platform-types 1.10.780 → 1.10.782

package/dist/cart.d.ts

@@ -538,11 +538,11 @@ declare global {
         /**
          * Whether this promotion waives the cart's shipping.
          *
-         * ⚠️ `CartTotals.shipping` is structurally `0` today — nothing in the
-         * api computes a shipping cost yet, by design, because it is chosen at
-         * checkout. So the waiver currently changes no money, and this flag is the
-         * only place the GRANT survives to be read by whoever lands the shipping
-         * quote. Do not read its absence as "shipping was charged".
+         * ⚠️ `CartTotals.shipping` stays structurally `0`: the cart has no
+         * delivery method, so the shipping cost is chosen at checkout. Storefront
+         * checkout reads this flag there: a priced delivery method (`Method.fee`)
+         * books its freight line at `0` with `Order.freight.waivedBy: 'promotion'`.
+         * Do not read its absence as "shipping was charged".
          */
         shippingWaived?: boolean;
     }

package/dist/cjs/order.js

@@ -387,6 +387,15 @@ exports.orderFulfilmentProgress = orderFulfilmentProgress;
  * - `DELIVERY_METHOD_NOT_FOUND` · 400 — `deliveryMethod` is not in the store's
  *   delivery catalogue, including an absent/empty catalogue. `data: {}`;
  *   refused before reading the cart.
+ * - `DELIVERY_FEE_CURRENCY_UNSUPPORTED` · 409 — the chosen delivery method
+ *   carries a `fee` and the cart is not in the store's order currency
+ *   (`config.displayCurrency`, pesos when unset), the currency the fee is
+ *   stated in. `data: {}`; refused after the re-price.
+ * - `DELIVERY_FEE_CHANGED` · 409 — `expectedFreight` (absent reads as `0`)
+ *   differs from the freight the server computes for the chosen delivery
+ *   method. `data: DeliveryFeeChangedData` carries the server figure; show it
+ *   and confirm again. Refused after the re-price and the minimum purchase,
+ *   before any order id, coupon redemption or write.
  * - `ORDER_INVALID_CART` · 400 — the normalized cart has no finite numeric
  *   `totals.grandTotal`. `data: {}`; refused before repricing/allocation.
  * - `CART_CHANGED_SINCE_CONFIRM` · 409 — the body sent `expectedCartId` /
@@ -662,6 +671,10 @@ exports.ORDER_ERROR_CODES = [
     'CART_PRICES_CHANGED',
     'ORDER_ID_COLLISION',
     'DELIVERY_METHOD_NOT_FOUND',
+    // A priced delivery method (`Method.fee`): the freight moved since the shopper
+    // saw it, or the cart is not in the store's order currency.
+    'DELIVERY_FEE_CHANGED',
+    'DELIVERY_FEE_CURRENCY_UNSUPPORTED',
     'ORDER_BELOW_MINIMUM_PURCHASE',
     'ORDER_INVALID_CART',
     // The storefront's confirmed-cart pin (`StorefrontOrderCreateRequest.expectedCartId` / `expectedCartVersion`).

package/dist/cjs/store.js

@@ -139,6 +139,14 @@ exports.STORE_MODULE_ERROR_CODES = [
  *   entry naming no list of the store, with `data: { field, value }` where
  *   `field` is `<catalog>[<row>].availability.priceLists[<entry>]`.
  *
+ * - `DELIVERY_FEE_INVALID` — `POST /store` only: a delivery row's `fee` carries
+ *   an amount or a `freeAbove` that is not a finite number of at least `0` at
+ *   the order currency's ledger scale, with `data: { field }` where `field` is
+ *   `deliveryMethods[<row>].fee.<key>`; or a `paymentMethods` row carries a
+ *   `fee` at all, with `field` `paymentMethods[<row>].fee`. A `fee` that is not
+ *   an object, or that carries a key other than those two, is
+ *   `VALIDATION_FAILED`.
+ *
  * Request refusal, `409`:
  * - `WHOLESALE_LIST_REQUIRED` — an `ecommerce` save turns
  *   `config.wholesaleRequests` on while the store holds no
@@ -177,6 +185,7 @@ exports.STORE_PATCH_ERROR_CODES = [
     'DISPLAY_CURRENCY_NOT_INVOICEABLE',
     'PRODUCT_CURRENCY_NOT_INVOICEABLE',
     'PRICE_LIST_NOT_FOUND',
+    'DELIVERY_FEE_INVALID',
     'WHOLESALE_LIST_REQUIRED',
     'FORBIDDEN',
     'STORE_NOT_FOUND',

