@fiado/type-kit 3.486.0 → 3.488.0

package/_test_/unit/cognitoBackofficeConnector/dtos/CreatePoolClientRequest.test.ts

@@ -0,0 +1,55 @@
+import 'reflect-metadata';
+import { plainToInstance } from 'class-transformer';
+import { validate } from 'class-validator';
+import { CreatePoolClientRequest } from '../../../../src/cognitoBackofficeConnector/dtos/CreatePoolClientRequest';
+import { AppClientConfig } from '../../../../src/cognitoBackofficeConnector/dtos/AppClientConfig';
+
+const CLIENT = {
+    clientName: 'us-east-1_abc-api-client',
+    explicitAuthFlows: ['ALLOW_ADMIN_USER_PASSWORD_AUTH'],
+    tokenValidityUnits: 'minutes',
+    accessTokenValidity: 15,
+    idTokenValidity: 15,
+    refreshTokenValidity: 60,
+    preventUserExistenceErrors: true,
+    enableTokenRevocation: true,
+    writeAttributes: ['name'],
+};
+
+describe('CreatePoolClientRequest (reutiliza AppClientConfig)', () => {
+    it('acepta el client de API completo', async () => {
+        expect(await validate(plainToInstance(CreatePoolClientRequest, { region: 'us-east-1', appClientConfig: CLIENT }))).toEqual([]);
+    });
+
+    it('exige region', async () => {
+        const errors = await validate(plainToInstance(CreatePoolClientRequest, { region: '', appClientConfig: CLIENT }));
+        expect(errors.some((e) => e.property === 'region')).toBe(true);
+    });
+
+    it('valida el AppClientConfig anidado', async () => {
+        const errors = await validate(plainToInstance(CreatePoolClientRequest, { region: 'us-east-1', appClientConfig: { ...CLIENT, explicitAuthFlows: ['ALLOW_INVENTADO'] } }));
+        expect(errors.some((e) => e.property === 'appClientConfig')).toBe(true);
+    });
+});
+
+describe('AppClientConfig endurecido', () => {
+    it('acepta los flujos que usa el onboarding', async () => {
+        const dto = plainToInstance(AppClientConfig, { explicitAuthFlows: ['ALLOW_ADMIN_USER_PASSWORD_AUTH', 'ALLOW_CUSTOM_AUTH', 'ALLOW_REFRESH_TOKEN_AUTH'], refreshTokenValidity: 30 });
+        expect(await validate(dto)).toEqual([]);
+    });
+
+    it('rechaza un flujo desconocido', async () => {
+        const errors = await validate(plainToInstance(AppClientConfig, { explicitAuthFlows: ['ALLOW_INVENTADO'] }));
+        expect(errors.some((e) => e.property === 'explicitAuthFlows')).toBe(true);
+    });
+
+    it('rechaza una unidad de vigencia desconocida', async () => {
+        const errors = await validate(plainToInstance(AppClientConfig, { explicitAuthFlows: ['ALLOW_ADMIN_USER_PASSWORD_AUTH'], tokenValidityUnits: 'weeks' }));
+        expect(errors.some((e) => e.property === 'tokenValidityUnits')).toBe(true);
+    });
+
+    it('acepta writeAttributes', async () => {
+        const errors = await validate(plainToInstance(AppClientConfig, { explicitAuthFlows: ['ALLOW_ADMIN_USER_PASSWORD_AUTH'], writeAttributes: ['name'] }));
+        expect(errors).toEqual([]);
+    });
+});

package/_test_/unit/cognitoBackofficeConnector/dtos/CreateUserRequest.primaryVerified.test.ts

