platform-types 1.10.699 → 1.10.701

package/dist/mercadopago.d.ts

@@ -1,40 +1,8 @@
 declare global {
-    type MpRefundRequest = ({
+    type MpRefundRequest = {
         amount?: number;
         reason?: string;
-        mode?: never;
-    } | {
-        mode: 'resume';
-        amount?: never;
-        reason?: never;
-    }) & TerminalElevationAuthorization;
-    /** Exact provider outcome without a local monetary refund stamp. */
-    type MpRefundProviderOutcomeResponse = {
-        message: string;
-        data: {
-            paymentId: string;
-            refundId: string;
-            amount: number;
-            status: 'in_process' | 'rejected';
-            recordedLocally: false;
-            /** False for initial POST; true for history-only recovery. */
-            recovered: boolean;
-        };
-    };
-    type MpRefundResumeResponse = {
-        message: string;
-        data: {
-            paymentId: string;
-            refundId: string;
-            amount: number | null;
-            status: string;
-            type: 'partial';
-            reconciled: boolean;
-            reconcileReason?: string;
-            recordedLocally: true;
-            recovered: true;
-        };
-    } | MpRefundProviderOutcomeResponse;
+    } & TerminalElevationAuthorization;
     /**
      * Device fetched from `GET /point/integration-api/devices` (BE → FE so the
      * admin can pick which physical device receives a payment intent).
@@ -78,49 +46,33 @@ declare global {
     }
     interface MpPointIntentRequest {
         deviceId: string;
-        /** Order portion in ARS major units; tip is charged in addition. */
+        /** Charge in ARS major units. */
         amount: number;
         currency: 'ARS';
         externalReference: string;
         ticketNumber?: string;
         printOnTerminal?: boolean;
-        /** Positive, cent-exact ARS major units, no greater than amount. Recipient defaults to cashier. */
-        tip?: {
-            amount: number;
-            recipientUserId?: string;
-        };
     }
     interface MpPointIntentResponse {
         message: string;
         data: {
             intentId: string | null;
             deviceId: string;
-            /** Gross provider charge in ARS major units. */
+            /** Charge in ARS major units. */
             amount: number;
             currency: 'ARS';
-            /** Resolved caller reference, before the server-owned tip carrier. */
+            /** Resolved caller reference. */
             externalReference: string;
             isNew: boolean;
-            /** Present only when the charge includes a tip. */
-            orderAmount?: number;
-            tip?: {
-                amount: number;
-                recipientUserId: string;
-            };
         };
     }
     interface MpDynamicQrRequest {
-        /** Order portion in ARS major units; tip is charged in addition. */
+        /** Charge in ARS major units. */
         amount: number;
         currency: 'ARS';
         externalReference?: string;
         customerId?: string;
         expirationMinutes?: number;
-        /** Positive, cent-exact ARS major units, no greater than amount. Requires an ORD reference. */
-        tip?: {
-            amount: number;
-            recipientUserId?: string;
-        };
     }
     interface MpDynamicQrResponse {
         qrData: string;
@@ -129,57 +81,30 @@ declare global {
         externalReference: string;
         customerId?: string;
         amount: number;
-        /** Present only when the charge includes a tip; no recipient identity. */
-        orderAmount?: number;
-        tipAmount?: number;
         currency: string;
         expiresAt: number;
         createdAt: number;
         isNew: boolean;
-        /**
-         * Server clock (Unix ms) when this response was built. Present on the tipped
-         * create and replay; never persisted, so a replay carries the replay's instant.
-         * Estimate the client clock offset from this, not from `createdAt` (the
-         * reservation instant, taken before the POS lookup and the provider call).
-         */
-        serverNow?: number;
     }
     /**
-     * `data` of `409 MP_DYN_QR_IN_PROGRESS`. `scope: 'attempt'` = this
-     * Idempotency-Key's own attempt is in flight; `'order'` = another identity
-     * holds the order's QR fence. `since` = the blocking attempt's reservation
-     * instant (absent only on a fence written before it was stamped). `expiresAt`
-     * only on `state: 'ready'` (an unexpired tipped QR), the instant the fence
-     * frees; `reserved`/`contacting` carry none.
+     * `data` of `409 MP_DYN_QR_IN_PROGRESS`: another attempt holds the order's QR
+     * fence. `serverNow` = the refusal's own instant; `since` = the blocking
+     * attempt's reservation instant (absent only on a fence written before it was
+     * stamped).
