@fiado/type-kit 3.223.0 → 3.225.0

package/bin/identity/dtos/PeopleSelfieResponse.d.ts

@@ -0,0 +1,29 @@
+import { SelfieSourceEnum } from '../enums/SelfieSourceEnum';
+/**
+ * `GET /identities/private/people/{directoryId}/selfie` — la selfie guardada del usuario.
+ *
+ * Devuelve una URL firmada temporal, no la imagen. Pensada para alimentar el `userPhotoLink` del
+ * facematch de Metamap: se pasa a `buildFacematchSignature` del metamap-connector para obtener el
+ * `userPhotoLinkHash`, y el par va en el `metadata` de la verificación con `customInput: true`.
+ *
+ * Solo responde a usuarios con cuenta (`MEX_DebitAccount` o `USA_DebitAccount`); si no, el endpoint
+ * devuelve 401 con code `NO_ACCOUNT`. Si el usuario tiene cuenta pero no hay imagen de selfie,
+ * devuelve code `SELFIE_NOT_FOUND`. fiado-identity-lambda.
+ */
+export declare class PeopleSelfieResponse {
+    directoryId: string;
+    /** Nombre del archivo en S3, sin el prefijo `USER/{directoryId}/`. */
+    key: string;
+    /** Presigned de S3. Es el valor a usar como `userPhotoLink`. */
+    url: string;
+    /**
+     * Vigencia del presigned. La emite fiado-s3-lambda y hoy es 3600; el facematch tiene que
+     * dispararse dentro de esa ventana o Metamap no podrá descargar la foto.
+     */
+    expiresInSeconds: number;
+    /** Verificación de Metamap a la que pertenece la selfie. `null` si no se pudo determinar. */
+    verificationId: string | null;
+    /** Fecha ISO de última modificación del objeto en S3. `null` si S3 no la reportó. */
+    lastModified: string | null;
+    source: SelfieSourceEnum;
+}

package/bin/identity/dtos/PeopleSelfieResponse.js

@@ -0,0 +1,17 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.PeopleSelfieResponse = void 0;
+/**
+ * `GET /identities/private/people/{directoryId}/selfie` — la selfie guardada del usuario.
+ *
+ * Devuelve una URL firmada temporal, no la imagen. Pensada para alimentar el `userPhotoLink` del
+ * facematch de Metamap: se pasa a `buildFacematchSignature` del metamap-connector para obtener el
+ * `userPhotoLinkHash`, y el par va en el `metadata` de la verificación con `customInput: true`.
+ *
+ * Solo responde a usuarios con cuenta (`MEX_DebitAccount` o `USA_DebitAccount`); si no, el endpoint
+ * devuelve 401 con code `NO_ACCOUNT`. Si el usuario tiene cuenta pero no hay imagen de selfie,
+ * devuelve code `SELFIE_NOT_FOUND`. fiado-identity-lambda.
+ */
+class PeopleSelfieResponse {
+}
+exports.PeopleSelfieResponse = PeopleSelfieResponse;

package/bin/identity/enums/SelfieSourceEnum.d.ts

@@ -0,0 +1,10 @@
+/**
+ * Con qué criterio se resolvió cuál archivo de S3 es la selfie del usuario.
+ * Le dice al consumidor qué tan confiable es el match antes de mandarla a un facematch.
+ */
+export declare enum SelfieSourceEnum {
+    /** Matcheó el verificationId de la verificación vigente en People. */
+    VERIFICATION = "VERIFICATION",
+    /** No hubo match por verificación: se tomó el archivo de selfie más reciente del bucket. */
+    LATEST = "LATEST"
+}

package/bin/identity/enums/SelfieSourceEnum.js

@@ -0,0 +1,14 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.SelfieSourceEnum = void 0;
+/**
+ * Con qué criterio se resolvió cuál archivo de S3 es la selfie del usuario.
+ * Le dice al consumidor qué tan confiable es el match antes de mandarla a un facematch.
+ */
+var SelfieSourceEnum;
+(function (SelfieSourceEnum) {
+    /** Matcheó el verificationId de la verificación vigente en People. */
+    SelfieSourceEnum["VERIFICATION"] = "VERIFICATION";
+    /** No hubo match por verificación: se tomó el archivo de selfie más reciente del bucket. */
+    SelfieSourceEnum["LATEST"] = "LATEST";
+})(SelfieSourceEnum || (exports.SelfieSourceEnum = SelfieSourceEnum = {}));

package/bin/identity/index.d.ts

@@ -10,6 +10,7 @@ export * from './dtos/UploadDocumentFile';
 export * from './dtos/PeopleSelfVerifiedRequest';
 export * from './dtos/AgentDocumentKeyResponse';
 export * from './dtos/DocumentUploadResponse';
+export * from './dtos/PeopleSelfieResponse';
 export * from './enums/IdentificationDocumentStatus';
 export * from './enums/SexDocument';
 export * from './enums/InfoSelfVerifiedStatus';
@@ -17,3 +18,4 @@ export * from './enums/AuthorizationNeededMXNStatus';
 export * from './enums/DocumentSideEnum';
 export * from './enums/CPStatusEnum';
 export * from './enums/AccountRequirementStatusEnum';
+export * from './enums/SelfieSourceEnum';

