platform-types 1.10.851 → 1.10.853

package/dist/cjs/customerAddress.js

@@ -15,7 +15,11 @@
 //
 // Every existing reader of those fields keeps working unchanged. Forward-only:
 // a customer written before the address book has no address rows; the first
-// edit of their address (through `/customers/addresses`, `POST /customers`, the
-// storefront profile, or an order's `saveAsDefault`) creates the row and points
-// the default at it. Nothing sweeps.
+// edit of their address (through `/customers/addresses`, the web `/addresses`,
+// `POST /customers`, the storefront profile, or an order's `saveAsDefault`)
+// creates the row and points the default at it. Nothing sweeps.
+//
+// Two surfaces: staff `/customers/addresses` (both kinds, uncapped) and the
+// shopper's own web `/addresses` (the `delivery` kind only, at most
+// `SHOPPER_DELIVERY_ADDRESS_CAP` = 20, plus an order's `saveAddress`).
 Object.defineProperty(exports, "__esModule", { value: true });

package/dist/cjs/index.js

@@ -103,6 +103,7 @@ __exportStar(require("./rma.js"), exports);
 __exportStar(require("./roles.js"), exports);
 __exportStar(require("./sentry.js"), exports);
 __exportStar(require("./serviceOrder.js"), exports);
+__exportStar(require("./serviceTracking.js"), exports);
 __exportStar(require("./serviceTemplate.js"), exports);
 __exportStar(require("./socket.js"), exports);
 __exportStar(require("./stock.js"), exports);

package/dist/cjs/serviceOrder.js

@@ -301,6 +301,11 @@ exports.SERVICE_ORDER_ERROR_CODES = [
     'WARRANTY_BELOW_LEGAL_MINIMUM',
     'TECHNICIAN_NOT_FOUND',
     'TECHNICIAN_NOT_ELIGIBLE',
+    // The customer tracking link (`mode: 'trackingLink'`) — see `SERVICE_TRACKING_OPERATOR_ERROR_CODES`
+    'SERVICE_TRACKING_DISABLED',
+    'SERVICE_TRACKING_NO_ADDRESS',
+    'SERVICE_TRACKING_LINK_LAPSED',
+    'ADMIN_REQUIRED',
     'CUSTODY_ILLEGAL_TRANSITION',
     'SERVICE_ORDER_BILLABLE_FROZEN',
     'SERVICE_ORDER_EDIT_CHANGED',

package/dist/cjs/serviceTracking.js

@@ -0,0 +1,64 @@
+"use strict";
+/**
+ * Customer service-order tracking — the page a customer opens from a link a
+ * shop sends (`/servicio/{handle}`), and the same view for a signed-in customer
+ * on their account.
+ *
+ * The HANDLE is 16 base62 characters (~95 bits), stored server-side and a
+ * bearer credential over exactly ONE service order of one store. It authorises
+ * the read (`GET /services/tracking?handle=`) and the current presupuesto PDF
+ * (`GET /services/tracking?handle=&mode=quote-pdf`), and nothing else. Every
+ * earlier link of an order dies when staff revoke it. A link stops reading
+ * `serviceTrackingLinkDaysAfterClose` days (platform global, default 90) after
+ * the order reached a terminal status.
+ *
+ * The gate is `ecommerce.config.serviceTracking` AND the `workshop` module on.
+ * With the gate off, staff cannot mint and the signed-in reads refuse, but a
+ * link minted earlier keeps reading (STORE_MODULES rule 4).
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.SERVICE_TRACKING_HANDLE_RE = exports.SERVICE_TRACKING_PATH_PREFIX = exports.SERVICE_TRACKING_LINK_ACTIONS = exports.SERVICE_TRACKING_OPERATOR_ERROR_CODES = exports.SERVICE_TRACKING_ACCOUNT_ERROR_CODES = exports.SERVICE_TRACKING_ERROR_CODES = void 0;
+/**
+ * The refusals the PUBLIC tracking routes answer themselves.
+ *
+ * - SERVICE_TRACKING_TOKEN_INVALID (401): every reason a handle cannot be
+ *   honoured — missing, malformed, unknown, revoked, past the lifetime,
+ *   presented on another store's host or with no store host at all, or naming
+ *   an order that is gone or disabled — with one identical body, so a handle is
+ *   never an oracle.
+ * - SERVICE_QUOTE_NOT_FOUND (404, `mode=quote-pdf` only): the order has no
+ *   current presupuesto a customer was sent.
+ */
+exports.SERVICE_TRACKING_ERROR_CODES = ['SERVICE_TRACKING_TOKEN_INVALID', 'SERVICE_QUOTE_NOT_FOUND'];
+/**
+ * The refusals of the signed-in reads (`GET /user?mode=service-orders` and
+ * `?mode=service-order&serviceOrderId=`).
+ *
+ * - SERVICE_TRACKING_DISABLED (403): the store's gate is off.
+ * - SERVICE_ORDER_NOT_FOUND (404): no such order, a disabled one, or one that
+ *   belongs to another customer — one answer for all three.
+ */
+exports.SERVICE_TRACKING_ACCOUNT_ERROR_CODES = ['SERVICE_TRACKING_DISABLED', 'SERVICE_ORDER_NOT_FOUND'];
+/**
+ * The refusals of the staff `POST /services { mode: 'trackingLink' }`, beside
+ * the router's own (`ROLE_FORBIDDEN`, `VALIDATION_FAILED`, `SERVICE_ORDER_NOT_FOUND`).
+ *
+ * - SERVICE_TRACKING_DISABLED (403, mint only): the store's gate is off.
+ * - SERVICE_TRACKING_NO_ADDRESS (409, mint only): the store has no public
+ *   storefront address to build the link on (no slug, or public links off).
+ * - SERVICE_TRACKING_LINK_LAPSED (409, mint only): the order closed more than
+ *   `serviceTrackingLinkDaysAfterClose` days ago, so a link would not read.
+ * - ADMIN_REQUIRED (403, revoke only): revoking takes ADMIN, SUPERVISOR or MANAGER.
+ */
+exports.SERVICE_TRACKING_OPERATOR_ERROR_CODES = [
+    'SERVICE_TRACKING_DISABLED',
+    'SERVICE_TRACKING_NO_ADDRESS',
+    'SERVICE_TRACKING_LINK_LAPSED',
+    'ADMIN_REQUIRED',
+];
+/** `POST /services { mode: 'trackingLink' }` actions. */
+exports.SERVICE_TRACKING_LINK_ACTIONS = ['mint', 'revoke'];
+/** The storefront path a tracking link opens: `/servicio/{handle}`. */
+exports.SERVICE_TRACKING_PATH_PREFIX = '/servicio/';
+/** The handle's exact shape: 16 base62 characters. */
+exports.SERVICE_TRACKING_HANDLE_RE = /^[0-9A-Za-z]{16}$/;

