platform-types 1.10.729 → 1.10.731

package/dist/cash.d.ts

@@ -141,10 +141,16 @@ declare global {
         currency: string;
         /**
          * The depósito (`Warehouse.warehouseId`) this drawer sits in, stamped once at
-         * apertura so a sucursal can count and close its own tills. The cashier's
-         * `User.defaultWarehouseId` when it names an active depósito, else the
-         * store's primary — the sale depósito ladder without its request and
-         * channel rungs.
+         * apertura so a sucursal can count and close its own tills. The sale
+         * depósito ladder without its request and channel rungs, under the same
+         * `multiWarehouse` switch and sucursal scope: the cashier's
+         * `User.defaultWarehouseId` when it names an active depósito in their scope,
+         * else the store's primary, else a scoped cashier's first active allowed
+         * depósito. With `Store.config.modules.multiWarehouse` off the default is
+         * skipped, so the shift sits where the cashier's sales land. A scoped
+         * cashier with no active depósito left in scope falls back to the unscoped
+         * ladder (the default when on, else the primary), so the shift is still
+         * stamped.
          *
          * ⚠️ Optional and FORWARD-ONLY: shifts opened before it existed, shifts at a
          * store with no depósito, and the store's default drawer carry none.

package/dist/cjs/store.js

@@ -72,7 +72,10 @@ exports.isStoreModuleOn = isStoreModuleOn;
  *   stopped before it could prove every balance is zero. Retrying is harmless but
  *   walks the same rows, so a very large customer book keeps answering it.
  * - `STORE_MODULE_DISABLED` (403) — a server-enforced module is off (storefront
- *   self-booking, storefront survey); `data.module` names it.
+ *   self-booking, storefront survey); `data.module` names it. `POST /warehouses`
+ *   answers it too when a create, or returning a depósito to service, would add
+ *   a second active depósito while `multiWarehouse` is off
+ *   (`data.module: 'multiWarehouse'`). Always 403, and never an Action Denied row.
  */
 exports.STORE_MODULE_ERROR_CODES = [
     'STORE_MODULE_UNKNOWN',