      */
     interface MpDynamicQrInProgressDetails {
         serverNow: number;
-        scope: 'attempt' | 'order';
-        state: 'reserved' | 'contacting' | 'ready';
+        scope: 'order';
+        state: 'reserved' | 'contacting';
         since?: number;
-        expiresAt?: number;
-    }
-    /** `data` of `409 MP_DYN_QR_EXPIRED`: the same key's saved QR expired at `expiresAt`. */
-    interface MpDynamicQrExpiredDetails {
-        serverNow: number;
-        expiresAt: number;
-    }
-    /** `data` of `409 MP_DYN_QR_REJECTED`: the same key's attempt ended with no live charge. */
-    interface MpDynamicQrRejectedDetails {
-        serverNow: number;
     }
     /**
      * `data` of `GET /mercadopago/qr/dynamic?orderId=` — the re-sync read of the order's
-     * dynamic QR. Never carries the Idempotency-Key, owner, fingerprint or tip recipient.
-     * `ready` = an unexpired tipped QR (`qr.isNew` is always false); `pending` = an attempt
+     * dynamic QR. Never carries the attempt's key or owner. `pending` = an attempt
      * holds the order's fence (`since` = its reservation instant; no `qrData`); `none` =
      * nothing blocks the order.
      */
     type MpDynamicQrStateResponse = {
-        state: 'ready';
-        qr: MpDynamicQrResponse;
-        serverNow: number;
-    } | {
         state: 'pending';
         phase: 'reserved' | 'contacting';
         since?: number;
@@ -254,13 +179,11 @@ declare global {
 }
 /**
  * Dynamic QR initiation refusals, by status:
- * - 400 malformed request (`VALIDATION_FAILED`, `TIP_EXCEEDS_ORDER`, `TIP_ORDER_REQUIRED`), or an
- *   order whose paid sum cannot be converted for want of a usable rate (`FX_CONVERSION_UNAVAILABLE`);
- * - 403 permission, plan or support session (`CAPABILITY_REQUIRED`, `ROLE_FORBIDDEN`,
- *   `PLAN_UPGRADE_REQUIRED`, `IMPERSONATION_READONLY`);
- * - 404 missing order or worker (`TIP_ORDER_NOT_FOUND`, `TIP_RECIPIENT_NOT_FOUND`; the POST never
- *   answers `ORDER_NOT_FOUND`, only the re-sync read below does);
- * - 409 order state, account, attempt or allocation conflicts (every other order/tip/attempt code);
+ * - 400 malformed request (`VALIDATION_FAILED`, an unknown body key included);
+ * - 403 permission or plan (`CAPABILITY_REQUIRED`, `ROLE_FORBIDDEN`,
+ *   `PLAN_UPGRADE_REQUIRED`);
+ * - 409 order state or a held order fence (`ORDER_CANCELLED`, `MP_DYN_QR_IN_PROGRESS`); the POST
+ *   never answers `ORDER_NOT_FOUND`, only the re-sync read below does;
  * - 412 connection or configuration (`MP_NOT_CONNECTED`, `MP_TOKEN_EXPIRED`, `MP_USER_ID_MISSING`,
  *   `MP_NO_STORE_ON_ACCOUNT`);
  * - 502 a definite POS or QR rejection (`MP_DYN_POS_CREATE_FAILED`, `MP_POS_INVALID`,
@@ -270,28 +193,14 @@ declare global {
  * (`GET /mercadopago/qr/dynamic?orderId=`) uses `VALIDATION_FAILED`, `PLAN_UPGRADE_REQUIRED`,
  * `CAPABILITY_REQUIRED`, `ORDER_NOT_FOUND` and `ORDER_CANCELLED` from this list.
  *
- * Per Idempotency-Key on the tipped path: `MP_DYN_QR_IN_PROGRESS` = in flight
- * (keep the key, poll); `MP_DYN_QR_REJECTED` = ended with no live charge (a
- * fresh key is safe); `MP_DYN_QR_EXPIRED` = its QR expired (permanent for that
- * key). A `contacting` attempt (MercadoPago may have been called) stays blocked
- * indefinitely; a `reserved` one (provably never contacted) is released once it
- * outlives the Lambda timeout. A fresh tipped reservation on an order already
- * fully paid (till tenders plus linked payments cover its total, as its
- * `financialStatus` derives) answers `PAYMENT_ALREADY_RECEIVED`; a part-paid
- * order (a split) still mints the remainder. When a till tender or linked payment
- * is in a currency the store holds no usable rate for, the paid sum is unknown, not
- * paid: it answers `400 FX_CONVERSION_UNAVAILABLE` (configure the rate in Monedas,
- * then retry with the same key).
- * `MP_DYN_QR_INVALID` is untipped-only: on the tipped path a malformed 2xx is
- * `MP_DYN_QR_UNCONFIRMED`. The retired `{ orderId }`-only body answers
- * `VALIDATION_FAILED`. `INVALID_ORDER_STATE`, `ORDER_FX_RATE_UNAVAILABLE` and
- * `ORDER_FX_AMOUNT_TOO_SMALL` were that body's alone and are no longer emitted;
- * they stay listed so an existing client switch still compiles.
