platform-types 1.10.765 → 1.10.767

package/dist/account.d.ts

@@ -324,8 +324,11 @@ declare global {
      * `DATE_RANGE_INCOMPLETE`) before format (`DATE_MALFORMED`) before semantics
      * (`DATE_RANGE_INVERTED`, `DATE_RANGE_TOO_WIDE`).
      *
-     * ⚠️ The storefront twin can only ever return `DATE_MALFORMED`: it reads no
-     * `from`/`to`, having no store-wide branch to window.
+     * ⚠️ The storefront twin reads no `from`/`to`, having no store-wide branch
+     * to window. Its `GET /account` returns `DATE_MALFORMED` (for `date` or
+     * `until`) and `DATE_RANGE_INVERTED` (`until` before `date`). The storefront
+     * `GET /orders` and `GET /invoices` return the same two codes, for `until`
+     * only (see {@link WebOrdersQuery}, {@link WebInvoicesQuery}).
      */
     type AccountDateRangeError = 'DATE_AND_RANGE_EXCLUSIVE' | 'DATE_RANGE_INCOMPLETE' | 'DATE_MALFORMED' | 'DATE_RANGE_INVERTED' | 'DATE_RANGE_TOO_WIDE';
     /**
@@ -345,13 +348,15 @@ declare global {
      * - `INVALID_CURSOR` — **400.** The `?startKey=` did not decode, or decoded to
      *   a cursor for another store or another customer, one whose own key sits
      *   outside the statement's key range at either end, or one whose pins do not
-     *   hold. ⚠️ **There are TWO pins.** `balanceDate` must not be absent,
+     *   hold. ⚠️ **There are THREE pins.** `balanceDate` must not be absent,
      *   non-numeric or raised past the cursor's own key; `date` must EQUAL the
      *   `?date=` of the request spending the cursor, because it is the boundary
      *   both statement reads are split on — changing it mid-walk would read the
      *   same rows through a different filter and silently skip or repeat every row
-     *   the move crossed. A client that wants a different window starts a new walk
-     *   with no cursor. ⚠️ Never
+     *   the move crossed; and `until` must EQUAL the request's `?until=`, or the
+     *   open-end sentinel `99991231` when the request sends none (a cursor minted
+     *   before `until` existed carries no such pin and is refused once). A client
+     *   that wants a different window starts a new walk with no cursor. ⚠️ Never
      *   "restart from page one" on this: a client cannot tell a silent restart
      *   from a legitimate first page, so a paging loop re-reads from the top and
      *   appends every row twice. Discard the cursor and ask the user.
@@ -367,6 +372,56 @@ declare global {
      *   computes no sum.
      */
     type AccountStatementError = 'INVALID_CURSOR' | 'CUSTOMER_LEDGER_TRUNCATED';
+    /**
+     * How the storefront statement PDF (`GET /account?mode=pdf`) can REFUSE,
+     * beyond {@link AccountDateRangeError} (same window validation as the JSON
+     * page) and `CUSTOMER_LEDGER_TRUNCATED` (the same 503 envelope). Neither
+     * prints a partial PDF — a statement with missing rows prints wrong running
+     * balances.
+     *
+     * - `ACCOUNT_STATEMENT_PDF_TOO_LONG` — **422.** More movements than one PDF
+     *   prints (3000), the server's drain budget ran out before the walk ended,
+     *   or too little time was left to render before the 29 s gateway ceiling.
+     *   The shopper fixes it by narrowing `date`/`until`; no operator ERROR row.
+     * - `ACCOUNT_STATEMENT_PDF_INCOMPLETE` — **503.** Rows are missing that no
+     *   cursor can fetch (the JSON page's `incomplete`), the store's ledger
+     *   currency could not be read, or (defensively — no path to it is known) a
+     *   cursor the server's own drain minted was refused on resume. The shopper cannot fix it. The operator sees one
+     *   deduplicated ERROR row per cause per customer per day
+     *   (`ACCOUNT_STATEMENT_PDF_INCOMPLETE#{cause}#{customerId}`) — except the
+     *   legacy bare-row cut, already recorded as
+     *   `ACCOUNT_BARE_ROWS_TRUNCATED#{customerId}` by the statement read itself.
+     *   Expected, not a crash: a client should not report it as an exception.
+     */
+    type AccountStatementPdfError = 'ACCOUNT_STATEMENT_PDF_TOO_LONG' | 'ACCOUNT_STATEMENT_PDF_INCOMPLETE';
+    /**
+     * The query string of the storefront `GET /account` (CUSTOMER token). The
+     * customer is the token's, never a query value.
+     *
+     * An EMPTY value is the same as an absent one.
+     */
+    interface WebAccountQuery {
+        /**
+         * `YYYYMMDD`, Buenos Aires. The opening-balance boundary: "Saldo anterior"
+         * is the balance before midnight of this day, and movements WRITTEN from
+         * then on are listed. Defaults to today. Every front end sends `19700101`
+         * for the whole ledger.
+         */
+        date?: string;
+        /** The previous page's `LastEvaluatedKey`. See {@link AccountStatementPaging}. */
+        startKey?: string;
+        /**
+         * `YYYYMMDD`, Buenos Aires, INCLUSIVE: movements written through
+         * 23:59:59.999 of this day are listed, later ones are not. Absent means
+         * open-ended. It bounds only the listed half — the opening balance is
+         * unchanged — so the closing figure is the balance as of the end of `until`.
+         * Rows are windowed by when they were WRITTEN (`createdAt`), as for `date`.
+         * `400 DATE_MALFORMED` if not a real calendar day; `400 DATE_RANGE_INVERTED`
+         * if before `date` (`until === date` is one day). No span cap. Pinned in the
+         * cursor: repeat it on every page.
+         */
+        until?: string;
+    }
     /**
      * How a customer statement PAGES.
      *
@@ -386,11 +441,20 @@ declare global {
      * - It also pins `date`, so **every page of one walk must be requested with
      *   the same `?date=`**. A different one is `400 INVALID_CURSOR`, not a
      *   re-anchored page: `date` is the boundary both reads are split on.
+     * - And it pins `until` (storefront only), so **every page of one walk
+     *   repeats the same `?until=`** — or none, on every page. A change is
+     *   `400 INVALID_CURSOR`.
      * - ⚠️ **A page may be EMPTY and still carry a cursor.** The listing read has
      *   a page budget and a wall-clock budget, and it can spend either on rows the
-     *   `dated` filter discards before it matches anything. An empty page beside a
+     *   `createdAt` filter discards before it matches anything. An empty page beside a
      *   `LastEvaluatedKey` means "keep paging", never "drained" — the cursor's
      *   ABSENCE is the only end-of-walk signal.
+     * - ⚠️ **`?mode=pdf` does not page.** The storefront `GET /account?mode=pdf`
+     *   drains the whole window server-side from page one (`?startKey=` is
+     *   ignored) and answers `{ data: 'data:application/pdf;base64,…' }` — the
+     *   envelope of the order and invoice PDFs — or one of
+     *   {@link AccountStatementPdfError}. Any other `mode`, absent included, is
+     *   the JSON page described here.
      * - A cursor is bound to its STORE and its CUSTOMER and cannot be spent
      *   against either another. It is **not** bound to the surface: an
      *   operator-minted cursor is spendable on the storefront and vice versa,

