platform-types 1.10.777 → 1.10.779

package/dist/cjs/index.js

@@ -121,6 +121,7 @@ __exportStar(require("./user.js"), exports);
 __exportStar(require("./userActivity.js"), exports);
 __exportStar(require("./valuation.js"), exports);
 __exportStar(require("./webhook.js"), exports);
+__exportStar(require("./wholesaleRequest.js"), exports);
 __exportStar(require("./wire.js"), exports);
 __exportStar(require("./workItem.js"), exports);
 __exportStar(require("./zone.js"), exports);

package/dist/cjs/notification.js

@@ -6,7 +6,7 @@ exports.WEB_NOTIFICATIONS_MAX_LIMIT = exports.CUSTOMER_NOTIFICATION_TYPES = expo
 // legacy opt-ins and explicit channel maps remain source data on USER rows.
 // Addressed ERROR / ML_FACTURADOR_COLLISION / ML_SELLER_SWITCHED /
 // ML_CONNECTION_BROKEN / MENTION / CUSTOMER_PENDING_APPROVAL /
-// PAYMENT_ATTEMPT_RESOLUTION do not select a producer subscriber audience;
+// PAYMENT_ATTEMPT_RESOLUTION / CUSTOMER_WHOLESALE_REQUEST do not select a producer subscriber audience;
 // the consumer still reads the live USER row for each delivery channel.
 // AFIP_CERT_EXPIRY is seeded on the founding user and uses the subscriber index.
 // Exported as a real enum consumed by api and app; adding an indexed type
@@ -199,6 +199,24 @@ var NotificationTypeEnum;
      * re-opens rings again.
      */
     NotificationTypeEnum["PAYMENT_ATTEMPT_RESOLUTION"] = "PAYMENT_ATTEMPT_RESOLUTION";
+    /**
+     * A signed-in storefront buyer asked for a wholesale account
+     * (`POST /user { mode: 'wholesale-request' }`) and the request waits in the
+     * operator queue (`GET /customers?mode=wholesale-requests`). Names the buyer
+     * by name only — never their email or CUIT.
+     *
+     * ⚠️ ADMIN-ONLY, and its own preference key. The producer fans out to every
+     * non-disabled ADMIN of the store (`listActiveAdmins`) — the tier that reads
+     * the queue and decides it — so a client offers the
+     * `CUSTOMER_WHOLESALE_REQUEST` toggle to ADMINs only. No legacy opt-in scan:
+     * the consumer enforces explicit type/channel preferences
+     * (`notificationPreferences.CUSTOMER_WHOLESALE_REQUEST`), default-on when
+     * absent. Additive — no backfill or consumer migration owed.
+     *
+     * ⚠️ Carries `wholesaleRequestRef` and NEVER a top-level `customerId` (an
+     * audience — the bell would reach the buyer's own storefront socket).
+     */
+    NotificationTypeEnum["CUSTOMER_WHOLESALE_REQUEST"] = "CUSTOMER_WHOLESALE_REQUEST";
 })(NotificationTypeEnum || (exports.NotificationTypeEnum = NotificationTypeEnum = {}));
 /**
  * The notification types a CUSTOMER bell can carry today; each links through

package/dist/cjs/socket.js

@@ -691,6 +691,17 @@ exports.SOCKET_ACTIONS = [
      * where the role and scope gates sit.
      */
     'workItems',
+    /**
+     * BE → the store's ADMIN-TIER operator sockets when a buyer's wholesale
+     * request is submitted or decided. Carries the `WholesaleRequest` row as it
+     * now stands (company data included), so the queue can patch in place.
+     *
+     * ⚠️ Admin tier only — `wsPostStore(..., { audience: 'operator', lowTierData:
+     * null })`: the queue is an admin-tier read, so a USER or PRINTER socket
+     * receives nothing. The buyer follows their own request on the `'customers'`
+     * action instead (`WholesaleRequestStatusFrame`).
+     */
+    'wholesaleRequests',
 ];
 /** Runtime guard — narrows an untrusted string to a known action. */
 const isSocketAction = (value) => typeof value === 'string' && exports.SOCKET_ACTIONS.includes(value);

package/dist/cjs/store.js

@@ -139,6 +139,13 @@ exports.STORE_MODULE_ERROR_CODES = [
  *   entry naming no list of the store, with `data: { field, value }` where
  *   `field` is `<catalog>[<row>].availability.priceLists[<entry>]`.
  *
+ * Request refusal, `409`:
+ * - `WHOLESALE_LIST_REQUIRED` — an `ecommerce` save turns
+ *   `config.wholesaleRequests` on while the store holds no
+ *   `audienceClass: 'wholesale'` list (`store/_ecommercePatch.ts`), with
+ *   `data: { field: 'ecommerce.config.wholesaleRequests' }`. The platform PUT
+ *   answers it too.
+ *
  * Maintenance mode (`{ mode: 'maintenance', level }`, `store/_patchMaintenance.ts`):
  * - `FORBIDDEN` (403) — the caller is neither an ADMIN nor a MANAGER.
  * - `STORE_NOT_FOUND` (404) — the store row is gone.
@@ -170,6 +177,7 @@ exports.STORE_PATCH_ERROR_CODES = [
     'DISPLAY_CURRENCY_NOT_INVOICEABLE',
     'PRODUCT_CURRENCY_NOT_INVOICEABLE',
     'PRICE_LIST_NOT_FOUND',
+    'WHOLESALE_LIST_REQUIRED',
     'FORBIDDEN',
     'STORE_NOT_FOUND',
 ];

