platform-types 1.10.755 → 1.10.757

package/dist/cjs/index.js

@@ -78,6 +78,7 @@ __exportStar(require("./orderCollectionAttempt.js"), exports);
 __exportStar(require("./orderCompletionAttempt.js"), exports);
 __exportStar(require("./orderCreateAttempt.js"), exports);
 __exportStar(require("./payment.js"), exports);
+__exportStar(require("./paymentAttempt.js"), exports);
 __exportStar(require("./platform.js"), exports);
 __exportStar(require("./presupuesto.js"), exports);
 __exportStar(require("./pricing.js"), exports);

package/dist/cjs/notification.js

@@ -5,7 +5,8 @@ exports.NotificationTypeEnum = void 0;
 // Indexed producers resolve candidates through `getNotificationSubscribers`:
 // legacy opt-ins and explicit channel maps remain source data on USER rows.
 // Addressed ERROR / ML_FACTURADOR_COLLISION / ML_SELLER_SWITCHED /
-// ML_CONNECTION_BROKEN / MENTION do not select a producer subscriber audience;
+// ML_CONNECTION_BROKEN / MENTION / CUSTOMER_PENDING_APPROVAL do not select a
+// producer subscriber audience;
 // the consumer still reads the live USER row for each delivery channel.
 // AFIP_CERT_EXPIRY is seeded on the founding user and uses the subscriber index.
 // Exported as a real enum consumed by api and app; adding an indexed type
@@ -157,4 +158,20 @@ var NotificationTypeEnum;
      * click-through targets.
      */
     NotificationTypeEnum["EXPIRY_ALERT"] = "EXPIRY_ALERT";
+    /**
+     * A shopper registered on the storefront while the store's
+     * `ecommerce.config.registrationMode` is `'approval'`, and the account waits
+     * for an operator to approve or reject it. Names the registrant by name only.
+     *
+     * ⚠️ Additive, on the same grounds as `ABANDONED_CART`. The producer fans out
+     * to every non-disabled ADMIN-tier user with no legacy opt-in scan, as for
+     * `ML_SELLER_SWITCHED` (a new key is seeded nowhere). The consumer enforces
+     * explicit type/channel preferences, default-on when absent. No backfill or
+     * consumer migration is owed.
+     *
+     * ⚠️ Carries `pendingCustomerRef` and NEVER a top-level `customerId` (an
+     * audience — the operator bell would reach the pending registrant's own
+     * storefront socket), and never the registrant's email address.
+     */
+    NotificationTypeEnum["CUSTOMER_PENDING_APPROVAL"] = "CUSTOMER_PENDING_APPROVAL";
 })(NotificationTypeEnum || (exports.NotificationTypeEnum = NotificationTypeEnum = {}));

