@fiado/type-kit 3.59.0 → 3.61.0

package/_test_/unit/cognitoBackofficeConnector/dtos/CreatePoolRequest.test.ts

@@ -1,33 +1,33 @@
-import 'reflect-metadata';
-import { plainToInstance } from 'class-transformer';
-import { CreatePoolRequest } from '../../../../src/cognitoBackofficeConnector/dtos/CreatePoolRequest';
-
-describe('CreatePoolRequest', () => {
-    it('ya NO expone mfaConfig (pool MFA nativo OFF cerrado a nivel contrato — F-11 D2)', () => {
-        const instance = plainToInstance(
-            CreatePoolRequest,
-            {
-                region: 'us-east-1',
-                displayName: 'Tenant Demo',
-                mfaConfig: { requireMfa: true, mfaTypes: ['SOFTWARE_TOKEN_MFA'] },
-                passwordPolicy: {},
-                customAttributes: [],
-                appClientConfig: {},
-            },
-            { excludeExtraneousValues: true },
-        );
-
-        expect((instance as { mfaConfig?: unknown }).mfaConfig).toBeUndefined();
-    });
-
-    it('preserva los campos legítimos del request', () => {
-        const instance = plainToInstance(
-            CreatePoolRequest,
-            { region: 'us-east-1', displayName: 'Tenant Demo' },
-            { excludeExtraneousValues: true },
-        );
-
-        expect(instance.region).toBe('us-east-1');
-        expect(instance.displayName).toBe('Tenant Demo');
-    });
-});
+import 'reflect-metadata';
+import { plainToInstance } from 'class-transformer';
+import { CreatePoolRequest } from '../../../../src/cognitoBackofficeConnector/dtos/CreatePoolRequest';
+
+describe('CreatePoolRequest', () => {
+    it('ya NO expone mfaConfig (pool MFA nativo OFF cerrado a nivel contrato — F-11 D2)', () => {
+        const instance = plainToInstance(
+            CreatePoolRequest,
+            {
+                region: 'us-east-1',
+                displayName: 'Tenant Demo',
+                mfaConfig: { requireMfa: true, mfaTypes: ['SOFTWARE_TOKEN_MFA'] },
+                passwordPolicy: {},
+                customAttributes: [],
+                appClientConfig: {},
+            },
+            { excludeExtraneousValues: true },
+        );
+
+        expect((instance as { mfaConfig?: unknown }).mfaConfig).toBeUndefined();
+    });
+
+    it('preserva los campos legítimos del request', () => {
+        const instance = plainToInstance(
+            CreatePoolRequest,
+            { region: 'us-east-1', displayName: 'Tenant Demo' },
+            { excludeExtraneousValues: true },
+        );
+
+        expect(instance.region).toBe('us-east-1');
+        expect(instance.displayName).toBe('Tenant Demo');
+    });
+});