package/dist/cjs/storefrontDesign.js

@@ -3,6 +3,8 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.STOREFRONT_PREVIEW_PROTOCOL_ERRORS = exports.STOREFRONT_PREVIEW_READ_OPERATIONS = exports.STOREFRONT_DESIGN_AUDIENCES = exports.STOREFRONT_BENEFIT_ICONS = exports.STOREFRONT_RESERVED_SLUGS = exports.STOREFRONT_CONTACT_FIELDS = exports.STOREFRONT_PROTECTED_BUILTIN_DESTINATIONS = exports.STOREFRONT_BUILTIN_DESTINATIONS = exports.STOREFRONT_REPEATABLE_SECTION_TYPES = exports.STOREFRONT_SECTION_TYPES = exports.isStorefrontPageSlug = exports.STOREFRONT_PAGE_SLUG_RE = exports.STOREFRONT_DESIGN_LIMITS = exports.STOREFRONT_SOCIAL_HOSTS = void 0;
 exports.createStorefrontDesignV1 = createStorefrontDesignV1;
 exports.parseStorefrontPreviewDocument = parseStorefrontPreviewDocument;
+exports.matchesStorefrontVisibility = matchesStorefrontVisibility;
+exports.projectStorefrontDocumentForAudience = projectStorefrontDocumentForAudience;
 exports.parseStorefrontPreviewMessage = parseStorefrontPreviewMessage;
 exports.acceptStorefrontPreviewMessage = acceptStorefrontPreviewMessage;
 /** The social kinds a contact may link, each to its own hosts; a contact links at most one per kind. */
@@ -253,7 +255,7 @@ function previewWithinBytes(value, maximum) {
 /**
  * A `visibility` rule kept on the transport only when well-formed: known audiences, and integer
  * price lists within the store cap. Anything else is left off rather than failing the frame — the
- * preview never filters by it, it only shows the rule the editor authored.
+ * parser never filters by it, it only carries the rule the editor authored.
  */
 function previewVisibility(input) {
     if (!previewRecord(input) || !Array.isArray(input.audiences))
@@ -362,6 +364,102 @@ function previewAnnouncement(input) {
     const { visibility, ...rest } = input;
     return { ...rest, ...previewVisibility(visibility) };
 }
+function audienceNamed(audiences, audience) {
+    return audiences.some((entry) => entry === audience);
+}
+/**
+ * The one audience rule: whether `caller` sees an item with this `visibility`. Absent means
+ * everyone. Otherwise any listed audience that matches, or the caller's list in `priceLists`:
+ * `guest` matches only a guest; `customer` any customer; `retail` / `wholesale` a customer of that
+ * class. A rule naming a list deleted since it was authored matches no one through it.
+ */
+function matchesStorefrontVisibility(visibility, caller) {
+    if (!visibility)
+        return true;
+    const audiences = Array.isArray(visibility.audiences) ? visibility.audiences : [];
+    if (caller.kind === 'guest')
+        return audienceNamed(audiences, 'guest');
+    if (audienceNamed(audiences, 'customer') || audienceNamed(audiences, caller.audienceClass))
+        return true;
+    return Array.isArray(visibility.priceLists) && visibility.priceLists.some((id) => id === caller.priceList);
+}
+const isAudienceNode = (value) => value !== null && typeof value === 'object' && !Array.isArray(value);
+const audienceNonEmpty = (value) => Array.isArray(value) && value.length > 0;
+function copyAudienceValue(value) {
+    if (Array.isArray(value))
+        return value.map(copyAudienceValue);
+    if (!isAudienceNode(value))
+        return value;
+    return Object.fromEntries(Object.entries(value).map(([key, entry]) => [key, copyAudienceValue(entry)]));
+}
+/**
+ * Filters `value` for `caller` into a NEW tree, or `undefined` when it goes. Every `visibility` key
+ * is dropped; an item kept because its rule matched gains `audienceScoped: true`. As a published
+ * reader drops a link whose target vanished, a link (or a section's action) to a page this caller
+ * does not see goes whole. A menu entry left with neither children nor a target, and a footer group
+ * left with no links, go too: they would render as dead labels.
+ */
+function scopeAudienceValue(value, caller, pages) {
+    if (Array.isArray(value))
+        return scopeAudienceArray(value, caller, pages);
+    if (!isAudienceNode(value))
+        return value;
+    if (value.kind === 'page')
+        return pages.has(String(value.id)) ? copyAudienceValue(value) : undefined;
+    const visibility = value.visibility;
+    if (!matchesStorefrontVisibility(visibility, caller))
+        return undefined;
+    const result = Object.fromEntries(scopedAudienceEntries(value, visibility, caller, pages));
+    return keepsAfterAudienceFilter(value, result) ? result : undefined;
+}
+/**
+ * A kept node's entries, filtered. Built as entries for `Object.fromEntries`, never by assignment:
+ * an own `__proto__` key stays a data key and never becomes the result's prototype. A rule-matched
+ * item's flag keeps its place, or comes last.
+ */
+function scopedAudienceEntries(value, visibility, caller, pages) {
+    const entries = [];
+    for (const [key, entry] of Object.entries(value)) {
+        if (key === 'visibility')
+            continue;
+        const scoped = key === 'audienceScoped' && visibility ? true : scopeAudienceValue(entry, caller, pages);
+        if (scoped !== undefined)
+            entries.push([key, scoped]);
+    }
+    if (visibility && !Object.hasOwn(value, 'audienceScoped'))
+        entries.push(['audienceScoped', true]);
+    return entries;
+}
+function scopeAudienceArray(items, caller, pages) {
+    return items.flatMap((item) => {
+        const scoped = scopeAudienceValue(item, caller, pages);
+        return scoped === undefined ? [] : [scoped];
+    });
+}
+/** Whether a node survives once its own parts are filtered, judged against what it had before. */
+function keepsAfterAudienceFilter(had, result) {
+    if (had.target !== undefined && result.target === undefined)
+        return false;
+    if (audienceNonEmpty(had.children) && !audienceNonEmpty(result.children) && result.target === undefined)
+        return false;
+    return !(audienceNonEmpty(had.links) && !audienceNonEmpty(result.links));
+}
+/**
+ * A storefront design document as `caller` may see it, built as a NEW tree (the input is never
+ * changed or shared): drops every section, page, navigation entry (top level or child), footer link
+ * and announcement bar `caller` does not match, and every link to a page it does not see; strips
+ * every `visibility`; marks an item kept through a rule `audienceScoped: true`. Web `GET /store`
+ * applies it to a publication, the preview to its draft for a grant fixture's caller, and a preview
+ * frame may apply it to a posted document with the caller its design read echoed.
+ */
+function projectStorefrontDocumentForAudience(document, caller) {
+    const root = document;
+    const pages = new Set((Array.isArray(root.pages) ? root.pages : [])
+        .filter(isAudienceNode)
+        .filter((page) => matchesStorefrontVisibility(page.visibility, caller))
+        .map((page) => String(page.id)));
+    return (scopeAudienceValue(root, caller, pages) ?? {});
+}
 /** The codes a preview frame may report in an `error` message; the parser accepts exactly these. */
 exports.STOREFRONT_PREVIEW_PROTOCOL_ERRORS = [
     'STOREFRONT_PREVIEW_EXPIRED',

