platform-types 1.10.733 → 1.10.735

package/dist/cjs/invoice.js

@@ -1,6 +1,6 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.INVOICE_DOCUMENT_REFUSAL_CODES = exports.INVOICE_ISSUANCE_REFUSAL_RECOVERY = exports.INVOICE_ISSUANCE_REFUSAL_CODES = exports.INVOICE_POST_VOUCHER_ERROR_CODES = void 0;
+exports.INVOICE_NOT_AUTHORIZED_RECOVERIES = exports.INVOICE_DOCUMENT_REFUSAL_CODES = exports.INVOICE_ISSUANCE_REFUSAL_RECOVERY = exports.INVOICE_ISSUANCE_REFUSAL_CODES = exports.INVOICE_POST_VOUCHER_ERROR_CODES = void 0;
 /**
  * The codes `POST /invoices` answers AFTER a voucher number was spent — ARCA
  * was asked, or a CAEA number was claimed — as a runtime value the app maps.
@@ -87,13 +87,33 @@ exports.INVOICE_ISSUANCE_REFUSAL_RECOVERY = {
  *   store. Answered before any store read, render, print stamp, broadcast,
  *   staged PDF, print job or email.
  * - `INVOICE_NOT_AUTHORIZED` · 409 — the row's `fiscalStatus` is `pending_cae`
- *   or `rejected`. `invoiceId` and that `fiscalStatus` ride beside `error`. A
+ *   or `rejected`. `invoiceId`, that `fiscalStatus` and a `recovery`
+ *   (`INVOICE_NOT_AUTHORIZED_RECOVERIES`) ride beside `error`. A
  *   print refused here wrote nothing to the invoice and dispatched nothing.
- *   `pending_cae` is wait-and-retry: the pending-invoice drain authorizes a
- *   factura or full credit note with no client action (an FCE or partial
- *   credit note waits for support). `rejected` is final — ARCA refused the
- *   voucher and nothing retries it. The decision reads `fiscalStatus` only: a row with none (issued
- *   before the field existed) is treated as authorized, whether or not it
- *   carries a CAE.
+ *   What the client tells the operator is `recovery`'s to say, never
+ *   re-derived here: a `pending_cae` row answers `retry` or `support` (an FCE
+ *   voucher, a partial credit note, or a submit whose recorded voucher triple
+ *   is incomplete), and a `rejected` row answers `final`. Whether to refuse at
+ *   all reads `fiscalStatus` only: a row with none (issued before the field
+ *   existed) is treated as authorized, whether or not it carries a CAE.
  */
 exports.INVOICE_DOCUMENT_REFUSAL_CODES = ['INVOICE_NOT_FOUND', 'INVOICE_NOT_AUTHORIZED'];
+/**
+ * What a client should tell the operator about a voucher the document routes
+ * refused with `INVOICE_NOT_AUTHORIZED` — the `recovery` beside `error` in that
+ * 409 body, decided server-side from the INVOICE row so a client never re-derives
+ * the drain's rules:
+ *
+ * - `retry` — `pending_cae`, and nothing on the row says the pending-invoice
+ *   drain will hold it: try again later. The drain may still hold such a row
+ *   when its order changed underneath it — that is decided against the order,
+ *   not the row, and is not answered here.
+ * - `support` — `pending_cae`, and the row itself shows the drain will hold it
+ *   rather than settle it: an FCE voucher (skipped), a PARTIAL credit note (its
+ *   row carries `partialItems`, and the drain's full-order rebuild never
+ *   reproduces it), or a submit whose recorded voucher triple is incomplete.
+ *   Contact support. A return's own partial credit note can still be settled by
+ *   that return's credit-note retry.
+ * - `final` — `rejected`. ARCA refused the voucher and nothing retries it.
+ */
+exports.INVOICE_NOT_AUTHORIZED_RECOVERIES = ['retry', 'support', 'final'];

