@fiado/type-kit 3.165.0 → 3.166.0

package/_test_/unit/platformRbac/dtos/UpdateTenantAutoregisterRequest.test.ts

@@ -1,71 +1,71 @@
-import 'reflect-metadata';
-import { plainToInstance } from 'class-transformer';
-import { validate } from 'class-validator';
-import {
-    UpdateTenantAutoregisterRequest,
-    UpdateTenantAutoregisterAllowedRole,
-} from '../../../../src/platformRbac/dtos/UpdateTenantAutoregisterRequest';
-import { PermissionScope } from '../../../../src/platformRbac/enums/PermissionScope';
-
-describe('UpdateTenantAutoregisterRequest', () => {
-    const valid = {
-        enabled: true,
-        allowedRoles: [
-            { roleId: 'role-agente', scope: 'LEVEL_1', allowedScopeRefs: ['grp-1'] },
-            { roleId: 'role-rrhh', scope: 'LEVEL_1' },
-        ],
-        otpTtlSeconds: 300,
-    };
-
-    it('valida happy path (0 errores)', async () => {
-        const dto = plainToInstance(UpdateTenantAutoregisterRequest, valid);
-        const errors = await validate(dto);
-        expect(errors).toEqual([]);
-    });
-
-    it('valida sin otpTtlSeconds (opcional) y con allowedRoles vacío', async () => {
-        const dto = plainToInstance(UpdateTenantAutoregisterRequest, {
-            enabled: false,
-            allowedRoles: [],
-        });
-        const errors = await validate(dto);
-        expect(errors).toEqual([]);
-    });
-
-    it('falla si enabled falta', async () => {
-        const { enabled, ...sinEnabled } = valid;
-        const dto = plainToInstance(UpdateTenantAutoregisterRequest, sinEnabled);
-        const errors = await validate(dto);
-        expect(errors.some(e => e.property === 'enabled')).toBe(true);
-    });
-
-    it('falla si allowedRoles no es array', async () => {
-        const dto = plainToInstance(UpdateTenantAutoregisterRequest, {
-            ...valid,
-            allowedRoles: 'no-array',
-        });
-        const errors = await validate(dto);
-        expect(errors.some(e => e.property === 'allowedRoles')).toBe(true);
-    });
-
-    it('falla (nested) si un allowedRole tiene scope inválido', async () => {
-        const dto = plainToInstance(UpdateTenantAutoregisterRequest, {
-            ...valid,
-            allowedRoles: [{ roleId: 'r1', scope: 'INEXISTENTE' }],
-        });
-        const errors = await validate(dto);
-        expect(errors.some(e => e.property === 'allowedRoles')).toBe(true);
-    });
-
-    it('falla si otpTtlSeconds no es entero positivo', async () => {
-        const dto = plainToInstance(UpdateTenantAutoregisterRequest, { ...valid, otpTtlSeconds: 0 });
-        const errors = await validate(dto);
-        expect(errors.some(e => e.property === 'otpTtlSeconds')).toBe(true);
-    });
-
-    it('hidrata cada allowedRole a UpdateTenantAutoregisterAllowedRole con su scope enum', async () => {
-        const dto = plainToInstance(UpdateTenantAutoregisterRequest, valid);
-        expect(dto.allowedRoles[0]).toBeInstanceOf(UpdateTenantAutoregisterAllowedRole);
-        expect(dto.allowedRoles[0].scope).toBe(PermissionScope.LEVEL_1);
-    });
-});
+import 'reflect-metadata';
+import { plainToInstance } from 'class-transformer';
+import { validate } from 'class-validator';
+import {
+    UpdateTenantAutoregisterRequest,
+    UpdateTenantAutoregisterAllowedRole,
+} from '../../../../src/platformRbac/dtos/UpdateTenantAutoregisterRequest';
+import { PermissionScope } from '../../../../src/platformRbac/enums/PermissionScope';
+
+describe('UpdateTenantAutoregisterRequest', () => {
+    const valid = {
+        enabled: true,
+        allowedRoles: [
+            { roleId: 'role-agente', scope: 'LEVEL_1', allowedScopeRefs: ['grp-1'] },
+            { roleId: 'role-rrhh', scope: 'LEVEL_1' },
+        ],
+        otpTtlSeconds: 300,
+    };
+
+    it('valida happy path (0 errores)', async () => {
+        const dto = plainToInstance(UpdateTenantAutoregisterRequest, valid);
+        const errors = await validate(dto);
+        expect(errors).toEqual([]);
+    });
+
+    it('valida sin otpTtlSeconds (opcional) y con allowedRoles vacío', async () => {
+        const dto = plainToInstance(UpdateTenantAutoregisterRequest, {
+            enabled: false,
+            allowedRoles: [],
+        });
+        const errors = await validate(dto);
+        expect(errors).toEqual([]);
+    });
+
+    it('falla si enabled falta', async () => {
+        const { enabled, ...sinEnabled } = valid;
+        const dto = plainToInstance(UpdateTenantAutoregisterRequest, sinEnabled);
+        const errors = await validate(dto);
+        expect(errors.some(e => e.property === 'enabled')).toBe(true);
+    });
+
+    it('falla si allowedRoles no es array', async () => {
+        const dto = plainToInstance(UpdateTenantAutoregisterRequest, {
+            ...valid,
+            allowedRoles: 'no-array',
+        });
+        const errors = await validate(dto);
+        expect(errors.some(e => e.property === 'allowedRoles')).toBe(true);
+    });
+
+    it('falla (nested) si un allowedRole tiene scope inválido', async () => {
+        const dto = plainToInstance(UpdateTenantAutoregisterRequest, {
+            ...valid,
+            allowedRoles: [{ roleId: 'r1', scope: 'INEXISTENTE' }],
+        });
+        const errors = await validate(dto);
+        expect(errors.some(e => e.property === 'allowedRoles')).toBe(true);
+    });
+
+    it('falla si otpTtlSeconds no es entero positivo', async () => {
+        const dto = plainToInstance(UpdateTenantAutoregisterRequest, { ...valid, otpTtlSeconds: 0 });
+        const errors = await validate(dto);
+        expect(errors.some(e => e.property === 'otpTtlSeconds')).toBe(true);
+    });
+
+    it('hidrata cada allowedRole a UpdateTenantAutoregisterAllowedRole con su scope enum', async () => {
+        const dto = plainToInstance(UpdateTenantAutoregisterRequest, valid);
+        expect(dto.allowedRoles[0]).toBeInstanceOf(UpdateTenantAutoregisterAllowedRole);
+        expect(dto.allowedRoles[0].scope).toBe(PermissionScope.LEVEL_1);
+    });
+});

