@fiado/type-kit 3.200.0 → 3.203.0

package/_test_/unit/auth/SignUpProspectRequest.test.ts

@@ -0,0 +1,32 @@
+import 'reflect-metadata';
+import { plainToInstance } from 'class-transformer';
+import { validate } from 'class-validator';
+import { SignUpProspectRequest } from '../../../src/auth/index';
+
+describe('SignUpProspectRequest', () => {
+  it('acepta un alta válida de prospecto', async () => {
+    const dto = plainToInstance(SignUpProspectRequest,
+      { name: 'Paulina Garcia', phoneNumber: '5512345678', tenantId: 'surekeep' },
+      { excludeExtraneousValues: true });
+
+    expect(await validate(dto as object)).toHaveLength(0);
+  });
+
+  it('rechaza si falta el tenantId (el hardcode FIADO_BETA es justo lo que se elimina)', async () => {
+    const dto = plainToInstance(SignUpProspectRequest,
+      { name: 'Paulina Garcia', phoneNumber: '5512345678' },
+      { excludeExtraneousValues: true });
+
+    const errors = await validate(dto as object);
+    expect(errors.map((e) => e.property)).toContain('tenantId');
+  });
+
+  it('rechaza campos vacíos en vez de dejarlos pasar', async () => {
+    const dto = plainToInstance(SignUpProspectRequest,
+      { name: '', phoneNumber: '', tenantId: '' },
+      { excludeExtraneousValues: true });
+
+    const props = (await validate(dto as object)).map((e) => e.property);
+    expect(props).toEqual(expect.arrayContaining(['name', 'phoneNumber', 'tenantId']));
+  });
+});

package/_test_/unit/auth/SignUpProspectResponse.test.ts

@@ -0,0 +1,26 @@
+import 'reflect-metadata';
+import { plainToInstance } from 'class-transformer';
+import { validate } from 'class-validator';
+import { SignUpProspectResponse } from '../../../src/auth/index';
+
+describe('SignUpProspectResponse', () => {
+  it('acepta una respuesta válida con ambos identificadores', async () => {
+    const dto = plainToInstance(SignUpProspectResponse,
+      { directoryId: 'dir-1', peopleId: 'ppl-1' },
+      { excludeExtraneousValues: true });
+
+    expect(await validate(dto as object)).toHaveLength(0);
+  });
+
+  // DEC-KYC-015: el destino ya demostró devolver strings vacíos. @IsString() pelado los dejaría
+  // pasar y la falla aparecería tres pasos río abajo. Candado simétrico sobre los DOS campos —
+  // con solo directoryId cubierto se podía quitar el @IsNotEmpty() de peopleId sin ponerse rojo.
+  it.each(['directoryId', 'peopleId'])('rechaza %s vacío en vez de dejarlo pasar', async (campo) => {
+    const dto = plainToInstance(SignUpProspectResponse,
+      { directoryId: 'dir-1', peopleId: 'ppl-1', [campo]: '' },
+      { excludeExtraneousValues: true });
+
+    const errors = await validate(dto as object);
+    expect(errors.map((e) => e.property)).toContain(campo);
+  });
+});

