platform-types 1.10.854 → 1.10.855

package/dist/cjs/notification.js

@@ -7,6 +7,7 @@ exports.WEB_NOTIFICATIONS_MAX_LIMIT = exports.CUSTOMER_NOTIFICATION_TYPES = expo
 // Addressed ERROR / ML_FACTURADOR_COLLISION / ML_SELLER_SWITCHED /
 // ML_CONNECTION_BROKEN / MENTION / CUSTOMER_PENDING_APPROVAL /
 // PAYMENT_ATTEMPT_RESOLUTION / CUSTOMER_WHOLESALE_REQUEST / STOREFRONT_QUOTE_REQUEST /
+// SERVICE_QUOTE_DECIDED /
 // REFUND_OBLIGATION_OVERDUE / MESSAGE_CREDITS_LOW / MESSAGE_SKIPPED_NO_CREDITS do not select a
 // producer subscriber audience;
 // the consumer still reads the live USER row for each delivery channel.
@@ -237,6 +238,24 @@ var NotificationTypeEnum;
      * socket).
      */
     NotificationTypeEnum["STOREFRONT_QUOTE_REQUEST"] = "STOREFRONT_QUOTE_REQUEST";
+    /**
+     * A customer approved or rejected a presupuesto online — by the tracking link
+     * (`POST /services/tracking/quote`) or signed in
+     * (`POST /user { mode: 'service-quote-decision' }`). The decision does not
+     * move the ticket's stage; the bell is the shop's cue to do it. Names the
+     * ticket number and the decision only — never the customer.
+     *
+     * ⚠️ ADMIN-ONLY, and its own preference key. The producer fans out to every
+     * non-disabled ADMIN of the store (`listActiveAdmins`), the same recipients
+     * as `STOREFRONT_QUOTE_REQUEST`. No legacy opt-in scan: the consumer enforces
+     * explicit type/channel preferences
+     * (`notificationPreferences.SERVICE_QUOTE_DECIDED`), default-on when absent.
+     * Additive — no backfill or consumer migration owed.
+     *
+     * ⚠️ Carries `serviceOrderRef` and NEVER a top-level `customerId` (an
+     * audience — the bell would reach the customer's own storefront socket).
+     */
+    NotificationTypeEnum["SERVICE_QUOTE_DECIDED"] = "SERVICE_QUOTE_DECIDED";
     /**
      * A refund obligation went overdue: its due date passed and the hourly
      * sweep, after reconciling the payment, still found the money owed

package/dist/cjs/serviceOrder.js

@@ -305,6 +305,11 @@ exports.SERVICE_ORDER_ERROR_CODES = [
     'SERVICE_TRACKING_DISABLED',
     'SERVICE_TRACKING_NO_ADDRESS',
     'SERVICE_TRACKING_LINK_LAPSED',
+    // The customer's online quote decision (`_customerDecision.ts`, shared by the
+    // web routes) — see `SERVICE_TRACKING_DECISION_ERROR_CODES`
+    'SERVICE_TRACKING_VERIFICATION_FAILED',
+    // A tracking link revoked between the handle check and the decision's commit.
+    'SERVICE_TRACKING_TOKEN_INVALID',
     'ADMIN_REQUIRED',
     'CUSTODY_ILLEGAL_TRANSITION',
     'SERVICE_ORDER_BILLABLE_FROZEN',

