sinfactura-types 1.10.521 → 1.10.523

package/dist/cjs/terminal.js

@@ -16,15 +16,15 @@
 //      live activation. The PIN only re-selects WHO operates the till; it is
 //      never a standalone authentication.
 //   4. The ELEVATION TOKEN — 90 seconds, single use, bound to one exact action.
-//      Not described here yet; its shapes land with the slice that serves it.
+//      Its credential is opaque and grants no access-token privileges.
 //
 // ⚠️ Rollout is sliced. ENROLMENT (pairing codes, redeem, list, revoke),
 // ACTIVATION, the OPERATOR PIN, PIN ENROLMENT and the operator-session read are
-// served. ELEVATION is not, and has no shape here yet. "Served" means merged: a
+// served, including single-action money-out ELEVATION. "Served" means merged: a
 // client must still verify the api's deployment on its own route before relying
 // on one.
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.TERMINAL_PAIRING_CODE_TTL_SECONDS = exports.TERMINAL_ENROLMENT_TTL_SECONDS = exports.TERMINAL_SESSION_ERROR_CODES = exports.TERMINAL_ENROLMENT_ERROR_CODES = void 0;
+exports.TERMINAL_ELEVATION_ERROR_CODES = exports.TERMINAL_ELEVATION_ACTIONS = exports.TERMINAL_PAIRING_CODE_TTL_SECONDS = exports.TERMINAL_ENROLMENT_TTL_SECONDS = exports.TERMINAL_SESSION_ERROR_CODES = exports.TERMINAL_ENROLMENT_ERROR_CODES = void 0;
 /**
  * `body.error` codes the SERVED enrolment routes refuse with —
  * `POST /terminal/pair/codes`, `POST /terminal/pair`, `GET /terminal/sessions`
@@ -115,3 +115,21 @@ exports.TERMINAL_SESSION_ERROR_CODES = [
 /** The `sf_terminal` cookie's lifetime and the pairing code's, in seconds — the two numbers a client may display. */
 exports.TERMINAL_ENROLMENT_TTL_SECONDS = 365 * 24 * 60 * 60;
 exports.TERMINAL_PAIRING_CODE_TTL_SECONDS = 10 * 60;
+/** Money-out actions whose operator sessions require a different ADMIN-or-higher approver. */
+exports.TERMINAL_ELEVATION_ACTIONS = [
+    'order.deposit-refund',
+    'mercadopago.refund',
+    'shift.refund',
+    'shift.cash-out',
+    'cash.withdrawal',
+    'account.cash-debit',
+    'tip.cash-payout',
+];
+/** Existing PIN, validation and idempotency refusals retain their current codes/statuses. */
+exports.TERMINAL_ELEVATION_ERROR_CODES = [
+    'ELEVATION_FORBIDDEN',
+    'ELEVATION_APPROVER_FORBIDDEN',
+    'OPERATOR_SESSION_STALE',
+    'ELEVATION_REQUIRED',
+    'ELEVATION_INVALID',
+];

package/dist/invoice.d.ts

@@ -157,8 +157,8 @@ declare global {
          * frozen exactly as declared to ARCA rather than re-derived at read time.
          *
          * Stored alongside the array on purpose: `buildTributos` rounds each entry
-         * and then rounds the sum, so a reader summing the array reproduces it, but
-         * only while it uses the same rounding. This is the value ARCA reconciled
+         * and sums the rounded entries, so a reader summing the array reproduces it,
+         * but only while it uses the same rounding. This is the value ARCA reconciled
          * `ImpTotal == ImpTotConc + ImpNeto + ImpOpEx + ImpTrib + ImpIVA` against,
          * and that identity is what makes `total` decomposable.
          *
@@ -179,6 +179,27 @@ declare global {
          * (`stacks/lambdas/reports/_format.ts`'s `ventasPesoFactor`).
          */
         total: number;
+        /**
+         * The rounding rule this voucher's amounts were built under.
+         *
+         * `'decimal'` — every per-unit figure, alícuota bucket and voucher total
+         * rounded to centavos half away from zero on the DECIMAL value (unit 0.35
+         * at 50 % off is 0.18). Written on every Invoice row built under it since
+         * the field shipped — factura, CAEA, `pending_cae`, `rejected`, export, and
+         * a credit note whose factura carries it.
+         *
+         * ABSENT ⇒ the row was built under the LEGACY rule, `Number(x.toFixed(2))`
+         * on the binary double (the same 0.35 at 50 % off is 0.17). Forward-only,
+         * never backfilled: every row written before the field exists is legacy,
+         * and so is a NEW credit note crediting such a factura, which is built
+         * under its factura's rule so it can credit it exactly.
+         *
+         * Read where a voucher is rebuilt or re-rendered rather than read back: a
+         * credit note's economics follow its factura's rule, the pending-CAE drain
+         * rebuilds a row under its own, and the PDF / ESC/POS receipt replay a
+         * line under it.
+         */
+        amountRounding?: 'decimal';
         cae: string;
         caeExpiration: string;
         observations?: string;

