@fiado/type-kit 3.58.0 → 3.60.0

package/_test_/unit/platformRbac/dtos/CreateTenantRequest.test.ts

@@ -1,68 +1,68 @@
-import 'reflect-metadata';
-import { plainToInstance } from 'class-transformer';
-import { validate } from 'class-validator';
-import { CreateTenantRequest } from '../../../../src/platformRbac/dtos/CreateTenantRequest';
-
-describe('CreateTenantRequest', () => {
-    const valid = {
-        tenantId: 'acme-mx',
-        displayName: 'Acme México',
-        emailDomain: 'acme.com',
-        tablePrefix: 'acme',
-        adminEmail: 'admin@acme.com',
-        adminName: 'Admin Acme',
-        region: 'us-east-1',
-        mfaRequired: true,
-        passwordMinLength: 12,
-    };
-
-    it('valida happy path (0 errores)', async () => {
-        const dto = plainToInstance(CreateTenantRequest, valid);
-        const errors = await validate(dto);
-        expect(errors).toEqual([]);
-    });
-
-    it('valida sin campos opcionales (mfaRequired / passwordMinLength)', async () => {
-        const { mfaRequired, passwordMinLength, ...sinOpcionales } = valid;
-        const dto = plainToInstance(CreateTenantRequest, sinOpcionales);
-        const errors = await validate(dto);
-        expect(errors).toEqual([]);
-    });
-
-    it('falla si adminEmail es inválido', async () => {
-        const dto = plainToInstance(CreateTenantRequest, { ...valid, adminEmail: 'no-es-email' });
-        const errors = await validate(dto);
-        expect(errors.some(e => e.property === 'adminEmail')).toBe(true);
-    });
-
-    it('falla si tenantId tiene mayúsculas', async () => {
-        const dto = plainToInstance(CreateTenantRequest, { ...valid, tenantId: 'Acme-MX' });
-        const errors = await validate(dto);
-        expect(errors.some(e => e.property === 'tenantId')).toBe(true);
-    });
-
-    it('falla si tenantId tiene caracteres inválidos (espacios / underscore)', async () => {
-        const dto = plainToInstance(CreateTenantRequest, { ...valid, tenantId: 'acme_mx 01' });
-        const errors = await validate(dto);
-        expect(errors.some(e => e.property === 'tenantId')).toBe(true);
-    });
-
-    it('falla si passwordMinLength es menor a 8', async () => {
-        const dto = plainToInstance(CreateTenantRequest, { ...valid, passwordMinLength: 6 });
-        const errors = await validate(dto);
-        expect(errors.some(e => e.property === 'passwordMinLength')).toBe(true);
-    });
-
-    it('NO expone temporaryPassword en el request (campo del response, no del body)', () => {
-        // El request NO debe llevar temporaryPassword (es solo del response, fallback out-of-band F-11).
-        // Con excludeExtraneousValues solo sobreviven las props @Expose() del DTO → el contrato lo excluye.
-        const dto = plainToInstance(
-            CreateTenantRequest,
-            { ...valid, temporaryPassword: 'Secreto123!' },
-            { excludeExtraneousValues: true },
-        );
-        expect((dto as unknown as Record<string, unknown>).temporaryPassword).toBeUndefined();
-        // sanity: una prop sí declarada en el contrato sí sobrevive
