@checkbox-site/node 0.2.7 → 0.2.9

package/dist/client.d.ts

@@ -45,7 +45,7 @@ export interface Checkbox extends ResourceInstances {
  */
 export declare class Checkbox implements RequestSender {
     #private;
-    static readonly VERSION = "0.2.7";
+    static readonly VERSION = "0.2.9";
     static readonly API_VERSION = "2026-10-30";
     static readonly errors: typeof errors;
     static readonly webhooks: Webhooks;

package/dist/generated/operations.d.ts

@@ -2988,7 +2988,7 @@ export declare class NoticeSettingsResource extends Resource {
     /**
      * Update notice settings.
      *
-     * Chooses who sends the required emails (mode: merchant = you send them and Checkbox tracks them, the default; checkbox = Checkbox sends them), and sets branding, cancel_url and the confirmed cancellation policy. add_kinds / remove_kinds turn single notices on or off and leave the others as they are; enabled_kinds replaces the whole list. In checkbox mode, turning a notice on requires cancel_url, a confirmed policy, a support email, a connected Stripe, Recharge, Chargebee, Recurly or Paddle account and a sending address; otherwise resource_conflict explains what is missing. The support email may be the Stripe account's public one (used automatically); the account owner's login address only after the human confirms it in the dashboard (support_email_to_confirm; an agent cannot confirm it). Turning notices on through the API never emails a real subscriber: on a test-mode site only test-run inboxes (and marked test copies to the owner) are emailed, and on a live site real subscribers are emailed only after a person confirms it once in the dashboard, after a preview (real_sends). The account owner is emailed when an agent turns notices on.
+     * Chooses who sends the required emails (mode: merchant = you send them and Checkbox tracks them, the default; checkbox = Checkbox sends them), and sets branding, cancel_url and the confirmed cancellation policy. add_kinds / remove_kinds turn single notices on or off and leave the others as they are; enabled_kinds replaces the whole list. In checkbox mode, turning a notice on requires cancel_url, a confirmed policy, a support email, a connected Stripe, Recharge, Chargebee, Recurly or Paddle account and a sending address; otherwise resource_conflict explains what is missing. The support email may be the Stripe account's public one (used automatically); the account owner's login address only after the human confirms it in the dashboard (support_email_to_confirm; an agent cannot confirm it). Turning notices on through the API never emails a real subscriber: on a test-mode site only test-run inboxes (and marked test copies to the owner) are emailed, and on a live site real subscribers are emailed only after a person confirms it once in the dashboard, after a preview (real_sends). The account owner is emailed when an agent turns notices on (while an agent sets up a test-mode site, that change is listed in the setup summary email instead of an email of its own). The response lists the plan tasks Notices now covers (closed_tasks).
      *
      * @param site Unique identifier of the site (site_…).
      * @see POST /v1/sites/{site}/notice_settings (operation `updateNoticeSettings`, scope `notices:write`, live mode needs an activated account)
@@ -3430,7 +3430,7 @@ export declare class TestRunsResource extends Resource {
     /**
      * Retrieve a test run.
      *
-     * The run with every step's status, observations, check results and fixes. While it runs, next_action.type is "wait" and waiting_for says what it waits for; ?wait=30 answers as soon as the run moves on (or after 30 seconds). When it finished, next_action says what to fix (apply_fixes / review_warnings), retrieve_plan when the only warnings have nothing to change, or "none".
+     * The run with every step's status, observations, check results and fixes. While it runs, next_action.type is "wait" and waiting_for says what it waits for; ?wait=30 answers as soon as the run moves on (or after 30 seconds). When it finished, next_action says what to fix (apply_fixes / review_warnings), or retrieve_plan (retrieveCompliancePlan: the plan lists what is left; plan_status_label gives its status in words).
      *
      * @param testRun Unique identifier of the test run (run_…).
      * @see GET /v1/test_runs/{test_run} (operation `retrieveTestRun`, scope `test_runs:read`)