package/dist/cjs/notification.js

@@ -1,6 +1,6 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.NotificationTypeEnum = void 0;
+exports.WEB_NOTIFICATIONS_MAX_LIMIT = exports.CUSTOMER_NOTIFICATION_TYPES = exports.NotificationTypeEnum = void 0;
 // Canonical notification taxonomy and keys for legacy/type × channel preferences.
 // Indexed producers resolve candidates through `getNotificationSubscribers`:
 // legacy opt-ins and explicit channel maps remain source data on USER rows.
@@ -200,3 +200,11 @@ var NotificationTypeEnum;
      */
     NotificationTypeEnum["PAYMENT_ATTEMPT_RESOLUTION"] = "PAYMENT_ATTEMPT_RESOLUTION";
 })(NotificationTypeEnum || (exports.NotificationTypeEnum = NotificationTypeEnum = {}));
+/**
+ * The notification types a CUSTOMER bell can carry today; each links through
+ * `orderId`. Adding one means a new {@link CustomerNotification} member with its
+ * own link field — the storefront maps type → route from this list.
+ */
+exports.CUSTOMER_NOTIFICATION_TYPES = [NotificationTypeEnum.ORDER];
+/** Web `GET /notifications` page ceiling and default (`?Limit=`). */
+exports.WEB_NOTIFICATIONS_MAX_LIMIT = 500;