-        expect(dto.tenantId).toBe('acme-mx');
-    });
-});
+import 'reflect-metadata';
+import { plainToInstance } from 'class-transformer';
+import { validate } from 'class-validator';
+import { CreateTenantRequest } from '../../../../src/platformRbac/dtos/CreateTenantRequest';
+
+describe('CreateTenantRequest', () => {
+    const valid = {
+        tenantId: 'acme-mx',
+        displayName: 'Acme México',
+        emailDomain: 'acme.com',
+        tablePrefix: 'acme',
+        adminEmail: 'admin@acme.com',
+        adminName: 'Admin Acme',
+        region: 'us-east-1',
+        mfaRequired: true,
+        passwordMinLength: 12,
+    };
+
+    it('valida happy path (0 errores)', async () => {
+        const dto = plainToInstance(CreateTenantRequest, valid);
+        const errors = await validate(dto);
+        expect(errors).toEqual([]);
+    });
+
+    it('valida sin campos opcionales (mfaRequired / passwordMinLength)', async () => {
+        const { mfaRequired, passwordMinLength, ...sinOpcionales } = valid;
+        const dto = plainToInstance(CreateTenantRequest, sinOpcionales);
+        const errors = await validate(dto);
+        expect(errors).toEqual([]);
+    });
+
+    it('falla si adminEmail es inválido', async () => {
+        const dto = plainToInstance(CreateTenantRequest, { ...valid, adminEmail: 'no-es-email' });
+        const errors = await validate(dto);
+        expect(errors.some(e => e.property === 'adminEmail')).toBe(true);
+    });
+
+    it('falla si tenantId tiene mayúsculas', async () => {
+        const dto = plainToInstance(CreateTenantRequest, { ...valid, tenantId: 'Acme-MX' });
+        const errors = await validate(dto);
+        expect(errors.some(e => e.property === 'tenantId')).toBe(true);
+    });
+
+    it('falla si tenantId tiene caracteres inválidos (espacios / underscore)', async () => {
+        const dto = plainToInstance(CreateTenantRequest, { ...valid, tenantId: 'acme_mx 01' });
+        const errors = await validate(dto);
+        expect(errors.some(e => e.property === 'tenantId')).toBe(true);
+    });
+
+    it('falla si passwordMinLength es menor a 8', async () => {
+        const dto = plainToInstance(CreateTenantRequest, { ...valid, passwordMinLength: 6 });
+        const errors = await validate(dto);
+        expect(errors.some(e => e.property === 'passwordMinLength')).toBe(true);
+    });
+
+    it('NO expone temporaryPassword en el request (campo del response, no del body)', () => {
+        // El request NO debe llevar temporaryPassword (es solo del response, fallback out-of-band F-11).
+        // Con excludeExtraneousValues solo sobreviven las props @Expose() del DTO → el contrato lo excluye.
+        const dto = plainToInstance(
+            CreateTenantRequest,
+            { ...valid, temporaryPassword: 'Secreto123!' },
+            { excludeExtraneousValues: true },
+        );
+        expect((dto as unknown as Record<string, unknown>).temporaryPassword).toBeUndefined();
+        // sanity: una prop sí declarada en el contrato sí sobrevive
+        expect(dto.tenantId).toBe('acme-mx');
+    });
+});

