platform-types 1.10.793 → 1.10.795

package/dist/cjs/index.js

@@ -55,6 +55,7 @@ __exportStar(require("./favorite.js"), exports);
 __exportStar(require("./fiscalConditions.js"), exports);
 __exportStar(require("./gating.js"), exports);
 __exportStar(require("./guestAttach.js"), exports);
+__exportStar(require("./quoteRequest.js"), exports);
 __exportStar(require("./guestOrderStatus.js"), exports);
 __exportStar(require("./holdingCost.js"), exports);
 __exportStar(require("./demo.js"), exports);
@@ -109,6 +110,7 @@ __exportStar(require("./storefrontTheme.js"), exports);
 __exportStar(require("./storeNetwork.js"), exports);
 __exportStar(require("./storefrontAssets.js"), exports);
 __exportStar(require("./storefrontEvent.js"), exports);
+__exportStar(require("./storefrontIngest.js"), exports);
 __exportStar(require("./storefrontSeo.js"), exports);
 __exportStar(require("./storefrontProductMeta.js"), exports);
 __exportStar(require("./storefrontWebLiteralKeys.js"), exports);

package/dist/cjs/notification.js

@@ -6,7 +6,8 @@ exports.WEB_NOTIFICATIONS_MAX_LIMIT = exports.CUSTOMER_NOTIFICATION_TYPES = expo
 // legacy opt-ins and explicit channel maps remain source data on USER rows.
 // Addressed ERROR / ML_FACTURADOR_COLLISION / ML_SELLER_SWITCHED /
 // ML_CONNECTION_BROKEN / MENTION / CUSTOMER_PENDING_APPROVAL /
-// PAYMENT_ATTEMPT_RESOLUTION / CUSTOMER_WHOLESALE_REQUEST do not select a producer subscriber audience;
+// PAYMENT_ATTEMPT_RESOLUTION / CUSTOMER_WHOLESALE_REQUEST / STOREFRONT_QUOTE_REQUEST do not select a
+// producer subscriber audience;
 // the consumer still reads the live USER row for each delivery channel.
 // AFIP_CERT_EXPIRY is seeded on the founding user and uses the subscriber index.
 // Exported as a real enum consumed by api and app; adding an indexed type
@@ -217,6 +218,24 @@ var NotificationTypeEnum;
      * audience — the bell would reach the buyer's own storefront socket).
      */
     NotificationTypeEnum["CUSTOMER_WHOLESALE_REQUEST"] = "CUSTOMER_WHOLESALE_REQUEST";
+    /**
+     * A shopper sent a quote request from a storefront `quoteRequest` section
+     * (web `POST /quote-requests`) and it waits in the operator inbox
+     * (`GET /quote-requests`). The bell names nobody — the request's contact
+     * data is PII and NOTIF# rows outlive an erasure.
+     *
+     * ⚠️ ADMIN-ONLY, and its own preference key. The producer fans out to every
+     * non-disabled ADMIN of the store (`listActiveAdmins`), the same recipients
+     * as `CUSTOMER_PENDING_APPROVAL`. No legacy opt-in scan: the consumer
+     * enforces explicit type/channel preferences
+     * (`notificationPreferences.STOREFRONT_QUOTE_REQUEST`), default-on when
+     * absent. Additive — no backfill or consumer migration owed.
+     *
+     * ⚠️ Carries `quoteRequestRef` and NEVER a top-level `customerId` (an
+     * audience — the bell would reach a signed-in requester's own storefront
+     * socket).
+     */
+    NotificationTypeEnum["STOREFRONT_QUOTE_REQUEST"] = "STOREFRONT_QUOTE_REQUEST";
 })(NotificationTypeEnum || (exports.NotificationTypeEnum = NotificationTypeEnum = {}));
 /**
  * The notification types a CUSTOMER bell can carry today; each links through

package/dist/cjs/presupuesto.js

@@ -132,6 +132,11 @@ exports.PRESUPUESTO_IMMUTABLE_STATUSES = ['rejected', 'expired'];
  *   ⚠️ `GET` has no such gate.
  * - `INVALID_CURSOR` · 400 — a malformed `?startKey=`, or one minted against a
  *   different store or index. Read path only.
+ * - `QUOTE_REQUEST_NOT_FOUND` · 404 — a create naming a `quoteRequestId` this
+ *   store has no request for. Nothing is written and no number is spent.
+ * - `QUOTE_REQUEST_ALREADY_LINKED` · 409 — a create naming a quote request that a
+ *   presupuesto already converted, found by the read before the write or by the
+ *   write's own condition when two creates race. No presupuesto is written.
  * - `PRODUCT_COST_UNKNOWN` · 400 — a conversion naming a product whose catalogue
  *   row states no `cost`, refused rather than booking an order with a COGS
  *   nobody can state. The same body the POS checkout renders.
@@ -176,4 +181,7 @@ exports.PRESUPUESTO_ERROR_CODES = [
     // The per-sale cap refusal every sale entry point shares (`ProductSaleLimitRefusal`).
     'PRODUCT_SALE_LIMIT_EXCEEDED',
     'PRODUCT_SALE_LIMIT_INVALID',
+    // The create's storefront quote-request link (`quoteRequestId`).
+    'QUOTE_REQUEST_NOT_FOUND',
+    'QUOTE_REQUEST_ALREADY_LINKED',
 ];