package/dist/cjs/storefrontWebLiteralKeys.js

@@ -1,6 +1,6 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.isAdoptableStorefrontLiteral = exports.isAllowedStorefrontLiteralValue = exports.isStorefrontLiteralKey = exports.STOREFRONT_WEB_LITERAL_KEYS = void 0;
+exports.isAdoptableStorefrontLiteral = exports.isStorefrontLiteralKey = exports.STOREFRONT_WEB_LITERAL_KEYS = void 0;
 const storefrontDesignRegistry_ts_1 = require("./storefrontDesignRegistry.js");
 /**
  * Every storefront `WEB` literal key a shop may override, in code-unit order.
@@ -17,6 +17,9 @@ const storefrontDesignRegistry_ts_1 = require("./storefrontDesignRegistry.js");
  * - keys whose storefront value is not a plain `{name}`-token sentence (it
  *   branches, computes, or is not a string), which a shop string cannot
  *   express.
+ * Route paths (the former `NAVIGATE_*` keys) are not copy at all: they live in
+ * the storefront's own config, and the api refuses and drops a `NAVIGATE_*`
+ * literal on every storefront surface.
  * An editor that lists any of those offers an edit the server refuses.
  *
  * Interpolated values use `{name}` tokens named after the storefront's own
@@ -492,6 +495,8 @@ exports.STOREFRONT_WEB_LITERAL_KEYS = Object.freeze([
     'DATA_RIGHTS_COLLECTION_NOTES',
     'DATA_RIGHTS_COLLECTION_ORDERS',
     'DATA_RIGHTS_COLLECTION_PAYMENTS',
+    'DATA_RIGHTS_COLLECTION_RECENT_PURCHASES',
+    'DATA_RIGHTS_COLLECTION_WHOLESALE_REQUESTS',
     'DATA_RIGHTS_DIALOG_ACK',
     'DATA_RIGHTS_DIALOG_CONFIRM',
     'DATA_RIGHTS_DIALOG_FISCAL',
@@ -815,27 +820,6 @@ exports.STOREFRONT_WEB_LITERAL_KEYS = Object.freeze([
     'MOBILE_BUTTONS_FAVORITES',
     'MOBILE_BUTTONS_INVOICES',
     'MOBILE_BUTTONS_ORDERS',
-    'NAVIGATE_APPOINTMENTS',
-    'NAVIGATE_BASKET',
-    'NAVIGATE_BRANDS',
-    'NAVIGATE_CATEGORIES',
-    'NAVIGATE_CHECKOUT',
-    'NAVIGATE_FAVORITES',
-    'NAVIGATE_HOME',
-    'NAVIGATE_INCOMES',
-    'NAVIGATE_INVOICES',
-    'NAVIGATE_LOGIN',
-    'NAVIGATE_LOGOUT',
-    'NAVIGATE_MAINTENANCE',
-    'NAVIGATE_NEW_ARRIVALS',
-    'NAVIGATE_NOTIFICATIONS',
-    'NAVIGATE_ORDERS',
-    'NAVIGATE_PAYMENTS',
-    'NAVIGATE_PROFILE',
-    'NAVIGATE_RECOVER',
-    'NAVIGATE_REGISTRATION',
-    'NAVIGATE_SALE',
-    'NAVIGATE_SESSIONS',
     'NETWORK_OFFLINE',
     'NETWORK_REQUEST_FAILED',
     'NETWORK_TIMEOUT',
@@ -1078,6 +1062,7 @@ exports.STOREFRONT_WEB_LITERAL_KEYS = Object.freeze([
     'PREVIEW_LOADING',
     'PREVIEW_READ_FAILED',
     'PREVIEW_READ_ONLY',
+    'PREVIEW_RECENTLY_BOUGHT',
     'PREVIEW_RESTART',
     'PREVIEW_RETRY',
     'PREVIEW_TITLE',
@@ -1346,6 +1331,7 @@ exports.STOREFRONT_WEB_LITERAL_KEYS = Object.freeze([
     'STOREFRONT_FOOTER_NAV_ARIA',
     'STOREFRONT_MERCHANT_NAV_ARIA',
     'STOREFRONT_NAV_GROUP_FALLBACK',
+    'STOREFRONT_PRODUCTS_REFRESH_FAILED',
     'STOREFRONT_SEARCH',
     'STOREFRONT_SOCIAL_FACEBOOK',
     'STOREFRONT_SOCIAL_INSTAGRAM',
@@ -1374,34 +1360,13 @@ const STOREFRONT_WEB_LITERAL_KEY_SET = new Set(exports.STOREFRONT_WEB_LITERAL_KE
 /** Whether a shop may override `key` — membership in {@link STOREFRONT_WEB_LITERAL_KEYS}. */
 const isStorefrontLiteralKey = (key) => STOREFRONT_WEB_LITERAL_KEY_SET.has(key);
 exports.isStorefrontLiteralKey = isStorefrontLiteralKey;
-/** Keys whose value is a storefront route the storefront renders as a link target. */
-const STOREFRONT_NAVIGATE_LITERAL_PREFIX = 'NAVIGATE_';
-/**
- * A same-origin path: a leading `/`, a second character that is neither `/` nor `\`
- * (`//host` and `/\host` are protocol-relative to a browser), and no whitespace,
- * backslash, control character (`\p{Cc}`) or invisible format character (`\p{Cf}`: every
- * bidi mark including U+061C, zero-width characters, the soft hyphen, tag characters)
- * anywhere. Browsers strip tab and newline before parsing, so `/\t/host` becomes `//host`;
- * invisible and directional characters can also disguise the link target. A scheme
- * cannot start with `/`.
- */
-const STOREFRONT_SAME_ORIGIN_PATH_RE = /^\/(?![/\\])[^\s\\\p{Cc}\p{Cf}]*$/u;
-/**
- * Whether `value` may be stored, published or served for `key`. A `NAVIGATE_*` key is
- * rendered as a link, so it must be a same-origin path — otherwise an override could
- * send a shop's customers to an off-site look-alike login page. Every other key is
- * unconstrained here (key membership, well-formedness and length are checked apart).
- */
-const isAllowedStorefrontLiteralValue = (key, value) => !key.startsWith(STOREFRONT_NAVIGATE_LITERAL_PREFIX) || STOREFRONT_SAME_ORIGIN_PATH_RE.test(value);
-exports.isAllowedStorefrontLiteralValue = isAllowedStorefrontLiteralValue;
 /**
  * Whether a shop's stored `value` for `key` is one a save keeps, a read serves and the editor
- * baseline adopts: a shop-overridable key, a well-formed string within
- * {@link STOREFRONT_DESIGN_LITERAL_MAX_CODE_POINTS} code points, and an allowed value for it.
+ * baseline adopts: a shop-overridable key and a well-formed string within
+ * {@link STOREFRONT_DESIGN_LITERAL_MAX_CODE_POINTS} code points.
  */
 const isAdoptableStorefrontLiteral = (key, value) => (0, exports.isStorefrontLiteralKey)(key) &&
     typeof value === 'string' &&
     value.isWellFormed() &&
-    Array.from(value).length <= storefrontDesignRegistry_ts_1.STOREFRONT_DESIGN_LITERAL_MAX_CODE_POINTS &&
-    (0, exports.isAllowedStorefrontLiteralValue)(key, value);
+    Array.from(value).length <= storefrontDesignRegistry_ts_1.STOREFRONT_DESIGN_LITERAL_MAX_CODE_POINTS;
 exports.isAdoptableStorefrontLiteral = isAdoptableStorefrontLiteral;

