;\n  placeholder?: string;\n  submitLabel?: string;\n  codeLength?: number;\n  invalidCodeMessage?: string;\n  blockedMessage?: string;\n  missingAuthContextMessage?: string;\n  networkErrorMessage?: string;\n  onValidated?: () => void;\n  $actions?: ComponentActions;\n};\n\n// ---------------------------------------------------------------------------\n// Context\n// ---------------------------------------------------------------------------\n\nconst ACCESS_CODE_SIGN_IN_CONTEXT_UNSET = Symbol('AccessCodeSignInContextUnset');\n\nconst AccessCodeSignInContext = createContext<AccessCodeSignInContextValue | typeof ACCESS_CODE_SIGN_IN_CONTEXT_UNSET>(\n  ACCESS_CODE_SIGN_IN_CONTEXT_UNSET,\n);\n\n/**\n * Read the stepper state (email, step, authenticationToken) from the nearest `AccessCodeSignInRoot`.\n * Throws when called outside that subtree — a misplaced control is a composition bug that should\n * surface immediately, mirroring `useShippingSimulator()`/`useSession()`.\n */\nfunction useAccessCodeSignIn(): AccessCodeSignInContextValue {\n  const ctx = useContext(AccessCodeSignInContext);\n  if (ctx === ACCESS_CODE_SIGN_IN_CONTEXT_UNSET) {\n    throw new Error('AccessCodeSignIn components must be used inside AccessCodeSignInRoot.');\n  }\n  return ctx;\n}\n\n// ---------------------------------------------------------------------------\n// Error-code → message mapping — every failure surfaces inline, at the control that produced it;\n// an unmapped code falls back to the server-supplied message rather than being silent. Each mapped\n// case is resolved through `resolveAuthoredCopy` (T38, FR-5): an authored empty or whitespace-only\n// message falls back to the server-supplied `error.message` rather than rendering a blank alert.\n// ---------------------------------------------------------------------------\n\nfunction requestErrorMessage(\n  error: SessionUserError,\n  props: Pick<AccessCodeRequestControlProps, 'sendLimitMessage' | 'blockedMessage' | 'networkErrorMessage'>,\n): string {\n  switch (error.code) {\n    case 'ACCESS_CODE_SEND_LIMIT':\n      return resolveAuthoredCopy(props.sendLimitMessage, error.message);\n    case 'BLOCKED':\n      return resolveAuthoredCopy(props.blockedMessage, error.message);\n    case 'NETWORK_ERROR':\n      return resolveAuthoredCopy(props.networkErrorMessage, error.message);\n    default:\n      return error.message;\n  }\n}\n\nfunction validateErrorMessage(\n  error: SessionUserError,\n  props: Pick<\n    AccessCodeValidateControlProps,\n    'invalidCodeMessage' | 'blockedMessage' | 'missingAuthContextMessage' | 'networkErrorMessage'\n  >,\n): string {\n  switch (error.code) {\n    case 'INVALID_ACCESS_CODE':\n      return resolveAuthoredCopy(props.invalidCodeMessage, error.message);\n    case 'BLOCKED':\n      return resolveAuthoredCopy(props.blockedMessage, error.message);\n    case 'MISSING_AUTH_CONTEXT':\n      return resolveAuthoredCopy(props.missingAuthContextMessage, error.message);\n    case 'NETWORK_ERROR':\n      return resolveAuthoredCopy(props.networkErrorMessage, error.message);\n    default:\n      return error.message;\n  }\n}\n\n// ---------------------------------------------------------------------------\n// Definitions\n// ---------------------------------------------------------------------------\n\nexport const AccessCodeSignInRootDefinition = defineComponent<AccessCodeSignInRootProps>({\n  name: 'AccessCodeSignInRoot',\n  importPath: '@vtex/faststore/components',\n  component: AccessCodeSignInRoot,\n  fragment,\n  fetchStrategy: 'reactive',\n  requiresContext: 'session',\n  editor: { label: 'Access Code Sign-In', category: 'identity' },\n  schema: {},\n  guideline:\n    'Self-gating root of the anonymous-or-identified, email + access-code sign-in: renders nothing once loggedIn or when the account disables accessKeyAuthentication, but is available from the anonymous state onward. Owns a locally-typed draft email (never written to the cart) and the request/validate stepper. Must be inside SessionRoot. See access-code-sign-in.md.',\n});\n\nexport const AccessCodeEmailControlDefinition = defineComponent<AccessCodeEmailControlProps>({\n  name: 'AccessCodeEmailControl',\n  importPath: '@vtex/faststore/components',\n  component: AccessCodeEmailControl,\n  editor: { label: 'Access Code Email', category: 'identity' },\n  schema: {\n    label: { type: 'string', label: 'Label' },\n    placeholder: { type: 'string', label: 'Placeholder' },\n    invalidEmailMessage: { type: 'string', label: 'Invalid email message' },\n  },\n  guideline:\n    'The draft email input for the access-code flow: visible only at the request step, pre-fills from clientProfile.email when known but never persists an edit anywhere — it is purely the argument requestAccessCode/validateAccessCode dispatch with. Must be inside AccessCodeSignInRoot. See access-code-sign-in.md.',\n});\n\nexport const AccessCodeRequestControlDefinition = defineComponent<AccessCodeRequestControlProps>({\n  name: 'AccessCodeRequestControl',\n  importPath: '@vtex/faststore/components',\n  component: AccessCodeRequestControl,\n  actions: { session: ['requestAccessCode'] },\n  editor: { label: 'Access Code Request', category: 'identity' },\n  schema: {\n    label: { type: 'string', label: 'Label' },\n    sendLimitMessage: { type: 'string', label: 'Send-limit message' },\n    blockedMessage: { type: 'string', label: 'Blocked message' },\n    networkErrorMessage: { type: 'string', label: 'Network error message' },\n  },\n  guideline:\n    'Send-code step: disabled until the Root-owned draft email is a valid, non-empty address; dispatches $actions.session.requestAccessCode with it and advances the stepper on success. Failures render inline, never as a blocking error. Must be inside AccessCodeSignInRoot. See access-code-sign-in.md.',\n});\n\nexport const AccessCodeValidateControlDefinition = defineComponent<AccessCodeValidateControlProps>({\n  name: 'AccessCodeValidateControl',\n  importPath: '@vtex/faststore/components',\n  component: AccessCodeValidateControl,\n  actions: { session: ['validateAccessCode'] },\n  editor: { label: 'Access Code Validate', category: 'identity' },\n  schema: {\n    label: { type: 'string', label: 'Label' },\n    placeholder: { type: 'string', label: 'Placeholder' },\n    submitLabel: { type: 'string', label: 'Submit label' },\n    codeLength: { type: 'number', default: 6, label: 'Code length' },\n    invalidCodeMessage: { type: 'string', label: 'Invalid code message' },\n    blockedMessage: { type: 'string', label: 'Blocked message' },\n    networkErrorMessage: { type: 'string', label: 'Network error message' },\n  },\n  guideline:\n    'Code-entry step: composes AccessCodeField and dispatches $actions.session.validateAccessCode with the Root-owned email and authenticationToken; a successful validate flips the session reactively and hides the Root. Must be inside AccessCodeSignInRoot. See access-code-sign-in.md.',\n});\n\n// ---------------------------------------------------------------------------\n// Implementations\n// ---------------------------------------------------------------------------\n\n/**\n * Data-owning root of the access-code sign-in flow. Self-gates on two signals:\n * `useSession().state !== 'loggedIn'` (available from anonymous through identified; hides once\n * signed in) and `sessionAuthProviders.accessKeyAuthentication === true`. An unresolved fragment\n * read (`$data` still `null`) is treated as \"provider not enabled\" — the flow stays hidden rather\n * than flashing. Owns the `step`/`authenticationToken` stepper plus a locally-typed draft `email`\n * as local state, broadcasting all of it through context to its children. The draft email pre-fills\n * from `clientProfile.email` once (for an already-identified shopper) but a shopper edit is never\n * persisted anywhere by this family — it is purely the requestAccessCode/validateAccessCode\n * argument; the server sets clientProfileData.email as a side effect of a successful validate.