package/dist/cjs/serviceTracking.js

@@ -6,18 +6,24 @@
  *
  * The HANDLE is 16 base62 characters (~95 bits), stored server-side and a
  * bearer credential over exactly ONE service order of one store. It authorises
- * the read (`GET /services/tracking?handle=`) and the current presupuesto PDF
- * (`GET /services/tracking?handle=&mode=quote-pdf`), and nothing else. Every
+ * the read (`GET /services/tracking?handle=`), the current presupuesto PDF
+ * (`GET /services/tracking?handle=&mode=quote-pdf`) and the online decision on
+ * that presupuesto, and nothing else. Every
  * earlier link of an order dies when staff revoke it. A link stops reading
  * `serviceTrackingLinkDaysAfterClose` days (platform global, default 90) after
  * the order reached a terminal status.
  *
+ * With the gate on, the customer may also approve (with a 6-digit code sent to
+ * the contact on file) or reject the current presupuesto
+ * (`POST /services/tracking/quote`, or signed in
+ * `POST /user { mode: 'service-quote-decision' }`).
+ *
  * The gate is `ecommerce.config.serviceTracking` AND the `workshop` module on.
  * With the gate off, staff cannot mint and the signed-in reads refuse, but a
  * link minted earlier keeps reading (STORE_MODULES rule 4).
  */
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.SERVICE_TRACKING_HANDLE_RE = exports.SERVICE_TRACKING_PATH_PREFIX = exports.SERVICE_TRACKING_LINK_ACTIONS = exports.SERVICE_TRACKING_OPERATOR_ERROR_CODES = exports.SERVICE_TRACKING_ACCOUNT_ERROR_CODES = exports.SERVICE_TRACKING_ERROR_CODES = void 0;
+exports.SERVICE_TRACKING_HANDLE_RE = exports.SERVICE_TRACKING_PATH_PREFIX = exports.SERVICE_TRACKING_LINK_ACTIONS = exports.SERVICE_TRACKING_CODE_RE = exports.SERVICE_TRACKING_CHALLENGE_HANDLE_RE = exports.SERVICE_TRACKING_QUOTE_DECISIONS = exports.SERVICE_TRACKING_CODE_VIAS = exports.SERVICE_TRACKING_DECISION_ERROR_CODES = exports.SERVICE_TRACKING_OPERATOR_ERROR_CODES = exports.SERVICE_TRACKING_ACCOUNT_ERROR_CODES = exports.SERVICE_TRACKING_ERROR_CODES = void 0;
 /**
  * The refusals the PUBLIC tracking routes answer themselves.
  *
@@ -56,6 +62,53 @@ exports.SERVICE_TRACKING_OPERATOR_ERROR_CODES = [
     'SERVICE_TRACKING_LINK_LAPSED',
     'ADMIN_REQUIRED',
 ];
+/**
+ * The refusals of the customer's online quote decision — by link
+ * (`POST /services/tracking/code`, `POST /services/tracking/quote`) and signed in
+ * (`POST /user { mode: 'service-quote-decision' }`).
+ *
+ * - SERVICE_TRACKING_TOKEN_INVALID (401, link only): the handle cannot be
+ *   honoured — the same one body as the read.
+ * - SERVICE_TRACKING_VERIFICATION_FAILED (401, link approve only): no code, a
+ *   wrong, used, expired or burnt one, or a challenge minted for another order.
+ *   One body for every reason.
+ * - SERVICE_TRACKING_DISABLED (403): the store's gate is off. The read keeps working.
+ * - SERVICE_ORDER_NOT_FOUND (404, signed in only): no such order, a disabled
+ *   one, or another customer's — one body.
+ * - SERVICE_QUOTE_NOT_FOUND (404): no version with that `quoteId`.
+ * - SERVICE_QUOTE_SUPERSEDED (409): a newer version replaced it.
+ * - SERVICE_QUOTE_ALREADY_RESOLVED (409): it already carries the OTHER decision
+ *   (the same decision again answers 200 with the current view and writes nothing).
+ * - SERVICE_QUOTE_LAPSED (409, approve only): past `expiresAt`. A rejection is
+ *   still accepted.
+ * - SERVICE_ORDER_QUOTE_CHANGED (409): the order moved under the decision — retry.
+ * - SERVICE_ORDER_TERMINAL / SERVICE_ORDER_DISABLED (409): the ticket is closed
+ *   or deleted.
+ * - SERVICE_QUOTE_HOLDS_TOO_MANY (400, approve only): the version's parts cannot
+ *   be reserved in one write; the shop must re-quote.
+ */
+exports.SERVICE_TRACKING_DECISION_ERROR_CODES = [
+    'SERVICE_TRACKING_TOKEN_INVALID',
+    'SERVICE_TRACKING_VERIFICATION_FAILED',
+    'SERVICE_TRACKING_DISABLED',
+    'SERVICE_ORDER_NOT_FOUND',
+    'SERVICE_QUOTE_NOT_FOUND',
+    'SERVICE_QUOTE_SUPERSEDED',
+    'SERVICE_QUOTE_ALREADY_RESOLVED',
+    'SERVICE_QUOTE_LAPSED',
+    'SERVICE_ORDER_QUOTE_CHANGED',
+    'SERVICE_ORDER_TERMINAL',
+    'SERVICE_ORDER_DISABLED',
+    'SERVICE_QUOTE_HOLDS_TOO_MANY',
+];
+/** Where the 6-digit decision code is sent: the phone or the email on file. */
+exports.SERVICE_TRACKING_CODE_VIAS = ['sms', 'email'];
+/** The customer's two online answers to a presupuesto. */
+exports.SERVICE_TRACKING_QUOTE_DECISIONS = ['approve', 'reject'];
+/** A decision challenge handle: 16 random bytes, base64url (22 characters). */
+exports.SERVICE_TRACKING_CHALLENGE_HANDLE_RE = /^[\w-]{22}$/;
+/** The decision code: 6 digits. */
+exports.SERVICE_TRACKING_CODE_RE = /^\d{6}$/;
 /** `POST /services { mode: 'trackingLink' }` actions. */
 exports.SERVICE_TRACKING_LINK_ACTIONS = ['mint', 'revoke'];
 /** The storefront path a tracking link opens: `/servicio/{handle}`. */

package/dist/notification.d.ts

@@ -214,6 +214,24 @@ export declare enum NotificationTypeEnum {
      * socket).
      */
     STOREFRONT_QUOTE_REQUEST = "STOREFRONT_QUOTE_REQUEST",
+    /**
+     * A customer approved or rejected a presupuesto online — by the tracking link
+     * (`POST /services/tracking/quote`) or signed in
+     * (`POST /user { mode: 'service-quote-decision' }`). The decision does not
+     * move the ticket's stage; the bell is the shop's cue to do it. Names the
+     * ticket number and the decision only — never the customer.
+     *
+     * ⚠️ ADMIN-ONLY, and its own preference key. The producer fans out to every
+     * non-disabled ADMIN of the store (`listActiveAdmins`), the same recipients
+     * as `STOREFRONT_QUOTE_REQUEST`. No legacy opt-in scan: the consumer enforces
+     * explicit type/channel preferences
+     * (`notificationPreferences.SERVICE_QUOTE_DECIDED`), default-on when absent.
+     * Additive — no backfill or consumer migration owed.
+     *
+     * ⚠️ Carries `serviceOrderRef` and NEVER a top-level `customerId` (an
+     * audience — the bell would reach the customer's own storefront socket).
+     */
+    SERVICE_QUOTE_DECIDED = "SERVICE_QUOTE_DECIDED",
     /**
      * A refund obligation went overdue: its due date passed and the hourly
      * sweep, after reconciling the payment, still found the money owed
@@ -383,6 +401,11 @@ declare global {
          * an audience — see {@link QuoteRequestRef}. Operator surfaces only.
          */
         quoteRequestRef?: QuoteRequestRef;
+        /**
+         * `SERVICE_QUOTE_DECIDED` only: which service order to open. A POINTER, not
+         * an audience — see {@link ServiceOrderRef}. Operator surfaces only.
+         */
+        serviceOrderRef?: ServiceOrderRef;
         /** `MENTION` only: the colleague who wrote the mention (a snapshot). */
         actor?: NotificationActor;
         userId?: string;
@@ -446,7 +469,7 @@ declare global {
      * customer socket carry — the stored row minus the operator-only pointers.
      * A union keyed on `type`; `ORDER` is its only member today.
      */
-    type CustomerNotification = Omit<NotificationInterface, 'cartRef' | 'pendingCustomerRef' | 'wholesaleRequestRef' | 'quoteRequestRef' | 'TableName' | 'type' | 'orderId'> & {
+    type CustomerNotification = Omit<NotificationInterface, 'cartRef' | 'pendingCustomerRef' | 'wholesaleRequestRef' | 'quoteRequestRef' | 'serviceOrderRef' | 'TableName' | 'type' | 'orderId'> & {
         type: NotificationTypeEnum.ORDER;
         /** Set on every customer row: the order the bell is about. */
         orderId: string;

