@fiado/type-kit 3.51.0 → 3.52.0

package/_test_/unit/cognitoBackofficeConnector/dtos/Introspect.test.ts

@@ -1,30 +1,30 @@
-import 'reflect-metadata';
-import { plainToInstance } from 'class-transformer';
-import { validate } from 'class-validator';
-import { IntrospectRequest } from '../../../../src/cognitoBackofficeConnector/dtos/IntrospectRequest';
-import { IntrospectResponse } from '../../../../src/cognitoBackofficeConnector/dtos/IntrospectResponse';
-import { IntrospectFailReason } from '../../../../src/cognitoBackofficeConnector/enums/IntrospectFailReason';
-
-describe('IntrospectRequest', () => {
-    it('valida happy path', async () => {
-        const dto = plainToInstance(IntrospectRequest, {
-            token: 'jwt', userPoolId: 'us-east-1_o0h1s3458', region: 'us-east-1', clientId: '1b8g4shbvbi5jhq19fuc8mi2bk',
-        });
-        expect(await validate(dto)).toEqual([]);
-    });
-    it('falla si falta userPoolId', async () => {
-        const dto = plainToInstance(IntrospectRequest, { token: 'jwt', region: 'us-east-1', clientId: 'c' });
-        expect((await validate(dto)).some(e => e.property === 'userPoolId')).toBe(true);
-    });
-});
-
-describe('IntrospectResponse', () => {
-    it('valid=true con cognitoSub', async () => {
-        const dto = plainToInstance(IntrospectResponse, { valid: true, cognitoSub: '248814c8' });
-        expect(await validate(dto)).toEqual([]);
-    });
-    it('valid=false con reason enum', async () => {
-        const dto = plainToInstance(IntrospectResponse, { valid: false, reason: IntrospectFailReason.REVOKED });
-        expect(await validate(dto)).toEqual([]);
-    });
-});
+import 'reflect-metadata';
+import { plainToInstance } from 'class-transformer';
+import { validate } from 'class-validator';
+import { IntrospectRequest } from '../../../../src/cognitoBackofficeConnector/dtos/IntrospectRequest';
+import { IntrospectResponse } from '../../../../src/cognitoBackofficeConnector/dtos/IntrospectResponse';
+import { IntrospectFailReason } from '../../../../src/cognitoBackofficeConnector/enums/IntrospectFailReason';
+
+describe('IntrospectRequest', () => {
+    it('valida happy path', async () => {
+        const dto = plainToInstance(IntrospectRequest, {
+            token: 'jwt', userPoolId: 'us-east-1_o0h1s3458', region: 'us-east-1', clientId: '1b8g4shbvbi5jhq19fuc8mi2bk',
+        });
+        expect(await validate(dto)).toEqual([]);
+    });
+    it('falla si falta userPoolId', async () => {
+        const dto = plainToInstance(IntrospectRequest, { token: 'jwt', region: 'us-east-1', clientId: 'c' });
+        expect((await validate(dto)).some(e => e.property === 'userPoolId')).toBe(true);
+    });
+});
+
+describe('IntrospectResponse', () => {
+    it('valid=true con cognitoSub', async () => {
+        const dto = plainToInstance(IntrospectResponse, { valid: true, cognitoSub: '248814c8' });
+        expect(await validate(dto)).toEqual([]);
+    });
+    it('valid=false con reason enum', async () => {
+        const dto = plainToInstance(IntrospectResponse, { valid: false, reason: IntrospectFailReason.REVOKED });
+        expect(await validate(dto)).toEqual([]);
+    });
+});

package/_test_/unit/cognitoBackofficeConnector/validators/NoTenantIdInCustomAttrs.test.ts

