@behio/storefront-sdk 1.4.0 → 1.5.0

package/dist/{chunk-SULHQV5R.mjs → chunk-7CFBSRUZ.mjs}

@@ -143,6 +143,7 @@ var BehioStorefront = class {
     this.timeout = config.timeout ?? 3e4;
     this.retries = config.retries ?? 1;
     this.retryDelay = config.retryDelay ?? 1e3;
+    this.visitorIp = config.visitorIp;
     this.catalog = new CatalogModule(this);
     this.auth = new AuthModule(this);
     this.cart = new CartModule(this);
@@ -174,6 +175,15 @@ var BehioStorefront = class {
   getAnalyticsVisitorId() {
     return this.analyticsVisitorId;
   }
+  /**
+   * Set (or clear with null) the real visitor IP forwarded as
+   * X-Behio-Visitor-Ip on server-side requests. See
+   * `BehioStorefrontConfig.visitorIp` for why. The Next.js adapter calls this
+   * automatically for per-request clients.
+   */
+  setVisitorIp(ip) {
+    this.visitorIp = ip ?? void 0;
+  }
   /**
    * Fire-and-forget Behio Analytics ingest. Uses a bare keepalive fetch (not
    * the interceptor pipeline) so flushes on pagehide still land, and swallows
@@ -439,6 +449,13 @@ var BehioStorefront = class {
     if (this.analyticsVisitorId) {
       headers["X-Behio-Vid"] = this.analyticsVisitorId;
     }
+    if (this.visitorIp) {
+      try {
+        const ip = typeof this.visitorIp === "function" ? await this.visitorIp() : this.visitorIp;
+        if (ip) headers["X-Behio-Visitor-Ip"] = ip;
+      } catch {
+      }
+    }
     if (options?.headers) {
       Object.assign(headers, options.headers);
     }

package/dist/{chunk-VI7OYYBD.js → chunk-OQK7PQYJ.js}

@@ -143,6 +143,7 @@ var BehioStorefront = class {
     this.timeout = _nullishCoalesce(config.timeout, () => ( 3e4));
     this.retries = _nullishCoalesce(config.retries, () => ( 1));
     this.retryDelay = _nullishCoalesce(config.retryDelay, () => ( 1e3));
+    this.visitorIp = config.visitorIp;
     this.catalog = new CatalogModule(this);
     this.auth = new AuthModule(this);
     this.cart = new CartModule(this);
@@ -174,6 +175,15 @@ var BehioStorefront = class {
   getAnalyticsVisitorId() {
     return this.analyticsVisitorId;
   }
+  /**
+   * Set (or clear with null) the real visitor IP forwarded as
+   * X-Behio-Visitor-Ip on server-side requests. See
+   * `BehioStorefrontConfig.visitorIp` for why. The Next.js adapter calls this
+   * automatically for per-request clients.
+   */
+  setVisitorIp(ip) {
+    this.visitorIp = _nullishCoalesce(ip, () => ( void 0));
+  }
   /**
    * Fire-and-forget Behio Analytics ingest. Uses a bare keepalive fetch (not
    * the interceptor pipeline) so flushes on pagehide still land, and swallows
@@ -439,6 +449,13 @@ var BehioStorefront = class {
     if (this.analyticsVisitorId) {
       headers["X-Behio-Vid"] = this.analyticsVisitorId;
     }
+    if (this.visitorIp) {
+      try {
+        const ip = typeof this.visitorIp === "function" ? await this.visitorIp() : this.visitorIp;
+        if (ip) headers["X-Behio-Visitor-Ip"] = ip;
+      } catch (e4) {
+      }
+    }
     if (_optionalChain([options, 'optionalAccess', _14 => _14.headers])) {
       Object.assign(headers, options.headers);
     }
@@ -516,7 +533,7 @@ var BehioStorefront = class {
               ...options,
               _isRetryAfterRefresh: true
             });
-          } catch (e4) {
+          } catch (e5) {
             this.emit("error", apiError);
             throw apiError;
           }
@@ -538,7 +555,7 @@ var BehioStorefront = class {
             data: responseData,
             headers: res.headers
           });
-        } catch (e5) {
+        } catch (e6) {
         }
       }
       return responseData;

package/dist/{client-YJtbTLts.d.mts → client-LetSVGM1.d.mts}

@@ -17,6 +17,18 @@ interface BehioStorefrontConfig {
     currency?: string;
     /** Custom fetch implementation (for Node.js < 18 or testing) */
     fetch?: typeof fetch;
+    /**
+     * Real visitor IP for server-side rendering. Sent as X-Behio-Visitor-Ip so
+     * the backend rate-limits per visitor instead of per server: all SSR
+     * requests of one deployment share the server's IP, so without this header
+     * the whole shop shares one rate-limit bucket. The backend only trusts the
+     * header from allow-listed hosting IPs, so a browser sending it gains
+     * nothing. Accepts a fixed string or a resolver called per request (use a
+     * resolver for a shared catalog client that serves many concurrent
+     * requests). The Next.js adapter (`@behio/storefront-sdk/next`) fills this
+     * automatically from the incoming request headers.
+     */
+    visitorIp?: string | (() => string | null | undefined | Promise<string | null | undefined>);
     /** Request timeout in milliseconds. Default: 30000 (30s) */
     timeout?: number;
     /** Number of retries on network/5xx errors. Default: 1 */
@@ -2267,6 +2279,7 @@ declare class BehioStorefront {
     private responseInterceptors;
     private rateLimitRemaining;
     private rateLimitReset;
+    private visitorIp?;
     constructor(config: BehioStorefrontConfig);
     readonly catalog: CatalogModule;
     readonly auth: AuthModule;
@@ -2293,6 +2306,13 @@ declare class BehioStorefront {
     setAnalyticsVisitorId(id: string | null): void;
     /** The consent-gated visitor id, if analytics consent was granted. */
     getAnalyticsVisitorId(): string | null;
+    /**
+     * Set (or clear with null) the real visitor IP forwarded as
+     * X-Behio-Visitor-Ip on server-side requests. See
+     * `BehioStorefrontConfig.visitorIp` for why. The Next.js adapter calls this
+     * automatically for per-request clients.
+     */
+    setVisitorIp(ip: string | null): void;
     /**
      * Fire-and-forget Behio Analytics ingest. Uses a bare keepalive fetch (not
      * the interceptor pipeline) so flushes on pagehide still land, and swallows

