@fiado/api-invoker 4.59.0 → 4.61.0

package/src/onboarding-business/index.ts

@@ -1,2 +1,2 @@
-export * from './api/OnboardingBusinessApi.js';
+export * from './api/OnboardingBusinessApi.js';
 export * from './api/interfaces/IOnboardingBusinessApi.js';

package/src/order-collector-business/OrderCollectorApi.ts

@@ -1,20 +1,20 @@
-import dotenv from 'dotenv';
-import { inject, injectable } from "inversify";
-import { IHttpRequest } from "@fiado/http-client";
-import { IOrderCollectorApi } from './interfaces/IOrderCollectorApi.js';
-import { CollectorOrderStatus } from '@fiado/type-kit/bin/collector/index.js';
-
-dotenv.config();
-
-@injectable()
-export class OrderCollectorApi implements IOrderCollectorApi {
-
-    private readonly baseUrl = process.env.ORDER_COLLECTOR_BUSINESS || "";
-
-    constructor(@inject("IHttpRequest") private httpRequest: IHttpRequest) { }
-
-    async executeOrder(input: CollectorOrderStatus[]): Promise<any> {
-        const url = `${this.baseUrl}private/execution`;
-        return await this.httpRequest.post(url, input);
-    }
-}
+import dotenv from 'dotenv';
+import { inject, injectable } from "inversify";
+import { IHttpRequest } from "@fiado/http-client";
+import { IOrderCollectorApi } from './interfaces/IOrderCollectorApi.js';
+import { CollectorOrderStatus } from '@fiado/type-kit/bin/collector/index.js';
+
+dotenv.config();
+
+@injectable()
+export class OrderCollectorApi implements IOrderCollectorApi {
+
+    private readonly baseUrl = process.env.ORDER_COLLECTOR_BUSINESS || "";
+
+    constructor(@inject("IHttpRequest") private httpRequest: IHttpRequest) { }
+
+    async executeOrder(input: CollectorOrderStatus[]): Promise<any> {
+        const url = `${this.baseUrl}private/execution`;
+        return await this.httpRequest.post(url, input);
+    }
+}

package/src/order-collector-business/index.ts

@@ -1,4 +1,4 @@
-
-
-export * from './interfaces/IOrderCollectorApi.js';
+
+
+export * from './interfaces/IOrderCollectorApi.js';
 export * from './OrderCollectorApi.js';

package/src/order-collector-business/interfaces/IOrderCollectorApi.ts

@@ -1,9 +1,9 @@
-import { CollectorOrderStatus } from '@fiado/type-kit/bin/collector/index.js';
-
-/**
- * Interfaz para el servicio Contract Generator.
- */
-export interface IOrderCollectorApi {
-    
-    executeOrder(input: CollectorOrderStatus[]): Promise<void>;
-}
+import { CollectorOrderStatus } from '@fiado/type-kit/bin/collector/index.js';
+
+/**
+ * Interfaz para el servicio Contract Generator.
+ */
+export interface IOrderCollectorApi {
+    
+    executeOrder(input: CollectorOrderStatus[]): Promise<void>;
+}

package/src/p2pContact/api/P2pContactApi.ts

@@ -1,20 +1,20 @@
-import {IP2pContactApi} from "./interfaces/IP2pContactApi.js";
-import {inject, injectable} from "inversify";
-import {IHttpRequest} from "@fiado/http-client";
-import {CreateP2pContactRequest} from "@fiado/type-kit/bin/p2pContact/index.js";
-
-@injectable()
-export default class P2pContactApi implements IP2pContactApi {
-    private readonly baseUrl = process.env.P2P_CONTACTS_LAMBDA_URL || "";
-
-    constructor(@inject("IHttpRequest") private httpRequest: IHttpRequest) {
-    }
-
-    async createP2pContact(request: CreateP2pContactRequest): Promise<any> {
-        const url = `${this.baseUrl}p2pcontacts/contacts/create`;
-        const headers = {
-            'Content-Type': 'application/json'
-        }
-        return await this.httpRequest.post(url, request, headers);
-    }
+import {IP2pContactApi} from "./interfaces/IP2pContactApi.js";
+import {inject, injectable} from "inversify";
+import {IHttpRequest} from "@fiado/http-client";
+import {CreateP2pContactRequest} from "@fiado/type-kit/bin/p2pContact/index.js";
+
+@injectable()
+export default class P2pContactApi implements IP2pContactApi {
+    private readonly baseUrl = process.env.P2P_CONTACTS_LAMBDA_URL || "";
+
+    constructor(@inject("IHttpRequest") private httpRequest: IHttpRequest) {
+    }
+
+    async createP2pContact(request: CreateP2pContactRequest): Promise<any> {
+        const url = `${this.baseUrl}p2pcontacts/contacts/create`;
+        const headers = {
+            'Content-Type': 'application/json'
+        }
+        return await this.httpRequest.post(url, request, headers);
+    }
 }

