platform-types 1.10.852 → 1.10.853

package/dist/cjs/index.js

@@ -103,6 +103,7 @@ __exportStar(require("./rma.js"), exports);
 __exportStar(require("./roles.js"), exports);
 __exportStar(require("./sentry.js"), exports);
 __exportStar(require("./serviceOrder.js"), exports);
+__exportStar(require("./serviceTracking.js"), exports);
 __exportStar(require("./serviceTemplate.js"), exports);
 __exportStar(require("./socket.js"), exports);
 __exportStar(require("./stock.js"), exports);

package/dist/cjs/serviceOrder.js

@@ -301,6 +301,11 @@ exports.SERVICE_ORDER_ERROR_CODES = [
     'WARRANTY_BELOW_LEGAL_MINIMUM',
     'TECHNICIAN_NOT_FOUND',
     'TECHNICIAN_NOT_ELIGIBLE',
+    // The customer tracking link (`mode: 'trackingLink'`) — see `SERVICE_TRACKING_OPERATOR_ERROR_CODES`
+    'SERVICE_TRACKING_DISABLED',
+    'SERVICE_TRACKING_NO_ADDRESS',
+    'SERVICE_TRACKING_LINK_LAPSED',
+    'ADMIN_REQUIRED',
     'CUSTODY_ILLEGAL_TRANSITION',
     'SERVICE_ORDER_BILLABLE_FROZEN',
     'SERVICE_ORDER_EDIT_CHANGED',

package/dist/cjs/serviceTracking.js

@@ -0,0 +1,64 @@
+"use strict";
+/**
+ * Customer service-order tracking — the page a customer opens from a link a
+ * shop sends (`/servicio/{handle}`), and the same view for a signed-in customer
+ * on their account.
+ *
+ * The HANDLE is 16 base62 characters (~95 bits), stored server-side and a
+ * bearer credential over exactly ONE service order of one store. It authorises
+ * the read (`GET /services/tracking?handle=`) and the current presupuesto PDF
+ * (`GET /services/tracking?handle=&mode=quote-pdf`), and nothing else. Every
+ * earlier link of an order dies when staff revoke it. A link stops reading
+ * `serviceTrackingLinkDaysAfterClose` days (platform global, default 90) after
+ * the order reached a terminal status.
+ *
+ * The gate is `ecommerce.config.serviceTracking` AND the `workshop` module on.
+ * With the gate off, staff cannot mint and the signed-in reads refuse, but a
+ * link minted earlier keeps reading (STORE_MODULES rule 4).
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.SERVICE_TRACKING_HANDLE_RE = exports.SERVICE_TRACKING_PATH_PREFIX = exports.SERVICE_TRACKING_LINK_ACTIONS = exports.SERVICE_TRACKING_OPERATOR_ERROR_CODES = exports.SERVICE_TRACKING_ACCOUNT_ERROR_CODES = exports.SERVICE_TRACKING_ERROR_CODES = void 0;
+/**
+ * The refusals the PUBLIC tracking routes answer themselves.
+ *
+ * - SERVICE_TRACKING_TOKEN_INVALID (401): every reason a handle cannot be
+ *   honoured — missing, malformed, unknown, revoked, past the lifetime,
+ *   presented on another store's host or with no store host at all, or naming
+ *   an order that is gone or disabled — with one identical body, so a handle is
+ *   never an oracle.
+ * - SERVICE_QUOTE_NOT_FOUND (404, `mode=quote-pdf` only): the order has no
+ *   current presupuesto a customer was sent.
+ */
+exports.SERVICE_TRACKING_ERROR_CODES = ['SERVICE_TRACKING_TOKEN_INVALID', 'SERVICE_QUOTE_NOT_FOUND'];
+/**
+ * The refusals of the signed-in reads (`GET /user?mode=service-orders` and
+ * `?mode=service-order&serviceOrderId=`).
+ *
+ * - SERVICE_TRACKING_DISABLED (403): the store's gate is off.
+ * - SERVICE_ORDER_NOT_FOUND (404): no such order, a disabled one, or one that
+ *   belongs to another customer — one answer for all three.
+ */
+exports.SERVICE_TRACKING_ACCOUNT_ERROR_CODES = ['SERVICE_TRACKING_DISABLED', 'SERVICE_ORDER_NOT_FOUND'];
+/**
+ * The refusals of the staff `POST /services { mode: 'trackingLink' }`, beside
+ * the router's own (`ROLE_FORBIDDEN`, `VALIDATION_FAILED`, `SERVICE_ORDER_NOT_FOUND`).
+ *
+ * - SERVICE_TRACKING_DISABLED (403, mint only): the store's gate is off.
+ * - SERVICE_TRACKING_NO_ADDRESS (409, mint only): the store has no public
+ *   storefront address to build the link on (no slug, or public links off).
+ * - SERVICE_TRACKING_LINK_LAPSED (409, mint only): the order closed more than
+ *   `serviceTrackingLinkDaysAfterClose` days ago, so a link would not read.
+ * - ADMIN_REQUIRED (403, revoke only): revoking takes ADMIN, SUPERVISOR or MANAGER.
+ */
+exports.SERVICE_TRACKING_OPERATOR_ERROR_CODES = [
+    'SERVICE_TRACKING_DISABLED',
+    'SERVICE_TRACKING_NO_ADDRESS',
+    'SERVICE_TRACKING_LINK_LAPSED',
+    'ADMIN_REQUIRED',
+];
+/** `POST /services { mode: 'trackingLink' }` actions. */
+exports.SERVICE_TRACKING_LINK_ACTIONS = ['mint', 'revoke'];
+/** The storefront path a tracking link opens: `/servicio/{handle}`. */
+exports.SERVICE_TRACKING_PATH_PREFIX = '/servicio/';
+/** The handle's exact shape: 16 base62 characters. */
+exports.SERVICE_TRACKING_HANDLE_RE = /^[0-9A-Za-z]{16}$/;

