@fiado/type-kit 3.43.1 → 3.44.0

package/src/cognitoBackofficeConnector/index.ts

@@ -1,50 +1,50 @@
-/**
- * Módulo `cognitoBackofficeConnector` — DTOs, enums y validators para el Lambda
- * `cognito-backoffice-connector` (backoffice multi-tenant Fiado).
- *
- * Es un módulo NUEVO y SEPARADO del módulo `cognitoConnector/` legacy que pertenece
- * a otro Lambda Cognito Fiado (mantenido por yhonhansen). No reusar tipos del
- * legacy aquí ni viceversa — los dominios divergieron y mezclarlos arrastraría
- * acoplamiento histórico.
- */
-export * from './enums/CognitoChallengeType';
-export * from './enums/CognitoUserStatus';
-export * from './validators/NoTenantIdInCustomAttrs';
-export * from './validators/MfaTypesRequiresOne';
-export * from './dtos/CreateUserRequest';
-export * from './dtos/CreateUserResponse';
-export * from './dtos/UpdateUserAttributesRequest';
-export * from './dtos/UserActionRequest';
-export * from './dtos/DeleteUserRequest';
-export * from './dtos/ResendInvitationRequest';
-export * from './dtos/UserDetailResponse';
-export * from './dtos/AuthEventsRequest';
-export * from './dtos/AuthEventResponse';
-export * from './dtos/AuthTokensResponse';
-export * from './dtos/InitiateAuthRequest';
-export * from './dtos/InitiateAuthResponse';
-export * from './dtos/RespondToChallengeRequest';
-export * from './dtos/RespondToChallengeResponse';
-export * from './dtos/RefreshTokensRequest';
-export * from './dtos/RefreshTokensResponse';
-export * from './dtos/ForgotPasswordRequest';
-export * from './dtos/ConfirmForgotPasswordRequest';
-export * from './dtos/ResendConfirmationRequest';
-export * from './dtos/ChangePasswordRequest';
-export * from './dtos/TotpBeginRequest';
-export * from './dtos/TotpBeginResponse';
-export * from './dtos/TotpVerifyRequest';
-export * from './dtos/MfaVerifyResponse';
-export * from './dtos/SetMfaPreferenceRequest';
-export * from './dtos/MfaResetRequest';
-export * from './dtos/UpdateEmailRequest';
-export * from './dtos/VerifyEmailRequest';
-export * from './dtos/UpdateProfileRequest';
-export * from './dtos/HealthcheckResponse';
-export * from './dtos/MfaPoolConfig';
-export * from './dtos/PasswordPolicyConfig';
-export * from './dtos/CustomAttributeSpec';
-export * from './dtos/AppClientConfig';
-export * from './dtos/CreatePoolRequest';
-export * from './dtos/CreatePoolResponse';
-export * from './dtos/DeletePoolRequest';
+/**
+ * Módulo `cognitoBackofficeConnector` — DTOs, enums y validators para el Lambda
+ * `cognito-backoffice-connector` (backoffice multi-tenant Fiado).
+ *
+ * Es un módulo NUEVO y SEPARADO del módulo `cognitoConnector/` legacy que pertenece
+ * a otro Lambda Cognito Fiado (mantenido por yhonhansen). No reusar tipos del
+ * legacy aquí ni viceversa — los dominios divergieron y mezclarlos arrastraría
+ * acoplamiento histórico.
+ */
+export * from './enums/CognitoChallengeType';
+export * from './enums/CognitoUserStatus';
+export * from './validators/NoTenantIdInCustomAttrs';
+export * from './validators/MfaTypesRequiresOne';
+export * from './dtos/CreateUserRequest';
+export * from './dtos/CreateUserResponse';
+export * from './dtos/UpdateUserAttributesRequest';
+export * from './dtos/UserActionRequest';
+export * from './dtos/DeleteUserRequest';
+export * from './dtos/ResendInvitationRequest';
+export * from './dtos/UserDetailResponse';
+export * from './dtos/AuthEventsRequest';
+export * from './dtos/AuthEventResponse';
+export * from './dtos/AuthTokensResponse';
+export * from './dtos/InitiateAuthRequest';
+export * from './dtos/InitiateAuthResponse';
+export * from './dtos/RespondToChallengeRequest';
+export * from './dtos/RespondToChallengeResponse';
+export * from './dtos/RefreshTokensRequest';
+export * from './dtos/RefreshTokensResponse';
+export * from './dtos/ForgotPasswordRequest';
+export * from './dtos/ConfirmForgotPasswordRequest';
+export * from './dtos/ResendConfirmationRequest';
+export * from './dtos/ChangePasswordRequest';
+export * from './dtos/TotpBeginRequest';
+export * from './dtos/TotpBeginResponse';
+export * from './dtos/TotpVerifyRequest';
+export * from './dtos/MfaVerifyResponse';
+export * from './dtos/SetMfaPreferenceRequest';
+export * from './dtos/MfaResetRequest';
+export * from './dtos/UpdateEmailRequest';
+export * from './dtos/VerifyEmailRequest';
+export * from './dtos/UpdateProfileRequest';
+export * from './dtos/HealthcheckResponse';
+export * from './dtos/MfaPoolConfig';
+export * from './dtos/PasswordPolicyConfig';
+export * from './dtos/CustomAttributeSpec';
+export * from './dtos/AppClientConfig';
+export * from './dtos/CreatePoolRequest';
+export * from './dtos/CreatePoolResponse';
+export * from './dtos/DeletePoolRequest';

