@fayz-ai/plugin-fiscal-br 0.11.0 → 0.12.0

package/dist/lib/emitters.d.ts

@@ -1,3 +1,5 @@
+import { EmitterError } from './service';
+export { EmitterError };
 export type EmitterMode = 'observe' | 'own';
 export interface EmitterModel {
     enabled: boolean;
@@ -65,14 +67,6 @@ export interface EmitterSettingsInput {
         cscToken?: string | null;
     };
 }
-/** A refusal from the service: `code` picks the sentence, `gates` lists what is missing. */
-export declare class EmitterError extends Error {
-    readonly status: number;
-    readonly code: string;
-    readonly gates: EmitterGate[];
-    readonly field: string | null;
-    constructor(status: number, code: string, message: string, gates?: EmitterGate[], field?: string | null);
-}
 export declare function emitterErrorSentence(error: unknown): string;
 /** What each gate asks of the store, in its words. */
 export declare const GATE_LABELS: Record<string, string>;

package/dist/lib/emitters.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"emitters.d.ts","sourceRoot":"","sources":["../../src/lib/emitters.ts"],"names":[],"mappings":"AAQA,MAAM,MAAM,WAAW,GAAG,SAAS,GAAG,KAAK,CAAA;AAE3C,MAAM,WAAW,YAAY;IAC3B,OAAO,EAAE,OAAO,CAAA;IAChB,UAAU,EAAE,OAAO,CAAA;IACnB,MAAM,EAAE,MAAM,GAAG,IAAI,CAAA;IACrB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAA;CAC1B;AAED,MAAM,WAAW,WAAW;IAC1B,EAAE,EAAE,MAAM,CAAA;IACV,EAAE,EAAE,OAAO,CAAA;IACX,MAAM,EAAE,MAAM,GAAG,IAAI,CAAA;CACtB;AAED,MAAM,WAAW,OAAO;IACtB,aAAa,EAAE,MAAM,CAAA;IACrB,IAAI,EAAE,MAAM,CAAA;IACZ,SAAS,EAAE,MAAM,GAAG,IAAI,CAAA;IACxB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAA;IACxB,yDAAyD;IACzD,IAAI,EAAE,WAAW,GAAG,IAAI,CAAA;IACxB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAA;IACxB,aAAa,EAAE,MAAM,GAAG,IAAI,CAAA;IAC5B,oBAAoB,EAAE,MAAM,CAAA;IAC5B,GAAG,EAAE,YAAY,CAAA;IACjB,IAAI,EAAE,YAAY,GAAG;QAAE,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;QAAC,WAAW,EAAE,OAAO,CAAA;KAAE,CAAA;IACnE,WAAW,EAAE;QAAE,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;QAAC,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;QAAC,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;QAAC,OAAO,EAAE,SAAS,GAAG,UAAU,GAAG,IAAI,CAAA;KAAE,GAAG,IAAI,CAAA;IAC1I,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAA;IAC/B,iBAAiB,EAAE,MAAM,GAAG,IAAI,CAAA;IAChC,QAAQ,CAAC,EAAE;QACT,UAAU,EAAE,OAAO,CAAA;QACnB,WAAW,EAAE;YAAE,EAAE,EAAE,MAAM,CAAC;YAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;YAAC,SAAS,EAAE,MAAM,GAAG,IAAI,CAAA;SAAE,GAAG,IAAI,CAAA;QACnF,IAAI,EAAE;YAAE,MAAM,EAAE,OAAO,CAAC;YAAC,UAAU,EAAE,OAAO,CAAC;YAAC,MAAM,EAAE,MAAM,EAAE,CAAA;SAAE,GAAG,IAAI,CAAA;QACvE,GAAG,EAAE;YAAE,MAAM,EAAE,OAAO,CAAC;YAAC,GAAG,EAAE,OAAO,CAAA;SAAE,GAAG,IAAI,CAAA;QAC7C,OAAO,EAAE;YAAE,GAAG,EAAE,MAAM,CAAA;SAAE,GAAG,IAAI,CAAA;KAChC,CAAA;IACD,KAAK,CAAC,EAAE,WAAW,EAAE,CAAA;IACrB,KAAK,CAAC,EAAE,OAAO,CAAA;CAChB;AAED,MAAM,WAAW,oBAAoB;IACnC,aAAa,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IAC7B,oBAAoB,CAAC,EAAE,MAAM,CAAA;IAC7B,GAAG,CAAC,EAAE,OAAO,CAAC,IAAI,CAAC,YAAY,EAAE,SAAS,GAAG,YAAY,GAAG,QAAQ,GAAG,YAAY,CAAC,CAAC,CAAA;IACrF,IAAI,CAAC,EAAE,OAAO,CAAC,IAAI,CAAC,YAAY,EAAE,SAAS,GAAG,YAAY,GAAG,QAAQ,GAAG,YAAY,CAAC,CAAC,GAAG;QAAE,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,CAAA;CAC7I;AAED,4FAA4F;AAC5F,qBAAa,YAAa,SAAQ,KAAK;IACzB,QAAQ,CAAC,MAAM,EAAE,MAAM;IAAE,QAAQ,CAAC,IAAI,EAAE,MAAM;IAAmB,QAAQ,CAAC,KAAK,EAAE,WAAW,EAAE;IAAO,QAAQ,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI;gBAAzH,MAAM,EAAE,MAAM,EAAW,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAW,KAAK,GAAE,WAAW,EAAO,EAAW,KAAK,GAAE,MAAM,GAAG,IAAW;CAItJ;AAmCD,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAM3D;AAED,sDAAsD;AACtD,eAAO,MAAM,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAe9C,CAAA;AAgDD,eAAO,MAAM,QAAQ;;IAEnB,6EAA6E;0BACvD,MAAM;0BACN,MAAM,YAAY,oBAAoB;iCACzB,MAAM,QAAQ,IAAI,YAAY,MAAM;8BAE7C,MAAM;CACjC,CAAA;AAED,eAAO,MAAM,WAAW;;;;;;;;;EAMd,CAAA;AAEV,8EAA8E;AAC9E,eAAO,MAAM,mBAAmB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAatB,CAAA"}
+{"version":3,"file":"emitters.d.ts","sourceRoot":"","sources":["../../src/lib/emitters.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,YAAY,EAAW,MAAM,WAAW,CAAA;AAEjD,OAAO,EAAE,YAAY,EAAE,CAAA;AAEvB,MAAM,MAAM,WAAW,GAAG,SAAS,GAAG,KAAK,CAAA;AAE3C,MAAM,WAAW,YAAY;IAC3B,OAAO,EAAE,OAAO,CAAA;IAChB,UAAU,EAAE,OAAO,CAAA;IACnB,MAAM,EAAE,MAAM,GAAG,IAAI,CAAA;IACrB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAA;CAC1B;AAED,MAAM,WAAW,WAAW;IAC1B,EAAE,EAAE,MAAM,CAAA;IACV,EAAE,EAAE,OAAO,CAAA;IACX,MAAM,EAAE,MAAM,GAAG,IAAI,CAAA;CACtB;AAED,MAAM,WAAW,OAAO;IACtB,aAAa,EAAE,MAAM,CAAA;IACrB,IAAI,EAAE,MAAM,CAAA;IACZ,SAAS,EAAE,MAAM,GAAG,IAAI,CAAA;IACxB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAA;IACxB,yDAAyD;IACzD,IAAI,EAAE,WAAW,GAAG,IAAI,CAAA;IACxB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAA;IACxB,aAAa,EAAE,MAAM,GAAG,IAAI,CAAA;IAC5B,oBAAoB,EAAE,MAAM,CAAA;IAC5B,GAAG,EAAE,YAAY,CAAA;IACjB,IAAI,EAAE,YAAY,GAAG;QAAE,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;QAAC,WAAW,EAAE,OAAO,CAAA;KAAE,CAAA;IACnE,WAAW,EAAE;QAAE,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;QAAC,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;QAAC,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;QAAC,OAAO,EAAE,SAAS,GAAG,UAAU,GAAG,IAAI,CAAA;KAAE,GAAG,IAAI,CAAA;IAC1I,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAA;IAC/B,iBAAiB,EAAE,MAAM,GAAG,IAAI,CAAA;IAChC,QAAQ,CAAC,EAAE;QACT,UAAU,EAAE,OAAO,CAAA;QACnB,WAAW,EAAE;YAAE,EAAE,EAAE,MAAM,CAAC;YAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;YAAC,SAAS,EAAE,MAAM,GAAG,IAAI,CAAA;SAAE,GAAG,IAAI,CAAA;QACnF,IAAI,EAAE;YAAE,MAAM,EAAE,OAAO,CAAC;YAAC,UAAU,EAAE,OAAO,CAAC;YAAC,MAAM,EAAE,MAAM,EAAE,CAAA;SAAE,GAAG,IAAI,CAAA;QACvE,GAAG,EAAE;YAAE,MAAM,EAAE,OAAO,CAAC;YAAC,GAAG,EAAE,OAAO,CAAA;SAAE,GAAG,IAAI,CAAA;QAC7C,OAAO,EAAE;YAAE,GAAG,EAAE,MAAM,CAAA;SAAE,GAAG,IAAI,CAAA;KAChC,CAAA;IACD,KAAK,CAAC,EAAE,WAAW,EAAE,CAAA;IACrB,KAAK,CAAC,EAAE,OAAO,CAAA;CAChB;AAED,MAAM,WAAW,oBAAoB;IACnC,aAAa,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IAC7B,oBAAoB,CAAC,EAAE,MAAM,CAAA;IAC7B,GAAG,CAAC,EAAE,OAAO,CAAC,IAAI,CAAC,YAAY,EAAE,SAAS,GAAG,YAAY,GAAG,QAAQ,GAAG,YAAY,CAAC,CAAC,CAAA;IACrF,IAAI,CAAC,EAAE,OAAO,CAAC,IAAI,CAAC,YAAY,EAAE,SAAS,GAAG,YAAY,GAAG,QAAQ,GAAG,YAAY,CAAC,CAAC,GAAG;QAAE,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,CAAA;CAC7I;AAmCD,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAM3D;AAED,sDAAsD;AACtD,eAAO,MAAM,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAe9C,CAAA;AAYD,eAAO,MAAM,QAAQ;;IAEnB,6EAA6E;0BACvD,MAAM;0BACN,MAAM,YAAY,oBAAoB;iCACzB,MAAM,QAAQ,IAAI,YAAY,MAAM;8BAE7C,MAAM;CACjC,CAAA;AAED,eAAO,MAAM,WAAW;;;;;;;;;EAMd,CAAA;AAEV,8EAA8E;AAC9E,eAAO,MAAM,mBAAmB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAatB,CAAA"}