package/dist/{client-YJtbTLts.d.ts → client-LetSVGM1.d.ts}

@@ -17,6 +17,18 @@ interface BehioStorefrontConfig {
     currency?: string;
     /** Custom fetch implementation (for Node.js < 18 or testing) */
     fetch?: typeof fetch;
+    /**
+     * Real visitor IP for server-side rendering. Sent as X-Behio-Visitor-Ip so
+     * the backend rate-limits per visitor instead of per server: all SSR
+     * requests of one deployment share the server's IP, so without this header
+     * the whole shop shares one rate-limit bucket. The backend only trusts the
+     * header from allow-listed hosting IPs, so a browser sending it gains
+     * nothing. Accepts a fixed string or a resolver called per request (use a
+     * resolver for a shared catalog client that serves many concurrent
+     * requests). The Next.js adapter (`@behio/storefront-sdk/next`) fills this
+     * automatically from the incoming request headers.
+     */
+    visitorIp?: string | (() => string | null | undefined | Promise<string | null | undefined>);
     /** Request timeout in milliseconds. Default: 30000 (30s) */
     timeout?: number;
     /** Number of retries on network/5xx errors. Default: 1 */
@@ -2267,6 +2279,7 @@ declare class BehioStorefront {
     private responseInterceptors;
     private rateLimitRemaining;
     private rateLimitReset;
+    private visitorIp?;
     constructor(config: BehioStorefrontConfig);
     readonly catalog: CatalogModule;
     readonly auth: AuthModule;
@@ -2293,6 +2306,13 @@ declare class BehioStorefront {
     setAnalyticsVisitorId(id: string | null): void;
     /** The consent-gated visitor id, if analytics consent was granted. */
     getAnalyticsVisitorId(): string | null;
+    /**
+     * Set (or clear with null) the real visitor IP forwarded as
+     * X-Behio-Visitor-Ip on server-side requests. See
+     * `BehioStorefrontConfig.visitorIp` for why. The Next.js adapter calls this
+     * automatically for per-request clients.
+     */
+    setVisitorIp(ip: string | null): void;
     /**
      * Fire-and-forget Behio Analytics ingest. Uses a bare keepalive fetch (not
      * the interceptor pipeline) so flushes on pagehide still land, and swallows