package/dist/generated/operations.js

@@ -2488,7 +2488,7 @@ export class NoticeSettingsResource extends Resource {
     /**
      * Update notice settings.
      *
-     * Chooses who sends the required emails (mode: merchant = you send them and Checkbox tracks them, the default; checkbox = Checkbox sends them), and sets branding, cancel_url and the confirmed cancellation policy. add_kinds / remove_kinds turn single notices on or off and leave the others as they are; enabled_kinds replaces the whole list. In checkbox mode, turning a notice on requires cancel_url, a confirmed policy, a support email, a connected Stripe, Recharge, Chargebee, Recurly or Paddle account and a sending address; otherwise resource_conflict explains what is missing. The support email may be the Stripe account's public one (used automatically); the account owner's login address only after the human confirms it in the dashboard (support_email_to_confirm; an agent cannot confirm it). Turning notices on through the API never emails a real subscriber: on a test-mode site only test-run inboxes (and marked test copies to the owner) are emailed, and on a live site real subscribers are emailed only after a person confirms it once in the dashboard, after a preview (real_sends). The account owner is emailed when an agent turns notices on.
+     * Chooses who sends the required emails (mode: merchant = you send them and Checkbox tracks them, the default; checkbox = Checkbox sends them), and sets branding, cancel_url and the confirmed cancellation policy. add_kinds / remove_kinds turn single notices on or off and leave the others as they are; enabled_kinds replaces the whole list. In checkbox mode, turning a notice on requires cancel_url, a confirmed policy, a support email, a connected Stripe, Recharge, Chargebee, Recurly or Paddle account and a sending address; otherwise resource_conflict explains what is missing. The support email may be the Stripe account's public one (used automatically); the account owner's login address only after the human confirms it in the dashboard (support_email_to_confirm; an agent cannot confirm it). Turning notices on through the API never emails a real subscriber: on a test-mode site only test-run inboxes (and marked test copies to the owner) are emailed, and on a live site real subscribers are emailed only after a person confirms it once in the dashboard, after a preview (real_sends). The account owner is emailed when an agent turns notices on (while an agent sets up a test-mode site, that change is listed in the setup summary email instead of an email of its own). The response lists the plan tasks Notices now covers (closed_tasks).
      *
      * @param site Unique identifier of the site (site_…).
      * @see POST /v1/sites/{site}/notice_settings (operation `updateNoticeSettings`, scope `notices:write`, live mode needs an activated account)
@@ -3028,7 +3028,7 @@ export class TestRunsResource extends Resource {
     /**
      * Retrieve a test run.
      *
-     * The run with every step's status, observations, check results and fixes. While it runs, next_action.type is "wait" and waiting_for says what it waits for; ?wait=30 answers as soon as the run moves on (or after 30 seconds). When it finished, next_action says what to fix (apply_fixes / review_warnings), retrieve_plan when the only warnings have nothing to change, or "none".
+     * The run with every step's status, observations, check results and fixes. While it runs, next_action.type is "wait" and waiting_for says what it waits for; ?wait=30 answers as soon as the run moves on (or after 30 seconds). When it finished, next_action says what to fix (apply_fixes / review_warnings), or retrieve_plan (retrieveCompliancePlan: the plan lists what is left; plan_status_label gives its status in words).
      *
      * @param testRun Unique identifier of the test run (run_…).
      * @see GET /v1/test_runs/{test_run} (operation `retrieveTestRun`, scope `test_runs:read`)

