@usethrottle/catalog 1.1.0 → 1.3.0

package/dist/{chunk-4ORXUW2U.cjs → chunk-2YQNMBDI.cjs}

@@ -1,9 +1,24 @@
-"use strict";Object.defineProperty(exports, "__esModule", {value: true}); function _nullishCoalesce(lhs, rhsFn) { if (lhs != null) { return lhs; } else { return rhsFn(); } } function _optionalChain(ops) { let lastAccessLHS = undefined; let value = ops[0]; let i = 1; while (i < ops.length) { const op = ops[i]; const fn = ops[i + 1]; i += 2; if ((op === 'optionalAccess' || op === 'optionalCall') && value == null) { return undefined; } if (op === 'access' || op === 'optionalAccess') { lastAccessLHS = value; value = fn(value); } else if (op === 'call' || op === 'optionalCall') { value = fn((...args) => value.call(lastAccessLHS, ...args)); lastAccessLHS = undefined; } } return value; }
+"use strict";Object.defineProperty(exports, "__esModule", {value: true}); function _interopRequireWildcard(obj) { if (obj && obj.__esModule) { return obj; } else { var newObj = {}; if (obj != null) { for (var key in obj) { if (Object.prototype.hasOwnProperty.call(obj, key)) { newObj[key] = obj[key]; } } } newObj.default = obj; return newObj; } } function _nullishCoalesce(lhs, rhsFn) { if (lhs != null) { return lhs; } else { return rhsFn(); } } function _optionalChain(ops) { let lastAccessLHS = undefined; let value = ops[0]; let i = 1; while (i < ops.length) { const op = ops[i]; const fn = ops[i + 1]; i += 2; if ((op === 'optionalAccess' || op === 'optionalCall') && value == null) { return undefined; } if (op === 'access' || op === 'optionalAccess') { lastAccessLHS = value; value = fn(value); } else if (op === 'call' || op === 'optionalCall') { value = fn((...args) => value.call(lastAccessLHS, ...args)); lastAccessLHS = undefined; } } return value; }
 
 var _chunkETV4XYOVcjs = require('./chunk-ETV4XYOV.cjs');
 
 // src/version.ts
-var SDK_VERSION = true ? "1.1.0" : "0.0.0-dev";
+var SDK_VERSION = true ? "1.3.0" : "0.0.0-dev";
+
+// src/index.ts
+var _money = require('@usethrottle/money'); var money = _interopRequireWildcard(_money);
+
+
+
+
+
+
+
+
+
+
+
+
 
 // src/errors/catalog-error.ts
 var _errors = require('@usethrottle/errors');
@@ -141,6 +156,7 @@ var ERROR_KINDS = Object.freeze({
   CUSTOMER_TOKEN_INVALID: "customerToken",
   ORIGIN_NOT_ALLOWED: "origin",
   SERVER_KEY_IN_BROWSER: "origin",
+  KEY_NOT_ALLOWED_IN_URL: "origin",
   NOT_FOUND: "base",
   RATE_LIMITED: "rateLimited",
   STOREFRONT_UNAVAILABLE: "base",
@@ -189,6 +205,8 @@ var ERROR_KINDS = Object.freeze({
   cart_session_not_found: "base",
   origin_not_allowed: "origin",
   checkout_unavailable: "base",
+  cart_owner_mismatch: "base",
+  cart_resolver_mismatch: "base",
   // Client codes.
