@asteby/storefront 0.16.1 → 0.17.0

package/dist/{types-DSHzYSHU.d.ts → account-settings-DNcJKOQl.d.ts}

@@ -494,6 +494,10 @@ type Customer = {
     /** Saved fiscal data; `null`/absent when none. */
     fiscal?: FiscalIdentity | null;
     created_at: string;
+    /** Preferred language, one of the store's (contract 1.9). Absent on older servers. */
+    locale?: string | null;
+    /** Notification preferences (contract 1.9). Absent on older servers. */
+    preferences?: CustomerPreferences;
 };
 type CustomerIdentifier = {
     email: string;
@@ -531,6 +535,14 @@ type CustomerCapabilities = {
     fiscal_profiles?: {
         max: number;
     };
+    /** Channels the notification preferences can use (connector installed). Absent on older servers: no preferences section. */
+    notifications?: {
+        channels: string[];
+    };
+    /** The buyer can download their data (`customer.exportData`). Absent on older servers. */
+    data_export?: boolean;
+    /** The buyer can delete their account (`customer.deleteAccount`). Absent on older servers. */
+    account_delete?: boolean;
 };
 /** `GET {gateway}/_token`: what the token in use is and what it can do. Needs no scope. */
 type TokenIntrospection = {
@@ -1385,6 +1397,10 @@ type CustomerUpdateInput = {
     last_name?: string | null;
     phone?: string | null;
     fiscal?: FiscalIdentityInput | null;
+    /** One of the store's languages (`400` with `field: 'locale'` otherwise); `null` clears it. */
+    locale?: string | null;
+    /** Merged by event and channel; `null` restores the defaults. `400` for an event that cannot be turned off. */
+    preferences?: CustomerPreferences | null;
 };
 /** Post-processing: the value must match `pattern`; `group` of it replaces the value. */
 type IdentityCapture = {
@@ -1448,4 +1464,131 @@ type IdentityRulesV1 = {
     fields: IdentityFieldRule[];
 };
 