@@ -1,43 +1,43 @@
-import 'reflect-metadata';
-import { NoTenantIdInCustomAttrs } from '../../../../src/cognitoBackofficeConnector/validators/NoTenantIdInCustomAttrs';
-
-describe('NoTenantIdInCustomAttrs validator', () => {
-    const subject = new NoTenantIdInCustomAttrs();
-
-    test('undefined es válido (optional field)', () => {
-        expect(subject.validate(undefined, { value: undefined } as any)).toBe(true);
-    });
-
-    test('null es válido (optional field)', () => {
-        expect(subject.validate(null, { value: null } as any)).toBe(true);
-    });
-
-    test('objeto vacío {} es válido', () => {
-        expect(subject.validate({}, { value: {} } as any)).toBe(true);
-    });
-
-    test('objeto sin tenantId es válido', () => {
-        const value = { foo: 'bar', anotherKey: 'baz' };
-        expect(subject.validate(value, { value } as any)).toBe(true);
-    });
-
-    test('objeto con tenantId solo es INVÁLIDO', () => {
-        const value = { tenantId: 'X' };
-        expect(subject.validate(value, { value } as any)).toBe(false);
-    });
-
-    test('objeto mixed con tenantId presente es INVÁLIDO', () => {
-        const value = { foo: 'bar', tenantId: 'X' };
-        expect(subject.validate(value, { value } as any)).toBe(false);
-    });
-
-    test('tipo incorrecto (string) es INVÁLIDO', () => {
-        expect(subject.validate('not-an-object', { value: 'not-an-object' } as any)).toBe(false);
-    });
-
-    test('defaultMessage menciona tenant reassignment', () => {
-        const msg = subject.defaultMessage({ property: 'customAttributes' } as any);
-        expect(msg.toLowerCase()).toContain('tenant');
-        expect(msg.toLowerCase()).toContain('reassignment');
-    });
-});
+import 'reflect-metadata';
+import { NoTenantIdInCustomAttrs } from '../../../../src/cognitoBackofficeConnector/validators/NoTenantIdInCustomAttrs';
+
+describe('NoTenantIdInCustomAttrs validator', () => {
+    const subject = new NoTenantIdInCustomAttrs();
+
+    test('undefined es válido (optional field)', () => {
+        expect(subject.validate(undefined, { value: undefined } as any)).toBe(true);
+    });
+
+    test('null es válido (optional field)', () => {
+        expect(subject.validate(null, { value: null } as any)).toBe(true);
+    });
+
+    test('objeto vacío {} es válido', () => {
+        expect(subject.validate({}, { value: {} } as any)).toBe(true);
+    });
+
+    test('objeto sin tenantId es válido', () => {
+        const value = { foo: 'bar', anotherKey: 'baz' };
+        expect(subject.validate(value, { value } as any)).toBe(true);
+    });
+
+    test('objeto con tenantId solo es INVÁLIDO', () => {
+        const value = { tenantId: 'X' };
+        expect(subject.validate(value, { value } as any)).toBe(false);
+    });
+
+    test('objeto mixed con tenantId presente es INVÁLIDO', () => {
+        const value = { foo: 'bar', tenantId: 'X' };
+        expect(subject.validate(value, { value } as any)).toBe(false);
+    });
+
+    test('tipo incorrecto (string) es INVÁLIDO', () => {
+        expect(subject.validate('not-an-object', { value: 'not-an-object' } as any)).toBe(false);
+    });
+
+    test('defaultMessage menciona tenant reassignment', () => {
+        const msg = subject.defaultMessage({ property: 'customAttributes' } as any);
+        expect(msg.toLowerCase()).toContain('tenant');
+        expect(msg.toLowerCase()).toContain('reassignment');
+    });
+});

