@fiado/api-invoker 4.5.0 → 4.6.0

package/bin/container.config.js

@@ -103,6 +103,7 @@ const BenefitsMarketplaceApi_1 = __importDefault(require("./benefits-marketplace
 // UniTeller remittance connector (Fase 2 remittance)
 const uniteller_connector_1 = require("./uniteller-connector");
 const CognitoBackofficeConnectorApi_1 = __importDefault(require("./cognitoBackofficeConnector/api/CognitoBackofficeConnectorApi"));
+const PlatformRbacBusinessApi_1 = __importDefault(require("./platformRbac/api/PlatformRbacBusinessApi"));
 exports.apiInvokerBindings = new inversify_1.ContainerModule(({ bind }) => {
     // UTILS bindings
     bind("InvokerUtils").to(InvokerUtils_1.InvokerUtils);
@@ -210,4 +211,6 @@ exports.apiInvokerBindings = new inversify_1.ContainerModule(({ bind }) => {
     bind("IUnitellerConnectorApi").to(uniteller_connector_1.UnitellerConnectorApi);
     // Cognito backoffice connector (Fase 0 SureKeep)
     bind("ICognitoBackofficeConnectorApi").to(CognitoBackofficeConnectorApi_1.default);
+    // Platform RBAC business — Custom Auth Challenge endpoints (Fase 0 SureKeep)
+    bind("IPlatformRbacBusinessApi").to(PlatformRbacBusinessApi_1.default);
 });

package/bin/index.d.ts

@@ -74,3 +74,4 @@ export * from "./ai-engine-connector";
 export * from "./benefits-marketplace";
 export * from "./milestone-business";
 export * from "./cognitoBackofficeConnector";
+export * from "./platformRbac";

package/bin/index.js

@@ -90,3 +90,4 @@ __exportStar(require("./ai-engine-connector"), exports);
 __exportStar(require("./benefits-marketplace"), exports);
 __exportStar(require("./milestone-business"), exports);
 __exportStar(require("./cognitoBackofficeConnector"), exports);
+__exportStar(require("./platformRbac"), exports);

package/bin/platformRbac/api/PlatformRbacBusinessApi.d.ts

@@ -0,0 +1,26 @@
+import { IHttpRequest } from "@fiado/http-client";
+import { ApiGatewayResponse } from "@fiado/gateway-adapter";
+import { DefineNextChallengeRequest, DefineNextChallengeResponse, PrepareChallengeRequest, PrepareChallengeResponse, VerifyChallengeRequest, VerifyChallengeResponse } from "@fiado/type-kit/bin/platformRbac";
+import { IPlatformRbacBusinessApi } from "./interfaces/IPlatformRbacBusinessApi";
+/**
+ * Publisher HTTP del lambda `platform-rbac-business` (componente 06 SureKeep Fase 0)
+ * para los 3 endpoints internos del Custom Auth Challenge flow.
+ *
+ * Env var requerida en el consumer: `PLATFORM_RBAC_BUSINESS_URL`.
+ * El template.yml del consumer la setea con:
+ *
+ *   PLATFORM_RBAC_BUSINESS_URL: '{{resolve:ssm:platform-rbac-business}}'
+ *
+ * Convención CLAUDE.md global: SSM key = nombre del lambda owner de la URL.
+ * El rbac-business publica su URL en SSM bajo la key `platform-rbac-business`
+ * vía el `post_build` del buildspec.yml estándar Fiado.
+ */
+export default class PlatformRbacBusinessApi implements IPlatformRbacBusinessApi {
+    private httpRequest;
+    /** URL base del lambda. Leída de env var en cold start del consumer. */
+    private readonly baseUrl;
+    constructor(httpRequest: IHttpRequest);
+    defineNextChallenge(input: DefineNextChallengeRequest): Promise<ApiGatewayResponse<DefineNextChallengeResponse>>;
+    prepareChallenge(input: PrepareChallengeRequest): Promise<ApiGatewayResponse<PrepareChallengeResponse>>;
+    verifyChallenge(input: VerifyChallengeRequest): Promise<ApiGatewayResponse<VerifyChallengeResponse>>;
+}

