@fiado/type-kit 3.38.0 → 3.40.0

package/src/platformRbac/enums/Permission.ts

@@ -0,0 +1,120 @@
+/**
+ * Catálogo universal de permisos del sistema RBAC Fiado.
+ *
+ * Origen: componente 01 de Fase 0 SureKeep (spec maestro):
+ *   surekeep/docs/5_fases/00_fase0_cognito_rbac_users_mfa/componentes/01_typekit-rbac-additions.md
+ *
+ * Copy-paste literal de los 78 valores del spec (DEC-003).
+ * Convención: `<category>.<resource>.<action>` (snake_case en action si multi-palabra).
+ * Cualquier cambio aquí requiere PR + bump minor + redeploy de consumers.
+ *
+ * Coexiste con módulo `rbac/` oficial cuando yhonhansen publique componente 01 — TD-RBAC-002.
+ */
+export enum Permission {
+    // ====================================================
+    // RBAC — gestión genérica del propio sistema RBAC
+    // ====================================================
+    RBAC_CATALOG_MANAGE = 'rbac.catalog.manage',
+
+    // ====================================================
+    // PLATFORM — operaciones a nivel meta-plataforma (Fiado equipo)
+    // ====================================================
+    PLATFORM_TENANT_CREATE = 'platform.tenant.create',
+    PLATFORM_TENANT_LIST = 'platform.tenant.list',
+    PLATFORM_TENANT_VIEW = 'platform.tenant.view',
+    PLATFORM_TENANT_UPDATE = 'platform.tenant.update',
+    PLATFORM_TENANT_SUSPEND = 'platform.tenant.suspend',
+    PLATFORM_TENANT_ACTIVATE = 'platform.tenant.activate',
+    PLATFORM_TENANT_ADMIN_REPLACE = 'platform.tenant.admin.replace',
+    PLATFORM_COGNITO_POOL_MANAGE = 'platform.cognito.pool.manage',
+    PLATFORM_COGNITO_POOL_LIST = 'platform.cognito.pool.list',
+    PLATFORM_USER_CREATE = 'platform.user.create',
+    PLATFORM_USER_LIST = 'platform.user.list',
+    PLATFORM_USER_VIEW = 'platform.user.view',
+    PLATFORM_USER_UPDATE = 'platform.user.update',
+    PLATFORM_USER_DISABLE = 'platform.user.disable',
+    PLATFORM_USER_ENABLE = 'platform.user.enable',
+    PLATFORM_USER_DELETE = 'platform.user.delete',
+    PLATFORM_ROLE_CREATE = 'platform.role.create',
+    PLATFORM_ROLE_LIST = 'platform.role.list',
+    PLATFORM_ROLE_UPDATE = 'platform.role.update',
+    PLATFORM_ROLE_DELETE = 'platform.role.delete',
+    PLATFORM_AUDIT_VIEW = 'platform.audit.view',
+
+    // ====================================================
+    // TENANT — operaciones dentro del silo de un tenant
+    // ====================================================
+    TENANT_USER_CREATE = 'tenant.user.create',
+    TENANT_USER_LIST = 'tenant.user.list',
+    TENANT_USER_VIEW = 'tenant.user.view',
+    TENANT_USER_UPDATE = 'tenant.user.update',
+    TENANT_USER_DISABLE = 'tenant.user.disable',
+    TENANT_USER_ENABLE = 'tenant.user.enable',
+    TENANT_USER_DELETE = 'tenant.user.delete',
+    TENANT_USER_MFA_RESET = 'tenant.user.mfa.reset',
+    TENANT_USER_PASSWORD_RESET = 'tenant.user.password.reset',
+    TENANT_ROLE_CREATE = 'tenant.role.create',
+    TENANT_ROLE_LIST = 'tenant.role.list',
+    TENANT_ROLE_UPDATE = 'tenant.role.update',