package/src/p2pContact/api/interfaces/IP2pContactApi.ts

@@ -1,5 +1,5 @@
-import {CreateP2pContactRequest} from "@fiado/type-kit/bin/p2pContact/index.js";
-
-export interface IP2pContactApi {
-    createP2pContact(request: CreateP2pContactRequest): Promise<any>;
+import {CreateP2pContactRequest} from "@fiado/type-kit/bin/p2pContact/index.js";
+
+export interface IP2pContactApi {
+    createP2pContact(request: CreateP2pContactRequest): Promise<any>;
 }

package/src/p2pContact/index.ts

@@ -1,2 +1,2 @@
-export * from './api/interfaces/IP2pContactApi.js';
+export * from './api/interfaces/IP2pContactApi.js';
 export * from './api/P2pContactApi.js';

package/src/payroll-business/PayrollApi.ts

@@ -1,20 +1,20 @@
-import { inject, injectable } from "inversify";
-import { IHttpRequest } from "@fiado/http-client";
-import dotenv from 'dotenv';
-import { IPayrollApi } from "./interfaces/IPayrollApi.js";
-import { PayrollBossStatusEnum } from "@fiado/type-kit/bin/payroll-business/index.js";
-
-dotenv.config();
-
-@injectable()
-export class PayrollApi implements IPayrollApi {
-
-    private readonly baseUrl = process.env.PAYROLL_BUSINESS_LAMBDA_URL || "";
-
-    constructor(@inject("IHttpRequest") private httpRequest: IHttpRequest) { }
-    async getByDirectoryId(params: {directoryId: string,index?:string,pageSize?:number, sort?:string, status?:PayrollBossStatusEnum}): Promise<any> {
-        const url = `${this.baseUrl}private/payroll-boss/directory/${params.directoryId}`;
-        return await this.httpRequest.get(`${url}`);
-    }
-
+import { inject, injectable } from "inversify";
+import { IHttpRequest } from "@fiado/http-client";
+import dotenv from 'dotenv';
+import { IPayrollApi } from "./interfaces/IPayrollApi.js";
+import { PayrollBossStatusEnum } from "@fiado/type-kit/bin/payroll-business/index.js";
+
+dotenv.config();
+
+@injectable()
+export class PayrollApi implements IPayrollApi {
+
+    private readonly baseUrl = process.env.PAYROLL_BUSINESS_LAMBDA_URL || "";
+
+    constructor(@inject("IHttpRequest") private httpRequest: IHttpRequest) { }
+    async getByDirectoryId(params: {directoryId: string,index?:string,pageSize?:number, sort?:string, status?:PayrollBossStatusEnum}): Promise<any> {
+        const url = `${this.baseUrl}private/payroll-boss/directory/${params.directoryId}`;
+        return await this.httpRequest.get(`${url}`);
+    }
+
 }

package/src/payroll-business/index.ts

@@ -1,2 +1,2 @@
-export * from './interfaces/IPayrollApi.js';
+export * from './interfaces/IPayrollApi.js';
 export * from './PayrollApi.js';