package/dist/cjs/paymentAttempt.js

@@ -0,0 +1,64 @@
+"use strict";
+/**
+ * Online payment attempts — a storefront order paid through Mercado Pago
+ * Checkout Pro on the store's connected account.
+ *
+ * An attempt is its own record, kept apart from the order: it never sets
+ * `Order.financialStatus`, `Order.linkedPayments` or fulfilment. The Mercado
+ * Pago webhook moves the attempt, and the existing payment pipeline settles the
+ * order.
+ *
+ * A shopper starts one for an order whose payment method row declares
+ * `storefront: 'mp-checkout-pro'` and is redirected to `redirectUrl`. While the
+ * attempt is live (until `expiresAt`), starting again answers the SAME attempt,
+ * whatever its state. A new attempt is minted only once the previous one is
+ * `expired` or `cancelled` and the order can still be paid.
+ *
+ * ⚠️ `paymentAttempt` is never a field of `Order`. The shopper's own order read
+ * answers a {@link StorefrontOrderView}, which carries it as a projection, so
+ * no operator write can carry it back onto the order.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ORDER_NOT_PAYABLE_REASONS = exports.PAYMENT_ATTEMPT_ERROR_CODES = exports.PAYMENT_ATTEMPT_STATES = void 0;
+/** Every {@link PaymentAttemptState}, in lifecycle order. */
+exports.PAYMENT_ATTEMPT_STATES = [
+    'created',
+    'pending',
+    'approved',
+    'rejected',
+    'expired',
+    'cancelled',
+    'refunded',
+    'charged_back',
+    'resolution',
+];
+/**
+ * Every refusal code a payment-attempt start, or a checkout choosing an online
+ * method, answers:
+ *
+ * - `PAYMENT_PROVIDER_NOT_CONNECTED` · 412 — the store has no Mercado Pago
+ *   account connected.
+ * - `PAYMENT_PROVIDER_TOKEN_EXPIRED` · 412 — the store's Mercado Pago
+ *   connection was rejected by Mercado Pago and must be reconnected.
+ * - `ORDER_NOT_PAYABLE` · 409 — the order cannot be paid online; `data` is
+ *   {@link OrderNotPayableData}.
+ * - `PAYMENT_ATTEMPT_EXPIRED` · 410 — the attempt's `expiresAt` passed.
+ * - `PAYMENT_METHOD_UNAVAILABLE` · 409 — the checkout chose an online payment
+ *   method the store cannot take right now (its provider is not connected).
+ */
+exports.PAYMENT_ATTEMPT_ERROR_CODES = [
+    'PAYMENT_PROVIDER_NOT_CONNECTED',
+    'PAYMENT_PROVIDER_TOKEN_EXPIRED',
+    'ORDER_NOT_PAYABLE',
+    'PAYMENT_ATTEMPT_EXPIRED',
+    'PAYMENT_METHOD_UNAVAILABLE',
+];
+/**
+ * Every `data.reason` of `409 ORDER_NOT_PAYABLE`:
+ *
+ * - `cancelled` — the order is cancelled.
+ * - `paid` — the order is already paid.
+ * - `not-online` — the order's payment method row does not declare
+ *   `storefront: 'mp-checkout-pro'`.
+ */
+exports.ORDER_NOT_PAYABLE_REASONS = ['cancelled', 'paid', 'not-online'];

package/dist/cjs/socket.js

@@ -519,6 +519,16 @@ exports.SOCKET_ACTIONS = [
     'mercadopago_static_qr_created',
     'mp_hook_log_appended',
     'mp_ipn_log_appended',
+    /**
+     * A storefront order's online payment attempt changed state. `data` is
+     * `OrderPaymentAttemptFrameData` (`paymentAttempt.ts`) — the order id and the
+     * minimised `OrderPaymentAttemptView`, never the stored attempt.
+     *
+     * ⚠️ To the order's OWN customer only (`wsPostCustomer`), never a store-wide
+     * customer broadcast. Published ahead of its producer: no api writer emits
+     * it yet.
+     */
+    'orderPaymentAttempt',
     'stripe',
     'subscription',
     // Fiscal.

package/dist/cjs/store.js

@@ -1,6 +1,6 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.STORE_PATCH_ERROR_CODES = exports.STORE_MODULE_ERROR_CODES = exports.isStoreModuleOn = exports.isStoreModuleKey = exports.STORE_MODULE_KEYS = exports.STORE_ONBOARDING_REVIEW_AREAS = exports.CUSTOM_DOMAIN_ROW_LIMIT = exports.CUSTOM_DOMAIN_SLOT_LIMIT = void 0;
+exports.STORE_PATCH_ERROR_CODES = exports.STORE_MODULE_ERROR_CODES = exports.isStoreModuleOn = exports.isStoreModuleKey = exports.STORE_MODULE_KEYS = exports.STOREFRONT_METHOD_KINDS = exports.STORE_ONBOARDING_REVIEW_AREAS = exports.CUSTOM_DOMAIN_ROW_LIMIT = exports.CUSTOM_DOMAIN_SLOT_LIMIT = void 0;
 /**
  * How many custom-domain rows a store may hold that count: one active domain
  * and one spare, so a replacement can be verified and provisioned before the
@@ -24,6 +24,11 @@ exports.CUSTOM_DOMAIN_ROW_LIMIT = 10;
  * area is added in one place.
  */
 exports.STORE_ONBOARDING_REVIEW_AREAS = ['payments', 'delivery', 'pricing'];
+/**
+ * Every `StorefrontMethodKind` — the ONE list `Method.storefront` is validated
+ * against on write (`POST /store`) and typed against on every read.
+ */
+exports.STOREFRONT_METHOD_KINDS = ['offline', 'mp-checkout-pro'];
 /**
  * Every `StoreModuleKey`, in catalogue order — the ONE list. The type is derived
  * from it, so the `PATCH /store` validator and every client enumerate exactly