package/dist/index.d.mts

@@ -1,5 +1,5 @@
-import { P as ProductDetail, a as ProductVariant, B as BehioStorefront, S as SdkResult, C as CookieConsent } from './client-YJtbTLts.mjs';
-export { A as ActivePromotion, b as AddToCartInput, c as AddressDetail, d as AddressSuggestion, e as AddressType, f as AddressTypes, g as AuthTokens, h as BackInStockSubscription, i as BadgeTone, j as BehioApiError, k as BehioErrorCode, l as BehioEventHandler, m as BehioEventType, n as BehioNetworkError, o as BehioStorefrontConfig, p as Bundle, q as BundleItem, r as Cart, s as CartBundleLine, t as CartBundleLineItem, u as CartDiscount, v as CartItem, w as CartItemProduct, x as CartPromotion, y as Category, z as CategoryDetail, D as CertificateVerification, E as CheckoutAddress, F as CheckoutInput, G as CheckoutPaymentMethod, H as CheckoutSettings, I as CookieConsentInput, J as CourseAttachment, K as CourseCertificate, L as CourseComment, M as CourseCommentReply, N as CourseCommentsList, O as CourseDetail, Q as CourseLesson, R as CourseListItem, T as CourseModule, U as CoursePostedComment, V as CourseProgress, W as CourseTutorMessage, X as CourseTutorThread, Y as CrossSellItem, Z as CustomerAddress, _ as CustomerProfile, $ as DigitalDownload, a0 as DownloadUrl, a1 as Facet, a2 as FacetAvailability, a3 as FacetCategory, a4 as FacetLabel, a5 as FacetPriceRange, a6 as FacetRange, a7 as FacetRatingBucket, a8 as FacetValue, a9 as FacetsResponse, aa as FilterField, ab as FulfillmentStatus, ac as FulfillmentStatuses, ad as GiftCardBalance, ae as GiftCardPurchaseInput, af as GiftCardPurchaseResult, ag as GiftCardSummary, ah as LessonNote, ai as LessonQuiz, aj as LoginInput, ak as LoyaltyBalance, al as LoyaltyNextTier, am as LoyaltyProgram, an as LoyaltySummary, ao as LoyaltyTier, ap as LoyaltyTierPerks, aq as LoyaltyTransaction, ar as Menu, as as MenuItem, at as MenuItemRef, au as MenuItemType, av as MessageResponse, aw as NewsletterOptInDefault, ax as NewsletterSubscribeInput, ay as NewsletterSubscribeResult, az as NewsletterUnsubscribeResult, aA as OrderAccessRequestResponse, aB as OrderAccessVerifyResponse, aC as OrderDetail, aD as OrderItem, aE as OrderListItem, aF as OrderStatus, aG as OrderStatusHistory, aH as OrderStatuses, aI as OrderTracking, aJ as Page, aK as PageAttachment, aL as PageDetail, aM as PaginatedResponse, aN as PaymentStatus, aO as PaymentStatuses, aP as PickupPoint, aQ as PickupPointHours, aR as PickupPointsInput, aS as PriceDisplay, aT as ProductAvailability, aU as ProductGroup, aV as ProductLabel, aW as ProductListItem, aX as ProductMedia, aY as ProductMediaVariant, aZ as ProductParameter, a_ as ProductParameterGroup, a$ as ProductParametersResponse, b0 as ProductPrice, b1 as ProductPromotionSummary, b2 as ProductReview, b3 as ProductReviewsResponse, b4 as ProductSibling, b5 as ProductSort, b6 as ProductSortValue, b7 as ProductVolumePrice, b8 as ProductsQuery, b9 as QuizAnswerInput, ba as QuizAnswerResult, bb as QuizQuestion, bc as QuizResult, bd as QuoteItem, be as QuoteRequest, bf as RegisterInput, bg as RegisterResult, bh as RequestInterceptor, bi as RequestInterceptorConfig, bj as ResponseInterceptor, bk as ResponseInterceptorData, bl as ReturnRequest, bm as ReturnRequestItem, bn as ReturnStatus, bo as ReturnStatusItem, bp as ReturnableOrder, bq as ReturnableOrderItem, br as SdkError, bs as ShippingMethodSummary, bt as ShippingQuote, bu as ShippingQuoteInput, bv as ShopInfo, bw as ShopScript, bx as ShopScriptPlacement, by as ShopScriptType, bz as ShopScripts, bA as ShopSeo, bB as ShopSeoIdentity, bC as Sitemap, bD as SitemapEntry, bE as StockBehavior, bF as StockMode, bG as SubmitQuoteInput, bH as SubmitReturnInput, bI as SubmitReviewInput, bJ as Subscription, bK as SubscriptionAction, bL as SubscriptionFrequency, bM as SubscriptionItem, bN as SubscriptionStatus, bO as TaxBreakdownLine, bP as VariantAxis, bQ as VariantAxisValue, bR as WishlistItem, bS as err, bT as ok, bU as toSdkError } from './client-YJtbTLts.mjs';
+import { P as ProductDetail, a as ProductVariant, B as BehioStorefront, S as SdkResult, C as CookieConsent } from './client-LetSVGM1.mjs';
+export { A as ActivePromotion, b as AddToCartInput, c as AddressDetail, d as AddressSuggestion, e as AddressType, f as AddressTypes, g as AuthTokens, h as BackInStockSubscription, i as BadgeTone, j as BehioApiError, k as BehioErrorCode, l as BehioEventHandler, m as BehioEventType, n as BehioNetworkError, o as BehioStorefrontConfig, p as Bundle, q as BundleItem, r as Cart, s as CartBundleLine, t as CartBundleLineItem, u as CartDiscount, v as CartItem, w as CartItemProduct, x as CartPromotion, y as Category, z as CategoryDetail, D as CertificateVerification, E as CheckoutAddress, F as CheckoutInput, G as CheckoutPaymentMethod, H as CheckoutSettings, I as CookieConsentInput, J as CourseAttachment, K as CourseCertificate, L as CourseComment, M as CourseCommentReply, N as CourseCommentsList, O as CourseDetail, Q as CourseLesson, R as CourseListItem, T as CourseModule, U as CoursePostedComment, V as CourseProgress, W as CourseTutorMessage, X as CourseTutorThread, Y as CrossSellItem, Z as CustomerAddress, _ as CustomerProfile, $ as DigitalDownload, a0 as DownloadUrl, a1 as Facet, a2 as FacetAvailability, a3 as FacetCategory, a4 as FacetLabel, a5 as FacetPriceRange, a6 as FacetRange, a7 as FacetRatingBucket, a8 as FacetValue, a9 as FacetsResponse, aa as FilterField, ab as FulfillmentStatus, ac as FulfillmentStatuses, ad as GiftCardBalance, ae as GiftCardPurchaseInput, af as GiftCardPurchaseResult, ag as GiftCardSummary, ah as LessonNote, ai as LessonQuiz, aj as LoginInput, ak as LoyaltyBalance, al as LoyaltyNextTier, am as LoyaltyProgram, an as LoyaltySummary, ao as LoyaltyTier, ap as LoyaltyTierPerks, aq as LoyaltyTransaction, ar as Menu, as as MenuItem, at as MenuItemRef, au as MenuItemType, av as MessageResponse, aw as NewsletterOptInDefault, ax as NewsletterSubscribeInput, ay as NewsletterSubscribeResult, az as NewsletterUnsubscribeResult, aA as OrderAccessRequestResponse, aB as OrderAccessVerifyResponse, aC as OrderDetail, aD as OrderItem, aE as OrderListItem, aF as OrderStatus, aG as OrderStatusHistory, aH as OrderStatuses, aI as OrderTracking, aJ as Page, aK as PageAttachment, aL as PageDetail, aM as PaginatedResponse, aN as PaymentStatus, aO as PaymentStatuses, aP as PickupPoint, aQ as PickupPointHours, aR as PickupPointsInput, aS as PriceDisplay, aT as ProductAvailability, aU as ProductGroup, aV as ProductLabel, aW as ProductListItem, aX as ProductMedia, aY as ProductMediaVariant, aZ as ProductParameter, a_ as ProductParameterGroup, a$ as ProductParametersResponse, b0 as ProductPrice, b1 as ProductPromotionSummary, b2 as ProductReview, b3 as ProductReviewsResponse, b4 as ProductSibling, b5 as ProductSort, b6 as ProductSortValue, b7 as ProductVolumePrice, b8 as ProductsQuery, b9 as QuizAnswerInput, ba as QuizAnswerResult, bb as QuizQuestion, bc as QuizResult, bd as QuoteItem, be as QuoteRequest, bf as RegisterInput, bg as RegisterResult, bh as RequestInterceptor, bi as RequestInterceptorConfig, bj as ResponseInterceptor, bk as ResponseInterceptorData, bl as ReturnRequest, bm as ReturnRequestItem, bn as ReturnStatus, bo as ReturnStatusItem, bp as ReturnableOrder, bq as ReturnableOrderItem, br as SdkError, bs as ShippingMethodSummary, bt as ShippingQuote, bu as ShippingQuoteInput, bv as ShopInfo, bw as ShopScript, bx as ShopScriptPlacement, by as ShopScriptType, bz as ShopScripts, bA as ShopSeo, bB as ShopSeoIdentity, bC as Sitemap, bD as SitemapEntry, bE as StockBehavior, bF as StockMode, bG as SubmitQuoteInput, bH as SubmitReturnInput, bI as SubmitReviewInput, bJ as Subscription, bK as SubscriptionAction, bL as SubscriptionFrequency, bM as SubscriptionItem, bN as SubscriptionStatus, bO as TaxBreakdownLine, bP as VariantAxis, bQ as VariantAxisValue, bR as WishlistItem, bS as err, bT as ok, bU as toSdkError } from './client-LetSVGM1.mjs';
 