package/dist/cjs/order.js

@@ -372,12 +372,26 @@ exports.orderFulfilmentProgress = orderFulfilmentProgress;
  *   Storefront checkout carries `data: {}` and refuses before the cart read.
  *
  * Storefront checkout business refusals. None allocates an order
- * id, redeems a coupon or writes an order; none is logged as an error:
+ * id, redeems a coupon or writes an order; none is logged as an error —
+ * except `CART_CHANGED_SINCE_CONFIRM` refused at commit, as its entry says:
  * - `DELIVERY_METHOD_NOT_FOUND` · 400 — `deliveryMethod` is not in the store's
  *   delivery catalogue, including an absent/empty catalogue. `data: {}`;
  *   refused before reading the cart.
  * - `ORDER_INVALID_CART` · 400 — the normalized cart has no finite numeric
  *   `totals.grandTotal`. `data: {}`; refused before repricing/allocation.
+ * - `CART_CHANGED_SINCE_CONFIRM` · 409 — the body sent `expectedCartId` /
+ *   `expectedCartVersion` and the stored cart is not the cart the shopper
+ *   confirmed (gone, replaced by another `cartId`, or at another `version`);
+ *   `data` is `CartChangedSinceConfirmData` and carries no cart. Distinct from
+ *   `ORDER_INVALID_CART` (a non-finite total) and from the operator's
+ *   `CART_REVISION_STALE` / `CART_VERSION_*` (whose `data.basket` keeps
+ *   `cost`). Decided at TWO points: right after the server's cart read, with
+ *   nothing written and nothing logged; and at the commit, when the cart moved
+ *   between the read and the write — then no order committed, but the order id
+ *   allocated before the commit is consumed, a coupon redeemed before the
+ *   commit is not released, and an ERROR row is logged.
+ *   Re-read the cart and confirm again under a new `Idempotency-Key`; on
+ *   `currentCartVersion: null` check the shopper's orders first.
  * - `ORDER_BELOW_MINIMUM_PURCHASE` · 400 — after repricing has confirmed the
  *   cart, its grand total is below a finite positive `Number(customer.minBuy)`.
  *   Equality passes. `data: OrderBelowMinimumPurchaseData` carries minBuy,
@@ -638,6 +652,8 @@ exports.ORDER_ERROR_CODES = [
     'DELIVERY_METHOD_NOT_FOUND',
     'ORDER_BELOW_MINIMUM_PURCHASE',
     'ORDER_INVALID_CART',
+    // The storefront's confirmed-cart pin (`StorefrontOrderCreateRequest.expectedCartId` / `expectedCartVersion`).
+    'CART_CHANGED_SINCE_CONFIRM',
     'EMAIL_VERIFICATION_REQUIRED',
     'ACCOUNT_DISABLED',
     'CUSTOMER_ACCESS_PENDING',

package/dist/invoice.d.ts

@@ -54,6 +54,32 @@ declare global {
         /** The AUTHORITATIVE amount, as declared — never re-derived from `baseImp × alic`. */
         importe: number;
     }
+    /**
+     * The query string of the storefront `GET /invoices` (CUSTOMER token): the
+     * shopper's own authorized invoices, newest first. The customer is the
+     * token's, never a query value.
+     */
+    interface WebInvoicesQuery {
+        /**
+         * `YYYYMMDD` lower bound on the voucher's `dated`, inclusive. Defaults to
+         * one Buenos Aires calendar month before today, the day clamped to that
+         * month's last day (31 Mar → 28/29 Feb). Shape-checked only.
+         */
+        since?: string;
+        /** Rows READ per page, 1–1000 (default 1000). A page may come back short or empty beside a cursor. */
+        Limit?: string;
+        /** The previous page's `LastEvaluatedKey` (a raw sort key, not pinned to `since`/`until`). */
+        offSet?: string;
+        /**
+         * `YYYYMMDD` upper bound on `dated`, INCLUSIVE. Absent or empty means
+         * open-ended. `400 DATE_MALFORMED` if not a real calendar day;
+         * `400 DATE_RANGE_INVERTED` if before `since`. A tight window makes short
+         * and empty pages beside a cursor more frequent — the cursor stays the only
+         * keep-paging signal. Changing it mid-walk re-filters the remaining rows;
+         * restart the walk instead.
+         */
+        until?: string;
+    }
     interface Invoice extends CurrencyRateProvenance {
         storeId: string;
         invoiceId: string;