\n * Reacts automatically once `useSession()` flips to `loggedIn` — no manual unmount call anywhere in\n * this family.\n */\nexport function AccessCodeSignInRoot({ $data: $dataProp, className, children, ...props }: AccessCodeSignInRootProps) {\n  const $data = useDataOverride($dataProp);\n  const { state } = useSession();\n\n  const [step, setStep] = useState<AccessCodeSignInStep>('request');\n  const [authenticationToken, setAuthenticationToken] = useState<string | null>(null);\n\n  const startValidation = useCallback((token: string) => {\n    setAuthenticationToken(token);\n    setStep('validate');\n  }, []);\n\n  const savedEmail = $data?.clientProfile?.email ?? '';\n  const [email, setEmailState] = useState('');\n  const [touched, setTouched] = useState(false);\n\n  // Pre-fill from the resolving/known profile email, but only while still at the request step and\n  // until the shopper edits the draft — mirrors ClientProfileRoot's untouched-field re-seed, never\n  // clobbering an in-progress edit. Freezing the re-seed once the flow leaves 'request' keeps a\n  // mid-flow profile-cache change from diverging the email between requestAccessCode and\n  // validateAccessCode (the server rejects a validate whose email differs from the request).\n  useEffect(() => {\n    if (step === 'request' && !touched) setEmailState(savedEmail);\n  }, [savedEmail, touched, step]);\n\n  const setEmail = useCallback((next: string) => {\n    setTouched(true);\n    setEmailState(next);\n  }, []);\n\n  const providerEnabled = $data?.sessionAuthProviders?.accessKeyAuthentication ?? false;\n\n  const contextValue = useMemo<AccessCodeSignInContextValue>(\n    () => ({ email, setEmail, step, authenticationToken, startValidation }),\n    [email, setEmail, step, authenticationToken, startValidation],\n  );\n\n  const gated = state !== 'loggedIn' && providerEnabled;\n  if (!gated) return null;\n\n  return (\n    <AccessCodeSignInContext value={contextValue}>\n      <div {...props} className={className} data-fs-access-code-sign-in-root=\"\">\n        {children}\n      </div>\n    </AccessCodeSignInContext>\n  );\n}\n\n/**\n * The draft email input for the access-code flow. Renders only at the request step. Bound to the\n * Root's local `email`/`setEmail` — never a fragment, never a mutation of its own; typing here\n * never touches the cart. Format validation is `EmailField`'s own blur-triggered check (never\n * per-keystroke); `invalidEmailMessage` is only its fallback text, mirroring how\n * `EmailIdentificationControl` defers to the same particle for the same reason.\n */\nexport function AccessCodeEmailControl({\n  label,\n  placeholder,\n  invalidEmailMessage,\n  className,\n  ...props\n}: AccessCodeEmailControlProps) {\n  const { step, email, setEmail } = useAccessCodeSignIn();\n\n  if (step !== 'request') return null;\n\n  return (\n    <div {...props} className={className} data-fs-access-code-email-control=\"\">\n      <EmailField\n        label={label}\n        placeholder={placeholder}\n        value={email}\n        onValueChange={setEmail}\n        errorMessage={invalidEmailMessage}\n      />\n    </div>\n  );\n}\n\n/**\n * Renders only while the Root's stepper is at `step === 'request'`. Reads the draft email from\n * context and dispatches `$actions.session.requestAccessCode({ email })` once it is a valid,\n * non-empty address (no account-existence pre-check beyond that format gate). On a result with a\n * non-null token and no `userErrors`, advances the Root's stepper. Every `userErrors` entry renders\n * inline via a host-supplied, per-code message; the step never changes on error, so the shopper can\n * retry or abandon the method and continue as a guest.\n */\nexport function AccessCodeRequestControl({\n  label,\n  pendingLabel,\n  sendLimitMessage,\n  blockedMessage,\n  networkErrorMessage,\n  onRequested,\n  $actions: $actionsProp,\n  className,\n  ...props\n}: AccessCodeRequestControlProps) {\n  const $actions = useActionsOverride($actionsProp);\n  const { step, email, startValidation } = useAccessCodeSignIn();\n  const [pending, setPending] = useState(false);\n  const [error, setError] = useState<SessionUserError | null>(null);\n\n  if (step !== 'request') return null;\n\n  const canSubmit = !pending && isValidEmail(email);\n\n  async function handleClick() {\n    if (!canSubmit) return;\n    setPending(true);\n    setError(null);\n\n    try {\n      const result = (await $actions?.session?.requestAccessCode?.({ email })) ?? {\n        authenticationToken: null,\n        userErrors: [],\n      };\n\n      if (result.authenticationToken && result.userErrors.length === 0) {\n        startValidation(result.authenticationToken);\n        onRequested?.(result.authenticationToken);\n        return;\n      }\n\n      const [firstError] = result.userErrors;\n      if (firstError) setError(firstError);\n    } finally {\n      setPending(false);\n    }\n  }\n\n  const message = error ? requestErrorMessage(error, { sendLimitMessage, blockedMessage, networkErrorMessage }) : null;\n\n  return (\n    <div\n      {...props}\n      className={className}\n      data-fs-access-code-request-control=\"\"\n      {...(pending ? { 'data-fs-access-code-request-pending': '' } : {})}\n    >\n      <button\n        type=\"button\"\n        onClick={handleClick}\n        disabled={!canSubmit}\n        aria-busy={pending || undefined}\n        data-fs-access-code-request-submit=\"\"\n        data-fs-button=\"\"\n      >\n        {/* T38, FR-5: resolveAuthoredCopy so an authored empty/whitespace-only pendingLabel falls\n            back to `label` instead of blanking the button while the request is in flight. */}\n        {pending ? resolveAuthoredCopy(pendingLabel, label ?? '') : label}\n      </button>\n      {message ? (\n        <div role=\"alert\" data-fs-access-code-request-error=\"\">\n          {message}\n        </div>\n      ) : null}\n    </div>\n  );\n}\n\n/**\n * Renders only while the Root's stepper is at `step === 'validate'`. Composes `AccessCodeField` for\n * the code value and a submit control, disabled below `codeLength` (a UX courtesy, never a\n * validity claim). Dispatches `$actions.session.validateAccessCode` with the email and\n * `authenticationToken` read from context. On a non-empty `userErrors` result, sets the field's\n * `invalid`/`errorMessage` from a host-supplied per-code message and retains the code/token so the\n * shopper can retry without re-requesting. On success it calls the optional `onValidated` and renders\n * no local \"success\" UI — `useSession()` flipping to `loggedIn` is what makes the whole Root\n * disappear.\n */\nexport function AccessCodeValidateControl({\n  label,\n  placeholder,\n  submitLabel,\n  codeLength = 6,\n  invalidCodeMessage,\n  blockedMessage,\n  missingAuthContextMessage,\n  networkErrorMessage,\n  onValidated,\n  $actions: $actionsProp,\n  className,\n  ...props\n}: AccessCodeValidateControlProps) {\n  const $actions = useActionsOverride($actionsProp);\n  const { step, email, authenticationToken } = useAccessCodeSignIn();\n  const [code, setCode] = useState('');\n  const [pending, setPending] = useState(false);\n  const [error, setError] = useState<SessionUserError | null>(null);\n\n  if (step !