@@ -0,0 +1,23 @@
+import 'reflect-metadata';
+import { plainToInstance } from 'class-transformer';
+import { validate } from 'class-validator';
+import { CreateUserRequest } from '../../../../src/cognitoBackofficeConnector/dtos/CreateUserRequest';
+
+describe('CreateUserRequest.primaryIdentifierVerified', () => {
+    const base = { userPoolId: 'us-east-1_p', region: 'us-east-1', email: 'api-1@api.surekeep.invalid', tenantId: 'surekeep' };
+
+    it('es opcional', async () => {
+        expect(await validate(plainToInstance(CreateUserRequest, base))).toEqual([]);
+    });
+
+    it('acepta false', async () => {
+        const dto = plainToInstance(CreateUserRequest, { ...base, primaryIdentifierVerified: false });
+        expect(await validate(dto)).toEqual([]);
+        expect(dto.primaryIdentifierVerified).toBe(false);
+    });
+
+    it('rechaza un valor no booleano', async () => {
+        const errors = await validate(plainToInstance(CreateUserRequest, { ...base, primaryIdentifierVerified: 'no' }));
+        expect(errors.some((e) => e.property === 'primaryIdentifierVerified')).toBe(true);
+    });
+});

package/_test_/unit/collection/disburseRequest.test.ts

@@ -0,0 +1,92 @@
+import 'reflect-metadata';
+import { plainToInstance } from 'class-transformer';
+import { validate } from 'class-validator';
+import { Collection } from '../../../src/index';
+import { DisburseRequest, DisburseResponse } from '../../../src/collection/index';
+
+const VALID = {
+    tenantId: 'surekeep',
+    domain: 'retail-wizard-business',
+    directoryId: 'dir-1',
+    disbursementType: 'MEX_BONUS',
+    amount: 25.5,
+    currencyId: 'MXN',
+    idempotencyKey: '01M0JT2KQCN9QGA7PE3C34Q37E',
+    concept: 'Bono de bienvenida SureKeep',
+    reference: '01M0JT2KQCN9QGA7PE3C34Q37E',
+};
+
+async function invalidProperties(body: Record<string, unknown>): Promise<string[]> {
+    const dto = plainToInstance(DisburseRequest, body);
+    return (await validate(dto as object)).map((e) => e.property);
+}
+
+describe('DisburseRequest', () => {
+    it('acepta una dispersión válida', async () => {
+        expect(await invalidProperties(VALID)).toEqual([]);
+    });
+
+    it('reference es opcional', async () => {
+        const { reference: _omit, ...withoutReference } = VALID;
+        expect(await invalidProperties(withoutReference)).toEqual([]);
+    });
+
+    it.each(['tenantId', 'domain', 'directoryId', 'idempotencyKey', 'concept'])(
+        'rechaza %s vacío',
+        async (field) => {
+            expect(await invalidProperties({ ...VALID, [field]: '' })).toContain(field);
+        },
+    );
+
+    it.each(['tenantId', 'domain', 'directoryId', 'disbursementType', 'amount', 'currencyId', 'idempotencyKey', 'concept'])(
+        'rechaza si falta %s',
+        async (field) => {
+            const body: Record<string, unknown> = { ...VALID };
+            delete body[field];
+            expect(await invalidProperties(body)).toContain(field);
+        },
+    );
+
+    it('rechaza un tipo de dispersión desconocido', async () => {
+        expect(await invalidProperties({ ...VALID, disbursementType: 'USD_BONUS' })).toContain('disbursementType');
+    });
+
+    it('rechaza cualquier moneda distinta de MXN', async () => {
+        expect(await invalidProperties({ ...VALID, currencyId: 'USD' })).toContain('currencyId');
+    });
+
+    it.each([0, -1, 10.005, '25'])('rechaza el monto %p', async (amount) => {
+        expect(await invalidProperties({ ...VALID, amount })).toContain('amount');
+    });
+
+    it('acepta pesos con dos decimales', async () => {
+        expect(await invalidProperties({ ...VALID, amount: 19.99 })).toEqual([]);
+    });
+
+    it('rechaza una llave con #, que chocaría con los executionId del motor', async () => {
+        expect(await invalidProperties({ ...VALID, idempotencyKey: 'SALE#42' })).toContain('idempotencyKey');
+    });
+
+    it('rechaza un concepto de más de 120 caracteres, el tope del processor', async () => {
+        expect(await invalidProperties({ ...VALID, concept: 'x'.repeat(121) })).toContain('concept');
+        expect(await invalidProperties({ ...VALID, concept: 'x'.repeat(120) })).toEqual([]);
+    });
+
+    it('rechaza strings que no son string', async () => {
+        expect(await invalidProperties({ ...VALID, directoryId: 42, reference: 7 })).toEqual(
+            expect.arrayContaining(['directoryId', 'reference']),
+        );
+    });
+
+    it('sale por el index raíz', () => {
+        expect(new Collection.DisburseRequest()).toBeInstanceOf(DisburseRequest);
+        expect(new Collection.DisburseResponse()).toBeInstanceOf(DisburseResponse);
+    });
+});
+
+describe('DisburseResponse', () => {
+    it('acepta un folio o null', async () => {
+        expect(await validate(plainToInstance(DisburseResponse, { transactionId: 'TX-1' }) as object)).toHaveLength(0);
+        expect(await validate(plainToInstance(DisburseResponse, { transactionId: null }) as object)).toHaveLength(0);
+    });
+});

