@fiado/api-invoker 4.5.0 → 4.7.0

package/bin/container.config.js

@@ -103,6 +103,10 @@ const BenefitsMarketplaceApi_1 = __importDefault(require("./benefits-marketplace
 // UniTeller remittance connector (Fase 2 remittance)
 const uniteller_connector_1 = require("./uniteller-connector");
 const CognitoBackofficeConnectorApi_1 = __importDefault(require("./cognitoBackofficeConnector/api/CognitoBackofficeConnectorApi"));
+const PlatformRbacBusinessApi_1 = __importDefault(require("./platformRbac/api/PlatformRbacBusinessApi"));
+// Messages business — API client + OTP/notifications SQS publisher (Fase 0 SureKeep)
+const messages_business_1 = require("./messages-business");
+const MessagesBusinessPublisher_1 = __importDefault(require("./messages-business/queue/MessagesBusinessPublisher"));
 exports.apiInvokerBindings = new inversify_1.ContainerModule(({ bind }) => {
     // UTILS bindings
     bind("InvokerUtils").to(InvokerUtils_1.InvokerUtils);
@@ -210,4 +214,9 @@ exports.apiInvokerBindings = new inversify_1.ContainerModule(({ bind }) => {
     bind("IUnitellerConnectorApi").to(uniteller_connector_1.UnitellerConnectorApi);
     // Cognito backoffice connector (Fase 0 SureKeep)
     bind("ICognitoBackofficeConnectorApi").to(CognitoBackofficeConnectorApi_1.default);
+    // Platform RBAC business — Custom Auth Challenge endpoints (Fase 0 SureKeep)
+    bind("IPlatformRbacBusinessApi").to(PlatformRbacBusinessApi_1.default);
+    // Messages business — API client + OTP/notifications SQS publisher (Fase 0 SureKeep)
+    bind("IMessagesBusinessApi").to(messages_business_1.MessagesBusinessApi);
+    bind("IMessagesBusinessPublisher").to(MessagesBusinessPublisher_1.default);
 });

package/bin/index.d.ts

@@ -74,3 +74,5 @@ export * from "./ai-engine-connector";
 export * from "./benefits-marketplace";
 export * from "./milestone-business";
 export * from "./cognitoBackofficeConnector";
+export * from "./platformRbac";
+export * from "./messages-business";

package/bin/index.js

@@ -90,3 +90,5 @@ __exportStar(require("./ai-engine-connector"), exports);
 __exportStar(require("./benefits-marketplace"), exports);
 __exportStar(require("./milestone-business"), exports);
 __exportStar(require("./cognitoBackofficeConnector"), exports);
+__exportStar(require("./platformRbac"), exports);
+__exportStar(require("./messages-business"), exports);

package/bin/messages-business/api/MessagesBusinessApi.d.ts

@@ -0,0 +1,17 @@
+import type { IHttpRequest } from '@fiado/http-client';
+import FiadoApiResponse from '@fiado/type-kit/bin/apiResponse/dtos/FiadoApiResponse';
+import { SendMessageRequest, SendMessageResponse, VerifyOtpRequest, VerifyOtpResponse, OtpValidatedResponse, TemplateMessageCreateRequest, TemplateMessageUpdateRequest, TemplateMessageResponse, TemplateMessageListResponse, TemplateMessageListFiltersRequest } from '@fiado/type-kit/bin/messagesConnector';
+import { IMessagesBusinessApi } from './interfaces/IMessagesBusinessApi';
+export declare class MessagesBusinessApi implements IMessagesBusinessApi {
+    private readonly httpRequest;
+    private readonly baseUrl;
+    constructor(httpRequest: IHttpRequest);
+    sendMessage(request: SendMessageRequest): Promise<FiadoApiResponse<SendMessageResponse>>;
+    verifyOtp(request: VerifyOtpRequest): Promise<FiadoApiResponse<VerifyOtpResponse>>;
+    getValidatedOtp(directoryId: string, otpCode: string): Promise<FiadoApiResponse<OtpValidatedResponse>>;
+    createTemplate(request: TemplateMessageCreateRequest): Promise<FiadoApiResponse<TemplateMessageResponse>>;
+    listTemplates(filters: TemplateMessageListFiltersRequest): Promise<FiadoApiResponse<TemplateMessageListResponse>>;
+    getTemplate(id: string): Promise<FiadoApiResponse<TemplateMessageResponse>>;
+    updateTemplate(id: string, request: TemplateMessageUpdateRequest): Promise<FiadoApiResponse<TemplateMessageResponse>>;
+    deleteTemplate(id: string): Promise<FiadoApiResponse<void>>;
+}