== 'validate') return null;\n\n  const canSubmit = !pending && code.length >= codeLength && authenticationToken != null;\n\n  async function handleSubmit(event: FormEvent<HTMLFormElement>) {\n    event.preventDefault();\n    if (!canSubmit || authenticationToken == null) return;\n\n    setPending(true);\n    setError(null);\n\n    try {\n      const errors =\n        (await $actions?.session?.validateAccessCode?.({ email, accessCode: code, authenticationToken })) ?? [];\n\n      const [firstError] = errors;\n      if (firstError) {\n        setError(firstError);\n        return;\n      }\n    } finally {\n      setPending(false);\n    }\n\n    onValidated?.();\n  }\n\n  function handleCodeChange(next: string) {\n    setCode(next);\n    if (error) setError(null);\n  }\n\n  const errorMessage = error\n    ? validateErrorMessage(error, {\n        invalidCodeMessage,\n        blockedMessage,\n        missingAuthContextMessage,\n        networkErrorMessage,\n      })\n    : undefined;\n\n  return (\n    <div\n      {...props}\n      className={className}\n      data-fs-access-code-validate-control=\"\"\n      {...(pending ? { 'data-fs-access-code-validate-pending': '' } : {})}\n    >\n      <form onSubmit={handleSubmit}>\n        <AccessCodeField\n          label={label}\n          placeholder={placeholder}\n          value={code}\n          maxLength={codeLength}\n          onValueChange={handleCodeChange}\n          disabled={pending}\n          invalid={error != null}\n          errorMessage={errorMessage}\n        />\n        <button\n          type=\"submit\"\n          disabled={!canSubmit}\n          aria-busy={pending || undefined}\n          data-fs-access-code-validate-submit=\"\"\n          data-fs-button=\"\"\n        >\n          {submitLabel}\n        </button>\n      </form>\n    </div>\n  );\n}\n\n// ---------------------------------------------------------------------------\n// Namespace export\n// ---------------------------------------------------------------------------\n\nexport const AccessCodeSignIn = {\n  Root: AccessCodeSignInRoot,\n  Email: AccessCodeEmailControl,\n  Request: AccessCodeRequestControl,\n  Validate: AccessCodeValidateControl,\n};\n"],"mappings":";;;;;;;;;;;;AAoBA,MAAM,WAAyB;;;;;;;;;;;;AA4E/B,MAAM,oCAAoC,OAAO,8BAA8B;AAE/E,MAAM,0BAA0B,cAC9B,iCACF;;;;;;AAOA,SAAS,sBAAoD;CAC3D,MAAM,MAAM,WAAW,uBAAuB;CAC9C,IAAI,QAAQ,mCACV,MAAM,IAAI,MAAM,uEAAuE;CAEzF,OAAO;AACT;AASA,SAAS,oBACP,OACA,OACQ;CACR,QAAQ,MAAM,MAAd;EACE,KAAK,0BACH,OAAO,oBAAoB,MAAM,kBAAkB,MAAM,OAAO;EAClE,KAAK,WACH,OAAO,oBAAoB,MAAM,gBAAgB,MAAM,OAAO;EAChE,KAAK,iBACH,OAAO,oBAAoB,MAAM,qBAAqB,MAAM,OAAO;EACrE,SACE,OAAO,MAAM;CACjB;AACF;AAEA,SAAS,qBACP,OACA,OAIQ;CACR,QAAQ,MAAM,MAAd;EACE,KAAK,uBACH,OAAO,oBAAoB,MAAM,oBAAoB,MAAM,OAAO;EACpE,KAAK,WACH,OAAO,oBAAoB,MAAM,gBAAgB,MAAM,OAAO;EAChE,KAAK,wBACH,OAAO,oBAAoB,MAAM,2BAA2B,MAAM,OAAO;EAC3E,KAAK,iBACH,OAAO,oBAAoB,MAAM,qBAAqB,MAAM,OAAO;EACrE,SACE,OAAO,MAAM;CACjB;AACF;AAMA,MAAa,iCAAiC,gBAA2C;CACvF,MAAM;CACN,YAAY;CACZ,WAAW;CACX;CACA,eAAe;CACf,iBAAiB;CACjB,QAAQ;EAAE,OAAO;EAAuB,UAAU;CAAW;CAC7D,QAAQ,CAAC;CACT,WACE;AACJ,CAAC;AAED,MAAa,mCAAmC,gBAA6C;CAC3F,MAAM;CACN,YAAY;CACZ,WAAW;CACX,QAAQ;EAAE,OAAO;EAAqB,UAAU;CAAW;CAC3D,QAAQ;EACN,OAAO;GAAE,MAAM;GAAU,OAAO;EAAQ;EACxC,aAAa;GAAE,MAAM;GAAU,OAAO;EAAc;EACpD,qBAAqB;GAAE,MAAM;GAAU,OAAO;EAAwB;CACxE;CACA,WACE;AACJ,CAAC;AAED,MAAa,qCAAqC,gBAA+C;CAC/F,MAAM;CACN,YAAY;CACZ,WAAW;CACX,SAAS,EAAE,SAAS,CAAC,mBAAmB,EAAE;CAC1C,QAAQ;EAAE,OAAO;EAAuB,UAAU;CAAW;CAC7D,QAAQ;EACN,OAAO;GAAE,MAAM;GAAU,OAAO;EAAQ;EACxC,kBAAkB;GAAE,MAAM;GAAU,OAAO;EAAqB;EAChE,gBAAgB;GAAE,MAAM;GAAU,OAAO;EAAkB;EAC3D,qBAAqB;GAAE,MAAM;GAAU,OAAO;EAAwB;CACxE;CACA,WACE;AACJ,CAAC;AAED,MAAa,sCAAsC,gBAAgD;CACjG,MAAM;CACN,YAAY;CACZ,WAAW;CACX,SAAS,EAAE,SAAS,CAAC,oBAAoB,EAAE;CAC3C,QAAQ;EAAE,OAAO;EAAwB,UAAU;CAAW;CAC9D,QAAQ;EACN,OAAO;GAAE,MAAM;GAAU,OAAO;EAAQ;EACxC,aAAa;GAAE,MAAM;GAAU,OAAO;EAAc;EACpD,aAAa;GAAE,MAAM;GAAU,OAAO;EAAe;EACrD,YAAY;GAAE,MAAM;GAAU,SAAS;GAAG,OAAO;EAAc;EAC/D,oBAAoB;GAAE,MAAM;GAAU,OAAO;EAAuB;EACpE,gBAAgB;GAAE,MAAM;GAAU,OAAO;EAAkB;EAC3D,qBAAqB;GAAE,MAAM;GAAU,OAAO;EAAwB;CACxE;CACA,WACE;AACJ,CAAC;;;;;;;;;;;;;;AAmBD,SAAgB,qBAAqB,EAAE,OAAO,WAAW,WAAW,UAAU,GAAG,SAAoC;CACnH,MAAM,QAAQ,gBAAgB,SAAS;CACvC,MAAM,EAAE,UAAU,WAAW;CAE7B,MAAM,CAAC,MAAM,WAAW,SAA+B,SAAS;CAChE,MAAM,CAAC,qBAAqB,0BAA0B,SAAwB,IAAI;CAElF,MAAM,kBAAkB,aAAa,UAAkB;EACrD,uBAAuB,KAAK;EAC5B,QAAQ,UAAU;CACpB,GAAG,CAAC,CAAC;CAEL,MAAM,aAAa,OAAO,eAAe,SAAS;CAClD,MAAM,CAAC,OAAO,iBAAiB,SAAS,EAAE;CAC1C,MAAM,CAAC,SAAS,cAAc,SAAS,KAAK;CAO5C,gBAAgB;EACd,IAAI,SAAS,aAAa,CAAC,SAAS,cAAc,UAAU;CAC9D,GAAG;EAAC;EAAY;EAAS;CAAI,CAAC;CAE9B,MAAM,WAAW,aAAa,SAAiB;EAC7C,WAAW,IAAI;EACf,cAAc,IAAI;CACpB,GAAG,CAAC,CAAC;CAEL,MAAM,kBAAkB,OAAO,sBAAsB,2BAA2B;CAEhF,MAAM,eAAe,eACZ;EAAE;EAAO;EAAU;EAAM;EAAqB;CAAgB,IACrE;EAAC;EAAO;EAAU;EAAM;EAAqB;CAAe,CAC9D;CAGA,IAAI,EADU,UAAU,cAAc,kBAC1B,OAAO;CAEnB,OACE,oBAAC,yBAAD;EAAyB,OAAO;EAC9B,UAAA,oBAAC,OAAD;GAAK,GAAI;GAAkB;GAAW,oCAAiC;GACpE;EACE,CAAA;CACkB,CAAA;AAE7B;;;;;;;;AASA,SAAgB,uBAAuB,EACrC,OACA,aACA,qBACA,WACA,GAAG,SAC2B;CAC9B,MAAM,EAAE,MAAM,OAAO,aAAa,oBAAoB;CAEtD,IAAI,SAAS,WAAW,OAAO;CAE/B,OACE,oBAAC,OAAD;EAAK,GAAI;EAAkB;EAAW,qCAAkC;EACtE,UAAA,oBAAC,YAAD;GACS;GACM;GACb,OAAO;GACP,eAAe;GACf,cAAc;EACf,CAAA;CACE,CAAA;AAET;;;;;;;;;AAUA,SAAgB,yBAAyB,EACvC,OACA,cACA,kBACA,gBACA,qBACA,aACA,UAAU,cACV,WACA,GAAG,SAC6B;CAChC,MAAM,WAAW,mBAAmB,YAAY;CAChD,MAAM,EAAE,MAAM,OAAO,oBAAoB,oBAAoB;CAC7D,MAAM,CAAC,SAAS,cAAc,SAAS,KAAK;CAC5C,MAAM,CAAC,OAAO,YAAY,SAAkC,IAAI;CAEhE,IAAI,SAAS,WAAW,OAAO;CAE/B,MAAM,YAAY,CAAC,WAAW,aAAa,KAAK;CAEhD,eAAe,cAAc;EAC3B,IAAI,CAAC,WAAW;EAChB,WAAW,IAAI;EACf,SAAS,IAAI;EAEb,IAAI;GACF,MAAM,SAAU,MAAM,UAAU,SAAS,oBAAoB,EAAE,MAAM,CAAC,KAAM;IAC1E,qBAAqB;IACrB,YAAY,CAAC;GACf;GAEA,IAAI,OAAO,uBAAuB,OAAO,WAAW,WAAW,GAAG;IAChE,gBAAgB,OAAO,mBAAmB;IAC1C,cAAc,OAAO,mBAAmB;IACxC;GACF;GAEA,MAAM,CAAC,cAAc,OAAO;GAC5B,IAAI,YAAY,SAAS,UAAU;EACrC,UAAU;GACR,WAAW,KAAK;EAClB;CACF;CAEA,MAAM,UAAU,QAAQ,oBAAoB,OAAO;EAAE;EAAkB;EAAgB;CAAoB,CAAC,IAAI;CAEhH,OACE,qBAAC,OAAD;EACE,GAAI;EACO;EACX,uCAAoC;EACpC,GAAK,UAAU,EAAE,uCAAuC,GAAG,IAAI,CAAC;EAJlE,UAAA,CAME,oBAAC,UAAD;GACE,MAAK;GACL,SAAS;GACT,UAAU,CAAC;GACX,aAAW,WAAW,KAAA;GACtB,sCAAmC;GACnC,kBAAe;GAId,UAAA,UAAU,oBAAoB,cAAc,SAAS,EAAE,IAAI;EACtD,CAAA,GACP,UACC,oBAAC,OAAD;GAAK,MAAK;GAAQ,qCAAkC;GACjD,UAAA;EACE,CAAA,IACH,IACD;;AAET;;;;;;;;;;;AAYA,SAAgB,0BAA0B,EACxC,OACA,aACA,aACA,aAAa,GACb,oBACA,gBACA,2BACA,qBACA,aACA,UAAU,cACV,WACA,GAAG,SAC8B;CACjC,MAAM,WAAW,mBAAmB,YAAY;CAChD,MAAM,EAAE,MAAM,OAAO,wBAAwB,oBAAoB;CACjE,MAAM,CAAC,MAAM,WAAW,SAAS,EAAE;CACnC,MAAM,CAAC,SAAS,cAAc,SAAS,KAAK;CAC5C,MAAM,CAAC,OAAO,YAAY,SAAkC,IAAI;CAEhE,IAAI,SAAS,YAAY,OAAO;CAEhC,MAAM,YAAY,CAAC,WAAW,KAAK,UAAU,cAAc,uBAAuB;CAElF,eAAe,aAAa,OAAmC;EAC7D,MAAM,eAAe;EACrB,IAAI,CAAC,aAAa,uBAAuB,MAAM;EAE/C,WAAW,IAAI;EACf,SAAS,IAAI;EAEb,IAAI;GAIF,MAAM,CAAC,cAFJ,MAAM,UAAU,SAAS,qBAAqB;IAAE;IAAO,YAAY;IAAM;GAAoB,CAAC,KAAM,CAAC;GAGxG,IAAI,YAAY;IACd,SAAS,UAAU;IACnB;GACF;EACF,UAAU;GACR,WAAW,KAAK;EAClB;EAEA,cAAc;CAChB;CAEA,SAAS,iBAAiB,MAAc;EACtC,QAAQ,IAAI;EACZ,IAAI,OAAO,SAAS,IAAI;CAC1B;CAEA,MAAM,eAAe,QACjB,qBAAqB,OAAO;EAC1B;EACA;EACA;EACA;CACF,CAAC,IACD,KAAA;CAEJ,OACE,oBAAC,OAAD;EACE,GAAI;EACO;EACX,wCAAqC;EACrC,GAAK,UAAU,EAAE,wCAAwC,GAAG,IAAI,CAAC;EAEjE,UAAA,qBAAC,QAAD;GAAM,UAAU;GAAhB,UAAA,CACE,oBAAC,iBAAD;IACS;IACM;IACb,OAAO;IACP,WAAW;IACX,eAAe;IACf,UAAU;IACV,SAAS,SAAS;IACJ;GACf,CAAA,GACD,oBAAC,UAAD;IACE,MAAK;IACL,UAAU,CAAC;IACX,aAAW,WAAW,KAAA;IACtB,uCAAoC;IACpC,kBAAe;IAEd,UAAA;GACK,CAAA,CACJ;;CACH,CAAA;AAET;AAMA,MAAa,mBAAmB;CAC9B,MAAM;CACN,OAAO;CACP,SAAS;CACT,UAAU;AACZ"}

package/dist/matter/account-access-gate/account-access-gate.d.ts

@@ -0,0 +1,86 @@
+import { ContentValue } from "../../core/dist/define-content-type.js";
+import { ComponentDefinition } from "../../core/dist/define-component.js";
