platform-types 1.10.699 → 1.10.701

package/dist/cash.d.ts

@@ -104,13 +104,8 @@ declare global {
      * replays gross in and gross out. ⚠️ It is NOT `'refund'`, which is money
      * given BACK — a refund movement recorded on the shift, or the cash of a seña
      * refund (`POST /orders { mode: 'deposit-refund' }`, the net the seña kept).
-     *
-     * `'tip-payout'` is cash handed to a worker against their tip balance
-     * (`POST /shifts/tips` `mode=payout`, `method=cash`) — an outcome, written in
-     * the same transaction as the `TipBalance` debit. It is NOT a negative
-     * `'tip'`, and a plain `'cash-out'` never debits a tip balance.
      */
-    type CashEventType = 'apertura' | 'cash-in' | 'cash-out' | 'sale' | 'change' | 'refund' | 'tip' | 'tip-payout' | 'cierre' | 'reconcile';
+    type CashEventType = 'apertura' | 'cash-in' | 'cash-out' | 'sale' | 'change' | 'refund' | 'cierre' | 'reconcile';
     /**
      * A cashier's drawer shift — one per cashier per day. PK `STORE#{storeId}`,
      * SK `SHIFT#{shiftId}` where `shiftId = ${date}-${userId}`. State machine:
@@ -199,19 +194,6 @@ declare global {
         variance?: number;
         reconcileDecision?: 'approved' | 'rejected';
         reconcileNote?: string;
-        /**
-         * The net tips this shift received, per `CashEvent.recipientUserId`, in the
-         * shift's currency: Σ income − Σ outcome over its `tip` events that name a
-         * recipient. Stamped once, at close, and only when some recipient nets to a
-         * non-zero amount.
-         *
-         * ⚠️ A summary, not a record: the tip ledger (`TipBalance`, `TipOperation`,
-         * `TipEntry`) is the source of truth for what a worker is owed. `tip` events
-         * with no recipient are excluded. Absent on every shift closed before the
-         * ledger existed. It is not a compliance report: DNU 731/2024 creates no
-         * AFIP/ARCA report for tips.
-         */
-        tipDistribution?: Record<string, number>;
         /**
          * The drawer's declared currency buckets, keyed by canonical currency
          * catalog id — one entry per currency the cashier declared at apertura.
@@ -219,8 +201,7 @@ declare global {
          *
          * ⚠️ THE PRIMARY-MIRROR RULE. `currency` names the primary (first-declared)
          * bucket, and the scalars `float`, `declaredCount`, `declaredDenominations`,
-         * `expectedBalance`, `variance` and `tipDistribution` are the PRIMARY
-         * bucket's figures. So a scalar reader keeps reading the primary bucket
+         * `expectedBalance` and `variance` are the PRIMARY bucket's figures. So a scalar reader keeps reading the primary bucket
          * correctly, and never a cross-currency total — no figure on this row ever
          * sums two buckets.
          *
@@ -228,8 +209,8 @@ declare global {
          * bucket through the api's responses (or its tolerant reader,
          * `shiftBuckets`), never by assuming `buckets[currency]` repeats them:
          * - A shift with ONE bucket stores `expectedBalance` and `variance` in the
-         *   scalars ONLY. Its bucket carries `float`, `declaredCount`,
-         *   `declaredDenominations` and `tipDistribution`. The blind target of a
+         *   scalars ONLY. Its bucket carries `float`, `declaredCount` and
+         *   `declaredDenominations`. The blind target of a
          *   single-currency shift therefore has one home, the scalar every reader
          *   already masks.
          * - A shift with two or more buckets stores every figure in every bucket,
@@ -277,8 +258,6 @@ declare global {
          * one-bucket shift.
          */
         variance?: number;
-        /** Net tips per recipient over this currency's `tip` events — see `CashShift.tipDistribution`. */
-        tipDistribution?: Record<string, number>;
     }
     /**
      * A `CashShiftBucket` as `GET /shifts` returns it — masked by the same rules
@@ -304,22 +283,6 @@ declare global {
         amount: number;
         direction?: 'income' | 'outcome';
         concept?: string;
-        /**
-         * On a `tip` event, the worker the tip belongs to — the caller by default,
-         * or the active store user the movement named. Present exactly on the
-         * ledger-backed tips: a `tip` event without it was recorded before the tip
-         * ledger existed, stays in the drawer sum as before, and never becomes a
-         * `TipBalance` or a `tipDistribution` entry. On a `tip-payout` event, the
-         * worker who was paid.
-         */
-        recipientUserId?: string;
-        /**
-         * The `TipOperation.operationId` written in the same transaction as this
-         * event. For a cash tip recorded as a drawer movement it equals `eventId`;
-         * on a cash payout, or the compensation of a reversed cash tip or payout,
-         * it is that act's client `operationId`.
-         */
-        tipOperationId?: string;
         currency: string;
         /**
          * The shift's own `CashShift.warehouseId`, copied onto every event so a