package/dist/customerAddress.d.ts

@@ -30,7 +30,8 @@ declare global {
     }
     /**
      * `GET /customers/addresses?customerId=` — one page, ascending by
-     * `addressId` (oldest first).
+     * `addressId` (oldest first). Also web `GET /addresses`, where it holds the
+     * caller's own `delivery` addresses only.
      */
     interface CustomerAddressPage {
         items: CustomerAddress[];
@@ -41,8 +42,10 @@ declare global {
     }
     /**
      * `data` of the `customerAddress` socket frame. OPERATOR audience only — the
-     * customer's own socket is NOT addressed (staff only, for now: no storefront
-     * address-book surface consumes it).
+     * customer's own socket is NOT addressed, also when the customer made the
+     * change through web `/addresses` (the storefront reads its own write from
+     * the REST answer). A shopper's write sends exactly the frame a staff write
+     * does.
      *
      * `address` is the whole row on the admin tier for `created` / `updated`.
      * It is absent on a `deleted` change, and on the rare `updated` frame of a
@@ -97,9 +100,48 @@ declare global {
         updatedAt: number;
     }
     /**
-     * Every DOMAIN refusal on `/customers/addresses`, one bare code each (the
-     * generic `VALIDATION_FAILED`, `CAPABILITY_REQUIRED` and `INVALID_CURSOR`
-     * are not listed). None of them writes.
+     * Web `POST /addresses` body — the shopper's own new `delivery` address.
+     * There is no `kind` (a sent one is ignored: the shopper surface books
+     * `delivery` only) and no `customerId` (the session names the customer).
+     * `address` is required; every text field is trimmed and at most 200
+     * characters.
+     */
+    interface ShopperAddressCreateRequest {
+        label?: string;
+        fullName?: string;
+        phone?: string;
+        address: string;
+        city?: string;
+        province?: string;
+        postalCode?: string;
+        /** Make it the delivery default — `Customer.deliveryAddress` follows in the same write. */
+        makeDefault?: boolean;
+    }
+    /**
+     * Web `PUT /addresses` body: the address to edit plus ONLY the fields that
+     * changed (the storefront sends a dirty-field diff), and/or `makeDefault:
+     * true`. At least one of the two. A billing `addressId`, or another
+     * customer's, is `404 CUSTOMER_ADDRESS_NOT_FOUND`.
+     */
+    interface ShopperAddressUpdateRequest extends Partial<Omit<ShopperAddressCreateRequest, 'makeDefault'>> {
+        addressId: string;
+        /** A default is replaced, never cleared, so only `true` is accepted. */
+        makeDefault?: true;
+    }
+    /**
+     * Web `POST` / `PUT /addresses` → `{ data, defaultAddressId }`: the address
+     * as written, and the delivery default AFTER the write — a create that
+     * adopted the customer's legacy `deliveryAddress` leaves THAT one the
+     * default. Absent when the customer has no delivery default.
+     */
+    interface ShopperAddressWriteResult {
+        data: CustomerAddress;
+        defaultAddressId?: string;
+    }
+    /**
+     * Every DOMAIN refusal on `/customers/addresses` and the web `/addresses`,
+     * one bare code each (the generic `VALIDATION_FAILED`, `CAPABILITY_REQUIRED`
+     * and `INVALID_CURSOR` are not listed). None of them writes.
      *
      * - `CUSTOMER_ADDRESS_CUSTOMER_NOT_FOUND` (404) — not a customer of the
      *   caller's store; covers «no such id», so the route is no cross-tenant
@@ -108,13 +150,20 @@ declare global {
      *   art. 16; enforced atomically with the write.
      * - `CUSTOMER_ADDRESS_CUSTOMER_MERGED` (409) — folded into another customer
      *   (`mergedInto`); write on the survivor.
-     * - `CUSTOMER_ADDRESS_NOT_FOUND` (404) — no such address for that customer.
+     * - `CUSTOMER_ADDRESS_NOT_FOUND` (404) — no such address for that customer;
+     *   on the web `/addresses`, also a `billing` address.
      * - `CUSTOMER_ADDRESS_IS_DEFAULT` (409) — the address is its kind's default;
      *   make another address the default first. The default is what
      *   `Customer.address` / `deliveryAddress` mirror, so it is never deleted
-     *   out from under them.
+     *   out from under them. One exception, web `/addresses` only: the
+     *   shopper's ONLY delivery address may be deleted, which unmarks the
+     *   default and removes `Customer.deliveryAddress` in the same write.
+     * - `CUSTOMER_ADDRESS_LIMIT_REACHED` (409) — web `/addresses` only: the
+     *   shopper already holds 20 delivery addresses (a book too large to count
+     *   counts as full). Delete one first. Staff routes are uncapped.
      * - `CUSTOMER_ADDRESS_WRITE_CONTENDED` (503) — the customer's default or the
-     *   address changed under every bounded retry; retry is safe. ALSO answered
+     *   address changed under every bounded retry, on either surface; retry is
+     *   safe. ALSO answered
      *   by `POST /customers` and the storefront `POST /user` when an edit of
      *   the address loses to a rival that moved the default or its copy — those
      *   refuse on the FIRST failure, with no retry of their own. The storefront
@@ -126,6 +175,6 @@ declare global {
      * `409 CUSTOMER_ANONYMIZED` (see `Customer.anonymizedAt`) and `409
      * CUSTOMER_MERGE_IN_PROGRESS` (merged or mid-merge after their read).
      */
-    type CustomerAddressErrorCode = 'CUSTOMER_ADDRESS_CUSTOMER_NOT_FOUND' | 'CUSTOMER_ADDRESS_CUSTOMER_ANONYMIZED' | 'CUSTOMER_ADDRESS_CUSTOMER_MERGED' | 'CUSTOMER_ADDRESS_NOT_FOUND' | 'CUSTOMER_ADDRESS_IS_DEFAULT' | 'CUSTOMER_ADDRESS_WRITE_CONTENDED';
+    type CustomerAddressErrorCode = 'CUSTOMER_ADDRESS_CUSTOMER_NOT_FOUND' | 'CUSTOMER_ADDRESS_CUSTOMER_ANONYMIZED' | 'CUSTOMER_ADDRESS_CUSTOMER_MERGED' | 'CUSTOMER_ADDRESS_NOT_FOUND' | 'CUSTOMER_ADDRESS_IS_DEFAULT' | 'CUSTOMER_ADDRESS_LIMIT_REACHED' | 'CUSTOMER_ADDRESS_WRITE_CONTENDED';
 }
 export {};