   TIMEOUT: "timeout",
   NETWORK_ERROR: "network",
@@ -434,6 +452,10 @@ function resolveOptions(options) {
   const publishableKey = checkKey(options.publishableKey);
   const timeoutMs = checkTimeout(_nullishCoalesce(options.timeoutMs, () => ( DEFAULT_TIMEOUT_MS)));
   const retry = options.indexingRetry;
+  const keyInQuery = options.keyInQuery;
+  if (keyInQuery !== void 0 && typeof keyInQuery !== "boolean") {
+    throw optionError("INVALID_REQUEST", "keyInQuery must be a boolean.");
+  }
   return {
     publishableKey,
     baseUrl: checkBaseUrl(_nullishCoalesce(options.baseUrl, () => ( DEFAULT_BASE_URL))).replace(
@@ -450,7 +472,8 @@ function resolveOptions(options) {
     cache: options.cache,
     cacheScope: options.cacheScope,
     indexingMaxWaitSeconds: retry === false ? null : _nullishCoalesce(_optionalChain([retry, 'optionalAccess', _14 => _14.maxWaitSeconds]), () => ( INDEXING_MAX_WAIT_S)),
-    headers: checkHeaders(options.headers)
+    headers: checkHeaders(options.headers),
+    keyInQuery: keyInQuery === true
   };
 }
 
@@ -516,6 +539,25 @@ function guarded(work, callerSignal, timeoutMs) {
     );
   });
 }
+var KEY_VALUE = /([?&]key=)[^&\s"']*/gu;
+var KEPT_DETAILS = ["name", "code", "errno", "type"];
+var MAX_REDACT_DEPTH = 5;
+function redactKey(cause, depth = 0) {
+  if (typeof cause !== "object" || cause === null) return cause;
+  const source = cause;
+  if (typeof source.message !== "string") return cause;
+  if (depth >= MAX_REDACT_DEPTH) return void 0;
+  const original = source.message;
+  const message = original.replace(KEY_VALUE, "$1[redacted]");
+  const nested = redactKey(source.cause, depth + 1);
+  if (message === original && nested === source.cause) return cause;
+  const copy = new Error(message);
+  for (const name of KEPT_DETAILS) {
+    if (source[name] !== void 0) copy[name] = source[name];
+  }
+  if (nested !== void 0) copy.cause = nested;
+  return copy;
+}
 function send(fetchFn, url, init, signal, timeoutMs) {
   return guarded(
     async (attemptSignal) => {
@@ -526,13 +568,13 @@ function send(fetchFn, url, init, signal, timeoutMs) {
           signal: attemptSignal
         });
       } catch (cause) {
-        throw new NetworkError({ cause });
+        throw new NetworkError({ cause: redactKey(cause) });
       }
       let text;
       try {
         text = await response.text();
       } catch (cause) {
-        throw new NetworkError({ cause });
+        throw new NetworkError({ cause: redactKey(cause) });
       }
       return { status: response.status, headers: response.headers, text };
     },
@@ -584,6 +626,8 @@ function createTransport(o) {
         pairs.push(["currency", currency]);
       if (locale !== void 0) pairs.push(["locale", locale]);
     }
+    const keyInUrl = isGet && o.keyInQuery;
+    if (keyInUrl) pairs = [..._nullishCoalesce(pairs, () => ( [])), ["key", o.publishableKey]];
     const url = o.baseUrl + spec.path + (pairs === void 0 ? "" : queryString(pairs));
     const timeoutMs = call.timeoutMs === void 0 ? o.timeoutMs : checkTimeout(call.timeoutMs);
     if (isGet && (spec.body !== void 0 || _optionalChain([call, 'access', _24 => _24.fetchInit, 'optionalAccess', _25 => _25.body]) !== void 0)) {
@@ -591,20 +635,22 @@ function createTransport(o) {
     }
     let cacheKey;
     let cached;
-    if (isGet && o.cache !== void 0 && spec.ifNoneMatch === void 0) {
+    const bypassCache = spec.tokenFree === true && keyInUrl;
+    if (isGet && !bypassCache && o.cache !== void 0 && spec.ifNoneMatch === void 0) {
       try {
-        cacheKey = `${url}\0${o.cacheScope === void 0 ? "" : o.cacheScope()}`;