package/_test_/unit/collection/disbursementType.test.ts

@@ -0,0 +1,19 @@
+import 'reflect-metadata';
+import { Collection } from '../../../src/index';
+import { DisbursementType } from '../../../src/collection/index';
+
+describe('DisbursementType', () => {
+    it('v1 solo trae el riel MEX_BONUS', () => {
+        expect(Object.values(DisbursementType)).toEqual(['MEX_BONUS']);
+    });
+
+    it('cada clave es igual a su valor', () => {
+        for (const [key, value] of Object.entries(DisbursementType)) {
+            expect(key).toBe(value);
+        }
+    });
+
+    it('sale por el index raíz', () => {
+        expect(Collection.DisbursementType.MEX_BONUS).toBe('MEX_BONUS');
+    });
+});

package/_test_/unit/platformRbac/apiUser/apiUserDtos.test.ts

@@ -0,0 +1,56 @@
+import 'reflect-metadata';
+import { plainToInstance } from 'class-transformer';
+import { validate } from 'class-validator';
+import {
+    AccountType,
+    ApiLoginRequest,
+    CreateApiUserRequest,
+    UpdateApiUserAccessRequest,
+} from '../../../../src/platformRbac';
+
+describe('ApiLoginRequest', () => {
+    const valid = { clientId: '0b9f1c2e-1111-4222-8333-444455556666', clientSecret: 's3cr3t', tenantId: 'surekeep' };
+
+    it('acepta el body completo', async () => {
+        expect(await validate(plainToInstance(ApiLoginRequest, valid))).toEqual([]);
+    });
+
+    it.each(['clientId', 'clientSecret', 'tenantId'])('exige %s', async (field) => {
+        const errors = await validate(plainToInstance(ApiLoginRequest, { ...valid, [field]: '' }));
+        expect(errors.some((e) => e.property === field)).toBe(true);
+    });
+});
+
+describe('CreateApiUserRequest', () => {
+    const valid = { accountType: AccountType.API, displayName: 'La Central', technicalContact: 'ops@central.mx', ipAllowlist: ['189.128.0.0/16'] };
+
+    it('acepta el alta completa', async () => {
+        expect(await validate(plainToInstance(CreateApiUserRequest, valid))).toEqual([]);
+    });
+
+    it('exige accountType API', async () => {
+        const errors = await validate(plainToInstance(CreateApiUserRequest, { ...valid, accountType: 'HUMAN' }));
+        expect(errors.some((e) => e.property === 'accountType')).toBe(true);
+    });
+
+    it('exige displayName', async () => {
+        const errors = await validate(plainToInstance(CreateApiUserRequest, { ...valid, displayName: '' }));
+        expect(errors.some((e) => e.property === 'displayName')).toBe(true);
+    });
+
+    it('exige una lista de IPs no vacía', async () => {
+        const errors = await validate(plainToInstance(CreateApiUserRequest, { ...valid, ipAllowlist: [] }));
+        expect(errors.some((e) => e.property === 'ipAllowlist')).toBe(true);
+    });
+});
+
+describe('UpdateApiUserAccessRequest', () => {
+    it('acepta solo IPs', async () => {
+        expect(await validate(plainToInstance(UpdateApiUserAccessRequest, { ipAllowlist: ['10.0.0.0/8'] }))).toEqual([]);
+    });
+
+    it('rechaza una lista vacía', async () => {
+        const errors = await validate(plainToInstance(UpdateApiUserAccessRequest, { ipAllowlist: [] }));
+        expect(errors.some((e) => e.property === 'ipAllowlist')).toBe(true);
+    });
+});