package/dist/customerAddress.js

@@ -14,7 +14,11 @@
 //
 // Every existing reader of those fields keeps working unchanged. Forward-only:
 // a customer written before the address book has no address rows; the first
-// edit of their address (through `/customers/addresses`, `POST /customers`, the
-// storefront profile, or an order's `saveAsDefault`) creates the row and points
-// the default at it. Nothing sweeps.
+// edit of their address (through `/customers/addresses`, the web `/addresses`,
+// `POST /customers`, the storefront profile, or an order's `saveAsDefault`)
+// creates the row and points the default at it. Nothing sweeps.
+//
+// Two surfaces: staff `/customers/addresses` (both kinds, uncapped) and the
+// shopper's own web `/addresses` (the `delivery` kind only, at most
+// `SHOPPER_DELIVERY_ADDRESS_CAP` = 20, plus an order's `saveAddress`).
 export {};

package/dist/index.d.ts

@@ -79,6 +79,7 @@ export * from './rma.ts';
 export * from './roles.ts';
 export * from './sentry.ts';
 export * from './serviceOrder.ts';
+export * from './serviceTracking.ts';
 export * from './serviceTemplate.ts';
 export * from './socket.ts';
 export * from './stock.ts';

package/dist/index.js

@@ -87,6 +87,7 @@ export * from "./rma.js";
 export * from "./roles.js";
 export * from "./sentry.js";
 export * from "./serviceOrder.js";
+export * from "./serviceTracking.js";
 export * from "./serviceTemplate.js";
 export * from "./socket.js";
 export * from "./stock.js";

package/dist/order.d.ts

@@ -2524,8 +2524,33 @@ declare global {
             province?: string;
             postalCode?: string;
         };
-        /** Persist `deliveryAddress` as the customer's default. Directive only, never stored. */
+        /**
+         * Persist `deliveryAddress` as the customer's default, OVERWRITING the
+         * current delivery default's text in place (creating one only when there
+         * is none). Directive only, never stored.
+         *
+         * DEPRECATED — use {@link saveAddress}, which appends a new address to
+         * the customer's book instead of overwriting the default. `saveAsDefault`
+         * keeps working, and retires one release after `saveAddress` is live.
+         * `saveAsDefault: true` together with `saveAddress` is `400
+         * VALIDATION_FAILED`; `false` asks for nothing and is accepted beside it.
+         */
         saveAsDefault?: boolean;
+        /**
+         * Save `deliveryAddress` as a NEW delivery address in the customer's
+         * book (web `/addresses`), AFTER the order commits — best effort: it
+         * never refuses or fails the order. `makeDefault: true` also makes it the
+         * delivery default (and `Customer.deliveryAddress`); otherwise the
+         * current default, text included, is left as it was. Ignored without
+         * `deliveryAddress`, or when that address carries no `address` line or a
+         * field over 200 characters; skipped (and logged) when the customer
+         * already holds 20 delivery addresses. Directive only, never stored.
+         * Sending it together with `saveAsDefault: true` is `400
+         * VALIDATION_FAILED`; an unknown inner key is stripped.
+         */
+        saveAddress?: {
+            makeDefault?: boolean;
+        };
         /**
          * The `cartId` of the cart the shopper confirmed (`CART` + 6-10 digits).
          * Omit it ONLY when that cart had none (a legacy cart). ⚠️ Compared
@@ -2560,11 +2585,12 @@ declare global {
     /**
      * Web `POST /orders/guest` body: a guest places an order from the server
      * guest cart its `X-Guest-Cart-Token` names. `StorefrontOrderCreateRequest`
-     * without `saveAsDefault` (a guest has no defaults), plus the guest's
+     * without `saveAsDefault` / `saveAddress` (a guest has no defaults and no
+     * address book), plus the guest's
      * `contact`, and with the cart pin REQUIRED: the guest cart always has an
      * id and a version.
      */
-    interface StorefrontGuestOrderCreateRequest extends Omit<StorefrontOrderCreateRequest, 'saveAsDefault' | 'expectedCartId' | 'expectedCartVersion'> {
+    interface StorefrontGuestOrderCreateRequest extends Omit<StorefrontOrderCreateRequest, 'saveAsDefault' | 'saveAddress' | 'expectedCartId' | 'expectedCartVersion'> {
         contact: GuestContact;
         expectedCartId: string;
         expectedCartVersion: number;