package/dist/cjs/wholesaleRequest.js

@@ -0,0 +1,64 @@
+"use strict";
+/**
+ * A signed-in storefront buyer's request for a wholesale account, and the
+ * operator queue that decides it.
+ *
+ * One row per customer (`WHOLESALEREQ#{storeId}` / `{customerId}`). A new
+ * request overwrites the previous one only once that one is decided, so a
+ * customer holds at most one pending request.
+ *
+ * The flow is offered only while the store's
+ * `ecommerce.config.wholesaleRequests` is `true` (absent = off).
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.WHOLESALE_REQUEST_ERROR_CODES = exports.WHOLESALE_REQUEST_REASON_MAX = exports.WHOLESALE_REQUEST_PHONE_MAX = exports.WHOLESALE_REQUEST_MESSAGE_MAX = exports.WHOLESALE_REQUEST_ACTIVITY_MAX = exports.WHOLESALE_REQUEST_RAZON_SOCIAL_MAX = exports.WHOLESALE_REQUESTS_PAGE_MAX = exports.WHOLESALE_REQUEST_STATES = void 0;
+/** The three states a request moves through. */
+exports.WHOLESALE_REQUEST_STATES = ['pending', 'approved', 'declined'];
+/** `GET /customers?mode=wholesale-requests` page ceiling; the default page is 50. */
+exports.WHOLESALE_REQUESTS_PAGE_MAX = 100;
+/** Character ceilings on the buyer's free text, counted after trimming. */
+exports.WHOLESALE_REQUEST_RAZON_SOCIAL_MAX = 200;
+exports.WHOLESALE_REQUEST_ACTIVITY_MAX = 120;
+exports.WHOLESALE_REQUEST_MESSAGE_MAX = 1000;
+exports.WHOLESALE_REQUEST_PHONE_MAX = 30;
+/** Character ceiling on the operator's decline reason, counted after trimming. */
+exports.WHOLESALE_REQUEST_REASON_MAX = 500;
+/**
+ * Every `error` code the wholesale-request flow answers on its own behalf:
+ * - web `POST /user { mode: 'wholesale-request' }` (`stacks/web/lambdas/user/_wholesaleRequest.ts`):
+ *   `WHOLESALE_REQUESTS_DISABLED`, `CUSTOMER_NOT_FOUND`, `CUSTOMER_ANONYMIZED`, `USER_NOT_ENABLED`,
+ *   `CUSTOMER_ALREADY_WHOLESALE`, `WHOLESALE_REQUEST_CONTENDED`, `WHOLESALE_REQUEST_PENDING`;
+ * - app `GET /customers?mode=wholesale-requests` and `POST /customers { mode: 'wholesale-decision' }`
+ *   (`stacks/lambdas/customers/_wholesaleRequests.ts`): `ROLE_FORBIDDEN`, `ADMIN_REQUIRED`,
+ *   `INVALID_CURSOR`, `WHOLESALE_REQUEST_NOT_PENDING`, `WHOLESALE_DECISION_CONTENDED`,
+ *   `CUSTOMER_NOT_FOUND`, `CUSTOMER_ANONYMIZED`, `CUSTOMER_MERGED`, `PRICE_LIST_NOT_FOUND`,
+ *   `PRICE_LIST_NOT_WHOLESALE`, `WHOLESALE_REQUEST_NOT_FOUND`;
+ * - the opt-in refusal both configuration writers answer when `ecommerce.config.wholesaleRequests`
+ *   turns on with no wholesale-class list: `WHOLESALE_LIST_REQUIRED` (`409`). It is also in
+ *   `STORE_PATCH_ERROR_CODES`, on purpose: a wholesale client handles it without reading that tuple.
+ *
+ * The rule: a code is listed when a wholesale handler writes it as its own literal, and each of
+ * those literals is typed `satisfies WholesaleRequestErrorCode`, so one this list misses fails
+ * typecheck. A code those routes forward from a shared helper is not listed, though a wholesale
+ * route can answer it: the customer-access refusals (`refuseCustomerAccess`), `VALIDATION_FAILED`
+ * (`validateRequest`), the handler wrapper's own codes and the authorizer's.
+ */
+exports.WHOLESALE_REQUEST_ERROR_CODES = [
+    'WHOLESALE_REQUESTS_DISABLED',
+    'CUSTOMER_NOT_FOUND',
+    'CUSTOMER_ANONYMIZED',
+    'USER_NOT_ENABLED',
+    'CUSTOMER_ALREADY_WHOLESALE',
+    'WHOLESALE_REQUEST_CONTENDED',
+    'WHOLESALE_REQUEST_PENDING',
+    'ROLE_FORBIDDEN',
+    'ADMIN_REQUIRED',
+    'INVALID_CURSOR',
+    'WHOLESALE_REQUEST_NOT_PENDING',
+    'WHOLESALE_DECISION_CONTENDED',
+    'CUSTOMER_MERGED',
+    'PRICE_LIST_NOT_FOUND',
+    'PRICE_LIST_NOT_WHOLESALE',
+    'WHOLESALE_REQUEST_NOT_FOUND',
+    'WHOLESALE_LIST_REQUIRED',
+];

package/dist/customer.d.ts

@@ -1238,6 +1238,15 @@ declare global {
          * On BOTH surfaces; `[]` when the subject has none.
          */
         recentPurchases: CustomerRecentPurchaseExportEntry[];
+        /**
+         * The subject's wholesale-account requests, on BOTH surfaces: the one filed
+         * under their own id plus any filed under a merged-away id folded into them
+         * (the same folded ids, and the same cap, as the financial collections) —
+         * the company data submitted and its state, never the decline reason or the
+         * deciding operator. Absent when there is none (and from servers predating
+         * the request flow).
+         */
+        wholesaleRequests?: WholesaleRequestExportEntry[];
         /**
          * Per COLLECTION, and honest: `true` means the read stopped before the
          * end of a partition, folded financial IDs were omitted at the cap, or whole
@@ -1261,6 +1270,12 @@ declare global {
             favorites: boolean;
             /** `true` when folded ids past the cap were not read. */
             recentPurchases: boolean;
+            /**
+             * Present when `wholesaleRequests` is, or when merged-away ids were cut
+             * at the folded-id cap — then `true`: a request filed under an omitted id
+             * may be missing.
+             */
+            wholesaleRequests?: boolean;
         };
     }
     /**

package/dist/index.d.ts

@@ -97,6 +97,7 @@ export * from './user.ts';
 export * from './userActivity.ts';
 export * from './valuation.ts';
 export * from './webhook.ts';
+export * from './wholesaleRequest.ts';
 export * from './wire.ts';
 export * from './workItem.ts';
 export * from './zone.ts';

package/dist/index.js

@@ -105,6 +105,7 @@ export * from "./user.js";
 export * from "./userActivity.js";
 export * from "./valuation.js";
 export * from "./webhook.js";
+export * from "./wholesaleRequest.js";
 export * from "./wire.js";
 export * from "./workItem.js";
 export * from "./zone.js";

package/dist/notification.d.ts

@@ -177,7 +177,25 @@ export declare enum NotificationTypeEnum {
      * nothing. An attempt an operator closed (`resolved`) and a later approval
      * re-opens rings again.
      */
-    PAYMENT_ATTEMPT_RESOLUTION = "PAYMENT_ATTEMPT_RESOLUTION"
+    PAYMENT_ATTEMPT_RESOLUTION = "PAYMENT_ATTEMPT_RESOLUTION",
+    /**
+     * A signed-in storefront buyer asked for a wholesale account
+     * (`POST /user { mode: 'wholesale-request' }`) and the request waits in the
+     * operator queue (`GET /customers?mode=wholesale-requests`). Names the buyer
+     * by name only — never their email or CUIT.
+     *
+     * ⚠️ ADMIN-ONLY, and its own preference key. The producer fans out to every
+     * non-disabled ADMIN of the store (`listActiveAdmins`) — the tier that reads
+     * the queue and decides it — so a client offers the
+     * `CUSTOMER_WHOLESALE_REQUEST` toggle to ADMINs only. No legacy opt-in scan:
+     * the consumer enforces explicit type/channel preferences
+     * (`notificationPreferences.CUSTOMER_WHOLESALE_REQUEST`), default-on when
+     * absent. Additive — no backfill or consumer migration owed.
+     *
+     * ⚠️ Carries `wholesaleRequestRef` and NEVER a top-level `customerId` (an
+     * audience — the bell would reach the buyer's own storefront socket).
+     */
+    CUSTOMER_WHOLESALE_REQUEST = "CUSTOMER_WHOLESALE_REQUEST"
 }
 /**
  * The notification types a CUSTOMER bell can carry today; each links through
@@ -290,6 +308,11 @@ declare global {
          * POINTER, not an audience — see {@link PendingCustomerRef}.
          */
         pendingCustomerRef?: PendingCustomerRef;
+        /**
+         * `CUSTOMER_WHOLESALE_REQUEST` only: which request to open. A POINTER, not
+         * an audience — see {@link WholesaleRequestRef}.
+         */
+        wholesaleRequestRef?: WholesaleRequestRef;
         /** `MENTION` only: the colleague who wrote the mention (a snapshot). */
         actor?: NotificationActor;
         userId?: string;
@@ -353,7 +376,7 @@ declare global {
      * customer socket carry — the stored row minus the operator-only pointers.
      * A union keyed on `type`; `ORDER` is its only member today.
      */
-    type CustomerNotification = Omit<NotificationInterface, 'cartRef' | 'pendingCustomerRef' | 'TableName' | 'type' | 'orderId'> & {
+    type CustomerNotification = Omit<NotificationInterface, 'cartRef' | 'pendingCustomerRef' | 'wholesaleRequestRef' | 'TableName' | 'type' | 'orderId'> & {
         type: NotificationTypeEnum.ORDER;
         /** Set on every customer row: the order the bell is about. */
         orderId: string;

