@cuenca-mx/cuenca-js 1.2.2-dev0 → 2.0.0-dev0

package/CHANGELOG.md

@@ -0,0 +1,19 @@
+# Changelog
+
+## 1.3.0 (unreleased)
+
+### Changed
+
+- **Breaking (behavior)**: HTTP transport migrated from axios 0.24 to native fetch (issue #66).
+  - Removes CVE-2023-45857 exposure (XSRF token leak in redirects).
+  - Removes global axios interceptor pattern; per-request config now flows directly to the transport.
+  - Requires **Node.js >= 18** at runtime (fetch, AbortController, FormData globals).
+  - Network errors no longer expose axios-style `err.code` values in all cases; use `err.code || err.name` for cross-version detection.
+- **API addition**: `FileResource.download(id, { responseType })` accepts `responseType` (default `'blob'`).
+- **API addition**: `client.request()` accepts per-call `timeout` and `signal` overrides.
+
+### Fixed
+
+- `useJwt: true` (issue #59): `client.post`/`client.get` now receive proper object payloads.
+- Nested `Date` values in caller payloads are no longer mutated (deep clone).
+- `count()` no longer mutates the query object passed by the caller.

package/build/data-91da6d58.mjs

@@ -0,0 +1,625 @@
+// Enums as string unions. See docs/adr/0001-contrato-v2.md, decisions 3, 6 and 7.
+// Consts are sorted alphabetically by name.
+const AlertStatus = {
+    Created: 'created',
+    ReadyForAnalysis: 'ready_for_analysis',
+    Analysis: 'analysis',
+    Dictum: 'dictum',
+    Justified: 'justified',
+    Unusual: 'unusual',
+    Reported: 'reported',
+    Questionary: 'questionary',
+    JustifiedByTime: 'justified_by_time',
+    AdditionalInformation: 'additional_information',
+    Documentation: 'documentation',
+    Xml: 'xml',
+};
+const BridgeAccountStatus = {
+    Succeeded: 'succeeded',
+    NotValidated: 'not_validated',
+    Failed: 'failed',
+    OnWaitList: 'on_wait_list',
+};
+const BridgeBankAccountStatus = {
+    Created: 'created',
+    Failed: 'failed',
+    Pending: 'pending',
+    Succeeded: 'succeeded',
+};
+const BridgeTransactionType = {
+    Buy: 'buy',
+    Sell: 'sell',
+};
+const CardErrorType = {
+    Blocked: 'blocked',
+    Communication: 'communication',
+    ContactlessAmountLimit: 'contactless_amount_limit',
+    FraudDetection: 'fraud_detection',
+    FraudDetectionUncertain: 'fraud_detection_uncertain',
+    InsufficientFounds: 'insufficient_founds',
+    InvalidPin: 'invalid_pin',
+    Notification: 'notification',
+    NotificationDeactivatedCard: 'notification_deactivated_card',
+    CashAdvanceDailyLimit: 'cash_advance_daily_limit',
+};
+const CardFundingType = {
+    Credit: 'credit',
+    Debit: 'debit',
+};
+const CardIssuer = {
+    Accendo: 'accendo',
+    Cuenca: 'cuenca',
+};
+const CardStatus = {
+    Active: 'active',
+    Blocked: 'blocked',
+    Created: 'created',
+    Deactivated: 'deactivated',
+    Printing: 'printing',
+};
+const CardTransactionType = {
+    Auth: 'auth',
+    Capture: 'capture',
+    Chargeback: 'chargeback',
+    Expiration: 'expiration',
+    Refund: 'refund',
+    Void: 'void',
+    FastFunds: 'fast_funds',
+    Push: 'push',
+    PushConfirmation: 'push_confirmation',
+};
+const CardType = {
+    Physical: 'physical',
+    Virtual: 'virtual',
+};
+const CommissionType = {
+    CardRequest: 'card_request',
+    CashDeposit: 'cash_deposit',
+    OutgoingSpei: 'outgoing_spei',
+    CardShipping: 'card_shipping',
+    AccountFee: 'account_fee',