package/bin/cognitoBackofficeConnector/dtos/VerifyPasswordResponse.d.ts

@@ -1,3 +1,18 @@
+import { CognitoChallengeType } from '../enums/CognitoChallengeType';
+/**
+ * Respuesta de `POST /auth/verify-password`.
+ *
+ * `valid` es el único campo siempre presente (consumidores legacy hacen
+ * `const { valid } = ...`). Los campos opcionales surfacean el challenge nativo
+ * que `ADMIN_USER_PASSWORD_AUTH` devuelve sin throw: para un usuario en
+ * `FORCE_CHANGE_PASSWORD`, Cognito responde `ChallengeName:'NEW_PASSWORD_REQUIRED'`
+ * + `Session`, y el caller (rbac) los usa para emitir ese challenge nativo FUERA
+ * de CUSTOM_AUTH en vez de arrancar el MFA (F-12). Backward-compatible: todos los
+ * campos nuevos son opcionales.
+ */
 export declare class VerifyPasswordResponse {
     valid: boolean;
+    challengeType?: CognitoChallengeType;
+    session?: string;
+    challengeParameters?: Record<string, string>;
 }

package/bin/cognitoBackofficeConnector/dtos/VerifyPasswordResponse.js

@@ -12,6 +12,18 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.VerifyPasswordResponse = void 0;
 const class_transformer_1 = require("class-transformer");
 const class_validator_1 = require("class-validator");
+const CognitoChallengeType_1 = require("../enums/CognitoChallengeType");
+/**
+ * Respuesta de `POST /auth/verify-password`.
+ *
+ * `valid` es el único campo siempre presente (consumidores legacy hacen
+ * `const { valid } = ...`). Los campos opcionales surfacean el challenge nativo
+ * que `ADMIN_USER_PASSWORD_AUTH` devuelve sin throw: para un usuario en
+ * `FORCE_CHANGE_PASSWORD`, Cognito responde `ChallengeName:'NEW_PASSWORD_REQUIRED'`
+ * + `Session`, y el caller (rbac) los usa para emitir ese challenge nativo FUERA
+ * de CUSTOM_AUTH en vez de arrancar el MFA (F-12). Backward-compatible: todos los
+ * campos nuevos son opcionales.
+ */
 class VerifyPasswordResponse {
 }
 exports.VerifyPasswordResponse = VerifyPasswordResponse;
@@ -20,3 +32,21 @@ __decorate([
     (0, class_validator_1.IsBoolean)(),
     __metadata("design:type", Boolean)
 ], VerifyPasswordResponse.prototype, "valid", void 0);
+__decorate([
+    (0, class_transformer_1.Expose)(),
+    (0, class_validator_1.IsOptional)(),
+    (0, class_validator_1.IsEnum)(CognitoChallengeType_1.CognitoChallengeType),
+    __metadata("design:type", String)
+], VerifyPasswordResponse.prototype, "challengeType", void 0);
+__decorate([
+    (0, class_transformer_1.Expose)(),
+    (0, class_validator_1.IsOptional)(),
+    (0, class_validator_1.IsString)(),
+    __metadata("design:type", String)
+], VerifyPasswordResponse.prototype, "session", void 0);
+__decorate([
+    (0, class_transformer_1.Expose)(),
+    (0, class_validator_1.IsOptional)(),
+    (0, class_validator_1.IsObject)(),
+    __metadata("design:type", Object)
+], VerifyPasswordResponse.prototype, "challengeParameters", void 0);

package/bin/messagesConnector/dtos/VerifyOtpRequest.js

@@ -17,7 +17,8 @@ class VerifyOtpRequest {
 exports.VerifyOtpRequest = VerifyOtpRequest;
 __decorate([
     (0, class_transformer_1.Expose)(),
-    (0, class_validator_1.IsUUID)(),
+    (0, class_validator_1.IsString)(),
+    (0, class_validator_1.IsNotEmpty)(),
     __metadata("design:type", String)
 ], VerifyOtpRequest.prototype, "directoryId", void 0);
 __decorate([

package/jest.config.js

@@ -1,8 +1,8 @@
-/** @type {import('jest').Config} */
-module.exports = {
-    preset: 'ts-jest',
-    testEnvironment: 'node',
-    roots: ['<rootDir>/_test_'],
-    testMatch: ['**/*.test.ts'],
-    moduleFileExtensions: ['ts', 'js', 'json'],
-};
+/** @type {import('jest').Config} */
+module.exports = {
+    preset: 'ts-jest',
+    testEnvironment: 'node',
+    roots: ['<rootDir>/_test_'],
+    testMatch: ['**/*.test.ts'],
+    moduleFileExtensions: ['ts', 'js', 'json'],
+};