package/dist/order.d.ts

@@ -5,6 +5,32 @@ declare global {
         grandTotal: number;
         currency: string;
     }
+    /**
+     * `409 DELIVERY_FEE_CHANGED`'s `data`: the freight the server computed for
+     * the chosen delivery method, in the order currency, `0` when the method is
+     * unpriced or its fee is waived. Show it and confirm again with it as
+     * `StorefrontOrderCreateRequest.expectedFreight`.
+     */
+    interface DeliveryFeeChangedData {
+        freight: number;
+    }
+    /**
+     * Why a priced delivery method charged nothing: the goods total met the
+     * method's `fee.freeAbove`, or the cart's promotion waives shipping.
+     */
+    type OrderFreightWaiver = 'freeAbove' | 'promotion';
+    /**
+     * Which priced delivery method booked this order's freight line, and why it
+     * charged nothing when it did. METADATA only, never money: the charge is the
+     * `lineKind: 'freight'` line in `items`, which is what `total`, the payment
+     * attempt, the receivable and the voucher all read.
+     */
+    interface OrderFreight {
+        /** The `Store.deliveryMethods` row id whose `fee` was charged. */
+        methodId: number;
+        /** Present only when the line booked at 0 because the fee was waived. */
+        waivedBy?: OrderFreightWaiver;
+    }
     /**
      * A coupon as it was redeemed onto an order — the grant frozen at
      * consumption, plus the money it actually took.
@@ -1189,6 +1215,13 @@ declare global {
          * nothing else can tell a second release from a first.
          */
         coupons?: OrderCoupon[];
+        /**
+         * Present only on a storefront order placed on a delivery method that
+         * carries a `fee` (`Method.fee`), and then always beside exactly one
+         * `lineKind: 'freight'` line. Server-owned: written by storefront checkout
+         * and by no other writer, and stripped from an operator body.
+         */
+        freight?: OrderFreight;
         orderPrinted?: boolean;
         tagPrinted?: boolean;
         /**
@@ -2437,6 +2470,17 @@ declare global {
          * transaction refuses too.
          */
         expectedCartVersion?: number;
+        /**
+         * The freight the storefront showed for `deliveryMethod`, in the order
+         * currency: the row's `fee.amount`, or `0` when `fee.freeAbove` is met by the
+         * cart's `grandTotal` or the cart's promotion waives shipping. Omit it (or
+         * send `0`) for an unpriced method. The server recomputes it and refuses a
+         * different figure `409 DELIVERY_FEE_CHANGED` with `data.freight`
+         * (`DeliveryFeeChangedData`), writing nothing. ⚠️ Omitting it on a method
+         * whose fee comes to more than `0` is refused the same way: the shopper is
+         * never charged a freight they were not shown.
+         */
+        expectedFreight?: number;
     }
     interface ZebraTag {
         orderId: string;
@@ -2818,6 +2862,15 @@ export declare const orderFulfilmentProgress: (order: OrderFulfilmentProgressInp
  * - `DELIVERY_METHOD_NOT_FOUND` · 400 — `deliveryMethod` is not in the store's
  *   delivery catalogue, including an absent/empty catalogue. `data: {}`;
  *   refused before reading the cart.
+ * - `DELIVERY_FEE_CURRENCY_UNSUPPORTED` · 409 — the chosen delivery method
+ *   carries a `fee` and the cart is not in the store's order currency
+ *   (`config.displayCurrency`, pesos when unset), the currency the fee is
+ *   stated in. `data: {}`; refused after the re-price.
+ * - `DELIVERY_FEE_CHANGED` · 409 — `expectedFreight` (absent reads as `0`)
+ *   differs from the freight the server computes for the chosen delivery
+ *   method. `data: DeliveryFeeChangedData` carries the server figure; show it
+ *   and confirm again. Refused after the re-price and the minimum purchase,
+ *   before any order id, coupon redemption or write.
  * - `ORDER_INVALID_CART` · 400 — the normalized cart has no finite numeric
  *   `totals.grandTotal`. `data: {}`; refused before repricing/allocation.
  * - `CART_CHANGED_SINCE_CONFIRM` · 409 — the body sent `expectedCartId` /
@@ -2970,6 +3023,6 @@ export declare const orderFulfilmentProgress: (order: OrderFulfilmentProgressInp
  * `SUBSCRIPTION_READONLY`) sit on the order CREATE leg only: an edit is not a new
  * order, so `bareOrderPostHandler` routes past `requireMetered` entirely.
  */
-export declare const ORDER_ERROR_CODES: readonly ["ORDER_COST_DENOMINATION_UNKNOWN", "SERVICE_ORDER_DELIVERY_MANAGED", "ORDER_NOT_FOUND", "ORDER_LOCKED", "ORDER_NOT_READY", "ORDER_DELIVERED_ANOTHER_DAY", "ORDER_DELIVERY_STATE_UNCHANGED", "ORDER_ILLEGAL_TRANSITION", "ORDER_VERSION_CONFLICT", "CUSTOMER_NOT_FOUND", "CUSTOMER_MERGED", "ORDER_HAS_NO_CUSTOMER", "CUSTOMER_ANONYMIZED", "FX_CONVERSION_UNAVAILABLE", "ROLE_FORBIDDEN", "ORDER_CANCELLED", "PAYMENT_SETTLED_ON_ANOTHER_ORDER", "ORDER_HAS_SHIPMENTS", "ORDER_HAS_RETURNS", "SHIPMENT_QUANTITY_EXCEEDED", "SHIPMENT_LINE_MISMATCH", "SHIPMENT_NOT_FOUND", "SHIPMENT_LIMIT_REACHED", "SHIPMENT_TOO_LARGE", "ORDER_FULFILMENT_EXTERNAL", "SHIPMENT_FAILED", "ADMIN_REQUIRED", "IDEMPOTENCY_KEY_REQUIRED", "INVALID_IDEMPOTENCY_KEY", "IDEMPOTENCY_KEY_REUSE", "IDEMPOTENCY_IN_PROGRESS", "IDEMPOTENCY_LOCK_CONTENTION", "IDEMPOTENCY_KEY_FAILED", "IDEMPOTENT_RESPONSE_NOT_CACHED", "ORDER_CANCELLATION_NOT_PROTECTED", "ORDER_CANCELLATION_COMMITTED", "ORDER_CANCELLATION_LOCKED", "ORDER_CANCELLATION_TOO_LARGE", "ORDER_CANCELLATION_FAILED", "SALE_LEDGER_RETRACTION_REFUSED", "SALE_LEDGER_ROW_NOT_OWNED", "PRODUCT_NOT_FOUND", "PRODUCT_SALE_LIMIT_EXCEEDED", "PRODUCT_SALE_LIMIT_INVALID", "DEPOSIT_SOURCE_NOT_ALLOWED", "DEPOSIT_CURRENCY_MISMATCH", "DEPOSIT_EXCEEDS_TOTAL", "DEPOSIT_FREEZE_REQUIRES_INVOICE", "DEPOSIT_FREEZE_INVOICE_PENDING", "DEPOSIT_CHARACTERIZATION_CONFLICT", "DEPOSIT_FREEZE_INVOICE_NOT_QUALIFYING", "DEPOSIT_INVOICED_ORDER_MUST_FREEZE", "DEPOSIT_FROZEN_ORDER_MUST_FREEZE", "DEPOSIT_REFERENCE_IS_LINKED_PAYMENT", "DEPOSIT_DUPLICATE_REFERENCE", "TILL_TENDER_REQUIRES_DEPOSIT", "PAYMENT_REFERENCED_BY_DEPOSIT", "ORDER_HAS_UNREFUNDED_DEPOSIT", "ORDER_PRICE_FROZEN", "DEPOSIT_NOT_FOUND", "DEPOSIT_ALREADY_REFUNDED", "UNIT_QUANTITY_NOT_WHOLE", "UNIT_REVISION_STALE", "UNIT_QUANTITY_UNREPRESENTABLE", "KIT_RECIPE_CHANGED", "CART_PROMOTION_UNAVAILABLE", "ORDER_HAS_KIT_LINES", "ORDER_HAS_FREIGHT_LINE", "ORDER_TARGET_REQUIRED", "ORDER_SOURCE_CONFLICT", "ORDER_CUSTOMER_REQUIRED", "BASKET_EMPTY", "BASKET_CHANGED_DURING_CHECKOUT", "CART_VERSION_CREATE_ONLY", "CART_VERSION_REQUIRES_CART_ID", "CART_REVISION_STALE", "CART_CUSTOMER_MISMATCH", "COUNTER_SALE_CREATE_ONLY", "SOLD_AT_CREATE_ONLY", "SOLD_AT_IN_FUTURE", "ORDER_TENDER_CREATE_ONLY", "CREDIT_OVERRIDE_CREATE_ONLY", "ON_ACCOUNT_CREATE_ONLY", "ON_ACCOUNT_WITH_TENDERS", "TENDERS_REQUIRE_COUNTER_SALE", "LINES_REQUIRE_COUNTER_SALE", "PRODUCT_COST_UNKNOWN", "PRICE_CHANGE_DISABLED", "LINE_DISCOUNT_EXCEEDS_MAX", "CUSTOMER_DISABLED", "SHIFT_NOT_AVAILABLE", "SOLD_AT_OUTSIDE_SHIFT", "ORDER_CURRENCY_NOT_SUBSCRIBED", "PAYMENT_METHODS_NOT_CONFIGURED", "PAYMENT_METHOD_NOT_FOUND", "PAYMENT_METHOD_UNAVAILABLE", "CART_PRICES_CHANGED", "ORDER_ID_COLLISION", "DELIVERY_METHOD_NOT_FOUND", "ORDER_BELOW_MINIMUM_PURCHASE", "ORDER_INVALID_CART", "CART_CHANGED_SINCE_CONFIRM", "EMAIL_VERIFICATION_REQUIRED", "ACCOUNT_DISABLED", "CUSTOMER_ACCESS_PENDING", "CUSTOMER_ACCESS_REJECTED", "CURRENCY_MISMATCH", "SHIFT_NOT_OPEN", "ORDER_DISCOUNT_AFTER_INVOICE", "ORDER_DISCOUNT_ON_SERVICE_ORDER", "ORDER_DISCOUNT_ON_MARKETPLACE_ORDER", "ORDER_INVOICE_METHOD_OUTSTANDING_FACTURA", "ORDER_SERVICE_PERIOD_AFTER_INVOICE", "ORDER_ATTEMPT_COMMITTED", "ORDER_ATTEMPT_ABANDONED", "ORDER_ATTEMPT_KEY_EXPIRED", "ORDER_ATTEMPT_KEY_SCOPE_MISMATCH", "ORDER_COMPLETION_ATTEMPT_COMMITTED", "ORDER_COMPLETION_ATTEMPT_ABANDONED"];
+export declare const ORDER_ERROR_CODES: readonly ["ORDER_COST_DENOMINATION_UNKNOWN", "SERVICE_ORDER_DELIVERY_MANAGED", "ORDER_NOT_FOUND", "ORDER_LOCKED", "ORDER_NOT_READY", "ORDER_DELIVERED_ANOTHER_DAY", "ORDER_DELIVERY_STATE_UNCHANGED", "ORDER_ILLEGAL_TRANSITION", "ORDER_VERSION_CONFLICT", "CUSTOMER_NOT_FOUND", "CUSTOMER_MERGED", "ORDER_HAS_NO_CUSTOMER", "CUSTOMER_ANONYMIZED", "FX_CONVERSION_UNAVAILABLE", "ROLE_FORBIDDEN", "ORDER_CANCELLED", "PAYMENT_SETTLED_ON_ANOTHER_ORDER", "ORDER_HAS_SHIPMENTS", "ORDER_HAS_RETURNS", "SHIPMENT_QUANTITY_EXCEEDED", "SHIPMENT_LINE_MISMATCH", "SHIPMENT_NOT_FOUND", "SHIPMENT_LIMIT_REACHED", "SHIPMENT_TOO_LARGE", "ORDER_FULFILMENT_EXTERNAL", "SHIPMENT_FAILED", "ADMIN_REQUIRED", "IDEMPOTENCY_KEY_REQUIRED", "INVALID_IDEMPOTENCY_KEY", "IDEMPOTENCY_KEY_REUSE", "IDEMPOTENCY_IN_PROGRESS", "IDEMPOTENCY_LOCK_CONTENTION", "IDEMPOTENCY_KEY_FAILED", "IDEMPOTENT_RESPONSE_NOT_CACHED", "ORDER_CANCELLATION_NOT_PROTECTED", "ORDER_CANCELLATION_COMMITTED", "ORDER_CANCELLATION_LOCKED", "ORDER_CANCELLATION_TOO_LARGE", "ORDER_CANCELLATION_FAILED", "SALE_LEDGER_RETRACTION_REFUSED", "SALE_LEDGER_ROW_NOT_OWNED", "PRODUCT_NOT_FOUND", "PRODUCT_SALE_LIMIT_EXCEEDED", "PRODUCT_SALE_LIMIT_INVALID", "DEPOSIT_SOURCE_NOT_ALLOWED", "DEPOSIT_CURRENCY_MISMATCH", "DEPOSIT_EXCEEDS_TOTAL", "DEPOSIT_FREEZE_REQUIRES_INVOICE", "DEPOSIT_FREEZE_INVOICE_PENDING", "DEPOSIT_CHARACTERIZATION_CONFLICT", "DEPOSIT_FREEZE_INVOICE_NOT_QUALIFYING", "DEPOSIT_INVOICED_ORDER_MUST_FREEZE", "DEPOSIT_FROZEN_ORDER_MUST_FREEZE", "DEPOSIT_REFERENCE_IS_LINKED_PAYMENT", "DEPOSIT_DUPLICATE_REFERENCE", "TILL_TENDER_REQUIRES_DEPOSIT", "PAYMENT_REFERENCED_BY_DEPOSIT", "ORDER_HAS_UNREFUNDED_DEPOSIT", "ORDER_PRICE_FROZEN", "DEPOSIT_NOT_FOUND", "DEPOSIT_ALREADY_REFUNDED", "UNIT_QUANTITY_NOT_WHOLE", "UNIT_REVISION_STALE", "UNIT_QUANTITY_UNREPRESENTABLE", "KIT_RECIPE_CHANGED", "CART_PROMOTION_UNAVAILABLE", "ORDER_HAS_KIT_LINES", "ORDER_HAS_FREIGHT_LINE", "ORDER_TARGET_REQUIRED", "ORDER_SOURCE_CONFLICT", "ORDER_CUSTOMER_REQUIRED", "BASKET_EMPTY", "BASKET_CHANGED_DURING_CHECKOUT", "CART_VERSION_CREATE_ONLY", "CART_VERSION_REQUIRES_CART_ID", "CART_REVISION_STALE", "CART_CUSTOMER_MISMATCH", "COUNTER_SALE_CREATE_ONLY", "SOLD_AT_CREATE_ONLY", "SOLD_AT_IN_FUTURE", "ORDER_TENDER_CREATE_ONLY", "CREDIT_OVERRIDE_CREATE_ONLY", "ON_ACCOUNT_CREATE_ONLY", "ON_ACCOUNT_WITH_TENDERS", "TENDERS_REQUIRE_COUNTER_SALE", "LINES_REQUIRE_COUNTER_SALE", "PRODUCT_COST_UNKNOWN", "PRICE_CHANGE_DISABLED", "LINE_DISCOUNT_EXCEEDS_MAX", "CUSTOMER_DISABLED", "SHIFT_NOT_AVAILABLE", "SOLD_AT_OUTSIDE_SHIFT", "ORDER_CURRENCY_NOT_SUBSCRIBED", "PAYMENT_METHODS_NOT_CONFIGURED", "PAYMENT_METHOD_NOT_FOUND", "PAYMENT_METHOD_UNAVAILABLE", "CART_PRICES_CHANGED", "ORDER_ID_COLLISION", "DELIVERY_METHOD_NOT_FOUND", "DELIVERY_FEE_CHANGED", "DELIVERY_FEE_CURRENCY_UNSUPPORTED", "ORDER_BELOW_MINIMUM_PURCHASE", "ORDER_INVALID_CART", "CART_CHANGED_SINCE_CONFIRM", "EMAIL_VERIFICATION_REQUIRED", "ACCOUNT_DISABLED", "CUSTOMER_ACCESS_PENDING", "CUSTOMER_ACCESS_REJECTED", "CURRENCY_MISMATCH", "SHIFT_NOT_OPEN", "ORDER_DISCOUNT_AFTER_INVOICE", "ORDER_DISCOUNT_ON_SERVICE_ORDER", "ORDER_DISCOUNT_ON_MARKETPLACE_ORDER", "ORDER_INVOICE_METHOD_OUTSTANDING_FACTURA", "ORDER_SERVICE_PERIOD_AFTER_INVOICE", "ORDER_ATTEMPT_COMMITTED", "ORDER_ATTEMPT_ABANDONED", "ORDER_ATTEMPT_KEY_EXPIRED", "ORDER_ATTEMPT_KEY_SCOPE_MISMATCH", "ORDER_COMPLETION_ATTEMPT_COMMITTED", "ORDER_COMPLETION_ATTEMPT_ABANDONED"];
 export type OrderErrorCode = (typeof ORDER_ERROR_CODES)[number];
 export {};