+        const scope = o.cacheScope === void 0 || spec.tokenFree === true ? "" : o.cacheScope();
+        cacheKey = `${url}\0${scope}`;
         cached = o.cache.get(cacheKey);
       } catch (e3) {
         cacheKey = void 0;
       }
     }
-    const ifNoneMatch = _nullishCoalesce(spec.ifNoneMatch, () => ( _optionalChain([cached, 'optionalAccess', _26 => _26.etag])));
+    const ifNoneMatch = bypassCache ? void 0 : _nullishCoalesce(spec.ifNoneMatch, () => ( _optionalChain([cached, 'optionalAccess', _26 => _26.etag])));
     const headers = {
       ...o.headers,
-      accept: "application/json",
-      "x-catalog-key": o.publishableKey
+      accept: "application/json"
     };
+    if (!keyInUrl) headers["x-catalog-key"] = o.publishableKey;
     if (!isGet) headers["content-type"] = "application/json";
     if (ifNoneMatch !== void 0) headers["if-none-match"] = ifNoneMatch;
     if (spec.idempotencyKey !== void 0)
@@ -612,7 +658,7 @@ function createTransport(o) {
     const body = isGet ? void 0 : JSON.stringify(_nullishCoalesce(spec.body, () => ( {})));
     const source = o.customerToken;
     const tokenRead = () => source === void 0 ? Promise.resolve(null) : guarded(() => readToken(source), signal, timeoutMs);
-    const first = spec.customerToken === "none" ? null : await tokenRead();
+    const first = spec.customerToken === "none" || spec.tokenFree === true ? null : await tokenRead();
     if (first === false && spec.tokenFallback === "throw") {
       throw new CustomerTokenInvalidError({
         code: "CUSTOMER_TOKEN_INVALID",
@@ -702,6 +748,9 @@ function createTransport(o) {
 function createCartSession(options, sessionId, throttleBaseUrl) {
   const base = (_nullishCoalesce(throttleBaseUrl, () => ( THROTTLE_API_URL))).replace(/\/+$/u, "");
   async function call(method, tail, body, opts, accept) {
+    return (await exchange(method, tail, body, opts, accept)).data;
+  }
+  async function exchange(method, tail, body, opts, accept) {
     const signal = _optionalChain([opts, 'optionalAccess', _30 => _30.signal]);
     if (_optionalChain([signal, 'optionalAccess', _31 => _31.aborted])) throw signal.reason;
     const timeoutMs = _optionalChain([opts, 'optionalAccess', _32 => _32.timeoutMs]) === void 0 ? options.timeoutMs : checkTimeout(opts.timeoutMs);
@@ -739,7 +788,10 @@ function createCartSession(options, sessionId, throttleBaseUrl) {
           retryable: false
         });
       }
-      return data;
+      return {
+        data,
+        meta: parsed.meta
+      };
     }
     throw toCatalogError(mapInput);
   }
@@ -782,6 +834,27 @@ function createCartSession(options, sessionId, throttleBaseUrl) {
         opts,
         (data) => isHttpUrl(data.checkoutUrl)
       );
+    },
+    absorb: async (fromSessionId, opts) => {
+      const { data, meta } = await exchange(
+        "POST",
+        () => "/absorb",
+        { fromSessionId },
+        opts
+      );
+      if (typeof data.cart !== "object" || data.cart === null)
+        throw new CatalogError({
+          code: "INVALID_RESPONSE",
+          message: "Throttle answered an absorb without a cart.",
+          statusCode: 200,
+          source: "throttle",
+          retryable: false
+        });
+      const warnings = _optionalChain([meta, 'optionalAccess', _36 => _36.warnings]);
+      return {
+        cart: data.cart,
+        warnings: Array.isArray(warnings) ? warnings : []
+      };
     }
   };
 }
@@ -810,7 +883,7 @@ function createCarts(transport, options) {
     // The input's own currency and locale win over the call's and the
     // client's; the return URLs are sent unchanged (P6-R2).