package/dist/notification.js

@@ -3,7 +3,7 @@
 // legacy opt-ins and explicit channel maps remain source data on USER rows.
 // Addressed ERROR / ML_FACTURADOR_COLLISION / ML_SELLER_SWITCHED /
 // ML_CONNECTION_BROKEN / MENTION / CUSTOMER_PENDING_APPROVAL /
-// PAYMENT_ATTEMPT_RESOLUTION do not select a producer subscriber audience;
+// PAYMENT_ATTEMPT_RESOLUTION / CUSTOMER_WHOLESALE_REQUEST do not select a producer subscriber audience;
 // the consumer still reads the live USER row for each delivery channel.
 // AFIP_CERT_EXPIRY is seeded on the founding user and uses the subscriber index.
 // Exported as a real enum consumed by api and app; adding an indexed type
@@ -196,6 +196,24 @@ export var NotificationTypeEnum;
      * re-opens rings again.
      */
     NotificationTypeEnum["PAYMENT_ATTEMPT_RESOLUTION"] = "PAYMENT_ATTEMPT_RESOLUTION";
+    /**
+     * A signed-in storefront buyer asked for a wholesale account
+     * (`POST /user { mode: 'wholesale-request' }`) and the request waits in the
+     * operator queue (`GET /customers?mode=wholesale-requests`). Names the buyer
+     * by name only — never their email or CUIT.
+     *
+     * ⚠️ ADMIN-ONLY, and its own preference key. The producer fans out to every
+     * non-disabled ADMIN of the store (`listActiveAdmins`) — the tier that reads
+     * the queue and decides it — so a client offers the
+     * `CUSTOMER_WHOLESALE_REQUEST` toggle to ADMINs only. No legacy opt-in scan:
+     * the consumer enforces explicit type/channel preferences
+     * (`notificationPreferences.CUSTOMER_WHOLESALE_REQUEST`), default-on when
+     * absent. Additive — no backfill or consumer migration owed.
+     *
+     * ⚠️ Carries `wholesaleRequestRef` and NEVER a top-level `customerId` (an
+     * audience — the bell would reach the buyer's own storefront socket).
+     */
+    NotificationTypeEnum["CUSTOMER_WHOLESALE_REQUEST"] = "CUSTOMER_WHOLESALE_REQUEST";
 })(NotificationTypeEnum || (NotificationTypeEnum = {}));
 /**
  * The notification types a CUSTOMER bell can carry today; each links through

package/dist/socket.d.ts

@@ -26,7 +26,7 @@
  * A client must ignore actions it does not own rather than assume it
  * receives all of them.
  */
-export declare const SOCKET_ACTIONS: readonly ["account", "appointments", "appointmentWaitlist", "attendance", "attributes", "automation-rules", "baskets", "cart", "brands", "cash", "catalogOperation", "categories", "campaigns", "customers", "customerNote", "customerAddress", "customerContact", "deliveries", "globals", "inventory", "invoices", "literals", "loyalty", "orders", "presupuestos", "products", "promotions", "segments", "returns", "rma", "templates", "services", "service-templates", "shifts", "stores", "suppliers", "supplier-invoice", "support", "surveys", "users", "warehouses", "zones", "favorites", "webhooks", "account-delete", "baskets-delete", "cart-delete", "log-delete", "notifications", "support-message", "payment_received", "mp_payment_status_changed", "payment_linked", "payment_unlinked", "mercadopago", "mercadopago_dynamic_qr_created", "mercadopago_static_qr_created", "mp_hook_log_appended", "mp_ipn_log_appended", "orderPaymentAttempt", "orderDelivery", "paymentAttemptChanged", "stripe", "subscription", "caea", "print", "print-order", "print-invoice", "print-product", "print-tag", "print_job_failed", "request_printers", "printers_changed", "agent_status_changed", "print_rules_changed", "printers_active", "agent_command", "maintenance", "currency_auto_updated", "drain_progress", "integration_event_appended", "userActivityRecorded", "mercadolibre_settlement_period", "customDomain", "purchaseOrders", "cycleCounts", "stockTransfers", "workItems"];
+export declare const SOCKET_ACTIONS: readonly ["account", "appointments", "appointmentWaitlist", "attendance", "attributes", "automation-rules", "baskets", "cart", "brands", "cash", "catalogOperation", "categories", "campaigns", "customers", "customerNote", "customerAddress", "customerContact", "deliveries", "globals", "inventory", "invoices", "literals", "loyalty", "orders", "presupuestos", "products", "promotions", "segments", "returns", "rma", "templates", "services", "service-templates", "shifts", "stores", "suppliers", "supplier-invoice", "support", "surveys", "users", "warehouses", "zones", "favorites", "webhooks", "account-delete", "baskets-delete", "cart-delete", "log-delete", "notifications", "support-message", "payment_received", "mp_payment_status_changed", "payment_linked", "payment_unlinked", "mercadopago", "mercadopago_dynamic_qr_created", "mercadopago_static_qr_created", "mp_hook_log_appended", "mp_ipn_log_appended", "orderPaymentAttempt", "orderDelivery", "paymentAttemptChanged", "stripe", "subscription", "caea", "print", "print-order", "print-invoice", "print-product", "print-tag", "print_job_failed", "request_printers", "printers_changed", "agent_status_changed", "print_rules_changed", "printers_active", "agent_command", "maintenance", "currency_auto_updated", "drain_progress", "integration_event_appended", "userActivityRecorded", "mercadolibre_settlement_period", "customDomain", "purchaseOrders", "cycleCounts", "stockTransfers", "workItems", "wholesaleRequests"];
 /** Union of every server→client data-frame action. */
 export type SocketAction = (typeof SOCKET_ACTIONS)[number];
 /**

package/dist/socket.js

@@ -688,6 +688,17 @@ export const SOCKET_ACTIONS = [
      * where the role and scope gates sit.
      */
     'workItems',
+    /**
+     * BE → the store's ADMIN-TIER operator sockets when a buyer's wholesale
+     * request is submitted or decided. Carries the `WholesaleRequest` row as it
+     * now stands (company data included), so the queue can patch in place.
+     *
+     * ⚠️ Admin tier only — `wsPostStore(..., { audience: 'operator', lowTierData:
+     * null })`: the queue is an admin-tier read, so a USER or PRINTER socket
+     * receives nothing. The buyer follows their own request on the `'customers'`
+     * action instead (`WholesaleRequestStatusFrame`).
+     */
+    'wholesaleRequests',
 ];
 /** Runtime guard — narrows an untrusted string to a known action. */
 export const isSocketAction = (value) => typeof value === 'string' && SOCKET_ACTIONS.includes(value);

