@fiado/api-invoker 5.9.0 → 5.11.0

package/bin/account-beneficiary/AccountBeneficiaryApi.d.ts

@@ -1,10 +1,14 @@
 import { IAccountBeneficiaryApi } from "./interfaces/IAccountBeneficiaryApi.js";
 import { IHttpRequest } from "@fiado/http-client";
-import { AccountBeneficiaryCreateRequest } from "@fiado/type-kit/bin/beneficiary/index.js";
+import { AccountBeneficiaryCreateRequest, AccountBeneficiaryResponse } from "@fiado/type-kit/bin/beneficiary/index.js";
 import { CountryId } from "@fiado/type-kit/bin/country/index.js";
+type FiadoApiResponse<T> = import("@fiado/type-kit/bin/apiResponse/dtos/FiadoApiResponse.js").default<T>;
 export declare class AccountBeneficiaryApi implements IAccountBeneficiaryApi {
     private httpRequest;
     private readonly baseUrl;
     constructor(httpRequest: IHttpRequest);
     create(directoryId: string, countryId: CountryId, input: AccountBeneficiaryCreateRequest[]): Promise<void>;
+    getByDirectoryId(directoryId: string, countryId: CountryId): Promise<FiadoApiResponse<AccountBeneficiaryResponse[]>>;
+    update(directoryId: string, countryId: CountryId, input: AccountBeneficiaryCreateRequest[]): Promise<FiadoApiResponse<unknown>>;
 }
+export {};

package/bin/account-beneficiary/AccountBeneficiaryApi.js

@@ -21,6 +21,14 @@ let AccountBeneficiaryApi = class AccountBeneficiaryApi {
         const url = `${this.baseUrl}${countryId}/users/${directoryId}`;
         return await this.httpRequest.post(url, input);
     }
+    async getByDirectoryId(directoryId, countryId) {
+        const url = `${this.baseUrl}${countryId}/users/${directoryId}`;
+        return await this.httpRequest.get(url);
+    }
+    async update(directoryId, countryId, input) {
+        const url = `${this.baseUrl}${countryId}/users/${directoryId}`;
+        return await this.httpRequest.put(url, input);
+    }
 };
 AccountBeneficiaryApi = __decorate([
     injectable(),

package/bin/account-beneficiary/interfaces/IAccountBeneficiaryApi.d.ts

@@ -1,5 +1,20 @@
-import { AccountBeneficiaryCreateRequest } from "@fiado/type-kit/bin/beneficiary/index.js";
+import { AccountBeneficiaryCreateRequest, AccountBeneficiaryResponse } from "@fiado/type-kit/bin/beneficiary/index.js";
 import { CountryId } from "@fiado/type-kit/bin/country/index.js";
+type FiadoApiResponse<T> = import("@fiado/type-kit/bin/apiResponse/dtos/FiadoApiResponse.js").default<T>;
+/**
+ * API PRIVADA de `beneficiary-business` (M2M, VPC-only). Las tres operaciones viven en la MISMA ruta
+ * (`/{countryId}/users/{directoryId}`) y se distinguen por método HTTP.
+ */
 export interface IAccountBeneficiaryApi {
     create(directoryId: string, countryId: CountryId, input: AccountBeneficiaryCreateRequest[]): Promise<void>;
+    /** Beneficiarios vigentes del directorio. Lista vacía si no tiene ninguno. */
+    getByDirectoryId(directoryId: string, countryId: CountryId): Promise<FiadoApiResponse<AccountBeneficiaryResponse[]>>;
+    /**
+     * Reemplaza el conjunto de beneficiarios del directorio.
+     *
+     * ⚠️ Es un REEMPLAZO, no un alta incremental: se manda SIEMPRE la lista completa que debe quedar.
+     * Mandar uno solo deja uno solo.
+     */
+    update(directoryId: string, countryId: CountryId, input: AccountBeneficiaryCreateRequest[]): Promise<FiadoApiResponse<unknown>>;
 }
+export {};