package/dist/cjs/store.js

@@ -1,6 +1,6 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.STORE_MODULE_ERROR_CODES = exports.isStoreModuleOn = exports.isStoreModuleKey = exports.STORE_MODULE_KEYS = exports.CUSTOM_DOMAIN_ROW_LIMIT = exports.CUSTOM_DOMAIN_SLOT_LIMIT = void 0;
+exports.STORE_PATCH_ERROR_CODES = exports.STORE_MODULE_ERROR_CODES = exports.isStoreModuleOn = exports.isStoreModuleKey = exports.STORE_MODULE_KEYS = exports.CUSTOM_DOMAIN_ROW_LIMIT = exports.CUSTOM_DOMAIN_SLOT_LIMIT = void 0;
 /**
  * How many custom-domain rows a store may hold that count: one active domain
  * and one spare, so a replacement can be verified and provisioned before the
@@ -52,9 +52,11 @@ exports.isStoreModuleKey = isStoreModuleKey;
 const isStoreModuleOn = (modules, module) => modules?.[module] !== false;
 exports.isStoreModuleOn = isStoreModuleOn;
 /**
- * Every refusal code the store-module switches put on the wire, beyond the
- * platform-wide set (`VALIDATION_FAILED`, and `STORE_CONFIG_FORBIDDEN` for a
- * plain USER writing the privileged leaf):
+ * Every refusal code the store-module switches put on the wire. Not listed
+ * here: `VALIDATION_FAILED` (a malformed body), and `STORE_CONFIG_FORBIDDEN` —
+ * the `PATCH /store` role refusal a plain USER gets for ANY privileged `config`
+ * leaf, `modules` included, judged before this module code runs. That one is in
+ * {@link STORE_PATCH_ERROR_CODES}:
  *
  * - `STORE_MODULE_UNKNOWN` (400) — `PATCH /store` named a key outside
  *   `STORE_MODULE_KEYS`; `data.module` carries it.
@@ -91,3 +93,69 @@ exports.STORE_MODULE_ERROR_CODES = [
     'STORE_MODULE_SHIFTS_OPEN',
     'STORE_MODULE_DISABLED',
 ];
+/**
+ * The bare refusal codes `PATCH /store` (`stacks/lambdas/store/_patch.ts`, and
+ * the route's own sibling modules it calls) answers itself — `{ error, message }`
+ * with no `data`, unless noted:
+ *
+ * Role refusals, `403` — a plain USER writing a privileged section. Each is
+ * judged before any other check on that section:
+ * - `STORE_CONFIG_FORBIDDEN` — any privileged `config` leaf (`modules`,
+ *   `stock`, `priceDecimals`, `changePrice`, `mandatory2fa`, …).
+ * - `STORE_ECOMMERCE_FORBIDDEN` — any `ecommerce` block.
+ * - `STORE_FISCAL_FIELD_FORBIDDEN` — a fiscal field of the store.
+ * - `STORE_JURISDICTION_FORBIDDEN` — `jurisdiction`.
+ * - `AFIP_RELACION_FLAG_FORBIDDEN` — `afip.wscdcEnabled` / `afip.fceEnabled`.
+ * - `FX_TABLE_FORBIDDEN` — the `currencies` exchange-rate table.
+ * - `FX_AUTO_UPDATE_FORBIDDEN` — `fxAutoUpdate`.
+ *
+ * Request refusals, `400`:
+ * - `FIELD_NOT_WRITABLE_HERE` — a field written through `POST /store`, not
+ *   this route; a top-level `fields` array names them.
+ * - `AFIP_POINT_OF_SALE_NOT_CLEARABLE` — `null` sent for the punto de venta.
+ * - `CURRENCY_CATALOG_ID_UNKNOWN` — a `currencies` entry names an unknown or
+ *   disabled catalog id.
+ * - `ARS_RATE_MUST_BE_ONE` — the peso entry's value is not exactly `1`.
+ * - `CURRENCY_RATE_ABOVE_CEILING` — a `currencies` value is above its ceiling.
+ * - `FX_CATALOG_ID_UNKNOWN` / `FX_SOURCE_ID_UNKNOWN` — an `fxAutoUpdate`
+ *   binding names an unknown catalog id or rate source.
+ * - `DISPLAY_CURRENCY_NOT_INVOICEABLE` / `PRODUCT_CURRENCY_NOT_INVOICEABLE` — a
+ *   store carrying an AFIP CUIT set `config.displayCurrency` /
+ *   `config.defaultProductCurrency` to a non-oficial USD variant.
+ * - `PRICE_LIST_NOT_FOUND` — an `ecommerce` save names a
+ *   `newCustomerPriceList` that does not exist (`store/_ecommercePatch.ts`).
+ *
+ * Maintenance mode (`{ mode: 'maintenance', level }`, `store/_patchMaintenance.ts`):
+ * - `FORBIDDEN` (403) — the caller is neither an ADMIN nor a MANAGER.
+ * - `STORE_NOT_FOUND` (404) — the store row is gone.
+ *
+ * ⚠️ Not repeated here because another tuple already publishes them:
+ * `VALIDATION_FAILED`, `PRODUCT_CURRENCY_NOT_SUBSCRIBED`
+ * (`PRODUCT_POST_ERROR_CODES`), `WAREHOUSE_NOT_FOUND` /
+ * `WAREHOUSE_INACTIVE` (a `channelWarehouses` target), and every
+ * `STORE_MODULE_*` code ({@link STORE_MODULE_ERROR_CODES}). Codes the route
+ * forwards from shared helpers (the write conflict, the CAEA punto-de-venta
+ * checks, the display-currency lock, the storefront fence) are not listed
+ * either. Cross-cutting refusals: check `GATING_ERROR_CODES` as well.
+ */
+exports.STORE_PATCH_ERROR_CODES = [
+    'STORE_CONFIG_FORBIDDEN',
+    'STORE_ECOMMERCE_FORBIDDEN',
+    'STORE_FISCAL_FIELD_FORBIDDEN',
+    'STORE_JURISDICTION_FORBIDDEN',
+    'AFIP_RELACION_FLAG_FORBIDDEN',
+    'FX_TABLE_FORBIDDEN',
+    'FX_AUTO_UPDATE_FORBIDDEN',
+    'FIELD_NOT_WRITABLE_HERE',
+    'AFIP_POINT_OF_SALE_NOT_CLEARABLE',
+    'CURRENCY_CATALOG_ID_UNKNOWN',
+    'ARS_RATE_MUST_BE_ONE',
+    'CURRENCY_RATE_ABOVE_CEILING',
+    'FX_CATALOG_ID_UNKNOWN',
+    'FX_SOURCE_ID_UNKNOWN',
+    'DISPLAY_CURRENCY_NOT_INVOICEABLE',
+    'PRODUCT_CURRENCY_NOT_INVOICEABLE',
+    'PRICE_LIST_NOT_FOUND',
+    'FORBIDDEN',
+    'STORE_NOT_FOUND',
+];