package/dist/generated/types.d.ts

@@ -117,6 +117,10 @@ export interface DeviceAuthorizationParams {
     client?: SetupClient;
     /** Site URL detected in the project (shown on the approval screen; the test-mode site is created for it). */
     site_url?: string;
+    /** Page where customers subscribe (pricing page or checkout). Carried into the setup session and the test-mode site. */
+    checkout_url?: string;
+    /** Account page where subscribers manage or cancel. Carried into the setup session. */
+    account_url?: string;
     /** Project name. */
     project_name?: string;
     /** Detected framework. */
@@ -266,7 +270,7 @@ export type GoLive = {
     /** The steps, in order. */
     steps: Array<{
         /** Stable step key. */
-        key: "verify_domain" | "stripe_terms_url" | "live_stripe_key" | "live_portal_cancel" | "live_checkout" | "deactivate_old_live_link" | "promote_site";
+        key: "verify_domain" | "stripe_terms_url" | "live_stripe_key" | "live_portal_cancel" | "live_checkout" | "deactivate_old_live_link" | "swap_test_urls" | "promote_site";
         /** Who takes the step: person (only the owner can: DNS, the Stripe Dashboard, live keys) or agent (a code change). */
         who: "person" | "agent";
         /** The step in plain words. */
@@ -276,6 +280,13 @@ export type GoLive = {
     }>;
     /** What the agent tells the person instead of "done": set up in test mode, N steps left before real customers. */
     summary: string;
+    /** Steps Checkbox closed by inference from what the billing platform showed (the Stripe Terms of Service URL, which Stripe does not report directly), each with the reason. Tell the owner these too. Absent when none. */
+    closed?: Array<{
+        /** Stable step key. */
+        key: "verify_domain" | "stripe_terms_url" | "live_stripe_key" | "live_portal_cancel" | "live_checkout" | "deactivate_old_live_link" | "swap_test_urls" | "promote_site";
+        /** Why Checkbox closed the step, in plain words (what Stripe showed). */
+        text: string;
+    }>;
 } | null;
 /** One step of the setup checklist. */
 export interface SetupStep {
@@ -360,6 +371,8 @@ export interface SetupSession {
     install: {
         /** The exact tag to put in <head> of the homepage, pricing, checkout / sign-up and account pages (not needed on every page). */
         script_tag: string | null;
+        /** The same tag pinned to the current snippet release with Subresource Integrity (integrity + crossorigin): the bytes never change until you update the tag (/s/latest.json names newer releases). Null when the deployment has no pinned release. */
+        pinned_script_tag: string | null;
         /** The site's public snippet key: the data-key of script_tag (and the local part of inbound_email). Use only this key in the snippet tag. */
         snippet_key: string | null;
         /** A different key: the account's test-mode publishable key (pk_test_…) for Checkbox Elements (<checkbox-disclosure>) and consent receipts (data-publishable-key). Not the snippet's data-key. */
@@ -448,6 +461,24 @@ export interface SetupSession {
         /** When it started. Unix timestamp in seconds. */
         created: number;
     } | null;
+    /** Round 35: the plan's batched owner questions (the same as retrieveCompliancePlan owner_questions), so next_action's "as owner_questions says" can be followed from this response. Null when there is none. */
+    owner_questions?: {
+        /** How to ask them: once, in one message, while the fixes go on. */
+        description: string;
+        /** Every choice only the owner makes, together. */
+        questions: Array<{
+            /** "email_sender" (who sends the required emails), "notices_support_email" / "notices_cancel_timing" (what Checkbox Notices needs before it sends), "stripe_terms_url" (a step only the owner takes in the Stripe Dashboard: the Terms of Service URL Stripe needs before it collects consent, in test mode too), or the id of the task whose question it is. */
+            id: string;
+            /** The question, in plain words for the owner. */
+            text: string;
+            /** The answers. */
+            options: Array<string>;
+            /** The tasks the answer settles. */
+            tasks: Array<string>;
+            /** What the agent does with each answer. */
+            on_answer: Record<string, string>;
+        }>;
+    } | null;
     /** The plans Checkbox judges the site against: the declared plans as reconciled with the connected Stripe Prices (Stripe wins), the plans the pay buttons sell and the account's Prices of a declared plan. Empty until a plan is known (updateSetupSession plans[], or connect Stripe). */
     site_plans: Array<{
