platform-types 1.10.688 → 1.10.690

package/dist/index.d.ts

@@ -79,6 +79,8 @@ export * from './storefrontTheme.ts';
 export * from './storeNetwork.ts';
 export * from './storefrontAssets.ts';
 export * from './storefrontEvent.ts';
+export * from './storefrontSeo.ts';
+export * from './storefrontWebLiteralKeys.ts';
 export * from './subscription.ts';
 export * from './support.ts';
 export * from './terminal.ts';

package/dist/index.js

@@ -87,6 +87,8 @@ export * from "./storefrontTheme.js";
 export * from "./storeNetwork.js";
 export * from "./storefrontAssets.js";
 export * from "./storefrontEvent.js";
+export * from "./storefrontSeo.js";
+export * from "./storefrontWebLiteralKeys.js";
 export * from "./subscription.js";
 export * from "./support.js";
 export * from "./terminal.js";

package/dist/order.d.ts

@@ -1,5 +1,10 @@
 import type { MoneyOutAttribution } from './terminal.ts';
 declare global {
+    interface OrderBelowMinimumPurchaseData {
+        minBuy: number;
+        grandTotal: number;
+        currency: string;
+    }
     /**
      * A coupon as it was redeemed onto an order — the grant frozen at
      * consumption, plus the money it actually took.
@@ -2576,10 +2581,28 @@ export declare const orderFulfilmentProgress: (order: OrderFulfilmentProgressInp
  *   `data.shiftId`. Logged; reconcile the queued sale by hand.
  * - `ORDER_CURRENCY_NOT_SUBSCRIBED` · 400 — the sale's currency has no
  *   subscription in the store's `currencies`. Logged.
- * - `PAYMENT_METHODS_NOT_CONFIGURED` · 409 — `tenders` sent while the store
- *   has no payment methods at all.
- * - `PAYMENT_METHOD_NOT_FOUND` · 400 — a tender leg's `method` names none of
- *   the store's payment methods.
+ * - `PAYMENT_METHODS_NOT_CONFIGURED` · 409 — `tenders` sent, or storefront/
+ *   WhatsApp checkout attempted, while the store has no payment methods at
+ *   all. Storefront checkout carries `data: {}` and refuses before the cart read.
+ * - `PAYMENT_METHOD_NOT_FOUND` · 400 — a tender leg's `method`, or storefront
+ *   checkout's `paymentMethod`, names none of the store's payment methods.
+ *   Storefront checkout carries `data: {}` and refuses before the cart read.
+ *
+ * Storefront and WhatsApp checkout business refusals. None allocates an order
+ * id, redeems a coupon or writes an order; none is logged as an error:
+ * - `DELIVERY_METHOD_NOT_FOUND` · 400 — `deliveryMethod` is not in the store's
+ *   delivery catalogue, including an absent/empty catalogue. `data: {}`;
+ *   refused before reading the cart.
+ * - `ORDER_INVALID_CART` · 400 — the normalized cart has no finite numeric
+ *   `totals.grandTotal`. `data: {}`; refused before repricing/allocation.
+ * - `ORDER_BELOW_MINIMUM_PURCHASE` · 400 — after repricing has confirmed the
+ *   cart, its grand total is below a finite positive `Number(customer.minBuy)`.
+ *   Equality passes. `data: OrderBelowMinimumPurchaseData` carries minBuy,
+ *   grandTotal and the cart display currency, with no currency conversion.
+ * - `EMAIL_VERIFICATION_REQUIRED` · 403 — the store requires email verification
+ *   and the live customer has not verified. No data payload; before cart read.
+ * - `ACCOUNT_DISABLED` · 403 — the live customer is disabled. No data payload;
+ *   before cart read. This is distinct from the staff `CUSTOMER_DISABLED` code.
  *
  * Commit-time drawer refusals, on a create whose cash tender books into a
  * drawer shift. No order committed, but a coupon redeemed before the commit
@@ -2677,6 +2700,6 @@ export declare const orderFulfilmentProgress: (order: OrderFulfilmentProgressInp
  * `SUBSCRIPTION_READONLY`) sit on the order CREATE leg only: an edit is not a new
  * order, so `bareOrderPostHandler` routes past `requireMetered` entirely.
  */
-export declare const ORDER_ERROR_CODES: readonly ["ORDER_COST_DENOMINATION_UNKNOWN", "SERVICE_ORDER_DELIVERY_MANAGED", "ORDER_NOT_FOUND", "ORDER_LOCKED", "ORDER_NOT_READY", "ORDER_DELIVERED_ANOTHER_DAY", "ORDER_DELIVERY_STATE_UNCHANGED", "ORDER_ILLEGAL_TRANSITION", "ORDER_VERSION_CONFLICT", "CUSTOMER_NOT_FOUND", "CUSTOMER_MERGED", "ORDER_HAS_NO_CUSTOMER", "CUSTOMER_ANONYMIZED", "FX_CONVERSION_UNAVAILABLE", "ROLE_FORBIDDEN", "ORDER_CANCELLED", "PAYMENT_SETTLED_ON_ANOTHER_ORDER", "ORDER_HAS_SHIPMENTS", "ORDER_HAS_RETURNS", "SHIPMENT_QUANTITY_EXCEEDED", "SHIPMENT_LINE_MISMATCH", "SHIPMENT_NOT_FOUND", "SHIPMENT_LIMIT_REACHED", "SHIPMENT_TOO_LARGE", "ORDER_FULFILMENT_EXTERNAL", "SHIPMENT_FAILED", "ADMIN_REQUIRED", "IDEMPOTENCY_KEY_REQUIRED", "INVALID_IDEMPOTENCY_KEY", "IDEMPOTENCY_KEY_REUSE", "IDEMPOTENCY_IN_PROGRESS", "IDEMPOTENCY_LOCK_CONTENTION", "IDEMPOTENCY_KEY_FAILED", "IDEMPOTENT_RESPONSE_NOT_CACHED", "ORDER_CANCELLATION_NOT_PROTECTED", "ORDER_CANCELLATION_COMMITTED", "ORDER_CANCELLATION_LOCKED", "ORDER_CANCELLATION_TOO_LARGE", "ORDER_CANCELLATION_FAILED", "SALE_LEDGER_RETRACTION_REFUSED", "SALE_LEDGER_ROW_NOT