@fiado/api-invoker 5.114.0 → 5.115.0

package/bin/platformRbac/api/PlatformRbacBusinessApi.d.ts

@@ -1,7 +1,7 @@
 import type { IHttpRequest } from "@fiado/http-client";
 import { APIGatewayProxyResultBody, ApiGatewayResponse, ResolvedPermissions, ResolveInput } from "@fiado/gateway-adapter";
 import { DefineNextChallengeRequest, DefineNextChallengeResponse, PrepareChallengeRequest, PrepareChallengeResponse, VerifyChallengeRequest, VerifyChallengeResponse, AuthorizeRequest, AuthorizeResponse, EffectivePermissionsResponse, InjectableUserAttributesResponse, PermissionScope, CreateLevelEntityRequest, CreateLevelEntityResponse, CreateTenantUserRequest, CreateTenantUserResponse, UserProfileResponse, ListLevelEntitiesResponse, LevelEntityResponse, UpdateLevelEntityRequest, DeleteLevelEntityRequest, DeleteLevelEntityResponse, ListTenantUsersResponse, GetTenantUserResponse, TenantUserResponse, TenantUserAckResponse, UpdateTenantUserRequest, DeleteTenantUserRequest, DisableTenantUserRequest, EnableTenantUserRequest, ResetTenantUserPasswordRequest, ResetTenantUserPasswordResponse, ResetTenantUserMfaRequest, ListTenantRolesResponse, AssignTenantRoleRequest, AssignTenantRoleResponse, RevokeTenantRoleRequest, RevokeTenantRoleResponse } from "@fiado/type-kit/bin/platformRbac/index.js";
-import type { TenantUsersBySubsResponse } from "@fiado/type-kit/bin/platformRbac/index.js";
+import type { TenantUsersBySubsResponse, RoleAssignmentsByScopeRefsResponse } from "@fiado/type-kit/bin/platformRbac/index.js";
 import { IPlatformRbacBusinessApi } from "./interfaces/IPlatformRbacBusinessApi.js";
 /**
  * Publisher HTTP del lambda `platform-rbac-business` (componente 06 SureKeep Fase 0)
@@ -79,4 +79,6 @@ export default class PlatformRbacBusinessApi implements IPlatformRbacBusinessApi
     revokeTenantRole(tenantId: string, assignmentId: string, input: RevokeTenantRoleRequest): Promise<APIGatewayProxyResultBody<RevokeTenantRoleResponse>>;
     /** POST /internal/tenants/{tenantId}/users/by-subs — usuarios del tenant por cognitoSub, en lotes de 100; devuelve el mapa de `.data`. */
     getTenantUsersBySubs(tenantId: string, cognitoSubs: string[]): Promise<TenantUsersBySubsResponse>;
+    /** POST /internal/tenants/{tenantId}/role-assignments/by-scope-refs — asignaciones por destino, en lotes de 100. */
+    getRoleAssignmentsByScopeRefs(tenantId: string, scopeRefs: string[]): Promise<RoleAssignmentsByScopeRefsResponse>;
 }

package/bin/platformRbac/api/PlatformRbacBusinessApi.js

@@ -12,7 +12,7 @@ var __param = (this && this.__param) || function (paramIndex, decorator) {
 };
 import { inject, injectable } from "inversify";
 // TD-AI-003: el tipo de retorno de los métodos viejos no refleja el runtime. Ver docs/TECH_DEBT.md.
-import { TENANT_USERS_BY_SUBS_MAX_BATCH, } from "@fiado/type-kit/bin/platformRbac/index.js";
+import { TENANT_USERS_BY_SUBS_MAX_BATCH, ROLE_ASSIGNMENTS_BY_SCOPE_REFS_MAX_BATCH, } from "@fiado/type-kit/bin/platformRbac/index.js";
 import { joinUrl } from "../../utils/joinUrl.js";
 import { postIdsInBatches } from "../../utils/postIdsInBatches.js";
 /**
@@ -194,6 +194,21 @@ let PlatformRbacBusinessApi = class PlatformRbacBusinessApi {
         const url = joinUrl(this.baseUrl, `internal/tenants/${encodeURIComponent(tenantId)}/users/by-subs`);
         return await postIdsInBatches(this.httpRequest, url, "cognitoSubs", cognitoSubs, TENANT_USERS_BY_SUBS_MAX_BATCH);
     }
+    /** POST /internal/tenants/{tenantId}/role-assignments/by-scope-refs — asignaciones por destino, en lotes de 100. */
+    async getRoleAssignmentsByScopeRefs(tenantId, scopeRefs) {
+        const url = joinUrl(this.baseUrl, `internal/tenants/${encodeURIComponent(tenantId)}/role-assignments/by-scope-refs`);
+        const unique = Array.from(new Set(scopeRefs.filter((ref) => typeof ref === "string" && ref.length > 0)));
+        const items = [];
+        for (let i = 0; i < unique.length; i += ROLE_ASSIGNMENTS_BY_SCOPE_REFS_MAX_BATCH) {
+            const batch = unique.slice(i, i + ROLE_ASSIGNMENTS_BY_SCOPE_REFS_MAX_BATCH);
+            const response = await this.httpRequest.post(url, { scopeRefs: batch });
+            const batchItems = response?.data?.items;
+            if (!Array.isArray(batchItems))
+                throw new Error(`Respuesta sin items de ${url}`);
+            items.push(...batchItems);
+        }
+        return { items };
+    }
 };
 PlatformRbacBusinessApi = __decorate([
     injectable(),