+    TENANT_ROLE_DELETE = 'tenant.role.delete',
+    TENANT_ROLE_VIEW = 'tenant.role.view',
+    TENANT_ROLE_ASSIGN = 'tenant.role.assign',
+    TENANT_ROLE_REVOKE = 'tenant.role.revoke',
+    TENANT_SECURITY_POLICY_VIEW = 'tenant.security.policy.view',
+    TENANT_SECURITY_POLICY_MANAGE = 'tenant.security.policy.manage',
+    TENANT_BRANDING_MANAGE = 'tenant.branding.manage',
+    TENANT_AUDIT_VIEW = 'tenant.audit.view',
+
+    // ====================================================
+    // RETAIL — catálogo + inventario + ventas
+    // ====================================================
+    RETAIL_PRODUCT_CREATE = 'retail.product.create',
+    RETAIL_PRODUCT_LIST = 'retail.product.list',
+    RETAIL_PRODUCT_VIEW = 'retail.product.view',
+    RETAIL_PRODUCT_UPDATE = 'retail.product.update',
+    RETAIL_PRODUCT_DELETE = 'retail.product.delete',
+    RETAIL_PRODUCT_MDM_CONFIG = 'retail.product.mdm_config',
+    RETAIL_INVENTORY_LIST = 'retail.inventory.list',
+    RETAIL_INVENTORY_VIEW = 'retail.inventory.view',
+    RETAIL_INVENTORY_UPDATE = 'retail.inventory.update',
+    RETAIL_SALE_CREATE = 'retail.sale.create',
+    RETAIL_SALE_LIST = 'retail.sale.list',
+    RETAIL_SALE_CANCEL = 'retail.sale.cancel',
+    RETAIL_STORE_MANAGE = 'retail.store.manage',
+    RETAIL_RETAILER_MANAGE = 'retail.retailer.manage',
+
+    // ====================================================
+    // LEND — créditos + cobranza
+    // ====================================================
+    LEND_CREDIT_CREATE = 'lend.credit.create',
+    LEND_CREDIT_LIST = 'lend.credit.list',
+    LEND_CREDIT_VIEW = 'lend.credit.view',
+    LEND_CREDIT_UPDATE = 'lend.credit.update',
+    LEND_CREDIT_LIQUIDATE = 'lend.credit.liquidate',
+    LEND_CREDIT_RESTRUCTURE = 'lend.credit.restructure',
+    LEND_PAYMENT_APPLY = 'lend.payment.apply',
+    LEND_PAYMENT_LIST = 'lend.payment.list',
+    LEND_PAYMENT_REVERSE = 'lend.payment.reverse',
+    LEND_INSTALLMENT_VIEW = 'lend.installment.view',
+
+    // ====================================================
+    // MDM — device management (subset especializado de LEND)
+    // ====================================================
+    MDM_DEVICE_ENROLL = 'mdm.device.enroll',
+    MDM_DEVICE_RELEASE = 'mdm.device.release',
+    MDM_DEVICE_ARCHIVE = 'mdm.device.archive',
+    MDM_DEVICE_DEACTIVATE = 'mdm.device.deactivate',
+    MDM_DEVICE_LOCK_MANUAL = 'mdm.device.lock.manual',
+    MDM_DEVICE_UNLOCK_MANUAL = 'mdm.device.unlock.manual',
+    MDM_DEVICE_PIN_UNLOCK = 'mdm.device.pin_unlock',
+    MDM_DEVICE_EXTEND_VALIDITY = 'mdm.device.extend_validity',
+    MDM_DEVICE_NOTIFY = 'mdm.device.notify',
+    MDM_DEVICE_STATUS_VIEW = 'mdm.device.status.view',
+    MDM_OPERATION_LOG_VIEW = 'mdm.operation_log.view',
+    MDM_TEST = 'mdm.test',
+
+    // ====================================================
+    // PAY — futuro FiadoPay (placeholder, no usado en MVP)
+    // ====================================================
+    PAY_TRANSACTION_VIEW = 'pay.transaction.view',
+}