package/_test_/unit/platformRbac/dtos/effectivePermissions.test.ts

@@ -1,22 +1,22 @@
-import 'reflect-metadata';
-import type { AuthContext, EffectivePermissionsResponse } from '../../../../src/platformRbac/index';
-
-it('AuthContext acepta los campos opcionales del token-as-cache', () => {
-    const ctx: AuthContext = {
-        cognitoSub: 's',
-        tenantId: 't',
-        email: 'e',
-        roleAssignments: [],
-        permissions: [],
-        resolvedAt: 'now',
-        permBits: 'AAA',
-        permVer: 1,
-        permsEpoch: 3,
-    };
-    expect(ctx.permVer).toBe(1);
-});
-
-it('EffectivePermissionsResponse tiene permissions + roleAssignments + epoch', () => {
-    const r: EffectivePermissionsResponse = { permissions: [], roleAssignments: [], permsEpoch: 0 };
-    expect(r.permsEpoch).toBe(0);
-});
+import 'reflect-metadata';
+import type { AuthContext, EffectivePermissionsResponse } from '../../../../src/platformRbac/index';
+
+it('AuthContext acepta los campos opcionales del token-as-cache', () => {
+    const ctx: AuthContext = {
+        cognitoSub: 's',
+        tenantId: 't',
+        email: 'e',
+        roleAssignments: [],
+        permissions: [],
+        resolvedAt: 'now',
+        permBits: 'AAA',
+        permVer: 1,
+        permsEpoch: 3,
+    };
+    expect(ctx.permVer).toBe(1);
+});
+
+it('EffectivePermissionsResponse tiene permissions + roleAssignments + epoch', () => {
+    const r: EffectivePermissionsResponse = { permissions: [], roleAssignments: [], permsEpoch: 0 };
+    expect(r.permsEpoch).toBe(0);
+});