+ * An order-bound charge holds the order's QR fence while it mints, and another charge for the
+ * same order meanwhile answers `MP_DYN_QR_IN_PROGRESS`. A `contacting` attempt (MercadoPago may
+ * have been called) stays blocked indefinitely; a `reserved` one (provably never contacted) is
+ * released once it outlives the Lambda timeout. A QR MercadoPago returned whose attempt could not
+ * be recorded answers `MP_DYN_QR_UNCONFIRMED`; a malformed 2xx answers `MP_DYN_QR_INVALID`.
+ * The retired `{ orderId }`-only body answers `VALIDATION_FAILED`. `INVALID_ORDER_STATE`,
+ * `ORDER_FX_RATE_UNAVAILABLE` and `ORDER_FX_AMOUNT_TOO_SMALL` were that body's alone.
  */
-export declare const MP_DYNAMIC_QR_ERROR_CODES: readonly ["VALIDATION_FAILED", "MP_NOT_CONNECTED", "MP_TOKEN_EXPIRED", "MP_USER_ID_MISSING", "MP_NO_STORE_ON_ACCOUNT", "MP_DYN_POS_CREATE_FAILED", "MP_POS_INVALID", "MP_DYN_QR_CREATE_FAILED", "MP_DYN_QR_INVALID", "PLATFORM_INTEGRATION_DISABLED", "PLAN_UPGRADE_REQUIRED", "ORDER_CANCELLED", "INVALID_ORDER_STATE", "PAYMENT_ALREADY_RECEIVED", "ORDER_NOT_FOUND", "ORDER_FX_RATE_UNAVAILABLE", "ORDER_FX_AMOUNT_TOO_SMALL", "CAPABILITY_REQUIRED", "ROLE_FORBIDDEN", "IMPERSONATION_READONLY", "TIP_EXCEEDS_ORDER", "TIP_RECIPIENT_NOT_FOUND", "TIP_ACCOUNT_UNVERIFIED", "TIP_SHARED_ACCOUNT_FORBIDDEN", "TIP_ORDER_REQUIRED", "TIP_ORDER_NOT_FOUND", "TIP_OPERATION_CONFLICT", "TIP_PAYMENT_NOT_FOUND", "MP_DYN_QR_IN_PROGRESS", "MP_DYN_QR_EXPIRED", "MP_DYN_QR_UNCONFIRMED", "MP_DYN_QR_REJECTED", "FX_CONVERSION_UNAVAILABLE"];
+export declare const MP_DYNAMIC_QR_ERROR_CODES: readonly ["VALIDATION_FAILED", "MP_NOT_CONNECTED", "MP_TOKEN_EXPIRED", "MP_USER_ID_MISSING", "MP_NO_STORE_ON_ACCOUNT", "MP_DYN_POS_CREATE_FAILED", "MP_POS_INVALID", "MP_DYN_QR_CREATE_FAILED", "MP_DYN_QR_INVALID", "PLATFORM_INTEGRATION_DISABLED", "PLAN_UPGRADE_REQUIRED", "ORDER_CANCELLED", "INVALID_ORDER_STATE", "ORDER_NOT_FOUND", "ORDER_FX_RATE_UNAVAILABLE", "ORDER_FX_AMOUNT_TOO_SMALL", "CAPABILITY_REQUIRED", "ROLE_FORBIDDEN", "MP_DYN_QR_IN_PROGRESS", "MP_DYN_QR_UNCONFIRMED"];
 export type MpDynamicQrErrorCode = (typeof MP_DYNAMIC_QR_ERROR_CODES)[number];
-export declare const MP_POINT_TIP_ERROR_CODES: readonly ["TIP_EXCEEDS_ORDER", "VALIDATION_FAILED", "CAPABILITY_REQUIRED", "ROLE_FORBIDDEN", "PLAN_UPGRADE_REQUIRED", "TIP_RECIPIENT_NOT_FOUND", "TIP_ACCOUNT_UNVERIFIED", "TIP_SHARED_ACCOUNT_FORBIDDEN", "TIP_ORDER_REQUIRED", "TIP_ORDER_NOT_FOUND", "TIP_OPERATION_CONFLICT", "TIP_PAYMENT_MISMATCH", "TIP_PAYMENT_NOT_FOUND", "TIP_REFUND_EXCEEDS_ORDER"];
-export type MpPointTipErrorCode = (typeof MP_POINT_TIP_ERROR_CODES)[number];
-export declare const MP_REFUND_RECOVERY_ERROR_CODES: readonly ["VALIDATION_FAILED", "MISSING_PAYMENT_ID", "MP_REFUND_RECOVERY_NOT_FOUND", "MP_REFUND_RECOVERY_MISMATCH", "MP_REFUND_IN_PROGRESS", "MP_NOT_CONNECTED", "MP_REFUND_PROVIDER_UNAVAILABLE"];
-export type MpRefundRecoveryErrorCode = (typeof MP_REFUND_RECOVERY_ERROR_CODES)[number];
 export {};

package/dist/mercadopago.js

@@ -1,12 +1,10 @@
 /**
  * Dynamic QR initiation refusals, by status:
- * - 400 malformed request (`VALIDATION_FAILED`, `TIP_EXCEEDS_ORDER`, `TIP_ORDER_REQUIRED`), or an