package/dist/cjs/subscription.js

@@ -30,7 +30,7 @@
  *   enabled:false until they do.
  */
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.FEATURE_KEYS = exports.isPaidPlanTier = exports.PLAN_CATALOGUE_ERROR_CODES = exports.PLAN_CATALOGUE_TEMPLATE_FIELDS = exports.PAID_PLAN_TIERS = exports.PLAN_TIERS = void 0;
+exports.FEATURE_KEYS = exports.isPaidPlanTier = exports.PLAN_PRICE_SYNC_ERROR_CODES = exports.PLAN_CATALOGUE_ERROR_CODES = exports.PLAN_CATALOGUE_TEMPLATE_FIELDS = exports.PAID_PLAN_TIERS = exports.PLAN_TIERS = void 0;
 /*
  * Runtime tuples for the unions above.
  *
@@ -79,6 +79,10 @@ exports.PLAN_CATALOGUE_ERROR_CODES = exhaustiveTuple()([
     'PLAN_CATALOGUE_DRAFT_STALE',
     'IDEMPOTENCY_CONFLICT',
 ]);
+/** Every `error` code `POST /subscription/checkout` adds for a price the provider has not caught up with. */
+exports.PLAN_PRICE_SYNC_ERROR_CODES = exhaustiveTuple()([
+    'PLAN_STRIPE_PRICE_STALE',
+]);
 /** Whether `value` names a paid tier — narrows an untyped read (a stored row, a global) to `PaidPlanTier`. */
 const isPaidPlanTier = (value) => typeof value === 'string' && exports.PAID_PLAN_TIERS.includes(value);
 exports.isPaidPlanTier = isPaidPlanTier;

package/dist/invoice.d.ts

@@ -354,6 +354,26 @@ declare global {
          * Forward-only; nothing reads it as anything but a deadline.
          */
         drainClaimUntil?: number;
+        /**
+         * `true` while a REJECTED row's order still shows it unsettled — the
+         * rejection committed, but the order's `invoices[]` entry could not be set to
+         * `rejected` in the same write. Written in that same rejection write, only
+         * then; REMOVEd by the repair that sets the entry — tried at once, then by the
+         * `order-copy-repair` queue's consumer, and by a pending-invoice drain pass
+         * that reaches the store's page (AFIP not known down, its AFIP client up).
+         * ABSENT on every other row, and forward-only.
+         */
+        orderCopyStale?: true;
+        /**
+         * The rejecting caller's ORDER-trail origin, written beside `orderCopyStale`
+         * in the same write and REMOVEd with it, so whichever repairer reaches the
+         * row records the caller's settle rather than its own. Forward-only.
+         */
+        orderCopyStaleOrigin?: Extract<OrderAuditOrigin, 'platform' | 'operator' | 'worker'>;
+        /** The rejecting caller's settle reason — ids only, code-authored. Beside `orderCopyStale`, REMOVEd with it. */
+        orderCopyStaleReason?: string;
+        /** The rejecting caller's actor `userId` (`''` = the system actor). Beside `orderCopyStale`, REMOVEd with it. */
+        orderCopyStaleActorId?: string;
         invoicePrinted?: boolean;
         /**
          * Server-derived ms epoch, stamped by the WSS `ack` handler on an
@@ -1006,15 +1026,36 @@ export declare const INVOICE_ISSUANCE_REFUSAL_RECOVERY: {
  *   store. Answered before any store read, render, print stamp, broadcast,
  *   staged PDF, print job or email.
  * - `INVOICE_NOT_AUTHORIZED` · 409 — the row's `fiscalStatus` is `pending_cae`
- *   or `rejected`. `invoiceId` and that `fiscalStatus` ride beside `error`. A
+ *   or `rejected`. `invoiceId`, that `fiscalStatus` and a `recovery`
+ *   (`INVOICE_NOT_AUTHORIZED_RECOVERIES`) ride beside `error`. A
  *   print refused here wrote nothing to the invoice and dispatched nothing.
- *   `pending_cae` is wait-and-retry: the pending-invoice drain authorizes a
- *   factura or full credit note with no client action (an FCE or partial
- *   credit note waits for support). `rejected` is final — ARCA refused the
- *   voucher and nothing retries it. The decision reads `fiscalStatus` only: a row with none (issued
- *   before the field existed) is treated as authorized, whether or not it
- *   carries a CAE.
+ *   What the client tells the operator is `recovery`'s to say, never
+ *   re-derived here: a `pending_cae` row answers `retry` or `support` (an FCE
+ *   voucher, a partial credit note, or a submit whose recorded voucher triple
+ *   is incomplete), and a `rejected` row answers `final`. Whether to refuse at
+ *   all reads `fiscalStatus` only: a row with none (issued before the field
+ *   existed) is treated as authorized, whether or not it carries a CAE.
  */
 export declare const INVOICE_DOCUMENT_REFUSAL_CODES: readonly ["INVOICE_NOT_FOUND", "INVOICE_NOT_AUTHORIZED"];
 export type InvoiceDocumentRefusalCode = (typeof INVOICE_DOCUMENT_REFUSAL_CODES)[number];
+/**
+ * What a client should tell the operator about a voucher the document routes
+ * refused with `INVOICE_NOT_AUTHORIZED` — the `recovery` beside `error` in that
+ * 409 body, decided server-side from the INVOICE row so a client never re-derives
+ * the drain's rules:
+ *
+ * - `retry` — `pending_cae`, and nothing on the row says the pending-invoice
+ *   drain will hold it: try again later. The drain may still hold such a row
+ *   when its order changed underneath it — that is decided against the order,
+ *   not the row, and is not answered here.
+ * - `support` — `pending_cae`, and the row itself shows the drain will hold it
+ *   rather than settle it: an FCE voucher (skipped), a PARTIAL credit note (its
+ *   row carries `partialItems`, and the drain's full-order rebuild never
+ *   reproduces it), or a submit whose recorded voucher triple is incomplete.
+ *   Contact support. A return's own partial credit note can still be settled by
+ *   that return's credit-note retry.
+ * - `final` — `rejected`. ARCA refused the voucher and nothing retries it.
+ */
+export declare const INVOICE_NOT_AUTHORIZED_RECOVERIES: readonly ["retry", "support", "final"];
+export type InvoiceNotAuthorizedRecovery = (typeof INVOICE_NOT_AUTHORIZED_RECOVERIES)[number];
 export {};