package/src/cognitoBackofficeConnector/validators/MfaTypesRequiresOne.ts

@@ -1,29 +1,29 @@
-import { ValidatorConstraint, ValidatorConstraintInterface, ValidationArguments } from 'class-validator';
-
-/**
- * Cross-field validator: si `requireMfa: true`, entonces `mfaTypes` debe tener
- * al menos 1 elemento. Si `requireMfa: false`, `mfaTypes` puede ser vacío.
- *
- * Razón: cuando el pool nace con MFA habilitado, el connector llama
- * `SetUserPoolMfaConfigCommand` con la lista de tipos del DTO. Si el array
- * llega vacío con `requireMfa: true`, el SDK rechaza con InvalidParameterException
- * y el pool queda en estado inconsistente (MfaConfiguration:'ON' sin tipos).
- * Mejor rechazar en validación del DTO antes de tocar AWS.
- *
- * Ver pivote v1.4.1 TD-017 cerrado + spec doc §1 R3.
- */
-@ValidatorConstraint({ name: 'MfaTypesRequiresOneWhenMfaRequired', async: false })
-export class MfaTypesRequiresOne implements ValidatorConstraintInterface {
-    validate(mfaTypes: unknown, args: ValidationArguments): boolean {
-        const obj = args.object as { requireMfa?: boolean };
-        if (obj.requireMfa === true) {
-            return Array.isArray(mfaTypes) && mfaTypes.length >= 1;
-        }
-        // requireMfa: false → cualquier mfaTypes pasa.
-        return true;
-    }
-
-    defaultMessage(): string {
-        return 'mfaTypes requiere al menos un tipo cuando requireMfa=true';
-    }
-}
+import { ValidatorConstraint, ValidatorConstraintInterface, ValidationArguments } from 'class-validator';
+
+/**
+ * Cross-field validator: si `requireMfa: true`, entonces `mfaTypes` debe tener
+ * al menos 1 elemento. Si `requireMfa: false`, `mfaTypes` puede ser vacío.
+ *
+ * Razón: cuando el pool nace con MFA habilitado, el connector llama
+ * `SetUserPoolMfaConfigCommand` con la lista de tipos del DTO. Si el array
+ * llega vacío con `requireMfa: true`, el SDK rechaza con InvalidParameterException
+ * y el pool queda en estado inconsistente (MfaConfiguration:'ON' sin tipos).
+ * Mejor rechazar en validación del DTO antes de tocar AWS.
+ *
+ * Ver pivote v1.4.1 TD-017 cerrado + spec doc §1 R3.
+ */
+@ValidatorConstraint({ name: 'MfaTypesRequiresOneWhenMfaRequired', async: false })
+export class MfaTypesRequiresOne implements ValidatorConstraintInterface {
+    validate(mfaTypes: unknown, args: ValidationArguments): boolean {
+        const obj = args.object as { requireMfa?: boolean };
+        if (obj.requireMfa === true) {
+            return Array.isArray(mfaTypes) && mfaTypes.length >= 1;
+        }
+        // requireMfa: false → cualquier mfaTypes pasa.
+        return true;
+    }
+
+    defaultMessage(): string {
+        return 'mfaTypes requiere al menos un tipo cuando requireMfa=true';
+    }
+}