package/_test_/unit/cognitoBackofficeConnector/dtos/Introspect.test.ts

@@ -1,30 +1,30 @@
-import 'reflect-metadata';
-import { plainToInstance } from 'class-transformer';
-import { validate } from 'class-validator';
-import { IntrospectRequest } from '../../../../src/cognitoBackofficeConnector/dtos/IntrospectRequest';
-import { IntrospectResponse } from '../../../../src/cognitoBackofficeConnector/dtos/IntrospectResponse';
-import { IntrospectFailReason } from '../../../../src/cognitoBackofficeConnector/enums/IntrospectFailReason';
-
-describe('IntrospectRequest', () => {
-    it('valida happy path', async () => {
-        const dto = plainToInstance(IntrospectRequest, {
-            token: 'jwt', userPoolId: 'us-east-1_o0h1s3458', region: 'us-east-1', clientId: '1b8g4shbvbi5jhq19fuc8mi2bk',
-        });
-        expect(await validate(dto)).toEqual([]);
-    });
-    it('falla si falta userPoolId', async () => {
-        const dto = plainToInstance(IntrospectRequest, { token: 'jwt', region: 'us-east-1', clientId: 'c' });
-        expect((await validate(dto)).some(e => e.property === 'userPoolId')).toBe(true);
-    });
-});
-
-describe('IntrospectResponse', () => {
-    it('valid=true con cognitoSub', async () => {
-        const dto = plainToInstance(IntrospectResponse, { valid: true, cognitoSub: '248814c8' });
-        expect(await validate(dto)).toEqual([]);
-    });
-    it('valid=false con reason enum', async () => {
-        const dto = plainToInstance(IntrospectResponse, { valid: false, reason: IntrospectFailReason.REVOKED });
-        expect(await validate(dto)).toEqual([]);
-    });
-});
+import 'reflect-metadata';
+import { plainToInstance } from 'class-transformer';
+import { validate } from 'class-validator';
+import { IntrospectRequest } from '../../../../src/cognitoBackofficeConnector/dtos/IntrospectRequest';
+import { IntrospectResponse } from '../../../../src/cognitoBackofficeConnector/dtos/IntrospectResponse';
+import { IntrospectFailReason } from '../../../../src/cognitoBackofficeConnector/enums/IntrospectFailReason';
+
+describe('IntrospectRequest', () => {
+    it('valida happy path', async () => {
+        const dto = plainToInstance(IntrospectRequest, {
+            token: 'jwt', userPoolId: 'us-east-1_o0h1s3458', region: 'us-east-1', clientId: '1b8g4shbvbi5jhq19fuc8mi2bk',
+        });
+        expect(await validate(dto)).toEqual([]);
+    });
+    it('falla si falta userPoolId', async () => {
+        const dto = plainToInstance(IntrospectRequest, { token: 'jwt', region: 'us-east-1', clientId: 'c' });
+        expect((await validate(dto)).some(e => e.property === 'userPoolId')).toBe(true);
+    });
+});
+
+describe('IntrospectResponse', () => {
+    it('valid=true con cognitoSub', async () => {
+        const dto = plainToInstance(IntrospectResponse, { valid: true, cognitoSub: '248814c8' });
+        expect(await validate(dto)).toEqual([]);
+    });
+    it('valid=false con reason enum', async () => {
+        const dto = plainToInstance(IntrospectResponse, { valid: false, reason: IntrospectFailReason.REVOKED });
+        expect(await validate(dto)).toEqual([]);
+    });
+});

package/_test_/unit/cognitoBackofficeConnector/validators/NoTenantIdInCustomAttrs.test.ts

@@ -1,43 +1,43 @@
-import 'reflect-metadata';
-import { NoTenantIdInCustomAttrs } from '../../../../src/cognitoBackofficeConnector/validators/NoTenantIdInCustomAttrs';
-
-describe('NoTenantIdInCustomAttrs validator', () => {
-    const subject = new NoTenantIdInCustomAttrs();
-
-    test('undefined es válido (optional field)', () => {
-        expect(subject.validate(undefined, { value: undefined } as any)).toBe(true);
-    });
-
-    test('null es válido (optional field)', () => {
-        expect(subject.validate(null, { value: null } as any)).toBe(true);
-    });
-
-    test('objeto vacío {} es válido', () => {
-        expect(subject.validate({}, { value: {} } as any)).toBe(true);
-    });
-
-    test('objeto sin tenantId es válido', () => {
-        const value = { foo: 'bar', anotherKey: 'baz' };
-        expect(subject.validate(value, { value } as any)).toBe(true);
-    });
-
-    test('objeto con tenantId solo es INVÁLIDO', () => {
-        const value = { tenantId: 'X' };
-        expect(subject.validate(value, { value } as any)).toBe(false);
-    });
-
-    test('objeto mixed con tenantId presente es INVÁLIDO', () => {
-        const value = { foo: 'bar', tenantId: 'X' };
-        expect(subject.validate(value, { value } as any)).toBe(false);
-    });
-
-    test('tipo incorrecto (string) es INVÁLIDO', () => {
-        expect(subject.validate('not-an-object', { value: 'not-an-object' } as any)).toBe(false);
-    });
-
-    test('defaultMessage menciona tenant reassignment', () => {
-        const msg = subject.defaultMessage({ property: 'customAttributes' } as any);
-        expect(msg.toLowerCase()).toContain('tenant');
-        expect(msg.toLowerCase()).toContain('reassignment');
-    });
-});
+import 'reflect-metadata';
+import { NoTenantIdInCustomAttrs } from '../../../../src/cognitoBackofficeConnector/validators/NoTenantIdInCustomAttrs';
+
+describe('NoTenantIdInCustomAttrs validator', () => {
+    const subject = new NoTenantIdInCustomAttrs();
+
+    test('undefined es válido (optional field)', () => {
+        expect(subject.validate(undefined, { value: undefined } as any)).toBe(true);
+    });
+
+    test('null es válido (optional field)', () => {
+        expect(subject.validate(null, { value: null } as any)).toBe(true);
+    });
+
+    test('objeto vacío {} es válido', () => {
+        expect(subject.validate({}, { value: {} } as any)).toBe(true);
+    });
+
+    test('objeto sin tenantId es válido', () => {
+        const value = { foo: 'bar', anotherKey: 'baz' };
+        expect(subject.validate(value, { value } as any)).toBe(true);
+    });
+
+    test('objeto con tenantId solo es INVÁLIDO', () => {
+        const value = { tenantId: 'X' };
+        expect(subject.validate(value, { value } as any)).toBe(false);
+    });
+
+    test('objeto mixed con tenantId presente es INVÁLIDO', () => {
+        const value = { foo: 'bar', tenantId: 'X' };
+        expect(subject.validate(value, { value } as any)).toBe(false);
+    });
+
+    test('tipo incorrecto (string) es INVÁLIDO', () => {
+        expect(subject.validate('not-an-object', { value: 'not-an-object' } as any)).toBe(false);
+    });
+
+    test('defaultMessage menciona tenant reassignment', () => {
+        const msg = subject.defaultMessage({ property: 'customAttributes' } as any);
+        expect(msg.toLowerCase()).toContain('tenant');
+        expect(msg.toLowerCase()).toContain('reassignment');
+    });
+});

package/_test_/unit/platformRbac/auth/dtos.test.ts

@@ -1,42 +1,42 @@
-import 'reflect-metadata';
-import { plainToInstance } from 'class-transformer';
-import { validate } from 'class-validator';
-import {
-    DefineNextChallengeRequest,
-    ChallengeResultEntry,
-} from '../../../../src/platformRbac/auth/DefineNextChallengeRequest';
-import { ChallengeNameEnum } from '../../../../src/platformRbac/enums/ChallengeNameEnum';
-
-describe('DefineNextChallengeRequest', () => {
-    it('valida happy path con session vacia', async () => {
-        const dto = plainToInstance(DefineNextChallengeRequest, {
-            cognitoSub: 'abc-123',
-            userNotFound: false,
-            session: [],
-        });
-        const errors = await validate(dto);
-        expect(errors).toEqual([]);
-    });
-
-    it('valida happy path con session de un PASSWORD result', async () => {
-        const dto = plainToInstance(DefineNextChallengeRequest, {
-            cognitoSub: 'abc-123',
-            userNotFound: false,
-            session: [{ challengeName: ChallengeNameEnum.PASSWORD, challengeResult: true }],
-        });
-        const errors = await validate(dto);
-        expect(errors).toEqual([]);
-        expect(dto.session[0]).toBeInstanceOf(ChallengeResultEntry);
-    });
-
-    it('falla si cognitoSub no es string', async () => {
-        const dto = plainToInstance(DefineNextChallengeRequest, {
-            cognitoSub: 42,
-            userNotFound: false,
-            session: [],
-        });
-        const errors = await validate(dto);
-        expect(errors.length).toBeGreaterThan(0);
-        expect(errors[0].property).toBe('cognitoSub');
-    });
-});
+import 'reflect-metadata';
+import { plainToInstance } from 'class-transformer';
+import { validate } from 'class-validator';
+import {
+    DefineNextChallengeRequest,
+    ChallengeResultEntry,
+} from '../../../../src/platformRbac/auth/DefineNextChallengeRequest';
+import { ChallengeNameEnum } from '../../../../src/platformRbac/enums/ChallengeNameEnum';
+
+describe('DefineNextChallengeRequest', () => {
+    it('valida happy path con session vacia', async () => {
+        const dto = plainToInstance(DefineNextChallengeRequest, {
+            cognitoSub: 'abc-123',
+            userNotFound: false,
+            session: [],
+        });
+        const errors = await validate(dto);
+        expect(errors).toEqual([]);
+    });
+
+    it('valida happy path con session de un PASSWORD result', async () => {
+        const dto = plainToInstance(DefineNextChallengeRequest, {
+            cognitoSub: 'abc-123',
+            userNotFound: false,
+            session: [{ challengeName: ChallengeNameEnum.PASSWORD, challengeResult: true }],
+        });
+        const errors = await validate(dto);
+        expect(errors).toEqual([]);
+        expect(dto.session[0]).toBeInstanceOf(ChallengeResultEntry);
+    });
+
+    it('falla si cognitoSub no es string', async () => {
+        const dto = plainToInstance(DefineNextChallengeRequest, {
+            cognitoSub: 42,
+            userNotFound: false,
+            session: [],
+        });
+        const errors = await validate(dto);
+        expect(errors.length).toBeGreaterThan(0);
+        expect(errors[0].property).toBe('cognitoSub');
+    });
+});

