@fiado/type-kit 3.291.0 → 3.293.0

package/bin/emailVerification/dtos/EmailItem.d.ts

@@ -1,4 +1,5 @@
 import { EmailVerificationStatusEnum } from '../enums/EmailVerificationStatusEnum';
+import { EmailLinkExpirationReasonEnum } from '../enums/EmailLinkExpirationReasonEnum';
 /**
  * Item de email asociado a un directorio. Se reutiliza en EmailListResponse
  * (público) y en EmailsByDirectoryResponse (interno).
@@ -9,4 +10,6 @@ export declare class EmailItem {
     isPrincipal: boolean;
     status: EmailVerificationStatusEnum;
     verifiedAt?: number;
+    /** Solo presente cuando status === EXPIRED. */
+    expirationReason?: EmailLinkExpirationReasonEnum;
 }

package/bin/emailVerification/dtos/EmailItem.js

@@ -12,6 +12,7 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.EmailItem = void 0;
 const class_transformer_1 = require("class-transformer");
 const EmailVerificationStatusEnum_1 = require("../enums/EmailVerificationStatusEnum");
+const EmailLinkExpirationReasonEnum_1 = require("../enums/EmailLinkExpirationReasonEnum");
 /**
  * Item de email asociado a un directorio. Se reutiliza en EmailListResponse
  * (público) y en EmailsByDirectoryResponse (interno).
@@ -39,3 +40,7 @@ __decorate([
     (0, class_transformer_1.Expose)(),
     __metadata("design:type", Number)
 ], EmailItem.prototype, "verifiedAt", void 0);
+__decorate([
+    (0, class_transformer_1.Expose)(),
+    __metadata("design:type", String)
+], EmailItem.prototype, "expirationReason", void 0);

package/bin/emailVerification/dtos/EmailVerificationStatusResponse.d.ts

@@ -1,4 +1,5 @@
 import { EmailVerificationStatusEnum } from '../enums/EmailVerificationStatusEnum';
+import { EmailLinkExpirationReasonEnum } from '../enums/EmailLinkExpirationReasonEnum';
 /**
  * Estado de verificación de un email puntual de un directorio.
  */
@@ -7,4 +8,6 @@ export declare class EmailVerificationStatusResponse {
     status: EmailVerificationStatusEnum;
     isVerified: boolean;
     isPrincipal: boolean;
+    /** Solo presente cuando status === EXPIRED. */
+    expirationReason?: EmailLinkExpirationReasonEnum;
 }

package/bin/emailVerification/dtos/EmailVerificationStatusResponse.js

@@ -12,6 +12,7 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.EmailVerificationStatusResponse = void 0;
 const class_transformer_1 = require("class-transformer");
 const EmailVerificationStatusEnum_1 = require("../enums/EmailVerificationStatusEnum");
+const EmailLinkExpirationReasonEnum_1 = require("../enums/EmailLinkExpirationReasonEnum");
 /**
  * Estado de verificación de un email puntual de un directorio.
  */
@@ -34,3 +35,7 @@ __decorate([
     (0, class_transformer_1.Expose)(),
     __metadata("design:type", Boolean)
 ], EmailVerificationStatusResponse.prototype, "isPrincipal", void 0);
+__decorate([
+    (0, class_transformer_1.Expose)(),
+    __metadata("design:type", String)
+], EmailVerificationStatusResponse.prototype, "expirationReason", void 0);

package/bin/emailVerification/enums/EmailLinkExpirationReasonEnum.d.ts

@@ -0,0 +1,13 @@
+/**
+ * Motivo por el que un link de verificación de correo quedó EXPIRED.
+ * TTL_EXPIRED: superó su hora de vigencia sin confirmarse.
+ * REPLACED_BY_NEW_LINK: el mismo directorio envió un link más nuevo.
+ * EMAIL_REQUESTED_BY_OTHER: otro directorio pidió un link para el mismo correo.
+ * EMAIL_VERIFIED_BY_OTHER: otro directorio verificó el correo.
+ */
+export declare enum EmailLinkExpirationReasonEnum {
+    TTL_EXPIRED = "TTL_EXPIRED",
+    REPLACED_BY_NEW_LINK = "REPLACED_BY_NEW_LINK",
+    EMAIL_REQUESTED_BY_OTHER = "EMAIL_REQUESTED_BY_OTHER",
+    EMAIL_VERIFIED_BY_OTHER = "EMAIL_VERIFIED_BY_OTHER"
+}