package/dist/cjs/quoteRequest.js

@@ -0,0 +1,63 @@
+"use strict";
+/**
+ * Storefront quote requests — a shopper (guest or signed-in) asks the shop for a
+ * quote from a `quoteRequest` storefront section; the operator reads it in the
+ * back office and turns it into a Presupuesto.
+ *
+ * Web (public, bound origin only): `POST /quote-requests`.
+ * App (ADMIN, SUPERVISOR, MANAGER): `GET /quote-requests` (list and read) and
+ * `POST /quote-requests { mode: 'status' }`. A Presupuesto created with
+ * `quoteRequestId` links the request (`POST /presupuestos`).
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.QUOTE_REQUEST_RECAPTCHA_ACTION = exports.QUOTE_REQUEST_LIMITS = exports.QUOTE_REQUEST_OPTIONAL_FIELDS = exports.QUOTE_REQUEST_STATUSES = exports.QUOTE_REQUEST_ERROR_CODES = void 0;
+/**
+ * The refusals of the quote-request routes.
+ *
+ * - INVALID_QUOTE_REQUEST (400): a body over 8 KiB, malformed or off-schema; a guest
+ *   without `contact`; `items` when no placed `quoteRequest` section allows them
+ *   (`fieldErrors` names `items`); a guest `contact.phone` / `company` / `cuit` no
+ *   placed section lists in `fields` (names `contact.<field>` — refused, never
+ *   dropped); or an `items[i]` naming a product that does not exist or is not
+ *   offered on the storefront (names `items.<i>.productId`).
+ * - CAPTCHA_INVALID (403): the `x-captcha-token` header is missing, invalid or
+ *   scored too low. One body whatever the reason.
+ * - ORIGIN_STORE_MISMATCH (403): the request's Origin is not bound to a shop, or
+ *   is bound to another shop than the one it names. Nothing is stored.
+ * - QUOTE_REQUESTS_DISABLED (403): the shop's live publication has no enabled
+ *   `quoteRequest` section on an enabled page — it never placed the form, or
+ *   unpublished it. Nothing is stored.
+ * - QUOTE_REQUEST_LIMIT (429): the shop's daily cap for guests, or the hourly
+ *   cool-down of the guest's address or the signed-in buyer's account, is spent.
+ *   Nothing is stored.
+ * - QUOTE_REQUEST_NOT_FOUND (404): app routes, an unknown `quoteRequestId`.
+ * - QUOTE_REQUEST_ALREADY_LINKED (409): `POST /presupuestos` naming a request
+ *   another Presupuesto already converted. No Presupuesto is written. Also the
+ *   app `POST /quote-requests { mode: 'status' }` on a converted request: its
+ *   status belongs to the Presupuesto that converted it and no longer changes.
+ */
+exports.QUOTE_REQUEST_ERROR_CODES = [
+    'INVALID_QUOTE_REQUEST',
+    'CAPTCHA_INVALID',
+    'ORIGIN_STORE_MISMATCH',
+    'QUOTE_REQUESTS_DISABLED',
+    'QUOTE_REQUEST_LIMIT',
+    'QUOTE_REQUEST_NOT_FOUND',
+    'QUOTE_REQUEST_ALREADY_LINKED',
+];
+exports.QUOTE_REQUEST_STATUSES = ['new', 'in-progress', 'converted', 'dismissed'];
+/** The optional contact fields a `quoteRequest` section may ask for. */
+exports.QUOTE_REQUEST_OPTIONAL_FIELDS = ['phone', 'company', 'cuit'];
+/** Bounds of the web write. */
+exports.QUOTE_REQUEST_LIMITS = {
+    message: 2000,
+    items: 50,
+    /** The shared base-quantity ceiling (`baseQuantitySchema`), six decimal places. */
+    itemQuantity: 1_000_000,
+    name: 120,
+    company: 120,
+    email: 254,
+    phone: 40,
+};
+/** The reCAPTCHA action the storefront executes for the web write. */
+exports.QUOTE_REQUEST_RECAPTCHA_ACTION = 'quote_request';

package/dist/cjs/storefrontDesign.js

@@ -93,6 +93,8 @@ exports.STOREFRONT_SECTION_TYPES = [
     'paymentDelivery',
     'logoWall',
     'gallery',
+    'quoteRequest',
+    'customerRequest',
 ];
 /**
  * The section types a page may repeat, each up to `STOREFRONT_DESIGN_LIMITS.repeatableSectionsPerType`

package/dist/cjs/storefrontIngest.js

@@ -0,0 +1,45 @@
+"use strict";
+/**
+ * Guest storefront telemetry ingest — the HTTP route a shopper who never signs
+ * in sends first-party storefront events through (the signed-in shopper keeps
+ * the WebSocket `logs` action).
+ *
+ * Web (public, bound origin only): `POST /events` (a batch) and
+ * `POST /events/consent` (an analytics-consent withdrawal for one journey).
+ *
+ * The tenant is the request's bound Origin (a slug host or a verified custom
+ * domain), never `x-store` and never an event's `tenant_store_id`. Nothing a
+ * guest sends can claim to be a customer: `customer_id` is not part of a guest
+ * event, and one that carries it is dropped and counted.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.STOREFRONT_INGEST_LIMITS = exports.STOREFRONT_INGEST_ERROR_CODES = void 0;
+/**
+ * The refusals of the guest ingest routes.
+ *
+ * - EVENTS_TENANT_UNRESOLVED (403): the request's Origin is bound to no shop.
+ *   Checked before the body is read; nothing is stored.
+ * - EVENTS_BATCH_TOO_LARGE (413): the raw body is over
+ *   {@link STOREFRONT_INGEST_LIMITS.maxBodyBytes} bytes, or `events` holds more
+ *   than {@link STOREFRONT_INGEST_LIMITS.maxEvents} entries. Nothing is stored.
+ * - VALIDATION_FAILED (400): the request as a WHOLE is malformed — not JSON, not
+ *   the envelope shape, or (withdrawal) `anonymousId` not a UUID. A single event
+ *   that does not validate is never a 400: it is a counted drop in `dropped`.
+ * - EVENTS_RATE_LIMITED (429): the source's budget is spent. Nothing is stored;
+ *   retry later.
+ */
+exports.STOREFRONT_INGEST_ERROR_CODES = [
+    'EVENTS_TENANT_UNRESOLVED',
+    'EVENTS_BATCH_TOO_LARGE',
+    'VALIDATION_FAILED',
+    'EVENTS_RATE_LIMITED',
+];
+/** Bounds of `POST /events`, enforced before any event is read. */
+exports.STOREFRONT_INGEST_LIMITS = {
+    /** The raw request body ceiling, in UTF-8 bytes, measured before parsing. */
+    maxBodyBytes: 32 * 1024,
+    /** At most this many events per request. */
+    maxEvents: 25,
+    /** The longest `analyticsConsent.version` accepted; a longer one never stores an event. */
+    consentVersionMaxLength: 64,
+};