@@ -356,19 +319,14 @@ declare global {
          * `DELETE /account` of a cash movement whose mirror is a projection writes
          * one `'reversal'` with no rebook: the mirror's amount, copied, in the
          * opposite direction.
-         *
-         * A reversed cash tip or cash tip payout (`POST /shifts/tips`
-         * `mode=reverse`) also writes one `'reversal'` event: a `tip` with direction
-         * `outcome`, or a `tip-payout` with direction `income`. Its `direction` is
-         * set explicitly — read it, never re-derive it from `type`.
          */
         compensation?: 'reversal' | 'rebook';
     }
     /**
      * `POST /shifts/{id}/movements` — a mid-shift drawer movement into the
      * caller's own OPEN drawer `{id}`. Mirrors the request side of the movement
-     * schema in `stacks/lambdas/shifts/_postMovement.ts`; the schema strips unknown
-     * keys, so the root `elevationToken` is read off the raw body.
+     * schema in `stacks/lambdas/shifts/_postMovement.ts`, which is strict: an unknown
+     * key is 400 VALIDATION_FAILED, and the root `elevationToken` is declared.
      *
      * From a PIN operator session, `type: 'refund'` is the `'shift.refund'`
      * elevated action and `type: 'cash-out'` is `'shift.cash-out'`; both bind the
@@ -377,19 +335,13 @@ declare global {
      * Held to its schema by `AssertShiftMovementRequestMatchesSchema`.
      */
     interface ShiftMovementRequest extends TerminalElevationAuthorization {
-        type: 'cash-in' | 'cash-out' | 'refund' | 'tip';
+        type: 'cash-in' | 'cash-out' | 'refund';
         /** Above zero, at most the platform money-input cap. */
         amount: number;
         /** At most 500 characters. */
         concept?: string;
         /** A platform catalog id or ISO code the drawer declared. */
         currency?: string;
-        /**
-         * On a `tip` only — any other `type` carrying it is refused `400`, never
-         * ignored. The worker the tip is owed to; defaults to the caller. Trimmed,
-         * 1–64 characters.
-         */
-        recipientUserId?: string;
     }
     /**
      * A store's configurable bill/coin denomination catalog, used to validate a
@@ -513,131 +465,6 @@ declare global {
         /** Present and `true` only when the fold hit its page bound. */
         truncated?: boolean;
     }
-    /**
-     * What the store owes one worker in tips, in one currency. PK
-     * `STORE#{storeId}`, SK `TIPBAL#{userId}#{currency}`.
-     *
-     * A tip is a LIABILITY the store holds for a named worker, never store
-     * revenue (DNU 731/2024 art. 1 and 3). This row never enters the drawer sum:
-     * the cash side of a tip is its `CashEvent`, and this is the worker's side.
-     * Balances are per currency and are never converted.
-     */
-    interface TipBalance {
-        storeId: string;
-        userId: string;
-        currency: string;
-        /** Quantized to the currency's ledger scale. */
-        owed: number;
-        /**
-         * When the balance was first credited after it was last zero (ms epoch).
-         * DNU 731/2024 art. 7 gives the store 24 hours to make a tip available.
-         * A debit that brings `owed` to exactly zero removes it; a partial debit
-         * keeps the oldest credit's clock, so `overdue` errs early, never late.
-         * The credit-back of a reversed payout is not new money: it restores the
-         * clock to the payout's own `createdAt` unless an older clock is running.
-         */
-        owedSince?: number;
-        updatedAt: number;
-    }
-    /**
-     * A `TipBalance` as `GET /shifts/tips?mode=balances` answers it: `overdue` is
-     * computed on read — true when some amount has been owed for more than 24
-     * hours (`owedSince`). No cron and no notification stand behind it.
-     */
-    interface TipBalanceView extends TipBalance {
-        overdue: boolean;
-    }
-    /** The acts the tip ledger records. */
-    type TipOperationKind = 'receive' | 'allocate' | 'payout' | 'reverse';
-    /**
-     * One immutable tip act. PK `STORE#{storeId}`, SK `TIPOP#{operationId}`,
-     * written under `attribute_not_exists(SK)` in the same transaction as every
-     * balance it moves, so it is both the audit row and the idempotency anchor.
-     */
-    interface TipOperation {
-        storeId: string;
-        operationId: string;
-        kind: TipOperationKind;
-        /** How a `receive` arrived: through the drawer, or already in the store's account. */
-        channel?: 'cash' | 'electronic';
-        /** Approved provider payment backing this electronic receipt. */
-        provider?: 'mercadopago' | 'stripe';
-        providerPaymentId?: string;
-        /** How a `payout` left (copied onto the `reverse` that undoes it). */
-        method?: 'cash' | 'transfer';
-        currency: string;
-        amount: number;
-        /** Who recorded the act. Provider-backed receipts may credit this same worker. */
-        actorUserId: string;
-        /** One signed delta per affected worker. */
-        legs: {
-            userId: string;