 /**
  * Format a price amount with currency using Intl.NumberFormat.

package/dist/index.d.ts

@@ -1,5 +1,5 @@
-import { P as ProductDetail, a as ProductVariant, B as BehioStorefront, S as SdkResult, C as CookieConsent } from './client-YJtbTLts.js';
-export { A as ActivePromotion, b as AddToCartInput, c as AddressDetail, d as AddressSuggestion, e as AddressType, f as AddressTypes, g as AuthTokens, h as BackInStockSubscription, i as BadgeTone, j as BehioApiError, k as BehioErrorCode, l as BehioEventHandler, m as BehioEventType, n as BehioNetworkError, o as BehioStorefrontConfig, p as Bundle, q as BundleItem, r as Cart, s as CartBundleLine, t as CartBundleLineItem, u as CartDiscount, v as CartItem, w as CartItemProduct, x as CartPromotion, y as Category, z as CategoryDetail, D as CertificateVerification, E as CheckoutAddress, F as CheckoutInput, G as CheckoutPaymentMethod, H as CheckoutSettings, I as CookieConsentInput, J as CourseAttachment, K as CourseCertificate, L as CourseComment, M as CourseCommentReply, N as CourseCommentsList, O as CourseDetail, Q as CourseLesson, R as CourseListItem, T as CourseModule, U as CoursePostedComment, V as CourseProgress, W as CourseTutorMessage, X as CourseTutorThread, Y as CrossSellItem, Z as CustomerAddress, _ as CustomerProfile, $ as DigitalDownload, a0 as DownloadUrl, a1 as Facet, a2 as FacetAvailability, a3 as FacetCategory, a4 as FacetLabel, a5 as FacetPriceRange, a6 as FacetRange, a7 as FacetRatingBucket, a8 as FacetValue, a9 as FacetsResponse, aa as FilterField, ab as FulfillmentStatus, ac as FulfillmentStatuses, ad as GiftCardBalance, ae as GiftCardPurchaseInput, af as GiftCardPurchaseResult, ag as GiftCardSummary, ah as LessonNote, ai as LessonQuiz, aj as LoginInput, ak as LoyaltyBalance, al as LoyaltyNextTier, am as LoyaltyProgram, an as LoyaltySummary, ao as LoyaltyTier, ap as LoyaltyTierPerks, aq as LoyaltyTransaction, ar as Menu, as as MenuItem, at as MenuItemRef, au as MenuItemType, av as MessageResponse, aw as NewsletterOptInDefault, ax as NewsletterSubscribeInput, ay as NewsletterSubscribeResult, az as NewsletterUnsubscribeResult, aA as OrderAccessRequestResponse, aB as OrderAccessVerifyResponse, aC as OrderDetail, aD as OrderItem, aE as OrderListItem, aF as OrderStatus, aG as OrderStatusHistory, aH as OrderStatuses, aI as OrderTracking, aJ as Page, aK as PageAttachment, aL as PageDetail, aM as PaginatedResponse, aN as PaymentStatus, aO as PaymentStatuses, aP as PickupPoint, aQ as PickupPointHours, aR as PickupPointsInput, aS as PriceDisplay, aT as ProductAvailability, aU as ProductGroup, aV as ProductLabel, aW as ProductListItem, aX as ProductMedia, aY as ProductMediaVariant, aZ as ProductParameter, a_ as ProductParameterGroup, a$ as ProductParametersResponse, b0 as ProductPrice, b1 as ProductPromotionSummary, b2 as ProductReview, b3 as ProductReviewsResponse, b4 as ProductSibling, b5 as ProductSort, b6 as ProductSortValue, b7 as ProductVolumePrice, b8 as ProductsQuery, b9 as QuizAnswerInput, ba as QuizAnswerResult, bb as QuizQuestion, bc as QuizResult, bd as QuoteItem, be as QuoteRequest, bf as RegisterInput, bg as RegisterResult, bh as RequestInterceptor, bi as RequestInterceptorConfig, bj as ResponseInterceptor, bk as ResponseInterceptorData, bl as ReturnRequest, bm as ReturnRequestItem, bn as ReturnStatus, bo as ReturnStatusItem, bp as ReturnableOrder, bq as ReturnableOrderItem, br as SdkError, bs as ShippingMethodSummary, bt as ShippingQuote, bu as ShippingQuoteInput, bv as ShopInfo, bw as ShopScript, bx as ShopScriptPlacement, by as ShopScriptType, bz as ShopScripts, bA as ShopSeo, bB as ShopSeoIdentity, bC as Sitemap, bD as SitemapEntry, bE as StockBehavior, bF as StockMode, bG as SubmitQuoteInput, bH as SubmitReturnInput, bI as SubmitReviewInput, bJ as Subscription, bK as SubscriptionAction, bL as SubscriptionFrequency, bM as SubscriptionItem, bN as SubscriptionStatus, bO as TaxBreakdownLine, bP as VariantAxis, bQ as VariantAxisValue, bR as WishlistItem, bS as err, bT as ok, bU as toSdkError } from './client-YJtbTLts.js';