     create: async (input, opts) => {
-      if (_optionalChain([opts, 'optionalAccess', _36 => _36.signal, 'optionalAccess', _37 => _37.aborted])) throw opts.signal.reason;
+      if (_optionalChain([opts, 'optionalAccess', _37 => _37.signal, 'optionalAccess', _38 => _38.aborted])) throw opts.signal.reason;
       for (const field of [
         "returnUrl",
         "cancelUrl",
@@ -833,12 +906,12 @@ function createCarts(transport, options) {
           customerToken: "optional",
           tokenFallback: "throw",
           featureRoute: true,
-          ..._optionalChain([opts, 'optionalAccess', _38 => _38.idempotencyKey]) === void 0 ? {} : { idempotencyKey: opts.idempotencyKey }
+          ..._optionalChain([opts, 'optionalAccess', _39 => _39.idempotencyKey]) === void 0 ? {} : { idempotencyKey: opts.idempotencyKey }
         },
         opts
       );
     },
-    session: (sessionId, opts) => createCartSession(options, sessionId, _optionalChain([opts, 'optionalAccess', _39 => _39.throttleBaseUrl]))
+    session: (sessionId, opts) => createCartSession(options, sessionId, _optionalChain([opts, 'optionalAccess', _40 => _40.throttleBaseUrl]))
   };
 }
 
@@ -879,11 +952,11 @@ function productsQuery(query = {}) {
     featured: query.featured,
     handles: query.handles,
     skus: query.skus,
-    year: _optionalChain([vehicle, 'optionalAccess', _40 => _40.year]),
-    make: _optionalChain([vehicle, 'optionalAccess', _41 => _41.make]),
-    model: _optionalChain([vehicle, 'optionalAccess', _42 => _42.model]),
-    submodel: _optionalChain([vehicle, 'optionalAccess', _43 => _43.submodel]),
-    engine: _optionalChain([vehicle, 'optionalAccess', _44 => _44.engine]),
+    year: _optionalChain([vehicle, 'optionalAccess', _41 => _41.year]),
+    make: _optionalChain([vehicle, 'optionalAccess', _42 => _42.make]),
+    model: _optionalChain([vehicle, 'optionalAccess', _43 => _43.model]),
+    submodel: _optionalChain([vehicle, 'optionalAccess', _44 => _44.submodel]),
+    engine: _optionalChain([vehicle, 'optionalAccess', _45 => _45.engine]),
     sort: query.sort,
     limit: query.limit,
     page: query.page,
@@ -921,7 +994,7 @@ function createProducts(transport) {
         path: `${SF}/products/${pathSegment(handle)}`,
         // Always the full product (P6-R18).
         query: buildQuery(
-          { fields: "full", include: commaList(_optionalChain([opts, 'optionalAccess', _45 => _45.include])) },
+          { fields: "full", include: commaList(_optionalChain([opts, 'optionalAccess', _46 => _46.include])) },
           ["fields", "include"]
         ),
         customerToken: "optional",
@@ -937,7 +1010,7 @@ function createProducts(transport) {
         method: "GET",
         path: `${SF}/products/${pathSegment(handle)}/related`,
         query: buildQuery(
-          { limit: _optionalChain([opts, 'optionalAccess', _46 => _46.limit]), fields: commaList(_optionalChain([opts, 'optionalAccess', _47 => _47.fields])) },
+          { limit: _optionalChain([opts, 'optionalAccess', _47 => _47.limit]), fields: commaList(_optionalChain([opts, 'optionalAccess', _48 => _48.fields])) },
           ["limit", "fields"]
         ),
         customerToken: "optional",
@@ -973,8 +1046,10 @@ function createSuggest(transport) {
     {
       method: "GET",
       path: `${SF}/suggest`,
-      query: buildQuery({ q, limit: _optionalChain([opts, 'optionalAccess', _48 => _48.limit]) }, ["q", "limit"]),
-      customerToken: "optional",
+      query: buildQuery({ q, limit: _optionalChain([opts, 'optionalAccess', _49 => _49.limit]) }, ["q", "limit"]),
+      // Never a customer token (P8-R22): list prices for everyone.