package/bin/platformRbac/api/PlatformRbacBusinessApi.js

@@ -0,0 +1,54 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+const inversify_1 = require("inversify");
+/**
+ * Publisher HTTP del lambda `platform-rbac-business` (componente 06 SureKeep Fase 0)
+ * para los 3 endpoints internos del Custom Auth Challenge flow.
+ *
+ * Env var requerida en el consumer: `PLATFORM_RBAC_BUSINESS_URL`.
+ * El template.yml del consumer la setea con:
+ *
+ *   PLATFORM_RBAC_BUSINESS_URL: '{{resolve:ssm:platform-rbac-business}}'
+ *
+ * Convención CLAUDE.md global: SSM key = nombre del lambda owner de la URL.
+ * El rbac-business publica su URL en SSM bajo la key `platform-rbac-business`
+ * vía el `post_build` del buildspec.yml estándar Fiado.
+ */
+let PlatformRbacBusinessApi = class PlatformRbacBusinessApi {
+    httpRequest;
+    /** URL base del lambda. Leída de env var en cold start del consumer. */
+    baseUrl = process.env.PLATFORM_RBAC_BUSINESS_URL || "";
+    constructor(httpRequest) {
+        this.httpRequest = httpRequest;
+    }
+    async defineNextChallenge(input) {
+        const url = `${this.baseUrl}/internal/auth/define-next-challenge`;
+        return await this.httpRequest.post(url, input);
+    }
+    async prepareChallenge(input) {
+        const url = `${this.baseUrl}/internal/auth/prepare-challenge`;
+        return await this.httpRequest.post(url, input);
+    }
+    async verifyChallenge(input) {
+        const url = `${this.baseUrl}/internal/auth/verify-challenge`;
+        return await this.httpRequest.post(url, input);
+    }
+};
+PlatformRbacBusinessApi = __decorate([
+    (0, inversify_1.injectable)(),
+    __param(0, (0, inversify_1.inject)("IHttpRequest")),
+    __metadata("design:paramtypes", [Object])
+], PlatformRbacBusinessApi);
+exports.default = PlatformRbacBusinessApi;

package/bin/platformRbac/api/interfaces/IPlatformRbacBusinessApi.d.ts

@@ -0,0 +1,40 @@
+import { ApiGatewayResponse } from "@fiado/gateway-adapter";
+import { DefineNextChallengeRequest, DefineNextChallengeResponse, PrepareChallengeRequest, PrepareChallengeResponse, VerifyChallengeRequest, VerifyChallengeResponse } from "@fiado/type-kit/bin/platformRbac";
+/**
+ * Contrato del publisher HTTP del lambda `platform-rbac-business` (componente 06 SureKeep Fase 0)
+ * para los 3 endpoints internos del Custom Auth Challenge flow (MFA).
+ *
+ * Consumidores: `cognito-backoffice-connector` desde los Lambda Triggers
+ * `defineAuthChallenge`, `createAuthChallenge` y `verifyAuthChallengeResponse`
+ * configurados en cada User Pool aprovisionado por la saga `TenantOnboardingManager`.
+ *
+ * Patrón de retorno: `Promise<ApiGatewayResponse<T>>` sin unwrap (v4 canonical Fiado).
+ * El consumer accede `result.body.data` para llegar al payload tipado.
+ *
+ * Env var requerida en el consumer: `PLATFORM_RBAC_BUSINESS_URL`.
+ * El template.yml del consumer la setea con:
+ *
+ *   PLATFORM_RBAC_BUSINESS_URL: '{{resolve:ssm:platform-rbac-business}}'
+ *
+ * Convención CLAUDE.md global: SSM key = nombre del lambda owner de la URL.
+ */
+export interface IPlatformRbacBusinessApi {
+    /**
+     * POST /internal/auth/define-next-challenge — decide el próximo challenge MFA
+     * según los resultados acumulados en `session`. Invocado por el trigger
+     * `defineAuthChallenge` en cada paso del Custom Auth Challenge flow.
+     */
+    defineNextChallenge(input: DefineNextChallengeRequest): Promise<ApiGatewayResponse<DefineNextChallengeResponse>>;
+    /**
+     * POST /internal/auth/prepare-challenge — prepara el challenge (genera y envía
+     * código OTP por email/SMS, o computa el `privateChallenge` para TOTP).
+     * Invocado por el trigger `createAuthChallenge`.
+     */
+    prepareChallenge(input: PrepareChallengeRequest): Promise<ApiGatewayResponse<PrepareChallengeResponse>>;
+    /**
+     * POST /internal/auth/verify-challenge — verifica la respuesta del usuario
+     * contra el `privateChallenge`. Invocado por el trigger
+     * `verifyAuthChallengeResponse`.
+     */
+    verifyChallenge(input: VerifyChallengeRequest): Promise<ApiGatewayResponse<VerifyChallengeResponse>>;
+}