package/_test_/unit/platformRbac/auth/dtos.test.ts

@@ -1,42 +1,42 @@
-import 'reflect-metadata';
-import { plainToInstance } from 'class-transformer';
-import { validate } from 'class-validator';
-import {
-    DefineNextChallengeRequest,
-    ChallengeResultEntry,
-} from '../../../../src/platformRbac/auth/DefineNextChallengeRequest';
-import { ChallengeNameEnum } from '../../../../src/platformRbac/enums/ChallengeNameEnum';
-
-describe('DefineNextChallengeRequest', () => {
-    it('valida happy path con session vacia', async () => {
-        const dto = plainToInstance(DefineNextChallengeRequest, {
-            cognitoSub: 'abc-123',
-            userNotFound: false,
-            session: [],
-        });
-        const errors = await validate(dto);
-        expect(errors).toEqual([]);
-    });
-
-    it('valida happy path con session de un PASSWORD result', async () => {
-        const dto = plainToInstance(DefineNextChallengeRequest, {
-            cognitoSub: 'abc-123',
-            userNotFound: false,
-            session: [{ challengeName: ChallengeNameEnum.PASSWORD, challengeResult: true }],
-        });
-        const errors = await validate(dto);
-        expect(errors).toEqual([]);
-        expect(dto.session[0]).toBeInstanceOf(ChallengeResultEntry);
-    });
-
-    it('falla si cognitoSub no es string', async () => {
-        const dto = plainToInstance(DefineNextChallengeRequest, {
-            cognitoSub: 42,
-            userNotFound: false,
-            session: [],
-        });
-        const errors = await validate(dto);
-        expect(errors.length).toBeGreaterThan(0);
-        expect(errors[0].property).toBe('cognitoSub');
-    });
-});
+import 'reflect-metadata';
+import { plainToInstance } from 'class-transformer';
+import { validate } from 'class-validator';
+import {
+    DefineNextChallengeRequest,
+    ChallengeResultEntry,
+} from '../../../../src/platformRbac/auth/DefineNextChallengeRequest';
+import { ChallengeNameEnum } from '../../../../src/platformRbac/enums/ChallengeNameEnum';
+
+describe('DefineNextChallengeRequest', () => {
+    it('valida happy path con session vacia', async () => {
+        const dto = plainToInstance(DefineNextChallengeRequest, {
+            cognitoSub: 'abc-123',
+            userNotFound: false,
+            session: [],
+        });
+        const errors = await validate(dto);
+        expect(errors).toEqual([]);
+    });
+
+    it('valida happy path con session de un PASSWORD result', async () => {
+        const dto = plainToInstance(DefineNextChallengeRequest, {
+            cognitoSub: 'abc-123',
+            userNotFound: false,
+            session: [{ challengeName: ChallengeNameEnum.PASSWORD, challengeResult: true }],
+        });
+        const errors = await validate(dto);
+        expect(errors).toEqual([]);
+        expect(dto.session[0]).toBeInstanceOf(ChallengeResultEntry);
+    });
+
+    it('falla si cognitoSub no es string', async () => {
+        const dto = plainToInstance(DefineNextChallengeRequest, {
+            cognitoSub: 42,
+            userNotFound: false,
+            session: [],
+        });
+        const errors = await validate(dto);
+        expect(errors.length).toBeGreaterThan(0);
+        expect(errors[0].property).toBe('cognitoSub');
+    });
+});

package/_test_/unit/platformRbac/dtos/AuthorizeRequest.test.ts

@@ -1,30 +1,30 @@
-import 'reflect-metadata';
-import { plainToInstance } from 'class-transformer';
-import { validate } from 'class-validator';
-import { AuthorizeRequest } from '../../../../src/platformRbac/dtos/AuthorizeRequest';
-import { PermissionScope } from '../../../../src/platformRbac/enums/PermissionScope';
-
-describe('AuthorizeRequest', () => {
-    it('valida happy path con scope opcional', async () => {
-        const dto = plainToInstance(AuthorizeRequest, {
-            token: 'jwt.abc.def',
-            permission: 'tenant.user.create',
-            scope: PermissionScope.RETAILER,
-            scopeRef: 'VL-001',
-        });
-        const errors = await validate(dto);
-        expect(errors).toEqual([]);
-    });
-
-    it('falla si falta token', async () => {
-        const dto = plainToInstance(AuthorizeRequest, { permission: 'tenant.user.create' });
-        const errors = await validate(dto);
-        expect(errors.some(e => e.property === 'token')).toBe(true);
-    });
-
-    it('acepta sin scope/scopeRef (permiso sin scope)', async () => {
-        const dto = plainToInstance(AuthorizeRequest, { token: 'jwt', permission: 'catalog.read' });
-        const errors = await validate(dto);
-        expect(errors).toEqual([]);
-    });
-});
+import 'reflect-metadata';
+import { plainToInstance } from 'class-transformer';
+import { validate } from 'class-validator';
+import { AuthorizeRequest } from '../../../../src/platformRbac/dtos/AuthorizeRequest';
+import { PermissionScope } from '../../../../src/platformRbac/enums/PermissionScope';
+
+describe('AuthorizeRequest', () => {
+    it('valida happy path con scope opcional', async () => {
+        const dto = plainToInstance(AuthorizeRequest, {
+            token: 'jwt.abc.def',
+            permission: 'tenant.user.create',
+            scope: PermissionScope.RETAILER,
+            scopeRef: 'VL-001',
+        });
+        const errors = await validate(dto);
+        expect(errors).toEqual([]);
+    });
+
+    it('falla si falta token', async () => {
+        const dto = plainToInstance(AuthorizeRequest, { permission: 'tenant.user.create' });
+        const errors = await validate(dto);
+        expect(errors.some(e => e.property === 'token')).toBe(true);
+    });
+
+    it('acepta sin scope/scopeRef (permiso sin scope)', async () => {
+        const dto = plainToInstance(AuthorizeRequest, { token: 'jwt', permission: 'catalog.read' });
+        const errors = await validate(dto);
+        expect(errors).toEqual([]);
+    });
+});