-export type { IdentityCapture as $, Address as A, CustomerCapabilities as B, Cart as C, CustomerIdentifier as D, CustomerPasswordLoginInput as E, CustomerRegisterInput as F, CustomerRegisterResult as G, CustomerResetPasswordInput as H, CustomerSession as I, CustomerSessionInput as J, CustomerSetPasswordInput as K, CustomerUpdateInput as L, CustomerVerifyRegistrationInput as M, DeclineCode as N, DeliveryInput as O, DeliveryMethod as P, DeliveryOptions as Q, Facet as R, FacetValue as S, FiscalDocumentEvidence as T, FiscalDocumentSource as U, FiscalIdentity as V, FiscalIdentityInput as W, FiscalProfile as X, FiscalProfileInput as Y, FiscalVerification as Z, GeoHint as _, AddressInput as a, ProductOption as a$, IdentityDocumentSpec as a0, IdentityFieldRule as a1, IdentityRulesV1 as a2, IdentityStrategy as a3, Image as a4, InsufficientStockDetails as a5, InsufficientStockLine as a6, InvoiceAction as a7, InvoiceDoc as a8, InvoiceFile as a9, OrderStepKey as aA, OrderStepState as aB, Page as aC, PageInfo as aD, PaymentAction as aE, PaymentAttemptResult as aF, PaymentAttemptStatus as aG, PaymentClient as aH, PaymentClientCsp as aI, PaymentConfig as aJ, PaymentFlow as aK, PaymentInfo as aL, PaymentMethod as aM, PaymentMethods as aN, PaymentNextStep as aO, PaymentOption as aP, PaymentOptionKey as aQ, PaymentPoint as aR, PaymentSubmitInput as aS, PaymentVoucher as aT, PendingPayment as aU, PendingPaymentVoucher as aV, PickupOption as aW, Product as aX, ProductAttributeValue as aY, ProductCategory as aZ, ProductConnection as a_, InvoiceFileKind as aa, InvoiceRequest as ab, InvoiceResult as ac, InvoiceStage as ad, InvoiceSummary as ae, InvoicingCapabilities as af, Location as ag, LocationContacts as ah, LocationKind as ai, LocationListParams as aj, LocationPickup as ak, Menu as al, MenuItem as am, Money as an, MoneyRange as ao, NearestLocation as ap, NextAction as aq, NextActionKind as ar, Order as as, OrderLine as at, OrderPickup as au, OrderProblem as av, OrderProgress as aw, OrderProgressStep as ax, OrderSection as ay, OrderStage as az, Article as b, ProductSort as b0, ProductVariant as b1, PromotionAnnouncement as b2, PromotionReward as b3, PromotionTier as b4, PromotionsList as b5, RecommendationPlacement as b6, Refund as b7, Region as b8, RegionFiscalEntry as b9, UnavailableRateProvider as bA, RegionFiscalId as ba, RegionPaymentMethod as bb, RegionPostalCode as bc, RestockSubscriptionInput as bd, RestockSubscriptionResult as be, ReturnRequest as bf, ReturnRequestInput as bg, SEO as bh, Section as bi, SelectedOption as bj, Shipment as bk, ShipmentEvent as bl, ShipmentKind as bm, ShipmentMap as bn, ShipmentStatus as bo, ShipmentsSummary as bp, ShippingRate as bq, Shop as br, ShopBranch as bs, ShopContact as bt, ShopPolicies as bu, StockLevel as bv, StorefrontErrorBody as bw, StorefrontErrorCode as bx, Theme as by, TokenIntrospection as bz, Availability as c, AvailabilityStatus as d, CartBuyer as e, CartBuyerInput as f, CartCost as g, CartDelivery as h, CartDiscountCode as i, CartDiscountLine as j, CartInvoice as k, CartLine as l, CartLineInput as m, CartLineMerchandise as n, CartLineProblem as o, CartLineUpdateInput as p, CartPromotions as q, CartRecommendation as r, CartRecommendations as s, CheckoutInfo as t, CheckoutInput as u, CheckoutPayment as v, CheckoutResult as w, Collection as x, Connection as y, Customer as z };
+type StorefrontErrorInit = {
+    status: number;
+    code: StorefrontErrorCode;
+    message: string;
+    field?: string;
+    /** Raw `error.details` from the body (untrusted shape). */
+    details?: unknown;
+    /** Request URL that failed (without credentials). */
+    url?: string;
+    cause?: unknown;
+    /** Scopes named by the gateway on a `403 insufficient_scope`. */
+    requiredScopes?: string[];
+    /** `error.retryable` as OPS declared it (payment failures). `undefined` = OPS did not say. */
+    retryable?: boolean;
+    /** `error.retry_after` in seconds. */
+    retryAfter?: number;
+    /** `error.checkout_id`: the checkout a refused cart write can resume. */
+    checkoutId?: string;
+    /** `error.cost` of a `price_mismatch` (the cart's current cost; untrusted shape). */
+    cost?: unknown;
+    /** `error.message_en`. */
+    messageEn?: string;
+};
+/**
+ * Error thrown by the client for any non-2xx response, network failure,
+ * timeout or abort. `status` is `0` when no HTTP response was received.
+ */
+declare class StorefrontError extends Error {
+    readonly name = "StorefrontError";
+    readonly status: number;
+    readonly code: StorefrontErrorCode;
+    readonly field: string | undefined;
+    readonly details: unknown;
+    readonly url: string | undefined;
+    /** Scopes a `403 insufficient_scope` says the route needs (empty for any other error). */
+    readonly requiredScopes: string[];
+    /** `true`: repeating the request (same idempotency key) can succeed. `false`: not until someone fixes something. `undefined`: OPS did not say. */
+    readonly retryable: boolean | undefined;
+    /** Seconds OPS asks to wait before retrying. */
+    readonly retryAfter: number | undefined;
+    /** Checkout that a refused cart write can resume. */
+    readonly checkoutId: string | undefined;
+    /** Current cart cost sent with a `price_mismatch` (untrusted shape). */
+    readonly cost: unknown;
+    /** English version of `message`, when OPS sent one. */
+    readonly messageEn: string | undefined;
+    constructor(init: StorefrontErrorInit);
+    /**
+     * Affected lines of a `409 insufficient_stock` (empty for any other error or a
+     * server older than contract 1.1). The cart is untouched: show the lines and
+     * let the buyer adjust or remove them.
+     */
+    get stockLines(): InsufficientStockLine[];
+    toJSON(): {
+        checkoutId?: string | undefined;
+        retryAfter?: number | undefined;
+        retryable?: boolean | undefined;
+        requiredScopes?: string[] | undefined;
+        name: string;
+        status: number;
+        code: StorefrontErrorCode;
+        message: string;
+        field: string | undefined;
+    };
+}
+declare function isStorefrontError(err: unknown): err is StorefrontError;
+
+/**
+ * Account settings of the buyer (contract 1.9): active sessions, recent re-authentication, language and
+ * notification preferences, data export and account deletion. Types and small pure helpers; the calls live on
+ * `client.customer`.
+ */
+/** Notification preferences: event → channel → on. Only optional events can be configured (never the order confirmation or the invoice). */
+type CustomerPreferences = {
+    notifications?: Record<string, Record<string, boolean>>;
+};
+/** One session of the buyer for a «Devices» list. The server never sends an address or a token. */