package/bin/identity/index.js

@@ -27,6 +27,7 @@ __exportStar(require("./dtos/UploadDocumentFile"), exports);
 __exportStar(require("./dtos/PeopleSelfVerifiedRequest"), exports);
 __exportStar(require("./dtos/AgentDocumentKeyResponse"), exports);
 __exportStar(require("./dtos/DocumentUploadResponse"), exports);
+__exportStar(require("./dtos/PeopleSelfieResponse"), exports);
 //enums
 __exportStar(require("./enums/IdentificationDocumentStatus"), exports);
 __exportStar(require("./enums/SexDocument"), exports);
@@ -35,3 +36,4 @@ __exportStar(require("./enums/AuthorizationNeededMXNStatus"), exports);
 __exportStar(require("./enums/DocumentSideEnum"), exports);
 __exportStar(require("./enums/CPStatusEnum"), exports);
 __exportStar(require("./enums/AccountRequirementStatusEnum"), exports);
+__exportStar(require("./enums/SelfieSourceEnum"), exports);

package/bin/index.d.ts

@@ -1,5 +1,6 @@
 export * as Crypto from './crypto';
 export * as Account from './account';
+export * as MetamapConnector from './metamapConnector';
 export * as Activity from './activity';
 export * as Beneficiary from './beneficiary';
 export * as Address from './address';

package/bin/index.js

@@ -36,11 +36,12 @@ var __exportStar = (this && this.__exportStar) || function(m, exports) {
     for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
 };
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.Device = exports.Observations = exports.IssuanceBusiness = exports.Blacklist = exports.CentralPayments = exports.Helpdesk = exports.FiadoApiResponse = exports.Auth = exports.LegalDocumentsBusiness = exports.Role = exports.STPAccount = exports.RiskProfile = exports.FraudPreventionEngine = exports.BBVARst = exports.Stp = exports.BenefitCenter = exports.BankAccount = exports.P2pContact = exports.CreditContract = exports.Contract = exports.ProductCatalog = exports.ContactInfo = exports.TransactionAnalytics = exports.Transaction = exports.TransactionProcessor = exports.GenericMessage = exports.EventBridgeMessage = exports.SessionActivity = exports.NotificationMessages = exports.ServicePayment = exports.Header = exports.Identity = exports.UserTags = exports.Group = exports.File = exports.ExchangeRate = exports.Directory = exports.Currency = exports.Country = exports.Card = exports.Authentication = exports.AppContent = exports.App = exports.Offices = exports.Places = exports.Address = exports.Beneficiary = exports.Activity = exports.Account = exports.Crypto = void 0;
-exports.LoanCredit = exports.LoanCollectorAssignment = exports.LoanOfferings = exports.Shortlink = exports.LoanConfig = exports.RetailWizard = exports.RetailCustomer = exports.RetailCards = exports.RetailCatalog = exports.RetailOrg = exports.EmailVerification = exports.NetworkConnector = exports.Modelias = exports.TotpSecurity = exports.Passport = exports.WalletFunding = exports.Remittance = exports.PlatformRbac = exports.CognitoBackofficeConnector = exports.TwilioConnector = exports.MessagesConnector = exports.Mdm = exports.MilestoneBusiness = exports.CirculoCredito = exports.CreditStatements = exports.Sentry = exports.AiEngine = exports.Funnel = exports.TeamsConnector = exports.PlatformErrorEvents = exports.CustomerFile = exports.CreditBackoffice = exports.CreditDashboard = exports.CreditEngine = exports.Credit = exports.ComissionBusiness = exports.ReferralBusiness = exports.ZendeskMessaging = exports.NotificationWS = exports.Event = exports.PayrollBusiness = exports.Cnbv = exports.DirectorySetting = exports.InvoiceCollector = exports.Collector = exports.Pricelist = exports.Company = exports.Services = exports.AccountIssuanceBusiness = exports.AppSelectionData = void 0;
-exports.PhoneSales = exports.Kyc = exports.LoanScoring = void 0;
+exports.Observations = exports.IssuanceBusiness = exports.Blacklist = exports.CentralPayments = exports.Helpdesk = exports.FiadoApiResponse = exports.Auth = exports.LegalDocumentsBusiness = exports.Role = exports.STPAccount = exports.RiskProfile = exports.FraudPreventionEngine = exports.BBVARst = exports.Stp = exports.BenefitCenter = exports.BankAccount = exports.P2pContact = exports.CreditContract = exports.Contract = exports.ProductCatalog = exports.ContactInfo = exports.TransactionAnalytics = exports.Transaction = exports.TransactionProcessor = exports.GenericMessage = exports.EventBridgeMessage = exports.SessionActivity = exports.NotificationMessages = exports.ServicePayment = exports.Header = exports.Identity = exports.UserTags = exports.Group = exports.File = exports.ExchangeRate = exports.Directory = exports.Currency = exports.Country = exports.Card = exports.Authentication = exports.AppContent = exports.App = exports.Offices = exports.Places = exports.Address = exports.Beneficiary = exports.Activity = exports.MetamapConnector = exports.Account = exports.Crypto = void 0;
+exports.LoanCollectorAssignment = exports.LoanOfferings = exports.Shortlink = exports.LoanConfig = exports.RetailWizard = exports.RetailCustomer = exports.RetailCards = exports.RetailCatalog = exports.RetailOrg = exports.EmailVerification = exports.NetworkConnector = exports.Modelias = exports.TotpSecurity = exports.Passport = exports.WalletFunding = exports.Remittance = exports.PlatformRbac = exports.CognitoBackofficeConnector = exports.TwilioConnector = exports.MessagesConnector = exports.Mdm = exports.MilestoneBusiness = exports.CirculoCredito = exports.CreditStatements = exports.Sentry = exports.AiEngine = exports.Funnel = exports.TeamsConnector = exports.PlatformErrorEvents = exports.CustomerFile = exports.CreditBackoffice = exports.CreditDashboard = exports.CreditEngine = exports.Credit = exports.ComissionBusiness = exports.ReferralBusiness = exports.ZendeskMessaging = exports.NotificationWS = exports.Event = exports.PayrollBusiness = exports.Cnbv = exports.DirectorySetting = exports.InvoiceCollector = exports.Collector = exports.Pricelist = exports.Company = exports.Services = exports.AccountIssuanceBusiness = exports.AppSelectionData = exports.Device = void 0;
+exports.PhoneSales = exports.Kyc = exports.LoanScoring = exports.LoanCredit = void 0;
 exports.Crypto = __importStar(require("./crypto"));
 exports.Account = __importStar(require("./account"));
+exports.MetamapConnector = __importStar(require("./metamapConnector"));
 exports.Activity = __importStar(require("./activity"));
 exports.Beneficiary = __importStar(require("./beneficiary"));
 exports.Address = __importStar(require("./address"));

