platform-types 1.10.860 → 1.10.862

package/dist/balancePayment.d.ts

@@ -183,6 +183,9 @@ export declare const BALANCE_ATTEMPT_MAX_DEBITS = 50;
  *   `order` — an orderless debit, or not the oldest open debit of its order.
  * - `BALANCE_NOTHING_OWED` · 409 — the selection owes nothing.
  * - `BALANCE_ATTEMPT_NOT_FOUND` · 404 — no such attempt of the caller's.
+ * - `BALANCE_ATTEMPT_CONFLICT` · 409 — a start of another selection by the same
+ *   customer, at the same moment, took this attempt number; nothing was started
+ *   for this request — retry.
  */
-export declare const BALANCE_PAYMENT_ERROR_CODES: readonly ["BALANCE_PAYMENT_DISABLED", "BALANCE_CURRENCY_UNSUPPORTED", "BALANCE_SELECTION_STALE", "BALANCE_SELECTION_NOT_PREFIX", "BALANCE_NOTHING_OWED", "BALANCE_ATTEMPT_NOT_FOUND"];
+export declare const BALANCE_PAYMENT_ERROR_CODES: readonly ["BALANCE_PAYMENT_DISABLED", "BALANCE_CURRENCY_UNSUPPORTED", "BALANCE_SELECTION_STALE", "BALANCE_SELECTION_NOT_PREFIX", "BALANCE_NOTHING_OWED", "BALANCE_ATTEMPT_NOT_FOUND", "BALANCE_ATTEMPT_CONFLICT"];
 export {};

package/dist/balancePayment.js

@@ -61,6 +61,9 @@ export const BALANCE_ATTEMPT_MAX_DEBITS = 50;
  *   `order` — an orderless debit, or not the oldest open debit of its order.
  * - `BALANCE_NOTHING_OWED` · 409 — the selection owes nothing.
  * - `BALANCE_ATTEMPT_NOT_FOUND` · 404 — no such attempt of the caller's.
+ * - `BALANCE_ATTEMPT_CONFLICT` · 409 — a start of another selection by the same
+ *   customer, at the same moment, took this attempt number; nothing was started
+ *   for this request — retry.
  */
 export const BALANCE_PAYMENT_ERROR_CODES = [
     'BALANCE_PAYMENT_DISABLED',
@@ -69,4 +72,5 @@ export const BALANCE_PAYMENT_ERROR_CODES = [
     'BALANCE_SELECTION_NOT_PREFIX',
     'BALANCE_NOTHING_OWED',
     'BALANCE_ATTEMPT_NOT_FOUND',
+    'BALANCE_ATTEMPT_CONFLICT',
 ];

package/dist/cjs/balancePayment.js

@@ -64,6 +64,9 @@ exports.BALANCE_ATTEMPT_MAX_DEBITS = 50;
  *   `order` — an orderless debit, or not the oldest open debit of its order.
  * - `BALANCE_NOTHING_OWED` · 409 — the selection owes nothing.
  * - `BALANCE_ATTEMPT_NOT_FOUND` · 404 — no such attempt of the caller's.
+ * - `BALANCE_ATTEMPT_CONFLICT` · 409 — a start of another selection by the same
+ *   customer, at the same moment, took this attempt number; nothing was started
+ *   for this request — retry.
  */
 exports.BALANCE_PAYMENT_ERROR_CODES = [
     'BALANCE_PAYMENT_DISABLED',
@@ -72,4 +75,5 @@ exports.BALANCE_PAYMENT_ERROR_CODES = [
     'BALANCE_SELECTION_NOT_PREFIX',
     'BALANCE_NOTHING_OWED',
     'BALANCE_ATTEMPT_NOT_FOUND',
+    'BALANCE_ATTEMPT_CONFLICT',
 ];