package/src/payroll-business/interfaces/IPayrollApi.ts

@@ -1,18 +1,18 @@
-import { PayrollBossStatusEnum } from "@fiado/type-kit/bin/payroll-business/index.js";
-
-/**
- * Interfaz para el servicio Payroll que permite operaciones sobre payroll.
- */
-export interface IPayrollApi {
-    
-    /**
-     * Obtiene registros de payroll por directorio.
-     * @param directoryId ID del directorio.
-     * @param index Indice de la página.
-     * @param pageSize Tamaño de la página.
-     * @param sort Orden de los resultados.
-     * @param status Estado del payroll. 
-     * @throws {Error} Lanza un error si los parámetros de entrada son inválidos.
-     */
-    getByDirectoryId(params: {directoryId: string,index?:string,pageSize?:number, sort?:string, status?:PayrollBossStatusEnum}): Promise<any>;
-}
+import { PayrollBossStatusEnum } from "@fiado/type-kit/bin/payroll-business/index.js";
+
+/**
+ * Interfaz para el servicio Payroll que permite operaciones sobre payroll.
+ */
+export interface IPayrollApi {
+    
+    /**
+     * Obtiene registros de payroll por directorio.
+     * @param directoryId ID del directorio.
+     * @param index Indice de la página.
+     * @param pageSize Tamaño de la página.
+     * @param sort Orden de los resultados.
+     * @param status Estado del payroll. 
+     * @throws {Error} Lanza un error si los parámetros de entrada son inválidos.
+     */
+    getByDirectoryId(params: {directoryId: string,index?:string,pageSize?:number, sort?:string, status?:PayrollBossStatusEnum}): Promise<any>;
+}

package/src/people-business/api/PeopleBusinessApi.ts

@@ -1,32 +1,32 @@
-import { inject, injectable } from "inversify";
-import { IHttpRequest } from "@fiado/http-client";
-import { IPeopleBusinessApi } from "./interfaces/IPeopleBusinessApi.js";
-type FiadoApiResponse<T> = import("@fiado/type-kit/bin/apiResponse/dtos/FiadoApiResponse.js").default<T>;
-import { CPStatusEnum } from "@fiado/type-kit/bin/identity/index.js";
-
-
-@injectable()
-export default class PeopleBusinessApi implements IPeopleBusinessApi {
-
-    private readonly baseUrl = process.env.PEOPLE_BUSINESS_LAMBDA_URL || "";
-
-    constructor(@inject("IHttpRequest") private httpRequest: IHttpRequest) {
-    }
-    
-    getByCPStatus(params: { index?: string; pageSize?: number; cpStatus: CPStatusEnum; sort?: "ascending" | "descending"; }): Promise<FiadoApiResponse<{ items: { people: any; accountRequirementControl: any; }[]; index: string | null; }>> {
-        const queryParamsArray = [];
-        if (params.index) {
-            queryParamsArray.push(`index=${params.index}`);
-        }
-        if (params.pageSize) {
-            queryParamsArray.push(`pageSize=${params.pageSize}`);
-        }
-        if (params.sort) {
-            queryParamsArray.push(`sort=${params.sort}`);
-        }
-
-        const queryString = queryParamsArray.length > 0 ? '?' + queryParamsArray.join('&') : '';
-        return this.httpRequest.get(`${this.baseUrl}private/people/get/cpstatus/${params.cpStatus}${queryString}`);
-    }
-}
-
+import { inject, injectable } from "inversify";
+import { IHttpRequest } from "@fiado/http-client";
+import { IPeopleBusinessApi } from "./interfaces/IPeopleBusinessApi.js";
+type FiadoApiResponse<T> = import("@fiado/type-kit/bin/apiResponse/dtos/FiadoApiResponse.js").default<T>;
+import { CPStatusEnum } from "@fiado/type-kit/bin/identity/index.js";
+
+
+@injectable()
+export default class PeopleBusinessApi implements IPeopleBusinessApi {
+
+    private readonly baseUrl = process.env.PEOPLE_BUSINESS_LAMBDA_URL || "";
+
+    constructor(@inject("IHttpRequest") private httpRequest: IHttpRequest) {
+    }
+    
+    getByCPStatus(params: { index?: string; pageSize?: number; cpStatus: CPStatusEnum; sort?: "ascending" | "descending"; }): Promise<FiadoApiResponse<{ items: { people: any; accountRequirementControl: any; }[]; index: string | null; }>> {
+        const queryParamsArray = [];
+        if (params.index) {
+            queryParamsArray.push(`index=${params.index}`);
+        }
+        if (params.pageSize) {
+            queryParamsArray.push(`pageSize=${params.pageSize}`);
+        }
+        if (params.sort) {
+            queryParamsArray.push(`sort=${params.sort}`);
+        }
+
+        const queryString = queryParamsArray.length > 0 ? '?' + queryParamsArray.join('&') : '';
+        return this.httpRequest.get(`${this.baseUrl}private/people/get/cpstatus/${params.cpStatus}${queryString}`);
+    }
+}
+