         /** Plan name (or its price and interval). */
@@ -1138,6 +1169,13 @@ export interface Site {
         devices: Array<"desktop" | "mobile">;
         /** Number of configured checkout steps. */
         checkout_steps: number;
+        /** The other checkout pages, one per plan (checkout_pages), each loaded on every scan. */
+        pages: Array<{
+            /** The plan's checkout page. */
+            url: string;
+            /** The plan it sells, when given. */
+            plan: string | null;
+        }>;
         /** A synthetic sign-up is configured. */
         completes_purchase: boolean;
         /** A test account for the cancellation test is configured. */
@@ -1190,6 +1228,7 @@ export interface Site {
     latest_scan?: Scan;
     unverified_scan: UnverifiedScan;
     domain_verification?: DomainVerification;
+    next_action?: NextAction;
 }
 /** A page of sites, newest first. */
 export interface SiteList {
@@ -1277,6 +1316,13 @@ export interface CreateSiteParams {
     terms_url?: string | null;
     /** Steps to reach the final pre-payment screen. */
     checkout_steps?: Array<ScanStep>;
+    /** More checkout pages, one per plan, when each plan has its own (e.g. /checkout?plan=annual next to checkout_url /checkout?plan=monthly). Every scan loads each one and judges it against the plan it sells. At most 4; replaces the stored list; null or [] clears it. */
+    checkout_pages?: Array<{
+        /** A plan's own checkout page, on the checkout page's site. */
+        url: string;
+        /** The plan this page sells (its name as in your plans). */
+        plan?: string;
+    }> | null;
     purchase?: SitePurchase;
     test_account?: SiteTestAccount;
     /** Explicit cancellation steps (otherwise auto-discovered). */
@@ -1308,6 +1354,13 @@ export interface UpdateSiteParams {
     terms_url?: string | null;
     /** Steps to reach the final pre-payment screen. */
     checkout_steps?: Array<ScanStep>;
+    /** More checkout pages, one per plan, when each plan has its own (e.g. /checkout?plan=annual next to checkout_url /checkout?plan=monthly). Every scan loads each one and judges it against the plan it sells. At most 4; replaces the stored list; null or [] clears it. */
+    checkout_pages?: Array<{
+        /** A plan's own checkout page, on the checkout page's site. */
+        url: string;
+        /** The plan this page sells (its name as in your plans). */
+        plan?: string;
+    }> | null;
     purchase?: SitePurchase;
     test_account?: SiteTestAccount;
     /** Explicit cancellation steps (otherwise auto-discovered). */
@@ -1619,6 +1672,17 @@ export interface Finding {
     /** User-facing status. needs_fix (a requirement is clearly not met: `compliance.fix` is the one change), pending_live_check (everything Checkbox can see is right; the live event has not been observed yet — counts as passing the checks), verified_live (observed live: proof run, real BCC'd send, Stripe-confirmed cancellation), your_call (a real decision for a person: `compliance.question`), compliant (passes; grey areas carry a `compliance.note`), not_applicable, not_set_up (no sign the email or setting exists yet: `compliance.fix` is the one-click way to set it up; never counts as passing the checks), not_checked (Checkbox has not tried it yet, e.g. the cancel flow: `compliance.fix` says how; never counts as passing the checks). */
     compliance_status: "needs_fix" | "pending_live_check" | "verified_live" | "your_call" | "compliant" | "not_applicable" | "not_set_up" | "not_checked";
     compliance: ComplianceInfo;
+    /** The compliance plan task this check belongs to and what the plan says about it. The plan decides what is left to do: when compliance and plan_task.label differ (a check pending a live send, a decision you recorded), follow the plan. Null when no task covers the check. */
+    plan_task?: {
+        /** Unique identifier of the task (task_…). */
+        id: string;
+        /** The task title. */
+        title: string;
+        /** The task status in the compliance plan. */
+        status: string;
+        /** What the compliance plan says about it, in its own words (the to-do label, Done, Checks pass · live check pending, ...). */
+        label: string;
+    } | null;
     /** Scan that produced the latest result. */
     scan: string | null;
     /** First time the check was evaluated. Unix timestamp in seconds. */
@@ -1812,8 +1876,8 @@ export interface Task {
     last_verification: {
         /** Unique identifier of the verification (ver_…). */
         id: string;
-        /** Result. */
-        status: "pending" | "passed" | "failed";
+        /** Result. incomplete: every check observed passes, but something the task covers was not given to Checkbox yet (e.g. a plan's Checkout config is not registered); not done. */