package/_test_/unit/platformRbac/enums/AccountType.test.ts

@@ -0,0 +1,11 @@
+import { AccountType, PrincipalKind } from '../../../../src/platformRbac';
+
+describe('AccountType y PrincipalKind (usuarios de API)', () => {
+    it('AccountType tiene exactamente HUMAN y API', () => {
+        expect(Object.values(AccountType)).toEqual(['HUMAN', 'API']);
+    });
+
+    it('PrincipalKind suma API_USER al final sin tocar los existentes', () => {
+        expect(Object.values(PrincipalKind)).toEqual(['USER', 'INTEGRATION', 'API_USER']);
+    });
+});

package/_test_/unit/platformRbac/enums/__snapshots__/permissionBits.test.ts.snap

@@ -1,6 +1,6 @@
 // Jest Snapshot v1, https://jestjs.io/docs/snapshot-testing
 
-exports[`PERMISSION_BIT_ORDER PERMS_VERSION es número estable 1`] = `3833769424`;
+exports[`PERMISSION_BIT_ORDER PERMS_VERSION es número estable 1`] = `2686516275`;
 
 exports[`PERMISSION_BIT_ORDER append-only: snapshot del ORDEN COMPLETO (rompe ante cualquier reorden/inserción) 1`] = `
 [
@@ -95,5 +95,6 @@ exports[`PERMISSION_BIT_ORDER append-only: snapshot del ORDEN COMPLETO (rompe an
   "platform.integration.key.issue",
   "platform.integration.key.revoke",
   "tenant.integration.diagnostic",
+  "tenant.api_user.manage",
 ]
 `;

package/_test_/unit/platformRbac/enums/apiUserPermission.test.ts

@@ -0,0 +1,11 @@
+import { Permission, PERMISSION_BIT_ORDER } from '../../../../src/platformRbac/enums/Permission';
+
+describe('Permiso de administración de usuarios de API', () => {
+    it('existe con la llave tenant.api_user.manage', () => {
+        expect(Permission.TENANT_API_USER_MANAGE).toBe('tenant.api_user.manage');
+    });
+
+    it('va al FINAL del orden de bits (append-only)', () => {
+        expect(PERMISSION_BIT_ORDER[PERMISSION_BIT_ORDER.length - 1]).toBe(Permission.TENANT_API_USER_MANAGE);
+    });
+});

package/bin/cognitoBackofficeConnector/dtos/AppClientConfig.d.ts

@@ -1,11 +1,10 @@
+/** Flujos de autenticación que Cognito admite en un app client. */
+export declare const COGNITO_EXPLICIT_AUTH_FLOWS: readonly string[];
+/** Unidades de vigencia de token; el conector aplica una sola a los tres tokens. */
+export declare const COGNITO_TOKEN_VALIDITY_UNITS: readonly string[];
 /**
- * Config del único App Client del pool nuevo creado por POST /pools.
- *
- * NO expone `generateSecret` — el connector hardcodea `GenerateSecret: false`
- * en el SDK call (BFF pattern: rbac llama al connector server-to-server vía
- * api-invoker en VPC, sin SPA-to-Cognito directo que requiera client secret).
- * Decisión arquitectónica A21 del connector. Si aparece consumer B2B/M2M con
- * flow `client_credentials`, evaluar con líder + bump major del connector.
+ * Config de un app client (el del pool nuevo de POST /pools o uno extra de POST /pools/{id}/clients).
+ * Sin `generateSecret`: el conector fija GenerateSecret false (A21).
  */
 export declare class AppClientConfig {
     clientName?: string;
@@ -16,4 +15,6 @@ export declare class AppClientConfig {
     refreshTokenValidity?: number;
     preventUserExistenceErrors?: boolean;
     enableTokenRevocation?: boolean;
+    /** Atributos que el usuario puede escribir con su propio token. Ausente ⇒ todos (default de Cognito). */
+    writeAttributes?: string[];
 }