package/dist/customer.d.ts

@@ -1273,6 +1273,17 @@ declare global {
          * the request flow).
          */
         wholesaleRequests?: WholesaleRequestExportEntry[];
+        /**
+         * The subject's storefront quote requests, newest first, on BOTH surfaces:
+         * the ones they sent signed in under their own id plus any filed under a
+         * merged-away id folded into them (the same folded ids, and the same cap, as
+         * the financial collections). Each is the request as the operator reads it —
+         * the contact copied from their account, the message, the items and its
+         * status. A request sent as a guest carries no customer id and is not
+         * reachable from here. Absent when there is none (and from servers predating
+         * storefront quote requests).
+         */
+        quoteRequests?: QuoteRequest[];
         /**
          * Per COLLECTION, and honest: `true` means the read stopped before the
          * end of a partition, folded financial IDs were omitted at the cap, or whole
@@ -1302,6 +1313,12 @@ declare global {
              * may be missing.
              */
             wholesaleRequests?: boolean;
+            /**
+             * Present when `quoteRequests` is, or when merged-away ids were cut at the
+             * folded-id cap — then `true`: a request filed under an omitted id, or
+             * past the per-export request cap, may be missing.
+             */
+            quoteRequests?: boolean;
         };
     }
     /**
@@ -1609,6 +1626,24 @@ declare global {
          * (`WebAnonymizeCustomerResult`).
          */
         rmaEraseComplete: boolean;
+        /**
+         * Storefront quote requests the subject sent signed in
+         * (`QUOTEREQUEST#{storeId}`), DELETED by this erasure — the whole row goes:
+         * it holds their contact and free text. Found through the per-customer
+         * pointer row, which goes last. A Presupuesto raised from one keeps its
+         * `sourceQuoteRequestId`, now dangling. Optional only so the field is
+         * additive — every erasure from this version on sets it.
+         */
+        quoteRequestsErased?: number;
+        /**
+         * `false` when the subject's quote requests could not be read or deleted
+         * to the end, so one may remain. Re-issuing the erasure re-runs the step;
+         * BOTH erasure handlers write a deduped `ERROR` row
+         * (`CUSTOMER_ANONYMIZE_QUOTE_REQUESTS_INCOMPLETE`). On BOTH wires — the
+         * subject's own data. Optional only so the field is additive; only a
+         * measured `true` is a finished step.
+         */
+        quoteRequestEraseComplete?: boolean;
         /**
          * The subject's `ORDER#` rows whose frozen recipient this erasure scrubbed —
          * `customer` reduced to `{ customerId }`, `deliveryAddress` removed, the

package/dist/index.d.ts

@@ -31,6 +31,7 @@ export * from './favorite.ts';
 export * from './fiscalConditions.ts';
 export * from './gating.ts';
 export * from './guestAttach.ts';
+export * from './quoteRequest.ts';
 export * from './guestOrderStatus.ts';
 export * from './holdingCost.ts';
 export * from './demo.ts';
@@ -85,6 +86,7 @@ export * from './storefrontTheme.ts';
 export * from './storeNetwork.ts';
 export * from './storefrontAssets.ts';
 export * from './storefrontEvent.ts';
+export * from './storefrontIngest.ts';
 export * from './storefrontSeo.ts';
 export * from './storefrontProductMeta.ts';
 export * from './storefrontWebLiteralKeys.ts';

package/dist/index.js

@@ -39,6 +39,7 @@ export * from "./favorite.js";
 export * from "./fiscalConditions.js";
 export * from "./gating.js";
 export * from "./guestAttach.js";
+export * from "./quoteRequest.js";
 export * from "./guestOrderStatus.js";
 export * from "./holdingCost.js";
 export * from "./demo.js";
@@ -93,6 +94,7 @@ export * from "./storefrontTheme.js";
 export * from "./storeNetwork.js";
 export * from "./storefrontAssets.js";
 export * from "./storefrontEvent.js";
+export * from "./storefrontIngest.js";
 export * from "./storefrontSeo.js";
 export * from "./storefrontProductMeta.js";
 export * from "./storefrontWebLiteralKeys.js";

package/dist/notification.d.ts

@@ -195,7 +195,25 @@ export declare enum NotificationTypeEnum {
      * ⚠️ Carries `wholesaleRequestRef` and NEVER a top-level `customerId` (an
      * audience — the bell would reach the buyer's own storefront socket).
      */
-    CUSTOMER_WHOLESALE_REQUEST = "CUSTOMER_WHOLESALE_REQUEST"
+    CUSTOMER_WHOLESALE_REQUEST = "CUSTOMER_WHOLESALE_REQUEST",
+    /**
+     * A shopper sent a quote request from a storefront `quoteRequest` section
+     * (web `POST /quote-requests`) and it waits in the operator inbox
+     * (`GET /quote-requests`). The bell names nobody — the request's contact
+     * data is PII and NOTIF# rows outlive an erasure.
+     *
+     * ⚠️ ADMIN-ONLY, and its own preference key. The producer fans out to every
+     * non-disabled ADMIN of the store (`listActiveAdmins`), the same recipients
+     * as `CUSTOMER_PENDING_APPROVAL`. No legacy opt-in scan: the consumer
+     * enforces explicit type/channel preferences
+     * (`notificationPreferences.STOREFRONT_QUOTE_REQUEST`), default-on when
+     * absent. Additive — no backfill or consumer migration owed.
+     *
+     * ⚠️ Carries `quoteRequestRef` and NEVER a top-level `customerId` (an
+     * audience — the bell would reach a signed-in requester's own storefront
+     * socket).
+     */
+    STOREFRONT_QUOTE_REQUEST = "STOREFRONT_QUOTE_REQUEST"
 }
 /**
  * The notification types a CUSTOMER bell can carry today; each links through
@@ -313,6 +331,11 @@ declare global {
          * an audience — see {@link WholesaleRequestRef}.
          */
         wholesaleRequestRef?: WholesaleRequestRef;
+        /**
+         * `STOREFRONT_QUOTE_REQUEST` only: which request to open. A POINTER, not
+         * an audience — see {@link QuoteRequestRef}. Operator surfaces only.
+         */
+        quoteRequestRef?: QuoteRequestRef;
         /** `MENTION` only: the colleague who wrote the mention (a snapshot). */
         actor?: NotificationActor;
         userId?: string;
@@ -376,7 +399,7 @@ declare global {
      * customer socket carry — the stored row minus the operator-only pointers.
      * A union keyed on `type`; `ORDER` is its only member today.
      */
-    type CustomerNotification = Omit<NotificationInterface, 'cartRef' | 'pendingCustomerRef' | 'wholesaleRequestRef' | 'TableName' | 'type' | 'orderId'> & {
+    type CustomerNotification = Omit<NotificationInterface, 'cartRef' | 'pendingCustomerRef' | 'wholesaleRequestRef' | 'quoteRequestRef' | 'TableName' | 'type' | 'orderId'> & {
         type: NotificationTypeEnum.ORDER;
         /** Set on every customer row: the order the bell is about. */
         orderId: string;