package/bin/emailVerification/enums/EmailLinkExpirationReasonEnum.js

@@ -0,0 +1,17 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.EmailLinkExpirationReasonEnum = void 0;
+/**
+ * Motivo por el que un link de verificación de correo quedó EXPIRED.
+ * TTL_EXPIRED: superó su hora de vigencia sin confirmarse.
+ * REPLACED_BY_NEW_LINK: el mismo directorio envió un link más nuevo.
+ * EMAIL_REQUESTED_BY_OTHER: otro directorio pidió un link para el mismo correo.
+ * EMAIL_VERIFIED_BY_OTHER: otro directorio verificó el correo.
+ */
+var EmailLinkExpirationReasonEnum;
+(function (EmailLinkExpirationReasonEnum) {
+    EmailLinkExpirationReasonEnum["TTL_EXPIRED"] = "TTL_EXPIRED";
+    EmailLinkExpirationReasonEnum["REPLACED_BY_NEW_LINK"] = "REPLACED_BY_NEW_LINK";
+    EmailLinkExpirationReasonEnum["EMAIL_REQUESTED_BY_OTHER"] = "EMAIL_REQUESTED_BY_OTHER";
+    EmailLinkExpirationReasonEnum["EMAIL_VERIFIED_BY_OTHER"] = "EMAIL_VERIFIED_BY_OTHER";
+})(EmailLinkExpirationReasonEnum || (exports.EmailLinkExpirationReasonEnum = EmailLinkExpirationReasonEnum = {}));

package/bin/emailVerification/index.d.ts

@@ -1,4 +1,5 @@
 export * from './enums/EmailVerificationStatusEnum';
+export * from './enums/EmailLinkExpirationReasonEnum';
 export * from './dtos/EmailVerificationStartRequest';
 export * from './dtos/EmailVerificationStartResponse';
 export * from './dtos/EmailVerificationResendRequest';

package/bin/emailVerification/index.js

@@ -15,6 +15,7 @@ var __exportStar = (this && this.__exportStar) || function(m, exports) {
 };
 Object.defineProperty(exports, "__esModule", { value: true });
 __exportStar(require("./enums/EmailVerificationStatusEnum"), exports);
+__exportStar(require("./enums/EmailLinkExpirationReasonEnum"), exports);
 __exportStar(require("./dtos/EmailVerificationStartRequest"), exports);
 __exportStar(require("./dtos/EmailVerificationStartResponse"), exports);
 __exportStar(require("./dtos/EmailVerificationResendRequest"), exports);

package/bin/platformRbac/enums/PrincipalKind.d.ts

@@ -0,0 +1,14 @@
+/**
+ * DEC-RBAC-120: qué clase de principal está haciendo el request.
+ *
+ * USER        — persona autenticada con sesión de Cognito (cookie `session`).
+ * INTEGRATION — credencial máquina-a-máquina de un socio externo (API key bearer). Su `cognitoSub`
+ *               tiene la forma `INT#<integrationId>` y NO viene de Cognito.
+ *
+ * NO confundir con `PrincipalIdentifierEnum` (EMAIL/PHONE), que es cómo se identifica un humano al
+ * hacer login (DEC-RBAC-079). Este enum es el TIPO de principal, no cómo se identifica.
+ */
+export declare enum PrincipalKind {
+    USER = "USER",
+    INTEGRATION = "INTEGRATION"
+}

package/bin/platformRbac/enums/PrincipalKind.js

@@ -0,0 +1,18 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.PrincipalKind = void 0;
+/**
+ * DEC-RBAC-120: qué clase de principal está haciendo el request.
+ *
+ * USER        — persona autenticada con sesión de Cognito (cookie `session`).
+ * INTEGRATION — credencial máquina-a-máquina de un socio externo (API key bearer). Su `cognitoSub`
+ *               tiene la forma `INT#<integrationId>` y NO viene de Cognito.
+ *
+ * NO confundir con `PrincipalIdentifierEnum` (EMAIL/PHONE), que es cómo se identifica un humano al
+ * hacer login (DEC-RBAC-079). Este enum es el TIPO de principal, no cómo se identifica.
+ */
+var PrincipalKind;
+(function (PrincipalKind) {
+    PrincipalKind["USER"] = "USER";
+    PrincipalKind["INTEGRATION"] = "INTEGRATION";
+})(PrincipalKind || (exports.PrincipalKind = PrincipalKind = {}));