package/dist/lib/notes.d.ts

@@ -0,0 +1,42 @@
+export type NoteStatus = 'processing' | 'authorized' | 'rejected' | 'error' | 'cancelled' | 'substituted';
+export interface OrderNote {
+    documentId: string;
+    orderId: string | null;
+    model: 'nfce' | 'nfe';
+    status: NoteStatus;
+    environment: string | null;
+    series: string | null;
+    number: string | null;
+    accessKey: string | null;
+    protocol: string | null;
+    total: number | null;
+    rejection: {
+        message?: string | null;
+        fields?: Array<{
+            field: string;
+            message: string;
+        }>;
+        raw?: unknown;
+    } | null;
+    authorizedAt: string | null;
+    cancelledAt: string | null;
+    cancelReason: string | null;
+    /** processing while a cancellation waits on the SEFAZ. */
+    cancellation: string | null;
+    /** The send got no answer; the service is looking for the note by its id. */
+    uncertain: boolean;
+    createdAt: string;
+}
+export declare const CANCEL_MIN_JUSTIFICATION = 15;
+export declare function noteErrorSentence(error: unknown): string;
+export declare const orderNotes: {
+    list: (orderId: string) => Promise<OrderNote[]>;
+    issueNfce: (orderId: string) => Promise<OrderNote>;
+    /** Reads PlugNotas again while the note is processing. */
+    read: (documentId: string) => Promise<OrderNote>;
+    cancel: (documentId: string, justification: string) => Promise<OrderNote>;
+    pdf: (documentId: string) => Promise<Blob>;
+    xml: (documentId: string) => Promise<Blob>;
+};
+export declare const NOTE_STATUS_LABEL: Record<NoteStatus, string>;
+//# sourceMappingURL=notes.d.ts.map

package/dist/lib/notes.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"notes.d.ts","sourceRoot":"","sources":["../../src/lib/notes.ts"],"names":[],"mappings":"AAMA,MAAM,MAAM,UAAU,GAAG,YAAY,GAAG,YAAY,GAAG,UAAU,GAAG,OAAO,GAAG,WAAW,GAAG,aAAa,CAAA;AAEzG,MAAM,WAAW,SAAS;IACxB,UAAU,EAAE,MAAM,CAAA;IAClB,OAAO,EAAE,MAAM,GAAG,IAAI,CAAA;IACtB,KAAK,EAAE,MAAM,GAAG,KAAK,CAAA;IACrB,MAAM,EAAE,UAAU,CAAA;IAClB,WAAW,EAAE,MAAM,GAAG,IAAI,CAAA;IAC1B,MAAM,EAAE,MAAM,GAAG,IAAI,CAAA;IACrB,MAAM,EAAE,MAAM,GAAG,IAAI,CAAA;IACrB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAA;IACxB,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAA;IACvB,KAAK,EAAE,MAAM,GAAG,IAAI,CAAA;IACpB,SAAS,EAAE;QAAE,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QAAC,MAAM,CAAC,EAAE,KAAK,CAAC;YAAE,KAAK,EAAE,MAAM,CAAC;YAAC,OAAO,EAAE,MAAM,CAAA;SAAE,CAAC,CAAC;QAAC,GAAG,CAAC,EAAE,OAAO,CAAA;KAAE,GAAG,IAAI,CAAA;IAChH,YAAY,EAAE,MAAM,GAAG,IAAI,CAAA;IAC3B,WAAW,EAAE,MAAM,GAAG,IAAI,CAAA;IAC1B,YAAY,EAAE,MAAM,GAAG,IAAI,CAAA;IAC3B,0DAA0D;IAC1D,YAAY,EAAE,MAAM,GAAG,IAAI,CAAA;IAC3B,6EAA6E;IAC7E,SAAS,EAAE,OAAO,CAAA;IAClB,SAAS,EAAE,MAAM,CAAA;CAClB;AAED,eAAO,MAAM,wBAAwB,KAAK,CAAA;AA+B1C,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CASxD;AAKD,eAAO,MAAM,UAAU;oBACC,MAAM;yBACP,MAAM;IAC3B,0DAA0D;uBACvC,MAAM;yBACJ,MAAM,iBAAiB,MAAM;sBAChC,MAAM;sBACN,MAAM;CACzB,CAAA;AAED,eAAO,MAAM,iBAAiB,EAAE,MAAM,CAAC,UAAU,EAAE,MAAM,CAOxD,CAAA"}

package/dist/lib/service.d.ts

@@ -0,0 +1,20 @@
+/** One check the service ran, as it answers it with a refusal. */
+export interface ServiceGate {
+    id: string;
+    ok: boolean;
+    detail: string | null;
+}
+/** A refusal from the service: `code` picks the sentence, `gates` lists what is missing. */
+export declare class EmitterError extends Error {
+    readonly status: number;
+    readonly code: string;
+    readonly gates: ServiceGate[];
+    readonly field: string | null;
+    constructor(status: number, code: string, message: string, gates?: ServiceGate[], field?: string | null);
+}
+type Method = 'GET' | 'POST' | 'PATCH' | 'PUT';
+export declare function request<T>(method: Method, path: string, body?: unknown): Promise<T>;
+/** A file the service streams (a note's PDF or XML). */
+export declare function requestFile(path: string): Promise<Blob>;
+export {};
+//# sourceMappingURL=service.d.ts.map

package/dist/lib/service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"service.d.ts","sourceRoot":"","sources":["../../src/lib/service.ts"],"names":[],"mappings":"AAMA,kEAAkE;AAClE,MAAM,WAAW,WAAW;IAC1B,EAAE,EAAE,MAAM,CAAA;IACV,EAAE,EAAE,OAAO,CAAA;IACX,MAAM,EAAE,MAAM,GAAG,IAAI,CAAA;CACtB;AAED,4FAA4F;AAC5F,qBAAa,YAAa,SAAQ,KAAK;IACzB,QAAQ,CAAC,MAAM,EAAE,MAAM;IAAE,QAAQ,CAAC,IAAI,EAAE,MAAM;IAAmB,QAAQ,CAAC,KAAK,EAAE,WAAW,EAAE;IAAO,QAAQ,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI;gBAAzH,MAAM,EAAE,MAAM,EAAW,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAW,KAAK,GAAE,WAAW,EAAO,EAAW,KAAK,GAAE,MAAM,GAAG,IAAW;CAItJ;AAGD,KAAK,MAAM,GAAG,KAAK,GAAG,MAAM,GAAG,OAAO,GAAG,KAAK,CAAA;AAuC9C,wBAAsB,OAAO,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,OAAO,GAAG,OAAO,CAAC,CAAC,CAAC,CAKzF;AAED,wDAAwD;AACxD,wBAAsB,WAAW,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAI7D"}