package/dist/notification.js

@@ -3,7 +3,8 @@
 // legacy opt-ins and explicit channel maps remain source data on USER rows.
 // Addressed ERROR / ML_FACTURADOR_COLLISION / ML_SELLER_SWITCHED /
 // ML_CONNECTION_BROKEN / MENTION / CUSTOMER_PENDING_APPROVAL /
-// PAYMENT_ATTEMPT_RESOLUTION / CUSTOMER_WHOLESALE_REQUEST do not select a producer subscriber audience;
+// PAYMENT_ATTEMPT_RESOLUTION / CUSTOMER_WHOLESALE_REQUEST / STOREFRONT_QUOTE_REQUEST do not select a
+// producer subscriber audience;
 // the consumer still reads the live USER row for each delivery channel.
 // AFIP_CERT_EXPIRY is seeded on the founding user and uses the subscriber index.
 // Exported as a real enum consumed by api and app; adding an indexed type
@@ -214,6 +215,24 @@ export var NotificationTypeEnum;
      * audience — the bell would reach the buyer's own storefront socket).
      */
     NotificationTypeEnum["CUSTOMER_WHOLESALE_REQUEST"] = "CUSTOMER_WHOLESALE_REQUEST";
+    /**
+     * A shopper sent a quote request from a storefront `quoteRequest` section
+     * (web `POST /quote-requests`) and it waits in the operator inbox
+     * (`GET /quote-requests`). The bell names nobody — the request's contact
+     * data is PII and NOTIF# rows outlive an erasure.
+     *
+     * ⚠️ ADMIN-ONLY, and its own preference key. The producer fans out to every
+     * non-disabled ADMIN of the store (`listActiveAdmins`), the same recipients
+     * as `CUSTOMER_PENDING_APPROVAL`. No legacy opt-in scan: the consumer
+     * enforces explicit type/channel preferences
+     * (`notificationPreferences.STOREFRONT_QUOTE_REQUEST`), default-on when
+     * absent. Additive — no backfill or consumer migration owed.
+     *
+     * ⚠️ Carries `quoteRequestRef` and NEVER a top-level `customerId` (an
+     * audience — the bell would reach a signed-in requester's own storefront
+     * socket).
+     */
+    NotificationTypeEnum["STOREFRONT_QUOTE_REQUEST"] = "STOREFRONT_QUOTE_REQUEST";
 })(NotificationTypeEnum || (NotificationTypeEnum = {}));
 /**
  * The notification types a CUSTOMER bell can carry today; each links through

package/dist/presupuesto.d.ts

@@ -135,6 +135,18 @@ declare global {
          * write rather than minting a duplicate order.
          */
         convertedOrderId?: string;
+        /**
+         * The storefront quote request (`QuoteRequest.quoteRequestId`) this
+         * presupuesto was raised from — `POST /presupuestos` with `quoteRequestId`.
+         * Written in the SAME transaction that stamps `linkedPresupuestoId` and
+         * `status: 'converted'` on the request, so the two halves of the link
+         * cannot disagree. Absent on a presupuesto raised from scratch.
+         *
+         * ⚠️ The request can disappear later — a customer erasure deletes their
+         * requests and a guest request expires — so a reader must treat a dangling
+         * id as "the request is gone", never as an error.
+         */
+        sourceQuoteRequestId?: string;
         createdAt: number;
         updatedAt?: number;
         /** Lowercase '#'-joined write-side index. Internal; not part of the read contract. */
@@ -226,6 +238,11 @@ export declare const PRESUPUESTO_IMMUTABLE_STATUSES: readonly ["rejected", "expi
  *   ⚠️ `GET` has no such gate.
  * - `INVALID_CURSOR` · 400 — a malformed `?startKey=`, or one minted against a
  *   different store or index. Read path only.
+ * - `QUOTE_REQUEST_NOT_FOUND` · 404 — a create naming a `quoteRequestId` this
+ *   store has no request for. Nothing is written and no number is spent.
+ * - `QUOTE_REQUEST_ALREADY_LINKED` · 409 — a create naming a quote request that a
+ *   presupuesto already converted, found by the read before the write or by the
+ *   write's own condition when two creates race. No presupuesto is written.
  * - `PRODUCT_COST_UNKNOWN` · 400 — a conversion naming a product whose catalogue
  *   row states no `cost`, refused rather than booking an order with a COGS
  *   nobody can state. The same body the POS checkout renders.
@@ -246,6 +263,6 @@ export declare const PRESUPUESTO_IMMUTABLE_STATUSES: readonly ["rejected", "expi
  *   operator can act on is the distinct-product ceiling those items derive
  *   from, and the two refuse at exactly the same point.
  */
-export declare const PRESUPUESTO_ERROR_CODES: readonly ["PRESUPUESTO_NOT_FOUND", "VALIDATION_FAILED", "ADMIN_REQUIRED", "INVALID_CURSOR", "PRODUCT_COST_UNKNOWN", "PRESUPUESTO_NOT_MUTABLE", "PRESUPUESTO_ILLEGAL_TRANSITION", "PRESUPUESTO_ALREADY_CONVERTED", "PRESUPUESTO_NOT_APPROVED", "PRESUPUESTO_TOO_MANY_PRODUCTS", "TRANSACTION_ITEMS_LIMIT_REACHED", "PRODUCT_NOT_FOUND", "UNIT_QUANTITY_NOT_WHOLE", "UNIT_QUANTITY_UNREPRESENTABLE", "UNIT_REVISION_STALE", "STOCK INSUFICIENTE", "PRODUCT_SALE_LIMIT_EXCEEDED", "PRODUCT_SALE_LIMIT_INVALID"];
+export declare const PRESUPUESTO_ERROR_CODES: readonly ["PRESUPUESTO_NOT_FOUND", "VALIDATION_FAILED", "ADMIN_REQUIRED", "INVALID_CURSOR", "PRODUCT_COST_UNKNOWN", "PRESUPUESTO_NOT_MUTABLE", "PRESUPUESTO_ILLEGAL_TRANSITION", "PRESUPUESTO_ALREADY_CONVERTED", "PRESUPUESTO_NOT_APPROVED", "PRESUPUESTO_TOO_MANY_PRODUCTS", "TRANSACTION_ITEMS_LIMIT_REACHED", "PRODUCT_NOT_FOUND", "UNIT_QUANTITY_NOT_WHOLE", "UNIT_QUANTITY_UNREPRESENTABLE", "UNIT_REVISION_STALE", "STOCK INSUFICIENTE", "PRODUCT_SALE_LIMIT_EXCEEDED", "PRODUCT_SALE_LIMIT_INVALID", "QUOTE_REQUEST_NOT_FOUND", "QUOTE_REQUEST_ALREADY_LINKED"];
 export type PresupuestoErrorCode = (typeof PRESUPUESTO_ERROR_CODES)[number];
 export {};