package/src/cognitoBackofficeConnector/validators/NoTenantIdInCustomAttrs.ts

@@ -1,36 +1,36 @@
-import { ValidatorConstraint, ValidatorConstraintInterface, ValidationArguments } from 'class-validator';
-
-/**
- * Bloquea que el cliente del backoffice envíe `tenantId` dentro del map
- * `customAttributes` al actualizar atributos de un usuario Cognito (decisión D3
- * del spec del proyecto `cognito-backoffice-connector`).
- *
- * Razón: el `tenantId` se determina por el pool donde vive el usuario y por
- * el rol del caller — permitir overridearlo desde `customAttributes` habilitaría
- * "tenant reassignment" por la puerta de atrás (escalación de privilegios
- * cross-tenant).
- *
- * Acepta:
- *  - `undefined` / `null` (el campo es opcional).
- *  - Objeto vacío `{}`.
- *  - Cualquier objeto que NO contenga la key `tenantId`.
- *
- * Rechaza:
- *  - Objetos con la key `tenantId` presente (con cualquier valor).
- *  - Valores que no son objeto (string, number, array, etc.).
- *
- * Uso en DTOs: `@Validate(NoTenantIdInCustomAttrs)` sobre el campo
- * `customAttributes`.
- */
-@ValidatorConstraint({ name: 'NoTenantIdInCustomAttrs', async: false })
-export class NoTenantIdInCustomAttrs implements ValidatorConstraintInterface {
-    validate(value: unknown, _args: ValidationArguments): boolean {
-        if (value === undefined || value === null) return true;
-        if (typeof value !== 'object' || Array.isArray(value)) return false;
-        return !Object.prototype.hasOwnProperty.call(value, 'tenantId');
-    }
-
-    defaultMessage(args: ValidationArguments): string {
-        return `${args.property} must not contain a 'tenantId' key — tenant reassignment via customAttributes is forbidden`;
-    }
-}
+import { ValidatorConstraint, ValidatorConstraintInterface, ValidationArguments } from 'class-validator';
+
+/**
+ * Bloquea que el cliente del backoffice envíe `tenantId` dentro del map
+ * `customAttributes` al actualizar atributos de un usuario Cognito (decisión D3
+ * del spec del proyecto `cognito-backoffice-connector`).
+ *
+ * Razón: el `tenantId` se determina por el pool donde vive el usuario y por
+ * el rol del caller — permitir overridearlo desde `customAttributes` habilitaría
+ * "tenant reassignment" por la puerta de atrás (escalación de privilegios
+ * cross-tenant).
+ *
+ * Acepta:
+ *  - `undefined` / `null` (el campo es opcional).
+ *  - Objeto vacío `{}`.
+ *  - Cualquier objeto que NO contenga la key `tenantId`.
+ *
+ * Rechaza:
+ *  - Objetos con la key `tenantId` presente (con cualquier valor).
+ *  - Valores que no son objeto (string, number, array, etc.).
+ *
+ * Uso en DTOs: `@Validate(NoTenantIdInCustomAttrs)` sobre el campo
+ * `customAttributes`.
+ */
+@ValidatorConstraint({ name: 'NoTenantIdInCustomAttrs', async: false })
+export class NoTenantIdInCustomAttrs implements ValidatorConstraintInterface {
+    validate(value: unknown, _args: ValidationArguments): boolean {
+        if (value === undefined || value === null) return true;
+        if (typeof value !== 'object' || Array.isArray(value)) return false;
+        return !Object.prototype.hasOwnProperty.call(value, 'tenantId');
+    }
+
+    defaultMessage(args: ValidationArguments): string {
+        return `${args.property} must not contain a 'tenantId' key — tenant reassignment via customAttributes is forbidden`;
+    }
+}

package/src/cognitoConnector/dtos/ChangePasswordRequest.ts

@@ -1,20 +1,20 @@
-import { IsNotEmpty, IsString } from "class-validator"
-import { TypeOfDirectoryId } from "../../directory"
-
-
-
-export class ChangePasswordRequest {
-
-    @IsString()
-    @IsNotEmpty()
-    username: string
-
-    @IsString()
-    @IsNotEmpty()
-    newPassword: string
-
-    @IsString()
-    @IsNotEmpty()
-    typeOfDirectoryId: TypeOfDirectoryId
-
-}
+import { IsNotEmpty, IsString } from "class-validator"
+import { TypeOfDirectoryId } from "../../directory"
+
+
+
+export class ChangePasswordRequest {
+
+    @IsString()
+    @IsNotEmpty()
+    username: string
+
+    @IsString()
+    @IsNotEmpty()
+    newPassword: string
+
+    @IsString()
+    @IsNotEmpty()
+    typeOfDirectoryId: TypeOfDirectoryId
+
+}