package/_test_/unit/platformRbac/enums/PrincipalIdentifierEnum.test.ts

@@ -1,10 +1,10 @@
-import { describe, it, expect } from '@jest/globals';
-import { PrincipalIdentifierEnum } from '../../../../src/platformRbac/enums/PrincipalIdentifierEnum';
-
-describe('PrincipalIdentifierEnum', () => {
-    it('tiene EMAIL y PHONE con esos valores', () => {
-        expect(PrincipalIdentifierEnum.EMAIL).toBe('EMAIL');
-        expect(PrincipalIdentifierEnum.PHONE).toBe('PHONE');
-        expect(Object.values(PrincipalIdentifierEnum)).toEqual(['EMAIL', 'PHONE']);
-    });
-});
+import { describe, it, expect } from '@jest/globals';
+import { PrincipalIdentifierEnum } from '../../../../src/platformRbac/enums/PrincipalIdentifierEnum';
+
+describe('PrincipalIdentifierEnum', () => {
+    it('tiene EMAIL y PHONE con esos valores', () => {
+        expect(PrincipalIdentifierEnum.EMAIL).toBe('EMAIL');
+        expect(PrincipalIdentifierEnum.PHONE).toBe('PHONE');
+        expect(Object.values(PrincipalIdentifierEnum)).toEqual(['EMAIL', 'PHONE']);
+    });
+});