package/dist/presupuesto.js

@@ -129,6 +129,11 @@ export const PRESUPUESTO_IMMUTABLE_STATUSES = ['rejected', 'expired'];
  *   ⚠️ `GET` has no such gate.
  * - `INVALID_CURSOR` · 400 — a malformed `?startKey=`, or one minted against a
  *   different store or index. Read path only.
+ * - `QUOTE_REQUEST_NOT_FOUND` · 404 — a create naming a `quoteRequestId` this
+ *   store has no request for. Nothing is written and no number is spent.
+ * - `QUOTE_REQUEST_ALREADY_LINKED` · 409 — a create naming a quote request that a
+ *   presupuesto already converted, found by the read before the write or by the
+ *   write's own condition when two creates race. No presupuesto is written.
  * - `PRODUCT_COST_UNKNOWN` · 400 — a conversion naming a product whose catalogue
  *   row states no `cost`, refused rather than booking an order with a COGS
  *   nobody can state. The same body the POS checkout renders.
@@ -173,4 +178,7 @@ export const PRESUPUESTO_ERROR_CODES = [
     // The per-sale cap refusal every sale entry point shares (`ProductSaleLimitRefusal`).
     'PRODUCT_SALE_LIMIT_EXCEEDED',
     'PRODUCT_SALE_LIMIT_INVALID',
+    // The create's storefront quote-request link (`quoteRequestId`).
+    'QUOTE_REQUEST_NOT_FOUND',
+    'QUOTE_REQUEST_ALREADY_LINKED',
 ];