package/dist/cjs/workItem.js

@@ -22,7 +22,7 @@
  * returned to the store's operators, and is never logged.
  */
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.WORK_ITEM_TEXT_MAX = exports.WORK_ITEM_PAGE_MAX = exports.WORK_ITEM_HISTORY_KINDS = exports.WORK_ITEM_SOURCE_VERDICTS = exports.WORK_ITEM_AVAILABILITIES = exports.WORK_ITEM_STATUSES = exports.WORK_ITEM_FAMILIES = void 0;
+exports.WORK_ITEM_ERROR_CODES = exports.WORK_ITEM_TEXT_MAX = exports.WORK_ITEM_PAGE_MAX = exports.WORK_ITEM_HISTORY_KINDS = exports.WORK_ITEM_SOURCE_VERDICTS = exports.WORK_ITEM_AVAILABILITIES = exports.WORK_ITEM_STATUSES = exports.WORK_ITEM_FAMILIES = void 0;
 exports.WORK_ITEM_FAMILIES = [
     'order-create',
     'collection',
@@ -41,3 +41,65 @@ exports.WORK_ITEM_HISTORY_KINDS = ['reported', 'handover-requested', 'accepted',
 exports.WORK_ITEM_PAGE_MAX = 100;
 /** Upper bound on `summary` and on a `correct` note, in characters. */
 exports.WORK_ITEM_TEXT_MAX = 500;
+/**
+ * Refusals from `/work-items` — `stacks/lambdas/workItems/*.ts` (`_get`,
+ * `_post`). EVERYTHING those files can answer, not a selection.
+ *
+ * ⚠️ Completeness is asserted mechanically:
+ * `tests/unit/workItemPublishedContract.test.ts` reads those source files off
+ * disk and fails on any literal `error: '…'` code missing from this tuple, and
+ * on any member here that no source (or named shared helper) can answer.
+ *
+ * - `WORK_ITEM_NOT_FOUND` · 404 — no such item in this store. Payload-free.
+ * - `WORK_ITEM_NOT_OPEN` · 409 — a transition on a `resolved`/`corrected`
+ *   item, by a caller with authority over it; `data` is
+ *   {@link WorkItemStateConflictData}. Authority is checked BEFORE state, so a
+ *   caller without it gets its mode's refusal instead (`handover`/`resolve`:
+ *   `WORK_ITEM_NOT_RESPONSIBLE`; `accept`: `WORK_ITEM_NO_PENDING_HANDOVER`,
+ *   since a close strips the handover) — never read either as "still open".
+ * - `WORK_ITEM_VERSION_CONFLICT` · 409 — `expectedVersion` is stale, or the
+ *   write lost its compare-and-swap; `data` is {@link WorkItemStateConflictData}
+ *   when the item could be re-read, else absent.
+ * - `WORK_ITEM_NOT_RESPONSIBLE` · 403 — `handover`/`resolve` by someone who is
+ *   neither the responsible user nor ADMIN-tier.
+ * - `WORK_ITEM_HANDOVER_TO_SELF` · 400 — `toUserId` already holds the item.
+ * - `WORK_ITEM_TARGET_USER_NOT_FOUND` · 404 — `toUserId` is not a live operator
+ *   of this store.
+ * - `WORK_ITEM_NO_PENDING_HANDOVER` · 409 — `accept` with no handover pending,
+ *   including on an item that has since been closed. Payload-free.
+ * - `WORK_ITEM_NOT_HANDOVER_TARGET` · 403 — `accept` by anyone but the named
+ *   receiver.
+ * - `WORK_ITEM_UNRESOLVED_AT_SOURCE` · 409 — `resolve` whose source read is not
+ *   authoritative; `data` is {@link WorkItemUnresolvedAtSourceData}.
+ * - `WORK_ITEM_SOURCE_REF_INVALID` · 400 — an `order-create` report whose
+ *   `attemptKey` was not minted for this store and caller.
+ * - `WORK_ITEM_CAPTURED_AT_AHEAD` · 400 — `capturedAt` beyond the server's
+ *   skew allowance.
+ * - `ROLE_FORBIDDEN` · 403 — `GET ?scope=store` or `correct` by a non-ADMIN-tier
+ *   caller.
+ * - `INVALID_CURSOR` · 400 — a `?startKey=` that does not decode, or decodes to
+ *   a key outside this store's open-item range. Restart from the first page.
+ *   Read path only.
+ * - `VALIDATION_FAILED` · 400 — `stacks/helpers/validateRequest.ts`, on every
+ *   leg (including a family's missing required `sourceRef` field).
+ *
+ * ⚠️ `UNHANDLED_ERROR` is deliberately NOT here: it is `tryCatch`'s generic
+ * envelope for an unexpected throw and belongs to no endpoint. Cross-cutting
+ * refusals are NOT repeated here — check `GATING_ERROR_CODES` as well.
+ */
+exports.WORK_ITEM_ERROR_CODES = [
+    'WORK_ITEM_NOT_FOUND',
+    'WORK_ITEM_NOT_OPEN',
+    'WORK_ITEM_VERSION_CONFLICT',
+    'WORK_ITEM_NOT_RESPONSIBLE',
+    'WORK_ITEM_HANDOVER_TO_SELF',
+    'WORK_ITEM_TARGET_USER_NOT_FOUND',
+    'WORK_ITEM_NO_PENDING_HANDOVER',
+    'WORK_ITEM_NOT_HANDOVER_TARGET',
+    'WORK_ITEM_UNRESOLVED_AT_SOURCE',
+    'WORK_ITEM_SOURCE_REF_INVALID',
+    'WORK_ITEM_CAPTURED_AT_AHEAD',
+    'ROLE_FORBIDDEN',
+    'INVALID_CURSOR',
+    'VALIDATION_FAILED',
+];