package/dist/notification.d.ts

@@ -179,6 +179,14 @@ export declare enum NotificationTypeEnum {
      */
     PAYMENT_ATTEMPT_RESOLUTION = "PAYMENT_ATTEMPT_RESOLUTION"
 }
+/**
+ * The notification types a CUSTOMER bell can carry today; each links through
+ * `orderId`. Adding one means a new {@link CustomerNotification} member with its
+ * own link field — the storefront maps type → route from this list.
+ */
+export declare const CUSTOMER_NOTIFICATION_TYPES: readonly [NotificationTypeEnum.ORDER];
+/** Web `GET /notifications` page ceiling and default (`?Limit=`). */
+export declare const WEB_NOTIFICATIONS_MAX_LIMIT = 500;
 declare global {
     type CustomerNotificationPreferences = Partial<Record<'reminder-scheduled' | 'appointment-reminder', {
         email: boolean;
@@ -241,6 +249,7 @@ declare global {
         createdAt: number;
         type: NotificationTypeEnum;
         title: string;
+        /** `ORDER` links through `orderId` on both audiences (operator and customer). */
         orderId?: string;
         productId?: string;
         lotId?: string;
@@ -305,7 +314,8 @@ declare global {
     };
     /**
      * `GET /notifications` body on the operator host — the caller's own
-     * notifications, newest first, projected through an allow-list.
+     * notifications, newest first, projected through an allow-list. Operator
+     * host only; the web leg is {@link WebGetNotificationsResponse}.
      *
      * ⚠️ There is no `hasMore` on this leg: the ABSENCE of `LastEvaluatedKey` is
      * the end of the list. A client that waits for a `hasMore: false` never stops
@@ -337,6 +347,52 @@ declare global {
             hasMore: boolean;
         };
     }
+    type CustomerNotificationType = (typeof CUSTOMER_NOTIFICATION_TYPES)[number];
+    /**
+     * The customer projection: what web `GET`/`POST /notifications` and the
+     * customer socket carry — the stored row minus the operator-only pointers.
+     * A union keyed on `type`; `ORDER` is its only member today.
+     */
+    type CustomerNotification = Omit<NotificationInterface, 'cartRef' | 'pendingCustomerRef' | 'TableName' | 'type' | 'orderId'> & {
+        type: NotificationTypeEnum.ORDER;
+        /** Set on every customer row: the order the bell is about. */
+        orderId: string;
+    };
+    /**
+     * Web `GET /notifications`: the caller's own rows, newest first by
+     * `createdAt`. An `offSet` outside the caller's own key range is
+     * `400 INVALID_CURSOR`; one inside it resumes from that position, whether
+     * or not a row with that id still exists.
+     */
+    interface WebGetNotificationsResponse {
+        message: string;
+        data: CustomerNotification[];
+        /** The last row's `notificationId`; send it back as `?offSet=`. Absent = end of list. */
+        LastEvaluatedKey?: string;
+    }
+    /** Web `POST /notifications` (single, or `all: true`). */
+    interface WebPostNotificationsResponse {
+        message: string;
+        data: CustomerNotification[];
+        /** `all: true` only. */
+        updatedCount?: number;
+        /** `all: true` only — `true` means call again. */
+        hasMore?: boolean;
+    }
+    /**
+     * Customer socket frames, action `notifications`: one row as it is now
+     * stored (its `read` is the stored value, so a mark-unread reads `false`), or
+     * the mark-all summary.
+     */
+    type CustomerNotificationFrame = CustomerNotification | {
+        storeId: string;
+        customerId: string;
+        bulkRead: true;
+        updatedCount: number;
+        hasMore: boolean;
+        /** Every row this call marked read (their `notificationId`); patch these, no refetch needed. */
+        notificationIds: string[];
+    };
     /**
      * What the outbound seam (`notify()`) knew about one call the moment its
      * transport returned. It is never a delivery receipt: `enqueued` and

package/dist/notification.js

@@ -197,3 +197,11 @@ export var NotificationTypeEnum;
      */
     NotificationTypeEnum["PAYMENT_ATTEMPT_RESOLUTION"] = "PAYMENT_ATTEMPT_RESOLUTION";
 })(NotificationTypeEnum || (NotificationTypeEnum = {}));
+/**
+ * The notification types a CUSTOMER bell can carry today; each links through
+ * `orderId`. Adding one means a new {@link CustomerNotification} member with its
+ * own link field — the storefront maps type → route from this list.
+ */
+export const CUSTOMER_NOTIFICATION_TYPES = [NotificationTypeEnum.ORDER];
+/** Web `GET /notifications` page ceiling and default (`?Limit=`). */
+export const WEB_NOTIFICATIONS_MAX_LIMIT = 500;