package/_test_/unit/platformRbac/dtos/AuthorizeRequest.test.ts

@@ -1,30 +1,30 @@
-import 'reflect-metadata';
-import { plainToInstance } from 'class-transformer';
-import { validate } from 'class-validator';
-import { AuthorizeRequest } from '../../../../src/platformRbac/dtos/AuthorizeRequest';
-import { PermissionScope } from '../../../../src/platformRbac/enums/PermissionScope';
-
-describe('AuthorizeRequest', () => {
-    it('valida happy path con scope opcional', async () => {
-        const dto = plainToInstance(AuthorizeRequest, {
-            token: 'jwt.abc.def',
-            permission: 'tenant.user.create',
-            scope: PermissionScope.RETAILER,
-            scopeRef: 'VL-001',
-        });
-        const errors = await validate(dto);
-        expect(errors).toEqual([]);
-    });
-
-    it('falla si falta token', async () => {
-        const dto = plainToInstance(AuthorizeRequest, { permission: 'tenant.user.create' });
-        const errors = await validate(dto);
-        expect(errors.some(e => e.property === 'token')).toBe(true);
-    });
-
-    it('acepta sin scope/scopeRef (permiso sin scope)', async () => {
-        const dto = plainToInstance(AuthorizeRequest, { token: 'jwt', permission: 'catalog.read' });
-        const errors = await validate(dto);
-        expect(errors).toEqual([]);
-    });
-});
+import 'reflect-metadata';
+import { plainToInstance } from 'class-transformer';
+import { validate } from 'class-validator';
+import { AuthorizeRequest } from '../../../../src/platformRbac/dtos/AuthorizeRequest';
+import { PermissionScope } from '../../../../src/platformRbac/enums/PermissionScope';
+
+describe('AuthorizeRequest', () => {
+    it('valida happy path con scope opcional', async () => {
+        const dto = plainToInstance(AuthorizeRequest, {
+            token: 'jwt.abc.def',
+            permission: 'tenant.user.create',
+            scope: PermissionScope.RETAILER,
+            scopeRef: 'VL-001',
+        });
+        const errors = await validate(dto);
+        expect(errors).toEqual([]);
+    });
+
+    it('falla si falta token', async () => {
+        const dto = plainToInstance(AuthorizeRequest, { permission: 'tenant.user.create' });
+        const errors = await validate(dto);
+        expect(errors.some(e => e.property === 'token')).toBe(true);
+    });
+
+    it('acepta sin scope/scopeRef (permiso sin scope)', async () => {
+        const dto = plainToInstance(AuthorizeRequest, { token: 'jwt', permission: 'catalog.read' });
+        const errors = await validate(dto);
+        expect(errors).toEqual([]);
+    });
+});