package/dist/store.d.ts

@@ -933,7 +933,10 @@ declare global {
              *   so none is recorded, broadcast or mailed.
              * - `multiWarehouse` — every sale resolves to the primary depósito (a
              *   scoped operator's sale to their own home depósito when the primary is
-             *   outside their scope), and only the primary feeds MercadoLibre.
+             *   outside their scope), and only the primary feeds MercadoLibre. A cash
+             *   shift opens on that same depósito (the cashier's default is skipped),
+             *   and creating or reactivating a depósito while another is active is
+             *   refused `403 STORE_MODULE_DISABLED`.
              * - `loyalty` — the automatic earn credits nothing (the `loyalty-earn`
              *   worker skips it, including one queued before the switch). The
              *   operator's `POST /loyalty/earn` and every read stay reachable.
@@ -2044,7 +2047,10 @@ export declare const isStoreModuleOn: (modules: StoreModules | null | undefined,
  *   stopped before it could prove every balance is zero. Retrying is harmless but
  *   walks the same rows, so a very large customer book keeps answering it.
  * - `STORE_MODULE_DISABLED` (403) — a server-enforced module is off (storefront
- *   self-booking, storefront survey); `data.module` names it.
+ *   self-booking, storefront survey); `data.module` names it. `POST /warehouses`
+ *   answers it too when a create, or returning a depósito to service, would add
+ *   a second active depósito while `multiWarehouse` is off
+ *   (`data.module: 'multiWarehouse'`). Always 403, and never an Action Denied row.
  */
 export declare const STORE_MODULE_ERROR_CODES: readonly ["STORE_MODULE_UNKNOWN", "STORE_MODULE_NOT_BOOLEAN", "STORE_MODULE_WAREHOUSES_ACTIVE", "STORE_MODULE_TRANSFER_IN_FLIGHT", "STORE_MODULE_CUSTOMER_BALANCES", "STORE_MODULE_BALANCE_CHECK_INCOMPLETE", "STORE_MODULE_DISABLED"];
 export type StoreModuleErrorCode = (typeof STORE_MODULE_ERROR_CODES)[number];
@@ -2086,7 +2092,7 @@ export interface StoreModuleCustomerBalancesData {
 export interface StoreModuleBalanceCheckIncompleteData {
     module: 'customerAccounts';
 }
-/** `data` of `403 STORE_MODULE_DISABLED` — the switched-off module the request needed. */
+/** `data` of `STORE_MODULE_DISABLED` (403) — the switched-off module the request needed. */
 export interface StoreModuleDisabledData {
     module: StoreModuleKey;
 }

package/dist/store.js

@@ -67,7 +67,10 @@ export const isStoreModuleOn = (modules, module) => modules?.[module] !== false;
  *   stopped before it could prove every balance is zero. Retrying is harmless but
  *   walks the same rows, so a very large customer book keeps answering it.
  * - `STORE_MODULE_DISABLED` (403) — a server-enforced module is off (storefront
- *   self-booking, storefront survey); `data.module` names it.
+ *   self-booking, storefront survey); `data.module` names it. `POST /warehouses`
+ *   answers it too when a create, or returning a depósito to service, would add
+ *   a second active depósito while `multiWarehouse` is off
+ *   (`data.module: 'multiWarehouse'`). Always 403, and never an Action Denied row.
  */
 export const STORE_MODULE_ERROR_CODES = [
     'STORE_MODULE_UNKNOWN',

