platform-types 1.10.689 → 1.10.691

package/dist/cjs/order.js

@@ -344,10 +344,28 @@ exports.orderFulfilmentProgress = orderFulfilmentProgress;
  *   `data.shiftId`. Logged; reconcile the queued sale by hand.
  * - `ORDER_CURRENCY_NOT_SUBSCRIBED` · 400 — the sale's currency has no
  *   subscription in the store's `currencies`. Logged.
- * - `PAYMENT_METHODS_NOT_CONFIGURED` · 409 — `tenders` sent while the store
- *   has no payment methods at all.
- * - `PAYMENT_METHOD_NOT_FOUND` · 400 — a tender leg's `method` names none of
- *   the store's payment methods.
+ * - `PAYMENT_METHODS_NOT_CONFIGURED` · 409 — `tenders` sent, or storefront/
+ *   WhatsApp checkout attempted, while the store has no payment methods at
+ *   all. Storefront checkout carries `data: {}` and refuses before the cart read.
+ * - `PAYMENT_METHOD_NOT_FOUND` · 400 — a tender leg's `method`, or storefront
+ *   checkout's `paymentMethod`, names none of the store's payment methods.
+ *   Storefront checkout carries `data: {}` and refuses before the cart read.
+ *
+ * Storefront and WhatsApp checkout business refusals. None allocates an order
+ * id, redeems a coupon or writes an order; none is logged as an error:
+ * - `DELIVERY_METHOD_NOT_FOUND` · 400 — `deliveryMethod` is not in the store's
+ *   delivery catalogue, including an absent/empty catalogue. `data: {}`;
+ *   refused before reading the cart.
+ * - `ORDER_INVALID_CART` · 400 — the normalized cart has no finite numeric
+ *   `totals.grandTotal`. `data: {}`; refused before repricing/allocation.
+ * - `ORDER_BELOW_MINIMUM_PURCHASE` · 400 — after repricing has confirmed the
+ *   cart, its grand total is below a finite positive `Number(customer.minBuy)`.
+ *   Equality passes. `data: OrderBelowMinimumPurchaseData` carries minBuy,
+ *   grandTotal and the cart display currency, with no currency conversion.
+ * - `EMAIL_VERIFICATION_REQUIRED` · 403 — the store requires email verification
+ *   and the live customer has not verified. No data payload; before cart read.
+ * - `ACCOUNT_DISABLED` · 403 — the live customer is disabled. No data payload;
+ *   before cart read. This is distinct from the staff `CUSTOMER_DISABLED` code.
  *
  * Commit-time drawer refusals, on a create whose cash tender books into a
  * drawer shift. No order committed, but a coupon redeemed before the commit
@@ -552,6 +570,11 @@ exports.ORDER_ERROR_CODES = [
     'ORDER_CURRENCY_NOT_SUBSCRIBED',
     'PAYMENT_METHODS_NOT_CONFIGURED',
     'PAYMENT_METHOD_NOT_FOUND',
+    'DELIVERY_METHOD_NOT_FOUND',
+    'ORDER_BELOW_MINIMUM_PURCHASE',
+    'ORDER_INVALID_CART',
+    'EMAIL_VERIFICATION_REQUIRED',
+    'ACCOUNT_DISABLED',
     // Commit-time drawer refusals; `CURRENCY_MISMATCH` carries its fields at the body's top level.
     'CURRENCY_MISMATCH',
     'SHIFT_NOT_OPEN',