package/bin/platformRbac/index.d.ts

@@ -2,6 +2,7 @@ export { Permission, PERMISSION_BIT_ORDER, PERMS_VERSION, permissionsToBits, bit
 export { PermissionScope } from './enums/PermissionScope';
 export { PermissionCategory } from './enums/PermissionCategory';
 export { PrincipalIdentifierEnum } from './enums/PrincipalIdentifierEnum';
+export { PrincipalKind } from './enums/PrincipalKind';
 export type { AuthContext } from './dtos/AuthContext';
 export type { RoleAssignmentInfo } from './dtos/RoleAssignmentInfo';
 export type { PermissionMeta } from './dtos/PermissionMeta';

package/bin/platformRbac/index.js

@@ -23,7 +23,7 @@ var __exportStar = (this && this.__exportStar) || function(m, exports) {
     for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
 };
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.UserFieldType = exports.scopeRankOrder = exports.tableSuffixForLevel = exports.levelsOf = exports.TENANT_TYPES = exports.TenantType = exports.AuthorizeDenyReason = exports.PrincipalIdentifierEnum = exports.PermissionCategory = exports.PermissionScope = exports.bitsToPermissions = exports.permissionsToBits = exports.PERMS_VERSION = exports.PERMISSION_BIT_ORDER = exports.Permission = void 0;
+exports.UserFieldType = exports.scopeRankOrder = exports.tableSuffixForLevel = exports.levelsOf = exports.TENANT_TYPES = exports.TenantType = exports.AuthorizeDenyReason = exports.PrincipalKind = exports.PrincipalIdentifierEnum = exports.PermissionCategory = exports.PermissionScope = exports.bitsToPermissions = exports.permissionsToBits = exports.PERMS_VERSION = exports.PERMISSION_BIT_ORDER = exports.Permission = void 0;
 var Permission_1 = require("./enums/Permission");
 Object.defineProperty(exports, "Permission", { enumerable: true, get: function () { return Permission_1.Permission; } });
 Object.defineProperty(exports, "PERMISSION_BIT_ORDER", { enumerable: true, get: function () { return Permission_1.PERMISSION_BIT_ORDER; } });
@@ -37,6 +37,10 @@ Object.defineProperty(exports, "PermissionCategory", { enumerable: true, get: fu
 // DEC-RBAC-079: identificador principal de login por aplicación (heredado por tenant).
 var PrincipalIdentifierEnum_1 = require("./enums/PrincipalIdentifierEnum");
 Object.defineProperty(exports, "PrincipalIdentifierEnum", { enumerable: true, get: function () { return PrincipalIdentifierEnum_1.PrincipalIdentifierEnum; } });
+// DEC-RBAC-120: TIPO de principal (humano vs credencial M2M). No confundir con el de arriba,
+// que es cómo se identifica un humano al hacer login.
+var PrincipalKind_1 = require("./enums/PrincipalKind");
+Object.defineProperty(exports, "PrincipalKind", { enumerable: true, get: function () { return PrincipalKind_1.PrincipalKind; } });
 // Fase 1 — Custom Auth Challenge (Email OTP + TOTP) + MFA self-service.
 // Class values (no type-only) — los DTOs llevan decoradores class-validator y se hidratan con plainToInstance en runtime.
 __exportStar(require("./enums/MfaMethodEnum"), exports);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@fiado/type-kit",
-  "version": "3.291.0",
+  "version": "3.293.0",
   "description": "",
   "main": "bin/index.js",
   "types": "bin/index.d.ts",

package/src/emailVerification/dtos/EmailItem.ts

@@ -1,5 +1,6 @@
 import { Expose } from 'class-transformer';
 import { EmailVerificationStatusEnum } from '../enums/EmailVerificationStatusEnum';
+import { EmailLinkExpirationReasonEnum } from '../enums/EmailLinkExpirationReasonEnum';
 