package/_test_/unit/platformRbac/dtos/AuthorizeResponse.test.ts

@@ -1,25 +1,25 @@
-import 'reflect-metadata';
-import { plainToInstance } from 'class-transformer';
-import { validate } from 'class-validator';
-import { AuthorizeResponse } from '../../../../src/platformRbac/dtos/AuthorizeResponse';
-import { AuthorizeDenyReason } from '../../../../src/platformRbac/enums/AuthorizeDenyReason';
-
-describe('AuthorizeResponse', () => {
-    it('valida allow=true sin reason', async () => {
-        const dto = plainToInstance(AuthorizeResponse, { allow: true });
-        const errors = await validate(dto);
-        expect(errors).toEqual([]);
-    });
-
-    it('valida allow=false con reason enum', async () => {
-        const dto = plainToInstance(AuthorizeResponse, { allow: false, reason: AuthorizeDenyReason.NO_PERMISSION });
-        const errors = await validate(dto);
-        expect(errors).toEqual([]);
-    });
-
-    it('rechaza reason fuera del enum', async () => {
-        const dto = plainToInstance(AuthorizeResponse, { allow: false, reason: 'WHATEVER' });
-        const errors = await validate(dto);
-        expect(errors.some(e => e.property === 'reason')).toBe(true);
-    });
-});
+import 'reflect-metadata';
+import { plainToInstance } from 'class-transformer';
+import { validate } from 'class-validator';
+import { AuthorizeResponse } from '../../../../src/platformRbac/dtos/AuthorizeResponse';
+import { AuthorizeDenyReason } from '../../../../src/platformRbac/enums/AuthorizeDenyReason';
+
+describe('AuthorizeResponse', () => {
+    it('valida allow=true sin reason', async () => {
+        const dto = plainToInstance(AuthorizeResponse, { allow: true });
+        const errors = await validate(dto);
+        expect(errors).toEqual([]);
+    });
+
+    it('valida allow=false con reason enum', async () => {
+        const dto = plainToInstance(AuthorizeResponse, { allow: false, reason: AuthorizeDenyReason.NO_PERMISSION });
+        const errors = await validate(dto);
+        expect(errors).toEqual([]);
+    });
+
+    it('rechaza reason fuera del enum', async () => {
+        const dto = plainToInstance(AuthorizeResponse, { allow: false, reason: 'WHATEVER' });
+        const errors = await validate(dto);
+        expect(errors.some(e => e.property === 'reason')).toBe(true);
+    });
+});