package/src/platformRbac/enums/PermissionCategory.ts

@@ -0,0 +1,14 @@
+/**
+ * Categorías del catálogo de permissions (componente 01).
+ * TD-RBAC-005: `AUDIT` category sin permissions `audit.*` asociadas — drift consciente.
+ */
+export enum PermissionCategory {
+    RBAC = 'rbac',
+    PLATFORM = 'platform',
+    TENANT = 'tenant',
+    RETAIL = 'retail',
+    LEND = 'lend',
+    MDM = 'mdm',
+    AUDIT = 'audit',
+    PAY = 'pay',
+}

package/src/platformRbac/enums/PermissionScope.ts

@@ -0,0 +1,10 @@
+/**
+ * Jerarquía: PLATFORM > TENANT > RETAILER > STORE.
+ * Componente 01 spec — copia exacta.
+ */
+export enum PermissionScope {
+    PLATFORM = 'PLATFORM',
+    TENANT = 'TENANT',
+    RETAILER = 'RETAILER',
+    STORE = 'STORE',
+}

package/src/platformRbac/index.ts

@@ -0,0 +1,17 @@
+// platformRbac — módulo del lambda platform-rbac-business (Fase 0 SureKeep).
+//
+// Coexiste con `Rbac` oficial cuando yhonhansen publique componente 01 — TD-RBAC-002
+// del platform-rbac-business documenta la migración futura de los 4 símbolos cross-cutting
+// (Permission, PermissionScope, AuthContext, RoleAssignmentInfo) de aquí a `rbac/`.
+//
+// En Fase 1.A los DTOs propios del rbac-business (CreateTenantRequest, AssignRoleRequest,
+// EffectivePermissionsResponse, etc.) NO viven en este módulo todavía — se agregan en
+// Fase 1.B cuando los managers que los consumen se implementen.
+
+export { Permission } from './enums/Permission';
+export { PermissionScope } from './enums/PermissionScope';
+export { PermissionCategory } from './enums/PermissionCategory';
+
+export type { AuthContext } from './dtos/AuthContext';
+export type { RoleAssignmentInfo } from './dtos/RoleAssignmentInfo';
+export type { PermissionMeta } from './dtos/PermissionMeta';

package/bin/cognitoBackofficeConnector/dtos/PoolConfigResponse.d.ts

@@ -1,20 +0,0 @@
-import { PoolKind } from '../../rbac/enums/PoolKind';
-/**
- * Shape del `PoolConfigRow` expuesto al caller (BFF M18 / otros lambdas Fiado).
- * Refleja la configuración de un Cognito User Pool registrado en la tabla
- * `PoolConfigs_GT` del lambda `cognito-backoffice-connector`.
- */
-export declare class PoolConfigResponse {
-    userPoolId: string;
-    userPoolArn: string;
-    region: string;
-    poolKind: PoolKind;
-    displayName: string;
-    appClients: Record<string, {
-        clientId: string;
-        clientName: string;
-    }>;
-    status: 'active' | 'deprecated';
-    createdAt: number;
-    updatedAt: number;
-}

package/bin/cognitoBackofficeConnector/dtos/PoolConfigResponse.js

@@ -1,11 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.PoolConfigResponse = void 0;
-/**
- * Shape del `PoolConfigRow` expuesto al caller (BFF M18 / otros lambdas Fiado).
- * Refleja la configuración de un Cognito User Pool registrado en la tabla
- * `PoolConfigs_GT` del lambda `cognito-backoffice-connector`.
- */
-class PoolConfigResponse {
-}
-exports.PoolConfigResponse = PoolConfigResponse;

package/bin/cognitoBackofficeConnector/dtos/PoolsListResponse.d.ts

@@ -1,4 +0,0 @@
-import { PoolConfigResponse } from './PoolConfigResponse';
-export declare class PoolsListResponse {
-    pools: PoolConfigResponse[];
-}