package/bin/loanCredit/dtos/requests/UpdateActivationChecklistRequest.d.ts

@@ -0,0 +1,11 @@
+/**
+ * Body de PUT /credits/:creditId/checklist (loan-credit-business). Marca condiciones de activación
+ * cumplidas. Solo se mandan las que cambian; en F3 las marcarán los flujos de firma de contrato
+ * (`downPayment` + `contractSigned`) y de enrolamiento MDM (`imeiEnrolled` + `lockVerified`).
+ */
+export declare class UpdateActivationChecklistRequest {
+    downPayment?: boolean;
+    contractSigned?: boolean;
+    imeiEnrolled?: boolean;
+    lockVerified?: boolean;
+}

package/bin/loanCredit/dtos/requests/UpdateActivationChecklistRequest.js

@@ -0,0 +1,46 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.UpdateActivationChecklistRequest = void 0;
+const class_transformer_1 = require("class-transformer");
+const class_validator_1 = require("class-validator");
+/**
+ * Body de PUT /credits/:creditId/checklist (loan-credit-business). Marca condiciones de activación
+ * cumplidas. Solo se mandan las que cambian; en F3 las marcarán los flujos de firma de contrato
+ * (`downPayment` + `contractSigned`) y de enrolamiento MDM (`imeiEnrolled` + `lockVerified`).
+ */
+class UpdateActivationChecklistRequest {
+}
+exports.UpdateActivationChecklistRequest = UpdateActivationChecklistRequest;
+__decorate([
+    (0, class_transformer_1.Expose)(),
+    (0, class_validator_1.IsOptional)(),
+    (0, class_validator_1.IsBoolean)(),
+    __metadata("design:type", Boolean)
+], UpdateActivationChecklistRequest.prototype, "downPayment", void 0);
+__decorate([
+    (0, class_transformer_1.Expose)(),
+    (0, class_validator_1.IsOptional)(),
+    (0, class_validator_1.IsBoolean)(),
+    __metadata("design:type", Boolean)
+], UpdateActivationChecklistRequest.prototype, "contractSigned", void 0);
+__decorate([
+    (0, class_transformer_1.Expose)(),
+    (0, class_validator_1.IsOptional)(),
+    (0, class_validator_1.IsBoolean)(),
+    __metadata("design:type", Boolean)
+], UpdateActivationChecklistRequest.prototype, "imeiEnrolled", void 0);
+__decorate([
+    (0, class_transformer_1.Expose)(),
+    (0, class_validator_1.IsOptional)(),
+    (0, class_validator_1.IsBoolean)(),
+    __metadata("design:type", Boolean)
+], UpdateActivationChecklistRequest.prototype, "lockVerified", void 0);

package/bin/loanCredit/enums/ClientLevelEnum.d.ts

@@ -0,0 +1,11 @@
+/**
+ * Nivel del cliente según su SCI (M7/05_MOTOR §3.2): 21-60 Bronce · 61-80 Plata · 81-100 Oro.
+ * Distinto de `CreditPlanLevelEnum` de loanOfferings (que además tiene `ALL` para planes):
+ * un CLIENTE nunca es `ALL`.
+ * @enum {string}
+ */
+export declare enum ClientLevelEnum {
+    BRONZE = "BRONZE",
+    SILVER = "SILVER",
+    GOLD = "GOLD"
+}