package/src/cognitoConnector/dtos/GetUserRequest.ts

@@ -1,13 +1,13 @@
-import { IsNotEmpty, IsString } from "class-validator"
-import { TypeOfDirectoryId } from "../../directory"
-
-export class GetUserRequest {
-
-    @IsString()
-    @IsNotEmpty()
-    username: string
-
-    @IsString()
-    @IsNotEmpty()
-    typeOfDirectoryId: TypeOfDirectoryId
+import { IsNotEmpty, IsString } from "class-validator"
+import { TypeOfDirectoryId } from "../../directory"
+
+export class GetUserRequest {
+
+    @IsString()
+    @IsNotEmpty()
+    username: string
+
+    @IsString()
+    @IsNotEmpty()
+    typeOfDirectoryId: TypeOfDirectoryId
 }

package/src/cognitoConnector/dtos/GetUserResponse.ts

@@ -1,10 +1,10 @@
-import { SyncStatus } from "../enums/SyncStatus";
-
-
-
-export class GetUserResponse {
-
-    identityId: string
-    userStatus: string
-    syncStatus?: SyncStatus;   
+import { SyncStatus } from "../enums/SyncStatus";
+
+
+
+export class GetUserResponse {
+
+    identityId: string
+    userStatus: string
+    syncStatus?: SyncStatus;   
 }

package/src/cognitoConnector/dtos/RefreshTokenRequest.ts

@@ -1,15 +1,15 @@
-import { IsNotEmpty, IsString } from "class-validator"
-import { TypeOfDirectoryId } from "../../directory"
-
-
-
-export class RefreshTokenRequest {
-
-    @IsString()
-    @IsNotEmpty()
-    refreshToken: string
-
-    @IsString()
-    @IsNotEmpty()
-    typeOfDirectoryId: TypeOfDirectoryId
+import { IsNotEmpty, IsString } from "class-validator"
+import { TypeOfDirectoryId } from "../../directory"
+
+
+
+export class RefreshTokenRequest {
+
+    @IsString()
+    @IsNotEmpty()
+    refreshToken: string
+
+    @IsString()
+    @IsNotEmpty()
+    typeOfDirectoryId: TypeOfDirectoryId
 }

package/src/cognitoConnector/dtos/RefreshTokenResponse.ts

@@ -1,7 +1,7 @@
-
-
-export class RefreshTokenResponse {
-    accessToken: string
-    refreshToken: string | null
-
+
+
+export class RefreshTokenResponse {
+    accessToken: string
+    refreshToken: string | null
+
 }

package/src/cognitoConnector/dtos/RespondToAuthChallengeRequest.ts

@@ -1,26 +1,26 @@
-import { IsNotEmpty, IsString } from "class-validator"
-import { TypeOfDirectoryId } from "../../directory"
-
-
-export class RespondToAuthChallengeRequest {
-
-    @IsString()
-    @IsNotEmpty()
-    username: string
-
-    @IsString()
-    @IsNotEmpty()
-    newPassword: string
-
-    @IsString()
-    @IsNotEmpty()
-    session: string
-
-    @IsString()
-    @IsNotEmpty()
-    typeOfDirectoryId: TypeOfDirectoryId
-
-
-
-
+import { IsNotEmpty, IsString } from "class-validator"
+import { TypeOfDirectoryId } from "../../directory"
+
+
+export class RespondToAuthChallengeRequest {
+
+    @IsString()
+    @IsNotEmpty()
+    username: string
+
+    @IsString()
+    @IsNotEmpty()
+    newPassword: string
+
+    @IsString()
+    @IsNotEmpty()
+    session: string
+
+    @IsString()
+    @IsNotEmpty()
+    typeOfDirectoryId: TypeOfDirectoryId
+
+
+
+
 }

package/src/cognitoConnector/dtos/SetPasswordRequest.ts

@@ -1,20 +1,20 @@
-import { IsNotEmpty, IsString } from "class-validator"
-import { TypeOfDirectoryId } from "../../directory"
-
-
-
-export class SetPasswordRequest {
-
-    @IsString()
-    @IsNotEmpty()
-    username: string
-
-    @IsString()
-    @IsNotEmpty()
-    newPassowrd: string
-
-    @IsNotEmpty()
-    @IsString()
-    typeOfDirectoryId: TypeOfDirectoryId
-
+import { IsNotEmpty, IsString } from "class-validator"
+import { TypeOfDirectoryId } from "../../directory"
+
+
+
+export class SetPasswordRequest {
+
+    @IsString()
+    @IsNotEmpty()
+    username: string
+
+    @IsString()
+    @IsNotEmpty()
+    newPassowrd: string
+
+    @IsNotEmpty()
+    @IsString()
+    typeOfDirectoryId: TypeOfDirectoryId
+
 }