package/_test_/unit/platformRbac/dtos/AuthorizeResponse.test.ts

@@ -1,25 +1,25 @@
-import 'reflect-metadata';
-import { plainToInstance } from 'class-transformer';
-import { validate } from 'class-validator';
-import { AuthorizeResponse } from '../../../../src/platformRbac/dtos/AuthorizeResponse';
-import { AuthorizeDenyReason } from '../../../../src/platformRbac/enums/AuthorizeDenyReason';
-
-describe('AuthorizeResponse', () => {
-    it('valida allow=true sin reason', async () => {
-        const dto = plainToInstance(AuthorizeResponse, { allow: true });
-        const errors = await validate(dto);
-        expect(errors).toEqual([]);
-    });
-
-    it('valida allow=false con reason enum', async () => {
-        const dto = plainToInstance(AuthorizeResponse, { allow: false, reason: AuthorizeDenyReason.NO_PERMISSION });
-        const errors = await validate(dto);
-        expect(errors).toEqual([]);
-    });
-
-    it('rechaza reason fuera del enum', async () => {
-        const dto = plainToInstance(AuthorizeResponse, { allow: false, reason: 'WHATEVER' });
-        const errors = await validate(dto);
-        expect(errors.some(e => e.property === 'reason')).toBe(true);
-    });
-});
+import 'reflect-metadata';
+import { plainToInstance } from 'class-transformer';
+import { validate } from 'class-validator';
+import { AuthorizeResponse } from '../../../../src/platformRbac/dtos/AuthorizeResponse';
+import { AuthorizeDenyReason } from '../../../../src/platformRbac/enums/AuthorizeDenyReason';
+
+describe('AuthorizeResponse', () => {
+    it('valida allow=true sin reason', async () => {
+        const dto = plainToInstance(AuthorizeResponse, { allow: true });
+        const errors = await validate(dto);
+        expect(errors).toEqual([]);
+    });
+
+    it('valida allow=false con reason enum', async () => {
+        const dto = plainToInstance(AuthorizeResponse, { allow: false, reason: AuthorizeDenyReason.NO_PERMISSION });
+        const errors = await validate(dto);
+        expect(errors).toEqual([]);
+    });
+
+    it('rechaza reason fuera del enum', async () => {
+        const dto = plainToInstance(AuthorizeResponse, { allow: false, reason: 'WHATEVER' });
+        const errors = await validate(dto);
+        expect(errors.some(e => e.property === 'reason')).toBe(true);
+    });
+});