package/dist/migrations/index.d.ts

@@ -29,6 +29,7 @@ export declare const MIGRATION_027_A_NOTA_COM_CONTA_E_SEM_ESTOQUE_TERMINA_NO_V2
 export declare const MIGRATION_028_A_LINHA_DE_ESTOQUE_TEM_UNIDADE = "-- ---------------------------------------------------------------------------\n-- A stock line enters with its unit.\n-- ---------------------------------------------------------------------------\n-- Accepting let a stock line through with no stock unit; the movement then\n-- carried a bare quantity that every screen reads as \"unidade\" (Artorius, NF-e\n-- 222879: 20 kg of copa lombo entered as 20 units). The screen now suggests the\n-- unit and refuses without one; this is the same rule where it cannot be\n-- skipped.\n-- ---------------------------------------------------------------------------\n\nDO $m$\nDECLARE\n  v_def text;\n  v_old constant text := $q$    IF v_it.product_id IS NULL THEN$q$;\n  v_new constant text := $q$    IF v_it.stock_unit_id IS NULL THEN\n      RAISE EXCEPTION 'fiscalbr: item % entra no estoque sem unidade \u2014 escolha a unidade de estoque', v_it.item_number\n        USING ERRCODE = '23514';\n    END IF;\n    IF v_it.product_id IS NULL THEN$q$;\nBEGIN\n  SELECT pg_get_functiondef(p.oid) INTO v_def FROM pg_proc p JOIN pg_namespace n ON n.oid = p.pronamespace\n   WHERE n.nspname = 'public' AND p.proname = 'fiscalbr_accept_inbox_document';\n  IF v_def IS NULL THEN RAISE EXCEPTION 'fiscalbr/028: fiscalbr_accept_inbox_document does not exist'; END IF;\n  IF position('entra no estoque sem unidade' in v_def) > 0 THEN RETURN; END IF;\n  IF position(v_old in v_def) = 0 THEN\n    RAISE EXCEPTION 'fiscalbr/028: unexpected body of fiscalbr_accept_inbox_document \u2014 check by hand';\n  END IF;\n  EXECUTE replace(v_def, v_old, v_new);\nEND\n$m$;\n";
 export declare const MIGRATION_029_THE_SERVICE_WRITES_THE_INTAKE_HEALTH = "-- ============================================================================\n-- 029_the_service_writes_the_intake_health \u2014 the DF-e pull moves to the\n-- integration service (ADR 0003 phase 2).\n--\n-- The pull reads a tenant's emitter rows AS the caller (RLS decides which), and\n-- then records each CNPJ's outcome in three health columns, even for a reader\n-- without settings.manage, so the notes list can say \"intake stopped\". The\n-- edge function did that with service_role; the service gets exactly those\n-- three columns, by row id, and nothing else on the table.\n--\n-- Guarded: the role is an operator step. Replay-safe.\n-- ============================================================================\n\nDO $$\nBEGIN\n  IF EXISTS (SELECT 1 FROM pg_roles WHERE rolname = 'fayz_integration')\n     AND to_regclass('public.plg_fiscalbr_emitter_settings') IS NOT NULL THEN\n    GRANT SELECT (id) ON public.plg_fiscalbr_emitter_settings TO fayz_integration;\n    GRANT UPDATE (dfe_last_sync_at, dfe_last_error, dfe_last_error_at) ON public.plg_fiscalbr_emitter_settings TO fayz_integration;\n    DROP POLICY IF EXISTS plg_fiscalbr_emitter_settings_service_health ON public.plg_fiscalbr_emitter_settings;\n    CREATE POLICY plg_fiscalbr_emitter_settings_service_health ON public.plg_fiscalbr_emitter_settings\n      FOR UPDATE TO fayz_integration USING (true) WITH CHECK (true);\n    DROP POLICY IF EXISTS plg_fiscalbr_emitter_settings_service_read ON public.plg_fiscalbr_emitter_settings;\n    CREATE POLICY plg_fiscalbr_emitter_settings_service_read ON public.plg_fiscalbr_emitter_settings\n      FOR SELECT TO fayz_integration USING (true);\n  END IF;\nEND $$;\n";
 export declare const MIGRATION_030_THE_SERVICE_ONBOARDS_THE_EMITTER = "-- ============================================================================\n-- 030 \u2014 the integration service onboards the emitter\n--\n-- The integration service registers the company at PlugNotas (certificate,\n-- company, NF-e and NFC-e configuration, webhook) from the integration screen\n-- (control-sdk-backend ADR 0008). The emitter's facts stay here: the legal\n-- entity (public.company_legal_entities) and its settings\n-- (plg_fiscalbr_emitter_settings, one row per CNPJ). These are the doors the\n-- service reads and writes them through, one function per action, the\n-- tenant explicit, open only to `fayz_integration`.\n--\n-- NF-e gets what NFC-e already had: environment, series and the next number\n-- (numbering continues from the previous system, so no number is skipped or\n-- used twice). The CSC token stays write-only for the screen; the service\n-- reads it here because PlugNotas needs it to sign NFC-e.\n-- ============================================================================\n\nALTER TABLE public.plg_fiscalbr_emitter_settings\n  ADD COLUMN IF NOT EXISTS nfe_production boolean NOT NULL DEFAULT false,\n  ADD COLUMN IF NOT EXISTS nfe_series integer CHECK (nfe_series IS NULL OR nfe_series > 0),\n  ADD COLUMN IF NOT EXISTS nfe_next_number bigint CHECK (nfe_next_number IS NULL OR nfe_next_number > 0),\n  ADD COLUMN IF NOT EXISTS nfce_next_number bigint CHECK (nfce_next_number IS NULL OR nfce_next_number > 0),\n  ADD COLUMN IF NOT EXISTS provider_webhook_at timestamptz,\n  -- PlugNotas' codes. The legal entity's tax_regime is free text copied from\n  -- the V1 ('simples_nacional', 'other'); guessing a regime from 'other' would\n  -- register the company wrong, so the store states it once.\n  ADD COLUMN IF NOT EXISTS tax_regime_code smallint CHECK (tax_regime_code IS NULL OR tax_regime_code BETWEEN 1 AND 3),\n  ADD COLUMN IF NOT EXISTS special_tax_regime_code smallint NOT NULL DEFAULT 0 CHECK (special_tax_regime_code BETWEEN 0 AND 11);\n\nCOMMENT ON COLUMN public.plg_fiscalbr_emitter_settings.nfe_next_number IS\n  'The next NF-e number PlugNotas will use for nfe_series; set when the store moves from another system.';\nCOMMENT ON COLUMN public.plg_fiscalbr_emitter_settings.tax_regime_code IS\n  '1 Simples Nacional, 2 Simples Nacional over the sublimit, 3 normal regime (presumed or real profit).';\nCOMMENT ON COLUMN public.plg_fiscalbr_emitter_settings.provider_webhook_at IS\n  'When the integration service registered its webhook for this CNPJ at PlugNotas.';\n\n-- One emitter as the service needs it: the legal entity and its settings,\n-- CSC token included. NULL when the legal entity is not the tenant's.\nCREATE OR REPLACE FUNCTION public.fiscalbr_emitter_for_service(p_tenant uuid, p_legal_entity uuid)\nRETURNS jsonb\nLANGUAGE sql STABLE SECURITY DEFINER\nSET search_path TO ''\nAS $$\n  SELECT jsonb_build_object(\n    'legalEntityId', l.id,\n    'tenantId', l.tenant_id,\n    'cnpj', regexp_replace(coalesce(l.document_number, ''), '\\D', '', 'g'),\n    'legalName', l.legal_name,\n    'tradeName', l.trade_name,\n    'stateRegistration', l.state_registration,\n    'municipalRegistration', l.municipal_registration,\n    'taxRegime', l.tax_regime,\n    -- Stated on the emitter, else read from a regime the text names unambiguously.\n    'taxRegimeCode', coalesce(s.tax_regime_code, CASE WHEN l.tax_regime = 'simples_nacional' THEN 1 END),\n    'specialTaxRegimeCode', coalesce(s.special_tax_regime_code, 0),\n    'cnae', l.cnae,\n    'email', coalesce(nullif(l.fiscal_email, ''), l.email),\n    'phone', l.phone,\n    -- The address is a row of public.addresses (142); the legal entity's own\n    -- columns are the retired shape, read only when no address row exists.\n    'address', CASE WHEN a.id IS NOT NULL THEN jsonb_build_object(\n      'street', a.street, 'number', a.number, 'complement', a.complement,\n      'district', a.district, 'city', a.city, 'state', a.state, 'postalCode', a.postal_code,\n      'ibgeCityCode', l.ibge_city_code, 'country', a.country\n    ) ELSE jsonb_build_object(\n      'street', l.address, 'number', l.address_number, 'complement', l.address_complement,\n      'district', l.district, 'city', l.city, 'state', l.state, 'postalCode', l.postal_code,\n      'ibgeCityCode', l.ibge_city_code, 'country', l.country\n    ) END,\n    'settings', CASE WHEN s.id IS NULL THEN NULL ELSE jsonb_build_object(\n      'nfe', jsonb_build_object('enabled', s.nfe_enabled, 'production', s.nfe_production, 'series', s.nfe_series, 'nextNumber', s.nfe_next_number),\n      'nfce', jsonb_build_object('enabled', s.nfce_enabled, 'production', s.nfce_production, 'series', s.nfce_series, 'nextNumber', s.nfce_next_number,\n                                 'cscId', s.nfce_csc_id, 'cscToken', s.nfce_csc_token, 'genericItem', s.nfce_generic_item),\n      'certificate', jsonb_build_object('providerId', s.certificate_provider_id, 'holder', s.certificate_cn,\n                                        'expiresAt', s.certificate_expires_at, 'uploadedAt', s.certificate_uploaded_at),\n      'providerSyncedAt', s.provider_synced_at,\n      'providerWebhookAt', s.provider_webhook_at\n    ) END\n  )\n  FROM public.company_legal_entities l\n  LEFT JOIN public.plg_fiscalbr_emitter_settings s ON s.legal_entity_id = l.id AND s.tenant_id = l.tenant_id\n  LEFT JOIN LATERAL (\n    SELECT * FROM public.addresses x\n     WHERE x.tenant_id = l.tenant_id AND x.owner_type = 'company_legal_entity' AND x.owner_id = l.id\n     ORDER BY (x.kind = 'fiscal') DESC, x.is_default DESC, x.created_at\n     LIMIT 1\n  ) a ON true\n  WHERE l.id = p_legal_entity AND l.tenant_id = p_tenant\n$$;\n\n-- Every legal entity of the tenant that a unit points at: the emitters a\n-- screen can set up.\nCREATE OR REPLACE FUNCTION public.fiscalbr_emitters_for_service(p_tenant uuid)\nRETURNS SETOF jsonb\nLANGUAGE sql STABLE SECURITY DEFINER\nSET search_path TO ''\nAS $$\n  SELECT public.fiscalbr_emitter_for_service(p_tenant, l.id)\n  FROM public.company_legal_entities l\n  WHERE l.tenant_id = p_tenant\n    AND EXISTS (SELECT 1 FROM app.units u WHERE u.tenant_id = p_tenant AND u.company_legal_entity_id = l.id)\n  ORDER BY l.legal_name\n$$;\n\n-- Records what the service set at PlugNotas. Only the keys below move; the\n-- row is created on first write.\nCREATE OR REPLACE FUNCTION public.fiscalbr_emitter_record(p_tenant uuid, p_legal_entity uuid, p_patch jsonb)\nRETURNS void\nLANGUAGE plpgsql SECURITY DEFINER\nSET search_path TO ''\nAS $$\nDECLARE\n  v_unknown text;\nBEGIN\n  IF NOT EXISTS (SELECT 1 FROM public.company_legal_entities WHERE id = p_legal_entity AND tenant_id = p_tenant) THEN\n    RAISE EXCEPTION 'fiscalbr_emitter_record: legal entity % is not of tenant %', p_legal_entity, p_tenant USING ERRCODE = 'P0002';\n  END IF;\n  SELECT k INTO v_unknown FROM jsonb_object_keys(p_patch) k\n   WHERE k NOT IN ('nfe_enabled', 'nfe_production', 'nfe_series', 'nfe_next_number',\n                   'nfce_enabled', 'nfce_production', 'nfce_series', 'nfce_next_number', 'nfce_csc_id', 'nfce_csc_token',\n                   'certificate_provider_id', 'certificate_cn', 'certificate_expires_at', 'certificate_uploaded_at',\n                   'provider_synced_at', 'provider_webhook_at', 'tax_regime_code', 'special_tax_regime_code')\n   LIMIT 1;\n  IF v_unknown IS NOT NULL THEN\n    RAISE EXCEPTION 'fiscalbr_emitter_record: % is not recorded here', v_unknown USING ERRCODE = '22023';\n  END IF;\n\n  INSERT INTO public.plg_fiscalbr_emitter_settings (tenant_id, legal_entity_id)\n  VALUES (p_tenant, p_legal_entity)\n  ON CONFLICT (legal_entity_id) DO NOTHING;\n\n  UPDATE public.plg_fiscalbr_emitter_settings s SET\n    nfe_enabled      = CASE WHEN p_patch ? 'nfe_enabled' THEN (p_patch ->> 'nfe_enabled')::boolean ELSE s.nfe_enabled END,\n    nfe_production   = CASE WHEN p_patch ? 'nfe_production' THEN (p_patch ->> 'nfe_production')::boolean ELSE s.nfe_production END,\n    nfe_series       = CASE WHEN p_patch ? 'nfe_series' THEN (p_patch ->> 'nfe_series')::integer ELSE s.nfe_series END,\n    nfe_next_number  = CASE WHEN p_patch ? 'nfe_next_number' THEN (p_patch ->> 'nfe_next_number')::bigint ELSE s.nfe_next_number END,\n    nfce_enabled     = CASE WHEN p_patch ? 'nfce_enabled' THEN (p_patch ->> 'nfce_enabled')::boolean ELSE s.nfce_enabled END,\n    nfce_production  = CASE WHEN p_patch ? 'nfce_production' THEN (p_patch ->> 'nfce_production')::boolean ELSE s.nfce_production END,\n    nfce_series      = CASE WHEN p_patch ? 'nfce_series' THEN (p_patch ->> 'nfce_series')::integer ELSE s.nfce_series END,\n    nfce_next_number = CASE WHEN p_patch ? 'nfce_next_number' THEN (p_patch ->> 'nfce_next_number')::bigint ELSE s.nfce_next_number END,\n    nfce_csc_id      = CASE WHEN p_patch ? 'nfce_csc_id' THEN p_patch ->> 'nfce_csc_id' ELSE s.nfce_csc_id END,\n    nfce_csc_token   = CASE WHEN p_patch ? 'nfce_csc_token' THEN p_patch ->> 'nfce_csc_token' ELSE s.nfce_csc_token END,\n    certificate_provider_id = CASE WHEN p_patch ? 'certificate_provider_id' THEN p_patch ->> 'certificate_provider_id' ELSE s.certificate_provider_id END,\n    certificate_cn          = CASE WHEN p_patch ? 'certificate_cn' THEN p_patch ->> 'certificate_cn' ELSE s.certificate_cn END,\n    certificate_expires_at  = CASE WHEN p_patch ? 'certificate_expires_at' THEN (p_patch ->> 'certificate_expires_at')::timestamptz ELSE s.certificate_expires_at END,\n    certificate_uploaded_at = CASE WHEN p_patch ? 'certificate_uploaded_at' THEN (p_patch ->> 'certificate_uploaded_at')::timestamptz ELSE s.certificate_uploaded_at END,\n    provider_synced_at      = CASE WHEN p_patch ? 'provider_synced_at' THEN (p_patch ->> 'provider_synced_at')::timestamptz ELSE s.provider_synced_at END,\n    provider_webhook_at     = CASE WHEN p_patch ? 'provider_webhook_at' THEN (p_patch ->> 'provider_webhook_at')::timestamptz ELSE s.provider_webhook_at END,\n    tax_regime_code         = CASE WHEN p_patch ? 'tax_regime_code' THEN (p_patch ->> 'tax_regime_code')::smallint ELSE s.tax_regime_code END,\n    special_tax_regime_code = CASE WHEN p_patch ? 'special_tax_regime_code' THEN coalesce((p_patch ->> 'special_tax_regime_code')::smallint, 0) ELSE s.special_tax_regime_code END,\n    updated_at = now()\n  WHERE s.legal_entity_id = p_legal_entity AND s.tenant_id = p_tenant;\nEND\n$$;\n\nREVOKE ALL ON FUNCTION public.fiscalbr_emitter_for_service(uuid, uuid) FROM PUBLIC, anon, authenticated;\nREVOKE ALL ON FUNCTION public.fiscalbr_emitters_for_service(uuid) FROM PUBLIC, anon, authenticated;\nREVOKE ALL ON FUNCTION public.fiscalbr_emitter_record(uuid, uuid, jsonb) FROM PUBLIC, anon, authenticated;\n\nDO $$\nBEGIN\n  IF EXISTS (SELECT 1 FROM pg_roles WHERE rolname = 'fayz_integration') THEN\n    GRANT USAGE ON SCHEMA public TO fayz_integration;\n    GRANT EXECUTE ON FUNCTION public.fiscalbr_emitter_for_service(uuid, uuid) TO fayz_integration;\n    GRANT EXECUTE ON FUNCTION public.fiscalbr_emitters_for_service(uuid) TO fayz_integration;\n    GRANT EXECUTE ON FUNCTION public.fiscalbr_emitter_record(uuid, uuid, jsonb) TO fayz_integration;\n  END IF;\nEND\n$$;\n";