package/dist/serviceOrder.d.ts

@@ -1131,6 +1131,16 @@ declare global {
          * CURRENT `printJobId`.
          */
         printedAt?: number;
+        /**
+         * The customer tracking link (`/servicio/{handle}`), as staff see it.
+         * Server-written only, by `POST /services { mode: 'trackingLink' }`:
+         * `mintedAt` when a link is minted (a mint that finds a live link writes
+         * nothing), `revokedAt` when every earlier link is revoked; a mint after a
+         * revoke stamps a new `mintedAt` and removes `revokedAt`. Absent on an order
+         * that never had a link. The handle and its fence generation are never on
+         * this row and never reach staff after the mint answer.
+         */
+        trackingLink?: ServiceTrackingLinkState;
         disabled: boolean;
     }
     /**
@@ -1521,6 +1531,6 @@ export declare const MAX_SERVICE_PICTURES = 20;
  * check `GATING_ERROR_CODES` in addition. The deposit's opt-in idempotency
  * refusals are included here.
  */
-export declare const SERVICE_ORDER_ERROR_CODES: readonly ["UNIT_QUANTITY_NOT_WHOLE", "UNIT_REVISION_STALE", "ROLE_FORBIDDEN", "PARENT_FILTER_CONFLICT", "VALIDATION_FAILED", "INVALID_CURSOR", "INVALID_FROM_DATE", "INVALID_TO_DATE", "INVALID_DATE_RANGE", "REWORK_INDEX_UNAVAILABLE", "STORE_NOT_FOUND", "SERVICE_ORDER_NOT_FOUND", "PRINT_JOB_DOCUMENT_NOT_FOUND", "CUSTOMER_NOT_FOUND", "PARENT_SERVICE_ORDER_NOT_FOUND", "SERVICE_TEMPLATE_NOT_FOUND", "SERVICE_TYPE_REQUIRED", "INVALID_IMAGE_REFERENCE", "MISSING_STORE_CONTEXT", "WARRANTY_BELOW_LEGAL_MINIMUM", "TECHNICIAN_NOT_FOUND", "TECHNICIAN_NOT_ELIGIBLE", "CUSTODY_ILLEGAL_TRANSITION", "SERVICE_ORDER_BILLABLE_FROZEN", "SERVICE_ORDER_EDIT_CHANGED", "SERVICE_ORDER_DISABLED_STATE_UNCHANGED", "APPOINTMENT_NOT_FOUND", "APPOINTMENT_NOT_LINKABLE", "APPOINTMENT_NOT_OPEN", "APPOINTMENT_CUSTOMER_MISMATCH", "APPOINTMENT_VERSION_CONFLICT", "SERVICE_ORDER_TERMINAL", "SERVICE_ORDER_DISABLED", "SERVICE_ORDER_ILLEGAL_TRANSITION", "SERVICE_ORDER_STATUS_CHANGED", "SERVICE_ORDER_OUTCOME_REQUIRED", "SERVICE_ORDER_OUTCOME_NOT_ALLOWED", "SERVICE_ORDER_CUSTODY_NOT_RECEIVED", "SERVICE_ORDER_BILLABLE_NOT_AT_THIS_TRANSITION", "PAYMENT_METHODS_NOT_CONFIGURED", "PAYMENT_METHOD_NOT_FOUND", "SERVICE_ORDER_DEPOSIT_CHANGED", "INVALID_IDEMPOTENCY_KEY", "IDEMPOTENCY_KEY_REUSE", "IDEMPOTENCY_IN_PROGRESS", "IDEMPOTENCY_KEY_FAILED", "IDEMPOTENCY_LOCK_CONTENTION", "SERVICE_DEPOSIT_CURRENCY_MISMATCH", "SERVICE_DEPOSIT_INVALID", "INVALID_AMOUNT", "DEFAULT_DRAWER_UNAVAILABLE", "CURRENCY_MISMATCH", "SHIFT_NOT_OPEN", "SERVICE_BILLING_PRODUCTS_UNAVAILABLE", "CATEGORY_NOT_FOUND", "CATEGORY_DISABLED", "CATEGORY_DISABLE_IN_PROGRESS", "SERVICE_BILLING_PRODUCT_IN_BASKET", "SERVICE_DELIVERY_BASKET_DECISION_REQUIRED", "SERVICE_DELIVERY_BASKET_CURRENCY_MISMATCH", "PRODUCT_NOT_AVAILABLE", "PRODUCT_SALE_LIMIT_EXCEEDED", "PRODUCT_SALE_LIMIT_INVALID", "FX_CONVERSION_UNAVAILABLE", "TRANSACT_ITEMS_LIMIT_EXCEEDED", "SERVICE_LINE_PRICE_TOO_LARGE", "SERVICE_PARTS_RESTORE_EXCEEDS_CONSUMED", "SERVICE_PARTS_RESTORE_EXCEEDS_AMOUNT", "SERVICE_PARTS_STOCK_INSUFFICIENT", "SERVICE_PARTS_PRODUCT_NOT_FOUND", "SERVICE_PARTS_LEDGER_FULL", "SERVICE_PARTS_TOO_MANY", "SERVICE_ORDER_PARTS_CHANGED", "SERVICE_QUOTE_NOT_FOUND", "SERVICE_QUOTE_NOT_OFFERABLE", "SERVICE_QUOTE_HOLDS_TOO_MANY", "SERVICE_QUOTE_SUPERSEDED", "SERVICE_QUOTE_ALREADY_RESOLVED", "SERVICE_QUOTE_LAPSED", "SERVICE_QUOTE_CHANNEL_RESERVED", "SERVICE_QUOTE_CHANNEL_NOT_APPLICABLE", "SERVICE_QUOTE_REASON_NOT_APPLICABLE", "SERVICE_ORDER_QUOTE_CHANGED", "SERVICE_ORDER_NOT_READY", "SERVICE_RENOTIFY_IMPERSONATED", "SERVICE_RENOTIFY_TOO_SOON", "SERVICE_RENOTIFY_CONFLICT", "SERVICE_RENOTIFY_NOT_RECORDED", "SERVICE_RENOTIFY_LEDGER_UNREADABLE", "SERVICE_RENOTIFY_NOT_DISPATCHED", "SERVICE_TIMER_ALREADY_RUNNING", "SERVICE_TIMER_NOT_RUNNING", "SERVICE_TIMER_STOP_CONFLICT", "TECHNICIAN_NOT_CLOCKED_IN", "SERVICE_ORDER_GONE", "SERVICE_WORKLOG_NOT_FOUND", "SERVICE_WORKLOG_NOT_REVERSIBLE", "SERVICE_WORKLOG_ALREADY_REVERSED", "SERVICE_ORDER_WORKLOG_CHANGED", "CART_PROMOTION_UNAVAILABLE", "COUPON_NOT_FOUND", "COUPON_NOT_ACTIVE", "COUPON_EXPIRED", "COUPON_EXHAUSTED", "COUPON_EXHAUSTED_AT_CHECKOUT", "COUPON_MIN_SUBTOTAL", "COUPON_REQUIRES_CUSTOMER", "COUPON_BUDGET_EXHAUSTED", "COUPON_CURRENCY_MISMATCH"];