package/_test_/unit/kyc/KycByDirectoryResponse.test.ts

@@ -0,0 +1,139 @@
+import 'reflect-metadata';
+import { plainToInstance } from 'class-transformer';
+import { validate } from 'class-validator';
+import { KycByDirectoryResponse } from '../../../src/kyc/index';
+
+describe('KycByDirectoryResponse', () => {
+  it('acepta una respuesta completa con datos de persona', async () => {
+    const raw = {
+      consolidated: 'VERIFIED',
+      verificationId: 'ver-1',
+      peopleId: 'ppl-1',
+      metamapFlowId: 'flow-1',
+      verificationStatus: 'COMPLETED',
+      verificationResult: 'VERIFIED',
+      createDate: '2026-07-21T10:00:00.000Z',
+      updateDate: '2026-07-21T10:05:00.000Z',
+      person: {
+        names: 'PAULINA',
+        paternalLastName: 'GARCIA',
+        maternalLastName: 'MICHAUS',
+        curp: 'GAMP981028MDFRCL08',
+        dateOfBirth: '1998-10-28',
+      },
+    };
+
+    const dto = plainToInstance(KycByDirectoryResponse, raw, { excludeExtraneousValues: true });
+    const errors = await validate(dto as object);
+
+    expect(errors).toHaveLength(0);
+    expect(dto.person?.curp).toBe('GAMP981028MDFRCL08');
+  });
+
+  it('acepta una respuesta sin datos de persona (KYC aún sin completar)', async () => {
+    const raw = {
+      consolidated: 'PENDING',
+      verificationId: 'ver-2',
+      peopleId: 'ppl-2',
+      verificationStatus: 'IN_PROGRESS',
+      verificationResult: 'UNVERIFIED',
+      createDate: '2026-07-21T10:00:00.000Z',
+      updateDate: '2026-07-21T10:00:00.000Z',
+    };
+
+    const dto = plainToInstance(KycByDirectoryResponse, raw, { excludeExtraneousValues: true });
+
+    expect(await validate(dto as object)).toHaveLength(0);
+    expect(dto.person).toBeUndefined();
+  });
+
+  it('rechaza un verificationStatus fuera del enum', async () => {
+    const raw = {
+      consolidated: 'VERIFIED', verificationId: 'v', peopleId: 'p',
+      verificationStatus: 'INVENTADO', verificationResult: 'VERIFIED',
+      createDate: '2026-07-21T10:00:00.000Z', updateDate: '2026-07-21T10:00:00.000Z',
+    };
+
+    const dto = plainToInstance(KycByDirectoryResponse, raw, { excludeExtraneousValues: true });
+    const errors = await validate(dto as object);
+
+    expect(errors.map((e) => e.property)).toContain('verificationStatus');
+  });
+
+  // DEC-KYC-015: el 7.3% de las filas de dev trae peopleId vacío, 5 de ellas COMPLETED.
+  // @IsString() lo aceptaría en silencio y la falla aparecería tres pasos más adelante.
+  it('rechaza peopleId vacío en vez de dejarlo pasar', async () => {
+    const raw = {
+      consolidated: 'VERIFIED', verificationId: 'ver-1', peopleId: '',
+      verificationStatus: 'COMPLETED', verificationResult: 'VERIFIED',
+      createDate: '2026-07-21T10:00:00.000Z', updateDate: '2026-07-21T10:00:00.000Z',
+    };
+
+    const dto = plainToInstance(KycByDirectoryResponse, raw, { excludeExtraneousValues: true });
+    const errors = await validate(dto as object);
+
+    expect(errors.map((e) => e.property)).toContain('peopleId');
+  });
+
+  // DEC-KYC-015: candado simétrico al de peopleId. Sin este caso, alguien puede borrar el
+  // @IsNotEmpty() de verificationId y la suite sigue verde.
+  it('rechaza verificationId vacío en vez de dejarlo pasar', async () => {
+    const raw = {
+      consolidated: 'VERIFIED', verificationId: '', peopleId: 'ppl-1',
+      verificationStatus: 'COMPLETED', verificationResult: 'VERIFIED',
+      createDate: '2026-07-21T10:00:00.000Z', updateDate: '2026-07-21T10:00:00.000Z',
+    };
+
+    const dto = plainToInstance(KycByDirectoryResponse, raw, { excludeExtraneousValues: true });
+    const errors = await validate(dto as object);
+
+    expect(errors.map((e) => e.property)).toContain('verificationId');
+  });
+
+  // DEC-KYC-014: "sin verificación" se responde con 404, NO con un consolidated fuera de
+  // RetailKycStatusEnum. Este test es el candado de esa decisión.
+  it('rechaza un consolidated fuera de RetailKycStatusEnum (p.ej. el NONE descartado)', async () => {
+    const raw = {
+      consolidated: 'NONE', verificationId: 'ver-1', peopleId: 'ppl-1',
+      verificationStatus: 'COMPLETED', verificationResult: 'VERIFIED',
+      createDate: '2026-07-21T10:00:00.000Z', updateDate: '2026-07-21T10:00:00.000Z',
+    };
+
+    const dto = plainToInstance(KycByDirectoryResponse, raw, { excludeExtraneousValues: true });
+    const errors = await validate(dto as object);
+
+    expect(errors.map((e) => e.property)).toContain('consolidated');
+  });
+
+  // DEC-KYC-016: `verificationResult` está acotado a IdentificationDocumentStatus. Sin este
+  // candado se puede degradar el campo a @IsString() y la suite sigue verde (antipattern
+  // STRING_FOR_ENUM_FIELD). 'COMPLETED' es un valor del OTRO enum — el error de tipeo real.
+  it('rechaza un verificationResult que en realidad es un valor de verificationStatus', async () => {
+    const raw = {
+      consolidated: 'VERIFIED', verificationId: 'ver-1', peopleId: 'ppl-1',
+      verificationStatus: 'COMPLETED', verificationResult: 'COMPLETED',
+      createDate: '2026-07-21T10:00:00.000Z', updateDate: '2026-07-21T10:00:00.000Z',
+    };
+
+    const dto = plainToInstance(KycByDirectoryResponse, raw, { excludeExtraneousValues: true });
+    const errors = await validate(dto as object);
+
+    expect(errors.map((e) => e.property)).toContain('verificationResult');
+  });
+
+  // El ordenamiento del endpoint (spec §6) se apoya en fechas ISO-8601 léxicamente ordenables.
+  // Sin este candado se puede quitar el @IsISO8601() y la suite sigue verde.
+  it.each(['createDate', 'updateDate'])('rechaza %s con formato no ISO-8601', async (campo) => {
+    const raw = {
+      consolidated: 'VERIFIED', verificationId: 'ver-1', peopleId: 'ppl-1',
+      verificationStatus: 'COMPLETED', verificationResult: 'VERIFIED',
+      createDate: '2026-07-21T10:00:00.000Z', updateDate: '2026-07-21T10:00:00.000Z',
+      [campo]: '21/07/2026',
+    };
+
+    const dto = plainToInstance(KycByDirectoryResponse, raw, { excludeExtraneousValues: true });
+    const errors = await validate(dto as object);
+
+    expect(errors.map((e) => e.property)).toContain(campo);
+  });
+});