+export declare const MIGRATION_031_THE_SERVICE_ISSUES_THE_NOTE = "-- ============================================================================\n-- 031 \u2014 the integration service issues the order's note\n--\n-- control-sdk-backend ADR 0008, step 2: an operator clicks \"Emitir NFC-e\" on\n-- an order and the integration service builds the note with the V1's rules,\n-- sends it to PlugNotas and records what comes back. The note is the record\n-- 005 already defined (public.documents + plg_fiscalbr_documents, linked to\n-- the order by plg_fiscalbr_document_orders); these are the service's doors to\n-- it, one function per action, the tenant explicit, open only to\n-- `fayz_integration`.\n--\n--   fiscalbr_order_for_note_for_service   what the note is made of\n--   fiscalbr_note_open_for_service        the note, opened before the call\n--   fiscalbr_note_apply_for_service       what PlugNotas answered\n--   fiscalbr_notes_for_service            an order's notes\n--   fiscalbr_note_for_service             one note\n--   fiscalbr_notes_to_follow_for_service  notes still waiting on PlugNotas\n--\n-- A note is opened BEFORE PlugNotas is called, with the idIntegracao it will\n-- carry, so a call whose answer is lost is found again by that id instead of\n-- being sent twice (the V1's FISCAL_PROVIDER_RESULT_UNCERTAIN rule).\n-- ============================================================================\n\n-- What the note of an order is made of: the order, its lines with their tax\n-- data, what was paid and how, who bought and where it goes. The service\n-- applies the rules; this only gathers.\nCREATE OR REPLACE FUNCTION public.fiscalbr_order_for_note_for_service(p_tenant uuid, p_order uuid)\nRETURNS jsonb\nLANGUAGE plpgsql STABLE SECURITY DEFINER\nSET search_path TO ''\nAS $$\nDECLARE\n  v_checkout jsonb;\nBEGIN\n  -- The shop is optional: a site order says how it was paid on its checkout,\n  -- read only where the shop's table exists.\n  IF to_regclass('public.plg_shop_checkout_sessions') IS NOT NULL THEN\n    EXECUTE $q$\n      SELECT jsonb_build_object(\n        'paymentMethod', s.payment_method, 'provider', s.provider, 'total', s.total, 'status', s.status,\n        'customerName', s.customer_name, 'customerDocument', s.customer_document,\n        'destinationState', s.shipping_address ->> 'state', 'destinationCity', s.shipping_address ->> 'city')\n      FROM public.plg_shop_checkout_sessions s\n      WHERE s.order_id = $1 AND s.tenant_id = $2 AND s.status = 'paid'\n      ORDER BY s.updated_at DESC LIMIT 1 $q$\n    INTO v_checkout USING p_order, p_tenant;\n  END IF;\n\n  RETURN (SELECT jsonb_build_object(\n    'orderId', o.id,\n    'tenantId', o.tenant_id,\n    'unitId', o.unit_id,\n    'kind', o.kind,\n    'status', o.status,\n    'channel', o.channel,\n    'createdAt', o.created_at,\n    'subtotal', o.subtotal,\n    'discount', o.discount,\n    'shipping', o.shipping,\n    'total', o.total,\n    'legalEntityId', u.company_legal_entity_id,\n    'items', coalesce((\n      SELECT jsonb_agg(jsonb_build_object(\n        'itemId', i.id,\n        'productId', i.product_id,\n        'code', coalesce(nullif(p.sku, ''), i.product_id::text, i.id::text),\n        'name', i.name,\n        'quantity', i.quantity,\n        'unitPrice', i.unit_price,\n        'discount', i.discount,\n        'total', i.total,\n        'cancelled', i.cancelled_at IS NOT NULL,\n        -- The product's own value wins, field by field, over its group's (V1).\n        'tax', CASE WHEN t.product_id IS NULL AND g.id IS NULL THEN NULL ELSE jsonb_build_object(\n          'ncm', t.ncm,\n          'cest', coalesce(t.cest, g.cest),\n          'cfop', coalesce(nullif(t.cfop, ''), g.cfop),\n          'cst', coalesce(nullif(t.cst, ''), g.cst),\n          'csosn', g.csosn,\n          'origin', coalesce(nullif(t.icms_origin, ''), g.icms_origin),\n          'icmsRate', CASE WHEN coalesce(t.icms_rate, 0) > 0 THEN t.icms_rate ELSE g.icms_rate END,\n          'icmsBaseMode', g.icms_bc_mode,\n          'pisSituation', coalesce(nullif(t.pis_situation, ''), g.pis_situation),\n          'pisRate', CASE WHEN coalesce(t.pis_rate, 0) > 0 THEN t.pis_rate ELSE g.pis_rate END,\n          'cofinsSituation', coalesce(nullif(t.cofins_situation, ''), g.cofins_situation),\n          'cofinsRate', CASE WHEN coalesce(t.cofins_rate, 0) > 0 THEN t.cofins_rate ELSE g.cofins_rate END,\n          'ibsCbsSituation', coalesce(nullif(t.ibs_cbs_situation, ''), g.ibs_cbs_situation),\n          'ibsCbsClassification', coalesce(nullif(t.ibs_cbs_classification, ''), g.ibs_cbs_classification),\n          'group', g.name\n        ) END\n      ) ORDER BY i.sort_order, i.created_at)\n      FROM public.items i\n      LEFT JOIN public.products p ON p.id = i.product_id AND p.tenant_id = i.tenant_id\n      LEFT JOIN public.plg_fiscalbr_product_tax_info t ON t.product_id = i.product_id AND t.tenant_id = i.tenant_id\n      LEFT JOIN public.plg_fiscalbr_tax_groups g ON g.id = t.tax_group_id AND g.tenant_id = i.tenant_id\n      WHERE i.order_id = o.id AND i.tenant_id = o.tenant_id\n    ), '[]'::jsonb),\n    -- Anything that is not a site order is paid through the movements the\n    -- order received, net of reversals, by method.\n    'checkout', v_checkout,\n    'payments', coalesce((\n      SELECT jsonb_agg(jsonb_build_object('method', x.method, 'methodType', x.method_type, 'amount', x.amount))\n      FROM (\n        SELECT pm.name AS method, pt.name AS method_type,\n               sum(CASE WHEN m.direction = 'credit' THEN m.paid_amount ELSE -m.paid_amount END) AS amount\n        FROM public.plg_financial_movements m\n        LEFT JOIN public.plg_financial_payment_methods pm ON pm.id = m.payment_method_id\n        LEFT JOIN public.plg_financial_payment_method_types pt ON pt.id = pm.payment_method_type_id\n        WHERE m.tenant_id = o.tenant_id AND m.movement_kind = 'payment' AND m.status = 'paid'\n          AND (m.invoice_id = o.id OR m.financial_invoice_id IN (\n                SELECT fi.id FROM public.plg_financial_invoices fi WHERE fi.order_id = o.id AND fi.tenant_id = o.tenant_id))\n        GROUP BY pm.name, pt.name\n      ) x WHERE x.amount <> 0\n    ), '[]'::jsonb),\n    'notes', coalesce((\n      SELECT jsonb_agg(jsonb_build_object('documentId', d.document_id, 'model', d.model, 'status', d.status))\n      FROM public.plg_fiscalbr_documents d\n      WHERE d.tenant_id = o.tenant_id AND d.order_id = o.id\n    ), '[]'::jsonb)\n  )\n  FROM public.orders o\n  LEFT JOIN app.units u ON u.id = o.unit_id AND u.tenant_id = o.tenant_id\n  WHERE o.id = p_order AND o.tenant_id = p_tenant);\nEND\n$$;\n\n-- The note, opened before PlugNotas is called. One live note per order and\n-- model: a second \"Emitir\" while one is processing or authorized is refused\n-- (P0001 note_exists), so a double click never issues twice.\nCREATE OR REPLACE FUNCTION public.fiscalbr_note_open_for_service(\n  p_tenant uuid, p_order uuid, p_model text, p_input jsonb\n)\nRETURNS jsonb\nLANGUAGE plpgsql SECURITY DEFINER\nSET search_path TO ''\nAS $$\nDECLARE\n  v_order public.orders%ROWTYPE;\n  v_doc uuid := gen_random_uuid();\n  v_integration text;\n  v_existing uuid;\nBEGIN\n  IF p_model NOT IN ('nfce', 'nfe') THEN\n    RAISE EXCEPTION 'fiscalbr_note_open: model % is not issued here', p_model USING ERRCODE = '22023';\n  END IF;\n  SELECT * INTO v_order FROM public.orders WHERE id = p_order AND tenant_id = p_tenant FOR UPDATE;\n  IF NOT FOUND THEN\n    RAISE EXCEPTION 'fiscalbr_note_open: order % is not of tenant %', p_order, p_tenant USING ERRCODE = 'P0002';\n  END IF;\n  SELECT document_id INTO v_existing FROM public.plg_fiscalbr_documents\n   WHERE tenant_id = p_tenant AND order_id = p_order AND model = p_model AND status IN ('processing', 'authorized')\n   LIMIT 1;\n  IF v_existing IS NOT NULL THEN\n    RAISE EXCEPTION 'note_exists' USING ERRCODE = 'P0001', DETAIL = v_existing::text;\n  END IF;\n\n  -- Ours, and unique per company at PlugNotas: how a lost answer is found again.\n  v_integration := 'csb-' || v_doc::text;\n\n  INSERT INTO public.documents (id, tenant_id, kind, title, status, unit_id, subject_type, subject_id, created_by, metadata)\n  VALUES (v_doc, p_tenant, 'fiscal_document', upper(p_model) || ' do pedido', 'processing', v_order.unit_id,\n          'order', p_order, nullif(p_input ->> 'userId', '')::uuid, jsonb_build_object('source', 'integration-service'));\n\n  INSERT INTO public.plg_fiscalbr_documents (\n    document_id, tenant_id, unit_id, order_id, model, environment, status, series, provider,\n    provider_integration_id, total_value, recipient_snapshot, request_payload, source_snapshot, emitted_by_user_id, metadata)\n  VALUES (\n    v_doc, p_tenant, v_order.unit_id, p_order, p_model, p_input ->> 'environment', 'processing', p_input ->> 'series', 'plugnotas',\n    v_integration, (p_input ->> 'total')::numeric, p_input -> 'recipient', p_input -> 'request', p_input -> 'source',\n    nullif(p_input ->> 'userId', '')::uuid, jsonb_build_object('emitterCnpj', p_input ->> 'emitterCnpj'));\n\n  INSERT INTO public.plg_fiscalbr_document_orders (tenant_id, document_id, order_id)\n  VALUES (p_tenant, v_doc, p_order);\n\n  INSERT INTO public.plg_fiscalbr_document_events (tenant_id, unit_id, document_id, event_type, status, created_by_user_id)\n  VALUES (p_tenant, v_order.unit_id, v_doc, 'issue_requested', 'processing', nullif(p_input ->> 'userId', '')::uuid);\n\n  RETURN jsonb_build_object('documentId', v_doc, 'integrationId', v_integration);\nEND\n$$;\n\n-- What PlugNotas answered, on the note and on its public.documents row (the\n-- same note seen from two places, 005). Identity (model, unit, order) never moves.\nCREATE OR REPLACE FUNCTION public.fiscalbr_note_apply_for_service(\n  p_tenant uuid, p_document uuid, p_patch jsonb, p_event jsonb DEFAULT NULL\n)\nRETURNS void\nLANGUAGE plpgsql SECURITY DEFINER\nSET search_path TO ''\nAS $$\nDECLARE\n  v public.plg_fiscalbr_documents%ROWTYPE;\n  v_status text := p_patch ->> 'status';\nBEGIN\n  SELECT * INTO v FROM public.plg_fiscalbr_documents\n   WHERE document_id = p_document AND tenant_id = p_tenant FOR UPDATE;\n  IF NOT FOUND THEN\n    RAISE EXCEPTION 'fiscalbr_note_apply: note % is not of tenant %', p_document, p_tenant USING ERRCODE = 'P0002';\n  END IF;\n  IF v_status IS NOT NULL AND v_status NOT IN ('processing', 'authorized', 'rejected', 'error', 'cancelled', 'substituted') THEN\n    RAISE EXCEPTION 'fiscalbr_note_apply: unknown status %', v_status USING ERRCODE = '22023';\n  END IF;\n\n  UPDATE public.plg_fiscalbr_documents SET\n    status               = coalesce(v_status, status),\n    number               = coalesce(p_patch ->> 'number', number),\n    series               = coalesce(p_patch ->> 'series', series),\n    access_key           = coalesce(p_patch ->> 'access_key', access_key),\n    protocol             = coalesce(p_patch ->> 'protocol', protocol),\n    provider_document_id = coalesce(p_patch ->> 'provider_document_id', provider_document_id),\n    response_payload     = coalesce(p_patch -> 'response_payload', response_payload),\n    status_payload       = coalesce(p_patch -> 'status_payload', status_payload),\n    rejection_payload    = CASE WHEN p_patch ? 'rejection_payload' THEN p_patch -> 'rejection_payload' ELSE rejection_payload END,\n    xml                  = coalesce(p_patch ->> 'xml', xml),\n    authorized_at        = coalesce((p_patch ->> 'authorized_at')::timestamptz, authorized_at),\n    last_polled_at       = CASE WHEN p_patch ? 'polled' THEN now() ELSE last_polled_at END,\n    cancelled_at         = CASE WHEN p_patch ? 'cancelled_at' THEN (p_patch ->> 'cancelled_at')::timestamptz ELSE cancelled_at END,\n    cancel_reason        = CASE WHEN p_patch ? 'cancel_reason' THEN p_patch ->> 'cancel_reason' ELSE cancel_reason END,\n    cancelled_by_user_id = CASE WHEN p_patch ? 'cancelled_by_user_id' THEN nullif(p_patch ->> 'cancelled_by_user_id', '')::uuid ELSE cancelled_by_user_id END,\n    metadata             = metadata || coalesce(p_patch -> 'metadata', '{}'::jsonb)\n  WHERE document_id = p_document;\n\n  IF v_status IS NOT NULL THEN\n    UPDATE public.documents SET status = v_status WHERE id = p_document AND status IS DISTINCT FROM v_status;\n  END IF;\n\n  IF p_event IS NOT NULL THEN\n    INSERT INTO public.plg_fiscalbr_document_events\n      (tenant_id, unit_id, document_id, event_type, status, justification, response_payload, created_by_user_id)\n    VALUES (v.tenant_id, v.unit_id, p_document, p_event ->> 'event_type', p_event ->> 'status',\n            p_event ->> 'justification', p_event -> 'response_payload', nullif(p_event ->> 'userId', '')::uuid);\n  END IF;\nEND\n$$;\n\nCREATE OR REPLACE FUNCTION public.fiscalbr_note_for_service(p_tenant uuid, p_document uuid)\nRETURNS jsonb\nLANGUAGE sql STABLE SECURITY DEFINER\nSET search_path TO ''\nAS $$\n  SELECT jsonb_build_object(\n    'documentId', d.document_id, 'tenantId', d.tenant_id, 'unitId', d.unit_id, 'orderId', d.order_id,\n    'model', d.model, 'environment', d.environment, 'status', d.status, 'series', d.series, 'number', d.number,\n    'accessKey', d.access_key, 'protocol', d.protocol, 'provider', d.provider,\n    'providerDocumentId', d.provider_document_id, 'integrationId', d.provider_integration_id,\n    'total', d.total_value, 'recipient', d.recipient_snapshot, 'rejection', d.rejection_payload,\n    'hasXml', d.xml IS NOT NULL, 'authorizedAt', d.authorized_at, 'lastPolledAt', d.last_polled_at,\n    'cancelledAt', d.cancelled_at, 'cancelReason', d.cancel_reason, 'createdAt', d.created_at,\n    'emitterCnpj', d.metadata ->> 'emitterCnpj', 'metadata', d.metadata)\n  FROM public.plg_fiscalbr_documents d\n  WHERE d.document_id = p_document AND d.tenant_id = p_tenant\n$$;\n\nCREATE OR REPLACE FUNCTION public.fiscalbr_notes_for_service(p_tenant uuid, p_order uuid)\nRETURNS SETOF jsonb\nLANGUAGE sql STABLE SECURITY DEFINER\nSET search_path TO ''\nAS $$\n  SELECT public.fiscalbr_note_for_service(p_tenant, d.document_id)\n  FROM public.plg_fiscalbr_documents d\n  WHERE d.tenant_id = p_tenant AND d.order_id = p_order\n  ORDER BY d.created_at DESC\n$$;\n\n-- The XML is large and read only on download.\nCREATE OR REPLACE FUNCTION public.fiscalbr_note_xml_for_service(p_tenant uuid, p_document uuid)\nRETURNS text\nLANGUAGE sql STABLE SECURITY DEFINER\nSET search_path TO ''\nAS $$\n  SELECT d.xml FROM public.plg_fiscalbr_documents d WHERE d.document_id = p_document AND d.tenant_id = p_tenant\n$$;\n\n-- Notes this service sent that PlugNotas has not settled: the fallback when a\n-- webhook does not arrive. Oldest poll first.\nCREATE OR REPLACE FUNCTION public.fiscalbr_notes_to_follow_for_service(p_limit integer DEFAULT 25)\nRETURNS SETOF jsonb\nLANGUAGE sql STABLE SECURITY DEFINER\nSET search_path TO ''\nAS $$\n  SELECT public.fiscalbr_note_for_service(d.tenant_id, d.document_id)\n  FROM public.plg_fiscalbr_documents d\n  WHERE d.provider = 'plugnotas' AND d.status = 'processing' AND d.provider_integration_id LIKE 'csb-%'\n    AND d.created_at > now() - interval '7 days'\n  ORDER BY coalesce(d.last_polled_at, d.created_at)\n  LIMIT greatest(1, least(p_limit, 100))\n$$;\n\nDO $$\nDECLARE\n  f text;\nBEGIN\n  FOREACH f IN ARRAY ARRAY[\n    'public.fiscalbr_order_for_note_for_service(uuid, uuid)',\n    'public.fiscalbr_note_open_for_service(uuid, uuid, text, jsonb)',\n    'public.fiscalbr_note_apply_for_service(uuid, uuid, jsonb, jsonb)',\n    'public.fiscalbr_note_for_service(uuid, uuid)',\n    'public.fiscalbr_notes_for_service(uuid, uuid)',\n    'public.fiscalbr_note_xml_for_service(uuid, uuid)',\n    'public.fiscalbr_notes_to_follow_for_service(integer)'\n  ] LOOP\n    EXECUTE format('REVOKE ALL ON FUNCTION %s FROM PUBLIC, anon, authenticated', f);\n    IF EXISTS (SELECT 1 FROM pg_roles WHERE rolname = 'fayz_integration') THEN\n      EXECUTE format('GRANT EXECUTE ON FUNCTION %s TO fayz_integration', f);\n    END IF;\n  END LOOP;\nEND\n$$;\n";
 export declare const MIGRATIONS: Array<{
     id: string;
     sql: string;