package/bin/cognitoBackofficeConnector/dtos/PoolsListResponse.js

@@ -1,6 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.PoolsListResponse = void 0;
-class PoolsListResponse {
-}
-exports.PoolsListResponse = PoolsListResponse;

package/bin/messagesConnector/dtos/SendMessageRequest.d.ts

@@ -1,20 +0,0 @@
-import { DeliveryChannelEnum } from '../../messaging/enums/DeliveryChannelEnum';
-export declare class SendMessageRequest {
-    channelType: DeliveryChannelEnum;
-    messageType: string;
-    directoryId: string;
-    typeOfDirectory: string;
-    language: string;
-    country: string;
-    destination?: string;
-    var1?: string;
-    var2?: string;
-    var3?: string;
-    var4?: string;
-    var5?: string;
-    beneficiaryDirectoryId?: string;
-    beneficiaryTypeOfDirectoryId?: string;
-    options?: Record<string, unknown>;
-    referenceMessageId?: string;
-    transactionNumber?: string;
-}

package/bin/messagesConnector/dtos/SendMessageRequest.js

@@ -1,118 +0,0 @@
-"use strict";
-var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
-    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
-    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
-    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
-    return c > 3 && r && Object.defineProperty(target, key, r), r;
-};
-var __metadata = (this && this.__metadata) || function (k, v) {
-    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
-};
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.SendMessageRequest = void 0;
-const class_transformer_1 = require("class-transformer");
-const class_validator_1 = require("class-validator");
-const DeliveryChannelEnum_1 = require("../../messaging/enums/DeliveryChannelEnum");
-class SendMessageRequest {
-}
-exports.SendMessageRequest = SendMessageRequest;
-__decorate([
-    (0, class_transformer_1.Expose)(),
-    (0, class_validator_1.IsEnum)(DeliveryChannelEnum_1.DeliveryChannelEnum),
-    __metadata("design:type", String)
-], SendMessageRequest.prototype, "channelType", void 0);
-__decorate([
-    (0, class_transformer_1.Expose)(),
-    (0, class_validator_1.IsString)(),
-    (0, class_validator_1.IsNotEmpty)(),
-    __metadata("design:type", String)
-], SendMessageRequest.prototype, "messageType", void 0);
-__decorate([
-    (0, class_transformer_1.Expose)(),
-    (0, class_validator_1.IsUUID)(),
-    __metadata("design:type", String)
-], SendMessageRequest.prototype, "directoryId", void 0);
-__decorate([
-    (0, class_transformer_1.Expose)(),
-    (0, class_validator_1.IsString)(),
-    (0, class_validator_1.IsNotEmpty)(),
-    __metadata("design:type", String)
-], SendMessageRequest.prototype, "typeOfDirectory", void 0);
-__decorate([
-    (0, class_transformer_1.Expose)(),
-    (0, class_validator_1.IsString)(),
-    (0, class_validator_1.IsNotEmpty)(),
-    __metadata("design:type", String)
-], SendMessageRequest.prototype, "language", void 0);
-__decorate([
-    (0, class_transformer_1.Expose)(),
-    (0, class_validator_1.IsString)(),
-    (0, class_validator_1.IsNotEmpty)(),
-    __metadata("design:type", String)
-], SendMessageRequest.prototype, "country", void 0);
-__decorate([
-    (0, class_transformer_1.Expose)(),
-    (0, class_validator_1.IsOptional)(),
-    (0, class_validator_1.IsString)(),
-    __metadata("design:type", String)
-], SendMessageRequest.prototype, "destination", void 0);
-__decorate([
-    (0, class_transformer_1.Expose)(),
-    (0, class_validator_1.IsOptional)(),
-    (0, class_validator_1.IsString)(),
-    __metadata("design:type", String)
-], SendMessageRequest.prototype, "var1", void 0);
-__decorate([
-    (0, class_transformer_1.Expose)(),
-    (0, class_validator_1.IsOptional)(),
-    (0, class_validator_1.IsString)(),
-    __metadata("design:type", String)
-], SendMessageRequest.prototype, "var2", void 0);
-__decorate([
-    (0, class_transformer_1.Expose)(),
-    (0, class_validator_1.IsOptional)(),
-    (0, class_validator_1.IsString)(),
-    __metadata("design:type", String)
-], SendMessageRequest.prototype, "var3", void 0);
-__decorate([
-    (0, class_transformer_1.Expose)(),
-    (0, class_validator_1.IsOptional)(),
-    (0, class_validator_1.IsString)(),
-    __metadata("design:type", String)
-], SendMessageRequest.prototype, "var4", void 0);
-__decorate([
-    (0, class_transformer_1.Expose)(),
-    (0, class_validator_1.IsOptional)(),
-    (0, class_validator_1.IsString)(),
-    __metadata("design:type", String)
-], SendMessageRequest.prototype, "var5", void 0);
-__decorate([
-    (0, class_transformer_1.Expose)(),
-    (0, class_validator_1.IsOptional)(),
-    (0, class_validator_1.IsUUID)(),
-    __metadata("design:type", String)
-], SendMessageRequest.prototype, "beneficiaryDirectoryId", void 0);
-__decorate([
-    (0, class_transformer_1.Expose)(),
-    (0, class_validator_1.IsOptional)(),
-    (0, class_validator_1.IsString)(),
-    __metadata("design:type", String)
-], SendMessageRequest.prototype, "beneficiaryTypeOfDirectoryId", void 0);
-__decorate([
-    (0, class_transformer_1.Expose)(),
-    (0, class_validator_1.IsOptional)(),
-    (0, class_validator_1.IsObject)(),
-    __metadata("design:type", Object)
-], SendMessageRequest.prototype, "options", void 0);
-__decorate([
-    (0, class_transformer_1.Expose)(),
-    (0, class_validator_1.IsOptional)(),
-    (0, class_validator_1.IsUUID)(),
-    __metadata("design:type", String)
-], SendMessageRequest.prototype, "referenceMessageId", void 0);
-__decorate([
-    (0, class_transformer_1.Expose)(),
-    (0, class_validator_1.IsOptional)(),
-    (0, class_validator_1.IsString)(),
-    __metadata("design:type", String)
-], SendMessageRequest.prototype, "transactionNumber", void 0);