package/dist/index.d.ts

@@ -79,6 +79,7 @@ export * from './rma.ts';
 export * from './roles.ts';
 export * from './sentry.ts';
 export * from './serviceOrder.ts';
+export * from './serviceTracking.ts';
 export * from './serviceTemplate.ts';
 export * from './socket.ts';
 export * from './stock.ts';

package/dist/index.js

@@ -87,6 +87,7 @@ export * from "./rma.js";
 export * from "./roles.js";
 export * from "./sentry.js";
 export * from "./serviceOrder.js";
+export * from "./serviceTracking.js";
 export * from "./serviceTemplate.js";
 export * from "./socket.js";
 export * from "./stock.js";

package/dist/serviceOrder.d.ts

@@ -1131,6 +1131,16 @@ declare global {
          * CURRENT `printJobId`.
          */
         printedAt?: number;
+        /**
+         * The customer tracking link (`/servicio/{handle}`), as staff see it.
+         * Server-written only, by `POST /services { mode: 'trackingLink' }`:
+         * `mintedAt` when a link is minted (a mint that finds a live link writes
+         * nothing), `revokedAt` when every earlier link is revoked; a mint after a
+         * revoke stamps a new `mintedAt` and removes `revokedAt`. Absent on an order
+         * that never had a link. The handle and its fence generation are never on
+         * this row and never reach staff after the mint answer.
+         */
+        trackingLink?: ServiceTrackingLinkState;
         disabled: boolean;
     }
     /**
@@ -1521,6 +1531,6 @@ export declare const MAX_SERVICE_PICTURES = 20;
  * check `GATING_ERROR_CODES` in addition. The deposit's opt-in idempotency
  * refusals are included here.
  */
-export declare const SERVICE_ORDER_ERROR_CODES: readonly ["UNIT_QUANTITY_NOT_WHOLE", "UNIT_REVISION_STALE", "ROLE_FORBIDDEN", "PARENT_FILTER_CONFLICT", "VALIDATION_FAILED", "INVALID_CURSOR", "INVALID_FROM_DATE", "INVALID_TO_DATE", "INVALID_DATE_RANGE", "REWORK_INDEX_UNAVAILABLE", "STORE_NOT_FOUND", "SERVICE_ORDER_NOT_FOUND", "PRINT_JOB_DOCUMENT_NOT_FOUND", "CUSTOMER_NOT_FOUND", "PARENT_SERVICE_ORDER_NOT_FOUND", "SERVICE_TEMPLATE_NOT_FOUND", "SERVICE_TYPE_REQUIRED", "INVALID_IMAGE_REFERENCE", "MISSING_STORE_CONTEXT", "WARRANTY_BELOW_LEGAL_MINIMUM", "TECHNICIAN_NOT_FOUND", "TECHNICIAN_NOT_ELIGIBLE", "CUSTODY_ILLEGAL_TRANSITION", "SERVICE_ORDER_BILLABLE_FROZEN", "SERVICE_ORDER_EDIT_CHANGED", "SERVICE_ORDER_DISABLED_STATE_UNCHANGED", "APPOINTMENT_NOT_FOUND", "APPOINTMENT_NOT_LINKABLE", "APPOINTMENT_NOT_OPEN", "APPOINTMENT_CUSTOMER_MISMATCH", "APPOINTMENT_VERSION_CONFLICT", "SERVICE_ORDER_TERMINAL", "SERVICE_ORDER_DISABLED", "SERVICE_ORDER_ILLEGAL_TRANSITION", "SERVICE_ORDER_STATUS_CHANGED", "SERVICE_ORDER_OUTCOME_REQUIRED", "SERVICE_ORDER_OUTCOME_NOT_ALLOWED", "SERVICE_ORDER_CUSTODY_NOT_RECEIVED", "SERVICE_ORDER_BILLABLE_NOT_AT_THIS_TRANSITION", "PAYMENT_METHODS_NOT_CONFIGURED", "PAYMENT_METHOD_NOT_FOUND", "SERVICE_ORDER_DEPOSIT_CHANGED", "INVALID_IDEMPOTENCY_KEY", "IDEMPOTENCY_KEY_REUSE", "IDEMPOTENCY_IN_PROGRESS", "IDEMPOTENCY_KEY_FAILED", "IDEMPOTENCY_LOCK_CONTENTION", "SERVICE_DEPOSIT_CURRENCY_MISMATCH", "SERVICE_DEPOSIT_INVALID", "INVALID_AMOUNT", "DEFAULT_DRAWER_UNAVAILABLE", "CURRENCY_MISMATCH", "SHIFT_NOT_OPEN", "SERVICE_BILLING_PRODUCTS_UNAVAILABLE", "CATEGORY_NOT_FOUND", "CATEGORY_DISABLED", "CATEGORY_DISABLE_IN_PROGRESS", "SERVICE_BILLING_PRODUCT_IN_BASKET", "SERVICE_DELIVERY_BASKET_DECISION_REQUIRED", "SERVICE_DELIVERY_BASKET_CURRENCY_MISMATCH", "PRODUCT_NOT_AVAILABLE", "PRODUCT_SALE_LIMIT_EXCEEDED", "PRODUCT_SALE_LIMIT_INVALID", "FX_CONVERSION_UNAVAILABLE", "TRANSACT_ITEMS_LIMIT_EXCEEDED", "SERVICE_LINE_PRICE_TOO_LARGE", "SERVICE_PARTS_RESTORE_EXCEEDS_CONSUMED", "SERVICE_PARTS_RESTORE_EXCEEDS_AMOUNT", "SERVICE_PARTS_STOCK_INSUFFICIENT", "SERVICE_PARTS_PRODUCT_NOT_FOUND", "SERVICE_PARTS_LEDGER_FULL", "SERVICE_PARTS_TOO_MANY", "SERVICE_ORDER_PARTS_CHANGED", "SERVICE_QUOTE_NOT_FOUND", "SERVICE_QUOTE_NOT_OFFERABLE", "SERVICE_QUOTE_HOLDS_TOO_MANY", "SERVICE_QUOTE_SUPERSEDED", "SERVICE_QUOTE_ALREADY_RESOLVED", "SERVICE_QUOTE_LAPSED", "SERVICE_QUOTE_CHANNEL_RESERVED", "SERVICE_QUOTE_CHANNEL_NOT_APPLICABLE", "SERVICE_QUOTE_REASON_NOT_APPLICABLE", "SERVICE_ORDER_QUOTE_CHANGED", "SERVICE_ORDER_NOT_READY", "SERVICE_RENOTIFY_IMPERSONATED", "SERVICE_RENOTIFY_TOO_SOON", "SERVICE_RENOTIFY_CONFLICT", "SERVICE_RENOTIFY_NOT_RECORDED", "SERVICE_RENOTIFY_LEDGER_UNREADABLE", "SERVICE_RENOTIFY_NOT_DISPATCHED", "SERVICE_TIMER_ALREADY_RUNNING", "SERVICE_TIMER_NOT_RUNNING", "SERVICE_TIMER_STOP_CONFLICT", "TECHNICIAN_NOT_CLOCKED_IN", "SERVICE_ORDER_GONE", "SERVICE_WORKLOG_NOT_FOUND", "SERVICE_WORKLOG_NOT_REVERSIBLE", "SERVICE_WORKLOG_ALREADY_REVERSED", "SERVICE_ORDER_WORKLOG_CHANGED", "CART_PROMOTION_UNAVAILABLE", "COUPON_NOT_FOUND", "COUPON_NOT_ACTIVE", "COUPON_EXPIRED", "COUPON_EXHAUSTED", "COUPON_EXHAUSTED_AT_CHECKOUT", "COUPON_MIN_SUBTOTAL", "COUPON_REQUIRES_CUSTOMER", "COUPON_BUDGET_EXHAUSTED", "COUPON_CURRENCY_MISMATCH"];
+export declare const SERVICE_ORDER_ERROR_CODES: readonly ["UNIT_QUANTITY_NOT_WHOLE", "UNIT_REVISION_STALE", "ROLE_FORBIDDEN", "PARENT_FILTER_CONFLICT", "VALIDATION_FAILED", "INVALID_CURSOR", "INVALID_FROM_DATE", "INVALID_TO_DATE", "INVALID_DATE_RANGE", "REWORK_INDEX_UNAVAILABLE", "STORE_NOT_FOUND", "SERVICE_ORDER_NOT_FOUND", "PRINT_JOB_DOCUMENT_NOT_FOUND", "CUSTOMER_NOT_FOUND", "PARENT_SERVICE_ORDER_NOT_FOUND", "SERVICE_TEMPLATE_NOT_FOUND", "SERVICE_TYPE_REQUIRED", "INVALID_IMAGE_REFERENCE", "MISSING_STORE_CONTEXT", "WARRANTY_BELOW_LEGAL_MINIMUM", "TECHNICIAN_NOT_FOUND", "TECHNICIAN_NOT_ELIGIBLE", "SERVICE_TRACKING_DISABLED", "SERVICE_TRACKING_NO_ADDRESS", "SERVICE_TRACKING_LINK_LAPSED", "ADMIN_REQUIRED", "CUSTODY_ILLEGAL_TRANSITION", "SERVICE_ORDER_BILLABLE_FROZEN", "SERVICE_ORDER_EDIT_CHANGED", "SERVICE_ORDER_DISABLED_STATE_UNCHANGED", "APPOINTMENT_NOT_FOUND", "APPOINTMENT_NOT_LINKABLE", "APPOINTMENT_NOT_OPEN", "APPOINTMENT_CUSTOMER_MISMATCH", "APPOINTMENT_VERSION_CONFLICT", "SERVICE_ORDER_TERMINAL", "SERVICE_ORDER_DISABLED", "SERVICE_ORDER_ILLEGAL_TRANSITION", "SERVICE_ORDER_STATUS_CHANGED", "SERVICE_ORDER_OUTCOME_REQUIRED", "SERVICE_ORDER_OUTCOME_NOT_ALLOWED", "SERVICE_ORDER_CUSTODY_NOT_RECEIVED", "SERVICE_ORDER_BILLABLE_NOT_AT_THIS_TRANSITION", "PAYMENT_METHODS_NOT_CONFIGURED", "PAYMENT_METHOD_NOT_FOUND", "SERVICE_ORDER_DEPOSIT_CHANGED", "INVALID_IDEMPOTENCY_KEY", "IDEMPOTENCY_KEY_REUSE", "IDEMPOTENCY_IN_PROGRESS", "IDEMPOTENCY_KEY_FAILED", "IDEMPOTENCY_LOCK_CONTENTION", "SERVICE_DEPOSIT_CURRENCY_MISMATCH", "SERVICE_DEPOSIT_INVALID", "INVALID_AMOUNT", "DEFAULT_DRAWER_UNAVAILABLE", "CURRENCY_MISMATCH", "SHIFT_NOT_OPEN", "SERVICE_BILLING_PRODUCTS_UNAVAILABLE", "CATEGORY_NOT_FOUND", "CATEGORY_DISABLED", "CATEGORY_DISABLE_IN_PROGRESS", "SERVICE_BILLING_PRODUCT_IN_BASKET", "SERVICE_DELIVERY_BASKET_DECISION_REQUIRED", "SERVICE_DELIVERY_BASKET_CURRENCY_MISMATCH", "PRODUCT_NOT_AVAILABLE", "PRODUCT_SALE_LIMIT_EXCEEDED", "PRODUCT_SALE_LIMIT_INVALID", "FX_CONVERSION_UNAVAILABLE", "TRANSACT_ITEMS_LIMIT_EXCEEDED", "SERVICE_LINE_PRICE_TOO_LARGE", "SERVICE_PARTS_RESTORE_EXCEEDS_CONSUMED", "SERVICE_PARTS_RESTORE_EXCEEDS_AMOUNT", "SERVICE_PARTS_STOCK_INSUFFICIENT", "SERVICE_PARTS_PRODUCT_NOT_FOUND", "SERVICE_PARTS_LEDGER_FULL", "SERVICE_PARTS_TOO_MANY", "SERVICE_ORDER_PARTS_CHANGED", "SERVICE_QUOTE_NOT_FOUND", "SERVICE_QUOTE_NOT_OFFERABLE", "SERVICE_QUOTE_HOLDS_TOO_MANY", "SERVICE_QUOTE_SUPERSEDED", "SERVICE_QUOTE_ALREADY_RESOLVED", "SERVICE_QUOTE_LAPSED", "SERVICE_QUOTE_CHANNEL_RESERVED", "SERVICE_QUOTE_CHANNEL_NOT_APPLICABLE", "SERVICE_QUOTE_REASON_NOT_APPLICABLE", "SERVICE_ORDER_QUOTE_CHANGED", "SERVICE_ORDER_NOT_READY", "SERVICE_RENOTIFY_IMPERSONATED", "SERVICE_RENOTIFY_TOO_SOON", "SERVICE_RENOTIFY_CONFLICT", "SERVICE_RENOTIFY_NOT_RECORDED", "SERVICE_RENOTIFY_LEDGER_UNREADABLE", "SERVICE_RENOTIFY_NOT_DISPATCHED", "SERVICE_TIMER_ALREADY_RUNNING", "SERVICE_TIMER_NOT_RUNNING", "SERVICE_TIMER_STOP_CONFLICT", "TECHNICIAN_NOT_CLOCKED_IN", "SERVICE_ORDER_GONE", "SERVICE_WORKLOG_NOT_FOUND", "SERVICE_WORKLOG_NOT_REVERSIBLE", "SERVICE_WORKLOG_ALREADY_REVERSED", "SERVICE_ORDER_WORKLOG_CHANGED", "CART_PROMOTION_UNAVAILABLE", "COUPON_NOT_FOUND", "COUPON_NOT_ACTIVE", "COUPON_EXPIRED", "COUPON_EXHAUSTED", "COUPON_EXHAUSTED_AT_CHECKOUT", "COUPON_MIN_SUBTOTAL", "COUPON_REQUIRES_CUSTOMER", "COUPON_BUDGET_EXHAUSTED", "COUPON_CURRENCY_MISMATCH"];
 export type ServiceOrderErrorCode = (typeof SERVICE_ORDER_ERROR_CODES)[number];
 export {};