package/bin/loanCredit/enums/ClientLevelEnum.js

@@ -0,0 +1,15 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ClientLevelEnum = void 0;
+/**
+ * Nivel del cliente según su SCI (M7/05_MOTOR §3.2): 21-60 Bronce · 61-80 Plata · 81-100 Oro.
+ * Distinto de `CreditPlanLevelEnum` de loanOfferings (que además tiene `ALL` para planes):
+ * un CLIENTE nunca es `ALL`.
+ * @enum {string}
+ */
+var ClientLevelEnum;
+(function (ClientLevelEnum) {
+    ClientLevelEnum["BRONZE"] = "BRONZE";
+    ClientLevelEnum["SILVER"] = "SILVER";
+    ClientLevelEnum["GOLD"] = "GOLD";
+})(ClientLevelEnum || (exports.ClientLevelEnum = ClientLevelEnum = {}));

package/bin/metamapConnector/dtos/requests/BuildFacematchSignatureRequest.d.ts

@@ -0,0 +1,11 @@
+/**
+ * `POST /private/facematch/signature` — arma la firma que Metamap exige para comparar contra una foto
+ * de referencia (facematch de la merchant database). El caller (p. ej. el wizard) manda el URL público
+ * de la foto; el connector devuelve el `userPhotoLinkHash` sin exponer nunca el Client Secret.
+ * No se valida que sea una URL bien formada a propósito: los presigned pueden traer query params raros
+ * y el connector solo la concatena para el hash. metamap-connector (modernización de fiado-metamap-lambda).
+ */
+export declare class BuildFacematchSignatureRequest {
+    /** URL público (típicamente presigned) de la foto de referencia contra la que Metamap hará el facematch. */
+    userPhotoLink: string;
+}

package/bin/{platformRbac/dtos/ResendOtpRequest.js → metamapConnector/dtos/requests/BuildFacematchSignatureRequest.js}

@@ -9,28 +9,22 @@ var __metadata = (this && this.__metadata) || function (k, v) {
     if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
 };
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.ResendOtpRequest = void 0;
+exports.BuildFacematchSignatureRequest = void 0;
 const class_transformer_1 = require("class-transformer");
 const class_validator_1 = require("class-validator");
 /**
- * Body del POST /auth/resend-otp (público, anónimo). DEC-RBAC-054.
- * Reenvía el OTP del login re-disparando el challenge real CUSTOM_AUTH (EMAIL_OTP) para la
- * identidad SIN password. `tenantId` obligatorio (DEC-064 — el picker ya lo resolvió, NO "solo email").
- * El email se normaliza lowercase server-side. Postura anti-enumeración: respuesta 200 genérica
- * siempre, sin filtrar existencia (ver AuthLoginManager.resendChallengeOtp).
+ * `POST /private/facematch/signature` — arma la firma que Metamap exige para comparar contra una foto
+ * de referencia (facematch de la merchant database). El caller (p. ej. el wizard) manda el URL público
+ * de la foto; el connector devuelve el `userPhotoLinkHash` sin exponer nunca el Client Secret.
+ * No se valida que sea una URL bien formada a propósito: los presigned pueden traer query params raros
+ * y el connector solo la concatena para el hash. metamap-connector (modernización de fiado-metamap-lambda).
  */
-class ResendOtpRequest {
+class BuildFacematchSignatureRequest {
 }
-exports.ResendOtpRequest = ResendOtpRequest;
-__decorate([
-    (0, class_transformer_1.Expose)(),
-    (0, class_validator_1.IsEmail)(),
-    (0, class_validator_1.IsNotEmpty)(),
-    __metadata("design:type", String)
-], ResendOtpRequest.prototype, "email", void 0);
+exports.BuildFacematchSignatureRequest = BuildFacematchSignatureRequest;
 __decorate([
     (0, class_transformer_1.Expose)(),
     (0, class_validator_1.IsString)(),
     (0, class_validator_1.IsNotEmpty)(),
     __metadata("design:type", String)
-], ResendOtpRequest.prototype, "tenantId", void 0);
+], BuildFacematchSignatureRequest.prototype, "userPhotoLink", void 0);

package/bin/metamapConnector/dtos/responses/FacematchSignatureResponse.d.ts

@@ -0,0 +1,10 @@
+/**
+ * Respuesta de `POST /private/facematch/signature`. El par listo para meter en el `metadata` de la
+ * verificación biométrica de Metamap (`userPhotoLink` + `userPhotoLinkHash`, con `customInput: true`).
+ * `userPhotoLinkHash = SHA-256(userPhotoLink + <Metamap Client Secret>)` — el secret vive SOLO en el
+ * connector, nunca viaja. metamap-connector.
+ */
+export interface FacematchSignatureResponse {
+    userPhotoLink: string;
+    userPhotoLinkHash: string;
+}