package/bin/auth-business/AuthBusinessApi.d.ts

@@ -1,5 +1,5 @@
 import type { IHttpRequest } from "@fiado/http-client";
-import type { IAuthBusinessApi } from "./interfaces/IAuthBusinessApi.js";
+import type { IAuthBusinessApi, ResolveOnboardingProfileInput, ResolveOnboardingProfileResponse } from "./interfaces/IAuthBusinessApi.js";
 import type { SignUpProspectRequest, SignUpProspectResponse } from "@fiado/type-kit/bin/auth/index.js";
 type FiadoApiResponse<T> = import("@fiado/type-kit/bin/apiResponse/dtos/FiadoApiResponse.js").default<T>;
 export declare class AuthBusinessApi implements IAuthBusinessApi {
@@ -10,5 +10,6 @@ export declare class AuthBusinessApi implements IAuthBusinessApi {
         deletedCount: number;
     }>>;
     signUpProspect(request: SignUpProspectRequest): Promise<FiadoApiResponse<SignUpProspectResponse>>;
+    resolveOnboardingProfile(input: ResolveOnboardingProfileInput): Promise<FiadoApiResponse<ResolveOnboardingProfileResponse>>;
 }
 export {};

package/bin/auth-business/AuthBusinessApi.js

@@ -12,6 +12,7 @@ var __param = (this && this.__param) || function (paramIndex, decorator) {
 };
 import { inject, injectable } from "inversify";
 import dotenv from 'dotenv';
+import { NotSupportedGeographyError } from "./interfaces/IAuthBusinessApi.js";
 dotenv.config();
 let AuthBusinessApi = class AuthBusinessApi {
     httpRequest;
@@ -33,6 +34,24 @@ let AuthBusinessApi = class AuthBusinessApi {
         const url = `${this.baseUrl}/private/signup-prospect`;
         return await this.httpRequest.post(url, request);
     }
+    async resolveOnboardingProfile(input) {
+        // Path exacto del openapi/private.yaml de auth-business (operationId: privateResolveOnboardingProfile).
+        const url = `${this.baseUrl}/private/onboarding-profile/resolve`;
+        try {
+            return await this.httpRequest.post(url, input);
+        }
+        catch (error) {
+            // @fiado/http-client es un wrapper fino de axios: ante 4xx/5xx el error trae
+            // `response.{status,data}`. Fila 8 de la matriz (400 NOT_SUPPORTED_GEOGRAPHY)
+            // se re-lanza TIPADA para que el consumidor la distinga por instanceof de un
+            // error de red/5xx (fail-closed, spec §9). Todo lo demás se propaga tal cual.
+            const response = error.response;
+            if (response?.status === 400 && response.data?.code === "NOT_SUPPORTED_GEOGRAPHY") {
+                throw new NotSupportedGeographyError();
+            }
+            throw error;
+        }
+    }
 };
 AuthBusinessApi = __decorate([
     injectable(),

package/bin/auth-business/interfaces/IAuthBusinessApi.d.ts

@@ -1,5 +1,23 @@
 import type { SignUpProspectRequest, SignUpProspectResponse } from "@fiado/type-kit/bin/auth/index.js";
+import type { Scope } from "@fiado/type-kit/bin/directory/enums/Scope.js";
 type FiadoApiResponse<T> = import("@fiado/type-kit/bin/apiResponse/dtos/FiadoApiResponse.js").default<T>;
+export interface ResolveOnboardingProfileInput {
+    countryOfBirth: string;
+    countryOfDomicile: string;
+    USA_DebitAccountWish?: boolean;
+    MEX_DebitAccountWish?: boolean;
+}
+export interface ResolveOnboardingProfileResponse {
+    scope: Scope[];
+    userProfile: "HOST";
+    USA_DebitAccountWish: boolean;
+    MEX_DebitAccountWish: boolean;
+    SSN_ITINRequired: boolean | null;
+}
+export declare class NotSupportedGeographyError extends Error {
+    readonly code = "NOT_SUPPORTED_GEOGRAPHY";
+    constructor();
+}
 /**
  * Interfaz para el servicio Auth Business (auth-business).
  */
@@ -26,5 +44,17 @@ export interface IAuthBusinessApi {
      * @throws propaga el error del destino; nunca devuelve fallback.
      */
     signUpProspect(request: SignUpProspectRequest): Promise<FiadoApiResponse<SignUpProspectResponse>>;
+    /**
+     * Fuente única de la decisión de onboarding por geografía (matriz nació × vive,
+     * spec 2026-07-27 §2/§2.1). El feature flag GEO_SCOPE_MATRIX_ENABLED vive en
+     * auth-business: con flag OFF devuelve la regla legacy de wish flags (paridad).
+     *
+     * ⚠️ PII: nunca loguees el payload (lleva países crudos) — logueá solo la salida
+     * (scope/SSN_ITINRequired) del lado del consumidor.
+     *
+     * @throws {NotSupportedGeographyError} fila 8 de la matriz (400 NOT_SUPPORTED_GEOGRAPHY del destino).
+     * @throws propaga cualquier otro error (red / 5xx / 400 INVALID_REQUEST) tal cual; nunca devuelve fallback.
+     */
+    resolveOnboardingProfile(input: ResolveOnboardingProfileInput): Promise<FiadoApiResponse<ResolveOnboardingProfileResponse>>;
 }
 export {};