package/dist/workItem.d.ts

@@ -169,6 +169,27 @@ declare global {
         openCount: number;
         availability: Record<WorkItemFamily, WorkItemAvailability>;
     }
+    /**
+     * `data` of a state-bearing `409` — `WORK_ITEM_NOT_OPEN` (always) and
+     * `WORK_ITEM_VERSION_CONFLICT` (when the item could be re-read; a lost
+     * compare-and-swap whose re-read finds nothing answers with no `data`).
+     * `current` is the item as the server holds it now. The pre-write refusals
+     * are answered only past the mode's authority gate. ⚠️ The post-commit
+     * conflict (a compare-and-swap lost after that gate passed) re-reads the item
+     * and returns it WITHOUT re-checking authority, so its `current` can reflect
+     * a responsibility or handover that moved in the race.
+     */
+    interface WorkItemStateConflictData {
+        current: WorkItem;
+    }
+    /**
+     * `data` of `409 WORK_ITEM_UNRESOLVED_AT_SOURCE` — the source read that did
+     * not decide the item. `verdict.verdict` is `pending` or `unknown`, never an
+     * authoritative one.
+     */
+    interface WorkItemUnresolvedAtSourceData {
+        verdict: WorkItemSourceVerdict;
+    }
     /** The `workItems` socket frame's `data` — refetch, never patch from it. */
     interface WorkItemFrameData {
         itemId: string;
@@ -186,3 +207,51 @@ export declare const WORK_ITEM_HISTORY_KINDS: readonly ["reported", "handover-re
 export declare const WORK_ITEM_PAGE_MAX = 100;
 /** Upper bound on `summary` and on a `correct` note, in characters. */
 export declare const WORK_ITEM_TEXT_MAX = 500;
+/**
+ * Refusals from `/work-items` — `stacks/lambdas/workItems/*.ts` (`_get`,
+ * `_post`). EVERYTHING those files can answer, not a selection.
+ *
+ * ⚠️ Completeness is asserted mechanically:
+ * `tests/unit/workItemPublishedContract.test.ts` reads those source files off
+ * disk and fails on any literal `error: '…'` code missing from this tuple, and
+ * on any member here that no source (or named shared helper) can answer.
+ *
+ * - `WORK_ITEM_NOT_FOUND` · 404 — no such item in this store. Payload-free.
+ * - `WORK_ITEM_NOT_OPEN` · 409 — a transition on a `resolved`/`corrected`
+ *   item, by a caller with authority over it; `data` is
+ *   {@link WorkItemStateConflictData}. Authority is checked BEFORE state, so a
+ *   caller without it gets its mode's refusal instead (`handover`/`resolve`:
+ *   `WORK_ITEM_NOT_RESPONSIBLE`; `accept`: `WORK_ITEM_NO_PENDING_HANDOVER`,
+ *   since a close strips the handover) — never read either as "still open".
+ * - `WORK_ITEM_VERSION_CONFLICT` · 409 — `expectedVersion` is stale, or the
+ *   write lost its compare-and-swap; `data` is {@link WorkItemStateConflictData}
+ *   when the item could be re-read, else absent.
+ * - `WORK_ITEM_NOT_RESPONSIBLE` · 403 — `handover`/`resolve` by someone who is
+ *   neither the responsible user nor ADMIN-tier.
+ * - `WORK_ITEM_HANDOVER_TO_SELF` · 400 — `toUserId` already holds the item.
+ * - `WORK_ITEM_TARGET_USER_NOT_FOUND` · 404 — `toUserId` is not a live operator
+ *   of this store.
+ * - `WORK_ITEM_NO_PENDING_HANDOVER` · 409 — `accept` with no handover pending,
+ *   including on an item that has since been closed. Payload-free.
+ * - `WORK_ITEM_NOT_HANDOVER_TARGET` · 403 — `accept` by anyone but the named
+ *   receiver.
+ * - `WORK_ITEM_UNRESOLVED_AT_SOURCE` · 409 — `resolve` whose source read is not
+ *   authoritative; `data` is {@link WorkItemUnresolvedAtSourceData}.
+ * - `WORK_ITEM_SOURCE_REF_INVALID` · 400 — an `order-create` report whose
+ *   `attemptKey` was not minted for this store and caller.
+ * - `WORK_ITEM_CAPTURED_AT_AHEAD` · 400 — `capturedAt` beyond the server's
+ *   skew allowance.
+ * - `ROLE_FORBIDDEN` · 403 — `GET ?scope=store` or `correct` by a non-ADMIN-tier
+ *   caller.
+ * - `INVALID_CURSOR` · 400 — a `?startKey=` that does not decode, or decodes to
+ *   a key outside this store's open-item range. Restart from the first page.
+ *   Read path only.
+ * - `VALIDATION_FAILED` · 400 — `stacks/helpers/validateRequest.ts`, on every
+ *   leg (including a family's missing required `sourceRef` field).
+ *
+ * ⚠️ `UNHANDLED_ERROR` is deliberately NOT here: it is `tryCatch`'s generic
+ * envelope for an unexpected throw and belongs to no endpoint. Cross-cutting
+ * refusals are NOT repeated here — check `GATING_ERROR_CODES` as well.
+ */
+export declare const WORK_ITEM_ERROR_CODES: readonly ["WORK_ITEM_NOT_FOUND", "WORK_ITEM_NOT_OPEN", "WORK_ITEM_VERSION_CONFLICT", "WORK_ITEM_NOT_RESPONSIBLE", "WORK_ITEM_HANDOVER_TO_SELF", "WORK_ITEM_TARGET_USER_NOT_FOUND", "WORK_ITEM_NO_PENDING_HANDOVER", "WORK_ITEM_NOT_HANDOVER_TARGET", "WORK_ITEM_UNRESOLVED_AT_SOURCE", "WORK_ITEM_SOURCE_REF_INVALID", "WORK_ITEM_CAPTURED_AT_AHEAD", "ROLE_FORBIDDEN", "INVALID_CURSOR", "VALIDATION_FAILED"];
+export type WorkItemErrorCode = (typeof WORK_ITEM_ERROR_CODES)[number];