-            delta: number;
-        }[];
-        /**
-         * The drawer the act's `CashEvent` was written in — a cash `receive`, a cash
-         * `payout`, or the compensation of a reversed cash act. Absent on a
-         * ledger-only act.
-         */
-        shiftId?: string;
-        /** The `CashEvent` the act wrote, under `shiftId`. */
-        eventId?: string;
-        /** An opaque client reference. Never read or written as an order. */
-        orderId?: string;
-        /** A `Store.paymentMethods` id, as an opaque reference. */
-        paymentMethod?: number;
-        note?: string;
-        /** On a `reverse`: the `receive` or `payout` it undoes. */
-        reversesOperationId?: string;
-        /**
-         * On a reversed `receive` or `payout`: the `reverse` that undid it. The ONE
-         * attribute ever written onto a stored operation, set once under
-         * `attribute_not_exists`, so an act is reversed at most once.
-         */
-        reversedBy?: string;
-        createdAt: number;
-    }
-    /**
-     * One signed movement of one worker's balance. PK `STORE#{storeId}`, SK
-     * `TIPENTRY#{userId}#{createdAt}#{operationId}` — a worker's history reads
-     * back in time order from one prefix.
-     */
-    interface TipEntry {
-        storeId: string;
-        userId: string;
-        currency: string;
-        operationId: string;
-        kind: TipOperationKind;
-        delta: number;
-        createdAt: number;
-    }
-    /**
-     * `POST /shifts/tips` `mode: 'payout'` — settle a worker's tip balance. Mirrors
-     * the request side of `tipPayoutSchema` (`stacks/lambdas/shifts/_tips.ts`); the
-     * schema strips unknown keys, so the root `elevationToken` is read off the raw
-     * body.
-     *
-     * From a PIN operator session, `method: 'cash'` is the `'tip.cash-payout'`
-     * elevated action: mint it with no `subjectId` (see
-     * {@link TerminalElevationRequest.subjectId}) and attach the token here.
-     * `method: 'transfer'` is ledger-only and needs no elevation.
-     *
-     * Held to its schema by `AssertTipPayoutRequestMatchesSchema`.
-     */
-    interface TipPayoutRequest extends TerminalElevationAuthorization {
-        mode: 'payout';
-        /** A client-minted UUID — the act's idempotency anchor (`TipOperation.operationId`). */
-        operationId: string;
-        /** Trimmed, 1–64 characters. Never the caller. */
-        payeeUserId: string;
-        /** Above zero, at most the platform money-input cap. */
-        amount: number;
-        /** A platform catalog id or ISO code. */
-        currency: string;
-        method: 'cash' | 'transfer';
-        /** Trimmed, 1–500 characters. */
-        note?: string;
-    }
 }
 /**
  * Refusals from the cash-shift surface — `stacks/lambdas/shifts/*.ts`
@@ -672,32 +499,6 @@ declare global {
  */
 export declare const SHIFT_ERROR_CODES: readonly ["INVALID_SHIFT_ID", "SHIFT_NOT_FOUND", "SHIFT_ALREADY_OPEN", "SHIFT_NOT_OPEN", "SHIFT_NOT_CLOSED", "SHIFT_OWNER_MISMATCH", "CURRENCY_MISMATCH", "BUCKET_COUNTS_INVALID", "BUCKET_REVIEW_INVALID", "BUCKET_COUNT_MISSING", "SHIFT_CHANGED", "SHIFT_EVENTS_TRUNCATED", "SELF_APPROVAL_FORBIDDEN", "INVALID_DENOMINATION", "INVALID_CURSOR", "ROLE_FORBIDDEN", "VALIDATION_FAILED"];
 export type ShiftErrorCode = (typeof SHIFT_ERROR_CODES)[number];
-/**
- * Refusals from the tip ledger — `POST /shifts/{id}/movements` with `type: 'tip'`
- * and `/shifts/tips`.
- *
- * - `TIP_RECIPIENT_NOT_FOUND` · 404 — the named worker is missing, disabled or
- *   removed, or is a print agent or an accountant login (neither can be paid).
- * - `TIP_SELF_ACTION_FORBIDDEN` · 403 — an employer act whose actor is also the
- *   recipient or payee.
- * - `TIP_OPERATION_CONFLICT` · 409 — an `operationId` already used for a
- *   different act.
- * - `TIP_BALANCE_CHANGED` · 409 — the tip's transaction collided with another
- *   write on the same tip-ledger row (`TransactionConflict`), or a balance moved
- *   between the debit's read and its write; nothing was written, retry with the
- *   same `operationId`.
- * - `TIP_INSUFFICIENT_BALANCE` · 409 — a debit (`allocate`, `payout`, or the
- *   `reverse` of a `receive`) larger than what the worker is owed.
- * - `TIP_ALREADY_REVERSED` · 409 — the target operation was already reversed.
- * - `TIP_NOT_REVERSIBLE` · 400 — only a `receive` or a `payout` can be
- *   reversed; an `allocate` is corrected by the recipient re-allocating.
- * - `TIP_OPERATION_NOT_FOUND` · 404 — `targetOperationId` names no operation.
- *
- * ⚠️ Cross-cutting refusals (`CAPABILITY_REQUIRED`, `VALIDATION_FAILED`, the
- * drawer's own codes) are NOT repeated here.
- */
-export declare const TIP_ERROR_CODES: readonly ["TIP_INSUFFICIENT_BALANCE", "TIP_BALANCE_CHANGED", "TIP_OPERATION_CONFLICT", "TIP_RECIPIENT_NOT_FOUND", "TIP_SELF_ACTION_FORBIDDEN", "TIP_ALREADY_REVERSED", "TIP_NOT_REVERSIBLE", "TIP_OPERATION_NOT_FOUND"];
-export type TipErrorCode = (typeof TIP_ERROR_CODES)[number];
 /**
  * Where a {@link ShiftMethodTotal}'s `label` came from.
  *