package/dist/order.d.ts

@@ -435,6 +435,24 @@ declare global {
         province?: string;
         phone?: string;
     }
+    /**
+     * The query string of the storefront `GET /orders` (CUSTOMER token). The
+     * customer is the token's, never a query value.
+     */
+    interface WebOrdersQuery {
+        /** `YYYYMMDD` lower bound on `deliveredDate`, inclusive. Defaults to today (Buenos Aires). */
+        date?: string;
+        /** A point read of one of the caller's own orders; `date`/`until` are ignored. */
+        orderId?: string;
+        /**
+         * `YYYYMMDD` upper bound on `deliveredDate`, INCLUSIVE. Absent or empty
+         * means open-ended. `400 DATE_MALFORMED` if not a real calendar day;
+         * `400 DATE_RANGE_INVERTED` if before `date` (so send both — `date`
+         * defaults to today). ⚠️ It never hides PENDING orders: they carry no
+         * delivery day to window and are always returned, whatever the window.
+         */
+        until?: string;
+    }
     interface Order extends CurrencyRateProvenance, CurrencyRateFreshness {
         storeId: string;
         orderId: string;
@@ -2137,6 +2155,24 @@ declare global {
          */
         basket: Cart | null;
     }
+    /**
+     * `data` of the storefront's `409 CART_CHANGED_SINCE_CONFIRM` — a web
+     * `POST /orders` that sent {@link StorefrontOrderCreateRequest.expectedCartId}
+     * or {@link StorefrontOrderCreateRequest.expectedCartVersion} against a cart
+     * that is no longer the one the shopper confirmed. It carries no cart: re-read
+     * it (`GET /basket`) and confirm again under a NEW `Idempotency-Key`.
+     */
+    interface CartChangedSinceConfirmData {
+        /**
+         * The confirmed cart's stored `version` as the server now reads it — a
+         * row with no stored `version` reads as `0`. `null` when the confirmed cart
+         * is no longer the stored cart: it is gone, or a different cart replaced
+         * it. ⚠️ On `null` the order may already exist (the confirmed cart is
+         * deleted by its own checkout), so check the shopper's orders before
+         * letting them retry.
+         */
+        currentCartVersion: number | null;
+    }
     /**
      * `data` of `409 CART_CUSTOMER_MISMATCH` — a create that sent
      * {@link CreateOrderRequest.expectedCartVersion} for a cart that carries a
@@ -2358,6 +2394,25 @@ declare global {
         };
         /** Persist `deliveryAddress` as the customer's default. Directive only, never stored. */
         saveAsDefault?: boolean;
+        /**
+         * The `cartId` of the cart the shopper confirmed (`CART` + 6-10 digits).
+         * Omit it ONLY when that cart had none (a legacy cart). ⚠️ Compared
+         * together with {@link expectedCartVersion} as ONE cart identity: a body
+         * sending the version without this field means "the cart I confirmed had
+         * no `cartId`", so a stored cart that has one is refused. A checkout
+         * deletes its cart and the next add mints a NEW `cartId` at `version: 1`,
+         * so a version alone does not identify a cart — always send this when the
+         * rendered cart has one. A mismatch is `409 CART_CHANGED_SINCE_CONFIRM`.
+         */
+        expectedCartId?: string;
+        /**
+         * The `version` of the cart the shopper confirmed, an integer ≥ 1. Omit it
+         * when that cart had none. Refused `409 CART_CHANGED_SINCE_CONFIRM` when
+         * the stored cart's version (absent reads as `0`) differs, and re-asserted
+         * at the commit, so a write between the server's read and the order
+         * transaction refuses too.
+         */
+        expectedCartVersion?: number;
     }
     interface ZebraTag {
         orderId: string;
@@ -2730,12 +2785,26 @@ export declare const orderFulfilmentProgress: (order: OrderFulfilmentProgressInp
  *   Storefront checkout carries `data: {}` and refuses before the cart read.
  *
  * Storefront checkout business refusals. None allocates an order
- * id, redeems a coupon or writes an order; none is logged as an error:
+ * id, redeems a coupon or writes an order; none is logged as an error —
+ * except `CART_CHANGED_SINCE_CONFIRM` refused at commit, as its entry says:
