@fiado/type-kit 3.138.0 → 3.140.0

package/bin/platformRbac/auth/PrepareChallengeRequest.d.ts

@@ -3,4 +3,5 @@ export declare class PrepareChallengeRequest {
     cognitoSub: string;
     challengeName: ChallengeNameEnum;
     email: string;
+    phone?: string;
 }

package/bin/platformRbac/auth/PrepareChallengeRequest.js

@@ -27,3 +27,8 @@ __decorate([
     (0, class_validator_1.IsEmail)(),
     __metadata("design:type", String)
 ], PrepareChallengeRequest.prototype, "email", void 0);
+__decorate([
+    (0, class_validator_1.IsOptional)(),
+    (0, class_validator_1.IsString)(),
+    __metadata("design:type", String)
+], PrepareChallengeRequest.prototype, "phone", void 0);

package/bin/platformRbac/dtos/TenantSecurityPolicyResponse.d.ts

@@ -6,6 +6,6 @@
  * MfaMethodEnum ('EMAIL_OTP'|'TOTP') a propósito. Ver TECH_DEBT.md del platform-rbac-business.
  */
 export interface TenantSecurityPolicyResponse {
-    methodsAllowed: ('EMAIL' | 'TOTP')[];
+    methodsAllowed: ('EMAIL' | 'TOTP' | 'SMS')[];
     mfaEnabled?: boolean;
 }

package/bin/platformRbac/dtos/UpdateTenantSecurityPolicyRequest.d.ts

@@ -1,4 +1,4 @@
 export declare class UpdateTenantSecurityPolicyRequest {
-    methodsAllowed: ('EMAIL' | 'TOTP')[];
+    methodsAllowed: ('EMAIL' | 'TOTP' | 'SMS')[];
     mfaEnabled?: boolean;
 }

package/bin/platformRbac/dtos/UpdateTenantSecurityPolicyRequest.js

@@ -12,14 +12,15 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.UpdateTenantSecurityPolicyRequest = void 0;
 const class_transformer_1 = require("class-transformer");
 const class_validator_1 = require("class-validator");
-// TD-RBAC-071: methodsAllowed usa el value-set 'EMAIL'|'TOTP' (string), distinto de MfaMethodEnum.
+// TD-RBAC-071: methodsAllowed usa el value-set 'EMAIL'|'TOTP'|'SMS' (string), distinto de MfaMethodEnum.
+// DEC-RBAC-085: 'SMS' se suma como método tenant-controlado (3er método de MFA).
 class UpdateTenantSecurityPolicyRequest {
 }
 exports.UpdateTenantSecurityPolicyRequest = UpdateTenantSecurityPolicyRequest;
 __decorate([
     (0, class_transformer_1.Expose)(),
     (0, class_validator_1.ArrayNotEmpty)(),
-    (0, class_validator_1.IsIn)(['EMAIL', 'TOTP'], { each: true }),
+    (0, class_validator_1.IsIn)(['EMAIL', 'TOTP', 'SMS'], { each: true }),
     __metadata("design:type", Array)
 ], UpdateTenantSecurityPolicyRequest.prototype, "methodsAllowed", void 0);
 __decorate([

package/bin/platformRbac/enums/ChallengeNameEnum.d.ts

@@ -3,5 +3,6 @@ export declare enum ChallengeNameEnum {
     EMAIL_OTP = "EMAIL_OTP",
     TOTP = "TOTP",
     NEW_PASSWORD_REQUIRED = "NEW_PASSWORD_REQUIRED",
-    RESET_PASSWORD = "RESET_PASSWORD"
+    RESET_PASSWORD = "RESET_PASSWORD",
+    SMS_OTP = "SMS_OTP"
 }