+import { P as ProductDetail, a as ProductVariant, B as BehioStorefront, S as SdkResult, C as CookieConsent } from './client-LetSVGM1.js';
+export { A as ActivePromotion, b as AddToCartInput, c as AddressDetail, d as AddressSuggestion, e as AddressType, f as AddressTypes, g as AuthTokens, h as BackInStockSubscription, i as BadgeTone, j as BehioApiError, k as BehioErrorCode, l as BehioEventHandler, m as BehioEventType, n as BehioNetworkError, o as BehioStorefrontConfig, p as Bundle, q as BundleItem, r as Cart, s as CartBundleLine, t as CartBundleLineItem, u as CartDiscount, v as CartItem, w as CartItemProduct, x as CartPromotion, y as Category, z as CategoryDetail, D as CertificateVerification, E as CheckoutAddress, F as CheckoutInput, G as CheckoutPaymentMethod, H as CheckoutSettings, I as CookieConsentInput, J as CourseAttachment, K as CourseCertificate, L as CourseComment, M as CourseCommentReply, N as CourseCommentsList, O as CourseDetail, Q as CourseLesson, R as CourseListItem, T as CourseModule, U as CoursePostedComment, V as CourseProgress, W as CourseTutorMessage, X as CourseTutorThread, Y as CrossSellItem, Z as CustomerAddress, _ as CustomerProfile, $ as DigitalDownload, a0 as DownloadUrl, a1 as Facet, a2 as FacetAvailability, a3 as FacetCategory, a4 as FacetLabel, a5 as FacetPriceRange, a6 as FacetRange, a7 as FacetRatingBucket, a8 as FacetValue, a9 as FacetsResponse, aa as FilterField, ab as FulfillmentStatus, ac as FulfillmentStatuses, ad as GiftCardBalance, ae as GiftCardPurchaseInput, af as GiftCardPurchaseResult, ag as GiftCardSummary, ah as LessonNote, ai as LessonQuiz, aj as LoginInput, ak as LoyaltyBalance, al as LoyaltyNextTier, am as LoyaltyProgram, an as LoyaltySummary, ao as LoyaltyTier, ap as LoyaltyTierPerks, aq as LoyaltyTransaction, ar as Menu, as as MenuItem, at as MenuItemRef, au as MenuItemType, av as MessageResponse, aw as NewsletterOptInDefault, ax as NewsletterSubscribeInput, ay as NewsletterSubscribeResult, az as NewsletterUnsubscribeResult, aA as OrderAccessRequestResponse, aB as OrderAccessVerifyResponse, aC as OrderDetail, aD as OrderItem, aE as OrderListItem, aF as OrderStatus, aG as OrderStatusHistory, aH as OrderStatuses, aI as OrderTracking, aJ as Page, aK as PageAttachment, aL as PageDetail, aM as PaginatedResponse, aN as PaymentStatus, aO as PaymentStatuses, aP as PickupPoint, aQ as PickupPointHours, aR as PickupPointsInput, aS as PriceDisplay, aT as ProductAvailability, aU as ProductGroup, aV as ProductLabel, aW as ProductListItem, aX as ProductMedia, aY as ProductMediaVariant, aZ as ProductParameter, a_ as ProductParameterGroup, a$ as ProductParametersResponse, b0 as ProductPrice, b1 as ProductPromotionSummary, b2 as ProductReview, b3 as ProductReviewsResponse, b4 as ProductSibling, b5 as ProductSort, b6 as ProductSortValue, b7 as ProductVolumePrice, b8 as ProductsQuery, b9 as QuizAnswerInput, ba as QuizAnswerResult, bb as QuizQuestion, bc as QuizResult, bd as QuoteItem, be as QuoteRequest, bf as RegisterInput, bg as RegisterResult, bh as RequestInterceptor, bi as RequestInterceptorConfig, bj as ResponseInterceptor, bk as ResponseInterceptorData, bl as ReturnRequest, bm as ReturnRequestItem, bn as ReturnStatus, bo as ReturnStatusItem, bp as ReturnableOrder, bq as ReturnableOrderItem, br as SdkError, bs as ShippingMethodSummary, bt as ShippingQuote, bu as ShippingQuoteInput, bv as ShopInfo, bw as ShopScript, bx as ShopScriptPlacement, by as ShopScriptType, bz as ShopScripts, bA as ShopSeo, bB as ShopSeoIdentity, bC as Sitemap, bD as SitemapEntry, bE as StockBehavior, bF as StockMode, bG as SubmitQuoteInput, bH as SubmitReturnInput, bI as SubmitReviewInput, bJ as Subscription, bK as SubscriptionAction, bL as SubscriptionFrequency, bM as SubscriptionItem, bN as SubscriptionStatus, bO as TaxBreakdownLine, bP as VariantAxis, bQ as VariantAxisValue, bR as WishlistItem, bS as err, bT as ok, bU as toSdkError } from './client-LetSVGM1.js';
 
 /**
  * Format a price amount with currency using Intl.NumberFormat.

package/dist/index.js

@@ -10,7 +10,7 @@
 
 
 