+import "../../core/dist/index.js";
+import { ComponentPropsWithRef, ReactNode } from "react";
+//#region src/matter/account-access-gate/account-access-gate.d.ts
+export declare const AccountAccessGateContent: {
+  readonly id: "account-access-gate";
+  readonly title: "Account Access Gate";
+  readonly description: "What the shopper is told while the account resolves and when it will not open for them.";
+  readonly schema: {
+    readonly type: "object";
+    readonly additionalProperties: false;
+    readonly properties: {
+      readonly loadingLabel: {
+        readonly type: "string";
+        readonly minLength: 1;
+        readonly title: "Loading announcement";
+      };
+      readonly expiredMessage: {
+        readonly type: "string";
+        readonly minLength: 1;
+        readonly title: "Session ended message";
+      };
+      readonly signInIncompleteMessage: {
+        readonly type: "string";
+        readonly minLength: 1;
+        readonly title: "Sign-in did not complete message";
+      };
+      readonly signInLabel: {
+        readonly type: "string";
+        readonly minLength: 1;
+        readonly title: "Sign-in link label";
+      };
+    };
+  };
+};
+/** Why the account will not open, as a bounded value: a style target and the choice of message. */
+export type AccountAccessGateNoticeReason = 'expired' | 'sign-in-incomplete';
+/** Props for {@link AccountAccessGate}. It renders a different element per outcome and forwards no
+ *  element props of its own; each rendered part carries its own. */
+export type AccountAccessGateProps = {
+  /** Text announced while the session resolves. */
+  loadingLabel?: string;
+  /** What a shopper whose session ended mid-visit is told. */
+  expiredMessage?: string;
+  /** What a shopper who came back from sign-in still signed out is told. */
+  signInIncompleteMessage?: string;
+  /** Label of the link out of either notice. Without it no link renders — a focusable link a screen
+   *  reader announces as its bare URL is worse than no control at all. */
+  signInLabel?: string;
+  /** Merchant-authored fields, sliced from the layout content entry; win over the props field by field
+   *  when present. Absent in a non-CMS store — the props are the fallback. */
+  $content?: ContentValue<typeof AccountAccessGateContent>;
+  /** The account. Rendered only for a signed-in shopper. */
+  children?: ReactNode;
+};
+/** Props for {@link AccountAccessGateLoading}. Extends native `<output>` attributes. */
+export type AccountAccessGateLoadingProps = ComponentPropsWithRef<'output'>;
+/** Props for {@link AccountAccessGateNotice}. Extends native `<output>` attributes. */
+export type AccountAccessGateNoticeProps = Omit<ComponentPropsWithRef<'output'>, 'children'> & {
+  reason: AccountAccessGateNoticeReason;
+  /** The message for this reason. Nothing renders in its place when unauthored. */
+  message?: string;
+  /** Where the link out leads, built by the gate from the page the shopper is on. */
+  signInHref: string;
+  /** Label of the link out. No label, no link. */
+  signInLabel?: string;
+};
+export declare const AccountAccessGateDefinition: ComponentDefinition<AccountAccessGateProps>;
+export declare function AccountAccessGate({ loadingLabel, expiredMessage, signInIncompleteMessage, signInLabel, $content, children }: Readonly<AccountAccessGateProps>): import("react/jsx-runtime").JSX.Element | null;
+/**
+ * The look of a session that has not answered yet. A real part with its own hook rather than an ad hoc
+ * spinner, so a store can style it and a story can render it.
+ */
+export declare function AccountAccessGateLoading({ className, children, ...props }: AccountAccessGateLoadingProps): import("react/jsx-runtime").JSX.Element;
+/**
+ * What renders in the account's place when it will not open: the message for this reason, and a link
+ * the shopper may take back into sign-in.
+ *
+ * The link is the whole of the escape from a sign-in loop. The gate stops redirecting after one
+ * automatic hop, so the next attempt is a click rather than a bounce — and a shopper who keeps landing
+ * here at least lands on a page that says so.
+ */
+export declare function AccountAccessGateNotice({ reason, message, signInHref, signInLabel, className, ...props }: AccountAccessGateNoticeProps): import("react/jsx-runtime").JSX.Element;
+//#endregion
+//# sourceMappingURL=account-access-gate.d.ts.map

package/dist/matter/account-access-gate/account-access-gate.js

@@ -0,0 +1,283 @@
+"use client";
+import { defineComponent } from "../../core/dist/define-component.js";
+import { defineContentType } from "../../core/dist/define-content-type.js";
+import "../../core/dist/index.js";
+import { useSession } from "../session/session.js";
+import { resolveSignInHref } from "../../utils/safe-href.js";
+import { NavigationLink } from "../../particles/navigation-link/navigation-link.js";
+import { useSessionRevalidation } from "../../sdk/session/use-session-revalidation.js";
+import { useSignOutIntent, withdrawSignOutIntent } from "./sign-out-intent.js";
+import { useEffect, useRef, useState } from "react";
+import { Fragment, jsx, jsxs } from "react/jsx-runtime";
+import { usePathname, useRouter } from "next/navigation";
+import { flushSync } from "react-dom";
+//#region src/matter/account-access-gate/account-access-gate.tsx
+const AccountAccessGateContent = defineContentType({
+	id: "account-access-gate",
+	title: "Account Access Gate",
+	description: "What the shopper is told while the account resolves and when it will not open for them.",
+	schema: {
+		type: "object",
+		additionalProperties: false,
+		properties: {
+			loadingLabel: {
+				type: "string",
+				minLength: 1,
+				title: "Loading announcement"
+			},
+			expiredMessage: {
+				type: "string",
+				minLength: 1,
+				title: "Session ended message"
+			},
+			signInIncompleteMessage: {
+				type: "string",
+				minLength: 1,
+				title: "Sign-in did not complete message"
+			},
+			signInLabel: {
+				type: "string",
+				minLength: 1,
+				title: "Sign-in link label"
+			}
+		}
+	}
+});
+const AccountAccessGateDefinition = defineComponent({
+	name: "AccountAccessGate",
+	importPath: "@vtex/faststore/components",
+	component: AccountAccessGate,
+	content: AccountAccessGateContent,
+	editor: {
+		label: "Account Access Gate",
+		category: "identity"
+	},
+	requiresContext: "session",
+	schema: {
+		loadingLabel: {
+			type: "string",
+			label: "Loading Announcement"
+		},
+		expiredMessage: {
+			type: "string",
+			label: "Session Ended Message"
+		},
+		signInIncompleteMessage: {
+			type: "string",
+			label: "Sign-in Did Not Complete Message"
+		},
+		signInLabel: {
+			type: "string",
+			label: "Sign-in Link Label"
+		}
+	},
+	guideline: "The account's single access decision: place it once in the account layout, wrapping the body, and every page that declares that layout inherits it — never restate it per section. It renders its children only for a logged-in shopper; it shows a composed loading look while the session resolves, replaces the current history entry with the sign-in destination for a visitor who arrived signed out (identified counts as signed out), tells a shopper whose session ended mid-visit rather than bouncing them, and stands down while AccountMenuSignOut navigates. It redirects at most once per visit: a shopper who comes back from sign-in still signed out gets a message and a link rather than a second hop. Must be inside SessionRoot, which the same layout hosts. Never place the /login route under it — the gate redirects there, and a gated /login would redirect to itself."