package/dist/migrations/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/migrations/index.ts"],"names":[],"mappings":"AAIA,eAAO,MAAM,sBAAsB,2g0BA2jBlC,CAAA;AAED,eAAO,MAAM,0DAA0D,uzRAmMtE,CAAA;AAED,eAAO,MAAM,+CAA+C,m5oBAyW3D,CAAA;AAED,eAAO,MAAM,0CAA0C,o1XAgPtD,CAAA;AAED,eAAO,MAAM,8CAA8C,6qCAsB1D,CAAA;AAED,eAAO,MAAM,2CAA2C,w8dA6MvD,CAAA;AAED,eAAO,MAAM,yCAAyC,42BAkBrD,CAAA;AAED,eAAO,MAAM,oDAAoD,4oDA+BhE,CAAA;AAED,eAAO,MAAM,yDAAyD,otbA0NrE,CAAA;AAED,eAAO,MAAM,gEAAgE,q1+BAoiB5E,CAAA;AAED,eAAO,MAAM,gEAAgE,mqVAgO5E,CAAA;AAED,eAAO,MAAM,8CAA8C,k/HAiF1D,CAAA;AAED,eAAO,MAAM,oDAAoD,w2OA4JhE,CAAA;AAED,eAAO,MAAM,oDAAoD,gvRAwJhE,CAAA;AAED,eAAO,MAAM,kDAAkD,shPAoK9D,CAAA;AAED,eAAO,MAAM,8CAA8C,8/EA0C1D,CAAA;AAED,eAAO,MAAM,yCAAyC,2mJA2ErD,CAAA;AAED,eAAO,MAAM,4CAA4C,68QA0IxD,CAAA;AAED,eAAO,MAAM,0CAA0C,83CAwBtD,CAAA;AAED,eAAO,MAAM,+CAA+C,81JAiG3D,CAAA;AAED,eAAO,MAAM,gDAAgD,y+IAgH5D,CAAA;AAED,eAAO,MAAM,4CAA4C,ylEA4CxD,CAAA;AAED,eAAO,MAAM,qCAAqC,8kCAkBjD,CAAA;AAED,eAAO,MAAM,uDAAuD,u6HAyEnE,CAAA;AAED,eAAO,MAAM,oDAAoD,6/KAoHhE,CAAA;AAED,eAAO,MAAM,+CAA+C,uqPAwJ3D,CAAA;AAED,eAAO,MAAM,8CAA8C,myCAoB1D,CAAA;AAED,eAAO,MAAM,0DAA0D,yyHAsEtE,CAAA;AAED,eAAO,MAAM,4CAA4C,+jDA8BxD,CAAA;AAED,eAAO,MAAM,kDAAkD,0pDA2B9D,CAAA;AAED,eAAO,MAAM,8CAA8C,m3VAyK1D,CAAA;AAED,eAAO,MAAM,UAAU,EAAE,KAAK,CAAC;IAAE,EAAE,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,CAgCzD,CAAA"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/migrations/index.ts"],"names":[],"mappings":"AAIA,eAAO,MAAM,sBAAsB,2g0BA2jBlC,CAAA;AAED,eAAO,MAAM,0DAA0D,uzRAmMtE,CAAA;AAED,eAAO,MAAM,+CAA+C,m5oBAyW3D,CAAA;AAED,eAAO,MAAM,0CAA0C,o1XAgPtD,CAAA;AAED,eAAO,MAAM,8CAA8C,6qCAsB1D,CAAA;AAED,eAAO,MAAM,2CAA2C,w8dA6MvD,CAAA;AAED,eAAO,MAAM,yCAAyC,42BAkBrD,CAAA;AAED,eAAO,MAAM,oDAAoD,4oDA+BhE,CAAA;AAED,eAAO,MAAM,yDAAyD,otbA0NrE,CAAA;AAED,eAAO,MAAM,gEAAgE,q1+BAoiB5E,CAAA;AAED,eAAO,MAAM,gEAAgE,mqVAgO5E,CAAA;AAED,eAAO,MAAM,8CAA8C,k/HAiF1D,CAAA;AAED,eAAO,MAAM,oDAAoD,w2OA4JhE,CAAA;AAED,eAAO,MAAM,oDAAoD,gvRAwJhE,CAAA;AAED,eAAO,MAAM,kDAAkD,shPAoK9D,CAAA;AAED,eAAO,MAAM,8CAA8C,8/EA0C1D,CAAA;AAED,eAAO,MAAM,yCAAyC,2mJA2ErD,CAAA;AAED,eAAO,MAAM,4CAA4C,68QA0IxD,CAAA;AAED,eAAO,MAAM,0CAA0C,83CAwBtD,CAAA;AAED,eAAO,MAAM,+CAA+C,81JAiG3D,CAAA;AAED,eAAO,MAAM,gDAAgD,y+IAgH5D,CAAA;AAED,eAAO,MAAM,4CAA4C,ylEA4CxD,CAAA;AAED,eAAO,MAAM,qCAAqC,8kCAkBjD,CAAA;AAED,eAAO,MAAM,uDAAuD,u6HAyEnE,CAAA;AAED,eAAO,MAAM,oDAAoD,6/KAoHhE,CAAA;AAED,eAAO,MAAM,+CAA+C,uqPAwJ3D,CAAA;AAED,eAAO,MAAM,8CAA8C,myCAoB1D,CAAA;AAED,eAAO,MAAM,0DAA0D,yyHAsEtE,CAAA;AAED,eAAO,MAAM,4CAA4C,+jDA8BxD,CAAA;AAED,eAAO,MAAM,kDAAkD,0pDA2B9D,CAAA;AAED,eAAO,MAAM,8CAA8C,m3VAyK1D,CAAA;AAED,eAAO,MAAM,yCAAyC,oifAoTrD,CAAA;AAED,eAAO,MAAM,UAAU,EAAE,KAAK,CAAC;IAAE,EAAE,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,CAiCzD,CAAA"}