package/bin/cognitoBackofficeConnector/dtos/AppClientConfig.js

@@ -9,17 +9,23 @@ var __metadata = (this && this.__metadata) || function (k, v) {
     if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
 };
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.AppClientConfig = void 0;
+exports.AppClientConfig = exports.COGNITO_TOKEN_VALIDITY_UNITS = exports.COGNITO_EXPLICIT_AUTH_FLOWS = void 0;
 const class_transformer_1 = require("class-transformer");
 const class_validator_1 = require("class-validator");
+/** Flujos de autenticación que Cognito admite en un app client. */
+exports.COGNITO_EXPLICIT_AUTH_FLOWS = [
+    'ALLOW_ADMIN_USER_PASSWORD_AUTH',
+    'ALLOW_CUSTOM_AUTH',
+    'ALLOW_USER_PASSWORD_AUTH',
+    'ALLOW_USER_SRP_AUTH',
+    'ALLOW_REFRESH_TOKEN_AUTH',
+    'ALLOW_USER_AUTH',
+];
+/** Unidades de vigencia de token; el conector aplica una sola a los tres tokens. */
+exports.COGNITO_TOKEN_VALIDITY_UNITS = ['seconds', 'minutes', 'hours', 'days'];
 /**
- * Config del único App Client del pool nuevo creado por POST /pools.
- *
- * NO expone `generateSecret` — el connector hardcodea `GenerateSecret: false`
- * en el SDK call (BFF pattern: rbac llama al connector server-to-server vía
- * api-invoker en VPC, sin SPA-to-Cognito directo que requiera client secret).
- * Decisión arquitectónica A21 del connector. Si aparece consumer B2B/M2M con
- * flow `client_credentials`, evaluar con líder + bump major del connector.
+ * Config de un app client (el del pool nuevo de POST /pools o uno extra de POST /pools/{id}/clients).
+ * Sin `generateSecret`: el conector fija GenerateSecret false (A21).
  */
 class AppClientConfig {
 }
@@ -33,13 +39,13 @@ __decorate([
 __decorate([
     (0, class_transformer_1.Expose)(),
     (0, class_validator_1.IsArray)(),
-    (0, class_validator_1.IsString)({ each: true }),
+    (0, class_validator_1.IsIn)(exports.COGNITO_EXPLICIT_AUTH_FLOWS, { each: true }),
     __metadata("design:type", Array)
 ], AppClientConfig.prototype, "explicitAuthFlows", void 0);
 __decorate([
     (0, class_transformer_1.Expose)(),
     (0, class_validator_1.IsOptional)(),
-    (0, class_validator_1.IsString)(),
+    (0, class_validator_1.IsIn)(exports.COGNITO_TOKEN_VALIDITY_UNITS),
     __metadata("design:type", String)
 ], AppClientConfig.prototype, "tokenValidityUnits", void 0);
 __decorate([
@@ -72,3 +78,10 @@ __decorate([
     (0, class_validator_1.IsBoolean)(),
     __metadata("design:type", Boolean)
 ], AppClientConfig.prototype, "enableTokenRevocation", void 0);
+__decorate([
+    (0, class_transformer_1.Expose)(),
+    (0, class_validator_1.IsOptional)(),
+    (0, class_validator_1.IsArray)(),
+    (0, class_validator_1.IsString)({ each: true }),
+    __metadata("design:type", Array)
+], AppClientConfig.prototype, "writeAttributes", void 0);

package/bin/cognitoBackofficeConnector/dtos/CreatePoolClientRequest.d.ts

@@ -0,0 +1,6 @@
+import { AppClientConfig } from './AppClientConfig';
+/** Body de POST /pools/{userPoolId}/clients: un app client extra sobre un pool existente. */
+export declare class CreatePoolClientRequest {
+    region: string;
+    appClientConfig: AppClientConfig;
+}