 /**
  * Item de email asociado a un directorio. Se reutiliza en EmailListResponse
@@ -20,4 +21,8 @@ export class EmailItem {
 
     @Expose()
     verifiedAt?: number;
+
+    /** Solo presente cuando status === EXPIRED. */
+    @Expose()
+    expirationReason?: EmailLinkExpirationReasonEnum;
 }

package/src/emailVerification/dtos/EmailVerificationStatusResponse.ts

@@ -1,5 +1,6 @@
 import { Expose } from 'class-transformer';
 import { EmailVerificationStatusEnum } from '../enums/EmailVerificationStatusEnum';
+import { EmailLinkExpirationReasonEnum } from '../enums/EmailLinkExpirationReasonEnum';
 
 /**
  * Estado de verificación de un email puntual de un directorio.
@@ -16,4 +17,8 @@ export class EmailVerificationStatusResponse {
 
     @Expose()
     isPrincipal!: boolean;
+
+    /** Solo presente cuando status === EXPIRED. */
+    @Expose()
+    expirationReason?: EmailLinkExpirationReasonEnum;
 }

package/src/emailVerification/enums/EmailLinkExpirationReasonEnum.ts

@@ -0,0 +1,13 @@
+/**
+ * Motivo por el que un link de verificación de correo quedó EXPIRED.
+ * TTL_EXPIRED: superó su hora de vigencia sin confirmarse.
+ * REPLACED_BY_NEW_LINK: el mismo directorio envió un link más nuevo.
+ * EMAIL_REQUESTED_BY_OTHER: otro directorio pidió un link para el mismo correo.
+ * EMAIL_VERIFIED_BY_OTHER: otro directorio verificó el correo.
+ */
+export enum EmailLinkExpirationReasonEnum {
+    TTL_EXPIRED = 'TTL_EXPIRED',
+    REPLACED_BY_NEW_LINK = 'REPLACED_BY_NEW_LINK',
+    EMAIL_REQUESTED_BY_OTHER = 'EMAIL_REQUESTED_BY_OTHER',
+    EMAIL_VERIFIED_BY_OTHER = 'EMAIL_VERIFIED_BY_OTHER',
+}

package/src/emailVerification/index.ts

@@ -1,4 +1,5 @@
 export * from './enums/EmailVerificationStatusEnum';
+export * from './enums/EmailLinkExpirationReasonEnum';
 export * from './dtos/EmailVerificationStartRequest';
 export * from './dtos/EmailVerificationStartResponse';
 export * from './dtos/EmailVerificationResendRequest';

package/src/platformRbac/enums/PrincipalKind.ts

@@ -0,0 +1,14 @@
+/**
+ * DEC-RBAC-120: qué clase de principal está haciendo el request.
+ *
+ * USER        — persona autenticada con sesión de Cognito (cookie `session`).
+ * INTEGRATION — credencial máquina-a-máquina de un socio externo (API key bearer). Su `cognitoSub`
+ *               tiene la forma `INT#<integrationId>` y NO viene de Cognito.
+ *
+ * NO confundir con `PrincipalIdentifierEnum` (EMAIL/PHONE), que es cómo se identifica un humano al
+ * hacer login (DEC-RBAC-079). Este enum es el TIPO de principal, no cómo se identifica.
+ */
+export enum PrincipalKind {
+    USER = 'USER',
+    INTEGRATION = 'INTEGRATION',
+}

package/src/platformRbac/index.ts

@@ -19,6 +19,9 @@ export { PermissionScope } from './enums/PermissionScope';
 export { PermissionCategory } from './enums/PermissionCategory';
 // DEC-RBAC-079: identificador principal de login por aplicación (heredado por tenant).
 export { PrincipalIdentifierEnum } from './enums/PrincipalIdentifierEnum';
+// DEC-RBAC-120: TIPO de principal (humano vs credencial M2M). No confundir con el de arriba,
+// que es cómo se identifica un humano al hacer login.
+export { PrincipalKind } from './enums/PrincipalKind';
 
 export type { AuthContext } from './dtos/AuthContext';
 export type { RoleAssignmentInfo } from './dtos/RoleAssignmentInfo';