package/_test_/unit/platformRbac/enums/__snapshots__/permissionBits.test.ts.snap

@@ -1,94 +1,94 @@
-// Jest Snapshot v1, https://jestjs.io/docs/snapshot-testing
-
-exports[`PERMISSION_BIT_ORDER PERMS_VERSION es número estable 1`] = `1018014330`;
-
-exports[`PERMISSION_BIT_ORDER append-only: snapshot del ORDEN COMPLETO (rompe ante cualquier reorden/inserción) 1`] = `
-[
-  "rbac.catalog.manage",
-  "platform.tenant.create",
-  "platform.tenant.list",
-  "platform.tenant.view",
-  "platform.tenant.update",
-  "platform.tenant.suspend",
-  "platform.tenant.activate",
-  "platform.tenant.admin.replace",
-  "platform.cognito.pool.manage",
-  "platform.cognito.pool.list",
-  "platform.user.create",
-  "platform.user.list",
-  "platform.user.view",
-  "platform.user.update",
-  "platform.user.disable",
-  "platform.user.enable",
-  "platform.user.delete",
-  "platform.role.create",
-  "platform.role.list",
-  "platform.role.update",
-  "platform.role.delete",
-  "platform.audit.view",
-  "tenant.user.create",
-  "tenant.user.create.lateral",
-  "tenant.user.read",
-  "tenant.user.status",
-  "tenant.user.list",
-  "tenant.user.view",
-  "tenant.user.update",
-  "tenant.user.disable",
-  "tenant.user.enable",
-  "tenant.user.delete",
-  "tenant.user.mfa.reset",
-  "tenant.user.password.reset",
-  "tenant.role.create",
-  "tenant.role.list",
-  "tenant.role.update",
-  "tenant.role.delete",
-  "tenant.role.view",
-  "tenant.role.assign",
-  "tenant.role.revoke",
-  "tenant.security.policy.view",
-  "tenant.security.policy.manage",
-  "tenant.branding.manage",
-  "tenant.audit.view",
-  "platform.tenant.userfields.manage",
-  "platform.user.create.lateral",
-  "platform.application.manage",
-  "tenant.level.manage",
-  "platform.tenant.autoregister.manage",
-  "level1.user.create",
-  "level1.user.read",
-  "level1.user.update",
-  "level1.user.delete",
-  "level1.role.create",
-  "level1.role.list",
-  "level1.role.view",
-  "level1.role.update",
-  "level1.role.delete",
-  "level1.role.assign",
-  "level1.role.revoke",
-  "level1.audit.view",
-  "level2.user.create",
-  "level2.user.read",
-  "level2.user.update",
-  "level2.user.delete",
-  "level2.role.create",
-  "level2.role.list",
-  "level2.role.view",
-  "level2.role.update",
-  "level2.role.delete",
-  "level2.role.assign",
-  "level2.role.revoke",
-  "level2.audit.view",
-  "level3.user.create",
-  "level3.user.read",
-  "level3.user.update",
-  "level3.user.delete",
-  "level3.role.create",
-  "level3.role.list",
-  "level3.role.view",
-  "level3.role.update",
-  "level3.role.delete",
-  "level3.role.assign",
-  "level3.role.revoke",
-  "level3.audit.view",
-]
-`;
+// Jest Snapshot v1, https://jestjs.io/docs/snapshot-testing
+
+exports[`PERMISSION_BIT_ORDER PERMS_VERSION es número estable 1`] = `1018014330`;
+
+exports[`PERMISSION_BIT_ORDER append-only: snapshot del ORDEN COMPLETO (rompe ante cualquier reorden/inserción) 1`] = `
+[
+  "rbac.catalog.manage",
+  "platform.tenant.create",
+  "platform.tenant.list",
+  "platform.tenant.view",
+  "platform.tenant.update",
+  "platform.tenant.suspend",
+  "platform.tenant.activate",
+  "platform.tenant.admin.replace",
+  "platform.cognito.pool.manage",
+  "platform.cognito.pool.list",
+  "platform.user.create",
+  "platform.user.list",
+  "platform.user.view",
+  "platform.user.update",
+  "platform.user.disable",
+  "platform.user.enable",
+  "platform.user.delete",
+  "platform.role.create",
+  "platform.role.list",
+  "platform.role.update",
+  "platform.role.delete",
+  "platform.audit.view",
+  "tenant.user.create",
+  "tenant.user.create.lateral",
+  "tenant.user.read",
+  "tenant.user.status",
+  "tenant.user.list",
+  "tenant.user.view",
+  "tenant.user.update",
+  "tenant.user.disable",
+  "tenant.user.enable",
+  "tenant.user.delete",
+  "tenant.user.mfa.reset",
+  "tenant.user.password.reset",
+  "tenant.role.create",
+  "tenant.role.list",
+  "tenant.role.update",
+  "tenant.role.delete",
+  "tenant.role.view",
+  "tenant.role.assign",
+  "tenant.role.revoke",
+  "tenant.security.policy.view",
+  "tenant.security.policy.manage",
+  "tenant.branding.manage",
+  "tenant.audit.view",
+  "platform.tenant.userfields.manage",
+  "platform.user.create.lateral",
+  "platform.application.manage",
+  "tenant.level.manage",
+  "platform.tenant.autoregister.manage",
+  "level1.user.create",
+  "level1.user.read",
+  "level1.user.update",
+  "level1.user.delete",
+  "level1.role.create",
+  "level1.role.list",
+  "level1.role.view",
+  "level1.role.update",
+  "level1.role.delete",
+  "level1.role.assign",
+  "level1.role.revoke",
+  "level1.audit.view",
+  "level2.user.create",
+  "level2.user.read",
+  "level2.user.update",
+  "level2.user.delete",
+  "level2.role.create",
+  "level2.role.list",
+  "level2.role.view",
+  "level2.role.update",
+  "level2.role.delete",
+  "level2.role.assign",
+  "level2.role.revoke",
+  "level2.audit.view",
+  "level3.user.create",
+  "level3.user.read",
+  "level3.user.update",
+  "level3.user.delete",
+  "level3.role.create",
+  "level3.role.list",
+  "level3.role.view",
+  "level3.role.update",
+  "level3.role.delete",
+  "level3.role.assign",
+  "level3.role.revoke",
+  "level3.audit.view",
+]
+`;