package/bin/messages-business/api/MessagesBusinessApi.js

@@ -0,0 +1,53 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.MessagesBusinessApi = void 0;
+const inversify_1 = require("inversify");
+let MessagesBusinessApi = class MessagesBusinessApi {
+    httpRequest;
+    baseUrl = process.env.MESSAGES_BUSINESS_URL || '';
+    constructor(httpRequest) {
+        this.httpRequest = httpRequest;
+    }
+    async sendMessage(request) {
+        return await this.httpRequest.post(`${this.baseUrl}messages/send`, request, { 'operationName': 'privateSendMessage' });
+    }
+    async verifyOtp(request) {
+        return await this.httpRequest.post(`${this.baseUrl}messages/otp/verify`, request, { 'operationName': 'privateVerifyOtp' });
+    }
+    async getValidatedOtp(directoryId, otpCode) {
+        return await this.httpRequest.get(`${this.baseUrl}messages/otp/validated`, { directoryId, otpCode }, { 'operationName': 'privateGetValidatedOtp' });
+    }
+    async createTemplate(request) {
+        return await this.httpRequest.post(`${this.baseUrl}templates`, request, { 'operationName': 'backofficeCreateTemplate' });
+    }
+    async listTemplates(filters) {
+        return await this.httpRequest.get(`${this.baseUrl}templates`, filters, { 'operationName': 'backofficeListTemplates' });
+    }
+    async getTemplate(id) {
+        return await this.httpRequest.get(`${this.baseUrl}templates/${id}`, undefined, { 'operationName': 'backofficeGetTemplate' });
+    }
+    async updateTemplate(id, request) {
+        return await this.httpRequest.put(`${this.baseUrl}templates/${id}`, request, { 'operationName': 'backofficeUpdateTemplate' });
+    }
+    async deleteTemplate(id) {
+        return await this.httpRequest.delete(`${this.baseUrl}templates/${id}`, undefined, { 'operationName': 'backofficeDeleteTemplate' });
+    }
+};
+exports.MessagesBusinessApi = MessagesBusinessApi;
+exports.MessagesBusinessApi = MessagesBusinessApi = __decorate([
+    (0, inversify_1.injectable)(),
+    __param(0, (0, inversify_1.inject)('IHttpRequest')),
+    __metadata("design:paramtypes", [Object])
+], MessagesBusinessApi);

package/bin/messages-business/api/interfaces/IMessagesBusinessApi.d.ts

@@ -0,0 +1,12 @@
+import FiadoApiResponse from '@fiado/type-kit/bin/apiResponse/dtos/FiadoApiResponse';
+import { SendMessageRequest, SendMessageResponse, VerifyOtpRequest, VerifyOtpResponse, OtpValidatedResponse, TemplateMessageCreateRequest, TemplateMessageUpdateRequest, TemplateMessageResponse, TemplateMessageListResponse, TemplateMessageListFiltersRequest } from '@fiado/type-kit/bin/messagesConnector';
+export interface IMessagesBusinessApi {
+    sendMessage(request: SendMessageRequest): Promise<FiadoApiResponse<SendMessageResponse>>;
+    verifyOtp(request: VerifyOtpRequest): Promise<FiadoApiResponse<VerifyOtpResponse>>;
+    getValidatedOtp(directoryId: string, otpCode: string): Promise<FiadoApiResponse<OtpValidatedResponse>>;
+    createTemplate(request: TemplateMessageCreateRequest): Promise<FiadoApiResponse<TemplateMessageResponse>>;
+    listTemplates(filters: TemplateMessageListFiltersRequest): Promise<FiadoApiResponse<TemplateMessageListResponse>>;
+    getTemplate(id: string): Promise<FiadoApiResponse<TemplateMessageResponse>>;
+    updateTemplate(id: string, request: TemplateMessageUpdateRequest): Promise<FiadoApiResponse<TemplateMessageResponse>>;
+    deleteTemplate(id: string): Promise<FiadoApiResponse<void>>;
+}