package/bin/metamapConnector/dtos/responses/FacematchSignatureResponse.js

@@ -0,0 +1,2 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });

package/bin/metamapConnector/index.d.ts

@@ -0,0 +1,2 @@
+export * from './dtos/requests/BuildFacematchSignatureRequest';
+export * from './dtos/responses/FacematchSignatureResponse';

package/bin/metamapConnector/index.js

@@ -0,0 +1,19 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+// DTOs — metamap-connector (armado de la firma del facematch)
+__exportStar(require("./dtos/requests/BuildFacematchSignatureRequest"), exports);
+__exportStar(require("./dtos/responses/FacematchSignatureResponse"), exports);

package/bin/walletFunding/dtos/CancelFundingReferenceRequest.d.ts

@@ -0,0 +1,6 @@
+export declare class CancelFundingReferenceRequest {
+    /** Referencia Passport (PK de EqualityFundingReference_GT). */
+    reference: string;
+    directoryId: string;
+    idempotencyKey: string;
+}

package/bin/walletFunding/dtos/CancelFundingReferenceRequest.js

@@ -0,0 +1,31 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.CancelFundingReferenceRequest = void 0;
+const class_validator_1 = require("class-validator");
+class CancelFundingReferenceRequest {
+}
+exports.CancelFundingReferenceRequest = CancelFundingReferenceRequest;
+__decorate([
+    (0, class_validator_1.IsString)(),
+    (0, class_validator_1.MaxLength)(64),
+    __metadata("design:type", String)
+], CancelFundingReferenceRequest.prototype, "reference", void 0);
+__decorate([
+    (0, class_validator_1.IsString)(),
+    (0, class_validator_1.MaxLength)(64),
+    __metadata("design:type", String)
+], CancelFundingReferenceRequest.prototype, "directoryId", void 0);
+__decorate([
+    (0, class_validator_1.IsString)(),
+    (0, class_validator_1.MaxLength)(64),
+    __metadata("design:type", String)
+], CancelFundingReferenceRequest.prototype, "idempotencyKey", void 0);

package/bin/walletFunding/dtos/CancelFundingReferenceResponse.d.ts

@@ -0,0 +1,7 @@
+import { BenefitPaymentStatusEnum } from "../../benefitCenter/enums/BenefitPaymentStatusEnum";
+import { WalletFundingErrorCodeEnum } from "../enums/WalletFundingErrorCodeEnum";
+export declare class CancelFundingReferenceResponse {
+    reference: string;
+    status: BenefitPaymentStatusEnum;
+    errorCode?: WalletFundingErrorCodeEnum;
+}

package/bin/walletFunding/dtos/CancelFundingReferenceResponse.js

@@ -0,0 +1,6 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.CancelFundingReferenceResponse = void 0;
+class CancelFundingReferenceResponse {
+}
+exports.CancelFundingReferenceResponse = CancelFundingReferenceResponse;

package/bin/walletFunding/dtos/CancelFundingRequest.d.ts

@@ -0,0 +1,11 @@
+/**
+ * Request del cancel via Centro de Beneficios (spec 13 v2.0).
+ * `reference` viaja en el path, `directoryId` se resuelve del JWT.
+ * `providerModuleName` permite al marketplace rutear al publisher correcto
+ * sin tener que persistir el mapping (el wallet-app sabe el moduleName
+ * porque vino en la respuesta del authorize).
+ */
+export declare class CancelFundingRequest {
+    idempotencyKey: string;
+    providerModuleName: string;
+}

package/bin/{platformRbac/dtos/ResendSelfRegisterOtpRequest.js → walletFunding/dtos/CancelFundingRequest.js}

@@ -9,28 +9,25 @@ var __metadata = (this && this.__metadata) || function (k, v) {
     if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
 };
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.ResendSelfRegisterOtpRequest = void 0;
-const class_transformer_1 = require("class-transformer");
+exports.CancelFundingRequest = void 0;
 const class_validator_1 = require("class-validator");
 /**
- * Body del POST /self-register/resend-otp (público, anónimo). DEC-RBAC-054.
- * Re-envía el OTP del autoregistro (mecanismo messages-business, NO Cognito) tras validar un
- * `pending` existente. Misma postura anti-enumeración del start. El email se normaliza lowercase
- * server-side. DTO propio por endpoint (NO reusa SelfRegisterStartRequest, que exige roleId/scope/
- * scopeRef, ni SelfRegisterVerifyOtpRequest, que exige otp).
+ * Request del cancel via Centro de Beneficios (spec 13 v2.0).
+ * `reference` viaja en el path, `directoryId` se resuelve del JWT.
+ * `providerModuleName` permite al marketplace rutear al publisher correcto
+ * sin tener que persistir el mapping (el wallet-app sabe el moduleName
+ * porque vino en la respuesta del authorize).
  */
-class ResendSelfRegisterOtpRequest {
+class CancelFundingRequest {
 }
-exports.ResendSelfRegisterOtpRequest = ResendSelfRegisterOtpRequest;
+exports.CancelFundingRequest = CancelFundingRequest;
 __decorate([
-    (0, class_transformer_1.Expose)(),
     (0, class_validator_1.IsString)(),
-    (0, class_validator_1.IsNotEmpty)(),
+    (0, class_validator_1.MaxLength)(64),
     __metadata("design:type", String)
-], ResendSelfRegisterOtpRequest.prototype, "tenantId", void 0);
+], CancelFundingRequest.prototype, "idempotencyKey", void 0);
 __decorate([
-    (0, class_transformer_1.Expose)(),
-    (0, class_validator_1.IsEmail)(),
-    (0, class_validator_1.IsNotEmpty)(),
+    (0, class_validator_1.IsString)(),
+    (0, class_validator_1.MaxLength)(128),
     __metadata("design:type", String)
-], ResendSelfRegisterOtpRequest.prototype, "email", void 0);
+], CancelFundingRequest.prototype, "providerModuleName", void 0);