+        status: "pending" | "passed" | "incomplete" | "failed";
         /** When it was requested. Unix timestamp in seconds. */
         created: number;
     } | null;
@@ -1831,6 +1895,13 @@ export interface Task {
     verification_level: "not_seen" | "template_checked" | "delivery_seen" | null;
     /** When the task first appeared. Unix timestamp in seconds. */
     first_seen: number;
+    /** Present on an open task that was not in the site's first plan: a later check found it. Tell the human it is new, and what found it. */
+    found_after_first_plan?: {
+        /** When it first appeared. Unix timestamp in seconds. */
+        found: number;
+        /** What found it, in plain words (the scan of your checkout page, the read of your Terms, the Stripe read, ...). */
+        found_by: string;
+    };
     /** When it was done. Unix timestamp in seconds. */
     done_at: number | null;
 }
@@ -1907,7 +1978,7 @@ export interface CompliancePlan {
         description: string;
         /** Every choice only the owner makes, together. */
         questions: Array<{
-            /** "email_sender" (who sends the required emails), "notices_support_email" / "notices_cancel_timing" (what Checkbox Notices needs before it sends), or the id of the task whose question it is. */
+            /** "email_sender" (who sends the required emails), "notices_support_email" / "notices_cancel_timing" (what Checkbox Notices needs before it sends), "stripe_terms_url" (a step only the owner takes in the Stripe Dashboard: the Terms of Service URL Stripe needs before it collects consent, in test mode too), or the id of the task whose question it is. */
             id: string;
             /** The question, in plain words for the owner. */
             text: string;
@@ -2003,8 +2074,8 @@ export interface Verification {
     task: string | null;
     /** One task or the whole site. */
     scope: "task" | "site";
-    /** pending (waiting for the confirming scan / re-evaluation), passed (Checkbox observed the expected result: every check passes or does not apply), passed_with_gaps (nothing observed fails, but some checks could not be observed: observed missing_data — not verified), passed_with_notes (nothing observed fails and the task counts as passing, but a check is still needs_review on a part that is not yours to change, such as Stripe's own page layout: see checks), not_checked (a task whose checks could only not be observed yet: nothing to change in the code; next_action says what evidence to provide), pending_live_check (an email whose content passes but that Checkbox has not seen sent for a real event yet: nothing to change; it completes on the first real send or a proof run), needs_review (nothing observed fails, but a check is still undecided, e.g. a cancellation not tried yet or a styling estimate: not done; next_action says what decides it), failed (a check was observed failing: see diff), superseded (this verification did not pass, but newer evidence, such as a test run or a later evaluation, settled the task since: see superseded and follow next_action; nothing to change for it). */
-    status: "pending" | "passed" | "passed_with_gaps" | "passed_with_notes" | "not_checked" | "pending_live_check" | "needs_review" | "failed" | "superseded";
+    /** pending (waiting for the confirming scan / re-evaluation), passed (Checkbox observed the expected result: every check passes or does not apply), passed_with_gaps (nothing observed fails, but some checks could not be observed: observed missing_data — not verified), passed_with_notes (nothing observed fails and the task counts as passing, but a check is still needs_review on a part that is not yours to change, such as Stripe's own page layout: see checks), not_checked (a task whose checks could only not be observed yet: nothing to change in the code; next_action says what evidence to provide), pending_live_check (an email whose content passes but that Checkbox has not seen sent for a real event yet: nothing to change; it completes on the first real send or a proof run), needs_review (nothing observed fails, but a check is still undecided, e.g. a cancellation not tried yet or a styling estimate: not done; next_action says what decides it), incomplete (every check observed passes, but something the task covers was not given to Checkbox yet, e.g. one plan's Stripe Checkout config is not registered: not done; next_action says what to register), failed (a check was observed failing: see diff), superseded (this verification did not pass, but newer evidence, such as a test run or a later evaluation, settled the task since: see superseded and follow next_action; nothing to change for it). */