package/dist/invoice.js

@@ -84,13 +84,33 @@ export const INVOICE_ISSUANCE_REFUSAL_RECOVERY = {
  *   store. Answered before any store read, render, print stamp, broadcast,
  *   staged PDF, print job or email.
  * - `INVOICE_NOT_AUTHORIZED` · 409 — the row's `fiscalStatus` is `pending_cae`
- *   or `rejected`. `invoiceId` and that `fiscalStatus` ride beside `error`. A
+ *   or `rejected`. `invoiceId`, that `fiscalStatus` and a `recovery`
+ *   (`INVOICE_NOT_AUTHORIZED_RECOVERIES`) ride beside `error`. A
  *   print refused here wrote nothing to the invoice and dispatched nothing.
- *   `pending_cae` is wait-and-retry: the pending-invoice drain authorizes a
- *   factura or full credit note with no client action (an FCE or partial
- *   credit note waits for support). `rejected` is final — ARCA refused the
- *   voucher and nothing retries it. The decision reads `fiscalStatus` only: a row with none (issued
- *   before the field existed) is treated as authorized, whether or not it
- *   carries a CAE.
+ *   What the client tells the operator is `recovery`'s to say, never
+ *   re-derived here: a `pending_cae` row answers `retry` or `support` (an FCE
+ *   voucher, a partial credit note, or a submit whose recorded voucher triple
+ *   is incomplete), and a `rejected` row answers `final`. Whether to refuse at
+ *   all reads `fiscalStatus` only: a row with none (issued before the field
+ *   existed) is treated as authorized, whether or not it carries a CAE.
  */
 export const INVOICE_DOCUMENT_REFUSAL_CODES = ['INVOICE_NOT_FOUND', 'INVOICE_NOT_AUTHORIZED'];
+/**
+ * What a client should tell the operator about a voucher the document routes
+ * refused with `INVOICE_NOT_AUTHORIZED` — the `recovery` beside `error` in that
+ * 409 body, decided server-side from the INVOICE row so a client never re-derives
+ * the drain's rules:
+ *
+ * - `retry` — `pending_cae`, and nothing on the row says the pending-invoice
+ *   drain will hold it: try again later. The drain may still hold such a row
+ *   when its order changed underneath it — that is decided against the order,
+ *   not the row, and is not answered here.
+ * - `support` — `pending_cae`, and the row itself shows the drain will hold it
+ *   rather than settle it: an FCE voucher (skipped), a PARTIAL credit note (its
+ *   row carries `partialItems`, and the drain's full-order rebuild never
+ *   reproduces it), or a submit whose recorded voucher triple is incomplete.
+ *   Contact support. A return's own partial credit note can still be settled by
+ *   that return's credit-note retry.
+ * - `final` — `rejected`. ARCA refused the voucher and nothing retries it.
+ */
+export const INVOICE_NOT_AUTHORIZED_RECOVERIES = ['retry', 'support', 'final'];

