platform-types 1.10.789 → 1.10.791

package/dist/basket.d.ts

@@ -118,8 +118,8 @@ export declare const GUEST_CART_TOKEN_HEADER = "X-Guest-Cart-Token";
  *   cart that is gone, belongs to an account, is held by a till, was checked
  *   out or was swept as abandoned — with one identical body, so the token is
  *   never an oracle. Drop the token and start a new guest cart.
- * - GUEST_CHECKOUT_DISABLED (403): the shop does not sell to guests — it has not
- *   switched guest checkout on, admits buyers only after approval, or hides
+ * - GUEST_CHECKOUT_DISABLED (403): the shop does not sell to guests — it
+ *   switched guest checkout off, admits buyers only after approval, or hides
  *   prices from anonymous visitors. Public `GET /store` reports the same verdict
  *   as `ecommerce.config.guestCheckoutAvailable`.
  * - GUEST_CHECKOUT_SIGNED_IN (409): the request carried an `Authorization`

package/dist/basket.js

@@ -87,8 +87,8 @@ export const GUEST_CART_TOKEN_HEADER = 'X-Guest-Cart-Token';
  *   cart that is gone, belongs to an account, is held by a till, was checked
  *   out or was swept as abandoned — with one identical body, so the token is
  *   never an oracle. Drop the token and start a new guest cart.
- * - GUEST_CHECKOUT_DISABLED (403): the shop does not sell to guests — it has not
- *   switched guest checkout on, admits buyers only after approval, or hides
+ * - GUEST_CHECKOUT_DISABLED (403): the shop does not sell to guests — it
+ *   switched guest checkout off, admits buyers only after approval, or hides
  *   prices from anonymous visitors. Public `GET /store` reports the same verdict
  *   as `ecommerce.config.guestCheckoutAvailable`.
  * - GUEST_CHECKOUT_SIGNED_IN (409): the request carried an `Authorization`

package/dist/cjs/basket.js

@@ -90,8 +90,8 @@ exports.GUEST_CART_TOKEN_HEADER = 'X-Guest-Cart-Token';
  *   cart that is gone, belongs to an account, is held by a till, was checked
  *   out or was swept as abandoned — with one identical body, so the token is
  *   never an oracle. Drop the token and start a new guest cart.
- * - GUEST_CHECKOUT_DISABLED (403): the shop does not sell to guests — it has not
- *   switched guest checkout on, admits buyers only after approval, or hides
+ * - GUEST_CHECKOUT_DISABLED (403): the shop does not sell to guests — it
+ *   switched guest checkout off, admits buyers only after approval, or hides
  *   prices from anonymous visitors. Public `GET /store` reports the same verdict
  *   as `ecommerce.config.guestCheckoutAvailable`.
  * - GUEST_CHECKOUT_SIGNED_IN (409): the request carried an `Authorization`

package/dist/cjs/guestAttach.js

@@ -0,0 +1,45 @@
+"use strict";
+/**
+ * Attach guest orders to an account — `POST /user { mode: 'attach-guest-orders' }`
+ * on the Web host. A signed-in shopper whose account email is VERIFIED names the
+ * guest orders they placed with that same email; each matched guest row is
+ * folded into their account by the customer merge, so the orders appear in the
+ * account's `GET /orders` and the orders' old guest status links stop working.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.GUEST_ATTACH_ERROR_CODES = void 0;
+/**
+ * The refusals the attach answers itself.
+ *
+ * - GUEST_ATTACH_EMAIL_UNVERIFIED (403): the caller's account email is not
+ *   verified (`Customer.emailVerified !== true`). Verify it through
+ *   `POST /auth { mode: 'send-otp' | 'verify-otp' }` and retry. Nothing else is
+ *   read.
+ * - GUEST_ATTACH_NOT_MATCHED (404): at least one named order is missing, is not
+ *   a guest order, was placed with another email, or was already attached to
+ *   another account; or its guest row also holds another customer folded into
+ *   it, or staff cancelled its merge into this account (or the caller's own
+ *   account was merged away or erased). One identical body whatever the
+ *   reason, and this request attaches nothing — not even the orders that did
+ *   match. Found before anything is written, it writes nothing; answered after
+ *   a merge refusal or an operator cancel raced the request, it may follow the
+ *   bump of that order's guest status fence (its old link already answers 401).
+ * - GUEST_ATTACH_ALREADY_DONE (409): every named order is already attached to
+ *   the caller's account. Nothing is written.
+ *
+ * The account refusals, shared with other storefront routes (the same codes and
+ * statuses as `WholesaleRequestErrorCode`), answered off the one caller read
+ * before anything else is read:
+ *
+ * - USER_NOT_ENABLED (403): the shop disabled the account.
+ * - CUSTOMER_ACCESS_PENDING (403): the shop has not approved the account yet.
+ * - CUSTOMER_ACCESS_REJECTED (403): the shop rejected the account.
+ */
+exports.GUEST_ATTACH_ERROR_CODES = [
+    'GUEST_ATTACH_EMAIL_UNVERIFIED',
+    'GUEST_ATTACH_NOT_MATCHED',
+    'GUEST_ATTACH_ALREADY_DONE',
+    'USER_NOT_ENABLED',
+    'CUSTOMER_ACCESS_PENDING',
+    'CUSTOMER_ACCESS_REJECTED',
+];