package/_test_/unit/platformRbac/enums/autoregisterPermission.test.ts

@@ -1,15 +1,15 @@
-import { Permission, PERMISSION_BIT_ORDER } from '../../../../src/platformRbac/enums/Permission';
-
-describe('Permission.PLATFORM_TENANT_AUTOREGISTER_MANAGE', () => {
-    it('existe en el enum con el value canónico', () => {
-        expect(Permission.PLATFORM_TENANT_AUTOREGISTER_MANAGE).toBe('platform.tenant.autoregister.manage');
-    });
-
-    it('está en PERMISSION_BIT_ORDER (espejo de USERFIELDS_MANAGE)', () => {
-        expect(PERMISSION_BIT_ORDER).toContain(Permission.PLATFORM_TENANT_AUTOREGISTER_MANAGE);
-    });
-
-    it('es scope PLATFORM por convención de naming (platform.*)', () => {
-        expect(Permission.PLATFORM_TENANT_AUTOREGISTER_MANAGE.startsWith('platform.')).toBe(true);
-    });
-});
+import { Permission, PERMISSION_BIT_ORDER } from '../../../../src/platformRbac/enums/Permission';
+
+describe('Permission.PLATFORM_TENANT_AUTOREGISTER_MANAGE', () => {
+    it('existe en el enum con el value canónico', () => {
+        expect(Permission.PLATFORM_TENANT_AUTOREGISTER_MANAGE).toBe('platform.tenant.autoregister.manage');
+    });
+
+    it('está en PERMISSION_BIT_ORDER (espejo de USERFIELDS_MANAGE)', () => {
+        expect(PERMISSION_BIT_ORDER).toContain(Permission.PLATFORM_TENANT_AUTOREGISTER_MANAGE);
+    });
+
+    it('es scope PLATFORM por convención de naming (platform.*)', () => {
+        expect(Permission.PLATFORM_TENANT_AUTOREGISTER_MANAGE.startsWith('platform.')).toBe(true);
+    });
+});

package/_test_/unit/platformRbac/enums/permissionBits.test.ts

@@ -1,36 +1,36 @@
-import {
-    Permission,
-    PERMISSION_BIT_ORDER,
-    PERMS_VERSION,
-    permissionsToBits,
-    bitsToPermissions,
-} from '../../../../src/platformRbac/enums/Permission';
-
-describe('PERMISSION_BIT_ORDER', () => {
-    it('contiene TODOS los valores del enum Permission', () => {
-        const enumVals = Object.values(Permission) as string[];
-        expect([...PERMISSION_BIT_ORDER].sort()).toEqual([...enumVals].sort());
-    });
-    it('append-only: snapshot del ORDEN COMPLETO (rompe ante cualquier reorden/inserción)', () => {
-        // Snapshot del array entero, NO un prefijo: un reorden del índice 11+ o una inserción
-        // intermedia desalinea todos los tokens emitidos. Si esto rompe, fue intencional → -u consciente.
-        expect(PERMISSION_BIT_ORDER).toMatchSnapshot();
-    });
-    it('PERMS_VERSION es número estable', () => {
-        expect(typeof PERMS_VERSION).toBe('number');
-        expect(PERMS_VERSION).toMatchSnapshot();
-    });
-    it('round-trip permisos ↔ bits', () => {
-        const perms = [
-            PERMISSION_BIT_ORDER[0],
-            PERMISSION_BIT_ORDER[5],
-            PERMISSION_BIT_ORDER[PERMISSION_BIT_ORDER.length - 1],
-        ];
-        const bits = permissionsToBits(perms);
-        expect(typeof bits).toBe('string');
-        expect(new Set(bitsToPermissions(bits))).toEqual(new Set(perms));
-    });
-    it('bitsToPermissions tolera basura → []', () => {
-        expect(bitsToPermissions('')).toEqual([]);
-    });
-});
+import {
+    Permission,
+    PERMISSION_BIT_ORDER,
+    PERMS_VERSION,
+    permissionsToBits,
+    bitsToPermissions,
+} from '../../../../src/platformRbac/enums/Permission';
+
+describe('PERMISSION_BIT_ORDER', () => {
+    it('contiene TODOS los valores del enum Permission', () => {
+        const enumVals = Object.values(Permission) as string[];
+        expect([...PERMISSION_BIT_ORDER].sort()).toEqual([...enumVals].sort());
+    });
+    it('append-only: snapshot del ORDEN COMPLETO (rompe ante cualquier reorden/inserción)', () => {
+        // Snapshot del array entero, NO un prefijo: un reorden del índice 11+ o una inserción
+        // intermedia desalinea todos los tokens emitidos. Si esto rompe, fue intencional → -u consciente.
+        expect(PERMISSION_BIT_ORDER).toMatchSnapshot();
+    });
+    it('PERMS_VERSION es número estable', () => {
+        expect(typeof PERMS_VERSION).toBe('number');
+        expect(PERMS_VERSION).toMatchSnapshot();
+    });
+    it('round-trip permisos ↔ bits', () => {
+        const perms = [
+            PERMISSION_BIT_ORDER[0],
+            PERMISSION_BIT_ORDER[5],
+            PERMISSION_BIT_ORDER[PERMISSION_BIT_ORDER.length - 1],
+        ];
+        const bits = permissionsToBits(perms);
+        expect(typeof bits).toBe('string');
+        expect(new Set(bitsToPermissions(bits))).toEqual(new Set(perms));
+    });
+    it('bitsToPermissions tolera basura → []', () => {
+        expect(bitsToPermissions('')).toEqual([]);
+    });
+});