package/_test_/unit/kyc/KycVerificationChangedV1.test.ts

@@ -0,0 +1,99 @@
+import 'reflect-metadata';
+import { plainToInstance } from 'class-transformer';
+import { validate } from 'class-validator';
+import { KycVerificationChangedV1 } from '../../../src/kyc/index';
+
+describe('KycVerificationChangedV1', () => {
+  it('valida el shape que produce el Pipe desde el NewImage', async () => {
+    const raw = {
+      verificationId: 'ver-1',
+      directoryId: 'dir-1',
+      peopleId: 'ppl-1',
+      metamapFlowId: 'flow-1',
+      verificationStatus: 'COMPLETED',
+      verificationResult: 'VERIFIED',
+      updateDate: '2026-07-21T10:05:00.000Z',
+    };
+
+    const dto = plainToInstance(KycVerificationChangedV1, raw, { excludeExtraneousValues: true });
+
+    expect(await validate(dto as object)).toHaveLength(0);
+    expect(dto.verificationId).toBe('ver-1');
+  });
+
+  it('rechaza un evento sin directoryId (sin él no hay gate posible)', async () => {
+    const raw = {
+      verificationId: 'ver-1', peopleId: 'ppl-1',
+      verificationStatus: 'COMPLETED', verificationResult: 'VERIFIED',
+      updateDate: '2026-07-21T10:05:00.000Z',
+    };
+
+    const dto = plainToInstance(KycVerificationChangedV1, raw, { excludeExtraneousValues: true });
+    const errors = await validate(dto as object);
+
+    expect(errors.map((e) => e.property)).toContain('directoryId');
+  });
+
+  // DEC-KYC-015. El NewImage de DDB puede traer S: "" — pasa como string vacío, no como ausente.
+  it.each(['verificationId', 'directoryId', 'peopleId'])(
+    'rechaza %s vacío (el 7.3% de las filas de dev trae peopleId: "")',
+    async (campo) => {
+      const raw = {
+        verificationId: 'ver-1', directoryId: 'dir-1', peopleId: 'ppl-1',
+        verificationStatus: 'COMPLETED', verificationResult: 'VERIFIED',
+        updateDate: '2026-07-21T10:05:00.000Z',
+        [campo]: '',
+      };
+
+      const dto = plainToInstance(KycVerificationChangedV1, raw, { excludeExtraneousValues: true });
+      const errors = await validate(dto as object);
+
+      expect(errors.map((e) => e.property)).toContain(campo);
+    },
+  );
+
+  // Este es el boundary del Pipe: un estado no reconocido DEBE caer al DLQ, no colarse.
+  // Sin este candado se puede degradar verificationStatus a @IsString() y la suite sigue verde.
+  it('rechaza un verificationStatus fuera del enum', async () => {
+    const raw = {
+      verificationId: 'ver-1', directoryId: 'dir-1', peopleId: 'ppl-1',
+      verificationStatus: 'INVENTADO', verificationResult: 'VERIFIED',
+      updateDate: '2026-07-21T10:05:00.000Z',
+    };
+
+    const dto = plainToInstance(KycVerificationChangedV1, raw, { excludeExtraneousValues: true });
+    const errors = await validate(dto as object);
+
+    expect(errors.map((e) => e.property)).toContain('verificationStatus');
+  });
+
+  // DEC-KYC-016: `verificationResult` está acotado a IdentificationDocumentStatus. Sin este
+  // candado se puede degradar el campo a @IsString() y la suite sigue verde (antipattern
+  // STRING_FOR_ENUM_FIELD). 'COMPLETED' es un valor del OTRO enum — el error de tipeo real.
+  it('rechaza un verificationResult que en realidad es un valor de verificationStatus', async () => {
+    const raw = {
+      verificationId: 'ver-1', directoryId: 'dir-1', peopleId: 'ppl-1',
+      verificationStatus: 'COMPLETED', verificationResult: 'COMPLETED',
+      updateDate: '2026-07-21T10:05:00.000Z',
+    };
+
+    const dto = plainToInstance(KycVerificationChangedV1, raw, { excludeExtraneousValues: true });
+    const errors = await validate(dto as object);
+
+    expect(errors.map((e) => e.property)).toContain('verificationResult');
+  });
+
+  // El consumidor ordena por updateDate (spec §6): sin @IsISO8601() el orden es una asunción.
+  it('rechaza updateDate con formato no ISO-8601', async () => {
+    const raw = {
+      verificationId: 'ver-1', directoryId: 'dir-1', peopleId: 'ppl-1',
+      verificationStatus: 'COMPLETED', verificationResult: 'VERIFIED',
+      updateDate: '21/07/2026',
+    };
+
+    const dto = plainToInstance(KycVerificationChangedV1, raw, { excludeExtraneousValues: true });
+    const errors = await validate(dto as object);
+
+    expect(errors.map((e) => e.property)).toContain('updateDate');
+  });
+});