+};
+const Currency = {
+    Mxn: 'mxn',
+    Usdc: 'usdc',
+    Sol: 'sol',
+};
+const DepositNetwork = {
+    Cash: 'cash',
+    Internal: 'internal',
+    Spei: 'spei',
+};
+const EntryType = {
+    Credit: 'credit',
+    Debit: 'debit',
+};
+const FileFormat = {
+    Pdf: 'application/pdf',
+    Xml: 'application/xml',
+    Json: 'application/json',
+    Any: '*/*',
+};
+const KYCFileType = {
+    Curp: 'curp',
+    Dni: 'dni',
+    Ine: 'ine',
+    Passport: 'passport',
+    Residency: 'residency',
+    MatriculaConsular: 'matricula_consular',
+    ProofOfLiveness: 'proof_of_liveness',
+    ProofOfAddress: 'proof_of_address',
+    Signature: 'signature',
+    Tos: 'tos',
+};
+const KYCValidationSource = {
+    Client: 'client',
+    Server: 'server',
+};
+const MLIndicatorLevel = {
+    Low: 'low',
+    Medium: 'medium',
+    High: 'high',
+};
+const MLIndicatorType = {
+    Deposit: 'deposit',
+    Withdrawal: 'withdrawal',
+};
+const MLIndicatorPeriod = {
+    Bimester: 'bimester',
+    Trimester: 'trimester',
+    Semester: 'semester',
+};
+const Network = {
+    Polygon: 'polygon',
+    Solana: 'solana',
+};
+const Phase = {
+    Sandbox: 'sandbox',
+    Stage: 'stage',
+    Api: 'api',
+};
+const PLDFilterType = {
+    Amount: 'amount',
+    Volume: 'volume',
+};
+const Country = {
+    AW: 'AW',
+    AF: 'AF',
+    AO: 'AO',
+    AI: 'AI',
+    AX: 'AX',
+    AL: 'AL',
+    AD: 'AD',
+    AE: 'AE',
+    AR: 'AR',
+    AM: 'AM',
+    AS: 'AS',
+    AQ: 'AQ',
+    TF: 'TF',
+    AG: 'AG',
+    AU: 'AU',
+    AT: 'AT',
+    AZ: 'AZ',
+    BI: 'BI',
+    BE: 'BE',
+    BJ: 'BJ',
+    BQ: 'BQ',
+    BF: 'BF',
+    BD: 'BD',
+    BG: 'BG',
+    BH: 'BH',
+    BS: 'BS',
+    BA: 'BA',
+    BL: 'BL',
+    BY: 'BY',
+    BZ: 'BZ',
+    BM: 'BM',
+    BO: 'BO',
+    BR: 'BR',
+    BB: 'BB',
+    BN: 'BN',
+    BT: 'BT',
+    BV: 'BV',
+    BW: 'BW',
+    CF: 'CF',
+    CA: 'CA',
+    CC: 'CC',
+    CH: 'CH',
+    CL: 'CL',
+    CN: 'CN',
+    CI: 'CI',
+    CM: 'CM',
+    CD: 'CD',
+    CG: 'CG',
+    CK: 'CK',
+    CO: 'CO',
+    KM: 'KM',
+    CV: 'CV',
+    CR: 'CR',
+    CU: 'CU',
+    CW: 'CW',
+    CX: 'CX',
+    KY: 'KY',
+    CY: 'CY',
+    CZ: 'CZ',
+    DE: 'DE',
+    DJ: 'DJ',
+    DM: 'DM',
+    DK: 'DK',
+    DO: 'DO',
+    DZ: 'DZ',
+    EC: 'EC',
+    EG: 'EG',
+    ER: 'ER',
+    EH: 'EH',
+    ES: 'ES',
+    EE: 'EE',
+    ET: 'ET',
+    FI: 'FI',
+    FJ: 'FJ',
+    FK: 'FK',
+    FR: 'FR',
+    FO: 'FO',
+    FM: 'FM',
+    GA: 'GA',
+    GB: 'GB',
+    GE: 'GE',
+    GG: 'GG',
+    GH: 'GH',
+    GI: 'GI',
+    GN: 'GN',
+    GP: 'GP',
+    GM: 'GM',
+    GW: 'GW',
+    GQ: 'GQ',
+    GR: 'GR',
+    GD: 'GD',
+    GL: 'GL',
+    GT: 'GT',
+    GF: 'GF',
+    GU: 'GU',
+    GY: 'GY',
+    HK: 'HK',
+    HM: 'HM',
+    HN: 'HN',
+    HR: 'HR',
+    HT: 'HT',
+    HU: 'HU',
+    ID: 'ID',
+    IM: 'IM',
+    IN: 'IN',
+    IO: 'IO',
+    IE: 'IE',
+    IR: 'IR',
+    IQ: 'IQ',
+    IS: 'IS',
+    IL: 'IL',
+    IT: 'IT',
+    JM: 'JM',
+    JE: 'JE',
+    JO: 'JO',
+    JP: 'JP',
+    KZ: 'KZ',
+    KE: 'KE',
+    KG: 'KG',
+    KH: 'KH',
+    KI: 'KI',
+    KN: 'KN',
+    KR: 'KR',
+    KW: 'KW',
+    LA: 'LA',
+    LB: 'LB',
+    LC: 'LC',
+    LI: 'LI',
+    LK: 'LK',
+    LR: 'LR',
+    LS: 'LS',
+    LT: 'LT',
+    LU: 'LU',
+    LV: 'LV',
+    LY: 'LY',
+    MA: 'MA',
+    MC: 'MC',
+    MD: 'MD',