package/dist/order.js

@@ -380,6 +380,15 @@ export const orderFulfilmentProgress = (order) => {
  * - `DELIVERY_METHOD_NOT_FOUND` · 400 — `deliveryMethod` is not in the store's
  *   delivery catalogue, including an absent/empty catalogue. `data: {}`;
  *   refused before reading the cart.
+ * - `DELIVERY_FEE_CURRENCY_UNSUPPORTED` · 409 — the chosen delivery method
+ *   carries a `fee` and the cart is not in the store's order currency
+ *   (`config.displayCurrency`, pesos when unset), the currency the fee is
+ *   stated in. `data: {}`; refused after the re-price.
+ * - `DELIVERY_FEE_CHANGED` · 409 — `expectedFreight` (absent reads as `0`)
+ *   differs from the freight the server computes for the chosen delivery
+ *   method. `data: DeliveryFeeChangedData` carries the server figure; show it
+ *   and confirm again. Refused after the re-price and the minimum purchase,
+ *   before any order id, coupon redemption or write.
  * - `ORDER_INVALID_CART` · 400 — the normalized cart has no finite numeric
  *   `totals.grandTotal`. `data: {}`; refused before repricing/allocation.
  * - `CART_CHANGED_SINCE_CONFIRM` · 409 — the body sent `expectedCartId` /
@@ -655,6 +664,10 @@ export const ORDER_ERROR_CODES = [
     'CART_PRICES_CHANGED',
     'ORDER_ID_COLLISION',
     'DELIVERY_METHOD_NOT_FOUND',
+    // A priced delivery method (`Method.fee`): the freight moved since the shopper
+    // saw it, or the cart is not in the store's order currency.
+    'DELIVERY_FEE_CHANGED',
+    'DELIVERY_FEE_CURRENCY_UNSUPPORTED',
     'ORDER_BELOW_MINIMUM_PURCHASE',
     'ORDER_INVALID_CART',
     // The storefront's confirmed-cart pin (`StorefrontOrderCreateRequest.expectedCartId` / `expectedCartVersion`).

