@fiado/api-invoker 4.26.0 → 4.28.0

package/bin/equality-connector/api/EqualityConnectorApi.d.ts

@@ -1,5 +1,6 @@
 import { IHttpRequest } from "@fiado/http-client";
 import { ApiGatewayResponse } from "@fiado/gateway-adapter";
+import { ConnectorCatalogResponse } from "@fiado/type-kit/bin/benefitCenter/index.js";
 import { CreateFundingReferenceRequest, CreateFundingReferenceResponse, CancelFundingReferenceRequest, CancelFundingReferenceResponse, ListFundingReferencesResponse } from "@fiado/type-kit/bin/walletFunding/index.js";
 import { IEqualityConnectorApi } from "./interfaces/IEqualityConnectorApi.js";
 export default class EqualityConnectorApi implements IEqualityConnectorApi {
@@ -9,4 +10,8 @@ export default class EqualityConnectorApi implements IEqualityConnectorApi {
     createFundingReference(request: CreateFundingReferenceRequest): Promise<ApiGatewayResponse<CreateFundingReferenceResponse>>;
     cancelFundingReference(fundingId: string, request: CancelFundingReferenceRequest): Promise<ApiGatewayResponse<CancelFundingReferenceResponse>>;
     listFundingReferences(directoryId: string, status?: string): Promise<ApiGatewayResponse<ListFundingReferencesResponse>>;
+    getStandardCatalog(query: {
+        benefitId: string;
+        includeDisabled?: boolean;
+    }): Promise<ApiGatewayResponse<ConnectorCatalogResponse>>;
 }

package/bin/equality-connector/api/EqualityConnectorApi.js

@@ -32,6 +32,13 @@ let EqualityConnectorApi = class EqualityConnectorApi {
         const url = `${this.baseUrl}/funding/references?${params.toString()}`;
         return await this.httpRequest.get(url);
     }
+    async getStandardCatalog(query) {
+        const params = new URLSearchParams({ benefitId: query.benefitId });
+        if (query.includeDisabled)
+            params.set("includeDisabled", "true");
+        const url = `${this.baseUrl}/catalog/standard?${params.toString()}`;
+        return await this.httpRequest.get(url);
+    }
 };
 EqualityConnectorApi = __decorate([
     injectable(),

package/bin/equality-connector/api/interfaces/IEqualityConnectorApi.d.ts

@@ -1,15 +1,17 @@
 import { ApiGatewayResponse } from "@fiado/gateway-adapter";
+import { ConnectorCatalogResponse } from "@fiado/type-kit/bin/benefitCenter/index.js";
 import { CreateFundingReferenceRequest, CreateFundingReferenceResponse, CancelFundingReferenceRequest, CancelFundingReferenceResponse, ListFundingReferencesResponse } from "@fiado/type-kit/bin/walletFunding/index.js";
 /**
  * Cliente del marketplace hacia equality-connector (privado, dentro de la VPC).
  *
- * Lo consume exclusivamente `EqualityFundingPublisher` del benefits-marketplace-business.
- * Ningún otro lambda conoce este cliente.
+ * Lo consume exclusivamente `EqualityFundingPublisher` + `EqualityCatalogPublisher`
+ * del benefits-marketplace-business. Ningún otro lambda conoce este cliente.
  *
  * Endpoints backend en equality-connector:
- *  - POST /funding                                (privado VPC)
- *  - POST /funding/{fundingId}/cancel             (privado VPC)
+ *  - POST /funding                                  (privado VPC)
+ *  - POST /funding/{fundingId}/cancel               (privado VPC)
  *  - GET  /funding/references?directoryId=&status=  (privado VPC)
+ *  - GET  /catalog/standard?benefitId=&includeDisabled=  (privado VPC) — patron canonico Centro de Beneficios
  */
 export interface IEqualityConnectorApi {
     /** Genera una referencia de fondeo en Passport via el connector. */
@@ -21,4 +23,13 @@ export interface IEqualityConnectorApi {
      * Status default (cuando no se pasa) lo decide el connector — hoy: ACTIVE.
      */
     listFundingReferences(directoryId: string, status?: string): Promise<ApiGatewayResponse<ListFundingReferencesResponse>>;
+    /**
+     * Devuelve el catalogo standard de productos de wallet-funding del connector.
+     * Patron canonico del Centro de Beneficios — el marketplace lo consume via
+     * `IConnectorCatalogPublisher.getStandardCatalog` (mismo flow que STP/Multicomm).
+     */
+    getStandardCatalog(query: {
+        benefitId: string;
+        includeDisabled?: boolean;
+    }): Promise<ApiGatewayResponse<ConnectorCatalogResponse>>;
 }