package/_test_/unit/platformRbac/tenantTypes.test.ts

@@ -1,23 +1,23 @@
-import { TENANT_TYPES, scopeRankOrder } from '../../../src/platformRbac/tenantTypes';
-import { PermissionScope } from '../../../src/platformRbac/enums/PermissionScope';
-
-describe('tenantTypes (post-purga v4.0.0 — solo niveles genéricos)', () => {
-    it('TENANT_TYPES quedó vacío tras purgar los tipos de dominio (retail/agents)', () => {
-        expect(Object.keys(TENANT_TYPES)).toHaveLength(0);
-    });
-
-    it('scopeRankOrder = [PLATFORM, TENANT, LEVEL_1, LEVEL_2, LEVEL_3]', () => {
-        expect(scopeRankOrder()).toEqual([
-            PermissionScope.PLATFORM,
-            PermissionScope.TENANT,
-            PermissionScope.LEVEL_1,
-            PermissionScope.LEVEL_2,
-            PermissionScope.LEVEL_3,
-        ]);
-    });
-
-    it('scopeRankOrder no produce duplicados', () => {
-        const order = scopeRankOrder();
-        expect(new Set(order).size).toBe(order.length);
-    });
-});
+import { TENANT_TYPES, scopeRankOrder } from '../../../src/platformRbac/tenantTypes';
+import { PermissionScope } from '../../../src/platformRbac/enums/PermissionScope';
+
+describe('tenantTypes (post-purga v4.0.0 — solo niveles genéricos)', () => {
+    it('TENANT_TYPES quedó vacío tras purgar los tipos de dominio (retail/agents)', () => {
+        expect(Object.keys(TENANT_TYPES)).toHaveLength(0);
+    });
+
+    it('scopeRankOrder = [PLATFORM, TENANT, LEVEL_1, LEVEL_2, LEVEL_3]', () => {
+        expect(scopeRankOrder()).toEqual([
+            PermissionScope.PLATFORM,
+            PermissionScope.TENANT,
+            PermissionScope.LEVEL_1,
+            PermissionScope.LEVEL_2,
+            PermissionScope.LEVEL_3,
+        ]);
+    });
+
+    it('scopeRankOrder no produce duplicados', () => {
+        const order = scopeRankOrder();
+        expect(new Set(order).size).toBe(order.length);
+    });
+});