package/dist/store.d.ts

@@ -918,7 +918,7 @@ declare global {
              * not finish); `cash` while any cash shift is still open
              * (`409 STORE_MODULE_SHIFTS_OPEN` — `StoreModuleShiftsOpenData`).
              *
-             * Enforced on the server for seven modules only:
+             * Enforced on the server for nine modules only:
              * - `promotions` — applying one is refused `PROMOTION_NOT_ACTIVE` (the
              *   existing promotion refusal, not `STORE_MODULE_DISABLED`), a grant already
              *   frozen on a cart stays on the row but derives no money (its
@@ -945,8 +945,22 @@ declare global {
              *   settled `'skipped'` with reason `MODULE_OFF` at its send worker.
              * - `cash` — a POS terminal activates WITHOUT a shift (no `shiftId`,
              *   living until its own expiry), and opening a shift (`POST /shifts`) is
-             *   refused `403 STORE_MODULE_DISABLED`; every other `/shifts` endpoint
-             *   (close, movements, reconcile, reads) stays reachable.
+             *   refused `403 STORE_MODULE_DISABLED` — re-checked at commit, so an
+             *   open that commits after the turn-off is refused (one committing
+             *   inside the turn-off's own check-then-write window is accepted — see
+             *   `docs/STORE.md` § Store module switches); every other `/shifts`
+             *   endpoint (close, movements, reconcile, reads) stays reachable.
+             * - `customerAccounts` — the scheduled payment-reminder cron sends
+             *   nothing for the store, and a scheduled reminder email already queued
+             *   is dropped; the operator's per-customer send-reminder stays reachable.
+             * - `fiscalInvoicing` — "stop new, finish old": the CAEA request cron
+             *   requests no new CAEA for the store and `AFIP_CERT_EXPIRY` is muted
+             *   for it; a price-freezing seña over an order with no live factura
+             *   freezes with no `invoiceId` (re-checked at commit) instead of being
+             *   refused `DEPOSIT_FREEZE_REQUIRES_INVOICE`, and while that seña is held
+             *   a re-price that moves the charged total is `409 ORDER_PRICE_FROZEN`,
+             *   even after the module is back on. The CAEA inform cron, the return
+             *   credit-note reconciler and operator-initiated invoicing are unchanged.
              * Every other module is hide-only: its endpoints stay reachable. Public
              * reads carry only `appointments`, `surveys`, `promotions` and
              * `customerAccounts`. `PUT /platform/stores/{storeId}` refuses the leaf.
@@ -2032,9 +2046,11 @@ export declare const isStoreModuleKey: (value: unknown) => value is StoreModuleK
  */
 export declare const isStoreModuleOn: (modules: StoreModules | null | undefined, module: StoreModuleKey) => boolean;
 /**
- * Every refusal code the store-module switches put on the wire, beyond the
- * platform-wide set (`VALIDATION_FAILED`, and `STORE_CONFIG_FORBIDDEN` for a
- * plain USER writing the privileged leaf):
+ * Every refusal code the store-module switches put on the wire. Not listed
+ * here: `VALIDATION_FAILED` (a malformed body), and `STORE_CONFIG_FORBIDDEN` —
+ * the `PATCH /store` role refusal a plain USER gets for ANY privileged `config`
+ * leaf, `modules` included, judged before this module code runs. That one is in
+ * {@link STORE_PATCH_ERROR_CODES}:
  *
  * - `STORE_MODULE_UNKNOWN` (400) — `PATCH /store` named a key outside