  * - `DELIVERY_METHOD_NOT_FOUND` · 400 — `deliveryMethod` is not in the store's
  *   delivery catalogue, including an absent/empty catalogue. `data: {}`;
  *   refused before reading the cart.
  * - `ORDER_INVALID_CART` · 400 — the normalized cart has no finite numeric
  *   `totals.grandTotal`. `data: {}`; refused before repricing/allocation.
+ * - `CART_CHANGED_SINCE_CONFIRM` · 409 — the body sent `expectedCartId` /
+ *   `expectedCartVersion` and the stored cart is not the cart the shopper
+ *   confirmed (gone, replaced by another `cartId`, or at another `version`);
+ *   `data` is `CartChangedSinceConfirmData` and carries no cart. Distinct from
+ *   `ORDER_INVALID_CART` (a non-finite total) and from the operator's
+ *   `CART_REVISION_STALE` / `CART_VERSION_*` (whose `data.basket` keeps
+ *   `cost`). Decided at TWO points: right after the server's cart read, with
+ *   nothing written and nothing logged; and at the commit, when the cart moved
+ *   between the read and the write — then no order committed, but the order id
+ *   allocated before the commit is consumed, a coupon redeemed before the
+ *   commit is not released, and an ERROR row is logged.
+ *   Re-read the cart and confirm again under a new `Idempotency-Key`; on
+ *   `currentCartVersion: null` check the shopper's orders first.
  * - `ORDER_BELOW_MINIMUM_PURCHASE` · 400 — after repricing has confirmed the
  *   cart, its grand total is below a finite positive `Number(customer.minBuy)`.
  *   Equality passes. `data: OrderBelowMinimumPurchaseData` carries minBuy,
@@ -2873,6 +2942,6 @@ export declare const orderFulfilmentProgress: (order: OrderFulfilmentProgressInp
  * `SUBSCRIPTION_READONLY`) sit on the order CREATE leg only: an edit is not a new
  * order, so `bareOrderPostHandler` routes past `requireMetered` entirely.
  */
-export declare const ORDER_ERROR_CODES: readonly ["ORDER_COST_DENOMINATION_UNKNOWN", "SERVICE_ORDER_DELIVERY_MANAGED", "ORDER_NOT_FOUND", "ORDER_LOCKED", "ORDER_NOT_READY", "ORDER_DELIVERED_ANOTHER_DAY", "ORDER_DELIVERY_STATE_UNCHANGED", "ORDER_ILLEGAL_TRANSITION", "ORDER_VERSION_CONFLICT", "CUSTOMER_NOT_FOUND", "CUSTOMER_MERGED", "ORDER_HAS_NO_CUSTOMER", "CUSTOMER_ANONYMIZED", "FX_CONVERSION_UNAVAILABLE", "ROLE_FORBIDDEN", "ORDER_CANCELLED", "PAYMENT_SETTLED_ON_ANOTHER_ORDER", "ORDER_HAS_SHIPMENTS", "ORDER_HAS_RETURNS", "SHIPMENT_QUANTITY_EXCEEDED", "SHIPMENT_LINE_MISMATCH", "SHIPMENT_NOT_FOUND", "SHIPMENT_LIMIT_REACHED", "SHIPMENT_TOO_LARGE", "ORDER_FULFILMENT_EXTERNAL", "SHIPMENT_FAILED", "ADMIN_REQUIRED", "IDEMPOTENCY_KEY_REQUIRED", "INVALID_IDEMPOTENCY_KEY", "IDEMPOTENCY_KEY_REUSE", "IDEMPOTENCY_IN_PROGRESS", "IDEMPOTENCY_LOCK_CONTENTION", "IDEMPOTENCY_KEY_FAILED", "IDEMPOTENT_RESPONSE_NOT_CACHED", "ORDER_CANCELLATION_NOT_PROTECTED", "ORDER_CANCELLATION_COMMITTED", "ORDER_CANCELLATION_LOCKED", "ORDER_CANCELLATION_TOO_LARGE", "ORDER_CANCELLATION_FAILED", "SALE_LEDGER_RETRACTION_REFUSED", "SALE_LEDGER_ROW_NOT_OWNED", "PRODUCT_NOT_FOUND", "PRODUCT_SALE_LIMIT_EXCEEDED", "PRODUCT_SALE_LIMIT_INVALID", "DEPOSIT_SOURCE_NOT_ALLOWED", "DEPOSIT_CURRENCY_MISMATCH", "DEPOSIT_EXCEEDS_TOTAL", "DEPOSIT_FREEZE_REQUIRES_INVOICE", "DEPOSIT_FREEZE_INVOICE_PENDING", "DEPOSIT_CHARACTERIZATION_CONFLICT", "DEPOSIT_FREEZE_INVOICE_NOT_QUALIFYING", "DEPOSIT_INVOICED_ORDER_MUST_FREEZE", "DEPOSIT_FROZEN_ORDER_MUST_FREEZE", "DEPOSIT_REFERENCE_IS_LINKED_PAYMENT", "DEPOSIT_DUPLICATE_REFERENCE", "TILL_TENDER_REQUIRES_DEPOSIT", "PAYMENT_REFERENCED_BY_DEPOSIT", "ORDER_HAS_UNREFUNDED_DEPOSIT", "ORDER_PRICE_FROZEN", "DEPOSIT_NOT_FOUND", "DEPOSIT_ALREADY_REFUNDED", "UNIT_QUANTITY_NOT_WHOLE", "UNIT_REVISION_STALE", "UNIT_QUANTITY_UNREPRESENTABLE", "KIT_RECIPE_CHANGED", "CART_PROMOTION_UNAVAILABLE", "ORDER_HAS_KIT_LINES", "ORDER_TARGET_REQUIRED", "ORDER_SOURCE_CONFLICT", "ORDER_CUSTOMER_REQUIRED", "BASKET_EMPTY", "BASKET_CHANGED_DURING_CHECKOUT", "CART_VERSION_CREATE_ONLY", "CART_VERSION_REQUIRES_CART_ID", "CART_REVISION_STALE", "CART_CUSTOMER_MISMATCH", "COUNTER_SALE_CREATE_ONLY", "SOLD_AT_CREATE_ONLY", "SOLD_AT_IN_FUTURE", "ORDER_TENDER_CREATE_ONLY", "CREDIT_OVERRIDE_CREATE_ONLY", "ON_ACCOUNT_CREATE_ONLY", "ON_ACCOUNT_WITH_TENDERS", "TENDERS_REQUIRE_COUNTER_SALE", "LINES_REQUIRE_COUNTER_SALE", "PRODUCT_COST_UNKNOWN", "PRICE_CHANGE_DISABLED", "LINE_DISCOUNT_EXCEEDS_MAX", "CUSTOMER