package/dist/cash.js

@@ -48,40 +48,6 @@ export const SHIFT_ERROR_CODES = [
     'ROLE_FORBIDDEN',
     'VALIDATION_FAILED',
 ];
-/**
- * Refusals from the tip ledger — `POST /shifts/{id}/movements` with `type: 'tip'`
- * and `/shifts/tips`.
- *
- * - `TIP_RECIPIENT_NOT_FOUND` · 404 — the named worker is missing, disabled or
- *   removed, or is a print agent or an accountant login (neither can be paid).
- * - `TIP_SELF_ACTION_FORBIDDEN` · 403 — an employer act whose actor is also the
- *   recipient or payee.
- * - `TIP_OPERATION_CONFLICT` · 409 — an `operationId` already used for a
- *   different act.
- * - `TIP_BALANCE_CHANGED` · 409 — the tip's transaction collided with another
- *   write on the same tip-ledger row (`TransactionConflict`), or a balance moved
- *   between the debit's read and its write; nothing was written, retry with the
- *   same `operationId`.
- * - `TIP_INSUFFICIENT_BALANCE` · 409 — a debit (`allocate`, `payout`, or the
- *   `reverse` of a `receive`) larger than what the worker is owed.
- * - `TIP_ALREADY_REVERSED` · 409 — the target operation was already reversed.
- * - `TIP_NOT_REVERSIBLE` · 400 — only a `receive` or a `payout` can be
- *   reversed; an `allocate` is corrected by the recipient re-allocating.
- * - `TIP_OPERATION_NOT_FOUND` · 404 — `targetOperationId` names no operation.
- *
- * ⚠️ Cross-cutting refusals (`CAPABILITY_REQUIRED`, `VALIDATION_FAILED`, the
- * drawer's own codes) are NOT repeated here.
- */
-export const TIP_ERROR_CODES = [
-    'TIP_INSUFFICIENT_BALANCE',
-    'TIP_BALANCE_CHANGED',
-    'TIP_OPERATION_CONFLICT',
-    'TIP_RECIPIENT_NOT_FOUND',
-    'TIP_SELF_ACTION_FORBIDDEN',
-    'TIP_ALREADY_REVERSED',
-    'TIP_NOT_REVERSIBLE',
-    'TIP_OPERATION_NOT_FOUND',
-];
 /**
  * Where a {@link ShiftMethodTotal}'s `label` came from.
  *

