packages v0.14.0

@ecomweb/storefront-kit 0.14.0

Minor Changes

• 33b6dc9: Version reporting and update warnings.
  • Every SDK request sends X-Ecomweb-Client: @ecomweb/sdk/<version>, so the platform can tell which kit and SDK a store runs and warn the owner when it falls behind. createEcomwebSdk({ clientInfo }) puts your own name/version tokens first; the kit passes @ecomweb/storefront-kit/<version>. New exports: SDK_VERSION, SDK_CLIENT_TOKEN, CLIENT_HEADER, clientHeaderValue(), withClientHeader().
  • checkClientVersions({ phase, apiUrl }) (@ecomweb/storefront-kit/config): on next build only, asks the platform which versions are supported and prints a warning when the installed kit or SDK is behind, with a stronger one for security updates. 2 s timeout, never fails the build; ECOMWEB_SKIP_VERSION_CHECK=1 turns it off. Also exported: KIT_VERSION, KIT_CLIENT_TOKEN, formatClientVersionWarning().
  • Ejected storefronts: to get the build warning, make next.config.mjs export async function config(phase) { await checkClientVersions({ phase, apiUrl: API_URL }); return nextConfig; } (new projects already do).
  • The packages' source is now mirrored, read-only, at https://github.com/ecomwebai/ecomweb-storefront-sdk; report issues there.

Patch Changes

• Updated dependencies [33b6dc9]
  • @ecomweb/sdk@0.14.0

@ecomweb/sdk 0.14.0

Minor Changes

• 33b6dc9: Version reporting and update warnings.
  • Every SDK request sends X-Ecomweb-Client: @ecomweb/sdk/<version>, so the platform can tell which kit and SDK a store runs and warn the owner when it falls behind. createEcomwebSdk({ clientInfo }) puts your own name/version tokens first; the kit passes @ecomweb/storefront-kit/<version>. New exports: SDK_VERSION, SDK_CLIENT_TOKEN, CLIENT_HEADER, clientHeaderValue(), withClientHeader().
  • checkClientVersions({ phase, apiUrl }) (@ecomweb/storefront-kit/config): on next build only, asks the platform which versions are supported and prints a warning when the installed kit or SDK is behind, with a stronger one for security updates. 2 s timeout, never fails the build; ECOMWEB_SKIP_VERSION_CHECK=1 turns it off. Also exported: KIT_VERSION, KIT_CLIENT_TOKEN, formatClientVersionWarning().
  • Ejected storefronts: to get the build warning, make next.config.mjs export async function config(phase) { await checkClientVersions({ phase, apiUrl: API_URL }); return nextConfig; } (new projects already do).
  • The packages' source is now mirrored, read-only, at https://github.com/ecomwebai/ecomweb-storefront-sdk; report issues there.

Update a storefront with ecomweb storefront upgrade (guide).

packages v0.13.1

@ecomweb/storefront-kit 0.13.1

Patch Changes

• 92b6565: Client side of the API security fixes; works against older APIs too.

  • Email-proof bindings (F10): the auth route keeps register's verification_binding and change-email's confirmation_binding in httpOnly cookies and sends them as binding on verify-email and change-email/confirm, then clears them. AuthApi.verifyEmail(token, binding?) and confirmEmailChange(token, binding?) take the binding; new RegisterResult and ChangeEmailResult types.
  • Checkout sends promotion_code with promotion_id (F12); CreateOrderRequest gains promotion_code?.
  • Copy for PROMOTION_IDENTITY_REQUIRED (F18); checkout keeps the code so the shopper can add an email and retry.
  • BlogComment.author_email is optional (the public API no longer returns it); creating a comment still requires it.

• Updated dependencies [92b6565]

  • @ecomweb/sdk@0.13.1

@ecomweb/sdk 0.13.1

Patch Changes

• 92b6565: Client side of the API security fixes; works against older APIs too.
  • Email-proof bindings (F10): the auth route keeps register's verification_binding and change-email's confirmation_binding in httpOnly cookies and sends them as binding on verify-email and change-email/confirm, then clears them. AuthApi.verifyEmail(token, binding?) and confirmEmailChange(token, binding?) take the binding; new RegisterResult and ChangeEmailResult types.
  • Checkout sends promotion_code with promotion_id (F12); CreateOrderRequest gains promotion_code?.
  • Copy for PROMOTION_IDENTITY_REQUIRED (F18); checkout keeps the code so the shopper can add an email and retry.
  • BlogComment.author_email is optional (the public API no longer returns it); creating a comment still requires it.

Update a storefront with ecomweb storefront upgrade (guide).