  *   `STORE_MODULE_KEYS`; `data.module` carries it.
@@ -2147,3 +2163,50 @@ export type StoreModuleRefusalBody = {
         data: StoreModuleRefusalDataByCode[Code];
     };
 }[StoreModuleErrorCode];
+/**
+ * The bare refusal codes `PATCH /store` (`stacks/lambdas/store/_patch.ts`, and
+ * the route's own sibling modules it calls) answers itself — `{ error, message }`
+ * with no `data`, unless noted:
+ *
+ * Role refusals, `403` — a plain USER writing a privileged section. Each is
+ * judged before any other check on that section:
+ * - `STORE_CONFIG_FORBIDDEN` — any privileged `config` leaf (`modules`,
+ *   `stock`, `priceDecimals`, `changePrice`, `mandatory2fa`, …).
+ * - `STORE_ECOMMERCE_FORBIDDEN` — any `ecommerce` block.
+ * - `STORE_FISCAL_FIELD_FORBIDDEN` — a fiscal field of the store.
+ * - `STORE_JURISDICTION_FORBIDDEN` — `jurisdiction`.
+ * - `AFIP_RELACION_FLAG_FORBIDDEN` — `afip.wscdcEnabled` / `afip.fceEnabled`.
+ * - `FX_TABLE_FORBIDDEN` — the `currencies` exchange-rate table.
+ * - `FX_AUTO_UPDATE_FORBIDDEN` — `fxAutoUpdate`.
+ *
+ * Request refusals, `400`:
+ * - `FIELD_NOT_WRITABLE_HERE` — a field written through `POST /store`, not
+ *   this route; a top-level `fields` array names them.
+ * - `AFIP_POINT_OF_SALE_NOT_CLEARABLE` — `null` sent for the punto de venta.
+ * - `CURRENCY_CATALOG_ID_UNKNOWN` — a `currencies` entry names an unknown or
+ *   disabled catalog id.
+ * - `ARS_RATE_MUST_BE_ONE` — the peso entry's value is not exactly `1`.
+ * - `CURRENCY_RATE_ABOVE_CEILING` — a `currencies` value is above its ceiling.
+ * - `FX_CATALOG_ID_UNKNOWN` / `FX_SOURCE_ID_UNKNOWN` — an `fxAutoUpdate`
+ *   binding names an unknown catalog id or rate source.
+ * - `DISPLAY_CURRENCY_NOT_INVOICEABLE` / `PRODUCT_CURRENCY_NOT_INVOICEABLE` — a
+ *   store carrying an AFIP CUIT set `config.displayCurrency` /
+ *   `config.defaultProductCurrency` to a non-oficial USD variant.
+ * - `PRICE_LIST_NOT_FOUND` — an `ecommerce` save names a
+ *   `newCustomerPriceList` that does not exist (`store/_ecommercePatch.ts`).
+ *
+ * Maintenance mode (`{ mode: 'maintenance', level }`, `store/_patchMaintenance.ts`):
+ * - `FORBIDDEN` (403) — the caller is neither an ADMIN nor a MANAGER.
+ * - `STORE_NOT_FOUND` (404) — the store row is gone.
+ *
+ * ⚠️ Not repeated here because another tuple already publishes them:
+ * `VALIDATION_FAILED`, `PRODUCT_CURRENCY_NOT_SUBSCRIBED`
+ * (`PRODUCT_POST_ERROR_CODES`), `WAREHOUSE_NOT_FOUND` /
+ * `WAREHOUSE_INACTIVE` (a `channelWarehouses` target), and every
+ * `STORE_MODULE_*` code ({@link STORE_MODULE_ERROR_CODES}). Codes the route
+ * forwards from shared helpers (the write conflict, the CAEA punto-de-venta
+ * checks, the display-currency lock, the storefront fence) are not listed
+ * either. Cross-cutting refusals: check `GATING_ERROR_CODES` as well.
+ */
+export declare const STORE_PATCH_ERROR_CODES: readonly ["STORE_CONFIG_FORBIDDEN", "STORE_ECOMMERCE_FORBIDDEN", "STORE_FISCAL_FIELD_FORBIDDEN", "STORE_JURISDICTION_FORBIDDEN", "AFIP_RELACION_FLAG_FORBIDDEN", "FX_TABLE_FORBIDDEN", "FX_AUTO_UPDATE_FORBIDDEN", "FIELD_NOT_WRITABLE_HERE", "AFIP_POINT_OF_SALE_NOT_CLEARABLE", "CURRENCY_CATALOG_ID_UNKNOWN", "ARS_RATE_MUST_BE_ONE", "CURRENCY_RATE_ABOVE_CEILING", "FX_CATALOG_ID_UNKNOWN", "FX_SOURCE_ID_UNKNOWN", "DISPLAY_CURRENCY_NOT_INVOICEABLE", "PRODUCT_CURRENCY_NOT_INVOICEABLE", "PRICE_LIST_NOT_FOUND", "FORBIDDEN", "STORE_NOT_FOUND"];
+export type StorePatchErrorCode = (typeof STORE_PATCH_ERROR_CODES)[number];