package/dist/quoteRequest.d.ts

@@ -0,0 +1,120 @@
+/**
+ * Storefront quote requests — a shopper (guest or signed-in) asks the shop for a
+ * quote from a `quoteRequest` storefront section; the operator reads it in the
+ * back office and turns it into a Presupuesto.
+ *
+ * Web (public, bound origin only): `POST /quote-requests`.
+ * App (ADMIN, SUPERVISOR, MANAGER): `GET /quote-requests` (list and read) and
+ * `POST /quote-requests { mode: 'status' }`. A Presupuesto created with
+ * `quoteRequestId` links the request (`POST /presupuestos`).
+ */
+/**
+ * The refusals of the quote-request routes.
+ *
+ * - INVALID_QUOTE_REQUEST (400): a body over 8 KiB, malformed or off-schema; a guest
+ *   without `contact`; `items` when no placed `quoteRequest` section allows them
+ *   (`fieldErrors` names `items`); a guest `contact.phone` / `company` / `cuit` no
+ *   placed section lists in `fields` (names `contact.<field>` — refused, never
+ *   dropped); or an `items[i]` naming a product that does not exist or is not
+ *   offered on the storefront (names `items.<i>.productId`).
+ * - CAPTCHA_INVALID (403): the `x-captcha-token` header is missing, invalid or
+ *   scored too low. One body whatever the reason.
+ * - ORIGIN_STORE_MISMATCH (403): the request's Origin is not bound to a shop, or
+ *   is bound to another shop than the one it names. Nothing is stored.
+ * - QUOTE_REQUESTS_DISABLED (403): the shop's live publication has no enabled
+ *   `quoteRequest` section on an enabled page — it never placed the form, or
+ *   unpublished it. Nothing is stored.
+ * - QUOTE_REQUEST_LIMIT (429): the shop's daily cap for guests, or the hourly
+ *   cool-down of the guest's address or the signed-in buyer's account, is spent.
+ *   Nothing is stored.
+ * - QUOTE_REQUEST_NOT_FOUND (404): app routes, an unknown `quoteRequestId`.
+ * - QUOTE_REQUEST_ALREADY_LINKED (409): `POST /presupuestos` naming a request
+ *   another Presupuesto already converted. No Presupuesto is written. Also the
+ *   app `POST /quote-requests { mode: 'status' }` on a converted request: its
+ *   status belongs to the Presupuesto that converted it and no longer changes.
+ */
+export declare const QUOTE_REQUEST_ERROR_CODES: readonly ["INVALID_QUOTE_REQUEST", "CAPTCHA_INVALID", "ORIGIN_STORE_MISMATCH", "QUOTE_REQUESTS_DISABLED", "QUOTE_REQUEST_LIMIT", "QUOTE_REQUEST_NOT_FOUND", "QUOTE_REQUEST_ALREADY_LINKED"];
+export declare const QUOTE_REQUEST_STATUSES: readonly ["new", "in-progress", "converted", "dismissed"];
+/** The optional contact fields a `quoteRequest` section may ask for. */
+export declare const QUOTE_REQUEST_OPTIONAL_FIELDS: readonly ["phone", "company", "cuit"];
+/** Bounds of the web write. */
+export declare const QUOTE_REQUEST_LIMITS: {
+    readonly message: 2000;
+    readonly items: 50;
+    /** The shared base-quantity ceiling (`baseQuantitySchema`), six decimal places. */
+    readonly itemQuantity: 1000000;
+    readonly name: 120;
+    readonly company: 120;
+    readonly email: 254;
+    readonly phone: 40;
+};
+/** The reCAPTCHA action the storefront executes for the web write. */
+export declare const QUOTE_REQUEST_RECAPTCHA_ACTION = "quote_request";
+declare global {
+    type QuoteRequestErrorCode = (typeof QUOTE_REQUEST_ERROR_CODES)[number];
+    type QuoteRequestStatus = (typeof QUOTE_REQUEST_STATUSES)[number];
+    type QuoteRequestOptionalField = (typeof QUOTE_REQUEST_OPTIONAL_FIELDS)[number];
+    interface QuoteRequestContact {
+        name: string;
+        email: string;
+        phone?: string;
+        company?: string;
+        /** Digits only, 11 when present. */
+        cuit?: string;
+    }
+    interface QuoteRequestItem {
+        productId: string;
+        quantity: number;
+        /** The product's name when the request was sent — never a price. */
+        name: string;
+    }
+    /**
+     * Web `POST /quote-requests` body. The tenant is the request's bound Origin,
+     * never `x-store`; the reCAPTCHA token rides the `x-captcha-token` header.
+     *
+     * - `contact` is REQUIRED for a guest and IGNORED for a signed-in buyer, whose
+     *   contact is copied from their account. A guest's `phone`, `company` and `cuit`
+     *   are accepted only when a placed section lists them in `fields`.
+     * - `items` is accepted only when a placed section sets `allowItems`.
+     * - `website` is a honeypot the storefront renders hidden and leaves empty: when
+     *   filled, the request answers 201 with a `quoteRequestId` and stores nothing.
+     */
+    interface QuoteRequestCreateInput {
+        contact?: QuoteRequestContact;
+        message: string;
+        items?: {
+            productId: string;
+            quantity: number;
+        }[];
+        website?: string;
+    }
+    /** Web `POST /quote-requests` 201 `data`. */
+    interface QuoteRequestCreateResult {
+        quoteRequestId: string;
+    }
+    /** The stored request, as the app routes answer it. */
+    interface QuoteRequest {
+        quoteRequestId: string;
+        status: QuoteRequestStatus;
+        /** Set only for a signed-in buyer, from the bearer. */
+        customerId?: string;
+        contact: QuoteRequestContact;
+        message: string;
+        items?: QuoteRequestItem[];
+        /** The Presupuesto that converted this request. */
+        linkedPresupuestoId?: string;
+        createdAt: number;
+        updatedAt: number;
+    }
+    /** App `POST /quote-requests { mode: 'status' }` body. `converted` is set only by a Presupuesto create. */
+    interface QuoteRequestStatusInput {
+        mode: 'status';
+        quoteRequestId: string;
+        status: Exclude<QuoteRequestStatus, 'converted'>;
+    }
+    /** What a `STOREFRONT_QUOTE_REQUEST` operator bell points at. */
+    interface QuoteRequestRef {
+        quoteRequestId: string;
+    }
+}
+export {};

package/dist/quoteRequest.js

@@ -0,0 +1,60 @@
+/**
+ * Storefront quote requests — a shopper (guest or signed-in) asks the shop for a
+ * quote from a `quoteRequest` storefront section; the operator reads it in the
+ * back office and turns it into a Presupuesto.
+ *
+ * Web (public, bound origin only): `POST /quote-requests`.
+ * App (ADMIN, SUPERVISOR, MANAGER): `GET /quote-requests` (list and read) and
+ * `POST /quote-requests { mode: 'status' }`. A Presupuesto created with
+ * `quoteRequestId` links the request (`POST /presupuestos`).
+ */
+/**
+ * The refusals of the quote-request routes.
+ *
+ * - INVALID_QUOTE_REQUEST (400): a body over 8 KiB, malformed or off-schema; a guest
+ *   without `contact`; `items` when no placed `quoteRequest` section allows them
+ *   (`fieldErrors` names `items`); a guest `contact.phone` / `company` / `cuit` no
+ *   placed section lists in `fields` (names `contact.<field>` — refused, never
+ *   dropped); or an `items[i]` naming a product that does not exist or is not
+ *   offered on the storefront (names `items.<i>.productId`).
+ * - CAPTCHA_INVALID (403): the `x-captcha-token` header is missing, invalid or
+ *   scored too low. One body whatever the reason.
+ * - ORIGIN_STORE_MISMATCH (403): the request's Origin is not bound to a shop, or
+ *   is bound to another shop than the one it names. Nothing is stored.
+ * - QUOTE_REQUESTS_DISABLED (403): the shop's live publication has no enabled
+ *   `quoteRequest` section on an enabled page — it never placed the form, or
+ *   unpublished it. Nothing is stored.
+ * - QUOTE_REQUEST_LIMIT (429): the shop's daily cap for guests, or the hourly
+ *   cool-down of the guest's address or the signed-in buyer's account, is spent.
+ *   Nothing is stored.
+ * - QUOTE_REQUEST_NOT_FOUND (404): app routes, an unknown `quoteRequestId`.
+ * - QUOTE_REQUEST_ALREADY_LINKED (409): `POST /presupuestos` naming a request
+ *   another Presupuesto already converted. No Presupuesto is written. Also the
+ *   app `POST /quote-requests { mode: 'status' }` on a converted request: its
+ *   status belongs to the Presupuesto that converted it and no longer changes.
+ */
+export const QUOTE_REQUEST_ERROR_CODES = [
+    'INVALID_QUOTE_REQUEST',
+    'CAPTCHA_INVALID',
+    'ORIGIN_STORE_MISMATCH',
+    'QUOTE_REQUESTS_DISABLED',
+    'QUOTE_REQUEST_LIMIT',
+    'QUOTE_REQUEST_NOT_FOUND',
+    'QUOTE_REQUEST_ALREADY_LINKED',
+];
+export const QUOTE_REQUEST_STATUSES = ['new', 'in-progress', 'converted', 'dismissed'];
+/** The optional contact fields a `quoteRequest` section may ask for. */
+export const QUOTE_REQUEST_OPTIONAL_FIELDS = ['phone', 'company', 'cuit'];
+/** Bounds of the web write. */
+export const QUOTE_REQUEST_LIMITS = {
+    message: 2000,
+    items: 50,
+    /** The shared base-quantity ceiling (`baseQuantitySchema`), six decimal places. */
+    itemQuantity: 1_000_000,
+    name: 120,
+    company: 120,
+    email: 254,
+    phone: 40,
+};
+/** The reCAPTCHA action the storefront executes for the web write. */
+export const QUOTE_REQUEST_RECAPTCHA_ACTION = 'quote_request';