-var _chunkVI7OYYBDjs = require('./chunk-VI7OYYBD.js');
+var _chunkOQK7PQYJjs = require('./chunk-OQK7PQYJ.js');
 
 // src/react/utils/format-price.ts
 function formatPrice(amount, currency, locale) {
@@ -243,4 +243,4 @@ async function revokeAnalyticsConsent(client) {
 
 
 
-exports.AddressTypes = _chunkVI7OYYBDjs.AddressTypes; exports.BehioApiError = _chunkVI7OYYBDjs.BehioApiError; exports.BehioNetworkError = _chunkVI7OYYBDjs.BehioNetworkError; exports.BehioStorefront = _chunkVI7OYYBDjs.BehioStorefront; exports.FulfillmentStatuses = _chunkVI7OYYBDjs.FulfillmentStatuses; exports.OrderStatuses = _chunkVI7OYYBDjs.OrderStatuses; exports.PaymentStatuses = _chunkVI7OYYBDjs.PaymentStatuses; exports.ProductSort = _chunkVI7OYYBDjs.ProductSort; exports.VARIANT_QUERY_PARAM = VARIANT_QUERY_PARAM; exports.availableAxisValues = availableAxisValues; exports.buildVariantComparison = buildVariantComparison; exports.err = _chunkVI7OYYBDjs.err; exports.findVariantByAttributes = findVariantByAttributes; exports.formatPrice = formatPrice; exports.generateVisitorId = generateVisitorId; exports.getStoredVisitorId = getStoredVisitorId; exports.grantAnalyticsConsent = grantAnalyticsConsent; exports.ok = _chunkVI7OYYBDjs.ok; exports.resolveVariantContent = resolveVariantContent; exports.revokeAnalyticsConsent = revokeAnalyticsConsent; exports.toSdkError = _chunkVI7OYYBDjs.toSdkError; exports.trackEcommerceEvent = trackEcommerceEvent; exports.variantFromQuery = variantFromQuery; exports.variantHref = variantHref;
+exports.AddressTypes = _chunkOQK7PQYJjs.AddressTypes; exports.BehioApiError = _chunkOQK7PQYJjs.BehioApiError; exports.BehioNetworkError = _chunkOQK7PQYJjs.BehioNetworkError; exports.BehioStorefront = _chunkOQK7PQYJjs.BehioStorefront; exports.FulfillmentStatuses = _chunkOQK7PQYJjs.FulfillmentStatuses; exports.OrderStatuses = _chunkOQK7PQYJjs.OrderStatuses; exports.PaymentStatuses = _chunkOQK7PQYJjs.PaymentStatuses; exports.ProductSort = _chunkOQK7PQYJjs.ProductSort; exports.VARIANT_QUERY_PARAM = VARIANT_QUERY_PARAM; exports.availableAxisValues = availableAxisValues; exports.buildVariantComparison = buildVariantComparison; exports.err = _chunkOQK7PQYJjs.err; exports.findVariantByAttributes = findVariantByAttributes; exports.formatPrice = formatPrice; exports.generateVisitorId = generateVisitorId; exports.getStoredVisitorId = getStoredVisitorId; exports.grantAnalyticsConsent = grantAnalyticsConsent; exports.ok = _chunkOQK7PQYJjs.ok; exports.resolveVariantContent = resolveVariantContent; exports.revokeAnalyticsConsent = revokeAnalyticsConsent; exports.toSdkError = _chunkOQK7PQYJjs.toSdkError; exports.trackEcommerceEvent = trackEcommerceEvent; exports.variantFromQuery = variantFromQuery; exports.variantHref = variantHref;

package/dist/index.mjs

@@ -10,7 +10,7 @@ import {
   err,
   ok,
   toSdkError
-} from "./chunk-SULHQV5R.mjs";
+} from "./chunk-7CFBSRUZ.mjs";
 
 // src/react/utils/format-price.ts
 function formatPrice(amount, currency, locale) {

package/dist/next.d.mts

@@ -1,4 +1,4 @@
-import { o as BehioStorefrontConfig, B as BehioStorefront } from './client-YJtbTLts.mjs';
+import { o as BehioStorefrontConfig, B as BehioStorefront } from './client-LetSVGM1.mjs';
 
 interface GetBehioOptions extends Partial<BehioStorefrontConfig> {
     /** Override the cart session cookie name (default: "behio_cart_session"). */

package/dist/next.d.ts

@@ -1,4 +1,4 @@
-import { o as BehioStorefrontConfig, B as BehioStorefront } from './client-YJtbTLts.js';
+import { o as BehioStorefrontConfig, B as BehioStorefront } from './client-LetSVGM1.js';
 
 interface GetBehioOptions extends Partial<BehioStorefrontConfig> {
     /** Override the cart session cookie name (default: "behio_cart_session"). */

package/dist/next.js

@@ -1,6 +1,6 @@
 "use strict";Object.defineProperty(exports, "__esModule", {value: true}); function _nullishCoalesce(lhs, rhsFn) { if (lhs != null) { return lhs; } else { return rhsFn(); } } function _optionalChain(ops) { let lastAccessLHS = undefined; let value = ops[0]; let i = 1; while (i < ops.length) { const op = ops[i]; const fn = ops[i + 1]; i += 2; if ((op === 'optionalAccess' || op === 'optionalCall') && value == null) { return undefined; } if (op === 'access' || op === 'optionalAccess') { lastAccessLHS = value; value = fn(value); } else if (op === 'call' || op === 'optionalCall') { value = fn((...args) => value.call(lastAccessLHS, ...args)); lastAccessLHS = undefined; } } return value; }
 
-var _chunkVI7OYYBDjs = require('./chunk-VI7OYYBD.js');
+var _chunkOQK7PQYJjs = require('./chunk-OQK7PQYJ.js');
 