package/dist/store.js

@@ -47,9 +47,11 @@ export const isStoreModuleKey = (value) => typeof value === 'string' && STORE_MO
  */
 export const isStoreModuleOn = (modules, module) => modules?.[module] !== false;
 /**
- * Every refusal code the store-module switches put on the wire, beyond the
- * platform-wide set (`VALIDATION_FAILED`, and `STORE_CONFIG_FORBIDDEN` for a
- * plain USER writing the privileged leaf):
+ * Every refusal code the store-module switches put on the wire. Not listed
+ * here: `VALIDATION_FAILED` (a malformed body), and `STORE_CONFIG_FORBIDDEN` —
+ * the `PATCH /store` role refusal a plain USER gets for ANY privileged `config`
+ * leaf, `modules` included, judged before this module code runs. That one is in
+ * {@link STORE_PATCH_ERROR_CODES}:
  *
  * - `STORE_MODULE_UNKNOWN` (400) — `PATCH /store` named a key outside
  *   `STORE_MODULE_KEYS`; `data.module` carries it.
@@ -86,3 +88,69 @@ export const STORE_MODULE_ERROR_CODES = [
     'STORE_MODULE_SHIFTS_OPEN',
     'STORE_MODULE_DISABLED',
 ];
+/**
+ * The bare refusal codes `PATCH /store` (`stacks/lambdas/store/_patch.ts`, and
+ * the route's own sibling modules it calls) answers itself — `{ error, message }`
+ * with no `data`, unless noted:
+ *
+ * Role refusals, `403` — a plain USER writing a privileged section. Each is
+ * judged before any other check on that section:
+ * - `STORE_CONFIG_FORBIDDEN` — any privileged `config` leaf (`modules`,
+ *   `stock`, `priceDecimals`, `changePrice`, `mandatory2fa`, …).
+ * - `STORE_ECOMMERCE_FORBIDDEN` — any `ecommerce` block.
+ * - `STORE_FISCAL_FIELD_FORBIDDEN` — a fiscal field of the store.
+ * - `STORE_JURISDICTION_FORBIDDEN` — `jurisdiction`.
+ * - `AFIP_RELACION_FLAG_FORBIDDEN` — `afip.wscdcEnabled` / `afip.fceEnabled`.
+ * - `FX_TABLE_FORBIDDEN` — the `currencies` exchange-rate table.
+ * - `FX_AUTO_UPDATE_FORBIDDEN` — `fxAutoUpdate`.
+ *
+ * Request refusals, `400`:
+ * - `FIELD_NOT_WRITABLE_HERE` — a field written through `POST /store`, not
+ *   this route; a top-level `fields` array names them.
+ * - `AFIP_POINT_OF_SALE_NOT_CLEARABLE` — `null` sent for the punto de venta.
+ * - `CURRENCY_CATALOG_ID_UNKNOWN` — a `currencies` entry names an unknown or
+ *   disabled catalog id.
+ * - `ARS_RATE_MUST_BE_ONE` — the peso entry's value is not exactly `1`.
+ * - `CURRENCY_RATE_ABOVE_CEILING` — a `currencies` value is above its ceiling.
+ * - `FX_CATALOG_ID_UNKNOWN` / `FX_SOURCE_ID_UNKNOWN` — an `fxAutoUpdate`
+ *   binding names an unknown catalog id or rate source.
+ * - `DISPLAY_CURRENCY_NOT_INVOICEABLE` / `PRODUCT_CURRENCY_NOT_INVOICEABLE` — a
+ *   store carrying an AFIP CUIT set `config.displayCurrency` /
+ *   `config.defaultProductCurrency` to a non-oficial USD variant.
+ * - `PRICE_LIST_NOT_FOUND` — an `ecommerce` save names a
+ *   `newCustomerPriceList` that does not exist (`store/_ecommercePatch.ts`).
+ *
+ * Maintenance mode (`{ mode: 'maintenance', level }`, `store/_patchMaintenance.ts`):
+ * - `FORBIDDEN` (403) — the caller is neither an ADMIN nor a MANAGER.
+ * - `STORE_NOT_FOUND` (404) — the store row is gone.
+ *
+ * ⚠️ Not repeated here because another tuple already publishes them:
+ * `VALIDATION_FAILED`, `PRODUCT_CURRENCY_NOT_SUBSCRIBED`
+ * (`PRODUCT_POST_ERROR_CODES`), `WAREHOUSE_NOT_FOUND` /
+ * `WAREHOUSE_INACTIVE` (a `channelWarehouses` target), and every
+ * `STORE_MODULE_*` code ({@link STORE_MODULE_ERROR_CODES}). Codes the route
+ * forwards from shared helpers (the write conflict, the CAEA punto-de-venta
+ * checks, the display-currency lock, the storefront fence) are not listed
+ * either. Cross-cutting refusals: check `GATING_ERROR_CODES` as well.
+ */
+export const STORE_PATCH_ERROR_CODES = [
+    'STORE_CONFIG_FORBIDDEN',
+    'STORE_ECOMMERCE_FORBIDDEN',
+    'STORE_FISCAL_FIELD_FORBIDDEN',
+    'STORE_JURISDICTION_FORBIDDEN',
+    'AFIP_RELACION_FLAG_FORBIDDEN',
+    'FX_TABLE_FORBIDDEN',
+    'FX_AUTO_UPDATE_FORBIDDEN',
+    'FIELD_NOT_WRITABLE_HERE',
+    'AFIP_POINT_OF_SALE_NOT_CLEARABLE',
+    'CURRENCY_CATALOG_ID_UNKNOWN',
+    'ARS_RATE_MUST_BE_ONE',
+    'CURRENCY_RATE_ABOVE_CEILING',
+    'FX_CATALOG_ID_UNKNOWN',
+    'FX_SOURCE_ID_UNKNOWN',
+    'DISPLAY_CURRENCY_NOT_INVOICEABLE',
+    'PRODUCT_CURRENCY_NOT_INVOICEABLE',
+    'PRICE_LIST_NOT_FOUND',
+    'FORBIDDEN',
+    'STORE_NOT_FOUND',
+];