package/_test_/unit/messagesConnector/SendMessageRequest.test.ts

@@ -0,0 +1,48 @@
+import 'reflect-metadata';
+import { plainToInstance } from 'class-transformer';
+import { validate } from 'class-validator';
+import { SendMessageRequest } from '../../../src/messagesConnector/dtos/SendMessageRequest';
+import { DeliveryChannelEnum } from '../../../src/messaging';
+
+/**
+ * Candado: `directoryId` es una LLAVE DE CORRELACIÓN opaca para messages-business (rate-limit + log +
+ * verify), NO una FK a un directorio. Volver a ponerle `@IsUUID()` rompe dos casos productivos:
+ * los cognitoSub UUID v7 (que class-validator rechaza) y el OTP de teléfono del wizard retail, donde
+ * el cliente todavía no tiene identidad Fiado cuando se envía el código.
+ */
+const base = {
+    channelType: DeliveryChannelEnum.SMS,
+    messageType: 'OTP_CODE',
+    typeOfDirectory: 'PHONE',
+    language: 'es',
+    country: 'MX',
+    destination: '4422194128',
+};
+
+const errorsOn = async (directoryId: unknown) => {
+    const dto = plainToInstance(SendMessageRequest, { ...base, directoryId });
+    const errors = await validate(dto);
+    return errors.filter((e) => e.property === 'directoryId');
+};
+
+describe('SendMessageRequest.directoryId', () => {
+    it('acepta un teléfono (OTP del wizard retail: aún no hay identidad Fiado)', async () => {
+        expect(await errorsOn('4422194128')).toHaveLength(0);
+    });
+
+    it('acepta un UUID v7 (cognitoSub de los pools backoffice)', async () => {
+        expect(await errorsOn('01930b5e-7c3a-7f21-9a4e-1c8d5f2b6a90')).toHaveLength(0);
+    });
+
+    it('sigue aceptando un UUID v4 (consumidores legacy)', async () => {
+        expect(await errorsOn('6aeacae2-92ff-4593-8dfe-410f1f4a2ee6')).toHaveLength(0);
+    });
+
+    it('rechaza vacío (la llave de correlación es obligatoria)', async () => {
+        expect(await errorsOn('')).not.toHaveLength(0);
+    });
+
+    it('rechaza un no-string', async () => {
+        expect(await errorsOn(12345)).not.toHaveLength(0);
+    });
+});

package/bin/auth/dtos/SignUpProspectRequest.d.ts

@@ -0,0 +1,15 @@
+/**
+ * Alta de prospecto M2M en `auth-business` (crea onboarding + People + DirectoryUser).
+ * Contrato REDUCIDO respecto del de agente: sin caller, sin referral, sin campos de app.
+ *
+ * `tenantId` es OBLIGATORIO y explícito: la variante de agente lo tiene hardcodeado a
+ * `FIADO_BETA`, y eliminar ese hardcode es parte del contrato de este endpoint privado.
+ *
+ * ⚠️ PII: nombre y teléfono — nunca loguear el request completo.
+ */
+export declare class SignUpProspectRequest {
+    name: string;
+    phoneNumber: string;
+    /** Decidido: sin `@Matches(/^[a-z0-9-]+$/)` — `FIADO_BETA` es un tenant real y ese regex lo rechazaría. */
+    tenantId: string;
+}

package/bin/{platformRbac/dtos/ResendSelfRegisterOtpRequest.js → auth/dtos/SignUpProspectRequest.js}

