@moonbase.sh/storefront-api 3.9.0 → 3.10.0

package/README.md

@@ -110,10 +110,10 @@ another tenant's) arrives as the same `NotFoundError`, so that a signed-in
 customer cannot use it to enumerate a merchant's group IDs. Joining twice
 succeeds and changes nothing.
 
-### Captchas on sign-up
+### Captchas on sign-up and newsletter sign-ups
 
-A merchant can ask customers to solve a captcha before they sign up. The vendor
-says whether this store does:
+A merchant can ask customers to solve a captcha before they sign up or subscribe
+to the newsletter. The vendor says whether this store does:
 
 ```ts
 const vendor = await client.vendor.get()
@@ -172,6 +172,13 @@ refused with `CaptchaRequiredError` (a `MoonbaseError`). A site with a
 Content-Security-Policy has to allow the store's `https://<account-id>.moonbase.sh`
 in `frame-src`.
 
+A newsletter sign-up works the same way, with a frame drawn for
+`action=subscribe` (a solution is only good for the action it was drawn for):
+
+```ts
+await client.communications.subscribe({ email: 'jane@example.com', captchaToken })
+```
+
 ### Where a customer came from
 
 Pass the UTM tags, ad click IDs and referrer the visitor arrived with, the same