package/dist/cjs/terminal.js

@@ -92,8 +92,10 @@ exports.TERMINAL_ENROLMENT_ERROR_CODES = [
  *   did not match.
  * - `PASSWORD_NOT_SET` · 409 — `POST /terminal/activation` and `POST
  *   /terminal/pin`: the employee (a founder registered with Google or Apple) has
- *   no password. The body carries `providers`, the recorded sign-in providers, as
- *   `POST /auth/verify-password` does. Nothing is counted against the account.
+ *   no password. On `/terminal/pin` the body carries `providers`, the recorded
+ *   sign-in providers, as `POST /auth/verify-password` does; `/terminal/activation`
+ *   answers it after the lock and captcha gates, with no `providers`. Nothing is
+ *   counted against the account.
  * - `IDEMPOTENCY_KEY_REUSE` · 422 / `IDEMPOTENCY_IN_PROGRESS` · 409 /
  *   `INVALID_IDEMPOTENCY_KEY` · 400 — the `Idempotency-Key` header's own
  *   refusals on `POST /terminal/operators`. A MISSING header is

package/dist/maintenance.d.ts

@@ -64,6 +64,17 @@ declare global {
         /** Optional operator reason (10-500 chars, refused when it carries personal data). Internal: AUDIT row only. */
         reason?: string;
     }
+    /**
+     * The `422 BROADCAST_CHANNEL_NOT_CONFIGURED` body of a maintenance broadcast:
+     * `channels` names every requested channel with no platform sender (never
+     * `'email'`), in request order. Refused whole, before the roster read, any
+     * claim or any send.
+     */
+    interface MaintenanceBroadcastChannelRefusal {
+        message: string;
+        error: 'BROADCAST_CHANNEL_NOT_CONFIGURED';
+        channels: MaintenanceBroadcastChannel[];
+    }
     /**
      * What one channel actually did.
      *

package/dist/messaging.d.ts

@@ -277,9 +277,12 @@ declare global {
             cause: 'refunded' | 'charged_back';
             at: number;
         };
-        /** The platform's comprobante for the purchase. Always `null` for now. */
+        /**
+         * The platform's comprobante for the purchase — non-null only for a
+         * purchase approved on or after the platform's self-billing go-live.
+         */
         factura: PlatformFiscalDoc;
-        /** The platform's credit note for its reversal. Always `null` for now. */
+        /** The platform's credit note for its reversal — non-null only when `reversal` is set and `factura` is non-null. */
         creditNote: PlatformFiscalDoc;
     }
     /** One page of the store's pack purchases, newest first. `cursor` present only when more may follow. */

package/dist/subscription.d.ts

@@ -727,8 +727,12 @@ declare global {
     /**
      * The platform's own fiscal document for a charge it made a tenant (a
      * subscription payment, a message pack) or for its reversal — never an
-     * `Invoice` the tenant issues. Always `null` for now: no platform
-     * self-billing writes it yet. `issuedAt` is Unix ms.
+     * `Invoice` the tenant issues. `null` when there is none; `pending` while it
+     * is owed and not yet authorised — an ARCA rejection or a retry stays
+     * `pending`, never a third state; `issued` once ARCA authorised it. `number`
+     * is `PPPP-NNNNNNNN` (point of sale and comprobante number, zero-padded);
+     * `issuedAt` is Unix ms. Nothing writes one yet, so every reader still
+     * answers `null`.
      */
     type PlatformFiscalDoc = null | {
         status: 'pending';
@@ -739,6 +743,21 @@ declare global {
         cae: string;
         issuedAt: number;
     };
+    /** Which platform document `GET /subscription/invoices/{paymentId}/pdf` renders. */
+    type PlatformFiscalDocKind = 'factura' | 'creditNote';
+    /**
+     * `data` of `GET /subscription/invoices/{paymentId}/pdf?doc=factura|creditNote`
+     * (adminToken), for a subscription OR a message-pack payment of the token's
+     * store: a short-lived presigned `url` to the rendered PDF, valid until
+     * `expiresAt` (Unix ms, about 5 minutes). Fetch it on click, never cache it.
+     * `404 PLATFORM_FISCAL_DOC_NOT_FOUND` when the payment or its document does
+     * not exist; `409 PLATFORM_FISCAL_DOC_PENDING` while it is still pending.
+     * The route itself ships with platform self-billing's PDF slice.
+     */
+    interface PlatformFiscalDocPdf {
+        url: string;
+        expiresAt: number;
+    }
     /**
      * One charge SINFACTURA made against a tenant, normalized out of whichever
      * billing provider holds the money. Backs the per-tenant payment history and
@@ -751,6 +770,12 @@ declare global {
      * unpaid and identity-proven distinct paid provider entries without counting matched payments
      * twice. Unknown or partially overlapping paid aggregates are omitted and the response is truncated; retained rows carry the paid plan and period metadata below. The
      * cross-tenant billing rollup continues to read live provider history only.
+     *
+     * Every row also carries `factura` and `creditNote` — the platform's OWN
+     * comprobante for the charge and its reversal, required and `null` when
+     * absent: non-null only on a retained `mercadopago` row that is `'paid'` or a
+     * reversed `'void'`, approved on or after the self-billing go-live (rules on
+     * each field). Top-level `pdfUrl` / `issuedAt` are unchanged by them.
      */
     interface InvoiceSummary {
         id: string;
@@ -777,6 +802,21 @@ declare global {
         /** Unix ms; reversal facts preserve the original amount and map status to void. */
         refundedAt?: number;
         chargedBackAt?: number;
+        /**
+         * The platform's comprobante for this charge. Non-null only on a
+         * retained `mercadopago` row whose status is `'paid'`, or `'void'`
+         * because it was reversed (`refundedAt` / `chargedBackAt` set), approved
+         * on or after the platform's self-billing go-live. Stripe rows, live
+         * provider rows (`'open'`, `'failed'`, and paid entries with no retained
+         * row) and payments before the go-live are always `null`. Never omitted.
+         */
+        factura: PlatformFiscalDoc;
+        /**
+         * The platform's credit note reversing that comprobante. Non-null only
+         * on a reversed (`'void'`) row whose `factura` is non-null; `null` on a
+         * `'paid'` row and wherever `factura` is `null`. Never omitted.
+         */
+        creditNote: PlatformFiscalDoc;
     }
     /**
      * One tier's `SK: PLAN` template row, as assessed by