package/dist/workItem.js

@@ -38,3 +38,65 @@ export const WORK_ITEM_HISTORY_KINDS = ['reported', 'handover-requested', 'accep
 export const WORK_ITEM_PAGE_MAX = 100;
 /** Upper bound on `summary` and on a `correct` note, in characters. */
 export const WORK_ITEM_TEXT_MAX = 500;
+/**
+ * Refusals from `/work-items` — `stacks/lambdas/workItems/*.ts` (`_get`,
+ * `_post`). EVERYTHING those files can answer, not a selection.
+ *
+ * ⚠️ Completeness is asserted mechanically:
+ * `tests/unit/workItemPublishedContract.test.ts` reads those source files off
+ * disk and fails on any literal `error: '…'` code missing from this tuple, and
+ * on any member here that no source (or named shared helper) can answer.
+ *
+ * - `WORK_ITEM_NOT_FOUND` · 404 — no such item in this store. Payload-free.
+ * - `WORK_ITEM_NOT_OPEN` · 409 — a transition on a `resolved`/`corrected`
+ *   item, by a caller with authority over it; `data` is
+ *   {@link WorkItemStateConflictData}. Authority is checked BEFORE state, so a
+ *   caller without it gets its mode's refusal instead (`handover`/`resolve`:
+ *   `WORK_ITEM_NOT_RESPONSIBLE`; `accept`: `WORK_ITEM_NO_PENDING_HANDOVER`,
+ *   since a close strips the handover) — never read either as "still open".
+ * - `WORK_ITEM_VERSION_CONFLICT` · 409 — `expectedVersion` is stale, or the
+ *   write lost its compare-and-swap; `data` is {@link WorkItemStateConflictData}
+ *   when the item could be re-read, else absent.
+ * - `WORK_ITEM_NOT_RESPONSIBLE` · 403 — `handover`/`resolve` by someone who is
+ *   neither the responsible user nor ADMIN-tier.
+ * - `WORK_ITEM_HANDOVER_TO_SELF` · 400 — `toUserId` already holds the item.
+ * - `WORK_ITEM_TARGET_USER_NOT_FOUND` · 404 — `toUserId` is not a live operator
+ *   of this store.
+ * - `WORK_ITEM_NO_PENDING_HANDOVER` · 409 — `accept` with no handover pending,
+ *   including on an item that has since been closed. Payload-free.
+ * - `WORK_ITEM_NOT_HANDOVER_TARGET` · 403 — `accept` by anyone but the named
+ *   receiver.
+ * - `WORK_ITEM_UNRESOLVED_AT_SOURCE` · 409 — `resolve` whose source read is not
+ *   authoritative; `data` is {@link WorkItemUnresolvedAtSourceData}.
+ * - `WORK_ITEM_SOURCE_REF_INVALID` · 400 — an `order-create` report whose
+ *   `attemptKey` was not minted for this store and caller.
+ * - `WORK_ITEM_CAPTURED_AT_AHEAD` · 400 — `capturedAt` beyond the server's
+ *   skew allowance.
+ * - `ROLE_FORBIDDEN` · 403 — `GET ?scope=store` or `correct` by a non-ADMIN-tier
+ *   caller.
+ * - `INVALID_CURSOR` · 400 — a `?startKey=` that does not decode, or decodes to
+ *   a key outside this store's open-item range. Restart from the first page.
+ *   Read path only.
+ * - `VALIDATION_FAILED` · 400 — `stacks/helpers/validateRequest.ts`, on every
+ *   leg (including a family's missing required `sourceRef` field).
+ *
+ * ⚠️ `UNHANDLED_ERROR` is deliberately NOT here: it is `tryCatch`'s generic
+ * envelope for an unexpected throw and belongs to no endpoint. Cross-cutting
+ * refusals are NOT repeated here — check `GATING_ERROR_CODES` as well.
+ */
+export const WORK_ITEM_ERROR_CODES = [
+    'WORK_ITEM_NOT_FOUND',
+    'WORK_ITEM_NOT_OPEN',
+    'WORK_ITEM_VERSION_CONFLICT',
+    'WORK_ITEM_NOT_RESPONSIBLE',
+    'WORK_ITEM_HANDOVER_TO_SELF',
+    'WORK_ITEM_TARGET_USER_NOT_FOUND',
+    'WORK_ITEM_NO_PENDING_HANDOVER',
+    'WORK_ITEM_NOT_HANDOVER_TARGET',
+    'WORK_ITEM_UNRESOLVED_AT_SOURCE',
+    'WORK_ITEM_SOURCE_REF_INVALID',
+    'WORK_ITEM_CAPTURED_AT_AHEAD',
+    'ROLE_FORBIDDEN',
+    'INVALID_CURSOR',
+    'VALIDATION_FAILED',
+];

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "platform-types",
-	"version": "1.10.729",
+	"version": "1.10.731",
 	"description": "Shared wire and entity contracts for the platform.",
 	"type": "module",
 	"main": "dist/index.js",