+export declare const SERVICE_ORDER_ERROR_CODES: readonly ["UNIT_QUANTITY_NOT_WHOLE", "UNIT_REVISION_STALE", "ROLE_FORBIDDEN", "PARENT_FILTER_CONFLICT", "VALIDATION_FAILED", "INVALID_CURSOR", "INVALID_FROM_DATE", "INVALID_TO_DATE", "INVALID_DATE_RANGE", "REWORK_INDEX_UNAVAILABLE", "STORE_NOT_FOUND", "SERVICE_ORDER_NOT_FOUND", "PRINT_JOB_DOCUMENT_NOT_FOUND", "CUSTOMER_NOT_FOUND", "PARENT_SERVICE_ORDER_NOT_FOUND", "SERVICE_TEMPLATE_NOT_FOUND", "SERVICE_TYPE_REQUIRED", "INVALID_IMAGE_REFERENCE", "MISSING_STORE_CONTEXT", "WARRANTY_BELOW_LEGAL_MINIMUM", "TECHNICIAN_NOT_FOUND", "TECHNICIAN_NOT_ELIGIBLE", "SERVICE_TRACKING_DISABLED", "SERVICE_TRACKING_NO_ADDRESS", "SERVICE_TRACKING_LINK_LAPSED", "ADMIN_REQUIRED", "CUSTODY_ILLEGAL_TRANSITION", "SERVICE_ORDER_BILLABLE_FROZEN", "SERVICE_ORDER_EDIT_CHANGED", "SERVICE_ORDER_DISABLED_STATE_UNCHANGED", "APPOINTMENT_NOT_FOUND", "APPOINTMENT_NOT_LINKABLE", "APPOINTMENT_NOT_OPEN", "APPOINTMENT_CUSTOMER_MISMATCH", "APPOINTMENT_VERSION_CONFLICT", "SERVICE_ORDER_TERMINAL", "SERVICE_ORDER_DISABLED", "SERVICE_ORDER_ILLEGAL_TRANSITION", "SERVICE_ORDER_STATUS_CHANGED", "SERVICE_ORDER_OUTCOME_REQUIRED", "SERVICE_ORDER_OUTCOME_NOT_ALLOWED", "SERVICE_ORDER_CUSTODY_NOT_RECEIVED", "SERVICE_ORDER_BILLABLE_NOT_AT_THIS_TRANSITION", "PAYMENT_METHODS_NOT_CONFIGURED", "PAYMENT_METHOD_NOT_FOUND", "SERVICE_ORDER_DEPOSIT_CHANGED", "INVALID_IDEMPOTENCY_KEY", "IDEMPOTENCY_KEY_REUSE", "IDEMPOTENCY_IN_PROGRESS", "IDEMPOTENCY_KEY_FAILED", "IDEMPOTENCY_LOCK_CONTENTION", "SERVICE_DEPOSIT_CURRENCY_MISMATCH", "SERVICE_DEPOSIT_INVALID", "INVALID_AMOUNT", "DEFAULT_DRAWER_UNAVAILABLE", "CURRENCY_MISMATCH", "SHIFT_NOT_OPEN", "SERVICE_BILLING_PRODUCTS_UNAVAILABLE", "CATEGORY_NOT_FOUND", "CATEGORY_DISABLED", "CATEGORY_DISABLE_IN_PROGRESS", "SERVICE_BILLING_PRODUCT_IN_BASKET", "SERVICE_DELIVERY_BASKET_DECISION_REQUIRED", "SERVICE_DELIVERY_BASKET_CURRENCY_MISMATCH", "PRODUCT_NOT_AVAILABLE", "PRODUCT_SALE_LIMIT_EXCEEDED", "PRODUCT_SALE_LIMIT_INVALID", "FX_CONVERSION_UNAVAILABLE", "TRANSACT_ITEMS_LIMIT_EXCEEDED", "SERVICE_LINE_PRICE_TOO_LARGE", "SERVICE_PARTS_RESTORE_EXCEEDS_CONSUMED", "SERVICE_PARTS_RESTORE_EXCEEDS_AMOUNT", "SERVICE_PARTS_STOCK_INSUFFICIENT", "SERVICE_PARTS_PRODUCT_NOT_FOUND", "SERVICE_PARTS_LEDGER_FULL", "SERVICE_PARTS_TOO_MANY", "SERVICE_ORDER_PARTS_CHANGED", "SERVICE_QUOTE_NOT_FOUND", "SERVICE_QUOTE_NOT_OFFERABLE", "SERVICE_QUOTE_HOLDS_TOO_MANY", "SERVICE_QUOTE_SUPERSEDED", "SERVICE_QUOTE_ALREADY_RESOLVED", "SERVICE_QUOTE_LAPSED", "SERVICE_QUOTE_CHANNEL_RESERVED", "SERVICE_QUOTE_CHANNEL_NOT_APPLICABLE", "SERVICE_QUOTE_REASON_NOT_APPLICABLE", "SERVICE_ORDER_QUOTE_CHANGED", "SERVICE_ORDER_NOT_READY", "SERVICE_RENOTIFY_IMPERSONATED", "SERVICE_RENOTIFY_TOO_SOON", "SERVICE_RENOTIFY_CONFLICT", "SERVICE_RENOTIFY_NOT_RECORDED", "SERVICE_RENOTIFY_LEDGER_UNREADABLE", "SERVICE_RENOTIFY_NOT_DISPATCHED", "SERVICE_TIMER_ALREADY_RUNNING", "SERVICE_TIMER_NOT_RUNNING", "SERVICE_TIMER_STOP_CONFLICT", "TECHNICIAN_NOT_CLOCKED_IN", "SERVICE_ORDER_GONE", "SERVICE_WORKLOG_NOT_FOUND", "SERVICE_WORKLOG_NOT_REVERSIBLE", "SERVICE_WORKLOG_ALREADY_REVERSED", "SERVICE_ORDER_WORKLOG_CHANGED", "CART_PROMOTION_UNAVAILABLE", "COUPON_NOT_FOUND", "COUPON_NOT_ACTIVE", "COUPON_EXPIRED", "COUPON_EXHAUSTED", "COUPON_EXHAUSTED_AT_CHECKOUT", "COUPON_MIN_SUBTOTAL", "COUPON_REQUIRES_CUSTOMER", "COUPON_BUDGET_EXHAUSTED", "COUPON_CURRENCY_MISMATCH"];
 export type ServiceOrderErrorCode = (typeof SERVICE_ORDER_ERROR_CODES)[number];
 export {};