+type CustomerSessionInfo = {
+    id: string;
+    /** `true` for the session that made the request. */
+    current: boolean;
+    /** A summary such as «Chrome · Windows». Never a full user agent. */
+    device_label: string;
+    login_method: 'email' | 'phone' | 'password' | (string & {});
+    last_used_at?: string | null;
+    created_at: string;
+};
+/** What proves the buyer is who they say: the password, or a sign-in code requested with `customer.requestOtp`. Exactly one. */
+type ReauthInput = {
+    password: string;
+    otp_code?: never;
+} | {
+    otp_code: string;
+    password?: never;
+};
+type ReauthResult = {
+    reauth_at: string;
+    /** How long the confirmation lasts (seconds). It applies to the session that made the call, nowhere else. */
+    valid_for_seconds?: number;
+};
+/** The buyer's data as a JSON file, in memory. `content_base64` is the file; serve it as a download and do not keep it. */
+type DataExportFile = {
+    filename: string;
+    content_type: string;
+    content_base64: string;
+};
+/** `DELETE /customer`. `confirm` is the text your interface asked the buyer to type. */
+type AccountDeleteInput = {
+    confirm: string;
+};
+/**
+ * `true` when a call was refused because the buyer must confirm their password or a code first
+ * (`403` with code `reauth_required`): show your confirmation step, call `customer.reauth`, and repeat the call.
+ */
+declare function isReauthRequired(error: unknown): error is StorefrontError;
+/**
+ * `true` when deleting the account was refused because an order is on its way or a payment is still pending
+ * (`409`; `field` says which: `orders` or `pending_payments`).
+ */
+declare function isAccountDeleteBlocked(error: unknown): error is StorefrontError & {
+    field: 'orders' | 'pending_payments';
+};
+/** Decodes `content_base64` of a data export. Throws `TypeError` when it is not valid base64. */
+declare function dataExportBytes(file: Pick<DataExportFile, 'content_base64'>): Uint8Array;
+/** A download filename that is safe in a `Content-Disposition` header: no path, quotes, control characters or spaces. */
+declare function safeExportFilename(name: unknown, fallback?: string): string;
+
+export { type FiscalProfile as $, type AccountDeleteInput as A, type Customer as B, type Cart as C, type CustomerCapabilities as D, type CustomerIdentifier as E, type CustomerPasswordLoginInput as F, type CustomerPreferences as G, type CustomerRegisterInput as H, type CustomerRegisterResult as I, type CustomerResetPasswordInput as J, type CustomerSession as K, type CustomerSessionInfo as L, type CustomerSessionInput as M, type CustomerSetPasswordInput as N, type CustomerUpdateInput as O, type CustomerVerifyRegistrationInput as P, type DataExportFile as Q, type DeclineCode as R, type DeliveryInput as S, type DeliveryMethod as T, type DeliveryOptions as U, type Facet as V, type FacetValue as W, type FiscalDocumentEvidence as X, type FiscalDocumentSource as Y, type FiscalIdentity as Z, type FiscalIdentityInput as _, type Address as a, type Product as a$, type FiscalProfileInput as a0, type FiscalVerification as a1, type GeoHint as a2, type IdentityCapture as a3, type IdentityDocumentSpec as a4, type IdentityFieldRule as a5, type IdentityRulesV1 as a6, type IdentityStrategy as a7, type Image as a8, type InsufficientStockDetails as a9, type OrderProgress as aA, type OrderProgressStep as aB, type OrderSection as aC, type OrderStage as aD, type OrderStepKey as aE, type OrderStepState as aF, type Page as aG, type PageInfo as aH, type PaymentAction as aI, type PaymentAttemptResult as aJ, type PaymentAttemptStatus as aK, type PaymentClient as aL, type PaymentClientCsp as aM, type PaymentConfig as aN, type PaymentFlow as aO, type PaymentInfo as aP, type PaymentMethod as aQ, type PaymentMethods as aR, type PaymentNextStep as aS, type PaymentOption as aT, type PaymentOptionKey as aU, type PaymentPoint as aV, type PaymentSubmitInput as aW, type PaymentVoucher as aX, type PendingPayment as aY, type PendingPaymentVoucher as aZ, type PickupOption as a_, type InsufficientStockLine as aa, type InvoiceAction as ab, type InvoiceDoc as ac, type InvoiceFile as ad, type InvoiceFileKind as ae, type InvoiceRequest as af, type InvoiceResult as ag, type InvoiceStage as ah, type InvoiceSummary as ai, type InvoicingCapabilities as aj, type Location as ak, type LocationContacts as al, type LocationKind as am, type LocationListParams as an, type LocationPickup as ao, type Menu as ap, type MenuItem as aq, type Money as ar, type MoneyRange as as, type NearestLocation as at, type NextAction as au, type NextActionKind as av, type Order as aw, type OrderLine as ax, type OrderPickup as ay, type OrderProblem as az, type AddressInput as b, type ProductAttributeValue as b0, type ProductCategory as b1, type ProductConnection as b2, type ProductOption as b3, type ProductSort as b4, type ProductVariant as b5, type PromotionAnnouncement as b6, type PromotionReward as b7, type PromotionTier as b8, type PromotionsList as b9, type ShopPolicies as bA, type StockLevel as bB, StorefrontError as bC, type StorefrontErrorBody as bD, type StorefrontErrorCode as bE, type StorefrontErrorInit as bF, type Theme as bG, type TokenIntrospection as bH, type UnavailableRateProvider as bI, dataExportBytes as bJ, isAccountDeleteBlocked as bK, isReauthRequired as bL, isStorefrontError as bM, safeExportFilename as bN, type ReauthInput as ba, type ReauthResult as bb, type RecommendationPlacement as bc, type Refund as bd, type Region as be, type RegionFiscalEntry as bf, type RegionFiscalId as bg, type RegionPaymentMethod as bh, type RegionPostalCode as bi, type RestockSubscriptionInput as bj, type RestockSubscriptionResult as bk, type ReturnRequest as bl, type ReturnRequestInput as bm, type SEO as bn, type Section as bo, type SelectedOption as bp, type Shipment as bq, type ShipmentEvent as br, type ShipmentKind as bs, type ShipmentMap as bt, type ShipmentStatus as bu, type ShipmentsSummary as bv, type ShippingRate as bw, type Shop as bx, type ShopBranch as by, type ShopContact as bz, type Article as c, type Availability as d, type AvailabilityStatus as e, type CartBuyer as f, type CartBuyerInput as g, type CartCost as h, type CartDelivery as i, type CartDiscountCode as j, type CartDiscountLine as k, type CartInvoice as l, type CartLine as m, type CartLineInput as n, type CartLineMerchandise as o, type CartLineProblem as p, type CartLineUpdateInput as q, type CartPromotions as r, type CartRecommendation as s, type CartRecommendations as t, type CheckoutInfo as u, type CheckoutInput as v, type CheckoutPayment as w, type CheckoutResult as x, type Collection as y, type Connection as z };