package/dist/cjs/cash.js

@@ -1,6 +1,6 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.METHOD_LABEL_SOURCES = exports.TIP_ERROR_CODES = exports.SHIFT_ERROR_CODES = void 0;
+exports.METHOD_LABEL_SOURCES = exports.SHIFT_ERROR_CODES = void 0;
 /**
  * Refusals from the cash-shift surface — `stacks/lambdas/shifts/*.ts`
  * (`_get`, `_post`, `_patchClose`, `_postMovement`, `_patchReconcile`).
@@ -51,40 +51,6 @@ exports.SHIFT_ERROR_CODES = [
     'ROLE_FORBIDDEN',
     'VALIDATION_FAILED',
 ];
-/**
- * Refusals from the tip ledger — `POST /shifts/{id}/movements` with `type: 'tip'`
- * and `/shifts/tips`.
- *
- * - `TIP_RECIPIENT_NOT_FOUND` · 404 — the named worker is missing, disabled or
- *   removed, or is a print agent or an accountant login (neither can be paid).
- * - `TIP_SELF_ACTION_FORBIDDEN` · 403 — an employer act whose actor is also the
- *   recipient or payee.
- * - `TIP_OPERATION_CONFLICT` · 409 — an `operationId` already used for a
- *   different act.
- * - `TIP_BALANCE_CHANGED` · 409 — the tip's transaction collided with another
- *   write on the same tip-ledger row (`TransactionConflict`), or a balance moved
- *   between the debit's read and its write; nothing was written, retry with the
- *   same `operationId`.
- * - `TIP_INSUFFICIENT_BALANCE` · 409 — a debit (`allocate`, `payout`, or the
- *   `reverse` of a `receive`) larger than what the worker is owed.
- * - `TIP_ALREADY_REVERSED` · 409 — the target operation was already reversed.
- * - `TIP_NOT_REVERSIBLE` · 400 — only a `receive` or a `payout` can be
- *   reversed; an `allocate` is corrected by the recipient re-allocating.
- * - `TIP_OPERATION_NOT_FOUND` · 404 — `targetOperationId` names no operation.
- *
- * ⚠️ Cross-cutting refusals (`CAPABILITY_REQUIRED`, `VALIDATION_FAILED`, the
- * drawer's own codes) are NOT repeated here.
- */
-exports.TIP_ERROR_CODES = [
-    'TIP_INSUFFICIENT_BALANCE',
-    'TIP_BALANCE_CHANGED',
-    'TIP_OPERATION_CONFLICT',
-    'TIP_RECIPIENT_NOT_FOUND',
-    'TIP_SELF_ACTION_FORBIDDEN',
-    'TIP_ALREADY_REVERSED',
-    'TIP_NOT_REVERSIBLE',
-    'TIP_OPERATION_NOT_FOUND',
-];
 /**
  * Where a {@link ShiftMethodTotal}'s `label` came from.
  *

package/dist/cjs/gating.js

@@ -18,9 +18,8 @@ exports.GATING_ERROR_CODES = void 0;
  *   `message`) — its lifecycle leaving `active`, a sales channel dropped,
  *   hidden from the storefront, or its price left with nothing to derive from —
  *   as the product-group write does an archive or a draft of an active group,
- *   the kit save a product it would make a kit, `POST /stripe` a payment
- *   carrying a tip, `POST /warehouses` a depósito taken out of service or re-pointed to
- *   another punto de venta,
+ *   the kit save a product it would make a kit, `POST /warehouses` a depósito
+ *   taken out of service or re-pointed to another punto de venta,
  *   `POST /transfers` a dispatched transfer cancelled or closed short,
  *   `PATCH /store` a change to the stock a sales channel is fed from, the
  *   customer, brand, attribute and category writes a disable of a row not