package/package.json

@@ -1,31 +1,31 @@
-{
-  "name": "@fiado/type-kit",
-  "version": "3.58.0",
-  "description": "",
-  "main": "bin/index.js",
-  "types": "bin/index.d.ts",
-  "scripts": {
-    "test": "jest",
-    "build": "tsc",
-    "prepublishOnly": "npm run build"
-  },
-  "keywords": [],
-  "author": "Fiado Inc",
-  "license": "ISC",
-  "devDependencies": {
-    "@types/jest": "^30.0.0",
-    "@types/node": "^20.11.20",
-    "class-transformer": "^0.5.1",
-    "class-validator": "^0.14.2",
-    "install": "^0.13.0",
-    "jest": "^30.4.2",
-    "reflect-metadata": "^0.2.2",
-    "ts-jest": "^29.4.11",
-    "typescript": "^5.3.3"
-  },
-  "peerDependencies": {
-    "class-transformer": "^0.5.1",
-    "class-validator": "^0.14.2",
-    "reflect-metadata": "^0.2.2"
-  }
-}
+{
+  "name": "@fiado/type-kit",
+  "version": "3.60.0",
+  "description": "",
+  "main": "bin/index.js",
+  "types": "bin/index.d.ts",
+  "scripts": {
+    "test": "jest",
+    "build": "tsc",
+    "prepublishOnly": "npm run build"
+  },
+  "keywords": [],
+  "author": "Fiado Inc",
+  "license": "ISC",
+  "devDependencies": {
+    "@types/jest": "^30.0.0",
+    "@types/node": "^20.11.20",
+    "class-transformer": "^0.5.1",
+    "class-validator": "^0.14.2",
+    "install": "^0.13.0",
+    "jest": "^30.4.2",
+    "reflect-metadata": "^0.2.2",
+    "ts-jest": "^29.4.11",
+    "typescript": "^5.3.3"
+  },
+  "peerDependencies": {
+    "class-transformer": "^0.5.1",
+    "class-validator": "^0.14.2",
+    "reflect-metadata": "^0.2.2"
+  }
+}

