@fiado/type-kit 3.290.0 → 3.292.0

package/bin/card/dtos/CardUpdateIssuanceRequest.d.ts

@@ -1,10 +1,13 @@
 import { KycStatus } from "../enums/issuance/KycStatus";
 import { UserStatus } from "../enums/issuance/UserStatus";
 import { KycReason } from "../enums/KycReason";
+import { KycVendorResultDetail } from "./KycVendorResultDetail";
 export declare class CardUpdateIssuanceRequest {
     kycStatus: KycStatus;
     userStatus: UserStatus;
     directoryId: string;
     externalUserId: string;
     kycReasons?: KycReason[];
+    /** Detalle crudo del vendor de KYC. Solo lo manda la ruta del webhook/connector de CP. */
+    kycVendorResults?: KycVendorResultDetail[];
 }

package/bin/card/dtos/CardUpdateIssuanceRequest.js

@@ -10,9 +10,11 @@ var __metadata = (this && this.__metadata) || function (k, v) {
 };
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.CardUpdateIssuanceRequest = void 0;
+const class_transformer_1 = require("class-transformer");
 const class_validator_1 = require("class-validator");
 const KycStatus_1 = require("../enums/issuance/KycStatus");
 const UserStatus_1 = require("../enums/issuance/UserStatus");
+const KycVendorResultDetail_1 = require("./KycVendorResultDetail");
 class CardUpdateIssuanceRequest {
 }
 exports.CardUpdateIssuanceRequest = CardUpdateIssuanceRequest;
@@ -37,3 +39,10 @@ __decorate([
     (0, class_validator_1.IsString)(),
     __metadata("design:type", Array)
 ], CardUpdateIssuanceRequest.prototype, "kycReasons", void 0);
+__decorate([
+    (0, class_validator_1.IsOptional)(),
+    (0, class_validator_1.IsArray)(),
+    (0, class_validator_1.ValidateNested)({ each: true }),
+    (0, class_transformer_1.Type)(() => KycVendorResultDetail_1.KycVendorResultDetail),
+    __metadata("design:type", Array)
+], CardUpdateIssuanceRequest.prototype, "kycVendorResults", void 0);

package/bin/card/dtos/KycVendorResultDetail.d.ts

@@ -0,0 +1,10 @@
+/**
+ * Resultado crudo del vendor de KYC (IDology vía Central Payments). Valores libres a propósito:
+ * los códigos son un conjunto abierto del vendor — la traducción vive en el consumidor.
+ */
+export declare class KycVendorResultDetail {
+    vendor?: string;
+    type?: string;
+    code?: string;
+    description?: string;
+}

package/bin/card/dtos/KycVendorResultDetail.js

@@ -0,0 +1,40 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.KycVendorResultDetail = void 0;
+const class_validator_1 = require("class-validator");
+/**
+ * Resultado crudo del vendor de KYC (IDology vía Central Payments). Valores libres a propósito:
+ * los códigos son un conjunto abierto del vendor — la traducción vive en el consumidor.
+ */
+class KycVendorResultDetail {
+}
+exports.KycVendorResultDetail = KycVendorResultDetail;
+__decorate([
+    (0, class_validator_1.IsOptional)(),
+    (0, class_validator_1.IsString)(),
+    __metadata("design:type", String)
+], KycVendorResultDetail.prototype, "vendor", void 0);
+__decorate([
+    (0, class_validator_1.IsOptional)(),
+    (0, class_validator_1.IsString)(),
+    __metadata("design:type", String)
+], KycVendorResultDetail.prototype, "type", void 0);
+__decorate([
+    (0, class_validator_1.IsOptional)(),
+    (0, class_validator_1.IsString)(),
+    __metadata("design:type", String)
+], KycVendorResultDetail.prototype, "code", void 0);
+__decorate([
+    (0, class_validator_1.IsOptional)(),
+    (0, class_validator_1.IsString)(),
+    __metadata("design:type", String)
+], KycVendorResultDetail.prototype, "description", void 0);

package/bin/card/index.d.ts

@@ -37,6 +37,7 @@ export * from './dtos/CardSummaryResponse';
 export * from './dtos/CardAdditionalResponse';
 export * from './dtos/AccountCancelGetResponse';
 export * from './dtos/CardUpdateIssuanceRequest';
+export * from './dtos/KycVendorResultDetail';
 export * from './dtos/AccountIssuanceStepConfig';
 export * from './enums/CardType';
 export * from './enums/CardUpdateKey';