package/bin/messages-business/api/interfaces/IMessagesBusinessApi.js

@@ -0,0 +1,2 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });

package/bin/messages-business/index.d.ts

@@ -0,0 +1,4 @@
+export * from './api/MessagesBusinessApi';
+export * from './api/interfaces/IMessagesBusinessApi';
+export { default as MessagesBusinessPublisher } from './queue/MessagesBusinessPublisher';
+export * from './queue/interfaces/IMessagesBusinessPublisher';

package/bin/messages-business/index.js

@@ -0,0 +1,25 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.MessagesBusinessPublisher = void 0;
+__exportStar(require("./api/MessagesBusinessApi"), exports);
+__exportStar(require("./api/interfaces/IMessagesBusinessApi"), exports);
+var MessagesBusinessPublisher_1 = require("./queue/MessagesBusinessPublisher");
+Object.defineProperty(exports, "MessagesBusinessPublisher", { enumerable: true, get: function () { return __importDefault(MessagesBusinessPublisher_1).default; } });
+__exportStar(require("./queue/interfaces/IMessagesBusinessPublisher"), exports);

package/bin/messages-business/queue/MessagesBusinessPublisher.d.ts

@@ -0,0 +1,7 @@
+import { NotificationQueueMessageRequestV2 } from '@fiado/type-kit/bin/messagesConnector';
+import { IMessagesBusinessPublisher } from './interfaces/IMessagesBusinessPublisher';
+export default class MessagesBusinessPublisher implements IMessagesBusinessPublisher {
+    private readonly queueUrl;
+    private readonly sqsClient;
+    publish(message: NotificationQueueMessageRequestV2): Promise<void>;
+}

package/bin/messages-business/queue/MessagesBusinessPublisher.js

@@ -0,0 +1,41 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+const inversify_1 = require("inversify");
+const client_sqs_1 = require("@aws-sdk/client-sqs");
+const logger_1 = require("@fiado/logger");
+let MessagesBusinessPublisher = class MessagesBusinessPublisher {
+    queueUrl = process.env.MESSAGES_BUSINESS_QUEUE_URL;
+    sqsClient = new client_sqs_1.SQSClient({ region: process.env.AWS_REGION });
+    async publish(message) {
+        const t0 = Date.now();
+        try {
+            const result = await this.sqsClient.send(new client_sqs_1.SendMessageCommand({
+                QueueUrl: this.queueUrl,
+                MessageBody: JSON.stringify(message),
+            }));
+            logger_1.log.info('MessagesBusinessPublisher.publish ok', {
+                messageId: result.MessageId,
+                latencyMs: Date.now() - t0,
+            });
+        }
+        catch (error) {
+            // Propaga el error crudo del SQSClient (NO envolver en new Error(string) = antipatron).
+            // Log de contexto + re-throw para que el caller decida.
+            logger_1.log.error('MessagesBusinessPublisher.publish failed', {
+                latencyMs: Date.now() - t0,
+                errorName: error?.name,
+            });
+            throw error;
+        }
+    }
+};
+MessagesBusinessPublisher = __decorate([
+    (0, inversify_1.injectable)()
+], MessagesBusinessPublisher);
+exports.default = MessagesBusinessPublisher;

package/bin/messages-business/queue/interfaces/IMessagesBusinessPublisher.d.ts

@@ -0,0 +1,4 @@
+import { NotificationQueueMessageRequestV2 } from '@fiado/type-kit/bin/messagesConnector';
+export interface IMessagesBusinessPublisher {
+    publish(message: NotificationQueueMessageRequestV2): Promise<void>;
+}