package/dist/views/OrderNoteCard.d.ts

@@ -0,0 +1,5 @@
+import React from 'react';
+export declare function OrderNoteCard({ orderId }: {
+    orderId?: string;
+}): React.JSX.Element | null;
+//# sourceMappingURL=OrderNoteCard.d.ts.map

package/dist/views/OrderNoteCard.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"OrderNoteCard.d.ts","sourceRoot":"","sources":["../../src/views/OrderNoteCard.tsx"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,OAAO,CAAA;AAuCzB,wBAAgB,aAAa,CAAC,EAAE,OAAO,EAAE,EAAE;IAAE,OAAO,CAAC,EAAE,MAAM,CAAA;CAAE,4BAwH9D"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@fayz-ai/plugin-fiscal-br",
-  "version": "0.11.0",
+  "version": "0.12.0",
   "description": "[preview] Brazilian fiscal addon for asynchronous NFC-e emission through PlugNotas",
   "type": "module",
   "sideEffects": false,
@@ -28,9 +28,9 @@
   },
   "dependencies": {
     "@tanstack/react-table": "^8.20.0",
-    "@fayz-ai/admin": "^0.57.0",
+    "@fayz-ai/admin": "^0.58.0",
     "@fayz-ai/core": "^0.57.0",
-    "@fayz-ai/financial": "^0.1.6",
+    "@fayz-ai/financial": "^0.1.7",
     "@fayz-ai/ui": "^0.57.0"
   },
   "devDependencies": {