package/src/people-business/api/interfaces/IPeopleBusinessApi.ts

@@ -1,8 +1,8 @@
-import { CPStatusEnum } from "@fiado/type-kit/bin/identity/index.js";
-type FiadoApiResponse<T> = import("@fiado/type-kit/bin/apiResponse/dtos/FiadoApiResponse.js").default<T>;
-
-
-export interface IPeopleBusinessApi {
-getByCPStatus(params: { index: string; pageSize: number; cpStatus: CPStatusEnum; sort: "ascending" | "descending"; }): Promise<FiadoApiResponse<{ items: {people: any, accountRequirementControl: any}[]; index: string | null; }>>;
-
+import { CPStatusEnum } from "@fiado/type-kit/bin/identity/index.js";
+type FiadoApiResponse<T> = import("@fiado/type-kit/bin/apiResponse/dtos/FiadoApiResponse.js").default<T>;
+
+
+export interface IPeopleBusinessApi {
+getByCPStatus(params: { index: string; pageSize: number; cpStatus: CPStatusEnum; sort: "ascending" | "descending"; }): Promise<FiadoApiResponse<{ items: {people: any, accountRequirementControl: any}[]; index: string | null; }>>;
+
 }

package/src/people-business/index.ts

@@ -1,2 +1,2 @@
-export * from './api/PeopleBusinessApi.js';
+export * from './api/PeopleBusinessApi.js';
 export * from './api/interfaces/IPeopleBusinessApi.js';

package/src/platform-error-events/index.ts

@@ -1,2 +1,2 @@
-export * from './queue/PlatformErrorEventsPublisher.js';
-export * from './queue/interfaces/IPlatformErrorEventsPublisher.js';
+export * from './queue/PlatformErrorEventsPublisher.js';
+export * from './queue/interfaces/IPlatformErrorEventsPublisher.js';

package/src/platform-error-events/queue/PlatformErrorEventsPublisher.ts

@@ -1,24 +1,24 @@
-import { SendMessageCommand, SendMessageRequest, SQSClient } from "@aws-sdk/client-sqs";
-import { IPlatformErrorEventsPublisher } from "./interfaces/IPlatformErrorEventsPublisher.js";
-import { PlatformErrorEventMessage } from "@fiado/type-kit/bin/platformErrorEvents/index.js";
-import { injectable } from "inversify";
-
-@injectable()
-export default class PlatformErrorEventsPublisher implements IPlatformErrorEventsPublisher {
-    private readonly PLATFORM_ERROR_EVENTS_QUEUE = process.env.PLATFORM_ERROR_EVENTS_QUEUE;
-
-    async publish(message: PlatformErrorEventMessage): Promise<void> {
-        try {
-            const client: SQSClient = new SQSClient();
-            const sendMessageRequest: SendMessageRequest = {
-                QueueUrl: this.PLATFORM_ERROR_EVENTS_QUEUE,
-                MessageBody: JSON.stringify(message)
-            };
-            const command: SendMessageCommand = new SendMessageCommand(sendMessageRequest);
-            await client.send(command);
-        } catch (error) {
-            const errorMessage = error instanceof Error ? error.message : String(error);
-            throw new Error(`Error publishing message to PlatformErrorEventsQueue${': ' + errorMessage}`);
-        }
-    }
-}
+import { SendMessageCommand, SendMessageRequest, SQSClient } from "@aws-sdk/client-sqs";
+import { IPlatformErrorEventsPublisher } from "./interfaces/IPlatformErrorEventsPublisher.js";
+import { PlatformErrorEventMessage } from "@fiado/type-kit/bin/platformErrorEvents/index.js";
+import { injectable } from "inversify";
+
+@injectable()
+export default class PlatformErrorEventsPublisher implements IPlatformErrorEventsPublisher {
+    private readonly PLATFORM_ERROR_EVENTS_QUEUE = process.env.PLATFORM_ERROR_EVENTS_QUEUE;
+
+    async publish(message: PlatformErrorEventMessage): Promise<void> {
+        try {
+            const client: SQSClient = new SQSClient();
+            const sendMessageRequest: SendMessageRequest = {
+                QueueUrl: this.PLATFORM_ERROR_EVENTS_QUEUE,
+                MessageBody: JSON.stringify(message)
+            };
+            const command: SendMessageCommand = new SendMessageCommand(sendMessageRequest);
+            await client.send(command);
+        } catch (error) {
+            const errorMessage = error instanceof Error ? error.message : String(error);
+            throw new Error(`Error publishing message to PlatformErrorEventsQueue${': ' + errorMessage}`);
+        }
+    }
+}