package/dist/order.d.ts

@@ -1811,9 +1811,10 @@ declare global {
      * one NEGATIVE {@link OrderTender} leg: `amount = −receipt.amount +
      * receipt.change`, the receipt's `method`, `methodLabel`, `source` and
      * `currency`, `reference` = `depositTenderId`, `deposit: { kind: 'refund',
-     * refunds: depositTenderId }`. Admin tier only (ADMIN, SUPERVISOR or MANAGER;
-     * `403 ROLE_FORBIDDEN` otherwise, PRINTER and ACCOUNTANT included), and denied
-     * under impersonation. Same opt-in `Idempotency-Key` as `mode: 'deposit'`: a
+     * refunds: depositTenderId }`. A password session requires ADMIN, SUPERVISOR
+     * or MANAGER; a PIN operator requires a single-use action-bound elevation
+     * from a different admin approver. PRINTER, ACCOUNTANT and impersonation are
+     * refused. Same opt-in `Idempotency-Key` as `mode: 'deposit'`: a
      * same-key retry replays the first 200.
      *
      * A CASH refund books one `'refund'` `CashEvent` (an outcome) of the net the
@@ -1862,7 +1863,7 @@ declare global {
      * `ORDER_VERSION_CONFLICT` and `FX_CONVERSION_UNAVAILABLE` as `mode: 'tender'`
      * answers them.
      */
-    interface OrderDepositRefundRequest {
+    interface OrderDepositRefundRequest extends TerminalElevationAuthorization {
         mode: 'deposit-refund';
         orderId: string;
         /** The `tenderId` of the seña RECEIPT leg to give back. */

package/dist/terminal.d.ts

@@ -210,6 +210,30 @@ declare global {
         name: string;
         startedAt: number;
     } | null;
+    /** Approval request from a current PIN operator and matching terminal cookie. */
+    interface TerminalElevationRequest {
+        approverId: string;
+        pin: string;
+        action: TerminalElevationAction;
+        subjectId: string;
+        /** Exact underlying request body; object keys are canonicalized, array order remains bound. */
+        body: Record<string, unknown>;
+    }
+    /** Attach the credential at the root of the exact approved money-out body. */
+    interface TerminalElevationAuthorization {
+        elevationToken?: string;
+    }
+    interface TerminalElevationResult {
+        /** Opaque single-use credential. Keep in memory; attach as root elevationToken to the approved body. */
+        elevationToken: string;
+        elevationId: string;
+        /** Unix ms, at most 90 seconds and never past the operator/activation expiry. */
+        expiresAt: number;
+    }
+    interface TerminalElevationResponse {
+        message: string;
+        data: TerminalElevationResult;
+    }
     /**
      * `POST /terminal/pin` (userToken) — an employee sets or
      * replaces their own PIN. The account password is re-verified on the same
@@ -293,4 +317,9 @@ export type TerminalSessionErrorCode = (typeof TERMINAL_SESSION_ERROR_CODES)[num
 /** The `sf_terminal` cookie's lifetime and the pairing code's, in seconds — the two numbers a client may display. */
 export declare const TERMINAL_ENROLMENT_TTL_SECONDS: number;
 export declare const TERMINAL_PAIRING_CODE_TTL_SECONDS: number;
-export {};
+/** Money-out actions whose operator sessions require a different ADMIN-or-higher approver. */
+export declare const TERMINAL_ELEVATION_ACTIONS: readonly ["order.deposit-refund", "mercadopago.refund", "shift.refund", "shift.cash-out", "cash.withdrawal", "account.cash-debit", "tip.cash-payout"];
+export type TerminalElevationAction = (typeof TERMINAL_ELEVATION_ACTIONS)[number];
+/** Existing PIN, validation and idempotency refusals retain their current codes/statuses. */
+export declare const TERMINAL_ELEVATION_ERROR_CODES: readonly ["ELEVATION_FORBIDDEN", "ELEVATION_APPROVER_FORBIDDEN", "OPERATOR_SESSION_STALE", "ELEVATION_REQUIRED", "ELEVATION_INVALID"];
+export type TerminalElevationErrorCode = (typeof TERMINAL_ELEVATION_ERROR_CODES)[number];

package/dist/terminal.js

@@ -15,11 +15,11 @@
 //      live activation. The PIN only re-selects WHO operates the till; it is
 //      never a standalone authentication.
 //   4. The ELEVATION TOKEN — 90 seconds, single use, bound to one exact action.
-//      Not described here yet; its shapes land with the slice that serves it.
+//      Its credential is opaque and grants no access-token privileges.
 //
 // ⚠️ Rollout is sliced. ENROLMENT (pairing codes, redeem, list, revoke),
 // ACTIVATION, the OPERATOR PIN, PIN ENROLMENT and the operator-session read are
-// served. ELEVATION is not, and has no shape here yet. "Served" means merged: a
+// served, including single-action money-out ELEVATION. "Served" means merged: a
 // client must still verify the api's deployment on its own route before relying
 // on one.
 /**
@@ -112,3 +112,21 @@ export const TERMINAL_SESSION_ERROR_CODES = [
 /** The `sf_terminal` cookie's lifetime and the pairing code's, in seconds — the two numbers a client may display. */
 export const TERMINAL_ENROLMENT_TTL_SECONDS = 365 * 24 * 60 * 60;
 export const TERMINAL_PAIRING_CODE_TTL_SECONDS = 10 * 60;
+/** Money-out actions whose operator sessions require a different ADMIN-or-higher approver. */
+export const TERMINAL_ELEVATION_ACTIONS = [
+    'order.deposit-refund',
+    'mercadopago.refund',
+    'shift.refund',
+    'shift.cash-out',
+    'cash.withdrawal',
+    'account.cash-debit',
+    'tip.cash-payout',
+];
+/** Existing PIN, validation and idempotency refusals retain their current codes/statuses. */
+export const TERMINAL_ELEVATION_ERROR_CODES = [
+    'ELEVATION_FORBIDDEN',
+    'ELEVATION_APPROVER_FORBIDDEN',
+    'OPERATOR_SESSION_STALE',
+    'ELEVATION_REQUIRED',
+    'ELEVATION_INVALID',
+];

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "sinfactura-types",
-	"version": "1.10.521",
+	"version": "1.10.523",
 	"description": "Shared wire and entity contracts for the SINFACTURA platform.",
 	"type": "module",
 	"main": "dist/index.js",