package/src/cognitoConnector/dtos/SignInRequest.ts

@@ -1,21 +1,21 @@
-import { IsNotEmpty, IsString } from "class-validator"
-import { TypeOfDirectoryId } from "../../directory"
-
-
-
-
-export class SignInRequest
-{
-    @IsString()
-    @IsNotEmpty()
-    username: string
-
-    @IsString()
-    @IsNotEmpty()
-    password: string
-
-    @IsString()
-    @IsNotEmpty()
-    typeOfDirectoryId: TypeOfDirectoryId
-
+import { IsNotEmpty, IsString } from "class-validator"
+import { TypeOfDirectoryId } from "../../directory"
+
+
+
+
+export class SignInRequest
+{
+    @IsString()
+    @IsNotEmpty()
+    username: string
+
+    @IsString()
+    @IsNotEmpty()
+    password: string
+
+    @IsString()
+    @IsNotEmpty()
+    typeOfDirectoryId: TypeOfDirectoryId
+
 }

package/src/cognitoConnector/dtos/SignInResponse.ts

@@ -1,12 +1,12 @@
-import { SyncStatus } from "../enums/SyncStatus";
-
-
-
-export class SignInResponse {
-
-    accessToken?: string
-    refreshToken?: string
-    challengeName?: string
-    session?: string
-    syncStatus?: SyncStatus;
+import { SyncStatus } from "../enums/SyncStatus";
+
+
+
+export class SignInResponse {
+
+    accessToken?: string
+    refreshToken?: string
+    challengeName?: string
+    session?: string
+    syncStatus?: SyncStatus;
 }

package/src/cognitoConnector/dtos/SignUpConfirmRequest.ts

@@ -1,18 +1,18 @@
-import { IsNotEmpty, IsString } from "class-validator";
-import { TypeOfDirectoryId } from "../../directory";
-
-
-
-export class SignUpConfirmRequest {
-
-    @IsString()
-    @IsNotEmpty()
-    identityId: string
-
-    @IsString()
-    @IsNotEmpty()
-    typeOfDirectoryId: TypeOfDirectoryId
-
-
-
+import { IsNotEmpty, IsString } from "class-validator";
+import { TypeOfDirectoryId } from "../../directory";
+
+
+
+export class SignUpConfirmRequest {
+
+    @IsString()
+    @IsNotEmpty()
+    identityId: string
+
+    @IsString()
+    @IsNotEmpty()
+    typeOfDirectoryId: TypeOfDirectoryId
+
+
+
 }

package/src/cognitoConnector/dtos/SignUpRequest.ts

@@ -1,23 +1,23 @@
-import { IsNotEmpty, IsOptional, IsString } from "class-validator"
-import { TypeOfDirectoryId } from "../../directory"
-
-
-
-export class SignUpRequest {
-
-    @IsString()
-    @IsNotEmpty()
-    username: string
-
-    @IsString()
-    @IsOptional()
-    password?: string
-
-    @IsString()
-    @IsNotEmpty()
-    directoryId: string
-
-    @IsString()
-    @IsNotEmpty()
-    typeOfDirectoryId: TypeOfDirectoryId
+import { IsNotEmpty, IsOptional, IsString } from "class-validator"
+import { TypeOfDirectoryId } from "../../directory"
+
+
+
+export class SignUpRequest {
+
+    @IsString()
+    @IsNotEmpty()
+    username: string
+
+    @IsString()
+    @IsOptional()
+    password?: string
+
+    @IsString()
+    @IsNotEmpty()
+    directoryId: string
+
+    @IsString()
+    @IsNotEmpty()
+    typeOfDirectoryId: TypeOfDirectoryId
 }

package/src/cognitoConnector/dtos/SignUpResponse.ts

@@ -1,9 +1,9 @@
-import { SyncStatus } from "../enums/SyncStatus";
-
-
-
-export class SignUpResponse {
-
-    identityId: string;
-    syncStatus?: SyncStatus;
+import { SyncStatus } from "../enums/SyncStatus";
+
+
+
+export class SignUpResponse {
+
+    identityId: string;
+    syncStatus?: SyncStatus;
 }

package/src/cognitoConnector/enums/SyncStatus.ts

@@ -1,7 +1,7 @@
-
-
-
-export enum SyncStatus {
-    SYNCED = "SYNCED",
-    NOT_SYNCED = "NOT_SYNCED",
+
+
+
+export enum SyncStatus {
+    SYNCED = "SYNCED",
+    NOT_SYNCED = "NOT_SYNCED",
 }