package/dist/{types-C5nEQicj.d.cts → account-settings-H6zuI7iG.d.cts}

@@ -494,6 +494,10 @@ type Customer = {
     /** Saved fiscal data; `null`/absent when none. */
     fiscal?: FiscalIdentity | null;
     created_at: string;
+    /** Preferred language, one of the store's (contract 1.9). Absent on older servers. */
+    locale?: string | null;
+    /** Notification preferences (contract 1.9). Absent on older servers. */
+    preferences?: CustomerPreferences;
 };
 type CustomerIdentifier = {
     email: string;
@@ -531,6 +535,14 @@ type CustomerCapabilities = {
     fiscal_profiles?: {
         max: number;
     };
+    /** Channels the notification preferences can use (connector installed). Absent on older servers: no preferences section. */
+    notifications?: {
+        channels: string[];
+    };
+    /** The buyer can download their data (`customer.exportData`). Absent on older servers. */
+    data_export?: boolean;
+    /** The buyer can delete their account (`customer.deleteAccount`). Absent on older servers. */
+    account_delete?: boolean;
 };
 /** `GET {gateway}/_token`: what the token in use is and what it can do. Needs no scope. */
 type TokenIntrospection = {
@@ -1385,6 +1397,10 @@ type CustomerUpdateInput = {
     last_name?: string | null;
     phone?: string | null;
     fiscal?: FiscalIdentityInput | null;
+    /** One of the store's languages (`400` with `field: 'locale'` otherwise); `null` clears it. */
+    locale?: string | null;
+    /** Merged by event and channel; `null` restores the defaults. `400` for an event that cannot be turned off. */
+    preferences?: CustomerPreferences | null;
 };
 /** Post-processing: the value must match `pattern`; `group` of it replaces the value. */
 type IdentityCapture = {
@@ -1448,4 +1464,131 @@ type IdentityRulesV1 = {
     fields: IdentityFieldRule[];
 };
 