package/dist/cjs/storefrontWebLiteralKeys.js

@@ -1,6 +1,6 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.isStorefrontLiteralKey = exports.STOREFRONT_WEB_LITERAL_KEYS = void 0;
+exports.isAllowedStorefrontLiteralValue = exports.isStorefrontLiteralKey = exports.STOREFRONT_WEB_LITERAL_KEYS = void 0;
 /**
  * Every storefront `WEB` literal key a shop may override, in code-unit order.
  *
@@ -1113,3 +1113,23 @@ const STOREFRONT_WEB_LITERAL_KEY_SET = new Set(exports.STOREFRONT_WEB_LITERAL_KE
 /** Whether a shop may override `key` — membership in {@link STOREFRONT_WEB_LITERAL_KEYS}. */
 const isStorefrontLiteralKey = (key) => STOREFRONT_WEB_LITERAL_KEY_SET.has(key);
 exports.isStorefrontLiteralKey = isStorefrontLiteralKey;
+/** Keys whose value is a storefront route the storefront renders as a link target. */
+const STOREFRONT_NAVIGATE_LITERAL_PREFIX = 'NAVIGATE_';
+/**
+ * A same-origin path: a leading `/`, a second character that is neither `/` nor `\`
+ * (`//host` and `/\host` are protocol-relative to a browser), and no whitespace or
+ * backslash anywhere — a browser strips tab and newline before parsing, so `/\t/host`
+ * becomes `//host`. A value with a scheme cannot start with `/`.
+ *
+ * The storefront is to apply this identical pattern in `src/app/slices/literals.ts`
+ * `resolveLayer` (its change is pending there); keep the two the same.
+ */
+const STOREFRONT_SAME_ORIGIN_PATH_RE = /^\/(?![/\\])[^\s\\]*$/;
+/**
+ * Whether `value` may be stored, published or served for `key`. A `NAVIGATE_*` key is
+ * rendered as a link, so it must be a same-origin path — otherwise an override could
+ * send a shop's customers to an off-site look-alike login page. Every other key is
+ * unconstrained here (key membership, well-formedness and length are checked apart).
+ */
+const isAllowedStorefrontLiteralValue = (key, value) => !key.startsWith(STOREFRONT_NAVIGATE_LITERAL_PREFIX) || STOREFRONT_SAME_ORIGIN_PATH_RE.test(value);
+exports.isAllowedStorefrontLiteralValue = isAllowedStorefrontLiteralValue;