_OWNED", "PRODUCT_NOT_FOUND", "PRODUCT_SALE_LIMIT_EXCEEDED", "PRODUCT_SALE_LIMIT_INVALID", "DEPOSIT_SOURCE_NOT_ALLOWED", "DEPOSIT_CURRENCY_MISMATCH", "DEPOSIT_EXCEEDS_TOTAL", "DEPOSIT_FREEZE_REQUIRES_INVOICE", "DEPOSIT_FREEZE_INVOICE_PENDING", "DEPOSIT_CHARACTERIZATION_CONFLICT", "DEPOSIT_FREEZE_INVOICE_NOT_QUALIFYING", "DEPOSIT_INVOICED_ORDER_MUST_FREEZE", "DEPOSIT_REFERENCE_IS_LINKED_PAYMENT", "DEPOSIT_DUPLICATE_REFERENCE", "PAYMENT_REFERENCED_BY_DEPOSIT", "ORDER_HAS_UNREFUNDED_DEPOSIT", "DEPOSIT_NOT_FOUND", "DEPOSIT_ALREADY_REFUNDED", "UNIT_QUANTITY_NOT_WHOLE", "UNIT_REVISION_STALE", "UNIT_QUANTITY_UNREPRESENTABLE", "KIT_RECIPE_CHANGED", "CART_PROMOTION_UNAVAILABLE", "ORDER_HAS_KIT_LINES", "ORDER_TARGET_REQUIRED", "ORDER_SOURCE_CONFLICT", "ORDER_CUSTOMER_REQUIRED", "BASKET_EMPTY", "BASKET_CHANGED_DURING_CHECKOUT", "CART_VERSION_CREATE_ONLY", "CART_VERSION_REQUIRES_CART_ID", "CART_REVISION_STALE", "CART_CUSTOMER_MISMATCH", "COUNTER_SALE_CREATE_ONLY", "SOLD_AT_CREATE_ONLY", "SOLD_AT_IN_FUTURE", "ORDER_TENDER_CREATE_ONLY", "CREDIT_OVERRIDE_CREATE_ONLY", "ON_ACCOUNT_CREATE_ONLY", "ON_ACCOUNT_WITH_TENDERS", "TENDERS_REQUIRE_COUNTER_SALE", "LINES_REQUIRE_COUNTER_SALE", "PRODUCT_COST_UNKNOWN", "PRICE_CHANGE_DISABLED", "LINE_DISCOUNT_EXCEEDS_MAX", "CUSTOMER_DISABLED", "SHIFT_NOT_AVAILABLE", "SOLD_AT_OUTSIDE_SHIFT", "ORDER_CURRENCY_NOT_SUBSCRIBED", "PAYMENT_METHODS_NOT_CONFIGURED", "PAYMENT_METHOD_NOT_FOUND", "CURRENCY_MISMATCH", "SHIFT_NOT_OPEN", "ORDER_DISCOUNT_AFTER_INVOICE", "ORDER_DISCOUNT_ON_SERVICE_ORDER", "ORDER_DISCOUNT_ON_MARKETPLACE_ORDER", "ORDER_INVOICE_METHOD_OUTSTANDING_FACTURA", "ORDER_SERVICE_PERIOD_AFTER_INVOICE", "ORDER_ATTEMPT_COMMITTED", "ORDER_ATTEMPT_ABANDONED", "ORDER_ATTEMPT_KEY_EXPIRED", "ORDER_ATTEMPT_KEY_SCOPE_MISMATCH"];
+export declare const ORDER_ERROR_CODES: readonly ["ORDER_COST_DENOMINATION_UNKNOWN", "SERVICE_ORDER_DELIVERY_MANAGED", "ORDER_NOT_FOUND", "ORDER_LOCKED", "ORDER_NOT_READY", "ORDER_DELIVERED_ANOTHER_DAY", "ORDER_DELIVERY_STATE_UNCHANGED", "ORDER_ILLEGAL_TRANSITION", "ORDER_VERSION_CONFLICT", "CUSTOMER_NOT_FOUND", "CUSTOMER_MERGED", "ORDER_HAS_NO_CUSTOMER", "CUSTOMER_ANONYMIZED", "FX_CONVERSION_UNAVAILABLE", "ROLE_FORBIDDEN", "ORDER_CANCELLED", "PAYMENT_SETTLED_ON_ANOTHER_ORDER", "ORDER_HAS_SHIPMENTS", "ORDER_HAS_RETURNS", "SHIPMENT_QUANTITY_EXCEEDED", "SHIPMENT_LINE_MISMATCH", "SHIPMENT_NOT_FOUND", "SHIPMENT_LIMIT_REACHED", "SHIPMENT_TOO_LARGE", "ORDER_FULFILMENT_EXTERNAL", "SHIPMENT_FAILED", "ADMIN_REQUIRED", "IDEMPOTENCY_KEY_REQUIRED", "INVALID_IDEMPOTENCY_KEY", "IDEMPOTENCY_KEY_REUSE", "IDEMPOTENCY_IN_PROGRESS", "IDEMPOTENCY_LOCK_CONTENTION", "IDEMPOTENCY_KEY_FAILED", "IDEMPOTENT_RESPONSE_NOT_CACHED", "ORDER_CANCELLATION_NOT_PROTECTED", "ORDER_CANCELLATION_COMMITTED", "ORDER_CANCELLATION_LOCKED", "ORDER_CANCELLATION_TOO_LARGE", "ORDER_CANCELLATION_FAILED", "SALE_LEDGER_RETRACTION_REFUSED", "SALE_LEDGER_ROW_NOT_OWNED", "PRODUCT_NOT_FOUND", "PRODUCT_SALE_LIMIT_EXCEEDED", "PRODUCT_SALE_LIMIT_INVALID", "DEPOSIT_SOURCE_NOT_ALLOWED", "DEPOSIT_CURRENCY_MISMATCH", "DEPOSIT_EXCEEDS_TOTAL", "DEPOSIT_FREEZE_REQUIRES_INVOICE", "DEPOSIT_FREEZE_INVOICE_PENDING", "DEPOSIT_CHARACTERIZATION_CONFLICT", "DEPOSIT_FREEZE_INVOICE_NOT_QUALIFYING", "DEPOSIT_INVOICED_ORDER_MUST_FREEZE", "DEPOSIT_REFERENCE_IS_LINKED_PAYMENT", "DEPOSIT_DUPLICATE_REFERENCE", "PAYMENT_REFERENCED_BY_DEPOSIT", "ORDER_HAS_UNREFUNDED_DEPOSIT", "DEPOSIT_NOT_FOUND", "DEPOSIT_ALREADY_REFUNDED", "UNIT_QUANTITY_NOT_WHOLE", "UNIT_REVISION_STALE", "UNIT_QUANTITY_UNREPRESENTABLE", "KIT_RECIPE_CHANGED", "CART_PROMOTION_UNAVAILABLE", "ORDER_HAS_KIT_LINES", "ORDER_TARGET_REQUIRED", "ORDER_SOURCE_CONFLICT", "ORDER_CUSTOMER_REQUIRED", "BASKET_EMPTY", "BASKET_CHANGED_DURING_CHECKOUT", "CART_VERSION_CREATE_ONLY", "CART_VERSION_REQUIRES_CART_ID", "CART_REVISION_STALE", "CART_CUSTOMER_MISMATCH", "COUNTER_SALE_CREATE_ONLY", "SOLD_AT_CREATE_ONLY", "SOLD_AT_IN_FUTURE", "ORDER_TENDER_CREATE_ONLY", "CREDIT_OVERRIDE_CREATE_ONLY", "ON_ACCOUNT_CREATE_ONLY", "ON_ACCOUNT_WITH_TENDERS", "TENDERS_REQUIRE_COUNTER_SALE", "LINES_REQUIRE_COUNTER_SALE", "PRODUCT_COST_UNKNOWN", "PRICE_CHANGE_DISABLED", "LINE_DISCOUNT_EXCEEDS_MAX", "CUSTOMER_DISABLED", "SHIFT_NOT_AVAILABLE", "SOLD_AT_OUTSIDE_SHIFT", "ORDER_CURRENCY_NOT_SUBSCRIBED", "PAYMENT_METHODS_NOT_CONFIGURED", "PAYMENT_METHOD_NOT_FOUND", "DELIVERY_METHOD_NOT_FOUND", "ORDER_BELOW_MINIMUM_PURCHASE", "ORDER_INVALID_CART", "EMAIL_VERIFICATION_REQUIRED", "ACCOUNT_DISABLED", "CURRENCY_MISMATCH", "SHIFT_NOT_OPEN", "ORDER_DISCOUNT_AFTER_INVOICE", "ORDER_DISCOUNT_ON_SERVICE_ORDER", "ORDER_DISCOUNT_ON_MARKETPLACE_ORDER", "ORDER_INVOICE_METHOD_OUTSTANDING_FACTURA", "ORDER_SERVICE_PERIOD_AFTER_INVOICE", "ORDER_ATTEMPT_COMMITTED", "ORDER_ATTEMPT_ABANDONED", "ORDER_ATTEMPT_KEY_EXPIRED", "ORDER_ATTEMPT_KEY_SCOPE_MISMATCH"];
 export type OrderErrorCode = (typeof ORDER_ERROR_CODES)[number];
 export {};