@@ -9,28 +9,36 @@ var __metadata = (this && this.__metadata) || function (k, v) {
     if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
 };
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.ResendSelfRegisterOtpRequest = void 0;
+exports.SignUpProspectRequest = void 0;
 const class_transformer_1 = require("class-transformer");
 const class_validator_1 = require("class-validator");
 /**
- * Body del POST /self-register/resend-otp (público, anónimo). DEC-RBAC-054.
- * Re-envía el OTP del autoregistro (mecanismo messages-business, NO Cognito) tras validar un
- * `pending` existente. Misma postura anti-enumeración del start. El email se normaliza lowercase
- * server-side. DTO propio por endpoint (NO reusa SelfRegisterStartRequest, que exige roleId/scope/
- * scopeRef, ni SelfRegisterVerifyOtpRequest, que exige otp).
+ * Alta de prospecto M2M en `auth-business` (crea onboarding + People + DirectoryUser).
+ * Contrato REDUCIDO respecto del de agente: sin caller, sin referral, sin campos de app.
+ *
+ * `tenantId` es OBLIGATORIO y explícito: la variante de agente lo tiene hardcodeado a
+ * `FIADO_BETA`, y eliminar ese hardcode es parte del contrato de este endpoint privado.
+ *
+ * ⚠️ PII: nombre y teléfono — nunca loguear el request completo.
  */
-class ResendSelfRegisterOtpRequest {
+class SignUpProspectRequest {
 }
-exports.ResendSelfRegisterOtpRequest = ResendSelfRegisterOtpRequest;
+exports.SignUpProspectRequest = SignUpProspectRequest;
 __decorate([
     (0, class_transformer_1.Expose)(),
     (0, class_validator_1.IsString)(),
     (0, class_validator_1.IsNotEmpty)(),
     __metadata("design:type", String)
-], ResendSelfRegisterOtpRequest.prototype, "tenantId", void 0);
+], SignUpProspectRequest.prototype, "name", void 0);
 __decorate([
     (0, class_transformer_1.Expose)(),
-    (0, class_validator_1.IsEmail)(),
+    (0, class_validator_1.IsString)(),
+    (0, class_validator_1.IsNotEmpty)(),
+    __metadata("design:type", String)
+], SignUpProspectRequest.prototype, "phoneNumber", void 0);
+__decorate([
+    (0, class_transformer_1.Expose)(),
+    (0, class_validator_1.IsString)(),
     (0, class_validator_1.IsNotEmpty)(),
     __metadata("design:type", String)
-], ResendSelfRegisterOtpRequest.prototype, "email", void 0);
+], SignUpProspectRequest.prototype, "tenantId", void 0);

package/bin/auth/dtos/SignUpProspectResponse.d.ts

@@ -0,0 +1,11 @@
+/**
+ * Identidad Fiado creada (o reusada) para el prospecto.
+ *
+ * DEC-KYC-015: `directoryId` y `peopleId` llevan `@IsNotEmpty()` — son los mismos dos
+ * identificadores que en el dominio `kyc`, y vienen de un destino que ya demostró devolver
+ * strings vacíos. `@IsString()` pelado los dejaría pasar en silencio.
+ */
+export declare class SignUpProspectResponse {
+    directoryId: string;
+    peopleId: string;
+}

package/bin/{platformRbac/dtos/ResendOtpRequest.js → auth/dtos/SignUpProspectResponse.js}