package/dist/index.d.ts

@@ -54,6 +54,7 @@ export * from './orderCollectionAttempt.ts';
 export * from './orderCompletionAttempt.ts';
 export * from './orderCreateAttempt.ts';
 export * from './payment.ts';
+export * from './paymentAttempt.ts';
 export * from './platform.ts';
 export * from './presupuesto.ts';
 export * from './pricing.ts';

package/dist/index.js

@@ -62,6 +62,7 @@ export * from "./orderCollectionAttempt.js";
 export * from "./orderCompletionAttempt.js";
 export * from "./orderCreateAttempt.js";
 export * from "./payment.js";
+export * from "./paymentAttempt.js";
 export * from "./platform.js";
 export * from "./presupuesto.js";
 export * from "./pricing.js";

package/dist/notification.d.ts

@@ -136,7 +136,23 @@ export declare enum NotificationTypeEnum {
      * on a store until a user turns it on. Carries `productId` and `lotId` as its
      * click-through targets.
      */
-    EXPIRY_ALERT = "EXPIRY_ALERT"
+    EXPIRY_ALERT = "EXPIRY_ALERT",
+    /**
+     * A shopper registered on the storefront while the store's
+     * `ecommerce.config.registrationMode` is `'approval'`, and the account waits
+     * for an operator to approve or reject it. Names the registrant by name only.
+     *
+     * ⚠️ Additive, on the same grounds as `ABANDONED_CART`. The producer fans out
+     * to every non-disabled ADMIN-tier user with no legacy opt-in scan, as for
+     * `ML_SELLER_SWITCHED` (a new key is seeded nowhere). The consumer enforces
+     * explicit type/channel preferences, default-on when absent. No backfill or
+     * consumer migration is owed.
+     *
+     * ⚠️ Carries `pendingCustomerRef` and NEVER a top-level `customerId` (an
+     * audience — the operator bell would reach the pending registrant's own
+     * storefront socket), and never the registrant's email address.
+     */
+    CUSTOMER_PENDING_APPROVAL = "CUSTOMER_PENDING_APPROVAL"
 }
 declare global {
     type CustomerNotificationPreferences = Partial<Record<'reminder-scheduled' | 'appointment-reminder', {
@@ -183,6 +199,17 @@ declare global {
          */
         cartId?: string;
     }
+    /**
+     * Which registration a `CUSTOMER_PENDING_APPROVAL` operator bell is about. A
+     * POINTER, never an audience — the same reason as {@link AbandonedCartRef}:
+     * the top-level `customerId` would deliver the bell to the registrant.
+     * Operator surfaces only.
+     */
+    interface PendingCustomerRef {
+        customerId: string;
+        /** The row's `emailVerified` at registration — `false` when the address is still unproven. */
+        emailVerified: boolean;
+    }
     interface NotificationInterface {
         storeId: string;
         notificationId: string;
@@ -224,6 +251,11 @@ declare global {
          * on bells written before it existed.
          */
         cartRef?: AbandonedCartRef;
+        /**
+         * `CUSTOMER_PENDING_APPROVAL` only: which pending registration to open. A
+         * POINTER, not an audience — see {@link PendingCustomerRef}.
+         */
+        pendingCustomerRef?: PendingCustomerRef;
         /** `MENTION` only: the colleague who wrote the mention (a snapshot). */
         actor?: NotificationActor;
         userId?: string;