+    MG: 'MG',
+    MV: 'MV',
+    MX: 'MX',
+    MH: 'MH',
+    MK: 'MK',
+    ML: 'ML',
+    MT: 'MT',
+    MM: 'MM',
+    ME: 'ME',
+    MN: 'MN',
+    MP: 'MP',
+    MZ: 'MZ',
+    MR: 'MR',
+    MS: 'MS',
+    MQ: 'MQ',
+    MU: 'MU',
+    MW: 'MW',
+    MY: 'MY',
+    YT: 'YT',
+    NA: 'NA',
+    NC: 'NC',
+    NE: 'NE',
+    NF: 'NF',
+    NG: 'NG',
+    NI: 'NI',
+    NU: 'NU',
+    NL: 'NL',
+    NO: 'NO',
+    NP: 'NP',
+    NR: 'NR',
+    NZ: 'NZ',
+    OM: 'OM',
+    PK: 'PK',
+    PA: 'PA',
+    PN: 'PN',
+    PE: 'PE',
+    PH: 'PH',
+    PW: 'PW',
+    PG: 'PG',
+    PL: 'PL',
+    PR: 'PR',
+    KP: 'KP',
+    PT: 'PT',
+    PY: 'PY',
+    PS: 'PS',
+    PF: 'PF',
+    QA: 'QA',
+    RE: 'RE',
+    RO: 'RO',
+    RU: 'RU',
+    RW: 'RW',
+    SA: 'SA',
+    SD: 'SD',
+    SN: 'SN',
+    SG: 'SG',
+    GS: 'GS',
+    SH: 'SH',
+    SJ: 'SJ',
+    SB: 'SB',
+    SL: 'SL',
+    SV: 'SV',
+    SM: 'SM',
+    SO: 'SO',
+    PM: 'PM',
+    RS: 'RS',
+    SS: 'SS',
+    ST: 'ST',
+    SR: 'SR',
+    SK: 'SK',
+    SI: 'SI',
+    SE: 'SE',
+    SZ: 'SZ',
+    SX: 'SX',
+    SC: 'SC',
+    SY: 'SY',
+    TC: 'TC',
+    TD: 'TD',
+    TG: 'TG',
+    TH: 'TH',
+    TJ: 'TJ',
+    TK: 'TK',
+    TM: 'TM',
+    TL: 'TL',
+    TO: 'TO',
+    TT: 'TT',
+    TN: 'TN',
+    TR: 'TR',
+    TV: 'TV',
+    TW: 'TW',
+    TZ: 'TZ',
+    UG: 'UG',
+    UA: 'UA',
+    UM: 'UM',
+    UY: 'UY',
+    US: 'US',
+    UZ: 'UZ',
+    VA: 'VA',
+    VC: 'VC',
+    VE: 'VE',
+    VG: 'VG',
+    VI: 'VI',
+    VN: 'VN',
+    VU: 'VU',
+    WF: 'WF',
+    WS: 'WS',
+    YE: 'YE',
+    ZA: 'ZA',
+    ZM: 'ZM',
+    ZW: 'ZW',
+    XA: 'XA',
+};
+const State = {
+    NE: 'NE',
+    AS: 'AS',
+    BC: 'BC',
+    BS: 'BS',
+    CC: 'CC',
+    CS: 'CS',
+    CH: 'CH',
+    CL: 'CL',
+    CM: 'CM',
+    DF: 'DF',
+    DG: 'DG',
+    GT: 'GT',
+    GR: 'GR',
+    HG: 'HG',
+    JC: 'JC',
+    MC: 'MC',
+    MN: 'MN',
+    MS: 'MS',
+    NT: 'NT',
+    NL: 'NL',
+    OC: 'OC',
+    PL: 'PL',
+    QT: 'QT',
+    QR: 'QR',
+    SP: 'SP',
+    SL: 'SL',
+    SR: 'SR',
+    TC: 'TC',
+    TL: 'TL',
+    TS: 'TS',
+    VZ: 'VZ',
+    YN: 'YN',
+    ZS: 'ZS',
+};
+const ServiceProviderCategory = {
+    Cable: 'cable',
+    CreditCard: 'credit_card',
+    Electricity: 'electricity',
+    Gas: 'gas',
+    Internet: 'internet',
+    LandlineTelephone: 'landline_telephone',
+    MobileTelephonePostpaid: 'mobile_telephone_postpaid',
+    MobileTelephonePrepaid: 'mobile_telephone_prepaid',
+    SateliteTelevision: 'satelite_television',
+    Water: 'water',
+};
+const SavingCategory = {
+    General: 'general',
+    Home: 'home',
+    Vehicle: 'vehicle',
+    Travel: 'travel',
+    Clothing: 'clothing',
+    Other: 'other',
+    Medical: 'medical',
+    Accident: 'accident',
+    Education: 'education',
+};
+const SessionType = {
+    AccountEntries: 'session.account_entries',
+    DownloadFile: 'session.download_file',
+    Registration: 'session.registration',
+    ShowCard: 'session.show_card',
+    UploadFile: 'session.upload_file',
+    CurpValidation: 'session.curp_validation',
+    Agent: 'session.agent',
+};
+const SourceAlertType = {
+    Chester: 'chester',
+    External: 'external',
+    Manual: 'manual',
+};
+const TrackDataMethod = {
+    NotSet: 'not_set',
+    Terminal: 'terminal',
+    Manual: 'manual',
+    Unknown: 'unknown',
+    Contactless: 'contactless',