package/bin/platformRbac/api/interfaces/IPlatformRbacBusinessApi.js

@@ -0,0 +1,2 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });

package/bin/platformRbac/index.d.ts

@@ -0,0 +1,2 @@
+export * from "./api/interfaces/IPlatformRbacBusinessApi";
+export { default as PlatformRbacBusinessApi } from "./api/PlatformRbacBusinessApi";

package/bin/platformRbac/index.js

@@ -0,0 +1,23 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.PlatformRbacBusinessApi = void 0;
+__exportStar(require("./api/interfaces/IPlatformRbacBusinessApi"), exports);
+var PlatformRbacBusinessApi_1 = require("./api/PlatformRbacBusinessApi");
+Object.defineProperty(exports, "PlatformRbacBusinessApi", { enumerable: true, get: function () { return __importDefault(PlatformRbacBusinessApi_1).default; } });

package/docs/TECH_DEBT.md

@@ -0,0 +1,16 @@
+# TECH_DEBT — @fiado/api-invoker
+
+Registro vivo de deudas conscientes del repo. Cada entrada con ID estable `TD-AI-NNN` y los 4 campos canónicos (contexto / asunción / condición para cerrar / bloqueante).
+
+## TD-AI-001 — 2026-05-29 — npm link @fiado/type-kit activo
+
+- **Contexto:** `node_modules/@fiado/type-kit` es symlink local a `C:/Users/Fiado/Documents/Repos/fiado-type-kit/` (v3.43.1) — el publicado en CodeArtifact es v3.42.0 sin el módulo `platformRbac` que el Publisher `PlatformRbacBusinessApi` nuevo (`src/platformRbac/`) importa. El link se activó para iterar localmente sin publish prematuro del type-kit (decisión del user en el plan `2026-05-29-custom-auth-challenge-mfa.md`).
+- **Asunción / pendiente:** el `npm run build` y `tsc --noEmit` funcionan con el link, pero CI y cualquier `npm install` fresh van a resolver desde CodeArtifact (3.42.0) y fallar con `TS2307: Cannot find module '@fiado/type-kit/bin/platformRbac'` en los 2 archivos nuevos del Publisher.
+- **Condición para cerrar:** secuencia obligatoria al final del plan de auth (después de todas las tasks):
+  1. `cd /c/Users/Fiado/Documents/Repos/fiado-type-kit && npm publish` (Andres ejecuta).
+  2. `cd /c/Users/Fiado/fiado-workspace/fiado-api-invoker && npm unlink @fiado/type-kit`.
+  3. Actualizar `package.json` del api-invoker con la version publicada del type-kit (`"@fiado/type-kit": "^3.43.1"`).
+  4. `npm install` fresh.
+  5. `npx tsc --noEmit` verde.
+  6. `npm publish` del api-invoker en su nueva version (Andres ejecuta).
+- **Bloqueante:** SÍ — el primer deploy productivo o CI run del api-invoker (y de cualquier consumer que bumpee a la 4.6.0) rompe si el publish del type-kit NO se materializó antes.

