@fiado/api-invoker 4.39.0 → 4.41.0

package/bin/platformRbac/resolver/ApiInvokerPermissionResolver.js

@@ -48,8 +48,19 @@ let ApiInvokerPermissionResolver = class ApiInvokerPermissionResolver {
         // en el adapter, enforceRbac mapea solo PermissionDeniedError a 403; este error se re-lanza -> 5xx.
         // Es fail-closed (no concede), NO un 403, y es deliberado: un fallo de red NO debe verse como
         // "usuario sin permisos". NUNCA devolver { assignments: [] } en un catch.
-        const resp = await this._api.resolvePermissions(input);
-        const resolved = resp.body;
+        //
+        // SHAPE (TD-AI-003): @fiado/http-client (.post) devuelve `response.data` = el BODY HTTP crudo del
+        // ApiResponse de rbac, o sea `{ code, data, msg }` — NO un ApiGatewayResponse `{ statusCode, body }`
+        // (el tipo de retorno del publisher es histórico y no refleja el runtime). El ResolvedPermissions
+        // viene en `.data`. Leer `.body` daba undefined → crash en enforceRbac. Ver docs/TECH_DEBT.md.
+        const resp = (await this._api.resolvePermissions(input));
+        const resolved = resp?.data;
+        // Fail-closed (DEC-RBAC-071): si rbac no devolvió un payload válido (403 de PRIVATE/VPC, ruta
+        // inexistente, shape inesperado), NO devolver undefined (rompería enforceRbac con TypeError) →
+        // propagar para que el adapter deny. tenantId siempre es string en un ResolvedPermissions ('' = deny).
+        if (!resolved || typeof resolved.tenantId !== "string") {
+            throw new Error("ApiInvokerPermissionResolver: respuesta de rbac sin ResolvedPermissions válido (resolvePermissions)");
+        }
         if (cacheable)
             this._cache.set(key, resolved);
         return resolved;

package/bin/uniteller-connector/api/UnitellerConnectorApi.d.ts

@@ -1,7 +1,7 @@
 import type { IHttpRequest } from "@fiado/http-client";
 import { ApiGatewayResponse } from "@fiado/gateway-adapter";
 import { ConnectorCatalogItem } from "@fiado/type-kit/bin/benefitCenter/index.js";
-import { RemittanceAddBeneficiaryRequest, RemittanceBackofficeDashboardSummary, RemittanceBackofficeStats, RemittanceBackofficeStatsPeriod, RemittanceBackofficeTransaction, RemittanceBackofficeTxListResponse, RemittanceBackofficeUserDetail, RemittanceBackofficeUserListResponse, RemittanceBeneficiary, RemittanceCancelRequest, RemittanceCancelResponse, RemittanceHomeResponse, RemittanceListBeneficiariesResponse, RemittanceOnboardRequest, RemittanceOnboardResponse, RemittancePayRequest, RemittancePayResponse, RemittancePayerAdditionalFieldDto, RemittancePayerBranchDto, RemittancePayerDto, RemittanceQuoteRequest, RemittanceQuoteResponse, RemittanceSecurityQuestionsResponse, RemittanceSendPreviewRequest, RemittanceSendPreviewResponse, RemittanceSmsRequest, RemittanceStateDto, RemittanceTransactionDetail, RemittanceTransactionReceipt, RemittanceTransactionsListRequest, RemittanceTransactionsListResponse, RemittanceUpdateBeneficiaryRequest } from "@fiado/type-kit/bin/remittance/index.js";
+import { RemittanceAddBeneficiaryRequest, RemittanceBackofficeDashboardSummary, RemittanceBackofficeStats, RemittanceBackofficeStatsPeriod, RemittanceBackofficeTransaction, RemittanceBackofficeTxListResponse, RemittanceBackofficeUserDetail, RemittanceBackofficeUserListResponse, RemittanceBeneficiary, RemittanceCancelRequest, RemittanceCancelResponse, RemittanceHomeResponse, RemittanceListBeneficiariesResponse, RemittanceOnboardRequest, RemittanceOnboardResponse, RemittancePayRequest, RemittancePayResponse, RemittancePayerAdditionalFieldDto, RemittancePayerBranchDto, RemittancePayerDto, RemittanceQuoteRequest, RemittanceQuoteResponse, RemittanceSecurityQuestionsResponse, RemittanceSendPreviewRequest, RemittanceSendPreviewResponse, RemittanceSmsRequest, RemittanceStateDto, RemittanceTransactionDetail, RemittanceTransactionReceipt, RemittanceTransactionsListRequest, RemittanceTransactionsListResponse, RemittanceUpdateBeneficiaryRequest, RemittanceUserLimits, RemittanceUserLimitsBatchResponse } from "@fiado/type-kit/bin/remittance/index.js";
 import { IUnitellerConnectorApi } from "./interfaces/IUnitellerConnectorApi.js";
 export default class UnitellerConnectorApi implements IUnitellerConnectorApi {
     private httpRequest;
@@ -65,4 +65,6 @@ export default class UnitellerConnectorApi implements IUnitellerConnectorApi {
     }): Promise<ApiGatewayResponse<RemittanceBackofficeTxListResponse>>;
     backofficeTransactionDetail(txNumber: string): Promise<ApiGatewayResponse<RemittanceBackofficeTransaction>>;
     backofficeStats(period: RemittanceBackofficeStatsPeriod): Promise<ApiGatewayResponse<RemittanceBackofficeStats>>;
+    backofficeUserLimits(directoryId: string): Promise<ApiGatewayResponse<RemittanceUserLimits>>;
+    backofficeUserLimitsBatch(directoryIds: string[]): Promise<ApiGatewayResponse<RemittanceUserLimitsBatchResponse>>;
 }