package/dist/notification.js

@@ -4,6 +4,7 @@
 // Addressed ERROR / ML_FACTURADOR_COLLISION / ML_SELLER_SWITCHED /
 // ML_CONNECTION_BROKEN / MENTION / CUSTOMER_PENDING_APPROVAL /
 // PAYMENT_ATTEMPT_RESOLUTION / CUSTOMER_WHOLESALE_REQUEST / STOREFRONT_QUOTE_REQUEST /
+// SERVICE_QUOTE_DECIDED /
 // REFUND_OBLIGATION_OVERDUE / MESSAGE_CREDITS_LOW / MESSAGE_SKIPPED_NO_CREDITS do not select a
 // producer subscriber audience;
 // the consumer still reads the live USER row for each delivery channel.
@@ -234,6 +235,24 @@ export var NotificationTypeEnum;
      * socket).
      */
     NotificationTypeEnum["STOREFRONT_QUOTE_REQUEST"] = "STOREFRONT_QUOTE_REQUEST";
+    /**
+     * A customer approved or rejected a presupuesto online — by the tracking link
+     * (`POST /services/tracking/quote`) or signed in
+     * (`POST /user { mode: 'service-quote-decision' }`). The decision does not
+     * move the ticket's stage; the bell is the shop's cue to do it. Names the
+     * ticket number and the decision only — never the customer.
+     *
+     * ⚠️ ADMIN-ONLY, and its own preference key. The producer fans out to every
+     * non-disabled ADMIN of the store (`listActiveAdmins`), the same recipients
+     * as `STOREFRONT_QUOTE_REQUEST`. No legacy opt-in scan: the consumer enforces
+     * explicit type/channel preferences
+     * (`notificationPreferences.SERVICE_QUOTE_DECIDED`), default-on when absent.
+     * Additive — no backfill or consumer migration owed.
+     *
+     * ⚠️ Carries `serviceOrderRef` and NEVER a top-level `customerId` (an
+     * audience — the bell would reach the customer's own storefront socket).
+     */
+    NotificationTypeEnum["SERVICE_QUOTE_DECIDED"] = "SERVICE_QUOTE_DECIDED";
     /**
      * A refund obligation went overdue: its due date passed and the hourly
      * sweep, after reconciling the payment, still found the money owed