package/package.json

@@ -1,36 +1,36 @@
-{
-  "name": "@fiado/api-invoker",
-  "version": "4.5.0",
-  "description": "Sirve como un puente entre diferentes funciones lambda, facilitando la comunicación entre ellas a través de invocaciones http",
-  "main": "bin/index.js",
-  "types": "bin/index.d.ts",
-  "scripts": {
-    "test": "node --experimental-vm-modules node_modules/jest/bin/jest.js",
-    "build": "tsc",
-    "prepublishOnly": "npm run build"
-  },
-  "keywords": [],
-  "author": "Fiado Inc",
-  "license": "ISC",
-  "dependencies": {
-    "@aws-sdk/client-sqs": "^3.919.0",
-    "@fiado/gateway-adapter": "^2.0.0",
-    "@fiado/http-client": "^2.0.0",
-    "@fiado/logger": "^1.0.3",
-    "@fiado/type-kit": "^3.30.0",
-    "dotenv": "^16.4.7"
-  },
-  "peerDependencies": {
-    "inversify": "^8.0.0",
-    "reflect-metadata": "^0.2.2"
-  },
-  "devDependencies": {
-    "@types/jest": "^30.0.0",
-    "@types/node": "^25.9.1",
-    "inversify": "^8.1.0",
-    "jest": "^30.4.2",
-    "reflect-metadata": "^0.2.2",
-    "ts-jest": "^29.4.11",
-    "typescript": "^6.0.3"
-  }
-}
+{
+  "name": "@fiado/api-invoker",
+  "version": "4.6.0",
+  "description": "Sirve como un puente entre diferentes funciones lambda, facilitando la comunicación entre ellas a través de invocaciones http",
+  "main": "bin/index.js",
+  "types": "bin/index.d.ts",
+  "scripts": {
+    "test": "node --experimental-vm-modules node_modules/jest/bin/jest.js",
+    "build": "tsc",
+    "prepublishOnly": "npm run build"
+  },
+  "keywords": [],
+  "author": "Fiado Inc",
+  "license": "ISC",
+  "dependencies": {
+    "@aws-sdk/client-sqs": "^3.919.0",
+    "@fiado/gateway-adapter": "^2.0.0",
+    "@fiado/http-client": "^2.0.0",
+    "@fiado/logger": "^1.0.3",
+    "@fiado/type-kit": "^3.30.0",
+    "dotenv": "^16.4.7"
+  },
+  "peerDependencies": {
+    "inversify": "^8.0.0",
+    "reflect-metadata": "^0.2.2"
+  },
+  "devDependencies": {
+    "@types/jest": "^30.0.0",
+    "@types/node": "^25.9.1",
+    "inversify": "^8.1.0",
+    "jest": "^30.4.2",
+    "reflect-metadata": "^0.2.2",
+    "ts-jest": "^29.4.11",
+    "typescript": "^6.0.3"
+  }
+}

package/src/account-beneficiary/AccountBeneficiaryApi.ts

@@ -1,19 +1,19 @@
-import { inject, injectable } from "inversify";
-import { IAccountBeneficiaryApi } from "./interfaces/IAccountBeneficiaryApi";
-import { IHttpRequest } from "@fiado/http-client";
-import { AccountBeneficiaryCreateRequest } from "@fiado/type-kit/bin/beneficiary";
-import { CountryId } from "@fiado/type-kit/bin/country";
-
-
-@injectable()
-export class AccountBeneficiaryApi implements IAccountBeneficiaryApi {
-    private readonly baseUrl = process.env.ACCOUNT_BENEFICIARY_LAMBDA_URL || "";
-
-    constructor(@inject("IHttpRequest") private httpRequest: IHttpRequest) {
-    }
-
-    async create(directoryId: string, countryId: CountryId, input: AccountBeneficiaryCreateRequest[]): Promise<void> {
-        const url = `${this.baseUrl}${countryId}/users/${directoryId}`;
-        return await this.httpRequest.post(url, input);
-    }
+import { inject, injectable } from "inversify";
+import { IAccountBeneficiaryApi } from "./interfaces/IAccountBeneficiaryApi";
+import { IHttpRequest } from "@fiado/http-client";
+import { AccountBeneficiaryCreateRequest } from "@fiado/type-kit/bin/beneficiary";
+import { CountryId } from "@fiado/type-kit/bin/country";
+
+
+@injectable()
+export class AccountBeneficiaryApi implements IAccountBeneficiaryApi {
+    private readonly baseUrl = process.env.ACCOUNT_BENEFICIARY_LAMBDA_URL || "";
+
+    constructor(@inject("IHttpRequest") private httpRequest: IHttpRequest) {
+    }
+
+    async create(directoryId: string, countryId: CountryId, input: AccountBeneficiaryCreateRequest[]): Promise<void> {
+        const url = `${this.baseUrl}${countryId}/users/${directoryId}`;
+        return await this.httpRequest.post(url, input);
+    }
 }