+      customerToken: "none",
+      tokenFree: true,
       tokenFallback: "anonymous",
       featureRoute: true,
       context: "priced"
@@ -996,10 +1071,10 @@ function createReviews(transport) {
         path: reviewsPath(handle),
         query: buildQuery(
           {
-            sort: _optionalChain([opts, 'optionalAccess', _49 => _49.sort]),
-            rating: _optionalChain([opts, 'optionalAccess', _50 => _50.rating]),
-            limit: _optionalChain([opts, 'optionalAccess', _51 => _51.limit]),
-            cursor: _optionalChain([opts, 'optionalAccess', _52 => _52.cursor])
+            sort: _optionalChain([opts, 'optionalAccess', _50 => _50.sort]),
+            rating: _optionalChain([opts, 'optionalAccess', _51 => _51.rating]),
+            limit: _optionalChain([opts, 'optionalAccess', _52 => _52.limit]),
+            cursor: _optionalChain([opts, 'optionalAccess', _53 => _53.cursor])
           },
           ["sort", "rating", "limit", "cursor"]
         ),
@@ -1031,7 +1106,7 @@ function createReviews(transport) {
         customerToken: "required",
         tokenFallback: "throw",
         featureRoute: false,
-        ..._optionalChain([opts, 'optionalAccess', _53 => _53.idempotencyKey]) === void 0 ? {} : { idempotencyKey: opts.idempotencyKey }
+        ..._optionalChain([opts, 'optionalAccess', _54 => _54.idempotencyKey]) === void 0 ? {} : { idempotencyKey: opts.idempotencyKey }
       },
       opts
     )
@@ -1047,7 +1122,7 @@ function createCategories(transport) {
       {
         method: "GET",
         path: `${SF2}/categories`,
-        query: buildQuery({ depth: _optionalChain([opts, 'optionalAccess', _54 => _54.depth]) }, ["depth"]),
+        query: buildQuery({ depth: _optionalChain([opts, 'optionalAccess', _55 => _55.depth]) }, ["depth"]),
         customerToken: "none",
         tokenFallback: "anonymous",
         featureRoute: true,
@@ -1076,7 +1151,7 @@ function createTags(transport) {
       {
         method: "GET",
         path: `${SF2}/tags`,
-        query: buildQuery({ q: _optionalChain([opts, 'optionalAccess', _55 => _55.q]), limit: _optionalChain([opts, 'optionalAccess', _56 => _56.limit]) }, ["q", "limit"]),
+        query: buildQuery({ q: _optionalChain([opts, 'optionalAccess', _56 => _56.q]), limit: _optionalChain([opts, 'optionalAccess', _57 => _57.limit]) }, ["q", "limit"]),
         customerToken: "none",
         tokenFallback: "anonymous",
         featureRoute: true
@@ -1092,7 +1167,7 @@ function createCollections(transport) {
       {
         method: "GET",
         path: `${SF2}/collections`,
-        query: buildQuery({ limit: _optionalChain([opts, 'optionalAccess', _57 => _57.limit]), cursor: _optionalChain([opts, 'optionalAccess', _58 => _58.cursor]) }, [
+        query: buildQuery({ limit: _optionalChain([opts, 'optionalAccess', _58 => _58.limit]), cursor: _optionalChain([opts, 'optionalAccess', _59 => _59.cursor]) }, [
           "limit",
           "cursor"
         ]),
@@ -1178,4 +1253,15 @@ function createCatalogClient(options) {
 
 
 