package/bin/uniteller-connector/api/UnitellerConnectorApi.js

@@ -141,6 +141,14 @@ let UnitellerConnectorApi = class UnitellerConnectorApi {
         const url = `${this.baseUrl}/backoffice/stats`;
         return await this.httpRequest.get(url, { period });
     }
+    async backofficeUserLimits(directoryId) {
+        const url = `${this.baseUrl}/backoffice/users/${encodeURIComponent(directoryId)}/limits`;
+        return await this.httpRequest.get(url);
+    }
+    async backofficeUserLimitsBatch(directoryIds) {
+        const url = `${this.baseUrl}/backoffice/users/limits`;
+        return await this.httpRequest.get(url, { directoryIds: directoryIds.join(",") });
+    }
 };
 UnitellerConnectorApi = __decorate([
     injectable(),

package/bin/uniteller-connector/api/interfaces/IUnitellerConnectorApi.d.ts

@@ -1,6 +1,6 @@
 import { ApiGatewayResponse } from "@fiado/gateway-adapter";
 import { ConnectorCatalogItem } from "@fiado/type-kit/bin/benefitCenter/index.js";
-import { RemittanceAddBeneficiaryRequest, RemittanceBackofficeDashboardSummary, RemittanceBackofficeStats, RemittanceBackofficeStatsPeriod, RemittanceBackofficeTransaction, RemittanceBackofficeTxListResponse, RemittanceBackofficeUserDetail, RemittanceBackofficeUserListResponse, RemittanceBeneficiary, RemittanceCancelRequest, RemittanceCancelResponse, RemittanceHomeResponse, RemittanceListBeneficiariesResponse, RemittanceOnboardRequest, RemittanceOnboardResponse, RemittancePayRequest, RemittancePayResponse, RemittancePayerAdditionalFieldDto, RemittancePayerBranchDto, RemittancePayerDto, RemittanceQuoteRequest, RemittanceQuoteResponse, RemittanceSecurityQuestionsResponse, RemittanceSendPreviewRequest, RemittanceSendPreviewResponse, RemittanceSmsRequest, RemittanceStateDto, RemittanceTransactionDetail, RemittanceTransactionReceipt, RemittanceTransactionsListRequest, RemittanceTransactionsListResponse, RemittanceUpdateBeneficiaryRequest } from "@fiado/type-kit/bin/remittance/index.js";
+import { RemittanceAddBeneficiaryRequest, RemittanceBackofficeDashboardSummary, RemittanceBackofficeStats, RemittanceBackofficeStatsPeriod, RemittanceBackofficeTransaction, RemittanceBackofficeTxListResponse, RemittanceBackofficeUserDetail, RemittanceBackofficeUserListResponse, RemittanceBeneficiary, RemittanceCancelRequest, RemittanceCancelResponse, RemittanceHomeResponse, RemittanceListBeneficiariesResponse, RemittanceOnboardRequest, RemittanceOnboardResponse, RemittancePayRequest, RemittancePayResponse, RemittancePayerAdditionalFieldDto, RemittancePayerBranchDto, RemittancePayerDto, RemittanceQuoteRequest, RemittanceQuoteResponse, RemittanceSecurityQuestionsResponse, RemittanceSendPreviewRequest, RemittanceSendPreviewResponse, RemittanceSmsRequest, RemittanceStateDto, RemittanceTransactionDetail, RemittanceTransactionReceipt, RemittanceTransactionsListRequest, RemittanceTransactionsListResponse, RemittanceUpdateBeneficiaryRequest, RemittanceUserLimits, RemittanceUserLimitsBatchResponse } from "@fiado/type-kit/bin/remittance/index.js";
 export interface IUnitellerConnectorApi {
     /** Estado del módulo remesas para un directoryId. */
     getHome(directoryId: string): Promise<ApiGatewayResponse<RemittanceHomeResponse>>;
@@ -108,4 +108,8 @@ export interface IUnitellerConnectorApi {
     }): Promise<ApiGatewayResponse<RemittanceBackofficeTxListResponse>>;
     backofficeTransactionDetail(txNumber: string): Promise<ApiGatewayResponse<RemittanceBackofficeTransaction>>;
     backofficeStats(period: RemittanceBackofficeStatsPeriod): Promise<ApiGatewayResponse<RemittanceBackofficeStats>>;
+    /** Límites por usuario (Operación · read-only): ventanas (límite del provider + usage) + nivel + discrepancia. */
+    backofficeUserLimits(directoryId: string): Promise<ApiGatewayResponse<RemittanceUserLimits>>;
+    /** Batch de límites para la tabla de Límites (CSV de directoryIds). */
+    backofficeUserLimitsBatch(directoryIds: string[]): Promise<ApiGatewayResponse<RemittanceUserLimitsBatchResponse>>;
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@fiado/api-invoker",
-  "version": "4.39.0",
+  "version": "4.41.0",
   "description": "Sirve como un puente entre diferentes funciones lambda, facilitando la comunicación entre ellas a través de invocaciones http",
   "type": "module",
   "main": "bin/index.js",
@@ -34,7 +34,7 @@
     "@fiado/gateway-adapter": "^3.9.0",
     "@fiado/http-client": "^2.0.1",
     "@fiado/logger": "^1.1.3",
-    "@fiado/type-kit": "^3.123.0",
+    "@fiado/type-kit": "^3.133.0",
     "dotenv": "^16.4.7"
   },
   "peerDependencies": {