package/src/account-beneficiary/index.ts

@@ -1,3 +1,3 @@
-
-export * from './interfaces/IAccountBeneficiaryApi';
+
+export * from './interfaces/IAccountBeneficiaryApi';
 export * from './AccountBeneficiaryApi';

package/src/account-beneficiary/interfaces/IAccountBeneficiaryApi.ts

@@ -1,8 +1,8 @@
-import { AccountBeneficiaryCreateRequest } from "@fiado/type-kit/bin/beneficiary";
-import { CountryId } from "@fiado/type-kit/bin/country";
-
-export interface IAccountBeneficiaryApi {
-
-    create(directoryId: string, countryId: CountryId, input: AccountBeneficiaryCreateRequest[]): Promise<void>;
-
+import { AccountBeneficiaryCreateRequest } from "@fiado/type-kit/bin/beneficiary";
+import { CountryId } from "@fiado/type-kit/bin/country";
+
+export interface IAccountBeneficiaryApi {
+
+    create(directoryId: string, countryId: CountryId, input: AccountBeneficiaryCreateRequest[]): Promise<void>;
+
 }

package/src/account-fiadoinc/AccountFiadoIncApi.ts

@@ -1,127 +1,127 @@
-import { IHttpRequest } from "@fiado/http-client";
-import {
-  AccountCreateRequest,
-  AccountCreateResponse,
-  AccountUpdateBalanceRequest,
-  AccountUpdateRequest,
-  ExecuteP2pOperationRequest,
-  ExecuteP2pOperationResponse,
-  ExecutePocketOperationRequest,
-  ExecutePocketOperationResponse,
-  GetAccountResponse,
-  GetAccountResponseList,
-  GetBankAccountUserResponse,
-  GetPocketBalanceResponse
-} from "@fiado/type-kit/bin/account";
-import FiadoApiResponse from "@fiado/type-kit/bin/apiResponse/dtos/FiadoApiResponse";
-import { Provider, ProviderDocumentUploadRequest } from "@fiado/type-kit/bin/provider";
-import { inject, injectable } from "inversify";
-import { IAccountFiadoIncApi } from "./interfaces/IAccountFiadoIncApi";
-import { IPublisher } from "./queue/interfaces/IPublisher";
-
-@injectable()
-export default class AccountFiadoIncApi implements IAccountFiadoIncApi {
-
-  private readonly baseUrl = process.env.ACCOUNT_FIADOINC_LAMBDA_URL || "";
-
-  constructor(
-    @inject("IHttpRequest") private readonly httpRequest: IHttpRequest,
-    @inject("IPublisher") private readonly publisher: IPublisher
-  ) {
-  }
-  async replaceExternalAccount(provider: Provider, directoryId: string, externalAccountId: string, isPrincipal: boolean): Promise<FiadoApiResponse<void>> {
-    const url = `${this.baseUrl}${provider}/account/replace`;
-    return await this.httpRequest.post(url, {directoryId,externalAccountId,isPrincipal});
-  }
-
-  /** ACCOUNTS **/
-  async confirmUserCreation(provider: Provider, externalUserId: string, request: AccountCreateRequest): Promise<FiadoApiResponse<AccountCreateResponse>> {
-    const url = `${this.baseUrl}${provider}/users/confirm/${externalUserId}`;
-    return await this.httpRequest.put(url, request);
-  }
-
-  async createAccount(provider: Provider, data: AccountCreateRequest): Promise<FiadoApiResponse<AccountCreateResponse>> {
-    const url = `${this.baseUrl}${provider}`;
-    return await this.httpRequest.post(url, data);
-  }
-
-  async getAccountByDirectoryId(provider: Provider, directoryId: string): Promise<FiadoApiResponse<GetAccountResponse[]>> {
-    const url = `${this.baseUrl}${provider}/users/${directoryId}/`;
-    return await this.httpRequest.get(url);
-  }
-
-  async getAccountByExternalAccountId(provider: Provider, externalAccountId: string): Promise<FiadoApiResponse<GetAccountResponse[]>> {