package/dist/store.d.ts

@@ -146,6 +146,18 @@ declare global {
              * frame), so the storefront can say the account needs approval.
              */
             registrationMode?: 'open' | 'approval';
+            /**
+             * Whether a signed-in storefront buyer may ask for a wholesale account
+             * (`POST /user { mode: 'wholesale-request' }`). Absent or `false` = off:
+             * the request route refuses `403 WHOLESALE_REQUESTS_DISABLED`. Explicit on
+             * purpose — a store may hold wholesale-class lists for customers it assigns
+             * itself without inviting requests. Turning it on requires at least one
+             * `audienceClass: 'wholesale'` list (`409 WHOLESALE_LIST_REQUIRED`).
+             * Written by `PATCH /store` (ADMIN) and `PUT /platform/stores/{storeId}`
+             * (MANAGER). SENT TO SHOPPERS (web `GET /store` and the customer `stores`
+             * frame), so the storefront can offer the request.
+             */
+            wholesaleRequests?: boolean;
             /**
              * How long a storefront online payment holds the order, in whole
              * minutes: the payment attempt's `expiresAt` and its Checkout Pro
@@ -198,9 +210,11 @@ declare global {
     /** Sparse tenant PATCH shape; live null values reset to registry defaults and are never stored.
      * An unknown newCustomerPriceList refuses 400 PRICE_LIST_NOT_FOUND with
      * data: { field: 'ecommerce.config.newCustomerPriceList', value: number }; nothing written.
+     * `wholesaleRequests: true` on a store with no `audienceClass: 'wholesale'` list
+     * refuses 409 WHOLESALE_LIST_REQUIRED; nothing written.
      */
     interface EcommercePatchInput {
-        config?: Pick<NonNullable<Ecommerce['config']>, 'showDefaultPriceList' | 'newCustomerPriceList' | 'registrationMode' | 'paymentHoldMinutes'> & StorefrontLiveSettingsPatch;
+        config?: Pick<NonNullable<Ecommerce['config']>, 'showDefaultPriceList' | 'newCustomerPriceList' | 'registrationMode' | 'wholesaleRequests' | 'paymentHoldMinutes'> & StorefrontLiveSettingsPatch;
         sidebar?: Ecommerce['sidebar'];
         home?: Omit<NonNullable<Ecommerce['home']>, 'displayOrders' | 'displayProfile'>;
         themeColors?: Ecommerce['themeColors'];
@@ -2398,6 +2412,13 @@ export type StoreModuleRefusalBody = {
  *   entry naming no list of the store, with `data: { field, value }` where
  *   `field` is `<catalog>[<row>].availability.priceLists[<entry>]`.
  *
+ * Request refusal, `409`:
+ * - `WHOLESALE_LIST_REQUIRED` — an `ecommerce` save turns
+ *   `config.wholesaleRequests` on while the store holds no
+ *   `audienceClass: 'wholesale'` list (`store/_ecommercePatch.ts`), with
+ *   `data: { field: 'ecommerce.config.wholesaleRequests' }`. The platform PUT
+ *   answers it too.
+ *
  * Maintenance mode (`{ mode: 'maintenance', level }`, `store/_patchMaintenance.ts`):
  * - `FORBIDDEN` (403) — the caller is neither an ADMIN nor a MANAGER.
  * - `STORE_NOT_FOUND` (404) — the store row is gone.
@@ -2411,5 +2432,5 @@ export type StoreModuleRefusalBody = {
  * checks, the display-currency lock, the storefront fence) are not listed
  * either. Cross-cutting refusals: check `GATING_ERROR_CODES` as well.
  */
-export declare const STORE_PATCH_ERROR_CODES: readonly ["STORE_CONFIG_FORBIDDEN", "STORE_ECOMMERCE_FORBIDDEN", "STORE_FISCAL_FIELD_FORBIDDEN", "STORE_JURISDICTION_FORBIDDEN", "AFIP_RELACION_FLAG_FORBIDDEN", "FX_TABLE_FORBIDDEN", "FX_AUTO_UPDATE_FORBIDDEN", "FIELD_NOT_WRITABLE_HERE", "AFIP_POINT_OF_SALE_NOT_CLEARABLE", "CURRENCY_CATALOG_ID_UNKNOWN", "ARS_RATE_MUST_BE_ONE", "CURRENCY_RATE_ABOVE_CEILING", "FX_CATALOG_ID_UNKNOWN", "FX_SOURCE_ID_UNKNOWN", "DISPLAY_CURRENCY_NOT_INVOICEABLE", "PRODUCT_CURRENCY_NOT_INVOICEABLE", "PRICE_LIST_NOT_FOUND", "FORBIDDEN", "STORE_NOT_FOUND"];
+export declare const STORE_PATCH_ERROR_CODES: readonly ["STORE_CONFIG_FORBIDDEN", "STORE_ECOMMERCE_FORBIDDEN", "STORE_FISCAL_FIELD_FORBIDDEN", "STORE_JURISDICTION_FORBIDDEN", "AFIP_RELACION_FLAG_FORBIDDEN", "FX_TABLE_FORBIDDEN", "FX_AUTO_UPDATE_FORBIDDEN", "FIELD_NOT_WRITABLE_HERE", "AFIP_POINT_OF_SALE_NOT_CLEARABLE", "CURRENCY_CATALOG_ID_UNKNOWN", "ARS_RATE_MUST_BE_ONE", "CURRENCY_RATE_ABOVE_CEILING", "FX_CATALOG_ID_UNKNOWN", "FX_SOURCE_ID_UNKNOWN", "DISPLAY_CURRENCY_NOT_INVOICEABLE", "PRODUCT_CURRENCY_NOT_INVOICEABLE", "PRICE_LIST_NOT_FOUND", "WHOLESALE_LIST_REQUIRED", "FORBIDDEN", "STORE_NOT_FOUND"];
 export type StorePatchErrorCode = (typeof STORE_PATCH_ERROR_CODES)[number];

package/dist/store.js

@@ -134,6 +134,13 @@ export const STORE_MODULE_ERROR_CODES = [
  *   entry naming no list of the store, with `data: { field, value }` where
  *   `field` is `<catalog>[<row>].availability.priceLists[<entry>]`.
  *
+ * Request refusal, `409`:
+ * - `WHOLESALE_LIST_REQUIRED` — an `ecommerce` save turns
+ *   `config.wholesaleRequests` on while the store holds no
+ *   `audienceClass: 'wholesale'` list (`store/_ecommercePatch.ts`), with
+ *   `data: { field: 'ecommerce.config.wholesaleRequests' }`. The platform PUT
+ *   answers it too.
+ *
  * Maintenance mode (`{ mode: 'maintenance', level }`, `store/_patchMaintenance.ts`):
  * - `FORBIDDEN` (403) — the caller is neither an ADMIN nor a MANAGER.
  * - `STORE_NOT_FOUND` (404) — the store row is gone.
@@ -165,6 +172,7 @@ export const STORE_PATCH_ERROR_CODES = [
     'DISPLAY_CURRENCY_NOT_INVOICEABLE',
     'PRODUCT_CURRENCY_NOT_INVOICEABLE',
     'PRICE_LIST_NOT_FOUND',
+    'WHOLESALE_LIST_REQUIRED',
     'FORBIDDEN',
     'STORE_NOT_FOUND',
 ];