package/bin/messages-business/queue/interfaces/IMessagesBusinessPublisher.js

@@ -0,0 +1,2 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });

package/bin/platformRbac/api/PlatformRbacBusinessApi.d.ts

@@ -0,0 +1,26 @@
+import { IHttpRequest } from "@fiado/http-client";
+import { ApiGatewayResponse } from "@fiado/gateway-adapter";
+import { DefineNextChallengeRequest, DefineNextChallengeResponse, PrepareChallengeRequest, PrepareChallengeResponse, VerifyChallengeRequest, VerifyChallengeResponse } from "@fiado/type-kit/bin/platformRbac";
+import { IPlatformRbacBusinessApi } from "./interfaces/IPlatformRbacBusinessApi";
+/**
+ * Publisher HTTP del lambda `platform-rbac-business` (componente 06 SureKeep Fase 0)
+ * para los 3 endpoints internos del Custom Auth Challenge flow.
+ *
+ * Env var requerida en el consumer: `PLATFORM_RBAC_BUSINESS_URL`.
+ * El template.yml del consumer la setea con:
+ *
+ *   PLATFORM_RBAC_BUSINESS_URL: '{{resolve:ssm:platform-rbac-business}}'
+ *
+ * Convención CLAUDE.md global: SSM key = nombre del lambda owner de la URL.
+ * El rbac-business publica su URL en SSM bajo la key `platform-rbac-business`
+ * vía el `post_build` del buildspec.yml estándar Fiado.
+ */
+export default class PlatformRbacBusinessApi implements IPlatformRbacBusinessApi {
+    private httpRequest;
+    /** URL base del lambda. Leída de env var en cold start del consumer. */
+    private readonly baseUrl;
+    constructor(httpRequest: IHttpRequest);
+    defineNextChallenge(input: DefineNextChallengeRequest): Promise<ApiGatewayResponse<DefineNextChallengeResponse>>;
+    prepareChallenge(input: PrepareChallengeRequest): Promise<ApiGatewayResponse<PrepareChallengeResponse>>;
+    verifyChallenge(input: VerifyChallengeRequest): Promise<ApiGatewayResponse<VerifyChallengeResponse>>;
+}

package/bin/platformRbac/api/PlatformRbacBusinessApi.js

@@ -0,0 +1,54 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+const inversify_1 = require("inversify");
+/**
+ * Publisher HTTP del lambda `platform-rbac-business` (componente 06 SureKeep Fase 0)
+ * para los 3 endpoints internos del Custom Auth Challenge flow.
+ *
+ * Env var requerida en el consumer: `PLATFORM_RBAC_BUSINESS_URL`.
+ * El template.yml del consumer la setea con:
+ *
+ *   PLATFORM_RBAC_BUSINESS_URL: '{{resolve:ssm:platform-rbac-business}}'
+ *
+ * Convención CLAUDE.md global: SSM key = nombre del lambda owner de la URL.
+ * El rbac-business publica su URL en SSM bajo la key `platform-rbac-business`
+ * vía el `post_build` del buildspec.yml estándar Fiado.
+ */
+let PlatformRbacBusinessApi = class PlatformRbacBusinessApi {
+    httpRequest;
+    /** URL base del lambda. Leída de env var en cold start del consumer. */
+    baseUrl = process.env.PLATFORM_RBAC_BUSINESS_URL || "";
+    constructor(httpRequest) {
+        this.httpRequest = httpRequest;
+    }
+    async defineNextChallenge(input) {
+        const url = `${this.baseUrl}/internal/auth/define-next-challenge`;
+        return await this.httpRequest.post(url, input);
+    }
+    async prepareChallenge(input) {
+        const url = `${this.baseUrl}/internal/auth/prepare-challenge`;
+        return await this.httpRequest.post(url, input);
+    }
+    async verifyChallenge(input) {
+        const url = `${this.baseUrl}/internal/auth/verify-challenge`;
+        return await this.httpRequest.post(url, input);
+    }
+};
+PlatformRbacBusinessApi = __decorate([
+    (0, inversify_1.injectable)(),
+    __param(0, (0, inversify_1.inject)("IHttpRequest")),
+    __metadata("design:paramtypes", [Object])
+], PlatformRbacBusinessApi);
+exports.default = PlatformRbacBusinessApi;