-exports.SDK_VERSION = SDK_VERSION; exports.CatalogError = CatalogError; exports.RateLimitedError = RateLimitedError; exports.OriginNotAllowedError = OriginNotAllowedError; exports.CustomerTokenInvalidError = CustomerTokenInvalidError; exports.CartLineError = CartLineError; exports.TimeoutError = TimeoutError; exports.NetworkError = NetworkError; exports.FeatureUnavailableError = FeatureUnavailableError; exports.isCatalogError = isCatalogError; exports.DEFAULT_BASE_URL = DEFAULT_BASE_URL; exports.THROTTLE_CHECKOUT_URL = THROTTLE_CHECKOUT_URL; exports.RATE_LIMIT_DEFAULT_RETRY_S = RATE_LIMIT_DEFAULT_RETRY_S; exports.STALE_MS = STALE_MS; exports.CACHE_MAX_ENTRIES = CACHE_MAX_ENTRIES; exports.SUGGEST_DEBOUNCE_MS = SUGGEST_DEBOUNCE_MS; exports.SUGGEST_MIN_CHARS = SUGGEST_MIN_CHARS; exports.INDEXING_REVALIDATE_MS = INDEXING_REVALIDATE_MS; exports.CACHE_TAG = CACHE_TAG; exports.TAG_MAX_CHARS = TAG_MAX_CHARS; exports.DEFAULT_REVALIDATE_S = DEFAULT_REVALIDATE_S; exports.LIST_PAGE_SIZE = LIST_PAGE_SIZE; exports.LIST_MAX_HANDLES = LIST_MAX_HANDLES; exports.CATEGORY_TREE_MAX_DEPTH = CATEGORY_TREE_MAX_DEPTH; exports.createCatalogClient = createCatalogClient;
+
+
+
+
+
+
+
+
+
+
+
+exports.SDK_VERSION = SDK_VERSION; exports.CatalogError = CatalogError; exports.RateLimitedError = RateLimitedError; exports.OriginNotAllowedError = OriginNotAllowedError; exports.CustomerTokenInvalidError = CustomerTokenInvalidError; exports.CartLineError = CartLineError; exports.TimeoutError = TimeoutError; exports.NetworkError = NetworkError; exports.FeatureUnavailableError = FeatureUnavailableError; exports.isCatalogError = isCatalogError; exports.DEFAULT_BASE_URL = DEFAULT_BASE_URL; exports.THROTTLE_CHECKOUT_URL = THROTTLE_CHECKOUT_URL; exports.RATE_LIMIT_DEFAULT_RETRY_S = RATE_LIMIT_DEFAULT_RETRY_S; exports.STALE_MS = STALE_MS; exports.CACHE_MAX_ENTRIES = CACHE_MAX_ENTRIES; exports.SUGGEST_DEBOUNCE_MS = SUGGEST_DEBOUNCE_MS; exports.SUGGEST_MIN_CHARS = SUGGEST_MIN_CHARS; exports.INDEXING_REVALIDATE_MS = INDEXING_REVALIDATE_MS; exports.CACHE_TAG = CACHE_TAG; exports.TAG_MAX_CHARS = TAG_MAX_CHARS; exports.DEFAULT_REVALIDATE_S = DEFAULT_REVALIDATE_S; exports.LIST_PAGE_SIZE = LIST_PAGE_SIZE; exports.LIST_MAX_HANDLES = LIST_MAX_HANDLES; exports.CATEGORY_TREE_MAX_DEPTH = CATEGORY_TREE_MAX_DEPTH; exports.createCatalogClient = createCatalogClient; exports.money = money; exports.CURRENCIES = _money.CURRENCIES; exports.UnknownCurrencyError = _money.UnknownCurrencyError; exports.currencySymbol = _money.currencySymbol; exports.formatMoney = _money.formatMoney; exports.isKnownCurrency = _money.isKnownCurrency; exports.minorUnitsOf = _money.minorUnitsOf; exports.moneyValue = _money.moneyValue; exports.parseMoney = _money.parseMoney; exports.toDecimalString = _money.toDecimalString; exports.toMinor = _money.toMinor;

package/dist/{chunk-JK2UY4CD.js → chunk-3DLH56OX.js}

@@ -3,7 +3,22 @@ import {
 } from "./chunk-PKBMQBKP.js";
 
 // src/version.ts
-var SDK_VERSION = true ? "1.1.0" : "0.0.0-dev";
+var SDK_VERSION = true ? "1.3.0" : "0.0.0-dev";
+
+// src/index.ts
+import * as money from "@usethrottle/money";
+import {
+  CURRENCIES,
+  UnknownCurrencyError,
+  currencySymbol,
+  formatMoney,
+  isKnownCurrency,
+  minorUnitsOf,
+  moneyValue,
+  parseMoney,
+  toDecimalString,
+  toMinor
+} from "@usethrottle/money";
 
 // src/errors/catalog-error.ts
 import { ThrottleError } from "@usethrottle/errors";
@@ -141,6 +156,7 @@ var ERROR_KINDS = Object.freeze({
   CUSTOMER_TOKEN_INVALID: "customerToken",
   ORIGIN_NOT_ALLOWED: "origin",
   SERVER_KEY_IN_BROWSER: "origin",
+  KEY_NOT_ALLOWED_IN_URL: "origin",
   NOT_FOUND: "base",
   RATE_LIMITED: "rateLimited",
   STOREFRONT_UNAVAILABLE: "base",
@@ -189,6 +205,8 @@ var ERROR_KINDS = Object.freeze({
   cart_session_not_found: "base",
   origin_not_allowed: "origin",
   checkout_unavailable: "base",
+  cart_owner_mismatch: "base",
+  cart_resolver_mismatch: "base",
   // Client codes.