package/dist/order.d.ts

@@ -1,5 +1,10 @@
 import type { MoneyOutAttribution } from './terminal.ts';
 declare global {
+    interface OrderBelowMinimumPurchaseData {
+        minBuy: number;
+        grandTotal: number;
+        currency: string;
+    }
     /**
      * A coupon as it was redeemed onto an order — the grant frozen at
      * consumption, plus the money it actually took.
@@ -2576,10 +2581,28 @@ export declare const orderFulfilmentProgress: (order: OrderFulfilmentProgressInp
  *   `data.shiftId`. Logged; reconcile the queued sale by hand.
  * - `ORDER_CURRENCY_NOT_SUBSCRIBED` · 400 — the sale's currency has no
  *   subscription in the store's `currencies`. Logged.
- * - `PAYMENT_METHODS_NOT_CONFIGURED` · 409 — `tenders` sent while the store
- *   has no payment methods at all.
- * - `PAYMENT_METHOD_NOT_FOUND` · 400 — a tender leg's `method` names none of
- *   the store's payment methods.
+ * - `PAYMENT_METHODS_NOT_CONFIGURED` · 409 — `tenders` sent, or storefront/
+ *   WhatsApp checkout attempted, while the store has no payment methods at
+ *   all. Storefront checkout carries `data: {}` and refuses before the cart read.
+ * - `PAYMENT_METHOD_NOT_FOUND` · 400 — a tender leg's `method`, or storefront
+ *   checkout's `paymentMethod`, names none of the store's payment methods.
+ *   Storefront checkout carries `data: {}` and refuses before the cart read.
+ *
+ * Storefront and WhatsApp checkout business refusals. None allocates an order
+ * id, redeems a coupon or writes an order; none is logged as an error:
+ * - `DELIVERY_METHOD_NOT_FOUND` · 400 — `deliveryMethod` is not in the store's
+ *   delivery catalogue, including an absent/empty catalogue. `data: {}`;
+ *   refused before reading the cart.
+ * - `ORDER_INVALID_CART` · 400 — the normalized cart has no finite numeric
+ *   `totals.grandTotal`. `data: {}`; refused before repricing/allocation.
+ * - `ORDER_BELOW_MINIMUM_PURCHASE` · 400 — after repricing has confirmed the
+ *   cart, its grand total is below a finite positive `Number(customer.minBuy)`.
+ *   Equality passes. `data: OrderBelowMinimumPurchaseData` carries minBuy,
+ *   grandTotal and the cart display currency, with no currency conversion.
+ * - `EMAIL_VERIFICATION_REQUIRED` · 403 — the store requires email verification
+ *   and the live customer has not verified. No data payload; before cart read.
+ * - `ACCOUNT_DISABLED` · 403 — the live customer is disabled. No data payload;
+ *   before cart read. This is distinct from the staff `CUSTOMER_DISABLED` code.
  *
  * Commit-time drawer refusals, on a create whose cash tender books into a
  * drawer shift. No order committed, but a coupon redeemed before the commit
@@ -2677,6 +2700,6 @@ export declare const orderFulfilmentProgress: (order: OrderFulfilmentProgressInp
  * `SUBSCRIPTION_READONLY`) sit on the order CREATE leg only: an edit is not a new
  * order, so `bareOrderPostHandler` routes past `requireMetered` entirely.
  */