package/dist/serviceOrder.js

@@ -298,6 +298,11 @@ export const SERVICE_ORDER_ERROR_CODES = [
     'WARRANTY_BELOW_LEGAL_MINIMUM',
     'TECHNICIAN_NOT_FOUND',
     'TECHNICIAN_NOT_ELIGIBLE',
+    // The customer tracking link (`mode: 'trackingLink'`) — see `SERVICE_TRACKING_OPERATOR_ERROR_CODES`
+    'SERVICE_TRACKING_DISABLED',
+    'SERVICE_TRACKING_NO_ADDRESS',
+    'SERVICE_TRACKING_LINK_LAPSED',
+    'ADMIN_REQUIRED',
     'CUSTODY_ILLEGAL_TRANSITION',
     'SERVICE_ORDER_BILLABLE_FROZEN',
     'SERVICE_ORDER_EDIT_CHANGED',

package/dist/serviceTracking.d.ts

@@ -0,0 +1,216 @@
+/**
+ * Customer service-order tracking — the page a customer opens from a link a
+ * shop sends (`/servicio/{handle}`), and the same view for a signed-in customer
+ * on their account.
+ *
+ * The HANDLE is 16 base62 characters (~95 bits), stored server-side and a
+ * bearer credential over exactly ONE service order of one store. It authorises
+ * the read (`GET /services/tracking?handle=`) and the current presupuesto PDF
+ * (`GET /services/tracking?handle=&mode=quote-pdf`), and nothing else. Every
+ * earlier link of an order dies when staff revoke it. A link stops reading
+ * `serviceTrackingLinkDaysAfterClose` days (platform global, default 90) after
+ * the order reached a terminal status.
+ *
+ * The gate is `ecommerce.config.serviceTracking` AND the `workshop` module on.
+ * With the gate off, staff cannot mint and the signed-in reads refuse, but a
+ * link minted earlier keeps reading (STORE_MODULES rule 4).
+ */
+/**
+ * The refusals the PUBLIC tracking routes answer themselves.
+ *
+ * - SERVICE_TRACKING_TOKEN_INVALID (401): every reason a handle cannot be
+ *   honoured — missing, malformed, unknown, revoked, past the lifetime,
+ *   presented on another store's host or with no store host at all, or naming
+ *   an order that is gone or disabled — with one identical body, so a handle is
+ *   never an oracle.
+ * - SERVICE_QUOTE_NOT_FOUND (404, `mode=quote-pdf` only): the order has no
+ *   current presupuesto a customer was sent.
+ */
+export declare const SERVICE_TRACKING_ERROR_CODES: readonly ["SERVICE_TRACKING_TOKEN_INVALID", "SERVICE_QUOTE_NOT_FOUND"];
+export type ServiceTrackingErrorCode = (typeof SERVICE_TRACKING_ERROR_CODES)[number];
+/**
+ * The refusals of the signed-in reads (`GET /user?mode=service-orders` and
+ * `?mode=service-order&serviceOrderId=`).
+ *
+ * - SERVICE_TRACKING_DISABLED (403): the store's gate is off.
+ * - SERVICE_ORDER_NOT_FOUND (404): no such order, a disabled one, or one that
+ *   belongs to another customer — one answer for all three.
+ */
+export declare const SERVICE_TRACKING_ACCOUNT_ERROR_CODES: readonly ["SERVICE_TRACKING_DISABLED", "SERVICE_ORDER_NOT_FOUND"];
+export type ServiceTrackingAccountErrorCode = (typeof SERVICE_TRACKING_ACCOUNT_ERROR_CODES)[number];
+/**
+ * The refusals of the staff `POST /services { mode: 'trackingLink' }`, beside
+ * the router's own (`ROLE_FORBIDDEN`, `VALIDATION_FAILED`, `SERVICE_ORDER_NOT_FOUND`).
+ *
+ * - SERVICE_TRACKING_DISABLED (403, mint only): the store's gate is off.
+ * - SERVICE_TRACKING_NO_ADDRESS (409, mint only): the store has no public
+ *   storefront address to build the link on (no slug, or public links off).
+ * - SERVICE_TRACKING_LINK_LAPSED (409, mint only): the order closed more than
+ *   `serviceTrackingLinkDaysAfterClose` days ago, so a link would not read.
+ * - ADMIN_REQUIRED (403, revoke only): revoking takes ADMIN, SUPERVISOR or MANAGER.
+ */