package/bin/walletFunding/dtos/CancelFundingResponse.d.ts

@@ -0,0 +1,14 @@
+import { BenefitPaymentStatusEnum } from "../../benefitCenter/enums/BenefitPaymentStatusEnum";
+import { WalletFundingErrorCodeEnum } from "../enums/WalletFundingErrorCodeEnum";
+/**
+ * Response del cancel via Centro de Beneficios (spec 13 v2.0).
+ * `status` reusa `BenefitPaymentStatusEnum` (APPROVED = cancel aceptado;
+ * REJECTED = no se pudo) para consistencia con `CancelFundingReferenceResponse`
+ * (marketplace ↔ connector). Idempotente: re-cancelar devuelve APPROVED.
+ */
+export declare class CancelFundingResponse {
+    reference: string;
+    status: BenefitPaymentStatusEnum;
+    errorCode?: WalletFundingErrorCodeEnum;
+    message?: string;
+}

package/bin/walletFunding/dtos/CancelFundingResponse.js

@@ -0,0 +1,12 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.CancelFundingResponse = void 0;
+/**
+ * Response del cancel via Centro de Beneficios (spec 13 v2.0).
+ * `status` reusa `BenefitPaymentStatusEnum` (APPROVED = cancel aceptado;
+ * REJECTED = no se pudo) para consistencia con `CancelFundingReferenceResponse`
+ * (marketplace ↔ connector). Idempotente: re-cancelar devuelve APPROVED.
+ */
+class CancelFundingResponse {
+}
+exports.CancelFundingResponse = CancelFundingResponse;

package/bin/walletFunding/dtos/CancelWalletFundingRequest.d.ts

@@ -0,0 +1,3 @@
+export declare class CancelWalletFundingRequest {
+    idempotencyKey: string;
+}

package/bin/walletFunding/dtos/CancelWalletFundingRequest.js

@@ -0,0 +1,21 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.CancelWalletFundingRequest = void 0;
+const class_validator_1 = require("class-validator");
+class CancelWalletFundingRequest {
+}
+exports.CancelWalletFundingRequest = CancelWalletFundingRequest;
+__decorate([
+    (0, class_validator_1.IsString)(),
+    (0, class_validator_1.MaxLength)(64),
+    __metadata("design:type", String)
+], CancelWalletFundingRequest.prototype, "idempotencyKey", void 0);

package/bin/walletFunding/dtos/CancelWalletFundingResponse.d.ts

@@ -0,0 +1,7 @@
+import { BenefitPaymentStatusEnum } from "../../benefitCenter/enums/BenefitPaymentStatusEnum";
+import { WalletFundingErrorCodeEnum } from "../enums/WalletFundingErrorCodeEnum";
+export declare class CancelWalletFundingResponse {
+    status: BenefitPaymentStatusEnum;
+    errorCode?: WalletFundingErrorCodeEnum;
+    reference?: string;
+}

package/bin/walletFunding/dtos/CancelWalletFundingResponse.js

@@ -0,0 +1,6 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.CancelWalletFundingResponse = void 0;
+class CancelWalletFundingResponse {
+}
+exports.CancelWalletFundingResponse = CancelWalletFundingResponse;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@fiado/type-kit",
-  "version": "3.223.0",
+  "version": "3.225.0",
   "description": "",
   "main": "bin/index.js",
   "types": "bin/index.d.ts",