-export declare const ORDER_ERROR_CODES: readonly ["ORDER_COST_DENOMINATION_UNKNOWN", "SERVICE_ORDER_DELIVERY_MANAGED", "ORDER_NOT_FOUND", "ORDER_LOCKED", "ORDER_NOT_READY", "ORDER_DELIVERED_ANOTHER_DAY", "ORDER_DELIVERY_STATE_UNCHANGED", "ORDER_ILLEGAL_TRANSITION", "ORDER_VERSION_CONFLICT", "CUSTOMER_NOT_FOUND", "CUSTOMER_MERGED", "ORDER_HAS_NO_CUSTOMER", "CUSTOMER_ANONYMIZED", "FX_CONVERSION_UNAVAILABLE", "ROLE_FORBIDDEN", "ORDER_CANCELLED", "PAYMENT_SETTLED_ON_ANOTHER_ORDER", "ORDER_HAS_SHIPMENTS", "ORDER_HAS_RETURNS", "SHIPMENT_QUANTITY_EXCEEDED", "SHIPMENT_LINE_MISMATCH", "SHIPMENT_NOT_FOUND", "SHIPMENT_LIMIT_REACHED", "SHIPMENT_TOO_LARGE", "ORDER_FULFILMENT_EXTERNAL", "SHIPMENT_FAILED", "ADMIN_REQUIRED", "IDEMPOTENCY_KEY_REQUIRED", "INVALID_IDEMPOTENCY_KEY", "IDEMPOTENCY_KEY_REUSE", "IDEMPOTENCY_IN_PROGRESS", "IDEMPOTENCY_LOCK_CONTENTION", "IDEMPOTENCY_KEY_FAILED", "IDEMPOTENT_RESPONSE_NOT_CACHED", "ORDER_CANCELLATION_NOT_PROTECTED", "ORDER_CANCELLATION_COMMITTED", "ORDER_CANCELLATION_LOCKED", "ORDER_CANCELLATION_TOO_LARGE", "ORDER_CANCELLATION_FAILED", "SALE_LEDGER_RETRACTION_REFUSED", "SALE_LEDGER_ROW_NOT_OWNED", "PRODUCT_NOT_FOUND", "PRODUCT_SALE_LIMIT_EXCEEDED", "PRODUCT_SALE_LIMIT_INVALID", "DEPOSIT_SOURCE_NOT_ALLOWED", "DEPOSIT_CURRENCY_MISMATCH", "DEPOSIT_EXCEEDS_TOTAL", "DEPOSIT_FREEZE_REQUIRES_INVOICE", "DEPOSIT_FREEZE_INVOICE_PENDING", "DEPOSIT_CHARACTERIZATION_CONFLICT", "DEPOSIT_FREEZE_INVOICE_NOT_QUALIFYING", "DEPOSIT_INVOICED_ORDER_MUST_FREEZE", "DEPOSIT_REFERENCE_IS_LINKED_PAYMENT", "DEPOSIT_DUPLICATE_REFERENCE", "PAYMENT_REFERENCED_BY_DEPOSIT", "ORDER_HAS_UNREFUNDED_DEPOSIT", "DEPOSIT_NOT_FOUND", "DEPOSIT_ALREADY_REFUNDED", "UNIT_QUANTITY_NOT_WHOLE", "UNIT_REVISION_STALE", "UNIT_QUANTITY_UNREPRESENTABLE", "KIT_RECIPE_CHANGED", "CART_PROMOTION_UNAVAILABLE", "ORDER_HAS_KIT_LINES", "ORDER_TARGET_REQUIRED", "ORDER_SOURCE_CONFLICT", "ORDER_CUSTOMER_REQUIRED", "BASKET_EMPTY", "BASKET_CHANGED_DURING_CHECKOUT", "CART_VERSION_CREATE_ONLY", "CART_VERSION_REQUIRES_CART_ID", "CART_REVISION_STALE", "CART_CUSTOMER_MISMATCH", "COUNTER_SALE_CREATE_ONLY", "SOLD_AT_CREATE_ONLY", "SOLD_AT_IN_FUTURE", "ORDER_TENDER_CREATE_ONLY", "CREDIT_OVERRIDE_CREATE_ONLY", "ON_ACCOUNT_CREATE_ONLY", "ON_ACCOUNT_WITH_TENDERS", "TENDERS_REQUIRE_COUNTER_SALE", "LINES_REQUIRE_COUNTER_SALE", "PRODUCT_COST_UNKNOWN", "PRICE_CHANGE_DISABLED", "LINE_DISCOUNT_EXCEEDS_MAX", "CUSTOMER_DISABLED", "SHIFT_NOT_AVAILABLE", "SOLD_AT_OUTSIDE_SHIFT", "ORDER_CURRENCY_NOT_SUBSCRIBED", "PAYMENT_METHODS_NOT_CONFIGURED", "PAYMENT_METHOD_NOT_FOUND", "CURRENCY_MISMATCH", "SHIFT_NOT_OPEN", "ORDER_DISCOUNT_AFTER_INVOICE", "ORDER_DISCOUNT_ON_SERVICE_ORDER", "ORDER_DISCOUNT_ON_MARKETPLACE_ORDER", "ORDER_INVOICE_METHOD_OUTSTANDING_FACTURA", "ORDER_SERVICE_PERIOD_AFTER_INVOICE", "ORDER_ATTEMPT_COMMITTED", "ORDER_ATTEMPT_ABANDONED", "ORDER_ATTEMPT_KEY_EXPIRED", "ORDER_ATTEMPT_KEY_SCOPE_MISMATCH"];