package/src/platform-error-events/queue/interfaces/IPlatformErrorEventsPublisher.ts

@@ -1,5 +1,5 @@
-import { PlatformErrorEventMessage } from "@fiado/type-kit/bin/platformErrorEvents/index.js";
-
-export interface IPlatformErrorEventsPublisher {
-    publish(message: PlatformErrorEventMessage): Promise<void>;
-}
+import { PlatformErrorEventMessage } from "@fiado/type-kit/bin/platformErrorEvents/index.js";
+
+export interface IPlatformErrorEventsPublisher {
+    publish(message: PlatformErrorEventMessage): Promise<void>;
+}

package/src/platformRbac/api/PlatformRbacBusinessApi.ts

@@ -1,98 +1,98 @@
-import { inject, injectable } from "inversify";
-import type { IHttpRequest } from "@fiado/http-client";
-import { ApiGatewayResponse, ResolvedPermissions, ResolveInput } from "@fiado/gateway-adapter";
-// TD-AI-001: import de @fiado/type-kit/bin/platformRbac requiere npm link a type-kit 3.43.1 hasta publish final. Ver docs/TECH_DEBT.md.
-import {
-    DefineNextChallengeRequest,
-    DefineNextChallengeResponse,
-    PrepareChallengeRequest,
-    PrepareChallengeResponse,
-    VerifyChallengeRequest,
-    VerifyChallengeResponse,
-    AuthorizeRequest,
-    AuthorizeResponse,
-    EffectivePermissionsResponse,
-    InjectableUserAttributesResponse,
-} from "@fiado/type-kit/bin/platformRbac/index.js";
-import { IPlatformRbacBusinessApi } from "./interfaces/IPlatformRbacBusinessApi.js";
-
-/**
- * Publisher HTTP del lambda `platform-rbac-business` (componente 06 SureKeep Fase 0)
- * para los 3 endpoints internos del Custom Auth Challenge flow.
- *
- * Env var requerida en el consumer: `PLATFORM_RBAC_BUSINESS_URL`.
- * El template.yml del consumer la setea con:
- *
- *   PLATFORM_RBAC_BUSINESS_URL: '{{resolve:ssm:platform-rbac-business}}'
- *
- * Convención CLAUDE.md global: SSM key = nombre del lambda owner de la URL.
- * El rbac-business publica su URL en SSM bajo la key `platform-rbac-business`
- * vía el `post_build` del buildspec.yml estándar Fiado.
- */
-@injectable()
-export default class PlatformRbacBusinessApi implements IPlatformRbacBusinessApi {
-    // DEC-RBAC-069 (unificado a env var): toda la URL de rbac — incluido el endpoint del resolver — sale
-    // del env var PLATFORM_RBAC_BUSINESS_URL ('{{resolve:ssm:platform-rbac-business}}'), una por ambiente.
-    // Es server-to-server (VpcEndpoint), sin relación con el dominio de cookies del navegador.
-    private readonly baseUrl = process.env.PLATFORM_RBAC_BUSINESS_URL || "";
-
-    constructor(@inject("IHttpRequest") private httpRequest: IHttpRequest) {}
-
-    async defineNextChallenge(
-        input: DefineNextChallengeRequest,
-    ): Promise<ApiGatewayResponse<DefineNextChallengeResponse>> {
-        const url = `${this.baseUrl}/internal/auth/define-next-challenge`;
-        return await this.httpRequest.post(url, input);
-    }
-
-    async prepareChallenge(
-        input: PrepareChallengeRequest,
-    ): Promise<ApiGatewayResponse<PrepareChallengeResponse>> {
-        const url = `${this.baseUrl}/internal/auth/prepare-challenge`;
-        return await this.httpRequest.post(url, input);
-    }
-
-    async verifyChallenge(
-        input: VerifyChallengeRequest,