package/bin/auth-business/interfaces/IAuthBusinessApi.js

@@ -1 +1,11 @@
-export {};
+// Fila 8 de la matriz (nació fuera / vive MX, pospuesta a fase 2): el destino responde
+// 400 con code NOT_SUPPORTED_GEOGRAPHY y el cliente lo re-lanza TIPADO para que el
+// consumidor lo distinga por instanceof de un error de red/5xx (fail-closed, spec §9).
+// El mensaje NO incluye países (regla cero-PII).
+export class NotSupportedGeographyError extends Error {
+    code = "NOT_SUPPORTED_GEOGRAPHY";
+    constructor() {
+        super("Geografía de onboarding no soportada");
+        this.name = "NotSupportedGeographyError";
+    }
+}

package/jest.config.cjs

@@ -8,5 +8,7 @@ module.exports = {
   transform: {
     '^.+\\.[tj]sx?$': ['ts-jest', { useESM: true, isolatedModules: true, tsconfig: 'tsconfig.test.json' }],
   },
-  transformIgnorePatterns: ['/node_modules/(?!(inversify|@inversifyjs)/)'],
+  // @fiado/gateway-adapter se publica como ESM puro ("type": "module") — hay que
+  // transformarlo para que jest (CJS runtime de los tests) pueda importarlo.
+  transformIgnorePatterns: ['/node_modules/(?!(inversify|@inversifyjs|@fiado/gateway-adapter)/)'],
 };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@fiado/api-invoker",
-  "version": "5.9.0",
+  "version": "5.11.0",
   "description": "Sirve como un puente entre diferentes funciones lambda, facilitando la comunicación entre ellas a través de invocaciones http",
   "type": "module",
   "main": "bin/index.js",

package/src/account-beneficiary/AccountBeneficiaryApi.ts

@@ -1,9 +1,10 @@
 import { inject, injectable } from "inversify";
 import { IAccountBeneficiaryApi } from "./interfaces/IAccountBeneficiaryApi.js";
 import { IHttpRequest } from "@fiado/http-client";
-import { AccountBeneficiaryCreateRequest } from "@fiado/type-kit/bin/beneficiary/index.js";
+import { AccountBeneficiaryCreateRequest, AccountBeneficiaryResponse } from "@fiado/type-kit/bin/beneficiary/index.js";
 import { CountryId } from "@fiado/type-kit/bin/country/index.js";
 
+type FiadoApiResponse<T> = import("@fiado/type-kit/bin/apiResponse/dtos/FiadoApiResponse.js").default<T>;
 
 @injectable()
 export class AccountBeneficiaryApi implements IAccountBeneficiaryApi {
@@ -16,4 +17,14 @@ export class AccountBeneficiaryApi implements IAccountBeneficiaryApi {
         const url = `${this.baseUrl}${countryId}/users/${directoryId}`;
         return await this.httpRequest.post(url, input);
     }
-}
+
+    async getByDirectoryId(directoryId: string, countryId: CountryId): Promise<FiadoApiResponse<AccountBeneficiaryResponse[]>> {
+        const url = `${this.baseUrl}${countryId}/users/${directoryId}`;
+        return await this.httpRequest.get<FiadoApiResponse<AccountBeneficiaryResponse[]>>(url);
+    }
+
+    async update(directoryId: string, countryId: CountryId, input: AccountBeneficiaryCreateRequest[]): Promise<FiadoApiResponse<unknown>> {
+        const url = `${this.baseUrl}${countryId}/users/${directoryId}`;
+        return await this.httpRequest.put<FiadoApiResponse<unknown>>(url, input);
+    }
+}