 // src/next.ts
 var _headers = require('next/headers');
@@ -18,7 +18,7 @@ async function getBehio(options = {}) {
   const locale = _nullishCoalesce(options.locale, () => ( process.env.BEHIO_LOCALE));
   const currency = _nullishCoalesce(options.currency, () => ( process.env.BEHIO_CURRENCY));
   const cookieName = _nullishCoalesce(options.cartCookieName, () => ( CART_COOKIE_NAME));
-  const client = new (0, _chunkVI7OYYBDjs.BehioStorefront)({
+  const client = new (0, _chunkOQK7PQYJjs.BehioStorefront)({
     apiKey,
     ...baseUrl ? { baseUrl } : {},
     ...locale ? { locale } : {},
@@ -30,9 +30,18 @@ async function getBehio(options = {}) {
   if (existing) {
     client.setCartSession(existing);
   }
+  if (!options.visitorIp) {
+    try {
+      const h = await _headers.headers.call(void 0, );
+      const xff = h.get("x-forwarded-for");
+      const ip = (_nullishCoalesce(_nullishCoalesce(_optionalChain([xff, 'optionalAccess', _4 => _4.split, 'call', _5 => _5(","), 'access', _6 => _6[0]]), () => ( h.get("x-real-ip"))), () => ( ""))).trim();
+      if (ip) client.setVisitorIp(ip);
+    } catch (e) {
+    }
+  }
   if (!currency) {
     const currencyCookieName = _nullishCoalesce(options.currencyCookieName, () => ( CURRENCY_COOKIE_NAME));
-    const chosenCurrency = _optionalChain([cookieStore, 'access', _4 => _4.get, 'call', _5 => _5(currencyCookieName), 'optionalAccess', _6 => _6.value]);
+    const chosenCurrency = _optionalChain([cookieStore, 'access', _7 => _7.get, 'call', _8 => _8(currencyCookieName), 'optionalAccess', _9 => _9.value]);
     if (chosenCurrency) {
       client.setCurrency(chosenCurrency);
     }
@@ -48,14 +57,14 @@ async function getBehio(options = {}) {
         path: "/",
         maxAge: CART_COOKIE_MAX_AGE
       });
-    } catch (e) {
+    } catch (e2) {
     }
   };
   client.clearCartSession = () => {
     originalClear();
     try {
       cookieStore.delete(cookieName);
-    } catch (e2) {
+    } catch (e3) {
     }
   };
   return client;

package/dist/next.mjs

@@ -1,9 +1,9 @@
 import {
   BehioStorefront
-} from "./chunk-SULHQV5R.mjs";
+} from "./chunk-7CFBSRUZ.mjs";
 
 // src/next.ts
-import { cookies } from "next/headers";
+import { cookies, headers } from "next/headers";
 var CART_COOKIE_NAME = "behio_cart_session";
 var CURRENCY_COOKIE_NAME = "behio_currency";
 var CART_COOKIE_MAX_AGE = 60 * 60 * 24 * 30;
@@ -30,6 +30,15 @@ async function getBehio(options = {}) {
   if (existing) {
     client.setCartSession(existing);
   }
+  if (!options.visitorIp) {
+    try {
+      const h = await headers();
+      const xff = h.get("x-forwarded-for");
+      const ip = (xff?.split(",")[0] ?? h.get("x-real-ip") ?? "").trim();
+      if (ip) client.setVisitorIp(ip);
+    } catch {
+    }
+  }
   if (!currency) {
     const currencyCookieName = options.currencyCookieName ?? CURRENCY_COOKIE_NAME;
     const chosenCurrency = cookieStore.get(currencyCookieName)?.value;

package/dist/react.d.mts

@@ -73,6 +73,18 @@ interface BehioStorefrontConfig {
     currency?: string;
     /** Custom fetch implementation (for Node.js < 18 or testing) */
     fetch?: typeof fetch;
+    /**
+     * Real visitor IP for server-side rendering. Sent as X-Behio-Visitor-Ip so
+     * the backend rate-limits per visitor instead of per server: all SSR
+     * requests of one deployment share the server's IP, so without this header
+     * the whole shop shares one rate-limit bucket. The backend only trusts the
+     * header from allow-listed hosting IPs, so a browser sending it gains
+     * nothing. Accepts a fixed string or a resolver called per request (use a
+     * resolver for a shared catalog client that serves many concurrent
+     * requests). The Next.js adapter (`@behio/storefront-sdk/next`) fills this
+     * automatically from the incoming request headers.
+     */
+    visitorIp?: string | (() => string | null | undefined | Promise<string | null | undefined>);
     /** Request timeout in milliseconds. Default: 30000 (30s) */
     timeout?: number;
     /** Number of retries on network/5xx errors. Default: 1 */
@@ -2311,6 +2323,7 @@ declare class BehioStorefront {
     private responseInterceptors;
     private rateLimitRemaining;
     private rateLimitReset;
+    private visitorIp?;
     constructor(config: BehioStorefrontConfig);
     readonly catalog: CatalogModule;
     readonly auth: AuthModule;
@@ -2337,6 +2350,13 @@ declare class BehioStorefront {
     setAnalyticsVisitorId(id: string | null): void;
     /** The consent-gated visitor id, if analytics consent was granted. */
     getAnalyticsVisitorId(): string | null;
+    /**
+     * Set (or clear with null) the real visitor IP forwarded as
+     * X-Behio-Visitor-Ip on server-side requests. See
+     * `BehioStorefrontConfig.visitorIp` for why. The Next.js adapter calls this
+     * automatically for per-request clients.
+     */
+    setVisitorIp(ip: string | null): void;
     /**
      * Fire-and-forget Behio Analytics ingest. Uses a bare keepalive fetch (not
      * the interceptor pipeline) so flushes on pagehide still land, and swallows