package/dist/order.js

@@ -337,10 +337,28 @@ export const orderFulfilmentProgress = (order) => {
  *   `data.shiftId`. Logged; reconcile the queued sale by hand.
  * - `ORDER_CURRENCY_NOT_SUBSCRIBED` · 400 — the sale's currency has no
  *   subscription in the store's `currencies`. Logged.
- * - `PAYMENT_METHODS_NOT_CONFIGURED` · 409 — `tenders` sent while the store
- *   has no payment methods at all.
- * - `PAYMENT_METHOD_NOT_FOUND` · 400 — a tender leg's `method` names none of
- *   the store's payment methods.
+ * - `PAYMENT_METHODS_NOT_CONFIGURED` · 409 — `tenders` sent, or storefront/
+ *   WhatsApp checkout attempted, while the store has no payment methods at
+ *   all. Storefront checkout carries `data: {}` and refuses before the cart read.
+ * - `PAYMENT_METHOD_NOT_FOUND` · 400 — a tender leg's `method`, or storefront
+ *   checkout's `paymentMethod`, names none of the store's payment methods.
+ *   Storefront checkout carries `data: {}` and refuses before the cart read.
+ *
+ * Storefront and WhatsApp checkout business refusals. None allocates an order
+ * id, redeems a coupon or writes an order; none is logged as an error:
+ * - `DELIVERY_METHOD_NOT_FOUND` · 400 — `deliveryMethod` is not in the store's
+ *   delivery catalogue, including an absent/empty catalogue. `data: {}`;
+ *   refused before reading the cart.
+ * - `ORDER_INVALID_CART` · 400 — the normalized cart has no finite numeric
+ *   `totals.grandTotal`. `data: {}`; refused before repricing/allocation.
+ * - `ORDER_BELOW_MINIMUM_PURCHASE` · 400 — after repricing has confirmed the
+ *   cart, its grand total is below a finite positive `Number(customer.minBuy)`.
+ *   Equality passes. `data: OrderBelowMinimumPurchaseData` carries minBuy,
+ *   grandTotal and the cart display currency, with no currency conversion.
+ * - `EMAIL_VERIFICATION_REQUIRED` · 403 — the store requires email verification
+ *   and the live customer has not verified. No data payload; before cart read.
+ * - `ACCOUNT_DISABLED` · 403 — the live customer is disabled. No data payload;
+ *   before cart read. This is distinct from the staff `CUSTOMER_DISABLED` code.
  *
  * Commit-time drawer refusals, on a create whose cash tender books into a
  * drawer shift. No order committed, but a coupon redeemed before the commit
@@ -545,6 +563,11 @@ export const ORDER_ERROR_CODES = [
     'ORDER_CURRENCY_NOT_SUBSCRIBED',
     'PAYMENT_METHODS_NOT_CONFIGURED',
     'PAYMENT_METHOD_NOT_FOUND',
+    'DELIVERY_METHOD_NOT_FOUND',
+    'ORDER_BELOW_MINIMUM_PURCHASE',
+    'ORDER_INVALID_CART',
+    'EMAIL_VERIFICATION_REQUIRED',
+    'ACCOUNT_DISABLED',
     // Commit-time drawer refusals; `CURRENCY_MISMATCH` carries its fields at the body's top level.
     'CURRENCY_MISMATCH',
     'SHIFT_NOT_OPEN',