+    FallBack: 'fall_back',
+    MagneticStripe: 'magnetic_stripe',
+    RecurringCharge: 'recurring_charge',
+};
+const TransactionStatus = {
+    Created: 'created',
+    Failed: 'failed',
+    InReview: 'in_review',
+    Submitted: 'submitted',
+    Succeeded: 'succeeded',
+};
+const TransferNetwork = {
+    Internal: 'internal',
+    Spei: 'spei',
+};
+const UserStatus = {
+    Active: 'active',
+    Deactivated: 'deactivated',
+    InReview: 'in_review',
+    Fraud: 'fraud',
+    PldBlocked: 'pld_blocked',
+    UserBlocked: 'user_blocked',
+    Inactive: 'inactive',
+};
+const UserType = {
+    Moral: 'moral',
+    Physical: 'physical',
+};
+const VerificationStatus = {
+    Created: 'created',
+    NotVerified: 'not_verified',
+    Rejected: 'rejected',
+    ReviewNeeded: 'review_needed',
+    Submitted: 'submitted',
+    Succeeded: 'succeeded',
+    UploadAgain: 'upload_again',
+};
+const VerificationType = {
+    Phone: 'phone',
+    Email: 'email',
+};
+const WalletTransactionType = {
+    Deposit: 'deposit',
+    Withdrawal: 'withdrawal',
+};
+const SATRegimeCode = {
+    GRL_PM: '601',
+    PM_FN: '603',
+    SAL_IS: '605',
+    ARR: '606',
+    ENAJ_ADQ: '607',
+    DEM_ING: '608',
+    CONS: '609',
+    RES_EXT: '610',
+    DIV: '611',
+    PF_AEP: '612',
+    INT: '614',
+    ING_PREM: '615',
+    SIN_OBL: '616',
+    SCP_DIF: '620',
+    INC_FISC: '621',
+    AGRO_GAN_SILV_PES: '622',
+    OP_GRUPO_SOC: '623',
+    COOR: '624',
+    AE_PLAT_TEC: '625',
+    RS_CONF: '626',
+    HID: '628',
+    PREF_EM_MULT: '629',
+    ENAJ_ACC_BOL: '630',
+};
+const SATRegimeLabels = {
+    [SATRegimeCode.GRL_PM]: 'General de Ley Personas Morales',
+    [SATRegimeCode.PM_FN]: 'Personas Morales con Fines no Lucrativos',
+    [SATRegimeCode.SAL_IS]: 'Sueldos y Salarios e Ingresos Asimilados a Salarios',
+    [SATRegimeCode.ARR]: 'Arrendamiento',
+    [SATRegimeCode.ENAJ_ADQ]: 'Régimen de Enajenación o Adquisición de Bienes',
+    [SATRegimeCode.DEM_ING]: 'Demás ingresos',
+    [SATRegimeCode.CONS]: 'Consolidación',
+    [SATRegimeCode.RES_EXT]: 'Residentes en el Extranjero sin Establecimiento Permanente',
+    [SATRegimeCode.DIV]: 'Ingresos por Dividendos (socios y accionistas)',
+    [SATRegimeCode.PF_AEP]: 'Personas Físicas con Actividades Empresariales y Profesionales',
+    [SATRegimeCode.INT]: 'Ingresos por intereses',
+    [SATRegimeCode.ING_PREM]: 'Régimen de los ingresos por obtención de premios',
+    [SATRegimeCode.SIN_OBL]: 'Sin obligaciones fiscales',
+    [SATRegimeCode.SCP_DIF]: 'Sociedades Cooperativas de Producción que optan por diferir',
+    [SATRegimeCode.INC_FISC]: 'Incorporación Fiscal',
+    [SATRegimeCode.AGRO_GAN_SILV_PES]: 'Actividades Agrícolas, Ganaderas, Silvícolas y Pesqueras',
+    [SATRegimeCode.OP_GRUPO_SOC]: 'Opcional para Grupos de Sociedades',
+    [SATRegimeCode.COOR]: 'Coordinados',
+    [SATRegimeCode.AE_PLAT_TEC]: 'Régimen de las Actividades Empresariales con ingresos a través de Plataformas Tecnológicas',
+    [SATRegimeCode.RS_CONF]: 'Régimen Simplificado de Confianza',
+    [SATRegimeCode.HID]: 'Hidrocarburos',
+    [SATRegimeCode.PREF_EM_MULT]: 'De los Regímenes Fiscales Preferentes y de las Empresas Multinacionales',
+    [SATRegimeCode.ENAJ_ACC_BOL]: 'Enajenación de acciones en bolsa de valores',
+};
+
+// Recursive camelCase <-> snake_case conversion for wire objects.