+export declare const ORDER_ERROR_CODES: readonly ["ORDER_COST_DENOMINATION_UNKNOWN", "SERVICE_ORDER_DELIVERY_MANAGED", "ORDER_NOT_FOUND", "ORDER_LOCKED", "ORDER_NOT_READY", "ORDER_DELIVERED_ANOTHER_DAY", "ORDER_DELIVERY_STATE_UNCHANGED", "ORDER_ILLEGAL_TRANSITION", "ORDER_VERSION_CONFLICT", "CUSTOMER_NOT_FOUND", "CUSTOMER_MERGED", "ORDER_HAS_NO_CUSTOMER", "CUSTOMER_ANONYMIZED", "FX_CONVERSION_UNAVAILABLE", "ROLE_FORBIDDEN", "ORDER_CANCELLED", "PAYMENT_SETTLED_ON_ANOTHER_ORDER", "ORDER_HAS_SHIPMENTS", "ORDER_HAS_RETURNS", "SHIPMENT_QUANTITY_EXCEEDED", "SHIPMENT_LINE_MISMATCH", "SHIPMENT_NOT_FOUND", "SHIPMENT_LIMIT_REACHED", "SHIPMENT_TOO_LARGE", "ORDER_FULFILMENT_EXTERNAL", "SHIPMENT_FAILED", "ADMIN_REQUIRED", "IDEMPOTENCY_KEY_REQUIRED", "INVALID_IDEMPOTENCY_KEY", "IDEMPOTENCY_KEY_REUSE", "IDEMPOTENCY_IN_PROGRESS", "IDEMPOTENCY_LOCK_CONTENTION", "IDEMPOTENCY_KEY_FAILED", "IDEMPOTENT_RESPONSE_NOT_CACHED", "ORDER_CANCELLATION_NOT_PROTECTED", "ORDER_CANCELLATION_COMMITTED", "ORDER_CANCELLATION_LOCKED", "ORDER_CANCELLATION_TOO_LARGE", "ORDER_CANCELLATION_FAILED", "SALE_LEDGER_RETRACTION_REFUSED", "SALE_LEDGER_ROW_NOT_OWNED", "PRODUCT_NOT_FOUND", "PRODUCT_SALE_LIMIT_EXCEEDED", "PRODUCT_SALE_LIMIT_INVALID", "DEPOSIT_SOURCE_NOT_ALLOWED", "DEPOSIT_CURRENCY_MISMATCH", "DEPOSIT_EXCEEDS_TOTAL", "DEPOSIT_FREEZE_REQUIRES_INVOICE", "DEPOSIT_FREEZE_INVOICE_PENDING", "DEPOSIT_CHARACTERIZATION_CONFLICT", "DEPOSIT_FREEZE_INVOICE_NOT_QUALIFYING", "DEPOSIT_INVOICED_ORDER_MUST_FREEZE", "DEPOSIT_REFERENCE_IS_LINKED_PAYMENT", "DEPOSIT_DUPLICATE_REFERENCE", "PAYMENT_REFERENCED_BY_DEPOSIT", "ORDER_HAS_UNREFUNDED_DEPOSIT", "DEPOSIT_NOT_FOUND", "DEPOSIT_ALREADY_REFUNDED", "UNIT_QUANTITY_NOT_WHOLE", "UNIT_REVISION_STALE", "UNIT_QUANTITY_UNREPRESENTABLE", "KIT_RECIPE_CHANGED", "CART_PROMOTION_UNAVAILABLE", "ORDER_HAS_KIT_LINES", "ORDER_TARGET_REQUIRED", "ORDER_SOURCE_CONFLICT", "ORDER_CUSTOMER_REQUIRED", "BASKET_EMPTY", "BASKET_CHANGED_DURING_CHECKOUT", "CART_VERSION_CREATE_ONLY", "CART_VERSION_REQUIRES_CART_ID", "CART_REVISION_STALE", "CART_CUSTOMER_MISMATCH", "COUNTER_SALE_CREATE_ONLY", "SOLD_AT_CREATE_ONLY", "SOLD_AT_IN_FUTURE", "ORDER_TENDER_CREATE_ONLY", "CREDIT_OVERRIDE_CREATE_ONLY", "ON_ACCOUNT_CREATE_ONLY", "ON_ACCOUNT_WITH_TENDERS", "TENDERS_REQUIRE_COUNTER_SALE", "LINES_REQUIRE_COUNTER_SALE", "PRODUCT_COST_UNKNOWN", "PRICE_CHANGE_DISABLED", "LINE_DISCOUNT_EXCEEDS_MAX", "CUSTOMER_DISABLED", "SHIFT_NOT_AVAILABLE", "SOLD_AT_OUTSIDE_SHIFT", "ORDER_CURRENCY_NOT_SUBSCRIBED", "PAYMENT_METHODS_NOT_CONFIGURED", "PAYMENT_METHOD_NOT_FOUND", "DELIVERY_METHOD_NOT_FOUND", "ORDER_BELOW_MINIMUM_PURCHASE", "ORDER_INVALID_CART", "EMAIL_VERIFICATION_REQUIRED", "ACCOUNT_DISABLED", "CURRENCY_MISMATCH", "SHIFT_NOT_OPEN", "ORDER_DISCOUNT_AFTER_INVOICE", "ORDER_DISCOUNT_ON_SERVICE_ORDER", "ORDER_DISCOUNT_ON_MARKETPLACE_ORDER", "ORDER_INVOICE_METHOD_OUTSTANDING_FACTURA", "ORDER_SERVICE_PERIOD_AFTER_INVOICE", "ORDER_ATTEMPT_COMMITTED", "ORDER_ATTEMPT_ABANDONED", "ORDER_ATTEMPT_KEY_EXPIRED", "ORDER_ATTEMPT_KEY_SCOPE_MISMATCH"];
 export type OrderErrorCode = (typeof ORDER_ERROR_CODES)[number];
 export {};