package/bin/cognitoBackofficeConnector/dtos/CreatePoolClientRequest.js

@@ -0,0 +1,31 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.CreatePoolClientRequest = void 0;
+const class_transformer_1 = require("class-transformer");
+const class_validator_1 = require("class-validator");
+const AppClientConfig_1 = require("./AppClientConfig");
+/** Body de POST /pools/{userPoolId}/clients: un app client extra sobre un pool existente. */
+class CreatePoolClientRequest {
+}
+exports.CreatePoolClientRequest = CreatePoolClientRequest;
+__decorate([
+    (0, class_transformer_1.Expose)(),
+    (0, class_validator_1.IsString)(),
+    (0, class_validator_1.IsNotEmpty)(),
+    __metadata("design:type", String)
+], CreatePoolClientRequest.prototype, "region", void 0);
+__decorate([
+    (0, class_transformer_1.Expose)(),
+    (0, class_validator_1.ValidateNested)(),
+    (0, class_transformer_1.Type)(() => AppClientConfig_1.AppClientConfig),
+    __metadata("design:type", AppClientConfig_1.AppClientConfig)
+], CreatePoolClientRequest.prototype, "appClientConfig", void 0);

package/bin/cognitoBackofficeConnector/dtos/CreatePoolClientResponse.d.ts

@@ -0,0 +1,4 @@
+/** Respuesta de POST /pools/{userPoolId}/clients. Sin secret: el client nace con GenerateSecret false. */
+export declare class CreatePoolClientResponse {
+    appClientId: string;
+}

package/bin/cognitoBackofficeConnector/dtos/CreatePoolClientResponse.js

@@ -0,0 +1,7 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.CreatePoolClientResponse = void 0;
+/** Respuesta de POST /pools/{userPoolId}/clients. Sin secret: el client nace con GenerateSecret false. */
+class CreatePoolClientResponse {
+}
+exports.CreatePoolClientResponse = CreatePoolClientResponse;

package/bin/cognitoBackofficeConnector/dtos/CreateUserRequest.d.ts

@@ -10,4 +10,6 @@ export declare class CreateUserRequest {
     tenantId: string;
     temporaryPassword?: string;
     suppressInvitationEmail?: boolean;
+    /** Ausente ⇒ true. false crea el identificador primario sin verificar (usuario de API). */
+    primaryIdentifierVerified?: boolean;
 }

package/bin/cognitoBackofficeConnector/dtos/CreateUserRequest.js

@@ -69,3 +69,9 @@ __decorate([
     (0, class_validator_1.IsBoolean)(),
     __metadata("design:type", Boolean)
 ], CreateUserRequest.prototype, "suppressInvitationEmail", void 0);
+__decorate([
+    (0, class_transformer_1.Expose)(),
+    (0, class_validator_1.IsOptional)(),
+    (0, class_validator_1.IsBoolean)(),
+    __metadata("design:type", Boolean)
+], CreateUserRequest.prototype, "primaryIdentifierVerified", void 0);

package/bin/cognitoBackofficeConnector/index.d.ts

@@ -49,6 +49,8 @@ export * from './dtos/AppClientConfig';
 export * from './dtos/CreatePoolRequest';
 export * from './dtos/CreatePoolResponse';
 export * from './dtos/DeletePoolRequest';
+export * from './dtos/CreatePoolClientRequest';
+export * from './dtos/CreatePoolClientResponse';
 export * from './enums/IntrospectFailReason';
 export * from './dtos/IntrospectRequest';
 export * from './dtos/IntrospectResponse';