package/dist/serviceOrder.d.ts

@@ -361,14 +361,13 @@ declare global {
     /**
      * How the customer's decision on a quote reached the shop.
      *
-     * ⚠️ `'portal'` is RESERVED and must not be offered to an operator. The other
-     * four are things an operator records second-hand; `'portal'` means the
-     * customer approved it themselves, and no customer-facing service endpoint
-     * exists on any gateway yet — so an operator selecting it would be recording
-     * an event that did not happen. The api rejects it: it is excluded from the
-     * `POST /services` quote-resolve enum and returns 400. It stays in the union
-     * so rows already carrying it still read back, and so the value is ready the
-     * day a customer portal ships. Filter it out of any channel picker.
+     * ⚠️ `'portal'` is stamped ONLY by the customer's own decision — the tracking
+     * link (`POST /services/tracking/quote`) or the signed-in account
+     * (`POST /user { mode: 'service-quote-decision' }`). The other four are
+     * things an operator records second-hand; an operator selecting `'portal'`
+     * would be recording an event that did not happen, so staff
+     * `POST /services` quote-resolve still refuses it with
+     * `400 SERVICE_QUOTE_CHANNEL_RESERVED`. Filter it out of any channel picker.
      */
     type ServiceQuoteChannel = 'in_person' | 'phone' | 'whatsapp' | 'email' | 'portal';
     /**
@@ -404,11 +403,14 @@ declare global {
      * while an approval recorded all three, so a quote history could show who
      * approved a version and nothing at all for a rejected one.
      *
-     * No `channel`: a channel describes how an APPROVAL reached the shop, and
-     * there is no approval here.
+     * `channel` is set ONLY to `'portal'`, when the customer refused the version
+     * themselves; absent means an operator recorded it.
      */
     interface ServiceQuoteRejection {
-        /** userId of the operator who recorded it. Server-stamped, never from the body. */
+        /**
+         * userId of the operator who recorded it, or the customerId who refused it
+         * online (`channel: 'portal'`). Server-stamped, never from the body.
+         */
         by: string;
         /** Unix ms. Server-stamped. */
         at: number;
@@ -419,7 +421,19 @@ declare global {
          * constancia — those are statutory documents that go to a customer.
          */
         note?: string;
+        /** `'portal'`: the customer refused it online. Absent: an operator recorded it. */
+        channel?: 'portal';
+        /**
+         * The customer's display name when they decided online — a snapshot for the
+         * evidence. Cleared by the customer's erasure.
+         */
+        byName?: string;
     }
+    /**
+     * How a customer who decided online proved they were the contact on file:
+     * the 6-digit code sent by SMS or by email, or their signed-in session.
+     */
+    type ServiceQuoteVerifiedBy = 'sms_code' | 'email_code' | 'session';
     /**
      * A customer decision on a quote version, recorded as an event rather than a
      * boolean so that who/when/how survives a re-quote.
@@ -430,6 +444,13 @@ declare global {
         /** Unix ms. */
         at: number;
         channel: ServiceQuoteChannel;
+        /** `channel: 'portal'` only: how the customer proved they were the contact on file. */
+        verifiedBy?: ServiceQuoteVerifiedBy;
+        /**
+         * `channel: 'portal'` only: the customer's display name at decision time — a
+         * snapshot for the evidence. Cleared by the customer's erasure.
+         */