package/dist/order.js

@@ -337,10 +337,28 @@ export const orderFulfilmentProgress = (order) => {
  *   `data.shiftId`. Logged; reconcile the queued sale by hand.
  * - `ORDER_CURRENCY_NOT_SUBSCRIBED` · 400 — the sale's currency has no
  *   subscription in the store's `currencies`. Logged.
- * - `PAYMENT_METHODS_NOT_CONFIGURED` · 409 — `tenders` sent while the store
- *   has no payment methods at all.
- * - `PAYMENT_METHOD_NOT_FOUND` · 400 — a tender leg's `method` names none of
- *   the store's payment methods.
+ * - `PAYMENT_METHODS_NOT_CONFIGURED` · 409 — `tenders` sent, or storefront/
+ *   WhatsApp checkout attempted, while the store has no payment methods at
+ *   all. Storefront checkout carries `data: {}` and refuses before the cart read.
+ * - `PAYMENT_METHOD_NOT_FOUND` · 400 — a tender leg's `method`, or storefront
+ *   checkout's `paymentMethod`, names none of the store's payment methods.
+ *   Storefront checkout carries `data: {}` and refuses before the cart read.
+ *
+ * Storefront and WhatsApp checkout business refusals. None allocates an order
+ * id, redeems a coupon or writes an order; none is logged as an error:
+ * - `DELIVERY_METHOD_NOT_FOUND` · 400 — `deliveryMethod` is not in the store's
+ *   delivery catalogue, including an absent/empty catalogue. `data: {}`;
+ *   refused before reading the cart.
+ * - `ORDER_INVALID_CART` · 400 — the normalized cart has no finite numeric
+ *   `totals.grandTotal`. `data: {}`; refused before repricing/allocation.
+ * - `ORDER_BELOW_MINIMUM_PURCHASE` · 400 — after repricing has confirmed the
+ *   cart, its grand total is below a finite positive `Number(customer.minBuy)`.
+ *   Equality passes. `data: OrderBelowMinimumPurchaseData` carries minBuy,
+ *   grandTotal and the cart display currency, with no currency conversion.
+ * - `EMAIL_VERIFICATION_REQUIRED` · 403 — the store requires email verification
+ *   and the live customer has not verified. No data payload; before cart read.
+ * - `ACCOUNT_DISABLED` · 403 — the live customer is disabled. No data payload;
+ *   before cart read. This is distinct from the staff `CUSTOMER_DISABLED` code.
  *
  * Commit-time drawer refusals, on a create whose cash tender books into a
  * drawer shift. No order committed, but a coupon redeemed before the commit
@@ -545,6 +563,11 @@ export const ORDER_ERROR_CODES = [
     'ORDER_CURRENCY_NOT_SUBSCRIBED',
     'PAYMENT_METHODS_NOT_CONFIGURED',
     'PAYMENT_METHOD_NOT_FOUND',
+    'DELIVERY_METHOD_NOT_FOUND',
+    'ORDER_BELOW_MINIMUM_PURCHASE',
+    'ORDER_INVALID_CART',
+    'EMAIL_VERIFICATION_REQUIRED',
+    'ACCOUNT_DISABLED',
     // Commit-time drawer refusals; `CURRENCY_MISMATCH` carries its fields at the body's top level.
     'CURRENCY_MISMATCH',
     'SHIFT_NOT_OPEN',