package/dist/cjs/mercadopago.js

@@ -1,15 +1,13 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.MP_REFUND_RECOVERY_ERROR_CODES = exports.MP_POINT_TIP_ERROR_CODES = exports.MP_DYNAMIC_QR_ERROR_CODES = void 0;
+exports.MP_DYNAMIC_QR_ERROR_CODES = void 0;
 /**
  * Dynamic QR initiation refusals, by status:
- * - 400 malformed request (`VALIDATION_FAILED`, `TIP_EXCEEDS_ORDER`, `TIP_ORDER_REQUIRED`), or an
- *   order whose paid sum cannot be converted for want of a usable rate (`FX_CONVERSION_UNAVAILABLE`);
- * - 403 permission, plan or support session (`CAPABILITY_REQUIRED`, `ROLE_FORBIDDEN`,
- *   `PLAN_UPGRADE_REQUIRED`, `IMPERSONATION_READONLY`);
- * - 404 missing order or worker (`TIP_ORDER_NOT_FOUND`, `TIP_RECIPIENT_NOT_FOUND`; the POST never
- *   answers `ORDER_NOT_FOUND`, only the re-sync read below does);
- * - 409 order state, account, attempt or allocation conflicts (every other order/tip/attempt code);
+ * - 400 malformed request (`VALIDATION_FAILED`, an unknown body key included);
+ * - 403 permission or plan (`CAPABILITY_REQUIRED`, `ROLE_FORBIDDEN`,
+ *   `PLAN_UPGRADE_REQUIRED`);
+ * - 409 order state or a held order fence (`ORDER_CANCELLED`, `MP_DYN_QR_IN_PROGRESS`); the POST
+ *   never answers `ORDER_NOT_FOUND`, only the re-sync read below does;
  * - 412 connection or configuration (`MP_NOT_CONNECTED`, `MP_TOKEN_EXPIRED`, `MP_USER_ID_MISSING`,
  *   `MP_NO_STORE_ON_ACCOUNT`);
  * - 502 a definite POS or QR rejection (`MP_DYN_POS_CREATE_FAILED`, `MP_POS_INVALID`,
@@ -19,23 +17,13 @@ exports.MP_REFUND_RECOVERY_ERROR_CODES = exports.MP_POINT_TIP_ERROR_CODES = expo
  * (`GET /mercadopago/qr/dynamic?orderId=`) uses `VALIDATION_FAILED`, `PLAN_UPGRADE_REQUIRED`,
  * `CAPABILITY_REQUIRED`, `ORDER_NOT_FOUND` and `ORDER_CANCELLED` from this list.
  *
- * Per Idempotency-Key on the tipped path: `MP_DYN_QR_IN_PROGRESS` = in flight
- * (keep the key, poll); `MP_DYN_QR_REJECTED` = ended with no live charge (a
- * fresh key is safe); `MP_DYN_QR_EXPIRED` = its QR expired (permanent for that
- * key). A `contacting` attempt (MercadoPago may have been called) stays blocked
- * indefinitely; a `reserved` one (provably never contacted) is released once it
- * outlives the Lambda timeout. A fresh tipped reservation on an order already
- * fully paid (till tenders plus linked payments cover its total, as its
- * `financialStatus` derives) answers `PAYMENT_ALREADY_RECEIVED`; a part-paid
- * order (a split) still mints the remainder. When a till tender or linked payment
- * is in a currency the store holds no usable rate for, the paid sum is unknown, not
- * paid: it answers `400 FX_CONVERSION_UNAVAILABLE` (configure the rate in Monedas,