+});
+/** The one automatic hop the gate has already spent, surviving the full document load out to the
+*  platform and back, and no further than this tab. */
+const SIGN_IN_ATTEMPT_KEY = "fs::account-access-gate::sign-in-attempt";
+function AccountAccessGate({ loadingLabel, expiredMessage, signInIncompleteMessage, signInLabel, $content, children }) {
+	const { state, loading } = useSession();
+	const signingOut = useSignOutIntent();
+	const pathname = usePathname();
+	const router = useRouter();
+	const revalidate = useSessionRevalidation();
+	const [wasSignedIn, setWasSignedIn] = useState(false);
+	const [unconfirmed, setUnconfirmed] = useState(false);
+	const [revalidating, setRevalidating] = useState(false);
+	const restoreGeneration = useRef(0);
+	const [hopSpent, setHopSpent] = useState(null);
+	const [search, setSearch] = useState(null);
+	useEffect(() => {
+		setSearch(globalThis.location.search);
+	});
+	const returnPath = pathname === null ? null : `${pathname}${search ?? ""}`;
+	const outcome = resolveOutcome({
+		signingOut,
+		unconfirmed,
+		revalidating,
+		loading,
+		state,
+		wasSignedIn,
+		hopSpent
+	});
+	useEffect(() => {
+		switch (outcome) {
+			case "account":
+				setWasSignedIn(true);
+				setUnconfirmed(false);
+				clearSignInAttempt();
+				return;
+			case "expired":
+			case "sign-in-incomplete":
+				clearSignInAttempt();
+				return;
+			case "signing-in": {
+				if (hopSpent !== null || search === null) return;
+				if (readSignInAttempt() !== null) {
+					setHopSpent(true);
+					return;
+				}
+				const destination = resolveSignInHref(returnPath);
+				recordSignInAttempt(destination);
+				setHopSpent(false);
+				router.replace(destination);
+				return;
+			}
+			case "stand-down":
+			case "loading": return;
+			default: assertUnreachable(outcome);
+		}
+	}, [
+		outcome,
+		hopSpent,
+		search,
+		returnPath,
+		router
+	]);
+	useEffect(() => {
+		function handlePageHide(event) {
+			if (!event.persisted) return;
+			flushSync(() => {
+				setRevalidating(true);
+			});
+		}
+		function handlePageShow(event) {
+			if (!event.persisted) return;
+			const generation = restoreGeneration.current + 1;
+			restoreGeneration.current = generation;
+			withdrawSignOutIntent();
+			setUnconfirmed(false);
+			setRevalidating(true);
+			revalidate().then((result) => {
+				if (generation !== restoreGeneration.current) return;
+				setRevalidating(false);
+				switch (result) {
+					case "failed":
+						setUnconfirmed(true);
+						return;
+					case "revalidated":
+					case "unavailable": return;
+					default: assertUnreachable(result);
+				}
+			});
+		}
+		globalThis.addEventListener("pagehide", handlePageHide);
+		globalThis.addEventListener("pageshow", handlePageShow);
+		return () => {
+			globalThis.removeEventListener("pagehide", handlePageHide);
+			globalThis.removeEventListener("pageshow", handlePageShow);
+		};
+	}, [revalidate]);
+	useEffect(() => withdrawSignOutIntent, []);
+	const entryLoadingLabel = $content?.loadingLabel?.trim() ? $content.loadingLabel : loadingLabel;
+	const entryExpiredMessage = $content?.expiredMessage?.trim() ? $content.expiredMessage : expiredMessage;
+	const entryIncompleteMessage = $content?.signInIncompleteMessage?.trim() ? $content.signInIncompleteMessage : signInIncompleteMessage;
+	const entrySignInLabel = $content?.signInLabel?.trim() ? $content.signInLabel : signInLabel;
+	switch (outcome) {
+		case "stand-down":
+		case "signing-in": return null;
+		case "loading": return /* @__PURE__ */ jsx(AccountAccessGateLoading, {
+			"data-fs-account-access-gate": "",
+			children: entryLoadingLabel
+		});
+		case "account": return /* @__PURE__ */ jsx(Fragment, { children });
+		case "expired":
+		case "sign-in-incomplete": return /* @__PURE__ */ jsx(AccountAccessGateNotice, {
+			"data-fs-account-access-gate": "",
+			reason: outcome === "expired" ? "expired" : "sign-in-incomplete",
+			message: outcome === "expired" ? entryExpiredMessage : entryIncompleteMessage,
+			signInHref: resolveSignInHref(returnPath),
+			signInLabel: entrySignInLabel
+		});
+		default: return assertUnreachable(outcome);
+	}
+}
+/**
+* The whole decision, as one ordered read of the gate's inputs.
+*
+* `signingOut` outranks everything, including a session still reading `loggedIn`: the sign-out records
+* its intent before it awaits the mutation, and the frame between the payload landing and the document
+* load starting is exactly the one this ordering protects.
+*
+* `loading` outranks the tri-state for the reason `AccountEntryPoint` gives: an unresolved session
+* reports `anonymous`, so reading the state first would bounce a shopper who is signed in. A re-read
+* in flight reads as the same wait: the session it is checking is one the gate has stopped believing.
+*/
+function resolveOutcome({ signingOut, unconfirmed, revalidating, loading, state, wasSignedIn, hopSpent }) {
+	if (signingOut) return "stand-down";
+	if (unconfirmed) return wasSignedIn ? "expired" : "sign-in-incomplete";
+	if (revalidating || loading) return "loading";
+	if (state === "loggedIn") return "account";
+	if (wasSignedIn) return "expired";
+	return hopSpent === true ? "sign-in-incomplete" : "signing-in";
+}
+function assertUnreachable(outcome) {
+	throw new Error(`[AccountAccessGate] unhandled outcome: ${String(outcome)}`);
+}
+/**
+* The look of a session that has not answered yet. A real part with its own hook rather than an ad hoc
+* spinner, so a store can style it and a story can render it.
+*/
+function AccountAccessGateLoading({ className, children, ...props }) {
+	return /* @__PURE__ */ jsx("output", {
+		...props,
+		"aria-live": "polite",
+		className,
+		"data-fs-account-access-gate-loading": "",
+		children
+	});
+}
+/**
+* What renders in the account's place when it will not open: the message for this reason, and a link
+* the shopper may take back into sign-in.
+*
+* The link is the whole of the escape from a sign-in loop. The gate stops redirecting after one
+* automatic hop, so the next attempt is a click rather than a bounce — and a shopper who keeps landing
+* here at least lands on a page that says so.
+*/
+function AccountAccessGateNotice({ reason, message, signInHref, signInLabel, className, ...props }) {
+	return /* @__PURE__ */ jsxs("output", {
+		...props,
+		"aria-live": "polite",
+		className,
+		"data-fs-account-access-gate-notice": "",
+		"data-fs-account-access-gate-notice-reason": reason,
+		children: [message ? /* @__PURE__ */ jsx("span", {
+			"data-fs-account-access-gate-notice-message": "",
+			children: message
+		}) : null, signInLabel?.trim() ? /* @__PURE__ */ jsx(NavigationLink, {
+			href: signInHref,
+			prefetch: false,
+			"data-fs-account-access-gate-notice-action": "",
+			children: signInLabel
+		}) : null]
+	});
+}
+/**
+* Session storage, guarded at every access. A browser that refuses it — a shopper blocking site data —
+* throws rather than returning null, and a gate that cannot read its own record still has a shopper to
+* get to sign-in. A refusal therefore reads as "no record", which spends the hop; the cost is that the
+* loop protection is absent in that browser, which is the lesser of the two failures.