package/bin/card/index.js

@@ -55,6 +55,7 @@ __exportStar(require("./dtos/CardSummaryResponse"), exports);
 __exportStar(require("./dtos/CardAdditionalResponse"), exports);
 __exportStar(require("./dtos/AccountCancelGetResponse"), exports);
 __exportStar(require("./dtos/CardUpdateIssuanceRequest"), exports);
+__exportStar(require("./dtos/KycVendorResultDetail"), exports);
 __exportStar(require("./dtos/AccountIssuanceStepConfig"), exports);
 //enums
 __exportStar(require("./enums/CardType"), exports);

package/bin/platformRbac/enums/PrincipalKind.d.ts

@@ -0,0 +1,14 @@
+/**
+ * DEC-RBAC-120: qué clase de principal está haciendo el request.
+ *
+ * USER        — persona autenticada con sesión de Cognito (cookie `session`).
+ * INTEGRATION — credencial máquina-a-máquina de un socio externo (API key bearer). Su `cognitoSub`
+ *               tiene la forma `INT#<integrationId>` y NO viene de Cognito.
+ *
+ * NO confundir con `PrincipalIdentifierEnum` (EMAIL/PHONE), que es cómo se identifica un humano al
+ * hacer login (DEC-RBAC-079). Este enum es el TIPO de principal, no cómo se identifica.
+ */
+export declare enum PrincipalKind {
+    USER = "USER",
+    INTEGRATION = "INTEGRATION"
+}

package/bin/platformRbac/enums/PrincipalKind.js

@@ -0,0 +1,18 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.PrincipalKind = void 0;
+/**
+ * DEC-RBAC-120: qué clase de principal está haciendo el request.
+ *
+ * USER        — persona autenticada con sesión de Cognito (cookie `session`).
+ * INTEGRATION — credencial máquina-a-máquina de un socio externo (API key bearer). Su `cognitoSub`
+ *               tiene la forma `INT#<integrationId>` y NO viene de Cognito.
+ *
+ * NO confundir con `PrincipalIdentifierEnum` (EMAIL/PHONE), que es cómo se identifica un humano al
+ * hacer login (DEC-RBAC-079). Este enum es el TIPO de principal, no cómo se identifica.
+ */
+var PrincipalKind;
+(function (PrincipalKind) {
+    PrincipalKind["USER"] = "USER";
+    PrincipalKind["INTEGRATION"] = "INTEGRATION";
+})(PrincipalKind || (exports.PrincipalKind = PrincipalKind = {}));

package/bin/platformRbac/index.d.ts

@@ -2,6 +2,7 @@ export { Permission, PERMISSION_BIT_ORDER, PERMS_VERSION, permissionsToBits, bit
 export { PermissionScope } from './enums/PermissionScope';
 export { PermissionCategory } from './enums/PermissionCategory';
 export { PrincipalIdentifierEnum } from './enums/PrincipalIdentifierEnum';
+export { PrincipalKind } from './enums/PrincipalKind';
 export type { AuthContext } from './dtos/AuthContext';
 export type { RoleAssignmentInfo } from './dtos/RoleAssignmentInfo';
 export type { PermissionMeta } from './dtos/PermissionMeta';

package/bin/platformRbac/index.js

@@ -23,7 +23,7 @@ var __exportStar = (this && this.__exportStar) || function(m, exports) {
     for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
 };
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.UserFieldType = exports.scopeRankOrder = exports.tableSuffixForLevel = exports.levelsOf = exports.TENANT_TYPES = exports.TenantType = exports.AuthorizeDenyReason = exports.PrincipalIdentifierEnum = exports.PermissionCategory = exports.PermissionScope = exports.bitsToPermissions = exports.permissionsToBits = exports.PERMS_VERSION = exports.PERMISSION_BIT_ORDER = exports.Permission = void 0;
+exports.UserFieldType = exports.scopeRankOrder = exports.tableSuffixForLevel = exports.levelsOf = exports.TENANT_TYPES = exports.TenantType = exports.AuthorizeDenyReason = exports.PrincipalKind = exports.PrincipalIdentifierEnum = exports.PermissionCategory = exports.PermissionScope = exports.bitsToPermissions = exports.permissionsToBits = exports.PERMS_VERSION = exports.PERMISSION_BIT_ORDER = exports.Permission = void 0;
 var Permission_1 = require("./enums/Permission");
 Object.defineProperty(exports, "Permission", { enumerable: true, get: function () { return Permission_1.Permission; } });
 Object.defineProperty(exports, "PERMISSION_BIT_ORDER", { enumerable: true, get: function () { return Permission_1.PERMISSION_BIT_ORDER; } });
@@ -37,6 +37,10 @@ Object.defineProperty(exports, "PermissionCategory", { enumerable: true, get: fu
 // DEC-RBAC-079: identificador principal de login por aplicación (heredado por tenant).
 var PrincipalIdentifierEnum_1 = require("./enums/PrincipalIdentifierEnum");
 Object.defineProperty(exports, "PrincipalIdentifierEnum", { enumerable: true, get: function () { return PrincipalIdentifierEnum_1.PrincipalIdentifierEnum; } });
+// DEC-RBAC-120: TIPO de principal (humano vs credencial M2M). No confundir con el de arriba,
+// que es cómo se identifica un humano al hacer login.
+var PrincipalKind_1 = require("./enums/PrincipalKind");
+Object.defineProperty(exports, "PrincipalKind", { enumerable: true, get: function () { return PrincipalKind_1.PrincipalKind; } });
 // Fase 1 — Custom Auth Challenge (Email OTP + TOTP) + MFA self-service.
 // Class values (no type-only) — los DTOs llevan decoradores class-validator y se hidratan con plainToInstance en runtime.
 __exportStar(require("./enums/MfaMethodEnum"), exports);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@fiado/type-kit",
-  "version": "3.290.0",
+  "version": "3.292.0",
   "description": "",
   "main": "bin/index.js",
   "types": "bin/index.d.ts",