- *   order whose paid sum cannot be converted for want of a usable rate (`FX_CONVERSION_UNAVAILABLE`);
- * - 403 permission, plan or support session (`CAPABILITY_REQUIRED`, `ROLE_FORBIDDEN`,
- *   `PLAN_UPGRADE_REQUIRED`, `IMPERSONATION_READONLY`);
- * - 404 missing order or worker (`TIP_ORDER_NOT_FOUND`, `TIP_RECIPIENT_NOT_FOUND`; the POST never
- *   answers `ORDER_NOT_FOUND`, only the re-sync read below does);
- * - 409 order state, account, attempt or allocation conflicts (every other order/tip/attempt code);
+ * - 400 malformed request (`VALIDATION_FAILED`, an unknown body key included);
+ * - 403 permission or plan (`CAPABILITY_REQUIRED`, `ROLE_FORBIDDEN`,
+ *   `PLAN_UPGRADE_REQUIRED`);
+ * - 409 order state or a held order fence (`ORDER_CANCELLED`, `MP_DYN_QR_IN_PROGRESS`); the POST
+ *   never answers `ORDER_NOT_FOUND`, only the re-sync read below does;
  * - 412 connection or configuration (`MP_NOT_CONNECTED`, `MP_TOKEN_EXPIRED`, `MP_USER_ID_MISSING`,
  *   `MP_NO_STORE_ON_ACCOUNT`);
  * - 502 a definite POS or QR rejection (`MP_DYN_POS_CREATE_FAILED`, `MP_POS_INVALID`,
@@ -16,23 +14,13 @@
  * (`GET /mercadopago/qr/dynamic?orderId=`) uses `VALIDATION_FAILED`, `PLAN_UPGRADE_REQUIRED`,
  * `CAPABILITY_REQUIRED`, `ORDER_NOT_FOUND` and `ORDER_CANCELLED` from this list.
  *
- * Per Idempotency-Key on the tipped path: `MP_DYN_QR_IN_PROGRESS` = in flight
- * (keep the key, poll); `MP_DYN_QR_REJECTED` = ended with no live charge (a
- * fresh key is safe); `MP_DYN_QR_EXPIRED` = its QR expired (permanent for that
- * key). A `contacting` attempt (MercadoPago may have been called) stays blocked
- * indefinitely; a `reserved` one (provably never contacted) is released once it
- * outlives the Lambda timeout. A fresh tipped reservation on an order already
- * fully paid (till tenders plus linked payments cover its total, as its
- * `financialStatus` derives) answers `PAYMENT_ALREADY_RECEIVED`; a part-paid
- * order (a split) still mints the remainder. When a till tender or linked payment
- * is in a currency the store holds no usable rate for, the paid sum is unknown, not
- * paid: it answers `400 FX_CONVERSION_UNAVAILABLE` (configure the rate in Monedas,
- * then retry with the same key).
- * `MP_DYN_QR_INVALID` is untipped-only: on the tipped path a malformed 2xx is
- * `MP_DYN_QR_UNCONFIRMED`. The retired `{ orderId }`-only body answers
- * `VALIDATION_FAILED`. `INVALID_ORDER_STATE`, `ORDER_FX_RATE_UNAVAILABLE` and
- * `ORDER_FX_AMOUNT_TOO_SMALL` were that body's alone and are no longer emitted;
- * they stay listed so an existing client switch still compiles.
+ * An order-bound charge holds the order's QR fence while it mints, and another charge for the
+ * same order meanwhile answers `MP_DYN_QR_IN_PROGRESS`. A `contacting` attempt (MercadoPago may
+ * have been called) stays blocked indefinitely; a `reserved` one (provably never contacted) is
+ * released once it outlives the Lambda timeout. A QR MercadoPago returned whose attempt could not
+ * be recorded answers `MP_DYN_QR_UNCONFIRMED`; a malformed 2xx answers `MP_DYN_QR_INVALID`.
+ * The retired `{ orderId }`-only body answers `VALIDATION_FAILED`. `INVALID_ORDER_STATE`,
+ * `ORDER_FX_RATE_UNAVAILABLE` and `ORDER_FX_AMOUNT_TOO_SMALL` were that body's alone.