package/dist/store.d.ts

@@ -115,6 +115,11 @@ declare global {
         deactivatesAt?: number | null;
         config?: Partial<StorefrontLiveSettings> & {
             showDefaultPriceList?: number;
+            /** New self-registrants use this list; absent means PUBLICO (1).
+             * Zero is refused and writes validate membership in store.priceLists.
+             * Never sent to shoppers.
+             */
+            newCustomerPriceList?: number;
             showStocks?: boolean;
         };
         sidebar?: {
@@ -152,9 +157,12 @@ declare global {
         appVersion?: number;
         stats?: Record<string, string>;
     }
-    /** Sparse tenant PATCH shape; live null values reset to registry defaults and are never stored. */
+    /** Sparse tenant PATCH shape; live null values reset to registry defaults and are never stored.
+     * An unknown newCustomerPriceList refuses 400 PRICE_LIST_NOT_FOUND with
+     * data: { field: 'ecommerce.config.newCustomerPriceList', value: number }; nothing written.
+     */
     interface EcommercePatchInput {
-        config?: Pick<NonNullable<Ecommerce['config']>, 'showDefaultPriceList'> & StorefrontLiveSettingsPatch;
+        config?: Pick<NonNullable<Ecommerce['config']>, 'showDefaultPriceList' | 'newCustomerPriceList'> & StorefrontLiveSettingsPatch;
         sidebar?: Ecommerce['sidebar'];
         home?: Omit<NonNullable<Ecommerce['home']>, 'displayOrders' | 'displayProfile'>;
         themeColors?: Ecommerce['themeColors'];