package/dist/serviceOrder.js

@@ -298,6 +298,11 @@ export const SERVICE_ORDER_ERROR_CODES = [
     'WARRANTY_BELOW_LEGAL_MINIMUM',
     'TECHNICIAN_NOT_FOUND',
     'TECHNICIAN_NOT_ELIGIBLE',
+    // The customer tracking link (`mode: 'trackingLink'`) — see `SERVICE_TRACKING_OPERATOR_ERROR_CODES`
+    'SERVICE_TRACKING_DISABLED',
+    'SERVICE_TRACKING_NO_ADDRESS',
+    'SERVICE_TRACKING_LINK_LAPSED',
+    'ADMIN_REQUIRED',
     'CUSTODY_ILLEGAL_TRANSITION',
     'SERVICE_ORDER_BILLABLE_FROZEN',
     'SERVICE_ORDER_EDIT_CHANGED',

package/dist/serviceTracking.d.ts

@@ -0,0 +1,216 @@
+/**
+ * Customer service-order tracking — the page a customer opens from a link a
+ * shop sends (`/servicio/{handle}`), and the same view for a signed-in customer
+ * on their account.
+ *
+ * The HANDLE is 16 base62 characters (~95 bits), stored server-side and a
+ * bearer credential over exactly ONE service order of one store. It authorises
+ * the read (`GET /services/tracking?handle=`) and the current presupuesto PDF
+ * (`GET /services/tracking?handle=&mode=quote-pdf`), and nothing else. Every
+ * earlier link of an order dies when staff revoke it. A link stops reading
+ * `serviceTrackingLinkDaysAfterClose` days (platform global, default 90) after
+ * the order reached a terminal status.
+ *
+ * The gate is `ecommerce.config.serviceTracking` AND the `workshop` module on.
+ * With the gate off, staff cannot mint and the signed-in reads refuse, but a
+ * link minted earlier keeps reading (STORE_MODULES rule 4).
+ */
+/**
+ * The refusals the PUBLIC tracking routes answer themselves.
+ *
+ * - SERVICE_TRACKING_TOKEN_INVALID (401): every reason a handle cannot be
+ *   honoured — missing, malformed, unknown, revoked, past the lifetime,
+ *   presented on another store's host or with no store host at all, or naming
+ *   an order that is gone or disabled — with one identical body, so a handle is
+ *   never an oracle.
+ * - SERVICE_QUOTE_NOT_FOUND (404, `mode=quote-pdf` only): the order has no
+ *   current presupuesto a customer was sent.
+ */
+export declare const SERVICE_TRACKING_ERROR_CODES: readonly ["SERVICE_TRACKING_TOKEN_INVALID", "SERVICE_QUOTE_NOT_FOUND"];
+export type ServiceTrackingErrorCode = (typeof SERVICE_TRACKING_ERROR_CODES)[number];
+/**
+ * The refusals of the signed-in reads (`GET /user?mode=service-orders` and
+ * `?mode=service-order&serviceOrderId=`).
+ *
+ * - SERVICE_TRACKING_DISABLED (403): the store's gate is off.
+ * - SERVICE_ORDER_NOT_FOUND (404): no such order, a disabled one, or one that
+ *   belongs to another customer — one answer for all three.
+ */
+export declare const SERVICE_TRACKING_ACCOUNT_ERROR_CODES: readonly ["SERVICE_TRACKING_DISABLED", "SERVICE_ORDER_NOT_FOUND"];
+export type ServiceTrackingAccountErrorCode = (typeof SERVICE_TRACKING_ACCOUNT_ERROR_CODES)[number];
+/**
+ * The refusals of the staff `POST /services { mode: 'trackingLink' }`, beside
+ * the router's own (`ROLE_FORBIDDEN`, `VALIDATION_FAILED`, `SERVICE_ORDER_NOT_FOUND`).
+ *
+ * - SERVICE_TRACKING_DISABLED (403, mint only): the store's gate is off.
+ * - SERVICE_TRACKING_NO_ADDRESS (409, mint only): the store has no public
+ *   storefront address to build the link on (no slug, or public links off).
+ * - SERVICE_TRACKING_LINK_LAPSED (409, mint only): the order closed more than
+ *   `serviceTrackingLinkDaysAfterClose` days ago, so a link would not read.
+ * - ADMIN_REQUIRED (403, revoke only): revoking takes ADMIN, SUPERVISOR or MANAGER.
+ */
+export declare const SERVICE_TRACKING_OPERATOR_ERROR_CODES: readonly ["SERVICE_TRACKING_DISABLED", "SERVICE_TRACKING_NO_ADDRESS", "SERVICE_TRACKING_LINK_LAPSED", "ADMIN_REQUIRED"];
+export type ServiceTrackingOperatorErrorCode = (typeof SERVICE_TRACKING_OPERATOR_ERROR_CODES)[number];
+/** `POST /services { mode: 'trackingLink' }` actions. */
+export declare const SERVICE_TRACKING_LINK_ACTIONS: readonly ["mint", "revoke"];
+/** The storefront path a tracking link opens: `/servicio/{handle}`. */
+export declare const SERVICE_TRACKING_PATH_PREFIX: "/servicio/";
+/** The handle's exact shape: 16 base62 characters. */
+export declare const SERVICE_TRACKING_HANDLE_RE: RegExp;
+declare global {
+    type ServiceTrackingLinkAction = (typeof SERVICE_TRACKING_LINK_ACTIONS)[number];
+    /** `ServiceOrder.trackingLink` — what staff see of the link; the handle never rides it. */
+    interface ServiceTrackingLinkState {
+        /** Unix ms the current link was minted. */
+        mintedAt: number;
+        /** Unix ms every earlier link was revoked; removed by the next mint. */
+        revokedAt?: number;
+    }
+    /** `POST /services { mode: 'trackingLink', action: 'mint' }` — any staff who can open the order. */
+    interface ServiceTrackingLinkMintRequest {
+        mode: 'trackingLink';
+        action: 'mint';
+        serviceOrderId: string;
+    }
+    /**
+     * `POST /services { mode: 'trackingLink', action: 'revoke' }` — ADMIN,
+     * SUPERVISOR or MANAGER, never under impersonation. Kills every earlier link;
+     * the next mint answers a new one.
+     */
+    interface ServiceTrackingLinkRevokeRequest {
+        mode: 'trackingLink';
+        action: 'revoke';
+        serviceOrderId: string;
+    }
+    type ServiceTrackingLinkRequest = ServiceTrackingLinkMintRequest | ServiceTrackingLinkRevokeRequest;