+        byName?: string;
     }
     /**
      * One version of the presupuesto. `ServiceOrder.quote` is the full ordered
@@ -1531,6 +1552,6 @@ export declare const MAX_SERVICE_PICTURES = 20;
  * check `GATING_ERROR_CODES` in addition. The deposit's opt-in idempotency
  * refusals are included here.
  */
-export declare const SERVICE_ORDER_ERROR_CODES: readonly ["UNIT_QUANTITY_NOT_WHOLE", "UNIT_REVISION_STALE", "ROLE_FORBIDDEN", "PARENT_FILTER_CONFLICT", "VALIDATION_FAILED", "INVALID_CURSOR", "INVALID_FROM_DATE", "INVALID_TO_DATE", "INVALID_DATE_RANGE", "REWORK_INDEX_UNAVAILABLE", "STORE_NOT_FOUND", "SERVICE_ORDER_NOT_FOUND", "PRINT_JOB_DOCUMENT_NOT_FOUND", "CUSTOMER_NOT_FOUND", "PARENT_SERVICE_ORDER_NOT_FOUND", "SERVICE_TEMPLATE_NOT_FOUND", "SERVICE_TYPE_REQUIRED", "INVALID_IMAGE_REFERENCE", "MISSING_STORE_CONTEXT", "WARRANTY_BELOW_LEGAL_MINIMUM", "TECHNICIAN_NOT_FOUND", "TECHNICIAN_NOT_ELIGIBLE", "SERVICE_TRACKING_DISABLED", "SERVICE_TRACKING_NO_ADDRESS", "SERVICE_TRACKING_LINK_LAPSED", "ADMIN_REQUIRED", "CUSTODY_ILLEGAL_TRANSITION", "SERVICE_ORDER_BILLABLE_FROZEN", "SERVICE_ORDER_EDIT_CHANGED", "SERVICE_ORDER_DISABLED_STATE_UNCHANGED", "APPOINTMENT_NOT_FOUND", "APPOINTMENT_NOT_LINKABLE", "APPOINTMENT_NOT_OPEN", "APPOINTMENT_CUSTOMER_MISMATCH", "APPOINTMENT_VERSION_CONFLICT", "SERVICE_ORDER_TERMINAL", "SERVICE_ORDER_DISABLED", "SERVICE_ORDER_ILLEGAL_TRANSITION", "SERVICE_ORDER_STATUS_CHANGED", "SERVICE_ORDER_OUTCOME_REQUIRED", "SERVICE_ORDER_OUTCOME_NOT_ALLOWED", "SERVICE_ORDER_CUSTODY_NOT_RECEIVED", "SERVICE_ORDER_BILLABLE_NOT_AT_THIS_TRANSITION", "PAYMENT_METHODS_NOT_CONFIGURED", "PAYMENT_METHOD_NOT_FOUND", "SERVICE_ORDER_DEPOSIT_CHANGED", "INVALID_IDEMPOTENCY_KEY", "IDEMPOTENCY_KEY_REUSE", "IDEMPOTENCY_IN_PROGRESS", "IDEMPOTENCY_KEY_FAILED", "IDEMPOTENCY_LOCK_CONTENTION", "SERVICE_DEPOSIT_CURRENCY_MISMATCH", "SERVICE_DEPOSIT_INVALID", "INVALID_AMOUNT", "DEFAULT_DRAWER_UNAVAILABLE", "CURRENCY_MISMATCH", "SHIFT_NOT_OPEN", "SERVICE_BILLING_PRODUCTS_UNAVAILABLE", "CATEGORY_NOT_FOUND", "CATEGORY_DISABLED", "CATEGORY_DISABLE_IN_PROGRESS", "SERVICE_BILLING_PRODUCT_IN_BASKET", "SERVICE_DELIVERY_BASKET_DECISION_REQUIRED", "SERVICE_DELIVERY_BASKET_CURRENCY_MISMATCH", "PRODUCT_NOT_AVAILABLE", "PRODUCT_SALE_LIMIT_EXCEEDED", "PRODUCT_SALE_LIMIT_INVALID", "FX_CONVERSION_UNAVAILABLE", "TRANSACT_ITEMS_LIMIT_EXCEEDED", "SERVICE_LINE_PRICE_TOO_LARGE", "SERVICE_PARTS_RESTORE_EXCEEDS_CONSUMED", "SERVICE_PARTS_RESTORE_EXCEEDS_AMOUNT", "SERVICE_PARTS_STOCK_INSUFFICIENT", "SERVICE_PARTS_PRODUCT_NOT_FOUND", "SERVICE_PARTS_LEDGER_FULL", "SERVICE_PARTS_TOO_MANY", "SERVICE_ORDER_PARTS_CHANGED", "SERVICE_QUOTE_NOT_FOUND", "SERVICE_QUOTE_NOT_OFFERABLE", "SERVICE_QUOTE_HOLDS_TOO_MANY", "SERVICE_QUOTE_SUPERSEDED", "SERVICE_QUOTE_ALREADY_RESOLVED", "SERVICE_QUOTE_LAPSED", "SERVICE_QUOTE_CHANNEL_RESERVED", "SERVICE_QUOTE_CHANNEL_NOT_APPLICABLE", "SERVICE_QUOTE_REASON_NOT_APPLICABLE", "SERVICE_ORDER_QUOTE_CHANGED", "SERVICE_ORDER_NOT_READY", "SERVICE_RENOTIFY_IMPERSONATED", "SERVICE_RENOTIFY_TOO_SOON", "SERVICE_RENOTIFY_CONFLICT", "SERVICE_RENOTIFY_NOT_RECORDED", "SERVICE_RENOTIFY_LEDGER_UNREADABLE", "SERVICE_RENOTIFY_NOT_DISPATCHED", "SERVICE_TIMER_ALREADY_RUNNING", "SERVICE_TIMER_NOT_RUNNING", "SERVICE_TIMER_STOP_CONFLICT", "TECHNICIAN_NOT_CLOCKED_IN", "SERVICE_ORDER_GONE", "SERVICE_WORKLOG_NOT_FOUND", "SERVICE_WORKLOG_NOT_REVERSIBLE", "SERVICE_WORKLOG_ALREADY_REVERSED", "SERVICE_ORDER_WORKLOG_CHANGED", "CART_PROMOTION_UNAVAILABLE", "COUPON_NOT_FOUND", "COUPON_NOT_ACTIVE", "COUPON_EXPIRED", "COUPON_EXHAUSTED", "COUPON_EXHAUSTED_AT_CHECKOUT", "COUPON_MIN_SUBTOTAL", "COUPON_REQUIRES_CUSTOMER", "COUPON_BUDGET_EXHAUSTED", "COUPON_CURRENCY_MISMATCH"];