-    ): Promise<ApiGatewayResponse<VerifyChallengeResponse>> {
-        const url = `${this.baseUrl}/internal/auth/verify-challenge`;
-        return await this.httpRequest.post(url, input);
-    }
-
-    async authorize(
-        input: AuthorizeRequest,
-    ): Promise<ApiGatewayResponse<AuthorizeResponse>> {
-        const url = `${this.baseUrl}/internal/authorize`;
-        return await this.httpRequest.post(url, input);
-    }
-
-    async effectivePermissions(
-        cognitoSub: string,
-        tenantId?: string,
-    ): Promise<ApiGatewayResponse<EffectivePermissionsResponse>> {
-        const base = `${this.baseUrl}/internal/users/${encodeURIComponent(cognitoSub)}/effective-permissions`;
-        // El tenantId es opcional: los usuarios de plataforma resuelven por el silo PlatformUser
-        // sin él, pero los usuarios de un tenant LO NECESITAN para que el rbac sepa en qué silo
-        // buscarlos (sin él, el resolve cae a la rama platform y devuelve 404). Lo manda el
-        // jwt-inyector con el tenantId que ya resolvió del userPoolId.
-        const url = tenantId
-            ? `${base}?tenantId=${encodeURIComponent(tenantId)}`
-            : base;
-        return await this.httpRequest.get(url);
-    }
-
-    async getInjectableUserAttributes(
-        cognitoSub: string,
-        tenantId: string,
-    ): Promise<ApiGatewayResponse<InjectableUserAttributesResponse>> {
-        const url = `${this.baseUrl}/internal/users/${encodeURIComponent(cognitoSub)}/injectable-attributes?tenantId=${encodeURIComponent(tenantId)}`;
-        return await this.httpRequest.get(url);
-    }
-
-    async resolvePermissions(
-        input: ResolveInput,
-    ): Promise<ApiGatewayResponse<ResolvedPermissions>> {
-        const url = `${this.baseUrl}/internal/permissions/resolve`;
-        return await this.httpRequest.post(url, input);
-    }
-}
+import { inject, injectable } from "inversify";
+import type { IHttpRequest } from "@fiado/http-client";
+import { ApiGatewayResponse, ResolvedPermissions, ResolveInput } from "@fiado/gateway-adapter";
+// TD-AI-001: import de @fiado/type-kit/bin/platformRbac requiere npm link a type-kit 3.43.1 hasta publish final. Ver docs/TECH_DEBT.md.
+import {
+    DefineNextChallengeRequest,
+    DefineNextChallengeResponse,
+    PrepareChallengeRequest,
+    PrepareChallengeResponse,
+    VerifyChallengeRequest,
+    VerifyChallengeResponse,
+    AuthorizeRequest,
+    AuthorizeResponse,
+    EffectivePermissionsResponse,
+    InjectableUserAttributesResponse,
+} from "@fiado/type-kit/bin/platformRbac/index.js";
+import { IPlatformRbacBusinessApi } from "./interfaces/IPlatformRbacBusinessApi.js";
+
+/**
+ * Publisher HTTP del lambda `platform-rbac-business` (componente 06 SureKeep Fase 0)
+ * para los 3 endpoints internos del Custom Auth Challenge flow.
+ *
+ * Env var requerida en el consumer: `PLATFORM_RBAC_BUSINESS_URL`.
+ * El template.yml del consumer la setea con:
+ *
+ *   PLATFORM_RBAC_BUSINESS_URL: '{{resolve:ssm:platform-rbac-business}}'
+ *
+ * Convención CLAUDE.md global: SSM key = nombre del lambda owner de la URL.
+ * El rbac-business publica su URL en SSM bajo la key `platform-rbac-business`