  */
 export const MP_DYNAMIC_QR_ERROR_CODES = [
     'VALIDATION_FAILED',
@@ -48,49 +36,11 @@ export const MP_DYNAMIC_QR_ERROR_CODES = [
     'PLAN_UPGRADE_REQUIRED',
     'ORDER_CANCELLED',
     'INVALID_ORDER_STATE',
-    'PAYMENT_ALREADY_RECEIVED',
     'ORDER_NOT_FOUND',
     'ORDER_FX_RATE_UNAVAILABLE',
     'ORDER_FX_AMOUNT_TOO_SMALL',
     'CAPABILITY_REQUIRED',
     'ROLE_FORBIDDEN',
-    'IMPERSONATION_READONLY',
-    'TIP_EXCEEDS_ORDER',
-    'TIP_RECIPIENT_NOT_FOUND',
-    'TIP_ACCOUNT_UNVERIFIED',
-    'TIP_SHARED_ACCOUNT_FORBIDDEN',
-    'TIP_ORDER_REQUIRED',
-    'TIP_ORDER_NOT_FOUND',
-    'TIP_OPERATION_CONFLICT',
-    'TIP_PAYMENT_NOT_FOUND',
     'MP_DYN_QR_IN_PROGRESS',
-    'MP_DYN_QR_EXPIRED',
     'MP_DYN_QR_UNCONFIRMED',
-    'MP_DYN_QR_REJECTED',
-    'FX_CONVERSION_UNAVAILABLE',
-];
-export const MP_POINT_TIP_ERROR_CODES = [
-    'TIP_EXCEEDS_ORDER',
-    'VALIDATION_FAILED',
-    'CAPABILITY_REQUIRED',
-    'ROLE_FORBIDDEN',
-    'PLAN_UPGRADE_REQUIRED',
-    'TIP_RECIPIENT_NOT_FOUND',
-    'TIP_ACCOUNT_UNVERIFIED',
-    'TIP_SHARED_ACCOUNT_FORBIDDEN',
-    'TIP_ORDER_REQUIRED',
-    'TIP_ORDER_NOT_FOUND',
-    'TIP_OPERATION_CONFLICT',
-    'TIP_PAYMENT_MISMATCH',
-    'TIP_PAYMENT_NOT_FOUND',
-    'TIP_REFUND_EXCEEDS_ORDER',
-];
-export const MP_REFUND_RECOVERY_ERROR_CODES = [
-    'VALIDATION_FAILED',
-    'MISSING_PAYMENT_ID',
-    'MP_REFUND_RECOVERY_NOT_FOUND',
-    'MP_REFUND_RECOVERY_MISMATCH',
-    'MP_REFUND_IN_PROGRESS',
-    'MP_NOT_CONNECTED',
-    'MP_REFUND_PROVIDER_UNAVAILABLE',
 ];

package/dist/payment.d.ts

@@ -1,12 +1,8 @@
 declare global {
-    /** POST /stripe: goods and tip use integer cents in the same currency. */
+    /** POST /stripe: `amount` is integer cents in `currency`. */
     interface StripeCreatePaymentIntentRequest {
         currency?: 'USD' | 'EUR';
         amount: number;
-        tip?: {
-            amount: number;
-            recipientUserId?: string;
-        };
         email?: string;
         orderId?: string;
         invoiceId?: string;
@@ -16,12 +12,8 @@ declare global {
         message: string;
         clientSecret: string | null;
     }
-    /**
-     * POST /stripe 4xx `error` codes from the request validation and the tip path.
-     * `STRIPE_TIP_ALREADY_PAID` (409) answers a replayed tipped create whose PaymentIntent
-     * already succeeded — no client secret is returned.
-     */
-    type StripeCreatePaymentIntentErrorCode = 'VALIDATION_FAILED' | 'IMPERSONATION_READONLY' | 'CAPABILITY_REQUIRED' | 'PLAN_UPGRADE_REQUIRED' | 'ORDER_CANCELLED' | 'TIP_EXCEEDS_ORDER' | 'TIP_RECIPIENT_NOT_FOUND' | 'TIP_ORDER_REQUIRED' | 'TIP_ORDER_NOT_FOUND' | 'TIP_OPERATION_CONFLICT' | 'TIP_PAYMENT_MISMATCH' | 'TIP_PAYMENT_NOT_FOUND' | 'STRIPE_TIP_IN_PROGRESS' | 'STRIPE_TIP_ALREADY_PAID';
+    /** POST /stripe 4xx `error` codes. */
+    type StripeCreatePaymentIntentErrorCode = 'VALIDATION_FAILED' | 'ORDER_CANCELLED';
     /** Informational provider state; never a received-money row or settlement. */
     interface MpPaymentObservation {
         paymentId: string;
@@ -55,12 +47,6 @@ declare global {
         paymentId: string;
         orderId?: string;
     }
-    /** Server-owned split of a provider payment; amounts share its currency. */
-    interface PaymentTipMetadata {
-        orderAmount: number;
-        tipAmount: number;
-        tipOperationId: string;
-    }
     /**
      * WebSocket broadcast payload for the `payment_received` action, fired when a
      * "money received" event is persisted (MP webhook, Stripe webhook, or MP
@@ -69,8 +55,6 @@ declare global {
      */
     type PaymentReceivedSource = 'mp' | 'stripe' | 'mp_movement';
     interface PaymentReceivedWsPayload {
-        /** Safe allocation figures; worker identity remains private to the tip ledger. */
-        paymentTip?: PaymentTipMetadata;
         source: PaymentReceivedSource;
         paymentId: string;
         total: number;
@@ -89,7 +73,6 @@ declare global {
      * server-side so the FE doesn't N+1 fetch.