package/dist/storefrontDesign.d.ts

@@ -72,7 +72,7 @@ export declare const STOREFRONT_DESIGN_LIMITS: {
  */
 export declare const STOREFRONT_PAGE_SLUG_RE: RegExp;
 export declare const isStorefrontPageSlug: (value: unknown) => value is string;
-export declare const STOREFRONT_SECTION_TYPES: readonly ["banner", "imageText", "products", "categories", "brands", "text", "faq", "benefits", "contact", "paymentDelivery", "logoWall", "gallery"];
+export declare const STOREFRONT_SECTION_TYPES: readonly ["banner", "imageText", "products", "categories", "brands", "text", "faq", "benefits", "contact", "paymentDelivery", "logoWall", "gallery", "quoteRequest", "customerRequest"];
 /**
  * The section types a page may repeat, each up to `STOREFRONT_DESIGN_LIMITS.repeatableSectionsPerType`
  * times (disabled sections count), so a Home can show offers and new arrivals together. Every other
@@ -259,6 +259,29 @@ declare global {
                 caption?: string;
             }[];
         };
+        /**
+         * «Pedí un presupuesto»: the storefront form behind web `POST /quote-requests`. `fields` lists
+         * the optional contact fields it asks for, each at most once; `allowItems` lets the shopper
+         * list products and quantities. Nothing is required to publish. Once per page.
+         * The server enforces the placed sections: with no enabled `quoteRequest` section on
+         * an enabled published page the write is `403 QUOTE_REQUESTS_DISABLED`; a guest field
+         * no placed section lists, or `items` when none sets `allowItems`, is `400`.
+         */
+        quoteRequest: {
+            heading?: string;
+            body?: string;
+            fields?: QuoteRequestOptionalField[];
+            allowItems?: boolean;
+        };
+        /**
+         * «Quiero ser cliente mayorista»: a placement of the wholesale request (`POST /user`
+         * `{ mode: 'wholesale-request' }`), never a second intake. Copy only: what it renders is fixed
+         * by the shopper's and the shop's state, never by content. Once per page.
+         */
+        customerRequest: {
+            heading?: string;
+            body?: string;
+        };
     }
     type StorefrontDesignAudience = (typeof STOREFRONT_DESIGN_AUDIENCES)[number];
     /**

package/dist/storefrontDesign.js

@@ -83,6 +83,8 @@ export const STOREFRONT_SECTION_TYPES = [
     'paymentDelivery',
     'logoWall',
     'gallery',
+    'quoteRequest',
+    'customerRequest',
 ];
 /**
  * The section types a page may repeat, each up to `STOREFRONT_DESIGN_LIMITS.repeatableSectionsPerType`

package/dist/storefrontEvent.d.ts

@@ -10,6 +10,13 @@ declare global {
         screen_type: 'desktop' | 'mobile';
         app_version: number;
         ts: string;
+        /**
+         * Server-stamped on a stored guest event (the unauthenticated `POST /events`
+         * ingest) from the request's analytics-consent block, so a later policy change
+         * can scope erasure. Never read from a client event: the validators drop it.
+         * Distinct from the signup contract's `consentVersion`.
+         */
+        analyticsConsentVersion?: string;
     }
     interface ProductViewedEvent extends StorefrontEventBase {
         event: 'Product Viewed';