package/bin/platformRbac/enums/ChallengeNameEnum.js

@@ -8,4 +8,5 @@ var ChallengeNameEnum;
     ChallengeNameEnum["TOTP"] = "TOTP";
     ChallengeNameEnum["NEW_PASSWORD_REQUIRED"] = "NEW_PASSWORD_REQUIRED";
     ChallengeNameEnum["RESET_PASSWORD"] = "RESET_PASSWORD";
+    ChallengeNameEnum["SMS_OTP"] = "SMS_OTP";
 })(ChallengeNameEnum || (exports.ChallengeNameEnum = ChallengeNameEnum = {}));

package/bin/platformRbac/enums/MfaMethodEnum.d.ts

@@ -1,4 +1,5 @@
 export declare enum MfaMethodEnum {
     EMAIL_OTP = "EMAIL_OTP",
-    TOTP = "TOTP"
+    TOTP = "TOTP",
+    SMS_OTP = "SMS_OTP"
 }

package/bin/platformRbac/enums/MfaMethodEnum.js

@@ -5,4 +5,5 @@ var MfaMethodEnum;
 (function (MfaMethodEnum) {
     MfaMethodEnum["EMAIL_OTP"] = "EMAIL_OTP";
     MfaMethodEnum["TOTP"] = "TOTP";
+    MfaMethodEnum["SMS_OTP"] = "SMS_OTP";
 })(MfaMethodEnum || (exports.MfaMethodEnum = MfaMethodEnum = {}));

package/bin/remittance/dtos/RemittanceBackofficeTransaction.d.ts

@@ -8,6 +8,12 @@ export declare class RemittanceBackofficeTransaction {
     directoryId: string;
     txNumber: string;
     marketplaceTransactionNumber?: string;
+    /**
+     * Nombre del remitente (usuario de remesas). Se resuelve en el connector
+     * uniendo `directoryId` → `RemittanceUser.fullName` (tabla de remesas), NO
+     * viene de directory. `null` si el usuario aún no tiene `fullName` snapshotteado.
+     */
+    senderName?: string | null;
     beneficiaryId: string;
     beneficiaryName: string;
     countryISO: string;

package/bin/remittance/dtos/RemittanceBackofficeUserView.d.ts

@@ -6,6 +6,12 @@
 export declare class RemittanceBackofficeUserView {
     directoryId: string;
     unirEmail: string;
+    /** Nombre del usuario (snapshot de identidad UNIR en la tabla de remesas). `null` si aún no se snapshoteó. */
+    fullName?: string | null;
+    /** Ciudad del usuario (RemittanceUser.addressCity). `null` si no está poblada. */
+    city?: string | null;
+    /** Estado/provincia del usuario (RemittanceUser.addressState). `null` si no está poblada. */
+    state?: string | null;
     status: string;
     remitterStatus?: string;
     remitterLevel?: string;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@fiado/type-kit",
-  "version": "3.138.0",
+  "version": "3.140.0",
   "description": "",
   "main": "bin/index.js",
   "types": "bin/index.d.ts",

package/src/platformRbac/auth/PrepareChallengeRequest.ts

@@ -1,4 +1,4 @@
-import { IsEmail, IsEnum, IsString } from 'class-validator';
+import { IsEmail, IsEnum, IsOptional, IsString } from 'class-validator';
 import { ChallengeNameEnum } from '../enums/ChallengeNameEnum';
 
 export class PrepareChallengeRequest {
@@ -10,4 +10,11 @@ export class PrepareChallengeRequest {
 
     @IsEmail()
     email!: string;
+
+    // DEC-RBAC-083: teléfono destino del challenge SMS_OTP. Lo popula el trigger CreateAuthChallenge
+    // (JWTAuth-cognito) desde el atributo phone_number de Cognito, igual que email. Opcional: ausente
+    // en challenges EMAIL_OTP/TOTP. Ver TD-RBAC-124.
+    @IsOptional()
+    @IsString()
+    phone?: string;
 }

package/src/platformRbac/dtos/TenantSecurityPolicyResponse.ts

@@ -6,7 +6,7 @@
  * MfaMethodEnum ('EMAIL_OTP'|'TOTP') a propósito. Ver TECH_DEBT.md del platform-rbac-business.
  */
 export interface TenantSecurityPolicyResponse {
-    methodsAllowed: ('EMAIL' | 'TOTP')[];
+    methodsAllowed: ('EMAIL' | 'TOTP' | 'SMS')[];
 