package/dist/cjs/index.js

@@ -54,6 +54,7 @@ __exportStar(require("./delivery.js"), exports);
 __exportStar(require("./favorite.js"), exports);
 __exportStar(require("./fiscalConditions.js"), exports);
 __exportStar(require("./gating.js"), exports);
+__exportStar(require("./guestAttach.js"), exports);
 __exportStar(require("./guestOrderStatus.js"), exports);
 __exportStar(require("./holdingCost.js"), exports);
 __exportStar(require("./demo.js"), exports);

package/dist/cjs/invoice.js

@@ -113,6 +113,9 @@ exports.INVOICE_ISSUANCE_REFUSAL_RECOVERY = {
  * `POST /invoices` `{mode:'email'}` answers both before anything is enqueued, and
  * `POST /mercadolibre/events` `{mode:'reuploadFiscalDocument'}` answers both for
  * the factura it chose.
+ * The web (storefront) invoice PDF answers `INVOICE_NOT_FOUND` too: one uniform
+ * 404 for an invoice that is absent or not the caller's, where the caller's
+ * own invoices include those owned by an id folded (merged) into their account.
  *
  * - `INVOICE_NOT_FOUND` · 404 — no invoice row has this id in the caller's
  *   store. Answered before any store read, render, print stamp, broadcast,

package/dist/customerAddress.d.ts

@@ -117,7 +117,10 @@ declare global {
      *   address changed under every bounded retry; retry is safe. ALSO answered
      *   by `POST /customers` and the storefront `POST /user` when an edit of
      *   the address loses to a rival that moved the default or its copy — those
-     *   refuse on the FIRST failure, with no retry of their own.
+     *   refuse on the FIRST failure, with no retry of their own. The storefront
+     *   `POST /user` also answers it for ANY profile edit whose stored `email`
+     *   changed after its read (another session moved it); nothing was written
+     *   and the same edit, re-sent, is safe.
      *
      * Those two legacy writers' other row-state refusals are not in this union:
      * `409 CUSTOMER_ANONYMIZED` (see `Customer.anonymizedAt`) and `409