package/bin/platformRbac/api/interfaces/IPlatformRbacBusinessApi.d.ts

@@ -1,6 +1,6 @@
 import { APIGatewayProxyResultBody, ApiGatewayResponse, ResolvedPermissions, ResolveInput } from "@fiado/gateway-adapter";
 import { DefineNextChallengeRequest, DefineNextChallengeResponse, PrepareChallengeRequest, PrepareChallengeResponse, VerifyChallengeRequest, VerifyChallengeResponse, AuthorizeRequest, AuthorizeResponse, EffectivePermissionsResponse, InjectableUserAttributesResponse, PermissionScope, CreateLevelEntityRequest, CreateLevelEntityResponse, CreateTenantUserRequest, CreateTenantUserResponse, UserProfileResponse, ListLevelEntitiesResponse, LevelEntityResponse, UpdateLevelEntityRequest, DeleteLevelEntityRequest, DeleteLevelEntityResponse, ListTenantUsersResponse, GetTenantUserResponse, TenantUserResponse, TenantUserAckResponse, UpdateTenantUserRequest, DeleteTenantUserRequest, DisableTenantUserRequest, EnableTenantUserRequest, ResetTenantUserPasswordRequest, ResetTenantUserPasswordResponse, ResetTenantUserMfaRequest, ListTenantRolesResponse, AssignTenantRoleRequest, AssignTenantRoleResponse, RevokeTenantRoleRequest, RevokeTenantRoleResponse } from "@fiado/type-kit/bin/platformRbac/index.js";
-import type { TenantUsersBySubsResponse } from "@fiado/type-kit/bin/platformRbac/index.js";
+import type { TenantUsersBySubsResponse, RoleAssignmentsByScopeRefsResponse } from "@fiado/type-kit/bin/platformRbac/index.js";
 /**
  * Contrato del publisher HTTP del lambda `platform-rbac-business` (componente 06 SureKeep Fase 0)
  * para los 3 endpoints internos del Custom Auth Challenge flow (MFA).
@@ -126,4 +126,9 @@ export interface IPlatformRbacBusinessApi {
      * Devuelve el mapa ya desempaquetado de `.data`; lanza el error del http sin fallback.
      */
     getTenantUsersBySubs(tenantId: string, cognitoSubs: string[]): Promise<TenantUsersBySubsResponse>;
+    /**
+     * POST /internal/tenants/{tenantId}/role-assignments/by-scope-refs — asignaciones vigentes por destino,
+     * en lotes de 100. Concatena los `items`; lanza el error del http sin fallback.
+     */
+    getRoleAssignmentsByScopeRefs(tenantId: string, scopeRefs: string[]): Promise<RoleAssignmentsByScopeRefsResponse>;
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@fiado/api-invoker",
-  "version": "5.114.0",
+  "version": "5.115.0",
   "description": "Sirve como un puente entre diferentes funciones lambda, facilitando la comunicación entre ellas a través de invocaciones http",
   "type": "module",
   "main": "bin/index.js",
@@ -34,7 +34,7 @@
     "@fiado/gateway-adapter": "^3.14.0",
     "@fiado/http-client": "^2.0.1",
     "@fiado/logger": "^1.1.3",
-    "@fiado/type-kit": "^3.506.0",
+    "@fiado/type-kit": "^3.509.0",
     "dotenv": "^16.4.7"
   },
   "peerDependencies": {