package/dist/notification.js

@@ -2,7 +2,8 @@
 // Indexed producers resolve candidates through `getNotificationSubscribers`:
 // legacy opt-ins and explicit channel maps remain source data on USER rows.
 // Addressed ERROR / ML_FACTURADOR_COLLISION / ML_SELLER_SWITCHED /
-// ML_CONNECTION_BROKEN / MENTION do not select a producer subscriber audience;
+// ML_CONNECTION_BROKEN / MENTION / CUSTOMER_PENDING_APPROVAL do not select a
+// producer subscriber audience;
 // the consumer still reads the live USER row for each delivery channel.
 // AFIP_CERT_EXPIRY is seeded on the founding user and uses the subscriber index.
 // Exported as a real enum consumed by api and app; adding an indexed type
@@ -154,4 +155,20 @@ export var NotificationTypeEnum;
      * click-through targets.
      */
     NotificationTypeEnum["EXPIRY_ALERT"] = "EXPIRY_ALERT";
+    /**
+     * A shopper registered on the storefront while the store's
+     * `ecommerce.config.registrationMode` is `'approval'`, and the account waits
+     * for an operator to approve or reject it. Names the registrant by name only.
+     *
+     * ⚠️ Additive, on the same grounds as `ABANDONED_CART`. The producer fans out
+     * to every non-disabled ADMIN-tier user with no legacy opt-in scan, as for
+     * `ML_SELLER_SWITCHED` (a new key is seeded nowhere). The consumer enforces
+     * explicit type/channel preferences, default-on when absent. No backfill or
+     * consumer migration is owed.
+     *
+     * ⚠️ Carries `pendingCustomerRef` and NEVER a top-level `customerId` (an
+     * audience — the operator bell would reach the pending registrant's own
+     * storefront socket), and never the registrant's email address.
+     */
+    NotificationTypeEnum["CUSTOMER_PENDING_APPROVAL"] = "CUSTOMER_PENDING_APPROVAL";
 })(NotificationTypeEnum || (NotificationTypeEnum = {}));

package/dist/order.d.ts

@@ -1282,10 +1282,14 @@ declare global {
     /**
      * Who initiated a cancellation. `customer` is the storefront self-service
      * path (`DELETE` on the web `/orders`); `operator` is
-     * `POST /orders { mode: 'cancel' }`, by ADMIN, SUPERVISOR or MANAGER. Both
+     * `POST /orders { mode: 'cancel' }`, by ADMIN, SUPERVISOR or MANAGER. All
      * are distinct from a bare `disabled`, which records no cancellation.
+     *
+     * `system` is written only by the payment-hold expiry, which cancels an
+     * order whose online payment attempt lapsed unpaid. No writer emits it yet;
+     * it is published first so a client can render it before one does.
      */
-    type OrderCancellationSource = 'customer' | 'operator';
+    type OrderCancellationSource = 'customer' | 'operator' | 'system';
     /**
      * Machine-readable reason an order is locked against a mutation — the
      * payload of `409 ORDER_LOCKED` (on the customer cancellation's `409 ORDER_CANCELLATION_LOCKED` it rides in `message` as `reason: <r>` and that body has no `reason` key; the operator cancellation's carries both), and the
@@ -2309,6 +2313,51 @@ declare global {
          */
         warehouseId?: string;
     }
+    /**
+     * The storefront `POST /orders` body (Web host, customer token) — the shape
+     * `ordersPostSchema` (`stacks/helpers/storefrontCheckout.ts`) accepts, tied to
+     * it there by `AssertStorefrontOrderCreateRequestMatchesSchema`. Not
+     * `CreateOrderRequest`, which is the operator (POS) body.
+     *
+     * The lines are never sent: the order is built from the shopper's server-side
+     * cart, and the customer and store come from the token. An undeclared key at
+     * any level is dropped, not refused.
+     */
+    interface StorefrontOrderCreateRequest {
+        /** A `Store.paymentMethods` row `id`; a value naming no row is refused. */
+        paymentMethod: number;
+        /** A `Store.deliveryMethods` row `id`. */
+        deliveryMethod: number;
+        /**
+         * The billing identity the invoice is issued against. Every key is
+         * optional; `docType` and `docNumber` are checked together as the ARCA
+         * receptor identity.
+         */
+        invoiceMethod?: {
+            condFiscal?: number;
+            condFiscalName?: string;
+            cuit?: string;
+            razonSocial?: string;
+            docType?: number;
+            docNumber?: string;
+        };
+        comments?: string;
+        /**
+         * The delivery address. ⚠️ Every key is OPTIONAL here, unlike the stored
+         * `Order.deliveryAddress`: a partial address is accepted, as it always has
+         * been.
+         */
+        deliveryAddress?: {
+            fullName?: string;
+            address?: string;
+            phone?: string;
+            city?: string;
+            province?: string;
+            postalCode?: string;
+        };
+        /** Persist `deliveryAddress` as the customer's default. Directive only, never stored. */
+        saveAsDefault?: boolean;
+    }
     interface ZebraTag {
         orderId: string;
         fullName: string;

