read.bulk.store_flags

The store’s public facts: its display name, the checkout flags (whether masked checkout and guest checkout are enabled), the instance timezone every date on the storefront is rendered in, and the store’s own VOCABULARY (vocabulary.cart / vocabulary.cart_empty_title, from the reserved vocabulary_* custom fields) — a closed, curated list of strings a merchant may replace for themselves, so calling the cart a “Sacola” costs no fork; a key absent (or written blank) means the front uses our word. storefront_enabled is false when the store has NO public page (a counter, a wholesale desk, an employee shop, a test store): the storefront answers 404 for it, while this port keeps answering for it exactly as before — its catalogue, prices, stock and orders are unchanged, which is how a counter terminal or a totem keeps selling for it. public_url is the store’s own absolute address (its “Public URL”), or null when it declares none: with storefront_enabled false it is what says the store is served by ANOTHER front rather than not served at all, so a storefront can point a visitor at the real shop instead of a dead end. Drives the storefront UI; the core is the real gate. Served on the BULK face: the same published answer as the public read, charged to the caller’s own bulk budget instead of the shopper’s, and never to be reached by a browser.

• Surface: GET /v1/read/bulk/store_flags
• Auth: ★ Bulk read (machine) — a TENANT credential is REQUIRED (no credential is unauthorized), and store must be a store of THAT tenant (another tenant’s is forbidden). The ANSWER is the public read’s, byte for byte: this store’s published assortment, no drafts, no actor. What the credential buys is the BUDGET — this face has its own RateLimit-* bucket, so walking a whole catalogue here takes nothing from the ceiling a shopper’s browser shares.

Params (JSON Schema)

{
  "properties": {
    "store": {
      "minLength": 1,
      "type": "string"
    }
  },
  "required": [
    "store"
  ],
  "type": "object"
}

Result (200)

Open (unknown) — this capability does not declare an output schema.

Errors

invalid_params (400) · not_found (404) · unauthorized (401) · forbidden (403)