-export type { IdentityCapture as $, Address as A, CustomerCapabilities as B, Cart as C, CustomerIdentifier as D, CustomerPasswordLoginInput as E, CustomerRegisterInput as F, CustomerRegisterResult as G, CustomerResetPasswordInput as H, CustomerSession as I, CustomerSessionInput as J, CustomerSetPasswordInput as K, CustomerUpdateInput as L, CustomerVerifyRegistrationInput as M, DeclineCode as N, DeliveryInput as O, DeliveryMethod as P, DeliveryOptions as Q, Facet as R, FacetValue as S, FiscalDocumentEvidence as T, FiscalDocumentSource as U, FiscalIdentity as V, FiscalIdentityInput as W, FiscalProfile as X, FiscalProfileInput as Y, FiscalVerification as Z, GeoHint as _, AddressInput as a, ProductOption as a$, IdentityDocumentSpec as a0, IdentityFieldRule as a1, IdentityRulesV1 as a2, IdentityStrategy as a3, Image as a4, InsufficientStockDetails as a5, InsufficientStockLine as a6, InvoiceAction as a7, InvoiceDoc as a8, InvoiceFile as a9, OrderStepKey as aA, OrderStepState as aB, Page as aC, PageInfo as aD, PaymentAction as aE, PaymentAttemptResult as aF, PaymentAttemptStatus as aG, PaymentClient as aH, PaymentClientCsp as aI, PaymentConfig as aJ, PaymentFlow as aK, PaymentInfo as aL, PaymentMethod as aM, PaymentMethods as aN, PaymentNextStep as aO, PaymentOption as aP, PaymentOptionKey as aQ, PaymentPoint as aR, PaymentSubmitInput as aS, PaymentVoucher as aT, PendingPayment as aU, PendingPaymentVoucher as aV, PickupOption as aW, Product as aX, ProductAttributeValue as aY, ProductCategory as aZ, ProductConnection as a_, InvoiceFileKind as aa, InvoiceRequest as ab, InvoiceResult as ac, InvoiceStage as ad, InvoiceSummary as ae, InvoicingCapabilities as af, Location as ag, LocationContacts as ah, LocationKind as ai, LocationListParams as aj, LocationPickup as ak, Menu as al, MenuItem as am, Money as an, MoneyRange as ao, NearestLocation as ap, NextAction as aq, NextActionKind as ar, Order as as, OrderLine as at, OrderPickup as au, OrderProblem as av, OrderProgress as aw, OrderProgressStep as ax, OrderSection as ay, OrderStage as az, Article as b, ProductSort as b0, ProductVariant as b1, PromotionAnnouncement as b2, PromotionReward as b3, PromotionTier as b4, PromotionsList as b5, RecommendationPlacement as b6, Refund as b7, Region as b8, RegionFiscalEntry as b9, UnavailableRateProvider as bA, RegionFiscalId as ba, RegionPaymentMethod as bb, RegionPostalCode as bc, RestockSubscriptionInput as bd, RestockSubscriptionResult as be, ReturnRequest as bf, ReturnRequestInput as bg, SEO as bh, Section as bi, SelectedOption as bj, Shipment as bk, ShipmentEvent as bl, ShipmentKind as bm, ShipmentMap as bn, ShipmentStatus as bo, ShipmentsSummary as bp, ShippingRate as bq, Shop as br, ShopBranch as bs, ShopContact as bt, ShopPolicies as bu, StockLevel as bv, StorefrontErrorBody as bw, StorefrontErrorCode as bx, Theme as by, TokenIntrospection as bz, Availability as c, AvailabilityStatus as d, CartBuyer as e, CartBuyerInput as f, CartCost as g, CartDelivery as h, CartDiscountCode as i, CartDiscountLine as j, CartInvoice as k, CartLine as l, CartLineInput as m, CartLineMerchandise as n, CartLineProblem as o, CartLineUpdateInput as p, CartPromotions as q, CartRecommendation as r, CartRecommendations as s, CheckoutInfo as t, CheckoutInput as u, CheckoutPayment as v, CheckoutResult as w, Collection as x, Connection as y, Customer as z };
+type StorefrontErrorInit = {
+    status: number;
+    code: StorefrontErrorCode;
+    message: string;
+    field?: string;
+    /** Raw `error.details` from the body (untrusted shape). */
+    details?: unknown;
+    /** Request URL that failed (without credentials). */
+    url?: string;
+    cause?: unknown;
+    /** Scopes named by the gateway on a `403 insufficient_scope`. */
+    requiredScopes?: string[];
+    /** `error.retryable` as OPS declared it (payment failures). `undefined` = OPS did not say. */
+    retryable?: boolean;
+    /** `error.retry_after` in seconds. */
+    retryAfter?: number;
+    /** `error.checkout_id`: the checkout a refused cart write can resume. */
+    checkoutId?: string;
+    /** `error.cost` of a `price_mismatch` (the cart's current cost; untrusted shape). */
+    cost?: unknown;
+    /** `error.message_en`. */
+    messageEn?: string;
+};
+/**
+ * Error thrown by the client for any non-2xx response, network failure,
+ * timeout or abort. `status` is `0` when no HTTP response was received.
+ */
+declare class StorefrontError extends Error {
+    readonly name = "StorefrontError";
+    readonly status: number;
+    readonly code: StorefrontErrorCode;
+    readonly field: string | undefined;
+    readonly details: unknown;
+    readonly url: string | undefined;
+    /** Scopes a `403 insufficient_scope` says the route needs (empty for any other error). */
+    readonly requiredScopes: string[];
+    /** `true`: repeating the request (same idempotency key) can succeed. `false`: not until someone fixes something. `undefined`: OPS did not say. */
+    readonly retryable: boolean | undefined;
+    /** Seconds OPS asks to wait before retrying. */
+    readonly retryAfter: number | undefined;
+    /** Checkout that a refused cart write can resume. */
+    readonly checkoutId: string | undefined;
+    /** Current cart cost sent with a `price_mismatch` (untrusted shape). */
+    readonly cost: unknown;
+    /** English version of `message`, when OPS sent one. */
+    readonly messageEn: string | undefined;
+    constructor(init: StorefrontErrorInit);
+    /**
+     * Affected lines of a `409 insufficient_stock` (empty for any other error or a
+     * server older than contract 1.1). The cart is untouched: show the lines and
+     * let the buyer adjust or remove them.
+     */
+    get stockLines(): InsufficientStockLine[];
+    toJSON(): {
+        checkoutId?: string | undefined;
+        retryAfter?: number | undefined;
+        retryable?: boolean | undefined;
+        requiredScopes?: string[] | undefined;
+        name: string;
+        status: number;
+        code: StorefrontErrorCode;
+        message: string;
+        field: string | undefined;
+    };
+}
+declare function isStorefrontError(err: unknown): err is StorefrontError;
+
+/**
+ * Account settings of the buyer (contract 1.9): active sessions, recent re-authentication, language and
+ * notification preferences, data export and account deletion. Types and small pure helpers; the calls live on
+ * `client.customer`.
+ */
+/** Notification preferences: event → channel → on. Only optional events can be configured (never the order confirmation or the invoice). */
+type CustomerPreferences = {
+    notifications?: Record<string, Record<string, boolean>>;
+};
+/** One session of the buyer for a «Devices» list. The server never sends an address or a token. */