package/dist/store.d.ts

@@ -1844,6 +1844,45 @@ declare global {
          * is sent back without `availability`; sending a valid rule replaces it.
          */
         availability?: StorefrontDesignVisibility;
+        /**
+         * The price of this DELIVERY method, charged on a storefront order as one
+         * server-owned freight line (`OrderLine.lineKind: 'freight'`). ABSENT means
+         * unpriced: the order books no freight, exactly as before the key existed.
+         * Any delivery row may carry one, the pickup row included. Written by
+         * `POST /store`; carried by every read of a `deliveryMethods` row, the
+         * storefront `GET /store` and the CUSTOMER STORE frame included, because it
+         * is the price the shopper pays.
+         *
+         * DELIVERY rows only. The row type is shared, but `POST /store` refuses a
+         * `fee` on a `paymentMethods` row (`400 DELIVERY_FEE_INVALID`, `data.field`
+         * `paymentMethods[<row>].fee`), and every read drops one a legacy payment
+         * row still holds — nothing charges it there.
+         */
+        fee?: MethodFee;
+    }
+    /**
+     * A delivery method's price, in the store's order currency
+     * (`config.displayCurrency`, pesos when unset) and IVA-inclusive like every
+     * line price.
+     *
+     * `POST /store` refuses `400 DELIVERY_FEE_INVALID` (with `data.field`) unless
+     * both numbers are finite, at least `0`, and representable at that currency's
+     * ledger scale (2 decimals for every seeded currency). On read, a stored fee
+     * is dropped, never coerced, only when it breaks the SHAPE (a key other than
+     * these two, or an amount that is not a finite number of at least `0`); a
+     * stored amount off the ledger scale is still read, and checkout rounds it to
+     * the scale.
+     */
+    interface MethodFee {
+        /** What the method charges. `0` books a freight line at `0`. */
+        amount: number;
+        /**
+         * The goods total from which the method is free: when the cart's
+         * `grandTotal` (after every discount, freight never included) is at least
+         * this, the freight line books at `0` with `Order.freight.waivedBy:
+         * 'freeAbove'`. Absent means never free by amount.
+         */
+        freeAbove?: number;
     }
     interface FiscalCondition {
         CbteTipo: {
@@ -2444,6 +2483,14 @@ export type StoreModuleRefusalBody = {
  *   entry naming no list of the store, with `data: { field, value }` where
  *   `field` is `<catalog>[<row>].availability.priceLists[<entry>]`.
  *
+ * - `DELIVERY_FEE_INVALID` — `POST /store` only: a delivery row's `fee` carries
+ *   an amount or a `freeAbove` that is not a finite number of at least `0` at
+ *   the order currency's ledger scale, with `data: { field }` where `field` is
+ *   `deliveryMethods[<row>].fee.<key>`; or a `paymentMethods` row carries a
+ *   `fee` at all, with `field` `paymentMethods[<row>].fee`. A `fee` that is not
+ *   an object, or that carries a key other than those two, is
+ *   `VALIDATION_FAILED`.
+ *
  * Request refusal, `409`:
  * - `WHOLESALE_LIST_REQUIRED` — an `ecommerce` save turns
  *   `config.wholesaleRequests` on while the store holds no
@@ -2464,5 +2511,5 @@ export type StoreModuleRefusalBody = {
  * checks, the display-currency lock, the storefront fence) are not listed
  * either. Cross-cutting refusals: check `GATING_ERROR_CODES` as well.
  */
-export declare const STORE_PATCH_ERROR_CODES: readonly ["STORE_CONFIG_FORBIDDEN", "STORE_ECOMMERCE_FORBIDDEN", "STORE_FISCAL_FIELD_FORBIDDEN", "STORE_JURISDICTION_FORBIDDEN", "AFIP_RELACION_FLAG_FORBIDDEN", "FX_TABLE_FORBIDDEN", "FX_AUTO_UPDATE_FORBIDDEN", "FIELD_NOT_WRITABLE_HERE", "AFIP_POINT_OF_SALE_NOT_CLEARABLE", "CURRENCY_CATALOG_ID_UNKNOWN", "ARS_RATE_MUST_BE_ONE", "CURRENCY_RATE_ABOVE_CEILING", "FX_CATALOG_ID_UNKNOWN", "FX_SOURCE_ID_UNKNOWN", "DISPLAY_CURRENCY_NOT_INVOICEABLE", "PRODUCT_CURRENCY_NOT_INVOICEABLE", "PRICE_LIST_NOT_FOUND", "WHOLESALE_LIST_REQUIRED", "FORBIDDEN", "STORE_NOT_FOUND"];
+export declare const STORE_PATCH_ERROR_CODES: readonly ["STORE_CONFIG_FORBIDDEN", "STORE_ECOMMERCE_FORBIDDEN", "STORE_FISCAL_FIELD_FORBIDDEN", "STORE_JURISDICTION_FORBIDDEN", "AFIP_RELACION_FLAG_FORBIDDEN", "FX_TABLE_FORBIDDEN", "FX_AUTO_UPDATE_FORBIDDEN", "FIELD_NOT_WRITABLE_HERE", "AFIP_POINT_OF_SALE_NOT_CLEARABLE", "CURRENCY_CATALOG_ID_UNKNOWN", "ARS_RATE_MUST_BE_ONE", "CURRENCY_RATE_ABOVE_CEILING", "FX_CATALOG_ID_UNKNOWN", "FX_SOURCE_ID_UNKNOWN", "DISPLAY_CURRENCY_NOT_INVOICEABLE", "PRODUCT_CURRENCY_NOT_INVOICEABLE", "PRICE_LIST_NOT_FOUND", "DELIVERY_FEE_INVALID", "WHOLESALE_LIST_REQUIRED", "FORBIDDEN", "STORE_NOT_FOUND"];
 export type StorePatchErrorCode = (typeof STORE_PATCH_ERROR_CODES)[number];

package/dist/store.js

@@ -134,6 +134,14 @@ export const STORE_MODULE_ERROR_CODES = [
  *   entry naming no list of the store, with `data: { field, value }` where
  *   `field` is `<catalog>[<row>].availability.priceLists[<entry>]`.
  *
+ * - `DELIVERY_FEE_INVALID` — `POST /store` only: a delivery row's `fee` carries
+ *   an amount or a `freeAbove` that is not a finite number of at least `0` at
+ *   the order currency's ledger scale, with `data: { field }` where `field` is
+ *   `deliveryMethods[<row>].fee.<key>`; or a `paymentMethods` row carries a
+ *   `fee` at all, with `field` `paymentMethods[<row>].fee`. A `fee` that is not
+ *   an object, or that carries a key other than those two, is
+ *   `VALIDATION_FAILED`.
+ *
  * Request refusal, `409`:
  * - `WHOLESALE_LIST_REQUIRED` — an `ecommerce` save turns
  *   `config.wholesaleRequests` on while the store holds no
@@ -172,6 +180,7 @@ export const STORE_PATCH_ERROR_CODES = [
     'DISPLAY_CURRENCY_NOT_INVOICEABLE',
     'PRODUCT_CURRENCY_NOT_INVOICEABLE',
     'PRICE_LIST_NOT_FOUND',
+    'DELIVERY_FEE_INVALID',
     'WHOLESALE_LIST_REQUIRED',
     'FORBIDDEN',
     'STORE_NOT_FOUND',