package/dist/storefrontIngest.d.ts

@@ -0,0 +1,93 @@
+/**
+ * Guest storefront telemetry ingest — the HTTP route a shopper who never signs
+ * in sends first-party storefront events through (the signed-in shopper keeps
+ * the WebSocket `logs` action).
+ *
+ * Web (public, bound origin only): `POST /events` (a batch) and
+ * `POST /events/consent` (an analytics-consent withdrawal for one journey).
+ *
+ * The tenant is the request's bound Origin (a slug host or a verified custom
+ * domain), never `x-store` and never an event's `tenant_store_id`. Nothing a
+ * guest sends can claim to be a customer: `customer_id` is not part of a guest
+ * event, and one that carries it is dropped and counted.
+ */
+/**
+ * The refusals of the guest ingest routes.
+ *
+ * - EVENTS_TENANT_UNRESOLVED (403): the request's Origin is bound to no shop.
+ *   Checked before the body is read; nothing is stored.
+ * - EVENTS_BATCH_TOO_LARGE (413): the raw body is over
+ *   {@link STOREFRONT_INGEST_LIMITS.maxBodyBytes} bytes, or `events` holds more
+ *   than {@link STOREFRONT_INGEST_LIMITS.maxEvents} entries. Nothing is stored.
+ * - VALIDATION_FAILED (400): the request as a WHOLE is malformed — not JSON, not
+ *   the envelope shape, or (withdrawal) `anonymousId` not a UUID. A single event
+ *   that does not validate is never a 400: it is a counted drop in `dropped`.
+ * - EVENTS_RATE_LIMITED (429): the source's budget is spent. Nothing is stored;
+ *   retry later.
+ */
+export declare const STOREFRONT_INGEST_ERROR_CODES: readonly ["EVENTS_TENANT_UNRESOLVED", "EVENTS_BATCH_TOO_LARGE", "VALIDATION_FAILED", "EVENTS_RATE_LIMITED"];
+/** Bounds of `POST /events`, enforced before any event is read. */
+export declare const STOREFRONT_INGEST_LIMITS: {
+    /** The raw request body ceiling, in UTF-8 bytes, measured before parsing. */
+    readonly maxBodyBytes: number;
+    /** At most this many events per request. */
+    readonly maxEvents: 25;
+    /** The longest `analyticsConsent.version` accepted; a longer one never stores an event. */
+    readonly consentVersionMaxLength: 64;
+};
+declare global {
+    type StorefrontIngestErrorCode = (typeof STOREFRONT_INGEST_ERROR_CODES)[number];
+    /** The storefront event variants a guest may send. Any other variant is a counted drop. */
+    type GuestStorefrontEventName = 'Product Viewed' | 'Product List Viewed' | 'Cart Item Added' | 'Cart Item Removed' | 'Cart Viewed' | 'Search Submitted' | 'Checkout Started' | 'Checkout Step Completed';
+    /**
+     * A guest event: an allowed variant of `StorefrontEvent` with no
+     * `customer_id` (and no server-stamped field). Distributive, so each variant
+     * keeps its own discriminated shape.
+     */
+    type GuestStorefrontEvent = Extract<StorefrontEvent, {
+        event: GuestStorefrontEventName;
+    }> extends infer Variant ? Variant extends unknown ? Omit<Variant, 'customer_id' | 'audit' | 'analyticsConsentVersion'> : never : never;
+    /**
+     * The analytics-consent state the storefront holds for this shopper, separate
+     * from advertising consent. `version` names the consent text the shopper saw;
+     * a persisted event records it as `analyticsConsentVersion`.
+     */
+    interface StorefrontAnalyticsConsent {
+        analytics: 'granted' | 'denied';
+        version: string;
+    }
+    /**
+     * Web `POST /events` body. At most 25 events and 32 KiB. With
+     * `analytics: 'denied'` no per-journey event is stored — only an aggregate
+     * count with no `anonymous_id`. Under the platform's opt-in mode (the
+     * default) only `'granted'` stores events, so an absent block stores none;
+     * under opt-out everything but `'denied'` stores, an absent block included.
+     */
+    interface StorefrontEventIngestRequest {
+        events: GuestStorefrontEvent[];
+        analyticsConsent?: StorefrontAnalyticsConsent;
+    }
+    /**
+     * Web `POST /events` 202 `data`: counts only, never an echo of the batch.
+     * `accepted` events were stored (or were already stored under the same
+     * `event_id`); `dropped` ones were refused one by one — invalid, a
+     * customer-only variant, carrying `customer_id`, another tenant, outside the
+     * time window, fenced, not consented, or over a budget.
+     */
+    interface StorefrontEventIngestResponse {
+        accepted: number;
+        dropped: number;
+    }
+    /**
+     * Web `POST /events/consent` body: withdraw analytics consent for one
+     * journey. Every later event of that `anonymousId` is refused, however late
+     * it arrives. Nothing is erased: its earlier events expire by retention
+     * (30-day hot rows, the 390-day `guest/` archive). Answers 202 with no data.
+     */
+    interface StorefrontConsentWithdrawalRequest {
+        /** The journey's `anonymous_id` (a UUID). */
+        anonymousId: string;
+        analytics: 'denied';
+    }
+}
+export {};

package/dist/storefrontIngest.js

@@ -0,0 +1,42 @@
+/**
+ * Guest storefront telemetry ingest — the HTTP route a shopper who never signs
+ * in sends first-party storefront events through (the signed-in shopper keeps
+ * the WebSocket `logs` action).
+ *
+ * Web (public, bound origin only): `POST /events` (a batch) and
+ * `POST /events/consent` (an analytics-consent withdrawal for one journey).
+ *
+ * The tenant is the request's bound Origin (a slug host or a verified custom
+ * domain), never `x-store` and never an event's `tenant_store_id`. Nothing a
+ * guest sends can claim to be a customer: `customer_id` is not part of a guest
+ * event, and one that carries it is dropped and counted.
+ */
+/**
+ * The refusals of the guest ingest routes.
+ *
+ * - EVENTS_TENANT_UNRESOLVED (403): the request's Origin is bound to no shop.
+ *   Checked before the body is read; nothing is stored.
+ * - EVENTS_BATCH_TOO_LARGE (413): the raw body is over
+ *   {@link STOREFRONT_INGEST_LIMITS.maxBodyBytes} bytes, or `events` holds more
+ *   than {@link STOREFRONT_INGEST_LIMITS.maxEvents} entries. Nothing is stored.
+ * - VALIDATION_FAILED (400): the request as a WHOLE is malformed — not JSON, not
+ *   the envelope shape, or (withdrawal) `anonymousId` not a UUID. A single event
+ *   that does not validate is never a 400: it is a counted drop in `dropped`.
+ * - EVENTS_RATE_LIMITED (429): the source's budget is spent. Nothing is stored;
+ *   retry later.
+ */
+export const STOREFRONT_INGEST_ERROR_CODES = [
+    'EVENTS_TENANT_UNRESOLVED',
+    'EVENTS_BATCH_TOO_LARGE',
+    'VALIDATION_FAILED',
+    'EVENTS_RATE_LIMITED',
+];
+/** Bounds of `POST /events`, enforced before any event is read. */
+export const STOREFRONT_INGEST_LIMITS = {
+    /** The raw request body ceiling, in UTF-8 bytes, measured before parsing. */
+    maxBodyBytes: 32 * 1024,
+    /** At most this many events per request. */
+    maxEvents: 25,
+    /** The longest `analyticsConsent.version` accepted; a longer one never stores an event. */
+    consentVersionMaxLength: 64,
+};

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "platform-types",
-	"version": "1.10.793",
+	"version": "1.10.795",
 	"description": "Shared wire and entity contracts for the platform.",
 	"type": "module",
 	"main": "dist/index.js",