package/src/platformRbac/resolver/ApiInvokerPermissionResolver.ts

@@ -40,8 +40,19 @@ export class ApiInvokerPermissionResolver {
         // en el adapter, enforceRbac mapea solo PermissionDeniedError a 403; este error se re-lanza -> 5xx.
         // Es fail-closed (no concede), NO un 403, y es deliberado: un fallo de red NO debe verse como
         // "usuario sin permisos". NUNCA devolver { assignments: [] } en un catch.
-        const resp = await this._api.resolvePermissions(input);
-        const resolved = resp.body;
+        //
+        // SHAPE (TD-AI-003): @fiado/http-client (.post) devuelve `response.data` = el BODY HTTP crudo del
+        // ApiResponse de rbac, o sea `{ code, data, msg }` — NO un ApiGatewayResponse `{ statusCode, body }`
+        // (el tipo de retorno del publisher es histórico y no refleja el runtime). El ResolvedPermissions
+        // viene en `.data`. Leer `.body` daba undefined → crash en enforceRbac. Ver docs/TECH_DEBT.md.
+        const resp = (await this._api.resolvePermissions(input)) as unknown as { data?: ResolvedPermissions };
+        const resolved = resp?.data;
+        // Fail-closed (DEC-RBAC-071): si rbac no devolvió un payload válido (403 de PRIVATE/VPC, ruta
+        // inexistente, shape inesperado), NO devolver undefined (rompería enforceRbac con TypeError) →
+        // propagar para que el adapter deny. tenantId siempre es string en un ResolvedPermissions ('' = deny).
+        if (!resolved || typeof resolved.tenantId !== "string") {
+            throw new Error("ApiInvokerPermissionResolver: respuesta de rbac sin ResolvedPermissions válido (resolvePermissions)");
+        }
         if (cacheable) this._cache.set(key, resolved);
         return resolved;
     }

package/src/uniteller-connector/api/UnitellerConnectorApi.ts

@@ -35,6 +35,8 @@ import {
     RemittanceTransactionsListRequest,
     RemittanceTransactionsListResponse,
     RemittanceUpdateBeneficiaryRequest,
+    RemittanceUserLimits,
+    RemittanceUserLimitsBatchResponse,
 } from "@fiado/type-kit/bin/remittance/index.js";
 import { IUnitellerConnectorApi } from "./interfaces/IUnitellerConnectorApi.js";
 
@@ -199,6 +201,16 @@ export default class UnitellerConnectorApi implements IUnitellerConnectorApi {
         const url = `${this.baseUrl}/backoffice/stats`;
         return await this.httpRequest.get(url, { period });
     }
+
+    async backofficeUserLimits(directoryId: string): Promise<ApiGatewayResponse<RemittanceUserLimits>> {
+        const url = `${this.baseUrl}/backoffice/users/${encodeURIComponent(directoryId)}/limits`;
+        return await this.httpRequest.get(url);
+    }
+
+    async backofficeUserLimitsBatch(directoryIds: string[]): Promise<ApiGatewayResponse<RemittanceUserLimitsBatchResponse>> {
+        const url = `${this.baseUrl}/backoffice/users/limits`;
+        return await this.httpRequest.get(url, { directoryIds: directoryIds.join(",") });
+    }
 }
 
 /** Quita las keys undefined para no mandar query params vacíos. */

package/src/uniteller-connector/api/interfaces/IUnitellerConnectorApi.ts

@@ -33,6 +33,8 @@ import {
     RemittanceTransactionsListRequest,
     RemittanceTransactionsListResponse,
     RemittanceUpdateBeneficiaryRequest,
+    RemittanceUserLimits,
+    RemittanceUserLimitsBatchResponse,
 } from "@fiado/type-kit/bin/remittance/index.js";
 
 export interface IUnitellerConnectorApi {
@@ -157,4 +159,8 @@ export interface IUnitellerConnectorApi {
     backofficeListTransactions(filters?: { txNumber?: string; directoryId?: string; status?: string; countryISO?: string; from?: string; to?: string; pageSize?: number; index?: string }): Promise<ApiGatewayResponse<RemittanceBackofficeTxListResponse>>;
     backofficeTransactionDetail(txNumber: string): Promise<ApiGatewayResponse<RemittanceBackofficeTransaction>>;
     backofficeStats(period: RemittanceBackofficeStatsPeriod): Promise<ApiGatewayResponse<RemittanceBackofficeStats>>;
+    /** Límites por usuario (Operación · read-only): ventanas (límite del provider + usage) + nivel + discrepancia. */
+    backofficeUserLimits(directoryId: string): Promise<ApiGatewayResponse<RemittanceUserLimits>>;
+    /** Batch de límites para la tabla de Límites (CSV de directoryIds). */
+    backofficeUserLimitsBatch(directoryIds: string[]): Promise<ApiGatewayResponse<RemittanceUserLimitsBatchResponse>>;
 }