-    const url = `${this.baseUrl}${provider}/accounts/external/${externalAccountId}`;
-    return await this.httpRequest.get(url);
-  }
-
-  async getExternalUser(provider: Provider, directoryId: string): Promise<FiadoApiResponse<GetBankAccountUserResponse>> {
-    const url = `${this.baseUrl}${provider}/users/${directoryId}/external`;
-    return await this.httpRequest.get(url);
-  }
-
-  async scanAllAccounts(provider: Provider | 'ALL', limit?: number, lastEvaluatedKey?: string): Promise<FiadoApiResponse<GetAccountResponseList>> {
-    const queryParams = new URLSearchParams();
-    queryParams.append('provider', provider);
-    if (limit) queryParams.append('limit', limit.toString());
-    if (lastEvaluatedKey) queryParams.append('lastEvaluatedKey', lastEvaluatedKey);
-
-    const url = `${this.baseUrl}accounts/scan?${queryParams.toString()}`;
-    return await this.httpRequest.get(url);
-  }
-
-  async scanAccountsByDateRange(provider: Provider | 'ALL', startDate: number, endDate: number, limit?: number, lastEvaluatedKey?: string): Promise<FiadoApiResponse<GetAccountResponseList>> {
-    const queryParams = new URLSearchParams();
-    queryParams.append('provider', provider);
-    queryParams.append('startDate', startDate.toString());
-    queryParams.append('endDate', endDate.toString());
-    if (limit) queryParams.append('limit', limit.toString());
-    if (lastEvaluatedKey) queryParams.append('lastEvaluatedKey', lastEvaluatedKey);
-
-    const url = `${this.baseUrl}accounts/scan/by-date-range?${queryParams.toString()}`;
-    return await this.httpRequest.get(url);
-  }
-
-  /** POCKETS **/
-  async getPocketBalance(provider: Provider, directoryId: string): Promise<FiadoApiResponse<GetPocketBalanceResponse>> {
-    const url = `${this.baseUrl}${provider}/pockets/users/${directoryId}/balance`;
-    return await this.httpRequest.get(url);
-  }
-
-  async updatePocketBalance(provider: Provider, pocketId: string, request: AccountUpdateBalanceRequest): Promise<FiadoApiResponse<null>> {
-    const url = `${this.baseUrl}${provider}/pockets/${pocketId}/balance`;
-    return await this.httpRequest.put(url, request);
-  }
-
-  async getPocketBalanceById(provider: Provider, pocketId: string): Promise<FiadoApiResponse<GetPocketBalanceResponse>> {
-    const url = `${this.baseUrl}${provider}/pockets/${pocketId}/balance`;
-    return await this.httpRequest.get(url);
-  }
-
-  async deletePocket(provider: Provider, pocketId: string): Promise<FiadoApiResponse<void>> {
-    const url = `${this.baseUrl}${provider}/pockets/${pocketId}`;
-    return await this.httpRequest.delete(url);
-  }
-
-  /** TRANSACTIONS **/
-
-  async executeP2pTransaction(provider: Provider, request: ExecuteP2pOperationRequest): Promise<FiadoApiResponse<ExecuteP2pOperationResponse>> {
-    const url = `${this.baseUrl}${provider}/p2p/send`;
-    return await this.httpRequest.post(url, request);
-  }
-
-  async executePocketTransaction(provider: Provider, pocketId: string, request: ExecutePocketOperationRequest): Promise<FiadoApiResponse<ExecutePocketOperationResponse[]>> {
-    const url = `${this.baseUrl}${provider}/pockets/${pocketId}/transaction`;
-    return await this.httpRequest.post(url, request);
-  }
-
-  /** USERS **/
-  async update(provider: Provider, directoryId: string, data: AccountUpdateRequest): Promise<FiadoApiResponse<void>> {
