@liquidcommerce/elements-sdk 2.5.6-beta.1 → 2.5.6-beta.10

package/docs/EVENTS.md

@@ -293,10 +293,13 @@ window.addEventListener('lce:actions.cart_loaded', function(event) {
 'lce:actions.checkout_submit_completed' // → "SALE COMPLETED! 🎉"
 'lce:actions.checkout_submit_failed' // → "Sale lost - fix the issue!"
 
-// Form updates
+// Form updates (Security: returns boolean only, no sensitive data)
 'lce:actions.checkout_customer_information_updated' // → "Customer filling out details"
+// Data: boolean (true) - No customer data exposed for security
 'lce:actions.checkout_billing_information_updated' // → "Payment info being entered"
+// Data: boolean (true) - No billing data exposed for security
 'lce:actions.checkout_gift_information_updated' // → "Gift recipient info updated"
+// Data: boolean (true) - No recipient data exposed for security
 
 // Checkout options
 'lce:actions.checkout_is_gift_toggled' // → "Customer toggled gift option"
@@ -313,7 +316,37 @@ window.addEventListener('lce:actions.cart_loaded', function(event) {
 'lce:actions.checkout_tip_updated' // → "Customer updated delivery tip"
 ```
 
-**Important Note on Checkout Personalization:**  
+**🔒 Security Note on Form Update Events:**
+The following events return only a boolean `true` value instead of customer data for security reasons:
+- `checkout_customer_information_updated` - No customer contact details exposed
+- `checkout_billing_information_updated` - No payment or billing address details exposed
+- `checkout_gift_information_updated` - No gift recipient details exposed
+
+This design prevents malicious scripts from intercepting sensitive customer information (names, emails, phone numbers, addresses, etc.) while still allowing you to track form completion for analytics. **This is intentional and prioritizes customer privacy and security.**
+
+```javascript
+// ✅ Correct: Track form completion securely
+window.addEventListener('lce:actions.checkout_customer_information_updated', function(event) {
+  const completed = event.detail.data; // boolean: true
+
+  // Track the milestone without exposing customer data
+  analytics.track('Checkout Step Completed', { step: 'customer_info' });
+  updateProgressBar('customer_info');
+});
+
+window.addEventListener('lce:actions.checkout_billing_information_updated', function(event) {
+  const completed = event.detail.data; // boolean: true
+
+  // Track billing form completion
+  analytics.track('Checkout Step Completed', { step: 'billing_info' });
+  updateProgressBar('billing_info');
+});
+
+// 🚫 You will NOT receive customer data like names, emails, addresses, etc.
+// This protects your customers from malicious scripts and data breaches.
+```
+
+**Important Note on Checkout Personalization:**
 Personalization cannot be edited during checkout - only removed. This is by design to prevent order processing complications. If a customer wants to modify personalization, they must return to the cart. The checkout only displays personalization details and provides a remove option.
 
 #### Checkout Details Event Data
@@ -432,48 +465,48 @@ These events fire when programmatic actions succeed or fail, giving you complete
 'lce:actions.cart_product_add_success' // → "Products successfully added to cart"
 // Data: { itemsAdded: number, identifiers: string[] }
 
-'lce:actions.cart_product_add_failed' // → "Products could not be added to cart" 
+'lce:actions.cart_product_add_failed' // → "Products could not be added to cart"
 // Data: { identifiers: string[], error: string }
 
 // Promo code feedback
 'lce:actions.cart_promo_code_applied' // → "Promo code worked - show success!"
-// Data: { applied: true, discountAmount?: number, newTotal?: number }
+// Data: { discountAmount?: number, newTotal?: number }
 
 'lce:actions.cart_promo_code_removed' // → "Promo code removed successfully"
-// Data: { applied: false }
+// Data: { newTotal?: number }
 
 'lce:actions.cart_promo_code_failed' // → "Promo code didn't work - show error"
-// Data: { attempted: true, error: string }
+// Data: { error: string }
 ```
 
 #### 💳 **Checkout Action Feedback**
 ```javascript
 // Product addition feedback
 'lce:actions.checkout_product_add_success' // → "Products added to checkout successfully"
-// Data: { itemsAdded: number, identifiers: string[] }
+// Data: { itemsAdded: number, identifiers: string[], isPresale?: boolean }
 
 'lce:actions.checkout_product_add_failed' // → "Could not add products to checkout"
-// Data: { identifiers: string[], error: string }
+// Data: { identifiers: string[], error: string, isPresale?: boolean }
 
 // Promo code feedback
 'lce:actions.checkout_promo_code_applied' // → "Checkout discount applied!"
-// Data: { applied: true, discountAmount?: number, newTotal?: number }
+// Data: { discountAmount?: number, newTotal?: number }
 
 'lce:actions.checkout_promo_code_removed' // → "Checkout discount removed"
-// Data: { applied: false }
+// Data: { newTotal?: number }
 
 'lce:actions.checkout_promo_code_failed' // → "Checkout discount failed"
-// Data: { attempted: true, error: string }
+// Data: { error: string }
 
-// Gift card feedback  
+// Gift card feedback
 'lce:actions.checkout_gift_card_applied' // → "Gift card applied successfully!"
-// Data: { applied: true, newTotal?: number }
+// Data: { newTotal?: number }
 
 'lce:actions.checkout_gift_card_removed' // → "Gift card removed"
-// Data: { applied: false }
+// Data: { newTotal?: number }
 
 'lce:actions.checkout_gift_card_failed' // → "Gift card could not be applied"
-// Data: { attempted: true, error: string }
+// Data: { error: string }
 ```
 