package/dist/storefrontDesign.d.ts

@@ -1,4 +1,13 @@
 import type { StorefrontThemeWarning } from './storefrontTheme.ts';
+/** The social kinds a contact may link, each to its own hosts; a contact links at most one per kind. */
+export declare const STOREFRONT_SOCIAL_HOSTS: {
+    readonly instagram: readonly ["instagram.com", "www.instagram.com"];
+    readonly facebook: readonly ["facebook.com", "www.facebook.com"];
+    readonly youtube: readonly ["youtube.com", "www.youtube.com", "youtu.be", "www.youtu.be"];
+    readonly tiktok: readonly ["tiktok.com", "www.tiktok.com"];
+    readonly linkedin: readonly ["linkedin.com", "www.linkedin.com"];
+    readonly x: readonly ["x.com", "www.x.com"];
+};
 export declare const STOREFRONT_DESIGN_LIMITS: {
     readonly customPages: 20;
     readonly pageAliases: 20;
@@ -37,9 +46,17 @@ export declare const STOREFRONT_DESIGN_LIMITS: {
     readonly contactAddress: 500;
     readonly contactNote: 200;
     readonly contactHours: 14;
-    readonly contactSocials: 8;
+    /** One link per social kind, so the cap is the number of kinds. */
+    readonly contactSocials: number;
     readonly contactEmail: 254;
 };
+/**
+ * A custom page's slug: lowercase ASCII letters, digits and inner hyphens, 1 to
+ * `STOREFRONT_DESIGN_LIMITS.slug` characters, starting and ending alphanumeric. The one
+ * definition: the api's validators, its page renderer and the edge viewer request read it.
+ */
+export declare const STOREFRONT_PAGE_SLUG_RE: RegExp;
+export declare const isStorefrontPageSlug: (value: unknown) => value is string;
 export declare const STOREFRONT_SECTION_TYPES: readonly ["banner", "imageText", "products", "categories", "brands", "text", "faq", "benefits", "contact", "paymentDelivery"];
 export declare const STOREFRONT_BUILTIN_DESTINATIONS: readonly ["home", "catalogue", "offers", "new", "search", "cart", "account", "privacy"];
 /**
@@ -55,14 +72,6 @@ export declare const STOREFRONT_PROTECTED_BUILTIN_DESTINATIONS: readonly ["searc
 export declare const STOREFRONT_CONTACT_FIELDS: readonly ["email", "phone", "whatsapp", "address", "hours", "socials"];
 export declare const STOREFRONT_RESERVED_SLUGS: readonly ["home", "index", "api", "auth", "login", "logout", "account", "cart", "checkout", "orders", "search", "products", "product", "producto", "coleccion", "categories", "brands", "sale", "new", "privacy", "terms", "sitemap", "robots", "manifest", "assets", "preview", "admin", "storefront", "pagina", "basket", "profile", "favorites", "invoices", "payments", "payment-methods", "user", "mantenimiento"];
 export declare const STOREFRONT_BENEFIT_ICONS: readonly ["truck", "shield", "credit-card", "store", "heart", "check"];
-export declare const STOREFRONT_SOCIAL_HOSTS: {
-    readonly instagram: readonly ["instagram.com", "www.instagram.com"];
-    readonly facebook: readonly ["facebook.com", "www.facebook.com"];
-    readonly youtube: readonly ["youtube.com", "www.youtube.com", "youtu.be", "www.youtu.be"];
-    readonly tiktok: readonly ["tiktok.com", "www.tiktok.com"];
-    readonly linkedin: readonly ["linkedin.com", "www.linkedin.com"];
-    readonly x: readonly ["x.com", "www.x.com"];
-};
 export declare function createStorefrontDesignV1(): StorefrontDesignV1;
 declare global {
     type StorefrontDesignSectionType = (typeof STOREFRONT_SECTION_TYPES)[number];
@@ -272,7 +281,7 @@ declare global {
     };
     /**
      * Image placements gain `url`/`mobileUrl`: the variant-LESS base
-     * `/sf-media/{stage}/{storeId}/{publicationId}/{assetId}`, a path on the images host. Append
+     * `/media/{stage}/{storeId}/{publicationId}/{assetId}`, a path on the images host. Append
      * `/${StorefrontAssetVariant}` (one of `STOREFRONT_ASSET_VARIANTS`) to request it; the base
      * alone is not servable. Never route it through `/fit-in/`: the media path is refused there.
      * Private preview envelopes instead supply `/preview/read?operation=asset&assetId=...`; the
@@ -400,6 +409,17 @@ declare global {
         items: StorefrontDesignHistoryEntry[];
         cursor?: string;
     }
+    /** A page of the live publication: the slug it answers at and the former slugs that 301 to it. */
+    interface StorefrontDesignPublishedPage {
+        slug: string;
+        aliases: string[];
+    }
+    /** Where a resolved setting's value came from: the registry default, a platform layer, or the document. */
+    type StorefrontDesignSettingProvenance = 'default' | 'platform' | 'design';
+    /**
+     * GET draft and every mutation that answers the draft (init, save, discard, restore) carry the
+     * same result; an idempotent replay rebuilds the four derived fields from current reads.
+     */
     interface StorefrontDesignDraftResult {
         draftRevision: string;
         publishedRevision: string | null;
@@ -407,6 +427,28 @@ declare global {
         dirty: boolean;
         mappingConflicts: StorefrontDesignMappingConflict[];
         legacySourceRevision: string;
+        /**
+         * The live publication's page addresses, keyed by page id: every page that has ever been
+         * published and still owns its slug, a since-removed or disabled page's included. Renaming
+         * an ENABLED page listed here makes its current slug a 301 alias on the next publish; a
+         * page absent here has no live address, so renaming it creates no alias. Absent when the
+         * shop has never published.
+         */
+        publishedPages?: Record<string, StorefrontDesignPublishedPage>;
+        /**
+         * What publishing this saved document would refuse today, as field errors: missing required
+         * content, a link to a disabled or missing page (`DANGLING_REFERENCE`), a slug a published
+         * page still owns (`ALIAS_CONFLICT`), a page out of aliases (`ALIAS_LIMIT`), and one
+         * `MAPPING_CONFLICT` per unresolved `mappingConflicts` entry, at that entry's path (the
+         * publish refusal itself names the single path `mappingConflicts`). Empty when publishable.
+         * Never blocks a save, and never covers asset readiness, which publish probes on its own
+         * (`STOREFRONT_ASSET_NOT_READY`).
+         */
+        publishIssues?: StorefrontDesignFieldError[];
+        /** The document's settings over the live platform layer: what the published shop would render. */
+        effectiveSettings?: StorefrontDesignSettings;
+        /** Per setting, which layer `effectiveSettings` took it from. */
+        settingsProvenance?: Record<keyof StorefrontDesignSettings, StorefrontDesignSettingProvenance>;
     }
     interface StorefrontDesignDeliveryTarget {
         /**
@@ -516,6 +558,27 @@ declare global {
         assetId: string;
         variant?: StorefrontAssetVariant;
     };
+    /**
+     * The codes `GET /preview/read` answers itself, on the common `{ message, error }` body:
+     * 400 `STOREFRONT_PREVIEW_INVALID` (a query the read schema refuses, a repeated parameter or a
+     * body), 401 `STOREFRONT_PREVIEW_INVALID` (no or a malformed bearer grant), 401 `…_EXPIRED`,
+     * 403 `…_REVOKED` / `…_FORBIDDEN` / `PLAN_UPGRADE_REQUIRED` (bare, without the editor
+     * routes' plan fields), 404 `ASSET_NOT_FOUND` (an asset the pinned draft does not reference or
+     * that is not ready), 405 `METHOD_NOT_ALLOWED` (anything but GET and OPTIONS), 413
+     * `STOREFRONT_PREVIEW_IMAGE_TOO_LARGE` (asset bytes over 4 MiB) and 503 `…_UNAVAILABLE`.
+     */
+    type StorefrontPreviewReadErrorCode = 'STOREFRONT_PREVIEW_INVALID' | 'STOREFRONT_PREVIEW_EXPIRED' | 'STOREFRONT_PREVIEW_REVOKED' | 'STOREFRONT_PREVIEW_FORBIDDEN' | 'STOREFRONT_PREVIEW_UNAVAILABLE' | 'STOREFRONT_PREVIEW_IMAGE_TOO_LARGE' | 'PLAN_UPGRADE_REQUIRED' | 'ASSET_NOT_FOUND' | 'METHOD_NOT_ALLOWED';
+    /**
+     * The codes a catalogue operation answers through its public web route's own core, as that
+     * route does: 404 `PRODUCT_NOT_FOUND` / `PRODUCT_GROUP_NOT_FOUND` / `COLLECTION_NOT_FOUND`,
+     * 400 `INVALID_CURSOR` / `INVALID_DISCOVERY_QUERY`, 409 `CURSOR_STALE` (a collection that
+     * changed between the reads bracketing a page) and 503 `PRODUCT_LOOKUP_INCOMPLETE`.
+     */
+    type StorefrontPreviewCatalogueErrorCode = 'PRODUCT_NOT_FOUND' | 'PRODUCT_GROUP_NOT_FOUND' | 'COLLECTION_NOT_FOUND' | 'INVALID_CURSOR' | 'INVALID_DISCOVERY_QUERY' | 'CURSOR_STALE' | 'PRODUCT_LOOKUP_INCOMPLETE';
+    interface StorefrontPreviewReadFailure {
+        message: string;
+        error: StorefrontPreviewReadErrorCode | StorefrontPreviewCatalogueErrorCode;
+    }
     interface StorefrontPreviewDesignResult {
         mode: 'preview';
         draftRevision: string;