package/bin/messagesConnector/dtos/VerifyOtpRequest.d.ts

@@ -1,5 +0,0 @@
-export declare class VerifyOtpRequest {
-    directoryId: string;
-    typeOfDirectoryId: string;
-    message: string;
-}

package/src/cognitoBackofficeConnector/dtos/PoolConfigResponse.ts

@@ -1,18 +0,0 @@
-import { PoolKind } from '../../rbac/enums/PoolKind';
-
-/**
- * Shape del `PoolConfigRow` expuesto al caller (BFF M18 / otros lambdas Fiado).
- * Refleja la configuración de un Cognito User Pool registrado en la tabla
- * `PoolConfigs_GT` del lambda `cognito-backoffice-connector`.
- */
-export class PoolConfigResponse {
-    userPoolId!: string;
-    userPoolArn!: string;
-    region!: string;
-    poolKind!: PoolKind;
-    displayName!: string;
-    appClients!: Record<string, { clientId: string; clientName: string }>;
-    status!: 'active' | 'deprecated';
-    createdAt!: number;
-    updatedAt!: number;
-}

package/src/cognitoBackofficeConnector/dtos/PoolsListResponse.ts

@@ -1,5 +0,0 @@
-import { PoolConfigResponse } from './PoolConfigResponse';
-
-export class PoolsListResponse {
-    pools!: PoolConfigResponse[];
-}