   TIMEOUT: "timeout",
   NETWORK_ERROR: "network",
@@ -434,6 +452,10 @@ function resolveOptions(options) {
   const publishableKey = checkKey(options.publishableKey);
   const timeoutMs = checkTimeout(options.timeoutMs ?? DEFAULT_TIMEOUT_MS);
   const retry = options.indexingRetry;
+  const keyInQuery = options.keyInQuery;
+  if (keyInQuery !== void 0 && typeof keyInQuery !== "boolean") {
+    throw optionError("INVALID_REQUEST", "keyInQuery must be a boolean.");
+  }
   return {
     publishableKey,
     baseUrl: checkBaseUrl(options.baseUrl ?? DEFAULT_BASE_URL).replace(
@@ -450,7 +472,8 @@ function resolveOptions(options) {
     cache: options.cache,
     cacheScope: options.cacheScope,
     indexingMaxWaitSeconds: retry === false ? null : retry?.maxWaitSeconds ?? INDEXING_MAX_WAIT_S,
-    headers: checkHeaders(options.headers)
+    headers: checkHeaders(options.headers),
+    keyInQuery: keyInQuery === true
   };
 }
 
@@ -516,6 +539,25 @@ function guarded(work, callerSignal, timeoutMs) {
     );
   });
 }
+var KEY_VALUE = /([?&]key=)[^&\s"']*/gu;
+var KEPT_DETAILS = ["name", "code", "errno", "type"];
+var MAX_REDACT_DEPTH = 5;
+function redactKey(cause, depth = 0) {
+  if (typeof cause !== "object" || cause === null) return cause;
+  const source = cause;
+  if (typeof source.message !== "string") return cause;
+  if (depth >= MAX_REDACT_DEPTH) return void 0;
+  const original = source.message;
+  const message = original.replace(KEY_VALUE, "$1[redacted]");
+  const nested = redactKey(source.cause, depth + 1);
+  if (message === original && nested === source.cause) return cause;
+  const copy = new Error(message);
+  for (const name of KEPT_DETAILS) {
+    if (source[name] !== void 0) copy[name] = source[name];
+  }
+  if (nested !== void 0) copy.cause = nested;
+  return copy;
+}
 function send(fetchFn, url, init, signal, timeoutMs) {
   return guarded(
     async (attemptSignal) => {
@@ -526,13 +568,13 @@ function send(fetchFn, url, init, signal, timeoutMs) {
           signal: attemptSignal
         });
       } catch (cause) {
-        throw new NetworkError({ cause });
+        throw new NetworkError({ cause: redactKey(cause) });
       }
       let text;
       try {
         text = await response.text();
       } catch (cause) {
-        throw new NetworkError({ cause });
+        throw new NetworkError({ cause: redactKey(cause) });
       }
       return { status: response.status, headers: response.headers, text };
     },
@@ -584,6 +626,8 @@ function createTransport(o) {
         pairs.push(["currency", currency]);
       if (locale !== void 0) pairs.push(["locale", locale]);
     }
+    const keyInUrl = isGet && o.keyInQuery;
+    if (keyInUrl) pairs = [...pairs ?? [], ["key", o.publishableKey]];
     const url = o.baseUrl + spec.path + (pairs === void 0 ? "" : queryString(pairs));
     const timeoutMs = call.timeoutMs === void 0 ? o.timeoutMs : checkTimeout(call.timeoutMs);
     if (isGet && (spec.body !== void 0 || call.fetchInit?.body !== void 0)) {
@@ -591,20 +635,22 @@ function createTransport(o) {
     }
     let cacheKey;
     let cached;
-    if (isGet && o.cache !== void 0 && spec.ifNoneMatch === void 0) {
+    const bypassCache = spec.tokenFree === true && keyInUrl;
+    if (isGet && !bypassCache && o.cache !== void 0 && spec.ifNoneMatch === void 0) {
       try {
-        cacheKey = `${url}\0${o.cacheScope === void 0 ? "" : o.cacheScope()}`;
+        const scope = o.cacheScope === void 0 || spec.tokenFree === true ? "" : o.cacheScope();
+        cacheKey = `${url}\0${scope}`;
         cached = o.cache.get(cacheKey);
       } catch {