+export declare const SERVICE_ORDER_ERROR_CODES: readonly ["UNIT_QUANTITY_NOT_WHOLE", "UNIT_REVISION_STALE", "ROLE_FORBIDDEN", "PARENT_FILTER_CONFLICT", "VALIDATION_FAILED", "INVALID_CURSOR", "INVALID_FROM_DATE", "INVALID_TO_DATE", "INVALID_DATE_RANGE", "REWORK_INDEX_UNAVAILABLE", "STORE_NOT_FOUND", "SERVICE_ORDER_NOT_FOUND", "PRINT_JOB_DOCUMENT_NOT_FOUND", "CUSTOMER_NOT_FOUND", "PARENT_SERVICE_ORDER_NOT_FOUND", "SERVICE_TEMPLATE_NOT_FOUND", "SERVICE_TYPE_REQUIRED", "INVALID_IMAGE_REFERENCE", "MISSING_STORE_CONTEXT", "WARRANTY_BELOW_LEGAL_MINIMUM", "TECHNICIAN_NOT_FOUND", "TECHNICIAN_NOT_ELIGIBLE", "SERVICE_TRACKING_DISABLED", "SERVICE_TRACKING_NO_ADDRESS", "SERVICE_TRACKING_LINK_LAPSED", "SERVICE_TRACKING_VERIFICATION_FAILED", "SERVICE_TRACKING_TOKEN_INVALID", "ADMIN_REQUIRED", "CUSTODY_ILLEGAL_TRANSITION", "SERVICE_ORDER_BILLABLE_FROZEN", "SERVICE_ORDER_EDIT_CHANGED", "SERVICE_ORDER_DISABLED_STATE_UNCHANGED", "APPOINTMENT_NOT_FOUND", "APPOINTMENT_NOT_LINKABLE", "APPOINTMENT_NOT_OPEN", "APPOINTMENT_CUSTOMER_MISMATCH", "APPOINTMENT_VERSION_CONFLICT", "SERVICE_ORDER_TERMINAL", "SERVICE_ORDER_DISABLED", "SERVICE_ORDER_ILLEGAL_TRANSITION", "SERVICE_ORDER_STATUS_CHANGED", "SERVICE_ORDER_OUTCOME_REQUIRED", "SERVICE_ORDER_OUTCOME_NOT_ALLOWED", "SERVICE_ORDER_CUSTODY_NOT_RECEIVED", "SERVICE_ORDER_BILLABLE_NOT_AT_THIS_TRANSITION", "PAYMENT_METHODS_NOT_CONFIGURED", "PAYMENT_METHOD_NOT_FOUND", "SERVICE_ORDER_DEPOSIT_CHANGED", "INVALID_IDEMPOTENCY_KEY", "IDEMPOTENCY_KEY_REUSE", "IDEMPOTENCY_IN_PROGRESS", "IDEMPOTENCY_KEY_FAILED", "IDEMPOTENCY_LOCK_CONTENTION", "SERVICE_DEPOSIT_CURRENCY_MISMATCH", "SERVICE_DEPOSIT_INVALID", "INVALID_AMOUNT", "DEFAULT_DRAWER_UNAVAILABLE", "CURRENCY_MISMATCH", "SHIFT_NOT_OPEN", "SERVICE_BILLING_PRODUCTS_UNAVAILABLE", "CATEGORY_NOT_FOUND", "CATEGORY_DISABLED", "CATEGORY_DISABLE_IN_PROGRESS", "SERVICE_BILLING_PRODUCT_IN_BASKET", "SERVICE_DELIVERY_BASKET_DECISION_REQUIRED", "SERVICE_DELIVERY_BASKET_CURRENCY_MISMATCH", "PRODUCT_NOT_AVAILABLE", "PRODUCT_SALE_LIMIT_EXCEEDED", "PRODUCT_SALE_LIMIT_INVALID", "FX_CONVERSION_UNAVAILABLE", "TRANSACT_ITEMS_LIMIT_EXCEEDED", "SERVICE_LINE_PRICE_TOO_LARGE", "SERVICE_PARTS_RESTORE_EXCEEDS_CONSUMED", "SERVICE_PARTS_RESTORE_EXCEEDS_AMOUNT", "SERVICE_PARTS_STOCK_INSUFFICIENT", "SERVICE_PARTS_PRODUCT_NOT_FOUND", "SERVICE_PARTS_LEDGER_FULL", "SERVICE_PARTS_TOO_MANY", "SERVICE_ORDER_PARTS_CHANGED", "SERVICE_QUOTE_NOT_FOUND", "SERVICE_QUOTE_NOT_OFFERABLE", "SERVICE_QUOTE_HOLDS_TOO_MANY", "SERVICE_QUOTE_SUPERSEDED", "SERVICE_QUOTE_ALREADY_RESOLVED", "SERVICE_QUOTE_LAPSED", "SERVICE_QUOTE_CHANNEL_RESERVED", "SERVICE_QUOTE_CHANNEL_NOT_APPLICABLE", "SERVICE_QUOTE_REASON_NOT_APPLICABLE", "SERVICE_ORDER_QUOTE_CHANGED", "SERVICE_ORDER_NOT_READY", "SERVICE_RENOTIFY_IMPERSONATED", "SERVICE_RENOTIFY_TOO_SOON", "SERVICE_RENOTIFY_CONFLICT", "SERVICE_RENOTIFY_NOT_RECORDED", "SERVICE_RENOTIFY_LEDGER_UNREADABLE", "SERVICE_RENOTIFY_NOT_DISPATCHED", "SERVICE_TIMER_ALREADY_RUNNING", "SERVICE_TIMER_NOT_RUNNING", "SERVICE_TIMER_STOP_CONFLICT", "TECHNICIAN_NOT_CLOCKED_IN", "SERVICE_ORDER_GONE", "SERVICE_WORKLOG_NOT_FOUND", "SERVICE_WORKLOG_NOT_REVERSIBLE", "SERVICE_WORKLOG_ALREADY_REVERSED", "SERVICE_ORDER_WORKLOG_CHANGED", "CART_PROMOTION_UNAVAILABLE", "COUPON_NOT_FOUND", "COUPON_NOT_ACTIVE", "COUPON_EXPIRED", "COUPON_EXHAUSTED", "COUPON_EXHAUSTED_AT_CHECKOUT", "COUPON_MIN_SUBTOTAL", "COUPON_REQUIRES_CUSTOMER", "COUPON_BUDGET_EXHAUSTED", "COUPON_CURRENCY_MISMATCH"];
 export type ServiceOrderErrorCode = (typeof SERVICE_ORDER_ERROR_CODES)[number];
 export {};