package/dist/storefrontDesign.js

@@ -1,3 +1,12 @@
+/** The social kinds a contact may link, each to its own hosts; a contact links at most one per kind. */
+export const STOREFRONT_SOCIAL_HOSTS = {
+    instagram: ['instagram.com', 'www.instagram.com'],
+    facebook: ['facebook.com', 'www.facebook.com'],
+    youtube: ['youtube.com', 'www.youtube.com', 'youtu.be', 'www.youtu.be'],
+    tiktok: ['tiktok.com', 'www.tiktok.com'],
+    linkedin: ['linkedin.com', 'www.linkedin.com'],
+    x: ['x.com', 'www.x.com'],
+};
 export const STOREFRONT_DESIGN_LIMITS = {
     customPages: 20,
     pageAliases: 20,
@@ -36,9 +45,17 @@ export const STOREFRONT_DESIGN_LIMITS = {
     contactAddress: 500,
     contactNote: 200,
     contactHours: 14,
-    contactSocials: 8,
+    /** One link per social kind, so the cap is the number of kinds. */
+    contactSocials: Object.keys(STOREFRONT_SOCIAL_HOSTS).length,
     contactEmail: 254,
 };
+/**
+ * A custom page's slug: lowercase ASCII letters, digits and inner hyphens, 1 to
+ * `STOREFRONT_DESIGN_LIMITS.slug` characters, starting and ending alphanumeric. The one
+ * definition: the api's validators, its page renderer and the edge viewer request read it.
+ */
+export const STOREFRONT_PAGE_SLUG_RE = /^[a-z0-9](?:[a-z0-9-]{0,78}[a-z0-9])?$/;
+export const isStorefrontPageSlug = (value) => typeof value === 'string' && STOREFRONT_PAGE_SLUG_RE.test(value);
 export const STOREFRONT_SECTION_TYPES = [
     'banner',
     'imageText',
@@ -117,14 +134,6 @@ export const STOREFRONT_RESERVED_SLUGS = [
     'mantenimiento',
 ];
 export const STOREFRONT_BENEFIT_ICONS = ['truck', 'shield', 'credit-card', 'store', 'heart', 'check'];
-export const STOREFRONT_SOCIAL_HOSTS = {
-    instagram: ['instagram.com', 'www.instagram.com'],
-    facebook: ['facebook.com', 'www.facebook.com'],
-    youtube: ['youtube.com', 'www.youtube.com', 'youtu.be', 'www.youtu.be'],
-    tiktok: ['tiktok.com', 'www.tiktok.com'],
-    linkedin: ['linkedin.com', 'www.linkedin.com'],
-    x: ['x.com', 'www.x.com'],
-};
 export function createStorefrontDesignV1() {
     return {
         schemaVersion: 1,

package/dist/storefrontSeo.d.ts

@@ -0,0 +1,77 @@
+/**
+ * Information-page paths and the storefront's SEO inheritance chain — one
+ * definition for the server that renders a shared link's head and the editor
+ * that previews it.
+ */
+/** Path prefix of a published information page: `/pagina/<slug>`. */
+export declare const STOREFRONT_PAGE_PATH_PREFIX = "/pagina/";
+/** The path an information page with `slug` is served at. The slug is neither validated nor encoded here. */
+export declare const storefrontPagePath: (slug: string) => string;
+/** The description a shop is shared with when neither the page nor the shop sets one. */
+export declare const storefrontDefaultSeoDescription: (storeName: string) => string;
+/**
+ * Where a resolved SEO field came from: the page itself, the shop-wide `seo`
+ * block, the shop logo (image only), or the platform default.
+ */
+export type StorefrontSeoSource = 'page' | 'shop' | 'logo' | 'default';
+/** The SEO fields a page and the shop each carry; `Placement` is the image shape of the document passed in. */
+export interface StorefrontSeoFields<Placement = StorefrontDesignImagePlacement> {
+    title?: string;
+    description?: string;
+    image?: Placement;
+    noindex?: boolean;
+}
+/**
+ * What {@link resolveStorefrontSeo} reads from a design document. A draft
+ * (`StorefrontDesignV1`), the published projection and `PublicStorefrontDesign`
+ * all satisfy it; with the last, a resolved image keeps its `url`.
+ */
+export interface StorefrontSeoDocument<Placement = StorefrontDesignImagePlacement> {
+    seo: StorefrontSeoFields<Placement>;
+    branding: {
+        logo?: Placement;
+    };
+    pages: readonly {
+        id: string;
+        title: string;
+        seo?: StorefrontSeoFields<Placement>;
+    }[];
+}
+/** The SEO a page is shared with, each field with where it came from. */
+export interface ResolvedStorefrontSeo<Placement = StorefrontDesignImagePlacement> {
+    title: string;
+    description: string;
+    /**
+     * The placement shared as `og:image` (cropped to 1200x630), or `null` for
+     * the platform's own share image (`source.image === 'default'`).
+     */
+    image: Placement | null;
+    noindex: boolean;
+    source: {
+        title: Exclude<StorefrontSeoSource, 'logo'>;
+        description: Exclude<StorefrontSeoSource, 'logo'>;
+        image: StorefrontSeoSource;
+        noindex: Exclude<StorefrontSeoSource, 'logo'>;
+    };
+}
+/**
+ * The SEO the storefront shares a page with: `'home'`, or an information page
+ * by `id`.
+ *
+ * - title: the page's `seo.title`, else its `title`, else the shop's
+ *   `seo.title`, else `storeName`. Home skips the page steps — its own `title`
+ *   is never used.
+ * - description: the page's `seo.description`, else the shop's, else
+ *   {@link storefrontDefaultSeoDescription}.
+ * - image: the page's `seo.image`, else the shop's, else the logo, else `null`
+ *   (the platform share image).
+ * - noindex: the page's `seo.noindex` when set — an explicit `false` beats a
+ *   shop-wide `true` — else the shop's, else `false`.
+ *
+ * An empty title or description counts as unset and falls through. Returns
+ * `undefined` for a page id the document does not carry; `'home'` always
+ * resolves. A shop with no published design is out of scope: its head uses
+ * the store's own name, photo and the default description.
+ */
+export declare function resolveStorefrontSeo<Placement>(document: StorefrontSeoDocument<Placement>, target: 'home', storeName: string): ResolvedStorefrontSeo<Placement>;
+export declare function resolveStorefrontSeo<Placement>(document: StorefrontSeoDocument<Placement>, target: string, storeName: string): ResolvedStorefrontSeo<Placement> | undefined;