package/_test_/unit/platformRbac/dtos/CreateTenantRequest.test.ts

@@ -1,68 +1,68 @@
-import 'reflect-metadata';
-import { plainToInstance } from 'class-transformer';
-import { validate } from 'class-validator';
-import { CreateTenantRequest } from '../../../../src/platformRbac/dtos/CreateTenantRequest';
-
-describe('CreateTenantRequest', () => {
-    const valid = {
-        tenantId: 'acme-mx',
-        displayName: 'Acme México',
-        emailDomain: 'acme.com',
-        tablePrefix: 'acme',
-        adminEmail: 'admin@acme.com',
-        adminName: 'Admin Acme',
-        region: 'us-east-1',
-        mfaRequired: true,
-        passwordMinLength: 12,
-    };
-
-    it('valida happy path (0 errores)', async () => {
-        const dto = plainToInstance(CreateTenantRequest, valid);
-        const errors = await validate(dto);
-        expect(errors).toEqual([]);
-    });
-
-    it('valida sin campos opcionales (mfaRequired / passwordMinLength)', async () => {
-        const { mfaRequired, passwordMinLength, ...sinOpcionales } = valid;
-        const dto = plainToInstance(CreateTenantRequest, sinOpcionales);
-        const errors = await validate(dto);
-        expect(errors).toEqual([]);
-    });
-
-    it('falla si adminEmail es inválido', async () => {
-        const dto = plainToInstance(CreateTenantRequest, { ...valid, adminEmail: 'no-es-email' });
-        const errors = await validate(dto);
-        expect(errors.some(e => e.property === 'adminEmail')).toBe(true);
-    });
-
-    it('falla si tenantId tiene mayúsculas', async () => {
-        const dto = plainToInstance(CreateTenantRequest, { ...valid, tenantId: 'Acme-MX' });
-        const errors = await validate(dto);
-        expect(errors.some(e => e.property === 'tenantId')).toBe(true);
-    });
-
-    it('falla si tenantId tiene caracteres inválidos (espacios / underscore)', async () => {
-        const dto = plainToInstance(CreateTenantRequest, { ...valid, tenantId: 'acme_mx 01' });
-        const errors = await validate(dto);
-        expect(errors.some(e => e.property === 'tenantId')).toBe(true);
-    });
-
-    it('falla si passwordMinLength es menor a 8', async () => {
-        const dto = plainToInstance(CreateTenantRequest, { ...valid, passwordMinLength: 6 });
-        const errors = await validate(dto);
-        expect(errors.some(e => e.property === 'passwordMinLength')).toBe(true);
-    });
-
-    it('NO expone temporaryPassword en el request (campo del response, no del body)', () => {
-        // El request NO debe llevar temporaryPassword (es solo del response, fallback out-of-band F-11).
-        // Con excludeExtraneousValues solo sobreviven las props @Expose() del DTO → el contrato lo excluye.
-        const dto = plainToInstance(
-            CreateTenantRequest,
-            { ...valid, temporaryPassword: 'Secreto123!' },
-            { excludeExtraneousValues: true },
-        );
-        expect((dto as unknown as Record<string, unknown>).temporaryPassword).toBeUndefined();
-        // sanity: una prop sí declarada en el contrato sí sobrevive
-        expect(dto.tenantId).toBe('acme-mx');
-    });
-});
+import 'reflect-metadata';
+import { plainToInstance } from 'class-transformer';
+import { validate } from 'class-validator';
+import { CreateTenantRequest } from '../../../../src/platformRbac/dtos/CreateTenantRequest';
+
+describe('CreateTenantRequest', () => {
+    const valid = {
+        tenantId: 'acme-mx',
+        displayName: 'Acme México',
+        emailDomain: 'acme.com',
+        tablePrefix: 'acme',
+        adminEmail: 'admin@acme.com',
+        adminName: 'Admin Acme',
+        region: 'us-east-1',
+        mfaRequired: true,
+        passwordMinLength: 12,
+    };
+
+    it('valida happy path (0 errores)', async () => {
+        const dto = plainToInstance(CreateTenantRequest, valid);
+        const errors = await validate(dto);
+        expect(errors).toEqual([]);
+    });
+
+    it('valida sin campos opcionales (mfaRequired / passwordMinLength)', async () => {
+        const { mfaRequired, passwordMinLength, ...sinOpcionales } = valid;
+        const dto = plainToInstance(CreateTenantRequest, sinOpcionales);
+        const errors = await validate(dto);
+        expect(errors).toEqual([]);
+    });
+
+    it('falla si adminEmail es inválido', async () => {
+        const dto = plainToInstance(CreateTenantRequest, { ...valid, adminEmail: 'no-es-email' });
+        const errors = await validate(dto);
+        expect(errors.some(e => e.property === 'adminEmail')).toBe(true);
+    });
+
+    it('falla si tenantId tiene mayúsculas', async () => {
+        const dto = plainToInstance(CreateTenantRequest, { ...valid, tenantId: 'Acme-MX' });
+        const errors = await validate(dto);
+        expect(errors.some(e => e.property === 'tenantId')).toBe(true);
+    });
+
+    it('falla si tenantId tiene caracteres inválidos (espacios / underscore)', async () => {
+        const dto = plainToInstance(CreateTenantRequest, { ...valid, tenantId: 'acme_mx 01' });
+        const errors = await validate(dto);
+        expect(errors.some(e => e.property === 'tenantId')).toBe(true);
+    });
+
+    it('falla si passwordMinLength es menor a 8', async () => {
+        const dto = plainToInstance(CreateTenantRequest, { ...valid, passwordMinLength: 6 });
+        const errors = await validate(dto);
+        expect(errors.some(e => e.property === 'passwordMinLength')).toBe(true);
+    });
+
+    it('NO expone temporaryPassword en el request (campo del response, no del body)', () => {
+        // El request NO debe llevar temporaryPassword (es solo del response, fallback out-of-band F-11).
+        // Con excludeExtraneousValues solo sobreviven las props @Expose() del DTO → el contrato lo excluye.
+        const dto = plainToInstance(
+            CreateTenantRequest,
+            { ...valid, temporaryPassword: 'Secreto123!' },
+            { excludeExtraneousValues: true },
+        );
+        expect((dto as unknown as Record<string, unknown>).temporaryPassword).toBeUndefined();
+        // sanity: una prop sí declarada en el contrato sí sobrevive
+        expect(dto.tenantId).toBe('acme-mx');
+    });
+});