@@ -9,28 +9,28 @@ var __metadata = (this && this.__metadata) || function (k, v) {
     if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
 };
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.ResendOtpRequest = void 0;
+exports.SignUpProspectResponse = void 0;
 const class_transformer_1 = require("class-transformer");
 const class_validator_1 = require("class-validator");
 /**
- * Body del POST /auth/resend-otp (público, anónimo). DEC-RBAC-054.
- * Reenvía el OTP del login re-disparando el challenge real CUSTOM_AUTH (EMAIL_OTP) para la
- * identidad SIN password. `tenantId` obligatorio (DEC-064 — el picker ya lo resolvió, NO "solo email").
- * El email se normaliza lowercase server-side. Postura anti-enumeración: respuesta 200 genérica
- * siempre, sin filtrar existencia (ver AuthLoginManager.resendChallengeOtp).
+ * Identidad Fiado creada (o reusada) para el prospecto.
+ *
+ * DEC-KYC-015: `directoryId` y `peopleId` llevan `@IsNotEmpty()` — son los mismos dos
+ * identificadores que en el dominio `kyc`, y vienen de un destino que ya demostró devolver
+ * strings vacíos. `@IsString()` pelado los dejaría pasar en silencio.
  */
-class ResendOtpRequest {
+class SignUpProspectResponse {
 }
-exports.ResendOtpRequest = ResendOtpRequest;
+exports.SignUpProspectResponse = SignUpProspectResponse;
 __decorate([
     (0, class_transformer_1.Expose)(),
-    (0, class_validator_1.IsEmail)(),
+    (0, class_validator_1.IsString)(),
     (0, class_validator_1.IsNotEmpty)(),
     __metadata("design:type", String)
-], ResendOtpRequest.prototype, "email", void 0);
+], SignUpProspectResponse.prototype, "directoryId", void 0);
 __decorate([
     (0, class_transformer_1.Expose)(),
     (0, class_validator_1.IsString)(),
     (0, class_validator_1.IsNotEmpty)(),
     __metadata("design:type", String)
-], ResendOtpRequest.prototype, "tenantId", void 0);
+], SignUpProspectResponse.prototype, "peopleId", void 0);

package/bin/auth/index.d.ts

@@ -3,3 +3,5 @@ export * from './dtos/ResetPasswordBackofficeRequest';
 export * from './dtos/SignInBackofficeRequest';
 export * from './dtos/SignInBackofficeResponse';
 export * from './dtos/SignUpBackofficeRequest';
+export * from './dtos/SignUpProspectRequest';
+export * from './dtos/SignUpProspectResponse';

package/bin/auth/index.js

@@ -20,3 +20,5 @@ __exportStar(require("./dtos/ResetPasswordBackofficeRequest"), exports);
 __exportStar(require("./dtos/SignInBackofficeRequest"), exports);
 __exportStar(require("./dtos/SignInBackofficeResponse"), exports);
 __exportStar(require("./dtos/SignUpBackofficeRequest"), exports);
+__exportStar(require("./dtos/SignUpProspectRequest"), exports);
+__exportStar(require("./dtos/SignUpProspectResponse"), exports);

package/bin/index.d.ts

@@ -98,5 +98,6 @@ export * as LoanOfferings from './loanOfferings';
 export * as LoanCollectorAssignment from './loanCollectorAssignment';
 export * as LoanCredit from './loanCredit';
 export * as LoanScoring from './loanScoring';
+export * as Kyc from './kyc';
 export * from './messaging';
 export * from './complaint';

package/bin/index.js

@@ -38,6 +38,7 @@ var __exportStar = (this && this.__exportStar) || function(m, exports) {
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.Device = exports.Observations = exports.IssuanceBusiness = exports.Blacklist = exports.CentralPayments = exports.Helpdesk = exports.FiadoApiResponse = exports.Auth = exports.LegalDocumentsBusiness = exports.Role = exports.STPAccount = exports.RiskProfile = exports.FraudPreventionEngine = exports.BBVARst = exports.Stp = exports.BenefitCenter = exports.BankAccount = exports.P2pContact = exports.CreditContract = exports.Contract = exports.ProductCatalog = exports.ContactInfo = exports.TransactionAnalytics = exports.Transaction = exports.TransactionProcessor = exports.GenericMessage = exports.EventBridgeMessage = exports.SessionActivity = exports.NotificationMessages = exports.ServicePayment = exports.Header = exports.Identity = exports.UserTags = exports.Group = exports.File = exports.ExchangeRate = exports.Directory = exports.Currency = exports.Country = exports.Card = exports.Authentication = exports.AppContent = exports.App = exports.Offices = exports.Places = exports.Address = exports.Beneficiary = exports.Activity = exports.Account = exports.Crypto = void 0;
 exports.LoanScoring = exports.LoanCredit = exports.LoanCollectorAssignment = exports.LoanOfferings = exports.LoanConfig = exports.RetailWizard = exports.RetailCustomer = exports.RetailCards = exports.RetailCatalog = exports.RetailOrg = exports.EmailVerification = exports.NetworkConnector = exports.Modelias = exports.TotpSecurity = exports.Passport = exports.WalletFunding = exports.Remittance = exports.PlatformRbac = exports.CognitoBackofficeConnector = exports.TwilioConnector = exports.MessagesConnector = exports.Mdm = exports.MilestoneBusiness = exports.CirculoCredito = exports.CreditStatements = exports.Sentry = exports.AiEngine = exports.Funnel = exports.TeamsConnector = exports.PlatformErrorEvents = exports.CustomerFile = exports.CreditBackoffice = exports.CreditDashboard = exports.CreditEngine = exports.Credit = exports.ComissionBusiness = exports.ReferralBusiness = exports.ZendeskMessaging = exports.NotificationWS = exports.Event = exports.PayrollBusiness = exports.Cnbv = exports.DirectorySetting = exports.InvoiceCollector = exports.Collector = exports.Pricelist = exports.Company = exports.Services = exports.AccountIssuanceBusiness = exports.AppSelectionData = void 0;
+exports.Kyc = void 0;
 exports.Crypto = __importStar(require("./crypto"));
 exports.Account = __importStar(require("./account"));
 exports.Activity = __importStar(require("./activity"));
@@ -170,5 +171,9 @@ exports.LoanCredit = __importStar(require("./loanCredit"));
 // ScoringProviderRouter configurable Modelias|Círculo con contrato agnóstico ScoringDecision;
 // SureKeep Fase 2 — pista Loan/SOFOM).
 exports.LoanScoring = __importStar(require("./loanScoring"));
+// Kyc: contrato de la lectura confirmatoria del KYC (kyc-verifications-business) — estado
+// consolidado + estados crudos + datos de persona. El consolidado reusa RetailKycStatusEnum
+// (no hay enum consolidado propio — DEC-KYC-014). SureKeep Fase 2.
+exports.Kyc = __importStar(require("./kyc"));
 __exportStar(require("./messaging"), exports);
 __exportStar(require("./complaint"), exports);