package/src/identity/dtos/PeopleSelfieResponse.ts

@@ -0,0 +1,36 @@
+import { SelfieSourceEnum } from '../enums/SelfieSourceEnum';
+
+/**
+ * `GET /identities/private/people/{directoryId}/selfie` — la selfie guardada del usuario.
+ *
+ * Devuelve una URL firmada temporal, no la imagen. Pensada para alimentar el `userPhotoLink` del
+ * facematch de Metamap: se pasa a `buildFacematchSignature` del metamap-connector para obtener el
+ * `userPhotoLinkHash`, y el par va en el `metadata` de la verificación con `customInput: true`.
+ *
+ * Solo responde a usuarios con cuenta (`MEX_DebitAccount` o `USA_DebitAccount`); si no, el endpoint
+ * devuelve 401 con code `NO_ACCOUNT`. Si el usuario tiene cuenta pero no hay imagen de selfie,
+ * devuelve code `SELFIE_NOT_FOUND`. fiado-identity-lambda.
+ */
+export class PeopleSelfieResponse {
+    directoryId: string;
+
+    /** Nombre del archivo en S3, sin el prefijo `USER/{directoryId}/`. */
+    key: string;
+
+    /** Presigned de S3. Es el valor a usar como `userPhotoLink`. */
+    url: string;
+
+    /**
+     * Vigencia del presigned. La emite fiado-s3-lambda y hoy es 3600; el facematch tiene que
+     * dispararse dentro de esa ventana o Metamap no podrá descargar la foto.
+     */
+    expiresInSeconds: number;
+
+    /** Verificación de Metamap a la que pertenece la selfie. `null` si no se pudo determinar. */
+    verificationId: string | null;
+
+    /** Fecha ISO de última modificación del objeto en S3. `null` si S3 no la reportó. */
+    lastModified: string | null;
+
+    source: SelfieSourceEnum;
+}

package/src/identity/enums/SelfieSourceEnum.ts

@@ -0,0 +1,10 @@
+/**
+ * Con qué criterio se resolvió cuál archivo de S3 es la selfie del usuario.
+ * Le dice al consumidor qué tan confiable es el match antes de mandarla a un facematch.
+ */
+export enum SelfieSourceEnum {
+    /** Matcheó el verificationId de la verificación vigente en People. */
+    VERIFICATION = 'VERIFICATION',
+    /** No hubo match por verificación: se tomó el archivo de selfie más reciente del bucket. */
+    LATEST = 'LATEST'
+}

package/src/identity/index.ts

@@ -12,6 +12,7 @@ export * from './dtos/UploadDocumentFile';
 export * from './dtos/PeopleSelfVerifiedRequest';
 export * from './dtos/AgentDocumentKeyResponse';
 export * from './dtos/DocumentUploadResponse';
+export * from './dtos/PeopleSelfieResponse';
 
 
 //enums
@@ -22,3 +23,4 @@ export * from './enums/AuthorizationNeededMXNStatus';
 export * from './enums/DocumentSideEnum';
 export * from './enums/CPStatusEnum';
 export * from './enums/AccountRequirementStatusEnum';
+export * from './enums/SelfieSourceEnum';

package/src/index.ts

@@ -1,5 +1,6 @@
 export * as Crypto from './crypto';
 export * as Account from './account';
+export * as MetamapConnector from './metamapConnector';
 export * as Activity from './activity';
 export * as Beneficiary from './beneficiary';
 export * as Address from './address';

package/src/metamapConnector/dtos/requests/BuildFacematchSignatureRequest.ts

@@ -0,0 +1,17 @@
+import { Expose } from 'class-transformer';
+import { IsNotEmpty, IsString } from 'class-validator';
+
+/**
+ * `POST /private/facematch/signature` — arma la firma que Metamap exige para comparar contra una foto
+ * de referencia (facematch de la merchant database). El caller (p. ej. el wizard) manda el URL público
+ * de la foto; el connector devuelve el `userPhotoLinkHash` sin exponer nunca el Client Secret.
+ * No se valida que sea una URL bien formada a propósito: los presigned pueden traer query params raros
+ * y el connector solo la concatena para el hash. metamap-connector (modernización de fiado-metamap-lambda).
+ */
+export class BuildFacematchSignatureRequest {
+    /** URL público (típicamente presigned) de la foto de referencia contra la que Metamap hará el facematch. */
+    @Expose()
+    @IsString()
+    @IsNotEmpty()
+    userPhotoLink!: string;
+}

package/src/metamapConnector/dtos/responses/FacematchSignatureResponse.ts

@@ -0,0 +1,10 @@
+/**
+ * Respuesta de `POST /private/facematch/signature`. El par listo para meter en el `metadata` de la
+ * verificación biométrica de Metamap (`userPhotoLink` + `userPhotoLinkHash`, con `customInput: true`).
+ * `userPhotoLinkHash = SHA-256(userPhotoLink + <Metamap Client Secret>)` — el secret vive SOLO en el
+ * connector, nunca viaja. metamap-connector.
+ */
+export interface FacematchSignatureResponse {
+    userPhotoLink: string;
+    userPhotoLinkHash: string;
+}

package/src/metamapConnector/index.ts

@@ -0,0 +1,3 @@
+// DTOs — metamap-connector (armado de la firma del facematch)
+export * from './dtos/requests/BuildFacematchSignatureRequest';
+export * from './dtos/responses/FacematchSignatureResponse';