package/dist/paymentAttempt.d.ts

@@ -0,0 +1,120 @@
+/**
+ * Online payment attempts — a storefront order paid through Mercado Pago
+ * Checkout Pro on the store's connected account.
+ *
+ * An attempt is its own record, kept apart from the order: it never sets
+ * `Order.financialStatus`, `Order.linkedPayments` or fulfilment. The Mercado
+ * Pago webhook moves the attempt, and the existing payment pipeline settles the
+ * order.
+ *
+ * A shopper starts one for an order whose payment method row declares
+ * `storefront: 'mp-checkout-pro'` and is redirected to `redirectUrl`. While the
+ * attempt is live (until `expiresAt`), starting again answers the SAME attempt,
+ * whatever its state. A new attempt is minted only once the previous one is
+ * `expired` or `cancelled` and the order can still be paid.
+ *
+ * ⚠️ `paymentAttempt` is never a field of `Order`. The shopper's own order read
+ * answers a {@link StorefrontOrderView}, which carries it as a projection, so
+ * no operator write can carry it back onto the order.
+ */
+declare global {
+    /**
+     * One of {@link PAYMENT_ATTEMPT_STATES}.
+     *
+     * - `created` — the Mercado Pago checkout exists; nothing paid yet.
+     * - `pending` — a payment was made and Mercado Pago has not decided it.
+     * - `approved` — a payment equal to the order total was approved, and the
+     *   order is settled by the payment pipeline.
+     * - `rejected` — the last payment was rejected. ⚠️ NOT terminal: Checkout Pro
+     *   lets the shopper retry inside the same checkout until `expiresAt`, so a
+     *   later payment can move it to `pending` or `approved`.
+     * - `expired` — `expiresAt` passed with nothing approved; the order is
+     *   cancelled (`Order.cancellationSource: 'system'`).
+     * - `cancelled` — the order was cancelled while the attempt was live.
+     * - `refunded` — the approved payment was refunded.
+     * - `charged_back` — the approved payment was charged back.
+     * - `resolution` — money landed that must NOT settle the order: an approval
+     *   on an order already paid, on an expired or cancelled order, or for an
+     *   amount other than the order total. The payment is recorded and an
+     *   operator decides; the order is neither settled nor re-opened. Show it to
+     *   the shopper as under review.
+     */
+    type PaymentAttemptState = (typeof PAYMENT_ATTEMPT_STATES)[number];
+    /** One of {@link PAYMENT_ATTEMPT_ERROR_CODES}. */
+    type PaymentAttemptErrorCode = (typeof PAYMENT_ATTEMPT_ERROR_CODES)[number];
+    /** One of {@link ORDER_NOT_PAYABLE_REASONS}. */
+    type OrderNotPayableReason = (typeof ORDER_NOT_PAYABLE_REASONS)[number];
+    /**
+     * The body that starts (or returns the live) payment attempt for an order.
+     * The caller must be the order's customer; the store is the token's. The
+     * amount is never sent: it is the order's total, read server-side.
+     */
+    interface StartPaymentAttemptRequest {
+        orderId: string;
+    }
+    /** `data` of a successful start. A repeat start while the attempt is live answers the same `attemptId`. */
+    interface StartPaymentAttemptResponse {
+        attemptId: string;
+        /** The Mercado Pago checkout URL to send the shopper to. */
+        redirectUrl: string;
+        /** ISO 8601. After it the checkout no longer takes a payment. */
+        expiresAt: string;
+    }
+    /** `data` of `409 ORDER_NOT_PAYABLE`. */
+    interface OrderNotPayableData {
+        reason: OrderNotPayableReason;
+    }
+    /**
+     * The minimised attempt the shopper sees on their own order — never the
+     * stored record.
+     */
+    interface OrderPaymentAttemptView {
+        attemptId: string;
+        state: PaymentAttemptState;
+        /** ISO 8601. */
+        expiresAt: string;
+    }
+    /**
+     * The shopper's own order read: the order plus its payment attempt, when it
+     * has one. `paymentAttempt` is attached on read and is never stored on the
+     * order.
+     */
+    type StorefrontOrderView = Order & {
+        paymentAttempt?: OrderPaymentAttemptView;
+    };
+    /**
+     * `data` of an `orderPaymentAttempt` socket frame, sent to the order's own
+     * customer only when the attempt changes.
+     */
+    interface OrderPaymentAttemptFrameData {
+        orderId: string;
+        paymentAttempt: OrderPaymentAttemptView;
+    }
+}
+/** Every {@link PaymentAttemptState}, in lifecycle order. */
+export declare const PAYMENT_ATTEMPT_STATES: readonly ["created", "pending", "approved", "rejected", "expired", "cancelled", "refunded", "charged_back", "resolution"];
+/**
+ * Every refusal code a payment-attempt start, or a checkout choosing an online
+ * method, answers:
+ *
+ * - `PAYMENT_PROVIDER_NOT_CONNECTED` · 412 — the store has no Mercado Pago
+ *   account connected.
+ * - `PAYMENT_PROVIDER_TOKEN_EXPIRED` · 412 — the store's Mercado Pago
+ *   connection was rejected by Mercado Pago and must be reconnected.
+ * - `ORDER_NOT_PAYABLE` · 409 — the order cannot be paid online; `data` is
+ *   {@link OrderNotPayableData}.
+ * - `PAYMENT_ATTEMPT_EXPIRED` · 410 — the attempt's `expiresAt` passed.
+ * - `PAYMENT_METHOD_UNAVAILABLE` · 409 — the checkout chose an online payment
+ *   method the store cannot take right now (its provider is not connected).
+ */
+export declare const PAYMENT_ATTEMPT_ERROR_CODES: readonly ["PAYMENT_PROVIDER_NOT_CONNECTED", "PAYMENT_PROVIDER_TOKEN_EXPIRED", "ORDER_NOT_PAYABLE", "PAYMENT_ATTEMPT_EXPIRED", "PAYMENT_METHOD_UNAVAILABLE"];
+/**
+ * Every `data.reason` of `409 ORDER_NOT_PAYABLE`:
+ *
+ * - `cancelled` — the order is cancelled.
+ * - `paid` — the order is already paid.
+ * - `not-online` — the order's payment method row does not declare
+ *   `storefront: 'mp-checkout-pro'`.
+ */
+export declare const ORDER_NOT_PAYABLE_REASONS: readonly ["cancelled", "paid", "not-online"];
+export {};