+type CustomerSessionInfo = {
+    id: string;
+    /** `true` for the session that made the request. */
+    current: boolean;
+    /** A summary such as «Chrome · Windows». Never a full user agent. */
+    device_label: string;
+    login_method: 'email' | 'phone' | 'password' | (string & {});
+    last_used_at?: string | null;
+    created_at: string;
+};
+/** What proves the buyer is who they say: the password, or a sign-in code requested with `customer.requestOtp`. Exactly one. */
+type ReauthInput = {
+    password: string;
+    otp_code?: never;
+} | {
+    otp_code: string;
+    password?: never;
+};
+type ReauthResult = {
+    reauth_at: string;
+    /** How long the confirmation lasts (seconds). It applies to the session that made the call, nowhere else. */
+    valid_for_seconds?: number;
+};
+/** The buyer's data as a JSON file, in memory. `content_base64` is the file; serve it as a download and do not keep it. */
+type DataExportFile = {
+    filename: string;
+    content_type: string;
+    content_base64: string;
+};
+/** `DELETE /customer`. `confirm` is the text your interface asked the buyer to type. */
+type AccountDeleteInput = {
+    confirm: string;
+};
+/**
+ * `true` when a call was refused because the buyer must confirm their password or a code first
+ * (`403` with code `reauth_required`): show your confirmation step, call `customer.reauth`, and repeat the call.
+ */
+declare function isReauthRequired(error: unknown): error is StorefrontError;
+/**
+ * `true` when deleting the account was refused because an order is on its way or a payment is still pending
+ * (`409`; `field` says which: `orders` or `pending_payments`).
+ */
+declare function isAccountDeleteBlocked(error: unknown): error is StorefrontError & {
+    field: 'orders' | 'pending_payments';
+};
+/** Decodes `content_base64` of a data export. Throws `TypeError` when it is not valid base64. */
+declare function dataExportBytes(file: Pick<DataExportFile, 'content_base64'>): Uint8Array;
+/** A download filename that is safe in a `Content-Disposition` header: no path, quotes, control characters or spaces. */
+declare function safeExportFilename(name: unknown, fallback?: string): string;
+
+export { type FiscalProfile as $, type AccountDeleteInput as A, type Customer as B, type Cart as C, type CustomerCapabilities as D, type CustomerIdentifier as E, type CustomerPasswordLoginInput as F, type CustomerPreferences as G, type CustomerRegisterInput as H, type CustomerRegisterResult as I, type CustomerResetPasswordInput as J, type CustomerSession as K, type CustomerSessionInfo as L, type CustomerSessionInput as M, type CustomerSetPasswordInput as N, type CustomerUpdateInput as O, type CustomerVerifyRegistrationInput as P, type DataExportFile as Q, type DeclineCode as R, type DeliveryInput as S, type DeliveryMethod as T, type DeliveryOptions as U, type Facet as V, type FacetValue as W, type FiscalDocumentEvidence as X, type FiscalDocumentSource as Y, type FiscalIdentity as Z, type FiscalIdentityInput as _, type Address as a, type Product as a$, type FiscalProfileInput as a0, type FiscalVerification as a1, type GeoHint as a2, type IdentityCapture as a3, type IdentityDocumentSpec as a4, type IdentityFieldRule as a5, type IdentityRulesV1 as a6, type IdentityStrategy as a7, type Image as a8, type InsufficientStockDetails as a9, type OrderProgress as aA, type OrderProgressStep as aB, type OrderSection as aC, type OrderStage as aD, type OrderStepKey as aE, type OrderStepState as aF, type Page as aG, type PageInfo as aH, type PaymentAction as aI, type PaymentAttemptResult as aJ, type PaymentAttemptStatus as aK, type PaymentClient as aL, type PaymentClientCsp as aM, type PaymentConfig as aN, type PaymentFlow as aO, type PaymentInfo as aP, type PaymentMethod as aQ, type PaymentMethods as aR, type PaymentNextStep as aS, type PaymentOption as aT, type PaymentOptionKey as aU, type PaymentPoint as aV, type PaymentSubmitInput as aW, type PaymentVoucher as aX, type PendingPayment as aY, type PendingPaymentVoucher as aZ, type PickupOption as a_, type InsufficientStockLine as aa, type InvoiceAction as ab, type InvoiceDoc as ac, type InvoiceFile as ad, type InvoiceFileKind as ae, type InvoiceRequest as af, type InvoiceResult as ag, type InvoiceStage as ah, type InvoiceSummary as ai, type InvoicingCapabilities as aj, type Location as ak, type LocationContacts as al, type LocationKind as am, type LocationListParams as an, type LocationPickup as ao, type Menu as ap, type MenuItem as aq, type Money as ar, type MoneyRange as as, type NearestLocation as at, type NextAction as au, type NextActionKind as av, type Order as aw, type OrderLine as ax, type OrderPickup as ay, type OrderProblem as az, type AddressInput as b, type ProductAttributeValue as b0, type ProductCategory as b1, type ProductConnection as b2, type ProductOption as b3, type ProductSort as b4, type ProductVariant as b5, type PromotionAnnouncement as b6, type PromotionReward as b7, type PromotionTier as b8, type PromotionsList as b9, type ShopPolicies as bA, type StockLevel as bB, StorefrontError as bC, type StorefrontErrorBody as bD, type StorefrontErrorCode as bE, type StorefrontErrorInit as bF, type Theme as bG, type TokenIntrospection as bH, type UnavailableRateProvider as bI, dataExportBytes as bJ, isAccountDeleteBlocked as bK, isReauthRequired as bL, isStorefrontError as bM, safeExportFilename as bN, type ReauthInput as ba, type ReauthResult as bb, type RecommendationPlacement as bc, type Refund as bd, type Region as be, type RegionFiscalEntry as bf, type RegionFiscalId as bg, type RegionPaymentMethod as bh, type RegionPostalCode as bi, type RestockSubscriptionInput as bj, type RestockSubscriptionResult as bk, type ReturnRequest as bl, type ReturnRequestInput as bm, type SEO as bn, type Section as bo, type SelectedOption as bp, type Shipment as bq, type ShipmentEvent as br, type ShipmentKind as bs, type ShipmentMap as bt, type ShipmentStatus as bu, type ShipmentsSummary as bv, type ShippingRate as bw, type Shop as bx, type ShopBranch as by, type ShopContact as bz, type Article as c, type Availability as d, type AvailabilityStatus as e, type CartBuyer as f, type CartBuyerInput as g, type CartCost as h, type CartDelivery as i, type CartDiscountCode as j, type CartDiscountLine as k, type CartInvoice as l, type CartLine as m, type CartLineInput as n, type CartLineMerchandise as o, type CartLineProblem as p, type CartLineUpdateInput as q, type CartPromotions as r, type CartRecommendation as s, type CartRecommendations as t, type CheckoutInfo as u, type CheckoutInput as v, type CheckoutPayment as w, type CheckoutResult as x, type Collection as y, type Connection as z };