package/dist/serviceOrder.js

@@ -302,6 +302,11 @@ export const SERVICE_ORDER_ERROR_CODES = [
     'SERVICE_TRACKING_DISABLED',
     'SERVICE_TRACKING_NO_ADDRESS',
     'SERVICE_TRACKING_LINK_LAPSED',
+    // The customer's online quote decision (`_customerDecision.ts`, shared by the
+    // web routes) — see `SERVICE_TRACKING_DECISION_ERROR_CODES`
+    'SERVICE_TRACKING_VERIFICATION_FAILED',
+    // A tracking link revoked between the handle check and the decision's commit.
+    'SERVICE_TRACKING_TOKEN_INVALID',
     'ADMIN_REQUIRED',
     'CUSTODY_ILLEGAL_TRANSITION',
     'SERVICE_ORDER_BILLABLE_FROZEN',

package/dist/serviceTracking.d.ts

@@ -5,12 +5,18 @@
  *
  * The HANDLE is 16 base62 characters (~95 bits), stored server-side and a
  * bearer credential over exactly ONE service order of one store. It authorises
- * the read (`GET /services/tracking?handle=`) and the current presupuesto PDF
- * (`GET /services/tracking?handle=&mode=quote-pdf`), and nothing else. Every
+ * the read (`GET /services/tracking?handle=`), the current presupuesto PDF
+ * (`GET /services/tracking?handle=&mode=quote-pdf`) and the online decision on
+ * that presupuesto, and nothing else. Every
  * earlier link of an order dies when staff revoke it. A link stops reading
  * `serviceTrackingLinkDaysAfterClose` days (platform global, default 90) after
  * the order reached a terminal status.
  *
+ * With the gate on, the customer may also approve (with a 6-digit code sent to
+ * the contact on file) or reject the current presupuesto
+ * (`POST /services/tracking/quote`, or signed in
+ * `POST /user { mode: 'service-quote-decision' }`).
+ *
  * The gate is `ecommerce.config.serviceTracking` AND the `workshop` module on.
  * With the gate off, staff cannot mint and the signed-in reads refuse, but a
  * link minted earlier keeps reading (STORE_MODULES rule 4).
@@ -51,6 +57,41 @@ export type ServiceTrackingAccountErrorCode = (typeof SERVICE_TRACKING_ACCOUNT_E
  */
 export declare const SERVICE_TRACKING_OPERATOR_ERROR_CODES: readonly ["SERVICE_TRACKING_DISABLED", "SERVICE_TRACKING_NO_ADDRESS", "SERVICE_TRACKING_LINK_LAPSED", "ADMIN_REQUIRED"];
 export type ServiceTrackingOperatorErrorCode = (typeof SERVICE_TRACKING_OPERATOR_ERROR_CODES)[number];
+/**
+ * The refusals of the customer's online quote decision — by link
+ * (`POST /services/tracking/code`, `POST /services/tracking/quote`) and signed in
+ * (`POST /user { mode: 'service-quote-decision' }`).
+ *
+ * - SERVICE_TRACKING_TOKEN_INVALID (401, link only): the handle cannot be
+ *   honoured — the same one body as the read.
+ * - SERVICE_TRACKING_VERIFICATION_FAILED (401, link approve only): no code, a
+ *   wrong, used, expired or burnt one, or a challenge minted for another order.
+ *   One body for every reason.
+ * - SERVICE_TRACKING_DISABLED (403): the store's gate is off. The read keeps working.
+ * - SERVICE_ORDER_NOT_FOUND (404, signed in only): no such order, a disabled
+ *   one, or another customer's — one body.
+ * - SERVICE_QUOTE_NOT_FOUND (404): no version with that `quoteId`.
+ * - SERVICE_QUOTE_SUPERSEDED (409): a newer version replaced it.
+ * - SERVICE_QUOTE_ALREADY_RESOLVED (409): it already carries the OTHER decision
+ *   (the same decision again answers 200 with the current view and writes nothing).
+ * - SERVICE_QUOTE_LAPSED (409, approve only): past `expiresAt`. A rejection is
+ *   still accepted.
+ * - SERVICE_ORDER_QUOTE_CHANGED (409): the order moved under the decision — retry.
+ * - SERVICE_ORDER_TERMINAL / SERVICE_ORDER_DISABLED (409): the ticket is closed
+ *   or deleted.
+ * - SERVICE_QUOTE_HOLDS_TOO_MANY (400, approve only): the version's parts cannot
+ *   be reserved in one write; the shop must re-quote.
+ */
+export declare const SERVICE_TRACKING_DECISION_ERROR_CODES: readonly ["SERVICE_TRACKING_TOKEN_INVALID", "SERVICE_TRACKING_VERIFICATION_FAILED", "SERVICE_TRACKING_DISABLED", "SERVICE_ORDER_NOT_FOUND", "SERVICE_QUOTE_NOT_FOUND", "SERVICE_QUOTE_SUPERSEDED", "SERVICE_QUOTE_ALREADY_RESOLVED", "SERVICE_QUOTE_LAPSED", "SERVICE_ORDER_QUOTE_CHANGED", "SERVICE_ORDER_TERMINAL", "SERVICE_ORDER_DISABLED", "SERVICE_QUOTE_HOLDS_TOO_MANY"];
+export type ServiceTrackingDecisionErrorCode = (typeof SERVICE_TRACKING_DECISION_ERROR_CODES)[number];
+/** Where the 6-digit decision code is sent: the phone or the email on file. */
+export declare const SERVICE_TRACKING_CODE_VIAS: readonly ["sms", "email"];
+/** The customer's two online answers to a presupuesto. */
+export declare const SERVICE_TRACKING_QUOTE_DECISIONS: readonly ["approve", "reject"];
+/** A decision challenge handle: 16 random bytes, base64url (22 characters). */
+export declare const SERVICE_TRACKING_CHALLENGE_HANDLE_RE: RegExp;
+/** The decision code: 6 digits. */
+export declare const SERVICE_TRACKING_CODE_RE: RegExp;
 /** `POST /services { mode: 'trackingLink' }` actions. */
 export declare const SERVICE_TRACKING_LINK_ACTIONS: readonly ["mint", "revoke"];
 /** The storefront path a tracking link opens: `/servicio/{handle}`. */
@@ -148,11 +189,73 @@ declare global {
     }
     /** Whether the customer may decide the presupuesto online. */
     interface ServiceTrackingDecision {
-        /** `false` until the online decision ships. */
+        /**
+         * `true` when the store's gate is on, the order is open and not deleted,
+         * and the current presupuesto is `sent` (awaiting an answer). A lapsed one
+         * stays decidable: it can still be rejected (an approval answers
+         * `409 SERVICE_QUOTE_LAPSED`).
+         */
         canDecide: boolean;
-        /** Whether an approval needs the 6-digit code sent to the contact on file. */
+        /**
+         * Whether an approval needs the 6-digit code sent to the contact on file:
+         * `true` on the link, `false` signed in (the session is the proof).
+         */
         approveNeedsCode: boolean;
     }
+    type ServiceTrackingCodeVia = (typeof SERVICE_TRACKING_CODE_VIAS)[number];
+    type ServiceTrackingQuoteDecision = (typeof SERVICE_TRACKING_QUOTE_DECISIONS)[number];
+    /**
+     * `POST /services/tracking/code` body (strict): send the 6-digit decision code
+     * to the phone (`sms`) or the email ON FILE for the order's customer — never
+     * to an address in the request. Always `202 { challengeHandle }` once the
+     * handle is honoured and the gate is on, whether or not a code could be sent
+     * (no contact for that channel, a spent daily budget): the page offers only
+     * the channels whose masked contact it shows. The code lives
+     * `CUSTOMER_OTP_LIMITS.ttlSeconds` and takes `maxAttempts` tries.
+     */
+    interface ServiceTrackingCodeRequest {
+        handle: string;
+        via: ServiceTrackingCodeVia;
+    }
+    /** `POST /services/tracking/code` `data`. */
+    interface ServiceTrackingCodeResult {
+        /** 22 characters; sent back with the code on the approval. */
+        challengeHandle: string;
+    }
+    /**
+     * `POST /services/tracking/quote` body (strict): the customer's answer to the
+     * current presupuesto, by link. `quoteId` plus the order's own state are the
+     * concurrency check — there is no `version`.
+     *
+     * - `approve` needs `challengeHandle` + `code` (from `POST /services/tracking/code`);
+     *   `reason` is refused.
+     * - `reject` needs `reason` only, and is accepted past `expiresAt`.
+     *
+     * Answers `200` with the current `ServiceTrackingView`. The same decision again
+     * on the same `quoteId` answers `200` with the view and writes nothing. The
+     * decision does NOT move the order's stage; the shop does.
+     */
+    interface ServiceTrackingQuoteDecisionRequest {
+        handle: string;
+        quoteId: string;
+        decision: ServiceTrackingQuoteDecision;
+        reason?: ServiceQuoteRejectionReason;
+        challengeHandle?: string;
+        code?: string;
+    }
+    /**
+     * `POST /user { mode: 'service-quote-decision' }` body: the same answer by the
+     * signed-in owner of the order (`verifiedBy: 'session'`, no code). Another
+     * customer's `serviceOrderId` answers the same `404 SERVICE_ORDER_NOT_FOUND`
+     * as a missing one. Answers `200` with the current `ServiceTrackingView`.
+     */
+    interface ServiceQuoteDecisionAccountRequest {
+        mode: 'service-quote-decision';
+        serviceOrderId: string;
+        quoteId: string;
+        decision: ServiceTrackingQuoteDecision;
+        reason?: ServiceQuoteRejectionReason;
+    }
     /** The customer's contact as the shop holds it, masked. */
     interface ServiceTrackingContact {
         firstName: string;
@@ -196,6 +299,10 @@ declare global {
         contact: ServiceTrackingContact;
         store: ServiceTrackingStore;
     }
+    /** What a `SERVICE_QUOTE_DECIDED` operator bell points at. */
+    interface ServiceOrderRef {
+        serviceOrderId: string;
+    }
     /** One row of `GET /user?mode=service-orders`. */
     interface ServiceTrackingAccountListItem {
         serviceOrderId: string;