package/_test_/unit/platformRbac/dtos/CreateTenantRequest.test.ts

@@ -1,68 +1,68 @@
-import 'reflect-metadata';
-import { plainToInstance } from 'class-transformer';
-import { validate } from 'class-validator';
-import { CreateTenantRequest } from '../../../../src/platformRbac/dtos/CreateTenantRequest';
-
-describe('CreateTenantRequest', () => {
-    const valid = {
-        tenantId: 'acme-mx',
-        displayName: 'Acme México',
-        emailDomain: 'acme.com',
-        tablePrefix: 'acme',
-        adminEmail: 'admin@acme.com',
-        adminName: 'Admin Acme',
-        region: 'us-east-1',
-        mfaRequired: true,
-        passwordMinLength: 12,
-    };
-
-    it('valida happy path (0 errores)', async () => {
-        const dto = plainToInstance(CreateTenantRequest, valid);
-        const errors = await validate(dto);
-        expect(errors).toEqual([]);
-    });
-
-    it('valida sin campos opcionales (mfaRequired / passwordMinLength)', async () => {
-        const { mfaRequired, passwordMinLength, ...sinOpcionales } = valid;
-        const dto = plainToInstance(CreateTenantRequest, sinOpcionales);
-        const errors = await validate(dto);
-        expect(errors).toEqual([]);
-    });
-
-    it('falla si adminEmail es inválido', async () => {
-        const dto = plainToInstance(CreateTenantRequest, { ...valid, adminEmail: 'no-es-email' });
-        const errors = await validate(dto);
-        expect(errors.some(e => e.property === 'adminEmail')).toBe(true);
-    });
-
-    it('falla si tenantId tiene mayúsculas', async () => {
-        const dto = plainToInstance(CreateTenantRequest, { ...valid, tenantId: 'Acme-MX' });
-        const errors = await validate(dto);
-        expect(errors.some(e => e.property === 'tenantId')).toBe(true);
-    });
-
-    it('falla si tenantId tiene caracteres inválidos (espacios / underscore)', async () => {
-        const dto = plainToInstance(CreateTenantRequest, { ...valid, tenantId: 'acme_mx 01' });
-        const errors = await validate(dto);
-        expect(errors.some(e => e.property === 'tenantId')).toBe(true);
-    });
-
-    it('falla si passwordMinLength es menor a 8', async () => {
-        const dto = plainToInstance(CreateTenantRequest, { ...valid, passwordMinLength: 6 });
-        const errors = await validate(dto);
-        expect(errors.some(e => e.property === 'passwordMinLength')).toBe(true);
-    });
-
-    it('NO expone temporaryPassword en el request (campo del response, no del body)', () => {
-        // El request NO debe llevar temporaryPassword (es solo del response, fallback out-of-band F-11).
-        // Con excludeExtraneousValues solo sobreviven las props @Expose() del DTO → el contrato lo excluye.
-        const dto = plainToInstance(
-            CreateTenantRequest,
-            { ...valid, temporaryPassword: 'Secreto123!' },
-            { excludeExtraneousValues: true },
-        );
-        expect((dto as unknown as Record<string, unknown>).temporaryPassword).toBeUndefined();
-        // sanity: una prop sí declarada en el contrato sí sobrevive
-        expect(dto.tenantId).toBe('acme-mx');
-    });
-});
+import 'reflect-metadata';
+import { plainToInstance } from 'class-transformer';
+import { validate } from 'class-validator';
+import { CreateTenantRequest } from '../../../../src/platformRbac/dtos/CreateTenantRequest';
+
+describe('CreateTenantRequest', () => {
+    const valid = {
+        tenantId: 'acme-mx',
+        displayName: 'Acme México',
+        emailDomain: 'acme.com',
+        tablePrefix: 'acme',
+        adminEmail: 'admin@acme.com',
+        adminName: 'Admin Acme',
+        region: 'us-east-1',
+        mfaRequired: true,
+        passwordMinLength: 12,
+    };
+
+    it('valida happy path (0 errores)', async () => {
+        const dto = plainToInstance(CreateTenantRequest, valid);
+        const errors = await validate(dto);
+        expect(errors).toEqual([]);
+    });
+
+    it('valida sin campos opcionales (mfaRequired / passwordMinLength)', async () => {
+        const { mfaRequired, passwordMinLength, ...sinOpcionales } = valid;
+        const dto = plainToInstance(CreateTenantRequest, sinOpcionales);
+        const errors = await validate(dto);
+        expect(errors).toEqual([]);
+    });
+
+    it('falla si adminEmail es inválido', async () => {
+        const dto = plainToInstance(CreateTenantRequest, { ...valid, adminEmail: 'no-es-email' });
+        const errors = await validate(dto);
+        expect(errors.some(e => e.property === 'adminEmail')).toBe(true);
+    });
+
+    it('falla si tenantId tiene mayúsculas', async () => {
+        const dto = plainToInstance(CreateTenantRequest, { ...valid, tenantId: 'Acme-MX' });
+        const errors = await validate(dto);
+        expect(errors.some(e => e.property === 'tenantId')).toBe(true);
+    });
+
+    it('falla si tenantId tiene caracteres inválidos (espacios / underscore)', async () => {
+        const dto = plainToInstance(CreateTenantRequest, { ...valid, tenantId: 'acme_mx 01' });
+        const errors = await validate(dto);
+        expect(errors.some(e => e.property === 'tenantId')).toBe(true);
+    });
+
+    it('falla si passwordMinLength es menor a 8', async () => {
+        const dto = plainToInstance(CreateTenantRequest, { ...valid, passwordMinLength: 6 });
+        const errors = await validate(dto);
+        expect(errors.some(e => e.property === 'passwordMinLength')).toBe(true);
+    });
+
+    it('NO expone temporaryPassword en el request (campo del response, no del body)', () => {
+        // El request NO debe llevar temporaryPassword (es solo del response, fallback out-of-band F-11).
+        // Con excludeExtraneousValues solo sobreviven las props @Expose() del DTO → el contrato lo excluye.
+        const dto = plainToInstance(
+            CreateTenantRequest,
+            { ...valid, temporaryPassword: 'Secreto123!' },
+            { excludeExtraneousValues: true },
+        );
+        expect((dto as unknown as Record<string, unknown>).temporaryPassword).toBeUndefined();
+        // sanity: una prop sí declarada en el contrato sí sobrevive
+        expect(dto.tenantId).toBe('acme-mx');
+    });
+});