package/dist/store.d.ts

@@ -115,6 +115,11 @@ declare global {
         deactivatesAt?: number | null;
         config?: Partial<StorefrontLiveSettings> & {
             showDefaultPriceList?: number;
+            /** New self-registrants use this list; absent means PUBLICO (1).
+             * Zero is refused and writes validate membership in store.priceLists.
+             * Never sent to shoppers.
+             */
+            newCustomerPriceList?: number;
             showStocks?: boolean;
         };
         sidebar?: {
@@ -152,9 +157,12 @@ declare global {
         appVersion?: number;
         stats?: Record<string, string>;
     }
-    /** Sparse tenant PATCH shape; live null values reset to registry defaults and are never stored. */
+    /** Sparse tenant PATCH shape; live null values reset to registry defaults and are never stored.
+     * An unknown newCustomerPriceList refuses 400 PRICE_LIST_NOT_FOUND with
+     * data: { field: 'ecommerce.config.newCustomerPriceList', value: number }; nothing written.
+     */
     interface EcommercePatchInput {
-        config?: Pick<NonNullable<Ecommerce['config']>, 'showDefaultPriceList'> & StorefrontLiveSettingsPatch;
+        config?: Pick<NonNullable<Ecommerce['config']>, 'showDefaultPriceList' | 'newCustomerPriceList'> & StorefrontLiveSettingsPatch;
         sidebar?: Ecommerce['sidebar'];
         home?: Omit<NonNullable<Ecommerce['home']>, 'displayOrders' | 'displayProfile'>;
         themeColors?: Ecommerce['themeColors'];

package/dist/storefrontWebLiteralKeys.d.ts

@@ -21,3 +21,10 @@
 export declare const STOREFRONT_WEB_LITERAL_KEYS: readonly string[];
 /** Whether a shop may override `key` — membership in {@link STOREFRONT_WEB_LITERAL_KEYS}. */
 export declare const isStorefrontLiteralKey: (key: string) => boolean;
+/**
+ * Whether `value` may be stored, published or served for `key`. A `NAVIGATE_*` key is
+ * rendered as a link, so it must be a same-origin path — otherwise an override could
+ * send a shop's customers to an off-site look-alike login page. Every other key is
+ * unconstrained here (key membership, well-formedness and length are checked apart).
+ */
+export declare const isAllowedStorefrontLiteralValue: (key: string, value: string) => boolean;

package/dist/storefrontWebLiteralKeys.js

@@ -1109,3 +1109,22 @@ export const STOREFRONT_WEB_LITERAL_KEYS = Object.freeze([
 const STOREFRONT_WEB_LITERAL_KEY_SET = new Set(STOREFRONT_WEB_LITERAL_KEYS);
 /** Whether a shop may override `key` — membership in {@link STOREFRONT_WEB_LITERAL_KEYS}. */
 export const isStorefrontLiteralKey = (key) => STOREFRONT_WEB_LITERAL_KEY_SET.has(key);
+/** Keys whose value is a storefront route the storefront renders as a link target. */
+const STOREFRONT_NAVIGATE_LITERAL_PREFIX = 'NAVIGATE_';
+/**
+ * A same-origin path: a leading `/`, a second character that is neither `/` nor `\`
+ * (`//host` and `/\host` are protocol-relative to a browser), and no whitespace or
+ * backslash anywhere — a browser strips tab and newline before parsing, so `/\t/host`
+ * becomes `//host`. A value with a scheme cannot start with `/`.
+ *
+ * The storefront is to apply this identical pattern in `src/app/slices/literals.ts`
+ * `resolveLayer` (its change is pending there); keep the two the same.
+ */
+const STOREFRONT_SAME_ORIGIN_PATH_RE = /^\/(?![/\\])[^\s\\]*$/;
+/**
+ * Whether `value` may be stored, published or served for `key`. A `NAVIGATE_*` key is
+ * rendered as a link, so it must be a same-origin path — otherwise an override could
+ * send a shop's customers to an off-site look-alike login page. Every other key is
+ * unconstrained here (key membership, well-formedness and length are checked apart).
+ */
+export const isAllowedStorefrontLiteralValue = (key, value) => !key.startsWith(STOREFRONT_NAVIGATE_LITERAL_PREFIX) || STOREFRONT_SAME_ORIGIN_PATH_RE.test(value);

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "platform-types",
-	"version": "1.10.689",
+	"version": "1.10.691",
 	"description": "Shared wire and entity contracts for the platform.",
 	"type": "module",
 	"main": "dist/index.js",