package/dist/storefrontWebLiteralKeys.d.ts

@@ -13,6 +13,9 @@
  * - keys whose storefront value is not a plain `{name}`-token sentence (it
  *   branches, computes, or is not a string), which a shop string cannot
  *   express.
+ * Route paths (the former `NAVIGATE_*` keys) are not copy at all: they live in
+ * the storefront's own config, and the api refuses and drops a `NAVIGATE_*`
+ * literal on every storefront surface.
  * An editor that lists any of those offers an edit the server refuses.
  *
  * Interpolated values use `{name}` tokens named after the storefront's own
@@ -21,16 +24,9 @@
 export declare const STOREFRONT_WEB_LITERAL_KEYS: readonly string[];
 /** Whether a shop may override `key` — membership in {@link STOREFRONT_WEB_LITERAL_KEYS}. */
 export declare const isStorefrontLiteralKey: (key: string) => boolean;
-/**
- * Whether `value` may be stored, published or served for `key`. A `NAVIGATE_*` key is
- * rendered as a link, so it must be a same-origin path — otherwise an override could
- * send a shop's customers to an off-site look-alike login page. Every other key is
- * unconstrained here (key membership, well-formedness and length are checked apart).
- */
-export declare const isAllowedStorefrontLiteralValue: (key: string, value: string) => boolean;
 /**
  * Whether a shop's stored `value` for `key` is one a save keeps, a read serves and the editor
- * baseline adopts: a shop-overridable key, a well-formed string within
- * {@link STOREFRONT_DESIGN_LITERAL_MAX_CODE_POINTS} code points, and an allowed value for it.
+ * baseline adopts: a shop-overridable key and a well-formed string within
+ * {@link STOREFRONT_DESIGN_LITERAL_MAX_CODE_POINTS} code points.
  */
 export declare const isAdoptableStorefrontLiteral: (key: string, value: unknown) => value is string;

package/dist/storefrontWebLiteralKeys.js

@@ -14,6 +14,9 @@ import { STOREFRONT_DESIGN_LITERAL_MAX_CODE_POINTS } from "./storefrontDesignReg
  * - keys whose storefront value is not a plain `{name}`-token sentence (it
  *   branches, computes, or is not a string), which a shop string cannot
  *   express.
+ * Route paths (the former `NAVIGATE_*` keys) are not copy at all: they live in
+ * the storefront's own config, and the api refuses and drops a `NAVIGATE_*`
+ * literal on every storefront surface.
  * An editor that lists any of those offers an edit the server refuses.
  *
  * Interpolated values use `{name}` tokens named after the storefront's own
@@ -489,6 +492,8 @@ export const STOREFRONT_WEB_LITERAL_KEYS = Object.freeze([
     'DATA_RIGHTS_COLLECTION_NOTES',
     'DATA_RIGHTS_COLLECTION_ORDERS',
     'DATA_RIGHTS_COLLECTION_PAYMENTS',
+    'DATA_RIGHTS_COLLECTION_RECENT_PURCHASES',
+    'DATA_RIGHTS_COLLECTION_WHOLESALE_REQUESTS',
     'DATA_RIGHTS_DIALOG_ACK',
     'DATA_RIGHTS_DIALOG_CONFIRM',
     'DATA_RIGHTS_DIALOG_FISCAL',
@@ -812,27 +817,6 @@ export const STOREFRONT_WEB_LITERAL_KEYS = Object.freeze([
     'MOBILE_BUTTONS_FAVORITES',
     'MOBILE_BUTTONS_INVOICES',
     'MOBILE_BUTTONS_ORDERS',
-    'NAVIGATE_APPOINTMENTS',
-    'NAVIGATE_BASKET',
-    'NAVIGATE_BRANDS',
-    'NAVIGATE_CATEGORIES',
-    'NAVIGATE_CHECKOUT',
-    'NAVIGATE_FAVORITES',
-    'NAVIGATE_HOME',
-    'NAVIGATE_INCOMES',
-    'NAVIGATE_INVOICES',
-    'NAVIGATE_LOGIN',
-    'NAVIGATE_LOGOUT',
-    'NAVIGATE_MAINTENANCE',
-    'NAVIGATE_NEW_ARRIVALS',
-    'NAVIGATE_NOTIFICATIONS',
-    'NAVIGATE_ORDERS',
-    'NAVIGATE_PAYMENTS',
-    'NAVIGATE_PROFILE',
-    'NAVIGATE_RECOVER',
-    'NAVIGATE_REGISTRATION',
-    'NAVIGATE_SALE',
-    'NAVIGATE_SESSIONS',
     'NETWORK_OFFLINE',
     'NETWORK_REQUEST_FAILED',
     'NETWORK_TIMEOUT',
@@ -1075,6 +1059,7 @@ export const STOREFRONT_WEB_LITERAL_KEYS = Object.freeze([
     'PREVIEW_LOADING',
     'PREVIEW_READ_FAILED',
     'PREVIEW_READ_ONLY',
+    'PREVIEW_RECENTLY_BOUGHT',
     'PREVIEW_RESTART',
     'PREVIEW_RETRY',
     'PREVIEW_TITLE',
@@ -1343,6 +1328,7 @@ export const STOREFRONT_WEB_LITERAL_KEYS = Object.freeze([
     'STOREFRONT_FOOTER_NAV_ARIA',
     'STOREFRONT_MERCHANT_NAV_ARIA',
     'STOREFRONT_NAV_GROUP_FALLBACK',
+    'STOREFRONT_PRODUCTS_REFRESH_FAILED',
     'STOREFRONT_SEARCH',
     'STOREFRONT_SOCIAL_FACEBOOK',
     'STOREFRONT_SOCIAL_INSTAGRAM',
@@ -1370,32 +1356,12 @@ export const STOREFRONT_WEB_LITERAL_KEYS = Object.freeze([
 const STOREFRONT_WEB_LITERAL_KEY_SET = new Set(STOREFRONT_WEB_LITERAL_KEYS);
 /** Whether a shop may override `key` — membership in {@link STOREFRONT_WEB_LITERAL_KEYS}. */
 export const isStorefrontLiteralKey = (key) => STOREFRONT_WEB_LITERAL_KEY_SET.has(key);
-/** Keys whose value is a storefront route the storefront renders as a link target. */
-const STOREFRONT_NAVIGATE_LITERAL_PREFIX = 'NAVIGATE_';
-/**
- * A same-origin path: a leading `/`, a second character that is neither `/` nor `\`
- * (`//host` and `/\host` are protocol-relative to a browser), and no whitespace,
- * backslash, control character (`\p{Cc}`) or invisible format character (`\p{Cf}`: every
- * bidi mark including U+061C, zero-width characters, the soft hyphen, tag characters)
- * anywhere. Browsers strip tab and newline before parsing, so `/\t/host` becomes `//host`;
- * invisible and directional characters can also disguise the link target. A scheme
- * cannot start with `/`.
- */
-const STOREFRONT_SAME_ORIGIN_PATH_RE = /^\/(?![/\\])[^\s\\\p{Cc}\p{Cf}]*$/u;
-/**
- * Whether `value` may be stored, published or served for `key`. A `NAVIGATE_*` key is
- * rendered as a link, so it must be a same-origin path — otherwise an override could
- * send a shop's customers to an off-site look-alike login page. Every other key is
- * unconstrained here (key membership, well-formedness and length are checked apart).
- */
-export const isAllowedStorefrontLiteralValue = (key, value) => !key.startsWith(STOREFRONT_NAVIGATE_LITERAL_PREFIX) || STOREFRONT_SAME_ORIGIN_PATH_RE.test(value);
 /**
  * Whether a shop's stored `value` for `key` is one a save keeps, a read serves and the editor
- * baseline adopts: a shop-overridable key, a well-formed string within
- * {@link STOREFRONT_DESIGN_LITERAL_MAX_CODE_POINTS} code points, and an allowed value for it.
+ * baseline adopts: a shop-overridable key and a well-formed string within
+ * {@link STOREFRONT_DESIGN_LITERAL_MAX_CODE_POINTS} code points.
  */
 export const isAdoptableStorefrontLiteral = (key, value) => isStorefrontLiteralKey(key) &&
     typeof value === 'string' &&
     value.isWellFormed() &&
-    Array.from(value).length <= STOREFRONT_DESIGN_LITERAL_MAX_CODE_POINTS &&
-    isAllowedStorefrontLiteralValue(key, value);
+    Array.from(value).length <= STOREFRONT_DESIGN_LITERAL_MAX_CODE_POINTS;