+// See docs/adr/0001-contrato-v2.md and issue #63.
+const isPlainObject = (value) => typeof value === 'object' &&
+    value !== null &&
+    !Array.isArray(value) &&
+    !(value instanceof Date);
+// snake_case -> camelCase: `user_id` -> `userId`, `next_page_uri` -> `nextPageUri`.
+// Keys already in camelCase (no underscores) are left untouched, which is
+// what makes the transform idempotent.
+const toCamelKey = (key) => key.replace(/_([a-z0-9])/g, (_match, chr) => chr.toUpperCase());
+// camelCase -> snake_case: `userId` -> `user_id`, `nextPageUri` -> `next_page_uri`.
+// Keys already in snake_case (no uppercase letters) are left untouched.
+const toSnakeKey = (key) => key.replace(/([a-zA-Z0-9])([A-Z])/g, '$1_$2').toLowerCase();
+function transform(value, keyFn) {
+    if (Array.isArray(value)) {
+        return value.map((item) => transform(item, keyFn));
+    }
+    if (value instanceof Date) {
+        return value;
+    }
+    if (isPlainObject(value)) {
+        return Object.entries(value).reduce((acc, [key, val]) => {
+            acc[keyFn(key)] = transform(val, keyFn);
+            return acc;
+        }, {});
+    }
+    return value;
+}
+function camelize(value) {
+    return transform(value, toCamelKey);
+}
+function snakeize(value) {
+    return transform(value, toSnakeKey);
+}
+
+const dateToUTC = (date) => {
+  if (!date) return null;
+  const dateObj = new Date(date);
+  return new Date(dateObj.getTime());
+};
+
+// Same as `coerceDates`, but a declared field that is absent from the payload
+// becomes `null` rather than staying `undefined`. The model and identity
+// classes this replaced called `dateToUTC(x)` unconditionally in their
+// constructors, so an absent date always landed as `null` via dateToUTC's own
+// falsy guard. `coerceDates` deliberately leaves absent fields alone, because
+// the query serializers share it and must not invent keys.
+const coerceDatesWithDefaults = (obj, fields) => {
+  const result = { ...obj };
+  fields.forEach((field) => {
+    if (result[field] === undefined) result[field] = null;
+    result[field] = dateToUTC(result[field]);
+  });
+  return result;
+};
+
+export { AlertStatus as A, BridgeAccountStatus as B, CardStatus as C, DepositNetwork as D, EntryType as E, FileFormat as F, SATRegimeCode as G, SATRegimeLabels as H, KYCFileType as K, MLIndicatorLevel as M, Network as N, Phase as P, State as S, TrackDataMethod as T, UserStatus as U, VerificationType as V, WalletTransactionType as W, camelize as a, BridgeBankAccountStatus as b, coerceDatesWithDefaults as c, dateToUTC as d, BridgeTransactionType as e, CardErrorType as f, CardFundingType as g, CardIssuer as h, CardTransactionType as i, CardType as j, CommissionType as k, Currency as l, KYCValidationSource as m, MLIndicatorType as n, MLIndicatorPeriod as o, PLDFilterType as p, Country as q, ServiceProviderCategory as r, snakeize as s, SavingCategory as t, SessionType as u, SourceAlertType as v, TransactionStatus as w, TransferNetwork as x, UserType as y, VerificationStatus as z };