+export declare const SERVICE_TRACKING_OPERATOR_ERROR_CODES: readonly ["SERVICE_TRACKING_DISABLED", "SERVICE_TRACKING_NO_ADDRESS", "SERVICE_TRACKING_LINK_LAPSED", "ADMIN_REQUIRED"];
+export type ServiceTrackingOperatorErrorCode = (typeof SERVICE_TRACKING_OPERATOR_ERROR_CODES)[number];
+/** `POST /services { mode: 'trackingLink' }` actions. */
+export declare const SERVICE_TRACKING_LINK_ACTIONS: readonly ["mint", "revoke"];
+/** The storefront path a tracking link opens: `/servicio/{handle}`. */
+export declare const SERVICE_TRACKING_PATH_PREFIX: "/servicio/";
+/** The handle's exact shape: 16 base62 characters. */
+export declare const SERVICE_TRACKING_HANDLE_RE: RegExp;
+declare global {
+    type ServiceTrackingLinkAction = (typeof SERVICE_TRACKING_LINK_ACTIONS)[number];
+    /** `ServiceOrder.trackingLink` — what staff see of the link; the handle never rides it. */
+    interface ServiceTrackingLinkState {
+        /** Unix ms the current link was minted. */
+        mintedAt: number;
+        /** Unix ms every earlier link was revoked; removed by the next mint. */
+        revokedAt?: number;
+    }
+    /** `POST /services { mode: 'trackingLink', action: 'mint' }` — any staff who can open the order. */
+    interface ServiceTrackingLinkMintRequest {
+        mode: 'trackingLink';
+        action: 'mint';
+        serviceOrderId: string;
+    }
+    /**
+     * `POST /services { mode: 'trackingLink', action: 'revoke' }` — ADMIN,
+     * SUPERVISOR or MANAGER, never under impersonation. Kills every earlier link;
+     * the next mint answers a new one.
+     */
+    interface ServiceTrackingLinkRevokeRequest {
+        mode: 'trackingLink';
+        action: 'revoke';
+        serviceOrderId: string;
+    }
+    type ServiceTrackingLinkRequest = ServiceTrackingLinkMintRequest | ServiceTrackingLinkRevokeRequest;
+    /** The mint answer's `data`: the link at the current generation (one link per generation, so a repeat mint answers the same URL). */
+    interface ServiceTrackingLinkMintResult {
+        url: string;
+        trackingLink: ServiceTrackingLinkState;
+    }
+    /** The revoke answer's `data`. `trackingLink` is absent when the order never had a link (nothing is written on it then). */
+    interface ServiceTrackingLinkRevokeResult {
+        trackingLink?: ServiceTrackingLinkState;
+    }
+    /**
+     * `POST /services/tracking/recover` body (strict): ask for the tracking link of
+     * one service ticket. Always `202` with one fixed body, whether or not anything
+     * matched; a match mails the live link to the address STORED on the ticket's
+     * customer (never this one). Only a malformed body answers otherwise (`400`).
+     */
+    interface ServiceTrackingRecoverRequest {
+        /** The ticket number the shop printed on the order: digits, at least 6. */
+        ticketNumber: string;
+        email: string;
+    }
+    /** One step of the status history as the customer sees it — no operator, no note. */
+    interface ServiceTrackingTimelineEntry {
+        status: ServiceStatus;
+        /** Unix ms. */
+        at: number;
+    }
+    /** The equipment as taken in. Every field is optional; the serial travels as its last four characters only. */
+    interface ServiceTrackingEquipment {
+        type?: string;
+        brand?: string;
+        model?: string;
+        serialLast4?: string;
+        accessories?: string[];
+        condition?: string;
+        reportedIssue?: string;
+    }
+    /** One material the presupuesto proposes — no product id, no SKU, no money. */
+    interface ServiceTrackingQuotePart {
