@lime-bundles/react 4.0.0 → 5.0.0

package/README.md

@@ -113,6 +113,49 @@ useEffect(() => {
 
 Full CSS variable reference: [css-variables.md](./docs/css-variables.md).
 
+## Markets & B2B
+
+`<FixedBundle>`, `<VolumeBundle>`, `<MixMatchBundle>`, and `useBundleData` accept four optional props for Shopify Markets and B2B catalogs:
+
+- **`country`** — ISO-3166 alpha-2 (e.g. `"US"`). Passed as Storefront `@inContext(country:)`. Drives Markets pricing and currency.
+- **`language`** — ISO-639-1 (e.g. `"EN"`). Passed as `@inContext(language:)`.
+- **`buyer`** — B2B buyer identity. `BuyerInput` object or `() => Promise<BuyerInput>` callback.
+- **`marketId`** — Current visitor's Market GID. When the bundle is `marketVisibility: "specific"`, it's hidden unless this market is in its allow-list.
+
+```tsx
+<FixedBundle
+  shopDomain="acme.myshopify.com"
+  storefrontAccessToken={token}
+  bundleGid={gid}
+  onAddToCart={addToCart}
+  country="US"
+  language="EN"
+  buyer={async () => fetchBuyerToken()}  // resolved per request
+  marketId="gid://shopify/Market/1"
+/>
+```
+
+**Security — B2B `customerAccessToken`:**
+
+- Prefer the callback form (`() => Promise<BuyerInput>`) so the token doesn't sit in static prop trees, React DevTools snapshots, or Sentry/LogRocket traces.
+- Never pass via URL query parameters (leaks to Referer headers and server logs).
+- Never store in localStorage shared with third-party scripts.
+- The Customer Account API PKCE flow is the canonical source. See https://shopify.dev/docs/api/customer/latest.
+
+**Caching:**
+
+Buyer-contextual responses MUST be `Cache-Control: private` — never share across users. `@lime-bundles/core` exports `getCacheKey()` for SWR / TanStack Query consumers; it hashes the buyer token (never includes the raw value) so per-buyer caches don't leak tokens.
+
+```tsx
+import { getCacheKey } from "@lime-bundles/core";
+useQuery({
+  queryKey: getCacheKey("Bundle", { id }, { shopDomain, country, buyer }),
+  queryFn: () => fetchBundleData({ ... }),
+});
+```
+
+**Filtering vs throwing:** `fetchBundleData` throws `BundleParseError` when the bundle is hidden by the market gate. Use `fetchBundleDataWithWarnings` instead to receive `{ bundle, warnings }` and decide whether to render alternative content.
+
 ## Version policy
 
 `BundleComponentProps`, `UseBundleDataResult`, and `UseBundlesForProductResult` are locked at v2.0.0. All three packages (`core`, `react`, `widget`) bump majors together.

package/dist/index.cjs

@@ -30,7 +30,6 @@ __export(index_exports, {
   VariantDropdown: () => VariantDropdown,
   VolumeBundle: () => VolumeBundle,
   WIDGET_CONFIG_DEFAULTS: () => import_core13.WIDGET_CONFIG_DEFAULTS,
-  applyABVariantB: () => import_core13.applyABVariantB,
   applyWidgetConfigVars: () => import_core13.applyWidgetConfigVars,
   calculateDiscount: () => import_core13.calculateDiscount,
   calculateTierSavings: () => import_core13.calculateTierSavings,
@@ -40,12 +39,13 @@ __export(index_exports, {
   fetchBundleData: () => fetchBundleData,
   fetchBundlesForProduct: () => import_core13.fetchBundlesForProduct,
   fetchShopCustomCss: () => fetchShopCustomCss,
+  fnv1a: () => import_core13.fnv1a,
   formatCents: () => import_core13.formatCents,
   formatCountdown: () => import_core13.formatCountdown,
   formatMoney: () => import_core13.formatMoney,
   formatUnitPrice: () => import_core13.formatUnitPrice,
-  getABTestAssignment: () => import_core13.getABTestAssignment,
   getActiveTier: () => import_core13.getActiveTier,
+  getLinkGroupAssignment: () => import_core13.getLinkGroupAssignment,
   hasConsent: () => import_core13.hasConsent,
   injectCustomCss: () => import_core13.injectCustomCss,
   mergeWidgetConfig: () => import_core13.mergeWidgetConfig,
@@ -54,6 +54,7 @@ __export(index_exports, {
   parseMetaobjectBundle: () => import_core13.parseMetaobjectBundle,
   parseMetaobjectBundleStrict: () => import_core13.parseMetaobjectBundleStrict,
   percentageDiscountUnit: () => import_core13.percentageDiscountUnit,
+  pickVariantFromWeights: () => import_core13.pickVariantFromWeights,
   reportAddToCart: () => import_core13.reportAddToCart,
   reportImpression: () => import_core13.reportImpression,
   sanitizeCustomCss: () => import_core13.sanitizeCustomCss,
@@ -80,14 +81,29 @@ var import_core3 = require("@lime-bundles/core");
 // src/fetchBundleData.ts
 var import_core = require("@lime-bundles/core");
 async function fetchBundleData(options) {
-  const client = (0, import_core.createStorefrontClient)({
+  const result = await fetchBundleDataWithWarnings(options);
+  if (!result.bundle) {
+    throw new import_core.BundleParseError(
+      `Bundle hidden by market gate: ${options.bundleGid}`,
+      "not_found"
+    );
+  }
+  return result.bundle;
+}
+async function fetchBundleDataWithWarnings(options) {
+  const config = {
     shopDomain: options.shopDomain,
     accessToken: options.storefrontAccessToken,
     buyerIp: options.buyerIp,
-    apiVersion: options.apiVersion
-  });
+    apiVersion: options.apiVersion,
+    country: options.country,
+    language: options.language,
+    buyer: options.buyer
+  };
+  const client = (0, import_core.createStorefrontClient)(config);
+  const query = (0, import_core.hasInContext)(config) ? (0, import_core.withInContext)(import_core.BUNDLE_METAOBJECT_QUERY) : import_core.BUNDLE_METAOBJECT_QUERY;
   const data = await client.query(
-    import_core.BUNDLE_METAOBJECT_QUERY,
+    query,
     { id: options.bundleGid },
     { signal: options.signal }
   );
@@ -97,10 +113,24 @@ async function fetchBundleData(options) {
       "not_found"
     );
   }
-  return (0, import_core.parseMetaobjectBundleStrict)(
+  const bundle = (0, import_core.parseMetaobjectBundleStrict)(
     data.metaobject.id,
     data.metaobject.fields
   );
+  if (bundle.marketVisibility === "specific" && (!options.marketId || !bundle.marketIds.includes(options.marketId))) {
+    return {
+      bundle: null,
+      warnings: [
+        {
+          bundleGid: options.bundleGid,
+          reason: "market_mismatch",
+          currentMarketId: options.marketId ?? null,
+          allowedMarketIds: bundle.marketIds
+        }
+      ]
+    };
+  }
+  return { bundle, warnings: [] };
 }
 