package/dist/cli.js

@@ -454,6 +454,43 @@ function createStorefrontClient(config) {
       get: (options) => get("/storefront/customer", void 0, options),
       /** Updates the profile and the saved fiscal data; `fiscal: null` deletes the latter. `422` with `field: 'fiscal.<field>'`. */
       update: (input, options) => write("PATCH", "/storefront/customer", input, options),
+      /**
+       * Active sessions of the buyer («Devices»; contract 1.9). Private, never cached. The list carries no address
+       * and no token: only what the buyer needs to recognize their own devices.
+       */
+      sessions: {
+        list: async (options) => (await get("/storefront/customer/sessions", void 0, { ...options, cache: "no-store" })).nodes,
+        /** Closes one session. Repeating it is fine. `404` for a session that is not the buyer's. Closing the current one is a sign-out. */
+        revoke: (id, options) => write("DELETE", `/storefront/customer/sessions/${enc(id)}`, void 0, options),
+        /** Closes every session except the one making the call. */
+        revokeOthers: (options) => write("DELETE", "/storefront/customer/sessions/others", void 0, options)
+      },
+      /**
+       * Confirms the buyer's identity again with their password or a sign-in code (`requestOtp` first). The
+       * confirmation lasts `valid_for_seconds` (a few minutes) and counts only for the session that made the call;
+       * exporting data and deleting the account need it (`403 reauth_required` otherwise, see `isReauthRequired`).
+       * A wrong credential is always the same `400`; too many tries is `429` (`StorefrontError.retryAfter`).
+       */
+      reauth: (input, options) => write("POST", "/storefront/customer/reauth", input, options),
+      /**
+       * The buyer's data as a JSON file (contract 1.9, `capabilities().data_export`). Needs a recent `reauth`. It is
+       * built on request and is neither stored nor emailed: call it from YOUR server, stream the bytes
+       * (`dataExportBytes`, `safeExportFilename`) with `Cache-Control: no-store`, and keep nothing. Three a day per account.
+       */
+      exportData: async (options) => {
+        const file = await write("POST", "/storefront/customer/data-export", void 0, { ...options, cache: "no-store" });
+        if (!file || typeof file.content_base64 !== "string" || typeof file.filename !== "string" || typeof file.content_type !== "string") {
+          throw new StorefrontError({ status: 502, code: "invalid_response", message: "The data export answer is not a file" });
+        }
+        return { filename: file.filename, content_type: file.content_type, content_base64: file.content_base64 };
+      },
+      /**
+       * Deletes the buyer's account (contract 1.9, `capabilities().account_delete`). Needs a recent `reauth` and the
+       * text the buyer typed in `confirm`. Personal data is erased; orders and invoices are kept by the store.
+       * `409` (see `isAccountDeleteBlocked`) while an order is on its way or a payment is pending. Idempotent: a
+       * repeat after success is also fine. Afterwards the token is dead: drop it.
+       */
+      deleteAccount: (input, options) => write("DELETE", "/storefront/customer", input, options),
       orders: (params, options) => get("/storefront/customer/orders", params, options),
       /** `null` when the order does not exist or belongs to someone else. */
       order: (id, options) => getOrNull(`/storefront/customer/orders/${enc(id)}`, void 0, options),
@@ -544,7 +581,7 @@ function repairPath(connectionName) {
 import { chmodSync, closeSync, existsSync, fsyncSync, mkdirSync, openSync, readFileSync, renameSync, statSync, unlinkSync, writeSync } from "fs";
 import { dirname, join, resolve } from "path";
 import { hostname } from "os";
-var SDK_VERSION = true ? "0.16.1" : "dev";
+var SDK_VERSION = true ? "0.17.0" : "dev";
 function writeFileAtomic(file, content, mode = 384) {
   const dir = dirname(file);
   mkdirSync(dir, { recursive: true });

package/dist/fiscal-document.d.cts

@@ -1,5 +1,5 @@
-import { U as FiscalDocumentSource, b9 as RegionFiscalEntry, a0 as IdentityDocumentSpec, T as FiscalDocumentEvidence, ba as RegionFiscalId, a2 as IdentityRulesV1 } from './types-C5nEQicj.cjs';
-export { $ as IdentityCapture, a1 as IdentityFieldRule, a3 as IdentityStrategy } from './types-C5nEQicj.cjs';
+import { Y as FiscalDocumentSource, bf as RegionFiscalEntry, a4 as IdentityDocumentSpec, X as FiscalDocumentEvidence, bg as RegionFiscalId, a6 as IdentityRulesV1 } from './account-settings-H6zuI7iG.cjs';
+export { a3 as IdentityCapture, a5 as IdentityFieldRule, a7 as IdentityStrategy } from './account-settings-H6zuI7iG.cjs';
 import './geo.cjs';
 
 /** A value read from a document: text, or the codes of a catalog (`multiple` fields). */

package/dist/fiscal-document.d.ts

@@ -1,5 +1,5 @@
-import { U as FiscalDocumentSource, b9 as RegionFiscalEntry, a0 as IdentityDocumentSpec, T as FiscalDocumentEvidence, ba as RegionFiscalId, a2 as IdentityRulesV1 } from './types-DSHzYSHU.js';
-export { $ as IdentityCapture, a1 as IdentityFieldRule, a3 as IdentityStrategy } from './types-DSHzYSHU.js';
+import { Y as FiscalDocumentSource, bf as RegionFiscalEntry, a4 as IdentityDocumentSpec, X as FiscalDocumentEvidence, bg as RegionFiscalId, a6 as IdentityRulesV1 } from './account-settings-DNcJKOQl.js';
+export { a3 as IdentityCapture, a5 as IdentityFieldRule, a7 as IdentityStrategy } from './account-settings-DNcJKOQl.js';
 import './geo.js';
 