package/functions/fiscalbr-certificate/index.ts

@@ -1,162 +0,0 @@
-// fiscalbr-certificate — send a CNPJ's A1 certificate (.pfx + password) to PlugNotas.
-//
-// Env: PLUGNOTAS_API_KEY (server-only), PLUGNOTAS_BASE_URL (optional), SUPABASE_URL, SUPABASE_ANON_KEY.
-//
-// Port of the V1 `dfe-plugnotas-certificate`, with two differences:
-//   - Validity and holder are read from the file itself. The V1 took them from
-//     PlugNotas' answer, which does not carry them in the shape it read, so no
-//     company in the V1 ever had an expiry date.
-//   - A CNPJ that already has a certificate there is REPLACED in place (same
-//     id). The V1 hourly sync re-registers the company with the id it stored; a
-//     new id would leave that sync patching the expired one forever.
-// The file is never stored. The row is written with the caller's JWT, so the
-// emitter-settings policy (settings.manage) decides who may do this.
-import { createClient } from 'https://esm.sh/@supabase/supabase-js@2.45.0'
-import forge from 'npm:node-forge@1.3.1'
-
-const corsHeaders = {
-  'Access-Control-Allow-Origin': '*',
-  'Access-Control-Allow-Headers': 'authorization, x-client-info, apikey, content-type',
-}
-
-const json = (body: unknown, status = 200) =>
-  new Response(JSON.stringify(body), { status, headers: { ...corsHeaders, 'Content-Type': 'application/json' } })
-
-// deno-lint-ignore no-explicit-any
-type Any = any
-
-const API = () => (Deno.env.get('PLUGNOTAS_BASE_URL') || 'https://api.plugnotas.com.br').replace(/\/$/, '')
-const digits = (v: unknown) => String(v ?? '').replace(/\D/g, '')
-
-function parse(text: string): Any {
-  try { return JSON.parse(text) } catch { return null }
-}
-
-function bytesFromBase64(b64: string): Uint8Array {
-  const bin = atob(b64.replace(/^data:[^;]+;base64,/, ''))
-  const out = new Uint8Array(bin.length)
-  for (let i = 0; i < bin.length; i++) out[i] = bin.charCodeAt(i)
-  return out
-}
-
-/** Holder, CNPJ and validity from the .pfx; throws a pt-BR message on a wrong password or a bad file. */
-function readPfx(bytes: Uint8Array, password: string): { cn: string; cnpj: string; notAfter: Date } {
-  let p12: Any
-  try {
-    let bin = ''
-    for (let i = 0; i < bytes.length; i++) bin += String.fromCharCode(bytes[i])
-    p12 = forge.pkcs12.pkcs12FromAsn1(forge.asn1.fromDer(bin), password)
-  } catch (e) {
-    const msg = String((e as Error)?.message ?? e)
-    throw new Error(/mac|password|decrypt/i.test(msg)
-      ? 'A senha não abre este certificado. Confira a senha do arquivo .pfx.'
-      : 'Este arquivo não é um certificado A1 (.pfx) válido.')
-  }
-  const bags = p12.getBags({ bagType: forge.pki.oids.certBag })[forge.pki.oids.certBag] ?? []
-  // The holder's certificate is the one whose subject carries a CNPJ; the rest is the chain.
-  const certs = bags.map((b: Any) => b.cert).filter(Boolean)
-  const cnOf = (c: Any) => String(c.subject.getField('CN')?.value ?? '')
-  const holder = certs.find((c: Any) => /\d{14}/.test(cnOf(c))) ?? certs[0]
-  if (!holder) throw new Error('O arquivo não traz nenhum certificado.')
-  const cn = cnOf(holder)
-  return { cn, cnpj: (cn.match(/(\d{14})/) ?? [])[1] ?? '', notAfter: holder.validity.notAfter }
-}
-
-async function sendToProvider(apiKey: string, bytes: Uint8Array, password: string, fileName: string, existingId: string | null) {
-  const form = () => {
-    const f = new FormData()
-    f.append('arquivo', new Blob([bytes], { type: 'application/x-pkcs12' }), fileName)
-    f.append('senha', password)
-    return f
-  }
-  if (existingId) {
-    const put = await fetch(`${API()}/certificado/${encodeURIComponent(existingId)}`, {
-      method: 'PUT', headers: { 'x-api-key': apiKey, Accept: 'application/json' }, body: form(),
-    })
-    const text = await put.text()
-    if (put.ok) return { id: String(parse(text)?.data?.id || parse(text)?.id || existingId), replaced: true }
-    // Gone on their side (or no in-place update): register a new one below. Anything else is the provider refusing.
-    if (put.status !== 404 && put.status !== 405) throw new Error(`O serviço fiscal recusou o certificado (${put.status}): ${text.slice(0, 300)}`)
-  }
-  const post = await fetch(`${API()}/certificado`, {
-    method: 'POST', headers: { 'x-api-key': apiKey, Accept: 'application/json' }, body: form(),
-  })
-  const text = await post.text()
-  if (!post.ok) throw new Error(`O serviço fiscal recusou o certificado (${post.status}): ${text.slice(0, 300)}`)
-  const body = parse(text)
-  const id = String(body?.data?.id || body?.id || '')
-  if (!id) throw new Error('O serviço fiscal aceitou o arquivo mas não devolveu o identificador do certificado.')
-  return { id, replaced: false }
-}
-
-/** Points the company registered at PlugNotas to the certificate and keeps DF-e reception on. */
-async function attachToCompany(apiKey: string, cnpj: string, certificateId: string): Promise<string | null> {
-  const res = await fetch(`${API()}/empresa/${cnpj}`, {
-    method: 'PATCH',
-    headers: { 'x-api-key': apiKey, 'Content-Type': 'application/json', Accept: 'application/json' },
-    body: JSON.stringify({ certificado: certificateId, nfe: { ativo: true, config: { producao: true, dfe: { ativo: true } } } }),
-  })
-  if (res.ok) return null
-  const text = await res.text()
-  // Not registered there yet: the first pull registers it with this certificate.
-  if (res.status === 404) return null
-  return `O certificado foi enviado, mas a empresa no serviço fiscal não aceitou a troca (${res.status}): ${text.slice(0, 300)}`
-}
-
-Deno.serve(async (req) => {
-  if (req.method === 'OPTIONS') return new Response('ok', { headers: corsHeaders })
-  try {
-    const apiKey = Deno.env.get('PLUGNOTAS_API_KEY')
-    if (!apiKey) return json({ error: 'A conexão com a SEFAZ não está configurada neste ambiente.' }, 503)
-    const auth = req.headers.get('Authorization') || ''
-    if (!auth) return json({ error: 'Unauthorized' }, 401)
-
-    const body: Any = await req.json().catch(() => ({}))
-    const legalEntityId = typeof body?.legalEntityId === 'string' ? body.legalEntityId : ''
-    const password = typeof body?.password === 'string' ? body.password : ''
-    const pfx = typeof body?.pfxBase64 === 'string' ? body.pfxBase64 : ''
-    if (!legalEntityId || !pfx || !password) return json({ error: 'Envie o arquivo .pfx e a senha.' }, 400)
-
-    const tenantId = typeof body?.tenantId === 'string' ? body.tenantId : ''
-    const db = createClient(Deno.env.get('SUPABASE_URL')!, Deno.env.get('SUPABASE_ANON_KEY')!, {
-      global: { headers: { Authorization: auth, ...(tenantId ? { 'x-fayz-tenant': tenantId } : {}) } },
-    })
-    const { data: row, error } = await db
-      .from('plg_fiscalbr_emitter_settings')
-      .select('id, certificate_provider_id, company_legal_entities!inner(document_number)')
-      .eq('legal_entity_id', legalEntityId)
-      .maybeSingle()
-    if (error) return json({ error: error.message }, 500)
-    if (!row) return json({ error: 'Esta empresa ainda não tem configuração fiscal salva.' }, 404)
-    const cnpj = digits((row as Any).company_legal_entities?.document_number)
-    if (cnpj.length !== 14) return json({ error: 'Salve o CNPJ da empresa antes de enviar o certificado.' }, 422)
-
-    const bytes = bytesFromBase64(pfx)
-    const cert = readPfx(bytes, password)
-    if (cert.notAfter.getTime() < Date.now()) {
-      return json({ error: `Este certificado já venceu em ${cert.notAfter.toLocaleDateString('pt-BR')}. Envie o certificado renovado.` }, 422)
-    }
-    if (cert.cnpj && cert.cnpj.slice(0, 8) !== cnpj.slice(0, 8)) {
-      return json({ error: `Este certificado é do CNPJ ${cert.cnpj}, não desta empresa (${cnpj}).` }, 422)
-    }
-
-    const sent = await sendToProvider(apiKey, bytes, password, String(body?.fileName || 'certificado.pfx'), (row as Any).certificate_provider_id || null)
-    const warning = await attachToCompany(apiKey, cnpj, sent.id)
-
-    const now = new Date().toISOString()
-    const { error: upd } = await db.from('plg_fiscalbr_emitter_settings').update({
-      certificate_provider_id: sent.id,
-      certificate_cn: cert.cn || null,
-      certificate_expires_at: cert.notAfter.toISOString(),
-      certificate_uploaded_at: now,
-      dfe_sync_enabled: true,
-      dfe_last_error: warning,
-      dfe_last_error_at: warning ? now : null,
-    }).eq('id', (row as Any).id)
-    if (upd) return json({ error: `O certificado foi enviado, mas não consegui salvar aqui: ${upd.message}` }, 403)
-
-    return json({ ok: true, cn: cert.cn, expiresAt: cert.notAfter.toISOString(), replaced: sent.replaced, warning })
-  } catch (e) {
-    return json({ error: e instanceof Error ? e.message : String(e) }, 400)
-  }
-})