+    /** The mint answer's `data`: the link at the current generation (one link per generation, so a repeat mint answers the same URL). */
+    interface ServiceTrackingLinkMintResult {
+        url: string;
+        trackingLink: ServiceTrackingLinkState;
+    }
+    /** The revoke answer's `data`. `trackingLink` is absent when the order never had a link (nothing is written on it then). */
+    interface ServiceTrackingLinkRevokeResult {
+        trackingLink?: ServiceTrackingLinkState;
+    }
+    /**
+     * `POST /services/tracking/recover` body (strict): ask for the tracking link of
+     * one service ticket. Always `202` with one fixed body, whether or not anything
+     * matched; a match mails the live link to the address STORED on the ticket's
+     * customer (never this one). Only a malformed body answers otherwise (`400`).
+     */
+    interface ServiceTrackingRecoverRequest {
+        /** The ticket number the shop printed on the order: digits, at least 6. */
+        ticketNumber: string;
+        email: string;
+    }
+    /** One step of the status history as the customer sees it — no operator, no note. */
+    interface ServiceTrackingTimelineEntry {
+        status: ServiceStatus;
+        /** Unix ms. */
+        at: number;
+    }
+    /** The equipment as taken in. Every field is optional; the serial travels as its last four characters only. */
+    interface ServiceTrackingEquipment {
+        type?: string;
+        brand?: string;
+        model?: string;
+        serialLast4?: string;
+        accessories?: string[];
+        condition?: string;
+        reportedIssue?: string;
+    }
+    /** One material the presupuesto proposes — no product id, no SKU, no money. */
+    interface ServiceTrackingQuotePart {
+        name: string;
+        quantity: number;
+        condition: PartCondition;
+    }
+    /**
+     * The current presupuesto as the customer was sent it — never a draft, never
+     * a superseded version. `status` is that version's own: `sent` (awaiting a
+     * decision), `approved`, `rejected` or `expired`.
+     */
+    interface ServiceTrackingQuote {
+        quoteId: string;
+        status: Exclude<ServiceQuoteStatus, 'draft' | 'superseded'>;
+        laborCost?: number;
+        partsCost?: number;
+        amount: number;
+        /** The version's own stamp, else the order's. */
+        currency: string;
+        /** Unix ms. */
+        quotedAt?: number;
+        /** Unix ms the offer lapses (Ley 24.240 art. 21(g)). */
+        expiresAt?: number;
+        parts: ServiceTrackingQuotePart[];
+        /** Unix ms of the approval or the rejection. */
+        decidedAt?: number;
+    }
+    /** Whether the customer may decide the presupuesto online. */
+    interface ServiceTrackingDecision {
+        /** `false` until the online decision ships. */
+        canDecide: boolean;
+        /** Whether an approval needs the 6-digit code sent to the contact on file. */
+        approveNeedsCode: boolean;
+    }
+    /** The customer's contact as the shop holds it, masked. */
+    interface ServiceTrackingContact {
+        firstName: string;
+        emailMasked?: string;
+        phoneMasked?: string;
+    }
+    /** The shop, as the page names it. `contact` is the storefront's published contact (empty when the shop publishes none). */
+    interface ServiceTrackingStore {
+        name: string;
+        logoUrl?: string;
+        contact: StorefrontPublicContact;
+    }
+    /**
+     * The tracking view, built by ALLOW-LIST. Never carries operator notes,
+     * diagnosis notes, merchant part costs, work logs, the technician, any user
+     * or customer id, a rejection note, a draft or a superseded quote version.
+     */
+    interface ServiceTrackingView {
+        ticketNumber: string;
+        serviceType: ServiceType;
+        status: ServiceStatus;
+        /** The status history, oldest first. */
+        timeline: ServiceTrackingTimelineEntry[];
+        /** Present only while work is blocked. */
+        hold?: {
+            reason: ServiceHoldReason;
+            expectedUntil?: number;
+        };
+        custody: ServiceCustody;
+        /** Unix ms. */
+        promisedAt?: number;
+        /** Unix ms. */
+        readyAt?: number;
+        equipment: ServiceTrackingEquipment;
+        /** What was actually wrong, as told to the customer. */
+        faultFound?: string;
+        quote?: ServiceTrackingQuote;
+        /** Unix ms. */
+        warrantyExpiresAt?: number;
+        decision: ServiceTrackingDecision;
+        contact: ServiceTrackingContact;
+        store: ServiceTrackingStore;
+    }
+    /** One row of `GET /user?mode=service-orders`. */
+    interface ServiceTrackingAccountListItem {
+        serviceOrderId: string;
+        ticketNumber: string;
+        serviceType: ServiceType;
+        status: ServiceStatus;
+        /** Unix ms. */
+        createdAt: number;
+        /** Unix ms. */
+        promisedAt?: number;
+        equipment: Pick<ServiceTrackingEquipment, 'type' | 'brand' | 'model'>;
+    }
+    /** `GET /user?mode=service-orders` `data`. `truncated` when more orders exist than were returned. */
+    interface ServiceTrackingAccountList {
+        serviceOrders: ServiceTrackingAccountListItem[];
+        truncated: boolean;
+    }
+}