+*/
+function readSignInAttempt() {
+	try {
+		return globalThis.sessionStorage.getItem(SIGN_IN_ATTEMPT_KEY);
+	} catch {
+		return null;
+	}
+}
+function recordSignInAttempt(destination) {
+	try {
+		globalThis.sessionStorage.setItem(SIGN_IN_ATTEMPT_KEY, destination);
+	} catch {}
+}
+function clearSignInAttempt() {
+	try {
+		globalThis.sessionStorage.removeItem(SIGN_IN_ATTEMPT_KEY);
+	} catch {}
+}
+//#endregion
+export { AccountAccessGate, AccountAccessGateContent, AccountAccessGateDefinition, AccountAccessGateLoading, AccountAccessGateNotice };
+
+//# sourceMappingURL=account-access-gate.js.map

package/dist/matter/account-access-gate/account-access-gate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"account-access-gate.js","names":[],"sources":["../../../src/matter/account-access-gate/account-access-gate.tsx"],"sourcesContent":["'use client';\n\nimport { type ContentValue, defineComponent, defineContentType } from '@vtex/fs-core';\nimport { usePathname, useRouter } from 'next/navigation';\nimport { type ComponentPropsWithRef, type ReactNode, useEffect, useRef, useState } from 'react';\nimport { flushSync } from 'react-dom';\nimport { NavigationLink } from '../../particles/navigation-link/navigation-link.js';\nimport { useSessionRevalidation } from '../../sdk/session/use-session-revalidation.js';\nimport { resolveSignInHref } from '../../utils/safe-href.js';\nimport { type SessionState, useSession } from '../session/session.js';\nimport { useSignOutIntent, withdrawSignOutIntent } from './sign-out-intent.js';\n\n// Nothing is required, following the shipped identity components: an entry may author any subset, and\n// a slice missing a required property is shape-invalid, which drops the whole element rather than the\n// one field.\nexport const AccountAccessGateContent = defineContentType({\n  id: 'account-access-gate',\n  title: 'Account Access Gate',\n  description: 'What the shopper is told while the account resolves and when it will not open for them.',\n  schema: {\n    type: 'object',\n    additionalProperties: false,\n    properties: {\n      loadingLabel: { type: 'string', minLength: 1, title: 'Loading announcement' },\n      expiredMessage: { type: 'string', minLength: 1, title: 'Session ended message' },\n      signInIncompleteMessage: { type: 'string', minLength: 1, title: 'Sign-in did not complete message' },\n      signInLabel: { type: 'string', minLength: 1, title: 'Sign-in link label' },\n    },\n  },\n});\n\n/** Why the account will not open, as a bounded value: a style target and the choice of message. */\nexport type AccountAccessGateNoticeReason = 'expired' | 'sign-in-incomplete';\n\n/** Props for {@link AccountAccessGate}. It renders a different element per outcome and forwards no\n *  element props of its own; each rendered part carries its own. */\nexport type AccountAccessGateProps = {\n  /** Text announced while the session resolves. */\n  loadingLabel?: string;\n  /** What a shopper whose session ended mid-visit is told. */\n  expiredMessage?: string;\n  /** What a shopper who came back from sign-in still signed out is told. */\n  signInIncompleteMessage?: string;\n  /** Label of the link out of either notice. Without it no link renders — a focusable link a screen\n   *  reader announces as its bare URL is worse than no control at all. */\n  signInLabel?: string;\n  /** Merchant-authored fields, sliced from the layout content entry; win over the props field by field\n   *  when present. Absent in a non-CMS store — the props are the fallback. */\n  $content?: ContentValue<typeof AccountAccessGateContent>;\n  /** The account. Rendered only for a signed-in shopper. */\n  children?: ReactNode;\n};\n\n/** Props for {@link AccountAccessGateLoading}. Extends native `<output>` attributes. */\nexport type AccountAccessGateLoadingProps = ComponentPropsWithRef<'output'>;\n\n/** Props for {@link AccountAccessGateNotice}. Extends native `<output>` attributes. */\nexport type AccountAccessGateNoticeProps = Omit<ComponentPropsWithRef<'output'>, 'children'> & {\n  reason: AccountAccessGateNoticeReason;\n  /** The message for this reason. Nothing renders in its place when unauthored. */\n  message?: string;\n  /** Where the link out leads, built by the gate from the page the shopper is on. */\n  signInHref: string;\n  /** Label of the link out. No label, no link. */\n  signInLabel?: string;\n};\n\nexport const AccountAccessGateDefinition = defineComponent<AccountAccessGateProps>({\n  name: 'AccountAccessGate',\n  importPath: '@vtex/faststore/components',\n  component: AccountAccessGate,\n  content: AccountAccessGateContent,\n  editor: { label: 'Account Access Gate', category: 'identity' },\n  requiresContext: 'session',\n  schema: {\n    // Mirrored from the content model on purpose, as every content-bearing component in the library\n    // does: the entry wins when published, and this is what a store without a CMS authors.\n    loadingLabel: { type: 'string', label: 'Loading Announcement' },\n    expiredMessage: { type: 'string', label: 'Session Ended Message' },\n    signInIncompleteMessage: { type: 'string', label: 'Sign-in Did Not Complete Message' },\n    signInLabel: { type: 'string', label: 'Sign-in Link Label' },\n  },\n  guideline:\n    \"The account's single access decision: place it once in the account layout, wrapping the body, and every page that declares that layout inherits it — never restate it per section. It renders its children only for a logged-in shopper; it shows a composed loading look while the session resolves, replaces the current history entry with the sign-in destination for a visitor who arrived signed out (identified counts as signed out), tells a shopper whose session ended mid-visit rather than bouncing them, and stands down while AccountMenuSignOut navigates. It redirects at most once per visit: a shopper who comes back from sign-in still signed out gets a message and a link rather than a second hop. Must be inside SessionRoot, which the same layout hosts. Never place the /login route under it — the gate redirects there, and a gated /login would redirect to itself.\",\n});\n\n/** The one automatic hop the gate has already spent, surviving the full document load out to the\n *  platform and back, and no further than this tab. */\nconst SIGN_IN_ATTEMPT_KEY = 'fs::account-access-gate::sign-in-attempt';\n\n/**\n * What the gate renders, in precedence order. `signing-in` covers both the frame that decides whether\n * the hop is still available and the frame after the replace is issued: they render the same nothing,\n * and only the effect tells them apart.\n */\ntype AccountAccessGateOutcome = 'stand-down' | 'expired' | 'loading' | 'account' | 'sign-in-incomplete' | 'signing-in';\n\nexport function AccountAccessGate({\n  loadingLabel,\n  expiredMessage,\n  signInIncompleteMessage,\n  signInLabel,\n  $content,\n  children,\n}: Readonly<AccountAccessGateProps>) {\n  const { state, loading } = useSession();\n  const signingOut = useSignOutIntent();\n  const pathname = usePathname();\n  const router = useRouter();\n  const revalidate = useSessionRevalidation();\n\n  // Whether this gate has ever resolved to a signed-in shopper. It is what separates a session that\n  // ended from a visitor who arrived signed out — the tri-state spells both `anonymous`.\n  const [wasSignedIn, setWasSignedIn] = useState(false);\n  // A revalidation that could not answer. It outranks `loading` because the discard that preceded it\n  // is what leaves the session unresolved, so nothing else is coming to end that wait.\n  const [unconfirmed, setUnconfirmed] = useState(false);\n  // A re-read in flight. The gate withholds the account for itself rather than waiting to be told:\n  // discarding the cached session leaves the data layer unresolved, but it reaches the gate only once\n  // the watched query has re-read, and the account must be gone in the frame the restore arrives.\n  const [revalidating, setRevalidating] = useState(false);\n  // Which re-read the gate is still listening to. Two restores in a row put two answers in flight, and\n  // the older one may land last.\n  const restoreGeneration = useRef(0);\n  // `null` until the arrival path has read the record. Read from an effect rather than from the render\n  // body: session storage does not exist on the server, and a value that appeared between the server\n  // pass and hydration would change what renders underneath it.