 /** A value read from a document: text, or the codes of a catalog (`multiple` fields). */

package/dist/index.cjs

@@ -486,6 +486,43 @@ function createStorefrontClient(config) {
       get: (options) => get("/storefront/customer", void 0, options),
       /** Updates the profile and the saved fiscal data; `fiscal: null` deletes the latter. `422` with `field: 'fiscal.<field>'`. */
       update: (input, options) => write("PATCH", "/storefront/customer", input, options),
+      /**
+       * Active sessions of the buyer («Devices»; contract 1.9). Private, never cached. The list carries no address
+       * and no token: only what the buyer needs to recognize their own devices.
+       */
+      sessions: {
+        list: async (options) => (await get("/storefront/customer/sessions", void 0, { ...options, cache: "no-store" })).nodes,
+        /** Closes one session. Repeating it is fine. `404` for a session that is not the buyer's. Closing the current one is a sign-out. */
+        revoke: (id, options) => write("DELETE", `/storefront/customer/sessions/${enc(id)}`, void 0, options),
+        /** Closes every session except the one making the call. */
+        revokeOthers: (options) => write("DELETE", "/storefront/customer/sessions/others", void 0, options)
+      },
+      /**
+       * Confirms the buyer's identity again with their password or a sign-in code (`requestOtp` first). The
+       * confirmation lasts `valid_for_seconds` (a few minutes) and counts only for the session that made the call;
+       * exporting data and deleting the account need it (`403 reauth_required` otherwise, see `isReauthRequired`).
+       * A wrong credential is always the same `400`; too many tries is `429` (`StorefrontError.retryAfter`).
+       */
+      reauth: (input, options) => write("POST", "/storefront/customer/reauth", input, options),
+      /**
+       * The buyer's data as a JSON file (contract 1.9, `capabilities().data_export`). Needs a recent `reauth`. It is
+       * built on request and is neither stored nor emailed: call it from YOUR server, stream the bytes
+       * (`dataExportBytes`, `safeExportFilename`) with `Cache-Control: no-store`, and keep nothing. Three a day per account.
+       */
+      exportData: async (options) => {
+        const file = await write("POST", "/storefront/customer/data-export", void 0, { ...options, cache: "no-store" });
+        if (!file || typeof file.content_base64 !== "string" || typeof file.filename !== "string" || typeof file.content_type !== "string") {
+          throw new StorefrontError({ status: 502, code: "invalid_response", message: "The data export answer is not a file" });
+        }
+        return { filename: file.filename, content_type: file.content_type, content_base64: file.content_base64 };
+      },
+      /**
+       * Deletes the buyer's account (contract 1.9, `capabilities().account_delete`). Needs a recent `reauth` and the
+       * text the buyer typed in `confirm`. Personal data is erased; orders and invoices are kept by the store.
+       * `409` (see `isAccountDeleteBlocked`) while an order is on its way or a payment is pending. Idempotent: a
+       * repeat after success is also fine. Afterwards the token is dead: drop it.
+       */
+      deleteAccount: (input, options) => write("DELETE", "/storefront/customer", input, options),
       orders: (params, options) => get("/storefront/customer/orders", params, options),
       /** `null` when the order does not exist or belongs to someone else. */
       order: (id, options) => getOrNull(`/storefront/customer/orders/${enc(id)}`, void 0, options),
@@ -1451,6 +1488,29 @@ function shipmentsStatus(order) {
   return live.length ? live[0].status : null;
 }
 
+// src/account-settings.ts
+function isReauthRequired(error) {
+  const e = error;
+  return !!e && typeof e === "object" && e.status === 403 && e.code === "reauth_required";
+}
+function isAccountDeleteBlocked(error) {
+  const e = error;
+  return !!e && typeof e === "object" && e.status === 409 && (e.field === "orders" || e.field === "pending_payments");
+}
+function dataExportBytes(file) {
+  const raw = typeof file.content_base64 === "string" ? file.content_base64.replace(/\s+/g, "") : "";
+  if (!/^[A-Za-z0-9+/]*={0,2}$/.test(raw) || raw.length % 4 === 1) throw new TypeError("data export is not valid base64");
+  const bin = atob(raw);
+  const out = new Uint8Array(bin.length);
+  for (let i = 0; i < bin.length; i++) out[i] = bin.charCodeAt(i);
+  return out;
+}
+function safeExportFilename(name, fallback = "account-data.json") {
+  const base = typeof name === "string" ? name.split(/[\\/]/).pop() ?? "" : "";
+  const clean = base.replace(/[^A-Za-z0-9._-]+/g, "_").replace(/^\.+/, "").slice(0, 80);
+  return clean || fallback;
+}
+
 // src/invoice-docs.ts
 function groupInvoiceDocs(docs) {
   const list = Array.isArray(docs) ? docs.filter((d) => !!d && typeof d === "object") : [];
@@ -1520,6 +1580,7 @@ exports.cartLineProblemView = cartLineProblemView;
 exports.clampPercent = clampPercent;
 exports.classifyPaymentError = classifyPaymentError;
 exports.createStorefrontClient = createStorefrontClient;
+exports.dataExportBytes = dataExportBytes;
 exports.declineMessage = declineMessage;
 exports.declineMessageKey = declineMessageKey;
 exports.deliveryInput = deliveryInput;
@@ -1532,6 +1593,8 @@ exports.generateIdempotencyKey = generateIdempotencyKey;
 exports.groupInvoiceDocs = groupInvoiceDocs;
 exports.hreflangLinks = hreflangLinks;
 exports.invoiceFileBytes = invoiceFileBytes;
+exports.isAccountDeleteBlocked = isAccountDeleteBlocked;
+exports.isReauthRequired = isReauthRequired;
 exports.isStorefrontError = isStorefrontError;
 exports.isTestInvoice = isTestInvoice;
 exports.isTestShipment = isTestShipment;
@@ -1559,6 +1622,7 @@ exports.promotionMessages = promotionMessages;
 exports.repairPath = repairPath;
 exports.resolveAvailability = resolveAvailability;
 exports.rewardLabel = rewardLabel;
+exports.safeExportFilename = safeExportFilename;
 exports.safeHttpsUrl = safeHttpsUrl;
 exports.safeInvoiceFilename = safeInvoiceFilename;
 exports.safeTrackingUrl = safeTrackingUrl;