package/bin/benefitCenter/dtos/BackofficeLeafDetailResponse.d.ts

@@ -1,4 +1,5 @@
 import { ConnectorCatalogItem } from "./ConnectorCatalogItem";
+import { VerifyEquivalentInfo } from "./VerifyEquivalentInfo";
 /**
  * Respuesta del detalle de un leaf en el backoffice (v2 in-place).
  * Devuelve el item del catálogo del conector tal cual — sin paso de merge
@@ -10,4 +11,6 @@ export interface BackofficeLeafDetailResponse {
     moduleName: string;
     serviceId: string;
     item: ConnectorCatalogItem;
+    verifyEquivalent: VerifyEquivalentInfo;
+    warnings?: string[];
 }

package/bin/benefitCenter/dtos/BackofficeLeafListItem.d.ts

@@ -21,4 +21,5 @@ export interface BackofficeLeafListItem {
     countryId: string;
     serviceOrder: number;
     subcategoryOrder: number;
+    requiresReferenceVerification: boolean;
 }

package/bin/benefitCenter/dtos/BackofficeLeafUpdateRequest.d.ts

@@ -3,9 +3,12 @@
  * opcionales pero al menos uno debe venir; si el body está vacío el backend
  * responde 400 INVALID_PATCH_PAYLOAD.
  *
- * Los campos eliminados respecto de v1 (`description`, `helpText`,
- * `inputSchema`, `requiresReferenceVerification`) ya no son editables —
+ * Los campos `description`, `helpText` e `inputSchema` NO son editables —
  * vienen derivados del producto en el mapper del conector.
+ *
+ * `requiresReferenceVerification` SÍ es editable: es un toggle a nivel
+ * servicio que el backend traduce a `verificateReference` en TODOS los
+ * productos del servicio (el derivado se recalcula solo en el siguiente read).
  */
 export declare class BackofficeLeafUpdateRequest {
     serviceName?: string;
@@ -15,4 +18,5 @@ export declare class BackofficeLeafUpdateRequest {
     logo?: string;
     serviceOrder?: number;
     subcategoryOrder?: number;
+    requiresReferenceVerification?: boolean;
 }

package/bin/benefitCenter/dtos/BackofficeLeafUpdateRequest.js

@@ -16,9 +16,12 @@ const class_validator_1 = require("class-validator");
  * opcionales pero al menos uno debe venir; si el body está vacío el backend
  * responde 400 INVALID_PATCH_PAYLOAD.
  *
- * Los campos eliminados respecto de v1 (`description`, `helpText`,
- * `inputSchema`, `requiresReferenceVerification`) ya no son editables —
+ * Los campos `description`, `helpText` e `inputSchema` NO son editables —
  * vienen derivados del producto en el mapper del conector.
+ *
+ * `requiresReferenceVerification` SÍ es editable: es un toggle a nivel
+ * servicio que el backend traduce a `verificateReference` en TODOS los
+ * productos del servicio (el derivado se recalcula solo en el siguiente read).
  */
 class BackofficeLeafUpdateRequest {
 }
@@ -64,3 +67,8 @@ __decorate([
     (0, class_validator_1.IsNumber)(),
     __metadata("design:type", Number)
 ], BackofficeLeafUpdateRequest.prototype, "subcategoryOrder", void 0);
+__decorate([
+    (0, class_validator_1.IsOptional)(),
+    (0, class_validator_1.IsBoolean)(),
+    __metadata("design:type", Boolean)
+], BackofficeLeafUpdateRequest.prototype, "requiresReferenceVerification", void 0);