\n  const [hopSpent, setHopSpent] = useState<boolean | null>(null);\n  // `null` until the document has been read, for the same two reasons, and read from the document\n  // rather than through `useSearchParams()`, which would require a `Suspense` boundary the generator\n  // does not emit on a prerendered route — the reason `SignInRedirect` gives for reading it this way.\n  const [search, setSearch] = useState<string | null>(null);\n\n  // Deliberately on every commit rather than on mount: `usePathname()` re-renders the gate when the\n  // path changes but says nothing about the query, and a shopper who pages through their orders\n  // changes only the query. Setting the same string is a bail-out, so this does not loop.\n  useEffect(() => {\n    setSearch(globalThis.location.search);\n  });\n\n  // Where the shopper comes back to. `usePathname()` yields the path alone, so a gate that stopped\n  // there would return someone reading `/account/orders?page=2` to the first page of it.\n  const returnPath = pathname === null ? null : `${pathname}${search ?? ''}`;\n\n  const outcome = resolveOutcome({ signingOut, unconfirmed, revalidating, loading, state, wasSignedIn, hopSpent });\n\n  useEffect(() => {\n    switch (outcome) {\n      case 'account':\n        setWasSignedIn(true);\n        setUnconfirmed(false);\n        clearSignInAttempt();\n        return;\n      case 'expired':\n      case 'sign-in-incomplete':\n        // Every outcome that is not the hop returns it: a shopper who signs in, browses, and comes\n        // back later arrives fresh rather than carrying a spent attempt from an earlier one.\n        clearSignInAttempt();\n        return;\n      case 'signing-in': {\n        // One more frame before deciding, until the document has been read: a hop recorded against the\n        // bare path is the one the shopper comes back to, and there is no second chance at it.\n        if (hopSpent !== null || search === null) {\n          return;\n        }\n        if (readSignInAttempt() !== null) {\n          setHopSpent(true);\n          return;\n        }\n        const destination = resolveSignInHref(returnPath);\n        recordSignInAttempt(destination);\n        setHopSpent(false);\n        // Replace rather than push: back from the platform's login should reach the page the shopper\n        // came from, not the account that threw them at it.\n        // react-doctor-disable-next-line nextjs-no-client-side-redirect -- the session resolves on the client, so the server has nothing to decide with\n        router.replace(destination);\n        return;\n      }\n      case 'stand-down':\n      case 'loading':\n        return;\n      default:\n        assertUnreachable(outcome);\n    }\n  }, [outcome, hopSpent, search, returnPath, router]);\n\n  useEffect(() => {\n    function handlePageHide(event: PageTransitionEvent): void {\n      if (!event.persisted) {\n        return;\n      }\n      // What the browser freezes is the DOM, and a restore puts that same DOM back before any script\n      // runs. Standing the account down on the way out rather than on the way back is what keeps the\n      // restored document from showing it in the frames before `pageshow` can decide again.\n      flushSync(() => {\n        setRevalidating(true);\n      });\n    }\n\n    function handlePageShow(event: PageTransitionEvent): void {\n      // An ordinary load re-decides by mounting. Only a restore resumes a heap that already holds an\n      // answer, and `persisted` is the browser's own word for it.\n      if (!event.persisted) {\n        return;\n      }\n      const generation = restoreGeneration.current + 1;\n      restoreGeneration.current = generation;\n      // The navigation this authorized has already happened; a restored document holding it would\n      // stand down forever. Withdrawn before the re-read so the gate is deciding again by the time\n      // the answer lands.\n      withdrawSignOutIntent();\n      setUnconfirmed(false);\n      setRevalidating(true);\n      void revalidate().then((result) => {\n        // A later restore has already asked the same question, and its answer is the one that counts.\n        // This one describes a session the gate has since discarded a second time.\n        if (generation !== restoreGeneration.current) {\n          return;\n        }\n        setRevalidating(false);\n        switch (result) {\n          case 'failed':\n            setUnconfirmed(true);\n            return;\n          case 'revalidated':\n          case 'unavailable':\n            // Nothing left to distrust: either the session was re-read, or there was no cached\n            // session to discard in the first place and the one in the tree came from a prop.\n            return;\n          default:\n            assertUnreachable(result);\n        }\n      });\n    }\n\n    globalThis.addEventListener('pagehide', handlePageHide);\n    globalThis.addEventListener('pageshow', handlePageShow);\n    return () => {\n      globalThis.removeEventListener('pagehide', handlePageHide);\n      globalThis.removeEventListener('pageshow', handlePageShow);\n    };\n  }, [revalidate]);\n\n  // The intent authorizes one transition and this gate is its only reader, so it must not survive the\n  // gate. A sign-out that navigates client-side takes the account layout down without reloading the\n  // document, and nothing else would ever take the flag back: the next account page the shopper opens\n  // would mount into a standing intent and render nothing at all, with no error to explain it.\n  useEffect(() => withdrawSignOutIntent, []);\n\n  // Blank entry fields fall through, so clearing one in the Admin reads as unauthored.\n  const entryLoadingLabel = $content?.loadingLabel?.trim() ? $content.loadingLabel : loadingLabel;\n  const entryExpiredMessage = $content?.expiredMessage?.trim() ? $content.expiredMessage : expiredMessage;\n  const entryIncompleteMessage = $content?.signInIncompleteMessage?.trim()\n    ? $content.signInIncompleteMessage\n    : signInIncompleteMessage;\n  const entrySignInLabel = $content?.signInLabel?.trim() ? $content.signInLabel : signInLabel;\n\n  switch (outcome) {\n    case 'stand-down':\n    case 'signing-in':\n      return null;\n    case 'loading':\n      return (\n        // The part carries its own hook; the component's identity travels from here, which is how a\n        // store targets it by name the way every other component is targeted.\n        <AccountAccessGateLoading data-fs-account-access-gate=\"\">{entryLoadingLabel}</AccountAccessGateLoading>\n      );\n    case 'account':\n      return <>{children}</>;\n    case 'expired':\n    case 'sign-in-incomplete':\n      return (\n        <AccountAccessGateNotice\n          data-fs-account-access-gate=\"\"\n          reason={outcome === 'expired' ? 'expired' : 'sign-in-incomplete'}\n          message={outcome === 'expired' ? entryExpiredMessage : entryIncompleteMessage}\n          signInHref={resolveSignInHref(returnPath)}\n          signInLabel={entrySignInLabel}\n        />\n      );\n    default:\n      return assertUnreachable(outcome);\n  }\n}\n\n/**\n * The whole decision, as one ordered read of the gate's inputs.\n *\n * `signingOut` outranks everything, including a session still reading `loggedIn`: the sign-out records\n * its intent before it awaits the mutation, and the frame between the payload landing and the document\n * load starting is exactly the one this ordering protects.\n *\n * `loading` outranks the tri-state for the reason `AccountEntryPoint` gives: an unresolved session\n * reports `anonymous`, so reading the state first would bounce a shopper who is signed in. A re-read\n * in flight reads as the same wait: the session it is checking is one the gate has stopped believing.\n */\nfunction resolveOutcome({\n  signingOut,\n  unconfirmed,\n  revalidating,\n  loading,\n  state,\n  wasSignedIn,\n  hopSpent,\n}: {\n  signingOut: boolean;\n  unconfirmed: boolean;\n  revalidating: boolean;\n  loading: boolean;\n  state: SessionState;\n  wasSignedIn: boolean;\n  hopSpent: boolean | null;\n}): AccountAccessGateOutcome {\n  if (signingOut) {\n    return 'stand-down';\n  }\n  // A re-read that could not answer says nothing about how the shopper got here, so the notice keeps\n  // the history the gate already has. Telling someone who never reached the account that their session\n  // ended names an event that never happened; the incomplete sign-in is the one they actually had.