-    const url = `${this.baseUrl}${provider}/users/${directoryId}`;
-    return await this.httpRequest.put(url, data);
-  }
-
-  async publish(provider: Provider, params: { externalUserId: string; input: ProviderDocumentUploadRequest }): Promise<void> {
-    return await this.publisher.publish(provider, params);
-  }
+import { IHttpRequest } from "@fiado/http-client";
+import {
+  AccountCreateRequest,
+  AccountCreateResponse,
+  AccountUpdateBalanceRequest,
+  AccountUpdateRequest,
+  ExecuteP2pOperationRequest,
+  ExecuteP2pOperationResponse,
+  ExecutePocketOperationRequest,
+  ExecutePocketOperationResponse,
+  GetAccountResponse,
+  GetAccountResponseList,
+  GetBankAccountUserResponse,
+  GetPocketBalanceResponse
+} from "@fiado/type-kit/bin/account";
+import FiadoApiResponse from "@fiado/type-kit/bin/apiResponse/dtos/FiadoApiResponse";
+import { Provider, ProviderDocumentUploadRequest } from "@fiado/type-kit/bin/provider";
+import { inject, injectable } from "inversify";
+import { IAccountFiadoIncApi } from "./interfaces/IAccountFiadoIncApi";
+import { IPublisher } from "./queue/interfaces/IPublisher";
+
+@injectable()
+export default class AccountFiadoIncApi implements IAccountFiadoIncApi {
+
+  private readonly baseUrl = process.env.ACCOUNT_FIADOINC_LAMBDA_URL || "";
+
+  constructor(
+    @inject("IHttpRequest") private readonly httpRequest: IHttpRequest,
+    @inject("IPublisher") private readonly publisher: IPublisher
+  ) {
+  }
+  async replaceExternalAccount(provider: Provider, directoryId: string, externalAccountId: string, isPrincipal: boolean): Promise<FiadoApiResponse<void>> {
+    const url = `${this.baseUrl}${provider}/account/replace`;
+    return await this.httpRequest.post(url, {directoryId,externalAccountId,isPrincipal});
+  }
+
+  /** ACCOUNTS **/
+  async confirmUserCreation(provider: Provider, externalUserId: string, request: AccountCreateRequest): Promise<FiadoApiResponse<AccountCreateResponse>> {
+    const url = `${this.baseUrl}${provider}/users/confirm/${externalUserId}`;
+    return await this.httpRequest.put(url, request);
+  }
+
+  async createAccount(provider: Provider, data: AccountCreateRequest): Promise<FiadoApiResponse<AccountCreateResponse>> {
+    const url = `${this.baseUrl}${provider}`;
+    return await this.httpRequest.post(url, data);
+  }
+
+  async getAccountByDirectoryId(provider: Provider, directoryId: string): Promise<FiadoApiResponse<GetAccountResponse[]>> {
+    const url = `${this.baseUrl}${provider}/users/${directoryId}/`;
+    return await this.httpRequest.get(url);
+  }
+
+  async getAccountByExternalAccountId(provider: Provider, externalAccountId: string): Promise<FiadoApiResponse<GetAccountResponse[]>> {
+    const url = `${this.baseUrl}${provider}/accounts/external/${externalAccountId}`;
+    return await this.httpRequest.get(url);
+  }
+
+  async getExternalUser(provider: Provider, directoryId: string): Promise<FiadoApiResponse<GetBankAccountUserResponse>> {
+    const url = `${this.baseUrl}${provider}/users/${directoryId}/external`;
+    return await this.httpRequest.get(url);
+  }
+
+  async scanAllAccounts(provider: Provider | 'ALL', limit?: number, lastEvaluatedKey?: string): Promise<FiadoApiResponse<GetAccountResponseList>> {
+    const queryParams = new URLSearchParams();
+    queryParams.append('provider', provider);
+    if (limit) queryParams.append('limit', limit.toString());