package/src/account-beneficiary/interfaces/IAccountBeneficiaryApi.ts

@@ -1,8 +1,25 @@
-import { AccountBeneficiaryCreateRequest } from "@fiado/type-kit/bin/beneficiary/index.js";
+import { AccountBeneficiaryCreateRequest, AccountBeneficiaryResponse } from "@fiado/type-kit/bin/beneficiary/index.js";
 import { CountryId } from "@fiado/type-kit/bin/country/index.js";
 
+type FiadoApiResponse<T> = import("@fiado/type-kit/bin/apiResponse/dtos/FiadoApiResponse.js").default<T>;
+
+/**
+ * API PRIVADA de `beneficiary-business` (M2M, VPC-only). Las tres operaciones viven en la MISMA ruta
+ * (`/{countryId}/users/{directoryId}`) y se distinguen por método HTTP.
+ */
 export interface IAccountBeneficiaryApi {
 
     create(directoryId: string, countryId: CountryId, input: AccountBeneficiaryCreateRequest[]): Promise<void>;
 
-}
+    /** Beneficiarios vigentes del directorio. Lista vacía si no tiene ninguno. */
+    getByDirectoryId(directoryId: string, countryId: CountryId): Promise<FiadoApiResponse<AccountBeneficiaryResponse[]>>;
+
+    /**
+     * Reemplaza el conjunto de beneficiarios del directorio.
+     *
+     * ⚠️ Es un REEMPLAZO, no un alta incremental: se manda SIEMPRE la lista completa que debe quedar.
+     * Mandar uno solo deja uno solo.
+     */
+    update(directoryId: string, countryId: CountryId, input: AccountBeneficiaryCreateRequest[]): Promise<FiadoApiResponse<unknown>>;
+
+}

package/src/auth-business/AuthBusinessApi.ts

@@ -1,7 +1,12 @@
 import { inject, injectable } from "inversify";
 import type { IHttpRequest } from "@fiado/http-client";
 import dotenv from 'dotenv';
-import type { IAuthBusinessApi } from "./interfaces/IAuthBusinessApi.js";
+import type {
+    IAuthBusinessApi,
+    ResolveOnboardingProfileInput,
+    ResolveOnboardingProfileResponse,
+} from "./interfaces/IAuthBusinessApi.js";
+import { NotSupportedGeographyError } from "./interfaces/IAuthBusinessApi.js";
 import type { SignUpProspectRequest, SignUpProspectResponse } from "@fiado/type-kit/bin/auth/index.js";
 type FiadoApiResponse<T> = import("@fiado/type-kit/bin/apiResponse/dtos/FiadoApiResponse.js").default<T>;
 
@@ -29,4 +34,22 @@ export class AuthBusinessApi implements IAuthBusinessApi {
         const url = `${this.baseUrl}/private/signup-prospect`;
         return await this.httpRequest.post<FiadoApiResponse<SignUpProspectResponse>>(url, request);
     }
+
+    async resolveOnboardingProfile(input: ResolveOnboardingProfileInput): Promise<FiadoApiResponse<ResolveOnboardingProfileResponse>> {
+        // Path exacto del openapi/private.yaml de auth-business (operationId: privateResolveOnboardingProfile).
+        const url = `${this.baseUrl}/private/onboarding-profile/resolve`;
+        try {
+            return await this.httpRequest.post<FiadoApiResponse<ResolveOnboardingProfileResponse>>(url, input);
+        } catch (error) {
+            // @fiado/http-client es un wrapper fino de axios: ante 4xx/5xx el error trae
+            // `response.{status,data}`. Fila 8 de la matriz (400 NOT_SUPPORTED_GEOGRAPHY)
+            // se re-lanza TIPADA para que el consumidor la distinga por instanceof de un
+            // error de red/5xx (fail-closed, spec §9). Todo lo demás se propaga tal cual.
+            const response = (error as { response?: { status?: number; data?: { code?: string } } }).response;
+            if (response?.status === 400 && response.data?.code === "NOT_SUPPORTED_GEOGRAPHY") {
+                throw new NotSupportedGeographyError();
+            }
+            throw error;
+        }
+    }
 }