package/bin/cognitoBackofficeConnector/index.js

@@ -65,6 +65,8 @@ __exportStar(require("./dtos/AppClientConfig"), exports);
 __exportStar(require("./dtos/CreatePoolRequest"), exports);
 __exportStar(require("./dtos/CreatePoolResponse"), exports);
 __exportStar(require("./dtos/DeletePoolRequest"), exports);
+__exportStar(require("./dtos/CreatePoolClientRequest"), exports);
+__exportStar(require("./dtos/CreatePoolClientResponse"), exports);
 // Introspección de token (POST /auth/introspect) — consumido por el platform-rbac-business.
 __exportStar(require("./enums/IntrospectFailReason"), exports);
 __exportStar(require("./dtos/IntrospectRequest"), exports);

package/bin/collection/dtos/DisburseRequest.d.ts

@@ -0,0 +1,20 @@
+import { CurrencyId } from '../../currency/enums/CurrencyId';
+import { DisbursementType } from '../enums/DisbursementType';
+/** Dispersión síncrona: el motor deposita `amount` pesos al titular por el riel de `disbursementType`. */
+export declare class DisburseRequest {
+    tenantId: string;
+    /** Quién llama. Solo viaja a los logs; no es control de acceso. */
+    domain: string;
+    /** Titular que recibe el depósito. */
+    directoryId: string;
+    disbursementType: DisbursementType;
+    /** Pesos con hasta dos decimales, no centavos. */
+    amount: number;
+    currencyId: CurrencyId;
+    /** Única entre todas las operaciones del processor; el motor la reenvía intacta. Sin `#`. */
+    idempotencyKey: string;
+    /** Texto que ve el titular en su movimiento. 120 es el tope del processor. */
+    concept: string;
+    /** Id del llamador para rastreo: asiento, crédito. */
+    reference?: string;
+}

package/bin/collection/dtos/DisburseRequest.js

@@ -0,0 +1,64 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.DisburseRequest = void 0;
+const class_validator_1 = require("class-validator");
+const CurrencyId_1 = require("../../currency/enums/CurrencyId");
+const DisbursementType_1 = require("../enums/DisbursementType");
+/** Dispersión síncrona: el motor deposita `amount` pesos al titular por el riel de `disbursementType`. */
+class DisburseRequest {
+}
+exports.DisburseRequest = DisburseRequest;
+__decorate([
+    (0, class_validator_1.IsString)(),
+    (0, class_validator_1.IsNotEmpty)(),
+    __metadata("design:type", String)
+], DisburseRequest.prototype, "tenantId", void 0);
+__decorate([
+    (0, class_validator_1.IsString)(),
+    (0, class_validator_1.IsNotEmpty)(),
+    __metadata("design:type", String)
+], DisburseRequest.prototype, "domain", void 0);
+__decorate([
+    (0, class_validator_1.IsString)(),
+    (0, class_validator_1.IsNotEmpty)(),
+    __metadata("design:type", String)
+], DisburseRequest.prototype, "directoryId", void 0);
+__decorate([
+    (0, class_validator_1.IsEnum)(DisbursementType_1.DisbursementType),
+    __metadata("design:type", String)
+], DisburseRequest.prototype, "disbursementType", void 0);
+__decorate([
+    (0, class_validator_1.IsNumber)({ maxDecimalPlaces: 2 }),
+    (0, class_validator_1.IsPositive)(),
+    __metadata("design:type", Number)
+], DisburseRequest.prototype, "amount", void 0);
+__decorate([
+    (0, class_validator_1.IsIn)([CurrencyId_1.CurrencyId.MXN]),
+    __metadata("design:type", String)
+], DisburseRequest.prototype, "currencyId", void 0);
+__decorate([
+    (0, class_validator_1.IsString)(),
+    (0, class_validator_1.IsNotEmpty)(),
+    (0, class_validator_1.Matches)(/^[^#]+$/),
+    __metadata("design:type", String)
+], DisburseRequest.prototype, "idempotencyKey", void 0);
+__decorate([
+    (0, class_validator_1.IsString)(),
+    (0, class_validator_1.IsNotEmpty)(),
+    (0, class_validator_1.MaxLength)(120),
+    __metadata("design:type", String)
+], DisburseRequest.prototype, "concept", void 0);
+__decorate([
+    (0, class_validator_1.IsOptional)(),
+    (0, class_validator_1.IsString)(),
+    __metadata("design:type", String)
+], DisburseRequest.prototype, "reference", void 0);