package/src/platformRbac/api/PlatformRbacBusinessApi.ts

@@ -46,8 +46,14 @@ import {
     RevokeTenantRoleRequest,
     RevokeTenantRoleResponse,
     TENANT_USERS_BY_SUBS_MAX_BATCH,
+    ROLE_ASSIGNMENTS_BY_SCOPE_REFS_MAX_BATCH,
+} from "@fiado/type-kit/bin/platformRbac/index.js";
+import type {
+    TenantUserBySubItem,
+    TenantUsersBySubsResponse,
+    RoleAssignmentsByScopeRefsResponse,
+    ScopeRefRoleAssignments,
 } from "@fiado/type-kit/bin/platformRbac/index.js";
-import type { TenantUserBySubItem, TenantUsersBySubsResponse } from "@fiado/type-kit/bin/platformRbac/index.js";
 import { IPlatformRbacBusinessApi } from "./interfaces/IPlatformRbacBusinessApi.js";
 import { joinUrl } from "../../utils/joinUrl.js";
 import { postIdsInBatches } from "../../utils/postIdsInBatches.js";
@@ -345,4 +351,19 @@ export default class PlatformRbacBusinessApi implements IPlatformRbacBusinessApi
             this.httpRequest, url, "cognitoSubs", cognitoSubs, TENANT_USERS_BY_SUBS_MAX_BATCH,
         );
     }
+
+    /** POST /internal/tenants/{tenantId}/role-assignments/by-scope-refs — asignaciones por destino, en lotes de 100. */
+    async getRoleAssignmentsByScopeRefs(tenantId: string, scopeRefs: string[]): Promise<RoleAssignmentsByScopeRefsResponse> {
+        const url = joinUrl(this.baseUrl, `internal/tenants/${encodeURIComponent(tenantId)}/role-assignments/by-scope-refs`);
+        const unique = Array.from(new Set(scopeRefs.filter((ref) => typeof ref === "string" && ref.length > 0)));
+        const items: ScopeRefRoleAssignments[] = [];
+        for (let i = 0; i < unique.length; i += ROLE_ASSIGNMENTS_BY_SCOPE_REFS_MAX_BATCH) {
+            const batch = unique.slice(i, i + ROLE_ASSIGNMENTS_BY_SCOPE_REFS_MAX_BATCH);
+            const response = await this.httpRequest.post<{ data?: RoleAssignmentsByScopeRefsResponse }>(url, { scopeRefs: batch });
+            const batchItems = response?.data?.items;
+            if (!Array.isArray(batchItems)) throw new Error(`Respuesta sin items de ${url}`);
+            items.push(...batchItems);
+        }
+        return { items };
+    }
 }

package/src/platformRbac/api/interfaces/IPlatformRbacBusinessApi.ts

@@ -43,7 +43,7 @@ import {
     RevokeTenantRoleRequest,
     RevokeTenantRoleResponse,
 } from "@fiado/type-kit/bin/platformRbac/index.js";
-import type { TenantUsersBySubsResponse } from "@fiado/type-kit/bin/platformRbac/index.js";
+import type { TenantUsersBySubsResponse, RoleAssignmentsByScopeRefsResponse } from "@fiado/type-kit/bin/platformRbac/index.js";
 
 /**
  * Contrato del publisher HTTP del lambda `platform-rbac-business` (componente 06 SureKeep Fase 0)
@@ -280,4 +280,10 @@ export interface IPlatformRbacBusinessApi {
      * Devuelve el mapa ya desempaquetado de `.data`; lanza el error del http sin fallback.
      */
     getTenantUsersBySubs(tenantId: string, cognitoSubs: string[]): Promise<TenantUsersBySubsResponse>;
+
+    /**
+     * POST /internal/tenants/{tenantId}/role-assignments/by-scope-refs — asignaciones vigentes por destino,
+     * en lotes de 100. Concatena los `items`; lanza el error del http sin fallback.
+     */
+    getRoleAssignmentsByScopeRefs(tenantId: string, scopeRefs: string[]): Promise<RoleAssignmentsByScopeRefsResponse>;
 }