+    status: "pending" | "passed" | "passed_with_gaps" | "passed_with_notes" | "not_checked" | "pending_live_check" | "needs_review" | "incomplete" | "failed" | "superseded";
     /** Set when newer evidence settled the task after this verification finished (status superseded). */
     superseded?: {
         /** The task's status in the current plan. */
@@ -2384,6 +2455,19 @@ export interface NoticeSettings {
     real_sends: "test_mode" | "confirmed" | "needs_confirmation" | "off";
     /** Where subscribers cancel online (site domain, hosted cancellation page or billing portal). */
     cancel_url: string | null;
+    /** Round 36: on updateNoticeSettings, the plan's email tasks Checkbox Notices now covers (no longer on your to-do list). An empty list when none; absent on retrieve. */
+    closed_tasks?: Array<{
+        /** The plan task (task_…). */
+        id: string;
+        /** The task key. */
+        key: string;
+        /** The task title. */
+        title: string;
+        /** Its plan status now: pending_live_check (Checkbox Notices sends it; it completes on the first real send or a test run) or done. */
+        status: string;
+    }>;
+    /** Round 35: set when every notice links to cancel_url while Checkbox has not seen a working online cancellation (cancel.online_available is not passing). Fix the cancel option there, or point cancel_url at one that works (e.g. the hosted cancellation page). */
+    cancel_url_warning?: string | null;
     /** Hex brand colour. */
     brand_color: string | null;
     /** Mailbox name of the sender. */
@@ -4507,7 +4591,7 @@ export interface TestRunStep {
     checks: Array<{
         /** Machine check id (see listRules / the legal catalog). */
         check_id: string;
-        /** pass, fail, needs_review or not_applicable, judged from this run's observations. */
+        /** pass, fail, needs_review or not_applicable, judged from this run's observations; informational on a step that is informational only (a mirrored page that is not your checkout): listed, never a failure, nothing to fix. */
         status: string;
         /** What was observed. */
         message: string;
@@ -4519,7 +4603,7 @@ export interface TestRunStep {
     observations: Record<string, unknown>;
     /** Evidence records (screenshots, page captures, raw emails) behind the step. */
     evidence: Array<string>;
-    /** Warning or failure code of the step (stable): key_missing, key_not_test_mode, key_invalid, key_permission_missing, checkout_config_missing, price_not_in_test_mode, checkout_session_failed, checkout_page_unreadable, checkout_not_completed, subscription_create_failed, test_clock_failed, no_email_received_within, reminder_not_received, portal_not_configured, cancel_not_completed, cancellation_email_not_received, checkout_url_missing, real_checkout_not_completed, payment_link_not_found, webhook_not_delivered, reminder_outside_window, reminder_timing_not_observed, cancel_flow_not_configured, cancel_not_confirmed_in_stripe, acknowledgment_content_incomplete, required_notice_skipped, cancel_replaced_by_other_subscription, not_judged, scan_config_missing, domain_not_verified, scanner_failed, stripe_api_error, timeout, canceled, internal_error. */
+    /** Warning or failure code of the step (stable): key_missing, key_not_test_mode, key_invalid, key_permission_missing, checkout_config_missing, price_not_in_test_mode, checkout_session_failed, checkout_page_unreadable, checkout_not_completed, subscription_create_failed, test_clock_failed, no_email_received_within, reminder_not_received, portal_not_configured, cancel_not_completed, cancellation_email_not_received, checkout_url_missing, real_checkout_not_completed, payment_link_not_found, webhook_not_delivered, reminder_outside_window, reminder_timing_not_observed, cancel_flow_not_configured, cancel_not_confirmed_in_stripe, acknowledgment_content_incomplete, required_notice_skipped, cancel_replaced_by_other_subscription, cancel_own_control_failed, cancel_own_control_not_tested, not_judged, scan_config_missing, domain_not_verified, scanner_failed, stripe_api_error, timeout, canceled, internal_error. */
     code: string | null;
     fix: TestRunFix;
 }
@@ -4578,7 +4662,7 @@ export interface TestRun {
     steps: Array<TestRunStep>;
     /** Why the run stopped (failed / canceled runs). */
     failure: {