 // src/fetchShopCustomCss.ts
@@ -146,7 +176,11 @@ function useBundleData(options) {
       shopDomain: options.shopDomain,
       storefrontAccessToken: options.storefrontAccessToken,
       bundleGid: options.bundleGid,
-      signal: controller.signal
+      signal: controller.signal,
+      country: options.country,
+      language: options.language,
+      buyer: options.buyer,
+      marketId: options.marketId
     }).then((bundle) => {
       if (controller.signal.aborted) return;
       setState({ status: "success", bundle, error: null });
@@ -173,7 +207,11 @@ function useBundleData(options) {
   }, [
     options.shopDomain,
     options.storefrontAccessToken,
-    options.bundleGid
+    options.bundleGid,
+    options.country,
+    options.language,
+    options.buyer,
+    options.marketId
   ]);
   return state;
 }
@@ -193,7 +231,7 @@ function useAnalytics(options) {
   );
   (0, import_react2.useEffect)(() => {
     impressionFiredRef.current = false;
-  }, [options.bundleGid, options.abVariant]);
+  }, [options.bundleGid]);
   (0, import_react2.useEffect)(() => {
     if (options.enabled === false) return;
     if (impressionFiredRef.current) return;
@@ -204,8 +242,7 @@ function useAnalytics(options) {
       (0, import_core4.reportImpression)(config, {
         bundleGid: options.bundleGid,
         bundleType: options.bundleType,
-        abTestId: options.abTestId,
-        abVariant: options.abVariant
+        linkGroupId: options.linkGroupId
       });
     });
     return cleanup;
@@ -215,8 +252,7 @@ function useAnalytics(options) {
     options.enabled,
     options.bundleGid,
     options.bundleType,
-    options.abTestId,
-    options.abVariant
+    options.linkGroupId
   ]);
   const trackAddToCart = (0, import_react2.useCallback)(
     (event) => {
@@ -227,8 +263,7 @@ function useAnalytics(options) {
         productId: event.productId,
         quantity: event.quantity,
         totalPrice: event.totalPrice,
-        abTestId: options.abTestId,
-        abVariant: options.abVariant
+        linkGroupId: options.linkGroupId
       });
     },
     [
@@ -236,8 +271,7 @@ function useAnalytics(options) {
       options.enabled,
       options.bundleGid,
       options.bundleType,
-      options.abTestId,
-      options.abVariant
+      options.linkGroupId
     ]
   );
   return { elementRef, trackAddToCart };
@@ -1515,7 +1549,6 @@ var import_core13 = require("@lime-bundles/core");
   VariantDropdown,
   VolumeBundle,
   WIDGET_CONFIG_DEFAULTS,
-  applyABVariantB,
   applyWidgetConfigVars,
   calculateDiscount,
   calculateTierSavings,
@@ -1525,12 +1558,13 @@ var import_core13 = require("@lime-bundles/core");
   fetchBundleData,
   fetchBundlesForProduct,
   fetchShopCustomCss,
+  fnv1a,
   formatCents,
   formatCountdown,
   formatMoney,
   formatUnitPrice,
-  getABTestAssignment,
   getActiveTier,
+  getLinkGroupAssignment,
   hasConsent,
   injectCustomCss,
   mergeWidgetConfig,
@@ -1539,6 +1573,7 @@ var import_core13 = require("@lime-bundles/core");
   parseMetaobjectBundle,
   parseMetaobjectBundleStrict,
   percentageDiscountUnit,
+  pickVariantFromWeights,
   reportAddToCart,
   reportImpression,
   sanitizeCustomCss,