package/dist/guestAttach.d.ts

@@ -0,0 +1,59 @@
+/**
+ * Attach guest orders to an account — `POST /user { mode: 'attach-guest-orders' }`
+ * on the Web host. A signed-in shopper whose account email is VERIFIED names the
+ * guest orders they placed with that same email; each matched guest row is
+ * folded into their account by the customer merge, so the orders appear in the
+ * account's `GET /orders` and the orders' old guest status links stop working.
+ */
+/**
+ * The refusals the attach answers itself.
+ *
+ * - GUEST_ATTACH_EMAIL_UNVERIFIED (403): the caller's account email is not
+ *   verified (`Customer.emailVerified !== true`). Verify it through
+ *   `POST /auth { mode: 'send-otp' | 'verify-otp' }` and retry. Nothing else is
+ *   read.
+ * - GUEST_ATTACH_NOT_MATCHED (404): at least one named order is missing, is not
+ *   a guest order, was placed with another email, or was already attached to
+ *   another account; or its guest row also holds another customer folded into
+ *   it, or staff cancelled its merge into this account (or the caller's own
+ *   account was merged away or erased). One identical body whatever the
+ *   reason, and this request attaches nothing — not even the orders that did
+ *   match. Found before anything is written, it writes nothing; answered after
+ *   a merge refusal or an operator cancel raced the request, it may follow the
+ *   bump of that order's guest status fence (its old link already answers 401).
+ * - GUEST_ATTACH_ALREADY_DONE (409): every named order is already attached to
+ *   the caller's account. Nothing is written.
+ *
+ * The account refusals, shared with other storefront routes (the same codes and
+ * statuses as `WholesaleRequestErrorCode`), answered off the one caller read
+ * before anything else is read:
+ *
+ * - USER_NOT_ENABLED (403): the shop disabled the account.
+ * - CUSTOMER_ACCESS_PENDING (403): the shop has not approved the account yet.
+ * - CUSTOMER_ACCESS_REJECTED (403): the shop rejected the account.
+ */
+export declare const GUEST_ATTACH_ERROR_CODES: readonly ["GUEST_ATTACH_EMAIL_UNVERIFIED", "GUEST_ATTACH_NOT_MATCHED", "GUEST_ATTACH_ALREADY_DONE", "USER_NOT_ENABLED", "CUSTOMER_ACCESS_PENDING", "CUSTOMER_ACCESS_REJECTED"];
+export type GuestAttachErrorCode = (typeof GUEST_ATTACH_ERROR_CODES)[number];
+declare global {
+    /**
+     * `POST /user` body. `orderIds`: 1–20 distinct ids (`^ORD\d{6,10}$`). Strict:
+     * an undeclared key is a 400. The account is always the token's own.
+     */
+    interface GuestAttachRequest {
+        mode: 'attach-guest-orders';
+        orderIds: string[];
+    }
+    /**
+     * `data` of a `200`. The named orders that are attached to the caller's
+     * account once this request ends — those this request attached and those an
+     * earlier request already had.
+     *
+     * ⚠️ It may be a SUBSET of the request: an attach is resumable, and a run that
+     * runs out of time leaves the rest unattached. Re-issue the SAME request to
+     * finish it; a request whose orders are all attached answers
+     * `409 GUEST_ATTACH_ALREADY_DONE`.
+     */
+    interface GuestAttachResponse {
+        attachedOrderIds: string[];
+    }
+}

package/dist/guestAttach.js

@@ -0,0 +1,42 @@
+/**
+ * Attach guest orders to an account — `POST /user { mode: 'attach-guest-orders' }`
+ * on the Web host. A signed-in shopper whose account email is VERIFIED names the
+ * guest orders they placed with that same email; each matched guest row is
+ * folded into their account by the customer merge, so the orders appear in the
+ * account's `GET /orders` and the orders' old guest status links stop working.
+ */
+/**
+ * The refusals the attach answers itself.
+ *
+ * - GUEST_ATTACH_EMAIL_UNVERIFIED (403): the caller's account email is not
+ *   verified (`Customer.emailVerified !== true`). Verify it through
+ *   `POST /auth { mode: 'send-otp' | 'verify-otp' }` and retry. Nothing else is
+ *   read.
+ * - GUEST_ATTACH_NOT_MATCHED (404): at least one named order is missing, is not
+ *   a guest order, was placed with another email, or was already attached to
+ *   another account; or its guest row also holds another customer folded into
+ *   it, or staff cancelled its merge into this account (or the caller's own
+ *   account was merged away or erased). One identical body whatever the
+ *   reason, and this request attaches nothing — not even the orders that did
+ *   match. Found before anything is written, it writes nothing; answered after
+ *   a merge refusal or an operator cancel raced the request, it may follow the
+ *   bump of that order's guest status fence (its old link already answers 401).
+ * - GUEST_ATTACH_ALREADY_DONE (409): every named order is already attached to
+ *   the caller's account. Nothing is written.
+ *
+ * The account refusals, shared with other storefront routes (the same codes and
+ * statuses as `WholesaleRequestErrorCode`), answered off the one caller read
+ * before anything else is read:
+ *
+ * - USER_NOT_ENABLED (403): the shop disabled the account.
+ * - CUSTOMER_ACCESS_PENDING (403): the shop has not approved the account yet.
+ * - CUSTOMER_ACCESS_REJECTED (403): the shop rejected the account.
+ */
+export const GUEST_ATTACH_ERROR_CODES = [
+    'GUEST_ATTACH_EMAIL_UNVERIFIED',
+    'GUEST_ATTACH_NOT_MATCHED',
+    'GUEST_ATTACH_ALREADY_DONE',
+    'USER_NOT_ENABLED',
+    'CUSTOMER_ACCESS_PENDING',
+    'CUSTOMER_ACCESS_REJECTED',
+];