      */
     interface PaymentReceived {
-        paymentTip?: PaymentTipMetadata;
         paymentId: string;
         source: PaymentReceivedSource;
         total: number;

package/dist/platform.d.ts

@@ -115,12 +115,8 @@ export interface ResetCashOpResult {
     shiftsDeleted: number;
     shiftEventsDeleted: number;
     openDrawersReleased: number;
-    /** The tip ledger under the same store: balances, replay anchors and entries. */
-    tipBalancesDeleted: number;
-    tipOperationsDeleted: number;
-    tipEntriesDeleted: number;
-    /** Immutable provider tip allocations removed before the ledger. Absent on older responses. */
-    tipAllocationsDeleted?: number;
+    /** The store's MercadoPago dynamic-QR fence and attempt rows. */
+    qrAttemptsDeleted: number;
     /** `false` → the time budget ran out; re-send the body with `cursor`. */
     complete: boolean;
     /** Present only when `complete` is `false`. */

package/dist/report.d.ts

@@ -1073,9 +1073,6 @@ export declare const REPORT_WAREHOUSE_NONE = "none";
  * - `change` — a `change` event: cash handed back while settling a sale.
  * - `refund` — a `refund` event: a refund movement recorded on a drawer, or the
  *   cash a sales seña refund or a customer order return gives back.
- * - `tip` — a `tip` event, and the reversal of one.
- * - `tip-payout` — a `tip-payout` event (cash paid to a worker against their
- *   tip balance), and the reversal of one.
  * - `account` — a `cash-in`/`cash-out` carrying `accountId`: the cash side of a
  *   customer-account payment, and its reversal.
  * - `cash-book` — a `cash-in`/`cash-out` carrying `cashId` and no `accountId`:
@@ -1094,7 +1091,7 @@ export declare const REPORT_WAREHOUSE_NONE = "none";
  * A compensation event (`compensation` set) falls in its original's source by
  * the same rule, so a reversal nets its original inside one source.
  */
-export declare const CASH_FLOW_SOURCES: readonly ["sales", "change", "refund", "tip", "tip-payout", "account", "cash-book", "service-order-deposit", "manual", "other", "legacy-cash-book"];
+export declare const CASH_FLOW_SOURCES: readonly ["sales", "change", "refund", "account", "cash-book", "service-order-deposit", "manual", "other", "legacy-cash-book"];
 /**
  * Why a cash-flow day is not ledger-complete:
  *

package/dist/report.js

@@ -20,9 +20,6 @@ export const REPORT_WAREHOUSE_NONE = 'none';
  * - `change` — a `change` event: cash handed back while settling a sale.
  * - `refund` — a `refund` event: a refund movement recorded on a drawer, or the
  *   cash a sales seña refund or a customer order return gives back.
- * - `tip` — a `tip` event, and the reversal of one.
- * - `tip-payout` — a `tip-payout` event (cash paid to a worker against their
- *   tip balance), and the reversal of one.
  * - `account` — a `cash-in`/`cash-out` carrying `accountId`: the cash side of a
  *   customer-account payment, and its reversal.
  * - `cash-book` — a `cash-in`/`cash-out` carrying `cashId` and no `accountId`:
@@ -45,8 +42,6 @@ export const CASH_FLOW_SOURCES = [
     'sales',
     'change',
     'refund',
-    'tip',
-    'tip-payout',
     'account',
     'cash-book',
     'service-order-deposit',

package/dist/subscription.d.ts

@@ -62,9 +62,10 @@ declare global {
         source?: 'plan' | 'override' | 'trial';
     }
     /**
-     * All gated features. Add new keys here when a new feature becomes gateable;
-     * every existing plan in `FEATURE_MATRIX` must then declare the new key
-     * (TypeScript enforces this via `Record<FeatureKey, Entitlement>`).
+     * All gated features. Add new keys here when a new feature becomes gateable,
+     * and to the `FEATURE_KEYS` tuple below (`UncoveredFeatureKeys` fails
+     * `typecheck` naming the key until you do); the api's `PLAN_FEATURES` matrix
+     * must then grant it on every tier (typed total over `PlanTier` × `FeatureKey`).
      *
      * ⚠️ **`Record<FeatureKey, …>` is NOT the only construction a new member
      * breaks, and searching for it alone will tell you a consumer is unaffected
@@ -148,28 +149,84 @@ declare global {
      * booleans.