package/bin/platformRbac/api/PlatformRbacBusinessApi.d.ts

@@ -1,6 +1,6 @@
 import type { IHttpRequest } from "@fiado/http-client";
 import { ApiGatewayResponse } from "@fiado/gateway-adapter";
-import { DefineNextChallengeRequest, DefineNextChallengeResponse, PrepareChallengeRequest, PrepareChallengeResponse, VerifyChallengeRequest, VerifyChallengeResponse, AuthorizeRequest, AuthorizeResponse, EffectivePermissionsResponse } from "@fiado/type-kit/bin/platformRbac/index.js";
+import { DefineNextChallengeRequest, DefineNextChallengeResponse, PrepareChallengeRequest, PrepareChallengeResponse, VerifyChallengeRequest, VerifyChallengeResponse, AuthorizeRequest, AuthorizeResponse, EffectivePermissionsResponse, InjectableUserAttributesResponse } from "@fiado/type-kit/bin/platformRbac/index.js";
 import { IPlatformRbacBusinessApi } from "./interfaces/IPlatformRbacBusinessApi.js";
 /**
  * Publisher HTTP del lambda `platform-rbac-business` (componente 06 SureKeep Fase 0)
@@ -25,4 +25,5 @@ export default class PlatformRbacBusinessApi implements IPlatformRbacBusinessApi
     verifyChallenge(input: VerifyChallengeRequest): Promise<ApiGatewayResponse<VerifyChallengeResponse>>;
     authorize(input: AuthorizeRequest): Promise<ApiGatewayResponse<AuthorizeResponse>>;
     effectivePermissions(cognitoSub: string, tenantId?: string): Promise<ApiGatewayResponse<EffectivePermissionsResponse>>;
+    getInjectableUserAttributes(cognitoSub: string, tenantId: string): Promise<ApiGatewayResponse<InjectableUserAttributesResponse>>;
 }

package/bin/platformRbac/api/PlatformRbacBusinessApi.js

@@ -58,6 +58,10 @@ let PlatformRbacBusinessApi = class PlatformRbacBusinessApi {
             : base;
         return await this.httpRequest.get(url);
     }
+    async getInjectableUserAttributes(cognitoSub, tenantId) {
+        const url = `${this.baseUrl}/internal/users/${encodeURIComponent(cognitoSub)}/injectable-attributes?tenantId=${encodeURIComponent(tenantId)}`;
+        return await this.httpRequest.get(url);
+    }
 };
 PlatformRbacBusinessApi = __decorate([
     injectable(),

package/bin/platformRbac/api/interfaces/IPlatformRbacBusinessApi.d.ts

@@ -1,5 +1,5 @@
 import { ApiGatewayResponse } from "@fiado/gateway-adapter";
-import { DefineNextChallengeRequest, DefineNextChallengeResponse, PrepareChallengeRequest, PrepareChallengeResponse, VerifyChallengeRequest, VerifyChallengeResponse, AuthorizeRequest, AuthorizeResponse, EffectivePermissionsResponse } from "@fiado/type-kit/bin/platformRbac/index.js";
+import { DefineNextChallengeRequest, DefineNextChallengeResponse, PrepareChallengeRequest, PrepareChallengeResponse, VerifyChallengeRequest, VerifyChallengeResponse, AuthorizeRequest, AuthorizeResponse, EffectivePermissionsResponse, InjectableUserAttributesResponse } from "@fiado/type-kit/bin/platformRbac/index.js";
 /**
  * Contrato del publisher HTTP del lambda `platform-rbac-business` (componente 06 SureKeep Fase 0)
  * para los 3 endpoints internos del Custom Auth Challenge flow (MFA).
@@ -55,4 +55,10 @@ export interface IPlatformRbacBusinessApi {
      * rbac identifique el silo (sin él, el resolve cae a la rama platform → 404).
      */
     effectivePermissions(cognitoSub: string, tenantId?: string): Promise<ApiGatewayResponse<EffectivePermissionsResponse>>;
+    /**
+     * GET /internal/users/{cognitoSub}/injectable-attributes?tenantId= — devuelve los campos
+     * personalizados del usuario marcados injectToToken (ya filtrados y con valor). Invocado por
+     * jwt-inyector-trigger para estampar el claim `customAttributes`. DEC-RBAC-022.
+     */
+    getInjectableUserAttributes(cognitoSub: string, tenantId: string): Promise<ApiGatewayResponse<InjectableUserAttributesResponse>>;
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@fiado/api-invoker",
-  "version": "4.26.0",
+  "version": "4.28.0",
   "description": "Sirve como un puente entre diferentes funciones lambda, facilitando la comunicación entre ellas a través de invocaciones http",
   "type": "module",
   "main": "bin/index.js",
@@ -34,7 +34,7 @@
     "@fiado/gateway-adapter": "^2.0.2",
     "@fiado/http-client": "^2.0.1",
     "@fiado/logger": "^1.1.3",
-    "@fiado/type-kit": "^3.87.0",
+    "@fiado/type-kit": "^3.94.0",
     "dotenv": "^16.4.7"
   },
   "peerDependencies": {