package/dist/storefrontSeo.js

@@ -0,0 +1,58 @@
+/**
+ * Information-page paths and the storefront's SEO inheritance chain — one
+ * definition for the server that renders a shared link's head and the editor
+ * that previews it.
+ */
+/** Path prefix of a published information page: `/pagina/<slug>`. */
+export const STOREFRONT_PAGE_PATH_PREFIX = '/pagina/';
+/** The path an information page with `slug` is served at. The slug is neither validated nor encoded here. */
+export const storefrontPagePath = (slug) => `${STOREFRONT_PAGE_PATH_PREFIX}${slug}`;
+/** The description a shop is shared with when neither the page nor the shop sets one. */
+export const storefrontDefaultSeoDescription = (storeName) => `Comprá online en ${storeName}: catálogo, precios y stock actualizados.`;
+const shopImage = (document) => {
+    if (document.seo.image)
+        return { image: document.seo.image, source: 'shop' };
+    if (document.branding.logo)
+        return { image: document.branding.logo, source: 'logo' };
+    return { image: null, source: 'default' };
+};
+/** Home's SEO — and the default every information page inherits field by field. */
+const shopSeo = (document, storeName) => {
+    const { seo } = document;
+    const image = shopImage(document);
+    return {
+        title: seo.title || storeName,
+        description: seo.description || storefrontDefaultSeoDescription(storeName),
+        image: image.image,
+        noindex: seo.noindex === true,
+        source: {
+            title: seo.title ? 'shop' : 'default',
+            description: seo.description ? 'shop' : 'default',
+            image: image.source,
+            noindex: typeof seo.noindex === 'boolean' ? 'shop' : 'default',
+        },
+    };
+};
+export function resolveStorefrontSeo(document, target, storeName) {
+    const shop = shopSeo(document, storeName);
+    if (target === 'home')
+        return shop;
+    const page = document.pages.find(({ id }) => id === target);
+    if (!page)
+        return undefined;
+    const own = page.seo;
+    const pageTitle = own?.title || page.title;
+    const pageNoindex = own?.noindex;
+    return {
+        title: pageTitle || shop.title,
+        description: own?.description || shop.description,
+        image: own?.image || shop.image,
+        noindex: typeof pageNoindex === 'boolean' ? pageNoindex : shop.noindex,
+        source: {
+            title: pageTitle ? 'page' : shop.source.title,
+            description: own?.description ? 'page' : shop.source.description,
+            image: own?.image ? 'page' : shop.source.image,
+            noindex: typeof pageNoindex === 'boolean' ? 'page' : shop.source.noindex,
+        },
+    };
+}

package/dist/storefrontTheme.d.ts

@@ -1,4 +1,4 @@
-import { type StorefrontDesignSettings } from './storefrontDesignRegistry.ts';
+import { type StorefrontDesignSettings, type StorefrontDesignSettingsLayer } from './storefrontDesignRegistry.ts';
 type StorefrontThemeMode = 'light' | 'dark';
 type StorefrontThemeSurfaceId = 'page' | 'header' | 'footer';
 export interface StorefrontThemeSurface {
@@ -51,11 +51,27 @@ export interface StorefrontResolvedTheme {
 }
 export declare const storefrontContrastRatio: (foreground: string, background: string) => number;
 /**
- * The storefront theme for a design's settings overrides.
- *
- * Settings resolve from the registry defaults plus the store's own design
- * overrides ONLY — no GLOBAL or WEB layer takes part — so a consumer uses this
- * as shipped rather than merging layers of its own first.
+ * The GLOBAL design-settings layer of the platform globals row as `getPlatformGlobalsRow`
+ * returns it (`{ [key]: { value, ... } }`): each entry's `value`, kept only when it is a
+ * valid design setting, so a non-design global or a malformed value never reaches a theme.
  */
-export declare const resolveStorefrontTheme: (overrides?: Partial<StorefrontDesignSettings>) => StorefrontResolvedTheme;
+export declare const storefrontGlobalSettingsLayer: (globalsRow?: Record<string, unknown>) => StorefrontDesignSettingsLayer;
+/**
+ * The settings a storefront is served with: registry defaults, then the platform GLOBAL
+ * layer, then the design's own overrides. The one resolver behind the public envelope's
+ * `effectiveSettings`, the draft's `effectiveSettings` and the publish contrast report —
+ * a caller passes the globals row it read, never a layer stack of its own. The edge
+ * renderer's `theme-color` is design-only: its role reads no GLOBALS row.
+ */
+export declare const resolveStorefrontEffectiveSettings: (overrides?: Partial<StorefrontDesignSettings>, globalsRow?: Record<string, unknown>) => StorefrontDesignSettings;
+/**
+ * The storefront theme for a design's settings overrides, resolved through
+ * `resolveStorefrontEffectiveSettings`: the GLOBAL layer of `globalsRow` sits under the
+ * design, exactly as in the public envelope's `effectiveSettings`. Omitting `globalsRow`
+ * resolves defaults plus the design only — correct solely while no GLOBAL design setting
+ * is set, so a caller serving or reporting on a storefront passes the row (the edge
+ * renderer's `theme-color` is the one exception, design-only by its read grant). Passing
+ * already-effective settings as `overrides` rebuilds the same theme.
+ */
+export declare const resolveStorefrontTheme: (overrides?: Partial<StorefrontDesignSettings>, globalsRow?: Record<string, unknown>) => StorefrontResolvedTheme;
 export {};