- * then retry with the same key).
- * `MP_DYN_QR_INVALID` is untipped-only: on the tipped path a malformed 2xx is
- * `MP_DYN_QR_UNCONFIRMED`. The retired `{ orderId }`-only body answers
- * `VALIDATION_FAILED`. `INVALID_ORDER_STATE`, `ORDER_FX_RATE_UNAVAILABLE` and
- * `ORDER_FX_AMOUNT_TOO_SMALL` were that body's alone and are no longer emitted;
- * they stay listed so an existing client switch still compiles.
+ * An order-bound charge holds the order's QR fence while it mints, and another charge for the
+ * same order meanwhile answers `MP_DYN_QR_IN_PROGRESS`. A `contacting` attempt (MercadoPago may
+ * have been called) stays blocked indefinitely; a `reserved` one (provably never contacted) is
+ * released once it outlives the Lambda timeout. A QR MercadoPago returned whose attempt could not
+ * be recorded answers `MP_DYN_QR_UNCONFIRMED`; a malformed 2xx answers `MP_DYN_QR_INVALID`.
+ * The retired `{ orderId }`-only body answers `VALIDATION_FAILED`. `INVALID_ORDER_STATE`,
+ * `ORDER_FX_RATE_UNAVAILABLE` and `ORDER_FX_AMOUNT_TOO_SMALL` were that body's alone.
  */
 exports.MP_DYNAMIC_QR_ERROR_CODES = [
     'VALIDATION_FAILED',
@@ -51,49 +39,11 @@ exports.MP_DYNAMIC_QR_ERROR_CODES = [
     'PLAN_UPGRADE_REQUIRED',
     'ORDER_CANCELLED',
     'INVALID_ORDER_STATE',
-    'PAYMENT_ALREADY_RECEIVED',
     'ORDER_NOT_FOUND',
     'ORDER_FX_RATE_UNAVAILABLE',
     'ORDER_FX_AMOUNT_TOO_SMALL',
     'CAPABILITY_REQUIRED',
     'ROLE_FORBIDDEN',
-    'IMPERSONATION_READONLY',
-    'TIP_EXCEEDS_ORDER',
-    'TIP_RECIPIENT_NOT_FOUND',
-    'TIP_ACCOUNT_UNVERIFIED',
-    'TIP_SHARED_ACCOUNT_FORBIDDEN',
-    'TIP_ORDER_REQUIRED',
-    'TIP_ORDER_NOT_FOUND',
-    'TIP_OPERATION_CONFLICT',
-    'TIP_PAYMENT_NOT_FOUND',
     'MP_DYN_QR_IN_PROGRESS',
-    'MP_DYN_QR_EXPIRED',
     'MP_DYN_QR_UNCONFIRMED',
-    'MP_DYN_QR_REJECTED',
-    'FX_CONVERSION_UNAVAILABLE',
-];
-exports.MP_POINT_TIP_ERROR_CODES = [
-    'TIP_EXCEEDS_ORDER',
-    'VALIDATION_FAILED',
-    'CAPABILITY_REQUIRED',
-    'ROLE_FORBIDDEN',
-    'PLAN_UPGRADE_REQUIRED',
-    'TIP_RECIPIENT_NOT_FOUND',
-    'TIP_ACCOUNT_UNVERIFIED',
-    'TIP_SHARED_ACCOUNT_FORBIDDEN',
-    'TIP_ORDER_REQUIRED',
-    'TIP_ORDER_NOT_FOUND',
-    'TIP_OPERATION_CONFLICT',
-    'TIP_PAYMENT_MISMATCH',
-    'TIP_PAYMENT_NOT_FOUND',
-    'TIP_REFUND_EXCEEDS_ORDER',
-];
-exports.MP_REFUND_RECOVERY_ERROR_CODES = [
-    'VALIDATION_FAILED',
-    'MISSING_PAYMENT_ID',
-    'MP_REFUND_RECOVERY_NOT_FOUND',
-    'MP_REFUND_RECOVERY_MISMATCH',
-    'MP_REFUND_IN_PROGRESS',
-    'MP_NOT_CONNECTED',
-    'MP_REFUND_PROVIDER_UNAVAILABLE',
 ];