         cacheKey = void 0;
       }
     }
-    const ifNoneMatch = spec.ifNoneMatch ?? cached?.etag;
+    const ifNoneMatch = bypassCache ? void 0 : spec.ifNoneMatch ?? cached?.etag;
     const headers = {
       ...o.headers,
-      accept: "application/json",
-      "x-catalog-key": o.publishableKey
+      accept: "application/json"
     };
+    if (!keyInUrl) headers["x-catalog-key"] = o.publishableKey;
     if (!isGet) headers["content-type"] = "application/json";
     if (ifNoneMatch !== void 0) headers["if-none-match"] = ifNoneMatch;
     if (spec.idempotencyKey !== void 0)
@@ -612,7 +658,7 @@ function createTransport(o) {
     const body = isGet ? void 0 : JSON.stringify(spec.body ?? {});
     const source = o.customerToken;
     const tokenRead = () => source === void 0 ? Promise.resolve(null) : guarded(() => readToken(source), signal, timeoutMs);
-    const first = spec.customerToken === "none" ? null : await tokenRead();
+    const first = spec.customerToken === "none" || spec.tokenFree === true ? null : await tokenRead();
     if (first === false && spec.tokenFallback === "throw") {
       throw new CustomerTokenInvalidError({
         code: "CUSTOMER_TOKEN_INVALID",
@@ -702,6 +748,9 @@ function createTransport(o) {
 function createCartSession(options, sessionId, throttleBaseUrl) {
   const base = (throttleBaseUrl ?? THROTTLE_API_URL).replace(/\/+$/u, "");
   async function call(method, tail, body, opts, accept) {
+    return (await exchange(method, tail, body, opts, accept)).data;
+  }
+  async function exchange(method, tail, body, opts, accept) {
     const signal = opts?.signal;
     if (signal?.aborted) throw signal.reason;
     const timeoutMs = opts?.timeoutMs === void 0 ? options.timeoutMs : checkTimeout(opts.timeoutMs);
@@ -739,7 +788,10 @@ function createCartSession(options, sessionId, throttleBaseUrl) {
           retryable: false
         });
       }
-      return data;
+      return {
+        data,
+        meta: parsed.meta
+      };
     }
     throw toCatalogError(mapInput);
   }
@@ -782,6 +834,27 @@ function createCartSession(options, sessionId, throttleBaseUrl) {
         opts,
         (data) => isHttpUrl(data.checkoutUrl)
       );
+    },
+    absorb: async (fromSessionId, opts) => {
+      const { data, meta } = await exchange(
+        "POST",
+        () => "/absorb",
+        { fromSessionId },
+        opts
+      );
+      if (typeof data.cart !== "object" || data.cart === null)
+        throw new CatalogError({
+          code: "INVALID_RESPONSE",
+          message: "Throttle answered an absorb without a cart.",
+          statusCode: 200,
+          source: "throttle",
+          retryable: false
+        });
+      const warnings = meta?.warnings;
+      return {
+        cart: data.cart,
+        warnings: Array.isArray(warnings) ? warnings : []
+      };
     }
   };
 }
@@ -974,7 +1047,9 @@ function createSuggest(transport) {
       method: "GET",
       path: `${SF}/suggest`,
       query: buildQuery({ q, limit: opts?.limit }, ["q", "limit"]),
-      customerToken: "optional",
+      // Never a customer token (P8-R22): list prices for everyone.
+      customerToken: "none",
+      tokenFree: true,
       tokenFallback: "anonymous",
       featureRoute: true,
       context: "priced"
@@ -1177,5 +1252,16 @@ export {
   LIST_PAGE_SIZE,
   LIST_MAX_HANDLES,
   CATEGORY_TREE_MAX_DEPTH,
-  createCatalogClient
+  createCatalogClient,
+  money,
+  CURRENCIES,
+  UnknownCurrencyError,
+  currencySymbol,
+  formatMoney,
+  isKnownCurrency,
+  minorUnitsOf,
+  moneyValue,
+  parseMoney,
+  toDecimalString,
+  toMinor
 };