     // DEC-RBAC-045: 2FA master switch por tenant. Ausente ⇒ habilitado (secure-by-default).
     mfaEnabled?: boolean;

package/src/platformRbac/dtos/UpdateTenantSecurityPolicyRequest.ts

@@ -1,12 +1,13 @@
 import { Expose } from 'class-transformer';
 import { ArrayNotEmpty, IsBoolean, IsIn, IsOptional } from 'class-validator';
 
-// TD-RBAC-071: methodsAllowed usa el value-set 'EMAIL'|'TOTP' (string), distinto de MfaMethodEnum.
+// TD-RBAC-071: methodsAllowed usa el value-set 'EMAIL'|'TOTP'|'SMS' (string), distinto de MfaMethodEnum.
+// DEC-RBAC-085: 'SMS' se suma como método tenant-controlado (3er método de MFA).
 export class UpdateTenantSecurityPolicyRequest {
     @Expose()
     @ArrayNotEmpty()
-    @IsIn(['EMAIL', 'TOTP'], { each: true })
-    methodsAllowed!: ('EMAIL' | 'TOTP')[];
+    @IsIn(['EMAIL', 'TOTP', 'SMS'], { each: true })
+    methodsAllowed!: ('EMAIL' | 'TOTP' | 'SMS')[];
 
     // DEC-RBAC-045: 2FA master switch por tenant. Ausente ⇒ habilitado (secure-by-default).
     @Expose()

package/src/platformRbac/enums/ChallengeNameEnum.ts

@@ -4,4 +4,5 @@ export enum ChallengeNameEnum {
     TOTP = 'TOTP',
     NEW_PASSWORD_REQUIRED = 'NEW_PASSWORD_REQUIRED',
     RESET_PASSWORD = 'RESET_PASSWORD',
+    SMS_OTP = 'SMS_OTP',
 }

package/src/platformRbac/enums/MfaMethodEnum.ts

@@ -1,4 +1,5 @@
 export enum MfaMethodEnum {
     EMAIL_OTP = 'EMAIL_OTP',
     TOTP = 'TOTP',
+    SMS_OTP = 'SMS_OTP',
 }

package/src/remittance/dtos/RemittanceBackofficeTransaction.ts

@@ -9,6 +9,12 @@ export class RemittanceBackofficeTransaction {
     directoryId!: string;
     txNumber!: string;
     marketplaceTransactionNumber?: string;
+    /**
+     * Nombre del remitente (usuario de remesas). Se resuelve en el connector
+     * uniendo `directoryId` → `RemittanceUser.fullName` (tabla de remesas), NO
+     * viene de directory. `null` si el usuario aún no tiene `fullName` snapshotteado.
+     */
+    senderName?: string | null;
     beneficiaryId!: string;
     beneficiaryName!: string;
     countryISO!: string;

package/src/remittance/dtos/RemittanceBackofficeUserView.ts

@@ -6,6 +6,12 @@
 export class RemittanceBackofficeUserView {
     directoryId!: string;
     unirEmail!: string;
+    /** Nombre del usuario (snapshot de identidad UNIR en la tabla de remesas). `null` si aún no se snapshoteó. */
+    fullName?: string | null;
+    /** Ciudad del usuario (RemittanceUser.addressCity). `null` si no está poblada. */
+    city?: string | null;
+    /** Estado/provincia del usuario (RemittanceUser.addressState). `null` si no está poblada. */
+    state?: string | null;
     status!: string;
     remitterStatus?: string;
     remitterLevel?: string;