package/dist/paymentAttempt.js

@@ -0,0 +1,61 @@
+/**
+ * Online payment attempts — a storefront order paid through Mercado Pago
+ * Checkout Pro on the store's connected account.
+ *
+ * An attempt is its own record, kept apart from the order: it never sets
+ * `Order.financialStatus`, `Order.linkedPayments` or fulfilment. The Mercado
+ * Pago webhook moves the attempt, and the existing payment pipeline settles the
+ * order.
+ *
+ * A shopper starts one for an order whose payment method row declares
+ * `storefront: 'mp-checkout-pro'` and is redirected to `redirectUrl`. While the
+ * attempt is live (until `expiresAt`), starting again answers the SAME attempt,
+ * whatever its state. A new attempt is minted only once the previous one is
+ * `expired` or `cancelled` and the order can still be paid.
+ *
+ * ⚠️ `paymentAttempt` is never a field of `Order`. The shopper's own order read
+ * answers a {@link StorefrontOrderView}, which carries it as a projection, so
+ * no operator write can carry it back onto the order.
+ */
+/** Every {@link PaymentAttemptState}, in lifecycle order. */
+export const PAYMENT_ATTEMPT_STATES = [
+    'created',
+    'pending',
+    'approved',
+    'rejected',
+    'expired',
+    'cancelled',
+    'refunded',
+    'charged_back',
+    'resolution',
+];
+/**
+ * Every refusal code a payment-attempt start, or a checkout choosing an online
+ * method, answers:
+ *
+ * - `PAYMENT_PROVIDER_NOT_CONNECTED` · 412 — the store has no Mercado Pago
+ *   account connected.
+ * - `PAYMENT_PROVIDER_TOKEN_EXPIRED` · 412 — the store's Mercado Pago
+ *   connection was rejected by Mercado Pago and must be reconnected.
+ * - `ORDER_NOT_PAYABLE` · 409 — the order cannot be paid online; `data` is
+ *   {@link OrderNotPayableData}.
+ * - `PAYMENT_ATTEMPT_EXPIRED` · 410 — the attempt's `expiresAt` passed.
+ * - `PAYMENT_METHOD_UNAVAILABLE` · 409 — the checkout chose an online payment
+ *   method the store cannot take right now (its provider is not connected).
+ */
+export const PAYMENT_ATTEMPT_ERROR_CODES = [
+    'PAYMENT_PROVIDER_NOT_CONNECTED',
+    'PAYMENT_PROVIDER_TOKEN_EXPIRED',
+    'ORDER_NOT_PAYABLE',
+    'PAYMENT_ATTEMPT_EXPIRED',
+    'PAYMENT_METHOD_UNAVAILABLE',
+];
+/**
+ * Every `data.reason` of `409 ORDER_NOT_PAYABLE`:
+ *
+ * - `cancelled` — the order is cancelled.
+ * - `paid` — the order is already paid.
+ * - `not-online` — the order's payment method row does not declare
+ *   `storefront: 'mp-checkout-pro'`.
+ */
+export const ORDER_NOT_PAYABLE_REASONS = ['cancelled', 'paid', 'not-online'];