_DISABLED", "SHIFT_NOT_AVAILABLE", "SOLD_AT_OUTSIDE_SHIFT", "ORDER_CURRENCY_NOT_SUBSCRIBED", "PAYMENT_METHODS_NOT_CONFIGURED", "PAYMENT_METHOD_NOT_FOUND", "PAYMENT_METHOD_UNAVAILABLE", "CART_PRICES_CHANGED", "ORDER_ID_COLLISION", "DELIVERY_METHOD_NOT_FOUND", "ORDER_BELOW_MINIMUM_PURCHASE", "ORDER_INVALID_CART", "EMAIL_VERIFICATION_REQUIRED", "ACCOUNT_DISABLED", "CUSTOMER_ACCESS_PENDING", "CUSTOMER_ACCESS_REJECTED", "CURRENCY_MISMATCH", "SHIFT_NOT_OPEN", "ORDER_DISCOUNT_AFTER_INVOICE", "ORDER_DISCOUNT_ON_SERVICE_ORDER", "ORDER_DISCOUNT_ON_MARKETPLACE_ORDER", "ORDER_INVOICE_METHOD_OUTSTANDING_FACTURA", "ORDER_SERVICE_PERIOD_AFTER_INVOICE", "ORDER_ATTEMPT_COMMITTED", "ORDER_ATTEMPT_ABANDONED", "ORDER_ATTEMPT_KEY_EXPIRED", "ORDER_ATTEMPT_KEY_SCOPE_MISMATCH", "ORDER_COMPLETION_ATTEMPT_COMMITTED", "ORDER_COMPLETION_ATTEMPT_ABANDONED"];
+export declare const ORDER_ERROR_CODES: readonly ["ORDER_COST_DENOMINATION_UNKNOWN", "SERVICE_ORDER_DELIVERY_MANAGED", "ORDER_NOT_FOUND", "ORDER_LOCKED", "ORDER_NOT_READY", "ORDER_DELIVERED_ANOTHER_DAY", "ORDER_DELIVERY_STATE_UNCHANGED", "ORDER_ILLEGAL_TRANSITION", "ORDER_VERSION_CONFLICT", "CUSTOMER_NOT_FOUND", "CUSTOMER_MERGED", "ORDER_HAS_NO_CUSTOMER", "CUSTOMER_ANONYMIZED", "FX_CONVERSION_UNAVAILABLE", "ROLE_FORBIDDEN", "ORDER_CANCELLED", "PAYMENT_SETTLED_ON_ANOTHER_ORDER", "ORDER_HAS_SHIPMENTS", "ORDER_HAS_RETURNS", "SHIPMENT_QUANTITY_EXCEEDED", "SHIPMENT_LINE_MISMATCH", "SHIPMENT_NOT_FOUND", "SHIPMENT_LIMIT_REACHED", "SHIPMENT_TOO_LARGE", "ORDER_FULFILMENT_EXTERNAL", "SHIPMENT_FAILED", "ADMIN_REQUIRED", "IDEMPOTENCY_KEY_REQUIRED", "INVALID_IDEMPOTENCY_KEY", "IDEMPOTENCY_KEY_REUSE", "IDEMPOTENCY_IN_PROGRESS", "IDEMPOTENCY_LOCK_CONTENTION", "IDEMPOTENCY_KEY_FAILED", "IDEMPOTENT_RESPONSE_NOT_CACHED", "ORDER_CANCELLATION_NOT_PROTECTED", "ORDER_CANCELLATION_COMMITTED", "ORDER_CANCELLATION_LOCKED", "ORDER_CANCELLATION_TOO_LARGE", "ORDER_CANCELLATION_FAILED", "SALE_LEDGER_RETRACTION_REFUSED", "SALE_LEDGER_ROW_NOT_OWNED", "PRODUCT_NOT_FOUND", "PRODUCT_SALE_LIMIT_EXCEEDED", "PRODUCT_SALE_LIMIT_INVALID", "DEPOSIT_SOURCE_NOT_ALLOWED", "DEPOSIT_CURRENCY_MISMATCH", "DEPOSIT_EXCEEDS_TOTAL", "DEPOSIT_FREEZE_REQUIRES_INVOICE", "DEPOSIT_FREEZE_INVOICE_PENDING", "DEPOSIT_CHARACTERIZATION_CONFLICT", "DEPOSIT_FREEZE_INVOICE_NOT_QUALIFYING", "DEPOSIT_INVOICED_ORDER_MUST_FREEZE", "DEPOSIT_FROZEN_ORDER_MUST_FREEZE", "DEPOSIT_REFERENCE_IS_LINKED_PAYMENT", "DEPOSIT_DUPLICATE_REFERENCE", "TILL_TENDER_REQUIRES_DEPOSIT", "PAYMENT_REFERENCED_BY_DEPOSIT", "ORDER_HAS_UNREFUNDED_DEPOSIT", "ORDER_PRICE_FROZEN", "DEPOSIT_NOT_FOUND", "DEPOSIT_ALREADY_REFUNDED", "UNIT_QUANTITY_NOT_WHOLE", "UNIT_REVISION_STALE", "UNIT_QUANTITY_UNREPRESENTABLE", "KIT_RECIPE_CHANGED", "CART_PROMOTION_UNAVAILABLE", "ORDER_HAS_KIT_LINES", "ORDER_TARGET_REQUIRED", "ORDER_SOURCE_CONFLICT", "ORDER_CUSTOMER_REQUIRED", "BASKET_EMPTY", "BASKET_CHANGED_DURING_CHECKOUT", "CART_VERSION_CREATE_ONLY", "CART_VERSION_REQUIRES_CART_ID", "CART_REVISION_STALE", "CART_CUSTOMER_MISMATCH", "COUNTER_SALE_CREATE_ONLY", "SOLD_AT_CREATE_ONLY", "SOLD_AT_IN_FUTURE", "ORDER_TENDER_CREATE_ONLY", "CREDIT_OVERRIDE_CREATE_ONLY", "ON_ACCOUNT_CREATE_ONLY", "ON_ACCOUNT_WITH_TENDERS", "TENDERS_REQUIRE_COUNTER_SALE", "LINES_REQUIRE_COUNTER_SALE", "PRODUCT_COST_UNKNOWN", "PRICE_CHANGE_DISABLED", "LINE_DISCOUNT_EXCEEDS_MAX", "CUSTOMER_DISABLED", "SHIFT_NOT_AVAILABLE", "SOLD_AT_OUTSIDE_SHIFT", "ORDER_CURRENCY_NOT_SUBSCRIBED", "PAYMENT_METHODS_NOT_CONFIGURED", "PAYMENT_METHOD_NOT_FOUND", "PAYMENT_METHOD_UNAVAILABLE", "CART_PRICES_CHANGED", "ORDER_ID_COLLISION", "DELIVERY_METHOD_NOT_FOUND", "ORDER_BELOW_MINIMUM_PURCHASE", "ORDER_INVALID_CART", "CART_CHANGED_SINCE_CONFIRM", "EMAIL_VERIFICATION_REQUIRED", "ACCOUNT_DISABLED", "CUSTOMER_ACCESS_PENDING", "CUSTOMER_ACCESS_REJECTED", "CURRENCY_MISMATCH", "SHIFT_NOT_OPEN", "ORDER_DISCOUNT_AFTER_INVOICE", "ORDER_DISCOUNT_ON_SERVICE_ORDER", "ORDER_DISCOUNT_ON_MARKETPLACE_ORDER", "ORDER_INVOICE_METHOD_OUTSTANDING_FACTURA", "ORDER_SERVICE_PERIOD_AFTER_INVOICE", "ORDER_ATTEMPT_COMMITTED", "ORDER_ATTEMPT_ABANDONED", "ORDER_ATTEMPT_KEY_EXPIRED", "ORDER_ATTEMPT_KEY_SCOPE_MISMATCH", "ORDER_COMPLETION_ATTEMPT_COMMITTED", "ORDER_COMPLETION_ATTEMPT_ABANDONED"];
 export type OrderErrorCode = (typeof ORDER_ERROR_CODES)[number];
 export {};