package/bin/kyc/dtos/responses/KycByDirectoryResponse.d.ts

@@ -0,0 +1,49 @@
+import { IdentificationDocumentStatus } from '../../../identity/enums/IdentificationDocumentStatus';
+import { RetailKycStatusEnum } from '../../../retailCustomer/enums/RetailKycStatusEnum';
+import { KycVerificationStatusEnum } from '../../enums/KycVerificationStatusEnum';
+import { KycPersonData } from './KycPersonData';
+/**
+ * Estado consolidado del KYC de un directorio + los estados crudos + los datos de persona.
+ *
+ * Los campos crudos viajan además del consolidado para que el consumidor NO tenga que
+ * reimplementar el mapeo de otro dominio.
+ *
+ * DEC-KYC-014: "sin verificación" se responde con 404, NO con un valor de enum. Por eso todos
+ * los campos de identidad y estado son REQUERIDOS — este DTO solo describe el caso en que sí
+ * existe una verificación.
+ *
+ * DEC-KYC-004: el vocabulario del consolidado es `RetailKycStatusEnum`, el único de la lib.
+ *
+ * DEC-KYC-016: `verificationResult` reusa `IdentificationDocumentStatus` — es el enum que el
+ * lambda productor (`kyc-verifications-business`) escribe literalmente en la tabla; duplicarlo
+ * aquí sería drift garantizado.
+ *
+ * ⚠️ Lleva PII en `person` (CURP y nombre completo).
+ */
+export declare class KycByDirectoryResponse {
+    consolidated: RetailKycStatusEnum;
+    /** La PK de la fila (`id`) mapeada a nombre de negocio. */
+    verificationId: string;
+    /** DEC-KYC-015: `@IsNotEmpty()` — el 7.3% de las filas de dev trae string vacío. */
+    peopleId: string;
+    metamapFlowId?: string;
+    verificationStatus: KycVerificationStatusEnum;
+    /**
+     * Requerido y acotado al enum: se escanearon las 193 filas de `KycVerifications` en dev y los
+     * valores son exactamente los tres — `IN_PROGRESS+UNVERIFIED` 104, `COMPLETED+VERIFIED` 69,
+     * `COMPLETED+UNVERIFIED` 19, `COMPLETED+REJECTED` 1. Cero valores fuera del set, cero vacíos.
+     * Verificado, no asumido (2026-07-21).
+     */
+    verificationResult: IdentificationDocumentStatus;
+    /**
+     * ISO-8601 obligatorio: el ordenamiento del endpoint (spec §6) se apoya en que estas fechas
+     * son léxicamente ordenables — si no se valida el formato, el orden es una asunción sin red.
+     * Se escanearon las 193 filas de `KycVerifications` en dev: `createDate` 193/193 ISO-8601 y
+     * `updateDate` 193/193 — 386/386, cero excepciones (ejemplo real: '2025-10-06T21:40:58.277Z').
+     * Verificado, no asumido (2026-07-21).
+     */
+    createDate: string;
+    /** ISO-8601 obligatorio — mismo escaneo de dev: 386/386 fechas ISO-8601 (2026-07-21). */
+    updateDate: string;
+    person?: KycPersonData;
+}