package/functions/fiscalbr-plugnotas/index.ts

@@ -1,222 +0,0 @@
-// fiscalbr-plugnotas — consult, cancel and fetch the PDF of an issued note.
-//
-// Env: PLUGNOTAS_API_KEY (server-only), PLUGNOTAS_BASE_URL (optional; the
-//      sandbox host for tests), SUPABASE_URL, SUPABASE_ANON_KEY.
-//
-// Port of the V1 `fiscal-plugnotas-issue` (cancel / poll_status / get_pdf).
-// Unlike the V1, nothing here runs as service role: every read and write goes
-// through `fiscalbr_note_for_provider` / `fiscalbr_note_apply` with the
-// caller's JWT, which check financial.read / financial.edit on the note's unit.
-import { createClient } from 'https://esm.sh/@supabase/supabase-js@2.45.0'
-
-const corsHeaders = {
-  'Access-Control-Allow-Origin': '*',
-  'Access-Control-Allow-Headers': 'authorization, x-client-info, apikey, content-type',
-}
-
-const json = (body: unknown, status = 200) =>
-  new Response(JSON.stringify(body), { status, headers: { ...corsHeaders, 'Content-Type': 'application/json' } })
-
-// deno-lint-ignore no-explicit-any
-type Any = any
-
-const API = () => (Deno.env.get('PLUGNOTAS_BASE_URL') || 'https://api.plugnotas.com.br').replace(/\/$/, '')
-
-/** PlugNotas answers 502/504 under load; retry those, never a 4xx. */
-async function pnFetch(path: string, init: RequestInit, apiKey: string): Promise<Response> {
-  const headers = {
-    'x-api-key': apiKey,
-    Accept: 'application/json',
-    ...(init.body ? { 'Content-Type': 'application/json' } : {}),
-    ...(init.headers || {}),
-  } as Record<string, string>
-  let res: Response | null = null
-  for (let attempt = 0; attempt < 3; attempt++) {
-    res = await fetch(`${API()}${path}`, { ...init, headers })
-    if (res.status < 500) return res
-    if (attempt < 2) await new Promise((r) => setTimeout(r, 1500 * (attempt + 1)))
-  }
-  return res!
-}
-
-async function readBody(res: Response): Promise<Any> {
-  const text = await res.text().catch(() => '')
-  try { return JSON.parse(text) } catch { return text || null }
-}
-
-const REMOTE_STATUS: Record<string, string> = {
-  CONCLUIDO: 'authorized', AUTORIZADO: 'authorized', REJEITADO: 'rejected', DENEGADO: 'rejected',
-  CANCELADO: 'cancelled', SUBSTITUIDO: 'substituted', PROCESSANDO: 'processing', PENDENTE: 'processing',
-  AGENDADO: 'processing', AGUARDANDO_CANCELAMENTO: 'processing',
-}
-
-function remoteStatus(body: Any): string {
-  const first = Array.isArray(body) ? body[0] : body
-  return String(first?.situacao || first?.status || '').toUpperCase()
-}
-
-/** PlugNotas sends authorization dates as dd/MM/yyyy as well as ISO. */
-function parseDate(v: unknown): string | null {
-  if (!v) return null
-  const s = String(v)
-  const br = s.match(/^(\d{2})\/(\d{2})\/(\d{4})/)
-  const d = br ? new Date(`${br[3]}-${br[2]}-${br[1]}T00:00:00-03:00`) : new Date(s)
-  return Number.isNaN(d.getTime()) ? null : d.toISOString()
-}
-
-function consultPath(note: Any): string {
-  return note.model === 'nfse'
-    ? `/nfse/consultar/${note.provider_document_id}`
-    : `/${note.model}/${note.provider_document_id}/resumo`
-}
-
-/** One consult, turned into the patch `fiscalbr_note_apply` accepts. */
-async function consult(note: Any, apiKey: string): Promise<{ patch: Any; remote: string; body: Any }> {
-  const res = await pnFetch(consultPath(note), { method: 'GET' }, apiKey)
-  const body = await readBody(res)
-  const remote = res.ok ? remoteStatus(body) : ''
-  const first = Array.isArray(body) ? body[0] : body
-  const patch: Any = { status_payload: body }
-  let status = REMOTE_STATUS[remote]
-
-  // A requested cancellation keeps answering CONCLUIDO until the city hall
-  // finishes; showing "Autorizada" then would hide the cancellation in flight.
-  if (note.cancelled_at && status === 'authorized') status = 'processing'
-  // The cancellation itself was refused: the note is valid again.
-  if (note.cancelled_at && remote && (remote === 'REJEITADO' || remote === 'DENEGADO')) {
-    status = 'authorized'
-    patch.cancelled_at = null
-    patch.cancel_reason = null
-  } else if (remote === 'REJEITADO' || remote === 'DENEGADO') {
-    patch.rejection_payload = body
-  }
-  if (status) patch.status = status
-
-  const number = first?.numero || first?.numeroNfse || first?.nfse?.numero
-  const series = first?.serie ?? first?.nfse?.serie
-  const key = first?.chave || first?.chaveAcesso || first?.protocolo?.chave
-  const code = first?.codigoVerificacao || first?.nfse?.codigoVerificacao
-  if (number) patch.number = String(number)
-  if (series != null) patch.series = String(series)
-  if (key) patch.access_key = String(key)
-  if (code) patch.verification_code = String(code)
-  if (status === 'authorized' && !note.cancelled_at) {
-    const at = parseDate(first?.dataAutorizacao || first?.emissao || first?.dataEmissao)
-    if (at) patch.authorized_at = at
-  }
-  return { patch, remote, body }
-}
-
-function isPdf(b: Uint8Array) {
-  return b.length > 4 && b[0] === 0x25 && b[1] === 0x50 && b[2] === 0x44 && b[3] === 0x46
-}
-
-Deno.serve(async (req) => {
-  if (req.method === 'OPTIONS') return new Response('ok', { headers: corsHeaders })
-  try {
-    const apiKey = Deno.env.get('PLUGNOTAS_API_KEY')
-    if (!apiKey) return json({ error: 'O emissor fiscal não está configurado neste ambiente.' }, 503)
-    const auth = req.headers.get('Authorization') || ''
-    if (!auth) return json({ error: 'Unauthorized' }, 401)
-    const body: Any = await req.json().catch(() => ({}))
-    // A user with two accounts has no tenant without this; it only chooses among
-    // the caller's own memberships (app.requested_tenant), never widens.
-    const tenantId = typeof body?.tenantId === 'string' ? body.tenantId : ''
-    const db = createClient(Deno.env.get('SUPABASE_URL')!, Deno.env.get('SUPABASE_ANON_KEY')!, {
-      global: { headers: { Authorization: auth, ...(tenantId ? { 'x-fayz-tenant': tenantId } : {}) } },
-    })
-
-    const action = String(body?.action || '')
-    const documentId = String(body?.document_id || '')
-    if (!['poll_status', 'cancel', 'get_pdf'].includes(action) || !documentId) {
-      return json({ error: 'Pedido inválido.' }, 400)
-    }
-
-    const gate = action === 'cancel' ? 'cancel' : 'poll'
-    const { data: note, error: noteError } = await db.rpc('fiscalbr_note_for_provider', {
-      p_document_id: documentId, p_action: gate,
-    })
-    if (noteError) {
-      const denied = noteError.code === '42501'
-      return json({ error: denied ? 'Sem permissão para esta nota.' : noteError.message }, denied ? 403 : 404)
-    }
-    if (!note?.provider_document_id) return json({ error: 'Esta nota não tem registro no emissor fiscal.' }, 422)
-
-    const apply = async (patch: Any, event: Any | null) => {
-      const { error } = await db.rpc('fiscalbr_note_apply', {
-        p_document_id: documentId, p_action: action === 'cancel' ? 'cancel' : 'poll', p_patch: patch, p_event: event,
-      })
-      if (error) throw new Error(error.message)
-    }
-
-    if (action === 'poll_status') {
-      const { patch, remote } = await consult(note, apiKey)
-      await apply(patch, { event_type: 'consulta', status: remote || null })
-      return json({ ok: true, status: patch.status ?? note.status })
-    }
-
-    if (action === 'get_pdf') {
-      if (!['authorized', 'cancelled'].includes(note.status)) {
-        return json({ error: 'O PDF só existe para nota autorizada.' }, 422)
-      }
-      const path = note.model === 'nfse'
-        ? `/nfse/pdf/${note.provider_document_id}`
-        : `/${note.model}/${note.provider_document_id}/pdf`
-      const res = await pnFetch(path, { method: 'GET', headers: { Accept: 'application/pdf,application/json' } }, apiKey)
-      let bytes = new Uint8Array(await res.arrayBuffer())
-      // Some city halls hand back a link instead of the bytes.
-      if (res.ok && !isPdf(bytes)) {
-        try {
-          const j = JSON.parse(new TextDecoder().decode(bytes))
-          const link = [j?.url, j?.link, j?.pdf, j?.data?.url, j?.data?.link, j?.data?.pdf]
-            .find((v: unknown) => typeof v === 'string' && /^https?:\/\//.test(v))
-          if (link) {
-            const r2 = await fetch(link)
-            if (r2.ok) bytes = new Uint8Array(await r2.arrayBuffer())
-          }
-        } catch { /* falls through to the error below */ }
-      }
-      if (!isPdf(bytes)) return json({ error: 'O emissor ainda não devolveu o PDF desta nota.' }, 502)
-      // octet-stream: supabase-js hands that back as a Blob; application/pdf would arrive as text.
-      return new Response(bytes, { headers: { ...corsHeaders, 'Content-Type': 'application/octet-stream' } })
-    }
-
-    // cancel
-    if (note.status !== 'authorized' || note.cancelled_at) {
-      return json({ error: 'Só é possível cancelar uma nota autorizada.' }, 422)
-    }
-    const reason = String(body?.justification || '').trim()
-    const min = note.model === 'nfce' ? 15 : 10
-    if (reason.length < min) return json({ error: `A justificativa precisa de pelo menos ${min} caracteres.` }, 422)
-    if (reason.length > 255) return json({ error: 'A justificativa pode ter no máximo 255 caracteres.' }, 422)
-
-    const isNfse = note.model === 'nfse'
-    const res = await pnFetch(
-      isNfse ? `/nfse/cancelar/${note.provider_document_id}` : `/${note.model}/${note.provider_document_id}/cancelamento`,
-      { method: 'POST', body: JSON.stringify(isNfse ? { codigo: String(body?.code || '2'), motivo: reason } : { justificativa: reason }) },
-      apiKey,
-    )
-    const answer = await readBody(res)
-    if (!res.ok) {
-      const message = String(answer?.error?.message || answer?.message || `HTTP ${res.status}`)
-      await apply({}, { event_type: 'cancelamento', status: 'ERRO', justification: reason, response_payload: answer })
-      return json({
-        error: /prazo|30 min|tempo/i.test(message)
-          ? `Cancelamento fora do prazo permitido pela SEFAZ/prefeitura: ${message}`
-          : message,
-      }, 422)
-    }
-
-    // Accepted, not done: the city hall answers "em processamento" and concludes later.
-    const now = new Date().toISOString()
-    await apply(
-      { status: 'processing', cancelled_at: now, cancel_reason: reason },
-      { event_type: 'cancelamento', status: 'SOLICITADO', justification: reason, response_payload: answer },
-    )
-    const { patch, remote } = await consult({ ...note, cancelled_at: now }, apiKey)
-    await apply(patch, { event_type: 'consulta', status: remote || null })
-    return json({ ok: true, status: patch.status ?? 'processing' })
-  } catch (e) {
-    return json({ error: e instanceof Error ? e.message : String(e) }, 500)
-  }
-})