package/dist/socket.d.ts

@@ -26,7 +26,7 @@
  * A client must ignore actions it does not own rather than assume it
  * receives all of them.
  */
-export declare const SOCKET_ACTIONS: readonly ["account", "appointments", "appointmentWaitlist", "attendance", "attributes", "automation-rules", "baskets", "cart", "brands", "cash", "catalogOperation", "categories", "campaigns", "customers", "customerNote", "customerAddress", "customerContact", "deliveries", "globals", "inventory", "invoices", "literals", "loyalty", "orders", "presupuestos", "products", "promotions", "segments", "returns", "rma", "templates", "services", "service-templates", "shifts", "stores", "suppliers", "supplier-invoice", "support", "surveys", "users", "warehouses", "zones", "favorites", "webhooks", "account-delete", "baskets-delete", "cart-delete", "log-delete", "notifications", "support-message", "whatsapp-order-draft", "whatsapp-order-confirmation", "payment_received", "mp_payment_status_changed", "payment_linked", "payment_unlinked", "mercadopago", "mercadopago_dynamic_qr_created", "mercadopago_static_qr_created", "mp_hook_log_appended", "mp_ipn_log_appended", "stripe", "subscription", "caea", "print", "print-order", "print-invoice", "print-product", "print-tag", "print_job_failed", "request_printers", "printers_changed", "agent_status_changed", "print_rules_changed", "printers_active", "agent_command", "maintenance", "currency_auto_updated", "drain_progress", "integration_event_appended", "userActivityRecorded", "mercadolibre_settlement_period", "customDomain", "purchaseOrders", "cycleCounts", "stockTransfers", "workItems"];
+export declare const SOCKET_ACTIONS: readonly ["account", "appointments", "appointmentWaitlist", "attendance", "attributes", "automation-rules", "baskets", "cart", "brands", "cash", "catalogOperation", "categories", "campaigns", "customers", "customerNote", "customerAddress", "customerContact", "deliveries", "globals", "inventory", "invoices", "literals", "loyalty", "orders", "presupuestos", "products", "promotions", "segments", "returns", "rma", "templates", "services", "service-templates", "shifts", "stores", "suppliers", "supplier-invoice", "support", "surveys", "users", "warehouses", "zones", "favorites", "webhooks", "account-delete", "baskets-delete", "cart-delete", "log-delete", "notifications", "support-message", "whatsapp-order-draft", "whatsapp-order-confirmation", "payment_received", "mp_payment_status_changed", "payment_linked", "payment_unlinked", "mercadopago", "mercadopago_dynamic_qr_created", "mercadopago_static_qr_created", "mp_hook_log_appended", "mp_ipn_log_appended", "orderPaymentAttempt", "stripe", "subscription", "caea", "print", "print-order", "print-invoice", "print-product", "print-tag", "print_job_failed", "request_printers", "printers_changed", "agent_status_changed", "print_rules_changed", "printers_active", "agent_command", "maintenance", "currency_auto_updated", "drain_progress", "integration_event_appended", "userActivityRecorded", "mercadolibre_settlement_period", "customDomain", "purchaseOrders", "cycleCounts", "stockTransfers", "workItems"];
 /** Union of every server→client data-frame action. */
 export type SocketAction = (typeof SOCKET_ACTIONS)[number];
 /**