package/bin/platformRbac/api/interfaces/IPlatformRbacBusinessApi.d.ts

@@ -0,0 +1,40 @@
+import { ApiGatewayResponse } from "@fiado/gateway-adapter";
+import { DefineNextChallengeRequest, DefineNextChallengeResponse, PrepareChallengeRequest, PrepareChallengeResponse, VerifyChallengeRequest, VerifyChallengeResponse } from "@fiado/type-kit/bin/platformRbac";
+/**
+ * Contrato del publisher HTTP del lambda `platform-rbac-business` (componente 06 SureKeep Fase 0)
+ * para los 3 endpoints internos del Custom Auth Challenge flow (MFA).
+ *
+ * Consumidores: `cognito-backoffice-connector` desde los Lambda Triggers
+ * `defineAuthChallenge`, `createAuthChallenge` y `verifyAuthChallengeResponse`
+ * configurados en cada User Pool aprovisionado por la saga `TenantOnboardingManager`.
+ *
+ * Patrón de retorno: `Promise<ApiGatewayResponse<T>>` sin unwrap (v4 canonical Fiado).
+ * El consumer accede `result.body.data` para llegar al payload tipado.
+ *
+ * Env var requerida en el consumer: `PLATFORM_RBAC_BUSINESS_URL`.
+ * El template.yml del consumer la setea con:
+ *
+ *   PLATFORM_RBAC_BUSINESS_URL: '{{resolve:ssm:platform-rbac-business}}'
+ *
+ * Convención CLAUDE.md global: SSM key = nombre del lambda owner de la URL.
+ */
+export interface IPlatformRbacBusinessApi {
+    /**
+     * POST /internal/auth/define-next-challenge — decide el próximo challenge MFA
+     * según los resultados acumulados en `session`. Invocado por el trigger
+     * `defineAuthChallenge` en cada paso del Custom Auth Challenge flow.
+     */
+    defineNextChallenge(input: DefineNextChallengeRequest): Promise<ApiGatewayResponse<DefineNextChallengeResponse>>;
+    /**
+     * POST /internal/auth/prepare-challenge — prepara el challenge (genera y envía
+     * código OTP por email/SMS, o computa el `privateChallenge` para TOTP).
+     * Invocado por el trigger `createAuthChallenge`.
+     */
+    prepareChallenge(input: PrepareChallengeRequest): Promise<ApiGatewayResponse<PrepareChallengeResponse>>;
+    /**
+     * POST /internal/auth/verify-challenge — verifica la respuesta del usuario
+     * contra el `privateChallenge`. Invocado por el trigger
+     * `verifyAuthChallengeResponse`.
+     */
+    verifyChallenge(input: VerifyChallengeRequest): Promise<ApiGatewayResponse<VerifyChallengeResponse>>;
+}

package/bin/platformRbac/api/interfaces/IPlatformRbacBusinessApi.js

@@ -0,0 +1,2 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });

package/bin/platformRbac/index.d.ts

@@ -0,0 +1,2 @@
+export * from "./api/interfaces/IPlatformRbacBusinessApi";
+export { default as PlatformRbacBusinessApi } from "./api/PlatformRbacBusinessApi";

package/bin/platformRbac/index.js

@@ -0,0 +1,23 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.PlatformRbacBusinessApi = void 0;
+__exportStar(require("./api/interfaces/IPlatformRbacBusinessApi"), exports);
+var PlatformRbacBusinessApi_1 = require("./api/PlatformRbacBusinessApi");
+Object.defineProperty(exports, "PlatformRbacBusinessApi", { enumerable: true, get: function () { return __importDefault(PlatformRbacBusinessApi_1).default; } });