package/dist/serviceTracking.js

@@ -0,0 +1,61 @@
+/**
+ * Customer service-order tracking — the page a customer opens from a link a
+ * shop sends (`/servicio/{handle}`), and the same view for a signed-in customer
+ * on their account.
+ *
+ * The HANDLE is 16 base62 characters (~95 bits), stored server-side and a
+ * bearer credential over exactly ONE service order of one store. It authorises
+ * the read (`GET /services/tracking?handle=`) and the current presupuesto PDF
+ * (`GET /services/tracking?handle=&mode=quote-pdf`), and nothing else. Every
+ * earlier link of an order dies when staff revoke it. A link stops reading
+ * `serviceTrackingLinkDaysAfterClose` days (platform global, default 90) after
+ * the order reached a terminal status.
+ *
+ * The gate is `ecommerce.config.serviceTracking` AND the `workshop` module on.
+ * With the gate off, staff cannot mint and the signed-in reads refuse, but a
+ * link minted earlier keeps reading (STORE_MODULES rule 4).
+ */
+/**
+ * The refusals the PUBLIC tracking routes answer themselves.
+ *
+ * - SERVICE_TRACKING_TOKEN_INVALID (401): every reason a handle cannot be
+ *   honoured — missing, malformed, unknown, revoked, past the lifetime,
+ *   presented on another store's host or with no store host at all, or naming
+ *   an order that is gone or disabled — with one identical body, so a handle is
+ *   never an oracle.
+ * - SERVICE_QUOTE_NOT_FOUND (404, `mode=quote-pdf` only): the order has no
+ *   current presupuesto a customer was sent.
+ */
+export const SERVICE_TRACKING_ERROR_CODES = ['SERVICE_TRACKING_TOKEN_INVALID', 'SERVICE_QUOTE_NOT_FOUND'];
+/**
+ * The refusals of the signed-in reads (`GET /user?mode=service-orders` and
+ * `?mode=service-order&serviceOrderId=`).
+ *
+ * - SERVICE_TRACKING_DISABLED (403): the store's gate is off.
+ * - SERVICE_ORDER_NOT_FOUND (404): no such order, a disabled one, or one that
+ *   belongs to another customer — one answer for all three.
+ */
+export const SERVICE_TRACKING_ACCOUNT_ERROR_CODES = ['SERVICE_TRACKING_DISABLED', 'SERVICE_ORDER_NOT_FOUND'];
+/**
+ * The refusals of the staff `POST /services { mode: 'trackingLink' }`, beside
+ * the router's own (`ROLE_FORBIDDEN`, `VALIDATION_FAILED`, `SERVICE_ORDER_NOT_FOUND`).
+ *
+ * - SERVICE_TRACKING_DISABLED (403, mint only): the store's gate is off.
+ * - SERVICE_TRACKING_NO_ADDRESS (409, mint only): the store has no public
+ *   storefront address to build the link on (no slug, or public links off).
+ * - SERVICE_TRACKING_LINK_LAPSED (409, mint only): the order closed more than
+ *   `serviceTrackingLinkDaysAfterClose` days ago, so a link would not read.
+ * - ADMIN_REQUIRED (403, revoke only): revoking takes ADMIN, SUPERVISOR or MANAGER.
+ */
+export const SERVICE_TRACKING_OPERATOR_ERROR_CODES = [
+    'SERVICE_TRACKING_DISABLED',
+    'SERVICE_TRACKING_NO_ADDRESS',
+    'SERVICE_TRACKING_LINK_LAPSED',
+    'ADMIN_REQUIRED',
+];
+/** `POST /services { mode: 'trackingLink' }` actions. */
+export const SERVICE_TRACKING_LINK_ACTIONS = ['mint', 'revoke'];
+/** The storefront path a tracking link opens: `/servicio/{handle}`. */
+export const SERVICE_TRACKING_PATH_PREFIX = '/servicio/';
+/** The handle's exact shape: 16 base62 characters. */
+export const SERVICE_TRACKING_HANDLE_RE = /^[0-9A-Za-z]{16}$/;

package/dist/store.d.ts

@@ -182,6 +182,19 @@ declare global {
              * frame), so the storefront can offer the request.
              */
             wholesaleRequests?: boolean;
+            /**
+             * Whether the shop's customers can follow their service orders online: the
+             * tracking link (`/servicio/{handle}`) staff mint with
+             * `POST /services { mode: 'trackingLink' }`, and the signed-in
+             * `GET /user?mode=service-orders`. Absent or `false` = off. Honoured only
+             * while the `workshop` module is on (`config.modules.workshop !== false`).
+             * Turning it off later stops new links and the signed-in reads; links
+             * already minted keep reading (STORE_MODULES rule 4). Written by
+             * `PATCH /store` (ADMIN) and `PUT /platform/stores/{storeId}` (MANAGER).
+             * SENT TO SHOPPERS as the verdict (web `GET /store` and the customer
+             * `stores` frame): stored `true` AND the workshop module on.
+             */
+            serviceTracking?: boolean;
             /**
              * Whether the shop sells to shoppers without an account (server guest
              * cart, guest checkout). Absent means ON: a shop opts out by storing
@@ -260,7 +273,7 @@ declare global {
      * (Responsable Inscripto) refuses 409 NET_PLUS_IVA_REQUIRES_RI; nothing written.
      */
     interface EcommercePatchInput {
-        config?: Pick<NonNullable<Ecommerce['config']>, 'showDefaultPriceList' | 'newCustomerPriceList' | 'registrationMode' | 'wholesaleRequests' | 'paymentHoldMinutes'> & StorefrontLiveSettingsPatch;
+        config?: Pick<NonNullable<Ecommerce['config']>, 'showDefaultPriceList' | 'newCustomerPriceList' | 'registrationMode' | 'wholesaleRequests' | 'serviceTracking' | 'paymentHoldMinutes'> & StorefrontLiveSettingsPatch;
         sidebar?: Ecommerce['sidebar'];
         home?: Omit<NonNullable<Ecommerce['home']>, 'displayOrders' | 'displayProfile'>;
         themeColors?: Ecommerce['themeColors'];

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "platform-types",
-	"version": "1.10.851",
+	"version": "1.10.853",
 	"description": "Shared wire and entity contracts for the platform.",
 	"type": "module",
 	"main": "dist/index.js",