package/dist/storefrontTheme.js

@@ -1,4 +1,4 @@
-import { resolveStorefrontDesignSettings } from "./storefrontDesignRegistry.js";
+import { resolveStorefrontDesignSettings, validateStorefrontDesignSetting, } from "./storefrontDesignRegistry.js";
 const channels = (color) => [
     Number.parseInt(color.slice(1, 3), 16),
     Number.parseInt(color.slice(3, 5), 16),
@@ -62,14 +62,36 @@ const surfaceTokens = (background, settings, mode, surface, warnings) => {
     };
 };
 /**
- * The storefront theme for a design's settings overrides.
- *
- * Settings resolve from the registry defaults plus the store's own design
- * overrides ONLY — no GLOBAL or WEB layer takes part — so a consumer uses this
- * as shipped rather than merging layers of its own first.
+ * The GLOBAL design-settings layer of the platform globals row as `getPlatformGlobalsRow`
+ * returns it (`{ [key]: { value, ... } }`): each entry's `value`, kept only when it is a
+ * valid design setting, so a non-design global or a malformed value never reaches a theme.
  */
-export const resolveStorefrontTheme = (overrides = {}) => {
-    const settings = resolveStorefrontDesignSettings(overrides);
+export const storefrontGlobalSettingsLayer = (globalsRow) => ({
+    layer: 'GLOBAL',
+    values: Object.fromEntries(Object.entries(globalsRow ?? {}).flatMap(([key, entry]) => {
+        const value = entry !== null && typeof entry === 'object' ? entry.value : undefined;
+        return validateStorefrontDesignSetting(key, value) ? [[key, value]] : [];
+    })),
+});
+/**
+ * The settings a storefront is served with: registry defaults, then the platform GLOBAL
+ * layer, then the design's own overrides. The one resolver behind the public envelope's
+ * `effectiveSettings`, the draft's `effectiveSettings` and the publish contrast report —
+ * a caller passes the globals row it read, never a layer stack of its own. The edge
+ * renderer's `theme-color` is design-only: its role reads no GLOBALS row.
+ */
+export const resolveStorefrontEffectiveSettings = (overrides = {}, globalsRow) => resolveStorefrontDesignSettings(overrides, [storefrontGlobalSettingsLayer(globalsRow)]);
+/**
+ * The storefront theme for a design's settings overrides, resolved through
+ * `resolveStorefrontEffectiveSettings`: the GLOBAL layer of `globalsRow` sits under the
+ * design, exactly as in the public envelope's `effectiveSettings`. Omitting `globalsRow`
+ * resolves defaults plus the design only — correct solely while no GLOBAL design setting
+ * is set, so a caller serving or reporting on a storefront passes the row (the edge
+ * renderer's `theme-color` is the one exception, design-only by its read grant). Passing
+ * already-effective settings as `overrides` rebuilds the same theme.
+ */
+export const resolveStorefrontTheme = (overrides = {}, globalsRow) => {
+    const settings = resolveStorefrontEffectiveSettings(overrides, globalsRow);
     const warnings = [];
     const makeMode = (mode) => {
         const background = (requested) => mode === 'light' ? requested.toUpperCase() : mix(requested, '#000000', 0.9);

package/dist/storefrontWebLiteralKeys.d.ts

@@ -0,0 +1,23 @@
+/**
+ * Every storefront `WEB` literal key a shop may override, in code-unit order.
+ *
+ * This list is what the api's override validator accepts — one definition, so
+ * an editor offers exactly the keys a save will keep. A key outside it is
+ * refused as `UNKNOWN_KEY` on save and dropped on read.
+ *
+ * ⚠️ It is NOT every key the storefront renders. Withheld on purpose:
+ * - every key starting with `PRIVACY_` — privacy and terms are platform text,
+ *   the same on every shop, and the storefront ignores a shop value for them;
+ * - the keys only the not-found and unavailable screens render, which read no
+ *   shop layer;
+ * - keys whose storefront value is not a plain `{name}`-token sentence (it
+ *   branches, computes, or is not a string), which a shop string cannot
+ *   express.
+ * An editor that lists any of those offers an edit the server refuses.
+ *
+ * Interpolated values use `{name}` tokens named after the storefront's own
+ * parameters.
+ */
+export declare const STOREFRONT_WEB_LITERAL_KEYS: readonly string[];
+/** Whether a shop may override `key` — membership in {@link STOREFRONT_WEB_LITERAL_KEYS}. */
+export declare const isStorefrontLiteralKey: (key: string) => boolean;