package/bin/loanConfig/enums/ModifiableByRoleEnum.d.ts

@@ -1,11 +0,0 @@
-/**
- * Rol RBAC mínimo que puede modificar un parámetro (RBAC a nivel de parámetro, modelo-datos §8).
- * `retailer_admin` = "Admin VentasLuga" de M6 §8. Valores = identificadores de rol de RBAC F0.
- * TD-004: confirmar mapeo super_admin ↔ platform_super_admin con el naming real de F0.
- * @enum {string}
- */
-export declare enum ModifiableByRoleEnum {
-    SUPER_ADMIN = "super_admin",
-    SOFOM_ADMIN = "sofom_admin",
-    RETAILER_ADMIN = "retailer_admin"
-}

package/bin/loanConfig/enums/ModifiableByRoleEnum.js

@@ -1,15 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.ModifiableByRoleEnum = void 0;
-/**
- * Rol RBAC mínimo que puede modificar un parámetro (RBAC a nivel de parámetro, modelo-datos §8).
- * `retailer_admin` = "Admin VentasLuga" de M6 §8. Valores = identificadores de rol de RBAC F0.
- * TD-004: confirmar mapeo super_admin ↔ platform_super_admin con el naming real de F0.
- * @enum {string}
- */
-var ModifiableByRoleEnum;
-(function (ModifiableByRoleEnum) {
-    ModifiableByRoleEnum["SUPER_ADMIN"] = "super_admin";
-    ModifiableByRoleEnum["SOFOM_ADMIN"] = "sofom_admin";
-    ModifiableByRoleEnum["RETAILER_ADMIN"] = "retailer_admin";
-})(ModifiableByRoleEnum || (exports.ModifiableByRoleEnum = ModifiableByRoleEnum = {}));

package/bin/places/dtos/CashInFeeDto.d.ts

@@ -1,17 +0,0 @@
-import { CurrencyId } from '../../currency/enums/CurrencyId';
-/**
- * Comisión que cobra un punto de cash-in (lo que el lambda MUESTRA, no cobra).
- * - GreenDot (US): representativo por cadena → `fixed` + `cap` (cada tienda cobra hasta el tope).
- * - Passport (MX): por red → `fixed` + `percentage`.
- * Response DTO — sin decoradores de validación.
- */
-export declare class CashInFeeDto {
-    /** Comisión fija, en la moneda del país. */
-    fixed?: number;
-    /** Porcentaje del monto depositado (0–100). */
-    percentage?: number;
-    /** Tope máximo de comisión (GreenDot: el asociado cobra hasta este cap). */
-    cap?: number;
-    /** Moneda del fee: USD (GreenDot) | MXN (Passport). */
-    currency: CurrencyId;
-}

package/bin/places/dtos/CashInFeeDto.js

@@ -1,12 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.CashInFeeDto = void 0;
-/**
- * Comisión que cobra un punto de cash-in (lo que el lambda MUESTRA, no cobra).
- * - GreenDot (US): representativo por cadena → `fixed` + `cap` (cada tienda cobra hasta el tope).
- * - Passport (MX): por red → `fixed` + `percentage`.
- * Response DTO — sin decoradores de validación.
- */
-class CashInFeeDto {
-}
-exports.CashInFeeDto = CashInFeeDto;

package/bin/platformRbac/dtos/ResendOtpRequest.d.ts

@@ -1,22 +0,0 @@
-import { MfaMethodEnum } from '../enums/MfaMethodEnum';
-/**
- * Body del POST /auth/resend-otp (público, anónimo). DEC-RBAC-054.
- * Reenvía el OTP del login re-disparando el challenge real CUSTOM_AUTH (EMAIL_OTP) para la
- * identidad SIN password. `tenantId` obligatorio (DEC-064 — el picker ya lo resolvió, NO "solo email").
- * El email se normaliza lowercase server-side. Postura anti-enumeración: respuesta 200 genérica
- * siempre, sin filtrar existencia (ver AuthLoginManager.resendChallengeOtp).
- */
-export declare class ResendOtpRequest {
-    email: string;
-    tenantId: string;
-}
-/**
- * Respuesta del resend-otp. `session`/`mfaMethod` frescos del nuevo challenge CUSTOM_AUTH.
- * Plain sin validators (no validamos lo que mandamos al cliente — fiado-validation-and-dtos § 7).
- * Ambos opcionales: en los caminos de rechazo silencioso (anti-enumeración) o ramas sin CUSTOM_AUTH
- * el server responde 200 genérico sin session ni método.
- */
-export interface ResendOtpResponse {
-    session?: string;
-    mfaMethod?: MfaMethodEnum;
-}

package/bin/platformRbac/dtos/ResendSelfRegisterOtpRequest.d.ts

@@ -1,11 +0,0 @@
-/**
- * Body del POST /self-register/resend-otp (público, anónimo). DEC-RBAC-054.
- * Re-envía el OTP del autoregistro (mecanismo messages-business, NO Cognito) tras validar un
- * `pending` existente. Misma postura anti-enumeración del start. El email se normaliza lowercase
- * server-side. DTO propio por endpoint (NO reusa SelfRegisterStartRequest, que exige roleId/scope/
- * scopeRef, ni SelfRegisterVerifyOtpRequest, que exige otp).
- */
-export declare class ResendSelfRegisterOtpRequest {
-    tenantId: string;
-    email: string;
-}