package/dist/terminal.d.ts

@@ -589,8 +589,10 @@ export type TerminalEnrolmentErrorCode = (typeof TERMINAL_ENROLMENT_ERROR_CODES)
  *   did not match.
  * - `PASSWORD_NOT_SET` · 409 — `POST /terminal/activation` and `POST
  *   /terminal/pin`: the employee (a founder registered with Google or Apple) has
- *   no password. The body carries `providers`, the recorded sign-in providers, as
- *   `POST /auth/verify-password` does. Nothing is counted against the account.
+ *   no password. On `/terminal/pin` the body carries `providers`, the recorded
+ *   sign-in providers, as `POST /auth/verify-password` does; `/terminal/activation`
+ *   answers it after the lock and captcha gates, with no `providers`. Nothing is
+ *   counted against the account.
  * - `IDEMPOTENCY_KEY_REUSE` · 422 / `IDEMPOTENCY_IN_PROGRESS` · 409 /
  *   `INVALID_IDEMPOTENCY_KEY` · 400 — the `Idempotency-Key` header's own
  *   refusals on `POST /terminal/operators`. A MISSING header is

package/dist/terminal.js

@@ -89,8 +89,10 @@ export const TERMINAL_ENROLMENT_ERROR_CODES = [
  *   did not match.
  * - `PASSWORD_NOT_SET` · 409 — `POST /terminal/activation` and `POST
  *   /terminal/pin`: the employee (a founder registered with Google or Apple) has
- *   no password. The body carries `providers`, the recorded sign-in providers, as
- *   `POST /auth/verify-password` does. Nothing is counted against the account.
+ *   no password. On `/terminal/pin` the body carries `providers`, the recorded
+ *   sign-in providers, as `POST /auth/verify-password` does; `/terminal/activation`
+ *   answers it after the lock and captcha gates, with no `providers`. Nothing is
+ *   counted against the account.
  * - `IDEMPOTENCY_KEY_REUSE` · 422 / `IDEMPOTENCY_IN_PROGRESS` · 409 /
  *   `INVALID_IDEMPOTENCY_KEY` · 400 — the `Idempotency-Key` header's own
  *   refusals on `POST /terminal/operators`. A MISSING header is

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "platform-types",
-	"version": "1.10.860",
+	"version": "1.10.862",
 	"description": "Shared wire and entity contracts for the platform.",
 	"type": "module",
 	"main": "dist/index.js",