package/docs/TECH_DEBT.md

@@ -0,0 +1,16 @@
+# TECH_DEBT — @fiado/api-invoker
+
+Registro vivo de deudas conscientes del repo. Cada entrada con ID estable `TD-AI-NNN` y los 4 campos canónicos (contexto / asunción / condición para cerrar / bloqueante).
+
+## TD-AI-001 — 2026-05-29 — npm link @fiado/type-kit activo
+
+- **Contexto:** `node_modules/@fiado/type-kit` es symlink local a `C:/Users/Fiado/Documents/Repos/fiado-type-kit/` (v3.43.1) — el publicado en CodeArtifact es v3.42.0 sin el módulo `platformRbac` que el Publisher `PlatformRbacBusinessApi` nuevo (`src/platformRbac/`) importa. El link se activó para iterar localmente sin publish prematuro del type-kit (decisión del user en el plan `2026-05-29-custom-auth-challenge-mfa.md`).
+- **Asunción / pendiente:** el `npm run build` y `tsc --noEmit` funcionan con el link, pero CI y cualquier `npm install` fresh van a resolver desde CodeArtifact (3.42.0) y fallar con `TS2307: Cannot find module '@fiado/type-kit/bin/platformRbac'` en los 2 archivos nuevos del Publisher.
+- **Condición para cerrar:** secuencia obligatoria al final del plan de auth (después de todas las tasks):
+  1. `cd /c/Users/Fiado/Documents/Repos/fiado-type-kit && npm publish` (Andres ejecuta).
+  2. `cd /c/Users/Fiado/fiado-workspace/fiado-api-invoker && npm unlink @fiado/type-kit`.
+  3. Actualizar `package.json` del api-invoker con la version publicada del type-kit (`"@fiado/type-kit": "^3.43.1"`).
+  4. `npm install` fresh.
+  5. `npx tsc --noEmit` verde.
+  6. `npm publish` del api-invoker en su nueva version (Andres ejecuta).
+- **Bloqueante:** SÍ — el primer deploy productivo o CI run del api-invoker (y de cualquier consumer que bumpee a la 4.6.0) rompe si el publish del type-kit NO se materializó antes.

package/package.json

@@ -1,36 +1,37 @@
-{
-  "name": "@fiado/api-invoker",
-  "version": "4.5.0",
-  "description": "Sirve como un puente entre diferentes funciones lambda, facilitando la comunicación entre ellas a través de invocaciones http",
-  "main": "bin/index.js",
-  "types": "bin/index.d.ts",
-  "scripts": {
-    "test": "node --experimental-vm-modules node_modules/jest/bin/jest.js",
-    "build": "tsc",
-    "prepublishOnly": "npm run build"
-  },
-  "keywords": [],
-  "author": "Fiado Inc",
-  "license": "ISC",
-  "dependencies": {
-    "@aws-sdk/client-sqs": "^3.919.0",
-    "@fiado/gateway-adapter": "^2.0.0",
-    "@fiado/http-client": "^2.0.0",
-    "@fiado/logger": "^1.0.3",
-    "@fiado/type-kit": "^3.30.0",
-    "dotenv": "^16.4.7"
-  },
-  "peerDependencies": {
-    "inversify": "^8.0.0",
-    "reflect-metadata": "^0.2.2"
-  },
-  "devDependencies": {
-    "@types/jest": "^30.0.0",
-    "@types/node": "^25.9.1",
-    "inversify": "^8.1.0",
-    "jest": "^30.4.2",
-    "reflect-metadata": "^0.2.2",
-    "ts-jest": "^29.4.11",
-    "typescript": "^6.0.3"
-  }
-}
+{
+  "name": "@fiado/api-invoker",
+  "version": "4.7.0",
+  "description": "Sirve como un puente entre diferentes funciones lambda, facilitando la comunicación entre ellas a través de invocaciones http",
+  "main": "bin/index.js",
+  "types": "bin/index.d.ts",
+  "scripts": {
+    "test": "node --experimental-vm-modules node_modules/jest/bin/jest.js",
+    "build": "tsc",
+    "prepublishOnly": "npm run build"
+  },
+  "keywords": [],
+  "author": "Fiado Inc",
+  "license": "ISC",
+  "dependencies": {
+    "@aws-sdk/client-sqs": "^3.919.0",
+    "@fiado/gateway-adapter": "^2.0.0",
+    "@fiado/http-client": "^2.0.0",
+    "@fiado/logger": "^1.0.3",
+    "@fiado/type-kit": "^3.45.0",
+    "dotenv": "^16.4.7"
+  },
+  "peerDependencies": {
+    "inversify": "^8.0.0",
+    "reflect-metadata": "^0.2.2"
+  },
+  "devDependencies": {
+    "@types/jest": "^30.0.0",
+    "@types/node": "^25.9.1",
+    "aws-sdk-client-mock": "^4.1.0",
+    "inversify": "^8.1.0",
+    "jest": "^30.4.2",
+    "reflect-metadata": "^0.2.2",
+    "ts-jest": "^29.4.11",
+    "typescript": "^6.0.3"
+  }
+}