package/dist/storefrontDesign.d.ts

@@ -268,12 +268,25 @@ declare global {
      * so the reference and identity walkers pass over it.
      *
      * Web `GET /store` filters by it and strips it, marking each item visible through a rule
-     * `audienceScoped: true`. The private preview is not filtered and carries it as authored.
+     * `audienceScoped: true`. The private preview carries it as authored, unless its grant names a
+     * fixture: then it is filtered exactly as web `GET /store` filters it for that fixture's caller.
      */
     interface StorefrontDesignVisibility {
         audiences: StorefrontDesignAudience[];
         priceLists?: number[];
     }
+    /**
+     * Who reads a storefront design, as {@link matchesStorefrontVisibility} judges a `visibility`
+     * rule: no approved customer (a guest, a pending or refused registrant included), or one approved
+     * customer with its effective list and that list's `audienceClass` (absent meaning `retail`).
+     */
+    type StorefrontAudienceCaller = {
+        kind: 'guest';
+    } | {
+        kind: 'customer';
+        priceList: number;
+        audienceClass: 'retail' | 'wholesale';
+    };
     /**
      * The one announcement bar a design carries above every page, never a second. `text` and
      * `subtitle` are plain text (no control characters; renderers escape markup); `text` is required
@@ -288,7 +301,7 @@ declare global {
      *
      * Every projection drops a disabled bar, as it drops a disabled section. Web `GET /store` also
      * drops one whose `visibility` the caller does not match; the private preview carries the rule
-     * as authored.
+     * as authored, unless its grant names a fixture, when it drops the bar as web `GET /store` would.
      */
     interface StorefrontDesignAnnouncement {
         id: string;
@@ -414,7 +427,8 @@ declare global {
      * An item that can carry `visibility` (section, page, navigation entry, footer link, the
      * announcement bar) may also
      * carry `audienceScoped: true`: web `GET /store` sets it on an item it returned because the
-     * caller matched that item's rule, and strips every `visibility`. The preview never sets it.
+     * caller matched that item's rule, and strips every `visibility`. The preview sets it only when
+     * its grant names a fixture, the same way.
      */
     type PublicStorefrontDesignValue<T> = T extends StorefrontDesignImagePlacement ? T & {
         url: string;
@@ -528,7 +542,27 @@ declare global {
     type StorefrontDesignDiscardInput = StorefrontDesignRevisionInput;
     interface StorefrontDesignPreviewInput {
         draftRevision: string;
+        /** Absent: the unfiltered preview at the default list. */
+        fixture?: StorefrontPreviewFixture;
     }
+    /**
+     * The audience a preview grant renders for — synthetic, never a real customer: no customer row,
+     * cart, order or balance is read. `guest` is a visitor without an account. `priceList` is an
+     * approved customer on that list of the store (its current `audienceClass` decides `retail` /
+     * `wholesale` rules), and every catalogue read prices at it; a list the store does not have is
+     * refused on issue, 400 `STOREFRONT_DESIGN_INVALID` with `UNKNOWN_PRICE_LIST` at
+     * `fixture.priceList`, and a list deleted after issue reads as a customer on it would (PUBLICO,
+     * list 1, with its class). `pending` is a registrant awaiting approval: the api answers it exactly as `guest`
+     * (content, methods and prices); the storefront may still show its in-review notices.
+     */
+    type StorefrontPreviewFixture = {
+        kind: 'guest';
+    } | {
+        kind: 'priceList';
+        priceList: number;
+    } | {
+        kind: 'pending';
+    };
     /**
      * GET draft answers a baseline built without copying the legacy logo, while POST init copies it,
      * so `document.branding.logo` can differ between them: clients rebase onto init's document.
@@ -649,11 +683,20 @@ declare global {
         grantId: string;
         iat: number;
         exp: number;
+        /** The issue body's fixture, signed in, so only the ADMIN-gated issue route can change it. */
+        fixture?: StorefrontPreviewFixture;
     }
     type StorefrontPreviewOperation = (typeof STOREFRONT_PREVIEW_READ_OPERATIONS)[number];
     /** GET query fields use their serialized string representation. Store scope comes only from the grant. */
     type StorefrontPreviewReadQuery = {
-        operation: 'design' | 'paymentMethods' | 'deliveryMethods';
+        operation: 'design';
+    }
+    /**
+     * The public method rows. With a grant fixture, only the rows that caller may use, as web
+     * `GET /store` and checkout judge a row's `availability`; without one, every row.
+     */
+     | {
+        operation: 'paymentMethods' | 'deliveryMethods';
     }
     /**
      * The shop's public web `GET /store` frame — the same allow-listed STORE
@@ -679,7 +722,8 @@ declare global {
     }
     /**
      * `bestSellers` is web `GET /products?mode=best-sellers`'s read and answer, priced as a
-     * guest. `recentlyBought` answers `{ data: [] }`: a preview has no buyer to read for.
+     * guest, or at a `priceList` fixture's list as every catalogue operation is.
+     * `recentlyBought` answers `{ data: [] }`: a preview has no buyer to read for.
      */
      | {
         operation: 'bestSellers' | 'recentlyBought';
@@ -769,6 +813,11 @@ declare global {
     interface StorefrontPreviewDesignResult {
         mode: 'preview';
         draftRevision: string;
+        /**
+         * Without a grant fixture, the draft with every `visibility` as authored. With one, the
+         * draft filtered for {@link StorefrontPreviewDesignResult.audience} by
+         * {@link projectStorefrontDocumentForAudience}, as web `GET /store` filters a publication.
+         */
         document: PublicStorefrontDesign;
         literalLayers: {
             scope: LiteralScope;
@@ -776,12 +825,19 @@ declare global {
         }[];
         effectiveSettings: StorefrontDesignSettings;
         defaultsVersion: string;
+        /**
+         * The caller the grant's fixture resolved to, present only when the grant names one: filter a
+         * posted `StorefrontPreviewDocument` with this same caller and the same walker.
+         */
+        audience?: StorefrontAudienceCaller;
     }
     /**
      * `operation=store`'s `data`: the fields web `GET /store` builds from the STORE
      * row, built by the same projector, and `storefrontDesign` from the pinned
      * draft. The contact is the draft's (`publicContact`, plus `email`/`phone`
-     * derived from it), as an adopted shop's comes from its publication.
+     * derived from it), as an adopted shop's comes from its publication. With a grant
+     * fixture, its method rows are only those that caller may use and its design is
+     * filtered for that caller, as web `GET /store` answers that caller.
      *
      * Never carries what only an open shop's public route knows — `publicStorefront`,
      * `maintenance` and `globals` — and never answers `STOREFRONT_UNAVAILABLE`: a
@@ -796,7 +852,11 @@ declare global {
         type: StorefrontDesignSectionType;
         enabled: boolean;
         content: Record<string, unknown>;
-        /** Carried as authored when well-formed, as navigation and footer entries carry theirs; never applied. */
+        /**
+         * Carried as authored when well-formed, as navigation and footer entries carry theirs; never
+         * applied by the parser. A frame whose design read echoed an `audience` should apply it
+         * with {@link projectStorefrontDocumentForAudience}.
+         */
         visibility?: StorefrontDesignVisibility;
     }
     interface StorefrontPreviewDocument {
@@ -824,7 +884,7 @@ declare global {
         contact: Record<string, unknown>;
         seo: object;
         literalOverrides: Record<string, unknown>;
-        /** Carried as sent when it is an object, its `visibility` kept only when well-formed; never applied. */
+        /** Carried as sent when it is an object, its `visibility` kept only when well-formed; never applied by the parser. */
         announcement?: object;
     }
     type StorefrontPreviewProtocolError = (typeof STOREFRONT_PREVIEW_PROTOCOL_ERRORS)[number];
@@ -931,6 +991,22 @@ declare global {
 export declare const STOREFRONT_PREVIEW_READ_OPERATIONS: readonly ["design", "store", "product", "productBySlug", "productsByIds", "bestSellers", "recentlyBought", "products", "incomes", "group", "related", "categories", "brands", "tags", "collection", "paymentMethods", "deliveryMethods", "asset"];
 /** Checks transport structure and UTF-8 size; unfamiliar section types are skipped, never rendered. */
 export declare function parseStorefrontPreviewDocument(input: unknown): StorefrontPreviewDocument | undefined;
+/**
+ * The one audience rule: whether `caller` sees an item with this `visibility`. Absent means
+ * everyone. Otherwise any listed audience that matches, or the caller's list in `priceLists`:
+ * `guest` matches only a guest; `customer` any customer; `retail` / `wholesale` a customer of that
+ * class. A rule naming a list deleted since it was authored matches no one through it.
+ */
+export declare function matchesStorefrontVisibility(visibility: StorefrontDesignVisibility | undefined, caller: StorefrontAudienceCaller): boolean;
+/**
+ * A storefront design document as `caller` may see it, built as a NEW tree (the input is never
+ * changed or shared): drops every section, page, navigation entry (top level or child), footer link
+ * and announcement bar `caller` does not match, and every link to a page it does not see; strips
+ * every `visibility`; marks an item kept through a rule `audienceScoped: true`. Web `GET /store`
+ * applies it to a publication, the preview to its draft for a grant fixture's caller, and a preview
+ * frame may apply it to a posted document with the caller its design read echoed.
+ */
+export declare function projectStorefrontDocumentForAudience<T extends object>(document: T, caller: StorefrontAudienceCaller): T;
 /** The codes a preview frame may report in an `error` message; the parser accepts exactly these. */
 export declare const STOREFRONT_PREVIEW_PROTOCOL_ERRORS: readonly ["STOREFRONT_PREVIEW_EXPIRED", "STOREFRONT_PREVIEW_REVOKED", "STOREFRONT_PREVIEW_FORBIDDEN", "STOREFRONT_PREVIEW_UNAVAILABLE", "STOREFRONT_DESIGN_INVALID", "STOREFRONT_SCHEMA_UNSUPPORTED"];
 /** Does not authenticate the grant. Keep it in memory and post only to the exact configured target origin. */