      */
     type PlanFeatureStatus = 'live' | 'planned' | 'future' | 'service';
+    /** Singular/plural es-AR noun for a numeric/metered feature's count (e.g. `{ one: 'usuario', other: 'usuarios' }`). */
+    type PlanFeatureUnit = {
+        one: string;
+        other: string;
+    };
+    /**
+     * The window a limit counts over: `month` — a metered counter that resets
+     * monthly (e.g. orders); `active` — a numeric cap on rows that exist right
+     * now (e.g. products, users, depósitos — disabling one frees a slot).
+     */
+    type PlanFeaturePeriod = 'month' | 'active';
     /**
-     * A single feature row in a Plan's `features[]` array. Matches the
-     * BE wire format from `GET /subscription/plans` exactly — boolean
-     * features carry `enabled`, numeric/metered carry `limit` (-1 =
-     * unlimited).
+     * Section a feature row renders under on a pricing table. Each key's label
+     * and sort position travel as a {@link PlanFeatureGroup} in
+     * `PlanCatalogue.groups`, so a consumer never hard-codes either.
      */
-    interface PlanFeature {
+    type PlanFeatureGroupKey = 'limits' | 'billing' | 'channels' | 'operations' | 'growth' | 'enterprise';
+    interface PlanFeatureGroup {
+        key: PlanFeatureGroupKey;
+        /** User-facing Spanish heading. */
+        label: string;
+        /** Sort position among groups (ascending). */
+        order: number;
+    }
+    /** Fields every feature row carries, whatever its `type`. */
+    interface PlanFeatureBase {
         key: FeatureKey;
-        type: EntitlementType;
         status: PlanFeatureStatus;
+        /** Short user-facing Spanish name (the row's title on a pricing table). */
+        label: string;
         /** User-facing Spanish description. */
         description: string;
-        /** Set on `boolean` features; `null` on numeric/metered. */
-        enabled: boolean | null;
-        /** Set on `numeric`/`metered` features; `null` on boolean. -1 = unlimited. */
-        limit: number | null;
+        group: PlanFeatureGroupKey;
+        /** Sort position within `group` (ascending). `features[]` arrives already sorted by group order, then this. */
+        order: number;
+        /** `null` on boolean keys. */
+        unit: PlanFeatureUnit | null;
+        /** `null` on boolean keys. */
+        period: PlanFeaturePeriod | null;
+        /**
+         * The grant rendered server-side as an es-AR noun phrase, ready to print:
+         * `Ilimitado` for `-1`, `1 usuario`, `Hasta 2.000 pedidos por mes`,
+         * `Incluido` / `No incluido` for a boolean. Display copy only — compare
+         * grants through `enabled` / `limit`, never by parsing this.
+         */
+        valueText: string;
     }
     /**
-     * A sellable plan in the catalog. Aligned with the BE wire format from
-     * `GET /subscription/plans`. Source of truth lives in
-     * DynamoDB (`PLAN#{tier}` partition), administered via `POST /sa/plans`
-     * + `PATCH /sa/plans/{tier}`.
+     * A single feature row in a Plan's `features[]` array, discriminated on
+     * `type`: a boolean row carries `enabled` and no `limit` key; a
+     * numeric/metered row carries `limit` and no `enabled` key. `limit: -1` =
+     * unlimited.
+     */
+    type PlanFeature = (PlanFeatureBase & {
+        type: 'boolean';
+        enabled: boolean;
+    }) | (PlanFeatureBase & {
+        type: 'numeric' | 'metered';
+        limit: number;
+    });
+    /**
+     * How a billing cycle of a plan can be bought:
+     *
+     * - `self`  — self-serve checkout: the cycle has a charged price and the
+     *             plan has a `currency`.
+     * - `sales` — the plan charges some cycle, but not this one self-serve
+     *             (no price on it, or no `currency`); route to "Contactar ventas".
+     * - `none`  — neither cycle is charged (the free tier); nothing to buy.
+     */
+    type PlanCheckoutMode = 'self' | 'sales' | 'none';
+    /**
+     * A sellable plan in the catalog, exactly as `GET /subscription/plans` and
+     * `GET /public/plans` emit it — both build it with the same catalogue
+     * builder, so the two endpoints return identical plans. The template fields
+     * (copy, prices, flags) live in DynamoDB (`PLAN#{tier}` / `SK: PLAN`),
+     * administered via `POST /platform/billing/plans` +
+     * `PATCH /platform/billing/plans/{tier}`; `features` are code, rendered at
+     * response time.
      *
      * Prices are integers in the `currency` smallest unit (centavos for ARS,
      * cents for USD). `null` = "Contactar ventas" (AVANZADO annual at launch
@@ -228,20 +285,51 @@ declare global {
          */
         color: string | null;
         /**
-         * Per-feature configuration. Every `FeatureKey` appears exactly once.
-         * Boolean features carry `enabled`; numeric/metered carry `limit`.