package/_test_/unit/remittance/resolveExceptionCode.test.ts

@@ -1,37 +1,37 @@
-import { RemittanceExceptionCode } from "../../../src/remittance/enums/RemittanceExceptionCode";
-import {
-    REMITTANCE_EXCEPTION_CATALOG,
-    resolveExceptionCode,
-} from "../../../src/remittance/dtos/RemittanceExceptionCatalog";
-
-describe("resolveExceptionCode", () => {
-    it("HOLD con sub-status de timeout → HOLD_PROVIDER_TIMEOUT", () => {
-        expect(resolveExceptionCode("HOLD", "SENDMONEY_TIMEOUT")).toBe(RemittanceExceptionCode.HOLD_PROVIDER_TIMEOUT);
-    });
-    it("HOLD sin sub-status → HOLD_GENERIC", () => {
-        expect(resolveExceptionCode("HOLD")).toBe(RemittanceExceptionCode.HOLD_GENERIC);
-    });
-    it("CANCELLATION con cancelReason USER_REQUESTED → CANCEL_USER_REQUESTED", () => {
-        expect(resolveExceptionCode("CANCELLATION_IN_PROGRESS", undefined, "USER_REQUESTED")).toBe(RemittanceExceptionCode.CANCEL_USER_REQUESTED);
-    });
-    it("IN_PROCESS → INPROCESS_STALE_24H", () => {
-        expect(resolveExceptionCode("IN_PROCESS")).toBe(RemittanceExceptionCode.INPROCESS_STALE_24H);
-    });
-    it("HOLD con sub-status desconocido → HOLD_GENERIC (no UNKNOWN)", () => {
-        const code = resolveExceptionCode("HOLD", "ZZZ_NUEVO_CODIGO_UNIR");
-        expect(code).toBe(RemittanceExceptionCode.HOLD_GENERIC);
-        expect(REMITTANCE_EXCEPTION_CATALOG[code]).toBeDefined();
-    });
-    it("status totalmente inesperado → UNKNOWN con catálogo definido", () => {
-        const code = resolveExceptionCode("PLASMA");
-        expect(code).toBe(RemittanceExceptionCode.UNKNOWN);
-        expect(REMITTANCE_EXCEPTION_CATALOG[code].motivo.length).toBeGreaterThan(0);
-    });
-    it("todo our-code tiene entrada de catálogo (motivo+acción no vacíos)", () => {
-        for (const code of Object.values(RemittanceExceptionCode)) {
-            const entry = REMITTANCE_EXCEPTION_CATALOG[code];
-            expect(entry?.motivo?.length ?? 0).toBeGreaterThan(0);
-            expect(entry?.accionSugerida?.length ?? 0).toBeGreaterThan(0);
-        }
-    });
-});
+import { RemittanceExceptionCode } from "../../../src/remittance/enums/RemittanceExceptionCode";
+import {
+    REMITTANCE_EXCEPTION_CATALOG,
+    resolveExceptionCode,
+} from "../../../src/remittance/dtos/RemittanceExceptionCatalog";
+
+describe("resolveExceptionCode", () => {
+    it("HOLD con sub-status de timeout → HOLD_PROVIDER_TIMEOUT", () => {
+        expect(resolveExceptionCode("HOLD", "SENDMONEY_TIMEOUT")).toBe(RemittanceExceptionCode.HOLD_PROVIDER_TIMEOUT);
+    });
+    it("HOLD sin sub-status → HOLD_GENERIC", () => {
+        expect(resolveExceptionCode("HOLD")).toBe(RemittanceExceptionCode.HOLD_GENERIC);
+    });
+    it("CANCELLATION con cancelReason USER_REQUESTED → CANCEL_USER_REQUESTED", () => {
+        expect(resolveExceptionCode("CANCELLATION_IN_PROGRESS", undefined, "USER_REQUESTED")).toBe(RemittanceExceptionCode.CANCEL_USER_REQUESTED);
+    });
+    it("IN_PROCESS → INPROCESS_STALE_24H", () => {
+        expect(resolveExceptionCode("IN_PROCESS")).toBe(RemittanceExceptionCode.INPROCESS_STALE_24H);
+    });
+    it("HOLD con sub-status desconocido → HOLD_GENERIC (no UNKNOWN)", () => {
+        const code = resolveExceptionCode("HOLD", "ZZZ_NUEVO_CODIGO_UNIR");
+        expect(code).toBe(RemittanceExceptionCode.HOLD_GENERIC);
+        expect(REMITTANCE_EXCEPTION_CATALOG[code]).toBeDefined();
+    });
+    it("status totalmente inesperado → UNKNOWN con catálogo definido", () => {
+        const code = resolveExceptionCode("PLASMA");
+        expect(code).toBe(RemittanceExceptionCode.UNKNOWN);
+        expect(REMITTANCE_EXCEPTION_CATALOG[code].motivo.length).toBeGreaterThan(0);
+    });
+    it("todo our-code tiene entrada de catálogo (motivo+acción no vacíos)", () => {
+        for (const code of Object.values(RemittanceExceptionCode)) {
+            const entry = REMITTANCE_EXCEPTION_CATALOG[code];
+            expect(entry?.motivo?.length ?? 0).toBeGreaterThan(0);
+            expect(entry?.accionSugerida?.length ?? 0).toBeGreaterThan(0);
+        }
+    });
+});

package/bin/cognitoBackofficeConnector/dtos/MfaPoolConfig.d.ts

@@ -0,0 +1,7 @@
+declare const ALLOWED_MFA_TYPES: readonly ["SOFTWARE_TOKEN_MFA"];
+export type AllowedMfaType = (typeof ALLOWED_MFA_TYPES)[number];
+export declare class MfaPoolConfig {
+    requireMfa: boolean;
+    mfaTypes: AllowedMfaType[];
+}
+export {};