package/dist/wholesaleRequest.d.ts

@@ -0,0 +1,183 @@
+/**
+ * A signed-in storefront buyer's request for a wholesale account, and the
+ * operator queue that decides it.
+ *
+ * One row per customer (`WHOLESALEREQ#{storeId}` / `{customerId}`). A new
+ * request overwrites the previous one only once that one is decided, so a
+ * customer holds at most one pending request.
+ *
+ * The flow is offered only while the store's
+ * `ecommerce.config.wholesaleRequests` is `true` (absent = off).
+ */
+/** The three states a request moves through. */
+export declare const WHOLESALE_REQUEST_STATES: readonly ["pending", "approved", "declined"];
+/** `GET /customers?mode=wholesale-requests` page ceiling; the default page is 50. */
+export declare const WHOLESALE_REQUESTS_PAGE_MAX = 100;
+/** Character ceilings on the buyer's free text, counted after trimming. */
+export declare const WHOLESALE_REQUEST_RAZON_SOCIAL_MAX = 200;
+export declare const WHOLESALE_REQUEST_ACTIVITY_MAX = 120;
+export declare const WHOLESALE_REQUEST_MESSAGE_MAX = 1000;
+export declare const WHOLESALE_REQUEST_PHONE_MAX = 30;
+/** Character ceiling on the operator's decline reason, counted after trimming. */
+export declare const WHOLESALE_REQUEST_REASON_MAX = 500;
+/**
+ * Every `error` code the wholesale-request flow answers on its own behalf:
+ * - web `POST /user { mode: 'wholesale-request' }` (`stacks/web/lambdas/user/_wholesaleRequest.ts`):
+ *   `WHOLESALE_REQUESTS_DISABLED`, `CUSTOMER_NOT_FOUND`, `CUSTOMER_ANONYMIZED`, `USER_NOT_ENABLED`,
+ *   `CUSTOMER_ALREADY_WHOLESALE`, `WHOLESALE_REQUEST_CONTENDED`, `WHOLESALE_REQUEST_PENDING`;
+ * - app `GET /customers?mode=wholesale-requests` and `POST /customers { mode: 'wholesale-decision' }`
+ *   (`stacks/lambdas/customers/_wholesaleRequests.ts`): `ROLE_FORBIDDEN`, `ADMIN_REQUIRED`,
+ *   `INVALID_CURSOR`, `WHOLESALE_REQUEST_NOT_PENDING`, `WHOLESALE_DECISION_CONTENDED`,
+ *   `CUSTOMER_NOT_FOUND`, `CUSTOMER_ANONYMIZED`, `CUSTOMER_MERGED`, `PRICE_LIST_NOT_FOUND`,
+ *   `PRICE_LIST_NOT_WHOLESALE`, `WHOLESALE_REQUEST_NOT_FOUND`;
+ * - the opt-in refusal both configuration writers answer when `ecommerce.config.wholesaleRequests`
+ *   turns on with no wholesale-class list: `WHOLESALE_LIST_REQUIRED` (`409`). It is also in
+ *   `STORE_PATCH_ERROR_CODES`, on purpose: a wholesale client handles it without reading that tuple.
+ *
+ * The rule: a code is listed when a wholesale handler writes it as its own literal, and each of
+ * those literals is typed `satisfies WholesaleRequestErrorCode`, so one this list misses fails
+ * typecheck. A code those routes forward from a shared helper is not listed, though a wholesale
+ * route can answer it: the customer-access refusals (`refuseCustomerAccess`), `VALIDATION_FAILED`
+ * (`validateRequest`), the handler wrapper's own codes and the authorizer's.
+ */
+export declare const WHOLESALE_REQUEST_ERROR_CODES: readonly ["WHOLESALE_REQUESTS_DISABLED", "CUSTOMER_NOT_FOUND", "CUSTOMER_ANONYMIZED", "USER_NOT_ENABLED", "CUSTOMER_ALREADY_WHOLESALE", "WHOLESALE_REQUEST_CONTENDED", "WHOLESALE_REQUEST_PENDING", "ROLE_FORBIDDEN", "ADMIN_REQUIRED", "INVALID_CURSOR", "WHOLESALE_REQUEST_NOT_PENDING", "WHOLESALE_DECISION_CONTENDED", "CUSTOMER_MERGED", "PRICE_LIST_NOT_FOUND", "PRICE_LIST_NOT_WHOLESALE", "WHOLESALE_REQUEST_NOT_FOUND", "WHOLESALE_LIST_REQUIRED"];
+export type WholesaleRequestErrorCode = (typeof WHOLESALE_REQUEST_ERROR_CODES)[number];
+declare global {
+    type WholesaleRequestState = (typeof WHOLESALE_REQUEST_STATES)[number];
+    /**
+     * The company data a buyer submits. `cuit`, `razonSocial` and `condFiscal`
+     * are required; the rest is optional.
+     *
+     * ⚠️ PII under Ley 25.326. It reaches the operator queue and the buyer's own
+     * data export, and never a bell, a log line or an ERROR row.
+     */
+    interface WholesaleRequestCompany {
+        /** 11 digits with a valid check digit, stored digits-only. */
+        cuit: string;
+        razonSocial: string;
+        /** A `condFiscal` code from `FISCAL_CONDITIONS`. */
+        condFiscal: number;
+        activity?: string;
+        phone?: string;
+        message?: string;
+    }
+    /** Web `POST /user` body that submits a request. */
+    interface WholesaleRequestInput extends WholesaleRequestCompany {
+        mode: 'wholesale-request';
+    }
+    /**
+     * What the BUYER sees of their request: web `GET /user?mode=wholesale-request`
+     * (`data`, or `data: null` when they never asked), the submit's answer and
+     * the status frame. Never the decline reason, the deciding operator or the
+     * list it moved them to.
+     */
+    interface WholesaleRequestStatus {
+        status: WholesaleRequestState;
+        /** Unix ms the request was submitted. */
+        createdAt: number;
+        /** Unix ms of the decision. Absent while pending. */
+        decidedAt?: number;
+    }
+    /** The operator's view of one request (admin tier only). */
+    interface WholesaleRequest extends WholesaleRequestCompany {
+        customerId: string;
+        status: WholesaleRequestState;
+        createdAt: number;
+        updatedAt?: number;
+        decidedAt?: number;
+        /** The deciding operator's user id. */
+        decidedBy?: string;
+        /** On approval: the wholesale-class list the customer was moved to. */
+        priceList?: number;
+        /** On decline: the operator's note. Operator-only, never sent to the buyer. */
+        reason?: string;
+    }
+    /**
+     * Where the requesting customer stands now, read off the CUSTOMER row when
+     * the queue page is served. A request whose customer is gone is listed with
+     * that state, never dropped.
+     */
+    type WholesaleRequestCustomerState = 'active' | 'disabled' | 'missing' | 'anonymized' | 'merged';
+    /** One `GET /customers?mode=wholesale-requests` item. */
+    interface WholesaleRequestQueueEntry extends WholesaleRequest {
+        customer: {
+            state: WholesaleRequestCustomerState;
+            fullName?: string;
+            /** The customer's CURRENT stored list. */
+            priceList?: number;
+        };
+    }
+    /**
+     * `GET /customers?mode=wholesale-requests` answer. `LastEvaluatedKey` is an
+     * opaque cursor, sent back as `?startKey=`; present (with `truncated: true`)
+     * only while more rows may follow.
+     */
+    interface WholesaleRequestsQueueResponse {
+        message: string;
+        data: WholesaleRequestQueueEntry[];
+        LastEvaluatedKey?: string;
+        truncated?: boolean;
+    }
+    /**
+     * App `POST /customers` body that decides a request. `'approved'` requires a
+     * wholesale-class `priceList` and refuses a `reason`; `'declined'` refuses a
+     * `priceList`. `createdAt` is the request's own, as the queue served it: a
+     * request declined and resubmitted since is a different request, refused
+     * `409 WHOLESALE_REQUEST_NOT_PENDING` rather than decided unseen.
+     */
+    type WholesaleDecisionInput = {
+        mode: 'wholesale-decision';
+        customerId: string;
+        createdAt: number;
+        decision: 'approved';
+        priceList: number;
+    } | {
+        mode: 'wholesale-decision';
+        customerId: string;
+        createdAt: number;
+        decision: 'declined';
+        reason?: string;
+    };
+    /**
+     * App `POST /customers { mode: 'wholesale-decision' }` answer: the request as
+     * it now stands. `fiscalIdentityApplied` rides an APPROVAL only — `true` when
+     * the submitted CUIT, razón social and condición fiscal were written into
+     * `Customer.afip`; `false` when they were not, because the customer already
+     * held an `afip` entry or a top-level `cuit` naming another taxpayer (then
+     * neither `afip` nor `cuit` is written, and the list still moves).
+     */
+    interface WholesaleDecisionResponse {
+        message: string;
+        data: WholesaleRequest;
+        fiscalIdentityApplied?: boolean;
+    }
+    /**
+     * The `customers` frame a buyer's own socket receives when their request is
+     * decided. Carries no `priceList`: the CUSTOMER row's own `customers` frame
+     * carries that on approval.
+     */
+    interface WholesaleRequestStatusFrame {
+        customerId: string;
+        wholesaleRequest: WholesaleRequestStatus;
+    }
+    /**
+     * Which request a `CUSTOMER_WHOLESALE_REQUEST` operator bell is about. A
+     * POINTER, never an audience — the top-level `customerId` would deliver the
+     * bell to the buyer. Operator surfaces only.
+     */
+    interface WholesaleRequestRef {
+        customerId: string;
+    }
+    /**
+     * The request as it appears in the customer's own data export (both
+     * surfaces): the company data they submitted and the state, never the
+     * decline reason or the deciding operator.
+     */
+    interface WholesaleRequestExportEntry extends WholesaleRequestCompany {
+        /** The id the request was filed under — the subject's, or a merged-away id folded into it. */
+        customerId: string;
+        status: WholesaleRequestState;
+        createdAt: number;
+        decidedAt?: number;
+    }
+}