package/dist/react.d.ts

@@ -73,6 +73,18 @@ interface BehioStorefrontConfig {
     currency?: string;
     /** Custom fetch implementation (for Node.js < 18 or testing) */
     fetch?: typeof fetch;
+    /**
+     * Real visitor IP for server-side rendering. Sent as X-Behio-Visitor-Ip so
+     * the backend rate-limits per visitor instead of per server: all SSR
+     * requests of one deployment share the server's IP, so without this header
+     * the whole shop shares one rate-limit bucket. The backend only trusts the
+     * header from allow-listed hosting IPs, so a browser sending it gains
+     * nothing. Accepts a fixed string or a resolver called per request (use a
+     * resolver for a shared catalog client that serves many concurrent
+     * requests). The Next.js adapter (`@behio/storefront-sdk/next`) fills this
+     * automatically from the incoming request headers.
+     */
+    visitorIp?: string | (() => string | null | undefined | Promise<string | null | undefined>);
     /** Request timeout in milliseconds. Default: 30000 (30s) */
     timeout?: number;
     /** Number of retries on network/5xx errors. Default: 1 */
@@ -2311,6 +2323,7 @@ declare class BehioStorefront {
     private responseInterceptors;
     private rateLimitRemaining;
     private rateLimitReset;
+    private visitorIp?;
     constructor(config: BehioStorefrontConfig);
     readonly catalog: CatalogModule;
     readonly auth: AuthModule;
@@ -2337,6 +2350,13 @@ declare class BehioStorefront {
     setAnalyticsVisitorId(id: string | null): void;
     /** The consent-gated visitor id, if analytics consent was granted. */
     getAnalyticsVisitorId(): string | null;
+    /**
+     * Set (or clear with null) the real visitor IP forwarded as
+     * X-Behio-Visitor-Ip on server-side requests. See
+     * `BehioStorefrontConfig.visitorIp` for why. The Next.js adapter calls this
+     * automatically for per-request clients.
+     */
+    setVisitorIp(ip: string | null): void;
     /**
      * Fire-and-forget Behio Analytics ingest. Uses a bare keepalive fetch (not
      * the interceptor pipeline) so flushes on pagehide still land, and swallows

package/dist/react.js

@@ -215,6 +215,7 @@ var BehioStorefront = class {
     this.timeout = config.timeout ?? 3e4;
     this.retries = config.retries ?? 1;
     this.retryDelay = config.retryDelay ?? 1e3;
+    this.visitorIp = config.visitorIp;
     this.catalog = new CatalogModule(this);
     this.auth = new AuthModule(this);
     this.cart = new CartModule(this);
@@ -246,6 +247,15 @@ var BehioStorefront = class {
   getAnalyticsVisitorId() {
     return this.analyticsVisitorId;
   }
+  /**
+   * Set (or clear with null) the real visitor IP forwarded as
+   * X-Behio-Visitor-Ip on server-side requests. See
+   * `BehioStorefrontConfig.visitorIp` for why. The Next.js adapter calls this
+   * automatically for per-request clients.
+   */
+  setVisitorIp(ip) {
+    this.visitorIp = ip ?? void 0;
+  }
   /**
    * Fire-and-forget Behio Analytics ingest. Uses a bare keepalive fetch (not
    * the interceptor pipeline) so flushes on pagehide still land, and swallows
@@ -511,6 +521,13 @@ var BehioStorefront = class {
     if (this.analyticsVisitorId) {
       headers["X-Behio-Vid"] = this.analyticsVisitorId;
     }
+    if (this.visitorIp) {
+      try {
+        const ip = typeof this.visitorIp === "function" ? await this.visitorIp() : this.visitorIp;
+        if (ip) headers["X-Behio-Visitor-Ip"] = ip;
+      } catch {
+      }
+    }
     if (options?.headers) {
       Object.assign(headers, options.headers);
     }

package/dist/react.mjs

@@ -112,6 +112,7 @@ var BehioStorefront = class {
     this.timeout = config.timeout ?? 3e4;
     this.retries = config.retries ?? 1;
     this.retryDelay = config.retryDelay ?? 1e3;
+    this.visitorIp = config.visitorIp;
     this.catalog = new CatalogModule(this);
     this.auth = new AuthModule(this);
     this.cart = new CartModule(this);
@@ -143,6 +144,15 @@ var BehioStorefront = class {
   getAnalyticsVisitorId() {
     return this.analyticsVisitorId;
   }
+  /**
+   * Set (or clear with null) the real visitor IP forwarded as
+   * X-Behio-Visitor-Ip on server-side requests. See
+   * `BehioStorefrontConfig.visitorIp` for why. The Next.js adapter calls this
+   * automatically for per-request clients.
+   */
+  setVisitorIp(ip) {
+    this.visitorIp = ip ?? void 0;
+  }
   /**
    * Fire-and-forget Behio Analytics ingest. Uses a bare keepalive fetch (not
    * the interceptor pipeline) so flushes on pagehide still land, and swallows
@@ -408,6 +418,13 @@ var BehioStorefront = class {
     if (this.analyticsVisitorId) {
       headers["X-Behio-Vid"] = this.analyticsVisitorId;
     }
+    if (this.visitorIp) {
+      try {
+        const ip = typeof this.visitorIp === "function" ? await this.visitorIp() : this.visitorIp;
+        if (ip) headers["X-Behio-Visitor-Ip"] = ip;
+      } catch {
+      }
+    }
     if (options?.headers) {
       Object.assign(headers, options.headers);
     }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@behio/storefront-sdk",
-  "version": "1.4.0",
+  "version": "1.5.0",
   "description": "TypeScript SDK for Behio Headless E-Shop — core client + React hooks",
   "author": "Behio",
   "license": "MIT",