package/src/account/dtos/AccountCreateRequest.ts

@@ -1,110 +1,110 @@
-import { IsBoolean, IsDateString, IsEmail, IsEnum, IsOptional, IsString, Length, Matches, ValidateNested } from 'class-validator';
-import { AddressResponse } from "../../address";
-import { CountryId } from "../../country";
-import { regexUuidV4 } from '../../helpers/constans/regex';
-import { TypeOfDirectoryId } from '../../directory';
-import { IsPhoneNumberFiado } from '../../card/validations/IsPhoneNumberConstraint';
-import { IdentificationDocument, SexDocument } from '../../identity';
-import { Profile } from "../../directory/enums/Profile";
-import { AccountLevelEnum } from "../enums/AccountLevelEnum";
-import { Provider } from '../../provider';
-import { Type } from 'class-transformer';
-
-export class AccountCreateRequest {
-
-    @IsString()
-    @Matches(regexUuidV4,
-        {
-            message: 'directoryId must be a valid UUID v4',
-        })
-    directoryId: string;
-
-
-    @IsString()
-    @Matches(regexUuidV4,
-        {
-            message: 'directoryId must be a valid UUID v4',
-        })
-    ownerDirectoryId: string;
-
-    @IsString()
-    @Matches(regexUuidV4,
-        {
-            message: 'peopleId must be a valid UUID v4',
-        })
-    peopleId: string;
-
-    @IsEnum(AccountLevelEnum)
-    accountLevel: AccountLevelEnum;
-
-    @IsEnum(TypeOfDirectoryId)
-    typeOfDirectoryId: string;
-
-    @IsString()
-    latLastNameMaternal: string
-
-    @IsString()
-    latLastNamePaternal: string
-
-    @IsString()
-    latNames: string
-
-    @IsString()
-    countryOfBirth: string
-
-    @IsString()
-    usNames: string
-
-    @IsString()
-    usLastNames: string
-
-    @IsPhoneNumberFiado()
-    phoneNumber: string;
-
-    @IsOptional()
-    @ValidateNested()
-    @Type(() => AddressResponse)
-    address: AddressResponse;
-
-    @IsEmail()
-    email: string;
-
-    @IsDateString()
-    dob: string;
-
-    @IsBoolean()
-    isHost?: boolean;
-
-    @IsOptional()
-    documentInfo?: IdentificationDocument;
-
-    @IsOptional()
-    documentNumber?: string;
-
-    @IsOptional()
-    documentType?: string;
-
-    @IsOptional()
-    @IsEnum(SexDocument)
-    gender: SexDocument;
-
-    @IsEnum(CountryId)
-    countryId: CountryId;
-
-    @IsEnum(Profile)
-    userProfile: Profile;
-
-    @IsEnum(Provider)
-    provider: Provider;
-
-    @IsOptional()
-    SSN_ITIN?: string;
-
-    @IsOptional()
-    externalReferenceId?: string;
-
-    @IsOptional()
-    @IsString()
-    source?: "BACKOFFICE" | "USER_APP" | "API";
-
-}
+import { IsBoolean, IsDateString, IsEmail, IsEnum, IsOptional, IsString, Length, Matches, ValidateNested } from 'class-validator';
+import { AddressResponse } from "../../address";
+import { CountryId } from "../../country";
+import { regexUuidV4 } from '../../helpers/constans/regex';
+import { TypeOfDirectoryId } from '../../directory';
+import { IsPhoneNumberFiado } from '../../card/validations/IsPhoneNumberConstraint';
+import { IdentificationDocument, SexDocument } from '../../identity';
+import { Profile } from "../../directory/enums/Profile";
+import { AccountLevelEnum } from "../enums/AccountLevelEnum";
+import { Provider } from '../../provider';
+import { Type } from 'class-transformer';
+
+export class AccountCreateRequest {
+
+    @IsString()
+    @Matches(regexUuidV4,
+        {
+            message: 'directoryId must be a valid UUID v4',
+        })
+    directoryId: string;
+
+
+    @IsString()
+    @Matches(regexUuidV4,
+        {
+            message: 'directoryId must be a valid UUID v4',
+        })
+    ownerDirectoryId: string;
+
+    @IsString()
+    @Matches(regexUuidV4,
+        {
+            message: 'peopleId must be a valid UUID v4',
+        })
+    peopleId: string;
+
+    @IsEnum(AccountLevelEnum)
+    accountLevel: AccountLevelEnum;
+
+    @IsEnum(TypeOfDirectoryId)
+    typeOfDirectoryId: string;
+
+    @IsString()
+    latLastNameMaternal: string
+
+    @IsString()
+    latLastNamePaternal: string
+
+    @IsString()
+    latNames: string
+
+    @IsString()
+    countryOfBirth: string
+
+    @IsString()
+    usNames: string
+
+    @IsString()
+    usLastNames: string
+
+    @IsPhoneNumberFiado()
+    phoneNumber: string;
+
+    @IsOptional()
+    @ValidateNested()
+    @Type(() => AddressResponse)
+    address: AddressResponse;
+
+    @IsEmail()
+    email: string;
+
+    @IsDateString()
+    dob: string;
+
+    @IsBoolean()
+    isHost?: boolean;
+
+    @IsOptional()
+    documentInfo?: IdentificationDocument;
+
+    @IsOptional()
+    documentNumber?: string;
+
+    @IsOptional()
+    documentType?: string;
+
+    @IsOptional()
+    @IsEnum(SexDocument)
+    gender: SexDocument;
+
+    @IsEnum(CountryId)
+    countryId: CountryId;
+
+    @IsEnum(Profile)
+    userProfile: Profile;
+
+    @IsEnum(Provider)
+    provider: Provider;
+
+    @IsOptional()
+    SSN_ITIN?: string;
+
+    @IsOptional()
+    externalReferenceId?: string;
+
+    @IsOptional()
+    @IsString()
+    source?: "BACKOFFICE" | "USER_APP" | "API";
+
+}