package/bin/cognitoBackofficeConnector/dtos/MfaPoolConfig.d.ts

@@ -0,0 +1,7 @@
+declare const ALLOWED_MFA_TYPES: readonly ["SOFTWARE_TOKEN_MFA"];
+export type AllowedMfaType = (typeof ALLOWED_MFA_TYPES)[number];
+export declare class MfaPoolConfig {
+    requireMfa: boolean;
+    mfaTypes: AllowedMfaType[];
+}
+export {};

package/bin/cognitoBackofficeConnector/dtos/MfaPoolConfig.js

@@ -0,0 +1,36 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.MfaPoolConfig = void 0;
+const class_transformer_1 = require("class-transformer");
+const class_validator_1 = require("class-validator");
+const MfaTypesRequiresOne_1 = require("../validators/MfaTypesRequiresOne");
+// EMAIL_OTP removido (3.41.0): el cognito-backoffice-connector no provisiona
+// EmailMfaConfiguration a nivel pool (requiere infra SES que no está montada
+// y la integración con messages-lambda aún no tiene diseño). Ver TD-020 +
+// DEC-001 en cognito-backoffice-connector/docs/. Si se reintroduce, agregar
+// 'EMAIL_OTP' a este array.
+const ALLOWED_MFA_TYPES = ['SOFTWARE_TOKEN_MFA'];
+class MfaPoolConfig {
+}
+exports.MfaPoolConfig = MfaPoolConfig;
+__decorate([
+    (0, class_transformer_1.Expose)(),
+    (0, class_validator_1.IsBoolean)(),
+    __metadata("design:type", Boolean)
+], MfaPoolConfig.prototype, "requireMfa", void 0);
+__decorate([
+    (0, class_transformer_1.Expose)(),
+    (0, class_validator_1.IsArray)(),
+    (0, class_validator_1.IsIn)(ALLOWED_MFA_TYPES, { each: true }),
+    (0, class_validator_1.Validate)(MfaTypesRequiresOne_1.MfaTypesRequiresOne),
+    __metadata("design:type", Array)
+], MfaPoolConfig.prototype, "mfaTypes", void 0);

package/bin/cognitoBackofficeConnector/dtos/PoolConfigResponse.d.ts

@@ -0,0 +1,20 @@
+import { PoolKind } from '../../rbac/enums/PoolKind';
+/**
+ * Shape del `PoolConfigRow` expuesto al caller (BFF M18 / otros lambdas Fiado).
+ * Refleja la configuración de un Cognito User Pool registrado en la tabla
+ * `PoolConfigs_GT` del lambda `cognito-backoffice-connector`.
+ */
+export declare class PoolConfigResponse {
+    userPoolId: string;
+    userPoolArn: string;
+    region: string;
+    poolKind: PoolKind;
+    displayName: string;
+    appClients: Record<string, {
+        clientId: string;
+        clientName: string;
+    }>;
+    status: 'active' | 'deprecated';
+    createdAt: number;
+    updatedAt: number;
+}

package/bin/cognitoBackofficeConnector/dtos/PoolConfigResponse.js

@@ -0,0 +1,11 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.PoolConfigResponse = void 0;
+/**
+ * Shape del `PoolConfigRow` expuesto al caller (BFF M18 / otros lambdas Fiado).
+ * Refleja la configuración de un Cognito User Pool registrado en la tabla
+ * `PoolConfigs_GT` del lambda `cognito-backoffice-connector`.
+ */
+class PoolConfigResponse {
+}
+exports.PoolConfigResponse = PoolConfigResponse;

package/bin/cognitoBackofficeConnector/dtos/PoolsListResponse.d.ts

@@ -0,0 +1,4 @@
+import { PoolConfigResponse } from './PoolConfigResponse';
+export declare class PoolsListResponse {
+    pools: PoolConfigResponse[];
+}

package/bin/cognitoBackofficeConnector/dtos/PoolsListResponse.js

@@ -0,0 +1,6 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.PoolsListResponse = void 0;
+class PoolsListResponse {
+}
+exports.PoolsListResponse = PoolsListResponse;