 #### 🔒 **Security Note**
@@ -484,12 +517,12 @@ Action feedback events **never expose sensitive information** like promo codes o
 // Fire the action (simple)
 await actions.cart.applyPromoCode('SECRET20');
 
-// Get feedback (secure) 
+// Get feedback (secure)
 window.addEventListener('lce:actions.cart_promo_code_applied', function(event) {
-  const { applied, discountAmount, newTotal } = event.detail.data;
-  // ✅ You get: success status, discount amount, new total
+  const { discountAmount, newTotal } = event.detail.data;
+  // ✅ You get: discount amount, new total
   // 🚫 You DON'T get: 'SECRET20' (secure!)
-  
+
   showSuccessMessage(`🎉 Discount applied! You saved $${discountAmount}!`);
   updateCartTotal(newTotal);
 });
@@ -506,32 +539,32 @@ async function applyPromoCodeWithFeedback(code) {
   
   // Set up event listeners BEFORE firing action
   const successHandler = (event) => {
-    const { applied, discountAmount, newTotal } = event.detail.data;
+    const { discountAmount, newTotal } = event.detail.data;
     hideLoadingMessage();
     showSuccessMessage(`🎉 Success! You saved $${discountAmount}!`);
     updatePriceDisplay(newTotal);
-    
+
     // Track successful promo usage
-    analytics.track('Promo Applied', { 
+    analytics.track('Promo Applied', {
       discount: discountAmount,
-      newTotal: newTotal 
+      newTotal: newTotal
     });
-    
+
     // Clean up
     cleanup();
   };
-  
+
   const failureHandler = (event) => {
-    const { attempted, error } = event.detail.data;
+    const { error } = event.detail.data;
     hideLoadingMessage();
     showErrorMessage('Promo code could not be applied. Please try again.');
-    
+
     // Track failed attempts (for optimization)
     analytics.track('Promo Failed', { error: error });
-    
+
     // Maybe suggest alternatives
     suggestAlternativePromos();
-    
+
     // Clean up
     cleanup();
   };

package/docs/THEMING.md

@@ -284,7 +284,6 @@ interface ICheckoutComponent {
     thankYouButtonText: string;
     drawerHeaderText: string;
     placeOrderButtonText: string;
-    placeOrderButtonShowRequiredFields: boolean;
   };
 }
 ```
@@ -319,8 +318,7 @@ customTheme: {
       exitUrl: '/',
       thankYouButtonText: 'Continue Shopping',
       drawerHeaderText: 'Checkout',
-      placeOrderButtonText: 'Place Order',
-      placeOrderButtonShowRequiredFields: true
+      placeOrderButtonText: 'Place Order'
     }
   }
 }
@@ -441,8 +439,7 @@ const client = await Elements('YOUR_API_KEY', {
         exitUrl: '/',
         thankYouButtonText: 'Continue Shopping',
         drawerHeaderText: 'Checkout',
-        placeOrderButtonText: 'Place Order',
-        placeOrderButtonShowRequiredFields: true
+        placeOrderButtonText: 'Place Order'
       }
     },
     address: {

package/package.json

@@ -3,7 +3,7 @@
   "description": "LiquidCommerce Elements SDK",
   "license": "UNLICENSED",
   "author": "LiquidCommerce Team",
-  "version": "2.5.6-beta.1",
+  "version": "2.5.6-beta.10",
   "homepage": "https://docs.liquidcommerce.co/elements-sdk",
   "repository": {
     "type": "git",
@@ -50,7 +50,7 @@
     "type-check": "tsc --noEmit",
     "lint": "pnpm biome lint --write",
     "format": "biome format --write",
-    "check": "pnpm biome check --write",
+    "check": "pnpm biome check --write .",
     "fl": "pnpm check && pnpm build:dev",
     "changelog": "conventional-changelog -p angular -i CHANGELOG.md -s",
     "clean": "rm -rf dist umd",
@@ -71,7 +71,7 @@
     "embeddable commerce"
   ],
   "devDependencies": {
-    "@biomejs/biome": "2.3.3",
+    "@biomejs/biome": "2.3.5",
     "@commitlint/cli": "^20.1.0",
     "@commitlint/config-conventional": "^20.0.0",
     "@rollup/plugin-alias": "^6.0.0",
@@ -83,18 +83,18 @@
     "@semantic-release/changelog": "^6.0.3",
     "@semantic-release/commit-analyzer": "^13.0.1",
     "@semantic-release/git": "^10.0.1",
-    "@semantic-release/github": "^12.0.1",
+    "@semantic-release/github": "^12.0.2",
     "@semantic-release/npm": "^13.1.1",
     "@semantic-release/release-notes-generator": "^14.1.0",
     "@types/core-js": "^2.5.8",
-    "@types/node": "^24.10.0",
+    "@types/node": "^24.10.1",
     "conventional-changelog-cli": "^5.0.0",
     "husky": "^9.1.7",
     "process": "^0.11.10",
-    "rollup": "^4.52.5",
+    "rollup": "^4.53.2",
     "rollup-obfuscator": "^4.1.1",
     "rollup-plugin-typescript2": "^0.36.0",
-    "semantic-release": "^25.0.1",
+    "semantic-release": "^25.0.2",
     "ts-node": "^10.9.2",
     "typescript": "^5.9.3"
   },