+        name: string;
+        quantity: number;
+        condition: PartCondition;
+    }
+    /**
+     * The current presupuesto as the customer was sent it — never a draft, never
+     * a superseded version. `status` is that version's own: `sent` (awaiting a
+     * decision), `approved`, `rejected` or `expired`.
+     */
+    interface ServiceTrackingQuote {
+        quoteId: string;
+        status: Exclude<ServiceQuoteStatus, 'draft' | 'superseded'>;
+        laborCost?: number;
+        partsCost?: number;
+        amount: number;
+        /** The version's own stamp, else the order's. */
+        currency: string;
+        /** Unix ms. */
+        quotedAt?: number;
+        /** Unix ms the offer lapses (Ley 24.240 art. 21(g)). */
+        expiresAt?: number;
+        parts: ServiceTrackingQuotePart[];
+        /** Unix ms of the approval or the rejection. */
+        decidedAt?: number;
+    }
+    /** Whether the customer may decide the presupuesto online. */
+    interface ServiceTrackingDecision {
+        /** `false` until the online decision ships. */
+        canDecide: boolean;
+        /** Whether an approval needs the 6-digit code sent to the contact on file. */
+        approveNeedsCode: boolean;
+    }
+    /** The customer's contact as the shop holds it, masked. */
+    interface ServiceTrackingContact {
+        firstName: string;
+        emailMasked?: string;
+        phoneMasked?: string;
+    }
+    /** The shop, as the page names it. `contact` is the storefront's published contact (empty when the shop publishes none). */
+    interface ServiceTrackingStore {
+        name: string;
+        logoUrl?: string;
+        contact: StorefrontPublicContact;
+    }
+    /**
+     * The tracking view, built by ALLOW-LIST. Never carries operator notes,
+     * diagnosis notes, merchant part costs, work logs, the technician, any user
+     * or customer id, a rejection note, a draft or a superseded quote version.
+     */
+    interface ServiceTrackingView {
+        ticketNumber: string;
+        serviceType: ServiceType;
+        status: ServiceStatus;
+        /** The status history, oldest first. */
+        timeline: ServiceTrackingTimelineEntry[];
+        /** Present only while work is blocked. */
+        hold?: {
+            reason: ServiceHoldReason;
+            expectedUntil?: number;
+        };
+        custody: ServiceCustody;
+        /** Unix ms. */
+        promisedAt?: number;
+        /** Unix ms. */
+        readyAt?: number;
+        equipment: ServiceTrackingEquipment;
+        /** What was actually wrong, as told to the customer. */
+        faultFound?: string;
+        quote?: ServiceTrackingQuote;
+        /** Unix ms. */
+        warrantyExpiresAt?: number;
+        decision: ServiceTrackingDecision;
+        contact: ServiceTrackingContact;
+        store: ServiceTrackingStore;
+    }
+    /** One row of `GET /user?mode=service-orders`. */
+    interface ServiceTrackingAccountListItem {
+        serviceOrderId: string;
+        ticketNumber: string;
+        serviceType: ServiceType;
+        status: ServiceStatus;
+        /** Unix ms. */
+        createdAt: number;
+        /** Unix ms. */
+        promisedAt?: number;
+        equipment: Pick<ServiceTrackingEquipment, 'type' | 'brand' | 'model'>;
+    }
+    /** `GET /user?mode=service-orders` `data`. `truncated` when more orders exist than were returned. */
+    interface ServiceTrackingAccountList {
+        serviceOrders: ServiceTrackingAccountListItem[];
+        truncated: boolean;
+    }
+}