package/src/card/dtos/CardUpdateIssuanceRequest.ts

@@ -1,7 +1,9 @@
-import { IsEnum, IsOptional, IsString, IsUUID } from "class-validator";
+import { Type } from "class-transformer";
+import { IsArray, IsEnum, IsOptional, IsString, IsUUID, ValidateNested } from "class-validator";
 import { KycStatus } from "../enums/issuance/KycStatus";
 import { UserStatus } from "../enums/issuance/UserStatus";
 import { KycReason } from "../enums/KycReason";
+import { KycVendorResultDetail } from "./KycVendorResultDetail";
 
 
 export class CardUpdateIssuanceRequest {
@@ -22,4 +24,11 @@ export class CardUpdateIssuanceRequest {
     @IsString()
     kycReasons?: KycReason[];
 
+    /** Detalle crudo del vendor de KYC. Solo lo manda la ruta del webhook/connector de CP. */
+    @IsOptional()
+    @IsArray()
+    @ValidateNested({ each: true })
+    @Type(() => KycVendorResultDetail)
+    kycVendorResults?: KycVendorResultDetail[];
+
 }

package/src/card/dtos/KycVendorResultDetail.ts

@@ -0,0 +1,24 @@
+import { IsOptional, IsString } from "class-validator";
+
+/**
+ * Resultado crudo del vendor de KYC (IDology vía Central Payments). Valores libres a propósito:
+ * los códigos son un conjunto abierto del vendor — la traducción vive en el consumidor.
+ */
+export class KycVendorResultDetail {
+
+    @IsOptional()
+    @IsString()
+    vendor?: string;
+
+    @IsOptional()
+    @IsString()
+    type?: string;
+
+    @IsOptional()
+    @IsString()
+    code?: string;
+
+    @IsOptional()
+    @IsString()
+    description?: string;
+}

package/src/card/index.ts

@@ -41,6 +41,7 @@ export * from './dtos/CardSummaryResponse'
 export * from './dtos/CardAdditionalResponse'
 export * from './dtos/AccountCancelGetResponse'
 export * from './dtos/CardUpdateIssuanceRequest'
+export * from './dtos/KycVendorResultDetail'
 export * from './dtos/AccountIssuanceStepConfig'
 
 //enums

package/src/platformRbac/enums/PrincipalKind.ts

@@ -0,0 +1,14 @@
+/**
+ * DEC-RBAC-120: qué clase de principal está haciendo el request.
+ *
+ * USER        — persona autenticada con sesión de Cognito (cookie `session`).
+ * INTEGRATION — credencial máquina-a-máquina de un socio externo (API key bearer). Su `cognitoSub`
+ *               tiene la forma `INT#<integrationId>` y NO viene de Cognito.
+ *
+ * NO confundir con `PrincipalIdentifierEnum` (EMAIL/PHONE), que es cómo se identifica un humano al
+ * hacer login (DEC-RBAC-079). Este enum es el TIPO de principal, no cómo se identifica.
+ */
+export enum PrincipalKind {
+    USER = 'USER',
+    INTEGRATION = 'INTEGRATION',
+}

package/src/platformRbac/index.ts

@@ -19,6 +19,9 @@ export { PermissionScope } from './enums/PermissionScope';
 export { PermissionCategory } from './enums/PermissionCategory';
 // DEC-RBAC-079: identificador principal de login por aplicación (heredado por tenant).
 export { PrincipalIdentifierEnum } from './enums/PrincipalIdentifierEnum';
+// DEC-RBAC-120: TIPO de principal (humano vs credencial M2M). No confundir con el de arriba,
+// que es cómo se identifica un humano al hacer login.
+export { PrincipalKind } from './enums/PrincipalKind';
 
 export type { AuthContext } from './dtos/AuthContext';
 export type { RoleAssignmentInfo } from './dtos/RoleAssignmentInfo';