package/dist/serviceTracking.js

@@ -5,12 +5,18 @@
  *
  * The HANDLE is 16 base62 characters (~95 bits), stored server-side and a
  * bearer credential over exactly ONE service order of one store. It authorises
- * the read (`GET /services/tracking?handle=`) and the current presupuesto PDF
- * (`GET /services/tracking?handle=&mode=quote-pdf`), and nothing else. Every
+ * the read (`GET /services/tracking?handle=`), the current presupuesto PDF
+ * (`GET /services/tracking?handle=&mode=quote-pdf`) and the online decision on
+ * that presupuesto, and nothing else. Every
  * earlier link of an order dies when staff revoke it. A link stops reading
  * `serviceTrackingLinkDaysAfterClose` days (platform global, default 90) after
  * the order reached a terminal status.
  *
+ * With the gate on, the customer may also approve (with a 6-digit code sent to
+ * the contact on file) or reject the current presupuesto
+ * (`POST /services/tracking/quote`, or signed in
+ * `POST /user { mode: 'service-quote-decision' }`).
+ *
  * The gate is `ecommerce.config.serviceTracking` AND the `workshop` module on.
  * With the gate off, staff cannot mint and the signed-in reads refuse, but a
  * link minted earlier keeps reading (STORE_MODULES rule 4).
@@ -53,6 +59,53 @@ export const SERVICE_TRACKING_OPERATOR_ERROR_CODES = [
     'SERVICE_TRACKING_LINK_LAPSED',
     'ADMIN_REQUIRED',
 ];
+/**
+ * The refusals of the customer's online quote decision — by link
+ * (`POST /services/tracking/code`, `POST /services/tracking/quote`) and signed in
+ * (`POST /user { mode: 'service-quote-decision' }`).
+ *
+ * - SERVICE_TRACKING_TOKEN_INVALID (401, link only): the handle cannot be
+ *   honoured — the same one body as the read.
+ * - SERVICE_TRACKING_VERIFICATION_FAILED (401, link approve only): no code, a
+ *   wrong, used, expired or burnt one, or a challenge minted for another order.
+ *   One body for every reason.
+ * - SERVICE_TRACKING_DISABLED (403): the store's gate is off. The read keeps working.
+ * - SERVICE_ORDER_NOT_FOUND (404, signed in only): no such order, a disabled
+ *   one, or another customer's — one body.
+ * - SERVICE_QUOTE_NOT_FOUND (404): no version with that `quoteId`.
+ * - SERVICE_QUOTE_SUPERSEDED (409): a newer version replaced it.
+ * - SERVICE_QUOTE_ALREADY_RESOLVED (409): it already carries the OTHER decision
+ *   (the same decision again answers 200 with the current view and writes nothing).
+ * - SERVICE_QUOTE_LAPSED (409, approve only): past `expiresAt`. A rejection is
+ *   still accepted.
+ * - SERVICE_ORDER_QUOTE_CHANGED (409): the order moved under the decision — retry.
+ * - SERVICE_ORDER_TERMINAL / SERVICE_ORDER_DISABLED (409): the ticket is closed
+ *   or deleted.
+ * - SERVICE_QUOTE_HOLDS_TOO_MANY (400, approve only): the version's parts cannot
+ *   be reserved in one write; the shop must re-quote.
+ */
+export const SERVICE_TRACKING_DECISION_ERROR_CODES = [
+    'SERVICE_TRACKING_TOKEN_INVALID',
+    'SERVICE_TRACKING_VERIFICATION_FAILED',
+    'SERVICE_TRACKING_DISABLED',
+    'SERVICE_ORDER_NOT_FOUND',
+    'SERVICE_QUOTE_NOT_FOUND',
+    'SERVICE_QUOTE_SUPERSEDED',
+    'SERVICE_QUOTE_ALREADY_RESOLVED',
+    'SERVICE_QUOTE_LAPSED',
+    'SERVICE_ORDER_QUOTE_CHANGED',
+    'SERVICE_ORDER_TERMINAL',
+    'SERVICE_ORDER_DISABLED',
+    'SERVICE_QUOTE_HOLDS_TOO_MANY',
+];
+/** Where the 6-digit decision code is sent: the phone or the email on file. */
+export const SERVICE_TRACKING_CODE_VIAS = ['sms', 'email'];
+/** The customer's two online answers to a presupuesto. */
+export const SERVICE_TRACKING_QUOTE_DECISIONS = ['approve', 'reject'];
+/** A decision challenge handle: 16 random bytes, base64url (22 characters). */
+export const SERVICE_TRACKING_CHALLENGE_HANDLE_RE = /^[\w-]{22}$/;
+/** The decision code: 6 digits. */
+export const SERVICE_TRACKING_CODE_RE = /^\d{6}$/;
 /** `POST /services { mode: 'trackingLink' }` actions. */
 export const SERVICE_TRACKING_LINK_ACTIONS = ['mint', 'revoke'];
 /** The storefront path a tracking link opens: `/servicio/{handle}`. */

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "platform-types",
-	"version": "1.10.854",
+	"version": "1.10.855",
 	"description": "Shared wire and entity contracts for the platform.",
 	"type": "module",
 	"main": "dist/index.js",