package/dist/subscription.d.ts

@@ -780,11 +780,20 @@ declare global {
          * place to echo a catalogue's payment-provider IDs.
          */
         missingProviderIds: string[];
+        /**
+         * The charged billing cycles whose Stripe Price was minted at a different amount or currency
+         * than the row now publishes (its `stripePrice*Cents` / `stripePriceCurrency` stamp differs):
+         * Stripe checkout refuses them (`409 PLAN_STRIPE_PRICE_STALE`) until `seed-stripe-products`
+         * re-mints. A cycle with no stamp (a row seeded before the stamp existed) is never listed.
+         */
+        staleStripePriceCycles: ('monthly' | 'annual')[];
         /**
          * Keys in the template row's `grants` overlay that the api does not
          * declare (retired or misspelt), sorted. Inert — every reader ignores them
          * and the code default applies — but stored, so they are drift: a `null`
-         * for that key on `PATCH /platform/billing/plans/grants` removes them.
+         * for that key on `PATCH /platform/billing/plans/grants`, then
+         * `POST /platform/billing/plans/publish`, removes them (the PATCH alone
+         * writes only the draft).
          */
         undeclaredGrantKeys: string[];
         /**
@@ -1093,10 +1102,24 @@ declare global {
         reconciledStores?: number;
         /**
          * A paid tier whose price, currency or name changed, with a currency set on the draft being
-         * published (never `basico`, never when that currency is absent): run the provider seeders
-         * to mint its new prices.
+         * published (never `basico`, never when that currency is absent). A live publish mints the
+         * new Stripe Prices itself when Stripe already bills the tier (see `stripePriceMinted`), and
+         * that mint also converges the Stripe Product's name on the published `name`. The MercadoPago
+         * PreApproval plans, and a Product rename after a `name`-only publish (which mints nothing),
+         * stay the seeders'.
          */
         stripeSyncRequired: boolean;
+        /**
+         * Live publish only, and only on a tier whose price or currency moved while Stripe bills it
+         * (its row carries a `stripeProductId`): `true` when the publish minted the new Stripe Prices
+         * and stamped them on the row. `false` means this publish did NOT stamp the row, for one of
+         * two reasons: the mint failed (an operator ERROR row `STRIPE_PLAN_PRICE_MINT_FAILED` is
+         * written, and Stripe checkout refuses the tier with `409 PLAN_STRIPE_PRICE_STALE` until
+         * `seed-stripe-products` re-mints), or a LATER publish moved the price before this mint's
+         * stamp landed — superseded, so no ERROR row: that later publish mints its own. Absent
+         * otherwise.
+         */
+        stripePriceMinted?: boolean;
     }
     /** `data` of `POST /platform/billing/plans/publish`. */
     interface PlanCataloguePublishResult {
@@ -1161,6 +1184,20 @@ declare global {
      * revision moved: send the same request again.
      */
      | 'PLAN_CATALOGUE_BUSY' | 'PLAN_CATALOGUE_NO_CHANGES' | 'PLAN_CATALOGUE_PUBLICATION_NOT_FOUND' | 'PLAN_CATALOGUE_REQUEST_EXPIRED' | 'PLAN_CATALOGUE_INVALID_CURSOR' | 'PLAN_CATALOGUE_DRAFT_STALE' | 'IDEMPOTENCY_CONFLICT';
+    /**
+     * The `error` codes `POST /subscription/checkout` adds when a published price
+     * has not reached the provider that would bill it.
+     */
+    type PlanPriceSyncErrorCode = 
+    /**
+     * 409 · the store checks out through Stripe, and the Stripe Price on that
+     * plan cycle was minted at a different amount or currency than the plan
+     * now publishes (its stamp, `stripePrice*Cents` / `stripePriceCurrency`,
+     * differs) — a checkout would bill the old price. Nothing was created; the
+     * operator re-mints (`seed-stripe-products`). Carries `planTier` and
+     * `billingCycle` like `PLAN_NOT_PURCHASABLE`.
+     */
+    'PLAN_STRIPE_PRICE_STALE';
 }
 export type BillingProviderName = SubscriptionProvider;
 export type InvoiceSummary = globalThis.InvoiceSummary;
@@ -1176,6 +1213,8 @@ export declare const PAID_PLAN_TIERS: readonly ["emprendedor", "profesional", "a
 export declare const PLAN_CATALOGUE_TEMPLATE_FIELDS: readonly ["name", "description", "displayOrder", "isActive", "isPopular", "color", "priceMonthlyCents", "priceAnnualCents", "currency"];
 /** Every `error` code the plan catalogue draft / publish routes add — the coverage test holds the handlers to it. */
 export declare const PLAN_CATALOGUE_ERROR_CODES: readonly ["PLAN_CATALOGUE_REVISION_CONFLICT", "PLAN_CATALOGUE_BUSY", "PLAN_CATALOGUE_NO_CHANGES", "PLAN_CATALOGUE_PUBLICATION_NOT_FOUND", "PLAN_CATALOGUE_REQUEST_EXPIRED", "PLAN_CATALOGUE_INVALID_CURSOR", "PLAN_CATALOGUE_DRAFT_STALE", "IDEMPOTENCY_CONFLICT"];
+/** Every `error` code `POST /subscription/checkout` adds for a price the provider has not caught up with. */
+export declare const PLAN_PRICE_SYNC_ERROR_CODES: readonly ["PLAN_STRIPE_PRICE_STALE"];
 /** Whether `value` names a paid tier — narrows an untyped read (a stored row, a global) to `PaidPlanTier`. */
 export declare const isPaidPlanTier: (value: unknown) => value is PaidPlanTier;
 /**

package/dist/subscription.js

@@ -76,6 +76,10 @@ export const PLAN_CATALOGUE_ERROR_CODES = exhaustiveTuple()([
     'PLAN_CATALOGUE_DRAFT_STALE',
     'IDEMPOTENCY_CONFLICT',
 ]);
+/** Every `error` code `POST /subscription/checkout` adds for a price the provider has not caught up with. */
+export const PLAN_PRICE_SYNC_ERROR_CODES = exhaustiveTuple()([
+    'PLAN_STRIPE_PRICE_STALE',
+]);
 /** Whether `value` names a paid tier — narrows an untyped read (a stored row, a global) to `PaidPlanTier`. */
 export const isPaidPlanTier = (value) => typeof value === 'string' && PAID_PLAN_TIERS.includes(value);
 /**

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "platform-types",
-	"version": "1.10.733",
+	"version": "1.10.735",
 	"description": "Shared wire and entity contracts for the platform.",
 	"type": "module",
 	"main": "dist/index.js",