package/dist/order.js

@@ -365,12 +365,26 @@ export const orderFulfilmentProgress = (order) => {
  *   Storefront checkout carries `data: {}` and refuses before the cart read.
  *
  * Storefront checkout business refusals. None allocates an order
- * id, redeems a coupon or writes an order; none is logged as an error:
+ * id, redeems a coupon or writes an order; none is logged as an error —
+ * except `CART_CHANGED_SINCE_CONFIRM` refused at commit, as its entry says:
  * - `DELIVERY_METHOD_NOT_FOUND` · 400 — `deliveryMethod` is not in the store's
  *   delivery catalogue, including an absent/empty catalogue. `data: {}`;
  *   refused before reading the cart.
  * - `ORDER_INVALID_CART` · 400 — the normalized cart has no finite numeric
  *   `totals.grandTotal`. `data: {}`; refused before repricing/allocation.
+ * - `CART_CHANGED_SINCE_CONFIRM` · 409 — the body sent `expectedCartId` /
+ *   `expectedCartVersion` and the stored cart is not the cart the shopper
+ *   confirmed (gone, replaced by another `cartId`, or at another `version`);
+ *   `data` is `CartChangedSinceConfirmData` and carries no cart. Distinct from
+ *   `ORDER_INVALID_CART` (a non-finite total) and from the operator's
+ *   `CART_REVISION_STALE` / `CART_VERSION_*` (whose `data.basket` keeps
+ *   `cost`). Decided at TWO points: right after the server's cart read, with
+ *   nothing written and nothing logged; and at the commit, when the cart moved
+ *   between the read and the write — then no order committed, but the order id
+ *   allocated before the commit is consumed, a coupon redeemed before the
+ *   commit is not released, and an ERROR row is logged.
+ *   Re-read the cart and confirm again under a new `Idempotency-Key`; on
+ *   `currentCartVersion: null` check the shopper's orders first.
  * - `ORDER_BELOW_MINIMUM_PURCHASE` · 400 — after repricing has confirmed the
  *   cart, its grand total is below a finite positive `Number(customer.minBuy)`.
  *   Equality passes. `data: OrderBelowMinimumPurchaseData` carries minBuy,
@@ -631,6 +645,8 @@ export const ORDER_ERROR_CODES = [
     'DELIVERY_METHOD_NOT_FOUND',
     'ORDER_BELOW_MINIMUM_PURCHASE',
     'ORDER_INVALID_CART',
+    // The storefront's confirmed-cart pin (`StorefrontOrderCreateRequest.expectedCartId` / `expectedCartVersion`).
+    'CART_CHANGED_SINCE_CONFIRM',
     'EMAIL_VERIFICATION_REQUIRED',
     'ACCOUNT_DISABLED',
     'CUSTOMER_ACCESS_PENDING',

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "platform-types",
-	"version": "1.10.765",
+	"version": "1.10.767",
 	"description": "Shared wire and entity contracts for the platform.",
 	"type": "module",
 	"main": "dist/index.js",