-        /** Stable failure code: key_missing, key_not_test_mode, key_invalid, key_permission_missing, checkout_config_missing, price_not_in_test_mode, checkout_session_failed, checkout_page_unreadable, checkout_not_completed, subscription_create_failed, test_clock_failed, no_email_received_within, reminder_not_received, portal_not_configured, cancel_not_completed, cancellation_email_not_received, checkout_url_missing, real_checkout_not_completed, payment_link_not_found, webhook_not_delivered, reminder_outside_window, reminder_timing_not_observed, cancel_flow_not_configured, cancel_not_confirmed_in_stripe, acknowledgment_content_incomplete, required_notice_skipped, cancel_replaced_by_other_subscription, not_judged, scan_config_missing, domain_not_verified, scanner_failed, stripe_api_error, timeout, canceled, internal_error. */
+        /** Stable failure code: key_missing, key_not_test_mode, key_invalid, key_permission_missing, checkout_config_missing, price_not_in_test_mode, checkout_session_failed, checkout_page_unreadable, checkout_not_completed, subscription_create_failed, test_clock_failed, no_email_received_within, reminder_not_received, portal_not_configured, cancel_not_completed, cancellation_email_not_received, checkout_url_missing, real_checkout_not_completed, payment_link_not_found, webhook_not_delivered, reminder_outside_window, reminder_timing_not_observed, cancel_flow_not_configured, cancel_not_confirmed_in_stripe, acknowledgment_content_incomplete, required_notice_skipped, cancel_replaced_by_other_subscription, cancel_own_control_failed, cancel_own_control_not_tested, not_judged, scan_config_missing, domain_not_verified, scanner_failed, stripe_api_error, timeout, canceled, internal_error. */
         code: string;
         /** What went wrong. */
         message: string;
@@ -4703,6 +4787,8 @@ export interface TestRun {
         } | null;
     } | null;
     next_action: NextAction;
+    /** Round 36: once the run finished, the site plan's status_label after it (the same words the plan, its verifications and the dashboard show, e.g. "Checks pass · 2 live checks pending"); null while the run is running or when the plan could not be read. A clean run is not the whole plan: owner steps and live checks pending stay on it. */
+    plan_status_label?: string | null;
 }
 /** A page of test runs, newest first. */
 export interface TestRunList {
@@ -5281,7 +5367,7 @@ export interface CreateTestRunParams {
         cancel_url?: string;
         /** Clicks that cancel in your flow (after login / cancel_url), e.g. [{ "action": "click", "text": "Cancel subscription" }, { "action": "click", "text": "Confirm" }]. */
         cancel_steps?: Array<ScanStep>;
-        /** How your customers cancel. Default: your flow when test_account / cancel_url / cancel_steps describe it; else the Stripe portal, taken as declared when Stripe has portal cancellation on and your site links to the portal, or when the account or cancellation page you registered redirects or links to the portal; otherwise reported as a warning (cancel_flow_not_configured: the cancel worked, but how your customers cancel was not given). */
+        /** How your customers cancel. Default: your flow when test_account / cancel_url / cancel_steps describe it; else the Stripe portal, taken as declared when Stripe has portal cancellation on and your site links to the portal, or when the account or cancellation page you registered redirects or links to the portal; otherwise reported as a warning (cancel_flow_not_configured: the cancel worked, but how your customers cancel was not given). "merchant_flow" is never replaced by the portal: without test_account / cancel_url / cancel_steps, Checkbox presses the cancel option the last scan saw on your site, else the account or cancellation page you registered (a link there to the Stripe portal login link counts as your control); with none of these, the step says what to pass. */
         cancel_via?: "merchant_flow" | "stripe_portal";
         /** A test account the shopper logs into: to buy as a logged-in user (real_checkout) and to cancel through your in-app flow. Mail to its address counts when you BCC the site's Checkbox address. */
         test_account?: {

package/dist/version.d.ts

@@ -1,2 +1,2 @@
 /** Version of this SDK (kept equal to packages/sdk-node/package.json "version"; a test checks it). */
-export declare const SDK_VERSION = "0.2.7";
+export declare const SDK_VERSION = "0.2.9";

package/dist/version.js

@@ -1,2 +1,2 @@
 /** Version of this SDK (kept equal to packages/sdk-node/package.json "version"; a test checks it). */
-export const SDK_VERSION = '0.2.7';
+export const SDK_VERSION = '0.2.9';

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@checkbox-site/node",
-  "version": "0.2.7",
+  "version": "0.2.9",
   "description": "Checkbox Node.js SDK: auto-renewal law and subscription compliance checks (FTC ROSCA, California ARL, New York and other state laws) for Stripe Checkout and other subscription checkouts. Zero dependencies. Published to npm as @checkbox-site/node.",
   "keywords": [
     "subscription",