package/src/equality-connector/api/EqualityConnectorApi.ts

@@ -1,6 +1,7 @@
 import { inject, injectable } from "inversify";
 import { IHttpRequest } from "@fiado/http-client";
 import { ApiGatewayResponse } from "@fiado/gateway-adapter";
+import { ConnectorCatalogResponse } from "@fiado/type-kit/bin/benefitCenter/index.js";
 import {
     CreateFundingReferenceRequest,
     CreateFundingReferenceResponse,
@@ -40,4 +41,13 @@ export default class EqualityConnectorApi implements IEqualityConnectorApi {
         const url = `${this.baseUrl}/funding/references?${params.toString()}`;
         return await this.httpRequest.get(url);
     }
+
+    async getStandardCatalog(
+        query: { benefitId: string; includeDisabled?: boolean },
+    ): Promise<ApiGatewayResponse<ConnectorCatalogResponse>> {
+        const params = new URLSearchParams({ benefitId: query.benefitId });
+        if (query.includeDisabled) params.set("includeDisabled", "true");
+        const url = `${this.baseUrl}/catalog/standard?${params.toString()}`;
+        return await this.httpRequest.get(url);
+    }
 }

package/src/equality-connector/api/interfaces/IEqualityConnectorApi.ts

@@ -1,4 +1,5 @@
 import { ApiGatewayResponse } from "@fiado/gateway-adapter";
+import { ConnectorCatalogResponse } from "@fiado/type-kit/bin/benefitCenter/index.js";
 import {
     CreateFundingReferenceRequest,
     CreateFundingReferenceResponse,
@@ -10,13 +11,14 @@ import {
 /**
  * Cliente del marketplace hacia equality-connector (privado, dentro de la VPC).
  *
- * Lo consume exclusivamente `EqualityFundingPublisher` del benefits-marketplace-business.
- * Ningún otro lambda conoce este cliente.
+ * Lo consume exclusivamente `EqualityFundingPublisher` + `EqualityCatalogPublisher`
+ * del benefits-marketplace-business. Ningún otro lambda conoce este cliente.
  *
  * Endpoints backend en equality-connector:
- *  - POST /funding                                (privado VPC)
- *  - POST /funding/{fundingId}/cancel             (privado VPC)
+ *  - POST /funding                                  (privado VPC)
+ *  - POST /funding/{fundingId}/cancel               (privado VPC)
  *  - GET  /funding/references?directoryId=&status=  (privado VPC)
+ *  - GET  /catalog/standard?benefitId=&includeDisabled=  (privado VPC) — patron canonico Centro de Beneficios
  */
 export interface IEqualityConnectorApi {
     /** Genera una referencia de fondeo en Passport via el connector. */
@@ -38,4 +40,13 @@ export interface IEqualityConnectorApi {
         directoryId: string,
         status?: string,
     ): Promise<ApiGatewayResponse<ListFundingReferencesResponse>>;
+
+    /**
+     * Devuelve el catalogo standard de productos de wallet-funding del connector.
+     * Patron canonico del Centro de Beneficios — el marketplace lo consume via
+     * `IConnectorCatalogPublisher.getStandardCatalog` (mismo flow que STP/Multicomm).
+     */
+    getStandardCatalog(
+        query: { benefitId: string; includeDisabled?: boolean },
+    ): Promise<ApiGatewayResponse<ConnectorCatalogResponse>>;
 }

package/src/platformRbac/api/PlatformRbacBusinessApi.ts

@@ -12,6 +12,7 @@ import {
     AuthorizeRequest,
     AuthorizeResponse,
     EffectivePermissionsResponse,
+    InjectableUserAttributesResponse,
 } from "@fiado/type-kit/bin/platformRbac/index.js";
 import { IPlatformRbacBusinessApi } from "./interfaces/IPlatformRbacBusinessApi.js";
 
@@ -77,4 +78,12 @@ export default class PlatformRbacBusinessApi implements IPlatformRbacBusinessApi
             : base;
         return await this.httpRequest.get(url);
     }
+
+    async getInjectableUserAttributes(
+        cognitoSub: string,
+        tenantId: string,
+    ): Promise<ApiGatewayResponse<InjectableUserAttributesResponse>> {
+        const url = `${this.baseUrl}/internal/users/${encodeURIComponent(cognitoSub)}/injectable-attributes?tenantId=${encodeURIComponent(tenantId)}`;
+        return await this.httpRequest.get(url);
+    }
 }

package/src/platformRbac/api/interfaces/IPlatformRbacBusinessApi.ts

@@ -9,6 +9,7 @@ import {
     AuthorizeRequest,
     AuthorizeResponse,
     EffectivePermissionsResponse,
+    InjectableUserAttributesResponse,
 } from "@fiado/type-kit/bin/platformRbac/index.js";
 
 /**
@@ -81,4 +82,14 @@ export interface IPlatformRbacBusinessApi {
         cognitoSub: string,
         tenantId?: string,
     ): Promise<ApiGatewayResponse<EffectivePermissionsResponse>>;
+
+    /**
+     * GET /internal/users/{cognitoSub}/injectable-attributes?tenantId= — devuelve los campos
+     * personalizados del usuario marcados injectToToken (ya filtrados y con valor). Invocado por
+     * jwt-inyector-trigger para estampar el claim `customAttributes`. DEC-RBAC-022.
+     */
+    getInjectableUserAttributes(
+        cognitoSub: string,
+        tenantId: string,
+    ): Promise<ApiGatewayResponse<InjectableUserAttributesResponse>>;
 }