package/src/account/dtos/AccountCreateResponse.ts

@@ -1,11 +1,11 @@
-import {CreateBankAccountUserStatusEnum} from "../enums/CreateBankAccountUserStatusEnum";
-
-export class AccountCreateResponse{
-    id: string;
-    externalId: string;
-    externalUserId: string;
-    externalUserStatus: CreateBankAccountUserStatusEnum;
-    directoryId:string;
-    typeOfDirectoryId:string
-    countryId:string
+import {CreateBankAccountUserStatusEnum} from "../enums/CreateBankAccountUserStatusEnum";
+
+export class AccountCreateResponse{
+    id: string;
+    externalId: string;
+    externalUserId: string;
+    externalUserStatus: CreateBankAccountUserStatusEnum;
+    directoryId:string;
+    typeOfDirectoryId:string
+    countryId:string
 }

package/src/account/dtos/AccountInfo.ts

@@ -1,44 +1,44 @@
-import {IsEnum, IsNumber, IsOptional, IsString, Matches} from "class-validator";
-import {regexUuidV4} from "../../helpers/constans/regex";
-import {AccountEntityStatusEnum} from "../enums/AccountEntityStatusEnum";
-
-export default class AccountInfo {
-    @IsString()
-    @Matches(regexUuidV4,
-        {
-            message: 'directoryId must be a valid UUID v4',
-        })
-    id: string;
-
-    @IsString()
-    @Matches(regexUuidV4,
-        {
-            message: 'directoryId must be a valid UUID v4',
-        })
-    directoryId: string;
-
-    @IsString()
-    currencyId: string;
-
-    @IsNumber()
-    currentBalance: number;
-
-    @IsNumber()
-    availableBalance: number;
-
-    @IsNumber()
-    lockedBalance: number;
-
-    @IsString()
-    accountNumber: string;
-
-    @IsString()
-    routingNumber: string;
-
-    @IsEnum(AccountEntityStatusEnum)
-    status: AccountEntityStatusEnum;
-
-    @IsOptional()
-    @IsString()
-    externalAccountId?: string;
+import {IsEnum, IsNumber, IsOptional, IsString, Matches} from "class-validator";
+import {regexUuidV4} from "../../helpers/constans/regex";
+import {AccountEntityStatusEnum} from "../enums/AccountEntityStatusEnum";
+
+export default class AccountInfo {
+    @IsString()
+    @Matches(regexUuidV4,
+        {
+            message: 'directoryId must be a valid UUID v4',
+        })
+    id: string;
+
+    @IsString()
+    @Matches(regexUuidV4,
+        {
+            message: 'directoryId must be a valid UUID v4',
+        })
+    directoryId: string;
+
+    @IsString()
+    currencyId: string;
+
+    @IsNumber()
+    currentBalance: number;
+
+    @IsNumber()
+    availableBalance: number;
+
+    @IsNumber()
+    lockedBalance: number;
+
+    @IsString()
+    accountNumber: string;
+
+    @IsString()
+    routingNumber: string;
+
+    @IsEnum(AccountEntityStatusEnum)
+    status: AccountEntityStatusEnum;
+
+    @IsOptional()
+    @IsString()
+    externalAccountId?: string;
 }

package/src/account/dtos/AccountUpdateBalanceRequest.ts

@@ -1,12 +1,12 @@
-import {UpdateBalanceOperation} from "./UpdateBalanceOperation";
-import {IsArray, IsOptional, IsString} from "class-validator";
-
-export class AccountUpdateBalanceRequest {
-    @IsArray()
-    operations: UpdateBalanceOperation[];
-
-    // PARA IDENTIFICAR LA TRANSACCION DE COLLECTOR QUE ESTA REALIZANDO LA OPERACION
-    @IsOptional()
-    @IsString()
-    executionId?: string;
+import {UpdateBalanceOperation} from "./UpdateBalanceOperation";
+import {IsArray, IsOptional, IsString} from "class-validator";
+
+export class AccountUpdateBalanceRequest {
+    @IsArray()
+    operations: UpdateBalanceOperation[];
+
+    // PARA IDENTIFICAR LA TRANSACCION DE COLLECTOR QUE ESTA REALIZANDO LA OPERACION
+    @IsOptional()
+    @IsString()
+    executionId?: string;
 }