package/dist/serviceTracking.js

@@ -0,0 +1,61 @@
+/**
+ * Customer service-order tracking — the page a customer opens from a link a
+ * shop sends (`/servicio/{handle}`), and the same view for a signed-in customer
+ * on their account.
+ *
+ * The HANDLE is 16 base62 characters (~95 bits), stored server-side and a
+ * bearer credential over exactly ONE service order of one store. It authorises
+ * the read (`GET /services/tracking?handle=`) and the current presupuesto PDF
+ * (`GET /services/tracking?handle=&mode=quote-pdf`), and nothing else. Every
+ * earlier link of an order dies when staff revoke it. A link stops reading
+ * `serviceTrackingLinkDaysAfterClose` days (platform global, default 90) after
+ * the order reached a terminal status.
+ *
+ * The gate is `ecommerce.config.serviceTracking` AND the `workshop` module on.
+ * With the gate off, staff cannot mint and the signed-in reads refuse, but a
+ * link minted earlier keeps reading (STORE_MODULES rule 4).
+ */
+/**
+ * The refusals the PUBLIC tracking routes answer themselves.
+ *
+ * - SERVICE_TRACKING_TOKEN_INVALID (401): every reason a handle cannot be
+ *   honoured — missing, malformed, unknown, revoked, past the lifetime,
+ *   presented on another store's host or with no store host at all, or naming
+ *   an order that is gone or disabled — with one identical body, so a handle is
+ *   never an oracle.
+ * - SERVICE_QUOTE_NOT_FOUND (404, `mode=quote-pdf` only): the order has no
+ *   current presupuesto a customer was sent.
+ */
+export const SERVICE_TRACKING_ERROR_CODES = ['SERVICE_TRACKING_TOKEN_INVALID', 'SERVICE_QUOTE_NOT_FOUND'];
+/**
+ * The refusals of the signed-in reads (`GET /user?mode=service-orders` and
+ * `?mode=service-order&serviceOrderId=`).
+ *
+ * - SERVICE_TRACKING_DISABLED (403): the store's gate is off.
+ * - SERVICE_ORDER_NOT_FOUND (404): no such order, a disabled one, or one that
+ *   belongs to another customer — one answer for all three.
+ */
+export const SERVICE_TRACKING_ACCOUNT_ERROR_CODES = ['SERVICE_TRACKING_DISABLED', 'SERVICE_ORDER_NOT_FOUND'];
+/**
+ * The refusals of the staff `POST /services { mode: 'trackingLink' }`, beside
+ * the router's own (`ROLE_FORBIDDEN`, `VALIDATION_FAILED`, `SERVICE_ORDER_NOT_FOUND`).
+ *
+ * - SERVICE_TRACKING_DISABLED (403, mint only): the store's gate is off.
+ * - SERVICE_TRACKING_NO_ADDRESS (409, mint only): the store has no public
+ *   storefront address to build the link on (no slug, or public links off).
+ * - SERVICE_TRACKING_LINK_LAPSED (409, mint only): the order closed more than
+ *   `serviceTrackingLinkDaysAfterClose` days ago, so a link would not read.
+ * - ADMIN_REQUIRED (403, revoke only): revoking takes ADMIN, SUPERVISOR or MANAGER.
+ */
+export const SERVICE_TRACKING_OPERATOR_ERROR_CODES = [
+    'SERVICE_TRACKING_DISABLED',
+    'SERVICE_TRACKING_NO_ADDRESS',
+    'SERVICE_TRACKING_LINK_LAPSED',
+    'ADMIN_REQUIRED',
+];
+/** `POST /services { mode: 'trackingLink' }` actions. */
+export const SERVICE_TRACKING_LINK_ACTIONS = ['mint', 'revoke'];
+/** The storefront path a tracking link opens: `/servicio/{handle}`. */
+export const SERVICE_TRACKING_PATH_PREFIX = '/servicio/';
+/** The handle's exact shape: 16 base62 characters. */
+export const SERVICE_TRACKING_HANDLE_RE = /^[0-9A-Za-z]{16}$/;

package/dist/store.d.ts

@@ -182,6 +182,19 @@ declare global {
              * frame), so the storefront can offer the request.
              */
             wholesaleRequests?: boolean;
+            /**
+             * Whether the shop's customers can follow their service orders online: the
+             * tracking link (`/servicio/{handle}`) staff mint with
+             * `POST /services { mode: 'trackingLink' }`, and the signed-in
+             * `GET /user?mode=service-orders`. Absent or `false` = off. Honoured only
+             * while the `workshop` module is on (`config.modules.workshop !== false`).
+             * Turning it off later stops new links and the signed-in reads; links
+             * already minted keep reading (STORE_MODULES rule 4). Written by
+             * `PATCH /store` (ADMIN) and `PUT /platform/stores/{storeId}` (MANAGER).
+             * SENT TO SHOPPERS as the verdict (web `GET /store` and the customer
+             * `stores` frame): stored `true` AND the workshop module on.
+             */
+            serviceTracking?: boolean;
             /**
              * Whether the shop sells to shoppers without an account (server guest
              * cart, guest checkout). Absent means ON: a shop opts out by storing
@@ -260,7 +273,7 @@ declare global {
      * (Responsable Inscripto) refuses 409 NET_PLUS_IVA_REQUIRES_RI; nothing written.
      */
     interface EcommercePatchInput {
-        config?: Pick<NonNullable<Ecommerce['config']>, 'showDefaultPriceList' | 'newCustomerPriceList' | 'registrationMode' | 'wholesaleRequests' | 'paymentHoldMinutes'> & StorefrontLiveSettingsPatch;
+        config?: Pick<NonNullable<Ecommerce['config']>, 'showDefaultPriceList' | 'newCustomerPriceList' | 'registrationMode' | 'wholesaleRequests' | 'serviceTracking' | 'paymentHoldMinutes'> & StorefrontLiveSettingsPatch;
         sidebar?: Ecommerce['sidebar'];
         home?: Omit<NonNullable<Ecommerce['home']>, 'displayOrders' | 'displayProfile'>;
         themeColors?: Ecommerce['themeColors'];

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "platform-types",
-	"version": "1.10.852",
+	"version": "1.10.853",
 	"description": "Shared wire and entity contracts for the platform.",
 	"type": "module",
 	"main": "dist/index.js",