package/dist/cjs/report.js

@@ -23,9 +23,6 @@ exports.REPORT_WAREHOUSE_NONE = 'none';
  * - `change` — a `change` event: cash handed back while settling a sale.
  * - `refund` — a `refund` event: a refund movement recorded on a drawer, or the
  *   cash a sales seña refund or a customer order return gives back.
- * - `tip` — a `tip` event, and the reversal of one.
- * - `tip-payout` — a `tip-payout` event (cash paid to a worker against their
- *   tip balance), and the reversal of one.
  * - `account` — a `cash-in`/`cash-out` carrying `accountId`: the cash side of a
  *   customer-account payment, and its reversal.
  * - `cash-book` — a `cash-in`/`cash-out` carrying `cashId` and no `accountId`:
@@ -48,8 +45,6 @@ exports.CASH_FLOW_SOURCES = [
     'sales',
     'change',
     'refund',
-    'tip',
-    'tip-payout',
     'account',
     'cash-book',
     'service-order-deposit',

package/dist/cjs/subscription.js

@@ -24,3 +24,72 @@
  *   enabled:false until they do.
  */
 Object.defineProperty(exports, "__esModule", { value: true });
+exports.FEATURE_KEYS = exports.PLAN_TIERS = void 0;
+/*
+ * Runtime tuples for the unions above.
+ *
+ * A union alone cannot be iterated, and any consumer that needs to enumerate
+ * every tier or key — zeroing a breakdown, fanning a query across tiers,
+ * rendering a pricing table's rows — otherwise hand-rolls its own copy that
+ * compiles fine while silently omitting a member. A missing member is not a
+ * visible break: it is a bucket that reads zero forever, or a row that never
+ * renders.
+ *
+ * ⚠️ `satisfies readonly PlanTier[]` alone does NOT catch that — it checks each
+ * element IS a tier, never that every tier is present. Hence `exhaustiveTuple`,
+ * whose second type parameter fails to resolve unless the tuple covers the
+ * union, making an omission a compile error at the tuple itself. Module-private
+ * on purpose: it is a type-level trick, not part of the published surface.
+ */
+const exhaustiveTuple = () => (tuple) => tuple;
+/** Every plan tier, in rank order (lowest first). */
+exports.PLAN_TIERS = exhaustiveTuple()(['basico', 'emprendedor', 'profesional', 'avanzado']);
+/**
+ * Every gated feature key.
+ *
+ * ⚠️ Adding a member here is not the whole change, and `typecheck` is what
+ * stops it shipping half-done. In the api, a new key needs a grant in **every
+ * tier** of `PLAN_FEATURES` (`stacks/services/planFeatureMatrix.ts`): that
+ * constant is typed total over every `PlanTier` × `FeatureKey` cell, so a tier
+ * missing the new key's grant, or a grant of the wrong shape for the key's
+ * declared `type`, fails `typecheck` at the `PLAN_FEATURES` declaration
+ * itself. It also widens the api's per-store override key schema, so a new key
+ * immediately becomes a valid override target.
+ *
+ * ⚠️ **A new member also obliges an api PLATFORM-STACK deploy.** Entitlements
+ * resolve inside the Lambda authorizer, built in `PlatformStack`. Deploying only
+ * the handler stacks leaves a STALE authorizer running the previous matrix: the
+ * key is absent from the resolved map, where a boolean gate refuses but a
+ * metered / lifetime cap PASSES THROUGH — a new cap silently unbounded.
+ * Checklist: `docs/PLANS_AND_ENTITLEMENTS.md` in the api repo.
+ */
+exports.FEATURE_KEYS = [
+    'afipInvoicing',
+    'suppliers',
+    'advancedReports',
+    'cashManagement',
+    'importExport',
+    'domesticPayments',
+    'stripePayments',
+    'whatsappCommerce',
+    'aiFeatures',
+    'mobileApp',
+    'customBranding',
+    'customDomain',
+    'prioritySupport',
+    'advancedPricing',
+    'marketplaceChannels',
+    'storefront',
+    'loyalty',
+    'marketing',
+    'mandatory2fa',
+    'maxUsers',
+    'maxProducts',
+    'maxCustomers',
+    'maxWarehouses',
+    'priceListsMax',
+    'webhooks',
+    'maxOrdersMonth',
+    'maxInvoicesMonth',
+    'whatsappMessages',
+];

package/dist/cjs/terminal.js

@@ -185,7 +185,6 @@ exports.TERMINAL_ELEVATION_ACTIONS = [
     'shift.cash-out',
     'cash.withdrawal',
     'account.cash-debit',
-    'tip.cash-payout',
 ];
 /**
  * Existing PIN, validation and idempotency refusals retain their current

package/dist/gating.d.ts

@@ -15,9 +15,8 @@
  *   `message`) — its lifecycle leaving `active`, a sales channel dropped,
  *   hidden from the storefront, or its price left with nothing to derive from —
  *   as the product-group write does an archive or a draft of an active group,
- *   the kit save a product it would make a kit, `POST /stripe` a payment
- *   carrying a tip, `POST /warehouses` a depósito taken out of service or re-pointed to
- *   another punto de venta,
+ *   the kit save a product it would make a kit, `POST /warehouses` a depósito
+ *   taken out of service or re-pointed to another punto de venta,
  *   `POST /transfers` a dispatched transfer cancelled or closed short,
  *   `PATCH /store` a change to the stock a sales channel is fed from, the
  *   customer, brand, attribute and category writes a disable of a row not

package/dist/gating.js

@@ -15,9 +15,8 @@
  *   `message`) — its lifecycle leaving `active`, a sales channel dropped,
  *   hidden from the storefront, or its price left with nothing to derive from —
  *   as the product-group write does an archive or a draft of an active group,
- *   the kit save a product it would make a kit, `POST /stripe` a payment
- *   carrying a tip, `POST /warehouses` a depósito taken out of service or re-pointed to
- *   another punto de venta,
+ *   the kit save a product it would make a kit, `POST /warehouses` a depósito
+ *   taken out of service or re-pointed to another punto de venta,
  *   `POST /transfers` a dispatched transfer cancelled or closed short,
  *   `PATCH /store` a change to the stock a sales channel is fed from, the
  *   customer, brand, attribute and category writes a disable of a row not