+ * vía el `post_build` del buildspec.yml estándar Fiado.
+ */
+@injectable()
+export default class PlatformRbacBusinessApi implements IPlatformRbacBusinessApi {
+    // DEC-RBAC-069 (unificado a env var): toda la URL de rbac — incluido el endpoint del resolver — sale
+    // del env var PLATFORM_RBAC_BUSINESS_URL ('{{resolve:ssm:platform-rbac-business}}'), una por ambiente.
+    // Es server-to-server (VpcEndpoint), sin relación con el dominio de cookies del navegador.
+    private readonly baseUrl = process.env.PLATFORM_RBAC_BUSINESS_URL || "";
+
+    constructor(@inject("IHttpRequest") private httpRequest: IHttpRequest) {}
+
+    async defineNextChallenge(
+        input: DefineNextChallengeRequest,
+    ): Promise<ApiGatewayResponse<DefineNextChallengeResponse>> {
+        const url = `${this.baseUrl}/internal/auth/define-next-challenge`;
+        return await this.httpRequest.post(url, input);
+    }
+
+    async prepareChallenge(
+        input: PrepareChallengeRequest,
+    ): Promise<ApiGatewayResponse<PrepareChallengeResponse>> {
+        const url = `${this.baseUrl}/internal/auth/prepare-challenge`;
+        return await this.httpRequest.post(url, input);
+    }
+
+    async verifyChallenge(
+        input: VerifyChallengeRequest,
+    ): Promise<ApiGatewayResponse<VerifyChallengeResponse>> {
+        const url = `${this.baseUrl}/internal/auth/verify-challenge`;
+        return await this.httpRequest.post(url, input);
+    }
+
+    async authorize(
+        input: AuthorizeRequest,
+    ): Promise<ApiGatewayResponse<AuthorizeResponse>> {
+        const url = `${this.baseUrl}/internal/authorize`;
+        return await this.httpRequest.post(url, input);
+    }
+
+    async effectivePermissions(
+        cognitoSub: string,
+        tenantId?: string,
+    ): Promise<ApiGatewayResponse<EffectivePermissionsResponse>> {
+        const base = `${this.baseUrl}/internal/users/${encodeURIComponent(cognitoSub)}/effective-permissions`;
+        // El tenantId es opcional: los usuarios de plataforma resuelven por el silo PlatformUser
+        // sin él, pero los usuarios de un tenant LO NECESITAN para que el rbac sepa en qué silo
+        // buscarlos (sin él, el resolve cae a la rama platform y devuelve 404). Lo manda el
+        // jwt-inyector con el tenantId que ya resolvió del userPoolId.
+        const url = tenantId
+            ? `${base}?tenantId=${encodeURIComponent(tenantId)}`
+            : base;
+        return await this.httpRequest.get(url);
+    }
+
+    async getInjectableUserAttributes(
+        cognitoSub: string,
+        tenantId: string,
+    ): Promise<ApiGatewayResponse<InjectableUserAttributesResponse>> {
+        const url = `${this.baseUrl}/internal/users/${encodeURIComponent(cognitoSub)}/injectable-attributes?tenantId=${encodeURIComponent(tenantId)}`;
+        return await this.httpRequest.get(url);
+    }
+
+    async resolvePermissions(
+        input: ResolveInput,
+    ): Promise<ApiGatewayResponse<ResolvedPermissions>> {
+        const url = `${this.baseUrl}/internal/permissions/resolve`;
+        return await this.httpRequest.post(url, input);
+    }
+}