+    if (lastEvaluatedKey) queryParams.append('lastEvaluatedKey', lastEvaluatedKey);
+
+    const url = `${this.baseUrl}accounts/scan?${queryParams.toString()}`;
+    return await this.httpRequest.get(url);
+  }
+
+  async scanAccountsByDateRange(provider: Provider | 'ALL', startDate: number, endDate: number, limit?: number, lastEvaluatedKey?: string): Promise<FiadoApiResponse<GetAccountResponseList>> {
+    const queryParams = new URLSearchParams();
+    queryParams.append('provider', provider);
+    queryParams.append('startDate', startDate.toString());
+    queryParams.append('endDate', endDate.toString());
+    if (limit) queryParams.append('limit', limit.toString());
+    if (lastEvaluatedKey) queryParams.append('lastEvaluatedKey', lastEvaluatedKey);
+
+    const url = `${this.baseUrl}accounts/scan/by-date-range?${queryParams.toString()}`;
+    return await this.httpRequest.get(url);
+  }
+
+  /** POCKETS **/
+  async getPocketBalance(provider: Provider, directoryId: string): Promise<FiadoApiResponse<GetPocketBalanceResponse>> {
+    const url = `${this.baseUrl}${provider}/pockets/users/${directoryId}/balance`;
+    return await this.httpRequest.get(url);
+  }
+
+  async updatePocketBalance(provider: Provider, pocketId: string, request: AccountUpdateBalanceRequest): Promise<FiadoApiResponse<null>> {
+    const url = `${this.baseUrl}${provider}/pockets/${pocketId}/balance`;
+    return await this.httpRequest.put(url, request);
+  }
+
+  async getPocketBalanceById(provider: Provider, pocketId: string): Promise<FiadoApiResponse<GetPocketBalanceResponse>> {
+    const url = `${this.baseUrl}${provider}/pockets/${pocketId}/balance`;
+    return await this.httpRequest.get(url);
+  }
+
+  async deletePocket(provider: Provider, pocketId: string): Promise<FiadoApiResponse<void>> {
+    const url = `${this.baseUrl}${provider}/pockets/${pocketId}`;
+    return await this.httpRequest.delete(url);
+  }
+
+  /** TRANSACTIONS **/
+
+  async executeP2pTransaction(provider: Provider, request: ExecuteP2pOperationRequest): Promise<FiadoApiResponse<ExecuteP2pOperationResponse>> {
+    const url = `${this.baseUrl}${provider}/p2p/send`;
+    return await this.httpRequest.post(url, request);
+  }
+
+  async executePocketTransaction(provider: Provider, pocketId: string, request: ExecutePocketOperationRequest): Promise<FiadoApiResponse<ExecutePocketOperationResponse[]>> {
+    const url = `${this.baseUrl}${provider}/pockets/${pocketId}/transaction`;
+    return await this.httpRequest.post(url, request);
+  }
+
+  /** USERS **/
+  async update(provider: Provider, directoryId: string, data: AccountUpdateRequest): Promise<FiadoApiResponse<void>> {
+    const url = `${this.baseUrl}${provider}/users/${directoryId}`;
+    return await this.httpRequest.put(url, data);
+  }
+
+  async publish(provider: Provider, params: { externalUserId: string; input: ProviderDocumentUploadRequest }): Promise<void> {
+    return await this.publisher.publish(provider, params);
+  }
 }

package/src/account-fiadoinc/index.ts

@@ -1,5 +1,5 @@
-export * from './interfaces/IAccountFiadoIncApi';
-export * from './AccountFiadoIncApi';
-
-export * from './queue/interfaces/IPublisher';
+export * from './interfaces/IAccountFiadoIncApi';
+export * from './AccountFiadoIncApi';
+
+export * from './queue/interfaces/IPublisher';
 export * from './queue/Publisher';