package/src/auth-business/interfaces/IAuthBusinessApi.ts

@@ -1,7 +1,44 @@
 import type { SignUpProspectRequest, SignUpProspectResponse } from "@fiado/type-kit/bin/auth/index.js";
+import type { Scope } from "@fiado/type-kit/bin/directory/enums/Scope.js";
 
 type FiadoApiResponse<T> = import("@fiado/type-kit/bin/apiResponse/dtos/FiadoApiResponse.js").default<T>;
 
+// Input de la matriz geográfica de onboarding (spec 2026-07-27 §2).
+// Interfaz LOCAL transitoria: el DTO canónico con validators vive en auth-business y su
+// TD-004 pendiente lo cataloga en @fiado/type-kit — cuando eso pase, este tipo se
+// reemplaza por el del type-kit (como ya hace signUpProspect en este mismo archivo).
+// Los wish flags viajan por compatibilidad de contrato: con GEO_SCOPE_MATRIX_ENABLED
+// prendido en auth-business se ignoran; apagado, deciden la regla legacy (paridad).
+export interface ResolveOnboardingProfileInput {
+    countryOfBirth: string;
+    countryOfDomicile: string;
+    USA_DebitAccountWish?: boolean;
+    MEX_DebitAccountWish?: boolean;
+}
+
+// Salida de la matriz (spec §2/§2.1): scope + userProfile + wish flags DERIVADOS
+// (son los que el consumidor persiste, no los del request) + SSN_ITINRequired
+// (null cuando el flag de la matriz está apagado en auth-business).
+export interface ResolveOnboardingProfileResponse {
+    scope: Scope[];
+    userProfile: "HOST";
+    USA_DebitAccountWish: boolean;
+    MEX_DebitAccountWish: boolean;
+    SSN_ITINRequired: boolean | null;
+}
+
+// Fila 8 de la matriz (nació fuera / vive MX, pospuesta a fase 2): el destino responde
+// 400 con code NOT_SUPPORTED_GEOGRAPHY y el cliente lo re-lanza TIPADO para que el
+// consumidor lo distinga por instanceof de un error de red/5xx (fail-closed, spec §9).
+// El mensaje NO incluye países (regla cero-PII).
+export class NotSupportedGeographyError extends Error {
+    readonly code = "NOT_SUPPORTED_GEOGRAPHY";
+    constructor() {
+        super("Geografía de onboarding no soportada");
+        this.name = "NotSupportedGeographyError";
+    }
+}
+
 /**
  * Interfaz para el servicio Auth Business (auth-business).
  */
@@ -29,4 +66,17 @@ export interface IAuthBusinessApi {
      * @throws propaga el error del destino; nunca devuelve fallback.
      */
     signUpProspect(request: SignUpProspectRequest): Promise<FiadoApiResponse<SignUpProspectResponse>>;
+
+    /**
+     * Fuente única de la decisión de onboarding por geografía (matriz nació × vive,
+     * spec 2026-07-27 §2/§2.1). El feature flag GEO_SCOPE_MATRIX_ENABLED vive en
+     * auth-business: con flag OFF devuelve la regla legacy de wish flags (paridad).
+     *
+     * ⚠️ PII: nunca loguees el payload (lleva países crudos) — logueá solo la salida
+     * (scope/SSN_ITINRequired) del lado del consumidor.
+     *
+     * @throws {NotSupportedGeographyError} fila 8 de la matriz (400 NOT_SUPPORTED_GEOGRAPHY del destino).
+     * @throws propaga cualquier otro error (red / 5xx / 400 INVALID_REQUEST) tal cual; nunca devuelve fallback.
+     */
+    resolveOnboardingProfile(input: ResolveOnboardingProfileInput): Promise<FiadoApiResponse<ResolveOnboardingProfileResponse>>;
 }