package/bin/benefitCenter/dtos/ProductItem.d.ts

@@ -19,4 +19,12 @@ export declare class ProductItem {
      * el producto del catálogo público.
      */
     enabled?: boolean;
+    /**
+     * Si este producto verifica la referencia (consulta de saldo) antes de
+     * pagar. Mapea del campo nativo del producto `verificateReference`. Es lo
+     * que deriva `requiresReferenceVerification` a nivel servicio
+     * (`products.some(p => p.verificateReference === true)`). Opcional/aditivo:
+     * ausente o `false` ⇒ no verifica.
+     */
+    verificateReference?: boolean;
 }

package/bin/benefitCenter/dtos/VerifyEquivalentInfo.d.ts

@@ -0,0 +1,20 @@
+/** Por qué no hay equivalente verificable (cuando `feasible === false`). */
+export declare enum VerifyEquivalentReasonEnum {
+    NO_SUBCATEGORY = "NO_SUBCATEGORY",
+    NO_EQUIVALENT = "NO_EQUIVALENT",
+    NO_VERIFIABLE_PRODUCT = "NO_VERIFIABLE_PRODUCT"
+}
+/**
+ * Dónde ocurriría realmente la verificación de referencia de un leaf y si es
+ * factible. Para módulos sin verify nativo (multicomm/multicenter) describe el
+ * equivalente resuelto por subcategoría (STP). Para módulos con verify nativo
+ * (STP) describe su propio servicio/producto.
+ */
+export interface VerifyEquivalentInfo {
+    feasible: boolean;
+    module: string;
+    serviceId?: string;
+    serviceName?: string;
+    productId?: string;
+    reason?: VerifyEquivalentReasonEnum;
+}

package/bin/benefitCenter/dtos/VerifyEquivalentInfo.js

@@ -0,0 +1,10 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.VerifyEquivalentReasonEnum = void 0;
+/** Por qué no hay equivalente verificable (cuando `feasible === false`). */
+var VerifyEquivalentReasonEnum;
+(function (VerifyEquivalentReasonEnum) {
+    VerifyEquivalentReasonEnum["NO_SUBCATEGORY"] = "NO_SUBCATEGORY";
+    VerifyEquivalentReasonEnum["NO_EQUIVALENT"] = "NO_EQUIVALENT";
+    VerifyEquivalentReasonEnum["NO_VERIFIABLE_PRODUCT"] = "NO_VERIFIABLE_PRODUCT";
+})(VerifyEquivalentReasonEnum || (exports.VerifyEquivalentReasonEnum = VerifyEquivalentReasonEnum = {}));

package/bin/benefitCenter/index.d.ts

@@ -74,3 +74,4 @@ export * from "./dtos/BackofficeProductCreateItem";
 export * from "./dtos/BackofficeLeafCreateRequest";
 export * from "./dtos/BannerUploadUrlRequest";
 export * from "./dtos/BannerUploadUrlResponse";
+export * from "./dtos/VerifyEquivalentInfo";

package/bin/benefitCenter/index.js

@@ -101,3 +101,5 @@ __exportStar(require("./dtos/BackofficeLeafCreateRequest"), exports);
 //Banner assets upload (presigned PUT)
 __exportStar(require("./dtos/BannerUploadUrlRequest"), exports);
 __exportStar(require("./dtos/BannerUploadUrlResponse"), exports);
+//Backoffice verify toggle + equivalente STP (Fase 1)
+__exportStar(require("./dtos/VerifyEquivalentInfo"), exports);

package/bin/cognitoBackofficeConnector/dtos/PoolConfigResponse.d.ts

@@ -0,0 +1,20 @@
+import { PoolKind } from '../../rbac/enums/PoolKind';
+/**
+ * Shape del `PoolConfigRow` expuesto al caller (BFF M18 / otros lambdas Fiado).
+ * Refleja la configuración de un Cognito User Pool registrado en la tabla
+ * `PoolConfigs_GT` del lambda `cognito-backoffice-connector`.
+ */
+export declare class PoolConfigResponse {
+    userPoolId: string;
+    userPoolArn: string;
+    region: string;
+    poolKind: PoolKind;
+    displayName: string;
+    appClients: Record<string, {
+        clientId: string;
+        clientName: string;
+    }>;
+    status: 'active' | 'deprecated';
+    createdAt: number;
+    updatedAt: number;
+}