package/src/account-beneficiary/AccountBeneficiaryApi.ts

@@ -1,19 +1,19 @@
-import { inject, injectable } from "inversify";
-import { IAccountBeneficiaryApi } from "./interfaces/IAccountBeneficiaryApi";
-import { IHttpRequest } from "@fiado/http-client";
-import { AccountBeneficiaryCreateRequest } from "@fiado/type-kit/bin/beneficiary";
-import { CountryId } from "@fiado/type-kit/bin/country";
-
-
-@injectable()
-export class AccountBeneficiaryApi implements IAccountBeneficiaryApi {
-    private readonly baseUrl = process.env.ACCOUNT_BENEFICIARY_LAMBDA_URL || "";
-
-    constructor(@inject("IHttpRequest") private httpRequest: IHttpRequest) {
-    }
-
-    async create(directoryId: string, countryId: CountryId, input: AccountBeneficiaryCreateRequest[]): Promise<void> {
-        const url = `${this.baseUrl}${countryId}/users/${directoryId}`;
-        return await this.httpRequest.post(url, input);
-    }
+import { inject, injectable } from "inversify";
+import { IAccountBeneficiaryApi } from "./interfaces/IAccountBeneficiaryApi";
+import { IHttpRequest } from "@fiado/http-client";
+import { AccountBeneficiaryCreateRequest } from "@fiado/type-kit/bin/beneficiary";
+import { CountryId } from "@fiado/type-kit/bin/country";
+
+
+@injectable()
+export class AccountBeneficiaryApi implements IAccountBeneficiaryApi {
+    private readonly baseUrl = process.env.ACCOUNT_BENEFICIARY_LAMBDA_URL || "";
+
+    constructor(@inject("IHttpRequest") private httpRequest: IHttpRequest) {
+    }
+
+    async create(directoryId: string, countryId: CountryId, input: AccountBeneficiaryCreateRequest[]): Promise<void> {
+        const url = `${this.baseUrl}${countryId}/users/${directoryId}`;
+        return await this.httpRequest.post(url, input);
+    }
 }

package/src/account-beneficiary/index.ts

@@ -1,3 +1,3 @@
-
-export * from './interfaces/IAccountBeneficiaryApi';
+
+export * from './interfaces/IAccountBeneficiaryApi';
 export * from './AccountBeneficiaryApi';

package/src/account-beneficiary/interfaces/IAccountBeneficiaryApi.ts

@@ -1,8 +1,8 @@
-import { AccountBeneficiaryCreateRequest } from "@fiado/type-kit/bin/beneficiary";
-import { CountryId } from "@fiado/type-kit/bin/country";
-
-export interface IAccountBeneficiaryApi {
-
-    create(directoryId: string, countryId: CountryId, input: AccountBeneficiaryCreateRequest[]): Promise<void>;
-
+import { AccountBeneficiaryCreateRequest } from "@fiado/type-kit/bin/beneficiary";
+import { CountryId } from "@fiado/type-kit/bin/country";
+
+export interface IAccountBeneficiaryApi {
+
+    create(directoryId: string, countryId: CountryId, input: AccountBeneficiaryCreateRequest[]): Promise<void>;
+
 }