\n  if (unconfirmed) {\n    return wasSignedIn ? 'expired' : 'sign-in-incomplete';\n  }\n  if (revalidating || loading) {\n    return 'loading';\n  }\n  if (state === 'loggedIn') {\n    return 'account';\n  }\n  if (wasSignedIn) {\n    return 'expired';\n  }\n  return hopSpent === true ? 'sign-in-incomplete' : 'signing-in';\n}\n\nfunction assertUnreachable(outcome: never): never {\n  throw new Error(`[AccountAccessGate] unhandled outcome: ${String(outcome)}`);\n}\n\n/**\n * The look of a session that has not answered yet. A real part with its own hook rather than an ad hoc\n * spinner, so a store can style it and a story can render it.\n */\nexport function AccountAccessGateLoading({ className, children, ...props }: AccountAccessGateLoadingProps) {\n  return (\n    <output {...props} aria-live=\"polite\" className={className} data-fs-account-access-gate-loading=\"\">\n      {children}\n    </output>\n  );\n}\n\n/**\n * What renders in the account's place when it will not open: the message for this reason, and a link\n * the shopper may take back into sign-in.\n *\n * The link is the whole of the escape from a sign-in loop. The gate stops redirecting after one\n * automatic hop, so the next attempt is a click rather than a bounce — and a shopper who keeps landing\n * here at least lands on a page that says so.\n */\nexport function AccountAccessGateNotice({\n  reason,\n  message,\n  signInHref,\n  signInLabel,\n  className,\n  ...props\n}: AccountAccessGateNoticeProps) {\n  return (\n    <output\n      {...props}\n      aria-live=\"polite\"\n      className={className}\n      data-fs-account-access-gate-notice=\"\"\n      data-fs-account-access-gate-notice-reason={reason}\n    >\n      {message ? <span data-fs-account-access-gate-notice-message=\"\">{message}</span> : null}\n      {signInLabel?.trim() ? (\n        <NavigationLink\n          href={signInHref}\n          // The destination is a trampoline that redirects on mount, so the default prefetch would\n          // fire that GET from a page the shopper may never leave.\n          prefetch={false}\n          data-fs-account-access-gate-notice-action=\"\"\n        >\n          {signInLabel}\n        </NavigationLink>\n      ) : null}\n    </output>\n  );\n}\n\n/**\n * Session storage, guarded at every access. A browser that refuses it — a shopper blocking site data —\n * throws rather than returning null, and a gate that cannot read its own record still has a shopper to\n * get to sign-in. A refusal therefore reads as \"no record\", which spends the hop; the cost is that the\n * loop protection is absent in that browser, which is the lesser of the two failures.\n */\nfunction readSignInAttempt(): string | null {\n  try {\n    return globalThis.sessionStorage.getItem(SIGN_IN_ATTEMPT_KEY);\n  } catch {\n    return null;\n  }\n}\n\nfunction recordSignInAttempt(destination: string): void {\n  try {\n    globalThis.sessionStorage.setItem(SIGN_IN_ATTEMPT_KEY, destination);\n  } catch {\n    // Nothing to fall back to: the record is the only thing that outlives the hop.\n  }\n}\n\nfunction clearSignInAttempt(): void {\n  try {\n    globalThis.sessionStorage.removeItem(SIGN_IN_ATTEMPT_KEY);\n  } catch {\n    // Nothing was written either, so there is nothing to undo.\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;AAeA,MAAa,2BAA2B,kBAAkB;CACxD,IAAI;CACJ,OAAO;CACP,aAAa;CACb,QAAQ;EACN,MAAM;EACN,sBAAsB;EACtB,YAAY;GACV,cAAc;IAAE,MAAM;IAAU,WAAW;IAAG,OAAO;GAAuB;GAC5E,gBAAgB;IAAE,MAAM;IAAU,WAAW;IAAG,OAAO;GAAwB;GAC/E,yBAAyB;IAAE,MAAM;IAAU,WAAW;IAAG,OAAO;GAAmC;GACnG,aAAa;IAAE,MAAM;IAAU,WAAW;IAAG,OAAO;GAAqB;EAC3E;CACF;AACF,CAAC;AAsCD,MAAa,8BAA8B,gBAAwC;CACjF,MAAM;CACN,YAAY;CACZ,WAAW;CACX,SAAS;CACT,QAAQ;EAAE,OAAO;EAAuB,UAAU;CAAW;CAC7D,iBAAiB;CACjB,QAAQ;EAGN,cAAc;GAAE,MAAM;GAAU,OAAO;EAAuB;EAC9D,gBAAgB;GAAE,MAAM;GAAU,OAAO;EAAwB;EACjE,yBAAyB;GAAE,MAAM;GAAU,OAAO;EAAmC;EACrF,aAAa;GAAE,MAAM;GAAU,OAAO;EAAqB;CAC7D;CACA,WACE;AACJ,CAAC;;;AAID,MAAM,sBAAsB;AAS5B,SAAgB,kBAAkB,EAChC,cACA,gBACA,yBACA,aACA,UACA,YACmC;CACnC,MAAM,EAAE,OAAO,YAAY,WAAW;CACtC,MAAM,aAAa,iBAAiB;CACpC,MAAM,WAAW,YAAY;CAC7B,MAAM,SAAS,UAAU;CACzB,MAAM,aAAa,uBAAuB;CAI1C,MAAM,CAAC,aAAa,kBAAkB,SAAS,KAAK;CAGpD,MAAM,CAAC,aAAa,kBAAkB,SAAS,KAAK;CAIpD,MAAM,CAAC,cAAc,mBAAmB,SAAS,KAAK;CAGtD,MAAM,oBAAoB,OAAO,CAAC;CAIlC,MAAM,CAAC,UAAU,eAAe,SAAyB,IAAI;CAI7D,MAAM,CAAC,QAAQ,aAAa,SAAwB,IAAI;CAKxD,gBAAgB;EACd,UAAU,WAAW,SAAS,MAAM;CACtC,CAAC;CAID,MAAM,aAAa,aAAa,OAAO,OAAO,GAAG,WAAW,UAAU;CAEtE,MAAM,UAAU,eAAe;EAAE;EAAY;EAAa;EAAc;EAAS;EAAO;EAAa;CAAS,CAAC;CAE/G,gBAAgB;EACd,QAAQ,SAAR;GACE,KAAK;IACH,eAAe,IAAI;IACnB,eAAe,KAAK;IACpB,mBAAmB;IACnB;GACF,KAAK;GACL,KAAK;IAGH,mBAAmB;IACnB;GACF,KAAK,cAAc;IAGjB,IAAI,aAAa,QAAQ,WAAW,MAClC;IAEF,IAAI,kBAAkB,MAAM,MAAM;KAChC,YAAY,IAAI;KAChB;IACF;IACA,MAAM,cAAc,kBAAkB,UAAU;IAChD,oBAAoB,WAAW;IAC/B,YAAY,KAAK;IAIjB,OAAO,QAAQ,WAAW;IAC1B;GACF;GACA,KAAK;GACL,KAAK,WACH;GACF,SACE,kBAAkB,OAAO;EAC7B;CACF,GAAG;EAAC;EAAS;EAAU;EAAQ;EAAY;CAAM,CAAC;CAElD,gBAAgB;EACd,SAAS,eAAe,OAAkC;GACxD,IAAI,CAAC,MAAM,WACT;GAKF,gBAAgB;IACd,gBAAgB,IAAI;GACtB,CAAC;EACH;EAEA,SAAS,eAAe,OAAkC;GAGxD,IAAI,CAAC,MAAM,WACT;GAEF,MAAM,aAAa,kBAAkB,UAAU;GAC/C,kBAAkB,UAAU;GAI5B,sBAAsB;GACtB,eAAe,KAAK;GACpB,gBAAgB,IAAI;GACpB,WAAgB,CAAC,CAAC,MAAM,WAAW;IAGjC,IAAI,eAAe,kBAAkB,SACnC;IAEF,gBAAgB,KAAK;IACrB,QAAQ,QAAR;KACE,KAAK;MACH,eAAe,IAAI;MACnB;KACF,KAAK;KACL,KAAK,eAGH;KACF,SACE,kBAAkB,MAAM;IAC5B;GACF,CAAC;EACH;EAEA,WAAW,iBAAiB,YAAY,cAAc;EACtD,WAAW,iBAAiB,YAAY,cAAc;EACtD,aAAa;GACX,WAAW,oBAAoB,YAAY,cAAc;GACzD,WAAW,oBAAoB,YAAY,cAAc;EAC3D;CACF,GAAG,CAAC,UAAU,CAAC;CAMf,gBAAgB,uBAAuB,CAAC,CAAC;CAGzC,MAAM,oBAAoB,UAAU,cAAc,KAAK,IAAI,SAAS,eAAe;CACnF,MAAM,sBAAsB,UAAU,gBAAgB,KAAK,IAAI,SAAS,iBAAiB;CACzF,MAAM,yBAAyB,UAAU,yBAAyB,KAAK,IACnE,SAAS,0BACT;CACJ,MAAM,mBAAmB,UAAU,aAAa,KAAK,IAAI,SAAS,cAAc;CAEhF,QAAQ,SAAR;EACE,KAAK;EACL,KAAK,cACH,OAAO;EACT,KAAK,WACH,OAGE,oBAAC,0BAAD;GAA0B,+BAA4B;GAAI,UAAA;EAA4C,CAAA;EAE1G,KAAK,WACH,OAAO,oBAAA,UAAA,EAAG,SAAW,CAAA;EACvB,KAAK;EACL,KAAK,sBACH,OACE,oBAAC,yBAAD;GACE,+BAA4B;GAC5B,QAAQ,YAAY,YAAY,YAAY;GAC5C,SAAS,YAAY,YAAY,sBAAsB;GACvD,YAAY,kBAAkB,UAAU;GACxC,aAAa;EACd,CAAA;EAEL,SACE,OAAO,kBAAkB,OAAO;CACpC;AACF;;;;;;;;;;;;AAaA,SAAS,eAAe,EACtB,YACA,aACA,cACA,SACA,OACA,aACA,YAS2B;CAC3B,IAAI,YACF,OAAO;CAKT,IAAI,aACF,OAAO,cAAc,YAAY;CAEnC,IAAI,gBAAgB,SAClB,OAAO;CAET,IAAI,UAAU,YACZ,OAAO;CAET,IAAI,aACF,OAAO;CAET,OAAO,aAAa,OAAO,uBAAuB;AACpD;AAEA,SAAS,kBAAkB,SAAuB;CAChD,MAAM,IAAI,MAAM,0CAA0C,OAAO,OAAO,GAAG;AAC7E;;;;;AAMA,SAAgB,yBAAyB,EAAE,WAAW,UAAU,GAAG,SAAwC;CACzG,OACE,oBAAC,UAAD;EAAQ,GAAI;EAAO,aAAU;EAAoB;EAAW,uCAAoC;EAC7F;CACK,CAAA;AAEZ;;;;;;;;;AAUA,SAAgB,wBAAwB,EACtC,QACA,SACA,YACA,aACA,WACA,GAAG,SAC4B;CAC/B,OACE,qBAAC,UAAD;EACE,GAAI;EACJ,aAAU;EACC;EACX,sCAAmC;EACnC,6CAA2C;EAL7C,UAAA,CAOG,UAAU,oBAAC,QAAD;GAAM,8CAA2C;GAAI,UAAA;EAAc,CAAA,IAAI,MACjF,aAAa,KAAK,IACjB,oBAAC,gBAAD;GACE,MAAM;GAGN,UAAU;GACV,6CAA0C;GAEzC,UAAA;EACa,CAAA,IACd,IACE;;AAEZ;;;;;;;AAQA,SAAS,oBAAmC;CAC1C,IAAI;EACF,OAAO,WAAW,eAAe,QAAQ,mBAAmB;CAC9D,QAAQ;EACN,OAAO;CACT;AACF;AAEA,SAAS,oBAAoB,aAA2B;CACtD,IAAI;EACF,WAAW,eAAe,QAAQ,qBAAqB,WAAW;CACpE,QAAQ,CAER;AACF;AAEA,SAAS,qBAA2B;CAClC,IAAI;EACF,WAAW,eAAe,WAAW,mBAAmB;CAC1D,QAAQ,CAER;AACF"}

package/dist/matter/account-access-gate/sign-out-intent.d.ts

@@ -0,0 +1,17 @@
+//#region src/matter/account-access-gate/sign-out-intent.d.ts
+/**
+ * Records that a sign-out is under way. Declared **before** the logout is awaited: the payload
+ * refreshes the session in place, and a gate that got its turn between the response landing and the
+ * navigation starting would redirect out from under the sign-out.
+ */
+export declare function declareSignOutIntent(): void;
+/**
+ * Takes the intent back. Called when the logout resolves with user errors — the shopper is still
+ * signed in and stays on the account page with the failure surfaced — and by the gate on a restored
+ * document, where the navigation the intent authorized has already happened.
+ */
+export declare function withdrawSignOutIntent(): void;
+/** Whether a sign-out is under way, re-rendering the caller when that changes. */
+export declare function useSignOutIntent(): boolean;
+//#endregion
+//# sourceMappingURL=sign-out-intent.d.ts.map