+         * Per-feature configuration. Every `FeatureKey` appears exactly once,
+         * whatever its `status` — a `planned` / `future` key is sent too, so
+         * filter on `status` to decide what to advertise. Sorted by group order,
+         * then `order`. Boolean features carry `enabled`; numeric/metered carry
+         * `limit`.
          */
         features: PlanFeature[];
         /**
          * Marketing-curated short bullets for the pricing card. Display order =
          * array order; up to 6 entries, 80 chars each. Always present — empty array
          * when unset (FE synthesizes a list from `features[]`). Lets marketing tweak
-         * copy via `/sa/plans` without a redeploy; replaces the FE-only `BULLET_LIST_BY_TIER`.
+         * copy via `PATCH /platform/billing/plans/{tier}` without a redeploy;
+         * replaces the FE-only `BULLET_LIST_BY_TIER`.
          */
         bullets: string[];
+        /**
+         * Keys worth calling out on this tier's card: highlight-eligible keys with
+         * status `live` or `service` whose grant improves on the next lower
+         * ACTIVE tier (by `displayOrder`; an `isActive: false` tier is skipped,
+         * as pricing pages hide it). The lowest active tier lists its own
+         * eligible keys. A `planned` / `future` key never appears. Each is a
+         * `features[]` key.
+         */
+        highlights: FeatureKey[];
+        /** How each billing cycle can be bought — see {@link PlanCheckoutMode}. */
+        checkout: {
+            monthly: PlanCheckoutMode;
+            annual: PlanCheckoutMode;
+        };
+        /** Whether a subscription on this tier can be cancelled: `true` exactly when at least one cycle is charged. */
+        cancellable: boolean;
+    }
+    /**
+     * `data` of `GET /public/plans` and `GET /subscription/plans` — both return
+     * the same `{ plans, groups }`: the plans plus the feature groups their rows
+     * render under.
+     */
+    interface PlanCatalogue {
+        plans: Plan[];
+        /** Every group a `features[].group` can name, with its label and sort position. */
+        groups: PlanFeatureGroup[];
     }
     /**
-     * One audit row per SUPER_ADMIN-driven plan mutation, returned by
+     * One audit row per MANAGER-driven plan mutation (`POST` / `PATCH
+     * /platform/billing/plans`, `asManager`), returned by
      * `GET /platform/billing/plans/{tier}/audit`. The store-subscription audit
      * shares this storage shape but is read as `SubscriptionAuditEntry`.
      * `before`/`after` carry only the fields that changed (diff slice).
@@ -648,3 +736,28 @@ declare global {
 }
 export type BillingProviderName = SubscriptionProvider;
 export type InvoiceSummary = globalThis.InvoiceSummary;
+/** Every plan tier, in rank order (lowest first). */
+export declare const PLAN_TIERS: readonly ["basico", "emprendedor", "profesional", "avanzado"];
+/**
+ * Every gated feature key.
+ *
+ * ⚠️ Adding a member here is not the whole change, and `typecheck` is what
+ * stops it shipping half-done. In the api, a new key needs a grant in **every
+ * tier** of `PLAN_FEATURES` (`stacks/services/planFeatureMatrix.ts`): that
+ * constant is typed total over every `PlanTier` × `FeatureKey` cell, so a tier
+ * missing the new key's grant, or a grant of the wrong shape for the key's
+ * declared `type`, fails `typecheck` at the `PLAN_FEATURES` declaration
+ * itself. It also widens the api's per-store override key schema, so a new key
+ * immediately becomes a valid override target.
+ *
+ * ⚠️ **A new member also obliges an api PLATFORM-STACK deploy.** Entitlements
+ * resolve inside the Lambda authorizer, built in `PlatformStack`. Deploying only
+ * the handler stacks leaves a STALE authorizer running the previous matrix: the
+ * key is absent from the resolved map, where a boolean gate refuses but a
+ * metered / lifetime cap PASSES THROUGH — a new cap silently unbounded.
+ * Checklist: `docs/PLANS_AND_ENTITLEMENTS.md` in the api repo.
+ */
+export declare const FEATURE_KEYS: readonly ["afipInvoicing", "suppliers", "advancedReports", "cashManagement", "importExport", "domesticPayments", "stripePayments", "whatsappCommerce", "aiFeatures", "mobileApp", "customBranding", "customDomain", "prioritySupport", "advancedPricing", "marketplaceChannels", "storefront", "loyalty", "marketing", "mandatory2fa", "maxUsers", "maxProducts", "maxCustomers", "maxWarehouses", "priceListsMax", "webhooks", "maxOrdersMonth", "maxInvoicesMonth", "whatsappMessages"];
+type AssertNoUncoveredFeatureKey<T extends never> = T;
+export type UncoveredFeatureKeys = AssertNoUncoveredFeatureKey<Exclude<FeatureKey, (typeof FEATURE_KEYS)[number]>>;
+export {};