package/dist/wholesaleRequest.js

@@ -0,0 +1,61 @@
+/**
+ * A signed-in storefront buyer's request for a wholesale account, and the
+ * operator queue that decides it.
+ *
+ * One row per customer (`WHOLESALEREQ#{storeId}` / `{customerId}`). A new
+ * request overwrites the previous one only once that one is decided, so a
+ * customer holds at most one pending request.
+ *
+ * The flow is offered only while the store's
+ * `ecommerce.config.wholesaleRequests` is `true` (absent = off).
+ */
+/** The three states a request moves through. */
+export const WHOLESALE_REQUEST_STATES = ['pending', 'approved', 'declined'];
+/** `GET /customers?mode=wholesale-requests` page ceiling; the default page is 50. */
+export const WHOLESALE_REQUESTS_PAGE_MAX = 100;
+/** Character ceilings on the buyer's free text, counted after trimming. */
+export const WHOLESALE_REQUEST_RAZON_SOCIAL_MAX = 200;
+export const WHOLESALE_REQUEST_ACTIVITY_MAX = 120;
+export const WHOLESALE_REQUEST_MESSAGE_MAX = 1000;
+export const WHOLESALE_REQUEST_PHONE_MAX = 30;
+/** Character ceiling on the operator's decline reason, counted after trimming. */
+export const WHOLESALE_REQUEST_REASON_MAX = 500;
+/**
+ * Every `error` code the wholesale-request flow answers on its own behalf:
+ * - web `POST /user { mode: 'wholesale-request' }` (`stacks/web/lambdas/user/_wholesaleRequest.ts`):
+ *   `WHOLESALE_REQUESTS_DISABLED`, `CUSTOMER_NOT_FOUND`, `CUSTOMER_ANONYMIZED`, `USER_NOT_ENABLED`,
+ *   `CUSTOMER_ALREADY_WHOLESALE`, `WHOLESALE_REQUEST_CONTENDED`, `WHOLESALE_REQUEST_PENDING`;
+ * - app `GET /customers?mode=wholesale-requests` and `POST /customers { mode: 'wholesale-decision' }`
+ *   (`stacks/lambdas/customers/_wholesaleRequests.ts`): `ROLE_FORBIDDEN`, `ADMIN_REQUIRED`,
+ *   `INVALID_CURSOR`, `WHOLESALE_REQUEST_NOT_PENDING`, `WHOLESALE_DECISION_CONTENDED`,
+ *   `CUSTOMER_NOT_FOUND`, `CUSTOMER_ANONYMIZED`, `CUSTOMER_MERGED`, `PRICE_LIST_NOT_FOUND`,
+ *   `PRICE_LIST_NOT_WHOLESALE`, `WHOLESALE_REQUEST_NOT_FOUND`;
+ * - the opt-in refusal both configuration writers answer when `ecommerce.config.wholesaleRequests`
+ *   turns on with no wholesale-class list: `WHOLESALE_LIST_REQUIRED` (`409`). It is also in
+ *   `STORE_PATCH_ERROR_CODES`, on purpose: a wholesale client handles it without reading that tuple.
+ *
+ * The rule: a code is listed when a wholesale handler writes it as its own literal, and each of
+ * those literals is typed `satisfies WholesaleRequestErrorCode`, so one this list misses fails
+ * typecheck. A code those routes forward from a shared helper is not listed, though a wholesale
+ * route can answer it: the customer-access refusals (`refuseCustomerAccess`), `VALIDATION_FAILED`
+ * (`validateRequest`), the handler wrapper's own codes and the authorizer's.
+ */
+export const WHOLESALE_REQUEST_ERROR_CODES = [
+    'WHOLESALE_REQUESTS_DISABLED',
+    'CUSTOMER_NOT_FOUND',
+    'CUSTOMER_ANONYMIZED',
+    'USER_NOT_ENABLED',
+    'CUSTOMER_ALREADY_WHOLESALE',
+    'WHOLESALE_REQUEST_CONTENDED',
+    'WHOLESALE_REQUEST_PENDING',
+    'ROLE_FORBIDDEN',
+    'ADMIN_REQUIRED',
+    'INVALID_CURSOR',
+    'WHOLESALE_REQUEST_NOT_PENDING',
+    'WHOLESALE_DECISION_CONTENDED',
+    'CUSTOMER_MERGED',
+    'PRICE_LIST_NOT_FOUND',
+    'PRICE_LIST_NOT_WHOLESALE',
+    'WHOLESALE_REQUEST_NOT_FOUND',
+    'WHOLESALE_LIST_REQUIRED',
+];

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "platform-types",
-	"version": "1.10.777",
+	"version": "1.10.779",
 	"description": "Shared wire and entity contracts for the platform.",
 	"type": "module",
 	"main": "dist/index.js",