package/dist/storefrontDesign.js

@@ -245,7 +245,7 @@ function previewWithinBytes(value, maximum) {
 /**
  * A `visibility` rule kept on the transport only when well-formed: known audiences, and integer
  * price lists within the store cap. Anything else is left off rather than failing the frame — the
- * preview never filters by it, it only shows the rule the editor authored.
+ * parser never filters by it, it only carries the rule the editor authored.
  */
 function previewVisibility(input) {
     if (!previewRecord(input) || !Array.isArray(input.audiences))
@@ -354,6 +354,102 @@ function previewAnnouncement(input) {
     const { visibility, ...rest } = input;
     return { ...rest, ...previewVisibility(visibility) };
 }
+function audienceNamed(audiences, audience) {
+    return audiences.some((entry) => entry === audience);
+}
+/**
+ * The one audience rule: whether `caller` sees an item with this `visibility`. Absent means
+ * everyone. Otherwise any listed audience that matches, or the caller's list in `priceLists`:
+ * `guest` matches only a guest; `customer` any customer; `retail` / `wholesale` a customer of that
+ * class. A rule naming a list deleted since it was authored matches no one through it.
+ */
+export function matchesStorefrontVisibility(visibility, caller) {
+    if (!visibility)
+        return true;
+    const audiences = Array.isArray(visibility.audiences) ? visibility.audiences : [];
+    if (caller.kind === 'guest')
+        return audienceNamed(audiences, 'guest');
+    if (audienceNamed(audiences, 'customer') || audienceNamed(audiences, caller.audienceClass))
+        return true;
+    return Array.isArray(visibility.priceLists) && visibility.priceLists.some((id) => id === caller.priceList);
+}
+const isAudienceNode = (value) => value !== null && typeof value === 'object' && !Array.isArray(value);
+const audienceNonEmpty = (value) => Array.isArray(value) && value.length > 0;
+function copyAudienceValue(value) {
+    if (Array.isArray(value))
+        return value.map(copyAudienceValue);
+    if (!isAudienceNode(value))
+        return value;
+    return Object.fromEntries(Object.entries(value).map(([key, entry]) => [key, copyAudienceValue(entry)]));
+}
+/**
+ * Filters `value` for `caller` into a NEW tree, or `undefined` when it goes. Every `visibility` key
+ * is dropped; an item kept because its rule matched gains `audienceScoped: true`. As a published
+ * reader drops a link whose target vanished, a link (or a section's action) to a page this caller
+ * does not see goes whole. A menu entry left with neither children nor a target, and a footer group
+ * left with no links, go too: they would render as dead labels.
+ */
+function scopeAudienceValue(value, caller, pages) {
+    if (Array.isArray(value))
+        return scopeAudienceArray(value, caller, pages);
+    if (!isAudienceNode(value))
+        return value;
+    if (value.kind === 'page')
+        return pages.has(String(value.id)) ? copyAudienceValue(value) : undefined;
+    const visibility = value.visibility;
+    if (!matchesStorefrontVisibility(visibility, caller))
+        return undefined;
+    const result = Object.fromEntries(scopedAudienceEntries(value, visibility, caller, pages));
+    return keepsAfterAudienceFilter(value, result) ? result : undefined;
+}
+/**
+ * A kept node's entries, filtered. Built as entries for `Object.fromEntries`, never by assignment:
+ * an own `__proto__` key stays a data key and never becomes the result's prototype. A rule-matched
+ * item's flag keeps its place, or comes last.
+ */
+function scopedAudienceEntries(value, visibility, caller, pages) {
+    const entries = [];
+    for (const [key, entry] of Object.entries(value)) {
+        if (key === 'visibility')
+            continue;
+        const scoped = key === 'audienceScoped' && visibility ? true : scopeAudienceValue(entry, caller, pages);
+        if (scoped !== undefined)
+            entries.push([key, scoped]);
+    }
+    if (visibility && !Object.hasOwn(value, 'audienceScoped'))
+        entries.push(['audienceScoped', true]);
+    return entries;
+}
+function scopeAudienceArray(items, caller, pages) {
+    return items.flatMap((item) => {
+        const scoped = scopeAudienceValue(item, caller, pages);
+        return scoped === undefined ? [] : [scoped];
+    });
+}
+/** Whether a node survives once its own parts are filtered, judged against what it had before. */
+function keepsAfterAudienceFilter(had, result) {
+    if (had.target !== undefined && result.target === undefined)
+        return false;
+    if (audienceNonEmpty(had.children) && !audienceNonEmpty(result.children) && result.target === undefined)
+        return false;
+    return !(audienceNonEmpty(had.links) && !audienceNonEmpty(result.links));
+}
+/**
+ * A storefront design document as `caller` may see it, built as a NEW tree (the input is never
+ * changed or shared): drops every section, page, navigation entry (top level or child), footer link
+ * and announcement bar `caller` does not match, and every link to a page it does not see; strips
+ * every `visibility`; marks an item kept through a rule `audienceScoped: true`. Web `GET /store`
+ * applies it to a publication, the preview to its draft for a grant fixture's caller, and a preview
+ * frame may apply it to a posted document with the caller its design read echoed.
+ */
+export function projectStorefrontDocumentForAudience(document, caller) {
+    const root = document;
+    const pages = new Set((Array.isArray(root.pages) ? root.pages : [])
+        .filter(isAudienceNode)
+        .filter((page) => matchesStorefrontVisibility(page.visibility, caller))
+        .map((page) => String(page.id)));
+    return (scopeAudienceValue(root, caller, pages) ?? {});
+}
 /** The codes a preview frame may report in an `error` message; the parser accepts exactly these. */
 export const STOREFRONT_PREVIEW_PROTOCOL_ERRORS = [
     'STOREFRONT_PREVIEW_EXPIRED',

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "platform-types",
-	"version": "1.10.780",
+	"version": "1.10.782",
 	"description": "Shared wire and entity contracts for the platform.",
 	"type": "module",
 	"main": "dist/index.js",