package/dist/socket.js

@@ -516,6 +516,16 @@ export const SOCKET_ACTIONS = [
     'mercadopago_static_qr_created',
     'mp_hook_log_appended',
     'mp_ipn_log_appended',
+    /**
+     * A storefront order's online payment attempt changed state. `data` is
+     * `OrderPaymentAttemptFrameData` (`paymentAttempt.ts`) — the order id and the
+     * minimised `OrderPaymentAttemptView`, never the stored attempt.
+     *
+     * ⚠️ To the order's OWN customer only (`wsPostCustomer`), never a store-wide
+     * customer broadcast. Published ahead of its producer: no api writer emits
+     * it yet.
+     */
+    'orderPaymentAttempt',
     'stripe',
     'subscription',
     // Fiscal.

package/dist/store.d.ts

@@ -1734,12 +1734,35 @@ declare global {
          */
         onboardingReviewAdd?: StoreOnboardingReviewArea[];
     }
+    /**
+     * How the storefront offers a `paymentMethods` row — one of
+     * `STOREFRONT_METHOD_KINDS`.
+     *
+     * - `'offline'` — offered, paid on delivery or pickup.
+     * - `'mp-checkout-pro'` — offered, paid online through a payment attempt
+     *   (`StartPaymentAttemptRequest`) on the store's connected Mercado Pago
+     *   account.
+     */
+    type StorefrontMethodKind = (typeof STOREFRONT_METHOD_KINDS)[number];
     interface Method {
         id: number;
         name: string;
         value?: number;
         removable?: boolean;
         editable?: boolean;
+        /**
+         * How the storefront offers this row. Written by `POST /store` (a value
+         * outside `STOREFRONT_METHOD_KINDS` is `400 VALIDATION_FAILED`) and carried
+         * by every read of the row, the storefront `GET /store` and the CUSTOMER
+         * STORE frame included.
+         *
+         * ⚠️ ABSENT means "not declared", never "not offered": the storefront
+         * keeps its legacy filter until the store declares `storefront` on any
+         * row. A stored value outside the tuple is dropped on read, never coerced.
+         * `deliveryMethods` rows share the row schema, so the key is accepted
+         * there too.
+         */
+        storefront?: StorefrontMethodKind;
     }
     interface FiscalCondition {
         CbteTipo: {
@@ -2168,6 +2191,11 @@ export declare const CUSTOM_DOMAIN_ROW_LIMIT = 10;
  * area is added in one place.
  */
 export declare const STORE_ONBOARDING_REVIEW_AREAS: readonly ["payments", "delivery", "pricing"];
+/**
+ * Every `StorefrontMethodKind` — the ONE list `Method.storefront` is validated
+ * against on write (`POST /store`) and typed against on every read.
+ */
+export declare const STOREFRONT_METHOD_KINDS: readonly ["offline", "mp-checkout-pro"];
 /**
  * Every `StoreModuleKey`, in catalogue order — the ONE list. The type is derived
  * from it, so the `PATCH /store` validator and every client enumerate exactly

package/dist/store.js

@@ -21,6 +21,11 @@ export const CUSTOM_DOMAIN_ROW_LIMIT = 10;
  * area is added in one place.
  */
 export const STORE_ONBOARDING_REVIEW_AREAS = ['payments', 'delivery', 'pricing'];
+/**
+ * Every `StorefrontMethodKind` — the ONE list `Method.storefront` is validated
+ * against on write (`POST /store`) and typed against on every read.
+ */
+export const STOREFRONT_METHOD_KINDS = ['offline', 'mp-checkout-pro'];
 /**
  * Every `StoreModuleKey`, in catalogue order — the ONE list. The type is derived
  * from it, so the `PATCH /store` validator and every client enumerate exactly

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "platform-types",
-	"version": "1.10.755",
+	"version": "1.10.757",
 	"description": "Shared wire and entity contracts for the platform.",
 	"type": "module",
 	"main": "dist/index.js",