package/bin/kyc/dtos/responses/KycByDirectoryResponse.js

@@ -0,0 +1,91 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.KycByDirectoryResponse = void 0;
+const class_transformer_1 = require("class-transformer");
+const class_validator_1 = require("class-validator");
+const IdentificationDocumentStatus_1 = require("../../../identity/enums/IdentificationDocumentStatus");
+const RetailKycStatusEnum_1 = require("../../../retailCustomer/enums/RetailKycStatusEnum");
+const KycVerificationStatusEnum_1 = require("../../enums/KycVerificationStatusEnum");
+const KycPersonData_1 = require("./KycPersonData");
+/**
+ * Estado consolidado del KYC de un directorio + los estados crudos + los datos de persona.
+ *
+ * Los campos crudos viajan además del consolidado para que el consumidor NO tenga que
+ * reimplementar el mapeo de otro dominio.
+ *
+ * DEC-KYC-014: "sin verificación" se responde con 404, NO con un valor de enum. Por eso todos
+ * los campos de identidad y estado son REQUERIDOS — este DTO solo describe el caso en que sí
+ * existe una verificación.
+ *
+ * DEC-KYC-004: el vocabulario del consolidado es `RetailKycStatusEnum`, el único de la lib.
+ *
+ * DEC-KYC-016: `verificationResult` reusa `IdentificationDocumentStatus` — es el enum que el
+ * lambda productor (`kyc-verifications-business`) escribe literalmente en la tabla; duplicarlo
+ * aquí sería drift garantizado.
+ *
+ * ⚠️ Lleva PII en `person` (CURP y nombre completo).
+ */
+class KycByDirectoryResponse {
+}
+exports.KycByDirectoryResponse = KycByDirectoryResponse;
+__decorate([
+    (0, class_transformer_1.Expose)(),
+    (0, class_validator_1.IsEnum)(RetailKycStatusEnum_1.RetailKycStatusEnum),
+    __metadata("design:type", String)
+], KycByDirectoryResponse.prototype, "consolidated", void 0);
+__decorate([
+    (0, class_transformer_1.Expose)(),
+    (0, class_validator_1.IsString)(),
+    (0, class_validator_1.IsNotEmpty)(),
+    __metadata("design:type", String)
+], KycByDirectoryResponse.prototype, "verificationId", void 0);
+__decorate([
+    (0, class_transformer_1.Expose)(),
+    (0, class_validator_1.IsString)(),
+    (0, class_validator_1.IsNotEmpty)(),
+    __metadata("design:type", String)
+], KycByDirectoryResponse.prototype, "peopleId", void 0);
+__decorate([
+    (0, class_transformer_1.Expose)(),
+    (0, class_validator_1.IsOptional)(),
+    (0, class_validator_1.IsString)(),
+    __metadata("design:type", String)
+], KycByDirectoryResponse.prototype, "metamapFlowId", void 0);
+__decorate([
+    (0, class_transformer_1.Expose)(),
+    (0, class_validator_1.IsEnum)(KycVerificationStatusEnum_1.KycVerificationStatusEnum),
+    __metadata("design:type", String)
+], KycByDirectoryResponse.prototype, "verificationStatus", void 0);
+__decorate([
+    (0, class_transformer_1.Expose)(),
+    (0, class_validator_1.IsEnum)(IdentificationDocumentStatus_1.IdentificationDocumentStatus),
+    __metadata("design:type", String)
+], KycByDirectoryResponse.prototype, "verificationResult", void 0);
+__decorate([
+    (0, class_transformer_1.Expose)(),
+    (0, class_validator_1.IsString)(),
+    (0, class_validator_1.IsISO8601)(),
+    __metadata("design:type", String)
+], KycByDirectoryResponse.prototype, "createDate", void 0);
+__decorate([
+    (0, class_transformer_1.Expose)(),
+    (0, class_validator_1.IsString)(),
+    (0, class_validator_1.IsISO8601)(),
+    __metadata("design:type", String)
+], KycByDirectoryResponse.prototype, "updateDate", void 0);
+__decorate([
+    (0, class_transformer_1.Expose)(),
+    (0, class_validator_1.IsOptional)(),
+    (0, class_validator_1.ValidateNested)(),
+    (0, class_transformer_1.Type)(() => KycPersonData_1.KycPersonData),
+    __metadata("design:type", KycPersonData_1.KycPersonData)
+], KycByDirectoryResponse.prototype, "person", void 0);