package/bin/collection/dtos/DisburseResponse.d.ts

@@ -0,0 +1,4 @@
+/** Folio del processor; `null` cuando aprobó sin devolverlo y el llamador decide cómo cerrar. */
+export declare class DisburseResponse {
+    transactionId: string | null;
+}

package/bin/collection/dtos/DisburseResponse.js

@@ -0,0 +1,22 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.DisburseResponse = void 0;
+const class_validator_1 = require("class-validator");
+/** Folio del processor; `null` cuando aprobó sin devolverlo y el llamador decide cómo cerrar. */
+class DisburseResponse {
+}
+exports.DisburseResponse = DisburseResponse;
+__decorate([
+    (0, class_validator_1.IsOptional)(),
+    (0, class_validator_1.IsString)(),
+    __metadata("design:type", String)
+], DisburseResponse.prototype, "transactionId", void 0);

package/bin/collection/enums/DisbursementType.d.ts

@@ -0,0 +1,7 @@
+/**
+ * Riel por el que el motor de cobro deposita una dispersión. Nombra el movimiento, no el propósito:
+ * el propósito lo manda el llamador en `concept`.
+ */
+export declare enum DisbursementType {
+    MEX_BONUS = "MEX_BONUS"
+}

package/bin/collection/enums/DisbursementType.js

@@ -0,0 +1,11 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.DisbursementType = void 0;
+/**
+ * Riel por el que el motor de cobro deposita una dispersión. Nombra el movimiento, no el propósito:
+ * el propósito lo manda el llamador en `concept`.
+ */
+var DisbursementType;
+(function (DisbursementType) {
+    DisbursementType["MEX_BONUS"] = "MEX_BONUS";
+})(DisbursementType || (exports.DisbursementType = DisbursementType = {}));

package/bin/collection/index.d.ts

@@ -10,6 +10,7 @@ export * from './enums/CollectionFeeMode';
 export * from './enums/RetryIntentStatus';
 export * from './enums/AckIntentStatus';
 export * from './enums/RedriveOutboxStatus';
+export * from './enums/DisbursementType';
 export * from './dtos/PendingChargeDto';
 export * from './dtos/CollectRequest';
 export * from './dtos/CollectResponse';
@@ -27,6 +28,8 @@ export * from './dtos/RegisterCollectibleResponse';
 export * from './dtos/CollectionPricingDto';
 export * from './dtos/ResolvePendingChargesRequest';
 export * from './dtos/MoneyInEvent';
+export * from './dtos/DisburseRequest';
+export * from './dtos/DisburseResponse';
 export * from './dtos/CollectionIntentSummaryDto';
 export * from './dtos/CollectionAttemptDto';
 export * from './dtos/CollectionOutboxEventDto';

package/bin/collection/index.js

@@ -27,6 +27,7 @@ __exportStar(require("./enums/CollectionFeeMode"), exports);
 __exportStar(require("./enums/RetryIntentStatus"), exports);
 __exportStar(require("./enums/AckIntentStatus"), exports);
 __exportStar(require("./enums/RedriveOutboxStatus"), exports);
+__exportStar(require("./enums/DisbursementType"), exports);
 // DTOs
 __exportStar(require("./dtos/PendingChargeDto"), exports);
 __exportStar(require("./dtos/CollectRequest"), exports);
@@ -45,6 +46,8 @@ __exportStar(require("./dtos/RegisterCollectibleResponse"), exports);
 __exportStar(require("./dtos/CollectionPricingDto"), exports);
 __exportStar(require("./dtos/ResolvePendingChargesRequest"), exports);
 __exportStar(require("./dtos/MoneyInEvent"), exports);
+__exportStar(require("./dtos/DisburseRequest"), exports);
+__exportStar(require("./dtos/DisburseResponse"), exports);
 // DTOs — backoffice de monitoreo
 __exportStar(require("./dtos/CollectionIntentSummaryDto"), exports);
 __exportStar(require("./dtos/CollectionAttemptDto"), exports);