package/dist/index.d.ts

@@ -30,6 +30,7 @@ export * from './delivery.ts';
 export * from './favorite.ts';
 export * from './fiscalConditions.ts';
 export * from './gating.ts';
+export * from './guestAttach.ts';
 export * from './guestOrderStatus.ts';
 export * from './holdingCost.ts';
 export * from './demo.ts';

package/dist/index.js

@@ -38,6 +38,7 @@ export * from "./delivery.js";
 export * from "./favorite.js";
 export * from "./fiscalConditions.js";
 export * from "./gating.js";
+export * from "./guestAttach.js";
 export * from "./guestOrderStatus.js";
 export * from "./holdingCost.js";
 export * from "./demo.js";

package/dist/invoice.d.ts

@@ -1070,6 +1070,9 @@ export declare const INVOICE_ISSUANCE_REFUSAL_RECOVERY: {
  * `POST /invoices` `{mode:'email'}` answers both before anything is enqueued, and
  * `POST /mercadolibre/events` `{mode:'reuploadFiscalDocument'}` answers both for
  * the factura it chose.
+ * The web (storefront) invoice PDF answers `INVOICE_NOT_FOUND` too: one uniform
+ * 404 for an invoice that is absent or not the caller's, where the caller's
+ * own invoices include those owned by an id folded (merged) into their account.
  *
  * - `INVOICE_NOT_FOUND` · 404 — no invoice row has this id in the caller's
  *   store. Answered before any store read, render, print stamp, broadcast,

package/dist/invoice.js

@@ -110,6 +110,9 @@ export const INVOICE_ISSUANCE_REFUSAL_RECOVERY = {
  * `POST /invoices` `{mode:'email'}` answers both before anything is enqueued, and
  * `POST /mercadolibre/events` `{mode:'reuploadFiscalDocument'}` answers both for
  * the factura it chose.
+ * The web (storefront) invoice PDF answers `INVOICE_NOT_FOUND` too: one uniform
+ * 404 for an invoice that is absent or not the caller's, where the caller's
+ * own invoices include those owned by an id folded (merged) into their account.
  *
  * - `INVOICE_NOT_FOUND` · 404 — no invoice row has this id in the caller's
  *   store. Answered before any store read, render, print stamp, broadcast,

package/dist/store.d.ts

@@ -160,7 +160,8 @@ declare global {
             wholesaleRequests?: boolean;
             /**
              * Whether the shop sells to shoppers without an account (server guest
-             * cart, guest checkout). Absent means OFF: a shop opts in. Honoured only
+             * cart, guest checkout). Absent means ON: a shop opts out by storing
+             * `false`, and only the boolean `false` closes it. Honoured only
              * while `registrationMode` is not `'approval'` and `showDefaultPriceList`
              * is not `0` — a shop that vets every buyer, or hides prices from
              * anonymous visitors, never sells to a guest whatever this says.
@@ -172,7 +173,7 @@ declare global {
             /**
              * SHOPPER-ONLY, never stored: present on web `GET /store` and the
              * customer `stores` frame, `true` when the shop accepts guest carts and
-             * guest checkout right now — `guestCheckout` on AND registration open AND
+             * guest checkout right now — `guestCheckout` not `false` AND registration open AND
              * prices shown to anonymous visitors. The guest routes refuse
              * `403 GUEST_CHECKOUT_DISABLED` whenever this is `false`.
              */

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "platform-types",
-	"version": "1.10.789",
+	"version": "1.10.791",
 	"description": "Shared wire and entity contracts for the platform.",
 	"type": "module",
 	"main": "dist/index.js",